clamd/tcpserver.c
e3aaff8e
 /*
e1cbc270
  *  Copyright (C) 2013-2019 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
  *  Copyright (C) 2007-2013 Sourcefire, Inc.
086eab5c
  *
  *  Authors: Tomasz Kojm, Török Edvin
e3aaff8e
  *
  *  This program is free software; you can redistribute it and/or modify
bb34cb31
  *  it under the terms of the GNU General Public License version 2 as
  *  published by the Free Software Foundation.
e3aaff8e
  *
  *  This program is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  *  GNU General Public License for more details.
  *
  *  You should have received a copy of the GNU General Public License
  *  along with this program; if not, write to the Free Software
48b7b4a7
  *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
  *  MA 02110-1301, USA.
e3aaff8e
  */
 
98ac8d19
 #if HAVE_CONFIG_H
 #include "clamav-config.h"
 #endif
 
e3aaff8e
 #include <stdio.h>
 #include <string.h>
 #include <sys/types.h>
ad3c01bf
 #ifdef HAVE_UNISTD_H
 #include <unistd.h>
 #endif
288057e9
 #ifndef _WIN32
e3aaff8e
 #include <sys/socket.h>
 #include <netinet/in.h>
2d70a403
 #include <arpa/inet.h>
f8f80da9
 #include <netdb.h>
67118e92
 #endif
e0bb54d7
 #include <errno.h>
e3aaff8e
 
bd8603aa
 #include "libclamav/clamav.h"
 
064b4a0c
 #include "shared/optparser.h"
bd8603aa
 #include "shared/output.h"
3b074c78
 #include "shared/misc.h"
bd8603aa
 
e3aaff8e
 #include "others.h"
 #include "server.h"
fc83da82
 #include "tcpserver.h"
a9d3aa14
 
8c241c57
 int tcpserver(int **lsockets, unsigned int *nlsockets, char *ipaddr, const struct optstruct *opts)
e3aaff8e
 {
8c241c57
     struct addrinfo hints, *info, *p;
d6968402
     char host[NI_MAXHOST], serv[NI_MAXSERV];
8c241c57
     int *sockets;
413ffee7
     int sockfd = 0, backlog;
8c241c57
     int *t;
     char *estr, port[10];
     int yes = 1;
     int res;
288057e9
     unsigned int i = 0;
     int num_fd;
e3aaff8e
 
8c241c57
     sockets = *lsockets;
e3aaff8e
 
b68375fd
     num_fd = sd_listen_fds(0);
288057e9
     if (num_fd > 2) {
b68375fd
         logg("!TCP: Received more than two file descriptors from systemd.\n");
         return -1;
288057e9
     } else if (num_fd > 0) {
b68375fd
         /* use socket passed by systemd */
         int i;
288057e9
         for (i = 0; i < num_fd; i += 1) {
b68375fd
             sockfd = SD_LISTEN_FDS_START + i;
288057e9
             if (sd_is_socket(sockfd, AF_INET, SOCK_STREAM, 1) == 1) {
b68375fd
                 /* correct socket */
                 logg("#TCP: Received AF_INET SOCK_STREAM socket from systemd.\n");
                 break;
288057e9
             } else if (sd_is_socket(sockfd, AF_INET6, SOCK_STREAM, 1) == 1) {
b68375fd
                 /* correct socket */
                 logg("#TCP: Received AF_INET6 SOCK_STREAM socket from systemd.\n");
                 break;
288057e9
             } else {
b68375fd
                 /* wrong socket */
                 sockfd = -2;
             }
         }
288057e9
         if (sockfd == -2) {
b68375fd
             logg("#TCP: No tcp AF_INET/AF_INET6 SOCK_STREAM socket received from systemd.\n");
             return -2;
         }
 
         t = realloc(sockets, sizeof(int) * (*nlsockets + 1));
         if (!(t)) {
             return -1;
         }
         sockets = t;
 
         sockets[*nlsockets] = sockfd;
         (*nlsockets)++;
         *lsockets = sockets;
         return 0;
     }
 
