From patchwork Mon Mar 13 19:34:17 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adhemerval Zanella Netto X-Patchwork-Id: 66318 Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 248363857C48 for ; Mon, 13 Mar 2023 19:35:35 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 248363857C48 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1678736135; bh=sbVapDEdL6qaQx2ZlaGHEmhbuaUvb2kNgUO3WTy/rDQ=; h=To:Subject:Date:In-Reply-To:References:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To: From; b=nAnDGj9UjvxamxL1HO5HaO3GCpNAAQmPOQ9DvVOebIrJVJppnLozzaoHRUo/z9H6x RPqav2jHlpiaHXDlPKzkAxCFsSgdoYIsWHKLJLvac3CPJqExziTD2blo5c792LlHB0 HNssRkWBuwviyQoOdN9rnXj00jt23Sy51HV9sB5o= X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from mail-oi1-x22f.google.com (mail-oi1-x22f.google.com [IPv6:2607:f8b0:4864:20::22f]) by sourceware.org (Postfix) with ESMTPS id CB3C23858D32 for ; Mon, 13 Mar 2023 19:34:27 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org CB3C23858D32 Received: by mail-oi1-x22f.google.com with SMTP id bp19so10261556oib.4 for ; Mon, 13 Mar 2023 12:34:27 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678736066; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=sbVapDEdL6qaQx2ZlaGHEmhbuaUvb2kNgUO3WTy/rDQ=; b=Q9S/UPKmZfHRD3kV70WpNJUqGEWTb66u8KfMeYFTKKwfkDUN9Ckx3k4zIRumBQRocs 2AAlriLyJ2ur3jxUe4+Afyhaelj9clBfyYH4qBc3l2T0MwHRtmjLPJw4I4XQFn4rXg// KvmSmRKvLKDRYYtWz8AxGmZI8bvVqmA8DNL+/sT06pMyBvC3KBCcEwKGgOdaEXrS//Nw wXL/u7wvW9m1GKRpB7oAWI/DFZI5m8HYQT+9V6nqlPmFkVUyF9WczOe2UWqZ2gcZUdHV pwt14Yjgw+CyFkaL3Fs7J4oYD+eCLZcmFfZ8JxTzvRJOyakyXt3FADX12iiIi7OBK7eb koaA== X-Gm-Message-State: AO0yUKUsSt1Ci31Z34pg2KUWV6p62dGMrrZ2BXce0La/I3/mTEJS+ueO 0krPU2odmgCk24EOBHE05jRYkFXN1lsO6JX/ONjYfA== X-Google-Smtp-Source: AK7set+FbEwNfjN1QVtH4BozTCkqz5gYp1ymei4u7JHwehTy+J8J0h0KXtkD0kaALCbpxniYVqDuGA== X-Received: by 2002:a05:6808:2014:b0:383:e169:cf6 with SMTP id q20-20020a056808201400b00383e1690cf6mr6314690oiw.24.1678736066391; Mon, 13 Mar 2023 12:34:26 -0700 (PDT) Received: from mandiga.. ([2804:1b3:a7c0:544b:9bad:e673:fbfa:30eb]) by smtp.gmail.com with ESMTPSA id zf9-20020a0568716a8900b00172426ebe58sm325724oab.27.2023.03.13.12.34.24 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Mar 2023 12:34:25 -0700 (PDT) To: libc-alpha@sourceware.org, "Andreas K . Huettel" , Paul Eggert , Florian Weimer Subject: [PATCH v7 1/3] linux: Use getdents64 on non-LFS readdir Date: Mon, 13 Mar 2023 16:34:17 -0300 Message-Id: <20230313193419.36985-2-adhemerval.zanella@linaro.org> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20230313193419.36985-1-adhemerval.zanella@linaro.org> References: <20230313193419.36985-1-adhemerval.zanella@linaro.org> MIME-Version: 1.0 X-Spam-Status: No, score=-12.2 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Patchwork-Original-From: Adhemerval Zanella via Libc-alpha From: Adhemerval Zanella Netto Reply-To: Adhemerval Zanella Errors-To: libc-alpha-bounces+patchwork=sourceware.org@sourceware.org Sender: "Libc-alpha" It is similar to what non-LFS getdents do (including overflow check). Checked on x86_64-linux-gnu and i686-linux-gnu. --- sysdeps/unix/sysv/linux/readdir.c | 97 +++++++++++++++++++++++-------- 1 file changed, 73 insertions(+), 24 deletions(-) diff --git a/sysdeps/unix/sysv/linux/readdir.c b/sysdeps/unix/sysv/linux/readdir.c index 4a4c00ea07..72ba895afe 100644 --- a/sysdeps/unix/sysv/linux/readdir.c +++ b/sysdeps/unix/sysv/linux/readdir.c @@ -20,43 +20,92 @@ #if !