mirror of
				https://github.com/RGBCube/serenity
				synced 2025-10-31 06:42:43 +00:00 
			
		
		
		
	 c05c5a7ff4
			
		
	
	
		c05c5a7ff4
		
	
	
	
	
		
			
			Found due to smelly code in InodeFile::absolute_path. In particular, this replaces the following misleading methods: File::absolute_path This method *never* returns an actual path, and if called on an InodeFile (which is impossible), it would VERIFY_NOT_REACHED(). OpenFileDescription::try_serialize_absolute_path OpenFileDescription::absolute_path These methods do not guarantee to return an actual path (just like the other method), and just like Custody::absolute_path they do not guarantee accuracy. In particular, just renaming the method made a TOCTOU bug obvious. The new method signatures use KResultOr, just like try_serialize_absolute_path() already did.
		
			
				
	
	
		
			56 lines
		
	
	
	
		
			2 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
			
		
		
	
	
			56 lines
		
	
	
	
		
			2 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
| /*
 | |
|  * Copyright (c) 2018-2020, Andreas Kling <kling@serenityos.org>
 | |
|  *
 | |
|  * SPDX-License-Identifier: BSD-2-Clause
 | |
|  */
 | |
| 
 | |
| #pragma once
 | |
| 
 | |
| #include <Kernel/FileSystem/File.h>
 | |
| 
 | |
| namespace Kernel {
 | |
| 
 | |
| class Inode;
 | |
| 
 | |
| class InodeFile final : public File {
 | |
| public:
 | |
|     static KResultOr<NonnullRefPtr<InodeFile>> create(NonnullRefPtr<Inode>&& inode)
 | |
|     {
 | |
|         auto file = adopt_ref_if_nonnull(new (nothrow) InodeFile(move(inode)));
 | |
|         if (!file)
 | |
|             return ENOMEM;
 | |
|         return file.release_nonnull();
 | |
|     }
 | |
| 
 | |
|     virtual ~InodeFile() override;
 | |
| 
 | |
|     const Inode& inode() const { return *m_inode; }
 | |
|     Inode& inode() { return *m_inode; }
 | |
| 
 | |
|     virtual bool can_read(const OpenFileDescription&, size_t) const override { return true; }
 | |
|     virtual bool can_write(const OpenFileDescription&, size_t) const override { return true; }
 | |
| 
 | |
|     virtual KResultOr<size_t> read(OpenFileDescription&, u64, UserOrKernelBuffer&, size_t) override;
 | |
|     virtual KResultOr<size_t> write(OpenFileDescription&, u64, const UserOrKernelBuffer&, size_t) override;
 | |
|     virtual KResult ioctl(OpenFileDescription&, unsigned request, Userspace<void*> arg) override;
 | |
|     virtual KResultOr<Memory::Region*> mmap(Process&, OpenFileDescription&, Memory::VirtualRange const&, u64 offset, int prot, bool shared) override;
 | |
|     virtual KResult stat(::stat& buffer) const override { return inode().metadata().stat(buffer); }
 | |
| 
 | |
|     virtual KResultOr<NonnullOwnPtr<KString>> pseudo_path(const OpenFileDescription&) const override;
 | |
| 
 | |
|     virtual KResult truncate(u64) override;
 | |
|     virtual KResult sync() override;
 | |
|     virtual KResult chown(OpenFileDescription&, UserID, GroupID) override;
 | |
|     virtual KResult chmod(OpenFileDescription&, mode_t) override;
 | |
| 
 | |
|     virtual StringView class_name() const override { return "InodeFile"sv; }
 | |
| 
 | |
|     virtual bool is_seekable() const override { return true; }
 | |
|     virtual bool is_inode() const override { return true; }
 | |
| 
 | |
| private:
 | |
|     explicit InodeFile(NonnullRefPtr<Inode>&&);
 | |
|     NonnullRefPtr<Inode> m_inode;
 | |
| };
 | |
| 
 | |
| }
 |