libinetsvc/common/inetsvc.c

/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */

#pragma ident	"%Z%%M%	%I%	%E% SMI"

/*
 * This library contains a set of routines that are shared amongst inetd,
 * inetadm, inetconv and the formerly internal inetd services. Amongst the
 * routines are ones for reading and validating the configuration of an
 * inetd service, a routine for requesting inetd be refreshed, ones for
 * reading, calculating and writing the hash of an inetd.conf file, and
 * numerous utility routines shared amongst the formerly internal inetd
 * services.
 */


#include <string.h>
#include <rpc/rpcent.h>
#include <netdb.h>
#include <limits.h>
#include <errno.h>
#include <inetsvc.h>
#include <stdlib.h>
#include <unistd.h>
#include <nss_dbdefs.h>
#include <stdio.h>
#include <fcntl.h>
#include <pwd.h>
#include <md5.h>
#include <arpa/inet.h>
#include <netinet/in.h>
#include <signal.h>
#include <syslog.h>
#include <libintl.h>
#include <stdlib.h>
#include <assert.h>
#include <rpc/nettype.h>
#include <libuutil.h>

static inetd_prop_t inetd_properties[] = {
	{PR_SVC_NAME_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_ASTRING,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_SOCK_TYPE_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_ASTRING,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_PROTO_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_ASTRING,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_ISRPC_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_BOOLEAN,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_RPC_LW_VER_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_RPC_HI_VER_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_ISWAIT_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_BOOLEAN,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_EXEC_NAME, START_METHOD_NAME, SCF_TYPE_ASTRING,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_ARG0_NAME, START_METHOD_NAME, SCF_TYPE_ASTRING,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_USER_NAME, START_METHOD_NAME, SCF_TYPE_ASTRING,
	    B_FALSE, IVE_UNSET, NULL, B_FALSE},
	{PR_BIND_ADDR_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_ASTRING,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_BIND_FAIL_MAX_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_BIND_FAIL_INTVL_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_CON_RATE_MAX_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_MAX_COPIES_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_CON_RATE_OFFLINE_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_MAX_FAIL_RATE_CNT_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_MAX_FAIL_RATE_INTVL_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_INTEGER,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_INHERIT_ENV_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_BOOLEAN,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_DO_TCP_TRACE_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_BOOLEAN,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE},
	{PR_DO_TCP_WRAPPERS_NAME, PG_NAME_SERVICE_CONFIG, SCF_TYPE_BOOLEAN,
	    B_TRUE, IVE_UNSET, NULL, B_FALSE}
};

#define	INETD_NUMPROPS (sizeof (inetd_properties) / sizeof (inetd_prop_t))

#define	INETSVC_SVC_BUF_MAX (NSS_BUFLEN_RPC + sizeof (struct rpcent))

#define	DIGEST_LEN	16
#define	READ_BUFSIZ	8192
#define	HASH_PG		"hash"
#define	HASH_PROP	"md5sum"

/*
 * Inactivity timer used by dg_template(). After this many seconds of network
 * inactivity dg_template will cease listening for new datagrams and return.
 */
#define	DG_INACTIVITY_TIMEOUT	60

static boolean_t v6_proto(const char *);

boolean_t
is_tlx_service(inetd_prop_t *props)
{
	return ((strcmp(SOCKTYPE_TLI_STR,
	    props[PT_SOCK_TYPE_INDEX].ip_value.iv_astring) == 0) ||
	    (strcmp(SOCKTYPE_XTI_STR,
	    props[PT_SOCK_TYPE_INDEX].ip_value.iv_astring) == 0));
}

/*
 * Return a reference to the property table. Number of entries in table
 * are returned in num_elements argument.
 */
inetd_prop_t *
get_prop_table(size_t *num_elements)
{
	*num_elements = INETD_NUMPROPS;
	return (&inetd_properties[0]);
}

/*
 * get_prop_value takes an array of inetd_prop_t's and a name of an inetd
 * property, and returns a pointer to the value of the requested property.
 */

void *
get_prop_value(const inetd_prop_t *prop, char *name)
{
	int		i;

	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (strcmp(name, prop[i].ip_name) != 0)
			continue;
		if (prop[i].ip_type == SCF_TYPE_ASTRING) {
			if (i == PT_PROTO_INDEX) {
				return ((void *)
				    prop[i].ip_value.iv_proto_list);
			} else {
				return ((void *) prop[i].ip_value.iv_astring);
			}
		} else {
			return ((void *) &prop[i].ip_value);
		}
	}

	return (NULL);
}

/*
 * put_prop_value takes an array of inetd_prop_t's, a name of an inetd
 * property, and a pointer to a value.  It copies the value into the property
 * in the array, and returns 0 for success and -1 for failure.
 */

int
put_prop_value(inetd_prop_t *prop, char *name, void *value)
{
	int		i;

	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (strcmp(name, prop[i].ip_name) != 0)
			continue;
		switch (prop[i].ip_type) {
		case SCF_TYPE_INTEGER:
			prop[i].ip_value.iv_int = *((int64_t *)value);
			prop[i].ip_error = IVE_VALID;
			return (0);
		case SCF_TYPE_BOOLEAN:
			prop[i].ip_value.iv_boolean =
			    *((boolean_t *)value);
			prop[i].ip_error = IVE_VALID;
			return (0);
		case SCF_TYPE_ASTRING:
			if (i == PT_PROTO_INDEX) {
				if ((prop[i].ip_value.iv_proto_list =
				    get_protos((char *)value)) == NULL)
					return (-1);
			} else {
				if (strlen((char *)value) >=
				    scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH)) {
					errno = E2BIG;
					return (-1);
				}
				if ((prop[i].ip_value.iv_astring =
				    strdup((char *)value)) == NULL)
					return (-1);
			}
			prop[i].ip_error = IVE_VALID;
			return (0);
		}
	}

	return (-1);
}

static void
destroy_rpc_info(rpc_info_t *rpc)
{
	if (rpc != NULL) {
		free(rpc->netbuf.buf);
		free(rpc->netid);
		free(rpc);
	}
}

