X-Git-Url: https://git.decadent.org.uk/gitweb/?p=odhcp6c.git;a=blobdiff_plain;f=src%2Fodhcp6c.c;h=e5e415c98409fc13e1548f20d043f1034f4f3a47;hp=9aaa008881d28067075552256b36b3f006b6a734;hb=bbcc9cfa44372f58cb33d556d9b7c57f6ee96b61;hpb=1aa59e83326585ec9e16c559865181baf4ef56c7

diff --git a/src/odhcp6c.c b/src/odhcp6c.c
index 9aaa008..e5e415c 100644
--- a/src/odhcp6c.c
+++ b/src/odhcp6c.c
@@ -1,5 +1,5 @@
 /**
- * Copyright (C) 2012 Steven Barth <steven@midlink.org>
+ * Copyright (C) 2012-2013 Steven Barth <steven@midlink.org>
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License v2 as published by
@@ -17,6 +17,7 @@
 #include <fcntl.h>
 #include <stdio.h>
 #include <stdlib.h>
+#include <stddef.h>
 #include <unistd.h>
 #include <syslog.h>
 #include <signal.h>
@@ -26,24 +27,34 @@
 #include <net/if.h>
 #include <sys/wait.h>
 #include <sys/syscall.h>
+#include <arpa/inet.h>
 
 #include "odhcp6c.h"
+#include "ra.h"
+
+#ifdef EXT_BFD_PING
+#include "bfd.h"
+#endif
 
 
 static void sighandler(int signal);
 static int usage(void);
 
-
 static uint8_t *state_data[_STATE_MAX] = {NULL};
 static size_t state_len[_STATE_MAX] = {0};
 
-static volatile int do_signal = 0;
+static volatile bool signal_io = false;
+static volatile bool signal_usr1 = false;
+static volatile bool signal_usr2 = false;
+static volatile bool signal_term = false;
+
+static int urandom_fd = -1, allow_slaac_only = 0;
+static bool bound = false, release = true;
+static time_t last_update = 0;
 
 
 int main(_unused int argc, char* const argv[])
 {
-	openlog("odhcp6c", LOG_PERROR | LOG_PID, LOG_DAEMON);
-
 	// Allocate ressources
 	const char *pidfile = NULL;
 	const char *script = "/usr/sbin/odhcp6c-update";
@@ -52,41 +63,75 @@ int main(_unused int argc, char* const argv[])
 	char *optpos;
 	uint16_t opttype;
 	enum odhcp6c_ia_mode ia_na_mode = IA_MODE_TRY;
-
-	bool help = false, daemonize = false;
-	int c, request_pd = 0, timeout = 0;
-	while ((c = getopt(argc, argv, "N:P:c:r:s:t:hdp:")) != -1) {
+	enum odhcp6c_ia_mode ia_pd_mode = IA_MODE_TRY;
+	static struct in6_addr ifid = IN6ADDR_ANY_INIT;
+	int sol_timeout = DHCPV6_SOL_MAX_RT;
+
+#ifdef EXT_BFD_PING
+	int bfd_interval = 0, bfd_loss = 3;
+#endif
+
+	bool help = false, daemonize = false, strict_options = false;
+	int logopt = LOG_PID;
+	int c, request_pd = 0;
+	while ((c = getopt(argc, argv, "S::N:P:FB:c:i:r:Rs:kt:hedp:")) != -1) {
 		switch (c) {
+		case 'S':
+			allow_slaac_only = (optarg) ? atoi(optarg) : -1;
+			break;
+
 		case 'N':
-			if (!strcmp(optarg, "force"))
+			if (!strcmp(optarg, "force")) {
 				ia_na_mode = IA_MODE_FORCE;
-			else if (!strcmp(optarg, "none"))
+				allow_slaac_only = -1;
+			} else if (!strcmp(optarg, "none")) {
 				ia_na_mode = IA_MODE_NONE;
-			else if (!strcmp(optarg, "try"))
+			} else if (!strcmp(optarg, "try")) {
 				ia_na_mode = IA_MODE_TRY;
-			else
+			} else{
 				help = true;
+			}
 			break;
 
 		case 'P':
+			if (allow_slaac_only >= 0 && allow_slaac_only < 10)
+				allow_slaac_only = 10;
+
 			request_pd = strtoul(optarg, NULL, 10);
 			if (request_pd == 0)
 				request_pd = -1;
+
+			break;
+
+		case 'F':
+			allow_slaac_only = -1;
+			ia_pd_mode = IA_MODE_FORCE;
 			break;
 
