11f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* 21f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** 31f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** Copyright 2010, The Android Open Source Project 41f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** 51f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** Licensed under the Apache License, Version 2.0 (the "License"); 61f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** you may not use this file except in compliance with the License. 71f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** You may obtain a copy of the License at 81f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** 91f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** http://www.apache.org/licenses/LICENSE-2.0 101f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** 111f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** Unless required by applicable law or agreed to in writing, software 121f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** distributed under the License is distributed on an "AS IS" BASIS, 131f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 141f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** See the License for the specific language governing permissions and 151f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner** limitations under the License. 161f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner*/ 171f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#include <errno.h> 181f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#include <fcntl.h> 191f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#include <unistd.h> 201f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#include <sys/stat.h> 215792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner#include <sys/mman.h> 221f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#include <private/android_filesystem_config.h> 231f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#include "package.h" 241f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 251f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* 261f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * WARNING WARNING WARNING WARNING 271f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 281f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * The following code runs as root on production devices, before 291f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * the run-as command has dropped the uid/gid. Hence be very 301f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * conservative and keep in mind the following: 311f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 321f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - Performance does not matter here, clarity and safety of the code 331f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * does however. Documentation is a must. 341f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 351f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - Avoid calling C library functions with complex implementations 361f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * like malloc() and printf(). You want to depend on simple system 371f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * calls instead, which behaviour is not going to be altered in 381f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * unpredictible ways by environment variables or system properties. 391f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 401f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - Do not trust user input and/or the filesystem whenever possible. 411f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 421f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 431f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 441f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* The file containing the list of installed packages on the system */ 451f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner#define PACKAGES_LIST_FILE "/data/system/packages.list" 461f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 471f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Copy 'srclen' string bytes from 'src' into buffer 'dst' of size 'dstlen' 481f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * This function always zero-terminate the destination buffer unless 491f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 'dstlen' is 0, even in case of overflow. 50fced3ded831cb084121b10a78c12de99c89004aaRobert Craig * Returns a pointer into the src string, leaving off where the copy 51fced3ded831cb084121b10a78c12de99c89004aaRobert Craig * has stopped. The copy will stop when dstlen, srclen or a null 52fced3ded831cb084121b10a78c12de99c89004aaRobert Craig * character on src has been reached. 531f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 54fced3ded831cb084121b10a78c12de99c89004aaRobert Craigstatic const char* 551f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstring_copy(char* dst, size_t dstlen, const char* src, size_t srclen) 561f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 571f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* srcend = src + srclen; 581f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* dstend = dst + dstlen; 591f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 601f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (dstlen == 0) 61fced3ded831cb084121b10a78c12de99c89004aaRobert Craig return src; 621f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 631f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner dstend--; /* make room for terminating zero */ 641f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 651f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (dst < dstend && src < srcend && *src != '\0') 661f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner *dst++ = *src++; 671f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 681f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner *dst = '\0'; /* zero-terminate result */ 69fced3ded831cb084121b10a78c12de99c89004aaRobert Craig return src; 701f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 711f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 725792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner/* Open 'filename' and map it into our address-space. 735792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner * Returns buffer address, or NULL on error 745792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner * On exit, *filesize will be set to the file's size, or 0 on error 751f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 765792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turnerstatic void* 775792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turnermap_file(const char* filename, size_t* filesize) 781f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 795792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner int fd, ret, old_errno; 805792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner struct stat st; 815792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner size_t length = 0; 825792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner void* address = NULL; 83080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich gid_t oldegid; 841f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 855792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner *filesize = 0; 861f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 87080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich /* 88080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich * Temporarily switch effective GID to allow us to read 89080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich * the packages file 90080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich */ 91080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich 92080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich oldegid = getegid(); 9318860c524915bc991a9015bdbab32e918f5298d7Alex Klyubin if (setegid(AID_PACKAGE_INFO) < 0) { 94080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich return NULL; 95080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich } 96080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich 971f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* open the file for reading */ 985792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner fd = TEMP_FAILURE_RETRY(open(filename, O_RDONLY)); 99080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich if (fd < 0) { 1005792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner return NULL; 101080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich } 102080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich 103080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich /* restore back to our old egid */ 104080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich if (setegid(oldegid) < 0) { 105080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich goto EXIT; 106080427e4e2b1b72718b660e16b6cf38b3a3c4e3fNick Kralevich } 1071f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1085792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner /* get its size */ 1095792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner ret = TEMP_FAILURE_RETRY(fstat(fd, &st)); 1105792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner if (ret < 0) 1115792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner goto EXIT; 1125792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner 1134ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich /* Ensure that the file is owned by the system user */ 114977a9f3b1a05e6168e8245a1e2061225b68b2b41Jeff Sharkey if ((st.st_uid != AID_SYSTEM) || (st.st_gid != AID_PACKAGE_INFO)) { 1154ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich goto EXIT; 1164ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich } 1174ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich 1184ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich /* Ensure that the file has sane permissions */ 1194ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich if ((st.st_mode & S_IWOTH) != 0) { 1204ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich goto EXIT; 1214ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich } 1224ae77160727f8b92d61028269d1f49ae16873a08Nick Kralevich 1235792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner /* Ensure that the size is not ridiculously large */ 1245792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner length = (size_t)st.st_size; 1255792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner if ((off_t)length != st.st_size) { 1265792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner errno = ENOMEM; 1275792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner goto EXIT; 1285792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner } 1295792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner 1305792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner /* Memory-map the file now */ 1312e6e2713fb71f7e18b782ac22a7b466545b79e89Mark Salyzyn do { 1322e6e2713fb71f7e18b782ac22a7b466545b79e89Mark Salyzyn address = mmap(NULL, length, PROT_READ, MAP_PRIVATE, fd, 0); 1332e6e2713fb71f7e18b782ac22a7b466545b79e89Mark Salyzyn } while (address == MAP_FAILED && errno == EINTR); 1345792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner if (address == MAP_FAILED) { 1355792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner address = NULL; 1365792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner goto EXIT; 1375792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner } 1381f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1395792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner /* We're good, return size */ 1405792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner *filesize = length; 1415792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner 1425792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' TurnerEXIT: 1431f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* close the file, preserve old errno for better diagnostics */ 1441f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner old_errno = errno; 1451f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner close(fd); 1461f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = old_errno; 1471f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1485792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner return address; 1495792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner} 1505792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner 1515792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner/* unmap the file, but preserve errno */ 1525792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turnerstatic void 1535792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turnerunmap_file(void* address, size_t size) 1545792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner{ 1555792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner int old_errno = errno; 1565792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner TEMP_FAILURE_RETRY(munmap(address, size)); 1575792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner errno = old_errno; 1581f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 1591f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1601f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Check that a given directory: 1611f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - exists 1621f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - is owned by a given uid/gid 1631f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - is a real directory, not a symlink 1641f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * - isn't readable or writable by others 1651f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 1661f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * Return 0 on success, or -1 on error. 1671f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * errno is set to EINVAL in case of failed check. 1681f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 1691f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic int 1701f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnercheck_directory_ownership(const char* path, uid_t uid) 1711f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 1721f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int ret; 1731f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner struct stat st; 1741f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1751f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner do { 1761f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner ret = lstat(path, &st); 1771f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } while (ret < 0 && errno == EINTR); 1781f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1791f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (ret < 0) 1801f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 1811f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1821f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* must be a real directory, not a symlink */ 1831f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (!S_ISDIR(st.st_mode)) 1841f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD; 1851f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1861f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* must be owned by specific uid/gid */ 1871f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (st.st_uid != uid || st.st_gid != uid) 1881f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD; 1891f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1901f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* must not be readable or writable by others */ 1911f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if ((st.st_mode & (S_IROTH|S_IWOTH)) != 0) 1921f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD; 1931f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1941f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* everything ok */ 1951f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return 0; 1961f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 1971f4d95296acf34a93128332441782a80c10845b4David 'Digit' TurnerBAD: 1981f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 1991f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 2001f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 2011f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2021f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* This function is used to check the data directory path for safety. 2031f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * We check that every sub-directory is owned by the 'system' user 2041f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * and exists and is not a symlink. We also check that the full directory 2051f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * path is properly owned by the user ID. 2061f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 2071f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * Return 0 on success, -1 on error. 