* Run the login shell or command as the given user in a new pty to prevent
* terminal injection attacks.
*
- * Copyright (C) 2016-2017 Simon Ruderich
+ * Copyright (C) 2016-2018 Simon Ruderich
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
if (*pty_slave == -1) {
die("open slave tty");
}
- /* The user must be able to write to the new TTY. Normally grantpt() would
+ /*
+ * The user must be able to write to the new TTY. Normally grantpt() would
* do this for us, but we don't trust the user and thus don't want to pass
- * the pty_master to a process running under that uid. */
+ * the pty_master to a process running under that uid.
+ */
if (chown(slave_path, uid, (gid_t)-1) != 0) {
die("chown slave tty");
}
static volatile pid_t pid_to_wait_for;
static int pid_to_wait_for_status;
-static void sigchld_handler() {
+static void sigchld_handler(int signal) {
int status;
pid_t pid;
+ (void)signal;
+
while ((pid = waitpid(-1, &status, WNOHANG)) > 0) {
if (pid == pid_to_wait_for) {
/* Mark that our child has died and we should exit as well. */
close_or_die(pty_slave);
pid_to_wait_for = pid;
- struct sigaction action = {
+ struct sigaction action_sigchld = {
.sa_handler = sigchld_handler,
};
- if (sigaction(SIGCHLD, &action, NULL) != 0) {
- die("sigaction");
+ sigemptyset(&action_sigchld.sa_mask);
+ if (sigaction(SIGCHLD, &action_sigchld, NULL) != 0) {
+ die("sigaction SIGCHLD");
}
if (sigprocmask(SIG_SETMASK, &sigset_old, NULL) != 0) {