d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
fa554de774
freebsd-dev/contrib/bsnmp/snmpd/trans_inet.c
Gleb Smirnoff ee2e9f4dbc Fix immediate crash when snmpd is bound to a specific IP address. 
The code that sets up msghdr must first fully fill in the msghdr
itself, and only then use CMSG_xxx() macros.

Silence from:	harti, one week
2020-04-20 23:32:49 +00:00

1345 lines
31 KiB
C
Raw Blame History

/*
* Copyright (c) 2018
* Hartmut Brandt.
* All rights reserved.
*
* Author: Harti Brandt <harti@freebsd.org>
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
* $Begemot: bsnmp/snmpd/trans_udp.c,v 1.5 2005/10/04 08:46:56 brandt_h Exp $
*
* Internet transport
*/
#include <sys/param.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <assert.h>
#include <errno.h>
#include <netdb.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdlib.h>
#include <string.h>
#include <syslog.h>
#include <unistd.h>
#include <stdio.h>
#include <arpa/inet.h>
#include "asn1.h"
#include "snmp.h"
#include "snmpmod.h"
#include "snmpd.h"
#define SNMPTREE_TYPES
#define SNMPENUM_FUNCS
#include "tree.h"
#include "oid.h"
extern const struct transport_def inet_trans;
struct inet_port;
struct inet_port_params;
struct port_sock;
typedef int create_func(struct inet_port *, struct inet_port_params *);
typedef void input_func(int, void *);
typedef int activate_func(struct inet_port *);
typedef void deactivate_func(struct inet_port *);
typedef void parse_ctrl_func(struct port_sock *, const struct msghdr *);
typedef void setsrc_func(struct port_sock *, struct msghdr *, char *);
static create_func ipv4_create;
static input_func ipv4_input;
static activate_func ipv4_activate;
static deactivate_func ipv4_deactivate;
static parse_ctrl_func ipv4_parse_ctrl;
static setsrc_func ipv4_setsrc;
static create_func ipv6_create;
static input_func ipv6_input;
static activate_func ipv6_activate;
static deactivate_func ipv6_deactivate;
static parse_ctrl_func ipv6_parse_ctrl;
static setsrc_func ipv6_setsrc;
static create_func ipv6z_create;
static create_func dns_create;
static activate_func dns_activate;
static deactivate_func dns_deactivate;
struct port_sock {
/* common input stuff; must be first */
struct port_input input;
/** link field */
TAILQ_ENTRY(port_sock) link;
/** pointer to parent */
struct inet_port *port;
/** bind address */
struct sockaddr_storage bind_addr;
/** reply destination */
struct sockaddr_storage ret_dest;
/** need to set source address in reply; set for INADDR_ANY */
bool set_ret_source;
/** address of the receive interface */
union {
/** IPv4 case */
struct in_addr a4;
/** IPv6 case */
struct in6_pktinfo a6;
} ret_source;
/** parse control message */
parse_ctrl_func *parse_ctrl;
/** set source address for a send() */
setsrc_func *setsrc;
};
static_assert(offsetof(struct port_sock, input) == 0,
"input not first in port_sock");
/**
* Table row for the inet ports.
*
* When actived each row can have one or several open sockets. For ipv6,
* ipv4 and ipv6z addresses it is always one, for dns addresses more than
* one socket can be open.
*/
struct inet_port {
/** common i/o port stuff (must be first) */
struct tport tport;
/** transport protocol */
enum BegemotSnmpdTransportProto proto;
/** row status */
enum RowStatus row_status;
/** socket list */
TAILQ_HEAD(, port_sock) socks;
/** value for InetAddressType::dns */
char *dns_addr;
/** port number in dns case; network byte order */
uint16_t dns_port;
/** create a port */
create_func *create;
/** activate a port */
activate_func *activate;
/** deactivate port */
deactivate_func *deactivate;
};
static_assert(offsetof(struct inet_port, tport) == 0,
"tport not first in inet_port");
/** to be used in bind_addr field */
#define AF_DNS AF_VENDOR00
/** registered transport */
static struct transport *my_trans;
/** set operation */
enum {
SET_CREATED,
SET_ACTIVATED,
SET_DEACTIVATE,
SET_DESTROY,
};
/** length of the control data buffer */
static const size_t RECV_CBUF_SIZE =
MAX(CMSG_SPACE(SOCKCREDSIZE(CMGROUP_MAX)) +
CMSG_SPACE(sizeof(struct in_addr)),
CMSG_SPACE(SOCKCREDSIZE(CMGROUP_MAX)) +
CMSG_SPACE(sizeof(struct in6_pktinfo)));
/** length of the control data buffer */
static const size_t XMIT_CBUF_SIZE =
MAX(CMSG_SPACE(sizeof(struct in_addr)),
CMSG_SPACE(sizeof(struct in6_pktinfo)));
/**
* Start the transport. This registers the transport with the
* transport table.
