1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25#include "qemu/osdep.h"
26#include "qemu/log.h"
27#include "net/slirp.h"
28
29
30#ifndef _WIN32
31#include <pwd.h>
32#include <sys/wait.h>
33#endif
34#include "net/net.h"
35#include "clients.h"
36#include "hub.h"
37#include "monitor/monitor.h"
38#include "qemu/error-report.h"
39#include "qemu/sockets.h"
40#include <libslirp.h>
41#include "chardev/char-fe.h"
42#include "sysemu/sysemu.h"
43#include "qemu/cutils.h"
44#include "qapi/error.h"
45#include "qapi/qmp/qdict.h"
46#include "util.h"
47#include "migration/register.h"
48#include "migration/qemu-file-types.h"
49
50static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
51{
52 const char *p, *p1;
53 int len;
54 p = *pp;
55 p1 = strchr(p, sep);
56 if (!p1)
57 return -1;
58 len = p1 - p;
59 p1++;
60 if (buf_size > 0) {
61 if (len > buf_size - 1)
62 len = buf_size - 1;
63 memcpy(buf, p, len);
64 buf[len] = '\0';
65 }
66 *pp = p1;
67 return 0;
68}
69
70
71
72#define SLIRP_CFG_HOSTFWD 1
73
74struct slirp_config_str {
75 struct slirp_config_str *next;
76 int flags;
77 char str[1024];
78};
79
80struct GuestFwd {
81 CharBackend hd;
82 struct in_addr server;
83 int port;
84 Slirp *slirp;
85};
86
87typedef struct SlirpState {
88 NetClientState nc;
89 QTAILQ_ENTRY(SlirpState) entry;
90 Slirp *slirp;
91 Notifier poll_notifier;
92 Notifier exit_notifier;
93#ifndef _WIN32
94 gchar *smb_dir;
95#endif
96 GSList *fwd;
97} SlirpState;
98
99static struct slirp_config_str *slirp_configs;
100static QTAILQ_HEAD(, SlirpState) slirp_stacks =
101 QTAILQ_HEAD_INITIALIZER(slirp_stacks);
102
103static int slirp_hostfwd(SlirpState *s, const char *redir_str, Error **errp);
104static int slirp_guestfwd(SlirpState *s, const char *config_str, Error **errp);
105
106#ifndef _WIN32
107static int slirp_smb(SlirpState *s, const char *exported_dir,
108 struct in_addr vserver_addr, Error **errp);
109static void slirp_smb_cleanup(SlirpState *s);
110#else
111static inline void slirp_smb_cleanup(SlirpState *s) { }
112#endif
113
114static ssize_t net_slirp_send_packet(const void *pkt, size_t pkt_len,
115 void *opaque)
116{
117 SlirpState *s = opaque;
118
119 return qemu_send_packet(&s->nc, pkt, pkt_len);
120}
121
122static ssize_t net_slirp_receive(NetClientState *nc, const uint8_t *buf, size_t size)
123{
124 SlirpState *s = DO_UPCAST(SlirpState, nc, nc);
125
126 slirp_input(s->slirp, buf, size);
127
128 return size;
129}
130
131static void slirp_smb_exit(Notifier *n, void *data)
132{
133 SlirpState *s = container_of(n, SlirpState, exit_notifier);
134 slirp_smb_cleanup(s);
135}
136
137static void slirp_free_fwd(gpointer data)
138{
139 struct GuestFwd *fwd = data;
140
141 qemu_chr_fe_deinit(&fwd->hd, true);
142 g_free(data);
143}
144
145static void net_slirp_cleanup(NetClientState *nc)
146{
147 SlirpState *s = DO_UPCAST(SlirpState, nc, nc);
148
149 g_slist_free_full(s->fwd, slirp_free_fwd);
150 main_loop_poll_remove_notifier(&s->poll_notifier);
151 unregister_savevm(NULL, "slirp", s->slirp);
152 slirp_cleanup(s->slirp);
153 if (s->exit_notifier.notify) {
154 qemu_remove_exit_notifier(&s->exit_notifier);
155 }
156 slirp_smb_cleanup(s);
157 QTAILQ_REMOVE(&slirp_stacks, s, entry);
158}
159
160static NetClientInfo net_slirp_info = {
161 .type = NET_CLIENT_DRIVER_USER,
162 .size = sizeof(SlirpState),
163 .receive = net_slirp_receive,
164 .cleanup = net_slirp_cleanup,
165};
166
167static void net_slirp_guest_error(const char *msg, void *opaque)
168{
169 qemu_log_mask(LOG_GUEST_ERROR, "%s", msg);
170}
171
