1 /* Cache handling for passwd lookup.
2 Copyright (C) 1998-2018 Free Software Foundation, Inc.
3 This file is part of the GNU C Library.
4 Contributed by Ulrich Drepper <drepper@cygnus.com>, 1998.
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published
8 by the Free Software Foundation; version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, see <http://www.gnu.org/licenses/>. */
33 #include <sys/socket.h>
34 #include <stackinfo.h>
39 # include <kernel-features.h>
42 /* This is the standard reply in case the service is disabled. */
43 static const pw_response_header disabled
=
45 .version
= NSCD_VERSION
,
56 /* This is the struct describing how to write this record. */
57 const struct iovec pwd_iov_disabled
=
59 .iov_base
= (void *) &disabled
,
60 .iov_len
= sizeof (disabled
)
64 /* This is the standard reply in case we haven't found the dataset. */
65 static const pw_response_header notfound
=
67 .version
= NSCD_VERSION
,
80 cache_addpw (struct database_dyn
*db
, int fd
, request_header
*req
,
81 const void *key
, struct passwd
*pwd
, uid_t owner
,
82 struct hashentry
*const he
, struct datahead
*dh
, int errval
)
84 bool all_written
= true;
86 time_t t
= time (NULL
);
88 /* We allocate all data in one memory block: the iov vector,
89 the response header and the dataset itself. */
93 pw_response_header resp
;
97 assert (offsetof (struct dataset
, resp
) == offsetof (struct datahead
, data
));
99 time_t timeout
= MAX_TIMEOUT_VALUE
;
102 if (he
!= NULL
&& errval
== EAGAIN
)
104 /* If we have an old record available but cannot find one
105 now because the service is not available we keep the old
106 record and make sure it does not get removed. */
107 if (reload_count
!= UINT_MAX
&& dh
->nreloads
== reload_count
)
108 /* Do not reset the value if we never not reload the record. */
109 dh
->nreloads
= reload_count
- 1;
111 /* Reload with the same time-to-live value. */
112 timeout
= dh
->timeout
= t
+ db
->postimeout
;
118 /* We have no data. This means we send the standard reply for this
120 total
= sizeof (notfound
);
123 && TEMP_FAILURE_RETRY (send (fd
, ¬found
, total
,
124 MSG_NOSIGNAL
)) != total
)
127 /* If we have a transient error or cannot permanently store
128 the result, so be it. */
129 if (errno
== EAGAIN
|| __builtin_expect (db
->negtimeout
== 0, 0))
131 /* Mark the old entry as obsolete. */
135 else if ((dataset
= mempool_alloc (db
, (sizeof (struct dataset
)
136 + req
->key_len
), 1)) != NULL
)
138 timeout
= datahead_init_neg (&dataset
->head
,
139 (sizeof (struct dataset
)
140 + req
->key_len
), total
,
143 /* This is the reply. */
144 memcpy (&dataset
->resp
, ¬found
, total
);
146 /* Copy the key data. */
147 char *key_copy
= memcpy (dataset
->strdata
, key
, req
->key_len
);
149 /* If necessary, we also propagate the data to disk. */
153 uintptr_t pval
= (uintptr_t) dataset
& ~pagesize_m1
;
154 msync ((void *) pval
,
155 ((uintptr_t) dataset
& pagesize_m1
)
156 + sizeof (struct dataset
) + req
->key_len
, MS_ASYNC
);
159 (void) cache_add (req
->type
, key_copy
, req
->key_len
,
160 &dataset
->head
, true, db
, owner
, he
== NULL
);
162 pthread_rwlock_unlock (&db
->lock
);
164 /* Mark the old entry as obsolete. */
172 /* Determine the I/O structure. */
173 size_t pw_name_len
= strlen (pwd
->pw_name
) + 1;
174 size_t pw_passwd_len
= strlen (pwd
->pw_passwd
) + 1;
175 size_t pw_gecos_len
= strlen (pwd
->pw_gecos
) + 1;
176 size_t pw_dir_len
= strlen (pwd
->pw_dir
) + 1;
177 size_t pw_shell_len
= strlen (pwd
->pw_shell
) + 1;
179 const size_t key_len
= strlen (key
);
180 const size_t buf_len
= 3 * sizeof (pwd
->pw_uid
) + key_len
+ 1;
181 char *buf
= alloca (buf_len
);
184 /* We need this to insert the `byuid' entry. */
186 n
= snprintf (buf
, buf_len
, "%d%c%n%s", pwd
->pw_uid
, '\0',
187 &key_offset
, (char *) key
) + 1;
189 total
= (offsetof (struct dataset
, strdata
)
190 + pw_name_len
+ pw_passwd_len
191 + pw_gecos_len
+ pw_dir_len
+ pw_shell_len
);
193 /* If we refill the cache, first assume the reconrd did not
194 change. Allocate memory on the cache since it is likely
195 discarded anyway. If it turns out to be necessary to have a
