1/*	$NetBSD: os-local.c,v 1.6 2011/05/24 16:03:15 joerg Exp $	*/
2
3/* os-local.c -- platform-specific domain socket code */
4/* OpenLDAP: pkg/ldap/libraries/libldap/os-local.c,v 1.44.2.10 2010/04/13 20:22:59 kurt Exp */
5/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
6 *
7 * Copyright 1998-2010 The OpenLDAP Foundation.
8 * All rights reserved.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted only as authorized by the OpenLDAP
12 * Public License.
13 *
14 * A copy of this license is available in the file LICENSE in the
15 * top-level directory of the distribution or, alternatively, at
16 * <http://www.OpenLDAP.org/license.html>.
17 */
18/* Portions Copyright (c) 1995 Regents of the University of Michigan.
19 * All rights reserved.
20 */
21/* Portions (C) Copyright PADL Software Pty Ltd. 1999
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that this notice is preserved
24 * and that due credit is given to PADL Software Pty Ltd. This software
25 * is provided ``as is'' without express or implied warranty.
26 */
27
28#include "portable.h"
29
30#ifdef LDAP_PF_LOCAL
31
32#include <stdio.h>
33
34#include <ac/stdlib.h>
35
36#include <ac/errno.h>
37#include <ac/socket.h>
38#include <ac/string.h>
39#include <ac/time.h>
40#include <ac/unistd.h>
41
42#ifdef HAVE_SYS_STAT_H
43#include <sys/stat.h>
44#endif
45#ifdef HAVE_SYS_UIO_H
46#include <sys/uio.h>
47#endif
48
49#ifdef HAVE_IO_H
50#include <io.h>
51#endif /* HAVE_IO_H */
52#ifdef HAVE_FCNTL_H
53#include <fcntl.h>
54#endif
55
56#include "ldap-int.h"
57#include "ldap_defaults.h"
58
59#ifdef LDAP_DEBUG
60
61#define oslocal_debug(ld,fmt,arg1,arg2,arg3) \
62do { \
63	ldap_log_printf(ld, LDAP_DEBUG_TRACE, fmt, arg1, arg2, arg3); \
64} while(0)
65
66#else
67
68#define oslocal_debug(ld,fmt,arg1,arg2,arg3) ((void)0)
69
70#endif /* LDAP_DEBUG */
71
72static void
73ldap_pvt_set_errno(int err)
74{
75	errno = err;
76}
77
78static int
79ldap_pvt_ndelay_on(LDAP *ld, int fd)
80{
81	oslocal_debug(ld, "ldap_ndelay_on: %d\n",fd,0,0);
82	return ber_pvt_socket_set_nonblock( fd, 1 );
83}
84
85static int
86ldap_pvt_ndelay_off(LDAP *ld, int fd)
87{
88	oslocal_debug(ld, "ldap_ndelay_off: %d\n",fd,0,0);
89	return ber_pvt_socket_set_nonblock( fd, 0 );
90}
91
92static ber_socket_t
93ldap_pvt_socket(LDAP *ld)
94{
95	ber_socket_t s = socket(PF_LOCAL, SOCK_STREAM, 0);
96	oslocal_debug(ld, "ldap_new_socket: %d\n",s,0,0);
97#ifdef FD_CLOEXEC
98	fcntl(s, F_SETFD, FD_CLOEXEC);
99#endif
100	return ( s );
101}
102
103static int
104ldap_pvt_close_socket(LDAP *ld, int s)
105{
106	oslocal_debug(ld, "ldap_close_socket: %d\n",s,0,0);
107	return tcp_close(s);
108}
109
110#undef TRACE
111#define TRACE do { \
112	char ebuf[128]; \
113	oslocal_debug(ld, \
114		"ldap_is_socket_ready: errror on socket %d: errno: %d (%s)\n", \
115		s, \
116		errno, \
117		AC_STRERROR_R(errno, ebuf, sizeof ebuf)); \
118} while( 0 )
119
120/*
121 * check the socket for errors after select returned.
