Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
[amitay/samba.git] / lib / socket_wrapper / socket_wrapper.c
1 /*
2  * Copyright (C) Jelmer Vernooij 2005,2008 <jelmer@samba.org>
3  * Copyright (C) Stefan Metzmacher 2006 <metze@samba.org>
4  *
5  * All rights reserved.
6  * 
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 
14  * 2. Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in the
16  *    documentation and/or other materials provided with the distribution.
17  * 
18  * 3. Neither the name of the author nor the names of its contributors
19  *    may be used to endorse or promote products derived from this software
20  *    without specific prior written permission.
21  * 
22  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
26  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32  * SUCH DAMAGE.
33  *
34  */
35
36 /*
37    Socket wrapper library. Passes all socket communication over
38    unix domain sockets if the environment variable SOCKET_WRAPPER_DIR
39    is set.
40 */
41
42 #ifdef _SAMBA_BUILD_
43
44 #define SOCKET_WRAPPER_NOT_REPLACE
45 #include "../replace/replace.h"
46 #include "system/network.h"
47 #include "system/filesys.h"
48 #include "system/time.h"
49
50 #else /* _SAMBA_BUILD_ */
51
52 #include <sys/types.h>
53 #include <sys/time.h>
54 #include <sys/stat.h>
55 #include <sys/socket.h>
56 #include <sys/ioctl.h>
57 #include <sys/filio.h>
58 #include <errno.h>
59 #include <sys/un.h>
60 #include <netinet/in.h>
61 #include <netinet/tcp.h>
62 #include <fcntl.h>
63 #include <stdlib.h>
64 #include <unistd.h>
65 #include <string.h>
66 #include <stdio.h>
67 #include <stdint.h>
68
69 #endif
70
71 #ifndef _PUBLIC_
72 #define _PUBLIC_
73 #endif
74
75 #define SWRAP_DLIST_ADD(list,item) do { \
76         if (!(list)) { \
77                 (item)->prev    = NULL; \
78                 (item)->next    = NULL; \
79                 (list)          = (item); \
80         } else { \
81                 (item)->prev    = NULL; \
82                 (item)->next    = (list); \
83                 (list)->prev    = (item); \
84                 (list)          = (item); \
85         } \
86 } while (0)
87
88 #define SWRAP_DLIST_REMOVE(list,item) do { \
89         if ((list) == (item)) { \
90                 (list)          = (item)->next; \
91                 if (list) { \
92                         (list)->prev    = NULL; \
93                 } \
94         } else { \
95                 if ((item)->prev) { \
96                         (item)->prev->next      = (item)->next; \
97                 } \
98                 if ((item)->next) { \
99                         (item)->next->prev      = (item)->prev; \
100                 } \
101         } \
102         (item)->prev    = NULL; \
103         (item)->next    = NULL; \
104 } while (0)
105
106 /* LD_PRELOAD doesn't work yet, so REWRITE_CALLS is all we support
107  * for now */
108 #define REWRITE_CALLS 
109
110 #ifdef REWRITE_CALLS
111 #define real_accept accept
112 #define real_connect connect
113 #define real_bind bind
114 #define real_listen listen
115 #define real_getpeername getpeername
116 #define real_getsockname getsockname
117 #define real_getsockopt getsockopt
118 #define real_setsockopt setsockopt
119 #define real_recvfrom recvfrom
120 #define real_sendto sendto
121 #define real_ioctl ioctl
122 #define real_recv recv
123 #define real_send send
124 #define real_socket socket
125 #define real_close close
126 #endif
127
128 #ifdef HAVE_GETTIMEOFDAY_TZ
129 #define swrapGetTimeOfDay(tval) gettimeofday(tval,NULL)
130 #else
131 #define swrapGetTimeOfDay(tval) gettimeofday(tval)
132 #endif
133
134 /* we need to use a very terse format here as IRIX 6.4 silently
135    truncates names to 16 chars, so if we use a longer name then we
136    can't tell which port a packet came from with recvfrom() 
137    
138    with this format we have 8 chars left for the directory name
139 */
140 #define SOCKET_FORMAT "%c%02X%04X"
141 #define SOCKET_TYPE_CHAR_TCP            'T'
142 #define SOCKET_TYPE_CHAR_UDP            'U'
143 #define SOCKET_TYPE_CHAR_TCP_V6         'X'
144 #define SOCKET_TYPE_CHAR_UDP_V6         'Y'
145
146 #define MAX_WRAPPED_INTERFACES 16
147
148 #ifdef HAVE_IPV6
149 /*
150  * FD00::5357:5FXX
151  */
152 static const struct in6_addr swrap_ipv6 =
153 { { {
154 0xFD,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
155 0x00,0x00,0x00,0x00,0x53,0x57,0x5F,0x00
156 } } };
157 #endif
158
159 static struct sockaddr *sockaddr_dup(const void *data, socklen_t len)
160 {
161         struct sockaddr *ret = (struct sockaddr *)malloc(len);
162         memcpy(ret, data, len);
163         return ret;
164 }
165
166 static void set_port(int family, int prt, struct sockaddr *addr)
167 {
168         switch (family) {
169         case AF_INET:
170                 ((struct sockaddr_in *)addr)->sin_port = htons(prt);
171                 break;
172 #ifdef HAVE_IPV6
173         case AF_INET6:
174                 ((struct sockaddr_in6 *)addr)->sin6_port = htons(prt);
175                 break;
176 #endif
177         }
178 }
179
180 static size_t socket_length(int family)
181 {
182         switch (family) {
183         case AF_INET:
184                 return sizeof(struct sockaddr_in);
185 #ifdef HAVE_IPV6
186         case AF_INET6:
187                 return sizeof(struct sockaddr_in6);
188 #endif
189         }
190         return 0;
191 }
192
193
194
195 struct socket_info
196 {
197         int fd;
198
199         int family;
200         int type;
201         int protocol;
202         int bound;
203         int bcast;
204         int is_server;
205
206         char *path;
207         char *tmp_path;
208
209         struct sockaddr *myname;
210         socklen_t myname_len;
211
212         struct sockaddr *peername;
213         socklen_t peername_len;
214
215         struct {
216                 unsigned long pck_snd;
217                 unsigned long pck_rcv;
218         } io;
219
220         struct socket_info *prev, *next;
221 };
222
223 static struct socket_info *sockets;
224
225 const char *socket_wrapper_dir(void)
226 {
227         const char *s = getenv("SOCKET_WRAPPER_DIR");
228         if (s == NULL) {
229                 return NULL;
230         }
231         if (strncmp(s, "./", 2) == 0) {
232                 s += 2;
233         }
234         return s;
235 }
236
237 unsigned int socket_wrapper_default_iface(void)
238 {
239         const char *s = getenv("SOCKET_WRAPPER_DEFAULT_IFACE");
240         if (s) {
241                 unsigned int iface;
242                 if (sscanf(s, "%u", &iface) == 1) {
243                         if (iface >= 1 && iface <= MAX_WRAPPED_INTERFACES) {
244                                 return iface;
245                         }
246                 }
247         }
248
249         return 1;/* 127.0.0.1 */
250 }
251
252 static int convert_un_in(const struct sockaddr_un *un, struct sockaddr *in, socklen_t *len)
253 {
254         unsigned int iface;
255         unsigned int prt;
256         const char *p;
257         char type;
258
259         p = strrchr(un->sun_path, '/');
260         if (p) p++; else p = un->sun_path;
261
262         if (sscanf(p, SOCKET_FORMAT, &type, &iface, &prt) != 3) {
263                 errno = EINVAL;
264                 return -1;
265         }
266
267         if (iface == 0 || iface > MAX_WRAPPED_INTERFACES) {
268                 errno = EINVAL;
269                 return -1;
270         }
271
272         if (prt > 0xFFFF) {
273                 errno = EINVAL;
274                 return -1;
275         }
276
277         switch(type) {
278         case SOCKET_TYPE_CHAR_TCP:
279         case SOCKET_TYPE_CHAR_UDP: {
280                 struct sockaddr_in *in2 = (struct sockaddr_in *)in;
281                 
282                 if ((*len) < sizeof(*in2)) {
283                     errno = EINVAL;
284                     return -1;
285                 }
286
287                 memset(in2, 0, sizeof(*in2));
288                 in2->sin_family = AF_INET;
289                 in2->sin_addr.s_addr = htonl((127<<24) | iface);
290                 in2->sin_port = htons(prt);
291
292                 *len = sizeof(*in2);
293                 break;
294         }
295 #ifdef HAVE_IPV6
296         case SOCKET_TYPE_CHAR_TCP_V6:
297         case SOCKET_TYPE_CHAR_UDP_V6: {
