1 | /* |
2 | * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved. |
3 | * |
4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at |
7 | * https://www.openssl.org/source/license.html |
8 | */ |
9 | |
10 | #include <assert.h> |
11 | #include <string.h> |
12 | |
13 | #include "bio_local.h" |
14 | #include <openssl/crypto.h> |
15 | |
16 | #ifndef OPENSSL_NO_SOCK |
17 | #include <openssl/err.h> |
18 | #include <openssl/buffer.h> |
19 | #include "internal/thread_once.h" |
20 | |
21 | CRYPTO_RWLOCK *bio_lookup_lock; |
22 | static CRYPTO_ONCE bio_lookup_init = CRYPTO_ONCE_STATIC_INIT; |
23 | |
24 | /* |
25 | * Throughout this file and bio_local.h, the existence of the macro |
26 | * AI_PASSIVE is used to detect the availability of struct addrinfo, |
27 | * getnameinfo() and getaddrinfo(). If that macro doesn't exist, |
28 | * we use our own implementation instead, using gethostbyname, |
29 | * getservbyname and a few other. |
30 | */ |
31 | |
32 | /********************************************************************** |
33 | * |
34 | * Address structure |
35 | * |
36 | */ |
37 | |
38 | BIO_ADDR *BIO_ADDR_new(void) |
39 | { |
40 | BIO_ADDR *ret = OPENSSL_zalloc(sizeof(*ret)); |
41 | |
42 | if (ret == NULL) { |
43 | BIOerr(BIO_F_BIO_ADDR_NEW, ERR_R_MALLOC_FAILURE); |
44 | return NULL; |
45 | } |
46 | |
47 | ret->sa.sa_family = AF_UNSPEC; |
48 | return ret; |
49 | } |
50 | |
51 | void BIO_ADDR_free(BIO_ADDR *ap) |
52 | { |
53 | OPENSSL_free(ap); |
54 | } |
55 | |
56 | void BIO_ADDR_clear(BIO_ADDR *ap) |
57 | { |
58 | memset(ap, 0, sizeof(*ap)); |
59 | ap->sa.sa_family = AF_UNSPEC; |
60 | } |
61 | |
62 | /* |
63 | * BIO_ADDR_make - non-public routine to fill a BIO_ADDR with the contents |
64 | * of a struct sockaddr. |
65 | */ |
66 | int BIO_ADDR_make(BIO_ADDR *ap, const struct sockaddr *sa) |
67 | { |
68 | if (sa->sa_family == AF_INET) { |
69 | memcpy(&(ap->s_in), sa, sizeof(struct sockaddr_in)); |
70 | return 1; |
71 | } |
72 | #ifdef AF_INET6 |
73 | if (sa->sa_family == AF_INET6) { |
74 | memcpy(&(ap->s_in6), sa, sizeof(struct sockaddr_in6)); |
75 | return 1; |
76 | } |
77 | #endif |
78 | #ifdef AF_UNIX |
79 | if (sa->sa_family == AF_UNIX) { |
80 | memcpy(&(ap->s_un), sa, sizeof(struct sockaddr_un)); |
81 | return 1; |
82 | } |
83 | #endif |
84 | |
85 | return 0; |
86 | } |
87 | |
88 | int BIO_ADDR_rawmake(BIO_ADDR *ap, int family, |
89 | const void *where, size_t wherelen, |
90 | unsigned short port) |
91 | { |
92 | #ifdef AF_UNIX |
93 | if (family == AF_UNIX) { |
94 | if (wherelen + 1 > sizeof(ap->s_un.sun_path)) |
95 | return 0; |
96 | memset(&ap->s_un, 0, sizeof(ap->s_un)); |
97 | ap->s_un.sun_family = family; |
98 | strncpy(ap->s_un.sun_path, where, sizeof(ap->s_un.sun_path) - 1); |
99 | return 1; |
100 | } |
101 | #endif |
102 | if (family == AF_INET) { |
103 | if (wherelen != sizeof(struct in_addr)) |
104 | return 0; |
105 | memset(&ap->s_in, 0, sizeof(ap->s_in)); |
106 | ap->s_in.sin_family = family; |
107 | ap->s_in.sin_port = port; |
108 | ap->s_in.sin_addr = *(struct in_addr *)where; |
109 | return 1; |
110 | } |
111 | #ifdef AF_INET6 |
112 | if (family == AF_INET6) { |
113 | if (wherelen != sizeof(struct in6_addr)) |
114 | return 0; |
115 | memset(&ap->s_in6, 0, sizeof(ap->s_in6)); |
116 | ap->s_in6.sin6_family = family; |
117 | ap->s_in6.sin6_port = port; |
118 | ap->s_in6.sin6_addr = *(struct in6_addr *)where; |
119 | return 1; |
120 | } |
121 | #endif |
122 | |
123 | return 0; |
124 | } |
125 | |
126 | int BIO_ADDR_family(const BIO_ADDR *ap) |
127 | { |
128 | return ap->sa.sa_family; |
