?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s3: Fix bug #9085.
[Samba.git] / source3 / lib / util_sock.c
blob1441560470c0721c843e29be23c7667a7b6c1803
1 /*
2 Unix SMB/CIFS implementation.
3 Samba utility functions
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Tim Potter 2000-2001
6 Copyright (C) Jeremy Allison 1992-2007
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23
24 /****************************************************************************
25 Get a port number in host byte order from a sockaddr_storage.
26 ****************************************************************************/
27
28 uint16_t get_sockaddr_port(const struct sockaddr_storage *pss)
29 {
30 uint16_t port = 0;
31
32 if (pss->ss_family != AF_INET) {
33 #if defined(HAVE_IPV6)
34 /* IPv6 */
35 const struct sockaddr_in6 *sa6 =
36 (const struct sockaddr_in6 *)pss;
37 port = ntohs(sa6->sin6_port);
38 #endif
39 } else {
40 const struct sockaddr_in *sa =
41 (const struct sockaddr_in *)pss;
42 port = ntohs(sa->sin_port);
43 }
44 return port;
45 }
46
47 /****************************************************************************
48 Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
49 ****************************************************************************/
50
51 static char *print_sockaddr_len(char *dest,
52 size_t destlen,
53 const struct sockaddr *psa,
54 socklen_t psalen)
55 {
56 if (destlen > 0) {
57 dest[0] = '\0';
58 }
59 (void)sys_getnameinfo(psa,
60 psalen,
61 dest, destlen,
62 NULL, 0,
63 NI_NUMERICHOST);
64 return dest;
65 }
66
67 /****************************************************************************
68 Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
69 ****************************************************************************/
70
71 char *print_sockaddr(char *dest,
72 size_t destlen,
73 const struct sockaddr_storage *psa)
74 {
75 return print_sockaddr_len(dest, destlen, (struct sockaddr *)psa,
76 sizeof(struct sockaddr_storage));
77 }
78
79 /****************************************************************************
80 Print out a canonical IPv4 or IPv6 address from a struct sockaddr_storage.
81 ****************************************************************************/
82
83 char *print_canonical_sockaddr(TALLOC_CTX *ctx,
84 const struct sockaddr_storage *pss)
85 {
86 char addr[INET6_ADDRSTRLEN];
87 char *dest = NULL;
88 int ret;
89
90 /* Linux getnameinfo() man pages says port is unitialized if
91 service name is NULL. */
92
93 ret = sys_getnameinfo((const struct sockaddr *)pss,
94 sizeof(struct sockaddr_storage),
95 addr, sizeof(addr),
96 NULL, 0,
97 NI_NUMERICHOST);
98 if (ret != 0) {
99 return NULL;
100 }
101
102 if (pss->ss_family != AF_INET) {
103 #if defined(HAVE_IPV6)
104 dest = talloc_asprintf(ctx, "[%s]", addr);
105 #else
106 return NULL;
107 #endif
108 } else {
109 dest = talloc_asprintf(ctx, "%s", addr);
110 }
111
112 return dest;
113 }
114
115 /****************************************************************************
116 Return the string of an IP address (IPv4 or IPv6).
117 ****************************************************************************/
118
119 static const char *get_socket_addr(int fd, char *addr_buf, size_t addr_len)
120 {
121 struct sockaddr_storage sa;
122 socklen_t length = sizeof(sa);
123
124 /* Ok, returning a hard coded IPv4 address
125 * is bogus, but it's just as bogus as a
126 * zero IPv6 address. No good choice here.
127 */
128
129 strlcpy(addr_buf, "0.0.0.0", addr_len);
130
131 if (fd == -1) {
132 return addr_buf;
133 }
134
135 if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
136 DEBUG(0,("getsockname failed. Error was %s\n",
137 strerror(errno) ));
138 return addr_buf;
139 }
140
141 return print_sockaddr_len(addr_buf, addr_len, (struct sockaddr *)&sa, length);
142 }
143
144 /****************************************************************************
145 Return the port number we've bound to on a socket.
146 ****************************************************************************/
147
148 int get_socket_port(int fd)
149 {
150 struct sockaddr_storage sa;
151 socklen_t length = sizeof(sa);
152
153 if (fd == -1) {
154 return -1;
155 }
156
157 if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
158 DEBUG(0,("getpeername failed. Error was %s\n",
159 strerror(errno) ));
160 return -1;
161 }
162
163 #if defined(HAVE_IPV6)
164 if (sa.ss_family == AF_INET6) {
165 return ntohs(((struct sockaddr_in6 *)&sa)->sin6_port);
166 }
167 #endif
168 if (sa.ss_family == AF_INET) {
169 return ntohs(((struct sockaddr_in *)&sa)->sin_port);
170 }
171 return -1;
172 }
173
174 const char *client_name(int fd)
175 {
176 return get_peer_name(fd,false);
177 }
178
179 const char *client_addr(int fd, char *addr, size_t addrlen)
180 {
181 return get_peer_addr(fd,addr,addrlen);
182 }
183
184 const char *client_socket_addr(int fd, char *addr, size_t addr_len)
185 {
186 return get_socket_addr(fd, addr, addr_len);
187 }
188
189 #if 0
190 /* Not currently used. JRA. */
191 int client_socket_port(int fd)
192 {
193 return get_socket_port(fd);
194 }
195 #endif
196
197 /****************************************************************************
198 Accessor functions to make thread-safe code easier later...
199 ****************************************************************************/
200
201 void set_smb_read_error(enum smb_read_errors *pre,
202 enum smb_read_errors newerr)
203 {
204 if (pre) {
205 *pre = newerr;
206 }
207 }
208
209 void cond_set_smb_read_error(enum smb_read_errors *pre,
210 enum smb_read_errors newerr)
211 {
212 if (pre && *pre == SMB_READ_OK) {
213 *pre = newerr;
214 }
215 }
216
217 /****************************************************************************
218 Determine if a file descriptor is in fact a socket.
219 ****************************************************************************/
220
221 bool is_a_socket(int fd)
222 {
223 int v;
224 socklen_t l;
225 l = sizeof(int);
226 return(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&v, &l) == 0);
227 }
228
229 enum SOCK_OPT_TYPES {OPT_BOOL,OPT_INT,OPT_ON};
230
231 typedef struct smb_socket_option {
232 const char *name;
233 int level;
234 int option;
235 int value;
236 int opttype;
237 } smb_socket_option;
238
239 static const smb_socket_option socket_options[] = {
240 {"SO_KEEPALIVE", SOL_SOCKET, SO_KEEPALIVE, 0, OPT_BOOL},
241 {"SO_REUSEADDR", SOL_SOCKET, SO_REUSEADDR, 0, OPT_BOOL},
242 {"SO_BROADCAST", SOL_SOCKET, SO_BROADCAST, 0, OPT_BOOL},
243 #ifdef TCP_NODELAY
244 {"TCP_NODELAY", IPPROTO_TCP, TCP_NODELAY, 0, OPT_BOOL},
245 #endif
246 #ifdef TCP_KEEPCNT
247 {"TCP_KEEPCNT", IPPROTO_TCP, TCP_KEEPCNT, 0, OPT_INT},
248 #endif
249 #ifdef TCP_KEEPIDLE
250 {"TCP_KEEPIDLE", IPPROTO_TCP, TCP_KEEPIDLE, 0, OPT_INT},
251 #endif
252 #ifdef TCP_KEEPINTVL
253 {"TCP_KEEPINTVL", IPPROTO_TCP, TCP_KEEPINTVL, 0, OPT_INT},
254 #endif
255 #ifdef IPTOS_LOWDELAY
256 {"IPTOS_LOWDELAY", IPPROTO_IP, IP_TOS, IPTOS_LOWDELAY, OPT_ON},
257 #endif
258 #ifdef IPTOS_THROUGHPUT
259 {"IPTOS_THROUGHPUT", IPPROTO_IP, IP_TOS, IPTOS_THROUGHPUT, OPT_ON},
260 #endif
261 #ifdef SO_REUSEPORT
262 {"SO_REUSEPORT", SOL_SOCKET, SO_REUSEPORT, 0, OPT_BOOL},
263 #endif
264 #ifdef SO_SNDBUF
265 {"SO_SNDBUF", SOL_SOCKET, SO_SNDBUF, 0, OPT_INT},
266 #endif
267 #ifdef SO_RCVBUF
268 {"SO_RCVBUF", SOL_SOCKET, SO_RCVBUF, 0, OPT_INT},
269 #endif
270 #ifdef SO_SNDLOWAT
271 {"SO_SNDLOWAT", SOL_SOCKET, SO_SNDLOWAT, 0, OPT_INT},
272 #endif
273 #ifdef SO_RCVLOWAT
274 {"SO_RCVLOWAT", SOL_SOCKET, SO_RCVLOWAT, 0, OPT_INT},
275 #endif
276 #ifdef SO_SNDTIMEO
277 {"SO_SNDTIMEO", SOL_SOCKET, SO_SNDTIMEO, 0, OPT_INT},
278 #endif
279 #ifdef SO_RCVTIMEO
280 {"SO_RCVTIMEO", SOL_SOCKET, SO_RCVTIMEO, 0, OPT_INT},
281 #endif
282 #ifdef TCP_FASTACK
283 {"TCP_FASTACK", IPPROTO_TCP, TCP_FASTACK, 0, OPT_INT},
284 #endif
285 #ifdef TCP_QUICKACK
286 {"TCP_QUICKACK", IPPROTO_TCP, TCP_QUICKACK, 0, OPT_BOOL},
287 #endif
288 {NULL,0,0,0,0}};
289
290 /****************************************************************************
