mirror of
https://salsa.debian.org/ha-team/libqb
synced 2026-01-25 09:19:07 +00:00
This is the case already. We also fix a buffer overflow opportunity in the memcpy() call by this change. Conflicts: lib/ipc_shm.c
400 lines
9.4 KiB
C
400 lines
9.4 KiB
C
/*
|
|
* Copyright (C) 2010 Red Hat, Inc.
|
|
*
|
|
* Author: Angus Salkeld <asalkeld@redhat.com>
|
|
*
|
|
* This file is part of libqb.
|
|
*
|
|
* libqb is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation, either version 2.1 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* libqb is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with libqb. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
#include "os_base.h"
|
|
#include <poll.h>
|
|
#include <signal.h>
|
|
#include <setjmp.h>
|
|
|
|
#include "ipc_int.h"
|
|
#include "util_int.h"
|
|
#include "ringbuffer_int.h"
|
|
#include <qb/qbdefs.h>
|
|
#include <qb/qbatomic.h>
|
|
#include <qb/qbloop.h>
|
|
#include <qb/qbrb.h>
|
|
|
|
/*
|
|
* client functions
|
|
* --------------------------------------------------------
|
|
*/
|
|
static void
|
|
qb_ipcc_shm_disconnect(struct qb_ipcc_connection *c)
|
|
{
|
|
void (*rb_destructor)(struct qb_ringbuffer_s *);
|
|
|
|
rb_destructor = qb_rb_close;
|
|
if (!c->is_connected && (!c->server_pid || (kill(c->server_pid, 0) == -1 && errno == ESRCH))) {
|
|
rb_destructor = qb_rb_force_close;
|
|
}
|
|
|
|
qb_ipcc_us_sock_close(c->setup.u.us.sock);
|
|
|
|
rb_destructor(qb_rb_lastref_and_ret(&c->request.u.shm.rb));
|
|
rb_destructor(qb_rb_lastref_and_ret(&c->response.u.shm.rb));
|
|
rb_destructor(qb_rb_lastref_and_ret(&c->event.u.shm.rb));
|
|
}
|
|
|
|
static ssize_t
|
|
qb_ipc_shm_send(struct qb_ipc_one_way *one_way,
|
|
const void *msg_ptr, size_t msg_len)
|
|
{
|
|
return qb_rb_chunk_write(one_way->u.shm.rb, msg_ptr, msg_len);
|
|
}
|
|
|
|
static ssize_t
|
|
qb_ipc_shm_sendv(struct qb_ipc_one_way *one_way,
|
|
const struct iovec *iov, size_t iov_len)
|
|
{
|
|
char *dest;
|
|
int32_t res = 0;
|
|
int32_t total_size = 0;
|
|
int32_t i;
|
|
char *pt = NULL;
|
|
|
|
if (one_way->u.shm.rb == NULL) {
|
|
return -ENOTCONN;
|
|
}
|
|
|
|
for (i = 0; i < iov_len; i++) {
|
|
total_size += iov[i].iov_len;
|
|
}
|
|
dest = qb_rb_chunk_alloc(one_way->u.shm.rb, total_size);
|
|
if (dest == NULL) {
|
|
return -errno;
|
|
}
|
|
pt = dest;
|
|
|
|
for (i = 0; i < iov_len; i++) {
|
|
memcpy(pt, iov[i].iov_base, iov[i].iov_len);
|
|
pt += iov[i].iov_len;
|
|
}
|
|
res = qb_rb_chunk_commit(one_way->u.shm.rb, total_size);
|
|
if (res < 0) {
|
|
return res;
|
|
}
|
|
return total_size;
|
|
}
|
|
|
|
static ssize_t
|
|
qb_ipc_shm_recv(struct qb_ipc_one_way *one_way,
|
|
