]> andersk Git - openssh.git/blame - misc.c
- (dtucker) [configure.ac misc.c readconf.c servconf.c ssh-keyscan.c]
[openssh.git] / misc.c
CommitLineData
9e622dcd 1/* $OpenBSD: misc.c,v 1.74 2009/12/25 19:40:21 stevesk Exp $ */
bcbf86ec 2/*
3 * Copyright (c) 2000 Markus Friedl. All rights reserved.
51e7a012 4 * Copyright (c) 2005,2006 Damien Miller. All rights reserved.
bcbf86ec 5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25 */
26
6d24277f 27#include "includes.h"
bd7c69ea 28
b1842393 29#include <sys/types.h>
31652869 30#include <sys/ioctl.h>
9794d008 31#include <sys/socket.h>
536c14e8 32#include <sys/param.h>
9794d008 33
4c72fcfd 34#include <stdarg.h>
cf851879 35#include <stdio.h>
ffa517a8 36#include <stdlib.h>
00146caa 37#include <string.h>
5188ba17 38#include <unistd.h>
4c72fcfd 39
9794d008 40#include <netinet/in.h>
6425cf65 41#include <netinet/tcp.h>
9794d008 42
028094f4 43#include <errno.h>
d3221cca 44#include <fcntl.h>
bb4626fe 45#include <netdb.h>
a75f5360 46#ifdef HAVE_PATHS_H
6f61e0ec 47# include <paths.h>
b1842393 48#include <pwd.h>
a75f5360 49#endif
1f1fbbd8 50#ifdef SSH_TUN_OPENBSD
51#include <net/if.h>
52#endif
6d24277f 53
31652869 54#include "xmalloc.h"
1aa00dcb 55#include "misc.h"
42f11eb2 56#include "log.h"
d4530052 57#include "ssh.h"
6d24277f 58
255cabd9 59/* remove newline at end of string */
6d24277f 60char *
61chop(char *s)
62{
63 char *t = s;
64 while (*t) {
6aacefa7 65 if (*t == '\n' || *t == '\r') {
6d24277f 66 *t = '\0';
67 return s;
68 }
69 t++;
70 }
71 return s;
72
73}
74
255cabd9 75/* set/unset filedescriptor to non-blocking */
170694d7 76int
6d24277f 77set_nonblock(int fd)
78{
79 int val;
89aa792b 80
6d24277f 81 val = fcntl(fd, F_GETFL, 0);
82 if (val < 0) {
83 error("fcntl(%d, F_GETFL, 0): %s", fd, strerror(errno));
170694d7 84 return (-1);
6d24277f 85 }
a22aff1f 86 if (val & O_NONBLOCK) {
170694d7 87 debug3("fd %d is O_NONBLOCK", fd);
88 return (0);
a22aff1f 89 }
45c42d58 90 debug2("fd %d setting O_NONBLOCK", fd);
6d24277f 91 val |= O_NONBLOCK;
170694d7 92 if (fcntl(fd, F_SETFL, val) == -1) {
93 debug("fcntl(%d, F_SETFL, O_NONBLOCK): %s", fd,
94 strerror(errno));
95 return (-1);
96 }
97 return (0);
6d24277f 98}
99
170694d7 100int
89aa792b 101unset_nonblock(int fd)
102{
103 int val;
104
105 val = fcntl(fd, F_GETFL, 0);
106 if (val < 0) {
107 error("fcntl(%d, F_GETFL, 0): %s", fd, strerror(errno));
170694d7 108 return (-1);
89aa792b 109 }
110 if (!(val & O_NONBLOCK)) {
170694d7 111 debug3("fd %d is not O_NONBLOCK", fd);
112 return (0);
89aa792b 113 }
e04e7a19 114 debug("fd %d clearing O_NONBLOCK", fd);
89aa792b 115 val &= ~O_NONBLOCK;
170694d7 116 if (fcntl(fd, F_SETFL, val) == -1) {
117 debug("fcntl(%d, F_SETFL, ~O_NONBLOCK): %s",
c92ec40b 118 fd, strerror(errno));
170694d7 119 return (-1);
