fix use-after-free on config reload
[project/netifd.git] / interface-ip.c
1 #include <string.h>
2 #include <stdlib.h>
3 #include <stdio.h>
4 #include <unistd.h>
5
6 #include <arpa/inet.h>
7
8 #include "netifd.h"
9 #include "device.h"
10 #include "interface.h"
11 #include "interface-ip.h"
12 #include "proto.h"
13 #include "ubus.h"
14 #include "system.h"
15
16 enum {
17         ROUTE_INTERFACE,
18         ROUTE_TARGET,
19         ROUTE_MASK,
20         ROUTE_GATEWAY,
21         ROUTE_DEVICE,
22         ROUTE_METRIC,
23         ROUTE_MTU,
24         __ROUTE_MAX
25 };
26
27 static const struct blobmsg_policy route_attr[__ROUTE_MAX] = {
28         [ROUTE_INTERFACE] = { .name = "interface", .type = BLOBMSG_TYPE_STRING },
29         [ROUTE_TARGET] = { .name = "target", .type = BLOBMSG_TYPE_STRING },
30         [ROUTE_MASK] = { .name = "netmask", .type = BLOBMSG_TYPE_STRING },
31         [ROUTE_GATEWAY] = { .name = "gateway", .type = BLOBMSG_TYPE_STRING },
32         [ROUTE_DEVICE] = { .name = "device", .type = BLOBMSG_TYPE_STRING },
33         [ROUTE_METRIC] = { .name = "metric", .type = BLOBMSG_TYPE_INT32 },
34         [ROUTE_MTU] = { .name = "mtu", .type = BLOBMSG_TYPE_INT32 },
35 };
36
37 const struct config_param_list route_attr_list = {
38         .n_params = __ROUTE_MAX,
39         .params = route_attr,
40 };
41
42 void
43 interface_ip_add_route(struct interface *iface, struct blob_attr *attr, bool v6)
44 {
45         struct interface_ip_settings *ip;
46         struct blob_attr *tb[__ROUTE_MAX], *cur;
47         struct device_route *route;
48         int af = v6 ? AF_INET6 : AF_INET;
49         bool config = false;
50
51         blobmsg_parse(route_attr, __ROUTE_MAX, tb, blobmsg_data(attr), blobmsg_data_len(attr));
52
53         if (!tb[ROUTE_GATEWAY] && !tb[ROUTE_DEVICE])
54                 return;
55
56         if (!iface) {
57                 if ((cur = tb[ROUTE_INTERFACE]) == NULL)
58                         return;
59
60                 iface = vlist_find(&interfaces, blobmsg_data(cur), iface, node);
61                 if (!iface)
62                         return;
63
64                 ip = &iface->config_ip;
65                 config = true;
66         } else {
67                 ip = &iface->proto_ip;
68         }
69
70         route = calloc(1, sizeof(*route));
71         if (!route)
72                 return;
73
74         route->mask = v6 ? 128 : 32;
75         if ((cur = tb[ROUTE_MASK]) != NULL) {
76                 route->mask = parse_netmask_string(blobmsg_data(cur), v6);
77                 if (route->mask > (v6 ? 128 : 32))
78                         goto error;
79         }
80
81         if ((cur = tb[ROUTE_TARGET]) != NULL) {
82                 if (!inet_pton(af, blobmsg_data(cur), &route->addr)) {
83                         DPRINTF("Failed to parse route target: %s\n", (char *) blobmsg_data(cur));
84                         goto error;
85                 }
86         }
87
88         if ((cur = tb[ROUTE_GATEWAY]) != NULL) {
89                 if (!inet_pton(af, blobmsg_data(cur), &route->nexthop)) {
90                         DPRINTF("Failed to parse route gateway: %s\n", (char *) blobmsg_data(cur));
91                         goto error;
92                 }
93         }
94
95         if ((cur = tb[ROUTE_METRIC]) != NULL)
96                 route->metric = blobmsg_get_u32(cur);
97
98         if ((cur = tb[ROUTE_MTU]) != NULL)
99                 route->mtu = blobmsg_get_u32(cur);
100
101         if (!config && (cur = tb[ROUTE_DEVICE]) != NULL)
102                 route->device = device_get(blobmsg_data(cur), true);
103
104         vlist_add(&ip->route, &route->node);
105         return;
106
107 error:
108         free(route);
109 }
110
111 static int
112 addr_cmp(const void *k1, const void *k2, void *ptr)
113 {
114         return memcmp(k1, k2, sizeof(struct device_addr) -
115                       offsetof(struct device_addr, mask));
116 }
117
118 static int
119 route_cmp(const void *k1, const void *k2, void *ptr)
120 {
121         return memcmp(k1, k2, sizeof(struct device_route) -
122                       offsetof(struct device_route, mask));
123 }
124
125 static void
126 interface_update_proto_addr(struct vlist_tree *tree,
127                             struct vlist_node *node_new,
128                             struct vlist_node *node_old)
129 {
130         struct interface_ip_settings *ip;
131         struct interface *iface;
132         struct device *dev;
