mirror of
https://sourceware.org/git/glibc.git
synced 2024-11-27 07:20:11 +00:00
a748eb31c1
This patch consolidates all the non cancellable read calls to use the __read_nocancel identifier. For non cancellable targets it will be just a macro to call the default respective symbol while on Linux will be a internal one. Also, since it is used on libcrypto it is also exported in GLIBC_PRIVATE namespace. Checked on x86_64-linux-gnu, x86_64-linux-gnu-x32, and i686-linux-gnu. * sysdeps/generic/not-cancel.h (read_not_cancel): Remove macro. (__read_nocancel): New macro. * sysdeps/unix/sysv/linux/Versions (libc) [GLIBC_PRIVATE]: Add __read_nocancel. * sysdeps/unix/sysv/linux/not-cancel.h (__read_nocancel): Remove macro. (__read_nocancel): New prototype. * sysdeps/unix/sysv/linux/read.c (__read_nocancel): New function. * catgets/open_catalog.c (__open_catalog): Replace read_not_cancel with __read_nocancel. * intl/loadmsgcat.c (read): Likewise. * libio/fileops.c (_IO_file_read): Likewise. * locale/loadlocale.c (_nl_load_locale): Likewise. * login/utmp_file.c (getutent_r_file): Likewise. (internal_getut_r): Likewise. (getutline_r_file): Likewise. * sysdeps/unix/sysv/linux/fips-private.h (fips_enable_p): Likewise. * sysdeps/unix/sysv/linux/gethostid.c (gethostid): Likewise. * sysdeps/unix/sysv/linux/getloadavg.c (getloadavg): Likewise. * sysdeps/unix/sysv/linux/getlogin_r.c (__getlogin_r_loginuid): Likewise. * sysdeps/unix/sysv/linux/getsysstats.c (next_line): Likewise. * sysdeps/unix/sysv/linux/i386/smp.h (is_smp_system): Likewise. * sysdeps/unix/sysv/linux/ia64/has_cpuclock.c (has_cpuclock): Likewise. * sysdeps/unix/sysv/linux/libc_fatal.c (backtrace_and_maps): Likewise. * sysdeps/unix/sysv/linux/malloc-sysdep.h (check_may_shrink_heap): Likewise. * sysdeps/unix/sysv/linux/pthread_getname.c (pthread_getname_np): Likewise. * sysdeps/unix/sysv/linux/sysconf.c (__sysconf): Likewise.
75 lines
2.0 KiB
C
75 lines
2.0 KiB
C
/* FIPS compliance status test for GNU/Linux systems.
|
|
Copyright (C) 2012-2017 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<http://www.gnu.org/licenses/>. */
|
|
|
|
#ifndef _FIPS_PRIVATE_H
|
|
#define _FIPS_PRIVATE_H
|
|
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
#include <not-cancel.h>
|
|
#include <stdbool.h>
|
|
|
|
/* Return true if FIPS mode is enabled. See
|
|
sysdeps/generic/fips-private.h for more information. */
|
|
|
|
static bool
|
|
fips_enabled_p (void)
|
|
{
|
|
static enum
|
|
{
|
|
FIPS_UNTESTED = 0,
|
|
FIPS_ENABLED = 1,
|
|
FIPS_DISABLED = -1,
|
|
FIPS_TEST_FAILED = -2
|
|
} checked;
|
|
|
|
if (checked == FIPS_UNTESTED)
|
|
{
|
|
int fd = __open_nocancel ("/proc/sys/crypto/fips_enabled", O_RDONLY);
|
|
|
|
if (fd != -1)
|
|
{
|
|
/* This is more than enough, the file contains a single integer. */
|
|
char buf[32];
|
|
ssize_t n;
|
|
n = TEMP_FAILURE_RETRY (__read_nocancel (fd, buf, sizeof (buf) - 1));
|
|
close_not_cancel_no_status (fd);
|
|
|
|
if (n > 0)
|
|
{
|
|
/* Terminate the string. */
|
|
buf[n] = '\0';
|
|
|
|
char *endp;
|
|
long int res = strtol (buf, &endp, 10);
|
|
if (endp != buf && (*endp == '\0' || *endp == '\n'))
|
|
checked = (res > 0) ? FIPS_ENABLED : FIPS_DISABLED;
|
|
}
|
|
}
|
|
|
|
if (checked == FIPS_UNTESTED)
|
|
checked = FIPS_TEST_FAILED;
|
|
}
|
|
|
|
return checked == FIPS_ENABLED;
|
|
}
|
|
|
|
#endif /* _FIPS_PRIVATE_H */
|