+#ifdef EXT_BFD_PING
+		case 'B':
+			bfd_interval = atoi(optarg);
+			break;
+#endif
+
 		case 'c':
 			l = script_unhexlify(&buf[4], sizeof(buf) - 4, optarg);
 			if (l > 0) {
 				buf[0] = 0;
 				buf[1] = DHCPV6_OPT_CLIENTID;
 				buf[2] = 0;
-				buf[4] = l;
+				buf[3] = l;
 				odhcp6c_add_state(STATE_CLIENT_ID, buf, l + 4);
 			} else {
 				help = true;
 			}
 			break;
 
+		case 'i':
+			if (inet_pton(AF_INET6, optarg, &ifid) != 1)
+				help = true;
+			break;
+
 		case 'r':
 			optpos = optarg;
 			while (optpos[0]) {
@@ -99,12 +144,24 @@ int main(_unused int argc, char* const argv[])
 			}
 			break;
 
+		case 'R':
+			strict_options = true;
+			break;
+
 		case 's':
 			script = optarg;
 			break;
 
+		case 'k':
+			release = false;
+			break;
+
 		case 't':
-			timeout = strtoul(optarg, NULL, 10);
+			sol_timeout = atoi(optarg);
+			break;
+
+		case 'e':
+			logopt |= LOG_PERROR;
 			break;
 
 		case 'd':
@@ -121,25 +178,27 @@ int main(_unused int argc, char* const argv[])
 		}
 	}
 
+	openlog("odhcp6c", logopt, LOG_DAEMON);
 	const char *ifname = argv[optind];
 
 	if (help || !ifname)
 		return usage();
 
-	if (init_dhcpv6(ifname, request_pd) || init_rtnetlink() ||
-			script_init(script, ifname)) {
-		syslog(LOG_ERR, "failed to initialize: %s", strerror(errno));
-		return 3;
-	}
-
+	signal(SIGIO, sighandler);
 	signal(SIGHUP, sighandler);
 	signal(SIGINT, sighandler);
-	signal(SIGALRM, sighandler);
 	signal(SIGCHLD, sighandler);
 	signal(SIGTERM, sighandler);
 	signal(SIGUSR1, sighandler);
 	signal(SIGUSR2, sighandler);
 
+	if ((urandom_fd = open("/dev/urandom", O_CLOEXEC | O_RDONLY)) < 0 ||
+			init_dhcpv6(ifname, request_pd, strict_options, sol_timeout) ||
+			ra_init(ifname, &ifid) || script_init(script, ifname)) {
+		syslog(LOG_ERR, "failed to initialize: %s", strerror(errno));
+		return 3;
+	}
+
 	if (daemonize) {
 		openlog("odhcp6c", LOG_PID, LOG_DAEMON); // Disable LOG_PERROR
 		if (daemon(0, 0)) {
@@ -166,116 +225,154 @@ int main(_unused int argc, char* const argv[])
 
 	script_call("started");
 
-	while (do_signal != SIGTERM) { // Main logic
+	while (!signal_term) { // Main logic
 		odhcp6c_clear_state(STATE_SERVER_ID);
-		odhcp6c_clear_state(STATE_SERVER_CAND);
+		odhcp6c_clear_state(STATE_IA_NA);
 		odhcp6c_clear_state(STATE_IA_PD);
-		odhcp6c_clear_state(STATE_IA_PD_LOST);
-		dhcpv6_set_ia_na_mode(ia_na_mode);
+		odhcp6c_clear_state(STATE_SNTP_IP);
+		odhcp6c_clear_state(STATE_NTP_IP);
+		odhcp6c_clear_state(STATE_NTP_FQDN);
+		odhcp6c_clear_state(STATE_SIP_IP);
+		odhcp6c_clear_state(STATE_SIP_FQDN);
+		dhcpv6_set_ia_mode(ia_na_mode, ia_pd_mode);
+		bound = false;
 
-		alarm(timeout);
-		do_signal = 0;
-		int res = dhcpv6_request(DHCPV6_MSG_SOLICIT);
+		syslog(LOG_NOTICE, "(re)starting transaction on %s", ifname);
 
