libuuid: avoid double open and leaking descriptor

We are opening /dev/urandom twice in uuid_generate(): first to check if
the file is available and then later __uuid_generate_random() again to
actually get the random data. Moreover, descriptor from the first open
is leaking.

Fix by passign the descriptor down the stack and reusing it there.

References: http://marc.info/?l=util-linux-ng&m=133406051131131&w=2

Signed-off-by: Petr Uzel <petr.uzel@suse.cz>

diff --git a/fdisk/fdiskdoslabel.c b/fdisk/fdiskdoslabel.c
index 6a9a0445d822dc89f9f8aea559cf95d25b6271ef..c6e4198dd1dd139f03e78c3ebd4dd3661ab5c330 100644 (file)
--- a/fdisk/fdiskdoslabel.c
+++ b/fdisk/fdiskdoslabel.c
@@ -182,7 +182,7 @@ void create_doslabel(void)
        unsigned int id;
 
        /* random disk signature */
-       random_get_bytes(&id, sizeof(id));
+       random_get_bytes(&id, sizeof(id), -1);
 
        fprintf(stderr, _("Building a new DOS disklabel with disk identifier 0x%08x.\n"), id);
 

diff --git a/include/randutils.h b/include/randutils.h
index dec5e355a43947a0133087a9ef2fcd1181b0da99..d5d00f46932c1cfca5e6e6f6acc13c01353e046a 100644 (file)
--- a/include/randutils.h
+++ b/include/randutils.h
@@ -7,6 +7,6 @@
 #endif
 
 extern int random_get_fd(void);
-extern void random_get_bytes(void *buf, size_t nbytes);
+extern void random_get_bytes(void *buf, size_t nbytes, int fd);
 
 #endif

diff --git a/lib/randutils.c b/lib/randutils.c
index b90c88691a5e9349a8fb415ab80383684117ad5c..0513798a0320b376256cc95d99d5ed59b82561f1 100644 (file)
--- a/lib/randutils.c
+++ b/lib/randutils.c
@@ -58,13 +58,15 @@ int random_get_fd(void)
  * Use /dev/urandom if possible, and if not,
  * use glibc pseudo-random functions.
  */
-void random_get_bytes(void *buf, size_t nbytes)
+void random_get_bytes(void *buf, size_t nbytes, int fd)
 {
        size_t i, n = nbytes;
-       int fd = random_get_fd();
        int lose_counter = 0;
        unsigned char *cp = (unsigned char *) buf;
 
+       if (fd < 0)
+               fd = random_get_fd();
+
        if (fd >= 0) {
                while (n > 0) {
                        ssize_t x = read(fd, cp, n);
@@ -111,7 +113,7 @@ int main(int argc, char *argv[])
 
        /* generate and print 10 random numbers */
        for (i = 0; i < 10; i++) {
-               random_get_bytes(&v, sizeof(v));
+               random_get_bytes(&v, sizeof(v), -1);
                printf("%d\n", v);
        }
 

diff --git a/libuuid/src/gen_uuid.c b/libuuid/src/gen_uuid.c
index 8ff41291c4f0a9dceececd35fcea36f5ca78eac7..76f1bbdad5c20ba9885b69e6346bcb77a585e6e2 100644 (file)
--- a/libuuid/src/gen_uuid.c
+++ b/libuuid/src/gen_uuid.c
@@ -277,7 +277,7 @@ static int get_clock(uint32_t *clock_high, uint32_t *clock_low,
        }
 
        if ((last.tv_sec == 0) && (last.tv_usec == 0)) {
-               random_get_bytes(&clock_seq, sizeof(clock_seq));
+               random_get_bytes(&clock_seq, sizeof(clock_seq), -1);
                clock_seq &= 0x3FFF;
                gettimeofday(&last, 0);
                last.tv_sec--;
@@ -434,7 +434,7 @@ int __uuid_generate_time(uuid_t out, int *num)
 
        if (!has_init) {
                if (get_node_id(node_id) <= 0) {
-                       random_get_bytes(node_id, 6);
+                       random_get_bytes(node_id, 6, -1);
                        /*
                         * Set multicast bit, to prevent conflicts
                         * with IEEE 802 addresses obtained from
@@ -520,7 +520,7 @@ int uuid_generate_time_safe(uuid_t out)
 }
 
