// RUN: %clangxx_tsan -O1 %s -o %t && %run %t 2>&1 | FileCheck %s

// The test models how sandbox2 unshares user namespace after clone:
// https://github.com/google/sandboxed-api/blob/c95837a6c131fbdf820db352a97d54fcbcbde6c0/sandboxed_api/sandbox2/forkserver.cc#L249
// which works only in sigle-threaded processes.

#include "../test.h"
#include <errno.h>
#include <sched.h>
#include <sys/types.h>
#include <sys/wait.h>

static int cloned(void *arg) {
  // Unshare can fail for other reasons, e.g. no permissions,
  // so check only the error we are interested in:
  // if the process is multi-threaded unshare must return EINVAL.
  if (unshare(CLONE_NEWUSER) && errno == EINVAL) {
    fprintf(stderr, "unshare failed: %d\n", errno);
    exit(1);
  }
  exit(0);
  return 0;
}

int main() {
  char stack[64 << 10] __attribute__((aligned(64)));
  int pid = clone(cloned, stack + sizeof(stack), SIGCHLD, 0);
  if (pid == -1) {
    fprintf(stderr, "failed to clone: %d\n", errno);
    exit(1);
  }
  int status = 0;
  while (wait(&status) != pid) {
  }
  if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
    fprintf(stderr, "child failed: %d\n", status);
    exit(1);
  }
  fprintf(stderr, "DONE\n");
}

// CHECK: DONE