-		if (res < 0) {
-			continue; // Might happen if we got a signal
-		} else if (res == DHCPV6_STATELESS) { // Stateless mode
-			while (do_signal == 0 || do_signal == SIGUSR1) {
-				do_signal = 0;
+		signal_usr1 = signal_usr2 = false;
+		int mode = dhcpv6_request(DHCPV6_MSG_SOLICIT);
+		odhcp6c_signal_process();
 
-				res = dhcpv6_request(DHCPV6_MSG_INFO_REQ);
-				if (do_signal == SIGUSR1)
-					continue;
-				else if (res < 0)
-					break;
-				else if (res > 0)
-					script_call("informed");
+		if (mode < 0)
+			continue;
 
-				alarm(0);
-				if (dhcpv6_poll_reconfigure() > 0)
-					script_call("informed");
+		do {
+			int res = dhcpv6_request(mode == DHCPV6_STATELESS ?
+					DHCPV6_MSG_INFO_REQ : DHCPV6_MSG_REQUEST);
+			bool signalled = odhcp6c_signal_process();
+
+			if (res > 0)
+				break;
+			else if (signalled) {
+				mode = -1;
+				break;
 			}
 
-			if (do_signal == SIGALRM)
-				script_call("timeout");
+			mode = dhcpv6_promote_server_cand();
+		} while (mode > DHCPV6_UNKNOWN);
 
+		if (mode < 0)
 			continue;
-		}
 
-		// Stateful mode
-		if (dhcpv6_request(DHCPV6_MSG_REQUEST) < 0)
-			continue;
+		switch (mode) {
+		case DHCPV6_STATELESS:
+			bound = true;
+			syslog(LOG_NOTICE, "entering stateless-mode on %s", ifname);
+
+			while (!signal_usr2 && !signal_term) {
+				signal_usr1 = false;
+				script_call("informed");
 
-		script_call("bound");
-		alarm(0);
+				int res = dhcpv6_poll_reconfigure();
+				odhcp6c_signal_process();
 
-		while (do_signal == 0 || do_signal == SIGUSR1) {
-			// Renew Cycle
-			// Wait for T1 to expire or until we get a reconfigure
-			int res = dhcpv6_poll_reconfigure();
-			if (res >= 0) {
 				if (res > 0)
+					continue;
+
+				if (signal_usr1) {
+					signal_usr1 = false; // Acknowledged
+					continue;
+				}
+				if (signal_usr2 || signal_term)
+					break;
+
+				res = dhcpv6_request(DHCPV6_MSG_INFO_REQ);
+				odhcp6c_signal_process();
+				if (signal_usr1)
+					continue;
+				else if (res < 0)
+					break;
+			}
+			break;
+
+		case DHCPV6_STATEFUL:
+			script_call("bound");
+			bound = true;
+			syslog(LOG_NOTICE, "entering stateful-mode on %s", ifname);
+#ifdef EXT_BFD_PING
+			if (bfd_interval > 0)
+				bfd_start(ifname, bfd_loss, bfd_interval);
+#endif
+
+			while (!signal_usr2 && !signal_term) {
+				// Renew Cycle
+				// Wait for T1 to expire or until we get a reconfigure
+				int res = dhcpv6_poll_reconfigure();
+				odhcp6c_signal_process();
+				if (res > 0) {
 					script_call("updated");
+					continue;
+				}
+
+				// Handle signal, if necessary
+				if (signal_usr1)
+					signal_usr1 = false; // Acknowledged
+				if (signal_usr2 || signal_term)
+					break; // Other signal type
+
+				// Send renew as T1 expired
+				size_t ia_pd_len, ia_na_len;
+				odhcp6c_get_state(STATE_IA_PD, &ia_pd_len);
+				odhcp6c_get_state(STATE_IA_NA, &ia_na_len);
+
+				// If we have any IAs, send renew, otherwise request
+				if (ia_pd_len == 0 && ia_na_len == 0)
+					res = dhcpv6_request(DHCPV6_MSG_REQUEST);
+				else
+					res = dhcpv6_request(DHCPV6_MSG_RENEW);
+
+				odhcp6c_signal_process();
+				if (res > 0) { // Renew was succesfull
+					// Publish updates
+					script_call("updated");
+					continue; // Renew was successful
+				}
+
+				odhcp6c_clear_state(STATE_SERVER_ID); // Remove binding
+
+				// If we have IAs, try rebind otherwise restart
+				res = dhcpv6_request(DHCPV6_MSG_REBIND);
+				odhcp6c_signal_process();
 
