dhcpv6: rework option passthrough logic
[project/odhcp6c.git] / src / ra.c
index 122f99eea4a1701f814a0d7c62e229777a94075e..299762e57bcb0247fe88bf1baa6f755c84f37962 100644 (file)
--- a/src/ra.c
+++ b/src/ra.c
@@ -1,5 +1,6 @@
 /**
  * Copyright (C) 2012-2014 Steven Barth <steven@midlink.org>
+ * Copyright (C) 2017-2018 Hans Dedecker <dedeckeh@gmail.com>
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License v2 as published by
@@ -20,6 +21,8 @@
 #include <stdbool.h>
 #include <syslog.h>
 #include <unistd.h>
+#include <resolv.h>
+#include <alloca.h>
 
 #include <net/if.h>
 #include <arpa/inet.h>
@@ -45,7 +48,6 @@
 #include "odhcp6c.h"
 #include "ra.h"
 
-
 static bool nocarrier = false;
 
 static int sock = -1, rtnl = -1;
@@ -53,6 +55,8 @@ static int if_index = 0;
 static char if_name[IF_NAMESIZE] = {0};
 static volatile int rs_attempt = 0;
 static struct in6_addr lladdr = IN6ADDR_ANY_INIT;
+static unsigned int ra_options = 0;
+static unsigned int ra_holdoff_interval = 0;
 
 struct {
        struct icmp6_hdr hdr;
@@ -62,11 +66,14 @@ struct {
        .lladdr = {ND_OPT_SOURCE_LINKADDR, 1, {0}},
 };
 
-
 static void ra_send_rs(int signal __attribute__((unused)));
 
-int ra_init(const char *ifname, const struct in6_addr *ifid)
+int ra_init(const char *ifname, const struct in6_addr *ifid,
+               unsigned int options, unsigned int holdoff_interval)
 {
+       ra_options = options;
+       ra_holdoff_interval = holdoff_interval;
+
        const pid_t ourpid = getpid();
        sock = socket(AF_INET6, SOCK_RAW | SOCK_CLOEXEC, IPPROTO_ICMPV6);
        if (sock < 0)
@@ -138,7 +145,6 @@ int ra_init(const char *ifname, const struct in6_addr *ifid)
        return 0;
 }
 
-
 static void ra_send_rs(int signal __attribute__((unused)))
 {
        const struct sockaddr_in6 dest = {AF_INET6, 0, 0, ALL_IPV6_ROUTERS, if_index};
@@ -156,15 +162,14 @@ static void ra_send_rs(int signal __attribute__((unused)))
                alarm(4);
 }
 
-
 static int16_t pref_to_priority(uint8_t flags)
 {
        flags = (flags >> 3) & 0x03;
+
        return (flags == 0x0) ? 512 : (flags == 0x1) ? 384 :
                        (flags == 0x3) ? 640 : -1;
 }
 
-
 bool ra_link_up(void)
 {
        static bool firstcall = true;
@@ -173,12 +178,12 @@ bool ra_link_up(void)
                struct ifinfomsg msg;
                uint8_t pad[4000];
        } resp;
-
        bool ret = false;
        ssize_t read;
 
        do {
                read = recv(rtnl, &resp, sizeof(resp), MSG_DONTWAIT);
+
                if (read < 0 || !NLMSG_OK(&resp.hdr, (size_t)read) ||
                                resp.hdr.nlmsg_type != RTM_NEWLINK ||
                                resp.msg.ifi_index != if_index)
@@ -239,32 +244,40 @@ static bool ra_icmpv6_valid(struct sockaddr_in6 *source, int hlim, uint8_t *data
 int ra_conf_hoplimit(int newvalue)
 {
        static int value = 0;
+
        if (newvalue > 0)
                value = newvalue;
+
        return value;
 }
 
 int ra_conf_mtu(int newvalue)
 {
        static int value = 0;
+
        if (newvalue >= 1280 && newvalue <= 65535)
                value = newvalue;
+
        return value;
 }
 
 int ra_conf_reachable(int newvalue)
 {
        static int value = 0;
+
        if (newvalue > 0 && newvalue <= 3600000)
                value = newvalue;
+
        return value;
 }
 
 int ra_conf_retransmit(int newvalue)
 {
        static int value = 0;
+
        if (newvalue > 0 && newvalue <= 60000)
                value = newvalue;
+
        return value;
 }
 
@@ -272,11 +285,17 @@ bool ra_process(void)
 {
        bool found = false;
        bool changed = false;
-       uint8_t buf[1500], cmsg_buf[128];
+       uint8_t buf[1500] _aligned(4);
+       union {
+               struct cmsghdr hdr;
+               uint8_t buf[CMSG_SPACE(sizeof(int))];
+       } cmsg_buf;
        struct nd_router_advert *adv = (struct nd_router_advert*)buf;
-       struct odhcp6c_entry entry = {IN6ADDR_ANY_INIT, 0, 0, IN6ADDR_ANY_INIT, 0, 0, 0, 0, 0, 0};
+       struct odhcp6c_entry *entry = alloca(sizeof(*entry) + 256);
        const struct in6_addr any = IN6ADDR_ANY_INIT;
 