129 | } |
130 | |
131 | int BIO_ADDR_rawaddress(const BIO_ADDR *ap, void *p, size_t *l) |
132 | { |
133 | size_t len = 0; |
134 | const void *addrptr = NULL; |
135 | |
136 | if (ap->sa.sa_family == AF_INET) { |
137 | len = sizeof(ap->s_in.sin_addr); |
138 | addrptr = &ap->s_in.sin_addr; |
139 | } |
140 | #ifdef AF_INET6 |
141 | else if (ap->sa.sa_family == AF_INET6) { |
142 | len = sizeof(ap->s_in6.sin6_addr); |
143 | addrptr = &ap->s_in6.sin6_addr; |
144 | } |
145 | #endif |
146 | #ifdef AF_UNIX |
147 | else if (ap->sa.sa_family == AF_UNIX) { |
148 | len = strlen(ap->s_un.sun_path); |
149 | addrptr = &ap->s_un.sun_path; |
150 | } |
151 | #endif |
152 | |
153 | if (addrptr == NULL) |
154 | return 0; |
155 | |
156 | if (p != NULL) { |
157 | memcpy(p, addrptr, len); |
158 | } |
159 | if (l != NULL) |
160 | *l = len; |
161 | |
162 | return 1; |
163 | } |
164 | |
165 | unsigned short BIO_ADDR_rawport(const BIO_ADDR *ap) |
166 | { |
167 | if (ap->sa.sa_family == AF_INET) |
168 | return ap->s_in.sin_port; |
169 | #ifdef AF_INET6 |
170 | if (ap->sa.sa_family == AF_INET6) |
171 | return ap->s_in6.sin6_port; |
172 | #endif |
173 | return 0; |
174 | } |
175 | |
176 | /*- |
177 | * addr_strings - helper function to get host and service names |
178 | * @ap: the BIO_ADDR that has the input info |
179 | * @numeric: 0 if actual names should be returned, 1 if the numeric |
180 | * representation should be returned. |
181 | * @hostname: a pointer to a pointer to a memory area to store the |
182 | * host name or numeric representation. Unused if NULL. |
183 | * @service: a pointer to a pointer to a memory area to store the |
184 | * service name or numeric representation. Unused if NULL. |
185 | * |
186 | * The return value is 0 on failure, with the error code in the error |
187 | * stack, and 1 on success. |
188 | */ |
189 | static int addr_strings(const BIO_ADDR *ap, int numeric, |
190 | char **hostname, char **service) |
191 | { |
192 | if (BIO_sock_init() != 1) |
193 | return 0; |
194 | |
195 | if (1) { |
196 | #ifdef AI_PASSIVE |
197 | int ret = 0; |
198 | char host[NI_MAXHOST] = "" , serv[NI_MAXSERV] = "" ; |
199 | int flags = 0; |
200 | |
201 | if (numeric) |
202 | flags |= NI_NUMERICHOST | NI_NUMERICSERV; |
203 | |
204 | if ((ret = getnameinfo(BIO_ADDR_sockaddr(ap), |
205 | BIO_ADDR_sockaddr_size(ap), |
206 | host, sizeof(host), serv, sizeof(serv), |
207 | flags)) != 0) { |
208 | # ifdef EAI_SYSTEM |
209 | if (ret == EAI_SYSTEM) { |
210 | ERR_raise_data(ERR_LIB_SYS, get_last_socket_error(), |
211 | "calling getnameinfo()" ); |
212 | BIOerr(BIO_F_ADDR_STRINGS, ERR_R_SYS_LIB); |
213 | } else |
214 | # endif |
215 | { |
216 | BIOerr(BIO_F_ADDR_STRINGS, ERR_R_SYS_LIB); |
217 | ERR_add_error_data(1, gai_strerror(ret)); |
218 | } |
219 | return 0; |
220 | } |
221 | |
222 | /* VMS getnameinfo() has a bug, it doesn't fill in serv, which |
223 | * leaves it with whatever garbage that happens to be there. |
224 | * However, we initialise serv with the empty string (serv[0] |
225 | * is therefore NUL), so it gets real easy to detect when things |
226 | * didn't go the way one might expect. |
227 | */ |
228 | if (serv[0] == '\0') { |
229 | BIO_snprintf(serv, sizeof(serv), "%d" , |
230 | ntohs(BIO_ADDR_rawport(ap))); |
231 | } |
232 | |
233 | if (hostname != NULL) |
234 | *hostname = OPENSSL_strdup(host); |
235 | if (service != NULL) |
236 | *service = OPENSSL_strdup(serv); |
237 | } else { |
238 | #endif |
239 | if (hostname != NULL) |
240 | *hostname = OPENSSL_strdup(inet_ntoa(ap->s_in.sin_addr)); |
241 | if (service != NULL) { |
