1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
#[cfg(racy_asserts)]
use crate::fs::{file_path, open_unchecked, stat_unchecked, Metadata};
use crate::fs::{open_impl, OpenOptions};
use std::path::Path;
use std::{fs, io};
#[cfg_attr(not(racy_asserts), allow(clippy::let_and_return))]
#[inline]
pub fn open(start: &fs::File, path: &Path, options: &OpenOptions) -> io::Result<fs::File> {
#[cfg(racy_asserts)]
let stat_before = stat_unchecked(start, path, options.follow);
let result = open_impl(start, path, options);
#[cfg(racy_asserts)]
let stat_after = stat_unchecked(start, path, options.follow);
#[cfg(racy_asserts)]
check_open(start, path, options, &stat_before, &result, &stat_after);
result
}
#[cfg(racy_asserts)]
fn check_open(
start: &fs::File,
path: &Path,
options: &OpenOptions,
_stat_before: &io::Result<Metadata>,
result: &io::Result<fs::File>,
_stat_after: &io::Result<Metadata>,
) {
let unchecked_result = open_unchecked(
start,
path,
options
.clone()
.create(false)
.create_new(false)
.truncate(false),
);
match (&result, &unchecked_result) {
(Ok(result_file), Ok(unchecked_file)) => {
assert_same_file!(
&result_file,
&unchecked_file,
"path resolution inconsistency: start='{:?}', path='{}'",
start,
path.display(),
);
}
(Ok(result_file), Err(unchecked_error)) => {
if unchecked_error.kind() == io::ErrorKind::PermissionDenied {
assert!(options.create || options.create_new);
} else {
panic!(
"unexpected success opening start='{:?}', path='{}'; expected {:?}; got {:?}",
start,
path.display(),
unchecked_error,
result_file
);
}
}
(Err(result_error), Ok(_unchecked_file)) => match result_error.kind() {
io::ErrorKind::PermissionDenied | io::ErrorKind::InvalidInput => (),
io::ErrorKind::AlreadyExists if options.create_new => (),
_ => panic!(
"unexpected error opening start='{:?}', path='{}': {:?}",
start,
path.display(),
result_error
),
},
(Err(result_error), Err(_unchecked_error)) => match result_error.kind() {
io::ErrorKind::PermissionDenied | io::ErrorKind::InvalidInput => (),
_ => {
}
},
}
if let Ok(result_file) = &result {
if let Some(result_path) = file_path(result_file) {
if let Some(start_path) = file_path(start) {
assert!(
result_path.starts_with(start_path),
"sandbox escape: start='{:?}' result='{}'",
start,
result_path.display()
);
}
}
}
}