source: main/trunk/gli/src/org/greenstone/gatherer/util/Readme_Using_SafeProcess.txt@ 31713

SAFEPROCESS README

GS Java developers should use SafeProcess.java in place of directly using Java's Process class, unless any issues are discovered with SafeProcess.java hereafter.


A tailored version of SafeProcess is found both in GLI and GS3's Java src code:
- gli/src/org/greenstone/gatherer/util/SafeProcess.java
- greenstone3/src/java/org/greenstone/util/SafeProcess.java

_______________________________________________________________________________
WHY WE SHOULD GO THROUGH SAFEPROCESS INSTEAD OF USING JAVA'S PROCESS DIRECTLY
_______________________________________________________________________________

It's easy to misuse Java's Process class, and this can result in unexpected behaviour and random errors that are hard to track down. Further, the older GLI and GS3 Java src code used to use Java's Process class in different and inconsistent ways, some worse than others. Going through one class, SafeProcess, provides consistency. So if it's buggy, you can fix it in one place.

SafeProcess handles the internal Process' iostreams (input, output and error) properly using separate worker Threads, following http://www.javaworld.com/article/2071275/core-java/when-runtime-exec---won-t.html?page=2.

SafeProcess handles this itself so that the code that uses SafeProcess doesn't need to deal with it, unless customising the processing of the Process' iostreams.



_____________________________________________________
MODEL OF SAFEPROCESS THREADS AND INTERRUPT BEHAVIOUR
_____________________________________________________

This section is especially IMPORTANT TO READ IF you're thinking of customising SafeProcess' handling of the internal Process' iostreams, since each of them are always handled in their own distinct worker threads, and you need to remember to deal with ThreadSafety issues.

The primary process Thread:
The main process internal to a SafeProcess instance is run in whatever thread the SafeProcess instance's runProcess() (or runBasicProcess()) methods are called.
The SafeProcess instance internally keeps track of this thread, so that any cancel operation can send the InterruptedException to this primary thread.

SafeProcess does NOT inherit from Thread, it is therefore not a Thread. It just runs its internal process in whatever Thread called SafeProcess's runProcess/runBasicProcess methods.

A SafeProcess thread may further launch 0 or 3 additional worker threads, depending on whether runBasicProcess() or a runProcess() variant was called.

In total, using SafeProcess involves 
- 1 thread (the primary thread) when runBasicProcess() is called
- or 4 threads (the primary thread + 3 worker threads) when any variant of runBasicProcess() is called. If a variant of runProcess() was called, then 3 additional worker threads are spawned by SafeProcess. One for each iostream of the Process: inputstream, outputstream and errorstream. Note that the SafeProcess class will read from the internal Process' outputStream and ErrorStream, and can send/write a string to the Process' inputstream.


            SafeProcess thread
                |
                |
        ________________|_______________________________
        |       |       |       |
        |       |       |       |
        |       |       |       |
    Worker Thread     SafeProcess     Worker Thread   Worker Thread
    for Process'        Thread     for Process'    for Process'
    InputStream    (primary)       OutputStream    ErrorStream


__________________________________________________
USAGE: DEBUGGING
__________________________________________________

There's a lot of info that a SafeProcess instance will log during its execution and termination phases, including Exceptions but also very basic things, such as the command that the SafeProcess instance is running.

By default, such debugging-related logging is turned off. You can turn it on by adjusting the static SafeProcess.DEBUG = 1 and recompiling.

For GS3, the log output uses log4j.
For GLI, it goes to System.err at present. But if you want it to go to GLI's DebugStream, uncomment the relevant lines in the 3 variants of the static log() functions in SafeProcess.java. Then recompile.

If you're using SafeProcess yourself and wish to log debug statements that are related to how well you're using SafeProcess, you can call one of the static SafeProcess.log() functions yourself. Remember to set the static SafeProcess.DEBUG = 1.