-				continue;
+				if (res > 0)
+					script_call("rebound");
+				else {
+#ifdef EXT_BFD_PING
+					bfd_stop();
+#endif
+					break;
+				}
 			}
+			break;
 
-			// Handle signal, if necessary
-			if (do_signal == SIGUSR1)
-				do_signal = 0; // Acknowledged
-			else if (do_signal > 0)
-				break; // Other signal type
-
-			size_t ia_pd_len, ia_na_len, ia_pd_new, ia_na_new;
-			odhcp6c_get_state(STATE_IA_PD, &ia_pd_len);
-			odhcp6c_get_state(STATE_IA_NA, &ia_na_len);
-
-			// If we have any IAs, send renew, otherwise request
-			int r;
-			if (ia_pd_len == 0 && ia_na_len == 0)
-				r = dhcpv6_request(DHCPV6_MSG_REQUEST);
-			else
-				r = dhcpv6_request(DHCPV6_MSG_RENEW);
-			if (r > 0) // Publish updates
-				script_call("updated");
-			if (r >= 0)
-				continue; // Renew was successful
-
-			odhcp6c_clear_state(STATE_SERVER_ID); // Remove binding
-
-			// If we have IAs, try rebind otherwise restart
-			res = dhcpv6_request(DHCPV6_MSG_REBIND);
-
-			odhcp6c_get_state(STATE_IA_PD, &ia_pd_new);
-			odhcp6c_get_state(STATE_IA_NA, &ia_na_new);
-			if (res < 0 || (ia_pd_new == 0 && ia_pd_len) ||
-					(ia_na_new == 0 && ia_na_len))
-				break; // We lost all our IAs, restart
-			else if (res > 0)
-				script_call("rebound");
+		default:
+			break;
 		}
 
-
 		size_t ia_pd_len, ia_na_len, server_id_len;
-		uint8_t *ia_pd = odhcp6c_get_state(STATE_IA_PD, &ia_pd_len);
+		odhcp6c_get_state(STATE_IA_PD, &ia_pd_len);
 		odhcp6c_get_state(STATE_IA_NA, &ia_na_len);
 		odhcp6c_get_state(STATE_SERVER_ID, &server_id_len);
 
 		// Add all prefixes to lost prefixes
-		odhcp6c_add_state(STATE_IA_PD_LOST, ia_pd, ia_pd_len);
-		odhcp6c_clear_state(STATE_IA_PD);
+		bound = false;
+		script_call("unbound");
 
-		if (do_signal == SIGALRM)
-			script_call("timeout");
-		else
-			script_call("unbound");
-
-		// Remove assigned addresses
-		if (ia_na_len > 0)
-			dhcpv6_remove_addrs();
-
-		if (server_id_len > 0 && (ia_pd_len > 0 || ia_na_len > 0))
+		if (server_id_len > 0 && (ia_pd_len > 0 || ia_na_len > 0) && release)
 			dhcpv6_request(DHCPV6_MSG_RELEASE);
+
+		odhcp6c_clear_state(STATE_IA_NA);
+		odhcp6c_clear_state(STATE_IA_PD);
 	}
 
