src/lib/net.c

	net.c revision b270c58fc227c91a88b07316d680418ec75021e9
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi/* Copyright (c) 1999-2013 Dovecot authors, see the included COPYING file */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#define _GNU_SOURCE /* For Linux's struct ucred */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include "lib.h"
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include "fd-set-nonblock.h"
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include "time-util.h"
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include "net.h"
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include <stdlib.h>
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include <unistd.h>
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include <fcntl.h>
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include <ctype.h>
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include <sys/un.h>
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#include <netinet/tcp.h>
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#if defined(HAVE_UCRED_H)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#  include <ucred.h> /* for getpeerucred() */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#elif defined(HAVE_SYS_UCRED_H)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#  include <sys/ucred.h> /* for FreeBSD struct xucred */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiunion sockaddr_union {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    struct sockaddr sa;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    struct sockaddr_in sin;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    struct sockaddr_in6 sin6;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi};
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiunion sockaddr_union_unix {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    struct sockaddr sa;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    struct sockaddr_un un;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi};
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#  define SIZEOF_SOCKADDR(so) ((so).sa.sa_family == AF_INET6 ? \
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sizeof(so.sin6) : sizeof(so.sin))
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#  define SIZEOF_SOCKADDR(so) (sizeof(so.sin))
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#if !defined(HAVE_GETPEEREID) && !defined(SO_PEERCRED) && !defined(HAVE_GETPEERUCRED) && defined(MSG_WAITALL) && defined(LOCAL_CREDS)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#  define NEEDS_LOCAL_CREDS 1
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomibool net_ip_compare(const struct ip_addr *ip1, const struct ip_addr *ip2)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return net_ip_cmp(ip1, ip2) == 0;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_ip_cmp(const struct ip_addr *ip1, const struct ip_addr *ip2)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip1->family != ip2->family)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return ip1->family - ip2->family;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip1->family == AF_INET6)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return memcmp(&ip1->u.ip6, &ip2->u.ip6, sizeof(ip1->u.ip6));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return memcmp(&ip1->u.ip4, &ip2->u.ip4, sizeof(ip1->u.ip4));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiunsigned int net_ip_hash(const struct ip_addr *ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        const unsigned char *p;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    unsigned int len, g, h = 0;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip->family == AF_INET6) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        p = ip->u.ip6.s6_addr;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        len = sizeof(ip->u.ip6);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    } else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return ip->u.ip4.s_addr;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    for (; len > 0; len--, p++) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        h = (h << 4) + *p;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if ((g = h & 0xf0000000UL)) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            h = h ^ (g >> 24);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            h = h ^ g;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return h;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi/* copy IP to sockaddr */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic inline void
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomisin_set_ip(union sockaddr_union *so, const struct ip_addr *ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip == NULL) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so->sin6.sin6_family = AF_INET6;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so->sin6.sin6_addr = in6addr_any;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so->sin.sin_family = AF_INET;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so->sin.sin_addr.s_addr = INADDR_ANY;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    so->sin.sin_family = ip->family;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip->family == AF_INET6)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        memcpy(&so->sin6.sin6_addr, &ip->u.ip6, sizeof(ip->u.ip6));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        memcpy(&so->sin.sin_addr, &ip->u.ip4, sizeof(ip->u.ip4));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic inline void
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomisin_get_ip(const union sockaddr_union *so, struct ip_addr *ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* IP structs may be sent across processes. Clear the whole struct
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi       first to make sure it won't leak any data across processes. */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(ip, 0, sizeof(*ip));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ip->family = so->sin.sin_family;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip->family == AF_INET6)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        memcpy(&ip->u.ip6, &so->sin6.sin6_addr, sizeof(ip->u.ip6));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ip->family == AF_INET)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        memcpy(&ip->u.ip4, &so->sin.sin_addr, sizeof(ip->u.ip4));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        memset(&ip->u, 0, sizeof(ip->u));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic inline void sin_set_port(union sockaddr_union *so, unsigned int port)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (so->sin.sin_family == AF_INET6)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                so->sin6.sin6_port = htons((unsigned short) port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so->sin.sin_port = htons((unsigned short) port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic inline unsigned int sin_get_port(union sockaddr_union *so)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (so->sin.sin_family == AF_INET6)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return ntohs(so->sin6.sin6_port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (so->sin.sin_family == AF_INET)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return ntohs(so->sin.sin_port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return 0;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef __FreeBSD__
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic int
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuominet_connect_ip_full_freebsd(const struct ip_addr *ip, unsigned int port,
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                const struct ip_addr *my_ip, bool blocking);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic int net_connect_ip_full(const struct ip_addr *ip, unsigned int port,
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                   const struct ip_addr *my_ip, bool blocking)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int fd, try;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    for (try = 0;;) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        fd = net_connect_ip_full_freebsd(ip, port, my_ip, blocking);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (fd != -1 || ++try == 5 ||
