[BACK]Return to channels.h CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/channels.h, Revision 1.137

1.137   ! djm         1: /* $OpenBSD: channels.h,v 1.136 2021/04/03 05:54:14 djm Exp $ */
1.65      stevesk     2:
1.17      deraadt     3: /*
1.19      markus      4:  * Author: Tatu Ylonen <ylo@cs.hut.fi>
                      5:  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
                      6:  *                    All rights reserved
                      7:  *
                      8:  * As far as I am concerned, the code I have written for this software
                      9:  * can be used freely for any purpose.  Any derived versions of this
                     10:  * software must be clearly marked as such, and if the derived work is
                     11:  * incompatible with the protocol description in the RFC file, it must be
                     12:  * called by a name other than "ssh" or "Secure Shell".
                     13:  */
                     14: /*
1.59      markus     15:  * Copyright (c) 1999, 2000, 2001, 2002 Markus Friedl.  All rights reserved.
1.17      deraadt    16:  *
                     17:  * Redistribution and use in source and binary forms, with or without
                     18:  * modification, are permitted provided that the following conditions
                     19:  * are met:
                     20:  * 1. Redistributions of source code must retain the above copyright
                     21:  *    notice, this list of conditions and the following disclaimer.
                     22:  * 2. Redistributions in binary form must reproduce the above copyright
                     23:  *    notice, this list of conditions and the following disclaimer in the
                     24:  *    documentation and/or other materials provided with the distribution.
                     25:  *
                     26:  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
                     27:  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
                     28:  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
                     29:  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
                     30:  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
                     31:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
                     32:  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
                     33:  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
                     34:  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
                     35:  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
                     36:  */
1.2       markus     37:
1.35      markus     38: #ifndef CHANNEL_H
                     39: #define CHANNEL_H
1.28      markus     40:
1.1       markus     41: /* Definitions for channel types. */
1.6       markus     42: #define SSH_CHANNEL_X11_LISTENER       1       /* Listening for inet X11 conn. */
1.5       deraadt    43: #define SSH_CHANNEL_PORT_LISTENER      2       /* Listening on a port. */
                     44: #define SSH_CHANNEL_OPENING            3       /* waiting for confirmation */
                     45: #define SSH_CHANNEL_OPEN               4       /* normal open two-way channel */
1.6       markus     46: #define SSH_CHANNEL_CLOSED             5       /* waiting for close confirmation */
1.7       markus     47: #define SSH_CHANNEL_AUTH_SOCKET                6       /* authentication socket */
                     48: #define SSH_CHANNEL_X11_OPEN           7       /* reading first X11 packet */
                     49: #define SSH_CHANNEL_LARVAL             10      /* larval session */
1.23      markus     50: #define SSH_CHANNEL_RPORT_LISTENER     11      /* Listening to a R-style port  */
1.24      markus     51: #define SSH_CHANNEL_CONNECTING         12
1.30      markus     52: #define SSH_CHANNEL_DYNAMIC            13
1.33      markus     53: #define SSH_CHANNEL_ZOMBIE             14      /* Almost dead. */
1.103     djm        54: #define SSH_CHANNEL_MUX_LISTENER       15      /* Listener for mux conn. */
1.134     djm        55: #define SSH_CHANNEL_MUX_CLIENT         16      /* Conn. to mux client */
1.113     dtucker    56: #define SSH_CHANNEL_ABANDONED          17      /* Abandoned session, eg mux */
1.115     millert    57: #define SSH_CHANNEL_UNIX_LISTENER      18      /* Listening on a domain socket. */
                     58: #define SSH_CHANNEL_RUNIX_LISTENER     19      /* Listening to a R-style domain socket. */
1.134     djm        59: #define SSH_CHANNEL_MUX_PROXY          20      /* proxy channel for mux-client */
1.130     markus     60: #define SSH_CHANNEL_RDYNAMIC_OPEN      21      /* reverse SOCKS, parsing request */
                     61: #define SSH_CHANNEL_RDYNAMIC_FINISH    22      /* reverse SOCKS, finishing connect */
