1234567891011121314151617181920212223242526272829303132333435363738394041424344454647 |
- #include <unistd.h>
- #include <errno.h>
- #include <sys/resource.h>
- #include "syscall.h"
- #include "libc.h"
- struct ctx {
- int id, eid, sid;
- int nr, rlim, err;
- };
- /* We jump through hoops to eliminate the possibility of partial failures. */
- int __setrlimit(int, const struct rlimit *);
- static void do_setxid(void *p)
- {
- struct ctx *c = p;
- if (c->err) return;
- if (c->rlim && c->id >= 0 && c->id != getuid()) {
- struct rlimit inf = { RLIM_INFINITY, RLIM_INFINITY }, old;
- getrlimit(RLIMIT_NPROC, &old);
- if ((c->err = -__setrlimit(RLIMIT_NPROC, &inf)) && libc.threads_minus_1)
- return;
- c->err = -__syscall(c->nr, c->id, c->eid, c->sid);
- __setrlimit(RLIMIT_NPROC, &old);
- return;
- }
- c->err = -__syscall(c->nr, c->id, c->eid, c->sid);
- }
- int __setxid(int nr, int id, int eid, int sid)
- {
- struct ctx c = { .nr = nr, .id = id, .eid = eid, .sid = sid };
- switch (nr) {
- case SYS_setuid:
- case SYS_setreuid:
- case SYS_setresuid:
- c.rlim = 1;
- }
- __synccall(do_setxid, &c);
- if (c.err) {
- errno = c.err;
- return -1;
- }
- return 0;
- }
|