void *msg_ptr, size_t msg_len, int32_t ms_timeout)
|
|
{
|
|
if (one_way->u.shm.rb == NULL) {
|
|
return -ENOTCONN;
|
|
}
|
|
return qb_rb_chunk_read(one_way->u.shm.rb,
|
|
(void *)msg_ptr, msg_len, ms_timeout);
|
|
}
|
|
|
|
static ssize_t
|
|
qb_ipc_shm_peek(struct qb_ipc_one_way *one_way, void **data_out,
|
|
int32_t ms_timeout)
|
|
{
|
|
ssize_t rc;
|
|
if (one_way->u.shm.rb == NULL) {
|
|
return -ENOTCONN;
|
|
}
|
|
rc = qb_rb_chunk_peek(one_way->u.shm.rb, data_out, ms_timeout);
|
|
if (rc == 0) {
|
|
return -EAGAIN;
|
|
}
|
|
return rc;
|
|
}
|
|
|
|
static void
|
|
qb_ipc_shm_reclaim(struct qb_ipc_one_way *one_way)
|
|
{
|
|
qb_rb_chunk_reclaim(one_way->u.shm.rb);
|
|
}
|
|
|
|
static void
|
|
qb_ipc_shm_fc_set(struct qb_ipc_one_way *one_way, int32_t fc_enable)
|
|
{
|
|
int32_t *fc;
|
|
fc = qb_rb_shared_user_data_get(one_way->u.shm.rb);
|
|
qb_util_log(LOG_TRACE, "setting fc to %d", fc_enable);
|
|
qb_atomic_int_set(fc, fc_enable);
|
|
}
|
|
|
|
static int32_t
|
|
qb_ipc_shm_fc_get(struct qb_ipc_one_way *one_way)
|
|
{
|
|
int32_t *fc;
|
|
int32_t rc = qb_rb_refcount_get(one_way->u.shm.rb);
|
|
|
|
if (rc != 2) {
|
|
return -ENOTCONN;
|
|
}
|
|
fc = qb_rb_shared_user_data_get(one_way->u.shm.rb);
|
|
return qb_atomic_int_get(fc);
|
|
}
|
|
|
|
static ssize_t
|
|
qb_ipc_shm_q_len_get(struct qb_ipc_one_way *one_way)
|
|
{
|
|
if (one_way->u.shm.rb == NULL) {
|
|
return -ENOTCONN;
|
|
}
|
|
return qb_rb_chunks_used(one_way->u.shm.rb);
|
|
}
|
|
|
|
int32_t
|
|
qb_ipcc_shm_connect(struct qb_ipcc_connection * c,
|
|
struct qb_ipc_connection_response * response)
|
|
{
|
|
int32_t res = 0;
|
|
|
|
c->funcs.send = qb_ipc_shm_send;
|
|
c->funcs.sendv = qb_ipc_shm_sendv;
|
|
c->funcs.recv = qb_ipc_shm_recv;
|
|
c->funcs.fc_get = qb_ipc_shm_fc_get;
|
|
c->funcs.disconnect = qb_ipcc_shm_disconnect;
|
|
c->needs_sock_for_poll = QB_TRUE;
|
|
|
|
if (strlen(c->name) > (NAME_MAX - 20)) {
|
|
errno = EINVAL;
|
|
return -errno;
|
|
}
|
|
|
|
c->request.u.shm.rb = qb_rb_open(response->request,
|
|
c->request.max_msg_size,
|
|
QB_RB_FLAG_SHARED_PROCESS,
|
|
sizeof(int32_t));
|
|
if (c->request.u.shm.rb == NULL) {
|
|
res = -errno;
|
|
qb_util_perror(LOG_ERR, "qb_rb_open:REQUEST");
|
|
goto return_error;
|
|
}
|
|
c->response.u.shm.rb = qb_rb_open(response->response,
|
|
c->response.max_msg_size,
|
|
QB_RB_FLAG_SHARED_PROCESS, 0);
|
|
|
|
if (c->response.u.shm.rb == NULL) {
|
|
res = -errno;
|
|
qb_util_perror(LOG_ERR, "qb_rb_open:RESPONSE");
|
|
goto cleanup_request;
|
|
}
|
|
c->event.u.shm.rb = qb_rb_open(response->event,
|
|
c->response.max_msg_size,
|
|
QB_RB_FLAG_SHARED_PROCESS, 0);
|
|
|
|
if (c->event.u.shm.rb == NULL) {