298                 struct sockaddr_in6 *in2 = (struct sockaddr_in6 *)in;
299                 
300                 if ((*len) < sizeof(*in2)) {
301                         errno = EINVAL;
302                         return -1;
303                 }
304
305                 memset(in2, 0, sizeof(*in2));
306                 in2->sin6_family = AF_INET6;
307                 in2->sin6_addr = swrap_ipv6;
308                 in2->sin6_addr.s6_addr[15] = iface;
309                 in2->sin6_port = htons(prt);
310
311                 *len = sizeof(*in2);
312                 break;
313         }
314 #endif
315         default:
316                 errno = EINVAL;
317                 return -1;
318         }
319
320         return 0;
321 }
322
323 static int convert_in_un_remote(struct socket_info *si, const struct sockaddr *inaddr, struct sockaddr_un *un,
324                                 int *bcast)
325 {
326         char type = '\0';
327         unsigned int prt;
328         unsigned int iface;
329         int is_bcast = 0;
330
331         if (bcast) *bcast = 0;
332
333         switch (si->family) {
334         case AF_INET: {
335                 const struct sockaddr_in *in = 
336                     (const struct sockaddr_in *)inaddr;
337                 unsigned int addr = ntohl(in->sin_addr.s_addr);
338                 char u_type = '\0';
339                 char b_type = '\0';
340                 char a_type = '\0';
341
342                 switch (si->type) {
343                 case SOCK_STREAM:
344                         u_type = SOCKET_TYPE_CHAR_TCP;
345                         break;
346                 case SOCK_DGRAM:
347                         u_type = SOCKET_TYPE_CHAR_UDP;
348                         a_type = SOCKET_TYPE_CHAR_UDP;
349                         b_type = SOCKET_TYPE_CHAR_UDP;
350                         break;
351                 }
352
353                 prt = ntohs(in->sin_port);
354                 if (a_type && addr == 0xFFFFFFFF) {
355                         /* 255.255.255.255 only udp */
356                         is_bcast = 2;
357                         type = a_type;
358                         iface = socket_wrapper_default_iface();
359                 } else if (b_type && addr == 0x7FFFFFFF) {
360                         /* 127.255.255.255 only udp */
361                         is_bcast = 1;
362                         type = b_type;
363                         iface = socket_wrapper_default_iface();
364                 } else if ((addr & 0xFFFFFF00) == 0x7F000000) {
365                         /* 127.0.0.X */
366                         is_bcast = 0;
367                         type = u_type;
368                         iface = (addr & 0x000000FF);
369                 } else {
370                         errno = ENETUNREACH;
371                         return -1;
372                 }
373                 if (bcast) *bcast = is_bcast;
374                 break;
375         }
376 #ifdef HAVE_IPV6
377         case AF_INET6: {
378                 const struct sockaddr_in6 *in = 
379                     (const struct sockaddr_in6 *)inaddr;
380                 struct in6_addr cmp;
381
382                 switch (si->type) {
383                 case SOCK_STREAM:
384                         type = SOCKET_TYPE_CHAR_TCP_V6;
385                         break;
386                 case SOCK_DGRAM:
387                         type = SOCKET_TYPE_CHAR_UDP_V6;
388                         break;
389                 }
390
391                 /* XXX no multicast/broadcast */
392
393                 prt = ntohs(in->sin6_port);
394
395                 cmp = in->sin6_addr;
396                 cmp.s6_addr[15] = 0;
397                 if (IN6_ARE_ADDR_EQUAL(&swrap_ipv6, &cmp)) {
398                         iface = in->sin6_addr.s6_addr[15];
399                 } else {
400                         errno = ENETUNREACH;
401                         return -1;
402                 }
403
404                 break;
405         }
406 #endif
407         default:
408                 errno = ENETUNREACH;
409                 return -1;
410         }
411
412         if (prt == 0) {
413                 errno = EINVAL;
414                 return -1;
415         }
416
417         if (is_bcast) {
418                 snprintf(un->sun_path, sizeof(un->sun_path), "%s/EINVAL", 
419                          socket_wrapper_dir());
420                 /* the caller need to do more processing */
421                 return 0;
422         }
423
424         snprintf(un->sun_path, sizeof(un->sun_path), "%s/"SOCKET_FORMAT, 
425                  socket_wrapper_dir(), type, iface, prt);
426
427         return 0;
428 }
429
430 static int convert_in_un_alloc(struct socket_info *si, const struct sockaddr *inaddr, struct sockaddr_un *un,
431                                int *bcast)
432 {
433         char type = '\0';
434         unsigned int prt;
435         unsigned int iface;
436         struct stat st;
437         int is_bcast = 0;
438
439         if (bcast) *bcast = 0;
440
441         switch (si->family) {
442         case AF_INET: {
443                 const struct sockaddr_in *in = 
444                     (const struct sockaddr_in *)inaddr;
445                 unsigned int addr = ntohl(in->sin_addr.s_addr);
446                 char u_type = '\0';
447                 char d_type = '\0';
448                 char b_type = '\0';
449                 char a_type = '\0';
450
451                 prt = ntohs(in->sin_port);
452
453                 switch (si->type) {
454                 case SOCK_STREAM:
455                         u_type = SOCKET_TYPE_CHAR_TCP;
456                         d_type = SOCKET_TYPE_CHAR_TCP;
457                         break;
458                 case SOCK_DGRAM:
459                         u_type = SOCKET_TYPE_CHAR_UDP;
460                         d_type = SOCKET_TYPE_CHAR_UDP;
461                         a_type = SOCKET_TYPE_CHAR_UDP;
462                         b_type = SOCKET_TYPE_CHAR_UDP;
463                         break;
464                 }
465
466                 if (addr == 0) {
467                         /* 0.0.0.0 */
468                         is_bcast = 0;
469                         type = d_type;
470                         iface = socket_wrapper_default_iface();
471                 } else if (a_type && addr == 0xFFFFFFFF) {
472                         /* 255.255.255.255 only udp */
473                         is_bcast = 2;
474                         type = a_type;
475                         iface = socket_wrapper_default_iface();
476                 } else if (b_type && addr == 0x7FFFFFFF) {
477                         /* 127.255.255.255 only udp */
478                         is_bcast = 1;
479                         type = b_type;
480                         iface = socket_wrapper_default_iface();
481                 } else if ((addr & 0xFFFFFF00) == 0x7F000000) {
482                         /* 127.0.0.X */
483                         is_bcast = 0;
484                         type = u_type;
485                         iface = (addr & 0x000000FF);
486                 } else {
487                         errno = EADDRNOTAVAIL;
488                         return -1;
489                 }
490                 break;
491         }
492 #ifdef HAVE_IPV6
493         case AF_INET6: {
494                 const struct sockaddr_in6 *in = 
495                     (const struct sockaddr_in6 *)inaddr;
496                 struct in6_addr cmp;
497
498                 switch (si->type) {
499                 case SOCK_STREAM:
500                         type = SOCKET_TYPE_CHAR_TCP_V6;
501                         break;
502                 case SOCK_DGRAM:
503                         type = SOCKET_TYPE_CHAR_UDP_V6;
504                         break;
505                 }
506
507                 /* XXX no multicast/broadcast */
508
509                 prt = ntohs(in->sin6_port);
510
511                 cmp = in->sin6_addr;
512                 cmp.s6_addr[15] = 0;
513                 if (IN6_ARE_ADDR_EQUAL(&swrap_ipv6, &cmp)) {
514                         iface = in->sin6_addr.s6_addr[15];
515                 } else {
516                         errno = EADDRNOTAVAIL;
517                         return -1;
518                 }
519
520                 break;
521         }
522 #endif
523         default:
524                 errno = EADDRNOTAVAIL;
525                 return -1;
526         }
527
528
529         if (bcast) *bcast = is_bcast;
530
531         if (prt == 0) {
532                 /* handle auto-allocation of ephemeral ports */
533                 for (prt = 5001; prt < 10000; prt++) {
534                         snprintf(un->sun_path, sizeof(un->sun_path), "%s/"SOCKET_FORMAT, 
535                                  socket_wrapper_dir(), type, iface, prt);
536                         if (stat(un->sun_path, &st) == 0) continue;
537
538                         set_port(si->family, prt, si->myname);
539                         break;
540                 }
541                 if (prt == 10000) {
542                         errno = ENFILE;
543                         return -1;
544                 }
545         }
546
547         snprintf(un->sun_path, sizeof(un->sun_path), "%s/"SOCKET_FORMAT, 
548                  socket_wrapper_dir(), type, iface, prt);
549         return 0;
550 }
551
552 static struct socket_info *find_socket_info(int fd)
553 {
554         struct socket_info *i;
555         for (i = sockets; i; i = i->next) {
556                 if (i->fd == fd) 
557                         return i;
558         }
559
560         return NULL;
561 }
562
563 static int sockaddr_convert_to_un(struct socket_info *si, const struct sockaddr *in_addr, socklen_t in_len, 
564                                   struct sockaddr_un *out_addr, int alloc_sock, int *bcast)
565 {
566         if (!out_addr)
567                 return 0;
568
569         out_addr->sun_family = AF_UNIX;
570
571         switch (in_addr->sa_family) {
572         case AF_INET:
573 #ifdef HAVE_IPV6
574         case AF_INET6:
575 #endif
576                 switch (si->type) {
577                 case SOCK_STREAM:
578                 case SOCK_DGRAM:
579                         break;
580                 default:
581                         errno = ESOCKTNOSUPPORT;
582                         return -1;
583                 }
584                 if (alloc_sock) {
585                         return convert_in_un_alloc(si, in_addr, out_addr, bcast);
586                 } else {
587                         return convert_in_un_remote(si, in_addr, out_addr, bcast);
588                 }
589         default:
590                 break;
591         }
592         
593         errno = EAFNOSUPPORT;
594         return -1;
595 }
596
597 static int sockaddr_convert_from_un(const struct socket_info *si, 
598                                     const struct sockaddr_un *in_addr, 
599                                     socklen_t un_addrlen,
600                                     int family,
601                                     struct sockaddr *out_addr,
602                                     socklen_t *out_addrlen)
603 {
604         if (out_addr == NULL || out_addrlen == NULL) 
605                 return 0;
606
607         if (un_addrlen == 0) {
608                 *out_addrlen = 0;
609                 return 0;
610         }
611
612         switch (family) {
613         case AF_INET:
614 #ifdef HAVE_IPV6
615         case AF_INET6:
616 #endif
617                 switch (si->type) {
618                 case SOCK_STREAM:
619                 case SOCK_DGRAM:
620                         break;
621                 default:
622                         errno = ESOCKTNOSUPPORT;
623                         return -1;
624                 }
625                 return convert_un_in(in_addr, out_addr, out_addrlen);
626         default:
627                 break;
628         }
629
630         errno = EAFNOSUPPORT;
631         return -1;
632 }
633
634 enum swrap_packet_type {
635         SWRAP_CONNECT_SEND,
636         SWRAP_CONNECT_UNREACH,
637         SWRAP_CONNECT_RECV,
638         SWRAP_CONNECT_ACK,
639         SWRAP_ACCEPT_SEND,
640         SWRAP_ACCEPT_RECV,
641         SWRAP_ACCEPT_ACK,
642         SWRAP_RECVFROM,
643         SWRAP_SENDTO,
644         SWRAP_SENDTO_UNREACH,
645         SWRAP_PENDING_RST,
646         SWRAP_RECV,
647         SWRAP_RECV_RST,
648         SWRAP_SEND,
649         SWRAP_SEND_RST,
650         SWRAP_CLOSE_SEND,
651         SWRAP_CLOSE_RECV,
652         SWRAP_CLOSE_ACK
653 };
654
655 struct swrap_file_hdr {
656         uint32_t        magic;
657         uint16_t        version_major;
658         uint16_t        version_minor;
659         int32_t         timezone;
660         uint32_t        sigfigs;
661         uint32_t        frame_max_len;
662 #define SWRAP_FRAME_LENGTH_MAX 0xFFFF
663         uint32_t        link_type;
664 };
665 #define SWRAP_FILE_HDR_SIZE 24
666
667 struct swrap_packet_frame {
668         uint32_t seconds;
669         uint32_t micro_seconds;
670         uint32_t recorded_length;
671         uint32_t full_length;
672 };
673 #define SWRAP_PACKET_FRAME_SIZE 16
674
675 union swrap_packet_ip {
676         struct {
677                 uint8_t         ver_hdrlen;
678                 uint8_t         tos;
679                 uint16_t        packet_length;
680                 uint16_t        identification;
681                 uint8_t         flags;
682                 uint8_t         fragment;
683                 uint8_t         ttl;
684                 uint8_t         protocol;
685                 uint16_t        hdr_checksum;
686                 uint32_t        src_addr;
687                 uint32_t        dest_addr;
688         } v4;
689 #define SWRAP_PACKET_IP_V4_SIZE 20
690         struct {
691                 uint8_t         ver_prio;
692                 uint8_t         flow_label_high;
693                 uint16_t        flow_label_low;
694                 uint16_t        payload_length;
695                 uint8_t         next_header;
696                 uint8_t         hop_limit;
697                 uint8_t         src_addr[16];
698                 uint8_t         dest_addr[16];
699         } v6;
700 #define SWRAP_PACKET_IP_V6_SIZE 40
701 };
702 #define SWRAP_PACKET_IP_SIZE 40
703
704 union swrap_packet_payload {
705         struct {
706                 uint16_t        source_port;
707                 uint16_t        dest_port;
708                 uint32_t        seq_num;
709                 uint32_t        ack_num;
710                 uint8_t         hdr_length;
711                 uint8_t         control;
712                 uint16_t        window;
713                 uint16_t        checksum;
714                 uint16_t        urg;
715         } tcp;
716 #define SWRAP_PACKET_PAYLOAD_TCP_SIZE 20
717         struct {
718                 uint16_t        source_port;
719                 uint16_t        dest_port;
720                 uint16_t        length;
721                 uint16_t        checksum;
722         } udp;
723 #define SWRAP_PACKET_PAYLOAD_UDP_SIZE 8
724         struct {
725                 uint8_t         type;
726                 uint8_t         code;
727                 uint16_t        checksum;
728                 uint32_t        unused;
729         } icmp4;
730 #define SWRAP_PACKET_PAYLOAD_ICMP4_SIZE 8
731         struct {
732                 uint8_t         type;
733                 uint8_t         code;
734                 uint16_t        checksum;
735                 uint32_t        unused;
736         } icmp6;
737 #define SWRAP_PACKET_PAYLOAD_ICMP6_SIZE 8
738 };
739 #define SWRAP_PACKET_PAYLOAD_SIZE 20
740
741 #define SWRAP_PACKET_MIN_ALLOC \
742         (SWRAP_PACKET_FRAME_SIZE + \
743          SWRAP_PACKET_IP_SIZE + \
744          SWRAP_PACKET_PAYLOAD_SIZE)
745
746 static const char *socket_wrapper_pcap_file(void)
747 {
748         static int initialized = 0;
749         static const char *s = NULL;
750         static const struct swrap_file_hdr h;
751         static const struct swrap_packet_frame f;
752         static const union swrap_packet_ip i;
753         static const union swrap_packet_payload p;
754
755         if (initialized == 1) {
756                 return s;
757         }
758         initialized = 1;
759
760         /*
761          * TODO: don't use the structs use plain buffer offsets
762          *       and PUSH_U8(), PUSH_U16() and PUSH_U32()
763          * 
764          * for now make sure we disable PCAP support
765          * if the struct has alignment!
