networkd: fix bad memory access for routes that are note attached to a link yet ...
[thirdparty/systemd.git] / src / resolve / resolved-manager.c
CommitLineData
091a364c
TG
1/***
2 This file is part of systemd.
3
4 Copyright 2014 Tom Gundersen <teg@jklm.no>
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
07630cea
LP
20#include <netinet/in.h>
21#include <poll.h>
74b2466e 22#include <sys/ioctl.h>
091a364c 23
a2a416f7 24#include "af-list.h"
b5efdb8a 25#include "alloc-util.h"
07630cea 26#include "dns-domain.h"
3ffd4af2 27#include "fd-util.h"
a5a807e6 28#include "fileio-label.h"
07630cea 29#include "hostname-util.h"
c004493c 30#include "io-util.h"
07630cea
LP
31#include "netlink-util.h"
32#include "network-internal.h"
822db23c 33#include "ordered-set.h"
6bedfcbb 34#include "parse-util.h"
3df3e884 35#include "random-util.h"
39d8db04 36#include "resolved-bus.h"
07630cea 37#include "resolved-conf.h"
dd0bc0f1 38#include "resolved-etc-hosts.h"
5f402ae8 39#include "resolved-llmnr.h"
07630cea 40#include "resolved-manager.h"
bc7702b0 41#include "resolved-mdns.h"
dd0bc0f1 42#include "resolved-resolv-conf.h"
07630cea 43#include "socket-util.h"
8b43440b 44#include "string-table.h"
07630cea
LP
45#include "string-util.h"
46#include "utf8.h"
74b2466e
LP
47
48#define SEND_TIMEOUT_USEC (200 * USEC_PER_MSEC)
49
1c4baffc 50static int manager_process_link(sd_netlink *rtnl, sd_netlink_message *mm, void *userdata) {
74b2466e
LP
51 Manager *m = userdata;
52 uint16_t type;
53 Link *l;
54 int ifindex, r;
55
56 assert(rtnl);
57 assert(m);
58 assert(mm);
59
1c4baffc 60 r = sd_netlink_message_get_type(mm, &type);
74b2466e
LP
61 if (r < 0)
62 goto fail;
63
64 r = sd_rtnl_message_link_get_ifindex(mm, &ifindex);
65 if (r < 0)
66 goto fail;
67
68 l = hashmap_get(m->links, INT_TO_PTR(ifindex));
69
70 switch (type) {
71
a2a416f7
LP
72 case RTM_NEWLINK:{
73 bool is_new = !l;
74b2466e 74
a2a416f7 75 if (!l) {
74b2466e
LP
76 r = link_new(m, &l, ifindex);
77 if (r < 0)
78 goto fail;
79 }
80
81 r = link_update_rtnl(l, mm);
82 if (r < 0)
83 goto fail;
84
21d73c87
LP
85 r = link_update_monitor(l);
86 if (r < 0)
87 goto fail;
88
a2a416f7
LP
89 if (is_new)
90 log_debug("Found new link %i/%s", ifindex, l->name);
91
74b2466e 92 break;
a2a416f7 93 }
74b2466e
LP
94
95 case RTM_DELLINK:
96 if (l) {
a2a416f7 97 log_debug("Removing link %i/%s", l->ifindex, l->name);
74b2466e
LP
98 link_free(l);
99 }
100
101 break;
102 }
103
104 return 0;
105
106fail:
da927ba9 107 log_warning_errno(r, "Failed to process RTNL link message: %m");
74b2466e
LP
108 return 0;
109}
110
1c4baffc 111static int manager_process_address(sd_netlink *rtnl, sd_netlink_message *mm, void *userdata) {
74b2466e
LP
112 Manager *m = userdata;
113 union in_addr_union address;
74b2466e 114 uint16_t type;
0dd25fb9 115 int r, ifindex, family;
74b2466e
LP
116 LinkAddress *a;
117 Link *l;
118
119 assert(rtnl);
120 assert(mm);
121 assert(m);
122
1c4baffc 123 r = sd_netlink_message_get_type(mm, &type);
74b2466e
LP
124 if (r < 0)
125 goto fail;
126
127 r = sd_rtnl_message_addr_get_ifindex(mm, &ifindex);
128 if (r < 0)
129 goto fail;
130
131 l = hashmap_get(m->links, INT_TO_PTR(ifindex));
132 if (!l)
133 return 0;
134
135 r = sd_rtnl_message_addr_get_family(mm, &family);
136 if (r < 0)
137 goto fail;
138
139 switch (family) {
140
141 case AF_INET:
1c4baffc 142 r = sd_netlink_message_read_in_addr(mm, IFA_LOCAL, &address.in);
74b2466e 143 if (r < 0) {
1c4baffc 144 r = sd_netlink_message_read_in_addr(mm, IFA_ADDRESS, &address.in);
74b2466e
LP
145 if (r < 0)
146 goto fail;
147 }
148
149 break;
150
151 case AF_INET6:
1c4baffc 152 r = sd_netlink_message_read_in6_addr(mm, IFA_LOCAL, &address.in6);
74b2466e 153 if (r < 0) {
1c4baffc 154 r = sd_netlink_message_read_in6_addr(mm, IFA_ADDRESS, &address.in6);
74b2466e
LP
155 if (r < 0)
156 goto fail;
157 }
158
159 break;
160
161 default:
162 return 0;
163 }
164
165 a = link_find_address(l, family, &address);
166
167 switch (type) {
168
169 case RTM_NEWADDR:
170
171 if (!a) {
172 r = link_address_new(l, &a, family, &address);
173 if (r < 0)