/*
 * If 'proto' is a valid netid,  and no memory allocations fail, returns a
 * pointer to an allocated and initialized rpc_info_t, else NULL.
 */
static rpc_info_t *
create_rpc_info(const char *proto, int pnum, int low_ver, int high_ver)
{
	struct netconfig	*nconf;
	rpc_info_t		*ret;

	if ((ret = calloc(1, sizeof (rpc_info_t))) == NULL)
		return (NULL);

	ret->netbuf.maxlen = sizeof (struct sockaddr_storage);
	if ((ret->netbuf.buf = malloc(ret->netbuf.maxlen)) == NULL) {
		free(ret);
		return (NULL);
	}

	ret->prognum = pnum;
	ret->lowver = low_ver;
	ret->highver = high_ver;

	if ((ret->netid = strdup(proto)) == NULL) {
		destroy_rpc_info(ret);
		return (NULL);
	}

	/*
	 * Determine whether this is a loopback transport. If getnetconfigent()
	 * fails, we check to see whether it was the result of a v6 proto
	 * being specified and no IPv6 interface was configured on the system;
	 * if this holds, we know it must not be a loopback transport, else
	 * getnetconfigent() must be miss-behaving, so return an error.
	 */
	if ((nconf = getnetconfigent(proto)) != NULL) {
		if (strcmp(nconf->nc_protofmly, NC_LOOPBACK) == 0)
			ret->is_loopback = B_TRUE;
		freenetconfigent(nconf);
	} else if (!v6_proto(proto)) {
		destroy_rpc_info(ret);
		return (NULL);
	}

	return (ret);
}

void
destroy_tlx_info(tlx_info_t *tlx)
{
	tlx_conn_ind_t  *ci;
	void		*cookie = NULL;

	if (tlx == NULL)
		return;

	free(tlx->dev_name);

	if (tlx->conn_ind_queue != NULL) {
		/* free up conn ind queue */
		while ((ci = uu_list_teardown(tlx->conn_ind_queue, &cookie)) !=
		    NULL) {
			(void) t_free((char *)ci->call, T_CALL);
			free(ci);
		}
		uu_list_destroy(tlx->conn_ind_queue);
	}

	free(tlx->local_addr.buf);
	free(tlx);
}

/*
 * Allocate, initialize and return a pointer to a tlx_info_t structure.
 * On memory allocation failure NULL is returned.
 */
static tlx_info_t *
create_tlx_info(const char *proto, uu_list_pool_t *conn_ind_pool)
{
	size_t			sz;
	tlx_info_t		*ret;

	if ((ret = calloc(1, sizeof (tlx_info_t))) == NULL)
		return (NULL);

	ret->local_addr.maxlen = sizeof (struct sockaddr_storage);
	if ((ret->local_addr.buf = calloc(1, ret->local_addr.maxlen)) == NULL)
		goto fail;

	if ((ret->conn_ind_queue = uu_list_create(conn_ind_pool, NULL, 0)) ==
	    NULL)
		goto fail;

	ret->local_addr.len = sizeof (struct sockaddr_in);
	/* LINTED E_BAD_PTR_CAST_ALIGN */
	((struct sockaddr_in *)(ret->local_addr.buf))->sin_family = AF_INET;
	/* LINTED E_BAD_PTR_CAST_ALIGN */
	((struct sockaddr_in *)(ret->local_addr.buf))->sin_addr.s_addr =
	    htonl(INADDR_ANY);

	/* store device name, constructing if necessary */
	if (proto[0] != '/') {
		sz = strlen("/dev/") + strlen(proto) + 1;
		if ((ret->dev_name = malloc(sz)) == NULL)
			goto fail;
		(void) snprintf(ret->dev_name, sz, "/dev/%s", proto);
	} else if ((ret->dev_name = strdup(proto)) == NULL) {
			goto fail;
	}

	return (ret);

fail:
	destroy_tlx_info(ret);
	return (NULL);
}

/*
 * Returns B_TRUE if this is a v6 protocol valid for both TLI and socket
 * based services, else B_FALSE.
 */
static boolean_t
v6_proto(const char *proto)
{
	return ((strcmp(proto, SOCKET_PROTO_TCP6) == 0) ||
	    (strcmp(proto, SOCKET_PROTO_UDP6) == 0));
}

/*
 * Returns B_TRUE if this is a valid v6 protocol for a socket based service,
 * else B_FALSE.
 */
static boolean_t
v6_socket_proto(const char *proto)
{
	return ((strcmp(proto, SOCKET_PROTO_SCTP6) == 0) ||
	    v6_proto(proto));

}

static boolean_t
valid_socket_proto(const char *proto)
{
	return (v6_socket_proto(proto) ||
	    (strcmp(proto, SOCKET_PROTO_SCTP) == 0) ||
	    (strcmp(proto, SOCKET_PROTO_TCP) == 0) ||
	    (strcmp(proto, SOCKET_PROTO_UDP) == 0));
}

/*
 * Free all the memory consumed by 'pi' associated with the instance
 * with configuration 'cfg'.
 */
static void
destroy_proto_info(basic_cfg_t *cfg, proto_info_t *pi)
{
	if (pi == NULL)
		return;

	assert(pi->listen_fd == -1);

	free(pi->proto);
	if (pi->ri != NULL)
		destroy_rpc_info(pi->ri);
	if (cfg->istlx) {
		destroy_tlx_info((tlx_info_t *)pi);
	} else {
		free(pi);
	}
}

void
destroy_proto_list(basic_cfg_t *cfg)
{
	void		*cookie = NULL;
	proto_info_t	*pi;

	if (cfg->proto_list == NULL)
		return;

	while ((pi = uu_list_teardown(cfg->proto_list, &cookie)) != NULL)
		destroy_proto_info(cfg, pi);
	uu_list_destroy(cfg->proto_list);
	cfg->proto_list = NULL;
}

void
destroy_basic_cfg(basic_cfg_t *cfg)
{
	if (cfg == NULL)
		return;

	free(cfg->bind_addr);
	destroy_proto_list(cfg);
	free(cfg->svc_name);
	free(cfg);
}