172static int64_t net_slirp_clock_get_ns(void *opaque)
173{
174 return qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
175}
176
177static void *net_slirp_timer_new(SlirpTimerCb cb,
178 void *cb_opaque, void *opaque)
179{
180 return timer_new_full(NULL, QEMU_CLOCK_VIRTUAL,
181 SCALE_MS, QEMU_TIMER_ATTR_EXTERNAL,
182 cb, cb_opaque);
183}
184
185static void net_slirp_timer_free(void *timer, void *opaque)
186{
187 timer_del(timer);
188 timer_free(timer);
189}
190
191static void net_slirp_timer_mod(void *timer, int64_t expire_timer,
192 void *opaque)
193{
194 timer_mod(timer, expire_timer);
195}
196
197static void net_slirp_register_poll_fd(int fd, void *opaque)
198{
199 qemu_fd_register(fd);
200}
201
202static void net_slirp_unregister_poll_fd(int fd, void *opaque)
203{
204
205}
206
207static void net_slirp_notify(void *opaque)
208{
209 qemu_notify_event();
210}
211
212static const SlirpCb slirp_cb = {
213 .send_packet = net_slirp_send_packet,
214 .guest_error = net_slirp_guest_error,
215 .clock_get_ns = net_slirp_clock_get_ns,
216 .timer_new = net_slirp_timer_new,
217 .timer_free = net_slirp_timer_free,
218 .timer_mod = net_slirp_timer_mod,
219 .register_poll_fd = net_slirp_register_poll_fd,
220 .unregister_poll_fd = net_slirp_unregister_poll_fd,
221 .notify = net_slirp_notify,
222};
223
224static int slirp_poll_to_gio(int events)
225{
226 int ret = 0;
227
228 if (events & SLIRP_POLL_IN) {
229 ret |= G_IO_IN;
230 }
231 if (events & SLIRP_POLL_OUT) {
232 ret |= G_IO_OUT;
233 }
234 if (events & SLIRP_POLL_PRI) {
235 ret |= G_IO_PRI;
236 }
237 if (events & SLIRP_POLL_ERR) {
238 ret |= G_IO_ERR;
239 }
240 if (events & SLIRP_POLL_HUP) {
241 ret |= G_IO_HUP;
242 }
243
244 return ret;
245}
246
247static int net_slirp_add_poll(int fd, int events, void *opaque)
248{
249 GArray *pollfds = opaque;
250 GPollFD pfd = {
251 .fd = fd,
252 .events = slirp_poll_to_gio(events),
253 };
254 int idx = pollfds->len;
255 g_array_append_val(pollfds, pfd);
256 return idx;
257}
258
259static int slirp_gio_to_poll(int events)
260{
261 int ret = 0;
262
263 if (events & G_IO_IN) {
264 ret |= SLIRP_POLL_IN;
265 }
266 if (events & G_IO_OUT) {
267 ret |= SLIRP_POLL_OUT;
268 }
269 if (events & G_IO_PRI) {
270 ret |= SLIRP_POLL_PRI;
271 }
272 if (events & G_IO_ERR) {
273 ret |= SLIRP_POLL_ERR;
274 }
275 if (events & G_IO_HUP) {
276 ret |= SLIRP_POLL_HUP;
277 }
278
279 return ret;
280}
281
282static int net_slirp_get_revents(int idx, void *opaque)
283{
284 GArray *pollfds = opaque;
285
286 return slirp_gio_to_poll(g_array_index(pollfds, GPollFD, idx).revents);
287}
288
289static void net_slirp_poll_notify(Notifier *notifier, void *data)
290{
291 MainLoopPoll *poll = data;
292 SlirpState *s = container_of(notifier, SlirpState, poll_notifier);
293
294 switch (poll->state) {
295 case MAIN_LOOP_POLL_FILL:
296 slirp_pollfds_fill(s->slirp, &poll->timeout,
297 net_slirp_add_poll, poll->pollfds);
298 break;
299 case MAIN_LOOP_POLL_OK:
300 case MAIN_LOOP_POLL_ERR:
301 slirp_pollfds_poll(s->slirp, poll->state == MAIN_LOOP_POLL_ERR,
302 net_slirp_get_revents, poll->pollfds);
303 break;
304 default:
305 g_assert_not_reached();
306 }
307}
308
309static ssize_t
310net_slirp_stream_read(void *buf, size_t size, void *opaque)
311{
312 QEMUFile *f = opaque;
313
314 return qemu_get_buffer(f, buf, size);
315}
316
317static ssize_t
318net_slirp_stream_write(const void *buf, size_t size, void *opaque)
319{
320 QEMUFile *f = opaque;
321
322 qemu_put_buffer(f, buf, size);
323 if (qemu_file_get_error(f)) {
324 return -1;
325 }
326
327 return size;
328}
329
