net/slirp.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24
  25 #include "qemu/osdep.h"
  26 #include "qemu/log.h"
  27 #include "net/slirp.h"
  28
  29
  30 #ifndef _WIN32
  31 #include <pwd.h>
  32 #include <sys/wait.h>
  33 #endif
  34 #include "net/net.h"
  35 #include "clients.h"
  36 #include "hub.h"
  37 #include "monitor/monitor.h"
  38 #include "qemu/error-report.h"
  39 #include "qemu/sockets.h"
  40 #include "slirp/libslirp.h"
  41 #include "chardev/char-fe.h"
  42 #include "sysemu/sysemu.h"
  43 #include "qemu/cutils.h"
  44 #include "qapi/error.h"
  45 #include "qapi/qmp/qdict.h"
  46 #include "util.h"
  47
  48 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
  49 {
  50     const char *p, *p1;
  51     int len;
  52     p = *pp;
  53     p1 = strchr(p, sep);
  54     if (!p1)
  55         return -1;
  56     len = p1 - p;
  57     p1++;
  58     if (buf_size > 0) {
  59         if (len > buf_size - 1)
  60             len = buf_size - 1;
  61         memcpy(buf, p, len);
  62         buf[len] = '\0';
  63     }
  64     *pp = p1;
  65     return 0;
  66 }
  67
  68 /* slirp network adapter */
  69
  70 #define SLIRP_CFG_HOSTFWD 1
  71
  72 struct slirp_config_str {
  73     struct slirp_config_str *next;
  74     int flags;
  75     char str[1024];
  76 };
  77
  78 struct GuestFwd {
  79     CharBackend hd;
  80     struct in_addr server;
  81     int port;
  82     Slirp *slirp;
  83 };
  84
  85 typedef struct SlirpState {
  86     NetClientState nc;
  87     QTAILQ_ENTRY(SlirpState) entry;
  88     Slirp *slirp;
  89     Notifier poll_notifier;
  90     Notifier exit_notifier;
  91 #ifndef _WIN32
  92     gchar *smb_dir;
  93 #endif
  94     GSList *fwd;
  95 } SlirpState;
  96
  97 static struct slirp_config_str *slirp_configs;
  98 static QTAILQ_HEAD(, SlirpState) slirp_stacks =
  99     QTAILQ_HEAD_INITIALIZER(slirp_stacks);
 100
 101 static int slirp_hostfwd(SlirpState *s, const char *redir_str, Error **errp);
 102 static int slirp_guestfwd(SlirpState *s, const char *config_str, Error **errp);
 103
 104 #ifndef _WIN32
 105 static int slirp_smb(SlirpState *s, const char *exported_dir,
 106                      struct in_addr vserver_addr, Error **errp);
 107 static void slirp_smb_cleanup(SlirpState *s);
 108 #else
 109 static inline void slirp_smb_cleanup(SlirpState *s) { }
 110 #endif
 111
 112 static ssize_t net_slirp_send_packet(const void *pkt, size_t pkt_len,
 113                                      void *opaque)
 114 {
 115     SlirpState *s = opaque;
 116
 117     return qemu_send_packet(&s->nc, pkt, pkt_len);
 118 }
 119
 120 static ssize_t net_slirp_receive(NetClientState *nc, const uint8_t *buf, size_t size)
 121 {
 122     SlirpState *s = DO_UPCAST(SlirpState, nc, nc);
 123
 124     slirp_input(s->slirp, buf, size);
 125
 126     return size;
 127 }
 128
 129 static void slirp_smb_exit(Notifier *n, void *data)
 130 {
 131     SlirpState *s = container_of(n, SlirpState, exit_notifier);
 132     slirp_smb_cleanup(s);
 133 }
 134
 135 static void slirp_free_fwd(gpointer data)
 136 {
 137     struct GuestFwd *fwd = data;
 138
 139     qemu_chr_fe_deinit(&fwd->hd, true);
 140     g_free(data);
 141 }
 142
 143 static void net_slirp_cleanup(NetClientState *nc)
 144 {
 145     SlirpState *s = DO_UPCAST(SlirpState, nc, nc);
 146
 147     g_slist_free_full(s->fwd, slirp_free_fwd);
 148     main_loop_poll_remove_notifier(&s->poll_notifier);
 149     slirp_cleanup(s->slirp);
 150     if (s->exit_notifier.notify) {
 151         qemu_remove_exit_notifier(&s->exit_notifier);
 152     }
 153     slirp_smb_cleanup(s);
 154     QTAILQ_REMOVE(&slirp_stacks, s, entry);
 155 }
 156
 157 static NetClientInfo net_slirp_info = {
 158     .type = NET_CLIENT_DRIVER_USER,
 159     .size = sizeof(SlirpState),
 160     .receive = net_slirp_receive,
 161     .cleanup = net_slirp_cleanup,
 162 };
 163
 164 static void net_slirp_guest_error(const char *msg)
 165 {
 166     qemu_log_mask(LOG_GUEST_ERROR, "%s", msg);
 167 }
 168
 169 static int64_t net_slirp_clock_get_ns(void)
 170 {
 171     return qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
 172 }
 173
 174 static void *net_slirp_timer_new(SlirpTimerCb cb, void *opaque)
 175 {
 176     return timer_new_full(NULL, QEMU_CLOCK_VIRTUAL,