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            (errno != EADDRINUSE && errno != EACCES))
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            break;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        /*
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi           This may be just a temporary problem:
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi           EADDRINUSE: busy
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi           EACCES: pf may cause this if another connection used
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                   the same port recently
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi/* then some kludging: */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#define net_connect_ip_full net_connect_ip_full_freebsd
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomistatic int net_connect_ip_full(const struct ip_addr *ip, unsigned int port,
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                   const struct ip_addr *my_ip, bool blocking)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    union sockaddr_union so;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int fd, ret, opt = 1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (my_ip != NULL && ip->family != my_ip->family) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_warning("net_connect_ip(): ip->family != my_ip->family");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                my_ip = NULL;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* create the socket */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(&so, 0, sizeof(so));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so.sin.sin_family = ip->family;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    fd = socket(ip->family, SOCK_STREAM, 0);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (fd == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_error("socket() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* set socket options */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &opt, sizeof(opt));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    setsockopt(fd, SOL_SOCKET, SO_KEEPALIVE, &opt, sizeof(opt));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (!blocking)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        net_set_nonblock(fd, TRUE);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* set our own address */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (my_ip != NULL) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        sin_set_ip(&so, my_ip);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (bind(fd, &so.sa, SIZEOF_SOCKADDR(so)) == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            i_error("bind(%s) failed: %m", net_ip2addr(my_ip));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            i_close_fd(&fd);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* connect */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sin_set_ip(&so, ip);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sin_set_port(&so, port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ret = connect(fd, &so.sa, SIZEOF_SOCKADDR(so));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifndef WIN32
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ret < 0 && errno != EINPROGRESS)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ret < 0 && WSAGetLastError() != WSAEWOULDBLOCK)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                i_close_fd(&fd);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef __FreeBSD__
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#  undef net_connect_ip_full
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_connect_ip(const struct ip_addr *ip, unsigned int port,
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi           const struct ip_addr *my_ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return net_connect_ip_full(ip, port, my_ip, FALSE);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_connect_ip_blocking(const struct ip_addr *ip, unsigned int port,
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi                const struct ip_addr *my_ip)
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi{
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi    return net_connect_ip_full(ip, port, my_ip, TRUE);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_try_bind(const struct ip_addr *ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    union sockaddr_union so;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* create the socket */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(&so, 0, sizeof(so));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so.sin.sin_family = ip->family;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    fd = socket(ip->family, SOCK_STREAM, 0);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (fd == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_error("socket() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sin_set_ip(&so, ip);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (bind(fd, &so.sa, SIZEOF_SOCKADDR(so)) == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_close_fd(&fd);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    i_close_fd(&fd);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return 0;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_connect_unix(const char *path)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    union sockaddr_union_unix sa;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int fd, ret;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(&sa, 0, sizeof(sa));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sa.un.sun_family = AF_UNIX;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (i_strocpy(sa.un.sun_path, path, sizeof(sa.un.sun_path)) < 0) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        /* too long path */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef ENAMETOOLONG
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        errno = ENAMETOOLONG;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        errno = EINVAL;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* create the socket */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    fd = socket(PF_UNIX, SOCK_STREAM, 0);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (fd == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_error("socket(%s) failed: %m", path);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    net_set_nonblock(fd, TRUE);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* connect */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ret = connect(fd, &sa.sa, sizeof(sa));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ret < 0 && errno != EINPROGRESS) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                i_close_fd(&fd);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi#ifdef NEEDS_LOCAL_CREDS
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi    {
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi        int on = 1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (setsockopt(fd, 0, LOCAL_CREDS, &on, sizeof on)) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            i_error("setsockopt(LOCAL_CREDS) failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_connect_unix_with_retries(const char *path, unsigned int msecs)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    struct timeval start, now;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (gettimeofday(&start, NULL) < 0)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_panic("gettimeofday() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    do {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        fd = net_connect_unix(path);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (fd != -1 || (errno != EAGAIN && errno != ECONNREFUSED))
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            break;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        /* busy. wait for a while. */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        usleep(((rand() % 10) + 1) * 10000);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (gettimeofday(&now, NULL) < 0)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            i_panic("gettimeofday() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    } while (timeval_diff_msecs(&now, &start) < (int)msecs);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomivoid net_disconnect(int fd)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* FreeBSD's close() fails with ECONNRESET if socket still has unsent
