#include "err.h" #include "resource.h" #include "sandbox.h" #include "utils/log.h" #include #include #include #include #include #include #include #include #include enum ConfigIndex { memory_limit = 0, nproc_limit, time_limit, sandbox_path, sandbox_template, sandbox_action, file_input, file_output, file_info, program, CONFIG_INDEX_MAX }; char *config[CONFIG_INDEX_MAX]; void print_help(char *self) { LOG_WARN("Usage:"); LOG_WARN(" %s [options]", self); LOG_WARN("Options:"); LOG_WARN(" --memory_limit memory limit in MB"); LOG_WARN(" --nproc_limit number of processes limit"); LOG_WARN(" --time_limit time limit in ms"); LOG_WARN(" --sandbox_path path to sandbox"); LOG_WARN(" --sandbox_template sandbox template"); LOG_WARN(" --sandbox_action sandbox action"); LOG_WARN(" --file_input path to input file"); LOG_WARN(" --file_output path to output file"); LOG_WARN(" --file_info path to info file"); LOG_WARN(" --program program to run"); LOG_WARN(" --help print this help message"); } void parse(int argc, char *argv[]) { static struct option options[] = { [memory_limit] = {"memory_limit", required_argument, NULL, 0}, [nproc_limit] = {"nproc_limit", required_argument, NULL, 0}, [time_limit] = {"time_limit", required_argument, NULL, 0}, [sandbox_path] = {"sandbox_path", required_argument, NULL, 0}, [sandbox_template] = {"sandbox_template", required_argument, NULL, 0}, [sandbox_action] = {"sandbox_action", required_argument, NULL, 0}, [file_input] = {"file_input", required_argument, NULL, 0}, [file_output] = {"file_output", required_argument, NULL, 0}, [file_info] = {"file_info", required_argument, NULL, 0}, [program] = {"program", required_argument, NULL, 0}, [CONFIG_INDEX_MAX] = {"help", no_argument, NULL, 0}, [CONFIG_INDEX_MAX + 1] = {NULL, 0, NULL, 0} }; int c, idx = 0; while ((c = getopt_long_only(argc, argv, "", options, &idx)) != -1) { if (c != 0) break; if (idx < CONFIG_INDEX_MAX) config[idx] = optarg; else if (idx == CONFIG_INDEX_MAX) { print_help(argv[0]); exit(0); } } for (int i = 0; i < CONFIG_INDEX_MAX; i++) { if (!config[i]) { print_help(argv[0]); LOG_ERR("Missing arguments"); exit(ERR_ARGUMENTS); } } } void launch_child() { char *args[] = {config[program], NULL}; char *env[8]; /* build env */ { env[0] = malloc(sizeof("LD_PRELOAD=") + strlen(config[sandbox_path]) + 1); sprintf(env[0], "LD_PRELOAD=%s", config[sandbox_path]); env[1] = malloc(sizeof(LIMIT_MEMORY "=") + strlen(config[memory_limit]) + 1); sprintf(env[1], LIMIT_MEMORY "=%s", config[memory_limit]); env[2] = malloc(sizeof(LIMIT_NPROC "=") + strlen(config[nproc_limit]) + 1); sprintf(env[2], LIMIT_NPROC "=%s", config[nproc_limit]); env[3] = malloc(sizeof(LIMIT_TIME "=") + strlen(config[time_limit]) + 1); sprintf(env[3], LIMIT_TIME "=%s", config[time_limit]); env[4] = malloc(sizeof(SANDBOX_TEMPLATE "=") + strlen(config[sandbox_template]) + 1); sprintf(env[4], SANDBOX_TEMPLATE "=%s", config[sandbox_template]); env[5] = malloc(sizeof(SANDBOX_ACTION "=") + strlen(config[sandbox_action]) + 1); sprintf(env[5], SANDBOX_ACTION "=%s", config[sandbox_action]); env[6] = malloc(sizeof(SANDBOX_EXE_PATH "=") + strlen(config[program]) + 1); sprintf(env[6], SANDBOX_EXE_PATH "=%s", config[program]); env[7] = NULL; } /* build stdin */ { int fd = open(config[file_input], O_RDONLY); dup2(fd, STDIN_FILENO); close(fd); } /* build stdout */ { int fd = open(config[file_output], O_WRONLY | O_CREAT, 0644); dup2(fd, STDOUT_FILENO); close(fd); } execve(config[program], args, env); } void dump_info(FILE *dest, struct rusage *usage, int status, long long time_usage) { fprintf(dest, "{\"real_time\":%lld,\"cpu_time\":%ld,\"memory\":%ld,", time_usage, usage->ru_utime.tv_sec * 1000 + usage->ru_utime.tv_usec / 1000, usage->ru_maxrss); if (WIFEXITED(status)) fprintf(dest, "\"status\":\"exited\",\"code\":%d}", WEXITSTATUS(status)); else if (WIFSIGNALED(status)) fprintf(dest, "\"status\":\"killed\",\"code\":%d}", WTERMSIG(status)); else fprintf(dest, "\"status\":\"unknown\",\"code\":0}"); } int main(int argc, char *argv[]) { parse(argc, argv); pid_t child = fork(); if (child < 0) { LOG_ERR("Failed to fork (child)"); exit(ERR_FORK); } else if (child == 0) { // Program launch_child(); LOG_ERR("Failed to execute child program"); exit(ERR_EXEC); } else { // Supervisor pid_t killer = fork(); if (killer < 0) { LOG_ERR("Failed to fork (killer)"); exit(ERR_FORK); } else if (killer == 0) { // Killer long limit = (strtol(config[time_limit], NULL, 10) + 1000) / 1000 + 2; LOG_INFO("Killer started, time limit: %lds", limit); sleep(limit); // two more seconds LOG_WARN("Killer killed child"); kill(child, SIGKILL); exit(0); } else { // stat int status; struct rusage usage; pid_t ret; struct timespec time_begin, time_end; clock_gettime(CLOCK_MONOTONIC, &time_begin); ret = wait4(child, &status, 0, &usage); clock_gettime(CLOCK_MONOTONIC, &time_end); long long time_usage = (time_end.tv_sec - time_begin.tv_sec) * 1000 + (time_end.tv_nsec - time_begin.tv_nsec) / 1000000; kill(killer, SIGKILL); if (ret < 0) { LOG_ERR("Failed to wait for child process"); exit(ERR_WAIT); } FILE *info = fopen(config[file_info], "w"); dump_info(info, &usage, status, time_usage); exit(0); } } }