15263807472

/* SPDX-License-Identifier: LGPL-2.1-or-later */

#include <stdio.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <unistd.h>

#include "alloc-util.h"
#include "errno-util.h"
#include "fd-util.h"
#include "memfd-util.h"
#include "missing_mman.h"
#include "missing_sched.h"
#include "string-util.h"
#include "utf8.h"

int memfd_create_wrapper(const char *name, unsigned mode) {
        unsigned mode_compat;
        int mfd;

        assert(name);

        /* Wrapper around memfd_create() which adds compat with older kernels where memfd_create() didn't
         * support MFD_EXEC/MFD_NOEXEC_SEAL. (kernel 6.3+) */

        mfd = RET_NERRNO(memfd_create(name, mode));
        if (mfd != -EINVAL)
                return mfd;

        mode_compat = mode & ~(MFD_EXEC | MFD_NOEXEC_SEAL);

        if (mode == mode_compat)
                return mfd;

        return RET_NERRNO(memfd_create(name, mode_compat));
}

int memfd_new_full(const char *name, unsigned extra_flags) {
        _cleanup_free_ char *g = NULL;

        if (!name) {
                char pr[TASK_COMM_LEN] = {};

                /* If no name is specified we generate one. We include
                 * a hint indicating our library implementation, and
                 * add the thread name to it */

                assert_se(prctl(PR_GET_NAME, (unsigned long) pr) >= 0);

                if (isempty(pr))
                        name = "sd";
                else {
                        _cleanup_free_ char *e = NULL;

                        e = utf8_escape_invalid(pr);
                        if (!e)
                                return -ENOMEM;

                        g = strjoin("sd-", e);
                        if (!g)
                                return -ENOMEM;

                        name = g;
                }
        }

        return memfd_create_wrapper(
                        name,
                        MFD_CLOEXEC | MFD_NOEXEC_SEAL | extra_flags);
}

static int memfd_add_seals(int fd, unsigned seals) {
        assert(fd >= 0);

        return RET_NERRNO(fcntl(fd, F_ADD_SEALS, seals));
}

static int memfd_get_seals(int fd, unsigned *ret_seals) {
        int r;

        assert(fd >= 0);

        r = RET_NERRNO(fcntl(fd, F_GET_SEALS));
        if (r < 0)
                return r;

        if (ret_seals)
                *ret_seals = r;
        return 0;
}

int memfd_set_sealed(int fd) {
        return memfd_add_seals(fd, F_SEAL_SEAL | F_SEAL_SHRINK | F_SEAL_GROW | F_SEAL_WRITE);
}

int memfd_get_sealed(int fd) {
        unsigned seals;
        int r;

        r = memfd_get_seals(fd, &seals);
        if (r < 0)
                return r;

        /* We ignore F_SEAL_EXEC here to support older kernels. */
        return FLAGS_SET(seals, F_SEAL_SHRINK | F_SEAL_GROW | F_SEAL_WRITE);
}

int memfd_get_size(int fd, uint64_t *ret) {
        struct stat stat;

        assert(fd >= 0);
        assert(ret);

        if (fstat(fd, &stat) < 0)
                return -errno;

        *ret = stat.st_size;
        return 0;
}

int memfd_set_size(int fd, uint64_t sz) {
        assert(fd >= 0);

        return RET_NERRNO(ftruncate(fd, sz));
}

int memfd_new_and_seal(const char *name, const void *data, size_t sz) {
        _cleanup_close_ int fd = -EBADF;
        int r;

        assert(data || sz == 0);

        if (sz == SIZE_MAX)
                sz = strlen(data);

        fd = memfd_new_full(name, MFD_ALLOW_SEALING);
        if (fd < 0)
                return fd;

        if (sz > 0) {
                ssize_t n = pwrite(fd, data, sz, 0);
                if (n < 0)
                        return -errno;
                if ((size_t) n != sz)
                        return -EIO;
        }

        r = memfd_set_sealed(fd);
        if (r < 0)
                return r;