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi       data in transmit buffer. We don't care. */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (close(fd) < 0 && errno != ECONNRESET)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_error("net_disconnect() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomivoid net_set_nonblock(int fd, bool nonblock)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    fd_set_nonblock(fd, nonblock);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_set_cork(int fd ATTR_UNUSED, bool cork ATTR_UNUSED)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef TCP_CORK
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int val = cork;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return setsockopt(fd, IPPROTO_TCP, TCP_CORK, &val, sizeof(val));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    errno = ENOPROTOOPT;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomivoid net_get_ip_any4(struct ip_addr *ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ip->family = AF_INET;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ip->u.ip4.s_addr = INADDR_ANY;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomivoid net_get_ip_any6(struct ip_addr *ip)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ip->family = AF_INET6;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ip->u.ip6 = in6addr_any;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#else
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(ip, 0, sizeof(struct ip_addr));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_listen(const struct ip_addr *my_ip, unsigned int *port, int backlog)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    enum net_listen_flags flags = 0;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return net_listen_full(my_ip, port, &flags, backlog);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_listen_full(const struct ip_addr *my_ip, unsigned int *port,
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            enum net_listen_flags *flags, int backlog)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    union sockaddr_union so;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int ret, fd, opt = 1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    socklen_t len;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(&so, 0, sizeof(so));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sin_set_port(&so, *port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sin_set_ip(&so, my_ip);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* create the socket */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    fd = socket(so.sin.sin_family, SOCK_STREAM, 0);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef HAVE_IPV6
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (fd == -1 && my_ip == NULL &&
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi        (errno == EINVAL || errno == EAFNOSUPPORT)) {
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi        /* IPv6 is not supported by OS */
bf2d54df4f5943ec0617aadb1900bb8f40b12150Aki Tuomi        so.sin.sin_family = AF_INET;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        so.sin.sin_addr.s_addr = INADDR_ANY;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        fd = socket(AF_INET, SOCK_STREAM, 0);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (fd == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_error("socket() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* set socket options */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &opt, sizeof(opt));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    setsockopt(fd, SOL_SOCKET, SO_KEEPALIVE, &opt, sizeof(opt));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if ((*flags & NET_LISTEN_FLAG_REUSEPORT) != 0) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef SO_REUSEPORT
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT,
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                   &opt, sizeof(opt)) < 0)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            *flags &= ~NET_LISTEN_FLAG_REUSEPORT;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* If using IPv6, bind only to IPv6 if possible. This avoids
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi       ambiguities with IPv4-mapped IPv6 addresses. */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef IPV6_V6ONLY
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (so.sin.sin_family == AF_INET6) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        opt = 1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        setsockopt(fd, IPPROTO_IPV6, IPV6_V6ONLY, &opt, sizeof(opt));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#endif
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* specify the address/port we want to listen in */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    ret = bind(fd, &so.sa, SIZEOF_SOCKADDR(so));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (ret < 0) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (errno != EADDRINUSE) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            i_error("bind(%s, %u) failed: %m",
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                my_ip == NULL ? "" : net_ip2addr(my_ip), *port);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    } else {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        /* get the actual port we started listen */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        len = SIZEOF_SOCKADDR(so);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        ret = getsockname(fd, &so.sa, &len);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (ret >= 0) {
beec8b0a6a3ece557c9acec524e82542a9641662Aki Tuomi            *port = sin_get_port(&so);
beec8b0a6a3ece557c9acec524e82542a9641662Aki Tuomi
beec8b0a6a3ece557c9acec524e82542a9641662Aki Tuomi            /* start listening */
beec8b0a6a3ece557c9acec524e82542a9641662Aki Tuomi            if (listen(fd, backlog) >= 0)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                return fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            if (errno != EADDRINUSE)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi                i_error("listen() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        /* error */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    i_close_fd(&fd);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi}
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomiint net_listen_unix(const char *path, int backlog)
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi{
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    union {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        struct sockaddr sa;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        struct sockaddr_un un;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    } sa;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    int fd;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    memset(&sa, 0, sizeof(sa));
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    sa.un.sun_family = AF_UNIX;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (i_strocpy(sa.un.sun_path, path, sizeof(sa.un.sun_path)) < 0) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        /* too long path */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        errno = EOVERFLOW;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    /* create the socket */
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    fd = socket(PF_UNIX, SOCK_STREAM, 0);
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    if (fd == -1) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        i_error("socket() failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    }
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi#ifdef NEEDS_LOCAL_CREDS
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi    {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        int on = 1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        if (setsockopt(fd, 0, LOCAL_CREDS, &on, sizeof on)) {
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            i_error("setsockopt(LOCAL_CREDS) failed: %m");
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi            return -1;
4c78d9e646c4a1158d7167806937c02d86cdfc25Aki Tuomi        }
    }
#endif

