Files
Don Porter c68cb42e20 Address a TOCTTOU vulnerability in SGX read/map (#131)
* Fix a bug where configuration error ends up doing a huge allocation, rather than catching the error.  Add some documentation to the slabmgr code.

* Add a unit test and some documentation to answer the question in issue #107.  I can't see how offset and map_start would end up being different.

* Rewrite of SGX file_map to remove TOCTTTOU now passes all unit tests

* Apply a similar fix to file_read.

* Factor complicated verification code into a common helper routine.

* Adjust the memory copying strategy so that all bits in the returned buffed are exactly the same bits as verified in the trusted, scratch buffer.

* Fixing the TOCTOU issue in file checking

* Adding comments for load_trusted_file() and copy_and_check_trusted_file(); Deprecate the old design

* Documenting the file checking mechanism
2018-10-24 14:51:06 -04:00

146 lines
4.6 KiB
C

/* -*- mode:c; c-file-style:"k&r"; c-basic-offset: 4; tab-width:4; indent-tabs-mode:nil; mode:auto-fill; fill-column:78; -*- */
/* vim: set ts=4 sw=4 et tw=78 fo=cqt wm=0: */
/* Copyright (C) 2014 OSCAR lab, Stony Brook University
This file is part of Graphene Library OS.
Graphene Library OS is free software: you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation, either version 3 of the
License, or (at your option) any later version.
Graphene Library OS is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>. */
#ifndef API_H
#define API_H
#include <stddef.h>
#include <stdint.h>
#include <stdarg.h>
/* WARNING: this declaration may conflict with some header files */
#ifndef ssize_t
typedef ptrdiff_t ssize_t;
#endif
/* Macros */
#ifndef likely
# define likely(x) __builtin_expect((!!(x)),1)
#endif
#ifndef unlikely
# define unlikely(x) __builtin_expect((!!(x)),0)
#endif
#ifndef MIN
# define MIN(a, b) ((a) < (b) ? (a) : (b))
#endif
#ifndef MAX
# define MAX(a, b) ((a) > (b) ? (a) : (b))
#endif
#define __alloca __builtin_alloca
#define XSTRINGIFY(x) STRINGIFY(x)
#define STRINGIFY(x) #x
#define static_strlen(str) (sizeof(str) - 1)
/* Libc functions */
/* Libc String functions */
int strnlen (const char *str, int maxlen);
int strlen (const char *str);
long strtol (const char *s, char **endptr, int base);
int atoi (const char *nptr);
long int atol (const char *nptr);
char * strchr (const char *s, int c_in);
void * memcpy (void *dstpp, const void *srcpp, int len);
void * memmove (void *dstpp, void *srcpp, int len);
void * memset (void *dstpp, int c, int len);
int memcmp (const void *s1, const void *s2, int len);
/* Some useful macro */
/* force failure if str is not a static string */
#define force_static(str) ("" str "")
/* check if the var is exactly the same as the static string */
#define strcmp_static(var, str) \
(!memcmp((var), force_static(str), static_strlen(force_static(str)) + 1))
/* check if the var starts with the static string */
#define strpartcmp_static(var, str) \
(!memcmp((var), force_static(str), static_strlen(force_static(str))))
/* copy static string and return the address of the null end (null if the dest
* is not large enough).*/
#define strcpy_static(var, str, max) \
(static_strlen(force_static(str)) + 1 > max ? NULL : \
memcpy((var), force_static(str), static_strlen(force_static(str)) + 1) + \
static_strlen(force_static(str)))
/* Libc printf functions */
void fprintfmt (int (*_fputch)(void *, int, void *), void * f, void * putdat,
const char * fmt, ...);
void vfprintfmt (int (*_fputch)(void *, int, void *), void * f, void * putdat,
const char * fmt, va_list *ap);
int snprintf (char * buf, int n, const char * fmt, ...);
/* Miscelleneous */
int inet_pton4 (const char *src, int len, void *dst);
int inet_pton6 (const char *src, int len, void *dst);
uint32_t __htonl (uint32_t x);
uint32_t __ntohl (uint32_t x);
uint16_t __htons (uint16_t x);
uint16_t __ntohs (uint16_t x);
extern const char * const * sys_errlist_internal;
/* Graphene functions */
int get_norm_path (const char * path, char * buf, int offset, int size);
int get_base_name (const char * path, char * buf, int size);
/* Loading configs / manifests */
#include <linux_list.h>
struct config_store {
struct list_head root, entries;
void * raw_data;
int raw_size;
void * (*malloc) (int);
void (*free) (void *);
};
int read_config (struct config_store * store, int (*filter) (const char *, int),
const char ** errstring);
int free_config (struct config_store * store);
int copy_config (struct config_store * store, struct config_store * new_store);
int write_config (void * file, int (*write) (void *, void *, int),
struct config_store * store);
ssize_t get_config (struct config_store * cfg, const char * key,
char * val_buf, size_t size);
int get_config_entries (struct config_store * cfg, const char * key,
char * key_buf, size_t key_bufsize);
ssize_t get_config_entries_size (struct config_store * cfg, const char * key);
int set_config (struct config_store * cfg, const char * key, const char * val);
#define CONFIG_MAX 4096
#endif /* API_H */