util.c 73.2 KB
Newer Older
1 2 3
/*
 * utils.c: common, generic utility functions
 *
4
 * Copyright (C) 2006-2010 Red Hat, Inc.
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
 * Copyright (C) 2006 Daniel P. Berrange
 * Copyright (C) 2006, 2007 Binary Karma
 * Copyright (C) 2006 Shuveb Hussain
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307  USA
 *
 * Author: Daniel P. Berrange <berrange@redhat.com>
 * File created Jul 18, 2007 - Shuveb Hussain <shuveb@binarykarma.com>
 */

27
#include <config.h>
28

29 30
#include <stdio.h>
#include <stdarg.h>
31
#include <stdlib.h>
32 33 34
#include <unistd.h>
#include <fcntl.h>
#include <errno.h>
C
Cole Robinson 已提交
35
#include <poll.h>
36
#include <time.h>
37 38
#include <sys/types.h>
#include <sys/stat.h>
39
#include <sys/ioctl.h>
E
Eric Blake 已提交
40
#include <sys/wait.h>
41
#if HAVE_MMAP
42
# include <sys/mman.h>
43
#endif
44
#include <string.h>
45
#include <signal.h>
46
#if HAVE_TERMIOS_H
47
# include <termios.h>
48
#endif
J
Jim Meyering 已提交
49
#include "c-ctype.h"
50

51
#ifdef HAVE_PATHS_H
52
# include <paths.h>
53
#endif
54
#include <netdb.h>
55
#ifdef HAVE_GETPWUID_R
56 57
# include <pwd.h>
# include <grp.h>
58
#endif
59
#if HAVE_CAPNG
60
# include <cap-ng.h>
61
#endif
62
#if defined HAVE_MNTENT_H && defined HAVE_GETMNTENT_R
63
# include <mntent.h>
64
#endif
65

66
#include "dirname.h"
67
#include "virterror_internal.h"
68
#include "logging.h"
69
#include "event.h"
70
#include "ignore-value.h"
71
#include "buf.h"
D
Daniel Veillard 已提交
72
#include "util.h"
73
#include "memory.h"
74
#include "threads.h"
E
Eric Blake 已提交
75
#include "verify.h"
76

77 78 79 80
#ifndef NSIG
# define NSIG 32
#endif

E
Eric Blake 已提交
81 82 83
verify(sizeof(gid_t) <= sizeof (unsigned int) &&
       sizeof(uid_t) <= sizeof (unsigned int));

84
#define VIR_FROM_THIS VIR_FROM_NONE
85

86
#define virUtilError(code, ...)                                            \
87
        virReportErrorHelper(NULL, VIR_FROM_NONE, code, __FILE__,          \
88
                             __FUNCTION__, __LINE__, __VA_ARGS__)
89

D
Daniel P. Berrange 已提交
90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128
/* Like read(), but restarts after EINTR */
int saferead(int fd, void *buf, size_t count)
{
        size_t nread = 0;
        while (count > 0) {
                ssize_t r = read(fd, buf, count);
                if (r < 0 && errno == EINTR)
                        continue;
                if (r < 0)
                        return r;
                if (r == 0)
                        return nread;
                buf = (char *)buf + r;
                count -= r;
                nread += r;
        }
        return nread;
}

/* Like write(), but restarts after EINTR */
ssize_t safewrite(int fd, const void *buf, size_t count)
{
        size_t nwritten = 0;
        while (count > 0) {
                ssize_t r = write(fd, buf, count);

                if (r < 0 && errno == EINTR)
                        continue;
                if (r < 0)
                        return r;
                if (r == 0)
                        return nwritten;
                buf = (const char *)buf + r;
                count -= r;
                nwritten += r;
        }
        return nwritten;
}

129
#ifdef HAVE_POSIX_FALLOCATE
130
int safezero(int fd, int flags ATTRIBUTE_UNUSED, off_t offset, off_t len)
131 132 133 134 135
{
    return posix_fallocate(fd, offset, len);
}
#else

136
# ifdef HAVE_MMAP
137
int safezero(int fd, int flags ATTRIBUTE_UNUSED, off_t offset, off_t len)
138 139 140 141 142 143 144
{
    int r;
    char *buf;

    /* memset wants the mmap'ed file to be present on disk so create a
     * sparse file
     */
D
Daniel P. Berrange 已提交
145
    r = ftruncate(fd, offset + len);
146
    if (r < 0)
J
Jiri Denemark 已提交
147
        return -1;
148 149 150

    buf = mmap(NULL, len, PROT_READ | PROT_WRITE, MAP_SHARED, fd, offset);
    if (buf == MAP_FAILED)
J
Jiri Denemark 已提交
151
        return -1;
152 153 154 155 156 157 158

    memset(buf, 0, len);
    munmap(buf, len);

    return 0;
}

159
# else /* HAVE_MMAP */
160

161
int safezero(int fd, int flags ATTRIBUTE_UNUSED, off_t offset, off_t len)
162 163 164 165 166
{
    int r;
    char *buf;
    unsigned long long remain, bytes;

D
Daniel P. Berrange 已提交
167
    if (lseek(fd, offset, SEEK_SET) < 0)
J
Jiri Denemark 已提交
168
        return -1;
D
Daniel P. Berrange 已提交
169

170 171 172 173 174
    /* Split up the write in small chunks so as not to allocate lots of RAM */
    remain = len;
    bytes = 1024 * 1024;

    r = VIR_ALLOC_N(buf, bytes);
J
Jiri Denemark 已提交
175 176 177 178
    if (r < 0) {
        errno = ENOMEM;
        return -1;
    }
179 180 181 182 183

    while (remain) {
        if (bytes > remain)
            bytes = remain;

J
Jiri Denemark 已提交
184
        r = safewrite(fd, buf, bytes);
185 186
        if (r < 0) {
            VIR_FREE(buf);
J
Jiri Denemark 已提交
187
            return -1;
188 189 190 191 192 193 194 195
        }

        /* safewrite() guarantees all data will be written */
        remain -= bytes;
    }
    VIR_FREE(buf);
    return 0;
}
196
# endif /* HAVE_MMAP */
197 198
#endif /* HAVE_POSIX_FALLOCATE */

D
Daniel P. Berrange 已提交
199 200
#ifndef PROXY

201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217
int virFileStripSuffix(char *str,
                       const char *suffix)
{
    int len = strlen(str);
    int suffixlen = strlen(suffix);

    if (len < suffixlen)
        return 0;

    if (!STREQ(str + len - suffixlen, suffix))
        return 0;

    str[len-suffixlen] = '\0';

    return 1;
}

218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243
char *
virArgvToString(const char *const *argv)
{
    int len, i;
    char *ret, *p;

    for (len = 1, i = 0; argv[i]; i++)
        len += strlen(argv[i]) + 1;

    if (VIR_ALLOC_N(ret, len) < 0)
        return NULL;
    p = ret;

    for (i = 0; argv[i]; i++) {
        if (i != 0)
            *(p++) = ' ';

        strcpy(p, argv[i]);
        p += strlen(argv[i]);
    }

    *p = '\0';

    return ret;
}

244
int virSetNonBlock(int fd) {
245
# ifndef WIN32
246
    int flags;
247
    if ((flags = fcntl(fd, F_GETFL)) < 0)
248
        return -1;
249 250 251
    flags |= O_NONBLOCK;
    if ((fcntl(fd, F_SETFL, flags)) < 0)
        return -1;
252
# else
253 254 255 256 257 258
    unsigned long flag = 1;

    /* This is actually Gnulib's replacement rpl_ioctl function.
     * We can't call ioctlsocket directly in any case.
     */
    if (ioctl (fd, FIONBIO, (void *) &flag) == -1)
259
        return -1;
260
# endif
261 262 263
    return 0;
}

264

265
# ifndef WIN32
266

267
int virSetCloseExec(int fd) {
268
    int flags;
269
    if ((flags = fcntl(fd, F_GETFD)) < 0)
270
        return -1;
271 272
    flags |= FD_CLOEXEC;
    if ((fcntl(fd, F_SETFD, flags)) < 0)
273 274 275 276
        return -1;
    return 0;
}

277

278
#  if HAVE_CAPNG
279 280 281 282 283 284 285
static int virClearCapabilities(void)
{
    int ret;

    capng_clear(CAPNG_SELECT_BOTH);

    if ((ret = capng_apply(CAPNG_SELECT_BOTH)) < 0) {
286 287
        virUtilError(VIR_ERR_INTERNAL_ERROR,
                     _("cannot clear process capabilities %d"), ret);
288 289 290 291 292
        return -1;
    }

    return 0;
}
293
#  else
294 295 296 297 298
static int virClearCapabilities(void)
{
//    VIR_WARN0("libcap-ng support not compiled in, unable to clear capabilities");
    return 0;
}
299
#  endif
300

L
Laine Stump 已提交
301 302 303 304 305 306 307 308 309 310 311 312 313

/* virFork() - fork a new process while avoiding various race/deadlock conditions

   @pid - a pointer to a pid_t that will receive the return value from
          fork()

   on return from virFork(), if *pid < 0, the fork failed and there is
   no new process. Otherwise, just like fork(), if *pid == 0, it is the
   child process returning, and if *pid > 0, it is the parent.

   Even if *pid >= 0, if the return value from virFork() is < 0, it
   indicates a failure that occurred in the parent or child process
   after the fork. In this case, the child process should call
314
   _exit(EXIT_FAILURE) after doing any additional error reporting.
L
Laine Stump 已提交
315 316 317

 */
int virFork(pid_t *pid) {
318
#  ifdef HAVE_PTHREAD_SIGMASK
L
Laine Stump 已提交
319
    sigset_t oldmask, newmask;
320
#  endif
L
Laine Stump 已提交
321 322 323 324 325 326 327 328 329
    struct sigaction sig_action;
    int saved_errno, ret = -1;

    *pid = -1;

    /*
     * Need to block signals now, so that child process can safely
     * kill off caller's signal handlers without a race.
     */
330
#  ifdef HAVE_PTHREAD_SIGMASK
L
Laine Stump 已提交
331 332 333 334 335 336 337
    sigfillset(&newmask);
    if (pthread_sigmask(SIG_SETMASK, &newmask, &oldmask) != 0) {
        saved_errno = errno;
        virReportSystemError(errno,
                             "%s", _("cannot block signals"));
        goto cleanup;
    }
338
#  endif
L
Laine Stump 已提交
339 340 341 342 343 344 345 346 347 348 349 350

    /* Ensure we hold the logging lock, to protect child processes
     * from deadlocking on another thread's inherited mutex state */
    virLogLock();

    *pid = fork();
    saved_errno = errno; /* save for caller */

    /* Unlock for both parent and child process */
    virLogUnlock();

    if (*pid < 0) {
351
#  ifdef HAVE_PTHREAD_SIGMASK
L
Laine Stump 已提交
352 353
        /* attempt to restore signal mask, but ignore failure, to
           avoid obscuring the fork failure */
354
        ignore_value (pthread_sigmask(SIG_SETMASK, &oldmask, NULL));
355
#  endif
L
Laine Stump 已提交
356 357 358 359 360 361 362 363 364
        virReportSystemError(saved_errno,
                             "%s", _("cannot fork child process"));
        goto cleanup;
    }

    if (*pid) {

        /* parent process */

365
#  ifdef HAVE_PTHREAD_SIGMASK
L
Laine Stump 已提交
366 367 368 369 370 371 372
        /* Restore our original signal mask now that the child is
           safely running */
        if (pthread_sigmask(SIG_SETMASK, &oldmask, NULL) != 0) {
            saved_errno = errno; /* save for caller */
            virReportSystemError(errno, "%s", _("cannot unblock signals"));
            goto cleanup;
        }
373
#  endif
L
Laine Stump 已提交
374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408
        ret = 0;

