2 * util/netevent.c - event notification
4 * Copyright (c) 2007, NLnet Labs. All rights reserved.
6 * This software is open source.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * Redistributions of source code must retain the above copyright notice,
13 * this list of conditions and the following disclaimer.
15 * Redistributions in binary form must reproduce the above copyright notice,
16 * this list of conditions and the following disclaimer in the documentation
17 * and/or other materials provided with the distribution.
19 * Neither the name of the NLNET LABS nor the names of its contributors may
20 * be used to endorse or promote products derived from this software without
21 * specific prior written permission.
23 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
24 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
25 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
26 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
27 * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
28 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
29 * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
30 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
39 * This file contains event notification functions.
42 #include "util/netevent.h"
43 #include "util/ub_event.h"
45 #include "util/net_help.h"
46 #include "util/tcp_conn_limit.h"
47 #include "util/fptr_wlist.h"
48 #include "sldns/pkthdr.h"
49 #include "sldns/sbuffer.h"
50 #include "sldns/str2wire.h"
51 #include "dnstap/dnstap.h"
52 #include "dnscrypt/dnscrypt.h"
53 #include "services/listen_dnsport.h"
54 #ifdef HAVE_OPENSSL_SSL_H
55 #include <openssl/ssl.h>
57 #ifdef HAVE_OPENSSL_ERR_H
58 #include <openssl/err.h>
61 /* -------- Start of local definitions -------- */
62 /** if CMSG_ALIGN is not defined on this platform, a workaround */
65 # define CMSG_ALIGN(n) __CMSG_ALIGN(n)
66 # elif defined(CMSG_DATA_ALIGN)
67 # define CMSG_ALIGN _CMSG_DATA_ALIGN
69 # define CMSG_ALIGN(len) (((len)+sizeof(long)-1) & ~(sizeof(long)-1))
73 /** if CMSG_LEN is not defined on this platform, a workaround */
75 # define CMSG_LEN(len) (CMSG_ALIGN(sizeof(struct cmsghdr))+(len))
78 /** if CMSG_SPACE is not defined on this platform, a workaround */
80 # ifdef _CMSG_HDR_ALIGN
81 # define CMSG_SPACE(l) (CMSG_ALIGN(l)+_CMSG_HDR_ALIGN(sizeof(struct cmsghdr)))
83 # define CMSG_SPACE(l) (CMSG_ALIGN(l)+CMSG_ALIGN(sizeof(struct cmsghdr)))
87 /** The TCP writing query timeout in milliseconds */
88 #define TCP_QUERY_TIMEOUT 120000
89 /** The minimum actual TCP timeout to use, regardless of what we advertise,
91 #define TCP_QUERY_TIMEOUT_MINIMUM 200
93 #ifndef NONBLOCKING_IS_BROKEN
94 /** number of UDP reads to perform per read indication from select */
95 #define NUM_UDP_PER_SELECT 100
97 #define NUM_UDP_PER_SELECT 1
101 * The internal event structure for keeping ub_event info for the event.
102 * Possibly other structures (list, tree) this is part of.
104 struct internal_event {
106 struct comm_base* base;
107 /** ub_event event type */
112 * Internal base structure, so that every thread has its own events.
114 struct internal_base {
115 /** ub_event event_base type. */
116 struct ub_event_base* base;
117 /** seconds time pointer points here */
119 /** timeval with current time */
121 /** the event used for slow_accept timeouts */
122 struct ub_event* slow_accept;
123 /** true if slow_accept is enabled */
124 int slow_accept_enabled;
128 * Internal timer structure, to store timer event in.
130 struct internal_timer {
131 /** the super struct from which derived */
132 struct comm_timer super;
134 struct comm_base* base;
135 /** ub_event event type */
137 /** is timer enabled */
142 * Internal signal structure, to store signal event in.
144 struct internal_signal {
145 /** ub_event event type */
147 /** next in signal list */
148 struct internal_signal* next;
151 /** create a tcp handler with a parent */
152 static struct comm_point* comm_point_create_tcp_handler(
153 struct comm_base *base, struct comm_point* parent, size_t bufsize,
154 struct sldns_buffer* spoolbuf, comm_point_callback_type* callback,
157 /* -------- End of local definitions -------- */
160 comm_base_create(int sigs)
162 struct comm_base* b = (struct comm_base*)calloc(1,
163 sizeof(struct comm_base));
164 const char *evnm="event", *evsys="", *evmethod="";
168 b->eb = (struct internal_base*)calloc(1, sizeof(struct internal_base));
173 b->eb->base = ub_default_event_base(sigs, &b->eb->secs, &b->eb->now);
180 ub_get_event_sys(b->eb->base, &evnm, &evsys, &evmethod);
181 verbose(VERB_ALGO, "%s %s uses %s method.", evnm, evsys, evmethod);
186 comm_base_create_event(struct ub_event_base* base)
188 struct comm_base* b = (struct comm_base*)calloc(1,
189 sizeof(struct comm_base));
192 b->eb = (struct internal_base*)calloc(1, sizeof(struct internal_base));
203 comm_base_delete(struct comm_base* b)
207 if(b->eb->slow_accept_enabled) {
208 if(ub_event_del(b->eb->slow_accept) != 0) {
209 log_err("could not event_del slow_accept");
211 ub_event_free(b->eb->slow_accept);
213 ub_event_base_free(b->eb->base);
220 comm_base_delete_no_base(struct comm_base* b)
224 if(b->eb->slow_accept_enabled) {
225 if(ub_event_del(b->eb->slow_accept) != 0) {
226 log_err("could not event_del slow_accept");
228 ub_event_free(b->eb->slow_accept);
236 comm_base_timept(struct comm_base* b, time_t** tt, struct timeval** tv)
243 comm_base_dispatch(struct comm_base* b)
246 retval = ub_event_base_dispatch(b->eb->base);
248 fatal_exit("event_dispatch returned error %d, "
249 "errno is %s", retval, strerror(errno));
253 void comm_base_exit(struct comm_base* b)
255 if(ub_event_base_loopexit(b->eb->base) != 0) {
256 log_err("Could not loopexit");
260 void comm_base_set_slow_accept_handlers(struct comm_base* b,
261 void (*stop_acc)(void*), void (*start_acc)(void*), void* arg)
263 b->stop_accept = stop_acc;
264 b->start_accept = start_acc;
268 struct ub_event_base* comm_base_internal(struct comm_base* b)
273 /** see if errno for udp has to be logged or not uses globals */
275 udp_send_errno_needs_log(struct sockaddr* addr, socklen_t addrlen)
277 /* do not log transient errors (unless high verbosity) */
278 #if defined(ENETUNREACH) || defined(EHOSTDOWN) || defined(EHOSTUNREACH) || defined(ENETDOWN)
292 if(verbosity < VERB_ALGO)
298 /* permission denied is gotten for every send if the
299 * network is disconnected (on some OS), squelch it */
300 if( ((errno == EPERM)
301 # ifdef EADDRNOTAVAIL
302 /* 'Cannot assign requested address' also when disconnected */
303 || (errno == EADDRNOTAVAIL)
305 ) && verbosity < VERB_DETAIL)
308 /* If SO_REUSEADDR is set, we could try to connect to the same server
309 * from the same source port twice. */
310 if(errno == EADDRINUSE && verbosity < VERB_DETAIL)
313 /* squelch errors where people deploy AAAA ::ffff:bla for
314 * authority servers, which we try for intranets. */
315 if(errno == EINVAL && addr_is_ip4mapped(
316 (struct sockaddr_storage*)addr, addrlen) &&
317 verbosity < VERB_DETAIL)
319 /* SO_BROADCAST sockopt can give access to 255.255.255.255,
320 * but a dns cache does not need it. */
321 if(errno == EACCES && addr_is_broadcast(
322 (struct sockaddr_storage*)addr, addrlen) &&
323 verbosity < VERB_DETAIL)
328 int tcp_connect_errno_needs_log(struct sockaddr* addr, socklen_t addrlen)
330 return udp_send_errno_needs_log(addr, addrlen);
333 /* send a UDP reply */
335 comm_point_send_udp_msg(struct comm_point *c, sldns_buffer* packet,
336 struct sockaddr* addr, socklen_t addrlen)
339 log_assert(c->fd != -1);
341 if(sldns_buffer_remaining(packet) == 0)
342 log_err("error: send empty UDP packet");
344 log_assert(addr && addrlen > 0);
345 sent = sendto(c->fd, (void*)sldns_buffer_begin(packet),
346 sldns_buffer_remaining(packet), 0,
349 /* try again and block, waiting for IO to complete,
350 * we want to send the answer, and we will wait for
351 * the ethernet interface buffer to have space. */
353 if(errno == EAGAIN ||
355 errno == EWOULDBLOCK ||
359 if(WSAGetLastError() == WSAEINPROGRESS ||
360 WSAGetLastError() == WSAENOBUFS ||
361 WSAGetLastError() == WSAEWOULDBLOCK) {
365 sent = sendto(c->fd, (void*)sldns_buffer_begin(packet),
366 sldns_buffer_remaining(packet), 0,
369 fd_set_nonblock(c->fd);
374 if(!udp_send_errno_needs_log(addr, addrlen))
376 verbose(VERB_OPS, "sendto failed: %s", sock_strerror(errno));
377 log_addr(VERB_OPS, "remote address is",
378 (struct sockaddr_storage*)addr, addrlen);
380 } else if((size_t)sent != sldns_buffer_remaining(packet)) {
381 log_err("sent %d in place of %d bytes",
382 (int)sent, (int)sldns_buffer_remaining(packet));
388 #if defined(AF_INET6) && defined(IPV6_PKTINFO) && (defined(HAVE_RECVMSG) || defined(HAVE_SENDMSG))
389 /** print debug ancillary info */
390 static void p_ancil(const char* str, struct comm_reply* r)
392 if(r->srctype != 4 && r->srctype != 6) {
393 log_info("%s: unknown srctype %d", str, r->srctype);
396 if(r->srctype == 6) {
398 if(inet_ntop(AF_INET6, &r->pktinfo.v6info.ipi6_addr,
399 buf, (socklen_t)sizeof(buf)) == 0) {
400 (void)strlcpy(buf, "(inet_ntop error)", sizeof(buf));
402 buf[sizeof(buf)-1]=0;
403 log_info("%s: %s %d", str, buf, r->pktinfo.v6info.ipi6_ifindex);
404 } else if(r->srctype == 4) {
406 char buf1[1024], buf2[1024];
407 if(inet_ntop(AF_INET, &r->pktinfo.v4info.ipi_addr,
408 buf1, (socklen_t)sizeof(buf1)) == 0) {
409 (void)strlcpy(buf1, "(inet_ntop error)", sizeof(buf1));
411 buf1[sizeof(buf1)-1]=0;
412 #ifdef HAVE_STRUCT_IN_PKTINFO_IPI_SPEC_DST
413 if(inet_ntop(AF_INET, &r->pktinfo.v4info.ipi_spec_dst,
414 buf2, (socklen_t)sizeof(buf2)) == 0) {
415 (void)strlcpy(buf2, "(inet_ntop error)", sizeof(buf2));
417 buf2[sizeof(buf2)-1]=0;
421 log_info("%s: %d %s %s", str, r->pktinfo.v4info.ipi_ifindex,
423 #elif defined(IP_RECVDSTADDR)
425 if(inet_ntop(AF_INET, &r->pktinfo.v4addr,
426 buf1, (socklen_t)sizeof(buf1)) == 0) {
427 (void)strlcpy(buf1, "(inet_ntop error)", sizeof(buf1));
429 buf1[sizeof(buf1)-1]=0;
430 log_info("%s: %s", str, buf1);
431 #endif /* IP_PKTINFO or PI_RECVDSTDADDR */
434 #endif /* AF_INET6 && IPV6_PKTINFO && HAVE_RECVMSG||HAVE_SENDMSG */
436 /** send a UDP reply over specified interface*/
438 comm_point_send_udp_msg_if(struct comm_point *c, sldns_buffer* packet,
439 struct sockaddr* addr, socklen_t addrlen, struct comm_reply* r)
441 #if defined(AF_INET6) && defined(IPV6_PKTINFO) && defined(HAVE_SENDMSG)
450 struct cmsghdr *cmsg;
451 #endif /* S_SPLINT_S */
453 log_assert(c->fd != -1);
455 if(sldns_buffer_remaining(packet) == 0)