_DIRENT_MATCHES_DIRENT64 #include +#include + +# ifndef DIRENT_SET_DP_INO +# define DIRENT_SET_DP_INO(dp, value) (dp)->d_ino = (value) +# endif /* Read a directory entry from DIRP. */ struct dirent * __readdir_unlocked (DIR *dirp) { - struct dirent *dp; int saved_errno = errno; - if (dirp->offset >= dirp->size) + while (1) { - /* We've emptied out our buffer. Refill it. */ - - size_t maxread = dirp->allocation; - ssize_t bytes; - - bytes = __getdents (dirp->fd, dirp->data, maxread); - if (bytes <= 0) + if (dirp->offset >= dirp->size) { - /* Linux may fail with ENOENT on some file systems if the - directory inode is marked as dead (deleted). POSIX - treats this as a regular end-of-directory condition, so - do not set errno in that case, to indicate success. */ - if (bytes == 0 || errno == ENOENT) - __set_errno (saved_errno); + ssize_t bytes = __getdents64 (dirp->fd, dirp->data, + dirp->allocation); + if (bytes <= 0) + { + /* Linux may fail with ENOENT on some file systems if the + directory inode is marked as dead (deleted). POSIX + treats this as a regular end-of-directory condition, so + do not set errno in that case, to indicate success. */ + if (bytes < 0 && errno == ENOENT) + __set_errno (saved_errno); + return NULL; + } + dirp->size = bytes; + + /* Reset the offset into the buffer. */ + dirp->offset = 0; + } + + /* These two pointers might alias the same memory buffer. Standard C + requires that we always use the same type for them, so we must use the + union type. */ + union + { + struct dirent64 dp64; + struct dirent dp; + char *b; + } *inp, *outp; + inp = (void*) &dirp->data[dirp->offset]; + outp = (void*) &dirp->data[dirp->offset]; + + const size_t size_diff = offsetof (struct dirent64, d_name) + - offsetof (struct dirent, d_name); + + /* Since inp->dp64.d_reclen is already aligned for the kernel structure + this may compute a value that is bigger than necessary. */ + size_t old_reclen = inp->dp64.d_reclen; + size_t new_reclen = ALIGN_UP (old_reclen - size_diff, + _Alignof (struct dirent)); + + if (!in_ino_t_range (inp->dp64.d_ino) + || !in_off_t_range (inp->dp64.d_off)) + { + /* Overflow. If there was at least one entry before this one, + return them without error, otherwise signal overflow. */ + if (dirp->offset != 0) + { + __lseek64 (dirp->fd, dirp->offset, SEEK_SET); + outp = (void*)(outp->b - dirp->data); + return &outp->dp; + } + __set_errno (EOVERFLOW); return NULL; } - dirp->size = (size_t) bytes; - /* Reset the offset into the buffer. */ - dirp->offset = 0; + /* Copy the data from INP and access only OUTP. */ + const uint64_t d_ino = inp->dp64.d_ino; + const int64_t d_off = inp->dp64.d_off; + const uint8_t d_type = inp->dp64.d_type; + outp->dp.d_ino = d_ino; + outp->dp.d_off = d_off; + outp->dp.d_reclen = new_reclen; + outp->dp.d_type = d_type; + memmove (outp->dp.d_name, inp->dp64.d_name, + old_reclen - offsetof (struct dirent64, d_name)); + + dirp->filepos = d_off; + dirp->offset += old_reclen; + + return &outp->dp; } - - dp = (struct dirent *) &dirp->data[dirp->offset]; - dirp->offset += dp->d_reclen; - dirp->filepos = dp->d_off; - - return dp; } struct dirent * From patchwork Mon Mar 13 19:34:18 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adhemerval Zanella Netto X-Patchwork-Id: 66316 Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 6D447385559F for ; Mon, 13 Mar 2023 19:34:56 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 6D447385559F DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1678736096; bh=q8bJLcInGYvtNiIzwDvtwXgEzHeWRGSONn+az+ZAKPo=; h=To:Subject:Date:In-Reply-To:References:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To: From; b=ZXNgtrtzZ3Bm/ohIFD6iqkvlq+1RgFpjRQrvo/OP//5rWFq2cuogGo/NeNicVh7F4 QYPvVjfHsGKPTPg10juYksRFVO9Gxh0aDyKphCLeXC4WtmGwgBHFwWouugBxTRI1i7 