1/*	$NetBSD: rpcb_svc_com.c,v 1.1 2010/07/26 15:53:00 pooka Exp $	*/
2
3/*
4 * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
5 * unrestricted use provided that this legend is included on all tape
6 * media and as a part of the software program in whole or part.  Users
7 * may copy or modify Sun RPC without charge, but are not authorized
8 * to license or distribute it to anyone else except as part of a product or
9 * program developed by the user.
10 *
11 * SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
12 * WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
13 * PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
14 *
15 * Sun RPC is provided with no support and without any obligation on the
16 * part of Sun Microsystems, Inc. to assist in its use, correction,
17 * modification or enhancement.
18 *
19 * SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
20 * INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
21 * OR ANY PART THEREOF.
22 *
23 * In no event will Sun Microsystems, Inc. be liable for any lost revenue
24 * or profits or other special, indirect and consequential damages, even if
25 * Sun has been advised of the possibility of such damages.
26 *
27 * Sun Microsystems, Inc.
28 * 2550 Garcia Avenue
29 * Mountain View, California  94043
30 */
31/*
32 * Copyright (c) 1986 - 1991 by Sun Microsystems, Inc.
33 */
34
35/* #ident	"@(#)rpcb_svc_com.c	1.18	94/05/02 SMI" */
36
37/*
38 * rpcb_svc_com.c
39 * The commom server procedure for the rpcbind.
40 */
41
42#include <sys/types.h>
43#include <sys/stat.h>
44#include <sys/param.h>
45#include <sys/socket.h>
46#include <rpc/rpc.h>
47#include <rpc/rpcb_prot.h>
48#include <netconfig.h>
49#include <errno.h>
50#include <syslog.h>
51#include <unistd.h>
52#include <stdio.h>
53#include <poll.h>
54#ifdef PORTMAP
55#include <netinet/in.h>
56#include <rpc/pmap_prot.h>
57#endif /* PORTMAP */
58#include <string.h>
59#include <stdlib.h>
60
61#include <rump/rump.h>
62#include <rump/rump_syscalls.h>
63
64#include "rpcbind.h"
65#include "svc_dg.h"
66#include "svc_fdset.h"
67
68#define RPC_BUF_MAX	65536	/* can be raised if required */
69
70static char emptystring[] = "";
71static int rpcb_rmtcalls;
72
73struct rmtcallfd_list {
74	int fd;
75	SVCXPRT *xprt;
76	char *netid;
77	struct rmtcallfd_list *next;
78};
79
80#define NFORWARD        64
81#define MAXTIME_OFF     300     /* 5 minutes */
82
83struct finfo {
84	int             flag;
85#define FINFO_ACTIVE    0x1
86	u_int32_t       caller_xid;
87        struct netbuf   *caller_addr;
88	u_int32_t       forward_xid;
89	int             forward_fd;
90	char            *uaddr;
91	rpcproc_t       reply_type;
92	rpcvers_t       versnum;
93	time_t          time;
94};
95static struct finfo     FINFO[NFORWARD];
96
97
98static bool_t xdr_encap_parms(XDR *, struct encap_parms *);
99static bool_t xdr_rmtcall_args(XDR *, struct r_rmtcall_args *);
100static bool_t xdr_rmtcall_result(XDR *, struct r_rmtcall_args *);
101static bool_t xdr_opaque_parms(XDR *, struct r_rmtcall_args *);
102static int find_rmtcallfd_by_netid(char *);
103static SVCXPRT *find_rmtcallxprt_by_fd(int);
104static u_int32_t forward_register(u_int32_t, struct netbuf *, int, char *,
105				    rpcproc_t, rpcvers_t);
106static struct finfo *forward_find(u_int32_t);
107static int free_slot_by_xid(u_int32_t);
108static int free_slot_by_index(int);
109static int netbufcmp(struct netbuf *, struct netbuf *);
110static struct netbuf *netbufdup(struct netbuf *);
111static void netbuffree(struct netbuf *);
112static int check_rmtcalls(struct pollfd *, int);
113static void xprt_set_caller(SVCXPRT *, struct finfo *);
114static void send_svcsyserr(SVCXPRT *, struct finfo *);
115static void handle_reply(int, SVCXPRT *);
116static void find_versions(rpcprog_t, char *, rpcvers_t *, rpcvers_t *);
117static rpcblist_ptr find_service(rpcprog_t, rpcvers_t, char *);
118static char *getowner(SVCXPRT *, char *, size_t);
119static int add_pmaplist(RPCB *);
120static int del_pmaplist(RPCB *);
121
122/*
123 * Set a mapping of program, version, netid
124 */
125/* ARGSUSED */
126void *
127rpcbproc_set_com(void *arg, struct svc_req *rqstp, SVCXPRT *transp,
128		 rpcvers_t rpcbversnum)
129{
130	RPCB *regp = (RPCB *)arg;
131	static bool_t ans;
132	char owner[64];
133
134#ifdef RPCBIND_DEBUG
135	if (debugging)
136		fprintf(stderr, "RPCB_SET request for (%lu, %lu, %s, %s) : ",
137		    (unsigned long)regp->r_prog, (unsigned long)regp->r_vers,
138		    regp->r_netid, regp->r_addr);
139#endif
140	ans = map_set(regp, getowner(transp, owner, sizeof owner));
141#ifdef RPCBIND_DEBUG
142	if (debugging)
143		fprintf(stderr, "%s\n", ans == TRUE ? "succeeded" : "failed");
144#endif
145	/* XXX: should have used some defined constant here */
146	rpcbs_set(rpcbversnum - 2, ans);
147	return (void *)&ans;
148}
149
150bool_t
151map_set(RPCB *regp, char *owner)
152{
153	RPCB reg, *a;
154	rpcblist_ptr rbl, fnd;
155
156	reg = *regp;
157	/*
158	 * check to see if already used
159	 * find_service returns a hit even if
160	 * the versions don't match, so check for it
161	 */
162	fnd = find_service(reg.r_prog, reg.r_vers, reg.r_netid);
163	if (fnd && (fnd->rpcb_map.r_vers == reg.r_vers)) {
164		if (!strcmp(fnd->rpcb_map.r_addr, reg.r_addr))
165			/*
166			 * if these match then it is already
167			 * registered so just say "OK".