456 log_err("error: send empty UDP packet");
458 log_assert(addr && addrlen > 0);
461 msg.msg_namelen = addrlen;
462 iov[0].iov_base = sldns_buffer_begin(packet);
463 iov[0].iov_len = sldns_buffer_remaining(packet);
466 msg.msg_control = control.buf;
468 msg.msg_controllen = sizeof(control.buf);
469 #endif /* S_SPLINT_S */
473 cmsg = CMSG_FIRSTHDR(&msg);
474 if(r->srctype == 4) {
477 msg.msg_controllen = CMSG_SPACE(sizeof(struct in_pktinfo));
478 log_assert(msg.msg_controllen <= sizeof(control.buf));
479 cmsg->cmsg_level = IPPROTO_IP;
480 cmsg->cmsg_type = IP_PKTINFO;
481 memmove(CMSG_DATA(cmsg), &r->pktinfo.v4info,
482 sizeof(struct in_pktinfo));
483 /* unset the ifindex to not bypass the routing tables */
484 cmsg_data = CMSG_DATA(cmsg);
485 ((struct in_pktinfo *) cmsg_data)->ipi_ifindex = 0;
486 cmsg->cmsg_len = CMSG_LEN(sizeof(struct in_pktinfo));
487 #elif defined(IP_SENDSRCADDR)
488 msg.msg_controllen = CMSG_SPACE(sizeof(struct in_addr));
489 log_assert(msg.msg_controllen <= sizeof(control.buf));
490 cmsg->cmsg_level = IPPROTO_IP;
491 cmsg->cmsg_type = IP_SENDSRCADDR;
492 memmove(CMSG_DATA(cmsg), &r->pktinfo.v4addr,
493 sizeof(struct in_addr));
494 cmsg->cmsg_len = CMSG_LEN(sizeof(struct in_addr));
496 verbose(VERB_ALGO, "no IP_PKTINFO or IP_SENDSRCADDR");
497 msg.msg_control = NULL;
498 #endif /* IP_PKTINFO or IP_SENDSRCADDR */
499 } else if(r->srctype == 6) {
501 msg.msg_controllen = CMSG_SPACE(sizeof(struct in6_pktinfo));
502 log_assert(msg.msg_controllen <= sizeof(control.buf));
503 cmsg->cmsg_level = IPPROTO_IPV6;
504 cmsg->cmsg_type = IPV6_PKTINFO;
505 memmove(CMSG_DATA(cmsg), &r->pktinfo.v6info,
506 sizeof(struct in6_pktinfo));
507 /* unset the ifindex to not bypass the routing tables */
508 cmsg_data = CMSG_DATA(cmsg);
509 ((struct in6_pktinfo *) cmsg_data)->ipi6_ifindex = 0;
510 cmsg->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));
512 /* try to pass all 0 to use default route */
513 msg.msg_controllen = CMSG_SPACE(sizeof(struct in6_pktinfo));
514 log_assert(msg.msg_controllen <= sizeof(control.buf));
515 cmsg->cmsg_level = IPPROTO_IPV6;
516 cmsg->cmsg_type = IPV6_PKTINFO;
517 memset(CMSG_DATA(cmsg), 0, sizeof(struct in6_pktinfo));
518 cmsg->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));
520 #endif /* S_SPLINT_S */
521 if(verbosity >= VERB_ALGO)
522 p_ancil("send_udp over interface", r);
523 sent = sendmsg(c->fd, &msg, 0);
525 /* try again and block, waiting for IO to complete,
526 * we want to send the answer, and we will wait for
527 * the ethernet interface buffer to have space. */
529 if(errno == EAGAIN ||
531 errno == EWOULDBLOCK ||
535 if(WSAGetLastError() == WSAEINPROGRESS ||
536 WSAGetLastError() == WSAENOBUFS ||
537 WSAGetLastError() == WSAEWOULDBLOCK) {
541 sent = sendmsg(c->fd, &msg, 0);
543 fd_set_nonblock(c->fd);
548 if(!udp_send_errno_needs_log(addr, addrlen))
550 verbose(VERB_OPS, "sendmsg failed: %s", strerror(errno));
551 log_addr(VERB_OPS, "remote address is",
552 (struct sockaddr_storage*)addr, addrlen);
554 /* netbsd 7 has IP_PKTINFO for recv but not send */
555 if(errno == EINVAL && r->srctype == 4)
556 log_err("sendmsg: No support for sendmsg(IP_PKTINFO). "
557 "Please disable interface-automatic");
560 } else if((size_t)sent != sldns_buffer_remaining(packet)) {
561 log_err("sent %d in place of %d bytes",
562 (int)sent, (int)sldns_buffer_remaining(packet));
572 log_err("sendmsg: IPV6_PKTINFO not supported");
574 #endif /* AF_INET6 && IPV6_PKTINFO && HAVE_SENDMSG */
578 comm_point_udp_ancil_callback(int fd, short event, void* arg)
580 #if defined(AF_INET6) && defined(IPV6_PKTINFO) && defined(HAVE_RECVMSG)
581 struct comm_reply rep;
591 struct cmsghdr* cmsg;
592 #endif /* S_SPLINT_S */
594 rep.c = (struct comm_point*)arg;
595 log_assert(rep.c->type == comm_udp);
597 if(!(event&UB_EV_READ))
599 log_assert(rep.c && rep.c->buffer && rep.c->fd == fd);
600 ub_comm_base_now(rep.c->ev->base);
601 for(i=0; i<NUM_UDP_PER_SELECT; i++) {
602 sldns_buffer_clear(rep.c->buffer);
603 rep.addrlen = (socklen_t)sizeof(rep.addr);
604 log_assert(fd != -1);
605 log_assert(sldns_buffer_remaining(rep.c->buffer) > 0);
606 msg.msg_name = &rep.addr;
607 msg.msg_namelen = (socklen_t)sizeof(rep.addr);
608 iov[0].iov_base = sldns_buffer_begin(rep.c->buffer);
609 iov[0].iov_len = sldns_buffer_remaining(rep.c->buffer);
612 msg.msg_control = ancil.buf;
614 msg.msg_controllen = sizeof(ancil.buf);
615 #endif /* S_SPLINT_S */
617 rcv = recvmsg(fd, &msg, 0);
619 if(errno != EAGAIN && errno != EINTR) {
620 log_err("recvmsg failed: %s", strerror(errno));
624 rep.addrlen = msg.msg_namelen;
625 sldns_buffer_skip(rep.c->buffer, rcv);
626 sldns_buffer_flip(rep.c->buffer);
629 for(cmsg = CMSG_FIRSTHDR(&msg); cmsg != NULL;
630 cmsg = CMSG_NXTHDR(&msg, cmsg)) {
631 if( cmsg->cmsg_level == IPPROTO_IPV6 &&
632 cmsg->cmsg_type == IPV6_PKTINFO) {
634 memmove(&rep.pktinfo.v6info, CMSG_DATA(cmsg),
635 sizeof(struct in6_pktinfo));
638 } else if( cmsg->cmsg_level == IPPROTO_IP &&
639 cmsg->cmsg_type == IP_PKTINFO) {
641 memmove(&rep.pktinfo.v4info, CMSG_DATA(cmsg),
642 sizeof(struct in_pktinfo));
644 #elif defined(IP_RECVDSTADDR)
645 } else if( cmsg->cmsg_level == IPPROTO_IP &&
646 cmsg->cmsg_type == IP_RECVDSTADDR) {
648 memmove(&rep.pktinfo.v4addr, CMSG_DATA(cmsg),
649 sizeof(struct in_addr));
651 #endif /* IP_PKTINFO or IP_RECVDSTADDR */
654 if(verbosity >= VERB_ALGO)
655 p_ancil("receive_udp on interface", &rep);
656 #endif /* S_SPLINT_S */
657 fptr_ok(fptr_whitelist_comm_point(rep.c->callback));
658 if((*rep.c->callback)(rep.c, rep.c->cb_arg, NETEVENT_NOERROR, &rep)) {
659 /* send back immediate reply */
660 (void)comm_point_send_udp_msg_if(rep.c, rep.c->buffer,
661 (struct sockaddr*)&rep.addr, rep.addrlen, &rep);
663 if(!rep.c || rep.c->fd == -1) /* commpoint closed */
670 fatal_exit("recvmsg: No support for IPV6_PKTINFO; IP_PKTINFO or IP_RECVDSTADDR. "
671 "Please disable interface-automatic");
672 #endif /* AF_INET6 && IPV6_PKTINFO && HAVE_RECVMSG */
676 comm_point_udp_callback(int fd, short event, void* arg)
678 struct comm_reply rep;
681 struct sldns_buffer *buffer;
683 rep.c = (struct comm_point*)arg;
684 log_assert(rep.c->type == comm_udp);
686 if(!(event&UB_EV_READ))
688 log_assert(rep.c && rep.c->buffer && rep.c->fd == fd);
689 ub_comm_base_now(rep.c->ev->base);
690 for(i=0; i<NUM_UDP_PER_SELECT; i++) {
691 sldns_buffer_clear(rep.c->buffer);
692 rep.addrlen = (socklen_t)sizeof(rep.addr);
693 log_assert(fd != -1);
694 log_assert(sldns_buffer_remaining(rep.c->buffer) > 0);
695 rcv = recvfrom(fd, (void*)sldns_buffer_begin(rep.c->buffer),
696 sldns_buffer_remaining(rep.c->buffer), 0,
697 (struct sockaddr*)&rep.addr, &rep.addrlen);
700 if(errno != EAGAIN && errno != EINTR)
701 log_err("recvfrom %d failed: %s",
702 fd, strerror(errno));
704 if(WSAGetLastError() != WSAEINPROGRESS &&
705 WSAGetLastError() != WSAECONNRESET &&
706 WSAGetLastError()!= WSAEWOULDBLOCK)
707 log_err("recvfrom failed: %s",
708 wsa_strerror(WSAGetLastError()));
712 sldns_buffer_skip(rep.c->buffer, rcv);
713 sldns_buffer_flip(rep.c->buffer);
715 fptr_ok(fptr_whitelist_comm_point(rep.c->callback));
716 if((*rep.c->callback)(rep.c, rep.c->cb_arg, NETEVENT_NOERROR, &rep)) {
717 /* send back immediate reply */
719 buffer = rep.c->dnscrypt_buffer;
721 buffer = rep.c->buffer;
723 (void)comm_point_send_udp_msg(rep.c, buffer,
724 (struct sockaddr*)&rep.addr, rep.addrlen);
726 if(!rep.c || rep.c->fd != fd) /* commpoint closed to -1 or reused for
727 another UDP port. Note rep.c cannot be reused with TCP fd. */
732 /** Use a new tcp handler for new query fd, set to read query */
734 setup_tcp_handler(struct comm_point* c, int fd, int cur, int max)
737 log_assert(c->type == comm_tcp || c->type == comm_http);
738 log_assert(c->fd == -1);
739 sldns_buffer_clear(c->buffer);
742 sldns_buffer_clear(c->dnscrypt_buffer);
744 c->tcp_is_reading = 1;
745 c->tcp_byte_count = 0;
746 /* if more than half the tcp handlers are in use, use a shorter
747 * timeout for this TCP connection, we need to make space for
748 * other connections to be able to get attention */
749 /* If > 50% TCP handler structures in use, set timeout to 1/100th
751 * If > 65%TCP handler structures in use, set to 1/500th configured
753 * If > 80% TCP handler structures in use, set to 0.
755 * If the timeout to use falls below 200 milliseconds, an actual
756 * timeout of 200ms is used.
758 handler_usage = (cur * 100) / max;
759 if(handler_usage > 50 && handler_usage <= 65)
760 c->tcp_timeout_msec /= 100;
761 else if (handler_usage > 65 && handler_usage <= 80)
762 c->tcp_timeout_msec /= 500;
763 else if (handler_usage > 80)
764 c->tcp_timeout_msec = 0;
765 comm_point_start_listening(c, fd,
766 c->tcp_timeout_msec < TCP_QUERY_TIMEOUT_MINIMUM
767 ? TCP_QUERY_TIMEOUT_MINIMUM
768 : c->tcp_timeout_msec);
771 void comm_base_handle_slow_accept(int ATTR_UNUSED(fd),
772 short ATTR_UNUSED(event), void* arg)
774 struct comm_base* b = (struct comm_base*)arg;
775 /* timeout for the slow accept, re-enable accepts again */
776 if(b->start_accept) {
777 verbose(VERB_ALGO, "wait is over, slow accept disabled");
778 fptr_ok(fptr_whitelist_start_accept(b->start_accept));
779 (*b->start_accept)(b->cb_arg);
780 b->eb->slow_accept_enabled = 0;
784 int comm_point_perform_accept(struct comm_point* c,
785 struct sockaddr_storage* addr, socklen_t* addrlen)
788 *addrlen = (socklen_t)sizeof(*addr);
790 new_fd = accept(c->fd, (struct sockaddr*)addr, addrlen);
792 /* SOCK_NONBLOCK saves extra calls to fcntl for the same result */
793 new_fd = accept4(c->fd, (struct sockaddr*)addr, addrlen, SOCK_NONBLOCK);
797 /* EINTR is signal interrupt. others are closed connection. */
798 if( errno == EINTR || errno == EAGAIN
800 || errno == EWOULDBLOCK
803 || errno == ECONNABORTED
810 #if defined(ENFILE) && defined(EMFILE)
811 if(errno == ENFILE || errno == EMFILE) {
812 /* out of file descriptors, likely outside of our
813 * control. stop accept() calls for some time */
814 if(c->ev->base->stop_accept) {
815 struct comm_base* b = c->ev->base;
817 verbose(VERB_ALGO, "out of file descriptors: "
819 b->eb->slow_accept_enabled = 1;
820 fptr_ok(fptr_whitelist_stop_accept(
822 (*b->stop_accept)(b->cb_arg);
823 /* set timeout, no mallocs */
824 tv.tv_sec = NETEVENT_SLOW_ACCEPT_TIME/1000;
825 tv.tv_usec = (NETEVENT_SLOW_ACCEPT_TIME%1000)*1000;
826 b->eb->slow_accept = ub_event_new(b->eb->base,
828 comm_base_handle_slow_accept, b);
829 if(b->eb->slow_accept == NULL) {
830 /* we do not want to log here, because
831 * that would spam the logfiles.
