Merge pull request #19854 from poettering/journal-enum-uniq-fix

fix journalctl -F
seccomp: add some recently added syscalls to filter groups
2026-03-18 19:14:46 +01:00 · 2021-06-09 15:37:01 +02:00 · 2021-06-09 15:36:19 +02:00 · 2021-06-09 09:34:55 +02:00 · 2021-06-09 09:34:55 +02:00 · 2021-06-09 09:34:50 +02:00
3 changed files with 76 additions and 40 deletions
--- a/src/libsystemd/sd-journal/journal-file.c
+++ b/src/libsystemd/sd-journal/journal-file.c
@ -1648,7 +1648,7 @@ static int journal_file_append_field(
        r = journal_file_find_field_object_with_hash(f, field, size, hash, &o, &p);
        if (r < 0)
                return r;
-        else if (r > 0) {
+        if (r > 0) {

                if (ret)
                        *ret = o;
--- a/src/libsystemd/sd-journal/sd-journal.c
+++ b/src/libsystemd/sd-journal/sd-journal.c
@ -2368,18 +2368,27 @@ _public_ int sd_journal_get_data(sd_journal *j, const char *field, const void **
        return -ENOENT;
 }

-static int return_data(sd_journal *j, JournalFile *f, Object *o, const void **data, size_t *size) {
+static int return_data(
+                sd_journal *j,
+                JournalFile *f,
+                Object *o,
+                const void **ret_data,
+                size_t *ret_size) {
+
        size_t t;
        uint64_t l;
        int compression;

+        assert(j);
+        assert(f);
+
        l = le64toh(READ_NOW(o->object.size));
        if (l < offsetof(Object, data.payload))
                return -EBADMSG;
        l -= offsetof(Object, data.payload);
-        t = (size_t) l;

        /* We can't read objects larger than 4G on a 32bit machine */
+        t = (size_t) l;
        if ((uint64_t) t != l)
                return -E2BIG;

@ -2397,14 +2406,18 @@ static int return_data(sd_journal *j, JournalFile *f, Object *o, const void **da
                if (r < 0)
                        return r;

-                *data = f->compress_buffer;
-                *size = (size_t) rsize;
+                if (ret_data)
+                        *ret_data = f->compress_buffer;
+                if (ret_size)
+                        *ret_size = (size_t) rsize;
 #else
                return -EPROTONOSUPPORT;
 #endif
        } else {
-                *data = o->data.payload;
-                *size = t;
+                if (ret_data)
+                        *ret_data = o->data.payload;
+                if (ret_size)
+                        *ret_size = t;
        }

        return 0;
@ -2783,20 +2796,25 @@ _public_ int sd_journal_get_cutoff_realtime_usec(sd_journal *j, uint64_t *from,
        return first ? 0 : 1;
 }

-_public_ int sd_journal_get_cutoff_monotonic_usec(sd_journal *j, sd_id128_t boot_id, uint64_t *from, uint64_t *to) {
-        JournalFile *f;
+_public_ int sd_journal_get_cutoff_monotonic_usec(
+                sd_journal *j,
+                sd_id128_t boot_id,
+                uint64_t *ret_from,
+                uint64_t *ret_to) {
+
+        uint64_t from = UINT64_MAX, to = UINT64_MAX;
        bool found = false;
+        JournalFile *f;
        int r;

        assert_return(j, -EINVAL);
        assert_return(!journal_pid_changed(j), -ECHILD);
-        assert_return(from || to, -EINVAL);
-        assert_return(from != to, -EINVAL);
+        assert_return(ret_from != ret_to, -EINVAL);

        ORDERED_HASHMAP_FOREACH(f, j->files) {
-                usec_t fr, t;
+                usec_t ff, tt;

