X-Git-Url: http://git.tuebingen.mpg.de/?p=paraslash.git;a=blobdiff_plain;f=afs.c;h=0b24a3b8cdb7c53f70b09bba317f9afe523d9320;hp=30acfa041d4d8b6d483857096b9196e17311ba20;hb=e74b1d28a18c3ddd00ab697618b437aaf05b1f64;hpb=59a4f545566f77a22a8c27ece5155ecd154d4145

diff --git a/afs.c b/afs.c
index 30acfa04..0b24a3b8 100644
--- a/afs.c
+++ b/afs.c
@@ -97,10 +97,11 @@ static char *current_mop; /* mode or playlist specifier. NULL means dummy mood *
 /**
  * A random number used to "authenticate" the connection.
  *
- * para_server picks this number by random before forking the afs process.  The
- * command handlers write this number together with the id of the shared memory
- * area containing the query. This way, a malicious local user has to know this
- * number to be able to cause the afs process to crash by sending fake queries.
+ * para_server picks this number by random before it forks the afs process. The
+ * command handlers know this number as well and write it to the afs socket,
+ * together with the id of the shared memory area which contains the payload of
+ * the afs command. A local process has to know this number to abuse the afs
+ * service provided by the local socket.
  */
 extern uint32_t afs_socket_cookie;
 
@@ -423,7 +424,7 @@ static int pass_afd(int fd, char *buf, size_t size)
 {
 	struct msghdr msg = {.msg_iov = NULL};
 	struct cmsghdr *cmsg;
-	char control[255];
+	char control[255] __a_aligned(8);
 	int ret;
 	struct iovec iov;
 
@@ -501,7 +502,6 @@ static int activate_mood_or_playlist(char *arg, int *num_admissible)
 	enum play_mode mode;
 	int ret;
 
-	PARA_INFO_LOG("new playlist: %s\n", arg);
 	if (!arg) {
 		ret = change_current_mood(NULL); /* always successful */
 		mode = PLAY_MODE_MOOD;
@@ -574,7 +574,7 @@ int afs_cb_result_handler(struct osl_object *result, uint8_t band,
 	}
 }
 
-void flush_and_free_pb(struct para_buffer *pb)
+static void flush_and_free_pb(struct para_buffer *pb)
 {
 	int ret;
 	struct afs_max_size_handler_data *amshd = pb->private_data;
@@ -590,20 +590,12 @@ void flush_and_free_pb(struct para_buffer *pb)
 
 static int com_select_callback(struct afs_callback_arg *aca)
 {
-	struct para_buffer pb = {
-		.max_size = shm_get_shmmax(),
-		.private_data = &(struct afs_max_size_handler_data) {
-			.fd = aca->fd,
-			.band = SBD_OUTPUT
-		},
-		.max_size_handler = afs_max_size_handler,
-	};
 	char *arg = aca->query.data;
 	int num_admissible, ret;
 
 	ret = clear_score_table();
 	if (ret < 0) {
-		para_printf(&pb, "could not clear score table: %s\n",
+		para_printf(&aca->pbout, "could not clear score table: %s\n",
 			para_strerror(-ret));
 		return ret;
 	}
@@ -614,20 +606,19 @@ static int com_select_callback(struct afs_callback_arg *aca)
 	ret = activate_mood_or_playlist(arg, &num_admissible);
 	if (ret >= 0)
 		goto out;
-	para_printf(&pb, "could not activate %s: %s\n"
+	/* ignore subsequent errors (but log them) */
+	para_printf(&aca->pbout, "could not activate %s: %s\n"
 		"switching back to %s\n",
 		arg, para_strerror(-ret), current_mop? current_mop : "dummy");
-	/* ignore subsequent errors (but log them) */
 	ret = activate_mood_or_playlist(current_mop, &num_admissible);
 	if (ret >= 0)
 		goto out;
-	para_printf(&pb, "could not activate %s: %s\nswitching to dummy\n",
+	para_printf(&aca->pbout, "could not activate %s: %s\nswitching to dummy\n",
 		current_mop, para_strerror(-ret));
 	activate_mood_or_playlist(NULL, &num_admissible);
 out:
-	para_printf(&pb, "activated %s (%d admissible files)\n",
+	para_printf(&aca->pbout, "activated %s (%d admissible files)\n",
 		current_mop? current_mop : "dummy mood", num_admissible);
-	flush_and_free_pb(&pb);
 	return ret;
 }
 
@@ -702,7 +693,7 @@ static int make_database_dir(void)
 
 	get_database_dir();
 	ret = para_mkdir(database_dir, 0777);
-	if (ret >= 0 || is_errno(-ret, EEXIST))
+	if (ret >= 0 || ret == -ERRNO_TO_PARA_ERROR(EEXIST))
 		return 1;
 	return ret;
 }
@@ -858,6 +849,12 @@ static int call_callback(int fd, int query_shmid)
 	cq = query_shm;
 	aca.query.data = (char *)query_shm + sizeof(*cq);
 	aca.query.size = cq->query_size;
+	aca.pbout.max_size = shm_get_shmmax();
+	aca.pbout.max_size_handler = afs_max_size_handler;
+	aca.pbout.private_data = &(struct afs_max_size_handler_data) {
+		.fd = fd,
+		.band = SBD_OUTPUT
+	};
 	ret = cq->handler(&aca);
 	ret2 = shm_detach(query_shm);
 	if (ret2 < 0) {
@@ -867,6 +864,7 @@ static int call_callback(int fd, int query_shmid)
 		else
 			ret = ret2;
 	}
+	flush_and_free_pb(&aca.pbout);
 	if (ret < 0) {
 		ret2 = pass_buffer_as_shm(fd, SBD_AFS_CB_FAILURE,
 			(const char *)&ret, sizeof(ret));
@@ -1037,13 +1035,6 @@ static int com_init_callback(struct afs_callback_arg *aca)
 {
 	uint32_t table_mask = *(uint32_t *)aca->query.data;
 	int i, ret;
-	struct para_buffer pb = {
-		.max_size = shm_get_shmmax(),
-		.private_data = &(struct afs_max_size_handler_data) {
-			.fd = aca->fd,
-			.band = SBD_OUTPUT
-		}
-	};
 
 	close_afs_tables();
 	for (i = 0; i < NUM_AFS_TABLES; i++) {
@@ -1055,16 +1046,17 @@ static int com_init_callback(struct afs_callback_arg *aca)
 			continue;
 		ret = t->create(database_dir);
 		if (ret < 0) {
-			para_printf(&pb, "cannot create table %s\n", t->name);
+			para_printf(&aca->pbout, "cannot create table %s\n",
+				t->name);
 			goto out;
 		}
-		para_printf(&pb, "successfully created %s table\n", t->name);
+		para_printf(&aca->pbout, "successfully created %s table\n",
+			t->name);
 	}
 	ret = open_afs_tables();
 	if (ret < 0)
-		para_printf(&pb, "cannot open afs tables\n");
+		para_printf(&aca->pbout, "cannot open afs tables\n");
 out:
-	flush_and_free_pb(&pb);
 	return ret;
 }