832 * error: "event_base_set failed." */
834 else if(ub_event_add(b->eb->slow_accept, &tv)
836 /* we do not want to log here,
837 * error: "event_add failed." */
843 #else /* USE_WINSOCK */
844 if(WSAGetLastError() == WSAEINPROGRESS ||
845 WSAGetLastError() == WSAECONNRESET)
847 if(WSAGetLastError() == WSAEWOULDBLOCK) {
848 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_READ);
852 log_err_addr("accept failed", sock_strerror(errno), addr,
856 if(c->tcp_conn_limit && c->type == comm_tcp_accept) {
857 c->tcl_addr = tcl_addr_lookup(c->tcp_conn_limit, addr, *addrlen);
858 if(!tcl_new_connection(c->tcl_addr)) {
860 log_err_addr("accept rejected",
861 "connection limit exceeded", addr, *addrlen);
867 fd_set_nonblock(new_fd);
873 static long win_bio_cb(BIO *b, int oper, const char* ATTR_UNUSED(argp),
874 int ATTR_UNUSED(argi), long argl, long retvalue)
876 int wsa_err = WSAGetLastError(); /* store errcode before it is gone */
877 verbose(VERB_ALGO, "bio_cb %d, %s %s %s", oper,
878 (oper&BIO_CB_RETURN)?"return":"before",
879 (oper&BIO_CB_READ)?"read":((oper&BIO_CB_WRITE)?"write":"other"),
880 wsa_err==WSAEWOULDBLOCK?"wsawb":"");
881 /* on windows, check if previous operation caused EWOULDBLOCK */
882 if( (oper == (BIO_CB_READ|BIO_CB_RETURN) && argl == 0) ||
883 (oper == (BIO_CB_GETS|BIO_CB_RETURN) && argl == 0)) {
884 if(wsa_err == WSAEWOULDBLOCK)
885 ub_winsock_tcp_wouldblock((struct ub_event*)
886 BIO_get_callback_arg(b), UB_EV_READ);
888 if( (oper == (BIO_CB_WRITE|BIO_CB_RETURN) && argl == 0) ||
889 (oper == (BIO_CB_PUTS|BIO_CB_RETURN) && argl == 0)) {
890 if(wsa_err == WSAEWOULDBLOCK)
891 ub_winsock_tcp_wouldblock((struct ub_event*)
892 BIO_get_callback_arg(b), UB_EV_WRITE);
894 /* return original return value */
898 /** set win bio callbacks for nonblocking operations */
900 comm_point_tcp_win_bio_cb(struct comm_point* c, void* thessl)
902 SSL* ssl = (SSL*)thessl;
903 /* set them both just in case, but usually they are the same BIO */
904 BIO_set_callback(SSL_get_rbio(ssl), &win_bio_cb);
905 BIO_set_callback_arg(SSL_get_rbio(ssl), (char*)c->ev->ev);
906 BIO_set_callback(SSL_get_wbio(ssl), &win_bio_cb);
907 BIO_set_callback_arg(SSL_get_wbio(ssl), (char*)c->ev->ev);
912 /** Create http2 session server. Per connection, after TCP accepted.*/
913 static int http2_session_server_create(struct http2_session* h2_session)
915 log_assert(h2_session->callbacks);
916 h2_session->is_drop = 0;
917 if(nghttp2_session_server_new(&h2_session->session,
918 h2_session->callbacks,
919 h2_session) == NGHTTP2_ERR_NOMEM) {
920 log_err("failed to create nghttp2 session server");
927 /** Submit http2 setting to session. Once per session. */
928 static int http2_submit_settings(struct http2_session* h2_session)
931 nghttp2_settings_entry settings[1] = {
932 {NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS,
933 h2_session->c->http2_max_streams}};
935 ret = nghttp2_submit_settings(h2_session->session, NGHTTP2_FLAG_NONE,
938 verbose(VERB_QUERY, "http2: submit_settings failed, "
939 "error: %s", nghttp2_strerror(ret));
944 #endif /* HAVE_NGHTTP2 */
948 comm_point_tcp_accept_callback(int fd, short event, void* arg)
950 struct comm_point* c = (struct comm_point*)arg, *c_hdl;
952 log_assert(c->type == comm_tcp_accept);
953 if(!(event & UB_EV_READ)) {
954 log_info("ignoring tcp accept event %d", (int)event);
957 ub_comm_base_now(c->ev->base);
958 /* find free tcp handler. */
960 log_warn("accepted too many tcp, connections full");
963 /* accept incoming connection. */
965 /* clear leftover flags from previous use, and then set the
966 * correct event base for the event structure for libevent */
967 ub_event_free(c_hdl->ev->ev);
969 if(c_hdl->type == comm_http) {
971 if(!c_hdl->h2_session ||
972 !http2_session_server_create(c_hdl->h2_session)) {
973 log_warn("failed to create nghttp2");
976 if(!c_hdl->h2_session ||
977 !http2_submit_settings(c_hdl->h2_session)) {
978 log_warn("failed to submit http2 settings");
982 c_hdl->ev->ev = ub_event_new(c_hdl->ev->base->eb->base, -1,
983 UB_EV_PERSIST | UB_EV_READ | UB_EV_TIMEOUT,
984 comm_point_http_handle_callback, c_hdl);
986 c_hdl->ev->ev = ub_event_new(c_hdl->ev->base->eb->base, -1,
987 UB_EV_PERSIST | UB_EV_READ | UB_EV_TIMEOUT,
988 comm_point_tcp_handle_callback, c_hdl);
991 log_warn("could not ub_event_new, dropped tcp");
994 log_assert(fd != -1);
996 new_fd = comm_point_perform_accept(c, &c_hdl->repinfo.addr,
997 &c_hdl->repinfo.addrlen);
1001 c_hdl->ssl = incoming_ssl_fd(c->ssl, new_fd);
1004 comm_point_close(c_hdl);
1007 c_hdl->ssl_shake_state = comm_ssl_shake_read;
1009 comm_point_tcp_win_bio_cb(c_hdl, c_hdl->ssl);
1013 /* grab the tcp handler buffers */
1015 c->tcp_free = c_hdl->tcp_free;
1017 /* stop accepting incoming queries for now. */
1018 comm_point_stop_listening(c);
1020 setup_tcp_handler(c_hdl, new_fd, c->cur_tcp_count, c->max_tcp_count);
1023 /** Make tcp handler free for next assignment */
1025 reclaim_tcp_handler(struct comm_point* c)
1027 log_assert(c->type == comm_tcp);
1030 SSL_shutdown(c->ssl);
1035 comm_point_close(c);
1037 c->tcp_parent->cur_tcp_count--;
1038 c->tcp_free = c->tcp_parent->tcp_free;
1039 c->tcp_parent->tcp_free = c;
1041 /* re-enable listening on accept socket */
1042 comm_point_start_listening(c->tcp_parent, -1, -1);
1047 /** do the callback when writing is done */
1049 tcp_callback_writer(struct comm_point* c)
1051 log_assert(c->type == comm_tcp);
1052 sldns_buffer_clear(c->buffer);
1053 if(c->tcp_do_toggle_rw)
1054 c->tcp_is_reading = 1;
1055 c->tcp_byte_count = 0;
1056 /* switch from listening(write) to listening(read) */
1057 if(c->tcp_req_info) {
1058 tcp_req_info_handle_writedone(c->tcp_req_info);
1060 comm_point_stop_listening(c);
1061 comm_point_start_listening(c, -1, c->tcp_timeout_msec);
1065 /** do the callback when reading is done */
1067 tcp_callback_reader(struct comm_point* c)
1069 log_assert(c->type == comm_tcp || c->type == comm_local);
1070 sldns_buffer_flip(c->buffer);
1071 if(c->tcp_do_toggle_rw)
1072 c->tcp_is_reading = 0;
1073 c->tcp_byte_count = 0;
1074 if(c->tcp_req_info) {
1075 tcp_req_info_handle_readdone(c->tcp_req_info);
1077 if(c->type == comm_tcp)
1078 comm_point_stop_listening(c);
1079 fptr_ok(fptr_whitelist_comm_point(c->callback));
1080 if( (*c->callback)(c, c->cb_arg, NETEVENT_NOERROR, &c->repinfo) ) {
1081 comm_point_start_listening(c, -1, c->tcp_timeout_msec);
1087 /** true if the ssl handshake error has to be squelched from the logs */
1089 squelch_err_ssl_handshake(unsigned long err)
1091 if(verbosity >= VERB_QUERY)
1092 return 0; /* only squelch on low verbosity */
1093 /* this is very specific, we could filter on ERR_GET_REASON()
1094 * (the third element in ERR_PACK) */
1095 if(err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, SSL_R_HTTPS_PROXY_REQUEST) ||
1096 err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, SSL_R_HTTP_REQUEST) ||
1097 err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, SSL_R_WRONG_VERSION_NUMBER) ||
1098 err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_READ_BYTES, SSL_R_SSLV3_ALERT_BAD_CERTIFICATE)
1099 #ifdef SSL_F_TLS_POST_PROCESS_CLIENT_HELLO
1100 || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_POST_PROCESS_CLIENT_HELLO, SSL_R_NO_SHARED_CIPHER)
1102 #ifdef SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO
1103 || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, SSL_R_UNKNOWN_PROTOCOL)
1104 || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, SSL_R_UNSUPPORTED_PROTOCOL)
1105 # ifdef SSL_R_VERSION_TOO_LOW
1106 || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, SSL_R_VERSION_TOO_LOW)
1113 #endif /* HAVE_SSL */
1115 /** continue ssl handshake */
1118 ssl_handshake(struct comm_point* c)
1121 if(c->ssl_shake_state == comm_ssl_shake_hs_read) {
1122 /* read condition satisfied back to writing */
1123 comm_point_listen_for_rw(c, 1, 1);
1124 c->ssl_shake_state = comm_ssl_shake_none;
1127 if(c->ssl_shake_state == comm_ssl_shake_hs_write) {
1128 /* write condition satisfied, back to reading */
1129 comm_point_listen_for_rw(c, 1, 0);
1130 c->ssl_shake_state = comm_ssl_shake_none;
1135 r = SSL_do_handshake(c->ssl);
1137 int want = SSL_get_error(c->ssl, r);
1138 if(want == SSL_ERROR_WANT_READ) {
1139 if(c->ssl_shake_state == comm_ssl_shake_read)
1141 c->ssl_shake_state = comm_ssl_shake_read;
1142 comm_point_listen_for_rw(c, 1, 0);
1144 } else if(want == SSL_ERROR_WANT_WRITE) {
1145 if(c->ssl_shake_state == comm_ssl_shake_write)
1147 c->ssl_shake_state = comm_ssl_shake_write;
1148 comm_point_listen_for_rw(c, 0, 1);
1151 return 0; /* closed */
1152 } else if(want == SSL_ERROR_SYSCALL) {
1153 /* SYSCALL and errno==0 means closed uncleanly */
1155 if(errno == EPIPE && verbosity < 2)
1156 return 0; /* silence 'broken pipe' */
1159 if(errno == ECONNRESET && verbosity < 2)
1160 return 0; /* silence reset by peer */
1163 log_err("SSL_handshake syscall: %s",
1167 unsigned long err = ERR_get_error();
1168 if(!squelch_err_ssl_handshake(err)) {
1169 log_crypto_err_code("ssl handshake failed", err);
1170 log_addr(VERB_OPS, "ssl handshake failed", &c->repinfo.addr,
1171 c->repinfo.addrlen);
1176 /* this is where peer verification could take place */
1177 if((SSL_get_verify_mode(c->ssl)&SSL_VERIFY_PEER)) {
1179 if(SSL_get_verify_result(c->ssl) == X509_V_OK) {
1180 X509* x = SSL_get_peer_certificate(c->ssl);
1182 log_addr(VERB_ALGO, "SSL connection failed: "
1184 &c->repinfo.addr, c->repinfo.addrlen);
1187 log_cert(VERB_ALGO, "peer certificate", x);
1188 #ifdef HAVE_SSL_GET0_PEERNAME
1189 if(SSL_get0_peername(c->ssl)) {
1191 snprintf(buf, sizeof(buf), "SSL connection "
1192 "to %s authenticated",
1193 SSL_get0_peername(c->ssl));
1194 log_addr(VERB_ALGO, buf, &c->repinfo.addr,
1195 c->repinfo.addrlen);
1198 log_addr(VERB_ALGO, "SSL connection "
1199 "authenticated", &c->repinfo.addr,
1200 c->repinfo.addrlen);
1201 #ifdef HAVE_SSL_GET0_PEERNAME
1206 X509* x = SSL_get_peer_certificate(c->ssl);
1208 log_cert(VERB_ALGO, "peer certificate", x);
1211 log_addr(VERB_ALGO, "SSL connection failed: "
1212 "failed to authenticate",
1213 &c->repinfo.addr, c->repinfo.addrlen);
1217 /* unauthenticated, the verify peer flag was not set
1218 * in c->ssl when the ssl object was created from ssl_ctx */
1219 log_addr(VERB_ALGO, "SSL connection", &c->repinfo.addr,
1220 c->repinfo.addrlen);
1223 /* check if http2 use is negotiated */
1224 if(c->type == comm_http && c->h2_session) {
1225 const unsigned char *alpn;
1226 unsigned int alpnlen = 0;
1227 SSL_get0_alpn_selected(c->ssl, &alpn, &alpnlen);
1228 if(alpnlen == 2 && memcmp("h2", alpn, 2) == 0) {
1229 /* connection upgraded to HTTP2 */
1230 c->tcp_do_toggle_rw = 0;
1235 /* setup listen rw correctly */
1236 if(c->tcp_is_reading) {
1237 if(c->ssl_shake_state != comm_ssl_shake_read)
1238 comm_point_listen_for_rw(c, 1, 0);
1240 comm_point_listen_for_rw(c, 1, 1);
1242 c->ssl_shake_state = comm_ssl_shake_none;
1245 #endif /* HAVE_SSL */
1247 /** ssl read callback on TCP */
1249 ssl_handle_read(struct comm_point* c)
1253 if(c->ssl_shake_state != comm_ssl_shake_none) {
1254 if(!ssl_handshake(c))
1256 if(c->ssl_shake_state != comm_ssl_shake_none)
1259 if(c->tcp_byte_count < sizeof(uint16_t)) {
1260 /* read length bytes */
1262 if((r=SSL_read(c->ssl, (void*)sldns_buffer_at(c->buffer,
1263 c->tcp_byte_count), (int)(sizeof(uint16_t) -
1264 c->tcp_byte_count))) <= 0) {
1265 int want = SSL_get_error(c->ssl, r);
1266 if(want == SSL_ERROR_ZERO_RETURN) {
1268 return tcp_req_info_handle_read_close(c->tcp_req_info);
1269 return 0; /* shutdown, closed */
1270 } else if(want == SSL_ERROR_WANT_READ) {
1271 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_READ);
1272 return 1; /* read more later */
1273 } else if(want == SSL_ERROR_WANT_WRITE) {
1274 c->ssl_shake_state = comm_ssl_shake_hs_write;
1275 comm_point_listen_for_rw(c, 0, 1);
1277 } else if(want == SSL_ERROR_SYSCALL) {
1279 if(errno == ECONNRESET && verbosity < 2)
1280 return 0; /* silence reset by peer */
1283 log_err("SSL_read syscall: %s",
1287 log_crypto_err("could not SSL_read");
1290 c->tcp_byte_count += r;
1291 if(c->tcp_byte_count < sizeof(uint16_t))
1293 if(sldns_buffer_read_u16_at(c->buffer, 0) >
1294 sldns_buffer_capacity(c->buffer)) {
1295 verbose(VERB_QUERY, "ssl: dropped larger than buffer");
1298 sldns_buffer_set_limit(c->buffer,
1299 sldns_buffer_read_u16_at(c->buffer, 0));
1300 if(sldns_buffer_limit(c->buffer) < LDNS_HEADER_SIZE) {
1301 verbose(VERB_QUERY, "ssl: dropped bogus too short.");
1304 sldns_buffer_skip(c->buffer, (ssize_t)(c->tcp_byte_count-sizeof(uint16_t)));
1305 verbose(VERB_ALGO, "Reading ssl tcp query of length %d",
1306 (int)sldns_buffer_limit(c->buffer));
1308 if(sldns_buffer_remaining(c->buffer) > 0) {
1310 r = SSL_read(c->ssl, (void*)sldns_buffer_current(c->buffer),
1311 (int)sldns_buffer_remaining(c->buffer));
1313 int want = SSL_get_error(c->ssl, r);
1314 if(want == SSL_ERROR_ZERO_RETURN) {
1316 return tcp_req_info_handle_read_close(c->tcp_req_info);
1317 return 0; /* shutdown, closed */
1318 } else if(want == SSL_ERROR_WANT_READ) {
1319 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_READ);
1320 return 1; /* read more later */
1321 } else if(want == SSL_ERROR_WANT_WRITE) {
1322 c->ssl_shake_state = comm_ssl_shake_hs_write;
1323 comm_point_listen_for_rw(c, 0, 1);
1325 } else if(want == SSL_ERROR_SYSCALL) {
1327 if(errno == ECONNRESET && verbosity < 2)
1328 return 0; /* silence reset by peer */
1331 log_err("SSL_read syscall: %s",
1335 log_crypto_err("could not SSL_read");
1338 sldns_buffer_skip(c->buffer, (ssize_t)r);
1340 if(sldns_buffer_remaining(c->buffer) <= 0) {
1341 tcp_callback_reader(c);
1347 #endif /* HAVE_SSL */
1350 /** ssl write callback on TCP */
1352 ssl_handle_write(struct comm_point* c)
1356 if(c->ssl_shake_state != comm_ssl_shake_none) {
1357 if(!ssl_handshake(c))
1359 if(c->ssl_shake_state != comm_ssl_shake_none)
1362 /* ignore return, if fails we may simply block */
1363 (void)SSL_set_mode(c->ssl, (long)SSL_MODE_ENABLE_PARTIAL_WRITE);
1364 if(c->tcp_byte_count < sizeof(uint16_t)) {
1365 uint16_t len = htons(sldns_buffer_limit(c->buffer));
1367 if(sizeof(uint16_t)+sldns_buffer_remaining(c->buffer) <
1369 /* combine the tcp length and the query for write,
1370 * this emulates writev */
1371 uint8_t buf[LDNS_RR_BUF_SIZE];
1372 memmove(buf, &len, sizeof(uint16_t));
1373 memmove(buf+sizeof(uint16_t),
1374 sldns_buffer_current(c->buffer),
1375 sldns_buffer_remaining(c->buffer));
1376 r = SSL_write(c->ssl, (void*)(buf+c->tcp_byte_count),
1377 (int)(sizeof(uint16_t)+
1378 sldns_buffer_remaining(c->buffer)
1379 - c->tcp_byte_count));
1381 r = SSL_write(c->ssl,
1382 (void*)(((uint8_t*)&len)+c->tcp_byte_count),
1383 (int)(sizeof(uint16_t)-c->tcp_byte_count));
1386 int want = SSL_get_error(c->ssl, r);
1387 if(want == SSL_ERROR_ZERO_RETURN) {
1388 return 0; /* closed */
1389 } else if(want == SSL_ERROR_WANT_READ) {
1390 c->ssl_shake_state = comm_ssl_shake_hs_read;
1391 comm_point_listen_for_rw(c, 1, 0);
1392 return 1; /* wait for read condition */
1393 } else if(want == SSL_ERROR_WANT_WRITE) {
1394 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
1395 return 1; /* write more later */
1396 } else if(want == SSL_ERROR_SYSCALL) {
1398 if(errno == EPIPE && verbosity < 2)
1399 return 0; /* silence 'broken pipe' */
1402 log_err("SSL_write syscall: %s",
1406 log_crypto_err("could not SSL_write");
1409 c->tcp_byte_count += r;
1410 if(c->tcp_byte_count < sizeof(uint16_t))
1412 sldns_buffer_set_position(c->buffer, c->tcp_byte_count -
1414 if(sldns_buffer_remaining(c->buffer) == 0) {
1415 tcp_callback_writer(c);
1419 log_assert(sldns_buffer_remaining(c->buffer) > 0);
1421 r = SSL_write(c->ssl, (void*)sldns_buffer_current(c->buffer),
1422 (int)sldns_buffer_remaining(c->buffer));
1424 int want = SSL_get_error(c->ssl, r);
1425 if(want == SSL_ERROR_ZERO_RETURN) {
1426 return 0; /* closed */
1427 } else if(want == SSL_ERROR_WANT_READ) {
1428 c->ssl_shake_state = comm_ssl_shake_hs_read;
1429 comm_point_listen_for_rw(c, 1, 0);
1430 return 1; /* wait for read condition */
1431 } else if(want == SSL_ERROR_WANT_WRITE) {
1432 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
1433 return 1; /* write more later */
1434 } else if(want == SSL_ERROR_SYSCALL) {
1436 if(errno == EPIPE && verbosity < 2)
1437 return 0; /* silence 'broken pipe' */
1440 log_err("SSL_write syscall: %s",
1444 log_crypto_err("could not SSL_write");
1447 sldns_buffer_skip(c->buffer, (ssize_t)r);
1449 if(sldns_buffer_remaining(c->buffer) == 0) {
1450 tcp_callback_writer(c);
1456 #endif /* HAVE_SSL */
1459 /** handle ssl tcp connection with dns contents */
1461 ssl_handle_it(struct comm_point* c)
1463 if(c->tcp_is_reading)
1464 return ssl_handle_read(c);
1465 return ssl_handle_write(c);
1468 /** Handle tcp reading callback.