    } else {

        /* child process */

        int logprio;
        int i;

        /* Remove any error callback so errors in child now
           get sent to stderr where they stand a fighting chance
           of being seen / logged */
        virSetErrorFunc(NULL, NULL);

        /* Make sure any hook logging is sent to stderr, since child
         * process may close the logfile FDs */
        logprio = virLogGetDefaultPriority();
        virLogReset();
        virLogSetDefaultPriority(logprio);

        /* Clear out all signal handlers from parent so nothing
           unexpected can happen in our child once we unblock
           signals */
        sig_action.sa_handler = SIG_DFL;
        sig_action.sa_flags = 0;
        sigemptyset(&sig_action.sa_mask);

        for (i = 1; i < NSIG; i++) {
            /* Only possible errors are EFAULT or EINVAL
               The former wont happen, the latter we
               expect, so no need to check return value */

            sigaction(i, &sig_action, NULL);
        }

409
#  ifdef HAVE_PTHREAD_SIGMASK
L
Laine Stump 已提交
410 411 412 413 414 415 416 417 418
        /* Unmask all signals in child, since we've no idea
           what the caller's done with their signal mask
           and don't want to propagate that to children */
        sigemptyset(&newmask);
        if (pthread_sigmask(SIG_SETMASK, &newmask, NULL) != 0) {
            saved_errno = errno; /* save for caller */
            virReportSystemError(errno, "%s", _("cannot unblock signals"));
            goto cleanup;
        }
419
#  endif
L
Laine Stump 已提交
420 421 422 423 424 425 426 427 428
        ret = 0;
    }

cleanup:
    if (ret < 0)
        errno = saved_errno;
    return ret;
}

429 430
/*
 * @argv argv to exec
431
 * @envp optional environment to use for exec
432 433 434 435 436 437 438 439 440 441 442 443 444 445 446
 * @keepfd options fd_ret to keep open for child process
 * @retpid optional pointer to store child process pid
 * @infd optional file descriptor to use as child input, otherwise /dev/null
 * @outfd optional pointer to communicate output fd behavior
 *        outfd == NULL : Use /dev/null
 *        *outfd == -1  : Use a new fd
 *        *outfd != -1  : Use *outfd
 * @errfd optional pointer to communcate error fd behavior. See outfd
 * @flags possible combination of the following:
 *        VIR_EXEC_NONE     : Default function behavior
 *        VIR_EXEC_NONBLOCK : Set child process output fd's as non-blocking
 *        VIR_EXEC_DAEMON   : Daemonize the child process (don't use directly,
 *                            use virExecDaemonize wrapper)
 * @hook optional virExecHook function to call prior to exec
 * @data data to pass to the hook function
447
 * @pidfile path to use as pidfile for daemonized process (needs DAEMON flag)
448
 */
449
static int
450
__virExec(const char *const*argv,
451 452
          const char *const*envp,
          const fd_set *keepfd,
453
          pid_t *retpid,
454
          int infd, int *outfd, int *errfd,
455 456
          int flags,
          virExecHook hook,
457 458
          void *data,
          char *pidfile)
459
{
460 461
    pid_t pid;
    int null, i, openmax;
462 463
    int pipeout[2] = {-1,-1};
    int pipeerr[2] = {-1,-1};
464 465
    int childout = -1;
    int childerr = -1;
466

467
    if ((null = open("/dev/null", O_RDONLY)) < 0) {
468
        virReportSystemError(errno,
469 470
                             _("cannot open %s"),
                             "/dev/null");
471 472 473
        goto cleanup;
    }

474 475 476
    if (outfd != NULL) {
        if (*outfd == -1) {
            if (pipe(pipeout) < 0) {
477
                virReportSystemError(errno,
478
                                     "%s", _("cannot create pipe"));
479 480 481
                goto cleanup;
            }

482
            if ((flags & VIR_EXEC_NONBLOCK) &&
483
                virSetNonBlock(pipeout[0]) == -1) {
484
                virReportSystemError(errno,
485
                                     "%s", _("Failed to set non-blocking file descriptor flag"));
486 487 488 489
                goto cleanup;
            }

            if (virSetCloseExec(pipeout[0]) == -1) {
490
                virReportSystemError(errno,
491
                                     "%s", _("Failed to set close-on-exec file descriptor flag"));
492 493 494 495 496 497
                goto cleanup;
            }

            childout = pipeout[1];
        } else {
            childout = *outfd;
498
        }
499 500
    } else {
        childout = null;
501
    }
502 503 504 505

    if (errfd != NULL) {
        if (*errfd == -1) {
            if (pipe(pipeerr) < 0) {
506
                virReportSystemError(errno,
507
                                     "%s", _("Failed to create pipe"));
508 509 510
                goto cleanup;
            }

511
            if ((flags & VIR_EXEC_NONBLOCK) &&
512
                virSetNonBlock(pipeerr[0]) == -1) {
513
                virReportSystemError(errno,
514
                                     "%s", _("Failed to set non-blocking file descriptor flag"));
515 516 517 518
                goto cleanup;
            }

            if (virSetCloseExec(pipeerr[0]) == -1) {
519
                virReportSystemError(errno,
520
                                     "%s", _("Failed to set close-on-exec file descriptor flag"));
521 522 523 524 525 526
                goto cleanup;
            }

            childerr = pipeerr[1];
        } else {
            childerr = *errfd;
527
        }
528 529
    } else {
        childerr = null;
530 531
    }

532
    int forkRet = virFork(&pid);
533 534

    if (pid < 0) {
535 536 537 538 539
        goto cleanup;
    }

    if (pid) { /* parent */
        close(null);
540
        if (outfd && *outfd == -1) {
541 542 543
            close(pipeout[1]);
            *outfd = pipeout[0];
        }
544
        if (errfd && *errfd == -1) {
545 546 547
            close(pipeerr[1]);
            *errfd = pipeerr[0];
        }
548

549 550
        if (forkRet < 0) {
            goto cleanup;
551 552
        }

553 554 555 556 557 558
        *retpid = pid;
        return 0;
    }

    /* child */

559 560 561 562
    if (forkRet < 0) {
        /* The fork was sucessful, but after that there was an error
         * in the child (which was already logged).
        */
563
        goto fork_error;
564 565
    }

566 567 568 569 570
    openmax = sysconf (_SC_OPEN_MAX);
    for (i = 3; i < openmax; i++)
        if (i != infd &&
            i != null &&
            i != childout &&
571 572 573
            i != childerr &&
            (!keepfd ||
             !FD_ISSET(i, keepfd)))
574 575
            close(i);

576
    if (dup2(infd >= 0 ? infd : null, STDIN_FILENO) < 0) {
577
        virReportSystemError(errno,
578
                             "%s", _("failed to setup stdin file handle"));
579
        goto fork_error;
580
    }
581 582
    if (childout > 0 &&
        dup2(childout, STDOUT_FILENO) < 0) {
583
        virReportSystemError(errno,
584
                             "%s", _("failed to setup stdout file handle"));
585
        goto fork_error;
586
    }
587 588
    if (childerr > 0 &&
        dup2(childerr, STDERR_FILENO) < 0) {
589
        virReportSystemError(errno,
590
                             "%s", _("failed to setup stderr file handle"));
591
        goto fork_error;
592
    }
593

594 595
    if (infd > 0)
        close(infd);
596
    close(null);
597 598 599 600 601
    if (childout > 0)
        close(childout);
    if (childerr > 0 &&
        childerr != childout)
        close(childerr);
602

603 604 605 606
    /* Daemonize as late as possible, so the parent process can detect
     * the above errors with wait* */
    if (flags & VIR_EXEC_DAEMON) {
        if (setsid() < 0) {
607
            virReportSystemError(errno,
608
                                 "%s", _("cannot become session leader"));
609
            goto fork_error;
610 611 612
        }

        if (chdir("/") < 0) {
613
            virReportSystemError(errno,
614
                                 "%s", _("cannot change to root directory: %s"));
615
            goto fork_error;
616 617 618 619
        }

        pid = fork();
        if (pid < 0) {
620
            virReportSystemError(errno,
621
                                 "%s", _("cannot fork child process"));
622
            goto fork_error;
623 624
        }

625 626
        if (pid > 0) {
            if (pidfile && virFileWritePidPath(pidfile,pid)) {
627 628 629
                kill(pid, SIGTERM);
                usleep(500*1000);
                kill(pid, SIGTERM);
630
                virReportSystemError(errno,
631 632
                                     _("could not write pidfile %s for %d"),
                                     pidfile, pid);
633
                goto fork_error;
634
            }
635
            _exit(0);
636
        }
637 638
    }

639
    if (hook)
640 641
        if ((hook)(data) != 0) {
            VIR_DEBUG0("Hook function failed.");
642
            goto fork_error;
643
        }
644

645 646 647 648
    /* The steps above may need todo something privileged, so
     * we delay clearing capabilities until the last minute */
    if ((flags & VIR_EXEC_CLEAR_CAPS) &&
        virClearCapabilities() < 0)
649
        goto fork_error;
650

651 652 653 654
    if (envp)
        execve(argv[0], (char **) argv, (char**)envp);
    else
        execvp(argv[0], (char **) argv);
655

656
    virReportSystemError(errno,
657 658
                         _("cannot execute binary %s"),
                         argv[0]);
659

660 661 662
 fork_error:
    virDispatchError(NULL);
    _exit(EXIT_FAILURE);
663 664

 cleanup:
665 666 667
    /* This is cleanup of parent process only - child
       should never jump here on error */

668
    /* NB we don't virUtilError() on any failures here
669 670
       because the code which jumped hre already raised
       an error condition which we must not overwrite */
671 672 673 674 675 676 677 678 679 680 681 682 683
    if (pipeerr[0] > 0)
        close(pipeerr[0]);
    if (pipeerr[1] > 0)
        close(pipeerr[1]);
    if (pipeout[0] > 0)
        close(pipeout[0]);
    if (pipeout[1] > 0)
        close(pipeout[1]);
    if (null > 0)
        close(null);
    return -1;
}

684
int
685
virExecWithHook(const char *const*argv,
686 687 688 689 690 691
                const char *const*envp,
                const fd_set *keepfd,
                pid_t *retpid,
                int infd, int *outfd, int *errfd,
                int flags,
                virExecHook hook,
692 693
                void *data,
                char *pidfile)
694
{
695
    char *argv_str;
696
    char *envp_str;
697 698

    if ((argv_str = virArgvToString(argv)) == NULL) {
699
        virReportOOMError();
700 701
        return -1;
    }
702 703 704

    if (envp) {
        if ((envp_str = virArgvToString(envp)) == NULL) {
705
            VIR_FREE(argv_str);
706
            virReportOOMError();
707 708 709 710 711 712 713
            return -1;
        }
        VIR_DEBUG("%s %s", envp_str, argv_str);
        VIR_FREE(envp_str);
    } else {
        VIR_DEBUG0(argv_str);
    }
714 715
    VIR_FREE(argv_str);

716
    return __virExec(argv, envp, keepfd, retpid, infd, outfd, errfd,
717
                     flags, hook, data, pidfile);
718 719
}

720 721 722 723 724 725 726
/*
 * See __virExec for explanation of the arguments.
 *
 * Wrapper function for __virExec, with a simpler set of parameters.
 * Used to insulate the numerous callers from changes to __virExec argument
 * list.
 */
727
int
728
virExec(const char *const*argv,
729 730 731 732 733 734
        const char *const*envp,
        const fd_set *keepfd,
        pid_t *retpid,
        int infd, int *outfd, int *errfd,
        int flags)
{
735
    return virExecWithHook(argv, envp, keepfd, retpid,
736
                           infd, outfd, errfd,
737
                           flags, NULL, NULL, NULL);
738 739
}