|
|
res = -errno;
|
|
qb_util_perror(LOG_ERR, "qb_rb_open:EVENT");
|
|
goto cleanup_request_response;
|
|
}
|
|
return 0;
|
|
|
|
cleanup_request_response:
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->response.u.shm.rb));
|
|
|
|
cleanup_request:
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->request.u.shm.rb));
|
|
|
|
return_error:
|
|
errno = -res;
|
|
qb_util_perror(LOG_ERR, "connection failed");
|
|
|
|
return res;
|
|
}
|
|
|
|
/*
|
|
* service functions
|
|
* --------------------------------------------------------
|
|
*/
|
|
static jmp_buf sigbus_jmpbuf;
|
|
static void catch_sigbus(int signal)
|
|
{
|
|
longjmp(sigbus_jmpbuf, 1);
|
|
}
|
|
|
|
static void
|
|
qb_ipcs_shm_disconnect(struct qb_ipcs_connection *c)
|
|
{
|
|
struct sigaction sa;
|
|
struct sigaction old_sa;
|
|
|
|
/* Don't die if the client has truncated the SHM under us */
|
|
memset(&old_sa, 0, sizeof(old_sa));
|
|
memset(&sa, 0, sizeof(sa));
|
|
sa.sa_handler = catch_sigbus;
|
|
sigemptyset(&sa.sa_mask);
|
|
sa.sa_flags = 0;
|
|
sigaction(SIGBUS, &sa, &old_sa);
|
|
|
|
if (setjmp(sigbus_jmpbuf) == 1) {
|
|
goto end_disconnect;
|
|
}
|
|
|
|
if (c->state == QB_IPCS_CONNECTION_SHUTTING_DOWN ||
|
|
c->state == QB_IPCS_CONNECTION_ACTIVE) {
|
|
if (c->response.u.shm.rb) {
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->response.u.shm.rb));
|
|
}
|
|
if (c->event.u.shm.rb) {
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->event.u.shm.rb));
|
|
}
|
|
if (c->request.u.shm.rb) {
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->request.u.shm.rb));
|
|
}
|
|
}
|
|
|
|
if (c->state == QB_IPCS_CONNECTION_ESTABLISHED ||
|
|
c->state == QB_IPCS_CONNECTION_ACTIVE) {
|
|
if (c->setup.u.us.sock > 0) {
|
|
(void)c->service->poll_fns.dispatch_del(c->setup.u.us.sock);
|
|
qb_ipcc_us_sock_close(c->setup.u.us.sock);
|
|
c->setup.u.us.sock = -1;
|
|
}
|
|
}
|
|
|
|
end_disconnect:
|
|
sigaction(SIGBUS, &old_sa, NULL);
|
|
remove_tempdir(c->description);
|
|
}
|
|
|
|
static int32_t
|
|
qb_ipcs_shm_rb_open(struct qb_ipcs_connection *c,
|
|
struct qb_ipc_one_way *ow,
|
|
const char *rb_name)
|
|
{
|
|
int32_t res = 0;
|
|
|
|
ow->u.shm.rb = qb_rb_open(rb_name,
|
|
ow->max_msg_size,
|
|
QB_RB_FLAG_CREATE |
|
|
QB_RB_FLAG_SHARED_PROCESS,
|
|
sizeof(int32_t));
|
|
if (ow->u.shm.rb == NULL) {
|
|
res = -errno;
|
|
qb_util_perror(LOG_ERR, "qb_rb_open:%s", rb_name);
|
|
return res;
|
|
}
|
|
res = qb_rb_chown(ow->u.shm.rb, c->auth.uid, c->auth.gid);
|
|
if (res != 0) {
|
|
qb_util_perror(LOG_ERR, "qb_rb_chown:%s", rb_name);
|
|
goto cleanup;
|
|
}
|
|
res = qb_rb_chmod(ow->u.shm.rb, c->auth.mode);
|
|
if (res != 0) {
