Compare commits
8 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
8fa2322314 | ||
|
|
8982f27220 | ||
|
|
a5f97fcc8c | ||
|
|
35a9bf27df | ||
|
|
ba0af8cc20 | ||
|
|
ec85be5c6a | ||
|
|
fe989851ab | ||
|
|
46842dd200 |
2
LICENSE
2
LICENSE
@@ -1,4 +1,4 @@
|
||||
Copyright (c) 2015, angt
|
||||
Copyright (c) 2015-2016, angt
|
||||
All rights reserved.
|
||||
|
||||
Redistribution and use in source and binary forms, with or without
|
||||
|
||||
@@ -18,7 +18,8 @@ glorytun_SOURCES = \
|
||||
src/db.h
|
||||
|
||||
EXTRA_DIST = \
|
||||
LICENSE \
|
||||
README.md \
|
||||
autogen.sh \
|
||||
version.sh
|
||||
LICENSE \
|
||||
README.md \
|
||||
VERSION \
|
||||
autogen.sh \
|
||||
version.sh
|
||||
|
||||
@@ -4,6 +4,7 @@ AC_INIT([glorytun],
|
||||
[https://github.com/angt/glorytun/issues],
|
||||
[glorytun],
|
||||
[https://github.com/angt/glorytun])
|
||||
AC_DEFINE_UNQUOTED([VERSION_MAJOR], [m4_esyscmd([./version.sh major])])
|
||||
AC_CONFIG_SRCDIR([src/common.h])
|
||||
AC_CONFIG_AUX_DIR([build-aux])
|
||||
AC_CONFIG_MACRO_DIR([m4])
|
||||
|
||||
88
src/main.c
88
src/main.c
@@ -43,9 +43,6 @@
|
||||
#define GT_TUNR_SIZE (0x7FFF-16)
|
||||
#define GT_TUNW_SIZE (0x7FFF)
|
||||
|
||||
#define GT_STARTED "STARTED\n"
|
||||
#define GT_STOPPED "STOPPED\n"
|
||||
|
||||
struct fdbuf {
|
||||
int fd;
|
||||
buffer_t read;
|
||||
@@ -387,6 +384,11 @@ static ssize_t fd_write (int fd, const void *data, size_t size)
|
||||
return ret;
|
||||
}
|
||||
|
||||
static ssize_t fd_write_str (int fd, const char *str)
|
||||
{
|
||||
return fd_write(fd, str, str_len(str));
|
||||
}
|
||||
|
||||
static size_t fd_read_all (int fd, void *data, size_t size)
|
||||
{
|
||||
size_t done = 0;
|
||||
@@ -510,11 +512,37 @@ static int gt_decrypt (struct crypto_ctx *ctx, buffer_t *dst, buffer_t *src)
|
||||
return 0;
|
||||
}
|
||||
|
||||
static void gt_print_hdr (const int ip_version, uint8_t *data, size_t ip_size, const char *sockname)
|
||||
_pure_
|
||||
static inline uint32_t sum16 (uint32_t sum, const uint8_t *data, const size_t size)
|
||||
{
|
||||
const size_t lim = size&~1u;
|
||||
|
||||
for (size_t i=0; i<lim; i+=2)
|
||||
sum += (data[i]<<8)|data[i+1];
|
||||
|
||||
if (size&1)
|
||||
sum += data[size-1]<<8;
|
||||
|
||||
return sum;
|
||||
}
|
||||
|
||||
_const_
|
||||
static inline uint16_t sum16_final (uint32_t sum)
|
||||
{
|
||||
sum = (sum>>16)+(sum&0xFFFF);
|
||||
return ~(sum+(sum>>16));
|
||||
}
|
||||
|
||||
static void gt_print_hdr (const int ip_version, uint8_t *data, size_t ip_size)
|
||||
{
|
||||
const ssize_t ip_proto = ip_get_proto(ip_version, data, ip_size);
|
||||
const ssize_t ip_hdr_size = ip_get_hdr_size(ip_version, data, ip_size);
|
||||
|
||||
if (ip_proto<0 || ip_hdr_size<=0)
|
||||
return;
|
||||
|
||||
uint32_t sum = (size_t)ip_proto+ip_size-(size_t)ip_hdr_size;
|
||||
|
||||
char ip_src[INET6_ADDRSTRLEN];
|
||||
char ip_dst[INET6_ADDRSTRLEN];
|
||||
|
||||
@@ -522,40 +550,45 @@ static void gt_print_hdr (const int ip_version, uint8_t *data, size_t ip_size, c
