Bridge.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562
  1. // SoftEther VPN Source Code
  2. // Cedar Communication Module
  3. //
  4. // SoftEther VPN Server, Client and Bridge are free software under GPLv2.
  5. //
  6. // Copyright (c) 2012-2014 Daiyuu Nobori.
  7. // Copyright (c) 2012-2014 SoftEther VPN Project, University of Tsukuba, Japan.
  8. // Copyright (c) 2012-2014 SoftEther Corporation.
  9. //
  10. // All Rights Reserved.
  11. //
  12. // http://www.softether.org/
  13. //
  14. // Author: Daiyuu Nobori
  15. // Comments: Tetsuo Sugiyama, Ph.D.
  16. //
  17. // This program is free software; you can redistribute it and/or
  18. // modify it under the terms of the GNU General Public License
  19. // version 2 as published by the Free Software Foundation.
  20. //
  21. // This program is distributed in the hope that it will be useful,
  22. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  23. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  24. // GNU General Public License for more details.
  25. //
  26. // You should have received a copy of the GNU General Public License version 2
  27. // along with this program; if not, write to the Free Software
  28. // Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
  29. //
  30. // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  31. // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  32. // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
  33. // IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
  34. // CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
  35. // TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
  36. // SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  37. //
  38. // THE LICENSE AGREEMENT IS ATTACHED ON THE SOURCE-CODE PACKAGE
  39. // AS "LICENSE.TXT" FILE. READ THE TEXT FILE IN ADVANCE TO USE THE SOFTWARE.
  40. //
  41. //
  42. // THIS SOFTWARE IS DEVELOPED IN JAPAN, AND DISTRIBUTED FROM JAPAN,
  43. // UNDER JAPANESE LAWS. YOU MUST AGREE IN ADVANCE TO USE, COPY, MODIFY,
  44. // MERGE, PUBLISH, DISTRIBUTE, SUBLICENSE, AND/OR SELL COPIES OF THIS
  45. // SOFTWARE, THAT ANY JURIDICAL DISPUTES WHICH ARE CONCERNED TO THIS
  46. // SOFTWARE OR ITS CONTENTS, AGAINST US (SOFTETHER PROJECT, SOFTETHER
  47. // CORPORATION, DAIYUU NOBORI OR OTHER SUPPLIERS), OR ANY JURIDICAL
  48. // DISPUTES AGAINST US WHICH ARE CAUSED BY ANY KIND OF USING, COPYING,
  49. // MODIFYING, MERGING, PUBLISHING, DISTRIBUTING, SUBLICENSING, AND/OR
  50. // SELLING COPIES OF THIS SOFTWARE SHALL BE REGARDED AS BE CONSTRUED AND
  51. // CONTROLLED BY JAPANESE LAWS, AND YOU MUST FURTHER CONSENT TO
  52. // EXCLUSIVE JURISDICTION AND VENUE IN THE COURTS SITTING IN TOKYO,
  53. // JAPAN. YOU MUST WAIVE ALL DEFENSES OF LACK OF PERSONAL JURISDICTION
  54. // AND FORUM NON CONVENIENS. PROCESS MAY BE SERVED ON EITHER PARTY IN
  55. // THE MANNER AUTHORIZED BY APPLICABLE LAW OR COURT RULE.