 
-void __uuid_generate_random(uuid_t out, int *num)
+void __uuid_generate_random(uuid_t out, int *num, int fd)
 {
        uuid_t  buf;
        struct uuid uu;
@@ -532,7 +532,7 @@ void __uuid_generate_random(uuid_t out, int *num)
                n = *num;
 
        for (i = 0; i < n; i++) {
-               random_get_bytes(buf, sizeof(buf));
+               random_get_bytes(buf, sizeof(buf), fd);
                uuid_unpack(buf, &uu);
 
                uu.clock_seq = (uu.clock_seq & 0x3FFF) | 0x8000;
@@ -548,7 +548,7 @@ void uuid_generate_random(uuid_t out)
        int     num = 1;
        /* No real reason to use the daemon for random uuid's -- yet */
 
-       __uuid_generate_random(out, &num);
+       __uuid_generate_random(out, &num, -1);
 }
 
 
@@ -560,8 +560,11 @@ void uuid_generate_random(uuid_t out)
  */
 void uuid_generate(uuid_t out)
 {
-       if (random_get_fd() >= 0)
-               uuid_generate_random(out);
+       int     fd;
+       int     num = 1;
+
+       if ((fd = random_get_fd()) >= 0)
+               __uuid_generate_random(out, &num, fd);
        else
                uuid_generate_time(out);
 }

diff --git a/libuuid/src/uuidd.h b/libuuid/src/uuidd.h
index 27b79c2160f6bb7896ae43dba37bcf07912f81f8..2e19522df123ea62378bc059ad01c2ceb64e49f3 100644 (file)
--- a/libuuid/src/uuidd.h
+++ b/libuuid/src/uuidd.h
@@ -49,6 +49,6 @@
 #define UUIDD_MAX_OP                   UUIDD_OP_BULK_RANDOM_UUID
 
 extern int __uuid_generate_time(uuid_t out, int *num);
-extern void __uuid_generate_random(uuid_t out, int *num);
+extern void __uuid_generate_random(uuid_t out, int *num, int fd);
 
 #endif /* _UUID_UUID_H */

diff --git a/misc-utils/uuidd.c b/misc-utils/uuidd.c
index d20526e42bbc1e61bef6eb45643d457bcc23f902..d3ed3eb7b9d5611d885244e0baaca32adaf58cb9 100644 (file)
--- a/misc-utils/uuidd.c
+++ b/misc-utils/uuidd.c
@@ -442,7 +442,7 @@ static void server_loop(const char *socket_path, const char *pidfile_path,
                        break;
                case UUIDD_OP_RANDOM_UUID:
                        num = 1;
-                       __uuid_generate_random(uu, &num);
+                       __uuid_generate_random(uu, &num, -1);
                        if (uuidd_cxt->debug) {
                                uuid_unparse(uu, str);
                                fprintf(stderr, _("Generated random UUID: %s\n"), str);
@@ -473,7 +473,7 @@ static void server_loop(const char *socket_path, const char *pidfile_path,
                        if (num * UUID_LEN > (int) (sizeof(reply_buf) - sizeof(num)))
                                num = (sizeof(reply_buf) - sizeof(num)) / UUID_LEN;
                        __uuid_generate_random((unsigned char *) reply_buf +
-                                             sizeof(num), &num);
+                                             sizeof(num), &num, -1);
                        if (uuidd_cxt->debug) {
                                fprintf(stderr, P_("Generated %d UUID:\n",
                                                   "Generated %d UUIDs:\n", num), num);