| 1 | /* | 
|---|
| 2 | Unix SMB/CIFS implementation. | 
|---|
| 3 | Critical Fault handling | 
|---|
| 4 | Copyright (C) Andrew Tridgell 1992-1998 | 
|---|
| 5 |  | 
|---|
| 6 | This program is free software; you can redistribute it and/or modify | 
|---|
| 7 | it under the terms of the GNU General Public License as published by | 
|---|
| 8 | the Free Software Foundation; either version 3 of the License, or | 
|---|
| 9 | (at your option) any later version. | 
|---|
| 10 |  | 
|---|
| 11 | This program is distributed in the hope that it will be useful, | 
|---|
| 12 | but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|---|
| 13 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
|---|
| 14 | GNU General Public License for more details. | 
|---|
| 15 |  | 
|---|
| 16 | You should have received a copy of the GNU General Public License | 
|---|
| 17 | along with this program.  If not, see <http://www.gnu.org/licenses/>. | 
|---|
| 18 | */ | 
|---|
| 19 |  | 
|---|
| 20 | #include "includes.h" | 
|---|
| 21 |  | 
|---|
| 22 | #ifdef HAVE_SYS_PRCTL_H | 
|---|
| 23 | #include <sys/prctl.h> | 
|---|
| 24 | #endif | 
|---|
| 25 |  | 
|---|
| 26 | static void (*cont_fn)(void *); | 
|---|
| 27 | static char *corepath; | 
|---|
| 28 |  | 
|---|
| 29 | /******************************************************************* | 
|---|
| 30 | report a fault | 
|---|
| 31 | ********************************************************************/ | 
|---|
| 32 | static void fault_report(int sig) | 
|---|
| 33 | { | 
|---|
| 34 | static int counter; | 
|---|
| 35 |  | 
|---|
| 36 | if (counter) _exit(1); | 
|---|
| 37 |  | 
|---|
| 38 | counter++; | 
|---|
| 39 |  | 
|---|
| 40 | DEBUGSEP(0); | 
|---|
| 41 | DEBUG(0,("INTERNAL ERROR: Signal %d in pid %d (%s)",sig,(int)sys_getpid(),SAMBA_VERSION_STRING)); | 
|---|
| 42 | DEBUG(0,("\nPlease read the Trouble-Shooting section of the Samba3-HOWTO\n")); | 
|---|
| 43 | DEBUG(0,("\nFrom: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf\n")); | 
|---|
| 44 | DEBUGSEP(0); | 
|---|
| 45 |  | 
|---|
| 46 | smb_panic("internal error"); | 
|---|
| 47 |  | 
|---|
| 48 | if (cont_fn) { | 
|---|
| 49 | cont_fn(NULL); | 
|---|
| 50 | #ifndef __OS2__ /* don't use the built in signal capture stuff - prefer native handling of errors */ | 
|---|
| 51 | #ifdef SIGSEGV | 
|---|
| 52 | CatchSignal(SIGSEGV,SIGNAL_CAST SIG_DFL); | 
|---|
| 53 | #endif | 
|---|
| 54 | #ifdef SIGBUS | 
|---|
| 55 | CatchSignal(SIGBUS,SIGNAL_CAST SIG_DFL); | 
|---|
| 56 | #endif | 
|---|
| 57 | #ifdef SIGABRT | 
|---|
| 58 | CatchSignal(SIGABRT,SIGNAL_CAST SIG_DFL); | 
|---|
| 59 | #endif | 
|---|
| 60 | #endif /* __OS2__ */ | 
|---|
| 61 | return; /* this should cause a core dump */ | 
|---|
| 62 | } | 
|---|
| 63 | exit(1); | 
|---|
| 64 | } | 
|---|
| 65 |  | 
|---|
| 66 | /**************************************************************************** | 
|---|
| 67 | catch serious errors | 
|---|
| 68 | ****************************************************************************/ | 
|---|
| 69 | static void sig_fault(int sig) | 
|---|
| 70 | { | 
|---|
| 71 | fault_report(sig); | 
|---|
| 72 | } | 
|---|
| 73 |  | 
|---|
| 74 | /******************************************************************* | 
|---|
| 75 | setup our fault handlers | 
|---|
| 76 | ********************************************************************/ | 
