2020-04-14 18:36:28 +00:00
|
|
|
/*
|
|
|
|
* Copyright (c) 2006 Pawel Jakub Dawidek <pjd@FreeBSD.org>
|
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted provided that the following conditions
|
|
|
|
* are met:
|
|
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer.
|
|
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
|
|
* documentation and/or other materials provided with the distribution.
|
|
|
|
*
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
|
|
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
|
|
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
|
* SUCH DAMAGE.
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
|
|
|
* This file implements Solaris compatible getmntany() and hasmntopt()
|
|
|
|
* functions.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <sys/cdefs.h>
|
|
|
|
__FBSDID("$FreeBSD$");
|
|
|
|
|
|
|
|
#include <sys/param.h>
|
|
|
|
#include <sys/mount.h>
|
|
|
|
#include <sys/mntent.h>
|
|
|
|
#include <sys/mnttab.h>
|
|
|
|
|
|
|
|
#include <ctype.h>
|
|
|
|
#include <errno.h>
|
2022-05-24 16:40:20 +00:00
|
|
|
#include <pthread.h>
|
2020-04-14 18:36:28 +00:00
|
|
|
#include <stdio.h>
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include <string.h>
|
|
|
|
|
|
|
|
static char *
|
|
|
|
mntopt(char **p)
|
|
|
|
{
|
|
|
|
char *cp = *p;
|
|
|
|
char *retstr;
|
|
|
|
|
|
|
|
while (*cp && isspace(*cp))
|
|
|
|
cp++;
|
|
|
|
|
|
|
|
retstr = cp;
|
|
|
|
while (*cp && *cp != ',')
|
|
|
|
cp++;
|
|
|
|
|
|
|
|
if (*cp) {
|
|
|
|
*cp = '\0';
|
|
|
|
cp++;
|
|
|
|
}
|
|
|
|
|
|
|
|
*p = cp;
|
|
|
|
return (retstr);
|
|
|
|
}
|
|
|
|
|
|
|
|
char *
|
2022-06-30 18:31:09 +00:00
|
|
|
hasmntopt(struct mnttab *mnt, const char *opt)
|
2020-04-14 18:36:28 +00:00
|
|
|
{
|
|
|
|
char tmpopts[MNT_LINE_MAX];
|
|
|
|
char *f, *opts = tmpopts;
|
|
|
|
|
|
|
|
if (mnt->mnt_mntopts == NULL)
|
|
|
|
return (NULL);
|
Fix unsafe string operations
Coverity caught unsafe use of `strcpy()` in `ztest_dmu_objset_own()`,
`nfs_init_tmpfile()` and `dump_snapshot()`. It also caught an unsafe use
of `strlcat()` in `nfs_init_tmpfile()`.
Inspired by this, I did an audit of every single usage of `strcpy()` and
`strcat()` in the code. If I could not prove that the usage was safe, I
changed the code to use either `strlcpy()` or `strlcat()`, depending on
which function was originally used. In some cases, `snprintf()` was used
to replace multiple uses of `strcat` because it was cleaner.
Whenever I changed a function, I preferred to use `sizeof(dst)` when the
compiler is able to provide the string size via that. When it could not
because the string was passed by a caller, I checked the entire call
tree of the function to find out how big the buffer was and hard coded
it. Hardcoding is less than ideal, but it is safe unless someone shrinks
the buffer sizes being passed.
Additionally, Coverity reported three more string related issues:
* It caught a case where we do an overlapping memory copy in a call to
`snprintf()`. We fix that via `kmem_strdup()` and `kmem_strfree()`.
* It caught `sizeof (buf)` being used instead of `buflen` in
`zdb_nicenum()`'s call to `zfs_nicenum()`, which is passed to
`snprintf()`. We change that to pass `buflen`.
* It caught a theoretical unterminated string passed to `strcmp()`.
This one is likely a false positive, but we have the information
needed to do this more safely, so we change this to silence the false
positive not just in coverity, but potentially other static analysis
tools too. We switch to `strncmp()`.
* There was a false positive in tests/zfs-tests/cmd/dir_rd_update.c. We
suppress it by switching to `snprintf()` since other static analysis
tools might complain about it too. Interestingly, there is a possible
real bug there too, since it assumes that the passed directory path
ends with '/'. We add a '/' to fix that potential bug.