/*
 * valid_props validates all the properties in an array of inetd_prop_t's,
 * marking each property as valid or invalid.  If any properties are invalid,
 * it returns B_FALSE, otherwise it returns B_TRUE.  Note that some properties
 * are interdependent, so if one is invalid, it leaves others in an
 * indeterminate state (such as ISRPC and SVC_NAME).  In this case, the
 * indeterminate property will be marked valid.  IE, the only properties
 * marked invalid are those that are KNOWN to be invalid.
 *
 * Piggy-backed onto this validation if 'fmri' is non-NULL is the construction
 * of a structured configuration, a basic_cfg_t,  which is used by inetd.
 * If 'fmri' is set then the latter three parameters need to be set to
 * non-NULL values, and if the configuration is valid, the storage referenced
 * by cfgpp is set to point at an initialized basic_cfg_t.
 */
boolean_t
valid_props(inetd_prop_t *prop, const char *fmri, basic_cfg_t **cfgpp,
    uu_list_pool_t *proto_info_pool, uu_list_pool_t *tlx_ci_pool)
{
	char			*bufp, *cp;
	boolean_t		ret = B_TRUE;
	int			i;
	long			uidl;
	boolean_t		isrpc;
	int			sock_type_id;
	int			rpc_pnum;
	int			rpc_lv, rpc_hv;
	basic_cfg_t		*cfg;
	char			*proto = NULL;
	int			pi;
	char			**netids = NULL;
	int			ni = 0;

	if (fmri != NULL)
		assert((cfgpp != NULL) && (proto_info_pool != NULL) &&
		    (tlx_ci_pool != NULL));

	/*
	 * Set all checkable properties to valid as a baseline.  We'll be
	 * marking all invalid properties.
	 */
	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (prop[i].ip_error != IVE_UNSET)
			prop[i].ip_error = IVE_VALID;
	}

	if (((cfg = calloc(1, sizeof (basic_cfg_t))) == NULL) ||
	    ((fmri != NULL) &&
	    ((cfg->proto_list = uu_list_create(proto_info_pool, NULL, 0)) ==
	    NULL))) {
		free(cfg);
		return (B_FALSE);
	}

	/* Check a service name was supplied */
	if ((prop[PT_SVC_NAME_INDEX].ip_error == IVE_UNSET) ||
	    ((cfg->svc_name =
	    strdup(prop[PT_SVC_NAME_INDEX].ip_value.iv_astring)) == NULL))
		prop[PT_SVC_NAME_INDEX].ip_error = IVE_INVALID;

	/* Check that iswait and isrpc have valid boolean values */

	if ((prop[PT_ISWAIT_INDEX].ip_error == IVE_UNSET) ||
	    (((cfg->iswait = prop[PT_ISWAIT_INDEX].ip_value.iv_boolean) !=
	    B_TRUE) && (cfg->iswait != B_FALSE)))
		prop[PT_ISWAIT_INDEX].ip_error = IVE_INVALID;

	if ((prop[PT_ISRPC_INDEX].ip_error == IVE_UNSET) ||
	    (((isrpc = prop[PT_ISRPC_INDEX].ip_value.iv_boolean) != B_TRUE) &&
	    (isrpc != B_FALSE))) {
		prop[PT_ISRPC_INDEX].ip_error = IVE_INVALID;
	} else if (isrpc) {
		/*
		 * This is an RPC service, so ensure that the RPC version
		 * numbers are zero or greater, that the low version isn't
		 * greater than the high version and a valid program name
		 * is supplied.
		 */

		if ((prop[PT_RPC_LW_VER_INDEX].ip_error == IVE_UNSET) ||
		    ((rpc_lv = prop[PT_RPC_LW_VER_INDEX].ip_value.iv_int) <
		    0))
			prop[PT_RPC_LW_VER_INDEX].ip_error = IVE_INVALID;

		if ((prop[PT_RPC_HI_VER_INDEX].ip_error == IVE_UNSET) ||
		    ((rpc_hv = prop[PT_RPC_HI_VER_INDEX].ip_value.iv_int) <
		    0))
			prop[PT_RPC_HI_VER_INDEX].ip_error = IVE_INVALID;

		if ((prop[PT_RPC_LW_VER_INDEX].ip_error != IVE_INVALID) &&
		    (prop[PT_RPC_HI_VER_INDEX].ip_error != IVE_INVALID) &&
		    (rpc_lv > rpc_hv)) {
			prop[PT_RPC_LW_VER_INDEX].ip_error = IVE_INVALID;
			prop[PT_RPC_HI_VER_INDEX].ip_error = IVE_INVALID;
		}

		if ((cfg->svc_name != NULL) &&
		    ((rpc_pnum = get_rpc_prognum(cfg->svc_name)) == -1))
			prop[PT_SVC_NAME_INDEX].ip_error = IVE_INVALID;
	}

	/* Check that the socket type is one of the acceptable values. */

	cfg->istlx = B_FALSE;
	if ((prop[PT_SOCK_TYPE_INDEX].ip_error == IVE_UNSET) ||
	    ((sock_type_id = get_sock_type_id(
	    prop[PT_SOCK_TYPE_INDEX].ip_value.iv_astring)) == -1) &&
	    !(cfg->istlx = is_tlx_service(prop)))
		prop[PT_SOCK_TYPE_INDEX].ip_error = IVE_INVALID;

	/*
	 * Iterate through all the different protos/netids resulting from the
	 * proto property and check that they're valid and perform checks on
	 * other fields that are tied-in with the proto.
	 */

	pi = 0;
	do {
		socket_info_t		*si = NULL;
		tlx_info_t		*ti = NULL;
		proto_info_t		*p_inf = NULL;
		boolean_t		v6only = B_FALSE;
		char			*only;
		boolean_t		invalid_proto = B_FALSE;
		char			**protos;
		struct protoent		pe;
		char			gpbuf[1024];
		struct netconfig	*nconf = NULL;

		/*
		 * If we don't know whether it's an rpc service or its
		 * endpoint type, we can't do any of the proto checks as we
		 * have no context; break out.
		 */
		if ((prop[PT_ISRPC_INDEX].ip_error != IVE_VALID) ||
		    (prop[PT_SOCK_TYPE_INDEX].ip_error != IVE_VALID))
			break;

		/* skip proto specific processing if the proto isn't set. */
		if (prop[PT_PROTO_INDEX].ip_error == IVE_UNSET) {
			invalid_proto = B_TRUE;
			goto past_proto_processing;
		}
		protos = prop[PT_PROTO_INDEX].ip_value.iv_proto_list;

		/*
		 * Get the next netid/proto.
		 */

		if (!cfg->istlx || !isrpc) {
			proto = protos[pi++];
		/*
		 * This is a TLI/RPC service, so get the next netid, expanding
		 * any supplied nettype.
		 */
		} else if ((netids == NULL) ||
		    ((proto = netids[ni++]) == NULL)) {
			/*
			 * Either this is the first time around or
			 * we've exhausted the last set of netids, so
			 * try and get the next set using the currently
			 * indexed proto entry.
			 */

			if (netids != NULL) {
				destroy_strings(netids);
				netids = NULL;
			}

			if (protos[pi] != NULL) {
				if ((netids = get_netids(protos[pi++])) ==
				    NULL) {
					invalid_proto = B_TRUE;
					proto = protos[pi - 1];
				} else {
					ni = 0;
					proto = netids[ni++];
				}
			} else {
				proto = NULL;
			}
		}

		if (invalid_proto || (proto == NULL))
			goto past_proto_processing;

