1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
|
// Copyright (C) 2011-2015 Internet Systems Consortium, Inc. ("ISC")
//
// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
#include "sockcreator.h"
#include <util/io/fd.h>
#include <util/io/sockaddr_util.h>
#include <cerrno>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
using namespace isc::util::io;
using namespace isc::util::io::internal;
using namespace isc::socket_creator;
namespace {
// Simple wrappers for read_data/write_data that throw an exception on error.
void
readMessage(const int fd, void* where, const size_t length) {
if (read_data(fd, where, length) < length) {
isc_throw(ReadError, "Error reading from socket creator client");
}
}
void
writeMessage(const int fd, const void* what, const size_t length) {
if (!write_data(fd, what, length)) {
isc_throw(WriteError, "Error writing to socket creator client");
}
}
// Exit on a protocol error after informing the client of the problem.
void
protocolError(const int fd, const char reason = 'I') {
// Tell client we have a problem
char message[2];
message[0] = 'F';
message[1] = reason;
writeMessage(fd, message, sizeof(message));
// ... and exit
isc_throw(ProtocolError, "Fatal error, reason: " << reason);
}
// Return appropriate socket type constant for the socket type requested.
// The output_fd argument is required to report a protocol error.
int
getSocketType(const char type_code, const int output_fd) {
int socket_type = 0;
switch (type_code) {
case 'T':
socket_type = SOCK_STREAM;
break;
case 'U':
socket_type = SOCK_DGRAM;
break;
default:
protocolError(output_fd); // Does not return
}
return (socket_type);
}
// Convert return status from getSock() to a character to be sent back to
// the caller.
char
getErrorCode(const int status) {
char error_code = ' ';
switch (status) {
case -1:
error_code = 'S';
break;
case -2:
error_code = 'B';
break;
default:
isc_throw(InternalError, "Error creating socket");
}
return (error_code);
}
// Handle the request from the client.
//
// Reads the type and family of socket required, creates the socket and returns
// it to the client.
//
// The arguments passed (and the exceptions thrown) are the same as those for
// run().
void
handleRequest(const int input_fd, const int output_fd,
const get_sock_t get_sock, const send_fd_t send_fd_fun,
const close_t close_fun)
{
// Read the message from the client
char type[2];
readMessage(input_fd, type, sizeof(type));
// Decide what type of socket is being asked for
const int sock_type = getSocketType(type[0], output_fd);
// Read the address they ask for depending on what address family was
// specified.
sockaddr* addr = NULL;
size_t addr_len = 0;
sockaddr_in addr_in;
sockaddr_in6 addr_in6;
switch (type[1]) { // The address family
// The casting to apparently incompatible types is required by the
// C low-level interface.
case '4':
addr = convertSockAddr(&addr_in);
addr_len = sizeof(addr_in);
memset(&addr_in, 0, sizeof(addr_in));
addr_in.sin_family = AF_INET;
readMessage(input_fd, &addr_in.sin_port, sizeof(addr_in.sin_port));
readMessage(input_fd, &addr_in.sin_addr.s_addr,
sizeof(addr_in.sin_addr.s_addr));
break;
case '6':
addr = convertSockAddr(&addr_in6);
addr_len = sizeof(addr_in6);
memset(&addr_in6, 0, sizeof(addr_in6));
addr_in6.sin6_family = AF_INET6;
readMessage(input_fd, &addr_in6.sin6_port,
sizeof(addr_in6.sin6_port));
readMessage(input_fd, &addr_in6.sin6_addr.s6_addr,
sizeof(addr_in6.sin6_addr.s6_addr));
break;
default:
protocolError(output_fd);
}
// Obtain the socket
const int result = get_sock(sock_type, addr, addr_len, close_fun);
if (result >= 0) {
// Got the socket, send it to the client.
writeMessage(output_fd, "S", 1);
if (send_fd_fun(output_fd, result) != 0) {
// Error. Close the socket (ignore any error from that operation)
// and abort.
close_fun(result);
isc_throw(InternalError, "Error sending descriptor");
}
// Successfully sent the socket, so free up resources we still hold
// for it.
if (close_fun(result) == -1) {
isc_throw(InternalError, "Error closing socket");
}
} else {
// Error. Tell the client.
char error_message[2];
error_message[0] = 'E';
error_message[1] = getErrorCode(result);
writeMessage(output_fd, error_message, sizeof(error_message));
// ...and append the reason code to the error message
const int error_number = errno;
writeMessage(output_fd, &error_number, sizeof(error_number));
}
}
// Sets the MTU related flags for IPv6 UDP sockets.
// It is borrowed from bind-9 lib/isc/unix/socket.c and modified
// to compile here.
//
// The function returns -2 if it fails or the socket file descriptor
// on success (for convenience, so the result can be just returned).
int
mtu(int fd) {
#ifdef IPV6_USE_MIN_MTU /* RFC 3542, not too common yet*/
const int on(1);
// use minimum MTU
if (setsockopt(fd, IPPROTO_IPV6, IPV6_USE_MIN_MTU, &on, sizeof(on)) < 0) {
return (-2);
}
#else // Try the following as fallback
#ifdef IPV6_MTU
// Use minimum MTU on systems that don't have the IPV6_USE_MIN_MTU
const int mtu = 1280;
if (setsockopt(fd, IPPROTO_IPV6, IPV6_MTU, &mtu, sizeof(mtu)) < 0) {
return (-2);
}
#endif
#if defined(IPV6_MTU_DISCOVER) && defined(IPV6_PMTUDISC_DONT)
// Turn off Path MTU discovery on IPv6/UDP sockets.
const int action = IPV6_PMTUDISC_DONT;
if (setsockopt(fd, IPPROTO_IPV6, IPV6_MTU_DISCOVER, &action,
sizeof(action)) < 0) {
return (-2);
}
#endif
#endif
return (fd);
}
// This one closes the socket if result is negative. Used not to leak socket
// on error.
int maybeClose(const int result, const int socket, const close_t close_fun) {
if (result < 0) {
if (close_fun(socket) == -1) {
isc_throw(InternalError, "Error closing socket");
}
}
return (result);
}
} // Anonymous namespace
namespace isc {
namespace socket_creator {
// Get the socket and bind to it.
int
getSock(const int type, struct sockaddr* bind_addr, const socklen_t addr_len,
const close_t close_fun) {
const int sock = socket(bind_addr->sa_family, type, 0);
if (sock == -1) {
return (-1);
}
const int on = 1;
if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on)) == -1) {
// This is part of the binding process, so it's a bind error
return (maybeClose(-2, sock, close_fun));
}
if (bind_addr->sa_family == AF_INET6 &&
setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &on, sizeof(on)) == -1) {
// This is part of the binding process, so it's a bind error
return (maybeClose(-2, sock, close_fun));
}
if (bind(sock, bind_addr, addr_len) == -1) {
return (maybeClose(-2, sock, close_fun));
}
if (type == SOCK_DGRAM && bind_addr->sa_family == AF_INET6) {
// Set some MTU flags on IPv6 UDP sockets.
return (maybeClose(mtu(sock), sock, close_fun));
}
return (sock);
}
// Main run loop.
void
run(const int input_fd, const int output_fd, get_sock_t get_sock,
send_fd_t send_fd_fun, close_t close_fun)
{
for (;;) {
char command;
readMessage(input_fd, &command, sizeof(command));
switch (command) {
case 'S': // The "get socket" command
handleRequest(input_fd, output_fd, get_sock,
send_fd_fun, close_fun);
break;
case 'T': // The "terminate" command
return;
default: // Don't recognize anything else
protocolError(output_fd);
}
}
}
} // End of the namespaces
}
|