ubus.c

   1 /*
   2  * firewall3 - 3rd OpenWrt UCI firewall implementation
   3  *
   4  *   Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
   5  *
   6  * Permission to use, copy, modify, and/or distribute this software for any
   7  * purpose with or without fee is hereby granted, provided that the above
   8  * copyright notice and this permission notice appear in all copies.
   9  *
  10  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  11  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  12  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  13  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  14  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  15  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  16  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  17  */
  18
  19 #include "ubus.h"
  20
  21 static struct blob_attr *interfaces = NULL;
  22
  23
  24 static void dump_cb(struct ubus_request *req, int type, struct blob_attr *msg)
  25 {
  26         static const struct blobmsg_policy policy = { "interface", BLOBMSG_TYPE_ARRAY };
  27         struct blob_attr *cur;
  28
  29         blobmsg_parse(&policy, 1, &cur, blob_data(msg), blob_len(msg));
  30         if (cur)
  31                 interfaces = blob_memdup(cur);
  32 }
  33
  34 bool
  35 fw3_ubus_connect(void)
  36 {
  37         bool status = false;
  38         uint32_t id;
  39         struct ubus_context *ctx = ubus_connect(NULL);
  40
  41         if (!ctx)
  42                 goto out;
  43
  44         if (ubus_lookup_id(ctx, "network.interface", &id))
  45                 goto out;
  46
  47         if (ubus_invoke(ctx, id, "dump", NULL, dump_cb, NULL, 500))
  48                 goto out;
  49
  50         status = true;
  51
  52 out:
  53         if (ctx)
  54                 ubus_free(ctx);
  55         return status;
  56 }
  57
  58 void
  59 fw3_ubus_disconnect(void)
  60 {
  61         free(interfaces);
  62         interfaces = NULL;
  63 }
  64
  65 static struct fw3_address *
  66 parse_subnet(enum fw3_family family, struct blob_attr *dict, int rem)
  67 {
  68         struct blob_attr *cur;
  69         struct fw3_address *addr;
  70
  71         addr = malloc(sizeof(*addr));
  72
  73         if (!addr)
  74                 return NULL;
  75
  76         memset(addr, 0, sizeof(*addr));
  77
  78         addr->set = true;
  79         addr->family = family;
  80
  81         __blob_for_each_attr(cur, dict, rem)
  82         {
  83                 if (!strcmp(blobmsg_name(cur), "address"))
  84                         inet_pton(family == FW3_FAMILY_V4 ? AF_INET : AF_INET6,
  85                                   blobmsg_data(cur), &addr->address.v6);
  86
  87                 else if (!strcmp(blobmsg_name(cur), "mask"))
  88                         addr->mask = be32_to_cpu(*(uint32_t *)blobmsg_data(cur));
  89         }
  90
  91         return addr;
  92 }
  93
  94 static void
  95 parse_subnets(struct list_head *head, enum fw3_family family,
  96               struct blob_attr *list, int rem)
  97 {
  98         struct blob_attr *cur;
  99         struct fw3_address *addr;
 100
 101         __blob_for_each_attr(cur, list, rem)
 102         {
 103                 addr = parse_subnet(family, blobmsg_data(cur), blobmsg_data_len(cur));
 104
 105                 if (addr)
 106                         list_add_tail(&addr->list, head);
 107         }
 108 }
 109
 110 static void *
 111 invoke_common(const char *net, bool device)
 112 {
 113         struct fw3_device *dev = NULL;
 114         struct list_head *addr = NULL;
 115         struct blob_attr *c, *cur;
 116         unsigned r, rem;
 117         char *data;
 118         bool matched;
 119
 120         if (!net || !interfaces)
 121                 return NULL;
 122
 123         if (device)
 124                 dev = malloc(sizeof(*dev));
 125         else
 126                 addr = malloc(sizeof(*addr));
 127
 128         if ((device && !dev) || (!device && !addr))
 129                 goto fail;
 130
 131         if (device)
 132                 memset(dev, 0, sizeof(*dev));
 133         else
 134                 INIT_LIST_HEAD(addr);
 135
 136         blobmsg_for_each_attr(c, interfaces, r) {
 137                 matched = false;
 138                 blobmsg_for_each_attr(cur, c, rem)
 139                         if (!strcmp(blobmsg_name(cur), "interface"))
 140                                 matched = !strcmp(blobmsg_get_string(cur), net);
 141
 142                 if (!matched)