__________________________________________________
USAGE: INSTANTIATION & DEFAULT RUNPROCESS VARIANTS
__________________________________________________

Usage of the SafeProcess class generally follows the following sequence:

1. instantiate a SafeProcess object using one of the constructors
    - public SafeProcess(String[] cmd_args)
    - public SafeProcess(String cmdStr)
    - public SafeProcess(String[] cmd_args, String[] envparams, File launchDir)
    Either or both of envparams and launchdir can be null.


2. optionally configure your SafeProcess instance.
Use an appropriate setter method to set some additional fields:

    - public void setInputString(String sendStr) 
    Call this if you wish to write any string to the process' inputstream

    - public void setSplitStdOutputNewLines(boolean split)
    - public void setSplitStdErrorNewLines(boolean split)
    Pass in true to either of the above methods if you want to preserve individual lines in the content retrieved from the internal Process' stderr and stdoutput.
    By default, lines are not split, so you get a String of one single line for the entire output from the Process' stdoutput, and a String of one single line from the Process' stderr output.
    

    - public void setExceptionHandler(SafeProcess.ExceptionHandler exception_handler)
    Use this to register a SafeProcess ExceptionHandler whose gotException() method will get called for each exception encountered during the *primary* thread's execution: the thread that runs the Process. If you wish to handle exceptions that could happen when reading from the Process' outputStream/errorStream, you will need to do that separately. See the section CUSTOMISING. By default, exceptions when reading from Process' output and errorStreams are logged.
    
    - public void setMainHandler(SafeProcess.MainProcessHandler handler)
    To set a handler that will handle the primary (SafeProcess) thread, your handler will need to implement the hooks that will get called during the internal Process' life cycle, such as before and after process.destroy() is called upon a cancel operation.


3. call one of the following runProcess() variants on your SafeProcess instance:

    a. public int runBasicProcess()

This variant will not handle the Process' iostreams at all, so it won't launch any worker threads. It merely runs the internal process in the thread from which it is called (the primary thread) and waits until it's done.
Use this variant if you know that the external process you wish SafeProcess to run will NOT be expecting any input nor be producing any output (in stdout or stderror).

NOTE: Do not call runBasicProcess() if you merely wish to ignore the process' iostreams. Because, in Java 6 and earlier, this can block indefinitely if any of the Process' iostreams contain anything or expect anything. If you wish to ignore a process' iostreams, or if you're not sure if they may need handling, call the zero-argument runProcess() variant described below.

    b. public int runProcess()

This zero argument variant will handle all the Process' iostreams in the DEFAULT manner.

- If you wanted to send something to the Process' inputstream, you ought to have configured this by calling setInputString(sendStr) before calling runProcess(). The DEFAULT behaviour is for sendStr to be written to the internal Process' inputstream as soon as the process runs (happens in its own thread).

- once runProcess() finishes, you can inspect what had come out of the Process' output and error streams by calling, see point 4 below. 
The DEFAULT behaviour of SafeProcess' processing of the stdout and stderr streams is for both streams to be read one line at a time until they have nothing left. Note that both streams are always dealt with in their separate worker threads. 

Resources are safely allocated at the end of the worker threads dealing with each of the internal Process' iostream, regardless of whether the Process is allowed to terminate naturally or whether SafeProcess is instructed to prematurely terminate it.

    c. public int runProcess(SafeProcess.LineByLineHandler outLineByLineHandler, SafeProcess.LineByLineHandler errLineByLineHandler)
Use this variant if you want to do anything specific when each line comes in from the internal Process' stderr and stdout streams. Passing in null for either parameter will return to the default behaviour for that stream.
You'll want to read further details in the section on CUSTOMISING.

    d. public int runProcess(CustomProcessHandler procInHandler, CustomProcessHandler procOutHandler, CustomProcessHandler procErrHandler)
Use this variant if you want to completely override the way the internal Process' iostreams are handled. Passing in null for any of the parameters will return to the default behaviour for that stream. You'll want to read further details in the section on CUSTOMISING.



