GitHubMirror/go-winio
1
0
Fork 0
mirror of https://github.com/rwinkhart/go-winio.git synced 2026-09-06 00:57:19 -04:00
Code Issues Packages Projects Releases Wiki Activity

Open pipe client with anonymous security

Browse Source 
This ensures that the pipe server cannot impersonate or even identify
the user that has connected to the pipe. This is a good default to
prevent malicious squatting on a named pipe name.

Signed-off-by: John Starks <jostarks@microsoft.com>
This commit is contained in:
John Starks
2016-01-31 14:03:47 -08:00
parent 99eef7be8d
commit 3aa597fc55
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pipe.go
+4 -2
View File
@@ -23,6 +23,8 @@ const (
cPIPE_ACCESS_DUPLEX = 0x3 cPIPE_ACCESS_DUPLEX = 0x3
cFILE_FLAG_FIRST_PIPE_INSTANCE = 0x80000 cFILE_FLAG_FIRST_PIPE_INSTANCE = 0x80000
cSECURITY_SQOS_PRESENT = 0x100000
cSECURITY_ANONYMOUS = 0
cPIPE_REJECT_REMOTE_CLIENTS = 0x8 cPIPE_REJECT_REMOTE_CLIENTS = 0x8
@@ -85,7 +87,7 @@ func DialPipe(path string, timeout *time.Duration) (net.Conn, error) {
var err error var err error
var h syscall.Handle var h syscall.Handle
for { for {
h, err = createFile(path, syscall.GENERIC_READ|syscall.GENERIC_WRITE, 0, nil, syscall.OPEN_EXISTING, syscall.FILE_FLAG_OVERLAPPED, 0) h, err = createFile(path, syscall.GENERIC_READ|syscall.GENERIC_WRITE, 0, nil, syscall.OPEN_EXISTING, syscall.FILE_FLAG_OVERLAPPED|cSECURITY_SQOS_PRESENT|cSECURITY_ANONYMOUS, 0)
if err != cERROR_PIPE_BUSY { if err != cERROR_PIPE_BUSY {
break break
} }
@@ -216,7 +218,7 @@ func ListenPipe(path, securityDescriptor string) (net.Listener, error) {
} }
// Immediately open and then close a client handle so that the named pipe is // Immediately open and then close a client handle so that the named pipe is
// created but not currently accepting connections. // created but not currently accepting connections.
h2, err := createFile(path, 0, 0, nil, syscall.OPEN_EXISTING, 0, 0) h2, err := createFile(path, 0, 0, nil, syscall.OPEN_EXISTING, cSECURITY_SQOS_PRESENT|cSECURITY_ANONYMOUS, 0)
if err != nil { if err != nil {
syscall.CloseHandle(h) syscall.CloseHandle(h)
return nil, err return nil, err