|
||||
case 4:
|
||||
inet_ntop(AF_INET, &data[12], ip_src, sizeof(ip_src));
|
||||
inet_ntop(AF_INET, &data[16], ip_dst, sizeof(ip_dst));
|
||||
sum = sum16(sum, &data[12], 2*4);
|
||||
break;
|
||||
case 6:
|
||||
inet_ntop(AF_INET6, &data[9], ip_src, sizeof(ip_src));
|
||||
inet_ntop(AF_INET6, &data[25], ip_dst, sizeof(ip_dst));
|
||||
sum = sum16(sum, &data[9], 2*16); // XXX
|
||||
break;
|
||||
}
|
||||
|
||||
gt_log("%s: version=%i size=%zi proto=%zi src=%s dst=%s\n", sockname, ip_version, ip_size, ip_proto, ip_src, ip_dst);
|
||||
|
||||
if (ip_hdr_size<=0)
|
||||
return;
|
||||
|
||||
if (ip_proto==6) {
|
||||
if (ip_proto==IPPROTO_TCP) {
|
||||
struct tcphdr tcp;
|
||||
|
||||
byte_cpy(&tcp, &data[ip_hdr_size], sizeof(tcp));
|
||||
|
||||
uint16_t tcp_sum = ntohs(tcp.th_sum);
|
||||
tcp.th_sum = 0;
|
||||
|
||||
sum = sum16(sum, (uint8_t *)&tcp, sizeof(tcp));
|
||||
sum = sum16(sum, &data[ip_hdr_size+sizeof(tcp)], ip_size-ip_hdr_size-sizeof(tcp));
|
||||
uint16_t computed_sum = sum16_final(sum);
|
||||
|
||||
tcp.th_sport = ntohs(tcp.th_sport);
|
||||
tcp.th_dport = ntohs(tcp.th_dport);
|
||||
tcp.th_seq = ntohl(tcp.th_seq);
|
||||
tcp.th_ack = ntohl(tcp.th_ack);
|
||||
tcp.th_win = ntohs(tcp.th_win);
|
||||
|
||||
gt_log("%s: tcp src=%u dst=%u seq=%u ack=%u win=%u %c%c%c%c%c%c\n",
|
||||
sockname, tcp.th_sport, tcp.th_dport, tcp.th_seq, tcp.th_ack, tcp.th_win,
|
||||
gt_print("proto:%zi\tsrc:%s.%u\tdst:%s.%u\tseq:%u\tack:%u\twin:%u\tsize:%zu\tflags:%c%c%c%c%c%c\tsum:%i\n",
|
||||
ip_proto, ip_src, tcp.th_sport, ip_dst, tcp.th_dport,
|
||||
tcp.th_seq, tcp.th_ack, tcp.th_win, ip_size-ip_hdr_size+tcp.th_off*4,
|
||||
(tcp.th_flags&TH_FIN) ?'F':'.',
|
||||
(tcp.th_flags&TH_SYN) ?'S':'.',
|
||||
(tcp.th_flags&TH_RST) ?'R':'.',
|
||||
(tcp.th_flags&TH_PUSH)?'P':'.',
|
||||
(tcp.th_flags&TH_ACK) ?'A':'.',
|
||||
(tcp.th_flags&TH_URG) ?'U':'.');
|
||||
}
|
||||
(tcp.th_flags&TH_URG) ?'U':'.',
|
||||
(computed_sum==tcp_sum));
|
||||
|
||||
if (ip_proto==17) {
|
||||
} else if (ip_proto==IPPROTO_UDP) {
|
||||
struct udphdr udp;
|
||||
|
||||
byte_cpy(&udp, &data[ip_hdr_size], sizeof(udp));
|
||||
@@ -564,8 +597,11 @@ static void gt_print_hdr (const int ip_version, uint8_t *data, size_t ip_size, c
|
||||
udp.uh_dport = ntohs(udp.uh_dport);
|
||||
udp.uh_ulen = ntohs(udp.uh_ulen);
|
||||
|
||||
gt_log("%s: udp src=%u dst=%u len=%u\n",
|
||||
sockname, udp.uh_sport, udp.uh_dport, udp.uh_ulen);
|
||||
gt_print("proto:%zi\tsrc:%s.%u\tdst:%s.%u\tsize:%u\n",
|
||||
ip_proto, ip_src, udp.uh_sport, ip_dst, udp.uh_dport, udp.uh_ulen-8);
|
||||
} else {
|
||||
gt_print("proto:%zi\tsrc:%s\tdst:%s\tsize:%zu\n",
|
||||
ip_proto, ip_src, ip_dst, ip_size);
|
||||
}
|
||||
}
|
||||
|
||||
@@ -615,6 +651,8 @@ static int gt_setup_secretkey (struct crypto_ctx *ctx, char *keyfile)
|
||||
|
||||
static int gt_setup_crypto (struct crypto_ctx *ctx, int fd, int listener)
|
||||
{
|
||||
const uint8_t gt[] = {'G', 'T', VERSION_MAJOR, 0 };
|
||||
|
||||
const size_t size = 96;
|
||||