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Richard Yao <richard.yao@alumni.stonybrook.edu>
Closes #13913
2022-09-27 23:47:24 +00:00
|
|
|
(void) strlcpy(opts, mnt->mnt_mntopts, MNT_LINE_MAX);
|
2020-04-14 18:36:28 +00:00
|
|
|
f = mntopt(&opts);
|
|
|
|
for (; *f; f = mntopt(&opts)) {
|
|
|
|
if (strncmp(opt, f, strlen(opt)) == 0)
|
|
|
|
return (f - tmpopts + mnt->mnt_mntopts);
|
|
|
|
}
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
|
|
|
optadd(char *mntopts, size_t size, const char *opt)
|
|
|
|
{
|
|
|
|
|
|
|
|
if (mntopts[0] != '\0')
|
|
|
|
strlcat(mntopts, ",", size);
|
|
|
|
strlcat(mntopts, opt, size);
|
|
|
|
}
|
|
|
|
|
2022-01-14 20:38:32 +00:00
|
|
|
static __thread char gfstypename[MFSNAMELEN];
|
|
|
|
static __thread char gmntfromname[MNAMELEN];
|
|
|
|
static __thread char gmntonname[MNAMELEN];
|
|
|
|
static __thread char gmntopts[MNTMAXSTR];
|
|
|
|
|
2020-04-14 18:36:28 +00:00
|
|
|
void
|
|
|
|
statfs2mnttab(struct statfs *sfs, struct mnttab *mp)
|
|
|
|
{
|
|
|
|
long flags;
|
|
|
|
|
2022-01-14 20:38:32 +00:00
|
|
|
strlcpy(gfstypename, sfs->f_fstypename, sizeof (gfstypename));
|
|
|
|
mp->mnt_fstype = gfstypename;
|
|
|
|
|
|
|
|
strlcpy(gmntfromname, sfs->f_mntfromname, sizeof (gmntfromname));
|
|
|
|
mp->mnt_special = gmntfromname;
|
|
|
|
|
|
|
|
strlcpy(gmntonname, sfs->f_mntonname, sizeof (gmntonname));
|
|
|
|
mp->mnt_mountp = gmntonname;
|
2020-04-14 18:36:28 +00:00
|
|
|
|
|
|
|
flags = sfs->f_flags;
|
2022-01-14 20:38:32 +00:00
|
|
|
gmntopts[0] = '\0';
|
|
|
|
#define OPTADD(opt) optadd(gmntopts, sizeof (gmntopts), (opt))
|
2020-04-14 18:36:28 +00:00
|
|
|
if (flags & MNT_RDONLY)
|
|
|
|
OPTADD(MNTOPT_RO);
|
|
|
|
else
|
|
|
|
OPTADD(MNTOPT_RW);
|
|
|
|
if (flags & MNT_NOSUID)
|
|
|
|
OPTADD(MNTOPT_NOSETUID);
|
|
|
|
else
|
|
|
|
OPTADD(MNTOPT_SETUID);
|
|
|
|
if (flags & MNT_UPDATE)
|
|
|
|
OPTADD(MNTOPT_REMOUNT);
|
|
|
|
if (flags & MNT_NOATIME)
|
|
|
|
OPTADD(MNTOPT_NOATIME);
|
|
|
|
else
|
|
|
|
OPTADD(MNTOPT_ATIME);
|
|
|
|
OPTADD(MNTOPT_NOXATTR);
|
|
|
|
if (flags & MNT_NOEXEC)
|
|
|
|
OPTADD(MNTOPT_NOEXEC);
|
|
|
|
else
|
|
|
|
OPTADD(MNTOPT_EXEC);
|
|
|
|
#undef OPTADD
|
2022-01-14 20:38:32 +00:00
|
|
|
mp->mnt_mntopts = gmntopts;
|
2020-04-14 18:36:28 +00:00
|
|
|
}
|
|
|
|
|
2022-05-24 16:40:20 +00:00
|
|
|
static pthread_rwlock_t gsfs_lock = PTHREAD_RWLOCK_INITIALIZER;
|
2020-04-14 18:36:28 +00:00
|
|
|
static struct statfs *gsfs = NULL;
|
|
|
|
static int allfs = 0;
|
|
|
|
|
|
|
|
static int
|
|
|
|
statfs_init(void)
|
|
|
|
{
|
|
|
|
struct statfs *sfs;
|
|
|
|
int error;
|
|
|
|
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_wrlock(&gsfs_lock);
|
|
|
|
|
2020-04-14 18:36:28 +00:00
|
|
|
if (gsfs != NULL) {
|
|
|
|
free(gsfs);
|
|
|
|
gsfs = NULL;
|
|
|
|
}
|
libzfs: On FreeBSD, use MNT_NOWAIT with getfsstat
`getfsstat(2)` is used to retrieve the list of mounted file systems,
which libzfs uses when fetching properties like mountpoint, atime,
setuid, etc. The `mode` parameter may be `MNT_NOWAIT`, which uses
information in the VFS's cache, or `MNT_WAIT`, which effectively does a
`statfs` on every single mounted file system in order to fetch the most
up-to-date information. As far as I can tell, the only fields that