    /* bind */
    if (bind(fd, &sa.sa, sizeof(sa)) < 0) {
        if (errno != EADDRINUSE)
            i_error("bind(%s) failed: %m", path);
    } else {
        /* start listening */
        if (listen(fd, backlog) == 0)
            return fd;

        if (errno != EADDRINUSE)
            i_error("listen() failed: %m");
    }

    i_close_fd(&fd);
    return -1;
}

int net_listen_unix_unlink_stale(const char *path, int backlog)
{
    unsigned int i = 0;
    int fd;

    while ((fd = net_listen_unix(path, backlog)) == -1) {
        if (errno != EADDRINUSE || ++i == 2)
            return -1;

        /* see if it really exists */
        fd = net_connect_unix(path);
        if (fd != -1 || errno != ECONNREFUSED) {
            if (fd != -1) i_close_fd(&fd);
            errno = EADDRINUSE;
            return -1;
        }

        /* delete and try again */
        if (unlink(path) < 0 && errno != ENOENT) {
            i_error("unlink(%s) failed: %m", path);
            errno = EADDRINUSE;
            return -1;
        }
    }
    return fd;
}

int net_accept(int fd, struct ip_addr *addr_r, unsigned int *port_r)
{
    union sockaddr_union so;
    int ret;
    socklen_t addrlen;

    i_assert(fd >= 0);

    addrlen = sizeof(so);
    ret = accept(fd, &so.sa, &addrlen);

    if (ret < 0) {
        if (errno == EAGAIN || errno == ECONNABORTED)
            return -1;
        else
            return -2;
    }
    if (so.sin.sin_family == AF_UNIX) {
        if (addr_r != NULL)
            memset(addr_r, 0, sizeof(*addr_r));
        if (port_r != NULL) *port_r = 0;
    } else {
        if (addr_r != NULL) sin_get_ip(&so, addr_r);
        if (port_r != NULL) *port_r = sin_get_port(&so);
    }
    return ret;
}

ssize_t net_receive(int fd, void *buf, size_t len)
{
    ssize_t ret;

    i_assert(fd >= 0);
    i_assert(len <= SSIZE_T_MAX);

