/* GIO - GLib Input, Output and Streaming Library
 * 
 * Copyright (C) 2006-2007 Red Hat, Inc.
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General
 * Public License along with this library; if not, see <http://www.gnu.org/licenses/>.
 *
 * Author: Alexander Larsson <alexl@redhat.com>
 */

#include "config.h"
#include "glib.h"
#include <gioerror.h>
#include "glib-private.h"
#include "gcancellable.h"
#include "glibintl.h"

#include <string.h>
#include <errno.h>


/**
 * SECTION:gcancellable
 * @short_description: Thread-safe Operation Cancellation Stack
 * @include: gio/gio.h
 *
 * GCancellable is a thread-safe operation cancellation stack used 
 * throughout GIO to allow for cancellation of synchronous and
 * asynchronous operations.
 */

enum {
  CANCELLED,
  LAST_SIGNAL
};

struct _GCancellablePrivate
{
  guint cancelled : 1;
  guint cancelled_running : 1;
  guint cancelled_running_waiting : 1;

  union {
    GThread *one;
    GThread **several;
  } critical_threads;
  guint n_critical_threads;

  guint fd_refcount;
  GWakeup *wakeup;
};

static guint signals[LAST_SIGNAL] = { 0 };

G_DEFINE_TYPE_WITH_PRIVATE (GCancellable, g_cancellable, G_TYPE_OBJECT)

static GPrivate current_cancellable;
static GMutex cancellable_mutex;
static GCond cancellable_cond;

static void
g_cancellable_finalize (GObject *object)
{
  GCancellable *cancellable = G_CANCELLABLE (object);

  if (cancellable->priv->wakeup)
    GLIB_PRIVATE_CALL (g_wakeup_free) (cancellable->priv->wakeup);

  G_OBJECT_CLASS (g_cancellable_parent_class)->finalize (object);
}

static void
g_cancellable_class_init (GCancellableClass *klass)
{
  GObjectClass *gobject_class = G_OBJECT_CLASS (klass);

  gobject_class->finalize = g_cancellable_finalize;

  /**
   * GCancellable::cancelled:
   * @cancellable: a #GCancellable.
   * 
   * Emitted when the operation has been cancelled.
   * 
   * Can be used by implementations of cancellable operations. If the
   * operation is cancelled from another thread, the signal will be
   * emitted in the thread that cancelled the operation, not the
   * thread that is running the operation.
   *
   * Note that disconnecting from this signal (or any signal) in a
   * multi-threaded program is prone to race conditions. For instance
   * it is possible that a signal handler may be invoked even after
   * a call to g_signal_handler_disconnect() for that handler has
   * already returned.
   * 
   * There is also a problem when cancellation happens right before
   * connecting to the signal. If this happens the signal will
   * unexpectedly not be emitted, and checking before connecting to
   * the signal leaves a race condition where this is still happening.
   *
   * In order to make it safe and easy to connect handlers there
   * are two helper functions: g_cancellable_connect() and
   * g_cancellable_disconnect() which protect against problems
   * like this.
   *
   * An example of how to us this:
   * |[<!-- language="C" -->
   *     // Make sure we don't do unnecessary work if already cancelled
   *     if (g_cancellable_set_error_if_cancelled (cancellable, error))
   *       return;
   *
   *     // Set up all the data needed to be able to handle cancellation
   *     // of the operation
   *     my_data = my_data_new (...);
   *
   *     id = 0;
   *     if (cancellable)
   *       id = g_cancellable_connect (cancellable,
   *     			      G_CALLBACK (cancelled_handler)
   *     			      data, NULL);
   *
   *     // cancellable operation here...
   *
   *     g_cancellable_disconnect (cancellable, id);
   *
   *     // cancelled_handler is never called after this, it is now safe
   *     // to free the data
   *     my_data_free (my_data);  
   * ]|
   *
   * Note that the cancelled signal is emitted in the thread that
   * the user cancelled from, which may be the main thread. So, the
   * cancellable signal should not do something that can block.
   */
  signals[CANCELLED] =
    g_signal_new (I_("cancelled"),
		  G_TYPE_FROM_CLASS (gobject_class),
		  G_SIGNAL_RUN_LAST,
		  G_STRUCT_OFFSET (GCancellableClass, cancelled),
		  NULL, NULL,
		  g_cclosure_marshal_VOID__VOID,
		  G_TYPE_NONE, 0);
  
}

static void
g_cancellable_init (GCancellable *cancellable)
{
  cancellable->priv = g_cancellable_get_instance_private (cancellable);
}

