LCOV - code coverage report
Current view: top level - src/backend/postmaster - syslogger.c (source / functions) Coverage Total Hit
Test: PostgreSQL 19beta1 Lines: 61.2 % 374 229
Test Date: 2026-06-10 16:16:35 Functions: 100.0 % 14 14
Legend: Lines:     hit not hit

            Line data    Source code
       1              : /*-------------------------------------------------------------------------
       2              :  *
       3              :  * syslogger.c
       4              :  *
       5              :  * The system logger (syslogger) appeared in Postgres 8.0. It catches all
       6              :  * stderr output from the postmaster, backends, and other subprocesses
       7              :  * by redirecting to a pipe, and writes it to a set of logfiles.
       8              :  * It's possible to have size and age limits for the logfile configured
       9              :  * in postgresql.conf. If these limits are reached or passed, the
      10              :  * current logfile is closed and a new one is created (rotated).
      11              :  * The logfiles are stored in a subdirectory (configurable in
      12              :  * postgresql.conf), using a user-selectable naming scheme.
      13              :  *
      14              :  * Author: Andreas Pflug <pgadmin@pse-consulting.de>
      15              :  *
      16              :  * Copyright (c) 2004-2026, PostgreSQL Global Development Group
      17              :  *
      18              :  *
      19              :  * IDENTIFICATION
      20              :  *    src/backend/postmaster/syslogger.c
      21              :  *
      22              :  *-------------------------------------------------------------------------
      23              :  */
      24              : #include "postgres.h"
      25              : 
      26              : #include <fcntl.h>
      27              : #include <limits.h>
      28              : #include <signal.h>
      29              : #include <time.h>
      30              : #include <unistd.h>
      31              : #include <sys/stat.h>
      32              : #include <sys/time.h>
      33              : 
      34              : #include "common/file_perm.h"
      35              : #include "lib/stringinfo.h"
      36              : #include "libpq/pqsignal.h"
      37              : #include "miscadmin.h"
      38              : #include "nodes/pg_list.h"
      39              : #include "pgstat.h"
      40              : #include "pgtime.h"
      41              : #include "port/pg_bitutils.h"
      42              : #include "postmaster/interrupt.h"
      43              : #include "postmaster/postmaster.h"
      44              : #include "postmaster/syslogger.h"
      45              : #include "storage/dsm.h"
      46              : #include "storage/fd.h"
      47              : #include "storage/ipc.h"
      48              : #include "storage/latch.h"
      49              : #include "storage/pg_shmem.h"
      50              : #include "tcop/tcopprot.h"
      51              : #include "utils/guc.h"
      52              : #include "utils/memutils.h"
      53              : #include "utils/ps_status.h"
      54              : #include "utils/wait_event.h"
      55              : 
      56              : /*
      57              :  * We read() into a temp buffer twice as big as a chunk, so that any fragment
      58              :  * left after processing can be moved down to the front and we'll still have
      59              :  * room to read a full chunk.
      60              :  */
      61              : #define READ_BUF_SIZE (2 * PIPE_CHUNK_SIZE)
      62              : 
      63              : /* Log rotation signal file path, relative to $PGDATA */
      64              : #define LOGROTATE_SIGNAL_FILE   "logrotate"
      65              : 
      66              : 
      67              : /*
      68              :  * GUC parameters.  Logging_collector cannot be changed after postmaster
      69              :  * start, but the rest can change at SIGHUP.
      70              :  */
      71              : bool        Logging_collector = false;
      72              : int         Log_RotationAge = HOURS_PER_DAY * MINS_PER_HOUR;
      73              : int         Log_RotationSize = 10 * 1024;
      74              : char       *Log_directory = NULL;
      75              : char       *Log_filename = NULL;
      76              : bool        Log_truncate_on_rotation = false;
      77              : int         Log_file_mode = S_IRUSR | S_IWUSR;
      78              : 
      79              : /*
      80              :  * Indicates to be running in the syslogger process, and that the logging
      81              :  * file descriptor(s) have been set up.
      82              :  */
      83              : bool        syslogger_setup_done = false;
      84              : 
      85              : /*
      86              :  * Private state
      87              :  */
      88              : static pg_time_t next_rotation_time;
      89              : static bool pipe_eof_seen = false;
      90              : static bool rotation_disabled = false;
      91              : static FILE *syslogFile = NULL;
      92              : static FILE *csvlogFile = NULL;
      93              : static FILE *jsonlogFile = NULL;
      94              : NON_EXEC_STATIC pg_time_t first_syslogger_file_time = 0;
      95              : static char *last_sys_file_name = NULL;
      96              : static char *last_csv_file_name = NULL;
      97              : static char *last_json_file_name = NULL;
      98              : 
      99              : /*
     100              :  * Buffers for saving partial messages from different backends.
     101              :  *
     102              :  * Keep NBUFFER_LISTS lists of these, with the entry for a given source pid
     103              :  * being in the list numbered (pid % NBUFFER_LISTS), so as to cut down on
     104              :  * the number of entries we have to examine for any one incoming message.
     105              :  * There must never be more than one entry for the same source pid.
     106              :  *
     107              :  * An inactive buffer is not removed from its list, just held for re-use.
     108              :  * An inactive buffer has pid == 0 and undefined contents of data.
     109              :  */
     110              : typedef struct
     111              : {
     112              :     int32       pid;            /* PID of source process */
     113              :     StringInfoData data;        /* accumulated data, as a StringInfo */
     114              : } save_buffer;
     115              : 
     116              : #define NBUFFER_LISTS 256
     117              : static List *buffer_lists[NBUFFER_LISTS];
     118              : 
     119              : /* These must be exported for EXEC_BACKEND case ... annoying */
     120              : #ifndef WIN32
     121              : int         syslogPipe[2] = {-1, -1};
     122              : #else
     123              : HANDLE      syslogPipe[2] = {0, 0};
     124              : #endif
     125              : 
     126              : #ifdef WIN32
     127              : static HANDLE threadHandle = 0;
     128              : static CRITICAL_SECTION sysloggerSection;
     129              : #endif
     130              : 
     131              : /*
     132              :  * Flags set by interrupt handlers for later service in the main loop.
     133              :  */
     134              : static volatile sig_atomic_t rotation_requested = false;
     135              : 
     136              : 
     137              : /* Local subroutines */
     138              : #ifdef EXEC_BACKEND
     139              : static int  syslogger_fdget(FILE *file);
     140              : static FILE *syslogger_fdopen(int fd);
     141              : #endif
     142              : static void process_pipe_input(char *logbuffer, int *bytes_in_logbuffer);
     143              : static void flush_pipe_input(char *logbuffer, int *bytes_in_logbuffer);
     144              : static FILE *logfile_open(const char *filename, const char *mode,
     145              :                           bool allow_errors);
     146              : 
     147              : #ifdef WIN32
     148              : static unsigned int __stdcall pipeThread(void *arg);
     149              : #endif
     150              : static void logfile_rotate(bool time_based_rotation, int size_rotation_for);
     151              : static bool logfile_rotate_dest(bool time_based_rotation,
     152              :                                 int size_rotation_for, pg_time_t fntime,
     153              :                                 int target_dest, char **last_file_name,
     154              :                                 FILE **logFile);
     155              : static char *logfile_getname(pg_time_t timestamp, const char *suffix);
     156              : static void set_next_rotation_time(void);
     157              : static void sigUsr1Handler(SIGNAL_ARGS);
     158              : static void update_metainfo_datafile(void);
     159              : 
     160              : typedef struct
     161              : {
     162              :     int         syslogFile;
     163              :     int         csvlogFile;
     164              :     int         jsonlogFile;
     165              : } SysloggerStartupData;
     166              : 
     167              : /*
     168              :  * Main entry point for syslogger process
     169              :  * argc/argv parameters are valid only in EXEC_BACKEND case.
     170              :  */
     171              : void
     172            1 : SysLoggerMain(const void *startup_data, size_t startup_data_len)
     173              : {
     174              : #ifndef WIN32
     175              :     char        logbuffer[READ_BUF_SIZE];
     176            1 :     int         bytes_in_logbuffer = 0;
     177              : #endif
     178              :     char       *currentLogDir;
     179              :     char       *currentLogFilename;
     180              :     int         currentLogRotationAge;
     181              :     pg_time_t   now;
     182              :     WaitEventSet *wes;
     183              : 
     184              : #ifndef EXEC_BACKEND
     185              : 
     186              :     /*
     187              :      * In !EXEC_BACKEND, syslogger is immediately ready to take over: the
     188              :      * output files were already opened by postmaster before forking.  For the
     189              :      * other case we must wait until the file descriptors have been restored,
     190              :      * below.
     191              :      */
     192            1 :     syslogger_setup_done = true;
     193              : #endif
     194              : 
     195              :     /*
     196              :      * Re-open the error output files that were opened by SysLogger_Start().