330static int net_slirp_state_load(QEMUFile *f, void *opaque, int version_id)
331{
332 Slirp *slirp = opaque;
333
334 return slirp_state_load(slirp, version_id, net_slirp_stream_read, f);
335}
336
337static void net_slirp_state_save(QEMUFile *f, void *opaque)
338{
339 Slirp *slirp = opaque;
340
341 slirp_state_save(slirp, net_slirp_stream_write, f);
342}
343
344static SaveVMHandlers savevm_slirp_state = {
345 .save_state = net_slirp_state_save,
346 .load_state = net_slirp_state_load,
347};
348
349static int net_slirp_init(NetClientState *peer, const char *model,
350 const char *name, int restricted,
351 bool ipv4, const char *vnetwork, const char *vhost,
352 bool ipv6, const char *vprefix6, int vprefix6_len,
353 const char *vhost6,
354 const char *vhostname, const char *tftp_export,
355 const char *bootfile, const char *vdhcp_start,
356 const char *vnameserver, const char *vnameserver6,
357 const char *smb_export, const char *vsmbserver,
358 const char **dnssearch, const char *vdomainname,
359 const char *tftp_server_name,
360 Error **errp)
361{
362
363 struct in_addr net = { .s_addr = htonl(0x0a000200) };
364 struct in_addr mask = { .s_addr = htonl(0xffffff00) };
365 struct in_addr host = { .s_addr = htonl(0x0a000202) };
366 struct in_addr dhcp = { .s_addr = htonl(0x0a00020f) };
367 struct in_addr dns = { .s_addr = htonl(0x0a000203) };
368 struct in6_addr ip6_prefix;
369 struct in6_addr ip6_host;
370 struct in6_addr ip6_dns;
371#ifndef _WIN32
372 struct in_addr smbsrv = { .s_addr = 0 };
373#endif
374 NetClientState *nc;
375 SlirpState *s;
376 char buf[20];
377 uint32_t addr;
378 int shift;
379 char *end;
380 struct slirp_config_str *config;
381
382 if (!ipv4 && (vnetwork || vhost || vnameserver)) {
383 error_setg(errp, "IPv4 disabled but netmask/host/dns provided");
384 return -1;
385 }
386
387 if (!ipv6 && (vprefix6 || vhost6 || vnameserver6)) {
388 error_setg(errp, "IPv6 disabled but prefix/host6/dns6 provided");
389 return -1;
390 }
391
392 if (!ipv4 && !ipv6) {
393
394 error_setg(errp, "IPv4 and IPv6 disabled");
395 return -1;
396 }
397
398 if (vnetwork) {
399 if (get_str_sep(buf, sizeof(buf), &vnetwork, '/') < 0) {
400 if (!inet_aton(vnetwork, &net)) {
401 error_setg(errp, "Failed to parse netmask");
402 return -1;
403 }
404 addr = ntohl(net.s_addr);
405 if (!(addr & 0x80000000)) {
406 mask.s_addr = htonl(0xff000000);
407 } else if ((addr & 0xfff00000) == 0xac100000) {
408 mask.s_addr = htonl(0xfff00000);
409 } else if ((addr & 0xc0000000) == 0x80000000) {
410 mask.s_addr = htonl(0xffff0000);
411 } else if ((addr & 0xffff0000) == 0xc0a80000) {
412 mask.s_addr = htonl(0xffff0000);
413 } else if ((addr & 0xffff0000) == 0xc6120000) {
414 mask.s_addr = htonl(0xfffe0000);
415 } else if ((addr & 0xe0000000) == 0xe0000000) {
416 mask.s_addr = htonl(0xffffff00);
417 } else {
418 mask.s_addr = htonl(0xfffffff0);
419 }
420 } else {
421 if (!inet_aton(buf, &net)) {
422 error_setg(errp, "Failed to parse netmask");
423 return -1;
424 }
425 shift = strtol(vnetwork, &end, 10);
426 if (*end != '\0') {
427 if (!inet_aton(vnetwork, &mask)) {
428 error_setg(errp,
429 "Failed to parse netmask (trailing chars)");
430 return -1;
431 }
432 } else if (shift < 4 || shift > 32) {
433 error_setg(errp,
434 "Invalid netmask provided (must be in range 4-32)");
435 return -1;
436 } else {
437 mask.s_addr = htonl(0xffffffff << (32 - shift));
438 }
439 }
440 net.s_addr &= mask.s_addr;
441 host.s_addr = net.s_addr | (htonl(0x0202) & ~mask.s_addr);
442 dhcp.s_addr = net.s_addr | (htonl(0x020f) & ~mask.s_addr);
443 dns.s_addr = net.s_addr | (htonl(0x0203) & ~mask.s_addr);
444 }
445
446 if (vhost && !inet_aton(vhost, &host)) {
447 error_setg(errp, "Failed to parse host");
448 return -1;
449 }
450 if ((host.s_addr & mask.s_addr) != net.s_addr) {
451 error_setg(errp, "Host doesn't belong to network");
452 return -1;
453 }
454
455 if (vnameserver && !inet_aton(vnameserver, &dns)) {
456 error_setg(errp, "Failed to parse DNS");
457 return -1;
458 }
459 if ((dns.s_addr & mask.s_addr) != net.s_addr) {
460 error_setg(errp, "DNS doesn't belong to network");
461 return -1;
462 }
463 if (dns.s_addr == host.s_addr) {
464 error_setg(errp, "DNS must be different from host");
465 return -1;
466 }
467
468 if (vdhcp_start && !inet_aton(vdhcp_start, &dhcp)) {
469 error_setg(errp, "Failed to parse DHCP start address");
470 return -1;
471 }
472 if ((dhcp.s_addr & mask.s_addr) != net.s_addr) {
473 error_setg(errp, "DHCP doesn't belong to network");
474 return -1;
475 }
476 if (dhcp.s_addr == host.s_addr || dhcp.s_addr == dns.s_addr) {
477 error_setg(errp, "DNS must be different from host and DNS");
478 return -1;
479 }
480
481#ifndef _WIN32
482 if (vsmbserver && !inet_aton(vsmbserver, &smbsrv)) {
483 error_setg(errp, "Failed to parse SMB address");
484 return -1;
485 }
486#endif
487
488 if (!vprefix6) {
489 vprefix6 = "fec0::";
490 }
491 if (!inet_pton(AF_INET6, vprefix6, &ip6_prefix)) {
492 error_setg(errp, "Failed to parse IPv6 prefix");
493 return -1;
494 }
495
496 if (!vprefix6_len) {
497 vprefix6_len = 64;
498 }
499 if (vprefix6_len < 0 || vprefix6_len > 126) {
500 error_setg(errp,
501 "Invalid IPv6 prefix provided "
502 "(IPv6 prefix length must be between 0 and 126)");
503 return -1;
504 }
505
506 if (vhost6) {
507 if (!inet_pton(AF_INET6, vhost6, &ip6_host)) {
508 error_setg(errp, "Failed to parse IPv6 host");
509 return -1;
510 }
511 if (!in6_equal_net(&ip6_prefix, &ip6_host, vprefix6_len)) {
512 error_setg(errp, "IPv6 Host doesn't belong to network");
513 return -1;
514 }
515 } else {
516 ip6_host = ip6_prefix;
517 ip6_host.s6_addr[15] |= 2;
518 }
519
520 if (vnameserver6) {
521 if (!inet_pton(AF_INET6, vnameserver6, &ip6_dns)) {
522 error_setg(errp, "Failed to parse IPv6 DNS");
523 return -1;
524 }
525 if (!in6_equal_net(&ip6_prefix, &ip6_dns, vprefix6_len)) {
526 error_setg(errp, "IPv6 DNS doesn't belong to network");
527 return -1;
528 }
529 } else {
530 ip6_dns = ip6_prefix;
531 ip6_dns.s6_addr[15] |= 3;
532 }
533
534 if (vdomainname && !*vdomainname) {
535 error_setg(errp, "'domainname' parameter cannot be empty");
536 return -1;
537 }
538
539 if (vdomainname && strlen(vdomainname) > 255) {
540 error_setg(errp, "'domainname' parameter cannot exceed 255 bytes");
541 return -1;
542 }
543
544 if (vhostname && strlen(vhostname) > 255) {
545 error_setg(errp, "'vhostname' parameter cannot exceed 255 bytes");
546 return -1;
547 }
548
549 if (tftp_server_name && strlen(tftp_server_name) > 255) {
550 error_setg(errp, "'tftp-server-name' parameter cannot exceed 255 bytes");
551 return -1;
552 }
553
554 nc = qemu_new_net_client(&net_slirp_info, peer, model, name);
555
556 snprintf(nc->info_str, sizeof(nc->info_str),
557 "net=%s,restrict=%s", inet_ntoa(net),
558 restricted ? "on" : "off");
559
560 s = DO_UPCAST(SlirpState, nc, nc);
561
562 s->slirp = slirp_init(restricted, ipv4, net, mask, host,
563 ipv6, ip6_prefix, vprefix6_len, ip6_host,
564 vhostname, tftp_server_name,
565 tftp_export, bootfile, dhcp,
566 dns, ip6_dns, dnssearch, vdomainname,
567 &slirp_cb, s);
568 QTAILQ_INSERT_TAIL(&slirp_stacks, s, entry);
569
570
571
572
573
574