174 return r;
175 }
176
177 r = link_address_update_rtnl(a, mm);
178 if (r < 0)
179 return r;
180
181 break;
182
183 case RTM_DELADDR:
3e044c49 184 link_address_free(a);
74b2466e
LP
185 break;
186 }
187
188 return 0;
189
190fail:
da927ba9 191 log_warning_errno(r, "Failed to process RTNL address message: %m");
74b2466e
LP
192 return 0;
193}
194
74b2466e 195static int manager_rtnl_listen(Manager *m) {
4afd3348 196 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1c4baffc 197 sd_netlink_message *i;
74b2466e
LP
198 int r;
199
200 assert(m);
201
cc98b302 202 /* First, subscribe to interfaces coming and going */
1c4baffc 203 r = sd_netlink_open(&m->rtnl);
74b2466e
LP
204 if (r < 0)
205 return r;
206
2d895038 207 r = sd_netlink_attach_event(m->rtnl, m->event, SD_EVENT_PRIORITY_IMPORTANT);
74b2466e
LP
208 if (r < 0)
209 return r;
210
1c4baffc 211 r = sd_netlink_add_match(m->rtnl, RTM_NEWLINK, manager_process_link, m);
74b2466e
LP
212 if (r < 0)
213 return r;
214
1c4baffc 215 r = sd_netlink_add_match(m->rtnl, RTM_DELLINK, manager_process_link, m);
74b2466e
LP
216 if (r < 0)
217 return r;
218
1c4baffc 219 r = sd_netlink_add_match(m->rtnl, RTM_NEWADDR, manager_process_address, m);
74b2466e
LP
220 if (r < 0)
221 return r;
091a364c 222
1c4baffc 223 r = sd_netlink_add_match(m->rtnl, RTM_DELADDR, manager_process_address, m);
74b2466e
LP
224 if (r < 0)
225 return r;
226
227 /* Then, enumerate all links */
228 r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
229 if (r < 0)
230 return r;
231
1c4baffc 232 r = sd_netlink_message_request_dump(req, true);
74b2466e
LP
233 if (r < 0)
234 return r;
235
1c4baffc 236 r = sd_netlink_call(m->rtnl, req, 0, &reply);
74b2466e
LP
237 if (r < 0)
238 return r;
239
1c4baffc 240 for (i = reply; i; i = sd_netlink_message_next(i)) {
74b2466e
LP
241 r = manager_process_link(m->rtnl, i, m);
242 if (r < 0)
243 return r;
244 }
245
1c4baffc
TG
246 req = sd_netlink_message_unref(req);
247 reply = sd_netlink_message_unref(reply);
74b2466e
LP
248
249 /* Finally, enumerate all addresses, too */
250 r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, AF_UNSPEC);
251 if (r < 0)
252 return r;
253
1c4baffc 254 r = sd_netlink_message_request_dump(req, true);
74b2466e
LP
255 if (r < 0)
256 return r;
257
1c4baffc 258 r = sd_netlink_call(m->rtnl, req, 0, &reply);
74b2466e
LP
259 if (r < 0)
260 return r;
261
1c4baffc 262 for (i = reply; i; i = sd_netlink_message_next(i)) {
74b2466e
LP
263 r = manager_process_address(m->rtnl, i, m);
264 if (r < 0)
265 return r;
266 }
267
268 return r;
269}
270
271static int on_network_event(sd_event_source *s, int fd, uint32_t revents, void *userdata) {
272 Manager *m = userdata;
273 Iterator i;
274 Link *l;
275 int r;
276
277 assert(m);
278
279 sd_network_monitor_flush(m->network_monitor);
280
281 HASHMAP_FOREACH(l, m->links, i) {
282 r = link_update_monitor(l);
283 if (r < 0)
da927ba9 284 log_warning_errno(r, "Failed to update monitor information for %i: %m", l->ifindex);
74b2466e
LP
285 }
286
7207052d 287 (void) manager_write_resolv_conf(m);
74b2466e
LP
288
289 return 0;
290}
291
292static int manager_network_monitor_listen(Manager *m) {
293 int r, fd, events;
294
295 assert(m);
296
0014a4ad 297 r = sd_network_monitor_new(&m->network_monitor, NULL);
74b2466e
LP
298 if (r < 0)
299 return r;
300
301 fd = sd_network_monitor_get_fd(m->network_monitor);
302 if (fd < 0)
303 return fd;
304
305 events = sd_network_monitor_get_events(m->network_monitor);
306 if (events < 0)
307 return events;
308
309 r = sd_event_add_io(m->event, &m->network_event_source, fd, events, &on_network_event, m);
310 if (r < 0)
2d895038
LP
311 return r;
312
313 r = sd_event_source_set_priority(m->network_event_source, SD_EVENT_PRIORITY_IMPORTANT+5);
314 if (r < 0)
74b2466e
LP
315 return r;
316
aa4a9deb
LP
317 (void) sd_event_source_set_description(m->network_event_source, "network-monitor");
318
74b2466e
LP
319 return 0;
320}
321
78c6a153 322static int determine_hostname(char **llmnr_hostname, char **mdns_hostname) {
eb60f9cd 323 _cleanup_free_ char *h = NULL, *n = NULL;
78c6a153
