| 1 | /* |
| 2 | Copyright (c) 2007-2016 Contributors as noted in the AUTHORS file |
| 3 | |
| 4 | This file is part of libzmq, the ZeroMQ core engine in C++. |
| 5 | |
| 6 | libzmq is free software; you can redistribute it and/or modify it under |
| 7 | the terms of the GNU Lesser General Public License (LGPL) as published |
| 8 | by the Free Software Foundation; either version 3 of the License, or |
| 9 | (at your option) any later version. |
| 10 | |
| 11 | As a special exception, the Contributors give you permission to link |
| 12 | this library with independent modules to produce an executable, |
| 13 | regardless of the license terms of these independent modules, and to |
| 14 | copy and distribute the resulting executable under terms of your choice, |
| 15 | provided that you also meet, for each linked independent module, the |
| 16 | terms and conditions of the license of that module. An independent |
| 17 | module is a module which is not derived from or based on this library. |
| 18 | If you modify this library, you must extend this exception to your |
| 19 | version of the library. |
| 20 | |
| 21 | libzmq is distributed in the hope that it will be useful, but WITHOUT |
| 22 | ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
| 23 | FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public |
| 24 | License for more details. |
| 25 | |
| 26 | You should have received a copy of the GNU Lesser General Public License |
| 27 | along with this program. If not, see <http://www.gnu.org/licenses/>. |
| 28 | */ |
| 29 | |
| 30 | #include "precompiled.hpp" |
| 31 | #include <string> |
| 32 | |
| 33 | #include "macros.hpp" |
| 34 | #include "tcp_address.hpp" |
| 35 | #include "stdint.hpp" |
| 36 | #include "err.hpp" |
| 37 | #include "ip.hpp" |
| 38 | |
| 39 | #ifndef ZMQ_HAVE_WINDOWS |
| 40 | #include <sys/types.h> |
| 41 | #include <arpa/inet.h> |
| 42 | #include <netinet/tcp.h> |
| 43 | #include <net/if.h> |
| 44 | #include <netdb.h> |
| 45 | #include <ctype.h> |
| 46 | #include <unistd.h> |
| 47 | #include <stdlib.h> |
| 48 | #endif |
| 49 | |
| 50 | #include <limits.h> |
| 51 | |
| 52 | zmq::tcp_address_t::tcp_address_t () : _has_src_addr (false) |
| 53 | { |
| 54 | memset (&_address, 0, sizeof (_address)); |
| 55 | memset (&_source_address, 0, sizeof (_source_address)); |
| 56 | } |
| 57 | |
| 58 | zmq::tcp_address_t::tcp_address_t (const sockaddr *sa_, socklen_t sa_len_) : |
| 59 | _has_src_addr (false) |
| 60 | { |
| 61 | zmq_assert (sa_ && sa_len_ > 0); |
| 62 | |
| 63 | memset (&_address, 0, sizeof (_address)); |
| 64 | memset (&_source_address, 0, sizeof (_source_address)); |
| 65 | if (sa_->sa_family == AF_INET |
| 66 | && sa_len_ >= static_cast<socklen_t> (sizeof (_address.ipv4))) |
| 67 | memcpy (&_address.ipv4, sa_, sizeof (_address.ipv4)); |
| 68 | else if (sa_->sa_family == AF_INET6 |
| 69 | && sa_len_ >= static_cast<socklen_t> (sizeof (_address.ipv6))) |
| 70 | memcpy (&_address.ipv6, sa_, sizeof (_address.ipv6)); |
| 71 | } |
| 72 | |
| 73 | int zmq::tcp_address_t::resolve (const char *name_, bool local_, bool ipv6_) |
| 74 | { |
| 75 | // Test the ';' to know if we have a source address in name_ |
| 76 | const char *src_delimiter = strrchr (name_, ';'); |
| 77 | if (src_delimiter) { |
