lib/read_gotconfig_privsep.c

   1 /*
   2  * Copyright (c) 2020 Stefan Sperling <stsp@openbsd.org>
   3  *
   4  * Permission to use, copy, modify, and distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16
  17 #include <sys/types.h>
  18 #include <sys/queue.h>
  19 #include <sys/uio.h>
  20 #include <sys/socket.h>
  21
  22 #include <unistd.h>
  23 #include <fcntl.h>
  24 #include <errno.h>
  25 #include <stdlib.h>
  26 #include <stdio.h>
  27 #include <stdint.h>
  28 #include <imsg.h>
  29 #include <limits.h>
  30
  31 #include "got_error.h"
  32 #include "got_object.h"
  33 #include "got_repository.h"
  34
  35 #include "got_lib_delta.h"
  36 #include "got_lib_object.h"
  37 #include "got_lib_privsep.h"
  38 #include "got_lib_gotconfig.h"
  39
  40 #include "got_gotconfig.h"
  41
  42 const struct got_error *
  43 got_gotconfig_read(struct got_gotconfig **conf, const char *gotconfig_path)
  44 {
  45         const struct got_error *err = NULL, *child_err = NULL;
  46         int fd = -1;
  47         int imsg_fds[2] = { -1, -1 };
  48         pid_t pid;
  49         struct imsgbuf *ibuf = NULL;
  50
  51         *conf = calloc(1, sizeof(**conf));
  52         if (*conf == NULL)
  53                 return got_error_from_errno("calloc");
  54
  55         fd = open(gotconfig_path, O_RDONLY | O_CLOEXEC);
  56         if (fd == -1) {
  57                 if (errno == ENOENT)
  58                         return NULL;
  59                 err = got_error_from_errno2("open", gotconfig_path);
  60                 goto done;
  61         }
  62
  63         ibuf = calloc(1, sizeof(*ibuf));
  64         if (ibuf == NULL) {
  65                 err = got_error_from_errno("calloc");
  66                 goto done;
  67         }
  68
  69         if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1) {
  70                 err = got_error_from_errno("socketpair");
  71                 goto done;
  72         }
  73
  74         pid = fork();
  75         if (pid == -1) {
  76                 err = got_error_from_errno("fork");
  77                 goto done;
  78         } else if (pid == 0) {
  79                 got_privsep_exec_child(imsg_fds, GOT_PATH_PROG_READ_GOTCONFIG,
  80                     gotconfig_path);
  81                 /* not reached */
  82         }
  83
  84         if (close(imsg_fds[1]) == -1) {
  85                 err = got_error_from_errno("close");
  86                 goto done;
  87         }
  88         imsg_fds[1] = -1;
  89         imsg_init(ibuf, imsg_fds[0]);
  90
  91         err = got_privsep_send_gotconfig_parse_req(ibuf, fd);
  92         if (err)
  93                 goto done;
  94         fd = -1;
  95
  96         err = got_privsep_send_gotconfig_author_req(ibuf);
  97         if (err)
  98                 goto done;
  99
 100         err = got_privsep_recv_gotconfig_str(&(*conf)->author, ibuf);
 101         if (err)
 102                 goto done;
 103
 104         err = got_privsep_send_gotconfig_allowed_signers_req(ibuf);
 105         if (err)
 106                 goto done;
 107
 108         err = got_privsep_recv_gotconfig_str(&(*conf)->allowed_signers_file,
 109             ibuf);
 110         if (err)
 111                 goto done;
 112
 113         err = got_privsep_send_gotconfig_revoked_signers_req(ibuf);
 114         if (err)
 115                 goto done;
 116
 117         err = got_privsep_recv_gotconfig_str(&(*conf)->revoked_signers_file,
 118             ibuf);
 119         if (err)
 120                 goto done;
 121
 122         err = got_privsep_send_gotconfig_signer_id_req(ibuf);
 123         if (err)
 124                 goto done;
 125
 126         err = got_privsep_recv_gotconfig_str(&(*conf)->signer_id, ibuf);
 127         if (err)
 128                 goto done;
 129
 130         err = got_privsep_send_gotconfig_remotes_req(ibuf);
 131         if (err)
 132                 goto done;
 133
 134         err = got_privsep_recv_gotconfig_remotes(&(*conf)->remotes,
 135             &(*conf)->nremotes, ibuf);
 136         if (err)
 137                 goto done;
 138
 139         err = got_privsep_send_stop(imsg_fds[0]);
 140         child_err = got_privsep_wait_for_child(pid);
 141         if (child_err && err == NULL)
 142                 err = child_err;
 143 done:
 144         if (imsg_fds[0] != -1 && close(imsg_fds[0]) == -1 && err == NULL)
 145                 err = got_error_from_errno("close");
 146         if (imsg_fds[1] != -1 && close(imsg_fds[1]) == -1 && err == NULL)
 147                 err = got_error_from_errno("close");
 148         if (fd != -1 && close(fd) == -1 && err == NULL)
 149                 err = got_error_from_errno2("close", gotconfig_path);
 150         if (err) {
 151                 got_gotconfig_free(*conf);
 152                 *conf = NULL;
 153         }
 154         free(ibuf);
 155         return err;
 156 }