    ret = read(fd, buf, len);
    if (ret == 0) {
        /* disconnected */
        errno = 0;
        return -2;
    }

    if (unlikely(ret < 0)) {
        if (errno == EINTR || errno == EAGAIN)
            return 0;

        if (errno == ECONNRESET || errno == ETIMEDOUT) {
                        /* treat as disconnection */
            return -2;
        }
    }

    return ret;
}

ssize_t net_transmit(int fd, const void *data, size_t len)
{
        ssize_t ret;

    i_assert(fd >= 0);
    i_assert(len <= SSIZE_T_MAX);

    ret = send(fd, data, len, 0);
    if (unlikely(ret == -1 && (errno == EINTR || errno == EAGAIN)))
        return 0;

    if (unlikely(errno == EPIPE))
        return -2;

        return ret;
}

int net_gethostbyname(const char *addr, struct ip_addr **ips,
              unsigned int *ips_count)
{
    /* @UNSAFE */
#ifdef HAVE_IPV6
    union sockaddr_union *so;
    struct addrinfo hints, *ai, *origai;
    int host_error;
#else
    struct hostent *hp;
#endif
        int count;

    *ips = NULL;
        *ips_count = 0;

#ifdef HAVE_IPV6
    memset(&hints, 0, sizeof(struct addrinfo));
    hints.ai_socktype = SOCK_STREAM;

    /* save error to host_error for later use */
    host_error = getaddrinfo(addr, NULL, &hints, &ai);
    if (host_error != 0)
        return host_error;

        /* get number of IPs */
        origai = ai;
    for (count = 0; ai != NULL; ai = ai->ai_next)
                count++;

        *ips_count = count;
        *ips = t_malloc(sizeof(struct ip_addr) * count);

        count = 0;
    for (ai = origai; ai != NULL; ai = ai->ai_next, count++) {
        so = (union sockaddr_union *) ai->ai_addr;

        sin_get_ip(so, &(*ips)[count]);
    }
    freeaddrinfo(origai);
#else
    hp = gethostbyname(addr);
    if (hp == NULL)
        return h_errno;

        /* get number of IPs */
    count = 0;
    while (hp->h_addr_list[count] != NULL)
        count++;

        *ips_count = count;
        *ips = t_malloc(sizeof(struct ip_addr) * count);

    while (count > 0) {
        count--;

        (*ips)[count].family = AF_INET;
        memcpy(&(*ips)[count].u.ip4, hp->h_addr_list[count],
               sizeof((*ips)[count].u.ip4));
    }
#endif

    return 0;
}

int net_gethostbyaddr(const struct ip_addr *ip, const char **name_r)
{
    union sockaddr_union so;
    socklen_t addrlen = sizeof(so);
    char hbuf[NI_MAXHOST];
    int ret;

    memset(&so, 0, sizeof(so));
    sin_set_ip(&so, ip);
    ret = getnameinfo(&so.sa, addrlen, hbuf, sizeof(hbuf), NULL, 0,
              NI_NAMEREQD);
    if (ret != 0)
        return ret;

    *name_r = t_strdup(hbuf);
    return 0;
}

int net_getsockname(int fd, struct ip_addr *addr, unsigned int *port)
{
    union sockaddr_union so;
    socklen_t addrlen;

    i_assert(fd >= 0);

    addrlen = sizeof(so);
    if (getsockname(fd, &so.sa, &addrlen) == -1)
        return -1;
    if (so.sin.sin_family == AF_UNIX) {
        if (addr != NULL)
            memset(addr, 0, sizeof(*addr));
        if (port != NULL) *port = 0;
    } else {
        if (addr != NULL) sin_get_ip(&so, addr);
        if (port != NULL) *port = sin_get_port(&so);
    }
    return 0;
}

int net_getpeername(int fd, struct ip_addr *addr, unsigned int *port)
{
    union sockaddr_union so;
    socklen_t addrlen;

    i_assert(fd >= 0);