1469 * @param fd: file descriptor of socket.
1470 * @param c: comm point to read from into buffer.
1471 * @param short_ok: if true, very short packets are OK (for comm_local).
1472 * @return: 0 on error
1475 comm_point_tcp_handle_read(int fd, struct comm_point* c, int short_ok)
1478 log_assert(c->type == comm_tcp || c->type == comm_local);
1480 return ssl_handle_it(c);
1481 if(!c->tcp_is_reading)
1484 log_assert(fd != -1);
1485 if(c->tcp_byte_count < sizeof(uint16_t)) {
1486 /* read length bytes */
1487 r = recv(fd,(void*)sldns_buffer_at(c->buffer,c->tcp_byte_count),
1488 sizeof(uint16_t)-c->tcp_byte_count, 0);
1491 return tcp_req_info_handle_read_close(c->tcp_req_info);
1493 } else if(r == -1) {
1495 if(errno == EINTR || errno == EAGAIN)
1498 if(errno == ECONNRESET && verbosity < 2)
1499 return 0; /* silence reset by peer */
1501 #else /* USE_WINSOCK */
1502 if(WSAGetLastError() == WSAECONNRESET)
1504 if(WSAGetLastError() == WSAEINPROGRESS)
1506 if(WSAGetLastError() == WSAEWOULDBLOCK) {
1507 ub_winsock_tcp_wouldblock(c->ev->ev,
1512 log_err_addr("read (in tcp s)", sock_strerror(errno),
1513 &c->repinfo.addr, c->repinfo.addrlen);
1516 c->tcp_byte_count += r;
1517 if(c->tcp_byte_count != sizeof(uint16_t))
1519 if(sldns_buffer_read_u16_at(c->buffer, 0) >
1520 sldns_buffer_capacity(c->buffer)) {
1521 verbose(VERB_QUERY, "tcp: dropped larger than buffer");
1524 sldns_buffer_set_limit(c->buffer,
1525 sldns_buffer_read_u16_at(c->buffer, 0));
1527 sldns_buffer_limit(c->buffer) < LDNS_HEADER_SIZE) {
1528 verbose(VERB_QUERY, "tcp: dropped bogus too short.");
1531 verbose(VERB_ALGO, "Reading tcp query of length %d",
1532 (int)sldns_buffer_limit(c->buffer));
1535 log_assert(sldns_buffer_remaining(c->buffer) > 0);
1536 r = recv(fd, (void*)sldns_buffer_current(c->buffer),
1537 sldns_buffer_remaining(c->buffer), 0);
1540 return tcp_req_info_handle_read_close(c->tcp_req_info);
1542 } else if(r == -1) {
1544 if(errno == EINTR || errno == EAGAIN)
1546 #else /* USE_WINSOCK */
1547 if(WSAGetLastError() == WSAECONNRESET)
1549 if(WSAGetLastError() == WSAEINPROGRESS)
1551 if(WSAGetLastError() == WSAEWOULDBLOCK) {
1552 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_READ);
1556 log_err_addr("read (in tcp r)", sock_strerror(errno),
1557 &c->repinfo.addr, c->repinfo.addrlen);
1560 sldns_buffer_skip(c->buffer, r);
1561 if(sldns_buffer_remaining(c->buffer) <= 0) {
1562 tcp_callback_reader(c);
1568 * Handle tcp writing callback.
1569 * @param fd: file descriptor of socket.
1570 * @param c: comm point to write buffer out of.
1571 * @return: 0 on error
1574 comm_point_tcp_handle_write(int fd, struct comm_point* c)
1577 struct sldns_buffer *buffer;
1578 log_assert(c->type == comm_tcp);
1580 buffer = c->dnscrypt_buffer;
1584 if(c->tcp_is_reading && !c->ssl)
1586 log_assert(fd != -1);
1587 if(c->tcp_byte_count == 0 && c->tcp_check_nb_connect) {
1588 /* check for pending error from nonblocking connect */
1589 /* from Stevens, unix network programming, vol1, 3rd ed, p450*/
1591 socklen_t len = (socklen_t)sizeof(error);
1592 if(getsockopt(fd, SOL_SOCKET, SO_ERROR, (void*)&error,
1595 error = errno; /* on solaris errno is error */
1596 #else /* USE_WINSOCK */
1597 error = WSAGetLastError();
1601 #if defined(EINPROGRESS) && defined(EWOULDBLOCK)
1602 if(error == EINPROGRESS || error == EWOULDBLOCK)
1603 return 1; /* try again later */
1606 if(error != 0 && verbosity < 2)
1607 return 0; /* silence lots of chatter in the logs */
1608 else if(error != 0) {
1609 log_err_addr("tcp connect", strerror(error),
1610 &c->repinfo.addr, c->repinfo.addrlen);
1611 #else /* USE_WINSOCK */
1613 if(error == WSAEINPROGRESS)
1615 else if(error == WSAEWOULDBLOCK) {
1616 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
1618 } else if(error != 0 && verbosity < 2)
1620 else if(error != 0) {
1621 log_err_addr("tcp connect", wsa_strerror(error),
1622 &c->repinfo.addr, c->repinfo.addrlen);
1623 #endif /* USE_WINSOCK */
1628 return ssl_handle_it(c);
1630 #ifdef USE_MSG_FASTOPEN
1631 /* Only try this on first use of a connection that uses tfo,
1632 otherwise fall through to normal write */
1633 /* Also, TFO support on WINDOWS not implemented at the moment */
1634 if(c->tcp_do_fastopen == 1) {
1635 /* this form of sendmsg() does both a connect() and send() so need to
1636 look for various flavours of error*/
1637 uint16_t len = htons(sldns_buffer_limit(buffer));
1639 struct iovec iov[2];
1640 c->tcp_do_fastopen = 0;
1641 memset(&msg, 0, sizeof(msg));
1642 iov[0].iov_base = (uint8_t*)&len + c->tcp_byte_count;
1643 iov[0].iov_len = sizeof(uint16_t) - c->tcp_byte_count;
1644 iov[1].iov_base = sldns_buffer_begin(buffer);
1645 iov[1].iov_len = sldns_buffer_limit(buffer);
1646 log_assert(iov[0].iov_len > 0);
1647 msg.msg_name = &c->repinfo.addr;
1648 msg.msg_namelen = c->repinfo.addrlen;
1651 r = sendmsg(fd, &msg, MSG_FASTOPEN);
1653 #if defined(EINPROGRESS) && defined(EWOULDBLOCK)
1654 /* Handshake is underway, maybe because no TFO cookie available.
1655 Come back to write the message*/
1656 if(errno == EINPROGRESS || errno == EWOULDBLOCK)
1659 if(errno == EINTR || errno == EAGAIN)
1661 /* Not handling EISCONN here as shouldn't ever hit that case.*/
1662 if(errno != EPIPE && errno != 0 && verbosity < 2)
1663 return 0; /* silence lots of chatter in the logs */
1664 if(errno != EPIPE && errno != 0) {
1665 log_err_addr("tcp sendmsg", strerror(errno),
1666 &c->repinfo.addr, c->repinfo.addrlen);
1669 /* fallthrough to nonFASTOPEN
1670 * (MSG_FASTOPEN on Linux 3 produces EPIPE)
1671 * we need to perform connect() */
1672 if(connect(fd, (struct sockaddr *)&c->repinfo.addr, c->repinfo.addrlen) == -1) {
1674 if(errno == EINPROGRESS)
1675 return 1; /* wait until connect done*/
1678 if(WSAGetLastError() == WSAEINPROGRESS ||
1679 WSAGetLastError() == WSAEWOULDBLOCK)
1680 return 1; /* wait until connect done*/
1682 if(tcp_connect_errno_needs_log(
1683 (struct sockaddr *)&c->repinfo.addr, c->repinfo.addrlen)) {
1684 log_err_addr("outgoing tcp: connect after EPIPE for fastopen",
1685 strerror(errno), &c->repinfo.addr, c->repinfo.addrlen);
1691 c->tcp_byte_count += r;
1692 if(c->tcp_byte_count < sizeof(uint16_t))
1694 sldns_buffer_set_position(buffer, c->tcp_byte_count -
1696 if(sldns_buffer_remaining(buffer) == 0) {
1697 tcp_callback_writer(c);
1702 #endif /* USE_MSG_FASTOPEN */
1704 if(c->tcp_byte_count < sizeof(uint16_t)) {
1705 uint16_t len = htons(sldns_buffer_limit(buffer));
1707 struct iovec iov[2];
1708 iov[0].iov_base = (uint8_t*)&len + c->tcp_byte_count;
1709 iov[0].iov_len = sizeof(uint16_t) - c->tcp_byte_count;
1710 iov[1].iov_base = sldns_buffer_begin(buffer);
1711 iov[1].iov_len = sldns_buffer_limit(buffer);
1712 log_assert(iov[0].iov_len > 0);
1713 r = writev(fd, iov, 2);
1714 #else /* HAVE_WRITEV */
1715 r = send(fd, (void*)(((uint8_t*)&len)+c->tcp_byte_count),
1716 sizeof(uint16_t)-c->tcp_byte_count, 0);
1717 #endif /* HAVE_WRITEV */
1721 if(errno == EPIPE && verbosity < 2)
1722 return 0; /* silence 'broken pipe' */
1724 if(errno == EINTR || errno == EAGAIN)
1727 if(errno == ECONNRESET && verbosity < 2)
1728 return 0; /* silence reset by peer */
1731 log_err_addr("tcp writev", strerror(errno),
1732 &c->repinfo.addr, c->repinfo.addrlen);
1733 # else /* HAVE_WRITEV */
1734 log_err_addr("tcp send s", strerror(errno),
1735 &c->repinfo.addr, c->repinfo.addrlen);
1736 # endif /* HAVE_WRITEV */
1738 if(WSAGetLastError() == WSAENOTCONN)
1740 if(WSAGetLastError() == WSAEINPROGRESS)
1742 if(WSAGetLastError() == WSAEWOULDBLOCK) {
1743 ub_winsock_tcp_wouldblock(c->ev->ev,
1747 if(WSAGetLastError() == WSAECONNRESET && verbosity < 2)
1748 return 0; /* silence reset by peer */
1749 log_err_addr("tcp send s",
1750 wsa_strerror(WSAGetLastError()),
1751 &c->repinfo.addr, c->repinfo.addrlen);
1755 c->tcp_byte_count += r;
1756 if(c->tcp_byte_count < sizeof(uint16_t))
1758 sldns_buffer_set_position(buffer, c->tcp_byte_count -
1760 if(sldns_buffer_remaining(buffer) == 0) {
1761 tcp_callback_writer(c);
1765 log_assert(sldns_buffer_remaining(buffer) > 0);
1766 r = send(fd, (void*)sldns_buffer_current(buffer),
1767 sldns_buffer_remaining(buffer), 0);
1770 if(errno == EINTR || errno == EAGAIN)
1773 if(errno == ECONNRESET && verbosity < 2)
1774 return 0; /* silence reset by peer */
1777 if(WSAGetLastError() == WSAEINPROGRESS)
1779 if(WSAGetLastError() == WSAEWOULDBLOCK) {
1780 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
1783 if(WSAGetLastError() == WSAECONNRESET && verbosity < 2)
1784 return 0; /* silence reset by peer */
1786 log_err_addr("tcp send r", sock_strerror(errno),
1787 &c->repinfo.addr, c->repinfo.addrlen);
1790 sldns_buffer_skip(buffer, r);
1792 if(sldns_buffer_remaining(buffer) == 0) {
1793 tcp_callback_writer(c);
1799 /** read again to drain buffers when there could be more to read */
1801 tcp_req_info_read_again(int fd, struct comm_point* c)
1803 while(c->tcp_req_info->read_again) {
1805 c->tcp_req_info->read_again = 0;
1806 if(c->tcp_is_reading)
1807 r = comm_point_tcp_handle_read(fd, c, 0);
1808 else r = comm_point_tcp_handle_write(fd, c);
1810 reclaim_tcp_handler(c);
1811 if(!c->tcp_do_close) {
1812 fptr_ok(fptr_whitelist_comm_point(
1814 (void)(*c->callback)(c, c->cb_arg,
1815 NETEVENT_CLOSED, NULL);
1823 comm_point_tcp_handle_callback(int fd, short event, void* arg)
1825 struct comm_point* c = (struct comm_point*)arg;
1826 log_assert(c->type == comm_tcp);
1827 ub_comm_base_now(c->ev->base);
1830 /* Initialize if this is a dnscrypt socket */
1832 c->dnscrypt = c->tcp_parent->dnscrypt;
1834 if(c->dnscrypt && c->dnscrypt_buffer == c->buffer) {
1835 c->dnscrypt_buffer = sldns_buffer_new(sldns_buffer_capacity(c->buffer));
1836 if(!c->dnscrypt_buffer) {
1837 log_err("Could not allocate dnscrypt buffer");
1838 reclaim_tcp_handler(c);
1839 if(!c->tcp_do_close) {
1840 fptr_ok(fptr_whitelist_comm_point(
1842 (void)(*c->callback)(c, c->cb_arg,
1843 NETEVENT_CLOSED, NULL);
1850 if(event&UB_EV_TIMEOUT) {
1851 verbose(VERB_QUERY, "tcp took too long, dropped");
1852 reclaim_tcp_handler(c);
1853 if(!c->tcp_do_close) {
1854 fptr_ok(fptr_whitelist_comm_point(c->callback));
1855 (void)(*c->callback)(c, c->cb_arg,
1856 NETEVENT_TIMEOUT, NULL);
1860 if(event&UB_EV_READ) {
1861 int has_tcpq = (c->tcp_req_info != NULL);
1862 if(!comm_point_tcp_handle_read(fd, c, 0)) {
1863 reclaim_tcp_handler(c);
1864 if(!c->tcp_do_close) {
1865 fptr_ok(fptr_whitelist_comm_point(
1867 (void)(*c->callback)(c, c->cb_arg,
1868 NETEVENT_CLOSED, NULL);
1871 if(has_tcpq && c->tcp_req_info && c->tcp_req_info->read_again)
1872 tcp_req_info_read_again(fd, c);
1875 if(event&UB_EV_WRITE) {
1876 int has_tcpq = (c->tcp_req_info != NULL);
1877 if(!comm_point_tcp_handle_write(fd, c)) {
1878 reclaim_tcp_handler(c);
1879 if(!c->tcp_do_close) {
1880 fptr_ok(fptr_whitelist_comm_point(
1882 (void)(*c->callback)(c, c->cb_arg,
1883 NETEVENT_CLOSED, NULL);
1886 if(has_tcpq && c->tcp_req_info && c->tcp_req_info->read_again)
1887 tcp_req_info_read_again(fd, c);
1890 log_err("Ignored event %d for tcphdl.", event);
1893 /** Make http handler free for next assignment */
1895 reclaim_http_handler(struct comm_point* c)
1897 log_assert(c->type == comm_http);
1900 SSL_shutdown(c->ssl);
1905 comm_point_close(c);
1907 c->tcp_parent->cur_tcp_count--;
1908 c->tcp_free = c->tcp_parent->tcp_free;
1909 c->tcp_parent->tcp_free = c;
1911 /* re-enable listening on accept socket */
1912 comm_point_start_listening(c->tcp_parent, -1, -1);
1917 /** read more data for http (with ssl) */
1919 ssl_http_read_more(struct comm_point* c)
1923 log_assert(sldns_buffer_remaining(c->buffer) > 0);
1925 r = SSL_read(c->ssl, (void*)sldns_buffer_current(c->buffer),
1926 (int)sldns_buffer_remaining(c->buffer));
1928 int want = SSL_get_error(c->ssl, r);
1929 if(want == SSL_ERROR_ZERO_RETURN) {
1930 return 0; /* shutdown, closed */
1931 } else if(want == SSL_ERROR_WANT_READ) {
1932 return 1; /* read more later */
1933 } else if(want == SSL_ERROR_WANT_WRITE) {
1934 c->ssl_shake_state = comm_ssl_shake_hs_write;
1935 comm_point_listen_for_rw(c, 0, 1);
1937 } else if(want == SSL_ERROR_SYSCALL) {
1939 if(errno == ECONNRESET && verbosity < 2)
1940 return 0; /* silence reset by peer */
1943 log_err("SSL_read syscall: %s",
1947 log_crypto_err("could not SSL_read");
1950 sldns_buffer_skip(c->buffer, (ssize_t)r);
1955 #endif /* HAVE_SSL */
1958 /** read more data for http */
1960 http_read_more(int fd, struct comm_point* c)
1963 log_assert(sldns_buffer_remaining(c->buffer) > 0);
1964 r = recv(fd, (void*)sldns_buffer_current(c->buffer),
1965 sldns_buffer_remaining(c->buffer), 0);
1968 } else if(r == -1) {
1970 if(errno == EINTR || errno == EAGAIN)
1972 #else /* USE_WINSOCK */
1973 if(WSAGetLastError() == WSAECONNRESET)
1975 if(WSAGetLastError() == WSAEINPROGRESS)
1977 if(WSAGetLastError() == WSAEWOULDBLOCK) {
1978 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_READ);
