#include "util.h"
#include "conffile.h"
#include "security-util.h"
+#include "sockaddr-util.h"
/* local functions */
static void try_socksize(int sock, int which, size_t size);
int
stream_server(
+ int family,
in_port_t *portp,
size_t sendsize,
size_t recvsize,
int priv)
{
int server_socket, retries;
- socklen_t len;
+ socklen_t_equiv len;
#if defined(SO_KEEPALIVE) || defined(USE_REUSEADDR)
const int on = 1;
int r;
#endif
- struct sockaddr_storage server;
+ sockaddr_union server;
int save_errno;
int *portrange;
- socklen_t socklen;
+ socklen_t_equiv socklen;
int socket_family;
*portp = USHRT_MAX; /* in case we error exit */
- socket_family = AF_NATIVE;
- server_socket = socket(AF_NATIVE, SOCK_STREAM, 0);
+ if (family == -1) {
+ socket_family = AF_NATIVE;
+ } else {
+ socket_family = family;
+ }
+ g_debug("stream_server opening socket with family %d (requested family was %d)", socket_family, family);
+ server_socket = socket(socket_family, SOCK_STREAM, 0);
+
#ifdef WORKING_IPV6
/* if that address family actually isn't supported, just try AF_INET */
if (server_socket == -1 && errno == EAFNOSUPPORT) {
+ g_debug("stream_server retrying socket with AF_INET");
socket_family = AF_INET;
server_socket = socket(AF_INET, SOCK_STREAM, 0);
}
#endif
if (server_socket == -1) {
save_errno = errno;
- dbprintf(("%s: stream_server: socket() failed: %s\n",
- debug_prefix_time(NULL),
- strerror(save_errno)));
+ g_debug(_("stream_server: socket() failed: %s"),
+ strerror(save_errno));
errno = save_errno;
return -1;
}
aclose(server_socket);
errno = EMFILE; /* out of range */
save_errno = errno;
- dbprintf(("%s: stream_server: socket out of range: %d\n",
- debug_prefix_time(NULL),
- server_socket));
+ g_debug(_("stream_server: socket out of range: %d"),
+ server_socket);
errno = save_errno;
return -1;
}
- SS_INIT(&server, socket_family);
- SS_SET_INADDR_ANY(&server);
+ SU_INIT(&server, socket_family);
+ SU_SET_INADDR_ANY(&server);
#ifdef USE_REUSEADDR
r = setsockopt(server_socket, SOL_SOCKET, SO_REUSEADDR,
- (void *)&on, (socklen_t)sizeof(on));
+ (void *)&on, (socklen_t_equiv)sizeof(on));
if (r < 0) {
- dbprintf(("%s: stream_server: setsockopt(SO_REUSEADDR) failed: %s\n",
- debug_prefix_time(NULL),
- strerror(errno)));
+ g_debug(_("stream_server: setsockopt(SO_REUSEADDR) failed: %s"),
+ strerror(errno));
}
#endif
if (bind_portrange(server_socket, &server, (in_port_t)portrange[0],
(in_port_t)portrange[1], "tcp") == 0)
goto out;
- dbprintf(("%s: stream_server: Could not bind to port in range: %d - %d.\n",
- debug_prefix_time(NULL), portrange[0], portrange[1]));
+ g_debug(_("stream_server: Could not bind to port in range: %d - %d."),
+ portrange[0], portrange[1]);
} else {
socklen = SS_LEN(&server);
if (bind(server_socket, (struct sockaddr *)&server, socklen) == 0)
goto out;
- dbprintf(("%s: stream_server: Could not bind to any port: %s\n",
- debug_prefix_time(NULL), strerror(errno)));
+ g_debug(_("stream_server: Could not bind to any port: %s"),
+ strerror(errno));
}
if (retries >= BIND_CYCLE_RETRIES)
break;
- dbprintf(("%s: stream_server: Retrying entire range after 10 second delay.\n",
- debug_prefix_time(NULL)));
+ g_debug(_("stream_server: Retrying entire range after 10 second delay."));
sleep(15);
}
save_errno = errno;
- dbprintf(("%s: stream_server: bind(in6addr_any) failed: %s\n",
- debug_prefix_time(NULL),
- strerror(save_errno)));
+ g_debug(_("stream_server: bind(in6addr_any) failed: %s"),
+ strerror(save_errno));
aclose(server_socket);
errno = save_errno;
return -1;
len = SIZEOF(server);
if(getsockname(server_socket, (struct sockaddr *)&server, &len) == -1) {
save_errno = errno;
- dbprintf(("%s: stream_server: getsockname() failed: %s\n",
- debug_prefix_time(NULL),
- strerror(save_errno)));
+ g_debug(_("stream_server: getsockname() failed: %s"),
+ strerror(save_errno));
aclose(server_socket);
errno = save_errno;
return -1;
#ifdef SO_KEEPALIVE
r = setsockopt(server_socket, SOL_SOCKET, SO_KEEPALIVE,
- (void *)&on, (socklen_t)sizeof(on));
+ (void *)&on, (socklen_t_equiv)sizeof(on));
if(r == -1) {
save_errno = errno;
- dbprintf(("%s: stream_server: setsockopt(SO_KEEPALIVE) failed: %s\n",
- debug_prefix_time(NULL),
- strerror(save_errno)));
+ g_debug(_("stream_server: setsockopt(SO_KEEPALIVE) failed: %s"),
+ strerror(save_errno));
aclose(server_socket);
errno = save_errno;
return -1;
}
#endif
- *portp = SS_GET_PORT(&server);
- dbprintf(("%s: stream_server: waiting for connection: %s\n",
- debug_prefix_time(NULL),
- str_sockaddr(&server)));
+ *portp = SU_GET_PORT(&server);
+ g_debug(_("stream_server: waiting for connection: %s"),
+ str_sockaddr(&server));
return server_socket;
}
int nonblock,
int priv)
{
- struct sockaddr_storage svaddr, claddr;
- int save_errno;
+ sockaddr_union svaddr, claddr;
+ int save_errno = 0;
char *f;
- int client_socket;
- int *portrange;
+ int client_socket = 0;
+ int *portrange = NULL;
int result;
- struct addrinfo hints;
- struct addrinfo *res = NULL;
+ struct addrinfo *res, *res_addr;
f = priv ? "stream_client_privileged" : "stream_client";
-#ifdef WORKING_IPV6
- hints.ai_flags = AI_CANONNAME | AI_V4MAPPED | AI_ALL;
- hints.ai_family = (sa_family_t)AF_UNSPEC;
-#else
- hints.ai_flags = AI_CANONNAME;
- hints.ai_family = (sa_family_t)AF_INET;
-#endif
- hints.ai_socktype = SOCK_DGRAM;
- hints.ai_protocol = IPPROTO_UDP;
- hints.ai_addrlen = 0;
- hints.ai_addr = NULL;
- hints.ai_canonname = NULL;
- hints.ai_next = NULL;
- result = getaddrinfo(hostname, NULL, &hints, &res);
-#ifdef WORKING_IPV6
+ result = resolve_hostname(hostname, SOCK_STREAM, &res, NULL);
if(result != 0) {
- hints.ai_flags = AI_CANONNAME;
- hints.ai_family = AF_UNSPEC;
- result = getaddrinfo(hostname, NULL, &hints, &res);
+ g_debug(_("resolve_hostname(%s): %s"), hostname, gai_strerror(result));
+ errno = EHOSTUNREACH;
+ return -1;
}
-#endif
- if(result != 0) {
- dbprintf(("getaddrinfo: %s\n", gai_strerror(result)));
+ if(!res) {
+ g_debug(_("resolve_hostname(%s): no results"), hostname);
+ errno = EHOSTUNREACH;
return -1;
}
- memcpy(&svaddr, res->ai_addr, (size_t)res->ai_addrlen);
- freeaddrinfo(res);
- SS_SET_PORT(&svaddr, port);
+ for (res_addr = res; res_addr != NULL; res_addr = res_addr->ai_next) {
+ /* copy the first (preferred) address we found */
+ copy_sockaddr(&svaddr, (sockaddr_union *)res_addr->ai_addr);
+ SU_SET_PORT(&svaddr, port);
- SS_INIT(&claddr, svaddr.ss_family);
- SS_SET_INADDR_ANY(&claddr);
+ SU_INIT(&claddr, SU_GET_FAMILY(&svaddr));
+ SU_SET_INADDR_ANY(&claddr);
- /*
- * If a privileged port range was requested, we try to get a port in
- * that range first and fail if it is not available. Next, we try
- * to get a port in the range built in when Amanda was configured.
- * If that fails, we just go for any port.
- *
- * It is up to the caller to make sure we have the proper permissions
- * to get the desired port, and to make sure we return a port that
- * is within the range it requires.
- */
- if (priv) {
- portrange = getconf_intrange(CNF_RESERVED_TCP_PORT);
- } else {
- portrange = getconf_intrange(CNF_UNRESERVED_TCP_PORT);
+ /*
+ * If a privileged port range was requested, we try to get a port in
+ * that range first and fail if it is not available. Next, we try
+ * to get a port in the range built in when Amanda was configured.
+ * If that fails, we just go for any port.
+ *
+ * It is up to the caller to make sure we have the proper permissions
+ * to get the desired port, and to make sure we return a port that
+ * is within the range it requires.
+ */
+ if (priv) {
+ portrange = getconf_intrange(CNF_RESERVED_TCP_PORT);
+ } else {
+ portrange = getconf_intrange(CNF_UNRESERVED_TCP_PORT);
+ }
+ client_socket = connect_portrange(&claddr, (in_port_t)portrange[0],
+ (in_port_t)portrange[1],
+ "tcp", &svaddr, nonblock);
+ save_errno = errno;
+ if (client_socket > 0)
+ break;
}
- client_socket = connect_portrange(&claddr, (in_port_t)portrange[0],
- (in_port_t)portrange[1],
- "tcp", &svaddr, nonblock);
- save_errno = errno;
+
+ freeaddrinfo(res);
if (client_socket > 0)
goto out;
- dbprintf(("%s: stream_client: Could not bind to port in range %d-%d.\n",
- debug_prefix_time(NULL), portrange[0], portrange[1]));
+ g_debug(_("stream_client: Could not bind to port in range %d-%d."),
+ portrange[0], portrange[1]);
errno = save_errno;
return -1;
try_socksize(client_socket, SO_SNDBUF, sendsize);
try_socksize(client_socket, SO_RCVBUF, recvsize);
if (localport != NULL)
- *localport = SS_GET_PORT(&claddr);
+ *localport = SU_GET_PORT(&claddr);
return client_socket;
}
}
/* don't care about these values */
-static struct sockaddr_storage addr;
-static socklen_t addrlen;
+static sockaddr_union addr;
+static socklen_t_equiv addrlen;
+
+static gboolean
+stream_accept_prolong(
+ gpointer data)
+{
+ time_t *tp = data;
+ return time(NULL) <= *tp;
+}
int
stream_accept(
size_t sendsize,
size_t recvsize)
{
- SELECT_ARG_TYPE readset;
- struct timeval tv;
- int nfound, connected_socket;
+ time_t timeout_time;
+ int connected_socket;
int save_errno;
- int ntries = 0;
in_port_t port;
assert(server_socket >= 0);
- do {
- ntries++;
- memset(&tv, 0, SIZEOF(tv));
- tv.tv_sec = timeout;
- memset(&readset, 0, SIZEOF(readset));
- FD_ZERO(&readset);
- FD_SET(server_socket, &readset);
- nfound = select(server_socket+1, &readset, NULL, NULL, &tv);
- if(nfound <= 0 || !FD_ISSET(server_socket, &readset)) {
- save_errno = errno;
- if(nfound < 0) {
- dbprintf(("%s: stream_accept: select() failed: %s\n",
- debug_prefix_time(NULL),
- strerror(save_errno)));
- } else if(nfound == 0) {
- dbprintf(("%s: stream_accept: timeout after %d second%s\n",
- debug_prefix_time(NULL),
- timeout,
- (timeout == 1) ? "" : "s"));
- errno = ENOENT; /* ??? */
- return -1;
- } else if (!FD_ISSET(server_socket, &readset)) {
- int i;
-
- for(i = 0; i < server_socket + 1; i++) {
- if(FD_ISSET(i, &readset)) {
- dbprintf(("%s: stream_accept: got fd %d instead of %d\n",
- debug_prefix_time(NULL),
- i,
- server_socket));
- }
- }
- save_errno = EBADF;
- }
- if (ntries > 5) {
- errno = save_errno;
- return -1;
- }
- }
- } while (nfound <= 0);
+ /* set the time we want to stop accepting */
+ timeout_time = time(NULL) + timeout;
while(1) {
- addrlen = (socklen_t)sizeof(struct sockaddr_storage);
- connected_socket = accept(server_socket,
+ addrlen = (socklen_t_equiv)sizeof(sockaddr_union);
+ connected_socket = interruptible_accept(server_socket,
(struct sockaddr *)&addr,
- &addrlen);
+ &addrlen, stream_accept_prolong,
+ &timeout_time);
if(connected_socket < 0) {
+ if (errno == 0) {
+ g_debug(plural(_("stream_accept: timeout after %d second"),
+ _("stream_accept: timeout after %d seconds"),
+ timeout),
+ timeout);
+ errno = ETIMEDOUT;
+ return -1;
+ }
break;
}
- dbprintf(("%s: stream_accept: connection from %s\n",
- debug_prefix_time(NULL),
- str_sockaddr(&addr)));
+ g_debug(_("stream_accept: connection from %s"),
+ str_sockaddr(&addr));
/*
* Make certain we got an inet connection and that it is not
* from port 20 (a favorite unauthorized entry tool).
*/
- if (addr.ss_family == (sa_family_t)AF_INET
+ if (SU_GET_FAMILY(&addr) == AF_INET
#ifdef WORKING_IPV6
- || addr.ss_family == (sa_family_t)AF_INET6
+ || SU_GET_FAMILY(&addr) == AF_INET6
#endif
){
- port = SS_GET_PORT(&addr);
+ port = SU_GET_PORT(&addr);
if (port != (in_port_t)20) {
try_socksize(connected_socket, SO_SNDBUF, sendsize);
try_socksize(connected_socket, SO_RCVBUF, recvsize);
return connected_socket;
} else {
- dbprintf(("%s: remote port is %u: ignored\n",
- debug_prefix_time(NULL), (unsigned int)port));
+ g_debug(_("remote port is %u: ignored"),
+ (unsigned int)port);
}
} else {
#ifdef WORKING_IPV6
- dbprintf(("%s: family is %d instead of %d(AF_INET)"
- " or %d(AF_INET6): ignored\n",
- debug_prefix_time(NULL),
- addr.ss_family,
- AF_INET, AF_INET6));
+ g_debug(_("family is %d instead of %d(AF_INET)"
+ " or %d(AF_INET6): ignored"),
+ SU_GET_FAMILY(&addr),
+ AF_INET, AF_INET6);
#else
- dbprintf(("%s: family is %d instead of %d(AF_INET)"
- ": ignored\n",
- debug_prefix_time(NULL),
- addr.ss_family,
- AF_INET));
+ g_debug(_("family is %d instead of %d(AF_INET)"
+ ": ignored"),
+ SU_GET_FAMILY(&addr),
+ AF_INET);
#endif
}
aclose(connected_socket);
}
save_errno = errno;
- dbprintf(("%s: stream_accept: accept() failed: %s\n",
- debug_prefix_time(NULL),
- strerror(save_errno)));
+ g_debug(_("stream_accept: accept() failed: %s"),
+ strerror(save_errno));
errno = save_errno;
return -1;
}
/* keep trying, get as big a buffer as possible */
while((isize > 1024) &&
(setsockopt(sock, SOL_SOCKET,
- which, (void *) &isize, (socklen_t)sizeof(isize)) < 0)) {
+ which, (void *) &isize, (socklen_t_equiv)sizeof(isize)) < 0)) {
isize -= 1024;
}
if(isize > 1024) {
- dbprintf(("%s: try_socksize: %s buffer size is %d\n",
- debug_prefix_time(NULL),
- (which == SO_SNDBUF) ? "send" : "receive",
- isize));
+ g_debug(_("try_socksize: %s buffer size is %d"),
+ (which == SO_SNDBUF) ? _("send") : _("receive"),
+ isize);
} else {
- dbprintf(("%s: try_socksize: could not allocate %s buffer of " SIZE_T_FMT "\n",
- debug_prefix_time(NULL),
- (which == SO_SNDBUF) ? "send" : "receive",
- origsize));
+ g_debug(_("try_socksize: could not allocate %s buffer of %zu"),
+ (which == SO_SNDBUF) ? _("send") : _("receive"),
+ origsize);
}
}