497 lines
14 KiB
C
497 lines
14 KiB
C
|
/* Copyright (C) 1991-2021 Free Software Foundation, Inc.
|
|||
|
This file is part of the GNU C Library.
|
|||
|
|
|||
|
The GNU C Library is free software; you can redistribute it and/or
|
|||
|
modify it under the terms of the GNU General Public
|
|||
|
License as published by the Free Software Foundation; either
|
|||
|
version 3 of the License, or (at your option) any later version.
|
|||
|
|
|||
|
The GNU C Library is distributed in the hope that it will be useful,
|
|||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|||
|
General Public License for more details.
|
|||
|
|
|||
|
You should have received a copy of the GNU General Public
|
|||
|
License along with the GNU C Library; if not, see
|
|||
|
<https://www.gnu.org/licenses/>. */
|
|||
|
|
|||
|
#if !_LIBC
|
|||
|
# include <config.h>
|
|||
|
# include <unistd.h>
|
|||
|
# include "pathmax.h"
|
|||
|
#else
|
|||
|
# define HAVE_OPENAT 1
|
|||
|
# define D_INO_IN_DIRENT 1
|
|||
|
# define HAVE_MSVC_INVALID_PARAMETER_HANDLER 0
|
|||
|
# define HAVE_MINIMALLY_WORKING_GETCWD 0
|
|||
|
#endif
|
|||
|
|
|||
|
#include <errno.h>
|
|||
|
#include <sys/types.h>
|
|||
|
#include <sys/stat.h>
|
|||
|
#include <stdbool.h>
|
|||
|
#include <stddef.h>
|
|||
|
|
|||
|
#include <fcntl.h> /* For AT_FDCWD on Solaris 9. */
|
|||
|
|
|||
|
/* If this host provides the openat function or if we're using the
|
|||
|
gnulib replacement function with a native fdopendir, then enable
|
|||
|
code below to make getcwd more efficient and robust. */
|
|||
|
#if defined HAVE_OPENAT || (defined GNULIB_OPENAT && defined HAVE_FDOPENDIR)
|
|||
|
# define HAVE_OPENAT_SUPPORT 1
|
|||
|
#else
|
|||
|
# define HAVE_OPENAT_SUPPORT 0
|
|||
|
#endif
|
|||
|
|
|||
|
#ifndef __set_errno
|
|||
|
# define __set_errno(val) (errno = (val))
|
|||
|
#endif
|
|||
|
|
|||
|
#include <dirent.h>
|
|||
|
#ifndef _D_EXACT_NAMLEN
|
|||
|
# define _D_EXACT_NAMLEN(d) strlen ((d)->d_name)
|
|||
|
#endif
|
|||
|
#ifndef _D_ALLOC_NAMLEN
|
|||
|
# define _D_ALLOC_NAMLEN(d) (_D_EXACT_NAMLEN (d) + 1)
|
|||
|
#endif
|
|||
|
|
|||
|
#include <unistd.h>
|
|||
|
#include <stdlib.h>
|
|||
|
#include <string.h>
|
|||
|
|
|||
|
#if _LIBC
|
|||
|
# ifndef mempcpy
|
|||
|
# define mempcpy __mempcpy
|
|||
|
# endif
|
|||
|
#endif
|
|||
|
|
|||
|
#ifndef MAX
|
|||
|
# define MAX(a, b) ((a) < (b) ? (b) : (a))
|
|||
|
#endif
|
|||
|
#ifndef MIN
|
|||
|
# define MIN(a, b) ((a) < (b) ? (a) : (b))
|
|||
|
#endif
|
|||
|
|
|||
|
/* In this file, PATH_MAX only serves as a threshold for choosing among two
|
|||
|
algorithms. */
|
|||
|
#ifndef PATH_MAX
|
|||
|
# define PATH_MAX 8192
|
|||
|
#endif
|
|||
|
|
|||
|
#if D_INO_IN_DIRENT
|
|||
|
# define MATCHING_INO(dp, ino) ((dp)->d_ino == (ino))
|
|||
|
#else
|
|||
|
# define MATCHING_INO(dp, ino) true
|
|||
|
#endif
|
|||
|
|
|||
|
#if HAVE_MSVC_INVALID_PARAMETER_HANDLER
|
|||
|
# include "msvc-inval.h"
|
|||
|
#endif
|
|||
|
|
|||
|
#if !_LIBC
|
|||
|
# define GETCWD_RETURN_TYPE char *
|
|||
|
# define __close_nocancel_nostatus close
|
|||
|
# define __getcwd_generic rpl_getcwd
|
|||
|
# undef stat64
|
|||
|
# define stat64 stat
|
|||
|
# define __fstat64 fstat
|
|||
|
# define __fstatat64 fstatat
|
|||
|
# define __lstat64 lstat
|
|||
|
# define __closedir closedir
|
|||
|
# define __opendir opendir
|
|||
|
# define __readdir64 readdir
|
|||
|
# define __fdopendir fdopendir
|
|||
|
# define __openat openat
|
|||
|
# define __rewinddir rewinddir
|
|||
|
# define __openat64 openat
|
|||
|
# define dirent64 dirent
|
|||
|
#else
|
|||
|
# include <not-cancel.h>
|
|||
|
#endif
|
|||
|
|
|||
|
/* The results of opendir() in this file are not used with dirfd and fchdir,
|
|||
|
and we do not leak fds to any single-threaded code that could use stdio,
|
|||
|
therefore save some unnecessary recursion in fchdir.c.