168			 */
169			return (TRUE);
170		else
171			return (FALSE);
172	}
173	/*
174	 * add to the end of the list
175	 */
176	rbl = (rpcblist_ptr) malloc((u_int)sizeof (RPCBLIST));
177	if (rbl == NULL) {
178		return (FALSE);
179	}
180	a = &(rbl->rpcb_map);
181	a->r_prog = reg.r_prog;
182	a->r_vers = reg.r_vers;
183	a->r_netid = strdup(reg.r_netid);
184	a->r_addr = strdup(reg.r_addr);
185	a->r_owner = strdup(owner);
186	if (!a->r_addr || !a->r_netid || !a->r_owner) {
187		if (a->r_netid)
188			free((void *) a->r_netid);
189		if (a->r_addr)
190			free((void *) a->r_addr);
191		if (a->r_owner)
192			free((void *) a->r_owner);
193		free((void *)rbl);
194		return (FALSE);
195	}
196	rbl->rpcb_next = NULL;
197	if (list_rbl == NULL) {
198		list_rbl = rbl;
199	} else {
200		for (fnd = list_rbl; fnd->rpcb_next;
201			fnd = fnd->rpcb_next)
202			;
203		fnd->rpcb_next = rbl;
204	}
205#ifdef PORTMAP
206	(void) add_pmaplist(regp);
207#endif
208	return (TRUE);
209}
210
211/*
212 * Unset a mapping of program, version, netid
213 */
214/* ARGSUSED */
215void *
216rpcbproc_unset_com(void *arg, struct svc_req *rqstp, SVCXPRT *transp,
217		   rpcvers_t rpcbversnum)
218{
219	RPCB *regp = (RPCB *)arg;
220	static bool_t ans;
221	char owner[64];
222
223#ifdef RPCBIND_DEBUG
224	if (debugging)
225		fprintf(stderr, "RPCB_UNSET request for (%lu, %lu, %s) : ",
226		    (unsigned long)regp->r_prog, (unsigned long)regp->r_vers,
227		    regp->r_netid);
228#endif
229	ans = map_unset(regp, getowner(transp, owner, sizeof owner));
230#ifdef RPCBIND_DEBUG
231	if (debugging)
232		fprintf(stderr, "%s\n", ans == TRUE ? "succeeded" : "failed");
233#endif
234	/* XXX: should have used some defined constant here */
235	rpcbs_unset(rpcbversnum - 2, ans);
236	return (void *)&ans;
237}
238
239bool_t
240map_unset(RPCB *regp, const char *owner)
241{
242	int ans = 0;
243	rpcblist_ptr rbl, prev, tmp;
244
245	if (owner == NULL)
246		return (0);
247
248	for (prev = NULL, rbl = list_rbl; rbl; /* cstyle */) {
249		if ((rbl->rpcb_map.r_prog != regp->r_prog) ||
250			(rbl->rpcb_map.r_vers != regp->r_vers) ||
251			(regp->r_netid[0] && strcasecmp(regp->r_netid,
252				rbl->rpcb_map.r_netid))) {
253			/* both rbl & prev move forwards */
254			prev = rbl;
255			rbl = rbl->rpcb_next;
256			continue;
257		}
258		/*
259		 * Check whether appropriate uid. Unset only
260		 * if superuser or the owner itself.
261		 */
262		if (strcmp(owner, rpcbind_superuser) &&
263			strcmp(rbl->rpcb_map.r_owner, owner))
264			return (0);
265		/* found it; rbl moves forward, prev stays */
266		ans = 1;
267		tmp = rbl;
268		rbl = rbl->rpcb_next;
269		if (prev == NULL)
270			list_rbl = rbl;
271		else
272			prev->rpcb_next = rbl;
273		free((void *) tmp->rpcb_map.r_addr);
274		free((void *) tmp->rpcb_map.r_netid);
275		free((void *) tmp->rpcb_map.r_owner);
276		free((void *) tmp);
277	}
278#ifdef PORTMAP
279	if (ans)
280		(void) del_pmaplist(regp);
281#endif
282	/*
283	 * We return 1 either when the entry was not there or it
284	 * was able to unset it.  It can come to this point only if
285	 * atleast one of the conditions is true.
286	 */
287	return (1);
288}
289
290void
291delete_prog(int prog)
292{
293	RPCB reg;
294	register rpcblist_ptr rbl;
295
296	for (rbl = list_rbl; rbl != NULL; rbl = rbl->rpcb_next) {
297		if ((rbl->rpcb_map.r_prog != prog))
298			continue;
299		if (is_bound(rbl->rpcb_map.r_netid, rbl->rpcb_map.r_addr))
300			continue;
301		reg.r_prog = rbl->rpcb_map.r_prog;
302		reg.r_vers = rbl->rpcb_map.r_vers;
303		reg.r_netid = strdup(rbl->rpcb_map.r_netid);
304		(void)map_unset(&reg, rpcbind_superuser);
305		free(reg.r_netid);
306	}
307}
308
309void *
310rpcbproc_getaddr_com(RPCB *regp, struct svc_req *rqstp, SVCXPRT *transp,
311		     rpcvers_t rpcbversnum, rpcvers_t verstype)
312{
313	static char *uaddr;
314	char *saddr = NULL;
315	rpcblist_ptr fnd;
316
317	if (uaddr && uaddr[0])
318		free((void *) uaddr);
319	fnd = find_service(regp->r_prog, regp->r_vers, transp->xp_netid);
320	if (fnd && ((verstype == RPCB_ALLVERS) ||
321		    (regp->r_vers == fnd->rpcb_map.r_vers))) {
322		if (*(regp->r_addr) != '\0') {  /* may contain a hint about */
323			saddr = regp->r_addr;   /* the interface that we    */
324		}				/* should use */
325		if (!(uaddr = mergeaddr(transp, transp->xp_netid,
326				fnd->rpcb_map.r_addr, saddr))) {
327			/* Try whatever we have */
328			uaddr = strdup(fnd->rpcb_map.r_addr);
329		} else if (!uaddr[0]) {
330			/*
331			 * The server died.  Unset all versions of this prog.
