1/*-
2 * Copyright (c) 1986, 1988, 1991, 1993
3 * The Regents of the University of California. All rights reserved.
4 * (c) UNIX System Laboratories, Inc.
5 * All or some portions of this file are derived from material licensed
6 * to the University of California by American Telephone and Telegraph
7 * Co. or Unix System Laboratories, Inc. and are reproduced herein with
8 * the permission of UNIX System Laboratories, Inc.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 * 3. All advertising materials mentioning features or use of this software
19 * must display the following acknowledgement:
20 * This product includes software developed by the University of
21 * California, Berkeley and its contributors.
22 * 4. Neither the name of the University nor the names of its contributors
23 * may be used to endorse or promote products derived from this software
24 * without specific prior written permission.
25 *
26 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
27 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
28 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
29 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
38 * @(#)kern_shutdown.c 8.3 (Berkeley) 1/21/94
39 * $Id: kern_shutdown.c,v 1.26 1997/11/18 15:16:43 bde Exp $
40 */
41
42#include "opt_ddb.h"
43#include "opt_panic.h"
44#include "opt_show_busybufs.h"
45
46#include <sys/param.h>
47#include <sys/systm.h>
48#include <sys/buf.h>
49#include <sys/reboot.h>
50#include <sys/proc.h>
51#include <sys/malloc.h>
52#include <sys/kernel.h>
53#include <sys/mount.h>
54#include <sys/sysctl.h>
55#include <sys/conf.h>
56#include <sys/sysproto.h>
57
58#include <machine/pcb.h>
59#include <machine/clock.h>
60#include <machine/cons.h>
61#include <machine/md_var.h>
62#ifdef SMP
63#include <machine/smp.h> /* smp_active, cpuid */
64#endif
65
66#include <sys/signalvar.h>
67
68#ifndef PANIC_REBOOT_WAIT_TIME
69#define PANIC_REBOOT_WAIT_TIME 15 /* default to 15 seconds */
70#endif
71
72/*
73 * Note that stdarg.h and the ANSI style va_start macro is used for both
74 * ANSI and traditional C compilers.
75 */
76#include <machine/stdarg.h>
77
78#ifdef DDB
79#ifdef DDB_UNATTENDED
80static int debugger_on_panic = 0;
81#else
82static int debugger_on_panic = 1;
83#endif
84SYSCTL_INT(_debug, OID_AUTO, debugger_on_panic, CTLFLAG_RW,
85 &debugger_on_panic, 0, "");
86#endif
87
88#ifdef HW_WDOG
89/*
90 * If there is a hardware watchdog, point this at the function needed to
91 * hold it off.
92 * It's needed when the kernel needs to do some lengthy operations.
93 * e.g. in wd.c when dumping core.. It's most annoying to have
94 * your precious core-dump only half written because the wdog kicked in.
95 */
96watchdog_tickle_fn wdog_tickler = NULL;
97#endif /* HW_WDOG */
98
99/*
100 * Variable panicstr contains argument to first call to panic; used as flag
101 * to indicate that the kernel has already called panic.
102 */
103const char *panicstr;
104
105/*
106 * callout list for things to do a shutdown
107 */
108typedef struct shutdown_list_element {
109 struct shutdown_list_element *next;
110 bootlist_fn function;
111 void *arg;
112} *sle_p;
113
114/*
115 * there are two shutdown lists. Some things need to be shut down
116 * Earlier than others.
117 */
118static sle_p shutdown_list1;
119static sle_p shutdown_list2;
120
121static void boot __P((int)) __dead2;
122static void dumpsys __P((void));
123
124#ifndef _SYS_SYSPROTO_H_
125struct reboot_args {
126 int opt;
127};
128#endif
129/* ARGSUSED */
130
131/*
132 * The system call that results in a reboot
133 */
134int
135reboot(p, uap)
136 struct proc *p;
137 struct reboot_args *uap;
138{
139 int error;
140
141 if ((error = suser(p->p_ucred, &p->p_acflag)))
142 return (error);
143
144 boot(uap->opt);
145 return (0);
146}
147
148/*
149 * Called by events that want to shut down.. e.g <CTL><ALT><DEL> on a PC
150 */
151void
152shutdown_nice()
153{
154 /* Send a signal to init(8) and have it shutdown the world */
155 if (initproc != NULL) {
156 psignal(initproc, SIGINT);
157 } else {
158 /* No init(8) running, so simply reboot */
159 boot(RB_NOSYNC);
160 }
161 return;
162}
163static int waittime = -1;
164static struct pcb dumppcb;
165
166/*
167 * Go through the rigmarole of shutting down..
168 * this used to be in machdep.c but I'll be dammned if I could see
169 * anything machine dependant in it.
