slirp.c@ 93115

Last change on this file since 93115 was 93115, checked in by vboxsync, 3 years ago
scm --update-copyright-year
Property svn:eol-style set to `native` Property svn:keywords set to `Author Date Id Revision`
File size: 65.2 KB

Line
1	/* $Id: slirp.c 93115 2022-01-01 11:31:46Z vboxsync $ */
2	/** @file
3	* NAT - slirp glue.
4	*/
5
6	/*
7	* Copyright (C) 2006-2022 Oracle Corporation
8	*
9	* This file is part of VirtualBox Open Source Edition (OSE), as
10	* available from http://www.virtualbox.org. This file is free software;
11	* you can redistribute it and/or modify it under the terms of the GNU
12	* General Public License (GPL) as published by the Free Software
13	* Foundation, in version 2 as it comes in the "COPYING" file of the
14	* VirtualBox OSE distribution. VirtualBox OSE is distributed in the
15	* hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
16	*/
17
18	/*
19	* This code is based on:
20	*
21	* libslirp glue
22	*
23	* Copyright (c) 2004-2008 Fabrice Bellard
24	*
25	* Permission is hereby granted, free of charge, to any person obtaining a copy
26	* of this software and associated documentation files (the "Software"), to deal
27	* in the Software without restriction, including without limitation the rights
28	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
29	* copies of the Software, and to permit persons to whom the Software is
30	* furnished to do so, subject to the following conditions:
31	*
32	* The above copyright notice and this permission notice shall be included in
33	* all copies or substantial portions of the Software.
34	*
35	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
36	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
37	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
38	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
39	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
40	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
41	* THE SOFTWARE.
42	*/
43
44	#include "slirp.h"
45	#ifdef RT_OS_OS2
46	# include <paths.h>
47	#endif
48
49	#include <iprt/errcore.h>
50	#include <VBox/vmm/dbgf.h>
51	#include <VBox/vmm/pdmdrv.h>
52	#include <iprt/assert.h>
53	#include <iprt/file.h>
54	#include <iprt/path.h>
55	#ifndef RT_OS_WINDOWS
56	# include <sys/ioctl.h>
57	# include <poll.h>
58	# include <netinet/in.h>
59	#else
60	# include <Winnls.h>
61	# define _WINSOCK2API_
62	# include <iprt/win/iphlpapi.h>
63	#endif
64	#include <alias.h>
65
66	#ifndef RT_OS_WINDOWS
67	/**
68	* XXX: It shouldn't be non-Windows specific.
69	* resolv_conf_parser.h client's structure isn't OS specific, it's just need to be generalized a
70	* a bit to replace slirp_state.h DNS server (domain) lists with rcp_state like structure.
71	*/
72	# include "resolv_conf_parser.h"
73	#endif
74
75	#ifndef RT_OS_WINDOWS
76	# define DO_ENGAGE_EVENT1(so, fdset, label) \
77	do { \
78	if ( so->so_poll_index != -1 \
79	&& so->s == polls[so->so_poll_index].fd) \
80	{ \
81	polls[so->so_poll_index].events \|= N_(fdset ## _poll); \
82	break; \
83	} \
84	AssertRelease(poll_index < (nfds)); \
85	AssertRelease(poll_index >= 0 && poll_index < (nfds)); \
86	polls[poll_index].fd = (so)->s; \
87	(so)->so_poll_index = poll_index; \
88	polls[poll_index].events = N_(fdset ## _poll); \
89	polls[poll_index].revents = 0; \
90	poll_index++; \
91	} while (0)
92
93	# define DO_ENGAGE_EVENT2(so, fdset1, fdset2, label) \
94	do { \
95	if ( so->so_poll_index != -1 \
96	&& so->s == polls[so->so_poll_index].fd) \
97	{ \
98	polls[so->so_poll_index].events \|= \
99	N_(fdset1 ## _poll) \| N_(fdset2 ## _poll); \
100	break; \
101	} \
102	AssertRelease(poll_index < (nfds)); \
103	polls[poll_index].fd = (so)->s; \
104	(so)->so_poll_index = poll_index; \
105	polls[poll_index].events = \
106	N_(fdset1 ## _poll) \| N_(fdset2 ## _poll); \
107	poll_index++; \
108	} while (0)
109
110	# define DO_POLL_EVENTS(rc, error, so, events, label) do {} while (0)
111
112	/*
113	* DO_CHECK_FD_SET is used in dumping events on socket, including POLLNVAL.
114	* gcc warns about attempts to log POLLNVAL so construction in a last to lines
115	* used to catch POLLNVAL while logging and return false in case of error while
116	* normal usage.
117	*/
118	# define DO_CHECK_FD_SET(so, events, fdset) \
119	( ((so)->so_poll_index != -1) \
120	&& ((so)->so_poll_index <= ndfs) \
121	&& ((so)->s == polls[so->so_poll_index].fd) \
122	&& (polls[(so)->so_poll_index].revents & N_(fdset ## _poll)) \
123	&& ( N_(fdset ## _poll) == POLLNVAL \
124	\|\| !(polls[(so)->so_poll_index].revents & POLLNVAL)))
125
126	/* specific for Windows Winsock API */
127	# define DO_WIN_CHECK_FD_SET(so, events, fdset) 0
128
129	# ifndef RT_OS_LINUX
130	# define readfds_poll (POLLRDNORM)
131	# define writefds_poll (POLLWRNORM)
132	# else
133	# define readfds_poll (POLLIN)
134	# define writefds_poll (POLLOUT)
135	# endif
136	# define xfds_poll (POLLPRI)
137	# define closefds_poll (POLLHUP)
138	# define rderr_poll (POLLERR)
139	# if 0 /* unused yet */
140	# define rdhup_poll (POLLHUP)
141	# define nval_poll (POLLNVAL)
142	# endif
143
144	# define ICMP_ENGAGE_EVENT(so, fdset) \
145	do { \
146	if (pData->icmp_socket.s != -1) \
147	DO_ENGAGE_EVENT1((so), fdset, ICMP); \
148	} while (0)
149
150	#else /* RT_OS_WINDOWS */
151
152	/*
153	* On Windows, we will be notified by IcmpSendEcho2() when the response arrives.
154	* So no call to WSAEventSelect necessary.
155	*/
156	# define ICMP_ENGAGE_EVENT(so, fdset) do {} while (0)
157
158	/*
159	* On Windows we use FD_ALL_EVENTS to ensure that we don't miss any event.
160	*/
161	# define DO_ENGAGE_EVENT1(so, fdset1, label) \
162	do { \
163	rc = WSAEventSelect((so)->s, VBOX_SOCKET_EVENT, FD_ALL_EVENTS); \
164	if (rc == SOCKET_ERROR) \
165	{ \
166	/* This should not happen */ \
167	error = WSAGetLastError(); \
168	LogRel(("WSAEventSelect (" #label ") error %d (so=%x, socket=%s, event=%x)\n", \
169	error, (so), (so)->s, VBOX_SOCKET_EVENT)); \
170	} \
171	} while (0); \
172	CONTINUE(label)
173
174	# define DO_ENGAGE_EVENT2(so, fdset1, fdset2, label) \
175	DO_ENGAGE_EVENT1((so), (fdset1), label)
176
177	# define DO_POLL_EVENTS(rc, error, so, events, label) \
178	(rc) = WSAEnumNetworkEvents((so)->s, VBOX_SOCKET_EVENT, (events)); \
179	if ((rc) == SOCKET_ERROR) \
180	{ \
181	(error) = WSAGetLastError(); \
182	LogRel(("WSAEnumNetworkEvents %R[natsock] " #label " error %d\n", (so), (error))); \
183	LogFunc(("WSAEnumNetworkEvents %R[natsock] " #label " error %d\n", (so), (error))); \
184	CONTINUE(label); \
185	}
186
187	# define acceptds_win FD_ACCEPT
188	# define acceptds_win_bit FD_ACCEPT_BIT
189	# define readfds_win FD_READ
190	# define readfds_win_bit FD_READ_BIT
191	# define writefds_win FD_WRITE
192	# define writefds_win_bit FD_WRITE_BIT
193	# define xfds_win FD_OOB
194	# define xfds_win_bit FD_OOB_BIT
195	# define closefds_win FD_CLOSE
196	# define closefds_win_bit FD_CLOSE_BIT
197	# define connectfds_win FD_CONNECT
198	# define connectfds_win_bit FD_CONNECT_BIT
199
200	# define closefds_win FD_CLOSE
201	# define closefds_win_bit FD_CLOSE_BIT
202
203	# define DO_CHECK_FD_SET(so, events, fdset) \
204	((events).lNetworkEvents & fdset ## _win)
205
206	# define DO_WIN_CHECK_FD_SET(so, events, fdset) DO_CHECK_FD_SET((so), (events), fdset)
207	# define DO_UNIX_CHECK_FD_SET(so, events, fdset) 1 /specific for Unix API /
208
209	#endif /* RT_OS_WINDOWS */
210
211	#define TCP_ENGAGE_EVENT1(so, fdset) \
212	DO_ENGAGE_EVENT1((so), fdset, tcp)
213
214	#define TCP_ENGAGE_EVENT2(so, fdset1, fdset2) \
215	DO_ENGAGE_EVENT2((so), fdset1, fdset2, tcp)
216
217	#ifdef RT_OS_WINDOWS
218	# define WIN_TCP_ENGAGE_EVENT2(so, fdset, fdset2) TCP_ENGAGE_EVENT2(so, fdset1, fdset2)
219	#endif
220
221	#define UDP_ENGAGE_EVENT(so, fdset) \
222	DO_ENGAGE_EVENT1((so), fdset, udp)
223
224	#define POLL_TCP_EVENTS(rc, error, so, events) \
225	DO_POLL_EVENTS((rc), (error), (so), (events), tcp)
226
227	#define POLL_UDP_EVENTS(rc, error, so, events) \
228	DO_POLL_EVENTS((rc), (error), (so), (events), udp)
229
230	#define CHECK_FD_SET(so, events, set) \
231	(DO_CHECK_FD_SET((so), (events), set))
232
233	#define WIN_CHECK_FD_SET(so, events, set) \
234	(DO_WIN_CHECK_FD_SET((so), (events), set))
235
236	/*
237	* Loging macros
238	*/
239	#ifdef VBOX_WITH_DEBUG_NAT_SOCKETS
240	# if defined(RT_OS_WINDOWS)
241	# define DO_LOG_NAT_SOCK(so, proto, winevent, r_fdset, w_fdset, x_fdset) \
242	do { \
243	LogRel((" " #proto " %R[natsock] %R[natwinnetevents]\n", (so), (winevent))); \
244	} while (0)
245	# else /* !RT_OS_WINDOWS */
246	# define DO_LOG_NAT_SOCK(so, proto, winevent, r_fdset, w_fdset, x_fdset) \
247	do { \
248	LogRel((" " #proto " %R[natsock] %s %s %s er: %s, %s, %s\n", (so), \
249	CHECK_FD_SET(so, ign ,r_fdset) ? "READ":"", \
250	CHECK_FD_SET(so, ign, w_fdset) ? "WRITE":"", \
251	CHECK_FD_SET(so, ign, x_fdset) ? "OOB":"", \
252	CHECK_FD_SET(so, ign, rderr) ? "RDERR":"", \
253	CHECK_FD_SET(so, ign, rdhup) ? "RDHUP":"", \
254	CHECK_FD_SET(so, ign, nval) ? "RDNVAL":"")); \
255	} while (0)
256	# endif /* !RT_OS_WINDOWS */
257	#else /* !VBOX_WITH_DEBUG_NAT_SOCKETS */
258	# define DO_LOG_NAT_SOCK(so, proto, winevent, r_fdset, w_fdset, x_fdset) do {} while (0)
259	#endif /* !VBOX_WITH_DEBUG_NAT_SOCKETS */
260
261	#define LOG_NAT_SOCK(so, proto, winevent, r_fdset, w_fdset, x_fdset) \
262	DO_LOG_NAT_SOCK((so), proto, (winevent), r_fdset, w_fdset, x_fdset)
263
264	static const uint8_t special_ethaddr[6] =
265	{
266	0x52, 0x54, 0x00, 0x12, 0x35, 0x00
267	};
268
269	static const uint8_t broadcast_ethaddr[6] =
270	{
271	0xff, 0xff, 0xff, 0xff, 0xff, 0xff
272	};
273
274	const uint8_t zerro_ethaddr[6] =
275	{
276	0x0, 0x0, 0x0, 0x0, 0x0, 0x0
277	};
278
279	/**
280	* This helper routine do the checks in descriptions to
281	* ''fUnderPolling'' and ''fShouldBeRemoved'' flags
282	* @returns 1 if socket removed and 0 if no changes was made.
