master
c 1,354 lines 37.6 KB
Raw
1 /*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24
25 #include "qemu/osdep.h"
26 #include "qemu/log.h"
27 #include "net/slirp.h"
28
29
30 #if defined(CONFIG_SMBD_COMMAND)
31 #include <pwd.h>
32 #include <sys/wait.h>
33 #endif
34 #include "net/eth.h"
35 #include "net/net.h"
36 #include "clients.h"
37 #include "hub.h"
38 #include "monitor/monitor.h"
39 #include "monitor/hmp.h"
40 #include "qemu/error-report.h"
41 #include "qemu/sockets.h"
42 #include <libslirp.h>
43 #include "chardev/char-fe.h"
44 #include "system/system.h"
45 #include "qemu/cutils.h"
46 #include "qapi/error.h"
47 #include "qapi/qapi-commands-net.h"
48 #include "qobject/qdict.h"
49 #include "util.h"
50 #include "migration/register.h"
51 #include "migration/vmstate.h"
52 #include "migration/qemu-file-types.h"
53
54 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
55 {
56 const char *p, *p1;
57 int len;
58 p = *pp;
59 /* negative sep means to search -sep from the end of buf */
60 p1 = sep >= 0 ? strchr(p, sep) : strrchr(p, -sep);
61 if (!p1)
62 return -1;
63 len = p1 - p;
64 p1++;
65 if (buf_size > 0) {
66 if (len > buf_size - 1)
67 len = buf_size - 1;
68 memcpy(buf, p, len);
69 buf[len] = '\0';
70 }
71 *pp = p1;
72 return 0;
73 }
74
75 /* slirp network adapter */
76
77 #define SLIRP_CFG_HOSTFWD 1
78
79 struct slirp_config_str {
80 struct slirp_config_str *next;
81 int flags;
82 char str[1024];
83 };
84
85 struct GuestFwd {
86 CharFrontend hd;
87 struct in_addr server;
88 int port;
89 Slirp *slirp;
90 };
91
92 typedef struct SlirpState {
93 NetClientState nc;
94 QTAILQ_ENTRY(SlirpState) entry;
95 Slirp *slirp;
96 Notifier poll_notifier;
97 Notifier exit_notifier;
98 #if defined(CONFIG_SMBD_COMMAND)
99 gchar *smb_dir;
100 #endif
101 GSList *fwd;
102 } SlirpState;
103
104 static struct slirp_config_str *slirp_configs;
105 static QTAILQ_HEAD(, SlirpState) slirp_stacks =
106 QTAILQ_HEAD_INITIALIZER(slirp_stacks);
107
108 static int slirp_hostfwd(SlirpState *s, const char *redir_str, Error **errp);
109 static int slirp_guestfwd(SlirpState *s, const char *config_str, Error **errp);
110
111 #if defined(CONFIG_SMBD_COMMAND)
112 static int slirp_smb(SlirpState *s, const char *exported_dir,
113 struct in_addr vserver_addr, Error **errp);
114 static void slirp_smb_cleanup(SlirpState *s);
115 #else
116 static inline void slirp_smb_cleanup(SlirpState *s) { }
117 #endif
118
119 static ssize_t net_slirp_send_packet(const void *pkt, size_t pkt_len,
120 void *opaque)
121 {
122 SlirpState *s = opaque;
123 uint8_t min_pkt[ETH_ZLEN];
124 size_t min_pktsz = sizeof(min_pkt);
125
126 if (net_peer_needs_padding(&s->nc)) {
127 if (eth_pad_short_frame(min_pkt, &min_pktsz, pkt, pkt_len)) {
128 pkt = min_pkt;
129 pkt_len = min_pktsz;
130 }
131 }
132
133 return qemu_send_packet(&s->nc, pkt, pkt_len);
134 }
135
136 static ssize_t net_slirp_receive(NetClientState *nc, const uint8_t *buf, size_t size)
137 {
138 SlirpState *s = DO_UPCAST(SlirpState, nc, nc);
139
140 slirp_input(s->slirp, buf, size);
141
142 return size;
143 }
144
145 static void slirp_smb_exit(Notifier *n, void *data)
146 {
147 SlirpState *s = container_of(n, SlirpState, exit_notifier);
148 slirp_smb_cleanup(s);
149 }
150
151 static void slirp_free_fwd(gpointer data)
152 {
153 struct GuestFwd *fwd = data;
154
155 qemu_chr_fe_deinit(&fwd->hd, true);
156 g_free(data);
157 }
158
159 static void net_slirp_cleanup(NetClientState *nc)
160 {
161 SlirpState *s = DO_UPCAST(SlirpState, nc, nc);
162
163 g_slist_free_full(s->fwd, slirp_free_fwd);
164 main_loop_poll_remove_notifier(&s->poll_notifier);
165 unregister_savevm(NULL, "slirp", s->slirp);
166 slirp_cleanup(s->slirp);
167 if (s->exit_notifier.notify) {
168 qemu_remove_exit_notifier(&s->exit_notifier);
169 }
170 slirp_smb_cleanup(s);
171 QTAILQ_REMOVE(&slirp_stacks, s, entry);
172 }
173
174 static NetClientInfo net_slirp_info = {
175 .type = NET_CLIENT_DRIVER_USER,
176 .size = sizeof(SlirpState),
177 .receive = net_slirp_receive,
178 .cleanup = net_slirp_cleanup,
179 };
180
181 static void net_slirp_guest_error(const char *msg, void *opaque)
182 {
183 qemu_log_mask(LOG_GUEST_ERROR, "%s", msg);
184 }
185
186 static int64_t net_slirp_clock_get_ns(void *opaque)
187 {
188 return qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
189 }
190
191 typedef struct SlirpTimer SlirpTimer;
192 struct SlirpTimer {
193 QEMUTimer timer;
194 #if SLIRP_CHECK_VERSION(4,7,0)
195 Slirp *slirp;
196 SlirpTimerId id;
197 void *cb_opaque;
198 #endif