122 */
123static int
124ldap_pvt_is_socket_ready(LDAP *ld, int s)
125{
126	oslocal_debug(ld, "ldap_is_sock_ready: %d\n",s,0,0);
127
128#if defined( notyet ) /* && defined( SO_ERROR ) */
129{
130	int so_errno;
131	ber_socklen_t dummy = sizeof(so_errno);
132	if ( getsockopt( s, SOL_SOCKET, SO_ERROR, &so_errno, &dummy )
133		== AC_SOCKET_ERROR )
134	{
135		return -1;
136	}
137	if ( so_errno ) {
138		ldap_pvt_set_errno(so_errno);
139		TRACE;
140		return -1;
141	}
142	return 0;
143}
144#else
145{
146	/* error slippery */
147	struct sockaddr_un sa;
148	char ch;
149	ber_socklen_t dummy = sizeof(sa);
150	if ( getpeername( s, (struct sockaddr *) &sa, &dummy )
151		== AC_SOCKET_ERROR )
152	{
153		/* XXX: needs to be replace with ber_stream_read() */
154		(void)read(s, &ch, 1);
155		TRACE;
156		return -1;
157	}
158	return 0;
159}
160#endif
161	return -1;
162}
163#undef TRACE
164
165#ifdef LDAP_PF_LOCAL_SENDMSG
166static const char abandonPDU[] = {LDAP_TAG_MESSAGE, 6,
167	LDAP_TAG_MSGID, 1, 0, LDAP_REQ_ABANDON, 1, 0};
168#endif
169
170static int
171ldap_pvt_connect(LDAP *ld, ber_socket_t s, struct sockaddr_un *sa, int async)
172{
173	int rc;
174	struct timeval	tv, *opt_tv = NULL;
175
176	if ( ld->ld_options.ldo_tm_net.tv_sec >= 0 ) {
177		tv = ld->ld_options.ldo_tm_net;
178		opt_tv = &tv;
179	}
180
181	oslocal_debug(ld, "ldap_connect_timeout: fd: %d tm: %jd async: %d\n",
182		s, opt_tv ? (intmax_t)tv.tv_sec : -1, async);
183
184	if ( ldap_pvt_ndelay_on(ld, s) == -1 ) return -1;
185
186	if ( connect(s, (struct sockaddr *) sa, sizeof(struct sockaddr_un))
187		!= AC_SOCKET_ERROR )
188	{
189		if ( ldap_pvt_ndelay_off(ld, s) == -1 ) return -1;
190
191#ifdef LDAP_PF_LOCAL_SENDMSG
192	/* Send a dummy message with access rights. Remote side will
193	 * obtain our uid/gid by fstat'ing this descriptor. The
194	 * descriptor permissions must match exactly, and we also
195	 * send the socket name, which must also match.
196	 */
197sendcred:
198		{
199			int fds[2];
200			ber_socklen_t salen = sizeof(*sa);
201			if (pipe(fds) == 0) {
202				/* Abandon, noop, has no reply */
203				struct iovec iov;
204				struct msghdr msg = {0};
205# ifdef HAVE_STRUCT_MSGHDR_MSG_CONTROL
206# ifndef CMSG_SPACE
207# define CMSG_SPACE(len)	(_CMSG_ALIGN( sizeof(struct cmsghdr)) + _CMSG_ALIGN(len) )
208# endif
209# ifndef CMSG_LEN
210# define CMSG_LEN(len)		(_CMSG_ALIGN( sizeof(struct cmsghdr)) + (len) )
211# endif
212				union {
213					struct cmsghdr cm;
214					unsigned char control[CMSG_SPACE(sizeof(int))];
215				} control_un;
216				struct cmsghdr *cmsg;
217# endif /* HAVE_STRUCT_MSGHDR_MSG_CONTROL */
218				msg.msg_name = NULL;
219				msg.msg_namelen = 0;
220				iov.iov_base = (char *) abandonPDU;
221				iov.iov_len = sizeof abandonPDU;
222				msg.msg_iov = &iov;
223				msg.msg_iovlen = 1;
224# ifdef HAVE_STRUCT_MSGHDR_MSG_CONTROL
225				msg.msg_control = control_un.control;
226				msg.msg_controllen = sizeof( control_un.control );
227				msg.msg_flags = 0;
228
229				cmsg = CMSG_FIRSTHDR( &msg );
230				cmsg->cmsg_len = CMSG_LEN( sizeof(int) );
231				cmsg->cmsg_level = SOL_SOCKET;
232				cmsg->cmsg_type = SCM_RIGHTS;
233
234				*((int *)CMSG_DATA(cmsg)) = fds[0];
235# else