740 741 742 743 744 745 746 747 748 749 750 751 752 753
/*
 * See __virExec for explanation of the arguments.
 *
 * This function will wait for the intermediate process (between the caller
 * and the daemon) to exit. retpid will be the pid of the daemon, which can
 * be checked for example to see if the daemon crashed immediately.
 *
 * Returns 0 on success
 *         -1 if initial fork failed (will have a reported error)
 *         -2 if intermediate process failed
 *         (won't have a reported error. pending on where the failure
 *          occured and when in the process occured, the error output
 *          could have gone to stderr or the passed errfd).
 */
754
int virExecDaemonize(const char *const*argv,
755 756 757 758 759 760
                     const char *const*envp,
                     const fd_set *keepfd,
                     pid_t *retpid,
                     int infd, int *outfd, int *errfd,
                     int flags,
                     virExecHook hook,
761 762
                     void *data,
                     char *pidfile) {
763 764 765
    int ret;
    int childstat = 0;

766
    ret = virExecWithHook(argv, envp, keepfd, retpid,
767
                          infd, outfd, errfd,
768
                          flags | VIR_EXEC_DAEMON,
769
                          hook, data, pidfile);
770 771 772 773 774 775 776 777 778 779

    /* __virExec should have set an error */
    if (ret != 0)
        return -1;

    /* Wait for intermediate process to exit */
    while (waitpid(*retpid, &childstat, 0) == -1 &&
                   errno == EINTR);

    if (childstat != 0) {
780 781 782
        virUtilError(VIR_ERR_INTERNAL_ERROR,
                     _("Intermediate daemon process exited with status %d."),
                     WEXITSTATUS(childstat));
783 784 785 786 787 788
        ret = -2;
    }

    return ret;
}

789 790 791 792 793 794 795 796 797 798 799 800 801 802 803
/**
 * @argv NULL terminated argv to run
 * @status optional variable to return exit status in
 *
 * Run a command without using the shell.
 *
 * If status is NULL, then return 0 if the command run and
 * exited with 0 status; Otherwise return -1
 *
 * If status is not-NULL, then return 0 if the command ran.
 * The status variable is filled with the command exit status
 * and should be checked by caller for success. Return -1
 * only if the command could not be run.
 */
int
804
virRunWithHook(const char *const*argv,
L
Laine Stump 已提交
805 806 807
               virExecHook hook,
               void *data,
               int *status) {
808 809
    pid_t childpid;
    int exitstatus, execret, waitret;
C
Cole Robinson 已提交
810 811 812 813 814
    int ret = -1;
    int errfd = -1, outfd = -1;
    char *outbuf = NULL;
    char *errbuf = NULL;
    char *argv_str = NULL;
815 816

    if ((argv_str = virArgvToString(argv)) == NULL) {
817
        virReportOOMError();
C
Cole Robinson 已提交
818
        goto error;
819 820
    }
    DEBUG0(argv_str);
821

822
    if ((execret = __virExec(argv, NULL, NULL,
C
Cole Robinson 已提交
823
                             &childpid, -1, &outfd, &errfd,
L
Laine Stump 已提交
824
                             VIR_EXEC_NONE, hook, data, NULL)) < 0) {
C
Cole Robinson 已提交
825 826 827 828
        ret = execret;
        goto error;
    }

829
    if (virPipeReadUntilEOF(outfd, errfd, &outbuf, &errbuf) < 0) {
830 831
        while (waitpid(childpid, &exitstatus, 0) == -1 && errno == EINTR)
            ;
C
Cole Robinson 已提交
832
        goto error;
833
    }
C
Cole Robinson 已提交
834 835 836 837 838

    if (outbuf)
        DEBUG("Command stdout: %s", outbuf);
    if (errbuf)
        DEBUG("Command stderr: %s", errbuf);
839

C
Cole Robinson 已提交
840 841 842
    while ((waitret = waitpid(childpid, &exitstatus, 0) == -1) &&
            errno == EINTR);
    if (waitret == -1) {
843
        virReportSystemError(errno,
844 845
                             _("cannot wait for '%s'"),
                             argv[0]);
C
Cole Robinson 已提交
846
        goto error;
847
    }
848 849 850

    if (status == NULL) {
        errno = EINVAL;
C
Cole Robinson 已提交
851
        if (WIFEXITED(exitstatus) && WEXITSTATUS(exitstatus) != 0) {
852 853 854 855 856 857
            virUtilError(VIR_ERR_INTERNAL_ERROR,
                         _("'%s' exited with non-zero status %d and "
                           "signal %d: %s"), argv_str,
                         WIFEXITED(exitstatus) ? WEXITSTATUS(exitstatus) : 0,
                         WIFSIGNALED(exitstatus) ? WTERMSIG(exitstatus) : 0,
                         (errbuf ? errbuf : ""));
C
Cole Robinson 已提交
858 859
            goto error;
        }
860 861 862
    } else {
        *status = exitstatus;
    }
C
Cole Robinson 已提交
863 864 865 866 867 868 869

    ret = 0;

  error:
    VIR_FREE(outbuf);
    VIR_FREE(errbuf);
    VIR_FREE(argv_str);
870 871 872 873
    if (outfd != -1)
        close(outfd);
    if (errfd != -1)
        close(errfd);
C
Cole Robinson 已提交
874
    return ret;
875 876
}

877 878 879 880 881 882
# else /* WIN32 */

int virSetCloseExec(int fd ATTRIBUTE_UNUSED)
{
    return -1;
}
883

J
Jim Meyering 已提交
884
int
885
virRunWithHook(const char *const *argv ATTRIBUTE_UNUSED,
L
Laine Stump 已提交
886 887 888
               virExecHook hook ATTRIBUTE_UNUSED,
               void *data ATTRIBUTE_UNUSED,
               int *status)
J
Jim Meyering 已提交
889 890 891 892
{
    if (status)
        *status = ENOTSUP;
    else
893 894
        virUtilError(VIR_ERR_INTERNAL_ERROR,
                     "%s", _("virRunWithHook is not implemented for WIN32"));
J
Jim Meyering 已提交
895 896 897
    return -1;
}

898
int
899
virExec(const char *const*argv ATTRIBUTE_UNUSED,
D
Daniel P. Berrange 已提交
900 901
        const char *const*envp ATTRIBUTE_UNUSED,
        const fd_set *keepfd ATTRIBUTE_UNUSED,
902 903 904
        int *retpid ATTRIBUTE_UNUSED,
        int infd ATTRIBUTE_UNUSED,
        int *outfd ATTRIBUTE_UNUSED,
D
Daniel P. Berrange 已提交
905 906
        int *errfd ATTRIBUTE_UNUSED,
        int flags ATTRIBUTE_UNUSED)
907
{
908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928
    virUtilError(VIR_ERR_INTERNAL_ERROR,
                 "%s", _("virExec is not implemented for WIN32"));
    return -1;
}

int
virExecDaemonize(const char *const*argv ATTRIBUTE_UNUSED,
                 const char *const*envp ATTRIBUTE_UNUSED,
                 const fd_set *keepfd ATTRIBUTE_UNUSED,
                 pid_t *retpid ATTRIBUTE_UNUSED,
                 int infd ATTRIBUTE_UNUSED,
                 int *outfd ATTRIBUTE_UNUSED,
                 int *errfd ATTRIBUTE_UNUSED,
                 int flags ATTRIBUTE_UNUSED,
                 virExecHook hook ATTRIBUTE_UNUSED,
                 void *data ATTRIBUTE_UNUSED,
                 char *pidfile ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
                 "%s", _("virExecDaemonize is not implemented for WIN32"));

929 930 931
    return -1;
}

932
# endif /* WIN32 */
933

934 935 936 937 938 939 940 941 942 943
int
virPipeReadUntilEOF(int outfd, int errfd,
                    char **outbuf, char **errbuf) {

    struct pollfd fds[2];
    int i;
    int finished[2];

    fds[0].fd = outfd;
    fds[0].events = POLLIN;
944
    fds[0].revents = 0;
945 946 947
    finished[0] = 0;
    fds[1].fd = errfd;
    fds[1].events = POLLIN;
948
    fds[1].revents = 0;
949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015
    finished[1] = 0;

    while(!(finished[0] && finished[1])) {

        if (poll(fds, ARRAY_CARDINALITY(fds), -1) < 0) {
            if ((errno == EAGAIN) || (errno == EINTR))
                continue;
            goto pollerr;
        }

        for (i = 0; i < ARRAY_CARDINALITY(fds); ++i) {
            char data[1024], **buf;
            int got, size;

            if (!(fds[i].revents))
                continue;
            else if (fds[i].revents & POLLHUP)
                finished[i] = 1;

            if (!(fds[i].revents & POLLIN)) {
                if (fds[i].revents & POLLHUP)
                    continue;

                virUtilError(VIR_ERR_INTERNAL_ERROR,
                             "%s", _("Unknown poll response."));
                goto error;
            }

            got = read(fds[i].fd, data, sizeof(data));

            if (got == 0) {
                finished[i] = 1;
                continue;
            }
            if (got < 0) {
                if (errno == EINTR)
                    continue;
                if (errno == EAGAIN)
                    break;
                goto pollerr;
            }

            buf = ((fds[i].fd == outfd) ? outbuf : errbuf);
            size = (*buf ? strlen(*buf) : 0);
            if (VIR_REALLOC_N(*buf, size+got+1) < 0) {
                virReportOOMError();
                goto error;
            }
            memmove(*buf+size, data, got);
            (*buf)[size+got] = '\0';
        }
        continue;

    pollerr:
        virReportSystemError(errno,
                             "%s", _("poll error"));
        goto error;
    }

    return 0;

error:
    VIR_FREE(*outbuf);
    VIR_FREE(*errbuf);
    return -1;
}

L
Laine Stump 已提交
1016
int
1017
virRun(const char *const*argv,
L
Laine Stump 已提交
1018
       int *status) {
1019
    return virRunWithHook(argv, NULL, NULL, status);
L
Laine Stump 已提交
1020 1021
}

1022 1023 1024 1025
/* Like gnulib's fread_file, but read no more than the specified maximum
   number of bytes.  If the length of the input is <= max_len, and
   upon error while reading that data, it works just like fread_file.  */
static char *
1026
saferead_lim (int fd, size_t max_len, size_t *length)
1027 1028 1029 1030 1031 1032 1033
{
    char *buf = NULL;
    size_t alloc = 0;
    size_t size = 0;
    int save_errno;

    for (;;) {
1034 1035
        int count;
        int requested;
1036 1037 1038 1039 1040 1041

        if (size + BUFSIZ + 1 > alloc) {
            alloc += alloc / 2;
            if (alloc < size + BUFSIZ + 1)
                alloc = size + BUFSIZ + 1;

1042
            if (VIR_REALLOC_N(buf, alloc) < 0) {
1043 1044 1045 1046 1047 1048 1049 1050
                save_errno = errno;
                break;
            }
        }

        /* Ensure that (size + requested <= max_len); */
        requested = MIN (size < max_len ? max_len - size : 0,
                         alloc - size - 1);
1051
        count = saferead (fd, buf + size, requested);
1052 1053 1054 1055
        size += count;

        if (count != requested || requested == 0) {
            save_errno = errno;
1056
            if (count < 0)
1057 1058 1059 1060 1061 1062 1063
                break;
            buf[size] = '\0';
            *length = size;
            return buf;
        }
    }