1982 log_err_addr("read (in http r)", sock_strerror(errno),
1983 &c->repinfo.addr, c->repinfo.addrlen);
1986 sldns_buffer_skip(c->buffer, r);
1990 /** return true if http header has been read (one line complete) */
1992 http_header_done(sldns_buffer* buf)
1995 for(i=sldns_buffer_position(buf); i<sldns_buffer_limit(buf); i++) {
1996 /* there was a \r before the \n, but we ignore that */
1997 if((char)sldns_buffer_read_u8_at(buf, i) == '\n')
2003 /** return character string into buffer for header line, moves buffer
2004 * past that line and puts zero terminator into linefeed-newline */
2006 http_header_line(sldns_buffer* buf)
2008 char* result = (char*)sldns_buffer_current(buf);
2010 for(i=sldns_buffer_position(buf); i<sldns_buffer_limit(buf); i++) {
2011 /* terminate the string on the \r */
2012 if((char)sldns_buffer_read_u8_at(buf, i) == '\r')
2013 sldns_buffer_write_u8_at(buf, i, 0);
2014 /* terminate on the \n and skip past the it and done */
2015 if((char)sldns_buffer_read_u8_at(buf, i) == '\n') {
2016 sldns_buffer_write_u8_at(buf, i, 0);
2017 sldns_buffer_set_position(buf, i+1);
2024 /** move unread buffer to start and clear rest for putting the rest into it */
2026 http_moveover_buffer(sldns_buffer* buf)
2028 size_t pos = sldns_buffer_position(buf);
2029 size_t len = sldns_buffer_remaining(buf);
2030 sldns_buffer_clear(buf);
2031 memmove(sldns_buffer_begin(buf), sldns_buffer_at(buf, pos), len);
2032 sldns_buffer_set_position(buf, len);
2035 /** a http header is complete, process it */
2037 http_process_initial_header(struct comm_point* c)
2039 char* line = http_header_line(c->buffer);
2041 verbose(VERB_ALGO, "http header: %s", line);
2042 if(strncasecmp(line, "HTTP/1.1 ", 9) == 0) {
2043 /* check returncode */
2044 if(line[9] != '2') {
2045 verbose(VERB_ALGO, "http bad status %s", line+9);
2048 } else if(strncasecmp(line, "Content-Length: ", 16) == 0) {
2049 if(!c->http_is_chunked)
2050 c->tcp_byte_count = (size_t)atoi(line+16);
2051 } else if(strncasecmp(line, "Transfer-Encoding: chunked", 19+7) == 0) {
2052 c->tcp_byte_count = 0;
2053 c->http_is_chunked = 1;
2054 } else if(line[0] == 0) {
2055 /* end of initial headers */
2056 c->http_in_headers = 0;
2057 if(c->http_is_chunked)
2058 c->http_in_chunk_headers = 1;
2059 /* remove header text from front of buffer
2060 * the buffer is going to be used to return the data segment
2061 * itself and we don't want the header to get returned
2062 * prepended with it */
2063 http_moveover_buffer(c->buffer);
2064 sldns_buffer_flip(c->buffer);
2067 /* ignore other headers */
2071 /** a chunk header is complete, process it, return 0=fail, 1=continue next
2072 * header line, 2=done with chunked transfer*/
2074 http_process_chunk_header(struct comm_point* c)
2076 char* line = http_header_line(c->buffer);
2078 if(c->http_in_chunk_headers == 3) {
2079 verbose(VERB_ALGO, "http chunk trailer: %s", line);
2081 if(line[0] == 0 && c->tcp_byte_count == 0) {
2082 /* callback of http reader when NETEVENT_DONE,
2083 * end of data, with no data in buffer */
2084 sldns_buffer_set_position(c->buffer, 0);
2085 sldns_buffer_set_limit(c->buffer, 0);
2086 fptr_ok(fptr_whitelist_comm_point(c->callback));
2087 (void)(*c->callback)(c, c->cb_arg, NETEVENT_DONE, NULL);
2088 /* return that we are done */
2092 /* continue with header of the next chunk */
2093 c->http_in_chunk_headers = 1;
2094 /* remove header text from front of buffer */
2095 http_moveover_buffer(c->buffer);
2096 sldns_buffer_flip(c->buffer);
2099 /* ignore further trail headers */
2102 verbose(VERB_ALGO, "http chunk header: %s", line);
2103 if(c->http_in_chunk_headers == 1) {
2104 /* read chunked start line */
2106 c->tcp_byte_count = (size_t)strtol(line, &end, 16);
2109 c->http_in_chunk_headers = 0;
2110 /* remove header text from front of buffer */
2111 http_moveover_buffer(c->buffer);
2112 sldns_buffer_flip(c->buffer);
2113 if(c->tcp_byte_count == 0) {
2114 /* done with chunks, process chunk_trailer lines */
2115 c->http_in_chunk_headers = 3;
2119 /* ignore other headers */
2123 /** handle nonchunked data segment */
2125 http_nonchunk_segment(struct comm_point* c)
2127 /* c->buffer at position..limit has new data we read in.
2128 * the buffer itself is full of nonchunked data.
2129 * we are looking to read tcp_byte_count more data
2130 * and then the transfer is done. */
2131 size_t remainbufferlen;
2132 size_t got_now = sldns_buffer_limit(c->buffer) - c->http_stored;
2133 if(c->tcp_byte_count <= got_now) {
2134 /* done, this is the last data fragment */
2136 sldns_buffer_set_position(c->buffer, 0);
2137 fptr_ok(fptr_whitelist_comm_point(c->callback));
2138 (void)(*c->callback)(c, c->cb_arg, NETEVENT_DONE, NULL);
2141 c->tcp_byte_count -= got_now;
2142 /* if we have the buffer space,
2143 * read more data collected into the buffer */
2144 remainbufferlen = sldns_buffer_capacity(c->buffer) -
2145 sldns_buffer_limit(c->buffer);
2146 if(remainbufferlen >= c->tcp_byte_count ||
2147 remainbufferlen >= 2048) {
2148 size_t total = sldns_buffer_limit(c->buffer);
2149 sldns_buffer_clear(c->buffer);
2150 sldns_buffer_set_position(c->buffer, total);
2151 c->http_stored = total;
2152 /* return and wait to read more */
2155 /* call callback with this data amount, then
2158 sldns_buffer_set_position(c->buffer, 0);
2159 fptr_ok(fptr_whitelist_comm_point(c->callback));
2160 (void)(*c->callback)(c, c->cb_arg, NETEVENT_NOERROR, NULL);
2161 /* c->callback has to buffer_clear(c->buffer). */
2162 /* return and wait to read more */
2166 /** handle nonchunked data segment, return 0=fail, 1=wait, 2=process more */
2168 http_chunked_segment(struct comm_point* c)
2170 /* the c->buffer has from position..limit new data we read. */
2171 /* the current chunk has length tcp_byte_count.
2172 * once we read that read more chunk headers.
2174 size_t remainbufferlen;
2175 size_t got_now = sldns_buffer_limit(c->buffer) - c->http_stored;
2176 if(c->tcp_byte_count <= got_now) {
2177 /* the chunk has completed (with perhaps some extra data
2178 * from next chunk header and next chunk) */
2179 /* save too much info into temp buffer */
2181 struct comm_reply repinfo;
2183 sldns_buffer_skip(c->buffer, (ssize_t)c->tcp_byte_count);
2184 sldns_buffer_clear(c->http_temp);
2185 sldns_buffer_write(c->http_temp,
2186 sldns_buffer_current(c->buffer),
2187 sldns_buffer_remaining(c->buffer));
2188 sldns_buffer_flip(c->http_temp);
2190 /* callback with this fragment */
2191 fraglen = sldns_buffer_position(c->buffer);
2192 sldns_buffer_set_position(c->buffer, 0);
2193 sldns_buffer_set_limit(c->buffer, fraglen);
2194 repinfo = c->repinfo;
2195 fptr_ok(fptr_whitelist_comm_point(c->callback));
2196 (void)(*c->callback)(c, c->cb_arg, NETEVENT_NOERROR, &repinfo);
2197 /* c->callback has to buffer_clear(). */
2199 /* is commpoint deleted? */
2203 /* copy waiting info */
2204 sldns_buffer_clear(c->buffer);
2205 sldns_buffer_write(c->buffer,
2206 sldns_buffer_begin(c->http_temp),
2207 sldns_buffer_remaining(c->http_temp));
2208 sldns_buffer_flip(c->buffer);
2209 /* process end of chunk trailer header lines, until
2211 c->http_in_chunk_headers = 3;
2212 /* process more data in buffer (if any) */
2215 c->tcp_byte_count -= got_now;
2217 /* if we have the buffer space,
2218 * read more data collected into the buffer */
2219 remainbufferlen = sldns_buffer_capacity(c->buffer) -
2220 sldns_buffer_limit(c->buffer);
2221 if(remainbufferlen >= c->tcp_byte_count ||
2222 remainbufferlen >= 2048) {
2223 size_t total = sldns_buffer_limit(c->buffer);
2224 sldns_buffer_clear(c->buffer);
2225 sldns_buffer_set_position(c->buffer, total);
2226 c->http_stored = total;
2227 /* return and wait to read more */
2231 /* callback of http reader for a new part of the data */
2233 sldns_buffer_set_position(c->buffer, 0);
2234 fptr_ok(fptr_whitelist_comm_point(c->callback));
2235 (void)(*c->callback)(c, c->cb_arg, NETEVENT_NOERROR, NULL);
2236 /* c->callback has to buffer_clear(c->buffer). */
2237 /* return and wait to read more */
2242 /** Create new http2 session. Called when creating handling comm point. */
2243 struct http2_session* http2_session_create(struct comm_point* c)
2245 struct http2_session* session = calloc(1, sizeof(*session));
2247 log_err("malloc failure while creating http2 session");
2256 /** Delete http2 session. After closing connection or on error */
2257 void http2_session_delete(struct http2_session* h2_session)
2260 if(h2_session->callbacks)
2261 nghttp2_session_callbacks_del(h2_session->callbacks);
2269 struct http2_stream* http2_stream_create(int32_t stream_id)
2271 struct http2_stream* h2_stream = calloc(1, sizeof(*h2_stream));
2273 log_err("malloc failure while creating http2 stream");
2276 h2_stream->stream_id = stream_id;
2280 /** Delete http2 stream. After session delete or stream close callback */
2281 static void http2_stream_delete(struct http2_session* h2_session,
2282 struct http2_stream* h2_stream)
2284 if(h2_stream->mesh_state) {
2285 mesh_state_remove_reply(h2_stream->mesh, h2_stream->mesh_state,
2287 h2_stream->mesh_state = NULL;
2289 http2_req_stream_clear(h2_stream);
2294 void http2_stream_add_meshstate(struct http2_stream* h2_stream,
2295 struct mesh_area* mesh, struct mesh_state* m)
2297 h2_stream->mesh = mesh;
2298 h2_stream->mesh_state = m;
2301 /** delete http2 session server. After closing connection. */
2302 static void http2_session_server_delete(struct http2_session* h2_session)
2305 struct http2_stream* h2_stream, *next;
2306 nghttp2_session_del(h2_session->session); /* NULL input is fine */
2307 h2_session->session = NULL;
2308 for(h2_stream = h2_session->first_stream; h2_stream;) {
2309 next = h2_stream->next;
2310 http2_stream_delete(h2_session, h2_stream);
2313 h2_session->first_stream = NULL;
2314 h2_session->is_drop = 0;
2315 h2_session->postpone_drop = 0;
2316 h2_session->c->h2_stream = NULL;
2322 void http2_session_add_stream(struct http2_session* h2_session,
2323 struct http2_stream* h2_stream)
2325 if(h2_session->first_stream)
2326 h2_session->first_stream->prev = h2_stream;
2327 h2_stream->next = h2_session->first_stream;
2328 h2_session->first_stream = h2_stream;
2331 /** remove stream from session linked list. After stream close callback or
2332 * closing connection */
2333 void http2_session_remove_stream(struct http2_session* h2_session,
2334 struct http2_stream* h2_stream)
2337 h2_stream->prev->next = h2_stream->next;
2339 h2_session->first_stream = h2_stream->next;
2341 h2_stream->next->prev = h2_stream->prev;
2345 int http2_stream_close_cb(nghttp2_session* ATTR_UNUSED(session),
2346 int32_t stream_id, uint32_t ATTR_UNUSED(error_code), void* cb_arg)
2348 struct http2_stream* h2_stream;
2349 struct http2_session* h2_session = (struct http2_session*)cb_arg;
2350 if(!(h2_stream = nghttp2_session_get_stream_user_data(
2351 h2_session->session, stream_id))) {
2354 http2_session_remove_stream(h2_session, h2_stream);
2355 http2_stream_delete(h2_session, h2_stream);
2359 ssize_t http2_recv_cb(nghttp2_session* ATTR_UNUSED(session), uint8_t* buf,
2360 size_t len, int ATTR_UNUSED(flags), void* cb_arg)
2363 struct http2_session* h2_session = (struct http2_session*)cb_arg;
2366 log_assert(h2_session->c->type == comm_http);
2367 log_assert(h2_session->c->h2_session);
2369 if(!h2_session->c->ssl)
2373 r = SSL_read(h2_session->c->ssl, buf, len);
2375 int want = SSL_get_error(h2_session->c->ssl, r);
2376 if(want == SSL_ERROR_ZERO_RETURN) {
2377 return NGHTTP2_ERR_EOF;
2378 } else if(want == SSL_ERROR_WANT_READ) {
2379 return NGHTTP2_ERR_WOULDBLOCK;
2380 } else if(want == SSL_ERROR_WANT_WRITE) {
2381 h2_session->c->ssl_shake_state = comm_ssl_shake_hs_write;
2382 comm_point_listen_for_rw(h2_session->c, 0, 1);
2383 return NGHTTP2_ERR_WOULDBLOCK;
2384 } else if(want == SSL_ERROR_SYSCALL) {
2386 if(errno == ECONNRESET && verbosity < 2)
2387 return NGHTTP2_ERR_CALLBACK_FAILURE;
2390 log_err("SSL_read syscall: %s",
2392 return NGHTTP2_ERR_CALLBACK_FAILURE;
2394 log_crypto_err("could not SSL_read");
2395 return NGHTTP2_ERR_CALLBACK_FAILURE;
2405 #endif /* HAVE_NGHTTP2 */
2407 /** Handle http2 read */
2409 comm_point_http2_handle_read(int ATTR_UNUSED(fd), struct comm_point* c)
2413 log_assert(c->h2_session);
2416 /* reading until recv cb returns NGHTTP2_ERR_WOULDBLOCK */
2417 ret = nghttp2_session_recv(c->h2_session->session);
2419 if(ret != NGHTTP2_ERR_EOF &&
2420 ret != NGHTTP2_ERR_CALLBACK_FAILURE) {
2421 verbose(VERB_QUERY, "http2: session_recv failed, "
2422 "error: %s", nghttp2_strerror(ret));
2426 if(nghttp2_session_want_write(c->h2_session->session)) {
2427 c->tcp_is_reading = 0;
2428 comm_point_stop_listening(c);
2429 comm_point_start_listening(c, -1, c->tcp_timeout_msec);
2430 } else if(!nghttp2_session_want_read(c->h2_session->session))
2431 return 0; /* connection can be closed */
2440 * Handle http reading callback.
