Index: ipc/unix_domain_socket_util.cc |
=================================================================== |
--- ipc/unix_domain_socket_util.cc (revision 187239) |
+++ ipc/unix_domain_socket_util.cc (working copy) |
@@ -1,202 +0,0 @@ |
-// Copyright 2013 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#include "ipc/unix_domain_socket_util.h" |
- |
-#include <errno.h> |
-#include <fcntl.h> |
-#include <sys/socket.h> |
-#include <sys/stat.h> |
-#include <sys/un.h> |
-#include <unistd.h> |
- |
-#include "base/file_util.h" |
-#include "base/files/file_path.h" |
-#include "base/logging.h" |
-#include "base/posix/eintr_wrapper.h" |
- |
-namespace IPC { |
- |
-// Verify that kMaxSocketNameLength is a decent size. |
-COMPILE_ASSERT(sizeof(((sockaddr_un*)0)->sun_path) >= kMaxSocketNameLength, |
- BAD_SUN_PATH_LENGTH); |
- |
-namespace { |
- |
-// Returns fd (>= 0) on success, -1 on failure. If successful, fills in |
-// |unix_addr| with the appropriate data for the socket, and sets |
-// |unix_addr_len| to the length of the data therein. |
-int MakeUnixAddrForPath(const std::string& socket_name, |
- struct sockaddr_un* unix_addr, |
- size_t* unix_addr_len) { |
- DCHECK(unix_addr); |
- DCHECK(unix_addr_len); |
- |
- if (socket_name.length() == 0) { |
- LOG(ERROR) << "Empty socket name provided for unix socket address."; |
- return -1; |
- } |
- // We reject socket_name.length() == kMaxSocketNameLength to make room for |
- // the NUL terminator at the end of the string. |
- if (socket_name.length() >= kMaxSocketNameLength) { |
- LOG(ERROR) << "Socket name too long: " << socket_name; |
- return -1; |
- } |
- |
- // Create socket. |
- int fd = socket(AF_UNIX, SOCK_STREAM, 0); |
- if (fd < 0) { |
- PLOG(ERROR) << "socket"; |
- return -1; |
- } |
- file_util::ScopedFD scoped_fd(&fd); |
- |
- // Make socket non-blocking |
- if (HANDLE_EINTR(fcntl(fd, F_SETFL, O_NONBLOCK)) < 0) { |
- PLOG(ERROR) << "fcntl(O_NONBLOCK)"; |
- return -1; |
- } |
- |
- // Create unix_addr structure. |
- memset(unix_addr, 0, sizeof(struct sockaddr_un)); |
- unix_addr->sun_family = AF_UNIX; |
- strncpy(unix_addr->sun_path, socket_name.c_str(), kMaxSocketNameLength); |
- *unix_addr_len = |
- offsetof(struct sockaddr_un, sun_path) + socket_name.length(); |
- return *scoped_fd.release(); |
-} |
- |
-} // namespace |
- |
-bool CreateServerUnixDomainSocket(const base::FilePath& socket_path, |
- int* server_listen_fd) { |
- DCHECK(server_listen_fd); |
- |
- std::string socket_name = socket_path.value(); |
- base::FilePath socket_dir = socket_path.DirName(); |
- |
- struct sockaddr_un unix_addr; |
- size_t unix_addr_len; |
- int fd = MakeUnixAddrForPath(socket_name, &unix_addr, &unix_addr_len); |
- if (fd < 0) |
- return false; |
- file_util::ScopedFD scoped_fd(&fd); |
- |
- // Make sure the path we need exists. |
- if (!file_util::CreateDirectory(socket_dir)) { |
- LOG(ERROR) << "Couldn't create directory: " << socket_dir.value(); |
- return false; |
- } |
- |
- // Delete any old FS instances. |
- if (unlink(socket_name.c_str()) < 0 && errno != ENOENT) { |
