rpcbind - zygaena/hammerhead

root / base / usr / src / cmd / rpcbind
rpcbind Plain Text 5564 lines 137.8 KB
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
#
# Copyright (c) 2018, Joyent, Inc.

PROG=		rpcbind
MANIFEST=	bind.xml
SVCMETHOD=	rpc-bind

OBJS= check_bound.o pmap_svc.o rpcb_svc.o rpcb_svc_com.o rpcb_svc_4.o \
	 rpcb_stat.o rpcbind.o warmstart.o selfcheck.o rpcb_check.o

CLOBBERFILES += $(SVCMETHOD)

SRC1= $(OBJS:%.o=%.c)
SRCS= $(SRC1:selfcheck.c=../fs.d/nfs/lib/selfcheck.c)

include ../Makefile.cmd

ROOTMANIFESTDIR=	$(ROOTSVCNETWORKRPC)

CPPFLAGS= -I. -DPORTMAP $(CPPFLAGS.master)
CPPFLAGS += -D_REENTRANT
$(RELEASE_BUILD)CPPFLAGS += -DNDEBUG
LDLIBS += -lsocket -lnsl -lwrap -lscf -lumem

# Hammerhead: Suppress xdr_u_long pointer type mismatch warnings
CERRWARN +=	-Wno-incompatible-pointer-types

# not linted
SMATCH=off

.KEEP_STATE:

all: $(PROG) $(SVCMETHOD)

$(PROG): $(OBJS)
	$(LINK.c) $(OBJS) -o $@ $(LDLIBS)
	$(POST_PROCESS)

selfcheck.o:    ../fs.d/nfs/lib/selfcheck.c
		$(COMPILE.c) ../fs.d/nfs/lib/selfcheck.c
		$(POST_PROCESS_O)

install: all $(ROOTUSRSBINPROG) $(ROOTMANIFEST) $(ROOTSVCMETHOD)

check:	$(CHKMANIFEST)

clean:
	$(RM) $(OBJS)

lint: lint_SRCS

include ../Makefile.targ
<?xml version='1.0'?>
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>

<!--
    CDDL HEADER START

    The contents of this file are subject to the terms of the
    Common Development and Distribution License (the "License").
    You may not use this file except in compliance with the License.

    You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
    or http://www.opensolaris.org/os/licensing.
    See the License for the specific language governing permissions
    and limitations under the License.

    When distributing Covered Code, include this CDDL HEADER in each
    file and include the License file at usr/src/OPENSOLARIS.LICENSE.
    If applicable, add the following below this CDDL HEADER, with the
    fields enclosed by brackets "[]" replaced with your own identifying
    information: Portions Copyright [yyyy] [name of copyright owner]

    CDDL HEADER END

    Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
    Copyright 2015 Nexenta Systems, Inc.  All rights reserved.
    Copyright 2014 OmniTI Computer Consulting, Inc. All rights reserved.
    Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
    Use is subject to license terms.

    Service manifest for rpcbind

    NOTE:  This service manifest is not editable; its contents will
    be overwritten by package or patch operations, including
    operating system upgrade.  Make customizations in a different
    file.
-->

<service_bundle type='manifest' name='SUNWcsr:rpcbind'>

<service
    name='network/rpc/bind'
    type='service'
    version='1'>

	<create_default_instance enabled='true' />

	<single_instance />

	<dependency
		name='fs'
		grouping='require_all'
		restart_on='none'
		type='service'>
		<service_fmri value='svc:/system/filesystem/minimal' />
	</dependency>

	<!--
		rpcbind(8) depends on multicast routes installed by the
		routing-setup service, and should be started after any IPsec
		policy is configured and TCP ndd tunables are set (both
		currently carried out by network/initial).
	-->
	<dependency
		name='network_initial'
		grouping='optional_all'
		restart_on='none'
		type='service'>
		<service_fmri value='svc:/network/routing-setup:default' />
		<service_fmri value='svc:/network/initial:default' />
	</dependency>

	<dependency
		name='network_ipfilter'
		grouping='optional_all'
		restart_on='none'
		type='service'>
		<service_fmri value='svc:/network/ipfilter:default' />
	</dependency>

	<exec_method
		type='method'
		name='start'
		exec='/lib/svc/method/rpc-bind %m'
		timeout_seconds='60'>
		<method_context working_directory='/'>
			<method_credential
				user='root'
				group='root'
				privileges='basic,file_chown,file_chown_self,file_owner,net_privaddr,proc_setid,sys_nfs,net_bindmlp'
				/>
		</method_context>
	</exec_method>

	<exec_method
		type='method'
		name='refresh'
		exec=':kill -HUP'
		timeout_seconds='0'>
	</exec_method>

	<exec_method
		type='method'
		name='stop'
		exec='/lib/svc/method/rpc-bind %m %{restarter/contract}'
		timeout_seconds='60'>
		<method_context working_directory='/'>
			<method_credential
				user='root'
				group='root'
				privileges='basic,proc_owner'
				/>
		</method_context>
	</exec_method>

	<property_group name='config' type='application' >
		<!-- default property settings for rpcbind(8). -->

		<!-- enable_tcpwrappers affects the wrapping of rpcbind,
		     see rpcbind(8) and tcpd(8) for details.
		     The default value is 'false'.
		     A values of 'true' results in wrapping all UDP/TCP
		     calls to the portmapper with libwrap. Note that
		     rpcbind(8) will not resolve or lookup names while
		     doing tcp wrapper processing.
		-->
		<propval
			name='enable_tcpwrappers'
			type='boolean'
			value='false' />

		<!-- verbose_logging affects the amount of information
		     which is logged by the tcpwrapper code.
		     The default is 'false'.
		     This property has no effect when tcp wrappers are not
		     enabled.
		-->
		<propval
			name='verbose_logging'
			type='boolean'
			value='false' />

		<!-- allow_indirect affects the forwarding of RPC calls
		     indirect rpcbind calls using rpcb_rmtcall(3NSL).
		     The default value is 'true'. By default this is allowed
		     for all services except for a handful.
		     A value of 'false' stops all indirect calls. This will
		     also disable broadcast rpc. NIS broadcast clients rely
		     on this functionality to exist on NIS servers.
		-->
		<propval
			name='allow_indirect'
			type='boolean'
			value='true' />

		<!-- local_only specifies whether rpcbind should allow
		     calls from hosts other than the localhost.
		     Setting local_only to true will make rpcbind serve
		     only those requests that come in from the local machine.
		     Setting local_only to false will allow access from
		     other hosts.
		-->
		<propval
			name='local_only'
			type='boolean'
			value='true' />

		<!-- to configure rpc/bind -->
		<propval name='value_authorization' type='astring'
			value='solaris.smf.value.rpc.bind' />

		<propval
			name='listen_backlog'
			type='integer'
			value='64' />

		<propval
			name='max_threads'
			type='integer'
			value='72' />
	</property_group>

	<!-- Authorization -->
	<property_group name='general' type='framework'>
		<!-- to operate rpc/bind -->
		<propval name='action_authorization' type='astring'
			value='solaris.smf.manage.rpc.bind' />
	</property_group>

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='name' type='astring' value='sunrpc' />
	</property_group>

	<property_group name='firewall_config' type='com.sun,fw_configuration'>
		<propval name='policy' type='astring' value='use_global' />
		<propval name='block_policy' type='astring'
			value='use_global' />
		<propval name='apply_to' type='astring' value='' />
		<propval name='apply_to_6' type='astring' value='' />
		<propval name='exceptions' type='astring' value='' />
		<propval name='exceptions_6' type='astring' value='' />
		<propval name='target' type='astring' value='' />
		<propval name='target_6' type='astring' value='' />
		<propval name='value_authorization' type='astring'
			value='solaris.smf.value.firewall.config' />
	</property_group>

	<stability value='Unstable' />

	<template>
		<common_name>
			<loctext xml:lang='C'>
				RPC bindings
			</loctext>
		</common_name>
		<documentation>
			<manpage title='rpcbind' section='8'
				manpath='/usr/share/man' />
		</documentation>
	</template>

</service>

</service_bundle>
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 *
 * Copyright 2002 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 */

/* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */
/*
 * University Copyright- Copyright (c) 1982, 1986, 1988
 * The Regents of the University of California
 * All Rights Reserved
 *
 * University Acknowledgment- Portions of this document are derived from
 * software developed by the University of California, Berkeley, and its
 * contributors.
 */

/*
 * check_bound.c
 * Checks to see whether the program is still bound to the
 * claimed address and returns the univeral merged address
 *
 */

#include <stdio.h>
#include <rpc/rpc.h>
#include <netconfig.h>
#include <netdir.h>
#include <sys/syslog.h>
#include <stdlib.h>
#include "rpcbind.h"
#include <string.h>
/* the following just to get my address */
#include <errno.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <thread.h>
#include <synch.h>
#include <syslog.h>

struct fdlist {
	int fd;
	mutex_t fd_lock;	/* protects fd */
	struct netconfig *nconf;
	struct fdlist *next;
	int check_binding;
};

static struct fdlist *fdhead;	/* Link list of the check fd's */
static struct fdlist *fdtail;
static char *nullstring = "";

/*
 * Returns 1 if the given address is bound for the given addr & transport
 * For all error cases, we assume that the address is bound
 * Returns 0 for success.
 *
 * fdl: My FD list
 * uaddr: the universal address
 */
static bool_t
check_bound(struct fdlist *fdl, char *uaddr)
{
	int fd;
	struct netbuf *na;
	struct t_bind taddr, *baddr;
	int ans;

	if (fdl->check_binding == FALSE)
		return (TRUE);

	na = uaddr2taddr(fdl->nconf, uaddr);
	if (!na)
		return (TRUE); /* punt, should never happen */

	taddr.addr = *na;
	taddr.qlen = 1;
	(void) mutex_lock(&fdl->fd_lock);
	fd = fdl->fd;
	baddr = (struct t_bind *)t_alloc(fd, T_BIND, T_ADDR);
	if (baddr == NULL) {
		(void) mutex_unlock(&fdl->fd_lock);
		netdir_free((char *)na, ND_ADDR);
		return (TRUE);
	}
	if (t_bind(fd, &taddr, baddr) != 0) {
		(void) mutex_unlock(&fdl->fd_lock);
		netdir_free((char *)na, ND_ADDR);
		(void) t_free((char *)baddr, T_BIND);
		return (TRUE);
	}
	if (t_unbind(fd) != 0) {
		/* Bad fd. Purge this fd */
		(void) t_close(fd);
		fdl->fd = t_open(fdl->nconf->nc_device, O_RDWR, NULL);
		if (fdl->fd == -1)
			fdl->check_binding = FALSE;
	}
	(void) mutex_unlock(&fdl->fd_lock);
	ans = memcmp(taddr.addr.buf, baddr->addr.buf, baddr->addr.len);
	netdir_free((char *)na, ND_ADDR);
	(void) t_free((char *)baddr, T_BIND);
	return (ans == 0 ? FALSE : TRUE);
}

/*
 * Keep open one more file descriptor for this transport, which
 * will be used to determine whether the given service is up
 * or not by trying to bind to the registered address.
 * We are ignoring errors here. It trashes taddr and baddr;
 * but that perhaps should not matter.
 *
 * We check for the following conditions:
 *	1. Is it possible for t_bind to fail in the case where
 *		we bind to an already bound address and have any
 *		other error number besides TNOADDR.
 *	2. If an address is specified in bind addr, can I bind to
 *		the same address.
 *	3. If NULL is specified in bind addr, can I bind to the
 *		address to which the fd finally got bound.
 */
int
add_bndlist(struct netconfig *nconf, struct t_bind *taddr, struct t_bind *baddr)
{
	int fd;
	struct fdlist *fdl;
	struct netconfig *newnconf;
	struct t_info tinfo;
	struct t_bind tmpaddr;

	newnconf = getnetconfigent(nconf->nc_netid);
	if (newnconf == NULL)
		return (-1);
	fdl = (struct fdlist *)malloc((uint_t)sizeof (struct fdlist));
	if (fdl == NULL) {
		freenetconfigent(newnconf);
		syslog(LOG_ERR, "no memory!");
		return (-1);
	}
	(void) mutex_init(&fdl->fd_lock, USYNC_THREAD, NULL);
	fdl->nconf = newnconf;
	fdl->next = NULL;
	if (fdhead == NULL) {
		fdhead = fdl;
		fdtail = fdl;
	} else {
		fdtail->next = fdl;
		fdtail = fdl;
	}
	fdl->check_binding = FALSE;
	if ((fdl->fd = t_open(nconf->nc_device, O_RDWR, &tinfo)) < 0) {
		/*
		 * Note that we haven't dequeued this entry nor have we freed
		 * the netconfig structure.
		 */
		if (debugging) {
			fprintf(stderr,
			    "%s: add_bndlist cannot open connection: %s",
			    nconf->nc_netid, t_errlist[t_errno]);
		}
		return (-1);
	}

	/* Set the qlen only for cots transports */
	switch (tinfo.servtype) {
	case T_COTS:
	case T_COTS_ORD:
		taddr->qlen = 1;
		break;
	case T_CLTS:
		taddr->qlen = 0;
		break;
	default:
		goto error;
	}

	if (t_bind(fdl->fd, taddr, baddr) != 0) {
		if (t_errno == TNOADDR) {
			fdl->check_binding = TRUE;
			return (0);	/* All is fine */
		}
		/* Perhaps condition #1 */
		if (debugging) {
			fprintf(stderr, "%s: add_bndlist cannot bind (1): %s",
			    nconf->nc_netid, t_errlist[t_errno]);
		}
		goto not_bound;
	}

	/* Condition #2 */
	if (!memcmp(taddr->addr.buf, baddr->addr.buf,
	    (int)baddr->addr.len)) {
		goto not_bound;
	}

	/* Condition #3 */
	t_unbind(fdl->fd);
	/* Set the qlen only for cots transports */
	switch (tinfo.servtype) {
	case T_COTS:
	case T_COTS_ORD:
		tmpaddr.qlen = 1;
		break;
	case T_CLTS:
		tmpaddr.qlen = 0;
		break;
	default:
		goto error;
	}
	tmpaddr.addr.len = tmpaddr.addr.maxlen = 0;
	tmpaddr.addr.buf = NULL;
	if (t_bind(fdl->fd, &tmpaddr, taddr) != 0) {
		if (debugging) {
			fprintf(stderr, "%s: add_bndlist cannot bind (2): %s",
			    nconf->nc_netid, t_errlist[t_errno]);
		}
		goto error;
	}
	/* Now fdl->fd is bound to a transport chosen address */
	if ((fd = t_open(nconf->nc_device, O_RDWR, &tinfo)) < 0) {
		if (debugging) {
			fprintf(stderr,
			    "%s: add_bndlist cannot open connection: %s",
			    nconf->nc_netid, t_errlist[t_errno]);
		}
		goto error;
	}
	if (t_bind(fd, taddr, baddr) != 0) {
		if (t_errno == TNOADDR) {
			/*
			 * This transport is schizo.  Previously it handled a
			 * request to bind to an already bound transport by
			 * returning a different bind address, and now it's
			 * returning a TNOADDR for essentially the same
			 * request.  The spec may allow this behavior, so
			 * we'll just assume we can't do bind checking with
			 * this transport.
			 */
			t_close(fd);
			goto not_bound;
		}
		if (debugging) {
			fprintf(stderr, "%s: add_bndlist cannot bind (3): %s",
			    nconf->nc_netid, t_errlist[t_errno]);
		}
		t_close(fd);
		goto error;
	}
	t_close(fd);
	if (!memcmp(taddr->addr.buf, baddr->addr.buf,
	    (int)baddr->addr.len)) {
		switch (tinfo.servtype) {
		case T_COTS:
		case T_COTS_ORD:
			if (baddr->qlen == 1) {
				goto not_bound;
			}
			break;
		case T_CLTS:
			goto not_bound;
		default:
			goto error;
		}
	}

	t_unbind(fdl->fd);
	fdl->check_binding = TRUE;
	return (0);

not_bound:
	t_close(fdl->fd);
	fdl->fd = -1;
	return (1);

error:
	t_close(fdl->fd);
	fdl->fd = -1;
	return (-1);
}

bool_t
is_bound(char *netid, char *uaddr)
{
	struct fdlist *fdl;

	for (fdl = fdhead; fdl; fdl = fdl->next)
		if (strcmp(fdl->nconf->nc_netid, netid) == 0)
			break;
	if (fdl == NULL)
		return (TRUE);
	return (check_bound(fdl, uaddr));
}

/* Return pointer to port string in the universal address */
#define	UADDR_PRT_INDX(UADDR, PORT) { \
	PORT = strrchr(UADDR, '.'); \
	while (*--PORT != '.'); }
/*
 * Returns NULL if there was some system error.
 * Returns "" if the address was not bound, i.e the server crashed.
 * Returns the merged address otherwise.
 */
char *
mergeaddr(SVCXPRT *xprt, char *netid, char *uaddr, char *saddr)
{
	struct fdlist *fdl;
	struct nd_mergearg ma;
	int stat;

	for (fdl = fdhead; fdl; fdl = fdl->next)
		if (strcmp(fdl->nconf->nc_netid, netid) == 0)
			break;
	if (fdl == NULL)
		return (NULL);
	if (check_bound(fdl, uaddr) == FALSE)
		/* that server died */
		return (nullstring);
	/*
	 * If saddr is not NULL, the remote client may have included the
	 * address by which it contacted us.  Use that for the "client" uaddr,
	 * otherwise use the info from the SVCXPRT.
	 */
	if (saddr != NULL) {
		ma.c_uaddr = saddr;
	} else {

		/* retrieve the client's address */
		ma.c_uaddr = taddr2uaddr(fdl->nconf, svc_getrpccaller(xprt));
		if (ma.c_uaddr == NULL) {
			syslog(LOG_ERR, "taddr2uaddr failed for %s: %s",
			    fdl->nconf->nc_netid, netdir_sperror());
			return (NULL);
		}

	}

	/* Not an INET address? */
	if ((strcmp(fdl->nconf->nc_protofmly, NC_INET) != 0) &&
	    (strcmp(fdl->nconf->nc_protofmly, NC_INET6) != 0)) {
		ma.s_uaddr = uaddr;
		stat = netdir_options(fdl->nconf, ND_MERGEADDR, 0, (char *)&ma);
	}
	/* Inet address, but no xp_ltaddr */
	else if ((ma.s_uaddr = taddr2uaddr(fdl->nconf,
	    &(xprt)->xp_ltaddr)) == NULL) {
		ma.s_uaddr = uaddr;
		stat = netdir_options(fdl->nconf, ND_MERGEADDR, 0, (char *)&ma);
	} else {
		/*
		 * (xprt)->xp_ltaddr contains portmap's port address.
		 * Overwrite this with actual application's port address
		 * before returning to the caller.
		 */
		char *s_uport, *uport;

		/* Get the INET/INET6 address part from ma.s_uaddr */
		UADDR_PRT_INDX(ma.s_uaddr, s_uport);
		*s_uport = '\0';

		/* Get the port info from uaddr */
		UADDR_PRT_INDX(uaddr, uport);

		ma.m_uaddr = malloc(strlen(ma.s_uaddr) + strlen(uport) + 1);
		if (ma.m_uaddr == NULL) {
			syslog(LOG_ERR, "mergeaddr: no memory!");
			free(ma.s_uaddr);
			if (saddr == NULL)
				free(ma.c_uaddr);
			return (NULL);
		}

		/* Copy IP address into the Universal address holder */
		strcpy(ma.m_uaddr, ma.s_uaddr);
		/* Append port info to the Universal address holder */
		strcat(ma.m_uaddr, uport);
		free(ma.s_uaddr);
		stat = 0;
	}
	if (saddr == NULL) {
		free(ma.c_uaddr);
	}
	if (stat) {
		syslog(LOG_ERR, "netdir_merge failed for %s: %s",
		    fdl->nconf->nc_netid, netdir_sperror());
		return (NULL);
	}

	return (ma.m_uaddr);
}

/*
 * Returns a netconf structure from its internal list.  This
 * structure should not be freed.
 */
struct netconfig *
rpcbind_get_conf(char *netid)
{
	struct fdlist *fdl;

	for (fdl = fdhead; fdl; fdl = fdl->next)
		if (strcmp(fdl->nconf->nc_netid, netid) == 0)
			break;
	if (fdl == NULL)
		return (NULL);
	return (fdl->nconf);
}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 */
/* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */
/*
 * University Copyright- Copyright (c) 1982, 1986, 1988
 * The Regents of the University of California
 * All Rights Reserved
 *
 * University Acknowledgment- Portions of this document are derived from
 * software developed by the University of California, Berkeley, and its
 * contributors.
 */

