src/network/networkd-address.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2
   3 #include <net/if.h>
   4
   5 #include "alloc-util.h"
   6 #include "conf-parser.h"
   7 #include "firewall-util.h"
   8 #include "memory-util.h"
   9 #include "missing_network.h"
  10 #include "netlink-util.h"
  11 #include "networkd-address.h"
  12 #include "networkd-manager.h"
  13 #include "parse-util.h"
  14 #include "set.h"
  15 #include "socket-util.h"
  16 #include "string-util.h"
  17 #include "strv.h"
  18 #include "utf8.h"
  19
  20 #define ADDRESSES_PER_LINK_MAX 2048U
  21 #define STATIC_ADDRESSES_PER_NETWORK_MAX 1024U
  22
  23 int address_new(Address **ret) {
  24         _cleanup_(address_freep) Address *address = NULL;
  25
  26         address = new(Address, 1);
  27         if (!address)
  28                 return -ENOMEM;
  29
  30         *address = (Address) {
  31                 .family = AF_UNSPEC,
  32                 .scope = RT_SCOPE_UNIVERSE,
  33                 .cinfo.ifa_prefered = CACHE_INFO_INFINITY_LIFE_TIME,
  34                 .cinfo.ifa_valid = CACHE_INFO_INFINITY_LIFE_TIME,
  35         };
  36
  37         *ret = TAKE_PTR(address);
  38
  39         return 0;
  40 }
  41
  42 static int address_new_static(Network *network, const char *filename, unsigned section_line, Address **ret) {
  43         _cleanup_(network_config_section_freep) NetworkConfigSection *n = NULL;
  44         _cleanup_(address_freep) Address *address = NULL;
  45         int r;
  46
  47         assert(network);
  48         assert(ret);
  49         assert(!!filename == (section_line > 0));
  50
  51         if (filename) {
  52                 r = network_config_section_new(filename, section_line, &n);
  53                 if (r < 0)
  54                         return r;
  55
  56                 address = hashmap_get(network->addresses_by_section, n);
  57                 if (address) {
  58                         *ret = TAKE_PTR(address);
  59
  60                         return 0;
  61                 }
  62         }
  63
  64         if (network->n_static_addresses >= STATIC_ADDRESSES_PER_NETWORK_MAX)
  65                 return -E2BIG;
  66
  67         r = address_new(&address);
  68         if (r < 0)
  69                 return r;
  70
  71         address->network = network;
  72         LIST_APPEND(addresses, network->static_addresses, address);
  73         network->n_static_addresses++;
  74
  75         if (filename) {
  76                 address->section = TAKE_PTR(n);
  77
  78                 r = hashmap_ensure_allocated(&network->addresses_by_section, &network_config_hash_ops);
  79                 if (r < 0)
  80                         return r;
  81
  82                 r = hashmap_put(network->addresses_by_section, address->section, address);
  83                 if (r < 0)
  84                         return r;
  85         }
  86
  87         *ret = TAKE_PTR(address);
  88
  89         return 0;
  90 }
  91
  92 void address_free(Address *address) {
  93         if (!address)
  94                 return;
  95
  96         if (address->network) {
  97                 LIST_REMOVE(addresses, address->network->static_addresses, address);
  98                 assert(address->network->n_static_addresses > 0);
  99                 address->network->n_static_addresses--;
 100
 101                 if (address->section)
 102                         hashmap_remove(address->network->addresses_by_section, address->section);
 103         }
 104
 105         if (address->link) {
 106                 set_remove(address->link->addresses, address);
 107                 set_remove(address->link->addresses_foreign, address);
 108
 109                 if (in_addr_equal(AF_INET6, &address->in_addr, (const union in_addr_union *) &address->link->ipv6ll_address))
 110                         memzero(&address->link->ipv6ll_address, sizeof(struct in6_addr));
 111         }
 112
 113         network_config_section_free(address->section);
 114         free(address->label);
 115         free(address);
 116 }
 117
 118 static void address_hash_func(const Address *a, struct siphash *state) {
 119         assert(a);
 120
 121         siphash24_compress(&a->family, sizeof(a->family), state);
 122
 123         switch (a->family) {
 124         case AF_INET:
 125                 siphash24_compress(&a->prefixlen, sizeof(a->prefixlen), state);
 126
 127                 /* peer prefix */