- PLOG(ERROR) << "unlink " << socket_name; |
- return false; |
- } |
- |
- // Bind the socket. |
- if (bind(fd, reinterpret_cast<const sockaddr*>(&unix_addr), |
- unix_addr_len) < 0) { |
- PLOG(ERROR) << "bind " << socket_path.value(); |
- return false; |
- } |
- |
- // Start listening on the socket. |
- if (listen(fd, SOMAXCONN) < 0) { |
- PLOG(ERROR) << "listen " << socket_path.value(); |
- unlink(socket_name.c_str()); |
- return false; |
- } |
- |
- *server_listen_fd = *scoped_fd.release(); |
- return true; |
-} |
- |
-bool CreateClientUnixDomainSocket(const base::FilePath& socket_path, |
- int* client_socket) { |
- DCHECK(client_socket); |
- |
- std::string socket_name = socket_path.value(); |
- base::FilePath socket_dir = socket_path.DirName(); |
- |
- struct sockaddr_un unix_addr; |
- size_t unix_addr_len; |
- int fd = MakeUnixAddrForPath(socket_name, &unix_addr, &unix_addr_len); |
- if (fd < 0) |
- return false; |
- file_util::ScopedFD scoped_fd(&fd); |
- |
- if (HANDLE_EINTR(connect(fd, reinterpret_cast<sockaddr*>(&unix_addr), |
- unix_addr_len)) < 0) { |
- PLOG(ERROR) << "connect " << socket_path.value(); |
- return false; |
- } |
- |
- *client_socket = *scoped_fd.release(); |
- return true; |
-} |
- |
-bool GetPeerEuid(int fd, uid_t* peer_euid) { |
- DCHECK(peer_euid); |
-#if defined(OS_MACOSX) || defined(OS_OPENBSD) || defined(OS_FREEBSD) |
- uid_t socket_euid; |
- gid_t socket_gid; |
- if (getpeereid(fd, &socket_euid, &socket_gid) < 0) { |
- PLOG(ERROR) << "getpeereid " << fd; |
- return false; |
- } |
- *peer_euid = socket_euid; |
- return true; |
-#else |
- struct ucred cred; |
- socklen_t cred_len = sizeof(cred); |
- if (getsockopt(fd, SOL_SOCKET, SO_PEERCRED, &cred, &cred_len) < 0) { |
- PLOG(ERROR) << "getsockopt " << fd; |
- return false; |
- } |
- if (static_cast<unsigned>(cred_len) < sizeof(cred)) { |
- NOTREACHED() << "Truncated ucred from SO_PEERCRED?"; |
- return false; |
- } |
- *peer_euid = cred.uid; |
- return true; |
-#endif |
-} |
- |
-bool IsPeerAuthorized(int peer_fd) { |
- uid_t peer_euid; |
- if (!GetPeerEuid(peer_fd, &peer_euid)) |
- return false; |
- if (peer_euid != geteuid()) { |
- DLOG(ERROR) << "Client euid is not authorised"; |
- return false; |
- } |
- return true; |
-} |
- |
-bool IsRecoverableError(int err) { |
- return errno == ECONNABORTED || errno == EMFILE || errno == ENFILE || |
- errno == ENOMEM || errno == ENOBUFS; |
-} |
- |
-bool ServerAcceptConnection(int server_listen_fd, int* server_socket) { |
- DCHECK(server_socket); |
- *server_socket = -1; |
- |
- int accept_fd = HANDLE_EINTR(accept(server_listen_fd, NULL, 0)); |
- if (accept_fd < 0) |
- return IsRecoverableError(errno); |
- file_util::ScopedFD scoped_fd(&accept_fd); |
- if (HANDLE_EINTR(fcntl(accept_fd, F_SETFL, O_NONBLOCK)) < 0) { |
- PLOG(ERROR) << "fcntl(O_NONBLOCK) " << accept_fd; |
- // It's safe to keep listening on |server_listen_fd| even if the attempt to |
- // set O_NONBLOCK failed on the client fd. |
- return true; |
- } |
- |
- *server_socket = *scoped_fd.release(); |
- return true; |
-} |
- |
-} // namespace IPC |