X-Git-Url: http://gitweb.michael.orlitzky.com/?a=blobdiff_plain;f=src%2Flibadacl.c;h=4ca60c0c0d972018486bc725c17752725a07ebeb;hb=d9a84af0c1e29146ce708a3f4db50b0f86865cf6;hp=f20d4a393c26f4e22a8e1cb77947214539b6fb5e;hpb=a5d23c3d91c9a7b16e5aec08555133f9ded7d1bb;p=apply-default-acl.git diff --git a/src/libadacl.c b/src/libadacl.c index f20d4a3..4ca60c0 100644 --- a/src/libadacl.c +++ b/src/libadacl.c @@ -1003,7 +1003,30 @@ int apply_default_acl(const char* path, bool recursive) { return ACL_ERROR; } char* parent = dirname(dirname_path_copy); + + basename_path_copy = strdup(path); + if (basename_path_copy == NULL) { + perror("apply_default_acl (strdup)"); + result = ACL_ERROR; + goto cleanup; + } + char* child = basename(basename_path_copy); + + /* Just kidding, if the path is "." or "..", then dirname will do + * the wrong thing and give us "." as its parent, too. So, we handle + * those as special cases. We use "child" instead of "path" here to + * catch things like "./" and "../" + */ + bool path_is_dots = strcmp(child, ".") == 0 || strcmp(child, "..") == 0; + char dots_parent[6] = "../"; + if (path_is_dots) { + /* We know that "child" contains no more than two characters here, and + using strncat to enforce that belief keeps clang-tidy happy. */ + parent = strncat(dots_parent, child, 2); + } + parent_fd = safe_open(parent, O_DIRECTORY | O_NOFOLLOW); + if (parent_fd == OPEN_ERROR) { if (errno == ELOOP || errno == ENOTDIR) { /* We hit a symlink, either in the last path component (ELOOP) @@ -1019,16 +1042,20 @@ int apply_default_acl(const char* path, bool recursive) { } /* We already obtained the parent fd safely, so if we use the - basename of path here instead of the full thing, then we can get - away with using openat() and spare ourselves the slowness of - another safe_open(). */ - basename_path_copy = strdup(path); - if (basename_path_copy == NULL) { - perror("apply_default_acl (strdup)"); - result = ACL_ERROR; - goto cleanup; + * basename of path here instead of the full thing, then we can get + * away with using openat() and spare ourselves the slowness of + * another safe_open(). + * + * Note that if the basename is "." or "..", then we don't want to + * open it relative to the parent_fd, so we need another special + * case for those paths here. + */ + if (path_is_dots) { + fd = open(child, O_NOFOLLOW); + } + else { + fd = openat(parent_fd, child, O_NOFOLLOW); } - fd = openat(parent_fd, basename(basename_path_copy), O_NOFOLLOW); if (fd == OPEN_ERROR) { if (errno == ELOOP || errno == ENOTDIR) { /* We hit a symlink, either in the last path component (ELOOP)