/**
 * g_cancellable_new:
 * 
 * Creates a new #GCancellable object.
 *
 * Applications that want to start one or more operations
 * that should be cancellable should create a #GCancellable
 * and pass it to the operations.
 *
 * One #GCancellable can be used in multiple consecutive
 * operations or in multiple concurrent operations.
 *  
 * Returns: a #GCancellable.
 **/
GCancellable *
g_cancellable_new (void)
{
  return g_object_new (G_TYPE_CANCELLABLE, NULL);
}

/**
 * g_cancellable_push_current:
 * @cancellable: a #GCancellable object
 *
 * Pushes @cancellable onto the cancellable stack. The current
 * cancellable can then be received using g_cancellable_get_current().
 *
 * This is useful when implementing cancellable operations in
 * code that does not allow you to pass down the cancellable object.
 *
 * This is typically called automatically by e.g. #GFile operations,
 * so you rarely have to call this yourself.
 **/
void
g_cancellable_push_current (GCancellable *cancellable)
{
  GSList *l;

  g_return_if_fail (cancellable != NULL);

  l = g_private_get (&current_cancellable);
  l = g_slist_prepend (l, cancellable);
  g_private_set (&current_cancellable, l);
}

/**
 * g_cancellable_pop_current:
 * @cancellable: a #GCancellable object
 *
 * Pops @cancellable off the cancellable stack (verifying that @cancellable
 * is on the top of the stack).
 **/
void
g_cancellable_pop_current (GCancellable *cancellable)
{
  GSList *l;

  l = g_private_get (&current_cancellable);

  g_return_if_fail (l != NULL);
  g_return_if_fail (l->data == cancellable);

  l = g_slist_delete_link (l, l);
  g_private_set (&current_cancellable, l);
}

/**
 * g_cancellable_get_current:
 *
 * Gets the top cancellable from the stack.
 *
 * Returns: (nullable) (transfer none): a #GCancellable from the top
 * of the stack, or %NULL if the stack is empty.
 **/
GCancellable *
g_cancellable_get_current  (void)
{
  GSList *l;

  l = g_private_get (&current_cancellable);
  if (l == NULL)
    return NULL;

  return G_CANCELLABLE (l->data);
}

/**
 * g_cancellable_reset:
 * @cancellable: a #GCancellable object.
 * 
 * Resets @cancellable to its uncancelled state.
 *
 * If cancellable is currently in use by any cancellable operation
 * then the behavior of this function is undefined.
 *
 * Note that it is generally not a good idea to reuse an existing
 * cancellable for more operations after it has been cancelled once,
 * as this function might tempt you to do. The recommended practice
 * is to drop the reference to a cancellable after cancelling it,
 * and let it die with the outstanding async operations. You should
 * create a fresh cancellable for further async operations.
 **/
void 
g_cancellable_reset (GCancellable *cancellable)
{
  GCancellablePrivate *priv;

  g_return_if_fail (G_IS_CANCELLABLE (cancellable));

  g_mutex_lock (&cancellable_mutex);

  priv = cancellable->priv;

  while (priv->cancelled_running)
    {
      priv->cancelled_running_waiting = TRUE;
      g_cond_wait (&cancellable_cond, &cancellable_mutex);
    }

  if (priv->cancelled)
    {
      if (priv->wakeup)
        GLIB_PRIVATE_CALL (g_wakeup_acknowledge) (priv->wakeup);

      priv->cancelled = FALSE;
    }

  g_mutex_unlock (&cancellable_mutex);
}

/**
 * g_cancellable_is_cancelled:
 * @cancellable: (allow-none): a #GCancellable or %NULL
 *
 * Checks if a cancellable job has been cancelled.
 *
 * Returns: %TRUE if @cancellable is cancelled,
 * FALSE if called with %NULL or if item is not cancelled.
 **/
gboolean
g_cancellable_is_cancelled (GCancellable *cancellable)
{
  return cancellable != NULL && cancellable->priv->cancelled;
}

/**
 * g_cancellable_set_error_if_cancelled:
 * @cancellable: (allow-none): a #GCancellable or %NULL
 * @error: #GError to append error state to
 *
 * If the @cancellable is cancelled, sets the error to notify
 * that the operation was cancelled.
 *
 * Returns: %TRUE if @cancellable was cancelled, %FALSE if it was not
 */
gboolean
g_cancellable_set_error_if_cancelled (GCancellable  *cancellable,
                                      GError       **error)
{
  if (g_cancellable_is_cancelled (cancellable))
    {
      g_set_error_literal (error,
                           G_IO_ERROR,
                           G_IO_ERROR_CANCELLED,
                           _("Operation was cancelled"));
      return TRUE;
    }