283	*/
284	static int slirpVerifyAndFreeSocket(PNATState pData, struct socket *pSocket)
285	{
286	AssertPtrReturn(pData, 0);
287	AssertPtrReturn(pSocket, 0);
288	AssertReturn(pSocket->fUnderPolling, 0);
289	if (pSocket->fShouldBeRemoved)
290	{
291	pSocket->fUnderPolling = 0;
292	sofree(pData, pSocket);
293	/* pSocket is PHANTOM, now */
294	return 1;
295	}
296	return 0;
297	}
298
299	int slirp_init(PNATState *ppData, uint32_t u32NetAddr, uint32_t u32Netmask,
300	bool fPassDomain, bool fUseHostResolver, int i32AliasMode,
301	int iIcmpCacheLimit, bool fLocalhostReachable, void *pvUser)
302	{
303	int rc;
304	PNATState pData;
305	if (u32Netmask & 0x1f)
306	{
307	/* CTL is x.x.x.15, bootp passes up to 16 IPs (15..31) */
308	LogRel(("NAT: The last 5 bits of the netmask (%RTnaipv4) need to be unset\n", RT_BE2H_U32(u32Netmask)));
309	return VERR_INVALID_PARAMETER;
310	}
311	pData = RTMemAllocZ(RT_ALIGN_Z(sizeof(NATState), sizeof(uint64_t)));
312	*ppData = pData;
313	if (!pData)
314	return VERR_NO_MEMORY;
315	pData->fPassDomain = !fUseHostResolver ? fPassDomain : false;
316	pData->fUseHostResolver = fUseHostResolver;
317	pData->fUseHostResolverPermanent = fUseHostResolver;
318	pData->fLocalhostReachable = fLocalhostReachable;
319	pData->pvUser = pvUser;
320	pData->netmask = u32Netmask;
321
322	rc = RTCritSectRwInit(&pData->CsRwHandlerChain);
323	if (RT_FAILURE(rc))
324	return rc;
325
326	/* sockets & TCP defaults */
327	pData->socket_rcv = 64 * _1K;
328	pData->socket_snd = 64 * _1K;
329	tcp_sndspace = 64 * _1K;
330	tcp_rcvspace = 64 * _1K;
331
332	/*
333	* Use the same default here as in DevNAT.cpp (SoMaxConnection CFGM value)
334	* to avoid release log noise.
335	*/
336	pData->soMaxConn = 10;
337
338	#ifdef RT_OS_WINDOWS
339	{
340	WSADATA Data;
341	RTLDRMOD hLdrMod;
342
343	WSAStartup(MAKEWORD(2, 0), &Data);
344
345	rc = RTLdrLoadSystem("Iphlpapi.dll", true /fNoUnload/, &hLdrMod);
346	if (RT_SUCCESS(rc))
347	{
348	rc = RTLdrGetSymbol(hLdrMod, "GetAdaptersAddresses", (void **)&pData->pfnGetAdaptersAddresses);
349	if (RT_FAILURE(rc))
350	LogRel(("NAT: Can't find GetAdapterAddresses in Iphlpapi.dll\n"));
351
352	RTLdrClose(hLdrMod);
353	}
354	}
355	pData->phEvents[VBOX_SOCKET_EVENT_INDEX] = CreateEvent(NULL, FALSE, FALSE, NULL);
356	#endif
357
358	rc = bootp_dhcp_init(pData);
359	if (RT_FAILURE(rc))
360	{
361	Log(("NAT: DHCP server initialization failed\n"));
362	RTMemFree(pData);
363	*ppData = NULL;
364	return rc;
365	}
366	debug_init(pData);
367	if_init(pData);
368	ip_init(pData);
369	icmp_init(pData, iIcmpCacheLimit);
370
371	/* Initialise mbufs after setting the MTU */
372	mbuf_init(pData);
373
374	pData->special_addr.s_addr = u32NetAddr;
375	pData->slirp_ethaddr = &special_ethaddr[0];
376	alias_addr.s_addr = pData->special_addr.s_addr \| RT_H2N_U32_C(CTL_ALIAS);
377	/** @todo add ability to configure this staff */
378
379	/*
380	* Some guests won't reacquire DHCP lease on link flap when VM is
381	* restored. Instead of forcing users to explicitly set CTL_GUEST
382	* in port-forwarding rules, provide it as initial guess here.
383	*/
384	slirp_update_guest_addr_guess(pData,
385	pData->special_addr.s_addr \| RT_H2N_U32_C(CTL_GUEST),
386	"initialization");
387
388	/* set default addresses */
389	inet_aton("127.0.0.1", &loopback_addr);
390
391	rc = slirpTftpInit(pData);
392	AssertRCReturn(rc, rc);
393
394	if (i32AliasMode & ~(PKT_ALIAS_LOG\|PKT_ALIAS_SAME_PORTS\|PKT_ALIAS_PROXY_ONLY))
395	{
396	LogRel(("NAT: bad alias mode 0x%x ignored\n", i32AliasMode));
397	i32AliasMode = 0;
398	}
399	else if (i32AliasMode != 0)
400	{
401	LogRel(("NAT: alias mode 0x%x\n", i32AliasMode));
402	}
403
404	pData->i32AliasMode = i32AliasMode;
405	getouraddr(pData);
406	{
407	int flags = 0;
408	struct in_addr proxy_addr;
409	pData->proxy_alias = LibAliasInit(pData, NULL);
410	if (pData->proxy_alias == NULL)
411	{
412	Log(("NAT: LibAlias default rule wasn't initialized\n"));
413	AssertMsgFailed(("NAT: LibAlias default rule wasn't initialized\n"));
414	}
415	flags = LibAliasSetMode(pData->proxy_alias, 0, 0);
416	#ifndef NO_FW_PUNCH
417	flags \|= PKT_ALIAS_PUNCH_FW;
418	#endif
419	flags \|= pData->i32AliasMode; /* do transparent proxying */
420	flags = LibAliasSetMode(pData->proxy_alias, flags, ~0U);
421	proxy_addr.s_addr = RT_H2N_U32(RT_N2H_U32(pData->special_addr.s_addr) \| CTL_ALIAS);
422	LibAliasSetAddress(pData->proxy_alias, proxy_addr);
423	ftp_alias_load(pData);
424	nbt_alias_load(pData);
425	}
426	#ifdef VBOX_WITH_NAT_SEND2HOME
427	/** @todo we should know all interfaces available on host. */
428	pData->pInSockAddrHomeAddress = RTMemAllocZ(sizeof(struct sockaddr));
429	pData->cInHomeAddressSize = 1;
430	inet_aton("192.168.1.25", &pData->pInSockAddrHomeAddress[0].sin_addr);
431	pData->pInSockAddrHomeAddress[0].sin_family = AF_INET;
432	# ifdef RT_OS_DARWIN
433	pData->pInSockAddrHomeAddress[0].sin_len = sizeof(struct sockaddr_in);
434	# endif
435	#endif
436
437	#ifdef VBOX_WITH_DNSMAPPING_IN_HOSTRESOLVER
438	STAILQ_INIT(&pData->DNSMapNames);
439	STAILQ_INIT(&pData->DNSMapPatterns);
440	#endif
441
442	slirp_link_up(pData);
443	return VINF_SUCCESS;
444	}
445
446	/**
447	* Register statistics.
448	*/
449	void slirp_register_statistics(PNATState pData, PPDMDRVINS pDrvIns)
450	{
451	#ifdef VBOX_WITH_STATISTICS
452	# define PROFILE_COUNTER(name, dsc) REGISTER_COUNTER(name, pData, STAMTYPE_PROFILE, STAMUNIT_TICKS_PER_CALL, dsc)
453	# define COUNTING_COUNTER(name, dsc) REGISTER_COUNTER(name, pData, STAMTYPE_COUNTER, STAMUNIT_COUNT, dsc)
454	# include "counters.h"
455	# undef COUNTER
456	/** @todo register statistics for the variables dumped by:
457	* ipstats(pData); tcpstats(pData); udpstats(pData); icmpstats(pData);
458	* mbufstats(pData); sockstats(pData); */
459	#else /* VBOX_WITH_STATISTICS */
460	NOREF(pData);
461	NOREF(pDrvIns);
462	#endif /* !VBOX_WITH_STATISTICS */
463	}
464
465	/**
466	* Deregister statistics.