1064
    VIR_FREE(buf);
1065 1066 1067
    errno = save_errno;
    return NULL;
}
1068

1069
/* A wrapper around saferead_lim that maps a failure due to
1070
   exceeding the maximum size limitation to EOVERFLOW.  */
1071 1072
int
virFileReadLimFD(int fd, int maxlen, char **buf)
1073
{
1074
    size_t len;
1075 1076 1077 1078 1079 1080 1081
    char *s;

    if (maxlen <= 0) {
        errno = EINVAL;
        return -1;
    }
    s = saferead_lim (fd, maxlen+1, &len);
1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094
    if (s == NULL)
        return -1;
    if (len > maxlen || (int)len != len) {
        VIR_FREE(s);
        /* There was at least one byte more than MAXLEN.
           Set errno accordingly. */
        errno = EOVERFLOW;
        return -1;
    }
    *buf = s;
    return len;
}

D
Daniel P. Berrange 已提交
1095
int virFileReadAll(const char *path, int maxlen, char **buf)
1096
{
1097 1098
    int fd = open(path, O_RDONLY);
    if (fd < 0) {
1099
        virReportSystemError(errno, _("Failed to open file '%s'"), path);
1100
        return -1;
1101 1102
    }

1103 1104
    int len = virFileReadLimFD(fd, maxlen, buf);
    close(fd);
1105
    if (len < 0) {
1106
        virReportSystemError(errno, _("Failed to read file '%s'"), path);
1107
        return -1;
1108 1109
    }

1110
    return len;
1111 1112
}

M
Mark McLoughlin 已提交
1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136
/* Truncate @path and write @str to it.
   Return 0 for success, nonzero for failure.
   Be careful to preserve any errno value upon failure. */
int virFileWriteStr(const char *path, const char *str)
{
    int fd;

    if ((fd = open(path, O_WRONLY|O_TRUNC)) == -1)
        return -1;

    if (safewrite(fd, str, strlen(str)) < 0) {
        int saved_errno = errno;
        close (fd);
        errno = saved_errno;
        return -1;
    }

    /* Use errno from failed close only if there was no write error.  */
    if (close (fd) != 0)
        return -1;

    return 0;
}

1137 1138 1139 1140 1141 1142 1143 1144 1145
int virFileMatchesNameSuffix(const char *file,
                             const char *name,
                             const char *suffix)
{
    int filelen = strlen(file);
    int namelen = strlen(name);
    int suffixlen = strlen(suffix);

    if (filelen == (namelen + suffixlen) &&
1146 1147
        STREQLEN(file, name, namelen) &&
        STREQLEN(file + namelen, suffix, suffixlen))
1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161
        return 1;
    else
        return 0;
}

int virFileHasSuffix(const char *str,
                     const char *suffix)
{
    int len = strlen(str);
    int suffixlen = strlen(suffix);

    if (len < suffixlen)
        return 0;

1162
    return STRCASEEQ(str + len - suffixlen, suffix);
1163 1164
}

1165
# define SAME_INODE(Stat_buf_1, Stat_buf_2) \
J
Jim Meyering 已提交
1166 1167
  ((Stat_buf_1).st_ino == (Stat_buf_2).st_ino \
   && (Stat_buf_1).st_dev == (Stat_buf_2).st_dev)
1168

J
Jim Meyering 已提交
1169 1170
/* Return nonzero if checkLink and checkDest
   refer to the same file.  Otherwise, return 0.  */
1171 1172 1173
int virFileLinkPointsTo(const char *checkLink,
                        const char *checkDest)
{
J
Jim Meyering 已提交
1174 1175
    struct stat src_sb;
    struct stat dest_sb;
1176

J
Jim Meyering 已提交
1177 1178 1179
    return (stat (checkLink, &src_sb) == 0
            && stat (checkDest, &dest_sb) == 0
            && SAME_INODE (src_sb, dest_sb));
1180 1181
}

D
Daniel P. Berrange 已提交
1182 1183 1184


/*
1185 1186 1187
 * Attempt to resolve a symbolic link, returning an
 * absolute path where only the last component is guaranteed
 * not to be a symlink.
D
Daniel P. Berrange 已提交
1188 1189
 *
 * Return 0 if path was not a symbolic, or the link was
1190
 * resolved. Return -1 with errno set upon error
D
Daniel P. Berrange 已提交
1191 1192 1193 1194 1195 1196 1197 1198
 */
int virFileResolveLink(const char *linkpath,
                       char **resultpath)
{
    struct stat st;

    *resultpath = NULL;

1199 1200 1201 1202 1203
    /* We don't need the full canonicalization of intermediate
     * directories, if linkpath is absolute and the basename is
     * already a non-symlink.  */
    if (IS_ABSOLUTE_FILE_NAME(linkpath)) {
        if (lstat(linkpath, &st) < 0)
1204
            return -1;
1205 1206 1207 1208 1209 1210

        if (!S_ISLNK(st.st_mode)) {
            if (!(*resultpath = strdup(linkpath)))
                return -1;
            return 0;
        }
D
Daniel P. Berrange 已提交
1211 1212
    }

1213
    *resultpath = canonicalize_file_name(linkpath);
D
Daniel P. Berrange 已提交
1214

1215
    return *resultpath == NULL ? -1 : 0;
D
Daniel P. Berrange 已提交
1216 1217
}

1218 1219 1220 1221 1222 1223 1224 1225
/*
 * Finds a requested file in the PATH env. e.g.:
 * "kvm-img" will return "/usr/bin/kvm-img"
 *
 * You must free the result
 */
char *virFindFileInPath(const char *file)
{
1226
    char *path;
1227
    char pathenv[PATH_MAX];
1228
    char *penv = pathenv;
1229 1230 1231
    char *pathseg;
    char fullpath[PATH_MAX];

1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244
    if (file == NULL)
        return NULL;

    /* if we are passed an absolute path (starting with /), return a
     * copy of that path
     */
    if (file[0] == '/') {
        if (virFileExists(file))
            return strdup(file);
        else
            return NULL;
    }

1245
    /* copy PATH env so we can tweak it */
1246 1247 1248
    path = getenv("PATH");

    if (path == NULL || virStrcpyStatic(pathenv, path) == NULL)
C
Chris Lalancette 已提交
1249
        return NULL;
D
Daniel P. Berrange 已提交
1250

1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261
    /* for each path segment, append the file to search for and test for
     * it. return it if found.
     */
    while ((pathseg = strsep(&penv, ":")) != NULL) {
       snprintf(fullpath, PATH_MAX, "%s/%s", pathseg, file);
       if (virFileExists(fullpath))
           return strdup(fullpath);
    }

    return NULL;
}
1262 1263 1264 1265 1266 1267 1268 1269 1270
int virFileExists(const char *path)
{
    struct stat st;

    if (stat(path, &st) >= 0)
        return(1);
    return(0);
}

1271
# ifndef WIN32
1272
/* return -errno on failure, or 0 on success */
1273 1274 1275 1276
static int virFileOperationNoFork(const char *path, int openflags, mode_t mode,
                                  uid_t uid, gid_t gid,
                                  virFileOperationHook hook, void *hookdata,
                                  unsigned int flags) {
1277 1278 1279 1280
    int fd = -1;
    int ret = 0;
    struct stat st;

1281
    if ((fd = open(path, openflags, mode)) < 0) {
1282
        ret = -errno;
1283
        virReportSystemError(errno, _("failed to create file '%s'"),
1284 1285 1286 1287
                             path);
        goto error;
    }
    if (fstat(fd, &st) == -1) {
1288
        ret = -errno;
1289
        virReportSystemError(errno, _("stat of '%s' failed"), path);
1290 1291 1292 1293
        goto error;
    }
    if (((st.st_uid != uid) || (st.st_gid != gid))
        && (fchown(fd, uid, gid) < 0)) {
1294
        ret = -errno;
1295
        virReportSystemError(errno, _("cannot chown '%s' to (%u, %u)"),
E
Eric Blake 已提交
1296
                             path, (unsigned int) uid, (unsigned int) gid);
1297 1298
        goto error;
    }
1299 1300
    if ((flags & VIR_FILE_OP_FORCE_PERMS)
        && (fchmod(fd, mode) < 0)) {
1301
        ret = -errno;
1302
        virReportSystemError(errno,
1303 1304 1305 1306
                             _("cannot set mode of '%s' to %04o"),
                             path, mode);
        goto error;
    }
1307 1308 1309
    if ((hook) && ((ret = hook(fd, hookdata)) != 0)) {
        goto error;
    }
1310
    if (close(fd) < 0) {
1311
        ret = -errno;
1312
        virReportSystemError(errno, _("failed to close new file '%s'"),
1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323
                             path);
        fd = -1;
        goto error;
    }
    fd = -1;
error:
    if (fd != -1)
       close(fd);
    return ret;
}

1324
/* return -errno on failure, or 0 on success */
1325
static int virDirCreateNoFork(const char *path, mode_t mode, uid_t uid, gid_t gid,
1326 1327 1328 1329 1330
                              unsigned int flags) {
    int ret = 0;
    struct stat st;

    if ((mkdir(path, mode) < 0)
1331
        && !((errno == EEXIST) && (flags & VIR_DIR_CREATE_ALLOW_EXIST)))
1332
       {
1333
        ret = -errno;
1334
        virReportSystemError(errno, _("failed to create directory '%s'"),
1335 1336 1337 1338 1339
                             path);
        goto error;
    }

    if (stat(path, &st) == -1) {
1340
        ret = -errno;
1341
        virReportSystemError(errno, _("stat of '%s' failed"), path);
1342 1343 1344 1345
        goto error;
    }
    if (((st.st_uid != uid) || (st.st_gid != gid))
        && (chown(path, uid, gid) < 0)) {
1346
        ret = -errno;
1347
        virReportSystemError(errno, _("cannot chown '%s' to (%u, %u)"),
E
Eric Blake 已提交
1348
                             path, (unsigned int) uid, (unsigned int) gid);
1349 1350
        goto error;
    }
1351 1352
    if ((flags & VIR_DIR_CREATE_FORCE_PERMS)
        && (chmod(path, mode) < 0)) {
1353
        ret = -errno;
1354
        virReportSystemError(errno,
1355 1356 1357 1358 1359 1360 1361 1362
                             _("cannot set mode of '%s' to %04o"),
                             path, mode);
        goto error;
    }
error:
    return ret;
}

1363
/* return -errno on failure, or 0 on success */
1364 1365 1366 1367
int virFileOperation(const char *path, int openflags, mode_t mode,
                     uid_t uid, gid_t gid,
                     virFileOperationHook hook, void *hookdata,
                     unsigned int flags) {
1368 1369 1370 1371 1372
    struct stat st;
    pid_t pid;
    int waitret, status, ret = 0;
    int fd;

1373
    if ((!(flags & VIR_FILE_OP_AS_UID))
1374
        || (getuid() != 0)
1375 1376 1377
        || ((uid == 0) && (gid == 0))) {
        return virFileOperationNoFork(path, openflags, mode, uid, gid,
                                      hook, hookdata, flags);
1378 1379 1380 1381 1382 1383 1384
    }

    /* parent is running as root, but caller requested that the
     * file be created as some other user and/or group). The
     * following dance avoids problems caused by root-squashing
     * NFS servers. */

1385
    int forkRet = virFork(&pid);
1386 1387

    if (pid < 0) {
1388
        ret = -errno;
1389 1390 1391 1392 1393 1394 1395 1396
        return ret;
    }

    if (pid) { /* parent */
        /* wait for child to complete, and retrieve its exit code */
        while ((waitret = waitpid(pid, &status, 0) == -1)
               && (errno == EINTR));
        if (waitret == -1) {
1397
            ret = -errno;
1398
            virReportSystemError(errno,
1399 1400 1401 1402
                                 _("failed to wait for child creating '%s'"),
                                 path);
            goto parenterror;
        }
1403 1404
        ret = -WEXITSTATUS(status);
        if (!WIFEXITED(status) || (ret == -EACCES)) {
1405 1406
            /* fall back to the simpler method, which works better in
             * some cases */
1407 1408
            return virFileOperationNoFork(path, openflags, mode, uid, gid,
                                          hook, hookdata, flags);
1409 1410 1411 1412 1413
        }
parenterror:
        return ret;
    }