  return FALSE;
}

/**
 * g_cancellable_get_fd:
 * @cancellable: a #GCancellable.
 * 
 * Gets the file descriptor for a cancellable job. This can be used to
 * implement cancellable operations on Unix systems. The returned fd will
 * turn readable when @cancellable is cancelled.
 *
 * You are not supposed to read from the fd yourself, just check for
 * readable status. Reading to unset the readable status is done
 * with g_cancellable_reset().
 * 
 * After a successful return from this function, you should use 
 * g_cancellable_release_fd() to free up resources allocated for 
 * the returned file descriptor.
 *
 * See also g_cancellable_make_pollfd().
 *
 * Returns: A valid file descriptor. %-1 if the file descriptor 
 * is not supported, or on errors. 
 **/
int
g_cancellable_get_fd (GCancellable *cancellable)
{
  GPollFD pollfd;

  if (cancellable == NULL)
	  return -1;

#ifdef G_OS_WIN32
  pollfd.fd = -1;
#else
  g_cancellable_make_pollfd (cancellable, &pollfd);
#endif

  return pollfd.fd;
}

/**
 * g_cancellable_make_pollfd:
 * @cancellable: (allow-none): a #GCancellable or %NULL
 * @pollfd: a pointer to a #GPollFD
 * 
 * Creates a #GPollFD corresponding to @cancellable; this can be passed
 * to g_poll() and used to poll for cancellation. This is useful both
 * for unix systems without a native poll and for portability to
 * windows.
 *
 * When this function returns %TRUE, you should use 
 * g_cancellable_release_fd() to free up resources allocated for the 
 * @pollfd. After a %FALSE return, do not call g_cancellable_release_fd().
 *
 * If this function returns %FALSE, either no @cancellable was given or
 * resource limits prevent this function from allocating the necessary 
 * structures for polling. (On Linux, you will likely have reached 
 * the maximum number of file descriptors.) The suggested way to handle
 * these cases is to ignore the @cancellable.
 *
 * You are not supposed to read from the fd yourself, just check for
 * readable status. Reading to unset the readable status is done
 * with g_cancellable_reset().
 *
 * Returns: %TRUE if @pollfd was successfully initialized, %FALSE on 
 *          failure to prepare the cancellable.
 * 
 * Since: 2.22
 **/
gboolean
g_cancellable_make_pollfd (GCancellable *cancellable, GPollFD *pollfd)
{
  g_return_val_if_fail (pollfd != NULL, FALSE);
  if (cancellable == NULL)
    return FALSE;
  g_return_val_if_fail (G_IS_CANCELLABLE (cancellable), FALSE);

  g_mutex_lock (&cancellable_mutex);

  cancellable->priv->fd_refcount++;

  if (cancellable->priv->wakeup == NULL)
    {
      cancellable->priv->wakeup = GLIB_PRIVATE_CALL (g_wakeup_new) ();

      if (cancellable->priv->cancelled)
        GLIB_PRIVATE_CALL (g_wakeup_signal) (cancellable->priv->wakeup);
    }

  GLIB_PRIVATE_CALL (g_wakeup_get_pollfd) (cancellable->priv->wakeup, pollfd);

  g_mutex_unlock (&cancellable_mutex);

  return TRUE;
}

/**
 * g_cancellable_release_fd:
 * @cancellable: a #GCancellable
 *
 * Releases a resources previously allocated by g_cancellable_get_fd()
 * or g_cancellable_make_pollfd().
 *
 * For compatibility reasons with older releases, calling this function 
 * is not strictly required, the resources will be automatically freed
 * when the @cancellable is finalized. However, the @cancellable will
 * block scarce file descriptors until it is finalized if this function
 * is not called. This can cause the application to run out of file 
 * descriptors when many #GCancellables are used at the same time.
 * 
 * Since: 2.22
 **/
void
g_cancellable_release_fd (GCancellable *cancellable)
{
  GCancellablePrivate *priv;

  if (cancellable == NULL)
    return;

  g_return_if_fail (G_IS_CANCELLABLE (cancellable));
  g_return_if_fail (cancellable->priv->fd_refcount > 0);

  priv = cancellable->priv;

  g_mutex_lock (&cancellable_mutex);

  priv->fd_refcount--;
  if (priv->fd_refcount == 0)
    {
      GLIB_PRIVATE_CALL (g_wakeup_free) (priv->wakeup);
      priv->wakeup = NULL;
    }

  g_mutex_unlock (&cancellable_mutex);
}

gint
ready_time_to_timeout (gint64 ready_time)
{
  gint timeout;

  if (ready_time > 0)
    {
      gint64 now = g_get_monotonic_time ();

      if (now < ready_time)
        timeout = (ready_time - now + 999) / G_TIME_SPAN_MILLISECOND;
      else
        timeout = 0;
    }
  else if (ready_time < 0)
    timeout = -1;
  else
    timeout = 0;