     197              :      *
     198              :      * We expect this will always succeed, which is too optimistic, but if it
     199              :      * fails there's not a lot we can do to report the problem anyway.  As
     200              :      * coded, we'll just crash on a null pointer dereference after failure...
     201              :      */
     202              : #ifdef EXEC_BACKEND
     203              :     {
     204              :         const SysloggerStartupData *slsdata = startup_data;
     205              : 
     206              :         Assert(startup_data_len == sizeof(*slsdata));
     207              :         syslogFile = syslogger_fdopen(slsdata->syslogFile);
     208              :         csvlogFile = syslogger_fdopen(slsdata->csvlogFile);
     209              :         jsonlogFile = syslogger_fdopen(slsdata->jsonlogFile);
     210              : 
     211              :         syslogger_setup_done = true;
     212              :     }
     213              : #else
     214              :     Assert(startup_data_len == 0);
     215              : #endif
     216              : 
     217              :     /*
     218              :      * Now that we're done reading the startup data, release postmaster's
     219              :      * working memory context.
     220              :      */
     221            1 :     if (PostmasterContext)
     222              :     {
     223            1 :         MemoryContextDelete(PostmasterContext);
     224            1 :         PostmasterContext = NULL;
     225              :     }
     226              : 
     227            1 :     now = MyStartTime;
     228              : 
     229            1 :     init_ps_display(NULL);
     230              : 
     231              :     /*
     232              :      * If we restarted, our stderr is already redirected into our own input
     233              :      * pipe.  This is of course pretty useless, not to mention that it
     234              :      * interferes with detecting pipe EOF.  Point stderr to /dev/null. This
     235              :      * assumes that all interesting messages generated in the syslogger will
     236              :      * come through elog.c and will be sent to write_syslogger_file.
     237              :      */
     238            1 :     if (redirection_done)
     239              :     {
     240            0 :         int         fd = open(DEVNULL, O_WRONLY, 0);
     241              : 
     242              :         /*
     243              :          * The closes might look redundant, but they are not: we want to be
     244              :          * darn sure the pipe gets closed even if the open failed.  We can
     245              :          * survive running with stderr pointing nowhere, but we can't afford
     246              :          * to have extra pipe input descriptors hanging around.
     247              :          *
     248              :          * As we're just trying to reset these to go to DEVNULL, there's not
     249              :          * much point in checking for failure from the close/dup2 calls here,
     250              :          * if they fail then presumably the file descriptors are closed and
     251              :          * any writes will go into the bitbucket anyway.
     252              :          */
     253            0 :         close(STDOUT_FILENO);
     254            0 :         close(STDERR_FILENO);
     255            0 :         if (fd != -1)
     256              :         {
     257            0 :             (void) dup2(fd, STDOUT_FILENO);
     258            0 :             (void) dup2(fd, STDERR_FILENO);
     259            0 :             close(fd);
     260              :         }
     261              :     }
     262              : 
     263              :     /*
     264              :      * Syslogger's own stderr can't be the syslogPipe, so set it back to text
     265              :      * mode if we didn't just close it. (It was set to binary in
     266              :      * SubPostmasterMain).
     267              :      */
     268              : #ifdef WIN32
     269              :     else
     270              :         _setmode(STDERR_FILENO, _O_TEXT);
     271              : #endif
     272              : 
     273              :     /*
     274              :      * Also close our copy of the write end of the pipe.  This is needed to
     275              :      * ensure we can detect pipe EOF correctly.  (But note that in the restart
     276              :      * case, the postmaster already did this.)
     277              :      */
     278              : #ifndef WIN32
     279            1 :     if (syslogPipe[1] >= 0)
     280            1 :         close(syslogPipe[1]);
     281            1 :     syslogPipe[1] = -1;
     282              : #else
     283              :     if (syslogPipe[1])
     284              :         CloseHandle(syslogPipe[1]);
     285              :     syslogPipe[1] = 0;
     286              : #endif
     287              : 
     288              :     /*
     289              :      * Properly accept or ignore signals the postmaster might send us
     290              :      *
     291              :      * Note: we ignore all termination signals, and instead exit only when all
     292              :      * upstream processes are gone, to ensure we don't miss any dying gasps of
     293              :      * broken backends...
     294              :      */
     295              : 
     296            1 :     pqsignal(SIGHUP, SignalHandlerForConfigReload); /* set flag to read config
     297              :                                                      * file */
     298            1 :     pqsignal(SIGINT, PG_SIG_IGN);
     299            1 :     pqsignal(SIGTERM, PG_SIG_IGN);
     300            1 :     pqsignal(SIGQUIT, PG_SIG_IGN);
     301            1 :     pqsignal(SIGALRM, PG_SIG_IGN);
     302            1 :     pqsignal(SIGPIPE, PG_SIG_IGN);
     303            1 :     pqsignal(SIGUSR1, sigUsr1Handler);  /* request log rotation */
     304            1 :     pqsignal(SIGUSR2, PG_SIG_IGN);
     305              : 
     306              :     /*
     307              :      * Reset some signals that are accepted by postmaster but not here
     308              :      */
     309            1 :     pqsignal(SIGCHLD, PG_SIG_DFL);
     310              : 
     311            1 :     sigprocmask(SIG_SETMASK, &UnBlockSig, NULL);
     312              : 
     313              : #ifdef WIN32
     314              :     /* Fire up separate data transfer thread */
     315              :     InitializeCriticalSection(&sysloggerSection);
     316              :     EnterCriticalSection(&sysloggerSection);
     317              : 
     318              :     threadHandle = (HANDLE) _beginthreadex(NULL, 0, pipeThread, NULL, 0, NULL);
     319              :     if (threadHandle == 0)
     320              :         elog(FATAL, "could not create syslogger data transfer thread: %m");
     321              : #endif                          /* WIN32 */
     322              : 
     323              :     /*
     324              :      * Remember active logfiles' name(s).  We recompute 'em from the reference
     325              :      * time because passing down just the pg_time_t is a lot cheaper than
     326              :      * passing a whole file path in the EXEC_BACKEND case.
     327              :      */
     328            1 :     last_sys_file_name = logfile_getname(first_syslogger_file_time, NULL);
     329            1 :     if (csvlogFile != NULL)
     330            1 :         last_csv_file_name = logfile_getname(first_syslogger_file_time, ".csv");
     331            1 :     if (jsonlogFile != NULL)
     332            1 :         last_json_file_name = logfile_getname(first_syslogger_file_time, ".json");
     333              : 
     334              :     /* remember active logfile parameters */
     335            1 :     currentLogDir = pstrdup(Log_directory);
     336            1 :     currentLogFilename = pstrdup(Log_filename);
     337            1 :     currentLogRotationAge = Log_RotationAge;
     338              :     /* set next planned rotation time */
     339            1 :     set_next_rotation_time();
     340            1 :     update_metainfo_datafile();
     341              : 
     342              :     /*
     343              :      * Reset whereToSendOutput, as the postmaster will do (but hasn't yet, at
     344              :      * the point where we forked).  This prevents duplicate output of messages
     345              :      * from syslogger itself.
     346              :      */
     347            1 :     whereToSendOutput = DestNone;
     348              : 
     349              :     /*
     350              :      * Set up a reusable WaitEventSet object we'll use to wait for our latch,
     351              :      * and (except on Windows) our socket.
     352              :      *
     353              :      * Unlike all other postmaster child processes, we'll ignore postmaster
     354              :      * death because we want to collect final log output from all backends and
     355              :      * then exit last.  We'll do that by running until we see EOF on the
     356              :      * syslog pipe, which implies that all other backends have exited
     357              :      * (including the postmaster).
     358              :      */
     359            1 :     wes = CreateWaitEventSet(NULL, 2);
     360            1 :     AddWaitEventToSet(wes, WL_LATCH_SET, PGINVALID_SOCKET, MyLatch, NULL);
     361              : #ifndef WIN32
     362            1 :     AddWaitEventToSet(wes, WL_SOCKET_READABLE, syslogPipe[0], NULL, NULL);
     363              : #endif
     364              : 
     365              :     /* main worker loop */
     366              :     for (;;)
     367           27 :     {
     368           28 :         bool        time_based_rotation = false;
     369           28 :         int         size_rotation_for = 0;
     370              :         long        cur_timeout;
     371              :         WaitEvent   event;
     372              : 
     373              : #ifndef WIN32
     374              :         int         rc;
     375              : #endif
     376              : 
     377              :         /* Clear any already-pending wakeups */
     378           28 :         ResetLatch(MyLatch);
     379              : 
     380              :         /*
     381              :          * Process any requests or signals received recently.
     382              :          */
     383           28 :         if (ConfigReloadPending)
     384              :         {
     385            0 :             ConfigReloadPending = false;
     386            0 :             ProcessConfigFile(PGC_SIGHUP);
     387              : 
     388              :             /*
     389              :              * Check if the log directory or filename pattern changed in
     390              :              * postgresql.conf. If so, force rotation to make sure we're
     391              :              * writing the logfiles in the right place.
