chiark / gitweb /
bus: use memcpy() rather than unbounded strcpy()
[elogind.git] / src / libsystemd-bus / bus-control.c
index 5125fd9724b0fcb52cf70862eb625d1e0a06e2f7..2acd20ba48eb27587ae7d504bc25a1052aa386a7 100644 (file)
@@ -51,15 +51,16 @@ _public_ int sd_bus_get_unique_name(sd_bus *bus, const char **unique) {
 
 static int bus_request_name_kernel(sd_bus *bus, const char *name, uint64_t flags) {
         struct kdbus_cmd_name *n;
-        size_t l;
+        size_t size, l;
         int r;
 
         assert(bus);
         assert(name);
 
         l = strlen(name);
-        n = alloca0(offsetof(struct kdbus_cmd_name, name) + l + 1);
-        n->size = offsetof(struct kdbus_cmd_name, name) + l + 1;
+        size = offsetof(struct kdbus_cmd_name, name) + l + 1;
+        n = alloca0(size);
+        n->size = size;
         kdbus_translate_request_name_flags(flags, (uint64_t *) &n->flags);
         memcpy(n->name, name, l+1);
 
@@ -129,6 +130,8 @@ _public_ int sd_bus_request_name(sd_bus *bus, const char *name, uint64_t flags)
         assert_return(BUS_IS_OPEN(bus->state), -ENOTCONN);
         assert_return(!bus_pid_changed(bus), -ECHILD);
         assert_return(!(flags & ~(SD_BUS_NAME_ALLOW_REPLACEMENT|SD_BUS_NAME_REPLACE_EXISTING|SD_BUS_NAME_QUEUE)), -EINVAL);
+        assert_return(service_name_is_valid(name), -EINVAL);
+        assert_return(name[0] != ':', -EINVAL);
 
         if (bus->is_kernel)
                 return bus_request_name_kernel(bus, name, flags);
@@ -184,9 +187,9 @@ static int bus_release_name_dbus1(sd_bus *bus, const char *name) {
         if (r < 0)
                 return r;
         if (ret == BUS_NAME_NON_EXISTENT)
-                return -ENOENT;
+                return -ESRCH;
         if (ret == BUS_NAME_NOT_OWNER)
-                return -EADDRNOTAVAIL;
+                return -EADDRINUSE;
         if (ret == BUS_NAME_RELEASED)
                 return 0;
 
@@ -199,6 +202,8 @@ _public_ int sd_bus_release_name(sd_bus *bus, const char *name) {
         assert_return(bus->bus_client, -EINVAL);
         assert_return(BUS_IS_OPEN(bus->state), -ENOTCONN);
         assert_return(!bus_pid_changed(bus), -ECHILD);
+        assert_return(service_name_is_valid(name), -EINVAL);
+        assert_return(name[0] != ':', -EINVAL);
 
         if (bus->is_kernel)
                 return bus_release_name_kernel(bus, name);
@@ -240,14 +245,14 @@ static int kernel_get_list(sd_bus *bus, uint64_t flags, char ***x) {
                         previous_id = name->id;
                 }
 
-                if (name->size > sizeof(*name)) {
+                if (name->size > sizeof(*name) && service_name_is_valid(name->name)) {
                         r = strv_extend(x, name->name);
                         if (r < 0)
                                 return -ENOMEM;
                 }
         }
 
-        r = ioctl(sd_bus_get_fd(bus), KDBUS_CMD_FREE, &cmd.offset);
+        r = ioctl(bus->input_fd, KDBUS_CMD_FREE, &cmd.offset);
         if (r < 0)
                 return -errno;
 
@@ -382,6 +387,10 @@ static int bus_get_owner_kdbus(
 
         conn_info = (struct kdbus_conn_info *) ((uint8_t *) bus->kdbus_buffer + cmd->offset);
 
