source3/lib/socket_wrapper/socket_wrapper.c

   1 /*
   2  * Copyright (C) Jelmer Vernooij 2005,2008 <jelmer@samba.org>
   3  * Copyright (C) Stefan Metzmacher 2006 <metze@samba.org>
   4  *
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  *
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  *
  14  * 2. Redistributions in binary form must reproduce the above copyright
  15  *    notice, this list of conditions and the following disclaimer in the
  16  *    documentation and/or other materials provided with the distribution.
  17  *
  18  * 3. Neither the name of the author nor the names of its contributors
  19  *    may be used to endorse or promote products derived from this software
  20  *    without specific prior written permission.
  21  *
  22  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  26  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  27  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  28  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  29  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  30  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  31  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  32  * SUCH DAMAGE.
  33  *
  34  */
  35
  36 /*
  37    Socket wrapper library. Passes all socket communication over
  38    unix domain sockets if the environment variable SOCKET_WRAPPER_DIR
  39    is set.
  40 */
  41
  42 #ifdef _SAMBA_BUILD_
  43
  44 #define SOCKET_WRAPPER_NOT_REPLACE
  45 #include "lib/replace/replace.h"
  46 #include "system/network.h"
  47 #include "system/filesys.h"
  48 #include "system/time.h"
  49
  50 #else /* _SAMBA_BUILD_ */
  51
  52 #include <sys/types.h>
  53 #include <sys/time.h>
  54 #include <sys/stat.h>
  55 #include <sys/socket.h>
  56 #include <sys/ioctl.h>
  57 #include <sys/filio.h>
  58 #include <errno.h>
  59 #include <sys/un.h>
  60 #include <netinet/in.h>
  61 #include <netinet/tcp.h>
  62 #include <fcntl.h>
  63 #include <stdlib.h>
  64 #include <unistd.h>
  65 #include <string.h>
  66 #include <stdio.h>
  67 #include <stdint.h>
  68
  69 #endif
  70
  71 #ifndef _PUBLIC_
  72 #define _PUBLIC_
  73 #endif
  74
  75 #define SWRAP_DLIST_ADD(list,item) do { \
  76         if (!(list)) { \
  77                 (item)->prev    = NULL; \
  78                 (item)->next    = NULL; \
  79                 (list)          = (item); \
  80         } else { \
  81                 (item)->prev    = NULL; \
  82                 (item)->next    = (list); \
  83                 (list)->prev    = (item); \
  84                 (list)          = (item); \
  85         } \
  86 } while (0)
  87
  88 #define SWRAP_DLIST_REMOVE(list,item) do { \
  89         if ((list) == (item)) { \
  90                 (list)          = (item)->next; \
  91                 if (list) { \
  92                         (list)->prev    = NULL; \
  93                 } \
  94         } else { \
  95                 if ((item)->prev) { \
  96                         (item)->prev->next      = (item)->next; \
  97                 } \
  98                 if ((item)->next) { \
  99                         (item)->next->prev      = (item)->prev; \
 100                 } \
 101         } \
 102         (item)->prev    = NULL; \
 103         (item)->next    = NULL; \
 104 } while (0)
 105
 106 /* LD_PRELOAD doesn't work yet, so REWRITE_CALLS is all we support
 107  * for now */
 108 #define REWRITE_CALLS
 109
 110 #ifdef REWRITE_CALLS
 111 #define real_accept accept
 112 #define real_connect connect
 113 #define real_bind bind
 114 #define real_listen listen
 115 #define real_getpeername getpeername
 116 #define real_getsockname getsockname
 117 #define real_getsockopt getsockopt
 118 #define real_setsockopt setsockopt
 119 #define real_recvfrom recvfrom
 120 #define real_sendto sendto
 121 #define real_ioctl ioctl
 122 #define real_recv recv
 123 #define real_send send
 124 #define real_socket socket
 125 #define real_close close
 126 #endif
 127
 128 #ifdef HAVE_GETTIMEOFDAY_TZ
 129 #define swrapGetTimeOfDay(tval) gettimeofday(tval,NULL)
 130 #else
 131 #define swrapGetTimeOfDay(tval) gettimeofday(tval)
 132 #endif
 133
 134 /* we need to use a very terse format here as IRIX 6.4 silently
 135    truncates names to 16 chars, so if we use a longer name then we
 136    can't tell which port a packet came from with recvfrom()
 137
 138    with this format we have 8 chars left for the directory name
 139 */
 140 #define SOCKET_FORMAT "%c%02X%04X"
 141 #define SOCKET_TYPE_CHAR_TCP            'T'
 142 #define SOCKET_TYPE_CHAR_UDP            'U'
 143 #define SOCKET_TYPE_CHAR_TCP_V6         'X'
 144 #define SOCKET_TYPE_CHAR_UDP_V6         'Y'
 145
 146 #define MAX_WRAPPED_INTERFACES 16
 147
 148 #define SW_IPV6_ADDRESS 1
 149
 150 static struct sockaddr *sockaddr_dup(const void *data, socklen_t len)
 151 {
 152         struct sockaddr *ret = (struct sockaddr *)malloc(len);
 153         memcpy(ret, data, len);
 154         return ret;
 155 }
 156
 157 static void set_port(int family, int prt, struct sockaddr *addr)
 158 {
 159         switch (family) {
 160         case AF_INET:
 161                 ((struct sockaddr_in *)addr)->sin_port = htons(prt);
 162                 break;
 163 #ifdef HAVE_IPV6
 164         case AF_INET6:
 165                 ((struct sockaddr_in6 *)addr)->sin6_port = htons(prt);
 166                 break;
 167 #endif
 168         }
 169 }
 170
 171 static size_t socket_length(int family)
 172 {
 173         switch (family) {
 174         case AF_INET:
 175                 return sizeof(struct sockaddr_in);
 176 #ifdef HAVE_IPV6
 177         case AF_INET6:
 178                 return sizeof(struct sockaddr_in6);
 179 #endif
 180         }
 181         return 0;
 182 }
 183
 184
 185
 186 struct socket_info
 187 {
 188         int fd;
 189
 190         int family;
 191         int type;
 192         int protocol;
 193         int bound;
 194         int bcast;
 195         int is_server;
 196
 197         char *path;
 198         char *tmp_path;
 199
 200         struct sockaddr *myname;
 201         socklen_t myname_len;
 202
 203         struct sockaddr *peername;
 204         socklen_t peername_len;
 205
 206         struct {
 207                 unsigned long pck_snd;
 208                 unsigned long pck_rcv;
 209         } io;
 210
 211         struct socket_info *prev, *next;
 212 };
 213
 214 static struct socket_info *sockets;
 215
 216 const char *socket_wrapper_dir(void)
 217 {
 218         const char *s = getenv("SOCKET_WRAPPER_DIR");
 219         if (s == NULL) {
 220                 return NULL;
 221         }
 222         if (strncmp(s, "./", 2) == 0) {
 223                 s += 2;
 224         }
 225         return s;
 226 }
 227
 228 unsigned int socket_wrapper_default_iface(void)
 229 {
 230         const char *s = getenv("SOCKET_WRAPPER_DEFAULT_IFACE");
 231         if (s) {
 232                 unsigned int iface;
 233                 if (sscanf(s, "%u", &iface) == 1) {
 234                         if (iface >= 1 && iface <= MAX_WRAPPED_INTERFACES) {
 235                                 return iface;
 236                         }
 237                 }
 238         }
 239
 240         return 1;/* 127.0.0.1 */
 241 }
 242
 243 static int convert_un_in(const struct sockaddr_un *un, struct sockaddr *in, socklen_t *len)
 244 {
 245         unsigned int iface;
 246         unsigned int prt;
 247         const char *p;
 248         char type;
 249
 250         p = strrchr(un->sun_path, '/');
 251         if (p) p++; else p = un->sun_path;
 252
 253         if (sscanf(p, SOCKET_FORMAT, &type, &iface, &prt) != 3) {
 254                 errno = EINVAL;
 255                 return -1;
 256         }
 257
 258         if (iface == 0 || iface > MAX_WRAPPED_INTERFACES) {
 259                 errno = EINVAL;
 260                 return -1;
 261         }
 262
 263         if (prt > 0xFFFF) {
 264                 errno = EINVAL;
 265                 return -1;
 266         }
 267
 268         switch(type) {
 269         case SOCKET_TYPE_CHAR_TCP:
 270         case SOCKET_TYPE_CHAR_UDP: {
 271                 struct sockaddr_in *in2 = (struct sockaddr_in *)in;