erG5J3MDxQ4sHPb7Lk5Bq4e6jLSOGubeXK27qf28= X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from mail-oa1-x2b.google.com (mail-oa1-x2b.google.com [IPv6:2001:4860:4864:20::2b]) by sourceware.org (Postfix) with ESMTPS id B4BDA3858D39 for ; Mon, 13 Mar 2023 19:34:29 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org B4BDA3858D39 Received: by mail-oa1-x2b.google.com with SMTP id 586e51a60fabf-176261d7f45so14891441fac.11 for ; Mon, 13 Mar 2023 12:34:29 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678736068; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=q8bJLcInGYvtNiIzwDvtwXgEzHeWRGSONn+az+ZAKPo=; b=iIaN8iHsoJeyXnjALBhUjbQC54FQSlxXWoK5ilIAlu39OvPUyvqgkkT5eP8ECIB/oF f4/Kuo8Ydi32P6S1mTqdNgEN2u9YBCDdZzxqzyjNT4PNogCk095SHcJuAdyv3m3CCmd5 zw1783iauLtDkQV0aJx/C8EuOA8oSOqHeVi/mNoeB7JmTzjXw1ukvgNyepmQaBRMDxRH 6+FDE59bdaumOA1ghL0TrhX/EZ88WP5kaQ2REXN4bFLE4U0cbB98PIQYfvpJRKlrztl6 6BR2N0/EDLT0x9L8x03SuAFnb70OnUlTFS/WP/B3/diNauuBWGqXJBQHXcemEEAT91BU 4Rjw== X-Gm-Message-State: AO0yUKVjKonFt94s8JRoyoaohEGEtI/shE3QFG0Dq5k7Qyy3LTohiMdv p+gjYLKaj2cPx/QBWbeMPG06O3UZU7x9+SuLDVpsJA== X-Google-Smtp-Source: AK7set/y1X4me82N9Zkj6y8qdzUUh/+tbKPKTMzRb+vDwM1CY56fRRd1XaLrnK5w8HMnkZK3asd/tA== X-Received: by 2002:a05:6870:12d0:b0:17a:a29d:aa96 with SMTP id 16-20020a05687012d000b0017aa29daa96mr319020oam.57.1678736068465; Mon, 13 Mar 2023 12:34:28 -0700 (PDT) Received: from mandiga.. ([2804:1b3:a7c0:544b:9bad:e673:fbfa:30eb]) by smtp.gmail.com with ESMTPSA id zf9-20020a0568716a8900b00172426ebe58sm325724oab.27.2023.03.13.12.34.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Mar 2023 12:34:27 -0700 (PDT) To: libc-alpha@sourceware.org, "Andreas K . Huettel" , Paul Eggert , Florian Weimer Subject: [PATCH v7 2/3] support: Add xreallocarray Date: Mon, 13 Mar 2023 16:34:18 -0300 Message-Id: <20230313193419.36985-3-adhemerval.zanella@linaro.org> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20230313193419.36985-1-adhemerval.zanella@linaro.org> References: <20230313193419.36985-1-adhemerval.zanella@linaro.org> MIME-Version: 1.0 X-Spam-Status: No, score=-12.3 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, KAM_SHORT, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Patchwork-Original-From: Adhemerval Zanella via Libc-alpha From: Adhemerval Zanella Netto Reply-To: Adhemerval Zanella Errors-To: libc-alpha-bounces+patchwork=sourceware.org@sourceware.org Sender: "Libc-alpha" As a wrapper over reallocarray. --- support/Makefile | 1 + support/support.h | 2 ++ support/xreallocarray.c | 29 +++++++++++++++++++++++++++++ 3 files changed, 32 insertions(+) create mode 100644 support/xreallocarray.c diff --git a/support/Makefile b/support/Makefile index 05b31159ea..461247827d 100644 --- a/support/Makefile +++ b/support/Makefile @@ -194,6 +194,7 @@ libsupport-routines = \ xraise \ xreadlink \ xrealloc \ + xreallocarray \ xrecvfrom \ xsendto \ xsetlocale \ diff --git a/support/support.h b/support/support.h index 525ff1ebce..741e4c5c2a 100644 --- a/support/support.h +++ b/support/support.h @@ -107,6 +107,8 @@ extern void *xcalloc (size_t n, size_t s) __returns_nonnull; extern void *xrealloc (void *o, size_t n) __attribute_malloc__ __attribute_alloc_size__ ((2)) __attr_dealloc_free; +extern void *xreallocarray (void *p, size_t n, size_t s) + __attribute_alloc_size__ ((2, 3)) __attr_dealloc_free; extern char *xstrdup (const char *) __attribute_malloc__ __attr_dealloc_free __returns_nonnull; void *xposix_memalign (size_t alignment, size_t n) diff --git a/support/xreallocarray.c b/support/xreallocarray.c new file mode 100644 index 0000000000..74fdaa421b --- /dev/null +++ b/support/xreallocarray.c @@ -0,0 +1,29 @@ +/* Error-checking wrapper for reallocarray + Copyright (C) 2016-2023 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#include +#include + +void * +xreallocarray (void *p, size_t n, size_t s) +{ + void *r = reallocarray (p, n, s); + if (r == NULL && (p == NULL || (n != 0 && s != 0))) + oom_error ("reallocarray", n); + return r; +} From patchwork Mon Mar 13 19:34:19 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adhemerval Zanella Netto X-Patchwork-Id: 66317 Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 4DDFE3851C01 for ; Mon, 13 Mar 2023 19:35:01 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 4DDFE3851C01 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1678736101; bh=QuPUPSZd1ctlZ9wCc+IxzHOxC2AU0flQOIaTkm1SLvM=; h=To:Subject:Date:In-Reply-To:References:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To: From; b=o6dAEKBeSgc0vyDo50k37wlnOR7WC7D6L1e5VeATHNaw7kgdtIQxVOn8FOeH190If UsBWiZSXmWJOoJeueo+dx7jGY+P8yEH5+JFvlCxJCQJ5DT7w9Fl+ppikio7rLpd8/Y 0Lx7VBl+xdeBoUI2CpdziVl8BavdVE8fnEVOdijk= X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from mail-oa1-x2f.google.com (mail-oa1-x2f.google.com [IPv6:2001:4860:4864:20::2f]) by sourceware.org (Postfix) with ESMTPS id 1F33C3858C62 for ; Mon, 13 Mar 2023 19:34:32 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 1F33C3858C62 Received: by mail-oa1-x2f.google.com with SMTP id 586e51a60fabf-17683b570b8so14865660fac.13 for ; Mon, 13 Mar 2023 12:34:32 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678736071; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=QuPUPSZd1ctlZ9wCc+IxzHOxC2AU0flQOIaTkm1SLvM=; b=TPdiWmoTa7JdDE6SIgeRA37SdCzYZcfvRbnyrNO03qCe6W6LHXAef1+2UsVfE2mklR b/z4tcawOXJAT2d3UIXDH9hs3c2txvAUcQsBe9vT8TkXjhorTBc153hiyplO0bfLNZrv olg3HJ94Zbnk8tr35sjiJLJaNXqoNAke2zOgjFOlocMd2IJbScakLOC7w7yWEwFmn938 NMGplL0W/ia3JJenUcQ4W3INKW97aIeKqEXKik7smGZlXexURC66PV7Uwm2qliXJhn94 YHhnctNyujOxezCIFbq2Tfw4EhkqDemqiY5TGLbTVWCdidiNptMtcqQk1WjYOL7PQHJ4 8KPA== X-Gm-Message-State: AO0yUKUiTbzffa4DoFmIbc2L1noz+DfH/cwIr7KBbH5N0aQQAMnQB8vE Nc/VEJClYfY9NoZ56PISoXCWVxNbYWuuwYsNkNI9xQ== X-Google-Smtp-Source: AK7set9F4o26VqNm9xIofdkaitOHQQeQHmswjPOm8iiFUxf/luUv4f7LTc/h5H0Bf3TVQahkpw08KQ== X-Received: by 2002:a05:6870:a109:b0:177:a8a8:667 with SMTP id m9-20020a056870a10900b00177a8a80667mr3368724oae.30.1678736070487; Mon, 13 Mar 2023 12:34:30 -0700 (PDT) Received: from mandiga.. ([2804:1b3:a7c0:544b:9bad:e673:fbfa:30eb]) by smtp.gmail.com with ESMTPSA id zf9-20020a0568716a8900b00172426ebe58sm325724oab.27.2023.03.13.12.34.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Mar 2023 12:34:29 -0700 (PDT) To: libc-alpha@sourceware.org, "Andreas K . Huettel" , Paul Eggert , Florian Weimer Subject: [PATCH v7 3/3] linux: Set internal DIR filepos as off64_t (BZ #23960, BZ #24050) Date: Mon, 13 Mar 2023 16:34:19 -0300 Message-Id: <20230313193419.36985-4-adhemerval.zanella@linaro.org> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20230313193419.36985-1-adhemerval.zanella@linaro.org> References: <20230313193419.36985-1-adhemerval.zanella@linaro.org> MIME-Version: 1.0 X-Spam-Status: No, score=-12.4 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, KAM_SHORT, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Patchwork-Original-From: Adhemerval Zanella via Libc-alpha From: Adhemerval Zanella Netto Reply-To: Adhemerval Zanella Errors-To: libc-alpha-bounces+patchwork=sourceware.org@sourceware.org Sender: "Libc-alpha" It allows to obtain the expected entry offset on telldir and set it correctly on seekdir on platforms where long int is smaller than off64_t. On