1 diff -ur ../pidentd-3.0.12-orig/src/k_linux.c ./src/k_linux.c
2 --- ../pidentd-3.0.12-orig/src/k_linux.c Sat Jan 12 00:44:05 2002
3 +++ ./src/k_linux.c Sat Nov 3 07:51:28 2001
8 +#define NETLINK_TCPDIAG 4
9 +#define TCPDIAG_GETSOCK 18
11 +#include <linux/uio.h>
12 +#include <linux/netlink.h>
14 +/* Socket identity */
15 +struct tcpdiag_sockid
17 + __u16 tcpdiag_sport;
18 + __u16 tcpdiag_dport;
19 + __u32 tcpdiag_src[4];
20 + __u32 tcpdiag_dst[4];
22 + __u32 tcpdiag_cookie[2];
23 +#define TCPDIAG_NOCOOKIE (~0U)
26 +/* Request structure */
30 + __u8 tcpdiag_family; /* Family of addresses. */
31 + __u8 tcpdiag_src_len;
32 + __u8 tcpdiag_dst_len;
33 + __u8 tcpdiag_ext; /* Query extended information */
35 + struct tcpdiag_sockid id;
37 + __u32 tcpdiag_states; /* States to dump */
38 + __u32 tcpdiag_dbs; /* Tables to dump (NI) */
43 + __u8 tcpdiag_family;
46 + __u8 tcpdiag_retrans;
48 + struct tcpdiag_sockid id;
50 + __u32 tcpdiag_expires;
51 + __u32 tcpdiag_rqueue;
52 + __u32 tcpdiag_wqueue;
54 + __u32 tcpdiag_inode;
61 ** Make sure we are running on a supported OS version
66 + tcpdiag_fd = socket(AF_NETLINK, SOCK_DGRAM, NETLINK_TCPDIAG);
67 return 0; /* We always succeed */
75 +int k_lookup_tcpdiag(struct kernel *kp)
77 + struct sockaddr_nl nladdr;
79 + struct nlmsghdr nlh;
80 + struct tcpdiagreq r;
84 + struct iovec iov[1];
85 + struct tcpdiagmsg *r;
86 + static unsigned seqno = 123456;
88 + memset(&nladdr, 0, sizeof(nladdr));
89 + nladdr.nl_family = AF_NETLINK;
91 + req.nlh.nlmsg_len = sizeof(req);
92 + req.nlh.nlmsg_type = TCPDIAG_GETSOCK;
93 + req.nlh.nlmsg_flags = NLM_F_REQUEST;
94 + req.nlh.nlmsg_pid = 0;
95 + req.nlh.nlmsg_seq = ++seqno;
96 + memset(&req.r, 0, sizeof(req.r));
97 + req.r.tcpdiag_family = AF_INET;
98 + req.r.tcpdiag_states = ~0;
100 + req.r.id.tcpdiag_dport = kp->remote.sin_port;
101 + req.r.id.tcpdiag_sport = kp->local.sin_port;
102 + req.r.id.tcpdiag_dst[0] = kp->remote.sin_addr.s_addr;
103 + req.r.id.tcpdiag_src[0] = kp->local.sin_addr.s_addr;
104 + req.r.id.tcpdiag_cookie[0] = TCPDIAG_NOCOOKIE;
105 + req.r.id.tcpdiag_cookie[1] = TCPDIAG_NOCOOKIE;
108 + iov[0] = (struct iovec){ &req, sizeof(req) };
110 + msg = (struct msghdr) {
111 + (void*)&nladdr, sizeof(nladdr),
117 + if (sendmsg(tcpdiag_fd, &msg, 0) < 0) {
118 + if (errno == ECONNREFUSED) {
123 + syslog(LOG_ERR, "system error on tcpdiag sendmsg: %m");
127 + iov[0] = (struct iovec){ buf, sizeof(buf) };
131 + struct nlmsghdr *h;
133 + msg = (struct msghdr) {
134 + (void*)&nladdr, sizeof(nladdr),
140 + status = recvmsg(tcpdiag_fd, &msg, 0);
143 + if (errno == EINTR || errno == EAGAIN)
151 + h = (struct nlmsghdr*)buf;
152 + while (NLMSG_OK(h, status)) {
155 + if (/*h->nlmsg_pid != rth->local.nl_pid ||*/
156 + h->nlmsg_seq != seqno)
159 + if (h->nlmsg_type == NLMSG_DONE)
161 + if (h->nlmsg_type == NLMSG_ERROR) {
162 + struct nlmsgerr *err = (struct nlmsgerr*)NLMSG_DATA(h);
163 + if (h->nlmsg_len < NLMSG_LENGTH(sizeof(struct nlmsgerr))) {
166 + errno = -err->error;
167 + if (errno == ECONNREFUSED) {
172 + if (errno != ENOENT)
173 + syslog(LOG_ERR, "tcpdiag answers: %m");
180 + /* Lookup _may_ return listening socket, if no
181 + * better matches are found. */
182 + if (r->id.tcpdiag_dport == kp->remote.sin_port &&
183 + r->id.tcpdiag_dst[0] == kp->remote.sin_addr.s_addr) {
184 + kp->ruid = r->tcpdiag_uid;
185 + if (!r->tcpdiag_inode && !r->tcpdiag_uid) {
186 + /* _NEVER_ return "root" for closed
187 + * sockets. Otherwise people think
188 + * that it is sysadmin who abuses their
189 + * poor ircd. :-) */
191 + "Req for stale socket(%d) %d from %x/%d",
192 + r->tcpdiag_state, ntohs(r->id.tcpdiag_sport),
193 + r->id.tcpdiag_dst[0], ntohs(r->id.tcpdiag_dport));
202 + h = NLMSG_NEXT(h, status);
204 + if ((msg.msg_flags & MSG_TRUNC) || status) {
205 + syslog(LOG_ERR, "truncated tcp_diag message");
213 ka_lookup(void *vp, struct kernel *kp)
216 long r_laddr, r_raddr, myladdr, myraddr;
217 int r_lport, r_rport, mylport, myrport;
222 + if (tcpdiag_fd >= 0) {
224 + if ((res = k_lookup_tcpdiag(kp)) != 0)
226 + syslog(LOG_ERR, "tcp_diag is not loaded, fallback to proc");
230 r_rport = ntohs(kp->remote.sin_port);
231 r_lport = ntohs(kp->local.sin_port);
232 r_raddr = kp->remote.sin_addr.s_addr;
233 r_laddr = kp->local.sin_addr.s_addr;
244 while (fgets(buf, sizeof(buf)-1, fp) != NULL)
246 - if (sscanf(buf, "%*d: %lx:%x %lx:%x %*x %*x:%*x %*x:%*x %*x %d %*d %*d",
247 - &myladdr, &mylport, &myraddr, &myrport, &euid) == 5)
249 + if (sscanf(buf, "%*d: %x:%x %x:%x %x %*x:%*x %*x:%*x %*x %d %*d %u",
250 + &myladdr, &mylport, &myraddr, &myrport,
251 + &state, &euid, &ino) == 7)
253 if (myladdr == r_laddr && mylport == r_lport &&
254 myraddr == r_raddr && myrport == r_rport)
257 + if (ino == 0 && euid == 0)
259 + /* _NEVER_ return "root" for closed
260 + * sockets. Otherwise people think
261 + * that it is sysadmin who abuses their
262 + * poor ircd. :-) */
264 + "Req for stale socket(%d) %d from %x/%d",
265 + state, r_rport, r_raddr, r_lport);