467	*/
468	void slirp_deregister_statistics(PNATState pData, PPDMDRVINS pDrvIns)
469	{
470	if (pData == NULL)
471	return;
472	#ifdef VBOX_WITH_STATISTICS
473	# define PROFILE_COUNTER(name, dsc) DEREGISTER_COUNTER(name, pData)
474	# define COUNTING_COUNTER(name, dsc) DEREGISTER_COUNTER(name, pData)
475	# include "counters.h"
476	#else /* VBOX_WITH_STATISTICS */
477	NOREF(pData);
478	NOREF(pDrvIns);
479	#endif /* !VBOX_WITH_STATISTICS */
480	}
481
482	/**
483	* Marks the link as up, making it possible to establish new connections.
484	*/
485	void slirp_link_up(PNATState pData)
486	{
487	if (link_up == 1)
488	return;
489
490	link_up = 1;
491
492	if (!pData->fUseHostResolverPermanent)
493	slirpInitializeDnsSettings(pData);
494	}
495
496	/**
497	* Marks the link as down and cleans up the current connections.
498	*/
499	void slirp_link_down(PNATState pData)
500	{
501	if (link_up == 0)
502	return;
503
504	slirpReleaseDnsSettings(pData);
505
506	link_up = 0;
507	}
508
509	/**
510	* Terminates the slirp component.
511	*/
512	void slirp_term(PNATState pData)
513	{
514	struct socket *so;
515
516	if (pData == NULL)
517	return;
518
519	icmp_finit(pData);
520
521	while ((so = tcb.so_next) != &tcb)
522	{
523	/* Don't miss TCB releasing */
524	if ( !sototcpcb(so)
525	&& ( so->so_state & SS_NOFDREF
526	\|\| so->s == -1))
527	sofree(pData, so);
528	else
529	tcp_close(pData, sototcpcb(so));
530	}
531
532	while ((so = udb.so_next) != &udb)
533	udp_detach(pData, so);
534
535	slirp_link_down(pData);
536	ftp_alias_unload(pData);
537	nbt_alias_unload(pData);
538
539	#ifdef VBOX_WITH_DNSMAPPING_IN_HOSTRESOLVER
540	{
541	DNSMAPPINGHEAD *heads[2];
542	int i;
543
544	heads[0] = &pData->DNSMapNames;
545	heads[1] = &pData->DNSMapPatterns;
546	for (i = 0; i < RT_ELEMENTS(heads); ++i)
547	{
548	while (!STAILQ_EMPTY(heads[i]))
549	{
550	PDNSMAPPINGENTRY pDnsEntry = STAILQ_FIRST(heads[i]);
551	STAILQ_REMOVE_HEAD(heads[i], MapList);
552	RTStrFree(pDnsEntry->pszName);
553	RTMemFree(pDnsEntry);
554	}
555	}
556	}
557	#endif
558
559	while (!LIST_EMPTY(&instancehead))
560	{
561	struct libalias *la = LIST_FIRST(&instancehead);
562	/* libalias do all clean up */
563	LibAliasUninit(la);
564	}
565	while (!LIST_EMPTY(&pData->arp_cache))
566	{
567	struct arp_cache_entry *ac = LIST_FIRST(&pData->arp_cache);
568	LIST_REMOVE(ac, list);
569	RTMemFree(ac);
570	}
571	while (!LIST_EMPTY(&pData->port_forward_rule_head))
572	{
573	struct port_forward_rule *rule = LIST_FIRST(&pData->port_forward_rule_head);
574	LIST_REMOVE(rule, list);
575	RTMemFree(rule);
576	}
577	slirpTftpTerm(pData);
578	bootp_dhcp_fini(pData);
579	m_fini(pData);
580	#ifdef RT_OS_WINDOWS
581	WSACleanup();
582	#endif
583	if (tftp_prefix)
584	RTStrFree((char *)tftp_prefix);
585	#ifdef LOG_ENABLED
586	Log(("\n"
587	"NAT statistics\n"
588	"--------------\n"
589	"\n"));
590	ipstats(pData);
591	tcpstats(pData);
592	udpstats(pData);
593	icmpstats(pData);
594	mbufstats(pData);
595	sockstats(pData);
596	Log(("\n"
597	"\n"
598	"\n"));
599	#endif
600	RTCritSectRwDelete(&pData->CsRwHandlerChain);
601	RTMemFree(pData);
602	}
603
604
605	#define CONN_CANFSEND(so) (((so)->so_state & (SS_FCANTSENDMORE\|SS_ISFCONNECTED)) == SS_ISFCONNECTED)
606	#define CONN_CANFRCV(so) (((so)->so_state & (SS_FCANTRCVMORE\|SS_ISFCONNECTED)) == SS_ISFCONNECTED)
607
608	/*
609	* curtime kept to an accuracy of 1ms
610	*/
611	static void updtime(PNATState pData)
612	{
613	#ifdef RT_OS_WINDOWS
614	struct _timeb tb;
615
616	_ftime(&tb);
617	curtime = (u_int)tb.time * (u_int)1000;
618	curtime += (u_int)tb.millitm;
619	#else
620	gettimeofday(&tt, 0);
621
622	curtime = (u_int)tt.tv_sec * (u_int)1000;
623	curtime += (u_int)tt.tv_usec / (u_int)1000;
624
625	if ((tt.tv_usec % 1000) >= 500)
626	curtime++;
627	#endif
628	}
629
630	#ifdef RT_OS_WINDOWS
631	void slirp_select_fill(PNATState pData, int *pnfds)
632	#else /* RT_OS_WINDOWS */
633	void slirp_select_fill(PNATState pData, int pnfds, struct pollfd polls)
634	#endif /* !RT_OS_WINDOWS */
635	{
636	struct socket so, so_next;
637	int nfds;
638	#if defined(RT_OS_WINDOWS)
639	int rc;
640	int error;
641	#else
642	int poll_index = 0;
643	#endif
644	int i;
645
646	STAM_PROFILE_START(&pData->StatFill, a);
647
648	nfds = *pnfds;
649
650	/*
651	* First, TCP sockets
652	*/
653	do_slowtimo = 0;
654	if (!link_up)
655	goto done;
656
657	/*
658	* *_slowtimo needs calling if there are IP fragments
659	* in the fragment queue, or there are TCP connections active
660	*/
661	/* XXX:
662	* triggering of fragment expiration should be the same but use new macroses
663	*/
664	do_slowtimo = (tcb.so_next != &tcb);
665	if (!do_slowtimo)
666	{
667	for (i = 0; i < IPREASS_NHASH; i++)
668	{
669	if (!TAILQ_EMPTY(&ipq[i]))
670	{
671	do_slowtimo = 1;
672	break;
673	}
674	}
675	}
676	/* always add the ICMP socket */
677	#ifndef RT_OS_WINDOWS
678	pData->icmp_socket.so_poll_index = -1;
679	#endif
680	ICMP_ENGAGE_EVENT(&pData->icmp_socket, readfds);
681
682	STAM_COUNTER_RESET(&pData->StatTCP);
683	STAM_COUNTER_RESET(&pData->StatTCPHot);
684
685	QSOCKET_FOREACH(so, so_next, tcp)
686	/* { */
687	Assert(so->so_type == IPPROTO_TCP);
688	#if !defined(RT_OS_WINDOWS)
689	so->so_poll_index = -1;
690	#endif
691	STAM_COUNTER_INC(&pData->StatTCP);
692
693	/*
694	* See if we need a tcp_fasttimo
695	*/
696	if ( time_fasttimo == 0
697	&& so->so_tcpcb != NULL
698	&& so->so_tcpcb->t_flags & TF_DELACK)
699	{
700	time_fasttimo = curtime; /* Flag when we want a fasttimo */
701	}
702
703	/*
704	* NOFDREF can include still connecting to local-host,
705	* newly socreated() sockets etc. Don't want to select these.
706	*/
707	if (so->so_state & SS_NOFDREF \|\| so->s == -1)
708	CONTINUE(tcp);
709
710	/*
711	* Set for reading sockets which are accepting
712	*/
713	if (so->so_state & SS_FACCEPTCONN)
714	{
715	STAM_COUNTER_INC(&pData->StatTCPHot);
716	TCP_ENGAGE_EVENT1(so, readfds);
717	CONTINUE(tcp);
718	}
719
720	/*
721	* Set for writing sockets which are connecting
722	*/
723	if (so->so_state & SS_ISFCONNECTING)
724	{
725	Log2(("connecting %R[natsock] engaged\n",so));
726	STAM_COUNTER_INC(&pData->StatTCPHot);
727	#ifdef RT_OS_WINDOWS
728	WIN_TCP_ENGAGE_EVENT2(so, writefds, connectfds);
729	#else
730	TCP_ENGAGE_EVENT1(so, writefds);
731	#endif
732	}
733
734	/*
735	* Set for writing if we are connected, can send more, and
736	* we have something to send
737	*/
738	if (CONN_CANFSEND(so) && SBUF_LEN(&so->so_rcv))
739	{
740	STAM_COUNTER_INC(&pData->StatTCPHot);
741	TCP_ENGAGE_EVENT1(so, writefds);
742	}
743
744	/*
745	* Set for reading (and urgent data) if we are connected, can
746	* receive more, and we have room for it XXX /2 ?
747	*/
748	/** @todo vvl - check which predicat here will be more useful here in rerm of new sbufs. */
749	if ( CONN_CANFRCV(so)
750	&& (SBUF_LEN(&so->so_snd) < (SBUF_SIZE(&so->so_snd)/2))
751	#ifdef RT_OS_WINDOWS
752	&& !(so->so_state & SS_ISFCONNECTING)
753	#endif
754	)
755	{
756	STAM_COUNTER_INC(&pData->StatTCPHot);
757	TCP_ENGAGE_EVENT2(so, readfds, xfds);
758	}
759	LOOP_LABEL(tcp, so, so_next);
760	}
761
762	/*
763	* UDP sockets
764	*/
765	STAM_COUNTER_RESET(&pData->StatUDP);
766	STAM_COUNTER_RESET(&pData->StatUDPHot);
767
768	QSOCKET_FOREACH(so, so_next, udp)
769	/* { */
770
771	Assert(so->so_type == IPPROTO_UDP);
772	STAM_COUNTER_INC(&pData->StatUDP);
773	#if !defined(RT_OS_WINDOWS)
774	so->so_poll_index = -1;
775	#endif
776
777	/*
778	* See if it's timed out
779	*/
780	if (so->so_expire)
781	{
782	if (so->so_expire <= curtime)
783	{
784	Log2(("NAT: %R[natsock] expired\n", so));
785	if (so->so_timeout != NULL)
786	{
787	/* so_timeout - might change the so_expire value or
788	* drop so_timeout* from so.