+        /* Non-activated names are considered not available */
+        if (conn_info->flags & KDBUS_HELLO_ACTIVATOR)
+                return name[0] == ':' ? -ENXIO : -ENOENT;
+
         c = bus_creds_new();
         if (!c)
                 return -ENOMEM;
@@ -515,7 +524,7 @@ static int bus_get_owner_kdbus(
                         break;
 
                 case KDBUS_ITEM_NAME:
-                        if (mask & SD_BUS_CREDS_WELL_KNOWN_NAMES) {
+                        if ((mask & SD_BUS_CREDS_WELL_KNOWN_NAMES) && service_name_is_valid(item->name.name)) {
                                 r = strv_extend(&c->well_known_names, item->name.name);
                                 if (r < 0)
                                         goto fail;
@@ -696,6 +705,8 @@ _public_ int sd_bus_get_owner(
         assert_return(mask == 0 || creds, -EINVAL);
         assert_return(BUS_IS_OPEN(bus->state), -ENOTCONN);
         assert_return(!bus_pid_changed(bus), -ECHILD);
+        assert_return(service_name_is_valid(name), -EINVAL);
+        assert_return(bus->bus_client, -ENODATA);
 
         if (bus->is_kernel)
                 return bus_get_owner_kdbus(bus, name, mask, creds);
@@ -709,7 +720,7 @@ static int add_name_change_match(sd_bus *bus,
                                  const char *old_owner,
                                  const char *new_owner) {
 
-        uint64_t name_id = 0, old_owner_id = 0, new_owner_id = 0;
+        uint64_t name_id = KDBUS_MATCH_ID_ANY, old_owner_id = 0, new_owner_id = 0;
         int is_name_id = -1, r;
         struct kdbus_item *item;
 
@@ -717,19 +728,19 @@ static int add_name_change_match(sd_bus *bus,
 
         /* If we encounter a match that could match against
          * NameOwnerChanged messages, then we need to create
-         * KDBUS_MATCH_NAME_{ADD,REMOVE,CHANGE} and
-         * KDBUS_MATCH_ID_{ADD,REMOVE} matches for it, possibly
+         * KDBUS_ITEM_NAME_{ADD,REMOVE,CHANGE} and
+         * KDBUS_ITEM_ID_{ADD,REMOVE} matches for it, possibly
          * multiple if the match is underspecified.
          *
          * The NameOwnerChanged signals take three parameters with
          * unique or well-known names, but only some forms actually
          * exist:
          *
-         * WELLKNOWN, "", UNIQUE       → KDBUS_MATCH_NAME_ADD
-         * WELLKNOWN, UNIQUE, ""       → KDBUS_MATCH_NAME_REMOVE
-         * WELLKNOWN, UNIQUE, UNIQUE   → KDBUS_MATCH_NAME_CHANGE
-         * UNIQUE, "", UNIQUE          → KDBUS_MATCH_ID_ADD
-         * UNIQUE, UNIQUE, ""          → KDBUS_MATCH_ID_REMOVE
+         * WELLKNOWN, "", UNIQUE       → KDBUS_ITEM_NAME_ADD
+         * WELLKNOWN, UNIQUE, ""       → KDBUS_ITEM_NAME_REMOVE
+         * WELLKNOWN, UNIQUE, UNIQUE   → KDBUS_ITEM_NAME_CHANGE
+         * UNIQUE, "", UNIQUE          → KDBUS_ITEM_ID_ADD
+         * UNIQUE, UNIQUE, ""          → KDBUS_ITEM_ID_REMOVE
          *
          * For the latter two the two unique names must be identical.
          *
@@ -749,7 +760,8 @@ static int add_name_change_match(sd_bus *bus,
                         return 0;
                 if (is_name_id > 0 && old_owner_id != name_id)
                         return 0;
-        }
+        } else
+                old_owner_id = KDBUS_MATCH_ID_ANY;
 
         if (!isempty(new_owner)) {
                 r = bus_kernel_parse_unique_name(new_owner, &new_owner_id);
@@ -759,44 +771,44 @@ static int add_name_change_match(sd_bus *bus,
                         return 0;
                 if (is_name_id > 0 && new_owner_id != name_id)
                         return 0;
-        }
+        } else
+                new_owner_id = KDBUS_MATCH_ID_ANY;
 
         if (is_name_id <= 0) {
                 struct kdbus_cmd_match *m;
                 size_t sz, l;
 
                 /* If the name argument is missing or is a well-known
-                 * name, then add KDBUS_MATCH_NAME_{ADD,REMOVE,CHANGE}
+                 * name, then add KDBUS_ITEM_NAME_{ADD,REMOVE,CHANGE}
                  * matches for it */
 