     392              :              */
     393            0 :             if (strcmp(Log_directory, currentLogDir) != 0)
     394              :             {
     395            0 :                 pfree(currentLogDir);
     396            0 :                 currentLogDir = pstrdup(Log_directory);
     397            0 :                 rotation_requested = true;
     398              : 
     399              :                 /*
     400              :                  * Also, create new directory if not present; ignore errors
     401              :                  */
     402            0 :                 (void) MakePGDirectory(Log_directory);
     403              :             }
     404            0 :             if (strcmp(Log_filename, currentLogFilename) != 0)
     405              :             {
     406            0 :                 pfree(currentLogFilename);
     407            0 :                 currentLogFilename = pstrdup(Log_filename);
     408            0 :                 rotation_requested = true;
     409              :             }
     410              : 
     411              :             /*
     412              :              * Force a rotation if CSVLOG output was just turned on or off and
     413              :              * we need to open or close csvlogFile accordingly.
     414              :              */
     415            0 :             if (((Log_destination & LOG_DESTINATION_CSVLOG) != 0) !=
     416              :                 (csvlogFile != NULL))
     417            0 :                 rotation_requested = true;
     418              : 
     419              :             /*
     420              :              * Force a rotation if JSONLOG output was just turned on or off
     421              :              * and we need to open or close jsonlogFile accordingly.
     422              :              */
     423            0 :             if (((Log_destination & LOG_DESTINATION_JSONLOG) != 0) !=
     424              :                 (jsonlogFile != NULL))
     425            0 :                 rotation_requested = true;
     426              : 
     427              :             /*
     428              :              * If rotation time parameter changed, reset next rotation time,
     429              :              * but don't immediately force a rotation.
     430              :              */
     431            0 :             if (currentLogRotationAge != Log_RotationAge)
     432              :             {
     433            0 :                 currentLogRotationAge = Log_RotationAge;
     434            0 :                 set_next_rotation_time();
     435              :             }
     436              : 
     437              :             /*
     438              :              * If we had a rotation-disabling failure, re-enable rotation
     439              :              * attempts after SIGHUP, and force one immediately.
     440              :              */
     441            0 :             if (rotation_disabled)
     442              :             {
     443            0 :                 rotation_disabled = false;
     444            0 :                 rotation_requested = true;
     445              :             }
     446              : 
     447              :             /*
     448              :              * Force rewriting last log filename when reloading configuration.
     449              :              * Even if rotation_requested is false, log_destination may have
     450              :              * been changed and we don't want to wait the next file rotation.
     451              :              */
     452            0 :             update_metainfo_datafile();
     453              :         }
     454              : 
     455           28 :         if (Log_RotationAge > 0 && !rotation_disabled)
     456              :         {
     457              :             /* Do a logfile rotation if it's time */
     458            0 :             now = (pg_time_t) time(NULL);
     459            0 :             if (now >= next_rotation_time)
     460            0 :                 rotation_requested = time_based_rotation = true;
     461              :         }
     462              : 
     463           28 :         if (!rotation_requested && Log_RotationSize > 0 && !rotation_disabled)
     464              :         {
     465              :             /* Do a rotation if file is too big */
     466           27 :             if (ftello(syslogFile) >= Log_RotationSize * (pgoff_t) 1024)
     467              :             {
     468            0 :                 rotation_requested = true;
     469            0 :                 size_rotation_for |= LOG_DESTINATION_STDERR;
     470              :             }
     471           27 :             if (csvlogFile != NULL &&
     472           27 :                 ftello(csvlogFile) >= Log_RotationSize * (pgoff_t) 1024)
     473              :             {
     474            0 :                 rotation_requested = true;
     475            0 :                 size_rotation_for |= LOG_DESTINATION_CSVLOG;
     476              :             }
     477           27 :             if (jsonlogFile != NULL &&
     478           27 :                 ftello(jsonlogFile) >= Log_RotationSize * (pgoff_t) 1024)
     479              :             {
     480            0 :                 rotation_requested = true;
     481            0 :                 size_rotation_for |= LOG_DESTINATION_JSONLOG;
     482              :             }
     483              :         }
     484              : 
     485           28 :         if (rotation_requested)
     486              :         {
     487              :             /*
     488              :              * Force rotation when both values are zero. It means the request
     489              :              * was sent by pg_rotate_logfile() or "pg_ctl logrotate".
     490              :              */
     491            1 :             if (!time_based_rotation && size_rotation_for == 0)
     492            1 :                 size_rotation_for = LOG_DESTINATION_STDERR |
     493              :                     LOG_DESTINATION_CSVLOG |
     494              :                     LOG_DESTINATION_JSONLOG;
     495            1 :             logfile_rotate(time_based_rotation, size_rotation_for);
     496              :         }
     497              : 
     498              :         /*
     499              :          * Calculate time till next time-based rotation, so that we don't
     500              :          * sleep longer than that.  We assume the value of "now" obtained
     501              :          * above is still close enough.  Note we can't make this calculation
     502              :          * until after calling logfile_rotate(), since it will advance
     503              :          * next_rotation_time.
     504              :          *
     505              :          * Also note that we need to beware of overflow in calculation of the
     506              :          * timeout: with large settings of Log_RotationAge, next_rotation_time
     507              :          * could be more than INT_MAX msec in the future.  In that case we'll
     508              :          * wait no more than INT_MAX msec, and try again.
     509              :          */
     510           28 :         if (Log_RotationAge > 0 && !rotation_disabled)
     511            0 :         {
     512              :             pg_time_t   delay;
     513              : 
     514            0 :             delay = next_rotation_time - now;
     515            0 :             if (delay > 0)
     516              :             {
     517            0 :                 if (delay > INT_MAX / 1000)
     518            0 :                     delay = INT_MAX / 1000;
     519            0 :                 cur_timeout = delay * 1000L;    /* msec */
     520              :             }
     521              :             else
     522            0 :                 cur_timeout = 0;
     523              :         }
     524              :         else
     525           28 :             cur_timeout = -1L;
     526              : 
     527              :         /*
     528              :          * Sleep until there's something to do
     529              :          */
     530              : #ifndef WIN32
     531           28 :         rc = WaitEventSetWait(wes, cur_timeout, &event, 1,
     532              :                               WAIT_EVENT_SYSLOGGER_MAIN);
     533              : 
     534           28 :         if (rc == 1 && event.events == WL_SOCKET_READABLE)
     535              :         {
     536              :             int         bytesRead;
     537              : 
     538           27 :             bytesRead = read(syslogPipe[0],
     539              :                              logbuffer + bytes_in_logbuffer,
     540              :                              sizeof(logbuffer) - bytes_in_logbuffer);
     541           27 :             if (bytesRead < 0)
     542              :             {
     543            0 :                 if (errno != EINTR)
     544            0 :                     ereport(LOG,
     545              :                             (errcode_for_socket_access(),
     546              :                              errmsg("could not read from logger pipe: %m")));
     547              :             }
     548           27 :             else if (bytesRead > 0)
     549              :             {
     550           26 :                 bytes_in_logbuffer += bytesRead;
     551           26 :                 process_pipe_input(logbuffer, &bytes_in_logbuffer);
     552           26 :                 continue;
     553              :             }
     554              :             else
     555              :             {
     556              :                 /*
     557              :                  * Zero bytes read when select() is saying read-ready means
     558              :                  * EOF on the pipe: that is, there are no longer any processes
     559              :                  * with the pipe write end open.  Therefore, the postmaster
     560              :                  * and all backends are shut down, and we are done.
     561              :                  */
     562            1 :                 pipe_eof_seen = true;
     563              : 
     564              :                 /* if there's any data left then force it out now */
     565            1 :                 flush_pipe_input(logbuffer, &bytes_in_logbuffer);
     566              :             }
     567              :         }
     568              : #else                           /* WIN32 */
     569              : 
     570              :         /*
     571              :          * On Windows we leave it to a separate thread to transfer data and
     572              :          * detect pipe EOF.  The main thread just wakes up to handle SIGHUP
     573              :          * and rotation conditions.
     574              :          *
     575              :          * Server code isn't generally thread-safe, so we ensure that only one
     576              :          * of the threads is active at a time by entering the critical section
     577              :          * whenever we're not sleeping.
     578              :          */
     579              :         LeaveCriticalSection(&sysloggerSection);
     580              : 
     581              :         (void) WaitEventSetWait(wes, cur_timeout, &event, 1,
     582              :                                 WAIT_EVENT_SYSLOGGER_MAIN);
     583              : 
     584              :         EnterCriticalSection(&sysloggerSection);
     585              : #endif                          /* WIN32 */
     586              : 
     587            2 :         if (pipe_eof_seen)
     588              :         {
     589              :             /*
     590              :              * seeing this message on the real stderr is annoying - so we make
     591              :              * it DEBUG1 to suppress in normal use.