  56. //
  57. // USE ONLY IN JAPAN. DO NOT USE THIS SOFTWARE IN ANOTHER COUNTRY UNLESS
  58. // YOU HAVE A CONFIRMATION THAT THIS SOFTWARE DOES NOT VIOLATE ANY
  59. // CRIMINAL LAWS OR CIVIL RIGHTS IN THAT PARTICULAR COUNTRY. USING THIS
  60. // SOFTWARE IN OTHER COUNTRIES IS COMPLETELY AT YOUR OWN RISK. THE
  61. // SOFTETHER VPN PROJECT HAS DEVELOPED AND DISTRIBUTED THIS SOFTWARE TO
  62. // COMPLY ONLY WITH THE JAPANESE LAWS AND EXISTING CIVIL RIGHTS INCLUDING
  63. // PATENTS WHICH ARE SUBJECTS APPLY IN JAPAN. OTHER COUNTRIES' LAWS OR
  64. // CIVIL RIGHTS ARE NONE OF OUR CONCERNS NOR RESPONSIBILITIES. WE HAVE
  65. // NEVER INVESTIGATED ANY CRIMINAL REGULATIONS, CIVIL LAWS OR
  66. // INTELLECTUAL PROPERTY RIGHTS INCLUDING PATENTS IN ANY OF OTHER 200+
  67. // COUNTRIES AND TERRITORIES. BY NATURE, THERE ARE 200+ REGIONS IN THE
  68. // WORLD, WITH DIFFERENT LAWS. IT IS IMPOSSIBLE TO VERIFY EVERY
  69. // COUNTRIES' LAWS, REGULATIONS AND CIVIL RIGHTS TO MAKE THE SOFTWARE
  70. // COMPLY WITH ALL COUNTRIES' LAWS BY THE PROJECT. EVEN IF YOU WILL BE
  71. // SUED BY A PRIVATE ENTITY OR BE DAMAGED BY A PUBLIC SERVANT IN YOUR
  72. // COUNTRY, THE DEVELOPERS OF THIS SOFTWARE WILL NEVER BE LIABLE TO
  73. // RECOVER OR COMPENSATE SUCH DAMAGES, CRIMINAL OR CIVIL
  74. // RESPONSIBILITIES. NOTE THAT THIS LINE IS NOT LICENSE RESTRICTION BUT
  75. // JUST A STATEMENT FOR WARNING AND DISCLAIMER.
  76. //
  77. //
  78. // SOURCE CODE CONTRIBUTION
  79. // ------------------------
  80. //
  81. // Your contribution to SoftEther VPN Project is much appreciated.
  82. // Please send patches to us through GitHub.
  83. // Read the SoftEther VPN Patch Acceptance Policy in advance:
  84. // http://www.softether.org/5-download/src/9.patch
  85. //
  86. //
  87. // DEAR SECURITY EXPERTS
  88. // ---------------------
  89. //
  90. // If you find a bug or a security vulnerability please kindly inform us
  91. // about the problem immediately so that we can fix the security problem
  92. // to protect a lot of users around the world as soon as possible.
  93. //
  94. // Our e-mail address for security reports is:
  95. // softether-vpn-security [at] softether.org
  96. //
  97. // Please note that the above e-mail address is not a technical support
  98. // inquiry address. If you need technical assistance, please visit
  99. // http://www.softether.org/ and ask your question on the users forum.
  100. //
  101. // Thank you for your cooperation.
  102. //
  103. //
  104. // NO MEMORY OR RESOURCE LEAKS
  105. // ---------------------------
  106. //
  107. // The memory-leaks and resource-leaks verification under the stress
  108. // test has been passed before release this source code.
