| /* | |
| * Copyright (C) 2007 Jeff Dike (jdike@{addtoit,linux.intel}.com) | |
| * Licensed under the GPL | |
| */ | |
| #include <stdio.h> | |
| #include <stddef.h> | |
| #include <stdlib.h> | |
| #include <unistd.h> | |
| #include <errno.h> | |
| #include <fcntl.h> | |
| #include <string.h> | |
| #include <sys/stat.h> | |
| #include <sys/mman.h> | |
| #include <sys/param.h> | |
| #include <init.h> | |
| #include <os.h> | |
| /* Modified by which_tmpdir, which is called during early boot */ | |
| static char *default_tmpdir = "/tmp"; | |
| /* | |
| * Modified when creating the physical memory file and when checking | |
| * the tmp filesystem for usability, both happening during early boot. | |
| */ | |
| static char *tempdir = NULL; | |
| static void __init find_tempdir(void) | |
| { | |
| const char *dirs[] = { "TMP", "TEMP", "TMPDIR", NULL }; | |
| int i; | |
| char *dir = NULL; | |
| if (tempdir != NULL) | |
| /* We've already been called */ | |
| return; | |
| for (i = 0; dirs[i]; i++) { | |
| dir = getenv(dirs[i]); | |
| if ((dir != NULL) && (*dir != '\0')) | |
| break; | |
| } | |
| if ((dir == NULL) || (*dir == '\0')) | |
| dir = default_tmpdir; | |
| tempdir = malloc(strlen(dir) + 2); | |
| if (tempdir == NULL) { | |
| fprintf(stderr, "Failed to malloc tempdir, " | |
| "errno = %d\n", errno); | |
| return; | |
| } | |
| strcpy(tempdir, dir); | |
| strcat(tempdir, "/"); | |
| } | |
| /* | |
| * Remove bytes from the front of the buffer and refill it so that if there's a | |
| * partial string that we care about, it will be completed, and we can recognize | |
| * it. | |
| */ | |
| static int pop(int fd, char *buf, size_t size, size_t npop) | |
| { | |
| ssize_t n; | |
| size_t len = strlen(&buf[npop]); | |
| memmove(buf, &buf[npop], len + 1); | |
| n = read(fd, &buf[len], size - len - 1); | |
| if (n < 0) | |
| return -errno; | |
| buf[len + n] = '\0'; | |
| return 1; | |
| } | |
| /* | |
| * This will return 1, with the first character in buf being the | |
| * character following the next instance of c in the file. This will | |
| * read the file as needed. If there's an error, -errno is returned; | |
| * if the end of the file is reached, 0 is returned. | |
| */ | |
| static int next(int fd, char *buf, size_t size, char c) | |
| { | |
| ssize_t n; | |
| char *ptr; | |
| while ((ptr = strchr(buf, c)) == NULL) { | |
| n = read(fd, buf, size - 1); | |
| if (n == 0) | |
| return 0; | |
| else if (n < 0) | |
| return -errno; | |
| buf[n] = '\0'; | |
| } | |
| return pop(fd, buf, size, ptr - buf + 1); | |
| } | |
| /* | |
| * Decode an octal-escaped and space-terminated path of the form used by | |
| * /proc/mounts. May be used to decode a path in-place. "out" must be at least | |
| * as large as the input. The output is always null-terminated. "len" gets the | |
| * length of the output, excluding the trailing null. Returns 0 if a full path | |
| * was successfully decoded, otherwise an error. | |
| */ | |
| static int decode_path(const char *in, char *out, size_t *len) | |
| { | |
| char *first = out; | |
| int c; | |
| int i; | |
| int ret = -EINVAL; | |
| while (1) { | |
| switch (*in) { | |
| case '\0': | |
| goto out; | |
| case ' ': | |
| ret = 0; | |
| goto out; | |
| case '\\': | |
| in++; | |
| c = 0; | |
| for (i = 0; i < 3; i++) { | |
| if (*in < '0' || *in > '7') | |
| goto out; | |
| c = (c << 3) | (*in++ - '0'); | |
| } | |
| *(unsigned char *)out++ = (unsigned char) c; | |
