c5b6f20d56
Docker-DCO-1.1-Signed-off-by: Solomon Hykes <solomon@docker.com> (github: shykes)
211 lines
5.1 KiB
Go
211 lines
5.1 KiB
Go
package beam
|
|
|
|
import (
|
|
"bufio"
|
|
"fmt"
|
|
"net"
|
|
"os"
|
|
"syscall"
|
|
)
|
|
|
|
func debugCheckpoint(msg string, args ...interface{}) {
|
|
if os.Getenv("DEBUG") == "" {
|
|
return
|
|
}
|
|
os.Stdout.Sync()
|
|
tty, _ := os.OpenFile("/dev/tty", os.O_RDWR, 0700)
|
|
fmt.Fprintf(tty, msg, args...)
|
|
bufio.NewScanner(tty).Scan()
|
|
tty.Close()
|
|
}
|
|
|
|
type UnixConn struct {
|
|
*net.UnixConn
|
|
}
|
|
|
|
func FileConn(f *os.File) (*UnixConn, error) {
|
|
conn, err := net.FileConn(f)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
uconn, ok := conn.(*net.UnixConn)
|
|
if !ok {
|
|
conn.Close()
|
|
return nil, fmt.Errorf("%d: not a unix connection", f.Fd())
|
|
}
|
|
return &UnixConn{uconn}, nil
|
|
|
|
}
|
|
|
|
// Send sends a new message on conn with data and f as payload and
|
|
// attachment, respectively.
|
|
// On success, f is closed
|
|
func (conn *UnixConn) Send(data []byte, f *os.File) error {
|
|
{
|
|
var fd int = -1
|
|
if f != nil {
|
|
fd = int(f.Fd())
|
|
}
|
|
debugCheckpoint("===DEBUG=== about to send '%s'[%d]. Hit enter to confirm: ", data, fd)
|
|
}
|
|
var fds []int
|
|
if f != nil {
|
|
fds = append(fds, int(f.Fd()))
|
|
}
|
|
if err := sendUnix(conn.UnixConn, data, fds...); err != nil {
|
|
return err
|
|
}
|
|
|
|
if f != nil {
|
|
f.Close()
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Receive waits for a new message on conn, and receives its payload
|
|
// and attachment, or an error if any.
|
|
//
|
|
// If more than 1 file descriptor is sent in the message, they are all
|
|
// closed except for the first, which is the attachment.
|
|
// It is legal for a message to have no attachment or an empty payload.
|
|
func (conn *UnixConn) Receive() (rdata []byte, rf *os.File, rerr error) {
|
|
defer func() {
|
|
var fd int = -1
|
|
if rf != nil {
|
|
fd = int(rf.Fd())
|
|
}
|
|
debugCheckpoint("===DEBUG=== Receive() -> '%s'[%d]. Hit enter to continue.\n", rdata, fd)
|
|
}()
|
|
for {
|
|
data, fds, err := receiveUnix(conn.UnixConn)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
var f *os.File
|
|
if len(fds) > 1 {
|
|
for _, fd := range fds[1:] {
|
|
syscall.Close(fd)
|
|
}
|
|
}
|
|
if len(fds) >= 1 {
|
|
f = os.NewFile(uintptr(fds[0]), "")
|
|
}
|
|
return data, f, nil
|
|
}
|
|
panic("impossibru")
|
|
return nil, nil, nil
|
|
}
|
|
|
|
func receiveUnix(conn *net.UnixConn) ([]byte, []int, error) {
|
|
buf := make([]byte, 4096)
|
|
oob := make([]byte, 4096)
|
|
bufn, oobn, _, _, err := conn.ReadMsgUnix(buf, oob)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
return buf[:bufn], extractFds(oob[:oobn]), nil
|
|
}
|
|
|
|
func sendUnix(conn *net.UnixConn, data []byte, fds ...int) error {
|
|
_, _, err := conn.WriteMsgUnix(data, syscall.UnixRights(fds...), nil)
|
|
return err
|
|
}
|
|
|
|
func extractFds(oob []byte) (fds []int) {
|
|
// Grab forklock to make sure no forks accidentally inherit the new
|
|
// fds before they are made CLOEXEC
|
|
// There is a slight race condition between ReadMsgUnix returns and
|
|
// when we grap the lock, so this is not perfect. Unfortunately
|
|
// There is no way to pass MSG_CMSG_CLOEXEC to recvmsg() nor any
|
|
// way to implement non-blocking i/o in go, so this is hard to fix.
