8000 gh-94518: [_posixsubprocess] Replace variable validity flags with reserved values by arhadthedev · Pull Request #94687 · python/cpython · GitHub
[go: up one dir, main page]
Skip to content

gh-94518: [_posixsubprocess] Replace variable validity flags with reserved values #94687

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 14 commits into from
Jan 14, 2023
Merged

gh-94518: [_posixsubprocess] Replace variable validity flags with reserved values #94687

Changes from 1 commit
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
1b3250e
Replace call_setgid/call_setuid in _posixsubprocess with gid/uid==-1
arhadthedev Jul 8, 2022
c292331
Merge branch 'main' into posixsubprocess-no-callsetxid
arhadthedev Jul 22, 2022
7d431a3
Add a NEWS entry
arhadthedev Jul 22, 2022
06f2a01
Address Gregory's review in gh-94519
arhadthedev Jul 26, 2022
aaec16e
Use negative groups_size for "don't call setgroups"
arhadthedev Jul 27, 2022
c9bf4f6
Check num_groups for emptiness, not groups_list
arhadthedev Jul 27, 2022
069d769
Restore assertions in do_fork_exec()
arhadthedev Jul 27, 2022
6a236e5
Tighten scope of relevant short lived variables
arhadthedev Jul 27, 2022
8c06be1
Fix `PermissionError: [Errno 1] Operation not permitted` exception
arhadthedev Jul 27, 2022
3ccdb78
Merge branch 'main' into posixsubprocess-no-callsetxid
arhadthedev Oct 6, 2022
d3c0e6c
Merge branch 'main' into posixsubprocess-no-callsetxid
arhadthedev Oct 29, 2022
cfdf639
Merge branch 'main' into posixsubprocess-no-callsetxid
arhadthedev Nov 14, 2022
0e997c0
Merge branch 'main' into posixsubprocess-no-callsetxid
arhadthedev Nov 29, 2022
66c836b
Merge branch 'main' into posixsubprocess-no-callsetxid
arhadthedev Jan 14, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Address Gregory's review in gh-94519
  • Loading branch information
@arhadthedev
arhadthedev authored Jul 26, 2022
commit 06f2a01637465f93331c00db32a157a078876e89
14 changes: 5 additions & 9 deletions Modules/_posixsubprocess.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -476,10 +476,6 @@ reset_signal_handlers(const sigset_t *child_sigmask)
#endif /* VFORK_USABLE */


/* To avoid signeness churn on platforms where gid and uid are unsigned. */
#define RESERVED_GID (gid_t)-1
#define RESERVED_UID (uid_t)-1

/*
* This function is code executed in the child process immediately after
* (v)fork to set things up and call exec().
Expand Down Expand Up @@ -628,12 +624,12 @@ child_exec(char *const exec_array[],
#endif /* HAVE_SETGROUPS */

#ifdef HAVE_SETREGID
if (gid != RESERVED_GID)
if (gid != (gid_t)-1)
POSIX_CALL(setregid(gid, gid));
#endif /* HAVE_SETREGID */

#ifdef HAVE_SETREUID
if (uid != RESERVED_UID)
if (uid != (uid_t)-1)
POSIX_CALL(setreuid(uid, uid));
#endif /* HAVE_SETREUID */

Expand Down Expand Up @@ -957,7 +953,7 @@ subprocess_fork_exec(PyObject *module, PyObject *args)
#endif /* HAVE_SETGROUPS */
}

gid_t gid = RESERVED_GID;
gid_t gid = (gid_t)-1;
if (gid_object != Py_None) {
#ifdef HAVE_SETREGID
if (!_Py_Gid_Converter(gid_object, &gid))
Expand All @@ -969,7 +965,7 @@ subprocess_fork_exec(PyObject *module, PyObject *args)
#endif /* HAVE_SETREUID */
}

uid_t uid = RESERVED_UID;
uid_t uid = (uid_t)-1;
if (uid_object != Py_None) {
#ifdef HAVE_SETREUID
if (!_Py_Uid_Converter(uid_object, &uid))
Expand Down Expand Up @@ -998,7 +994,7 @@ subprocess_fork_exec(PyObject *module, PyObject *args)
/* Use vfork() only if it's safe. See the comment above child_exec(). */
sigset_t old_sigs;
if (preexec_fn == Py_None && allow_vfork &&
uid == RESERVED_UID && gid == RESERVED_GID && groups_list == Py_None) {
uid == (uid_t)-1 && gid == (gid_t)-1 && groups_list == Py_None) {
/* Block all signals to ensure that no signal handlers are run in the
* child process while it shares memory with us. Note that signals
* used internally by C libraries won't be blocked by
Expand Down
0