third-party-mirrors/sslh
1
0
Fork 0
mirror of https://github.com/yrutschle/sslh.git synced 2025-06-08 03:12:32 +03:00
Code Issues Packages Projects Releases Wiki Activity

common.c: Fix that symlink does not interferer

Browse Source
This commit is contained in:
npt-1707 2025-04-15 05:01:07 +08:00
parent fe25928e18
commit 7fbaad2719
1 changed files with 32 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
common.c
View File

@ -989,23 +989,44 @@ void drop_privileges(const char* user_name, const char* chroot_path)
/* Writes my PID */ /* Writes my PID */
void write_pid_file(const char* pidfile) void write_pid_file(const char* pidfile)
{ {
FILE *f; int fd;
int res; char pidbuf[32];
size_t len, written = 0;
ssize_t res;
f = fopen(pidfile, "w"); /* Format PID as string */
if (!f) { len = snprintf(pidbuf, sizeof(pidbuf), "%d\n", getpid());
if (len >= sizeof(pidbuf)) {
print_message(msg_system_error, "write_pid_file: PID string too long\n");
return;
}
/* Open file with O_NOFOLLOW to prevent symlink attacks */
fd = open(pidfile, O_WRONLY | O_CREAT | O_TRUNC
#ifdef O_NOFOLLOW
| O_NOFOLLOW
#endif
,0644);
if (fd == -1) {
print_message(msg_system_error, "write_pid_file: %s: %s\n", pidfile, strerror(errno)); print_message(msg_system_error, "write_pid_file: %s: %s\n", pidfile, strerror(errno));
return; return;
} }
res = fprintf(f, "%d\n", getpid()); /* Write PID to file with proper error handling */
if (res < 0) { while (written < len) {
print_message(msg_system_error, "write_pid_file: fprintf: %s\n", strerror(errno)); res = write(fd, pidbuf + written, len - written);
if (res == -1) {
if (errno == EINTR || errno == EAGAIN)
continue;
print_message(msg_system_error, "write_pid_file: write: %s\n", strerror(errno));
break;
}
written += res;
} }
res = fclose(f); /* Close file */
if (res == EOF) { if (close(fd) == -1) {
print_message(msg_system_error, "write_pid_file: fclose: %s\n", strerror(errno)); print_message(msg_system_error, "write_pid_file: close: %s\n", strerror(errno));
return;
} }
} }