If you want to completely override the default behaviour of any of SafeProcess' iostream related worker threads (such as if you want to read a char at a time from the stderr stream and do something, instead of the default behaviour of reading a line at a time from it), then call this method.

You need to pass in an *instance* of SafeProcess.CustomProcessHandler for *each* of the 3 iostreams, since they're running in separate threads and so can't share the same instance.

You can pass in null for any of these, if you want the default SafeProcess handling to apply for that stream's worker thread. For any iostream's default handling that you want to override, however, you'd extend SafeProcess.CustomProcessHandler.

You would need to take care of ThreadSafety yourself if you're extending a SafeProcess.CustomProcessHandler. You can maintain concurrency by using synchronization, for instance. See the section USEFUL SYNCHRONISATION NOTES.

For EXAMPLES OF USE, see GS3's GS2PerlConstructor.java and GLI's DownloadJob.java.


Further NOTES:
All of the variants of the runProcess methods return the internal Process' exit value *after* the internal Process has completed. The exit value will be -1 if the process was prematurely terminated such as by a cancel operation, which would have interrupted the primary and subsidiary threads.

Running a process blocks the primary thread until complete. So all the runProcess variants above *block*. (Unless and until an external thread calls the cancelRunningProcess() method on a reference to the SafeProcess instance, discussed in the section on CANCELLING).


4. if necessary, once the process has *terminated*,

- you can read whatever came out from the Process' stderr or stdout by calling whichever is required of:
public String getStdOutput()
public String getStdError()
 
If you want to do anything special when handling any of the Process' iostreams, see the CUSTOMISING section.

- You can also inspect the exit value of running the process by calling
public int getExitValue()

The exit value will be -1 if the process was prematurely terminated such as by a cancel operation, which would have interrupted the primary and subsidiary threads. 
The exit value will also be -1 if you call getExitValue() before setting off the SafeProcess via any of the runProcess() variants.

_________________________________________________________________________________________________________________
INTERNAL IMPLEMENTATION DETAILS - USEFUL IF CUSTOMISING SAFEPROCESS' BEHAVIOUR OR CALLING CANCEL ON SAFEPROCESS
_________________________________________________________________________________________________________________

This section is for understanding how SafeProcess runs a Java Process internally. These methods are not public and their details are hidden away in the code.

Calling any of the runProcess() variants does the following internally:

1. calls method doRuntimeExec()

    based on how you configured your SafeProcess instance, this method instantiates and returns a Process object by calling Runtime.exec().
    A possible improvement may be to consider using the ProcessBuilder class for creating a Process object.

2. calls method waitForStreams()

    Called by all but the runBasicProcess() variant, since the runBasicProcess() variant does not do anything with the Process' iostreams and therefore doesn't use worker threads .
    This method first starts off all the worker threads, to handle each input or output stream of the Process.
    Then, it calls waitFor() on the Process object. This is the first of 2 calls that block the primary thread (the Thread the Safeprocess runs its Process object in) until finished.

    One of two things happen, 
    - either the internal Process is allowed to terminate naturally, reaching the end.
    - Or the Process is interrupted by a cancel action, which will result in an InterruptedException. When an InterruptedException is caught, each of the worker threads is interrupted. The worker threads check for the interrupt flag during any loop, so that they may exit their loop early. If an InterruptException happened, the exitValue after the Process' waitFor() call remains at -1 and the SafeProcess instance sets its boolean forciblyTerminateProcess flag to true, to indicate that it may have to call Process.destroy() and ensure any subprocesses are terminated.
    
    Regardless of whether the Process naturally terminates or is prematurely terminated by an InterruptedException upn a cancel,
    - all the resources such as streams are closed.
    - the join() method is called on all worker threads. As per the Java API, callin join() on a Thread "Waits for this thread to die." This means the primary thread now waits for the worker threads to all come to a halt. So the section where join() is called on each worker thread also blocks the primary thread until the joins are complete.