120 }
121 return (0);
89aa792b 122}
123
bb4626fe 124const char *
125ssh_gai_strerror(int gaierr)
126{
ea646f2c 127 if (gaierr == EAI_SYSTEM)
128 return strerror(errno);
129 return gai_strerror(gaierr);
bb4626fe 130}
131
bcc0381e 132/* disable nagle on socket */
133void
134set_nodelay(int fd)
135{
3c05447a 136 int opt;
137 socklen_t optlen;
bcc0381e 138
811a6342 139 optlen = sizeof opt;
140 if (getsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, &optlen) == -1) {
f7fb35fe 141 debug("getsockopt TCP_NODELAY: %.100s", strerror(errno));
811a6342 142 return;
143 }
144 if (opt == 1) {
145 debug2("fd %d is TCP_NODELAY", fd);
146 return;
147 }
148 opt = 1;
6226a8f8 149 debug2("fd %d setting TCP_NODELAY", fd);
811a6342 150 if (setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof opt) == -1)
bcc0381e 151 error("setsockopt TCP_NODELAY: %.100s", strerror(errno));
152}
153
fe7dba42 154/* open a socket in the specified routing domain */
155int
156socket_rdomain(int domain, int type, int protocol, int rdomain)
157{
158 int sock, ipproto = IPPROTO_IP;
159
160 if ((sock = socket(domain, type, protocol)) == -1)
161 return (-1);
162
163 if (rdomain == -1)
164 return (sock);
1c0194f1 165
fe7dba42 166 switch (domain) {
167 case AF_INET6:
168 ipproto = IPPROTO_IPV6;
169 /* FALLTHROUGH */
170 case AF_INET:
171 debug2("socket %d af %d setting rdomain %d",
172 sock, domain, rdomain);
173 if (setsockopt(sock, ipproto, SO_RDOMAIN, &rdomain,
174 sizeof(rdomain)) == -1) {
175 debug("setsockopt SO_RDOMAIN: %.100s",
176 strerror(errno));
177 close(sock);
178 return (-1);
179 }
180 break;
181 default:
182 debug("socket %d af %d does not support rdomain %d",
183 sock, domain, rdomain);
184 close(sock);
185 return (-1);
186 }
187
188 return (sock);
189}
190
6d24277f 191/* Characters considered whitespace in strsep calls. */
192#define WHITESPACE " \t\r\n"
533b9133 193#define QUOTE "\""
6d24277f 194
255cabd9 195/* return next token in configuration line */
6d24277f 196char *
197strdelim(char **s)
198{
199 char *old;
200 int wspace = 0;
201
202 if (*s == NULL)
203 return NULL;
204
205 old = *s;
206
533b9133 207 *s = strpbrk(*s, WHITESPACE QUOTE "=");
6d24277f 208 if (*s == NULL)
209 return (old);
210
533b9133 211 if (*s[0] == '\"') {
212 memmove(*s, *s + 1, strlen(*s)); /* move nul too */
213 /* Find matching quote */
214 if ((*s = strpbrk(*s, QUOTE)) == NULL) {
215 return (NULL); /* no matching quote */
216 } else {
217 *s[0] = '\0';
218 return (old);
219 }
220 }
221
6d24277f 222 /* Allow only one '=' to be skipped */
223 if (*s[0] == '=')
224 wspace = 1;
225 *s[0] = '\0';
226
533b9133 227 /* Skip any extra whitespace after first token */
6d24277f 228 *s += strspn(*s + 1, WHITESPACE) + 1;
229 if (*s[0] == '=' && !wspace)