|---|
| 77 | void fault_setup(void (*fn)(void *)) | 
|---|
| 78 | { | 
|---|
| 79 | cont_fn = fn; | 
|---|
| 80 |  | 
|---|
| 81 | #ifndef __OS2__ /* don't use the built in signal capture stuff - prefer native handling of errors */ | 
|---|
| 82 | #ifdef SIGSEGV | 
|---|
| 83 | CatchSignal(SIGSEGV,SIGNAL_CAST sig_fault); | 
|---|
| 84 | #endif | 
|---|
| 85 | #ifdef SIGBUS | 
|---|
| 86 | CatchSignal(SIGBUS,SIGNAL_CAST sig_fault); | 
|---|
| 87 | #endif | 
|---|
| 88 | #ifdef SIGABRT | 
|---|
| 89 | CatchSignal(SIGABRT,SIGNAL_CAST sig_fault); | 
|---|
| 90 | #endif | 
|---|
| 91 | #endif /* __OS2__ */ | 
|---|
| 92 | } | 
|---|
| 93 |  | 
|---|
| 94 | /******************************************************************* | 
|---|
| 95 | make all the preparations to safely dump a core file | 
|---|
| 96 | ********************************************************************/ | 
|---|
| 97 |  | 
|---|
| 98 | void dump_core_setup(const char *progname) | 
|---|
| 99 | { | 
|---|
| 100 | char *logbase = NULL; | 
|---|
| 101 | char *end = NULL; | 
|---|
| 102 |  | 
|---|
| 103 | if (lp_logfile() && *lp_logfile()) { | 
|---|
| 104 | if (asprintf(&logbase, "%s", lp_logfile()) < 0) { | 
|---|
| 105 | return; | 
|---|
| 106 | } | 
|---|
| 107 | if ((end = strrchr_m(logbase, '/'))) { | 
|---|
| 108 | *end = '\0'; | 
|---|
| 109 | } | 
|---|
| 110 | } else { | 
|---|
| 111 | /* We will end up here is the log file is given on the command | 
|---|
| 112 | * line by the -l option but the "log file" option is not set | 
|---|
| 113 | * in smb.conf. | 
|---|
| 114 | */ | 
|---|
| 115 | if (asprintf(&logbase, "%s", get_dyn_LOGFILEBASE()) < 0) { | 
|---|
| 116 | return; | 
|---|
| 117 | } | 
|---|
| 118 | } | 
|---|
| 119 |  | 
|---|
| 120 | SMB_ASSERT(progname != NULL); | 
|---|
| 121 |  | 
|---|
| 122 | if (asprintf(&corepath, "%s/cores", logbase) < 0) { | 
|---|
| 123 | SAFE_FREE(logbase); | 
|---|
| 124 | return; | 
|---|
| 125 | } | 
|---|
| 126 | if (mkdir(corepath,0700) == -1) { | 
|---|
| 127 | if (errno != EEXIST) { | 
|---|
| 128 | SAFE_FREE(corepath); | 
|---|
| 129 | SAFE_FREE(logbase); | 
|---|
| 130 | return; | 
|---|
| 131 | } | 
|---|
| 132 | } | 
|---|
| 133 | if (chmod(corepath,0700) == -1) { | 
|---|
| 134 | SAFE_FREE(corepath); | 
|---|
| 135 | SAFE_FREE(logbase); | 
|---|
| 136 | return; | 
|---|
| 137 | } | 
|---|
| 138 |  | 
|---|
| 139 | SAFE_FREE(corepath); | 
|---|
| 140 | if (asprintf(&corepath, "%s/cores/%s", | 
|---|
| 141 | logbase, progname) < 0) { | 
|---|
| 142 | SAFE_FREE(logbase); | 
|---|
| 143 | return; | 
|---|
| 144 | } | 
|---|
| 145 | if (mkdir(corepath,0700) == -1) { | 
|---|
| 146 | if (errno != EEXIST) { | 
|---|
| 147 | SAFE_FREE(corepath); | 
|---|
| 148 | SAFE_FREE(logbase); | 
|---|
| 149 | return; | 
|---|
| 150 | } | 
|---|
| 151 | } | 
|---|
| 152 |  | 
|---|
| 153 | if (sys_chown(corepath,getuid(),getgid()) == -1) { | 
|---|
| 154 | SAFE_FREE(corepath); | 
|---|
| 155 | SAFE_FREE(logbase); | 
|---|
| 156 | return; | 
|---|
| 157 | } | 
|---|
| 158 | if (chmod(corepath,0700) == -1) { | 
|---|
| 159 | SAFE_FREE(corepath); | 
|---|
| 160 | SAFE_FREE(logbase); | 
|---|
| 161 | return; | 
|---|
| 162 | } | 
|---|
| 163 |  | 
|---|
| 164 | SAFE_FREE(logbase); | 
|---|
| 165 |  | 
|---|
| 166 | #ifdef HAVE_GETRLIMIT | 
|---|
| 167 | #ifdef RLIMIT_CORE | 