LP
324 char label[DNS_LABEL_MAX];
325 const char *p;
326 int r, k;
eb60f9cd 327
78c6a153
LP
328 assert(llmnr_hostname);
329 assert(mdns_hostname);
330
331 /* Extract and normalize the first label of the locally
332 * configured hostname, and check it's not "localhost". */
eb60f9cd
LP
333
334 h = gethostname_malloc();
335 if (!h)
336 return log_oom();
337
78c6a153
LP
338 p = h;
339 r = dns_label_unescape(&p, label, sizeof(label));
340 if (r < 0)
341 return log_error_errno(r, "Failed to unescape host name: %m");
342 if (r == 0) {
343 log_error("Couldn't find a single label in hosntame.");
344 return -EINVAL;
345 }
346
347 k = dns_label_undo_idna(label, r, label, sizeof(label));
348 if (k < 0)
349 return log_error_errno(k, "Failed to undo IDNA: %m");
350 if (k > 0)
351 r = k;
352
353 if (!utf8_is_valid(label)) {
eb60f9cd
LP
354 log_error("System hostname is not UTF-8 clean.");
355 return -EINVAL;
356 }
357
422baca0 358 r = dns_label_escape_new(label, r, &n);
78c6a153
LP
359 if (r < 0)
360 return log_error_errno(r, "Failed to escape host name: %m");
361
362 if (is_localhost(n)) {
363 log_debug("System hostname is 'localhost', ignoring.");
364 return -EINVAL;
eb60f9cd
LP
365 }
366
78c6a153
LP
367 r = dns_name_concat(n, "local", mdns_hostname);
368 if (r < 0)
369 return log_error_errno(r, "Failed to determine mDNS hostname: %m");
370
371 *llmnr_hostname = n;
eb60f9cd
LP
372 n = NULL;
373
374 return 0;
375}
376
377static int on_hostname_change(sd_event_source *es, int fd, uint32_t revents, void *userdata) {
78c6a153 378 _cleanup_free_ char *llmnr_hostname = NULL, *mdns_hostname = NULL;
eb60f9cd
LP
379 Manager *m = userdata;
380 int r;
381
382 assert(m);
383
78c6a153 384 r = determine_hostname(&llmnr_hostname, &mdns_hostname);
eb60f9cd
LP
385 if (r < 0)
386 return 0; /* ignore invalid hostnames */
387
78c6a153 388 if (streq(llmnr_hostname, m->llmnr_hostname) && streq(mdns_hostname, m->mdns_hostname))
eb60f9cd
LP
389 return 0;
390
78c6a153
LP
391 log_info("System hostname changed to '%s'.", llmnr_hostname);
392
393 free(m->llmnr_hostname);
394 free(m->mdns_hostname);
395
396 m->llmnr_hostname = llmnr_hostname;
397 m->mdns_hostname = mdns_hostname;
398
399 llmnr_hostname = mdns_hostname = NULL;
eb60f9cd
LP
400
401 manager_refresh_rrs(m);
402
403 return 0;
404}
405
406static int manager_watch_hostname(Manager *m) {
eb60f9cd
LP
407 int r;
408
409 assert(m);
410
411 m->hostname_fd = open("/proc/sys/kernel/hostname", O_RDONLY|O_CLOEXEC|O_NDELAY|O_NOCTTY);
412 if (m->hostname_fd < 0) {
56f64d95 413 log_warning_errno(errno, "Failed to watch hostname: %m");
eb60f9cd
LP
414 return 0;
415 }
416
417 r = sd_event_add_io(m->event, &m->hostname_event_source, m->hostname_fd, 0, on_hostname_change, m);
418 if (r < 0) {
419 if (r == -EPERM)
420 /* kernels prior to 3.2 don't support polling this file. Ignore the failure. */
421 m->hostname_fd = safe_close(m->hostname_fd);
8d3d7072
MS
422 else
423 return log_error_errno(r, "Failed to add hostname event source: %m");
eb60f9cd
LP
424 }
425
aa4a9deb
LP
426 (void) sd_event_source_set_description(m->hostname_event_source, "hostname");
427
78c6a153 428 r = determine_hostname(&m->llmnr_hostname, &m->mdns_hostname);
eb60f9cd
LP
429 if (r < 0) {
430 log_info("Defaulting to hostname 'linux'.");
78c6a153
LP
431 m->llmnr_hostname = strdup("linux");
432 if (!m->llmnr_hostname)
433 return log_oom();
434
435 m->mdns_hostname = strdup("linux.local");
436 if (!m->mdns_hostname)
eb60f9cd
LP
437 return log_oom();
438 } else
78c6a153 439 log_info("Using system hostname '%s'.", m->llmnr_hostname);
eb60f9cd
LP
440
441 return 0;
442}
443
4d506d6b
LP
444static int manager_sigusr1(sd_event_source *s, const struct signalfd_siginfo *si, void *userdata) {
445 _cleanup_free_ char *buffer = NULL;
446 _cleanup_fclose_ FILE *f = NULL;
447 Manager *m = userdata;
448 size_t size = 0;
449 DnsScope *scope;
450
451 assert(s);
452 assert(si);
453 assert(m);
454
455 f = open_memstream(&buffer, &size);
456 if (!f)
457 return log_oom();
458
459 LIST_FOREACH(scopes, scope, m->dns_scopes)