-                r = journal_file_get_cutoff_monotonic_usec(f, boot_id, &fr, &t);
+                r = journal_file_get_cutoff_monotonic_usec(f, boot_id, &ff, &tt);
                if (r == -ENOENT)
                        continue;
                if (r < 0)
@ -2805,19 +2823,20 @@ _public_ int sd_journal_get_cutoff_monotonic_usec(sd_journal *j, sd_id128_t boot
                        continue;

                if (found) {
-                        if (from)
-                                *from = MIN(fr, *from);
-                        if (to)
-                                *to = MAX(t, *to);
+                        from = MIN(ff, from);
+                        to = MAX(tt, to);
                } else {
-                        if (from)
-                                *from = fr;
-                        if (to)
-                                *to = t;
+                        from = ff;
+                        to = tt;
                        found = true;
                }
        }

+        if (ret_from)
+                *ret_from = from;
+        if (ret_to)
+                *ret_to = to;
+
        return found;
 }

@ -2837,41 +2856,47 @@ void journal_print_header(sd_journal *j) {
        }
 }

-_public_ int sd_journal_get_usage(sd_journal *j, uint64_t *bytes) {
+_public_ int sd_journal_get_usage(sd_journal *j, uint64_t *ret) {
        JournalFile *f;
        uint64_t sum = 0;

        assert_return(j, -EINVAL);
        assert_return(!journal_pid_changed(j), -ECHILD);
-        assert_return(bytes, -EINVAL);
+        assert_return(ret, -EINVAL);

        ORDERED_HASHMAP_FOREACH(f, j->files) {
                struct stat st;
+                uint64_t b;

                if (fstat(f->fd, &st) < 0)
                        return -errno;

-                sum += (uint64_t) st.st_blocks * 512ULL;
+                b = (uint64_t) st.st_blocks;
+                if (b > UINT64_MAX / 512)
+                        return -EOVERFLOW;
+                b *= 512;
+
+                if (sum > UINT64_MAX - b)
+                        return -EOVERFLOW;
+                sum += b;
        }

-        *bytes = sum;
+        *ret = sum;
        return 0;
 }

 _public_ int sd_journal_query_unique(sd_journal *j, const char *field) {
-        char *f;
+        int r;

        assert_return(j, -EINVAL);
        assert_return(!journal_pid_changed(j), -ECHILD);
        assert_return(!isempty(field), -EINVAL);
        assert_return(field_is_valid(field), -EINVAL);

-        f = strdup(field);
-        if (!f)
-                return -ENOMEM;
+        r = free_and_strdup(&j->unique_field, field);
+        if (r < 0)
+                return r;

-        free(j->unique_field);
-        j->unique_field = f;
        j->unique_file = NULL;
        j->unique_offset = 0;
        j->unique_file_lost = false;
@ -2879,13 +2904,15 @@ _public_ int sd_journal_query_unique(sd_journal *j, const char *field) {
        return 0;
 }

-_public_ int sd_journal_enumerate_unique(sd_journal *j, const void **data, size_t *l) {
+_public_ int sd_journal_enumerate_unique(
+                sd_journal *j,
+                const void **ret_data,
+                size_t *ret_size) {
+
        size_t k;

        assert_return(j, -EINVAL);
        assert_return(!journal_pid_changed(j), -ECHILD);
-        assert_return(data, -EINVAL);
-        assert_return(l, -EINVAL);
        assert_return(j->unique_field, -EINVAL);

        k = strlen(j->unique_field);
@ -2959,16 +2986,15 @@ _public_ int sd_journal_enumerate_unique(sd_journal *j, const void **data, size_
                                               j->unique_file->path,
                                               j->unique_offset, ol, k + 1);

-                if (memcmp(odata, j->unique_field, k) || ((const char*) odata)[k] != '=')
+                if (memcmp(odata, j->unique_field, k) != 0 || ((const char*) odata)[k] != '=')
                        return log_debug_errno(SYNTHETIC_ERRNO(EBADMSG),
                                               "%s:offset " OFSfmt ": object does not start with \"%s=\"",
                                               j->unique_file->path,
                                               j->unique_offset,
                                               j->unique_field);