242 | char serv[6]; /* port is 16 bits => max 5 decimal digits */ |
243 | BIO_snprintf(serv, sizeof(serv), "%d" , ntohs(ap->s_in.sin_port)); |
244 | *service = OPENSSL_strdup(serv); |
245 | } |
246 | } |
247 | |
248 | if ((hostname != NULL && *hostname == NULL) |
249 | || (service != NULL && *service == NULL)) { |
250 | if (hostname != NULL) { |
251 | OPENSSL_free(*hostname); |
252 | *hostname = NULL; |
253 | } |
254 | if (service != NULL) { |
255 | OPENSSL_free(*service); |
256 | *service = NULL; |
257 | } |
258 | BIOerr(BIO_F_ADDR_STRINGS, ERR_R_MALLOC_FAILURE); |
259 | return 0; |
260 | } |
261 | |
262 | return 1; |
263 | } |
264 | |
265 | char *BIO_ADDR_hostname_string(const BIO_ADDR *ap, int numeric) |
266 | { |
267 | char *hostname = NULL; |
268 | |
269 | if (addr_strings(ap, numeric, &hostname, NULL)) |
270 | return hostname; |
271 | |
272 | return NULL; |
273 | } |
274 | |
275 | char *BIO_ADDR_service_string(const BIO_ADDR *ap, int numeric) |
276 | { |
277 | char *service = NULL; |
278 | |
279 | if (addr_strings(ap, numeric, NULL, &service)) |
280 | return service; |
281 | |
282 | return NULL; |
283 | } |
284 | |
285 | char *BIO_ADDR_path_string(const BIO_ADDR *ap) |
286 | { |
287 | #ifdef AF_UNIX |
288 | if (ap->sa.sa_family == AF_UNIX) |
289 | return OPENSSL_strdup(ap->s_un.sun_path); |
290 | #endif |
291 | return NULL; |
292 | } |
293 | |
294 | /* |
295 | * BIO_ADDR_sockaddr - non-public routine to return the struct sockaddr |
296 | * for a given BIO_ADDR. In reality, this is simply a type safe cast. |
297 | * The returned struct sockaddr is const, so it can't be tampered with. |
298 | */ |
299 | const struct sockaddr *BIO_ADDR_sockaddr(const BIO_ADDR *ap) |
300 | { |
301 | return &(ap->sa); |
302 | } |
303 | |
304 | /* |
305 | * BIO_ADDR_sockaddr_noconst - non-public function that does the same |
306 | * as BIO_ADDR_sockaddr, but returns a non-const. USE WITH CARE, as |
307 | * it allows you to tamper with the data (and thereby the contents |
308 | * of the input BIO_ADDR). |
309 | */ |
310 | struct sockaddr *BIO_ADDR_sockaddr_noconst(BIO_ADDR *ap) |
311 | { |
312 | return &(ap->sa); |
313 | } |
314 | |
315 | /* |
316 | * BIO_ADDR_sockaddr_size - non-public function that returns the size |
317 | * of the struct sockaddr the BIO_ADDR is using. If the protocol family |
318 | * isn't set or is something other than AF_INET, AF_INET6 or AF_UNIX, |
319 | * the size of the BIO_ADDR type is returned. |
320 | */ |
321 | socklen_t BIO_ADDR_sockaddr_size(const BIO_ADDR *ap) |
322 | { |
323 | if (ap->sa.sa_family == AF_INET) |
324 | return sizeof(ap->s_in); |
325 | #ifdef AF_INET6 |
326 | if (ap->sa.sa_family == AF_INET6) |
327 | return sizeof(ap->s_in6); |
328 | #endif |
329 | #ifdef AF_UNIX |
330 | if (ap->sa.sa_family == AF_UNIX) |
331 | return sizeof(ap->s_un); |
332 | #endif |
333 | return sizeof(*ap); |
334 | } |
335 | |
336 | /********************************************************************** |
337 | * |
338 | * Address info database |
339 | * |
340 | */ |
341 | |
342 | const BIO_ADDRINFO *BIO_ADDRINFO_next(const BIO_ADDRINFO *bai) |
343 | { |
344 | if (bai != NULL) |
345 | return bai->bai_next; |
346 | return NULL; |
347 | } |
348 | |
349 | int BIO_ADDRINFO_family(const BIO_ADDRINFO *bai) |
350 | { |
351 | if (bai != NULL) |
352 | return bai->bai_family; |
353 | return 0; |
354 | } |
355 | |
356 | int BIO_ADDRINFO_socktype(const BIO_ADDRINFO *bai) |
357 | { |
358 | if (bai != NULL) |
359 | return bai->bai_socktype; |
360 | return 0; |
361 | } |
362 | |