libzfs cares about are the filesystem's name, mountpoint, fstypename,
and mount flags. Those things are always updated on mount and unmount,
so they will always be accurate in the VFS's mount cache except in two
circumstances:
1) When a file system is busy unmounting
2) When a ZFS file system changes the value of a mount-overridable
property like atime or setuid, but doesn't remount the file system.
Right now that only happens when the property is changed by an
unprivileged user who has delegated authority to change the property
but not to mount the dataset. But perhaps libzfs could choose to do
it for other reasons in the future.
Switching to `MNT_NOWAIT` will greatly improve speed with no downside,
as long as we explicitly update the mount cache whenever we change a
mount-overridable property.
For comparison, Illumos gets this information using the native
`getmntany` and `getmntent` functions, which also use cached
information. The illumos function that would refresh the cache,
`resetmnttab`, is never called by libzfs.
And on GNU/Linux, `getmntany` and `getmntent` don't even communicate
with the kernel directly. They simply parse the file they are given,
which is usually /etc/mtab or /proc/mounts. Perhaps the implementation
of /proc/mounts is synchronous, ala MNT_WAIT; I don't know.
Sponsored-by: Axcient
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Alan Somers <asomers@gmail.com>
Closes: #12091
2021-06-08 13:36:43 +00:00
|
|
|
allfs = getfsstat(NULL, 0, MNT_NOWAIT);
|
2020-04-14 18:36:28 +00:00
|
|
|
if (allfs == -1)
|
|
|
|
goto fail;
|
|
|
|
gsfs = malloc(sizeof (gsfs[0]) * allfs * 2);
|
|
|
|
if (gsfs == NULL)
|
|
|
|
goto fail;
|
|
|
|
allfs = getfsstat(gsfs, (long)(sizeof (gsfs[0]) * allfs * 2),
|
libzfs: On FreeBSD, use MNT_NOWAIT with getfsstat
`getfsstat(2)` is used to retrieve the list of mounted file systems,
which libzfs uses when fetching properties like mountpoint, atime,
setuid, etc. The `mode` parameter may be `MNT_NOWAIT`, which uses
information in the VFS's cache, or `MNT_WAIT`, which effectively does a
`statfs` on every single mounted file system in order to fetch the most
up-to-date information. As far as I can tell, the only fields that
libzfs cares about are the filesystem's name, mountpoint, fstypename,
and mount flags. Those things are always updated on mount and unmount,
so they will always be accurate in the VFS's mount cache except in two
circumstances:
1) When a file system is busy unmounting
2) When a ZFS file system changes the value of a mount-overridable
property like atime or setuid, but doesn't remount the file system.
Right now that only happens when the property is changed by an
unprivileged user who has delegated authority to change the property
but not to mount the dataset. But perhaps libzfs could choose to do
it for other reasons in the future.
Switching to `MNT_NOWAIT` will greatly improve speed with no downside,
as long as we explicitly update the mount cache whenever we change a
mount-overridable property.
For comparison, Illumos gets this information using the native
`getmntany` and `getmntent` functions, which also use cached
information. The illumos function that would refresh the cache,
`resetmnttab`, is never called by libzfs.
