public/gpu-screen-recorder
1
0
Fork 0
mirror of https://repo.dec05eba.com/gpu-screen-recorder synced 2026-03-31 09:07:13 +09:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix build

Browse Source
This commit is contained in:
dec05eba
2024-10-12 01:47:11 +02:00
parent 551f58fca1
commit 1e6866236d
1 changed files with 59 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

118
kms/server/kms_server.c
View File

@@ -418,80 +418,80 @@ static double clock_get_monotonic_seconds(void) {
return (double)ts.tv_sec + (double)ts.tv_nsec * 0.000000001; return (double)ts.tv_sec + (double)ts.tv_nsec * 0.000000001;
} }
static bool readlink_realpath(const char *filepath, char *buffer) { // static bool readlink_realpath(const char *filepath, char *buffer) {
char symlinked_path[PATH_MAX]; // char symlinked_path[PATH_MAX];
ssize_t bytes_written = readlink(filepath, symlinked_path, sizeof(symlinked_path) - 1); // ssize_t bytes_written = readlink(filepath, symlinked_path, sizeof(symlinked_path) - 1);
if(bytes_written == -1 && errno == EINVAL) { // if(bytes_written == -1 && errno == EINVAL) {
/* Not a symlink */ // /* Not a symlink */
snprintf(symlinked_path, sizeof(symlinked_path), "%s", filepath); // snprintf(symlinked_path, sizeof(symlinked_path), "%s", filepath);
} else if(bytes_written == -1) { // } else if(bytes_written == -1) {
return false; // return false;
} else { // } else {
symlinked_path[bytes_written] = '\0'; // symlinked_path[bytes_written] = '\0';
} // }
if(!realpath(symlinked_path, buffer)) // if(!realpath(symlinked_path, buffer))
return false; // return false;
return true; // return true;
} // }
static void file_get_directory(char *filepath) { // static void file_get_directory(char *filepath) {
char *end = strrchr(filepath, '/'); // char *end = strrchr(filepath, '/');
if(end == NULL) // if(end == NULL)
filepath[0] = '\0'; // filepath[0] = '\0';
else // else
*end = '\0'; // *end = '\0';
} // }
static bool string_ends_with(const char *str, const char *ends_with) { // static bool string_ends_with(const char *str, const char *ends_with) {
const int len = strlen(str); // const int len = strlen(str);
const int ends_with_len = strlen(ends_with); // const int ends_with_len = strlen(ends_with);
return len >= ends_with_len && memcmp(str + len - ends_with_len, ends_with, ends_with_len) == 0; // return len >= ends_with_len && memcmp(str + len - ends_with_len, ends_with, ends_with_len) == 0;
} // }
// This is not foolproof, but the assumption is that gsr-kms-server and gpu-screen-recorder are installed in the same directory // This is not foolproof, but the assumption is that gsr-kms-server and gpu-screen-recorder are installed in the same directory
// in a location that only the root user can write to (usually /usr/bin or /usr/local/bin) and if the client runs from that location // in a location that only the root user can write to (usually /usr/bin or /usr/local/bin) and if the client runs from that location
// and is called gpu-screen-recorder then gsr-kms-server can only be used by a malicious program if the malicious program // and is called gpu-screen-recorder then gsr-kms-server can only be used by a malicious program if the malicious program
// had root access, to modify that program install directory. // had root access, to modify that program install directory.
static bool is_remote_peer_program_gpu_screen_recorder(int socket_fd) { // static bool is_remote_peer_program_gpu_screen_recorder(int socket_fd) {
// TODO: Use SO_PEERPIDFD on kernel >= 6.5 to avoid a race condition in the /proc/<pid> check // // TODO: Use SO_PEERPIDFD on kernel >= 6.5 to avoid a race condition in the /proc/<pid> check
struct ucred cred; // struct ucred cred;
socklen_t ucred_len = sizeof(cred); // socklen_t ucred_len = sizeof(cred);
if(getsockopt(socket_fd, SOL_SOCKET, SO_PEERCRED, &cred, &ucred_len) == -1) { // if(getsockopt(socket_fd, SOL_SOCKET, SO_PEERCRED, &cred, &ucred_len) == -1) {
fprintf(stderr, "kms server error: failed to get peer credentials, error: %s\n", strerror(errno)); // fprintf(stderr, "kms server error: failed to get peer credentials, error: %s\n", strerror(errno));
return false; // return false;
} // }
char self_directory[PATH_MAX]; // char self_directory[PATH_MAX];
if(!readlink_realpath("/proc/self/exe", self_directory)) { // if(!readlink_realpath("/proc/self/exe", self_directory)) {
fprintf(stderr, "kms server error: failed to resolve /proc/self/exe\n"); // fprintf(stderr, "kms server error: failed to resolve /proc/self/exe\n");
return false; // return false;
} // }
file_get_directory(self_directory); // file_get_directory(self_directory);
char peer_directory[PATH_MAX]; // char peer_directory[PATH_MAX];
char peer_exe_path[PATH_MAX]; // char peer_exe_path[PATH_MAX];
snprintf(peer_exe_path, sizeof(peer_exe_path), "/proc/%d/exe", (int)cred.pid); // snprintf(peer_exe_path, sizeof(peer_exe_path), "/proc/%d/exe", (int)cred.pid);
if(!readlink_realpath(peer_exe_path, peer_directory)) { // if(!readlink_realpath(peer_exe_path, peer_directory)) {
fprintf(stderr, "kms server error: failed to resolve /proc/self/exe\n"); // fprintf(stderr, "kms server error: failed to resolve /proc/self/exe\n");
return false; // return false;
} // }
if(!string_ends_with(peer_directory, "/gpu-screen-recorder")) { // if(!string_ends_with(peer_directory, "/gpu-screen-recorder")) {
fprintf(stderr, "kms server error: only gpu-screen-recorder can use gsr-kms-server. client program location is %s\n", peer_directory); // fprintf(stderr, "kms server error: only gpu-screen-recorder can use gsr-kms-server. client program location is %s\n", peer_directory);
return false; // return false;
} // }
file_get_directory(peer_directory); // file_get_directory(peer_directory);
if(strcmp(self_directory, peer_directory) != 0) { // if(strcmp(self_directory, peer_directory) != 0) {
fprintf(stderr, "kms server error: the client program is in directory %s but only programs in %s can run gsr-kms-server\n", peer_directory, self_directory); // fprintf(stderr, "kms server error: the client program is in directory %s but only programs in %s can run gsr-kms-server\n", peer_directory, self_directory);
return false; // return false;
} // }
return true; // return true;
} // }
int main(int argc, char **argv) { int main(int argc, char **argv) {
int res = 0; int res = 0;