 177                           SCALE_MS, QEMU_TIMER_ATTR_EXTERNAL,
 178                           cb, opaque);
 179 }
 180
 181 static void net_slirp_timer_free(void *timer)
 182 {
 183     timer_del(timer);
 184     timer_free(timer);
 185 }
 186
 187 static void net_slirp_timer_mod(void *timer, int64_t expire_timer)
 188 {
 189     timer_mod(timer, expire_timer);
 190 }
 191
 192 static void net_slirp_register_poll_fd(int fd)
 193 {
 194     qemu_fd_register(fd);
 195 }
 196
 197 static void net_slirp_unregister_poll_fd(int fd)
 198 {
 199     /* no qemu_fd_unregister */
 200 }
 201
 202 static const SlirpCb slirp_cb = {
 203     .send_packet = net_slirp_send_packet,
 204     .guest_error = net_slirp_guest_error,
 205     .clock_get_ns = net_slirp_clock_get_ns,
 206     .timer_new = net_slirp_timer_new,
 207     .timer_free = net_slirp_timer_free,
 208     .timer_mod = net_slirp_timer_mod,
 209     .register_poll_fd = net_slirp_register_poll_fd,
 210     .unregister_poll_fd = net_slirp_unregister_poll_fd,
 211     .notify = qemu_notify_event,
 212 };
 213
 214 static int slirp_poll_to_gio(int events)
 215 {
 216     int ret = 0;
 217
 218     if (events & SLIRP_POLL_IN) {
 219         ret |= G_IO_IN;
 220     }
 221     if (events & SLIRP_POLL_OUT) {
 222         ret |= G_IO_OUT;
 223     }
 224     if (events & SLIRP_POLL_PRI) {
 225         ret |= G_IO_PRI;
 226     }
 227     if (events & SLIRP_POLL_ERR) {
 228         ret |= G_IO_ERR;
 229     }
 230     if (events & SLIRP_POLL_HUP) {
 231         ret |= G_IO_HUP;
 232     }
 233
 234     return ret;
 235 }
 236
 237 static int net_slirp_add_poll(int fd, int events, void *opaque)
 238 {
 239     GArray *pollfds = opaque;
 240     GPollFD pfd = {
 241         .fd = fd,
 242         .events = slirp_poll_to_gio(events),
 243     };
 244     int idx = pollfds->len;
 245     g_array_append_val(pollfds, pfd);
 246     return idx;
 247 }
 248
 249 static int slirp_gio_to_poll(int events)
 250 {
 251     int ret = 0;
 252
 253     if (events & G_IO_IN) {
 254         ret |= SLIRP_POLL_IN;
 255     }
 256     if (events & G_IO_OUT) {
 257         ret |= SLIRP_POLL_OUT;
 258     }
 259     if (events & G_IO_PRI) {
 260         ret |= SLIRP_POLL_PRI;
 261     }
 262     if (events & G_IO_ERR) {
 263         ret |= SLIRP_POLL_ERR;
 264     }
 265     if (events & G_IO_HUP) {
 266         ret |= SLIRP_POLL_HUP;
 267     }
 268
 269     return ret;
 270 }
 271
 272 static int net_slirp_get_revents(int idx, void *opaque)
 273 {
 274     GArray *pollfds = opaque;
 275
 276     return slirp_gio_to_poll(g_array_index(pollfds, GPollFD, idx).revents);
 277 }
 278
 279 static void net_slirp_poll_notify(Notifier *notifier, void *data)
 280 {
 281     MainLoopPoll *poll = data;
 282     SlirpState *s = container_of(notifier, SlirpState, poll_notifier);
 283
 284     switch (poll->state) {
 285     case MAIN_LOOP_POLL_FILL:
 286         slirp_pollfds_fill(s->slirp, &poll->timeout,
 287                            net_slirp_add_poll, poll->pollfds);
 288         break;
 289     case MAIN_LOOP_POLL_OK:
 290     case MAIN_LOOP_POLL_ERR:
 291         slirp_pollfds_poll(s->slirp, poll->state == MAIN_LOOP_POLL_ERR,
 292                            net_slirp_get_revents, poll->pollfds);
 293         break;
 294     default:
 295         g_assert_not_reached();
 296     }
 297 }
 298
 299 static int net_slirp_init(NetClientState *peer, const char *model,
 300                           const char *name, int restricted,
 301                           bool ipv4, const char *vnetwork, const char *vhost,
 302                           bool ipv6, const char *vprefix6, int vprefix6_len,
 303                           const char *vhost6,
 304                           const char *vhostname, const char *tftp_export,
 305                           const char *bootfile, const char *vdhcp_start,
 306                           const char *vnameserver, const char *vnameserver6,
 307                           const char *smb_export, const char *vsmbserver,
 308                           const char **dnssearch, const char *vdomainname,
 309                           const char *tftp_server_name,
 310                           Error **errp)
 311 {
 312     /* default settings according to historic slirp */
 313     struct in_addr net  = { .s_addr = htonl(0x0a000200) }; /* 10.0.2.0 */
 314     struct in_addr mask = { .s_addr = htonl(0xffffff00) }; /* 255.255.255.0 */
 315     struct in_addr host = { .s_addr = htonl(0x0a000202) }; /* 10.0.2.2 */
 316     struct in_addr dhcp = { .s_addr = htonl(0x0a00020f) }; /* 10.0.2.15 */
 317     struct in_addr dns  = { .s_addr = htonl(0x0a000203) }; /* 10.0.2.3 */
 318     struct in6_addr ip6_prefix;
 319     struct in6_addr ip6_host;
 320     struct in6_addr ip6_dns;
 321 #ifndef _WIN32
 322     struct in_addr smbsrv = { .s_addr = 0 };
 323 #endif
 324     NetClientState *nc;
 325     SlirpState *s;
 326     char buf[20];
 327     uint32_t addr;
 328     int shift;
 329     char *end;
 330     struct slirp_config_str *config;
 331
 332     if (!ipv4 && (vnetwork || vhost || vnameserver)) {
 333         error_setg(errp, "IPv4 disabled but netmask/host/dns provided");
 334         return -1;
 335     }
 336
 337     if (!ipv6 && (vprefix6 || vhost6 || vnameserver6)) {
 338         error_setg(errp, "IPv6 disabled but prefix/host6/dns6 provided");
 339         return -1;
 340     }
 341
 342     if (!ipv4 && !ipv6) {
 343         /* It doesn't make sense to disable both */
 344         error_setg(errp, "IPv4 and IPv6 disabled");
 345         return -1;
 346     }
 347
 348     if (vnetwork) {
 349         if (get_str_sep(buf, sizeof(buf), &vnetwork, '/') < 0) {
 350             if (!inet_aton(vnetwork, &net)) {
 351                 error_setg(errp, "Failed to parse netmask");
 352                 return -1;
 353             }
 354             addr = ntohl(net.s_addr);
 355             if (!(addr & 0x80000000)) {
 356                 mask.s_addr = htonl(0xff000000); /* class A */
 357             } else if ((addr & 0xfff00000) == 0xac100000) {
 358                 mask.s_addr = htonl(0xfff00000); /* priv. 172.16.0.0/12 */
 359             } else if ((addr & 0xc0000000) == 0x80000000) {
 360                 mask.s_addr = htonl(0xffff0000); /* class B */
 361             } else if ((addr & 0xffff0000) == 0xc0a80000) {
 362                 mask.s_addr = htonl(0xffff0000); /* priv. 192.168.0.0/16 */
 363             } else if ((addr & 0xffff0000) == 0xc6120000) {
 364                 mask.s_addr = htonl(0xfffe0000); /* tests 198.18.0.0/15 */
 365             } else if ((addr & 0xe0000000) == 0xe0000000) {
 366                 mask.s_addr = htonl(0xffffff00); /* class C */
 367             } else {
 368                 mask.s_addr = htonl(0xfffffff0); /* multicast/reserved */
 369             }
 370         } else {
 371             if (!inet_aton(buf, &net)) {
 372                 error_setg(errp, "Failed to parse netmask");
 373                 return -1;
 374             }
 375             shift = strtol(vnetwork, &end, 10);
 376             if (*end != '\0') {
 377                 if (!inet_aton(vnetwork, &mask)) {
 378                     error_setg(errp,
 379                                "Failed to parse netmask (trailing chars)");
 380                     return -1;
 381                 }
 382             } else if (shift < 4 || shift > 32) {
 383                 error_setg(errp,
 384                            "Invalid netmask provided (must be in range 4-32)");
 385                 return -1;
 386             } else {
 387                 mask.s_addr = htonl(0xffffffff << (32 - shift));
 388             }
 389         }
 390         net.s_addr &= mask.s_addr;
 391         host.s_addr = net.s_addr | (htonl(0x0202) & ~mask.s_addr);
 392         dhcp.s_addr = net.s_addr | (htonl(0x020f) & ~mask.s_addr);
 393         dns.s_addr  = net.s_addr | (htonl(0x0203) & ~mask.s_addr);
 394     }
 395
 396     if (vhost && !inet_aton(vhost, &host)) {
 397         error_setg(errp, "Failed to parse host");
 398         return -1;
 399     }
 400     if ((host.s_addr & mask.s_addr) != net.s_addr) {
 401         error_setg(errp, "Host doesn't belong to network");
 402         return -1;
 403     }
 404
 405     if (vnameserver && !inet_aton(vnameserver, &dns)) {
 406         error_setg(errp, "Failed to parse DNS");
 407         return -1;
 408     }
 409     if ((dns.s_addr & mask.s_addr) != net.s_addr) {
 410         error_setg(errp, "DNS doesn't belong to network");