230 *s += strspn(*s + 1, WHITESPACE) + 1;
231
232 return (old);
233}
1aa00dcb 234
3b1a83df 235struct passwd *
236pwcopy(struct passwd *pw)
237{
52e3daed 238 struct passwd *copy = xcalloc(1, sizeof(*copy));
5649fbbe 239
3b1a83df 240 copy->pw_name = xstrdup(pw->pw_name);
241 copy->pw_passwd = xstrdup(pw->pw_passwd);
5649fbbe 242 copy->pw_gecos = xstrdup(pw->pw_gecos);
3b1a83df 243 copy->pw_uid = pw->pw_uid;
244 copy->pw_gid = pw->pw_gid;
7751d4eb 245#ifdef HAVE_PW_EXPIRE_IN_PASSWD
c4d49b85 246 copy->pw_expire = pw->pw_expire;
7751d4eb 247#endif
248#ifdef HAVE_PW_CHANGE_IN_PASSWD
c4d49b85 249 copy->pw_change = pw->pw_change;
7751d4eb 250#endif
2605addd 251#ifdef HAVE_PW_CLASS_IN_PASSWD
3b1a83df 252 copy->pw_class = xstrdup(pw->pw_class);
2605addd 253#endif
3b1a83df 254 copy->pw_dir = xstrdup(pw->pw_dir);
255 copy->pw_shell = xstrdup(pw->pw_shell);
256 return copy;
257}
258
255cabd9 259/*
260 * Convert ASCII string to TCP/IP port number.
5134115d 261 * Port must be >=0 and <=65535.
262 * Return -1 if invalid.
255cabd9 263 */
264int
265a2port(const char *s)
2d2a2c65 266{
5134115d 267 long long port;
268 const char *errstr;
2d2a2c65 269
5134115d 270 port = strtonum(s, 0, 65535, &errstr);
271 if (errstr != NULL)
272 return -1;
273 return (int)port;
2d2a2c65 274}
275
9e622dcd 276int
277a2rdomain(const char *s)
278{
279 long long rdomain;
280 const char *errstr;
281
282 rdomain = strtonum(s, 0, RT_TABLEID_MAX, &errstr);
283 if (errstr != NULL)
284 return -1;
285 return (int)rdomain;
286}
287
d20f3c9e 288int
289a2tun(const char *s, int *remote)
290{
291 const char *errstr = NULL;
292 char *sp, *ep;
293 int tun;
294
295 if (remote != NULL) {
a4f24bf8 296 *remote = SSH_TUNID_ANY;
d20f3c9e 297 sp = xstrdup(s);
298 if ((ep = strchr(sp, ':')) == NULL) {
299 xfree(sp);
300 return (a2tun(s, NULL));
301 }
302 ep[0] = '\0'; ep++;
303 *remote = a2tun(ep, NULL);
304 tun = a2tun(sp, NULL);
305 xfree(sp);
a4f24bf8 306 return (*remote == SSH_TUNID_ERR ? *remote : tun);
d20f3c9e 307 }
308
309 if (strcasecmp(s, "any") == 0)
a4f24bf8 310 return (SSH_TUNID_ANY);
d20f3c9e 311
a4f24bf8 312 tun = strtonum(s, 0, SSH_TUNID_MAX, &errstr);
313 if (errstr != NULL)
314 return (SSH_TUNID_ERR);
d20f3c9e 315
316 return (tun);
317}
318
e2b1fb42 319#define SECONDS 1
320#define MINUTES (SECONDS * 60)
321#define HOURS (MINUTES * 60)
322#define DAYS (HOURS * 24)
323#define WEEKS (DAYS * 7)
324
255cabd9 325/*
326 * Convert a time string into seconds; format is
327 * a sequence of:
328 * time[qualifier]
329 *
330 * Valid time qualifiers are:
331 * <none> seconds
332 * s|S seconds
333 * m|M minutes
334 * h|H hours
335 * d|D days
336 * w|W weeks
337 *
338 * Examples:
339 * 90m 90 minutes
340 * 1h30m 90 minutes
341 * 2d 2 days
342 * 1w 1 week
343 *
344 * Return -1 if time string is invalid.
