crypto/bio/b_sock.c

   1 /* crypto/bio/b_sock.c */
   2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   3  * All rights reserved.
   4  *
   5  * This package is an SSL implementation written
   6  * by Eric Young (eay@cryptsoft.com).
   7  * The implementation was written so as to conform with Netscapes SSL.
   8  *
   9  * This library is free for commercial and non-commercial use as long as
  10  * the following conditions are aheared to.  The following conditions
  11  * apply to all code found in this distribution, be it the RC4, RSA,
  12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  13  * included with this distribution is covered by the same copyright terms
  14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15  *
  16  * Copyright remains Eric Young's, and as such any Copyright notices in
  17  * the code are not to be removed.
  18  * If this package is used in a product, Eric Young should be given attribution
  19  * as the author of the parts of the library used.
  20  * This can be in the form of a textual message at program startup or
  21  * in documentation (online or textual) provided with the package.
  22  *
  23  * Redistribution and use in source and binary forms, with or without
  24  * modification, are permitted provided that the following conditions
  25  * are met:
  26  * 1. Redistributions of source code must retain the copyright
  27  *    notice, this list of conditions and the following disclaimer.
  28  * 2. Redistributions in binary form must reproduce the above copyright
  29  *    notice, this list of conditions and the following disclaimer in the
  30  *    documentation and/or other materials provided with the distribution.
  31  * 3. All advertising materials mentioning features or use of this software
  32  *    must display the following acknowledgement:
  33  *    "This product includes cryptographic software written by
  34  *     Eric Young (eay@cryptsoft.com)"
  35  *    The word 'cryptographic' can be left out if the rouines from the library
  36  *    being used are not cryptographic related :-).
  37  * 4. If you include any Windows specific code (or a derivative thereof) from
  38  *    the apps directory (application code) you must include an acknowledgement:
  39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  *
  53  * The licence and distribution terms for any publically available version or
  54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  55  * copied and put under another distribution licence
  56  * [including the GNU Public Licence.]
  57  */
  58
  59 #include <stdio.h>
  60 #include <stdlib.h>
  61 #include <errno.h>
  62 #define USE_SOCKETS
  63 #include "cryptlib.h"
  64 #include <openssl/bio.h>
  65 #if defined(OPENSSL_SYS_NETWARE) && defined(NETWARE_BSDSOCK)
  66 #include <netdb.h>
  67 #if defined(NETWARE_CLIB)
  68 #include <sys/ioctl.h>
  69 NETDB_DEFINE_CONTEXT
  70 #endif
  71 #endif
  72
  73 #ifndef OPENSSL_NO_SOCK
  74
  75 #include <openssl/dso.h>
  76
  77 #define SOCKET_PROTOCOL IPPROTO_TCP
  78
  79 #ifdef SO_MAXCONN
  80 #define MAX_LISTEN  SO_MAXCONN
  81 #elif defined(SOMAXCONN)
  82 #define MAX_LISTEN  SOMAXCONN
  83 #else
  84 #define MAX_LISTEN  32
  85 #endif
  86
  87 #if defined(OPENSSL_SYS_WINDOWS) || (defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK))
  88 static int wsa_init_done=0;
  89 #endif
  90
  91 /*
  92  * WSAAPI specifier is required to make indirect calls to run-time
  93  * linked WinSock 2 functions used in this module, to be specific
  94  * [get|free]addrinfo and getnameinfo. This is because WinSock uses
  95  * uses non-C calling convention, __stdcall vs. __cdecl, on x86
  96  * Windows. On non-WinSock platforms WSAAPI needs to be void.