     /* create socket */
8c241c57
     snprintf(port, sizeof(port), "%lld", optget(opts, "TCPSocket")->numarg);
e3aaff8e
 
8c241c57
     memset(&hints, 0x00, sizeof(struct addrinfo));
288057e9
     hints.ai_family   = AF_UNSPEC;
8c241c57
     hints.ai_socktype = SOCK_STREAM;
288057e9
     hints.ai_flags    = AI_PASSIVE;
0ee809e8
 
d6968402
 #ifdef AI_ADDRCONFIG
     hints.ai_flags |= AI_ADDRCONFIG;
f0e1c2e6
 #endif
 
8c241c57
     if ((res = getaddrinfo(ipaddr, port, &hints, &info))) {
d6968402
         logg("!TCP: getaddrinfo failed: %s\n", gai_strerror(res));
8c241c57
         return -1;
8139fd99
     }
e3aaff8e
 
f0e1c2e6
     for (p = info; p != NULL; p = p->ai_next, i++) {
8c241c57
         t = realloc(sockets, sizeof(int) * (*nlsockets + 1));
         if (!(t)) {
288057e9
             for (i = 0; i < *nlsockets; i++)
3a831904
                 close(sockets[i]);
 
8c241c57
             return -1;
         }
         sockets = t;
 
         if ((sockfd = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1) {
             estr = strerror(errno);
             logg("!TCP: socket() error: %s\n", estr);
             continue;
         }
 
288057e9
         if (setsockopt(sockfd, SOL_SOCKET, SO_REUSEADDR, (void *)&yes, sizeof(yes)) == -1) {
8c241c57
             logg("!TCP: setsocktopt(SO_REUSEADDR) error: %s\n", strerror(errno));
         }
 
d6968402
 #ifdef IPV6_V6ONLY
         if (p->ai_family == AF_INET6 &&
             setsockopt(sockfd, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1) {
             estr = strerror(errno);
             logg("!TCP: setsocktopt(IPV6_V6ONLY) error: %s\n", estr);
         }
 #endif /* IPV6_V6ONLY */
 
cc071bf1
 #ifdef HAVE_GETNAMEINFO
d6968402
         if ((res = getnameinfo(p->ai_addr, p->ai_addrlen, host, sizeof(host),
288057e9
                                serv, sizeof(serv), NI_NUMERICHOST | NI_NUMERICSERV))) {
d6968402
             logg("!TCP: getnameinfo failed: %s\n", gai_strerror(res));
             host[0] = '\0';
             serv[0] = '\0';
         }
cc071bf1
 #else
288057e9
         if (ipaddr) {
             strncpy(host, ipaddr, sizeof(host));
             host[sizeof(host) - 1] = '\0';
         } else
             host[0] = '\0';
cc071bf1
         snprintf(serv, sizeof(serv), "%u", (unsigned int)(optget(opts, "TCPSocket")->numarg));
 #endif
288057e9
         if (bind(sockfd, p->ai_addr, p->ai_addrlen) == -1) {
8c241c57
             estr = strerror(errno);
d6968402
             logg("!TCP: Cannot bind to [%s]:%s: %s\n", host, serv, estr);
8c241c57
             closesocket(sockfd);
e3aaff8e
 
8c241c57
             continue;
         }
d6968402
         logg("#TCP: Bound to [%s]:%s\n", host, serv);
8c241c57
 
         backlog = optget(opts, "MaxConnectionQueueLength")->numarg;
         logg("#TCP: Setting connection queue length to %d\n", backlog);
 
288057e9
         if (listen(sockfd, backlog) == -1) {
8c241c57
             estr = strerror(errno);
d6968402
             logg("!TCP: Cannot listen on [%s]:%s: %s\n", host, serv, estr);
8c241c57
             closesocket(sockfd);
 
             continue;
         }
 
         sockets[*nlsockets] = sockfd;
         (*nlsockets)++;
e3aaff8e
     }
 
8c241c57
     freeaddrinfo(info);
     *lsockets = sockets;
 
     return 0;
e3aaff8e
 }