run-command: forbid using run_command with piped output
Because run_command both spawns and wait()s for the command before returning control to the caller, any reads from the pipes we open must necessarily happen after wait() returns. This can lead to deadlock, as the child process may block on writing to us while we are blocked waiting for it to exit. Worse, it only happens when the child fills the pipe buffer, which means that the problem may come and go depending on the platform and the size of the output produced by the child. Let's detect and flag this dangerous construct so that we can catch potential bugs early in the test suite rather than having them happen in the field. Signed-off-by: Jeff King <peff@peff.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Jeff King committed
Mar 22, 2015 at 23:54 UTC
c29b3962af3df80a43fab4ead4875bd2ca275e4c
1 file changed
+6
-1
run-command.c
+6
-1
@@ -561,7 +561,12 @@ int finish_command(struct child_process *cmd)
561
562
int run_command(struct child_process *cmd)
563
{
564
- int code = start_command(cmd);
564
+ int code;
565
+
566
+ if (cmd->out < 0 || cmd->err < 0)
567
+ die("BUG: run_command with a pipe can cause deadlock");
568
+
569
+ code = start_command(cmd);
570
if (code)
571
return code;
572
return finish_command(cmd);