460 dns_scope_dump(scope, f);
461
462 if (fflush_and_check(f) < 0)
463 return log_oom();
464
465 log_dump(LOG_INFO, buffer);
466 return 0;
467}
468
091a364c 469int manager_new(Manager **ret) {
74b2466e 470 _cleanup_(manager_freep) Manager *m = NULL;
091a364c
TG
471 int r;
472
c92e531c
LP
473 assert(ret);
474
091a364c
TG
475 m = new0(Manager, 1);
476 if (!m)
477 return -ENOMEM;
478
1716f6dc 479 m->llmnr_ipv4_udp_fd = m->llmnr_ipv6_udp_fd = -1;
623a4c97 480 m->llmnr_ipv4_tcp_fd = m->llmnr_ipv6_tcp_fd = -1;
bc7702b0 481 m->mdns_ipv4_fd = m->mdns_ipv6_fd = -1;
eb60f9cd 482 m->hostname_fd = -1;
1716f6dc 483
af49ca27 484 m->llmnr_support = RESOLVE_SUPPORT_YES;
ad6c0475 485 m->mdns_support = RESOLVE_SUPPORT_NO;
61ecb465 486 m->dnssec_mode = DEFAULT_DNSSEC_MODE;
5cb36f41 487 m->read_resolv_conf = true;
00fa60ae 488 m->need_builtin_fallbacks = true;
dd0bc0f1 489 m->etc_hosts_last = m->etc_hosts_mtime = USEC_INFINITY;
091a364c 490
0d2cd476
LP
491 r = dns_trust_anchor_load(&m->trust_anchor);
492 if (r < 0)
493 return r;
494
ad6c0475
LP
495 r = manager_parse_config_file(m);
496 if (r < 0)
497 return r;
498
091a364c
TG
499 r = sd_event_default(&m->event);
500 if (r < 0)
501 return r;
502
503 sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
504 sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
505
506 sd_event_set_watchdog(m->event, true);
507
eb60f9cd
LP
508 r = manager_watch_hostname(m);
509 if (r < 0)
510 return r;
511
1716f6dc 512 r = dns_scope_new(m, &m->unicast_scope, NULL, DNS_PROTOCOL_DNS, AF_UNSPEC);
74b2466e
LP
513 if (r < 0)
514 return r;
515
516 r = manager_network_monitor_listen(m);
517 if (r < 0)
518 return r;
519
520 r = manager_rtnl_listen(m);
521 if (r < 0)
522 return r;
523
524 r = manager_connect_bus(m);
525 if (r < 0)
526 return r;
527
4d506d6b
LP
528 (void) sd_event_add_signal(m->event, &m->sigusr1_event_source, SIGUSR1, manager_sigusr1, m);
529
091a364c
TG
530 *ret = m;
531 m = NULL;
532
533 return 0;
534}
535
edc501d4
LP
536int manager_start(Manager *m) {
537 int r;
538
539 assert(m);
540
541 r = manager_llmnr_start(m);
542 if (r < 0)
543 return r;
544
bc7702b0
DM
545 r = manager_mdns_start(m);
546 if (r < 0)
547 return r;
548
edc501d4
LP
549 return 0;
550}
551
74b2466e
LP
552Manager *manager_free(Manager *m) {
553 Link *l;
091a364c
TG
554
555 if (!m)
74b2466e
LP
556 return NULL;
557
4b95f179
LP
558 dns_server_unlink_all(m->dns_servers);
559 dns_server_unlink_all(m->fallback_dns_servers);
a51c1048
LP
560 dns_search_domain_unlink_all(m->search_domains);
561
74b2466e
LP
562 while ((l = hashmap_first(m->links)))
563 link_free(l);
f0e15467
LP
564
565 while (m->dns_queries)
566 dns_query_free(m->dns_queries);
74b2466e 567
cab5b059
LP
568 dns_scope_free(m->unicast_scope);
569
f0e15467
LP
570 hashmap_free(m->links);
571 hashmap_free(m->dns_transactions);
572
096b6773
LP
573 sd_event_source_unref(m->network_event_source);
574 sd_network_monitor_unref(m->network_monitor);
091a364c 575
a564ca2f
LP
576 sd_netlink_unref(m->rtnl);
577 sd_event_source_unref(m->rtnl_event_source);
578
edc501d4 579 manager_llmnr_stop(m);
bc7702b0 580 manager_mdns_stop(m);
623a4c97 581
902bb5d8 582 sd_bus_slot_unref(m->prepare_for_sleep_slot);
74b2466e
LP
583 sd_event_source_unref(m->bus_retry_event_source);
584 sd_bus_unref(m->bus);
091a364c 585
4d506d6b
LP
586 sd_event_source_unref(m->sigusr1_event_source);
587
74b2466e 588 sd_event_unref(m->event);
623a4c97 589
78c6a153
LP
590 dns_resource_key_unref(m->llmnr_host_ipv4_key);
591 dns_resource_key_unref(m->llmnr_host_ipv6_key);
eb60f9cd 592
eb60f9cd 593 sd_event_source_unref(m->hostname_event_source);
d9fcf2ba 594 safe_close(m->hostname_fd);
78c6a153
LP
595 free(m->llmnr_hostname);
596 free(m->mdns_hostname);
eb60f9cd 597
0d2cd476 598 dns_trust_anchor_flush(&m->trust_anchor);
dd0bc0f1 599 manager_etc_hosts_flush(m);
0d2cd476 600
091a364c 601 free(m);
74b2466e
LP
602
603 return NULL;
091a364c
TG
604}
605
1716f6dc 606int manager_recv(Manager *m, int fd, DnsProtocol protocol, DnsPacket **ret) {
74b2466e 607 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
1716f6dc