                     62: #define SSH_CHANNEL_MAX_TYPE           23
1.1       markus     63:
1.107     markus     64: #define CHANNEL_CANCEL_PORT_STATIC     -1
                     65:
1.131     djm        66: /* TCP forwarding */
                     67: #define FORWARD_DENY           0
                     68: #define FORWARD_REMOTE         (1)
                     69: #define FORWARD_LOCAL          (1<<1)
                     70: #define FORWARD_ALLOW          (FORWARD_REMOTE|FORWARD_LOCAL)
                     71:
                     72: #define FORWARD_ADM            0x100
                     73: #define FORWARD_USER           0x101
                     74:
1.126     markus     75: struct ssh;
1.16      markus     76: struct Channel;
                     77: typedef struct Channel Channel;
1.128     djm        78: struct fwd_perm_list;
1.16      markus     79:
1.128     djm        80: typedef void channel_open_fn(struct ssh *, int, int, void *);
                     81: typedef void channel_callback_fn(struct ssh *, int, void *);
                     82: typedef int channel_infilter_fn(struct ssh *, struct Channel *, char *, int);
                     83: typedef void channel_filter_cleanup_fn(struct ssh *, int, void *);
                     84: typedef u_char *channel_outfilter_fn(struct ssh *, struct Channel *,
                     85:     u_char **, size_t *);
1.1       markus     86:
1.90      djm        87: /* Channel success/failure callbacks */
1.128     djm        88: typedef void channel_confirm_cb(struct ssh *, int, struct Channel *, void *);
                     89: typedef void channel_confirm_abandon_cb(struct ssh *, struct Channel *, void *);
1.90      djm        90: struct channel_confirm {
                     91:        TAILQ_ENTRY(channel_confirm) entry;
                     92:        channel_confirm_cb *cb;
                     93:        channel_confirm_abandon_cb *abandon_cb;
                     94:        void *ctx;
                     95: };
                     96: TAILQ_HEAD(channel_confirms, channel_confirm);
                     97:
1.91      djm        98: /* Context for non-blocking connects */
                     99: struct channel_connect {
                    100:        char *host;
                    101:        int port;
                    102:        struct addrinfo *ai, *aitop;
                    103: };
                    104:
1.103     djm       105: /* Callbacks for mux channels back into client-specific code */
1.128     djm       106: typedef int mux_callback_fn(struct ssh *, struct Channel *);
1.103     djm       107:
1.133     djm       108: /*
                    109:  * NB. channel IDs on the wire and in c->remote_id are uint32, but local
                    110:  * channel IDs (e.g. c->self) only ever use the int32 subset of this range,
                    111:  * because we use local channel ID -1 for housekeeping. Remote channels have
                    112:  * a dedicated "have_remote_id" flag to indicate their validity.
                    113:  */
                    114:
1.16      markus    115: struct Channel {
1.5       deraadt   116:        int     type;           /* channel type/state */
1.133     djm       117:
1.5       deraadt   118:        int     self;           /* my own channel identifier */
1.129     djm       119:        uint32_t remote_id;     /* channel identifier for remote peer */
                    120:        int     have_remote_id; /* non-zero if remote_id is valid */
                    121:
1.57      markus    122:        u_int   istate;         /* input from channel (state of receive half) */
                    123:        u_int   ostate;         /* output to channel  (state of transmit half) */
1.8       markus    124:        int     flags;          /* close sent/rcvd */
1.7       markus    125:        int     rfd;            /* read fd */
                    126:        int     wfd;            /* write fd */
                    127:        int     efd;            /* extended fd */
                    128:        int     sock;           /* sock fd */
1.103     djm       129:        int     ctl_chan;       /* control channel (multiplexed connections) */
1.27      markus    130:        int     isatty;         /* rfd is a tty */
1.75      djm       131:        int     client_tty;     /* (client) TTY has been requested */
1.48      markus    132:        int     force_drain;    /* force close on iEOF */
1.111     djm       133:        time_t  notbefore;      /* Pause IO until deadline (time_t) */
1.100     markus    134:        int     delayed;        /* post-select handlers for newly created
                    135:                                 * channels are delayed until the first call
1.117     djm       136:                                 * to a matching pre-select handler.