 	script_call("stopped");
@@ -288,15 +385,24 @@ static int usage(void)
 	const char buf[] =
 	"Usage: odhcp6c [options] <interface>\n"
 	"\nFeature options:\n"
+	"	-S <time>	Wait at least <time> sec for a DHCP-server (0)\n"
 	"	-N <mode>	Mode for requesting addresses [try|force|none]\n"
 	"	-P <length>	Request IPv6-Prefix (0 = auto)\n"
+	"	-F		Force IPv6-Prefix\n"
+#ifdef EXT_BFD_PING
+	"	-B <interval>	Enable BFD ping check\n"
+#endif
 	"	-c <clientid>	Override client-ID (base-16 encoded)\n"
+	"	-i <iface-id>	Use a custom interface identifier for RA handling\n"
 	"	-r <options>	Options to be requested (comma-separated)\n"
+	"	-R		Do not request any options except those specified with -r\n"
 	"	-s <script>	Status update script (/usr/sbin/odhcp6c-update)\n"
-	"	-t <timeout>	Request timeout after which the script is called\n"
+	"	-k		Don't send a RELEASE when stopping\n"
+	"	-t <seconds>	Maximum timeout for DHCPv6-SOLICIT (120)\n"
 	"\nInvocation options:\n"
 	"	-p <pidfile>	Set pidfile (/var/run/6relayd.pid)\n"
 	"	-d		Daemonize\n"
+	"	-e		Write logmessages to stderr\n"
 	//"	-v		Increase logging verbosity\n"
 	"	-h		Show this help\n\n";
 	write(STDERR_FILENO, buf, sizeof(buf));
@@ -317,6 +423,8 @@ static uint8_t* odhcp6c_resize_state(enum odhcp6c_state state, ssize_t len)
 {
 	if (len == 0)
 		return state_data[state] + state_len[state];
+	else if (state_len[state] + len > 1024)
+		return NULL;
 
 	uint8_t *n = realloc(state_data[state], state_len[state] + len);
 	if (n || state_len[state] + len == 0) {
@@ -328,9 +436,27 @@ static uint8_t* odhcp6c_resize_state(enum odhcp6c_state state, ssize_t len)
 }
 
 
-bool odhcp6c_signal_is_pending(void)
+bool odhcp6c_signal_process(void)
 {
-	return do_signal != 0;
+	while (signal_io) {
+		signal_io = false;
+
+		bool ra_updated = ra_process();
+
+		if (ra_link_up())
+			signal_usr2 = true;
+
+		if (ra_updated && (bound || allow_slaac_only == 0))
+			script_call("ra-updated"); // Immediate process urgent events
+		else if (ra_updated && !bound && allow_slaac_only > 0)
+			script_delay_call("ra-updated", allow_slaac_only);
+
+#ifdef EXT_BFD_PING
+		bfd_receive();
+#endif
+	}
+
+	return signal_usr1 || signal_usr2 || signal_term;
 }
 
 
@@ -347,6 +473,20 @@ void odhcp6c_add_state(enum odhcp6c_state state, const void *data, size_t len)
 		memcpy(n, data, len);
 }
 
+void odhcp6c_insert_state(enum odhcp6c_state state, size_t offset, const void *data, size_t len)
+{
+	ssize_t len_after = state_len[state] - offset;
+	if (len_after < 0)
+		return;
+
+	uint8_t *n = odhcp6c_resize_state(state, len);
+	if (n) {
+		uint8_t *sdata = state_data[state];
+
+		memmove(sdata + offset + len, sdata + offset, len_after);
+		memcpy(sdata + offset, data, len);
+	}
+}
 
 size_t odhcp6c_remove_state(enum odhcp6c_state state, size_t offset, size_t len)
 {
@@ -360,16 +500,15 @@ size_t odhcp6c_remove_state(enum odhcp6c_state state, size_t offset, size_t len)
 }
 
 
-bool odhcp6c_commit_state(enum odhcp6c_state state, size_t old_len)
+void* odhcp6c_move_state(enum odhcp6c_state state, size_t *len)
 {
-	size_t new_len = state_len[state] - old_len;
-	uint8_t *old_data = state_data[state], *new_data = old_data + old_len;
-	bool upd = new_len != old_len || memcmp(old_data, new_data, new_len);
+	*len = state_len[state];
+	void *data = state_data[state];
 
-	memmove(old_data, new_data, new_len);
-	odhcp6c_resize_state(state, -old_len);
+	state_len[state] = 0;
+	state_data[state] = NULL;
 
-	return upd;
+	return data;
 }
 
 
@@ -380,16 +519,128 @@ void* odhcp6c_get_state(enum odhcp6c_state state, size_t *len)
 }
 