LP
608 union {
609 struct cmsghdr header; /* For alignment */
40a1eebd 610 uint8_t buffer[CMSG_SPACE(MAXSIZE(struct in_pktinfo, struct in6_pktinfo))
1716f6dc 611 + CMSG_SPACE(int) /* ttl/hoplimit */
623a4c97 612 + EXTRA_CMSG_SPACE /* kernel appears to require extra buffer space */];
1716f6dc
LP
613 } control;
614 union sockaddr_union sa;
74b2466e 615 struct msghdr mh = {};
1716f6dc 616 struct cmsghdr *cmsg;
74b2466e 617 struct iovec iov;
4edc2c9b
LP
618 ssize_t ms, l;
619 int r;
74b2466e
LP
620
621 assert(m);
1716f6dc 622 assert(fd >= 0);
74b2466e
LP
623 assert(ret);
624
4edc2c9b 625 ms = next_datagram_size_fd(fd);
74b2466e 626 if (ms < 0)
4edc2c9b 627 return ms;
74b2466e 628
1716f6dc 629 r = dns_packet_new(&p, protocol, ms);
74b2466e
LP
630 if (r < 0)
631 return r;
632
633 iov.iov_base = DNS_PACKET_DATA(p);
634 iov.iov_len = p->allocated;
635
1716f6dc
LP
636 mh.msg_name = &sa.sa;
637 mh.msg_namelen = sizeof(sa);
74b2466e
LP
638 mh.msg_iov = &iov;
639 mh.msg_iovlen = 1;
1716f6dc
LP
640 mh.msg_control = &control;
641 mh.msg_controllen = sizeof(control);
74b2466e 642
a38d9945 643 l = recvmsg(fd, &mh, 0);
f134289a
EV
644 if (l == 0)
645 return 0;
74b2466e 646 if (l < 0) {
ad867662 647 if (errno == EAGAIN || errno == EINTR)
74b2466e
LP
648 return 0;
649
650 return -errno;
091a364c
TG
651 }
652
1716f6dc
LP
653 assert(!(mh.msg_flags & MSG_CTRUNC));
654 assert(!(mh.msg_flags & MSG_TRUNC));
655
74b2466e 656 p->size = (size_t) l;
091a364c 657
1716f6dc 658 p->family = sa.sa.sa_family;
623a4c97
LP
659 p->ipproto = IPPROTO_UDP;
660 if (p->family == AF_INET) {
1716f6dc 661 p->sender.in = sa.in.sin_addr;
623a4c97
LP
662 p->sender_port = be16toh(sa.in.sin_port);
663 } else if (p->family == AF_INET6) {
1716f6dc 664 p->sender.in6 = sa.in6.sin6_addr;
623a4c97
LP
665 p->sender_port = be16toh(sa.in6.sin6_port);
666 p->ifindex = sa.in6.sin6_scope_id;
667 } else
1716f6dc 668 return -EAFNOSUPPORT;
74b2466e 669
2a1288ff 670 CMSG_FOREACH(cmsg, &mh) {
74b2466e 671
1716f6dc
LP
672 if (cmsg->cmsg_level == IPPROTO_IPV6) {
673 assert(p->family == AF_INET6);
74b2466e 674
1716f6dc 675 switch (cmsg->cmsg_type) {
74b2466e 676
1716f6dc
LP
677 case IPV6_PKTINFO: {
678 struct in6_pktinfo *i = (struct in6_pktinfo*) CMSG_DATA(cmsg);
74b2466e 679
623a4c97
LP
680 if (p->ifindex <= 0)
681 p->ifindex = i->ipi6_ifindex;
682
1716f6dc
LP
683 p->destination.in6 = i->ipi6_addr;
684 break;
685 }
74b2466e 686
1716f6dc
LP
687 case IPV6_HOPLIMIT:
688 p->ttl = *(int *) CMSG_DATA(cmsg);
689 break;
74b2466e 690
1716f6dc
LP
691 }
692 } else if (cmsg->cmsg_level == IPPROTO_IP) {
693 assert(p->family == AF_INET);
74b2466e 694
1716f6dc 695 switch (cmsg->cmsg_type) {
74b2466e 696
1716f6dc
LP
697 case IP_PKTINFO: {
698 struct in_pktinfo *i = (struct in_pktinfo*) CMSG_DATA(cmsg);
091a364c 699
623a4c97
LP
700 if (p->ifindex <= 0)
701 p->ifindex = i->ipi_ifindex;
702
1716f6dc
LP
703 p->destination.in = i->ipi_addr;
704 break;
705 }
74b2466e 706
623a4c97 707 case IP_TTL:
1716f6dc
LP
708 p->ttl = *(int *) CMSG_DATA(cmsg);
709 break;
710 }
711 }
712 }
74b2466e 713
623a4c97
LP
714 /* The Linux kernel sets the interface index to the loopback
715 * device if the packet came from the local host since it
716 * avoids the routing table in such a case. Let's unset the
717 * interface index in such a case. */
a5f03596 718 if (p->ifindex == LOOPBACK_IFINDEX)
623a4c97
LP
719 p->ifindex = 0;
720
86ad4cd7
TG
721 if (protocol != DNS_PROTOCOL_DNS) {
722 /* If we don't know the interface index still, we look for the
723 * first local interface with a matching address. Yuck! */
724 if (p->ifindex <= 0)
725 p->ifindex = manager_find_ifindex(m, p->family, &p->destination);
726 }
623a4c97 727
74b2466e
LP
728 *ret = p;
729 p = NULL;
730
731 return 1;
732}
733
74b2466e
LP
734static int sendmsg_loop(int fd, struct msghdr *mh, int flags) {
735 int r;
736
737 assert(fd >= 0);
738 assert(mh);
739
740 for (;;) {
741 if (sendmsg(fd, mh, flags) >= 0)
742 return 0;
743
744 if (errno == EINTR)
745 continue;
746
747 if (errno != EAGAIN)
748 return -errno;
749