Since both the Process.waitFor() phase and the join() phase block the primary thread until finished, an InterruptedException could theoretically have occurred during either phase. However, we don't want an InterruptedException occurring during the join() phase, as an interrupt at this point will break us out of the join (going into an exception handler for the Interruption, prematurely ending the join()) and thus the worker threads would have been prevented from neatly cleaning up after themselves. To prevent InterruptedExceptions from occurring during any of the join() calls on the worker threads, the join() calls are embedded in a section that is marked as not interruptible. Once the join calls are finished, the code in the waitForStreans() method becomes interruptible again and a notify() is sent to anyone that was waiting for the thread to become interruptible. (Technically, the remainder of the code, the rest of the primary thread, does not respond to InterruptedExceptions hereafter, as there are no more waiting/blocking calls after the join()s are over.)

Marking the join() phase as an uninterruptible section of code helps when the cancelRunProcess() is called on the SafeProcess instance by a separate thread, such as a GUI thread with a cancel button that triggered the call to cancelRunProcess(). The cancelRunProcess() method only interrupts the primary SafeProcess thread if it is in an interruptible section of code. If the primary thread is uninterruptible when cancelRunProcess() was called, then the method either
- returns immediately if called by a GUI thread (EventDispatchThread),
- or if cancelRunProcess(boolean forceWaitUntilInterruptible) is called with forceWaitUntilInterruptible, even if the caller is the EventDispatchThread, it will wait until the primary thread is interruptible before it returns from the cancelRunProcess() method. The wait() call blocks until notify()ed that the primary thread has become interruptible again.

The cancelRunningProcess() method, which is called by a Thread external to the primary SafeProcess thread, therefore only causes an InterruptedException on the primary SafeProcess thread. It never sends an interruption during or after the primary thread is in an uninterruptible section, since only the waitFor() phase is ever to be interrupted, as waitFor() is the only phase when the external process is actually running, while the subsequent phases are already in closing down naturally and only need to do cleanup thereafter. If cancelRunningProcess() is called when the primary thread is in the uninterruptible phase after waitFor(), the cancelRunningProcess() method returns straight away or can be told to wait until the uninterupptible phase is done. Either way, it won't cause an interrupt any more, as the process is already naturally closing down.


3. If and only if SafeProcess was cancelled, so that its Process is to be prematurely terminated, does SafeProcess call destroyProcess(). (It is not called on natural termination.) destroyProcess() ensures both the external process that is run, denoted by the Process object, and also any subprocesses that are launched by the external process are all terminated.

- On Linux (only tested on Ubuntu), it was found that the simple sequence of events from interrupting the worker threads to the join()s called on them (which closed off al resources used by the worker threads) was sufficient to cleanly end the Process and any subprocesses.

- On Windows, it needs to call Process.destroy() to terminate the Process and further needs to obtain the childids of any subprocesses this launched and terminate them recursively in a Windows-specific manner by calling the Windows specific kill command on each process id. 
The method "public static long getProcessID(Process p)" uses the newly included Java Native Access library to obtain the processID of any Process. Then the childpids of any process denoted by pid are obtained with the command:

    "wmic process where (parentprocessid=<pid>) get processid"

Having the pids of all processes to be terminated, one of "wmic process <pid> delete", "taskkill /f /t /PID <pid>" or "tskill pid" commands is invoked, whichever is available, to recursively and forcibly terminate any process and its subprocesses, by their pid. The taskkill command works like kill -9 (kill -KILL) rather than like kill -TERM.

The wmic prompt-like tool, which has been present since Windows XP, not only recongises the command to delete a process by pid, but it also has commands to get the childids of a process denoted by pid, and vice-versa (to find the parent pid if you know a childpid). Much more is possible with wmic. The tskill command has also been available for a long time, taskkill is newer and may have appeared with Windows Vista or later.