    addrlen = sizeof(so);
    if (getpeername(fd, &so.sa, &addrlen) == -1)
        return -1;
    if (so.sin.sin_family == AF_UNIX) {
        if (addr != NULL)
            memset(addr, 0, sizeof(*addr));
        if (port != NULL) *port = 0;
    } else {
        if (addr != NULL) sin_get_ip(&so, addr);
        if (port != NULL) *port = sin_get_port(&so);
    }
    return 0;
}

int net_getunixname(int fd, const char **name_r)
{
    union sockaddr_union_unix so;
    socklen_t addrlen = sizeof(so);

    if (getsockname(fd, &so.sa, &addrlen) < 0)
        return -1;
    if (so.un.sun_family != AF_UNIX) {
        errno = ENOTSOCK;
        return -1;
    }
    *name_r = t_strdup(so.un.sun_path);
    return 0;
}

int net_getunixcred(int fd, struct net_unix_cred *cred_r)
{
#if defined(SO_PEERCRED)
# if defined(HAVE_STRUCT_SOCKPEERCRED)
    /* OpenBSD (may also provide getpeereid, but we also want pid) */
    struct sockpeercred ucred;
# else
    /* Linux */
    struct ucred ucred;
# endif
    socklen_t len = sizeof(ucred);

    if (getsockopt(fd, SOL_SOCKET, SO_PEERCRED, &ucred, &len) < 0) {
        i_error("getsockopt(SO_PEERCRED) failed: %m");
        return -1;
    }
    cred_r->uid = ucred.uid;
    cred_r->gid = ucred.gid;
    cred_r->pid = ucred.pid;
    return 0;
#elif defined(LOCAL_PEEREID)
    /* NetBSD (may also provide getpeereid, but we also want pid) */
    struct unpcbid ucred;
    socklen_t len = sizeof(ucred);

    if (getsockopt(fd, 0, LOCAL_PEEREID, &ucred, &len) < 0) {
        i_error("getsockopt(LOCAL_PEEREID) failed: %m");
        return -1;
    }

    cred_r->uid = ucred.unp_euid;
    cred_r->gid = ucred.unp_egid;
    cred_r->pid = ucred.unp_pid;
    return 0;
#elif defined(HAVE_GETPEEREID)
    /* OSX 10.4+, FreeBSD 4.6+, OpenBSD 3.0+, NetBSD 5.0+ */
    if (getpeereid(fd, &cred_r->uid, &cred_r->gid) < 0) {
        i_error("getpeereid() failed: %m");
        return -1;
    }
    cred_r->pid = (pid_t)-1;
    return 0;
#elif defined(LOCAL_PEERCRED)
    /* Older FreeBSD */
    struct xucred ucred;
    socklen_t len = sizeof(ucred);

    if (getsockopt(fd, 0, LOCAL_PEERCRED, &ucred, &len) < 0) {
        i_error("getsockopt(LOCAL_PEERCRED) failed: %m");
        return -1;
    }

    if (ucred.cr_version != XUCRED_VERSION) {
        errno = EINVAL;
        return -1;
    }

    cred_r->uid = ucred.cr_uid;
    cred_r->gid = ucred.cr_gid;
    cred_r->pid = (pid_t)-1;
    return 0;
#elif defined(HAVE_GETPEERUCRED)
    /* Solaris */
    ucred_t *ucred = NULL;

    if (getpeerucred(fd, &ucred) < 0) {
        i_error("getpeerucred() failed: %m");
        return -1;
    }
    cred_r->uid = ucred_geteuid(ucred);
    cred_r->gid = ucred_getrgid(ucred);
    cred_r->pid = ucred_getpid(ucred);
    ucred_free(ucred);

    if (cred_r->uid == (uid_t)-1 ||
        cred_r->gid == (gid_t)-1) {
        errno = EINVAL;
        return -1;
    }
    return 0;
#elif NEEDS_LOCAL_CREDS
    /* NetBSD < 5 */
    int i, n, on;
    struct iovec iov;
    struct msghdr msg;
    struct {
        struct cmsghdr ch;
        char buf[110];
    } cdata;
    struct sockcred *sc;