291 Print socket options.
292 ****************************************************************************/
293
294 static void print_socket_options(int s)
295 {
296 int value;
297 socklen_t vlen = 4;
298 const smb_socket_option *p = &socket_options[0];
299
300 /* wrapped in if statement to prevent streams
301 * leak in SCO Openserver 5.0 */
302 /* reported on samba-technical --jerry */
303 if ( DEBUGLEVEL >= 5 ) {
304 DEBUG(5,("Socket options:\n"));
305 for (; p->name != NULL; p++) {
306 if (getsockopt(s, p->level, p->option,
307 (void *)&value, &vlen) == -1) {
308 DEBUGADD(5,("\tCould not test socket option %s.\n",
309 p->name));
310 } else {
311 DEBUGADD(5,("\t%s = %d\n",
312 p->name,value));
313 }
314 }
315 }
316 }
317
318 /****************************************************************************
319 Set user socket options.
320 ****************************************************************************/
321
322 void set_socket_options(int fd, const char *options)
323 {
324 TALLOC_CTX *ctx = talloc_stackframe();
325 char *tok;
326
327 while (next_token_talloc(ctx, &options, &tok," \t,")) {
328 int ret=0,i;
329 int value = 1;
330 char *p;
331 bool got_value = false;
332
333 if ((p = strchr_m(tok,'='))) {
334 *p = 0;
335 value = atoi(p+1);
336 got_value = true;
337 }
338
339 for (i=0;socket_options[i].name;i++)
340 if (strequal(socket_options[i].name,tok))
341 break;
342
343 if (!socket_options[i].name) {
344 DEBUG(0,("Unknown socket option %s\n",tok));
345 continue;
346 }
347
348 switch (socket_options[i].opttype) {
349 case OPT_BOOL:
350 case OPT_INT:
351 ret = setsockopt(fd,socket_options[i].level,
352 socket_options[i].option,
353 (char *)&value,sizeof(int));
354 break;
355
356 case OPT_ON:
357 if (got_value)
358 DEBUG(0,("syntax error - %s "
359 "does not take a value\n",tok));
360
361 {
362 int on = socket_options[i].value;
363 ret = setsockopt(fd,socket_options[i].level,
364 socket_options[i].option,
365 (char *)&on,sizeof(int));
366 }
367 break;
368 }
369
370 if (ret != 0) {
371 /* be aware that some systems like Solaris return
372 * EINVAL to a setsockopt() call when the client
373 * sent a RST previously - no need to worry */
374 DEBUG(2,("Failed to set socket option %s (Error %s)\n",
375 tok, strerror(errno) ));
376 }
377 }
378
379 TALLOC_FREE(ctx);
380 print_socket_options(fd);
381 }
382
383 /****************************************************************************
384 Read from a socket.
385 ****************************************************************************/
386
387 ssize_t read_udp_v4_socket(int fd,
388 char *buf,
389 size_t len,
390 struct sockaddr_storage *psa)
391 {
392 ssize_t ret;
393 socklen_t socklen = sizeof(*psa);
394 struct sockaddr_in *si = (struct sockaddr_in *)psa;
395
396 memset((char *)psa,'\0',socklen);
397
398 ret = (ssize_t)sys_recvfrom(fd,buf,len,0,
399 (struct sockaddr *)psa,&socklen);
400 if (ret <= 0) {
401 /* Don't print a low debug error for a non-blocking socket. */
402 if (errno == EAGAIN) {
403 DEBUG(10,("read_udp_v4_socket: returned EAGAIN\n"));
404 } else {
405 DEBUG(2,("read_udp_v4_socket: failed. errno=%s\n",
406 strerror(errno)));
407 }
408 return 0;
409 }
410
411 if (psa->ss_family != AF_INET) {
412 DEBUG(2,("read_udp_v4_socket: invalid address family %d "
413 "(not IPv4)\n", (int)psa->ss_family));
414 return 0;
415 }
416
417 DEBUG(10,("read_udp_v4_socket: ip %s port %d read: %lu\n",
418 inet_ntoa(si->sin_addr),
419 si->sin_port,
420 (unsigned long)ret));
421
422 return ret;
423 }
424
425 /****************************************************************************
426 Read data from a file descriptor with a timout in msec.
427 mincount = if timeout, minimum to read before returning
428 maxcount = number to be read.
429 time_out = timeout in milliseconds
430 NB. This can be called with a non-socket fd, don't change
431 sys_read() to sys_recv() or other socket call.
432 ****************************************************************************/
433
434 NTSTATUS read_fd_with_timeout(int fd, char *buf,
435 size_t mincnt, size_t maxcnt,
436 unsigned int time_out,
437 size_t *size_ret)
438 {
439 fd_set fds;
440 int selrtn;
441 ssize_t readret;
442 size_t nread = 0;
443 struct timeval timeout;
444 char addr[INET6_ADDRSTRLEN];
445 int save_errno;
446
447 /* just checking .... */
448 if (maxcnt <= 0)
449 return NT_STATUS_OK;
450
451 /* Blocking read */
452 if (time_out == 0) {
453 if (mincnt == 0) {
454 mincnt = maxcnt;
455 }
456
457 while (nread < mincnt) {
458 readret = sys_read(fd, buf + nread, maxcnt - nread);
459
460 if (readret == 0) {
461 DEBUG(5,("read_fd_with_timeout: "
462 "blocking read. EOF from client.\n"));
463 return NT_STATUS_END_OF_FILE;
464 }
465
466 if (readret == -1) {
467 save_errno = errno;
468 if (fd == get_client_fd()) {
469 /* Try and give an error message
470 * saying what client failed. */
471 DEBUG(0,("read_fd_with_timeout: "
472 "client %s read error = %s.\n",
473 get_peer_addr(fd,addr,sizeof(addr)),
474 strerror(save_errno) ));
475 } else {
476 DEBUG(0,("read_fd_with_timeout: "
477 "read error = %s.\n",
478 strerror(save_errno) ));
479 }
480 return map_nt_error_from_unix(save_errno);
481 }
482 nread += readret;
483 }
484 goto done;
485 }
486
487 /* Most difficult - timeout read */
488 /* If this is ever called on a disk file and
489 mincnt is greater then the filesize then
490 system performance will suffer severely as
491 select always returns true on disk files */
492
493 /* Set initial timeout */
494 timeout.tv_sec = (time_t)(time_out / 1000);
495 timeout.tv_usec = (long)(1000 * (time_out % 1000));
496
497 for (nread=0; nread < mincnt; ) {
498 if (fd < 0 || fd >= FD_SETSIZE) {
499 errno = EBADF;
500 return map_nt_error_from_unix(EBADF);
501 }
502
503 FD_ZERO(&fds);
504 FD_SET(fd,&fds);
505
506 selrtn = sys_select_intr(fd+1,&fds,NULL,NULL,&timeout);
507
508 /* Check if error */
509 if (selrtn == -1) {
510 save_errno = errno;
511 /* something is wrong. Maybe the socket is dead? */
512 if (fd == get_client_fd()) {
513 /* Try and give an error message saying
514 * what client failed. */
515 DEBUG(0,("read_fd_with_timeout: timeout "
516 "read for client %s. select error = %s.\n",
517 get_peer_addr(fd,addr,sizeof(addr)),
518 strerror(save_errno) ));
519 } else {
520 DEBUG(0,("read_fd_with_timeout: timeout "
521 "read. select error = %s.\n",
522 strerror(save_errno) ));
523 }
524 return map_nt_error_from_unix(save_errno);
525 }
526
527 /* Did we timeout ? */
528 if (selrtn == 0) {
529 DEBUG(10,("read_fd_with_timeout: timeout read. "
530 "select timed out.\n"));
531 return NT_STATUS_IO_TIMEOUT;
532 }
533
534 readret = sys_read(fd, buf+nread, maxcnt-nread);
535
536 if (readret == 0) {
537 /* we got EOF on the file descriptor */
538 DEBUG(5,("read_fd_with_timeout: timeout read. "
539 "EOF from client.\n"));
540 return NT_STATUS_END_OF_FILE;
541 }
542
543 if (readret == -1) {
544 save_errno = errno;
545 /* the descriptor is probably dead */
546 if (fd == get_client_fd()) {
547 /* Try and give an error message
548 * saying what client failed. */
549 DEBUG(0,("read_fd_with_timeout: timeout "
550 "read to client %s. read error = %s.\n",
551 get_peer_addr(fd,addr,sizeof(addr)),
552 strerror(save_errno) ));
553 } else {
554 DEBUG(0,("read_fd_with_timeout: timeout "
555 "read. read error = %s.\n",
556 strerror(save_errno) ));
557 }
558 return map_nt_error_from_unix(errno);
559 }
560
561 nread += readret;
562 }
563
564 done:
565 /* Return the number we got */
566 if (size_ret) {
567 *size_ret = nread;
568 }
569 return NT_STATUS_OK;
570 }
571
572 /****************************************************************************
