Security-55163.44.tar.gz

[apple/security.git] / libsecurity_utilities / lib / socks++4.cpp

diff --git a/libsecurity_utilities/lib/socks++4.cpp b/libsecurity_utilities/lib/socks++4.cpp
new file mode 100644 (file)
index 0000000..3b9f9ab
--- /dev/null
+++ b/libsecurity_utilities/lib/socks++4.cpp
@@ -0,0 +1,134 @@
+/*
+ * Copyright (c) 2000-2004 Apple Computer, Inc. All Rights Reserved.
+ * 
+ * @APPLE_LICENSE_HEADER_START@
+ * 
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this
+ * file.
+ * 
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
+ * 
+ * @APPLE_LICENSE_HEADER_END@
+ */
+
+
+//
+// socks++int - internal Socks implementation
+//
+#include "socks++4.h"
+#include "hosts.h"
+#include <set>
+
+
+namespace Security {
+namespace IPPlusPlus {
+namespace Socks4 {
+
+
+
+//
+// Socks4 Protocol implementation
+//
+void Server::connect(SocksClientSocket &me, const IPSockAddress &peer)
+{
+    me.Socket::open(SOCK_STREAM);
+    me.Socket::connect(mServerAddress);
+    Message request(socksConnect, peer);
+    request.send(me, "nobody");
+    (Message(me));                             // read and check reply message
+    me.mPeerAddress = peer;            // best guess, Mr. Sulu
+    secdebug("socks", "%d socks4 connected to %s", me.fd(), string(peer).c_str());
+}
+
+void Server::connect(SocksClientSocket &me, const Host &host, IPPort port)
+{
+    // Socks4 has no name resolution support. Do it here
+    //@@@ error reporting sucks here
+    set<IPAddress> addrs = host.addresses();
+    for (set<IPAddress>::const_iterator it = addrs.begin(); it != addrs.end(); it++) {
+        try {
+            IPSockAddress addr(*it, port);
+            connect(me, addr);
+            return;
+        } catch (const UnixError &err) {
+            errno = err.error;
+        }
+    }
+    // exhausted
+    UnixError::throwMe();
+}
+
+
+void Server::bind(SocksServerSocket &me, const IPAddress &peer, IPPort port)
+{
+    me.Socket::open(SOCK_STREAM);
+    me.Socket::connect(mServerAddress);
+    Message request(socksBind, IPSockAddress(peer, port));
+    request.send(me, "nobody");
+    Message reply(me);
+    me.mLocalAddress = reply.address().defaults(mServerAddress.address());
+    secdebug("socks", "%d socks4 bound to %s", me.fd(), string(me.mLocalAddress).c_str());
+}
+
+void Server::receive(SocksServerSocket &me, SocksClientSocket &receiver)
+{
+    Message reply(me);
+    receiver.setFd(me.fd(), me.mLocalAddress, reply.address());
+    me.clear();                                        // clear our own (don't close on destruction)
+    secdebug("socks", "%d socks4 inbound connect", receiver.fd());
+}
+
+
+//
+// Message properties
+//
+Message::Message(Command cmd, const IPSockAddress &address)
+    : version(4), message(cmd), port(htons(address.port())), addr(address.address())
+{
+}
+
+
+void Message::send(Socket &s, const char *userid)
+{
+    if (s.write(this, sizeof(*this)) != sizeof(*this))
+        UnixError::throwMe();
+    // now append zero-terminated userid (what a crock)
+    size_t length = strlen(userid) + 1;
+    if (s.write(userid, length) != length) {
+        s.close();
+        UnixError::throwMe();
+    }
+}
+
+Message::Message(Socket &s)
+{
+    if (s.read(this, sizeof(*this)) != sizeof(*this)) {
+        s.close();
+        UnixError::throwMe();
+    }
+    if (version != 0) {
+        s.close();
+        UnixError::throwMe(EPROTONOSUPPORT);
+    }
+    switch (message) {
+    case requestAccepted:
+        return;
+    default:
+        UnixError::throwMe(ECONNREFUSED);      //@@@ hardly any diagnostics here
+    }
+}
+
+
+}      // end namespace Socks
+}      // end namespace IPPlusPlus
+}      // end namespace Security