199 };
200
201 #if SLIRP_CHECK_VERSION(4,7,0)
202 static void net_slirp_init_completed(Slirp *slirp, void *opaque)
203 {
204 SlirpState *s = opaque;
205 s->slirp = slirp;
206 }
207
208 static void net_slirp_timer_cb(void *opaque)
209 {
210 SlirpTimer *t = opaque;
211 slirp_handle_timer(t->slirp, t->id, t->cb_opaque);
212 }
213
214 static void *net_slirp_timer_new_opaque(SlirpTimerId id,
215 void *cb_opaque, void *opaque)
216 {
217 SlirpState *s = opaque;
218 SlirpTimer *t = g_new(SlirpTimer, 1);
219 t->slirp = s->slirp;
220 t->id = id;
221 t->cb_opaque = cb_opaque;
222 timer_init_full(&t->timer, NULL, QEMU_CLOCK_VIRTUAL,
223 SCALE_MS, QEMU_TIMER_ATTR_EXTERNAL,
224 net_slirp_timer_cb, t);
225 return t;
226 }
227 #else
228 static void *net_slirp_timer_new(SlirpTimerCb cb,
229 void *cb_opaque, void *opaque)
230 {
231 SlirpTimer *t = g_new(SlirpTimer, 1);
232 timer_init_full(&t->timer, NULL, QEMU_CLOCK_VIRTUAL,
233 SCALE_MS, QEMU_TIMER_ATTR_EXTERNAL,
234 cb, cb_opaque);
235 return t;
236 }
237 #endif
238
239 static void net_slirp_timer_free(void *timer, void *opaque)
240 {
241 SlirpTimer *t = timer;
242 timer_del(&t->timer);
243 g_free(t);
244 }
245
246 static void net_slirp_timer_mod(void *timer, int64_t expire_timer,
247 void *opaque)
248 {
249 SlirpTimer *t = timer;
250 timer_mod(&t->timer, expire_timer);
251 }
252
253 #if !SLIRP_CHECK_VERSION(4, 9, 0)
254 # define slirp_os_socket int
255 # define slirp_pollfds_fill_socket slirp_pollfds_fill
256 # define register_poll_socket register_poll_fd
257 # define unregister_poll_socket unregister_poll_fd
258 #endif
259
260 static void net_slirp_register_poll_sock(slirp_os_socket fd, void *opaque)
261 {
262 #ifdef WIN32
263 AioContext *ctxt = qemu_get_aio_context();
264 g_autofree char *msg = NULL;
265
266 if (WSAEventSelect(fd, event_notifier_get_handle(&ctxt->notifier),
267 FD_READ | FD_ACCEPT | FD_CLOSE |
268 FD_CONNECT | FD_WRITE | FD_OOB) != 0) {
269 msg = g_win32_error_message(WSAGetLastError());
270 warn_report("failed to WSAEventSelect(): %s", msg);
271 }
272 #endif
273 }
274
275 static void net_slirp_unregister_poll_sock(slirp_os_socket fd, void *opaque)
276 {
277 #ifdef WIN32
278 g_autofree char *msg = NULL;
279
280 if (WSAEventSelect(fd, NULL, 0) != 0) {
281 msg = g_win32_error_message(WSAGetLastError());
282 warn_report("failed to WSAEventSelect(): %s", msg);
283 }
284 #endif
285 }
286
287 static void net_slirp_notify(void *opaque)
288 {
289 qemu_notify_event();
290 }
291
292 static const SlirpCb slirp_cb = {
293 .send_packet = net_slirp_send_packet,
294 .guest_error = net_slirp_guest_error,
295 .clock_get_ns = net_slirp_clock_get_ns,
296 #if SLIRP_CHECK_VERSION(4,7,0)
297 .init_completed = net_slirp_init_completed,
298 .timer_new_opaque = net_slirp_timer_new_opaque,
299 #else
300 .timer_new = net_slirp_timer_new,
301 #endif
302 .timer_free = net_slirp_timer_free,
303 .timer_mod = net_slirp_timer_mod,
304 .register_poll_socket = net_slirp_register_poll_sock,
305 .unregister_poll_socket = net_slirp_unregister_poll_sock,
306 .notify = net_slirp_notify,
307 };
308
309 static int slirp_poll_to_gio(int events)
310 {
311 int ret = 0;
312
313 if (events & SLIRP_POLL_IN) {
314 ret |= G_IO_IN;
315 }
316 if (events & SLIRP_POLL_OUT) {
317 ret |= G_IO_OUT;
318 }
319 if (events & SLIRP_POLL_PRI) {
320 ret |= G_IO_PRI;
321 }
322 if (events & SLIRP_POLL_ERR) {
323 ret |= G_IO_ERR;
324 }
325 if (events & SLIRP_POLL_HUP) {
326 ret |= G_IO_HUP;
327 }
328
329 return ret;
330 }
331
332 static int net_slirp_add_poll(slirp_os_socket fd, int events, void *opaque)
333 {
334 GArray *pollfds = opaque;
335 GPollFD pfd = {
336 .fd = fd,
337 .events = slirp_poll_to_gio(events),
338 };
339 int idx = pollfds->len;
340 g_array_append_val(pollfds, pfd);
341 return idx;
342 }
343
344 static int slirp_gio_to_poll(int events)
345 {
346 int ret = 0;
347
348 if (events & G_IO_IN) {
349 ret |= SLIRP_POLL_IN;
350 }
351 if (events & G_IO_OUT) {
352 ret |= SLIRP_POLL_OUT;
353 }
354 if (events & G_IO_PRI) {
355 ret |= SLIRP_POLL_PRI;
356 }
357 if (events & G_IO_ERR) {
358 ret |= SLIRP_POLL_ERR;
359 }
360 if (events & G_IO_HUP) {
361 ret |= SLIRP_POLL_HUP;
362 }
363
364 return ret;
365 }
366
367 static int net_slirp_get_revents(int idx, void *opaque)
368 {
369 GArray *pollfds = opaque;
370
371 return slirp_gio_to_poll(g_array_index(pollfds, GPollFD, idx).revents);
372 }
373
374 static void net_slirp_poll_notify(Notifier *notifier, void *data)
375 {
376 MainLoopPoll *poll = data;
