1 /*-
2  * Copyright (c) 1998 Mark Newton
3  * Copyright (c) 1996 Christos Zoulas.
4  * All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  * 3. All advertising materials mentioning features or use of this software
15  *    must display the following acknowledgement:
16  *	This product includes software developed by Christos Zoulas.
17  * 4. The name of the author may not be used to endorse or promote products
18  *    derived from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
21  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
22  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
23  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
24  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
25  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
26  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
27  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
28  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
29  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30  */
31 
32 /*
33  * In SVR4 unix domain sockets are referenced sometimes
34  * (in putmsg(2) for example) as a [device, inode] pair instead of a pathname.
35  * Since there is no iname() routine in the kernel, and we need access to
36  * a mapping from inode to pathname, we keep our own table. This is a simple
37  * linked list that contains the pathname, the [device, inode] pair, the
38  * file corresponding to that socket and the process. When the
39  * socket gets closed we remove the item from the list. The list gets loaded
40  * every time a stat(2) call finds a socket.
41  */
42 
43 #include <sys/cdefs.h>
44 __FBSDID("$FreeBSD: stable/10/sys/compat/svr4/svr4_socket.c 299215 2016-05-07 08:30:21Z dchagin $");
45 
46 #include <sys/param.h>
47 #include <sys/systm.h>
48 #include <sys/queue.h>
49 #include <sys/eventhandler.h>
50 #include <sys/file.h>
51 #include <sys/kernel.h>
52 #include <sys/lock.h>
53 #include <sys/mutex.h>
54 #include <sys/socket.h>
55 #include <sys/socketvar.h>
56 #include <sys/sysproto.h>
57 #include <sys/un.h>
58 #include <sys/stat.h>
59 #include <sys/proc.h>
60 #include <sys/malloc.h>
61 
62 #include <compat/svr4/svr4.h>
63 #include <compat/svr4/svr4_types.h>
64 #include <compat/svr4/svr4_util.h>
65 #include <compat/svr4/svr4_socket.h>
66 #include <compat/svr4/svr4_signal.h>
67 #include <compat/svr4/svr4_sockmod.h>
68 #include <compat/svr4/svr4_proto.h>
69 #include <compat/svr4/svr4_stropts.h>
70 
71 struct svr4_sockcache_entry {
72 	struct proc *p;		/* Process for the socket		*/
73 	void *cookie;		/* Internal cookie used for matching	*/
74 	struct sockaddr_un sock;/* Pathname for the socket		*/
75 	dev_t dev;		/* Device where the socket lives on	*/
76 	ino_t ino;		/* Inode where the socket lives on	*/
77 	TAILQ_ENTRY(svr4_sockcache_entry) entries;
78 };
79 
80 static TAILQ_HEAD(, svr4_sockcache_entry) svr4_head;
81 static struct mtx svr4_sockcache_lock;
82 static eventhandler_tag svr4_sockcache_exit_tag, svr4_sockcache_exec_tag;
83 
84 static void	svr4_purge_sockcache(void *arg, struct proc *p);
85 
86 int
svr4_find_socket(td,fp,dev,ino,saun)87 svr4_find_socket(td, fp, dev, ino, saun)
88 	struct thread *td;
89 	struct file *fp;
90 	dev_t dev;
91 	ino_t ino;
92 	struct sockaddr_un *saun;
93 {
94 	struct svr4_sockcache_entry *e;
95 	void *cookie = ((struct socket *)fp->f_data)->so_emuldata;
96 
97 	DPRINTF(("svr4_find_socket: [%p,%d,%d]: ", td, dev, ino));
98 	mtx_lock(&svr4_sockcache_lock);
99 	TAILQ_FOREACH(e, &svr4_head, entries)
100 		if (e->p == td->td_proc && e->dev == dev && e->ino == ino) {
101 #ifdef DIAGNOSTIC
102 			if (e->cookie != NULL && e->cookie != cookie)
103 				panic("svr4 socket cookie mismatch");
104 #endif
105 			e->cookie = cookie;
106 			DPRINTF(("%s\n", e->sock.sun_path));
107 			*saun = e->sock;
108 			mtx_unlock(&svr4_sockcache_lock);
109 			return (0);
110 		}