|
|||
|
FIXME - if the kernel ever adds support for multi-thread safety for
|
|||
|
avoiding standard fds, then we should use opendir_safer and
|
|||
|
openat_safer. */
|
|||
|
#ifdef GNULIB_defined_opendir
|
|||
|
# undef opendir
|
|||
|
#endif
|
|||
|
#ifdef GNULIB_defined_closedir
|
|||
|
# undef closedir
|
|||
|
#endif
|
|||
|
|
|||
|
#if defined _WIN32 && !defined __CYGWIN__
|
|||
|
# if HAVE_MSVC_INVALID_PARAMETER_HANDLER
|
|||
|
static char *
|
|||
|
getcwd_nothrow (char *buf, size_t size)
|
|||
|
{
|
|||
|
char *result;
|
|||
|
|
|||
|
TRY_MSVC_INVAL
|
|||
|
{
|
|||
|
result = _getcwd (buf, size);
|
|||
|
}
|
|||
|
CATCH_MSVC_INVAL
|
|||
|
{
|
|||
|
result = NULL;
|
|||
|
errno = ERANGE;
|
|||
|
}
|
|||
|
DONE_MSVC_INVAL;
|
|||
|
|
|||
|
return result;
|
|||
|
}
|
|||
|
# else
|
|||
|
# define getcwd_nothrow _getcwd
|
|||
|
# endif
|
|||
|
# define getcwd_system getcwd_nothrow
|
|||
|
#else
|
|||
|
# define getcwd_system getcwd
|
|||
|
#endif
|
|||
|
|
|||
|
/* Get the name of the current working directory, and put it in SIZE
|
|||
|
bytes of BUF. Returns NULL with errno set if the directory couldn't be
|
|||
|
determined or SIZE was too small. If successful, returns BUF. In GNU,
|
|||
|
if BUF is NULL, an array is allocated with 'malloc'; the array is SIZE
|
|||
|
bytes long, unless SIZE == 0, in which case it is as big as necessary. */
|
|||
|
|
|||
|
GETCWD_RETURN_TYPE
|
|||
|
__getcwd_generic (char *buf, size_t size)
|
|||
|
{
|
|||
|
/* Lengths of big file name components and entire file names, and a
|
|||
|
deep level of file name nesting. These numbers are not upper
|
|||
|
bounds; they are merely large values suitable for initial
|
|||
|
allocations, designed to be large enough for most real-world
|
|||
|
uses. */
|
|||
|
enum
|
|||
|
{
|
|||
|
BIG_FILE_NAME_COMPONENT_LENGTH = 255,
|
|||
|
BIG_FILE_NAME_LENGTH = MIN (4095, PATH_MAX - 1),
|
|||
|
DEEP_NESTING = 100
|
|||
|
};
|
|||
|
|
|||
|
#if HAVE_OPENAT_SUPPORT
|
|||
|
int fd = AT_FDCWD;
|
|||
|
bool fd_needs_closing = false;
|
|||
|
#else
|
|||
|
char dots[DEEP_NESTING * sizeof ".." + BIG_FILE_NAME_COMPONENT_LENGTH + 1];
|
|||
|
char *dotlist = dots;
|
|||
|
size_t dotsize = sizeof dots;
|
|||
|
size_t dotlen = 0;
|
|||
|
#endif
|
|||
|
DIR *dirstream = NULL;
|
|||
|
dev_t rootdev, thisdev;
|
|||
|
ino_t rootino, thisino;
|
|||
|
char *dir;
|
|||
|
register char *dirp;
|
|||
|
struct stat64 st;
|
|||
|
size_t allocated = size;
|
|||
|
size_t used;
|
|||
|
|
|||
|
#if HAVE_MINIMALLY_WORKING_GETCWD
|
|||
|
/* If AT_FDCWD is not defined, the algorithm below is O(N**2) and
|
|||
|
this is much slower than the system getcwd (at least on
|
|||
|
GNU/Linux). So trust the system getcwd's results unless they
|
|||
|
look suspicious.
