From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTPS id A79BB3858CDB for ; Wed, 10 Apr 2024 06:45:58 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org A79BB3858CDB Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org A79BB3858CDB Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712731560; cv=none; b=BPTxJu5C5JAddnBESxg57GbVZZFuJXV0nv53/3CgFVx+TYBST7Yb7SzP+b3rhAMPtPohji2qjzW4VM2/0s0SvFcaJKVpVeAM9XC8zFzS4Lw6kD3p4QUsT7gDKsNtX38d3a/3uiFGEDuoTXLWdqQiIzxbBiZ4bVjlRW4SiAhOIJI= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712731560; c=relaxed/simple; bh=XwbIY2A1Ij98xEYhEd8BYU19/uyGSjNRxaUyvpjjC1Q=; h=DKIM-Signature:From:To:Subject:Message-ID:Date:MIME-Version; b=OsNVsGcvr1yyw+NgtWy5kUDlBzeRxfbEvlIkBJithJdk1tqc88XtPzlR0uxXKi8sajbpYSh3SL2XuVkngt75wUuKHEE/Hc4wJ5IvVej+jZYRm3RzSL+dEfC1NmOfocc4MRGDgueoQJyqIZQOISnhyEATXM+jSr4yzdjpNij9g4w= ARC-Authentication-Results: i=1; server2.sourceware.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1712731558; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=22x+Rk/LPnyBSwvLQwDLMUWhrQLbGT+7LnlVvqrjs/k=; b=R5Fc7weLb5RRWyVLp1yAA3wVS0S4XZaSRGhKJRLJjIWMmeOATOCMKVB70fwR/htV6lYRS0 qAcp3/SSnQlgrpjaCzLIrA40g49KTxnvXl5W+EQoXokvFMJW0PlP8iaPx8XDyqVBzDL4Be wA+uGkup/VpUwzLvbzhuU3dsluJjOkw= Received: from mimecast-mx02.redhat.com (mx-ext.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-63-1fMF00PYPH6HIOorNcmliA-1; Wed, 10 Apr 2024 02:45:56 -0400 X-MC-Unique: 1fMF00PYPH6HIOorNcmliA-1 Received: from smtp.corp.redhat.com (int-mx10.intmail.prod.int.rdu2.redhat.com [10.11.54.10]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 47F3829AA3B2 for ; Wed, 10 Apr 2024 06:45:56 +0000 (UTC) Received: from oldenburg.str.redhat.com (unknown [10.39.192.109]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 882074867A3 for ; Wed, 10 Apr 2024 06:45:55 +0000 (UTC) From: Florian Weimer To: libc-alpha@sourceware.org Subject: [PATCH v3 3/3] login: Use unsigned 32-bit types for seconds-since-epoch In-Reply-To: Message-ID: References: X-From-Line: dcd1cb663536fbcdbb9597060045500a027053ca Mon Sep 17 00:00:00 2001 Date: Wed, 10 Apr 2024 08:45:49 +0200 User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.4.1 on 10.11.54.10 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain X-Spam-Status: No, score=-11.8 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,GIT_PATCH_0,KAM_SHORT,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: These fields store timestamps when the system was running. No Linux systems existed before 1970, so these values are unused. Switching to unsigned types allows continued use of the existing struct layouts beyond the year 2038. The intent is to give distributions more time to switch to improved interfaces that also avoid locking/data corruption issues. --- NEWS | 9 +++++++- bits/utmp.h | 4 ++-- login/Makefile | 4 +++- login/tst-utmp-unsigned-64.c | 1 + login/tst-utmp-unsigned.c | 40 ++++++++++++++++++++++++++++++++++++ sysdeps/gnu/bits/utmpx.h | 2 +- 6 files changed, 55 insertions(+), 5 deletions(-) create mode 100644 login/tst-utmp-unsigned-64.c create mode 100644 login/tst-utmp-unsigned.c diff --git a/NEWS b/NEWS index da4b2223e9..cf6078cf20 100644 --- a/NEWS +++ b/NEWS @@ -28,7 +28,14 @@ Major new features: Deprecated and removed features, and other changes affecting compatibility: - [Add