789	*/
790	so->so_timeout(pData, so, so->so_timeout_arg);
791	/* on 4.2 so->
792	*/
793	if ( so_next->so_prev != so /* so_timeout freed the socket */
794	\|\| so->so_timeout) /* so_timeout just freed so_timeout */
795	CONTINUE_NO_UNLOCK(udp);
796	}
797	UDP_DETACH(pData, so, so_next);
798	CONTINUE_NO_UNLOCK(udp);
799	}
800	}
801
802	/*
803	* When UDP packets are received from over the link, they're
804	* sendto()'d straight away, so no need for setting for writing
805	* Limit the number of packets queued by this session to 4.
806	* Note that even though we try and limit this to 4 packets,
807	* the session could have more queued if the packets needed
808	* to be fragmented.
809	*
810	* (XXX <= 4 ?)
811	*/
812	if ((so->so_state & SS_ISFCONNECTED) && so->so_queued <= 4)
813	{
814	STAM_COUNTER_INC(&pData->StatUDPHot);
815	UDP_ENGAGE_EVENT(so, readfds);
816	}
817	LOOP_LABEL(udp, so, so_next);
818	}
819	done:
820
821	#if defined(RT_OS_WINDOWS)
822	*pnfds = VBOX_EVENT_COUNT;
823	#else /* RT_OS_WINDOWS */
824	AssertRelease(poll_index <= *pnfds);
825	*pnfds = poll_index;
826	#endif /* !RT_OS_WINDOWS */
827
828	STAM_PROFILE_STOP(&pData->StatFill, a);
829	}
830
831
832	/**
833	* This function do Connection or sending tcp sequence to.
834	* @returns if true operation completed
835	* @note: functions call tcp_input that potentially could lead to tcp_drop
836	*/
837	static bool slirpConnectOrWrite(PNATState pData, struct socket *so, bool fConnectOnly)
838	{
839	int ret;
840	LogFlowFunc(("ENTER: so:%R[natsock], fConnectOnly:%RTbool\n", so, fConnectOnly));
841	/*
842	* Check for non-blocking, still-connecting sockets
843	*/
844	if (so->so_state & SS_ISFCONNECTING)
845	{
846	Log2(("connecting %R[natsock] catched\n", so));
847	/* Connected */
848	so->so_state &= ~SS_ISFCONNECTING;
849
850	/*
851	* This should be probably guarded by PROBE_CONN too. Anyway,
852	* we disable it on OS/2 because the below send call returns
853	* EFAULT which causes the opened TCP socket to close right
854	* after it has been opened and connected.
855	*/
856	#ifndef RT_OS_OS2
857	ret = send(so->s, (const char *)&ret, 0, 0);
858	if (ret < 0)
859	{
860	/* XXXXX Must fix, zero bytes is a NOP */
861	if ( soIgnorableErrorCode(errno)
862	\|\| errno == ENOTCONN)
863	{
864	LogFlowFunc(("LEAVE: false\n"));
865	return false;
866	}
867
868	/* else failed */
869	so->so_state = SS_NOFDREF;
870	}
871	/* else so->so_state &= ~SS_ISFCONNECTING; */
872	#endif
873
874	/*
875	* Continue tcp_input
876	*/
877	TCP_INPUT(pData, (struct mbuf *)NULL, sizeof(struct ip), so);
878	/* continue; */
879	}
880	else if (!fConnectOnly)
881	{
882	SOWRITE(ret, pData, so);
883	if (RT_LIKELY(ret > 0))
884	{
885	/*
886	* Make sure we will send window update to peer. This is
887	* a moral equivalent of calling tcp_output() for PRU_RCVD
888	* in tcp_usrreq() of the real stack.
889	*/
890	struct tcpcb *tp = sototcpcb(so);
891	if (RT_LIKELY(tp != NULL))
892	tp->t_flags \|= TF_DELACK;
893	}
894	}
895
896	LogFlowFunc(("LEAVE: true\n"));
897	return true;
898	}
899
900	#if defined(RT_OS_WINDOWS)
901	void slirp_select_poll(PNATState pData, int fTimeout)
902	#else /* RT_OS_WINDOWS */
903	void slirp_select_poll(PNATState pData, struct pollfd *polls, int ndfs)
904	#endif /* !RT_OS_WINDOWS */
905	{
906	struct socket so, so_next;
907	int ret;
908	#if defined(RT_OS_WINDOWS)
909	WSANETWORKEVENTS NetworkEvents;
910	int rc;
911	int error;
912	#endif
913
914	STAM_PROFILE_START(&pData->StatPoll, a);
915
916	/* Update time */
917	updtime(pData);
918
919	/*
920	* See if anything has timed out
921	*/
922	if (link_up)
923	{
924	if (time_fasttimo && ((curtime - time_fasttimo) >= 2))
925	{
926	STAM_PROFILE_START(&pData->StatFastTimer, b);
927	tcp_fasttimo(pData);
928	time_fasttimo = 0;
929	STAM_PROFILE_STOP(&pData->StatFastTimer, b);
930	}
931	if (do_slowtimo && ((curtime - last_slowtimo) >= 499))
932	{
933	STAM_PROFILE_START(&pData->StatSlowTimer, c);
934	ip_slowtimo(pData);
935	tcp_slowtimo(pData);
936	last_slowtimo = curtime;
937	STAM_PROFILE_STOP(&pData->StatSlowTimer, c);
938	}
939	}
940	#if defined(RT_OS_WINDOWS)
941	if (fTimeout)
942	return; /* only timer update */
943	#endif
944
945	/*
946	* Check sockets
947	*/
948	if (!link_up)
949	goto done;
950	#if defined(RT_OS_WINDOWS)
951	icmpwin_process(pData);
952	#else
953	if ( (pData->icmp_socket.s != -1)
954	&& CHECK_FD_SET(&pData->icmp_socket, ignored, readfds))
955	sorecvfrom(pData, &pData->icmp_socket);
956	#endif
957	/*
958	* Check TCP sockets
959	*/
960	QSOCKET_FOREACH(so, so_next, tcp)
961	/* { */
962	Assert(!so->fUnderPolling);
963	so->fUnderPolling = 1;
964	if (slirpVerifyAndFreeSocket(pData, so))
965	CONTINUE(tcp);
966	/*
967	* FD_ISSET is meaningless on these sockets
968	* (and they can crash the program)
969	*/
970	if (so->so_state & SS_NOFDREF \|\| so->s == -1)
971	{
972	so->fUnderPolling = 0;
973	CONTINUE(tcp);
974	}
975
976	POLL_TCP_EVENTS(rc, error, so, &NetworkEvents);
977
978	LOG_NAT_SOCK(so, TCP, &NetworkEvents, readfds, writefds, xfds);
979
980	if (so->so_state & SS_ISFCONNECTING)
981	{
982	int sockerr = 0;
983	#if !defined(RT_OS_WINDOWS)
984	{
985	int revents = 0;
986
987	/*
988	* Failed connect(2) is reported by poll(2) on
989	* different OSes with different combinations of
990	* POLLERR, POLLHUP, and POLLOUT.
991	*/
992	if ( CHECK_FD_SET(so, NetworkEvents, closefds) /* POLLHUP */
993	\|\| CHECK_FD_SET(so, NetworkEvents, rderr)) /* POLLERR */
994	{
995	revents = POLLHUP; /* squash to single "failed" flag */
996	}
997	#if defined(RT_OS_SOLARIS) \|\| defined(RT_OS_NETBSD)
998	/* Solaris and NetBSD report plain POLLOUT even on error */
999	else if (CHECK_FD_SET(so, NetworkEvents, writefds)) /* POLLOUT */
1000	{
1001	revents = POLLOUT;
1002	}
1003	#endif
1004
1005	if (revents != 0)
1006	{
1007	socklen_t optlen = (socklen_t)sizeof(sockerr);
1008	ret = getsockopt(so->s, SOL_SOCKET, SO_ERROR, &sockerr, &optlen);
1009
1010	if ( RT_UNLIKELY(ret < 0)
1011	\|\| ( (revents & POLLHUP)
1012	&& RT_UNLIKELY(sockerr == 0)))
1013	sockerr = ETIMEDOUT;
1014	}
1015	}
1016	#else /* RT_OS_WINDOWS */
1017	{
1018	if (NetworkEvents.lNetworkEvents & FD_CONNECT)
1019	sockerr = NetworkEvents.iErrorCode[FD_CONNECT_BIT];
1020	}
1021	#endif
1022	if (sockerr != 0)
1023	{
1024	tcp_fconnect_failed(pData, so, sockerr);
1025	ret = slirpVerifyAndFreeSocket(pData, so);
1026	Assert(ret == 1); /* freed */
1027	CONTINUE(tcp);
1028	}
1029
1030	/*
1031	* XXX: For now just fall through to the old code to
1032	* handle successful connect(2).
1033	*/
1034	}
1035
1036	/*
1037	* Check for URG data
1038	* This will soread as well, so no need to
1039	* test for readfds below if this succeeds
1040	*/
1041
1042	/* out-of-band data */
1043	if ( CHECK_FD_SET(so, NetworkEvents, xfds)
1044	#ifdef RT_OS_DARWIN
1045	/* Darwin and probably BSD hosts generates POLLPRI\|POLLHUP event on receiving TCP.flags.{ACK\|URG\|FIN} this
1046	* combination on other Unixs hosts doesn't enter to this branch
1047	*/
1048	&& !CHECK_FD_SET(so, NetworkEvents, closefds)
1049	#endif
1050	#ifdef RT_OS_WINDOWS
1051	/**
1052	* In some cases FD_CLOSE comes with FD_OOB, that confuse tcp processing.
1053	*/
1054	&& !WIN_CHECK_FD_SET(so, NetworkEvents, closefds)
1055	#endif
1056	)
1057	{
1058	sorecvoob(pData, so);
1059	if (slirpVerifyAndFreeSocket(pData, so))
1060	CONTINUE(tcp);
1061	}
1062
1063	/*
1064	* Check sockets for reading
1065	*/
1066	else if ( CHECK_FD_SET(so, NetworkEvents, readfds)
1067	\|\| WIN_CHECK_FD_SET(so, NetworkEvents, acceptds))
1068	{
1069
1070	#ifdef RT_OS_WINDOWS
1071	if (WIN_CHECK_FD_SET(so, NetworkEvents, connectfds))
1072	{
1073	/* Finish connection first */
1074	/* should we ignore return value? */
1075	bool fRet = slirpConnectOrWrite(pData, so, true);
1076	LogFunc(("fRet:%RTbool\n", fRet)); NOREF(fRet);
1077	if (slirpVerifyAndFreeSocket(pData, so))
1078	CONTINUE(tcp);
1079	}
1080	#endif
1081	/*
1082	* Check for incoming connections
1083	*/
1084	if (so->so_state & SS_FACCEPTCONN)
1085	{
1086	TCP_CONNECT(pData, so);
1087	if (slirpVerifyAndFreeSocket(pData, so))
1088	CONTINUE(tcp);
1089	if (!CHECK_FD_SET(so, NetworkEvents, closefds))
1090	{
1091	so->fUnderPolling = 0;
1092	CONTINUE(tcp);
1093	}
1094	}
1095
1096	ret = soread(pData, so);
1097	if (slirpVerifyAndFreeSocket(pData, so))
1098	CONTINUE(tcp);
1099	/* Output it if we read something */
1100	if (RT_LIKELY(ret > 0))
1101	TCP_OUTPUT(pData, sototcpcb(so));
1102
1103	if (slirpVerifyAndFreeSocket(pData, so))
1104	CONTINUE(tcp);
1105	}
1106
1107	/*
1108	* Check for FD_CLOSE events.