|
|||
|
|
|||
|
Use the system getcwd even if we have openat support, since the
|
|||
|
system getcwd works even when a parent is unreadable, while the
|
|||
|
openat-based approach does not.
|
|||
|
|
|||
|
But on AIX 5.1..7.1, the system getcwd is not even minimally
|
|||
|
working: If the current directory name is slightly longer than
|
|||
|
PATH_MAX, it omits the first directory component and returns
|
|||
|
this wrong result with errno = 0. */
|
|||
|
|
|||
|
# undef getcwd
|
|||
|
dir = getcwd_system (buf, size);
|
|||
|
if (dir || (size && errno == ERANGE))
|
|||
|
return dir;
|
|||
|
|
|||
|
/* Solaris getcwd (NULL, 0) fails with errno == EINVAL, but it has
|
|||
|
internal magic that lets it work even if an ancestor directory is
|
|||
|
inaccessible, which is better in many cases. So in this case try
|
|||
|
again with a buffer that's almost always big enough. */
|
|||
|
if (errno == EINVAL && buf == NULL && size == 0)
|
|||
|
{
|
|||
|
char big_buffer[BIG_FILE_NAME_LENGTH + 1];
|
|||
|
dir = getcwd_system (big_buffer, sizeof big_buffer);
|
|||
|
if (dir)
|
|||
|
return strdup (dir);
|
|||
|
}
|
|||
|
|
|||
|
# if HAVE_PARTLY_WORKING_GETCWD
|
|||
|
/* The system getcwd works, except it sometimes fails when it
|
|||
|
shouldn't, setting errno to ERANGE, ENAMETOOLONG, or ENOENT. */
|
|||
|
if (errno != ERANGE && errno != ENAMETOOLONG && errno != ENOENT)
|
|||
|
return NULL;
|
|||
|
# endif
|
|||
|
#endif
|
|||
|
if (size == 0)
|
|||
|
{
|
|||
|
if (buf != NULL)
|
|||
|
{
|
|||
|
__set_errno (EINVAL);
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
|
|||
|
allocated = BIG_FILE_NAME_LENGTH + 1;
|
|||
|
}
|
|||
|
|
|||
|
if (buf == NULL)
|
|||
|
{
|
|||
|
dir = malloc (allocated);
|
|||
|
if (dir == NULL)
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
else
|
|||
|
dir = buf;
|
|||
|
|
|||
|
dirp = dir + allocated;
|
|||
|
*--dirp = '\0';
|
|||
|
|
|||
|
if (__lstat64 (".", &st) < 0)
|
|||
|
goto lose;
|
|||
|
thisdev = st.st_dev;
|
|||
|
thisino = st.st_ino;
|
|||
|
|
|||
|
if (__lstat64 ("/", &st) < 0)
|
|||
|
goto lose;
|
|||
|
rootdev = st.st_dev;
|
|||
|
rootino = st.st_ino;
|
|||
|
|
|||
|
while (!(thisdev == rootdev && thisino == rootino))
|
|||
|
{
|
|||
|
struct dirent64 *d;
|
|||
|
dev_t dotdev;
|
|||
|
ino_t dotino;
|
|||
|
bool mount_point;
|
|||
|
int parent_status;
|
|||
|
size_t dirroom;
|
|||
|
size_t namlen;
|
|||
|
bool use_d_ino = true;
|
|||
|
|
|||
|
/* Look at the parent directory. */
|
|||
|
#if HAVE_OPENAT_SUPPORT
|
|||
|
fd = __openat64 (fd, "..", O_RDONLY);
|
|||
|
if (fd < 0)
|
|||
|
goto lose;
|
|||
|
fd_needs_closing = true;
|
|||
|
parent_status = __fstat64 (fd, &st);
|
|||
|
#else
|
|||
|
dotlist[dotlen++] = '.';
|
|||
|
dotlist[dotlen++] = '.';
|
|||
|
dotlist[dotlen] = '\0';
|
|||
|
parent_status = __lstat64 (dotlist, &st);
|
|||
|
#endif
|
|||
|
if (parent_status != 0)
|
|||
|
goto lose;
|
|||
|
|
|||
|
if (dirstream && __closedir (dirstream) != 0)
|
|||
|
{
|
|||
|
dirstream = NULL;
|
|||
|
goto lose;
|
|||
|
}
|
|||
|
|
|||
|
/* Figure out if this directory is a mount point. */
|
|||
|
dotdev = st.st_dev;
|
|||
|