     592              :              */
     593            1 :             ereport(DEBUG1,
     594              :                     (errmsg_internal("logger shutting down")));
     595              : 
     596              :             /*
     597              :              * Normal exit from the syslogger is here.  Note that we
     598              :              * deliberately do not close syslogFile before exiting; this is to
     599              :              * allow for the possibility of elog messages being generated
     600              :              * inside proc_exit.  Regular exit() will take care of flushing
     601              :              * and closing stdio channels.
     602              :              */
     603            1 :             proc_exit(0);
     604              :         }
     605              :     }
     606              : }
     607              : 
     608              : /*
     609              :  * Postmaster subroutine to start a syslogger subprocess.
     610              :  */
     611              : int
     612            1 : SysLogger_Start(int child_slot)
     613              : {
     614              :     pid_t       sysloggerPid;
     615              :     char       *filename;
     616              : #ifdef EXEC_BACKEND
     617              :     SysloggerStartupData startup_data;
     618              : #endif                          /* EXEC_BACKEND */
     619              : 
     620              :     Assert(Logging_collector);
     621              : 
     622              :     /*
     623              :      * If first time through, create the pipe which will receive stderr
     624              :      * output.
     625              :      *
     626              :      * If the syslogger crashes and needs to be restarted, we continue to use
     627              :      * the same pipe (indeed must do so, since extant backends will be writing
     628              :      * into that pipe).
     629              :      *
     630              :      * This means the postmaster must continue to hold the read end of the
     631              :      * pipe open, so we can pass it down to the reincarnated syslogger. This
     632              :      * is a bit klugy but we have little choice.
     633              :      *
     634              :      * Also note that we don't bother counting the pipe FDs by calling
     635              :      * Reserve/ReleaseExternalFD.  There's no real need to account for them
     636              :      * accurately in the postmaster or syslogger process, and both ends of the
     637              :      * pipe will wind up closed in all other postmaster children.
     638              :      */
     639              : #ifndef WIN32
     640            1 :     if (syslogPipe[0] < 0)
     641              :     {
     642            1 :         if (pipe(syslogPipe) < 0)
     643            0 :             ereport(FATAL,
     644              :                     (errcode_for_socket_access(),
     645              :                      errmsg("could not create pipe for syslog: %m")));
     646              :     }
     647              : #else
     648              :     if (!syslogPipe[0])
     649              :     {
     650              :         SECURITY_ATTRIBUTES sa;
     651              : 
     652              :         memset(&sa, 0, sizeof(SECURITY_ATTRIBUTES));
     653              :         sa.nLength = sizeof(SECURITY_ATTRIBUTES);
     654              :         sa.bInheritHandle = TRUE;
     655              : 
     656              :         if (!CreatePipe(&syslogPipe[0], &syslogPipe[1], &sa, 32768))
     657              :             ereport(FATAL,
     658              :                     (errcode_for_file_access(),
     659              :                      errmsg("could not create pipe for syslog: %m")));
     660              :     }
     661              : #endif
     662              : 
     663              :     /*
     664              :      * Create log directory if not present; ignore errors
     665              :      */
     666            1 :     (void) MakePGDirectory(Log_directory);
     667              : 
     668              :     /*
     669              :      * The initial logfile is created right in the postmaster, to verify that
     670              :      * the Log_directory is writable.  We save the reference time so that the
     671              :      * syslogger child process can recompute this file name.
     672              :      *
     673              :      * It might look a bit strange to re-do this during a syslogger restart,
     674              :      * but we must do so since the postmaster closed syslogFile after the
     675              :      * previous fork (and remembering that old file wouldn't be right anyway).
     676              :      * Note we always append here, we won't overwrite any existing file.  This
     677              :      * is consistent with the normal rules, because by definition this is not
     678              :      * a time-based rotation.
     679              :      */
     680            1 :     first_syslogger_file_time = time(NULL);
     681              : 
     682            1 :     filename = logfile_getname(first_syslogger_file_time, NULL);
     683              : 
     684            1 :     syslogFile = logfile_open(filename, "a", false);
     685              : 
     686            1 :     pfree(filename);
     687              : 
     688              :     /*
     689              :      * Likewise for the initial CSV log file, if that's enabled.  (Note that
     690              :      * we open syslogFile even when only CSV output is nominally enabled,
     691              :      * since some code paths will write to syslogFile anyway.)
     692              :      */
     693            1 :     if (Log_destination & LOG_DESTINATION_CSVLOG)
     694              :     {
     695            1 :         filename = logfile_getname(first_syslogger_file_time, ".csv");
     696              : 
     697            1 :         csvlogFile = logfile_open(filename, "a", false);
     698              : 
     699            1 :         pfree(filename);
     700              :     }
     701              : 
     702              :     /*
     703              :      * Likewise for the initial JSON log file, if that's enabled.  (Note that
     704              :      * we open syslogFile even when only JSON output is nominally enabled,
     705              :      * since some code paths will write to syslogFile anyway.)
     706              :      */
     707            1 :     if (Log_destination & LOG_DESTINATION_JSONLOG)
     708              :     {
     709            1 :         filename = logfile_getname(first_syslogger_file_time, ".json");
     710              : 
     711            1 :         jsonlogFile = logfile_open(filename, "a", false);
     712              : 
     713            1 :         pfree(filename);
     714              :     }
     715              : 
     716              : #ifdef EXEC_BACKEND
     717              :     startup_data.syslogFile = syslogger_fdget(syslogFile);
     718              :     startup_data.csvlogFile = syslogger_fdget(csvlogFile);
     719              :     startup_data.jsonlogFile = syslogger_fdget(jsonlogFile);
     720              :     sysloggerPid = postmaster_child_launch(B_LOGGER, child_slot,
     721              :                                            &startup_data, sizeof(startup_data), NULL);
     722              : #else
     723            1 :     sysloggerPid = postmaster_child_launch(B_LOGGER, child_slot,
     724              :                                            NULL, 0, NULL);
     725              : #endif                          /* EXEC_BACKEND */
     726              : 
     727            1 :     if (sysloggerPid == -1)
     728              :     {
     729            0 :         ereport(LOG,
     730              :                 (errmsg("could not fork system logger: %m")));
     731            0 :         return 0;
     732              :     }
     733              : 
     734              :     /* success, in postmaster */
     735              : 
     736              :     /* now we redirect stderr, if not done already */
     737            1 :     if (!redirection_done)
     738              :     {
     739              : #ifdef WIN32
     740              :         int         fd;
     741              : #endif
     742              : 
     743              :         /*
     744              :          * Leave a breadcrumb trail when redirecting, in case the user forgets
     745              :          * that redirection is active and looks only at the original stderr
     746              :          * target file.
     747              :          */
     748            1 :         ereport(LOG,
     749              :                 (errmsg("redirecting log output to logging collector process"),
     750              :                  errhint("Future log output will appear in directory \"%s\".",
     751              :                          Log_directory)));
     752              : 
     753              : #ifndef WIN32
     754            1 :         fflush(stdout);
     755            1 :         if (dup2(syslogPipe[1], STDOUT_FILENO) < 0)
     756            0 :             ereport(FATAL,
     757              :                     (errcode_for_file_access(),
     758              :                      errmsg("could not redirect stdout: %m")));
     759            1 :         fflush(stderr);
     760            1 :         if (dup2(syslogPipe[1], STDERR_FILENO) < 0)
     761            0 :             ereport(FATAL,
     762              :                     (errcode_for_file_access(),
     763              :                      errmsg("could not redirect stderr: %m")));
     764              :         /* Now we are done with the write end of the pipe. */
     765            1 :         close(syslogPipe[1]);
     766            1 :         syslogPipe[1] = -1;
     767              : #else
     768              : 
     769              :         /*
     770              :          * open the pipe in binary mode and make sure stderr is binary after
     771              :          * it's been dup'ed into, to avoid disturbing the pipe chunking
     772              :          * protocol.
     773              :          */
     774              :         fflush(stderr);
     775              :         fd = _open_osfhandle((intptr_t) syslogPipe[1],
     776              :                              _O_APPEND | _O_BINARY);
     777              :         if (dup2(fd, STDERR_FILENO) < 0)
     778              :             ereport(FATAL,
     779              :                     (errcode_for_file_access(),
     780              :                      errmsg("could not redirect stderr: %m")));
     781              :         close(fd);
     782              :         _setmode(STDERR_FILENO, _O_BINARY);
     783              : 
     784              :         /*
     785              :          * Now we are done with the write end of the pipe.  CloseHandle() must
     786              :          * not be called because the preceding close() closes the underlying
     787              :          * handle.