377 SlirpState *s = container_of(notifier, SlirpState, poll_notifier);
378
379 switch (poll->state) {
380 case MAIN_LOOP_POLL_FILL:
381 slirp_pollfds_fill_socket(s->slirp, &poll->timeout,
382 net_slirp_add_poll, poll->pollfds);
383 break;
384 case MAIN_LOOP_POLL_OK:
385 case MAIN_LOOP_POLL_ERR:
386 slirp_pollfds_poll(s->slirp, poll->state == MAIN_LOOP_POLL_ERR,
387 net_slirp_get_revents, poll->pollfds);
388 break;
389 default:
390 g_assert_not_reached();
391 }
392 }
393
394 static ssize_t
395 net_slirp_stream_read(void *buf, size_t size, void *opaque)
396 {
397 QEMUFile *f = opaque;
398
399 return qemu_get_buffer(f, buf, size);
400 }
401
402 static ssize_t
403 net_slirp_stream_write(const void *buf, size_t size, void *opaque)
404 {
405 QEMUFile *f = opaque;
406
407 qemu_put_buffer(f, buf, size);
408 if (qemu_file_get_error(f)) {
409 return -1;
410 }
411
412 return size;
413 }
414
415 static int net_slirp_state_load(QEMUFile *f, void *opaque, int version_id)
416 {
417 Slirp *slirp = opaque;
418
419 return slirp_state_load(slirp, version_id, net_slirp_stream_read, f);
420 }
421
422 static void net_slirp_state_save(QEMUFile *f, void *opaque)
423 {
424 Slirp *slirp = opaque;
425
426 slirp_state_save(slirp, net_slirp_stream_write, f);
427 }
428
429 static SaveVMHandlers savevm_slirp_state = {
430 .save_state = net_slirp_state_save,
431 .load_state = net_slirp_state_load,
432 };
433
434 static int net_slirp_init(NetClientState *peer, const char *model,
435 const char *name, int restricted,
436 bool ipv4, const char *vnetwork, const char *vhost,
437 bool ipv6, const char *vprefix6, int vprefix6_len,
438 const char *vhost6,
439 const char *vhostname, const char *tftp_export,
440 const char *bootfile, const char *vdhcp_start,
441 const char *vnameserver, const char *vnameserver6,
442 const char *smb_export, const char *vsmbserver,
443 const char **dnssearch, const char *vdomainname,
444 const char *tftp_server_name,
445 Error **errp)
446 {
447 /* default settings according to historic slirp */
448 struct in_addr net = { .s_addr = htonl(0x0a000200) }; /* 10.0.2.0 */
449 struct in_addr mask = { .s_addr = htonl(0xffffff00) }; /* 255.255.255.0 */
450 struct in_addr host = { .s_addr = htonl(0x0a000202) }; /* 10.0.2.2 */
451 struct in_addr dhcp = { .s_addr = htonl(0x0a00020f) }; /* 10.0.2.15 */
452 struct in_addr dns = { .s_addr = htonl(0x0a000203) }; /* 10.0.2.3 */
453 struct in6_addr ip6_prefix;
454 struct in6_addr ip6_host;
455 struct in6_addr ip6_dns;
456 #if defined(CONFIG_SMBD_COMMAND)
457 struct in_addr smbsrv = { .s_addr = 0 };
458 #endif
459 SlirpConfig cfg = { 0 };
460 NetClientState *nc;
461 SlirpState *s;
462 char buf[20];
463 uint32_t addr;
464 int shift;
465 char *end;
466 struct slirp_config_str *config;
467
468 if (!ipv4 && (vnetwork || vhost || vnameserver)) {
469 error_setg(errp, "IPv4 disabled but netmask/host/dns provided");
470 return -1;
471 }
472
473 if (!ipv6 && (vprefix6 || vhost6 || vnameserver6)) {
474 error_setg(errp, "IPv6 disabled but prefix/host6/dns6 provided");
475 return -1;
476 }
477
478 if (!ipv4 && !ipv6) {
479 /* It doesn't make sense to disable both */
480 error_setg(errp, "IPv4 and IPv6 disabled");
481 return -1;
482 }
483
484 if (vnetwork) {
485 if (get_str_sep(buf, sizeof(buf), &vnetwork, '/') < 0) {
486 if (!inet_aton(vnetwork, &net)) {
487 error_setg(errp, "Failed to parse netmask");
488 return -1;
489 }
490 addr = ntohl(net.s_addr);
491 if (!(addr & 0x80000000)) {
492 mask.s_addr = htonl(0xff000000); /* class A */
493 } else if ((addr & 0xfff00000) == 0xac100000) {
494 mask.s_addr = htonl(0xfff00000); /* priv. 172.16.0.0/12 */
495 } else if ((addr & 0xc0000000) == 0x80000000) {
496 mask.s_addr = htonl(0xffff0000); /* class B */
497 } else if ((addr & 0xffff0000) == 0xc0a80000) {
498 mask.s_addr = htonl(0xffff0000); /* priv. 192.168.0.0/16 */
499 } else if ((addr & 0xffff0000) == 0xc6120000) {
500 mask.s_addr = htonl(0xfffe0000); /* tests 198.18.0.0/15 */
501 } else if ((addr & 0xe0000000) == 0xe0000000) {
502 mask.s_addr = htonl(0xffffff00); /* class C */
503 } else {
504 mask.s_addr = htonl(0xfffffff0); /* multicast/reserved */
505 }
506 } else {
507 if (!inet_aton(buf, &net)) {
508 error_setg(errp, "Failed to parse netmask");
509 return -1;
510 }
511 shift = strtol(vnetwork, &end, 10);
512 if (*end != '\0') {
513 if (!inet_aton(vnetwork, &mask)) {
514 error_setg(errp,
515 "Failed to parse netmask (trailing chars)");
516 return -1;
517 }
518 } else if (shift < 4 || shift > 32) {
519 error_setg(errp,
