X-Git-Url: https://git.librecmc.org/?a=blobdiff_plain;f=src%2Futil%2Fservice.c;h=4fd16f93d8386b1624f80e763167c8b1c642ee9b;hb=a12b8c2c4cbf952c8c305cde193bb25c13a0912b;hp=2dc7dd5763b7057fb6f948207e368950b42f3a87;hpb=ee10b40c55c154400bbefd13175bd8b280cb7798;p=oweals%2Fgnunet.git diff --git a/src/util/service.c b/src/util/service.c index 2dc7dd576..4fd16f93d 100644 --- a/src/util/service.c +++ b/src/util/service.c @@ -14,6 +14,8 @@ You should have received a copy of the GNU Affero General Public License along with this program. If not, see . + + SPDX-License-Identifier: AGPL3.0-or-later */ /** @@ -76,6 +78,38 @@ struct ServiceListenContext }; +/** + * Reasons why we might be suspended. + */ +enum SuspendReason +{ + /** + * We are running normally. + */ + SUSPEND_STATE_NONE = 0, + + /** + * Application requested it. + */ + SUSPEND_STATE_APP = 1, + + /** + * OS ran out of file descriptors. + */ + SUSPEND_STATE_EMFILE = 2, + + /** + * Both reasons, APP and EMFILE apply. + */ + SUSPEND_STATE_APP_AND_EMFILE = 3, + + /** + * Suspension because service was permanently shutdown. + */ + SUSPEND_STATE_SHUTDOWN = 4 +}; + + /** * Handle to a service. */ @@ -180,10 +214,9 @@ struct GNUNET_SERVICE_Handle int match_gid; /** - * Set to #GNUNET_YES if we got a shutdown signal and terminate - * the service if #have_non_monitor_clients() returns #GNUNET_YES. + * Are we suspended, and if so, why? */ - int got_shutdown; + enum SuspendReason suspend_state; /** * Our options. @@ -327,9 +360,9 @@ struct GNUNET_SERVICE_Client static int have_non_monitor_clients (struct GNUNET_SERVICE_Handle *sh) { - struct GNUNET_SERVICE_Client *client; - - for (client = sh->clients_head;NULL != client; client = client->next) + for (struct GNUNET_SERVICE_Client *client = sh->clients_head; + NULL != client; + client = client->next) { if (client->is_monitor) continue; @@ -339,6 +372,32 @@ have_non_monitor_clients (struct GNUNET_SERVICE_Handle *sh) } +/** + * Suspend accepting connections from the listen socket temporarily. + * Resume activity using #do_resume. + * + * @param sh service to stop accepting connections. + * @param sr reason for suspending accepting connections + */ +static void +do_suspend (struct GNUNET_SERVICE_Handle *sh, + enum SuspendReason sr) +{ + struct ServiceListenContext *slc; + + GNUNET_assert (0 == (sh->suspend_state & sr)); + sh->suspend_state |= sr; + for (slc = sh->slc_head; NULL != slc; slc = slc->next) + { + if (NULL != slc->listen_task) + { + GNUNET_SCHEDULER_cancel (slc->listen_task); + slc->listen_task = NULL; + } + } +} + + /** * Shutdown task triggered when a service should be terminated. * This considers active clients and the service options to see @@ -363,8 +422,9 @@ service_shutdown (void *cls) GNUNET_assert (0); break; case GNUNET_SERVICE_OPTION_SOFT_SHUTDOWN: - sh->got_shutdown = GNUNET_YES; - GNUNET_SERVICE_suspend (sh); + if (0 == (sh->suspend_state & SUSPEND_STATE_SHUTDOWN)) + do_suspend (sh, + SUSPEND_STATE_SHUTDOWN); if (GNUNET_NO == have_non_monitor_clients (sh)) GNUNET_SERVICE_shutdown (sh); break; @@ -373,2041 +433,2042 @@ service_shutdown (void *cls) /** - * First task run by any service. Initializes our shutdown task, - * starts the listening operation on our listen sockets and launches - * the custom logic of the application service. + * Check if the given IP address is in the list of IP addresses. * - * @param cls our `struct GNUNET_SERVICE_Handle` + * @param list a list of networks + * @param add the IP to check (in network byte order) + * @return #GNUNET_NO if the IP is not in the list, #GNUNET_YES if it it is */ -static void -service_main (void *cls) +static int +check_ipv4_listed (const struct GNUNET_STRINGS_IPv4NetworkPolicy *list, + const struct in_addr *add) { - struct GNUNET_SERVICE_Handle *sh = cls; - - if (GNUNET_SERVICE_OPTION_MANUAL_SHUTDOWN != sh->options) - GNUNET_SCHEDULER_add_shutdown (&service_shutdown, - sh); - GNUNET_SERVICE_resume (sh); + unsigned int i; - if (-1 != sh->ready_confirm_fd) + if (NULL == list) + return GNUNET_NO; + i = 0; + while ( (0 != list[i].network.s_addr) || + (0 != list[i].netmask.s_addr) ) { - GNUNET_break (1 == WRITE (sh->ready_confirm_fd, ".", 1)); - GNUNET_break (0 == CLOSE (sh->ready_confirm_fd)); - sh->ready_confirm_fd = -1; + if ((add->s_addr & list[i].netmask.s_addr) == + (list[i].network.s_addr & list[i].netmask.s_addr)) + return GNUNET_YES; + i++; } - - if (NULL != sh->service_init_cb) - sh->service_init_cb (sh->cb_cls, - sh->cfg, - sh); + return GNUNET_NO; } /** - * Parse an IPv4 access control list. + * Check if the given IP address is in the list of IP addresses. * - * @param ret location where to write the ACL (set) - * @param sh service context to use to get the configuration - * @param option name of the ACL option to parse - * @return #GNUNET_SYSERR on parse error, #GNUNET_OK on success (including - * no ACL configured) + * @param list a list of networks + * @param ip the IP to check (in network byte order) + * @return #GNUNET_NO if the IP is not in the list, #GNUNET_YES if it it is */ static int -process_acl4 (struct GNUNET_STRINGS_IPv4NetworkPolicy **ret, - struct GNUNET_SERVICE_Handle *sh, - const char *option) +check_ipv6_listed (const struct GNUNET_STRINGS_IPv6NetworkPolicy *list, + const struct in6_addr *ip) { - char *opt; + unsigned int i; + unsigned int j; - if (! GNUNET_CONFIGURATION_have_value (sh->cfg, - sh->service_name, - option)) - { - *ret = NULL; - return GNUNET_OK; - } - GNUNET_break (GNUNET_OK == - GNUNET_CONFIGURATION_get_value_string (sh->cfg, - sh->service_name, - option, - &opt)); - if (NULL == (*ret = GNUNET_STRINGS_parse_ipv4_policy (opt))) + if (NULL == list) + return GNUNET_NO; + i = 0; +NEXT: + while (0 != GNUNET_is_zero (&list[i].network)) { - LOG (GNUNET_ERROR_TYPE_WARNING, - _("Could not parse IPv4 network specification `%s' for `%s:%s'\n"), - opt, - sh->service_name, - option); - GNUNET_free (opt); - return GNUNET_SYSERR; + for (j = 0; j < sizeof (struct in6_addr) / sizeof (int); j++) + if (((((int *) ip)[j] & ((int *) &list[i].netmask)[j])) != + (((int *) &list[i].network)[j] & ((int *) &list[i].netmask)[j])) + { + i++; + goto NEXT; + } + return GNUNET_YES; } - GNUNET_free (opt); - return GNUNET_OK; + return GNUNET_NO; } /** - * Parse an IPv6 access control list. + * Task run when we are ready to transmit data to the + * client. * - * @param ret location where to write the ACL (set) - * @param sh service context to use to get the configuration - * @param option name of the ACL option to parse - * @return #GNUNET_SYSERR on parse error, #GNUNET_OK on success (including - * no ACL configured) + * @param cls the `struct GNUNET_SERVICE_Client *` to send to */ -static int -process_acl6 (struct GNUNET_STRINGS_IPv6NetworkPolicy **ret, - struct GNUNET_SERVICE_Handle *sh, - const char *option) +static void +do_send (void *cls) { - char *opt; + struct GNUNET_SERVICE_Client *client = cls; + ssize_t ret; + size_t left; + const char *buf; - if (! GNUNET_CONFIGURATION_have_value (sh->cfg, - sh->service_name, - option)) + LOG (GNUNET_ERROR_TYPE_DEBUG, + "service: sending message with type %u\n", + ntohs(client->msg->type)); + + + client->send_task = NULL; + buf = (const char *) client->msg; + left = ntohs (client->msg->size) - client->msg_pos; + ret = GNUNET_NETWORK_socket_send (client->sock, + &buf[client->msg_pos], + left); + GNUNET_assert (ret <= (ssize_t) left); + if (0 == ret) { - *ret = NULL; - return GNUNET_OK; + LOG (GNUNET_ERROR_TYPE_DEBUG, + "no data send"); + GNUNET_MQ_inject_error (client->mq, + GNUNET_MQ_ERROR_WRITE); + return; } - GNUNET_break (GNUNET_OK == - GNUNET_CONFIGURATION_get_value_string (sh->cfg, - sh->service_name, - option, - &opt)); - if (NULL == (*ret = GNUNET_STRINGS_parse_ipv6_policy (opt))) + if (-1 == ret) { - LOG (GNUNET_ERROR_TYPE_WARNING, - _("Could not parse IPv6 network specification `%s' for `%s:%s'\n"), - opt, - sh->service_name, - option); - GNUNET_free (opt); - return GNUNET_SYSERR; + if ( (EAGAIN == errno) || + (EINTR == errno) ) + { + /* ignore */ + ret = 0; + } + else + { + if (EPIPE != errno) + GNUNET_log_strerror (GNUNET_ERROR_TYPE_WARNING, + "send"); + LOG (GNUNET_ERROR_TYPE_DEBUG, + "socket send returned with error code %i", + errno); + GNUNET_MQ_inject_error (client->mq, + GNUNET_MQ_ERROR_WRITE); + return; + } } - GNUNET_free (opt); - return GNUNET_OK; + if (0 == client->msg_pos) + { + GNUNET_MQ_impl_send_in_flight (client->mq); + } + client->msg_pos += ret; + if (left > (size_t) ret) + { + GNUNET_assert (NULL == client->drop_task); + client->send_task + = GNUNET_SCHEDULER_add_write_net (GNUNET_TIME_UNIT_FOREVER_REL, + client->sock, + &do_send, + client); + return; + } + GNUNET_MQ_impl_send_continue (client->mq); } /** - * Add the given UNIX domain path as an address to the - * list (as the first entry). + * Signature of functions implementing the sending functionality of a + * message queue. * - * @param saddrs array to update - * @param saddrlens where to store the address length - * @param unixpath path to add - * @param abstract #GNUNET_YES to add an abstract UNIX domain socket. This - * parameter is ignore on systems other than LINUX + * @param mq the message queue + * @param msg the message to send + * @param impl_state our `struct GNUNET_SERVICE_Client *` */ static void -add_unixpath (struct sockaddr **saddrs, - socklen_t *saddrlens, - const char *unixpath, - int abstract) +service_mq_send (struct GNUNET_MQ_Handle *mq, + const struct GNUNET_MessageHeader *msg, + void *impl_state) { -#ifdef AF_UNIX - struct sockaddr_un *un; - - un = GNUNET_new (struct sockaddr_un); - un->sun_family = AF_UNIX; - strncpy (un->sun_path, - unixpath, - sizeof (un->sun_path) - 1); -#ifdef LINUX - if (GNUNET_YES == abstract) - un->sun_path[0] = '\0'; -#endif -#if HAVE_SOCKADDR_UN_SUN_LEN - un->sun_len = (u_char) sizeof (struct sockaddr_un); -#endif - *saddrs = (struct sockaddr *) un; - *saddrlens = sizeof (struct sockaddr_un); -#else - /* this function should never be called - * unless AF_UNIX is defined! */ - GNUNET_assert (0); -#endif -} - + struct GNUNET_SERVICE_Client *client = impl_state; + + (void) mq; + if (NULL != client->drop_task) + return; /* we're going down right now, do not try to send */ + GNUNET_assert (NULL == client->send_task); + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Sending message of type %u and size %u to client\n", + ntohs (msg->type), + ntohs (msg->size)); + client->msg = msg; + client->msg_pos = 0; + client->send_task + = GNUNET_SCHEDULER_add_write_net (GNUNET_TIME_UNIT_FOREVER_REL, + client->sock, + &do_send, + client); +} + /** - * Get the list of addresses that a server for the given service - * should bind to. + * Implementation function that cancels the currently sent message. * - * @param service_name name of the service - * @param cfg configuration (which specifies the addresses) - * @param addrs set (call by reference) to an array of pointers to the - * addresses the server should bind to and listen on; the - * array will be NULL-terminated (on success) - * @param addr_lens set (call by reference) to an array of the lengths - * of the respective `struct sockaddr` struct in the @a addrs - * array (on success) - * @return number of addresses found on success, - * #GNUNET_SYSERR if the configuration - * did not specify reasonable finding information or - * if it specified a hostname that could not be resolved; - * #GNUNET_NO if the number of addresses configured is - * zero (in this case, `*addrs` and `*addr_lens` will be - * set to NULL). + * @param mq message queue + * @param impl_state state specific to the implementation */ -static int -get_server_addresses (const char *service_name, - const struct GNUNET_CONFIGURATION_Handle *cfg, - struct sockaddr ***addrs, - socklen_t **addr_lens) +static void +service_mq_cancel (struct GNUNET_MQ_Handle *mq, + void *impl_state) { - int disablev6; - struct GNUNET_NETWORK_Handle *desc; - unsigned long long port; - char *unixpath; - struct addrinfo hints; - struct addrinfo *res; - struct addrinfo *pos; - struct addrinfo *next; - unsigned int i; - int resi; - int ret; - int abstract; - struct sockaddr **saddrs; - socklen_t *saddrlens; - char *hostname; + struct GNUNET_SERVICE_Client *client = impl_state; - *addrs = NULL; - *addr_lens = NULL; - desc = NULL; - if (GNUNET_CONFIGURATION_have_value (cfg, - service_name, - "DISABLEV6")) - { - if (GNUNET_SYSERR == - (disablev6 = - GNUNET_CONFIGURATION_get_value_yesno (cfg, - service_name, - "DISABLEV6"))) - return GNUNET_SYSERR; - } - else - disablev6 = GNUNET_NO; + (void) mq; + GNUNET_assert (0 == client->msg_pos); + client->msg = NULL; + GNUNET_SCHEDULER_cancel (client->send_task); + client->send_task = NULL; +} + + +/** + * Generic error handler, called with the appropriate + * error code and the same closure specified at the creation of + * the message queue. + * Not every message queue implementation supports an error handler. + * + * @param cls closure with our `struct GNUNET_SERVICE_Client` + * @param error error code + */ +static