  return timeout;
}

/**
 * g_cancellable_poll_simple:
 * @cancellable: (nullable): a #GCancellable object
 * @pollfd: a single #GPollFD record to poll
 * @ready_time: the monotonic time past which to return
 * @error: a pointer to a %NULL #GError, or %NULL
 *
 * Waits on @pollfd until the requested condition is met, until the
 * @ready_time is reached, or until @cancellable is cancelled.
 *
 * If @cancellable is cancelled or if polling returns an error then
 * @error will be set and %FALSE will be returned.  EINTR is handled
 * internally by retrying the poll.  Other errors, including
 * cancellation, are generally reported in the %G_IO_ERROR domain.
 *
 * If the condition requested by @pollfd becomes ready then the revents
 * field of @pollfd will be updated accordingly and %TRUE will be
 * returned.
 *
 * If @ready_time was reached and the @pollfd was not ready then
 * %G_IO_ERROR_TIMED_OUT will be returned.
 *
 * If @ready_time is in the past (including a value of 0) then the call
 * will return immediately.  Checking of cancellation and the @pollfd
 * will still occur in the normal way -- it just won't block.  A
 * negative @ready_time means that there is no timeout.
 *
 * @cancellable can be %NULL, in which case cancellation is not checked
 * for.
 *
 * See g_cancellable_poll_full() for a more powerful version of this
 * call, if you need it.
 *
 * Returns: %TRUE if the requested condition was met, or %FALSE on error
 *   or cancellation
 *
 * Since: 2.44
 **/
gint
g_cancellable_poll_simple (GCancellable  *cancellable,
                           GPollFD       *pollfd,
                           gint64         ready_time,
                           GError       **error)
{
  GPollFD fds[2];
  guint nfds;
  gint result;

  if (g_cancellable_set_error_if_cancelled (cancellable, error))
    return FALSE;

  fds[0] = *pollfd;
  nfds = 1;

  nfds += g_cancellable_make_pollfd (cancellable, &fds[1]);
  fds[1].revents = 0; /* we check this below */

again:
  result = g_poll (fds, nfds, ready_time_to_timeout (ready_time));

  if (result == -1)
    {
      gint saved_errno = errno;

      if (saved_errno == EINTR)
        goto again;

      g_set_error_literal (error, G_IO_ERROR,
                           g_io_error_from_errno (saved_errno),
                           g_strerror (saved_errno));

      goto out;
    }

  if (result == 0)
    {
      g_assert (ready_time >= 0);
      g_set_error_literal (error, G_IO_ERROR,
                           G_IO_ERROR_TIMED_OUT,
                           _("Operation timed out"));
      result = -1;
      goto out;
    }

  if (result && fds[1].revents)
    {
      g_set_error_literal (error,
                           G_IO_ERROR,
                           G_IO_ERROR_CANCELLED,
                           _("Operation was cancelled"));
      result = -1;
      goto out;
    }

  pollfd->revents = fds[0].revents;

out:
  g_cancellable_release_fd (cancellable);

  return result != -1;
}

/**
 * g_cancellable_poll_full:
 * @cancellable: (nullable): a #GCancellable object
 * @pollfds: an array of #GPollFD records to poll
 * @nfds: the length of @pollfds
 * @ready_time: the monotonic time past which to return
 * @error: a pointer to a %NULL #GError, or %NULL
 *
 * Waits on @pollfds until at least one of the requested conditions is
 * met, until the @ready_time is reached, or until @cancellable is
 * cancelled.
 *
 * If @cancellable is cancelled or if polling returns an error then
 * @error will be set and -1 will be returned.  EINTR is returned as
 * %G_FILE_ERROR_INTR (as there is no equivalent error code in GIO).  In
 * general, this function will return error codes from #GFileError,
 * except in case of cancellation in which case %G_IO_ERROR_CANCELLED is
 * used.
 *
 * Otherwise, the number of ready @pollfds is returned.  Their revents
 * fields will be updated accordingly.  If @ready_time was reached then
 * the result may be zero.
 *
 * If @ready_time is in the past (including a value of 0) then the call
 * will return immediately.  Checking of cancellation and the @pollfds
 * will still occur in the normal way -- it just won't block.  A
 * negative @ready_time means that there is no timeout.
 *
 * @cancellable can be %NULL, in which case cancellation is not checked
 * for.
 *
 * g_cancellable_poll_simple() will be easier to use for most cases.
 *
 * Returns: the number of @pollfds that are ready, or -1 on error
 *
 * Since: 2.44
 **/
gint
g_cancellable_poll_full (GCancellable  *cancellable,
                         GPollFD       *pollfds,
                         guint          nfds,
                         gint64         ready_time,
                         GError       **error)
{
  GPollFD *all_pollfds;
  gint all_nfds;
  gint result;