-                l = name ? strlen(name) : 0;
+                l = name ? strlen(name) + 1 : 0;
 
                 sz = ALIGN8(offsetof(struct kdbus_cmd_match, items) +
                             offsetof(struct kdbus_item, name_change) +
                             offsetof(struct kdbus_notify_name_change, name) +
-                            l+1);
+                            l);
 
                 m = alloca0(sz);
                 m->size = sz;
                 m->cookie = cookie;
-                m->src_id = KDBUS_SRC_ID_KERNEL;
 
                 item = m->items;
                 item->size =
                         offsetof(struct kdbus_item, name_change) +
                         offsetof(struct kdbus_notify_name_change, name) +
-                        l+1;
+                        l;
 
-                item->name_change.old_id = old_owner_id;
-                item->name_change.new_id = new_owner_id;
+                item->name_change.old.id = old_owner_id;
+                item->name_change.new.id = new_owner_id;
 
                 if (name)
-                        strcpy(item->name_change.name, name);
+                        memcpy(item->name_change.name, name, l);
 
                 /* If the old name is unset or empty, then
                  * this can match against added names */
                 if (!old_owner || old_owner[0] == 0) {
-                        item->type = KDBUS_MATCH_NAME_ADD;
+                        item->type = KDBUS_ITEM_NAME_ADD;
 
                         r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_ADD, m);
                         if (r < 0)
@@ -806,24 +818,23 @@ static int add_name_change_match(sd_bus *bus,
                 /* If the new name is unset or empty, then
                  * this can match against removed names */
                 if (!new_owner || new_owner[0] == 0) {
-                        item->type = KDBUS_MATCH_NAME_REMOVE;
+                        item->type = KDBUS_ITEM_NAME_REMOVE;
 
                         r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_ADD, m);
                         if (r < 0)
                                 return -errno;
                 }
 
-                /* If the neither name is explicitly set to
-                 * the empty string, then this can match
-                 * agains changed names */
-                if (!(old_owner && old_owner[0] == 0) &&
-                    !(new_owner && new_owner[0] == 0)) {
-                        item->type = KDBUS_MATCH_NAME_CHANGE;
-
-                        r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_ADD, m);
-                        if (r < 0)
-                                return -errno;
-                }
+                /* The CHANGE match we need in either case, because
+                 * what is reported as a name change by the kernel
+                 * might just be an owner change between starter and
+                 * normal clients. For userspace such a change should
+                 * be considered a removal/addition, hence let's
+                 * subscribe to this unconditionally. */
+                item->type = KDBUS_ITEM_NAME_CHANGE;
+                r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_ADD, m);
+                if (r < 0)
+                        return -errno;
         }
 
         if (is_name_id != 0) {
@@ -831,7 +842,7 @@ static int add_name_change_match(sd_bus *bus,
                 uint64_t sz;
 
                 /* If the name argument is missing or is a unique
-                 * name, then add KDBUS_MATCH_ID_{ADD,REMOVE} matches
+                 * name, then add KDBUS_ITEM_ID_{ADD,REMOVE} matches
                  * for it */
 
                 sz = ALIGN8(offsetof(struct kdbus_cmd_match, items) +
@@ -841,16 +852,17 @@ static int add_name_change_match(sd_bus *bus,
                 m = alloca0(sz);
                 m->size = sz;
                 m->cookie = cookie;
-                m->src_id = KDBUS_SRC_ID_KERNEL;
 
                 item = m->items;
-                item->size = offsetof(struct kdbus_item, id_change) + sizeof(struct kdbus_notify_id_change);
+                item->size =
+                        offsetof(struct kdbus_item, id_change) +
+                        sizeof(struct kdbus_notify_id_change);
                 item->id_change.id = name_id;
 
                 /* If the old name is unset or empty, then this can
                  * match against added ids */
                 if (!old_owner || old_owner[0] == 0) {
-                        item->type = KDBUS_MATCH_ID_ADD;
+                        item->type = KDBUS_ITEM_ID_ADD;
 
                         r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_ADD, m);
                         if (r < 0)
@@ -858,9 +870,9 @@ static int add_name_change_match(sd_bus *bus,
                 }
 
                 /* If thew new name is unset or empty, then this can
-                match against removed ids */
+                 * match against removed ids */
                 if (!new_owner || new_owner[0] == 0) {
-                        item->type = KDBUS_MATCH_ID_REMOVE;
+                        item->type = KDBUS_ITEM_ID_REMOVE;
 