- On Mac, pressing cancel when building a collection in GLI launches the perl processes full-import.pl followed by full-buildcol.pl. The buildcol phase terminates even without a process.destroy() being necessary, which is as on Linux. However, for full-import.pl, process.destroy() firstly is necessary: as always, process.destroy() is able to destroy the Process that was launched (full-import.pl), but not any subprocesses that this launched in turn (such as import.pl). So on Mac, during destroyProcess(), an operating system command is issued to terminate the process and its subprocesses. See the NOTE at the end of the section.

On Linux, SafeProcess() does not issue operating system commands to terminate the internal Process upon cancel, since on Linux both a process and its subprocesses seem to come to an end on their own in such a case. Nevertheless, SafeProcess now also includes code to send an OS level command to terminate a process with its subprocesses on Linux too. The way SafeProcess works on premature termination, with interrupts and closing of resources, doesn't yet require an OS level command. However, there's now a variant of destroyProcess() which takes a boolean parameter which, if false, will force an OS level command to be issued on Linux too if an entire process group (process and subprocesses) is to be destroyed.

On Mac, the command is "pkill -TERM -P <pid>". This is to kill a process and subprocesses. It was tested successfully on Mac Snow Leopard.

However, on Linux, this command only terminates the top level process, while any subprocesses are left running. On Linux, the OS level command to terminate the entire process group is "kill -TERM -<pid>", which has been tested successfully on Ubuntu. Note the hyphen in front of the <pid>, which treats the pid as a process group id, and terminates the entire process tree. (In contrast, the more common "kill -TERM <pid>" only terminates the top level process on Mac and Linux, leaving subprocesses running).

For more information, see https://stackoverflow.com/questions/8533377/why-child-process-still-alive-after-parent-process-was-killed-in-linux

NOTE:
This note documents weird behaviour on Mac, which has not been explained yet, but which the above operating system commands to terminate the process group successfully taken care of anyway.

When running the full-import.pl and full-buildcol.pl in sequence from the command line on a Mac, the regular "kill -TERM <pid> signal" only terminates the top level process and not subprocesses. To kill the entire process group, the OS specific command for killing a process (mentioned above) must be issued instead.
When full-import.pl is run from GLI, both process.destroy() and the regular "kill -TERM <pid> signal" are able to successfully terminate the top level process, but not subprocesses. In this, sending the TERM signal results in behaviour similar to the situation with running full-import.pl from the command line.

However, when full-buildcol.pl is run from GLI on a Mac the behaviour is inconsistent with the command line and with running full-import.pl from GLI. When full-buildcol.pl is run from GLI, the Process and subprocesses all terminate tidily on their own when cancel is pressed, not requiring either process.destroy() or the OS command to terminate even the top level process ID, nor requiring the command to terminate the process group either. This behaviour is similar to how both full-import.pl and full-buildcol.pl scripts come to a clean close upon cancel on Linux. In such cases, sending a TERM signal to the process (group) id returns an exitvalue of 1. This exitvalue can mean that the kill signal didn't work, but in these cases, it specifically indicates that the process was already terminated before the TERM signal was even sent to kill the process.

A specific detail of the process of killing a process group on Linux and Mac is that a TERM signal is sent first. If the return value was 0, a signal was successfully sent. If it is 1 it failed in some way, including the possibility that process was already terminated. If neither of these, then it's assumed the return value indicates the termination signal was unsuccessful, and a KILL signal is sent next. 

Preliminary investigation of the weird behaviour on Mac has revealed the following:
a. Sending a Ctrl-C is different in two ways from sending a kill -TERM signal.
- Ctrl-C is "kill -2" or "kill -INT", whereas "kill -TERM" is the same as "kill -15" (and "kill -KILL" is "kill -9", which doesn't allow the killed process to do cleanup first).
- Ctrl-C kills the foreground process of the progress group targeted by the Ctrl-C (or the process group indicated by pid). In contrast, kill -TERM or kill -KILL terminate the process with the given pid, which is likely to be a background process if any subprocesses were launched by it.

b. Pressing Ctrl-C when full-import.pl is running may give the impression of having terminated the entire process group if you happen to issue the Ctrl-C at a point when full-import.pl hasn't launched any subprocesses. The parent process is killed, and therefore can't launch further subprocesses, so it looks like hte entire process tree was successfully terminated. However, if you issue Ctrl-C when a subprocess is running, that subprocess (the foreground process) is all that's terminated, while background processes are still running and can continue to launch subprocesses.

