source3/lib/util_sock.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Samba utility functions
   4    Copyright (C) Andrew Tridgell 1992-1998
   5    Copyright (C) Tim Potter      2000-2001
   6    Copyright (C) Jeremy Allison  1992-2007
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22 #include "includes.h"
  23 #include "memcache.h"
  24 #include "../lib/async_req/async_sock.h"
  25 #include "../lib/util/select.h"
  26 #include "interfaces.h"
  27
  28 /****************************************************************************
  29  Get a port number in host byte order from a sockaddr_storage.
  30 ****************************************************************************/
  31
  32 uint16_t get_sockaddr_port(const struct sockaddr_storage *pss)
  33 {
  34         uint16_t port = 0;
  35
  36         if (pss->ss_family != AF_INET) {
  37 #if defined(HAVE_IPV6)
  38                 /* IPv6 */
  39                 const struct sockaddr_in6 *sa6 =
  40                         (const struct sockaddr_in6 *)pss;
  41                 port = ntohs(sa6->sin6_port);
  42 #endif
  43         } else {
  44                 const struct sockaddr_in *sa =
  45                         (const struct sockaddr_in *)pss;
  46                 port = ntohs(sa->sin_port);
  47         }
  48         return port;
  49 }
  50
  51 /****************************************************************************
  52  Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
  53 ****************************************************************************/
  54
  55 static char *print_sockaddr_len(char *dest,
  56                         size_t destlen,
  57                         const struct sockaddr *psa,
  58                         socklen_t psalen)
  59 {
  60         if (destlen > 0) {
  61                 dest[0] = '\0';
  62         }
  63         (void)sys_getnameinfo(psa,
  64                         psalen,
  65                         dest, destlen,
  66                         NULL, 0,
  67                         NI_NUMERICHOST);
  68         return dest;
  69 }
  70
  71 /****************************************************************************
  72  Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
  73 ****************************************************************************/
  74
  75 char *print_sockaddr(char *dest,
  76                         size_t destlen,
  77                         const struct sockaddr_storage *psa)
  78 {
  79         return print_sockaddr_len(dest, destlen, (struct sockaddr *)psa,
  80                         sizeof(struct sockaddr_storage));
  81 }
  82
  83 /****************************************************************************
  84  Print out a canonical IPv4 or IPv6 address from a struct sockaddr_storage.
  85 ****************************************************************************/
  86
  87 char *print_canonical_sockaddr(TALLOC_CTX *ctx,
  88                         const struct sockaddr_storage *pss)
  89 {
  90         char addr[INET6_ADDRSTRLEN];
  91         char *dest = NULL;
  92         int ret;
  93
  94         /* Linux getnameinfo() man pages says port is unitialized if
  95            service name is NULL. */
  96
  97         ret = sys_getnameinfo((const struct sockaddr *)pss,
  98                         sizeof(struct sockaddr_storage),
  99                         addr, sizeof(addr),
 100                         NULL, 0,
 101                         NI_NUMERICHOST);
 102         if (ret != 0) {
 103                 return NULL;
 104         }
 105
 106         if (pss->ss_family != AF_INET) {
 107 #if defined(HAVE_IPV6)
 108                 dest = talloc_asprintf(ctx, "[%s]", addr);
 109 #else
 110                 return NULL;
 111 #endif
 112         } else {
 113                 dest = talloc_asprintf(ctx, "%s", addr);
 114         }
 115
 116         return dest;
 117 }
 118
 119 /****************************************************************************
 120  Return the string of an IP address (IPv4 or IPv6).
 121 ****************************************************************************/
 122
 123 static const char *get_socket_addr(int fd, char *addr_buf, size_t addr_len)
 124 {
 125         struct sockaddr_storage sa;
 126         socklen_t length = sizeof(sa);
 127
 128         /* Ok, returning a hard coded IPv4 address
 129          * is bogus, but it's just as bogus as a
 130          * zero IPv6 address. No good choice here.
 131          */
 132
 133         strlcpy(addr_buf, "0.0.0.0", addr_len);
 134
 135         if (fd == -1) {
 136                 return addr_buf;
 137         }
 138
 139         if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
 140                 DEBUG(0,("getsockname failed. Error was %s\n",
 141                         strerror(errno) ));
 142                 return addr_buf;
 143         }
 144
 145         return print_sockaddr_len(addr_buf, addr_len, (struct sockaddr *)&sa, length);
 146 }
 147
 148 /****************************************************************************
 149  Return the port number we've bound to on a socket.
 150 ****************************************************************************/
 151
 152 int get_socket_port(int fd)
 153 {
 154         struct sockaddr_storage sa;
 155         socklen_t length = sizeof(sa);
 156
 157         if (fd == -1) {
 158                 return -1;
 159         }
 160
 161         if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
 162                 int level = (errno == ENOTCONN) ? 2 : 0;
 163                 DEBUG(level, ("getsockname failed. Error was %s\n",
 164                                strerror(errno)));
 165                 return -1;
 166         }
 167
 168 #if defined(HAVE_IPV6)
 169         if (sa.ss_family == AF_INET6) {
 170                 return ntohs(((struct sockaddr_in6 *)&sa)->sin6_port);
 171         }
 172 #endif
 173         if (sa.ss_family == AF_INET) {
 174                 return ntohs(((struct sockaddr_in *)&sa)->sin_port);
 175         }
 176         return -1;
 177 }
 178
 179 const char *client_name(int fd)
 180 {
 181         return get_peer_name(fd,false);
 182 }
 183
 184 const char *client_addr(int fd, char *addr, size_t addrlen)
 185 {
 186         return get_peer_addr(fd,addr,addrlen);
 187 }
 188
 189 const char *client_socket_addr(int fd, char *addr, size_t addr_len)
 190 {
 191         return get_socket_addr(fd, addr, addr_len);
 192 }
 193
 194 #if 0
 195 /* Not currently used. JRA. */
 196 int client_socket_port(int fd)
 197 {
 198         return get_socket_port(fd);
 199 }
 200 #endif
 201
 202 /****************************************************************************
 203  Accessor functions to make thread-safe code easier later...
 204 ****************************************************************************/
 205
 206 void set_smb_read_error(enum smb_read_errors *pre,
 207                         enum smb_read_errors newerr)
 208 {
 209         if (pre) {
 210                 *pre = newerr;
 211         }
 212 }
 213
 214 void cond_set_smb_read_error(enum smb_read_errors *pre,
 215                         enum smb_read_errors newerr)
 216 {
 217         if (pre && *pre == SMB_READ_OK) {
 218                 *pre = newerr;
 219         }
 220 }
 221
 222 /****************************************************************************