		/* strip a trailing only to simplify further processing */
		only = proto + strlen(proto) - (sizeof ("6only") - 1);
		if ((only > proto) && (strcmp(only, "6only") == 0)) {
			*++only = '\0';
			v6only = B_TRUE;
		}

		/* validate the proto/netid */

		if (!cfg->istlx) {
			if (!valid_socket_proto(proto))
				invalid_proto = B_TRUE;
		} else {
			/*
			 * Check if we've got a valid netid. If
			 * getnetconfigent() fails, we check to see whether
			 * we've got a v6 netid that may have been rejected
			 * because no IPv6 interface was configured before
			 * flagging 'proto' as invalid. If the latter condition
			 * holds, we don't flag the proto as invalid, and
			 * leave inetd to handle the value appropriately
			 * when it tries to listen on behalf of the service.
			 */
			if (((nconf = getnetconfigent(proto)) == NULL) &&
			    !v6_proto(proto))
				invalid_proto = B_TRUE;
		}
		if (invalid_proto)
			goto past_proto_processing;

		/*
		 * dissallow datagram type nowait services
		 */
		if ((prop[PT_ISWAIT_INDEX].ip_error == IVE_VALID) &&
		    !cfg->iswait) {
			if (strncmp(proto, SOCKET_PROTO_UDP,
			    sizeof (SOCKET_PROTO_UDP) - 1) == 0) {
				invalid_proto = B_TRUE;
			} else if (cfg->istlx && (nconf != NULL) &&
				(nconf->nc_semantics == NC_TPI_CLTS)) {
					invalid_proto = B_TRUE;
			}
			if (invalid_proto) {
				prop[PT_ISWAIT_INDEX].ip_error = IVE_INVALID;
				goto past_proto_processing;
			}
		}

		/*
		 * We're running in validate only mode. Don't bother creating
		 * any proto structures (they don't do any further validation).
		 */
		if (fmri == NULL)
			goto past_proto_processing;

		/*
		 * Create the apropriate transport info structure.
		 */
		if (cfg->istlx) {
			if ((ti = create_tlx_info(proto, tlx_ci_pool)) != NULL)
				p_inf = (proto_info_t *)ti;
		} else {
			struct sockaddr_storage *ss;

			if ((si = calloc(1, sizeof (socket_info_t))) != NULL) {
				p_inf = (proto_info_t *)si;
				si->type = sock_type_id;
				ss = &si->local_addr;

				if (v6_socket_proto(proto)) {
					ss->ss_family = AF_INET6;
					/* already in network order */
					((struct sockaddr_in6 *)ss)->sin6_addr =
					    in6addr_any;
				} else {
					ss->ss_family = AF_INET;
					((struct sockaddr_in *)ss)->sin_addr.
					    s_addr = htonl(INADDR_ANY);
				}
			}
		}
		if (p_inf == NULL) {
			invalid_proto = B_TRUE;
			goto past_proto_processing;
		}

		p_inf->v6only = v6only;

		/*
		 * Store the supplied proto string for error reporting,
		 * re-attaching the 'only' suffix if one was taken off.
		 */
		if ((p_inf->proto = malloc(strlen(proto) + 5)) == NULL) {
			invalid_proto = B_TRUE;
			goto past_proto_processing;
		} else {
			(void) strlcpy(p_inf->proto, proto, strlen(proto) + 5);
			if (v6only)
				(void) strlcat(p_inf->proto, "only",
				    strlen(proto) + 5);
		}

		/*
		 * Validate and setup RPC/non-RPC specifics.
		 */

		if (isrpc) {
			rpc_info_t *ri;

			if ((rpc_pnum != -1) && (rpc_lv != -1) &&
			    (rpc_hv != -1)) {
				if ((ri = create_rpc_info(proto, rpc_pnum,
				    rpc_lv, rpc_hv)) == NULL) {
					invalid_proto = B_TRUE;
				} else {
					p_inf->ri = ri;
				}
			}
		}

past_proto_processing:
		/* validate non-RPC service name */
		if (!isrpc && (cfg->svc_name != NULL)) {
			struct servent	se;
			char		gsbuf[NSS_BUFLEN_SERVICES];
			char		*gsproto = proto;

			if (invalid_proto) {
				/*
				 * Make getservbyname_r do its lookup without a
				 * proto.
				 */
				gsproto = NULL;
			} else if (gsproto != NULL) {
				/*
				 * Since getservbyname & getprotobyname don't
				 * support tcp6, udp6 or sctp6 take off the 6
				 * digit from protocol.
				 */
				if (v6_socket_proto(gsproto))
					gsproto[strlen(gsproto) - 1] = '\0';
			}

			if (getservbyname_r(cfg->svc_name, gsproto, &se, gsbuf,
			    sizeof (gsbuf)) == NULL) {
				if (gsproto != NULL)
					invalid_proto = B_TRUE;
				prop[PT_SVC_NAME_INDEX].ip_error = IVE_INVALID;
			} else if (cfg->istlx && (ti != NULL)) {
				/* LINTED E_BAD_PTR_CAST_ALIGN */
				SS_SETPORT(*(struct sockaddr_storage *)
				    ti->local_addr.buf, se.s_port);
			} else if (!cfg->istlx && (si != NULL)) {
				if ((gsproto != NULL) &&
				    getprotobyname_r(gsproto, &pe, gpbuf,
				    sizeof (gpbuf)) == NULL) {
					invalid_proto = B_TRUE;
				} else {
					si->protocol = pe.p_proto;
				}
				SS_SETPORT(si->local_addr, se.s_port);
			}

		}

		if (p_inf != NULL) {
			p_inf->listen_fd = -1;

			/* add new proto entry to proto_list */
			uu_list_node_init(p_inf, &p_inf->link, proto_info_pool);
			(void) uu_list_insert_after(cfg->proto_list, NULL,
			    p_inf);
		}

		if (nconf != NULL)
			freenetconfigent(nconf);
		if (invalid_proto)
			prop[PT_PROTO_INDEX].ip_error = IVE_INVALID;
	} while (proto != NULL);	/* while just processed a proto */

