krb5.git - MIT Kerberos patches

diff options

author	Ken Raeburn <raeburn@mit.edu>	2007-10-22 19:18:53 +0000
committer	Ken Raeburn <raeburn@mit.edu>	2007-10-22 19:18:53 +0000
commit	3d8fa6bb4012296a53fe04e486a9157a2963b644 (patch)
tree	7c0f5dcc658ebd75d758024a21097af95d616e05 /src/ccapi/server/ccs_cache_collection.h
parent	70e8d7a6c50bbdb547150eba0abdef46d93d5b71 (diff)

Set close-on-exec flag in most places where file descriptors are

opened in our libraries (in case another application thread spawns a new process) and in the KDC programs (in case a plugin library spawns a new process). Checked calls to: open fopen THREEPARAMOPEN mkstemp socket accept dup dup2 pipe. In: util lib plugins kdc kadmin/server krb524. The various programs are less critical than the libraries, as any well-written plugin that spawns a new process should close all file descriptors it doesn't need to communicate with the new process. This approach also isn't bulletproof, as the call to set the close-on-exec flag is necessarily a separate call from creating the file descriptor, and the fork call could happen in between them. So plugins should be careful regardless of this patch; it will only reduce the window of potential lossage should a plugin be poorly written. (AFAIK there are currently no plugins that spawn processes where this would be a problem.) Update dependencies. ticket: 5561 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20143 dc483132-0cff-0310-8789-dd5450dbe970

Diffstat (limited to 'src/ccapi/server/ccs_cache_collection.h')