766          */
767         if (sizeof(h) != SWRAP_FILE_HDR_SIZE) {
768                 return NULL;
769         }
770         if (sizeof(f) != SWRAP_PACKET_FRAME_SIZE) {
771                 return NULL;
772         }
773         if (sizeof(i) != SWRAP_PACKET_IP_SIZE) {
774                 return NULL;
775         }
776         if (sizeof(i.v4) != SWRAP_PACKET_IP_V4_SIZE) {
777                 return NULL;
778         }
779         if (sizeof(i.v6) != SWRAP_PACKET_IP_V6_SIZE) {
780                 return NULL;
781         }
782         if (sizeof(p) != SWRAP_PACKET_PAYLOAD_SIZE) {
783                 return NULL;
784         }
785         if (sizeof(p.tcp) != SWRAP_PACKET_PAYLOAD_TCP_SIZE) {
786                 return NULL;
787         }
788         if (sizeof(p.udp) != SWRAP_PACKET_PAYLOAD_UDP_SIZE) {
789                 return NULL;
790         }
791         if (sizeof(p.icmp4) != SWRAP_PACKET_PAYLOAD_ICMP4_SIZE) {
792                 return NULL;
793         }
794         if (sizeof(p.icmp6) != SWRAP_PACKET_PAYLOAD_ICMP6_SIZE) {
795                 return NULL;
796         }
797
798         s = getenv("SOCKET_WRAPPER_PCAP_FILE");
799         if (s == NULL) {
800                 return NULL;
801         }
802         if (strncmp(s, "./", 2) == 0) {
803                 s += 2;
804         }
805         return s;
806 }
807
808 static uint8_t *swrap_packet_init(struct timeval *tval,
809                                   const struct sockaddr *src,
810                                   const struct sockaddr *dest,
811                                   int socket_type,
812                                   const uint8_t *payload,
813                                   size_t payload_len,
814                                   unsigned long tcp_seqno,
815                                   unsigned long tcp_ack,
816                                   unsigned char tcp_ctl,
817                                   int unreachable,
818                                   size_t *_packet_len)
819 {
820         uint8_t *base;
821         uint8_t *buf;
822         struct swrap_packet_frame *frame;
823         union swrap_packet_ip *ip;
824         union swrap_packet_payload *pay;
825         size_t packet_len;
826         size_t alloc_len;
827         size_t nonwire_len = sizeof(*frame);
828         size_t wire_hdr_len = 0;
829         size_t wire_len = 0;
830         size_t ip_hdr_len = 0;
831         size_t icmp_hdr_len = 0;
832         size_t icmp_truncate_len = 0;
833         uint8_t protocol = 0, icmp_protocol = 0;
834         const struct sockaddr_in *src_in = NULL;
835         const struct sockaddr_in *dest_in = NULL;
836 #ifdef HAVE_IPV6
837         const struct sockaddr_in6 *src_in6 = NULL;
838         const struct sockaddr_in6 *dest_in6 = NULL;
839 #endif
840         uint16_t src_port;
841         uint16_t dest_port;
842
843         switch (src->sa_family) {
844         case AF_INET:
845                 src_in = (const struct sockaddr_in *)src;
846                 dest_in = (const struct sockaddr_in *)dest;
847                 src_port = src_in->sin_port;
848                 dest_port = dest_in->sin_port;
849                 ip_hdr_len = sizeof(ip->v4);
850                 break;
851 #ifdef HAVE_IPV6
852         case AF_INET6:
853                 src_in6 = (const struct sockaddr_in6 *)src;
854                 dest_in6 = (const struct sockaddr_in6 *)dest;
855                 src_port = src_in6->sin6_port;
856                 dest_port = dest_in6->sin6_port;
857                 ip_hdr_len = sizeof(ip->v6);
858                 break;
859 #endif
860         default:
861                 return NULL;
862         }
863
864         switch (socket_type) {
865         case SOCK_STREAM:
866                 protocol = 0x06; /* TCP */
867                 wire_hdr_len = ip_hdr_len + sizeof(pay->tcp);
868                 wire_len = wire_hdr_len + payload_len;
869                 break;
870
871         case SOCK_DGRAM:
872                 protocol = 0x11; /* UDP */
873                 wire_hdr_len = ip_hdr_len + sizeof(pay->udp);
874                 wire_len = wire_hdr_len + payload_len;
875                 break;
876
877         default:
878                 return NULL;
879         }
880
881         if (unreachable) {
882                 icmp_protocol = protocol;
883                 switch (src->sa_family) {
884                 case AF_INET:
885                         protocol = 0x01; /* ICMPv4 */
886                         icmp_hdr_len = ip_hdr_len + sizeof(pay->icmp4);
887                         break;
888 #ifdef HAVE_IPV6
889                 case AF_INET6:
890                         protocol = 0x3A; /* ICMPv6 */
891                         icmp_hdr_len = ip_hdr_len + sizeof(pay->icmp6);
892                         break;
893 #endif
894                 }
895                 if (wire_len > 64 ) {
896                         icmp_truncate_len = wire_len - 64;
897                 }
898                 wire_hdr_len += icmp_hdr_len;
899                 wire_len += icmp_hdr_len;
900         }
901
902         packet_len = nonwire_len + wire_len;
903         alloc_len = packet_len;
904         if (alloc_len < SWRAP_PACKET_MIN_ALLOC) {
905                 alloc_len = SWRAP_PACKET_MIN_ALLOC;
906         }
907
908         base = (uint8_t *)malloc(alloc_len);
909         if (!base) return NULL;
910
911         buf = base;
912
913         frame = (struct swrap_packet_frame *)buf;
914         frame->seconds          = tval->tv_sec;
915         frame->micro_seconds    = tval->tv_usec;
916         frame->recorded_length  = wire_len - icmp_truncate_len;
917         frame->full_length      = wire_len - icmp_truncate_len;
918         buf += SWRAP_PACKET_FRAME_SIZE;
919
920         ip = (union swrap_packet_ip *)buf;
921         switch (src->sa_family) {
922         case AF_INET:
923                 ip->v4.ver_hdrlen       = 0x45; /* version 4 and 5 * 32 bit words */
924                 ip->v4.tos              = 0x00;
925                 ip->v4.packet_length    = htons(wire_len - icmp_truncate_len);
926                 ip->v4.identification   = htons(0xFFFF);
927                 ip->v4.flags            = 0x40; /* BIT 1 set - means don't fraqment */
928                 ip->v4.fragment         = htons(0x0000);
929                 ip->v4.ttl              = 0xFF;
930                 ip->v4.protocol         = protocol;
931                 ip->v4.hdr_checksum     = htons(0x0000);
932                 ip->v4.src_addr         = src_in->sin_addr.s_addr;
933                 ip->v4.dest_addr        = dest_in->sin_addr.s_addr;
934                 buf += SWRAP_PACKET_IP_V4_SIZE;
935                 break;
936 #ifdef HAVE_IPV6
937         case AF_INET6:
938                 ip->v6.ver_prio         = 0x60; /* version 4 and 5 * 32 bit words */
939                 ip->v6.flow_label_high  = 0x00;
940                 ip->v6.flow_label_low   = 0x0000;
941                 ip->v6.payload_length   = htons(wire_len - icmp_truncate_len);//TODO
942                 ip->v6.next_header      = protocol;
943                 memcpy(ip->v6.src_addr, src_in6->sin6_addr.s6_addr, 16);
944                 memcpy(ip->v6.dest_addr, dest_in6->sin6_addr.s6_addr, 16);
945                 buf += SWRAP_PACKET_IP_V6_SIZE;
946                 break;
947 #endif
948         }
949
950         if (unreachable) {
951                 pay = (union swrap_packet_payload *)buf;
952                 switch (src->sa_family) {
953                 case AF_INET:
954                         pay->icmp4.type         = 0x03; /* destination unreachable */
955                         pay->icmp4.code         = 0x01; /* host unreachable */
956                         pay->icmp4.checksum     = htons(0x0000);
957                         pay->icmp4.unused       = htonl(0x00000000);
958                         buf += SWRAP_PACKET_PAYLOAD_ICMP4_SIZE;
959
960                         /* set the ip header in the ICMP payload */
961                         ip = (union swrap_packet_ip *)buf;
962                         ip->v4.ver_hdrlen       = 0x45; /* version 4 and 5 * 32 bit words */
963                         ip->v4.tos              = 0x00;
964                         ip->v4.packet_length    = htons(wire_len - icmp_hdr_len);
965                         ip->v4.identification   = htons(0xFFFF);
966                         ip->v4.flags            = 0x40; /* BIT 1 set - means don't fraqment */
967                         ip->v4.fragment         = htons(0x0000);
968                         ip->v4.ttl              = 0xFF;
969                         ip->v4.protocol         = icmp_protocol;
970                         ip->v4.hdr_checksum     = htons(0x0000);
971                         ip->v4.src_addr         = dest_in->sin_addr.s_addr;