1109	* in some cases once FD_CLOSE engaged on socket it could be flashed latter (for some reasons)
1110	*/
1111	if ( CHECK_FD_SET(so, NetworkEvents, closefds)
1112	\|\| (so->so_close == 1))
1113	{
1114	/*
1115	* drain the socket
1116	*/
1117	for (; so_next->so_prev == so
1118	&& !slirpVerifyAndFreeSocket(pData, so);)
1119	{
1120	ret = soread(pData, so);
1121	if (slirpVerifyAndFreeSocket(pData, so))
1122	break;
1123
1124	if (ret > 0)
1125	TCP_OUTPUT(pData, sototcpcb(so));
1126	else if (so_next->so_prev == so)
1127	{
1128	Log2(("%R[natsock] errno %d (%s)\n", so, errno, strerror(errno)));
1129	break;
1130	}
1131	}
1132
1133	/* if socket freed ''so'' is PHANTOM and next socket isn't points on it */
1134	if (so_next->so_prev != so)
1135	{
1136	CONTINUE(tcp);
1137	}
1138	else
1139	{
1140	/* mark the socket for termination _after_ it was drained */
1141	so->so_close = 1;
1142	/* No idea about Windows but on Posix, POLLHUP means that we can't send more.
1143	* Actually in the specific error scenario, POLLERR is set as well. */
1144	#ifndef RT_OS_WINDOWS
1145	if (CHECK_FD_SET(so, NetworkEvents, rderr))
1146	sofcantsendmore(so);
1147	#endif
1148	}
1149	}
1150
1151	/*
1152	* Check sockets for writing
1153	*/
1154	if ( CHECK_FD_SET(so, NetworkEvents, writefds)
1155	#ifdef RT_OS_WINDOWS
1156	\|\| WIN_CHECK_FD_SET(so, NetworkEvents, connectfds)
1157	#endif
1158	)
1159	{
1160	int fConnectOrWriteSuccess = slirpConnectOrWrite(pData, so, false);
1161	/* slirpConnectOrWrite could return true even if tcp_input called tcp_drop,
1162	* so we should be ready to such situations.
1163	*/
1164	if (slirpVerifyAndFreeSocket(pData, so))
1165	CONTINUE(tcp);
1166	else if (!fConnectOrWriteSuccess)
1167	{
1168	so->fUnderPolling = 0;
1169	CONTINUE(tcp);
1170	}
1171	/* slirpConnectionOrWrite succeeded and socket wasn't dropped */
1172	}
1173
1174	/*
1175	* Probe a still-connecting, non-blocking socket
1176	* to check if it's still alive
1177	*/
1178	#ifdef PROBE_CONN
1179	if (so->so_state & SS_ISFCONNECTING)
1180	{
1181	ret = recv(so->s, (char *)&ret, 0, 0);
1182
1183	if (ret < 0)
1184	{
1185	/* XXX */
1186	if ( soIgnorableErrorCode(errno)
1187	\|\| errno == ENOTCONN)
1188	{
1189	CONTINUE(tcp); /* Still connecting, continue */
1190	}
1191
1192	/* else failed */
1193	so->so_state = SS_NOFDREF;
1194
1195	/* tcp_input will take care of it */
1196	}
1197	else
1198	{
1199	ret = send(so->s, &ret, 0, 0);
1200	if (ret < 0)
1201	{
1202	/* XXX */
1203	if ( soIgnorableErrorCode(errno)
1204	\|\| errno == ENOTCONN)
1205	{
1206	CONTINUE(tcp);
1207	}
1208	/* else failed */
1209	so->so_state = SS_NOFDREF;
1210	}
1211	else
1212	so->so_state &= ~SS_ISFCONNECTING;
1213
1214	}
1215	TCP_INPUT((struct mbuf *)NULL, sizeof(struct ip),so);
1216	} /* SS_ISFCONNECTING */
1217	#endif
1218	if (!slirpVerifyAndFreeSocket(pData, so))
1219	so->fUnderPolling = 0;
1220	LOOP_LABEL(tcp, so, so_next);
1221	}
1222
1223	/*
1224	* Now UDP sockets.
1225	* Incoming packets are sent straight away, they're not buffered.
1226	* Incoming UDP data isn't buffered either.
1227	*/
1228	QSOCKET_FOREACH(so, so_next, udp)
1229	/* { */
1230	#if 0
1231	so->fUnderPolling = 1;
1232	if(slirpVerifyAndFreeSocket(pData, so));
1233	CONTINUE(udp);
1234	so->fUnderPolling = 0;
1235	#endif
1236
1237	POLL_UDP_EVENTS(rc, error, so, &NetworkEvents);
1238
1239	LOG_NAT_SOCK(so, UDP, &NetworkEvents, readfds, writefds, xfds);
1240
1241	if (so->s != -1 && CHECK_FD_SET(so, NetworkEvents, readfds))
1242	{
1243	SORECVFROM(pData, so);
1244	}
1245	LOOP_LABEL(udp, so, so_next);
1246	}
1247
1248	done:
1249
1250	STAM_PROFILE_STOP(&pData->StatPoll, a);
1251	}
1252
1253
1254	struct arphdr
1255	{
1256	unsigned short ar_hrd; /* format of hardware address */
1257	#define ARPHRD_ETHER 1 /* ethernet hardware format */
1258	unsigned short ar_pro; /* format of protocol address */
1259	unsigned char ar_hln; /* length of hardware address */
1260	unsigned char ar_pln; /* length of protocol address */
1261	unsigned short ar_op; /* ARP opcode (command) */
1262	#define ARPOP_REQUEST 1 /* ARP request */
1263	#define ARPOP_REPLY 2 /* ARP reply */
1264
1265	/*
1266	* Ethernet looks like this : This bit is variable sized however...
1267	*/
1268	unsigned char ar_sha[ETH_ALEN]; /* sender hardware address */
1269	unsigned char ar_sip[4]; /* sender IP address */
1270	unsigned char ar_tha[ETH_ALEN]; /* target hardware address */
1271	unsigned char ar_tip[4]; /* target IP address */
1272	};
1273	AssertCompileSize(struct arphdr, 28);
1274
1275	static void arp_output(PNATState pData, const uint8_t pcu8EtherSource, const struct arphdr pcARPHeaderSource, uint32_t ip4TargetAddress)
1276	{
1277	struct ethhdr *pEtherHeaderResponse;
1278	struct arphdr *pARPHeaderResponse;
1279	uint32_t ip4TargetAddressInHostFormat;
1280	struct mbuf *pMbufResponse;
1281
1282	Assert((pcu8EtherSource));
1283	if (!pcu8EtherSource)
1284	return;
1285	ip4TargetAddressInHostFormat = RT_N2H_U32(ip4TargetAddress);
1286
1287	pMbufResponse = m_getcl(pData, M_NOWAIT, MT_HEADER, M_PKTHDR);
1288	if (!pMbufResponse)
1289	return;
1290	pEtherHeaderResponse = mtod(pMbufResponse, struct ethhdr *);
1291	/* @note: if_encap will swap src and dst*/
1292	memcpy(pEtherHeaderResponse->h_source, pcu8EtherSource, ETH_ALEN);
1293	pMbufResponse->m_data += ETH_HLEN;
1294	pARPHeaderResponse = mtod(pMbufResponse, struct arphdr *);
1295	pMbufResponse->m_len = sizeof(struct arphdr);
1296
1297	pARPHeaderResponse->ar_hrd = RT_H2N_U16_C(1);
1298	pARPHeaderResponse->ar_pro = RT_H2N_U16_C(ETH_P_IP);
1299	pARPHeaderResponse->ar_hln = ETH_ALEN;
1300	pARPHeaderResponse->ar_pln = 4;
1301	pARPHeaderResponse->ar_op = RT_H2N_U16_C(ARPOP_REPLY);
1302	memcpy(pARPHeaderResponse->ar_sha, special_ethaddr, ETH_ALEN);
1303
1304	if (!slirpMbufTagService(pData, pMbufResponse, (uint8_t)(ip4TargetAddressInHostFormat & ~pData->netmask)))
1305	{
1306	static bool fTagErrorReported;
1307	if (!fTagErrorReported)
1308	{
1309	LogRel(("NAT: Couldn't add the tag(PACKET_SERVICE:%d)\n",
1310	(uint8_t)(ip4TargetAddressInHostFormat & ~pData->netmask)));
1311	fTagErrorReported = true;
1312	}
1313	}
1314	pARPHeaderResponse->ar_sha[5] = (uint8_t)(ip4TargetAddressInHostFormat & ~pData->netmask);
1315
1316	memcpy(pARPHeaderResponse->ar_sip, pcARPHeaderSource->ar_tip, 4);
1317	memcpy(pARPHeaderResponse->ar_tha, pcARPHeaderSource->ar_sha, ETH_ALEN);
1318	memcpy(pARPHeaderResponse->ar_tip, pcARPHeaderSource->ar_sip, 4);
1319	if_encap(pData, ETH_P_ARP, pMbufResponse, ETH_ENCAP_URG);
1320	}
1321
1322	/**
1323	* @note This function will free m!
