/* vi: set sw=4 ts=4: */ /* * Mini DNS server implementation for busybox * * Copyright (C) 2005 Roberto A. Foglietta (me@roberto.foglietta.name) * Copyright (C) 2005 Odd Arild Olsen (oao at fibula dot no) * Copyright (C) 2003 Paul Sheer * * Licensed under GPLv2 or later, see file LICENSE in this tarball for details. * * Odd Arild Olsen started out with the sheerdns [1] of Paul Sheer and rewrote * it into a shape which I believe is both easier to understand and maintain. * I also reused the input buffer for output and removed services he did not * need. [1] http://threading.2038bug.com/sheerdns/ * * Some bugfix and minor changes was applied by Roberto A. Foglietta who made * the first porting of oao' scdns to busybox also. */ #include "libbb.h" #include //#define DEBUG 1 #define DEBUG 0 enum { MAX_HOST_LEN = 16, // longest host name allowed is 15 IP_STRING_LEN = 18, // .xxx.xxx.xxx.xxx\0 //must be strlen('.in-addr.arpa') larger than IP_STRING_LEN MAX_NAME_LEN = (IP_STRING_LEN + 13), /* Cannot get bigger packets than 512 per RFC1035 In practice this can be set considerably smaller: Length of response packet is header (12B) + 2*type(4B) + 2*class(4B) + ttl(4B) + rlen(2B) + r (MAX_NAME_LEN =21B) + 2*querystring (2 MAX_NAME_LEN= 42B), all together 90 Byte */ MAX_PACK_LEN = 512, DEFAULT_TTL = 30, // increase this when not testing? REQ_A = 1, REQ_PTR = 12 }; struct dns_head { // the message from client and first part of response mag uint16_t id; uint16_t flags; uint16_t nquer; // accepts 0 uint16_t nansw; // 1 in response uint16_t nauth; // 0 uint16_t nadd; // 0 }; struct dns_prop { uint16_t type; uint16_t class; }; struct dns_entry { // element of known name, ip address and reversed ip address struct dns_entry *next; char ip[IP_STRING_LEN]; // dotted decimal IP char rip[IP_STRING_LEN]; // length decimal reversed IP char name[MAX_HOST_LEN]; }; static struct dns_entry *dnsentry; static uint32_t ttl = DEFAULT_TTL; static const char *fileconf = "/etc/dnsd.conf"; // Must match getopt32 call #define OPT_daemon (option_mask32 & 0x10) #define OPT_verbose (option_mask32 & 0x20) /* * Convert host name from C-string to dns length/string. */ static void convname(char *a, uint8_t *q) { int i = (q[0] == '.') ? 0 : 1; for (; i < MAX_HOST_LEN-1 && *q; i++, q++) a[i] = tolower(*q); a[0] = i - 1; a[i] = 0; } /* * Insert length of substrings instead of dots */ static void undot(uint8_t * rip) { int i = 0, s = 0; while (rip[i]) i++; for (--i; i >= 0; i--) { if (rip[i] == '.') { rip[i] = s; s = 0; } else s++; } } /* * Read one line of hostname/IP from file * Returns 0 for each valid entry read, -1 at EOF * Assumes all host names are lower case only * Hostnames with more than one label are not handled correctly. * Presently the dot is copied into name without * converting to a length/string substring for that label. */ static int getfileentry(FILE *fp, struct dns_entry *s) { unsigned int a,b,c,d; char *line, *r, *name; restart: line = r = xmalloc_fgets(fp); if (!r) return -1; while (*r == ' ' || *r == '\t') { r++; if (!*r || *r == '#' || *r == '\n') { free(line); goto restart; /* skipping empty/blank and commented lines */ } } name = r; while (*r != ' ' && *r != '\t') r++; *r++ = '\0'; if (sscanf(r, ".%u.%u.%u.