 223  Determine if a file descriptor is in fact a socket.
 224 ****************************************************************************/
 225
 226 bool is_a_socket(int fd)
 227 {
 228         int v;
 229         socklen_t l;
 230         l = sizeof(int);
 231         return(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&v, &l) == 0);
 232 }
 233
 234 enum SOCK_OPT_TYPES {OPT_BOOL,OPT_INT,OPT_ON};
 235
 236 typedef struct smb_socket_option {
 237         const char *name;
 238         int level;
 239         int option;
 240         int value;
 241         int opttype;
 242 } smb_socket_option;
 243
 244 static const smb_socket_option socket_options[] = {
 245   {"SO_KEEPALIVE", SOL_SOCKET, SO_KEEPALIVE, 0, OPT_BOOL},
 246   {"SO_REUSEADDR", SOL_SOCKET, SO_REUSEADDR, 0, OPT_BOOL},
 247   {"SO_BROADCAST", SOL_SOCKET, SO_BROADCAST, 0, OPT_BOOL},
 248 #ifdef TCP_NODELAY
 249   {"TCP_NODELAY", IPPROTO_TCP, TCP_NODELAY, 0, OPT_BOOL},
 250 #endif
 251 #ifdef TCP_KEEPCNT
 252   {"TCP_KEEPCNT", IPPROTO_TCP, TCP_KEEPCNT, 0, OPT_INT},
 253 #endif
 254 #ifdef TCP_KEEPIDLE
 255   {"TCP_KEEPIDLE", IPPROTO_TCP, TCP_KEEPIDLE, 0, OPT_INT},
 256 #endif
 257 #ifdef TCP_KEEPINTVL
 258   {"TCP_KEEPINTVL", IPPROTO_TCP, TCP_KEEPINTVL, 0, OPT_INT},
 259 #endif
 260 #ifdef IPTOS_LOWDELAY
 261   {"IPTOS_LOWDELAY", IPPROTO_IP, IP_TOS, IPTOS_LOWDELAY, OPT_ON},
 262 #endif
 263 #ifdef IPTOS_THROUGHPUT
 264   {"IPTOS_THROUGHPUT", IPPROTO_IP, IP_TOS, IPTOS_THROUGHPUT, OPT_ON},
 265 #endif
 266 #ifdef SO_REUSEPORT
 267   {"SO_REUSEPORT", SOL_SOCKET, SO_REUSEPORT, 0, OPT_BOOL},
 268 #endif
 269 #ifdef SO_SNDBUF
 270   {"SO_SNDBUF", SOL_SOCKET, SO_SNDBUF, 0, OPT_INT},
 271 #endif
 272 #ifdef SO_RCVBUF
 273   {"SO_RCVBUF", SOL_SOCKET, SO_RCVBUF, 0, OPT_INT},
 274 #endif
 275 #ifdef SO_SNDLOWAT
 276   {"SO_SNDLOWAT", SOL_SOCKET, SO_SNDLOWAT, 0, OPT_INT},
 277 #endif
 278 #ifdef SO_RCVLOWAT
 279   {"SO_RCVLOWAT", SOL_SOCKET, SO_RCVLOWAT, 0, OPT_INT},
 280 #endif
 281 #ifdef SO_SNDTIMEO
 282   {"SO_SNDTIMEO", SOL_SOCKET, SO_SNDTIMEO, 0, OPT_INT},
 283 #endif
 284 #ifdef SO_RCVTIMEO
 285   {"SO_RCVTIMEO", SOL_SOCKET, SO_RCVTIMEO, 0, OPT_INT},
 286 #endif
 287 #ifdef TCP_FASTACK
 288   {"TCP_FASTACK", IPPROTO_TCP, TCP_FASTACK, 0, OPT_INT},
 289 #endif
 290 #ifdef TCP_QUICKACK
 291   {"TCP_QUICKACK", IPPROTO_TCP, TCP_QUICKACK, 0, OPT_BOOL},
 292 #endif
 293 #ifdef TCP_KEEPALIVE_THRESHOLD
 294   {"TCP_KEEPALIVE_THRESHOLD", IPPROTO_TCP, TCP_KEEPALIVE_THRESHOLD, 0, OPT_INT},
 295 #endif
 296 #ifdef TCP_KEEPALIVE_ABORT_THRESHOLD
 297   {"TCP_KEEPALIVE_ABORT_THRESHOLD", IPPROTO_TCP, TCP_KEEPALIVE_ABORT_THRESHOLD, 0, OPT_INT},
 298 #endif
 299   {NULL,0,0,0,0}};
 300
 301 /****************************************************************************
 302  Print socket options.
 303 ****************************************************************************/
 304
 305 static void print_socket_options(int s)
 306 {
 307         int value;
 308         socklen_t vlen = 4;
 309         const smb_socket_option *p = &socket_options[0];
 310
 311         /* wrapped in if statement to prevent streams
 312          * leak in SCO Openserver 5.0 */
 313         /* reported on samba-technical  --jerry */
 314         if ( DEBUGLEVEL >= 5 ) {
 315                 DEBUG(5,("Socket options:\n"));
 316                 for (; p->name != NULL; p++) {
 317                         if (getsockopt(s, p->level, p->option,
 318                                                 (void *)&value, &vlen) == -1) {
 319                                 DEBUGADD(5,("\tCould not test socket option %s.\n",
 320                                                         p->name));
 321                         } else {
 322                                 DEBUGADD(5,("\t%s = %d\n",
 323                                                         p->name,value));
 324                         }
 325                 }
 326         }
 327  }
 328
 329 /****************************************************************************
 330  Set user socket options.
 331 ****************************************************************************/
 332
 333 void set_socket_options(int fd, const char *options)
 334 {
 335         TALLOC_CTX *ctx = talloc_stackframe();
 336         char *tok;
 337
 338         while (next_token_talloc(ctx, &options, &tok," \t,")) {
 339                 int ret=0,i;
 340                 int value = 1;
 341                 char *p;
 342                 bool got_value = false;
 343
 344                 if ((p = strchr_m(tok,'='))) {
 345                         *p = 0;
 346                         value = atoi(p+1);
 347                         got_value = true;
 348                 }
 349
 350                 for (i=0;socket_options[i].name;i++)
 351                         if (strequal(socket_options[i].name,tok))
 352                                 break;
 353
 354                 if (!socket_options[i].name) {
 355                         DEBUG(0,("Unknown socket option %s\n",tok));
 356                         continue;
 357                 }
 358
 359                 switch (socket_options[i].opttype) {
 360                 case OPT_BOOL:
 361                 case OPT_INT:
 362                         ret = setsockopt(fd,socket_options[i].level,
 363                                         socket_options[i].option,
 364                                         (char *)&value,sizeof(int));
 365                         break;
 366
 367                 case OPT_ON:
 368                         if (got_value)
 369                                 DEBUG(0,("syntax error - %s "
 370                                         "does not take a value\n",tok));
 371
 372                         {
 373                                 int on = socket_options[i].value;
 374                                 ret = setsockopt(fd,socket_options[i].level,
 375                                         socket_options[i].option,
 376                                         (char *)&on,sizeof(int));
 377                         }
 378                         break;
 379                 }
 380
 381                 if (ret != 0) {
 382                         /* be aware that some systems like Solaris return
 383                          * EINVAL to a setsockopt() call when the client
 384                          * sent a RST previously - no need to worry */
 385                         DEBUG(2,("Failed to set socket option %s (Error %s)\n",
 386                                 tok, strerror(errno) ));
 387                 }
 388         }
 389
 390         TALLOC_FREE(ctx);
 391         print_socket_options(fd);
 392 }
 393
 394 /****************************************************************************
 395  Read from a socket.
 396 ****************************************************************************/
 397
 398 ssize_t read_udp_v4_socket(int fd,
 399                         char *buf,
 400                         size_t len,
 401                         struct sockaddr_storage *psa)
 402 {
 403         ssize_t ret;
 404         socklen_t socklen = sizeof(*psa);
 405         struct sockaddr_in *si = (struct sockaddr_in *)psa;
 406
 407         memset((char *)psa,'\0',socklen);
 408
 409         ret = (ssize_t)sys_recvfrom(fd,buf,len,0,
 410                         (struct sockaddr *)psa,&socklen);
 411         if (ret <= 0) {
 412                 /* Don't print a low debug error for a non-blocking socket. */
 413                 if (errno == EAGAIN) {
 414                         DEBUG(10,("read_udp_v4_socket: returned EAGAIN\n"));
 415                 } else {
 416                         DEBUG(2,("read_udp_v4_socket: failed. errno=%s\n",
 417                                 strerror(errno)));
 418                 }
 419                 return 0;
 420         }
 421
 422         if (psa->ss_family != AF_INET) {
 423                 DEBUG(2,("read_udp_v4_socket: invalid address family %d "
 424                         "(not IPv4)\n", (int)psa->ss_family));
 425                 return 0;
 426         }
 427
 428         DEBUG(10,("read_udp_v4_socket: ip %s port %d read: %lu\n",
 429                         inet_ntoa(si->sin_addr),
 430                         si->sin_port,
 431                         (unsigned long)ret));
 432
 433         return ret;
 434 }
 435
 436 /****************************************************************************
 437  Read data from a file descriptor with a timout in msec.
 438  mincount = if timeout, minimum to read before returning
 439  maxcount = number to be read.