332			 */
333			delete_prog(regp->r_prog);
334			uaddr = emptystring;
335		}
336	} else {
337		uaddr = emptystring;
338	}
339#ifdef RPCBIND_DEBUG
340	if (debugging)
341		fprintf(stderr, "getaddr: %s\n", uaddr);
342#endif
343	/* XXX: should have used some defined constant here */
344	rpcbs_getaddr(rpcbversnum - 2, regp->r_prog, regp->r_vers,
345		transp->xp_netid, uaddr);
346	return (void *)&uaddr;
347}
348
349/* ARGSUSED */
350void *
351rpcbproc_gettime_com(void *arg, struct svc_req *rqstp, SVCXPRT *transp,
352		     rpcvers_t rpcbversnum)
353{
354	static time_t curtime;
355
356	(void) time(&curtime);
357	return (void *)&curtime;
358}
359
360/*
361 * Convert uaddr to taddr. Should be used only by
362 * local servers/clients. (kernel level stuff only)
363 */
364/* ARGSUSED */
365void *
366rpcbproc_uaddr2taddr_com(void *arg, struct svc_req *rqstp, SVCXPRT *transp,
367			 rpcvers_t rpcbversnum)
368{
369	char **uaddrp = (char **)arg;
370	struct netconfig *nconf;
371	static struct netbuf nbuf;
372	static struct netbuf *taddr;
373
374	if (taddr) {
375		free((void *) taddr->buf);
376		free((void *) taddr);
377	}
378	if (((nconf = rpcbind_get_conf(transp->xp_netid)) == NULL) ||
379	    ((taddr = uaddr2taddr(nconf, *uaddrp)) == NULL)) {
380		(void) memset((char *)&nbuf, 0, sizeof (struct netbuf));
381		return (void *)&nbuf;
382	}
383	return (void *)taddr;
384}
385
386/*
387 * Convert taddr to uaddr. Should be used only by
388 * local servers/clients. (kernel level stuff only)
389 */
390/* ARGSUSED */
391void *
392rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp, SVCXPRT *transp,
393			 rpcvers_t rpcbversnum)
394{
395	struct netbuf *taddr = (struct netbuf *)arg;
396	static char *uaddr;
397	struct netconfig *nconf;
398
399	if (uaddr && !uaddr[0])
400		free((void *) uaddr);
401	if (((nconf = rpcbind_get_conf(transp->xp_netid)) == NULL) ||
402		((uaddr = taddr2uaddr(nconf, taddr)) == NULL)) {
403		uaddr = emptystring;
404	}
405	return (void *)&uaddr;
406}
407
408
409static bool_t
410xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
411{
412	return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
413}
414
415/*
416 * XDR remote call arguments.  It ignores the address part.
417 * written for XDR_DECODE direction only
418 */
419static bool_t
420xdr_rmtcall_args(XDR *xdrs, struct r_rmtcall_args *cap)
421{
422	/* does not get the address or the arguments */
423	if (xdr_u_int32_t(xdrs, &(cap->rmt_prog)) &&
424	    xdr_u_int32_t(xdrs, &(cap->rmt_vers)) &&
425	    xdr_u_int32_t(xdrs, &(cap->rmt_proc))) {
426		return (xdr_encap_parms(xdrs, &(cap->rmt_args)));
427	}
428	return (FALSE);
429}
430
431/*
432 * XDR remote call results along with the address.  Ignore
433 * program number, version  number and proc number.
434 * Written for XDR_ENCODE direction only.
435 */
436static bool_t
437xdr_rmtcall_result(XDR *xdrs, struct r_rmtcall_args *cap)
438{
439	bool_t result;
440
441#ifdef PORTMAP
442	if (cap->rmt_localvers == PMAPVERS) {
443		int h1, h2, h3, h4, p1, p2;
444		u_long port;
445
446		/* interpret the universal address for TCP/IP */
447		if (sscanf(cap->rmt_uaddr, "%d.%d.%d.%d.%d.%d",
448			&h1, &h2, &h3, &h4, &p1, &p2) != 6)
449			return (FALSE);
450		port = ((p1 & 0xff) << 8) + (p2 & 0xff);
451		result = xdr_u_long(xdrs, &port);
452	} else
453#endif
454		if ((cap->rmt_localvers == RPCBVERS) ||
455		    (cap->rmt_localvers == RPCBVERS4)) {
456		result = xdr_wrapstring(xdrs, &(cap->rmt_uaddr));
457	} else {
458		return (FALSE);
459	}
460	if (result == TRUE)
461		return (xdr_encap_parms(xdrs, &(cap->rmt_args)));
462	return (FALSE);
463}
464
465/*
466 * only worries about the struct encap_parms part of struct r_rmtcall_args.
467 * The arglen must already be set!!
468 */
469static bool_t
470xdr_opaque_parms(XDR *xdrs, struct r_rmtcall_args *cap)
471{
472	return (xdr_opaque(xdrs, cap->rmt_args.args, cap->rmt_args.arglen));
473}
474
475static struct rmtcallfd_list *rmthead;
476static struct rmtcallfd_list *rmttail;
477
478int
479create_rmtcall_fd(struct netconfig *nconf)
480{
481	int fd;
482	struct rmtcallfd_list *rmt;
483	SVCXPRT *xprt;
484
485	if ((fd = __rpc_nconf2fd(nconf)) == -1) {
486		if (debugging)
487			fprintf(stderr,
488	"create_rmtcall_fd: couldn't open \"%s\" (errno %d)\n",
489			nconf->nc_device, errno);
490		return (-1);
491	}
492	xprt = svc_tli_create(fd, 0, (struct t_bind *) 0, 0, 0);
493	if (xprt == NULL) {
494		if (debugging)
495			fprintf(stderr,
496				"create_rmtcall_fd: svc_tli_create failed\n");
497		return (-1);
498	}
499	rmt = (struct rmtcallfd_list *)malloc((u_int)
500		sizeof (struct rmtcallfd_list));
501	if (rmt == NULL) {
502		syslog(LOG_ERR, "create_rmtcall_fd: no memory!");
503		return (-1);
504	}
505	rmt->xprt = xprt;
506	rmt->netid = strdup(nconf->nc_netid);
507	xprt->xp_netid = rmt->netid;
508	rmt->fd = fd;
509	rmt->next = NULL;
510	if (rmthead == NULL) {
511		rmthead = rmt;
512		rmttail = rmt;
513	} else {
514		rmttail->next = rmt;
515		rmttail = rmt;
516	}
517	/* XXX not threadsafe */
518	if (fd > *get_fdsetmax())
519		*get_fdsetmax() = fd;
520	FD_SET(fd, get_fdset());
521	return (fd);
522}
523
524static int
525find_rmtcallfd_by_netid(char *netid)
526{
527	struct rmtcallfd_list *rmt;
528
529	for (rmt = rmthead; rmt != NULL; rmt = rmt->next) {
530		if (strcmp(netid, rmt->netid) == 0) {
531			return (rmt->fd);
532		}
533	}
534	return (-1);
535}
536
537static SVCXPRT *
538find_rmtcallxprt_by_fd(int fd)
539{
540	struct rmtcallfd_list *rmt;
541
542	for (rmt = rmthead; rmt != NULL; rmt = rmt->next) {
543		if (fd == rmt->fd) {
544			return (rmt->xprt);
545		}
546	}
547	return (NULL);
548}
549
550
551/*
552 * Call a remote procedure service.  This procedure is very quiet when things
553 * go wrong.  The proc is written to support broadcast rpc.  In the broadcast
554 * case, a machine should shut-up instead of complain, lest the requestor be
555 * overrun with complaints at the expense of not hearing a valid reply.
556 * When receiving a request and verifying that the service exists, we
557 *
558 *	receive the request
559 *
560 *	open a new TLI endpoint on the same transport on which we received
561 *	the original request
562 *
563 *	remember the original request's XID (which requires knowing the format
564 *	of the svc_dg_data structure)
565 *
566 *	forward the request, with a new XID, to the requested service,
567 *	remembering the XID used to send this request (for later use in
568 *	reassociating the answer with the original request), the requestor's
569 *	address, the file descriptor on which the forwarded request is
570 *	made and the service's address.
