#include <config.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <fcntl.h>
#include <errno.h>
#include <netdb.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <sys/param.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <netinet/tcp.h>
#ifdef HAVE_ARPA_NAMESER_H
# include <arpa/nameser.h>
#endif
#include <arpa/inet.h>
#ifdef HAVE_RESOLV_H
# include <resolv.h>
#endif
#include "types.h"
#include "exitcode.h"
#include "distcc.h"
#include "trace.h"
#include "util.h"
#include "srvnet.h"
#include "access.h"
#include "netutil.h"
#include "dopt.h"
static int dcc_listen_by_addr(int fd,
struct sockaddr *sa,
size_t salen)
{
int one = 1;
char *sa_buf = NULL;
setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (char *) &one, sizeof(one));
dcc_sockaddr_to_string(sa, salen, &sa_buf);
if (bind(fd, sa, salen) == -1) {
rs_log_error("bind of %s failed: %s", sa_buf ? sa_buf : "UNKNOWN",
strerror(errno));
free(sa_buf);
close(fd);
return EXIT_BIND_FAILED;
}
rs_log_info("listening on %s", sa_buf ? sa_buf : "UNKNOWN");
free(sa_buf);
if (listen(fd, 10)) {
rs_log_error("listen failed: %s", strerror(errno));
close(fd);
return EXIT_BIND_FAILED;
}
return 0;
}
#if defined(ENABLE_RFC2553)
int dcc_socket_listen(int port, int *fd_out, const char *listen_addr)
{
char portname[20];
struct addrinfo hints;
struct addrinfo *res, *ai;
int error;
int ret;
if (port < 1 || port > 65535) {
rs_log_error("port number out of range: %d", port);
return EXIT_BAD_ARGUMENTS;
}
snprintf(portname, sizeof portname, "%d", port);
memset(&hints, 0, sizeof(hints));
hints.ai_socktype = SOCK_STREAM;
if (listen_addr == NULL)
hints.ai_flags = AI_PASSIVE;
error = getaddrinfo(listen_addr, portname, &hints, &res);
if (error) {
rs_log_error("getaddrinfo failed for host %s service %s: %s",
listen_addr ? listen_addr : "(passive)",
portname, gai_strerror(error));
return EXIT_BIND_FAILED;
}
for (ai = res; ai; ai=ai->ai_next) {
int af = ai->ai_addr->sa_family;
if ((*fd_out = socket(af, SOCK_STREAM, 0)) == -1) {
if (errno == EAFNOSUPPORT) {
rs_log_notice("socket address family %d not supported", af);
continue;
} else {
rs_log_error("socket creation failed: %s", strerror(errno));
return EXIT_BIND_FAILED;
}
} else {
ret = dcc_listen_by_addr(*fd_out, res->ai_addr, res->ai_addrlen);
freeaddrinfo(res);
return ret;
}
}
rs_log_error("failed to find any supported socket family");
return EXIT_BIND_FAILED;
}
#else
int dcc_socket_listen(int port, int *listen_fd, const char *listen_addr)
{
struct sockaddr_in sock;
if (port < 1 || port > 65535) {
rs_log_error("port number out of range: %d", port);
return EXIT_BAD_ARGUMENTS;
}
memset((char *) &sock, 0, sizeof(sock));
sock.sin_port = htons(port);
sock.sin_family = PF_INET;
if (listen_addr) {
if (!inet_aton(listen_addr, &sock.sin_addr)) {
rs_log_error("listen address \"%s\" is not a valid IPv4 address",
listen_addr);
return EXIT_BAD_ARGUMENTS;
}
} else {
sock.sin_addr.s_addr = INADDR_ANY;
}
if ((*listen_fd = socket(PF_INET, SOCK_STREAM, 0)) == -1) {
rs_log_error("socket creation failed: %s", strerror(errno));
return EXIT_BIND_FAILED;
}
return dcc_listen_by_addr(*listen_fd, (struct sockaddr *) &sock,
sizeof sock);
}
#endif
int is_a_socket(int fd)
{
int v;
socklen_t len = sizeof(int);
return (getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *) &v, &len) == 0);
}
int dcc_check_client(struct sockaddr *psa,
int salen,
struct dcc_allow_list *allowed)
{
char *client_ip;
struct dcc_allow_list *l;
int ret;
if ((ret = dcc_sockaddr_to_string(psa, salen, &client_ip)) != 0)
return ret;
rs_log_info("connection from %s", client_ip);
dcc_job_summary_append("client: ");
dcc_job_summary_append(client_ip);
if (!psa) {
free(client_ip);
return 0;
}
if (!allowed) {
free(client_ip);
return 0;
}
for (l = allowed; l; l = l->next) {
if (psa->sa_family == AF_INET) {
in_addr_t cli_inaddr;
cli_inaddr = ((struct sockaddr_in *) (void *) psa)->sin_addr.s_addr;
if ((ret = dcc_check_address(cli_inaddr, l->addr, l->mask)) == 0)
break;
#ifdef ENABLE_RFC2553
} else if (psa->sa_family == AF_INET6) {
const struct sockaddr_in6 *sa6 = (const struct sockaddr_in6 *) psa;
const struct in6_addr *a6 = &sa6->sin6_addr;
const in_addr_t *a4;
if (IN6_IS_ADDR_V4MAPPED(a6) || IN6_IS_ADDR_V4COMPAT(a6)) {
a4 = (const in_addr_t *) &a6->s6_addr[12];
if ((ret = dcc_check_address(*a4, l->addr, l->mask)) == 0)
break;
} else {
rs_log_notice("ipv6 ACLs not implemented");
free(client_ip);
return EXIT_ACCESS_DENIED;
}
#endif
} else {
ret = EXIT_ACCESS_DENIED;
rs_log_notice("access denied from unknown address family %d",
psa->sa_family);
break;
}
}
if (ret != 0) {
rs_log_error("connection from client '%s' denied by access list",
client_ip);
}
free(client_ip);
return ret;
}