133         struct device_addr *addr;
134         bool keep = false;
135
136         ip = container_of(tree, struct interface_ip_settings, addr);
137         iface = ip->iface;
138         dev = iface->l3_dev->dev;
139
140         if (node_old && node_new)
141                 keep = true;
142
143         if (node_old) {
144                 addr = container_of(node_old, struct device_addr, node);
145                 if (!(addr->flags & DEVADDR_EXTERNAL) && addr->enabled && !keep)
146                         system_del_address(dev, addr);
147                 free(addr);
148         }
149
150         if (node_new) {
151                 addr = container_of(node_new, struct device_addr, node);
152                 if (!(addr->flags & DEVADDR_EXTERNAL) && !keep)
153                         system_add_address(dev, addr);
154                 addr->enabled = true;
155         }
156 }
157
158 static void
159 interface_update_proto_route(struct vlist_tree *tree,
160                              struct vlist_node *node_new,
161                              struct vlist_node *node_old)
162 {
163         struct interface_ip_settings *ip;
164         struct interface *iface;
165         struct device *dev;
166         struct device_route *route_old, *route_new;
167         bool keep = false;
168
169         ip = container_of(tree, struct interface_ip_settings, route);
170         iface = ip->iface;
171         dev = iface->l3_dev->dev;
172
173         route_old = container_of(node_old, struct device_route, node);
174         route_new = container_of(node_new, struct device_route, node);
175
176         if (node_old && node_new)
177                 keep = !memcmp(&route_old->nexthop, &route_new->nexthop, sizeof(route_old->nexthop));
178
179         if (node_old) {
180                 if (!(route_old->flags & DEVADDR_EXTERNAL) && route_old->enabled && !keep)
181                         system_del_route(dev, route_old);
182                 free(route_old);
183         }
184
185         if (node_new) {
186                 if (!(route_new->flags & DEVADDR_EXTERNAL) && !keep)
187                         system_add_route(dev, route_new);
188                 route_new->enabled = true;
189         }
190 }
191
192 void
193 interface_add_dns_server(struct interface_ip_settings *ip, const char *str)
194 {
195         struct dns_server *s;
196
197         s = calloc(1, sizeof(*s));
198         s->af = AF_INET;
199         if (inet_pton(s->af, str, &s->addr.in))
200                 goto add;
201
202         s->af = AF_INET6;
203         if (inet_pton(s->af, str, &s->addr.in))
204                 goto add;
205
206         free(s);
207         return;
208
209 add:
210         D(INTERFACE, "Add IPv%c DNS server: %s\n",
211           s->af == AF_INET6 ? '6' : '4', str);
212         list_add_tail(&s->list, &ip->dns_servers);
213 }
214
215 void
216 interface_add_dns_server_list(struct interface_ip_settings *ip, struct blob_attr *list)
217 {
218         struct blob_attr *cur;
219         int rem;
220
221         blobmsg_for_each_attr(cur, list, rem) {
222                 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
223                         continue;
224
225                 if (!blobmsg_check_attr(cur, NULL))
226                         continue;
227
228                 interface_add_dns_server(ip, blobmsg_data(cur));
229         }
230 }
231
232 static void
233 interface_add_dns_search_domain(struct interface_ip_settings *ip, const char *str)
234 {
235         struct dns_search_domain *s;
236         int len = strlen(str);
237
238         s = calloc(1, sizeof(*s) + len + 1);
239         if (!s)
240                 return;
241
242         D(INTERFACE, "Add DNS search domain: %s\n", str);
243         memcpy(s->name, str, len);
244         list_add_tail(&s->list, &ip->dns_search);
245 }
246
247 void
248 interface_add_dns_search_list(struct interface_ip_settings *ip, struct blob_attr *list)
249 {
250         struct blob_attr *cur;
251         int rem;
252
253         blobmsg_for_each_attr(cur, list, rem) {
254                 if (blobmsg_type(cur) != BLOBMSG_TYPE_STRING)
255                         continue;
256
257                 if (!blobmsg_check_attr(cur, NULL))
258                         continue;
259
260                 interface_add_dns_search_domain(ip, blobmsg_data(cur));
261         }
262 }
263
264 static void
265 interface_clear_dns_servers(struct interface_ip_settings *ip)
266 {
267         struct dns_server *s, *tmp;
268
269         list_for_each_entry_safe(s, tmp, &ip->dns_servers, list) {
270                 list_del(&s->list);
271                 free(s);
272         }
273 }
274
275 static void
276 interface_clear_dns_search(struct interface_ip_settings *ip)
277 {
278         struct dns_search_domain *s, *tmp;
279
280         list_for_each_entry_safe(s, tmp, &ip->dns_search, list) {
281                 list_del(&s->list);
282                 free(s);
283         }
284 }
285
286 void
287 interface_write_resolv_conf(void)
288 {
289         struct interface *iface;
290         struct dns_server *s;
291         struct dns_search_domain *d;
292         char *path = alloca(strlen(resolv_conf) + 5);
293         const char *str;
294         char buf[32];
295         FILE *f;
296
297         sprintf(path, "%s.tmp", resolv_conf);
298         unlink(path);
299         f = fopen(path, "w");
300         if (!f) {
301                 D(INTERFACE, "Failed to open %s for writing\n", path);
302                 return;
303         }
304
305         vlist_for_each_element(&interfaces, iface, node) {
306                 if (iface->state != IFS_UP)
307                         continue;
308
309                 if (list_empty(&iface->proto_ip.dns_search) &&
310                     list_empty(&iface->proto_ip.dns_servers))
311                         continue;
312
313                 fprintf(f, "# Interface %s\n", iface->name);
314                 list_for_each_entry(s, &iface->proto_ip.dns_servers, list) {
315                         str = inet_ntop(s->af, &s->addr, buf, sizeof(buf));
316                         if (!str)
317                                 continue;
318
319                         fprintf(f, "nameserver %s\n", str);
320                 }
321
322                 list_for_each_entry(d, &iface->proto_ip.dns_search, list) {
323                         fprintf(f, "search %s\n", d->name);
324                 }
325         }
326         fclose(f);
327         if (rename(path, resolv_conf) < 0) {
328                 D(INTERFACE, "Failed to replace %s\n", resolv_conf);
329                 unlink(path);
330         }
331 }
332
333 void interface_ip_set_enabled(struct interface_ip_settings *ip, bool enabled)
334 {
335         struct device_addr *addr;
336         struct device_route *route;
337         struct device *dev;
338
339         ip->enabled = enabled;
340         dev = ip->iface->l3_dev->dev;
341         if (!dev)
342                 return;
343
344         vlist_for_each_element(&ip->addr, addr, node) {
345                 if (addr->enabled == enabled)
346                         continue;
347
348                 if (enabled)
349                         system_add_address(dev, addr);
350                 else
351                         system_del_address(dev, addr);
352                 addr->enabled = enabled;
353         }
354
355         vlist_for_each_element(&ip->route, route, node) {
356                 if (route->enabled == enabled)
357                         continue;
358
359                 if (enabled)
360                         system_add_route(dev, route);
361                 else
362                         system_del_route(dev, route);
363                 route->enabled = enabled;
364         }
365 }
366
367 void
368 interface_ip_update_start(struct interface_ip_settings *ip)
369 {
370         interface_clear_dns_servers(ip);
371         interface_clear_dns_search(ip);
372         vlist_update(&ip->route);
373         vlist_update(&ip->addr);
374 }
375
376 void
377 interface_ip_update_complete(struct interface_ip_settings *ip)
378 {
379         vlist_flush(&ip->route);
380         vlist_flush(&ip->addr);
381 }
382
383 void
384 interface_ip_flush(struct interface_ip_settings *ip)
385 {
386         interface_clear_dns_servers(ip);
387         interface_clear_dns_search(ip);
388         vlist_flush_all(&ip->route);
389         vlist_flush_all(&ip->addr);
390 }
391
392 void
393 interface_ip_init(struct interface_ip_settings *ip, struct interface *iface)
394 {
395         ip->iface = iface;
396         ip->enabled = true;
397         INIT_LIST_HEAD(&ip->dns_search);
398         INIT_LIST_HEAD(&ip->dns_servers);
399         vlist_init(&ip->route, route_cmp, interface_update_proto_route,
400                    struct device_route, node, mask);
401         vlist_init(&ip->addr, addr_cmp, interface_update_proto_addr,
402                    struct device_addr, node, mask);
403 }