573 Read data from an fd, reading exactly N bytes.
574 NB. This can be called with a non-socket fd, don't add dependencies
575 on socket calls.
576 ****************************************************************************/
577
578 NTSTATUS read_data(int fd, char *buffer, size_t N)
579 {
580 return read_fd_with_timeout(fd, buffer, N, N, 0, NULL);
581 }
582
583 /****************************************************************************
584 Write all data from an iov array
585 NB. This can be called with a non-socket fd, don't add dependencies
586 on socket calls.
587 ****************************************************************************/
588
589 ssize_t write_data_iov(int fd, const struct iovec *orig_iov, int iovcnt)
590 {
591 int i;
592 size_t to_send;
593 ssize_t thistime;
594 size_t sent;
595 struct iovec *iov_copy, *iov;
596
597 to_send = 0;
598 for (i=0; i<iovcnt; i++) {
599 to_send += orig_iov[i].iov_len;
600 }
601
602 thistime = sys_writev(fd, orig_iov, iovcnt);
603 if ((thistime <= 0) || (thistime == to_send)) {
604 return thistime;
605 }
606 sent = thistime;
607
608 /*
609 * We could not send everything in one call. Make a copy of iov that
610 * we can mess with. We keep a copy of the array start in iov_copy for
611 * the TALLOC_FREE, because we're going to modify iov later on,
612 * discarding elements.
613 */
614
615 iov_copy = (struct iovec *)TALLOC_MEMDUP(
616 talloc_tos(), orig_iov, sizeof(struct iovec) * iovcnt);
617
618 if (iov_copy == NULL) {
619 errno = ENOMEM;
620 return -1;
621 }
622 iov = iov_copy;
623
624 while (sent < to_send) {
625 /*
626 * We have to discard "thistime" bytes from the beginning
627 * iov array, "thistime" contains the number of bytes sent
628 * via writev last.
629 */
630 while (thistime > 0) {
631 if (thistime < iov[0].iov_len) {
632 char *new_base =
633 (char *)iov[0].iov_base + thistime;
634 iov[0].iov_base = (void *)new_base;
635 iov[0].iov_len -= thistime;
636 break;
637 }
638 thistime -= iov[0].iov_len;
639 iov += 1;
640 iovcnt -= 1;
641 }
642
643 thistime = sys_writev(fd, iov, iovcnt);
644 if (thistime <= 0) {
645 break;
646 }
647 sent += thistime;
648 }
649
650 TALLOC_FREE(iov_copy);
651 return sent;
652 }
653
654 /****************************************************************************
655 Write data to a fd.
656 NB. This can be called with a non-socket fd, don't add dependencies
657 on socket calls.
658 ****************************************************************************/
659
660 ssize_t write_data(int fd, const char *buffer, size_t N)
661 {
662 ssize_t ret;
663 struct iovec iov;
664
665 iov.iov_base = CONST_DISCARD(void *, buffer);
666 iov.iov_len = N;
667
668 ret = write_data_iov(fd, &iov, 1);
669 if (ret >= 0) {
670 return ret;
671 }
672
673 if (fd == get_client_fd()) {
674 char addr[INET6_ADDRSTRLEN];
675 /*
676 * Try and give an error message saying what client failed.
677 */
678 DEBUG(0, ("write_data: write failure in writing to client %s. "
679 "Error %s\n", get_peer_addr(fd,addr,sizeof(addr)),
680 strerror(errno)));
681 } else {
682 DEBUG(0,("write_data: write failure. Error = %s\n",
683 strerror(errno) ));
684 }
685
686 return -1;
687 }
688
689 /****************************************************************************
690 Send a keepalive packet (rfc1002).
691 ****************************************************************************/
692
693 bool send_keepalive(int client)
694 {
695 unsigned char buf[4];
696
697 buf[0] = SMBkeepalive;
698 buf[1] = buf[2] = buf[3] = 0;
699
700 return(write_data(client,(char *)buf,4) == 4);
701 }
702
703 /****************************************************************************
704 Read 4 bytes of a smb packet and return the smb length of the packet.
705 Store the result in the buffer.
706 This version of the function will return a length of zero on receiving
707 a keepalive packet.
708 Timeout is in milliseconds.
709 ****************************************************************************/
710
711 NTSTATUS read_smb_length_return_keepalive(int fd, char *inbuf,
712 unsigned int timeout,
713 size_t *len)
714 {
715 int msg_type;
716 NTSTATUS status;
717
718 status = read_fd_with_timeout(fd, inbuf, 4, 4, timeout, NULL);
719
720 if (!NT_STATUS_IS_OK(status)) {
721 return status;
722 }
723
724 *len = smb_len(inbuf);
725 msg_type = CVAL(inbuf,0);
726
727 if (msg_type == SMBkeepalive) {
728 DEBUG(5,("Got keepalive packet\n"));
729 }
730
731 DEBUG(10,("got smb length of %lu\n",(unsigned long)(*len)));
732
733 return NT_STATUS_OK;
734 }
735
736 /****************************************************************************
737 Read 4 bytes of a smb packet and return the smb length of the packet.
738 Store the result in the buffer. This version of the function will
739 never return a session keepalive (length of zero).
740 Timeout is in milliseconds.
741 ****************************************************************************/
742
743 NTSTATUS read_smb_length(int fd, char *inbuf, unsigned int timeout,
744 size_t *len)
745 {
746 uint8_t msgtype = SMBkeepalive;
747
748 while (msgtype == SMBkeepalive) {
749 NTSTATUS status;
750
751 status = read_smb_length_return_keepalive(fd, inbuf, timeout,
752 len);
753 if (!NT_STATUS_IS_OK(status)) {
754 return status;
755 }
756
757 msgtype = CVAL(inbuf, 0);
758 }
759
760 DEBUG(10,("read_smb_length: got smb length of %lu\n",
761 (unsigned long)len));
762
763 return NT_STATUS_OK;
764 }
765
766 /****************************************************************************
767 Read an smb from a fd.
768 The timeout is in milliseconds.
769 This function will return on receipt of a session keepalive packet.
770 maxlen is the max number of bytes to return, not including the 4 byte
771 length. If zero it means buflen limit.
772 Doesn't check the MAC on signed packets.
773 ****************************************************************************/
774
775 NTSTATUS receive_smb_raw(int fd, char *buffer, size_t buflen, unsigned int timeout,
776 size_t maxlen, size_t *p_len)
777 {
778 size_t len;
779 NTSTATUS status;
780
781 status = read_smb_length_return_keepalive(fd,buffer,timeout,&len);
782
783 if (!NT_STATUS_IS_OK(status)) {
784 DEBUG(10, ("receive_smb_raw: %s!\n", nt_errstr(status)));
785 return status;
786 }
787
788 if (len > buflen) {
789 DEBUG(0,("Invalid packet length! (%lu bytes).\n",
790 (unsigned long)len));
791 return NT_STATUS_INVALID_PARAMETER;
792 }
793
794 if(len > 0) {
795 if (maxlen) {
796 len = MIN(len,maxlen);
797 }
798
799 status = read_fd_with_timeout(
800 fd, buffer+4, len, len, timeout, &len);
801
802 if (!NT_STATUS_IS_OK(status)) {
803 return status;
804 }
805
806 /* not all of samba3 properly checks for packet-termination
807 * of strings. This ensures that we don't run off into
808 * empty space. */
809 SSVAL(buffer+4,len, 0);
810 }
811
812 *p_len = len;
813 return NT_STATUS_OK;
814 }
815
816 /****************************************************************************
817 Open a socket of the specified type, port, and address for incoming data.
818 ****************************************************************************/
819
820 int open_socket_in(int type,
821 uint16_t port,
822 int dlevel,
823 const struct sockaddr_storage *psock,
824 bool rebind)
825 {
826 struct sockaddr_storage sock;
827 int res;
828 socklen_t slen = sizeof(struct sockaddr_in);
829
830 sock = *psock;
831
832 #if defined(HAVE_IPV6)
833 if (sock.ss_family == AF_INET6) {
834 ((struct sockaddr_in6 *)&sock)->sin6_port = htons(port);
835 slen = sizeof(struct sockaddr_in6);
836 }
837 #endif
838 if (sock.ss_family == AF_INET) {
839 ((struct sockaddr_in *)&sock)->sin_port = htons(port);
840 }
841
842 res = socket(sock.ss_family, type, 0 );
843 if( res == -1 ) {
844 if( DEBUGLVL(0) ) {
845 dbgtext( "open_socket_in(): socket() call failed: " );
846 dbgtext( "%s\n", strerror( errno ) );
847 }
848 return -1;
849 }
850
851 /* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
852 {
853 int val = rebind ? 1 : 0;
854 if( setsockopt(res,SOL_SOCKET,SO_REUSEADDR,
855 (char *)&val,sizeof(val)) == -1 ) {
856 if( DEBUGLVL( dlevel ) ) {
857 dbgtext( "open_socket_in(): setsockopt: " );
858 dbgtext( "SO_REUSEADDR = %s ",
859 val?"true":"false" );
860 dbgtext( "on port %d failed ", port );
861 dbgtext( "with error = %s\n", strerror(errno) );
862 }
863 }
864 #ifdef SO_REUSEPORT
865 if( setsockopt(res,SOL_SOCKET,SO_REUSEPORT,
866 (char *)&val,sizeof(val)) == -1 ) {
867 if( DEBUGLVL( dlevel ) ) {
868 dbgtext( "open_socket_in(): setsockopt: ");
869 dbgtext( "SO_REUSEPORT = %s ",
870 val?"true":"false");
871 dbgtext( "on port %d failed ", port);
872 dbgtext( "with error = %s\n", strerror(errno));
873 }
874 }
875 #endif /* SO_REUSEPORT */
876 }
877
878 /* now we've got a socket - we need to bind it */
879 if (bind(res, (struct sockaddr *)&sock, slen) == -1 ) {
880 if( DEBUGLVL(dlevel) && (port == SMB_PORT1 ||
881 port == SMB_PORT2 || port == NMB_PORT) ) {
882 char addr[INET6_ADDRSTRLEN];
883 print_sockaddr(addr, sizeof(addr),
884 &sock);
885 dbgtext( "bind failed on port %d ", port);
886 dbgtext( "socket_addr = %s.\n", addr);
887 dbgtext( "Error = %s\n", strerror(errno));
888 }
889 close(res);
890 return -1;
891 }
892
893 DEBUG( 10, ( "bind succeeded on port %d\n", port ) );
894 return( res );
895 }
896
897 struct open_socket_out_state {
898 int fd;
899 struct event_context *ev;
900 struct sockaddr_storage ss;
901 socklen_t salen;
902 uint16_t port;
903 int wait_nsec;
904 };
905
906 static void open_socket_out_connected(struct tevent_req *subreq);
907
908 static int open_socket_out_state_destructor(struct open_socket_out_state *s)
909 {
910 if (s->fd != -1) {
911 close(s->fd);
912 }
913 return 0;
914 }
915
916 /****************************************************************************
917 Create an outgoing socket. timeout is in milliseconds.
918 **************************************************************************/
919
920 struct tevent_req *open_socket_out_send(TALLOC_CTX *mem_ctx,
921 struct event_context *ev,
922 const struct sockaddr_storage *pss,
923 uint16_t port,
924 int timeout)
925 {
926 char addr[INET6_ADDRSTRLEN];
927 struct tevent_req *result, *subreq;
928 struct open_socket_out_state *state;
929 NTSTATUS status;
930
931 result = tevent_req_create(mem_ctx, &state,
932 struct open_socket_out_state);
933 if (result == NULL) {
934 return NULL;
935 }
936 state->ev = ev;
937 state->ss = *pss;
938 state->port = port;
939 state->wait_nsec = 10000;
940 state->salen = -1;
941
942 state->fd = socket(state->ss.ss_family, SOCK_STREAM, 0);
943 if (state->fd == -1) {
944 status = map_nt_error_from_unix(errno);
945 goto post_status;
946 }
947 talloc_set_destructor(state, open_socket_out_state_destructor);
948
949 if (!tevent_req_set_endtime(
950 result, ev, timeval_current_ofs(0, timeout*1000))) {
951 goto fail;
952 }
953
954 #if defined(HAVE_IPV6)
955 if (pss->ss_family == AF_INET6) {
956 struct sockaddr_in6 *psa6;
957 psa6 = (struct sockaddr_in6 *)&state->ss;
958 psa6->sin6_port = htons(port);
959 if (psa6->sin6_scope_id == 0
960 && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
961 setup_linklocal_scope_id(
962 (struct sockaddr *)&(state->ss));
963 }
964 state->salen = sizeof(struct sockaddr_in6);
965 }
966 #endif
967 if (pss->ss_family == AF_INET) {
968 struct sockaddr_in *psa;
969 psa = (struct sockaddr_in *)&state->ss;
970 psa->sin_port = htons(port);
971 state->salen = sizeof(struct sockaddr_in);
972 }
973
974 if (pss->ss_family == AF_UNIX) {
975 state->salen = sizeof(struct sockaddr_un);
976 }
977
978 print_sockaddr(addr, sizeof(addr), &state->ss);
979 DEBUG(3,("Connecting to %s at port %u\n", addr, (unsigned int)port));
980
981 subreq = async_connect_send(state, state->ev, state->fd,
982 (struct sockaddr *)&state->ss,
983 state->salen);
984 if ((subreq == NULL)
985 || !tevent_req_set_endtime(
986 subreq, state->ev,
987 timeval_current_ofs(0, state->wait_nsec))) {
988 goto fail;
989 }
990 tevent_req_set_callback(subreq, open_socket_out_connected, result);
991 return result;
992
993 post_status:
994 tevent_req_nterror(result, status);
995 return tevent_req_post(result, ev);
996 fail:
997 TALLOC_FREE(result);
998 return NULL;
999 }
1000
1001 static void open_socket_out_connected(struct tevent_req *subreq)
1002 {
1003 struct tevent_req *req =
1004 tevent_req_callback_data(subreq, struct tevent_req);
1005 struct open_socket_out_state *state =
1006 tevent_req_data(req, struct open_socket_out_state);
1007 int ret;
1008 int sys_errno;
1009
1010 ret = async_connect_recv(subreq, &sys_errno);
