/*
- * $Id: cnid.c,v 1.4 2008-12-03 18:35:44 didg Exp $
+ * $Id: cnid.c,v 1.12 2009-12-08 22:33:33 didg Exp $
*
* Copyright (c) 2003 the Netatalk Team
* Copyright (c) 2003 Rafal Lewczuk <rlewczuk@pronet.pl>
static sigset_t sigblockset;
static const struct itimerval none = {{0, 0}, {0, 0}};
-static struct itimerval savetimer;
/* Registers new CNID backend module. */
return NULL;
}
- if ((mod->flags & CNID_FLAG_SETUID)) {
+ if ((mod->flags & CNID_FLAG_SETUID) && !(flags & CNID_FLAG_MEMORY)) {
uid = geteuid();
gid = getegid();
if (seteuid(0)) {
}
}
- db = mod->cnid_open(volpath, mask);
+ db = mod->cnid_open(volpath, mask, flags);
- if ((mod->flags & CNID_FLAG_SETUID)) {
+ if ((mod->flags & CNID_FLAG_SETUID) && !(flags & CNID_FLAG_MEMORY)) {
seteuid(0);
if ( setegid(gid) < 0 || seteuid(uid) < 0) {
LOG(log_error, logtype_afpd, "can't seteuid back %s", strerror(errno));
return NULL;
}
/* FIXME should module know about it ? */
- if (flags) {
+ if ((flags & CNID_FLAG_NODEV)) {
db->flags |= CNID_FLAG_NODEV;
}
db->flags |= mod->flags;
sigaddset(&sigblockset, SIGTERM);
sigaddset(&sigblockset, SIGHUP);
sigaddset(&sigblockset, SIGUSR1);
+ sigaddset(&sigblockset, SIGUSR2);
sigaddset(&sigblockset, SIGALRM);
}
{
if ((flags & CNID_FLAG_BLOCK)) {
sigprocmask(SIG_BLOCK, &sigblockset, NULL);
- setitimer(ITIMER_REAL, &none, &savetimer);
}
}
static void unblock_signal(u_int32_t flags)
{
if ((flags & CNID_FLAG_BLOCK)) {
- setitimer(ITIMER_REAL, &savetimer, NULL);
sigprocmask(SIG_UNBLOCK, &sigblockset, NULL);
}
}
+/* -------------------
+ protect against bogus value from the DB.
+ adddir really doesn't like 2
+*/
+static cnid_t valide(cnid_t id)
+{
+ if (id == CNID_INVALID)
+ return id;
+
+ if (id < CNID_START) {
+ static int err = 0;
+ if (!err) {
+ err = 1;
+ LOG(log_error, logtype_afpd, "Error: Invalid cnid, corrupted DB?");
+ }
+ return CNID_INVALID;
+ }
+ return id;
+}
+
/* Closes CNID database. Currently it's just a wrapper around db->cnid_close(). */
void cnid_close(struct _cnid_db *db)
{
cnid_t ret;
block_signal(cdb->flags);
- ret = cdb->cnid_add(cdb, st, did, name, len, hint);
+ ret = valide(cdb->cnid_add(cdb, st, did, name, len, hint));
unblock_signal(cdb->flags);
return ret;
}
cnid_t ret;
block_signal(cdb->flags);
- ret = cdb->cnid_get(cdb, did, name, len);
+ ret = valide(cdb->cnid_get(cdb, did, name, len));
unblock_signal(cdb->flags);
return ret;
}
cnid_t ret;
block_signal(cdb->flags);
- ret = cdb->cnid_lookup(cdb, st, did, name, len);
+ ret = valide(cdb->cnid_lookup(cdb, st, did, name, len));
unblock_signal(cdb->flags);
return ret;
}
block_signal(cdb->flags);
ret = cdb->cnid_resolve(cdb, id, buffer, len);
unblock_signal(cdb->flags);
+ if (ret && !strcmp(ret, "..")) {
+ LOG(log_error, logtype_afpd, "cnid_resolve: name is '..', corrupted db? ");
+ ret = NULL;
+ }
return ret;
}