750 r = fd_wait_for_event(fd, POLLOUT, SEND_TIMEOUT_USEC);
751 if (r < 0)
752 return r;
753 if (r == 0)
754 return -ETIMEDOUT;
755 }
756}
757
72290734
TG
758static int write_loop(int fd, void *message, size_t length) {
759 int r;
760
761 assert(fd >= 0);
762 assert(message);
763
764 for (;;) {
765 if (write(fd, message, length) >= 0)
766 return 0;
767
768 if (errno == EINTR)
769 continue;
770
771 if (errno != EAGAIN)
772 return -errno;
773
774 r = fd_wait_for_event(fd, POLLOUT, SEND_TIMEOUT_USEC);
775 if (r < 0)
776 return r;
777 if (r == 0)
778 return -ETIMEDOUT;
779 }
780}
781
782int manager_write(Manager *m, int fd, DnsPacket *p) {
783 int r;
784
deb3f3d3 785 log_debug("Sending %s packet with id %" PRIu16 ".", DNS_PACKET_QR(p) ? "response" : "query", DNS_PACKET_ID(p));
72290734
TG
786
787 r = write_loop(fd, DNS_PACKET_DATA(p), p->size);
788 if (r < 0)
789 return r;
790
791 return 0;
792}
793
623a4c97 794static int manager_ipv4_send(Manager *m, int fd, int ifindex, const struct in_addr *addr, uint16_t port, DnsPacket *p) {
74b2466e
LP
795 union sockaddr_union sa = {
796 .in.sin_family = AF_INET,
74b2466e 797 };
1716f6dc
LP
798 union {
799 struct cmsghdr header; /* For alignment */
800 uint8_t buffer[CMSG_SPACE(sizeof(struct in_pktinfo))];
801 } control;
74b2466e
LP
802 struct msghdr mh = {};
803 struct iovec iov;
74b2466e
LP
804
805 assert(m);
1716f6dc
LP
806 assert(fd >= 0);
807 assert(addr);
808 assert(port > 0);
74b2466e
LP
809 assert(p);
810
74b2466e
LP
811 iov.iov_base = DNS_PACKET_DATA(p);
812 iov.iov_len = p->size;
091a364c 813
1716f6dc
LP
814 sa.in.sin_addr = *addr;
815 sa.in.sin_port = htobe16(port),
091a364c 816
74b2466e
LP
817 mh.msg_iov = &iov;
818 mh.msg_iovlen = 1;
819 mh.msg_name = &sa.sa;
820 mh.msg_namelen = sizeof(sa.in);
091a364c 821
74b2466e
LP
822 if (ifindex > 0) {
823 struct cmsghdr *cmsg;
824 struct in_pktinfo *pi;
825
826 zero(control);
827
1716f6dc 828 mh.msg_control = &control;
74b2466e
LP
829 mh.msg_controllen = CMSG_LEN(sizeof(struct in_pktinfo));
830
831 cmsg = CMSG_FIRSTHDR(&mh);
832 cmsg->cmsg_len = mh.msg_controllen;
833 cmsg->cmsg_level = IPPROTO_IP;
834 cmsg->cmsg_type = IP_PKTINFO;
835
836 pi = (struct in_pktinfo*) CMSG_DATA(cmsg);
837 pi->ipi_ifindex = ifindex;
838 }
839
840 return sendmsg_loop(fd, &mh, 0);
841}
842
623a4c97 843static int manager_ipv6_send(Manager *m, int fd, int ifindex, const struct in6_addr *addr, uint16_t port, DnsPacket *p) {
74b2466e
LP
844 union sockaddr_union sa = {
845 .in6.sin6_family = AF_INET6,
74b2466e 846 };
1716f6dc
LP
847 union {
848 struct cmsghdr header; /* For alignment */
849 uint8_t buffer[CMSG_SPACE(sizeof(struct in6_pktinfo))];
850 } control;
74b2466e
LP
851 struct msghdr mh = {};
852 struct iovec iov;
74b2466e
LP
853
854 assert(m);
1716f6dc
LP
855 assert(fd >= 0);
856 assert(addr);
857 assert(port > 0);
74b2466e
LP
858 assert(p);
859
74b2466e
LP
860 iov.iov_base = DNS_PACKET_DATA(p);
861 iov.iov_len = p->size;
862
1716f6dc
LP
863 sa.in6.sin6_addr = *addr;
864 sa.in6.sin6_port = htobe16(port),
74b2466e
LP
865 sa.in6.sin6_scope_id = ifindex;
866
867 mh.msg_iov = &iov;
868 mh.msg_iovlen = 1;
869 mh.msg_name = &sa.sa;
870 mh.msg_namelen = sizeof(sa.in6);
871
872 if (ifindex > 0) {
873 struct cmsghdr *cmsg;
874 struct in6_pktinfo *pi;
875
876 zero(control);
877
1716f6dc 878 mh.msg_control = &control;
74b2466e
LP
879 mh.msg_controllen = CMSG_LEN(sizeof(struct in6_pktinfo));
880
881 cmsg = CMSG_FIRSTHDR(&mh);
882 cmsg->cmsg_len = mh.msg_controllen;
883 cmsg->cmsg_level = IPPROTO_IPV6;
884 cmsg->cmsg_type = IPV6_PKTINFO;
885
886 pi = (struct in6_pktinfo*) CMSG_DATA(cmsg);
887 pi->ipi6_ifindex = ifindex;
888 }
889
890 return sendmsg_loop(fd, &mh, 0);
891}
892
623a4c97 893int manager_send(Manager *m, int fd, int ifindex, int family, const union in_addr_union *addr, uint16_t port, DnsPacket *p) {
1716f6dc
LP
894 assert(m);
895 assert(fd >= 0);
896 assert(addr);
897 assert(port > 0);
898 assert(p);
899
deb3f3d3 900 log_debug("Sending %s packet with id %" PRIu16 " on interface %i/%s.", DNS_PACKET_QR(p) ? "response" : "query", DNS_PACKET_ID(p), ifindex, af_to_name(family));