571 *
572 *	mark the file descriptor on which we anticipate receiving a reply from
573 *	the service and one to select for in our private svc_run procedure
574 *
575 * At some time in the future, a reply will be received from the service to
576 * which we forwarded the request.  At that time, we detect that the socket
577 * used was for forwarding (by looking through the finfo structures to see
578 * whether the fd corresponds to one of those) and call handle_reply() to
579 *
580 *	receive the reply
581 *
582 *	bundle the reply, along with the service's universal address
583 *
584 *	create a SVCXPRT structure and use a version of svc_sendreply
585 *	that allows us to specify the reply XID and destination, send the reply
586 *	to the original requestor.
587 */
588
589void
590rpcbproc_callit_com(struct svc_req *rqstp, SVCXPRT *transp,
591		    rpcproc_t reply_type, rpcvers_t versnum)
592{
593	register rpcblist_ptr rbl;
594	struct netconfig *nconf;
595	struct netbuf *caller;
596	struct r_rmtcall_args a;
597	char *buf_alloc = NULL, *outbufp;
598	char *outbuf_alloc = NULL;
599	char buf[RPC_BUF_MAX], outbuf[RPC_BUF_MAX];
600	struct netbuf *na = NULL;
601	struct rpc_msg call_msg;
602	int outlen;
603	u_int sendsz;
604	XDR outxdr;
605	AUTH *auth;
606	int fd = -1;
607	char *uaddr, *m_uaddr, *local_uaddr = NULL;
608	u_int32_t *xidp;
609	struct __rpc_sockinfo si;
610	struct sockaddr *localsa;
611	struct netbuf tbuf;
612
613	if (!__rpc_fd2sockinfo(transp->xp_fd, &si)) {
614		if (reply_type == RPCBPROC_INDIRECT)
615			svcerr_systemerr(transp);
616		return;
617	}
618	if (si.si_socktype != SOCK_DGRAM)
619		return;	/* Only datagram type accepted */
620	sendsz = __rpc_get_t_size(si.si_af, si.si_proto, UDPMSGSIZE);
621	if (sendsz == 0) {	/* data transfer not supported */
622		if (reply_type == RPCBPROC_INDIRECT)
623			svcerr_systemerr(transp);
624		return;
625	}
626	/*
627	 * Should be multiple of 4 for XDR.
628	 */
629	sendsz = ((sendsz + 3) / 4) * 4;
630	if (sendsz > RPC_BUF_MAX) {
631#ifdef	notyet
632		buf_alloc = alloca(sendsz);		/* not in IDR2? */
633#else
634		buf_alloc = malloc(sendsz);
635#endif	/* notyet */
636		if (buf_alloc == NULL) {
637			if (debugging)
638				fprintf(stderr,
639					"rpcbproc_callit_com:  No Memory!\n");
640			if (reply_type == RPCBPROC_INDIRECT)
641				svcerr_systemerr(transp);
642			return;
643		}
644		a.rmt_args.args = buf_alloc;
645	} else {
646		a.rmt_args.args = buf;
647	}
648
649	call_msg.rm_xid = 0;	/* For error checking purposes */
650	if (!svc_getargs(transp, (xdrproc_t) xdr_rmtcall_args, (char *) &a)) {
651		if (reply_type == RPCBPROC_INDIRECT)
652			svcerr_decode(transp);
653		if (debugging)
654			fprintf(stderr,
655			"rpcbproc_callit_com:  svc_getargs failed\n");
656		goto error;
657	}
658
659	if (!check_callit(transp, &a, versnum)) {
660		svcerr_weakauth(transp);
661		goto error;
662	}
663
664	caller = svc_getrpccaller(transp);
665#ifdef RPCBIND_DEBUG
666	if (debugging) {
667		uaddr = taddr2uaddr(rpcbind_get_conf(transp->xp_netid), caller);
668		fprintf(stderr, "%s %s req for (%lu, %lu, %lu, %s) from %s : ",
669			versnum == PMAPVERS ? "pmap_rmtcall" :
670			versnum == RPCBVERS ? "rpcb_rmtcall" :
671			versnum == RPCBVERS4 ? "rpcb_indirect" :
672			rpcbind_unknown,
673			reply_type == RPCBPROC_INDIRECT ? "indirect" : "callit",
674			(unsigned long)a.rmt_prog, (unsigned long)a.rmt_vers,
675			(unsigned long)a.rmt_proc, transp->xp_netid,
676			uaddr ? uaddr : rpcbind_unknown);
677		if (uaddr)
678			free((void *) uaddr);
679	}
680#endif
681
682	rbl = find_service(a.rmt_prog, a.rmt_vers, transp->xp_netid);
683
684	rpcbs_rmtcall(versnum - 2, reply_type, a.rmt_prog, a.rmt_vers,
685			a.rmt_proc, transp->xp_netid, rbl);
686
687	if (rbl == NULL) {
688#ifdef RPCBIND_DEBUG
689		if (debugging)
690			fprintf(stderr, "not found\n");
691#endif
692		if (reply_type == RPCBPROC_INDIRECT)
693			svcerr_noprog(transp);
694		goto error;
695	}
696	if (rbl->rpcb_map.r_vers != a.rmt_vers) {
697		if (reply_type == RPCBPROC_INDIRECT) {
698			rpcvers_t vers_low, vers_high;
699
700			find_versions(a.rmt_prog, transp->xp_netid,
701				&vers_low, &vers_high);
702			svcerr_progvers(transp, vers_low, vers_high);
703		}
704		goto error;
705	}
706
707#ifdef RPCBIND_DEBUG
708	if (debugging)
709		fprintf(stderr, "found at uaddr %s\n", rbl->rpcb_map.r_addr);
710#endif
711	/*
712	 *	Check whether this entry is valid and a server is present
713	 *	Mergeaddr() returns NULL if no such entry is present, and
714	 *	returns "" if the entry was present but the server is not
715	 *	present (i.e., it crashed).