/*
 * pmap_svc.c
 * The server procedure for the version 2 portmaper.
 * All the portmapper related interface from the portmap side.
 */

#include <rpc/rpc.h>
#include <tcpd.h>

#include "rpcbind.h"

#ifdef PORTMAP
#include <stdio.h>
#include <alloca.h>
#include <ucred.h>
#include <rpc/pmap_prot.h>
#include <rpc/rpcb_prot.h>
#include <assert.h>

static bool_t pmapproc_change(struct svc_req *, SVCXPRT *, unsigned long);
static bool_t pmapproc_getport(struct svc_req *, SVCXPRT *);
static bool_t pmapproc_dump(struct svc_req *, SVCXPRT *);

/*
 * Called for all the version 2 inquiries.
 */
void
pmap_service(struct svc_req *rqstp, SVCXPRT *xprt)
{
	rpcbs_procinfo(RPCBVERS_2_STAT, rqstp->rq_proc);

	switch (rqstp->rq_proc) {
	case PMAPPROC_NULL:
		/*
		 * Null proc call
		 */
		PMAP_CHECK(xprt, rqstp->rq_proc);

		if ((!svc_sendreply(xprt, (xdrproc_t)xdr_void, NULL)) &&
		    debugging) {
			if (doabort) {
				rpcbind_abort();
			}
		}
		break;

	case PMAPPROC_SET:
		/*
		 * Set a program, version to port mapping
		 */
		pmapproc_change(rqstp, xprt, rqstp->rq_proc);
		break;

	case PMAPPROC_UNSET:
		/*
		 * Remove a program, version to port mapping.
		 */
		pmapproc_change(rqstp, xprt, rqstp->rq_proc);
		break;

	case PMAPPROC_GETPORT:
		/*
		 * Lookup the mapping for a program, version and return its
		 * port number.
		 */
		pmapproc_getport(rqstp, xprt);
		break;

	case PMAPPROC_DUMP:
		/*
		 * Return the current set of mapped program, version
		 */
		PMAP_CHECK(xprt, rqstp->rq_proc);
		pmapproc_dump(rqstp, xprt);
		break;

	case PMAPPROC_CALLIT:
		/*
		 * Calls a procedure on the local machine. If the requested
		 * procedure is not registered this procedure does not return
		 * error information!!
		 * This procedure is only supported on rpc/udp and calls via
		 * rpc/udp. It passes null authentication parameters.
		 */
		rpcbproc_callit_com(rqstp, xprt, PMAPPROC_CALLIT, PMAPVERS);
		break;

	default:
		PMAP_CHECK(xprt, rqstp->rq_proc);
		svcerr_noproc(xprt);
		break;
	}
}

/*
 * returns the item with the given program, version number. If that version
 * number is not found, it returns the item with that program number, so that
 * the port number is now returned to the caller. The caller when makes a
 * call to this program, version number, the call will fail and it will
 * return with PROGVERS_MISMATCH. The user can then determine the highest
 * and the lowest version number for this program using clnt_geterr() and
 * use those program version numbers.
 */
static PMAPLIST *
find_service_pmap(rpcprog_t prog, rpcvers_t vers, rpcprot_t prot)
{
	PMAPLIST *hit = NULL;
	PMAPLIST *pml;

	assert(RW_LOCK_HELD(&list_pml_lock));

	for (pml = list_pml; pml != NULL; pml = pml->pml_next) {
		if ((pml->pml_map.pm_prog != prog) ||
		    (pml->pml_map.pm_prot != prot))
			continue;
		hit = pml;
		if (pml->pml_map.pm_vers == vers)
			break;
	}

	return (hit);
}

/* ARGSUSED */
static bool_t
pmapproc_change(struct svc_req *rqstp, SVCXPRT *xprt, unsigned long op)
{
	PMAP reg;
	RPCB rpcbreg;
	int ans;
	struct sockaddr_in *who;
	char owner[64];

	if (!svc_getargs(xprt, (xdrproc_t)xdr_pmap, (char *)&reg)) {
		svcerr_decode(xprt);
		return (FALSE);
	}
	who = (struct sockaddr_in *)svc_getrpccaller(xprt)->buf;

	/* Don't allow unset/set from remote. */
	if (!localxprt(xprt, B_TRUE)) {
		ans = FALSE;
		goto done_change;
	}

	rpcbreg.r_owner = getowner(xprt, owner);

	if ((op == PMAPPROC_SET) && (reg.pm_port < IPPORT_RESERVED) &&
	    (ntohs(who->sin_port) >= IPPORT_RESERVED)) {
		ans = FALSE;
		goto done_change;
	}
	rpcbreg.r_prog = reg.pm_prog;
	rpcbreg.r_vers = reg.pm_vers;

	if (op == PMAPPROC_SET) {
		char buf[32];

		sprintf(buf, "0.0.0.0.%d.%d", (reg.pm_port >> 8) & 0xff,
		    reg.pm_port & 0xff);
		rpcbreg.r_addr = buf;
		if (reg.pm_prot == IPPROTO_UDP) {
			rpcbreg.r_netid = udptrans;
		} else if (reg.pm_prot == IPPROTO_TCP) {
			rpcbreg.r_netid = tcptrans;
		} else {
			ans = FALSE;
			goto done_change;
		}
		ans = map_set(&rpcbreg, rpcbreg.r_owner);
	} else if (op == PMAPPROC_UNSET) {
		bool_t ans1, ans2;

		rpcbreg.r_addr = NULL;
		rpcbreg.r_netid = tcptrans;
		ans1 = map_unset(&rpcbreg, rpcbreg.r_owner);
		rpcbreg.r_netid = udptrans;
		ans2 = map_unset(&rpcbreg, rpcbreg.r_owner);
		ans = ans1 || ans2;
	} else {
		ans = FALSE;
	}
done_change:
	PMAP_LOG(ans, xprt, op, reg.pm_prog);

	if ((!svc_sendreply(xprt, (xdrproc_t)xdr_long, (caddr_t)&ans)) &&
	    debugging) {
		fprintf(stderr, "portmap: svc_sendreply\n");
		if (doabort) {
			rpcbind_abort();
		}
	}
	if (op == PMAPPROC_SET)
		rpcbs_set(RPCBVERS_2_STAT, ans);
	else
		rpcbs_unset(RPCBVERS_2_STAT, ans);
	return (TRUE);
}

/* ARGSUSED */
static bool_t
pmapproc_getport(struct svc_req *rqstp, SVCXPRT *xprt)
{
	PMAP reg;
	int port = 0;
	PMAPLIST *fnd;
	bool_t rbl_locked = FALSE;

	if (!svc_getargs(xprt, (xdrproc_t)xdr_pmap, (char *)&reg)) {
		svcerr_decode(xprt);
		return (FALSE);
	}
	PMAP_CHECK_RET(xprt, rqstp->rq_proc, FALSE);

	(void) rw_rdlock(&list_pml_lock);
retry:
	fnd = find_service_pmap(reg.pm_prog, reg.pm_vers, reg.pm_prot);
	if (fnd) {
		char serveuaddr[32], *ua;
		int h1, h2, h3, h4, p1, p2;
		char *netid;

		if (reg.pm_prot == IPPROTO_UDP) {
			ua = udp_uaddr;
			netid = udptrans;
		} else {
			ua = tcp_uaddr; /* To get the len */
			netid = tcptrans;
		}
		if (ua == NULL) {
			(void) rw_unlock(&list_pml_lock);
			if (rbl_locked)
				(void) rw_unlock(&list_rbl_lock);
			goto sendreply;
		}
		if (sscanf(ua, "%d.%d.%d.%d.%d.%d", &h1, &h2, &h3,
		    &h4, &p1, &p2) == 6) {
			p1 = (fnd->pml_map.pm_port >> 8) & 0xff;
			p2 = (fnd->pml_map.pm_port) & 0xff;
			sprintf(serveuaddr, "%d.%d.%d.%d.%d.%d",
			    h1, h2, h3, h4, p1, p2);
			if (is_bound(netid, serveuaddr)) {
				port = fnd->pml_map.pm_port;
			} else { /* this service is dead; delete it */
				if (!rbl_locked) {
					(void) rw_unlock(&list_pml_lock);
					(void) rw_wrlock(&list_rbl_lock);
					(void) rw_wrlock(&list_pml_lock);
					rbl_locked = TRUE;
					goto retry;
				}
				delete_prog(reg.pm_prog);
			}
		}
	}
	(void) rw_unlock(&list_pml_lock);
	if (rbl_locked)
		(void) rw_unlock(&list_rbl_lock);

sendreply:
	if ((!svc_sendreply(xprt, (xdrproc_t)xdr_long, (caddr_t)&port)) &&
	    debugging) {
		(void) fprintf(stderr, "portmap: svc_sendreply\n");
		if (doabort) {
			rpcbind_abort();
		}
	}
	rpcbs_getaddr(RPCBVERS_2_STAT, reg.pm_prog, reg.pm_vers,
	    reg.pm_prot == IPPROTO_UDP ? udptrans : tcptrans,
	    port ? udptrans : "");

	return (TRUE);
}

/* ARGSUSED */
static bool_t
pmapproc_dump(struct svc_req *rqstp, SVCXPRT *xprt)
{
	if (!svc_getargs(xprt, (xdrproc_t)xdr_void, NULL)) {
		svcerr_decode(xprt);
		return (FALSE);
	}

	(void) rw_rdlock(&list_pml_lock);
	if ((!svc_sendreply(xprt, (xdrproc_t)xdr_pmaplist_ptr,
	    (caddr_t)&list_pml)) && debugging) {
		(void) rw_unlock(&list_pml_lock);
		(void) fprintf(stderr, "portmap: svc_sendreply\n");
		if (doabort) {
			rpcbind_abort();
		}
	} else {
		(void) rw_unlock(&list_pml_lock);
	}

	return (TRUE);
}
#endif /* PORTMAP */

/*
 * Is the transport local?  The original rpcbind code tried to
 * figure out all the network interfaces but there can be a nearly
 * infinite number of network interfaces.  And the number of interfaces can
 * vary over time.
 *
 * Note that when we get here, we've already establised that we're
 * dealing with a TCP/IP endpoint.
 */
boolean_t
localxprt(SVCXPRT *transp, boolean_t forceipv4)
{
	struct sockaddr_gen *sgen = svc_getgencaller(transp);

	switch (SGFAM(sgen)) {
	case AF_INET:
		break;
	case AF_INET6:
		if (forceipv4)
			return (B_FALSE);
		break;
	default:
		return (B_FALSE);
	}

	/*
	 * Get the peer's uid; if it is known it is sufficiently
	 * authenticated and considered local.  The magic behind this
	 * call is all in libnsl.
	 */
	return (rpcb_caller_uid(transp) != -1);
}
#! /sbin/sh
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
#ident	"%Z%%M%	%I%	%E% SMI"
#
# rpcbind method
#
# Argument is the method name.
#

. /lib/svc/share/smf_include.sh

RB_OPT="$1"
RB_EXIT=0
RB_DOOR="/var/run/rpc_door"

case ${RB_OPT} in
	"start")
		if [ ! -x /usr/sbin/rpcbind ]
		then
			echo "ERROR: /usr/sbin/rpcbind does not exist."
			exit $SMF_EXIT_ERR_CONFIG
		fi

		[ -d ${RB_DOOR} ] || /bin/mkdir -p -m 1777 ${RB_DOOR}

		/usr/sbin/rpcbind > /dev/msglog 2>&1

		RB_EXIT=${?}

		if [ $RB_EXIT != 0 ]
		then
			echo "rpcbind failed with $RB_EXIT."
			RB_EXIT=1
		fi
	;;
	"stop")
		# Kill service contract
		smf_kill_contract $2 TERM 1
		[ $? -ne 0 ] && RB_EXIT=1
		/bin/rm -fr ${RB_DOOR}
	;;
	*)
		RB_EXIT=$SMF_EXIT_ERR_CONFIG
	;;
esac

exit ${RB_EXIT}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Auxiliary routines to shield off random internet hosts and to report
 * service requests (verbose mode only) or violations (always).
 *
 * This code was extensively modifed from a version authored by:
 *
 * Wietse Venema, Eindhoven University of Technology, The Netherlands
 * and distributed as "rpcbind 2.1".
 *
 * Sun was granted permission to use, modify, including make
 * derivatives of, copy, reproduce and distribute this code.c in both
 * binary and source forms, directly and indirectly.
 *
 * Modified for bundling with Solaris and IPv6.
 *
 * Solaris specific modifcations made are:
 *
 *	Double fork() logging replaced with qsyslog();
 *	Connection refusals are flagged with svcerr_auth(); this
 *	aids in quicker diagnosability of misconfigurations and quicker
 *	failures for /net automounts;
 *	Single function for pmap* and rpcb*;
 *	Local transport checks made using localxprt().
 *
 * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 */

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <syslog.h>
#include <errno.h>
#include <netconfig.h>
#include <netdb.h>
#include <netdir.h>
#include <arpa/inet.h>
#include <netinet/in.h>
#include <rpc/rpc.h>
#include <rpc/pmap_prot.h>
#include <rpc/rpcb_prot.h>
#include <thread.h>
#include <synch.h>
#include <tcpd.h>

#include "rpcbind.h"

/*
 * These are globally visible so that they can be modified by the wrapper's
 * language extension routines.
 */
int allow_severity = LOG_INFO;
int deny_severity = LOG_WARNING;

static mutex_t hosts_ctl_lock = DEFAULTMUTEX;

/*
 * "inet_ntoa/inet_pton" for struct sockaddr_gen
 */
static const char *
sgen_toa(struct sockaddr_gen *addr, char *buf, size_t bufsize)
{
	return (inet_ntop(SGFAM(addr), SGADDRP(addr), buf, bufsize));
}

struct proc_map {
	rpcproc_t code;
	const char *proc;
};

static const struct proc_map pmapmap[] = {
	PMAPPROC_CALLIT,	"callit",
	PMAPPROC_DUMP,		"dump",
	PMAPPROC_GETPORT,	"getport",
	PMAPPROC_SET,		"set",
	PMAPPROC_UNSET,		"unset",
	NULLPROC,		"null",
};

static const struct proc_map rpcbmap[] = {
	RPCBPROC_SET,		"set",
	RPCBPROC_UNSET,		"unset",
	RPCBPROC_GETADDR,	"getaddr",
	RPCBPROC_DUMP,		"dump",
	RPCBPROC_CALLIT,	"callit",
	RPCBPROC_GETTIME,	"gettime",
	RPCBPROC_UADDR2TADDR,	"uaddr2taddr",
	RPCBPROC_TADDR2UADDR,	"taddr2uaddr",
	RPCBPROC_GETVERSADDR,	"getversaddr",
	RPCBPROC_INDIRECT,	"indirect",
	RPCBPROC_GETADDRLIST,	"getaddrlist",
	RPCBPROC_GETSTAT,	"getstat",
	NULLPROC,		"null",
};

/*
 * find_procname - map rpcb/pmap procedure number to name
 */
static const char *
find_procname(rpcproc_t procnum, boolean_t pm)
{
	int nitems, i;
	const struct proc_map *procp;

	if (pm) {
		procp = pmapmap;
		nitems = sizeof (pmapmap)/sizeof (struct proc_map);
	} else {
		procp = rpcbmap;
		nitems = sizeof (rpcbmap)/sizeof (struct proc_map);
	}

	for (i = 0; i < nitems; i++) {
		if (procp[i].code == procnum)
			return (procp[i].proc);
	}
	return (NULL);
}

/*
 * rpcb_log - log request for service
 */
void
rpcb_log(boolean_t verdict, SVCXPRT *transp, rpcproc_t proc, rpcprog_t prog,
    boolean_t pm)
{
	struct netconfig *conf;
	const char *client = "unknown";
	char *uaddr;
	char buf[BUFSIZ];
	char toabuf[INET6_ADDRSTRLEN];
	const char *procname;

	/*
	 * Transform the transport address into something printable.
	 */
	if ((conf = rpcbind_get_conf(transp->xp_netid)) == 0) {
		syslog(LOG_WARNING,
		    "unknown transport (rpcbind_get_conf failed)");
	} else if (strcmp(conf->nc_protofmly, "inet") == 0 ||
	    strcmp(conf->nc_protofmly, "inet6") == 0) {
		client = sgen_toa(svc_getgencaller(transp), toabuf,
		    sizeof (toabuf));
	} else if ((uaddr = taddr2uaddr(conf, &(transp->xp_rtaddr))) == NULL) {
		syslog(LOG_WARNING, "unknown address (taddr2uaddr failed)");
	} else {
		(void) snprintf(buf, sizeof (buf), "%s(%s)",
		    conf->nc_protofmly, uaddr);
		free(uaddr);
		client = buf;
	}

	if ((procname = find_procname(proc, pm)) == NULL) {
		qsyslog(verdict ? allow_severity : deny_severity,
		    "%sconnect from %s to %s-%lu(%lu)",
		    verdict ? "" : "refused ", client, pm ? "pmap" : "rpcb",
		    (ulong_t)proc, (ulong_t)prog);
	} else {
		qsyslog(verdict ? allow_severity : deny_severity,
		    "%sconnect from %s to %s(%lu)", verdict ? "" : "refused ",
		    client, procname, (ulong_t)prog);
	}
}

/*
 * rpcb_check; the rpcbind/portmap access check function.
 */
boolean_t
rpcb_check(SVCXPRT *transp, rpcproc_t procnum, boolean_t ispmap)
{
	struct netconfig *conf;
	boolean_t res = B_TRUE;

	if ((conf = rpcbind_get_conf(transp->xp_netid)) == 0) {
		syslog(LOG_ERR,
		    "rpcbind_get_conf failed: no client address checks");
		return (B_TRUE);
	}

	/*
	 * Require IPv4 for pmap calls; they're not defined for anything else.
	 */
	if (ispmap && strcmp(conf->nc_protofmly, "inet") != 0) {
		res = B_FALSE;
	} else if (strcmp(conf->nc_protofmly, "inet") == 0 ||
	    strcmp(conf->nc_protofmly, "inet6") == 0) {
		if (!localxprt(transp, ispmap)) {
			if (local_only) {
				res = B_FALSE;
			} else {
				char buf[INET6_ADDRSTRLEN];
				const char *addr_string =
				    sgen_toa(svc_getgencaller(transp), buf,
				    sizeof (buf));

				(void) mutex_lock(&hosts_ctl_lock);
				if (hosts_ctl("rpcbind", addr_string,
				    addr_string, "") == 0)
					res = B_FALSE;
				(void) mutex_unlock(&hosts_ctl_lock);
			}
		}
	}

	if (!res)
		svcerr_auth(transp, AUTH_FAILED);

	if (verboselog || !res)
		rpcb_log(res, transp, procnum, 0, ispmap);

	return (res);
}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * rpcb_stat.c
 * Allows for gathering of statistics
 *
 * Copyright (c) 1990 by Sun Microsystems, Inc.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 */

#include <stdio.h>
#include <netconfig.h>
#include <rpc/rpc.h>
#include <rpc/rpcb_prot.h>
#include <sys/stat.h>
#ifdef PORTMAP
#include <rpc/pmap_prot.h>
#endif
#include <stdlib.h>
#include <atomic.h>
#include <assert.h>
#include <thread.h>
#include <synch.h>
#include <string.h>
#include "rpcbind.h"

static rpcb_stat_byvers inf;
static rwlock_t inf_lock = DEFAULTRWLOCK;

void
rpcbs_procinfo(int rtype, rpcproc_t proc)
{
	assert(rtype >= 0 && rtype < RPCBVERS_STAT);

#ifdef PORTMAP
	if ((rtype == RPCBVERS_2_STAT) && (proc > rpcb_highproc_2))
		return;
#else
	assert(rtype != RPCBVERS_2_STAT);
#endif

	if ((rtype == RPCBVERS_3_STAT) && (proc > rpcb_highproc_3))
		return;

	if ((rtype == RPCBVERS_4_STAT) && (proc > rpcb_highproc_4))
		return;

	atomic_add_int((uint_t *)&inf[rtype].info[proc], 1);
}

void
rpcbs_set(int rtype, bool_t success)
{
	assert(rtype >= 0 && rtype < RPCBVERS_STAT);

	if (success == FALSE)
		return;

	atomic_add_int((uint_t *)&inf[rtype].setinfo, 1);
}

void
rpcbs_unset(int rtype, bool_t success)
{
	assert(rtype >= 0 && rtype < RPCBVERS_STAT);

	if (success == FALSE)
		return;

	atomic_add_int((uint_t *)&inf[rtype].unsetinfo, 1);
}

void
rpcbs_getaddr(int rtype, rpcprog_t prog, rpcvers_t vers, char *netid,
    char *uaddr)
{
	rpcbs_addrlist *al;
	rpcbs_addrlist *s;
	rpcbs_addrlist *wal;
	struct netconfig *nconf;

	assert(rtype >= 0 && rtype < RPCBVERS_STAT);