0 files changed, 0 insertions, 0 deletions

/********************************************************************** vm_core.h - $Author$ created at: 04/01/01 19:41:38 JST Copyright (C) 2004-2007 Koichi Sasada **********************************************************************/ #ifndef RUBY_VM_CORE_H #define RUBY_VM_CORE_H #define RUBY_VM_THREAD_MODEL 2 #include <setjmp.h> #include "ruby/ruby.h" #include "ruby/signal.h" #include "ruby/st.h" #include "ruby/node.h" #include "debug.h" #include "vm_opts.h" #include "id.h" #if defined(_WIN32) #include "thread_win32.h" #elif defined(HAVE_PTHREAD_H) #include "thread_pthread.h" #else #error "unsupported thread type" #endif #include <signal.h> #ifndef NSIG # ifdef DJGPP # define NSIG SIGMAX # else # define NSIG (_SIGMAX + 1) /* For QNX */ # endif #endif #define RUBY_NSIG NSIG /*****************/ /* configuration */ /*****************/ /* gcc ver. check */ #if defined(__GNUC__) && __GNUC__ >= 2 #if OPT_TOKEN_THREADED_CODE #if OPT_DIRECT_THREADED_CODE #undef OPT_DIRECT_THREADED_CODE #endif #endif #else /* defined(__GNUC__) && __GNUC__ >= 2 */ /* disable threaded code options */ #if OPT_DIRECT_THREADED_CODE #undef OPT_DIRECT_THREADED_CODE #endif #if OPT_TOKEN_THREADED_CODE #undef OPT_TOKEN_THREADED_CODE #endif #endif /* call threaded code */ #if OPT_CALL_THREADED_CODE #if OPT_DIRECT_THREADED_CODE #undef OPT_DIRECT_THREADED_CODE #endif /* OPT_DIRECT_THREADED_CODE */ #if OPT_STACK_CACHING #undef OPT_STACK_CACHING #endif /* OPT_STACK_CACHING */ #endif /* OPT_CALL_THREADED_CODE */ /* likely */ #if __GNUC__ >= 3 #define LIKELY(x) (__builtin_expect((x), 1)) #define UNLIKELY(x) (__builtin_expect((x), 0)) #else /* __GNUC__ >= 3 */ #define LIKELY(x) (x) #define UNLIKELY(x) (x) #endif /* __GNUC__ >= 3 */ typedef unsigned long rb_num_t; #define ISEQ_TYPE_TOP INT2FIX(1) #define ISEQ_TYPE_METHOD INT2FIX(2) #define ISEQ_TYPE_BLOCK INT2FIX(3) #define ISEQ_TYPE_CLASS INT2FIX(4) #define ISEQ_TYPE_RESCUE INT2FIX(5) #define ISEQ_TYPE_ENSURE INT2FIX(6) #define ISEQ_TYPE_EVAL INT2FIX(7) #define ISEQ_TYPE_DEFINED_GUARD INT2FIX(8) #define CATCH_TYPE_RESCUE INT2FIX(1) #define CATCH_TYPE_ENSURE INT2FIX(2) #define CATCH_TYPE_RETRY INT2FIX(3) #define CATCH_TYPE_BREAK INT2FIX(4) #define CATCH_TYPE_REDO INT2FIX(5) #define CATCH_TYPE_NEXT INT2FIX(6) struct iseq_insn_info_entry { unsigned short position; unsigned short line_no; unsigned short sp; }; struct iseq_catch_table_entry { VALUE type; VALUE iseq; unsigned long start; unsigned long end; unsigned long cont; unsigned long sp; }; #define INITIAL_ISEQ_COMPILE_DATA_STORAGE_BUFF_SIZE (512) struct iseq_compile_data_storage { struct iseq_compile_data_storage *next; unsigned long pos; unsigned long size; char *buff; }; struct iseq_compile_data_ensure_node_stack; typedef struct rb_compile_option_struct { int inline_const_cache; int peephole_optimization; int tailcall_optimization; int specialized_instruction; int operands_unification; int instructions_unification; int stack_caching; int trace_instruction; int debug_level; } rb_compile_option_t; struct iseq_compile_data { /* GC is needed */ VALUE err_info; VALUE mark_ary; VALUE catch_table_ary; /* Array */ /* GC is not needed */ struct iseq_label_data *start_label; struct iseq_label_data *end_label; struct iseq_label_data *redo_label; VALUE current_block; VALUE loopval_popped; /* used by NODE_BREAK */ VALUE ensure_node; VALUE for_iseq; struct iseq_compile_data_ensure_node_stack *ensure_node_stack; int cached_const; struct iseq_compile_data_storage *storage_head; struct iseq_compile_data_storage *storage_current; int last_line; int flip_cnt; int label_no; int node_level; const rb_compile_option_t *option; }; #if 1 #define GetCoreDataFromValue(obj, type, ptr) do { \ ptr = (type*)DATA_PTR(obj); \ } while (0) #else #define GetCoreDataFromValue(obj, type, ptr) Data_Get_Struct(obj, type, ptr) #endif #define GetISeqPtr(obj, ptr) \ GetCoreDataFromValue(obj, rb_iseq_t, ptr) typedef struct rb_iseq_profile_struct { VALUE count; VALUE time_self; VALUE time_cumu; /* cumulative */ } rb_iseq_profile_t; struct rb_iseq_struct; struct rb_iseq_struct { /***************/ /* static data */ /***************/ VALUE type; /* instruction sequence type */ VALUE name; /* String: iseq name */ VALUE filename; /* file information where this sequence from */ VALUE *iseq; /* iseq (insn number and openrads) */ VALUE *iseq_encoded; /* encoded iseq */ unsigned long iseq_size; VALUE mark_ary; /* Array: includes operands which should be GC marked */ /* insn info, must be freed */ struct iseq_insn_info_entry *insn_info_table; unsigned long insn_info_size; ID *local_table; /* must free */ int local_table_size; /* method, class frame: sizeof(vars) + 1, block frame: sizeof(vars) */ int local_size; /** * argument information * * def m(a1, a2, ..., aM, # mandatory * b1=(...), b2=(...), ..., bN=(...), # optinal * *c, # rest * d1, d2, ..., dO, # post * &e) # block * => * * argc = M * arg_rest = M+N+1 // or -1 if no rest arg * arg_opts = N * arg_opts_tbl = [ (N entries) ] * arg_post_len = O // 0 if no post arguments * arg_post_start = M+N+2 * arg_block = M+N + 1 + O + 1 // -1 if no block arg * arg_simple = 0 if not simple arguments. * = 1 if no opt, rest, post, block. * = 2 if ambiguos block parameter ({|a|}). * arg_size = argument size. */ int argc; int arg_simple; int arg_rest; int arg_block; int arg_opts; int arg_post_len; int arg_post_start; int arg_size; VALUE *arg_opt_table; int stack_max; /* for stack overflow check */ /* catch table */ struct iseq_catch_table_entry *catch_table; int catch_table_size; /* for child iseq */ struct rb_iseq_struct *parent_iseq; struct rb_iseq_struct *local_iseq; /****************/ /* dynamic data */ /****************/ VALUE self; /* block inlining */ /* * NODE *node; * void *special_block_builder; * void *cached_special_block_builder; * VALUE cached_special_block; */ /* klass/module nest information stack (cref) */ NODE *cref_stack; VALUE klass; /* misc */ ID defined_method_id; /* for define_method */ rb_iseq_profile_t profile; /* used at compile time */ struct iseq_compile_data *compile_data; }; typedef struct rb_iseq_struct rb_iseq_t; #define GetVMPtr(obj, ptr) \ GetCoreDataFromValue(obj, rb_vm_t, ptr) typedef struct rb_vm_struct { VALUE self; rb_thread_lock_t global_interpreter_lock; struct rb_thread_struct *main_thread; struct rb_thread_struct *running_thread; st_table *living_threads; VALUE thgroup_default; VALUE last_status; /* $? */ int running; int thread_abort_on_exception; unsigned long trace_flag; /* object management */ VALUE mark_object_ary; /* load */ VALUE top_self; VALUE load_path; VALUE loaded_features; struct st_table *loading_table; /* signal */ rb_atomic_t signal_buff[RUBY_NSIG]; rb_atomic_t buffered_signal_size; /* hook */ rb_event_hook_t *event_hooks; #if defined(ENABLE_VM_OBJSPACE) && ENABLE_VM_OBJSPACE struct rb_objspace *objspace; #endif } rb_vm_t; typedef struct { VALUE *pc; /* cfp[0] */ VALUE *sp; /* cfp[1] */


context:
space:
mode: