OpenSolaris_b135/lib/libinetsvc/common/inetsvc.c
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright 2009 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
/*
* This library contains a set of routines that are shared amongst inetd,
* inetadm, inetconv and the formerly internal inetd services. Amongst the
* routines are ones for reading and validating the configuration of an
* inetd service, a routine for requesting inetd be refreshed, ones for
* reading, calculating and writing the hash of an inetd.conf file, and
* numerous utility routines shared amongst the formerly internal inetd
* services.
*/
#include <string.h>
#include <rpc/rpcent.h>
#include <netdb.h>
#include <limits.h>
#include <errno.h>
#include <inetsvc.h>
#include <stdlib.h>
#include <unistd.h>
#include <nss_dbdefs.h>
#include <stdio.h>
#include <fcntl.h>
#include <pwd.h>
#include <md5.h>
#include <arpa/inet.h>
#include <netinet/in.h>
#include <signal.h>
#include <syslog.h>
#include <libintl.h>
#include <stdlib.h>
#include <assert.h>
#include <rpc/nettype.h>
#include <libuutil.h>
static inetd_prop_t inetd_properties[] = {
{PR_SVC_NAME_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_STRING,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_SOCK_TYPE_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_STRING,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_PROTO_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_STRING_LIST,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_ISRPC_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_BOOLEAN,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_RPC_LW_VER_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_RPC_HI_VER_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_ISWAIT_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_BOOLEAN,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_EXEC_NAME, START_METHOD_NAME, INET_TYPE_STRING,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_ARG0_NAME, START_METHOD_NAME, INET_TYPE_STRING,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_USER_NAME, START_METHOD_NAME, INET_TYPE_STRING,
B_FALSE, IVE_UNSET, NULL, B_FALSE},
{PR_BIND_ADDR_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_STRING,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_BIND_FAIL_MAX_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_BIND_FAIL_INTVL_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_CON_RATE_MAX_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_MAX_COPIES_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_CON_RATE_OFFLINE_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_MAX_FAIL_RATE_CNT_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_MAX_FAIL_RATE_INTVL_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_INHERIT_ENV_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_BOOLEAN,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_DO_TCP_TRACE_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_BOOLEAN,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_DO_TCP_WRAPPERS_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_BOOLEAN,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_CONNECTION_BACKLOG_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_INTEGER,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{PR_DO_TCP_KEEPALIVE_NAME, PG_NAME_SERVICE_CONFIG, INET_TYPE_BOOLEAN,
B_TRUE, IVE_UNSET, NULL, B_FALSE},
{NULL},
};
#define INETSVC_SVC_BUF_MAX (NSS_BUFLEN_RPC + sizeof (struct rpcent))
#define DIGEST_LEN 16
#define READ_BUFSIZ 8192
#define HASH_PG "hash"
#define HASH_PROP "md5sum"
/*
* Inactivity timer used by dg_template(). After this many seconds of network
* inactivity dg_template will cease listening for new datagrams and return.
*/
#define DG_INACTIVITY_TIMEOUT 60
static boolean_t v6_proto(const char *);
boolean_t
is_tlx_service(inetd_prop_t *props)
{
return ((strcmp(SOCKTYPE_TLI_STR,
props[PT_SOCK_TYPE_INDEX].ip_value.iv_string) == 0) ||
(strcmp(SOCKTYPE_XTI_STR,
props[PT_SOCK_TYPE_INDEX].ip_value.iv_string) == 0));
}
/*
* Return a reference to the property table. Number of entries in table
* are returned in num_elements argument.
*/
inetd_prop_t *
get_prop_table(size_t *num_elements)
{
*num_elements = sizeof (inetd_properties) / sizeof (inetd_prop_t);
return (&inetd_properties[0]);
}
/*
* find_prop takes an array of inetd_prop_t's, the name of an inetd
* property, the type expected, and returns a pointer to the matching member,
* or NULL.
*/
inetd_prop_t *
find_prop(const inetd_prop_t *prop, const char *name, inet_type_t type)
{
int i = 0;
while (prop[i].ip_name != NULL && strcmp(name, prop[i].ip_name) != 0)
i++;
if (prop[i].ip_name == NULL)
return (NULL);
if (prop[i].ip_type != type)
return (NULL);
return ((inetd_prop_t *)prop + i);
}
/*
* get_prop_value_int takes an array of inetd_prop_t's together with the name of
* an inetd property and returns the value of the property. It's expected that
* the property exists in the searched array.
*/
int64_t
get_prop_value_int(const inetd_prop_t *prop, const char *name)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_INTEGER);
return (p->ip_value.iv_int);
}
/*
* get_prop_value_count takes an array of inetd_prop_t's together with the name
* of an inetd property and returns the value of the property. It's expected
* that the property exists in the searched array.
*/
uint64_t
get_prop_value_count(const inetd_prop_t *prop, const char *name)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_COUNT);
return (p->ip_value.iv_cnt);
}
/*
* get_prop_value_boolean takes an array of inetd_prop_t's together with the
* name of an inetd property and returns the value of the property. It's
* expected that the property exists in the searched array.
*/
boolean_t
get_prop_value_boolean(const inetd_prop_t *prop, const char *name)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_BOOLEAN);
return (p->ip_value.iv_boolean);
}
/*
* get_prop_value_string takes an array of inetd_prop_t's together with
* the name of an inetd property and returns the value of the property.
* It's expected that the property exists in the searched array.
*/
const char *
get_prop_value_string(const inetd_prop_t *prop, const char *name)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_STRING);
return (p->ip_value.iv_string);
}
/*
* get_prop_value_string_list takes an array of inetd_prop_t's together
* with the name of an inetd property and returns the value of the property.
* It's expected that the property exists in the searched array.
*/
const char **
get_prop_value_string_list(const inetd_prop_t *prop, const char *name)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_STRING_LIST);
return ((const char **)p->ip_value.iv_string_list);
}
/*
* put_prop_value_int takes an array of inetd_prop_t's, a name of an inetd
* property, and a value. It copies the value into the property
* in the array. It's expected that the property exists in the searched array.
*/
void
put_prop_value_int(inetd_prop_t *prop, const char *name, int64_t value)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_INTEGER);
p->ip_value.iv_int = value;
p->ip_error = IVE_VALID;
}
/*
* put_prop_value_count takes an array of inetd_prop_t's, a name of an inetd
* property, and a value. It copies the value into the property
* in the array. It's expected that the property exists in the searched array.
*/
void
put_prop_value_count(inetd_prop_t *prop, const char *name, uint64_t value)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_COUNT);
p->ip_value.iv_cnt = value;
p->ip_error = IVE_VALID;
}
/*
* put_prop_value_boolean takes an array of inetd_prop_t's, a name of an inetd
* property, and a value. It copies the value into the property
* in the array. It's expected that the property exists in the searched array.
*/
void
put_prop_value_boolean(inetd_prop_t *prop, const char *name, boolean_t value)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_BOOLEAN);
p->ip_value.iv_boolean = value;
p->ip_error = IVE_VALID;
}
/*
* put_prop_value_string takes an array of inetd_prop_t's, a name of an inetd
* property, and a value. It duplicates the value into the property
* in the array, and returns B_TRUE for success and B_FALSE for failure. It's
* expected that the property exists in the searched array.
*/
boolean_t
put_prop_value_string(inetd_prop_t *prop, const char *name, const char *value)
{
inetd_prop_t *p;
if (strlen(value) >= scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH)) {
errno = E2BIG;
return (B_FALSE);
}
p = find_prop(prop, name, INET_TYPE_STRING);
if ((p->ip_value.iv_string = strdup(value)) == NULL)
return (B_FALSE);
p->ip_error = IVE_VALID;
return (B_TRUE);
}
/*
* put_prop_value_string_list takes an array of inetd_prop_t's, a name of an
* inetd property, and a value. It copies the value into the property
* in the array. It's expected that the property exists in the searched array.
*/
void
put_prop_value_string_list(inetd_prop_t *prop, const char *name, char **value)
{
inetd_prop_t *p;
p = find_prop(prop, name, INET_TYPE_STRING_LIST);
p->ip_value.iv_string_list = value;
p->ip_error = IVE_VALID;
}
static void
destroy_rpc_info(rpc_info_t *rpc)
{
if (rpc != NULL) {
free(rpc->netbuf.buf);
free(rpc->netid);
free(rpc);
}
}
/*
* If 'proto' is a valid netid, and no memory allocations fail, returns a
* pointer to an allocated and initialized rpc_info_t, else NULL.
*/
static rpc_info_t *
create_rpc_info(const char *proto, int pnum, int low_ver, int high_ver)
{
struct netconfig *nconf;
rpc_info_t *ret;
if ((ret = calloc(1, sizeof (rpc_info_t))) == NULL)
return (NULL);
ret->netbuf.maxlen = sizeof (struct sockaddr_storage);
if ((ret->netbuf.buf = malloc(ret->netbuf.maxlen)) == NULL) {
free(ret);
return (NULL);
}
ret->prognum = pnum;
ret->lowver = low_ver;
ret->highver = high_ver;
if ((ret->netid = strdup(proto)) == NULL) {
destroy_rpc_info(ret);
return (NULL);
}
/*
* Determine whether this is a loopback transport. If getnetconfigent()
* fails, we check to see whether it was the result of a v6 proto
* being specified and no IPv6 interface was configured on the system;
* if this holds, we know it must not be a loopback transport, else
* getnetconfigent() must be miss-behaving, so return an error.
*/
if ((nconf = getnetconfigent(proto)) != NULL) {
if (strcmp(nconf->nc_protofmly, NC_LOOPBACK) == 0)
ret->is_loopback = B_TRUE;
freenetconfigent(nconf);
} else if (!v6_proto(proto)) {
destroy_rpc_info(ret);
return (NULL);
}
return (ret);
}
void
destroy_tlx_info(tlx_info_t *tlx)
{
tlx_conn_ind_t *ci;
void *cookie = NULL;
if (tlx == NULL)
return;
free(tlx->dev_name);
if (tlx->conn_ind_queue != NULL) {
/* free up conn ind queue */
while ((ci = uu_list_teardown(tlx->conn_ind_queue, &cookie)) !=
NULL) {
(void) t_free((char *)ci->call, T_CALL);
free(ci);
}
uu_list_destroy(tlx->conn_ind_queue);
}
free(tlx->local_addr.buf);
free(tlx);
}
/*
* Allocate, initialize and return a pointer to a tlx_info_t structure.
* On memory allocation failure NULL is returned.
*/
static tlx_info_t *
create_tlx_info(const char *proto, uu_list_pool_t *conn_ind_pool)
{
size_t sz;
tlx_info_t *ret;
if ((ret = calloc(1, sizeof (tlx_info_t))) == NULL)
return (NULL);
ret->local_addr.maxlen = sizeof (struct sockaddr_storage);
if ((ret->local_addr.buf = calloc(1, ret->local_addr.maxlen)) == NULL)
goto fail;
if ((ret->conn_ind_queue = uu_list_create(conn_ind_pool, NULL, 0)) ==
NULL)
goto fail;
ret->local_addr.len = sizeof (struct sockaddr_in);
/* LINTED E_BAD_PTR_CAST_ALIGN */
((struct sockaddr_in *)(ret->local_addr.buf))->sin_family = AF_INET;
/* LINTED E_BAD_PTR_CAST_ALIGN */
((struct sockaddr_in *)(ret->local_addr.buf))->sin_addr.s_addr =
htonl(INADDR_ANY);
/* store device name, constructing if necessary */
if (proto[0] != '/') {
sz = strlen("/dev/") + strlen(proto) + 1;
if ((ret->dev_name = malloc(sz)) == NULL)
goto fail;
(void) snprintf(ret->dev_name, sz, "/dev/%s", proto);
} else if ((ret->dev_name = strdup(proto)) == NULL) {
goto fail;
}
return (ret);
fail:
destroy_tlx_info(ret);
return (NULL);
}
/*
* Returns B_TRUE if this is a v6 protocol valid for both TLI and socket
* based services, else B_FALSE.
*/
static boolean_t
v6_proto(const char *proto)
{
return ((strcmp(proto, SOCKET_PROTO_TCP6) == 0) ||
(strcmp(proto, SOCKET_PROTO_UDP6) == 0));
}
/*
* Returns B_TRUE if this is a valid v6 protocol for a socket based service,
* else B_FALSE.
*/
static boolean_t
v6_socket_proto(const char *proto)
{
return ((strcmp(proto, SOCKET_PROTO_SCTP6) == 0) ||
v6_proto(proto));
}
static boolean_t
valid_socket_proto(const char *proto)
{
return (v6_socket_proto(proto) ||
(strcmp(proto, SOCKET_PROTO_SCTP) == 0) ||
(strcmp(proto, SOCKET_PROTO_TCP) == 0) ||
(strcmp(proto, SOCKET_PROTO_UDP) == 0));
}
/*
* Free all the memory consumed by 'pi' associated with the instance
* with configuration 'cfg'.
*/
static void
destroy_proto_info(basic_cfg_t *cfg, proto_info_t *pi)
{
if (pi == NULL)
return;
assert(pi->listen_fd == -1);
free(pi->proto);
if (pi->ri != NULL)
destroy_rpc_info(pi->ri);
if (cfg->istlx) {
destroy_tlx_info((tlx_info_t *)pi);
} else {
free(pi);
}
}
void
destroy_proto_list(basic_cfg_t *cfg)
{
void *cookie = NULL;
proto_info_t *pi;
if (cfg->proto_list == NULL)
return;
while ((pi = uu_list_teardown(cfg->proto_list, &cookie)) != NULL)
destroy_proto_info(cfg, pi);
uu_list_destroy(cfg->proto_list);
cfg->proto_list = NULL;
}
void
destroy_basic_cfg(basic_cfg_t *cfg)
{
if (cfg == NULL)
return;
free(cfg->bind_addr);
destroy_proto_list(cfg);
free(cfg->svc_name);
free(cfg);
}
/*
* Overwrite the socket address with the address specified by the
* bind_addr property.
*/
static int
set_bind_addr(struct sockaddr_storage *ss, char *bind_addr)
{
struct addrinfo hints, *res;
if (bind_addr == NULL || bind_addr[0] == '\0')
return (0);
(void) memset(&hints, 0, sizeof (hints));
hints.ai_flags = AI_DEFAULT;
hints.ai_socktype = SOCK_STREAM;
hints.ai_family = ss->ss_family;
if (getaddrinfo(bind_addr, "", &hints, &res) != 0) {
return (-1);
} else {
void *p = res->ai_addr;
struct sockaddr_storage *newss = p;
(void) memcpy(SS_SINADDR(*ss), SS_SINADDR(*newss),
SS_ADDRLEN(*ss));
freeaddrinfo(res);
return (0);
}
}
/*
* valid_props validates all the properties in an array of inetd_prop_t's,
* marking each property as valid or invalid. If any properties are invalid,
* it returns B_FALSE, otherwise it returns B_TRUE. Note that some properties
* are interdependent, so if one is invalid, it leaves others in an
* indeterminate state (such as ISRPC and SVC_NAME). In this case, the
* indeterminate property will be marked valid. IE, the only properties
* marked invalid are those that are KNOWN to be invalid.
*
* Piggy-backed onto this validation if 'fmri' is non-NULL is the construction
* of a structured configuration, a basic_cfg_t, which is used by inetd.
* If 'fmri' is set then the latter three parameters need to be set to
* non-NULL values, and if the configuration is valid, the storage referenced
* by cfgpp is set to point at an initialized basic_cfg_t.
*/
boolean_t
valid_props(inetd_prop_t *prop, const char *fmri, basic_cfg_t **cfgpp,
uu_list_pool_t *proto_info_pool, uu_list_pool_t *tlx_ci_pool)
{
char *bufp, *cp;
boolean_t ret = B_TRUE;
int i;
long uidl;
boolean_t isrpc;
int sock_type_id;
int rpc_pnum;
int rpc_lv, rpc_hv;
basic_cfg_t *cfg;
char *proto = NULL;
int pi;
char **netids = NULL;
int ni = 0;
if (fmri != NULL)
assert((cfgpp != NULL) && (proto_info_pool != NULL) &&
(tlx_ci_pool != NULL));
/*
* Set all checkable properties to valid as a baseline. We'll be
* marking all invalid properties.
*/
for (i = 0; prop[i].ip_name != NULL; i++) {
if (prop[i].ip_error != IVE_UNSET)
prop[i].ip_error = IVE_VALID;
}
if (((cfg = calloc(1, sizeof (basic_cfg_t))) == NULL) ||
((fmri != NULL) &&
((cfg->proto_list = uu_list_create(proto_info_pool, NULL, 0)) ==
NULL))) {
free(cfg);
return (B_FALSE);
}
/* Check a service name was supplied */
if ((prop[PT_SVC_NAME_INDEX].ip_error == IVE_UNSET) ||
((cfg->svc_name =
strdup(prop[PT_SVC_NAME_INDEX].ip_value.iv_string)) == NULL))
prop[PT_SVC_NAME_INDEX].ip_error = IVE_INVALID;
/* Check that iswait and isrpc have valid boolean values */
if ((prop[PT_ISWAIT_INDEX].ip_error == IVE_UNSET) ||
(((cfg->iswait = prop[PT_ISWAIT_INDEX].ip_value.iv_boolean) !=
B_TRUE) && (cfg->iswait != B_FALSE)))
prop[PT_ISWAIT_INDEX].ip_error = IVE_INVALID;
if ((prop[PT_ISRPC_INDEX].ip_error == IVE_UNSET) ||
(((isrpc = prop[PT_ISRPC_INDEX].ip_value.iv_boolean) != B_TRUE) &&
(isrpc != B_FALSE))) {
prop[PT_ISRPC_INDEX].ip_error = IVE_INVALID;
} else if (isrpc) {
/*
* This is an RPC service, so ensure that the RPC version
* numbers are zero or greater, that the low version isn't
* greater than the high version and a valid program name
* is supplied.
*/
if ((prop[PT_RPC_LW_VER_INDEX].ip_error == IVE_UNSET) ||
((rpc_lv = prop[PT_RPC_LW_VER_INDEX].ip_value.iv_int) <
0))
prop[PT_RPC_LW_VER_INDEX].ip_error = IVE_INVALID;
if ((prop[PT_RPC_HI_VER_INDEX].ip_error == IVE_UNSET) ||
((rpc_hv = prop[PT_RPC_HI_VER_INDEX].ip_value.iv_int) <
0))
prop[PT_RPC_HI_VER_INDEX].ip_error = IVE_INVALID;
if ((prop[PT_RPC_LW_VER_INDEX].ip_error != IVE_INVALID) &&
(prop[PT_RPC_HI_VER_INDEX].ip_error != IVE_INVALID) &&
(rpc_lv > rpc_hv)) {
prop[PT_RPC_LW_VER_INDEX].ip_error = IVE_INVALID;
prop[PT_RPC_HI_VER_INDEX].ip_error = IVE_INVALID;
}
if ((cfg->svc_name != NULL) &&
((rpc_pnum = get_rpc_prognum(cfg->svc_name)) == -1))
prop[PT_SVC_NAME_INDEX].ip_error = IVE_INVALID;
}
/* Check that the socket type is one of the acceptable values. */
cfg->istlx = B_FALSE;
if ((prop[PT_SOCK_TYPE_INDEX].ip_error == IVE_UNSET) ||
((sock_type_id = get_sock_type_id(
prop[PT_SOCK_TYPE_INDEX].ip_value.iv_string)) == -1) &&
!(cfg->istlx = is_tlx_service(prop)))
prop[PT_SOCK_TYPE_INDEX].ip_error = IVE_INVALID;
/* Get the bind address */
if (!cfg->istlx && prop[PT_BIND_ADDR_INDEX].ip_error != IVE_UNSET &&
(cfg->bind_addr =
strdup(prop[PT_BIND_ADDR_INDEX].ip_value.iv_string)) == NULL)
prop[PT_BIND_ADDR_INDEX].ip_error = IVE_INVALID;
/*
* Iterate through all the different protos/netids resulting from the
* proto property and check that they're valid and perform checks on
* other fields that are tied-in with the proto.
*/
pi = 0;
do {
socket_info_t *si = NULL;
tlx_info_t *ti = NULL;
proto_info_t *p_inf = NULL;
boolean_t v6only = B_FALSE;
char *only;
boolean_t invalid_proto = B_FALSE;
char **protos;
struct protoent pe;
char gpbuf[1024];
struct netconfig *nconf = NULL;
/*
* If we don't know whether it's an rpc service or its
* endpoint type, we can't do any of the proto checks as we
* have no context; break out.
*/
if ((prop[PT_ISRPC_INDEX].ip_error != IVE_VALID) ||
(prop[PT_SOCK_TYPE_INDEX].ip_error != IVE_VALID))
break;
/* skip proto specific processing if the proto isn't set. */
if (prop[PT_PROTO_INDEX].ip_error == IVE_UNSET) {
invalid_proto = B_TRUE;
goto past_proto_processing;
}
protos = prop[PT_PROTO_INDEX].ip_value.iv_string_list;
/*
* Get the next netid/proto.
*/
if (!cfg->istlx || !isrpc) {
proto = protos[pi++];
/*
* This is a TLI/RPC service, so get the next netid, expanding
* any supplied nettype.
*/
} else if ((netids == NULL) ||
((proto = netids[ni++]) == NULL)) {
/*
* Either this is the first time around or
* we've exhausted the last set of netids, so
* try and get the next set using the currently
* indexed proto entry.
*/
if (netids != NULL) {
destroy_strings(netids);
netids = NULL;
}
if (protos[pi] != NULL) {
if ((netids = get_netids(protos[pi++])) ==
NULL) {
invalid_proto = B_TRUE;
proto = protos[pi - 1];
} else {
ni = 0;
proto = netids[ni++];
}
} else {
proto = NULL;
}
}
if (proto == NULL)
break;
if (invalid_proto)
goto past_proto_processing;
/* strip a trailing only to simplify further processing */
only = proto + strlen(proto) - (sizeof ("6only") - 1);
if ((only > proto) && (strcmp(only, "6only") == 0)) {
*++only = '\0';
v6only = B_TRUE;
}
/* validate the proto/netid */
if (!cfg->istlx) {
if (!valid_socket_proto(proto))
invalid_proto = B_TRUE;
} else {
/*
* Check if we've got a valid netid. If
* getnetconfigent() fails, we check to see whether
* we've got a v6 netid that may have been rejected
* because no IPv6 interface was configured before
* flagging 'proto' as invalid. If the latter condition
* holds, we don't flag the proto as invalid, and
* leave inetd to handle the value appropriately
* when it tries to listen on behalf of the service.
*/
if (((nconf = getnetconfigent(proto)) == NULL) &&
!v6_proto(proto))
invalid_proto = B_TRUE;
}
if (invalid_proto)
goto past_proto_processing;
/*
* dissallow datagram type nowait services
*/
if ((prop[PT_ISWAIT_INDEX].ip_error == IVE_VALID) &&
!cfg->iswait) {
if (strncmp(proto, SOCKET_PROTO_UDP,
sizeof (SOCKET_PROTO_UDP) - 1) == 0) {
invalid_proto = B_TRUE;
} else if (cfg->istlx && (nconf != NULL) &&
(nconf->nc_semantics == NC_TPI_CLTS)) {
invalid_proto = B_TRUE;
}
if (invalid_proto) {
prop[PT_ISWAIT_INDEX].ip_error = IVE_INVALID;
goto past_proto_processing;
}
}
/*
* We're running in validate only mode. Don't bother creating
* any proto structures (they don't do any further validation).
*/
if (fmri == NULL)
goto past_proto_processing;
/*
* Create the apropriate transport info structure.
*/
if (cfg->istlx) {
if ((ti = create_tlx_info(proto, tlx_ci_pool)) != NULL)
p_inf = (proto_info_t *)ti;
} else {
struct sockaddr_storage *ss;
if ((si = calloc(1, sizeof (socket_info_t))) != NULL) {
p_inf = (proto_info_t *)si;
si->type = sock_type_id;
ss = &si->local_addr;
if (v6_socket_proto(proto)) {
ss->ss_family = AF_INET6;
/* already in network order */
((struct sockaddr_in6 *)ss)->sin6_addr =
in6addr_any;
} else {
ss->ss_family = AF_INET;
((struct sockaddr_in *)ss)->sin_addr.
s_addr = htonl(INADDR_ANY);
}
if (set_bind_addr(ss, cfg->bind_addr) != 0) {
prop[PT_BIND_ADDR_INDEX].ip_error =
IVE_INVALID;
}
}
}
if (p_inf == NULL) {
invalid_proto = B_TRUE;
goto past_proto_processing;
}
p_inf->v6only = v6only;
/*
* Store the supplied proto string for error reporting,
* re-attaching the 'only' suffix if one was taken off.
*/
if ((p_inf->proto = malloc(strlen(proto) + 5)) == NULL) {
invalid_proto = B_TRUE;
goto past_proto_processing;
} else {
(void) strlcpy(p_inf->proto, proto, strlen(proto) + 5);
if (v6only)
(void) strlcat(p_inf->proto, "only",
strlen(proto) + 5);
}
/*
* Validate and setup RPC/non-RPC specifics.
*/
if (isrpc) {
rpc_info_t *ri;
if ((rpc_pnum != -1) && (rpc_lv != -1) &&
(rpc_hv != -1)) {
if ((ri = create_rpc_info(proto, rpc_pnum,
rpc_lv, rpc_hv)) == NULL) {
invalid_proto = B_TRUE;
} else {
p_inf->ri = ri;
}
}
}
past_proto_processing:
/* validate non-RPC service name */
if (!isrpc && (cfg->svc_name != NULL)) {
struct servent se;
char gsbuf[NSS_BUFLEN_SERVICES];
char *gsproto = proto;
if (invalid_proto) {
/*
* Make getservbyname_r do its lookup without a
* proto.
*/
gsproto = NULL;
} else if (gsproto != NULL) {
/*
* Since getservbyname & getprotobyname don't
* support tcp6, udp6 or sctp6 take off the 6
* digit from protocol.
*/
if (v6_socket_proto(gsproto))
gsproto[strlen(gsproto) - 1] = '\0';
}
if (getservbyname_r(cfg->svc_name, gsproto, &se, gsbuf,
sizeof (gsbuf)) == NULL) {
if (gsproto != NULL)
invalid_proto = B_TRUE;
prop[PT_SVC_NAME_INDEX].ip_error = IVE_INVALID;
} else if (cfg->istlx && (ti != NULL)) {
/* LINTED E_BAD_PTR_CAST_ALIGN */
SS_SETPORT(*(struct sockaddr_storage *)
ti->local_addr.buf, se.s_port);
} else if (!cfg->istlx && (si != NULL)) {
if ((gsproto != NULL) &&
getprotobyname_r(gsproto, &pe, gpbuf,
sizeof (gpbuf)) == NULL) {
invalid_proto = B_TRUE;
} else {
si->protocol = pe.p_proto;
}
SS_SETPORT(si->local_addr, se.s_port);
}
}
if (p_inf != NULL) {
p_inf->listen_fd = -1;
/* add new proto entry to proto_list */
uu_list_node_init(p_inf, &p_inf->link, proto_info_pool);
(void) uu_list_insert_after(cfg->proto_list, NULL,
p_inf);
}
if (nconf != NULL)
freenetconfigent(nconf);
if (invalid_proto)
prop[PT_PROTO_INDEX].ip_error = IVE_INVALID;
} while (proto != NULL); /* while just processed a proto */
/*
* Check that the exec string for the start method actually exists and
* that the user is either a valid username or uid. Note we don't
* mandate the setting of these fields, and don't do any checks
* for arg0, hence its absence.
*/
if (prop[PT_EXEC_INDEX].ip_error != IVE_UNSET) {
/* Don't pass any arguments to access() */
if ((bufp = strdup(
prop[PT_EXEC_INDEX].ip_value.iv_string)) == NULL) {
prop[PT_EXEC_INDEX].ip_error = IVE_INVALID;
} else {
if ((cp = strpbrk(bufp, " \t")) != NULL)
*cp = '\0';
if ((access(bufp, F_OK) == -1) && (errno == ENOENT))
prop[PT_EXEC_INDEX].ip_error = IVE_INVALID;
free(bufp);
}
}
if (prop[PT_USER_INDEX].ip_error != IVE_UNSET) {
char pw_buf[NSS_BUFLEN_PASSWD];
struct passwd pw;
if (getpwnam_r(prop[PT_USER_INDEX].ip_value.iv_string, &pw,
pw_buf, NSS_BUFLEN_PASSWD) == NULL) {
errno = 0;
uidl = strtol(prop[PT_USER_INDEX].ip_value.iv_string,
&bufp, 10);
if ((errno != 0) || (*bufp != '\0') ||
(getpwuid_r(uidl, &pw, pw_buf,
NSS_BUFLEN_PASSWD) == NULL))
prop[PT_USER_INDEX].ip_error = IVE_INVALID;
}
}
/*
* Iterate through the properties in the array verifying that any
* default properties are valid, and setting the return boolean
* according to whether any properties were marked invalid.
*/
for (i = 0; prop[i].ip_name != NULL; i++) {
if (prop[i].ip_error == IVE_UNSET)
continue;
if (prop[i].ip_default &&
!valid_default_prop(prop[i].ip_name, &prop[i].ip_value))
prop[i].ip_error = IVE_INVALID;
if (prop[i].ip_error == IVE_INVALID)
ret = B_FALSE;
}
/* pass back the basic_cfg_t if requested and it's a valid config */
if ((cfgpp != NULL) && ret) {
*cfgpp = cfg;
} else {
destroy_basic_cfg(cfg);
}
return (ret);
}
/*
* validate_default_prop takes the name of an inetd property, and a value
* for that property. It returns B_TRUE if the property is valid, and B_FALSE
* if the proposed value isn't valid for that property.
*/
boolean_t
valid_default_prop(const char *name, const void *value)
{
int i;
for (i = 0; inetd_properties[i].ip_name != NULL; i++) {
if (strcmp(name, inetd_properties[i].ip_name) != 0)
continue;
if (!inetd_properties[i].ip_default)
return (B_FALSE);
switch (inetd_properties[i].ip_type) {
case INET_TYPE_INTEGER:
if (*((int64_t *)value) >= -1)
return (B_TRUE);
else
return (B_FALSE);
case INET_TYPE_BOOLEAN:
if ((*((boolean_t *)value) == B_FALSE) ||
(*((boolean_t *)value) == B_TRUE))
return (B_TRUE);
else
return (B_FALSE);
case INET_TYPE_COUNT:
case INET_TYPE_STRING_LIST:
case INET_TYPE_STRING:
return (B_TRUE);
}
}
return (B_FALSE);
}
/*ARGSUSED*/
scf_error_t
read_prop(scf_handle_t *h, inetd_prop_t *iprop, int index, const char *inst,
const char *pg_name)
{
scf_simple_prop_t *sprop;
uint8_t *tmp_bool;
int64_t *tmp_int;
uint64_t *tmp_cnt;
char *tmp_char;
if ((sprop = scf_simple_prop_get(h, inst, pg_name, iprop->ip_name)) ==
NULL)
return (scf_error());
switch (iprop->ip_type) {
case INET_TYPE_STRING:
if ((tmp_char = scf_simple_prop_next_astring(sprop)) == NULL)
goto scf_error;
if ((iprop->ip_value.iv_string = strdup(tmp_char)) == NULL) {
scf_simple_prop_free(sprop);
return (SCF_ERROR_NO_MEMORY);
}
break;
case INET_TYPE_STRING_LIST:
{
int j = 0;
while ((tmp_char =
scf_simple_prop_next_astring(sprop)) != NULL) {
char **cpp;
if ((cpp = realloc(
iprop->ip_value.iv_string_list,
(j + 2) * sizeof (char *))) == NULL) {
scf_simple_prop_free(sprop);
return (SCF_ERROR_NO_MEMORY);
}
iprop->ip_value.iv_string_list = cpp;
if ((cpp[j] = strdup(tmp_char)) == NULL) {
scf_simple_prop_free(sprop);
return (SCF_ERROR_NO_MEMORY);
}
cpp[++j] = NULL;
}
if ((j == 0) || (scf_error() != SCF_ERROR_NONE))
goto scf_error;
}
break;
case INET_TYPE_BOOLEAN:
if ((tmp_bool = scf_simple_prop_next_boolean(sprop)) == NULL)
goto scf_error;
iprop->ip_value.iv_boolean =
(*tmp_bool == 0) ? B_FALSE : B_TRUE;
break;
case INET_TYPE_COUNT:
if ((tmp_cnt = scf_simple_prop_next_count(sprop)) == NULL)
goto scf_error;
iprop->ip_value.iv_cnt = *tmp_cnt;
break;
case INET_TYPE_INTEGER:
if ((tmp_int = scf_simple_prop_next_integer(sprop)) == NULL)
goto scf_error;
iprop->ip_value.iv_int = *tmp_int;
break;
default:
assert(0);
}
iprop->ip_error = IVE_VALID;
scf_simple_prop_free(sprop);
return (0);
scf_error:
scf_simple_prop_free(sprop);
if (scf_error() == SCF_ERROR_NONE)
return (SCF_ERROR_NOT_FOUND);
return (scf_error());
}
/*
* read_props reads either the full set of properties for instance 'instance'
* (including defaults - pulling them in from inetd where necessary) if
* 'instance' is non-null, else just the defaults from inetd. The properties
* are returned in an allocated inetd_prop_t array, which must be freed
* using free_instance_props(). If an error occurs NULL is returned and 'err'
* is set to indicate the cause, else a pointer to the read properties is
* returned.
*/
static inetd_prop_t *
read_props(scf_handle_t *h, const char *instance, size_t *num_elements,
scf_error_t *err)
{
inetd_prop_t *ret = NULL;
int i;
boolean_t defaults_only = (instance == NULL);
if ((ret = malloc(sizeof (inetd_properties))) == NULL) {
*err = SCF_ERROR_NO_MEMORY;
return (NULL);
}
(void) memcpy(ret, &inetd_properties, sizeof (inetd_properties));
if (defaults_only)
instance = INETD_INSTANCE_FMRI;
for (i = 0; ret[i].ip_name != NULL; i++) {
if (defaults_only && !ret[i].ip_default)
continue;
switch (*err = read_prop(h, &ret[i], i, instance,
defaults_only ? PG_NAME_SERVICE_DEFAULTS : ret[i].ip_pg)) {
case 0:
break;
case SCF_ERROR_INVALID_ARGUMENT:
goto failure_cleanup;
case SCF_ERROR_NOT_FOUND:
/*
* In non-default-only mode where we're reading a
* default property, since the property wasn't
* found in the instance, try and read inetd's default
* value.
*/
if (!ret[i].ip_default || defaults_only)
continue;
switch (*err = read_prop(h, &ret[i], i,
INETD_INSTANCE_FMRI, PG_NAME_SERVICE_DEFAULTS)) {
case 0:
ret[i].from_inetd = B_TRUE;
continue;
case SCF_ERROR_NOT_FOUND:
continue;
default:
goto failure_cleanup;
}
default:
goto failure_cleanup;
}
}
*num_elements = i;
return (ret);
failure_cleanup:
free_instance_props(ret);
return (NULL);
}
/*
* Read all properties applicable to 'instance' (including defaults).
*/
inetd_prop_t *
read_instance_props(scf_handle_t *h, const char *instance, size_t *num_elements,
scf_error_t *err)
{
return (read_props(h, instance, num_elements, err));
}
/*
* Read the default properties from inetd's defaults property group.
*/
inetd_prop_t *
read_default_props(scf_handle_t *h, size_t *num_elements, scf_error_t *err)
{
return (read_props(h, NULL, num_elements, err));
}
void
free_instance_props(inetd_prop_t *prop)
{
int i;
if (prop == NULL)
return;
for (i = 0; prop[i].ip_name != NULL; i++) {
if (prop[i].ip_type == INET_TYPE_STRING) {
free(prop[i].ip_value.iv_string);
} else if (prop[i].ip_type == INET_TYPE_STRING_LIST) {
destroy_strings(prop[i].ip_value.iv_string_list);
}
}
free(prop);
}
int
connect_to_inetd(void)
{
struct sockaddr_un addr;
int fd;
fd = socket(AF_UNIX, SOCK_STREAM, 0);
if (fd < 0)
return (-1);
(void) memset(&addr, 0, sizeof (addr));
addr.sun_family = AF_UNIX;
/* CONSTCOND */
assert(sizeof (INETD_UDS_PATH) <= sizeof (addr.sun_path));
(void) strlcpy(addr.sun_path, INETD_UDS_PATH,
sizeof (addr.sun_path));
if (connect(fd, (struct sockaddr *)&addr, sizeof (addr)) < 0) {
(void) close(fd);
return (-1);
}
return (fd);
}
/*
* refresh_inetd requests that inetd re-read all of the information that it's
* monitoring.
*/
int
refresh_inetd(void)
{
uds_request_t req;
int fd;
if ((fd = connect_to_inetd()) < 0)
return (-1);
req = UR_REFRESH_INETD;
if (send(fd, &req, sizeof (req), 0) < 0) {
(void) close(fd);
return (-1);
}
(void) close(fd);
return (0);
}
/*
* Returns the id of the socket type 'type_str' that can be used in a call
* to socket(). If an unknown type string is passed returns -1, else the id.
*/
int
get_sock_type_id(const char *type_str)
{
int ret;
if (strcmp(SOCKTYPE_STREAM_STR, type_str) == 0) {
ret = SOCK_STREAM;
} else if (strcmp(SOCKTYPE_DGRAM_STR, type_str) == 0) {
ret = SOCK_DGRAM;
} else if (strcmp(SOCKTYPE_RAW_STR, type_str) == 0) {
ret = SOCK_RAW;
} else if (strcmp(SOCKTYPE_SEQPKT_STR, type_str) == 0) {
ret = SOCK_SEQPACKET;
} else {
ret = -1;
}
return (ret);
}
/*
* Takes either an RPC service name or number in string form as 'svc_name', and
* returns an integer format program number for the service. If the name isn't
* recognized as a valid RPC service name or isn't a valid number, -1 is
* returned, else the services program number.
*/
int
get_rpc_prognum(const char *svc_name)
{
struct rpcent rpc;
char buf[INETSVC_SVC_BUF_MAX];
int pnum;
char *endptr;
if (getrpcbyname_r(svc_name, &rpc, buf, sizeof (buf)) != NULL)
return (rpc.r_number);
pnum = strtol(svc_name, &endptr, 0);
if ((pnum == 0 && errno == EINVAL) ||
(pnum == LONG_MAX && errno == ERANGE) ||
pnum < 0 || *endptr != '\0') {
return (-1);
}
return (pnum);
}
/*
* calculate_hash calculates the MD5 message-digest of the file pathname.
* On success, hash is modified to point to the digest string and 0 is returned.
* Otherwise, -1 is returned and errno is set to indicate the error.
* The space for the digest string is obtained using malloc(3C) and should be
* freed by the caller.
*/
int
calculate_hash(const char *pathname, char **hash)
{
int fd, i, serrno;
size_t len;
ssize_t n;
char *digest;
MD5_CTX md5_context;
unsigned char md5_digest[DIGEST_LEN];
unsigned char buf[READ_BUFSIZ];
do {
fd = open(pathname, O_RDONLY);
} while (fd == -1 && errno == EINTR);
if (fd == -1)
return (-1);
/* allocate space for a 16-byte MD5 digest as a string of hex digits */
len = 2 * sizeof (md5_digest) + 1;
if ((digest = malloc(len)) == NULL) {
serrno = errno;
(void) close(fd);
errno = serrno;
return (-1);
}
MD5Init(&md5_context);
do {
if ((n = read(fd, buf, sizeof (buf))) > 0)
MD5Update(&md5_context, buf, n);
} while ((n > 0) || (n == -1 && errno == EINTR));
serrno = errno;
MD5Final(md5_digest, &md5_context);
(void) close(fd);
if (n == -1) {
errno = serrno;
return (-1);
}
for (i = 0; i < sizeof (md5_digest); i++) {
(void) snprintf(&digest[2 * i], len - (2 * i), "%02x",
md5_digest[i]);
}
*hash = digest;
return (0);
}
/*
* retrieve_inetd_hash retrieves inetd's configuration file hash from the
* repository. On success, hash is modified to point to the hash string and
* SCF_ERROR_NONE is returned. Otherwise, the scf_error value is returned.
* The space for the hash string is obtained using malloc(3C) and should be
* freed by the caller.
*/
scf_error_t
retrieve_inetd_hash(char **hash)
{
scf_simple_prop_t *sp;
char *hashstr, *s;
scf_error_t scf_err;
if ((sp = scf_simple_prop_get(NULL, INETD_INSTANCE_FMRI, HASH_PG,
HASH_PROP)) == NULL)
return (scf_error());
if ((hashstr = scf_simple_prop_next_astring(sp)) == NULL) {
scf_err = scf_error();
scf_simple_prop_free(sp);
return (scf_err);
}
if ((s = strdup(hashstr)) == NULL) {
scf_simple_prop_free(sp);
return (SCF_ERROR_NO_MEMORY);
}
*hash = s;
scf_simple_prop_free(sp);
return (SCF_ERROR_NONE);
}
/*
* store_inetd_hash stores the string hash in inetd's configuration file hash
* in the repository. On success, SCF_ERROR_NONE is returned. Otherwise, the
* scf_error value is returned.
*/
scf_error_t
store_inetd_hash(const char *hash)
{
int ret;
scf_error_t rval = SCF_ERROR_NONE;
scf_handle_t *h;
scf_propertygroup_t *pg = NULL;
scf_instance_t *inst = NULL;
scf_transaction_t *tx = NULL;
scf_transaction_entry_t *txent = NULL;
scf_property_t *prop = NULL;
scf_value_t *val = NULL;
if ((h = scf_handle_create(SCF_VERSION)) == NULL ||
scf_handle_bind(h) == -1)
goto error;
if ((pg = scf_pg_create(h)) == NULL ||
(inst = scf_instance_create(h)) == NULL ||
scf_handle_decode_fmri(h, INETD_INSTANCE_FMRI, NULL, NULL, inst,
NULL, NULL, SCF_DECODE_FMRI_EXACT) == -1)
goto error;
if (scf_instance_get_pg(inst, HASH_PG, pg) == -1) {
if (scf_error() != SCF_ERROR_NOT_FOUND ||
scf_instance_add_pg(inst, HASH_PG, SCF_GROUP_APPLICATION,
0, pg) == -1)
goto error;
}
if ((tx = scf_transaction_create(h)) == NULL ||
(txent = scf_entry_create(h)) == NULL ||
(prop = scf_property_create(h)) == NULL ||
(val = scf_value_create(h)) == NULL)
goto error;
do {
if (scf_transaction_start(tx, pg) == -1)
goto error;
if (scf_transaction_property_new(tx, txent, HASH_PROP,
SCF_TYPE_ASTRING) == -1 &&
scf_transaction_property_change_type(tx, txent, HASH_PROP,
SCF_TYPE_ASTRING) == -1)
goto error;
if (scf_value_set_astring(val, hash) == -1 ||
scf_entry_add_value(txent, val) == -1)
goto error;
if ((ret = scf_transaction_commit(tx)) == -1)
goto error;
if (ret == 0) {
scf_transaction_reset(tx);
if (scf_pg_update(pg) == -1)
goto error;
}
} while (ret == 0);
goto success;
error:
rval = scf_error();
success:
scf_value_destroy(val);
scf_property_destroy(prop);
scf_entry_destroy(txent);
scf_transaction_destroy(tx);
scf_instance_destroy(inst);
scf_pg_destroy(pg);
scf_handle_destroy(h);
return (rval);
}
/*
* This is a wrapper function for inet_ntop(). In case the af is AF_INET6
* and the address pointed by src is a IPv4-mapped IPv6 address, it returns
* a printable IPv4 address, not an IPv4-mapped IPv6 address. In other cases it
* behaves just like inet_ntop().
*/
const char *
inet_ntop_native(int af, const void *addr, char *dst, size_t size)
{
struct in_addr v4addr;
if ((af == AF_INET6) && IN6_IS_ADDR_V4MAPPED((struct in6_addr *)addr)) {
IN6_V4MAPPED_TO_INADDR((struct in6_addr *)addr, &v4addr);
return (inet_ntop(AF_INET, &v4addr, dst, size));
} else {
return (inet_ntop(af, addr, dst, size));
}
}
/*
* inetd specific setproctitle. It sets the title so that it contains
* 'svc_name' followed by, if obtainable, the address of the remote end of
* socket 's'.
* NOTE: The argv manipulation in this function should be replaced when a
* common version of setproctitle is made available.
*/
void
setproctitle(const char *svc_name, int s, char *argv[])
{
socklen_t size;
struct sockaddr_storage ss;
char abuf[INET6_ADDRSTRLEN];
static char buf[80];
size = (socklen_t)sizeof (ss);
if (getpeername(s, (struct sockaddr *)&ss, &size) == 0) {
(void) snprintf(buf, sizeof (buf), "-%s [%s]", svc_name,
inet_ntop_native(ss.ss_family, (ss.ss_family == AF_INET6 ?
(void *)&((struct sockaddr_in6 *)(&ss))->sin6_addr :
(void *)&((struct sockaddr_in *)(&ss))->sin_addr), abuf,
sizeof (abuf)));
} else {
(void) snprintf(buf, sizeof (buf), "-%s", svc_name);
}
/* we set argv[0] to point at our static storage. */
argv[0] = buf;
argv[1] = NULL;
}
static boolean_t
inetd_builtin_srcport(in_port_t p)
{
p = ntohs(p);
if ((p == IPPORT_ECHO) ||
(p == IPPORT_DISCARD) ||
(p == IPPORT_DAYTIME) ||
(p == IPPORT_CHARGEN) ||
(p == IPPORT_TIMESERVER)) {
return (B_TRUE);
} else {
return (B_FALSE);
}
}
/* ARGSUSED0 */
static void
alarm_handler(int sig)
{
exit(0);
}
/*
* This function is a datagram service template. It acts as a datagram wait
* type server, waiting for datagrams to come in, and when they do passing
* their contents, as-well as the socket they came in on and the remote
* address, in a call to the callback function 'cb'. If no datagrams are
* received for DG_INACTIVITY_TIMEOUT seconds the function exits with code 0.
*/
void
dg_template(void (*cb)(int, const struct sockaddr *, int, const void *, size_t),
int s, void *buf, size_t buflen)
{
struct sockaddr_storage sa;
socklen_t sa_size;
ssize_t i;
char tmp[BUFSIZ];
(void) sigset(SIGALRM, alarm_handler);
if (buf == NULL) {
buf = tmp;
buflen = sizeof (tmp);
}
for (;;) {
(void) alarm(DG_INACTIVITY_TIMEOUT);
sa_size = sizeof (sa);
if ((i = recvfrom(s, buf, buflen, 0, (struct sockaddr *)&sa,
&sa_size)) < 0) {
continue;
} else if (inetd_builtin_srcport(
((struct sockaddr_in *)(&sa))->sin_port)) {
/* denial-of-service attack possibility - ignore it */
syslog(LOG_WARNING,
"Incoming datagram from internal inetd service received; ignoring.");
continue;
}
(void) alarm(0);
cb(s, (struct sockaddr *)&sa, sa_size, buf, i);
}
}
/*
* An extension of write() or sendto() that keeps trying until either the full
* request has completed or a non-EINTR error occurs. If 'to' is set to a
* non-NULL value, sendto() is extended, else write(). Returns 0 on success
* else -1.
*/
int
safe_sendto_write(int fd, const void *buf, size_t sz, int flags,
const struct sockaddr *to, int tolen) {
size_t cnt = 0;
ssize_t ret;
const char *cp = buf;
do {
if (to == NULL) {
ret = write(fd, cp + cnt, sz - cnt);
} else {
ret = sendto(fd, cp + cnt, sz - cnt, flags, to, tolen);
}
if (ret > 0)
cnt += ret;
} while ((cnt != sz) && (errno == EINTR));
return ((cnt == sz) ? 0 : -1);
}
int
safe_sendto(int fd, const void *buf, size_t sz, int flags,
const struct sockaddr *to, int tolen) {
return (safe_sendto_write(fd, buf, sz, flags, to, tolen));
}
int
safe_write(int fd, const void *buf, size_t sz)
{
return (safe_sendto_write(fd, buf, sz, 0, NULL, 0));
}
/*
* Free up the memory occupied by string array 'strs'.
*/
void
destroy_strings(char **strs)
{
int i = 0;
if (strs != NULL) {
while (strs[i] != NULL)
free(strs[i++]);
free(strs);
}
}
/*
* Parse the proto list string into an allocated array of proto strings,
* returning a pointer to this array. If one of the protos is too big
* errno is set to E2BIG and NULL is returned; if memory allocation failure
* occurs errno is set to ENOMEM and NULL is returned; else on success
* a pointer the string array is returned.
*/
char **
get_protos(const char *pstr)
{
char *cp;
int i = 0;
char **ret = NULL;
size_t max_proto_len = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH);
char *str;
/* copy the parameter as strtok modifies its parameters */
if ((str = strdup(pstr)) == NULL)
goto malloc_failure;
for (cp = strtok(str, PROTO_DELIMITERS); cp != NULL;
cp = strtok(NULL, PROTO_DELIMITERS)) {
char **cpp;
if (strlen(cp) >= max_proto_len) {
destroy_strings(ret);
free(str);
errno = E2BIG;
return (NULL);
}
if ((cpp = realloc(ret, (i + 2) * sizeof (char *))) == NULL)
goto malloc_failure;
ret = cpp;
if ((cpp[i] = strdup(cp)) == NULL)
goto malloc_failure;
cpp[++i] = NULL;
}
free(str);
return (ret);
malloc_failure:
destroy_strings(ret);
free(str);
errno = ENOMEM;
return (NULL);
}
/*
* Returns an allocated string array of netids corresponding with 'proto'. The
* function first tries to interpret 'proto' as a nettype to get its netids.
* If this fails it tries to interpret it as a netid. If 'proto' is neither
* a nettype or a netid or a memory allocation failures occurs NULL is
* returned, else a pointer to an array of netids associated with 'proto' is
* returned.
*/
char **
get_netids(char *proto)
{
void *handle;
struct netconfig *nconf;
char **netids = NULL;
char **cpp;
int i = 0;
if (strcmp(proto, "*") == 0)
proto = "visible";
if ((handle = __rpc_setconf(proto)) != NULL) {
/* expand nettype */
while ((nconf = __rpc_getconf(handle)) != NULL) {
if ((cpp = realloc(netids,
(i + 2) * sizeof (char *))) == NULL)
goto failure_cleanup;
netids = cpp;
if ((cpp[i] = strdup(nconf->nc_netid)) == NULL)
goto failure_cleanup;
cpp[++i] = NULL;
}
__rpc_endconf(handle);
} else {
if ((netids = malloc(2 * sizeof (char *))) == NULL)
return (NULL);
if ((netids[0] = strdup(proto)) == NULL) {
free(netids);
return (NULL);
}
netids[1] = NULL;
}
return (netids);
failure_cleanup:
destroy_strings(netids);
__rpc_endconf(handle);
return (NULL);
}