 272
 273                 if ((*len) < sizeof(*in2)) {
 274                     errno = EINVAL;
 275                     return -1;
 276                 }
 277
 278                 memset(in2, 0, sizeof(*in2));
 279                 in2->sin_family = AF_INET;
 280                 in2->sin_addr.s_addr = htonl((127<<24) | iface);
 281                 in2->sin_port = htons(prt);
 282
 283                 *len = sizeof(*in2);
 284                 break;
 285         }
 286 #ifdef HAVE_IPV6
 287         case SOCKET_TYPE_CHAR_TCP_V6:
 288         case SOCKET_TYPE_CHAR_UDP_V6: {
 289                 struct sockaddr_in6 *in2 = (struct sockaddr_in6 *)in;
 290
 291                 if ((*len) < sizeof(*in2)) {
 292                         errno = EINVAL;
 293                         return -1;
 294                 }
 295
 296                 memset(in2, 0, sizeof(*in2));
 297                 in2->sin6_family = AF_INET6;
 298                 in2->sin6_addr.s6_addr[0] = SW_IPV6_ADDRESS;
 299                 in2->sin6_port = htons(prt);
 300
 301                 *len = sizeof(*in2);
 302                 break;
 303         }
 304 #endif
 305         default:
 306                 errno = EINVAL;
 307                 return -1;
 308         }
 309
 310         return 0;
 311 }
 312
 313 static int convert_in_un_remote(struct socket_info *si, const struct sockaddr *inaddr, struct sockaddr_un *un,
 314                                 int *bcast)
 315 {
 316         char type = '\0';
 317         unsigned int prt;
 318         unsigned int iface;
 319         int is_bcast = 0;
 320
 321         if (bcast) *bcast = 0;
 322
 323         switch (si->family) {
 324         case AF_INET: {
 325                 const struct sockaddr_in *in =
 326                     (const struct sockaddr_in *)inaddr;
 327                 unsigned int addr = ntohl(in->sin_addr.s_addr);
 328                 char u_type = '\0';
 329                 char b_type = '\0';
 330                 char a_type = '\0';
 331
 332                 switch (si->type) {
 333                 case SOCK_STREAM:
 334                         u_type = SOCKET_TYPE_CHAR_TCP;
 335                         break;
 336                 case SOCK_DGRAM:
 337                         u_type = SOCKET_TYPE_CHAR_UDP;
 338                         a_type = SOCKET_TYPE_CHAR_UDP;
 339                         b_type = SOCKET_TYPE_CHAR_UDP;
 340                         break;
 341                 }
 342
 343                 prt = ntohs(in->sin_port);
 344                 if (a_type && addr == 0xFFFFFFFF) {
 345                         /* 255.255.255.255 only udp */
 346                         is_bcast = 2;
 347                         type = a_type;
 348                         iface = socket_wrapper_default_iface();
 349                 } else if (b_type && addr == 0x7FFFFFFF) {
 350                         /* 127.255.255.255 only udp */
 351                         is_bcast = 1;
 352                         type = b_type;
 353                         iface = socket_wrapper_default_iface();
 354                 } else if ((addr & 0xFFFFFF00) == 0x7F000000) {
 355                         /* 127.0.0.X */
 356                         is_bcast = 0;
 357                         type = u_type;
 358                         iface = (addr & 0x000000FF);
 359                 } else {
 360                         errno = ENETUNREACH;
 361                         return -1;
 362                 }
 363                 if (bcast) *bcast = is_bcast;
 364                 break;
 365         }
 366 #ifdef HAVE_IPV6
 367         case AF_INET6: {
 368                 const struct sockaddr_in6 *in =
 369                     (const struct sockaddr_in6 *)inaddr;
 370
 371                 switch (si->type) {
 372                 case SOCK_STREAM:
 373                         type = SOCKET_TYPE_CHAR_TCP_V6;
 374                         break;
 375                 case SOCK_DGRAM:
 376                         type = SOCKET_TYPE_CHAR_UDP_V6;
 377                         break;
 378                 }
 379
 380                 /* XXX no multicast/broadcast */
 381
 382                 prt = ntohs(in->sin6_port);
 383                 iface = SW_IPV6_ADDRESS;
 384
 385                 break;
 386         }
 387 #endif
 388         default:
 389                 errno = ENETUNREACH;
 390                 return -1;
 391         }
 392
 393         if (prt == 0) {
 394                 errno = EINVAL;
 395                 return -1;
 396         }
 397
 398         if (is_bcast) {
 399                 snprintf(un->sun_path, sizeof(un->sun_path), "%s/EINVAL",
 400                          socket_wrapper_dir());
 401                 /* the caller need to do more processing */
 402                 return 0;
 403         }
 404
 405         snprintf(un->sun_path, sizeof(un->sun_path), "%s/"SOCKET_FORMAT,
 406                  socket_wrapper_dir(), type, iface, prt);
 407
 408         return 0;
 409 }
 410
 411 static int convert_in_un_alloc(struct socket_info *si, const struct sockaddr *inaddr, struct sockaddr_un *un,
 412                                int *bcast)
 413 {
 414         char type = '\0';
 415         unsigned int prt;
 416         unsigned int iface;
 417         struct stat st;
 418         int is_bcast = 0;
 419
 420         if (bcast) *bcast = 0;
 421
 422         switch (si->family) {
 423         case AF_INET: {
 424                 const struct sockaddr_in *in =
 425                     (const struct sockaddr_in *)inaddr;
 426                 unsigned int addr = ntohl(in->sin_addr.s_addr);
 427                 char u_type = '\0';
 428                 char d_type = '\0';
 429                 char b_type = '\0';
 430                 char a_type = '\0';
 431
 432                 prt = ntohs(in->sin_port);
 433
 434                 switch (si->type) {
 435                 case SOCK_STREAM:
 436                         u_type = SOCKET_TYPE_CHAR_TCP;
 437                         d_type = SOCKET_TYPE_CHAR_TCP;
 438                         break;
 439                 case SOCK_DGRAM:
 440                         u_type = SOCKET_TYPE_CHAR_UDP;
 441                         d_type = SOCKET_TYPE_CHAR_UDP;
 442                         a_type = SOCKET_TYPE_CHAR_UDP;
 443                         b_type = SOCKET_TYPE_CHAR_UDP;
 444                         break;
 445                 }
 446
 447                 if (addr == 0) {
 448                         /* 0.0.0.0 */
 449                         is_bcast = 0;
 450                         type = d_type;
 451                         iface = socket_wrapper_default_iface();
 452                 } else if (a_type && addr == 0xFFFFFFFF) {
 453                         /* 255.255.255.255 only udp */
 454                         is_bcast = 2;
 455                         type = a_type;
 456                         iface = socket_wrapper_default_iface();
 457                 } else if (b_type && addr == 0x7FFFFFFF) {
 458                         /* 127.255.255.255 only udp */
 459                         is_bcast = 1;
 460                         type = b_type;
 461                         iface = socket_wrapper_default_iface();
 462                 } else if ((addr & 0xFFFFFF00) == 0x7F000000) {
 463                         /* 127.0.0.X */
 464                         is_bcast = 0;
 465                         type = u_type;
 466                         iface = (addr & 0x000000FF);
 467                 } else {
 468                         errno = EADDRNOTAVAIL;
 469                         return -1;
 470                 }
 471                 break;
 472         }
 473 #ifdef HAVE_IPV6
 474         case AF_INET6: {
 475                 const struct sockaddr_in6 *in =
 476                     (const struct sockaddr_in6 *)inaddr;
 477
 478                 switch (si->type) {
 479                 case SOCK_STREAM:
 480                         type = SOCKET_TYPE_CHAR_TCP_V6;
 481                         break;
 482                 case SOCK_DGRAM:
 483                         type = SOCKET_TYPE_CHAR_UDP_V6;
 484                         break;
 485                 }
 486
 487                 /* XXX no multicast/broadcast */
