1
2 /*
3 * lib/krb5/os/genaddrs.c
4 *
5 * Copyright 1995 by the Massachusetts Institute of Technology.
6 * All Rights Reserved.
7 *
8 * Export of this software from the United States of America may
9 * require a specific license from the United States Government.
10 * It is the responsibility of any person or organization contemplating
11 * export to obtain such a license before exporting.
12 *
13 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
14 * distribute this software and its documentation for any purpose and
15 * without fee is hereby granted, provided that the above copyright
16 * notice appear in all copies and that both that copyright notice and
17 * this permission notice appear in supporting documentation, and that
18 * the name of M.I.T. not be used in advertising or publicity pertaining
19 * to distribution of the software without specific, written prior
20 * permission. Furthermore if you modify this software you must label
21 * your software as modified software and not distribute it in such a
22 * fashion that it might be confused with the original M.I.T. software.
23 * M.I.T. makes no representations about the suitability of
24 * this software for any purpose. It is provided "as is" without express
25 * or implied warranty.
26 *
27 *
28 * Take an IP addr & port and generate a full IP address.
29 */
30
31 #include "k5-int.h"
32 #include "os-proto.h"
33
34 #if !defined(_WINSOCKAPI_)
35 #include <netinet/in.h>
36 #endif
37
38 /* Solaris Kerberos */
39 #include <inet/ip.h>
40 #include <inet/ip6.h>
41
42 struct addrpair {
43 krb5_address addr, port;
44 };
45
46 #define SET(TARG, THING, TYPE) \
47 ((TARG).contents = (krb5_octet *) &(THING), \
48 (TARG).length = sizeof (THING), \
49 (TARG).addrtype = (TYPE))
50
cvtaddr(struct sockaddr_storage * a,struct addrpair * ap)51 static void *cvtaddr (struct sockaddr_storage *a, struct addrpair *ap)
52 {
53 switch (ss2sa(a)->sa_family) {
54 case AF_INET:
55 SET (ap->port, ss2sin(a)->sin_port, ADDRTYPE_IPPORT);
56 SET (ap->addr, ss2sin(a)->sin_addr, ADDRTYPE_INET);
57 return a;
58 #ifdef KRB5_USE_INET6
59 case AF_INET6:
60 SET (ap->port, ss2sin6(a)->sin6_port, ADDRTYPE_IPPORT);
61 if (IN6_IS_ADDR_V4MAPPED (&ss2sin6(a)->sin6_addr)) {
62 ap->addr.addrtype = ADDRTYPE_INET;
63 /* Solaris Kerberos */
64 ap->addr.contents = (IPV6_ADDR_LEN - IPV4_ADDR_LEN) +
65 (krb5_octet *) &ss2sin6(a)->sin6_addr;
66 ap->addr.length = IPV4_ADDR_LEN;
67 } else
68 SET (ap->addr, ss2sin6(a)->sin6_addr, ADDRTYPE_INET6);
69 return a;
70 #endif
71 default:
72 return 0;
73 }
74 }
75
76 krb5_error_code KRB5_CALLCONV
krb5_auth_con_genaddrs(krb5_context context,krb5_auth_context auth_context,int infd,int flags)77 krb5_auth_con_genaddrs(krb5_context context, krb5_auth_context auth_context, int infd, int flags)
78 {
79 krb5_error_code retval;
80 krb5_address * laddr;
81 krb5_address * lport;
82 krb5_address * raddr;
83 krb5_address * rport;
84 SOCKET fd = (SOCKET) infd;
85 struct addrpair laddrs, raddrs;
86
87 #ifdef HAVE_NETINET_IN_H
88 struct sockaddr_storage lsaddr, rsaddr;
89 GETSOCKNAME_ARG3_TYPE ssize;
90
91 ssize = sizeof(struct sockaddr_storage);
92 if ((flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR) ||
93 (flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR)) {
94 if ((retval = getsockname(fd, (GETSOCKNAME_ARG2_TYPE *) &lsaddr,
95 &ssize)))
96 return retval;
97
98 if (cvtaddr (&lsaddr, &laddrs)) {
99 laddr = &laddrs.addr;
100 if (flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR)
101 lport = &laddrs.port;
102 else
103 lport = 0;
104 } else
105 return KRB5_PROG_ATYPE_NOSUPP;
106 } else {
107 laddr = NULL;
108 lport = NULL;
109 }
110
111 ssize = sizeof(struct sockaddr_storage);
112 if ((flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR) ||
113 (flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR)) {
114 if ((retval = getpeername(fd, (GETPEERNAME_ARG2_TYPE *) &rsaddr,
115 &ssize)))
116 return errno;
117
118 if (cvtaddr (&rsaddr, &raddrs)) {
119 raddr = &raddrs.addr;
120 if (flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR)
121 rport = &raddrs.port;
122 else
123 rport = 0;
124 } else
125 return KRB5_PROG_ATYPE_NOSUPP;
126 } else {
127 raddr = NULL;
128 rport = NULL;
129 }
130
131 if (!(retval = krb5_auth_con_setaddrs(context, auth_context, laddr, raddr)))
132 return (krb5_auth_con_setports(context, auth_context, lport, rport));
133 return retval;
134 #else
135 return KRB5_PROG_ATYPE_NOSUPP;
136 #endif
137 }
138