+       memset(entry, 0, sizeof(*entry));
+
        if (IN6_IS_ADDR_UNSPECIFIED(&lladdr)) {
                struct sockaddr_in6 addr = {AF_INET6, 0, 0, ALL_IPV6_ROUTERS, if_index};
                socklen_t alen = sizeof(addr);
@@ -297,7 +316,7 @@ bool ra_process(void)
                        .msg_namelen = sizeof(from),
                        .msg_iov = &iov,
                        .msg_iovlen = 1,
-                       .msg_control = cmsg_buf,
+                       .msg_control = cmsg_buf.buf,
                        .msg_controllen = sizeof(cmsg_buf),
                        .msg_flags = 0
                };
@@ -332,15 +351,17 @@ bool ra_process(void)
                uint32_t router_valid = ntohs(adv->nd_ra_router_lifetime);
 
                // Parse default route
-               entry.target = any;
-               entry.length = 0;
-               entry.router = from.sin6_addr;
-               entry.priority = pref_to_priority(adv->nd_ra_flags_reserved);
-               if (entry.priority < 0)
-                       entry.priority = pref_to_priority(0);
-               entry.valid = router_valid;
-               entry.preferred = entry.valid;
-               changed |= odhcp6c_update_entry(STATE_RA_ROUTE, &entry, 0, true);
+               entry->target = any;
+               entry->length = 0;
+               entry->router = from.sin6_addr;
+               entry->priority = pref_to_priority(adv->nd_ra_flags_reserved);
+               if (entry->priority < 0)
+                       entry->priority = pref_to_priority(0);
+
+               entry->valid = router_valid;
+               entry->preferred = entry->valid;
+               changed |= odhcp6c_update_entry(STATE_RA_ROUTE, entry,
+                                               0, ra_holdoff_interval);
 
                // Parse hoplimit
                ra_conf_hoplimit(adv->nd_ra_curhoplimit);
@@ -356,69 +377,107 @@ bool ra_process(void)
                                uint32_t *mtu = (uint32_t*)&opt->data[2];
                                ra_conf_mtu(ntohl(*mtu));
                        } else if (opt->type == ND_OPT_ROUTE_INFORMATION && opt->len <= 3) {
-                               entry.router = from.sin6_addr;
-                               entry.target = any;
-                               entry.priority = pref_to_priority(opt->data[1]);
-                               entry.length = opt->data[0];
+                               entry->router = from.sin6_addr;
+                               entry->target = any;
+                               entry->priority = pref_to_priority(opt->data[1]);
+                               entry->length = opt->data[0];
                                uint32_t *valid = (uint32_t*)&opt->data[2];
-                               entry.valid = ntohl(*valid);
-                               memcpy(&entry.target, &opt->data[6], (opt->len - 1) * 8);
+                               entry->valid = ntohl(*valid);
+                               memcpy(&entry->target, &opt->data[6], (opt->len - 1) * 8);
 
-                               if (entry.length > 128 || IN6_IS_ADDR_LINKLOCAL(&entry.target)
-                                               || IN6_IS_ADDR_LOOPBACK(&entry.target)
-                                               || IN6_IS_ADDR_MULTICAST(&entry.target))
+                               if (entry->length > 128 || IN6_IS_ADDR_LINKLOCAL(&entry->target)
+                                               || IN6_IS_ADDR_LOOPBACK(&entry->target)
+                                               || IN6_IS_ADDR_MULTICAST(&entry->target))
                                        continue;
 
-                               if (entry.priority > 0)
-                                       changed |= odhcp6c_update_entry(STATE_RA_ROUTE, &entry, 0, true);
+                               if (entry->priority > 0)
+                                       changed |= odhcp6c_update_entry(STATE_RA_ROUTE, entry,
+                                                                       0, ra_holdoff_interval);
                        } else if (opt->type == ND_OPT_PREFIX_INFORMATION && opt->len == 4) {
                                struct nd_opt_prefix_info *pinfo = (struct nd_opt_prefix_info*)opt;
-                               entry.router = any;
-                               entry.target = pinfo->nd_opt_pi_prefix;
-                               entry.priority = 256;
-                               entry.length = pinfo->nd_opt_pi_prefix_len;
-                               entry.valid = ntohl(pinfo->nd_opt_pi_valid_time);
-                               entry.preferred = ntohl(pinfo->nd_opt_pi_preferred_time);
-
-                               if (entry.length > 128 || IN6_IS_ADDR_LINKLOCAL(&entry.target)
-                                               || IN6_IS_ADDR_LOOPBACK(&entry.target)
-                                               || IN6_IS_ADDR_MULTICAST(&entry.target)
-                                               || entry.valid < entry.preferred)
+                               entry->router = any;
+                               entry->target = pinfo->nd_opt_pi_prefix;
+                               entry->priority = 256;
+                               entry->length = pinfo->nd_opt_pi_prefix_len;
+                               entry->valid = ntohl(pinfo->nd_opt_pi_valid_time);
+                               entry->preferred = ntohl(pinfo->nd_opt_pi_preferred_time);
+
+                               if (entry->length > 128 || IN6_IS_ADDR_LINKLOCAL(&entry->target)
+                                               || IN6_IS_ADDR_LOOPBACK(&entry->target)
+                                               || IN6_IS_ADDR_MULTICAST(&entry->target)
+                                               || entry->valid < entry->preferred)
                                        continue;
 