such cases opendir creates a map entry between the DIR d_off offset and the returned long int (the telldir return value). seekdir will then set the correct offset from the internal list using the telldir as the list key. It also removes the overflow check on readdir and the returned value will be truncated by the non-LFS off_t size. As Joseph has noted in BZ #23960 comment #22, d_off is an opaque value and since telldir/seekdir works regardless of the returned dirent d_off value. Finally it removes the requirement to check for overflow values on telldir (BZ #24050). Checked on x86_64-linux-gnu, i686-linux-gnu, powerpc-linux-gnu, and arm-linux-gnueabihf. --- include/dirent.h | 2 +- sysdeps/unix/sysv/linux/Makefile | 2 + sysdeps/unix/sysv/linux/alpha/bits/dirent.h | 3 + sysdeps/unix/sysv/linux/bits/dirent.h | 4 + sysdeps/unix/sysv/linux/closedir.c | 4 + sysdeps/unix/sysv/linux/dirstream.h | 9 +- sysdeps/unix/sysv/linux/opendir.c | 3 + sysdeps/unix/sysv/linux/readdir.c | 14 +- sysdeps/unix/sysv/linux/readdir64.c | 11 ++ sysdeps/unix/sysv/linux/rewinddir.c | 5 + sysdeps/unix/sysv/linux/seekdir.c | 30 +++- sysdeps/unix/sysv/linux/telldir.c | 36 +++++ sysdeps/unix/sysv/linux/telldir.h | 70 ++++++++++ sysdeps/unix/sysv/linux/tst-opendir-lfs.c | 2 + sysdeps/unix/sysv/linux/tst-opendir.c | 145 ++++++++++++++++++++ 15 files changed, 332 insertions(+), 8 deletions(-) create mode 100644 sysdeps/unix/sysv/linux/telldir.h create mode 100644 sysdeps/unix/sysv/linux/tst-opendir-lfs.c create mode 100644 sysdeps/unix/sysv/linux/tst-opendir.c diff --git a/include/dirent.h b/include/dirent.h index d7567f5e86..17827176ba 100644 --- a/include/dirent.h +++ b/include/dirent.h @@ -1,8 +1,8 @@ #ifndef _DIRENT_H +# include # ifndef _ISOMAC # include # endif -# include # ifndef _ISOMAC # include # include diff --git a/sysdeps/unix/sysv/linux/Makefile b/sysdeps/unix/sysv/linux/Makefile index f8bd12d991..116ecf6fff 100644 --- a/sysdeps/unix/sysv/linux/Makefile +++ b/sysdeps/unix/sysv/linux/Makefile @@ -464,6 +464,8 @@ ifeq ($(subdir),dirent) sysdep_routines += getdirentries getdirentries64 tests += \ tst-getdents64 \ + tst-opendir \ + tst-opendir-lfs \ tst-readdir64-compat \ # tests endif # $(subdir) == dirent diff --git a/sysdeps/unix/sysv/linux/alpha/bits/dirent.h b/sysdeps/unix/sysv/linux/alpha/bits/dirent.h index c8a0cfe93f..586d75586a 100644 --- a/sysdeps/unix/sysv/linux/alpha/bits/dirent.h +++ b/sysdeps/unix/sysv/linux/alpha/bits/dirent.h @@ -54,4 +54,7 @@ struct dirent64 /* Inform libc code that these two types are effectively identical. */ #define _DIRENT_MATCHES_DIRENT64 1 +/* alpha 'long int' is enough to handle off64_t. */ +#define _DIRENT_OFFSET_TRANSLATION 0 + #endif /* bits/dirent.h */ diff --git a/sysdeps/unix/sysv/linux/bits/dirent.h b/sysdeps/unix/sysv/linux/bits/dirent.h index ab34d986ff..bb02dcb70a 100644 --- a/sysdeps/unix/sysv/linux/bits/dirent.h +++ b/sysdeps/unix/sysv/linux/bits/dirent.h @@ -57,3 +57,7 @@ struct dirent64 #else # define _DIRENT_MATCHES_DIRENT64 0 #endif + +/* The telldir function returns long int, which may not be large enough to + store off64_t values. In this case, translation is required. */ +#define _DIRENT_OFFSET_TRANSLATION (LONG_WIDTH < 64) diff --git a/sysdeps/unix/sysv/linux/closedir.c b/sysdeps/unix/sysv/linux/closedir.c index f1c2608642..9585a6ca3a 100644 --- a/sysdeps/unix/sysv/linux/closedir.c +++ b/sysdeps/unix/sysv/linux/closedir.c @@ -47,6 +47,10 @@ __closedir (DIR *dirp) __libc_lock_fini (dirp->lock); #endif +#if _DIRENT_OFFSET_TRANSLATION + dirstream_loc_clear (&dirp->locs); +#endif + free ((void *) dirp); return __close_nocancel (fd); diff --git a/sysdeps/unix/sysv/linux/dirstream.h b/sysdeps/unix/sysv/linux/dirstream.h index 3cb313b410..27193b54dc 100644 --- a/sysdeps/unix/sysv/linux/dirstream.h +++ b/sysdeps/unix/sysv/linux/dirstream.h @@ -21,6 +21,7 @@ #include #include +#include /* Directory stream type. @@ -37,10 +38,16 @@ struct __dirstream size_t size; /* Total valid data in the block. */ size_t offset; /* Current offset into the block. */ - off_t filepos; /* Position of next entry to read. */ + off64_t filepos; /* Position of next entry to read. */ int errcode; /* Delayed error code. */ +#if _DIRENT_OFFSET_TRANSLATION + /* The array is used to map long to off_64 for telldir/seekdir for ABIs + where long can not fully represend a LFS off_t value. */ + struct dirstream_loc_t locs; +#endif + /* Directory block. We must make sure that this block starts at an address that is aligned adequately enough to store dirent entries. Using the alignment of "void *" is not diff --git a/sysdeps/unix/sysv/linux/opendir.c b/sysdeps/unix/sysv/linux/opendir.c index 4336196a4d..3e2caabb9d 100644 --- a/sysdeps/unix/sysv/linux/opendir.c +++ b/sysdeps/unix/sysv/linux/opendir.c @@ -129,6 +129,9 @@ __alloc_dir (int fd, bool close_fd, int flags, dirp->offset = 0; dirp->filepos = 0; dirp->errcode = 0; +#if _DIRENT_OFFSET_TRANSLATION + dirstream_loc_init (&dirp->locs); +#endif return dirp; } diff --git a/sysdeps/unix/sysv/linux/readdir.c b/sysdeps/unix/sysv/linux/readdir.c index 72ba895afe..d57bb9ff2a 100644 --- a/sysdeps/unix/sysv/linux/readdir.c +++ b/sysdeps/unix/sysv/linux/readdir.c @@ -75,8 +75,7 @@ __readdir_unlocked (DIR *dirp) size_t new_reclen = ALIGN_UP (old_reclen - size_diff, _Alignof (struct dirent)); - if (!in_ino_t_range (inp->dp64.d_ino) - || !in_off_t_range (inp->dp64.d_off)) + if (!in_ino_t_range (inp->dp64.d_ino)) { /* Overflow. If there was at least one entry before this one, return them without error, otherwise signal overflow. */ @@ -90,11 +89,22 @@ __readdir_unlocked (DIR *dirp) return NULL; } + /* telldir can not return an error, so preallocate a map entry if + d_off can not be used directly. */ + if (telldir_need_dirstream (inp->dp64.d_off)) + { + dirstream_loc_add (&dirp->locs, inp->dp64.d_off); + if (dirstream_loc_has_failed (&dirp->locs)) + return NULL; + } + /* Copy the data from INP and access only OUTP. */ const uint64_t d_ino = inp->dp64.d_ino; const int64_t d_off = inp->dp64.d_off; const uint8_t d_type = inp->dp64.d_type; outp->dp.d_ino = d_ino; + /* This will clamp the inp off64_t d_off value, however telldir/seekdir + will use the 'locs' value if the value overflows. */ outp->dp.d_off = d_off; outp->dp.d_reclen = new_reclen; outp->dp.d_type = d_type; diff --git a/sysdeps/unix/sysv/linux/readdir64.c b/sysdeps/unix/sysv/linux/readdir64.c index db1c6214d8..306728b27b 100644 --- a/sysdeps/unix/sysv/linux/readdir64.c +++ b/sysdeps/unix/sysv/linux/readdir64.c @@ -68,6 +68,17 @@ __readdir64 (DIR *dirp) dirp->offset += dp->d_reclen; dirp->filepos = dp->d_off; +#if _DIRENT_OFFSET_TRANSLATION + /* telldir can not return an error, so preallocate a map entry if + d_off can not be used directly. */ + if (telldir_need_dirstream (dp->d_off)) + { + dirstream_loc_add (&dirp->locs, dp->d_off); + if (dirstream_loc_has_failed (&dirp->locs)) + dp = NULL; + } +#endif + #if IS_IN (libc) __libc_lock_unlock (dirp->lock); #endif diff --git a/sysdeps/unix/sysv/linux/rewinddir.c b/sysdeps/unix/sysv/linux/rewinddir.c index c0fb7aa765..1b158a584f 100644 --- a/sysdeps/unix/sysv/linux/rewinddir.c +++ b/sysdeps/unix/sysv/linux/rewinddir.c @@ -33,6 +33,11 @@ __rewinddir (DIR *dirp) dirp->offset = 0; dirp->size = 0; dirp->errcode = 0; + +#ifndef __LP64__ + dirstream_loc_clear (&dirp->locs); +#endif + #if IS_IN (libc) __libc_lock_unlock (dirp->lock); #endif diff --git a/sysdeps/unix/sysv/linux/seekdir.c b/sysdeps/unix/sysv/linux/seekdir.c index 939ccc4447..38b632964a 100644 --- a/sysdeps/unix/sysv/linux/seekdir.c +++ b/sysdeps/unix/sysv/linux/seekdir.c @@ -22,14 +22,36 @@ #include /* Seek to position POS in DIRP. */ -/* XXX should be __seekdir ? */ void seekdir (DIR *dirp, long int pos) { + off64_t filepos; + __libc_lock_lock (dirp->lock); - (void) __lseek (dirp->fd, pos, SEEK_SET); - dirp->size = 0; + +#if _DIRENT_OFFSET_TRANSLATION + union dirstream_packed dsp = { .l = pos }; + if (dsp.p.is_packed == 1) + filepos = dsp.p.info; + else + { + size_t index = dsp.p.info; + + if (index >= dirstream_loc_size (&dirp->locs)) + { + __libc_lock_unlock (dirp->lock); + return; + } + filepos = *dirstream_loc_at (&dirp->locs, index); + } +#else + filepos = pos; +#endif + + __lseek64 (dirp->fd, filepos, SEEK_SET); + dirp->filepos = filepos; dirp->offset = 0; - dirp->filepos = pos; + dirp->size = 0; + __libc_lock_unlock (dirp->lock); } diff --git a/sysdeps/unix/sysv/linux/telldir.c b/sysdeps/unix/sysv/linux/telldir.c index 1e5c129e9f..1ac4fce50c 100644 --- a/sysdeps/unix/sysv/linux/telldir.c +++ b/sysdeps/unix/sysv/linux/telldir.c @@ -15,9 +15,12 @@ License along with the GNU C Library; if not, see . */ +#include +#include #include #include +#include /* Return the current position of DIRP. */ long int @@ -26,7 +29,40 @@ telldir (DIR *dirp) long int ret; __libc_lock_lock (dirp->lock); + +#if _DIRENT_OFFSET_TRANSLATION + /* If the directory position fits in the packet structure, returns it. + Otherwise, check if the position is already been recorded in the + dynamic array. If not, add the new record. */ + + union dirstream_packed dsp; + + if (!telldir_need_dirstream (dirp->filepos)) + { + dsp.p.is_packed = 1; + dsp.p.info = dirp->filepos; + } + else + { + dsp.l = -1; + + size_t i; + for (i = 0; ;i++) + { + /* It should be pre-allocated on readdir. */ + assert (i < dirstream_loc_size (&dirp->locs)); + if (*dirstream_loc_at (&dirp->locs, i) == dirp->filepos) + break; + } + + dsp.p.is_packed = 0; + dsp.p.info = i; + } + + ret = dsp.l; +#else ret = dirp->filepos; +#endif __libc_lock_unlock (dirp->lock); return ret; diff --git a/sysdeps/unix/sysv/linux/telldir.h b/sysdeps/unix/sysv/linux/telldir.h new file mode 100644 index 0000000000..7772129db0 --- /dev/null +++ b/sysdeps/unix/sysv/linux/telldir.h @@ -0,0 +1,70 @@ +/* Linux internal telldir definitions. + Copyright (C) 2023 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#ifndef _TELLDIR_H +#define _TELLDIR_H 1 + +#include + +#if _DIRENT_OFFSET_TRANSLATION + +_Static_assert (sizeof (long int) < sizeof (__off64_t), + "sizeof (long int) >= sizeof (__off64_t)"); + +# include + +/* On platforms where 'long int' is smaller than 'off64_t' this is how the + returned value is encoded and returned by 'telldir'. If the directory + offset can be enconded in 31 bits it is returned in the 'info' member + with 'is_packed' set to 1. + + Otherwise, the 'info' member describes an index in a dynamic array at + 'DIR' structure. */ + +union dirstream_packed +{ + long int l; + struct + { + unsigned long int is_packed:1; + unsigned long int info:31; + } p; +}; + +/* telldir maintains a list of offsets that describe the obtained diretory + position if it can fit this information in the returned 'dirstream_packed' + struct. */ + +# define DYNARRAY_STRUCT dirstream_loc_t +# define DYNARRAY_ELEMENT off64_t +# define DYNARRAY_PREFIX dirstream_loc_ +# include + +static __always_inline bool +telldir_need_dirstream (__off64_t d_off) +{ + return ! (TYPE_MINIMUM (off_t) <= d_off && d_off <= TYPE_MAXIMUM (off_t)); +} +#else + +_Static_assert (sizeof (long int) == sizeof (off64_t), + "sizeof (long int) != sizeof (off64_t)"); + +#endif /* __LP64__ */ + +#endif /* _TELLDIR_H */ diff --git a/sysdeps/unix/sysv/linux/tst-opendir-lfs.c b/sysdeps/unix/sysv/linux/tst-opendir-lfs.c new file mode 100644 index 0000000000..1de1891fb4 --- /dev/null +++ b/sysdeps/unix/sysv/linux/tst-opendir-lfs.c @@ -0,0 +1,2 @@ +#define _FILE_OFFSET_BITS 64 +#include "tst-opendir.c" diff --git a/sysdeps/unix/sysv/linux/tst-opendir.c b/sysdeps/unix/sysv/linux/tst-opendir.c new file mode 100644 index 0000000000..216ecf123f --- /dev/null +++ b/sysdeps/unix/sysv/linux/tst-opendir.c @@ -0,0 +1,145 @@ +/* Check multiple telldir and seekdir. + Copyright (C) 2023 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include + +/* Some filesystems returns an arbitrary value for d_off direnty entry (ext4 + for instance, where the value is an internal hash key). The idea of create + a large number of file is to try trigger a overflow d_off value in a entry + to check if telldir/seekdir does work corretly in such case. */ +static const char *dirname; +/* The 2 extra files are '.' and '..'. */ +static const size_t nfiles = (1<<14) + 2; + +static inline bool +in_ino_t_range (ino64_t v) +{ + ino_t s = v; + return s == v; +} + +static inline bool +in_off_t_range (off64_t v) +{ + off_t s = v; + return s == v; +} + +static void +do_prepare (int argc, char *argv[]) +{ + dirname = support_create_temp_directory ("tst-opendir-nolfs-"); + + for (size_t i = 0; i < nfiles - 2; i++) + { + int fd = create_temp_file_in_dir ("tempfile.", dirname, NULL); + TEST_VERIFY_EXIT (fd > 0); + close (fd); + } +} +#define PREPARE do_prepare + +static int +do_test (void) +{ + DIR *dirp = opendir (dirname); + TEST_VERIFY_EXIT (dirp != NULL); + + long int *tdirp = xreallocarray (NULL, nfiles, sizeof (long int)); + struct dirent **ddirp = xreallocarray (NULL, nfiles, + sizeof (struct dirent *)); + + /* For non-LFS, the entry is skipped if it can not be converted. */ + int count = 0; + for (; count < nfiles; count++) + { + struct dirent *dp = readdir (dirp); + if (dp == NULL) + break; + tdirp[count] = telldir (dirp); + ddirp[count] = xmalloc (dp->d_reclen); + memcpy (ddirp[count], dp, dp->d_reclen); + } + + closedir (dirp); + + /* Check against the getdents64 syscall. */ + int fd = xopen (dirname, O_RDONLY | O_DIRECTORY, 0); + int i = 0; + while (true) + { + struct + { + char buffer[1024]; + struct dirent64 pad; + } data; + + ssize_t ret = getdents64 (fd, &data.buffer, sizeof (data.buffer)); + if (ret < 0) + FAIL_EXIT1 ("getdents64: %m"); + if (ret == 0) + break; + + char *current = data.buffer; + char *end = data.buffer + ret; + while (current != end) + { + struct dirent64 entry; + memcpy (&entry, current, sizeof (entry)); + /* Truncate overlong strings. */ + entry.d_name[sizeof (entry.d_name) - 1] = '\0'; + TEST_VERIFY (strlen (entry.d_name) < sizeof (entry.d_name) - 1); + + if (in_ino_t_range (entry.d_ino)) + { + TEST_COMPARE_STRING (entry.d_name, ddirp[i]->d_name); + TEST_COMPARE (entry.d_ino, ddirp[i]->d_ino); + TEST_COMPARE (entry.d_type, ddirp[i]->d_type); + + /* Offset zero is reserved for the first entry. */ + TEST_VERIFY (entry.d_off != 0); + + TEST_VERIFY_EXIT (entry.d_reclen <= end - current); + i++; + } + + current += entry.d_reclen; + } + } + + TEST_COMPARE (count, i); + + free (tdirp); + for (int i = 0; i < count; i++) + free (ddirp[i]); + free (ddirp); + + return 0; +} + +#include