 488
 489                 prt = ntohs(in->sin6_port);
 490                 iface = SW_IPV6_ADDRESS;
 491
 492                 break;
 493         }
 494 #endif
 495         default:
 496                 errno = ENETUNREACH;
 497                 return -1;
 498         }
 499
 500
 501         if (bcast) *bcast = is_bcast;
 502
 503         if (prt == 0) {
 504                 /* handle auto-allocation of ephemeral ports */
 505                 for (prt = 5001; prt < 10000; prt++) {
 506                         snprintf(un->sun_path, sizeof(un->sun_path), "%s/"SOCKET_FORMAT,
 507                                  socket_wrapper_dir(), type, iface, prt);
 508                         if (stat(un->sun_path, &st) == 0) continue;
 509
 510                         set_port(si->family, prt, si->myname);
 511                         break;
 512                 }
 513                 if (prt == 10000) {
 514                         errno = ENFILE;
 515                         return -1;
 516                 }
 517         }
 518
 519         snprintf(un->sun_path, sizeof(un->sun_path), "%s/"SOCKET_FORMAT,
 520                  socket_wrapper_dir(), type, iface, prt);
 521         return 0;
 522 }
 523
 524 static struct socket_info *find_socket_info(int fd)
 525 {
 526         struct socket_info *i;
 527         for (i = sockets; i; i = i->next) {
 528                 if (i->fd == fd)
 529                         return i;
 530         }
 531
 532         return NULL;
 533 }
 534
 535 static int sockaddr_convert_to_un(struct socket_info *si, const struct sockaddr *in_addr, socklen_t in_len,
 536                                   struct sockaddr_un *out_addr, int alloc_sock, int *bcast)
 537 {
 538         if (!out_addr)
 539                 return 0;
 540
 541         out_addr->sun_family = AF_UNIX;
 542
 543         switch (in_addr->sa_family) {
 544         case AF_INET:
 545 #ifdef HAVE_IPV6
 546         case AF_INET6:
 547 #endif
 548                 switch (si->type) {
 549                 case SOCK_STREAM:
 550                 case SOCK_DGRAM:
 551                         break;
 552                 default:
 553                         errno = ESOCKTNOSUPPORT;
 554                         return -1;
 555                 }
 556                 if (alloc_sock) {
 557                         return convert_in_un_alloc(si, in_addr, out_addr, bcast);
 558                 } else {
 559                         return convert_in_un_remote(si, in_addr, out_addr, bcast);
 560                 }
 561         default:
 562                 break;
 563         }
 564
 565         errno = EAFNOSUPPORT;
 566         return -1;
 567 }
 568
 569 static int sockaddr_convert_from_un(const struct socket_info *si,
 570                                     const struct sockaddr_un *in_addr,
 571                                     socklen_t un_addrlen,
 572                                     int family,
 573                                     struct sockaddr *out_addr,
 574                                     socklen_t *out_addrlen)
 575 {
 576         if (out_addr == NULL || out_addrlen == NULL)
 577                 return 0;
 578
 579         if (un_addrlen == 0) {
 580                 *out_addrlen = 0;
 581                 return 0;
 582         }
 583
 584         switch (family) {
 585         case AF_INET:
 586 #ifdef HAVE_IPV6
 587         case AF_INET6:
 588 #endif
 589                 switch (si->type) {
 590                 case SOCK_STREAM:
 591                 case SOCK_DGRAM:
 592                         break;
 593                 default:
 594                         errno = ESOCKTNOSUPPORT;
 595                         return -1;
 596                 }
 597                 return convert_un_in(in_addr, out_addr, out_addrlen);
 598         default:
 599                 break;
 600         }
 601
 602         errno = EAFNOSUPPORT;
 603         return -1;
 604 }
 605
 606 enum swrap_packet_type {
 607         SWRAP_CONNECT_SEND,
 608         SWRAP_CONNECT_UNREACH,
 609         SWRAP_CONNECT_RECV,
 610         SWRAP_CONNECT_ACK,
 611         SWRAP_ACCEPT_SEND,
 612         SWRAP_ACCEPT_RECV,
 613         SWRAP_ACCEPT_ACK,
 614         SWRAP_RECVFROM,
 615         SWRAP_SENDTO,
 616         SWRAP_SENDTO_UNREACH,
 617         SWRAP_PENDING_RST,
 618         SWRAP_RECV,
 619         SWRAP_RECV_RST,
 620         SWRAP_SEND,
 621         SWRAP_SEND_RST,
 622         SWRAP_CLOSE_SEND,
 623         SWRAP_CLOSE_RECV,
 624         SWRAP_CLOSE_ACK
 625 };
 626
 627 struct swrap_file_hdr {
 628         uint32_t        magic;
 629         uint16_t        version_major;
 630         uint16_t        version_minor;
 631         int32_t         timezone;
 632         uint32_t        sigfigs;
 633         uint32_t        frame_max_len;
 634 #define SWRAP_FRAME_LENGTH_MAX 0xFFFF
 635         uint32_t        link_type;
 636 };
 637 #define SWRAP_FILE_HDR_SIZE 24
 638
 639 struct swrap_packet {
 640         struct {
 641                 uint32_t seconds;
 642                 uint32_t micro_seconds;
 643                 uint32_t recorded_length;
 644                 uint32_t full_length;
 645         } frame;
 646 #define SWRAP_PACKET__FRAME_SIZE 16
 647
 648         struct {
 649                 struct {
 650                         uint8_t         ver_hdrlen;
 651                         uint8_t         tos;
 652                         uint16_t        packet_length;
 653                         uint16_t        identification;
 654                         uint8_t         flags;
 655                         uint8_t         fragment;
 656                         uint8_t         ttl;
 657                         uint8_t         protocol;
 658                         uint16_t        hdr_checksum;
 659                         uint32_t        src_addr;
 660                         uint32_t        dest_addr;
 661                 } hdr;
 662 #define SWRAP_PACKET__IP_HDR_SIZE 20
 663
 664                 union {
 665                         struct {
 666                                 uint16_t        source_port;
 667                                 uint16_t        dest_port;
 668                                 uint32_t        seq_num;
 669                                 uint32_t        ack_num;
 670                                 uint8_t         hdr_length;
 671                                 uint8_t         control;
 672                                 uint16_t        window;
 673                                 uint16_t        checksum;
 674                                 uint16_t        urg;
 675                         } tcp;
 676 #define SWRAP_PACKET__IP_P_TCP_SIZE 20
 677                         struct {
 678                                 uint16_t        source_port;
 679                                 uint16_t        dest_port;
 680                                 uint16_t        length;
 681                                 uint16_t        checksum;
 682                         } udp;
 683 #define SWRAP_PACKET__IP_P_UDP_SIZE 8
 684                         struct {
 685                                 uint8_t         type;
 686                                 uint8_t         code;
 687                                 uint16_t        checksum;
 688                                 uint32_t        unused;
 689                         } icmp;
 690 #define SWRAP_PACKET__IP_P_ICMP_SIZE 8
 691                 } p;
 692         } ip;
 693 };
 694 #define SWRAP_PACKET_SIZE 56
 695
 696 static const char *socket_wrapper_pcap_file(void)
 697 {
 698         static int initialized = 0;
 699         static const char *s = NULL;
 700         static const struct swrap_file_hdr h = { 0, };
 701         static const struct swrap_packet p = { { 0, }, { { 0, }, { { 0, } } } };
 702
 703         if (initialized == 1) {
 704                 return s;
 705         }
 706         initialized = 1;
 707
 708         /*
 709          * TODO: don't use the structs use plain buffer offsets
 710          *       and PUSH_U8(), PUSH_U16() and PUSH_U32()
 711          *
 712          * for now make sure we disable PCAP support
 713          * if the struct has alignment!
 714          */
 715         if (sizeof(h) != SWRAP_FILE_HDR_SIZE) {
 716                 return NULL;
 717         }
 718         if (sizeof(p) != SWRAP_PACKET_SIZE) {
 719                 return NULL;
 720         }
 721         if (sizeof(p.frame) != SWRAP_PACKET__FRAME_SIZE) {
 722                 return NULL;
 723         }
 724         if (sizeof(p.ip.hdr) != SWRAP_PACKET__IP_HDR_SIZE) {
 725                 return NULL;
 726         }
 727         if (sizeof(p.ip.p.tcp) != SWRAP_PACKET__IP_P_TCP_SIZE) {
 728                 return NULL;
 729         }
 730         if (sizeof(p.ip.p.udp) != SWRAP_PACKET__IP_P_UDP_SIZE) {
 731                 return NULL;
 732         }
 733         if (sizeof(p.ip.p.icmp) != SWRAP_PACKET__IP_P_ICMP_SIZE) {
 734                 return NULL;
 735         }
 736
 737         s = getenv("SOCKET_WRAPPER_PCAP_FILE");
 738         if (s == NULL) {
 739                 return NULL;
 740         }
 741         if (strncmp(s, "./", 2) == 0) {
 742                 s += 2;
 743         }
 744         return s;
 745 }
 746
 747 static struct swrap_packet *swrap_packet_init(struct timeval *tval,
 748                                               const struct sockaddr_in *src_addr,
 749                                               const struct sockaddr_in *dest_addr,
 750                                               int socket_type,
 751                                               const unsigned char *payload,
 752                                               size_t payload_len,
 753                                               unsigned long tcp_seq,
 754                                               unsigned long tcp_ack,
 755                                               unsigned char tcp_ctl,
 756                                               int unreachable,
 757                                               size_t *_packet_len)
 758 {
 759         struct swrap_packet *ret;
 760         struct swrap_packet *packet;
 761         size_t packet_len;
 762         size_t alloc_len;
 763         size_t nonwire_len = sizeof(packet->frame);
 764         size_t wire_hdr_len = 0;
 765         size_t wire_len = 0;
 766         size_t icmp_hdr_len = 0;
 767         size_t icmp_truncate_len = 0;
 768         unsigned char protocol = 0, icmp_protocol = 0;
 769         unsigned short src_port = src_addr->sin_port;
 770         unsigned short dest_port = dest_addr->sin_port;
 771
 772         switch (socket_type) {
 773         case SOCK_STREAM:
 774                 protocol = 0x06; /* TCP */
 775                 wire_hdr_len = sizeof(packet->ip.hdr) + sizeof(packet->ip.p.tcp);
 776                 wire_len = wire_hdr_len + payload_len;
 777                 break;
 778
 779         case SOCK_DGRAM:
 780                 protocol = 0x11; /* UDP */
 781                 wire_hdr_len = sizeof(packet->ip.hdr) + sizeof(packet->ip.p.udp);
 782                 wire_len = wire_hdr_len + payload_len;
 783                 break;
 784
 785         default:
 786                 return NULL;
 787         }
 788
 789         if (unreachable) {
 790                 icmp_protocol = protocol;
 791                 protocol = 0x01; /* ICMP */
 792                 if (wire_len > 64 ) {
 793                         icmp_truncate_len = wire_len - 64;
 794                 }
 795                 icmp_hdr_len = sizeof(packet->ip.hdr) + sizeof(packet->ip.p.icmp);
 796                 wire_hdr_len += icmp_hdr_len;
 797                 wire_len += icmp_hdr_len;
 798         }
 799
 800         packet_len = nonwire_len + wire_len;
 801         alloc_len = packet_len;
 802         if (alloc_len < sizeof(struct swrap_packet)) {
 803                 alloc_len = sizeof(struct swrap_packet);
 804         }
 805         ret = (struct swrap_packet *)malloc(alloc_len);
 806         if (!ret) return NULL;
 807
 808         packet = ret;
 809
 810         packet->frame.seconds           = tval->tv_sec;
 811         packet->frame.micro_seconds     = tval->tv_usec;
 812         packet->frame.recorded_length   = wire_len - icmp_truncate_len;
 813         packet->frame.full_length       = wire_len - icmp_truncate_len;
 814
 815         packet->ip.hdr.ver_hdrlen       = 0x45; /* version 4 and 5 * 32 bit words */
 816         packet->ip.hdr.tos              = 0x00;
 817         packet->ip.hdr.packet_length    = htons(wire_len - icmp_truncate_len);
 818         packet->ip.hdr.identification   = htons(0xFFFF);
 819         packet->ip.hdr.flags            = 0x40; /* BIT 1 set - means don't fraqment */
 820         packet->ip.hdr.fragment         = htons(0x0000);
 821         packet->ip.hdr.ttl              = 0xFF;
 822         packet->ip.hdr.protocol         = protocol;
 823         packet->ip.hdr.hdr_checksum     = htons(0x0000);
 824         packet->ip.hdr.src_addr         = src_addr->sin_addr.s_addr;
 825         packet->ip.hdr.dest_addr        = dest_addr->sin_addr.s_addr;
 826
 827         if (unreachable) {
 828                 packet->ip.p.icmp.type          = 0x03; /* destination unreachable */
 829                 packet->ip.p.icmp.code          = 0x01; /* host unreachable */
 830                 packet->ip.p.icmp.checksum      = htons(0x0000);
 831                 packet->ip.p.icmp.unused        = htonl(0x00000000);
 832
 833                 /* set the ip header in the ICMP payload */
 834                 packet = (struct swrap_packet *)(((unsigned char *)ret) + icmp_hdr_len);
 835                 packet->ip.hdr.ver_hdrlen       = 0x45; /* version 4 and 5 * 32 bit words */
 836                 packet->ip.hdr.tos              = 0x00;
 837                 packet->ip.hdr.packet_length    = htons(wire_len - icmp_hdr_len);
 838                 packet->ip.hdr.identification   = htons(0xFFFF);
 839                 packet->ip.hdr.flags            = 0x40; /* BIT 1 set - means don't fraqment */
 840                 packet->ip.hdr.fragment         = htons(0x0000);
 841                 packet->ip.hdr.ttl              = 0xFF;
 842                 packet->ip.hdr.protocol         = icmp_protocol;
 843                 packet->ip.hdr.hdr_checksum     = htons(0x0000);
 844                 packet->ip.hdr.src_addr         = dest_addr->sin_addr.s_addr;
 845                 packet->ip.hdr.dest_addr        = src_addr->sin_addr.s_addr;
 846
 847                 src_port = dest_addr->sin_port;
 848                 dest_port = src_addr->sin_port;
 849         }
 850
 851         switch (socket_type) {
 852         case SOCK_STREAM:
 853                 packet->ip.p.tcp.source_port    = src_port;
 854                 packet->ip.p.tcp.dest_port      = dest_port;
 855                 packet->ip.p.tcp.seq_num        = htonl(tcp_seq);
 856                 packet->ip.p.tcp.ack_num        = htonl(tcp_ack);
 857                 packet->ip.p.tcp.hdr_length     = 0x50; /* 5 * 32 bit words */
 858                 packet->ip.p.tcp.control        = tcp_ctl;
 859                 packet->ip.p.tcp.window         = htons(0x7FFF);
 860                 packet->ip.p.tcp.checksum       = htons(0x0000);
 861                 packet->ip.p.tcp.urg            = htons(0x0000);
 862
 863                 break;
 864
 865         case SOCK_DGRAM:
 866                 packet->ip.p.udp.source_port    = src_addr->sin_port;
 867                 packet->ip.p.udp.dest_port      = dest_addr->sin_port;
 868                 packet->ip.p.udp.length         = htons(8 + payload_len);
 869                 packet->ip.p.udp.checksum       = htons(0x0000);
 870
 871                 break;
 872         }
 873
 874         if (payload && payload_len > 0) {
 875                 unsigned char *p = (unsigned char *)ret;
 876                 p += nonwire_len;
 877                 p += wire_hdr_len;
 878                 memcpy(p, payload, payload_len);
 879         }
 880
 881         *_packet_len = packet_len - icmp_truncate_len;
 882         return ret;
 883 }
 884
 885 static int swrap_get_pcap_fd(const char *fname)
 886 {
 887         static int fd = -1;
 888
 889         if (fd != -1) return fd;
 890
 891         fd = open(fname, O_WRONLY|O_CREAT|O_EXCL|O_APPEND, 0644);