2081f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 2091f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerint 2101f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnercheck_data_path(const char* dataPath, uid_t uid) 2111f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 2121f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int nn; 2131f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2141f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* the path should be absolute */ 2151f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (dataPath[0] != '/') { 2161f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 2171f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 2181f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 2191f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2201f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* look for all sub-paths, we do that by finding 2211f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * directory separators in the input path and 2221f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * checking each sub-path independently 2231f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 2241f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner for (nn = 1; dataPath[nn] != '\0'; nn++) 2251f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner { 2261f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner char subpath[PATH_MAX]; 2271f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2281f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* skip non-separator characters */ 2291f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (dataPath[nn] != '/') 2301f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner continue; 2311f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2321f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* handle trailing separator case */ 2331f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (dataPath[nn+1] == '\0') { 2341f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner break; 2351f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 2361f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2371f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* found a separator, check that dataPath is not too long. */ 2381f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (nn >= (int)(sizeof subpath)) { 2391f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 2401f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 2411f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 2421f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2431f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* reject any '..' subpath */ 2441f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (nn >= 3 && 2451f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner dataPath[nn-3] == '/' && 2461f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner dataPath[nn-2] == '.' && 2471f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner dataPath[nn-1] == '.') { 2481f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 2491f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 2501f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 2511f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2521f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* copy to 'subpath', then check ownership */ 2531f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner memcpy(subpath, dataPath, nn); 2541f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner subpath[nn] = '\0'; 2551f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2561f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (check_directory_ownership(subpath, AID_SYSTEM) < 0) 2571f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 2581f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 2591f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2601f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* All sub-paths were checked, now verify that the full data 2611f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * directory is owned by the application uid 2621f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 2631f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (check_directory_ownership(dataPath, uid) < 0) 2641f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 2651f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2661f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* all clear */ 2671f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return 0; 2681f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 2691f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2701f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Return TRUE iff a character is a space or tab */ 2711f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic inline int 2721f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turneris_space(char c) 2731f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 2741f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return (c == ' ' || c == '\t'); 2751f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 2761f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2771f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Skip any space or tab character from 'p' until 'end' is reached. 2781f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * Return new position. 2791f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 2801f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic const char* 2811f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerskip_spaces(const char* p, const char* end) 2821f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 2831f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (p < end && is_space(*p)) 2841f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p++; 2851f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2861f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return p; 2871f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 2881f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2891f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Skip any non-space and non-tab character from 'p' until 'end'. 2901f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * Return new position. 2911f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 2921f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic const char* 2931f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerskip_non_spaces(const char* p, const char* end) 2941f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 2951f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (p < end && !is_space(*p)) 2961f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p++; 2971f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 2981f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return p; 2991f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 3001f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3011f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Find the first occurence of 'ch' between 'p' and 'end' 3021f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * Return its position, or 'end' if none is found. 3031f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 3041f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic const char* 3051f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerfind_first(const char* p, const char* end, char ch) 3061f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 3071f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (p < end && *p != ch) 3081f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p++; 3091f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3101f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return p; 3111f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 3121f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3131f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Check that the non-space string starting at 'p' and eventually 3141f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * ending at 'end' equals 'name'. Return new position (after name) 3151f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * on success, or NULL on failure. 3161f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 3171f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * This function fails is 'name' is NULL, empty or contains any space. 3181f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 3191f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic const char* 3201f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnercompare_name(const char* p, const char* end, const char* name) 3211f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 3221f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* 'name' must not be NULL or empty */ 3231f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (name == NULL || name[0] == '\0' || p == end) 3241f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return NULL; 3251f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3261f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* compare characters to those in 'name', excluding spaces */ 3271f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (*name) { 3281f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* note, we don't check for *p == '\0' since 3291f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * it will be caught in the next conditional. 3301f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 3311f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (p >= end || is_space(*p)) 3321f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD; 3331f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3341f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (*p != *name) 3351f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD; 3361f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3371f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p++; 3381f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner name++; 3391f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 3401f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3411f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* must be followed by end of line or space */ 3421f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (p < end && !is_space(*p)) 3431f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD; 3441f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3451f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return p; 3461f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3471f4d95296acf34a93128332441782a80c10845b4David 'Digit' TurnerBAD: 3481f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return NULL; 3491f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 3501f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3511f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Parse one or more whitespace characters starting from '*pp' 3521f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * until 'end' is reached. Updates '*pp' on exit. 3531f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 3541f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * Return 0 on success, -1 on failure. 3551f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 3561f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic int 3571f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerparse_spaces(const char** pp, const char* end) 3581f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 3591f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* p = *pp; 3601f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3611f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (p >= end || !is_space(*p)) { 3621f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 3631f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 3641f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 3651f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p = skip_spaces(p, end); 3661f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner *pp = p; 3671f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return 0; 3681f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 3691f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3701f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Parse a positive decimal number starting from '*pp' until 'end' 3711f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * is reached. Adjust '*pp' on exit. Return decimal value or -1 3721f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * in case of error. 3731f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 3741f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * If the value is larger than INT_MAX, -1 will be returned, 3751f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * and errno set to EOVERFLOW. 3761f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 3771f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * If '*pp' does not start with a decimal digit, -1 is returned 3781f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * and errno set to EINVAL. 3791f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 3801f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerstatic int 3811f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerparse_positive_decimal(const char** pp, const char* end) 3821f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 3831f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* p = *pp; 3841f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int value = 0; 3851f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int overflow = 0; 3861f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3871f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (p >= end || *p < '0' || *p > '9') { 3881f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 3891f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 3901f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 3911f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3921f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (p < end) { 3931f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int ch = *p; 3941f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner unsigned d = (unsigned)(ch - '0'); 3951f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int val2; 3961f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 3971f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (d >= 10U) /* d is unsigned, no lower bound check */ 3981f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner break; 3991f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4001f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner val2 = value*10 + (int)d; 4011f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (val2 < value) 4021f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner overflow = 1; 4031f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner value = val2; 4041f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p++; 4051f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 4061f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner *pp = p; 4071f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4081f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (overflow) { 4091f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EOVERFLOW; 4101f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner value = -1; 4111f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 4121f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return value; 4131f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 4141f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4151f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner/* Read the system's package database and extract information about 4161f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 'pkgname'. Return 0 in case of success, or -1 in case of error. 