716	 */
717	if (reply_type == RPCBPROC_INDIRECT) {
718		uaddr = mergeaddr(transp, transp->xp_netid,
719			rbl->rpcb_map.r_addr, NULL);
720		if (uaddr == NULL || uaddr[0] == '\0') {
721			svcerr_noprog(transp);
722			if (uaddr != NULL) {
723				free((void *) uaddr);
724			}
725			goto error;
726		}
727		if (uaddr != NULL) {
728			free((void *) uaddr);
729		}
730	}
731	nconf = rpcbind_get_conf(transp->xp_netid);
732	if (nconf == NULL) {
733		if (reply_type == RPCBPROC_INDIRECT)
734			svcerr_systemerr(transp);
735		if (debugging)
736			fprintf(stderr,
737			"rpcbproc_callit_com:  rpcbind_get_conf failed\n");
738		goto error;
739	}
740	localsa = local_sa(((struct sockaddr *)caller->buf)->sa_family);
741	if (localsa == NULL) {
742		if (debugging)
743			fprintf(stderr,
744			"rpcbproc_callit_com: no local address\n");
745		goto error;
746	}
747	tbuf.len = tbuf.maxlen = localsa->sa_len;
748	tbuf.buf = localsa;
749	local_uaddr =
750	    addrmerge(&tbuf, rbl->rpcb_map.r_addr, NULL, nconf->nc_netid);
751	m_uaddr = addrmerge(caller, rbl->rpcb_map.r_addr, NULL,
752			nconf->nc_netid);
753#ifdef RPCBIND_DEBUG
754	if (debugging)
755		fprintf(stderr, "merged uaddr %s\n", m_uaddr);
756#endif
757	if ((fd = find_rmtcallfd_by_netid(nconf->nc_netid)) == -1) {
758		if (reply_type == RPCBPROC_INDIRECT)
759			svcerr_systemerr(transp);
760		free((void *) m_uaddr);
761		goto error;
762	}
763	xidp = __rpcb_get_dg_xidp(transp);
764	call_msg.rm_xid = forward_register(*xidp,
765			caller, fd, m_uaddr, reply_type, versnum);
766	if (call_msg.rm_xid == 0) {
767		/*
768		 * A duplicate request for the slow server.  Let's not
769		 * beat on it any more.
770		 */
771		if (debugging)
772			fprintf(stderr,
773			"rpcbproc_callit_com:  duplicate request\n");
774		free((void *) m_uaddr);
775		goto error;
776	} else 	if (call_msg.rm_xid == -1) {
777		/*  forward_register failed.  Perhaps no memory. */
778		if (debugging)
779			fprintf(stderr,
780			"rpcbproc_callit_com:  forward_register failed\n");
781		free((void *) m_uaddr);
782		goto error;
783	}
784
785#ifdef DEBUG_RMTCALL
786	if (debugging)
787		fprintf(stderr,
788			"rpcbproc_callit_com:  original XID %x, new XID %x\n",
789				*xidp, call_msg.rm_xid);
790#endif
791	call_msg.rm_direction = CALL;
792	call_msg.rm_call.cb_rpcvers = RPC_MSG_VERSION;
793	call_msg.rm_call.cb_prog = a.rmt_prog;
794	call_msg.rm_call.cb_vers = a.rmt_vers;
795	if (sendsz > RPC_BUF_MAX) {
796#ifdef	notyet
797		outbuf_alloc = alloca(sendsz);	/* not in IDR2? */
798#else
799		outbuf_alloc = malloc(sendsz);
800#endif	/* notyet */
801		if (outbuf_alloc == NULL) {
802			if (reply_type == RPCBPROC_INDIRECT)
803				svcerr_systemerr(transp);
804			if (debugging)
805				fprintf(stderr,
806				"rpcbproc_callit_com:  No memory!\n");
807			goto error;
808		}
809		xdrmem_create(&outxdr, outbuf_alloc, sendsz, XDR_ENCODE);
810	} else {
811		xdrmem_create(&outxdr, outbuf, sendsz, XDR_ENCODE);
812	}
813	if (!xdr_callhdr(&outxdr, &call_msg)) {
814		if (reply_type == RPCBPROC_INDIRECT)
815			svcerr_systemerr(transp);
816		if (debugging)
817			fprintf(stderr,
818			"rpcbproc_callit_com:  xdr_callhdr failed\n");
819		goto error;
820	}
821	if (!xdr_u_int32_t(&outxdr, &(a.rmt_proc))) {
822		if (reply_type == RPCBPROC_INDIRECT)
823			svcerr_systemerr(transp);
824		if (debugging)
825			fprintf(stderr,
826			"rpcbproc_callit_com:  xdr_u_long failed\n");
827		goto error;
828	}
829
830	if (rqstp->rq_cred.oa_flavor == AUTH_NULL) {
831		auth = authnone_create();
832	} else if (rqstp->rq_cred.oa_flavor == AUTH_SYS) {
833		struct authunix_parms *au;
834
835		au = (struct authunix_parms *)rqstp->rq_clntcred;
836		auth = authunix_create(au->aup_machname,
837				au->aup_uid, au->aup_gid,
838				au->aup_len, au->aup_gids);
839		if (auth == NULL) /* fall back */
840			auth = authnone_create();
841	} else {
842		/* we do not support any other authentication scheme */
843		if (debugging)
844			fprintf(stderr,
845"rpcbproc_callit_com:  oa_flavor != AUTH_NONE and oa_flavor != AUTH_SYS\n");
846		if (reply_type == RPCBPROC_INDIRECT)
847			svcerr_weakauth(transp); /* XXX too strong.. */
848		goto error;
849	}
850	if (auth == NULL) {
851		if (reply_type == RPCBPROC_INDIRECT)
852			svcerr_systemerr(transp);
853		if (debugging)
854			fprintf(stderr,
855		"rpcbproc_callit_com:  authwhatever_create returned NULL\n");
856		goto error;
857	}
858	if (!AUTH_MARSHALL(auth, &outxdr)) {
859		if (reply_type == RPCBPROC_INDIRECT)
860			svcerr_systemerr(transp);
861		AUTH_DESTROY(auth);
862		if (debugging)
863			fprintf(stderr,
864		"rpcbproc_callit_com:  AUTH_MARSHALL failed\n");
865		goto error;
866	}
867	AUTH_DESTROY(auth);
868	if (!xdr_opaque_parms(&outxdr, &a)) {
869		if (reply_type == RPCBPROC_INDIRECT)
870			svcerr_systemerr(transp);
871		if (debugging)
872			fprintf(stderr,
873		"rpcbproc_callit_com:  xdr_opaque_parms failed\n");
874		goto error;
875	}
876	outlen = (int) XDR_GETPOS(&outxdr);
877	if (outbuf_alloc)
878		outbufp = outbuf_alloc;
879	else
880		outbufp = outbuf;
881
882	na = uaddr2taddr(nconf, local_uaddr);
883	if (!na) {
884		if (reply_type == RPCBPROC_INDIRECT)
885			svcerr_systemerr(transp);
886		goto error;
887	}
888
889	if (sendto(fd, outbufp, outlen, 0, (struct sockaddr *)na->buf, na->len)
890	    != outlen) {
891		if (debugging)
892			fprintf(stderr,
893	"rpcbproc_callit_com:  sendto failed:  errno %d\n", errno);
894		if (reply_type == RPCBPROC_INDIRECT)
895			svcerr_systemerr(transp);
896		goto error;
897	}
898	goto out;
899
900error:
901	if (call_msg.rm_xid != 0)
902		(void) free_slot_by_xid(call_msg.rm_xid);
903out:
904	if (local_uaddr)
905		free(local_uaddr);
906	if (buf_alloc)
907		free((void *) buf_alloc);
908	if (outbuf_alloc)
909		free((void *) outbuf_alloc);
910	if (na) {
911		free(na->buf);
912		free(na);
913	}
914}
915
916/*
917 * Makes an entry into the FIFO for the given request.