1.100     markus    137:                                 * this way post-select handlers are not
1.112     dtucker   138:                                 * accidentally called if a FD gets reused */
1.128     djm       139:        struct sshbuf *input;   /* data read from socket, to be sent over
1.5       deraadt   140:                                 * encrypted connection */
1.128     djm       141:        struct sshbuf *output;  /* data received over encrypted connection for
1.5       deraadt   142:                                 * send on socket */
1.128     djm       143:        struct sshbuf *extended;
                    144:
1.97      djm       145:        char    *path;
1.32      markus    146:                /* path for unix domain sockets, or host name for forwards */
1.5       deraadt   147:        int     listening_port; /* port being listened for forwards */
1.106     djm       148:        char   *listening_addr; /* addr being listened for forwards */
1.5       deraadt   149:        int     host_port;      /* remote port to connect for forwards */
                    150:        char   *remote_name;    /* remote hostname */
1.7       markus    151:
1.70      markus    152:        u_int   remote_window;
                    153:        u_int   remote_maxpacket;
                    154:        u_int   local_window;
                    155:        u_int   local_window_max;
                    156:        u_int   local_consumed;
                    157:        u_int   local_maxpacket;
1.7       markus    158:        int     extended_usage;
1.54      markus    159:        int     single_connection;
1.7       markus    160:
                    161:        char   *ctype;          /* type */
                    162:
1.11      markus    163:        /* callback */
1.104     djm       164:        channel_open_fn         *open_confirm;
1.90      djm       165:        void                    *open_confirm_ctx;
1.44      markus    166:        channel_callback_fn     *detach_user;
1.80      djm       167:        int                     detach_close;
1.90      djm       168:        struct channel_confirms status_confirms;
1.15      markus    169:
                    170:        /* filter */
1.83      reyk      171:        channel_infilter_fn     *input_filter;
                    172:        channel_outfilter_fn    *output_filter;
1.94      djm       173:        void                    *filter_ctx;
1.95      djm       174:        channel_filter_cleanup_fn *filter_cleanup;
1.81      reyk      175:
1.91      djm       176:        /* keep boundaries */
1.136     djm       177:        int                     datagram;
1.91      djm       178:
                    179:        /* non-blocking connect */
1.128     djm       180:        /* XXX make this a pointer so the structure can be opaque */
1.91      djm       181:        struct channel_connect  connect_ctx;
1.103     djm       182:
                    183:        /* multiplexing protocol hook, called for each packet received */
                    184:        mux_callback_fn         *mux_rcb;
                    185:        void                    *mux_ctx;
1.104     djm       186:        int                     mux_pause;
1.136     djm       187:        int                     mux_downstream_id;
1.16      markus    188: };
1.7       markus    189:
                    190: #define CHAN_EXTENDED_IGNORE           0
                    191: #define CHAN_EXTENDED_READ             1
                    192: #define CHAN_EXTENDED_WRITE            2
1.18      markus    193:
                    194: /* default window/packet sizes for tcp/x11-fwd-channel */
1.64      markus    195: #define CHAN_SES_PACKET_DEFAULT        (32*1024)
1.89      markus    196: #define CHAN_SES_WINDOW_DEFAULT        (64*CHAN_SES_PACKET_DEFAULT)
1.64      markus    197: #define CHAN_TCP_PACKET_DEFAULT        (32*1024)
1.89      markus    198: #define CHAN_TCP_WINDOW_DEFAULT        (64*CHAN_TCP_PACKET_DEFAULT)
1.64      markus    199: #define CHAN_X11_PACKET_DEFAULT        (16*1024)
                    200: #define CHAN_X11_WINDOW_DEFAULT        (4*CHAN_X11_PACKET_DEFAULT)
1.18      markus    201:
1.35      markus    202: /* possible input states */
1.57      markus    203: #define CHAN_INPUT_OPEN                        0
                    204: #define CHAN_INPUT_WAIT_DRAIN          1
                    205: #define CHAN_INPUT_WAIT_OCLOSE         2
                    206: #define CHAN_INPUT_CLOSED              3
1.35      markus    207:
                    208: /* possible output states */
1.57      markus    209: #define CHAN_OUTPUT_OPEN               0
                    210: #define CHAN_OUTPUT_WAIT_DRAIN         1