| break; | |
| default: | |
| *out++ = *in++; | |
| break; | |
| } | |
| } | |
| out: | |
| *out = '\0'; | |
| *len = out - first; | |
| return ret; | |
| } | |
| /* | |
| * Computes the length of s when encoded with three-digit octal escape sequences | |
| * for the characters in chars. | |
| */ | |
| static size_t octal_encoded_length(const char *s, const char *chars) | |
| { | |
| size_t len = strlen(s); | |
| while ((s = strpbrk(s, chars)) != NULL) { | |
| len += 3; | |
| s++; | |
| } | |
| return len; | |
| } | |
| enum { | |
| OUTCOME_NOTHING_MOUNTED, | |
| OUTCOME_TMPFS_MOUNT, | |
| OUTCOME_NON_TMPFS_MOUNT, | |
| }; | |
| /* Read a line of /proc/mounts data looking for a tmpfs mount at "path". */ | |
| static int read_mount(int fd, char *buf, size_t bufsize, const char *path, | |
| int *outcome) | |
| { | |
| int found; | |
| int match; | |
| char *space; | |
| size_t len; | |
| enum { | |
| MATCH_NONE, | |
| MATCH_EXACT, | |
| MATCH_PARENT, | |
| }; | |
| found = next(fd, buf, bufsize, ' '); | |
| if (found != 1) | |
| return found; | |
| /* | |
| * If there's no following space in the buffer, then this path is | |
| * truncated, so it can't be the one we're looking for. | |
| */ | |
| space = strchr(buf, ' '); | |
| if (space) { | |
| match = MATCH_NONE; | |
| if (!decode_path(buf, buf, &len)) { | |
| if (!strcmp(buf, path)) | |
| match = MATCH_EXACT; | |
| else if (!strncmp(buf, path, len) | |
| && (path[len] == '/' || !strcmp(buf, "/"))) | |
| match = MATCH_PARENT; | |
| } | |
| found = pop(fd, buf, bufsize, space - buf + 1); | |
| if (found != 1) | |
| return found; | |
| switch (match) { | |
| case MATCH_EXACT: | |
| if (!strncmp(buf, "tmpfs", strlen("tmpfs"))) | |
| *outcome = OUTCOME_TMPFS_MOUNT; | |
| else | |
| *outcome = OUTCOME_NON_TMPFS_MOUNT; | |
| break; | |
| case MATCH_PARENT: | |
| /* This mount obscures any previous ones. */ | |
| *outcome = OUTCOME_NOTHING_MOUNTED; | |
| break; | |
| } | |
| } | |
| return next(fd, buf, bufsize, '\n'); | |
| } | |
| /* which_tmpdir is called only during early boot */ | |
| static int checked_tmpdir = 0; | |
| /* | |
| * Look for a tmpfs mounted at /dev/shm. I couldn't find a cleaner | |
| * way to do this than to parse /proc/mounts. statfs will return the | |
| * same filesystem magic number and fs id for both /dev and /dev/shm | |
| * when they are both tmpfs, so you can't tell if they are different | |
| * filesystems. Also, there seems to be no other way of finding the | |
| * mount point of a filesystem from within it. | |
| * | |
| * If a /dev/shm tmpfs entry is found, then we switch to using it. | |
| * Otherwise, we stay with the default /tmp. | |
| */ | |
| static void which_tmpdir(void) | |
| { | |
| int fd; | |
| int found; | |
| int outcome; | |
| char *path; | |
| char *buf; | |
| size_t bufsize; | |
| if (checked_tmpdir) | |
| return; | |
| checked_tmpdir = 1; | |
| printf("Checking for tmpfs mount on /dev/shm..."); | |
| path = realpath("/dev/shm", NULL); | |
| if (!path) { | |
| printf("failed to check real path, errno = %d\n", errno); | |
| return; | |
| } | |
| printf("%s...", path); | |
| /* | |
| * The buffer needs to be able to fit the full octal-escaped path, a | |
| * space, and a trailing null in order to successfully decode it. | |
| */ | |
| bufsize = octal_encoded_length(path, " \t\n\\") + 2; | |
| if (bufsize < 128) | |
| bufsize = 128; | |
| buf = malloc(bufsize); | |