2441 * @param fd: file descriptor of socket.
2442 * @param c: comm point to read from into buffer.
2443 * @return: 0 on error
2446 comm_point_http_handle_read(int fd, struct comm_point* c)
2448 log_assert(c->type == comm_http);
2449 log_assert(fd != -1);
2451 /* if we are in ssl handshake, handle SSL handshake */
2453 if(c->ssl && c->ssl_shake_state != comm_ssl_shake_none) {
2454 if(!ssl_handshake(c))
2456 if(c->ssl_shake_state != comm_ssl_shake_none)
2459 #endif /* HAVE_SSL */
2461 if(!c->tcp_is_reading)
2465 return comm_point_http2_handle_read(fd, c);
2468 /* http version is <= http/1.1 */
2470 if(c->http_min_version >= http_version_2) {
2471 /* HTTP/2 failed, not allowed to use lower version. */
2475 /* read more data */
2477 if(!ssl_http_read_more(c))
2480 if(!http_read_more(fd, c))
2484 sldns_buffer_flip(c->buffer);
2486 while(sldns_buffer_remaining(c->buffer) > 0) {
2487 /* Handle HTTP/1.x data */
2488 /* if we are reading headers, read more headers */
2489 if(c->http_in_headers || c->http_in_chunk_headers) {
2490 /* if header is done, process the header */
2491 if(!http_header_done(c->buffer)) {
2492 /* copy remaining data to front of buffer
2493 * and set rest for writing into it */
2494 http_moveover_buffer(c->buffer);
2495 /* return and wait to read more */
2498 if(!c->http_in_chunk_headers) {
2499 /* process initial headers */
2500 if(!http_process_initial_header(c))
2503 /* process chunk headers */
2504 int r = http_process_chunk_header(c);
2505 if(r == 0) return 0;
2506 if(r == 2) return 1; /* done */
2507 /* r == 1, continue */
2509 /* see if we have more to process */
2513 if(!c->http_is_chunked) {
2514 /* if we are reading nonchunks, process that*/
2515 return http_nonchunk_segment(c);
2517 /* if we are reading chunks, read the chunk */
2518 int r = http_chunked_segment(c);
2519 if(r == 0) return 0;
2520 if(r == 1) return 1;
2524 /* broke out of the loop; could not process header instead need
2526 /* moveover any remaining data and read more data */
2527 http_moveover_buffer(c->buffer);
2528 /* return and wait to read more */
2532 /** check pending connect for http */
2534 http_check_connect(int fd, struct comm_point* c)
2536 /* check for pending error from nonblocking connect */
2537 /* from Stevens, unix network programming, vol1, 3rd ed, p450*/
2539 socklen_t len = (socklen_t)sizeof(error);
2540 if(getsockopt(fd, SOL_SOCKET, SO_ERROR, (void*)&error,
2543 error = errno; /* on solaris errno is error */
2544 #else /* USE_WINSOCK */
2545 error = WSAGetLastError();
2549 #if defined(EINPROGRESS) && defined(EWOULDBLOCK)
2550 if(error == EINPROGRESS || error == EWOULDBLOCK)
2551 return 1; /* try again later */
2554 if(error != 0 && verbosity < 2)
2555 return 0; /* silence lots of chatter in the logs */
2556 else if(error != 0) {
2557 log_err_addr("http connect", strerror(error),
2558 &c->repinfo.addr, c->repinfo.addrlen);
2559 #else /* USE_WINSOCK */
2561 if(error == WSAEINPROGRESS)
2563 else if(error == WSAEWOULDBLOCK) {
2564 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
2566 } else if(error != 0 && verbosity < 2)
2568 else if(error != 0) {
2569 log_err_addr("http connect", wsa_strerror(error),
2570 &c->repinfo.addr, c->repinfo.addrlen);
2571 #endif /* USE_WINSOCK */
2574 /* keep on processing this socket */
2578 /** write more data for http (with ssl) */
2580 ssl_http_write_more(struct comm_point* c)
2584 log_assert(sldns_buffer_remaining(c->buffer) > 0);
2586 r = SSL_write(c->ssl, (void*)sldns_buffer_current(c->buffer),
2587 (int)sldns_buffer_remaining(c->buffer));
2589 int want = SSL_get_error(c->ssl, r);
2590 if(want == SSL_ERROR_ZERO_RETURN) {
2591 return 0; /* closed */
2592 } else if(want == SSL_ERROR_WANT_READ) {
2593 c->ssl_shake_state = comm_ssl_shake_hs_read;
2594 comm_point_listen_for_rw(c, 1, 0);
2595 return 1; /* wait for read condition */
2596 } else if(want == SSL_ERROR_WANT_WRITE) {
2597 return 1; /* write more later */
2598 } else if(want == SSL_ERROR_SYSCALL) {
2600 if(errno == EPIPE && verbosity < 2)
2601 return 0; /* silence 'broken pipe' */
2604 log_err("SSL_write syscall: %s",
2608 log_crypto_err("could not SSL_write");
2611 sldns_buffer_skip(c->buffer, (ssize_t)r);
2616 #endif /* HAVE_SSL */
2619 /** write more data for http */
2621 http_write_more(int fd, struct comm_point* c)
2624 log_assert(sldns_buffer_remaining(c->buffer) > 0);
2625 r = send(fd, (void*)sldns_buffer_current(c->buffer),
2626 sldns_buffer_remaining(c->buffer), 0);
2629 if(errno == EINTR || errno == EAGAIN)
2632 if(WSAGetLastError() == WSAEINPROGRESS)
2634 if(WSAGetLastError() == WSAEWOULDBLOCK) {
2635 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
2639 log_err_addr("http send r", sock_strerror(errno),
2640 &c->repinfo.addr, c->repinfo.addrlen);
2643 sldns_buffer_skip(c->buffer, r);
2648 ssize_t http2_send_cb(nghttp2_session* ATTR_UNUSED(session), const uint8_t* buf,
2649 size_t len, int ATTR_UNUSED(flags), void* cb_arg)
2653 struct http2_session* h2_session = (struct http2_session*)cb_arg;
2654 log_assert(h2_session->c->type == comm_http);
2655 log_assert(h2_session->c->h2_session);
2657 if(!h2_session->c->ssl)
2661 r = SSL_write(h2_session->c->ssl, buf, len);
2663 int want = SSL_get_error(h2_session->c->ssl, r);
2664 if(want == SSL_ERROR_ZERO_RETURN) {
2665 return NGHTTP2_ERR_CALLBACK_FAILURE;
2666 } else if(want == SSL_ERROR_WANT_READ) {
2667 h2_session->c->ssl_shake_state = comm_ssl_shake_hs_read;
2668 comm_point_listen_for_rw(h2_session->c, 1, 0);
2669 return NGHTTP2_ERR_WOULDBLOCK;
2670 } else if(want == SSL_ERROR_WANT_WRITE) {
2671 return NGHTTP2_ERR_WOULDBLOCK;
2672 } else if(want == SSL_ERROR_SYSCALL) {
2674 if(errno == EPIPE && verbosity < 2)
2675 return NGHTTP2_ERR_CALLBACK_FAILURE;
2678 log_err("SSL_write syscall: %s",
2680 return NGHTTP2_ERR_CALLBACK_FAILURE;
2682 log_crypto_err("could not SSL_write");
2683 return NGHTTP2_ERR_CALLBACK_FAILURE;
2693 #endif /* HAVE_NGHTTP2 */
2695 /** Handle http2 writing */
2697 comm_point_http2_handle_write(int ATTR_UNUSED(fd), struct comm_point* c)
2701 log_assert(c->h2_session);
2704 ret = nghttp2_session_send(c->h2_session->session);
2706 verbose(VERB_QUERY, "http2: session_send failed, "
2707 "error: %s", nghttp2_strerror(ret));
2711 if(nghttp2_session_want_read(c->h2_session->session)) {
2712 c->tcp_is_reading = 1;
2713 comm_point_stop_listening(c);
2714 comm_point_start_listening(c, -1, c->tcp_timeout_msec);
2715 } else if(!nghttp2_session_want_write(c->h2_session->session))
2716 return 0; /* connection can be closed */
2725 * Handle http writing callback.
2726 * @param fd: file descriptor of socket.
2727 * @param c: comm point to write buffer out of.