 128                 if (a->prefixlen != 0) {
 129                         uint32_t prefix;
 130
 131                         if (a->in_addr_peer.in.s_addr != 0)
 132                                 prefix = be32toh(a->in_addr_peer.in.s_addr) >> (32 - a->prefixlen);
 133                         else
 134                                 prefix = be32toh(a->in_addr.in.s_addr) >> (32 - a->prefixlen);
 135
 136                         siphash24_compress(&prefix, sizeof(prefix), state);
 137                 }
 138
 139                 _fallthrough_;
 140         case AF_INET6:
 141                 /* local address */
 142                 siphash24_compress(&a->in_addr, FAMILY_ADDRESS_SIZE(a->family), state);
 143
 144                 break;
 145         default:
 146                 /* treat any other address family as AF_UNSPEC */
 147                 break;
 148         }
 149 }
 150
 151 static int address_compare_func(const Address *a1, const Address *a2) {
 152         int r;
 153
 154         r = CMP(a1->family, a2->family);
 155         if (r != 0)
 156                 return r;
 157
 158         switch (a1->family) {
 159         /* use the same notion of equality as the kernel does */
 160         case AF_INET:
 161                 r = CMP(a1->prefixlen, a2->prefixlen);
 162                 if (r != 0)
 163                         return r;
 164
 165                 /* compare the peer prefixes */
 166                 if (a1->prefixlen != 0) {
 167                         /* make sure we don't try to shift by 32.
 168                          * See ISO/IEC 9899:TC3 § 6.5.7.3. */
 169                         uint32_t b1, b2;
 170
 171                         if (a1->in_addr_peer.in.s_addr != 0)
 172                                 b1 = be32toh(a1->in_addr_peer.in.s_addr) >> (32 - a1->prefixlen);
 173                         else
 174                                 b1 = be32toh(a1->in_addr.in.s_addr) >> (32 - a1->prefixlen);
 175
 176                         if (a2->in_addr_peer.in.s_addr != 0)
 177                                 b2 = be32toh(a2->in_addr_peer.in.s_addr) >> (32 - a1->prefixlen);
 178                         else
 179                                 b2 = be32toh(a2->in_addr.in.s_addr) >> (32 - a1->prefixlen);
 180
 181                         r = CMP(b1, b2);
 182                         if (r != 0)
 183                                 return r;
 184                 }
 185
 186                 _fallthrough_;
 187         case AF_INET6:
 188                 return memcmp(&a1->in_addr, &a2->in_addr, FAMILY_ADDRESS_SIZE(a1->family));
 189         default:
 190                 /* treat any other address family as AF_UNSPEC */
 191                 return 0;
 192         }
 193 }
 194
 195 DEFINE_PRIVATE_HASH_OPS(address_hash_ops, Address, address_hash_func, address_compare_func);
 196
 197 bool address_equal(Address *a1, Address *a2) {
 198         if (a1 == a2)
 199                 return true;
 200
 201         if (!a1 || !a2)
 202                 return false;
 203
 204         return address_compare_func(a1, a2) == 0;
 205 }
 206
 207 static int address_establish(Address *address, Link *link) {
 208         bool masq;
 209         int r;
 210
 211         assert(address);
 212         assert(link);
 213
 214         masq = link->network &&
 215                link->network->ip_masquerade &&
 216                address->family == AF_INET &&
 217                address->scope < RT_SCOPE_LINK;
 218
 219         /* Add firewall entry if this is requested */
 220         if (address->ip_masquerade_done != masq) {
 221                 union in_addr_union masked = address->in_addr;
 222                 in_addr_mask(address->family, &masked, address->prefixlen);
 223
 224                 r = fw_add_masquerade(masq, AF_INET, 0, &masked, address->prefixlen, NULL, NULL, 0);
 225                 if (r < 0)
 226                         return r;
 227
 228                 address->ip_masquerade_done = masq;
 229         }
 230
 231         return 0;
 232 }
 233
 234 static int address_add_internal(Link *link, Set **addresses,
 235                                 int family,
 236                                 const union in_addr_union *in_addr,
 237                                 unsigned char prefixlen,
 238                                 Address **ret) {
 239         _cleanup_(address_freep) Address *address = NULL;
 240         int r;
 241
 242         assert(link);
 243         assert(addresses);