575
576
577
578 g_assert(slirp_state_version() == 4);
579 register_savevm_live(NULL, "slirp", 0, slirp_state_version(),
580 &savevm_slirp_state, s->slirp);
581
582 s->poll_notifier.notify = net_slirp_poll_notify;
583 main_loop_poll_add_notifier(&s->poll_notifier);
584
585 for (config = slirp_configs; config; config = config->next) {
586 if (config->flags & SLIRP_CFG_HOSTFWD) {
587 if (slirp_hostfwd(s, config->str, errp) < 0) {
588 goto error;
589 }
590 } else {
591 if (slirp_guestfwd(s, config->str, errp) < 0) {
592 goto error;
593 }
594 }
595 }
596#ifndef _WIN32
597 if (smb_export) {
598 if (slirp_smb(s, smb_export, smbsrv, errp) < 0) {
599 goto error;
600 }
601 }
602#endif
603
604 s->exit_notifier.notify = slirp_smb_exit;
605 qemu_add_exit_notifier(&s->exit_notifier);
606 return 0;
607
608error:
609 qemu_del_net_client(nc);
610 return -1;
611}
612
613static SlirpState *slirp_lookup(Monitor *mon, const char *hub_id,
614 const char *name)
615{
616 if (name) {
617 NetClientState *nc;
618 if (hub_id) {
619 nc = net_hub_find_client_by_name(strtol(hub_id, NULL, 0), name);
620 if (!nc) {
621 monitor_printf(mon, "unrecognized (hub-id, stackname) pair\n");
622 return NULL;
623 }
624 warn_report("Using 'hub-id' is deprecated, specify the netdev id "
625 "directly instead");
626 } else {
627 nc = qemu_find_netdev(name);
628 if (!nc) {
629 monitor_printf(mon, "unrecognized netdev id '%s'\n", name);
630 return NULL;
631 }
632 }
633 if (strcmp(nc->model, "user")) {
634 monitor_printf(mon, "invalid device specified\n");
635 return NULL;
636 }
637 return DO_UPCAST(SlirpState, nc, nc);
638 } else {
639 if (QTAILQ_EMPTY(&slirp_stacks)) {
640 monitor_printf(mon, "user mode network stack not in use\n");
641 return NULL;
642 }
643 return QTAILQ_FIRST(&slirp_stacks);
644 }
645}
646
647void hmp_hostfwd_remove(Monitor *mon, const QDict *qdict)
648{
649 struct in_addr host_addr = { .s_addr = INADDR_ANY };
650 int host_port;
651 char buf[256];
652 const char *src_str, *p;
653 SlirpState *s;
654 int is_udp = 0;
655 int err;
656 const char *arg1 = qdict_get_str(qdict, "arg1");
657 const char *arg2 = qdict_get_try_str(qdict, "arg2");
658 const char *arg3 = qdict_get_try_str(qdict, "arg3");
659
660 if (arg3) {
661 s = slirp_lookup(mon, arg1, arg2);
662 src_str = arg3;
663 } else if (arg2) {
664 s = slirp_lookup(mon, NULL, arg1);
665 src_str = arg2;
666 } else {
667 s = slirp_lookup(mon, NULL, NULL);
668 src_str = arg1;
669 }
670 if (!s) {
671 return;
672 }
673
674 p = src_str;
675 if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
676 goto fail_syntax;
677 }
678
679 if (!strcmp(buf, "tcp") || buf[0] == '\0') {
680 is_udp = 0;
681 } else if (!strcmp(buf, "udp")) {
682 is_udp = 1;
683 } else {
684 goto fail_syntax;
685 }
686
687 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
688 goto fail_syntax;
689 }
690 if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
691 goto fail_syntax;
692 }
693
694 if (qemu_strtoi(p, NULL, 10, &host_port)) {
695 goto fail_syntax;
696 }
697
698 err = slirp_remove_hostfwd(s->slirp, is_udp, host_addr, host_port);
699
700 monitor_printf(mon, "host forwarding rule for %s %s\n", src_str,
701 err ? "not found" : "removed");
702 return;
703
704 fail_syntax:
705 monitor_printf(mon, "invalid format\n");
706}
707
708static int slirp_hostfwd(SlirpState *s, const char *redir_str, Error **errp)
709{
710 struct in_addr host_addr = { .s_addr = INADDR_ANY };
711 struct in_addr guest_addr = { .s_addr = 0 };
712 int host_port, guest_port;
713 const char *p;
714 char buf[256];
715 int is_udp;