196 new record we can still allocate real memory. */
197 bool alloca_used
= false;
202 /* Prevent an INVALIDATE request from pruning the data between
203 the two calls to cache_add. */
205 pthread_mutex_lock (&db
->prune_run_lock
);
206 dataset
= (struct dataset
*) mempool_alloc (db
, total
+ n
, 1);
211 if (he
== NULL
&& db
->propagate
)
212 pthread_mutex_unlock (&db
->prune_run_lock
);
214 /* We cannot permanently add the result in the moment. But
215 we can provide the result as is. Store the data in some
217 dataset
= (struct dataset
*) alloca (total
+ n
);
219 /* We cannot add this record to the permanent database. */
223 timeout
= datahead_init_pos (&dataset
->head
, total
+ n
,
224 total
- offsetof (struct dataset
, resp
),
225 he
== NULL
? 0 : dh
->nreloads
+ 1,
228 dataset
->resp
.version
= NSCD_VERSION
;
229 dataset
->resp
.found
= 1;
230 dataset
->resp
.pw_name_len
= pw_name_len
;
231 dataset
->resp
.pw_passwd_len
= pw_passwd_len
;
232 dataset
->resp
.pw_uid
= pwd
->pw_uid
;
233 dataset
->resp
.pw_gid
= pwd
->pw_gid
;
234 dataset
->resp
.pw_gecos_len
= pw_gecos_len
;
235 dataset
->resp
.pw_dir_len
= pw_dir_len
;
236 dataset
->resp
.pw_shell_len
= pw_shell_len
;
238 cp
= dataset
->strdata
;
240 /* Copy the strings over into the buffer. */
241 cp
= mempcpy (cp
, pwd
->pw_name
, pw_name_len
);
242 cp
= mempcpy (cp
, pwd
->pw_passwd
, pw_passwd_len
);
243 cp
= mempcpy (cp
, pwd
->pw_gecos
, pw_gecos_len
);
244 cp
= mempcpy (cp
, pwd
->pw_dir
, pw_dir_len
);
245 cp
= mempcpy (cp
, pwd
->pw_shell
, pw_shell_len
);
247 /* Finally the stringified UID value. */
249 char *key_copy
= cp
+ key_offset
;
250 assert (key_copy
== (char *) rawmemchr (cp
, '\0') + 1);
252 assert (cp
== dataset
->strdata
+ total
- offsetof (struct dataset
,
255 /* Now we can determine whether on refill we have to create a new
261 if (dataset
->head
.allocsize
== dh
->allocsize
262 && dataset
->head
.recsize
== dh
->recsize
263 && memcmp (&dataset
->resp
, dh
->data
,
264 dh
->allocsize
- offsetof (struct dataset
, resp
)) == 0)
266 /* The data has not changed. We will just bump the
267 timeout value. Note that the new record has been
268 allocated on the stack and need not be freed. */
269 dh
->timeout
= dataset
->head
.timeout
;
274 /* We have to create a new record. Just allocate
275 appropriate memory and copy it. */
277 = (struct dataset
*) mempool_alloc (db
, total
+ n
, 1);
280 /* Adjust pointer into the memory block. */
281 cp
= (char *) newp
+ (cp
- (char *) dataset
);
282 key_copy
= (char *) newp
+ (key_copy
- (char *) dataset
);
284 dataset
= memcpy (newp
, dataset
, total
+ n
);
288 /* Mark the old record as obsolete. */
294 /* We write the dataset before inserting it to the database
295 since while inserting this thread might block and so would
296 unnecessarily let the receiver wait. */
300 if (__builtin_expect (db
->mmap_used
, 1) && !alloca_used
)
302 assert (db
->wr_fd
!= -1);
303 assert ((char *) &dataset
->resp
> (char *) db
->data
);
304 assert ((char *) dataset
- (char *) db
->head
306 <= (sizeof (struct database_pers_head
)
307 + db
->head
->module
* sizeof (ref_t
)
308 + db
->head
->data_size
));
309 ssize_t written
= sendfileall (fd
, db
->wr_fd
,
310 (char *) &dataset
->resp
312 dataset
->head
.recsize
);
313 if (written
!= dataset
->head
.recsize
)
315 # ifndef __ASSUME_SENDFILE
316 if (written
== -1 && errno
== ENOSYS
)
323 # ifndef __ASSUME_SENDFILE
327 if (writeall (fd
, &dataset
->resp
, dataset
->head
.recsize
)
328 != dataset
->head
.recsize
)
333 /* Add the record to the database. But only if it has not been
334 stored on the stack. */
337 /* If necessary, we also propagate the data to disk. */
341 uintptr_t pval
= (uintptr_t) dataset
& ~pagesize_m1
;
342 msync ((void *) pval
,
343 ((uintptr_t) dataset
& pagesize_m1
) + total
+ n
,
347 /* NB: in the following code we always must add the entry
348 marked with FIRST first. Otherwise we end up with
349 dangling "pointers" in case a latter hash entry cannot be
353 /* If the request was by UID, add that entry first. */
354 if (req
->type
== GETPWBYUID
)