918 * If duplicate request, returns a 0, else returns the xid of its call.
919 */
920static u_int32_t
921forward_register(u_int32_t caller_xid, struct netbuf *caller_addr,
922		 int forward_fd, char *uaddr, rpcproc_t reply_type,
923		 rpcvers_t versnum)
924{
925	int		i;
926	int		j = 0;
927	time_t		min_time, time_now;
928	static u_int32_t	lastxid;
929	int		entry = -1;
930
931	min_time = FINFO[0].time;
932	time_now = time((time_t *)0);
933	/* initialization */
934	if (lastxid == 0)
935		lastxid = time_now * NFORWARD;
936
937	/*
938	 * Check if it is an duplicate entry. Then,
939	 * try to find an empty slot.  If not available, then
940	 * use the slot with the earliest time.
941	 */
942	for (i = 0; i < NFORWARD; i++) {
943		if (FINFO[i].flag & FINFO_ACTIVE) {
944			if ((FINFO[i].caller_xid == caller_xid) &&
945			    (FINFO[i].reply_type == reply_type) &&
946			    (FINFO[i].versnum == versnum) &&
947			    (!netbufcmp(FINFO[i].caller_addr,
948					    caller_addr))) {
949				FINFO[i].time = time((time_t *)0);
950				return (0);	/* Duplicate entry */
951			} else {
952				/* Should we wait any longer */
953				if ((time_now - FINFO[i].time) > MAXTIME_OFF)
954					(void) free_slot_by_index(i);
955			}
956		}
957		if (entry == -1) {
958			if ((FINFO[i].flag & FINFO_ACTIVE) == 0) {
959				entry = i;
960			} else if (FINFO[i].time < min_time) {
961				j = i;
962				min_time = FINFO[i].time;
963			}
964		}
965	}
966	if (entry != -1) {
967		/* use this empty slot */
968		j = entry;
969	} else {
970		(void) free_slot_by_index(j);
971	}
972	if ((FINFO[j].caller_addr = netbufdup(caller_addr)) == NULL) {
973		return (-1);
974	}
975	rpcb_rmtcalls++;	/* no of pending calls */
976	FINFO[j].flag = FINFO_ACTIVE;
977	FINFO[j].reply_type = reply_type;
978	FINFO[j].versnum = versnum;
979	FINFO[j].time = time_now;
980	FINFO[j].caller_xid = caller_xid;
981	FINFO[j].forward_fd = forward_fd;
982	/*
983	 * Though uaddr is not allocated here, it will still be freed
984	 * from free_slot_*().
985	 */
986	FINFO[j].uaddr = uaddr;
987	lastxid = lastxid + NFORWARD;
988	FINFO[j].forward_xid = lastxid + j;	/* encode slot */
989	return (FINFO[j].forward_xid);		/* forward on this xid */
990}
991
992static struct finfo *
993forward_find(u_int32_t reply_xid)
994{
995	int		i;
996
997	i = reply_xid % NFORWARD;
998	if (i < 0)
999		i += NFORWARD;
1000	if ((FINFO[i].flag & FINFO_ACTIVE) &&
1001	    (FINFO[i].forward_xid == reply_xid)) {
1002		return (&FINFO[i]);
1003	}
1004	return (NULL);
1005}
1006
1007static int
1008free_slot_by_xid(u_int32_t xid)
1009{
1010	int entry;
1011
1012	entry = xid % NFORWARD;
1013	if (entry < 0)
1014		entry += NFORWARD;
1015	return (free_slot_by_index(entry));
1016}
1017
1018static int
1019free_slot_by_index(int idx)
1020{
1021	struct finfo	*fi;
1022
1023	fi = &FINFO[idx];
1024	if (fi->flag & FINFO_ACTIVE) {
1025		netbuffree(fi->caller_addr);
1026		/* XXX may be too big, but can't access xprt array here */
1027		if (fi->forward_fd >= *get_fdsetmax())
1028			(*get_fdsetmax())--;
1029		free((void *) fi->uaddr);
1030		fi->flag &= ~FINFO_ACTIVE;
1031		rpcb_rmtcalls--;
1032		return (1);
1033	}
1034	return (0);
1035}
1036
1037static int
1038netbufcmp(struct netbuf *n1, struct netbuf *n2)
1039{
1040	return ((n1->len != n2->len) || memcmp(n1->buf, n2->buf, n1->len));
1041}
1042
1043static struct netbuf *
1044netbufdup(struct netbuf *ap)
1045{
1046	struct netbuf  *np;
1047
1048	np = (struct netbuf *) malloc(sizeof (struct netbuf) + ap->len);
1049	if (np) {
1050		np->maxlen = np->len = ap->len;
1051		np->buf = ((char *) np) + sizeof (struct netbuf);
1052		(void) memcpy(np->buf, ap->buf, ap->len);
1053	}
1054	return (np);
1055}
1056
1057static void
1058netbuffree(struct netbuf *ap)
1059{
1060	free((void *) ap);
1061}
1062
1063
1064#define	MASKVAL	(POLLIN | POLLPRI | POLLRDNORM | POLLRDBAND)
1065extern bool_t __svc_clean_idle(fd_set *, int, bool_t);
1066
1067void
1068my_svc_run()
1069{
1070	size_t nfds;
1071	struct pollfd pollfds[FD_SETSIZE];
1072	int poll_ret, check_ret;
1073	int n;
1074#ifdef SVC_RUN_DEBUG
1075	int i;
1076#endif
1077	register struct pollfd	*p;
1078	fd_set cleanfds;
1079
1080	for (;;) {
1081		p = pollfds;
1082		for (n = 0; n <= *get_fdsetmax(); n++) {
1083			if (FD_ISSET(n, get_fdset())) {
1084				p->fd = n;
1085				p->events = MASKVAL;
1086				p++;
1087			}
1088		}
1089		nfds = p - pollfds;
1090		poll_ret = 0;
1091#ifdef SVC_RUN_DEBUG
1092		if (debugging) {
1093			fprintf(stderr, "polling for read on fd < ");
1094			for (i = 0, p = pollfds; i < nfds; i++, p++)
1095				if (p->events)
1096					fprintf(stderr, "%d ", p->fd);
1097			fprintf(stderr, ">\n");
1098		}
1099#endif
1100		poll_ret = rump_sys_poll(pollfds, nfds, 30 * 1000);
1101		//printf("rpcbind poll got %d\n", poll_ret);
1102		switch (poll_ret) {
1103		case -1:
1104			/*
1105			 * We ignore all errors, continuing with the assumption
1106			 * that it was set by the signal handlers (or any
1107			 * other outside event) and not caused by poll().