void +service_mq_error_handler (void *cls, + enum GNUNET_MQ_Error error) +{ + struct GNUNET_SERVICE_Client *client = cls; + struct GNUNET_SERVICE_Handle *sh = client->sh; - if (! disablev6) + if ( (GNUNET_MQ_ERROR_NO_MATCH == error) && + (GNUNET_NO == sh->require_found) ) { - /* probe IPv6 support */ - desc = GNUNET_NETWORK_socket_create (PF_INET6, - SOCK_STREAM, - 0); - if (NULL == desc) - { - if ( (ENOBUFS == errno) || - (ENOMEM == errno) || - (ENFILE == errno) || - (EACCES == errno) ) - { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "socket"); - return GNUNET_SYSERR; - } - LOG (GNUNET_ERROR_TYPE_INFO, - _("Disabling IPv6 support for service `%s', failed to create IPv6 socket: %s\n"), - service_name, - STRERROR (errno)); - disablev6 = GNUNET_YES; - } - else - { - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (desc)); - desc = NULL; - } + GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, + "No handler for message of type %u found\n", + (unsigned int) client->warn_type); + GNUNET_SERVICE_client_continue (client); + return; /* ignore error */ } + GNUNET_SERVICE_client_drop (client); +} - port = 0; - if (GNUNET_CONFIGURATION_have_value (cfg, - service_name, - "PORT")) + +/** + * Task run to warn about missing calls to #GNUNET_SERVICE_client_continue(). + * + * @param cls our `struct GNUNET_SERVICE_Client *` to process more requests from + */ +static void +warn_no_client_continue (void *cls) +{ + struct GNUNET_SERVICE_Client *client = cls; + + GNUNET_break (0 != client->warn_type); /* type should never be 0 here, as we don't use 0 */ + client->warn_task + = GNUNET_SCHEDULER_add_delayed (GNUNET_TIME_UNIT_MINUTES, + &warn_no_client_continue, + client); + LOG (GNUNET_ERROR_TYPE_WARNING, + _("Processing code for message of type %u did not call `GNUNET_SERVICE_client_continue' after %s\n"), + (unsigned int) client->warn_type, + GNUNET_STRINGS_relative_time_to_string (GNUNET_TIME_absolute_get_duration (client->warn_start), + GNUNET_YES)); +} + + +/** + * Functions with this signature are called whenever a + * complete message is received by the tokenizer for a client. + * + * Do not call #GNUNET_MST_destroy() from within + * the scope of this callback. + * + * @param cls closure with the `struct GNUNET_SERVICE_Client *` + * @param message the actual message + * @return #GNUNET_OK on success, #GNUNET_SYSERR if the client was dropped + */ +static int +service_client_mst_cb (void *cls, + const struct GNUNET_MessageHeader *message) +{ + struct GNUNET_SERVICE_Client *client = cls; + + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Received message of type %u and size %u from client\n", + ntohs (message->type), + ntohs (message->size)); + GNUNET_assert (GNUNET_NO == client->needs_continue); + client->needs_continue = GNUNET_YES; + client->warn_type = ntohs (message->type); + client->warn_start = GNUNET_TIME_absolute_get (); + GNUNET_assert (NULL == client->warn_task); + client->warn_task + = GNUNET_SCHEDULER_add_delayed (GNUNET_TIME_UNIT_MINUTES, + &warn_no_client_continue, + client); + GNUNET_MQ_inject_message (client->mq, + message); + if (NULL != client->drop_task) + return GNUNET_SYSERR; + return GNUNET_OK; +} + + +/** + * A client sent us data. Receive and process it. If we are done, + * reschedule this task. + * + * @param cls the `struct GNUNET_SERVICE_Client` that sent us data. + */ +static void +service_client_recv (void *cls) +{ + struct GNUNET_SERVICE_Client *client = cls; + int ret; + + client->recv_task = NULL; + ret = GNUNET_MST_read (client->mst, + client->sock, + GNUNET_NO, + GNUNET_YES); + if (GNUNET_SYSERR == ret) { - if (GNUNET_OK != - GNUNET_CONFIGURATION_get_value_number (cfg, - service_name, - "PORT", - &port)) - { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Require valid port number for service `%s' in configuration!\n"), - service_name); - } - if (port > 65535) + /* client closed connection (or IO error) */ + if (NULL == client->drop_task) { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Require valid port number for service `%s' in configuration!\n"), - service_name); - return GNUNET_SYSERR; + GNUNET_assert (GNUNET_NO == client->needs_continue); + GNUNET_SERVICE_client_drop (client); } + return; } + if (GNUNET_NO == ret) + return; /* more messages in buffer, wait for application + to be done processing */ + GNUNET_assert (GNUNET_OK == ret); + if (GNUNET_YES == client->needs_continue) + return; + if (NULL != client->recv_task) + return; + /* MST needs more data, re-schedule read job */ + client->recv_task + = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, + client->sock, + &service_client_recv, + client); +} - if (GNUNET_CONFIGURATION_have_value (cfg, - service_name, - "BINDTO")) - { - GNUNET_break (GNUNET_OK == - GNUNET_CONFIGURATION_get_value_string (cfg, - service_name, - "BINDTO", - &hostname)); - } - else - hostname = NULL; - unixpath = NULL; - abstract = GNUNET_NO; -#ifdef AF_UNIX - if ((GNUNET_YES == - GNUNET_CONFIGURATION_have_value (cfg, - service_name, - "UNIXPATH")) && - (GNUNET_OK == - GNUNET_CONFIGURATION_get_value_filename (cfg, - service_name, - "UNIXPATH", - &unixpath)) && - (0 < strlen (unixpath))) +/** + * We have successfully accepted a connection from a client. Now + * setup the client (with the scheduler) and tell the application. + * + * @param sh service that accepted the client + * @param sock socket associated with the client + */ +static void +start_client (struct GNUNET_SERVICE_Handle *sh, + struct GNUNET_NETWORK_Handle *csock) +{ + struct GNUNET_SERVICE_Client *client; + + client = GNUNET_new (struct GNUNET_SERVICE_Client); + GNUNET_CONTAINER_DLL_insert (sh->clients_head, + sh->clients_tail, + client); + client->sh = sh; + client->sock = csock; + client->mq = GNUNET_MQ_queue_for_callbacks (&service_mq_send, + NULL, + &service_mq_cancel, + client, + sh->handlers, + &service_mq_error_handler, + client); + client->mst = GNUNET_MST_create (&service_client_mst_cb, + client); + if (NULL != sh->connect_cb) + client->user_context = sh->connect_cb (sh->cb_cls, + client, + client->mq); + GNUNET_MQ_set_handlers_closure (client->mq, + client->user_context); + client->recv_task + = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, + client->sock, + &service_client_recv, + client); +} + + +/** + * We have a client. Accept the incoming socket(s) (and reschedule + * the listen task). + * + * @param cls the `struct ServiceListenContext` of the ready listen socket + */ +static void +accept_client (void *cls) +{ + struct ServiceListenContext *slc = cls; + struct GNUNET_SERVICE_Handle *sh = slc->sh; + + slc->listen_task = NULL; + while (1) { - /* probe UNIX support */ - struct sockaddr_un s_un; + struct GNUNET_NETWORK_Handle *sock; + const struct sockaddr_in *v4; + const struct sockaddr_in6 *v6; + struct sockaddr_storage sa; + socklen_t addrlen; + int ok; - if (strlen (unixpath) >= sizeof (s_un.sun_path)) + addrlen = sizeof (sa); + sock = GNUNET_NETWORK_socket_accept (slc->listen_socket, + (struct sockaddr *) &sa, + &addrlen); + if (NULL == sock) { - LOG (GNUNET_ERROR_TYPE_WARNING, - _("UNIXPATH `%s' too long, maximum length is %llu\n"), - unixpath, - (unsigned long long) sizeof (s_un.sun_path)); - unixpath = GNUNET_NETWORK_shorten_unixpath (unixpath); - LOG (GNUNET_ERROR_TYPE_INFO, - _("Using `%s' instead\n"), - unixpath); + if (EMFILE == errno) + do_suspend (sh, + SUSPEND_STATE_EMFILE); + else if (EAGAIN != errno) + GNUNET_log_strerror (GNUNET_ERROR_TYPE_WARNING, + "accept"); + break; } -#ifdef LINUX - abstract = GNUNET_CONFIGURATION_get_value_yesno (cfg, - "TESTING", - "USE_ABSTRACT_SOCKETS"); - if (GNUNET_SYSERR == abstract) - abstract = GNUNET_NO; -#endif - if ( (GNUNET_YES != abstract) && - (GNUNET_OK != - GNUNET_DISK_directory_create_for_file (unixpath)) ) - GNUNET_log_strerror_file (GNUNET_ERROR_TYPE_ERROR, - "mkdir", - unixpath); - } - if (NULL != unixpath) - { - desc = GNUNET_NETWORK_socket_create (AF_UNIX, - SOCK_STREAM, - 0); - if (NULL == desc) + switch (sa.ss_family) { - if ((ENOBUFS == errno) || - (ENOMEM == errno) || - (ENFILE == errno) || - (EACCES == errno)) - { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "socket"); - GNUNET_free_non_null (hostname); - GNUNET_free (unixpath); - return GNUNET_SYSERR; - } - LOG (GNUNET_ERROR_TYPE_INFO, - _("Disabling UNIX domain socket support for service `%s', failed to create UNIX domain socket: %s\n"), - service_name, - STRERROR (errno)); - GNUNET_free (unixpath); - unixpath = NULL; + case AF_INET: + GNUNET_assert (addrlen == sizeof (struct sockaddr_in)); + v4 = (const struct sockaddr_in *) &sa; + ok = ( ( (NULL == sh->v4_allowed) || + (check_ipv4_listed (sh->v4_allowed, + &v4->sin_addr))) && + ( (NULL == sh->v4_denied) || + (! check_ipv4_listed (sh->v4_denied, + &v4->sin_addr)) ) ); + break; + case AF_INET6: + GNUNET_assert (addrlen == sizeof (struct sockaddr_in6)); + v6 = (const struct sockaddr_in6 *) &sa; + ok = ( ( (NULL == sh->v6_allowed) || + (check_ipv6_listed (sh->v6_allowed, + &v6->sin6_addr))) && + ( (NULL == sh->v6_denied) || + (! check_ipv6_listed (sh->v6_denied, + &v6->sin6_addr)) ) ); + break; +#ifndef WINDOWS + case AF_UNIX: + ok = GNUNET_OK; /* controlled using file-system ACL now */ + break; +#endif + default: + LOG (GNUNET_ERROR_TYPE_WARNING, + _("Unknown address family %d\n"), + sa.ss_family); + return; } - else + if (! ok) { + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Service rejected incoming connection from %s due to policy.\n", + GNUNET_a2s ((const struct sockaddr *) &sa, + addrlen)); GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (desc)); - desc = NULL; + GNUNET_NETWORK_socket_close (sock)); + continue; } + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Service accepted incoming connection from %s.\n", + GNUNET_a2s ((const struct sockaddr *) &sa, + addrlen)); + start_client (slc->sh, + sock); } -#endif + if (0 != sh->suspend_state) + return; + slc->listen_task + = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, + slc->listen_socket, + &accept_client, + slc); +} - if ((0 == port) && (NULL == unixpath)) + +/** + * Resume accepting connections from the listen socket. + * + * @param sh service to resume accepting connections. + * @param sr reason that is no longer causing the suspension, + * or #SUSPEND_STATE_NONE on first startup + */ +static void +do_resume (struct GNUNET_SERVICE_Handle *sh, + enum SuspendReason sr) +{ + struct ServiceListenContext *slc; + + GNUNET_assert ( (SUSPEND_STATE_NONE == sr) || + (0 != (sh->suspend_state & sr)) ); + sh->suspend_state -= sr; + if (SUSPEND_STATE_NONE != sh->suspend_state) + return; + for (slc = sh->slc_head; NULL != slc; slc = slc->next) { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Have neither PORT nor UNIXPATH for service `%s', but one is required\n"), - service_name); - GNUNET_free_non_null (hostname); - return GNUNET_SYSERR; + GNUNET_assert (NULL == slc->listen_task); + slc->listen_task + = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, + slc->listen_socket, + &accept_client, + slc); } - if (0 == port) +} + + +/** + * First task run by any service. Initializes our shutdown task, + * starts the listening operation on our listen sockets and launches + * the custom logic of the application service. + * + * @param cls our `struct GNUNET_SERVICE_Handle` + */ +static void +service_main (void *cls) +{ + struct GNUNET_SERVICE_Handle *sh = cls; + + if (GNUNET_SERVICE_OPTION_MANUAL_SHUTDOWN != sh->options) + GNUNET_SCHEDULER_add_shutdown (&service_shutdown, + sh); + do_resume (sh, + SUSPEND_STATE_NONE); + + if (-1 != sh->ready_confirm_fd) { - saddrs = GNUNET_new_array (2, - struct sockaddr *); - saddrlens = GNUNET_new_array (2, - socklen_t); - add_unixpath (saddrs, - saddrlens, - unixpath, - abstract); - GNUNET_free_non_null (unixpath); - GNUNET_free_non_null (hostname); - *addrs = saddrs; - *addr_lens = saddrlens; - return 1; + GNUNET_break (1 == WRITE (sh->ready_confirm_fd, ".", 1)); + GNUNET_break (0 == CLOSE (sh->ready_confirm_fd)); + sh->ready_confirm_fd = -1; } - if (NULL != hostname) - { - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Resolving `%s' since that is where `%s' will bind to.\n", - hostname, - service_name); - memset (&hints, - 0, - sizeof (struct addrinfo)); - if (disablev6) - hints.ai_family = AF_INET; - hints.ai_protocol = IPPROTO_TCP; - if ((0 != (ret = getaddrinfo (hostname, - NULL, - &hints, - &res))) || - (NULL == res)) - { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Failed to resolve `%s': %s\n"), - hostname, - gai_strerror (ret)); - GNUNET_free (hostname); - GNUNET_free_non_null (unixpath); - return GNUNET_SYSERR; - } - next = res; - i = 0; - while (NULL != (pos = next)) - { - next = pos->ai_next; - if ( (disablev6) && - (pos->ai_family == AF_INET6) ) - continue; - i++; - } - if (0 == i) - { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Failed to find %saddress for `%s'.