Home | History | Annotate | Download | only in fortify
      1 /*
      2  * Copyright (C) 2017 The Android Open Source Project
      3  * All rights reserved.
      4  *
      5  * Redistribution and use in source and binary forms, with or without
      6  * modification, are permitted provided that the following conditions
      7  * are met:
      8  *  * Redistributions of source code must retain the above copyright
      9  *    notice, this list of conditions and the following disclaimer.
     10  *  * Redistributions in binary form must reproduce the above copyright
     11  *    notice, this list of conditions and the following disclaimer in
     12  *    the documentation and/or other materials provided with the
     13  *    distribution.
     14  *
     15  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
     16  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
     17  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
     18  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
     19  * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
     20  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
     21  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
     22  * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
     23  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
     24  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
     25  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     26  * SUCH DAMAGE.
     27  */
     28 
     29 #ifndef _FCNTL_H
     30 #error "Never include this file directly; instead, include <fcntl.h>"
     31 #endif
     32 
     33 int __open_2(const char*, int) __INTRODUCED_IN(17);
     34 int __openat_2(int, const char*, int) __INTRODUCED_IN(17);
     35 /*
     36  * These are the easiest way to call the real open even in clang FORTIFY.
     37  */
     38 int __open_real(const char*, int, ...) __RENAME(open);
     39 int __openat_real(int, const char*, int, ...) __RENAME(openat);
     40 
     41 #if defined(__BIONIC_FORTIFY)
     42 #define __open_too_many_args_error "too many arguments"
     43 #define __open_too_few_args_error "called with O_CREAT or O_TMPFILE, but missing mode"
     44 #define __open_useless_modes_warning "has superfluous mode bits; missing O_CREAT?"
     45 /* O_TMPFILE shares bits with O_DIRECTORY. */
     46 #define __open_modes_useful(flags) (((flags) & O_CREAT) || ((flags) & O_TMPFILE) == O_TMPFILE)
     47 
     48 #if __ANDROID_API__ >= __ANDROID_API_J_MR1__
     49 __BIONIC_ERROR_FUNCTION_VISIBILITY
     50 int open(const char* pathname, int flags, mode_t modes, ...) __overloadable
     51         __errorattr(__open_too_many_args_error);
     52 
     53 /*
     54  * pass_object_size serves two purposes here, neither of which involve __bos: it
     55  * disqualifies this function from having its address taken (so &open works),
     56  * and it makes overload resolution prefer open(const char *, int) over
     57  * open(const char *, int, ...).
     58  */
     59 __BIONIC_FORTIFY_INLINE
     60 int open(const char* const __pass_object_size pathname, int flags)
     61         __overloadable
     62         __clang_error_if(__open_modes_useful(flags), "'open' " __open_too_few_args_error) {
     63     return __open_2(pathname, flags);
     64 }
     65 
     66 __BIONIC_FORTIFY_INLINE
     67 int open(const char* const __pass_object_size pathname, int flags, mode_t modes)
     68         __overloadable
     69         __clang_warning_if(!__open_modes_useful(flags) && modes,
     70                            "'open' " __open_useless_modes_warning) {
     71     return __open_real(pathname, flags, modes);
     72 }
     73 
     74 __BIONIC_ERROR_FUNCTION_VISIBILITY
     75 int openat(int dirfd, const char* pathname, int flags, mode_t modes, ...)
     76         __overloadable
     77         __errorattr(__open_too_many_args_error);
     78 
     79 __BIONIC_FORTIFY_INLINE
     80 int openat(int dirfd, const char* const __pass_object_size pathname, int flags)
     81         __overloadable
     82         __clang_error_if(__open_modes_useful(flags), "'openat' " __open_too_few_args_error) {
     83     return __openat_2(dirfd, pathname, flags);
     84 }
     85 
     86 __BIONIC_FORTIFY_INLINE
     87 int openat(int dirfd, const char* const __pass_object_size pathname, int flags, mode_t modes)
     88         __overloadable
     89         __clang_warning_if(!__open_modes_useful(flags) && modes,
     90                            "'openat' " __open_useless_modes_warning) {
     91     return __openat_real(dirfd, pathname, flags, modes);
     92 }
     93 #endif /* __ANDROID_API__ >= __ANDROID_API_J_MR1__ */
     94 
     95 #undef __open_too_many_args_error
     96 #undef __open_too_few_args_error
     97 #undef __open_useless_modes_warning
     98 #undef __open_modes_useful
     99 #endif /* defined(__BIONIC_FORTIFY) */
    100