Function win_private_directory_tree_secure

src/daemon/ipc.c:4210–4288

}

static bool win_private_directory_tree_secure(const wchar_t *directory_path) {
    if (!directory_path) {
        return false;
    }
    size_t length = wcslen(directory_path);
    bool drive_absolute = length >= 4 &&
                          ((directory_path[0] >= L'A' && directory_path[0] <= L'Z') ||
                           (directory_path[0] >= L'a' && directory_path[0] <= L'z')) &&
                          directory_path[1] == L':' &&
                          (directory_path[2] == L'\\' || directory_path[2] == L'/');
    if (!drive_absolute) {
        /* Local current-user ACLs do not provide the intended guarantee for
         * UNC/device namespaces. Daemon cache logs must stay on a local
         * absolute drive path. */
        return false;
    }
    wchar_t *path = wide_copy(directory_path);
    if (!path) {
        return false;
    }
    for (size_t i = 0; i < length; i++) {
        if (path[i] == L'/') {
            path[i] = L'\\';
        }
    }
    win_security_t security;
    if (!win_security_init(&security)) {
        free(path);
        return false;
    }
    bool ok = true;
    size_t component_start = 3;
    for (size_t i = component_start; ok && i <= length; i++) {
        if (i < length && path[i] != L'\\') {
            continue;
        }
        if (i == component_start) {
            component_start = i + 1;
            continue;
        }
        wchar_t saved = path[i];
        path[i] = L'\0';
        const wchar_t *component = path + component_start;
        if (wcscmp(component, L".") == 0 || wcscmp(component, L"..") == 0) {
            ok = false;
        } else {
            DWORD attributes = GetFileAttributesW(path);
            if (attributes == INVALID_FILE_ATTRIBUTES) {
                DWORD error = GetLastError();
                ok = (error == ERROR_FILE_NOT_FOUND || error == ERROR_PATH_NOT_FOUND) &&
                     CreateDirectoryW(path, &security.directory_attributes) != 0;
            }
            /* Ancestors are observe-only and must already be secure.  The
             * final current-user directory is intentionally handled below by
             * win_runtime_directory_secure(), which may replace its DACL. */
            if (ok && i < length) {
                ok = win_directory_component_secure(&security, path);
                if (!ok) {