#![allow(non_camel_case_types)] use crate::sys::hostcalls_impl::fs_helpers::*; use crate::sys::{errno_from_host, host_impl}; use crate::{host, Result}; use std::fs::File; use std::path::{Component, Path}; pub(crate) struct PathGet { dirfd: File, path: String, } impl PathGet { pub(crate) fn dirfd(&self) -> &File { &self.dirfd } pub(crate) fn path(&self) -> &str { &self.path } } /// Normalizes a path to ensure that the target path is located under the directory provided. /// /// This is a workaround for not having Capsicum support in the OS. pub(crate) fn path_get( dirfd: &File, dirflags: host::__wasi_lookupflags_t, path: &str, needs_final_component: bool, ) -> Result { const MAX_SYMLINK_EXPANSIONS: usize = 128; if path.contains('\0') { // if contains NUL, return EILSEQ return Err(host::__WASI_EILSEQ); } let dirfd = dirfd.try_clone().map_err(|err| { err.raw_os_error() .map_or(host::__WASI_EBADF, errno_from_host) })?; // Stack of directory file descriptors. Index 0 always corresponds with the directory provided // to this function. Entering a directory causes a file descriptor to be pushed, while handling // ".." entries causes an entry to be popped. Index 0 cannot be popped, as this would imply // escaping the base directory. let mut dir_stack = vec![dirfd]; // Stack of paths left to process. This is initially the `path` argument to this function, but // any symlinks we encounter are processed by pushing them on the stack. let mut path_stack = vec![path.to_owned()]; // Track the number of symlinks we've expanded, so we can return `ELOOP` after too many. let mut symlink_expansions = 0; // TODO: rewrite this using a custom posix path type, with a component iterator that respects // trailing slashes. This version does way too much allocation, and is way too fiddly. loop { match path_stack.pop() { Some(cur_path) => { log::debug!("cur_path = {:?}", cur_path); let ends_with_slash = cur_path.ends_with("/"); let mut components = Path::new(&cur_path).components(); let head = match components.next() { None => return Err(host::__WASI_ENOENT), Some(p) => p, }; let tail = components.as_path(); if tail.components().next().is_some() { let mut tail = host_impl::path_from_host(tail.as_os_str())?; if ends_with_slash { tail.push_str("/"); } path_stack.push(tail); } match head { Component::Prefix(_) | Component::RootDir => { // path is absolute! return Err(host::__WASI_ENOTCAPABLE); } Component::CurDir => { // "." so skip } Component::ParentDir => { // ".." so pop a dir let _ = dir_stack.pop().ok_or(host::__WASI_ENOTCAPABLE)?; // we're not allowed to pop past the original directory if dir_stack.is_empty() { return Err(host::__WASI_ENOTCAPABLE); } } Component::Normal(head) => { let mut head = host_impl::path_from_host(head)?; if ends_with_slash { // preserve trailing slash head.push_str("/"); } if !path_stack.is_empty() || (ends_with_slash && !needs_final_component) { match openat(dir_stack.last().ok_or(host::__WASI_ENOTCAPABLE)?, &head) { Ok(new_dir) => { dir_stack.push(new_dir); } Err(e) if e == host::__WASI_ELOOP || e == host::__WASI_EMLINK || e == host::__WASI_ENOTDIR => // Check to see if it was a symlink. Linux indicates // this with ENOTDIR because of the O_DIRECTORY flag. { // attempt symlink expansion let mut link_path = readlinkat( dir_stack.last().ok_or(host::__WASI_ENOTCAPABLE)?, &head, )?; symlink_expansions += 1; if symlink_expansions > MAX_SYMLINK_EXPANSIONS { return Err(host::__WASI_ELOOP); } if head.ends_with("/") { link_path.push_str("/"); } log::debug!( "attempted symlink expansion link_path={:?}", link_path ); path_stack.push(link_path); } Err(e) => { return Err(e); } } continue; } else if ends_with_slash || (dirflags & host::__WASI_LOOKUP_SYMLINK_FOLLOW) != 0 { // if there's a trailing slash, or if `LOOKUP_SYMLINK_FOLLOW` is set, attempt // symlink expansion match readlinkat( dir_stack.last().ok_or(host::__WASI_ENOTCAPABLE)?, &head, ) { Ok(mut link_path) => { symlink_expansions += 1; if symlink_expansions > MAX_SYMLINK_EXPANSIONS { return Err(host::__WASI_ELOOP); } if head.ends_with("/") { link_path.push_str("/"); } log::debug!( "attempted symlink expansion link_path={:?}", link_path ); path_stack.push(link_path); continue; } Err(e) => { if e != host::__WASI_EINVAL && e != host::__WASI_ENOENT { return Err(e); } } } } // not a symlink, so we're done; return Ok(PathGet { dirfd: dir_stack.pop().ok_or(host::__WASI_ENOTCAPABLE)?, path: head, }); } } } None => { // no further components to process. means we've hit a case like "." or "a/..", or if the // input path has trailing slashes and `needs_final_component` is not set return Ok(PathGet { dirfd: dir_stack.pop().ok_or(host::__WASI_ENOTCAPABLE)?, path: String::from("."), }); } } } }