236				msg.msg_accrights = (char *)fds;
237				msg.msg_accrightslen = sizeof(int);
238# endif /* HAVE_STRUCT_MSGHDR_MSG_CONTROL */
239				getpeername( s, (struct sockaddr *) sa, &salen );
240				fchmod( fds[0], S_ISUID|S_IRWXU );
241				write( fds[1], sa, salen );
242				sendmsg( s, &msg, 0 );
243				close(fds[0]);
244				close(fds[1]);
245			}
246		}
247#endif
248		return 0;
249	}
250
251	if ( errno != EINPROGRESS && errno != EWOULDBLOCK ) return -1;
252
253#ifdef notyet
254	if ( async ) return -2;
255#endif
256
257#ifdef HAVE_POLL
258	{
259		struct pollfd fd;
260		int timeout = INFTIM;
261
262		if( opt_tv != NULL ) timeout = TV2MILLISEC( &tv );
263
264		fd.fd = s;
265		fd.events = POLL_WRITE;
266
267		do {
268			fd.revents = 0;
269			rc = poll( &fd, 1, timeout );
270		} while( rc == AC_SOCKET_ERROR && errno == EINTR &&
271			LDAP_BOOL_GET(&ld->ld_options, LDAP_BOOL_RESTART ));
272
273		if( rc == AC_SOCKET_ERROR ) return rc;
274
275		if( fd.revents & POLL_WRITE ) {
276			if ( ldap_pvt_is_socket_ready(ld, s) == -1 ) return -1;
277			if ( ldap_pvt_ndelay_off(ld, s) == -1 ) return -1;
278#ifdef LDAP_PF_LOCAL_SENDMSG
279			goto sendcred;
280#else
281			return ( 0 );
282#endif
283		}
284	}
285#else
286	{
287		fd_set wfds, *z=NULL;
288
289#ifdef FD_SETSIZE
290		if ( s >= FD_SETSIZE ) {
291			rc = AC_SOCKET_ERROR;
292			tcp_close( s );
293			ldap_pvt_set_errno( EMFILE );
294			return rc;
295		}
296#endif
297		do {
298			FD_ZERO(&wfds);
299			FD_SET(s, &wfds );
300			rc = select( ldap_int_tblsize, z, &wfds, z, opt_tv ? &tv : NULL );
301		} while( rc == AC_SOCKET_ERROR && errno == EINTR &&
302			LDAP_BOOL_GET(&ld->ld_options, LDAP_BOOL_RESTART ));
303
304		if( rc == AC_SOCKET_ERROR ) return rc;
305
306		if ( FD_ISSET(s, &wfds) ) {
307			if ( ldap_pvt_is_socket_ready(ld, s) == -1 ) return -1;
308			if ( ldap_pvt_ndelay_off(ld, s) == -1 ) return -1;
309#ifdef LDAP_PF_LOCAL_SENDMSG
310			goto sendcred;
311#else
312			return ( 0 );
313#endif
314		}
315	}
316#endif
317
318	oslocal_debug(ld, "ldap_connect_timeout: timed out\n",0,0,0);
319	ldap_pvt_set_errno( ETIMEDOUT );
320	return ( -1 );
321}
322
323int
324ldap_connect_to_path(LDAP *ld, Sockbuf *sb, LDAPURLDesc *srv, int async)
325{
326	struct sockaddr_un	server;
327	ber_socket_t		s;
328	int			rc;
329	const char *path = srv->lud_host;
330
331	oslocal_debug(ld, "ldap_connect_to_path\n",0,0,0);
332
333	s = ldap_pvt_socket( ld );
334	if ( s == AC_SOCKET_INVALID ) {
335		return -1;
336	}
337
338	if ( path == NULL || path[0] == '\0' ) {
339		path = LDAPI_SOCK;
340	} else {
341		if ( strlen(path) > (sizeof( server.sun_path ) - 1) ) {
342			ldap_pvt_set_errno( ENAMETOOLONG );
343			return -1;
344		}
345	}
346
347	oslocal_debug(ld, "ldap_connect_to_path: Trying %s\n", path, 0, 0);
348
349	memset( &server, '\0', sizeof(server) );
350	server.sun_family = AF_LOCAL;
351	strcpy( server.sun_path, path );
352
353	rc = ldap_pvt_connect(ld, s, &server, async);
354
355	if (rc == 0) {
356		int err;
357		err = ldap_int_connect_cbs( ld, sb, &s, srv, (struct sockaddr *)&server );
358		if ( err )
359			rc = err;
360	}
361	if ( rc ) {
362		ldap_pvt_close_socket(ld, s);
363	}
364	return rc;
365}
366#else
367static int dummy;
368#endif /* LDAP_PF_LOCAL */
369