Sending a regular kill -TERM or kill -KILL signal to the parent process of a process group will kill the parent process (but not the process group, unless you explicitly issued the command to terminate an entire process group). Killing the parent process will prevent future subprocesses from being launched by the parent process, but child processes remain runnning.

The Java method Process.destroy(), used by GLI until the recent modifications to ensure the entire process group is terminated, behaves more like kill -TERM/kill -KILL than Ctrl-C: the actuall parent Process launched with Runtime.exec() is killed, but not subprocesses. This means that Ctrl-C is not a proper test of GLI's behaviour.

Future investigation into the weird behaviour, if this ever needs to be explained, can proceed from the above. At present. issuing operating system commands to kill an entire process tree seem to work sufficiently in all cases tested, despite the weird distinctive behaviour of full-buildcol.pl on a Mac when run from GLI.

__________________________________________________
USAGE: CUSTOMISING
__________________________________________________

This section deals with if you want to provide customise behaviour for any of the worker threads that deal with the internal Process object's iostreams, or if you want to do some extra work at any major milestone in the outer SafeProcess instance's life cycle.


CUSTOMISING THE BEHAVIOUR OF THE WORKER THREADS THAT HANDLE THE INTERNAL PROCESS' IOSTREAMS:

Always bear in mind that each of the streams is handled in its own separate worker thread! 
So you'll need to take care of ThreadSafety yourself, if you're implementing a SafeProcess.LineByLineHandler or SafeProcess.CustomProcessHandler. You can maintain concurrency by using synchronization, for instance. See the section USEFUL SYNCHRONISATION NOTES.

Customising the worker threads can be done in one of two ways:
- you extend SafeProcess.LineByLineHandler (for the Process' stderr/stdout streams you're interested in) and then call the matching runProcess() method
- if you want to do something drastically different, you extend SafeProcess.CustomProcessHandler (for any of the internal Process' iostreams you're interested in) and then call the matching runProcess() method

    a. public int runProcess(SafeProcess.LineByLineHandler outLineByLineHandler, SafeProcess.LineByLineHandler errLineByLineHandler)

If you want to deal with EACH LINE coming out of the internal Process' stdout and/or stderr streams yourself, implement SafeProcess.LineByLineHandler. You may want a different implementation if you want to deal with the Process' stdout and stderr streams differently, or the same implementation if you want to deal with them identically. Either way, you need a *separate* SafeProcess.LineByLineHandler instance for each of these two streams, since they're running in separate threads. Pass the distinct instances in to the runProcess method as parameters.

You can pass null for either parameter, in which case the default behaviour for that iostream takes place, as described for the zero-argument runProcess() variant.


Writing your own SafeProcess.LineByLineHandler:
- extend SafeProcess.LineByLineHandler. You can make it a static inner class where you need it.
- make the constructor call the super constructor, passing in one of SafeProcess.STDERR|STDOUT|STDIN, to indicate the specific iostream for any instantiated instance.
- For debugging, in order to identify what stream (stderr or stdout) you're working with, you can print the thread's name by calling the CustomProcessHandler's method
    public String getThreadNamePrefix() 
- Provide an implementation for the LineByLineHandler methods
    public void gotLine(String line)
    public void gotException(Exception e);

Whenever the worker thread gets a line from that outputstream (stderr or stdout) of the internal process, it will call that stream's associated gotLine(line) implemention. 
Whenever the worker thread encounters an exception during the processing of that outputstream (stderr or stdout), it will call that stream's associated gotException(exception) implemention.