  if (g_cancellable_set_error_if_cancelled (cancellable, error))
    return FALSE;

  if (cancellable)
    {
      /* not that we ever expect this to happen... */
      if (nfds >= 1024)
        all_pollfds = g_new (GPollFD, nfds + 1);
      else
        all_pollfds = g_newa (GPollFD, nfds + 1);

      g_cancellable_make_pollfd (cancellable, &all_pollfds[0]);
      memcpy (all_pollfds + 1, pollfds, nfds * sizeof (GPollFD));
      all_nfds = nfds + 1;
    }
  else
    {
      all_pollfds = pollfds;
      all_nfds = nfds;
    }

  result = g_poll (all_pollfds, all_nfds, ready_time_to_timeout (ready_time));

  if (result == -1)
    {
      gint saved_errno = errno;

      g_set_error_literal (error, G_FILE_ERROR,
                           g_file_error_from_errno (saved_errno),
                           g_strerror (saved_errno));
      goto out;
    }

  if (cancellable && all_pollfds[0].revents)
    {
      g_set_error_literal (error,
                           G_IO_ERROR,
                           G_IO_ERROR_CANCELLED,
                           _("Operation was cancelled"));
      result = -1;
      goto out;
    }

  if (cancellable)
    memcpy (pollfds, all_pollfds + 1, nfds * sizeof (GPollFD));

out:
  g_cancellable_release_fd (cancellable);

  if (cancellable && nfds >= 1024)
    g_free (all_pollfds);

  return result;
}

/**
 * g_cancellable_cancel:
 * @cancellable: a #GCancellable object.
 * 
 * Will set @cancellable to cancelled, and will emit the
 * #GCancellable::cancelled signal. (However, see the warning about
 * race conditions in the documentation for that signal if you are
 * planning to connect to it.)
 *
 * This function is thread-safe. In other words, you can safely call
 * it from a thread other than the one running the operation that was
 * passed the @cancellable.
 *
 * The convention within gio is that cancelling an asynchronous
 * operation causes it to complete asynchronously. That is, if you
 * cancel the operation from the same thread in which it is running,
 * then the operation's #GAsyncReadyCallback will not be invoked until
 * the application returns to the main loop.
 **/
void
g_cancellable_cancel (GCancellable *cancellable)
{
  GCancellablePrivate *priv;

  if (cancellable == NULL ||
      cancellable->priv->cancelled)
    return;

  priv = cancellable->priv;

  g_mutex_lock (&cancellable_mutex);

  if (priv->cancelled)
    {
      g_mutex_unlock (&cancellable_mutex);
      return;
    }

  priv->cancelled = TRUE;
  priv->cancelled_running = TRUE;

  /* wake threads in critical sections */
  if G_UNLIKELY (cancellable->priv->n_critical_threads > 1)
    {
      guint i;

      for (i = 0; i < cancellable->priv->n_critical_threads; i++)
        g_thread_wakeup (cancellable->priv->critical_threads.several[i]);
    }
  else if (cancellable->priv->n_critical_threads)
    g_thread_wakeup (cancellable->priv->critical_threads.one);

  if (priv->wakeup)
    GLIB_PRIVATE_CALL (g_wakeup_signal) (priv->wakeup);

  g_mutex_unlock (&cancellable_mutex);

  g_object_ref (cancellable);
  g_signal_emit (cancellable, signals[CANCELLED], 0);

  g_mutex_lock (&cancellable_mutex);

  priv->cancelled_running = FALSE;
  if (priv->cancelled_running_waiting)
    g_cond_broadcast (&cancellable_cond);
  priv->cancelled_running_waiting = FALSE;

  g_mutex_unlock (&cancellable_mutex);

  g_object_unref (cancellable);
}

/**
 * g_cancellable_connect:
 * @cancellable: A #GCancellable.
 * @callback: The #GCallback to connect.
 * @data: Data to pass to @callback.
 * @data_destroy_func: (allow-none): Free function for @data or %NULL.
 *
 * Convenience function to connect to the #GCancellable::cancelled
 * signal. Also handles the race condition that may happen
 * if the cancellable is cancelled right before connecting.
 *
 * @callback is called at most once, either directly at the
 * time of the connect if @cancellable is already cancelled,
 * or when @cancellable is cancelled in some thread.
 *
 * @data_destroy_func will be called when the handler is
 * disconnected, or immediately if the cancellable is already
 * cancelled.
 *
 * See #GCancellable::cancelled for details on how to use this.
 *
 * Since GLib 2.40, the lock protecting @cancellable is not held when
 * @callback is invoked.  This lifts a restriction in place for
 * earlier GLib versions which now makes it easier to write cleanup
 * code that unconditionally invokes e.g. g_cancellable_cancel().
 *
 * Returns: The id of the signal handler or 0 if @cancellable has already
 *          been cancelled.
 *
 * Since: 2.22
 */
gulong
g_cancellable_connect (GCancellable   *cancellable,
		       GCallback       callback,
		       gpointer        data,
		       GDestroyNotify  data_destroy_func)
{
  gulong id;