     788              :          */
     789              :         syslogPipe[1] = 0;
     790              : #endif
     791            1 :         redirection_done = true;
     792              :     }
     793              : 
     794              :     /* postmaster will never write the file(s); close 'em */
     795            1 :     fclose(syslogFile);
     796            1 :     syslogFile = NULL;
     797            1 :     if (csvlogFile != NULL)
     798              :     {
     799            1 :         fclose(csvlogFile);
     800            1 :         csvlogFile = NULL;
     801              :     }
     802            1 :     if (jsonlogFile != NULL)
     803              :     {
     804            1 :         fclose(jsonlogFile);
     805            1 :         jsonlogFile = NULL;
     806              :     }
     807            1 :     return (int) sysloggerPid;
     808              : }
     809              : 
     810              : 
     811              : #ifdef EXEC_BACKEND
     812              : 
     813              : /*
     814              :  * syslogger_fdget() -
     815              :  *
     816              :  * Utility wrapper to grab the file descriptor of an opened error output
     817              :  * file.  Used when building the command to fork the logging collector.
     818              :  */
     819              : static int
     820              : syslogger_fdget(FILE *file)
     821              : {
     822              : #ifndef WIN32
     823              :     if (file != NULL)
     824              :         return fileno(file);
     825              :     else
     826              :         return -1;
     827              : #else
     828              :     if (file != NULL)
     829              :         return (int) _get_osfhandle(_fileno(file));
     830              :     else
     831              :         return 0;
     832              : #endif                          /* WIN32 */
     833              : }
     834              : 
     835              : /*
     836              :  * syslogger_fdopen() -
     837              :  *
     838              :  * Utility wrapper to re-open an error output file, using the given file
     839              :  * descriptor.  Used when parsing arguments in a forked logging collector.
     840              :  */
     841              : static FILE *
     842              : syslogger_fdopen(int fd)
     843              : {
     844              :     FILE       *file = NULL;
     845              : 
     846              : #ifndef WIN32
     847              :     if (fd != -1)
     848              :     {
     849              :         file = fdopen(fd, "a");
     850              :         setvbuf(file, NULL, PG_IOLBF, 0);
     851              :     }
     852              : #else                           /* WIN32 */
     853              :     if (fd != 0)
     854              :     {
     855              :         fd = _open_osfhandle(fd, _O_APPEND | _O_TEXT);
     856              :         if (fd > 0)
     857              :         {
     858              :             file = fdopen(fd, "a");
     859              :             setvbuf(file, NULL, PG_IOLBF, 0);
     860              :         }
     861              :     }
     862              : #endif                          /* WIN32 */
     863              : 
     864              :     return file;
     865              : }
     866              : #endif                          /* EXEC_BACKEND */
     867              : 
     868              : 
     869              : /* --------------------------------
     870              :  *      pipe protocol handling
     871              :  * --------------------------------
     872              :  */
     873              : 
     874              : /*
     875              :  * Process data received through the syslogger pipe.
     876              :  *
     877              :  * This routine interprets the log pipe protocol which sends log messages as
     878              :  * (hopefully atomic) chunks - such chunks are detected and reassembled here.
     879              :  *
     880              :  * The protocol has a header that starts with two nul bytes, then has a 16 bit
     881              :  * length, the pid of the sending process, and a flag to indicate if it is
     882              :  * the last chunk in a message. Incomplete chunks are saved until we read some
     883              :  * more, and non-final chunks are accumulated until we get the final chunk.
     884              :  *
     885              :  * All of this is to avoid 2 problems:
     886              :  * . partial messages being written to logfiles (messes rotation), and
     887              :  * . messages from different backends being interleaved (messages garbled).
     888              :  *
     889              :  * Any non-protocol messages are written out directly. These should only come
     890              :  * from non-PostgreSQL sources, however (e.g. third party libraries writing to
     891              :  * stderr).
     892              :  *
     893              :  * logbuffer is the data input buffer, and *bytes_in_logbuffer is the number
     894              :  * of bytes present.  On exit, any not-yet-eaten data is left-justified in
     895              :  * logbuffer, and *bytes_in_logbuffer is updated.
     896              :  */
     897              : static void
     898           26 : process_pipe_input(char *logbuffer, int *bytes_in_logbuffer)
     899              : {
     900           26 :     char       *cursor = logbuffer;
     901           26 :     int         count = *bytes_in_logbuffer;
     902           26 :     int         dest = LOG_DESTINATION_STDERR;
     903              : 
     904              :     /* While we have enough for a header, process data... */
     905           86 :     while (count >= (int) (offsetof(PipeProtoHeader, data) + 1))
     906              :     {
     907              :         PipeProtoHeader p;
     908              :         int         chunklen;
     909              :         uint8       dest_flags;
     910              : 
     911              :         /* Do we have a valid header? */
     912           60 :         memcpy(&p, cursor, offsetof(PipeProtoHeader, data));
     913           60 :         dest_flags = p.flags & (PIPE_PROTO_DEST_STDERR |
     914              :                                 PIPE_PROTO_DEST_CSVLOG |
     915              :                                 PIPE_PROTO_DEST_JSONLOG);
     916           60 :         if (p.nuls[0] == '\0' && p.nuls[1] == '\0' &&
     917           60 :             p.len > 0 && p.len <= PIPE_MAX_PAYLOAD &&
     918           60 :             p.pid != 0 &&
     919           60 :             pg_number_of_ones[dest_flags] == 1)
     920           60 :         {
     921              :             List       *buffer_list;
     922              :             ListCell   *cell;
     923           60 :             save_buffer *existing_slot = NULL,
     924           60 :                        *free_slot = NULL;
     925              :             StringInfo  str;
     926              : 
     927           60 :             chunklen = PIPE_HEADER_SIZE + p.len;
     928              : 
     929              :             /* Fall out of loop if we don't have the whole chunk yet */
     930           60 :             if (count < chunklen)
     931            0 :                 break;
     932              : 
     933           60 :             if ((p.flags & PIPE_PROTO_DEST_STDERR) != 0)
     934           20 :                 dest = LOG_DESTINATION_STDERR;
     935           40 :             else if ((p.flags & PIPE_PROTO_DEST_CSVLOG) != 0)
     936           20 :                 dest = LOG_DESTINATION_CSVLOG;
     937           20 :             else if ((p.flags & PIPE_PROTO_DEST_JSONLOG) != 0)
     938           20 :                 dest = LOG_DESTINATION_JSONLOG;
     939              :             else
     940              :             {
     941              :                 /* this should never happen as of the header validation */
     942              :                 Assert(false);
     943              :             }
     944              : 
     945              :             /* Locate any existing buffer for this source pid */
     946           60 :             buffer_list = buffer_lists[p.pid % NBUFFER_LISTS];
     947           60 :             foreach(cell, buffer_list)
     948              :             {
     949            0 :                 save_buffer *buf = (save_buffer *) lfirst(cell);
     950              : 
     951            0 :                 if (buf->pid == p.pid)
     952              :                 {
     953            0 :                     existing_slot = buf;
     954            0 :                     break;
     955              :                 }
     956            0 :                 if (buf->pid == 0 && free_slot == NULL)
     957            0 :                     free_slot = buf;
     958              :             }
     959              : 
     960           60 :             if ((p.flags & PIPE_PROTO_IS_LAST) == 0)
     961              :             {
     962              :                 /*
     963              :                  * Save a complete non-final chunk in a per-pid buffer
     964              :                  */
     965            0 :                 if (existing_slot != NULL)
     966              :                 {
     967              :                     /* Add chunk to data from preceding chunks */
     968            0 :                     str = &(existing_slot->data);
     969            0 :                     appendBinaryStringInfo(str,
     970            0 :                                            cursor + PIPE_HEADER_SIZE,
     971            0 :                                            p.len);
     972              :                 }
     973              :                 else
     974              :                 {
     975              :                     /* First chunk of message, save in a new buffer */
     976            0 :                     if (free_slot == NULL)
     977              :                     {
     978              :                         /*
     979              :                          * Need a free slot, but there isn't one in the list,
     980              :                          * so create a new one and extend the list with it.
     981              :                          */
     982            0 :                         free_slot = palloc_object(save_buffer);
     983            0 :                         buffer_list = lappend(buffer_list, free_slot);
     984            0 :                         buffer_lists[p.pid % NBUFFER_LISTS] = buffer_list;
     985              :                     }
     986            0 :                     free_slot->pid = p.pid;
     987            0 :                     str = &(free_slot->data);
     988            0 :                     initStringInfo(str);
     989            0 :                     appendBinaryStringInfo(str,
     990            0 :                                            cursor + PIPE_HEADER_SIZE,
     991            0 :                                            p.len);
     992              :                 }
     993              :             }
     994              :             else
     995              :             {
     996              :                 /*
     997              :                  * Final chunk --- add it to anything saved for that pid, and
     998              :                  * either way write the whole thing out.