	/*
	 * Check that the exec string for the start method actually exists and
	 * that the user is either a valid username or uid. Note we don't
	 * mandate the setting of these fields, and don't do any checks
	 * for arg0, hence its absence.
	 */

	if (prop[PT_EXEC_INDEX].ip_error != IVE_UNSET) {
		/* Don't pass any arguments to access() */
		if ((bufp = strdup(
		    prop[PT_EXEC_INDEX].ip_value.iv_astring)) == NULL) {
			prop[PT_EXEC_INDEX].ip_error = IVE_INVALID;
		} else {
			if ((cp = strpbrk(bufp, " \t")) != NULL)
				*cp = '\0';

			if ((access(bufp, F_OK) == -1) && (errno == ENOENT))
				prop[PT_EXEC_INDEX].ip_error = IVE_INVALID;
			free(bufp);
		}
	}

	if (prop[PT_USER_INDEX].ip_error != IVE_UNSET) {
		char		pw_buf[NSS_BUFLEN_PASSWD];
		struct passwd	pw;

		if (getpwnam_r(prop[PT_USER_INDEX].ip_value.iv_astring, &pw,
		    pw_buf, NSS_BUFLEN_PASSWD) == NULL) {
			errno = 0;
			uidl = strtol(prop[PT_USER_INDEX].ip_value.iv_astring,
			    &bufp, 10);
			if ((errno != 0) || (*bufp != '\0') ||
			    (getpwuid_r(uidl, &pw, pw_buf,
			    NSS_BUFLEN_PASSWD) == NULL))
				prop[PT_USER_INDEX].ip_error = IVE_INVALID;
		}
	}

	/*
	 * Iterate through the properties in the array verifying that any
	 * default properties are valid, and setting the return boolean
	 * according to whether any properties were marked invalid.
	 */

	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (prop[i].ip_error == IVE_UNSET)
			continue;

		if (prop[i].ip_default &&
		    !valid_default_prop(prop[i].ip_name, &prop[i].ip_value))
			prop[i].ip_error = IVE_INVALID;

		if (prop[i].ip_error == IVE_INVALID)
			ret = B_FALSE;
	}

	/* pass back the basic_cfg_t if requested and it's a valid config */
	if ((cfgpp != NULL) && ret) {
		*cfgpp = cfg;
	} else {
		destroy_basic_cfg(cfg);
	}

	return (ret);
}

/*
 * validate_default_prop takes the name of an inetd property, and a value
 * for that property.  It returns B_TRUE if the property is valid, and B_FALSE
 * if the proposed value isn't valid for that property.
 */

boolean_t
valid_default_prop(char *name, void *value)
{
	int		i;

	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (strcmp(name, inetd_properties[i].ip_name) != 0)
			continue;
		if (!inetd_properties[i].ip_default)
			return (B_FALSE);

		switch (inetd_properties[i].ip_type) {
		case SCF_TYPE_INTEGER:
			if (*((int64_t *)value) >= -1)
				return (B_TRUE);
			else
				return (B_FALSE);
		case SCF_TYPE_BOOLEAN:
			if ((*((boolean_t *)value) == B_FALSE) ||
			    (*((boolean_t *)value) == B_TRUE))
				return (B_TRUE);
			else
				return (B_FALSE);
		case SCF_TYPE_ASTRING:
			return (B_TRUE);
		}
	}

	return (B_FALSE);
}

scf_error_t
read_prop(scf_handle_t *h, inetd_prop_t *iprop, int index, const char *inst,
    const char *pg_name)
{
	scf_simple_prop_t	*sprop;
	uint8_t			*tmp_bool;
	int64_t			*tmp_int;
	uint64_t		*tmp_cnt;
	char			*tmp_char;

	if ((sprop = scf_simple_prop_get(h, inst, pg_name, iprop->ip_name)) ==
	    NULL)
		return (scf_error());

	switch (iprop->ip_type) {
	case SCF_TYPE_ASTRING:
		if (index == PT_PROTO_INDEX) {
			int	j = 0;

			while ((tmp_char =
			    scf_simple_prop_next_astring(sprop)) != NULL) {
				char	**cpp;

				if ((cpp = realloc(
				    iprop->ip_value.iv_proto_list,
				    (j + 2) * sizeof (char *))) == NULL) {
					scf_simple_prop_free(sprop);
					return (SCF_ERROR_NO_MEMORY);
				}
				iprop->ip_value.iv_proto_list = cpp;
				if ((cpp[j] = strdup(tmp_char)) == NULL) {
					scf_simple_prop_free(sprop);
					return (SCF_ERROR_NO_MEMORY);
				}
				cpp[++j] = NULL;
			}
			if ((j == 0) || (scf_error() != SCF_ERROR_NONE))
				goto scf_error;
		} else {
			if ((tmp_char = scf_simple_prop_next_astring(sprop)) ==
			    NULL)
				goto scf_error;
			if ((iprop->ip_value.iv_astring = strdup(tmp_char)) ==
			    NULL) {
				scf_simple_prop_free(sprop);
				return (SCF_ERROR_NO_MEMORY);
			}
		}
		break;
	case SCF_TYPE_BOOLEAN:
		if ((tmp_bool = scf_simple_prop_next_boolean(sprop)) == NULL)
			goto scf_error;
		iprop->ip_value.iv_boolean =
		    (*tmp_bool == 0) ? B_FALSE : B_TRUE;
		break;
	case SCF_TYPE_COUNT:
		if ((tmp_cnt = scf_simple_prop_next_count(sprop)) == NULL)
			goto scf_error;
		iprop->ip_value.iv_cnt = *tmp_cnt;
		break;
	case SCF_TYPE_INTEGER:
		if ((tmp_int = scf_simple_prop_next_integer(sprop)) == NULL)
			goto scf_error;
		iprop->ip_value.iv_int = *tmp_int;
		break;
	default:
		assert(0);
	}

	iprop->ip_error = IVE_VALID;
	scf_simple_prop_free(sprop);
	return (0);

scf_error:
	scf_simple_prop_free(sprop);
	if (scf_error() == SCF_ERROR_NONE)
		return (SCF_ERROR_NOT_FOUND);
	return (scf_error());
}