345 */
346long
347convtime(const char *s)
e2b1fb42 348{
349 long total, secs;
350 const char *p;
351 char *endp;
352
353 errno = 0;
354 total = 0;
355 p = s;
356
357 if (p == NULL || *p == '\0')
358 return -1;
359
360 while (*p) {
361 secs = strtol(p, &endp, 10);
362 if (p == endp ||
363 (errno == ERANGE && (secs == LONG_MIN || secs == LONG_MAX)) ||
364 secs < 0)
365 return -1;
366
367 switch (*endp++) {
368 case '\0':
369 endp--;
5ef36928 370 break;
e2b1fb42 371 case 's':
372 case 'S':
373 break;
374 case 'm':
375 case 'M':
376 secs *= MINUTES;
377 break;
378 case 'h':
379 case 'H':
380 secs *= HOURS;
381 break;
382 case 'd':
383 case 'D':
384 secs *= DAYS;
385 break;
386 case 'w':
387 case 'W':
388 secs *= WEEKS;
389 break;
390 default:
391 return -1;
392 }
393 total += secs;
394 if (total < 0)
395 return -1;
396 p = endp;
397 }
398
399 return total;
400}
401
d4530052 402/*
403 * Returns a standardized host+port identifier string.
404 * Caller must free returned string.
405 */
406char *
407put_host_port(const char *host, u_short port)
408{
409 char *hoststr;
410
411 if (port == 0 || port == SSH_DEFAULT_PORT)
412 return(xstrdup(host));
413 if (asprintf(&hoststr, "[%s]:%d", host, (int)port) < 0)
414 fatal("put_host_port: asprintf: %s", strerror(errno));
415 debug3("put_host_port: %s", hoststr);
416 return hoststr;
417}
418
3867aa0a 419/*
420 * Search for next delimiter between hostnames/addresses and ports.
421 * Argument may be modified (for termination).
422 * Returns *cp if parsing succeeds.
423 * *cp is set to the start of the next delimiter, if one was found.
424 * If this is the last field, *cp is set to NULL.
425 */
426char *
427hpdelim(char **cp)
428{
429 char *s, *old;
430
431 if (cp == NULL || *cp == NULL)
432 return NULL;
433
434 old = s = *cp;
435 if (*s == '[') {
436 if ((s = strchr(s, ']')) == NULL)
437 return NULL;
438 else
439 s++;
440 } else if ((s = strpbrk(s, ":/")) == NULL)
441 s = *cp + strlen(*cp); /* skip to end (see first case below) */
442
443 switch (*s) {
444 case '\0':
445 *cp = NULL; /* no more fields*/
446 break;
f8cc7664 447
3867aa0a 448 case ':':
449 case '/':
450 *s = '\0'; /* terminate */
451 *cp = s + 1;
452 break;
f8cc7664 453
3867aa0a 454 default:
455 return NULL;
456 }
457
458 return old;
459}
460
1fcde3fe 461char *
462cleanhostname(char *host)
463{
464 if (*host == '[' && host[strlen(host) - 1] == ']') {
465 host[strlen(host) - 1] = '\0';
466 return (host + 1);
467 } else
468 return host;
469}
470
471char *
472colon(char *cp)
473{
474 int flag = 0;
475
476 if (*cp == ':') /* Leading colon is part of file name. */
477 return (0);
478 if (*cp == '[')
479 flag = 1;
480
481 for (; *cp; ++cp) {
482 if (*cp == '@' && *(cp+1) == '[')
483 flag = 1;
484 if (*cp == ']' && *(cp+1) == ':' && flag)
485 return (cp+1);
486 if (*cp == ':' && !flag)
487 return (cp);
488 if (*cp == '/')
489 return (0);
490 }
491 return (0);
492}
493
255cabd9 494/* function to assist building execv() arguments */
8a624ebf 495void
496addargs(arglist *args, char *fmt, ...)