363 | int BIO_ADDRINFO_protocol(const BIO_ADDRINFO *bai) |
364 | { |
365 | if (bai != NULL) { |
366 | if (bai->bai_protocol != 0) |
367 | return bai->bai_protocol; |
368 | |
369 | #ifdef AF_UNIX |
370 | if (bai->bai_family == AF_UNIX) |
371 | return 0; |
372 | #endif |
373 | |
374 | switch (bai->bai_socktype) { |
375 | case SOCK_STREAM: |
376 | return IPPROTO_TCP; |
377 | case SOCK_DGRAM: |
378 | return IPPROTO_UDP; |
379 | default: |
380 | break; |
381 | } |
382 | } |
383 | return 0; |
384 | } |
385 | |
386 | /* |
387 | * BIO_ADDRINFO_sockaddr_size - non-public function that returns the size |
388 | * of the struct sockaddr inside the BIO_ADDRINFO. |
389 | */ |
390 | socklen_t BIO_ADDRINFO_sockaddr_size(const BIO_ADDRINFO *bai) |
391 | { |
392 | if (bai != NULL) |
393 | return bai->bai_addrlen; |
394 | return 0; |
395 | } |
396 | |
397 | /* |
398 | * BIO_ADDRINFO_sockaddr - non-public function that returns bai_addr |
399 | * as the struct sockaddr it is. |
400 | */ |
401 | const struct sockaddr *BIO_ADDRINFO_sockaddr(const BIO_ADDRINFO *bai) |
402 | { |
403 | if (bai != NULL) |
404 | return bai->bai_addr; |
405 | return NULL; |
406 | } |
407 | |
408 | const BIO_ADDR *BIO_ADDRINFO_address(const BIO_ADDRINFO *bai) |
409 | { |
410 | if (bai != NULL) |
411 | return (BIO_ADDR *)bai->bai_addr; |
412 | return NULL; |
413 | } |
414 | |
415 | void BIO_ADDRINFO_free(BIO_ADDRINFO *bai) |
416 | { |
417 | if (bai == NULL) |
418 | return; |
419 | |
420 | #ifdef AI_PASSIVE |
421 | # ifdef AF_UNIX |
422 | # define _cond bai->bai_family != AF_UNIX |
423 | # else |
424 | # define _cond 1 |
425 | # endif |
426 | if (_cond) { |
427 | freeaddrinfo(bai); |
428 | return; |
429 | } |
430 | #endif |
431 | |
432 | /* Free manually when we know that addrinfo_wrap() was used. |
433 | * See further comment above addrinfo_wrap() |
434 | */ |
435 | while (bai != NULL) { |
436 | BIO_ADDRINFO *next = bai->bai_next; |
437 | OPENSSL_free(bai->bai_addr); |
438 | OPENSSL_free(bai); |
439 | bai = next; |
440 | } |
441 | } |
442 | |
443 | /********************************************************************** |
444 | * |
445 | * Service functions |
446 | * |
447 | */ |
448 | |
449 | /*- |
450 | * The specs in hostserv can take these forms: |
451 | * |
452 | * host:service => *host = "host", *service = "service" |
453 | * host:* => *host = "host", *service = NULL |
454 | * host: => *host = "host", *service = NULL |
455 | * :service => *host = NULL, *service = "service" |
456 | * *:service => *host = NULL, *service = "service" |
457 | * |
458 | * in case no : is present in the string, the result depends on |
459 | * hostserv_prio, as follows: |
460 | * |
461 | * when hostserv_prio == BIO_PARSE_PRIO_HOST |
462 | * host => *host = "host", *service untouched |
463 | * |
464 | * when hostserv_prio == BIO_PARSE_PRIO_SERV |
465 | * service => *host untouched, *service = "service" |
466 | * |
467 | */ |
468 | int BIO_parse_hostserv(const char *hostserv, char **host, char **service, |
469 | enum BIO_hostserv_priorities hostserv_prio) |
470 | { |
471 | const char *h = NULL; size_t hl = 0; |
472 | const char *p = NULL; size_t pl = 0; |
473 | |
474 | if (*hostserv == '[') { |
475 | if ((p = strchr(hostserv, ']')) == NULL) |
476 | goto spec_err; |
477 | h = hostserv + 1; |
478 | hl = p - h; |
479 | p++; |
480 | if (*p == '\0') |
481 | p = NULL; |
482 | else if (*p != ':') |
483 | goto spec_err; |
484 | else { |
485 | p++; |
486 | pl = strlen(p); |
487 | } |
488 | } else { |
489 | const char *p2 = strrchr(hostserv, ':'); |
490 | p = strchr(hostserv, ':'); |
491 | |
492 | /*- |