 244         assert(in_addr);
 245
 246         r = address_new(&address);
 247         if (r < 0)
 248                 return r;
 249
 250         address->family = family;
 251         address->in_addr = *in_addr;
 252         address->prefixlen = prefixlen;
 253         /* Consider address tentative until we get the real flags from the kernel */
 254         address->flags = IFA_F_TENTATIVE;
 255
 256         r = set_ensure_allocated(addresses, &address_hash_ops);
 257         if (r < 0)
 258                 return r;
 259
 260         r = set_put(*addresses, address);
 261         if (r < 0)
 262                 return r;
 263
 264         address->link = link;
 265
 266         if (ret)
 267                 *ret = address;
 268
 269         address = NULL;
 270
 271         return 0;
 272 }
 273
 274 int address_add_foreign(Link *link, int family, const union in_addr_union *in_addr, unsigned char prefixlen, Address **ret) {
 275         return address_add_internal(link, &link->addresses_foreign, family, in_addr, prefixlen, ret);
 276 }
 277
 278 int address_add(Link *link, int family, const union in_addr_union *in_addr, unsigned char prefixlen, Address **ret) {
 279         Address *address;
 280         int r;
 281
 282         r = address_get(link, family, in_addr, prefixlen, &address);
 283         if (r == -ENOENT) {
 284                 /* Address does not exist, create a new one */
 285                 r = address_add_internal(link, &link->addresses, family, in_addr, prefixlen, &address);
 286                 if (r < 0)
 287                         return r;
 288         } else if (r == 0) {
 289                 /* Take over a foreign address */
 290                 r = set_ensure_allocated(&link->addresses, &address_hash_ops);
 291                 if (r < 0)
 292                         return r;
 293
 294                 r = set_put(link->addresses, address);
 295                 if (r < 0)
 296                         return r;
 297
 298                 set_remove(link->addresses_foreign, address);
 299         } else if (r == 1) {
 300                 /* Already exists, do nothing */
 301                 ;
 302         } else
 303                 return r;
 304
 305         if (ret)
 306                 *ret = address;
 307
 308         return 0;
 309 }
 310
 311 static int address_release(Address *address) {
 312         int r;
 313
 314         assert(address);
 315         assert(address->link);
 316
 317         /* Remove masquerading firewall entry if it was added */
 318         if (address->ip_masquerade_done) {
 319                 union in_addr_union masked = address->in_addr;
 320                 in_addr_mask(address->family, &masked, address->prefixlen);
 321
 322                 r = fw_add_masquerade(false, AF_INET, 0, &masked, address->prefixlen, NULL, NULL, 0);
 323                 if (r < 0)
 324                         return r;
 325
 326                 address->ip_masquerade_done = false;
 327         }
 328
 329         return 0;
 330 }
 331
 332 int address_update(
 333                 Address *address,
 334                 unsigned char flags,
 335                 unsigned char scope,
 336                 const struct ifa_cacheinfo *cinfo) {
 337
 338         bool ready;
 339         int r;
 340
 341         assert(address);
 342         assert(cinfo);
 343         assert_return(address->link, 1);
 344
 345         if (IN_SET(address->link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
 346                 return 1;
 347
 348         ready = address_is_ready(address);
 349
 350         address->flags = flags;
 351         address->scope = scope;
 352         address->cinfo = *cinfo;
 353
 354         link_update_operstate(address->link, true);
 355         link_check_ready(address->link);
 356
 357         if (!ready &&
 358             address_is_ready(address) &&
 359             address->family == AF_INET6 &&
 360             in_addr_is_link_local(AF_INET6, &address->in_addr) > 0 &&
 361             in_addr_is_null(AF_INET6, (const union in_addr_union*) &address->link->ipv6ll_address) > 0) {
 362
 363                 r = link_ipv6ll_gained(address->link, &address->in_addr.in6);
 364                 if (r < 0)
 365                         return r;
 366         }
 367
 368         return 0;
 369 }
 370
 371 int address_drop(Address *address) {
 372         Link *link;
 373         bool ready;
 374         int r;
 375
 376         assert(address);
 377