1324	*/
1325	static void arp_input(PNATState pData, struct mbuf *m)
1326	{
1327	struct ethhdr *pEtherHeader;
1328	struct arphdr *pARPHeader;
1329	int ar_op;
1330	uint32_t ip4TargetAddress;
1331
1332	/* drivers never return runt packets, so this should never happen */
1333	if (RT_UNLIKELY((size_t)m->m_len
1334	< sizeof(struct ethhdr) + sizeof(struct arphdr)))
1335	goto done;
1336
1337	pEtherHeader = mtod(m, struct ethhdr *);
1338	pARPHeader = (struct arphdr *)&pEtherHeader[1];
1339
1340	if (RT_UNLIKELY( pARPHeader->ar_hrd != RT_H2N_U16_C(ARPHRD_ETHER)
1341	\|\| pARPHeader->ar_pro != RT_H2N_U16_C(ETH_P_IP)
1342	\|\| pARPHeader->ar_hln != ETH_ALEN
1343	\|\| pARPHeader->ar_pln != sizeof(RTNETADDRIPV4)))
1344	goto done;
1345
1346	ar_op = RT_N2H_U16(pARPHeader->ar_op);
1347	ip4TargetAddress = (uint32_t)pARPHeader->ar_tip;
1348
1349	switch (ar_op)
1350	{
1351	case ARPOP_REQUEST:
1352	if ( CTL_CHECK(ip4TargetAddress, CTL_DNS)
1353	\|\| CTL_CHECK(ip4TargetAddress, CTL_ALIAS)
1354	\|\| CTL_CHECK(ip4TargetAddress, CTL_TFTP))
1355	{
1356	#if 0 /* Dropping ARP requests destined for CTL_ALIAS breaks all outgoing traffic completely, so don't do that... */
1357	/* Don't reply to ARP requests for the hosts loopback interface if it is disabled. */
1358	if ( CTL_CHECK(ip4TargetAddress, CTL_ALIAS)
1359	&& !pData->fLocalhostReachable)
1360	break;
1361	#endif
1362	slirp_update_guest_addr_guess(pData, (uint32_t )pARPHeader->ar_sip, "arp request");
1363	arp_output(pData, pEtherHeader->h_source, pARPHeader, ip4TargetAddress);
1364	break;
1365	}
1366
1367	/* Gratuitous ARP */
1368	if ( (uint32_t )pARPHeader->ar_sip == (uint32_t )pARPHeader->ar_tip
1369	&& ( memcmp(pARPHeader->ar_tha, zerro_ethaddr, ETH_ALEN) == 0
1370	\|\| memcmp(pARPHeader->ar_tha, broadcast_ethaddr, ETH_ALEN) == 0)
1371	&& memcmp(pEtherHeader->h_dest, broadcast_ethaddr, ETH_ALEN) == 0)
1372	{
1373	LogRel2(("NAT: Gratuitous ARP from %RTnaipv4 at %RTmac\n",
1374	(uint32_t )pARPHeader->ar_sip, pARPHeader->ar_sha));
1375	slirp_update_guest_addr_guess(pData, (uint32_t )pARPHeader->ar_sip, "gratuitous arp");
1376	slirp_arp_cache_update_or_add(pData, (uint32_t )pARPHeader->ar_sip, &pARPHeader->ar_sha[0]);
1377	}
1378	break;
1379
1380	case ARPOP_REPLY:
1381	slirp_arp_cache_update_or_add(pData, (uint32_t )pARPHeader->ar_sip, &pARPHeader->ar_sha[0]);
1382	break;
1383
1384	default:
1385	break;
1386	}
1387
1388	done:
1389	m_freem(pData, m);
1390	}
1391
1392	/**
1393	* Feed a packet into the slirp engine.
1394	*
1395	* @param m Data buffer, m_len is not valid.
1396	* @param cbBuf The length of the data in m.
1397	*/
1398	void slirp_input(PNATState pData, struct mbuf *m, size_t cbBuf)
1399	{
1400	int proto;
1401	static bool fWarnedIpv6;
1402	struct ethhdr *eh;
1403
1404	m->m_len = (int)cbBuf; Assert((size_t)m->m_len == cbBuf);
1405	if (cbBuf < ETH_HLEN)
1406	{
1407	Log(("NAT: packet having size %d has been ignored\n", m->m_len));
1408	m_freem(pData, m);
1409	return;
1410	}
1411
1412	eh = mtod(m, struct ethhdr *);
1413	proto = RT_N2H_U16(eh->h_proto);
1414	switch(proto)
1415	{
1416	case ETH_P_ARP:
1417	arp_input(pData, m);
1418	break;
1419
1420	case ETH_P_IP:
1421	/* Update time. Important if the network is very quiet, as otherwise
1422	* the first outgoing connection gets an incorrect timestamp. */
1423	updtime(pData);
1424	m_adj(m, ETH_HLEN);
1425	M_ASSERTPKTHDR(m);
1426	m->m_pkthdr.header = mtod(m, void *);
1427	ip_input(pData, m);
1428	break;
1429
1430	case ETH_P_IPV6:
1431	m_freem(pData, m);
1432	if (!fWarnedIpv6)
1433	{
1434	LogRel(("NAT: IPv6 not supported\n"));
1435	fWarnedIpv6 = true;
1436	}
1437	break;
1438
1439	default:
1440	Log(("NAT: Unsupported protocol %x\n", proto));
1441	m_freem(pData, m);
1442	break;
1443	}
1444	}
1445
1446	/**
1447	* Output the IP packet to the ethernet device.
1448	*
1449	* @note This function will free m!
1450	*/
1451	void if_encap(PNATState pData, uint16_t eth_proto, struct mbuf *m, int flags)
1452	{
1453	struct ethhdr *eh;
1454	uint8_t *mbuf = NULL;
1455	int mlen;
1456	STAM_PROFILE_START(&pData->StatIF_encap, a);
1457	LogFlowFunc(("ENTER: pData:%p, eth_proto:%RX16, m:%p, flags:%d\n",
1458	pData, eth_proto, m, flags));
1459
1460	M_ASSERTPKTHDR(m);
1461
1462	Assert(M_LEADINGSPACE(m) >= ETH_HLEN);
1463	m->m_data -= ETH_HLEN;
1464	m->m_len += ETH_HLEN;
1465	eh = mtod(m, struct ethhdr *);
1466	mlen = m->m_len;
1467
1468	if (memcmp(eh->h_source, special_ethaddr, ETH_ALEN) != 0)
1469	{
1470	struct m_tag *t = m_tag_first(m);
1471	uint8_t u8ServiceId = CTL_ALIAS;
1472	memcpy(eh->h_dest, eh->h_source, ETH_ALEN);
1473	memcpy(eh->h_source, special_ethaddr, ETH_ALEN);
1474	Assert(memcmp(eh->h_dest, special_ethaddr, ETH_ALEN) != 0);
1475	if (memcmp(eh->h_dest, zerro_ethaddr, ETH_ALEN) == 0)
1476	{
1477	/* don't do anything */
1478	m_freem(pData, m);
1479	goto done;
1480	}
1481	if ( t
1482	&& (t = m_tag_find(m, PACKET_SERVICE, NULL)))
1483	{
1484	Assert(t);
1485	u8ServiceId = (uint8_t )&t[1];
1486	}
1487	eh->h_source[5] = u8ServiceId;
1488	}
1489	/*
1490	* we're processing the chain, that isn't not expected.
1491	*/
1492	Assert((!m->m_next));
1493	if (m->m_next)
1494	{
1495	Log(("NAT: if_encap's recived the chain, dropping...\n"));
1496	m_freem(pData, m);
1497	goto done;
1498	}
1499	mbuf = mtod(m, uint8_t *);
1500	eh->h_proto = RT_H2N_U16(eth_proto);
1501	LogFunc(("eh(dst:%RTmac, src:%RTmac)\n", eh->h_dest, eh->h_source));
1502	if (flags & ETH_ENCAP_URG)
1503	slirp_urg_output(pData->pvUser, m, mbuf, mlen);
1504	else
1505	slirp_output(pData->pvUser, m, mbuf, mlen);
1506	done:
1507	STAM_PROFILE_STOP(&pData->StatIF_encap, a);
1508	LogFlowFuncLeave();
1509	}
1510
1511
1512	void
1513	slirp_update_guest_addr_guess(PNATState pData, uint32_t guess, const char *msg)
1514	{
1515	Assert(msg != NULL);
1516
1517	if (pData->guest_addr_guess.s_addr == guess)
1518	{
1519	LogRel2(("NAT: Guest address guess %RTnaipv4 re-confirmed by %s\n",
1520	pData->guest_addr_guess.s_addr, msg));
1521	return;
1522	}
1523
1524	if (pData->guest_addr_guess.s_addr == INADDR_ANY)
1525	{
1526	pData->guest_addr_guess.s_addr = guess;
1527	LogRel(("NAT: Guest address guess set to %RTnaipv4 by %s\n",
1528	pData->guest_addr_guess.s_addr, msg));
1529	return;
1530	}
1531	else
1532	{
1533	LogRel(("NAT: Guest address guess changed from %RTnaipv4 to %RTnaipv4 by %s\n",
1534	pData->guest_addr_guess.s_addr, guess, msg));
1535	pData->guest_addr_guess.s_addr = guess;
1536	return;
1537	}
1538	}
1539
1540
1541	static struct port_forward_rule *
1542	slirp_find_redirect(PNATState pData,
1543	int is_udp,
1544	struct in_addr host_addr, int host_port,
1545	struct in_addr guest_addr, int guest_port)
1546	{
1547	struct port_forward_rule *rule;
1548	uint16_t proto = (is_udp ? IPPROTO_UDP : IPPROTO_TCP);
1549
1550	LIST_FOREACH(rule, &pData->port_forward_rule_head, list)
1551	{
1552	if ( rule->proto == proto
1553	&& rule->host_port == host_port
1554	&& rule->bind_ip.s_addr == host_addr.s_addr
1555	&& rule->guest_port == guest_port
1556	&& rule->guest_addr.s_addr == guest_addr.s_addr)
1557	{
1558	return rule;
1559	}
1560	}
1561
1562	return NULL;
1563	}
1564
1565
1566	int slirp_add_redirect(PNATState pData, int is_udp, struct in_addr host_addr, int host_port,
1567	struct in_addr guest_addr, int guest_port)
1568	{
1569	struct port_forward_rule *rule;
1570
1571	rule = slirp_find_redirect(pData, is_udp, host_addr, host_port, guest_addr, guest_port);
1572	if (rule != NULL) /* rule has been already registered */
1573	{
1574	/* XXX: this shouldn't happen */
1575	return 0;
1576	}
1577
1578	rule = RTMemAllocZ(sizeof(struct port_forward_rule));
1579	if (rule == NULL)
1580	return 1;
1581
1582	rule->proto = (is_udp ? IPPROTO_UDP : IPPROTO_TCP);
1583	rule->bind_ip.s_addr = host_addr.s_addr;
1584	rule->host_port = host_port;
1585	rule->guest_addr.s_addr = guest_addr.s_addr;
1586	rule->guest_port = guest_port;
1587
1588	if (rule->proto == IPPROTO_UDP)
1589	rule->so = udp_listen(pData, rule->bind_ip.s_addr, RT_H2N_U16(rule->host_port),
1590	rule->guest_addr.s_addr, RT_H2N_U16(rule->guest_port), 0);
1591	else
1592	rule->so = solisten(pData, rule->bind_ip.s_addr, RT_H2N_U16(rule->host_port),
1593	rule->guest_addr.s_addr, RT_H2N_U16(rule->guest_port), 0);