  109. // Bridge.c
  110. // Ethernet Bridge Program (Local Bridge)
  111. #include <GlobalConst.h>
  112. #define BRIDGE_C
  113. #ifdef WIN32
  114. #define OS_WIN32
  115. #endif
  116. #ifdef OS_WIN32
  117. // Win32
  118. #include "BridgeWin32.c"
  119. #else
  120. // Unix
  121. #include "BridgeUnix.c"
  122. #endif // OS_WIN32
  123. // Hash the list of current Ethernet devices
  124. UINT GetEthDeviceHash()
  125. {
  126. #ifdef OS_UNIX
  127. // UNIX
  128. UINT num;
  129. UINT i;
  130. char tmp[4096];
  131. UCHAR hash[SHA1_SIZE];
  132. TOKEN_LIST *t = GetEthList();
  133. num = t->NumTokens;
  134. tmp[0] = 0;
  135. for (i = 0;i < t->NumTokens;i++)
  136. {
  137. StrCat(tmp, sizeof(tmp), t->Token[i]);
  138. }
  139. FreeToken(t);
  140. Hash(hash, tmp, StrLen(tmp), true);
  141. Copy(&num, hash, sizeof(UINT));
  142. return num;
  143. #else // OS_UNIX
  144. // Win32
  145. UINT ret = 0;
  146. MS_ADAPTER_LIST *a = MsCreateAdapterListEx(true);
  147. UINT num;
  148. UINT i;
  149. char tmp[4096];
  150. UCHAR hash[SHA1_SIZE];
  151. tmp[0] = 0;
  152. if (a != NULL)
  153. {
  154. for (i = 0;i < a->Num;i++)
  155. {
  156. StrCat(tmp, sizeof(tmp), a->Adapters[i]->Title);
  157. }
  158. }
  159. MsFreeAdapterList(a);
  160. Hash(hash, tmp, StrLen(tmp), true);
  161. Copy(&num, hash, sizeof(UINT));
  162. return num;
  163. #endif // OS_UNIX
  164. }
  165. // Get whether WinPcap is needed
  166. bool IsNeedWinPcap()
  167. {
  168. if (IsBridgeSupported() == false)
  169. {
  170. // Not in Windows
  171. return false;
  172. }
  173. else
  174. {
  175. // Windows
  176. if (IsEthSupported())
  177. {
  178. // Already success to access the Ethernet device
  179. return false;
  180. }
  181. else
  182. {
  183. // Failed to access the Ethernet device
  184. return true;
  185. }
  186. }
  187. }
  188. // Get whether the local-bridging is supported by current OS
  189. bool IsBridgeSupported()
  190. {
  191. UINT type = GetOsInfo()->OsType;
  192. if (OS_IS_WINDOWS(type))
  193. {
  194. if (IsEthSupported())
  195. {
  196. return true;
  197. }
  198. else
  199. {
  200. bool ret = false;
  201. #ifdef OS_WIN32
  202. ret = MsIsAdmin();
  203. #endif // OS_WIN32
  204. return ret;
  205. }
  206. }
  207. else
  208. {
  209. return IsEthSupported();
  210. }
  211. }
  212. // Delete a local-bridge
  213. bool DeleteLocalBridge(CEDAR *c, char *hubname, char *devicename)
  214. {
  215. bool ret = false;
  216. // Validate arguments
  217. if (c == NULL || hubname == NULL || devicename == NULL)
  218. {
  219. return false;
  220. }
  221. LockList(c->HubList);
  222. {
  223. LockList(c->LocalBridgeList);
  224. {
  225. UINT i;
  226. for (i = 0;i < LIST_NUM(c->LocalBridgeList);i++)
  227. {
  228. LOCALBRIDGE *br = LIST_DATA(c->LocalBridgeList, i);
  229. if (StrCmpi(br->HubName, hubname) == 0)
  230. {
  231. if (StrCmpi(br->DeviceName, devicename) == 0)
  232. {
  233. if (br->Bridge != NULL)
  234. {
  235. BrFreeBridge(br->Bridge);
  236. br->Bridge = NULL;
  237. }
  238. Delete(c->LocalBridgeList, br);
  239. Free(br);
  240. ret = true;
  241. break;
  242. }
  243. }
  244. }
  245. }
  246. UnlockList(c->LocalBridgeList);
  247. }
  248. UnlockList(c->HubList);
  249. return ret;
  250. }
  251. // Add a local-bridge