497{
498 va_list ap;
4116f5c0 499 char *cp;
9a995072 500 u_int nalloc;
4116f5c0 501 int r;
8a624ebf 502
503 va_start(ap, fmt);
4116f5c0 504 r = vasprintf(&cp, fmt, ap);
8a624ebf 505 va_end(ap);
4116f5c0 506 if (r == -1)
507 fatal("addargs: argument too long");
8a624ebf 508
c46e584f 509 nalloc = args->nalloc;
8a624ebf 510 if (args->list == NULL) {
c46e584f 511 nalloc = 32;
8a624ebf 512 args->num = 0;
c46e584f 513 } else if (args->num+2 >= nalloc)
514 nalloc *= 2;
8a624ebf 515
c5d10563 516 args->list = xrealloc(args->list, nalloc, sizeof(char *));
c46e584f 517 args->nalloc = nalloc;
4116f5c0 518 args->list[args->num++] = cp;
8a624ebf 519 args->list[args->num] = NULL;
520}
ea067773 521
4116f5c0 522void
523replacearg(arglist *args, u_int which, char *fmt, ...)
524{
525 va_list ap;
526 char *cp;
527 int r;
528
529 va_start(ap, fmt);
530 r = vasprintf(&cp, fmt, ap);
531 va_end(ap);
532 if (r == -1)
533 fatal("replacearg: argument too long");
534
535 if (which >= args->num)
536 fatal("replacearg: tried to replace invalid arg %d >= %d",
537 which, args->num);
538 xfree(args->list[which]);
539 args->list[which] = cp;
540}
541
542void
543freeargs(arglist *args)
544{
545 u_int i;
546
547 if (args->list != NULL) {
548 for (i = 0; i < args->num; i++)
549 xfree(args->list[i]);
550 xfree(args->list);
551 args->nalloc = args->num = 0;
552 args->list = NULL;
553 }
554}
555
49e71137 556/*
557 * Expands tildes in the file name. Returns data allocated by xmalloc.
558 * Warning: this calls getpw*.
559 */
560char *
561tilde_expand_filename(const char *filename, uid_t uid)
562{
563 const char *path;
564 char user[128], ret[MAXPATHLEN];
565 struct passwd *pw;
2ceb8101 566 u_int len, slash;
49e71137 567
568 if (*filename != '~')
569 return (xstrdup(filename));
570 filename++;
571
572 path = strchr(filename, '/');
573 if (path != NULL && path > filename) { /* ~user/path */
2ceb8101 574 slash = path - filename;
575 if (slash > sizeof(user) - 1)
49e71137 576 fatal("tilde_expand_filename: ~username too long");
2ceb8101 577 memcpy(user, filename, slash);
578 user[slash] = '\0';
49e71137 579 if ((pw = getpwnam(user)) == NULL)
580 fatal("tilde_expand_filename: No such user %s", user);
581 } else if ((pw = getpwuid(uid)) == NULL) /* ~/path */
852eb76b 582 fatal("tilde_expand_filename: No such uid %ld", (long)uid);
49e71137 583
584 if (strlcpy(ret, pw->pw_dir, sizeof(ret)) >= sizeof(ret))
585 fatal("tilde_expand_filename: Path too long");
586
587 /* Make sure directory has a trailing '/' */
588 len = strlen(pw->pw_dir);
589 if ((len == 0 || pw->pw_dir[len - 1] != '/') &&
590 strlcat(ret, "/", sizeof(ret)) >= sizeof(ret))
591 fatal("tilde_expand_filename: Path too long");
592
593 /* Skip leading '/' from specified path */
594 if (path != NULL)
595 filename = path + 1;
596 if (strlcat(ret, filename, sizeof(ret)) >= sizeof(ret))
597 fatal("tilde_expand_filename: Path too long");
598
599 return (xstrdup(ret));
600}
601
a980cbd7 602/*
603 * Expand a string with a set of %[char] escapes. A number of escapes may be
604 * specified as (char *escape_chars, char *replacement) pairs. The list must
6381acf0 605 * be terminated by a NULL escape_char. Returns replaced string in memory
a980cbd7 606 * allocated by xmalloc.