  97  */
  98 #ifndef WSAAPI
  99 #define WSAAPI
 100 #endif
 101
 102 #if 0
 103 static unsigned long BIO_ghbn_hits=0L;
 104 static unsigned long BIO_ghbn_miss=0L;
 105
 106 #define GHBN_NUM        4
 107 static struct ghbn_cache_st
 108         {
 109         char name[129];
 110         struct hostent *ent;
 111         unsigned long order;
 112         } ghbn_cache[GHBN_NUM];
 113 #endif
 114
 115 static int get_ip(const char *str,unsigned char *ip);
 116 #if 0
 117 static void ghbn_free(struct hostent *a);
 118 static struct hostent *ghbn_dup(struct hostent *a);
 119 #endif
 120 int BIO_get_host_ip(const char *str, unsigned char *ip)
 121         {
 122         int i;
 123         int err = 1;
 124         int locked = 0;
 125         struct hostent *he;
 126
 127         i=get_ip(str,ip);
 128         if (i < 0)
 129                 {
 130                 BIOerr(BIO_F_BIO_GET_HOST_IP,BIO_R_INVALID_IP_ADDRESS);
 131                 goto err;
 132                 }
 133
 134         /* At this point, we have something that is most probably correct
 135            in some way, so let's init the socket. */
 136         if (BIO_sock_init() != 1)
 137                 return 0; /* don't generate another error code here */
 138
 139         /* If the string actually contained an IP address, we need not do
 140            anything more */
 141         if (i > 0) return(1);
 142
 143         /* do a gethostbyname */
 144         CRYPTO_w_lock(CRYPTO_LOCK_GETHOSTBYNAME);
 145         locked = 1;
 146         he=BIO_gethostbyname(str);
 147         if (he == NULL)
 148                 {
 149                 BIOerr(BIO_F_BIO_GET_HOST_IP,BIO_R_BAD_HOSTNAME_LOOKUP);
 150                 goto err;
 151                 }
 152
 153         /* cast to short because of win16 winsock definition */
 154         if ((short)he->h_addrtype != AF_INET)
 155                 {
 156                 BIOerr(BIO_F_BIO_GET_HOST_IP,BIO_R_GETHOSTBYNAME_ADDR_IS_NOT_AF_INET);
 157                 goto err;
 158                 }
 159         for (i=0; i<4; i++)
 160                 ip[i]=he->h_addr_list[0][i];
 161         err = 0;
 162
 163  err:
 164         if (locked)
 165                 CRYPTO_w_unlock(CRYPTO_LOCK_GETHOSTBYNAME);
 166         if (err)
 167                 {
 168                 ERR_add_error_data(2,"host=",str);
 169                 return 0;
 170                 }
 171         else
 172                 return 1;
 173         }
 174
 175 int BIO_get_port(const char *str, unsigned short *port_ptr)
 176         {
 177         int i;
 178         struct servent *s;
 179
 180         if (str == NULL)
 181                 {
 182                 BIOerr(BIO_F_BIO_GET_PORT,BIO_R_NO_PORT_DEFINED);
 183                 return(0);
 184                 }
 185         i=atoi(str);
 186         if (i != 0)
 187                 *port_ptr=(unsigned short)i;
 188         else
 189                 {
 190                 CRYPTO_w_lock(CRYPTO_LOCK_GETSERVBYNAME);
 191                 /* Note: under VMS with SOCKETSHR, it seems like the first
 192                  * parameter is 'char *', instead of 'const char *'
 193                  */
 194 #ifndef CONST_STRICT
 195                 s=getservbyname((char *)str,"tcp");
 196 #else
 197                 s=getservbyname(str,"tcp");
 198 #endif
 199                 if(s != NULL)
 200                         *port_ptr=ntohs((unsigned short)s->s_port);
 201                 CRYPTO_w_unlock(CRYPTO_LOCK_GETSERVBYNAME);
 202                 if(s == NULL)
 203                         {
 204                         if (strcmp(str,"http") == 0)
 205                                 *port_ptr=80;
 206                         else if (strcmp(str,"telnet") == 0)
 207                                 *port_ptr=23;
 208                         else if (strcmp(str,"socks") == 0)
 209                                 *port_ptr=1080;
 210                         else if (strcmp(str,"https") == 0)