1594
1595	if (rule->so == NULL)
1596	{
1597	LogRel(("NAT: Failed to redirect %s %RTnaipv4:%d -> %RTnaipv4:%d (%s)\n",
1598	rule->proto == IPPROTO_UDP ? "UDP" : "TCP",
1599	rule->bind_ip.s_addr, rule->host_port,
1600	guest_addr, rule->guest_port, strerror(errno)));
1601	RTMemFree(rule);
1602	return 1;
1603	}
1604
1605	LogRel(("NAT: Set redirect %s %RTnaipv4:%d -> %RTnaipv4:%d\n",
1606	rule->proto == IPPROTO_UDP ? "UDP" : "TCP",
1607	rule->bind_ip.s_addr, rule->host_port,
1608	guest_addr, rule->guest_port));
1609
1610	LIST_INSERT_HEAD(&pData->port_forward_rule_head, rule, list);
1611	return 0;
1612	}
1613
1614
1615	int slirp_remove_redirect(PNATState pData, int is_udp, struct in_addr host_addr, int host_port,
1616	struct in_addr guest_addr, int guest_port)
1617	{
1618	struct port_forward_rule *rule;
1619
1620	rule = slirp_find_redirect(pData, is_udp, host_addr, host_port, guest_addr, guest_port);
1621	if (rule == NULL)
1622	{
1623	LogRel(("NAT: Unable to find redirect %s %RTnaipv4:%d -> %RTnaipv4:%d\n",
1624	is_udp ? "UDP" : "TCP",
1625	host_addr.s_addr, host_port,
1626	guest_addr.s_addr, guest_port));
1627	return 0;
1628	}
1629
1630	LogRel(("NAT: Remove redirect %s %RTnaipv4:%d -> %RTnaipv4:%d\n",
1631	rule->proto == IPPROTO_UDP ? "UDP" : "TCP",
1632	rule->bind_ip.s_addr, rule->host_port,
1633	guest_addr.s_addr, rule->guest_port));
1634
1635	if (rule->so != NULL)
1636	{
1637	if (is_udp)
1638	udp_detach(pData, rule->so);
1639	else
1640	tcp_close(pData, sototcpcb(rule->so));
1641	}
1642
1643	LIST_REMOVE(rule, list);
1644	RTMemFree(rule);
1645	return 0;
1646	}
1647
1648
1649	#if defined(RT_OS_WINDOWS)
1650	HANDLE *slirp_get_events(PNATState pData)
1651	{
1652	return pData->phEvents;
1653	}
1654	void slirp_register_external_event(PNATState pData, HANDLE hEvent, int index)
1655	{
1656	pData->phEvents[index] = hEvent;
1657	}
1658	#endif
1659
1660	unsigned int slirp_get_timeout_ms(PNATState pData)
1661	{
1662	if (link_up)
1663	{
1664	if (time_fasttimo)
1665	return 2;
1666	if (do_slowtimo)
1667	return 500; /* see PR_SLOWHZ */
1668	}
1669	return 36001000; / one hour */
1670	}
1671
1672	#ifndef RT_OS_WINDOWS
1673	int slirp_get_nsock(PNATState pData)
1674	{
1675	return pData->nsock;
1676	}
1677	#endif
1678
1679	/*
1680	* this function called from NAT thread
1681	*/
1682	void slirp_post_sent(PNATState pData, void *pvArg)
1683	{
1684	struct mbuf m = (struct mbuf )pvArg;
1685	m_freem(pData, m);
1686	}
1687
1688	void slirp_set_dhcp_TFTP_prefix(PNATState pData, const char *tftpPrefix)
1689	{
1690	Log2(("tftp_prefix: %s\n", tftpPrefix));
1691	if (tftp_prefix)
1692	RTStrFree((char *)tftp_prefix);
1693	tftp_prefix = RTPathAbsDup(tftpPrefix);
1694	}
1695
1696	void slirp_set_dhcp_TFTP_bootfile(PNATState pData, const char *bootFile)
1697	{
1698	Log2(("bootFile: %s\n", bootFile));
1699	bootp_filename = bootFile;
1700	}
1701
1702	void slirp_set_dhcp_next_server(PNATState pData, const char *next_server)
1703	{
1704	Log2(("next_server: %s\n", next_server));
1705	if (next_server == NULL)
1706	pData->tftp_server.s_addr = RT_H2N_U32(RT_N2H_U32(pData->special_addr.s_addr) \| CTL_TFTP);
1707	else
1708	inet_aton(next_server, &pData->tftp_server);
1709	}
1710
1711	int slirp_set_binding_address(PNATState pData, char *addr)
1712	{
1713	int ok;
1714
1715	pData->bindIP.s_addr = INADDR_ANY;
1716
1717	if (addr == NULL \|\| *addr == '\0')
1718	return VINF_SUCCESS;
1719
1720	ok = inet_aton(addr, &pData->bindIP);
1721	if (!ok)
1722	{
1723	LogRel(("NAT: Unable to parse binding address: %s\n", addr));
1724	return VERR_INVALID_PARAMETER;
1725	}
1726
1727	if (pData->bindIP.s_addr == INADDR_ANY)
1728	return VINF_SUCCESS;
1729
1730	if ((pData->bindIP.s_addr & RT_N2H_U32_C(0xe0000000)) == RT_N2H_U32_C(0xe0000000))
1731	{
1732	LogRel(("NAT: Ignoring multicast binding address %RTnaipv4\n", pData->bindIP.s_addr));
1733	pData->bindIP.s_addr = INADDR_ANY;
1734	return VERR_INVALID_PARAMETER;
1735	}
1736
1737	LogRel(("NAT: Binding address %RTnaipv4\n", pData->bindIP.s_addr));
1738	return VINF_SUCCESS;
1739	}
1740
1741	void slirp_set_dhcp_dns_proxy(PNATState pData, bool fDNSProxy)
1742	{
1743	if (!pData->fUseHostResolver)
1744	{
1745	Log2(("NAT: DNS proxy switched %s\n", (fDNSProxy ? "on" : "off")));
1746	pData->fUseDnsProxy = fDNSProxy;
1747	}
1748	else if (fDNSProxy)
1749	LogRel(("NAT: Host Resolver conflicts with DNS proxy, the last one was forcely ignored\n"));
1750	}
1751
1752	#define CHECK_ARG(name, val, lim_min, lim_max) \
1753	do { \
1754	if ((val) < (lim_min) \|\| (val) > (lim_max)) \
1755	{ \
1756	LogRel(("NAT: (" #name ":%d) has been ignored, " \
1757	"because out of range (%d, %d)\n", (val), (lim_min), (lim_max))); \
1758	return; \
1759	} \
1760	else \
1761	LogRel(("NAT: (" #name ":%d)\n", (val))); \
1762	} while (0)
1763
1764	void slirp_set_somaxconn(PNATState pData, int iSoMaxConn)
1765	{
1766	LogFlowFunc(("iSoMaxConn:%d\n", iSoMaxConn));
1767	/* Conditions */
1768	if (iSoMaxConn > SOMAXCONN)
1769	{
1770	LogRel(("NAT: value of somaxconn(%d) bigger than SOMAXCONN(%d)\n", iSoMaxConn, SOMAXCONN));
1771	iSoMaxConn = SOMAXCONN;
1772	}
1773
1774	if (iSoMaxConn < 1)
1775	{
1776	LogRel(("NAT: proposed value(%d) of somaxconn is invalid, default value is used (%d)\n", iSoMaxConn, pData->soMaxConn));
1777	LogFlowFuncLeave();
1778	return;
1779	}
1780
1781	/* Asignment */
1782	if (pData->soMaxConn != iSoMaxConn)
1783	{
1784	LogRel(("NAT: value of somaxconn has been changed from %d to %d\n",
1785	pData->soMaxConn, iSoMaxConn));
1786	pData->soMaxConn = iSoMaxConn;
1787	}
1788	LogFlowFuncLeave();
1789	}
1790	/* don't allow user set less 8kB and more than 1M values */
1791	#define _8K_1M_CHECK_ARG(name, val) CHECK_ARG(name, (val), 8, 1024)
1792	void slirp_set_rcvbuf(PNATState pData, int kilobytes)
1793	{
1794	_8K_1M_CHECK_ARG("SOCKET_RCVBUF", kilobytes);
1795	pData->socket_rcv = kilobytes;
1796	}
1797	void slirp_set_sndbuf(PNATState pData, int kilobytes)
1798	{
1799	_8K_1M_CHECK_ARG("SOCKET_SNDBUF", kilobytes);
1800	pData->socket_snd = kilobytes * _1K;
1801	}
1802	void slirp_set_tcp_rcvspace(PNATState pData, int kilobytes)
1803	{
1804	_8K_1M_CHECK_ARG("TCP_RCVSPACE", kilobytes);
1805	tcp_rcvspace = kilobytes * _1K;
1806	}
1807	void slirp_set_tcp_sndspace(PNATState pData, int kilobytes)
1808	{
1809	_8K_1M_CHECK_ARG("TCP_SNDSPACE", kilobytes);
1810	tcp_sndspace = kilobytes * _1K;
1811	}
1812
1813	/*
1814	* Looking for Ether by ip in ARP-cache
1815	* Note: it´s responsible of caller to allocate buffer for result
1816	* @returns iprt status code
1817	*/
1818	int slirp_arp_lookup_ether_by_ip(PNATState pData, uint32_t ip, uint8_t *ether)
1819	{
1820	struct arp_cache_entry *ac;
1821
1822	if (ether == NULL)
1823	return VERR_INVALID_PARAMETER;
1824
1825	if (LIST_EMPTY(&pData->arp_cache))
1826	return VERR_NOT_FOUND;
1827
1828	LIST_FOREACH(ac, &pData->arp_cache, list)
1829	{
1830	if ( ac->ip == ip
1831	&& memcmp(ac->ether, broadcast_ethaddr, ETH_ALEN) != 0)
1832	{
1833	memcpy(ether, ac->ether, ETH_ALEN);
1834	return VINF_SUCCESS;
1835	}
1836	}
1837	return VERR_NOT_FOUND;
1838	}
1839
1840	/*
1841	* Looking for IP by Ether in ARP-cache
1842	* Note: it´s responsible of caller to allocate buffer for result
1843	* @returns 0 - if found, 1 - otherwise
1844	*/
1845	int slirp_arp_lookup_ip_by_ether(PNATState pData, const uint8_t ether, uint32_t ip)
1846	{
1847	struct arp_cache_entry *ac;
1848	*ip = INADDR_ANY;
1849
1850	if (LIST_EMPTY(&pData->arp_cache))
1851	return VERR_NOT_FOUND;
1852
1853	LIST_FOREACH(ac, &pData->arp_cache, list)
1854	{
1855	if (memcmp(ether, ac->ether, ETH_ALEN) == 0)
1856	{
1857	*ip = ac->ip;
1858	return VINF_SUCCESS;
1859	}
1860	}
1861	return VERR_NOT_FOUND;
1862	}
1863
1864	void slirp_arp_who_has(PNATState pData, uint32_t dst)
1865	{
1866	struct mbuf *m;
1867	struct ethhdr *ehdr;
1868	struct arphdr *ahdr;
1869	static bool fWarned = false;
1870	LogFlowFunc(("ENTER: %RTnaipv4\n", dst));
1871
1872	/* ARP request WHO HAS 0.0.0.0 is one of the signals
1873	* that something has been broken at Slirp. Investigating
1874	* pcap dumps it's easy to miss warning ARP requests being
1875	* focused on investigation of other protocols flow.