	/*
	 * First try with read lock only.
	 */
	(void) rw_rdlock(&inf_lock);
	for (s = al = inf[rtype].addrinfo; al; al = al->next) {
		if ((al->prog == prog) && (al->vers == vers) &&
		    (strcmp(al->netid, netid) == 0)) {
			(void) rw_unlock(&inf_lock);

			if ((uaddr == NULL) || (uaddr[0] == '\0'))
				atomic_add_int((uint_t *)&al->failure, 1);
			else
				atomic_add_int((uint_t *)&al->success, 1);

			return;
		}
	}
	(void) rw_unlock(&inf_lock);

	/*
	 * If not found, we will likely need to add a new entry,
	 * so pre-allocate it, and then try to search again with write lock.
	 */
	nconf = rpcbind_get_conf(netid);
	if (nconf == NULL) {
		return;
	}

	al = (rpcbs_addrlist *) malloc(sizeof (rpcbs_addrlist));
	if (al == NULL) {
		return;
	}

	al->prog = prog;
	al->vers = vers;
	al->netid = nconf->nc_netid;
	if ((uaddr == NULL) || (uaddr[0] == '\0')) {
		al->failure = 1;
		al->success = 0;
	} else {
		al->failure = 0;
		al->success = 1;
	}

	(void) rw_wrlock(&inf_lock);
	for (wal = inf[rtype].addrinfo; wal != s; wal = wal->next) {
		if ((wal->prog == prog) && (wal->vers == vers) &&
		    (strcmp(wal->netid, netid) == 0)) {
			(void) rw_unlock(&inf_lock);

			free(al);

			if ((uaddr == NULL) || (uaddr[0] == '\0'))
				atomic_add_int((uint_t *)&wal->failure, 1);
			else
				atomic_add_int((uint_t *)&wal->success, 1);

			return;
		}
	}

	al->next = inf[rtype].addrinfo;
	inf[rtype].addrinfo = al;
	(void) rw_unlock(&inf_lock);
}

/*
 * rpcbproc - rpcbind proc number on which this was called
 */
void
rpcbs_rmtcall(int rtype, rpcproc_t rpcbproc, rpcprog_t prog, rpcvers_t vers,
    rpcproc_t proc, char *netid, rpcblist_ptr rbl)
{
	rpcbs_rmtcalllist *rl;
	rpcbs_rmtcalllist *s;
	rpcbs_rmtcalllist *wrl;
	struct netconfig *nconf;

	assert(rtype >= 0 && rtype < RPCBVERS_STAT);

	/*
	 * First try with read lock only.
	 */
	(void) rw_rdlock(&inf_lock);
	for (s = rl = inf[rtype].rmtinfo; rl; rl = rl->next) {
		if ((rl->prog == prog) && (rl->vers == vers) &&
		    (rl->proc == proc) && (strcmp(rl->netid, netid) == 0)) {
			(void) rw_unlock(&inf_lock);

			if ((rbl == NULL) || (rbl->rpcb_map.r_vers != vers))
				atomic_add_int((uint_t *)&rl->failure, 1);
			else
				atomic_add_int((uint_t *)&rl->success, 1);
			if (rpcbproc == RPCBPROC_INDIRECT)
				atomic_add_int((uint_t *)&rl->indirect, 1);

			return;
		}
	}
	(void) rw_unlock(&inf_lock);

	/*
	 * If not found, we will likely need to add a new entry,
	 * so pre-allocate it, and then try to search again with write lock.
	 */
	nconf = rpcbind_get_conf(netid);
	if (nconf == NULL) {
		return;
	}

	rl = (rpcbs_rmtcalllist *) malloc(sizeof (rpcbs_rmtcalllist));
	if (rl == NULL) {
		return;
	}

	rl->prog = prog;
	rl->vers = vers;
	rl->proc = proc;
	rl->netid = nconf->nc_netid;
	if ((rbl == NULL) || (rbl->rpcb_map.r_vers != vers)) {
		rl->failure = 1;
		rl->success = 0;
	} else {
		rl->failure = 0;
		rl->success = 1;
	}
	rl->indirect = rpcbproc == RPCBPROC_INDIRECT ? 1 : 0;

	(void) rw_wrlock(&inf_lock);
	for (wrl = inf[rtype].rmtinfo; wrl != s; wrl = wrl->next) {
		if ((wrl->prog == prog) && (wrl->vers == vers) &&
		    (wrl->proc == proc) && (strcmp(wrl->netid, netid) == 0)) {
			(void) rw_unlock(&inf_lock);

			free(rl);

			if ((rbl == NULL) || (rbl->rpcb_map.r_vers != vers))
				atomic_add_int((uint_t *)&wrl->failure, 1);
			else
				atomic_add_int((uint_t *)&wrl->success, 1);
			if (rpcbproc == RPCBPROC_INDIRECT)
				atomic_add_int((uint_t *)&wrl->indirect, 1);

			return;
		}
	}

	rl->next = inf[rtype].rmtinfo;
	inf[rtype].rmtinfo = rl;
	(void) rw_unlock(&inf_lock);
}

/* ARGSUSED */
bool_t
rpcbproc_getstat(void *argp, rpcb_stat_byvers **result)
{
	/*
	 * inf_lock is unlocked in xdr_rpcb_stat_byvers_ptr()
	 */
	(void) rw_rdlock(&inf_lock);
	*result = &inf;
	return (TRUE);
}

bool_t
xdr_rpcb_stat_byvers_ptr(XDR *xdrs, rpcb_stat_byvers **objp)
{
	if (xdrs->x_op == XDR_FREE) {
		/*
		 * inf_lock is locked in rpcbproc_getstat()
		 */
		(void) rw_unlock(&inf_lock);
		return (TRUE);
	}

	return (xdr_rpcb_stat_byvers(xdrs, (rpcb_stat *)*objp));
}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2013 Nexenta Systems, Inc.  All rights reserved.
 */
/* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */
/*
 * University Copyright- Copyright (c) 1982, 1986, 1988
 * The Regents of the University of California
 * All Rights Reserved
 *
 * University Acknowledgment- Portions of this document are derived from
 * software developed by the University of California, Berkeley, and its
 * contributors.
 */

/*
 * rpcb_svc.c
 * The server procedure for the version 3 rpcbind (TLI).
 *
 * It maintains a separate list of all the registered services with the
 * version 3 of rpcbind.
 */
#include <stdio.h>
#include <strings.h>
#include <sys/types.h>
#include <rpc/rpc.h>
#include <rpc/rpcb_prot.h>
#include <netconfig.h>
#include <syslog.h>
#include <netdir.h>
#include <stdlib.h>
#include "rpcbind.h"

/*
 * Called by svc_getreqset. There is a separate server handle for
 * every transport that it waits on.
 */
void
rpcb_service_3(struct svc_req *rqstp, SVCXPRT *transp)
{
	union {
		rpcb rpcbproc_set_3_arg;
		rpcb rpcbproc_unset_3_arg;
		rpcb rpcbproc_getaddr_3_arg;
		rpcb_rmtcallargs rpcbproc_callit_3_arg;
		char *rpcbproc_uaddr2taddr_3_arg;
		struct netbuf rpcbproc_taddr2uaddr_3_arg;
	} argument;
	union {
		bool_t rpcbproc_set_3_res;
		bool_t rpcbproc_unset_3_res;
		char *rpcbproc_getaddr_3_res;
		rpcblist_ptr *rpcbproc_dump_3_res;
		ulong_t rpcbproc_gettime_3_res;
		struct netbuf rpcbproc_uaddr2taddr_3_res;
		char *rpcbproc_taddr2uaddr_3_res;
	} result;
	bool_t retval;
	xdrproc_t xdr_argument, xdr_result;
	bool_t (*local)();

	rpcbs_procinfo(RPCBVERS_3_STAT, rqstp->rq_proc);

	RPCB_CHECK(transp, rqstp->rq_proc);

	switch (rqstp->rq_proc) {
	case NULLPROC:
		/*
		 * Null proc call
		 */
		(void) svc_sendreply(transp, (xdrproc_t)xdr_void, (char *)NULL);
		return;

	case RPCBPROC_SET:
		/*
		 * Check to see whether the message came from
		 * loopback transports (for security reasons)
		 */
		if (strcasecmp(transp->xp_netid, loopback_dg) &&
		    strcasecmp(transp->xp_netid, loopback_vc) &&
		    strcasecmp(transp->xp_netid, loopback_vc_ord)) {
			char *uaddr;

			uaddr = taddr2uaddr(rpcbind_get_conf(transp->xp_netid),
			    svc_getrpccaller(transp));
			syslog(LOG_ERR, "non-local attempt to set from %s",
			    uaddr == NULL ? "<unknown>" : uaddr);
			free(uaddr);
			svcerr_weakauth(transp);
			return;
		}
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_bool;
		local = (bool_t (*)()) rpcbproc_set_com;
		break;

	case RPCBPROC_UNSET:
		/*
		 * Check to see whether the message came from
		 * loopback transports (for security reasons)
		 */
		if (strcasecmp(transp->xp_netid, loopback_dg) &&
		    strcasecmp(transp->xp_netid, loopback_vc) &&
		    strcasecmp(transp->xp_netid, loopback_vc_ord)) {
			char *uaddr;

			uaddr = taddr2uaddr(rpcbind_get_conf(transp->xp_netid),
			    svc_getrpccaller(transp));
			syslog(LOG_ERR, "non-local attempt to unset from %s",
			    uaddr == NULL ? "<unknown>" : uaddr);
			free(uaddr);
			svcerr_weakauth(transp);
			return;
		}
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_bool;
		local = (bool_t (*)()) rpcbproc_unset_com;
		break;

	case RPCBPROC_GETADDR:
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_wrapstring;
		local = (bool_t (*)()) rpcbproc_getaddr_com;
		break;

	case RPCBPROC_DUMP:
		xdr_argument = xdr_void;
		xdr_result = xdr_rpcblist_ptr_ptr;
		local = (bool_t (*)()) rpcbproc_dump_com;
		break;

	case RPCBPROC_CALLIT:
		rpcbproc_callit_com(rqstp, transp, rqstp->rq_proc, RPCBVERS);
		return;

	case RPCBPROC_GETTIME:
		xdr_argument = xdr_void;
		xdr_result = xdr_u_long;
		local = (bool_t (*)()) rpcbproc_gettime_com;
		break;

	case RPCBPROC_UADDR2TADDR:
		xdr_argument = xdr_wrapstring;
		xdr_result = xdr_netbuf;
		local = (bool_t (*)()) rpcbproc_uaddr2taddr_com;
		break;

	case RPCBPROC_TADDR2UADDR:
		xdr_argument = xdr_netbuf;
		xdr_result = xdr_wrapstring;
		local = (bool_t (*)()) rpcbproc_taddr2uaddr_com;
		break;

	default:
		svcerr_noproc(transp);
		return;
	}
	(void) memset((char *)&argument, 0, sizeof (argument));
	if (!svc_getargs(transp, xdr_argument, (char *)&argument)) {
		svcerr_decode(transp);
		if (debugging)
			(void) fprintf(stderr, "rpcbind: could not decode\n");
		return;
	}
	retval = (*local)(&argument, &result, rqstp, RPCBVERS);
	if (retval > 0 && !svc_sendreply(transp, xdr_result, (char *)&result)) {
		svcerr_systemerr(transp);
		if (debugging) {
			(void) fprintf(stderr, "rpcbind: svc_sendreply\n");
			if (doabort) {
				rpcbind_abort();
			}
		}
	}
	if (!svc_freeargs(transp, xdr_argument, (char *)&argument)) {
		if (debugging) {
			(void) fprintf(stderr, "unable to free arguments\n");
			if (doabort) {
				rpcbind_abort();
			}
		}
	}

	xdr_free(xdr_result, (char *)&result);
}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2013 Nexenta Systems, Inc.  All rights reserved.
 */

/*
 * rpcb_svc_4.c
 * The server procedure for the version 4 rpcbind.
 *
 */

#include <stdio.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <unistd.h>
#include <rpc/rpc.h>
#include <netconfig.h>
#include <syslog.h>
#include <netdir.h>
#include <string.h>
#include <stdlib.h>
#include "rpcbind.h"

static void free_rpcb_entry_list(rpcb_entry_list_ptr);
static bool_t xdr_rpcb_entry_list_ptr_wrap(XDR *, rpcb_entry_list_ptr *);
static bool_t rpcbproc_getaddrlist(rpcb *, rpcb_entry_list_ptr *,
    struct svc_req *);

/*
 * Called by svc_getreqset. There is a separate server handle for
 * every transport that it waits on.
 */
void
rpcb_service_4(struct svc_req *rqstp, SVCXPRT *transp)
{
	union {
		rpcb rpcbproc_set_4_arg;
		rpcb rpcbproc_unset_4_arg;
		rpcb rpcbproc_getaddr_4_arg;
		char *rpcbproc_uaddr2taddr_4_arg;
		struct netbuf rpcbproc_taddr2uaddr_4_arg;
		rpcb rpcbproc_getversaddr_4_arg;
		rpcb rpcbproc_getaddrlist_4_arg;
	} argument;
	union {
		bool_t rpcbproc_set_4_res;
		bool_t rpcbproc_unset_4_res;
		char *rpcbproc_getaddr_4_res;
		rpcblist_ptr *rpcbproc_dump_4_res;
		ulong_t rpcbproc_gettime_4_res;
		struct netbuf rpcbproc_uaddr2taddr_4_res;
		char *rpcbproc_taddr2uaddr_4_res;
		char *rpcbproc_getversaddr_4_res;
		rpcb_entry_list_ptr rpcbproc_getaddrlist_4_res;
		rpcb_stat_byvers *rpcbproc_getstat_4_res;
	} result;
	bool_t retval;
	xdrproc_t xdr_argument, xdr_result;
	bool_t (*local)();

	rpcbs_procinfo(RPCBVERS_4_STAT, rqstp->rq_proc);

	RPCB_CHECK(transp, rqstp->rq_proc);

	switch (rqstp->rq_proc) {
	case NULLPROC:
		/*
		 * Null proc call
		 */
		(void) svc_sendreply(transp, (xdrproc_t)xdr_void, (char *)NULL);
		return;

	case RPCBPROC_SET:
		/*
		 * Check to see whether the message came from
		 * loopback transports (for security reasons)
		 */
		if (strcasecmp(transp->xp_netid, loopback_dg) &&
		    strcasecmp(transp->xp_netid, loopback_vc) &&
		    strcasecmp(transp->xp_netid, loopback_vc_ord)) {
			syslog(LOG_ERR, "non-local attempt to set");
			svcerr_weakauth(transp);
			return;
		}
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_bool;
		local = (bool_t (*)()) rpcbproc_set_com;
		break;

	case RPCBPROC_UNSET:
		/*
		 * Check to see whether the message came from
		 * loopback transports (for security reasons)
		 */
		if (strcasecmp(transp->xp_netid, loopback_dg) &&
		    strcasecmp(transp->xp_netid, loopback_vc) &&
		    strcasecmp(transp->xp_netid, loopback_vc_ord)) {
			syslog(LOG_ERR, "non-local attempt to unset");
			svcerr_weakauth(transp);
			return;
		}
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_bool;
		local = (bool_t (*)()) rpcbproc_unset_com;
		break;

	case RPCBPROC_GETADDR:
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_wrapstring;
		local = (bool_t (*)()) rpcbproc_getaddr_com;
		break;

	case RPCBPROC_DUMP:
		xdr_argument = xdr_void;
		xdr_result = xdr_rpcblist_ptr_ptr;
		local = (bool_t (*)()) rpcbproc_dump_com;
		break;

	case RPCBPROC_BCAST:
		rpcbproc_callit_com(rqstp, transp, rqstp->rq_proc, RPCBVERS4);
		return;

	case RPCBPROC_GETTIME:
		xdr_argument = xdr_void;
		xdr_result = xdr_u_long;
		local = (bool_t (*)()) rpcbproc_gettime_com;
		break;

	case RPCBPROC_UADDR2TADDR:
		xdr_argument = xdr_wrapstring;
		xdr_result = xdr_netbuf;
		local = (bool_t (*)()) rpcbproc_uaddr2taddr_com;
		break;

	case RPCBPROC_TADDR2UADDR:
		xdr_argument = xdr_netbuf;
		xdr_result = xdr_wrapstring;
		local = (bool_t (*)()) rpcbproc_taddr2uaddr_com;
		break;

	case RPCBPROC_GETVERSADDR:
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_wrapstring;
		local = (bool_t (*)()) rpcbproc_getaddr_com;
		break;

	case RPCBPROC_INDIRECT:
		rpcbproc_callit_com(rqstp, transp, rqstp->rq_proc, RPCBVERS4);
		return;

	case RPCBPROC_GETADDRLIST:
		xdr_argument = xdr_rpcb;
		xdr_result = xdr_rpcb_entry_list_ptr_wrap;
		local = (bool_t (*)()) rpcbproc_getaddrlist;
		break;

	case RPCBPROC_GETSTAT:
		xdr_argument = xdr_void;
		xdr_result = xdr_rpcb_stat_byvers_ptr;
		local = (bool_t (*)()) rpcbproc_getstat;
		break;

	default:
		svcerr_noproc(transp);
		return;
	}
	(void) memset((char *)&argument, 0, sizeof (argument));
	if (!svc_getargs(transp, xdr_argument, (char *)&argument)) {
		svcerr_decode(transp);
		if (debugging)
			(void) fprintf(stderr, "rpcbind: could not decode\n");
		return;
	}
	retval = (*local)(&argument, &result, rqstp, RPCBVERS4);
	if (retval > 0 && !svc_sendreply(transp, xdr_result, (char *)&result)) {
		svcerr_systemerr(transp);
		if (debugging) {
			(void) fprintf(stderr, "rpcbind: svc_sendreply\n");
			if (doabort) {
				rpcbind_abort();
			}
		}
	}
	if (!svc_freeargs(transp, xdr_argument, (char *)&argument)) {
		if (debugging) {
			(void) fprintf(stderr, "unable to free arguments\n");
			if (doabort) {
				rpcbind_abort();
			}
		}
	}

	xdr_free(xdr_result, (char *)&result);
}

/*
 * Lookup the mapping for a program, version and return the
 * addresses for all transports in the current transport family.
 * We return a merged address.
 */
static bool_t
rpcbproc_getaddrlist(rpcb *regp, rpcb_entry_list_ptr *result,
    struct svc_req *rqstp)
{
	rpcb_entry_list_ptr rlist = *result = NULL;
	rpcblist_ptr rbl, next, prev;
	rpcb_entry_list_ptr rp, tail = NULL;
	ulong_t prog, vers;
	rpcb_entry *a;
	struct netconfig *nconf;
	struct netconfig *reg_nconf;
	char *saddr, *maddr = NULL;
	struct netconfig *trans_conf;	/* transport netconfig */
	SVCXPRT *transp = rqstp->rq_xprt;

	/*
	 * Deal with a possible window during which we could return an IPv6
	 * address when the caller wanted IPv4.  See the comments in
	 * rpcbproc_getaddr_com() for more details.
	 */
	trans_conf = rpcbind_get_conf(transp->xp_netid);
	if (strcmp(trans_conf->nc_protofmly, NC_INET6) == 0) {
		struct sockaddr_in6 *rmtaddr;

		rmtaddr = (struct sockaddr_in6 *)transp->xp_rtaddr.buf;
		if (IN6_IS_ADDR_V4MAPPED(&rmtaddr->sin6_addr)) {
			syslog(LOG_DEBUG,
			    "IPv4 GETADDRLIST request mapped "
			    "to IPv6: ignoring");
			return (FALSE);
		}
	}

	prog = regp->r_prog;
	vers = regp->r_vers;
	reg_nconf = rpcbind_get_conf(transp->xp_netid);
	if (reg_nconf == NULL)
		return (FALSE);
	if (*(regp->r_addr) != '\0') {
		saddr = regp->r_addr;
	} else {
		saddr = NULL;
	}

	prev = NULL;
	(void) rw_wrlock(&list_rbl_lock);
	for (rbl = list_rbl; rbl != NULL; rbl = next) {
		next = rbl->rpcb_next;
		if ((rbl->rpcb_map.r_prog == prog) &&
		    (rbl->rpcb_map.r_vers == vers)) {
			nconf = rpcbind_get_conf(rbl->rpcb_map.r_netid);
			if (nconf == NULL) {
				(void) rw_unlock(&list_rbl_lock);
				goto fail;
			}
			if (strcmp(nconf->nc_protofmly, reg_nconf->nc_protofmly)
			    != 0) {
				prev = rbl;
				continue;	/* not same proto family */
			}
			if ((maddr = mergeaddr(transp, rbl->rpcb_map.r_netid,
			    rbl->rpcb_map.r_addr, saddr)) == NULL) {
				prev = rbl;
				continue;
			} else if (!maddr[0]) {
				/*
				 * The server died, remove this rpcb_map element
				 * from the list and free it.
				 */
#ifdef PORTMAP
				(void) rw_wrlock(&list_pml_lock);
				(void) del_pmaplist(&rbl->rpcb_map);
				(void) rw_unlock(&list_pml_lock);
#endif
				(void) delete_rbl(rbl);

				if (prev == NULL)
					list_rbl = next;
				else
					prev->rpcb_next = next;
				continue;
			}
			/*
			 * Add it to rlist.
			 */
			rp = (rpcb_entry_list_ptr)
			    malloc((uint_t)sizeof (rpcb_entry_list));
			if (rp == NULL) {
				(void) rw_unlock(&list_rbl_lock);
				goto fail;
			}
			a = &rp->rpcb_entry_map;
			a->r_maddr = maddr;
			a->r_nc_netid = nconf->nc_netid;
			a->r_nc_semantics = nconf->nc_semantics;
			a->r_nc_protofmly = nconf->nc_protofmly;
			a->r_nc_proto = nconf->nc_proto;
			rp->rpcb_entry_next = NULL;
			if (rlist == NULL) {
				rlist = rp;
				tail = rp;
			} else {
				tail->rpcb_entry_next = rp;
				tail = rp;
			}
			rp = NULL;
		}
		prev = rbl;
	}
	(void) rw_unlock(&list_rbl_lock);

	/*
	 * XXX: getaddrlist info is also being stuffed into getaddr.
	 * Perhaps wrong, but better than it not getting counted at all.
	 */
	rpcbs_getaddr(RPCBVERS_4_STAT, prog, vers, transp->xp_netid, maddr);

	*result = rlist;
	return (TRUE);

fail:
	free_rpcb_entry_list(rlist);
	return (FALSE);
}

/*
 * Free only the allocated structure, rest is all a pointer to some
 * other data somewhere else.
 */
static void
free_rpcb_entry_list(rpcb_entry_list_ptr rlist)
{
	while (rlist != NULL) {
		rpcb_entry_list_ptr tmp = rlist;
		rlist = rlist->rpcb_entry_next;
		free(tmp->rpcb_entry_map.r_maddr);
		free(tmp);
	}
}

static bool_t
xdr_rpcb_entry_list_ptr_wrap(XDR *xdrs, rpcb_entry_list_ptr *rp)
{
	if (xdrs->x_op == XDR_FREE) {
		free_rpcb_entry_list(*rp);
		return (TRUE);
	}

	return (xdr_rpcb_entry_list_ptr(xdrs, rp));
}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 * Copyright 2017 Joyent Inc
 */
/* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */
/*
 * University Copyright- Copyright (c) 1982, 1986, 1988
 * The Regents of the University of California
 * All Rights Reserved
 *
 * University Acknowledgment- Portions of this document are derived from
 * software developed by the University of California, Berkeley, and its
 * contributors.
 */

/*
 * rpcb_svc_com.c
 * The commom server procedure for the rpcbind.
 */

#include <stdio.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <unistd.h>
#include <stdlib.h>
#include <string.h>
#include <strings.h>
#include <rpc/rpc.h>
#include <rpc/rpcb_prot.h>
#include <rpcsvc/svc_dg_priv.h>
#include <netconfig.h>
#include <sys/param.h>
#include <errno.h>
#include <zone.h>
#include <sys/poll.h>
#include <sys/stropts.h>
#ifdef PORTMAP
#include <netinet/in.h>
#include <rpc/pmap_prot.h>
#else
#define	PMAPVERS	2
#endif /* PORTMAP */
#include <syslog.h>
#include <netdir.h>
#include <ucred.h>
#include <alloca.h>
#include <rpcsvc/yp_prot.h>
#include <nfs/nfs.h>
#include <nfs/nfs_acl.h>
#include <rpcsvc/mount.h>
#include <nfs/nfs_acl.h>
#include <rpc/key_prot.h>
#include <rpcsvc/yp_prot.h>
#include <rpcsvc/rquota.h>
#include <rpcsvc/yppasswd.h>
#include <rpcsvc/ypupd.h>
#include <assert.h>
#include <synch.h>
#include "rpcbind.h"
#include <sys/debug.h>

static struct finfo *forward_register(ulong_t, struct netbuf *, int, char *);
static void forward_destroy(struct finfo *);
static void handle_reply(svc_input_id_t, int, unsigned int, void *);
static int netbufcmp(struct netbuf *, struct netbuf *);
static void netbuffree(struct netbuf *);
static struct netbuf *netbufdup(struct netbuf *);
static void find_versions(rpcprog_t, char *, rpcvers_t *, rpcvers_t *);
/* Hammerhead: Use rpcprog_t/rpcvers_t to match function definition */
static rpcblist_ptr find_service(rpcprog_t, rpcvers_t, char *);
#ifdef PORTMAP
static int add_pmaplist(RPCB *);
#endif

zoneid_t myzone;

/*
 * Set a mapping of program, version, netid
 */
bool_t
rpcbproc_set_com(RPCB *regp, bool_t *result, struct svc_req *rqstp,
    int rpcbversnum)
{
	char owner[64];

	*result = map_set(regp, getowner(rqstp->rq_xprt, owner));

	rpcbs_set(rpcbversnum - PMAPVERS, *result);

	return (TRUE);
}

bool_t
map_set(RPCB *regp, char *owner)
{
	RPCB *a;
	rpcblist_ptr rbl, fnd;

	/*
	 * check to see if already used
	 * find_service returns a hit even if
	 * the versions don't match, so check for it
	 */
	(void) rw_wrlock(&list_rbl_lock);
#ifdef PORTMAP
	(void) rw_wrlock(&list_pml_lock);
#endif /* PORTMAP */
	fnd = find_service(regp->r_prog, regp->r_vers, regp->r_netid);
	if (fnd && (fnd->rpcb_map.r_vers == regp->r_vers)) {
		if (strcmp(fnd->rpcb_map.r_addr, regp->r_addr) == 0) {
			/*
			 * if these match then it is already
			 * registered so just say "OK".
			 */
#ifdef PORTMAP
			(void) rw_unlock(&list_pml_lock);
#endif /* PORTMAP */
			(void) rw_unlock(&list_rbl_lock);
			return (TRUE);
		} else {
			/*
			 * Check if server is up.  If so, return FALSE.
			 * If not, cleanup old registrations for the
			 * program and register the new server.
			 */
			if (is_bound(fnd->rpcb_map.r_netid,
			    fnd->rpcb_map.r_addr)) {
#ifdef PORTMAP
				(void) rw_unlock(&list_pml_lock);
#endif /* PORTMAP */
				(void) rw_unlock(&list_rbl_lock);
				return (FALSE);
			}

			delete_prog(regp->r_prog);
			fnd = NULL;
		}
	}
#ifdef PORTMAP
	(void) rw_unlock(&list_pml_lock);
#endif /* PORTMAP */

	/*
	 * add to the end of the list
	 */
	rbl = malloc(sizeof (RPCBLIST));
	if (rbl == NULL) {
		(void) rw_unlock(&list_rbl_lock);
		return (FALSE);
	}
	a = &rbl->rpcb_map;
	a->r_prog = regp->r_prog;
	a->r_vers = regp->r_vers;
	a->r_netid = strdup(regp->r_netid);
	a->r_addr = strdup(regp->r_addr);
	a->r_owner = strdup(owner);
	if (a->r_addr == NULL || a->r_netid == NULL|| a->r_owner == NULL) {
		(void) rw_unlock(&list_rbl_lock);
		delete_rbl(rbl);
		return (FALSE);
	}
	rbl->rpcb_next = NULL;
	if (list_rbl == NULL) {
		list_rbl = rbl;
	} else {
		for (fnd = list_rbl; fnd->rpcb_next; fnd = fnd->rpcb_next)
			;
		fnd->rpcb_next = rbl;
	}

#ifdef PORTMAP
	(void) add_pmaplist(regp);
#endif
	(void) rw_unlock(&list_rbl_lock);
	return (TRUE);
}

/*
 * Unset a mapping of program, version, netid
 */
bool_t
rpcbproc_unset_com(RPCB *regp, bool_t *result, struct svc_req *rqstp,
    int rpcbversnum)
{
	char owner[64];

	*result = map_unset(regp, getowner(rqstp->rq_xprt, owner));

	rpcbs_unset(rpcbversnum - PMAPVERS, *result);

	return (TRUE);
}

bool_t
map_unset(RPCB *regp, char *owner)
{
#ifdef PORTMAP
	int ans = 0;
#endif
	rpcblist_ptr rbl, next, prev = NULL;

	if (owner == NULL)
		return (0);

	(void) rw_wrlock(&list_rbl_lock);
	for (rbl = list_rbl; rbl != NULL; rbl = next) {
		next = rbl->rpcb_next;

		if ((rbl->rpcb_map.r_prog != regp->r_prog) ||
		    (rbl->rpcb_map.r_vers != regp->r_vers) ||
		    (regp->r_netid[0] && strcasecmp(regp->r_netid,
		    rbl->rpcb_map.r_netid))) {
			/* prev moves forwards */
			prev = rbl;
			continue;
		}

		/*
		 * Check whether appropriate uid. Unset only
		 * if superuser or the owner itself.
		 */
		if (strcmp(owner, "superuser") &&
		    strcmp(rbl->rpcb_map.r_owner, owner)) {
			(void) rw_unlock(&list_rbl_lock);
			return (0);
		}

		/* prev stays */
#ifdef PORTMAP
		ans = 1;
#endif
		delete_rbl(rbl);

		if (prev == NULL)
			list_rbl = next;
		else
			prev->rpcb_next = next;
	}
#ifdef PORTMAP
	if (ans != 0) {
		(void) rw_wrlock(&list_pml_lock);
		(void) del_pmaplist(regp);
		(void) rw_unlock(&list_pml_lock);
	}
#endif
	(void) rw_unlock(&list_rbl_lock);

	/*
	 * We return 1 either when the entry was not there or it
	 * was able to unset it.  It can come to this point only if
	 * at least one of the conditions is true.
	 */
	return (1);
}

void
delete_rbl(rpcblist_ptr rbl)
{
	free(rbl->rpcb_map.r_addr);
	free(rbl->rpcb_map.r_netid);
	free(rbl->rpcb_map.r_owner);
	free(rbl);
}

void
delete_prog(rpcprog_t prog)
{
	rpcblist_ptr rbl, next, prev = NULL;

	assert(RW_WRITE_HELD(&list_rbl_lock));

	for (rbl = list_rbl; rbl != NULL; rbl = next) {
		next = rbl->rpcb_next;

		if (rbl->rpcb_map.r_prog != prog ||
		    is_bound(rbl->rpcb_map.r_netid, rbl->rpcb_map.r_addr)) {
			prev = rbl;
			continue;
		}

#ifdef PORTMAP
		(void) del_pmaplist(&rbl->rpcb_map);
#endif
		delete_rbl(rbl);

		if (prev == NULL)
			list_rbl = next;
		else
			prev->rpcb_next = next;
	}
}

/*
 * Lookup the mapping for a program, version and return its
 * address. Assuming that the caller wants the address of the
 * server running on the transport on which the request came.
 *
 * For RPCBPROC_GETVERSADDR it will return a service with the exact version
 * number only.
 *
 * Otherwise, even if a service with a different version number is available,
 * it will return that address.  The client should check with an
 * clnt_call to verify whether the service is the one that is desired.
 *
 * We also try to resolve the universal address in terms of
 * address of the caller.
 */
bool_t
rpcbproc_getaddr_com(RPCB *regp, char **result, struct svc_req *rqstp,
    ulong_t rpcbversnum)
{
	char *saddr = NULL;
	rpcblist_ptr fnd;
	struct netconfig *trans_conf;	/* transport netconfig */
	SVCXPRT *transp = rqstp->rq_xprt;
	int verstype = rqstp->rq_proc == RPCBPROC_GETVERSADDR ? RPCB_ONEVERS :
	    RPCB_ALLVERS;
	bool_t pml_locked = FALSE;

	/*
	 * There is a potential window at startup during which rpcbind
	 * service has been established over IPv6 but not over IPv4.  If an
	 * IPv4 request comes in during that window, the IP code will map
	 * it into IPv6.  We could patch up the request so that it looks
	 * like IPv4 (so that rpcbind returns an IPv4 uaddr to the caller),
	 * but that requires some non-trivial code and it's hard to test.
	 * Instead, drop the request on the floor and force the caller to
	 * retransmit.  By the time rpcbind sees the retransmission, IPv4
	 * service should be in place and it should see the request as
	 * IPv4, as desired.
	 */
	trans_conf = rpcbind_get_conf(transp->xp_netid);
	if (strcmp(trans_conf->nc_protofmly, NC_INET6) == 0) {
		struct sockaddr_in6 *rmtaddr;

		rmtaddr = (struct sockaddr_in6 *)transp->xp_rtaddr.buf;
		if (IN6_IS_ADDR_V4MAPPED(&rmtaddr->sin6_addr)) {
			syslog(LOG_DEBUG,
			    "IPv4 GETADDR request mapped to IPv6: ignoring");
			*result = NULL;
			return (FALSE);
		}
	}

	(void) rw_rdlock(&list_rbl_lock);
retry:
	fnd = find_service(regp->r_prog, regp->r_vers, transp->xp_netid);
	if (fnd && ((verstype == RPCB_ALLVERS) ||
	    (regp->r_vers == fnd->rpcb_map.r_vers))) {
		if (*(regp->r_addr) != '\0') {  /* may contain a hint about */
			saddr = regp->r_addr;   /* the interface that we    */
		}				/* should use */
		if (!(*result = mergeaddr(transp, transp->xp_netid,
		    fnd->rpcb_map.r_addr, saddr))) {
			/* Try whatever we have */
			*result = strdup(fnd->rpcb_map.r_addr);
		} else if (!(*result)[0]) {
			if (!pml_locked) {
				(void) rw_unlock(&list_rbl_lock);
				(void) rw_wrlock(&list_rbl_lock);
#ifdef PORTMAP
				(void) rw_wrlock(&list_pml_lock);
#endif /* PORTMAP */
				pml_locked = TRUE;
				goto retry;
			}
			/*
			 * The server died.  Unset all versions of this prog.
			 */
			delete_prog(regp->r_prog);
			*result = NULL;
		}
	} else {
		*result = NULL;
	}
#ifdef PORTMAP
	if (pml_locked)
		(void) rw_unlock(&list_pml_lock);
#endif /* PORTMAP */
	(void) rw_unlock(&list_rbl_lock);

	rpcbs_getaddr(rpcbversnum - PMAPVERS, regp->r_prog, regp->r_vers,
	    transp->xp_netid, *result);
	return (TRUE);
}

/* ARGSUSED */
bool_t
rpcbproc_dump_com(void *argp, rpcblist_ptr **result)
{
	/*
	 * list_rbl_lock is unlocked in xdr_rpcblist_ptr_ptr()
	 */
	(void) rw_rdlock(&list_rbl_lock);
	*result = &list_rbl;
	return (TRUE);
}

bool_t
xdr_rpcblist_ptr_ptr(XDR *xdrs, rpcblist_ptr **objp)
{
	if (xdrs->x_op == XDR_FREE) {
		/*
		 * list_rbl_lock is locked in rpcbproc_dump_com()
		 */
		rw_unlock(&list_rbl_lock);
		return (TRUE);
	}

	return (xdr_rpcblist_ptr(xdrs, *objp));
}

/* ARGSUSED */
bool_t
rpcbproc_gettime_com(void *argp, ulong_t *result)
{
	(void) time((time_t *)result);

	return (TRUE);
}

/*
 * Convert uaddr to taddr. Should be used only by
 * local servers/clients. (kernel level stuff only)
 */
bool_t
rpcbproc_uaddr2taddr_com(char **uaddrp, struct netbuf *result,
    struct svc_req *rqstp)
{
	struct netconfig *nconf;
	struct netbuf *taddr;

	if (((nconf = rpcbind_get_conf(rqstp->rq_xprt->xp_netid)) == NULL) ||
	    ((taddr = uaddr2taddr(nconf, *uaddrp)) == NULL)) {
		(void) memset(result, 0, sizeof (*result));
		return (TRUE);
	}

	memcpy(result, taddr, sizeof (*result));
	free(taddr);

	return (TRUE);
}

/*
 * Convert taddr to uaddr. Should be used only by
 * local servers/clients. (kernel level stuff only)
 */
bool_t
rpcbproc_taddr2uaddr_com(struct netbuf *taddr, char **result,
    struct svc_req *rqstp)
{
	struct netconfig *nconf;

	if ((nconf = rpcbind_get_conf(rqstp->rq_xprt->xp_netid)) == NULL)
		*result = NULL;
	else
		*result = taddr2uaddr(nconf, taddr);

	return (TRUE);
}

/*
 * Stuff for the rmtcall service
 */
bool_t
xdr_rpcb_rmtcallargs(XDR *xdrs, rpcb_rmtcallargs *objp)
{
	if (!xdr_u_long(xdrs, &objp->prog))
		return (FALSE);
	if (!xdr_u_long(xdrs, &objp->vers))
		return (FALSE);
	if (!xdr_u_long(xdrs, &objp->proc))
		return (FALSE);
	if (!xdr_bytes(xdrs, (char **)&objp->args.args_val,
	    (uint_t *)&objp->args.args_len, ~0))
		return (FALSE);
	return (TRUE);
}

#ifdef PORTMAP
bool_t
xdr_rmtcallres(XDR *xdrs, rmtcallres *objp)
{
	if (!xdr_u_long(xdrs, &objp->port))
		return (FALSE);
	if (!xdr_bytes(xdrs, (char **)&objp->res.res_val,
	    (uint_t *)&objp->res.res_len, ~0))
		return (FALSE);
	return (TRUE);
}
#endif

bool_t
xdr_rpcb_rmtcallres(XDR *xdrs, rpcb_rmtcallres *objp)
{
	if (!xdr_string(xdrs, &objp->addr, ~0))
		return (FALSE);
	if (!xdr_bytes(xdrs, (char **)&objp->results.results_val,
	    (uint_t *)&objp->results.results_len, ~0))
		return (FALSE);
	return (TRUE);
}

struct rmtcallfd_list {
	int fd;
	char *netid;
	struct rmtcallfd_list *next;
};

static struct rmtcallfd_list *rmthead;
static struct rmtcallfd_list *rmttail;

#define	MASKVAL	(POLLIN | POLLPRI | POLLRDNORM | POLLRDBAND)

int
create_rmtcall_fd(struct netconfig *nconf)
{
	int fd;
	struct rmtcallfd_list *rmt;

	if ((fd = t_open(nconf->nc_device, O_RDWR, NULL)) == -1) {
		if (debugging)
			fprintf(stderr, "create_rmtcall_fd: couldn't open "
			    "\"%s\" (errno %d, t_errno %d)\n",
			    nconf->nc_device, errno, t_errno);
		return (-1);
	}

	if (t_bind(fd, NULL, NULL) == -1) {
		if (debugging)
			fprintf(stderr, "create_rmtcall_fd: couldn't bind to "
			    "fd for \"%s\" (errno %d, t_errno %d)\n",
			    nconf->nc_device, errno, t_errno);
		return (-1);
	}

	rmt = malloc(sizeof (struct rmtcallfd_list));
	if (rmt == NULL) {
		syslog(LOG_ERR, "create_rmtcall_fd: no memory!");
		return (-1);
	}

	rmt->netid = strdup(nconf->nc_netid);
	if (rmt->netid == NULL) {
		free(rmt);
		syslog(LOG_ERR, "create_rmtcall_fd: no memory!");
		return (-1);
	}

	if (svc_add_input(fd, MASKVAL, handle_reply, rmt->netid) == -1) {
		free(rmt->netid);
		free(rmt);
		syslog(LOG_ERR, "create_rmtcall_fd: svc_add_input() failed!");
		return (-1);
	}

	rmt->fd = fd;
	rmt->next = NULL;
	if (rmthead == NULL) {
		rmthead = rmt;
		rmttail = rmt;
	} else {
		rmttail->next = rmt;
		rmttail = rmt;
	}

	return (fd);
}

static int
find_rmtcallfd_by_netid(char *netid)
{
	struct rmtcallfd_list *rmt;

	for (rmt = rmthead; rmt != NULL; rmt = rmt->next) {
		if (strcmp(netid, rmt->netid) == 0) {
			return (rmt->fd);
		}
	}
	return (-1);
}

#define	MAXTIME_OFF	300	/* 5 minutes timeout for rmtcalls */

struct finfo {
	struct finfo	*prev;
	struct finfo	*next;
	int		flag;
#define	FINFO_ACTIVE	0x1
	ulong_t		caller_xid;
	struct netbuf	*caller_addr;
	ulong_t		forward_xid;
	int		forward_fd;
	char		*uaddr;
	struct t_unitdata *reply_data;
	struct rpc_err	reply_error;
	uint_t		res_len;
	void		*res_val;
	cond_t		cv;
};

/*
 * finfo_lock protects rpcb_rmtcalls, rpcb_rmtcalls_max, lastxid,
 * fihead, and fitail.
 */
static mutex_t finfo_lock = DEFAULTMUTEX;

static int rpcb_rmtcalls;
static int rpcb_rmtcalls_max;
static ulong_t lastxid;
static struct finfo *fihead;
static struct finfo *fitail;

void
set_rpcb_rmtcalls_max(int max)
{
	(void) mutex_lock(&finfo_lock);
	rpcb_rmtcalls_max = max;
	if (rpcb_rmtcalls > rpcb_rmtcalls_max) {
		assert(fitail != NULL);
		(void) cond_signal(&fitail->cv);
	}
	(void) mutex_unlock(&finfo_lock);
}

/*
 * Call a remote procedure service.  This procedure is very quiet when things
 * go wrong.  The proc is written to support broadcast rpc.  In the broadcast
 * case, a machine should shut-up instead of complain, lest the requestor be
 * overrun with complaints at the expense of not hearing a valid reply.
 * When receiving a request and verifying that the service exists, we
 *
 *	receive the request
 *
 *	open a new TLI endpoint on the same transport on which we received
 *	the original request
 *
 *	remember the original request's XID (which requires knowing the format
 *	of the svc_dg_data structure)
 *
 *	forward the request, with a new XID, to the requested service,
 *	remembering the XID used to send this request (for later use in
 *	reassociating the answer with the original request), the requestor's
 *	address, the file descriptor on which the forwarded request is
 *	made and the service's address
 *
 *	wait for either the timeout or the condition variable is signalled from
 *	handle_reply().
 *
 * At some time in the future, a reply will be received from the service to
 * which we forwarded the request.  At that time, svc_run() detect that the
 * socket used was for forwarding and call handle_reply() to
 *
 *	receive the reply
 *
 *	bundle the reply, along with the service's universal address
 *
 *	put the reply into the particular finfo
 *
 *	signal the condition variable.
 */

#define	RPC_BUF_MAX	65536	/* can be raised if required */

/*
 *  This is from ../ypcmd/yp_b.h
 *  It does not appear in <rpcsvc/yp_prot.h>
 */
#define	YPBINDPROG ((ulong_t)100007)
#define	YPBINDPROC_SETDOM ((ulong_t)2)

/*
 * reply_type - which proc number
 * versnum - which vers was called
 */
void
rpcbproc_callit_com(struct svc_req *rqstp, SVCXPRT *transp, ulong_t reply_type,
    int versnum)
{
	struct t_info tinfo;
	uint_t sendsz;

	rpcb_rmtcallargs arg;
	rpcblist_ptr rbl;

	struct netconfig *nconf;
	struct netbuf *caller;
	struct nd_mergearg ma;
	int stat;

	int fd;
	struct svc_dg_data *bd;
	struct finfo *fi;

	struct rpc_msg call_msg;
	char outbuf[RPC_BUF_MAX];
	char *outbuf_alloc = NULL;
	XDR outxdr;
	bool_t outxdr_created = FALSE;

	AUTH *auth;

	struct t_unitdata tu_data;
	struct netbuf *na;

	timestruc_t to;

	(void) mutex_lock(&finfo_lock);
	if (!allow_indirect || rpcb_rmtcalls_max == 0) {
		(void) mutex_unlock(&finfo_lock);
		return;
	}
	(void) mutex_unlock(&finfo_lock);

	if (t_getinfo(transp->xp_fd, &tinfo) == -1) {
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		return;
	}
	if (tinfo.servtype != T_CLTS)
		return;	/* Only datagram type accepted */

	sendsz = __rpc_get_t_size(0, tinfo.tsdu);
	if (sendsz == 0) {	/* data transfer not supported */
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		return;
	}
	/*
	 * Should be multiple of 4 for XDR.
	 */
	sendsz = ((sendsz + 3) / 4) * 4;

	(void) memset((char *)&arg, 0, sizeof (arg));
	if (!svc_getargs(transp, xdr_rpcb_rmtcallargs, (char *)&arg)) {
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_decode(transp);
		if (debugging)
			fprintf(stderr,
			"rpcbproc_callit_com:  svc_getargs failed\n");
		goto error;
	}

	/*
	 * Disallow calling rpcbind for certain procedures.
	 * Allow calling NULLPROC - per man page on rpcb_rmtcall().
	 * switch is in alphabetical order.
	 */
	if (arg.proc != NULLPROC) {
		switch (arg.prog) {
		case KEY_PROG:
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting KEY_PROG(%d)\n",
				    arg.proc);
			goto error;
		case MOUNTPROG:
			if (arg.proc != MOUNTPROC_MNT)
				break;
			/*
			 * In Solaris 2.6, the host-based accesss control
			 * is done by the NFS server on each request.
			 * Prior to 2.6 we rely on mountd.
			 */
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting MOUNTPROG(%d)\n",
				    arg.proc);
			goto error;
		case NFS_ACL_PROGRAM:
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting NFS_ACL_PROGRAM(%d)\n",
				    arg.proc);
			goto error;
		case NFS_PROGRAM:
			/* also NFS3_PROGRAM */
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting NFS_PROGRAM(%d)\n",
				    arg.proc);
			goto error;
		case RPCBPROG:
			/*
			 * Disallow calling rpcbind for certain procedures.
			 * Luckily Portmap set/unset/callit also have same
			 * procedure numbers.  So, will not check for those.
			 */
			switch (arg.proc) {
			case RPCBPROC_SET:
			case RPCBPROC_UNSET:
			case RPCBPROC_CALLIT:
			case RPCBPROC_INDIRECT:
				if (reply_type == RPCBPROC_INDIRECT)
					svcerr_weakauth(transp); /* XXX */
				if (debugging)
					fprintf(stderr, "rpcbproc_callit_com: "
					    "calling RPCBPROG procs SET, "
					    "UNSET, CALLIT, or INDIRECT not "
					    "allowed\n");
				goto error;
			default:
				/*
				 * Ideally, we should have called rpcb_service()
				 * or pmap_service() with appropriate parameters
				 * instead of going about in a roundabout
				 * manner.  Hopefully, this case should happen
				 * rarely.
				 */
				break;
			}
			break;
		case RQUOTAPROG:
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting RQUOTAPROG(%d)\n",
				    arg.proc);
			goto error;
		case YPPASSWDPROG:
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting YPPASSWDPROG(%d)\n",
				    arg.proc);
			goto error;
		case YPU_PROG:
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting YPU_PROG(%d)\n",
				    arg.proc);
			goto error;
		case YPBINDPROG:
			if (arg.proc != YPBINDPROC_SETDOM)
				break;
			if (debugging)
				fprintf(stderr,
				    "rpcbind: rejecting YPBINDPROG(%d)\n",
				    arg.proc);
			goto error;
		case YPPROG:
			switch (arg.proc) {
			case YPPROC_FIRST:
			case YPPROC_NEXT:
			case YPPROC_MATCH:
			case YPPROC_ALL:
				if (debugging)
					fprintf(stderr,
					    "rpcbind: rejecting YPPROG(%d)\n",
					    arg.proc);
				goto error;
			default:
				break;
			}
			break;
		default:
			break;
		}
	}

	(void) rw_rdlock(&list_rbl_lock);
	rbl = find_service(arg.prog, arg.vers, transp->xp_netid);

	rpcbs_rmtcall(versnum - PMAPVERS, reply_type, arg.prog, arg.vers,
	    arg.proc, transp->xp_netid, rbl);

	if (rbl == NULL) {
		(void) rw_unlock(&list_rbl_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_noprog(transp);
		goto error;
	}
	if (rbl->rpcb_map.r_vers != arg.vers) {
		if (reply_type == RPCBPROC_INDIRECT) {
			ulong_t vers_low, vers_high;

			find_versions(arg.prog, transp->xp_netid,
			    &vers_low, &vers_high);
			(void) rw_unlock(&list_rbl_lock);
			svcerr_progvers(transp, vers_low, vers_high);
		} else {
			(void) rw_unlock(&list_rbl_lock);
		}
		goto error;
	}

	/*
	 * Check whether this entry is valid and a server is present
	 * Mergeaddr() returns NULL if no such entry is present, and
	 * returns "" if the entry was present but the server is not
	 * present (i.e., it crashed).
	 */
	if (reply_type == RPCBPROC_INDIRECT) {
		char *uaddr = mergeaddr(transp, transp->xp_netid,
		    rbl->rpcb_map.r_addr, NULL);
		if ((uaddr == (char *)NULL) || uaddr[0] == '\0') {
			(void) rw_unlock(&list_rbl_lock);
			svcerr_noprog(transp);
			goto error;
		} else {
			free(uaddr);
		}
	}

	nconf = rpcbind_get_conf(transp->xp_netid);
	if (nconf == NULL) {
		(void) rw_unlock(&list_rbl_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  rpcbind_get_conf failed\n");
		goto error;
	}

	caller = svc_getrpccaller(transp);
	ma.c_uaddr = taddr2uaddr(nconf, caller);
	ma.s_uaddr = rbl->rpcb_map.r_addr;

	/*
	 * A mergeaddr operation allocates a string, which it stores in
	 * ma.m_uaddr.  It's passed to forward_register() and is
	 * eventually freed by forward_destroy().
	 */
	stat = netdir_options(nconf, ND_MERGEADDR, 0, (char *)&ma);
	(void) rw_unlock(&list_rbl_lock);
	free(ma.c_uaddr);
	if (stat)
		(void) syslog(LOG_ERR, "netdir_merge failed for %s: %s",
		    nconf->nc_netid, netdir_sperror());

	if ((fd = find_rmtcallfd_by_netid(nconf->nc_netid)) == -1) {
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		free(ma.m_uaddr);
		goto error;
	}

	bd = get_svc_dg_data(transp);

	assert(!MUTEX_HELD(&finfo_lock));
	fi = forward_register(bd->su_xid, caller, fd, ma.m_uaddr);
	if (fi == NULL) {
		/*  forward_register failed.  Perhaps no memory. */
		free(ma.m_uaddr);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  forward_register failed\n");
		assert(!MUTEX_HELD(&finfo_lock));
		goto error;
	}
	/* forward_register() returns with finfo_lock held when successful */
	assert(MUTEX_HELD(&finfo_lock));

	if (fi->flag & FINFO_ACTIVE) {
		/*
		 * A duplicate request for the slow server.  Let's not
		 * beat on it any more.
		 */
		(void) mutex_unlock(&finfo_lock);
		free(ma.m_uaddr);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  duplicate request\n");
		goto error;
	}
	fi->flag |= FINFO_ACTIVE;

	call_msg.rm_xid = fi->forward_xid;
	call_msg.rm_direction = CALL;
	call_msg.rm_call.cb_rpcvers = RPC_MSG_VERSION;
	call_msg.rm_call.cb_prog = arg.prog;
	call_msg.rm_call.cb_vers = arg.vers;

	if (sendsz > RPC_BUF_MAX) {
		outbuf_alloc = malloc(sendsz);
		if (outbuf_alloc == NULL) {
			forward_destroy(fi);
			(void) mutex_unlock(&finfo_lock);
			if (reply_type == RPCBPROC_INDIRECT)
				svcerr_systemerr(transp);
			if (debugging)
				fprintf(stderr,
				    "rpcbproc_callit_com:  No memory!\n");
			goto error;
		}
		xdrmem_create(&outxdr, outbuf_alloc, sendsz, XDR_ENCODE);
	} else {
		xdrmem_create(&outxdr, outbuf, sendsz, XDR_ENCODE);
	}
	outxdr_created = TRUE;

	if (!xdr_callhdr(&outxdr, &call_msg)) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  xdr_callhdr failed\n");
		goto error;
	}

	if (!xdr_u_long(&outxdr, &arg.proc)) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  xdr_u_long failed\n");
		goto error;
	}

	if (rqstp->rq_cred.oa_flavor == AUTH_NULL) {
		auth = authnone_create();
	} else if (rqstp->rq_cred.oa_flavor == AUTH_SYS) {
		struct authsys_parms *au;

		CTASSERT(sizeof (struct authsys_parms) <= RQCRED_SIZE);
		au = (struct authsys_parms *)rqstp->rq_clntcred;
		auth = authsys_create(au->aup_machname, au->aup_uid,
		    au->aup_gid, au->aup_len, au->aup_gids);
		if (auth == NULL) /* fall back */
			auth = authnone_create();
	} else {
		/* we do not support any other authentication scheme */
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_weakauth(transp); /* XXX too strong.. */
		if (debugging)
			fprintf(stderr, "rpcbproc_callit_com:  oa_flavor != "
			    "AUTH_NONE and oa_flavor != AUTH_SYS\n");
		goto error;
	}
	if (auth == NULL) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			fprintf(stderr, "rpcbproc_callit_com:  "
			    "authwhatever_create returned NULL\n");
		goto error;
	}
	if (!AUTH_MARSHALL(auth, &outxdr)) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		AUTH_DESTROY(auth);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  AUTH_MARSHALL failed\n");
		goto error;
	}
	AUTH_DESTROY(auth);

	if (!xdr_opaque(&outxdr, arg.args.args_val, arg.args.args_len)) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  xdr_opaque failed\n");
		goto error;
	}

	tu_data.udata.len = XDR_GETPOS(&outxdr);
	if (outbuf_alloc)
		tu_data.udata.buf = outbuf_alloc;
	else
		tu_data.udata.buf = outbuf;
	tu_data.opt.len = 0;

	na = uaddr2taddr(nconf, ma.m_uaddr);
	if (!na) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);
		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		goto error;
	}
	tu_data.addr = *na;

	if (t_sndudata(fd, &tu_data) == -1) {
		int err = errno;
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);

		netdir_free((char *)na, ND_ADDR);

		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			fprintf(stderr,
			    "rpcbproc_callit_com:  t_sndudata failed:  "
			    "t_errno %d, errno %d\n", t_errno, err);
		goto error;
	}

	netdir_free((char *)na, ND_ADDR);
	xdr_destroy(&outxdr);
	outxdr_created = FALSE;
	if (outbuf_alloc != NULL) {
		free(outbuf_alloc);
		outbuf_alloc = NULL;
	}
	svc_freeargs(transp, xdr_rpcb_rmtcallargs, (char *)&arg);

	to.tv_sec = time(NULL) + MAXTIME_OFF;
	to.tv_nsec = 0;

	while (fi->reply_data == NULL &&
	    cond_timedwait(&fi->cv, &finfo_lock, &to) != ETIME)
		;

	if (fi->reply_data == NULL) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);

		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			(void) fprintf(stderr,
			    "rpcbproc_callit_com:  timeout\n");
		return;
	}

	if (fi->reply_error.re_status != RPC_SUCCESS) {
		forward_destroy(fi);
		(void) mutex_unlock(&finfo_lock);

		if (reply_type == RPCBPROC_INDIRECT)
			svcerr_systemerr(transp);
		if (debugging)
			(void) fprintf(stderr,
			    "rpcbproc_callit_com:  error in reply:  %s\n",
			    clnt_sperrno(fi->reply_error.re_status));
		return;
	}

	switch (versnum) {
#ifdef PORTMAP
	case PMAPVERS:
		{
			rmtcallres result;
			int h1, h2, h3, h4, p1, p2;

			/* interpret the universal address for TCP/IP */
			if (sscanf(fi->uaddr, "%d.%d.%d.%d.%d.%d",
			    &h1, &h2, &h3, &h4, &p1, &p2) != 6)
				break;

			result.port = ((p1 & 0xff) << 8) + (p2 & 0xff);
			result.res.res_len = fi->res_len;
			result.res.res_val = fi->res_val;

			svc_sendreply(transp, xdr_rmtcallres, (char *)&result);
		}
		break;
#endif
	case RPCBVERS:
	case RPCBVERS4:
		{
			rpcb_rmtcallres result;

			result.addr = fi->uaddr;
			result.results.results_len = fi->res_len;
			result.results.results_val = fi->res_val;

			svc_sendreply(transp, xdr_rpcb_rmtcallres,
			    (char *)&result);
		}
		break;
	}

	forward_destroy(fi);
	(void) mutex_unlock(&finfo_lock);

	return;

error:
	if (outxdr_created)
		xdr_destroy(&outxdr);
	free(outbuf_alloc);
	svc_freeargs(transp, xdr_rpcb_rmtcallargs, (char *)&arg);
}

static struct finfo *forward_find(ulong_t, char *);

/*
 * Adds an entry into the finfo list for the given request. Returns the finfo
 * and finfo_lock is left held.  If duplicate request, returns finfo with
 * FINFO_ACTIVE, else returns finfo without FINFO_ACTIVE.
 * If failed, returns NULL and finfo_lock is left unheld.
 */
static struct finfo *
forward_register(ulong_t caller_xid, struct netbuf *caller_addr, int forward_fd,
    char *uaddr)
{
	struct finfo	*fi;

	(void) mutex_lock(&finfo_lock);
	if (rpcb_rmtcalls_max == 0) {
		(void) mutex_unlock(&finfo_lock);
		return (NULL);
	}

	/*
	 * initialization: once this has happened, lastxid will
	 * never be 0 again, when entering or returning from this function.
	 */
	if (lastxid == 0)
		lastxid = time(NULL);

	/*
	 * Check if it is an duplicate entry
	 */
	for (fi = fihead; fi != NULL; fi = fi->next) {
		if (fi->caller_xid == caller_xid &&
		    netbufcmp(fi->caller_addr, caller_addr)) {
			assert(fi->flag & FINFO_ACTIVE);
			return (fi);
		}
	}

	fi = malloc(sizeof (*fi));
	if (fi == NULL) {
		(void) mutex_unlock(&finfo_lock);
		return (NULL);
	}

	if ((fi->caller_addr = netbufdup(caller_addr)) == NULL) {
		(void) mutex_unlock(&finfo_lock);
		free(fi);
		return (NULL);
	}

	/*
	 * Generate new xid and make sure it is unique.
	 */
	do {
		lastxid++;
		/* avoid lastxid wraparound to 0 */
		if (lastxid == 0)
			lastxid = 1;
	} while (forward_find(lastxid, uaddr) != NULL);

	fi->prev = NULL;
	fi->next = fihead;
	if (fihead != NULL)
		fihead->prev = fi;
	fihead = fi;
	if (fitail == NULL)
		fitail = fi;

	fi->flag = 0;
	fi->caller_xid = caller_xid;

	fi->forward_xid = lastxid;
	fi->forward_fd = forward_fd;