972                         ip->v4.dest_addr        = src_in->sin_addr.s_addr;
973                         buf += SWRAP_PACKET_IP_V4_SIZE;
974
975                         src_port = dest_in->sin_port;
976                         dest_port = src_in->sin_port;
977                         break;
978 #ifdef HAVE_IPV6
979                 case AF_INET6:
980                         pay->icmp6.type         = 0x01; /* destination unreachable */
981                         pay->icmp6.code         = 0x03; /* address unreachable */
982                         pay->icmp6.checksum     = htons(0x0000);
983                         pay->icmp6.unused       = htonl(0x00000000);
984                         buf += SWRAP_PACKET_PAYLOAD_ICMP6_SIZE;
985
986                         /* set the ip header in the ICMP payload */
987                         ip = (union swrap_packet_ip *)buf;
988                         ip->v6.ver_prio         = 0x60; /* version 4 and 5 * 32 bit words */
989                         ip->v6.flow_label_high  = 0x00;
990                         ip->v6.flow_label_low   = 0x0000;
991                         ip->v6.payload_length   = htons(wire_len - icmp_truncate_len);//TODO
992                         ip->v6.next_header      = protocol;
993                         memcpy(ip->v6.src_addr, dest_in6->sin6_addr.s6_addr, 16);
994                         memcpy(ip->v6.dest_addr, src_in6->sin6_addr.s6_addr, 16);
995                         buf += SWRAP_PACKET_IP_V6_SIZE;
996
997                         src_port = dest_in6->sin6_port;
998                         dest_port = src_in6->sin6_port;
999                         break;
1000 #endif
1001                 }
1002         }
1003
1004         pay = (union swrap_packet_payload *)buf;
1005
1006         switch (socket_type) {
1007         case SOCK_STREAM:
1008                 pay->tcp.source_port    = src_port;
1009                 pay->tcp.dest_port      = dest_port;
1010                 pay->tcp.seq_num        = htonl(tcp_seqno);
1011                 pay->tcp.ack_num        = htonl(tcp_ack);
1012                 pay->tcp.hdr_length     = 0x50; /* 5 * 32 bit words */
1013                 pay->tcp.control        = tcp_ctl;
1014                 pay->tcp.window         = htons(0x7FFF);
1015                 pay->tcp.checksum       = htons(0x0000);
1016                 pay->tcp.urg            = htons(0x0000);
1017                 buf += SWRAP_PACKET_PAYLOAD_TCP_SIZE;
1018
1019                 break;
1020
1021         case SOCK_DGRAM:
1022                 pay->udp.source_port    = src_port;
1023                 pay->udp.dest_port      = dest_port;
1024                 pay->udp.length         = htons(8 + payload_len);
1025                 pay->udp.checksum       = htons(0x0000);
1026                 buf += SWRAP_PACKET_PAYLOAD_UDP_SIZE;
1027
1028                 break;
1029         }
1030
1031         if (payload && payload_len > 0) {
1032                 memcpy(buf, payload, payload_len);
1033         }
1034
1035         *_packet_len = packet_len - icmp_truncate_len;
1036         return base;
1037 }
1038
1039 static int swrap_get_pcap_fd(const char *fname)
1040 {
1041         static int fd = -1;
1042
1043         if (fd != -1) return fd;
1044
1045         fd = open(fname, O_WRONLY|O_CREAT|O_EXCL|O_APPEND, 0644);
1046         if (fd != -1) {
1047                 struct swrap_file_hdr file_hdr;
1048                 file_hdr.magic          = 0xA1B2C3D4;
1049                 file_hdr.version_major  = 0x0002;       
1050                 file_hdr.version_minor  = 0x0004;
1051                 file_hdr.timezone       = 0x00000000;
1052                 file_hdr.sigfigs        = 0x00000000;
1053                 file_hdr.frame_max_len  = SWRAP_FRAME_LENGTH_MAX;
1054                 file_hdr.link_type      = 0x0065; /* 101 RAW IP */
1055
1056                 if (write(fd, &file_hdr, sizeof(file_hdr)) != sizeof(file_hdr)) {
1057                         close(fd);
1058                         fd = -1;
1059                 }
1060                 return fd;
1061         }
1062
1063         fd = open(fname, O_WRONLY|O_APPEND, 0644);
1064
1065         return fd;
1066 }
1067
1068 static uint8_t *swrap_marshall_packet(struct socket_info *si,
1069                                       const struct sockaddr *addr,
1070                                       enum swrap_packet_type type,
1071                                       const void *buf, size_t len,
1072                                       size_t *packet_len)
1073 {
1074         const struct sockaddr *src_addr;
1075         const struct sockaddr *dest_addr;
1076         unsigned long tcp_seqno = 0;
1077         unsigned long tcp_ack = 0;
1078         unsigned char tcp_ctl = 0;
1079         int unreachable = 0;
1080
1081         struct timeval tv;
1082
1083         switch (si->family) {
1084         case AF_INET:
1085                 break;
1086         case AF_INET6:
1087                 break;
1088         default:
1089                 return NULL;
1090         }
1091
1092         switch (type) {
1093         case SWRAP_CONNECT_SEND:
1094                 if (si->type != SOCK_STREAM) return NULL;
1095
1096                 src_addr = si->myname;
1097                 dest_addr = addr;
1098
1099                 tcp_seqno = si->io.pck_snd;
1100                 tcp_ack = si->io.pck_rcv;
1101                 tcp_ctl = 0x02; /* SYN */
1102
1103                 si->io.pck_snd += 1;
1104
1105                 break;
1106
1107         case SWRAP_CONNECT_RECV:
1108                 if (si->type != SOCK_STREAM) return NULL;
1109
1110                 dest_addr = si->myname;
1111                 src_addr = addr;
1112
1113                 tcp_seqno = si->io.pck_rcv;
1114                 tcp_ack = si->io.pck_snd;
1115                 tcp_ctl = 0x12; /** SYN,ACK */
1116
1117                 si->io.pck_rcv += 1;
1118
1119                 break;
1120
1121         case SWRAP_CONNECT_UNREACH:
1122                 if (si->type != SOCK_STREAM) return NULL;
1123
1124                 dest_addr = si->myname;
1125                 src_addr = addr;
1126
1127                 /* Unreachable: resend the data of SWRAP_CONNECT_SEND */
1128                 tcp_seqno = si->io.pck_snd - 1;
1129                 tcp_ack = si->io.pck_rcv;
1130                 tcp_ctl = 0x02; /* SYN */
1131                 unreachable = 1;
1132
1133                 break;
1134
1135         case SWRAP_CONNECT_ACK:
1136                 if (si->type != SOCK_STREAM) return NULL;
1137
1138                 src_addr = si->myname;
1139                 dest_addr = addr;
1140
1141                 tcp_seqno = si->io.pck_snd;
1142                 tcp_ack = si->io.pck_rcv;
1143                 tcp_ctl = 0x10; /* ACK */
1144
1145                 break;
1146
1147         case SWRAP_ACCEPT_SEND:
1148                 if (si->type != SOCK_STREAM) return NULL;
1149
1150                 dest_addr = si->myname;
1151                 src_addr = addr;
1152
1153                 tcp_seqno = si->io.pck_rcv;
1154                 tcp_ack = si->io.pck_snd;
1155                 tcp_ctl = 0x02; /* SYN */
1156
1157                 si->io.pck_rcv += 1;
1158
1159                 break;
1160
1161         case SWRAP_ACCEPT_RECV:
1162                 if (si->type != SOCK_STREAM) return NULL;
1163
1164                 src_addr = si->myname;
1165                 dest_addr = addr;
1166
1167                 tcp_seqno = si->io.pck_snd;
1168                 tcp_ack = si->io.pck_rcv;
1169                 tcp_ctl = 0x12; /* SYN,ACK */
1170
1171                 si->io.pck_snd += 1;
1172
1173                 break;
1174
1175         case SWRAP_ACCEPT_ACK:
1176                 if (si->type != SOCK_STREAM) return NULL;
1177
1178                 dest_addr = si->myname;
1179                 src_addr = addr;
1180
1181                 tcp_seqno = si->io.pck_rcv;
1182                 tcp_ack = si->io.pck_snd;
1183                 tcp_ctl = 0x10; /* ACK */
1184
1185                 break;
1186
1187         case SWRAP_SEND:
1188                 src_addr = si->myname;
1189                 dest_addr = si->peername;
1190
1191                 tcp_seqno = si->io.pck_snd;
1192                 tcp_ack = si->io.pck_rcv;
1193                 tcp_ctl = 0x18; /* PSH,ACK */
1194
1195                 si->io.pck_snd += len;
1196
1197                 break;
1198
1199         case SWRAP_SEND_RST:
1200                 dest_addr = si->myname;
1201                 src_addr = si->peername;
1202
1203                 if (si->type == SOCK_DGRAM) {
1204                         return swrap_marshall_packet(si, si->peername,
1205                                           SWRAP_SENDTO_UNREACH,
1206                                           buf, len, packet_len);
1207                 }