607 */
608char *
609percent_expand(const char *string, ...)
610{
611#define EXPAND_MAX_KEYS 16
704709cf 612 u_int num_keys, i, j;
a980cbd7 613 struct {
614 const char *key;
615 const char *repl;
616 } keys[EXPAND_MAX_KEYS];
a980cbd7 617 char buf[4096];
618 va_list ap;
619
620 /* Gather keys */
621 va_start(ap, string);
622 for (num_keys = 0; num_keys < EXPAND_MAX_KEYS; num_keys++) {
623 keys[num_keys].key = va_arg(ap, char *);
624 if (keys[num_keys].key == NULL)
625 break;
626 keys[num_keys].repl = va_arg(ap, char *);
627 if (keys[num_keys].repl == NULL)
704709cf 628 fatal("%s: NULL replacement", __func__);
a980cbd7 629 }
704709cf 630 if (num_keys == EXPAND_MAX_KEYS && va_arg(ap, char *) != NULL)
631 fatal("%s: too many keys", __func__);
a980cbd7 632 va_end(ap);
633
a980cbd7 634 /* Expand string */
635 *buf = '\0';
636 for (i = 0; *string != '\0'; string++) {
637 if (*string != '%') {
638 append:
639 buf[i++] = *string;
640 if (i >= sizeof(buf))
704709cf 641 fatal("%s: string too long", __func__);
a980cbd7 642 buf[i] = '\0';
643 continue;
644 }
645 string++;
704709cf 646 /* %% case */
a980cbd7 647 if (*string == '%')
648 goto append;
649 for (j = 0; j < num_keys; j++) {
650 if (strchr(keys[j].key, *string) != NULL) {
651 i = strlcat(buf, keys[j].repl, sizeof(buf));
652 if (i >= sizeof(buf))
704709cf 653 fatal("%s: string too long", __func__);
a980cbd7 654 break;
655 }
656 }
657 if (j >= num_keys)
704709cf 658 fatal("%s: unknown key %%%c", __func__, *string);
a980cbd7 659 }
660 return (xstrdup(buf));
661#undef EXPAND_MAX_KEYS
662}
663
ea067773 664/*
665 * Read an entire line from a public key file into a static buffer, discarding
666 * lines that exceed the buffer size. Returns 0 on success, -1 on failure.
667 */
668int
669read_keyfile_line(FILE *f, const char *filename, char *buf, size_t bufsz,
41feb690 670 u_long *lineno)
ea067773 671{
672 while (fgets(buf, bufsz, f) != NULL) {
ce4cf693 673 if (buf[0] == '\0')
674 continue;
ea067773 675 (*lineno)++;
676 if (buf[strlen(buf) - 1] == '\n' || feof(f)) {
677 return 0;
678 } else {
41feb690 679 debug("%s: %s line %lu exceeds size limit", __func__,
680 filename, *lineno);
ea067773 681 /* discard remainder of line */
f8cc7664 682 while (fgetc(f) != '\n' && !feof(f))
ea067773 683 ; /* nothing */
684 }
685 }
686 return -1;
687}
ef07103c 688
d20f3c9e 689int
a4f24bf8 690tun_open(int tun, int mode)
d20f3c9e 691{
6306853a 692#if defined(CUSTOM_SYS_TUN_OPEN)
693 return (sys_tun_open(tun, mode));
0f6cb079 694#elif defined(SSH_TUN_OPENBSD)
a4f24bf8 695 struct ifreq ifr;
d20f3c9e 696 char name[100];