/*
 * read_props reads either the full set of properties for instance 'instance'
 * (including defaults - pulling them in from inetd where necessary) if
 * 'instance' is non-null, else just the defaults from inetd. The properties
 * are returned in an allocated inetd_prop_t array, which must be freed
 * using free_instance_props(). If an error occurs NULL is returned and 'err'
 * is set to indicate the cause, else a pointer to the read properties is
 * returned.
 */
static inetd_prop_t *
read_props(scf_handle_t *h, const char *instance, size_t *num_elements,
    scf_error_t *err)
{
	inetd_prop_t	*ret = NULL;
	int		i;
	boolean_t	defaults_only = (instance == NULL);

	if ((ret = malloc(sizeof (inetd_properties))) == NULL) {
		*err = SCF_ERROR_NO_MEMORY;
		return (NULL);
	}
	(void) memcpy(ret, &inetd_properties, sizeof (inetd_properties));

	if (defaults_only)
		instance = INETD_INSTANCE_FMRI;
	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (defaults_only && !ret[i].ip_default)
			continue;

		switch (*err = read_prop(h, &ret[i], i, instance,
		    defaults_only ? PG_NAME_SERVICE_DEFAULTS : ret[i].ip_pg)) {
		case 0:
			break;
		case SCF_ERROR_INVALID_ARGUMENT:
			goto failure_cleanup;
		case SCF_ERROR_NOT_FOUND:
			/*
			 * In non-default-only mode where we're reading a
			 * default property, since the property wasn't
			 * found in the instance, try and read inetd's default
			 * value.
			 */
			if (!ret[i].ip_default || defaults_only)
				continue;
			switch (*err = read_prop(h, &ret[i], i,
			    INETD_INSTANCE_FMRI, PG_NAME_SERVICE_DEFAULTS)) {
			case 0:
				ret[i].from_inetd = B_TRUE;
				continue;
			case SCF_ERROR_NOT_FOUND:
				continue;
			default:
				goto failure_cleanup;
			}
		default:
			goto failure_cleanup;
		}
	}

	*num_elements = INETD_NUMPROPS;
	return (ret);

failure_cleanup:
	free_instance_props(ret);
	return (NULL);
}

/*
 * Read all properties applicable to 'instance' (including defaults).
 */
inetd_prop_t *
read_instance_props(scf_handle_t *h, const char *instance, size_t *num_elements,
    scf_error_t *err)
{
	return (read_props(h, instance, num_elements, err));
}

/*
 * Read the default properties from inetd's defaults property group.
 */
inetd_prop_t *
read_default_props(scf_handle_t *h, size_t *num_elements, scf_error_t *err)
{
	return (read_props(h, NULL, num_elements, err));
}

void
free_instance_props(inetd_prop_t *prop)
{
	int i;

	if (prop == NULL)
		return;

	for (i = 0; i < INETD_NUMPROPS; i++) {
		if (prop[i].ip_type == SCF_TYPE_ASTRING) {
			if (i == PT_PROTO_INDEX) {
				destroy_strings(prop[i].ip_value.iv_proto_list);
			} else {
				free(prop[i].ip_value.iv_astring);
			}
		}
	}
	free(prop);
}

int
connect_to_inetd(void)
{
	struct sockaddr_un	addr;
	int			fd;

	fd = socket(AF_UNIX, SOCK_STREAM, 0);
	if (fd < 0)
		return (-1);

	(void) memset(&addr, 0, sizeof (addr));
	addr.sun_family = AF_UNIX;
	/* CONSTCOND */
	assert(sizeof (INETD_UDS_PATH) <= sizeof (addr.sun_path));
	(void) strlcpy(addr.sun_path, INETD_UDS_PATH,
	    sizeof (addr.sun_path));

	if (connect(fd, (struct sockaddr *)&addr, sizeof (addr)) < 0) {
		(void) close(fd);
		return (-1);
	}

	return (fd);
}

/*
 * refresh_inetd requests that inetd re-read all of the information that it's
 * monitoring.
 */

int
refresh_inetd(void)
{
	uds_request_t   req;
	int		fd;

	if ((fd = connect_to_inetd()) < 0)
		return (-1);

	req = UR_REFRESH_INETD;
	if (send(fd, &req, sizeof (req), 0) < 0) {
		(void) close(fd);
		return (-1);
	}

	(void) close(fd);
	return (0);
}

/*
 * Returns the id of the socket type 'type_str' that can be used in a call
 * to socket(). If an unknown type string is passed returns -1, else the id.
 */

int
get_sock_type_id(const char *type_str)
{
	int	ret;

	if (strcmp(SOCKTYPE_STREAM_STR, type_str) == 0) {
		ret = SOCK_STREAM;
	} else if (strcmp(SOCKTYPE_DGRAM_STR, type_str) == 0) {
		ret = SOCK_DGRAM;
	} else if (strcmp(SOCKTYPE_RAW_STR, type_str) == 0) {
		ret = SOCK_RAW;
	} else if (strcmp(SOCKTYPE_SEQPKT_STR, type_str) == 0) {
		ret = SOCK_SEQPACKET;
	} else {
		ret = -1;
	}
	return (ret);
}

/*
 * Takes either an RPC service name or number in string form as 'svc_name', and
 * returns an integer format program number for the service. If the name isn't
 * recognized as a valid RPC service name or isn't a valid number, -1 is
 * returned, else the services program number.
 */

int
get_rpc_prognum(const char *svc_name)
{
	struct rpcent	rpc;
	char		buf[INETSVC_SVC_BUF_MAX];
	int		pnum;
	char		*endptr;

	if (getrpcbyname_r(svc_name, &rpc, buf, sizeof (buf)) != NULL)
		return (rpc.r_number);

	pnum = strtol(svc_name, &endptr, 0);
	if ((pnum == 0 && errno == EINVAL) ||
	    (pnum == LONG_MAX && errno == ERANGE) ||
	    pnum < 0 || *endptr != '\0') {
		return (-1);
	}

	return (pnum);
}

/*
 * calculate_hash calculates the MD5 message-digest of the file pathname.
 * On success, hash is modified to point to the digest string and 0 is returned.
 * Otherwise, -1 is returned and errno is set to indicate the error.
 * The space for the digest string is obtained using malloc(3C) and should be
 * freed by the caller.
 */
int
calculate_hash(const char *pathname, char **hash)
{
	int fd, i, serrno;
	size_t len;
	ssize_t n;
	char *digest;
	MD5_CTX md5_context;
	unsigned char md5_digest[DIGEST_LEN];
	unsigned char buf[READ_BUFSIZ];

	do {
		fd = open(pathname, O_RDONLY);
	} while (fd == -1 && errno == EINTR);

	if (fd == -1)
		return (-1);