111 
112 	mtx_unlock(&svr4_sockcache_lock);
113 	DPRINTF(("not found\n"));
114 	return (ENOENT);
115 }
116 
117 int
svr4_add_socket(td,path,st)118 svr4_add_socket(td, path, st)
119 	struct thread *td;
120 	const char *path;
121 	struct stat *st;
122 {
123 	struct svr4_sockcache_entry *e;
124 	size_t len;
125 	int error;
126 
127 	e = malloc(sizeof(*e), M_TEMP, M_WAITOK);
128 	e->cookie = NULL;
129 	e->dev = st->st_dev;
130 	e->ino = st->st_ino;
131 	e->p = td->td_proc;
132 
133 	if ((error = copyinstr(path, e->sock.sun_path,
134 	    sizeof(e->sock.sun_path), &len)) != 0) {
135 		DPRINTF(("svr4_add_socket: copyinstr failed %d\n", error));
136 		free(e, M_TEMP);
137 		return error;
138 	}
139 
140 	e->sock.sun_family = AF_LOCAL;
141 	e->sock.sun_len = len;
142 
143 	mtx_lock(&svr4_sockcache_lock);
144 	TAILQ_INSERT_HEAD(&svr4_head, e, entries);
145 	mtx_unlock(&svr4_sockcache_lock);
146 	DPRINTF(("svr4_add_socket: %s [%p,%d,%d]\n", e->sock.sun_path,
147 		 td->td_proc, e->dev, e->ino));
148 	return 0;
149 }
150 
151 void
svr4_delete_socket(p,fp)152 svr4_delete_socket(p, fp)
153 	struct proc *p;
154 	struct file *fp;
155 {
156 	struct svr4_sockcache_entry *e;
157 	void *cookie = ((struct socket *)fp->f_data)->so_emuldata;
158 
159 	mtx_lock(&svr4_sockcache_lock);
160 	TAILQ_FOREACH(e, &svr4_head, entries)
161 		if (e->p == p && e->cookie == cookie) {
162 			TAILQ_REMOVE(&svr4_head, e, entries);
163 			mtx_unlock(&svr4_sockcache_lock);
164 			DPRINTF(("svr4_delete_socket: %s [%p,%d,%d]\n",
165 				 e->sock.sun_path, p, (int)e->dev, e->ino));
166 			free(e, M_TEMP);
167 			return;
168 		}
169 	mtx_unlock(&svr4_sockcache_lock);
170 }
171 
172 struct svr4_strm *
svr4_stream_get(fp)173 svr4_stream_get(fp)
174 	struct file *fp;
175 {
176 	struct socket *so;
177 
178 	if (fp == NULL || fp->f_type != DTYPE_SOCKET)
179 		return NULL;
180 
181 	so = fp->f_data;
182 	return so->so_emuldata;
183 }
184 
185 void
svr4_purge_sockcache(arg,p)186 svr4_purge_sockcache(arg, p)
187 	void *arg;
188 	struct proc *p;
189 {
190 	struct svr4_sockcache_entry *e, *ne;
191 
192 	mtx_lock(&svr4_sockcache_lock);
193 	TAILQ_FOREACH_SAFE(e, &svr4_head, entries, ne) {
194 		if (e->p == p) {
195 			TAILQ_REMOVE(&svr4_head, e, entries);
196 			DPRINTF(("svr4_purge_sockcache: %s [%p,%d,%d]\n",
197 				 e->sock.sun_path, p, (int)e->dev, e->ino));
198 			free(e, M_TEMP);
199 		}
200 	}
201 	mtx_unlock(&svr4_sockcache_lock);
202 }
203 
204 void
svr4_sockcache_init(void)205 svr4_sockcache_init(void)
206 {
207 
208 	TAILQ_INIT(&svr4_head);
209 	mtx_init(&svr4_sockcache_lock, "svr4 socket cache", NULL, MTX_DEF);
210 	svr4_sockcache_exit_tag = EVENTHANDLER_REGISTER(process_exit,
211 	    svr4_purge_sockcache, NULL, EVENTHANDLER_PRI_ANY);
212 	svr4_sockcache_exec_tag = EVENTHANDLER_REGISTER(process_exec,
213 	    svr4_purge_sockcache, NULL, EVENTHANDLER_PRI_ANY);
214 }
215 
216 void
svr4_sockcache_destroy(void)217 svr4_sockcache_destroy(void)
218 {
219 
220 	KASSERT(TAILQ_EMPTY(&svr4_head),
221 	    ("%s: sockcache entries still around", __func__));
222 	EVENTHANDLER_DEREGISTER(process_exec, svr4_sockcache_exec_tag);
223 	EVENTHANDLER_DEREGISTER(process_exit, svr4_sockcache_exit_tag);
224 	mtx_destroy(&svr4_sockcache_lock);
225 }
226 
227 int
svr4_sys_socket(td,uap)228 svr4_sys_socket(td, uap)
229 	struct thread *td;
230 	struct svr4_sys_socket_args *uap;
231 {
232 	switch (uap->type) {
233 	case SVR4_SOCK_DGRAM:
234 		uap->type = SOCK_DGRAM;
235 		break;
236 
237 	case SVR4_SOCK_STREAM:
238 		uap->type = SOCK_STREAM;
239 		break;
240 
241 	case SVR4_SOCK_RAW:
242 		uap->type = SOCK_RAW;
243 		break;
244 
245 	case SVR4_SOCK_RDM:
246 		uap->type = SOCK_RDM;
247 		break;
248 
249 	case SVR4_SOCK_SEQPACKET:
250 		uap->type = SOCK_SEQPACKET;
251 		break;
252 	default:
253 		return EINVAL;
254 	}
255 	return sys_socket(td, (struct socket_args *)uap);
256 }
257