| Index: mojo/system/channel.h
|
| diff --git a/mojo/system/channel.h b/mojo/system/channel.h
|
| index 0ad0e1090f602e354aebcc4cd81efdc4e60cf50d..cea041fd4460c70190756b5de7a9cbd1e8836ebe 100644
|
| --- a/mojo/system/channel.h
|
| +++ b/mojo/system/channel.h
|
| @@ -132,6 +132,70 @@ class MOJO_SYSTEM_IMPL_EXPORT Channel
|
| }
|
|
|
| private:
|
| + // Terminology:
|
| + // - "Message pipe endpoint": In the implementation, a |MessagePipe| owns
|
| + // two |MessagePipeEndpoint| objects, one for each port. The
|
| + // |MessagePipeEndpoint| objects are only accessed via the |MessagePipe|
|
| + // (which has the lock), with the additional information of the port
|
| + // number. So as far as the channel is concerned, a message pipe endpoint
|
| + // is a pointer to a |MessagePipe| together with the port number.
|
| + // - The value of |port| in |EndpointInfo| refers to the
|
| + // |ProxyMessagePipeEndpoint| (i.e., the endpoint that is logically on
|
| + // the other side). Messages received by a channel for a message pipe
|
| + // are thus written to the *peer* of this port.
|
| + // - "Attached"/"detached": A message pipe endpoint is attached to a channel
|
| + // if it has a pointer to it. It must be detached before the channel gives
|
| + // up its pointer to it in order to break a reference cycle. (This cycle
|
| + // is needed to allow a channel to be shut down cleanly, without shutting
|
| + // down everything else first.)
|
| + // - "Running" (message pipe endpoint): A message pipe endpoint is running
|
| + // if messages written to it (via some |MessagePipeDispatcher|, to which
|
| + // some |MojoHandle| is assigned) are being transmitted through the
|
| + // channel.
|
| + // - Before a message pipe endpoint is run, it will queue messages.
|
| + // - When a message pipe endpoint is detached from a channel, it is also
|
| + // taken out of the running state. After that point, messages should
|
| + // no longer be written to it.
|
| + // - "Normal" message pipe endpoint (state): The channel itself does not
|
| + // have knowledge of whether a message pipe endpoint has started running
|
| + // yet. It will *receive* messages for a message pipe in either state (but
|
| + // the message pipe endpoint won't *send* messages to the channel if it
|
| + // has not started running).
|
| + // - "Zombie" message pipe endpoint (state): A message pipe endpoint is a
|
| + // zombie if it is still in |local_id_to_endpoint_info_map_|, but the
|
| + // channel is no longer forwarding messages to it (even if it may still be
|
| + // receiving messages for it).
|
| + // - There are various types of zombies, depending on the reason the
|
| + // message pipe endpoint cannot yet be removed.
|
| + // - If the remote side is closed, it will send a "remove" control
|
| + // message. After the channel receives that message (to which it
|
| + // responds with a "remove ack" control message), it knows that it
|
| + // shouldn't receive any more messages for that message pipe endpoint
|
| + // (local ID), but it must wait for the endpoint to detach. (It can't
|
| + // do so without a race, since it can't call into the message pipe
|
| + // under |lock_|.) [TODO(vtl): When I add remotely-allocated IDs,
|
| + // we'll have to remove the |EndpointInfo| from
|
| + // |local_id_to_endpoint_info_map_| -- i.e., remove the local ID,
|
| + // since it's no longer valid and may be reused by the remote side --
|
| + // and keep the |EndpointInfo| alive in some other way.]
|
| + // - If the local side is closed and the message pipe endpoint was
|
| + // already running (so there are no queued messages left to send), it
|
| + // will detach the endpoint, and send a "remove" control message.
|
| + // However, the channel may still receive messages for that endpoint
|
| + // until it receives a "remove ack" control message.
|
| + // - If the local side is closed but the message pipe endpoint was not
|
| + // yet running , the detaching is delayed until after it is run and
|
| + // all the queued messages are sent to the channel. On being detached,
|
| + // things proceed as in one of the above cases. The endpoint is *not*
|
| + // a zombie until it is detached (or a "remove" message is received).
|
| + // [TODO(vtl): Maybe we can get rid of this case? It'd only not yet be
|
| + // running since under the current scheme it wouldn't have a remote ID
|
| + // yet.]
|
| + // - Note that even if the local side is closed, it may still receive a
|
| + // "remove" message from the other side (if the other side is closed
|
| + // simultaneously, and both sides send "remove" messages). In that
|
| + // case, it must still remain alive until it receives the "remove
|
| + // ack" (and it must ack the "remove" message that it received).
|
| struct EndpointInfo {
|
| enum State {
|
| // Attached, possibly running or not.
|
| @@ -142,8 +206,6 @@ class MOJO_SYSTEM_IMPL_EXPORT Channel
|
| // Waiting for a |kSubtypeChannelRemoveMessagePipeEndpointAck| before
|
| // removing.
|
| STATE_WAIT_REMOTE_REMOVE_ACK,
|
| - // Waiting for both of the above conditions before removing.
|
| - STATE_WAIT_LOCAL_DETACH_AND_REMOTE_REMOVE_ACK,
|
| };
|
|
|
| EndpointInfo();
|
|
|