summaryrefslogtreecommitdiff
path: root/support/dktools/dk4fopd.ctr
blob: b4bf1be8e030c9d49ef8a3b9e024cf97d46e0c26 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
%%	options

copyright owner	=	Dirk Krause
copyright year	=	2015-xxxx
SPDX-License-Identifier:	BSD-3-Clause



%%	header

/**	@file
	Open file with additional security
	checks, file name is specified in dkChar characters.
*/

#ifndef	DK4CONF_H_INCLUDED
#if DK4_BUILDING_DKTOOLS4
#include "dk4conf.h"
#else
#include <dktools-4/dk4conf.h>
#endif
#endif

#ifndef	DK4FOPC8_H_INCLUDED
#if DK4_BUILDING_DKTOOLS4
#include "dk4fopc8.h"
#else
#include <dktools-4/dk4fopc8.h>
#endif
#endif

#if DK4_CHAR_SIZE > 1
#ifndef	DK4FOPWC_H_INCLUDED
#if DK4_BUILDING_DKTOOLS4
#include "dk4fopwc.h"
#else
#include <dktools-4/dk4fopwc.h>
#endif
#endif
#endif


#ifdef __cplusplus
extern "C" {
#endif

/**	Open a file after doing security checks.
	CRT on Windows: Required.
	@param	name	File name to open.
	@param	mode	Opening mode.
	@param	tests	Set of tests, see dk4fopc8.h.
	@param	erp	Error report, may be NULL.
	@return	Pointer to open file on success, NULL on error.
	
	Error codes:
	- DK4_E_INVALID_ARGUMENTS<br>
	  if name is NULL,
	- DK4_E_SYNTAX<br>
	  if name does not refer to a regular file,
	- DK4_E_SEC_CHECK<br>
	  with failed check id in iDetails1 if access is denied by additional
	  security checks,
	- DK4_E_OPEN_WRITE_FAILED<br>
	  or DK4_E_OPEN_READ_FAILED with errno value in iDetails1 if fopen()
	  failed.

*/
FILE *
dk4fopen(const dkChar *name, const dkChar *mode, int tests, dk4_er_t *erp);

/**	Check whether we can allow to open the file.
	The file must be a regular file.
	Only POSIX: For root we deny opening for writing via symlink.
	For all users we deny opening for writing via symlink
	if the link owner is not the real file owner.

	CRT on Windows: Required.
	@param	name	File name to check.
	@param	ww	Flag: Write access wanted.
	@param	tests	Set of tests.
	@param	erp	Error report, may be NULL.
	@return	1 if opening the file is allowed, 0 otherwise.
	
	Error codes:
	- DK4_E_INVALID_ARGUMENTS<br>
	  if name is NULL,
	- DK4_E_SYNTAX<br>
	  if name is not a regular file,
	- DK4_E_SEC_CHECK<br>
	  if access to a symlink target is denied symlink owner and target
	  owner differ.

*/
int
dk4fopen_check(const dkChar *name, int ww, int tests, dk4_er_t *erp);

#ifdef __cplusplus
}
#endif

%%	module

#include "dk4conf.h"
#include "dk4fopd.h"

#if DK4_HAVE_ASSERT_H
#ifndef	ASSERT_H_INCLUDED
#include <assert.h>
#define	ASSERT_H_INCLUDED 1
#endif
#endif



FILE *
dk4fopen(const dkChar *name, const dkChar *mode, int tests, dk4_er_t *erp)
{
#if	DK4_USE_ASSERT
  assert(NULL != name);
  assert(NULL != mode);
#endif
#if DK4_CHAR_SIZE > 1
  return (dk4fopen_wc(name, mode, tests, erp));
#else
  return (dk4fopen_c8(name, mode, tests, erp));
#endif
}

int
dk4fopen_check(const dkChar *name, int ww, int tests, dk4_er_t *erp)
{
#if	DK4_USE_ASSERT
  assert(NULL != name);
#endif
#if DK4_CHAR_SIZE > 1
  return (dk4fopen_check_wc(name, ww, tests, erp));
#else
  return (dk4fopen_check_c8(name, ww, tests, erp));
#endif
}