This change refactors the Unix socket / pipe backend to have a ring buffer containing segments, where each segment has an optional leading ancillary buffer containing control messages followed by a normal data buffer. The SCM_RIGHTS control message has been implemented which transfers file descriptors to the receiving process. File descriptors are reference counted and cycles are prevented using the following restrictions: 1) Unix sockets cannot be sent on themselves (on either end). 2) Unix sockets themselves being sent cannot be sent on. 3) Unix sockets cannot send a Unix socket being sent on. This is a compatible ABI change.
104 lines
3.1 KiB
C
104 lines
3.1 KiB
C
/*
|
|
* Copyright (c) 2021 Jonas 'Sortie' Termansen.
|
|
*
|
|
* Permission to use, copy, modify, and distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
*
|
|
* test-unix-socket-fd-trunc.c
|
|
* Tests having too little control data when passing file descriptors.
|
|
*/
|
|
|
|
#include <sys/stat.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/wait.h>
|
|
|
|
#include <stdalign.h>
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
|
|
#include "test.h"
|
|
|
|
int main(void)
|
|
{
|
|
int fds[2];
|
|
test_assert(socketpair(AF_UNIX, SOCK_STREAM, 0, fds) == 0);
|
|
|
|
FILE* file1;
|
|
test_assert((file1 = tmpfile()));
|
|
FILE* file2;
|
|
test_assert((file2 = tmpfile()));
|
|
|
|
struct stat expected_st;
|
|
test_assert(fstat(fileno(file1), &expected_st) == 0);
|
|
|
|
struct msghdr mhdr;
|
|
char buf[1] = { 0 };
|
|
struct iovec iov;
|
|
iov.iov_base = buf;
|
|
iov.iov_len = sizeof(buf);
|
|
alignas(struct cmsghdr) char cmsgdata[CMSG_SPACE(sizeof(int) * 2)];
|
|
|
|
buf[0] = 'X';
|
|
memset(&mhdr, 0, sizeof(mhdr));
|
|
mhdr.msg_iov = &iov;
|
|
mhdr.msg_iovlen = 1;
|
|
mhdr.msg_control = cmsgdata;
|
|
mhdr.msg_controllen = sizeof(cmsgdata);
|
|
struct cmsghdr* cmsg = CMSG_FIRSTHDR(&mhdr);
|
|
cmsg->cmsg_len = CMSG_LEN(sizeof(int) * 2);
|
|
cmsg->cmsg_level = SOL_SOCKET;
|
|
cmsg->cmsg_type = SCM_RIGHTS;
|
|
int* cdata = (int*) CMSG_DATA(cmsg);
|
|
cdata[0] = fileno(file1);
|
|
cdata[1] = fileno(file2);
|
|
ssize_t amount = sendmsg(fds[1], &mhdr, 0);
|
|
test_assert(0 <= amount);
|
|
test_assertx(amount == 1);
|
|
|
|
fclose(file1);
|
|
fclose(file2);
|
|
|
|
alignas(struct cmsghdr)
|
|
char cmsgdatasmall[CMSG_ALIGN(sizeof(struct cmsghdr)) + sizeof(int)];
|
|
memset(&mhdr, 0, sizeof(mhdr));
|
|
mhdr.msg_iov = &iov;
|
|
mhdr.msg_iovlen = 1;
|
|
mhdr.msg_control = cmsgdatasmall;
|
|
mhdr.msg_controllen = sizeof(cmsgdatasmall);
|
|
amount = recvmsg(fds[0], &mhdr, 0);
|
|
test_assert(0 <= amount);
|
|
test_assertx(amount == 1);
|
|
test_assertx(buf[0] == 'X');
|
|
test_assertx(mhdr.msg_flags == MSG_CTRUNC);
|
|
test_assertx(mhdr.msg_controllen);
|
|
test_assertx(mhdr.msg_controllen == sizeof(cmsgdatasmall));
|
|
cmsg = CMSG_FIRSTHDR(&mhdr);
|
|
test_assertx(cmsg);
|
|
test_assertx(cmsg->cmsg_level == SOL_SOCKET);
|
|
test_assertx(cmsg->cmsg_type == SCM_RIGHTS);
|
|
test_assertx(cmsg->cmsg_len == CMSG_LEN(sizeof(int)));
|
|
cdata = (int*) CMSG_DATA(cmsg);
|
|
int file_fd = *cdata;
|
|
test_assertx(0 <= file_fd);
|
|
struct stat gotten_st;
|
|
test_assert(fstat(file_fd, &gotten_st) == 0);
|
|
test_assertx(gotten_st.st_ino == expected_st.st_ino);
|
|
test_assertx(gotten_st.st_dev == expected_st.st_dev);
|
|
test_assertx(!CMSG_NXTHDR(&mhdr, cmsg));
|
|
close(file_fd);
|
|
|
|
close(fds[0]);
|
|
close(fds[1]);
|
|
|
|
return 0;
|
|
}
|