 892         if (fd != -1) {
 893                 struct swrap_file_hdr file_hdr;
 894                 file_hdr.magic          = 0xA1B2C3D4;
 895                 file_hdr.version_major  = 0x0002;
 896                 file_hdr.version_minor  = 0x0004;
 897                 file_hdr.timezone       = 0x00000000;
 898                 file_hdr.sigfigs        = 0x00000000;
 899                 file_hdr.frame_max_len  = SWRAP_FRAME_LENGTH_MAX;
 900                 file_hdr.link_type      = 0x0065; /* 101 RAW IP */
 901
 902                 write(fd, &file_hdr, sizeof(file_hdr));
 903                 return fd;
 904         }
 905
 906         fd = open(fname, O_WRONLY|O_APPEND, 0644);
 907
 908         return fd;
 909 }
 910
 911 static struct swrap_packet *swrap_marshall_packet(struct socket_info *si,
 912                                                                   const struct sockaddr *addr,
 913                                                                   enum swrap_packet_type type,
 914                                                                   const void *buf, size_t len,
 915                                                                   size_t *packet_len)
 916 {
 917         const struct sockaddr_in *src_addr;
 918         const struct sockaddr_in *dest_addr;
 919         unsigned long tcp_seq = 0;
 920         unsigned long tcp_ack = 0;
 921         unsigned char tcp_ctl = 0;
 922         int unreachable = 0;
 923
 924         struct timeval tv;
 925
 926         switch (si->family) {
 927         case AF_INET:
 928                 break;
 929         default:
 930                 return NULL;
 931         }
 932
 933         switch (type) {
 934         case SWRAP_CONNECT_SEND:
 935                 if (si->type != SOCK_STREAM) return NULL;
 936
 937                 src_addr = (const struct sockaddr_in *)si->myname;
 938                 dest_addr = (const struct sockaddr_in *)addr;
 939
 940                 tcp_seq = si->io.pck_snd;
 941                 tcp_ack = si->io.pck_rcv;
 942                 tcp_ctl = 0x02; /* SYN */
 943
 944                 si->io.pck_snd += 1;
 945
 946                 break;
 947
 948         case SWRAP_CONNECT_RECV:
 949                 if (si->type != SOCK_STREAM) return NULL;
 950
 951                 dest_addr = (const struct sockaddr_in *)si->myname;
 952                 src_addr = (const struct sockaddr_in *)addr;
 953
 954                 tcp_seq = si->io.pck_rcv;
 955                 tcp_ack = si->io.pck_snd;
 956                 tcp_ctl = 0x12; /** SYN,ACK */
 957
 958                 si->io.pck_rcv += 1;
 959
 960                 break;
 961
 962         case SWRAP_CONNECT_UNREACH:
 963                 if (si->type != SOCK_STREAM) return NULL;
 964
 965                 dest_addr = (const struct sockaddr_in *)si->myname;
 966                 src_addr = (const struct sockaddr_in *)addr;
 967
 968                 /* Unreachable: resend the data of SWRAP_CONNECT_SEND */
 969                 tcp_seq = si->io.pck_snd - 1;
 970                 tcp_ack = si->io.pck_rcv;
 971                 tcp_ctl = 0x02; /* SYN */
 972                 unreachable = 1;
 973
 974                 break;
 975
 976         case SWRAP_CONNECT_ACK:
 977                 if (si->type != SOCK_STREAM) return NULL;
 978
 979                 src_addr = (const struct sockaddr_in *)si->myname;
 980                 dest_addr = (const struct sockaddr_in *)addr;
 981
 982                 tcp_seq = si->io.pck_snd;
 983                 tcp_ack = si->io.pck_rcv;
 984                 tcp_ctl = 0x10; /* ACK */
 985
 986                 break;
 987
 988         case SWRAP_ACCEPT_SEND:
 989                 if (si->type != SOCK_STREAM) return NULL;
 990
 991                 dest_addr = (const struct sockaddr_in *)si->myname;
 992                 src_addr = (const struct sockaddr_in *)addr;
 993
 994                 tcp_seq = si->io.pck_rcv;
 995                 tcp_ack = si->io.pck_snd;
 996                 tcp_ctl = 0x02; /* SYN */
 997
 998                 si->io.pck_rcv += 1;
 999
1000                 break;
1001
1002         case SWRAP_ACCEPT_RECV:
1003                 if (si->type != SOCK_STREAM) return NULL;
1004
1005                 src_addr = (const struct sockaddr_in *)si->myname;
1006                 dest_addr = (const struct sockaddr_in *)addr;
1007
1008                 tcp_seq = si->io.pck_snd;
1009                 tcp_ack = si->io.pck_rcv;
1010                 tcp_ctl = 0x12; /* SYN,ACK */
1011
1012                 si->io.pck_snd += 1;
1013
1014                 break;
1015
1016         case SWRAP_ACCEPT_ACK:
1017                 if (si->type != SOCK_STREAM) return NULL;
1018
1019                 dest_addr = (const struct sockaddr_in *)si->myname;
1020                 src_addr = (const struct sockaddr_in *)addr;
1021
1022                 tcp_seq = si->io.pck_rcv;
1023                 tcp_ack = si->io.pck_snd;
1024                 tcp_ctl = 0x10; /* ACK */
1025
1026                 break;
1027
1028         case SWRAP_SEND:
1029                 src_addr = (const struct sockaddr_in *)si->myname;
1030                 dest_addr = (const struct sockaddr_in *)si->peername;
1031
1032                 tcp_seq = si->io.pck_snd;
1033                 tcp_ack = si->io.pck_rcv;
1034                 tcp_ctl = 0x18; /* PSH,ACK */
1035
1036                 si->io.pck_snd += len;
1037
1038                 break;
1039
1040         case SWRAP_SEND_RST:
1041                 dest_addr = (const struct sockaddr_in *)si->myname;
1042                 src_addr = (const struct sockaddr_in *)si->peername;
1043
1044                 if (si->type == SOCK_DGRAM) {
1045                         return swrap_marshall_packet(si, si->peername,
1046                                           SWRAP_SENDTO_UNREACH,
1047                                           buf, len, packet_len);
1048                 }
1049
1050                 tcp_seq = si->io.pck_rcv;
1051                 tcp_ack = si->io.pck_snd;
1052                 tcp_ctl = 0x14; /** RST,ACK */
1053
1054                 break;
1055
1056         case SWRAP_PENDING_RST:
1057                 dest_addr = (const struct sockaddr_in *)si->myname;
1058                 src_addr = (const struct sockaddr_in *)si->peername;
1059
1060                 if (si->type == SOCK_DGRAM) {
1061                         return NULL;
1062                 }
1063
1064                 tcp_seq = si->io.pck_rcv;
1065                 tcp_ack = si->io.pck_snd;
1066                 tcp_ctl = 0x14; /* RST,ACK */
1067
1068                 break;
1069
1070         case SWRAP_RECV:
1071                 dest_addr = (const struct sockaddr_in *)si->myname;
1072                 src_addr = (const struct sockaddr_in *)si->peername;
1073
1074                 tcp_seq = si->io.pck_rcv;
1075                 tcp_ack = si->io.pck_snd;
1076                 tcp_ctl = 0x18; /* PSH,ACK */
1077
1078                 si->io.pck_rcv += len;
1079
1080                 break;
1081
1082         case SWRAP_RECV_RST:
1083                 dest_addr = (const struct sockaddr_in *)si->myname;
1084                 src_addr = (const struct sockaddr_in *)si->peername;
1085
1086                 if (si->type == SOCK_DGRAM) {
1087                         return NULL;
1088                 }
1089
1090                 tcp_seq = si->io.pck_rcv;
1091                 tcp_ack = si->io.pck_snd;
1092                 tcp_ctl = 0x14; /* RST,ACK */
1093
1094                 break;
1095
1096         case SWRAP_SENDTO:
1097                 src_addr = (const struct sockaddr_in *)si->myname;
1098                 dest_addr = (const struct sockaddr_in *)addr;
1099
1100                 si->io.pck_snd += len;
1101
1102                 break;
1103
1104         case SWRAP_SENDTO_UNREACH:
1105                 dest_addr = (const struct sockaddr_in *)si->myname;
1106                 src_addr = (const struct sockaddr_in *)addr;
1107
1108                 unreachable = 1;
1109
1110                 break;
1111
1112         case SWRAP_RECVFROM:
1113                 dest_addr = (const struct sockaddr_in *)si->myname;