 378         ready = address_is_ready(address);
 379         link = address->link;
 380
 381         r = address_release(address);
 382         if (r < 0)
 383                 log_link_warning_errno(link, r, "Failed to disable IP masquerading, ignoring: %m");
 384
 385         address_free(address);
 386
 387         link_update_operstate(link, true);
 388
 389         if (link && !ready)
 390                 link_check_ready(link);
 391
 392         return 0;
 393 }
 394
 395 int address_get(Link *link,
 396                 int family,
 397                 const union in_addr_union *in_addr,
 398                 unsigned char prefixlen,
 399                 Address **ret) {
 400
 401         Address address, *existing;
 402
 403         assert(link);
 404         assert(in_addr);
 405
 406         address = (Address) {
 407                 .family = family,
 408                 .in_addr = *in_addr,
 409                 .prefixlen = prefixlen,
 410         };
 411
 412         existing = set_get(link->addresses, &address);
 413         if (existing) {
 414                 if (ret)
 415                         *ret = existing;
 416                 return 1;
 417         }
 418
 419         existing = set_get(link->addresses_foreign, &address);
 420         if (existing) {
 421                 if (ret)
 422                         *ret = existing;
 423                 return 0;
 424         }
 425
 426         return -ENOENT;
 427 }
 428
 429 static int address_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
 430         int r;
 431
 432         assert(m);
 433         assert(link);
 434         assert(link->ifname);
 435
 436         if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
 437                 return 1;
 438
 439         r = sd_netlink_message_get_errno(m);
 440         if (r < 0 && r != -EADDRNOTAVAIL)
 441                 log_link_warning_errno(link, r, "Could not drop address: %m");
 442
 443         return 1;
 444 }
 445
 446 int address_remove(
 447                 Address *address,
 448                 Link *link,
 449                 link_netlink_message_handler_t callback) {
 450
 451         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
 452         int r;
 453
 454         assert(address);
 455         assert(IN_SET(address->family, AF_INET, AF_INET6));
 456         assert(link);
 457         assert(link->ifindex > 0);
 458         assert(link->manager);
 459         assert(link->manager->rtnl);
 460
 461         if (DEBUG_LOGGING) {
 462                 _cleanup_free_ char *b = NULL;
 463
 464                 (void) in_addr_to_string(address->family, &address->in_addr, &b);
 465                 log_link_debug(link, "Removing address %s", strna(b));
 466         }
 467
 468         r = sd_rtnl_message_new_addr(link->manager->rtnl, &req, RTM_DELADDR,
 469                                      link->ifindex, address->family);
 470         if (r < 0)
 471                 return log_link_error_errno(link, r, "Could not allocate RTM_DELADDR message: %m");
 472
 473         r = sd_rtnl_message_addr_set_prefixlen(req, address->prefixlen);
 474         if (r < 0)
 475                 return log_link_error_errno(link, r, "Could not set prefixlen: %m");
 476
 477         r = netlink_message_append_in_addr_union(req, IFA_LOCAL, address->family, &address->in_addr);
 478         if (r < 0)
 479                 return log_link_error_errno(link, r, "Could not append IFA_LOCAL attribute: %m");
 480
 481         r = netlink_call_async(link->manager->rtnl, NULL, req,
 482                                callback ?: address_remove_handler,
 483                                link_netlink_destroy_callback, link);
 484         if (r < 0)
 485                 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
 486
 487         link_ref(link);
 488
 489         return 0;
 490 }
 491
 492 static int address_acquire(Link *link, Address *original, Address **ret) {
 493         union in_addr_union in_addr = IN_ADDR_NULL;
 494         struct in_addr broadcast = {};
 495         _cleanup_(address_freep) Address *na = NULL;
 496         int r;
 497
 498         assert(link);
 499         assert(original);
 500         assert(ret);
 501
 502         /* Something useful was configured? just use it */
 503         r = in_addr_is_null(original->family, &original->in_addr);
 504         if (r <= 0)
 505                 return r;
 506
 507         /* The address is configured to be 0.0.0.0 or [::] by the user?