 440  time_out = timeout in milliseconds
 441  NB. This can be called with a non-socket fd, don't change
 442  sys_read() to sys_recv() or other socket call.
 443 ****************************************************************************/
 444
 445 NTSTATUS read_fd_with_timeout(int fd, char *buf,
 446                                   size_t mincnt, size_t maxcnt,
 447                                   unsigned int time_out,
 448                                   size_t *size_ret)
 449 {
 450         int pollrtn;
 451         ssize_t readret;
 452         size_t nread = 0;
 453
 454         /* just checking .... */
 455         if (maxcnt <= 0)
 456                 return NT_STATUS_OK;
 457
 458         /* Blocking read */
 459         if (time_out == 0) {
 460                 if (mincnt == 0) {
 461                         mincnt = maxcnt;
 462                 }
 463
 464                 while (nread < mincnt) {
 465                         readret = sys_read(fd, buf + nread, maxcnt - nread);
 466
 467                         if (readret == 0) {
 468                                 DEBUG(5,("read_fd_with_timeout: "
 469                                         "blocking read. EOF from client.\n"));
 470                                 return NT_STATUS_END_OF_FILE;
 471                         }
 472
 473                         if (readret == -1) {
 474                                 return map_nt_error_from_unix(errno);
 475                         }
 476                         nread += readret;
 477                 }
 478                 goto done;
 479         }
 480
 481         /* Most difficult - timeout read */
 482         /* If this is ever called on a disk file and
 483            mincnt is greater then the filesize then
 484            system performance will suffer severely as
 485            select always returns true on disk files */
 486
 487         for (nread=0; nread < mincnt; ) {
 488                 int revents;
 489
 490                 pollrtn = poll_intr_one_fd(fd, POLLIN|POLLHUP, time_out,
 491                                            &revents);
 492
 493                 /* Check if error */
 494                 if (pollrtn == -1) {
 495                         return map_nt_error_from_unix(errno);
 496                 }
 497
 498                 /* Did we timeout ? */
 499                 if ((pollrtn == 0) ||
 500                     ((revents & (POLLIN|POLLHUP|POLLERR)) == 0)) {
 501                         DEBUG(10,("read_fd_with_timeout: timeout read. "
 502                                 "select timed out.\n"));
 503                         return NT_STATUS_IO_TIMEOUT;
 504                 }
 505
 506                 readret = sys_read(fd, buf+nread, maxcnt-nread);
 507
 508                 if (readret == 0) {
 509                         /* we got EOF on the file descriptor */
 510                         DEBUG(5,("read_fd_with_timeout: timeout read. "
 511                                 "EOF from client.\n"));
 512                         return NT_STATUS_END_OF_FILE;
 513                 }
 514
 515                 if (readret == -1) {
 516                         return map_nt_error_from_unix(errno);
 517                 }
 518
 519                 nread += readret;
 520         }
 521
 522  done:
 523         /* Return the number we got */
 524         if (size_ret) {
 525                 *size_ret = nread;
 526         }
 527         return NT_STATUS_OK;
 528 }
 529
 530 /****************************************************************************
 531  Read data from an fd, reading exactly N bytes.
 532  NB. This can be called with a non-socket fd, don't add dependencies
 533  on socket calls.
 534 ****************************************************************************/
 535
 536 NTSTATUS read_data(int fd, char *buffer, size_t N)
 537 {
 538         return read_fd_with_timeout(fd, buffer, N, N, 0, NULL);
 539 }
 540
 541 /****************************************************************************
 542  Write all data from an iov array
 543  NB. This can be called with a non-socket fd, don't add dependencies
 544  on socket calls.
 545 ****************************************************************************/
 546
 547 ssize_t write_data_iov(int fd, const struct iovec *orig_iov, int iovcnt)
 548 {
 549         int i;
 550         size_t to_send;
 551         ssize_t thistime;
 552         size_t sent;
 553         struct iovec *iov_copy, *iov;
 554
 555         to_send = 0;
 556         for (i=0; i<iovcnt; i++) {
 557                 to_send += orig_iov[i].iov_len;
 558         }
 559
 560         thistime = sys_writev(fd, orig_iov, iovcnt);
 561         if ((thistime <= 0) || (thistime == to_send)) {
 562                 return thistime;
 563         }
 564         sent = thistime;
 565
 566         /*
 567          * We could not send everything in one call. Make a copy of iov that
 568          * we can mess with. We keep a copy of the array start in iov_copy for
 569          * the TALLOC_FREE, because we're going to modify iov later on,
 570          * discarding elements.
 571          */
 572
 573         iov_copy = (struct iovec *)TALLOC_MEMDUP(
 574                 talloc_tos(), orig_iov, sizeof(struct iovec) * iovcnt);
 575
 576         if (iov_copy == NULL) {
 577                 errno = ENOMEM;
 578                 return -1;
 579         }
 580         iov = iov_copy;
 581
 582         while (sent < to_send) {
 583                 /*
 584                  * We have to discard "thistime" bytes from the beginning
 585                  * iov array, "thistime" contains the number of bytes sent
 586                  * via writev last.
 587                  */
 588                 while (thistime > 0) {
 589                         if (thistime < iov[0].iov_len) {
 590                                 char *new_base =
 591                                         (char *)iov[0].iov_base + thistime;
 592                                 iov[0].iov_base = (void *)new_base;
 593                                 iov[0].iov_len -= thistime;
 594                                 break;
 595                         }
 596                         thistime -= iov[0].iov_len;
 597                         iov += 1;
 598                         iovcnt -= 1;
 599                 }
 600
 601                 thistime = sys_writev(fd, iov, iovcnt);
 602                 if (thistime <= 0) {
 603                         break;
 604                 }
 605                 sent += thistime;
 606         }
 607
 608         TALLOC_FREE(iov_copy);
 609         return sent;
 610 }
 611
 612 /****************************************************************************
 613  Write data to a fd.
 614  NB. This can be called with a non-socket fd, don't add dependencies
 615  on socket calls.
 616 ****************************************************************************/
 617
 618 ssize_t write_data(int fd, const char *buffer, size_t N)
 619 {
 620         struct iovec iov;
 621
 622         iov.iov_base = CONST_DISCARD(void *, buffer);
 623         iov.iov_len = N;
 624         return write_data_iov(fd, &iov, 1);
 625 }
 626
 627 /****************************************************************************
 628  Send a keepalive packet (rfc1002).
 629 ****************************************************************************/
 630
 631 bool send_keepalive(int client)
 632 {
 633         unsigned char buf[4];
 634
 635         buf[0] = SMBkeepalive;
 636         buf[1] = buf[2] = buf[3] = 0;
 637
 638         return(write_data(client,(char *)buf,4) == 4);
 639 }
 640
 641 /****************************************************************************
 642  Read 4 bytes of a smb packet and return the smb length of the packet.
 643  Store the result in the buffer.
 644  This version of the function will return a length of zero on receiving
 645  a keepalive packet.
 646  Timeout is in milliseconds.
 647 ****************************************************************************/
 648
 649 NTSTATUS read_smb_length_return_keepalive(int fd, char *inbuf,
 650                                           unsigned int timeout,
 651                                           size_t *len)
 652 {
 653         int msg_type;
 654         NTSTATUS status;
 655
 656         status = read_fd_with_timeout(fd, inbuf, 4, 4, timeout, NULL);
 657
 658         if (!NT_STATUS_IS_OK(status)) {
 659                 return status;
 660         }
 661
 662         *len = smb_len(inbuf);
 663         msg_type = CVAL(inbuf,0);
 664
 665         if (msg_type == SMBkeepalive) {
 666                 DEBUG(5,("Got keepalive packet\n"));
 667         }
 668
 669         DEBUG(10,("got smb length of %lu\n",(unsigned long)(*len)));
 670
 671         return NT_STATUS_OK;
 672 }
 673
 674 /****************************************************************************
 675  Read an smb from a fd.
 676  The timeout is in milliseconds.
 677  This function will return on receipt of a session keepalive packet.
 678  maxlen is the max number of bytes to return, not including the 4 byte
 679  length. If zero it means buflen limit.