1108			 */
1109		case 0:
1110			cleanfds = *get_fdset();
1111			__svc_clean_idle(&cleanfds, 30, FALSE);
1112			continue;
1113		default:
1114#ifdef SVC_RUN_DEBUG
1115			if (debugging) {
1116				fprintf(stderr, "poll returned read fds < ");
1117				for (i = 0, p = pollfds; i < nfds; i++, p++)
1118					if (p->revents)
1119						fprintf(stderr, "%d (0x%x) ", p->fd, p->revents);
1120				fprintf(stderr, ">\n");
1121			}
1122#endif
1123			/*
1124			 * If we found as many replies on callback fds
1125			 * as the number of descriptors selectable which
1126			 * poll() returned, there can be no more so we
1127			 * don't call svc_getreq_poll.  Otherwise, there
1128			 * must be another so we must call svc_getreq_poll.
1129			 */
1130			if ((check_ret = check_rmtcalls(pollfds, nfds)) ==
1131			    poll_ret)
1132				continue;
1133			svc_getreq_poll(pollfds, poll_ret-check_ret);
1134		}
1135#ifdef SVC_RUN_DEBUG
1136		if (debugging) {
1137			fprintf(stderr, "svc_maxfd now %u\n", *get_fdsetmax());
1138		}
1139#endif
1140	}
1141}
1142
1143static int
1144check_rmtcalls(struct pollfd *pfds, int nfds)
1145{
1146	int j, ncallbacks_found = 0, rmtcalls_pending;
1147	SVCXPRT *xprt;
1148
1149	if (rpcb_rmtcalls == 0)
1150		return (0);
1151
1152	rmtcalls_pending = rpcb_rmtcalls;
1153	for (j = 0; j < nfds; j++) {
1154		if ((xprt = find_rmtcallxprt_by_fd(pfds[j].fd)) != NULL) {
1155			if (pfds[j].revents) {
1156				ncallbacks_found++;
1157#ifdef DEBUG_RMTCALL
1158			if (debugging)
1159				fprintf(stderr,
1160"my_svc_run:  polled on forwarding fd %d, netid %s - calling handle_reply\n",
1161		pfds[j].fd, xprt->xp_netid);
1162#endif
1163				handle_reply(pfds[j].fd, xprt);
1164				pfds[j].revents = 0;
1165				if (ncallbacks_found >= rmtcalls_pending) {
1166					break;
1167				}
1168			}
1169		}
1170	}
1171	return (ncallbacks_found);
1172}
1173
1174static void
1175xprt_set_caller(SVCXPRT *xprt, struct finfo *fi)
1176{
1177	u_int32_t *xidp;
1178
1179	*(svc_getrpccaller(xprt)) = *(fi->caller_addr);
1180	xidp = __rpcb_get_dg_xidp(xprt);
1181	*xidp = fi->caller_xid;
1182}
1183
1184/*
1185 * Call svcerr_systemerr() only if RPCBVERS4
1186 */
1187static void
1188send_svcsyserr(SVCXPRT *xprt, struct finfo *fi)
1189{
1190	if (fi->reply_type == RPCBPROC_INDIRECT) {
1191		xprt_set_caller(xprt, fi);
1192		svcerr_systemerr(xprt);
1193	}
1194	return;
1195}
1196
1197static void
1198handle_reply(int fd, SVCXPRT *xprt)
1199{
1200	XDR		reply_xdrs;
1201	struct rpc_msg	reply_msg;
1202	struct rpc_err	reply_error;
1203	char		*buffer;
1204	struct finfo	*fi;
1205	int		inlen, pos, len;
1206	struct r_rmtcall_args a;
1207	struct sockaddr_storage ss;
1208	socklen_t fromlen;
1209#ifdef SVC_RUN_DEBUG
1210	char *uaddr;
1211#endif
1212
1213	buffer = malloc(RPC_BUF_MAX);
1214	if (buffer == NULL)
1215		goto done;
1216
1217	do {
1218		fromlen = sizeof ss;
1219		inlen = recvfrom(fd, buffer, RPC_BUF_MAX, 0,
1220			    (struct sockaddr *)&ss, &fromlen);
1221	} while (inlen < 0 && errno == EINTR);
1222	if (inlen < 0) {
1223		if (debugging)
1224			fprintf(stderr,
1225	"handle_reply:  recvfrom returned %d, errno %d\n", inlen, errno);
1226		goto done;
1227	}
1228
1229	reply_msg.acpted_rply.ar_verf = _null_auth;
1230	reply_msg.acpted_rply.ar_results.where = 0;
1231	reply_msg.acpted_rply.ar_results.proc = (xdrproc_t) xdr_void;
1232
1233	xdrmem_create(&reply_xdrs, buffer, (u_int)inlen, XDR_DECODE);
1234	if (!xdr_replymsg(&reply_xdrs, &reply_msg)) {
1235		if (debugging)
1236			(void) fprintf(stderr,
1237				"handle_reply:  xdr_replymsg failed\n");
1238		goto done;
1239	}
1240	fi = forward_find(reply_msg.rm_xid);
1241#ifdef	SVC_RUN_DEBUG
1242	if (debugging) {
1243		fprintf(stderr, "handle_reply:  reply xid: %d fi addr: %p\n",
1244			reply_msg.rm_xid, fi);
1245	}
1246#endif
1247	if (fi == NULL) {
1248		goto done;
1249	}
1250	_seterr_reply(&reply_msg, &reply_error);
1251	if (reply_error.re_status != RPC_SUCCESS) {
1252		if (debugging)
1253			(void) fprintf(stderr, "handle_reply:  %s\n",
1254				clnt_sperrno(reply_error.re_status));
1255		send_svcsyserr(xprt, fi);
1256		goto done;
1257	}
1258	pos = XDR_GETPOS(&reply_xdrs);
1259	len = inlen - pos;
1260	a.rmt_args.args = &buffer[pos];
1261	a.rmt_args.arglen = len;
1262	a.rmt_uaddr = fi->uaddr;
1263	a.rmt_localvers = fi->versnum;
1264
1265	xprt_set_caller(xprt, fi);
1266#ifdef	SVC_RUN_DEBUG
1267	uaddr =	taddr2uaddr(rpcbind_get_conf("udp"),
1268				    svc_getrpccaller(xprt));
1269	if (debugging) {
1270		fprintf(stderr, "handle_reply:  forwarding address %s to %s\n",
1271			a.rmt_uaddr, uaddr ? uaddr : rpcbind_unknown);
1272	}
1273	if (uaddr)
1274		free((void *) uaddr);
1275#endif
1276	svc_sendreply(xprt, (xdrproc_t) xdr_rmtcall_result, (char *) &a);
1277done:
1278	if (buffer)
1279		free(buffer);
1280
1281	if (reply_msg.rm_xid == 0) {
1282#ifdef	SVC_RUN_DEBUG
1283	if (debugging) {
1284		fprintf(stderr, "handle_reply:  NULL xid on exit!\n");
1285	}
1286#endif
1287	} else
1288		(void) free_slot_by_xid(reply_msg.rm_xid);
1289	return;
1290}
1291
1292static void
1293find_versions(rpcprog_t prog, char *netid, rpcvers_t *lowvp, rpcvers_t *highvp)
1294{
1295	register rpcblist_ptr rbl;
1296	int lowv = 0;
1297	int highv = 0;
1298
1299	for (rbl = list_rbl; rbl != NULL; rbl = rbl->rpcb_next) {
1300		if ((rbl->rpcb_map.r_prog != prog) ||
1301		    ((rbl->rpcb_map.r_netid != NULL) &&
1302			(strcasecmp(rbl->rpcb_map.r_netid, netid) != 0)))
1303			continue;
1304		if (lowv == 0) {
1305			highv = rbl->rpcb_map.r_vers;
1306			lowv = highv;
1307		} else if (rbl->rpcb_map.r_vers < lowv) {
1308			lowv = rbl->rpcb_map.r_vers;
1309		} else if (rbl->rpcb_map.r_vers > highv) {
1310			highv = rbl->rpcb_map.r_vers;
1311		}
1312	}
1313	*lowvp = lowv;
1314	*highvp = highv;
1315	return;
1316}
1317
1318/*
1319 * returns the item with the given program, version number and netid.