 
+struct odhcp6c_entry* odhcp6c_find_entry(enum odhcp6c_state state, const struct odhcp6c_entry *new)
+{
+	size_t len, cmplen = offsetof(struct odhcp6c_entry, target) + new->length / 8;
+	struct odhcp6c_entry *start = odhcp6c_get_state(state, &len);
+	struct odhcp6c_entry *x = NULL;
+
+	for (struct odhcp6c_entry *c = start; !x && c < &start[len/sizeof(*c)]; ++c)
+		if (!memcmp(c, new, cmplen))
+			return c;
+
+	return NULL;
+}
+
+
+bool odhcp6c_update_entry_safe(enum odhcp6c_state state, struct odhcp6c_entry *new, uint32_t safe)
+{
+	size_t len;
+	struct odhcp6c_entry *x = odhcp6c_find_entry(state, new);
+	struct odhcp6c_entry *start = odhcp6c_get_state(state, &len);
+
+	if (x && x->valid > new->valid && new->valid < safe)
+		new->valid = safe;
+
+	if (new->valid > 0) {
+		if (x) {
+			if (new->valid >= x->valid && new->valid - x->valid < 60 &&
+					new->preferred >= x->preferred &&
+					new->preferred - x->preferred < 60 &&
+					x->class == new->class)
+				return false;
+			x->valid = new->valid;
+			x->preferred = new->preferred;
+			x->t1 = new->t1;
+			x->t2 = new->t2;
+			x->class = new->class;
+		} else {
+			odhcp6c_add_state(state, new, sizeof(*new));
+		}
+	} else if (x) {
+		odhcp6c_remove_state(state, (x - start) * sizeof(*x), sizeof(*x));
+	}
+	return true;
+}
+
+
+bool odhcp6c_update_entry(enum odhcp6c_state state, struct odhcp6c_entry *new)
+{
+	return odhcp6c_update_entry_safe(state, new, 0);
+}
+
+
+static void odhcp6c_expire_list(enum odhcp6c_state state, uint32_t elapsed)
+{
+	size_t len;
+	struct odhcp6c_entry *start = odhcp6c_get_state(state, &len);
+	for (struct odhcp6c_entry *c = start; c < &start[len / sizeof(*c)]; ++c) {
+		if (c->t1 < elapsed)
+			c->t1 = 0;
+		else if (c->t1 != UINT32_MAX)
+			c->t1 -= elapsed;
+
+		if (c->t2 < elapsed)
+			c->t2 = 0;
+		else if (c->t2 != UINT32_MAX)
+			c->t2 -= elapsed;
+
+		if (c->preferred < elapsed)
+			c->preferred = 0;
+		else if (c->preferred != UINT32_MAX)
+			c->preferred -= elapsed;
+
+		if (c->valid < elapsed)
+			c->valid = 0;
+		else if (c->valid != UINT32_MAX)
+			c->valid -= elapsed;
+
+		if (!c->valid)
+			odhcp6c_remove_state(state, (c - start) * sizeof(*c), sizeof(*c));
+	}
+}
+
+
+void odhcp6c_expire(void)
+{
+	time_t now = odhcp6c_get_milli_time() / 1000;
+	uint32_t elapsed = (last_update > 0) ? now - last_update : 0;
+	last_update = now;
+
+	odhcp6c_expire_list(STATE_RA_PREFIX, elapsed);
+	odhcp6c_expire_list(STATE_RA_ROUTE, elapsed);
+	odhcp6c_expire_list(STATE_RA_DNS, elapsed);
+	odhcp6c_expire_list(STATE_IA_NA, elapsed);
+	odhcp6c_expire_list(STATE_IA_PD, elapsed);
+}
+
+
+uint32_t odhcp6c_elapsed(void)
+{
+	return odhcp6c_get_milli_time() / 1000 - last_update;
+}
+
+
+void odhcp6c_random(void *buf, size_t len)
+{
+	read(urandom_fd, buf, len);
+}
+
+bool odhcp6c_is_bound(void)
+{
+	return bound;
+}
+
 static void sighandler(int signal)
 {
 	if (signal == SIGCHLD)
 		while (waitpid(-1, NULL, WNOHANG) > 0);
 	else if (signal == SIGUSR1)
-		do_signal = SIGUSR1;
+		signal_usr1 = true;
 	else if (signal == SIGUSR2)
-		do_signal = SIGUSR2;
-	else if (signal == SIGALRM)
-		do_signal = SIGALRM;
+		signal_usr2 = true;
+	else if (signal == SIGIO)
+		signal_io = true;
 	else
-		do_signal = SIGTERM;
+		signal_term = true;
 }