716 char *end;
717 const char *fail_reason = "Unknown reason";
718
719 p = redir_str;
720 if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
721 fail_reason = "No : separators";
722 goto fail_syntax;
723 }
724 if (!strcmp(buf, "tcp") || buf[0] == '\0') {
725 is_udp = 0;
726 } else if (!strcmp(buf, "udp")) {
727 is_udp = 1;
728 } else {
729 fail_reason = "Bad protocol name";
730 goto fail_syntax;
731 }
732
733 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
734 fail_reason = "Missing : separator";
735 goto fail_syntax;
736 }
737 if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
738 fail_reason = "Bad host address";
739 goto fail_syntax;
740 }
741
742 if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
743 fail_reason = "Bad host port separator";
744 goto fail_syntax;
745 }
746 host_port = strtol(buf, &end, 0);
747 if (*end != '\0' || host_port < 0 || host_port > 65535) {
748 fail_reason = "Bad host port";
749 goto fail_syntax;
750 }
751
752 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
753 fail_reason = "Missing guest address";
754 goto fail_syntax;
755 }
756 if (buf[0] != '\0' && !inet_aton(buf, &guest_addr)) {
757 fail_reason = "Bad guest address";
758 goto fail_syntax;
759 }
760
761 guest_port = strtol(p, &end, 0);
762 if (*end != '\0' || guest_port < 1 || guest_port > 65535) {
763 fail_reason = "Bad guest port";
764 goto fail_syntax;
765 }
766
767 if (slirp_add_hostfwd(s->slirp, is_udp, host_addr, host_port, guest_addr,
768 guest_port) < 0) {
769 error_setg(errp, "Could not set up host forwarding rule '%s'",
770 redir_str);
771 return -1;
772 }
773 return 0;
774
775 fail_syntax:
776 error_setg(errp, "Invalid host forwarding rule '%s' (%s)", redir_str,
777 fail_reason);
778 return -1;
779}
780
781void hmp_hostfwd_add(Monitor *mon, const QDict *qdict)
782{
783 const char *redir_str;
784 SlirpState *s;
785 const char *arg1 = qdict_get_str(qdict, "arg1");
786 const char *arg2 = qdict_get_try_str(qdict, "arg2");
787 const char *arg3 = qdict_get_try_str(qdict, "arg3");
788
789 if (arg3) {
790 s = slirp_lookup(mon, arg1, arg2);
791 redir_str = arg3;
792 } else if (arg2) {
793 s = slirp_lookup(mon, NULL, arg1);
794 redir_str = arg2;
795 } else {
796 s = slirp_lookup(mon, NULL, NULL);
797 redir_str = arg1;
798 }
799 if (s) {
800 Error *err = NULL;
801 if (slirp_hostfwd(s, redir_str, &err) < 0) {
802 error_report_err(err);
803 }
804 }
805
806}
807
808#ifndef _WIN32
809
810
811static void slirp_smb_cleanup(SlirpState *s)
812{
813 int ret;
814
815 if (s->smb_dir) {
816 gchar *cmd = g_strdup_printf("rm -rf %s", s->smb_dir);
817 ret = system(cmd);
818 if (ret == -1 || !WIFEXITED(ret)) {
819 error_report("'%s' failed.", cmd);
820 } else if (WEXITSTATUS(ret)) {
821 error_report("'%s' failed. Error code: %d",
822 cmd, WEXITSTATUS(ret));
823 }
824 g_free(cmd);
825 g_free(s->smb_dir);
826 s->smb_dir = NULL;
827 }
828}
829
830static int slirp_smb(SlirpState* s, const char *exported_dir,
831 struct in_addr vserver_addr, Error **errp)
832{
833 char *smb_conf;
834 char *smb_cmdline;
835 struct passwd *passwd;
836 FILE *f;
837
838 passwd = getpwuid(geteuid());
839 if (!passwd) {
840 error_setg(errp, "Failed to retrieve user name");
841 return -1;
842 }
843
844 if (access(CONFIG_SMBD_COMMAND, F_OK)) {
845 error_setg(errp, "Could not find '%s', please install it",
846 CONFIG_SMBD_COMMAND);
847 return -1;
848 }
849
850 if (access(exported_dir, R_OK | X_OK)) {
851 error_setg(errp, "Error accessing shared directory '%s': %s",
852 exported_dir, strerror(errno));
853 return -1;
854 }
855