	/*
	 * Though uaddr is not allocated here, it will still be freed
	 * from forward_destroy().
	 */
	fi->uaddr = uaddr;

	fi->reply_data = NULL;
	(void) cond_init(&fi->cv, USYNC_THREAD, NULL);

	rpcb_rmtcalls++;
	if (rpcb_rmtcalls > rpcb_rmtcalls_max) {
		assert(fitail != fi);
		(void) cond_signal(&fitail->cv);
	}

	return (fi);
}

static void
forward_destroy(struct finfo *fi)
{
	assert(MUTEX_HELD(&finfo_lock));
	assert(fi->flag & FINFO_ACTIVE);

	if (fihead == fi) {
		assert(fi->prev == NULL);
		fihead = fi->next;
	} else {
		fi->prev->next = fi->next;
	}

	if (fitail == fi) {
		assert(fi->next == NULL);
		fitail = fi->prev;
	} else {
		fi->next->prev = fi->prev;
	}

	netbuffree(fi->caller_addr);
	free(fi->uaddr);
	if (fi->reply_data != NULL)
		t_free((char *)fi->reply_data, T_UNITDATA);
	(void) cond_destroy(&fi->cv);

	free(fi);

	rpcb_rmtcalls--;
	if (rpcb_rmtcalls > rpcb_rmtcalls_max) {
		assert(fitail != NULL);
		(void) cond_signal(&fitail->cv);
	}
}

static struct finfo *
forward_find(ulong_t reply_xid, char *uaddr)
{
	struct finfo *fi;

	assert(MUTEX_HELD(&finfo_lock));

	for (fi = fihead; fi != NULL; fi = fi->next) {
		if (fi->forward_xid == reply_xid &&
		    strcmp(fi->uaddr, uaddr) == 0)
			return (fi);
	}

	return (NULL);
}

static int
netbufcmp(struct netbuf *n1, struct netbuf *n2)
{
	return ((n1->len != n2->len) || memcmp(n1->buf, n2->buf, n1->len));
}

static struct netbuf *
netbufdup(struct netbuf *ap)
{
	struct netbuf *np;

	np = malloc(sizeof (struct netbuf) + ap->len);
	if (np) {
		np->maxlen = np->len = ap->len;
		np->buf = ((char *)np) + sizeof (struct netbuf);
		(void) memcpy(np->buf, ap->buf, ap->len);
	}
	return (np);
}

static void
netbuffree(struct netbuf *ap)
{
	free(ap);
}

static void
handle_reply(svc_input_id_t id, int fd, unsigned int events, void *cookie)
{
	struct t_unitdata *tr_data;
	int res;

	unsigned int inlen;
	char *buffer;
	XDR reply_xdrs;

	struct rpc_msg reply_msg;
	unsigned int pos;
	unsigned int len;

	struct netconfig *nconf;
	char *uaddr = NULL;

	struct finfo *fi;

	tr_data = (struct t_unitdata *)t_alloc(fd, T_UNITDATA,
	    T_ADDR | T_UDATA);
	if (tr_data == NULL) {
		syslog(LOG_ERR, "handle_reply: t_alloc failed!");
		return;
	}

	do {
		int moreflag = 0;

		if (errno == EINTR)
			errno = 0;
		res = t_rcvudata(fd, tr_data, &moreflag);
		if (moreflag & T_MORE) {
			/* Drop this packet - we have no more space. */
			if (debugging)
				fprintf(stderr, "handle_reply:  recvd packet "
				    "with T_MORE flag set\n");
			goto done;
		}
	} while (res < 0 && t_errno == TSYSERR && errno == EINTR);

	if (res < 0) {
		if (debugging)
			fprintf(stderr, "handle_reply:  t_rcvudata returned "
			    "%d, t_errno %d, errno %d\n", res, t_errno, errno);

		if (t_errno == TLOOK)
			(void) t_rcvuderr(fd, NULL);

		goto done;
	}

	inlen = tr_data->udata.len;
	buffer = tr_data->udata.buf;
	assert(buffer != NULL);
	xdrmem_create(&reply_xdrs, buffer, inlen, XDR_DECODE);

	reply_msg.acpted_rply.ar_verf = _null_auth;
	reply_msg.acpted_rply.ar_results.where = 0;
	reply_msg.acpted_rply.ar_results.proc = (xdrproc_t)xdr_void;

	if (!xdr_replymsg(&reply_xdrs, &reply_msg)) {
		xdr_destroy(&reply_xdrs);
		if (debugging)
			(void) fprintf(stderr,
			    "handle_reply:  xdr_replymsg failed\n");
		goto done;
	}
	pos = XDR_GETPOS(&reply_xdrs);
	xdr_destroy(&reply_xdrs);

	len = inlen - pos;

	nconf = rpcbind_get_conf((char *)cookie);
	if (nconf == NULL) {
		syslog(LOG_ERR, "handle_reply: rpcbind_get_conf failed!");
		goto done;
	}
	uaddr = taddr2uaddr(nconf, &tr_data->addr);
	if (uaddr == NULL) {
		syslog(LOG_ERR, "handle_reply: taddr2uaddr failed!");
		goto done;
	}

	(void) mutex_lock(&finfo_lock);
	fi = forward_find(reply_msg.rm_xid, uaddr);
	if (fi == NULL) {
		(void) mutex_unlock(&finfo_lock);
		goto done;
	}

	fi->reply_data = tr_data;
	tr_data = NULL;

	__seterr_reply(&reply_msg, &fi->reply_error);

	fi->res_len = len;
	fi->res_val = &buffer[pos];

	(void) cond_signal(&fi->cv);
	(void) mutex_unlock(&finfo_lock);

done:
	free(uaddr);
	if (tr_data)
		t_free((char *)tr_data, T_UNITDATA);
}

/*
 * prog: Program Number
 * netid: Transport Provider token
 * lowvp: Low version number
 * highvp: High version number
 */
static void
find_versions(rpcprog_t prog, char *netid, rpcvers_t *lowvp, rpcvers_t *highvp)
{
	rpcblist_ptr rbl;
	rpcvers_t lowv = 0;
	rpcvers_t highv = 0;

	assert(RW_LOCK_HELD(&list_rbl_lock));

	for (rbl = list_rbl; rbl != NULL; rbl = rbl->rpcb_next) {
		if ((rbl->rpcb_map.r_prog != prog) ||
		    (strcasecmp(rbl->rpcb_map.r_netid, netid) != 0))
			continue;
		if (lowv == 0) {
			highv = rbl->rpcb_map.r_vers;
			lowv = highv;
		} else if (rbl->rpcb_map.r_vers < lowv) {
			lowv = rbl->rpcb_map.r_vers;
		} else if (rbl->rpcb_map.r_vers > highv) {
			highv = rbl->rpcb_map.r_vers;
		}
	}

	*lowvp = lowv;
	*highvp = highv;
}

/*
 * returns the item with the given program, version number and netid.
 * If that version number is not found, it returns the item with that
 * program number, so that address is now returned to the caller. The
 * caller when makes a call to this program, version number, the call
 * will fail and it will return with PROGVERS_MISMATCH. The user can
 * then determine the highest and the lowest version number for this
 * program using clnt_geterr() and use those program version numbers.
 *
 * Returns the RPCBLIST for the given prog, vers and netid
 *
 * prog: Program Number
 * vers: Version Number
 * netid: Transport Provider token
 */
static rpcblist_ptr
find_service(rpcprog_t prog, rpcvers_t vers, char *netid)
{
	rpcblist_ptr hit = NULL;
	rpcblist_ptr rbl;

	assert(RW_LOCK_HELD(&list_rbl_lock));

	for (rbl = list_rbl; rbl != NULL; rbl = rbl->rpcb_next) {
		if ((rbl->rpcb_map.r_prog != prog) ||
		    (strcasecmp(rbl->rpcb_map.r_netid, netid) != 0))
			continue;
		hit = rbl;
		if (rbl->rpcb_map.r_vers == vers)
			break;
	}

	return (hit);
}

/*
 * If the caller is from our zone and we know
 * who it is, we return the uid.
 */
uid_t
rpcb_caller_uid(SVCXPRT *transp)
{
	ucred_t *uc = alloca(ucred_size());

	if (svc_getcallerucred(transp, &uc) != 0 ||
	    (ucred_getzoneid(uc)) != myzone) {
		return (-1);
	} else {
		return (ucred_geteuid(uc));
	}
}

/*
 * Copies the name associated with the uid of the caller and returns
 * a pointer to it.  Similar to getwd().
 */
char *
getowner(SVCXPRT *transp, char *owner)
{
	uid_t uid = rpcb_caller_uid(transp);

	switch (uid) {
	case -1:
		return (strcpy(owner, "unknown"));
	case 0:
		return (strcpy(owner, "superuser"));
	default:
		(void) sprintf(owner, "%u", uid);
		return (owner);
	}
}

#ifdef PORTMAP
/*
 * Add this to the pmap list only if it is UDP or TCP.
 */
static int
add_pmaplist(RPCB *arg)
{
	pmap pmap;
	pmaplist *pml;
	int h1, h2, h3, h4, p1, p2;

	if (strcmp(arg->r_netid, udptrans) == 0) {
		/* It is UDP! */
		pmap.pm_prot = IPPROTO_UDP;
	} else if (strcmp(arg->r_netid, tcptrans) == 0) {
		/* It is TCP */
		pmap.pm_prot = IPPROTO_TCP;
	} else
		/* Not a IP protocol */
		return (0);

	/* interpret the universal address for TCP/IP */
	if (sscanf(arg->r_addr, "%d.%d.%d.%d.%d.%d",
	    &h1, &h2, &h3, &h4, &p1, &p2) != 6)
		return (0);
	pmap.pm_port = ((p1 & 0xff) << 8) + (p2 & 0xff);
	pmap.pm_prog = arg->r_prog;
	pmap.pm_vers = arg->r_vers;
	/*
	 * add to END of list
	 */
	pml = (pmaplist *) malloc((uint_t)sizeof (pmaplist));
	if (pml == NULL) {
		(void) syslog(LOG_ERR, "rpcbind: no memory!\n");
		return (1);
	}
	pml->pml_map = pmap;
	pml->pml_next = NULL;

	(void) rw_wrlock(&list_pml_lock);
	if (list_pml == NULL) {
		list_pml = pml;
	} else {
		pmaplist *fnd;

		/* Attach to the end of the list */
		for (fnd = list_pml; fnd->pml_next; fnd = fnd->pml_next)
			;
		fnd->pml_next = pml;
	}
	(void) rw_unlock(&list_pml_lock);

	return (0);
}

/*
 * Delete this from the pmap list only if it is UDP or TCP.
 */
int
del_pmaplist(RPCB *arg)
{
	pmaplist *pml;
	pmaplist *prevpml, *fnd;
	rpcport_t prot;

	if (strcmp(arg->r_netid, udptrans) == 0) {
		/* It is UDP! */
		prot = IPPROTO_UDP;
	} else if (strcmp(arg->r_netid, tcptrans) == 0) {
		/* It is TCP */
		prot = IPPROTO_TCP;
	} else if (arg->r_netid[0] == '\0') {
		prot = 0;	/* Remove all occurrences */
	} else {
		/* Not a IP protocol */
		return (0);
	}

	assert(RW_WRITE_HELD(&list_pml_lock));

	for (prevpml = NULL, pml = list_pml; pml; /* cstyle */) {
		if ((pml->pml_map.pm_prog != arg->r_prog) ||
		    (pml->pml_map.pm_vers != arg->r_vers) ||
		    (prot && (pml->pml_map.pm_prot != prot))) {
			/* both pml & prevpml move forwards */
			prevpml = pml;
			pml = pml->pml_next;
			continue;
		}
		/* found it; pml moves forward, prevpml stays */
		fnd = pml;
		pml = pml->pml_next;
		if (prevpml == NULL)
			list_pml = pml;
		else
			prevpml->pml_next = pml;
		free(fnd);
	}

	return (0);
}
#endif /* PORTMAP */
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 */
/* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */
/*
 * University Copyright- Copyright (c) 1982, 1986, 1988
 * The Regents of the University of California
 * All Rights Reserved
 *
 * University Acknowledgment- Portions of this document are derived from
 * software developed by the University of California, Berkeley, and its
 * contributors.
 */

/*
 * This is an implementation of RCPBIND according the RFC 1833: Binding
 * Protocols for ONC RPC Version 2.  The RFC specifies three versions of the
 * binding protocol:
 *
 * 1) RPCBIND Version 3 (Section 2.2.1 of the RFC)
 * 2) RPCBIND, Version 4 (Section 2.2.2 of the RFC)
 * 3) Port Mapper Program Protocol (Section 3 of the RFC)
 *
 * Where the "Port Mapper Program Protocol" is refered as Version 2 of the
 * binding protocol.  The implementation of the Version 2 of the binding
 * protocol is compiled in only in a case the PORTMAP macro is defined (by
 * default it is defined).
 *
 * The implementation is based on top of the networking services library -
 * libnsl(3lib) and uses Automatic MT mode (see rpc_control(3nsl) and
 * svc_run(3nsl) for more details).
 *
 * Usually, when a thread handles an RPCBIND procedure (one that arrived from a
 * client), it obtains the data for the response internally, and immediately
 * sends the response back to the client.  The only exception to this rule are
 * remote (aka indirect) RPC calls, for example RPCBPROC_INDIRECT.  Such
 * procedures are designed to forward the RPC request from the client to some
 * other RPC service specified by the client, wait for the result, and forward
 * the result back to the client.  This is implemented in rpcbproc_callit_com().
 *
 * The response from the other (remote) RPC service is handled in
 * handle_reply(), where the thread waiting in rpcbproc_callit_com() is woken
 * up to finish the handling and to send (forward) the response back to the
 * client.
 *
 * The thread implementing the indirect RPC call might be blocked in the
 * rpcbproc_callit_com() waiting for the response from the other RPC service
 * for very long time.  During this time the thread is unable to handle other
 * RPCBIND requests.  To avoid a case when all threads are waiting in
 * rpcbproc_callit_com() and there is no free thread able to handle other
 * RPCBIND requests, the implementation has reserved eight threads to never be
 * used for the remote RPC calls.  The number of active remote RPC calls is in
 * rpcb_rmtcalls, the upper limit of such calls is in rpcb_rmtcalls_max.
 *
 * In addition to the worker threads described above, there are two other
 * threads.  The logthread() thread is responsible for asynchronous logging to
 * syslog.  The terminate() thread is signal handler responsible for reload of
 * the rpcbind configuration (on SIGHUP), or for gracefully shutting down
 * rpcbind (otherwise).
 *
 * There are two global lists used for holding the information about the
 * registered services: list_rbl is for Version 3 and 4 of the binding
 * protocol, and list_pml is for Version 2.  To protect these lists, two global
 * readers/writer locks are defined and heavily used across the rpcbind
 * implementation: list_rbl_lock protecting list_rbl, and list_pml_lock,
 * protecting list_pml.
 *
 * The defined locking order is: list_rbl_lock first, list_pml_lock second.
 */

#include <dlfcn.h>
#include <stdio.h>
#include <stdio_ext.h>
#include <sys/types.h>
#include <unistd.h>
#include <stdlib.h>
#include <string.h>
#include <rpc/rpc.h>
#include <netconfig.h>
#include <netdir.h>
#include <errno.h>
#include <sys/wait.h>
#include <signal.h>
#include <string.h>
#include <stdlib.h>
#include <thread.h>
#include <synch.h>
#include <stdarg.h>
#ifdef PORTMAP
#include <netinet/in.h>
#endif
#include <arpa/inet.h>
#include <sys/termios.h>
#include "rpcbind.h"
#include <sys/syslog.h>
#include <sys/stat.h>
#include <syslog.h>
#include <string.h>
#include <sys/time.h>
#include <sys/resource.h>
#include <rpcsvc/daemon_utils.h>
#include <priv_utils.h>
#include <libscf.h>
#include <sys/ccompile.h>
#include <zone.h>
#include <ctype.h>
#include <limits.h>
#include <assert.h>

static sigset_t sigwaitset;

static void terminate(void);
static void detachfromtty(void);
static void parseargs(int, char *[]);
static void rbllist_add(ulong_t, ulong_t, struct netconfig *, struct netbuf *);
static int init_transport(struct netconfig *);
static int check_netconfig(void);

static boolean_t check_hostserv(struct netconfig *, const char *, const char *);
static int setopt_reuseaddr(int);
static int setopt_anon_mlp(int);
static int setup_callit(int);

static void rpcb_check_init(void);

/* Global variables */
int debugging = 0;	/* Tell me what's going on */
static int ipv6flag = 0;
int doabort = 0;	/* When debugging, do an abort on errors */
static int listen_backlog;
static const int reserved_threads = 8;

/*
 * list_rbl_lock protects list_rbl
 * lock order: list_rbl_lock, list_pml_lock
 */
rwlock_t list_rbl_lock = DEFAULTRWLOCK;
rpcblist_ptr list_rbl;	/* A list of version 3/4 rpcbind services */

char *loopback_dg;	/* Datagram loopback transport, for set and unset */
char *loopback_vc;	/* COTS loopback transport, for set and unset */
char *loopback_vc_ord;	/* COTS_ORD loopback transport, for set and unset */

volatile boolean_t verboselog = B_FALSE;
volatile boolean_t wrap_enabled = B_FALSE;
volatile boolean_t allow_indirect = B_TRUE;
volatile boolean_t local_only = B_TRUE;

/* Local Variable */
static int warmstart = 0;	/* Grab a old copy of registrations */

#ifdef PORTMAP
/*
 * list_pml_lock protects list_pml
 * lock order: list_rbl_lock, list_pml_lock
 */
rwlock_t list_pml_lock = DEFAULTRWLOCK;
PMAPLIST *list_pml;	/* A list of version 2 rpcbind services */

char *udptrans;		/* Name of UDP transport */
char *tcptrans;		/* Name of TCP transport */
char *udp_uaddr;	/* Universal UDP address */
char *tcp_uaddr;	/* Universal TCP address */
#endif
static char servname[] = "rpcbind";
static char superuser[] = "superuser";

static const char daemon_dir[] = DAEMON_DIR;

static void
block_signals(void)
{
	(void) sigemptyset(&sigwaitset);
	(void) sigaddset(&sigwaitset, SIGINT);
	(void) sigaddset(&sigwaitset, SIGTERM);
	(void) sigaddset(&sigwaitset, SIGQUIT);
	(void) sigaddset(&sigwaitset, SIGHUP);
	(void) sigprocmask(SIG_BLOCK, &sigwaitset, NULL);

	/* ignore other signals that could get sent */
	(void) signal(SIGUSR1, SIG_IGN);
	(void) signal(SIGUSR2, SIG_IGN);
}

int
main(int argc, char *argv[])
{
	struct netconfig *nconf;
	void *nc_handle;	/* Net config handle */
	struct rlimit rl;
	int rpc_svc_fdunlim = 1;
	int rpc_svc_mode = RPC_SVC_MT_AUTO;
	int maxrecsz = RPC_MAXDATASIZE;
	boolean_t can_do_mlp;

	block_signals();

	parseargs(argc, argv);

	if (getrlimit(RLIMIT_NOFILE, &rl) != 0) {
		syslog(LOG_ERR, "getrlimit failed");
	} else {
		rl.rlim_cur = rl.rlim_max;
		if (setrlimit(RLIMIT_NOFILE, &rl) != 0)
			syslog(LOG_ERR, "setrlimit failed");
	}
	(void) enable_extended_FILE_stdio(-1, -1);

	openlog("rpcbind", LOG_CONS, LOG_DAEMON);

	/*
	 * Create the daemon directory in /var/run
	 */
	if (mkdir(daemon_dir, DAEMON_DIR_MODE) == 0 || errno == EEXIST) {
		chmod(daemon_dir, DAEMON_DIR_MODE);
		chown(daemon_dir, DAEMON_UID, DAEMON_GID);
	} else {
		syslog(LOG_ERR, "failed to create \"%s\": %m", daemon_dir);
	}

	/*
	 * These privileges are required for the t_bind check rpcbind uses
	 * to determine whether a service is still live or not.
	 */
	can_do_mlp = priv_ineffect(PRIV_NET_BINDMLP);
	if (__init_daemon_priv(PU_RESETGROUPS|PU_CLEARLIMITSET, DAEMON_UID,
	    DAEMON_GID, PRIV_NET_PRIVADDR, PRIV_SYS_NFS,
	    can_do_mlp ? PRIV_NET_BINDMLP : NULL, NULL) == -1) {
		fprintf(stderr, "Insufficient privileges\n");
		exit(1);
	}

	myzone = getzoneid();

	/*
	 * Set number of file descriptors to unlimited
	 */
	if (!rpc_control(RPC_SVC_USE_POLLFD, &rpc_svc_fdunlim)) {
		syslog(LOG_INFO, "unable to set number of FD to unlimited");
	}

	/*
	 * Tell RPC that we want automatic thread mode.
	 * A new thread will be spawned for each request.
	 */
	if (!rpc_control(RPC_SVC_MTMODE_SET, &rpc_svc_mode)) {
		syslog(LOG_ERR, "unable to set automatic MT mode");
		exit(1);
	}

	/*
	 * Enable non-blocking mode and maximum record size checks for
	 * connection oriented transports.
	 */
	if (!rpc_control(RPC_SVC_CONNMAXREC_SET, &maxrecsz)) {
		syslog(LOG_INFO, "unable to set RPC max record size");
	}

	{
		/*
		 * rpcbind is the first application to encounter the
		 * various netconfig files.  check_netconfig() verifies
		 * that they are set up correctly and complains loudly
		 * if not.
		 */
		int trouble;

		trouble = check_netconfig();
		if (trouble) {
			syslog(LOG_ERR, "%s: found %d errors with network "
			    "configuration files. Exiting.", argv[0], trouble);
			fprintf(stderr, "%s: found %d errors with network "
			    "configuration files. Exiting.\n",
			    argv[0], trouble);
			exit(1);
		}
	}

	loopback_dg = "";
	loopback_vc = "";
	loopback_vc_ord = "";
#ifdef PORTMAP
	udptrans = "";
	tcptrans = "";
#endif

	ipv6flag = Is_ipv6present();
	rpcb_check_init();

	nc_handle = setnetconfig();	/* open netconfig file */
	if (nc_handle == NULL) {
		syslog(LOG_ERR, "could not read /etc/netconfig");
		exit(1);
	}
	while ((nconf = getnetconfig(nc_handle)) != NULL) {
		if (nconf->nc_flag & NC_VISIBLE)
			init_transport(nconf);
	}
	endnetconfig(nc_handle);

	if ((loopback_dg[0] == '\0') && (loopback_vc[0] == '\0') &&
	    (loopback_vc_ord[0] == '\0')) {
		syslog(LOG_ERR, "could not find loopback transports");
		exit(1);
	}

	if (warmstart) {
		read_warmstart();
	}

	/* Create terminate signal handler for graceful exit */
	if (thr_create(NULL, 0, (void *(*)(void *))terminate, NULL, 0, NULL)) {
		syslog(LOG_ERR, "Failed to create terminate thread");
		exit(1);
	}

	if (debugging) {
		printf("rpcbind debugging enabled.");
		if (doabort) {
			printf("  Will abort on errors!\n");
		} else {
			printf("\n");
		}
	} else {
		detachfromtty();
	}

	/* These are basic privileges we do not need */
	__fini_daemon_priv(PRIV_PROC_EXEC, PRIV_PROC_SESSION,
	    PRIV_FILE_LINK_ANY, PRIV_PROC_INFO, (char *)NULL);

	svc_run();
	syslog(LOG_ERR, "svc_run returned unexpectedly");
	rpcbind_abort();
	/* NOTREACHED */
}

/*
 * Increments a counter each time a problem is found with the network
 * configuration information.
 */
static int
check_netconfig(void)
{
	void	*nc;
	void	*dlcookie;
	int	busted = 0;
	int	i;
	int	lo_clts_found = 0, lo_cots_found = 0, lo_cotsord_found = 0;
	struct netconfig	*nconf, *np;
	struct stat	sb;

	nc = setnetconfig();
	if (nc == NULL) {
		if (debugging)
			fprintf(stderr,
			    "setnetconfig() failed:  %s\n", nc_sperror());
		syslog(LOG_ALERT, "setnetconfig() failed:  %s", nc_sperror());
		return (1);
	}
	while ((np = getnetconfig(nc)) != NULL) {
		if ((np->nc_flag & NC_VISIBLE) == 0)
			continue;
		if (debugging)
			fprintf(stderr, "checking netid \"%s\"\n",
			    np->nc_netid);
		if (strcmp(np->nc_protofmly, NC_LOOPBACK) == 0)
			switch (np->nc_semantics) {
			case NC_TPI_CLTS:
				lo_clts_found = 1;
				break;

			case NC_TPI_COTS:
				lo_cots_found = 1;
				break;

			case NC_TPI_COTS_ORD:
				lo_cotsord_found = 1;
				break;
			}
		if (stat(np->nc_device, &sb) == -1 && errno == ENOENT) {
			if (debugging)
				fprintf(stderr, "\tdevice %s does not exist\n",
				    np->nc_device);
			syslog(LOG_ERR, "netid %s:  device %s does not exist",
			    np->nc_netid, np->nc_device);
			busted++;
		} else
			if (debugging)
				fprintf(stderr, "\tdevice %s present\n",
				    np->nc_device);
		for (i = 0; i < np->nc_nlookups; i++) {
			char	*libname = np->nc_lookups[i];

			if ((dlcookie = dlopen(libname, RTLD_LAZY)) == NULL) {
				char *dlerrstr;

				dlerrstr = dlerror();
				if (debugging) {
					fprintf(stderr, "\tnetid %s: dlopen of "
					    "name-to-address library %s "
					    "failed\ndlerror: %s",
					    np->nc_netid, libname,
					    dlerrstr ? dlerrstr : "");
				}
				syslog(LOG_ERR, "netid %s:  dlopen of "
				    "name-to-address library %s failed",
				    np->nc_netid, libname);
				if (dlerrstr)
					syslog(LOG_ERR, "%s", dlerrstr);
				busted++;
			} else {
				if (debugging)
					fprintf(stderr, "\tdlopen of "
					    "name-to-address library %s "
					    "succeeded\n", libname);
				(void) dlclose(dlcookie);
			}
		}
		nconf = getnetconfigent(np->nc_netid);

		if (!check_hostserv(nconf, HOST_SELF, ""))
			busted++;
		if (!check_hostserv(nconf, HOST_SELF_CONNECT, ""))
			busted++;
		if (!check_hostserv(nconf, HOST_SELF, "rpcbind"))
			busted++;
		if (!check_hostserv(nconf, HOST_SELF_CONNECT, "rpcbind"))
			busted++;

		freenetconfigent(nconf);
	}
	endnetconfig(nc);

	if (lo_clts_found) {
		if (debugging)
			fprintf(stderr, "Found CLTS loopback transport\n");
	} else {
		syslog(LOG_ALERT, "no CLTS loopback transport found\n");
		if (debugging)
			fprintf(stderr, "no CLTS loopback transport found\n");
	}
	if (lo_cots_found) {
		if (debugging)
			fprintf(stderr, "Found COTS loopback transport\n");
	} else {
		syslog(LOG_ALERT, "no COTS loopback transport found\n");
		if (debugging)
			fprintf(stderr, "no COTS loopback transport found\n");
	}
	if (lo_cotsord_found) {
		if (debugging)
			fprintf(stderr, "Found COTS ORD loopback transport\n");
	} else {
		syslog(LOG_ALERT, "no COTS ORD loopback transport found\n");
		if (debugging)
			fprintf(stderr,
			    "no COTS ORD loopback transport found\n");
	}

	return (busted);
}

/*
 * Adds the entry into the rpcbind database.
 * If PORTMAP, then for UDP and TCP, it adds the entries for version 2 also
 * Returns 0 if succeeds, else fails
 */
static int
init_transport(struct netconfig *nconf)
{
	int fd;
	struct t_bind *taddr, *baddr;
	SVCXPRT	*my_xprt;
	struct nd_addrlist *nas;
	struct nd_hostserv hs;
	static int msgprt = 0;

	if ((nconf->nc_semantics != NC_TPI_CLTS) &&
	    (nconf->nc_semantics != NC_TPI_COTS) &&
	    (nconf->nc_semantics != NC_TPI_COTS_ORD))
		return (1);	/* not my type */

	if ((strcmp(nconf->nc_protofmly, NC_INET6) == 0) && !ipv6flag) {
		if (!msgprt)
			syslog(LOG_DEBUG, "/etc/netconfig has IPv6 entries but "
			    "IPv6 is not configured");
		msgprt++;
		return (1);
	}

	if ((fd = t_open(nconf->nc_device, O_RDWR, NULL)) < 0) {
		syslog(LOG_ERR, "%s: cannot open connection: %s",
		    nconf->nc_netid, t_errlist[t_errno]);
		return (1);
	}

	if (is_system_labeled() &&
	    (strcmp(nconf->nc_protofmly, NC_INET) == 0 ||
	    strcmp(nconf->nc_protofmly, NC_INET6) == 0) &&
	    setopt_anon_mlp(fd) == -1) {
		syslog(LOG_ERR, "%s: couldn't set SO_ANON_MLP option",
		    nconf->nc_netid);
	}

	/*
	 * Negotiate for returning the ucred of the caller. This should
	 * done before enabling the endpoint for service via
	 * t_bind() so that requests to rpcbind contain the uid.
	 */
	svc_fd_negotiate_ucred(fd);

	taddr = (struct t_bind *)t_alloc(fd, T_BIND, T_ADDR);
	baddr = (struct t_bind *)t_alloc(fd, T_BIND, T_ADDR);
	if ((baddr == NULL) || (taddr == NULL)) {
		syslog(LOG_ERR, "%s: cannot allocate netbuf: %s",
		    nconf->nc_netid, t_errlist[t_errno]);
		exit(1);
	}

	/* Get rpcbind's address on this transport */
	hs.h_host = HOST_SELF;
	hs.h_serv = servname;
	if (netdir_getbyname(nconf, &hs, &nas))
		goto error;

	/* Copy the address */
	taddr->addr.len = nas->n_addrs->len;
	memcpy(taddr->addr.buf, nas->n_addrs->buf, (int)nas->n_addrs->len);
	netdir_free((char *)nas, ND_ADDRLIST);

	if (nconf->nc_semantics == NC_TPI_CLTS)
		taddr->qlen = 0;
	else
		taddr->qlen = listen_backlog;

	if (strcmp(nconf->nc_proto, NC_TCP) == 0) {
		/*
		 * Sm: If we are running then set SO_REUSEADDR option
		 * so that we can bind to our preferred address even if
		 * previous connections are in FIN_WAIT state
		 */
		if (setopt_reuseaddr(fd) == -1) {
			syslog(LOG_ERR, "Couldn't set SO_REUSEADDR option");
		}
	}

	if (t_bind(fd, taddr, baddr) != 0) {
		syslog(LOG_ERR, "%s: cannot bind: %s",
		    nconf->nc_netid, t_errlist[t_errno]);
		goto error;
	}

	if (nconf->nc_semantics != NC_TPI_CLTS && taddr->qlen != baddr->qlen)
		syslog(LOG_NOTICE, "%s: unable to set listen backlog to %d "
		    "(negotiated: %d)", nconf->nc_netid, taddr->qlen,
		    baddr->qlen);

	if (memcmp(taddr->addr.buf, baddr->addr.buf, (int)baddr->addr.len)) {
		syslog(LOG_ERR, "%s: address in use", nconf->nc_netid);
		goto error;
	}

	my_xprt = svc_tli_create(fd, nconf, baddr, 0, 0);
	if (my_xprt == NULL) {
		syslog(LOG_ERR, "%s: could not create service",
		    nconf->nc_netid);
		goto error;
	}

	/* set up multicast address for RPC CALL_IT, IPv6 */

	if ((strcmp(nconf->nc_protofmly, NC_INET6) == 0) &&
	    (strcmp(nconf->nc_proto, NC_UDP) == 0)) {
		if (setup_callit(fd) < 0) {
			syslog(LOG_ERR, "Unable to join IPv6 multicast group "
			    "for rpc broadcast %s", RPCB_MULTICAST_ADDR);
		}
	}

	if (strcmp(nconf->nc_proto, NC_TCP) == 0) {
		svc_control(my_xprt, SVCSET_KEEPALIVE, (void *) TRUE);
	}

#ifdef PORTMAP
	/*
	 * Register both the versions for tcp/ip and udp/ip
	 */
	if ((strcmp(nconf->nc_protofmly, NC_INET) == 0) &&
	    ((strcmp(nconf->nc_proto, NC_TCP) == 0) ||
	    (strcmp(nconf->nc_proto, NC_UDP) == 0))) {
		PMAPLIST *pml;

		if (!svc_register(my_xprt, PMAPPROG, PMAPVERS,
		    pmap_service, 0)) {
			syslog(LOG_ERR, "could not register on %s",
			    nconf->nc_netid);
			goto error;
		}
		pml = malloc(sizeof (PMAPLIST));
		if (pml == NULL) {
			syslog(LOG_ERR, "no memory!");
			exit(1);
		}
		pml->pml_map.pm_prog = PMAPPROG;
		pml->pml_map.pm_vers = PMAPVERS;
		pml->pml_map.pm_port = PMAPPORT;
		if (strcmp(nconf->nc_proto, NC_TCP) == 0) {
			if (tcptrans[0]) {
				syslog(LOG_ERR,
				"cannot have more than one TCP transport");
				goto error;
			}
			tcptrans = strdup(nconf->nc_netid);
			pml->pml_map.pm_prot = IPPROTO_TCP;

			/* Let's snarf the universal address */
			/* "h1.h2.h3.h4.p1.p2" */
			tcp_uaddr = taddr2uaddr(nconf, &baddr->addr);
		} else {
			if (udptrans[0]) {
				syslog(LOG_ERR,
				"cannot have more than one UDP transport");
				goto error;
			}
			udptrans = strdup(nconf->nc_netid);
			pml->pml_map.pm_prot = IPPROTO_UDP;

			/* Let's snarf the universal address */
			/* "h1.h2.h3.h4.p1.p2" */
			udp_uaddr = taddr2uaddr(nconf, &baddr->addr);
		}
		pml->pml_next = list_pml;
		list_pml = pml;

		/* Add version 3 information */
		pml = malloc(sizeof (PMAPLIST));
		if (pml == NULL) {
			syslog(LOG_ERR, "no memory!");
			exit(1);
		}
		pml->pml_map = list_pml->pml_map;
		pml->pml_map.pm_vers = RPCBVERS;
		pml->pml_next = list_pml;
		list_pml = pml;

		/* Add version 4 information */
		pml = malloc(sizeof (PMAPLIST));
		if (pml == NULL) {
			syslog(LOG_ERR, "no memory!");
			exit(1);
		}
		pml->pml_map = list_pml->pml_map;
		pml->pml_map.pm_vers = RPCBVERS4;
		pml->pml_next = list_pml;
		list_pml = pml;

		/* Also add version 2 stuff to rpcbind list */
		rbllist_add(PMAPPROG, PMAPVERS, nconf, &baddr->addr);
	}
#endif

	/* version 3 registration */
	if (!svc_reg(my_xprt, RPCBPROG, RPCBVERS, rpcb_service_3, NULL)) {
		syslog(LOG_ERR, "could not register %s version 3",
		    nconf->nc_netid);
		goto error;
	}
	rbllist_add(RPCBPROG, RPCBVERS, nconf, &baddr->addr);

	/* version 4 registration */
	if (!svc_reg(my_xprt, RPCBPROG, RPCBVERS4, rpcb_service_4, NULL)) {
		syslog(LOG_ERR, "could not register %s version 4",
		    nconf->nc_netid);
		goto error;
	}
	rbllist_add(RPCBPROG, RPCBVERS4, nconf, &baddr->addr);

	if (strcmp(nconf->nc_protofmly, NC_LOOPBACK) == 0) {
		if (nconf->nc_semantics == NC_TPI_CLTS)
			loopback_dg = strdup(nconf->nc_netid);
		else if (nconf->nc_semantics == NC_TPI_COTS)
			loopback_vc = strdup(nconf->nc_netid);
		else if (nconf->nc_semantics == NC_TPI_COTS_ORD)
			loopback_vc_ord = strdup(nconf->nc_netid);
	}

	/* decide if bound checking works for this transport */
	(void) add_bndlist(nconf, taddr, baddr);

	/*
	 * rmtcall only supported on CLTS transports for now.
	 */
	if (nconf->nc_semantics == NC_TPI_CLTS)
		(void) create_rmtcall_fd(nconf);

	(void) t_free((char *)taddr, T_BIND);
	(void) t_free((char *)baddr, T_BIND);
	return (0);
error:
	(void) t_free((char *)taddr, T_BIND);
	(void) t_free((char *)baddr, T_BIND);
	(void) t_close(fd);
	return (1);
}

static void
rbllist_add(ulong_t prog, ulong_t vers, struct netconfig *nconf,
    struct netbuf *addr)
{
	rpcblist_ptr rbl;

	rbl = malloc(sizeof (rpcblist));
	if (rbl == NULL) {
		syslog(LOG_ERR, "no memory!");
		exit(1);
	}

	rbl->rpcb_map.r_prog = prog;
	rbl->rpcb_map.r_vers = vers;
	rbl->rpcb_map.r_netid = strdup(nconf->nc_netid);
	rbl->rpcb_map.r_addr = taddr2uaddr(nconf, addr);
	if (rbl->rpcb_map.r_addr == NULL)
		rbl->rpcb_map.r_addr = strdup("");
	rbl->rpcb_map.r_owner = strdup(superuser);

	if (rbl->rpcb_map.r_netid == NULL || rbl->rpcb_map.r_addr == NULL ||
	    rbl->rpcb_map.r_owner == NULL) {
		syslog(LOG_ERR, "no memory!");
		exit(1);
	}

	rbl->rpcb_next = list_rbl;	/* Attach to global list */
	list_rbl = rbl;
}

/*
 * Catch the signal and die, if not SIGHUP
 */
static void
terminate(void)
{
	int sig;

	for (;;) {
		sig = sigwait(&sigwaitset);
		if (sig == SIGHUP) {
			rpcb_check_init();
			continue;
		}
		if (sig != -1 || errno != EINTR)
			break;
	}

	syslog(LOG_ERR, "rpcbind terminating on signal %d.", sig);

	rw_wrlock(&list_rbl_lock);
#ifdef PORTMAP
	rw_wrlock(&list_pml_lock);
#endif
	write_warmstart();	/* Dump yourself */

	exit(2);
}

void
rpcbind_abort(void)
{
	/*
	 * We need to hold write locks to make sure
	 * write_warmstart() is executed exactly once
	 */
	rw_wrlock(&list_rbl_lock);
#ifdef PORTMAP
	rw_wrlock(&list_pml_lock);
#endif
	write_warmstart();	/* Dump yourself */

	abort();
}

/*
 * detach from tty
 */
static void
detachfromtty(void)
{
	close(0);
	close(1);
	close(2);
	switch (forkall()) {
	case (pid_t)-1:
		perror("fork");
		break;
	case 0:
		break;
	default:
		exit(0);
	}
	setsid();
	(void) open("/dev/null", O_RDWR, 0);
	dup(0);
	dup(0);
}

static int
convert_int(int *val, char *str)
{
	long lval;

	if (str == NULL || !isdigit(*str))
		return (-1);

	lval = strtol(str, &str, 10);
	if (*str != '\0' || lval > INT_MAX)
		return (-2);

	*val = (int)lval;
	return (0);
}

static int get_smf_iprop(const char *, int, int, int);

/* get command line options */
static void
parseargs(int argc, char *argv[])
{
	int c;
	int tmp;

	listen_backlog = get_smf_iprop("listen_backlog", 64, 1, INT_MAX);

	while ((c = getopt(argc, argv, "dwal:")) != EOF) {
		switch (c) {
		case 'd':
			debugging = 1;
			break;
		case 'a':
			doabort = 1;	/* when debugging, do an abort on */
			break;		/* errors; for rpcbind developers */
					/* only! */
		case 'w':
			warmstart = 1;
			break;

		case 'l':
			if (convert_int(&tmp, optarg) != 0 || tmp < 1) {
				(void) fprintf(stderr, "%s: invalid "
				    "listen_backlog option, using defaults\n",
				    argv[0]);
				break;
			}
			listen_backlog = tmp;
			break;
		default:	/* error */
			fprintf(stderr,
			    "usage: rpcbind [-d] [-w] [-l listen_backlog]\n");
			exit(1);
		}
	}
	if (doabort && !debugging) {
		fprintf(stderr,
		    "-a (abort) specified without -d "
		    "(debugging) -- ignored.\n");
		doabort = 0;
	}
}

static int
setopt_int(int fd, int level, int name, int value)
{
	struct t_optmgmt req, resp;
	struct {
		struct opthdr opt;
		int value;
	} optdata;

	optdata.opt.level = level;
	optdata.opt.name = name;
	optdata.opt.len = sizeof (int);

	optdata.value = value;

	req.flags = T_NEGOTIATE;
	req.opt.len = sizeof (optdata);
	req.opt.buf = (char *)&optdata;

	resp.flags = 0;
	resp.opt.buf = (char *)&optdata;
	resp.opt.maxlen = sizeof (optdata);

	if (t_optmgmt(fd, &req, &resp) < 0 || resp.flags != T_SUCCESS) {
		t_error("t_optmgmt");
		return (-1);
	}
	return (0);
}

static int
setopt_reuseaddr(int fd)
{
	return (setopt_int(fd, SOL_SOCKET, SO_REUSEADDR, 1));
}

static int
setopt_anon_mlp(int fd)
{
	return (setopt_int(fd, SOL_SOCKET, SO_ANON_MLP, 1));
}

static int
setup_callit(int fd)
{
	struct ipv6_mreq mreq;
	struct t_optmgmt req, resp;
	struct opthdr *opt;
	char reqbuf[ sizeof (struct ipv6_mreq) + 24];
	struct ipv6_mreq *pmreq;

	opt = (struct opthdr *)reqbuf;

	opt->level = IPPROTO_IPV6;
	opt->name = IPV6_ADD_MEMBERSHIP;
	opt->len = sizeof (struct ipv6_mreq);

	/* multicast address */
	(void) inet_pton(AF_INET6, RPCB_MULTICAST_ADDR,
	    mreq.ipv6mr_multiaddr.s6_addr);
	mreq.ipv6mr_interface = 0;

	/* insert it into opt */
	pmreq = (struct ipv6_mreq *)&reqbuf[sizeof (struct opthdr)];
	memcpy(pmreq, &mreq, sizeof (struct ipv6_mreq));

	req.flags = T_NEGOTIATE;
	req.opt.len = sizeof (struct opthdr) + opt->len;
	req.opt.buf = (char *)opt;

	resp.flags = 0;
	resp.opt.buf = reqbuf;
	resp.opt.maxlen = sizeof (reqbuf);

	if (t_optmgmt(fd, &req, &resp) < 0 || resp.flags != T_SUCCESS) {
		t_error("t_optmgmt");
		return (-1);
	}
	return (0);
}

static boolean_t
check_hostserv(struct netconfig *nconf, const char *host, const char *serv)
{
	struct nd_hostserv nh;
	struct nd_addrlist *na;
	const char *hostname = host;
	const char *servname = serv;
	int retval;

	if (strcmp(host, HOST_SELF) == 0)
		hostname = "HOST_SELF";
	else if (strcmp(host, HOST_SELF_CONNECT) == 0)
		hostname = "HOST_SELF_CONNECT";

	if (serv[0] == '\0')
		servname = "<any>";

	nh.h_host = (char *)host;
	nh.h_serv = (char *)serv;

	retval = netdir_getbyname(nconf, &nh, &na);
	if (retval != ND_OK || na->n_cnt == 0) {
		if (retval == ND_OK)
			netdir_free(na, ND_ADDRLIST);

		syslog(LOG_ALERT, "netid %s: cannot find an address for host "
		    "%s, service \"%s\"", nconf->nc_netid, hostname, servname);
		if (debugging) {
			(void) fprintf(stderr, "\tnetdir_getbyname for %s, "
			    "service \"%s\" failed\n", hostname, servname);
		}
		return (B_FALSE);
	}
	netdir_free(na, ND_ADDRLIST);

	if (debugging) {
		(void) fprintf(stderr, "\tnetdir_getbyname for %s, service "
		    "service \"%s\" succeeded\n", hostname, servname);
	}
	return (B_TRUE);
}

/* Maximum outstanding syslog requests */
#define	MAXLOG		100
/* Maximum length: the messages generated are fairly short; no hostnames. */
#define	MAXMSG		128

typedef struct logmsg {
	struct logmsg	*log_next;
	int		log_pri;
	char		log_msg[MAXMSG];
} logmsg;

static logmsg *loghead = NULL;
static logmsg **logtailp = &loghead;
static mutex_t logmutex = DEFAULTMUTEX;
static cond_t logcond = DEFAULTCV;
static int logcount = 0;

/* ARGSUSED */
static void * __NORETURN
logthread(void *arg)
{
	for (;;) {
		logmsg *msg;
		(void) mutex_lock(&logmutex);
		while ((msg = loghead) == NULL)
			(void) cond_wait(&logcond, &logmutex);

		loghead = msg->log_next;
		logcount--;
		if (loghead == NULL) {
			logtailp = &loghead;
			logcount = 0;
		}
		(void) mutex_unlock(&logmutex);
		syslog(msg->log_pri, "%s", msg->log_msg);
		free(msg);
	}
	/* NOTREACHED */
}

static boolean_t
get_smf_prop(const char *var, boolean_t def_val)
{
	scf_simple_prop_t *prop;
	uint8_t *val = NULL;
	boolean_t res = def_val;

	prop = scf_simple_prop_get(NULL, NULL, "config", var);
	if (prop != NULL) {
		if ((val = scf_simple_prop_next_boolean(prop)) != NULL)
			res = (*val == 0) ? B_FALSE : B_TRUE;
		scf_simple_prop_free(prop);
	}

	if (prop == NULL || val == NULL) {
		syslog(LOG_ALERT, "no value for config/%s (%s). "
		    "Using default \"%s\"", var, scf_strerror(scf_error()),
		    def_val ? "true" : "false");
	}

	return (res);
}

static int
get_smf_iprop(const char *var, int def_val, int min, int max)
{
	scf_simple_prop_t *prop;
	int64_t *val = NULL;
	int res = def_val;

	prop = scf_simple_prop_get(NULL, NULL, "config", var);
	if (prop != NULL) {
		if ((val = scf_simple_prop_next_integer(prop)) != NULL) {
			if (*val < min || *val > max)
				syslog(LOG_ALERT, "value for config/%s out of "
				    "range. Using default %d", var, def_val);
			else
				res = (int)*val;
		}
		scf_simple_prop_free(prop);
	}

	if (prop == NULL || val == NULL) {
		syslog(LOG_ALERT, "no value for config/%s (%s). "
		    "Using default %d", var, scf_strerror(scf_error()),
		    def_val);
	}

	return (res);
}

/*
 * Initialize: read the configuration parameters from SMF.
 * This function must be idempotent because it can be called from the
 * signal handler.
 */
static void
rpcb_check_init(void)
{
	thread_t tid;
	int max_threads;
	static int thr_running;

	wrap_enabled = get_smf_prop("enable_tcpwrappers", B_FALSE);
	verboselog = get_smf_prop("verbose_logging", B_FALSE);
	allow_indirect = get_smf_prop("allow_indirect", B_TRUE);
	local_only = get_smf_prop("local_only", B_TRUE);

	if (wrap_enabled && !thr_running) {
		(void) thr_create(NULL, 0, logthread, NULL, THR_DETACHED, &tid);
		thr_running = 1;
	}

	/*
	 * Set the maximum number of threads.
	 */
	max_threads = get_smf_iprop("max_threads", 72, 1, INT_MAX);
	if (!rpc_control(RPC_SVC_THRMAX_SET, &max_threads)) {
		int tmp;

		/*
		 * The following rpc_control() call cannot fail
		 */
		if (!rpc_control(RPC_SVC_THRMAX_GET, &tmp))
			assert(0);

		if (tmp != max_threads) {
			syslog(LOG_ERR, "setting max_threads to %d failed, "
			    "using %d worker threads", max_threads, tmp);
			max_threads = tmp;
		}
	}

	/*
	 * Set rpcb_rmtcalls_max.
	 */
	if (max_threads < reserved_threads)
		set_rpcb_rmtcalls_max(0);
	else
		set_rpcb_rmtcalls_max(max_threads - reserved_threads);
}

/*
 * qsyslog() - queue a request for syslog(); if syslog blocks, the other
 * thread blocks; we make sure we don't run out of memory by allowing
 * only a limited number of outstandig syslog() requests.
 */
void
qsyslog(int pri, const char *fmt, ...)
{
	logmsg *msg = malloc(sizeof (*msg));
	va_list ap;

	if (msg == NULL)
		return;

	msg->log_pri = pri;

	va_start(ap, fmt);
	(void) vsnprintf(msg->log_msg, sizeof (msg->log_msg), fmt, ap);
	va_end(ap);

	msg->log_next = NULL;

	(void) mutex_lock(&logmutex);
	if (logcount < MAXLOG) {
		if (logcount == 0)
			(void) cond_signal(&logcond);
		logcount++;
		*logtailp = msg;
		logtailp = &msg->log_next;
		(void) mutex_unlock(&logmutex);
	} else {
		(void) mutex_unlock(&logmutex);
		free(msg);
	}
}
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 *
 * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2014 Nexenta Systems, Inc.  All rights reserved.
 */
/* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */
/*
 * University Copyright- Copyright (c) 1982, 1986, 1988
 * The Regents of the University of California
 * All Rights Reserved
 *
 * University Acknowledgment- Portions of this document are derived from
 * software developed by the University of California, Berkeley, and its
 * contributors.
 */

/*
 * rpcbind.h
 * The common header declarations
 */

#ifndef _RPCBIND_H
#define	_RPCBIND_H

#ifdef PORTMAP
#include <rpc/pmap_prot.h>
#endif
#include <rpc/rpcb_prot.h>
#include <synch.h>

#ifdef	__cplusplus
extern "C" {
#endif

extern int debugging;
extern int doabort;
extern rwlock_t list_rbl_lock;	/* Protects list_rbl */
extern rpcblist_ptr list_rbl;	/* A list of version 3 & 4 rpcbind services */
extern char *loopback_dg;	/* CLTS loopback transport, for set/unset */
extern char *loopback_vc;	/* COTS loopback transport, for set/unset */
extern char *loopback_vc_ord;	/* COTS_ORD loopback transport, for set/unset */

#ifdef PORTMAP
extern rwlock_t list_pml_lock;	/* Protects list_pml */
extern pmaplist *list_pml;	/* A list of version 2 rpcbind services */
extern char *udptrans;		/* Name of UDP transport */
extern char *tcptrans;		/* Name of TCP transport */
extern char *udp_uaddr;		/* Universal UDP address */
extern char *tcp_uaddr;		/* Universal TCP address */
#endif

char *mergeaddr(SVCXPRT *, char *, char *, char *);
int add_bndlist(struct netconfig *, struct t_bind *, struct t_bind *);
int create_rmtcall_fd(struct netconfig *);
bool_t is_bound(char *, char *);
void set_rpcb_rmtcalls_max(int);

/* TCP wrapper functions and variables. */
boolean_t localxprt(SVCXPRT *, boolean_t);
void qsyslog(int pri, const char *fmt, ...);
boolean_t rpcb_check(SVCXPRT *, rpcproc_t, boolean_t);
void rpcb_log(boolean_t, SVCXPRT *, rpcproc_t, rpcprog_t, boolean_t);
extern volatile boolean_t allow_indirect;
extern volatile boolean_t wrap_enabled;
extern volatile boolean_t verboselog;
extern volatile boolean_t local_only;

#define	svc_getgencaller(transp) \
	((struct sockaddr_gen *)svc_getrpccaller((transp))->buf)

#define	RPCB_CHECK(xprt, proc) \
	if ((wrap_enabled || local_only) && \
	    !rpcb_check((xprt), (proc), B_FALSE)) \
		return

#define	PMAP_CHECK(xprt, proc) \
	if ((wrap_enabled || local_only) && \
	    !rpcb_check((xprt), (proc), B_TRUE)) \
		return

#define	PMAP_CHECK_RET(xprt, proc, ret) \
	if ((wrap_enabled || local_only) && \
	    !rpcb_check((xprt), (proc), B_TRUE)) \
		return (ret)

#define	RPCB_LOG(xprt, proc, prog) \
	if (wrap_enabled) \
	    rpcb_log(B_TRUE, (xprt), (proc), (prog), B_FALSE)

#define	PMAP_LOG(ans, xprt, proc, prog) \
	if (wrap_enabled) \
	    rpcb_log(ans, (xprt), (proc), (prog), B_TRUE)

bool_t map_set(RPCB *, char *);
bool_t map_unset(RPCB *, char *);

/* Statistics gathering functions */
void rpcbs_procinfo(int, rpcproc_t);
void rpcbs_set(int, bool_t);
void rpcbs_unset(int, bool_t);
void rpcbs_getaddr(int, rpcprog_t, rpcvers_t, char *, char *);
void rpcbs_rmtcall(int, rpcproc_t, rpcprog_t, rpcvers_t, rpcproc_t, char *,
    rpcblist_ptr);
bool_t rpcbproc_getstat(void *, rpcb_stat_byvers **);
bool_t xdr_rpcb_stat_byvers_ptr(XDR *, rpcb_stat_byvers **);

struct netconfig *rpcbind_get_conf();
void rpcbind_abort() __NORETURN;

#ifdef PORTMAP
void pmap_service(struct svc_req *, SVCXPRT *xprt);
#endif
void rpcb_service_3(struct svc_req *, SVCXPRT *xprt);
void rpcb_service_4(struct svc_req *, SVCXPRT *xprt);
void read_warmstart(void);
void write_warmstart(void);
int Is_ipv6present(void);

extern zoneid_t myzone;

/* Common functions shared between versions */
void rpcbproc_callit_com(struct svc_req *, SVCXPRT *, ulong_t, int);
bool_t rpcbproc_set_com(RPCB *, bool_t *, struct svc_req *, int);
bool_t rpcbproc_unset_com(RPCB *, bool_t *, struct svc_req *, int);
bool_t rpcbproc_gettime_com(void *, ulong_t *);
bool_t rpcbproc_uaddr2taddr_com(char **, struct netbuf *, struct svc_req *);
bool_t rpcbproc_taddr2uaddr_com(struct netbuf *, char **, struct svc_req *);
bool_t rpcbproc_getaddr_com(RPCB *, char **, struct svc_req *, ulong_t);
void delete_prog(rpcprog_t);
bool_t rpcbproc_dump_com(void *, rpcblist_ptr **);
char *getowner(SVCXPRT *, char *);

int del_pmaplist(RPCB *);
void delete_rbl(rpcblist_ptr);

uid_t rpcb_caller_uid(SVCXPRT *);

/* XDR functions */
bool_t xdr_rpcblist_ptr_ptr(XDR *, rpcblist_ptr **);

/* For different getaddr semantics */
#define	RPCB_ALLVERS 0
#define	RPCB_ONEVERS 1

#ifdef	__cplusplus
}
#endif

#endif /* _RPCBIND_H */
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * warmstart.c
 * Allows for gathering of registrations from a earlier dumped file.
 *
 * Copyright 1990,2002-2003 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */
/*
 * Copyright 2013 Nexenta Systems, Inc.  All rights reserved.
 */

#include <stdio.h>
#include <errno.h>
#include <rpc/rpc.h>
#include <rpc/rpcb_prot.h>
#include <sys/types.h>
#include <sys/stat.h>
#ifdef PORTMAP
#include <netinet/in.h>
#include <rpc/pmap_prot.h>
#endif
#include "rpcbind.h"
#include <syslog.h>
#include <unistd.h>
#include <rpcsvc/daemon_utils.h>
#include <assert.h>

/* These files keep the pmap_list and rpcb_list in XDR format */
static const char rpcbfile[] = DAEMON_DIR "/rpcbind.file";
#ifdef PORTMAP
static const char pmapfile[] = DAEMON_DIR "/portmap.file";
#endif

static FILE *
open_tmp_file(const char *filename)
{
	int fd;
	FILE *fp;

	/*
	 * Remove any existing files, and create a new one.
	 * Ensure that rpcbind is not forced to overwrite
	 * a file pointed to by a symbolic link created
	 * by an attacker.
	 * Use open O_CREAT|O_EXCL so file is not created
	 * between unlink() and open() operation.
	 */
	if (unlink(filename) == -1) {
		if (errno != ENOENT)
			return (NULL);
	}
	fd = open(filename, O_CREAT|O_EXCL|O_WRONLY, 0600);
	if (fd == -1)
		return (NULL);
	fp = fdopen(fd, "w");
	if (fp == NULL) {
		close(fd);
		return (NULL);
	}

	return (fp);
}

static bool_t
write_struct(const char *filename, xdrproc_t structproc, void *list)
{
	FILE *fp;
	XDR xdrs;

	fp = open_tmp_file(filename);
	if (fp == NULL) {
		int i;

		for (i = 0; i < 10; i++)
			close(i);
		fp = open_tmp_file(filename);
		if (fp == NULL) {
			syslog(LOG_ERR,
			    "cannot open file = %s for writing", filename);
			syslog(LOG_ERR, "cannot save any registration");
			return (FALSE);
		}
	}
	xdrstdio_create(&xdrs, fp, XDR_ENCODE);

	if (structproc(&xdrs, list) == FALSE) {
		XDR_DESTROY(&xdrs);
		syslog(LOG_ERR, "rpcbind: xdr_%s: failed", filename);
		fclose(fp);
		return (FALSE);
	}
	XDR_DESTROY(&xdrs);
	fclose(fp);
	return (TRUE);
}

static bool_t
read_struct(const char *filename, xdrproc_t structproc, void *list)
{
	int fd;
	FILE *fp = NULL;
	XDR xdrs;
	struct stat sbuf_fstat, sbuf_lstat;

	fd = open(filename, O_RDONLY, 0600);
	if (fd == -1) {
		fprintf(stderr,
		    "rpcbind: cannot open file = %s for reading\n", filename);
		goto error;
	}
	fp = fdopen(fd, "r");
	if (fp == NULL) {
		close(fd);
		fprintf(stderr,
		    "rpcbind: cannot open file = %s for reading\n", filename);
		goto error;
	}
	if (fstat(fd, &sbuf_fstat) != 0) {
		fprintf(stderr,
		    "rpcbind: cannot stat file = %s for reading\n", filename);
		goto error;
	}
	if (sbuf_fstat.st_uid != DAEMON_UID ||
	    (!S_ISREG(sbuf_fstat.st_mode)) ||
	    (sbuf_fstat.st_mode & S_IRWXG) ||
	    (sbuf_fstat.st_mode & S_IRWXO) ||
	    (sbuf_fstat.st_nlink != 1)) {
		fprintf(stderr, "rpcbind: invalid permissions on file = %s for "
		    "reading\n", filename);
		goto error;
	}
	/*
	 * Make sure that the pathname for fstat and lstat is the same and
	 * that it's not a link.  An attacker can create symbolic or
	 * hard links and use them to gain unauthorised access to the
	 * system when rpcbind aborts or terminates on SIGINT or SIGTERM.
	 */
	if (lstat(filename, &sbuf_lstat) != 0) {
		fprintf(stderr,
		    "rpcbind: cannot lstat file = %s for reading\n", filename);
		goto error;
	}
	if (sbuf_lstat.st_uid != DAEMON_UID ||
	    (!S_ISREG(sbuf_lstat.st_mode)) ||
	    (sbuf_lstat.st_mode & S_IRWXG) ||
	    (sbuf_lstat.st_mode & S_IRWXO) ||
	    (sbuf_lstat.st_nlink != 1) ||
	    (sbuf_fstat.st_dev != sbuf_lstat.st_dev) ||
	    (sbuf_fstat.st_ino != sbuf_lstat.st_ino)) {
		fprintf(stderr, "rpcbind: invalid lstat permissions on file = "
		    "%s for reading\n", filename);
		goto error;
	}
	xdrstdio_create(&xdrs, fp, XDR_DECODE);

	if (structproc(&xdrs, list) == FALSE) {
		XDR_DESTROY(&xdrs);
		fprintf(stderr, "rpcbind: xdr_%s: failed\n", filename);
		goto error;
	}
	XDR_DESTROY(&xdrs);
	fclose(fp);
	return (TRUE);

error:
	fprintf(stderr, "rpcbind: will start from scratch\n");
	if (fp != NULL)
		fclose(fp);
	return (FALSE);
}

void
write_warmstart(void)
{
	assert(RW_WRITE_HELD(&list_rbl_lock));
	(void) write_struct(rpcbfile, xdr_rpcblist_ptr, &list_rbl);
#ifdef PORTMAP
	assert(RW_WRITE_HELD(&list_pml_lock));
	(void) write_struct(pmapfile, xdr_pmaplist_ptr, &list_pml);
#endif

}

void
read_warmstart(void)
{
	rpcblist_ptr tmp_rpcbl = NULL;
#ifdef PORTMAP
	pmaplist_ptr tmp_pmapl = NULL;
#endif

	if (read_struct(rpcbfile, xdr_rpcblist_ptr, &tmp_rpcbl) == FALSE)
		return;

#ifdef PORTMAP
	if (read_struct(pmapfile, xdr_pmaplist_ptr, &tmp_pmapl) == FALSE) {
		xdr_free((xdrproc_t)xdr_rpcblist_ptr, (char *)&tmp_rpcbl);
		return;
	}
#endif

	xdr_free((xdrproc_t)xdr_rpcblist_ptr, (char *)&list_rbl);
	list_rbl = tmp_rpcbl;
#ifdef PORTMAP
	xdr_free((xdrproc_t)xdr_pmaplist_ptr, (char *)&list_pml);
	list_pml = (pmaplist *)tmp_pmapl;
#endif
}