a2a416f7 901
1716f6dc
LP
902 if (family == AF_INET)
903 return manager_ipv4_send(m, fd, ifindex, &addr->in, port, p);
2817157b 904 if (family == AF_INET6)
1716f6dc
LP
905 return manager_ipv6_send(m, fd, ifindex, &addr->in6, port, p);
906
907 return -EAFNOSUPPORT;
908}
909
e1c95994
LP
910uint32_t manager_find_mtu(Manager *m) {
911 uint32_t mtu = 0;
912 Link *l;
913 Iterator i;
914
915 /* If we don't know on which link a DNS packet would be
916 * delivered, let's find the largest MTU that works on all
917 * interfaces we know of */
918
919 HASHMAP_FOREACH(l, m->links, i) {
920 if (l->mtu <= 0)
921 continue;
922
923 if (mtu <= 0 || l->mtu < mtu)
924 mtu = l->mtu;
925 }
926
927 return mtu;
928}
1716f6dc 929
623a4c97 930int manager_find_ifindex(Manager *m, int family, const union in_addr_union *in_addr) {
ec2c5e43
LP
931 LinkAddress *a;
932
933 assert(m);
934
4e945a6f 935 a = manager_find_link_address(m, family, in_addr);
ec2c5e43
LP
936 if (a)
937 return a->link->ifindex;
938
939 return 0;
940}
941
eb60f9cd
LP
942void manager_refresh_rrs(Manager *m) {
943 Iterator i;
944 Link *l;
945
946 assert(m);
947
78c6a153
LP
948 m->llmnr_host_ipv4_key = dns_resource_key_unref(m->llmnr_host_ipv4_key);
949 m->llmnr_host_ipv6_key = dns_resource_key_unref(m->llmnr_host_ipv6_key);
eb60f9cd
LP
950
951 HASHMAP_FOREACH(l, m->links, i) {
952 link_add_rrs(l, true);
953 link_add_rrs(l, false);
954 }
955}
956
ec2c5e43
LP
957int manager_next_hostname(Manager *m) {
958 const char *p;
556a2294 959 uint64_t u, a;
78c6a153
LP
960 char *h, *k;
961 int r;
623a4c97
LP
962
963 assert(m);
964
78c6a153 965 p = strchr(m->llmnr_hostname, 0);
ec2c5e43
LP
966 assert(p);
967
78c6a153 968 while (p > m->llmnr_hostname) {
ec2c5e43
LP
969 if (!strchr("0123456789", p[-1]))
970 break;
971
972 p--;
973 }
974
975 if (*p == 0 || safe_atou64(p, &u) < 0 || u <= 0)
976 u = 1;
977
556a2294
LP
978 /* Add a random number to the old value. This way we can avoid
979 * that two hosts pick the same hostname, win on IPv4 and lose
980 * on IPv6 (or vice versa), and pick the same hostname
981 * replacement hostname, ad infinitum. We still want the
982 * numbers to go up monotonically, hence we just add a random
983 * value 1..10 */
984
985 random_bytes(&a, sizeof(a));
986 u += 1 + a % 10;
ec2c5e43 987
78c6a153 988 if (asprintf(&h, "%.*s%" PRIu64, (int) (p - m->llmnr_hostname), m->llmnr_hostname, u) < 0)
ec2c5e43
LP
989 return -ENOMEM;
990
78c6a153
LP
991 r = dns_name_concat(h, "local", &k);
992 if (r < 0) {
993 free(h);
994 return r;
995 }
996
997 log_info("Hostname conflict, changing published hostname from '%s' to '%s'.", m->llmnr_hostname, h);
998
999 free(m->llmnr_hostname);
1000 m->llmnr_hostname = h;
ec2c5e43 1001
78c6a153
LP
1002 free(m->mdns_hostname);
1003 m->mdns_hostname = k;
ec2c5e43 1004
eb60f9cd 1005 manager_refresh_rrs(m);
623a4c97
LP
1006
1007 return 0;
1008}
ec2c5e43 1009
4e945a6f 1010LinkAddress* manager_find_link_address(Manager *m, int family, const union in_addr_union *in_addr) {
ec2c5e43
LP
1011 Iterator i;
1012 Link *l;
1013
1014 assert(m);
1015
1016 HASHMAP_FOREACH(l, m->links, i) {
1017 LinkAddress *a;
1018
1019 a = link_find_address(l, family, in_addr);
1020 if (a)
1021 return a;
1022 }
1023
1024 return NULL;
1025}
1026
a4076574 1027bool manager_our_packet(Manager *m, DnsPacket *p) {
ec2c5e43
LP
1028 assert(m);
1029 assert(p);
1030
4e945a6f 1031 return !!manager_find_link_address(m, p->family, &p->sender);
ec2c5e43 1032}
4e945a6f 1033
a4076574
LP
1034DnsScope* manager_find_scope(Manager *m, DnsPacket *p) {
1035 Link *l;
1036
1037 assert(m);
1038 assert(p);
1039
1040 l = hashmap_get(m->links, INT_TO_PTR(p->ifindex));
1041 if (!l)
1042 return NULL;
1043
b4f1862d
DM
1044 switch (p->protocol) {
1045 case DNS_PROTOCOL_LLMNR:
a4076574
LP
1046 if (p->family == AF_INET)
1047 return l->llmnr_ipv4_scope;
1048 else if (p->family == AF_INET6)
1049 return l->llmnr_ipv6_scope;
b4f1862d
DM
1050
1051 break;
1052
1053 case DNS_PROTOCOL_MDNS:
1054 if (p->family == AF_INET)
1055 return l->mdns_ipv4_scope;