1414 1415 1416 1417 1418 1419 1420 1421 1422

    /* child */

    if (forkRet < 0) {
        /* error encountered and logged in virFork() after the fork. */
        goto childerror;
    }

    /* set desired uid/gid, then attempt to create the file */
1423 1424

    if ((gid != 0) && (setgid(gid) != 0)) {
1425
        ret = -errno;
1426
        virReportSystemError(errno,
1427
                             _("cannot set gid %u creating '%s'"),
E
Eric Blake 已提交
1428
                             (unsigned int) gid, path);
1429 1430 1431
        goto childerror;
    }
    if  ((uid != 0) && (setuid(uid) != 0)) {
1432
        ret = -errno;
1433
        virReportSystemError(errno,
1434
                             _("cannot set uid %u creating '%s'"),
E
Eric Blake 已提交
1435
                             (unsigned int) uid, path);
1436 1437
        goto childerror;
    }
1438
    if ((fd = open(path, openflags, mode)) < 0) {
1439 1440
        ret = -errno;
        if (ret != -EACCES) {
1441
            /* in case of EACCES, the parent will retry */
1442
            virReportSystemError(errno,
1443 1444 1445 1446 1447
                                 _("child failed to create file '%s'"),
                                 path);
        }
        goto childerror;
    }
1448
    if (fstat(fd, &st) == -1) {
1449
        ret = -errno;
1450 1451 1452 1453 1454
        virReportSystemError(errno, _("stat of '%s' failed"), path);
        goto childerror;
    }
    if ((st.st_gid != gid)
        && (fchown(fd, -1, gid) < 0)) {
1455
        ret = -errno;
1456
        virReportSystemError(errno, _("cannot chown '%s' to (%u, %u)"),
E
Eric Blake 已提交
1457
                             path, (unsigned int) uid, (unsigned int) gid);
1458 1459 1460 1461
        goto childerror;
    }
    if ((flags & VIR_FILE_OP_FORCE_PERMS)
        && (fchmod(fd, mode) < 0)) {
1462
        ret = -errno;
1463 1464 1465 1466 1467 1468 1469 1470
        virReportSystemError(errno,
                             _("cannot set mode of '%s' to %04o"),
                             path, mode);
        goto childerror;
    }
    if ((hook) && ((ret = hook(fd, hookdata)) != 0)) {
        goto childerror;
    }
1471
    if (close(fd) < 0) {
1472
        ret = -errno;
1473
        virReportSystemError(errno, _("child failed to close new file '%s'"),
1474 1475 1476 1477 1478 1479 1480 1481
                             path);
        goto childerror;
    }
childerror:
    _exit(ret);

}

1482
/* return -errno on failure, or 0 on success */
1483 1484 1485 1486 1487 1488 1489
int virDirCreate(const char *path, mode_t mode,
                 uid_t uid, gid_t gid, unsigned int flags) {
    struct stat st;
    pid_t pid;
    int waitret;
    int status, ret = 0;

1490
    if ((!(flags & VIR_DIR_CREATE_AS_UID))
1491 1492
        || (getuid() != 0)
        || ((uid == 0) && (gid == 0))
1493 1494
        || ((flags & VIR_DIR_CREATE_ALLOW_EXIST) && (stat(path, &st) >= 0))) {
        return virDirCreateNoFork(path, mode, uid, gid, flags);
1495 1496
    }

1497
    int forkRet = virFork(&pid);
1498 1499

    if (pid < 0) {
1500
        ret = -errno;
1501 1502 1503 1504 1505 1506 1507
        return ret;
    }

    if (pid) { /* parent */
        /* wait for child to complete, and retrieve its exit code */
        while ((waitret = waitpid(pid, &status, 0) == -1)  && (errno == EINTR));
        if (waitret == -1) {
1508
            ret = -errno;
1509
            virReportSystemError(errno,
1510 1511 1512 1513
                                 _("failed to wait for child creating '%s'"),
                                 path);
            goto parenterror;
        }
1514 1515
        ret = -WEXITSTATUS(status);
        if (!WIFEXITED(status) || (ret == -EACCES)) {
1516 1517
            /* fall back to the simpler method, which works better in
             * some cases */
1518
            return virDirCreateNoFork(path, mode, uid, gid, flags);
1519
        }
1520
        if (ret < 0) {
1521 1522 1523 1524 1525 1526
            goto parenterror;
        }
parenterror:
        return ret;
    }

1527 1528 1529 1530 1531 1532 1533 1534
    /* child */

    if (forkRet < 0) {
        /* error encountered and logged in virFork() after the fork. */
        goto childerror;
    }

    /* set desired uid/gid, then attempt to create the directory */
1535 1536

    if ((gid != 0) && (setgid(gid) != 0)) {
1537
        ret = -errno;
1538
        virReportSystemError(errno, _("cannot set gid %u creating '%s'"),
E
Eric Blake 已提交
1539
                             (unsigned int) gid, path);
1540 1541 1542
        goto childerror;
    }
    if  ((uid != 0) && (setuid(uid) != 0)) {
1543
        ret = -errno;
1544
        virReportSystemError(errno, _("cannot set uid %u creating '%s'"),
E
Eric Blake 已提交
1545
                             (unsigned int) uid, path);
1546 1547 1548
        goto childerror;
    }
    if (mkdir(path, mode) < 0) {
1549 1550
        ret = -errno;
        if (ret != -EACCES) {
1551
            /* in case of EACCES, the parent will retry */
1552
            virReportSystemError(errno, _("child failed to create directory '%s'"),
1553 1554 1555 1556
                                 path);
        }
        goto childerror;
    }
1557 1558 1559
    /* check if group was set properly by creating after
     * setgid. If not, try doing it with chown */
    if (stat(path, &st) == -1) {
1560
        ret = -errno;
1561 1562 1563 1564 1565
        virReportSystemError(errno,
                             _("stat of '%s' failed"), path);
        goto childerror;
    }
    if ((st.st_gid != gid) && (chown(path, -1, gid) < 0)) {
1566
        ret = -errno;
1567 1568
        virReportSystemError(errno,
                             _("cannot chown '%s' to group %u"),
E
Eric Blake 已提交
1569
                             path, (unsigned int) gid);
1570 1571 1572 1573 1574 1575 1576 1577 1578
        goto childerror;
    }
    if ((flags & VIR_DIR_CREATE_FORCE_PERMS)
        && chmod(path, mode) < 0) {
        virReportSystemError(errno,
                             _("cannot set mode of '%s' to %04o"),
                             path, mode);
        goto childerror;
    }
1579 1580 1581 1582
childerror:
    _exit(ret);
}

1583
# else /* WIN32 */
1584

1585
/* return -errno on failure, or 0 on success */
1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598
int virFileOperation(const char *path ATTRIBUTE_UNUSED,
                     int openflags ATTRIBUTE_UNUSED,
                     mode_t mode ATTRIBUTE_UNUSED,
                     uid_t uid ATTRIBUTE_UNUSED,
                     gid_t gid ATTRIBUTE_UNUSED,
                     virFileOperationHook hook ATTRIBUTE_UNUSED,
                     void *hookdata ATTRIBUTE_UNUSED,
                     unsigned int flags ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
                 "%s", _("virFileOperation is not implemented for WIN32"));

    return -1;
1599 1600
}

1601 1602 1603 1604 1605 1606 1607 1608 1609 1610
int virDirCreate(const char *path ATTRIBUTE_UNUSED,
                 mode_t mode ATTRIBUTE_UNUSED,
                 uid_t uid ATTRIBUTE_UNUSED,
                 gid_t gid ATTRIBUTE_UNUSED,
                 unsigned int flags ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
                 "%s", _("virDirCreate is not implemented for WIN32"));

    return -1;
1611
}
1612
# endif /* WIN32 */
1613

1614
static int virFileMakePathHelper(char *path) {
1615
    struct stat st;
1616
    char *p = NULL;
1617 1618 1619 1620 1621
    int err;

    if (stat(path, &st) >= 0)
        return 0;

1622
    if ((p = strrchr(path, '/')) == NULL)
1623 1624
        return EINVAL;

1625
    if (p != path) {
1626
        *p = '\0';
1627 1628 1629
        err = virFileMakePathHelper(path);
        *p = '/';
        if (err != 0)
1630 1631
            return err;
    }
1632

1633
    if (mkdir(path, 0777) < 0 && errno != EEXIST) {
1634
        return errno;
1635
    }
1636 1637 1638
    return 0;
}

1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675
int virFileMakePath(const char *path)
{
    struct stat st;
    char *parent = NULL;
    char *p;
    int err = 0;

    if (stat(path, &st) >= 0)
        goto cleanup;

    if ((parent = strdup(path)) == NULL) {
        err = ENOMEM;
        goto cleanup;
    }

    if ((p = strrchr(parent, '/')) == NULL) {
        err = EINVAL;
        goto cleanup;
    }

    if (p != parent) {
        *p = '\0';
        if ((err = virFileMakePathHelper(parent)) != 0) {
            goto cleanup;
        }
    }

    if (mkdir(path, 0777) < 0 && errno != EEXIST) {
        err = errno;
        goto cleanup;
    }

cleanup:
    VIR_FREE(parent);
    return err;
}

1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694
/* Build up a fully qualfiied path for a config file to be
 * associated with a persistent guest or network */
int virFileBuildPath(const char *dir,
                     const char *name,
                     const char *ext,
                     char *buf,
                     unsigned int buflen)
{
    if ((strlen(dir) + 1 + strlen(name) + (ext ? strlen(ext) : 0) + 1) >= (buflen-1))
        return -1;

    strcpy(buf, dir);
    strcat(buf, "/");
    strcat(buf, name);
    if (ext)
        strcat(buf, ext);
    return 0;
}

1695 1696 1697 1698

int virFileOpenTty(int *ttymaster,
                   char **ttyName,
                   int rawmode)
1699 1700 1701 1702 1703 1704 1705
{
    return virFileOpenTtyAt("/dev/ptmx",
                            ttymaster,
                            ttyName,
                            rawmode);
}

1706
# ifdef __linux__
1707 1708 1709 1710
int virFileOpenTtyAt(const char *ptmx,
                     int *ttymaster,
                     char **ttyName,
                     int rawmode)
1711 1712 1713
{
    int rc = -1;

1714
    if ((*ttymaster = open(ptmx, O_RDWR|O_NOCTTY|O_NONBLOCK)) < 0)
1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755
        goto cleanup;

    if (unlockpt(*ttymaster) < 0)
        goto cleanup;

    if (grantpt(*ttymaster) < 0)
        goto cleanup;

    if (rawmode) {
        struct termios ttyAttr;
        if (tcgetattr(*ttymaster, &ttyAttr) < 0)
            goto cleanup;

        cfmakeraw(&ttyAttr);

        if (tcsetattr(*ttymaster, TCSADRAIN, &ttyAttr) < 0)
            goto cleanup;
    }

    if (ttyName) {
        char tempTtyName[PATH_MAX];
        if (ptsname_r(*ttymaster, tempTtyName, sizeof(tempTtyName)) < 0)
            goto cleanup;

        if ((*ttyName = strdup(tempTtyName)) == NULL) {
            errno = ENOMEM;
            goto cleanup;
        }
    }

    rc = 0;

cleanup:
    if (rc != 0 &&
        *ttymaster != -1) {
        close(*ttymaster);
    }

    return rc;

}
1756
# else
1757 1758 1759 1760
int virFileOpenTtyAt(const char *ptmx ATTRIBUTE_UNUSED,
                     int *ttymaster ATTRIBUTE_UNUSED,
                     char **ttyName ATTRIBUTE_UNUSED,
                     int rawmode ATTRIBUTE_UNUSED)
1761 1762 1763
{
    return -1;
}
1764
# endif
1765