And on GNU/Linux, `getmntany` and `getmntent` don't even communicate
with the kernel directly. They simply parse the file they are given,
which is usually /etc/mtab or /proc/mounts. Perhaps the implementation
of /proc/mounts is synchronous, ala MNT_WAIT; I don't know.
Sponsored-by: Axcient
Reviewed-by: Ryan Moeller <ryan@iXsystems.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Alan Somers <asomers@gmail.com>
Closes: #12091
2021-06-08 13:36:43 +00:00
|
|
|
MNT_NOWAIT);
|
2020-04-14 18:36:28 +00:00
|
|
|
if (allfs == -1)
|
|
|
|
goto fail;
|
|
|
|
sfs = realloc(gsfs, allfs * sizeof (gsfs[0]));
|
|
|
|
if (sfs != NULL)
|
|
|
|
gsfs = sfs;
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_unlock(&gsfs_lock);
|
2020-04-14 18:36:28 +00:00
|
|
|
return (0);
|
|
|
|
fail:
|
|
|
|
error = errno;
|
|
|
|
if (gsfs != NULL)
|
|
|
|
free(gsfs);
|
|
|
|
gsfs = NULL;
|
|
|
|
allfs = 0;
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_unlock(&gsfs_lock);
|
2020-04-14 18:36:28 +00:00
|
|
|
return (error);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
getmntany(FILE *fd __unused, struct mnttab *mgetp, struct mnttab *mrefp)
|
|
|
|
{
|
|
|
|
int i, error;
|
|
|
|
|
|
|
|
error = statfs_init();
|
|
|
|
if (error != 0)
|
|
|
|
return (error);
|
|
|
|
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_rdlock(&gsfs_lock);
|
|
|
|
|
2020-04-14 18:36:28 +00:00
|
|
|
for (i = 0; i < allfs; i++) {
|
|
|
|
if (mrefp->mnt_special != NULL &&
|
|
|
|
strcmp(mrefp->mnt_special, gsfs[i].f_mntfromname) != 0) {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
if (mrefp->mnt_mountp != NULL &&
|
|
|
|
strcmp(mrefp->mnt_mountp, gsfs[i].f_mntonname) != 0) {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
if (mrefp->mnt_fstype != NULL &&
|
|
|
|
strcmp(mrefp->mnt_fstype, gsfs[i].f_fstypename) != 0) {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
statfs2mnttab(&gsfs[i], mgetp);
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_unlock(&gsfs_lock);
|
2020-04-14 18:36:28 +00:00
|
|
|
return (0);
|
|
|
|
}
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_unlock(&gsfs_lock);
|
2020-04-14 18:36:28 +00:00
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
getmntent(FILE *fp, struct mnttab *mp)
|
|
|
|
{
|
|
|
|
int error, nfs;
|
|
|
|
|
|
|
|
nfs = (int)lseek(fileno(fp), 0, SEEK_CUR);
|
|
|
|
if (nfs == -1)
|
|
|
|
return (errno);
|
|
|
|
/* If nfs is 0, we want to refresh out cache. */
|
|
|
|
if (nfs == 0 || gsfs == NULL) {
|
|
|
|
error = statfs_init();
|
|
|
|
if (error != 0)
|
|
|
|
return (error);
|
|
|
|
}
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_rdlock(&gsfs_lock);
|
|
|
|
if (nfs >= allfs) {
|
|
|
|
(void) pthread_rwlock_unlock(&gsfs_lock);
|
2020-04-14 18:36:28 +00:00
|
|
|
return (-1);
|
2022-05-24 16:40:20 +00:00
|
|
|
}
|
2020-04-14 18:36:28 +00:00
|
|
|
statfs2mnttab(&gsfs[nfs], mp);
|
2022-05-24 16:40:20 +00:00
|
|
|
(void) pthread_rwlock_unlock(&gsfs_lock);
|
2020-04-14 18:36:28 +00:00
|
|
|
if (lseek(fileno(fp), 1, SEEK_CUR) == -1)
|
|
|
|
return (errno);
|
|
|
|
return (0);
|
|
|
|
}
|