 143                         continue;
 144
 145                 blobmsg_for_each_attr(cur, c, rem) {
 146                         data = blobmsg_data(cur);
 147
 148                         if (dev && !strcmp(blobmsg_name(cur), "device") && !dev->name[0])
 149                                 snprintf(dev->name, sizeof(dev->name), "%s", data);
 150                         else if (dev && !strcmp(blobmsg_name(cur), "l3_device"))
 151                                 snprintf(dev->name, sizeof(dev->name), "%s", data);
 152                         else if (!dev && !strcmp(blobmsg_name(cur), "ipv4-address"))
 153                                 parse_subnets(addr, FW3_FAMILY_V4,
 154                                               blobmsg_data(cur), blobmsg_data_len(cur));
 155                         else if (!dev && (!strcmp(blobmsg_name(cur), "ipv6-address") ||
 156                                           !strcmp(blobmsg_name(cur), "ipv6-prefix-assignment")))
 157                                 parse_subnets(addr, FW3_FAMILY_V6,
 158                                               blobmsg_data(cur), blobmsg_data_len(cur));
 159                 }
 160
 161                 if (dev)
 162                         dev->set = !!dev->name[0];
 163
 164                 break;
 165         }
 166
 167         if (device && dev->set)
 168                 return dev;
 169         else if (!device && !list_empty(addr))
 170                 return addr;
 171
 172 fail:
 173         free(dev);
 174         free(addr);
 175
 176         return NULL;
 177 }
 178
 179 struct fw3_device *
 180 fw3_ubus_device(const char *net)
 181 {
 182         return invoke_common(net, true);
 183 }
 184
 185 struct list_head *
 186 fw3_ubus_address(const char *net)
 187 {
 188         return invoke_common(net, false);
 189 }
 190
 191 void
 192 fw3_ubus_zone_devices(struct fw3_zone *zone)
 193 {
 194         struct blob_attr *c, *cur, *dcur;
 195         unsigned r, rem, drem;
 196         const char *name;
 197         bool matches;
 198
 199         blobmsg_for_each_attr(c, interfaces, r) {
 200                 name = NULL;
 201                 matches = false;
 202
 203                 blobmsg_for_each_attr(cur, c, rem) {
 204                         if (!strcmp(blobmsg_name(cur), "interface"))
 205                                 name = blobmsg_get_string(cur);
 206                         else if (!strcmp(blobmsg_name(cur), "data"))
 207                                 blobmsg_for_each_attr(dcur, cur, drem)
 208                                         if (!strcmp(blobmsg_name(dcur), "zone"))
 209                                                 matches = !strcmp(blobmsg_get_string(dcur), zone->name);
 210                 }
 211
 212                 if (name && matches)
 213                         fw3_parse_device(&zone->networks, name, true);
 214         }
 215 }
 216
 217 void
 218 fw3_ubus_rules(struct blob_buf *b)
 219 {
 220         blob_buf_init(b, 0);
 221
 222         struct blob_attr *c, *cur, *dcur, *rule, *ropt;
 223         unsigned r, rem, drem, rrem, orem;
 224
 225         blobmsg_for_each_attr(c, interfaces, r) {
 226                 const char *l3_device = NULL;
 227                 struct blob_attr *data = NULL;
 228
 229                 blobmsg_for_each_attr(cur, c, rem) {
 230                         if (!strcmp(blobmsg_name(cur), "l3_device"))
 231                                 l3_device = blobmsg_get_string(cur);
 232                         else if (!strcmp(blobmsg_name(cur), "data"))
 233                                 data = cur;
 234                 }
 235
 236                 if (!data || !l3_device)
 237                         continue;
 238
 239                 blobmsg_for_each_attr(dcur, data, drem) {
 240                         if (strcmp(blobmsg_name(dcur), "firewall"))
 241                                 continue;
 242
 243                         blobmsg_for_each_attr(rule, dcur, rrem) {
 244                                 void *k = blobmsg_open_table(b, "");
 245
 246                                 blobmsg_for_each_attr(ropt, rule, orem)
 247                                         if (strcmp(blobmsg_name(ropt), "device"))
 248                                                 blobmsg_add_blob(b, ropt);
 249
 250                                 blobmsg_add_string(b, "device", l3_device);
 251                                 blobmsg_close_table(b, k);
 252                         }
 253                 }
 254         }
 255 }