*
* \return SNMP error code
*/
static int
inet_start(void)
{
return (trans_register(&inet_trans, &my_trans));
}
/**
* Stop the transport. This tries to unregister the transport which
* in turn fails if the list of ports is not empty.
*
* \return SNMP error code
*/
static int
inet_stop(int force __unused)
{
if (my_trans != NULL)
if (trans_unregister(my_trans) != 0)
return (SNMP_ERR_GENERR);
return (SNMP_ERR_NOERROR);
}
/**
* Deactivate SNMP port.
*
* \param tp port to close
*/
static void
deactivate_port(struct inet_port *p)
{
p->deactivate(p);
}
/*
* This function activates a port. For ports opened via the config files
* this is called just before entering the event loop. For ports create
* during runtime this is called when the RowStatus is set to Active or
* as second step for CreateAndGo.
*
* \param tp transport port
*
* \return SNMP error code
*/
static int
inet_activate(struct tport *tp)
{
struct inet_port *port = (struct inet_port *)tp;
return (port->activate(port));
}
/*
* Close the SNMP port if it is open and destroy it.
*
* \param tp port to close
*/
static void
inet_destroy_port(struct tport *tp)
{
struct inet_port *port = (struct inet_port *)tp;
deactivate_port(port);
trans_remove_port(tp);
free(port->dns_addr);
free(port);
}
/**
* If the input struct has no buffer allocated yet, do it now. If allocation
* fails, read the data into a local buffer and drop it.
*
* \param pi input struct
*
* \return -1 if allocation fails, 0 otherwise
*/
static int
inet_alloc_buf(struct port_input *pi)
{
char drop_buf[2000];
if (pi->buf == NULL) {
if ((pi->buf = buf_alloc(0)) == NULL) {
(void)recvfrom(pi->fd, drop_buf, sizeof(drop_buf),
0, NULL, NULL);
return (-1);
}
pi->buflen = buf_size(0);
}
return (0);
}
/**
* Read message into input buffer. Get also the source address and any
* control data that is available. If the message is truncated, increment
* corresponding statistics.
*
* \param pi input object
* \param msg message object to fill
* \param cbuf control data buffer
*
* \return -1 when something goes wrong, 0 othersise
*/
static int
inet_read_msg(struct port_input *pi, struct msghdr *msg, char *cbuf)
{
struct iovec iov[1];
iov[0].iov_base = pi->buf;
iov[0].iov_len = pi->buflen;
msg->msg_name = pi->peer;
msg->msg_namelen = pi->peerlen;
msg->msg_iov = iov;
msg->msg_iovlen = 1;
msg->msg_control = cbuf;
msg->msg_controllen = RECV_CBUF_SIZE;
msg->msg_flags = 0;
memset(cbuf, 0, RECV_CBUF_SIZE);
const ssize_t len = recvmsg(pi->fd, msg, 0);
if (len == -1 || len == 0)
/* receive error */
return (-1);
if (msg->msg_flags & MSG_TRUNC) {
/* truncated - drop */
snmpd_stats.silentDrops++;
snmpd_stats.inTooLong++;
return (-1);
}
pi->length = (size_t)len;
return (0);
}
/*
* Input available on socket.
*
* \param tp transport port
* \param pi input struct
*
* \return number of bytes received
*/
static ssize_t
inet_recv(struct tport *tp, struct port_input *pi)
{
struct inet_port *port = __containerof(tp, struct inet_port, tport);
struct port_sock *sock = __containerof(pi, struct port_sock, input);
assert(port->proto == BegemotSnmpdTransportProto_udp);
if (inet_alloc_buf(pi) == -1)
return (-1);
char cbuf[RECV_CBUF_SIZE];
struct msghdr msg;
if (inet_read_msg(pi, &msg, cbuf) == -1)
return (-1);
sock->parse_ctrl(sock, &msg);
return (0);
}
/*
* Send message.