\n"), - disablev6 ? "IPv4 " : "", - hostname); - freeaddrinfo (res); - GNUNET_free (hostname); - GNUNET_free_non_null (unixpath); - return GNUNET_SYSERR; - } - resi = i; - if (NULL != unixpath) - resi++; - saddrs = GNUNET_new_array (resi + 1, - struct sockaddr *); - saddrlens = GNUNET_new_array (resi + 1, - socklen_t); - i = 0; - if (NULL != unixpath) - { - add_unixpath (saddrs, - saddrlens, - unixpath, - abstract); - i++; - } - next = res; - while (NULL != (pos = next)) - { - next = pos->ai_next; - if ( (disablev6) && - (AF_INET6 == pos->ai_family) ) - continue; - if ( (IPPROTO_TCP != pos->ai_protocol) && - (0 != pos->ai_protocol) ) - continue; /* not TCP */ - if ( (SOCK_STREAM != pos->ai_socktype) && - (0 != pos->ai_socktype) ) - continue; /* huh? */ - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Service `%s' will bind to `%s'\n", - service_name, - GNUNET_a2s (pos->ai_addr, - pos->ai_addrlen)); - if (AF_INET == pos->ai_family) - { - GNUNET_assert (sizeof (struct sockaddr_in) == pos->ai_addrlen); - saddrlens[i] = pos->ai_addrlen; - saddrs[i] = GNUNET_malloc (saddrlens[i]); - GNUNET_memcpy (saddrs[i], - pos->ai_addr, - saddrlens[i]); - ((struct sockaddr_in *) saddrs[i])->sin_port = htons (port); - } - else - { - GNUNET_assert (AF_INET6 == pos->ai_family); - GNUNET_assert (sizeof (struct sockaddr_in6) == pos->ai_addrlen); - saddrlens[i] = pos->ai_addrlen; - saddrs[i] = GNUNET_malloc (saddrlens[i]); - GNUNET_memcpy (saddrs[i], - pos->ai_addr, - saddrlens[i]); - ((struct sockaddr_in6 *) saddrs[i])->sin6_port = htons (port); - } - i++; - } - GNUNET_free (hostname); - freeaddrinfo (res); - resi = i; + if (NULL != sh->service_init_cb) + sh->service_init_cb (sh->cb_cls, + sh->cfg, + sh); +} + + +/** + * Parse an IPv4 access control list. + * + * @param ret location where to write the ACL (set) + * @param sh service context to use to get the configuration + * @param option name of the ACL option to parse + * @return #GNUNET_SYSERR on parse error, #GNUNET_OK on success (including + * no ACL configured) + */ +static int +process_acl4 (struct GNUNET_STRINGS_IPv4NetworkPolicy **ret, + struct GNUNET_SERVICE_Handle *sh, + const char *option) +{ + char *opt; + + if (! GNUNET_CONFIGURATION_have_value (sh->cfg, + sh->service_name, + option)) + { + *ret = NULL; + return GNUNET_OK; } - else + GNUNET_break (GNUNET_OK == + GNUNET_CONFIGURATION_get_value_string (sh->cfg, + sh->service_name, + option, + &opt)); + if (NULL == (*ret = GNUNET_STRINGS_parse_ipv4_policy (opt))) { - /* will bind against everything, just set port */ - if (disablev6) - { - /* V4-only */ - resi = 1; - if (NULL != unixpath) - resi++; - i = 0; - saddrs = GNUNET_new_array (resi + 1, - struct sockaddr *); - saddrlens = GNUNET_new_array (resi + 1, - socklen_t); - if (NULL != unixpath) - { - add_unixpath (saddrs, - saddrlens, - unixpath, - abstract); - i++; - } - saddrlens[i] = sizeof (struct sockaddr_in); - saddrs[i] = GNUNET_malloc (saddrlens[i]); -#if HAVE_SOCKADDR_IN_SIN_LEN - ((struct sockaddr_in *) saddrs[i])->sin_len = saddrlens[i]; -#endif - ((struct sockaddr_in *) saddrs[i])->sin_family = AF_INET; - ((struct sockaddr_in *) saddrs[i])->sin_port = htons (port); - } - else - { - /* dual stack */ - resi = 2; - if (NULL != unixpath) - resi++; - saddrs = GNUNET_new_array (resi + 1, - struct sockaddr *); - saddrlens = GNUNET_new_array (resi + 1, - socklen_t); - i = 0; - if (NULL != unixpath) - { - add_unixpath (saddrs, - saddrlens, - unixpath, - abstract); - i++; - } - saddrlens[i] = sizeof (struct sockaddr_in6); - saddrs[i] = GNUNET_malloc (saddrlens[i]); -#if HAVE_SOCKADDR_IN_SIN_LEN - ((struct sockaddr_in6 *) saddrs[i])->sin6_len = saddrlens[0]; -#endif - ((struct sockaddr_in6 *) saddrs[i])->sin6_family = AF_INET6; - ((struct sockaddr_in6 *) saddrs[i])->sin6_port = htons (port); - i++; - saddrlens[i] = sizeof (struct sockaddr_in); - saddrs[i] = GNUNET_malloc (saddrlens[i]); -#if HAVE_SOCKADDR_IN_SIN_LEN - ((struct sockaddr_in *) saddrs[i])->sin_len = saddrlens[1]; -#endif - ((struct sockaddr_in *) saddrs[i])->sin_family = AF_INET; - ((struct sockaddr_in *) saddrs[i])->sin_port = htons (port); - } + LOG (GNUNET_ERROR_TYPE_WARNING, + _("Could not parse IPv4 network specification `%s' for `%s:%s'\n"), + opt, + sh->service_name, + option); + GNUNET_free (opt); + return GNUNET_SYSERR; } - GNUNET_free_non_null (unixpath); - *addrs = saddrs; - *addr_lens = saddrlens; - return resi; + GNUNET_free (opt); + return GNUNET_OK; } -#ifdef MINGW /** - * Read listen sockets from the parent process (ARM). + * Parse an IPv6 access control list. * - * @param sh service context to initialize - * @return NULL-terminated array of sockets on success, - * NULL if not ok (must bind yourself) + * @param ret location where to write the ACL (set) + * @param sh service context to use to get the configuration + * @param option name of the ACL option to parse + * @return #GNUNET_SYSERR on parse error, #GNUNET_OK on success (including + * no ACL configured) */ -static struct GNUNET_NETWORK_Handle ** -receive_sockets_from_parent (struct GNUNET_SERVICE_Handle *sh) +static int +process_acl6 (struct GNUNET_STRINGS_IPv6NetworkPolicy **ret, + struct GNUNET_SERVICE_Handle *sh, + const char *option) { - static struct GNUNET_NETWORK_Handle **lsocks; - const char *env_buf; - int fail; - uint64_t count; - uint64_t i; - HANDLE lsocks_pipe; + char *opt; - env_buf = getenv ("GNUNET_OS_READ_LSOCKS"); - if ( (NULL == env_buf) || - (strlen (env_buf) <= 0) ) - return NULL; - /* Using W32 API directly here, because this pipe will - * never be used outside of this function, and it's just too much of a bother - * to create a GNUnet API that boxes a HANDLE (the way it is done with socks) - */ - lsocks_pipe = (HANDLE) strtoul (env_buf, - NULL, - 10); - if ( (0 == lsocks_pipe) || - (INVALID_HANDLE_VALUE == lsocks_pipe)) - return NULL; - fail = 1; - do + if (! GNUNET_CONFIGURATION_have_value (sh->cfg, + sh->service_name, + option)) { - int ret; - int fail2; - DWORD rd; - - ret = ReadFile (lsocks_pipe, - &count, - sizeof (count), - &rd, - NULL); - if ( (0 == ret) || - (sizeof (count) != rd) || - (0 == count) ) - break; - lsocks = GNUNET_new_array (count + 1, - struct GNUNET_NETWORK_Handle *); - - fail2 = 1; - for (i = 0; i < count; i++) - { - WSAPROTOCOL_INFOA pi; - uint64_t size; - SOCKET s; - - ret = ReadFile (lsocks_pipe, - &size, - sizeof (size), - &rd, - NULL); - if ( (0 == ret) || - (sizeof (size) != rd) || - (sizeof (pi) != size) ) - break; - ret = ReadFile (lsocks_pipe, - &pi, - sizeof (pi), - &rd, - NULL); - if ( (0 == ret) || - (sizeof (pi) != rd)) - break; - s = WSASocketA (pi.iAddressFamily, - pi.iSocketType, - pi.iProtocol, - &pi, - 0, - WSA_FLAG_OVERLAPPED); - lsocks[i] = GNUNET_NETWORK_socket_box_native (s); - if (NULL == lsocks[i]) - break; - else if (i == count - 1) - fail2 = 0; - } - if (fail2) - break; - lsocks[count] = NULL; - fail = 0; + *ret = NULL; + return GNUNET_OK; } - while (fail); - CloseHandle (lsocks_pipe); - - if (fail) + GNUNET_break (GNUNET_OK == + GNUNET_CONFIGURATION_get_value_string (sh->cfg, + sh->service_name, + option, + &opt)); + if (NULL == (*ret = GNUNET_STRINGS_parse_ipv6_policy (opt))) { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Could not access a pre-bound socket, will try to bind myself\n")); - for (i = 0; (i < count) && (NULL != lsocks[i]); i++) - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (lsocks[i])); - GNUNET_free (lsocks); - return NULL; + LOG (GNUNET_ERROR_TYPE_WARNING, + _("Could not parse IPv6 network specification `%s' for `%s:%s'\n"), + opt, + sh->service_name, + option); + GNUNET_free (opt); + return GNUNET_SYSERR; } - return lsocks; + GNUNET_free (opt); + return GNUNET_OK; } -#endif /** - * Create and initialize a listen socket for the server. + * Add the given UNIX domain path as an address to the + * list (as the first entry). * - * @param server_addr address to listen on - * @param socklen length of @a server_addr - * @return NULL on error, otherwise the listen socket + * @param saddrs array to update + * @param saddrlens where to store the address length + * @param unixpath path to add + * @param abstract #GNUNET_YES to add an abstract UNIX domain socket. This + * parameter is ignore on systems other than LINUX */ -static struct GNUNET_NETWORK_Handle * -open_listen_socket (const struct sockaddr *server_addr, - socklen_t socklen) +static void +add_unixpath (struct sockaddr **saddrs, + socklen_t *saddrlens, + const char *unixpath, + int abstract) { - struct GNUNET_NETWORK_Handle *sock; - uint16_t port; - int eno; +#ifdef AF_UNIX + struct sockaddr_un *un; - switch (server_addr->sa_family) - { - case AF_INET: - port = ntohs (((const struct sockaddr_in *) server_addr)->sin_port); - break; - case AF_INET6: - port = ntohs (((const struct sockaddr_in6 *) server_addr)->sin6_port); - break; - case AF_UNIX: - port = 0; - break; - default: - GNUNET_break (0); - port = 0; - break; - } - sock = GNUNET_NETWORK_socket_create (server_addr->sa_family, - SOCK_STREAM, - 0); - if (NULL == sock) - { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "socket"); - errno = 0; - return NULL; - } - /* bind the socket */ - if (GNUNET_OK != GNUNET_NETWORK_socket_bind (sock, - server_addr, - socklen)) - { - eno = errno; - if (EADDRINUSE != errno) - { - /* we don't log 'EADDRINUSE' here since an IPv4 bind may - * fail if we already took the port on IPv6; if both IPv4 and - * IPv6 binds fail, then our caller will log using the - * errno preserved in 'eno' */ - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "bind"); - if (0 != port) - LOG (GNUNET_ERROR_TYPE_ERROR, - _("`%s' failed for port %d (%s).\n"), - "bind", - port, - (AF_INET == server_addr->sa_family) ? "IPv4" : "IPv6"); - eno = 0; - } - else - { - if (0 != port) - LOG (GNUNET_ERROR_TYPE_WARNING, - _("`%s' failed for port %d (%s): address already in use\n"), - "bind", port, - (AF_INET == server_addr->sa_family) ? "IPv4" : "IPv6"); - else if (AF_UNIX == server_addr->sa_family) - { - LOG (GNUNET_ERROR_TYPE_WARNING, - _("`%s' failed for `%s': address already in use\n"), - "bind", - GNUNET_a2s (server_addr, socklen)); - } - } - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (sock)); - errno = eno; - return NULL; - } - if (GNUNET_OK != GNUNET_NETWORK_socket_listen (sock, - 5)) - { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "listen"); - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (sock)); - errno = 0; - return NULL; - } - if (0 != port) - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Server starts to listen on port %u.\n", - port); - return sock; + un = GNUNET_new (struct sockaddr_un); + un->sun_family = AF_UNIX; + strncpy (un->sun_path, + unixpath, + sizeof (un->sun_path) - 1); +#ifdef LINUX + if (GNUNET_YES == abstract) + un->sun_path[0] = '\0'; +#endif +#if HAVE_SOCKADDR_UN_SUN_LEN + un->sun_len = (u_char) sizeof (struct sockaddr_un); +#endif + *saddrs = (struct sockaddr *) un; + *saddrlens = sizeof (struct sockaddr_un); +#else + /* this function should never be called + * unless AF_UNIX is defined! */ + GNUNET_assert (0); +#endif } /** - * Setup service handle - * - * Configuration may specify: - * - PORT (where to bind to for TCP) - * - UNIXPATH (where to bind to for UNIX domain sockets) - * - DISABLEV6 (disable support for IPv6, otherwise we use dual-stack) - * - BINDTO (hostname or IP address to bind to, otherwise we take everything) - * - ACCEPT_FROM (only allow connections from specified IPv4 subnets) - * - ACCEPT_FROM6 (only allow connections from specified IPv6 subnets) - * - REJECT_FROM (disallow allow connections from specified IPv4 subnets) - * - REJECT_FROM6 (disallow allow connections from specified IPv6 subnets) + * Get the list of addresses that a server for the given service + * should bind to. * - * @param sh service context to initialize - * @return #GNUNET_OK if configuration succeeded + * @param service_name name of the service + * @param cfg configuration (which specifies the addresses) + * @param addrs set (call by reference) to an array of pointers to the + * addresses the server should bind to and listen on; the + * array will be NULL-terminated (on success) + * @param addr_lens set (call by reference) to an array of the lengths + * of the respective `struct sockaddr` struct in the @a addrs + * array (on success) + * @return number of addresses found on success, + * #GNUNET_SYSERR if the configuration + * did not specify reasonable finding information or + * if it specified a hostname that could not be resolved; + * #GNUNET_NO if the number of addresses configured is + * zero (in this case, `*addrs` and `*addr_lens` will be + * set to NULL). */ static int -setup_service (struct GNUNET_SERVICE_Handle *sh) +get_server_addresses (const char *service_name, + const struct GNUNET_CONFIGURATION_Handle *cfg, + struct sockaddr ***addrs, + socklen_t **addr_lens) { - int tolerant; - struct GNUNET_NETWORK_Handle **lsocks; -#ifndef MINGW - const char *nfds; - unsigned int cnt; - int flags; - char dummy[2]; -#endif - - if (GNUNET_CONFIGURATION_have_value - (sh->cfg, - sh->service_name, - "TOLERANT")) - { - if (GNUNET_SYSERR == - (tolerant = - GNUNET_CONFIGURATION_get_value_yesno (sh->cfg, - sh->service_name, - "TOLERANT"))) + int disablev6; + struct GNUNET_NETWORK_Handle *desc; + unsigned long long port; + char *unixpath; + struct addrinfo hints; + struct addrinfo *res; + struct addrinfo *pos; + struct addrinfo *next; + unsigned int i; + int resi; + int ret; + int abstract; + struct sockaddr **saddrs; + socklen_t *saddrlens; + char *hostname; + + *addrs = NULL; + *addr_lens = NULL; + desc = NULL; + disablev6 = GNUNET_NO; + if ( (GNUNET_NO == + GNUNET_NETWORK_test_pf (PF_INET6)) || + (GNUNET_YES == + GNUNET_CONFIGURATION_get_value_yesno (cfg, + service_name, + "DISABLEV6") ) ) + disablev6 = GNUNET_YES; + + port = 0; + if (GNUNET_CONFIGURATION_have_value (cfg, + service_name, + "PORT")) + { + if (GNUNET_OK != + GNUNET_CONFIGURATION_get_value_number (cfg, + service_name, + "PORT", + &port)) { LOG (GNUNET_ERROR_TYPE_ERROR, - _("Specified value for `%s' of service `%s' is invalid\n"), - "TOLERANT", - sh->service_name); - return GNUNET_SYSERR; + _("Require valid port number for service `%s' in configuration!