1208
1209                 tcp_seqno = si->io.pck_rcv;
1210                 tcp_ack = si->io.pck_snd;
1211                 tcp_ctl = 0x14; /** RST,ACK */
1212
1213                 break;
1214
1215         case SWRAP_PENDING_RST:
1216                 dest_addr = si->myname;
1217                 src_addr = si->peername;
1218
1219                 if (si->type == SOCK_DGRAM) {
1220                         return NULL;
1221                 }
1222
1223                 tcp_seqno = si->io.pck_rcv;
1224                 tcp_ack = si->io.pck_snd;
1225                 tcp_ctl = 0x14; /* RST,ACK */
1226
1227                 break;
1228
1229         case SWRAP_RECV:
1230                 dest_addr = si->myname;
1231                 src_addr = si->peername;
1232
1233                 tcp_seqno = si->io.pck_rcv;
1234                 tcp_ack = si->io.pck_snd;
1235                 tcp_ctl = 0x18; /* PSH,ACK */
1236
1237                 si->io.pck_rcv += len;
1238
1239                 break;
1240
1241         case SWRAP_RECV_RST:
1242                 dest_addr = si->myname;
1243                 src_addr = si->peername;
1244
1245                 if (si->type == SOCK_DGRAM) {
1246                         return NULL;
1247                 }
1248
1249                 tcp_seqno = si->io.pck_rcv;
1250                 tcp_ack = si->io.pck_snd;
1251                 tcp_ctl = 0x14; /* RST,ACK */
1252
1253                 break;
1254
1255         case SWRAP_SENDTO:
1256                 src_addr = si->myname;
1257                 dest_addr = addr;
1258
1259                 si->io.pck_snd += len;
1260
1261                 break;
1262
1263         case SWRAP_SENDTO_UNREACH:
1264                 dest_addr = si->myname;
1265                 src_addr = addr;
1266
1267                 unreachable = 1;
1268
1269                 break;
1270
1271         case SWRAP_RECVFROM:
1272                 dest_addr = si->myname;
1273                 src_addr = addr;
1274
1275                 si->io.pck_rcv += len;
1276
1277                 break;
1278
1279         case SWRAP_CLOSE_SEND:
1280                 if (si->type != SOCK_STREAM) return NULL;
1281
1282                 src_addr = si->myname;
1283                 dest_addr = si->peername;
1284
1285                 tcp_seqno = si->io.pck_snd;
1286                 tcp_ack = si->io.pck_rcv;
1287                 tcp_ctl = 0x11; /* FIN, ACK */
1288
1289                 si->io.pck_snd += 1;
1290
1291                 break;
1292
1293         case SWRAP_CLOSE_RECV:
1294                 if (si->type != SOCK_STREAM) return NULL;
1295
1296                 dest_addr = si->myname;
1297                 src_addr = si->peername;
1298
1299                 tcp_seqno = si->io.pck_rcv;
1300                 tcp_ack = si->io.pck_snd;
1301                 tcp_ctl = 0x11; /* FIN,ACK */
1302
1303                 si->io.pck_rcv += 1;
1304
1305                 break;
1306
1307         case SWRAP_CLOSE_ACK:
1308                 if (si->type != SOCK_STREAM) return NULL;
1309
1310                 src_addr = si->myname;
1311                 dest_addr = si->peername;
1312
1313                 tcp_seqno = si->io.pck_snd;
1314                 tcp_ack = si->io.pck_rcv;
1315                 tcp_ctl = 0x10; /* ACK */
1316
1317                 break;
1318         default:
1319                 return NULL;
1320         }
1321
1322         swrapGetTimeOfDay(&tv);
1323
1324         return swrap_packet_init(&tv, src_addr, dest_addr, si->type,
1325                                  (const uint8_t *)buf, len,
1326                                  tcp_seqno, tcp_ack, tcp_ctl, unreachable,
1327                                  packet_len);
1328 }
1329
1330 static void swrap_dump_packet(struct socket_info *si,
1331                               const struct sockaddr *addr,
1332                               enum swrap_packet_type type,
1333                               const void *buf, size_t len)
1334 {
1335         const char *file_name;
1336         uint8_t *packet;
1337         size_t packet_len = 0;
1338         int fd;
1339
1340         file_name = socket_wrapper_pcap_file();
1341         if (!file_name) {
1342                 return;
1343         }
1344
1345         packet = swrap_marshall_packet(si, addr, type, buf, len, &packet_len);
1346         if (!packet) {
1347                 return;
1348         }
1349
1350         fd = swrap_get_pcap_fd(file_name);
1351         if (fd != -1) {
1352                 if (write(fd, packet, packet_len) != packet_len) {
1353                         free(packet);
1354                         return;
1355                 }
1356         }
1357
1358         free(packet);
1359 }
1360
1361 _PUBLIC_ int swrap_socket(int family, int type, int protocol)
1362 {
1363         struct socket_info *si;
1364         int fd;
1365
1366         if (!socket_wrapper_dir()) {
1367                 return real_socket(family, type, protocol);
1368         }
1369
1370         switch (family) {
1371         case AF_INET:
1372 #ifdef HAVE_IPV6
1373         case AF_INET6:
1374 #endif
1375                 break;
1376         case AF_UNIX:
1377                 return real_socket(family, type, protocol);
1378         default:
1379                 errno = EAFNOSUPPORT;
1380                 return -1;
1381         }
1382
1383         switch (type) {
1384         case SOCK_STREAM:
1385                 break;
1386         case SOCK_DGRAM:
1387                 break;
1388         default:
1389                 errno = EPROTONOSUPPORT;
1390                 return -1;
1391         }
1392
1393         switch (protocol) {
1394         case 0:
1395                 break;
1396         case 6:
1397                 if (type == SOCK_STREAM) {
1398                         break;
1399                 }
1400                 /*fall through*/
1401         case 17:
1402                 if (type == SOCK_DGRAM) {
1403                         break;
1404                 }
1405                 /*fall through*/
1406         default:
1407                 errno = EPROTONOSUPPORT;
1408                 return -1;
1409         }
1410
1411         fd = real_socket(AF_UNIX, type, 0);
1412
1413         if (fd == -1) return -1;
1414
1415         si = (struct socket_info *)calloc(1, sizeof(struct socket_info));
1416
1417         si->family = family;
1418         si->type = type;
1419         si->protocol = protocol;
1420         si->fd = fd;
1421
1422         SWRAP_DLIST_ADD(sockets, si);
1423
1424         return si->fd;
1425 }
1426
1427 _PUBLIC_ int swrap_accept(int s, struct sockaddr *addr, socklen_t *addrlen)
1428 {
1429         struct socket_info *parent_si, *child_si;
1430         int fd;
1431         struct sockaddr_un un_addr;
1432         socklen_t un_addrlen = sizeof(un_addr);
1433         struct sockaddr_un un_my_addr;
1434         socklen_t un_my_addrlen = sizeof(un_my_addr);
1435         struct sockaddr *my_addr;
1436         socklen_t my_addrlen, len;
1437         int ret;
1438
1439         parent_si = find_socket_info(s);
1440         if (!parent_si) {
1441                 return real_accept(s, addr, addrlen);
1442         }
1443
1444         /* 
1445          * assume out sockaddr have the same size as the in parent
1446          * socket family
1447          */
1448         my_addrlen = socket_length(parent_si->family);
1449         if (my_addrlen <= 0) {
1450                 errno = EINVAL;
1451                 return -1;
1452         }
1453
1454         my_addr = (struct sockaddr *)malloc(my_addrlen);
1455         if (my_addr == NULL) {
1456                 return -1;
1457         }
1458
1459         memset(&un_addr, 0, sizeof(un_addr));
1460         memset(&un_my_addr, 0, sizeof(un_my_addr));
1461
1462         ret = real_accept(s, (struct sockaddr *)&un_addr, &un_addrlen);
1463         if (ret == -1) {
1464                 free(my_addr);
1465                 return ret;
1466         }
1467
1468         fd = ret;
1469
1470         len = my_addrlen;
1471         ret = sockaddr_convert_from_un(parent_si, &un_addr, un_addrlen,
1472                                        parent_si->family, my_addr, &len);
1473         if (ret == -1) {
1474                 free(my_addr);
1475                 close(fd);
1476                 return ret;
1477         }
1478
1479         child_si = (struct socket_info *)malloc(sizeof(struct socket_info));
1480         memset(child_si, 0, sizeof(*child_si));
1481
1482         child_si->fd = fd;
1483         child_si->family = parent_si->family;
1484         child_si->type = parent_si->type;
1485         child_si->protocol = parent_si->protocol;
1486         child_si->bound = 1;
1487         child_si->is_server = 1;
1488
1489         child_si->peername_len = len;
1490         child_si->peername = sockaddr_dup(my_addr, len);
1491