 680  Doesn't check the MAC on signed packets.
 681 ****************************************************************************/
 682
 683 NTSTATUS receive_smb_raw(int fd, char *buffer, size_t buflen, unsigned int timeout,
 684                          size_t maxlen, size_t *p_len)
 685 {
 686         size_t len;
 687         NTSTATUS status;
 688
 689         status = read_smb_length_return_keepalive(fd,buffer,timeout,&len);
 690
 691         if (!NT_STATUS_IS_OK(status)) {
 692                 DEBUG(0, ("read_fd_with_timeout failed, read "
 693                           "error = %s.\n", nt_errstr(status)));
 694                 return status;
 695         }
 696
 697         if (len > buflen) {
 698                 DEBUG(0,("Invalid packet length! (%lu bytes).\n",
 699                                         (unsigned long)len));
 700                 return NT_STATUS_INVALID_PARAMETER;
 701         }
 702
 703         if(len > 0) {
 704                 if (maxlen) {
 705                         len = MIN(len,maxlen);
 706                 }
 707
 708                 status = read_fd_with_timeout(
 709                         fd, buffer+4, len, len, timeout, &len);
 710
 711                 if (!NT_STATUS_IS_OK(status)) {
 712                         DEBUG(0, ("read_fd_with_timeout failed, read error = "
 713                                   "%s.\n", nt_errstr(status)));
 714                         return status;
 715                 }
 716
 717                 /* not all of samba3 properly checks for packet-termination
 718                  * of strings. This ensures that we don't run off into
 719                  * empty space. */
 720                 SSVAL(buffer+4,len, 0);
 721         }
 722
 723         *p_len = len;
 724         return NT_STATUS_OK;
 725 }
 726
 727 /****************************************************************************
 728  Open a socket of the specified type, port, and address for incoming data.
 729 ****************************************************************************/
 730
 731 int open_socket_in(int type,
 732                 uint16_t port,
 733                 int dlevel,
 734                 const struct sockaddr_storage *psock,
 735                 bool rebind)
 736 {
 737         struct sockaddr_storage sock;
 738         int res;
 739         socklen_t slen = sizeof(struct sockaddr_in);
 740
 741         sock = *psock;
 742
 743 #if defined(HAVE_IPV6)
 744         if (sock.ss_family == AF_INET6) {
 745                 ((struct sockaddr_in6 *)&sock)->sin6_port = htons(port);
 746                 slen = sizeof(struct sockaddr_in6);
 747         }
 748 #endif
 749         if (sock.ss_family == AF_INET) {
 750                 ((struct sockaddr_in *)&sock)->sin_port = htons(port);
 751         }
 752
 753         res = socket(sock.ss_family, type, 0 );
 754         if( res == -1 ) {
 755                 if( DEBUGLVL(0) ) {
 756                         dbgtext( "open_socket_in(): socket() call failed: " );
 757                         dbgtext( "%s\n", strerror( errno ) );
 758                 }
 759                 return -1;
 760         }
 761
 762         /* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
 763         {
 764                 int val = rebind ? 1 : 0;
 765                 if( setsockopt(res,SOL_SOCKET,SO_REUSEADDR,
 766                                         (char *)&val,sizeof(val)) == -1 ) {
 767                         if( DEBUGLVL( dlevel ) ) {
 768                                 dbgtext( "open_socket_in(): setsockopt: " );
 769                                 dbgtext( "SO_REUSEADDR = %s ",
 770                                                 val?"true":"false" );
 771                                 dbgtext( "on port %d failed ", port );
 772                                 dbgtext( "with error = %s\n", strerror(errno) );
 773                         }
 774                 }
 775 #ifdef SO_REUSEPORT
 776                 if( setsockopt(res,SOL_SOCKET,SO_REUSEPORT,
 777                                         (char *)&val,sizeof(val)) == -1 ) {
 778                         if( DEBUGLVL( dlevel ) ) {
 779                                 dbgtext( "open_socket_in(): setsockopt: ");
 780                                 dbgtext( "SO_REUSEPORT = %s ",
 781                                                 val?"true":"false");
 782                                 dbgtext( "on port %d failed ", port);
 783                                 dbgtext( "with error = %s\n", strerror(errno));
 784                         }
 785                 }
 786 #endif /* SO_REUSEPORT */
 787         }
 788
 789         /* now we've got a socket - we need to bind it */
 790         if (bind(res, (struct sockaddr *)&sock, slen) == -1 ) {
 791                 if( DEBUGLVL(dlevel) && (port == SMB_PORT1 ||
 792                                 port == SMB_PORT2 || port == NMB_PORT) ) {
 793                         char addr[INET6_ADDRSTRLEN];
 794                         print_sockaddr(addr, sizeof(addr),
 795                                         &sock);
 796                         dbgtext( "bind failed on port %d ", port);
 797                         dbgtext( "socket_addr = %s.\n", addr);
 798                         dbgtext( "Error = %s\n", strerror(errno));
 799                 }
 800                 close(res);
 801                 return -1;
 802         }
 803
 804         DEBUG( 10, ( "bind succeeded on port %d\n", port ) );
 805         return( res );
 806  }
 807
 808 struct open_socket_out_state {
 809         int fd;
 810         struct event_context *ev;
 811         struct sockaddr_storage ss;
 812         socklen_t salen;
 813         uint16_t port;
 814         int wait_nsec;
 815 };
 816
 817 static void open_socket_out_connected(struct tevent_req *subreq);
 818
 819 static int open_socket_out_state_destructor(struct open_socket_out_state *s)
 820 {
 821         if (s->fd != -1) {
 822                 close(s->fd);
 823         }
 824         return 0;
 825 }
 826
 827 /****************************************************************************
