From e0c6872cf40896c7be36b11dcc744620f10adf1d Mon Sep 17 00:00:00 2001 From: Norbert Preining Date: Mon, 2 Sep 2019 13:46:59 +0900 Subject: Initial commit --- support/dktools/dk4fopc8.h | 143 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 143 insertions(+) create mode 100644 support/dktools/dk4fopc8.h (limited to 'support/dktools/dk4fopc8.h') diff --git a/support/dktools/dk4fopc8.h b/support/dktools/dk4fopc8.h new file mode 100644 index 0000000000..dbe333dcca --- /dev/null +++ b/support/dktools/dk4fopc8.h @@ -0,0 +1,143 @@ +/* + WARNING: This file was generated by dkct. + Changes you make here will be lost if dkct is run again! + You should modify the original source and run dkct on it. + Original source: dk4fopc8.ctr +*/ + +/* +Copyright (C) 2015-2017, Dirk Krause + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + +* Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. +* Redistributions in binary form must reproduce the above opyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. +* Neither the name of the author nor the names of contributors may be used + to endorse or promote products derived from this software without specific + prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS'' +AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +ARE DISCLAIMED. +IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY +DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES +(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; +LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND +ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF +THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +*/ + +#ifndef DK4FOPC8_H_INCLUDED +/** Avoid multiple inclusions. */ +#define DK4FOPC8_H_INCLUDED 1 + + +#line 10 "dk4fopc8.ctr" + +/** @file + Open file, apply additional security + checks before attempting to open the file. + + Attempts to open a directory as a file are rejected. + + Further optional checks can be applied to avoid: + - writing to non-regular files, + - writing to files with any symbolic link component in the path, + - writing to files via symbolic link, + - writing to files via symbolic link if link owner differs + from file owner. +*/ + +#ifndef DK4CONF_H_INCLUDED +#include "dk4conf.h" +#endif + +#ifndef DK4TYPES_H_INCLUDED +#include "dk4types.h" +#endif + +#ifndef DK4ERROR_H_INCLUDED +#include "dk4error.h" +#endif + +#ifndef DK4NUMCO_H_INCLUDED +#include "dk4numco.h" +#endif + +#ifndef DK4FOPT_H_INCLUDED +#include "dk4fopt.h" +#endif + +#ifndef STDIO_H_INCLUDED +#include +#define STDIO_H_INCLUDED 1 +#endif + +#ifdef __cplusplus +extern "C" { +#endif + +/** Open a file after doing security checks. + CRT on Windows: Required. + @param name File name to open. + @param mode Opening mode. + @param tests Set of tests. + @param erp Error report, may be NULL. + @return Pointer to open file on success, NULL on error. + + Error codes: + - DK4_E_INVALID_ARGUMENTS
+ if name is NULL, + - DK4_E_SYNTAX
+ if name does not refer to a regular file, + - DK4_E_SEC_CHECK
+ with failed echek id (DK4_FOPEN_SC_WR_PATH_IS_SYMLINK or + DK4_FOPEN_SC_WR_SYMLINK_OWNER) in iDetails1 if access is denied by + additional security checks, + - DK4_E_OPEN_WRITE_FAILED
+ or DK4_E_OPEN_READ_FAILED with errno value in iDetails1 if fopen() + failed. + +*/ +FILE * +dk4fopen_c8(const char *name, const char *mode, int tests, dk4_er_t *erp); + +/** Check whether we can allow to open the file. + The file must be a regular file. + Only POSIX: For root we deny opening for writing via symlink. + For all users we deny opening for writing via symlink + if the link owner is not the real file owner. + + CRT on Windows: Required. + @param name File name to check. + @param ww Flag: Write access wanted. + @param tests Set of tests. + @param erp Error report, may be NULL. + @return 1 if opening the file is allowed, 0 otherwise. + + Error codes: + - DK4_E_INVALID_ARGUMENTS
+ if name is NULL, + - DK4_E_SYNTAX
+ if name is not a regular file, + - DK4_E_SEC_CHECK
+ if access to a symlink target is denied symlink owner and target + owner differ. + +*/ +int +dk4fopen_check_c8(const char *name, int ww, int tests, dk4_er_t *erp); + +#ifdef __cplusplus +} +#endif + + + +#endif -- cgit v1.2.3