 508          * Then let's acquire something more useful from the pool. */
 509         r = manager_address_pool_acquire(link->manager, original->family, original->prefixlen, &in_addr);
 510         if (r < 0)
 511                 return r;
 512         if (r == 0)
 513                 return -EBUSY;
 514
 515         if (original->family == AF_INET) {
 516                 /* Pick first address in range for ourselves ... */
 517                 in_addr.in.s_addr = in_addr.in.s_addr | htobe32(1);
 518
 519                 /* .. and use last as broadcast address */
 520                 if (original->prefixlen > 30)
 521                         broadcast.s_addr = 0;
 522                 else
 523                         broadcast.s_addr = in_addr.in.s_addr | htobe32(0xFFFFFFFFUL >> original->prefixlen);
 524         } else if (original->family == AF_INET6)
 525                 in_addr.in6.s6_addr[15] |= 1;
 526
 527         r = address_new(&na);
 528         if (r < 0)
 529                 return r;
 530
 531         na->family = original->family;
 532         na->prefixlen = original->prefixlen;
 533         na->scope = original->scope;
 534         na->cinfo = original->cinfo;
 535
 536         if (original->label) {
 537                 na->label = strdup(original->label);
 538                 if (!na->label)
 539                         return -ENOMEM;
 540         }
 541
 542         na->broadcast = broadcast;
 543         na->in_addr = in_addr;
 544
 545         LIST_PREPEND(addresses, link->pool_addresses, na);
 546
 547         *ret = TAKE_PTR(na);
 548
 549         return 0;
 550 }
 551
 552 int address_configure(
 553                 Address *address,
 554                 Link *link,
 555                 link_netlink_message_handler_t callback,
 556                 bool update) {
 557
 558         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
 559         int r;
 560
 561         assert(address);
 562         assert(IN_SET(address->family, AF_INET, AF_INET6));
 563         assert(link);
 564         assert(link->ifindex > 0);
 565         assert(link->manager);
 566         assert(link->manager->rtnl);
 567         assert(callback);
 568
 569         if (address->family == AF_INET6 && manager_sysctl_ipv6_enabled(link->manager) == 0) {
 570                 log_link_warning(link, "An IPv6 address is requested, but IPv6 is disabled by sysctl, ignoring.");
 571                 return 0;
 572         }
 573
 574         /* If this is a new address, then refuse adding more than the limit */
 575         if (address_get(link, address->family, &address->in_addr, address->prefixlen, NULL) <= 0 &&
 576             set_size(link->addresses) >= ADDRESSES_PER_LINK_MAX)
 577                 return log_link_error_errno(link, SYNTHETIC_ERRNO(E2BIG),
 578                                             "Too many addresses are configured, refusing: %m");
 579
 580         r = address_acquire(link, address, &address);
 581         if (r < 0)
 582                 return log_link_error_errno(link, r, "Failed to acquire an address from pool: %m");
 583
 584         if (update)
 585                 r = sd_rtnl_message_new_addr_update(link->manager->rtnl, &req,
 586                                                     link->ifindex, address->family);
 587         else
 588                 r = sd_rtnl_message_new_addr(link->manager->rtnl, &req, RTM_NEWADDR,
 589                                              link->ifindex, address->family);
 590         if (r < 0)
 591                 return log_link_error_errno(link, r, "Could not allocate RTM_NEWADDR message: %m");
 592
 593         r = sd_rtnl_message_addr_set_prefixlen(req, address->prefixlen);
 594         if (r < 0)
 595                 return log_link_error_errno(link, r, "Could not set prefixlen: %m");
 596
 597         address->flags |= IFA_F_PERMANENT;
 598
 599         if (address->home_address)
 600                 address->flags |= IFA_F_HOMEADDRESS;
 601
 602         if (address->duplicate_address_detection)
 603                 address->flags |= IFA_F_NODAD;
 604
 605         if (address->manage_temporary_address)
 606                 address->flags |= IFA_F_MANAGETEMPADDR;
 607
 608         if (address->prefix_route)
 609                 address->flags |= IFA_F_NOPREFIXROUTE;
 610
 611         if (address->autojoin)
 612                 address->flags |= IFA_F_MCAUTOJOIN;
 613
 614         r = sd_rtnl_message_addr_set_flags(req, (address->flags & 0xff));
 615         if (r < 0)
 616                 return log_link_error_errno(link, r, "Could not set flags: %m");
 617
 618         if (address->flags & ~0xff) {
 619                 r = sd_netlink_message_append_u32(req, IFA_FLAGS, address->flags);
 620                 if (r < 0)
 621                         return log_link_error_errno(link, r, "Could not set extended flags: %m");
 622         }
 623
 624         r = sd_rtnl_message_addr_set_scope(req, address->scope);
 625         if (r < 0)