     999              :                  */
    1000           60 :                 if (existing_slot != NULL)
    1001              :                 {
    1002            0 :                     str = &(existing_slot->data);
    1003            0 :                     appendBinaryStringInfo(str,
    1004            0 :                                            cursor + PIPE_HEADER_SIZE,
    1005            0 :                                            p.len);
    1006            0 :                     write_syslogger_file(str->data, str->len, dest);
    1007              :                     /* Mark the buffer unused, and reclaim string storage */
    1008            0 :                     existing_slot->pid = 0;
    1009            0 :                     pfree(str->data);
    1010              :                 }
    1011              :                 else
    1012              :                 {
    1013              :                     /* The whole message was one chunk, evidently. */
    1014           60 :                     write_syslogger_file(cursor + PIPE_HEADER_SIZE, p.len,
    1015              :                                          dest);
    1016              :                 }
    1017              :             }
    1018              : 
    1019              :             /* Finished processing this chunk */
    1020           60 :             cursor += chunklen;
    1021           60 :             count -= chunklen;
    1022              :         }
    1023              :         else
    1024              :         {
    1025              :             /* Process non-protocol data */
    1026              : 
    1027              :             /*
    1028              :              * Look for the start of a protocol header.  If found, dump data
    1029              :              * up to there and repeat the loop.  Otherwise, dump it all and
    1030              :              * fall out of the loop.  (Note: we want to dump it all if at all
    1031              :              * possible, so as to avoid dividing non-protocol messages across
    1032              :              * logfiles.  We expect that in many scenarios, a non-protocol
    1033              :              * message will arrive all in one read(), and we want to respect
    1034              :              * the read() boundary if possible.)
    1035              :              */
    1036            0 :             for (chunklen = 1; chunklen < count; chunklen++)
    1037              :             {
    1038            0 :                 if (cursor[chunklen] == '\0')
    1039            0 :                     break;
    1040              :             }
    1041              :             /* fall back on the stderr log as the destination */
    1042            0 :             write_syslogger_file(cursor, chunklen, LOG_DESTINATION_STDERR);
    1043            0 :             cursor += chunklen;
    1044            0 :             count -= chunklen;
    1045              :         }
    1046              :     }
    1047              : 
    1048              :     /* We don't have a full chunk, so left-align what remains in the buffer */
    1049           26 :     if (count > 0 && cursor != logbuffer)
    1050            0 :         memmove(logbuffer, cursor, count);
    1051           26 :     *bytes_in_logbuffer = count;
    1052           26 : }
    1053              : 
    1054              : /*
    1055              :  * Force out any buffered data
    1056              :  *
    1057              :  * This is currently used only at syslogger shutdown, but could perhaps be
    1058              :  * useful at other times, so it is careful to leave things in a clean state.
    1059              :  */
    1060              : static void
    1061            1 : flush_pipe_input(char *logbuffer, int *bytes_in_logbuffer)
    1062              : {
    1063              :     int         i;
    1064              : 
    1065              :     /* Dump any incomplete protocol messages */
    1066          257 :     for (i = 0; i < NBUFFER_LISTS; i++)
    1067              :     {
    1068          256 :         List       *list = buffer_lists[i];
    1069              :         ListCell   *cell;
    1070              : 
    1071          256 :         foreach(cell, list)
    1072              :         {
    1073            0 :             save_buffer *buf = (save_buffer *) lfirst(cell);
    1074              : 
    1075            0 :             if (buf->pid != 0)
    1076              :             {
    1077            0 :                 StringInfo  str = &(buf->data);
    1078              : 
    1079            0 :                 write_syslogger_file(str->data, str->len,
    1080              :                                      LOG_DESTINATION_STDERR);
    1081              :                 /* Mark the buffer unused, and reclaim string storage */
    1082            0 :                 buf->pid = 0;
    1083            0 :                 pfree(str->data);
    1084              :             }
    1085              :         }
    1086              :     }
    1087              : 
    1088              :     /*
    1089              :      * Force out any remaining pipe data as-is; we don't bother trying to
    1090              :      * remove any protocol headers that may exist in it.
    1091              :      */
    1092            1 :     if (*bytes_in_logbuffer > 0)
    1093            0 :         write_syslogger_file(logbuffer, *bytes_in_logbuffer,
    1094              :                              LOG_DESTINATION_STDERR);
    1095            1 :     *bytes_in_logbuffer = 0;
    1096            1 : }
    1097              : 
    1098              : 
    1099              : /* --------------------------------
    1100              :  *      logfile routines
    1101              :  * --------------------------------
    1102              :  */
    1103              : 
    1104              : /*
    1105              :  * Write text to the currently open logfile
    1106              :  *
    1107              :  * This is exported so that elog.c can call it when MyBackendType is B_LOGGER.
    1108              :  * This allows the syslogger process to record elog messages of its own,
    1109              :  * even though its stderr does not point at the syslog pipe.
    1110              :  */
    1111              : void
    1112           60 : write_syslogger_file(const char *buffer, int count, int destination)
    1113              : {
    1114              :     int         rc;
    1115              :     FILE       *logfile;
    1116              : 
    1117              :     /*
    1118              :      * If we're told to write to a structured log file, but it's not open,
    1119              :      * dump the data to syslogFile (which is always open) instead.  This can
    1120              :      * happen if structured output is enabled after postmaster start and we've
    1121              :      * been unable to open logFile.  There are also race conditions during a
    1122              :      * parameter change whereby backends might send us structured output
    1123              :      * before we open the logFile or after we close it.  Writing formatted
    1124              :      * output to the regular log file isn't great, but it beats dropping log
    1125              :      * output on the floor.
    1126              :      *
    1127              :      * Think not to improve this by trying to open logFile on-the-fly.  Any
    1128              :      * failure in that would lead to recursion.
    1129              :      */
    1130           60 :     if ((destination & LOG_DESTINATION_CSVLOG) && csvlogFile != NULL)
    1131           20 :         logfile = csvlogFile;
    1132           40 :     else if ((destination & LOG_DESTINATION_JSONLOG) && jsonlogFile != NULL)
    1133           20 :         logfile = jsonlogFile;
    1134              :     else
    1135           20 :         logfile = syslogFile;
    1136              : 
    1137           60 :     rc = fwrite(buffer, 1, count, logfile);
    1138              : 
    1139              :     /*
    1140              :      * Try to report any failure.  We mustn't use ereport because it would
    1141              :      * just recurse right back here, but write_stderr is OK: it will write
    1142              :      * either to the postmaster's original stderr, or to /dev/null, but never
    1143              :      * to our input pipe which would result in a different sort of looping.
    1144              :      */
    1145           60 :     if (rc != count)
    1146            0 :         write_stderr("could not write to log file: %m\n");
    1147           60 : }
    1148              : 
    1149              : #ifdef WIN32
    1150              : 
    1151              : /*
    1152              :  * Worker thread to transfer data from the pipe to the current logfile.
    1153              :  *
    1154              :  * We need this because on Windows, WaitForMultipleObjects does not work on
    1155              :  * unnamed pipes: it always reports "signaled", so the blocking ReadFile won't
    1156              :  * allow for SIGHUP; and select is for sockets only.
    1157              :  */
    1158              : static unsigned int __stdcall
    1159              : pipeThread(void *arg)
    1160              : {
    1161              :     char        logbuffer[READ_BUF_SIZE];
    1162              :     int         bytes_in_logbuffer = 0;
    1163              : 
    1164              :     for (;;)
    1165              :     {
    1166              :         DWORD       bytesRead;
    1167              :         BOOL        result;
    1168              : 
    1169              :         result = ReadFile(syslogPipe[0],
    1170              :                           logbuffer + bytes_in_logbuffer,
    1171              :                           sizeof(logbuffer) - bytes_in_logbuffer,
    1172              :                           &bytesRead, 0);
    1173              : 
    1174              :         /*
    1175              :          * Enter critical section before doing anything that might touch
    1176              :          * global state shared by the main thread. Anything that uses
    1177              :          * palloc()/pfree() in particular are not safe outside the critical
    1178              :          * section.
    1179              :          */
    1180              :         EnterCriticalSection(&sysloggerSection);
    1181              :         if (!result)
    1182              :         {
    1183              :             DWORD       error = GetLastError();
    1184              : 
    1185              :             if (error == ERROR_HANDLE_EOF ||
    1186              :                 error == ERROR_BROKEN_PIPE)
    1187              :                 break;
    1188              :             _dosmaperr(error);
    1189              :             ereport(LOG,
    1190              :                     (errcode_for_file_access(),
    1191              :                      errmsg("could not read from logger pipe: %m")));
    1192              :         }
    1193              :         else if (bytesRead > 0)
    1194              :         {
    1195              :             bytes_in_logbuffer += bytesRead;
    1196              :             process_pipe_input(logbuffer, &bytes_in_logbuffer);
    1197              :         }
    1198              : 
    1199              :         /*
    1200              :          * If we've filled the current logfile, nudge the main thread to do a
    1201              :          * log rotation.