493 | * Check for more than one colon. There are three possible |
494 | * interpretations: |
495 | * 1. IPv6 address with port number, last colon being separator. |
496 | * 2. IPv6 address only. |
497 | * 3. IPv6 address only if hostserv_prio == BIO_PARSE_PRIO_HOST, |
498 | * IPv6 address and port number if hostserv_prio == BIO_PARSE_PRIO_SERV |
499 | * Because of this ambiguity, we currently choose to make it an |
500 | * error. |
501 | */ |
502 | if (p != p2) |
503 | goto amb_err; |
504 | |
505 | if (p != NULL) { |
506 | h = hostserv; |
507 | hl = p - h; |
508 | p++; |
509 | pl = strlen(p); |
510 | } else if (hostserv_prio == BIO_PARSE_PRIO_HOST) { |
511 | h = hostserv; |
512 | hl = strlen(h); |
513 | } else { |
514 | p = hostserv; |
515 | pl = strlen(p); |
516 | } |
517 | } |
518 | |
519 | if (p != NULL && strchr(p, ':')) |
520 | goto spec_err; |
521 | |
522 | if (h != NULL && host != NULL) { |
523 | if (hl == 0 |
524 | || (hl == 1 && h[0] == '*')) { |
525 | *host = NULL; |
526 | } else { |
527 | *host = OPENSSL_strndup(h, hl); |
528 | if (*host == NULL) |
529 | goto memerr; |
530 | } |
531 | } |
532 | if (p != NULL && service != NULL) { |
533 | if (pl == 0 |
534 | || (pl == 1 && p[0] == '*')) { |
535 | *service = NULL; |
536 | } else { |
537 | *service = OPENSSL_strndup(p, pl); |
538 | if (*service == NULL) |
539 | goto memerr; |
540 | } |
541 | } |
542 | |
543 | return 1; |
544 | amb_err: |
545 | BIOerr(BIO_F_BIO_PARSE_HOSTSERV, BIO_R_AMBIGUOUS_HOST_OR_SERVICE); |
546 | return 0; |
547 | spec_err: |
548 | BIOerr(BIO_F_BIO_PARSE_HOSTSERV, BIO_R_MALFORMED_HOST_OR_SERVICE); |
549 | return 0; |
550 | memerr: |
551 | BIOerr(BIO_F_BIO_PARSE_HOSTSERV, ERR_R_MALLOC_FAILURE); |
552 | return 0; |
553 | } |
554 | |
555 | /* addrinfo_wrap is used to build our own addrinfo "chain". |
556 | * (it has only one entry, so calling it a chain may be a stretch) |
557 | * It should ONLY be called when getaddrinfo() and friends |
558 | * aren't available, OR when dealing with a non IP protocol |
559 | * family, such as AF_UNIX |
560 | * |
561 | * the return value is 1 on success, or 0 on failure, which |
562 | * only happens if a memory allocation error occurred. |
563 | */ |
564 | static int addrinfo_wrap(int family, int socktype, |
565 | const void *where, size_t wherelen, |
566 | unsigned short port, |
567 | BIO_ADDRINFO **bai) |
568 | { |
569 | if ((*bai = OPENSSL_zalloc(sizeof(**bai))) == NULL) { |
570 | BIOerr(BIO_F_ADDRINFO_WRAP, ERR_R_MALLOC_FAILURE); |
571 | return 0; |
572 | } |
573 | |
574 | (*bai)->bai_family = family; |
575 | (*bai)->bai_socktype = socktype; |
576 | if (socktype == SOCK_STREAM) |
577 | (*bai)->bai_protocol = IPPROTO_TCP; |
578 | if (socktype == SOCK_DGRAM) |
579 | (*bai)->bai_protocol = IPPROTO_UDP; |
580 | #ifdef AF_UNIX |
581 | if (family == AF_UNIX) |
582 | (*bai)->bai_protocol = 0; |
583 | #endif |
584 | { |
585 | /* Magic: We know that BIO_ADDR_sockaddr_noconst is really |
586 | just an advanced cast of BIO_ADDR* to struct sockaddr * |
587 | by the power of union, so while it may seem that we're |
588 | creating a memory leak here, we are not. It will be |
589 | all right. */ |
590 | BIO_ADDR *addr = BIO_ADDR_new(); |
591 | if (addr != NULL) { |
592 | BIO_ADDR_rawmake(addr, family, where, wherelen, port); |
593 | (*bai)->bai_addr = BIO_ADDR_sockaddr_noconst(addr); |
594 | } |
595 | } |
596 | (*bai)->bai_next = NULL; |
597 | if ((*bai)->bai_addr == NULL) { |
598 | BIO_ADDRINFO_free(*bai); |
599 | *bai = NULL; |
600 | return 0; |
601 | } |
602 | return 1; |
603 | } |
604 | |