 411         return -1;
 412     }
 413     if (dns.s_addr == host.s_addr) {
 414         error_setg(errp, "DNS must be different from host");
 415         return -1;
 416     }
 417
 418     if (vdhcp_start && !inet_aton(vdhcp_start, &dhcp)) {
 419         error_setg(errp, "Failed to parse DHCP start address");
 420         return -1;
 421     }
 422     if ((dhcp.s_addr & mask.s_addr) != net.s_addr) {
 423         error_setg(errp, "DHCP doesn't belong to network");
 424         return -1;
 425     }
 426     if (dhcp.s_addr == host.s_addr || dhcp.s_addr == dns.s_addr) {
 427         error_setg(errp, "DNS must be different from host and DNS");
 428         return -1;
 429     }
 430
 431 #ifndef _WIN32
 432     if (vsmbserver && !inet_aton(vsmbserver, &smbsrv)) {
 433         error_setg(errp, "Failed to parse SMB address");
 434         return -1;
 435     }
 436 #endif
 437
 438     if (!vprefix6) {
 439         vprefix6 = "fec0::";
 440     }
 441     if (!inet_pton(AF_INET6, vprefix6, &ip6_prefix)) {
 442         error_setg(errp, "Failed to parse IPv6 prefix");
 443         return -1;
 444     }
 445
 446     if (!vprefix6_len) {
 447         vprefix6_len = 64;
 448     }
 449     if (vprefix6_len < 0 || vprefix6_len > 126) {
 450         error_setg(errp,
 451                    "Invalid prefix provided (prefix len must be in range 0-126");
 452         return -1;
 453     }
 454
 455     if (vhost6) {
 456         if (!inet_pton(AF_INET6, vhost6, &ip6_host)) {
 457             error_setg(errp, "Failed to parse IPv6 host");
 458             return -1;
 459         }
 460         if (!in6_equal_net(&ip6_prefix, &ip6_host, vprefix6_len)) {
 461             error_setg(errp, "IPv6 Host doesn't belong to network");
 462             return -1;
 463         }
 464     } else {
 465         ip6_host = ip6_prefix;
 466         ip6_host.s6_addr[15] |= 2;
 467     }
 468
 469     if (vnameserver6) {
 470         if (!inet_pton(AF_INET6, vnameserver6, &ip6_dns)) {
 471             error_setg(errp, "Failed to parse IPv6 DNS");
 472             return -1;
 473         }
 474         if (!in6_equal_net(&ip6_prefix, &ip6_dns, vprefix6_len)) {
 475             error_setg(errp, "IPv6 DNS doesn't belong to network");
 476             return -1;
 477         }
 478     } else {
 479         ip6_dns = ip6_prefix;
 480         ip6_dns.s6_addr[15] |= 3;
 481     }
 482
 483     if (vdomainname && !*vdomainname) {
 484         error_setg(errp, "'domainname' parameter cannot be empty");
 485         return -1;
 486     }
 487
 488     if (vdomainname && strlen(vdomainname) > 255) {
 489         error_setg(errp, "'domainname' parameter cannot exceed 255 bytes");
 490         return -1;
 491     }
 492
 493     if (vhostname && strlen(vhostname) > 255) {
 494         error_setg(errp, "'vhostname' parameter cannot exceed 255 bytes");
 495         return -1;
 496     }
 497
 498     if (tftp_server_name && strlen(tftp_server_name) > 255) {
 499         error_setg(errp, "'tftp-server-name' parameter cannot exceed 255 bytes");
 500         return -1;
 501     }
 502
 503     nc = qemu_new_net_client(&net_slirp_info, peer, model, name);
 504
 505     snprintf(nc->info_str, sizeof(nc->info_str),
 506              "net=%s,restrict=%s", inet_ntoa(net),
 507              restricted ? "on" : "off");
 508
 509     s = DO_UPCAST(SlirpState, nc, nc);
 510
 511     s->slirp = slirp_init(restricted, ipv4, net, mask, host,
 512                           ipv6, ip6_prefix, vprefix6_len, ip6_host,
 513                           vhostname, tftp_server_name,
 514                           tftp_export, bootfile, dhcp,
 515                           dns, ip6_dns, dnssearch, vdomainname,
 516                           &slirp_cb, s);
 517     QTAILQ_INSERT_TAIL(&slirp_stacks, s, entry);
 518
 519     s->poll_notifier.notify = net_slirp_poll_notify;
 520     main_loop_poll_add_notifier(&s->poll_notifier);
 521
 522     for (config = slirp_configs; config; config = config->next) {
 523         if (config->flags & SLIRP_CFG_HOSTFWD) {
 524             if (slirp_hostfwd(s, config->str, errp) < 0) {
 525                 goto error;
 526             }
 527         } else {
 528             if (slirp_guestfwd(s, config->str, errp) < 0) {
 529                 goto error;
 530             }
 531         }
 532     }
 533 #ifndef _WIN32
 534     if (smb_export) {
 535         if (slirp_smb(s, smb_export, smbsrv, errp) < 0) {
 536             goto error;
 537         }
 538     }
 539 #endif
 540
 541     s->exit_notifier.notify = slirp_smb_exit;
 542     qemu_add_exit_notifier(&s->exit_notifier);
 543     return 0;
 544
 545 error:
 546     qemu_del_net_client(nc);
 547     return -1;
 548 }
 549
 550 static SlirpState *slirp_lookup(Monitor *mon, const char *hub_id,
 551                                 const char *name)
 552 {
 553     if (name) {
 554         NetClientState *nc;
 555         if (hub_id) {
 556             nc = net_hub_find_client_by_name(strtol(hub_id, NULL, 0), name);
 557             if (!nc) {
 558                 monitor_printf(mon, "unrecognized (hub-id, stackname) pair\n");
 559                 return NULL;
 560             }
 561             warn_report("Using 'hub-id' is deprecated, specify the netdev id "
 562                         "directly instead");
 563         } else {
 564             nc = qemu_find_netdev(name);
 565             if (!nc) {
 566                 monitor_printf(mon, "unrecognized netdev id '%s'\n", name);
 567                 return NULL;
 568             }
 569         }
 570         if (strcmp(nc->model, "user")) {
 571             monitor_printf(mon, "invalid device specified\n");
 572             return NULL;
 573         }
 574         return DO_UPCAST(SlirpState, nc, nc);
 575     } else {
 576         if (QTAILQ_EMPTY(&slirp_stacks)) {
 577             monitor_printf(mon, "user mode network stack not in use\n");
 578             return NULL;
 579         }
 580         return QTAILQ_FIRST(&slirp_stacks);
 581     }
 582 }
 583
 584 void hmp_hostfwd_remove(Monitor *mon, const QDict *qdict)
 585 {
 586     struct in_addr host_addr = { .s_addr = INADDR_ANY };
 587     int host_port;
 588     char buf[256];
 589     const char *src_str, *p;
 590     SlirpState *s;
 591     int is_udp = 0;
 592     int err;
 593     const char *arg1 = qdict_get_str(qdict, "arg1");
 594     const char *arg2 = qdict_get_try_str(qdict, "arg2");
 595     const char *arg3 = qdict_get_try_str(qdict, "arg3");
 596
 597     if (arg3) {
 598         s = slirp_lookup(mon, arg1, arg2);
 599         src_str = arg3;
 600     } else if (arg2) {
 601         s = slirp_lookup(mon, NULL, arg1);
 602         src_str = arg2;
 603     } else {
 604         s = slirp_lookup(mon, NULL, NULL);
 605         src_str = arg1;
 606     }
 607     if (!s) {
 608         return;
 609     }
 610
 611     p = src_str;
 612     if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 613         goto fail_syntax;
 614     }
 615
 616     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 617         is_udp = 0;
 618     } else if (!strcmp(buf, "udp")) {
 619         is_udp = 1;
 620     } else {
 621         goto fail_syntax;
 622     }
 623
 624     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 625         goto fail_syntax;
 626     }
 627     if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
 628         goto fail_syntax;
 629     }
 630
 631     if (qemu_strtoi(p, NULL, 10, &host_port)) {
 632         goto fail_syntax;
 633     }
 634
 635     err = slirp_remove_hostfwd(s->slirp, is_udp, host_addr, host_port);
 636
 637     monitor_printf(mon, "host forwarding rule for %s %s\n", src_str,
 638                    err ? "not found" : "removed");
 639     return;
 640
 641  fail_syntax:
 642     monitor_printf(mon, "invalid format\n");
 643 }
 644
 645 static int slirp_hostfwd(SlirpState *s, const char *redir_str, Error **errp)
 646 {
 647     struct in_addr host_addr = { .s_addr = INADDR_ANY };
 648     struct in_addr guest_addr = { .s_addr = 0 };
 649     int host_port, guest_port;
 650     const char *p;
 651     char buf[256];
 652     int is_udp;
 653     char *end;
 654     const char *fail_reason = "Unknown reason";
 655
 656     p = redir_str;
 657     if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 658         fail_reason = "No : separators";
 659         goto fail_syntax;
 660     }
 661     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 662         is_udp = 0;
