@ai-ecoverse/slicc-kernel 1.32.1 → 1.32.2

package/README.md

@@ -410,7 +410,7 @@ OPFS stores names, bytes, sizes and modification times, nothing else. Everything
 - mode bits (`chmod`);
 - access and change times, and a modification time set explicitly with `utime` (it holds until the file is written again);
 - inode numbers that stay stable across renames;
-- symbolic links (`symlink`, `readlink`, `lstat`, and following them in paths), which exist only in the sidecar, with their own times: `touch -h`, `lutimes` and `utimensat` with `AT_SYMLINK_NOFOLLOW` set the link's, never the target's.
+- symbolic links (`symlink`, `readlink`, `lstat`, and following them in paths), which exist only in the sidecar, with their own times: `touch -h`, `lutimes` and `utimensat` with `AT_SYMLINK_NOFOLLOW` set the link's, never the target's. A link's own mode can't be changed, as on Linux: `chmod -h`, `lchmod` and `fchmodat` with `AT_SYMLINK_NOFOLLOW` fail with `EOPNOTSUPP` (which `chmod -h` and `tar` ignore for links) and never follow it, and `open` with `O_PATH | O_NOFOLLOW` gives a descriptor for the link itself.
 
 OPFS stays authoritative: an entry is consulted only for a path that exists in OPFS (symlinks only for paths that don't), so files written straight to OPFS, for example by the BIOS installer or a page, get the defaults: directories `0755`, files `0644`, and files under `node_modules/*/bin/` `0755`. A file deleted through the OPFS API disappears at once; its leftover entry is ignored and removed when the next kernel starts. Changes go to OPFS first and then to the sidecar, so a crash in between at worst loses the metadata of that one change. Each change is a read-modify-write inside one IndexedDB transaction, so two kernels (two tabs) on the same origin don't lose each other's updates.
 

package/dist/node-process-worker.js

@@ -781,6 +781,7 @@ function createNodeOps(h) {
       }
       const path = liveNodePath(node);
       if (attr2.mode !== void 0 && attr2.mode !== null) {
+        if (Fs.isLink(node.mode)) throw new Fs.ErrnoError(wasiErrno("EOPNOTSUPP"));
         const perm = attr2.mode & PERM_MASK;
         if (perm !== (node.mode & PERM_MASK)) {
           metadataCall(() => bridgeOf(node).chmod(path, perm));
@@ -2086,6 +2087,12 @@ function wrapCloexecSyscalls(imports, glue, deps) {
     }
   }
 }
+function pathOpensLinks(Fs) {
+  const fs = Fs;
+  const { mayOpen, isLink } = fs;
+  if (!mayOpen || !isLink) return;
+  fs.mayOpen = (node, flags) => flags & O_PATH && isLink.call(fs, node.mode) ? 0 : mayOpen.call(fs, node, flags);
+}
 function noFollowUtimes(imports, fs, glue) {
   for (const namespace of namespaces(imports)) {
     const key = Object.keys(namespace).find(
@@ -2403,7 +2410,7 @@ function useMounts(Fs, env = {}, live = false) {
     }
   };
 }
-var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW, EMSCRIPTEN_EPERM, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE, O_CREAT2, field, NAME;
+var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW, EMSCRIPTEN_EPERM, O_PATH, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE, O_CREAT2, field, NAME;
 var init_process_fds = __esm({
   "src/process/process-fds.ts"() {
     "use strict";
@@ -2430,6 +2437,7 @@ var init_process_fds = __esm({
     EBADF = 8;
     AT_SYMLINK_NOFOLLOW = 256;
     EMSCRIPTEN_EPERM = 63;
+    O_PATH = 2097152;
     DIR_MODE = 16749;
     LINK_MODE = 41408;
     CHAR_DEVICE = 8630;
@@ -3750,6 +3758,7 @@ async function runWasmProcess(init, port2, deps = {}) {
         if (!hasStreams(m)) return;
         const fs = m.FS;
         trackCloseOnExec(fs);
+        pathOpensLinks(fs);
         try {
           fs.mkdirTree(init.cwd);
           fs.chdir(init.cwd);