                         r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_ADD, m);
                         if (r < 0)
@@ -871,9 +883,9 @@ static int add_name_change_match(sd_bus *bus,
         return 0;
 }
 
-static int bus_add_match_internal_kernel(
+int bus_add_match_internal_kernel(
                 sd_bus *bus,
-                const char *match,
+                uint64_t id,
                 struct bus_match_component *components,
                 unsigned n_components,
                 uint64_t cookie) {
@@ -884,7 +896,7 @@ static int bus_add_match_internal_kernel(
         size_t sz;
         const char *sender = NULL;
         size_t sender_length = 0;
-        uint64_t src_id = KDBUS_MATCH_SRC_ID_ANY;
+        uint64_t src_id = KDBUS_MATCH_ID_ANY;
         bool using_bloom = false;
         unsigned i;
         bool matches_name_change = true;
@@ -892,11 +904,11 @@ static int bus_add_match_internal_kernel(
         int r;
 
         assert(bus);
-        assert(match);
 
         zero(bloom);
 
-        sz = offsetof(struct kdbus_cmd_match, items);
+        sz = ALIGN8(offsetof(struct kdbus_cmd_match, items) +
+                    offsetof(struct kdbus_item, id) + sizeof(uint64_t));
 
         for (i = 0; i < n_components; i++) {
                 struct bus_match_component *c = &components[i];
@@ -1011,21 +1023,24 @@ static int bus_add_match_internal_kernel(
         m = alloca0(sz);
         m->size = sz;
         m->cookie = cookie;
-        m->src_id = src_id;
+        m->id = id;
 
         item = m->items;
+        item->size = offsetof(struct kdbus_item, id) + sizeof(uint64_t);
+        item->type = KDBUS_ITEM_ID;
+        item->id = src_id;
 
         if (using_bloom) {
+                item = KDBUS_ITEM_NEXT(item);
                 item->size = offsetof(struct kdbus_item, data64) + BLOOM_SIZE;
-                item->type = KDBUS_MATCH_BLOOM;
+                item->type = KDBUS_ITEM_BLOOM;
                 memcpy(item->data64, bloom, BLOOM_SIZE);
-
-                item = KDBUS_ITEM_NEXT(item);
         }
 
         if (sender) {
+                item = KDBUS_ITEM_NEXT(item);
                 item->size = offsetof(struct kdbus_item, str) + sender_length + 1;
-                item->type = KDBUS_MATCH_SRC_NAME;
+                item->type = KDBUS_ITEM_NAME;
                 memcpy(item->str, sender, sender_length + 1);
         }
 
@@ -1078,25 +1093,25 @@ int bus_add_match_internal(
         assert(match);
 
         if (bus->is_kernel)
-                return bus_add_match_internal_kernel(bus, match, components, n_components, cookie);
+                return bus_add_match_internal_kernel(bus, 0, components, n_components, cookie);
         else
                 return bus_add_match_internal_dbus1(bus, match);
 }
 
-static int bus_remove_match_internal_kernel(
+int bus_remove_match_internal_kernel(
                 sd_bus *bus,
-                const char *match,
+                uint64_t id,
                 uint64_t cookie) {
 
         struct kdbus_cmd_match m;
         int r;
 
         assert(bus);
-        assert(match);
 
         zero(m);
         m.size = offsetof(struct kdbus_cmd_match, items);
         m.cookie = cookie;
+        m.id = id;
 
         r = ioctl(bus->input_fd, KDBUS_CMD_MATCH_REMOVE, &m);
         if (r < 0)
@@ -1133,7 +1148,7 @@ int bus_remove_match_internal(
         assert(match);
 
         if (bus->is_kernel)
-                return bus_remove_match_internal_kernel(bus, match, cookie);
+                return bus_remove_match_internal_kernel(bus, 0, cookie);
         else
                 return bus_remove_match_internal_dbus1(bus, match);
 }
@@ -1148,6 +1163,7 @@ _public_ int sd_bus_get_owner_machine_id(sd_bus *bus, const char *name, sd_id128
         assert_return(machine, -EINVAL);
         assert_return(BUS_IS_OPEN(bus->state), -ENOTCONN);
         assert_return(!bus_pid_changed(bus), -ECHILD);
+        assert_return(service_name_is_valid(name), -EINVAL);
 
         if (streq_ptr(name, bus->unique_name))
                 return sd_id128_get_machine(machine);