    1202              :          */
    1203              :         if (Log_RotationSize > 0)
    1204              :         {
    1205              :             if (ftello(syslogFile) >= Log_RotationSize * (pgoff_t) 1024 ||
    1206              :                 (csvlogFile != NULL &&
    1207              :                  ftello(csvlogFile) >= Log_RotationSize * (pgoff_t) 1024) ||
    1208              :                 (jsonlogFile != NULL &&
    1209              :                  ftello(jsonlogFile) >= Log_RotationSize * (pgoff_t) 1024))
    1210              :                 SetLatch(MyLatch);
    1211              :         }
    1212              :         LeaveCriticalSection(&sysloggerSection);
    1213              :     }
    1214              : 
    1215              :     /* We exit the above loop only upon detecting pipe EOF */
    1216              :     pipe_eof_seen = true;
    1217              : 
    1218              :     /* if there's any data left then force it out now */
    1219              :     flush_pipe_input(logbuffer, &bytes_in_logbuffer);
    1220              : 
    1221              :     /* set the latch to waken the main thread, which will quit */
    1222              :     SetLatch(MyLatch);
    1223              : 
    1224              :     LeaveCriticalSection(&sysloggerSection);
    1225              :     _endthread();
    1226              :     return 0;
    1227              : }
    1228              : #endif                          /* WIN32 */
    1229              : 
    1230              : /*
    1231              :  * Open a new logfile with proper permissions and buffering options.
    1232              :  *
    1233              :  * If allow_errors is true, we just log any open failure and return NULL
    1234              :  * (with errno still correct for the fopen failure).
    1235              :  * Otherwise, errors are treated as fatal.
    1236              :  */
    1237              : static FILE *
    1238            6 : logfile_open(const char *filename, const char *mode, bool allow_errors)
    1239              : {
    1240              :     FILE       *fh;
    1241              :     mode_t      oumask;
    1242              : 
    1243              :     /*
    1244              :      * Note we do not let Log_file_mode disable IWUSR, since we certainly want
    1245              :      * to be able to write the files ourselves.
    1246              :      */
    1247            6 :     oumask = umask((mode_t) ((~(Log_file_mode | S_IWUSR)) & (S_IRWXU | S_IRWXG | S_IRWXO)));
    1248            6 :     fh = fopen(filename, mode);
    1249            6 :     umask(oumask);
    1250              : 
    1251            6 :     if (fh)
    1252              :     {
    1253            6 :         setvbuf(fh, NULL, PG_IOLBF, 0);
    1254              : 
    1255              : #ifdef WIN32
    1256              :         /* use CRLF line endings on Windows */
    1257              :         _setmode(_fileno(fh), _O_TEXT);
    1258              : #endif
    1259              :     }
    1260              :     else
    1261              :     {
    1262            0 :         int         save_errno = errno;
    1263              : 
    1264            0 :         ereport(allow_errors ? LOG : FATAL,
    1265              :                 (errcode_for_file_access(),
    1266              :                  errmsg("could not open log file \"%s\": %m",
    1267              :                         filename)));
    1268            0 :         errno = save_errno;
    1269              :     }
    1270              : 
    1271            6 :     return fh;
    1272              : }
    1273              : 
    1274              : /*
    1275              :  * Do logfile rotation for a single destination, as specified by target_dest.
    1276              :  * The information stored in *last_file_name and *logFile is updated on a
    1277              :  * successful file rotation.
    1278              :  *
    1279              :  * Returns false if the rotation has been stopped, or true to move on to
    1280              :  * the processing of other formats.
    1281              :  */
    1282              : static bool
    1283            3 : logfile_rotate_dest(bool time_based_rotation, int size_rotation_for,
    1284              :                     pg_time_t fntime, int target_dest,
    1285              :                     char **last_file_name, FILE **logFile)
    1286              : {
    1287            3 :     char       *logFileExt = NULL;
    1288              :     char       *filename;
    1289              :     FILE       *fh;
    1290              : 
    1291              :     /*
    1292              :      * If the target destination was just turned off, close the previous file
    1293              :      * and unregister its data.  This cannot happen for stderr as syslogFile
    1294              :      * is assumed to be always opened even if stderr is disabled in
    1295              :      * log_destination.
    1296              :      */
    1297            3 :     if ((Log_destination & target_dest) == 0 &&
    1298              :         target_dest != LOG_DESTINATION_STDERR)
    1299              :     {
    1300            0 :         if (*logFile != NULL)
    1301            0 :             fclose(*logFile);
    1302            0 :         *logFile = NULL;
    1303            0 :         if (*last_file_name != NULL)
    1304            0 :             pfree(*last_file_name);
    1305            0 :         *last_file_name = NULL;
    1306            0 :         return true;
    1307              :     }
    1308              : 
    1309              :     /*
    1310              :      * Leave if it is not time for a rotation or if the target destination has
    1311              :      * no need to do a rotation based on the size of its file.
    1312              :      */
    1313            3 :     if (!time_based_rotation && (size_rotation_for & target_dest) == 0)
    1314            0 :         return true;
    1315              : 
    1316              :     /* file extension depends on the destination type */
    1317            3 :     if (target_dest == LOG_DESTINATION_STDERR)
    1318            1 :         logFileExt = NULL;
    1319            2 :     else if (target_dest == LOG_DESTINATION_CSVLOG)
    1320            1 :         logFileExt = ".csv";
    1321            1 :     else if (target_dest == LOG_DESTINATION_JSONLOG)
    1322            1 :         logFileExt = ".json";
    1323              :     else
    1324              :     {
    1325              :         /* cannot happen */
    1326              :         Assert(false);
    1327              :     }
    1328              : 
    1329              :     /* build the new file name */
    1330            3 :     filename = logfile_getname(fntime, logFileExt);
    1331              : 
    1332              :     /*
    1333              :      * Decide whether to overwrite or append.  We can overwrite if (a)
    1334              :      * Log_truncate_on_rotation is set, (b) the rotation was triggered by
    1335              :      * elapsed time and not something else, and (c) the computed file name is
    1336              :      * different from what we were previously logging into.
    1337              :      */
    1338            3 :     if (Log_truncate_on_rotation && time_based_rotation &&
    1339            0 :         *last_file_name != NULL &&
    1340            0 :         strcmp(filename, *last_file_name) != 0)
    1341            0 :         fh = logfile_open(filename, "w", true);
    1342              :     else
    1343            3 :         fh = logfile_open(filename, "a", true);
    1344              : 
    1345            3 :     if (!fh)
    1346              :     {
    1347              :         /*
    1348              :          * ENFILE/EMFILE are not too surprising on a busy system; just keep
    1349              :          * using the old file till we manage to get a new one.  Otherwise,
    1350              :          * assume something's wrong with Log_directory and stop trying to
    1351              :          * create files.
    1352              :          */
    1353            0 :         if (errno != ENFILE && errno != EMFILE)
    1354              :         {
    1355            0 :             ereport(LOG,
    1356              :                     (errmsg("disabling automatic rotation (use SIGHUP to re-enable)")));
    1357            0 :             rotation_disabled = true;
    1358              :         }
    1359              : 
    1360            0 :         if (filename)
    1361            0 :             pfree(filename);
    1362            0 :         return false;
    1363              :     }
    1364              : 
    1365              :     /* fill in the new information */
    1366            3 :     if (*logFile != NULL)
    1367            3 :         fclose(*logFile);
    1368            3 :     *logFile = fh;
    1369              : 
    1370              :     /* instead of pfree'ing filename, remember it for next time */
    1371            3 :     if (*last_file_name != NULL)
    1372            3 :         pfree(*last_file_name);
    1373            3 :     *last_file_name = filename;
    1374              : 
    1375            3 :     return true;
    1376              : }
    1377              : 
    1378              : /*
    1379              :  * perform logfile rotation
    1380              :  */
    1381              : static void
    1382            1 : logfile_rotate(bool time_based_rotation, int size_rotation_for)
    1383              : {
    1384              :     pg_time_t   fntime;
    1385              : 
    1386            1 :     rotation_requested = false;
    1387              : 
    1388              :     /*
    1389              :      * When doing a time-based rotation, invent the new logfile name based on
    1390              :      * the planned rotation time, not current time, to avoid "slippage" in the
    1391              :      * file name when we don't do the rotation immediately.
    1392              :      */
    1393            1 :     if (time_based_rotation)
    1394            0 :         fntime = next_rotation_time;
    1395              :     else
    1396            1 :         fntime = time(NULL);
    1397              : 
    1398              :     /* file rotation for stderr */
    1399            1 :     if (!logfile_rotate_dest(time_based_rotation, size_rotation_for, fntime,
    1400              :                              LOG_DESTINATION_STDERR, &last_sys_file_name,
    1401              :                              &syslogFile))
    1402            0 :         return;
    1403              : 
    1404              :     /* file rotation for csvlog */
    1405            1 :     if (!logfile_rotate_dest(time_based_rotation, size_rotation_for, fntime,
    1406              :                              LOG_DESTINATION_CSVLOG, &last_csv_file_name,
    1407              :                              &csvlogFile))
    1408            0 :         return;
    1409              : 
    1410              :     /* file rotation for jsonlog */
    1411            1 :     if (!logfile_rotate_dest(time_based_rotation, size_rotation_for, fntime,
    1412              :                              LOG_DESTINATION_JSONLOG, &last_json_file_name,
    1413              :                              &jsonlogFile))
    1414            0 :         return;
    1415              : 
    1416            1 :     update_metainfo_datafile();
    1417              : 
    1418            1 :     set_next_rotation_time();
    1419              : }
    1420              : 
    1421              : 
    1422              : /*
    1423              :  * construct logfile name using timestamp information
    1424              :  *
    1425              :  * If suffix isn't NULL, append it to the name, replacing any ".log"
    1426              :  * that may be in the pattern.