1766 1767
char* virFilePid(const char *dir, const char* name)
{
1768
    char *pidfile;
1769 1770
    if (virAsprintf(&pidfile, "%s/%s.pid", dir, name) < 0)
        return NULL;
1771 1772 1773
    return pidfile;
}

1774 1775 1776 1777 1778 1779 1780
int virFileWritePid(const char *dir,
                    const char *name,
                    pid_t pid)
{
    int rc;
    char *pidfile = NULL;

1781 1782 1783 1784 1785
    if (name == NULL || dir == NULL) {
        rc = EINVAL;
        goto cleanup;
    }

1786 1787 1788
    if ((rc = virFileMakePath(dir)))
        goto cleanup;

1789
    if (!(pidfile = virFilePid(dir, name))) {
1790 1791 1792 1793
        rc = ENOMEM;
        goto cleanup;
    }

1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807
    rc = virFileWritePidPath(pidfile, pid);

cleanup:
    VIR_FREE(pidfile);
    return rc;
}

int virFileWritePidPath(const char *pidfile,
                        pid_t pid)
{
    int rc;
    int fd;
    FILE *file = NULL;

1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844
    if ((fd = open(pidfile,
                   O_WRONLY | O_CREAT | O_TRUNC,
                   S_IRUSR | S_IWUSR)) < 0) {
        rc = errno;
        goto cleanup;
    }

    if (!(file = fdopen(fd, "w"))) {
        rc = errno;
        close(fd);
        goto cleanup;
    }

    if (fprintf(file, "%d", pid) < 0) {
        rc = errno;
        goto cleanup;
    }

    rc = 0;

cleanup:
    if (file &&
        fclose(file) < 0) {
        rc = errno;
    }

    return rc;
}

int virFileReadPid(const char *dir,
                   const char *name,
                   pid_t *pid)
{
    int rc;
    FILE *file;
    char *pidfile = NULL;
    *pid = 0;
1845

1846 1847 1848 1849 1850
    if (name == NULL || dir == NULL) {
        rc = EINVAL;
        goto cleanup;
    }

1851
    if (!(pidfile = virFilePid(dir, name))) {
1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862
        rc = ENOMEM;
        goto cleanup;
    }

    if (!(file = fopen(pidfile, "r"))) {
        rc = errno;
        goto cleanup;
    }

    if (fscanf(file, "%d", pid) != 1) {
        rc = EINVAL;
1863
        fclose(file);
1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884
        goto cleanup;
    }

    if (fclose(file) < 0) {
        rc = errno;
        goto cleanup;
    }

    rc = 0;

 cleanup:
    VIR_FREE(pidfile);
    return rc;
}

int virFileDeletePid(const char *dir,
                     const char *name)
{
    int rc = 0;
    char *pidfile = NULL;

1885 1886 1887 1888 1889
    if (name == NULL || dir == NULL) {
        rc = EINVAL;
        goto cleanup;
    }

1890 1891
    if (!(pidfile = virFilePid(dir, name))) {
        rc = ENOMEM;
1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902
        goto cleanup;
    }

    if (unlink(pidfile) < 0 && errno != ENOENT)
        rc = errno;

cleanup:
    VIR_FREE(pidfile);
    return rc;
}

1903
#endif /* PROXY */
1904

A
Amy Griffis 已提交
1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940
/*
 * Creates an absolute path for a potentialy realtive path.
 * Return 0 if the path was not relative, or on success.
 * Return -1 on error.
 *
 * You must free the result.
 */
int virFileAbsPath(const char *path, char **abspath)
{
    char *buf;
    int cwdlen;

    if (path[0] == '/') {
        buf = strdup(path);
        if (buf == NULL)
            return(-1);
    } else {
        buf = getcwd(NULL, 0);
        if (buf == NULL)
            return(-1);

        cwdlen = strlen(buf);
        /* cwdlen includes the null terminator */
        if (VIR_REALLOC_N(buf, cwdlen + strlen(path) + 1) < 0) {
            VIR_FREE(buf);
            errno = ENOMEM;
            return(-1);
        }

        buf[cwdlen] = '/';
        strcpy(&buf[cwdlen + 1], path);
    }

    *abspath = buf;
    return 0;
}
1941

1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990
/* Remove spurious / characters from a path. The result must be freed */
char *
virFileSanitizePath(const char *path)
{
    const char *cur = path;
    char *cleanpath;
    int idx = 0;

    cleanpath = strdup(path);
    if (!cleanpath) {
        virReportOOMError();
        return NULL;
    }

    /* Need to sanitize:
     * //           -> //
     * ///          -> /
     * /../foo      -> /../foo
     * /foo///bar/  -> /foo/bar
     */

    /* Starting with // is valid posix, but ///foo == /foo */
    if (cur[0] == '/' && cur[1] == '/' && cur[2] != '/') {
        idx = 2;
        cur += 2;
    }

    /* Sanitize path in place */
    while (*cur != '\0') {
        if (*cur != '/') {
            cleanpath[idx++] = *cur++;
            continue;
        }

        /* Skip all extra / */
        while (*++cur == '/')
            continue;

        /* Don't add a trailing / */
        if (idx != 0 && *cur == '\0')
            break;

        cleanpath[idx++] = '/';
    }
    cleanpath[idx] = '\0';

    return cleanpath;
}

1991 1992 1993 1994 1995 1996 1997
/* Like strtol, but produce an "int" result, and check more carefully.
   Return 0 upon success;  return -1 to indicate failure.
   When END_PTR is NULL, the byte after the final valid digit must be NUL.
   Otherwise, it's like strtol and lets the caller check any suffix for
   validity.  This function is careful to return -1 when the string S
   represents a number that is not representable as an "int". */
int
D
Daniel P. Berrange 已提交
1998
virStrToLong_i(char const *s, char **end_ptr, int base, int *result)
1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054
{
    long int val;
    char *p;
    int err;

    errno = 0;
    val = strtol(s, &p, base);
    err = (errno || (!end_ptr && *p) || p == s || (int) val != val);
    if (end_ptr)
        *end_ptr = p;
    if (err)
        return -1;
    *result = val;
    return 0;
}

/* Just like virStrToLong_i, above, but produce an "unsigned int" value.  */
int
virStrToLong_ui(char const *s, char **end_ptr, int base, unsigned int *result)
{
    unsigned long int val;
    char *p;
    int err;

    errno = 0;
    val = strtoul(s, &p, base);
    err = (errno || (!end_ptr && *p) || p == s || (unsigned int) val != val);
    if (end_ptr)
        *end_ptr = p;
    if (err)
        return -1;
    *result = val;
    return 0;
}

/* Just like virStrToLong_i, above, but produce an "long long" value.  */
int
virStrToLong_ll(char const *s, char **end_ptr, int base, long long *result)
{
    long long val;
    char *p;
    int err;

    errno = 0;
    val = strtoll(s, &p, base);
    err = (errno || (!end_ptr && *p) || p == s || (long long) val != val);
    if (end_ptr)
        *end_ptr = p;
    if (err)
        return -1;
    *result = val;
    return 0;
}

/* Just like virStrToLong_i, above, but produce an "unsigned long long" value.  */
int
D
Daniel P. Berrange 已提交
2055
virStrToLong_ull(char const *s, char **end_ptr, int base, unsigned long long *result)
2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070
{
    unsigned long long val;
    char *p;
    int err;

    errno = 0;
    val = strtoull(s, &p, base);
    err = (errno || (!end_ptr && *p) || p == s || (unsigned long long) val != val);
    if (end_ptr)
        *end_ptr = p;
    if (err)
        return -1;
    *result = val;
    return 0;
}
2071

2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091
int
virStrToDouble(char const *s,
               char **end_ptr,
               double *result)
{
    double val;
    char *p;
    int err;

    errno = 0;
    val = strtod(s, &p);
    err = (errno || (!end_ptr && *p) || p == s);
    if (end_ptr)
        *end_ptr = p;
    if (err)
        return -1;
    *result = val;
    return 0;
}

2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106
/* Convert C from hexadecimal character to integer.  */
int
virHexToBin(unsigned char c)
{
    switch (c) {
    default: return c - '0';
    case 'a': case 'A': return 10;
    case 'b': case 'B': return 11;
    case 'c': case 'C': return 12;
    case 'd': case 'D': return 13;
    case 'e': case 'E': return 14;
    case 'f': case 'F': return 15;
    }
}

2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143
/**
 * virSkipSpaces:
 * @str: pointer to the char pointer used
 *
 * Skip potential blanks, this includes space tabs, line feed,
 * carriage returns and also '\\' which can be erronously emitted
 * by xend
 */
void
virSkipSpaces(const char **str)
{
    const char *cur = *str;

    while ((*cur == ' ') || (*cur == '\t') || (*cur == '\n') ||
           (*cur == '\r') || (*cur == '\\'))
        cur++;
    *str = cur;
}

/**
 * virParseNumber:
 * @str: pointer to the char pointer used
 *
 * Parse an unsigned number
 *
 * Returns the unsigned number or -1 in case of error. @str will be
 *         updated to skip the number.
 */
int
virParseNumber(const char **str)
{
    int ret = 0;
    const char *cur = *str;

    if ((*cur < '0') || (*cur > '9'))
        return (-1);

J
Jim Meyering 已提交
2144
    while (c_isdigit(*cur)) {
2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155
        unsigned int c = *cur - '0';

        if ((ret > INT_MAX / 10) ||
            ((ret == INT_MAX / 10) && (c > INT_MAX % 10)))
            return (-1);
        ret = ret * 10 + c;
        cur++;
    }
    *str = cur;
    return (ret);
}
2156

2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191

/**
 * virParseVersionString:
 * @str: const char pointer to the version string
 * @version: unsigned long pointer to output the version number
 *
 * Parse an unsigned version number from a version string. Expecting
 * 'major.minor.micro' format, ignoring an optional suffix.
 *
 * The major, minor and micro numbers are encoded into a single version number:
 *
 *   1000000 * major + 1000 * minor + micro
 *
 * Returns the 0 for success, -1 for error.
 */
int
virParseVersionString(const char *str, unsigned long *version)
{
    unsigned int major, minor, micro;
    char *tmp;

    if (virStrToLong_ui(str, &tmp, 10, &major) < 0 || *tmp != '.')
        return -1;

    if (virStrToLong_ui(tmp + 1, &tmp, 10, &minor) < 0 || *tmp != '.')
        return -1;

    if (virStrToLong_ui(tmp + 1, &tmp, 10, &micro) < 0)
        return -1;

    *version = 1000000 * major + 1000 * minor + micro;

    return 0;
}

G
Guido Günther 已提交
2192 2193 2194
/**
 * virAsprintf
 *
2195
 * like glibc's_asprintf but makes sure *strp == NULL on failure
G
Guido Günther 已提交
2196
 */
2197
int
G
Guido Günther 已提交
2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211
virAsprintf(char **strp, const char *fmt, ...)
{
    va_list ap;
    int ret;

    va_start(ap, fmt);

    if ((ret = vasprintf(strp, fmt, ap)) == -1)
        *strp = NULL;

    va_end(ap);
    return ret;
}

C
Chris Lalancette 已提交
2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243 2244 2245 2246 2247 2248 2249 2250 2251 2252 2253 2254
/**
 * virStrncpy
 *
 * A safe version of strncpy.  The last parameter is the number of bytes
 * available in the destination string, *not* the number of bytes you want
 * to copy.  If the destination is not large enough to hold all n of the
 * src string bytes plus a \0, NULL is returned and no data is copied.
 * If the destination is large enough to hold the n bytes plus \0, then the
 * string is copied and a pointer to the destination string is returned.
 */
char *
virStrncpy(char *dest, const char *src, size_t n, size_t destbytes)
{
    char *ret;

    if (n > (destbytes - 1))
        return NULL;

    ret = strncpy(dest, src, n);
    /* strncpy NULL terminates iff the last character is \0.  Therefore
     * force the last byte to be \0
     */
    dest[n] = '\0';

    return ret;
}

/**
 * virStrcpy
 *
 * A safe version of strcpy.  The last parameter is the number of bytes
 * available in the destination string, *not* the number of bytes you want
 * to copy.  If the destination is not large enough to hold all n of the
 * src string bytes plus a \0, NULL is returned and no data is copied.
 * If the destination is large enough to hold the source plus \0, then the
 * string is copied and a pointer to the destination string is returned.
 */
char *
virStrcpy(char *dest, const char *src, size_t destbytes)
{
    return virStrncpy(dest, src, strlen(src), destbytes);
}