                    211: #define CHAN_OUTPUT_WAIT_IEOF          2
                    212: #define CHAN_OUTPUT_CLOSED             3
1.7       markus    213:
1.35      markus    214: #define CHAN_CLOSE_SENT                        0x01
                    215: #define CHAN_CLOSE_RCVD                        0x02
1.66      markus    216: #define CHAN_EOF_SENT                  0x04
                    217: #define CHAN_EOF_RCVD                  0x08
1.103     djm       218: #define CHAN_LOCAL                     0x10
1.66      markus    219:
1.128     djm       220: /* Read buffer size */
                    221: #define CHAN_RBUF      (16*1024)
1.135     djm       222:
                    223: /* Maximum channel input buffer size */
                    224: #define CHAN_INPUT_MAX (16*1024*1024)
1.128     djm       225:
                    226: /* Hard limit on number of channels */
                    227: #define CHANNELS_MAX_CHANNELS  (16*1024)
1.83      reyk      228:
1.66      markus    229: /* check whether 'efd' is still in use */
                    230: #define CHANNEL_EFD_INPUT_ACTIVE(c) \
1.122     djm       231:        (c->extended_usage == CHAN_EXTENDED_READ && \
1.66      markus    232:        (c->efd != -1 || \
1.128     djm       233:        sshbuf_len(c->extended) > 0))
1.66      markus    234: #define CHANNEL_EFD_OUTPUT_ACTIVE(c) \
1.122     djm       235:        (c->extended_usage == CHAN_EXTENDED_WRITE && \
1.78      markus    236:        c->efd != -1 && (!(c->flags & (CHAN_EOF_RCVD|CHAN_CLOSE_RCVD)) || \
1.128     djm       237:        sshbuf_len(c->extended) > 0))
                    238:
                    239: /* Add channel management structures to SSH transport instance */
                    240: void channel_init_channels(struct ssh *ssh);
1.35      markus    241:
                    242: /* channel management */
                    243:
1.128     djm       244: Channel        *channel_by_id(struct ssh *, int);
1.129     djm       245: Channel        *channel_by_remote_id(struct ssh *, u_int);
1.128     djm       246: Channel        *channel_lookup(struct ssh *, int);
                    247: Channel *channel_new(struct ssh *, char *, int, int, int, int,
                    248:            u_int, u_int, int, char *, int);
                    249: void    channel_set_fds(struct ssh *, int, int, int, int, int,
                    250:            int, int, u_int);
                    251: void    channel_free(struct ssh *, Channel *);
                    252: void    channel_free_all(struct ssh *);
                    253: void    channel_stop_listening(struct ssh *);
                    254:
                    255: void    channel_send_open(struct ssh *, int);
                    256: void    channel_request_start(struct ssh *, int, char *, int);
                    257: void    channel_register_cleanup(struct ssh *, int,
                    258:            channel_callback_fn *, int);
                    259: void    channel_register_open_confirm(struct ssh *, int,
                    260:            channel_open_fn *, void *);
                    261: void    channel_register_filter(struct ssh *, int, channel_infilter_fn *,
                    262:            channel_outfilter_fn *, channel_filter_cleanup_fn *, void *);
                    263: void    channel_register_status_confirm(struct ssh *, int,
                    264:            channel_confirm_cb *, channel_confirm_abandon_cb *, void *);
                    265: void    channel_cancel_cleanup(struct ssh *, int);
                    266: int     channel_close_fd(struct ssh *, int *);
                    267: void    channel_send_window_changes(struct ssh *);
1.119     markus    268:
                    269: /* mux proxy support */
                    270:
1.128     djm       271: int     channel_proxy_downstream(struct ssh *, Channel *mc);
1.126     markus    272: int     channel_proxy_upstream(Channel *, int, u_int32_t, struct ssh *);
1.22      markus    273:
1.35      markus    274: /* protocol handler */
1.7       markus    275:
1.126     markus    276: int     channel_input_data(int, u_int32_t, struct ssh *);
                    277: int     channel_input_extended_data(int, u_int32_t, struct ssh *);
                    278: int     channel_input_ieof(int, u_int32_t, struct ssh *);
                    279: int     channel_input_oclose(int, u_int32_t, struct ssh *);
                    280: int     channel_input_open_confirmation(int, u_int32_t, struct ssh *);
                    281: int     channel_input_open_failure(int, u_int32_t, struct ssh *);
                    282: int     channel_input_port_open(int, u_int32_t, struct ssh *);
