aboutsummaryrefslogtreecommitdiff
path: root/internal/fusefrontend
diff options
context:
space:
mode:
Diffstat (limited to 'internal/fusefrontend')
-rw-r--r--internal/fusefrontend/ctlsock_interface.go39
-rw-r--r--internal/fusefrontend/fs_dir.go2
2 files changed, 33 insertions, 8 deletions
diff --git a/internal/fusefrontend/ctlsock_interface.go b/internal/fusefrontend/ctlsock_interface.go
index 964775b..730ed58 100644
--- a/internal/fusefrontend/ctlsock_interface.go
+++ b/internal/fusefrontend/ctlsock_interface.go
@@ -4,9 +4,11 @@ import (
"fmt"
"path"
"strings"
+ "syscall"
"github.com/rfjakob/gocryptfs/internal/ctlsock"
"github.com/rfjakob/gocryptfs/internal/nametransform"
+ "github.com/rfjakob/gocryptfs/internal/syscallcompat"
)
var _ ctlsock.Interface = &FS{} // Verify that interface is implemented.
@@ -17,22 +19,31 @@ func (fs *FS) EncryptPath(plainPath string) (string, error) {
}
// DecryptPath implements ctlsock.Backend
-func (fs *FS) DecryptPath(cipherPath string) (string, error) {
+func (fs *FS) DecryptPath(cipherPath string) (plainPath string, err error) {
+ dirfd, err := syscall.Open(fs.args.Cipherdir, syscall.O_RDONLY, 0)
+ if err != nil {
+ return "", err
+ }
+ defer syscall.Close(dirfd)
+ return fs.decryptPathAt(dirfd, cipherPath)
+}
+
+// decryptPathAt decrypts a ciphertext path relative to dirfd.
+func (fs *FS) decryptPathAt(dirfd int, cipherPath string) (plainPath string, err error) {
if fs.args.PlaintextNames || cipherPath == "" {
return cipherPath, nil
}
- plainPath := ""
parts := strings.Split(cipherPath, "/")
- wd := fs.args.Cipherdir
- for _, part := range parts {
- dirIV, err := nametransform.ReadDirIV(wd)
+ wd := dirfd
+ for i, part := range parts {
+ dirIV, err := nametransform.ReadDirIVAt(wd)
if err != nil {
fmt.Printf("ReadDirIV: %v\n", err)
return "", err
}
longPart := part
if nametransform.IsLongContent(part) {
- longPart, err = nametransform.ReadLongName(wd + "/" + part)
+ longPart, err = nametransform.ReadLongNameAt(wd, part)
if err != nil {
fmt.Printf("ReadLongName: %v\n", err)
return "", err
@@ -44,7 +55,21 @@ func (fs *FS) DecryptPath(cipherPath string) (string, error) {
return "", err
}
plainPath = path.Join(plainPath, name)
- wd = path.Join(wd, part)
+ // Last path component? We are done.
+ if i == len(parts)-1 {
+ break
+ }
+ // Descend into next directory
+ oldWd := wd
+ wd, err = syscallcompat.Openat(wd, part, syscall.O_NOFOLLOW, 0)
+ if err != nil {
+ return "", err
+ }
+ // Unless we are in the first iteration, where dirfd is our wd, close
+ // the old working directory.
+ if i > 0 {
+ syscall.Close(oldWd)
+ }
}
return plainPath, nil
}
diff --git a/internal/fusefrontend/fs_dir.go b/internal/fusefrontend/fs_dir.go
index 963a551..76dff8e 100644
--- a/internal/fusefrontend/fs_dir.go
+++ b/internal/fusefrontend/fs_dir.go
@@ -324,7 +324,7 @@ func (fs *FS) OpenDir(dirName string, context *fuse.Context) ([]fuse.DirEntry, f
isLong = nametransform.NameType(cName)
}
if isLong == nametransform.LongNameContent {
- cNameLong, err := nametransform.ReadLongName(filepath.Join(cDirAbsPath, cName))
+ cNameLong, err := nametransform.ReadLongNameAt(fd, cName)
if err != nil {
tlog.Warn.Printf("OpenDir %q: invalid entry %q: Could not read .name: %v",
cDirName, cName, err)