170 */
171static void
172boot(howto)
173 int howto;
174{
175 sle_p ep;
176
177#ifdef SMP
178 int c, spins;
179
180 /* The MPSPEC says that the BSP must do the shutdown */
181 if (smp_active) {
182 smp_active = 0;
183
184 spins = 100;
185
186 printf("boot() called on cpu#%d\n", cpuid);
187 while ((c = cpuid) != 0) {
188 if (spins-- < 1) {
189 printf("timeout waiting for cpu #0!\n");
190 break;
191 }
192 printf("I'm on cpu#%d, I need to be on cpu#0, sleeping..\n", c);
193 tsleep((caddr_t)&smp_active, PZERO, "cpu0wt", 10);
194 }
195 }
196#endif
197 /*
198 * Do any callouts that should be done BEFORE syncing the filesystems.
199 */
200 ep = shutdown_list1;
201 while (ep) {
202 shutdown_list1 = ep->next;
203 (*ep->function)(howto, ep->arg);
204 ep = ep->next;
205 }
206
207 /*
208 * Now sync filesystems
209 */
210 if (!cold && (howto & RB_NOSYNC) == 0 && waittime < 0) {
211 register struct buf *bp;
212 int iter, nbusy;
213
214 waittime = 0;
215 printf("\nsyncing disks... ");
216
217 sync(&proc0, NULL);
218
219 for (iter = 0; iter < 20; iter++) {
220 nbusy = 0;
221 for (bp = &buf[nbuf]; --bp >= buf; ) {
222 if ((bp->b_flags & (B_BUSY | B_INVAL)) == B_BUSY) {
223 nbusy++;
224 }
225 }
226 if (nbusy == 0)
227 break;
228 printf("%d ", nbusy);
229 DELAY(40000 * iter);
230 }
231 if (nbusy) {
232 /*
233 * Failed to sync all blocks. Indicate this and don't
234 * unmount filesystems (thus forcing an fsck on reboot).
235 */
236 printf("giving up\n");
237#ifdef SHOW_BUSYBUFS
238 nbusy = 0;
239 for (bp = &buf[nbuf]; --bp >= buf; ) {
240 if ((bp->b_flags & (B_BUSY | B_INVAL)) == B_BUSY) {
241 nbusy++;
242 printf("%d: dev:%08x, flags:%08x, blkno:%d, lblkno:%d\n", nbusy, bp->b_dev, bp->b_flags, bp->b_blkno, bp->b_lblkno);
243 }
244 }
245 DELAY(5000000); /* 5 seconds */
246#endif
247 } else {
248 printf("done\n");
249 /*
250 * Unmount filesystems
251 */
252 if (panicstr == 0)
253 vfs_unmountall();
254 }
255 DELAY(100000); /* wait for console output to finish */
256 }
257
258 /*
259 * Ok, now do things that assume all filesystem activity has
260 * been completed.
261 */
262 ep = shutdown_list2;
263 while (ep) {
264 shutdown_list2 = ep->next;
265 (*ep->function)(howto, ep->arg);
266 ep = ep->next;
267 }
268 splhigh();
269 if (howto & RB_HALT) {
270 cpu_power_down();
271 printf("\n");
272 printf("The operating system has halted.\n");
273 printf("Please press any key to reboot.\n\n");
274 switch (cngetc()) {
275 case -1: /* No console, just die */
276 cpu_halt();
277 /* NOTREACHED */
278 default:
279 break;
280 }
281 } else {
282 if (howto & RB_DUMP) {
283 if (!cold) {
284 savectx(&dumppcb);
285 dumppcb.pcb_cr3 = rcr3();
286 dumpsys();
287 }
288
289 if (PANIC_REBOOT_WAIT_TIME != 0) {
290 if (PANIC_REBOOT_WAIT_TIME != -1) {
291 int loop;
292 printf("Automatic reboot in %d seconds - press a key on the console to abort\n",
293 PANIC_REBOOT_WAIT_TIME);
294 for (loop = PANIC_REBOOT_WAIT_TIME * 10; loop > 0; --loop) {
295 DELAY(1000 * 100); /* 1/10th second */
296 /* Did user type a key? */
297 if (cncheckc() != -1)
298 break;
299 }
300 if (!loop)
301 goto die;
302 }
303 } else { /* zero time specified - reboot NOW */
304 goto die;
305 }
306 printf("--> Press a key on the console to reboot <--\n");
307 cngetc();
308 }
309 }
310die:
311 printf("Rebooting...\n");
312 DELAY(1000000); /* wait 1 sec for printf's to complete and be read */
313 /* cpu_boot(howto); */ /* doesn't do anything at the moment */
314 cpu_reset();
315 for(;;) ;
316 /* NOTREACHED */
317}
318
319/*
320 * Magic number for savecore
321 *
322 * exported (symorder) and used at least by savecore(8)
323 *
324 */
325static u_long const dumpmag = 0x8fca0101UL;
326
327static int dumpsize = 0; /* also for savecore */
328
329static int dodump = 1;
330SYSCTL_INT(_machdep, OID_AUTO, do_dump, CTLFLAG_RW, &dodump, 0, "");
331
332/* ARGSUSED */
333static void dump_conf __P((void *dummy));
334static void
335dump_conf(dummy)
336 void *dummy;
337{
338 cpu_dumpconf();
339}
340SYSINIT(dump_conf, SI_SUB_DUMP_CONF, SI_ORDER_FIRST, dump_conf, NULL)
341
342/*
343 * Doadump comes here after turning off memory management and
344 * getting on the dump stack, either when called above, or by
345 * the auto-restart code.