605 | DEFINE_RUN_ONCE_STATIC(do_bio_lookup_init) |
606 | { |
607 | if (!OPENSSL_init_crypto(0, NULL)) |
608 | return 0; |
609 | bio_lookup_lock = CRYPTO_THREAD_lock_new(); |
610 | return bio_lookup_lock != NULL; |
611 | } |
612 | |
613 | int BIO_lookup(const char *host, const char *service, |
614 | enum BIO_lookup_type lookup_type, |
615 | int family, int socktype, BIO_ADDRINFO **res) |
616 | { |
617 | return BIO_lookup_ex(host, service, lookup_type, family, socktype, 0, res); |
618 | } |
619 | |
620 | /*- |
621 | * BIO_lookup_ex - look up the node and service you want to connect to. |
622 | * @node: the node you want to connect to. |
623 | * @service: the service you want to connect to. |
624 | * @lookup_type: declare intent with the result, client or server. |
625 | * @family: the address family you want to use. Use AF_UNSPEC for any, or |
626 | * AF_INET, AF_INET6 or AF_UNIX. |
627 | * @socktype: The socket type you want to use. Can be SOCK_STREAM, SOCK_DGRAM |
628 | * or 0 for all. |
629 | * @protocol: The protocol to use, e.g. IPPROTO_TCP or IPPROTO_UDP or 0 for all. |
630 | * Note that some platforms may not return IPPROTO_SCTP without |
631 | * explicitly requesting it (i.e. IPPROTO_SCTP may not be returned |
632 | * with 0 for the protocol) |
633 | * @res: Storage place for the resulting list of returned addresses |
634 | * |
635 | * This will do a lookup of the node and service that you want to connect to. |
636 | * It returns a linked list of different addresses you can try to connect to. |
637 | * |
638 | * When no longer needed you should call BIO_ADDRINFO_free() to free the result. |
639 | * |
640 | * The return value is 1 on success or 0 in case of error. |
641 | */ |
642 | int BIO_lookup_ex(const char *host, const char *service, int lookup_type, |
643 | int family, int socktype, int protocol, BIO_ADDRINFO **res) |
644 | { |
645 | int ret = 0; /* Assume failure */ |
646 | |
647 | switch(family) { |
648 | case AF_INET: |
649 | #ifdef AF_INET6 |
650 | case AF_INET6: |
651 | #endif |
652 | #ifdef AF_UNIX |
653 | case AF_UNIX: |
654 | #endif |
655 | #ifdef AF_UNSPEC |
656 | case AF_UNSPEC: |
657 | #endif |
658 | break; |
659 | default: |
660 | BIOerr(BIO_F_BIO_LOOKUP_EX, BIO_R_UNSUPPORTED_PROTOCOL_FAMILY); |
661 | return 0; |
662 | } |
663 | |
664 | #ifdef AF_UNIX |
665 | if (family == AF_UNIX) { |
666 | if (addrinfo_wrap(family, socktype, host, strlen(host), 0, res)) |
667 | return 1; |
668 | else |
669 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE); |
670 | return 0; |
671 | } |
672 | #endif |
673 | |
674 | if (BIO_sock_init() != 1) |
675 | return 0; |
676 | |
677 | if (1) { |
678 | #ifdef AI_PASSIVE |
679 | int gai_ret = 0, old_ret = 0; |
680 | struct addrinfo hints; |
681 | |
682 | memset(&hints, 0, sizeof(hints)); |
683 | |
684 | hints.ai_family = family; |
685 | hints.ai_socktype = socktype; |
686 | hints.ai_protocol = protocol; |
687 | # ifdef AI_ADDRCONFIG |
688 | # ifdef AF_UNSPEC |
689 | if (family == AF_UNSPEC) |
690 | # endif |
691 | hints.ai_flags |= AI_ADDRCONFIG; |
692 | # endif |
693 | |
694 | if (lookup_type == BIO_LOOKUP_SERVER) |
695 | hints.ai_flags |= AI_PASSIVE; |
696 | |
697 | /* Note that |res| SHOULD be a 'struct addrinfo **' thanks to |
698 | * macro magic in bio_local.h |
699 | */ |
700 | # if defined(AI_ADDRCONFIG) && defined(AI_NUMERICHOST) |
701 | retry: |
702 | # endif |
703 | switch ((gai_ret = getaddrinfo(host, service, &hints, res))) { |
704 | # ifdef EAI_SYSTEM |
705 | case EAI_SYSTEM: |
706 | ERR_raise_data(ERR_LIB_SYS, get_last_socket_error(), |
