varnish-cache/lib/libvarnish/vsa.c
0
/*-
1
 * Copyright (c) 2013-2015 Varnish Software AS
2
 * All rights reserved.
3
 *
4
 * Author: Poul-Henning Kamp <phk@phk.freebsd.dk>
5
 *
6
 * SPDX-License-Identifier: BSD-2-Clause
7
 *
8
 * Redistribution and use in source and binary forms, with or without
9
 * modification, are permitted provided that the following conditions
10
 * are met:
11
 * 1. Redistributions of source code must retain the above copyright
12
 *    notice, this list of conditions and the following disclaimer.
13
 * 2. Redistributions in binary form must reproduce the above copyright
14
 *    notice, this list of conditions and the following disclaimer in the
15
 *    documentation and/or other materials provided with the distribution.
16
 *
17
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20
 * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
21
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27
 * SUCH DAMAGE.
28
 *
29
 * Struct sockaddr_* is not even close to a convenient API.
30
 *
31
 * These functions try to mitigate the madness, at the cost of actually
32
 * knowing something about address families.
33
 */
34
35
#include "config.h"
36
37
#include <string.h>
38
#include <stdint.h>
39
#include <stdlib.h>
40
#include <sys/socket.h>
41
#include <sys/un.h>
42
#include <sys/types.h>
43
#include <netinet/in.h>
44
45
#include "vdef.h"
46
#include "vas.h"
47
#include "vsa.h"
48
#include "miniobj.h"
49
50
/*
51
 * Struct sockaddr{|_in|_in6|_storage} is absolutely the worst data
52
 * structure I have ever seen gold-plated in international standards.
53
 *
54
 * Network addresses have multiple different forms, many fewer today
55
 * than in last century, but imagine that in addition to IPv4 and IPv6
56
 * we had 40 other protocols.  Actually, you don't need to imagine that
57
 * just count the AF_* macros in /usr/include/sys/socket.h.
58
 *
59
 * So what do we pass the kernel API for an address to bind(2), connect(2) &
60
 * listen(2) etc. etc ?
61
 *
62
 * We could define a struct which is big enough to hold any and all
63
 * of these addresses.  That would make it a fixed size argument.
64
 * obviously the struct would have to be something like:
65
 *      struct bla {
66
 *              int family;
67
 *              char address[MAX_ADDR_LEN];
68
 *      }
69
 * and MAX_ADDR_LEN would have to be quite large, 128 byte or so.
70
 *
71
 * Back in last century that was TOTALLY unacceptable waste of space.
72
 *
73
 * The way which was chosen instead, was to make a "generic" address,
74
 * and have per protocol "specific" addresses, and pass the length
75
 * argument explicitly to the KPI functions.
76
 *
77
 * The generic address was called "struct sockaddr", and the specific
78
 * were called "struct sockaddr_${whatever}".  All of these must have
79
 * a "family" field as first element, so the kernel can figure out
80
 * which protocol it is.
81
 *
82
 * The generic struct sockaddr was made big enough for all protocols
83
 * supported in the kernel, so it would have different sizes depending
84
 * on your machine and kernel configuration.
85
 *
86
 * However, that allowed you to write protocol-agnostic programs, by
87
 * using "struct sockaddr" throughout, and relying on libray APIs for
88
 * things like name to address (and vice versa) resolution, and since
89
 * nobody were in the business of shipping random UNIX binaries around
90
 * the lack of binary portability didn't matter.
91
 *
92
 * Along the way the BSD people figured out that it was a bother
93
 * to carry the length argument separately, and added that to the
94
 * format of sockaddr, but other groups found this unclean, as
95
 * the length was already an explicit parameter.
96
 *
97
 * The net result of this is that your "portable" code, must take
98
 * care to handle the "sa_len" member on kernels which have it,
99
 * while still tracking the separate length argument for all other
100
 * kernels.
101
 *
102
 * Needless to say, there were no neat #define to tell you which
103
 * was which, so each programmer found a different heuristic to
104
 * decide, often not understanding it fully, which caused the kind
105
 * of portability issues which lead to the autocrap tools.
106
 *
107
 * Then all the other protocols died, we were left with IP and
108
 * life were good, the dot-com madness multiplied the IT-business
109
 * by a factor 1000, by making any high-school student who had
110
 * programmed PERL for 6 weeks a "senior web-programmer".
111
 *
112
 * Next IPv6 happened, in a rush even, (no seriously, I'm not kidding!),
113
 * and since IPv6 addresses were HUGE, like 16 bytes HUGE, the generic
114
 * struct sockaddr was not increased in size.
115
 *
116
 * At least "not yet", because it would break all the shitty code written
117
 * by the dot-com generation.
118
 *
119
 * Nobody used IPv6 anyway so that didn't matter that much.
120
 *
121
 * Then people actually started using IPv6 and its struct sockaddr_in6,
122
 * and realized that all the code which used "struct sockaddr" to allocate
123
 * space at compile time were broken.
124
 *
125
 * Some people took to using sockaddr_in6, since that was known to
126
 * be big enough for both IPv4 and IPv6, but "purist" found that
127
 * ugly and "prone to future trouble".
128
 *
129
 * So instead they came up with a "clean solution":  The added
130
 * "struct sockaddr_storage" which is defined to be "Large enough
131
 * to accommodate all supported protocol-specific address structures".
132
 *
133
 * Since we cannot possibly know what zany protocols will exist in
134
 * the future, and since some people think that we will add future
135
 * protocols, while retaining ABI compatibility, (totally overlooking
136
 * the fact that no code for name-resolution supports that) it is
137
 * usually defined so it can cope with 128 byte addresses.
138
 *
139
 * Does that ring a bell ?
140
 *
141
 * Only, not quite:  Remember that all APIs require you to track
142
 * the address and the length separately, so you only get the
143
 * size of the specific protocols sockaddr_${whatever} from API
144
 * functions, not a full sockaddr_storage, and besides the
145
 * prototype for the KPI is still "struct sockaddr *", so you
146
 * cannot gain C type-safety back by using sockaddr_storage
147
 * as the "generic network address" type.
148
 *
149
 * So we have come full circle, while causing maximum havoc along
150
 * the way and for the forseeable future.
151
 *
152
 * Do I need to tell you that static code analysis tools have a
153
 * really hard time coping with this, and that they give a lot of
154
 * false negatives which confuse people ?
155
 *
156
 * I have decided to try to contain this crap in this single
157
 * source-file, with only minimum leakage into the rest of Varnish,
158
 * which will only know of pointers to "struct suckaddr", the naming
159
 * of which is my of the historical narrative above.
160
 *
161
 * And you don't need to take my word for this, you can see it all
162
 * in various #include files on your own system.   If you are on
163
 * a Solaris derivative, don't miss the beautiful horror hidden in the
164
 * variant definition of IPv6 addresses between kernel and userland.
165
 *
166
 */
167
168
struct suckaddr {
169
        unsigned                        magic;
170
#define SUCKADDR_MAGIC                  0x4b1e9335
171
        union {
172
                struct sockaddr         sa;
173
                struct sockaddr_in      sa4;
174
                struct sockaddr_in6     sa6;
175
        } u;
176
};
177
178
const size_t vsa_suckaddr_len = sizeof(struct suckaddr);
179
180
/*
181
 * Bogus IPv4 address 0.0.0.0:0 to be used for VCL *.ip variables when the
182
 * "real" address is not IP (such as UDS addresses).
183
 */
184
static struct suckaddr bogo_ip_vsa;
185
const struct suckaddr *bogo_ip = &bogo_ip_vsa;
186
/* same in IPv6 */
187
static struct suckaddr bogo_ip6_vsa;
188
const struct suckaddr *bogo_ip6 = &bogo_ip6_vsa;
189
190
void
191 39600
VSA_Init(void)
192
{
193 39600
        AN(VSA_BuildFAP(&bogo_ip_vsa, PF_INET, NULL, 0, NULL, 0));
194 39600
        AN(VSA_BuildFAP(&bogo_ip6_vsa, PF_INET6, NULL, 0, NULL, 0));
195 39600
}
196
197
/*
198
 * This VRT interface is for the VCC generated ACL code, which needs
199
 * to know the address family and a pointer to the actual address.
200
 */
201
202
int
203 3863560
VSA_GetPtr(const struct suckaddr *sua, const unsigned char ** dst)
204
{
205
206 3863560
        AN(dst);
207 3863560
        if (sua == NULL)
208 0
                return (-1);
209 3863560
        CHECK_OBJ_NOTNULL(sua, SUCKADDR_MAGIC);
210
211 3863560
        switch (sua->u.sa.sa_family) {
212
        case PF_INET:
213 9200
                assert(sua->u.sa.sa_family == sua->u.sa4.sin_family);
214 9200
                *dst = (const unsigned char *)&sua->u.sa4.sin_addr;
215 9200
                return (sua->u.sa4.sin_family);
216
        case PF_INET6:
217 3854360
                assert(sua->u.sa.sa_family == sua->u.sa6.sin6_family);
218 3854360
                *dst = (const unsigned char *)&sua->u.sa6.sin6_addr;
219 3854360
                return (sua->u.sa6.sin6_family);
220
        default:
221 0
                *dst = NULL;
222 0
                return (-1);
223
        }
224 3863560
}
225
226
/*
227
 * Return the size of a struct sockaddr in a struck suckaddr
228
 * or 0 if unknown family
229
 */
230
static inline
231 6473763
socklen_t sua_len(const struct sockaddr *sa)
232
{
233
234 6473763
        switch (sa->sa_family) {
235
        case PF_INET:
236 2363483
                return (sizeof(struct sockaddr_in));
237
        case PF_INET6:
238 4110240
                return (sizeof(struct sockaddr_in6));
239
        case AF_UNIX:
240 40
                return (sizeof(struct sockaddr_un));
241
        default:
242 0
                return (0);
243
        }
244 6473763
}
245
246
/*
247
 * Malloc a suckaddr from a sockaddr of some kind.
248
 */
249
250
const struct suckaddr *
251 455677
VSA_Malloc(const void *s, unsigned  sal)
252
{
253
254 455677
        return (VSA_Build(NULL, s, sal));
255
}
256
257
/*
258
 * 'd' SHALL point to vsa_suckaddr_len aligned bytes of storage
259
 *
260
 * fam: address family
261
 * a / al : address and length
262
 * p / pl : port and length
263
 *
264
 * NULL or 0 length argument are ignored.
265
 * argument of the wrong length are an error (NULL return value, EINVAL)
266
 */
267
const struct suckaddr *
268 81640
VSA_BuildFAP(void *d, sa_family_t fam, const void *a, unsigned al,
269
            const void *p, unsigned pl)
270
{
271
        struct sockaddr_in sin4;
272
        struct sockaddr_in6 sin6;
273
274 81640
        switch (fam) {
275
        case PF_INET:
276 41520
                memset(&sin4, 0, sizeof sin4);
277 41520
                sin4.sin_family = fam;
278 41520
                if (a != NULL && al > 0) {
279 1920
                        if (al != sizeof(sin4.sin_addr))
280 0
                                break;
281 1920
                        memcpy(&sin4.sin_addr, a, al);
282 1920
                }
283 41520
                if (p != NULL && pl > 0) {
284 1680
                        if (pl != sizeof(sin4.sin_port))
285 0
                                break;
286 1680
                        memcpy(&sin4.sin_port, p, pl);
287 1680
                }
288 41520
                return (VSA_Build(d, &sin4, sizeof sin4));
289
        case PF_INET6:
290 40120
                memset(&sin6, 0, sizeof sin6);
291 40120
                sin6.sin6_family = fam;
292 40120
                if (a != NULL && al > 0) {
293 520
                        if (al != sizeof(sin6.sin6_addr))
294 0
                                break;
295 520
                        memcpy(&sin6.sin6_addr, a, al);
296 520
                }
297 40120
                if (p != NULL && pl > 0) {
298 400
                        if (pl != sizeof(sin6.sin6_port))
299 0
                                break;
300 400
                        memcpy(&sin6.sin6_port, p, pl);
301 400
                }
302 40120
                return (VSA_Build(d, &sin6, sizeof sin6));
303
        default:
304 0
                errno = EAFNOSUPPORT;
305 0
                return (NULL);
306
        }
307 0
        errno = EINVAL;
308 0
        return (NULL);
309 81640
}
310
311
const struct suckaddr *
312 616838
VSA_Build(void *d, const void *s, unsigned sal)
313
{
314
        struct suckaddr *sua;
315 616838
        const struct sockaddr *sa = s;
316
        unsigned l;     // for flexelint
317
318 616838
        AN(s);
319 616838
        l = sua_len(sa);
320 616838
        if (l == 0 || l != sal)
321 51
                return (NULL);
322
323 616797
        if (d == NULL) {
324 455677
                d = malloc(vsa_suckaddr_len);
325 455677
                AN(d);
326 455677
        }
327
328 616797
        sua = d;
329
330 616797
        INIT_OBJ(sua, SUCKADDR_MAGIC);
331 616797
        switch (l) {
332
        case sizeof sua->u.sa4:
333 492037
                memcpy(&sua->u.sa4, s, l);
334 492037
                break;
335
        case sizeof sua->u.sa6:
336 124760
                memcpy(&sua->u.sa6, s, l);
337 124760
                break;
338
        default:
339 0
                WRONG("VSA protocol vs. size");
340 0
        }
341
#ifdef HAVE_STRUCT_SOCKADDR_SA_LEN
342 616797
        sua->u.sa.sa_len = (unsigned char)l;
343
#endif
344 616797
        return (sua);
345 616848
}
346
347
const void *
348 1577235
VSA_Get_Sockaddr(const struct suckaddr *sua, socklen_t *slp)
349
{
350
        socklen_t sl;
351
352 1577235
        CHECK_OBJ_NOTNULL(sua, SUCKADDR_MAGIC);
353 1577235
        AN(slp);
354 1577235
        sl = sua_len(&sua->u.sa);
355 1577235
        if (sl == 0)
356 0
                return (NULL);
357 1577235
        *slp = sl;
358 1577235
        return (&sua->u.sa);
359 1577235
}
360