%u"+1, &a, &b, &c, &d) != 4) { free(line); goto restart; /* skipping wrong lines */ } sprintf(s->ip, ".%u.%u.%u.%u"+1, a, b, c, d); sprintf(s->rip, ".%u.%u.%u.%u", d, c, b, a); undot((uint8_t*)s->rip); convname(s->name, (uint8_t*)name); if (OPT_verbose) fprintf(stderr, "\tname:%s, ip:%s\n", &(s->name[1]),s->ip); free(line); return 0; } /* * Read hostname/IP records from file */ static void dnsentryinit(void) { FILE *fp; struct dns_entry *m, *prev; prev = dnsentry = NULL; fp = xfopen(fileconf, "r"); while (1) { m = xzalloc(sizeof(*m)); /*m->next = NULL;*/ if (getfileentry(fp, m)) break; if (prev == NULL) dnsentry = m; else prev->next = m; prev = m; } fclose(fp); } /* * Look query up in dns records and return answer if found * qs is the query string, first byte the string length */ static int table_lookup(uint16_t type, uint8_t * as, uint8_t * qs) { int i; struct dns_entry *d = dnsentry; do { #if DEBUG char *p,*q; q = (char *)&(qs[1]); p = &(d->name[1]); fprintf(stderr, "\n%s: %d/%d p:%s q:%s %d", __FUNCTION__, (int)strlen(p), (int)(d->name[0]), p, q, (int)strlen(q)); #endif if (type == REQ_A) { /* search by host name */ for (i = 1; i <= (int)(d->name[0]); i++) if (tolower(qs[i]) != d->name[i]) break; if (i > (int)(d->name[0]) || (d->name[0] == 1 && d->name[1] == '*')) { strcpy((char *)as, d->ip); #if DEBUG fprintf(stderr, " OK as:%s\n", as); #endif return 0; } } else if (type == REQ_PTR) { /* search by IP-address */ if ((d->name[0] != 1 || d->name[1] != '*') && !strncmp((char*)&d->rip[1], (char*)&qs[1], strlen(d->rip)-1)) { strcpy((char *)as, d->name); return 0; } } d = d->next; } while (d); return -1; } /* * Decode message and generate answer */ static int process_packet(uint8_t *buf) { uint8_t answstr[MAX_NAME_LEN + 1]; struct dns_head *head; struct dns_prop *qprop; uint8_t *from, *answb; uint16_t outr_rlen; uint16_t outr_flags; uint16_t flags; int lookup_result, type, packet_len; int querystr_len; answstr[0] = '\0'; head = (struct dns_head *)buf; if (head->nquer == 0) { bb_error_msg("no queries"); return -1; } if (head->flags & 0x8000) { bb_error_msg("ignoring response packet"); return -1; } from = (void *)&head[1]; // start of query string //FIXME: strlen of untrusted data??! querystr_len = strlen((char *)from) + 1 + sizeof(struct dns_prop); answb = from + querystr_len; // where to append answer block outr_rlen = 0; outr_flags = 0; qprop = (struct dns_prop *)(answb - 4); type = ntohs(qprop->type); // only let REQ_A and REQ_PTR pass if (!(type == REQ_A || type == REQ_PTR)) { goto empty_packet; /* we can't handle the query type */ } if (ntohs(qprop->class) != 1 /* class INET */ ) { outr_flags = 4; /* not supported */ goto empty_packet; } /* we only support standard queries */ if ((ntohs(head->flags) & 0x7800) != 0) goto empty_packet; // We have a standard query bb_info_msg("%s", (char *)from); lookup_result = table_lookup(type, answstr, from); if (lookup_result != 0) { outr_flags = 3 | 0x0400; // name do not exist and auth goto empty_packet; } if (type == REQ_A) { // return an address struct in_addr a; // NB! its "struct { unsigned __long__ s_addr; }" uint32_t v32; if (!inet_aton((char*)answstr, &a)) { //dotted dec to long conv outr_flags = 1; /* Frmt err */ goto empty_packet; } v32 = a.s_addr; /* in case long != int */ memcpy(answstr, &v32, 4); outr_rlen = 4; // uint32_t IP } else outr_rlen = strlen((char *)answstr) + 1; // a host name outr_flags |= 0x0400; /* authority-bit */ // we have an answer head->nansw = htons(1); // copy query block to answer block memcpy(answb, from, querystr_len); answb += querystr_len; // and append answer rr // FIXME: unaligned accesses?? *(uint32_t *) answb = htonl(ttl); answb += 4; *(uint16_t *) answb = htons(outr_rlen); answb += 2; memcpy(answb, answstr, outr_rlen); answb += outr_rlen; empty_packet: flags = ntohs(head->flags); // clear rcode and RA, set responsebit and our new flags flags |= (outr_flags & 0xff80) | 0x8000; head->flags = htons(flags); head->nauth = head->nadd = 0; head->nquer = htons(1); packet_len = answb - buf; return packet_len; } /* * Exit on signal */ static void interrupt(int sig) { /* unlink("/var/run/dnsd.lock"); */ bb_error_msg("interrupt, exiting\n"); kill_myself_with_sig(sig); } int dnsd_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE; int dnsd_main(int argc ATTRIBUTE_UNUSED, char **argv) { const char *listen_interface = "0.0.0.0"; char *sttl, *sport; len_and_sockaddr *lsa, *from, *to; unsigned lsa_size; int udps; uint16_t port = 53; /* Paranoid sizing: querystring x2 + ttl + outr_rlen + answstr */ /* I'd rather see process_packet() fixed instead... */ uint8_t buf[MAX_PACK_LEN * 2 + 4 + 2 + (MAX_NAME_LEN+1)]; getopt32(argv, "i:c:t:p:dv", &listen_interface, &fileconf, &sttl, &sport); //if (option_mask32 & 0x1) // -i //if (option_mask32 & 0x2) // -c if (option_mask32 & 0x4) // -t ttl = xatou_range(sttl, 1, 0xffffffff); if (option_mask32 & 0x8) // -p port = xatou_range(sport, 1, 0xffff); if (OPT_verbose) { bb_info_msg("listen_interface: %s", listen_interface); bb_info_msg("ttl: %d, port: %d", ttl, port); bb_info_msg("fileconf: %s", fileconf); } if (OPT_daemon) { bb_daemonize_or_rexec(DAEMON_CLOSE_EXTRA_FDS, argv); openlog(applet_name, LOG_PID, LOG_DAEMON); logmode = LOGMODE_SYSLOG; } dnsentryinit(); signal(SIGINT, interrupt); bb_signals(0 /* why? + (1 << SIGPIPE) */ + (1 << SIGHUP) #ifdef SIGTSTP + (1 << SIGTSTP) #endif #ifdef SIGURG + (1 << SIGURG) #endif , SIG_IGN); lsa = xdotted2sockaddr(listen_interface, port); udps = xsocket(lsa->u.sa.sa_family, SOCK_DGRAM, 0); xbind(udps, &lsa->u.sa, lsa->len); socket_want_pktinfo(udps); /* needed for recv_from_to to work */ lsa_size = LSA_LEN_SIZE + lsa->len; from = xzalloc(lsa_size); to = xzalloc(lsa_size); bb_info_msg("Accepting UDP packets on %s", xmalloc_sockaddr2dotted(&lsa->u.sa)); while (1) { int r; /* Try to get *DEST* address (to which of our addresses * this query was directed), and reply from the same address. * Or else we can exhibit usual UDP ugliness: * [ip1.multihomed.ip2] <= query to ip1 <= peer * [ip1.multihomed.ip2] => reply from ip2 => peer (confused) */ memcpy(to, lsa, lsa_size); r = recv_from_to(udps, buf, MAX_PACK_LEN + 1, 0, &from->u.sa, &to->u.sa, lsa->len); if (r < 12 || r > MAX_PACK_LEN) { bb_error_msg("invalid packet size"); continue; } if (OPT_verbose) bb_info_msg("Got UDP packet"); buf[r] = '\0'; /* paranoia */ r = process_packet(buf); if (r <= 0) continue; send_to_from(udps, buf, r, 0, &from->u.sa, &to->u.sa, lsa->len); } return 0; }