	/* allocate space for a 16-byte MD5 digest as a string of hex digits */
	len = 2 * sizeof (md5_digest) + 1;
	if ((digest = malloc(len)) == NULL) {
		serrno = errno;
		(void) close(fd);
		errno = serrno;
		return (-1);
	}

	MD5Init(&md5_context);

	do {
		if ((n = read(fd, buf, sizeof (buf))) > 0)
			MD5Update(&md5_context, buf, n);
	} while ((n > 0) || (n == -1 && errno == EINTR));

	serrno = errno;
	MD5Final(md5_digest, &md5_context);

	(void) close(fd);

	if (n == -1) {
		errno = serrno;
		return (-1);
	}

	for (i = 0; i < sizeof (md5_digest); i++) {
		(void) snprintf(&digest[2 * i], len - (2 * i), "%02x",
		    md5_digest[i]);
	}
	*hash = digest;
	return (0);
}

/*
 * retrieve_inetd_hash retrieves inetd's configuration file hash from the
 * repository. On success, hash is modified to point to the hash string and
 * SCF_ERROR_NONE is returned. Otherwise, the scf_error value is returned.
 * The space for the hash string is obtained using malloc(3C) and should be
 * freed by the caller.
 */
scf_error_t
retrieve_inetd_hash(char **hash)
{
	scf_simple_prop_t *sp;
	char *hashstr, *s;
	scf_error_t scf_err;

	if ((sp = scf_simple_prop_get(NULL, INETD_INSTANCE_FMRI, HASH_PG,
	    HASH_PROP)) == NULL)
		return (scf_error());

	if ((hashstr = scf_simple_prop_next_astring(sp)) == NULL) {
		scf_err = scf_error();
		scf_simple_prop_free(sp);
		return (scf_err);
	}

	if ((s = strdup(hashstr)) == NULL) {
		scf_simple_prop_free(sp);
		return (SCF_ERROR_NO_MEMORY);
	}
	*hash = s;
	scf_simple_prop_free(sp);
	return (SCF_ERROR_NONE);
}

/*
 * store_inetd_hash stores the string hash in inetd's configuration file hash
 * in the repository. On success, SCF_ERROR_NONE is returned. Otherwise, the
 * scf_error value is returned.
 */
scf_error_t
store_inetd_hash(const char *hash)
{
	int ret;
	scf_error_t rval = SCF_ERROR_NONE;
	scf_handle_t *h;
	scf_propertygroup_t *pg = NULL;
	scf_instance_t *inst = NULL;
	scf_transaction_t *tx = NULL;
	scf_transaction_entry_t *txent = NULL;
	scf_property_t *prop = NULL;
	scf_value_t *val = NULL;

	if ((h = scf_handle_create(SCF_VERSION)) == NULL ||
	    scf_handle_bind(h) == -1)
		goto error;

	if ((pg = scf_pg_create(h)) == NULL ||
	    (inst = scf_instance_create(h)) == NULL ||
	    scf_handle_decode_fmri(h, INETD_INSTANCE_FMRI, NULL, NULL, inst,
	    NULL, NULL, SCF_DECODE_FMRI_EXACT) == -1)
		goto error;

	if (scf_instance_get_pg(inst, HASH_PG, pg) == -1) {
		if (scf_error() != SCF_ERROR_NOT_FOUND ||
		    scf_instance_add_pg(inst, HASH_PG, SCF_GROUP_APPLICATION,
		    0, pg) == -1)
			goto error;
	}

	if ((tx = scf_transaction_create(h)) == NULL ||
	    (txent = scf_entry_create(h)) == NULL ||
	    (prop = scf_property_create(h)) == NULL ||
	    (val = scf_value_create(h)) == NULL)
		goto error;

	do {
		if (scf_transaction_start(tx, pg) == -1)
			goto error;

		if (scf_transaction_property_new(tx, txent, HASH_PROP,
		    SCF_TYPE_ASTRING) == -1 &&
		    scf_transaction_property_change_type(tx, txent, HASH_PROP,
		    SCF_TYPE_ASTRING) == -1)
			goto error;

		if (scf_value_set_astring(val, hash) == -1 ||
		    scf_entry_add_value(txent, val) == -1)
			goto error;

		if ((ret = scf_transaction_commit(tx)) == -1)
			goto error;

		if (ret == 0) {
			scf_transaction_reset(tx);
			if (scf_pg_update(pg) == -1)
				goto error;
		}
	} while (ret == 0);

	goto success;

error:
	rval = scf_error();

success:
	scf_value_destroy(val);
	scf_property_destroy(prop);
	scf_entry_destroy(txent);
	scf_transaction_destroy(tx);
	scf_instance_destroy(inst);
	scf_pg_destroy(pg);
	scf_handle_destroy(h);
	return (rval);
}

/*
 * This is a wrapper function for inet_ntop(). In case the af is AF_INET6
 * and the address pointed by src is a IPv4-mapped IPv6 address, it returns
 * a printable IPv4 address, not an IPv4-mapped IPv6 address. In other cases it
 * behaves just like inet_ntop().
 */
const char *
inet_ntop_native(int af, const void *addr, char *dst, size_t size)
{
	struct in_addr	v4addr;

	if ((af == AF_INET6) && IN6_IS_ADDR_V4MAPPED((struct in6_addr *)addr)) {
		IN6_V4MAPPED_TO_INADDR((struct in6_addr *)addr, &v4addr);
		return (inet_ntop(AF_INET, &v4addr, dst, size));
	} else {
		return (inet_ntop(af, addr, dst, size));
	}
}

/*
 * inetd specific setproctitle. It sets the title so that it contains
 * 'svc_name' followed by, if obtainable, the address of the remote end of
 * socket 's'.
 * NOTE: The argv manipulation in this function should be replaced when a
 * common version of setproctitle is made available.
 */
void
setproctitle(const char *svc_name, int s, char *argv[])
{
	socklen_t		size;
	struct sockaddr_storage	ss;
	char			abuf[INET6_ADDRSTRLEN];

	static char		buf[80];

	size = (socklen_t)sizeof (ss);
	if (getpeername(s, (struct sockaddr *)&ss, &size) == 0) {
		(void) snprintf(buf, sizeof (buf), "-%s [%s]", svc_name,
		    inet_ntop_native(ss.ss_family, (ss.ss_family == AF_INET6 ?
		    (void *)&((struct sockaddr_in6 *)(&ss))->sin6_addr :
		    (void *)&((struct sockaddr_in *)(&ss))->sin_addr), abuf,
		    sizeof (abuf)));
	} else {
		(void) snprintf(buf, sizeof (buf), "-%s", svc_name);
	}

