【问题标题】:getpwnam() crashes program when invalid user is entered输入无效用户时 getpwnam() 使程序崩溃
【发布时间】:2016-02-08 23:03:42
【问题描述】:

getuserinfo() 中,如果行 struct passwd *theUser = getpwnam(username); 尝试使用不存在的用户名,则程序会以-1 的错误。它永远不会到达函数的错误处理部分。它没有返回 main,我不知道为什么。

它应该返回 NULL 并打印出错误消息并让程序的其余部分尝试运行。

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <ctype.h>
#include <string.h>
#include <pwd.h>
#include <grp.h>
#include <errno.h>


//awk 'BEGIN { FS=":"; print "User\t\tUID\n--------------------"; } { print $1,"\t\t",$3;} END { print "--------------------\nAll Users and UIDs Printed!" }' /etc/passwd
#define SHELLSCRIPT "\
#/bin/bash \n\
awk 'BEGIN { FS=\":\"; print \"User\t\tUID\n--------------------\"; } { print $1,\"\t\t\",$3;} END { print \"--------------------\nAll Users and UIDs Printed!\" }' /etc/passwd \n\
    "



struct passwd *getuserinfo(char *username)
{
    //Set errno to 0 so we can use it
    errno = 0;

    //create a variable to store the user info in
    struct passwd *theUser = getpwnam(username);

    //error check getpwnam()
    if(theUser == NULL)
    {
        printf("getpwnam() ERROR, errno = %d", errno);
        return NULL;
    }

    return theUser;
}

struct group *getgroupinfo(long int groupid)
{
    //Set errno to 0 so we can use it
    errno = 0;

    //create a variable to store the group info in
    struct group *theGroup = getgrgid(groupid);

    //error check getgrgid()
    if(theGroup == NULL)
    {
        printf("getgrgid() ERROR, errno = %d", errno);
        return NULL;
    }

    return theGroup;
}

void displayusers()
{
    system(SHELLSCRIPT);
}

/*
 *
 *  4. A main function which will
 * Call getuserinfo passing a hard-coded username, and using the return object, display the user id. (10 points)
 * Call getgroupinfo passing the return object from getuserinfo, and using the return object, display the user’s group name. (10 points)
 * Call displayusers. (10 points)
 *
 * My main function does those things but I don't pass objects since the function prototypes you gave us
 * don't accept that input, they want ints and strings
 */

int main(int argc, char **argv)
{
    //Take in the username we want to look up
    char username[50];
    printf("Enter username: ");
    scanf("%s", username);


    //look up the user and get their info
    struct passwd *theUser = getuserinfo(username);
    //use the user's gid and look up its info
    struct group *theGroup = getgroupinfo(theUser->pw_gid);

    printf("User: %s\nUser ID: %d\nGroup Name: %s\n\n\n", theUser->pw_name, theUser->pw_uid, theGroup->gr_name);

    displayusers();


    return 0;
}

【问题讨论】:

  • 代码是否具有 setuid 权限,或者您是否以 root 身份运行?
  • 我只是在 Eclipse for C/C++ 控制台中运行它。我猜代码然后以我的管理员用户身份运行,但不使用 sudo。
  • 您假设代码将通过 struct passwd *theUser = getuserinfo(username); 并愉快地转到下一行以获取该用户的组 ID,在调用函数 @ 之前您是否没有检查 NULL 987654324@?
  • getuserinfo 中的printf() 之后添加fflush(),您将看到错误消息。 (注意:errno 为 0,表示未找到用户。)

标签: c linux return system-calls


【解决方案1】:

错误检查应如下所示:

struct passwd *getuserinfo(char *username)
{


//define errno so we can use it
errno = 0;
//create a variable to store the user info in
struct passwd *theUser = getpwnam(username);

//error check getpwnam()
if(errno != 0)
{
    perror("ERROR: getpwnam() FAIL");
}
//check if we got user data/if the user existed
else if(theUser == NULL)
{
    fprintf(stderr, "ERROR: User does not exist!\n");
    return NULL;
}

    return theUser;
}

需要使用使用 stderr 的 fprintf 来确保始终显示错误消息。它在 printf 缓冲区中丢失了,keithmo 使用 fflush(NULL) 的建议发现了这一点。

errno 用于检查调用是否成功。然后我们确保 theUser != NULL 因为即使缺少用户,调用也是成功的。如果它为 NULL,我们会向用户打印一条错误消息,以便他们知道。

我们现在根据 t0mm13b 在主函数中调用 getgroupinfo 之前也会进行错误检查

//look up the user and get their info
    struct passwd *theUser = getuserinfo(username);
    //use the user's gid and look up its info
    struct group *theGroup;
    if(theUser != NULL)
    {
        //get the user's group id
        theGroup = getgroupinfo(theUser->pw_gid);
        //print the user and group info
        printf("User: %s\nUser ID: %d\nGroup Name: %s\n\n\n", theUser->pw_name, theUser->pw_uid, theGroup->gr_name);
    }
    else
    {
        fprintf(stderr, "ERROR: No group info, missing user!\n");
    }


    displayusers();

【讨论】:

  • 我怀疑使用 stdout 而不是 stderr 不是问题 - 我怀疑这实际上是由于最初没有包含换行符,这会延迟刷新。你只是碰巧在你的新版本中也包含了一个换行符。
猜你喜欢
  • 2014-04-01
  • 2023-01-24
  • 2015-07-20
  • 1970-01-01
  • 2013-06-14
  • 1970-01-01
  • 1970-01-01
  • 2015-12-09
  • 2019-02-15
相关资源
最近更新 更多