2255 2256
/* Compare two MAC addresses, ignoring differences in case,
 * as well as leading zeros.
2257 2258
 */
int
D
Daniel P. Berrange 已提交
2259
virMacAddrCompare (const char *p, const char *q)
2260
{
2261 2262
    unsigned char c, d;
    do {
2263
        while (*p == '0' && c_isxdigit (p[1]))
2264
            ++p;
2265
        while (*q == '0' && c_isxdigit (q[1]))
2266
            ++q;
2267 2268
        c = c_tolower (*p);
        d = c_tolower (*q);
2269 2270 2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283

        if (c == 0 || d == 0)
            break;

        ++p;
        ++q;
    } while (c == d);

    if (UCHAR_MAX <= INT_MAX)
        return c - d;

    /* On machines where 'char' and 'int' are types of the same size, the
       difference of two 'unsigned char' values - including the sign bit -
       doesn't fit in an 'int'.  */
    return (c > d ? 1 : c < d ? -1 : 0);
2284 2285
}

2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300
/**
 * virParseMacAddr:
 * @str: string representation of MAC address, e.g., "0:1E:FC:E:3a:CB"
 * @addr: 6-byte MAC address
 *
 * Parse a MAC address
 *
 * Return 0 upon success, or -1 in case of error.
 */
int
virParseMacAddr(const char* str, unsigned char *addr)
{
    int i;

    errno = 0;
2301
    for (i = 0; i < VIR_MAC_BUFLEN; i++) {
2302 2303 2304 2305 2306 2307
        char *end_ptr;
        unsigned long result;

        /* This is solely to avoid accepting the leading
         * space or "+" that strtoul would otherwise accept.
         */
2308
        if (!c_isxdigit(*str))
2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319
            break;

        result = strtoul(str, &end_ptr, 16);

        if ((end_ptr - str) < 1 || 2 < (end_ptr - str) ||
            (errno != 0) ||
            (0xFF < result))
            break;

        addr[i] = (unsigned char) result;

2320 2321 2322 2323
        if ((i == 5) && (*end_ptr == '\0'))
            return 0;
        if (*end_ptr != ':')
            break;
2324 2325 2326 2327 2328 2329

        str = end_ptr + 1;
    }

    return -1;
}
2330

2331 2332 2333 2334 2335 2336 2337 2338 2339 2340 2341 2342 2343 2344 2345 2346
void virFormatMacAddr(const unsigned char *addr,
                      char *str)
{
    snprintf(str, VIR_MAC_STRING_BUFLEN,
             "%02X:%02X:%02X:%02X:%02X:%02X",
             addr[0], addr[1], addr[2],
             addr[3], addr[4], addr[5]);
    str[VIR_MAC_STRING_BUFLEN-1] = '\0';
}

void virGenerateMacAddr(const unsigned char *prefix,
                        unsigned char *addr)
{
    addr[0] = prefix[0];
    addr[1] = prefix[1];
    addr[2] = prefix[2];
2347 2348 2349
    addr[3] = virRandom(256);
    addr[4] = virRandom(256);
    addr[5] = virRandom(256);
2350 2351 2352
}


2353 2354 2355 2356 2357
int virEnumFromString(const char *const*types,
                      unsigned int ntypes,
                      const char *type)
{
    unsigned int i;
2358 2359 2360
    if (!type)
        return -1;

2361 2362 2363 2364 2365 2366 2367 2368 2369 2370 2371 2372 2373 2374 2375 2376 2377
    for (i = 0 ; i < ntypes ; i++)
        if (STREQ(types[i], type))
            return i;

    return -1;
}

const char *virEnumToString(const char *const*types,
                            unsigned int ntypes,
                            int type)
{
    if (type < 0 || type >= ntypes)
        return NULL;

    return types[type];
}

2378 2379 2380
/* Translates a device name of the form (regex) /^[fhv]d[a-z]+[0-9]*$/
 * into the corresponding index (e.g. sda => 0, hdz => 25, vdaa => 26)
 * Note that any trailing string of digits is simply ignored.
2381 2382 2383 2384 2385 2386
 * @param name The name of the device
 * @return name's index, or -1 on failure
 */
int virDiskNameToIndex(const char *name) {
    const char *ptr = NULL;
    int idx = 0;
2387
    static char const* const drive_prefix[] = {"fd", "hd", "vd", "sd", "xvd", "ubd"};
2388
    unsigned int i;
2389

2390 2391 2392
    for (i = 0; i < ARRAY_CARDINALITY(drive_prefix); i++) {
        if (STRPREFIX(name, drive_prefix[i])) {
            ptr = name + strlen(drive_prefix[i]);
2393
            break;
2394
        }
2395 2396
    }

2397
    if (!ptr)
2398 2399
        return -1;

D
Daniel Veillard 已提交
2400
    for (i = 0; *ptr; i++) {
2401
        idx = (idx + (i < 1 ? 0 : 1)) * 26;
2402

J
Jim Meyering 已提交
2403
        if (!c_islower(*ptr))
2404
            break;
2405 2406 2407 2408 2409

        idx += *ptr - 'a';
        ptr++;
    }

2410 2411 2412 2413 2414
    /* Count the trailing digits.  */
    size_t n_digits = strspn(ptr, "0123456789");
    if (ptr[n_digits] != '\0')
        return -1;

2415 2416
    return idx;
}
G
Guido Günther 已提交
2417

2418 2419 2420 2421 2422 2423
char *virIndexToDiskName(int idx, const char *prefix)
{
    char *name = NULL;
    int i, k, offset;

    if (idx < 0) {
2424 2425
        virUtilError(VIR_ERR_INTERNAL_ERROR,
                     _("Disk index %d is negative"), idx);
2426 2427 2428 2429 2430 2431 2432 2433
        return NULL;
    }

    for (i = 0, k = idx; k >= 0; ++i, k = k / 26 - 1) { }

    offset = strlen(prefix);

    if (VIR_ALLOC_N(name, offset + i + 1)) {
2434
        virReportOOMError();
2435 2436 2437 2438 2439 2440 2441 2442 2443 2444 2445 2446 2447
        return NULL;
    }

    strcpy(name, prefix);
    name[offset + i] = '\0';

    for (i = i - 1, k = idx; k >= 0; --i, k = k / 26 - 1) {
        name[offset + i] = 'a' + (k % 26);
    }

    return name;
}

2448
#ifndef AI_CANONIDN
2449
# define AI_CANONIDN 0
2450 2451
#endif

C
Chris Lalancette 已提交
2452 2453 2454 2455 2456 2457 2458 2459 2460 2461 2462 2463 2464 2465 2466 2467 2468 2469 2470 2471 2472
/* Who knew getting a hostname could be so delicate.  In Linux (and Unices
 * in general), many things depend on "hostname" returning a value that will
 * resolve one way or another.  In the modern world where networks frequently
 * come and go this is often being hard-coded to resolve to "localhost".  If
 * it *doesn't* resolve to localhost, then we would prefer to have the FQDN.
 * That leads us to 3 possibilities:
 *
 * 1)  gethostname() returns an FQDN (not localhost) - we return the string
 *     as-is, it's all of the information we want
 * 2)  gethostname() returns "localhost" - we return localhost; doing further
 *     work to try to resolve it is pointless
 * 3)  gethostname() returns a shortened hostname - in this case, we want to
 *     try to resolve this to a fully-qualified name.  Therefore we pass it
 *     to getaddrinfo().  There are two possible responses:
 *     a)  getaddrinfo() resolves to a FQDN - return the FQDN
 *     b)  getaddrinfo() resolves to localhost - in this case, the data we got
 *         from gethostname() is actually more useful than what we got from
 *         getaddrinfo().  Return the value from gethostname() and hope for
 *         the best.
 */
char *virGetHostname(virConnectPtr conn ATTRIBUTE_UNUSED)
2473 2474 2475
{
    int r;
    char hostname[HOST_NAME_MAX+1], *result;
C
Chris Lalancette 已提交
2476
    struct addrinfo hints, *info;
2477 2478

    r = gethostname (hostname, sizeof(hostname));
2479
    if (r == -1) {
2480 2481
        virReportSystemError(errno,
                             "%s", _("failed to determine host name"));
2482
        return NULL;
2483
    }
2484 2485
    NUL_TERMINATE(hostname);

C
Chris Lalancette 已提交
2486 2487 2488 2489 2490 2491 2492 2493 2494 2495 2496 2497 2498 2499 2500
    if (STRPREFIX(hostname, "localhost") || strchr(hostname, '.')) {
        /* in this case, gethostname returned localhost (meaning we can't
         * do any further canonicalization), or it returned an FQDN (and
         * we don't need to do any further canonicalization).  Return the
         * string as-is; it's up to callers to check whether "localhost"
         * is allowed.
         */
        result = strdup(hostname);
        goto check_and_return;
    }

    /* otherwise, it's a shortened, non-localhost, hostname.  Attempt to
     * canonicalize the hostname by running it through getaddrinfo
     */

2501 2502 2503 2504
    memset(&hints, 0, sizeof(hints));
    hints.ai_flags = AI_CANONNAME|AI_CANONIDN;
    hints.ai_family = AF_UNSPEC;
    r = getaddrinfo(hostname, NULL, &hints, &info);
2505
    if (r != 0) {
2506 2507 2508
        virUtilError(VIR_ERR_INTERNAL_ERROR,
                     _("getaddrinfo failed for '%s': %s"),
                     hostname, gai_strerror(r));
2509
        return NULL;
2510
    }
2511

2512 2513 2514
    /* Tell static analyzers about getaddrinfo semantics.  */
    sa_assert (info);

C
Chris Lalancette 已提交
2515 2516 2517 2518 2519 2520 2521 2522 2523 2524
    if (info->ai_canonname == NULL ||
        STRPREFIX(info->ai_canonname, "localhost"))
        /* in this case, we tried to canonicalize and we ended up back with
         * localhost.  Ignore the canonicalized name and just return the
         * original hostname
         */
        result = strdup(hostname);
    else
        /* Caller frees this string. */
        result = strdup (info->ai_canonname);
2525

C
Chris Lalancette 已提交
2526
    freeaddrinfo(info);
2527

C
Chris Lalancette 已提交
2528 2529
check_and_return:
    if (result == NULL)
2530
        virReportOOMError();
2531 2532 2533
    return result;
}

G
Guido Günther 已提交
2534 2535 2536
/* send signal to a single process */
int virKillProcess(pid_t pid, int sig)
{
2537
    if (pid <= 1) {
G
Guido Günther 已提交
2538 2539 2540 2541
        errno = ESRCH;
        return -1;
    }