|---|
| 168 | { | 
|---|
| 169 | struct rlimit rlp; | 
|---|
| 170 | getrlimit(RLIMIT_CORE, &rlp); | 
|---|
| 171 | rlp.rlim_cur = MAX(16*1024*1024,rlp.rlim_cur); | 
|---|
| 172 | setrlimit(RLIMIT_CORE, &rlp); | 
|---|
| 173 | getrlimit(RLIMIT_CORE, &rlp); | 
|---|
| 174 | DEBUG(3,("Maximum core file size limits now %d(soft) %d(hard)\n", | 
|---|
| 175 | (int)rlp.rlim_cur,(int)rlp.rlim_max)); | 
|---|
| 176 | } | 
|---|
| 177 | #endif | 
|---|
| 178 | #endif | 
|---|
| 179 |  | 
|---|
| 180 | #if defined(HAVE_PRCTL) && defined(PR_SET_DUMPABLE) | 
|---|
| 181 | /* On Linux we lose the ability to dump core when we change our user | 
|---|
| 182 | * ID. We know how to dump core safely, so let's make sure we have our | 
|---|
| 183 | * dumpable flag set. | 
|---|
| 184 | */ | 
|---|
| 185 | prctl(PR_SET_DUMPABLE, 1); | 
|---|
| 186 | #endif | 
|---|
| 187 |  | 
|---|
| 188 | /* FIXME: if we have a core-plus-pid facility, configurably set | 
|---|
| 189 | * this up here. | 
|---|
| 190 | */ | 
|---|
| 191 | } | 
|---|
| 192 |  | 
|---|
| 193 | void dump_core(void) | 
|---|
| 194 | { | 
|---|
| 195 | static bool called; | 
|---|
| 196 |  | 
|---|
| 197 | if (called) { | 
|---|
| 198 | DEBUG(0, ("dump_core() called recursive\n")); | 
|---|
| 199 | exit(1); | 
|---|
| 200 | } | 
|---|
| 201 | called = true; | 
|---|
| 202 |  | 
|---|
| 203 | /* Note that even if core dumping has been disabled, we still set up | 
|---|
| 204 | * the core path. This is to handle the case where core dumping is | 
|---|
| 205 | * turned on in smb.conf and the relevant daemon is not restarted. | 
|---|
| 206 | */ | 
|---|
| 207 | if (!lp_enable_core_files()) { | 
|---|
| 208 | DEBUG(0, ("Exiting on internal error (core file administratively disabled)\n")); | 
|---|
| 209 | exit(1); | 
|---|
| 210 | } | 
|---|
| 211 |  | 
|---|
| 212 | #if DUMP_CORE | 
|---|
| 213 | /* If we're running as non root we might not be able to dump the core | 
|---|
| 214 | * file to the corepath.  There must not be an unbecome_root() before | 
|---|
| 215 | * we call abort(). */ | 
|---|
| 216 | if (geteuid() != 0) { | 
|---|
| 217 | become_root(); | 
|---|
| 218 | } | 
|---|
| 219 |  | 
|---|
| 220 | if (corepath == NULL) { | 
|---|
| 221 | DEBUG(0, ("Can not dump core: corepath not set up\n")); | 
|---|
| 222 | exit(1); | 
|---|
| 223 | } | 
|---|
| 224 |  | 
|---|
| 225 | if (*corepath != '\0') { | 
|---|
| 226 | /* The chdir might fail if we dump core before we finish | 
|---|
| 227 | * processing the config file. | 
|---|
| 228 | */ | 
|---|
| 229 | if (chdir(corepath) != 0) { | 
|---|
| 230 | DEBUG(0, ("unable to change to %s\n", corepath)); | 
|---|
| 231 | DEBUGADD(0, ("refusing to dump core\n")); | 
|---|
| 232 | exit(1); | 
|---|
| 233 | } | 
|---|
| 234 |  | 
|---|
| 235 | DEBUG(0,("dumping core in %s\n", corepath)); | 
|---|
| 236 | } | 
|---|
| 237 |  | 
|---|
| 238 | umask(~(0700)); | 
|---|
| 239 | dbgflush(); | 
|---|
| 240 |  | 
|---|
| 241 | /* Ensure we don't have a signal handler for abort. */ | 
|---|
| 242 | #ifdef SIGABRT | 
|---|
| 243 | CatchSignal(SIGABRT,SIGNAL_CAST SIG_DFL); | 
|---|
| 244 | #endif | 
|---|
| 245 |  | 
|---|
| 246 | abort(); | 
|---|
| 247 |  | 
|---|
| 248 | #else /* DUMP_CORE */ | 
|---|
| 249 | exit(1); | 
|---|
| 250 | #endif /* DUMP_CORE */ | 
|---|
| 251 | } | 
|---|
| 252 |  | 
|---|