 828  Create an outgoing socket. timeout is in milliseconds.
 829 **************************************************************************/
 830
 831 struct tevent_req *open_socket_out_send(TALLOC_CTX *mem_ctx,
 832                                         struct event_context *ev,
 833                                         const struct sockaddr_storage *pss,
 834                                         uint16_t port,
 835                                         int timeout)
 836 {
 837         char addr[INET6_ADDRSTRLEN];
 838         struct tevent_req *result, *subreq;
 839         struct open_socket_out_state *state;
 840         NTSTATUS status;
 841
 842         result = tevent_req_create(mem_ctx, &state,
 843                                    struct open_socket_out_state);
 844         if (result == NULL) {
 845                 return NULL;
 846         }
 847         state->ev = ev;
 848         state->ss = *pss;
 849         state->port = port;
 850         state->wait_nsec = 10000;
 851         state->salen = -1;
 852
 853         state->fd = socket(state->ss.ss_family, SOCK_STREAM, 0);
 854         if (state->fd == -1) {
 855                 status = map_nt_error_from_unix(errno);
 856                 goto post_status;
 857         }
 858         talloc_set_destructor(state, open_socket_out_state_destructor);
 859
 860         if (!tevent_req_set_endtime(
 861                     result, ev, timeval_current_ofs(0, timeout*1000))) {
 862                 goto fail;
 863         }
 864
 865 #if defined(HAVE_IPV6)
 866         if (pss->ss_family == AF_INET6) {
 867                 struct sockaddr_in6 *psa6;
 868                 psa6 = (struct sockaddr_in6 *)&state->ss;
 869                 psa6->sin6_port = htons(port);
 870                 if (psa6->sin6_scope_id == 0
 871                     && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
 872                         setup_linklocal_scope_id(
 873                                 (struct sockaddr *)&(state->ss));
 874                 }
 875                 state->salen = sizeof(struct sockaddr_in6);
 876         }
 877 #endif
 878         if (pss->ss_family == AF_INET) {
 879                 struct sockaddr_in *psa;
 880                 psa = (struct sockaddr_in *)&state->ss;
 881                 psa->sin_port = htons(port);
 882                 state->salen = sizeof(struct sockaddr_in);
 883         }
 884
 885         if (pss->ss_family == AF_UNIX) {
 886                 state->salen = sizeof(struct sockaddr_un);
 887         }
 888
 889         print_sockaddr(addr, sizeof(addr), &state->ss);
 890         DEBUG(3,("Connecting to %s at port %u\n", addr, (unsigned int)port));
 891
 892         subreq = async_connect_send(state, state->ev, state->fd,
 893                                     (struct sockaddr *)&state->ss,
 894                                     state->salen);
 895         if ((subreq == NULL)
 896             || !tevent_req_set_endtime(
 897                     subreq, state->ev,
 898                     timeval_current_ofs(0, state->wait_nsec))) {
 899                 goto fail;
 900         }
 901         tevent_req_set_callback(subreq, open_socket_out_connected, result);
 902         return result;
 903
 904  post_status:
 905         tevent_req_nterror(result, status);
 906         return tevent_req_post(result, ev);
 907  fail:
 908         TALLOC_FREE(result);
 909         return NULL;
 910 }
 911
 912 static void open_socket_out_connected(struct tevent_req *subreq)
 913 {
 914         struct tevent_req *req =
 915                 tevent_req_callback_data(subreq, struct tevent_req);
 916         struct open_socket_out_state *state =
 917                 tevent_req_data(req, struct open_socket_out_state);
 918         int ret;
 919         int sys_errno;
 920
 921         ret = async_connect_recv(subreq, &sys_errno);
 922         TALLOC_FREE(subreq);
 923         if (ret == 0) {
 924                 tevent_req_done(req);
 925                 return;
 926         }
 927
 928         if (
 929 #ifdef ETIMEDOUT
 930                 (sys_errno == ETIMEDOUT) ||
 931 #endif
 932                 (sys_errno == EINPROGRESS) ||
 933                 (sys_errno == EALREADY) ||
 934                 (sys_errno == EAGAIN)) {
 935
 936                 /*
 937                  * retry
 938                  */
 939
 940                 if (state->wait_nsec < 250000) {
 941                         state->wait_nsec *= 1.5;
 942                 }
 943
 944                 subreq = async_connect_send(state, state->ev, state->fd,
 945                                             (struct sockaddr *)&state->ss,
 946                                             state->salen);
 947                 if (tevent_req_nomem(subreq, req)) {
 948                         return;
 949                 }
 950                 if (!tevent_req_set_endtime(
 951                             subreq, state->ev,
 952                             timeval_current_ofs(0, state->wait_nsec))) {
 953                         tevent_req_nterror(req, NT_STATUS_NO_MEMORY);
 954                         return;
 955                 }
 956                 tevent_req_set_callback(subreq, open_socket_out_connected, req);
 957                 return;
 958         }
 959
 960 #ifdef EISCONN
 961         if (sys_errno == EISCONN) {
 962                 tevent_req_done(req);
 963                 return;
 964         }
 965 #endif
 966
 967         /* real error */
 968         tevent_req_nterror(req, map_nt_error_from_unix(sys_errno));
 969 }
 970
 971 NTSTATUS open_socket_out_recv(struct tevent_req *req, int *pfd)
 972 {
 973         struct open_socket_out_state *state =
 974                 tevent_req_data(req, struct open_socket_out_state);
 975         NTSTATUS status;
 976
 977         if (tevent_req_is_nterror(req, &status)) {
 978                 return status;
 979         }
 980         *pfd = state->fd;
 981         state->fd = -1;
 982         return NT_STATUS_OK;
 983 }
 984
 985 NTSTATUS open_socket_out(const struct sockaddr_storage *pss, uint16_t port,
 986                          int timeout, int *pfd)
 987 {
 988         TALLOC_CTX *frame = talloc_stackframe();
 989         struct event_context *ev;
 990         struct tevent_req *req;
 991         NTSTATUS status = NT_STATUS_NO_MEMORY;
 992
 993         ev = event_context_init(frame);
 994         if (ev == NULL) {
 995                 goto fail;
 996         }
 997
 998         req = open_socket_out_send(frame, ev, pss, port, timeout);
 999         if (req == NULL) {
1000                 goto fail;
1001         }
1002         if (!tevent_req_poll(req, ev)) {
1003                 status = NT_STATUS_INTERNAL_ERROR;
1004                 goto fail;
1005         }
1006         status = open_socket_out_recv(req, pfd);
1007  fail:
1008         TALLOC_FREE(frame);
1009         return status;
1010 }
1011
1012 struct open_socket_out_defer_state {
1013         struct event_context *ev;
1014         struct sockaddr_storage ss;
1015         uint16_t port;
1016         int timeout;
1017         int fd;
1018 };
1019
1020 static void open_socket_out_defer_waited(struct tevent_req *subreq);
1021 static void open_socket_out_defer_connected(struct tevent_req *subreq);
1022
1023 struct tevent_req *open_socket_out_defer_send(TALLOC_CTX *mem_ctx,
1024                                               struct event_context *ev,
1025                                               struct timeval wait_time,
1026                                               const struct sockaddr_storage *pss,
1027                                               uint16_t port,
1028                                               int timeout)
1029 {
1030         struct tevent_req *req, *subreq;
1031         struct open_socket_out_defer_state *state;
1032
1033         req = tevent_req_create(mem_ctx, &state,
1034                                 struct open_socket_out_defer_state);
1035         if (req == NULL) {
1036                 return NULL;
1037         }
1038         state->ev = ev;
1039         state->ss = *pss;
1040         state->port = port;
1041         state->timeout = timeout;
1042
1043         subreq = tevent_wakeup_send(
1044                 state, ev,
1045                 timeval_current_ofs(wait_time.tv_sec, wait_time.tv_usec));
1046         if (subreq == NULL) {
1047                 goto fail;
1048         }
1049         tevent_req_set_callback(subreq, open_socket_out_defer_waited, req);
1050         return req;
1051  fail:
1052         TALLOC_FREE(req);
1053         return NULL;
1054 }
1055
1056 static void open_socket_out_defer_waited(struct tevent_req *subreq)
1057 {
1058         struct tevent_req *req = tevent_req_callback_data(
1059                 subreq, struct tevent_req);
1060         struct open_socket_out_defer_state *state = tevent_req_data(
1061                 req, struct open_socket_out_defer_state);
1062         bool ret;
1063
1064         ret = tevent_wakeup_recv(subreq);
1065         TALLOC_FREE(subreq);
1066         if (!ret) {
1067                 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
1068                 return;
1069         }
1070
1071         subreq = open_socket_out_send(state, state->ev, &state->ss,
1072                                       state->port, state->timeout);
1073         if (tevent_req_nomem(subreq, req)) {
1074                 return;
1075         }
1076         tevent_req_set_callback(subreq, open_socket_out_defer_connected, req);
1077 }
1078
1079 static void open_socket_out_defer_connected(struct tevent_req *subreq)
1080 {
1081         struct tevent_req *req = tevent_req_callback_data(
1082                 subreq, struct tevent_req);
1083         struct open_socket_out_defer_state *state = tevent_req_data(
1084                 req, struct open_socket_out_defer_state);
1085         NTSTATUS status;
1086
1087         status = open_socket_out_recv(subreq, &state->fd);
1088         TALLOC_FREE(subreq);
1089         if (!NT_STATUS_IS_OK(status)) {
1090                 tevent_req_nterror(req, status);
1091                 return;
1092         }
1093         tevent_req_done(req);
1094 }
1095
1096 NTSTATUS open_socket_out_defer_recv(struct tevent_req *req, int *pfd)
1097 {
1098         struct open_socket_out_defer_state *state = tevent_req_data(
1099                 req, struct open_socket_out_defer_state);
1100         NTSTATUS status;
1101
1102         if (tevent_req_is_nterror(req, &status)) {
1103                 return status;
1104         }
1105         *pfd = state->fd;
1106         state->fd = -1;
1107         return NT_STATUS_OK;
1108 }
1109
1110 /****************************************************************************
1111  Open a connected UDP socket to host on port
1112 **************************************************************************/
1113
1114 int open_udp_socket(const char *host, int port)
1115 {
1116         struct sockaddr_storage ss;
1117         int res;
1118
1119         if (!interpret_string_addr(&ss, host, 0)) {
1120                 DEBUG(10,("open_udp_socket: can't resolve name %s\n",
1121                         host));
1122                 return -1;
1123         }
1124
1125         res = socket(ss.ss_family, SOCK_DGRAM, 0);
1126         if (res == -1) {
1127                 return -1;
1128         }
1129
1130 #if defined(HAVE_IPV6)
1131         if (ss.ss_family == AF_INET6) {
1132                 struct sockaddr_in6 *psa6;
1133                 psa6 = (struct sockaddr_in6 *)&ss;
1134                 psa6->sin6_port = htons(port);
1135                 if (psa6->sin6_scope_id == 0
1136                                 && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
1137                         setup_linklocal_scope_id(
1138                                 (struct sockaddr *)&ss);
1139                 }
1140         }
1141 #endif
1142         if (ss.ss_family == AF_INET) {
1143                 struct sockaddr_in *psa;
1144                 psa = (struct sockaddr_in *)&ss;
1145                 psa->sin_port = htons(port);
1146         }
1147
1148         if (sys_connect(res,(struct sockaddr *)&ss)) {
1149                 close(res);
1150                 return -1;
1151         }
1152
1153         return res;