4171f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 4181f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * If the package is unknown, return -1 and set errno to ENOENT 4191f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * If the package database is corrupted, return -1 and set errno to EINVAL 4201f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 4211f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerint 4221f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turnerget_package_info(const char* pkgName, PackageInfo *info) 4231f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner{ 4245792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner char* buffer; 4255792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner size_t buffer_len; 4261f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* p; 4271f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* buffer_end; 4285792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner int result = -1; 4291f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4301f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner info->uid = 0; 4311f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner info->isDebuggable = 0; 4321f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner info->dataDir[0] = '\0'; 433fced3ded831cb084121b10a78c12de99c89004aaRobert Craig info->seinfo[0] = '\0'; 4341f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4355792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner buffer = map_file(PACKAGES_LIST_FILE, &buffer_len); 4365792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner if (buffer == NULL) 4371f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 4381f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4391f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p = buffer; 4401f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner buffer_end = buffer + buffer_len; 4411f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4421f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* expect the following format on each line of the control file: 4431f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 444fced3ded831cb084121b10a78c12de99c89004aaRobert Craig * <pkgName> <uid> <debugFlag> <dataDir> <seinfo> 4451f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 4461f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * where: 4471f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * <pkgName> is the package's name 4481f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * <uid> is the application-specific user Id (decimal) 4491f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * <debugFlag> is 1 if the package is debuggable, or 0 otherwise 4501f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * <dataDir> is the path to the package's data directory (e.g. /data/data/com.example.foo) 451fced3ded831cb084121b10a78c12de99c89004aaRobert Craig * <seinfo> is the seinfo label associated with the package 4521f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * 4531f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * The file is generated in com.android.server.PackageManagerService.Settings.writeLP() 4541f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 4551f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4561f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner while (p < buffer_end) { 4571f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* find end of current line and start of next one */ 4581f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* end = find_first(p, buffer_end, '\n'); 4591f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* next = (end < buffer_end) ? end + 1 : buffer_end; 4601f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner const char* q; 4611f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner int uid, debugFlag; 4621f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4631f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* first field is the package name */ 4641f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p = compare_name(p, end, pkgName); 4651f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (p == NULL) 4661f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto NEXT_LINE; 4671f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4681f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* skip spaces */ 4691f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (parse_spaces(&p, end) < 0) 4701f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD_FORMAT; 4711f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4721f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* second field is the pid */ 4731f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner uid = parse_positive_decimal(&p, end); 4741f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (uid < 0) 4751f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner return -1; 4761f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4771f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner info->uid = (uid_t) uid; 4781f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4791f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* skip spaces */ 4801f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (parse_spaces(&p, end) < 0) 4811f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD_FORMAT; 4821f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4831f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* third field is debug flag (0 or 1) */ 4841f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner debugFlag = parse_positive_decimal(&p, end); 4851f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner switch (debugFlag) { 4861f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner case 0: 4871f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner info->isDebuggable = 0; 4881f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner break; 4891f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner case 1: 4901f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner info->isDebuggable = 1; 4911f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner break; 4921f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner default: 4931f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD_FORMAT; 4941f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 4951f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 4961f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* skip spaces */ 4971f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (parse_spaces(&p, end) < 0) 4981f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD_FORMAT; 4991f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 5001f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* fourth field is data directory path and must not contain 5011f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner * spaces. 5021f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner */ 5031f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner q = skip_non_spaces(p, end); 5041f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner if (q == p) 5051f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner goto BAD_FORMAT; 5061f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 507fced3ded831cb084121b10a78c12de99c89004aaRobert Craig p = string_copy(info->dataDir, sizeof info->dataDir, p, q - p); 508fced3ded831cb084121b10a78c12de99c89004aaRobert Craig 509fced3ded831cb084121b10a78c12de99c89004aaRobert Craig /* skip spaces */ 510fced3ded831cb084121b10a78c12de99c89004aaRobert Craig if (parse_spaces(&p, end) < 0) 511fced3ded831cb084121b10a78c12de99c89004aaRobert Craig goto BAD_FORMAT; 512fced3ded831cb084121b10a78c12de99c89004aaRobert Craig 513fced3ded831cb084121b10a78c12de99c89004aaRobert Craig /* fifth field is the seinfo string */ 514fced3ded831cb084121b10a78c12de99c89004aaRobert Craig q = skip_non_spaces(p, end); 515fced3ded831cb084121b10a78c12de99c89004aaRobert Craig if (q == p) 516fced3ded831cb084121b10a78c12de99c89004aaRobert Craig goto BAD_FORMAT; 517fced3ded831cb084121b10a78c12de99c89004aaRobert Craig 518fced3ded831cb084121b10a78c12de99c89004aaRobert Craig string_copy(info->seinfo, sizeof info->seinfo, p, q - p); 5191f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 5201f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* Ignore the rest */ 5215792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner result = 0; 5225792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner goto EXIT; 5231f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 5241f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner NEXT_LINE: 5251f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner p = next; 5261f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner } 5271f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 5281f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner /* the package is unknown */ 5291f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = ENOENT; 5305792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner result = -1; 5315792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner goto EXIT; 5321f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner 5331f4d95296acf34a93128332441782a80c10845b4David 'Digit' TurnerBAD_FORMAT: 5341f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner errno = EINVAL; 5355792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner result = -1; 5365792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner 5375792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' TurnerEXIT: 5385792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner unmap_file(buffer, buffer_len); 5395792ce79cc79cd0eef9fadd6351521b128b4e85cDavid 'Digit' Turner return result; 5401f4d95296acf34a93128332441782a80c10845b4David 'Digit' Turner} 541