1011 TALLOC_FREE(subreq);
1012 if (ret == 0) {
1013 tevent_req_done(req);
1014 return;
1015 }
1016
1017 if (
1018 #ifdef ETIMEDOUT
1019 (sys_errno == ETIMEDOUT) ||
1020 #endif
1021 (sys_errno == EINPROGRESS) ||
1022 (sys_errno == EALREADY) ||
1023 (sys_errno == EAGAIN)) {
1024
1025 /*
1026 * retry
1027 */
1028
1029 if (state->wait_nsec < 250000) {
1030 state->wait_nsec *= 1.5;
1031 }
1032
1033 subreq = async_connect_send(state, state->ev, state->fd,
1034 (struct sockaddr *)&state->ss,
1035 state->salen);
1036 if (tevent_req_nomem(subreq, req)) {
1037 return;
1038 }
1039 if (!tevent_req_set_endtime(
1040 subreq, state->ev,
1041 timeval_current_ofs(0, state->wait_nsec))) {
1042 tevent_req_nterror(req, NT_STATUS_NO_MEMORY);
1043 return;
1044 }
1045 tevent_req_set_callback(subreq, open_socket_out_connected, req);
1046 return;
1047 }
1048
1049 #ifdef EISCONN
1050 if (sys_errno == EISCONN) {
1051 tevent_req_done(req);
1052 return;
1053 }
1054 #endif
1055
1056 /* real error */
1057 tevent_req_nterror(req, map_nt_error_from_unix(sys_errno));
1058 }
1059
1060 NTSTATUS open_socket_out_recv(struct tevent_req *req, int *pfd)
1061 {
1062 struct open_socket_out_state *state =
1063 tevent_req_data(req, struct open_socket_out_state);
1064 NTSTATUS status;
1065
1066 if (tevent_req_is_nterror(req, &status)) {
1067 return status;
1068 }
1069 *pfd = state->fd;
1070 state->fd = -1;
1071 return NT_STATUS_OK;
1072 }
1073
1074 NTSTATUS open_socket_out(const struct sockaddr_storage *pss, uint16_t port,
1075 int timeout, int *pfd)
1076 {
1077 TALLOC_CTX *frame = talloc_stackframe();
1078 struct event_context *ev;
1079 struct tevent_req *req;
1080 NTSTATUS status = NT_STATUS_NO_MEMORY;
1081
1082 ev = event_context_init(frame);
1083 if (ev == NULL) {
1084 goto fail;
1085 }
1086
1087 req = open_socket_out_send(frame, ev, pss, port, timeout);
1088 if (req == NULL) {
1089 goto fail;
1090 }
1091 if (!tevent_req_poll(req, ev)) {
1092 status = NT_STATUS_INTERNAL_ERROR;
1093 goto fail;
1094 }
1095 status = open_socket_out_recv(req, pfd);
1096 fail:
1097 TALLOC_FREE(frame);
1098 return status;
1099 }
1100
1101 struct open_socket_out_defer_state {
1102 struct event_context *ev;
1103 struct sockaddr_storage ss;
1104 uint16_t port;
1105 int timeout;
1106 int fd;
1107 };
1108
1109 static void open_socket_out_defer_waited(struct tevent_req *subreq);
1110 static void open_socket_out_defer_connected(struct tevent_req *subreq);
1111
1112 struct tevent_req *open_socket_out_defer_send(TALLOC_CTX *mem_ctx,
1113 struct event_context *ev,
1114 struct timeval wait_time,
1115 const struct sockaddr_storage *pss,
1116 uint16_t port,
1117 int timeout)
1118 {
1119 struct tevent_req *req, *subreq;
1120 struct open_socket_out_defer_state *state;
1121
1122 req = tevent_req_create(mem_ctx, &state,
1123 struct open_socket_out_defer_state);
1124 if (req == NULL) {
1125 return NULL;
1126 }
1127 state->ev = ev;
1128 state->ss = *pss;
1129 state->port = port;
1130 state->timeout = timeout;
1131
1132 subreq = tevent_wakeup_send(
1133 state, ev,
1134 timeval_current_ofs(wait_time.tv_sec, wait_time.tv_usec));
1135 if (subreq == NULL) {
1136 goto fail;
1137 }
1138 tevent_req_set_callback(subreq, open_socket_out_defer_waited, req);
1139 return req;
1140 fail:
1141 TALLOC_FREE(req);
1142 return NULL;
1143 }
1144
1145 static void open_socket_out_defer_waited(struct tevent_req *subreq)
1146 {
1147 struct tevent_req *req = tevent_req_callback_data(
1148 subreq, struct tevent_req);
1149 struct open_socket_out_defer_state *state = tevent_req_data(
1150 req, struct open_socket_out_defer_state);
1151 bool ret;
1152
1153 ret = tevent_wakeup_recv(subreq);
1154 TALLOC_FREE(subreq);
1155 if (!ret) {
1156 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
1157 return;
1158 }
1159
1160 subreq = open_socket_out_send(state, state->ev, &state->ss,
1161 state->port, state->timeout);
1162 if (tevent_req_nomem(subreq, req)) {
1163 return;
1164 }
1165 tevent_req_set_callback(subreq, open_socket_out_defer_connected, req);
1166 }
1167
1168 static void open_socket_out_defer_connected(struct tevent_req *subreq)
1169 {
1170 struct tevent_req *req = tevent_req_callback_data(
1171 subreq, struct tevent_req);
1172 struct open_socket_out_defer_state *state = tevent_req_data(
1173 req, struct open_socket_out_defer_state);
1174 NTSTATUS status;
1175
1176 status = open_socket_out_recv(subreq, &state->fd);
1177 TALLOC_FREE(subreq);
1178 if (!NT_STATUS_IS_OK(status)) {
1179 tevent_req_nterror(req, status);
1180 return;
1181 }
1182 tevent_req_done(req);
1183 }
1184
1185 NTSTATUS open_socket_out_defer_recv(struct tevent_req *req, int *pfd)
1186 {
1187 struct open_socket_out_defer_state *state = tevent_req_data(
1188 req, struct open_socket_out_defer_state);
1189 NTSTATUS status;
1190
1191 if (tevent_req_is_nterror(req, &status)) {
1192 return status;
1193 }
1194 *pfd = state->fd;
1195 state->fd = -1;
1196 return NT_STATUS_OK;
1197 }
1198
1199 /*******************************************************************
1200 Create an outgoing TCP socket to the first addr that connects.
1201
1202 This is for simultaneous connection attempts to port 445 and 139 of a host
1203 or for simultatneous connection attempts to multiple DCs at once. We return
1204 a socket fd of the first successful connection.
1205
1206 @param[in] addrs list of Internet addresses and ports to connect to
1207 @param[in] num_addrs number of address/port pairs in the addrs list
1208 @param[in] timeout time after which we stop waiting for a socket connection
1209 to succeed, given in milliseconds
1210 @param[out] fd_index the entry in addrs which we successfully connected to
1211 @param[out] fd fd of the open and connected socket
1212 @return true on a successful connection, false if all connection attempts
1213 failed or we timed out
1214 *******************************************************************/
1215
1216 bool open_any_socket_out(struct sockaddr_storage *addrs, int num_addrs,
1217 int timeout, int *fd_index, int *fd)
1218 {
1219 int i, resulting_index, res;
1220 int *sockets;
1221 bool good_connect;
1222
1223 fd_set r_fds, wr_fds;
1224 struct timeval tv;
1225 int maxfd;
1226
1227 int connect_loop = 10000; /* 10 milliseconds */
1228
1229 timeout *= 1000; /* convert to microseconds */
1230
1231 sockets = SMB_MALLOC_ARRAY(int, num_addrs);
1232
1233 if (sockets == NULL)
1234 return false;
1235
1236 resulting_index = -1;
1237
1238 for (i=0; i<num_addrs; i++)
1239 sockets[i] = -1;
1240
1241 for (i=0; i<num_addrs; i++) {
1242 sockets[i] = socket(addrs[i].ss_family, SOCK_STREAM, 0);
1243 if (sockets[i] < 0 || sockets[i] >= FD_SETSIZE)
1244 goto done;
1245 set_blocking(sockets[i], false);
1246 }
1247
1248 connect_again:
1249 good_connect = false;
1250
1251 for (i=0; i<num_addrs; i++) {
1252 const struct sockaddr * a =
1253 (const struct sockaddr *)&(addrs[i]);
1254
1255 if (sockets[i] == -1)
1256 continue;
1257
1258 if (sys_connect(sockets[i], a) == 0) {
1259 /* Rather unlikely as we are non-blocking, but it
1260 * might actually happen. */
1261 resulting_index = i;
1262 goto done;
1263 }
1264
1265 if (errno == EINPROGRESS || errno == EALREADY ||
1266 #ifdef EISCONN
1267 errno == EISCONN ||
1268 #endif
1269 errno == EAGAIN || errno == EINTR) {
1270 /* These are the error messages that something is
1271 progressing. */
1272 good_connect = true;
1273 } else if (errno != 0) {
1274 /* There was a direct error */
1275 close(sockets[i]);
1276 sockets[i] = -1;
1277 }
1278 }
1279
1280 if (!good_connect) {
1281 /* All of the connect's resulted in real error conditions */
1282 goto done;
1283 }
1284
1285 /* Lets see if any of the connect attempts succeeded */
1286
1287 maxfd = 0;
1288 FD_ZERO(&wr_fds);
1289 FD_ZERO(&r_fds);
1290
1291 for (i=0; i<num_addrs; i++) {
1292 if (sockets[i] < 0 || sockets[i] >= FD_SETSIZE) {
1293 /* This cannot happen - ignore if so. */
1294 continue;
1295 }
1296 FD_SET(sockets[i], &wr_fds);
1297 FD_SET(sockets[i], &r_fds);
1298 if (sockets[i]>maxfd)
1299 maxfd = sockets[i];
1300 }
1301
1302 tv.tv_sec = 0;
1303 tv.tv_usec = connect_loop;
1304
1305 res = sys_select_intr(maxfd+1, &r_fds, &wr_fds, NULL, &tv);
1306
1307 if (res < 0)
1308 goto done;
1309
1310 if (res == 0)
1311 goto next_round;
1312
1313 for (i=0; i<num_addrs; i++) {
1314
1315 if (sockets[i] < 0 || sockets[i] >= FD_SETSIZE) {
1316 /* This cannot happen - ignore if so. */
1317 continue;
1318 }
1319
1320 /* Stevens, Network Programming says that if there's a
1321 * successful connect, the socket is only writable. Upon an
1322 * error, it's both readable and writable. */
1323
1324 if (FD_ISSET(sockets[i], &r_fds) &&
1325 FD_ISSET(sockets[i], &wr_fds)) {
1326 /* readable and writable, so it's an error */
1327 close(sockets[i]);
1328 sockets[i] = -1;
1329 continue;
1330 }
1331
1332 if (!FD_ISSET(sockets[i], &r_fds) &&
1333 FD_ISSET(sockets[i], &wr_fds)) {
1334 /* Only writable, so it's connected */
1335 resulting_index = i;
1336 goto done;
1337 }
1338 }
1339
1340 next_round:
1341
1342 timeout -= connect_loop;
1343 if (timeout <= 0)
1344 goto done;
1345 connect_loop *= 1.5;
1346 if (connect_loop > timeout)
1347 connect_loop = timeout;
1348 goto connect_again;
1349
1350 done:
1351 for (i=0; i<num_addrs; i++) {
1352 if (i == resulting_index)
1353 continue;
1354 if (sockets[i] >= 0)
1355 close(sockets[i]);
1356 }
1357
1358 if (resulting_index >= 0) {
1359 *fd_index = resulting_index;
1360 *fd = sockets[*fd_index];
1361 set_blocking(*fd, true);
1362 }
1363
1364 free(sockets);
1365
1366 return (resulting_index >= 0);
1367 }
1368 /****************************************************************************
1369 Open a connected UDP socket to host on port
1370 **************************************************************************/
1371
1372 int open_udp_socket(const char *host, int port)
1373 {
1374 struct sockaddr_storage ss;
1375 int res;
1376
1377 if (!interpret_string_addr(&ss, host, 0)) {
1378 DEBUG(10,("open_udp_socket: can't resolve name %s\n",
1379 host));
1380 return -1;
1381 }
1382
1383 res = socket(ss.ss_family, SOCK_DGRAM, 0);
1384 if (res == -1) {
1385 return -1;
1386 }
1387
1388 #if defined(HAVE_IPV6)
1389 if (ss.ss_family == AF_INET6) {
1390 struct sockaddr_in6 *psa6;
1391 psa6 = (struct sockaddr_in6 *)&ss;
1392 psa6->sin6_port = htons(port);
1393 if (psa6->sin6_scope_id == 0
1394 && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
1395 setup_linklocal_scope_id(
1396 (struct sockaddr *)&ss);
1397 }
1398 }
1399 #endif
1400 if (ss.ss_family == AF_INET) {
1401 struct sockaddr_in *psa;
1402 psa = (struct sockaddr_in *)&ss;
1403 psa->sin_port = htons(port);
1404 }
1405
1406 if (sys_connect(res,(struct sockaddr *)&ss)) {
1407 close(res);
1408 return -1;
1409 }
1410
1411 return res;
1412 }
1413
1414 /*******************************************************************
1415 Return the IP addr of the remote end of a socket as a string.
1416 Optionally return the struct sockaddr_storage.
1417 ******************************************************************/
1418
1419 static const char *get_peer_addr_internal(int fd,
1420 char *addr_buf,
1421 size_t addr_buf_len,
1422 struct sockaddr *pss,
1423 socklen_t *plength)
1424 {
1425 struct sockaddr_storage ss;
1426 socklen_t length = sizeof(ss);
1427
1428 strlcpy(addr_buf,"0.0.0.0",addr_buf_len);
1429
1430 if (fd == -1) {
1431 return addr_buf;
1432 }
1433
1434 if (pss == NULL) {
1435 pss = (struct sockaddr *)&ss;
1436 plength = &length;
1437 }
1438
1439 if (getpeername(fd, (struct sockaddr *)pss, plength) < 0) {
1440 DEBUG(0,("getpeername failed. Error was %s\n",
1441 strerror(errno) ));
1442 return addr_buf;
1443 }
1444
1445 print_sockaddr_len(addr_buf,
1446 addr_buf_len,
1447 pss,
1448 *plength);
1449 return addr_buf;
1450 }
1451
1452 /*******************************************************************
1453 Matchname - determine if host name matches IP address. Used to
1454 confirm a hostname lookup to prevent spoof attacks.
1455 ******************************************************************/
1456
1457 static bool matchname(const char *remotehost,
1458 const struct sockaddr *pss,
1459 socklen_t len)
1460 {
1461 struct addrinfo *res = NULL;
1462 struct addrinfo *ailist = NULL;
1463 char addr_buf[INET6_ADDRSTRLEN];
1464 bool ret = interpret_string_addr_internal(&ailist,
1465 remotehost,
1466 AI_ADDRCONFIG|AI_CANONNAME);
1467
1468 if (!ret || ailist == NULL) {
1469 DEBUG(3,("matchname: getaddrinfo failed for "
1470 "name %s [%s]\n",
1471 remotehost,
1472 gai_strerror(ret) ));
1473 return false;
1474 }
1475
1476 /*
1477 * Make sure that getaddrinfo() returns the "correct" host name.
1478 */
1479
1480 if (ailist->ai_canonname == NULL ||
1481 (!strequal(remotehost, ailist->ai_canonname) &&
1482 !strequal(remotehost, "localhost"))) {
1483 DEBUG(0,("matchname: host name/name mismatch: %s != %s\n",
1484 remotehost,
1485 ailist->ai_canonname ?
1486 ailist->ai_canonname : "(NULL)"));
1487 freeaddrinfo(ailist);
1488 return false;
1489 }
1490
1491 /* Look up the host address in the address list we just got. */
1492 for (res = ailist; res; res = res->ai_next) {
1493 if (!res->ai_addr) {
1494 continue;
1495 }
1496 if (sockaddr_equal((const struct sockaddr *)res->ai_addr,
1497 (struct sockaddr *)pss)) {
1498 freeaddrinfo(ailist);
1499 return true;
1500 }
1501 }
1502
1503 /*
1504 * The host name does not map to the original host address. Perhaps
1505 * someone has compromised a name server. More likely someone botched
1506 * it, but that could be dangerous, too.
1507 */
1508
1509 DEBUG(0,("matchname: host name/address mismatch: %s != %s\n",
1510 print_sockaddr_len(addr_buf,
1511 sizeof(addr_buf),
1512 pss,
1513 len),
1514 ailist->ai_canonname ? ailist->ai_canonname : "(NULL)"));
1515
1516 if (ailist) {
1517 freeaddrinfo(ailist);
1518 }
1519 return false;
1520 }
1521
1522 /*******************************************************************
1523 Deal with the singleton cache.
1524 ******************************************************************/
1525
1526 struct name_addr_pair {
1527 struct sockaddr_storage ss;
1528 const char *name;
1529 };
1530
1531 /*******************************************************************
1532 Lookup a name/addr pair. Returns memory allocated from memcache.
1533 ******************************************************************/
1534
1535 static bool lookup_nc(struct name_addr_pair *nc)
1536 {
1537 DATA_BLOB tmp;
1538
1539 ZERO_STRUCTP(nc);
1540
1541 if (!memcache_lookup(
1542 NULL, SINGLETON_CACHE,
1543 data_blob_string_const_null("get_peer_name"),
1544 &tmp)) {
1545 return false;
1546 }
1547
1548 memcpy(&nc->ss, tmp.data, sizeof(nc->ss));
1549 nc->name = (const char *)tmp.data + sizeof(nc->ss);
1550 return true;
1551 }
1552
1553 /*******************************************************************
1554 Save a name/addr pair.
1555 ******************************************************************/
1556
1557 static void store_nc(const struct name_addr_pair *nc)
1558 {
1559 DATA_BLOB tmp;
1560 size_t namelen = strlen(nc->name);
1561
1562 tmp = data_blob(NULL, sizeof(nc->ss) + namelen + 1);
1563 if (!tmp.data) {
1564 return;
1565 }
1566 memcpy(tmp.data, &nc->ss, sizeof(nc->ss));
1567 memcpy(tmp.data+sizeof(nc->ss), nc->name, namelen+1);
1568
1569 memcache_add(NULL, SINGLETON_CACHE,
1570 data_blob_string_const_null("get_peer_name"),
1571 tmp);
1572 data_blob_free(&tmp);
1573 }
1574
1575 /*******************************************************************
1576 Return the DNS name of the remote end of a socket.
1577 ******************************************************************/
1578
1579 const char *get_peer_name(int fd, bool force_lookup)
1580 {
1581 struct name_addr_pair nc;
1582 char addr_buf[INET6_ADDRSTRLEN];
1583 struct sockaddr_storage ss;
1584 socklen_t length = sizeof(ss);
1585 const char *p;
1586 int ret;
1587 char name_buf[MAX_DNS_NAME_LENGTH];
1588 char tmp_name[MAX_DNS_NAME_LENGTH];
1589
1590 /* reverse lookups can be *very* expensive, and in many
1591 situations won't work because many networks don't link dhcp
1592 with dns. To avoid the delay we avoid the lookup if
1593 possible */
1594 if (!lp_hostname_lookups() && (force_lookup == false)) {
1595 length = sizeof(nc.ss);
1596 nc.name = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf),
1597 (struct sockaddr *)&nc.ss, &length);
1598 store_nc(&nc);
1599 lookup_nc(&nc);
1600 return nc.name ? nc.name : "UNKNOWN";
1601 }
1602
1603 lookup_nc(&nc);
1604
1605 memset(&ss, '\0', sizeof(ss));
1606 p = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf), (struct sockaddr *)&ss, &length);
1607
1608 /* it might be the same as the last one - save some DNS work */
1609 if (sockaddr_equal((struct sockaddr *)&ss, (struct sockaddr *)&nc.ss)) {
1610 return nc.name ? nc.name : "UNKNOWN";
1611 }
1612
1613 /* Not the same. We need to lookup. */
1614 if (fd == -1) {
1615 return "UNKNOWN";
1616 }
1617
1618 /* Look up the remote host name. */
1619 ret = sys_getnameinfo((struct sockaddr *)&ss,
1620 length,
1621 name_buf,
1622 sizeof(name_buf),
1623 NULL,
1624 0,
1625 0);
1626
1627 if (ret) {
1628 DEBUG(1,("get_peer_name: getnameinfo failed "
1629 "for %s with error %s\n",
1630 p,
1631 gai_strerror(ret)));
1632 strlcpy(name_buf, p, sizeof(name_buf));
1633 } else {
1634 if (!matchname(name_buf, (struct sockaddr *)&ss, length)) {
1635 DEBUG(0,("Matchname failed on %s %s\n",name_buf,p));
1636 strlcpy(name_buf,"UNKNOWN",sizeof(name_buf));
1637 }
1638 }
1639
1640 /* can't pass the same source and dest strings in when you
1641 use --enable-developer or the clobber_region() call will
1642 get you */
1643
1644 strlcpy(tmp_name, name_buf, sizeof(tmp_name));
1645 alpha_strcpy(name_buf, tmp_name, "_-.", sizeof(name_buf));
1646 if (strstr(name_buf,"..")) {
1647 strlcpy(name_buf, "UNKNOWN", sizeof(name_buf));
1648 }
1649
1650 nc.name = name_buf;
1651 nc.ss = ss;
1652
1653 store_nc(&nc);
1654 lookup_nc(&nc);
1655 return nc.name ? nc.name : "UNKNOWN";
1656 }
1657
1658 /*******************************************************************
1659 Return the IP addr of the remote end of a socket as a string.
1660 ******************************************************************/
1661
1662 const char *get_peer_addr(int fd, char *addr, size_t addr_len)
1663 {
1664 return get_peer_addr_internal(fd, addr, addr_len, NULL, NULL);
1665 }
1666
1667 /*******************************************************************
1668 Create protected unix domain socket.
1669
1670 Some unixes cannot set permissions on a ux-dom-sock, so we
1671 have to make sure that the directory contains the protection
1672 permissions instead.
1673 ******************************************************************/
1674
1675 int create_pipe_sock(const char *socket_dir,
1676 const char *socket_name,
1677 mode_t dir_perms)
1678 {
1679 #ifdef HAVE_UNIXSOCKET
1680 struct sockaddr_un sunaddr;
1681 struct stat st;
1682 int sock;
1683 mode_t old_umask;
1684 char *path = NULL;
1685
1686 old_umask = umask(0);
1687
1688 /* Create the socket directory or reuse the existing one */
1689
1690 if (lstat(socket_dir, &st) == -1) {
1691 if (errno == ENOENT) {
1692 /* Create directory */
1693 if (mkdir(socket_dir, dir_perms) == -1) {
1694 DEBUG(0, ("error creating socket directory "
1695 "%s: %s\n", socket_dir,
1696 strerror(errno)));
1697 goto out_umask;
1698 }
1699 } else {
1700 DEBUG(0, ("lstat failed on socket directory %s: %s\n",
1701 socket_dir, strerror(errno)));
1702 goto out_umask;
1703 }
1704 } else {
1705 /* Check ownership and permission on existing directory */
1706 if (!S_ISDIR(st.st_mode)) {
1707 DEBUG(0, ("socket directory %s isn't a directory\n",
1708 socket_dir));
1709 goto out_umask;
1710 }
1711 if ((st.st_uid != sec_initial_uid()) ||
1712 ((st.st_mode & 0777) != dir_perms)) {
1713 DEBUG(0, ("invalid permissions on socket directory "
1714 "%s\n", socket_dir));
1715 goto out_umask;
1716 }
1717 }
1718
1719 /* Create the socket file */
1720
1721 sock = socket(AF_UNIX, SOCK_STREAM, 0);
1722
1723 if (sock == -1) {
1724 DEBUG(0, ("create_pipe_sock: socket error %s\n",
1725 strerror(errno) ));
1726 goto out_close;
1727 }
1728
1729 if (asprintf(&path, "%s/%s", socket_dir, socket_name) == -1) {
1730 goto out_close;
1731 }
1732
1733 unlink(path);
1734 memset(&sunaddr, 0, sizeof(sunaddr));
1735 sunaddr.sun_family = AF_UNIX;
1736 strlcpy(sunaddr.sun_path, path, sizeof(sunaddr.sun_path));
1737
1738 if (bind(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) == -1) {
1739 DEBUG(0, ("bind failed on pipe socket %s: %s\n", path,
1740 strerror(errno)));
1741 goto out_close;
1742 }
1743
1744 if (listen(sock, 5) == -1) {
1745 DEBUG(0, ("listen failed on pipe socket %s: %s\n", path,
1746 strerror(errno)));
1747 goto out_close;
1748 }
1749
1750 SAFE_FREE(path);
1751
1752 umask(old_umask);
1753 return sock;
1754
1755 out_close:
1756 SAFE_FREE(path);
1757 if (sock != -1)
1758 close(sock);
1759
1760 out_umask:
1761 umask(old_umask);
1762 return -1;
1763
1764 #else
1765 DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
1766 return -1;
1767 #endif /* HAVE_UNIXSOCKET */
1768 }
1769
1770 /****************************************************************************
1771 Get my own canonical name, including domain.
1772 ****************************************************************************/
1773
1774 const char *get_mydnsfullname(void)
1775 {
1776 struct addrinfo *res = NULL;
1777 char my_hostname[HOST_NAME_MAX];
1778 bool ret;
1779 DATA_BLOB tmp;
1780
1781 if (memcache_lookup(NULL, SINGLETON_CACHE,
1782 data_blob_string_const_null("get_mydnsfullname"),
1783 &tmp)) {
1784 SMB_ASSERT(tmp.length > 0);
1785 return (const char *)tmp.data;
1786 }
1787
1788 /* get my host name */
1789 if (gethostname(my_hostname, sizeof(my_hostname)) == -1) {
1790 DEBUG(0,("get_mydnsfullname: gethostname failed\n"));
1791 return NULL;
1792 }
1793
1794 /* Ensure null termination. */
1795 my_hostname[sizeof(my_hostname)-1] = '\0';
1796
1797 ret = interpret_string_addr_internal(&res,
1798 my_hostname,
1799 AI_ADDRCONFIG|AI_CANONNAME);
1800
1801 if (!ret || res == NULL) {
1802 DEBUG(3,("get_mydnsfullname: getaddrinfo failed for "
1803 "name %s [%s]\n",
1804 my_hostname,
1805 gai_strerror(ret) ));
1806 return NULL;
1807 }
1808
1809 /*
1810 * Make sure that getaddrinfo() returns the "correct" host name.
1811 */
1812
1813 if (res->ai_canonname == NULL) {
1814 DEBUG(3,("get_mydnsfullname: failed to get "
1815 "canonical name for %s\n",
1816 my_hostname));
1817 freeaddrinfo(res);
1818 return NULL;
1819 }
1820
1821 /* This copies the data, so we must do a lookup
1822 * afterwards to find the value to return.
1823 */
1824
1825 memcache_add(NULL, SINGLETON_CACHE,
1826 data_blob_string_const_null("get_mydnsfullname"),
1827 data_blob_string_const_null(res->ai_canonname));
1828
1829 if (!memcache_lookup(NULL, SINGLETON_CACHE,
1830 data_blob_string_const_null("get_mydnsfullname"),
1831 &tmp)) {
1832 tmp = data_blob_talloc(talloc_tos(), res->ai_canonname,
1833 strlen(res->ai_canonname) + 1);
1834 }
1835
1836 freeaddrinfo(res);
1837
1838 return (const char *)tmp.data;
1839 }
1840
1841 /************************************************************
1842 Is this my ip address ?
1843 ************************************************************/
1844
1845 static bool is_my_ipaddr(const char *ipaddr_str)
1846 {
1847 struct sockaddr_storage ss;
1848 struct iface_struct *nics;
1849 int i, n;
1850
1851 if (!interpret_string_addr(&ss, ipaddr_str, AI_NUMERICHOST)) {
1852 return false;
1853 }
1854
1855 if (ismyaddr((struct sockaddr *)&ss)) {
1856 return true;
1857 }
1858
1859 if (is_zero_addr((struct sockaddr *)&ss) ||
1860 is_loopback_addr((struct sockaddr *)&ss)) {
1861 return false;
1862 }
1863
1864 n = get_interfaces(talloc_tos(), &nics);
1865 for (i=0; i<n; i++) {
1866 if (sockaddr_equal((struct sockaddr *)&nics[i].ip, (struct sockaddr *)&ss)) {
1867 TALLOC_FREE(nics);
1868 return true;
1869 }
1870 }
1871 TALLOC_FREE(nics);
1872 return false;
1873 }
1874
1875 /************************************************************
1876 Is this my name ?
1877 ************************************************************/
1878
1879 bool is_myname_or_ipaddr(const char *s)
1880 {
1881 TALLOC_CTX *ctx = talloc_tos();
1882 char *name = NULL;
1883 const char *dnsname;
1884 char *servername = NULL;
1885
1886 if (!s) {
1887 return false;
1888 }
1889
1890 /* Santize the string from '\\name' */
1891 name = talloc_strdup(ctx, s);
1892 if (!name) {
1893 return false;
1894 }
1895
1896 servername = strrchr_m(name, '\\' );
1897 if (!servername) {
1898 servername = name;
1899 } else {
1900 servername++;
1901 }
1902
1903 /* Optimize for the common case */
1904 if (strequal(servername, global_myname())) {
1905 return true;
1906 }
1907
1908 /* Check for an alias */
1909 if (is_myname(servername)) {
1910 return true;
1911 }
1912
1913 /* Check for loopback */
1914 if (strequal(servername, "127.0.0.1") ||
1915 strequal(servername, "::1")) {
1916 return true;
1917 }
1918
1919 if (strequal(servername, "localhost")) {
1920 return true;
1921 }
1922
1923 /* Maybe it's my dns name */
1924 dnsname = get_mydnsfullname();
1925 if (dnsname && strequal(servername, dnsname)) {
1926 return true;
1927 }
1928
1929 /* Handle possible CNAME records - convert to an IP addr. list. */
1930 if (!is_ipaddress(servername)) {
1931 /* Use DNS to resolve the name, check all addresses. */
1932 struct addrinfo *p = NULL;
1933 struct addrinfo *res = NULL;
1934
1935 if (!interpret_string_addr_internal(&res,
1936 servername,
1937 AI_ADDRCONFIG)) {
1938 return false;
1939 }
1940
1941 for (p = res; p; p = p->ai_next) {
1942 char addr[INET6_ADDRSTRLEN];
1943 struct sockaddr_storage ss;
1944
1945 ZERO_STRUCT(ss);
1946 memcpy(&ss, p->ai_addr, p->ai_addrlen);
1947 print_sockaddr(addr,
1948 sizeof(addr),
1949 &ss);
1950 if (is_my_ipaddr(addr)) {
1951 freeaddrinfo(res);
1952 return true;
1953 }
1954 }
1955 freeaddrinfo(res);
1956 }
1957
1958 /* Maybe its an IP address? */
1959 if (is_ipaddress(servername)) {
1960 return is_my_ipaddr(servername);
1961 }
1962
1963 /* No match */
1964 return false;
1965 }
1966
1967 struct getaddrinfo_state {
1968 const char *node;
1969 const char *service;
1970 const struct addrinfo *hints;
1971 struct addrinfo *res;
1972 int ret;
1973 };
1974
1975 static void getaddrinfo_do(void *private_data);
1976 static void getaddrinfo_done(struct tevent_req *subreq);
1977
1978 struct tevent_req *getaddrinfo_send(TALLOC_CTX *mem_ctx,
1979 struct tevent_context *ev,
1980 struct fncall_context *ctx,
1981 const char *node,
1982 const char *service,
1983 const struct addrinfo *hints)
1984 {
1985 struct tevent_req *req, *subreq;
1986 struct getaddrinfo_state *state;
1987
1988 req = tevent_req_create(mem_ctx, &state, struct getaddrinfo_state);
1989 if (req == NULL) {
1990 return NULL;
1991 }
1992
1993 state->node = node;
1994 state->service = service;
1995 state->hints = hints;
1996
1997 subreq = fncall_send(state, ev, ctx, getaddrinfo_do, state);
1998 if (tevent_req_nomem(subreq, req)) {
1999 return tevent_req_post(req, ev);
2000 }
2001 tevent_req_set_callback(subreq, getaddrinfo_done, req);
2002 return req;
2003 }
2004
2005 static void getaddrinfo_do(void *private_data)
2006 {
2007 struct getaddrinfo_state *state =
2008 (struct getaddrinfo_state *)private_data;
2009
2010 state->ret = getaddrinfo(state->node, state->service, state->hints,
2011 &state->res);
2012 }
2013
2014 static void getaddrinfo_done(struct tevent_req *subreq)
2015 {
2016 struct tevent_req *req = tevent_req_callback_data(
2017 subreq, struct tevent_req);
2018 int ret, err;
2019
2020 ret = fncall_recv(subreq, &err);
2021 TALLOC_FREE(subreq);
2022 if (ret == -1) {
2023 tevent_req_error(req, err);
2024 return;
2025 }
2026 tevent_req_done(req);
2027 }
2028
2029 int getaddrinfo_recv(struct tevent_req *req, struct addrinfo **res)
2030 {
2031 struct getaddrinfo_state *state = tevent_req_data(
2032 req, struct getaddrinfo_state);
2033 int err;
2034
2035 if (tevent_req_is_unix_error(req, &err)) {
2036 switch(err) {
2037 case ENOMEM:
2038 return EAI_MEMORY;
2039 default:
2040 return EAI_FAIL;
2041 }
2042 }
2043 if (state->ret == 0) {
2044 *res = state->res;
2045 }
2046 return state->ret;
2047 }
Samba GIT mirror