346 */
347static void
348dumpsys(void)
349{
350
351 if (!dodump)
352 return;
353 if (dumpdev == NODEV)
354 return;
355 if ((minor(dumpdev)&07) != 1)
356 return;
357 if (!(bdevsw[major(dumpdev)]))
358 return;
359 if (!(bdevsw[major(dumpdev)]->d_dump))
360 return;
361 dumpsize = Maxmem;
362 printf("\ndumping to dev %lx, offset %ld\n", dumpdev, dumplo);
363 printf("dump ");
364 switch ((*bdevsw[major(dumpdev)]->d_dump)(dumpdev)) {
365
366 case ENXIO:
367 printf("device bad\n");
368 break;
369
370 case EFAULT:
371 printf("device not ready\n");
372 break;
373
374 case EINVAL:
375 printf("area improper\n");
376 break;
377
378 case EIO:
379 printf("i/o error\n");
380 break;
381
382 case EINTR:
383 printf("aborted from console\n");
384 break;
385
386 default:
387 printf("succeeded\n");
388 break;
389 }
390}
391
392/*
393 * Panic is called on unresolvable fatal errors. It prints "panic: mesg",
394 * and then reboots. If we are called twice, then we avoid trying to sync
395 * the disks as this often leads to recursive panics.
396 */
397void
398panic(const char *fmt, ...)
399{
400 int bootopt;
401 va_list ap;
402
403 bootopt = RB_AUTOBOOT | RB_DUMP;
404 if (panicstr)
405 bootopt |= RB_NOSYNC;
406 else
407 panicstr = fmt;
408
409 printf("panic: ");
410 va_start(ap, fmt);
411 vprintf(fmt, ap);
412 va_end(ap);
413 printf("\n");
414#ifdef SMP
415 /* three seperate prints in case of an unmapped page and trap */
416 printf("mp_lock = %08x; ", mp_lock);
417 printf("cpuid = %d; ", cpuid);
418 printf("lapic.id = %08x\n", lapic.id);
419#endif
420
421#if defined(DDB)
422 if (debugger_on_panic)
423 Debugger ("panic");
424#endif
425 boot(bootopt);
426}
427
428/*
429 * Two routines to handle adding/deleting items on the
430 * shutdown callout lists
431 *
432 * at_shutdown():
433 * Take the arguments given and put them onto the shutdown callout list.
434 * However first make sure that it's not already there.
435 * returns 0 on success.
436 */
437int
438at_shutdown(bootlist_fn function, void *arg, int position)
439{
440 sle_p ep, *epp;
441
442 switch(position) {
443 case SHUTDOWN_PRE_SYNC:
444 epp = &shutdown_list1;
445 break;
446 case SHUTDOWN_POST_SYNC:
447 epp = &shutdown_list2;
448 break;
449 default:
450 printf("bad exit callout list specified\n");
451 return (EINVAL);
452 }
453 if (rm_at_shutdown(function, arg))
454 printf("exit callout entry already present\n");
455 ep = malloc(sizeof(*ep), M_TEMP, M_NOWAIT);
456 if (ep == NULL)
457 return (ENOMEM);
458 ep->next = *epp;
459 ep->function = function;
460 ep->arg = arg;
461 *epp = ep;
462 return (0);
463}
464
465/*
466 * Scan the exit callout lists for the given items and remove them.
467 * Returns the number of items removed.
468 */
469int
470rm_at_shutdown(bootlist_fn function, void *arg)
471{
472 sle_p *epp, ep;
473 int count;
474
475 count = 0;
476 epp = &shutdown_list1;
477 ep = *epp;
478 while (ep) {
479 if ((ep->function == function) && (ep->arg == arg)) {
480 *epp = ep->next;
481 free(ep, M_TEMP);
482 count++;
483 } else {
484 epp = &ep->next;
485 }
486 ep = *epp;
487 }
488 epp = &shutdown_list2;
489 ep = *epp;
490 while (ep) {
491 if ((ep->function == function) && (ep->arg == arg)) {
492 *epp = ep->next;
493 free(ep, M_TEMP);
494 count++;
495 } else {
496 epp = &ep->next;
497 }
498 ep = *epp;
499 }
500 return (count);
501}
502