[CRIU] [PATCH 1/2] p.haul: do not use getsockname() as a hash_name
Ruslan Kuprieiev
kupruser at gmail.com
Wed Oct 22 12:41:34 PDT 2014
Currently xem_rpc is not proxy-resistant.
It means that if there is a proxy somewhere in
between client and server, p.haul will fail,
because getsockname() on client != getpeername()
on server. Lets use strings as hash names for
sockets. Lets send socket name(e.g. datask or rpc)
right after calling connect().
Signed-off-by: Ruslan Kuprieiev <kupruser at gmail.com>
---
xem_rpc.py | 24 +++++++++++++++---------
1 file changed, 15 insertions(+), 9 deletions(-)
diff --git a/xem_rpc.py b/xem_rpc.py
index 9718eef..6a79b63 100644
--- a/xem_rpc.py
+++ b/xem_rpc.py
@@ -3,6 +3,7 @@ import select
import threading
import traceback
import util
+import struct
rpc_port = 12345
rpc_sk_buf = 256
@@ -41,22 +42,24 @@ class _rpc_proxy_caller:
class rpc_proxy:
def __init__(self, conn, *args):
self._srv = conn
- self._rpc_sk = self._make_sk()
+ self._rpc_sk = self._make_sk("rpc")
util.set_cloexec(self._rpc_sk)
_rpc_proxy_caller(self._rpc_sk, RPC_CMD, "init_rpc")(args)
def __getattr__(self, attr):
return _rpc_proxy_caller(self._rpc_sk, RPC_CALL, attr)
- def _make_sk(self):
+ def _make_sk(self, uname):
sk = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sk.connect((self._srv, rpc_port))
+ sk.send(struct.pack("!i", len(uname)))
+ sk.send(uname.encode())
return sk
def open_socket(self, uname):
- sk = self._make_sk()
+ sk = self._make_sk(uname)
c = _rpc_proxy_caller(self._rpc_sk, RPC_CMD, "pick_channel")
- c(sk.getsockname(), uname)
+ c(uname)
return sk
@@ -66,15 +69,16 @@ class rpc_proxy:
#
class _rpc_server_sk:
- def __init__(self, sk):
+ def __init__(self, sk, uname):
self._sk = sk
self._master = None
+ self._uname = uname
def fileno(self):
return self._sk.fileno()
def hash_name(self):
- return self._sk.getpeername()
+ return self._uname
def work(self, mgr):
raw_data = self._sk.recv(rpc_sk_buf)
@@ -110,8 +114,8 @@ class _rpc_server_sk:
self._master = mgr.make_master()
self._master.on_connect(*args)
- def pick_channel(self, mgr, hash_name, uname):
- sk = mgr.pick_sk(hash_name)
+ def pick_channel(self, mgr, uname):
+ sk = mgr.pick_sk(uname)
if sk:
self._master.on_socket_open(sk._sk, uname)
@@ -128,7 +132,9 @@ class _rpc_server_ask:
def work(self, mgr):
sk, addr = self._sk.accept()
- mgr.add(_rpc_server_sk(sk))
+ size, = struct.unpack("!i", sk.recv(4))
+ uname = sk.recv(size).decode()
+ mgr.add(_rpc_server_sk(sk, uname))
class _rpc_stop_fd:
def __init__(self, fd):
--
1.9.3
More information about the CRIU
mailing list