    iov.iov_base = (char *)&on;
    iov.iov_len = 1;

    sc = (struct sockcred *)cdata.buf;
    sc->sc_uid = sc->sc_euid = sc->sc_gid = sc->sc_egid = -1;
    memset(&cdata.ch, 0, sizeof cdata.ch);

    memset(&msg, 0, sizeof msg);

    msg.msg_iov = &iov;
    msg.msg_iovlen = 1;
    msg.msg_control = &cdata;
    msg.msg_controllen = sizeof(cdata.ch) + sizeof(cdata.buf);

    for (i = 0; i < 10; i++) {
        n = recvmsg(fd, &msg, MSG_WAITALL | MSG_PEEK);
        if (n >= 0 || errno != EAGAIN)
            break;
        usleep(100);
    }
    if (n < 0) {
        i_error("recvmsg() failed: %m");
        return -1;
    }
    cred_r->uid = sc->sc_euid;
    cred_r->gid = sc->sc_egid;
    cred_r->pid = (pid_t)-1;
    return 0;
#else
    errno = EINVAL;
    return -1;
#endif
}

const char *net_ip2addr(const struct ip_addr *ip)
{
#ifdef HAVE_IPV6
    char addr[MAX_IP_LEN+1];

    addr[MAX_IP_LEN] = '\0';
    if (inet_ntop(ip->family, &ip->u.ip6, addr, MAX_IP_LEN) == NULL)
        return "";

    return t_strdup(addr);
#else
    unsigned long ip4;

    if (ip->family != AF_INET)
        return "";

    ip4 = ntohl(ip->u.ip4.s_addr);
    return t_strdup_printf("%lu.%lu.%lu.%lu",
                   (ip4 & 0xff000000UL) >> 24,
                   (ip4 & 0x00ff0000) >> 16,
                   (ip4 & 0x0000ff00) >> 8,
                   (ip4 & 0x000000ff));
#endif
}

int net_addr2ip(const char *addr, struct ip_addr *ip)
{
    int ret;

    if (strchr(addr, ':') != NULL) {
        /* IPv6 */
        ip->family = AF_INET6;
#ifdef HAVE_IPV6
        T_BEGIN {
            if (addr[0] == '[') {
                /* allow [ipv6 addr] */
                unsigned int len = strlen(addr);
                if (addr[len-1] == ']')
                    addr = t_strndup(addr+1, len-2);
            }
            ret = inet_pton(AF_INET6, addr, &ip->u.ip6);
        } T_END;
        if (ret == 0)
            return -1;
#else
        ip->u.ip4.s_addr = 0;
#endif
    } else {
        /* IPv4 */
        ip->family = AF_INET;
        if (inet_aton(addr, &ip->u.ip4) == 0)
            return -1;
    }

    return 0;
}

int net_ipv6_mapped_ipv4_convert(const struct ip_addr *src,
                 struct ip_addr *dest)
{
#ifdef HAVE_IPV6
    static uint8_t v4_prefix[] =
        { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xff, 0xff };

    if (!IPADDR_IS_V6(src))
        return -1;
    if (memcmp(src->u.ip6.s6_addr, v4_prefix, sizeof(v4_prefix)) != 0)
        return -1;

    dest->family = AF_INET;
    memcpy(&dest->u.ip6, &src->u.ip6.s6_addr[3*4], 4);
    return 0;
#else
    return -1;
#endif
}

int net_geterror(int fd)
{
    int data;
    socklen_t len = sizeof(data);

    if (getsockopt(fd, SOL_SOCKET, SO_ERROR, &data, &len) == -1)
        return -1;

    return data;
}

const char *net_gethosterror(int error)
{
#ifdef HAVE_IPV6
    i_assert(error != 0);

    return gai_strerror(error);
#else
    switch (error) {
    case HOST_NOT_FOUND:
        return "Host not found";
    case NO_ADDRESS:
        return "No IP address found for name";
    case NO_RECOVERY:
        return "A non-recoverable name server error occurred";
    case TRY_AGAIN:
        return "A temporary error on an authoritative name server";
    default:
        return t_strdup_printf("Unknown error %d", error);
    }
#endif
}