| 78 | std::string src_name (name_, src_delimiter - name_); |
| 79 | |
| 80 | ip_resolver_options_t src_resolver_opts; |
| 81 | |
| 82 | src_resolver_opts |
| 83 | .bindable (true) |
| 84 | // Restrict hostname/service to literals to avoid any DNS |
| 85 | // lookups or service-name irregularity due to |
| 86 | // indeterminate socktype. |
| 87 | .allow_dns (false) |
| 88 | .allow_nic_name (true) |
| 89 | .ipv6 (ipv6_) |
| 90 | .expect_port (true); |
| 91 | |
| 92 | ip_resolver_t src_resolver (src_resolver_opts); |
| 93 | |
| 94 | const int rc = |
| 95 | src_resolver.resolve (&_source_address, src_name.c_str ()); |
| 96 | if (rc != 0) |
| 97 | return -1; |
| 98 | name_ = src_delimiter + 1; |
| 99 | _has_src_addr = true; |
| 100 | } |
| 101 | |
| 102 | ip_resolver_options_t resolver_opts; |
| 103 | |
| 104 | resolver_opts.bindable (local_) |
| 105 | .allow_dns (!local_) |
| 106 | .allow_nic_name (local_) |
| 107 | .ipv6 (ipv6_) |
| 108 | .expect_port (true); |
| 109 | |
| 110 | ip_resolver_t resolver (resolver_opts); |
| 111 | |
| 112 | return resolver.resolve (&_address, name_); |
| 113 | } |
| 114 | |
| 115 | template <size_t N1, size_t N2> |
| 116 | static std::string make_address_string (const char *hbuf_, |
| 117 | uint16_t port_, |
| 118 | const char (&ipv6_prefix_)[N1], |
| 119 | const char (&ipv6_suffix_)[N2]) |
| 120 | { |
| 121 | const size_t max_port_str_length = 5; |
| 122 | char buf[NI_MAXHOST + sizeof ipv6_prefix_ + sizeof ipv6_suffix_ |
| 123 | + max_port_str_length]; |
| 124 | char *pos = buf; |
| 125 | memcpy (pos, ipv6_prefix_, sizeof ipv6_prefix_ - 1); |
| 126 | pos += sizeof ipv6_prefix_ - 1; |
| 127 | const size_t hbuf_len = strlen (hbuf_); |
| 128 | memcpy (pos, hbuf_, hbuf_len); |
| 129 | pos += hbuf_len; |
| 130 | memcpy (pos, ipv6_suffix_, sizeof ipv6_suffix_ - 1); |
| 131 | pos += sizeof ipv6_suffix_ - 1; |
| 132 | pos += sprintf (pos, "%d" , ntohs (port_)); |
| 133 | return std::string (buf, pos - buf); |
| 134 | } |
| 135 | |
| 136 | int zmq::tcp_address_t::to_string (std::string &addr_) const |
| 137 | { |
| 138 | if (_address.family () != AF_INET && _address.family () != AF_INET6) { |
| 139 | addr_.clear (); |
| 140 | return -1; |
| 141 | } |
| 142 | |
| 143 | // Not using service resolving because of |
| 144 | // https://github.com/zeromq/libzmq/commit/1824574f9b5a8ce786853320e3ea09fe1f822bc4 |
| 145 | char hbuf[NI_MAXHOST]; |
| 146 | const int rc = getnameinfo (addr (), addrlen (), hbuf, sizeof (hbuf), NULL, |
| 147 | 0, NI_NUMERICHOST); |
| 148 | if (rc != 0) { |
| 149 | addr_.clear (); |
| 150 | return rc; |
| 151 | } |
| 152 | |
| 153 | const char ipv4_prefix[] = "tcp://" ; |
| 154 | const char ipv4_suffix[] = ":" ; |
| 155 | const char ipv6_prefix[] = "tcp://[" ; |
| 156 | const char ipv6_suffix[] = "]:" ; |
| 157 | if (_address.family () == AF_INET6) { |
| 158 | addr_ = make_address_string (hbuf, _address.ipv6.sin6_port, ipv6_prefix, |
| 159 | ipv6_suffix); |
| 160 | } else { |
| 161 | addr_ = make_address_string (hbuf, _address.ipv4.sin_port, ipv4_prefix, |
| 162 | ipv4_suffix); |
| 163 | } |
| 164 | return 0; |
| 165 | } |
| 166 | |
| 167 | const sockaddr *zmq::tcp_address_t::addr () const |
| 168 | { |
| 169 | return _address.as_sockaddr (); |
| 170 | } |
| 171 | |
| 172 | socklen_t zmq::tcp_address_t::addrlen () const |