                    283: int     channel_input_window_adjust(int, u_int32_t, struct ssh *);
                    284: int     channel_input_status_confirm(int, u_int32_t, struct ssh *);
1.7       markus    285:
1.35      markus    286: /* file descriptor handling (read/write) */
1.7       markus    287:
1.127     djm       288: void    channel_prepare_select(struct ssh *, fd_set **, fd_set **, int *,
1.137   ! djm       289:            u_int*, time_t*);
1.127     djm       290: void     channel_after_select(struct ssh *, fd_set *, fd_set *);
1.128     djm       291: void     channel_output_poll(struct ssh *);
1.42      markus    292:
1.128     djm       293: int      channel_not_very_much_buffered_data(struct ssh *);
                    294: void     channel_close_all(struct ssh *);
                    295: int      channel_still_open(struct ssh *);
1.132     djm       296: const char *channel_format_extended_usage(const Channel *);
1.128     djm       297: char   *channel_open_message(struct ssh *);
                    298: int     channel_find_open(struct ssh *);
1.7       markus    299:
1.47      markus    300: /* tcp forwarding */
1.115     millert   301: struct Forward;
                    302: struct ForwardOptions;
1.128     djm       303: void    channel_set_af(struct ssh *, int af);
1.131     djm       304: void     channel_permit_all(struct ssh *, int);
                    305: void    channel_add_permission(struct ssh *, int, int, char *, int);
                    306: void    channel_clear_permission(struct ssh *, int, int);
                    307: void    channel_disable_admin(struct ssh *, int);
                    308: void    channel_update_permission(struct ssh *, int, int);
1.128     djm       309: Channel        *channel_connect_to_port(struct ssh *, const char *, u_short,
                    310:            char *, char *, int *, const char **);
                    311: Channel *channel_connect_to_path(struct ssh *, const char *, char *, char *);
                    312: Channel        *channel_connect_stdio_fwd(struct ssh *, const char*,
                    313:            u_short, int, int);
                    314: Channel        *channel_connect_by_listen_address(struct ssh *, const char *,
                    315:            u_short, char *, char *);
                    316: Channel        *channel_connect_by_listen_path(struct ssh *, const char *,
                    317:            char *, char *);
                    318: int     channel_request_remote_forwarding(struct ssh *, struct Forward *);
                    319: int     channel_setup_local_fwd_listener(struct ssh *, struct Forward *,
                    320:            struct ForwardOptions *);
                    321: int     channel_request_rforward_cancel(struct ssh *, struct Forward *);
                    322: int     channel_setup_remote_fwd_listener(struct ssh *, struct Forward *,
                    323:            int *, struct ForwardOptions *);
                    324: int     channel_cancel_rport_listener(struct ssh *, struct Forward *);
                    325: int     channel_cancel_lport_listener(struct ssh *, struct Forward *,
                    326:            int, struct ForwardOptions *);
1.108     dtucker   327: int     permitopen_port(const char *);
1.7       markus    328:
1.35      markus    329: /* x11 forwarding */
1.7       markus    330:
1.128     djm       331: void    channel_set_x11_refuse_time(struct ssh *, u_int);
                    332: int     x11_connect_display(struct ssh *);
                    333: int     x11_create_display_inet(struct ssh *, int, int, int, u_int *, int **);
                    334: void    x11_request_forwarding_with_spoofing(struct ssh *, int,
                    335:            const char *, const char *, const char *, int);
1.7       markus    336:
1.35      markus    337: /* channel close */
1.8       markus    338:
1.128     djm       339: int     chan_is_dead(struct ssh *, Channel *, int);
                    340: void    chan_mark_dead(struct ssh *, Channel *);
1.42      markus    341:
1.58      markus    342: /* channel events */
1.31      beck      343:
1.128     djm       344: void    chan_rcvd_oclose(struct ssh *, Channel *);
                    345: void    chan_rcvd_eow(struct ssh *, Channel *);
                    346: void    chan_read_failed(struct ssh *, Channel *);
                    347: void    chan_ibuf_empty(struct ssh *, Channel *);
                    348: void    chan_rcvd_ieof(struct ssh *, Channel *);
                    349: void    chan_write_failed(struct ssh *, Channel *);
                    350: void    chan_obuf_empty(struct ssh *, Channel *);
1.7       markus    351:
1.1       markus    352: #endif