| 1 | /* |
1 | /* |
| 2 | util.C -- process management and other utility functions |
2 | util.C -- process management and other utility functions |
| 3 | |
3 | |
| 4 | Most of these are taken from tinc, see the AUTHORS file. |
4 | Some of these are taken from tinc, see the AUTHORS file. |
| 5 | |
5 | |
| 6 | This program is free software; you can redistribute it and/or modify |
6 | This program is free software; you can redistribute it and/or modify |
| 7 | it under the terms of the GNU General Public License as published by |
7 | it under the terms of the GNU General Public License as published by |
| 8 | the Free Software Foundation; either version 2 of the License, or |
8 | the Free Software Foundation; either version 2 of the License, or |
| 9 | (at your option) any later version. |
9 | (at your option) any later version. |
| … | |
… | |
| 24 | #include <cstring> |
24 | #include <cstring> |
| 25 | |
25 | |
| 26 | #include <errno.h> |
26 | #include <errno.h> |
| 27 | #include <signal.h> |
27 | #include <signal.h> |
| 28 | #include <sys/types.h> |
28 | #include <sys/types.h> |
|
|
29 | #include <sys/wait.h> |
| 29 | #include <unistd.h> |
30 | #include <unistd.h> |
| 30 | #include <time.h> |
31 | #include <time.h> |
| 31 | #include <sys/socket.h> |
|
|
| 32 | #include <netinet/in.h> |
|
|
| 33 | #include <arpa/inet.h> |
|
|
| 34 | |
32 | |
| 35 | #include <sys/mman.h> |
33 | #include <sys/mman.h> |
| 36 | |
34 | |
| 37 | #include <openssl/rand.h> |
35 | #include "netcompat.h" |
| 38 | #include <openssl/rsa.h> |
|
|
| 39 | #include <openssl/pem.h> |
|
|
| 40 | #include <openssl/evp.h> |
|
|
| 41 | |
36 | |
| 42 | #include "gettext.h" |
37 | #include "gettext.h" |
| 43 | #include "pidfile.h" |
38 | #include "pidfile.h" |
| 44 | #include "dropin.h" |
39 | #include "dropin.h" |
| 45 | |
40 | |
| 46 | #include "global.h" |
41 | #include "global.h" |
| 47 | #include "conf.h" |
42 | #include "conf.h" |
|
|
43 | #include "util.h" |
| 48 | #include "slog.h" |
44 | #include "slog.h" |
| 49 | #include "protocol.h" |
|
|
| 50 | |
|
|
| 51 | time_t now; |
|
|
| 52 | |
45 | |
| 53 | int |
46 | int |
| 54 | write_pidfile (void) |
47 | write_pidfile (void) |
| 55 | { |
48 | { |
| 56 | int pid; |
49 | int pid; |
| … | |
… | |
| 142 | |
135 | |
| 143 | if (!confbase) |
136 | if (!confbase) |
| 144 | asprintf (&confbase, "%s/vpe", CONFDIR); |
137 | asprintf (&confbase, "%s/vpe", CONFDIR); |
| 145 | } |
138 | } |
| 146 | |
139 | |
| 147 | void pkt_queue::put (tap_packet *p) |
140 | void run_script (const run_script_cb &cb, bool wait) |
| 148 | { |
141 | { |
| 149 | if (queue[i]) |
142 | int pid; |
| 150 | { |
143 | |
| 151 | delete queue[i]; |
144 | if ((pid = fork ()) == 0) |
| 152 | j = (j + 1) % QUEUEDEPTH; |
|
|
| 153 | } |
145 | { |
| 154 | |
146 | char *filename; |
| 155 | queue[i] = p; |
147 | asprintf (&filename, "%s/%s", confbase, cb()); |
| 156 | |
148 | execl (filename, filename, (char *) 0); |
| 157 | i = (i + 1) % QUEUEDEPTH; |
