Blame pcap-dbus.c

Packit 209cc3
/*
Packit 209cc3
 * Copyright (c) 2012 Jakub Zawadzki
Packit 209cc3
 * All rights reserved.
Packit 209cc3
 *
Packit 209cc3
 * Redistribution and use in source and binary forms, with or without
Packit 209cc3
 * modification, are permitted provided that the following conditions
Packit 209cc3
 * are met:
Packit 209cc3
 *
Packit 209cc3
 * 1. Redistributions of source code must retain the above copyright
Packit 209cc3
 * notice, this list of conditions and the following disclaimer.
Packit 209cc3
 * 2. Redistributions in binary form must reproduce the above copyright
Packit 209cc3
 * notice, this list of conditions and the following disclaimer in the
Packit 209cc3
 * documentation and/or other materials provided with the distribution.
Packit 209cc3
 * 3. The name of the author may not be used to endorse or promote
Packit 209cc3
 * products derived from this software without specific prior written
Packit 209cc3
 * permission.
Packit 209cc3
 *
Packit 209cc3
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
Packit 209cc3
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
Packit 209cc3
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
Packit 209cc3
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
Packit 209cc3
 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
Packit 209cc3
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
Packit 209cc3
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
Packit 209cc3
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
Packit 209cc3
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
Packit 209cc3
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
Packit 209cc3
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Packit 209cc3
 */
Packit 209cc3
Packit 209cc3
#ifdef HAVE_CONFIG_H
Packit 209cc3
#include <config.h>
Packit 209cc3
#endif
Packit 209cc3
Packit 209cc3
#include <string.h>
Packit 209cc3
Packit 209cc3
#include <time.h>
Packit 209cc3
#include <sys/time.h>
Packit 209cc3
Packit 209cc3
#include <dbus/dbus.h>
Packit 209cc3
Packit 209cc3
#include "pcap-int.h"
Packit 209cc3
#include "pcap-dbus.h"
Packit 209cc3
Packit 209cc3
/*
Packit 209cc3
 * Private data for capturing on D-Bus.
Packit 209cc3
 */
Packit 209cc3
struct pcap_dbus {
Packit 209cc3
	DBusConnection *conn;
Packit 209cc3
	u_int	packets_read;	/* count of packets read */
Packit 209cc3
};
Packit 209cc3
Packit 209cc3
static int
Packit 209cc3
dbus_read(pcap_t *handle, int max_packets _U_, pcap_handler callback, u_char *user)
Packit 209cc3
{
Packit 209cc3
	struct pcap_dbus *handlep = handle->priv;
Packit 209cc3
Packit 209cc3
	struct pcap_pkthdr pkth;
Packit 209cc3
	DBusMessage *message;
Packit 209cc3
Packit 209cc3
	char *raw_msg;
Packit 209cc3
	int raw_msg_len;
Packit 209cc3
Packit 209cc3
	int count = 0;
Packit 209cc3
Packit 209cc3
	message = dbus_connection_pop_message(handlep->conn);
Packit 209cc3
Packit 209cc3
	while (!message) {
Packit 209cc3
		/* XXX handle->opt.timeout = timeout_ms; */
Packit 209cc3
		if (!dbus_connection_read_write(handlep->conn, 100)) {
Packit 209cc3
			pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Connection closed");
Packit 209cc3
			return -1;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
		if (handle->break_loop) {
Packit 209cc3
			handle->break_loop = 0;
Packit 209cc3
			return -2;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
		message = dbus_connection_pop_message(handlep->conn);
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	if (dbus_message_is_signal(message, DBUS_INTERFACE_LOCAL, "Disconnected")) {
Packit 209cc3
		pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Disconnected");
Packit 209cc3
		return -1;
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	if (dbus_message_marshal(message, &raw_msg, &raw_msg_len)) {
Packit 209cc3
		pkth.caplen = pkth.len = raw_msg_len;
Packit 209cc3
		/* pkth.caplen = min (payload_len, handle->snapshot); */