dotino = st.st_ino;
|
|||
|
mount_point = dotdev != thisdev;
|
|||
|
|
|||
|
/* Search for the last directory. */
|
|||
|
#if HAVE_OPENAT_SUPPORT
|
|||
|
dirstream = __fdopendir (fd);
|
|||
|
if (dirstream == NULL)
|
|||
|
goto lose;
|
|||
|
fd_needs_closing = false;
|
|||
|
#else
|
|||
|
dirstream = __opendir (dotlist);
|
|||
|
if (dirstream == NULL)
|
|||
|
goto lose;
|
|||
|
dotlist[dotlen++] = '/';
|
|||
|
#endif
|
|||
|
for (;;)
|
|||
|
{
|
|||
|
/* Clear errno to distinguish EOF from error if readdir returns
|
|||
|
NULL. */
|
|||
|
__set_errno (0);
|
|||
|
d = __readdir64 (dirstream);
|
|||
|
|
|||
|
/* When we've iterated through all directory entries without finding
|
|||
|
one with a matching d_ino, rewind the stream and consider each
|
|||
|
name again, but this time, using lstat. This is necessary in a
|
|||
|
chroot on at least one system (glibc-2.3.6 + linux 2.6.12), where
|
|||
|
.., ../.., ../../.., etc. all had the same device number, yet the
|
|||
|
d_ino values for entries in / did not match those obtained
|
|||
|
via lstat. */
|
|||
|
if (d == NULL && errno == 0 && use_d_ino)
|
|||
|
{
|
|||
|
use_d_ino = false;
|
|||
|
__rewinddir (dirstream);
|
|||
|
d = __readdir64 (dirstream);
|
|||
|
}
|
|||
|
|
|||
|
if (d == NULL)
|
|||
|
{
|
|||
|
if (errno == 0)
|
|||
|
/* EOF on dirstream, which can mean e.g., that the current
|
|||
|
directory has been removed. */
|
|||
|
__set_errno (ENOENT);
|
|||
|
goto lose;
|
|||
|
}
|
|||
|
if (d->d_name[0] == '.' &&
|
|||
|
(d->d_name[1] == '\0' ||
|
|||
|
(d->d_name[1] == '.' && d->d_name[2] == '\0')))
|
|||
|
continue;
|
|||
|
|
|||
|
if (use_d_ino)
|
|||
|
{
|
|||
|
bool match = (MATCHING_INO (d, thisino) || mount_point);
|
|||
|
if (! match)
|
|||
|
continue;
|
|||
|
}
|
|||
|
|
|||
|
{
|
|||
|
int entry_status;
|
|||
|
#if HAVE_OPENAT_SUPPORT
|
|||
|
entry_status = __fstatat64 (fd, d->d_name, &st, AT_SYMLINK_NOFOLLOW);
|
|||
|
#else
|
|||
|
/* Compute size needed for this file name, or for the file
|
|||
|
name ".." in the same directory, whichever is larger.
|
|||
|
Room for ".." might be needed the next time through
|
|||
|
the outer loop. */
|
|||
|
size_t name_alloc = _D_ALLOC_NAMLEN (d);
|
|||
|
size_t filesize = dotlen + MAX (sizeof "..", name_alloc);
|
|||
|
|
|||
|
if (filesize < dotlen)
|
|||
|
goto memory_exhausted;
|
|||
|
|
|||
|
if (dotsize < filesize)
|
|||
|
{
|
|||
|
/* My, what a deep directory tree you have, Grandma. */
|
|||
|
size_t newsize = MAX (filesize, dotsize * 2);
|
|||
|
size_t i;
|
|||
|
if (newsize < dotsize)
|
|||
|
goto memory_exhausted;
|
|||
|
if (dotlist != dots)
|
|||
|
free (dotlist);
|
|||
|
dotlist = malloc (newsize);
|
|||
|
if (dotlist == NULL)
|
|||
|
goto lose;
|
|||
|
dotsize = newsize;
|
|||
|
|
|||
|
i = 0;
|
|||
|
do
|
|||
|
{
|
|||
|
dotlist[i++] = '.';
|
|||
|
dotlist[i++] = '.';
|
|||
|
dotlist[i++] = '/';
|
|||
|
}
|
|||
|
while (i < dotlen);
|
|||
|
}
|
|||
|
|
|||
|
memcpy (dotlist + dotlen, d->d_name, _D_ALLOC_NAMLEN (d));
|
|||
|
entry_status = __lstat64 (dotlist, &st);
|
|||
|
#endif
|
|||
|
/* We don't fail here if we cannot stat() a directory entry.