  252. void AddLocalBridge(CEDAR *c, char *hubname, char *devicename, bool local, bool monitor, bool tapmode, char *tapaddr, bool limit_broadcast)
  253. {
  254. UINT i;
  255. HUB *h = NULL;
  256. LOCALBRIDGE *br = NULL;
  257. // Validate arguments
  258. if (c == NULL || hubname == NULL || devicename == NULL)
  259. {
  260. return;
  261. }
  262. if (OS_IS_UNIX(GetOsInfo()->OsType) == false)
  263. {
  264. tapmode = false;
  265. }
  266. LockList(c->HubList);
  267. {
  268. LockList(c->LocalBridgeList);
  269. {
  270. bool exists = false;
  271. // Ensure that the same configuration local-bridge doesn't exist already
  272. for (i = 0;i < LIST_NUM(c->LocalBridgeList);i++)
  273. {
  274. LOCALBRIDGE *br = LIST_DATA(c->LocalBridgeList, i);
  275. if (StrCmpi(br->DeviceName, devicename) == 0)
  276. {
  277. if (StrCmpi(br->HubName, hubname) == 0)
  278. {
  279. if (br->TapMode == tapmode)
  280. {
  281. exists = true;
  282. }
  283. }
  284. }
  285. }
  286. if (exists == false)
  287. {
  288. // Add configuration
  289. br = ZeroMalloc(sizeof(LOCALBRIDGE));
  290. StrCpy(br->HubName, sizeof(br->HubName), hubname);
  291. StrCpy(br->DeviceName, sizeof(br->DeviceName), devicename);
  292. br->Bridge = NULL;
  293. br->Local = local;
  294. br->TapMode = tapmode;
  295. br->LimitBroadcast = limit_broadcast;
  296. br->Monitor = monitor;
  297. if (br->TapMode)
  298. {
  299. if (tapaddr != NULL && IsZero(tapaddr, 6) == false)
  300. {
  301. Copy(br->TapMacAddress, tapaddr, 6);
  302. }
  303. else
  304. {
  305. GenMacAddress(br->TapMacAddress);
  306. }
  307. }
  308. Add(c->LocalBridgeList, br);
  309. // Find the hub
  310. for (i = 0;i < LIST_NUM(c->HubList);i++)
  311. {
  312. HUB *hub = LIST_DATA(c->HubList, i);
  313. if (StrCmpi(hub->Name, br->HubName) == 0)
  314. {
  315. h = hub;
  316. AddRef(h->ref);
  317. break;
  318. }
  319. }
  320. }
  321. }
  322. UnlockList(c->LocalBridgeList);
  323. }
  324. UnlockList(c->HubList);
  325. // Start the local-bridge immediately
  326. if (h != NULL && br != NULL && h->Type != HUB_TYPE_FARM_DYNAMIC)
  327. {
  328. Lock(h->lock_online);
  329. {
  330. if (h->Offline == false)
  331. {
  332. LockList(c->LocalBridgeList);
  333. {
  334. if (IsInList(c->LocalBridgeList, br))
  335. {
  336. if (br->Bridge == NULL)
  337. {
  338. br->Bridge = BrNewBridge(h, br->DeviceName, NULL, br->Local, br->Monitor, br->TapMode, br->TapMacAddress, br->LimitBroadcast, br);
  339. }
  340. }
  341. }
  342. UnlockList(c->LocalBridgeList);
  343. }
  344. }
  345. Unlock(h->lock_online);
  346. }
  347. ReleaseHub(h);
  348. }
  349. // Initialize the local-bridge list
  350. void InitLocalBridgeList(CEDAR *c)
  351. {
  352. // Validate arguments
  353. if (c == NULL)
  354. {
  355. return;
  356. }
  357. c->LocalBridgeList = NewList(NULL);
  358. }
  359. // Free the local-bridge list
  360. void FreeLocalBridgeList(CEDAR *c)
  361. {
  362. UINT i;
  363. // Validate arguments
  364. if (c == NULL)
  365. {
  366. return;
  367. }
  368. for (i = 0;i < LIST_NUM(c->LocalBridgeList);i++)
  369. {
  370. LOCALBRIDGE *br = LIST_DATA(c->LocalBridgeList, i);
  371. Free(br);
  372. }
  373. ReleaseList(c->LocalBridgeList);
  374. c->LocalBridgeList = NULL;
  375. }
  376. // Bridging thread
  377. void BrBridgeThread(THREAD *thread, void *param)