1154 }
1155
1156 /*******************************************************************
1157  Return the IP addr of the remote end of a socket as a string.
1158  Optionally return the struct sockaddr_storage.
1159  ******************************************************************/
1160
1161 static const char *get_peer_addr_internal(int fd,
1162                                 char *addr_buf,
1163                                 size_t addr_buf_len,
1164                                 struct sockaddr *pss,
1165                                 socklen_t *plength)
1166 {
1167         struct sockaddr_storage ss;
1168         socklen_t length = sizeof(ss);
1169
1170         strlcpy(addr_buf,"0.0.0.0",addr_buf_len);
1171
1172         if (fd == -1) {
1173                 return addr_buf;
1174         }
1175
1176         if (pss == NULL) {
1177                 pss = (struct sockaddr *)&ss;
1178                 plength = &length;
1179         }
1180
1181         if (getpeername(fd, (struct sockaddr *)pss, plength) < 0) {
1182                 int level = (errno == ENOTCONN) ? 2 : 0;
1183                 DEBUG(level, ("getpeername failed. Error was %s\n",
1184                                strerror(errno)));
1185                 return addr_buf;
1186         }
1187
1188         print_sockaddr_len(addr_buf,
1189                         addr_buf_len,
1190                         pss,
1191                         *plength);
1192         return addr_buf;
1193 }
1194
1195 /*******************************************************************
1196  Matchname - determine if host name matches IP address. Used to
1197  confirm a hostname lookup to prevent spoof attacks.
1198 ******************************************************************/
1199
1200 static bool matchname(const char *remotehost,
1201                 const struct sockaddr *pss,
1202                 socklen_t len)
1203 {
1204         struct addrinfo *res = NULL;
1205         struct addrinfo *ailist = NULL;
1206         char addr_buf[INET6_ADDRSTRLEN];
1207         bool ret = interpret_string_addr_internal(&ailist,
1208                         remotehost,
1209                         AI_ADDRCONFIG|AI_CANONNAME);
1210
1211         if (!ret || ailist == NULL) {
1212                 DEBUG(3,("matchname: getaddrinfo failed for "
1213                         "name %s [%s]\n",
1214                         remotehost,
1215                         gai_strerror(ret) ));
1216                 return false;
1217         }
1218
1219         /*
1220          * Make sure that getaddrinfo() returns the "correct" host name.
1221          */
1222
1223         if (ailist->ai_canonname == NULL ||
1224                 (!strequal(remotehost, ailist->ai_canonname) &&
1225                  !strequal(remotehost, "localhost"))) {
1226                 DEBUG(0,("matchname: host name/name mismatch: %s != %s\n",
1227                          remotehost,
1228                          ailist->ai_canonname ?
1229                                  ailist->ai_canonname : "(NULL)"));
1230                 freeaddrinfo(ailist);
1231                 return false;
1232         }
1233
1234         /* Look up the host address in the address list we just got. */
1235         for (res = ailist; res; res = res->ai_next) {
1236                 if (!res->ai_addr) {
1237                         continue;
1238                 }
1239                 if (sockaddr_equal((const struct sockaddr *)res->ai_addr,
1240                                         (struct sockaddr *)pss)) {
1241                         freeaddrinfo(ailist);
1242                         return true;
1243                 }
1244         }
1245
1246         /*
1247          * The host name does not map to the original host address. Perhaps
1248          * someone has compromised a name server. More likely someone botched
1249          * it, but that could be dangerous, too.
1250          */
1251
1252         DEBUG(0,("matchname: host name/address mismatch: %s != %s\n",
1253                 print_sockaddr_len(addr_buf,
1254                         sizeof(addr_buf),
1255                         pss,
1256                         len),
1257                  ailist->ai_canonname ? ailist->ai_canonname : "(NULL)"));
1258
1259         if (ailist) {
1260                 freeaddrinfo(ailist);
1261         }
1262         return false;
1263 }
1264
1265 /*******************************************************************
1266  Deal with the singleton cache.
1267 ******************************************************************/
1268
1269 struct name_addr_pair {
1270         struct sockaddr_storage ss;
1271         const char *name;
1272 };
1273
1274 /*******************************************************************
1275  Lookup a name/addr pair. Returns memory allocated from memcache.
1276 ******************************************************************/
1277
1278 static bool lookup_nc(struct name_addr_pair *nc)
1279 {
1280         DATA_BLOB tmp;
1281
1282         ZERO_STRUCTP(nc);
1283
1284         if (!memcache_lookup(
1285                         NULL, SINGLETON_CACHE,
1286                         data_blob_string_const_null("get_peer_name"),
1287                         &tmp)) {
1288                 return false;
1289         }
1290
1291         memcpy(&nc->ss, tmp.data, sizeof(nc->ss));
1292         nc->name = (const char *)tmp.data + sizeof(nc->ss);
1293         return true;
1294 }
1295
1296 /*******************************************************************
1297  Save a name/addr pair.
1298 ******************************************************************/
1299
1300 static void store_nc(const struct name_addr_pair *nc)
1301 {
1302         DATA_BLOB tmp;
1303         size_t namelen = strlen(nc->name);
1304
1305         tmp = data_blob(NULL, sizeof(nc->ss) + namelen + 1);
1306         if (!tmp.data) {
1307                 return;
1308         }
1309         memcpy(tmp.data, &nc->ss, sizeof(nc->ss));
1310         memcpy(tmp.data+sizeof(nc->ss), nc->name, namelen+1);
1311
1312         memcache_add(NULL, SINGLETON_CACHE,
1313                         data_blob_string_const_null("get_peer_name"),
1314                         tmp);
1315         data_blob_free(&tmp);
