Annotation of src/usr.bin/nc/socks.c, Revision 1.15
1.15 ! avsm 1: /* $OpenBSD: socks.c,v 1.14 2005/05/20 22:46:08 djm Exp $ */
1.1 jakob 2:
3: /*
4: * Copyright (c) 1999 Niklas Hallqvist. All rights reserved.
1.14 djm 5: * Copyright (c) 2004, 2005 Damien Miller. All rights reserved.
1.1 jakob 6: *
7: * Redistribution and use in source and binary forms, with or without
8: * modification, are permitted provided that the following conditions
9: * are met:
10: * 1. Redistributions of source code must retain the above copyright
11: * notice, this list of conditions and the following disclaimer.
12: * 2. Redistributions in binary form must reproduce the above copyright
13: * notice, this list of conditions and the following disclaimer in the
14: * documentation and/or other materials provided with the distribution.
15: *
16: * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
17: * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
18: * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
19: * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
20: * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
21: * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
22: * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
23: * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
24: * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
25: * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
26: */
27:
28: #include <sys/types.h>
29: #include <sys/socket.h>
30: #include <netinet/in.h>
31: #include <arpa/inet.h>
32:
33: #include <err.h>
1.9 djm 34: #include <errno.h>
1.1 jakob 35: #include <netdb.h>
36: #include <stdio.h>
37: #include <stdlib.h>
38: #include <string.h>
39: #include <unistd.h>
1.15 ! avsm 40: #include "atomicio.h"
1.1 jakob 41:
42: #define SOCKS_PORT "1080"
1.9 djm 43: #define HTTP_PROXY_PORT "3128"
44: #define HTTP_MAXHDRS 64
1.5 markus 45: #define SOCKS_V5 5
46: #define SOCKS_V4 4
1.1 jakob 47: #define SOCKS_NOAUTH 0
48: #define SOCKS_NOMETHOD 0xff
49: #define SOCKS_CONNECT 1
50: #define SOCKS_IPV4 1
1.14 djm 51: #define SOCKS_DOMAIN 3
52: #define SOCKS_IPV6 4
1.9 djm 53:
1.10 otto 54: int remote_connect(const char *, const char *, struct addrinfo);
55: int socks_connect(const char *host, const char *port, struct addrinfo hints,
56: const char *proxyhost, const char *proxyport, struct addrinfo proxyhints,
1.8 deraadt 57: int socksv);
1.1 jakob 58:
1.14 djm 59: static int
60: decode_addrport(const char *h, const char *p, struct sockaddr *addr,
61: socklen_t addrlen, int v4only, int numeric)
1.1 jakob 62: {
1.14 djm 63: int r;
64: struct addrinfo hints, *res;
1.1 jakob 65:
1.14 djm 66: bzero(&hints, sizeof(hints));
67: hints.ai_family = v4only ? PF_INET : PF_UNSPEC;
68: hints.ai_flags = numeric ? AI_NUMERICHOST : 0;
69: hints.ai_socktype = SOCK_STREAM;
70: r = getaddrinfo(h, p, &hints, &res);
71: /* Don't fatal when attempting to convert a numeric address */
72: if (r != 0) {
73: if (!numeric) {
74: errx(1, "getaddrinfo(\"%.64s\", \"%.64s\"): %s", h, p,
75: gai_strerror(r));
76: }
77: return (-1);
78: }
79: if (addrlen < res->ai_addrlen) {
80: freeaddrinfo(res);
81: errx(1, "internal error: addrlen < res->ai_addrlen");