 626                 return log_link_error_errno(link, r, "Could not set scope: %m");
 627
 628         r = netlink_message_append_in_addr_union(req, IFA_LOCAL, address->family, &address->in_addr);
 629         if (r < 0)
 630                 return log_link_error_errno(link, r, "Could not append IFA_LOCAL attribute: %m");
 631
 632         if (in_addr_is_null(address->family, &address->in_addr_peer) == 0) {
 633                 r = netlink_message_append_in_addr_union(req, IFA_ADDRESS, address->family, &address->in_addr_peer);
 634                 if (r < 0)
 635                         return log_link_error_errno(link, r, "Could not append IFA_ADDRESS attribute: %m");
 636         } else if (address->family == AF_INET && address->prefixlen <= 30) {
 637                 r = sd_netlink_message_append_in_addr(req, IFA_BROADCAST, &address->broadcast);
 638                 if (r < 0)
 639                         return log_link_error_errno(link, r, "Could not append IFA_BROADCAST attribute: %m");
 640         }
 641
 642         if (address->label) {
 643                 r = sd_netlink_message_append_string(req, IFA_LABEL, address->label);
 644                 if (r < 0)
 645                         return log_link_error_errno(link, r, "Could not append IFA_LABEL attribute: %m");
 646         }
 647
 648         r = sd_netlink_message_append_cache_info(req, IFA_CACHEINFO, &address->cinfo);
 649         if (r < 0)
 650                 return log_link_error_errno(link, r, "Could not append IFA_CACHEINFO attribute: %m");
 651
 652         r = address_establish(address, link);
 653         if (r < 0)
 654                 log_link_warning_errno(link, r, "Could not enable IP masquerading, ignoring: %m");
 655
 656         r = netlink_call_async(link->manager->rtnl, NULL, req, callback, link_netlink_destroy_callback, link);
 657         if (r < 0) {
 658                 address_release(address);
 659                 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
 660         }
 661
 662         link_ref(link);
 663
 664         if (address->family == AF_INET6 && !in_addr_is_null(address->family, &address->in_addr_peer))
 665                 r = address_add(link, address->family, &address->in_addr_peer, address->prefixlen, NULL);
 666         else
 667                 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
 668         if (r < 0) {
 669                 address_release(address);
 670                 return log_link_error_errno(link, r, "Could not add address: %m");
 671         }
 672
 673         return 1;
 674 }
 675
 676 int config_parse_broadcast(
 677                 const char *unit,
 678                 const char *filename,
 679                 unsigned line,
 680                 const char *section,
 681                 unsigned section_line,
 682                 const char *lvalue,
 683                 int ltype,
 684                 const char *rvalue,
 685                 void *data,
 686                 void *userdata) {
 687
 688         Network *network = userdata;
 689         _cleanup_(address_free_or_set_invalidp) Address *n = NULL;
 690         int r;
 691
 692         assert(filename);
 693         assert(section);
 694         assert(lvalue);
 695         assert(rvalue);
 696         assert(data);
 697
 698         r = address_new_static(network, filename, section_line, &n);
 699         if (r < 0)
 700                 return r;
 701
 702         if (n->family == AF_INET6) {
 703                 log_syntax(unit, LOG_ERR, filename, line, 0,
 704                            "Broadcast is not valid for IPv6 addresses, ignoring assignment: %s", rvalue);
 705                 return 0;
 706         }
 707
 708         r = in_addr_from_string(AF_INET, rvalue, (union in_addr_union*) &n->broadcast);
 709         if (r < 0) {
 710                 log_syntax(unit, LOG_ERR, filename, line, r,
 711                            "Broadcast is invalid, ignoring assignment: %s", rvalue);
 712                 return 0;
 713         }
 714
 715         n->family = AF_INET;
 716         n = NULL;
 717
 718         return 0;
 719 }
 720
 721 int config_parse_address(const char *unit,
 722                 const char *filename,
 723                 unsigned line,
 724                 const char *section,
 725                 unsigned section_line,
 726                 const char *lvalue,
 727                 int ltype,
 728                 const char *rvalue,
 729                 void *data,
 730                 void *userdata) {
 731
 732         Network *network = userdata;
 733         _cleanup_(address_free_or_set_invalidp) Address *n = NULL;
 734         union in_addr_union buffer;
 735         unsigned char prefixlen;
 736         int r, f;
 737
 738         assert(filename);
 739         assert(section);
 740         assert(lvalue);
 741         assert(rvalue);
 742         assert(data);
 743
 744         if (streq(section, "Network")) {
 745                 /* we are not in an Address section, so treat
 746                  * this as the special '0' section */
 747                 r = address_new_static(network, NULL, 0, &n);
 748         } else
 749                 r = address_new_static(network, filename, section_line, &n);
 750
 751         if (r < 0)
 752                 return r;
 753
 754         /* Address=address/prefixlen */
 755         r = in_addr_prefix_from_string_auto_internal(rvalue, PREFIXLEN_REFUSE, &f, &buffer, &prefixlen);
 756         if (r == -ENOANO) {
 757                 log_syntax(unit, LOG_ERR, filename, line, r,
 758                            "An address '%s' is specified without prefix length. "
 759                            "The behavior of parsing addresses without prefix length will be changed in the future release. "
 760                            "Please specify prefix length explicitly.", rvalue);
 761
 762                 r = in_addr_prefix_from_string_auto_internal(rvalue, PREFIXLEN_LEGACY, &f, &buffer, &prefixlen);
 763         }
 764         if (r < 0) {
 765                 log_syntax(unit, LOG_ERR, filename, line, r, "Invalid address '%s', ignoring assignment: %m", rvalue);
 766                 return 0;
 767         }
 768
 769         if (n->family != AF_UNSPEC && f != n->family) {
 770                 log_syntax(unit, LOG_ERR, filename, line, 0, "Address is incompatible, ignoring assignment: %s", rvalue);
 771                 return 0;
 772         }
 773
 774         if (in_addr_is_null(f, &buffer)) {
 775                 /* Will use address from address pool. Note that for ipv6 case, prefix of the address
 776                  * pool is 8, but 40 bit is used by the global ID and 16 bit by the subnet ID. So,
 777                  * let's limit the prefix length to 64 or larger. See RFC4193. */
 778                 if ((f == AF_INET && prefixlen < 8) ||
 779                     (f == AF_INET6 && prefixlen < 64)) {
 780                         log_syntax(unit, LOG_ERR, filename, line, 0,
 781                                    "Null address with invalid prefixlen='%u', ignoring assignment: %s",
 782                                    prefixlen, rvalue);
 783                         return 0;
 784                 }
 785         }
 786
 787         n->family = f;
 788         n->prefixlen = prefixlen;
 789
 790         if (streq(lvalue, "Address"))
 791                 n->in_addr = buffer;
 792         else
 793                 n->in_addr_peer = buffer;
 794
 795         if (n->family == AF_INET && n->broadcast.s_addr == 0 && n->prefixlen <= 30)
 796                 n->broadcast.s_addr = n->in_addr.in.s_addr | htonl(0xfffffffflu >> n->prefixlen);
 797
 798         n = NULL;
 799
 800         return 0;
 801 }
 802
 803 int config_parse_label(
 804                 const char *unit,
 805                 const char *filename,
 806                 unsigned line,
 807                 const char *section,
 808                 unsigned section_line,
 809                 const char *lvalue,
 810                 int ltype,
 811                 const char *rvalue,
 812                 void *data,
 813                 void *userdata) {
 814
 815         _cleanup_(address_free_or_set_invalidp) Address *n = NULL;
 816         Network *network = userdata;
 817         int r;
 818
 819         assert(filename);
 820         assert(section);
 821         assert(lvalue);
 822         assert(rvalue);
 823         assert(data);
 824
 825         r = address_new_static(network, filename, section_line, &n);
 826         if (r < 0)
 827                 return r;
 828
 829         if (!address_label_valid(rvalue)) {
 830                 log_syntax(unit, LOG_ERR, filename, line, 0,
 831                            "Interface label is too long or invalid, ignoring assignment: %s", rvalue);
 832                 return 0;
 833         }
 834
 835         r = free_and_strdup(&n->label, rvalue);
 836         if (r < 0)
 837                 return log_oom();
 838
 839         n = NULL;
 840         return 0;
 841 }
 842
 843 int config_parse_lifetime(const char *unit,
 844                           const char *filename,
 845                           unsigned line,
 846                           const char *section,
 847                           unsigned section_line,
 848                           const char *lvalue,
 849                           int ltype,
 850                           const char *rvalue,
 851                           void *data,
 852                           void *userdata) {
 853         Network *network = userdata;
 854         _cleanup_(address_free_or_set_invalidp) Address *n = NULL;
 855         unsigned k;
 856         int r;
 857
 858         assert(filename);
 859         assert(section);
 860         assert(lvalue);
 861         assert(rvalue);
 862         assert(data);
 863
 864         r = address_new_static(network, filename, section_line, &n);
 865         if (r < 0)
 866                 return r;
 867
 868         /* We accept only "forever", "infinity", or "0". */