|
|
qb_util_perror(LOG_ERR, "qb_rb_chmod:%s", rb_name);
|
|
goto cleanup;
|
|
}
|
|
return res;
|
|
|
|
cleanup:
|
|
qb_rb_close(qb_rb_lastref_and_ret(&ow->u.shm.rb));
|
|
return res;
|
|
}
|
|
|
|
static int32_t
|
|
qb_ipcs_shm_connect(struct qb_ipcs_service *s,
|
|
struct qb_ipcs_connection *c,
|
|
struct qb_ipc_connection_response *r)
|
|
{
|
|
int32_t res;
|
|
char dirname[PATH_MAX];
|
|
char *slash;
|
|
|
|
qb_util_log(LOG_DEBUG, "connecting to client [%d]", c->pid);
|
|
|
|
snprintf(r->request, NAME_MAX, "%s-request-%s",
|
|
c->description, s->name);
|
|
snprintf(r->response, NAME_MAX, "%s-response-%s",
|
|
c->description, s->name);
|
|
snprintf(r->event, NAME_MAX, "%s-event-%s",
|
|
c->description, s->name);
|
|
|
|
/* Set correct ownership if qb_ipcs_connection_auth_set() has been used */
|
|
strlcpy(dirname, c->description, sizeof(dirname));
|
|
slash = strrchr(dirname, '/');
|
|
if (slash) {
|
|
*slash = '\0';
|
|
(void)chown(dirname, c->auth.uid, c->auth.gid);
|
|
}
|
|
|
|
res = qb_ipcs_shm_rb_open(c, &c->request,
|
|
r->request);
|
|
if (res != 0) {
|
|
goto cleanup;
|
|
}
|
|
|
|
res = qb_ipcs_shm_rb_open(c, &c->response,
|
|
r->response);
|
|
if (res != 0) {
|
|
goto cleanup_request;
|
|
}
|
|
|
|
res = qb_ipcs_shm_rb_open(c, &c->event,
|
|
r->event);
|
|
if (res != 0) {
|
|
goto cleanup_request_response;
|
|
}
|
|
|
|
res = s->poll_fns.dispatch_add(s->poll_priority,
|
|
c->setup.u.us.sock,
|
|
POLLIN | POLLPRI | POLLNVAL,
|
|
c, qb_ipcs_dispatch_connection_request);
|
|
if (res != 0) {
|
|
qb_util_log(LOG_ERR,
|
|
"Error adding socket to mainloop (%s).",
|
|
c->description);
|
|
goto cleanup_request_response_event;
|
|
}
|
|
|
|
r->hdr.error = 0;
|
|
return 0;
|
|
|
|
cleanup_request_response_event:
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->event.u.shm.rb));
|
|
|
|
cleanup_request_response:
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->response.u.shm.rb));
|
|
|
|
cleanup_request:
|
|
qb_rb_close(qb_rb_lastref_and_ret(&c->request.u.shm.rb));
|
|
|
|
cleanup:
|
|
r->hdr.error = res;
|
|
errno = -res;
|
|
qb_util_perror(LOG_ERR, "shm connection FAILED");
|
|
|
|
return res;
|
|
}
|
|
|
|
void
|
|
qb_ipcs_shm_init(struct qb_ipcs_service *s)
|
|
{
|
|
s->funcs.connect = qb_ipcs_shm_connect;
|
|
s->funcs.disconnect = qb_ipcs_shm_disconnect;
|
|
|
|
s->funcs.recv = qb_ipc_shm_recv;
|
|
s->funcs.peek = qb_ipc_shm_peek;
|
|
s->funcs.reclaim = qb_ipc_shm_reclaim;
|
|
s->funcs.send = qb_ipc_shm_send;
|
|
s->funcs.sendv = qb_ipc_shm_sendv;
|
|
|
|
s->funcs.fc_set = qb_ipc_shm_fc_set;
|
|
s->funcs.q_len_get = qb_ipc_shm_q_len_get;
|
|
|
|
s->needs_sock_for_poll = QB_TRUE;
|
|
}
|