149 | exit (255); |
| 158 | } |
|
|
| 159 | |
|
|
| 160 | tap_packet *pkt_queue::get () |
|
|
| 161 | { |
|
|
| 162 | tap_packet *p = queue[j]; |
|
|
| 163 | |
|
|
| 164 | if (p) |
|
|
| 165 | { |
150 | } |
| 166 | queue[j] = 0; |
151 | else if (pid > 0) |
| 167 | j = (j + 1) % QUEUEDEPTH; |
|
|
| 168 | } |
152 | { |
| 169 | |
153 | if (wait) |
| 170 | return p; |
154 | { |
|
|
155 | waitpid (pid, 0, 0); |
|
|
156 | /* TODO: check status */ |
|
|
157 | } |
|
|
158 | } |
| 171 | } |
159 | } |
| 172 | |
160 | |
| 173 | pkt_queue::pkt_queue () |
161 | #if ENABLE_HTTP_PROXY |
|
|
162 | // works like strdup |
|
|
163 | u8 * |
|
|
164 | base64_encode (const u8 *data, unsigned int len) |
| 174 | { |
165 | { |
| 175 | memset (queue, 0, sizeof (queue)); |
166 | const static char base64[65] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; |
| 176 | i = 0; |
|
|
| 177 | j = 0; |
|
|
| 178 | } |
|
|
| 179 | |
167 | |
| 180 | pkt_queue::~pkt_queue () |
168 | unsigned int t, i; |
| 181 | { |
169 | const u8 *end = data + len; |
| 182 | for (i = QUEUEDEPTH; --i > 0; ) |
170 | u8 *res = new u8 [4 * ((len + 2) / 3) + 1]; |
| 183 | delete queue[i]; |
171 | u8 *out = res; |
| 184 | } |
|
|
| 185 | |
172 | |
| 186 | sockinfo::operator const char *() |
173 | while (data <= end - 3) |
| 187 | { |
174 | { |
| 188 | static char hostport[15 + 1 + 5 + 1]; |
175 | t = (((data[0] << 8) | data[1]) << 8) | data[2]; |
| 189 | in_addr ia = { host }; |
176 | data += 3; |
| 190 | |
|
|
| 191 | sprintf (hostport, "%.15s:%d", inet_ntoa (ia), ntohs (port) & 0xffff); |
|
|
| 192 | |
|
|
| 193 | return hostport; |
|
|
| 194 | } |
|
|
| 195 | |
|
|
| 196 | bool u32_rate_limiter::can (u32 host) |
|
|
| 197 | { |
|
|
| 198 | iterator i; |
|
|
| 199 | |
|
|
| 200 | for (i = begin (); i != end (); ) |
|
|
| 201 | if (i->second <= now) |
|
|
| 202 | { |
177 | |
| 203 | erase (i); |
178 | *out++ = base64[(t >> 18) & 0x3f]; |
| 204 | i = begin (); |
179 | *out++ = base64[(t >> 12) & 0x3f]; |
|
|
180 | *out++ = base64[(t >> 6) & 0x3f]; |
|
|
181 | *out++ = base64[(t ) & 0x3f]; |
| 205 | } |
182 | } |
| 206 | else |
|
|
| 207 | ++i; |
|
|
| 208 | |
183 | |
| 209 | i = find (host); |
184 | for (t = 0, i = 0; data < end; i++) |
|
|
185 | t = (t << 8) | *data++; |
| 210 | |
186 | |
| 211 | if (i != end ()) |
187 | switch (i) |
| 212 | return false; |
188 | { |
|
|
189 | case 2: |
|
|
190 | *out++ = base64[(t >> 10) & 0x3f]; |
|
|
191 | *out++ = base64[(t >> 4) & 0x3f]; |
|
|
192 | *out++ = base64[(t << 2) & 0x3f]; |
|
|
193 | *out++ = '='; |
|
|
194 | break; |
|
|
195 | case 1: |
|
|
196 | *out++ = base64[(t >> 2) & 0x3f]; |
|
|
197 | *out++ = base64[(t << 4) & 0x3f]; |
|
|
198 | *out++ = '='; |
|
|
199 | *out++ = '='; |
|
|
200 | break; |
|
|
201 | } |
| 213 | |
202 | |
| 214 | insert (value_type (host, now + every)); |
203 | *out++ = 0; |
| 215 | |
204 | |
| 216 | return true; |
205 | return res; |
| 217 | } |
206 | } |
|
|
207 | #endif |
| 218 | |
208 | |