Remember, you can use the same implementation (LineByLineHandler subclass) for both stderr and stdout outputstreams, but you must use different *instances* of the class for each stream!

For EXAMPLES OF USE, see GLI's GShell.java.


    b. public int runProcess(CustomProcessHandler procInHandler, CustomProcessHandler procOutHandler, CustomProcessHandler procErrHandler)

If you want to completely override the default behaviour of any of SafeProcess' iostream related worker threads (such as if you want to read a char at a time from the stderr stream and do something, instead of the default behaviour of reading a line at a time from it), then call this method.

You need to pass in an *instance* of SafeProcess.CustomProcessHandler for *each* of the 3 iostreams, since they're running in separate threads and so can't share the same instance.

You can pass in null for any of these, if you want the default SafeProcess handling to apply for that stream's worker thread. For any iostream's default handling that you want to override, however, you'd implement SafeProcess.CustomProcessHandler.


Writing your own SafeProcess.CustomProcessHandler:
- extend SafeProcess.CustomProcessHandler. You can make it a static inner class where you need it.
- make the constructor call the super constructor, passing in one of SafeProcess.STDERR|STDOUT|STDIN, to indicate the specific iostream for any instantiated instance.
- implement the following method of CustomProcessHandler
    public abstract void run(Closeable stream); 

Start by first casting the stream to InputStream, if the CustomProcessHandler is to read from the internal Process' stderr or stdout streams, 
else cast to Outputstream if CustomProcessHandler is to write to the internal Process' stdin stream.
- Since you're implementing the "run()" method of the worker Thread for that iostream, you will write the code to handle any exceptions yourself
- For debugging, in order to identify what stream you're working with, you can print the thread's name by calling the CustomProcessHandler's method
    public String getThreadNamePrefix() 

Remember, you can use the same implementation (CustomProcessHandler subclass) for each of the internal process' iostreams, but you must use different *instances* of the class for each stream!

For EXAMPLES OF USE, see GS3's GS2PerlConstructor.java and GLI's DownloadJob.java.


ADDING CUSTOM HANDLERS TO HOOK INTO KEY MOMENTS OF THE EXECUTION OF THE PRIMARY THREAD:

Remember that the primary thread is the thread in which the internal Process is executed in, which is whatever Thread the runProcess() method is called on your SafeProcess instance.

If you just want to handle exceptions that may occur at any stage during the execution of the primary thread
- provide an implementation of SafeProcess.ExceptionHandler:
    public static interface ExceptionHandler {

        public void gotException(Exception e);
    }
- configure your SafeProcess instance by calling setExceptionHandler(SafeProcess.ExceptionHandler eh) on it *before* calling a runProcess() method on that instance.
- For EXAMPLES OF USE, see GLI's GShell.java.

If, during the execution of the primary thread, you want to do some complex things during a cancel operation, such as or before and after a process is destroyed, then 
- implement SafeProcess.MainProcessHandler (see below)
- configure your SafeProcess instance by calling setMainHandler(MainProcessHandler mph) on it *before* calling a runProcess() method on that instance.
- For EXAMPLES OF USE, see GLI's DownloadJob.java.

    public static interface MainProcessHandler {

        /** 
         * Called before the streamgobbler join()s.
         * If not overriding, the default implementation should be:
         * public boolean beforeWaitingForStreamsToEnd(boolean forciblyTerminating) { return forciblyTerminating; }
         * When overriding:
         * @param forciblyTerminating is true if currently it's been decided that the process needs to be
         * forcibly terminated. Return false if you don't want it to be. For a basic implementation,
         * return the parameter.
         * @return true if the process is still running and therefore still needs to be destroyed, or if
         * you can't determine whether it's still running or not. Process.destroy() will then be called.
         * @return false if the process has already naturally terminated by this stage. Process.destroy()
         * won't be called, and neither will the before- and after- processDestroy methods of this class.
        */
        public boolean beforeWaitingForStreamsToEnd(boolean forciblyTerminating);