	/* we set argv[0] to point at our static storage. */
	argv[0] = buf;
	argv[1] = NULL;
}

static boolean_t
inetd_builtin_srcport(in_port_t p)
{
	p = ntohs(p);

	if ((p == IPPORT_ECHO) ||
	    (p == IPPORT_DISCARD) ||
	    (p == IPPORT_DAYTIME) ||
	    (p == IPPORT_CHARGEN) ||
	    (p == IPPORT_TIMESERVER)) {
		return (B_TRUE);
	} else {
		return (B_FALSE);
	}
}

/* ARGSUSED0 */
static void
alarm_handler(int sig)
{
	exit(0);
}

/*
 * This function is a datagram service template. It acts as a datagram wait
 * type server, waiting for datagrams to come in, and when they do passing
 * their contents, as-well as the socket they came in on and the remote
 * address, in a call to the callback function 'cb'. If no datagrams are
 * received for DG_INACTIVITY_TIMEOUT seconds the function exits with code 0.
 */
void
dg_template(void (*cb)(int, const struct sockaddr *, int, const void *, size_t),
    int s, void *buf, size_t buflen)
{
	struct sockaddr_storage	sa;
	socklen_t		sa_size;
	ssize_t			i;
	char			tmp[BUFSIZ];

	(void) sigset(SIGALRM, alarm_handler);

	if (buf == NULL) {
		buf = tmp;
		buflen = sizeof (tmp);
	}
	for (;;) {
		(void) alarm(DG_INACTIVITY_TIMEOUT);
		sa_size = sizeof (sa);
		if ((i = recvfrom(s, buf, buflen, 0, (struct sockaddr *)&sa,
		    &sa_size)) < 0) {
			continue;
		} else if (inetd_builtin_srcport(
		    ((struct sockaddr_in *)(&sa))->sin_port)) {
			/* denial-of-service attack possibility - ignore it */
			syslog(LOG_WARNING,
	"Incoming datagram from internal inetd service received; ignoring.");
			continue;
		}
		(void) alarm(0);

		cb(s, (struct sockaddr *)&sa, sa_size, buf, i);
	}
}

/*
 * An extension of write() or sendto() that keeps trying until either the full
 * request has completed or a non-EINTR error occurs. If 'to' is set to a
 * non-NULL value, sendto() is extended, else write(). Returns 0 on success
 * else -1.
 */
int
safe_sendto_write(int fd, const void *buf, size_t sz, int flags,
    const struct sockaddr *to, int tolen) {

	size_t		cnt = 0;
	ssize_t		ret;
	const char	*cp = buf;

	do {
		if (to == NULL) {
			ret = write(fd, cp + cnt, sz - cnt);
		} else {
			ret = sendto(fd, cp + cnt, sz - cnt, flags, to, tolen);
		}

		if (ret > 0)
			cnt += ret;
	} while ((cnt != sz) && (errno == EINTR));

	return ((cnt == sz) ? 0 : -1);
}

int
safe_sendto(int fd, const void *buf, size_t sz, int flags,
    const struct sockaddr *to, int tolen) {
	return (safe_sendto_write(fd, buf, sz, flags, to, tolen));
}

int
safe_write(int fd, const void *buf, size_t sz)
{
	return (safe_sendto_write(fd, buf, sz, 0, NULL, 0));
}

/*
 * Free up the memory occupied by string array 'strs'.
 */
void
destroy_strings(char **strs)
{
	int i = 0;

	if (strs != NULL) {
		while (strs[i] != NULL)
			free(strs[i++]);
		free(strs);
	}
}

/*
 * Parse the proto list string into an allocated array of proto strings,
 * returning a pointer to this array. If one of the protos is too big
 * errno is set to E2BIG and NULL is returned; if memory allocation failure
 * occurs errno is set to ENOMEM and NULL is returned; else on success
 * a pointer the string array is returned.
 */
char **
get_protos(const char *pstr)
{
	char	*cp;
	int	i = 0;
	char	**ret = NULL;
	size_t	max_proto_len = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH);
	char	*str;

	/* copy the parameter as strtok modifies its parameters */
	if ((str = strdup(pstr)) == NULL)
		goto malloc_failure;

	for (cp = strtok(str, PROTO_DELIMITERS); cp != NULL;
	    cp = strtok(NULL, PROTO_DELIMITERS)) {
		char **cpp;

		if (strlen(cp) >= max_proto_len) {
			destroy_strings(ret);
			free(str);
			errno = E2BIG;
			return (NULL);
		}
		if ((cpp = realloc(ret, (i + 2) * sizeof (char *))) == NULL)
			goto malloc_failure;
		ret = cpp;
		if ((cpp[i] = strdup(cp)) == NULL)
			goto malloc_failure;
		cpp[++i] = NULL;
	}

	free(str);
	return (ret);

malloc_failure:
	destroy_strings(ret);
	free(str);
	errno = ENOMEM;
	return (NULL);
}

/*
 * Returns an allocated string array of netids corresponding with 'proto'. The
 * function first tries to interpret 'proto' as a nettype to get its netids.
 * If this fails it tries to interpret it as a netid. If 'proto' is neither
 * a nettype or a netid or a memory allocation failures occurs NULL is
 * returned, else a pointer to an array of netids associated with 'proto' is
 * returned.
 */
char **
get_netids(char *proto)
{
	void			*handle;
	struct netconfig	*nconf;
	char			**netids = NULL;
	char			**cpp;
	int			i = 0;

	if (strcmp(proto, "*") == 0)
		proto = "visible";

	if ((handle = __rpc_setconf(proto)) != NULL) {
		/* expand nettype */
		while ((nconf = __rpc_getconf(handle)) != NULL) {
			if ((cpp = realloc(netids,
			    (i + 2) * sizeof (char *))) == NULL)
				goto failure_cleanup;
			netids = cpp;
			if ((cpp[i] = strdup(nconf->nc_netid)) == NULL)
				goto failure_cleanup;
			cpp[++i] = NULL;
		}
		__rpc_endconf(handle);
	} else {
		if ((netids = malloc(2 * sizeof (char *))) == NULL)
			return (NULL);
		if ((netids[0] = strdup(proto)) == NULL) {
			free(netids);
			return (NULL);
		}
		netids[1] = NULL;
	}

	return (netids);

failure_cleanup:
	destroy_strings(netids);
	__rpc_endconf(handle);
	return (NULL);
}