2542 2543 2544 2545 2546 2547 2548 2549 2550 2551 2552 2553 2554 2555 2556 2557 2558 2559 2560 2561 2562 2563 2564 2565 2566 2567 2568 2569 2570 2571 2572 2573 2574 2575 2576 2577 2578 2579 2580 2581 2582 2583 2584 2585
#ifdef WIN32
    /* Mingw / Windows don't have many signals (AFAIK) */
    switch (sig) {
    case SIGINT:
        /* This does a Ctrl+C equiv */
        if (!GenerateConsoleCtrlEvent(CTRL_C_EVENT, pid)) {
            errno = ESRCH;
            return -1;
        }
        break;

    case SIGTERM:
        /* Since TerminateProcess is closer to SIG_KILL, we do
         * a Ctrl+Break equiv which is more pleasant like the
         * good old unix SIGTERM/HUP
         */
        if (!GenerateConsoleCtrlEvent(CTRL_BREAK_EVENT, pid)) {
            errno = ESRCH;
            return -1;
        }
        break;

    default:
    {
        HANDLE proc;
        proc = OpenProcess(PROCESS_TERMINATE, FALSE, pid);
        if (!proc) {
            errno = ESRCH; /* Not entirely accurate, but close enough */
            return -1;
        }

        /*
         * TerminateProcess is more or less equiv to SIG_KILL, in that
         * a process can't trap / block it
         */
        if (!TerminateProcess(proc, sig)) {
            errno = ESRCH;
            return -1;
        }
        CloseHandle(proc);
    }
    }
    return 0;
#else
G
Guido Günther 已提交
2586
    return kill(pid, sig);
2587
#endif
G
Guido Günther 已提交
2588
}
2589 2590


2591 2592 2593 2594 2595 2596 2597 2598 2599 2600 2601 2602 2603 2604 2605 2606 2607 2608 2609 2610 2611 2612 2613 2614 2615 2616 2617 2618 2619 2620
static char randomState[128];
static struct random_data randomData;
static virMutex randomLock;

int virRandomInitialize(unsigned int seed)
{
    if (virMutexInit(&randomLock) < 0)
        return -1;

    if (initstate_r(seed,
                    randomState,
                    sizeof(randomState),
                    &randomData) < 0)
        return -1;

    return 0;
}

int virRandom(int max)
{
    int32_t ret;

    virMutexLock(&randomLock);
    random_r(&randomData, &ret);
    virMutexUnlock(&randomLock);

    return (int) ((double)max * ((double)ret / (double)RAND_MAX));
}


2621
#ifdef HAVE_GETPWUID_R
2622 2623 2624 2625 2626
enum {
    VIR_USER_ENT_DIRECTORY,
    VIR_USER_ENT_NAME,
};

2627
static char *virGetUserEnt(uid_t uid,
2628
                           int field)
2629 2630 2631 2632
{
    char *strbuf;
    char *ret;
    struct passwd pwbuf;
2633
    struct passwd *pw = NULL;
2634 2635 2636 2637
    long val = sysconf(_SC_GETPW_R_SIZE_MAX);
    size_t strbuflen = val;

    if (val < 0) {
2638
        virReportSystemError(errno, "%s", _("sysconf failed"));
2639 2640
        return NULL;
    }
2641 2642

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
2643
        virReportOOMError();
2644 2645 2646
        return NULL;
    }

2647 2648 2649 2650 2651 2652 2653 2654
    /*
     * From the manpage (terrifying but true):
     *
     * ERRORS
     *  0 or ENOENT or ESRCH or EBADF or EPERM or ...
     *        The given name or uid was not found.
     */
    if (getpwuid_r(uid, &pwbuf, strbuf, strbuflen, &pw) != 0 || pw == NULL) {
2655
        virReportSystemError(errno,
E
Eric Blake 已提交
2656 2657
                             _("Failed to find user record for uid '%u'"),
                             (unsigned int) uid);
2658 2659 2660 2661
        VIR_FREE(strbuf);
        return NULL;
    }

2662 2663 2664 2665
    if (field == VIR_USER_ENT_DIRECTORY)
        ret = strdup(pw->pw_dir);
    else
        ret = strdup(pw->pw_name);
2666 2667 2668

    VIR_FREE(strbuf);
    if (!ret)
2669
        virReportOOMError();
2670 2671 2672

    return ret;
}
2673

2674
char *virGetUserDirectory(uid_t uid)
2675
{
2676
    return virGetUserEnt(uid, VIR_USER_ENT_DIRECTORY);
2677 2678
}

2679
char *virGetUserName(uid_t uid)
2680
{
2681
    return virGetUserEnt(uid, VIR_USER_ENT_NAME);
2682 2683
}

2684

2685
int virGetUserID(const char *name,
2686 2687 2688 2689 2690
                 uid_t *uid)
{
    char *strbuf;
    struct passwd pwbuf;
    struct passwd *pw = NULL;
2691 2692 2693 2694
    long val = sysconf(_SC_GETPW_R_SIZE_MAX);
    size_t strbuflen = val;

    if (val < 0) {
2695
        virReportSystemError(errno, "%s", _("sysconf failed"));
2696 2697
        return -1;
    }
2698 2699

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
2700
        virReportOOMError();
2701 2702 2703 2704 2705 2706 2707 2708 2709 2710 2711
        return -1;
    }

    /*
     * From the manpage (terrifying but true):
     *
     * ERRORS
     *  0 or ENOENT or ESRCH or EBADF or EPERM or ...
     *        The given name or uid was not found.
     */
    if (getpwnam_r(name, &pwbuf, strbuf, strbuflen, &pw) != 0 || pw == NULL) {
2712
        virReportSystemError(errno,
2713 2714 2715 2716 2717 2718 2719 2720 2721 2722 2723 2724 2725 2726
                             _("Failed to find user record for name '%s'"),
                             name);
        VIR_FREE(strbuf);
        return -1;
    }

    *uid = pw->pw_uid;

    VIR_FREE(strbuf);

    return 0;
}


2727
int virGetGroupID(const char *name,
2728 2729 2730 2731 2732
                  gid_t *gid)
{
    char *strbuf;
    struct group grbuf;
    struct group *gr = NULL;
2733 2734 2735 2736
    long val = sysconf(_SC_GETGR_R_SIZE_MAX);
    size_t strbuflen = val;

    if (val < 0) {
2737
        virReportSystemError(errno, "%s", _("sysconf failed"));
2738 2739
        return -1;
    }
2740 2741

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
2742
        virReportOOMError();
2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753
        return -1;
    }

    /*
     * From the manpage (terrifying but true):
     *
     * ERRORS
     *  0 or ENOENT or ESRCH or EBADF or EPERM or ...
     *        The given name or uid was not found.
     */
    if (getgrnam_r(name, &grbuf, strbuf, strbuflen, &gr) != 0 || gr == NULL) {
2754
        virReportSystemError(errno,
2755 2756 2757 2758 2759 2760 2761 2762 2763 2764 2765 2766
                             _("Failed to find group record for name '%s'"),
                             name);
        VIR_FREE(strbuf);
        return -1;
    }

    *gid = gr->gr_gid;

    VIR_FREE(strbuf);

    return 0;
}
2767 2768 2769 2770 2771 2772 2773

#else /* HAVE_GETPWUID_R */

char *
virGetUserDirectory(uid_t uid ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
M
Matthias Bolte 已提交
2774
                 "%s", _("virGetUserDirectory is not available"));
2775 2776 2777 2778 2779 2780 2781 2782

    return NULL;
}

char *
virGetUserName(uid_t uid ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
M
Matthias Bolte 已提交
2783
                 "%s", _("virGetUserName is not available"));
2784 2785 2786 2787 2788 2789 2790 2791

    return NULL;
}

int virGetUserID(const char *name ATTRIBUTE_UNUSED,
                 uid_t *uid ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
M
Matthias Bolte 已提交
2792
                 "%s", _("virGetUserID is not available"));
2793 2794 2795 2796 2797 2798 2799 2800 2801

    return 0;
}


int virGetGroupID(const char *name ATTRIBUTE_UNUSED,
                  gid_t *gid ATTRIBUTE_UNUSED)
{
    virUtilError(VIR_ERR_INTERNAL_ERROR,
M
Matthias Bolte 已提交
2802
                 "%s", _("virGetGroupID is not available"));
2803 2804 2805 2806

    return 0;
}
#endif /* HAVE_GETPWUID_R */
2807 2808


2809
#if defined HAVE_MNTENT_H && defined HAVE_GETMNTENT_R
2810 2811 2812 2813 2814 2815 2816 2817 2818 2819 2820 2821 2822 2823 2824 2825 2826 2827 2828 2829 2830 2831 2832 2833 2834 2835 2836 2837 2838 2839
/* search /proc/mounts for mount point of *type; return pointer to
 * malloc'ed string of the path if found, otherwise return NULL
 * with errno set to an appropriate value.
 */
char *virFileFindMountPoint(const char *type)
{
    FILE *f;
    struct mntent mb;
    char mntbuf[1024];
    char *ret = NULL;

    f = setmntent("/proc/mounts", "r");
    if (!f)
        return NULL;

    while (getmntent_r(f, &mb, mntbuf, sizeof(mntbuf))) {
        if (STREQ(mb.mnt_type, type)) {
            ret = strdup(mb.mnt_dir);
            goto cleanup;
        }
    }

    if (!ret)
        errno = ENOENT;

cleanup:
    endmntent(f);

    return ret;
}
2840

2841
#else /* defined HAVE_MNTENT_H && defined HAVE_GETMNTENT_R */
2842 2843 2844 2845 2846 2847 2848 2849 2850

char *
virFileFindMountPoint(const char *type ATTRIBUTE_UNUSED)
{
    errno = ENOSYS;

    return NULL;
}

2851
#endif /* defined HAVE_MNTENT_H && defined HAVE_GETMNTENT_R */
D
Daniel P. Berrange 已提交
2852 2853

#ifndef PROXY
2854
# if defined(UDEVADM) || defined(UDEVSETTLE)
2855
void virFileWaitForDevices(void)
D
Daniel P. Berrange 已提交
2856
{
2857
#  ifdef UDEVADM
D
Daniel P. Berrange 已提交
2858
    const char *const settleprog[] = { UDEVADM, "settle", NULL };
2859
#  else
D
Daniel P. Berrange 已提交
2860
    const char *const settleprog[] = { UDEVSETTLE, NULL };
2861
#  endif
D
Daniel P. Berrange 已提交
2862 2863 2864 2865 2866 2867 2868 2869 2870 2871 2872
    int exitstatus;

    if (access(settleprog[0], X_OK) != 0)
        return;

    /*
     * NOTE: we ignore errors here; this is just to make sure that any device
     * nodes that are being created finish before we try to scan them.
     * If this fails for any reason, we still have the backup of polling for
     * 5 seconds for device nodes.
     */
2873
    if (virRun(settleprog, &exitstatus) < 0)
2874
    {}
D
Daniel P. Berrange 已提交
2875
}
2876
# else
2877
void virFileWaitForDevices(void) {}
2878
# endif
D
Daniel P. Berrange 已提交
2879
#endif
2880 2881 2882 2883 2884 2885 2886 2887

int virBuildPathInternal(char **path, ...)
{
    char *path_component = NULL;
    virBuffer buf = VIR_BUFFER_INITIALIZER;
    va_list ap;
    int ret = 0;

E
Eric Blake 已提交
2888
    va_start(ap, path);
2889 2890 2891 2892 2893 2894 2895 2896 2897 2898 2899 2900 2901 2902 2903 2904 2905 2906 2907

    path_component = va_arg(ap, char *);
    virBufferAdd(&buf, path_component, -1);

    while ((path_component = va_arg(ap, char *)) != NULL)
    {
        virBufferAddChar(&buf, '/');
        virBufferAdd(&buf, path_component, -1);
    }

    va_end(ap);

    *path = virBufferContentAndReset(&buf);
    if (*path == NULL) {
        ret = -1;
    }

    return ret;
}