From owner-freebsd-hackers@FreeBSD.ORG Mon Mar 23 00:58:58 2015 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C710EAA8 for ; Mon, 23 Mar 2015 00:58:58 +0000 (UTC) Received: from mail-wi0-x234.google.com (mail-wi0-x234.google.com [IPv6:2a00:1450:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 488BCFA6 for ; Mon, 23 Mar 2015 00:58:58 +0000 (UTC) Received: by wibgn9 with SMTP id gn9so46616481wib.1 for ; Sun, 22 Mar 2015 17:58:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:cc:subject:message-id:mail-followup-to:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=w76GZe5XZZUGOnap0aCKJKb3nKWelXz7wuDn84rqDs4=; b=n83UaB4lDYKBQeD7VlYxN9zn9XqNQK5DQlDeXMmNcgyuSR98nPGhwEhR3xCeoD+q8G 73EFBmFRuN7mdMa76B/+rROtOKJufAMw1XEPNivae1ew+NEDdubzNzJS3t6eieN4la+D aH9Gxo7rRVSgQoIhT3c5fxEOpA2DJFj7CeQlvK3F17QUwswRkS3Oe8kHDXrt7oubVsF6 ygGwLprTwpB5Op2neCGYtHPjzUUL5/ROVrJGYQnPhU/TJq8SuQHsIjo/mVAuvPoL3j7J YcY9ETM1fvGMBJzOvVKNqk+rgDNAWgm6qVMZMw6Np9sjiNwjd1/HXu8QfZ3J1c63/xAZ vdKA== X-Received: by 10.180.102.73 with SMTP id fm9mr15284737wib.12.1427072335686; Sun, 22 Mar 2015 17:58:55 -0700 (PDT) Received: from dft-labs.eu (n1x0n-1-pt.tunnel.tserv5.lon1.ipv6.he.net. [2001:470:1f08:1f7::2]) by mx.google.com with ESMTPSA id ga8sm8762022wib.11.2015.03.22.17.58.54 (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Sun, 22 Mar 2015 17:58:54 -0700 (PDT) Date: Mon, 23 Mar 2015 01:58:52 +0100 From: Mateusz Guzik To: Tiwei Bie Subject: Re: [PATCH] Finish the task 'Validate coredump format string' Message-ID: <20150323005852.GB6798@dft-labs.eu> Mail-Followup-To: Mateusz Guzik , Tiwei Bie , Konstantin Belousov , freebsd-hackers@freebsd.org References: <1426946345-67889-1-git-send-email-btw@mail.ustc.edu.cn> <20150321200500.GC14650@dft-labs.eu> <20150322091853.GA89976@freebsd> <20150322101401.GH14650@dft-labs.eu> <20150322112555.GA44277@freebsd> <20150322113822.GB2379@kib.kiev.ua> <20150322120655.GA59757@freebsd> <20150322131524.GA95795@freebsd> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20150322131524.GA95795@freebsd> User-Agent: Mutt/1.5.21 (2010-09-15) Cc: Konstantin Belousov , freebsd-hackers@freebsd.org X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Mar 2015 00:58:58 -0000 On Sun, Mar 22, 2015 at 09:15:24PM +0800, Tiwei Bie wrote: > On Sun, Mar 22, 2015 at 08:06:55PM +0800, Tiwei Bie wrote: > > On Sun, Mar 22, 2015 at 01:38:22PM +0200, Konstantin Belousov wrote: > > > On Sun, Mar 22, 2015 at 07:25:55PM +0800, Tiwei Bie wrote: > > > > On Sun, Mar 22, 2015 at 11:14:01AM +0100, Mateusz Guzik wrote: > > > > > On Sun, Mar 22, 2015 at 05:19:40PM +0800, Tiwei Bie wrote: > > > [..] > > I will submit my new patch later. > > > > Here is my new patch: > > --- > sys/kern/kern_sig.c | 73 ++++++++++++++++++++++++++++++++++++++++++++++------- > 1 file changed, 64 insertions(+), 9 deletions(-) > > diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c > index 8410d9d..5162ab6 100644 > --- a/sys/kern/kern_sig.c > +++ b/sys/kern/kern_sig.c > @@ -3094,21 +3094,81 @@ static int compress_user_cores = 0; > */ > #define corefilename_lock allproc_lock > > -static char corefilename[MAXPATHLEN] = {"%N.core"}; > +static char corefilename[MAXPATHLEN] = "%N.core"; > + > +static bool > +corefilename_check(const char *format) > +{ > + int i, counti; > + > + counti = 0; > + for (i = 0; i < MAXPATHLEN && format[i] != '\0'; i++) { > + if (format[i] == '%') { > + i++; > + switch (format[i]) { > + case 'I': > + counti++; > + if (counti > 1) > + return (false); > + case '%': > + case 'H': > + case 'N': > + case 'P': > + case 'U': > + break; > + default: > + return (false); > + } > + } > + } > + > + if (i == MAXPATHLEN) > + return (false); > + > + return (true); > +} > + > +static void > +corefilename_init(void *arg) > +{ > + char *format; > + > + format = kern_getenv("kern.corefile"); > + if (format != NULL && corefilename_check(format)) > + strcpy(corefilename, format); > +} > +SYSINIT(corefilename, SI_SUB_KMEM, SI_ORDER_FIRST, corefilename_init, 0); > The user should know that the tunable got discarded (e.g. like with prinf removed below). > static int > sysctl_kern_corefile(SYSCTL_HANDLER_ARGS) > { > + char *format; > int error; > > + format = malloc(MAXPATHLEN, M_TEMP, M_WAITOK); > + > + sx_slock(&corefilename_lock); > + strcpy(format, corefilename); > + sx_sunlock(&corefilename_lock); > + > + error = sysctl_handle_string(oidp, format, MAXPATHLEN, req); > + if (error || !req->newptr || strcmp(format, corefilename) == 0) > + goto out; > + Is this strcmp useful? Normally you don't replace the pattern with identical one. > + if (!corefilename_check(format)) { > + error = EINVAL; > + goto out; > + } > + > sx_xlock(&corefilename_lock); > - error = sysctl_handle_string(oidp, corefilename, sizeof(corefilename), > - req); > + strcpy(corefilename, format); > sx_xunlock(&corefilename_lock); > > +out: > + free(format, M_TEMP); > return (error); > } > -SYSCTL_PROC(_kern, OID_AUTO, corefile, CTLTYPE_STRING | CTLFLAG_RWTUN | > +SYSCTL_PROC(_kern, OID_AUTO, corefile, CTLTYPE_STRING | CTLFLAG_RW | > CTLFLAG_MPSAFE, 0, 0, sysctl_kern_corefile, "A", > "Process corefile name format string"); > > @@ -3170,11 +3230,6 @@ corefile_open(const char *comm, uid_t uid, pid_t pid, struct thread *td, > case 'U': /* user id */ > sbuf_printf(&sb, "%u", uid); > break; > - default: > - log(LOG_ERR, > - "Unknown format character %c in " > - "corename `%s'\n", format[i], format); > - break; > } This case should be an assertion. E.g. KASSERT(0, "unknown format in character") > break; > default: > -- > 2.1.2 > > Best regards, > Tiwei Bie > -- Mateusz Guzik