356 if (cache_add (GETPWBYUID
, cp
, key_offset
, &dataset
->head
, true,
357 db
, owner
, he
== NULL
) < 0)
362 /* If the key is different from the name add a separate entry. */
363 else if (strcmp (key_copy
, dataset
->strdata
) != 0)
365 if (cache_add (GETPWBYNAME
, key_copy
, key_len
+ 1,
366 &dataset
->head
, true, db
, owner
, he
== NULL
) < 0)
372 /* We have to add the value for both, byname and byuid. */
373 if ((req
->type
== GETPWBYNAME
|| db
->propagate
)
374 && __builtin_expect (cache_add (GETPWBYNAME
, dataset
->strdata
,
375 pw_name_len
, &dataset
->head
,
376 first
, db
, owner
, he
== NULL
)
379 if (req
->type
== GETPWBYNAME
&& db
->propagate
)
380 (void) cache_add (GETPWBYUID
, cp
, key_offset
, &dataset
->head
,
381 false, db
, owner
, false);
385 pthread_rwlock_unlock (&db
->lock
);
386 if (he
== NULL
&& db
->propagate
)
387 pthread_mutex_unlock (&db
->prune_run_lock
);
391 if (__builtin_expect (!all_written
, 0) && debug_level
> 0)
394 dbg_log (_("short write in %s: %s"), __FUNCTION__
,
395 strerror_r (errno
, buf
, sizeof (buf
)));
410 lookup (int type
, union keytype key
, struct passwd
*resultbufp
, char *buffer
,
411 size_t buflen
, struct passwd
**pwd
)
413 if (type
== GETPWBYNAME
)
414 return __getpwnam_r (key
.v
, resultbufp
, buffer
, buflen
, pwd
);
416 return __getpwuid_r (key
.u
, resultbufp
, buffer
, buflen
, pwd
);
421 addpwbyX (struct database_dyn
*db
, int fd
, request_header
*req
,
422 union keytype key
, const char *keystr
, uid_t c_uid
,
423 struct hashentry
*he
, struct datahead
*dh
)
425 /* Search for the entry matching the key. Please note that we don't
426 look again in the table whether the dataset is now available. We
427 simply insert it. It does not matter if it is in there twice. The
428 pruning function only will look at the timestamp. */
429 size_t buflen
= 1024;
430 char *buffer
= (char *) alloca (buflen
);
431 struct passwd resultbuf
;
433 bool use_malloc
= false;
436 if (__glibc_unlikely (debug_level
> 0))
439 dbg_log (_("Haven't found \"%s\" in password cache!"), keystr
);
441 dbg_log (_("Reloading \"%s\" in password cache!"), keystr
);
444 while (lookup (req
->type
, key
, &resultbuf
, buffer
, buflen
, &pwd
) != 0
445 && (errval
= errno
) == ERANGE
)
449 if (__glibc_unlikely (buflen
> 32768))
451 char *old_buffer
= buffer
;
453 buffer
= (char *) realloc (use_malloc
? buffer
: NULL
, buflen
);
456 /* We ran out of memory. We cannot do anything but
457 sending a negative response. In reality this should
462 /* We set the error to indicate this is (possibly) a
463 temporary error and that it does not mean the entry
464 is not available at all. */
471 /* Allocate a new buffer on the stack. If possible combine it
472 with the previously allocated buffer. */
473 buffer
= (char *) extend_alloca (buffer
, buflen
, 2 * buflen
);
476 /* Add the entry to the cache. */
477 time_t timeout
= cache_addpw (db
, fd
, req
, keystr
, pwd
, c_uid
, he
, dh
,
488 addpwbyname (struct database_dyn
*db
, int fd
, request_header
*req
,
489 void *key
, uid_t c_uid
)
491 union keytype u
= { .v
= key
};
493 addpwbyX (db
, fd
, req
, u
, key
, c_uid
, NULL
, NULL
);
498 readdpwbyname (struct database_dyn
*db
, struct hashentry
*he
,
506 union keytype u
= { .v
= db
->data
+ he
->key
};
508 return addpwbyX (db
, -1, &req
, u
, db
->data
+ he
->key
, he
->owner
, he
, dh
);
513 addpwbyuid (struct database_dyn
*db
, int fd
, request_header
*req
,
514 void *key
, uid_t c_uid
)
517 uid_t uid
= strtoul ((char *) key
, &ep
, 10);
519 if (*(char *) key
== '\0' || *ep
!= '\0') /* invalid numeric uid */
522 dbg_log (_("Invalid numeric uid \"%s\"!"), (char *) key
);
528 union keytype u
= { .u
= uid
};
530 addpwbyX (db
, fd
, req
, u
, key
, c_uid
, NULL
, NULL
);
535 readdpwbyuid (struct database_dyn
*db
, struct hashentry
*he
,
539 uid_t uid
= strtoul (db
->data
+ he
->key
, &ep
, 10);
541 /* Since the key has been added before it must be OK. */
542 assert (*(db
->data
+ he
->key
) != '\0' && *ep
== '\0');
549 union keytype u
= { .u
= uid
};
551 return addpwbyX (db
, -1, &req
, u
, db
->data
+ he
->key
, he
->owner
, he
, dh
);