Allow WASI preopen file descriptors to be closed. (#5828)

Early on in WASI, we weren't sure whether we should allow preopens to be
closed, so conservatively, we disallowed them. Among other things, this
protected assumptions in wasi-libc that it can hold onto preopen file
descriptors and rely on them always being open.

However now, I think it makes sense to relax this restriction. wasi-libc
itself doesn't expose the preopen file descriptors, so users shouldn't
ever be closing them naively, unless they have wild closes. And
toolchains other than wasi-libc may want to close preopens as a way to
drop priveleges once the main file handles are opened.
This commit is contained in:
Dan Gohman
2023-02-24 13:06:38 -08:00
committed by GitHub
parent fb2cbec34a
commit 67e2e57b02
4 changed files with 54 additions and 41 deletions

View File

@@ -7,17 +7,7 @@ unsafe fn test_close_preopen(dir_fd: wasi::Fd) {
assert!(dir_fd > pre_fd, "dir_fd number");
// Try to close a preopened directory handle.
assert_errno!(
wasi::fd_close(pre_fd).expect_err("closing a preopened file descriptor"),
wasi::ERRNO_NOTSUP
);
// Try to renumber over a preopened directory handle.
assert_errno!(
wasi::fd_renumber(dir_fd, pre_fd)
.expect_err("renumbering over a preopened file descriptor"),
wasi::ERRNO_NOTSUP
);
wasi::fd_close(pre_fd).expect("closing a preopened file descriptor");
// Ensure that dir_fd is still open.
let dir_fdstat = wasi::fd_fdstat_get(dir_fd).expect("failed fd_fdstat_get");
@@ -27,19 +17,10 @@ unsafe fn test_close_preopen(dir_fd: wasi::Fd) {
"expected the scratch directory to be a directory",
);
// Try to renumber a preopened directory handle.
// Ensure that pre_fd is closed.
assert_errno!(
wasi::fd_renumber(pre_fd, dir_fd)
.expect_err("renumbering over a preopened file descriptor"),
wasi::ERRNO_NOTSUP
);
// Ensure that dir_fd is still open.
let dir_fdstat = wasi::fd_fdstat_get(dir_fd).expect("failed fd_fdstat_get");
assert_eq!(
dir_fdstat.fs_filetype,
wasi::FILETYPE_DIRECTORY,
"expected the scratch directory to be a directory",
wasi::fd_fdstat_get(pre_fd).expect_err("failed fd_fdstat_get"),
wasi::ERRNO_BADF
);
}

View File

@@ -0,0 +1,50 @@
use std::{env, process};
use wasi_tests::{assert_errno, open_scratch_directory};
unsafe fn test_overwrite_preopen(dir_fd: wasi::Fd) {
let pre_fd: wasi::Fd = (libc::STDERR_FILENO + 1) as wasi::Fd;
assert!(dir_fd > pre_fd, "dir_fd number");
let old_dir_filestat = wasi::fd_filestat_get(dir_fd).expect("failed fd_filestat_get");
// Try to renumber over a preopened directory handle.
wasi::fd_renumber(dir_fd, pre_fd)
.expect("renumbering over a preopened file descriptor");
// Ensure that pre_fd is still open.
let new_dir_filestat = wasi::fd_filestat_get(pre_fd).expect("failed fd_filestat_get");
// Ensure that we renumbered.
assert_eq!(old_dir_filestat.dev, new_dir_filestat.dev);
assert_eq!(old_dir_filestat.ino, new_dir_filestat.ino);
// Ensure that dir_fd is closed.
assert_errno!(
wasi::fd_fdstat_get(dir_fd).expect_err("failed fd_fdstat_get"),
wasi::ERRNO_BADF
);
}
fn main() {
let mut args = env::args();
let prog = args.next().unwrap();
let arg = if let Some(arg) = args.next() {
arg
} else {
eprintln!("usage: {} <scratch directory>", prog);
process::exit(1);
};
// Open scratch directory
let dir_fd = match open_scratch_directory(&arg) {
Ok(dir_fd) => dir_fd,
Err(err) => {
eprintln!("{}", err);
process::exit(1)
}
};
// Run the tests.
unsafe { test_overwrite_preopen(dir_fd) }
}