From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_ADSP_CUSTOM_MED, DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FROM,MAILING_LIST_MULTI, RCVD_IN_MSPIKE_H2 autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 28735 invoked from network); 29 Mar 2023 08:47:12 -0000 Received: from second.openwall.net (193.110.157.125) by inbox.vuxu.org with ESMTPUTF8; 29 Mar 2023 08:47:12 -0000 Received: (qmail 14265 invoked by uid 550); 29 Mar 2023 08:47:09 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Reply-To: musl@lists.openwall.com Received: (qmail 14230 invoked from network); 29 Mar 2023 08:47:09 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1680079616; x=1682671616; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=cvsgGdcIV5WCvtNstDXeU9H+Wl1xu5CONSZHuJdgsxQ=; b=abN1y2LneV9JKy3kDio+BcCllW7t//ZMCoAr3tj60Mq9xOJ0fn565ZXLPgQemN8f1m z3hVdchZrT+uycpmS6yVbN8HtqrC0pnad6cMXpFOO2hMPxGeTsS2/1iZrXCbUPI6z601 H2DxUZFZPAcXI2zuQZn0yiuDUaUiyQAGeU9Uq4yXdBEItDqxPvaWBOPlPTKSF5JolEn8 Zhf1jLC5OuUyaFqWusYPCxOdyCpyY7qGrV3bEeQjs9Zx2PTziJ/lUNEd9jfBVNgq9i67 HoMO2HRFvpALPib4k4OntmCO9UhyXQOiuqi+4CxuvZS65NnKQU6dPJSmvBxkYVWbn55Y MjNA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1680079616; x=1682671616; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=cvsgGdcIV5WCvtNstDXeU9H+Wl1xu5CONSZHuJdgsxQ=; b=EWa+II1/1Lo0GwTNgZaizICtjgmtNGFY4QTpohlS6ao4yzpZa0/HTO17PgO9z4vzYX rWYwQPIbjmMOJgNH//F/iQcxOK5jQ6ouA+GhMGdIcyDKvJjA8KrtFm3Tv159y5c9jTPO nNatSu9Ybc1Fp53rh+FkkIlotbhE7jeWLYwSm3RkxoYrv6IfWoTEgBBTP0VntcKP9vaJ lc4AxQpbaQAKQThI0yVz97fhPdKfIDPmyAiEsVchjNG1izyizNwRgRPxIF5r1/hMrg9W xCDLCvipq9K7PZ+e4eCINjB5k489ngJ1KNLFI6yHujcGEMFk58z4nsm1ettRGSWF0ZkS PP4g== X-Gm-Message-State: AO0yUKVQ8q6Eltx21YBGCRy+9s6HCiE4/YFV02Ht5GQDvcOxLx6sBmlj ib4mOj8DSFZhRWDYWJ53DAN6myqmHcg6Pw== X-Google-Smtp-Source: AK7set+tP+w9jdM7pOp3mCJlHjrUF0kN1FrPQo4UJjVj6L3YRX4vGHL+CYRSE3B/UOMTU5zbbFsapA== X-Received: by 2002:a05:6a20:7da6:b0:da:9fa3:66e7 with SMTP id v38-20020a056a207da600b000da9fa366e7mr17560869pzj.0.1680079616116; Wed, 29 Mar 2023 01:46:56 -0700 (PDT) From: Matthias Goergens To: musl@lists.openwall.com Cc: Matthias Goergens Date: Wed, 29 Mar 2023 16:46:45 +0800 Message-Id: <20230329084645.140962-1-matthias.goergens@gmail.com> X-Mailer: git-send-email 2.40.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: [musl] [PATCH] mntent: deal with escaped whitespace in mtab and fstab >From glibc's documentation: > Since fields in the mtab and fstab files are separated by whitespace, > octal escapes are used to represent the characters space (\040), > tab (\011), newline (\012), and backslash (\\) in those files when they > occur in one of the four strings in a mntent structure. The > routines addmntent() and getmntent() will convert from string > representation to escaped representation and back. When converting > from escaped representation, the sequence \134 is also converted to a > backslash. This fixes the issue reported in https://www.openwall.com/lists/musl/2021/12/14/1 Please pardon the previous broken patch that I tried to send directly via gmail. This is my first time contributing to musl. Please point out any ways to improve. I probably got a few things wrong? Thanks! --- src/misc/mntent.c | 71 ++++++++++++++++++++++++++++++++++++++++++----- 1 file changed, 64 insertions(+), 7 deletions(-) diff --git a/src/misc/mntent.c b/src/misc/mntent.c index d404fbe3..527acc01 100644 --- a/src/misc/mntent.c +++ b/src/misc/mntent.c @@ -20,6 +20,34 @@ int endmntent(FILE *f) return 1; } +static inline int decode1(char** in_buf, char** out_buf, const char* from, const char to) { + if(strncmp(from, *in_buf, strlen(from)) == 0) { + *(*out_buf)++ = to; + *in_buf += strlen(from); + return 1; + } + return 0; +} + +static inline char* decode(char* buf) { + char* read_cursor = buf; + char* write_cursor = buf; + while(read_cursor && *read_cursor) { + // space + decode1(&read_cursor, &write_cursor, "\\040", '\040') + // tab + || decode1(&read_cursor, &write_cursor, "\\011", '\011') + // newline + || decode1(&read_cursor, &write_cursor, "\\012", '\012') + // backslash + || decode1(&read_cursor, &write_cursor, "\\134", '\134') + || decode1(&read_cursor, &write_cursor, "\\\\", '\\') + // default: copy char as is. + || (*write_cursor++ = *read_cursor++); + } + return buf; +} + struct mntent *getmntent_r(FILE *f, struct mntent *mnt, char *linebuf, int buflen) { int n[8], use_internal = (linebuf == SENTINEL); @@ -55,10 +83,10 @@ struct mntent *getmntent_r(FILE *f, struct mntent *mnt, char *linebuf, int bufle linebuf[n[5]] = 0; linebuf[n[7]] = 0; - mnt->mnt_fsname = linebuf+n[0]; - mnt->mnt_dir = linebuf+n[2]; - mnt->mnt_type = linebuf+n[4]; - mnt->mnt_opts = linebuf+n[6]; + mnt->mnt_fsname = decode(linebuf+n[0]); + mnt->mnt_dir = decode(linebuf+n[2]); + mnt->mnt_type = decode(linebuf+n[4]); + mnt->mnt_opts = decode(linebuf+n[6]); return mnt; } @@ -69,12 +97,41 @@ struct mntent *getmntent(FILE *f) return getmntent_r(f, &mnt, SENTINEL, 0); } +static inline int write_string(FILE *f, const char* str) +{ + char c; + int error_occured = 0; + while(str && !error_occured && (c = *str++) != 0) { + if(c == '\040') // space + error_occured = fprintf(f, "%s", "\\040") < 0; + else if (c == '\011') // tab + error_occured = fprintf(f, "%s", "\\011") < 0; + else if (c == '\012') // newline + error_occured = fprintf(f, "%s", "\\012") < 0; + else if (c == '\\') + error_occured = fprintf(f, "%s", "\\\\") < 0; + else + error_occured = fprintf(f, "%c", c) < 0; + } + return error_occured; +} + int addmntent(FILE *f, const struct mntent *mnt) { if (fseek(f, 0, SEEK_END)) return 1; - return fprintf(f, "%s\t%s\t%s\t%s\t%d\t%d\n", - mnt->mnt_fsname, mnt->mnt_dir, mnt->mnt_type, mnt->mnt_opts, - mnt->mnt_freq, mnt->mnt_passno) < 0; + flockfile(f); + int result = + write_string(f, mnt->mnt_fsname) + || (fprintf(f, "\t") < 0) + || write_string(f, mnt->mnt_dir) + || (fprintf(f, "\t") < 0) + || write_string(f, mnt->mnt_type) + || (fprintf(f, "\t") < 0) + || write_string(f, mnt->mnt_opts) + || (fprintf(f, "\t%d\t%d\n", + mnt->mnt_freq, mnt->mnt_passno) < 0); + funlockfile(f); + return result; } char *hasmntopt(const struct mntent *mnt, const char *opt) -- 2.40.0