*
* \param tp port
* \param buf data to send
* \param len number of bytes to send
* \param addr destination address
* \param addlen destination address length
*
* \return number of bytes sent
*/
static ssize_t
inet_send2(struct tport *tp, const u_char *buf, size_t len,
struct port_input *pi)
{
struct inet_port *p = __containerof(tp, struct inet_port, tport);
struct port_sock *s = (pi == NULL) ? TAILQ_FIRST(&p->socks) :
__containerof(pi, struct port_sock, input);
struct iovec iov;
iov.iov_base = __DECONST(void*, buf);
iov.iov_len = len;
struct msghdr msg;
msg.msg_flags = 0;
msg.msg_iov = &iov;
msg.msg_iovlen = 1;
msg.msg_name = (void *)pi->peer;
msg.msg_namelen = pi->peerlen;
char cbuf[XMIT_CBUF_SIZE];
if (s->set_ret_source) {
s->setsrc(s, &msg, cbuf);
} else {
msg.msg_control = NULL;
msg.msg_controllen = 0;
}
return (sendmsg(s->input.fd, &msg, 0));
}
/** exported to daemon */
const struct transport_def inet_trans = {
"inet",
OIDX_begemotSnmpdTransInet,
inet_start,
inet_stop,
inet_destroy_port,
inet_activate,
NULL,
inet_recv,
inet_send2,
};
struct inet_port_params {
/** index oid */
struct asn_oid index;
/** internet address type */
enum InetAddressType type;
/** internet address */
u_char *addr;
/** length of address */
size_t addr_len;
/** port number */
uint32_t port;
/** protocol */
enum BegemotSnmpdTransportProto proto;
};
/**
* IPv4 creation stuff. Parse the index, fill socket address and creates
* a port_sock.
*
* \param port the port to create
* \param params parameters from the SNMP SET
*
* \return SNMP error
*/
static int
ipv4_create(struct inet_port *port, struct inet_port_params *params)
{
if (params->addr_len != 4)
return (SNMP_ERR_INCONS_VALUE);
struct port_sock *sock = calloc(1, sizeof(struct port_sock));
if (sock == NULL)
return (SNMP_ERR_GENERR);
snmpd_input_init(&sock->input);
TAILQ_INSERT_HEAD(&port->socks, sock, link);
struct sockaddr_in *sin =
(struct sockaddr_in *)&sock->bind_addr;
sin->sin_len = sizeof(struct sockaddr_in);
sin->sin_family = AF_INET;
sin->sin_port = htons(params->port);
memcpy(&sin->sin_addr, params->addr, 4); /* network byte order */
sock->port = port;
return (SNMP_ERR_NOERROR);
}
/*
* An IPv4 inet port is ready. Delegate to the generic code to read the data
* and react.
*
* \param fd file descriptor that is ready
* \param udata inet_port pointer
*/
static void
ipv4_input(int fd __unused, void *udata)
{
struct port_sock *sock = udata;
sock->input.peerlen = sizeof(struct sockaddr_in);
snmpd_input(&sock->input, &sock->port->tport);
}
/**
* Activate an IPv4 socket.
*
* \param sock thhe socket to activate
*
* \return error code
*/
static int
ipv4_activate_sock(struct port_sock *sock)
{
if ((sock->input.fd = socket(PF_INET, SOCK_DGRAM, 0)) == -1) {
syslog(LOG_ERR, "creating UDP4 socket: %m");
return (SNMP_ERR_RES_UNAVAIL);
}
const struct sockaddr_in *sin =
(const struct sockaddr_in *)&sock->bind_addr;
if (sin->sin_addr.s_addr == INADDR_ANY) {
/* need to know from which address to return */
static const int on = 1;
if (setsockopt(sock->input.fd, IPPROTO_IP, IP_RECVDSTADDR, &on,
sizeof(on)) == -1) {
syslog(LOG_ERR, "setsockopt(IP_RECVDSTADDR): %m");
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_GENERR);
}
sock->set_ret_source = true;
}
if (bind(sock->input.fd, (const struct sockaddr *)sin, sizeof(*sin))) {
if (errno == EADDRNOTAVAIL) {
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_INCONS_NAME);
}
syslog(LOG_ERR, "bind: %s:%u %m", inet_ntoa(sin->sin_addr),
ntohs(sin->sin_port));
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_GENERR);
}
if ((sock->input.id = fd_select(sock->input.fd, ipv4_input,
sock, NULL)) == NULL) {
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_GENERR);
}
sock->input.peer = (struct sockaddr *)&sock->ret_dest;
sock->parse_ctrl = ipv4_parse_ctrl;
sock->setsrc = ipv4_setsrc;
return (SNMP_ERR_NOERROR);
}
/**
* Open an IPv4 socket. Make the socket, bind it and put it on the select
* list. The socket struct has already been created during creation.
*
* \param p inet port
*
* \return SNMP error code
*/
static int
ipv4_activate(struct inet_port *p)
{
struct port_sock *sock = TAILQ_FIRST(&p->socks);
assert(sock);
assert(!TAILQ_NEXT(sock, link));
const int ret = ipv4_activate_sock(sock);
if (ret == SNMP_ERR_NOERROR)
p->row_status = RowStatus_active;
return (ret);
}
/**
* Close an IPv4 socket. Keep the sock object.
*
* \param p inet port
*/
static void
ipv4_deactivate(struct inet_port *p)
{
struct port_sock *sock = TAILQ_FIRST(&p->socks);
assert(sock);
assert(!TAILQ_NEXT(sock, link));
snmpd_input_close(&sock->input);
p->row_status = RowStatus_notInService;
}
/**
* Parse the control data received with a UDPv4 packet. This may contain
* credentials (for a local connection) and the address of the interface
* the message was received on. If there are credentials set the priv flag
* if the effective UID is zero.
*
* \param sock the sock object
* \param msg the received message
*/
static void
ipv4_parse_ctrl(struct port_sock *sock, const struct msghdr *msg)
{
struct sockcred *cred = NULL;
for (struct cmsghdr *cmsg = CMSG_FIRSTHDR(msg); cmsg != NULL;
cmsg = CMSG_NXTHDR(msg, cmsg)) {
if (cmsg->cmsg_level == IPPROTO_IP &&
cmsg->cmsg_type == IP_RECVDSTADDR) {
memcpy(&sock->ret_source.a4, CMSG_DATA(cmsg),
sizeof(struct in_addr));
} else if (cmsg->cmsg_level == SOL_SOCKET &&
cmsg->cmsg_type == SCM_CREDS) {
cred = (struct sockcred *)(void *)CMSG_DATA(cmsg);
}
}
sock->input.priv = 0;
if (sock->input.cred && cred)
/* remote end has sent credentials */
sock->input.priv = (cred->sc_euid == 0);
}
/**
* Set the source address option for IPv4 sockets.
*
* \param sock socket object
* \param msg message
*/
static void
ipv4_setsrc(struct port_sock *sock, struct msghdr *msg, char *cbuf)
{
struct cmsghdr *cmsg;
msg->msg_control = cbuf;
msg->msg_controllen = CMSG_SPACE(sizeof(struct in_addr));
/* select outgoing interface by setting source address */
cmsg = CMSG_FIRSTHDR(msg);
cmsg->cmsg_level = IPPROTO_IP;
cmsg->cmsg_type = IP_SENDSRCADDR;
cmsg->cmsg_len = CMSG_LEN(sizeof(struct in_addr));
memcpy(CMSG_DATA(cmsg), &sock->ret_source.a4,
sizeof(struct in_addr));
}
/**
* Common part of IPv6 creation. This is used by both ipv6_create() and
* ipv6z_create().
*
* \param port the table row
* \param params creation parameters
* \param scope_id scope_id (0 or from index)
*
* \return SNMP_ERR_NOERROR if port has been created, error code otherwise
*/
static int
ipv6_create_common(struct inet_port *port, struct inet_port_params *params,
u_int scope_id)
{
struct port_sock *sock = calloc(1, sizeof(struct port_sock));
if (sock == NULL)
return (SNMP_ERR_GENERR);
struct sockaddr_in6 *sin = (struct sockaddr_in6 *)&sock->bind_addr;
sin->sin6_len = sizeof(struct sockaddr_in6);
sin->sin6_family = AF_INET6;
sin->sin6_port = htons(params->port);
sin->sin6_flowinfo = 0;
sin->sin6_scope_id = scope_id;
memcpy(sin->sin6_addr.s6_addr, params->addr, 16);
if (IN6_IS_ADDR_LINKLOCAL(&sin->sin6_addr) && scope_id == 0) {
char buf[INET6_ADDRSTRLEN];
syslog(LOG_INFO, "%s: link local address used without scope "
"index: %s", __func__, inet_ntop(AF_INET6,
&sin->sin6_addr, buf, sizeof(buf)));
free(sock);
return (SNMP_ERR_NO_CREATION);
}
sock->port = port;
snmpd_input_init(&sock->input);
TAILQ_INSERT_HEAD(&port->socks, sock, link);
return (SNMP_ERR_NOERROR);
}
/**
* IPv6 creation stuff. Parse the index, fill socket address and creates
* a port_sock.
*
* \param port the port to create
* \param params parameters from the SNMP SET
*
* \return SNMP error
*/
static int
ipv6_create(struct inet_port *port, struct inet_port_params *params)
{
if (params->addr_len != 16)
return (SNMP_ERR_INCONS_VALUE);
const int ret = ipv6_create_common(port, params, 0);
if (ret != SNMP_ERR_NOERROR)
return (ret);
return (SNMP_ERR_NOERROR);
}
/*
* An IPv6 inet port is ready. Delegate to the generic code to read the data
* and react.
*
* \param fd file descriptor that is ready
* \param udata inet_port pointer
*/
static void
ipv6_input(int fd __unused, void *udata)
{
struct port_sock *sock = udata;
sock->input.peerlen = sizeof(struct sockaddr_in6);
snmpd_input(&sock->input, &sock->port->tport);
}
/**
* Activate an IPv6 socket.
*
* \param sock thhe socket to activate
*
* \return error code
*/
static int
ipv6_activate_sock(struct port_sock *sock)
{
if ((sock->input.fd = socket(PF_INET6, SOCK_DGRAM, 0)) == -1) {
syslog(LOG_ERR, "creating UDP6 socket: %m");
return (SNMP_ERR_RES_UNAVAIL);
}
const struct sockaddr_in6 *sin =
(const struct sockaddr_in6 *)&sock->bind_addr;
if (memcmp(&sin->sin6_addr, &in6addr_any, sizeof(in6addr_any)) == 0) {
/* need to know from which address to return */
static const int on = 1;
if (setsockopt(sock->input.fd, IPPROTO_IPV6, IPV6_RECVPKTINFO,
&on, sizeof(on)) == -1) {
syslog(LOG_ERR, "setsockopt(IP6_PKTINFO): %m");
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_GENERR);
}
sock->set_ret_source = true;
}
if (bind(sock->input.fd, (const struct sockaddr *)sin, sizeof(*sin))) {
if (community != COMM_INITIALIZE && errno == EADDRNOTAVAIL) {
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_INCONS_NAME);
}
char buf[INET6_ADDRSTRLEN];
syslog(LOG_ERR, "bind: %s:%u:%u %m", inet_ntop(AF_INET6,
&sin->sin6_addr, buf, sizeof(buf)), sin->sin6_scope_id,
ntohs(sin->sin6_port));
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_GENERR);
}
if ((sock->input.id = fd_select(sock->input.fd, ipv6_input,
sock, NULL)) == NULL) {
(void)close(sock->input.fd);
sock->input.fd = -1;
return (SNMP_ERR_GENERR);
}
sock->input.peer = (struct sockaddr *)&sock->ret_dest;
sock->parse_ctrl = ipv6_parse_ctrl;
sock->setsrc = ipv6_setsrc;
return (SNMP_ERR_NOERROR);
}
/**
* Open an IPv6 socket.
*
* \param port inet port
*
* \return SNMP error code
*/
static int
ipv6_activate(struct inet_port *p)
{
struct port_sock *sock = TAILQ_FIRST(&p->socks);
assert(sock);
const int ret = ipv6_activate_sock(sock);
if (ret == SNMP_ERR_NOERROR)
p->row_status = RowStatus_active;
return (ret);
}
/**
* Close an IPv6 socket. Keep the sock object.
*
* \param p inet port
*/
static void
ipv6_deactivate(struct inet_port *p)
{
struct port_sock *sock = TAILQ_FIRST(&p->socks);
assert(sock);
assert(!TAILQ_NEXT(sock, link));
snmpd_input_close(&sock->input);
p->row_status = RowStatus_notInService;
}
/**
* IPv6 specific part of message processing. The control data may contain
* credentials and packet info that contains the destination address of
* the packet.
*
* \param sock the sock object
* \param msg the received message
*/
static void
ipv6_parse_ctrl(struct port_sock *sock, const struct msghdr *msg)
{
struct sockcred *cred = NULL;
for (struct cmsghdr *cmsg = CMSG_FIRSTHDR(msg); cmsg != NULL;
cmsg = CMSG_NXTHDR(msg, cmsg)) {
if (cmsg->cmsg_level == IPPROTO_IPV6 &&
cmsg->cmsg_type == IPV6_PKTINFO) {
const struct in6_pktinfo *info =
(const struct in6_pktinfo *)(const void *)
CMSG_DATA(cmsg);
sock->ret_source.a6.ipi6_addr = info->ipi6_addr;
sock->ret_source.a6.ipi6_ifindex =
!IN6_IS_ADDR_LINKLOCAL(&info->ipi6_addr) ? 0:
info->ipi6_ifindex;
} else if (cmsg->cmsg_level == SOL_SOCKET &&
cmsg->cmsg_type == SCM_CREDS) {
cred = (struct sockcred *)(void *)CMSG_DATA(cmsg);
}
}
sock->input.priv = 0;
if (sock->input.cred && cred)
/* remote end has sent credentials */
sock->input.priv = (cred->sc_euid == 0);
}
/**
* Set the source address option for IPv4 sockets.
*
* \param sock socket object
* \param msg message
*/
static void
ipv6_setsrc(struct port_sock *sock, struct msghdr *msg, char *cbuf)
{
struct cmsghdr *cmsg;
msg->msg_control = cbuf;
msg->msg_controllen = CMSG_SPACE(sizeof(struct in6_pktinfo));
/* select outgoing interface by setting source address */
cmsg = CMSG_FIRSTHDR(msg);
cmsg->cmsg_level = IPPROTO_IPV6;
cmsg->cmsg_type = IPV6_PKTINFO;
cmsg->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));
memcpy(CMSG_DATA(cmsg), &sock->ret_source.a6,
sizeof(struct in6_pktinfo));
}
/**
* IPv6z creation stuff. Parse the index, fill socket address and creates
* a port_sock.
*
* \param port the port to create
* \param params parameters from the SNMP SET
*
* \return SNMP error
*/
static int
ipv6z_create(struct inet_port *port, struct inet_port_params *params)
{
if (params->addr_len != 20)
return (SNMP_ERR_INCONS_VALUE);
u_int scope_id = 0;
for (u_int i = 16; i < 20; i++) {
scope_id <<= 8;
scope_id |= params->addr[i];
}
const int ret = ipv6_create_common(port, params, scope_id);
if (ret != SNMP_ERR_NOERROR)
return (ret);
return (SNMP_ERR_NOERROR);
}
/**
* DNS name creation stuff. Parse the index and save the string.
* This does not create a socket struct.
*
* \param port the port to create
* \param params parameters from the SNMP SET
*
* \return SNMP error
*/
static int
dns_create(struct inet_port *port, struct inet_port_params *params)
{
if (params->addr_len > 64)
return (SNMP_ERR_INCONS_VALUE);
if (strnlen(params->addr, params->addr_len) !=
params->addr_len)
return (SNMP_ERR_INCONS_VALUE);
if ((port->dns_addr = realloc(params->addr,
params->addr_len + 1)) == NULL)
return (SNMP_ERR_GENERR);
port->dns_addr[params->addr_len] = '\0';
params->addr = NULL;
port->dns_port = htons(params->port);
return (SNMP_ERR_NOERROR);
}
/**
* Open sockets. This loops through all the addresses returned by getaddrinfo
* and opens a socket for each of them.
*
* \param port inet port
*
* \return SNMP error code
*/
static int
dns_activate(struct inet_port *port)
{
struct addrinfo hints;
memset(&hints, 0, sizeof(hints));
hints.ai_family = AF_UNSPEC;
hints.ai_socktype = SOCK_DGRAM; // XXX udp-only
hints.ai_flags = AI_ADDRCONFIG | AI_PASSIVE | AI_NUMERICSERV;
char portbuf[8];
sprintf(portbuf, "%hu", ntohs(port->dns_port));
struct addrinfo *res0;
int error = getaddrinfo(port->dns_addr[0] == '\0'
? NULL : port->dns_addr,
portbuf, &hints, &res0);
if (error) {
syslog(LOG_ERR, "cannot resolve address '%s': %s",
port->dns_addr, gai_strerror(error));
return (SNMP_ERR_GENERR);
}
for (struct addrinfo *res = res0; res != NULL; res = res->ai_next) {
if (res->ai_family != AF_INET && res->ai_family != AF_INET6)
continue;
struct port_sock *sock = calloc(1, sizeof(struct port_sock));
if (sock == NULL)
return (SNMP_ERR_GENERR);
snmpd_input_init(&sock->input);
sock->port = port;
int ret = SNMP_ERR_NOERROR;
if (res->ai_family == AF_INET) {
*(struct sockaddr_in *)&sock->bind_addr =
*(struct sockaddr_in *)(void *)res->ai_addr;
ret = ipv4_activate_sock(sock);
} else {
*(struct sockaddr_in6 *)&sock->bind_addr =
*(struct sockaddr_in6 *)(void *)res->ai_addr;
ret = ipv6_activate_sock(sock);
}
if (ret != SNMP_ERR_NOERROR)
free(sock);
else
TAILQ_INSERT_HEAD(&port->socks, sock, link);
}
if (!TAILQ_EMPTY(&port->socks))
port->row_status = RowStatus_active;
freeaddrinfo(res0);
return (SNMP_ERR_GENERR);
}
/**
* Deactive the socket. Close all open sockets and delete all sock objects.
*
* \param port inet port
*/
static void
dns_deactivate(struct inet_port *port)
{
while (!TAILQ_EMPTY(&port->socks)) {
struct port_sock *sock = TAILQ_FIRST(&port->socks);
TAILQ_REMOVE(&port->socks, sock, link);
snmpd_input_close(&sock->input);
free(sock);
}
port->row_status = RowStatus_notInService;
}
static int
inet_create(struct inet_port_params *params, struct inet_port **pp)
{
int err = SNMP_ERR_NOERROR;
struct inet_port *port = NULL;
if (params->port > 0xffff) {
err = SNMP_ERR_NO_CREATION;
goto fail;
}
if ((port = malloc(sizeof(*port))) == NULL) {
err = SNMP_ERR_GENERR;
goto fail;
}
memset(port, 0, sizeof(*port));
TAILQ_INIT(&port->socks);
port->proto = params->proto;
port->tport.index = params->index;
switch (params->type) {
case InetAddressType_ipv4:
port->create = ipv4_create;
port->activate = ipv4_activate;
port->deactivate = ipv4_deactivate;
break;
case InetAddressType_ipv6:
port->create = ipv6_create;
port->activate = ipv6_activate;
port->deactivate = ipv6_deactivate;
break;
case InetAddressType_ipv6z:
port->create = ipv6z_create;
port->activate = ipv6_activate;
port->deactivate = ipv6_deactivate;
break;
case InetAddressType_dns:
port->create = dns_create;
port->activate = dns_activate;
port->deactivate = dns_deactivate;
break;
default:
err = SNMP_ERR_NO_CREATION;
goto fail;
}
if ((err = port->create(port, params)) != SNMP_ERR_NOERROR)
goto fail;
*pp = port;
trans_insert_port(my_trans, &port->tport);
return (err);
fail:
free(port->dns_addr);
free(port);
return (err);
}
static int
create_and_go(struct snmp_context *ctx, struct inet_port_params *params)
{
int err;
struct inet_port *port;
if ((err = inet_create(params, &port)) != SNMP_ERR_NOERROR)
return (err);
port->row_status = RowStatus_createAndGo;
ctx->scratch->ptr1 = port;
if (community == COMM_INITIALIZE)
return (err);
return (inet_activate(&port->tport));
}
static int
create_and_wait(struct snmp_context *ctx, struct inet_port_params *params)
{
int err;
struct inet_port *port;
if ((err = inet_create(params, &port)) != SNMP_ERR_NOERROR)
return (err);
port->row_status = RowStatus_createAndWait;
ctx->scratch->ptr1 = port;
return (err);
}
/**
* This is called to set a RowStatus value in the port table during
* SET processing.
*
* When this is called during initialization time and the RowStatus is set
* to CreateAndGo, the port is actually not activated. This is done when
* the main code calls the init() for all ports later.
*/
static int
inet_port_set(struct snmp_context *ctx, struct inet_port *port,
struct inet_port_params *params, enum RowStatus nstatus)
{
switch (nstatus) {
case RowStatus_createAndGo:
if (port != NULL)
return (SNMP_ERR_INCONS_VALUE);
ctx->scratch->int1 = SET_CREATED;
return (create_and_go(ctx, params));
case RowStatus_createAndWait:
if (port != NULL)
return (SNMP_ERR_INCONS_VALUE);
ctx->scratch->int1 = SET_CREATED;
return (create_and_wait(ctx, params));
case RowStatus_active:
if (port == NULL)
return (SNMP_ERR_INCONS_VALUE);
switch (port->row_status) {
case RowStatus_notReady:
/* this can not happend */
abort();
case RowStatus_notInService:
ctx->scratch->int1 = SET_ACTIVATED;
return (inet_activate(&port->tport));
case RowStatus_active:
return (SNMP_ERR_NOERROR);
case RowStatus_createAndGo:
case RowStatus_createAndWait:
case RowStatus_destroy:
abort();
}
break;
case RowStatus_notInService:
if (port == NULL)
return (SNMP_ERR_INCONS_VALUE);
switch (port->row_status) {
case RowStatus_notReady:
/* this can not happend */
abort();
case RowStatus_notInService:
return (SNMP_ERR_NOERROR);
case RowStatus_active:
/* this is done during commit */
ctx->scratch->int1 = SET_DEACTIVATE;
return (SNMP_ERR_NOERROR);
case RowStatus_createAndGo:
case RowStatus_createAndWait:
case RowStatus_destroy:
abort();
}
break;
case RowStatus_destroy:
/* this is done during commit */
ctx->scratch->int1 = SET_DESTROY;
return (SNMP_ERR_NOERROR);
case RowStatus_notReady:
return (SNMP_ERR_WRONG_VALUE);
}
abort();
}
/*
* Port table
*/
int
op_snmp_trans_inet(struct snmp_context *ctx, struct snmp_value *value,
u_int sub, u_int iidx __unused, enum snmp_op op)
{
asn_subid_t which = value->var.subs[sub - 1];
struct inet_port *port;
struct inet_port_params params;
int ret;
switch (op) {
case SNMP_OP_GETNEXT:
if ((port = (struct inet_port *)trans_next_port(my_trans,
&value->var, sub)) == NULL)
return (SNMP_ERR_NOSUCHNAME);
index_append(&value->var, sub, &port->tport.index);
goto fetch;
case SNMP_OP_GET:
if ((port = (struct inet_port *)trans_find_port(my_trans,
&value->var, sub)) == NULL)
return (SNMP_ERR_NOSUCHNAME);
goto fetch;
case SNMP_OP_SET:
port = (struct inet_port *)trans_find_port(my_trans,
&value->var, sub);
if (which != LEAF_begemotSnmpdTransInetStatus)
abort();
if (!isok_RowStatus(value->v.integer))
return (SNMP_ERR_WRONG_VALUE);
if (index_decode(&value->var, sub, iidx, &params.type,
&params.addr, &params.addr_len, &params.port,
&params.proto))
return (SNMP_ERR_NO_CREATION);
asn_slice_oid(&params.index, &value->var, sub, value->var.len);
ret = inet_port_set(ctx, port, &params,
(enum RowStatus)value->v.integer);
free(params.addr);
return (ret);
case SNMP_OP_ROLLBACK:
if ((port = (struct inet_port *)trans_find_port(my_trans,
&value->var, sub)) == NULL)
/* cannot happen */
abort();
switch (ctx->scratch->int1) {
case SET_CREATED:
/* newly created */
assert(port != NULL);
inet_destroy_port(&port->tport);
return (SNMP_ERR_NOERROR);
case SET_DESTROY:
/* do it now */
assert(port != NULL);
return (SNMP_ERR_NOERROR);
case SET_ACTIVATED:
deactivate_port(port);
return (SNMP_ERR_NOERROR);
case SET_DEACTIVATE:
return (SNMP_ERR_NOERROR);
}
abort();
case SNMP_OP_COMMIT:
if ((port = (struct inet_port *)trans_find_port(my_trans,
&value->var, sub)) == NULL)
/* cannot happen */
abort();
switch (ctx->scratch->int1) {
case SET_CREATED:
/* newly created */
assert(port != NULL);
return (SNMP_ERR_NOERROR);
case SET_DESTROY:
/* do it now */
assert(port != NULL);
inet_destroy_port(&port->tport);
return (SNMP_ERR_NOERROR);
case SET_ACTIVATED:
return (SNMP_ERR_NOERROR);
case SET_DEACTIVATE:
deactivate_port(port);
return (SNMP_ERR_NOERROR);
}
abort();
}
abort();
fetch:
switch (which) {
case LEAF_begemotSnmpdTransInetStatus:
value->v.integer = port->row_status;
break;
default:
abort();
}
return (SNMP_ERR_NOERROR);
}
Reference in New Issue View Git Blame Copy Permalink