a4f24bf8 697 int fd = -1, sock;
d20f3c9e 698
a4f24bf8 699 /* Open the tunnel device */
700 if (tun <= SSH_TUNID_MAX) {
d20f3c9e 701 snprintf(name, sizeof(name), "/dev/tun%d", tun);
a4f24bf8 702 fd = open(name, O_RDWR);
703 } else if (tun == SSH_TUNID_ANY) {
704 for (tun = 100; tun >= 0; tun--) {
705 snprintf(name, sizeof(name), "/dev/tun%d", tun);
706 if ((fd = open(name, O_RDWR)) >= 0)
707 break;
d20f3c9e 708 }
709 } else {
81c042a3 710 debug("%s: invalid tunnel %u", __func__, tun);
a4f24bf8 711 return (-1);
712 }
713
714 if (fd < 0) {
715 debug("%s: %s open failed: %s", __func__, name, strerror(errno));
716 return (-1);
717 }
718
719 debug("%s: %s mode %d fd %d", __func__, name, mode, fd);
720
721 /* Set the tunnel device operation mode */
722 snprintf(ifr.ifr_name, sizeof(ifr.ifr_name), "tun%d", tun);
723 if ((sock = socket(PF_UNIX, SOCK_STREAM, 0)) == -1)
724 goto failed;
725
726 if (ioctl(sock, SIOCGIFFLAGS, &ifr) == -1)
727 goto failed;
b1b65311 728
729 /* Set interface mode */
730 ifr.ifr_flags &= ~IFF_UP;
731 if (mode == SSH_TUNMODE_ETHERNET)
a4f24bf8 732 ifr.ifr_flags |= IFF_LINK0;
b1b65311 733 else
734 ifr.ifr_flags &= ~IFF_LINK0;
735 if (ioctl(sock, SIOCSIFFLAGS, &ifr) == -1)
736 goto failed;
737
738 /* Bring interface up */
a4f24bf8 739 ifr.ifr_flags |= IFF_UP;
740 if (ioctl(sock, SIOCSIFFLAGS, &ifr) == -1)
741 goto failed;
742
743 close(sock);
744 return (fd);
745
746 failed:
747 if (fd >= 0)
748 close(fd);
749 if (sock >= 0)
750 close(sock);
751 debug("%s: failed to set %s mode %d: %s", __func__, name,
752 mode, strerror(errno));
d20f3c9e 753 return (-1);
6306853a 754#else
755 error("Tunnel interfaces are not supported on this platform");
756 return (-1);
757#endif
d20f3c9e 758}
759
fd6168c1 760void
761sanitise_stdfd(void)
762{
db382686 763 int nullfd, dupfd;
fd6168c1 764
db382686 765 if ((nullfd = dupfd = open(_PATH_DEVNULL, O_RDWR)) == -1) {
7eec82ab 766 fprintf(stderr, "Couldn't open /dev/null: %s\n",
767 strerror(errno));
fd6168c1 768 exit(1);
769 }
db382686 770 while (++dupfd <= 2) {
771 /* Only clobber closed fds */
772 if (fcntl(dupfd, F_GETFL, 0) >= 0)
773 continue;
774 if (dup2(nullfd, dupfd) == -1) {
7eec82ab 775 fprintf(stderr, "dup2: %s\n", strerror(errno));
fd6168c1 776 exit(1);
777 }
fd6168c1 778 }
779 if (nullfd > 2)
780 close(nullfd);
781}
782
ef07103c 783char *
51e7a012 784tohex(const void *vp, size_t l)
ef07103c 785{
51e7a012 786 const u_char *p = (const u_char *)vp;
ef07103c 787 char b[3], *r;
51e7a012 788 size_t i, hl;
789
790 if (l > 65536)
791 return xstrdup("tohex: length > 65536");
ef07103c 792