361
int
362 536228
VSA_Get_Proto(const struct suckaddr *sua)
363
{
364
365 536228
        CHECK_OBJ_NOTNULL(sua, SUCKADDR_MAGIC);
366 536228
        return (sua->u.sa.sa_family);
367
}
368
369
int
370 4279706
VSA_Sane(const struct suckaddr *sua)
371
{
372 4279706
        return (VALID_OBJ(sua, SUCKADDR_MAGIC) && sua_len(&sua->u.sa) != 0);
373
}
374
375
int
376 8504
VSA_Compare(const struct suckaddr *sua1, const struct suckaddr *sua2)
377
{
378
379 8504
        CHECK_OBJ_NOTNULL(sua1, SUCKADDR_MAGIC);
380 8504
        CHECK_OBJ_NOTNULL(sua2, SUCKADDR_MAGIC);
381 8504
        return (memcmp(sua1, sua2, vsa_suckaddr_len));
382
}
383
384
int
385 935
VSA_Compare_IP(const struct suckaddr *sua1, const struct suckaddr *sua2)
386
{
387
388 935
        assert(VSA_Sane(sua1));
389 935
        assert(VSA_Sane(sua2));
390
391 935
        if (sua1->u.sa.sa_family != sua2->u.sa.sa_family)
392 0
                return (-1);
393
394 935
        switch (sua1->u.sa.sa_family) {
395
        case PF_INET:
396 1870
                return (memcmp(&sua1->u.sa4.sin_addr,
397 935
                    &sua2->u.sa4.sin_addr, sizeof(struct in_addr)));
398
        case PF_INET6:
399 0
                return (memcmp(&sua1->u.sa6.sin6_addr,
400 0
                    &sua2->u.sa6.sin6_addr, sizeof(struct in6_addr)));
401
        default:
402 0
                WRONG("Just plain insane");
403 0
        }
404 0
        NEEDLESS(return (-1));
405 935
}
406
407
const struct suckaddr *
408 131080
VSA_Clone(const struct suckaddr *sua)
409
{
410
        struct suckaddr *sua2;
411
412 131080
        assert(VSA_Sane(sua));
413 131080
        sua2 = calloc(1, vsa_suckaddr_len);
414 131080
        XXXAN(sua2);
415 131080
        memcpy(sua2, sua, vsa_suckaddr_len);
416 131080
        return (sua2);
417
}
418
419
unsigned
420 42800
VSA_Port(const struct suckaddr *sua)
421
{
422
423 42800
        CHECK_OBJ_NOTNULL(sua, SUCKADDR_MAGIC);
424 42800
        switch (sua->u.sa.sa_family) {
425
        case PF_INET:
426 40880
                return (ntohs(sua->u.sa4.sin_port));
427
        case PF_INET6:
428 1920
                return (ntohs(sua->u.sa6.sin6_port));
429
        default:
430 0
                return (0);
431
        }
432 42800
}
433
434
#define VSA_getname(which)                              \
435
const struct suckaddr *                                 \
436
VSA_get ## which ## name(int fd, void *d, size_t l)     \
437
{                                                       \
438
        struct suckaddr *sua;                           \
439
        socklen_t sl;                                   \
440
        int r;                                          \
441
                                                        \
442
        AN(d);                                          \
443
        if (l != vsa_suckaddr_len) {                    \
444
                errno = EINVAL;                         \
445
                return (NULL);                          \
446
        }                                               \
447
                                                        \
448
        sua = d;                                        \
449
                                                        \
450
        INIT_OBJ(sua, SUCKADDR_MAGIC);                  \
451
        sl = sizeof(sua->u);                            \
452
        r = get ## which ## name(fd, &sua->u.sa, &sl);  \
453
                                                        \
454
        return (r == 0 ? sua : NULL);                   \
455
}                                                       \
456
457 613623
VSA_getname(sock)
458 310995
VSA_getname(peer)
459
#undef VSA_getname
460
461
void
462 548276
VSA_free(const struct suckaddr **vsap)
463
{
464
        const struct suckaddr *vsa;
465
466 548276
        TAKE_OBJ_NOTNULL(vsa, vsap, SUCKADDR_MAGIC);
467 548276
        free(TRUST_ME(vsa));
468 548276
}