sudo/plugins/sudoers/interfaces.c

135 lines
3.7 KiB
C

/*
* SPDX-License-Identifier: ISC
*
* Copyright (c) 2010-2016 Todd C. Miller <Todd.Miller@sudo.ws>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
/*
* This is an open source non-commercial project. Dear PVS-Studio, please check it.
* PVS-Studio Static Code Analyzer for C, C++ and C#: http://www.viva64.com
*/
#include <config.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#ifdef NEED_RESOLV_H
# include <arpa/nameser.h>
# include <resolv.h>
#endif /* NEED_RESOLV_H */
#include <netdb.h>
#include <errno.h>
#include <sudoers.h>
#include <interfaces.h>
static struct interface_list interfaces = SLIST_HEAD_INITIALIZER(interfaces);
/*
* Parse a space-delimited list of IP address/netmask pairs and
* store in a list of interface structures. Returns true on
* success and false on parse error or memory allocation error.
*/
bool
set_interfaces(const char *ai)
{
char *addrinfo, *addr, *mask, *last;
struct interface *ifp;
bool ret = false;
debug_decl(set_interfaces, SUDOERS_DEBUG_NETIF);
if ((addrinfo = strdup(ai)) == NULL)
debug_return_bool(false);
for (addr = strtok_r(addrinfo, " \t", &last); addr != NULL; addr = strtok_r(NULL, " \t", &last)) {
/* Separate addr and mask. */
if ((mask = strchr(addr, '/')) == NULL)
continue;
*mask++ = '\0';
/* Parse addr and store in list. */
if ((ifp = calloc(1, sizeof(*ifp))) == NULL) {
sudo_warnx(U_("%s: %s"), __func__, U_("unable to allocate memory"));
goto done;
}
if (strchr(addr, ':')) {
/* IPv6 */
#ifdef HAVE_STRUCT_IN6_ADDR
ifp->family = AF_INET6;
if (inet_pton(AF_INET6, addr, &ifp->addr.ip6) != 1) {
sudo_warnx(U_("unable to parse IP address \"%s\""), addr);
free(ifp);
goto done;
}
if (inet_pton(AF_INET6, mask, &ifp->netmask.ip6) != 1) {
sudo_warnx(U_("unable to parse netmask \"%s\""), mask);
free(ifp);
goto done;
}
#else
free(ifp);
continue;
#endif
} else {
/* IPv4 */
ifp->family = AF_INET;
if (inet_pton(AF_INET, addr, &ifp->addr.ip4) != 1) {
sudo_warnx(U_("unable to parse IP address \"%s\""), addr);
free(ifp);
goto done;
}
if (inet_pton(AF_INET, mask, &ifp->netmask.ip4) != 1) {
sudo_warnx(U_("unable to parse netmask \"%s\""), mask);
free(ifp);
goto done;
}
}
SLIST_INSERT_HEAD(&interfaces, ifp, entries);
}
ret = true;
done:
free(addrinfo);
debug_return_bool(ret);
}
struct interface_list *
get_interfaces(void)
{
return &interfaces;
}
void
dump_interfaces(const char *ai)
{
const char *cp, *ep;
const char *ai_end = ai + strlen(ai);
debug_decl(set_interfaces, SUDOERS_DEBUG_NETIF);
sudo_printf(SUDO_CONV_INFO_MSG,
_("Local IP address and netmask pairs:\n"));
cp = sudo_strsplit(ai, ai_end, " \t", &ep);
while (cp != NULL) {
sudo_printf(SUDO_CONV_INFO_MSG, "\t%.*s\n", (int)(ep - cp), cp);
cp = sudo_strsplit(NULL, ai_end, " \t", &ep);
}
debug_return;
}