| 173 | { |
| 174 | return _address.sockaddr_len (); |
| 175 | } |
| 176 | |
| 177 | const sockaddr *zmq::tcp_address_t::src_addr () const |
| 178 | { |
| 179 | return _source_address.as_sockaddr (); |
| 180 | } |
| 181 | |
| 182 | socklen_t zmq::tcp_address_t::src_addrlen () const |
| 183 | { |
| 184 | return _source_address.sockaddr_len (); |
| 185 | } |
| 186 | |
| 187 | bool zmq::tcp_address_t::has_src_addr () const |
| 188 | { |
| 189 | return _has_src_addr; |
| 190 | } |
| 191 | |
| 192 | #if defined ZMQ_HAVE_WINDOWS |
| 193 | unsigned short zmq::tcp_address_t::family () const |
| 194 | #else |
| 195 | sa_family_t zmq::tcp_address_t::family () const |
| 196 | #endif |
| 197 | { |
| 198 | return _address.family (); |
| 199 | } |
| 200 | |
| 201 | zmq::tcp_address_mask_t::tcp_address_mask_t () : _address_mask (-1) |
| 202 | { |
| 203 | memset (&_network_address, 0, sizeof (_network_address)); |
| 204 | } |
| 205 | |
| 206 | int zmq::tcp_address_mask_t::mask () const |
| 207 | { |
| 208 | return _address_mask; |
| 209 | } |
| 210 | |
| 211 | int zmq::tcp_address_mask_t::resolve (const char *name_, bool ipv6_) |
| 212 | { |
| 213 | // Find '/' at the end that separates address from the cidr mask number. |
| 214 | // Allow empty mask clause and treat it like '/32' for ipv4 or '/128' for ipv6. |
| 215 | std::string addr_str, mask_str; |
| 216 | const char *delimiter = strrchr (name_, '/'); |
| 217 | if (delimiter != NULL) { |
| 218 | addr_str.assign (name_, delimiter - name_); |
| 219 | mask_str.assign (delimiter + 1); |
| 220 | if (mask_str.empty ()) { |
| 221 | errno = EINVAL; |
| 222 | return -1; |
| 223 | } |
| 224 | } else |
| 225 | addr_str.assign (name_); |
| 226 | |
| 227 | // Parse address part using standard routines. |
| 228 | ip_resolver_options_t resolver_opts; |
| 229 | |
| 230 | resolver_opts.bindable (false) |
| 231 | .allow_dns (false) |
| 232 | .allow_nic_name (false) |
| 233 | .ipv6 (ipv6_) |
| 234 | .expect_port (false); |
| 235 | |
| 236 | ip_resolver_t resolver (resolver_opts); |
| 237 | |
| 238 | const int rc = resolver.resolve (&_network_address, addr_str.c_str ()); |
| 239 | if (rc != 0) |
| 240 | return rc; |
| 241 | |
| 242 | // Parse the cidr mask number. |
| 243 | const int full_mask_ipv4 = |
| 244 | sizeof (_network_address.ipv4.sin_addr) * CHAR_BIT; |
| 245 | const int full_mask_ipv6 = |
| 246 | sizeof (_network_address.ipv6.sin6_addr) * CHAR_BIT; |
| 247 | if (mask_str.empty ()) { |
| 248 | _address_mask = _network_address.family () == AF_INET6 ? full_mask_ipv6 |
| 249 | : full_mask_ipv4; |
| 250 | } else if (mask_str == "0" ) |
| 251 | _address_mask = 0; |
| 252 | else { |
| 253 | const long mask = strtol (mask_str.c_str (), NULL, 10); |
| 254 | if ((mask < 1) |
| 255 | || (_network_address.family () == AF_INET6 && mask > full_mask_ipv6) |
| 256 | || (_network_address.family () != AF_INET6 |
| 257 | && mask > full_mask_ipv4)) { |
| 258 | errno = EINVAL; |
| 259 | return -1; |
| 260 | } |
| 261 | _address_mask = static_cast<int> (mask); |
| 262 | } |
| 263 | |
| 264 | return 0; |
| 265 | } |
| 266 | |
| 267 | int zmq::tcp_address_mask_t::to_string (std::string &addr_) const |
| 268 | { |
| 269 | if (_network_address.family () != AF_INET |
| 270 | && _network_address.family () != AF_INET6) { |