520 "Invalid netmask provided (must be in range 4-32)");
521 return -1;
522 } else {
523 mask.s_addr = htonl(0xffffffff << (32 - shift));
524 }
525 }
526 net.s_addr &= mask.s_addr;
527 host.s_addr = net.s_addr | (htonl(0x0202) & ~mask.s_addr);
528 dhcp.s_addr = net.s_addr | (htonl(0x020f) & ~mask.s_addr);
529 dns.s_addr = net.s_addr | (htonl(0x0203) & ~mask.s_addr);
530 }
531
532 if (vhost && !inet_aton(vhost, &host)) {
533 error_setg(errp, "Failed to parse host");
534 return -1;
535 }
536 if ((host.s_addr & mask.s_addr) != net.s_addr) {
537 error_setg(errp, "Host doesn't belong to network");
538 return -1;
539 }
540
541 if (vnameserver && !inet_aton(vnameserver, &dns)) {
542 error_setg(errp, "Failed to parse DNS");
543 return -1;
544 }
545 if (restricted && (dns.s_addr & mask.s_addr) != net.s_addr) {
546 error_setg(errp, "DNS doesn't belong to network");
547 return -1;
548 }
549 if (dns.s_addr == host.s_addr) {
550 error_setg(errp, "DNS must be different from host");
551 return -1;
552 }
553
554 if (vdhcp_start && !inet_aton(vdhcp_start, &dhcp)) {
555 error_setg(errp, "Failed to parse DHCP start address");
556 return -1;
557 }
558 if ((dhcp.s_addr & mask.s_addr) != net.s_addr) {
559 error_setg(errp, "DHCP doesn't belong to network");
560 return -1;
561 }
562 if (dhcp.s_addr == host.s_addr || dhcp.s_addr == dns.s_addr) {
563 error_setg(errp, "DHCP must be different from host and DNS");
564 return -1;
565 }
566
567 #if defined(CONFIG_SMBD_COMMAND)
568 if (vsmbserver && !inet_aton(vsmbserver, &smbsrv)) {
569 error_setg(errp, "Failed to parse SMB address");
570 return -1;
571 }
572 #endif
573
574 if (!vprefix6) {
575 vprefix6 = "fec0::";
576 }
577 if (!inet_pton(AF_INET6, vprefix6, &ip6_prefix)) {
578 error_setg(errp, "Failed to parse IPv6 prefix");
579 return -1;
580 }
581
582 if (!vprefix6_len) {
583 vprefix6_len = 64;
584 }
585 if (vprefix6_len < 0 || vprefix6_len > 126) {
586 error_setg(errp,
587 "Invalid IPv6 prefix provided "
588 "(IPv6 prefix length must be between 0 and 126)");
589 return -1;
590 }
591
592 if (vhost6) {
593 if (!inet_pton(AF_INET6, vhost6, &ip6_host)) {
594 error_setg(errp, "Failed to parse IPv6 host");
595 return -1;
596 }
597 if (!in6_equal_net(&ip6_prefix, &ip6_host, vprefix6_len)) {
598 error_setg(errp, "IPv6 Host doesn't belong to network");
599 return -1;
600 }
601 } else {
602 ip6_host = ip6_prefix;
603 ip6_host.s6_addr[15] |= 2;
604 }
605
606 if (vnameserver6) {
607 if (!inet_pton(AF_INET6, vnameserver6, &ip6_dns)) {
608 error_setg(errp, "Failed to parse IPv6 DNS");
609 return -1;
610 }
611 if (restricted && !in6_equal_net(&ip6_prefix, &ip6_dns, vprefix6_len)) {
612 error_setg(errp, "IPv6 DNS doesn't belong to network");
613 return -1;
614 }
615 } else {
616 ip6_dns = ip6_prefix;
617 ip6_dns.s6_addr[15] |= 3;
618 }
619
620 if (vdomainname && !*vdomainname) {
621 error_setg(errp, "'domainname' parameter cannot be empty");
622 return -1;
623 }
624
625 if (vdomainname && strlen(vdomainname) > 255) {
626 error_setg(errp, "'domainname' parameter cannot exceed 255 bytes");
627 return -1;
628 }
629
630 if (vhostname && strlen(vhostname) > 255) {
631 error_setg(errp, "'vhostname' parameter cannot exceed 255 bytes");
632 return -1;
633 }
634
635 if (tftp_server_name && strlen(tftp_server_name) > 255) {
636 error_setg(errp, "'tftp-server-name' parameter cannot exceed 255 bytes");
637 return -1;
638 }
639
640 nc = qemu_new_net_client(&net_slirp_info, peer, model, name);
641
642 qemu_set_info_str(nc, "net=%s,restrict=%s", inet_ntoa(net),
643 restricted ? "on" : "off");
644
645 s = DO_UPCAST(SlirpState, nc, nc);
646
647 cfg.version =
648 SLIRP_CHECK_VERSION(4, 9, 0) ? 6 :
649 SLIRP_CHECK_VERSION(4, 7, 0) ? 4 : 1;
650 cfg.restricted = restricted;
651 cfg.in_enabled = ipv4;
652 cfg.vnetwork = net;
653 cfg.vnetmask = mask;
654 cfg.vhost = host;
655 cfg.in6_enabled = ipv6;
656 cfg.vprefix_addr6 = ip6_prefix;
657 cfg.vprefix_len = vprefix6_len;
658 cfg.vhost6 = ip6_host;
659 cfg.vhostname = vhostname;
660 cfg.tftp_server_name = tftp_server_name;
661 cfg.tftp_path = tftp_export;
662 cfg.bootfile = bootfile;
663 cfg.vdhcp_start = dhcp;
664 cfg.vnameserver = dns;
665 cfg.vnameserver6 = ip6_dns;
666 cfg.vdnssearch = dnssearch;
667 cfg.vdomainname = vdomainname;
668 s->slirp = slirp_new(&cfg, &slirp_cb, s);
669 QTAILQ_INSERT_TAIL(&slirp_stacks, s, entry);
670
671 /*
672 * Make sure the current bitstream version of slirp is 4, to avoid
673 * QEMU migration incompatibilities, if upstream slirp bumped the
674 * version.