  378. {
  379. BRIDGE *b;
  380. CONNECTION *c;
  381. SESSION *s;
  382. HUB *h;
  383. char name[MAX_SIZE];
  384. // Validate arguments
  385. if (thread == NULL || param == NULL)
  386. {
  387. return;
  388. }
  389. b = (BRIDGE *)param;
  390. // Create a connection object
  391. c = NewServerConnection(b->Cedar, NULL, thread);
  392. c->Protocol = CONNECTION_HUB_BRIDGE;
  393. // Create a session object
  394. s = NewServerSession(b->Cedar, c, b->Hub, BRIDGE_USER_NAME, b->Policy);
  395. HLog(b->Hub, "LH_START_BRIDGE", b->Name, s->Name);
  396. StrCpy(name, sizeof(name), b->Name);
  397. h = b->Hub;
  398. AddRef(h->ref);
  399. s->BridgeMode = true;
  400. s->Bridge = b;
  401. c->Session = s;
  402. ReleaseConnection(c);
  403. // Dummy user name for local-bridge
  404. s->Username = CopyStr(BRIDGE_USER_NAME_PRINT);
  405. b->Session = s;
  406. AddRef(s->ref);
  407. // Notify completion
  408. NoticeThreadInit(thread);
  409. // Main procedure of the session
  410. Debug("Bridge %s Start.\n", b->Name);
  411. SessionMain(s);
  412. Debug("Bridge %s Stop.\n", b->Name);
  413. HLog(h, "LH_STOP_BRIDGE", name);
  414. ReleaseHub(h);
  415. ReleaseSession(s);
  416. }
  417. // Free the local-bridge object
  418. void BrFreeBridge(BRIDGE *b)
  419. {
  420. // Validate arguments
  421. if (b == NULL)
  422. {
  423. return;
  424. }
  425. if (b->ParentLocalBridge != NULL)
  426. {
  427. b->ParentLocalBridge = NULL;
  428. }
  429. // Stop session thread
  430. StopSession(b->Session);
  431. ReleaseSession(b->Session);
  432. Free(b);
  433. }
  434. // Create new local-bridge
  435. BRIDGE *BrNewBridge(HUB *h, char *name, POLICY *p, bool local, bool monitor, bool tapmode, char *tapaddr, bool limit_broadcast, LOCALBRIDGE *parent_local_bridge)
  436. {
  437. BRIDGE *b;
  438. POLICY *policy;
  439. THREAD *t;
  440. // Validate arguments
  441. if (h == NULL || name == NULL || parent_local_bridge == NULL)
  442. {
  443. return NULL;
  444. }
  445. if (p == NULL)
  446. {
  447. policy = ClonePolicy(GetDefaultPolicy());
  448. }
  449. else
  450. {
  451. policy = ClonePolicy(p);
  452. }
  453. b = ZeroMalloc(sizeof(BRIDGE));
  454. b->Cedar = h->Cedar;
  455. b->Hub = h;
  456. StrCpy(b->Name, sizeof(b->Name), name);
  457. b->Policy = policy;
  458. b->Local = local;
  459. b->Monitor = monitor;
  460. b->TapMode = tapmode;
  461. b->LimitBroadcast = limit_broadcast;
  462. b->ParentLocalBridge = parent_local_bridge;
  463. if (b->TapMode)
  464. {
  465. if (tapaddr != NULL && IsZero(tapaddr, 6) == false)
  466. {
  467. Copy(b->TapMacAddress, tapaddr, 6);
  468. }
  469. else
  470. {
  471. GenMacAddress(b->TapMacAddress);
  472. }
  473. }
  474. if (monitor)
  475. {
  476. // Enabling monitoring mode
  477. policy->MonitorPort = true;
  478. }
  479. if (b->LimitBroadcast == false)
  480. {
  481. // Disable broadcast limiter
  482. policy->NoBroadcastLimiter = true;
  483. }
  484. // Start thread
  485. t = NewThread(BrBridgeThread, b);
  486. WaitThreadInit(t);
  487. ReleaseThread(t);
  488. return b;
  489. }
  490. // Developed by SoftEther VPN Project at University of Tsukuba in Japan.
  491. // Department of Computer Science has dozens of overly-enthusiastic geeks.
  492. // Join us: http://www.tsukuba.ac.jp/english/admission/