707 | "calling getaddrinfo()" ); |
708 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_SYS_LIB); |
709 | break; |
710 | # endif |
711 | # ifdef EAI_MEMORY |
712 | case EAI_MEMORY: |
713 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE); |
714 | break; |
715 | # endif |
716 | case 0: |
717 | ret = 1; /* Success */ |
718 | break; |
719 | default: |
720 | # if defined(AI_ADDRCONFIG) && defined(AI_NUMERICHOST) |
721 | if (hints.ai_flags & AI_ADDRCONFIG) { |
722 | hints.ai_flags &= ~AI_ADDRCONFIG; |
723 | hints.ai_flags |= AI_NUMERICHOST; |
724 | old_ret = gai_ret; |
725 | goto retry; |
726 | } |
727 | # endif |
728 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_SYS_LIB); |
729 | ERR_add_error_data(1, gai_strerror(old_ret ? old_ret : gai_ret)); |
730 | break; |
731 | } |
732 | } else { |
733 | #endif |
734 | const struct hostent *he; |
735 | /* |
736 | * Because struct hostent is defined for 32-bit pointers only with |
737 | * VMS C, we need to make sure that '&he_fallback_address' and |
738 | * '&he_fallback_addresses' are 32-bit pointers |
739 | */ |
740 | #if defined(OPENSSL_SYS_VMS) && defined(__DECC) |
741 | # pragma pointer_size save |
742 | # pragma pointer_size 32 |
743 | #endif |
744 | /* Windows doesn't seem to have in_addr_t */ |
745 | #ifdef OPENSSL_SYS_WINDOWS |
746 | static uint32_t he_fallback_address; |
747 | static const char *he_fallback_addresses[] = |
748 | { (char *)&he_fallback_address, NULL }; |
749 | #else |
750 | static in_addr_t he_fallback_address; |
751 | static const char *he_fallback_addresses[] = |
752 | { (char *)&he_fallback_address, NULL }; |
753 | #endif |
754 | static const struct hostent he_fallback = |
755 | { NULL, NULL, AF_INET, sizeof(he_fallback_address), |
756 | (char **)&he_fallback_addresses }; |
757 | #if defined(OPENSSL_SYS_VMS) && defined(__DECC) |
758 | # pragma pointer_size restore |
759 | #endif |
760 | |
761 | struct servent *se; |
762 | /* Apparently, on WIN64, s_proto and s_port have traded places... */ |
763 | #ifdef _WIN64 |
764 | struct servent se_fallback = { NULL, NULL, NULL, 0 }; |
765 | #else |
766 | struct servent se_fallback = { NULL, NULL, 0, NULL }; |
767 | #endif |
768 | |
769 | if (!RUN_ONCE(&bio_lookup_init, do_bio_lookup_init)) { |
770 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE); |
771 | ret = 0; |
772 | goto err; |
773 | } |
774 | |
775 | CRYPTO_THREAD_write_lock(bio_lookup_lock); |
776 | he_fallback_address = INADDR_ANY; |
777 | if (host == NULL) { |
778 | he = &he_fallback; |
779 | switch(lookup_type) { |
780 | case BIO_LOOKUP_CLIENT: |
781 | he_fallback_address = INADDR_LOOPBACK; |
782 | break; |
783 | case BIO_LOOKUP_SERVER: |
784 | he_fallback_address = INADDR_ANY; |
785 | break; |
786 | default: |
787 | /* We forgot to handle a lookup type! */ |
788 | assert("We forgot to handle a lookup type!" == NULL); |
789 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_INTERNAL_ERROR); |
790 | ret = 0; |
791 | goto err; |
792 | } |
793 | } else { |
794 | he = gethostbyname(host); |
795 | |
796 | if (he == NULL) { |
797 | #ifndef OPENSSL_SYS_WINDOWS |
798 | /* |
799 | * This might be misleading, because h_errno is used as if |
800 | * it was errno. To minimize mixup add 1000. Underlying |
801 | * reason for this is that hstrerror is declared obsolete, |
802 | * not to mention that a) h_errno is not always guaranteed |
803 | * to be meaningless; b) hstrerror can reside in yet another |
804 | * library, linking for sake of hstrerror is an overkill; |
805 | * c) this path is not executed on contemporary systems |