1114                 src_addr = (const struct sockaddr_in *)addr;
1115
1116                 si->io.pck_rcv += len;
1117
1118                 break;
1119
1120         case SWRAP_CLOSE_SEND:
1121                 if (si->type != SOCK_STREAM) return NULL;
1122
1123                 src_addr = (const struct sockaddr_in *)si->myname;
1124                 dest_addr = (const struct sockaddr_in *)si->peername;
1125
1126                 tcp_seq = si->io.pck_snd;
1127                 tcp_ack = si->io.pck_rcv;
1128                 tcp_ctl = 0x11; /* FIN, ACK */
1129
1130                 si->io.pck_snd += 1;
1131
1132                 break;
1133
1134         case SWRAP_CLOSE_RECV:
1135                 if (si->type != SOCK_STREAM) return NULL;
1136
1137                 dest_addr = (const struct sockaddr_in *)si->myname;
1138                 src_addr = (const struct sockaddr_in *)si->peername;
1139
1140                 tcp_seq = si->io.pck_rcv;
1141                 tcp_ack = si->io.pck_snd;
1142                 tcp_ctl = 0x11; /* FIN,ACK */
1143
1144                 si->io.pck_rcv += 1;
1145
1146                 break;
1147
1148         case SWRAP_CLOSE_ACK:
1149                 if (si->type != SOCK_STREAM) return NULL;
1150
1151                 src_addr = (const struct sockaddr_in *)si->myname;
1152                 dest_addr = (const struct sockaddr_in *)si->peername;
1153
1154                 tcp_seq = si->io.pck_snd;
1155                 tcp_ack = si->io.pck_rcv;
1156                 tcp_ctl = 0x10; /* ACK */
1157
1158                 break;
1159         default:
1160                 return NULL;
1161         }
1162
1163         swrapGetTimeOfDay(&tv);
1164
1165         return swrap_packet_init(&tv, src_addr, dest_addr, si->type,
1166                                    (const unsigned char *)buf, len,
1167                                    tcp_seq, tcp_ack, tcp_ctl, unreachable,
1168                                    packet_len);
1169 }
1170
1171 static void swrap_dump_packet(struct socket_info *si,
1172                                                           const struct sockaddr *addr,
1173                                                           enum swrap_packet_type type,
1174                                                           const void *buf, size_t len)
1175 {
1176         const char *file_name;
1177         struct swrap_packet *packet;
1178         size_t packet_len = 0;
1179         int fd;
1180
1181         file_name = socket_wrapper_pcap_file();
1182         if (!file_name) {
1183                 return;
1184         }
1185
1186         packet = swrap_marshall_packet(si, addr, type, buf, len, &packet_len);
1187         if (!packet) {
1188                 return;
1189         }
1190
1191         fd = swrap_get_pcap_fd(file_name);
1192         if (fd != -1) {
1193                 write(fd, packet, packet_len);
1194         }
1195
1196         free(packet);
1197 }
1198
1199 _PUBLIC_ int swrap_socket(int family, int type, int protocol)
1200 {
1201         struct socket_info *si;
1202         int fd;
1203
1204         if (!socket_wrapper_dir()) {
1205                 return real_socket(family, type, protocol);
1206         }
1207
1208         switch (family) {
1209         case AF_INET:
1210 #ifdef HAVE_IPV6
1211         case AF_INET6:
1212 #endif
1213                 break;
1214         case AF_UNIX:
1215                 return real_socket(family, type, protocol);
1216         default:
1217                 errno = EAFNOSUPPORT;
1218                 return -1;
1219         }
1220
1221         switch (type) {
1222         case SOCK_STREAM:
1223                 break;
1224         case SOCK_DGRAM:
1225                 break;
1226         default:
1227                 errno = EPROTONOSUPPORT;
1228                 return -1;
1229         }
1230
1231         switch (protocol) {
1232         case 0:
1233                 break;
1234         case 6:
1235                 if (type == SOCK_STREAM) {
1236                         break;
1237                 }
1238                 /*fall through*/
1239         case 17:
1240                 if (type == SOCK_DGRAM) {
1241                         break;
1242                 }
1243                 /*fall through*/
1244         default:
1245                 errno = EPROTONOSUPPORT;
1246                 return -1;
1247         }
1248
1249         fd = real_socket(AF_UNIX, type, 0);
1250
1251         if (fd == -1) return -1;
1252
1253         si = (struct socket_info *)calloc(1, sizeof(struct socket_info));
1254
1255         si->family = family;
1256         si->type = type;
1257         si->protocol = protocol;
1258         si->fd = fd;
1259
1260         SWRAP_DLIST_ADD(sockets, si);
1261
1262         return si->fd;
1263 }
1264
1265 _PUBLIC_ int swrap_accept(int s, struct sockaddr *addr, socklen_t *addrlen)
1266 {
1267         struct socket_info *parent_si, *child_si;
1268         int fd;
1269         struct sockaddr_un un_addr;
1270         socklen_t un_addrlen = sizeof(un_addr);
1271         struct sockaddr_un un_my_addr;
1272         socklen_t un_my_addrlen = sizeof(un_my_addr);
1273         struct sockaddr *my_addr;
1274         socklen_t my_addrlen, len;
1275         int ret;
1276
1277         parent_si = find_socket_info(s);
1278         if (!parent_si) {
1279                 return real_accept(s, addr, addrlen);
1280         }
1281
1282         /*
1283          * assume out sockaddr have the same size as the in parent
1284          * socket family
1285          */
1286         my_addrlen = socket_length(parent_si->family);
1287         if (my_addrlen <= 0) {
1288                 errno = EINVAL;
1289                 return -1;
1290         }
1291
1292         my_addr = (struct sockaddr *)malloc(my_addrlen);
1293         if (my_addr == NULL) {
1294                 return -1;
1295         }
1296
1297         memset(&un_addr, 0, sizeof(un_addr));
1298         memset(&un_my_addr, 0, sizeof(un_my_addr));
1299
1300         ret = real_accept(s, (struct sockaddr *)&un_addr, &un_addrlen);
1301         if (ret == -1) {
1302                 free(my_addr);
1303                 return ret;
1304         }
1305
1306         fd = ret;
1307
1308         len = my_addrlen;
1309         ret = sockaddr_convert_from_un(parent_si, &un_addr, un_addrlen,
1310                                        parent_si->family, my_addr, &len);
1311         if (ret == -1) {
1312                 free(my_addr);
1313                 close(fd);
1314                 return ret;
1315         }
1316
1317         child_si = (struct socket_info *)malloc(sizeof(struct socket_info));
1318         memset(child_si, 0, sizeof(*child_si));
1319
1320         child_si->fd = fd;
1321         child_si->family = parent_si->family;
1322         child_si->type = parent_si->type;
1323         child_si->protocol = parent_si->protocol;
1324         child_si->bound = 1;
1325         child_si->is_server = 1;
1326
1327         child_si->peername_len = len;
1328         child_si->peername = sockaddr_dup(my_addr, len);
1329
1330         if (addr != NULL && addrlen != NULL) {
1331             *addrlen = len;
1332             if (*addrlen >= len)
1333                 memcpy(addr, my_addr, len);
1334             *addrlen = 0;
1335         }
1336
1337         ret = real_getsockname(fd, (struct sockaddr *)&un_my_addr, &un_my_addrlen);
1338         if (ret == -1) {
1339                 free(child_si);
1340                 close(fd);
1341                 return ret;
1342         }
1343
1344         len = my_addrlen;
1345         ret = sockaddr_convert_from_un(child_si, &un_my_addr, un_my_addrlen,
1346                                        child_si->family, my_addr, &len);
1347         if (ret == -1) {
1348                 free(child_si);
1349                 free(my_addr);
1350                 close(fd);
1351                 return ret;
1352         }
1353
1354         child_si->myname_len = len;
1355         child_si->myname = sockaddr_dup(my_addr, len);
1356         free(my_addr);
1357
1358         SWRAP_DLIST_ADD(sockets, child_si);
1359
1360         swrap_dump_packet(child_si, addr, SWRAP_ACCEPT_SEND, NULL, 0);
1361         swrap_dump_packet(child_si, addr, SWRAP_ACCEPT_RECV, NULL, 0);
1362         swrap_dump_packet(child_si, addr, SWRAP_ACCEPT_ACK, NULL, 0);
1363
1364         return fd;
1365 }
1366
1367 static int autobind_start_init;
1368 static int autobind_start;
1369
1370 /* using sendto() or connect() on an unbound socket would give the
1371    recipient no way to reply, as unlike UDP and TCP, a unix domain
1372    socket can't auto-assign emphemeral port numbers, so we need to
1373    assign it here */
1374 static int swrap_auto_bind(struct socket_info *si)
1375 {
1376         struct sockaddr_un un_addr;
1377         int i;
1378         char type;
1379         int ret;
1380         int port;
1381         struct stat st;
1382
1383         if (autobind_start_init != 1) {
1384                 autobind_start_init = 1;
1385                 autobind_start = getpid();
1386                 autobind_start %= 50000;
1387                 autobind_start += 10000;
1388         }
1389
1390         un_addr.sun_family = AF_UNIX;
1391
1392         switch (si->family) {
1393         case AF_INET: {
1394                 struct sockaddr_in in;
1395
1396                 switch (si->type) {
1397                 case SOCK_STREAM:
1398                         type = SOCKET_TYPE_CHAR_TCP;
1399                         break;
1400                 case SOCK_DGRAM:
1401                         type = SOCKET_TYPE_CHAR_UDP;
1402                         break;
1403                 default:
1404                     errno = ESOCKTNOSUPPORT;
1405                     return -1;
1406                 }
1407
1408                 memset(&in, 0, sizeof(in));
1409                 in.sin_family = AF_INET;
1410                 in.sin_addr.s_addr = htonl(127<<24 |
1411                                            socket_wrapper_default_iface());
1412
1413                 si->myname_len = sizeof(in);
1414                 si->myname = sockaddr_dup(&in, si->myname_len);
1415                 break;
1416         }
1417 #ifdef HAVE_IPV6
1418         case AF_INET6: {
1419                 struct sockaddr_in6 in6;
1420
1421                 switch (si->type) {
1422                 case SOCK_STREAM:
1423                         type = SOCKET_TYPE_CHAR_TCP_V6;
1424                         break;
1425                 case SOCK_DGRAM:
1426                         type = SOCKET_TYPE_CHAR_UDP_V6;
1427                         break;
1428                 default:
1429                     errno = ESOCKTNOSUPPORT;
1430                     return -1;
1431                 }
1432
1433                 memset(&in6, 0, sizeof(in6));
1434                 in6.sin6_family = AF_INET6;
1435                 in6.sin6_addr.s6_addr[0] = SW_IPV6_ADDRESS;
1436                 si->myname_len = sizeof(in6);
1437                 si->myname = sockaddr_dup(&in6, si->myname_len);
1438                 break;
1439         }
1440 #endif
1441         default:
1442                 errno = ESOCKTNOSUPPORT;
1443                 return -1;
1444         }
1445
1446         if (autobind_start > 60000) {
1447                 autobind_start = 10000;
1448         }
1449
1450         for (i=0;i<1000;i++) {
1451                 port = autobind_start + i;
1452                 snprintf(un_addr.sun_path, sizeof(un_addr.sun_path),
1453                          "%s/"SOCKET_FORMAT, socket_wrapper_dir(),
1454                          type, socket_wrapper_default_iface(), port);
1455                 if (stat(un_addr.sun_path, &st) == 0) continue;
1456
1457                 ret = real_bind(si->fd, (struct sockaddr *)&un_addr, sizeof(un_addr));
1458                 if (ret == -1) return ret;
1459
1460                 si->tmp_path = strdup(un_addr.sun_path);
1461                 si->bound = 1;
1462                 autobind_start = port + 1;
1463                 break;
1464         }
1465         if (i == 1000) {
1466                 errno = ENFILE;
1467                 return -1;
1468         }
1469
1470         set_port(si->family, port, si->myname);
1471
1472         return 0;
1473 }
1474
1475
1476 _PUBLIC_ int swrap_connect(int s, const struct sockaddr *serv_addr, socklen_t addrlen)
1477 {
1478         int ret;
1479         struct sockaddr_un un_addr;
1480         struct socket_info *si = find_socket_info(s);
1481
1482         if (!si) {
1483                 return real_connect(s, serv_addr, addrlen);
1484         }
1485
1486         if (si->bound == 0) {
1487                 ret = swrap_auto_bind(si);
1488                 if (ret == -1) return -1;
1489         }
1490
1491         if (si->family != serv_addr->sa_family) {
1492                 errno = EINVAL;
1493                 return -1;
1494         }
1495
1496         ret = sockaddr_convert_to_un(si, (const struct sockaddr *)serv_addr, addrlen, &un_addr, 0, NULL);
1497         if (ret == -1) return -1;
1498
1499         swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_SEND, NULL, 0);
1500
1501         ret = real_connect(s, (struct sockaddr *)&un_addr,
1502                            sizeof(struct sockaddr_un));
1503
1504         /* to give better errors */
1505         if (ret == -1 && errno == ENOENT) {
1506                 errno = EHOSTUNREACH;
1507         }
1508
1509         if (ret == 0) {
1510                 si->peername_len = addrlen;
1511                 si->peername = sockaddr_dup(serv_addr, addrlen);
1512
1513                 swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_RECV, NULL, 0);
1514                 swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_ACK, NULL, 0);
1515         } else {
1516                 swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_UNREACH, NULL, 0);
1517         }
1518
1519         return ret;
1520 }
1521
1522 _PUBLIC_ int swrap_bind(int s, const struct sockaddr *myaddr, socklen_t addrlen)
1523 {
1524         int ret;
1525         struct sockaddr_un un_addr;
1526         struct socket_info *si = find_socket_info(s);
1527
1528         if (!si) {
1529                 return real_bind(s, myaddr, addrlen);
1530         }
1531
1532         si->myname_len = addrlen;
1533         si->myname = sockaddr_dup(myaddr, addrlen);
1534
1535         ret = sockaddr_convert_to_un(si, (const struct sockaddr *)myaddr, addrlen, &un_addr, 1, &si->bcast);
1536         if (ret == -1) return -1;
1537
1538         unlink(un_addr.sun_path);
1539
1540         ret = real_bind(s, (struct sockaddr *)&un_addr,
1541                         sizeof(struct sockaddr_un));
1542
1543         if (ret == 0) {
1544                 si->bound = 1;
1545         }
1546
1547         return ret;
1548 }
1549
1550 _PUBLIC_ int swrap_listen(int s, int backlog)
1551 {
1552         int ret;
1553         struct socket_info *si = find_socket_info(s);
1554
1555         if (!si) {
1556                 return real_listen(s, backlog);
1557         }
1558
1559         ret = real_listen(s, backlog);
1560
1561         return ret;
1562 }
1563
1564 _PUBLIC_ int swrap_getpeername(int s, struct sockaddr *name, socklen_t *addrlen)
1565 {
1566         struct socket_info *si = find_socket_info(s);
1567
1568         if (!si) {
1569                 return real_getpeername(s, name, addrlen);
1570         }
1571
1572         if (!si->peername)
1573         {
1574                 errno = ENOTCONN;
1575                 return -1;
1576         }
1577
1578         memcpy(name, si->peername, si->peername_len);
1579         *addrlen = si->peername_len;
1580
1581         return 0;
1582 }
1583
1584 _PUBLIC_ int swrap_getsockname(int s, struct sockaddr *name, socklen_t *addrlen)
1585 {
1586         struct socket_info *si = find_socket_info(s);
1587
1588         if (!si) {
1589                 return real_getsockname(s, name, addrlen);
1590         }
1591
1592         memcpy(name, si->myname, si->myname_len);
1593         *addrlen = si->myname_len;
1594
1595         return 0;
1596 }
1597
1598 _PUBLIC_ int swrap_getsockopt(int s, int level, int optname, void *optval, socklen_t *optlen)
1599 {
1600         struct socket_info *si = find_socket_info(s);
1601
1602         if (!si) {
1603                 return real_getsockopt(s, level, optname, optval, optlen);
1604         }
1605
1606         if (level == SOL_SOCKET) {
1607                 return real_getsockopt(s, level, optname, optval, optlen);
1608         }
1609
1610         errno = ENOPROTOOPT;
1611         return -1;
1612 }
1613
1614 _PUBLIC_ int swrap_setsockopt(int s, int  level,  int  optname,  const  void  *optval, socklen_t optlen)
1615 {
1616         struct socket_info *si = find_socket_info(s);
1617
1618         if (!si) {
1619                 return real_setsockopt(s, level, optname, optval, optlen);
1620         }
1621
1622         if (level == SOL_SOCKET) {
1623                 return real_setsockopt(s, level, optname, optval, optlen);
1624         }
1625
1626         switch (si->family) {
1627         case AF_INET:
1628                 return 0;
1629         default:
1630                 errno = ENOPROTOOPT;
1631                 return -1;
1632         }
1633 }
1634
1635 _PUBLIC_ ssize_t swrap_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlen)
1636 {
1637         struct sockaddr_un un_addr;
1638         socklen_t un_addrlen = sizeof(un_addr);
1639         int ret;
1640         struct socket_info *si = find_socket_info(s);
1641
1642         if (!si) {
1643                 return real_recvfrom(s, buf, len, flags, from, fromlen);
1644         }
1645
1646         len = MIN(len, 1500);
1647
1648         /* irix 6.4 forgets to null terminate the sun_path string :-( */
1649         memset(&un_addr, 0, sizeof(un_addr));
1650         ret = real_recvfrom(s, buf, len, flags, (struct sockaddr *)&un_addr, &un_addrlen);
1651         if (ret == -1)
1652                 return ret;
1653
1654         if (sockaddr_convert_from_un(si, &un_addr, un_addrlen,
1655                                      si->family, from, fromlen) == -1) {
1656                 return -1;
1657         }
1658
1659         swrap_dump_packet(si, from, SWRAP_RECVFROM, buf, ret);
1660
1661         return ret;
1662 }
1663
1664
1665 _PUBLIC_ ssize_t swrap_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen)
1666 {
1667         struct sockaddr_un un_addr;
1668         int ret;
1669         struct socket_info *si = find_socket_info(s);
1670         int bcast = 0;
1671
1672         if (!si) {
1673                 return real_sendto(s, buf, len, flags, to, tolen);
1674         }
1675
1676         len = MIN(len, 1500);
1677
1678         switch (si->type) {
1679         case SOCK_STREAM:
1680                 ret = real_send(s, buf, len, flags);
1681                 break;
1682         case SOCK_DGRAM:
1683                 if (si->bound == 0) {
1684                         ret = swrap_auto_bind(si);
1685                         if (ret == -1) return -1;
1686                 }
1687
1688                 ret = sockaddr_convert_to_un(si, to, tolen, &un_addr, 0, &bcast);
1689                 if (ret == -1) return -1;
1690
1691                 if (bcast) {
1692                         struct stat st;
1693                         unsigned int iface;
1694                         unsigned int prt = ntohs(((const struct sockaddr_in *)to)->sin_port);
1695                         char type;
1696
1697                         type = SOCKET_TYPE_CHAR_UDP;
1698
1699                         for(iface=0; iface <= MAX_WRAPPED_INTERFACES; iface++) {
1700                                 snprintf(un_addr.sun_path, sizeof(un_addr.sun_path), "%s/"SOCKET_FORMAT,
1701                                          socket_wrapper_dir(), type, iface, prt);
1702                                 if (stat(un_addr.sun_path, &st) != 0) continue;
1703
1704                                 /* ignore the any errors in broadcast sends */
1705                                 real_sendto(s, buf, len, flags, (struct sockaddr *)&un_addr, sizeof(un_addr));
1706                         }
1707
1708                         swrap_dump_packet(si, to, SWRAP_SENDTO, buf, len);
1709
1710                         return len;
1711                 }
1712
1713                 ret = real_sendto(s, buf, len, flags, (struct sockaddr *)&un_addr, sizeof(un_addr));
1714                 break;
1715         default:
1716                 ret = -1;
1717                 errno = EHOSTUNREACH;
1718                 break;
1719         }
1720
1721         /* to give better errors */
1722         if (ret == -1 && errno == ENOENT) {
1723                 errno = EHOSTUNREACH;
1724         }
1725
1726         if (ret == -1) {
1727                 swrap_dump_packet(si, to, SWRAP_SENDTO, buf, len);
1728                 swrap_dump_packet(si, to, SWRAP_SENDTO_UNREACH, buf, len);
1729         } else {
1730                 swrap_dump_packet(si, to, SWRAP_SENDTO, buf, ret);
1731         }
1732
1733         return ret;
1734 }
1735
1736 _PUBLIC_ int swrap_ioctl(int s, int r, void *p)
1737 {
1738         int ret;
1739         struct socket_info *si = find_socket_info(s);
1740         int value;
1741
1742         if (!si) {
1743                 return real_ioctl(s, r, p);
1744         }
1745
1746         ret = real_ioctl(s, r, p);
1747
1748         switch (r) {
1749         case FIONREAD:
1750                 value = *((int *)p);
1751                 if (ret == -1 && errno != EAGAIN && errno != ENOBUFS) {
1752                         swrap_dump_packet(si, NULL, SWRAP_PENDING_RST, NULL, 0);
1753                 } else if (value == 0) { /* END OF FILE */
1754                         swrap_dump_packet(si, NULL, SWRAP_PENDING_RST, NULL, 0);
1755                 }
1756                 break;
1757         }
1758
1759         return ret;
1760 }
1761
1762 _PUBLIC_ ssize_t swrap_recv(int s, void *buf, size_t len, int flags)
1763 {
1764         int ret;
1765         struct socket_info *si = find_socket_info(s);
1766
1767         if (!si) {
1768                 return real_recv(s, buf, len, flags);
1769         }
1770
1771         len = MIN(len, 1500);
1772
1773         ret = real_recv(s, buf, len, flags);
1774         if (ret == -1 && errno != EAGAIN && errno != ENOBUFS) {
1775                 swrap_dump_packet(si, NULL, SWRAP_RECV_RST, NULL, 0);
1776         } else if (ret == 0) { /* END OF FILE */
1777                 swrap_dump_packet(si, NULL, SWRAP_RECV_RST, NULL, 0);
1778         } else {
1779                 swrap_dump_packet(si, NULL, SWRAP_RECV, buf, ret);
1780         }
1781
1782         return ret;
1783 }
1784
1785
1786 _PUBLIC_ ssize_t swrap_send(int s, const void *buf, size_t len, int flags)
1787 {
1788         int ret;
1789         struct socket_info *si = find_socket_info(s);
1790
1791         if (!si) {
1792                 return real_send(s, buf, len, flags);
1793         }
1794
1795         len = MIN(len, 1500);
1796
1797         ret = real_send(s, buf, len, flags);
1798
1799         if (ret == -1) {
1800                 swrap_dump_packet(si, NULL, SWRAP_SEND, buf, len);
1801                 swrap_dump_packet(si, NULL, SWRAP_SEND_RST, NULL, 0);
1802         } else {
1803                 swrap_dump_packet(si, NULL, SWRAP_SEND, buf, ret);
1804         }
1805
1806         return ret;
1807 }
1808
1809 _PUBLIC_ int swrap_close(int fd)
1810 {
1811         struct socket_info *si = find_socket_info(fd);
1812         int ret;
1813
1814         if (!si) {
1815                 return real_close(fd);
1816         }
1817
1818         SWRAP_DLIST_REMOVE(sockets, si);
1819
1820         if (si->myname && si->peername) {
1821                 swrap_dump_packet(si, NULL, SWRAP_CLOSE_SEND, NULL, 0);
1822         }
1823
1824         ret = real_close(fd);
1825
1826         if (si->myname && si->peername) {
1827                 swrap_dump_packet(si, NULL, SWRAP_CLOSE_RECV, NULL, 0);
1828                 swrap_dump_packet(si, NULL, SWRAP_CLOSE_ACK, NULL, 0);
1829         }
1830
1831         if (si->path) free(si->path);
1832         if (si->myname) free(si->myname);
1833         if (si->peername) free(si->peername);
1834         if (si->tmp_path) {
1835                 unlink(si->tmp_path);
1836                 free(si->tmp_path);
1837         }
1838         free(si);
1839
1840         return ret;
1841 }