deprecations, removals and changes affecting compatibility here] +* Architectures which use a 32-bit seconds-since-epoch field in struct + lastlog, struct utmp, struct utmpx (such as i386, powerpc64le, rv32, + rv64, x86-64) switched from a signed to an unsigned type for that + field. This allows these fields to store timestamps beyond the year + 2038, until the year 2106. Please note that applications are still + expected to migrate off the interfaces declared in and + (except for login_tty) due to locking and session management + problems. Changes to build and runtime requirements: diff --git a/bits/utmp.h b/bits/utmp.h index f2d1c13d8c..27cb536800 100644 --- a/bits/utmp.h +++ b/bits/utmp.h @@ -36,7 +36,7 @@ struct lastlog { #if __WORDSIZE_TIME64_COMPAT32 - int32_t ll_time; + __uint32_t ll_time; #else __time_t ll_time; #endif @@ -76,7 +76,7 @@ struct utmp int32_t ut_session; /* Session ID, used for windowing. */ struct { - int32_t tv_sec; /* Seconds. */ + __uint32_t tv_sec; /* Seconds. */ int32_t tv_usec; /* Microseconds. */ } ut_tv; /* Time entry was made. */ #else diff --git a/login/Makefile b/login/Makefile index f91190e3dc..84563230ef 100644 --- a/login/Makefile +++ b/login/Makefile @@ -44,9 +44,11 @@ subdir-dirs = programs vpath %.c programs tests := tst-utmp tst-utmpx tst-grantpt tst-ptsname tst-getlogin tst-updwtmpx \ - tst-pututxline-lockfail tst-pututxline-cache tst-utmp-size tst-utmp-size-64 + tst-pututxline-lockfail tst-pututxline-cache tst-utmp-size tst-utmp-size-64 \ + tst-utmp-unsigned tst-utmp-unsigned-64 CFLAGS-tst-utmp-size-64.c += -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 +CFLAGS-tst-utmp-unsigned-64.c += -D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64 # Empty compatibility library for old binaries. extra-libs := libutil diff --git a/login/tst-utmp-unsigned-64.c b/login/tst-utmp-unsigned-64.c new file mode 100644 index 0000000000..940e7654f8 --- /dev/null +++ b/login/tst-utmp-unsigned-64.c @@ -0,0 +1 @@ +#include "tst-utmp-unsigned.c" diff --git a/login/tst-utmp-unsigned.c b/login/tst-utmp-unsigned.c new file mode 100644 index 0000000000..27ad03a7d6 --- /dev/null +++ b/login/tst-utmp-unsigned.c @@ -0,0 +1,40 @@ +/* Check that struct utmp, struct utmpx, struct lastlog use unsigned epoch. + Copyright (C) 2024 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#include +#include +#include + +/* Undefined. Used to check that the conditions below are optimized away. */ +void link_failure_utmp (void); +void link_failure_utmpx (void); +void link_failure_lastlog (void); + +static int +do_test (void) +{ + if ((struct utmp) { .ut_tv = { 0x80000000U, }, }.ut_tv.tv_sec <= 0) + link_failure_utmp (); + if ((struct utmpx) { .ut_tv = { 0x80000000U, }, }.ut_tv.tv_sec <= 0) + link_failure_utmpx (); + if ((struct lastlog) { .ll_time = 0x80000000U, }.ll_time <= 0) + link_failure_lastlog (); + return 0; +} + +#include diff --git a/sysdeps/gnu/bits/utmpx.h b/sysdeps/gnu/bits/utmpx.h index 34b4afbc6a..ed0df9bd81 100644 --- a/sysdeps/gnu/bits/utmpx.h +++ b/sysdeps/gnu/bits/utmpx.h @@ -74,7 +74,7 @@ struct utmpx __int32_t ut_session; /* Session ID, used for windowing. */ struct { - __int32_t tv_sec; /* Seconds. */ + __uint32_t tv_sec; /* Seconds. */ __int32_t tv_usec; /* Microseconds. */ } ut_tv; /* Time entry was made. */ #else -- 2.44.0