|
|||
|
This can happen when (network) file systems fail. If this
|
|||
|
entry is in fact the one we are looking for we will find
|
|||
|
out soon as we reach the end of the directory without
|
|||
|
having found anything. */
|
|||
|
if (entry_status == 0 && S_ISDIR (st.st_mode)
|
|||
|
&& st.st_dev == thisdev && st.st_ino == thisino)
|
|||
|
break;
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
dirroom = dirp - dir;
|
|||
|
namlen = _D_EXACT_NAMLEN (d);
|
|||
|
|
|||
|
if (dirroom <= namlen)
|
|||
|
{
|
|||
|
if (size != 0)
|
|||
|
{
|
|||
|
__set_errno (ERANGE);
|
|||
|
goto lose;
|
|||
|
}
|
|||
|
else
|
|||
|
{
|
|||
|
char *tmp;
|
|||
|
size_t oldsize = allocated;
|
|||
|
|
|||
|
allocated += MAX (allocated, namlen);
|
|||
|
if (allocated < oldsize
|
|||
|
|| ! (tmp = realloc (dir, allocated)))
|
|||
|
goto memory_exhausted;
|
|||
|
|
|||
|
/* Move current contents up to the end of the buffer.
|
|||
|
This is guaranteed to be non-overlapping. */
|
|||
|
dirp = memcpy (tmp + allocated - (oldsize - dirroom),
|
|||
|
tmp + dirroom,
|
|||
|
oldsize - dirroom);
|
|||
|
dir = tmp;
|
|||
|
}
|
|||
|
}
|
|||
|
dirp -= namlen;
|
|||
|
memcpy (dirp, d->d_name, namlen);
|
|||
|
*--dirp = '/';
|
|||
|
|
|||
|
thisdev = dotdev;
|
|||
|
thisino = dotino;
|
|||
|
}
|
|||
|
|
|||
|
if (dirstream && __closedir (dirstream) != 0)
|
|||
|
{
|
|||
|
dirstream = NULL;
|
|||
|
goto lose;
|
|||
|
}
|
|||
|
|
|||
|
if (dirp == &dir[allocated - 1])
|
|||
|
*--dirp = '/';
|
|||
|
|
|||
|
#if ! HAVE_OPENAT_SUPPORT
|
|||
|
if (dotlist != dots)
|
|||
|
free (dotlist);
|
|||
|
#endif
|
|||
|
|
|||
|
used = dir + allocated - dirp;
|
|||
|
memmove (dir, dirp, used);
|
|||
|
|
|||
|
if (size == 0)
|
|||
|
/* Ensure that the buffer is only as large as necessary. */
|
|||
|
buf = (used < allocated ? realloc (dir, used) : dir);
|
|||
|
|
|||
|
if (buf == NULL)
|
|||
|
/* Either buf was NULL all along, or 'realloc' failed but
|
|||
|
we still have the original string. */
|
|||
|
buf = dir;
|
|||
|
|
|||
|
return buf;
|
|||
|
|
|||
|
memory_exhausted:
|
|||
|
__set_errno (ENOMEM);
|
|||
|
lose:
|
|||
|
{
|
|||
|
int save = errno;
|
|||
|
if (dirstream)
|
|||
|
__closedir (dirstream);
|
|||
|
#if HAVE_OPENAT_SUPPORT
|
|||
|
if (fd_needs_closing)
|
|||
|
__close_nocancel_nostatus (fd);
|
|||
|
#else
|
|||
|
if (dotlist != dots)
|
|||
|
free (dotlist);
|
|||
|
#endif
|
|||
|
if (buf == NULL)
|
|||
|
free (dir);
|
|||
|
__set_errno (save);
|
|||
|
}
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
|
|||
|
#if defined _LIBC && !defined GETCWD_RETURN_TYPE
|
|||
|
libc_hidden_def (__getcwd)
|
|||
|
weak_alias (__getcwd, getcwd)
|
|||
|
#endif
|