                                if (pinfo->nd_opt_pi_flags_reserved & ND_OPT_PI_FLAG_ONLINK)
-                                       changed |= odhcp6c_update_entry(STATE_RA_ROUTE, &entry, 7200, true);
+                                       changed |= odhcp6c_update_entry(STATE_RA_ROUTE, entry,
+                                                                       7200, ra_holdoff_interval);
 
                                if (!(pinfo->nd_opt_pi_flags_reserved & ND_OPT_PI_FLAG_AUTO) ||
                                                pinfo->nd_opt_pi_prefix_len != 64)
                                        continue;
 
-                               entry.target.s6_addr32[2] = lladdr.s6_addr32[2];
-                               entry.target.s6_addr32[3] = lladdr.s6_addr32[3];
+                               entry->target.s6_addr32[2] = lladdr.s6_addr32[2];
+                               entry->target.s6_addr32[3] = lladdr.s6_addr32[3];
 
-                               changed |= odhcp6c_update_entry(STATE_RA_PREFIX, &entry, 7200, true);
+                               changed |= odhcp6c_update_entry(STATE_RA_PREFIX, entry,
+                                                               7200, ra_holdoff_interval);
                        } else if (opt->type == ND_OPT_RECURSIVE_DNS && opt->len > 2) {
-                               entry.router = from.sin6_addr;
-                               entry.priority = 0;
-                               entry.length = 128;
+                               entry->router = from.sin6_addr;
+                               entry->priority = 0;
+                               entry->length = 128;
                                uint32_t *valid = (uint32_t*)&opt->data[2];
-                               entry.valid = ntohl(*valid);
-                               entry.preferred = 0;
+                               entry->valid = ntohl(*valid);
+                               entry->preferred = 0;
 
                                for (ssize_t i = 0; i < (opt->len - 1) / 2; ++i) {
-                                       memcpy(&entry.target, &opt->data[6 + i * sizeof(entry.target)],
-                                                       sizeof(entry.target));
-                                       changed |= odhcp6c_update_entry(STATE_RA_DNS, &entry, 0, true);
+                                       memcpy(&entry->target, &opt->data[6 + i * sizeof(entry->target)],
+                                                       sizeof(entry->target));
+                                       changed |= odhcp6c_update_entry(STATE_RA_DNS, entry,
+                                                                       0, ra_holdoff_interval);
+                               }
+                       } else if (opt->type == ND_OPT_DNSSL && opt->len > 1) {
+                               uint32_t *valid = (uint32_t*)&opt->data[2];
+                               uint8_t *buf = &opt->data[6];
+                               uint8_t *end = &buf[(opt->len - 1) * 8];
+
+                               entry->router = from.sin6_addr;
+                               entry->valid = ntohl(*valid);
+
+                               while (buf < end) {
+                                       int len = dn_expand(buf, end, buf, (char*)entry->auxtarget, 256);
+                                       if (len < 1)
+                                               break;
+
+                                       buf = &buf[len];
+                                       entry->auxlen = strlen((char*)entry->auxtarget);
+
+                                       if (entry->auxlen == 0)
+                                               continue;
+
+                                       changed |= odhcp6c_update_entry(STATE_RA_SEARCH, entry,
+                                                                       0, ra_holdoff_interval);
+                                       entry->auxlen = 0;
                                }
                        }
                }
 
-               size_t ra_dns_len;
-               struct odhcp6c_entry *entry = odhcp6c_get_state(STATE_RA_DNS, &ra_dns_len);
-               for (size_t i = 0; i < ra_dns_len / sizeof(*entry); ++i)
-                       if (IN6_ARE_ADDR_EQUAL(&entry[i].router, &from.sin6_addr) &&
-                                       entry[i].valid > router_valid)
-                               entry[i].valid = router_valid;
+               if (ra_options & RA_RDNSS_DEFAULT_LIFETIME) {
+                       int states[2] = {STATE_RA_DNS, STATE_RA_SEARCH};
+
+                       for (size_t i = 0; i < 2; ++i) {
+                               size_t ra_dns_len;
+                               uint8_t *start = odhcp6c_get_state(states[i], &ra_dns_len);
+
+                               for (struct odhcp6c_entry *c = (struct odhcp6c_entry*)start;
+                                                       (uint8_t*)c < &start[ra_dns_len] &&
+                                                       (uint8_t*)odhcp6c_next_entry(c) <= &start[ra_dns_len];
+                                                       c = odhcp6c_next_entry(c)) {
+                                       if (IN6_ARE_ADDR_EQUAL(&c->router, &from.sin6_addr) &&
+                                                       c->valid > router_valid)
+                                               c->valid = router_valid;
+                               }
+                       }
+               }
        }
 
        if (found)