 869         if (STR_IN_SET(rvalue, "forever", "infinity"))
 870                 k = CACHE_INFO_INFINITY_LIFE_TIME;
 871         else if (streq(rvalue, "0"))
 872                 k = 0;
 873         else {
 874                 log_syntax(unit, LOG_ERR, filename, line, 0,
 875                            "Invalid PreferredLifetime= value, ignoring: %s", rvalue);
 876                 return 0;
 877         }
 878
 879         n->cinfo.ifa_prefered = k;
 880         n = NULL;
 881
 882         return 0;
 883 }
 884
 885 int config_parse_address_flags(const char *unit,
 886                                const char *filename,
 887                                unsigned line,
 888                                const char *section,
 889                                unsigned section_line,
 890                                const char *lvalue,
 891                                int ltype,
 892                                const char *rvalue,
 893                                void *data,
 894                                void *userdata) {
 895         Network *network = userdata;
 896         _cleanup_(address_free_or_set_invalidp) Address *n = NULL;
 897         int r;
 898
 899         assert(filename);
 900         assert(section);
 901         assert(lvalue);
 902         assert(rvalue);
 903         assert(data);
 904
 905         r = address_new_static(network, filename, section_line, &n);
 906         if (r < 0)
 907                 return r;
 908
 909         r = parse_boolean(rvalue);
 910         if (r < 0) {
 911                 log_syntax(unit, LOG_ERR, filename, line, r,
 912                            "Failed to parse address flag, ignoring: %s", rvalue);
 913                 return 0;
 914         }
 915
 916         if (streq(lvalue, "HomeAddress"))
 917                 n->home_address = r;
 918         else if (streq(lvalue, "DuplicateAddressDetection"))
 919                 n->duplicate_address_detection = r;
 920         else if (streq(lvalue, "ManageTemporaryAddress"))
 921                 n->manage_temporary_address = r;
 922         else if (streq(lvalue, "PrefixRoute"))
 923                 n->prefix_route = r;
 924         else if (streq(lvalue, "AutoJoin"))
 925                 n->autojoin = r;
 926         else
 927                 assert_not_reached("Invalid address flag type.");
 928
 929         n = NULL;
 930         return 0;
 931 }
 932
 933 int config_parse_address_scope(const char *unit,
 934                                const char *filename,
 935                                unsigned line,
 936                                const char *section,
 937                                unsigned section_line,
 938                                const char *lvalue,
 939                                int ltype,
 940                                const char *rvalue,
 941                                void *data,
 942                                void *userdata) {
 943         Network *network = userdata;
 944         _cleanup_(address_free_or_set_invalidp) Address *n = NULL;
 945         int r;
 946
 947         assert(filename);
 948         assert(section);
 949         assert(lvalue);
 950         assert(rvalue);
 951         assert(data);
 952
 953         r = address_new_static(network, filename, section_line, &n);
 954         if (r < 0)
 955                 return r;
 956
 957         if (streq(rvalue, "host"))
 958                 n->scope = RT_SCOPE_HOST;
 959         else if (streq(rvalue, "link"))
 960                 n->scope = RT_SCOPE_LINK;
 961         else if (streq(rvalue, "global"))
 962                 n->scope = RT_SCOPE_UNIVERSE;
 963         else {
 964                 r = safe_atou8(rvalue , &n->scope);
 965                 if (r < 0) {
 966                         log_syntax(unit, LOG_ERR, filename, line, r,
 967                                    "Could not parse address scope \"%s\", ignoring assignment: %m", rvalue);
 968                         return 0;
 969                 }
 970         }
 971
 972         n = NULL;
 973         return 0;
 974 }
 975
 976 bool address_is_ready(const Address *a) {
 977         assert(a);
 978
 979         if (a->family == AF_INET6)
 980                 return !(a->flags & IFA_F_TENTATIVE);
 981         else
 982                 return !(a->flags & (IFA_F_TENTATIVE | IFA_F_DEPRECATED));
 983 }
 984
 985 int address_section_verify(Address *address) {
 986         if (section_is_invalid(address->section))
 987                 return -EINVAL;
 988
 989         if (address->family == AF_UNSPEC) {
 990                 assert(address->section);
 991
 992                 return log_warning_errno(SYNTHETIC_ERRNO(EINVAL),
 993                                          "%s: Address section without Address= field configured. "
 994                                          "Ignoring [Address] section from line %u.",
 995                                          address->section->filename, address->section->line);
 996         }
 997
 998         return 0;
 999 }