int net_hosterror_notfound(int error)
{
#ifdef HAVE_IPV6
#ifdef EAI_NODATA /* NODATA is depricated */
    return error != 1 && (error == EAI_NONAME || error == EAI_NODATA);
#else
    return error != 1 && (error == EAI_NONAME);
#endif
#else
    return error == HOST_NOT_FOUND || error == NO_ADDRESS;
#endif
}

const char *net_getservbyport(unsigned short port)
{
    struct servent *entry;

    entry = getservbyport(htons(port), "tcp");
    return entry == NULL ? NULL : entry->s_name;
}

bool is_ipv4_address(const char *addr)
{
    while (*addr != '\0') {
        if (*addr != '.' && !i_isdigit(*addr))
            return FALSE;
                addr++;
    }

    return TRUE;
}

bool is_ipv6_address(const char *addr)
{
    bool have_prefix = FALSE;

    if (*addr == '[') {
        have_prefix = TRUE;
        addr++;
    }
    while (*addr != '\0') {
        if (*addr != ':' && !i_isxdigit(*addr)) {
            if (have_prefix && *addr == ']' && addr[1] == '\0')
                break;
            return FALSE;
        }
                addr++;
    }

    return TRUE;
}

int net_parse_range(const char *network, struct ip_addr *ip_r,
            unsigned int *bits_r)
{
    const char *p;
    unsigned int bits, max_bits;

    p = strchr(network, '/');
    if (p != NULL)
        network = t_strdup_until(network, p++);

    if (net_addr2ip(network, ip_r) < 0)
        return -1;

    max_bits = IPADDR_BITS(ip_r);
    if (p == NULL) {
        /* full IP address must match */
        bits = max_bits;
    } else {
        /* get the network mask */
        if (str_to_uint(p, &bits) < 0 || bits > max_bits)
            return -1;
    }
    *bits_r = bits;
    return 0;
}

bool net_is_in_network(const struct ip_addr *ip,
               const struct ip_addr *net_ip, unsigned int bits)
{
    struct ip_addr tmp_ip;
    const uint32_t *ip1, *ip2;
    uint32_t mask, i1, i2;
    unsigned int pos, i;

    if (net_ipv6_mapped_ipv4_convert(ip, &tmp_ip) == 0) {
        /* IPv4 address mapped disguised as IPv6 address */
        ip = &tmp_ip;
    }

    if (ip->family == 0) {
        /* non-IPv4/IPv6 address (e.g. UNIX socket) never matches
           anything */
        return FALSE;
    }
    if (IPADDR_IS_V4(ip) != IPADDR_IS_V4(net_ip)) {
        /* one is IPv6 and one is IPv4 */
        return FALSE;
    }
    i_assert(IPADDR_IS_V6(ip) == IPADDR_IS_V6(net_ip));

    if (IPADDR_IS_V4(ip)) {
        ip1 = &ip->u.ip4.s_addr;
        ip2 = &net_ip->u.ip4.s_addr;
    } else {
#ifdef HAVE_IPV6
        ip1 = (const void *)&ip->u.ip6;
        ip2 = (const void *)&net_ip->u.ip6;
#else
        /* shouldn't get here */
        return FALSE;
#endif
    }

    /* check first the full 32bit ints */
    for (pos = 0, i = 0; pos + 32 <= bits; pos += 32, i++) {
        if (ip1[i] != ip2[i])
            return FALSE;
    }
    i1 = htonl(ip1[i]);
    i2 = htonl(ip2[i]);

    /* check the last full bytes */
    for (mask = 0xff000000; pos + 8 <= bits; pos += 8, mask >>= 8) {
        if ((i1 & mask) != (i2 & mask))
            return FALSE;
    }

    /* check the last bits, they're reversed in bytes */
    bits -= pos;
    for (mask = 0x80000000 >> (pos % 32); bits > 0; bits--, mask >>= 1) {
        if ((i1 & mask) != (i2 & mask))
            return FALSE;
    }
    return TRUE;
}