| if (!buf) { | |
| printf("malloc failed, errno = %d\n", errno); | |
| goto out; | |
| } | |
| buf[0] = '\0'; | |
| fd = open("/proc/mounts", O_RDONLY); | |
| if (fd < 0) { | |
| printf("failed to open /proc/mounts, errno = %d\n", errno); | |
| goto out1; | |
| } | |
| outcome = OUTCOME_NOTHING_MOUNTED; | |
| while (1) { | |
| found = read_mount(fd, buf, bufsize, path, &outcome); | |
| if (found != 1) | |
| break; | |
| } | |
| if (found < 0) { | |
| printf("read returned errno %d\n", -found); | |
| } else { | |
| switch (outcome) { | |
| case OUTCOME_TMPFS_MOUNT: | |
| printf("OK\n"); | |
| default_tmpdir = "/dev/shm"; | |
| break; | |
| case OUTCOME_NON_TMPFS_MOUNT: | |
| printf("not tmpfs\n"); | |
| break; | |
| default: | |
| printf("nothing mounted on /dev/shm\n"); | |
| break; | |
| } | |
| } | |
| close(fd); | |
| out1: | |
| free(buf); | |
| out: | |
| free(path); | |
| } | |
| static int __init make_tempfile(const char *template, char **out_tempname, | |
| int do_unlink) | |
| { | |
| char *tempname; | |
| int fd; | |
| which_tmpdir(); | |
| tempname = malloc(MAXPATHLEN); | |
| if (tempname == NULL) | |
| return -1; | |
| find_tempdir(); | |
| if ((tempdir == NULL) || (strlen(tempdir) >= MAXPATHLEN)) | |
| goto out; | |
| if (template[0] != '/') | |
| strcpy(tempname, tempdir); | |
| else | |
| tempname[0] = '\0'; | |
| strncat(tempname, template, MAXPATHLEN-1-strlen(tempname)); | |
| fd = mkstemp(tempname); | |
| if (fd < 0) { | |
| fprintf(stderr, "open - cannot create %s: %s\n", tempname, | |
| strerror(errno)); | |
| goto out; | |
| } | |
| if (do_unlink && (unlink(tempname) < 0)) { | |
| perror("unlink"); | |
| goto close; | |
| } | |
| if (out_tempname) { | |
| *out_tempname = tempname; | |
| } else | |
| free(tempname); | |
| return fd; | |
| close: | |
| close(fd); | |
| out: | |
| free(tempname); | |
| return -1; | |
| } | |
| #define TEMPNAME_TEMPLATE "vm_file-XXXXXX" | |
| static int __init create_tmp_file(unsigned long long len) | |
| { | |
| int fd, err; | |
| char zero; | |
| fd = make_tempfile(TEMPNAME_TEMPLATE, NULL, 1); | |
| if (fd < 0) | |
| exit(1); | |
| err = fchmod(fd, 0777); | |
| if (err < 0) { | |
| perror("fchmod"); | |
| exit(1); | |
| } | |
| /* | |
| * Seek to len - 1 because writing a character there will | |
| * increase the file size by one byte, to the desired length. | |
| */ | |
| if (lseek64(fd, len - 1, SEEK_SET) < 0) { | |
| perror("lseek64"); | |
| exit(1); | |
| } | |
| zero = 0; | |
| err = write(fd, &zero, 1); | |
| if (err != 1) { | |
| perror("write"); | |
| exit(1); | |
| } | |
| return fd; | |
| } | |
| int __init create_mem_file(unsigned long long len) | |
| { | |
| int err, fd; | |
| fd = create_tmp_file(len); | |
| err = os_set_exec_close(fd); | |
| if (err < 0) { | |
| errno = -err; | |
| perror("exec_close"); | |
| } | |
| return fd; | |
| } | |
| void __init check_tmpexec(void) | |
| { | |
| void *addr; | |
| int err, fd = create_tmp_file(UM_KERN_PAGE_SIZE); | |
| addr = mmap(NULL, UM_KERN_PAGE_SIZE, | |
| PROT_READ | PROT_WRITE | PROT_EXEC, MAP_PRIVATE, fd, 0); | |
| printf("Checking PROT_EXEC mmap in %s...",tempdir); | |
| fflush(stdout); | |
| if (addr == MAP_FAILED) { | |
| err = errno; | |
| perror("failed"); | |
| close(fd); | |
| if (err == EPERM) | |
| printf("%s must be not mounted noexec\n",tempdir); | |
| exit(1); | |
| } | |
| printf("OK\n"); | |
| munmap(addr, UM_KERN_PAGE_SIZE); | |
| close(fd); | |
| } |