 663     } else if (!strcmp(buf, "udp")) {
 664         is_udp = 1;
 665     } else {
 666         fail_reason = "Bad protocol name";
 667         goto fail_syntax;
 668     }
 669
 670     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 671         fail_reason = "Missing : separator";
 672         goto fail_syntax;
 673     }
 674     if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
 675         fail_reason = "Bad host address";
 676         goto fail_syntax;
 677     }
 678
 679     if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
 680         fail_reason = "Bad host port separator";
 681         goto fail_syntax;
 682     }
 683     host_port = strtol(buf, &end, 0);
 684     if (*end != '\0' || host_port < 0 || host_port > 65535) {
 685         fail_reason = "Bad host port";
 686         goto fail_syntax;
 687     }
 688
 689     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 690         fail_reason = "Missing guest address";
 691         goto fail_syntax;
 692     }
 693     if (buf[0] != '\0' && !inet_aton(buf, &guest_addr)) {
 694         fail_reason = "Bad guest address";
 695         goto fail_syntax;
 696     }
 697
 698     guest_port = strtol(p, &end, 0);
 699     if (*end != '\0' || guest_port < 1 || guest_port > 65535) {
 700         fail_reason = "Bad guest port";
 701         goto fail_syntax;
 702     }
 703
 704     if (slirp_add_hostfwd(s->slirp, is_udp, host_addr, host_port, guest_addr,
 705                           guest_port) < 0) {
 706         error_setg(errp, "Could not set up host forwarding rule '%s'",
 707                    redir_str);
 708         return -1;
 709     }
 710     return 0;
 711
 712  fail_syntax:
 713     error_setg(errp, "Invalid host forwarding rule '%s' (%s)", redir_str,
 714                fail_reason);
 715     return -1;
 716 }
 717
 718 void hmp_hostfwd_add(Monitor *mon, const QDict *qdict)
 719 {
 720     const char *redir_str;
 721     SlirpState *s;
 722     const char *arg1 = qdict_get_str(qdict, "arg1");
 723     const char *arg2 = qdict_get_try_str(qdict, "arg2");
 724     const char *arg3 = qdict_get_try_str(qdict, "arg3");
 725
 726     if (arg3) {
 727         s = slirp_lookup(mon, arg1, arg2);
 728         redir_str = arg3;
 729     } else if (arg2) {
 730         s = slirp_lookup(mon, NULL, arg1);
 731         redir_str = arg2;
 732     } else {
 733         s = slirp_lookup(mon, NULL, NULL);
 734         redir_str = arg1;
 735     }
 736     if (s) {
 737         Error *err = NULL;
 738         if (slirp_hostfwd(s, redir_str, &err) < 0) {
 739             error_report_err(err);
 740         }
 741     }
 742
 743 }
 744
 745 #ifndef _WIN32
 746
 747 /* automatic user mode samba server configuration */
 748 static void slirp_smb_cleanup(SlirpState *s)
 749 {
 750     int ret;
 751
 752     if (s->smb_dir) {
 753         gchar *cmd = g_strdup_printf("rm -rf %s", s->smb_dir);
 754         ret = system(cmd);
 755         if (ret == -1 || !WIFEXITED(ret)) {
 756             error_report("'%s' failed.", cmd);
 757         } else if (WEXITSTATUS(ret)) {
 758             error_report("'%s' failed. Error code: %d",
 759                          cmd, WEXITSTATUS(ret));
 760         }
 761         g_free(cmd);
 762         g_free(s->smb_dir);
 763         s->smb_dir = NULL;
 764     }
 765 }
 766
 767 static int slirp_smb(SlirpState* s, const char *exported_dir,
 768                      struct in_addr vserver_addr, Error **errp)
 769 {
 770     char *smb_conf;
 771     char *smb_cmdline;
 772     struct passwd *passwd;
 773     FILE *f;
 774
 775     passwd = getpwuid(geteuid());
 776     if (!passwd) {
 777         error_setg(errp, "Failed to retrieve user name");
 778         return -1;
 779     }
 780
 781     if (access(CONFIG_SMBD_COMMAND, F_OK)) {
 782         error_setg(errp, "Could not find '%s', please install it",
 783                    CONFIG_SMBD_COMMAND);
 784         return -1;
 785     }
 786
 787     if (access(exported_dir, R_OK | X_OK)) {
 788         error_setg(errp, "Error accessing shared directory '%s': %s",
 789                    exported_dir, strerror(errno));
 790         return -1;
 791     }
 792
 793     s->smb_dir = g_dir_make_tmp("qemu-smb.XXXXXX", NULL);
 794     if (!s->smb_dir) {