-                /* OK, now let's see if we already returned this data
-                 * object by checking if it exists in the earlier
-                 * traversed files. */
+                /* OK, now let's see if we already returned this data object by checking if it exists in the
+                 * earlier traversed files. */
                found = false;
                ORDERED_HASHMAP_FOREACH(of, j->files) {
                        if (of == j->unique_file)
@ -2978,7 +3004,13 @@ _public_ int sd_journal_enumerate_unique(sd_journal *j, const void **data, size_
                        if (JOURNAL_HEADER_CONTAINS(of->header, n_fields) && le64toh(of->header->n_fields) <= 0)
                                continue;

+                        /* We can reuse the hash from our current file only on old-style journal files
+                         * without keyed hashes. On new-style files we have to calculate the hash anew, to
+                         * take the per-file hash seed into consideration. */
+                        if (!JOURNAL_HEADER_KEYED_HASH(j->unique_file->header) && !JOURNAL_HEADER_KEYED_HASH(of->header))
                                r = journal_file_find_data_object_with_hash(of, odata, ol, le64toh(o->data.hash), NULL, NULL);
+                        else
+                                r = journal_file_find_data_object(of, odata, ol, NULL, NULL);
                        if (r < 0)
                                return r;
                        if (r > 0) {
@ -2990,7 +3022,7 @@ _public_ int sd_journal_enumerate_unique(sd_journal *j, const void **data, size_
                if (found)
                        continue;

-                r = return_data(j, j->unique_file, o, data, l);
+                r = return_data(j, j->unique_file, o, ret_data, ret_size);
                if (r < 0)
                        return r;

--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@ -514,6 +514,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                "epoll_ctl\0"
                "epoll_ctl_old\0"
                "epoll_pwait\0"
+                "epoll_pwait2\0"
                "epoll_wait\0"
                "epoll_wait_old\0"
                "eventfd\0"
@ -545,6 +546,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                "msgsnd\0"
                "pipe\0"
                "pipe2\0"
+                "process_madvise\0"
                "process_vm_readv\0"
                "process_vm_writev\0"
                "semctl\0"
@ -593,6 +595,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                "fsopen\0"
                "fspick\0"
                "mount\0"
+                "mount_setattr\0"
                "move_mount\0"
                "open_tree\0"
                "pivot_root\0"
@ -688,6 +691,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                "open_by_handle_at\0"
                "pivot_root\0"
                "quotactl\0"
+                "quotactl_path\0"
                "setdomainname\0"
                "setfsuid\0"
                "setfsuid32\0"
Author	SHA1	Message	Date
Lennart Poettering	91d0750dbf	Merge pull request #19854 from poettering/journal-enum-uniq-fix fix journalctl -F	2021-06-09 15:37:01 +02:00
Lennart Poettering	34254e599a	seccomp: add some recently added syscalls to filter groups	2021-06-09 15:36:19 +02:00
Lennart Poettering	2e1a8a5dab	journal: don't try to reuse already calculated hash between files with keyed hash feature When suppressing duplicate fields between files we so far tried to reuse the already known hash value of the data fields between files. This was fine as long as we used the same hash function everywhere. However, since addition of the keyed hash feature for journal files this doesn't work anymore, since the hashes will be different for different files. Fixes: #19172	2021-06-09 09:34:55 +02:00
Lennart Poettering	8d5a1082b0	journal: remove an unnecessary 'else'	2021-06-09 09:34:55 +02:00
Lennart Poettering	0e0b05294b	journal: make return parameters for sd_journal_enumerate_unique() optional	2021-06-09 09:34:50 +02:00
Lennart Poettering	f4cb1bfd57	journal: as per coding style don't clobber return parameters in sd_journal_get_cutoff_monotonic_usec() on failure	2021-06-09 09:34:50 +02:00
Lennart Poettering	900952ecd5	journal: use free_and_strdup() where appropriate	2021-06-09 09:34:50 +02:00
Lennart Poettering	d8671b1c6f	journal: add some careful overflow checking	2021-06-09 09:34:50 +02:00