675 *
676 * FIXME: use bitfields of features? teach libslirp to save with
677 * specific version?
678 */
679 g_assert(slirp_state_version() == 4);
680 register_savevm_live("slirp", VMSTATE_INSTANCE_ID_ANY,
681 slirp_state_version(), &savevm_slirp_state, s->slirp);
682
683 s->poll_notifier.notify = net_slirp_poll_notify;
684 main_loop_poll_add_notifier(&s->poll_notifier);
685
686 for (config = slirp_configs; config; config = config->next) {
687 if (config->flags & SLIRP_CFG_HOSTFWD) {
688 if (slirp_hostfwd(s, config->str, errp) < 0) {
689 goto error;
690 }
691 } else {
692 if (slirp_guestfwd(s, config->str, errp) < 0) {
693 goto error;
694 }
695 }
696 }
697 #if defined(CONFIG_SMBD_COMMAND)
698 if (smb_export) {
699 if (slirp_smb(s, smb_export, smbsrv, errp) < 0) {
700 goto error;
701 }
702 }
703 #endif
704
705 s->exit_notifier.notify = slirp_smb_exit;
706 qemu_add_exit_notifier(&s->exit_notifier);
707 return 0;
708
709 error:
710 qemu_del_net_client(nc);
711 return -1;
712 }
713
714 #ifdef CONFIG_HMP
715 static SlirpState *slirp_lookup(MonitorHMP *hmp, const char *id)
716 {
717 if (id) {
718 NetClientState *nc = qemu_find_netdev(id);
719 if (!nc) {
720 monitor_hmp_printf(hmp, "unrecognized netdev id '%s'\n", id);
721 return NULL;
722 }
723 if (strcmp(nc->model, "user")) {
724 monitor_hmp_printf(hmp, "invalid device specified\n");
725 return NULL;
726 }
727 return DO_UPCAST(SlirpState, nc, nc);
728 } else {
729 if (QTAILQ_EMPTY(&slirp_stacks)) {
730 monitor_hmp_printf(hmp, "user mode network stack not in use\n");
731 return NULL;
732 }
733 return QTAILQ_FIRST(&slirp_stacks);
734 }
735 }
736
737 void hmp_hostfwd_remove(MonitorHMP *hmp, const QDict *qdict)
738 {
739 /* TODO: support removing unix fwd */
740 struct sockaddr_in host_addr = {
741 .sin_family = AF_INET,
742 .sin_addr = {
743 .s_addr = INADDR_ANY,
744 },
745 };
746 int host_port;
747 char buf[256];
748 const char *src_str, *p;
749 SlirpState *s;
750 int is_udp = 0;
751 int err;
752 const char *arg1 = qdict_get_str(qdict, "arg1");
753 const char *arg2 = qdict_get_try_str(qdict, "arg2");
754
755 if (arg2) {
756 s = slirp_lookup(hmp, arg1);
757 src_str = arg2;
758 } else {
759 s = slirp_lookup(hmp, NULL);
760 src_str = arg1;
761 }
762 if (!s) {
763 return;
764 }
765
766 p = src_str;
767 if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
768 goto fail_syntax;
769 }
770
771 if (!strcmp(buf, "tcp") || buf[0] == '\0') {
772 is_udp = 0;
773 } else if (!strcmp(buf, "udp")) {
774 is_udp = 1;
775 } else {
776 goto fail_syntax;
777 }
778
779 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
780 goto fail_syntax;
781 }
782 if (buf[0] != '\0' && !inet_aton(buf, &host_addr.sin_addr)) {
783 goto fail_syntax;
784 }
785
786 if (qemu_strtoi(p, NULL, 10, &host_port)) {
787 goto fail_syntax;
788 }
789 host_addr.sin_port = htons(host_port);
790
791 #if SLIRP_CHECK_VERSION(4, 5, 0)
792 err = slirp_remove_hostxfwd(s->slirp, (struct sockaddr *) &host_addr,
793 sizeof(host_addr), is_udp ? SLIRP_HOSTFWD_UDP : 0);
794 #else
795 err = slirp_remove_hostfwd(s->slirp, is_udp, host_addr.sin_addr, host_port);
796 #endif
797
798 monitor_hmp_printf(hmp, "host forwarding rule for %s %s\n", src_str,
799 err ? "not found" : "removed");
800 return;
801
802 fail_syntax:
803 monitor_hmp_printf(hmp, "invalid format\n");
804 }
805 #endif
806
807 static int slirp_hostfwd(SlirpState *s, const char *redir_str, Error **errp)
808 {
809 union {
810 struct sockaddr_in in;
811 #if !defined(WIN32) && SLIRP_CHECK_VERSION(4, 7, 0)
812 struct sockaddr_un un;
813 #endif
814 } host_addr = {0};
815
816 struct sockaddr_in guest_addr = {
817 .sin_family = AF_INET,
818 .sin_addr = {
819 .s_addr = 0,
820 },
821 };
822 int err;
823 int host_port, guest_port;
824 const char *p;
825 char buf[256];
826 int is_udp = 0;
827 #if !defined(WIN32) && SLIRP_CHECK_VERSION(4, 7, 0)
828 int is_unix = 0;
829 #endif
830 const char *end;
831 const char *fail_reason = "Unknown reason";
832 socklen_t host_addr_size;
833
834 p = redir_str;
835 if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
836 fail_reason = "No : separators";
837 goto fail_syntax;
838 }
839 if (!strcmp(buf, "tcp") || buf[0] == '\0') {
840 is_udp = 0;
841 } else if (!strcmp(buf, "udp")) {
842 is_udp = 1;
843 }
844 #if !defined(WIN32) && SLIRP_CHECK_VERSION(4, 7, 0)
845 else if (!strcmp(buf, "unix")) {
846 is_unix = 1;
847 }
848 #endif
849 else {
850 fail_reason = "Bad protocol name";
851 goto fail_syntax;
852 }
853
854 #if !defined(WIN32) && SLIRP_CHECK_VERSION(4, 7, 0)
855 if (is_unix) {
856 if (get_str_sep(buf, sizeof(buf), &p, 0 - '-') < 0) {
857 fail_reason = "Missing - separator";
858 goto fail_syntax;
859 }
860 if (buf[0] == '\0') {
861 fail_reason = "Missing unix socket path";
862 goto fail_syntax;
863 }
864 if (buf[0] != '/') {
865 fail_reason = "unix socket path must be absolute";
866 goto fail_syntax;
867 }
868
869 size_t path_len = strlen(buf);
870 if (path_len > sizeof(host_addr.un.sun_path) - 1) {
871 fail_reason = "Unix socket path is too long";
872 goto fail_syntax;
873 }
874
875 struct stat st;
876 if (stat(buf, &st) == 0) {
877 if (!S_ISSOCK(st.st_mode)) {
878 fail_reason = "file exists and it's not unix socket";
879 goto fail_syntax;
880 }
881
882 if (unlink(buf) < 0) {
883 error_setg_errno(errp, errno, "Failed to unlink '%s'", buf);
884 goto fail_syntax;
885 }
886 }
887 host_addr.un.sun_family = AF_UNIX;
888 memcpy(host_addr.un.sun_path, buf, path_len);
889 host_addr_size = sizeof(host_addr.un);
890 } else
891 #endif
892 {
893 host_addr.in.sin_family = AF_INET;
894 host_addr.in.sin_addr.s_addr = INADDR_ANY;
895
896 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
897 fail_reason = "Missing : separator";
898 goto fail_syntax;
899 }
900
901 if (buf[0] != '\0' && !inet_aton(buf, &host_addr.in.sin_addr)) {
902 fail_reason = "Bad host address";
903 goto fail_syntax;
904 }
905
906 if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
907 fail_reason = "Bad host port separator";
908 goto fail_syntax;
909 }
910
911 err = qemu_strtoi(buf, &end, 0, &host_port);
912 if (err || host_port < 0 || host_port > 65535) {
913 fail_reason = "Bad host port";
914 goto fail_syntax;
915 }
916
917 host_addr.in.sin_port = htons(host_port);
918 host_addr_size = sizeof(host_addr.in);
919 }
920
921 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
922 fail_reason = "Missing guest address";
923 goto fail_syntax;
924 }
925 if (buf[0] != '\0' && !inet_aton(buf, &guest_addr.sin_addr)) {
926 fail_reason = "Bad guest address";
927 goto fail_syntax;
928 }
929
930 err = qemu_strtoi(p, &end, 0, &guest_port);
931 if (err || guest_port < 1 || guest_port > 65535) {
932 fail_reason = "Bad guest port";
933 goto fail_syntax;
934 }
935 guest_addr.sin_port = htons(guest_port);
936
937 #if SLIRP_CHECK_VERSION(4, 5, 0)
938 err = slirp_add_hostxfwd(s->slirp,
939 (struct sockaddr *) &host_addr, host_addr_size,
940 (struct sockaddr *) &guest_addr, sizeof(guest_addr),
941 is_udp ? SLIRP_HOSTFWD_UDP : 0);
942 #else
943 (void) host_addr_size;
944 err = slirp_add_hostfwd(s->slirp, is_udp,
945 host_addr.in.sin_addr, host_port,
946 guest_addr.sin_addr, guest_port);
947 #endif
948
949 if (err < 0) {
950 error_setg(errp, "Could not set up host forwarding rule '%s'",
951 redir_str);
952 return -1;
953 }
954 return 0;
955
956 fail_syntax:
957 error_setg(errp, "Invalid host forwarding rule '%s' (%s)", redir_str,
958 fail_reason);
959 return -1;
960 }
961
962 #ifdef CONFIG_HMP
963 void hmp_hostfwd_add(MonitorHMP *hmp, const QDict *qdict)
964 {
965 const char *redir_str;
966 SlirpState *s;
967 const char *arg1 = qdict_get_str(qdict, "arg1");
968 const char *arg2 = qdict_get_try_str(qdict, "arg2");
969
970 if (arg2) {
971 s = slirp_lookup(hmp, arg1);
972 redir_str = arg2;
973 } else {
974 s = slirp_lookup(hmp, NULL);
975 redir_str = arg1;
976 }
977 if (s) {
978 Error *err = NULL;
979 if (slirp_hostfwd(s, redir_str, &err) < 0) {
980 error_report_err(err);
981 }
982 }
983 }
984 #endif
985
986 #if defined(CONFIG_SMBD_COMMAND)
987
988 /* automatic user mode samba server configuration */
989 static void slirp_smb_cleanup(SlirpState *s)
990 {
991 int ret;
992
993 if (s->smb_dir) {
994 gchar *cmd = g_strdup_printf("rm -rf %s", s->smb_dir);
995 ret = system(cmd);
996 if (ret == -1 || !WIFEXITED(ret)) {
997 error_report("'%s' failed.", cmd);
998 } else if (WEXITSTATUS(ret)) {
999 error_report("'%s' failed. Error code: %d",
1000 cmd, WEXITSTATUS(ret));
1001 }
1002 g_free(cmd);
1003 g_free(s->smb_dir);
1004 s->smb_dir = NULL;
1005 }
1006 }
1007
1008 static int slirp_smb(SlirpState* s, const char *exported_dir,
1009 struct in_addr vserver_addr, Error **errp)
1010 {
1011 char *smb_conf;
1012 char *smb_cmdline;
1013 struct passwd *passwd;
1014 FILE *f;
1015
1016 passwd = getpwuid(geteuid());
1017 if (!passwd) {
1018 error_setg(errp, "Failed to retrieve user name");
1019 return -1;
1020 }
1021
1022 if (access(CONFIG_SMBD_COMMAND, F_OK)) {
1023 error_setg(errp, "Could not find '%s', please install it",
1024 CONFIG_SMBD_COMMAND);
1025 return -1;
1026 }
1027
1028 if (access(exported_dir, R_OK | X_OK)) {
1029 error_setg_errno(errp, errno,
1030 "Error accessing shared directory '%s'",
1031 exported_dir);
1032 return -1;
1033 }
1034
1035 s->smb_dir = g_dir_make_tmp("qemu-smb.XXXXXX", NULL);
1036 if (!s->smb_dir) {
1037 error_setg(errp, "Could not create samba server dir");
1038 return -1;
1039 }
1040 smb_conf = g_strdup_printf("%s/%s", s->smb_dir, "smb.conf");
1041
1042 f = fopen(smb_conf, "w");
1043 if (!f) {
1044 int eno = errno;
1045
1046 slirp_smb_cleanup(s);
1047 error_setg_errno(errp, eno,
1048 "Could not create samba server configuration file '%s'",
1049 smb_conf);
1050 g_free(smb_conf);
1051 return -1;
1052 }
1053 fprintf(f,
1054 "[global]\n"
1055 "private dir=%s\n"
1056 "interfaces=127.0.0.1\n"
1057 "bind interfaces only=yes\n"
1058 "pid directory=%s\n"
1059 "lock directory=%s\n"
1060 "state directory=%s\n"
1061 "cache directory=%s\n"
1062 "ncalrpc dir=%s/ncalrpc\n"
1063 "log file=%s/log.smbd\n"
1064 "smb passwd file=%s/smbpasswd\n"
1065 "security = user\n"
1066 "map to guest = Bad User\n"
1067 "load printers = no\n"
1068 "printing = bsd\n"
1069 "disable spoolss = yes\n"
1070 "usershare max shares = 0\n"
1071 "[qemu]\n"
1072 "path=%s\n"
1073 "read only=no\n"
1074 "guest ok=yes\n"
1075 "force user=%s\n",
1076 s->smb_dir,
1077 s->smb_dir,
1078 s->smb_dir,
1079 s->smb_dir,
1080 s->smb_dir,
1081 s->smb_dir,
1082 s->smb_dir,
1083 s->smb_dir,
1084 exported_dir,
1085 passwd->pw_name
1086 );
1087 fclose(f);
1088
1089 smb_cmdline = g_strdup_printf("%s -l %s -s %s",
1090 CONFIG_SMBD_COMMAND, s->smb_dir, smb_conf);
1091 g_free(smb_conf);
1092
1093 if (slirp_add_exec(s->slirp, smb_cmdline, &vserver_addr, 139) < 0 ||
1094 slirp_add_exec(s->slirp, smb_cmdline, &vserver_addr, 445) < 0) {
1095 slirp_smb_cleanup(s);
1096 g_free(smb_cmdline);
1097 error_setg(errp, "Conflicting/invalid smbserver address");
1098 return -1;
1099 }
1100 g_free(smb_cmdline);
1101 return 0;
1102 }
1103
1104 #endif /* defined(CONFIG_SMBD_COMMAND) */
1105
1106 static int guestfwd_can_read(void *opaque)
1107 {
1108 struct GuestFwd *fwd = opaque;
1109 return slirp_socket_can_recv(fwd->slirp, fwd->server, fwd->port);
1110 }
1111
1112 static void guestfwd_read(void *opaque, const uint8_t *buf, int size)
1113 {
1114 struct GuestFwd *fwd = opaque;
1115 slirp_socket_recv(fwd->slirp, fwd->server, fwd->port, buf, size);
1116 }
1117
1118 static ssize_t guestfwd_write(const void *buf, size_t len, void *chr)
1119 {
1120 return qemu_chr_fe_write_all(chr, buf, len);
1121 }
1122
1123 static int slirp_guestfwd(SlirpState *s, const char *config_str, Error **errp)
1124 {
1125 /* TODO: IPv6 */
1126 struct in_addr server = { .s_addr = 0 };
1127 struct GuestFwd *fwd;
1128 const char *p;
1129 char buf[128];
1130 char *end;
1131 int port;
1132
1133 p = config_str;
1134 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1135 goto fail_syntax;
1136 }
1137 if (strcmp(buf, "tcp") && buf[0] != '\0') {
1138 goto fail_syntax;
1139 }
1140 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1141 goto fail_syntax;
1142 }
1143 if (buf[0] != '\0' && !inet_aton(buf, &server)) {
1144 goto fail_syntax;
1145 }
1146 if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
1147 goto fail_syntax;
1148 }
1149 port = strtol(buf, &end, 10);
1150 if (*end != '\0' || port < 1 || port > 65535) {
1151 goto fail_syntax;
1152 }
1153
1154 snprintf(buf, sizeof(buf), "guestfwd.tcp.%d", port);
1155
1156 if (g_str_has_prefix(p, "cmd:")) {
1157 if (slirp_add_exec(s->slirp, &p[4], &server, port) < 0) {
1158 error_setg(errp, "Conflicting/invalid host:port in guest "
1159 "forwarding rule '%s'", config_str);
1160 return -1;
1161 }
1162 } else {
1163 Error *err = NULL;
1164 /*
1165 * FIXME: sure we want to support implicit
1166 * muxed monitors here?
