[asterisk-bugs] [Asterisk 0010781]: [patch] Doesn't lock config files when writing

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=10781 
====================================================================== 
Reported By:                paravoid
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   10781
Category:                   Core/Configuration
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           1.4.11  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             09-21-2007 00:48 CDT
Last Modified:              09-26-2007 05:23 CDT
====================================================================== 
Summary:                    [patch] Doesn't lock config files when writing
Description: 
Asterisk does not use flock() to lock configuration files when writing them
on config_text_file_save().

This was originally reported as Debian bug
http://bugs.digium.com/view.php?id=353227 by John Goerzen. In his
own words:
"It appears to not protect the file even against itself.  It certainly
doesn't use flock() to protect it against others.

This is a problem for several reasons.  First, of course, people can be
hand-editing the file to add or remove users.  Secondly, automated
programs may be appending data to it for the same purpose.

We've noticed corruption in our file and are almost certain that this is
the culprit."
====================================================================== 

---------------------------------------------------------------------- 
 paravoid - 09-26-07 05:23  
---------------------------------------------------------------------- 
Well, there is.
Asterisk can call flock(LOCK_EX | LOCK_NB) to try to get an exclusive lock
without aborting if this wasn't found.

Sounds a bit evil but this will help with other applications that could
use flock and are not interactive (e.g. web interfaces).

So, if Asterisk won't honor exclusive locks the best it can do is hope
that others will. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
09-26-07 05:23  paravoid       Note Added: 0071098                          
======================================================================