|
|
syscall.ForkLock.Lock()
|
|
defer syscall.ForkLock.Unlock()
|
|
scms, err := syscall.ParseSocketControlMessage(oob)
|
|
if err != nil {
|
|
return
|
|
}
|
|
for _, scm := range scms {
|
|
gotFds, err := syscall.ParseUnixRights(&scm)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
fds = append(fds, gotFds...)
|
|
|
|
for _, fd := range fds {
|
|
syscall.CloseOnExec(fd)
|
|
}
|
|
}
|
|
return
|
|
}
|
|
|
|
func socketpair() ([2]int, error) {
|
|
return syscall.Socketpair(syscall.AF_LOCAL, syscall.SOCK_STREAM|syscall.FD_CLOEXEC, 0)
|
|
}
|
|
|
|
// SocketPair is a convenience wrapper around the socketpair(2) syscall.
|
|
// It returns a unix socket of type SOCK_STREAM in the form of 2 file descriptors
|
|
// not bound to the underlying filesystem.
|
|
// Messages sent on one end are received on the other, and vice-versa.
|
|
// It is the caller's responsibility to close both ends.
|
|
func SocketPair() (a *os.File, b *os.File, err error) {
|
|
defer func() {
|
|
var (
|
|
fdA int = -1
|
|
fdB int = -1
|
|
)
|
|
if a != nil {
|
|
fdA = int(a.Fd())
|
|
}
|
|
if b != nil {
|
|
fdB = int(b.Fd())
|
|
}
|
|
debugCheckpoint("===DEBUG=== SocketPair() = [%d-%d]. Hit enter to confirm: ", fdA, fdB)
|
|
}()
|
|
pair, err := socketpair()
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
return os.NewFile(uintptr(pair[0]), ""), os.NewFile(uintptr(pair[1]), ""), nil
|
|
}
|
|
|
|
func USocketPair() (*UnixConn, *UnixConn, error) {
|
|
debugCheckpoint("===DEBUG=== USocketPair(). Hit enter to confirm: ")
|
|
defer debugCheckpoint("===DEBUG=== USocketPair() returned. Hit enter to confirm ")
|
|
a, b, err := SocketPair()
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
defer a.Close()
|
|
defer b.Close()
|
|
uA, err := FileConn(a)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
uB, err := FileConn(b)
|
|
if err != nil {
|
|
uA.Close()
|
|
return nil, nil, err
|
|
}
|
|
return uA, uB, nil
|
|
}
|
|
|
|
// FdConn wraps a file descriptor in a standard *net.UnixConn object, or
|
|
// returns an error if the file descriptor does not point to a unix socket.
|
|
// This creates a duplicate file descriptor. It's the caller's responsibility
|
|
// to close both.
|
|
func FdConn(fd int) (n *net.UnixConn, err error) {
|
|
{
|
|
debugCheckpoint("===DEBUG=== FdConn([%d]) = (unknown fd). Hit enter to confirm: ", fd)
|
|
}
|
|
f := os.NewFile(uintptr(fd), fmt.Sprintf("%d", fd))
|
|
conn, err := net.FileConn(f)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
uconn, ok := conn.(*net.UnixConn)
|
|
if !ok {
|
|
conn.Close()
|
|
return nil, fmt.Errorf("%d: not a unix connection", fd)
|
|
}
|
|
return uconn, nil
|
|
}
|