2728 * @return: 0 on error
2731 comm_point_http_handle_write(int fd, struct comm_point* c)
2733 log_assert(c->type == comm_http);
2734 log_assert(fd != -1);
2736 /* check pending connect errors, if that fails, we wait for more,
2737 * or we can continue to write contents */
2738 if(c->tcp_check_nb_connect) {
2739 int r = http_check_connect(fd, c);
2740 if(r == 0) return 0;
2741 if(r == 1) return 1;
2742 c->tcp_check_nb_connect = 0;
2744 /* if we are in ssl handshake, handle SSL handshake */
2746 if(c->ssl && c->ssl_shake_state != comm_ssl_shake_none) {
2747 if(!ssl_handshake(c))
2749 if(c->ssl_shake_state != comm_ssl_shake_none)
2752 #endif /* HAVE_SSL */
2753 if(c->tcp_is_reading)
2757 return comm_point_http2_handle_write(fd, c);
2760 /* http version is <= http/1.1 */
2762 if(c->http_min_version >= http_version_2) {
2763 /* HTTP/2 failed, not allowed to use lower version. */
2767 /* if we are writing, write more */
2769 if(!ssl_http_write_more(c))
2772 if(!http_write_more(fd, c))
2776 /* we write a single buffer contents, that can contain
2777 * the http request, and then flip to read the results */
2778 /* see if write is done */
2779 if(sldns_buffer_remaining(c->buffer) == 0) {
2780 sldns_buffer_clear(c->buffer);
2781 if(c->tcp_do_toggle_rw)
2782 c->tcp_is_reading = 1;
2783 c->tcp_byte_count = 0;
2784 /* switch from listening(write) to listening(read) */
2785 comm_point_stop_listening(c);
2786 comm_point_start_listening(c, -1, -1);
2792 comm_point_http_handle_callback(int fd, short event, void* arg)
2794 struct comm_point* c = (struct comm_point*)arg;
2795 log_assert(c->type == comm_http);
2796 ub_comm_base_now(c->ev->base);
2798 if(event&UB_EV_TIMEOUT) {
2799 verbose(VERB_QUERY, "http took too long, dropped");
2800 reclaim_http_handler(c);
2801 if(!c->tcp_do_close) {
2802 fptr_ok(fptr_whitelist_comm_point(c->callback));
2803 (void)(*c->callback)(c, c->cb_arg,
2804 NETEVENT_TIMEOUT, NULL);
2808 if(event&UB_EV_READ) {
2809 if(!comm_point_http_handle_read(fd, c)) {
2810 reclaim_http_handler(c);
2811 if(!c->tcp_do_close) {
2812 fptr_ok(fptr_whitelist_comm_point(
2814 (void)(*c->callback)(c, c->cb_arg,
2815 NETEVENT_CLOSED, NULL);
2820 if(event&UB_EV_WRITE) {
2821 if(!comm_point_http_handle_write(fd, c)) {
2822 reclaim_http_handler(c);
2823 if(!c->tcp_do_close) {
2824 fptr_ok(fptr_whitelist_comm_point(
2826 (void)(*c->callback)(c, c->cb_arg,
2827 NETEVENT_CLOSED, NULL);
2832 log_err("Ignored event %d for httphdl.", event);
2835 void comm_point_local_handle_callback(int fd, short event, void* arg)
2837 struct comm_point* c = (struct comm_point*)arg;
2838 log_assert(c->type == comm_local);
2839 ub_comm_base_now(c->ev->base);
2841 if(event&UB_EV_READ) {
2842 if(!comm_point_tcp_handle_read(fd, c, 1)) {
2843 fptr_ok(fptr_whitelist_comm_point(c->callback));
2844 (void)(*c->callback)(c, c->cb_arg, NETEVENT_CLOSED,
2849 log_err("Ignored event %d for localhdl.", event);
2852 void comm_point_raw_handle_callback(int ATTR_UNUSED(fd),
2853 short event, void* arg)
2855 struct comm_point* c = (struct comm_point*)arg;
2856 int err = NETEVENT_NOERROR;
2857 log_assert(c->type == comm_raw);
2858 ub_comm_base_now(c->ev->base);
2860 if(event&UB_EV_TIMEOUT)
2861 err = NETEVENT_TIMEOUT;
2862 fptr_ok(fptr_whitelist_comm_point_raw(c->callback));
2863 (void)(*c->callback)(c, c->cb_arg, err, NULL);
2867 comm_point_create_udp(struct comm_base *base, int fd, sldns_buffer* buffer,
2868 comm_point_callback_type* callback, void* callback_arg)
2870 struct comm_point* c = (struct comm_point*)calloc(1,
2871 sizeof(struct comm_point));
2875 c->ev = (struct internal_event*)calloc(1,
2876 sizeof(struct internal_event));
2885 c->tcp_is_reading = 0;
2886 c->tcp_byte_count = 0;
2887 c->tcp_parent = NULL;
2888 c->max_tcp_count = 0;
2889 c->cur_tcp_count = 0;
2890 c->tcp_handlers = NULL;
2893 c->tcp_do_close = 0;
2894 c->do_not_close = 0;
2895 c->tcp_do_toggle_rw = 0;
2896 c->tcp_check_nb_connect = 0;
2897 #ifdef USE_MSG_FASTOPEN
2898 c->tcp_do_fastopen = 0;
2902 c->dnscrypt_buffer = buffer;
2905 c->callback = callback;
2906 c->cb_arg = callback_arg;
2907 evbits = UB_EV_READ | UB_EV_PERSIST;
2908 /* ub_event stuff */
2909 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
2910 comm_point_udp_callback, c);
2911 if(c->ev->ev == NULL) {
2912 log_err("could not baseset udp event");
2913 comm_point_delete(c);
2916 if(fd!=-1 && ub_event_add(c->ev->ev, c->timeout) != 0 ) {
2917 log_err("could not add udp event");
2918 comm_point_delete(c);
2925 comm_point_create_udp_ancil(struct comm_base *base, int fd,
2926 sldns_buffer* buffer,
2927 comm_point_callback_type* callback, void* callback_arg)
2929 struct comm_point* c = (struct comm_point*)calloc(1,
2930 sizeof(struct comm_point));
2934 c->ev = (struct internal_event*)calloc(1,
2935 sizeof(struct internal_event));
2944 c->tcp_is_reading = 0;
2945 c->tcp_byte_count = 0;
2946 c->tcp_parent = NULL;
2947 c->max_tcp_count = 0;
2948 c->cur_tcp_count = 0;
2949 c->tcp_handlers = NULL;
2952 c->tcp_do_close = 0;
2953 c->do_not_close = 0;
2956 c->dnscrypt_buffer = buffer;
2959 c->tcp_do_toggle_rw = 0;
2960 c->tcp_check_nb_connect = 0;
2961 #ifdef USE_MSG_FASTOPEN
2962 c->tcp_do_fastopen = 0;
2964 c->callback = callback;
2965 c->cb_arg = callback_arg;
2966 evbits = UB_EV_READ | UB_EV_PERSIST;
2967 /* ub_event stuff */
2968 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
2969 comm_point_udp_ancil_callback, c);
2970 if(c->ev->ev == NULL) {
2971 log_err("could not baseset udp event");
2972 comm_point_delete(c);
2975 if(fd!=-1 && ub_event_add(c->ev->ev, c->timeout) != 0 ) {
2976 log_err("could not add udp event");
2977 comm_point_delete(c);
2983 static struct comm_point*
2984 comm_point_create_tcp_handler(struct comm_base *base,
2985 struct comm_point* parent, size_t bufsize,
2986 struct sldns_buffer* spoolbuf, comm_point_callback_type* callback,
2989 struct comm_point* c = (struct comm_point*)calloc(1,
2990 sizeof(struct comm_point));
2994 c->ev = (struct internal_event*)calloc(1,
2995 sizeof(struct internal_event));
3002 c->buffer = sldns_buffer_new(bufsize);
3008 c->timeout = (struct timeval*)malloc(sizeof(struct timeval));
3010 sldns_buffer_free(c->buffer);
3015 c->tcp_is_reading = 0;
3016 c->tcp_byte_count = 0;
3017 c->tcp_parent = parent;
3018 c->tcp_timeout_msec = parent->tcp_timeout_msec;
3019 c->tcp_conn_limit = parent->tcp_conn_limit;
3021 c->tcp_keepalive = 0;
3022 c->max_tcp_count = 0;
3023 c->cur_tcp_count = 0;
3024 c->tcp_handlers = NULL;
3027 c->tcp_do_close = 0;
3028 c->do_not_close = 0;
3029 c->tcp_do_toggle_rw = 1;
3030 c->tcp_check_nb_connect = 0;
3031 #ifdef USE_MSG_FASTOPEN
3032 c->tcp_do_fastopen = 0;
3036 /* We don't know just yet if this is a dnscrypt channel. Allocation
3037 * will be done when handling the callback. */
3038 c->dnscrypt_buffer = c->buffer;
3041 c->callback = callback;
3042 c->cb_arg = callback_arg;
3044 c->tcp_req_info = tcp_req_info_create(spoolbuf);
3045 if(!c->tcp_req_info) {
3046 log_err("could not create tcp commpoint");
3047 sldns_buffer_free(c->buffer);
3053 c->tcp_req_info->cp = c;
3054 c->tcp_do_close = 1;
3055 c->tcp_do_toggle_rw = 0;
3057 /* add to parent free list */
3058 c->tcp_free = parent->tcp_free;
3059 parent->tcp_free = c;
3060 /* ub_event stuff */
3061 evbits = UB_EV_PERSIST | UB_EV_READ | UB_EV_TIMEOUT;
3062 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3063 comm_point_tcp_handle_callback, c);
3064 if(c->ev->ev == NULL)
3066 log_err("could not basetset tcphdl event");
3067 parent->tcp_free = c->tcp_free;
3068 tcp_req_info_delete(c->tcp_req_info);
3069 sldns_buffer_free(c->buffer);
3078 static struct comm_point*
3079 comm_point_create_http_handler(struct comm_base *base,
3080 struct comm_point* parent, size_t bufsize, int harden_large_queries,
3081 uint32_t http_max_streams, char* http_endpoint,
3082 comm_point_callback_type* callback, void* callback_arg)
3084 struct comm_point* c = (struct comm_point*)calloc(1,
3085 sizeof(struct comm_point));
3089 c->ev = (struct internal_event*)calloc(1,
3090 sizeof(struct internal_event));
3097 c->buffer = sldns_buffer_new(bufsize);
3103 c->timeout = (struct timeval*)malloc(sizeof(struct timeval));
3105 sldns_buffer_free(c->buffer);
3110 c->tcp_is_reading = 0;
3111 c->tcp_byte_count = 0;
3112 c->tcp_parent = parent;
3113 c->tcp_timeout_msec = parent->tcp_timeout_msec;
3114 c->tcp_conn_limit = parent->tcp_conn_limit;
3116 c->tcp_keepalive = 0;
3117 c->max_tcp_count = 0;
3118 c->cur_tcp_count = 0;
3119 c->tcp_handlers = NULL;
3121 c->type = comm_http;
3122 c->tcp_do_close = 1;
3123 c->do_not_close = 0;
3124 c->tcp_do_toggle_rw = 1; /* will be set to 0 after http2 upgrade */
3125 c->tcp_check_nb_connect = 0;
3126 #ifdef USE_MSG_FASTOPEN
3127 c->tcp_do_fastopen = 0;
3131 c->dnscrypt_buffer = NULL;
3134 c->callback = callback;
3135 c->cb_arg = callback_arg;
3137 c->http_min_version = http_version_2;
3138 c->http2_stream_max_qbuffer_size = bufsize;
3139 if(harden_large_queries && bufsize > 512)
3140 c->http2_stream_max_qbuffer_size = 512;
3141 c->http2_max_streams = http_max_streams;
3142 if(!(c->http_endpoint = strdup(http_endpoint))) {
3143 log_err("could not strdup http_endpoint");
3144 sldns_buffer_free(c->buffer);
3152 if(!(c->h2_session = http2_session_create(c))) {
3153 log_err("could not create http2 session");
3154 free(c->http_endpoint);
3155 sldns_buffer_free(c->buffer);
3161 if(!(c->h2_session->callbacks = http2_req_callbacks_create())) {
3162 log_err("could not create http2 callbacks");
3163 http2_session_delete(c->h2_session);
3164 free(c->http_endpoint);
3165 sldns_buffer_free(c->buffer);
3173 /* add to parent free list */
3174 c->tcp_free = parent->tcp_free;
3175 parent->tcp_free = c;
3176 /* ub_event stuff */
3177 evbits = UB_EV_PERSIST | UB_EV_READ | UB_EV_TIMEOUT;
3178 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3179 comm_point_http_handle_callback, c);
3180 if(c->ev->ev == NULL)
3182 log_err("could not set http handler event");
3183 parent->tcp_free = c->tcp_free;
3184 http2_session_delete(c->h2_session);
3185 sldns_buffer_free(c->buffer);
3195 comm_point_create_tcp(struct comm_base *base, int fd, int num,
3196 int idle_timeout, int harden_large_queries,
3197 uint32_t http_max_streams, char* http_endpoint,
3198 struct tcl_list* tcp_conn_limit, size_t bufsize,
3199 struct sldns_buffer* spoolbuf, enum listen_type port_type,
3200 comm_point_callback_type* callback, void* callback_arg)
3202 struct comm_point* c = (struct comm_point*)calloc(1,
3203 sizeof(struct comm_point));
3206 /* first allocate the TCP accept listener */
3209 c->ev = (struct internal_event*)calloc(1,
3210 sizeof(struct internal_event));
3219 c->tcp_is_reading = 0;
3220 c->tcp_byte_count = 0;
3221 c->tcp_timeout_msec = idle_timeout;
3222 c->tcp_conn_limit = tcp_conn_limit;
3224 c->tcp_keepalive = 0;
3225 c->tcp_parent = NULL;
3226 c->max_tcp_count = num;
3227 c->cur_tcp_count = 0;
3228 c->tcp_handlers = (struct comm_point**)calloc((size_t)num,
3229 sizeof(struct comm_point*));
3230 if(!c->tcp_handlers) {
3236 c->type = comm_tcp_accept;
3237 c->tcp_do_close = 0;
3238 c->do_not_close = 0;
3239 c->tcp_do_toggle_rw = 0;
3240 c->tcp_check_nb_connect = 0;
3241 #ifdef USE_MSG_FASTOPEN
3242 c->tcp_do_fastopen = 0;
3246 c->dnscrypt_buffer = NULL;
3250 evbits = UB_EV_READ | UB_EV_PERSIST;
3251 /* ub_event stuff */
3252 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3253 comm_point_tcp_accept_callback, c);
3254 if(c->ev->ev == NULL) {
3255 log_err("could not baseset tcpacc event");
3256 comm_point_delete(c);
3259 if (ub_event_add(c->ev->ev, c->timeout) != 0) {
3260 log_err("could not add tcpacc event");
3261 comm_point_delete(c);
3264 /* now prealloc the handlers */
3265 for(i=0; i<num; i++) {
3266 if(port_type == listen_type_tcp ||
3267 port_type == listen_type_ssl ||
3268 port_type == listen_type_tcp_dnscrypt) {
3269 c->tcp_handlers[i] = comm_point_create_tcp_handler(base,
3270 c, bufsize, spoolbuf, callback, callback_arg);
3271 } else if(port_type == listen_type_http) {
3272 c->tcp_handlers[i] = comm_point_create_http_handler(
3273 base, c, bufsize, harden_large_queries,
3274 http_max_streams, http_endpoint,
3275 callback, callback_arg);
3278 log_err("could not create tcp handler, unknown listen "
3282 if(!c->tcp_handlers[i]) {
3283 comm_point_delete(c);
3292 comm_point_create_tcp_out(struct comm_base *base, size_t bufsize,
3293 comm_point_callback_type* callback, void* callback_arg)
3295 struct comm_point* c = (struct comm_point*)calloc(1,
3296 sizeof(struct comm_point));
3300 c->ev = (struct internal_event*)calloc(1,
3301 sizeof(struct internal_event));
3308 c->buffer = sldns_buffer_new(bufsize);
3315 c->tcp_is_reading = 0;
3316 c->tcp_byte_count = 0;
3317 c->tcp_timeout_msec = TCP_QUERY_TIMEOUT;
3318 c->tcp_conn_limit = NULL;
3320 c->tcp_keepalive = 0;
3321 c->tcp_parent = NULL;
3322 c->max_tcp_count = 0;
3323 c->cur_tcp_count = 0;
3324 c->tcp_handlers = NULL;
3327 c->tcp_do_close = 0;
3328 c->do_not_close = 0;