1316 }
1317
1318 /*******************************************************************
1319  Return the DNS name of the remote end of a socket.
1320 ******************************************************************/
1321
1322 const char *get_peer_name(int fd, bool force_lookup)
1323 {
1324         struct name_addr_pair nc;
1325         char addr_buf[INET6_ADDRSTRLEN];
1326         struct sockaddr_storage ss;
1327         socklen_t length = sizeof(ss);
1328         const char *p;
1329         int ret;
1330         char name_buf[MAX_DNS_NAME_LENGTH];
1331         char tmp_name[MAX_DNS_NAME_LENGTH];
1332
1333         /* reverse lookups can be *very* expensive, and in many
1334            situations won't work because many networks don't link dhcp
1335            with dns. To avoid the delay we avoid the lookup if
1336            possible */
1337         if (!lp_hostname_lookups() && (force_lookup == false)) {
1338                 length = sizeof(nc.ss);
1339                 nc.name = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf),
1340                         (struct sockaddr *)&nc.ss, &length);
1341                 store_nc(&nc);
1342                 lookup_nc(&nc);
1343                 return nc.name ? nc.name : "UNKNOWN";
1344         }
1345
1346         lookup_nc(&nc);
1347
1348         memset(&ss, '\0', sizeof(ss));
1349         p = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf), (struct sockaddr *)&ss, &length);
1350
1351         /* it might be the same as the last one - save some DNS work */
1352         if (sockaddr_equal((struct sockaddr *)&ss, (struct sockaddr *)&nc.ss)) {
1353                 return nc.name ? nc.name : "UNKNOWN";
1354         }
1355
1356         /* Not the same. We need to lookup. */
1357         if (fd == -1) {
1358                 return "UNKNOWN";
1359         }
1360
1361         /* Look up the remote host name. */
1362         ret = sys_getnameinfo((struct sockaddr *)&ss,
1363                         length,
1364                         name_buf,
1365                         sizeof(name_buf),
1366                         NULL,
1367                         0,
1368                         0);
1369
1370         if (ret) {
1371                 DEBUG(1,("get_peer_name: getnameinfo failed "
1372                         "for %s with error %s\n",
1373                         p,
1374                         gai_strerror(ret)));
1375                 strlcpy(name_buf, p, sizeof(name_buf));
1376         } else {
1377                 if (!matchname(name_buf, (struct sockaddr *)&ss, length)) {
1378                         DEBUG(0,("Matchname failed on %s %s\n",name_buf,p));
1379                         strlcpy(name_buf,"UNKNOWN",sizeof(name_buf));
1380                 }
1381         }
1382
1383         strlcpy(tmp_name, name_buf, sizeof(tmp_name));
1384         alpha_strcpy(name_buf, tmp_name, "_-.", sizeof(name_buf));
1385         if (strstr(name_buf,"..")) {
1386                 strlcpy(name_buf, "UNKNOWN", sizeof(name_buf));
1387         }
1388
1389         nc.name = name_buf;
1390         nc.ss = ss;
1391
1392         store_nc(&nc);
1393         lookup_nc(&nc);
1394         return nc.name ? nc.name : "UNKNOWN";
1395 }
1396
1397 /*******************************************************************
1398  Return the IP addr of the remote end of a socket as a string.
1399  ******************************************************************/
1400
1401 const char *get_peer_addr(int fd, char *addr, size_t addr_len)
1402 {
1403         return get_peer_addr_internal(fd, addr, addr_len, NULL, NULL);
1404 }
1405
1406 /*******************************************************************
1407  Create protected unix domain socket.
1408
1409  Some unixes cannot set permissions on a ux-dom-sock, so we
1410  have to make sure that the directory contains the protection
1411  permissions instead.
1412  ******************************************************************/
1413
1414 int create_pipe_sock(const char *socket_dir,
1415                      const char *socket_name,
1416                      mode_t dir_perms)
1417 {
1418 #ifdef HAVE_UNIXSOCKET
1419         struct sockaddr_un sunaddr;
1420         struct stat st;
1421         int sock;
1422         mode_t old_umask;
1423         char *path = NULL;
1424
1425         old_umask = umask(0);
1426
1427         /* Create the socket directory or reuse the existing one */
1428
1429         if (lstat(socket_dir, &st) == -1) {
1430                 if (errno == ENOENT) {
1431                         /* Create directory */
1432                         if (mkdir(socket_dir, dir_perms) == -1) {
1433                                 DEBUG(0, ("error creating socket directory "
1434                                         "%s: %s\n", socket_dir,
1435                                         strerror(errno)));
1436                                 goto out_umask;
1437                         }
1438                 } else {
1439                         DEBUG(0, ("lstat failed on socket directory %s: %s\n",
1440                                 socket_dir, strerror(errno)));
1441                         goto out_umask;
1442                 }
1443         } else {
1444                 /* Check ownership and permission on existing directory */
1445                 if (!S_ISDIR(st.st_mode)) {
1446                         DEBUG(0, ("socket directory %s isn't a directory\n",
1447                                 socket_dir));
1448                         goto out_umask;
1449                 }
1450                 if ((st.st_uid != sec_initial_uid()) ||
1451                                 ((st.st_mode & 0777) != dir_perms)) {
1452                         DEBUG(0, ("invalid permissions on socket directory "
1453                                 "%s\n", socket_dir));
1454                         goto out_umask;
1455                 }
1456         }
1457
1458         /* Create the socket file */
1459
1460         sock = socket(AF_UNIX, SOCK_STREAM, 0);
1461
1462         if (sock == -1) {
1463                 DEBUG(0, ("create_pipe_sock: socket error %s\n",
1464                         strerror(errno) ));
1465                 goto out_close;
1466         }
1467
1468         if (asprintf(&path, "%s/%s", socket_dir, socket_name) == -1) {
1469                 goto out_close;
1470         }
1471
1472         unlink(path);
1473         memset(&sunaddr, 0, sizeof(sunaddr));
1474         sunaddr.sun_family = AF_UNIX;
1475         strlcpy(sunaddr.sun_path, path, sizeof(sunaddr.sun_path));
1476
1477         if (bind(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) == -1) {
1478                 DEBUG(0, ("bind failed on pipe socket %s: %s\n", path,
1479                         strerror(errno)));
1480                 goto out_close;
1481         }
1482
1483         if (listen(sock, 5) == -1) {
1484                 DEBUG(0, ("listen failed on pipe socket %s: %s\n", path,
1485                         strerror(errno)));
1486                 goto out_close;
1487         }
1488
1489         SAFE_FREE(path);
1490
1491         umask(old_umask);
1492         return sock;
1493
1494 out_close:
1495         SAFE_FREE(path);
1496         if (sock != -1)
1497                 close(sock);
1498
1499 out_umask:
1500         umask(old_umask);
1501         return -1;
1502
1503 #else
1504         DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
1505         return -1;
1506 #endif /* HAVE_UNIXSOCKET */
1507 }
1508
1509 /****************************************************************************
1510  Get my own canonical name, including domain.
1511 ****************************************************************************/
1512
1513 const char *get_mydnsfullname(void)
1514 {
1515         struct addrinfo *res = NULL;
1516         char my_hostname[HOST_NAME_MAX];
1517         bool ret;
1518         DATA_BLOB tmp;
1519
1520         if (memcache_lookup(NULL, SINGLETON_CACHE,
1521                         data_blob_string_const_null("get_mydnsfullname"),
1522                         &tmp)) {
1523                 SMB_ASSERT(tmp.length > 0);
1524                 return (const char *)tmp.data;
1525         }
1526
1527         /* get my host name */
1528         if (gethostname(my_hostname, sizeof(my_hostname)) == -1) {
1529                 DEBUG(0,("get_mydnsfullname: gethostname failed\n"));
1530                 return NULL;
1531         }
1532
1533         /* Ensure null termination. */
1534         my_hostname[sizeof(my_hostname)-1] = '\0';
1535
1536         ret = interpret_string_addr_internal(&res,
1537                                 my_hostname,
1538                                 AI_ADDRCONFIG|AI_CANONNAME);
1539
1540         if (!ret || res == NULL) {
1541                 DEBUG(3,("get_mydnsfullname: getaddrinfo failed for "
1542                         "name %s [%s]\n",
1543                         my_hostname,
1544                         gai_strerror(ret) ));
1545                 return NULL;
1546         }
1547
1548         /*
1549          * Make sure that getaddrinfo() returns the "correct" host name.
1550          */
1551
1552         if (res->ai_canonname == NULL) {
1553                 DEBUG(3,("get_mydnsfullname: failed to get "
1554                         "canonical name for %s\n",
1555                         my_hostname));
1556                 freeaddrinfo(res);
1557                 return NULL;
1558         }
1559
1560         /* This copies the data, so we must do a lookup
1561          * afterwards to find the value to return.