1320 * If that version number is not found, it returns the item with that
1321 * program number, so that address is now returned to the caller. The
1322 * caller when makes a call to this program, version number, the call
1323 * will fail and it will return with PROGVERS_MISMATCH. The user can
1324 * then determine the highest and the lowest version number for this
1325 * program using clnt_geterr() and use those program version numbers.
1326 *
1327 * Returns the RPCBLIST for the given prog, vers and netid
1328 */
1329static rpcblist_ptr
1330find_service(rpcprog_t prog, rpcvers_t vers, char *netid)
1331{
1332	register rpcblist_ptr hit = NULL;
1333	register rpcblist_ptr rbl;
1334
1335	for (rbl = list_rbl; rbl != NULL; rbl = rbl->rpcb_next) {
1336		if ((rbl->rpcb_map.r_prog != prog) ||
1337		    ((rbl->rpcb_map.r_netid != NULL) &&
1338			(strcasecmp(rbl->rpcb_map.r_netid, netid) != 0)))
1339			continue;
1340		hit = rbl;
1341		if (rbl->rpcb_map.r_vers == vers)
1342			break;
1343	}
1344	return (hit);
1345}
1346
1347/*
1348 * Copies the name associated with the uid of the caller and returns
1349 * a pointer to it.  Similar to getwd().
1350 */
1351static char *
1352getowner(SVCXPRT *transp, char *owner, size_t ownersize)
1353{
1354	struct sockcred *sc;
1355
1356	sc = __svc_getcallercreds(transp);
1357	if (sc == NULL)
1358		strlcpy(owner, rpcbind_unknown, ownersize);
1359	else if (sc->sc_uid == 0)
1360		strlcpy(owner, rpcbind_superuser, ownersize);
1361	else
1362		snprintf(owner, ownersize, "%d", sc->sc_uid);
1363
1364	return owner;
1365}
1366
1367#ifdef PORTMAP
1368/*
1369 * Add this to the pmap list only if it is UDP or TCP.
1370 */
1371static int
1372add_pmaplist(RPCB *arg)
1373{
1374	struct pmap pmap;
1375	struct pmaplist *pml;
1376	int h1, h2, h3, h4, p1, p2;
1377
1378	if (strcmp(arg->r_netid, udptrans) == 0) {
1379		/* It is UDP! */
1380		pmap.pm_prot = IPPROTO_UDP;
1381	} else if (strcmp(arg->r_netid, tcptrans) == 0) {
1382		/* It is TCP */
1383		pmap.pm_prot = IPPROTO_TCP;
1384	} else
1385		/* Not a IP protocol */
1386		return (0);
1387
1388	/* interpret the universal address for TCP/IP */
1389	if (sscanf(arg->r_addr, "%d.%d.%d.%d.%d.%d",
1390		&h1, &h2, &h3, &h4, &p1, &p2) != 6)
1391		return (0);
1392	pmap.pm_port = ((p1 & 0xff) << 8) + (p2 & 0xff);
1393	pmap.pm_prog = arg->r_prog;
1394	pmap.pm_vers = arg->r_vers;
1395	/*
1396	 * add to END of list
1397	 */
1398	pml = (struct pmaplist *) malloc((u_int)sizeof (struct pmaplist));
1399	if (pml == NULL) {
1400		(void) syslog(LOG_ERR, "rpcbind: no memory!\n");
1401		return (1);
1402	}
1403	pml->pml_map = pmap;
1404	pml->pml_next = NULL;
1405	if (list_pml == NULL) {
1406		list_pml = pml;
1407	} else {
1408		struct pmaplist *fnd;
1409
1410		/* Attach to the end of the list */
1411		for (fnd = list_pml; fnd->pml_next; fnd = fnd->pml_next)
1412			;
1413		fnd->pml_next = pml;
1414	}
1415	return (0);
1416}
1417
1418/*
1419 * Delete this from the pmap list only if it is UDP or TCP.
1420 */
1421static int
1422del_pmaplist(RPCB *arg)
1423{
1424	struct pmaplist *pml;
1425	struct pmaplist *prevpml, *fnd;
1426	long prot;
1427
1428	if (strcmp(arg->r_netid, udptrans) == 0) {
1429		/* It is UDP! */
1430		prot = IPPROTO_UDP;
1431	} else if (strcmp(arg->r_netid, tcptrans) == 0) {
1432		/* It is TCP */
1433		prot = IPPROTO_TCP;
1434	} else if (arg->r_netid[0] == 0) {
1435		prot = 0;	/* Remove all occurrences */
1436	} else {
1437		/* Not a IP protocol */
1438		return (0);
1439	}
1440	for (prevpml = NULL, pml = list_pml; pml; /* cstyle */) {
1441		if ((pml->pml_map.pm_prog != arg->r_prog) ||
1442			(pml->pml_map.pm_vers != arg->r_vers) ||
1443			(prot && (pml->pml_map.pm_prot != prot))) {
1444			/* both pml & prevpml move forwards */
1445			prevpml = pml;
1446			pml = pml->pml_next;
1447			continue;
1448		}
1449		/* found it; pml moves forward, prevpml stays */
1450		fnd = pml;
1451		pml = pml->pml_next;
1452		if (prevpml == NULL)
1453			list_pml = pml;
1454		else
1455			prevpml->pml_next = pml;
1456		free((void *) fnd);
1457	}
1458	return (0);
1459}
1460#endif /* PORTMAP */
1461