From 510e0914c047beac1d1f18b7b52a7687d3a0bda1 Mon Sep 17 00:00:00 2001
From: Thiago Macieira <thiago.macieira@intel.com>
Date: Wed, 12 Oct 2022 17:39:02 -0700
Subject: [PATCH] IPC: add a function to check runtime support
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Apple sandboxes restrict use of the System V / XSI IPC mechanisms. It's
currently the only restriction we check for. Attempting to use them will
result in SIGSYS delivered to the application, so we shouldn't try.

Linux system call filtration can do the same. In fact, systemd's
SystemCallFilter= options do default to SIGSYS too and it has an @ipc
group that could be used to block SysV. However, the same group blocks
the creation of pipes, so it's not in much use.

Change-Id: I12a088d1ae424825abd3fffd171d79f7cd5b2b9d
Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io>
---
 src/corelib/ipc/qtipccommon.cpp | 27 +++++++++++++++++++++++++++
 src/corelib/ipc/qtipccommon_p.h |  5 +++++
 2 files changed, 32 insertions(+)

diff --git a/src/corelib/ipc/qtipccommon.cpp b/src/corelib/ipc/qtipccommon.cpp
index 050c79c6290..34c13e7a5cb 100644
--- a/src/corelib/ipc/qtipccommon.cpp
+++ b/src/corelib/ipc/qtipccommon.cpp
@@ -85,6 +85,33 @@ static QNativeIpcKey::Type stringToType(QStringView typeString)
     return QNativeIpcKey::Type{};
 }
 
+#if defined(Q_OS_DARWIN) || defined(QT_BUILD_INTERNAL)
+/*!
+    \internal
+
+    Returns whether this IPC type \a ipcType and key type \a keyType is
+    supported on the current machine, with a runtime check.
+*/
+bool QtIpcCommon::isIpcSupportedAtRuntime(IpcType ipcType, QNativeIpcKey::Type keyType)
+{
+    switch (keyType) {
+    case QNativeIpcKey::Type::SystemV:
+        break;
+
+    case QNativeIpcKey::Type::PosixRealtime:
+    case QNativeIpcKey::Type::Windows:
+        return isIpcSupported(ipcType, keyType);
+    }
+
+#  if defined(Q_OS_DARWIN)
+    // System V IPC is not supported on Apple platforms if the application is
+    // currently running in a sandbox.
+    return !qt_apple_isSandboxed();
+#  endif
+    return isIpcSupported(ipcType, keyType);
+}
+#endif
+
 /*!
     \internal
 
diff --git a/src/corelib/ipc/qtipccommon_p.h b/src/corelib/ipc/qtipccommon_p.h
index fe9900a80d1..32891905d78 100644
--- a/src/corelib/ipc/qtipccommon_p.h
+++ b/src/corelib/ipc/qtipccommon_p.h
@@ -57,6 +57,11 @@ static constexpr bool isIpcSupported(IpcType ipcType, QNativeIpcKey::Type type)
         return QT_CONFIG(sysv_shm);
     return QT_CONFIG(sysv_sem);
 }
+#if defined(Q_OS_DARWIN) || defined(QT_BUILD_INTERNAL)
+bool isIpcSupportedAtRuntime(IpcType type, QNativeIpcKey::Type);
+#else
+static constexpr auto isIpcSupportedAtRuntime = isIpcSupported;
+#endif
 
 Q_AUTOTEST_EXPORT QString
 legacyPlatformSafeKey(const QString &key, IpcType ipcType,