Packit 209cc3
Packit 209cc3
		gettimeofday(&pkth.ts, NULL);
Packit 209cc3
		if (handle->fcode.bf_insns == NULL ||
Packit 209cc3
		    bpf_filter(handle->fcode.bf_insns, (u_char *)raw_msg, pkth.len, pkth.caplen)) {
Packit 209cc3
			handlep->packets_read++;
Packit 209cc3
			callback(user, &pkth, (u_char *)raw_msg);
Packit 209cc3
			count++;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
		dbus_free(raw_msg);
Packit 209cc3
	}
Packit 209cc3
	return count;
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
static int
Packit 209cc3
dbus_write(pcap_t *handle, const void *buf, size_t size)
Packit 209cc3
{
Packit 209cc3
	/* XXX, not tested */
Packit 209cc3
	struct pcap_dbus *handlep = handle->priv;
Packit 209cc3
Packit 209cc3
	DBusError error = DBUS_ERROR_INIT;
Packit 209cc3
	DBusMessage *msg;
Packit 209cc3
Packit 209cc3
	if (!(msg = dbus_message_demarshal(buf, size, &error))) {
Packit 209cc3
		pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "dbus_message_demarshal() failed: %s", error.message);
Packit 209cc3
		dbus_error_free(&error);
Packit 209cc3
		return -1;
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	dbus_connection_send(handlep->conn, msg, NULL);
Packit 209cc3
	dbus_connection_flush(handlep->conn);
Packit 209cc3
Packit 209cc3
	dbus_message_unref(msg);
Packit 209cc3
	return 0;
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
static int
Packit 209cc3
dbus_stats(pcap_t *handle, struct pcap_stat *stats)
Packit 209cc3
{
Packit 209cc3
	struct pcap_dbus *handlep = handle->priv;
Packit 209cc3
Packit 209cc3
	stats->ps_recv = handlep->packets_read;
Packit 209cc3
	stats->ps_drop = 0;
Packit 209cc3
	stats->ps_ifdrop = 0;
Packit 209cc3
	return 0;
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
static void
Packit 209cc3
dbus_cleanup(pcap_t *handle)
Packit 209cc3
{
Packit 209cc3
	struct pcap_dbus *handlep = handle->priv;
Packit 209cc3
Packit 209cc3
	dbus_connection_unref(handlep->conn);
Packit 209cc3
Packit 209cc3
	pcap_cleanup_live_common(handle);
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
/*
Packit 209cc3
 * We don't support non-blocking mode.  I'm not sure what we'd
Packit 209cc3
 * do to support it and, given that we don't support select()/
Packit 209cc3
 * poll()/epoll_wait()/kevent() etc., it probably doesn't
Packit 209cc3
 * matter.
Packit 209cc3
 */
Packit 209cc3
static int
Packit 209cc3
dbus_getnonblock(pcap_t *p)
Packit 209cc3
{
Packit 209cc3
	pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
Packit 209cc3
	    "Non-blocking mode isn't supported for capturing on D-Bus");
Packit 209cc3
	return (-1);
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
static int
Packit 209cc3
dbus_setnonblock(pcap_t *p, int nonblock _U_)
Packit 209cc3
{
Packit 209cc3
	pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
Packit 209cc3
	    "Non-blocking mode isn't supported for capturing on D-Bus");
Packit 209cc3
	return (-1);
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
static int
Packit 209cc3
dbus_activate(pcap_t *handle)
Packit 209cc3
{
Packit 209cc3
#define EAVESDROPPING_RULE "eavesdrop=true,"
Packit 209cc3
Packit 209cc3
	static const char *rules[] = {
Packit 209cc3
		EAVESDROPPING_RULE "type='signal'",
Packit 209cc3
		EAVESDROPPING_RULE "type='method_call'",
Packit 209cc3
		EAVESDROPPING_RULE "type='method_return'",
Packit 209cc3
		EAVESDROPPING_RULE "type='error'",
Packit 209cc3
	};
Packit 209cc3
Packit 209cc3
	#define N_RULES sizeof(rules)/sizeof(rules[0])
Packit 209cc3
Packit 209cc3
	struct pcap_dbus *handlep = handle->priv;
Packit 209cc3
	const char *dev = handle->opt.device;
Packit 209cc3
Packit 209cc3
	DBusError error = DBUS_ERROR_INIT;
Packit 209cc3
	u_int i;
Packit 209cc3
Packit 209cc3
	if (strcmp(dev, "dbus-system") == 0) {
Packit 209cc3
		if (!(handlep->conn = dbus_bus_get(DBUS_BUS_SYSTEM, &error))) {
Packit 209cc3
			pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Failed to get system bus: %s", error.message);
Packit 209cc3
			dbus_error_free(&error);
Packit 209cc3
			return PCAP_ERROR;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
	} else if (strcmp(dev, "dbus-session") == 0) {
Packit 209cc3
		if (!(handlep->conn = dbus_bus_get(DBUS_BUS_SESSION, &error))) {
Packit 209cc3
			pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Failed to get session bus: %s", error.message);
Packit 209cc3
			dbus_error_free(&error);
Packit 209cc3
			return PCAP_ERROR;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
	} else if (strncmp(dev, "dbus://", 7) == 0) {
Packit 209cc3
		const char *addr = dev + 7;
Packit 209cc3
Packit 209cc3
		if (!(handlep->conn = dbus_connection_open(addr, &error))) {
Packit 209cc3
			pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Failed to open connection to: %s: %s", addr, error.message);
Packit 209cc3
			dbus_error_free(&error);
Packit 209cc3
			return PCAP_ERROR;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
		if (!dbus_bus_register(handlep->conn, &error)) {
Packit 209cc3
			pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Failed to register bus %s: %s\n", addr, error.message);
Packit 209cc3
			dbus_error_free(&error);
Packit 209cc3
			return PCAP_ERROR;
Packit 209cc3
		}
Packit 209cc3
Packit 209cc3
	} else {
Packit 209cc3
		pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Can't get bus address from %s", handle->opt.device);
Packit 209cc3
		return PCAP_ERROR;
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	/* Initialize some components of the pcap structure. */
Packit 209cc3
	handle->bufsize = 0;
Packit 209cc3
	handle->offset = 0;
Packit 209cc3
	handle->linktype = DLT_DBUS;
Packit 209cc3
	handle->read_op = dbus_read;
Packit 209cc3
	handle->inject_op = dbus_write;
Packit 209cc3
	handle->setfilter_op = install_bpf_program; /* XXX, later add support for dbus_bus_add_match() */
Packit 209cc3
	handle->setdirection_op = NULL;
Packit 209cc3
	handle->set_datalink_op = NULL;      /* can't change data link type */
Packit 209cc3
	handle->getnonblock_op = dbus_getnonblock;
Packit 209cc3
	handle->setnonblock_op = dbus_setnonblock;
Packit 209cc3
	handle->stats_op = dbus_stats;
Packit 209cc3
	handle->cleanup_op = dbus_cleanup;
Packit 209cc3
Packit 209cc3
#ifndef _WIN32
Packit 209cc3
	/*
Packit 209cc3
	 * Unfortunately, trying to do a select()/poll()/epoll_wait()/
Packit 209cc3
	 * kevent()/etc. on a D-Bus connection isn't a simple
Packit 209cc3
	 * case of "give me an FD on which to wait".
Packit 209cc3
	 *
Packit 209cc3
	 * Apparently, you have to register "add watch", "remove watch",
Packit 209cc3
	 * and "toggle watch" functions with
Packit 209cc3
	 * dbus_connection_set_watch_functions(),
Packit 209cc3
	 * keep a *set* of FDs, add to that set in the "add watch"
Packit 209cc3
	 * function, subtract from it in the "remove watch" function,
Packit 209cc3
	 * and either add to or subtract from that set in the "toggle
Packit 209cc3
	 * watch" function, and do the wait on *all* of the FDs in the
Packit 209cc3
	 * set.  (Yes, you need the "toggle watch" function, so that
Packit 209cc3
	 * the main loop doesn't itself need to check for whether
Packit 209cc3
	 * a given watch is enabled or disabled - most libpcap programs
Packit 209cc3
	 * know nothing about D-Bus and shouldn't *have* to know anything
Packit 209cc3
	 * about D-Bus other than how to decode D-Bus messages.)
Packit 209cc3
	 *
Packit 209cc3
	 * Implementing that would require considerable changes in
Packit 209cc3
	 * the way libpcap exports "selectable FDs" to its client.
Packit 209cc3
	 * Until that's done, we just say "you can't do that".
Packit 209cc3
	 */
Packit 209cc3
	handle->selectable_fd = handle->fd = -1;
Packit 209cc3
#endif
Packit 209cc3
Packit 209cc3
	if (handle->opt.rfmon) {
Packit 209cc3
		/*
Packit 209cc3
		 * Monitor mode doesn't apply to dbus connections.