806 | * anyway [above getaddrinfo/gai_strerror is]. We just let |
807 | * system administrator figure this out... |
808 | */ |
809 | # if defined(OPENSSL_SYS_VXWORKS) |
810 | /* h_errno doesn't exist on VxWorks */ |
811 | ERR_raise_data(ERR_LIB_SYS, 1000, |
812 | "calling gethostbyname()" ); |
813 | # else |
814 | ERR_raise_data(ERR_LIB_SYS, 1000 + h_errno, |
815 | "calling gethostbyname()" ); |
816 | # endif |
817 | #else |
818 | ERR_raise_data(ERR_LIB_SYS, get_last_socket_error(), |
819 | "calling gethostbyname()" ); |
820 | #endif |
821 | ret = 0; |
822 | goto err; |
823 | } |
824 | } |
825 | |
826 | if (service == NULL) { |
827 | se_fallback.s_port = 0; |
828 | se_fallback.s_proto = NULL; |
829 | se = &se_fallback; |
830 | } else { |
831 | char *endp = NULL; |
832 | long portnum = strtol(service, &endp, 10); |
833 | |
834 | /* |
835 | * Because struct servent is defined for 32-bit pointers only with |
836 | * VMS C, we need to make sure that 'proto' is a 32-bit pointer. |
837 | */ |
838 | #if defined(OPENSSL_SYS_VMS) && defined(__DECC) |
839 | # pragma pointer_size save |
840 | # pragma pointer_size 32 |
841 | #endif |
842 | char *proto = NULL; |
843 | #if defined(OPENSSL_SYS_VMS) && defined(__DECC) |
844 | # pragma pointer_size restore |
845 | #endif |
846 | |
847 | switch (socktype) { |
848 | case SOCK_STREAM: |
849 | proto = "tcp" ; |
850 | break; |
851 | case SOCK_DGRAM: |
852 | proto = "udp" ; |
853 | break; |
854 | } |
855 | |
856 | if (endp != service && *endp == '\0' |
857 | && portnum > 0 && portnum < 65536) { |
858 | se_fallback.s_port = htons((unsigned short)portnum); |
859 | se_fallback.s_proto = proto; |
860 | se = &se_fallback; |
861 | } else if (endp == service) { |
862 | se = getservbyname(service, proto); |
863 | |
864 | if (se == NULL) { |
865 | ERR_raise_data(ERR_LIB_SYS, get_last_socket_error(), |
866 | "calling getservbyname()" ); |
867 | goto err; |
868 | } |
869 | } else { |
870 | BIOerr(BIO_F_BIO_LOOKUP_EX, BIO_R_MALFORMED_HOST_OR_SERVICE); |
871 | goto err; |
872 | } |
873 | } |
874 | |
875 | *res = NULL; |
876 | |
877 | { |
878 | /* |
879 | * Because hostent::h_addr_list is an array of 32-bit pointers with VMS C, |
880 | * we must make sure our iterator designates the same element type, hence |
881 | * the pointer size dance. |
882 | */ |
883 | #if defined(OPENSSL_SYS_VMS) && defined(__DECC) |
884 | # pragma pointer_size save |
885 | # pragma pointer_size 32 |
886 | #endif |
887 | char **addrlistp; |
888 | #if defined(OPENSSL_SYS_VMS) && defined(__DECC) |
889 | # pragma pointer_size restore |
890 | #endif |
891 | size_t addresses; |
892 | BIO_ADDRINFO *tmp_bai = NULL; |
893 | |
894 | /* The easiest way to create a linked list from an |
895 | array is to start from the back */ |
896 | for(addrlistp = he->h_addr_list; *addrlistp != NULL; |
897 | addrlistp++) |
898 | ; |
899 | |
900 | for(addresses = addrlistp - he->h_addr_list; |
901 | addrlistp--, addresses-- > 0; ) { |
902 | if (!addrinfo_wrap(he->h_addrtype, socktype, |
903 | *addrlistp, he->h_length, |
904 | se->s_port, &tmp_bai)) |
905 | goto addrinfo_malloc_err; |
906 | tmp_bai->bai_next = *res; |
907 | *res = tmp_bai; |
908 | continue; |
909 | addrinfo_malloc_err: |
910 | BIO_ADDRINFO_free(*res); |
911 | *res = NULL; |
912 | BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE); |
913 | ret = 0; |
914 | goto err; |
915 | } |
916 | |
917 | ret = 1; |
918 | } |
919 | err: |
920 | CRYPTO_THREAD_unlock(bio_lookup_lock); |
921 | } |
922 | |
923 | return ret; |
924 | } |
925 | |
926 | #endif /* OPENSSL_NO_SOCK */ |
927 | |