\n"), + service_name); } - } - else - tolerant = GNUNET_NO; - - lsocks = NULL; -#ifndef MINGW - errno = 0; - if ( (NULL != (nfds = getenv ("LISTEN_FDS"))) && - (1 == SSCANF (nfds, - "%u%1s", - &cnt, - dummy)) && - (cnt > 0) && - (cnt < FD_SETSIZE) && - (cnt + 4 < FD_SETSIZE) ) - { - lsocks = GNUNET_new_array (cnt + 1, - struct GNUNET_NETWORK_Handle *); - while (0 < cnt--) + if (port > 65535) { - flags = fcntl (3 + cnt, - F_GETFD); - if ( (flags < 0) || - (0 != (flags & FD_CLOEXEC)) || - (NULL == - (lsocks[cnt] = GNUNET_NETWORK_socket_box_native (3 + cnt)))) - { - LOG (GNUNET_ERROR_TYPE_ERROR, - _("Could not access pre-bound socket %u, will try to bind myself\n"), - (unsigned int) 3 + cnt); - cnt++; - while (NULL != lsocks[cnt]) - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (lsocks[cnt++])); - GNUNET_free (lsocks); - lsocks = NULL; - break; - } + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Require valid port number for service `%s' in configuration!\n"), + service_name); + return GNUNET_SYSERR; } - unsetenv ("LISTEN_FDS"); } -#else - if (NULL != getenv ("GNUNET_OS_READ_LSOCKS")) + + if (GNUNET_CONFIGURATION_have_value (cfg, + service_name, + "BINDTO")) { - lsocks = receive_sockets_from_parent (sh); - putenv ("GNUNET_OS_READ_LSOCKS="); + GNUNET_break (GNUNET_OK == + GNUNET_CONFIGURATION_get_value_string (cfg, + service_name, + "BINDTO", + &hostname)); } -#endif + else + hostname = NULL; - if (NULL != lsocks) + unixpath = NULL; + abstract = GNUNET_NO; +#ifdef AF_UNIX + if ((GNUNET_YES == + GNUNET_CONFIGURATION_have_value (cfg, + service_name, + "UNIXPATH")) && + (GNUNET_OK == + GNUNET_CONFIGURATION_get_value_filename (cfg, + service_name, + "UNIXPATH", + &unixpath)) && + (0 < strlen (unixpath))) { - /* listen only on inherited sockets if we have any */ - struct GNUNET_NETWORK_Handle **ls; + /* probe UNIX support */ + struct sockaddr_un s_un; - for (ls = lsocks; NULL != *ls; ls++) + if (strlen (unixpath) >= sizeof (s_un.sun_path)) { - struct ServiceListenContext *slc; - - slc = GNUNET_new (struct ServiceListenContext); - slc->sh = sh; - slc->listen_socket = *ls; - GNUNET_CONTAINER_DLL_insert (sh->slc_head, - sh->slc_tail, - slc); + LOG (GNUNET_ERROR_TYPE_WARNING, + _("UNIXPATH `%s' too long, maximum length is %llu\n"), + unixpath, + (unsigned long long) sizeof (s_un.sun_path)); + unixpath = GNUNET_NETWORK_shorten_unixpath (unixpath); + LOG (GNUNET_ERROR_TYPE_INFO, + _("Using `%s' instead\n"), + unixpath); } - GNUNET_free (lsocks); +#ifdef LINUX + abstract = GNUNET_CONFIGURATION_get_value_yesno (cfg, + "TESTING", + "USE_ABSTRACT_SOCKETS"); + if (GNUNET_SYSERR == abstract) + abstract = GNUNET_NO; +#endif + if ( (GNUNET_YES != abstract) && + (GNUNET_OK != + GNUNET_DISK_directory_create_for_file (unixpath)) ) + GNUNET_log_strerror_file (GNUNET_ERROR_TYPE_ERROR, + "mkdir", + unixpath); } - else + if (NULL != unixpath) { - struct sockaddr **addrs; - socklen_t *addrlens; - int num; - - num = get_server_addresses (sh->service_name, - sh->cfg, - &addrs, - &addrlens); - if (GNUNET_SYSERR == num) - return GNUNET_SYSERR; - - for (int i = 0; i < num; i++) + desc = GNUNET_NETWORK_socket_create (AF_UNIX, + SOCK_STREAM, + 0); + if (NULL == desc) { - struct ServiceListenContext *slc; - - slc = GNUNET_new (struct ServiceListenContext); - slc->sh = sh; - slc->listen_socket = open_listen_socket (addrs[i], - addrlens[i]); - GNUNET_free (addrs[i]); - if (NULL == slc->listen_socket) + if ((ENOBUFS == errno) || + (ENOMEM == errno) || + (ENFILE == errno) || + (EACCES == errno)) { - GNUNET_log_strerror (GNUNET_ERROR_TYPE_ERROR, - "bind"); - GNUNET_free (slc); - continue; + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "socket"); + GNUNET_free_non_null (hostname); + GNUNET_free (unixpath); + return GNUNET_SYSERR; } - GNUNET_CONTAINER_DLL_insert (sh->slc_head, - sh->slc_tail, - slc); + LOG (GNUNET_ERROR_TYPE_INFO, + _("Disabling UNIX domain socket support for service `%s', failed to create UNIX domain socket: %s\n"), + service_name, + STRERROR (errno)); + GNUNET_free (unixpath); + unixpath = NULL; } - GNUNET_free_non_null (addrlens); - GNUNET_free_non_null (addrs); - if ( (0 != num) && - (NULL == sh->slc_head) ) + else { - /* All attempts to bind failed, hard failure */ - GNUNET_log (GNUNET_ERROR_TYPE_ERROR, - _("Could not bind to any of the ports I was supposed to, refusing to run!\n")); - return GNUNET_SYSERR; + GNUNET_break (GNUNET_OK == + GNUNET_NETWORK_socket_close (desc)); + desc = NULL; } } +#endif - sh->require_found = tolerant ? GNUNET_NO : GNUNET_YES; - sh->match_uid - = GNUNET_CONFIGURATION_get_value_yesno (sh->cfg, - sh->service_name, - "UNIX_MATCH_UID"); - sh->match_gid - = GNUNET_CONFIGURATION_get_value_yesno (sh->cfg, - sh->service_name, - "UNIX_MATCH_GID"); - process_acl4 (&sh->v4_denied, - sh, - "REJECT_FROM"); - process_acl4 (&sh->v4_allowed, - sh, - "ACCEPT_FROM"); - process_acl6 (&sh->v6_denied, - sh, - "REJECT_FROM6"); - process_acl6 (&sh->v6_allowed, - sh, - "ACCEPT_FROM6"); - return GNUNET_OK; -} - - -/** - * Get the name of the user that'll be used - * to provide the service. - * - * @param sh service context - * @return value of the 'USERNAME' option - */ -static char * -get_user_name (struct GNUNET_SERVICE_Handle *sh) -{ - char *un; - - if (GNUNET_OK != - GNUNET_CONFIGURATION_get_value_filename (sh->cfg, - sh->service_name, - "USERNAME", - &un)) - return NULL; - return un; -} - - -/** - * Set user ID. - * - * @param sh service context - * @return #GNUNET_OK on success, #GNUNET_SYSERR on error - */ -static int -set_user_id (struct GNUNET_SERVICE_Handle *sh) -{ - char *user; - - if (NULL == (user = get_user_name (sh))) - return GNUNET_OK; /* keep */ -#ifndef MINGW - struct passwd *pws; - - errno = 0; - pws = getpwnam (user); - if (NULL == pws) + if ((0 == port) && (NULL == unixpath)) { LOG (GNUNET_ERROR_TYPE_ERROR, - _("Cannot obtain information about user `%s': %s\n"), - user, - errno == 0 ? _("No such user") : STRERROR (errno)); - GNUNET_free (user); + _("Have neither PORT nor UNIXPATH for service `%s', but one is required\n"), + service_name); + GNUNET_free_non_null (hostname); return GNUNET_SYSERR; } - if ( (0 != setgid (pws->pw_gid)) || - (0 != setegid (pws->pw_gid)) || -#if HAVE_INITGROUPS - (0 != initgroups (user, - pws->pw_gid)) || -#endif - (0 != setuid (pws->pw_uid)) || - (0 != seteuid (pws->pw_uid))) + if (0 == port) { - if ((0 != setregid (pws->pw_gid, - pws->pw_gid)) || - (0 != setreuid (pws->pw_uid, - pws->pw_uid))) + saddrs = GNUNET_new_array (2, + struct sockaddr *); + saddrlens = GNUNET_new_array (2, + socklen_t); + add_unixpath (saddrs, + saddrlens, + unixpath, + abstract); + GNUNET_free_non_null (unixpath); + GNUNET_free_non_null (hostname); + *addrs = saddrs; + *addr_lens = saddrlens; + return 1; + } + + if (NULL != hostname) + { + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Resolving `%s' since that is where `%s' will bind to.\n", + hostname, + service_name); + memset (&hints, + 0, + sizeof (struct addrinfo)); + if (disablev6) + hints.ai_family = AF_INET; + hints.ai_protocol = IPPROTO_TCP; + if ((0 != (ret = getaddrinfo (hostname, + NULL, + &hints, + &res))) || + (NULL == res)) { LOG (GNUNET_ERROR_TYPE_ERROR, - _("Cannot change user/group to `%s': %s\n"), - user, - STRERROR (errno)); - GNUNET_free (user); + _("Failed to resolve `%s': %s\n"), + hostname, + gai_strerror (ret)); + GNUNET_free (hostname); + GNUNET_free_non_null (unixpath); return GNUNET_SYSERR; } - } -#endif - GNUNET_free (user); - return GNUNET_OK; -} - - -/** - * Get the name of the file where we will - * write the PID of the service. - * - * @param sh service context - * @return name of the file for the process ID - */ -static char * -get_pid_file_name (struct GNUNET_SERVICE_Handle *sh) -{ - char *pif; - - if (GNUNET_OK != - GNUNET_CONFIGURATION_get_value_filename (sh->cfg, - sh->service_name, - "PIDFILE", - &pif)) - return NULL; - return pif; -} - - -/** - * Delete the PID file that was created by our parent. - * - * @param sh service context - */ -static void -pid_file_delete (struct GNUNET_SERVICE_Handle *sh) -{ - char *pif = get_pid_file_name (sh); - - if (NULL == pif) - return; /* no PID file */ - if (0 != UNLINK (pif)) - LOG_STRERROR_FILE (GNUNET_ERROR_TYPE_WARNING, - "unlink", - pif); - GNUNET_free (pif); -} - - -/** - * Detach from terminal. - * - * @param sh service context - * @return #GNUNET_OK on success, #GNUNET_SYSERR on error - */ -static int -detach_terminal (struct GNUNET_SERVICE_Handle *sh) -{ -#ifndef MINGW - pid_t pid; - int nullfd; - int filedes[2]; - - if (0 != PIPE (filedes)) - { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "pipe"); - return GNUNET_SYSERR; - } - pid = fork (); - if (pid < 0) - { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "fork"); - return GNUNET_SYSERR; - } - if (0 != pid) - { - /* Parent */ - char c; - - GNUNET_break (0 == CLOSE (filedes[1])); - c = 'X'; - if (1 != READ (filedes[0], - &c, - sizeof (char))) - LOG_STRERROR (GNUNET_ERROR_TYPE_WARNING, - "read"); - fflush (stdout); - switch (c) + next = res; + i = 0; + while (NULL != (pos = next)) { - case '.': - exit (0); - case 'I': - LOG (GNUNET_ERROR_TYPE_INFO, - _("Service process failed to initialize\n")); - break; - case 'S': - LOG (GNUNET_ERROR_TYPE_INFO, - _("Service process could not initialize server function\n")); - break; - case 'X': - LOG (GNUNET_ERROR_TYPE_INFO, - _("Service process failed to report status\n")); - break; + next = pos->ai_next; + if ( (disablev6) && + (pos->ai_family == AF_INET6) ) + continue; + i++; } - exit (1); /* child reported error */ + if (0 == i) + { + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Failed to find %saddress for `%s'.\n"), + disablev6 ? "IPv4 " : "", + hostname); + freeaddrinfo (res); + GNUNET_free (hostname); + GNUNET_free_non_null (unixpath); + return GNUNET_SYSERR; + } + resi = i; + if (NULL != unixpath) + resi++; + saddrs = GNUNET_new_array (resi + 1, + struct sockaddr *); + saddrlens = GNUNET_new_array (resi + 1, + socklen_t); + i = 0; + if (NULL != unixpath) + { + add_unixpath (saddrs, + saddrlens, + unixpath, + abstract); + i++; + } + next = res; + while (NULL != (pos = next)) + { + next = pos->ai_next; + if ( (disablev6) && + (AF_INET6 == pos->ai_family) ) + continue; + if ( (IPPROTO_TCP != pos->ai_protocol) && + (0 != pos->ai_protocol) ) + continue; /* not TCP */ + if ( (SOCK_STREAM != pos->ai_socktype) && + (0 != pos->ai_socktype) ) + continue; /* huh? */ + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Service `%s' will bind to `%s'\n", + service_name, + GNUNET_a2s (pos->ai_addr, + pos->ai_addrlen)); + if (AF_INET == pos->ai_family) + { + GNUNET_assert (sizeof (struct sockaddr_in) == pos->ai_addrlen); + saddrlens[i] = pos->ai_addrlen; + saddrs[i] = GNUNET_malloc (saddrlens[i]); + GNUNET_memcpy (saddrs[i], + pos->ai_addr, + saddrlens[i]); + ((struct sockaddr_in *) saddrs[i])->sin_port = htons (port); + } + else + { + GNUNET_assert (AF_INET6 == pos->ai_family); + GNUNET_assert (sizeof (struct sockaddr_in6) == pos->ai_addrlen); + saddrlens[i] = pos->ai_addrlen; + saddrs[i] = GNUNET_malloc (saddrlens[i]); + GNUNET_memcpy (saddrs[i], + pos->ai_addr, + saddrlens[i]); + ((struct sockaddr_in6 *) saddrs[i])->sin6_port = htons (port); + } + i++; + } + GNUNET_free (hostname); + freeaddrinfo (res); + resi = i; } - GNUNET_break (0 == CLOSE (0)); - GNUNET_break (0 == CLOSE (1)); - GNUNET_break (0 == CLOSE (filedes[0])); - nullfd = OPEN ("/dev/null", - O_RDWR | O_APPEND); - if (nullfd < 0) - return GNUNET_SYSERR; - /* set stdin/stdout to /dev/null */ - if ( (dup2 (nullfd, 0) < 0) || - (dup2 (nullfd, 1) < 0) ) + else { - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "dup2"); - (void) CLOSE (nullfd); - return GNUNET_SYSERR; - } - (void) CLOSE (nullfd); - /* Detach from controlling terminal */ - pid = setsid (); - if (-1 == pid) - LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, - "setsid"); - sh->ready_confirm_fd = filedes[1]; -#else - /* FIXME: we probably need to do something else - * elsewhere in order to fork the process itself... */ - FreeConsole (); + /* will bind against everything, just set port */ + if (disablev6) + { + /* V4-only */ + resi = 1; + if (NULL != unixpath) + resi++; + i = 0; + saddrs = GNUNET_new_array (resi + 1, + struct sockaddr *); + saddrlens = GNUNET_new_array (resi + 1, + socklen_t); + if (NULL != unixpath) + { + add_unixpath (saddrs, + saddrlens, + unixpath, + abstract); + i++; + } + saddrlens[i] = sizeof (struct sockaddr_in); + saddrs[i] = GNUNET_malloc (saddrlens[i]); +#if HAVE_SOCKADDR_IN_SIN_LEN + ((struct sockaddr_in *) saddrs[i])->sin_len = saddrlens[i]; #endif - return GNUNET_OK; -} - - -/** - * Tear down the service, closing the listen sockets and - * freeing the ACLs. - * - * @param sh handle to the service to tear down. - */ -static void -teardown_service (struct GNUNET_SERVICE_Handle *sh) -{ - struct ServiceListenContext *slc; - - GNUNET_free_non_null (sh->v4_denied); - GNUNET_free_non_null (sh->v6_denied); - GNUNET_free_non_null (sh->v4_allowed); - GNUNET_free_non_null (sh->v6_allowed); - while (NULL != (slc = sh->slc_head)) - { - GNUNET_CONTAINER_DLL_remove (sh->slc_head, - sh->slc_tail, - slc); - if (NULL != slc->listen_task) - GNUNET_SCHEDULER_cancel (slc->listen_task); - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (slc->listen_socket)); - GNUNET_free (slc); + ((struct sockaddr_in *) saddrs[i])->sin_family = AF_INET; + ((struct sockaddr_in *) saddrs[i])->sin_port = htons (port); + } + else + { + /* dual stack */ + resi = 2; + if (NULL != unixpath) + resi++; + saddrs = GNUNET_new_array (resi + 1, + struct sockaddr *); + saddrlens = GNUNET_new_array (resi + 1, + socklen_t); + i = 0; + if (NULL != unixpath) + { + add_unixpath (saddrs, + saddrlens, + unixpath, + abstract); + i++; + } + saddrlens[i] = sizeof (struct sockaddr_in6); + saddrs[i] = GNUNET_malloc (saddrlens[i]); +#if HAVE_SOCKADDR_IN_SIN_LEN + ((struct sockaddr_in6 *) saddrs[i])->sin6_len = saddrlens[0]; +#endif + ((struct sockaddr_in6 *) saddrs[i])->sin6_family = AF_INET6; + ((struct sockaddr_in6 *) saddrs[i])->sin6_port = htons (port); + i++; + saddrlens[i] = sizeof (struct sockaddr_in); + saddrs[i] = GNUNET_malloc (saddrlens[i]); +#if HAVE_SOCKADDR_IN_SIN_LEN + ((struct sockaddr_in *) saddrs[i])->sin_len = saddrlens[1]; +#endif + ((struct sockaddr_in *) saddrs[i])->sin_family = AF_INET; + ((struct sockaddr_in *) saddrs[i])->sin_port = htons (port); + } } + GNUNET_free_non_null (unixpath); + *addrs = saddrs; + *addr_lens = saddrlens; + return resi; } +#ifdef MINGW /** - * Function to return link to AGPL source upon request. + * Read listen sockets from the parent process (ARM). * - * @param cls closure with the identification of the client - * @param msg AGPL request + * @param sh service context to initialize + * @return NULL-terminated array of sockets on success, + * NULL if not ok (must bind yourself) */ -static void -return_agpl (void *cls, - const struct GNUNET_MessageHeader *msg) +static struct GNUNET_NETWORK_Handle ** +receive_sockets_from_parent (struct GNUNET_SERVICE_Handle *sh) { - struct GNUNET_SERVICE_Client *client = cls; - struct GNUNET_MQ_Handle *mq; - struct GNUNET_MQ_Envelope *env; - struct GNUNET_MessageHeader *res; - size_t slen; + static struct GNUNET_NETWORK_Handle **lsocks; + const char *env_buf; + int fail; + uint64_t count; + uint64_t i; + HANDLE lsocks_pipe; - slen = strlen (GNUNET_AGPL_URL) + 1; - env = GNUNET_MQ_msg_extra (res, - GNUNET_MESSAGE_TYPE_RESPONSE_AGPL, - slen); - memcpy (&res[1], - GNUNET_AGPL_URL, - slen); - mq = GNUNET_SERVICE_client_get_mq (client); - GNUNET_MQ_send (mq, - env); - GNUNET_SERVICE_client_continue (client); + env_buf = getenv ("GNUNET_OS_READ_LSOCKS"); + if ( (NULL == env_buf) || + (strlen (env_buf) <= 0) ) + return NULL; + /* Using W32 API directly here, because this pipe will + * never be used outside of this function, and it's just too much of a bother + * to create a GNUnet API that boxes a HANDLE (the way it is done with socks) + */ + lsocks_pipe = (HANDLE) strtoul (env_buf, + NULL, + 10); + if ( (0 == lsocks_pipe) || + (INVALID_HANDLE_VALUE == lsocks_pipe)) + return NULL; + fail = 1; + do + { + int ret; + int fail2; + DWORD rd; + + ret = ReadFile (lsocks_pipe, + &count, + sizeof (count), + &rd, + NULL); + if ( (0 == ret) || + (sizeof (count) != rd) || + (0 == count) ) + break; + lsocks = GNUNET_new_array (count + 1, + struct GNUNET_NETWORK_Handle *); + + fail2 = 1; + for (i = 0; i < count; i++) + { + WSAPROTOCOL_INFOA pi; + uint64_t size; + SOCKET s; + + ret = ReadFile (lsocks_pipe, + &size, + sizeof (size), + &rd, + NULL); + if ( (0 == ret) || + (sizeof (size) != rd) || + (sizeof (pi) != size) ) + break; + ret = ReadFile (lsocks_pipe, + &pi, + sizeof (pi), + &rd, + NULL); + if ( (0 == ret) || + (sizeof (pi) != rd)) + break; + s = WSASocketA (pi.iAddressFamily, + pi.iSocketType, + pi.iProtocol, + &pi, + 0, + WSA_FLAG_OVERLAPPED); + lsocks[i] = GNUNET_NETWORK_socket_box_native (s); + if (NULL == lsocks[i]) + break; + else if (i == count - 1) + fail2 = 0; + } + if (fail2) + break; + lsocks[count] = NULL; + fail = 0; + } + while (fail); + CloseHandle (lsocks_pipe); + + if (fail) + { + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Could not access a pre-bound socket, will try to bind myself\n")); + for (i = 0; (i < count) && (NULL != lsocks[i]); i++) + GNUNET_break (GNUNET_OK == + GNUNET_NETWORK_socket_close (lsocks[i])); + GNUNET_free (lsocks); + return NULL; + } + return lsocks; } +#endif /** - * Low-level function to start a service if the scheduler - * is already running. Should only be used directly in - * special cases. - * - * The function will launch the service with the name @a service_name - * using the @a service_options to configure its shutdown - * behavior. When clients connect or disconnect, the respective - * @a connect_cb or @a disconnect_cb functions will be called. For - * messages received from the clients, the respective @a handlers will - * be invoked; for the closure of the handlers we use the return value - * from the @a connect_cb invocation of the respective client. - * - * Each handler MUST call #GNUNET_SERVICE_client_continue() after each - * message to receive further messages from this client. If - * #GNUNET_SERVICE_client_continue() is not called within a short - * time, a warning will be logged. If delays are expected, services - * should call #GNUNET_SERVICE_client_disable_continue_warning() to - * disable the warning. - * - * Clients sending invalid messages (based on @a handlers) will be - * dropped. Additionally, clients can be dropped at any time using - * #GNUNET_SERVICE_client_drop(). - * - * The service must be stopped using #GNUNET_SERVICE_stop(). + * Create and initialize a listen socket for the server. * - * @param service_name name of the service to run - * @param cfg configuration to use - * @param connect_cb function to call whenever a client connects - * @param disconnect_cb function to call whenever a client disconnects - * @param cls closure argument for @a connect_cb and @a disconnect_cb - * @param handlers NULL-terminated array of message handlers for the service, - * the closure will be set to the value returned by - * the @a connect_cb for the respective connection - * @return NULL on error + * @param server_addr address to listen on + * @param socklen length of @a server_addr + * @return NULL on error, otherwise the listen socket */ -struct GNUNET_SERVICE_Handle * -GNUNET_SERVICE_start (const char *service_name, - const struct GNUNET_CONFIGURATION_Handle *cfg, - GNUNET_SERVICE_ConnectHandler connect_cb, - GNUNET_SERVICE_DisconnectHandler disconnect_cb, - void *cls, - const struct GNUNET_MQ_MessageHandler *handlers) +static struct GNUNET_NETWORK_Handle * +open_listen_socket (const struct sockaddr *server_addr, + socklen_t socklen) { - struct GNUNET_SERVICE_Handle *sh; + struct GNUNET_NETWORK_Handle *sock; + uint16_t port; + int eno; - sh = GNUNET_new (struct GNUNET_SERVICE_Handle); - sh->service_name = service_name; - sh->cfg = cfg; - sh->connect_cb = connect_cb; - sh->disconnect_cb = disconnect_cb; - sh->cb_cls = cls; - sh->handlers = GNUNET_MQ_copy_handlers2 (handlers, - &return_agpl, - NULL); - if (GNUNET_OK != setup_service (sh)) + switch (server_addr->sa_family) + { + case AF_INET: + port = ntohs (((const struct sockaddr_in *) server_addr)->sin_port); + break; + case AF_INET6: + port = ntohs (((const struct sockaddr_in6 *) server_addr)->sin6_port); + break; + case AF_UNIX: + port = 0; + break; + default: + GNUNET_break (0); + port = 0; + break; + } + sock = GNUNET_NETWORK_socket_create (server_addr->sa_family, + SOCK_STREAM, + 0); + if (NULL == sock) + { + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "socket"); + errno = 0; + return NULL; + } + /* bind the socket */ + if (GNUNET_OK != GNUNET_NETWORK_socket_bind (sock, + server_addr, + socklen)) + { + eno = errno; + if (EADDRINUSE != errno) + { + /* we don't log 'EADDRINUSE' here since an IPv4 bind may + * fail if we already took the port on IPv6; if both IPv4 and + * IPv6 binds fail, then our caller will log using the + * errno preserved in 'eno' */ + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "bind"); + if (0 != port) + LOG (GNUNET_ERROR_TYPE_ERROR, + _("`%s' failed for port %d (%s).\n"), + "bind", + port, + (AF_INET == server_addr->sa_family) ? "IPv4" : "IPv6"); + eno = 0; + } + else + { + if (0 != port) + LOG (GNUNET_ERROR_TYPE_WARNING, + _("`%s' failed for port %d (%s): address already in use\n"), + "bind", port, + (AF_INET == server_addr->sa_family) ? "IPv4" : "IPv6"); + else if (AF_UNIX == server_addr->sa_family) + { + LOG (GNUNET_ERROR_TYPE_WARNING, + _("`%s' failed for `%s': address already in use\n"), + "bind", + GNUNET_a2s (server_addr, socklen)); + } + } + GNUNET_break (GNUNET_OK == + GNUNET_NETWORK_socket_close (sock)); + errno = eno; + return NULL; + } + if (GNUNET_OK != GNUNET_NETWORK_socket_listen (sock, + 5)) { - GNUNET_free_non_null (sh->handlers); - GNUNET_free (sh); + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "listen"); + GNUNET_break (GNUNET_OK == + GNUNET_NETWORK_socket_close (sock)); + errno = 0; return NULL; } - GNUNET_SERVICE_resume (sh); - return sh; -} - - -/** - * Stops a service that was started with #GNUNET_SERVICE_start(). - * - * @param srv service to stop - */ -void -GNUNET_SERVICE_stop (struct GNUNET_SERVICE_Handle *srv) -{ - struct GNUNET_SERVICE_Client *client; - - GNUNET_SERVICE_suspend (srv); - while (NULL != (client = srv->clients_head)) - GNUNET_SERVICE_client_drop (client); - teardown_service (srv); - GNUNET_free_non_null (srv->handlers); - GNUNET_free (srv); + if (0 != port) + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Server starts to listen on port %u.\n", + port); + return sock; } /** - * Creates the "main" function for a GNUnet service. You - * should almost always use the #GNUNET_SERVICE_MAIN macro - * instead of calling this function directly (except - * for ARM, which should call this function directly). - * - * The function will launch the service with the name @a service_name - * using the @a service_options to configure its shutdown - * behavior. Once the service is ready, the @a init_cb will be called - * for service-specific initialization. @a init_cb will be given the - * service handler which can be used to control the service's - * availability. When clients connect or disconnect, the respective - * @a connect_cb or @a disconnect_cb functions will be called. For - * messages received from the clients, the respective @a handlers will - * be invoked; for the closure of the handlers we use the return value - * from the @a connect_cb invocation of the respective client. - * - * Each handler MUST call #GNUNET_SERVICE_client_continue() after each - * message to receive further messages from this client. If - * #GNUNET_SERVICE_client_continue() is not called within a short - * time, a warning will be logged. If delays are expected, services - * should call #GNUNET_SERVICE_client_disable_continue_warning() to - * disable the warning. + * Setup service handle * - * Clients sending invalid messages (based on @a handlers) will be - * dropped. Additionally, clients can be dropped at any time using - * #GNUNET_SERVICE_client_drop(). + * Configuration may specify: + * - PORT (where to bind to for TCP) + * - UNIXPATH (where to bind to for UNIX domain sockets) + * - DISABLEV6 (disable support for IPv6, otherwise we use dual-stack) + * - BINDTO (hostname or IP address to bind to, otherwise we take everything) + * - ACCEPT_FROM (only allow connections from specified IPv4 subnets) + * - ACCEPT_FROM6 (only allow connections from specified IPv6 subnets) + * - REJECT_FROM (disallow allow connections from specified IPv4 subnets) + * - REJECT_FROM6 (disallow allow connections from specified IPv6 subnets) * - * @param argc number of command-line arguments in @a argv - * @param argv array of command-line arguments - * @param service_name name of