856 s->smb_dir = g_dir_make_tmp("qemu-smb.XXXXXX", NULL);
857 if (!s->smb_dir) {
858 error_setg(errp, "Could not create samba server dir");
859 return -1;
860 }
861 smb_conf = g_strdup_printf("%s/%s", s->smb_dir, "smb.conf");
862
863 f = fopen(smb_conf, "w");
864 if (!f) {
865 slirp_smb_cleanup(s);
866 error_setg(errp,
867 "Could not create samba server configuration file '%s'",
868 smb_conf);
869 g_free(smb_conf);
870 return -1;
871 }
872 fprintf(f,
873 "[global]\n"
874 "private dir=%s\n"
875 "interfaces=127.0.0.1\n"
876 "bind interfaces only=yes\n"
877 "pid directory=%s\n"
878 "lock directory=%s\n"
879 "state directory=%s\n"
880 "cache directory=%s\n"
881 "ncalrpc dir=%s/ncalrpc\n"
882 "log file=%s/log.smbd\n"
883 "smb passwd file=%s/smbpasswd\n"
884 "security = user\n"
885 "map to guest = Bad User\n"
886 "load printers = no\n"
887 "printing = bsd\n"
888 "disable spoolss = yes\n"
889 "usershare max shares = 0\n"
890 "[qemu]\n"
891 "path=%s\n"
892 "read only=no\n"
893 "guest ok=yes\n"
894 "force user=%s\n",
895 s->smb_dir,
896 s->smb_dir,
897 s->smb_dir,
898 s->smb_dir,
899 s->smb_dir,
900 s->smb_dir,
901 s->smb_dir,
902 s->smb_dir,
903 exported_dir,
904 passwd->pw_name
905 );
906 fclose(f);
907
908 smb_cmdline = g_strdup_printf("%s -l %s -s %s",
909 CONFIG_SMBD_COMMAND, s->smb_dir, smb_conf);
910 g_free(smb_conf);
911
912 if (slirp_add_exec(s->slirp, smb_cmdline, &vserver_addr, 139) < 0 ||
913 slirp_add_exec(s->slirp, smb_cmdline, &vserver_addr, 445) < 0) {
914 slirp_smb_cleanup(s);
915 g_free(smb_cmdline);
916 error_setg(errp, "Conflicting/invalid smbserver address");
917 return -1;
918 }
919 g_free(smb_cmdline);
920 return 0;
921}
922
923#endif
924
925static int guestfwd_can_read(void *opaque)
926{
927 struct GuestFwd *fwd = opaque;
928 return slirp_socket_can_recv(fwd->slirp, fwd->server, fwd->port);
929}
930
931static void guestfwd_read(void *opaque, const uint8_t *buf, int size)
932{
933 struct GuestFwd *fwd = opaque;
934 slirp_socket_recv(fwd->slirp, fwd->server, fwd->port, buf, size);
935}
936
937static ssize_t guestfwd_write(const void *buf, size_t len, void *chr)
938{
939 return qemu_chr_fe_write_all(chr, buf, len);
940}
941
942static int slirp_guestfwd(SlirpState *s, const char *config_str, Error **errp)
943{
944
945 struct in_addr server = { .s_addr = 0 };
946 struct GuestFwd *fwd;
947 const char *p;
948 char buf[128];
949 char *end;
950 int port;
951
952 p = config_str;
953 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
954 goto fail_syntax;
955 }
956 if (strcmp(buf, "tcp") && buf[0] != '\0') {
957 goto fail_syntax;
958 }
959 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
960 goto fail_syntax;
961 }
962 if (buf[0] != '\0' && !inet_aton(buf, &server)) {
963 goto fail_syntax;
964 }
965 if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
966 goto fail_syntax;
967 }
968 port = strtol(buf, &end, 10);
969 if (*end != '\0' || port < 1 || port > 65535) {
970 goto fail_syntax;
971 }
972
973 snprintf(buf, sizeof(buf), "guestfwd.tcp.%d", port);
974
975 if (g_str_has_prefix(p, "cmd:")) {
976 if (slirp_add_exec(s->slirp, &p[4], &server, port) < 0) {
977 error_setg(errp, "Conflicting/invalid host:port in guest "
978 "forwarding rule '%s'", config_str);
979 return -1;
980 }
981 } else {
982 Error *err = NULL;
983
984
985
986
987 Chardev *chr = qemu_chr_new_mux_mon(buf, p, NULL);
988
989 if (!chr) {
990 error_setg(errp, "Could not open guest forwarding device '%s'",
991 buf);
992 return -1;
993 }
994
995 fwd = g_new(struct GuestFwd, 1);
996 qemu_chr_fe_init(&fwd->hd, chr, &err);
