GNU bug report logs - #39237
coreutils cp mishandles error return from lchmod

Previous Next

To reply to this bug, email your comments to 39237 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Rich Felker <dalias <at> libc.org>
To: bug-coreutils <at> gnu.org
Cc: musl <at> lists.openwall.com
Subject: coreutils cp mishandles error return from lchmod
Date: Wed, 22 Jan 2020 09:15:57 -0500

cp (and perhaps other utilities) are treating EOPNOTSUPP from lchmod
as a hard error rather than an indication that the system does not
support modes for symlinks. This recently came up on
https://bugs.gentoo.org/687236#c17 where users are claiming recent
changes to gnulib made the problem go away, but I'm not sure what the
mechanism was, since the underlying problem is still there. Users only
hit the problem on cross-compiling, presumably due to logic in how
gnulib replaces lchmod, and due to gnulib's replacement wrongly
following symlinks (it just #defines it to chmod). gnulib documents
that the caller must check before calling lchmod that the file is not
a symlink, but this is unsafe in the presence of race conditions,

While lchmod is not a standard function, fchmodat with
AT_SYMLINK_NOFOLLOW is, and specifies EOPNOTSUPP for the case where
the system does not support modes on symlinks. musl provides lchmod as
a simple wrapper for this, yielding a version that is safe.

coreutils should be opting to use the system-provided lchmod, which is
safe, and correctly handling error returns (silently treating
EOPNOTSUPP as success) rather than as hard errors.

Rich

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.