const size_t hash_size = 32;
|
||||
|
||||
@@ -637,7 +675,7 @@ static int gt_setup_crypto (struct crypto_ctx *ctx, int fd, int listener)
|
||||
randombytes_buf(secret, sizeof(secret));
|
||||
crypto_scalarmult_base(&data_w[nonce_size], secret);
|
||||
|
||||
byte_cpy(&data_w[size-hash_size-4], "GT\0\0", 4);
|
||||
byte_cpy(&data_w[size-hash_size-sizeof(gt)], gt, sizeof(gt));
|
||||
|
||||
crypto_generichash(&data_w[size-hash_size], hash_size,
|
||||
data_w, size-hash_size, ctx->skey, sizeof(ctx->skey));
|
||||
@@ -648,7 +686,7 @@ static int gt_setup_crypto (struct crypto_ctx *ctx, int fd, int listener)
|
||||
if (fd_read_all(fd, data_r, size)!=size)
|
||||
return -1;
|
||||
|
||||
if (memcmp(&data_r[size-hash_size-4], &data_w[size-hash_size-4], 4))
|
||||
if (memcmp(&data_r[size-hash_size-sizeof(gt)], gt, sizeof(gt)))
|
||||
return -2;
|
||||
|
||||
crypto_generichash(hash, hash_size,
|
||||
@@ -890,6 +928,8 @@ int main (int argc, char **argv)
|
||||
|
||||
long retry = 0;
|
||||
|
||||
fd_write_str(state_fd, "INITIALIZED\n");
|
||||
|
||||
while (!gt_close) {
|
||||
if (retry_count>=0 && retry>=retry_count+1) {
|
||||
gt_log("couldn't %s (%d attempt%s)\n", listener?"listen":"connect",
|
||||
@@ -955,7 +995,7 @@ int main (int argc, char **argv)
|
||||
|
||||
retry = 0;
|
||||
|
||||
fd_write(state_fd, GT_STARTED, sizeof(GT_STARTED)-1);
|
||||
fd_write_str(state_fd, "STARTED\n");
|
||||
|
||||
fd_set rfds;
|
||||
FD_ZERO(&rfds);
|
||||
@@ -1029,7 +1069,7 @@ int main (int argc, char **argv)
|
||||
}
|
||||
|
||||
if _0_(debug)
|
||||
gt_print_hdr(ip_version, data, ip_size, sockname);
|
||||
gt_print_hdr(ip_version, data, ip_size);
|
||||
|
||||
blks[blk_write++].size = r;
|
||||
blk_count++;
|
||||
@@ -1119,6 +1159,8 @@ int main (int argc, char **argv)
|
||||
ssize_t r = tun_write(tun.fd, tun.write.read, ip_size);
|
||||
|
||||
if (r>0) {
|
||||
if _0_(debug)
|
||||
gt_print_hdr(ip_version, tun.write.read, ip_size);
|
||||
tun.write.read += r;
|
||||
} else {
|
||||
gt_close |= !r;
|
||||
@@ -1128,8 +1170,6 @@ int main (int argc, char **argv)
|
||||
}
|
||||
|
||||
restart:
|
||||
fd_write(state_fd, GT_STOPPED, sizeof(GT_STOPPED)-1);
|
||||
|
||||
if (sockname) {
|
||||
free(sockname);
|
||||
sockname = NULL;
|
||||
@@ -1139,6 +1179,8 @@ int main (int argc, char **argv)
|
||||
close(sock.fd);
|
||||
sock.fd = -1;
|
||||
}
|
||||
|
||||
fd_write_str(state_fd, "STOPPED\n");
|
||||
}
|
||||
|
||||
freeaddrinfo(ai);
|
||||
|
||||
10
version.sh
10
version.sh
@@ -3,7 +3,11 @@
|
||||
[ -z "${VERSION}" ] && VERSION=`git describe --tags --always 2>/dev/null` \
|
||||
&& VERSION=${VERSION#v}
|
||||
|
||||
[ -z "${VERSION}" ] && VERSION=`basename \`pwd\`` \
|
||||
&& VERSION=${VERSION#*-}
|
||||
[ -z "${VERSION}" ] && VERSION=`cat VERSION 2>/dev/null`
|
||||
|
||||
printf ${VERSION}
|
||||
[ -z "${VERSION}" ] && VERSION=0.0.0
|
||||
|
||||
[ "$1" = "major" ] && printf ${VERSION%%.*} \
|
||||
&& exit 0
|
||||
|
||||
printf ${VERSION} | tee VERSION
|
||||
|
||||
Reference in New Issue
Block a user