1056 else if (p->family == AF_INET6)
1057 return l->mdns_ipv6_scope;
1058
1059 break;
1060
1061 default:
1062 break;
a4076574
LP
1063 }
1064
1065 return NULL;
1066}
1067
902bb5d8
LP
1068void manager_verify_all(Manager *m) {
1069 DnsScope *s;
1070
1071 assert(m);
1072
1073 LIST_FOREACH(scopes, s, m->dns_scopes)
1074 dns_zone_verify_all(&s->zone);
1075}
1076
78c6a153 1077int manager_is_own_hostname(Manager *m, const char *name) {
78c6a153
LP
1078 int r;
1079
1080 assert(m);
1081 assert(name);
1082
1083 if (m->llmnr_hostname) {
1084 r = dns_name_equal(name, m->llmnr_hostname);
1085 if (r != 0)
1086 return r;
1087 }
1088
1089 if (m->mdns_hostname)
1090 return dns_name_equal(name, m->mdns_hostname);
1091
1092 return 0;
1093}
1094
9176a57c
LP
1095int manager_compile_dns_servers(Manager *m, OrderedSet **dns) {
1096 DnsServer *s;
1097 Iterator i;
1098 Link *l;
1099 int r;
1100
1101 assert(m);
1102 assert(dns);
1103
1104 r = ordered_set_ensure_allocated(dns, &dns_server_hash_ops);
1105 if (r < 0)
1106 return r;
1107
1108 /* First add the system-wide servers and domains */
1109 LIST_FOREACH(servers, s, m->dns_servers) {
1110 r = ordered_set_put(*dns, s);
1111 if (r == -EEXIST)
1112 continue;
1113 if (r < 0)
1114 return r;
1115 }
1116
1117 /* Then, add the per-link servers */
1118 HASHMAP_FOREACH(l, m->links, i) {
1119 LIST_FOREACH(servers, s, l->dns_servers) {
1120 r = ordered_set_put(*dns, s);
1121 if (r == -EEXIST)
1122 continue;
1123 if (r < 0)
1124 return r;
1125 }
1126 }
1127
1128 /* If we found nothing, add the fallback servers */
1129 if (ordered_set_isempty(*dns)) {
1130 LIST_FOREACH(servers, s, m->fallback_dns_servers) {
1131 r = ordered_set_put(*dns, s);
1132 if (r == -EEXIST)
1133 continue;
1134 if (r < 0)
1135 return r;
1136 }
1137 }
1138
1139 return 0;
1140}
1141
1142int manager_compile_search_domains(Manager *m, OrderedSet **domains) {
1143 DnsSearchDomain *d;
1144 Iterator i;
1145 Link *l;
1146 int r;
1147
1148 assert(m);
1149 assert(domains);
1150
1151 r = ordered_set_ensure_allocated(domains, &dns_name_hash_ops);
1152 if (r < 0)
1153 return r;
1154
1155 LIST_FOREACH(domains, d, m->search_domains) {
1156 r = ordered_set_put(*domains, d->name);
1157 if (r == -EEXIST)
1158 continue;
1159 if (r < 0)
1160 return r;
1161 }
1162
1163 HASHMAP_FOREACH(l, m->links, i) {
1164
1165 LIST_FOREACH(domains, d, l->search_domains) {
1166 r = ordered_set_put(*domains, d->name);
1167 if (r == -EEXIST)
1168 continue;
1169 if (r < 0)
1170 return r;
1171 }
1172 }
1173
1174 return 0;
1175}
c69fa7e3
LP
1176
1177DnssecMode manager_get_dnssec_mode(Manager *m) {
1178 assert(m);
1179
1180 if (m->dnssec_mode != _DNSSEC_MODE_INVALID)
1181 return m->dnssec_mode;
1182
1183 return DNSSEC_NO;
1184}
1185
1186bool manager_dnssec_supported(Manager *m) {
1187 DnsServer *server;
1188 Iterator i;
1189 Link *l;
1190
1191 assert(m);
1192
1193 if (manager_get_dnssec_mode(m) == DNSSEC_NO)
1194 return false;
1195
1196 server = manager_get_dns_server(m);
1197 if (server && !dns_server_dnssec_supported(server))
1198 return false;
1199
1200 HASHMAP_FOREACH(l, m->links, i)
1201 if (!link_dnssec_supported(l))
1202 return false;
1203
1204 return true;
1205}
59c5b597
LP
1206
1207void manager_dnssec_verdict(Manager *m, DnssecVerdict verdict, const DnsResourceKey *key) {
1208
1209 assert(verdict >= 0);
1210 assert(verdict < _DNSSEC_VERDICT_MAX);
1211
1212 if (log_get_max_level() >= LOG_DEBUG) {
202b76ae 1213 char s[DNS_RESOURCE_KEY_STRING_MAX];
59c5b597 1214
202b76ae
ZJS
1215 log_debug("Found verdict for lookup %s: %s",
1216 dns_resource_key_to_string(key, s, sizeof s),
1217 dnssec_verdict_to_string(verdict));
59c5b597
LP
1218 }
1219
1220 m->n_dnssec_verdict[verdict]++;
1221}
011696f7
LP
1222
1223bool manager_routable(Manager *m, int family) {
1224 Iterator i;
1225 Link *l;
1226
1227 assert(m);
1228
1229 /* Returns true if the host has at least one interface with a routable address of the specified type */
1230
1231 HASHMAP_FOREACH(l, m->links, i)
1232 if (link_relevant(l, family, false))
1233 return true;
1234
1235 return false;
1236}