forked from lix-project/lix
47f87072ad
Previously there was the problem that all files read by nix-env etc. should be reachable and readable by the Nix user. So for instance building a Nix expression in your home directory meant that the home directory should have at least g+x or o+x permission so that the Nix user could reach the Nix expression. Now we just switch back to the original user just prior to reading sources and the like. The places where this happens are somewhat arbitrary, however. Any scope that has a live SwitchToOriginalUser object in it is executed as the original user. * Back out r1385. setreuid() sets the saved uid to the new real/effective uid, which prevents us from switching back to the original uid. setresuid() doesn't have this problem (although the manpage has a bug: specifying -1 for the saved uid doesn't leave it unchanged; an explicit value must be specified).
154 lines
3.8 KiB
C++
154 lines
3.8 KiB
C++
#include <sstream>
|
|
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
#include <unistd.h>
|
|
|
|
#include "aterm.hh"
|
|
#include "parser.hh"
|
|
|
|
|
|
struct ParseData
|
|
{
|
|
Expr result;
|
|
Path basePath;
|
|
Path path;
|
|
string error;
|
|
};
|
|
|
|
|
|
extern "C" {
|
|
|
|
#include "parser-tab.h"
|
|
#include "lexer-tab.h"
|
|
|
|
/* Callbacks for getting from C to C++. Due to a (small) bug in the
|
|
GLR code of Bison we cannot currently compile the parser as C++
|
|
code. */
|
|
|
|
void setParseResult(ParseData * data, ATerm t)
|
|
{
|
|
data->result = t;
|
|
}
|
|
|
|
ATerm absParsedPath(ParseData * data, ATerm t)
|
|
{
|
|
return string2ATerm(absPath(aterm2String(t), data->basePath).c_str());
|
|
}
|
|
|
|
void parseError(ParseData * data, char * error, int line, int column)
|
|
{
|
|
data->error = (format("%1%, at `%2%':%3%:%4%")
|
|
% error % data->path % line % column).str();
|
|
}
|
|
|
|
ATerm fixAttrs(int recursive, ATermList as)
|
|
{
|
|
ATMatcher m;
|
|
ATermList bs = ATempty, cs = ATempty;
|
|
ATermList * is = recursive ? &cs : &bs;
|
|
for (ATermIterator i(as); i; ++i) {
|
|
ATermList names;
|
|
Expr src;
|
|
ATerm pos;
|
|
if (atMatch(m, *i) >> "Inherit" >> src >> names >> pos) {
|
|
bool fromScope = atMatch(m, src) >> "Scope";
|
|
for (ATermIterator j(names); j; ++j) {
|
|
Expr rhs = fromScope
|
|
? ATmake("Var(<term>)", *j)
|
|
: ATmake("Select(<term>, <term>)", src, *j);
|
|
*is = ATinsert(*is, ATmake("Bind(<term>, <term>, <term>)",
|
|
*j, rhs, pos));
|
|
}
|
|
} else bs = ATinsert(bs, *i);
|
|
}
|
|
if (recursive)
|
|
return ATmake("Rec(<term>, <term>)", bs, cs);
|
|
else
|
|
return ATmake("Attrs(<term>)", bs);
|
|
}
|
|
|
|
const char * getPath(ParseData * data)
|
|
{
|
|
return data->path.c_str();
|
|
}
|
|
|
|
int yyparse(yyscan_t scanner, ParseData * data);
|
|
}
|
|
|
|
|
|
static Expr parse(EvalState & state,
|
|
const char * text, const Path & path,
|
|
const Path & basePath)
|
|
{
|
|
yyscan_t scanner;
|
|
ParseData data;
|
|
data.basePath = basePath;
|
|
data.path = path;
|
|
|
|
yylex_init(&scanner);
|
|
yy_scan_string(text, scanner);
|
|
int res = yyparse(scanner, &data);
|
|
yylex_destroy(scanner);
|
|
|
|
if (res) throw Error(data.error);
|
|
|
|
try {
|
|
checkVarDefs(state.primOps, data.result);
|
|
} catch (Error & e) {
|
|
throw Error(format("%1%, in `%2%'") % e.msg() % path);
|
|
}
|
|
|
|
return data.result;
|
|
}
|
|
|
|
|
|
Expr parseExprFromFile(EvalState & state, Path path)
|
|
{
|
|
SwitchToOriginalUser sw;
|
|
|
|
assert(path[0] == '/');
|
|
|
|
#if 0
|
|
/* Perhaps this is already an imploded parse tree? */
|
|
Expr e = ATreadFromNamedFile(path.c_str());
|
|
if (e) return e;
|
|
#endif
|
|
|
|
/* If `path' is a symlink, follow it. This is so that relative
|
|
path references work. */
|
|
struct stat st;
|
|
if (lstat(path.c_str(), &st))
|
|
throw SysError(format("getting status of `%1%'") % path);
|
|
if (S_ISLNK(st.st_mode)) path = absPath(readLink(path), dirOf(path));
|
|
|
|
/* If `path' refers to a directory, append `/default.nix'. */
|
|
if (stat(path.c_str(), &st))
|
|
throw SysError(format("getting status of `%1%'") % path);
|
|
if (S_ISDIR(st.st_mode))
|
|
path = canonPath(path + "/default.nix");
|
|
|
|
/* Read the input file. We can't use SGparseFile() because it's
|
|
broken, so we read the input ourselves and call
|
|
SGparseString(). */
|
|
AutoCloseFD fd = open(path.c_str(), O_RDONLY);
|
|
if (fd == -1) throw SysError(format("opening `%1%'") % path);
|
|
|
|
if (fstat(fd, &st) == -1)
|
|
throw SysError(format("statting `%1%'") % path);
|
|
|
|
char text[st.st_size + 1];
|
|
readFull(fd, (unsigned char *) text, st.st_size);
|
|
text[st.st_size] = 0;
|
|
|
|
return parse(state, text, path, dirOf(path));
|
|
}
|
|
|
|
|
|
Expr parseExprFromString(EvalState & state,
|
|
const string & s, const Path & basePath)
|
|
{
|
|
return parse(state, s.c_str(), "(string)", basePath);
|
|
}
|