the service to run - * @param options options controlling shutdown of the service - * @param service_init_cb function to call once the service is ready - * @param connect_cb function to call whenever a client connects - * @param disconnect_cb function to call whenever a client disconnects - * @param cls closure argument for @a service_init_cb, @a connect_cb and @a disconnect_cb - * @param handlers NULL-terminated array of message handlers for the service, - * the closure will be set to the value returned by - * the @a connect_cb for the respective connection - * @return 0 on success, non-zero on error + * @param sh service context to initialize + * @return #GNUNET_OK if configuration succeeded */ -int -GNUNET_SERVICE_run_ (int argc, - char *const *argv, - const char *service_name, - enum GNUNET_SERVICE_Options options, - GNUNET_SERVICE_InitCallback service_init_cb, - GNUNET_SERVICE_ConnectHandler connect_cb, - GNUNET_SERVICE_DisconnectHandler disconnect_cb, - void *cls, - const struct GNUNET_MQ_MessageHandler *handlers) +static int +setup_service (struct GNUNET_SERVICE_Handle *sh) { - struct GNUNET_SERVICE_Handle sh; - char *cfg_filename; - char *opt_cfg_filename; - char *loglev; - const char *xdg; - char *logfile; - int do_daemonize; - unsigned long long skew_offset; - unsigned long long skew_variance; - long long clock_offset; - struct GNUNET_CONFIGURATION_Handle *cfg; - int ret; - int err; - - struct GNUNET_GETOPT_CommandLineOption service_options[] = { - GNUNET_GETOPT_option_cfgfile (&opt_cfg_filename), - GNUNET_GETOPT_option_flag ('d', - "daemonize", - gettext_noop ("do daemonize (detach from terminal)"), - &do_daemonize), - GNUNET_GETOPT_option_help (NULL), - GNUNET_GETOPT_option_loglevel (&loglev), - GNUNET_GETOPT_option_logfile (&logfile), - GNUNET_GETOPT_option_version (PACKAGE_VERSION " " VCS_VERSION), - GNUNET_GETOPT_OPTION_END - }; - - err = 1; - memset (&sh, - 0, - sizeof (sh)); - xdg = getenv ("XDG_CONFIG_HOME"); - if (NULL != xdg) - GNUNET_asprintf (&cfg_filename, - "%s%s%s", - xdg, - DIR_SEPARATOR_STR, - GNUNET_OS_project_data_get ()->config_file); - else - cfg_filename = GNUNET_strdup (GNUNET_OS_project_data_get ()->user_config_file); - sh.ready_confirm_fd = -1; - sh.options = options; - sh.cfg = cfg = GNUNET_CONFIGURATION_create (); - sh.service_init_cb = service_init_cb; - sh.connect_cb = connect_cb; - sh.disconnect_cb = disconnect_cb; - sh.cb_cls = cls; - sh.handlers = GNUNET_MQ_copy_handlers (handlers); - sh.service_name = service_name; + int tolerant; + struct GNUNET_NETWORK_Handle **lsocks; +#ifndef MINGW + const char *nfds; + unsigned int cnt; + int flags; + char dummy[2]; +#endif - /* setup subsystems */ - loglev = NULL; - logfile = NULL; - opt_cfg_filename = NULL; - do_daemonize = 0; - ret = GNUNET_GETOPT_run (service_name, - service_options, - argc, - argv); - if (GNUNET_SYSERR == ret) - goto shutdown; - if (GNUNET_NO == ret) - { - err = 0; - goto shutdown; - } - if (GNUNET_OK != GNUNET_log_setup (service_name, - loglev, - logfile)) - { - GNUNET_break (0); - goto shutdown; - } - if (NULL == opt_cfg_filename) - opt_cfg_filename = GNUNET_strdup (cfg_filename); - if (GNUNET_YES == GNUNET_DISK_file_test (opt_cfg_filename)) + if (GNUNET_CONFIGURATION_have_value + (sh->cfg, + sh->service_name, + "TOLERANT")) { if (GNUNET_SYSERR == - GNUNET_CONFIGURATION_load (cfg, - opt_cfg_filename)) + (tolerant = + GNUNET_CONFIGURATION_get_value_yesno (sh->cfg, + sh->service_name, + "TOLERANT"))) { - GNUNET_log (GNUNET_ERROR_TYPE_ERROR, - _("Malformed configuration file `%s', exit ...\n"), - opt_cfg_filename); - goto shutdown; + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Specified value for `%s' of service `%s' is invalid\n"), + "TOLERANT", + sh->service_name); + return GNUNET_SYSERR; } } else + tolerant = GNUNET_NO; + + lsocks = NULL; +#ifndef MINGW + errno = 0; + if ( (NULL != (nfds = getenv ("LISTEN_FDS"))) && + (1 == SSCANF (nfds, + "%u%1s", + &cnt, + dummy)) && + (cnt > 0) && + (cnt < FD_SETSIZE) && + (cnt + 4 < FD_SETSIZE) ) { - if (GNUNET_SYSERR == - GNUNET_CONFIGURATION_load (cfg, - NULL)) - { - GNUNET_log (GNUNET_ERROR_TYPE_ERROR, - _("Malformed configuration, exit ...\n")); - goto shutdown; - } - if (0 != strcmp (opt_cfg_filename, - cfg_filename)) + lsocks = GNUNET_new_array (cnt + 1, + struct GNUNET_NETWORK_Handle *); + while (0 < cnt--) { - GNUNET_log (GNUNET_ERROR_TYPE_ERROR, - _("Could not access configuration file `%s'\n"), - opt_cfg_filename); - goto shutdown; + flags = fcntl (3 + cnt, + F_GETFD); + if ( (flags < 0) || + (0 != (flags & FD_CLOEXEC)) || + (NULL == + (lsocks[cnt] = GNUNET_NETWORK_socket_box_native (3 + cnt)))) + { + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Could not access pre-bound socket %u, will try to bind myself\n"), + (unsigned int) 3 + cnt); + cnt++; + while (NULL != lsocks[cnt]) + GNUNET_break (GNUNET_OK == + GNUNET_NETWORK_socket_close (lsocks[cnt++])); + GNUNET_free (lsocks); + lsocks = NULL; + break; + } } + unsetenv ("LISTEN_FDS"); } - if (GNUNET_OK != setup_service (&sh)) - goto shutdown; - if ( (1 == do_daemonize) && - (GNUNET_OK != detach_terminal (&sh)) ) - { - GNUNET_break (0); - goto shutdown; - } - if (GNUNET_OK != set_user_id (&sh)) - goto shutdown; - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Service `%s' runs with configuration from `%s'\n", - service_name, - opt_cfg_filename); - if ((GNUNET_OK == - GNUNET_CONFIGURATION_get_value_number (sh.cfg, - "TESTING", - "SKEW_OFFSET", - &skew_offset)) && - (GNUNET_OK == - GNUNET_CONFIGURATION_get_value_number (sh.cfg, - "TESTING", - "SKEW_VARIANCE", - &skew_variance))) +#else + if (NULL != getenv ("GNUNET_OS_READ_LSOCKS")) { - clock_offset = skew_offset - skew_variance; - GNUNET_TIME_set_offset (clock_offset); - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Skewing clock by %dll ms\n", - clock_offset); + lsocks = receive_sockets_from_parent (sh); + putenv ("GNUNET_OS_READ_LSOCKS="); } - GNUNET_RESOLVER_connect (sh.cfg); - - /* actually run service */ - err = 0; - GNUNET_SCHEDULER_run (&service_main, - &sh); - /* shutdown */ - if (1 == do_daemonize) - pid_file_delete (&sh); +#endif -shutdown: - if (-1 != sh.ready_confirm_fd) + if (NULL != lsocks) { - if (1 != WRITE (sh.ready_confirm_fd, - err ? "I" : "S", - 1)) - LOG_STRERROR (GNUNET_ERROR_TYPE_WARNING, - "write"); - GNUNET_break (0 == CLOSE (sh.ready_confirm_fd)); + /* listen only on inherited sockets if we have any */ + struct GNUNET_NETWORK_Handle **ls; + + for (ls = lsocks; NULL != *ls; ls++) + { + struct ServiceListenContext *slc; + + slc = GNUNET_new (struct ServiceListenContext); + slc->sh = sh; + slc->listen_socket = *ls; + GNUNET_CONTAINER_DLL_insert (sh->slc_head, + sh->slc_tail, + slc); + } + GNUNET_free (lsocks); } -#if HAVE_MALLINFO + else { - char *counter; + struct sockaddr **addrs; + socklen_t *addrlens; + int num; - if ( (GNUNET_YES == - GNUNET_CONFIGURATION_have_value (sh.cfg, - service_name, - "GAUGER_HEAP")) && - (GNUNET_OK == - GNUNET_CONFIGURATION_get_value_string (sh.cfg, - service_name, - "GAUGER_HEAP", - &counter)) ) + num = get_server_addresses (sh->service_name, + sh->cfg, + &addrs, + &addrlens); + if (GNUNET_SYSERR == num) + return GNUNET_SYSERR; + + for (int i = 0; i < num; i++) { - struct mallinfo mi; + struct ServiceListenContext *slc; - mi = mallinfo (); - GAUGER (service_name, - counter, - mi.usmblks, - "blocks"); - GNUNET_free (counter); + slc = GNUNET_new (struct ServiceListenContext); + slc->sh = sh; + slc->listen_socket = open_listen_socket (addrs[i], + addrlens[i]); + GNUNET_free (addrs[i]); + if (NULL == slc->listen_socket) + { + GNUNET_log_strerror (GNUNET_ERROR_TYPE_ERROR, + "bind"); + GNUNET_free (slc); + continue; + } + GNUNET_CONTAINER_DLL_insert (sh->slc_head, + sh->slc_tail, + slc); + } + GNUNET_free_non_null (addrlens); + GNUNET_free_non_null (addrs); + if ( (0 != num) && + (NULL == sh->slc_head) ) + { + /* All attempts to bind failed, hard failure */ + GNUNET_log (GNUNET_ERROR_TYPE_ERROR, + _("Could not bind to any of the ports I was supposed to, refusing to run!\n")); + return GNUNET_SYSERR; } } -#endif - teardown_service (&sh); - GNUNET_free_non_null (sh.handlers); - GNUNET_SPEEDUP_stop_ (); - GNUNET_CONFIGURATION_destroy (cfg); - GNUNET_free_non_null (logfile); - GNUNET_free_non_null (loglev); - GNUNET_free (cfg_filename); - GNUNET_free_non_null (opt_cfg_filename); - return err ? GNUNET_SYSERR : sh.ret; + sh->require_found = tolerant ? GNUNET_NO : GNUNET_YES; + sh->match_uid + = GNUNET_CONFIGURATION_get_value_yesno (sh->cfg, + sh->service_name, + "UNIX_MATCH_UID"); + sh->match_gid + = GNUNET_CONFIGURATION_get_value_yesno (sh->cfg, + sh->service_name, + "UNIX_MATCH_GID"); + process_acl4 (&sh->v4_denied, + sh, + "REJECT_FROM"); + process_acl4 (&sh->v4_allowed, + sh, + "ACCEPT_FROM"); + process_acl6 (&sh->v6_denied, + sh, + "REJECT_FROM6"); + process_acl6 (&sh->v6_allowed, + sh, + "ACCEPT_FROM6"); + return GNUNET_OK; } /** - * Suspend accepting connections from the listen socket temporarily. - * Resume activity using #GNUNET_SERVICE_resume. + * Get the name of the user that'll be used + * to provide the service. * - * @param sh service to stop accepting connections. + * @param sh service context + * @return value of the 'USERNAME' option */ -void -GNUNET_SERVICE_suspend (struct GNUNET_SERVICE_Handle *sh) +static char * +get_user_name (struct GNUNET_SERVICE_Handle *sh) { - struct ServiceListenContext *slc; + char *un; - for (slc = sh->slc_head; NULL != slc; slc = slc->next) + if (GNUNET_OK != + GNUNET_CONFIGURATION_get_value_filename (sh->cfg, + sh->service_name, + "USERNAME", + &un)) + return NULL; + return un; +} + + +/** + * Set user ID. + * + * @param sh service context + * @return #GNUNET_OK on success, #GNUNET_SYSERR on error + */ +static int +set_user_id (struct GNUNET_SERVICE_Handle *sh) +{ + char *user; + + if (NULL == (user = get_user_name (sh))) + return GNUNET_OK; /* keep */ +#ifndef MINGW + struct passwd *pws; + + errno = 0; + pws = getpwnam (user); + if (NULL == pws) { - if (NULL != slc->listen_task) + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Cannot obtain information about user `%s': %s\n"), + user, + errno == 0 ? _("No such user") : STRERROR (errno)); + GNUNET_free (user); + return GNUNET_SYSERR; + } + if ( (0 != setgid (pws->pw_gid)) || + (0 != setegid (pws->pw_gid)) || +#if HAVE_INITGROUPS + (0 != initgroups (user, + pws->pw_gid)) || +#endif + (0 != setuid (pws->pw_uid)) || + (0 != seteuid (pws->pw_uid))) + { + if ((0 != setregid (pws->pw_gid, + pws->pw_gid)) || + (0 != setreuid (pws->pw_uid, + pws->pw_uid))) { - GNUNET_SCHEDULER_cancel (slc->listen_task); - slc->listen_task = NULL; + LOG (GNUNET_ERROR_TYPE_ERROR, + _("Cannot change user/group to `%s': %s\n"), + user, + STRERROR (errno)); + GNUNET_free (user); + return GNUNET_SYSERR; } } +#endif + GNUNET_free (user); + return GNUNET_OK; } /** - * Task run when we are ready to transmit data to the - * client. + * Get the name of the file where we will + * write the PID of the service. * - * @param cls the `struct GNUNET_SERVICE_Client *` to send to + * @param sh service context + * @return name of the file for the process ID + */ +static char * +get_pid_file_name (struct GNUNET_SERVICE_Handle *sh) +{ + char *pif; + + if (GNUNET_OK != + GNUNET_CONFIGURATION_get_value_filename (sh->cfg, + sh->service_name, + "PIDFILE", + &pif)) + return NULL; + return pif; +} + + +/** + * Delete the PID file that was created by our parent. + * + * @param sh service context */ static void -do_send (void *cls) +pid_file_delete (struct GNUNET_SERVICE_Handle *sh) { - struct GNUNET_SERVICE_Client *client = cls; - ssize_t ret; - size_t left; - const char *buf; + char *pif = get_pid_file_name (sh); - LOG (GNUNET_ERROR_TYPE_DEBUG, - "service: sending message with type %u", - ntohs(client->msg->type)); + if (NULL == pif) + return; /* no PID file */ + if (0 != UNLINK (pif)) + LOG_STRERROR_FILE (GNUNET_ERROR_TYPE_WARNING, + "unlink", + pif); + GNUNET_free (pif); +} - client->send_task = NULL; - buf = (const char *) client->msg; - left = ntohs (client->msg->size) - client->msg_pos; - ret = GNUNET_NETWORK_socket_send (client->sock, - &buf[client->msg_pos], - left); - GNUNET_assert (ret <= (ssize_t) left); - if (0 == ret) +/** + * Detach from terminal. + * + * @param sh service context + * @return #GNUNET_OK on success, #GNUNET_SYSERR on error + */ +static int +detach_terminal (struct GNUNET_SERVICE_Handle *sh) +{ +#ifndef MINGW + pid_t pid; + int nullfd; + int filedes[2]; + + if (0 != PIPE (filedes)) { - LOG (GNUNET_ERROR_TYPE_DEBUG, - "no data send"); - GNUNET_MQ_inject_error (client->mq, - GNUNET_MQ_ERROR_WRITE); - return; + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "pipe"); + return GNUNET_SYSERR; } - if (-1 == ret) + pid = fork (); + if (pid < 0) { - if ( (EAGAIN == errno) || - (EINTR == errno) ) - { - /* ignore */ - ret = 0; - } - else - { - if (EPIPE != errno) - GNUNET_log_strerror (GNUNET_ERROR_TYPE_WARNING, - "send"); - LOG (GNUNET_ERROR_TYPE_DEBUG, - "socket send returned with error code %i", - errno); - GNUNET_MQ_inject_error (client->mq, - GNUNET_MQ_ERROR_WRITE); - return; - } + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "fork"); + return GNUNET_SYSERR; } - if (0 == client->msg_pos) + if (0 != pid) { - GNUNET_MQ_impl_send_in_flight (client->mq); + /* Parent */ + char c; + + GNUNET_break (0 == CLOSE (filedes[1])); + c = 'X'; + if (1 != READ (filedes[0], + &c, + sizeof (char))) + LOG_STRERROR (GNUNET_ERROR_TYPE_WARNING, + "read"); + fflush (stdout); + switch (c) + { + case '.': + exit (0); + case 'I': + LOG (GNUNET_ERROR_TYPE_INFO, + _("Service process failed to initialize\n")); + break; + case 'S': + LOG (GNUNET_ERROR_TYPE_INFO, + _("Service process could not initialize server function\n")); + break; + case 'X': + LOG (GNUNET_ERROR_TYPE_INFO, + _("Service process failed to report status\n")); + break; + } + exit (1); /* child reported error */ } - client->msg_pos += ret; - if (left > (size_t) ret) + GNUNET_break (0 == CLOSE (0)); + GNUNET_break (0 == CLOSE (1)); + GNUNET_break (0 == CLOSE (filedes[0])); + nullfd = OPEN ("/dev/null", + O_RDWR | O_APPEND); + if (nullfd < 0) + return GNUNET_SYSERR; + /* set stdin/stdout to /dev/null */ + if ( (dup2 (nullfd, 0) < 0) || + (dup2 (nullfd, 1) < 0) ) { - GNUNET_assert (NULL == client->drop_task); - client->send_task - = GNUNET_SCHEDULER_add_write_net (GNUNET_TIME_UNIT_FOREVER_REL, - client->sock, - &do_send, - client); - return; + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "dup2"); + (void) CLOSE (nullfd); + return GNUNET_SYSERR; } - GNUNET_MQ_impl_send_continue (client->mq); + (void) CLOSE (nullfd); + /* Detach from controlling terminal */ + pid = setsid (); + if (-1 == pid) + LOG_STRERROR (GNUNET_ERROR_TYPE_ERROR, + "setsid"); + sh->ready_confirm_fd = filedes[1]; +#else + /* FIXME: we probably need to do something else + * elsewhere in order to fork the process itself... */ + FreeConsole (); +#endif + return GNUNET_OK; } /** - * Signature of functions implementing the sending functionality of a - * message queue. + * Tear down the service, closing the listen sockets and + * freeing the ACLs. * - * @param mq the message queue - * @param msg the message to send - * @param impl_state our `struct GNUNET_SERVICE_Client *` + * @param sh handle to the service to tear down. */ static void -service_mq_send (struct GNUNET_MQ_Handle *mq, - const struct GNUNET_MessageHeader *msg, - void *impl_state) +teardown_service (struct GNUNET_SERVICE_Handle *sh) { - struct GNUNET_SERVICE_Client *client = impl_state; + struct ServiceListenContext *slc; - (void) mq; - if (NULL != client->drop_task) - return; /* we're going down right now, do not try to send */ - GNUNET_assert (NULL == client->send_task); - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Sending message of type %u and size %u to client\n", - ntohs (msg->type), - ntohs (msg->size)); - client->msg = msg; - client->msg_pos = 0; - client->send_task - = GNUNET_SCHEDULER_add_write_net (GNUNET_TIME_UNIT_FOREVER_REL, - client->sock, - &do_send, - client); + GNUNET_free_non_null (sh->v4_denied); + GNUNET_free_non_null (sh->v6_denied); + GNUNET_free_non_null (sh->v4_allowed); + GNUNET_free_non_null (sh->v6_allowed); + while (NULL != (slc = sh->slc_head)) + { + GNUNET_CONTAINER_DLL_remove (sh->slc_head, + sh->slc_tail, + slc); + if (NULL != slc->listen_task) + GNUNET_SCHEDULER_cancel (slc->listen_task); + GNUNET_break (GNUNET_OK == + GNUNET_NETWORK_socket_close (slc->listen_socket)); + GNUNET_free (slc); + } } /** - * Implementation function that cancels the currently sent message. + * Function to return link to AGPL source upon request. * - * @param mq message queue - * @param impl_state state specific to the implementation + * @param cls closure with the identification of the client + * @param msg AGPL request */ static void -service_mq_cancel (struct GNUNET_MQ_Handle *mq, - void *impl_state) +return_agpl (void *cls, + const struct GNUNET_MessageHeader *msg) { - struct GNUNET_SERVICE_Client *client = impl_state; + struct GNUNET_SERVICE_Client *client = cls; + struct GNUNET_MQ_Handle *mq; + struct GNUNET_MQ_Envelope *env; + struct GNUNET_MessageHeader *res; + size_t slen; - (void) mq; - GNUNET_assert (0 == client->msg_pos); - client->msg = NULL; - GNUNET_SCHEDULER_cancel (client->send_task); - client->send_task = NULL; + (void) msg; + slen = strlen (GNUNET_AGPL_URL) + 1; + env = GNUNET_MQ_msg_extra (res, + GNUNET_MESSAGE_TYPE_RESPONSE_AGPL, + slen); + memcpy (&res[1], + GNUNET_AGPL_URL, + slen); + mq = GNUNET_SERVICE_client_get_mq (client); + GNUNET_MQ_send (mq, + env); + GNUNET_SERVICE_client_continue (client); } /** - * Generic error handler, called with the appropriate - * error code and the same closure specified at the creation of - * the message queue. - * Not every message queue implementation supports an error handler. + * Low-level function to start a service if the scheduler + * is already running. Should only be used directly in + * special cases. * - * @param cls closure with our `struct GNUNET_SERVICE_Client` - * @param error error code + * The function will launch the service with the name @a service_name + * using the @a service_options to configure its shutdown + * behavior. When clients connect or disconnect, the respective + * @a connect_cb or @a disconnect_cb functions will be called. For + * messages received from the clients, the respective @a handlers will + * be invoked; for the closure of the handlers we use the return value + * from the @a connect_cb invocation of the respective client. + * + * Each handler MUST call #GNUNET_SERVICE_client_continue() after each + * message to receive further messages from this client. If + * #GNUNET_SERVICE_client_continue() is not called within a short + * time, a warning will be logged. If delays are expected, services + * should call #GNUNET_SERVICE_client_disable_continue_warning() to + * disable the warning. + * + * Clients sending invalid messages (based on @a handlers) will be + * dropped. Additionally, clients can be dropped at any time using + * #GNUNET_SERVICE_client_drop(). + * + * The service must be stopped using #GNUNET_SERVICE_stop(). + * + * @param service_name name of the service to run + * @param cfg configuration to use + * @param connect_cb function to call whenever a client connects + * @param disconnect_cb function to call whenever a client disconnects + * @param cls closure argument for @a connect_cb and @a disconnect_cb + * @param handlers NULL-terminated array of message handlers for the service, + * the closure will be set to the value returned by + * the @a connect_cb for the respective connection + * @return NULL on error */ -static void -service_mq_error_handler (void *cls, - enum GNUNET_MQ_Error error) +struct GNUNET_SERVICE_Handle * +GNUNET_SERVICE_start (const char *service_name, + const struct GNUNET_CONFIGURATION_Handle *cfg, + GNUNET_SERVICE_ConnectHandler connect_cb, + GNUNET_SERVICE_DisconnectHandler disconnect_cb, + void *cls, + const struct GNUNET_MQ_MessageHandler *handlers) { - struct GNUNET_SERVICE_Client *client = cls; - struct GNUNET_SERVICE_Handle *sh = client->sh; + struct GNUNET_SERVICE_Handle *sh; - if ( (GNUNET_MQ_ERROR_NO_MATCH == error) && - (GNUNET_NO == sh->require_found) ) + sh = GNUNET_new (struct GNUNET_SERVICE_Handle); + sh->service_name = service_name; + sh->cfg = cfg; + sh->connect_cb = connect_cb; + sh->disconnect_cb = disconnect_cb; + sh->cb_cls = cls; + sh->handlers = GNUNET_MQ_copy_handlers2 (handlers, + &return_agpl, + NULL); + if (GNUNET_OK != setup_service (sh)) { - GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, - "No handler for message of type %u found\n", - (unsigned int) client->warn_type); - GNUNET_SERVICE_client_continue (client); - return; /* ignore error */ + GNUNET_free_non_null (sh->handlers); + GNUNET_free (sh); + return NULL; } - GNUNET_SERVICE_client_drop (client); + do_resume (sh, + SUSPEND_STATE_NONE); + return sh; } /** - * Task run to warn about missing calls to #GNUNET_SERVICE_client_continue(). + * Stops a service that was started with #GNUNET_SERVICE_start(). * - * @param cls our `struct GNUNET_SERVICE_Client *` to process more requests from + * @param srv service to stop */ -static void -warn_no_client_continue (void *cls) +void +GNUNET_SERVICE_stop (struct GNUNET_SERVICE_Handle *srv) { - struct GNUNET_SERVICE_Client *client = cls; + struct GNUNET_SERVICE_Client *client; - GNUNET_break (0 != client->warn_type); /* type should never be 0 here, as we don't use 0 */ - client->warn_task - = GNUNET_SCHEDULER_add_delayed (GNUNET_TIME_UNIT_MINUTES, - &warn_no_client_continue, - client); - LOG (GNUNET_ERROR_TYPE_WARNING, - _("Processing code for message of type %u did not call `GNUNET_SERVICE_client_continue' after %s\n"), - (unsigned int) client->warn_type, - GNUNET_STRINGS_relative_time_to_string (GNUNET_TIME_absolute_get_duration (client->warn_start), - GNUNET_YES)); + GNUNET_SERVICE_suspend (srv); + while (NULL != (client = srv->clients_head)) + GNUNET_SERVICE_client_drop (client); + teardown_service (srv); + GNUNET_free_non_null (srv->handlers); + GNUNET_free (srv); } /** - * Functions with this signature are called whenever a - * complete message is received by the tokenizer for a client. + * Creates the "main" function for a GNUnet service. You + * should almost always use the #GNUNET_SERVICE_MAIN macro + * instead of calling this function directly (except + * for ARM, which should call this function directly). * - * Do not call #GNUNET_MST_destroy() from within - * the scope of this callback. + * The function will launch the service with the name @a service_name + * using the @a service_options to configure its shutdown + * behavior. Once the service is ready, the @a init_cb will be called + * for service-specific initialization. @a init_cb will be given the + * service handler which can be used to control the service's + * availability. When clients connect or disconnect, the respective + * @a connect_cb or @a disconnect_cb functions will be called. For + * messages received from the clients, the respective @a handlers will + * be invoked; for the closure of the handlers we use the return value + * from the @a connect_cb invocation of the respective client. * - * @param cls closure with the `struct GNUNET_SERVICE_Client *` - * @param message the actual message - * @return #GNUNET_OK on success, #GNUNET_SYSERR if the client was dropped - */ -static int -service_client_mst_cb (void *cls, - const struct GNUNET_MessageHeader *message) -{ - struct GNUNET_SERVICE_Client *client = cls; - - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Received message of type %u and size %u from client\n", - ntohs (message->type), - ntohs (message->size)); - GNUNET_assert (GNUNET_NO == client->needs_continue); - client->needs_continue = GNUNET_YES; - client->warn_type = ntohs (message->type); - client->warn_start = GNUNET_TIME_absolute_get (); - GNUNET_assert (NULL == client->warn_task); - client->warn_task - = GNUNET_SCHEDULER_add_delayed (GNUNET_TIME_UNIT_MINUTES, - &warn_no_client_continue, - client); - GNUNET_MQ_inject_message (client->mq, - message); - if (NULL != client->drop_task) - return GNUNET_SYSERR; - return GNUNET_OK; -} - - -/** - * A client sent us data. Receive and process it. If we are done, - * reschedule this task. + * Each handler MUST call #GNUNET_SERVICE_client_continue() after each + * message to receive further messages from this client. If + * #GNUNET_SERVICE_client_continue() is not called within a short + * time, a warning will be logged. If delays are expected, services + * should call #GNUNET_SERVICE_client_disable_continue_warning() to + * disable the warning. * - * @param cls the `struct GNUNET_SERVICE_Client` that sent us data. + * Clients sending invalid messages (based on @a handlers) will be + * dropped. Additionally, clients can be dropped at any time using + * #GNUNET_SERVICE_client_drop(). + * + * @param argc number of command-line arguments in @a argv + * @param argv array of command-line arguments + * @param service_name name of the service to run + * @param options options controlling shutdown of the service + * @param service_init_cb function to call once the service is ready + * @param connect_cb function to call whenever a client connects + * @param disconnect_cb function to call whenever a client disconnects + * @param cls closure argument for @a service_init_cb, @a connect_cb and @a disconnect_cb + * @param handlers NULL-terminated array of message handlers for the service, + * the closure will be set to the value returned by + * the @a connect_cb for the respective connection + * @return 0 on success, non-zero on error */ -static void -service_client_recv (void *cls) +int +GNUNET_SERVICE_run_ (int argc, + char *const *argv, + const char *service_name, + enum GNUNET_SERVICE_Options options, + GNUNET_SERVICE_InitCallback service_init_cb, + GNUNET_SERVICE_ConnectHandler connect_cb, + GNUNET_SERVICE_DisconnectHandler disconnect_cb, + void *cls, + const struct GNUNET_MQ_MessageHandler *handlers) { - struct GNUNET_SERVICE_Client *client = cls; + struct GNUNET_SERVICE_Handle sh; + char *cfg_filename; + char *opt_cfg_filename; + char *loglev; + const char *xdg; + char *logfile; + int do_daemonize; + unsigned long long skew_offset; + unsigned long long skew_variance; + long long clock_offset; + struct GNUNET_CONFIGURATION_Handle *cfg; int ret; + int err; - client->recv_task = NULL; - ret = GNUNET_MST_read (client->mst, - client->sock, - GNUNET_NO, - GNUNET_YES); - if (GNUNET_SYSERR == ret) - { - /* client closed connection (or IO error) */ - if (NULL == client->drop_task) - { - GNUNET_assert (GNUNET_NO == client->needs_continue); - GNUNET_SERVICE_client_drop (client); - } - return; - } - if (GNUNET_NO == ret) - return; /* more messages in buffer, wait for application - to be done processing */ - GNUNET_assert (GNUNET_OK == ret); - if (GNUNET_YES == client->needs_continue) - return; - if (NULL != client->recv_task) - return; - /* MST needs more data, re-schedule read job */ - client->recv_task - = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, - client->sock, - &service_client_recv, - client); -} - - -/** - * We have successfully accepted a connection from a client. Now - * setup the client (with the scheduler) and tell the application. - * - * @param sh service that accepted the client - * @param sock socket associated with the client - */ -static void -start_client (struct GNUNET_SERVICE_Handle *sh, - struct GNUNET_NETWORK_Handle *csock) -{ - struct GNUNET_SERVICE_Client *client; + struct GNUNET_GETOPT_CommandLineOption service_options[] = { + GNUNET_GETOPT_option_cfgfile (&opt_cfg_filename), + GNUNET_GETOPT_option_flag ('d', + "daemonize", + gettext_noop ("do daemonize (detach from terminal)"), + &do_daemonize), + GNUNET_GETOPT_option_help (NULL), + GNUNET_GETOPT_option_loglevel (&loglev), + GNUNET_GETOPT_option_logfile (&logfile), + GNUNET_GETOPT_option_version (PACKAGE_VERSION " " VCS_VERSION), + GNUNET_GETOPT_OPTION_END + }; - client = GNUNET_new (struct GNUNET_SERVICE_Client); - GNUNET_CONTAINER_DLL_insert (sh->clients_head, - sh->clients_tail, - client); - client->sh = sh; - client->sock = csock; - client->mq = GNUNET_MQ_queue_for_callbacks (&service_mq_send, - NULL, - &service_mq_cancel, - client, - sh->handlers, - &service_mq_error_handler, - client); - client->mst = GNUNET_MST_create (&service_client_mst_cb, - client); - if (NULL != sh->connect_cb) - client->user_context = sh->connect_cb (sh->cb_cls, - client, - client->mq); - GNUNET_MQ_set_handlers_closure (client->mq, - client->user_context); - client->recv_task - = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, - client->sock, - &service_client_recv, - client); -} + err = 1; + memset (&sh, + 0, + sizeof (sh)); + xdg = getenv ("XDG_CONFIG_HOME"); + if (NULL != xdg) + GNUNET_asprintf (&cfg_filename, + "%s%s%s", + xdg, + DIR_SEPARATOR_STR, + GNUNET_OS_project_data_get ()->config_file); + else + cfg_filename = GNUNET_strdup (GNUNET_OS_project_data_get ()->user_config_file); + sh.ready_confirm_fd = -1; + sh.options = options; + sh.cfg = cfg = GNUNET_CONFIGURATION_create (); + sh.service_init_cb = service_init_cb; + sh.connect_cb = connect_cb; + sh.disconnect_cb = disconnect_cb; + sh.cb_cls = cls; + sh.handlers = GNUNET_MQ_copy_handlers (handlers); + sh.service_name = service_name; + /* setup subsystems */ + loglev = NULL; + logfile = NULL; + opt_cfg_filename = NULL; + do_daemonize = 0; + ret = GNUNET_GETOPT_run (service_name, + service_options, + argc, + argv); + if (GNUNET_SYSERR == ret) + goto shutdown; + if (GNUNET_NO == ret) + { + err = 0; + goto shutdown; + } + if (GNUNET_OK != GNUNET_log_setup (service_name, + loglev, + logfile)) + { + GNUNET_break (0); + goto shutdown; + } + if (NULL != opt_cfg_filename) + { + if ( (GNUNET_YES != + GNUNET_DISK_file_test (opt_cfg_filename)) || + (GNUNET_SYSERR == + GNUNET_CONFIGURATION_load (cfg, + opt_cfg_filename)) ) + { + GNUNET_log (GNUNET_ERROR_TYPE_ERROR, + _("Malformed configuration file `%s', exit ...\n"), + opt_cfg_filename); + goto shutdown; + } + } + else + { + if (GNUNET_YES == + GNUNET_DISK_file_test (cfg_filename)) + { + if (GNUNET_SYSERR == + GNUNET_CONFIGURATION_load (cfg, + cfg_filename)) + { + GNUNET_log (GNUNET_ERROR_TYPE_ERROR, + _("Malformed configuration file `%s', exit ...\n"), + cfg_filename); + goto shutdown; + } + } + else + { + if (GNUNET_SYSERR == + GNUNET_CONFIGURATION_load (cfg, + NULL)) + { + GNUNET_log (GNUNET_ERROR_TYPE_ERROR, + _("Malformed configuration, exit ...\n")); + goto shutdown; + } + } + } + if (GNUNET_OK != setup_service (&sh)) + goto shutdown; + if ( (1 == do_daemonize) && + (GNUNET_OK != detach_terminal (&sh)) ) + { + GNUNET_break (0); + goto shutdown; + } + if (GNUNET_OK != set_user_id (&sh)) + goto shutdown; + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Service `%s' runs with configuration from `%s'\n", + service_name, + (NULL != opt_cfg_filename) ? opt_cfg_filename : cfg_filename); + if ((GNUNET_OK == + GNUNET_CONFIGURATION_get_value_number (sh.cfg, + "TESTING", + "SKEW_OFFSET", + &skew_offset)) && + (GNUNET_OK == + GNUNET_CONFIGURATION_get_value_number (sh.cfg, + "TESTING", + "SKEW_VARIANCE", + &skew_variance))) + { + clock_offset = skew_offset - skew_variance; + GNUNET_TIME_set_offset (clock_offset); + LOG (GNUNET_ERROR_TYPE_DEBUG, + "Skewing clock by %dll ms\n", + clock_offset); + } + GNUNET_RESOLVER_connect (sh.cfg); -/** - * Check if the given IP address is in the list of IP addresses. - * - * @param list a list of networks - * @param add the IP to check (in network byte order) - * @return #GNUNET_NO if the IP is not in the list, #GNUNET_YES if it it is - */ -static int -check_ipv4_listed (const struct GNUNET_STRINGS_IPv4NetworkPolicy *list, - const struct in_addr *add) -{ - unsigned int i; + /* actually run service */ + err = 0; + GNUNET_SCHEDULER_run (&service_main, + &sh); + /* shutdown */ + if (1 == do_daemonize) + pid_file_delete (&sh); - if (NULL == list) - return GNUNET_NO; - i = 0; - while ( (0 != list[i].network.s_addr) || - (0 != list[i].netmask.s_addr) ) +shutdown: + if (-1 != sh.ready_confirm_fd) { - if ((add->s_addr & list[i].netmask.s_addr) == - (list[i].network.s_addr & list[i].netmask.s_addr)) - return GNUNET_YES; - i++; + if (1 != WRITE (sh.ready_confirm_fd, + err ? "I" : "S", + 1)) + LOG_STRERROR (GNUNET_ERROR_TYPE_WARNING, + "write"); + GNUNET_break (0 == CLOSE (sh.ready_confirm_fd)); } - return GNUNET_NO; -} - +#if HAVE_MALLINFO + { + char *counter; -/** - * Check if the given IP address is in the list of IP addresses. - * - * @param list a list of networks - * @param ip the IP to check (in network byte order) - * @return #GNUNET_NO if the IP is not in the list, #GNUNET_YES if it it is - */ -static int -check_ipv6_listed (const struct GNUNET_STRINGS_IPv6NetworkPolicy *list, - const struct in6_addr *ip) -{ - unsigned int i; - unsigned int j; - struct in6_addr zero; + if ( (GNUNET_YES == + GNUNET_CONFIGURATION_have_value (sh.cfg, + service_name, + "GAUGER_HEAP")) && + (GNUNET_OK == + GNUNET_CONFIGURATION_get_value_string (sh.cfg, + service_name, + "GAUGER_HEAP", + &counter)) ) + { + struct mallinfo mi; - if (NULL == list) - return GNUNET_NO; - memset (&zero, - 0, - sizeof (struct in6_addr)); - i = 0; -NEXT: - while (0 != memcmp (&zero, - &list[i].network, - sizeof (struct in6_addr))) - { - for (j = 0; j < sizeof (struct in6_addr) / sizeof (int); j++) - if (((((int *) ip)[j] & ((int *) &list[i].netmask)[j])) != - (((int *) &list[i].network)[j] & ((int *) &list[i].netmask)[j])) - { - i++; - goto NEXT; - } - return GNUNET_YES; + mi = mallinfo (); + GAUGER (service_name, + counter, + mi.usmblks, + "blocks"); + GNUNET_free (counter); + } } - return GNUNET_NO; +#endif + teardown_service (&sh); + GNUNET_free_non_null (sh.handlers); + GNUNET_SPEEDUP_stop_ (); + GNUNET_CONFIGURATION_destroy (cfg); + GNUNET_free_non_null (logfile); + GNUNET_free_non_null (loglev); + GNUNET_free (cfg_filename); + GNUNET_free_non_null (opt_cfg_filename); + + return err ? GNUNET_SYSERR : sh.ret; } /** - * We have a client. Accept the incoming socket(s) (and reschedule - * the listen task). + * Suspend accepting connections from the listen socket temporarily. + * Resume activity using #GNUNET_SERVICE_resume. * - * @param cls the `struct ServiceListenContext` of the ready listen socket + * @param sh service to stop accepting connections. */ -static void -accept_client (void *cls) +void +GNUNET_SERVICE_suspend (struct GNUNET_SERVICE_Handle *sh) { - struct ServiceListenContext *slc = cls; - struct GNUNET_SERVICE_Handle *sh = slc->sh; - - slc->listen_task = NULL; - while (1) - { - struct GNUNET_NETWORK_Handle *sock; - const struct sockaddr_in *v4; - const struct sockaddr_in6 *v6; - struct sockaddr_storage sa; - socklen_t addrlen; - int ok; - - addrlen = sizeof (sa); - sock = GNUNET_NETWORK_socket_accept (slc->listen_socket, - (struct sockaddr *) &sa, - &addrlen); - if (NULL == sock) - break; - switch (sa.ss_family) - { - case AF_INET: - GNUNET_assert (addrlen == sizeof (struct sockaddr_in)); - v4 = (const struct sockaddr_in *) &sa; - ok = ( ( (NULL == sh->v4_allowed) || - (check_ipv4_listed (sh->v4_allowed, - &v4->sin_addr))) && - ( (NULL == sh->v4_denied) || - (! check_ipv4_listed (sh->v4_denied, - &v4->sin_addr)) ) ); - break; - case AF_INET6: - GNUNET_assert (addrlen == sizeof (struct sockaddr_in6)); - v6 = (const struct sockaddr_in6 *) &sa; - ok = ( ( (NULL == sh->v6_allowed) || - (check_ipv6_listed (sh->v6_allowed, - &v6->sin6_addr))) && - ( (NULL == sh->v6_denied) || - (! check_ipv6_listed (sh->v6_denied, - &v6->sin6_addr)) ) ); - break; -#ifndef WINDOWS - case AF_UNIX: - ok = GNUNET_OK; /* controlled using file-system ACL now */ - break; -#endif - default: - LOG (GNUNET_ERROR_TYPE_WARNING, - _("Unknown address family %d\n"), - sa.ss_family); - return; - } - if (! ok) - { - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Service rejected incoming connection from %s due to policy.\n", - GNUNET_a2s ((const struct sockaddr *) &sa, - addrlen)); - GNUNET_break (GNUNET_OK == - GNUNET_NETWORK_socket_close (sock)); - continue; - } - LOG (GNUNET_ERROR_TYPE_DEBUG, - "Service accepted incoming connection from %s.\n", - GNUNET_a2s ((const struct sockaddr *) &sa, - addrlen)); - start_client (slc->sh, - sock); - } - slc->listen_task - = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, - slc->listen_socket, - &accept_client, - slc); + do_suspend (sh, + SUSPEND_STATE_APP); } @@ -2419,17 +2480,8 @@ accept_client (void *cls) void GNUNET_SERVICE_resume (struct GNUNET_SERVICE_Handle *sh) { - struct ServiceListenContext *slc; - - for (slc = sh->slc_head; NULL != slc; slc = slc->next) - { - GNUNET_assert (NULL == slc->listen_task); - slc->listen_task - = GNUNET_SCHEDULER_add_read_net (GNUNET_TIME_UNIT_FOREVER_REL, - slc->listen_socket, - &accept_client, - slc); - } + do_resume (sh, + SUSPEND_STATE_APP); } @@ -2536,13 +2588,17 @@ finish_client_drop (void *cls) { GNUNET_break (GNUNET_OK == GNUNET_NETWORK_socket_close (c->sock)); + if ( (0 != (SUSPEND_STATE_EMFILE & sh->suspend_state)) && + (0 == (SUSPEND_STATE_SHUTDOWN & sh->suspend_state)) ) + do_resume (sh, + SUSPEND_STATE_EMFILE); } else { GNUNET_NETWORK_socket_free_memory_only_ (c->sock); } GNUNET_free (c); - if ( (GNUNET_YES == sh->got_shutdown) && + if ( (0 != (SUSPEND_STATE_SHUTDOWN & sh->suspend_state)) && (GNUNET_NO == have_non_monitor_clients (sh)) ) GNUNET_SERVICE_shutdown (sh); } @@ -2567,20 +2623,20 @@ GNUNET_SERVICE_client_drop (struct GNUNET_SERVICE_Client *c) "Client dropped: %p (MQ: %p)\n", c, c->mq); - #if EXECINFO - void *backtrace_array[MAX_TRACE_DEPTH]; - int num_backtrace_strings = backtrace (backtrace_array, MAX_TRACE_DEPTH); + { + void *backtrace_array[MAX_TRACE_DEPTH]; + int num_backtrace_strings = backtrace (backtrace_array, MAX_TRACE_DEPTH); char **backtrace_strings = - backtrace_symbols (backtrace_array, - t->num_backtrace_strings); + backtrace_symbols (backtrace_array, + t->num_backtrace_strings); for (unsigned int i = 0; i < num_backtrace_strings; i++) LOG (GNUNET_ERROR_TYPE_DEBUG, - "client drop trace %u: %s\n", - i, - backtrace_strings[i]); + "client drop trace %u: %s\n", + i, + backtrace_strings[i]); + } #endif - if (NULL != c->drop_task) { /* asked to drop twice! */ @@ -2624,8 +2680,9 @@ GNUNET_SERVICE_shutdown (struct GNUNET_SERVICE_Handle *sh) { struct GNUNET_SERVICE_Client *client; - GNUNET_SERVICE_suspend (sh); - sh->got_shutdown = GNUNET_NO; + if (0 == (sh->suspend_state & SUSPEND_STATE_SHUTDOWN)) + do_suspend (sh, + SUSPEND_STATE_SHUTDOWN); while (NULL != (client = sh->clients_head)) GNUNET_SERVICE_client_drop (client); } @@ -2647,8 +2704,8 @@ void GNUNET_SERVICE_client_mark_monitor (struct GNUNET_SERVICE_Client *c) { c->is_monitor = GNUNET_YES; - if ( (GNUNET_YES == c->sh->got_shutdown) && - (GNUNET_NO == have_non_monitor_clients (c->sh)) ) + if ( (0 != (SUSPEND_STATE_SHUTDOWN & c->sh->suspend_state) && + (GNUNET_NO == have_non_monitor_clients (c->sh)) ) ) GNUNET_SERVICE_shutdown (c->sh); }