  g_return_val_if_fail (G_IS_CANCELLABLE (cancellable), 0);

  g_mutex_lock (&cancellable_mutex);

  if (cancellable->priv->cancelled)
    {
      void (*_callback) (GCancellable *cancellable,
                         gpointer      user_data);

      g_mutex_unlock (&cancellable_mutex);

      _callback = (void *)callback;
      id = 0;

      _callback (cancellable, data);

      if (data_destroy_func)
        data_destroy_func (data);
    }
  else
    {
      id = g_signal_connect_data (cancellable, "cancelled",
                                  callback, data,
                                  (GClosureNotify) data_destroy_func,
                                  0);

      g_mutex_unlock (&cancellable_mutex);
    }


  return id;
}

/**
 * g_cancellable_disconnect:
 * @cancellable: (allow-none): A #GCancellable or %NULL.
 * @handler_id: Handler id of the handler to be disconnected, or %0.
 *
 * Disconnects a handler from a cancellable instance similar to
 * g_signal_handler_disconnect().  Additionally, in the event that a
 * signal handler is currently running, this call will block until the
 * handler has finished.  Calling this function from a
 * #GCancellable::cancelled signal handler will therefore result in a
 * deadlock.
 *
 * This avoids a race condition where a thread cancels at the
 * same time as the cancellable operation is finished and the
 * signal handler is removed. See #GCancellable::cancelled for
 * details on how to use this.
 *
 * If @cancellable is %NULL or @handler_id is %0 this function does
 * nothing.
 *
 * Since: 2.22
 */
void
g_cancellable_disconnect (GCancellable  *cancellable,
			  gulong         handler_id)
{
  GCancellablePrivate *priv;

  if (handler_id == 0 ||  cancellable == NULL)
    return;

  g_mutex_lock (&cancellable_mutex);

  priv = cancellable->priv;

  while (priv->cancelled_running)
    {
      priv->cancelled_running_waiting = TRUE;
      g_cond_wait (&cancellable_cond, &cancellable_mutex);
    }

  g_signal_handler_disconnect (cancellable, handler_id);

  g_mutex_unlock (&cancellable_mutex);
}

typedef struct {
  GSource       source;

  GCancellable *cancellable;
  guint         cancelled_handler;
} GCancellableSource;

static void
cancellable_source_cancelled (GCancellable *cancellable,
			      gpointer      user_data)
{
  GSource *source = user_data;

  if (!g_source_is_destroyed (source))
    g_source_set_ready_time (source, 0);
}

static gboolean
cancellable_source_dispatch (GSource     *source,
			     GSourceFunc  callback,
			     gpointer     user_data)
{
  GCancellableSourceFunc func = (GCancellableSourceFunc)callback;
  GCancellableSource *cancellable_source = (GCancellableSource *)source;

  g_source_set_ready_time (source, -1);
  return (*func) (cancellable_source->cancellable, user_data);
}

static void
cancellable_source_finalize (GSource *source)
{
  GCancellableSource *cancellable_source = (GCancellableSource *)source;

  if (cancellable_source->cancellable)
    {
      g_cancellable_disconnect (cancellable_source->cancellable,
                                cancellable_source->cancelled_handler);
      g_object_unref (cancellable_source->cancellable);
    }
}

static gboolean
cancellable_source_closure_callback (GCancellable *cancellable,
				     gpointer      data)
{
  GClosure *closure = data;

  GValue params = G_VALUE_INIT;
  GValue result_value = G_VALUE_INIT;
  gboolean result;

  g_value_init (&result_value, G_TYPE_BOOLEAN);

  g_value_init (&params, G_TYPE_CANCELLABLE);
  g_value_set_object (&params, cancellable);

  g_closure_invoke (closure, &result_value, 1, &params, NULL);

  result = g_value_get_boolean (&result_value);
  g_value_unset (&result_value);
  g_value_unset (&params);

  return result;
}

static GSourceFuncs cancellable_source_funcs =
{
  NULL,
  NULL,
  cancellable_source_dispatch,
  cancellable_source_finalize,
  (GSourceFunc)cancellable_source_closure_callback,
};