    1427              :  *
    1428              :  * Result is palloc'd.
    1429              :  */
    1430              : static char *
    1431            9 : logfile_getname(pg_time_t timestamp, const char *suffix)
    1432              : {
    1433              :     char       *filename;
    1434              :     int         len;
    1435              : 
    1436            9 :     filename = palloc(MAXPGPATH);
    1437              : 
    1438            9 :     snprintf(filename, MAXPGPATH, "%s/", Log_directory);
    1439              : 
    1440            9 :     len = strlen(filename);
    1441              : 
    1442              :     /* treat Log_filename as a strftime pattern */
    1443            9 :     pg_strftime(filename + len, MAXPGPATH - len, Log_filename,
    1444            9 :                 pg_localtime(&timestamp, log_timezone));
    1445              : 
    1446            9 :     if (suffix != NULL)
    1447              :     {
    1448            6 :         len = strlen(filename);
    1449            6 :         if (len > 4 && (strcmp(filename + (len - 4), ".log") == 0))
    1450            6 :             len -= 4;
    1451            6 :         strlcpy(filename + len, suffix, MAXPGPATH - len);
    1452              :     }
    1453              : 
    1454            9 :     return filename;
    1455              : }
    1456              : 
    1457              : /*
    1458              :  * Determine the next planned rotation time, and store in next_rotation_time.
    1459              :  */
    1460              : static void
    1461            2 : set_next_rotation_time(void)
    1462              : {
    1463              :     pg_time_t   now;
    1464              :     struct pg_tm *tm;
    1465              :     int         rotinterval;
    1466              : 
    1467              :     /* nothing to do if time-based rotation is disabled */
    1468            2 :     if (Log_RotationAge <= 0)
    1469            2 :         return;
    1470              : 
    1471              :     /*
    1472              :      * The requirements here are to choose the next time > now that is a
    1473              :      * "multiple" of the log rotation interval.  "Multiple" can be interpreted
    1474              :      * fairly loosely.  In this version we align to log_timezone rather than
    1475              :      * GMT.
    1476              :      */
    1477            0 :     rotinterval = Log_RotationAge * SECS_PER_MINUTE;    /* convert to seconds */
    1478            0 :     now = (pg_time_t) time(NULL);
    1479            0 :     tm = pg_localtime(&now, log_timezone);
    1480            0 :     now += tm->tm_gmtoff;
    1481            0 :     now -= now % rotinterval;
    1482            0 :     now += rotinterval;
    1483            0 :     now -= tm->tm_gmtoff;
    1484            0 :     next_rotation_time = now;
    1485              : }
    1486              : 
    1487              : /*
    1488              :  * Store the name of the file(s) where the log collector, when enabled, writes
    1489              :  * log messages.  Useful for finding the name(s) of the current log file(s)
    1490              :  * when there is time-based logfile rotation.  Filenames are stored in a
    1491              :  * temporary file and which is renamed into the final destination for
    1492              :  * atomicity.  The file is opened with the same permissions as what gets
    1493              :  * created in the data directory and has proper buffering options.
    1494              :  */
    1495              : static void
    1496            2 : update_metainfo_datafile(void)
    1497              : {
    1498              :     FILE       *fh;
    1499              :     mode_t      oumask;
    1500              : 
    1501            2 :     if (!(Log_destination & LOG_DESTINATION_STDERR) &&
    1502            0 :         !(Log_destination & LOG_DESTINATION_CSVLOG) &&
    1503            0 :         !(Log_destination & LOG_DESTINATION_JSONLOG))
    1504              :     {
    1505            0 :         if (unlink(LOG_METAINFO_DATAFILE) < 0 && errno != ENOENT)
    1506            0 :             ereport(LOG,
    1507              :                     (errcode_for_file_access(),
    1508              :                      errmsg("could not remove file \"%s\": %m",
    1509              :                             LOG_METAINFO_DATAFILE)));
    1510            0 :         return;
    1511              :     }
    1512              : 
    1513              :     /* use the same permissions as the data directory for the new file */
    1514            2 :     oumask = umask(pg_mode_mask);
    1515            2 :     fh = fopen(LOG_METAINFO_DATAFILE_TMP, "w");
    1516            2 :     umask(oumask);
    1517              : 
    1518            2 :     if (fh)
    1519              :     {
    1520            2 :         setvbuf(fh, NULL, PG_IOLBF, 0);
    1521              : 
    1522              : #ifdef WIN32
    1523              :         /* use CRLF line endings on Windows */
    1524              :         _setmode(_fileno(fh), _O_TEXT);
    1525              : #endif
    1526              :     }
    1527              :     else
    1528              :     {
    1529            0 :         ereport(LOG,
    1530              :                 (errcode_for_file_access(),
    1531              :                  errmsg("could not open file \"%s\": %m",
    1532              :                         LOG_METAINFO_DATAFILE_TMP)));
    1533            0 :         return;
    1534              :     }
    1535              : 
    1536            2 :     if (last_sys_file_name && (Log_destination & LOG_DESTINATION_STDERR))
    1537              :     {
    1538            2 :         if (fprintf(fh, "stderr %s\n", last_sys_file_name) < 0)
    1539              :         {
    1540            0 :             ereport(LOG,
    1541              :                     (errcode_for_file_access(),
    1542              :                      errmsg("could not write file \"%s\": %m",
    1543              :                             LOG_METAINFO_DATAFILE_TMP)));
    1544            0 :             fclose(fh);
    1545            0 :             return;
    1546              :         }
    1547              :     }
    1548              : 
    1549            2 :     if (last_csv_file_name && (Log_destination & LOG_DESTINATION_CSVLOG))
    1550              :     {
    1551            2 :         if (fprintf(fh, "csvlog %s\n", last_csv_file_name) < 0)
    1552              :         {
    1553            0 :             ereport(LOG,
    1554              :                     (errcode_for_file_access(),
    1555              :                      errmsg("could not write file \"%s\": %m",
    1556              :                             LOG_METAINFO_DATAFILE_TMP)));
    1557            0 :             fclose(fh);
    1558            0 :             return;
    1559              :         }
    1560              :     }
    1561              : 
    1562            2 :     if (last_json_file_name && (Log_destination & LOG_DESTINATION_JSONLOG))
    1563              :     {
    1564            2 :         if (fprintf(fh, "jsonlog %s\n", last_json_file_name) < 0)
    1565              :         {
    1566            0 :             ereport(LOG,
    1567              :                     (errcode_for_file_access(),
    1568              :                      errmsg("could not write file \"%s\": %m",
    1569              :                             LOG_METAINFO_DATAFILE_TMP)));
    1570            0 :             fclose(fh);
    1571            0 :             return;
    1572              :         }
    1573              :     }
    1574            2 :     fclose(fh);
    1575              : 
    1576            2 :     if (rename(LOG_METAINFO_DATAFILE_TMP, LOG_METAINFO_DATAFILE) != 0)
    1577            0 :         ereport(LOG,
    1578              :                 (errcode_for_file_access(),
    1579              :                  errmsg("could not rename file \"%s\" to \"%s\": %m",
    1580              :                         LOG_METAINFO_DATAFILE_TMP, LOG_METAINFO_DATAFILE)));
    1581              : }
    1582              : 
    1583              : /* --------------------------------
    1584              :  *      signal handler routines
    1585              :  * --------------------------------
    1586              :  */
    1587              : 
    1588              : /*
    1589              :  * Check to see if a log rotation request has arrived.  Should be
    1590              :  * called by postmaster after receiving SIGUSR1.
    1591              :  */
    1592              : bool
    1593            2 : CheckLogrotateSignal(void)
    1594              : {
    1595              :     struct stat stat_buf;
    1596              : 
    1597            2 :     if (stat(LOGROTATE_SIGNAL_FILE, &stat_buf) == 0)
    1598            1 :         return true;
    1599              : 
    1600            1 :     return false;
    1601              : }
    1602              : 
    1603              : /*
    1604              :  * Remove the file signaling a log rotation request.
    1605              :  */
    1606              : void
    1607         1001 : RemoveLogrotateSignalFiles(void)
    1608              : {
    1609         1001 :     unlink(LOGROTATE_SIGNAL_FILE);
    1610         1001 : }
    1611              : 
    1612              : /* SIGUSR1: set flag to rotate logfile */
    1613              : static void
    1614            1 : sigUsr1Handler(SIGNAL_ARGS)
    1615              : {
    1616            1 :     rotation_requested = true;
    1617            1 :     SetLatch(MyLatch);
    1618            1 : }
        

Generated by: LCOV version 2.0-1