1492         if (addr != NULL && addrlen != NULL) {
1493             *addrlen = len;
1494             if (*addrlen >= len)
1495                 memcpy(addr, my_addr, len);
1496             *addrlen = 0;
1497         }
1498
1499         ret = real_getsockname(fd, (struct sockaddr *)&un_my_addr, &un_my_addrlen);
1500         if (ret == -1) {
1501                 free(child_si);
1502                 close(fd);
1503                 return ret;
1504         }
1505
1506         len = my_addrlen;
1507         ret = sockaddr_convert_from_un(child_si, &un_my_addr, un_my_addrlen,
1508                                        child_si->family, my_addr, &len);
1509         if (ret == -1) {
1510                 free(child_si);
1511                 free(my_addr);
1512                 close(fd);
1513                 return ret;
1514         }
1515
1516         child_si->myname_len = len;
1517         child_si->myname = sockaddr_dup(my_addr, len);
1518         free(my_addr);
1519
1520         SWRAP_DLIST_ADD(sockets, child_si);
1521
1522         swrap_dump_packet(child_si, addr, SWRAP_ACCEPT_SEND, NULL, 0);
1523         swrap_dump_packet(child_si, addr, SWRAP_ACCEPT_RECV, NULL, 0);
1524         swrap_dump_packet(child_si, addr, SWRAP_ACCEPT_ACK, NULL, 0);
1525
1526         return fd;
1527 }
1528
1529 static int autobind_start_init;
1530 static int autobind_start;
1531
1532 /* using sendto() or connect() on an unbound socket would give the
1533    recipient no way to reply, as unlike UDP and TCP, a unix domain
1534    socket can't auto-assign emphemeral port numbers, so we need to
1535    assign it here */
1536 static int swrap_auto_bind(struct socket_info *si)
1537 {
1538         struct sockaddr_un un_addr;
1539         int i;
1540         char type;
1541         int ret;
1542         int port;
1543         struct stat st;
1544
1545         if (autobind_start_init != 1) {
1546                 autobind_start_init = 1;
1547                 autobind_start = getpid();
1548                 autobind_start %= 50000;
1549                 autobind_start += 10000;
1550         }
1551
1552         un_addr.sun_family = AF_UNIX;
1553
1554         switch (si->family) {
1555         case AF_INET: {
1556                 struct sockaddr_in in;
1557
1558                 switch (si->type) {
1559                 case SOCK_STREAM:
1560                         type = SOCKET_TYPE_CHAR_TCP;
1561                         break;
1562                 case SOCK_DGRAM:
1563                         type = SOCKET_TYPE_CHAR_UDP;
1564                         break;
1565                 default:
1566                     errno = ESOCKTNOSUPPORT;
1567                     return -1;
1568                 }
1569
1570                 memset(&in, 0, sizeof(in));
1571                 in.sin_family = AF_INET;
1572                 in.sin_addr.s_addr = htonl(127<<24 | 
1573                                            socket_wrapper_default_iface());
1574
1575                 si->myname_len = sizeof(in);
1576                 si->myname = sockaddr_dup(&in, si->myname_len);
1577                 break;
1578         }
1579 #ifdef HAVE_IPV6
1580         case AF_INET6: {
1581                 struct sockaddr_in6 in6;
1582
1583                 switch (si->type) {
1584                 case SOCK_STREAM:
1585                         type = SOCKET_TYPE_CHAR_TCP_V6;
1586                         break;
1587                 case SOCK_DGRAM:
1588                         type = SOCKET_TYPE_CHAR_UDP_V6;
1589                         break;
1590                 default:
1591                         errno = ESOCKTNOSUPPORT;
1592                         return -1;
1593                 }
1594
1595                 memset(&in6, 0, sizeof(in6));
1596                 in6.sin6_family = AF_INET6;
1597                 in6.sin6_addr = swrap_ipv6;
1598                 in6.sin6_addr.s6_addr[15] = socket_wrapper_default_iface();
1599                 si->myname_len = sizeof(in6);
1600                 si->myname = sockaddr_dup(&in6, si->myname_len);
1601                 break;
1602         }
1603 #endif
1604         default:
1605                 errno = ESOCKTNOSUPPORT;
1606                 return -1;
1607         }
1608
1609         if (autobind_start > 60000) {
1610                 autobind_start = 10000;
1611         }
1612
1613         for (i=0;i<1000;i++) {
1614                 port = autobind_start + i;
1615                 snprintf(un_addr.sun_path, sizeof(un_addr.sun_path), 
1616                          "%s/"SOCKET_FORMAT, socket_wrapper_dir(),
1617                          type, socket_wrapper_default_iface(), port);
1618                 if (stat(un_addr.sun_path, &st) == 0) continue;
1619                 
1620                 ret = real_bind(si->fd, (struct sockaddr *)&un_addr, sizeof(un_addr));
1621                 if (ret == -1) return ret;
1622
1623                 si->tmp_path = strdup(un_addr.sun_path);
1624                 si->bound = 1;
1625                 autobind_start = port + 1;
1626                 break;
1627         }
1628         if (i == 1000) {
1629                 errno = ENFILE;
1630                 return -1;
1631         }
1632
1633         set_port(si->family, port, si->myname);
1634
1635         return 0;
1636 }
1637
1638
1639 _PUBLIC_ int swrap_connect(int s, const struct sockaddr *serv_addr, socklen_t addrlen)
1640 {
1641         int ret;
1642         struct sockaddr_un un_addr;
1643         struct socket_info *si = find_socket_info(s);
1644
1645         if (!si) {
1646                 return real_connect(s, serv_addr, addrlen);
1647         }
1648
1649         if (si->bound == 0) {
1650                 ret = swrap_auto_bind(si);
1651                 if (ret == -1) return -1;
1652         }
1653
1654         if (si->family != serv_addr->sa_family) {
1655                 errno = EINVAL;
1656                 return -1;
1657         }
1658
1659         ret = sockaddr_convert_to_un(si, (const struct sockaddr *)serv_addr, addrlen, &un_addr, 0, NULL);
1660         if (ret == -1) return -1;
1661
1662         swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_SEND, NULL, 0);
1663
1664         ret = real_connect(s, (struct sockaddr *)&un_addr, 
1665                            sizeof(struct sockaddr_un));
1666
1667         /* to give better errors */
1668         if (ret == -1 && errno == ENOENT) {
1669                 errno = EHOSTUNREACH;
1670         }
1671
1672         if (ret == 0) {
1673                 si->peername_len = addrlen;
1674                 si->peername = sockaddr_dup(serv_addr, addrlen);
1675
1676                 swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_RECV, NULL, 0);
1677                 swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_ACK, NULL, 0);
1678         } else {
1679                 swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_UNREACH, NULL, 0);
1680         }
1681
1682         return ret;
1683 }
1684
1685 _PUBLIC_ int swrap_bind(int s, const struct sockaddr *myaddr, socklen_t addrlen)
1686 {
1687         int ret;
1688         struct sockaddr_un un_addr;
1689         struct socket_info *si = find_socket_info(s);
1690
1691         if (!si) {
1692                 return real_bind(s, myaddr, addrlen);
1693         }
1694
1695         si->myname_len = addrlen;
1696         si->myname = sockaddr_dup(myaddr, addrlen);
1697
1698         ret = sockaddr_convert_to_un(si, (const struct sockaddr *)myaddr, addrlen, &un_addr, 1, &si->bcast);
1699         if (ret == -1) return -1;
1700
1701         unlink(un_addr.sun_path);
1702
1703         ret = real_bind(s, (struct sockaddr *)&un_addr,
1704                         sizeof(struct sockaddr_un));
1705
1706         if (ret == 0) {
1707                 si->bound = 1;
1708         }
1709
1710         return ret;
1711 }
1712
1713 _PUBLIC_ int swrap_listen(int s, int backlog)
1714 {
1715         int ret;
1716         struct socket_info *si = find_socket_info(s);
1717
1718         if (!si) {
1719                 return real_listen(s, backlog);
1720         }
1721
1722         ret = real_listen(s, backlog);
1723
1724         return ret;
1725 }
1726
1727 _PUBLIC_ int swrap_getpeername(int s, struct sockaddr *name, socklen_t *addrlen)
1728 {
1729         struct socket_info *si = find_socket_info(s);
1730
1731         if (!si) {
1732                 return real_getpeername(s, name, addrlen);
1733         }
1734
1735         if (!si->peername)
1736         {
1737                 errno = ENOTCONN;
1738                 return -1;
1739         }
1740
1741         memcpy(name, si->peername, si->peername_len);
1742         *addrlen = si->peername_len;
1743
1744         return 0;
1745 }
1746
1747 _PUBLIC_ int swrap_getsockname(int s, struct sockaddr *name, socklen_t *addrlen)
1748 {
1749         struct socket_info *si = find_socket_info(s);