 795         error_setg(errp, "Could not create samba server dir");
 796         return -1;
 797     }
 798     smb_conf = g_strdup_printf("%s/%s", s->smb_dir, "smb.conf");
 799
 800     f = fopen(smb_conf, "w");
 801     if (!f) {
 802         slirp_smb_cleanup(s);
 803         error_setg(errp,
 804                    "Could not create samba server configuration file '%s'",
 805                     smb_conf);
 806         g_free(smb_conf);
 807         return -1;
 808     }
 809     fprintf(f,
 810             "[global]\n"
 811             "private dir=%s\n"
 812             "interfaces=127.0.0.1\n"
 813             "bind interfaces only=yes\n"
 814             "pid directory=%s\n"
 815             "lock directory=%s\n"
 816             "state directory=%s\n"
 817             "cache directory=%s\n"
 818             "ncalrpc dir=%s/ncalrpc\n"
 819             "log file=%s/log.smbd\n"
 820             "smb passwd file=%s/smbpasswd\n"
 821             "security = user\n"
 822             "map to guest = Bad User\n"
 823             "load printers = no\n"
 824             "printing = bsd\n"
 825             "disable spoolss = yes\n"
 826             "usershare max shares = 0\n"
 827             "[qemu]\n"
 828             "path=%s\n"
 829             "read only=no\n"
 830             "guest ok=yes\n"
 831             "force user=%s\n",
 832             s->smb_dir,
 833             s->smb_dir,
 834             s->smb_dir,
 835             s->smb_dir,
 836             s->smb_dir,
 837             s->smb_dir,
 838             s->smb_dir,
 839             s->smb_dir,
 840             exported_dir,
 841             passwd->pw_name
 842             );
 843     fclose(f);
 844
 845     smb_cmdline = g_strdup_printf("%s -l %s -s %s",
 846              CONFIG_SMBD_COMMAND, s->smb_dir, smb_conf);
 847     g_free(smb_conf);
 848
 849     if (slirp_add_exec(s->slirp, smb_cmdline, &vserver_addr, 139) < 0 ||
 850         slirp_add_exec(s->slirp, smb_cmdline, &vserver_addr, 445) < 0) {
 851         slirp_smb_cleanup(s);
 852         g_free(smb_cmdline);
 853         error_setg(errp, "Conflicting/invalid smbserver address");
 854         return -1;
 855     }
 856     g_free(smb_cmdline);
 857     return 0;
 858 }
 859
 860 #endif /* !defined(_WIN32) */
 861
 862 static int guestfwd_can_read(void *opaque)
 863 {
 864     struct GuestFwd *fwd = opaque;
 865     return slirp_socket_can_recv(fwd->slirp, fwd->server, fwd->port);
 866 }
 867
 868 static void guestfwd_read(void *opaque, const uint8_t *buf, int size)
 869 {
 870     struct GuestFwd *fwd = opaque;
 871     slirp_socket_recv(fwd->slirp, fwd->server, fwd->port, buf, size);
 872 }
 873
 874 static ssize_t guestfwd_write(const void *buf, size_t len, void *chr)
 875 {
 876     return qemu_chr_fe_write_all(chr, buf, len);
 877 }
 878
 879 static int slirp_guestfwd(SlirpState *s, const char *config_str, Error **errp)
 880 {
 881     struct in_addr server = { .s_addr = 0 };
 882     struct GuestFwd *fwd;
 883     const char *p;
 884     char buf[128];
 885     char *end;
 886     int port;
 887
 888     p = config_str;
 889     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 890         goto fail_syntax;
 891     }
 892     if (strcmp(buf, "tcp") && buf[0] != '\0') {
 893         goto fail_syntax;
 894     }
 895     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 896         goto fail_syntax;
 897     }
 898     if (buf[0] != '\0' && !inet_aton(buf, &server)) {
 899         goto fail_syntax;
 900     }
 901     if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
 902         goto fail_syntax;
 903     }
 904     port = strtol(buf, &end, 10);
 905     if (*end != '\0' || port < 1 || port > 65535) {
 906         goto fail_syntax;
 907     }
 908
 909     snprintf(buf, sizeof(buf), "guestfwd.tcp.%d", port);
 910
 911     if (g_str_has_prefix(p, "cmd:")) {
 912         if (slirp_add_exec(s->slirp, &p[4], &server, port) < 0) {
 913             error_setg(errp, "Conflicting/invalid host:port in guest "
 914                        "forwarding rule '%s'", config_str);
 915             return -1;
 916         }
 917     } else {
 918         Error *err = NULL;
 919         /*
 920          * FIXME: sure we want to support implicit
 921          * muxed monitors here?