793 hl = l * 2 + 1;
52e3daed 794 r = xcalloc(1, hl);
ef07103c 795 for (i = 0; i < l; i++) {
51e7a012 796 snprintf(b, sizeof(b), "%02x", p[i]);
ef07103c 797 strlcat(r, b, hl);
798 }
799 return (r);
800}
801
51e7a012 802u_int64_t
803get_u64(const void *vp)
804{
805 const u_char *p = (const u_char *)vp;
806 u_int64_t v;
807
808 v = (u_int64_t)p[0] << 56;
809 v |= (u_int64_t)p[1] << 48;
810 v |= (u_int64_t)p[2] << 40;
811 v |= (u_int64_t)p[3] << 32;
812 v |= (u_int64_t)p[4] << 24;
813 v |= (u_int64_t)p[5] << 16;
814 v |= (u_int64_t)p[6] << 8;
815 v |= (u_int64_t)p[7];
816
817 return (v);
818}
819
820u_int32_t
821get_u32(const void *vp)
822{
823 const u_char *p = (const u_char *)vp;
824 u_int32_t v;
825
826 v = (u_int32_t)p[0] << 24;
827 v |= (u_int32_t)p[1] << 16;
828 v |= (u_int32_t)p[2] << 8;
829 v |= (u_int32_t)p[3];
830
831 return (v);
832}
833
834u_int16_t
835get_u16(const void *vp)
836{
837 const u_char *p = (const u_char *)vp;
838 u_int16_t v;
839
840 v = (u_int16_t)p[0] << 8;
841 v |= (u_int16_t)p[1];
842
843 return (v);
844}
845
846void
847put_u64(void *vp, u_int64_t v)
848{
849 u_char *p = (u_char *)vp;
850
851 p[0] = (u_char)(v >> 56) & 0xff;
852 p[1] = (u_char)(v >> 48) & 0xff;
853 p[2] = (u_char)(v >> 40) & 0xff;
854 p[3] = (u_char)(v >> 32) & 0xff;
855 p[4] = (u_char)(v >> 24) & 0xff;
856 p[5] = (u_char)(v >> 16) & 0xff;
857 p[6] = (u_char)(v >> 8) & 0xff;
858 p[7] = (u_char)v & 0xff;
859}
860
861void
862put_u32(void *vp, u_int32_t v)
863{
864 u_char *p = (u_char *)vp;
865
866 p[0] = (u_char)(v >> 24) & 0xff;
867 p[1] = (u_char)(v >> 16) & 0xff;
868 p[2] = (u_char)(v >> 8) & 0xff;
869 p[3] = (u_char)v & 0xff;
870}
871
872
873void
874put_u16(void *vp, u_int16_t v)
875{
876 u_char *p = (u_char *)vp;
877
878 p[0] = (u_char)(v >> 8) & 0xff;
879 p[1] = (u_char)v & 0xff;
880}
bc2d97c8 881
882void
883ms_subtract_diff(struct timeval *start, int *ms)
884{
885 struct timeval diff, finish;
886
887 gettimeofday(&finish, NULL);
888 timersub(&finish, start, &diff);
889 *ms -= (diff.tv_sec * 1000) + (diff.tv_usec / 1000);
890}
891
892void
893ms_to_timeval(struct timeval *tv, int ms)
894{
895 if (ms < 0)
896 ms = 0;
897 tv->tv_sec = ms / 1000;
898 tv->tv_usec = (ms % 1000) * 1000;
899}
900
4e1082aa 901void
902sock_set_v6only(int s)
903{
904#ifdef IPV6_V6ONLY
905 int on = 1;
906
907 debug3("%s: set socket %d IPV6_V6ONLY", __func__, s);
908 if (setsockopt(s, IPPROTO_IPV6, IPV6_V6ONLY, &on, sizeof(on)) == -1)
909 error("setsockopt IPV6_V6ONLY: %s", strerror(errno));
910#endif
911}
This page took 0.484999 seconds and 5 git commands to generate.