1.1 jakob 82: }
1.14 djm 83: memcpy(addr, res->ai_addr, res->ai_addrlen);
84: freeaddrinfo(res);
85: return (0);
1.1 jakob 86: }
87:
1.9 djm 88: static int
1.15 ! avsm 89: proxy_read_line(int fd, char *buf, size_t bufsz)
1.9 djm 90: {
1.15 ! avsm 91: size_t off;
1.9 djm 92:
93: for(off = 0;;) {
94: if (off >= bufsz)
95: errx(1, "proxy read too long");
1.15 ! avsm 96: if (atomicio(read, fd, buf + off, 1) != 1)
1.9 djm 97: err(1, "proxy read");
98: /* Skip CR */
99: if (buf[off] == '\r')
100: continue;
101: if (buf[off] == '\n') {
102: buf[off] = '\0';
103: break;
104: }
105: off++;
106: }
107: return (off);
108: }
109:
1.1 jakob 110: int
1.10 otto 111: socks_connect(const char *host, const char *port,
112: struct addrinfo hints __attribute__ ((__unused__)),
113: const char *proxyhost, const char *proxyport, struct addrinfo proxyhints,
1.5 markus 114: int socksv)
1.1 jakob 115: {
1.9 djm 116: int proxyfd, r;
1.14 djm 117: size_t hlen, wlen;
1.9 djm 118: unsigned char buf[1024];
1.15 ! avsm 119: size_t cnt;
1.14 djm 120: struct sockaddr_storage addr;
121: struct sockaddr_in *in4 = (struct sockaddr_in *)&addr;
122: struct sockaddr_in6 *in6 = (struct sockaddr_in6 *)&addr;
1.1 jakob 123: in_port_t serverport;
124:
1.9 djm 125: if (proxyport == NULL)
126: proxyport = (socksv == -1) ? HTTP_PROXY_PORT : SOCKS_PORT;
127:
128: proxyfd = remote_connect(proxyhost, proxyport, proxyhints);
1.1 jakob 129:
1.6 stevesk 130: if (proxyfd < 0)
1.11 djm 131: return (-1);
1.1 jakob 132:
1.14 djm 133: /* Abuse API to lookup port */
134: if (decode_addrport("0.0.0.0", port, (struct sockaddr *)&addr,
135: sizeof(addr), 1, 1) == -1)
136: errx(1, "unknown port \"%.64s\"", port);
137: serverport = in4->sin_port;
1.1 jakob 138:
1.5 markus 139: if (socksv == 5) {
1.14 djm 140: if (decode_addrport(host, port, (struct sockaddr *)&addr,
141: sizeof(addr), 0, 1) == -1)
142: addr.ss_family = 0; /* used in switch below */
143:
1.5 markus 144: /* Version 5, one method: no authentication */
145: buf[0] = SOCKS_V5;
146: buf[1] = 1;
147: buf[2] = SOCKS_NOAUTH;
1.15 ! avsm 148: cnt = atomicio(vwrite, proxyfd, buf, 3);
1.5 markus 149: if (cnt != 3)
1.15 ! avsm 150: err(1, "write failed (%d/3)", cnt);
! 151:
! 152: cnt = atomicio(read, proxyfd, buf, 2);
! 153: if (cnt != 2)
! 154: err(1, "read failed (%d/3)", cnt);
1.5 markus 155:
156: if (buf[1] == SOCKS_NOMETHOD)
1.11 djm 157: errx(1, "authentication method negotiation failed");
1.5 markus 158:
1.14 djm 159: switch (addr.ss_family) {
160: case 0:
161: /* Version 5, connect: domain name */
162:
163: /* Max domain name length is 255 bytes */
164: hlen = strlen(host);
165: if (hlen > 255)
166: errx(1, "host name too long for SOCKS5");
167: buf[0] = SOCKS_V5;
168: buf[1] = SOCKS_CONNECT;
169: buf[2] = 0;
170: buf[3] = SOCKS_DOMAIN;
171: buf[4] = hlen;
172: memcpy(buf + 5, host, hlen);
173: memcpy(buf + 5 + hlen, &serverport, sizeof serverport);
174: wlen = 7 + hlen;
175: break;
176: case AF_INET:
177: /* Version 5, connect: IPv4 address */
178: buf[0] = SOCKS_V5;
179: buf[1] = SOCKS_CONNECT;
180: buf[2] = 0;
181: buf[3] = SOCKS_IPV4;
182: memcpy(buf + 4, &in4->sin_addr, sizeof in4->sin_addr);