1876	*/
1877	#ifdef DEBUG_vvl
1878	Assert((dst != INADDR_ANY));
1879	NOREF(fWarned);
1880	#else
1881	if ( dst == INADDR_ANY
1882	&& !fWarned)
1883	{
1884	LogRel(("NAT: ARP: \"WHO HAS INADDR_ANY\" request has been detected\n"));
1885	fWarned = true;
1886	}
1887	#endif /* !DEBUG_vvl */
1888
1889	m = m_getcl(pData, M_NOWAIT, MT_HEADER, M_PKTHDR);
1890	if (m == NULL)
1891	{
1892	Log(("NAT: Can't alloc mbuf for ARP request\n"));
1893	LogFlowFuncLeave();
1894	return;
1895	}
1896	ehdr = mtod(m, struct ethhdr *);
1897	memset(ehdr->h_source, 0xff, ETH_ALEN);
1898	ahdr = (struct arphdr *)&ehdr[1];
1899	ahdr->ar_hrd = RT_H2N_U16_C(1);
1900	ahdr->ar_pro = RT_H2N_U16_C(ETH_P_IP);
1901	ahdr->ar_hln = ETH_ALEN;
1902	ahdr->ar_pln = 4;
1903	ahdr->ar_op = RT_H2N_U16_C(ARPOP_REQUEST);
1904	memcpy(ahdr->ar_sha, special_ethaddr, ETH_ALEN);
1905	/* we assume that this request come from gw, but not from DNS or TFTP */
1906	ahdr->ar_sha[5] = CTL_ALIAS;
1907	(uint32_t )ahdr->ar_sip = RT_H2N_U32(RT_N2H_U32(pData->special_addr.s_addr) \| CTL_ALIAS);
1908	memset(ahdr->ar_tha, 0xff, ETH_ALEN); /broadcast/
1909	(uint32_t )ahdr->ar_tip = dst;
1910	/* warn!!! should falls in mbuf minimal size */
1911	m->m_len = sizeof(struct arphdr) + ETH_HLEN;
1912	m->m_data += ETH_HLEN;
1913	m->m_len -= ETH_HLEN;
1914	if_encap(pData, ETH_P_ARP, m, ETH_ENCAP_URG);
1915	LogFlowFuncLeave();
1916	}
1917
1918
1919	/* updates the arp cache
1920	* @note: this is helper function, slirp_arp_cache_update_or_add should be used.
1921	* @returns 0 - if has found and updated
1922	* 1 - if hasn't found.
1923	*/
1924	static inline int slirp_arp_cache_update(PNATState pData, uint32_t dst, const uint8_t *mac)
1925	{
1926	struct arp_cache_entry *ac;
1927	Assert(( memcmp(mac, broadcast_ethaddr, ETH_ALEN)
1928	&& memcmp(mac, zerro_ethaddr, ETH_ALEN)));
1929	LIST_FOREACH(ac, &pData->arp_cache, list)
1930	{
1931	if (ac->ip == dst)
1932	{
1933	memcpy(ac->ether, mac, ETH_ALEN);
1934	return 0;
1935	}
1936	}
1937	return 1;
1938	}
1939
1940	/**
1941	* add entry to the arp cache
1942	* @note: this is helper function, slirp_arp_cache_update_or_add should be used.
1943	*/
1944	static inline void slirp_arp_cache_add(PNATState pData, uint32_t ip, const uint8_t *ether)
1945	{
1946	struct arp_cache_entry *ac = NULL;
1947	Assert(( memcmp(ether, broadcast_ethaddr, ETH_ALEN)
1948	&& memcmp(ether, zerro_ethaddr, ETH_ALEN)));
1949	ac = RTMemAllocZ(sizeof(struct arp_cache_entry));
1950	if (ac == NULL)
1951	{
1952	Log(("NAT: Can't allocate arp cache entry\n"));
1953	return;
1954	}
1955	ac->ip = ip;
1956	memcpy(ac->ether, ether, ETH_ALEN);
1957	LIST_INSERT_HEAD(&pData->arp_cache, ac, list);
1958	}
1959
1960	/* updates or adds entry to the arp cache
1961	* @returns 0 - if has found and updated
1962	* 1 - if hasn't found.
1963	*/
1964	int slirp_arp_cache_update_or_add(PNATState pData, uint32_t dst, const uint8_t *mac)
1965	{
1966	if ( !memcmp(mac, broadcast_ethaddr, ETH_ALEN)
1967	\|\| !memcmp(mac, zerro_ethaddr, ETH_ALEN))
1968	{
1969	static bool fBroadcastEtherAddReported;
1970	if (!fBroadcastEtherAddReported)
1971	{
1972	LogRel(("NAT: Attempt to add pair [%RTmac:%RTnaipv4] in ARP cache was ignored\n",
1973	mac, dst));
1974	fBroadcastEtherAddReported = true;
1975	}
1976	return 1;
1977	}
1978	if (slirp_arp_cache_update(pData, dst, mac))
1979	slirp_arp_cache_add(pData, dst, mac);
1980
1981	return 0;
1982	}
1983
1984
1985	void slirp_set_mtu(PNATState pData, int mtu)
1986	{
1987	if (mtu < 20 \|\| mtu >= 16000)
1988	{
1989	LogRel(("NAT: MTU(%d) is out of range (20;16000] mtu forcely assigned to 1500\n", mtu));
1990	mtu = 1500;
1991	}
1992	/* MTU is maximum transition unit on */
1993	if_mtu =
1994	if_mru = mtu;
1995	}
1996
1997	/**
1998	* Info handler.
1999	*/
2000	void slirp_info(PNATState pData, const void pvArg, const char pszArgs)
2001	{
2002	struct socket so, so_next;
2003	struct arp_cache_entry *ac;
2004	struct port_forward_rule *rule;
2005	PCDBGFINFOHLP pHlp = (PCDBGFINFOHLP)pvArg;
2006	NOREF(pszArgs);
2007
2008	pHlp->pfnPrintf(pHlp, "NAT parameters: MTU=%d\n", if_mtu);
2009	pHlp->pfnPrintf(pHlp, "NAT TCP ports:\n");
2010	QSOCKET_FOREACH(so, so_next, tcp)
2011	/* { */
2012	pHlp->pfnPrintf(pHlp, " %R[natsock]\n", so);
2013	}
2014
2015	pHlp->pfnPrintf(pHlp, "NAT UDP ports:\n");
2016	QSOCKET_FOREACH(so, so_next, udp)
2017	/* { */
2018	pHlp->pfnPrintf(pHlp, " %R[natsock]\n", so);
2019	}
2020
2021	pHlp->pfnPrintf(pHlp, "NAT ARP cache:\n");
2022	LIST_FOREACH(ac, &pData->arp_cache, list)
2023	{
2024	pHlp->pfnPrintf(pHlp, " %RTnaipv4 %RTmac\n", ac->ip, &ac->ether);
2025	}
2026
2027	pHlp->pfnPrintf(pHlp, "NAT rules:\n");
2028	LIST_FOREACH(rule, &pData->port_forward_rule_head, list)
2029	{
2030	pHlp->pfnPrintf(pHlp, " %s %d => %RTnaipv4:%d %c\n",
2031	rule->proto == IPPROTO_UDP ? "UDP" : "TCP",
2032	rule->host_port, rule->guest_addr.s_addr, rule->guest_port,
2033	rule->activated ? ' ' : '*');
2034	}
2035	}
2036
2037	/**
2038	* @note: NATState::fUseHostResolver could be changed in bootp.c::dhcp_decode
2039	* @note: this function is executed on GUI/VirtualBox or main/VBoxHeadless thread.
2040	* @note: this function can potentially race with bootp.c::dhcp_decode (except Darwin)
2041	*/
2042	int slirp_host_network_configuration_change_strategy_selector(const PNATState pData)
2043	{
2044	if (pData->fUseHostResolverPermanent)
2045	return VBOX_NAT_DNS_HOSTRESOLVER;
2046
2047	if (pData->fUseDnsProxy) {
2048	#if HAVE_NOTIFICATION_FOR_DNS_UPDATE /* XXX */ && !defined(RT_OS_WINDOWS)
2049	/* We dont conflict with bootp.c::dhcp_decode */
2050	struct rcp_state rcp_state;
2051	int rc;
2052
2053	rcp_state.rcps_flags = RCPSF_IGNORE_IPV6;
2054	rc = rcp_parse(&rcp_state, RESOLV_CONF_FILE);
2055	LogRelFunc(("NAT: rcp_parse:%Rrc old domain:%s new domain:%s\n",
2056	rc, LIST_EMPTY(&pData->pDomainList)
2057	? "(null)"
2058	: LIST_FIRST(&pData->pDomainList)->dd_pszDomain,
2059	rcp_state.rcps_domain));
2060	if ( RT_FAILURE(rc)
2061	\|\| LIST_EMPTY(&pData->pDomainList))
2062	return VBOX_NAT_DNS_DNSPROXY;
2063
2064	if ( rcp_state.rcps_domain
2065	&& strcmp(rcp_state.rcps_domain, LIST_FIRST(&pData->pDomainList)->dd_pszDomain) == 0)
2066	return VBOX_NAT_DNS_DNSPROXY;
2067	else
2068	return VBOX_NAT_DNS_EXTERNAL;
2069	#else
2070	/* copy domain name */
2071	/* domain only compare with coy version */
2072	return VBOX_NAT_DNS_DNSPROXY;
2073	#endif
2074	}
2075	return VBOX_NAT_DNS_EXTERNAL;
2076	}

Note: See TracBrowser for help on using the repository browser.

source: vbox/trunk/src/VBox/Devices/Network/slirp/slirp.c@ 93115

Download in other formats: