X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=udp.c;h=aef962daa9d8cb03985ad5536238d466963aa887;hb=9c44ef13ed639445ee2e8a4037f7b3c5fcc11aa2;hp=8947058f45bb113ed9504b5bfce84b28c891cb13;hpb=5e7a5e2d42c1b06f249debca72c10ad33d157402;p=secnet.git diff --git a/udp.c b/udp.c index 8947058..aef962d 100644 --- a/udp.c +++ b/udp.c @@ -72,6 +72,34 @@ static int udp_socks_beforepoll(void *state, struct pollfd *fds, int *nfds_io, return 0; } +const char *af_name(int af) +{ + switch (af) { + case AF_INET6: return "IPv6"; + case AF_INET: return "IPv4"; + case 0: return "(any)"; + default: abort(); + } +} + +void udp_sock_experienced(struct log_if *lg, struct udpcommon *uc, + const char *socksdesc, struct udpsock *us, + bool_t recvsend, int af, + int r, int errnoval) +{ + bool_t success=r>=0; + if (us->experienced[recvsend][af][success]++) + return; + lg_perror(lg, uc->cc.cl.description, &uc->cc.loc, + success ? M_INFO : M_WARNING, + success ? 0 : errnoval, + "%s %s experiencing some %s %s%s%s", + socksdesc,iaddr_to_string(&us->addr), + success?"success":"trouble", + recvsend?"transmitting":"receiving", + af?" ":"", af?af_name(af):""); +} + static void udp_socks_afterpoll(void *state, struct pollfd *fds, int nfds) { struct udpsocks *socks=state; @@ -85,10 +113,11 @@ static void udp_socks_afterpoll(void *state, struct pollfd *fds, int nfds) struct commcommon *cc=&uc->cc; for (i=0; in_socks; i++) { + struct udpsock *us=&socks->socks[i]; if (i>=nfds) continue; if (!(fds[i].revents & POLLIN)) continue; - assert(fds[i].fd == socks->socks[i].fd); - int fd=socks->socks[i].fd; + assert(fds[i].fd == us->fd); + int fd=us->fd; do { fromlen=sizeof(from); BUF_ASSERT_FREE(cc->rbuf); @@ -103,7 +132,7 @@ static void udp_socks_afterpoll(void *state, struct pollfd *fds, int nfds) /* Check that the packet came from our poxy server; we shouldn't be contacted directly by anybody else (since they can trivially forge source addresses) */ - if (!iaddr_equal(&from,&uc->proxy)) { + if (!iaddr_equal(&from,&uc->proxy,False)) { Message(M_INFO,"udp: received packet that's not " "from the proxy\n"); BUF_FREE(cc->rbuf); @@ -134,7 +163,9 @@ static void udp_socks_afterpoll(void *state, struct pollfd *fds, int nfds) BUF_FREE(cc->rbuf); } BUF_ASSERT_FREE(cc->rbuf); - } else { + } else { /* rv<=0 */ + if (errno!=EINTR && !iswouldblock(errno)) + udp_sock_experienced(0,uc, "socket",us, 0,0, rv,errno); BUF_FREE(cc->rbuf); } } while (rv>=0); @@ -150,6 +181,7 @@ static bool_t udp_sendmsg(void *commst, struct buffer_if *buf, uint8_t *sa; if (uc->use_proxy) { + struct udpsock *us=&socks->socks[0]; sa=buf_prepend(buf,8); if (dest->ia.sa.sa_family != AF_INET) { Message(M_INFO, @@ -160,18 +192,22 @@ static bool_t udp_sendmsg(void *commst, struct buffer_if *buf, memcpy(sa,&dest->ia.sin.sin_addr,4); memset(sa+4,0,4); memcpy(sa+6,&dest->ia.sin.sin_port,2); - sendto(socks->socks[0].fd,sa,buf->size+8,0,&uc->proxy.sa, + int r=sendto(us->fd,sa,buf->size+8,0,&uc->proxy.sa, iaddr_socklen(&uc->proxy)); + udp_sock_experienced(0,uc, "proxy",us, 1,0, r,errno); buf_unprepend(buf,8); } else { int i,r; bool_t allunsupported=True; + int af=dest->ia.sa.sa_family; for (i=0; in_socks; i++) { - if (dest->ia.sa.sa_family != socks->socks[i].addr.sa.sa_family) + struct udpsock *us=&socks->socks[i]; + if (us->addr.sa.sa_family != af) /* no point even trying */ continue; - r=sendto(socks->socks[i].fd, buf->start, buf->size, 0, + r=sendto(us->fd, buf->start, buf->size, 0, &dest->ia.sa, iaddr_socklen(&dest->ia)); + udp_sock_experienced(0,uc, "socket",us, 1,af, r,errno); if (r>=0) return True; if (!(errno==EAFNOSUPPORT || errno==ENETUNREACH)) /* who knows what that error means? */ @@ -191,6 +227,34 @@ void udp_destroy_socket(struct udpcommon *uc, struct udpsock *us) } } +#define FAIL_LG 0, cc->cl.description, &cc->loc, failmsgclass +#define FAIL(...) do{ \ + lg_perror(FAIL_LG,errno,__VA_ARGS__); \ + goto failed; \ + }while(0) + +static bool_t record_socket_gotaddr(struct udpcommon *uc, struct udpsock *us, + int failmsgclass) +{ + struct commcommon *cc=&uc->cc; + socklen_t salen=sizeof(us->addr); + int r=getsockname(us->fd,&us->addr.sa,&salen); + if (r) FAIL("getsockname()"); + if (salen>sizeof(us->addr)) { errno=0; FAIL("getsockname() length"); } + return True; + + failed: + return False; +} + +bool_t udp_import_socket(struct udpcommon *uc, struct udpsock *us, + int failmsgclass, int fd) +{ + FILLZERO(us->experienced); + us->fd=fd; + return record_socket_gotaddr(uc,us,failmsgclass); +} + bool_t udp_make_socket(struct udpcommon *uc, struct udpsock *us, int failmsgclass) { @@ -198,16 +262,10 @@ bool_t udp_make_socket(struct udpcommon *uc, struct udpsock *us, struct commcommon *cc=&uc->cc; us->fd=-1; -#define FAIL_LG 0, cc->cl.description, &cc->loc, failmsgclass -#define FAIL(...) do{ \ - lg_perror(FAIL_LG,errno,__VA_ARGS__); \ - goto failed; \ - }while(0) - + FILLZERO(us->experienced); us->fd=socket(addr->sa.sa_family, SOCK_DGRAM, IPPROTO_UDP); if (us->fd<0) FAIL("socket"); - if (fcntl(us->fd, F_SETFL, fcntl(us->fd, F_GETFL)|O_NONBLOCK)==-1) - FAIL("fcntl(set O_NONBLOCK)"); + setnonblock(us->fd); setcloexec(us->fd); #ifdef CONFIG_IPV6 if (addr->sa.sa_family==AF_INET6) { @@ -282,14 +340,18 @@ bool_t udp_make_socket(struct udpcommon *uc, struct udpsock *us, if (bind(us->fd, &addr->sa, iaddr_socklen(addr))!=0) FAIL("bind (%s)",iaddr_to_string(addr)); } + + bool_t ok=record_socket_gotaddr(uc,us,failmsgclass); + if (!ok) goto failed; + return True; failed: udp_destroy_socket(uc,us); return False; +} #undef FAIL -} void udp_socks_register(struct udpcommon *uc, struct udpsocks *socks) { @@ -304,6 +366,19 @@ void udp_socks_deregister(struct udpcommon *uc, struct udpsocks *socks) deregister_for_poll(socks->interest); } +void udp_socks_childpersist(struct udpcommon *uc, struct udpsocks *socks) +{ + int i; + for (i=0; in_socks; i++) + udp_destroy_socket(uc,&socks->socks[i]); +} + +static void udp_childpersist_hook(void *sst, uint32_t new_phase) +{ + struct udp *st=sst; + udp_socks_childpersist(&st->uc,&st->socks); +} + static void udp_phase_hook(void *sst, uint32_t new_phase) { struct udp *st=sst; @@ -314,6 +389,8 @@ static void udp_phase_hook(void *sst, uint32_t new_phase) udp_make_socket(uc,&socks->socks[i],M_FATAL); udp_socks_register(uc,socks); + + add_hook(PHASE_CHILDPERSIST,udp_childpersist_hook,st); } static list_t *udp_apply(closure_t *self, struct cloc loc, dict_t *context,