1167 */
1168 Chardev *chr = qemu_chr_new_mux_mon(buf, p, NULL);
1169
1170 if (!chr) {
1171 error_setg(errp, "Could not open guest forwarding device '%s'",
1172 buf);
1173 return -1;
1174 }
1175
1176 fwd = g_new(struct GuestFwd, 1);
1177 qemu_chr_fe_init(&fwd->hd, chr, &err);
1178 if (err) {
1179 error_propagate(errp, err);
1180 object_unparent(OBJECT(chr));
1181 g_free(fwd);
1182 return -1;
1183 }
1184
1185 if (slirp_add_guestfwd(s->slirp, guestfwd_write, &fwd->hd,
1186 &server, port) < 0) {
1187 error_setg(errp, "Conflicting/invalid host:port in guest "
1188 "forwarding rule '%s'", config_str);
1189 qemu_chr_fe_deinit(&fwd->hd, true);
1190 g_free(fwd);
1191 return -1;
1192 }
1193 fwd->server = server;
1194 fwd->port = port;
1195 fwd->slirp = s->slirp;
1196
1197 qemu_chr_fe_set_handlers(&fwd->hd, guestfwd_can_read, guestfwd_read,
1198 NULL, NULL, fwd, NULL, true);
1199 s->fwd = g_slist_append(s->fwd, fwd);
1200 }
1201 return 0;
1202
1203 fail_syntax:
1204 error_setg(errp, "Invalid guest forwarding rule '%s'", config_str);
1205 return -1;
1206 }
1207
1208 UsernetInfoList *qmp_x_query_usernet(Error **errp)
1209 {
1210 UsernetInfoList *head = NULL, **tail = &head;
1211 SlirpState *s;
1212
1213 QTAILQ_FOREACH(s, &slirp_stacks, entry) {
1214 UsernetInfo *ui = g_new0(UsernetInfo, 1);
1215 int id;
1216
1217 if (net_hub_id_for_client(&s->nc, &id) == 0) {
1218 ui->has_hub_id = true;
1219 ui->hub_id = id;
1220 }
1221 ui->hub_name = g_strdup(s->nc.name);
1222 ui->info = slirp_connection_info(s->slirp);
1223
1224 QAPI_LIST_APPEND(tail, ui);
1225 }
1226
1227 return head;
1228 }
1229
1230 #ifdef CONFIG_HMP
1231 void hmp_info_usernet(MonitorHMP *hmp, const QDict *qdict)
1232 {
1233 g_autoptr(UsernetInfoList) list = NULL;
1234 UsernetInfoList *entry;
1235
1236 list = qmp_x_query_usernet(&error_abort);
1237 for (entry = list; entry; entry = entry->next) {
1238 UsernetInfo *ui = entry->value;
1239 monitor_hmp_printf(hmp, "Hub %d (%s):\n%s",
1240 ui->has_hub_id ? (int)ui->hub_id : -1,
1241 ui->hub_name, ui->info);
1242 }
1243 }
1244 #endif
1245
1246 static void
1247 net_init_slirp_configs_host(const NetdevUserHostForwardList *fwd)
1248 {
1249 while (fwd) {
1250 struct slirp_config_str *config;
1251
1252 config = g_malloc0(sizeof(*config));
1253 pstrcpy(config->str, sizeof(config->str), fwd->value->str);
1254 config->flags = SLIRP_CFG_HOSTFWD;
1255 config->next = slirp_configs;
1256 slirp_configs = config;
1257
1258 fwd = fwd->next;
1259 }
1260 }
1261
1262 static void
1263 net_init_slirp_configs_guest(const NetdevUserGuestForwardList *fwd)
1264 {
1265 while (fwd) {
1266 struct slirp_config_str *config;
1267
1268 config = g_malloc0(sizeof(*config));
1269 pstrcpy(config->str, sizeof(config->str), fwd->value->str);
1270 config->next = slirp_configs;
1271 slirp_configs = config;
1272
1273 fwd = fwd->next;
1274 }
1275 }
1276
1277 static const char **slirp_dnssearch(const NetdevUserDomainSuffixList *dnsname)
1278 {
1279 const NetdevUserDomainSuffixList *c = dnsname;
1280 size_t i = 0, num_opts = 0;
1281 const char **ret;
1282
1283 while (c) {
1284 num_opts++;
1285 c = c->next;
1286 }
1287
1288 if (num_opts == 0) {
1289 return NULL;
1290 }
1291
1292 ret = g_malloc((num_opts + 1) * sizeof(*ret));
1293 c = dnsname;
1294 while (c) {
1295 ret[i++] = c->value->str;
1296 c = c->next;
1297 }
1298 ret[i] = NULL;
1299 return ret;
1300 }
1301
1302 int net_init_slirp(const Netdev *netdev, const char *name,
1303 NetClientState *peer, Error **errp)
1304 {
1305 struct slirp_config_str *config;
1306 char *vnet;
1307 int ret;
1308 const NetdevUserOptions *user;
1309 const char **dnssearch;
1310 bool ipv4 = true, ipv6 = true;
1311
1312 assert(netdev->type == NET_CLIENT_DRIVER_USER);
1313 user = &netdev->u.user;
1314
1315 if ((user->has_ipv6 && user->ipv6 && !user->has_ipv4) ||
1316 (user->has_ipv4 && !user->ipv4)) {
1317 ipv4 = 0;
1318 }
1319 if ((user->has_ipv4 && user->ipv4 && !user->has_ipv6) ||
1320 (user->has_ipv6 && !user->ipv6)) {
1321 ipv6 = 0;
1322 }
1323
1324 vnet = user->net ? g_strdup(user->net) :
1325 user->ip ? g_strdup_printf("%s/24", user->ip) :
1326 NULL;
1327
1328 dnssearch = slirp_dnssearch(user->dnssearch);
1329
1330 /* all optional fields are initialized to "all bits zero" */
1331
1332 net_init_slirp_configs_host(user->hostfwd);
1333 net_init_slirp_configs_guest(user->guestfwd);
1334
1335 ret = net_slirp_init(peer, "user", name, user->q_restrict,
1336 ipv4, vnet, user->host,
1337 ipv6, user->ipv6_prefix, user->ipv6_prefixlen,
1338 user->ipv6_host, user->hostname, user->tftp,
1339 user->bootfile, user->dhcpstart,
1340 user->dns, user->ipv6_dns, user->smb,
1341 user->smbserver, dnssearch, user->domainname,
1342 user->tftp_server_name, errp);
1343
1344 while (slirp_configs) {
1345 config = slirp_configs;
1346 slirp_configs = config->next;
1347 g_free(config);
1348 }
1349
1350 g_free(vnet);
1351 g_free(dnssearch);
1352
1353 return ret;
1354 }