/**
 * g_cancellable_source_new: (skip)
 * @cancellable: (allow-none): a #GCancellable, or %NULL
 *
 * Creates a source that triggers if @cancellable is cancelled and
 * calls its callback of type #GCancellableSourceFunc. This is
 * primarily useful for attaching to another (non-cancellable) source
 * with g_source_add_child_source() to add cancellability to it.
 *
 * For convenience, you can call this with a %NULL #GCancellable,
 * in which case the source will never trigger.
 *
 * The new #GSource will hold a reference to the #GCancellable.
 *
 * Returns: (transfer full): the new #GSource.
 *
 * Since: 2.28
 */
GSource *
g_cancellable_source_new (GCancellable *cancellable)
{
  GSource *source;
  GCancellableSource *cancellable_source;

  source = g_source_new (&cancellable_source_funcs, sizeof (GCancellableSource));
  g_source_set_name (source, "GCancellable");
  cancellable_source = (GCancellableSource *)source;

  if (cancellable)
    {
      cancellable_source->cancellable = g_object_ref (cancellable);

      /* We intentionally don't use g_cancellable_connect() here,
       * because we don't want the "at most once" behavior.
       */
      cancellable_source->cancelled_handler =
        g_signal_connect (cancellable, "cancelled",
                          G_CALLBACK (cancellable_source_cancelled),
                          source);
      if (g_cancellable_is_cancelled (cancellable))
        g_source_set_ready_time (source, 0);
    }

  return source;
}

static void
g_cancellable_add_critical_thread (GCancellable *cancellable,
                                   GThread      *thread)
{
  g_thread_ref (thread);

  /* The vast majority case will be when there is only one thread, but
   * we do support a single cancellable in use from multiple threads and
   * they may all be using critical-section handling.
   */
  if G_LIKELY (cancellable->priv->n_critical_threads == 0)
    {
      cancellable->priv->critical_threads.one = thread;
      cancellable->priv->n_critical_threads = 1;
    }
  else if (cancellable->priv->n_critical_threads == 1)
    {
      GThread *other = cancellable->priv->critical_threads.one;

      cancellable->priv->critical_threads.several = g_new (GThread *, 2);
      cancellable->priv->critical_threads.several[0] = other;
      cancellable->priv->critical_threads.several[1] = thread;
      cancellable->priv->n_critical_threads = 2;
    }
  else
    {
      GThread **threads;
      guint i;

      threads = g_new (GThread *, cancellable->priv->n_critical_threads + 1);

      for (i = 0; i < cancellable->priv->n_critical_threads; i++)
        {
          g_assert (cancellable->priv->critical_threads.several[i] != thread);
          threads[i] = cancellable->priv->critical_threads.several[i];
        }

      threads[i++] = thread;

      g_free (cancellable->priv->critical_threads.several);
      cancellable->priv->critical_threads.several = threads;
      cancellable->priv->n_critical_threads++;
    }
}

static void
g_cancellable_remove_critical_thread (GCancellable *cancellable,
                                      GThread      *thread)
{
  if G_LIKELY (cancellable->priv->n_critical_threads == 1)
    {
      g_assert (cancellable->priv->critical_threads.one == thread);
      cancellable->priv->n_critical_threads = 0;
    }
  else if (cancellable->priv->n_critical_threads == 2)
    {
      GThread *other;

      if (cancellable->priv->critical_threads.several[0] != thread)
        {
          g_assert (cancellable->priv->critical_threads.several[0] == thread);
          other = cancellable->priv->critical_threads.several[0];
        }
      else
        other = cancellable->priv->critical_threads.several[1];

      g_free (cancellable->priv->critical_threads.several);
      cancellable->priv->critical_threads.one = other;
      cancellable->priv->n_critical_threads = 1;
    }
  else
    {
      guint i;

      for (i = 0; i < cancellable->priv->n_critical_threads; i++)
        if (cancellable->priv->critical_threads.several[i] == thread)
          break;

      g_assert (i != cancellable->priv->n_critical_threads);
      cancellable->priv->n_critical_threads--;

      for (; i < cancellable->priv->n_critical_threads; i++)
        /* move from the right */
        cancellable->priv->critical_threads.several[i] = cancellable->priv->critical_threads.several[i + 1];
    }

  g_thread_unref (thread);
}

/**
 * g_cancellable_enter_critical_section_using_handle:
 * @cancellable: (nullable): a #GCancellable, or %NULL
 * @thread: the current #GThread
 * @error: a pointer to a %NULL #GError, or %NULL
 *
 * Attempts to enter a critical section that can be cancelled by
 * @cancellable.
 *
 * See g_thread_enter_critical_section_using_handle() for a conceptual
 * introduction.
 *
 * @thread absolutely must be equal to the current thread as returned by
 * g_thread_self().  The behaviour is completely undefined otherwise.
 *
 * This function is essentially a convenience wrapper.  First, it
 * atomically checks for cancellation and returns %G_HANDLE_NULL with
 * @error appropriately set if the cancellable is already cancelled.
 * Then it sets up @cancellable so that a cancellation in another thread
 * will result in g_thread_wakeup() being called on @thread.  Finally,
 * g_thread_enter_critical_section_using_handle() is called and the
 * result is returned.
 *
 * You cannot call g_thread_wakeup() on @thread for yourself because you
 * cannot acquire the lock that this function will use the establish the
 * critical section.
 *
 * The overall result is that the returned handle will poll as ready if
 * @cancellable is triggered.
 *
 * You must call g_cancellable_leave_critical_section() when you are
 * done.
 *
 * If @cancellable is %NULL then this function will still enter the
 * critical section and return a valid handle, but that handle will
 * never become ready.  This is relatively low-overhead but you could
 * save yourself the trouble of polling on an extra object by checking
 * for @cancellable being %NULL before calling this function.
 *
 * The example in the documentation for
 * g_thread_enter_critical_section_using_handle() could be written
 * using GCancellable as follows:
 *
 * |[
 * static gpointer worker (gpointer user_data) {
 *   GCancellable *cancellable = user_data;
 *   GThread *self = g_thread_self ();
 *
 *   while (TRUE)
 *     {
 *       ghandle handle;
 *
 *       handle = g_cancellable_enter_critical_section_using_handle (cancellable, self, NULL);
 *       if (!g_handle_is_valid (handle))
 *         break;
 *
 *       do_blocking_work (handle);
 *
 *       g_cancellable_leave_critical_section (cancellable, self, NULL);
 *     }
 *
 *   return NULL;
 * }
 *
 * void start_cancellable_worker (GCancellable *cancellable) {
 *   g_thread_unref (g_thread_new ("worker", worker, cancellable));
 * }
 * ]|
 *
 * Returns: a valid #ghandle if the critical section was entered or
 *   %G_HANDLE_NULL (and @error set) if not.  Use g_handle_is_valid() to
 *   check.
 *
 * Since: 2.44
 */
ghandle
g_cancellable_enter_critical_section_using_handle (GCancellable  *cancellable,
                                                   GThread       *thread,
                                                   GError       **error)
{
  ghandle result = G_HANDLE_NULL;

  /* We're about to call a function that is documented as requiring a
   * lock to be held... without holding a lock.
   *
   * That's actually OK because we're operating on thread-local data and
   * there is no chance that g_thread_wakeup() can be called if the
   * cancellable is %NULL.
   */
  if (!cancellable)
    return g_thread_enter_critical_section_using_handle (thread);

  g_mutex_lock (&cancellable_mutex);

  if (!cancellable->priv->cancelled)
    {
      result = g_thread_enter_critical_section_using_handle (thread);
      g_cancellable_add_critical_thread (cancellable, thread);
    }

  g_mutex_unlock (&cancellable_mutex);

  if (!g_handle_is_valid (result))
    g_set_error_literal (error,
                         G_IO_ERROR,
                         G_IO_ERROR_CANCELLED,
                         _("Operation was cancelled"));

  return result;
}

/**
 * g_cancellable_leave_critical_section:
 * @cancellable: (nullable): a #GCancellable, or %NULL
 * @thread: the current #GThread
 * @error: a pointer to a %NULL #GError, or %NULL
 *
 * Leaves the critical section entered by
 * g_cancellable_enter_critical_section_using_handle().
 *
 * This will also check @cancellable again for having been cancelled
 * (which may very well be the reason for the operating in the critical
 * section having finished).  This provides a convenient chance to
 * recheck @cancellable, but you may safely ignore the result if you
 * will be checking it again soon anyway.
 *
 * Returns: %TRUE if @cancellable was not cancelled.  Returns %FALSE
 *   (with @error set appropriately) in case of cancellation.
 *
 * Since: 2.44
 */
gboolean
g_cancellable_leave_critical_section (GCancellable  *cancellable,
                                      GThread       *thread,
                                      GError       **error)
{
  gboolean success = TRUE;

  /* See comment above */
  if (!cancellable)
    {
      g_thread_leave_critical_section (thread);
      return TRUE;
    }

  g_mutex_lock (&cancellable_mutex);

  g_cancellable_remove_critical_thread (cancellable, thread);
  g_thread_leave_critical_section (thread);
  success = !cancellable->priv->cancelled;

  g_mutex_unlock (&cancellable_mutex);

  if (!success)
    g_set_error_literal (error,
                         G_IO_ERROR,
                         G_IO_ERROR_CANCELLED,
                         _("Operation was cancelled"));

  return TRUE;
}