        return TAKE_FD(fd);
}

1	/* SPDX-License-Identifier: LGPL-2.1-or-later */
2
3	#include <stdio.h>
4	#include <sys/prctl.h>
5	#include <sys/stat.h>
6	#include <unistd.h>
7
8	#include "alloc-util.h"
9	#include "errno-util.h"
10	#include "fd-util.h"
11	#include "memfd-util.h"
12	#include "missing_mman.h"
13	#include "missing_sched.h"
14	#include "string-util.h"
15	#include "utf8.h"
16
17	int memfd_create_wrapper(const char *name, unsigned mode) {	4,691✔
18	unsigned mode_compat;	4,691✔
19	int mfd;	4,691✔
20
21	assert(name);	4,691✔
22
23	/* Wrapper around memfd_create() which adds compat with older kernels where memfd_create() didn't
24	* support MFD_EXEC/MFD_NOEXEC_SEAL. (kernel 6.3+) */
25
26	mfd = RET_NERRNO(memfd_create(name, mode));	4,691✔
UNCOV 27	if (mfd != -EINVAL)	×
28	return mfd;	4,691✔
29
UNCOV 30	mode_compat = mode & ~(MFD_EXEC \| MFD_NOEXEC_SEAL);	×
31
UNCOV 32	if (mode == mode_compat)	×
33	return mfd;
34
UNCOV 35	return RET_NERRNO(memfd_create(name, mode_compat));	×
36	}
37
38	int memfd_new_full(const char *name, unsigned extra_flags) {	4,690✔
39	_cleanup_free_ char *g = NULL;	4,690✔
40
41	if (!name) {	4,690✔
UNCOV 42	char pr[TASK_COMM_LEN] = {};	×
43
44	/* If no name is specified we generate one. We include
45	* a hint indicating our library implementation, and
46	* add the thread name to it */
47
UNCOV 48	assert_se(prctl(PR_GET_NAME, (unsigned long) pr) >= 0);	×
49
UNCOV 50	if (isempty(pr))	×
51	name = "sd";
52	else {
UNCOV 53	_cleanup_free_ char *e = NULL;	×
54
UNCOV 55	e = utf8_escape_invalid(pr);	×
UNCOV 56	if (!e)	×
57	return -ENOMEM;
58
59	g = strjoin("sd-", e);	×
60	if (!g)	×
61	return -ENOMEM;
62
63	name = g;	×
64	}
65	}
66
67	return memfd_create_wrapper(	4,690✔
68	name,
69	MFD_CLOEXEC \| MFD_NOEXEC_SEAL \| extra_flags);
70	}
71
72	static int memfd_add_seals(int fd, unsigned seals) {	4,581✔
73	assert(fd >= 0);	4,581✔
74
75	return RET_NERRNO(fcntl(fd, F_ADD_SEALS, seals));	4,581✔
76	}
77
78	static int memfd_get_seals(int fd, unsigned *ret_seals) {	2✔
79	int r;	2✔
80
81	assert(fd >= 0);	2✔
82
83	r = RET_NERRNO(fcntl(fd, F_GET_SEALS));	2✔
UNCOV 84	if (r < 0)	×
85	return r;
86
87	if (ret_seals)	2✔
88	*ret_seals = r;	2✔
89	return 0;
90	}
91
92	int memfd_set_sealed(int fd) {	4,581✔
93	return memfd_add_seals(fd, F_SEAL_SEAL \| F_SEAL_SHRINK \| F_SEAL_GROW \| F_SEAL_WRITE);	4,581✔
94	}
95
96	int memfd_get_sealed(int fd) {	2✔
97	unsigned seals;	2✔
98	int r;	2✔
99
100	r = memfd_get_seals(fd, &seals);	2✔
101	if (r < 0)	2✔
102	return r;	2✔
103
104	/* We ignore F_SEAL_EXEC here to support older kernels. */
105	return FLAGS_SET(seals, F_SEAL_SHRINK \| F_SEAL_GROW \| F_SEAL_WRITE);	2✔
106	}
107
108	int memfd_get_size(int fd, uint64_t *ret) {	3✔
109	struct stat stat;	3✔
110
111	assert(fd >= 0);	3✔
112	assert(ret);	3✔
113
114	if (fstat(fd, &stat) < 0)	3✔
UNCOV 115	return -errno;	×
116
117	*ret = stat.st_size;	3✔
118	return 0;	3✔
119	}
120
121	int memfd_set_size(int fd, uint64_t sz) {	2✔
122	assert(fd >= 0);	2✔
123
124	return RET_NERRNO(ftruncate(fd, sz));	2✔
125	}
126
127	int memfd_new_and_seal(const char name, const void data, size_t sz) {	184✔
128	_cleanup_close_ int fd = -EBADF;	184✔
129	int r;	184✔
130
131	assert(data \|\| sz == 0);	184✔
132
133	if (sz == SIZE_MAX)	184✔
134	sz = strlen(data);	183✔
135
136	fd = memfd_new_full(name, MFD_ALLOW_SEALING);	184✔
137	if (fd < 0)	184✔
138	return fd;
139
140	if (sz > 0) {	184✔
141	ssize_t n = pwrite(fd, data, sz, 0);	184✔
142	if (n < 0)	184✔
UNCOV 143	return -errno;	×
144	if ((size_t) n != sz)	184✔
145	return -EIO;
146	}
147
148	r = memfd_set_sealed(fd);	184✔
149	if (r < 0)	184✔
UNCOV 150	return r;	×
151
152	return TAKE_FD(fd);
153	}

systemd / systemd / 15263807472

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous