Index: ipc/ipc_channel_posix.cc |
=================================================================== |
--- ipc/ipc_channel_posix.cc (revision 187239) |
+++ ipc/ipc_channel_posix.cc (working copy) |
@@ -40,7 +40,6 @@ |
#include "ipc/ipc_logging.h" |
#include "ipc/ipc_message_utils.h" |
#include "ipc/ipc_switches.h" |
-#include "ipc/unix_domain_socket_util.h" |
namespace IPC { |
@@ -138,7 +137,144 @@ |
}; |
//------------------------------------------------------------------------------ |
+// Verify that kMaxPipeNameLength is a decent size. |
+COMPILE_ASSERT(sizeof(((sockaddr_un*)0)->sun_path) >= kMaxPipeNameLength, |
+ BAD_SUN_PATH_LENGTH); |
+// Creates a unix domain socket bound to the specified name that is listening |
+// for connections. |
+bool CreateServerUnixDomainSocket(const std::string& pipe_name, |
+ int* server_listen_fd) { |
+ DCHECK(server_listen_fd); |
+ |
+ if (pipe_name.length() == 0 || pipe_name.length() >= kMaxPipeNameLength) { |
+ DLOG(ERROR) << "pipe_name.length() == " << pipe_name.length(); |
+ return false; |
+ } |
+ |
+ // Create socket. |
+ int fd = socket(AF_UNIX, SOCK_STREAM, 0); |
+ if (fd < 0) { |
+ return false; |
+ } |
+ |
+ // Make socket non-blocking |
+ if (fcntl(fd, F_SETFL, O_NONBLOCK) == -1) { |
+ PLOG(ERROR) << "fcntl(O_NONBLOCK) " << pipe_name; |
+ if (HANDLE_EINTR(close(fd)) < 0) |
+ PLOG(ERROR) << "close " << pipe_name; |
+ return false; |
+ } |
+ |
+ // Delete any old FS instances. |
+ unlink(pipe_name.c_str()); |
+ |
+ // Make sure the path we need exists. |
+ base::FilePath path(pipe_name); |
+ base::FilePath dir_path = path.DirName(); |
+ if (!file_util::CreateDirectory(dir_path)) { |
+ if (HANDLE_EINTR(close(fd)) < 0) |
+ PLOG(ERROR) << "close " << pipe_name; |
+ return false; |
+ } |
+ |
+ // Create unix_addr structure. |
+ struct sockaddr_un unix_addr; |
+ memset(&unix_addr, 0, sizeof(unix_addr)); |
+ unix_addr.sun_family = AF_UNIX; |
+ int path_len = snprintf(unix_addr.sun_path, IPC::kMaxPipeNameLength, |
+ "%s", pipe_name.c_str()); |
+ DCHECK_EQ(static_cast<int>(pipe_name.length()), path_len); |
+ size_t unix_addr_len = offsetof(struct sockaddr_un, |
+ sun_path) + path_len + 1; |
+ |
+ // Bind the socket. |
+ if (bind(fd, reinterpret_cast<const sockaddr*>(&unix_addr), |
+ unix_addr_len) != 0) { |
+ PLOG(ERROR) << "bind " << pipe_name; |
+ if (HANDLE_EINTR(close(fd)) < 0) |
+ PLOG(ERROR) << "close " << pipe_name; |
+ return false; |
+ } |
+ |
+ // Start listening on the socket. |
+ const int listen_queue_length = 1; |
+ if (listen(fd, listen_queue_length) != 0) { |
+ PLOG(ERROR) << "listen " << pipe_name; |
+ if (HANDLE_EINTR(close(fd)) < 0) |
+ PLOG(ERROR) << "close " << pipe_name; |
+ return false; |
+ } |
+ |
+ *server_listen_fd = fd; |
+ return true; |
+} |
+ |
+// Accept a connection on a socket we are listening to. |
+bool ServerAcceptConnection(int server_listen_fd, int* server_socket) { |
+ DCHECK(server_socket); |
+ |
+ int accept_fd = HANDLE_EINTR(accept(server_listen_fd, NULL, 0)); |
+ if (accept_fd < 0) |
+ return false; |
+ if (fcntl(accept_fd, F_SETFL, O_NONBLOCK) == -1) { |
+ PLOG(ERROR) << "fcntl(O_NONBLOCK) " << accept_fd; |
+ if (HANDLE_EINTR(close(accept_fd)) < 0) |
+ PLOG(ERROR) << "close " << accept_fd; |
+ return false; |
+ } |
+ |
+ *server_socket = accept_fd; |
+ return true; |
+} |
+ |
+bool CreateClientUnixDomainSocket(const std::string& pipe_name, |
+ int* client_socket) { |
+ DCHECK(client_socket); |
+ DCHECK_GT(pipe_name.length(), 0u); |
+ DCHECK_LT(pipe_name.length(), kMaxPipeNameLength); |
+ |
+ if (pipe_name.length() == 0 || pipe_name.length() >= kMaxPipeNameLength) { |
+ return false; |
+ } |
+ |
+ // Create socket. |
+ int fd = socket(AF_UNIX, SOCK_STREAM, 0); |
+ if (fd < 0) { |
+ PLOG(ERROR) << "socket " << pipe_name; |
+ return false; |
+ } |
+ |
+ // Make socket non-blocking |
+ if (fcntl(fd, F_SETFL, O_NONBLOCK) == -1) { |
+ PLOG(ERROR) << "fcntl(O_NONBLOCK) " << pipe_name; |
+ if (HANDLE_EINTR(close(fd)) < 0) |
+ PLOG(ERROR) << "close " << pipe_name; |
+ return false; |
+ } |
+ |
+ // Create server side of socket. |
+ struct sockaddr_un server_unix_addr; |
+ memset(&server_unix_addr, 0, sizeof(server_unix_addr)); |
+ server_unix_addr.sun_family = AF_UNIX; |
+ int path_len = snprintf(server_unix_addr.sun_path, IPC::kMaxPipeNameLength, |
+ "%s", pipe_name.c_str()); |
+ DCHECK_EQ(static_cast<int>(pipe_name.length()), path_len); |
+ size_t server_unix_addr_len = offsetof(struct sockaddr_un, |
+ sun_path) + path_len + 1; |
+ |
+ if (HANDLE_EINTR(connect(fd, reinterpret_cast<sockaddr*>(&server_unix_addr), |
+ server_unix_addr_len)) != 0) { |
+ PLOG(ERROR) << "connect " << pipe_name; |
+ if (HANDLE_EINTR(close(fd)) < 0) |
+ PLOG(ERROR) << "close " << pipe_name; |
+ return false; |
+ } |
+ |
+ *client_socket = fd; |
+ return true; |
+} |
+ |
bool SocketWriteErrorIsRecoverable() { |
#if defined(OS_MACOSX) |
// On OS X if sendmsg() is trying to send fds between processes and there |
@@ -252,22 +388,14 @@ |
} else if (mode_ & MODE_NAMED_FLAG) { |
// Case 2 from comment above. |
if (mode_ & MODE_SERVER_FLAG) { |
- if (!CreateServerUnixDomainSocket(base::FilePath(pipe_name_), |
- &local_pipe)) { |
+ if (!CreateServerUnixDomainSocket(pipe_name_, &local_pipe)) { |
return false; |
} |
must_unlink_ = true; |
} else if (mode_ & MODE_CLIENT_FLAG) { |
- if (!CreateClientUnixDomainSocket(base::FilePath(pipe_name_), |
- &local_pipe)) { |
+ if (!CreateClientUnixDomainSocket(pipe_name_, &local_pipe)) { |
return false; |
} |
- // Verify that the server has the same euid as the client. |
- if (!IPC::IsPeerAuthorized(local_pipe)) { |
- if (HANDLE_EINTR(close(local_pipe)) < 0) |
- PLOG(ERROR) << "close " << pipe_name_; |
- return false; |
- } |
} else { |
LOG(ERROR) << "Bad mode: " << mode_; |
return false; |
@@ -546,9 +674,33 @@ |
return AcceptsConnections() && pipe_ != -1; |
} |
-bool Channel::ChannelImpl::GetPeerEuid(uid_t* peer_euid) const { |
- DCHECK(!(mode_ & MODE_SERVER) || HasAcceptedConnection()); |
- return IPC::GetPeerEuid(pipe_, peer_euid); |
+bool Channel::ChannelImpl::GetClientEuid(uid_t* client_euid) const { |
+ DCHECK(HasAcceptedConnection()); |
+#if defined(OS_MACOSX) || defined(OS_OPENBSD) |
+ uid_t peer_euid; |
+ gid_t peer_gid; |
+ if (getpeereid(pipe_, &peer_euid, &peer_gid) != 0) { |
+ PLOG(ERROR) << "getpeereid " << pipe_; |
+ return false; |
+ } |
+ *client_euid = peer_euid; |
+ return true; |
+#elif defined(OS_SOLARIS) |
+ return false; |
+#else |
+ struct ucred cred; |
+ socklen_t cred_len = sizeof(cred); |
+ if (getsockopt(pipe_, SOL_SOCKET, SO_PEERCRED, &cred, &cred_len) != 0) { |
+ PLOG(ERROR) << "getsockopt " << pipe_; |
+ return false; |
+ } |
+ if (static_cast<unsigned>(cred_len) < sizeof(cred)) { |
+ NOTREACHED() << "Truncated ucred from SO_PEERCRED?"; |
+ return false; |
+ } |
+ *client_euid = cred.uid; |
+ return true; |
+#endif |
} |
void Channel::ChannelImpl::ResetToAcceptingConnectionState() { |
@@ -601,8 +753,7 @@ |
bool send_server_hello_msg = false; |
if (fd == server_listen_pipe_) { |
int new_pipe = 0; |
- if (!ServerAcceptConnection(server_listen_pipe_, &new_pipe) || |
- new_pipe < 0) { |
+ if (!ServerAcceptConnection(server_listen_pipe_, &new_pipe)) { |
Close(); |
listener()->OnChannelListenError(); |
} |
@@ -622,7 +773,7 @@ |
if ((mode_ & MODE_OPEN_ACCESS_FLAG) == 0) { |
// Verify that the IPC channel peer is running as the same user. |
uid_t client_euid; |
- if (!GetPeerEuid(&client_euid)) { |
+ if (!GetClientEuid(&client_euid)) { |
DLOG(ERROR) << "Unable to query client euid"; |
ResetToAcceptingConnectionState(); |
return; |
@@ -1006,8 +1157,8 @@ |
return channel_impl_->HasAcceptedConnection(); |
} |
-bool Channel::GetPeerEuid(uid_t* peer_euid) const { |
- return channel_impl_->GetPeerEuid(peer_euid); |
+bool Channel::GetClientEuid(uid_t* client_euid) const { |
+ return channel_impl_->GetClientEuid(client_euid); |
} |
void Channel::ResetToAcceptingConnectionState() { |