Packit 209cc3
		 */
Packit 209cc3
		dbus_cleanup(handle);
Packit 209cc3
		return PCAP_ERROR_RFMON_NOTSUP;
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	/*
Packit 209cc3
	 * Turn a negative snapshot value (invalid), a snapshot value of
Packit 209cc3
	 * 0 (unspecified), or a value bigger than the normal maximum
Packit 209cc3
	 * value, into the maximum message length for D-Bus (128MB).
Packit 209cc3
	 */
Packit 209cc3
	if (handle->snapshot <= 0 || handle->snapshot > 134217728)
Packit 209cc3
		handle->snapshot = 134217728;
Packit 209cc3
Packit 209cc3
	/* dbus_connection_set_max_message_size(handlep->conn, handle->snapshot); */
Packit 209cc3
	if (handle->opt.buffer_size != 0)
Packit 209cc3
		dbus_connection_set_max_received_size(handlep->conn, handle->opt.buffer_size);
Packit 209cc3
Packit 209cc3
	for (i = 0; i < N_RULES; i++) {
Packit 209cc3
		dbus_bus_add_match(handlep->conn, rules[i], &error);
Packit 209cc3
		if (dbus_error_is_set(&error)) {
Packit 209cc3
			dbus_error_free(&error);
Packit 209cc3
Packit 209cc3
			/* try without eavesdrop */
Packit 209cc3
			dbus_bus_add_match(handlep->conn, rules[i] + strlen(EAVESDROPPING_RULE), &error);
Packit 209cc3
			if (dbus_error_is_set(&error)) {
Packit 209cc3
				pcap_snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "Failed to add bus match: %s\n", error.message);
Packit 209cc3
				dbus_error_free(&error);
Packit 209cc3
				dbus_cleanup(handle);
Packit 209cc3
				return PCAP_ERROR;
Packit 209cc3
			}
Packit 209cc3
		}
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	return 0;
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
pcap_t *
Packit 209cc3
dbus_create(const char *device, char *ebuf, int *is_ours)
Packit 209cc3
{
Packit 209cc3
	pcap_t *p;
Packit 209cc3
Packit 209cc3
	if (strcmp(device, "dbus-system") &&
Packit 209cc3
		strcmp(device, "dbus-session") &&
Packit 209cc3
		strncmp(device, "dbus://", 7))
Packit 209cc3
	{
Packit 209cc3
		*is_ours = 0;
Packit 209cc3
		return NULL;
Packit 209cc3
	}
Packit 209cc3
Packit 209cc3
	*is_ours = 1;
Packit 209cc3
	p = pcap_create_common(ebuf, sizeof (struct pcap_dbus));
Packit 209cc3
	if (p == NULL)
Packit 209cc3
		return (NULL);
Packit 209cc3
Packit 209cc3
	p->activate_op = dbus_activate;
Packit 209cc3
	/*
Packit 209cc3
	 * Set these up front, so that, even if our client tries
Packit 209cc3
	 * to set non-blocking mode before we're activated, or
Packit 209cc3
	 * query the state of non-blocking mode, they get an error,
Packit 209cc3
	 * rather than having the non-blocking mode option set
Packit 209cc3
	 * for use later.
Packit 209cc3
	 */
Packit 209cc3
	p->getnonblock_op = dbus_getnonblock;
Packit 209cc3
	p->setnonblock_op = dbus_setnonblock;
Packit 209cc3
	return (p);
Packit 209cc3
}
Packit 209cc3
Packit 209cc3
int
Packit 209cc3
dbus_findalldevs(pcap_if_list_t *devlistp, char *err_str)
Packit 209cc3
{
Packit 209cc3
	/*
Packit 209cc3
	 * The notion of "connected" vs. "disconnected" doesn't apply.
Packit 209cc3
	 * XXX - what about the notions of "up" and "running"?
Packit 209cc3
	 */
Packit 209cc3
	if (add_dev(devlistp, "dbus-system",
Packit 209cc3
	    PCAP_IF_CONNECTION_STATUS_NOT_APPLICABLE, "D-Bus system bus",
Packit 209cc3
	    err_str) == NULL)
Packit 209cc3
		return -1;
Packit 209cc3
	if (add_dev(devlistp, "dbus-session",
Packit 209cc3
	    PCAP_IF_CONNECTION_STATUS_NOT_APPLICABLE, "D-Bus session bus",
Packit 209cc3
	    err_str) == NULL)
Packit 209cc3
		return -1;
Packit 209cc3
	return 0;
Packit 209cc3
}
Packit 209cc3