183: memcpy(buf + 8, &in4->sin_port, sizeof in4->sin_port);
184: wlen = 10;
185: break;
186: case AF_INET6:
187: /* Version 5, connect: IPv6 address */
188: buf[0] = SOCKS_V5;
189: buf[1] = SOCKS_CONNECT;
190: buf[2] = 0;
191: buf[3] = SOCKS_IPV6;
192: memcpy(buf + 4, &in6->sin6_addr, sizeof in6->sin6_addr);
193: memcpy(buf + 20, &in6->sin6_port,
194: sizeof in6->sin6_port);
195: wlen = 22;
196: break;
197: default:
198: errx(1, "internal error: silly AF");
199: }
1.5 markus 200:
1.15 ! avsm 201: cnt = atomicio(vwrite, proxyfd, buf, wlen);
1.14 djm 202: if (cnt != wlen)
1.15 ! avsm 203: err(1, "write failed (%d/%d)", cnt, wlen);
1.5 markus 204:
1.14 djm 205: cnt = atomicio(read, proxyfd, buf, 10);
1.5 markus 206: if (cnt != 10)
1.15 ! avsm 207: err(1, "read failed (%d/10)", cnt);
1.5 markus 208: if (buf[1] != 0)
1.11 djm 209: errx(1, "connection failed, SOCKS error %d", buf[1]);
1.9 djm 210: } else if (socksv == 4) {
1.14 djm 211: /* This will exit on lookup failure */
212: decode_addrport(host, port, (struct sockaddr *)&addr,
213: sizeof(addr), 1, 0);
214:
1.5 markus 215: /* Version 4 */
216: buf[0] = SOCKS_V4;
217: buf[1] = SOCKS_CONNECT; /* connect */
1.14 djm 218: memcpy(buf + 2, &in4->sin_port, sizeof in4->sin_port);
219: memcpy(buf + 4, &in4->sin_addr, sizeof in4->sin_addr);
1.5 markus 220: buf[8] = 0; /* empty username */
1.14 djm 221: wlen = 9;
1.5 markus 222:
1.15 ! avsm 223: cnt = atomicio(vwrite, proxyfd, buf, wlen);
1.14 djm 224: if (cnt != wlen)
1.15 ! avsm 225: err(1, "write failed (%d/%d)", cnt, wlen);
1.5 markus 226:
1.14 djm 227: cnt = atomicio(read, proxyfd, buf, 8);
1.5 markus 228: if (cnt != 8)
1.15 ! avsm 229: err(1, "read failed (%d/8)", cnt);
1.5 markus 230: if (buf[1] != 90)
1.11 djm 231: errx(1, "connection failed, SOCKS error %d", buf[1]);
1.9 djm 232: } else if (socksv == -1) {
233: /* HTTP proxy CONNECT */
234:
235: /* Disallow bad chars in hostname */
236: if (strcspn(host, "\r\n\t []:") != strlen(host))
1.11 djm 237: errx(1, "Invalid hostname");
1.9 djm 238:
239: /* Try to be sane about numeric IPv6 addresses */
240: if (strchr(host, ':') != NULL) {
241: r = snprintf(buf, sizeof(buf),
242: "CONNECT [%s]:%d HTTP/1.0\r\n\r\n",
243: host, ntohs(serverport));
244: } else {
245: r = snprintf(buf, sizeof(buf),
246: "CONNECT %s:%d HTTP/1.0\r\n\r\n",
247: host, ntohs(serverport));
248: }
1.10 otto 249: if (r == -1 || (size_t)r >= sizeof(buf))
1.11 djm 250: errx(1, "hostname too long");
1.9 djm 251: r = strlen(buf);
252:
1.15 ! avsm 253: cnt = atomicio(vwrite, proxyfd, buf, r);
1.9 djm 254: if (cnt != r)
1.15 ! avsm 255: err(1, "write failed (%d/%d)", cnt, r);
1.9 djm 256:
257: /* Read reply */
258: for (r = 0; r < HTTP_MAXHDRS; r++) {
259: proxy_read_line(proxyfd, buf, sizeof(buf));
260: if (r == 0 && strncmp(buf, "HTTP/1.0 200 ", 12) != 0)
1.11 djm 261: errx(1, "Proxy error: \"%s\"", buf);
1.9 djm 262: /* Discard headers until we hit an empty line */
263: if (*buf == '\0')
264: break;
265: }
266: } else
1.11 djm 267: errx(1, "Unknown proxy protocol %d", socksv);
1.1 jakob 268:
1.11 djm 269: return (proxyfd);
1.1 jakob 270: }
![[BACK]](/icons/back.gif){kind=icon}
Return to socks.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / nc