3329 c->tcp_do_toggle_rw = 1;
3330 c->tcp_check_nb_connect = 1;
3331 #ifdef USE_MSG_FASTOPEN
3332 c->tcp_do_fastopen = 1;
3336 c->dnscrypt_buffer = c->buffer;
3339 c->callback = callback;
3340 c->cb_arg = callback_arg;
3341 evbits = UB_EV_PERSIST | UB_EV_WRITE;
3342 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3343 comm_point_tcp_handle_callback, c);
3344 if(c->ev->ev == NULL)
3346 log_err("could not baseset tcpout event");
3347 sldns_buffer_free(c->buffer);
3357 comm_point_create_http_out(struct comm_base *base, size_t bufsize,
3358 comm_point_callback_type* callback, void* callback_arg,
3361 struct comm_point* c = (struct comm_point*)calloc(1,
3362 sizeof(struct comm_point));
3366 c->ev = (struct internal_event*)calloc(1,
3367 sizeof(struct internal_event));
3374 c->buffer = sldns_buffer_new(bufsize);
3381 c->tcp_is_reading = 0;
3382 c->tcp_byte_count = 0;
3383 c->tcp_parent = NULL;
3384 c->max_tcp_count = 0;
3385 c->cur_tcp_count = 0;
3386 c->tcp_handlers = NULL;
3388 c->type = comm_http;
3389 c->tcp_do_close = 0;
3390 c->do_not_close = 0;
3391 c->tcp_do_toggle_rw = 1;
3392 c->tcp_check_nb_connect = 1;
3393 c->http_in_headers = 1;
3394 c->http_in_chunk_headers = 0;
3395 c->http_is_chunked = 0;
3396 c->http_temp = temp;
3397 #ifdef USE_MSG_FASTOPEN
3398 c->tcp_do_fastopen = 1;
3402 c->dnscrypt_buffer = c->buffer;
3405 c->callback = callback;
3406 c->cb_arg = callback_arg;
3407 evbits = UB_EV_PERSIST | UB_EV_WRITE;
3408 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3409 comm_point_http_handle_callback, c);
3410 if(c->ev->ev == NULL)
3412 log_err("could not baseset tcpout event");
3416 sldns_buffer_free(c->buffer);
3426 comm_point_create_local(struct comm_base *base, int fd, size_t bufsize,
3427 comm_point_callback_type* callback, void* callback_arg)
3429 struct comm_point* c = (struct comm_point*)calloc(1,
3430 sizeof(struct comm_point));
3434 c->ev = (struct internal_event*)calloc(1,
3435 sizeof(struct internal_event));
3442 c->buffer = sldns_buffer_new(bufsize);
3449 c->tcp_is_reading = 1;
3450 c->tcp_byte_count = 0;
3451 c->tcp_parent = NULL;
3452 c->max_tcp_count = 0;
3453 c->cur_tcp_count = 0;
3454 c->tcp_handlers = NULL;
3456 c->type = comm_local;
3457 c->tcp_do_close = 0;
3458 c->do_not_close = 1;
3459 c->tcp_do_toggle_rw = 0;
3460 c->tcp_check_nb_connect = 0;
3461 #ifdef USE_MSG_FASTOPEN
3462 c->tcp_do_fastopen = 0;
3466 c->dnscrypt_buffer = c->buffer;
3468 c->callback = callback;
3469 c->cb_arg = callback_arg;
3470 /* ub_event stuff */
3471 evbits = UB_EV_PERSIST | UB_EV_READ;
3472 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3473 comm_point_local_handle_callback, c);
3474 if(c->ev->ev == NULL) {
3475 log_err("could not baseset localhdl event");
3480 if (ub_event_add(c->ev->ev, c->timeout) != 0) {
3481 log_err("could not add localhdl event");
3482 ub_event_free(c->ev->ev);
3491 comm_point_create_raw(struct comm_base* base, int fd, int writing,
3492 comm_point_callback_type* callback, void* callback_arg)
3494 struct comm_point* c = (struct comm_point*)calloc(1,
3495 sizeof(struct comm_point));
3499 c->ev = (struct internal_event*)calloc(1,
3500 sizeof(struct internal_event));
3509 c->tcp_is_reading = 0;
3510 c->tcp_byte_count = 0;
3511 c->tcp_parent = NULL;
3512 c->max_tcp_count = 0;
3513 c->cur_tcp_count = 0;
3514 c->tcp_handlers = NULL;
3517 c->tcp_do_close = 0;
3518 c->do_not_close = 1;
3519 c->tcp_do_toggle_rw = 0;
3520 c->tcp_check_nb_connect = 0;
3521 #ifdef USE_MSG_FASTOPEN
3522 c->tcp_do_fastopen = 0;
3526 c->dnscrypt_buffer = c->buffer;
3528 c->callback = callback;
3529 c->cb_arg = callback_arg;
3530 /* ub_event stuff */
3532 evbits = UB_EV_PERSIST | UB_EV_WRITE;
3533 else evbits = UB_EV_PERSIST | UB_EV_READ;
3534 c->ev->ev = ub_event_new(base->eb->base, c->fd, evbits,
3535 comm_point_raw_handle_callback, c);
3536 if(c->ev->ev == NULL) {
3537 log_err("could not baseset rawhdl event");
3542 if (ub_event_add(c->ev->ev, c->timeout) != 0) {
3543 log_err("could not add rawhdl event");
3544 ub_event_free(c->ev->ev);
3553 comm_point_close(struct comm_point* c)
3558 if(ub_event_del(c->ev->ev) != 0) {
3559 log_err("could not event_del on close");
3562 tcl_close_connection(c->tcl_addr);
3564 tcp_req_info_clear(c->tcp_req_info);
3566 http2_session_server_delete(c->h2_session);
3568 /* close fd after removing from event lists, or epoll.. is messed up */
3569 if(c->fd != -1 && !c->do_not_close) {
3570 if(c->type == comm_tcp || c->type == comm_http) {
3571 /* delete sticky events for the fd, it gets closed */
3572 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_READ);
3573 ub_winsock_tcp_wouldblock(c->ev->ev, UB_EV_WRITE);
3575 verbose(VERB_ALGO, "close fd %d", c->fd);
3582 comm_point_delete(struct comm_point* c)
3586 if((c->type == comm_tcp || c->type == comm_http) && c->ssl) {
3588 SSL_shutdown(c->ssl);
3592 if(c->type == comm_http && c->http_endpoint) {
3593 free(c->http_endpoint);
3594 c->http_endpoint = NULL;
3596 comm_point_close(c);
3597 if(c->tcp_handlers) {
3599 for(i=0; i<c->max_tcp_count; i++)
3600 comm_point_delete(c->tcp_handlers[i]);
3601 free(c->tcp_handlers);
3604 if(c->type == comm_tcp || c->type == comm_local || c->type == comm_http) {
3605 sldns_buffer_free(c->buffer);
3607 if(c->dnscrypt && c->dnscrypt_buffer != c->buffer) {
3608 sldns_buffer_free(c->dnscrypt_buffer);
3611 if(c->tcp_req_info) {
3612 tcp_req_info_delete(c->tcp_req_info);
3615 http2_session_delete(c->h2_session);
3618 ub_event_free(c->ev->ev);
3624 comm_point_send_reply(struct comm_reply *repinfo)
3626 struct sldns_buffer* buffer;
3627 log_assert(repinfo && repinfo->c);
3629 buffer = repinfo->c->dnscrypt_buffer;
3630 if(!dnsc_handle_uncurved_request(repinfo)) {
3634 buffer = repinfo->c->buffer;
3636 if(repinfo->c->type == comm_udp) {
3637 if(repinfo->srctype)
3638 comm_point_send_udp_msg_if(repinfo->c,
3639 buffer, (struct sockaddr*)&repinfo->addr,
3640 repinfo->addrlen, repinfo);
3642 comm_point_send_udp_msg(repinfo->c, buffer,
3643 (struct sockaddr*)&repinfo->addr, repinfo->addrlen);
3645 if(repinfo->c->dtenv != NULL &&
3646 repinfo->c->dtenv->log_client_response_messages)
3647 dt_msg_send_client_response(repinfo->c->dtenv,
3648 &repinfo->addr, repinfo->c->type, repinfo->c->buffer);
3652 if(repinfo->c->tcp_parent->dtenv != NULL &&
3653 repinfo->c->tcp_parent->dtenv->log_client_response_messages)
3654 dt_msg_send_client_response(repinfo->c->tcp_parent->dtenv,
3655 &repinfo->addr, repinfo->c->type,
3656 ( repinfo->c->tcp_req_info
3657 ? repinfo->c->tcp_req_info->spool_buffer
3658 : repinfo->c->buffer ));
3660 if(repinfo->c->tcp_req_info) {
3661 tcp_req_info_send_reply(repinfo->c->tcp_req_info);
3662 } else if(repinfo->c->use_h2) {
3663 if(!http2_submit_dns_response(repinfo->c->h2_session)) {
3664 comm_point_drop_reply(repinfo);
3667 repinfo->c->h2_stream = NULL;
3668 repinfo->c->tcp_is_reading = 0;
3669 comm_point_stop_listening(repinfo->c);
3670 comm_point_start_listening(repinfo->c, -1,
3671 repinfo->c->tcp_timeout_msec);
3674 comm_point_start_listening(repinfo->c, -1,
3675 repinfo->c->tcp_timeout_msec);
3681 comm_point_drop_reply(struct comm_reply* repinfo)
3685 log_assert(repinfo->c);
3686 log_assert(repinfo->c->type != comm_tcp_accept);
3687 if(repinfo->c->type == comm_udp)
3689 if(repinfo->c->tcp_req_info)
3690 repinfo->c->tcp_req_info->is_drop = 1;
3691 if(repinfo->c->type == comm_http) {
3692 if(repinfo->c->h2_session) {
3693 repinfo->c->h2_session->is_drop = 1;
3694 if(!repinfo->c->h2_session->postpone_drop)
3695 reclaim_http_handler(repinfo->c);
3698 reclaim_http_handler(repinfo->c);
3701 reclaim_tcp_handler(repinfo->c);
3705 comm_point_stop_listening(struct comm_point* c)
3707 verbose(VERB_ALGO, "comm point stop listening %d", c->fd);
3708 if(ub_event_del(c->ev->ev) != 0) {
3709 log_err("event_del error to stoplisten");
3714 comm_point_start_listening(struct comm_point* c, int newfd, int msec)
3716 verbose(VERB_ALGO, "comm point start listening %d (%d msec)",
3717 c->fd==-1?newfd:c->fd, msec);
3718 if(c->type == comm_tcp_accept && !c->tcp_free) {
3719 /* no use to start listening no free slots. */
3722 if(msec != -1 && msec != 0) {
3724 c->timeout = (struct timeval*)malloc(sizeof(
3727 log_err("cpsl: malloc failed. No net read.");
3731 ub_event_add_bits(c->ev->ev, UB_EV_TIMEOUT);
3732 #ifndef S_SPLINT_S /* splint fails on struct timeval. */
3733 c->timeout->tv_sec = msec/1000;
3734 c->timeout->tv_usec = (msec%1000)*1000;
3735 #endif /* S_SPLINT_S */
3737 if(c->type == comm_tcp || c->type == comm_http) {
3738 ub_event_del_bits(c->ev->ev, UB_EV_READ|UB_EV_WRITE);
3739 if(c->tcp_is_reading)
3740 ub_event_add_bits(c->ev->ev, UB_EV_READ);
3741 else ub_event_add_bits(c->ev->ev, UB_EV_WRITE);
3748 ub_event_set_fd(c->ev->ev, c->fd);
3750 if(ub_event_add(c->ev->ev, msec==0?NULL:c->timeout) != 0) {
3751 log_err("event_add failed. in cpsl.");
3755 void comm_point_listen_for_rw(struct comm_point* c, int rd, int wr)
3757 verbose(VERB_ALGO, "comm point listen_for_rw %d %d", c->fd, wr);
3758 if(ub_event_del(c->ev->ev) != 0) {
3759 log_err("event_del error to cplf");
3761 ub_event_del_bits(c->ev->ev, UB_EV_READ|UB_EV_WRITE);
3762 if(rd) ub_event_add_bits(c->ev->ev, UB_EV_READ);
3763 if(wr) ub_event_add_bits(c->ev->ev, UB_EV_WRITE);
3764 if(ub_event_add(c->ev->ev, c->timeout) != 0) {
3765 log_err("event_add failed. in cplf.");
3769 size_t comm_point_get_mem(struct comm_point* c)
3774 s = sizeof(*c) + sizeof(*c->ev);
3776 s += sizeof(*c->timeout);
3777 if(c->type == comm_tcp || c->type == comm_local) {
3778 s += sizeof(*c->buffer) + sldns_buffer_capacity(c->buffer);
3780 s += sizeof(*c->dnscrypt_buffer);
3781 if(c->buffer != c->dnscrypt_buffer) {
3782 s += sldns_buffer_capacity(c->dnscrypt_buffer);
3786 if(c->type == comm_tcp_accept) {
3788 for(i=0; i<c->max_tcp_count; i++)
3789 s += comm_point_get_mem(c->tcp_handlers[i]);
3795 comm_timer_create(struct comm_base* base, void (*cb)(void*), void* cb_arg)
3797 struct internal_timer *tm = (struct internal_timer*)calloc(1,
3798 sizeof(struct internal_timer));
3800 log_err("malloc failed");
3803 tm->super.ev_timer = tm;
3805 tm->super.callback = cb;
3806 tm->super.cb_arg = cb_arg;
3807 tm->ev = ub_event_new(base->eb->base, -1, UB_EV_TIMEOUT,
3808 comm_timer_callback, &tm->super);
3809 if(tm->ev == NULL) {
3810 log_err("timer_create: event_base_set failed.");
3818 comm_timer_disable(struct comm_timer* timer)
3822 ub_timer_del(timer->ev_timer->ev);
3823 timer->ev_timer->enabled = 0;
3827 comm_timer_set(struct comm_timer* timer, struct timeval* tv)
3830 if(timer->ev_timer->enabled)
3831 comm_timer_disable(timer);
3832 if(ub_timer_add(timer->ev_timer->ev, timer->ev_timer->base->eb->base,
3833 comm_timer_callback, timer, tv) != 0)
3834 log_err("comm_timer_set: evtimer_add failed.");
3835 timer->ev_timer->enabled = 1;
3839 comm_timer_delete(struct comm_timer* timer)
3843 comm_timer_disable(timer);
3844 /* Free the sub struct timer->ev_timer derived from the super struct timer.
3845 * i.e. assert(timer == timer->ev_timer)
3847 ub_event_free(timer->ev_timer->ev);
3848 free(timer->ev_timer);
3852 comm_timer_callback(int ATTR_UNUSED(fd), short event, void* arg)
3854 struct comm_timer* tm = (struct comm_timer*)arg;
3855 if(!(event&UB_EV_TIMEOUT))
3857 ub_comm_base_now(tm->ev_timer->base);
3858 tm->ev_timer->enabled = 0;
3859 fptr_ok(fptr_whitelist_comm_timer(tm->callback));
3860 (*tm->callback)(tm->cb_arg);
3864 comm_timer_is_set(struct comm_timer* timer)
3866 return (int)timer->ev_timer->enabled;
3870 comm_timer_get_mem(struct comm_timer* ATTR_UNUSED(timer))
3872 return sizeof(struct internal_timer);
3876 comm_signal_create(struct comm_base* base,
3877 void (*callback)(int, void*), void* cb_arg)
3879 struct comm_signal* com = (struct comm_signal*)malloc(
3880 sizeof(struct comm_signal));
3882 log_err("malloc failed");
3886 com->callback = callback;
3887 com->cb_arg = cb_arg;
3888 com->ev_signal = NULL;
3893 comm_signal_callback(int sig, short event, void* arg)
3895 struct comm_signal* comsig = (struct comm_signal*)arg;
3896 if(!(event & UB_EV_SIGNAL))
3898 ub_comm_base_now(comsig->base);
3899 fptr_ok(fptr_whitelist_comm_signal(comsig->callback));
3900 (*comsig->callback)(sig, comsig->cb_arg);
3904 comm_signal_bind(struct comm_signal* comsig, int sig)
3906 struct internal_signal* entry = (struct internal_signal*)calloc(1,
3907 sizeof(struct internal_signal));
3909 log_err("malloc failed");
3913 /* add signal event */
3914 entry->ev = ub_signal_new(comsig->base->eb->base, sig,
3915 comm_signal_callback, comsig);
3916 if(entry->ev == NULL) {
3917 log_err("Could not create signal event");
3921 if(ub_signal_add(entry->ev, NULL) != 0) {
3922 log_err("Could not add signal handler");
3923 ub_event_free(entry->ev);
3927 /* link into list */
3928 entry->next = comsig->ev_signal;
3929 comsig->ev_signal = entry;
3934 comm_signal_delete(struct comm_signal* comsig)
3936 struct internal_signal* p, *np;
3939 p=comsig->ev_signal;
3942 ub_signal_del(p->ev);
3943 ub_event_free(p->ev);