997 if (err) {
998 error_propagate(errp, err);
999 object_unparent(OBJECT(chr));
1000 g_free(fwd);
1001 return -1;
1002 }
1003
1004 if (slirp_add_guestfwd(s->slirp, guestfwd_write, &fwd->hd,
1005 &server, port) < 0) {
1006 error_setg(errp, "Conflicting/invalid host:port in guest "
1007 "forwarding rule '%s'", config_str);
1008 qemu_chr_fe_deinit(&fwd->hd, true);
1009 g_free(fwd);
1010 return -1;
1011 }
1012 fwd->server = server;
1013 fwd->port = port;
1014 fwd->slirp = s->slirp;
1015
1016 qemu_chr_fe_set_handlers(&fwd->hd, guestfwd_can_read, guestfwd_read,
1017 NULL, NULL, fwd, NULL, true);
1018 s->fwd = g_slist_append(s->fwd, fwd);
1019 }
1020 return 0;
1021
1022 fail_syntax:
1023 error_setg(errp, "Invalid guest forwarding rule '%s'", config_str);
1024 return -1;
1025}
1026
1027void hmp_info_usernet(Monitor *mon, const QDict *qdict)
1028{
1029 SlirpState *s;
1030
1031 QTAILQ_FOREACH(s, &slirp_stacks, entry) {
1032 int id;
1033 bool got_hub_id = net_hub_id_for_client(&s->nc, &id) == 0;
1034 char *info = slirp_connection_info(s->slirp);
1035 monitor_printf(mon, "Hub %d (%s):\n%s",
1036 got_hub_id ? id : -1,
1037 s->nc.name, info);
1038 g_free(info);
1039 }
1040}
1041
1042static void
1043net_init_slirp_configs(const StringList *fwd, int flags)
1044{
1045 while (fwd) {
1046 struct slirp_config_str *config;
1047
1048 config = g_malloc0(sizeof(*config));
1049 pstrcpy(config->str, sizeof(config->str), fwd->value->str);
1050 config->flags = flags;
1051 config->next = slirp_configs;
1052 slirp_configs = config;
1053
1054 fwd = fwd->next;
1055 }
1056}
1057
1058static const char **slirp_dnssearch(const StringList *dnsname)
1059{
1060 const StringList *c = dnsname;
1061 size_t i = 0, num_opts = 0;
1062 const char **ret;
1063
1064 while (c) {
1065 num_opts++;
1066 c = c->next;
1067 }
1068
1069 if (num_opts == 0) {
1070 return NULL;
1071 }
1072
1073 ret = g_malloc((num_opts + 1) * sizeof(*ret));
1074 c = dnsname;
1075 while (c) {
1076 ret[i++] = c->value->str;
1077 c = c->next;
1078 }
1079 ret[i] = NULL;
1080 return ret;
1081}
1082
1083int net_init_slirp(const Netdev *netdev, const char *name,
1084 NetClientState *peer, Error **errp)
1085{
1086 struct slirp_config_str *config;
1087 char *vnet;
1088 int ret;
1089 const NetdevUserOptions *user;
1090 const char **dnssearch;
1091 bool ipv4 = true, ipv6 = true;
1092
1093 assert(netdev->type == NET_CLIENT_DRIVER_USER);
1094 user = &netdev->u.user;
1095
1096 if ((user->has_ipv6 && user->ipv6 && !user->has_ipv4) ||
1097 (user->has_ipv4 && !user->ipv4)) {
1098 ipv4 = 0;
1099 }
1100 if ((user->has_ipv4 && user->ipv4 && !user->has_ipv6) ||
1101 (user->has_ipv6 && !user->ipv6)) {
1102 ipv6 = 0;
1103 }
1104
1105 vnet = user->has_net ? g_strdup(user->net) :
1106 user->has_ip ? g_strdup_printf("%s/24", user->ip) :
1107 NULL;
1108
1109 dnssearch = slirp_dnssearch(user->dnssearch);
1110
1111
1112
1113 net_init_slirp_configs(user->hostfwd, SLIRP_CFG_HOSTFWD);
1114 net_init_slirp_configs(user->guestfwd, 0);
1115
1116 ret = net_slirp_init(peer, "user", name, user->q_restrict,
1117 ipv4, vnet, user->host,
1118 ipv6, user->ipv6_prefix, user->ipv6_prefixlen,
1119 user->ipv6_host, user->hostname, user->tftp,
1120 user->bootfile, user->dhcpstart,
1121 user->dns, user->ipv6_dns, user->smb,
1122 user->smbserver, dnssearch, user->domainname,
1123 user->tftp_server_name, errp);
1124
1125 while (slirp_configs) {
1126 config = slirp_configs;
1127 slirp_configs = config->next;
1128 g_free(config);
1129 }
1130
1131 g_free(vnet);
1132 g_free(dnssearch);
1133
1134 return ret;
1135}
1136