 922          */
 923         Chardev *chr = qemu_chr_new_mux_mon(buf, p);
 924
 925         if (!chr) {
 926             error_setg(errp, "Could not open guest forwarding device '%s'",
 927                        buf);
 928             return -1;
 929         }
 930
 931         fwd = g_new(struct GuestFwd, 1);
 932         qemu_chr_fe_init(&fwd->hd, chr, &err);
 933         if (err) {
 934             error_propagate(errp, err);
 935             object_unparent(OBJECT(chr));
 936             g_free(fwd);
 937             return -1;
 938         }
 939
 940         if (slirp_add_guestfwd(s->slirp, guestfwd_write, &fwd->hd,
 941                                &server, port) < 0) {
 942             error_setg(errp, "Conflicting/invalid host:port in guest "
 943                        "forwarding rule '%s'", config_str);
 944             qemu_chr_fe_deinit(&fwd->hd, true);
 945             g_free(fwd);
 946             return -1;
 947         }
 948         fwd->server = server;
 949         fwd->port = port;
 950         fwd->slirp = s->slirp;
 951
 952         qemu_chr_fe_set_handlers(&fwd->hd, guestfwd_can_read, guestfwd_read,
 953                                  NULL, NULL, fwd, NULL, true);
 954         s->fwd = g_slist_append(s->fwd, fwd);
 955     }
 956     return 0;
 957
 958  fail_syntax:
 959     error_setg(errp, "Invalid guest forwarding rule '%s'", config_str);
 960     return -1;
 961 }
 962
 963 void hmp_info_usernet(Monitor *mon, const QDict *qdict)
 964 {
 965     SlirpState *s;
 966
 967     QTAILQ_FOREACH(s, &slirp_stacks, entry) {
 968         int id;
 969         bool got_hub_id = net_hub_id_for_client(&s->nc, &id) == 0;
 970         char *info = slirp_connection_info(s->slirp);
 971         monitor_printf(mon, "Hub %d (%s):\n%s",
 972                        got_hub_id ? id : -1,
 973                        s->nc.name, info);
 974         g_free(info);
 975     }
 976 }
 977
 978 static void
 979 net_init_slirp_configs(const StringList *fwd, int flags)
 980 {
 981     while (fwd) {
 982         struct slirp_config_str *config;
 983
 984         config = g_malloc0(sizeof(*config));
 985         pstrcpy(config->str, sizeof(config->str), fwd->value->str);
 986         config->flags = flags;
 987         config->next = slirp_configs;
 988         slirp_configs = config;
 989
 990         fwd = fwd->next;
 991     }
 992 }
 993
 994 static const char **slirp_dnssearch(const StringList *dnsname)
 995 {
 996     const StringList *c = dnsname;
 997     size_t i = 0, num_opts = 0;
 998     const char **ret;
 999
1000     while (c) {
1001         num_opts++;
1002         c = c->next;
1003     }
1004
1005     if (num_opts == 0) {
1006         return NULL;
1007     }
1008
1009     ret = g_malloc((num_opts + 1) * sizeof(*ret));
1010     c = dnsname;
1011     while (c) {
1012         ret[i++] = c->value->str;
1013         c = c->next;
1014     }
1015     ret[i] = NULL;
1016     return ret;
1017 }
1018
1019 int net_init_slirp(const Netdev *netdev, const char *name,
1020                    NetClientState *peer, Error **errp)
1021 {
1022     struct slirp_config_str *config;
1023     char *vnet;
1024     int ret;
1025     const NetdevUserOptions *user;
1026     const char **dnssearch;
1027     bool ipv4 = true, ipv6 = true;
1028
1029     assert(netdev->type == NET_CLIENT_DRIVER_USER);
1030     user = &netdev->u.user;
1031
1032     if ((user->has_ipv6 && user->ipv6 && !user->has_ipv4) ||
1033         (user->has_ipv4 && !user->ipv4)) {
1034         ipv4 = 0;
1035     }
1036     if ((user->has_ipv4 && user->ipv4 && !user->has_ipv6) ||
1037         (user->has_ipv6 && !user->ipv6)) {
1038         ipv6 = 0;
1039     }
1040
1041     vnet = user->has_net ? g_strdup(user->net) :
1042            user->has_ip  ? g_strdup_printf("%s/24", user->ip) :
1043            NULL;
1044
1045     dnssearch = slirp_dnssearch(user->dnssearch);
1046
1047     /* all optional fields are initialized to "all bits zero" */
1048
1049     net_init_slirp_configs(user->hostfwd, SLIRP_CFG_HOSTFWD);
1050     net_init_slirp_configs(user->guestfwd, 0);
1051
1052     ret = net_slirp_init(peer, "user", name, user->q_restrict,
1053                          ipv4, vnet, user->host,
1054                          ipv6, user->ipv6_prefix, user->ipv6_prefixlen,
1055                          user->ipv6_host, user->hostname, user->tftp,
1056                          user->bootfile, user->dhcpstart,
1057                          user->dns, user->ipv6_dns, user->smb,
1058                          user->smbserver, dnssearch, user->domainname,
1059                          user->tftp_server_name, errp);
1060
1061     while (slirp_configs) {
1062         config = slirp_configs;
1063         slirp_configs = config->next;
1064         g_free(config);
1065     }
1066
1067     g_free(vnet);
1068     g_free(dnssearch);
1069
1070     return ret;
1071 }