1562          */
1563
1564         memcache_add(NULL, SINGLETON_CACHE,
1565                         data_blob_string_const_null("get_mydnsfullname"),
1566                         data_blob_string_const_null(res->ai_canonname));
1567
1568         if (!memcache_lookup(NULL, SINGLETON_CACHE,
1569                         data_blob_string_const_null("get_mydnsfullname"),
1570                         &tmp)) {
1571                 tmp = data_blob_talloc(talloc_tos(), res->ai_canonname,
1572                                 strlen(res->ai_canonname) + 1);
1573         }
1574
1575         freeaddrinfo(res);
1576
1577         return (const char *)tmp.data;
1578 }
1579
1580 /************************************************************
1581  Is this my ip address ?
1582 ************************************************************/
1583
1584 static bool is_my_ipaddr(const char *ipaddr_str)
1585 {
1586         struct sockaddr_storage ss;
1587         struct iface_struct *nics;
1588         int i, n;
1589
1590         if (!interpret_string_addr(&ss, ipaddr_str, AI_NUMERICHOST)) {
1591                 return false;
1592         }
1593
1594         if (ismyaddr((struct sockaddr *)&ss)) {
1595                 return true;
1596         }
1597
1598         if (is_zero_addr(&ss) ||
1599                 is_loopback_addr((struct sockaddr *)&ss)) {
1600                 return false;
1601         }
1602
1603         n = get_interfaces(talloc_tos(), &nics);
1604         for (i=0; i<n; i++) {
1605                 if (sockaddr_equal((struct sockaddr *)&nics[i].ip, (struct sockaddr *)&ss)) {
1606                         TALLOC_FREE(nics);
1607                         return true;
1608                 }
1609         }
1610         TALLOC_FREE(nics);
1611         return false;
1612 }
1613
1614 /************************************************************
1615  Is this my name ?
1616 ************************************************************/
1617
1618 bool is_myname_or_ipaddr(const char *s)
1619 {
1620         TALLOC_CTX *ctx = talloc_tos();
1621         char *name = NULL;
1622         const char *dnsname;
1623         char *servername = NULL;
1624
1625         if (!s) {
1626                 return false;
1627         }
1628
1629         /* Santize the string from '\\name' */
1630         name = talloc_strdup(ctx, s);
1631         if (!name) {
1632                 return false;
1633         }
1634
1635         servername = strrchr_m(name, '\\' );
1636         if (!servername) {
1637                 servername = name;
1638         } else {
1639                 servername++;
1640         }
1641
1642         /* Optimize for the common case */
1643         if (strequal(servername, global_myname())) {
1644                 return true;
1645         }
1646
1647         /* Check for an alias */
1648         if (is_myname(servername)) {
1649                 return true;
1650         }
1651
1652         /* Check for loopback */
1653         if (strequal(servername, "127.0.0.1") ||
1654                         strequal(servername, "::1")) {
1655                 return true;
1656         }
1657
1658         if (strequal(servername, "localhost")) {
1659                 return true;
1660         }
1661
1662         /* Maybe it's my dns name */
1663         dnsname = get_mydnsfullname();
1664         if (dnsname && strequal(servername, dnsname)) {
1665                 return true;
1666         }
1667
1668         /* Maybe its an IP address? */
1669         if (is_ipaddress(servername)) {
1670                 return is_my_ipaddr(servername);
1671         }
1672
1673         /* Handle possible CNAME records - convert to an IP addr. list. */
1674         {
1675                 /* Use DNS to resolve the name, check all addresses. */
1676                 struct addrinfo *p = NULL;
1677                 struct addrinfo *res = NULL;
1678
1679                 if (!interpret_string_addr_internal(&res,
1680                                 servername,
1681                                 AI_ADDRCONFIG)) {
1682                         return false;
1683                 }
1684
1685                 for (p = res; p; p = p->ai_next) {
1686                         char addr[INET6_ADDRSTRLEN];
1687                         struct sockaddr_storage ss;
1688
1689                         ZERO_STRUCT(ss);
1690                         memcpy(&ss, p->ai_addr, p->ai_addrlen);
1691                         print_sockaddr(addr,
1692                                         sizeof(addr),
1693                                         &ss);
1694                         if (is_my_ipaddr(addr)) {
1695                                 freeaddrinfo(res);
1696                                 return true;
1697                         }
1698                 }
1699                 freeaddrinfo(res);
1700         }
1701
1702         /* No match */
1703         return false;
1704 }
1705
1706 struct getaddrinfo_state {
1707         const char *node;
1708         const char *service;
1709         const struct addrinfo *hints;
1710         struct addrinfo *res;
1711         int ret;
1712 };
1713
1714 static void getaddrinfo_do(void *private_data);
1715 static void getaddrinfo_done(struct tevent_req *subreq);
1716
1717 struct tevent_req *getaddrinfo_send(TALLOC_CTX *mem_ctx,
1718                                     struct tevent_context *ev,
1719                                     struct fncall_context *ctx,
1720                                     const char *node,
1721                                     const char *service,
1722                                     const struct addrinfo *hints)
1723 {
1724         struct tevent_req *req, *subreq;
1725         struct getaddrinfo_state *state;
1726
1727         req = tevent_req_create(mem_ctx, &state, struct getaddrinfo_state);
1728         if (req == NULL) {
1729                 return NULL;
1730         }
1731
1732         state->node = node;
1733         state->service = service;
1734         state->hints = hints;
1735
1736         subreq = fncall_send(state, ev, ctx, getaddrinfo_do, state);
1737         if (tevent_req_nomem(subreq, req)) {
1738                 return tevent_req_post(req, ev);
1739         }
1740         tevent_req_set_callback(subreq, getaddrinfo_done, req);
1741         return req;
1742 }
1743
1744 static void getaddrinfo_do(void *private_data)
1745 {
1746         struct getaddrinfo_state *state =
1747                 (struct getaddrinfo_state *)private_data;
1748
1749         state->ret = getaddrinfo(state->node, state->service, state->hints,
1750                                  &state->res);
1751 }
1752
1753 static void getaddrinfo_done(struct tevent_req *subreq)
1754 {
1755         struct tevent_req *req = tevent_req_callback_data(
1756                 subreq, struct tevent_req);
1757         int ret, err;
1758
1759         ret = fncall_recv(subreq, &err);
1760         TALLOC_FREE(subreq);
1761         if (ret == -1) {
1762                 tevent_req_error(req, err);
1763                 return;
1764         }
1765         tevent_req_done(req);
1766 }
1767
1768 int getaddrinfo_recv(struct tevent_req *req, struct addrinfo **res)
1769 {
1770         struct getaddrinfo_state *state = tevent_req_data(
1771                 req, struct getaddrinfo_state);
1772         int err;
1773
1774         if (tevent_req_is_unix_error(req, &err)) {
1775                 switch(err) {
1776                 case ENOMEM:
1777                         return EAI_MEMORY;
1778                 default:
1779                         return EAI_FAIL;
1780                 }
1781         }
1782         if (state->ret == 0) {
1783                 *res = state->res;
1784         }
1785         return state->ret;
1786 }
1787
1788 int poll_one_fd(int fd, int events, int timeout, int *revents)
1789 {
1790         struct pollfd *fds;
1791         int ret;
1792         int saved_errno;
1793
1794         fds = TALLOC_ZERO_ARRAY(talloc_tos(), struct pollfd, 2);
1795         if (fds == NULL) {
1796                 errno = ENOMEM;
1797                 return -1;
1798         }
1799         fds[0].fd = fd;
1800         fds[0].events = events;
1801
1802         ret = sys_poll(fds, 1, timeout);
1803
1804         /*
1805          * Assign whatever poll did, even in the ret<=0 case.
1806          */
1807         *revents = fds[0].revents;
1808         saved_errno = errno;
1809         TALLOC_FREE(fds);
1810         errno = saved_errno;
1811
1812         return ret;
1813 }
1814
1815 int poll_intr_one_fd(int fd, int events, int timeout, int *revents)
1816 {
1817         struct pollfd pfd;
1818         int ret;
1819
1820         pfd.fd = fd;
1821         pfd.events = events;
1822
1823         ret = sys_poll_intr(&pfd, 1, timeout);
1824         if (ret <= 0) {
1825                 *revents = 0;
1826                 return ret;
1827         }
1828         *revents = pfd.revents;
1829         return 1;
1830 }