        /** 
         * Called after the streamgobbler join()s have finished.
         * If not overriding, the default implementation should be:
         * public boolean afterStreamsEnded(boolean forciblyTerminating) { return forciblyTerminating; }
         * When overriding:
         * @param forciblyTerminating is true if currently it's been decided that the process needs to be
         * forcibly terminated. Return false if you don't want it to be. For a basic implementation,
         * return the parameter (usual case).
         * @return true if the process is still running and therefore still needs to be destroyed, or if
         * can't determine whether it's still running or not. Process.destroy() will then be called.
         * @return false if the process has already naturally terminated by this stage. Process.destroy()
         * won't be called, and neither will the before- and after- processDestroy methods of this class.
        */
        public boolean afterStreamsEnded(boolean forciblyTerminating);

        /**
         * called after join()s and before process.destroy()/destroyProcess(Process), iff forciblyTerminating
         */
        public void beforeProcessDestroy();
 
        /**
         * Called after process.destroy()/destroyProcess(Process), iff forciblyTerminating
         */
        public void afterProcessDestroy();

        /** 
         * Always called after process ended: whether it got destroyed or not
         */
        public void doneCleanup(boolean wasForciblyTerminated);
    }


__________________________________________________
USAGE: CANCELLING
__________________________________________________

For EXAMPLES OF USE, see GLI's GShell.java and DownloadJob.java.

__________________________________________________
USAGE: IMPLEMENTING HOOKS AROUND CANCELLING
__________________________________________________

For EXAMPLES OF USE, see GLI's DownloadJob.java.

__________________________________________________
USEFUL STATIC METHODS AND STATIC INNER CLASSES
__________________________________________________

public static boolean isAvailable(String programName)
    - Runs the `which` cmd over the program and returns true or false
    `which` is included in winbin for Windows, and is part of unix systems

static public boolean processRunning(Process process)
    - returns true if the Process is currently running and hasn't come to an end.
    - It does not 

public static long getProcessID(Process p)
    - uses java native access (JNA, version 4.1.0 from 2013). The JNA jar files have been included into gli's lib and GS3's lib.
    - For more details, see gli/lib/README.txt, section "B. THE jna.jar and jna-platform.jar FILES"

public static void destroyProcess(Process p)
    - will terminate any subprocesses launched by the Process p
    - uses java native access to get processid
    - uses OS system calls to terminate the Process and any subprocesses

public static boolean closeProcess(Process prcs)
    - will attempt to close your Process iostreams and destroy() the Process object at the end.

public static boolean closeResource(Closeable resourceHandle)
    - will attempt to cleanly close your resource (file/stream handle), logging on Exception

public static boolean closeSocket(Socket resourceHandle)
    - will attempt to cleanly close your Socket, logging on Exception. In Java 6, Sockets didn't yet implement Closeable,
    so this method is to ensure backwards compatibility

public static class OutputStreamGobbler extends Thread
    - A class that can write to a Process' inputstream from its own Thread.

public static class InputStreamGobbler extends Thread
    - Class that can read from a Process' output or error stream in its own Thread.
    - A separate instance should be created for each stream, so that each stream has its own Thread.



Package access:
static methods to prematurely terminate any process denoted by processID and any subprocesses it may have launched:
    static boolean killUnixProcessWithID(long processID)
    static void killWinProcessWithID(long processID)


__________________________________________________
OTHER USEFUL INSTANCE METHODS
__________________________________________________

public synchronized boolean processRunning()
    - returns true if the SafeProcess instance has started its internal Process or is still cleaning up on its termination 

public boolean cancelRunningProcess()
    - cancel the SafeProcess instance
    - untimately synchronized, so threadsafe
__________________________________________________
USEFUL SYNCHRONISATION NOTES
__________________________________________________
[Also add in links]


__________________________________________________
TICKETS, COMMITS, TAGS
__________________________________________________