| 271 | addr_.clear (); |
| 272 | return -1; |
| 273 | } |
| 274 | if (_address_mask == -1) { |
| 275 | addr_.clear (); |
| 276 | return -1; |
| 277 | } |
| 278 | |
| 279 | char hbuf[NI_MAXHOST]; |
| 280 | const int rc = getnameinfo (_network_address.as_sockaddr (), |
| 281 | _network_address.sockaddr_len (), hbuf, |
| 282 | sizeof (hbuf), NULL, 0, NI_NUMERICHOST); |
| 283 | if (rc != 0) { |
| 284 | addr_.clear (); |
| 285 | return rc; |
| 286 | } |
| 287 | |
| 288 | const size_t max_mask_len = 4; |
| 289 | const char ipv6_prefix[] = "[" ; |
| 290 | const char ipv6_suffix[] = "]/" ; |
| 291 | const char ipv4_suffix[] = "/" ; |
| 292 | char |
| 293 | buf[NI_MAXHOST + sizeof ipv6_prefix + sizeof ipv6_suffix + max_mask_len]; |
| 294 | char *pos = buf; |
| 295 | if (_network_address.family () == AF_INET6) { |
| 296 | memcpy (pos, ipv6_prefix, sizeof ipv6_prefix - 1); |
| 297 | pos += sizeof ipv6_prefix - 1; |
| 298 | } |
| 299 | const size_t hbuf_len = strlen (hbuf); |
| 300 | memcpy (pos, hbuf, hbuf_len); |
| 301 | pos += hbuf_len; |
| 302 | if (_network_address.family () == AF_INET6) { |
| 303 | memcpy (pos, ipv6_suffix, sizeof ipv6_suffix - 1); |
| 304 | pos += sizeof ipv6_suffix - 1; |
| 305 | } else { |
| 306 | memcpy (pos, ipv4_suffix, sizeof ipv4_suffix - 1); |
| 307 | pos += sizeof ipv4_suffix - 1; |
| 308 | } |
| 309 | pos += sprintf (pos, "%d" , _address_mask); |
| 310 | addr_.assign (buf, pos - buf); |
| 311 | return 0; |
| 312 | } |
| 313 | |
| 314 | bool zmq::tcp_address_mask_t::match_address (const struct sockaddr *ss_, |
| 315 | const socklen_t ss_len_) const |
| 316 | { |
| 317 | zmq_assert (_address_mask != -1 && ss_ != NULL |
| 318 | && ss_len_ |
| 319 | >= static_cast<socklen_t> (sizeof (struct sockaddr))); |
| 320 | |
| 321 | if (ss_->sa_family != _network_address.generic.sa_family) |
| 322 | return false; |
| 323 | |
| 324 | if (_address_mask > 0) { |
| 325 | int mask; |
| 326 | const uint8_t *our_bytes, *their_bytes; |
| 327 | if (ss_->sa_family == AF_INET6) { |
| 328 | zmq_assert (ss_len_ == sizeof (struct sockaddr_in6)); |
| 329 | their_bytes = reinterpret_cast<const uint8_t *> ( |
| 330 | &((reinterpret_cast<const struct sockaddr_in6 *> (ss_)) |
| 331 | ->sin6_addr)); |
| 332 | our_bytes = reinterpret_cast<const uint8_t *> ( |
| 333 | &_network_address.ipv6.sin6_addr); |
| 334 | mask = sizeof (struct in6_addr) * 8; |
| 335 | } else { |
| 336 | zmq_assert (ss_len_ == sizeof (struct sockaddr_in)); |
| 337 | their_bytes = reinterpret_cast<const uint8_t *> (&( |
| 338 | (reinterpret_cast<const struct sockaddr_in *> (ss_))->sin_addr)); |
| 339 | our_bytes = reinterpret_cast<const uint8_t *> ( |
| 340 | &_network_address.ipv4.sin_addr); |
| 341 | mask = sizeof (struct in_addr) * 8; |
| 342 | } |
| 343 | if (_address_mask < mask) |
| 344 | mask = _address_mask; |
| 345 | |
| 346 | const size_t full_bytes = mask / 8; |
| 347 | if (memcmp (our_bytes, their_bytes, full_bytes) != 0) |
| 348 | return false; |
| 349 | |
| 350 | const uint8_t last_byte_bits = 0xffU << (8 - mask % 8); |
| 351 | if (last_byte_bits) { |
| 352 | if ((their_bytes[full_bytes] & last_byte_bits) |
| 353 | != (our_bytes[full_bytes] & last_byte_bits)) |
| 354 | return false; |
| 355 | } |
| 356 | } |
| 357 | |
| 358 | return true; |
| 359 | } |
| 360 | |