[asterisk-bugs] [Asterisk 0010781]: [patch] Doesn't lock config files when writing

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=10781 
====================================================================== 
Reported By:                paravoid
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   10781
Category:                   Core/Configuration
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           1.4.11  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             09-21-2007 00:48 CDT
Last Modified:              09-26-2007 08:19 CDT
====================================================================== 
Summary:                    [patch] Doesn't lock config files when writing
Description: 
Asterisk does not use flock() to lock configuration files when writing them
on config_text_file_save().

This was originally reported as Debian bug
http://bugs.digium.com/view.php?id=353227 by John Goerzen. In his
own words:
"It appears to not protect the file even against itself.  It certainly
doesn't use flock() to protect it against others.

This is a problem for several reasons.  First, of course, people can be
hand-editing the file to add or remove users.  Secondly, automated
programs may be appending data to it for the same purpose.

We've noticed corruption in our file and are almost certain that this is
the culprit."
====================================================================== 

---------------------------------------------------------------------- 
 paravoid - 09-26-07 08:19  
---------------------------------------------------------------------- 
I am aware of flock() issues with NFS and with flock() being voluntarily.

I wasn't suggesting to replace your patch with flock() but merely *add*
flock to your patch for those cases where other applications decide to use
it and the underlying filesystem supports it. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
09-26-07 08:19  paravoid       Note Added: 0071107                          
======================================================================