1750
1751         if (!si) {
1752                 return real_getsockname(s, name, addrlen);
1753         }
1754
1755         memcpy(name, si->myname, si->myname_len);
1756         *addrlen = si->myname_len;
1757
1758         return 0;
1759 }
1760
1761 _PUBLIC_ int swrap_getsockopt(int s, int level, int optname, void *optval, socklen_t *optlen)
1762 {
1763         struct socket_info *si = find_socket_info(s);
1764
1765         if (!si) {
1766                 return real_getsockopt(s, level, optname, optval, optlen);
1767         }
1768
1769         if (level == SOL_SOCKET) {
1770                 return real_getsockopt(s, level, optname, optval, optlen);
1771         } 
1772
1773         errno = ENOPROTOOPT;
1774         return -1;
1775 }
1776
1777 _PUBLIC_ int swrap_setsockopt(int s, int  level,  int  optname,  const  void  *optval, socklen_t optlen)
1778 {
1779         struct socket_info *si = find_socket_info(s);
1780
1781         if (!si) {
1782                 return real_setsockopt(s, level, optname, optval, optlen);
1783         }
1784
1785         if (level == SOL_SOCKET) {
1786                 return real_setsockopt(s, level, optname, optval, optlen);
1787         }
1788
1789         switch (si->family) {
1790         case AF_INET:
1791                 return 0;
1792         default:
1793                 errno = ENOPROTOOPT;
1794                 return -1;
1795         }
1796 }
1797
1798 _PUBLIC_ ssize_t swrap_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlen)
1799 {
1800         struct sockaddr_un un_addr;
1801         socklen_t un_addrlen = sizeof(un_addr);
1802         int ret;
1803         struct socket_info *si = find_socket_info(s);
1804
1805         if (!si) {
1806                 return real_recvfrom(s, buf, len, flags, from, fromlen);
1807         }
1808
1809         len = MIN(len, 1500);
1810
1811         /* irix 6.4 forgets to null terminate the sun_path string :-( */
1812         memset(&un_addr, 0, sizeof(un_addr));
1813         ret = real_recvfrom(s, buf, len, flags, (struct sockaddr *)&un_addr, &un_addrlen);
1814         if (ret == -1) 
1815                 return ret;
1816
1817         if (sockaddr_convert_from_un(si, &un_addr, un_addrlen,
1818                                      si->family, from, fromlen) == -1) {
1819                 return -1;
1820         }
1821
1822         swrap_dump_packet(si, from, SWRAP_RECVFROM, buf, ret);
1823
1824         return ret;
1825 }
1826
1827
1828 _PUBLIC_ ssize_t swrap_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen)
1829 {
1830         struct sockaddr_un un_addr;
1831         int ret;
1832         struct socket_info *si = find_socket_info(s);
1833         int bcast = 0;
1834
1835         if (!si) {
1836                 return real_sendto(s, buf, len, flags, to, tolen);
1837         }
1838
1839         len = MIN(len, 1500);
1840
1841         switch (si->type) {
1842         case SOCK_STREAM:
1843                 ret = real_send(s, buf, len, flags);
1844                 break;
1845         case SOCK_DGRAM:
1846                 if (si->bound == 0) {
1847                         ret = swrap_auto_bind(si);
1848                         if (ret == -1) return -1;
1849                 }
1850                 
1851                 ret = sockaddr_convert_to_un(si, to, tolen, &un_addr, 0, &bcast);
1852                 if (ret == -1) return -1;
1853                 
1854                 if (bcast) {
1855                         struct stat st;
1856                         unsigned int iface;
1857                         unsigned int prt = ntohs(((const struct sockaddr_in *)to)->sin_port);
1858                         char type;
1859                         
1860                         type = SOCKET_TYPE_CHAR_UDP;
1861                         
1862                         for(iface=0; iface <= MAX_WRAPPED_INTERFACES; iface++) {
1863                                 snprintf(un_addr.sun_path, sizeof(un_addr.sun_path), "%s/"SOCKET_FORMAT, 
1864                                          socket_wrapper_dir(), type, iface, prt);
1865                                 if (stat(un_addr.sun_path, &st) != 0) continue;
1866                                 
1867                                 /* ignore the any errors in broadcast sends */
1868                                 real_sendto(s, buf, len, flags, (struct sockaddr *)&un_addr, sizeof(un_addr));
1869                         }
1870                         
1871                         swrap_dump_packet(si, to, SWRAP_SENDTO, buf, len);
1872                         
1873                         return len;
1874                 }
1875                 
1876                 ret = real_sendto(s, buf, len, flags, (struct sockaddr *)&un_addr, sizeof(un_addr));
1877                 break;
1878         default:
1879                 ret = -1;
1880                 errno = EHOSTUNREACH;
1881                 break;
1882         }
1883                 
1884         /* to give better errors */
1885         if (ret == -1 && errno == ENOENT) {
1886                 errno = EHOSTUNREACH;
1887         }
1888
1889         if (ret == -1) {
1890                 swrap_dump_packet(si, to, SWRAP_SENDTO, buf, len);
1891                 swrap_dump_packet(si, to, SWRAP_SENDTO_UNREACH, buf, len);
1892         } else {
1893                 swrap_dump_packet(si, to, SWRAP_SENDTO, buf, ret);
1894         }
1895
1896         return ret;
1897 }
1898
1899 _PUBLIC_ int swrap_ioctl(int s, int r, void *p)
1900 {
1901         int ret;
1902         struct socket_info *si = find_socket_info(s);
1903         int value;
1904
1905         if (!si) {
1906                 return real_ioctl(s, r, p);
1907         }
1908
1909         ret = real_ioctl(s, r, p);
1910
1911         switch (r) {
1912         case FIONREAD:
1913                 value = *((int *)p);
1914                 if (ret == -1 && errno != EAGAIN && errno != ENOBUFS) {
1915                         swrap_dump_packet(si, NULL, SWRAP_PENDING_RST, NULL, 0);
1916                 } else if (value == 0) { /* END OF FILE */
1917                         swrap_dump_packet(si, NULL, SWRAP_PENDING_RST, NULL, 0);
1918                 }
1919                 break;
1920         }
1921
1922         return ret;
1923 }
1924
1925 _PUBLIC_ ssize_t swrap_recv(int s, void *buf, size_t len, int flags)
1926 {
1927         int ret;
1928         struct socket_info *si = find_socket_info(s);
1929
1930         if (!si) {
1931                 return real_recv(s, buf, len, flags);
1932         }
1933
1934         len = MIN(len, 1500);
1935
1936         ret = real_recv(s, buf, len, flags);
1937         if (ret == -1 && errno != EAGAIN && errno != ENOBUFS) {
1938                 swrap_dump_packet(si, NULL, SWRAP_RECV_RST, NULL, 0);
1939         } else if (ret == 0) { /* END OF FILE */
1940                 swrap_dump_packet(si, NULL, SWRAP_RECV_RST, NULL, 0);
1941         } else if (ret > 0) {
1942                 swrap_dump_packet(si, NULL, SWRAP_RECV, buf, ret);
1943         }
1944
1945         return ret;
1946 }
1947
1948
1949 _PUBLIC_ ssize_t swrap_send(int s, const void *buf, size_t len, int flags)
1950 {
1951         int ret;
1952         struct socket_info *si = find_socket_info(s);
1953
1954         if (!si) {
1955                 return real_send(s, buf, len, flags);
1956         }
1957
1958         len = MIN(len, 1500);
1959
1960         ret = real_send(s, buf, len, flags);
1961
1962         if (ret == -1) {
1963                 swrap_dump_packet(si, NULL, SWRAP_SEND, buf, len);
1964                 swrap_dump_packet(si, NULL, SWRAP_SEND_RST, NULL, 0);
1965         } else {
1966                 swrap_dump_packet(si, NULL, SWRAP_SEND, buf, ret);
1967         }
1968
1969         return ret;
1970 }
1971
1972 _PUBLIC_ int swrap_close(int fd)
1973 {
1974         struct socket_info *si = find_socket_info(fd);
1975         int ret;
1976
1977         if (!si) {
1978                 return real_close(fd);
1979         }
1980
1981         SWRAP_DLIST_REMOVE(sockets, si);
1982
1983         if (si->myname && si->peername) {
1984                 swrap_dump_packet(si, NULL, SWRAP_CLOSE_SEND, NULL, 0);
1985         }
1986
1987         ret = real_close(fd);
1988
1989         if (si->myname && si->peername) {
1990                 swrap_dump_packet(si, NULL, SWRAP_CLOSE_RECV, NULL, 0);
1991                 swrap_dump_packet(si, NULL, SWRAP_CLOSE_ACK, NULL, 0);
1992         }
1993
1994         if (si->path) free(si->path);
1995         if (si->myname) free(si->myname);
1996         if (si->peername) free(si->peername);
1997         if (si->tmp_path) {
1998                 unlink(si->tmp_path);
1999                 free(si->tmp_path);
2000         }
2001         free(si);
2002
2003         return ret;
2004 }