 211                                 *port_ptr=443;
 212                         else if (strcmp(str,"ssl") == 0)
 213                                 *port_ptr=443;
 214                         else if (strcmp(str,"ftp") == 0)
 215                                 *port_ptr=21;
 216                         else if (strcmp(str,"gopher") == 0)
 217                                 *port_ptr=70;
 218 #if 0
 219                         else if (strcmp(str,"wais") == 0)
 220                                 *port_ptr=21;
 221 #endif
 222                         else
 223                                 {
 224                                 SYSerr(SYS_F_GETSERVBYNAME,get_last_socket_error());
 225                                 ERR_add_error_data(3,"service='",str,"'");
 226                                 return(0);
 227                                 }
 228                         }
 229                 }
 230         return(1);
 231         }
 232
 233 int BIO_sock_error(int sock)
 234         {
 235         int j,i;
 236         union { size_t s; int i; } size;
 237
 238 #if defined(OPENSSL_SYS_BEOS_R5)
 239         return 0;
 240 #endif
 241
 242         /* heuristic way to adapt for platforms that expect 64-bit optlen */
 243         size.s=0, size.i=sizeof(j);
 244         /* Note: under Windows the third parameter is of type (char *)
 245          * whereas under other systems it is (void *) if you don't have
 246          * a cast it will choke the compiler: if you do have a cast then
 247          * you can either go for (char *) or (void *).
 248          */
 249         i=getsockopt(sock,SOL_SOCKET,SO_ERROR,(void *)&j,(void *)&size);
 250         if (i < 0)
 251                 return(1);
 252         else
 253                 return(j);
 254         }
 255
 256 #if 0
 257 long BIO_ghbn_ctrl(int cmd, int iarg, char *parg)
 258         {
 259         int i;
 260         char **p;
 261
 262         switch (cmd)
 263                 {
 264         case BIO_GHBN_CTRL_HITS:
 265                 return(BIO_ghbn_hits);
 266                 /* break; */
 267         case BIO_GHBN_CTRL_MISSES:
 268                 return(BIO_ghbn_miss);
 269                 /* break; */
 270         case BIO_GHBN_CTRL_CACHE_SIZE:
 271                 return(GHBN_NUM);
 272                 /* break; */
 273         case BIO_GHBN_CTRL_GET_ENTRY:
 274                 if ((iarg >= 0) && (iarg <GHBN_NUM) &&
 275                         (ghbn_cache[iarg].order > 0))
 276                         {
 277                         p=(char **)parg;
 278                         if (p == NULL) return(0);
 279                         *p=ghbn_cache[iarg].name;
 280                         ghbn_cache[iarg].name[128]='\0';
 281                         return(1);
 282                         }
 283                 return(0);
 284                 /* break; */
 285         case BIO_GHBN_CTRL_FLUSH:
 286                 for (i=0; i<GHBN_NUM; i++)
 287                         ghbn_cache[i].order=0;
 288                 break;
 289         default:
 290                 return(0);
 291                 }
 292         return(1);
 293         }
 294 #endif
 295
 296 #if 0
 297 static struct hostent *ghbn_dup(struct hostent *a)
 298         {
 299         struct hostent *ret;
 300         int i,j;
 301
 302         MemCheck_off();
 303         ret=(struct hostent *)OPENSSL_malloc(sizeof(struct hostent));
 304         if (ret == NULL) return(NULL);
 305         memset(ret,0,sizeof(struct hostent));
 306
 307         for (i=0; a->h_aliases[i] != NULL; i++)
 308                 ;
 309         i++;
 310         ret->h_aliases = (char **)OPENSSL_malloc(i*sizeof(char *));
 311         if (ret->h_aliases == NULL)
 312                 goto err;
 313         memset(ret->h_aliases, 0, i*sizeof(char *));
 314
 315         for (i=0; a->h_addr_list[i] != NULL; i++)
 316                 ;
 317         i++;
 318         ret->h_addr_list=(char **)OPENSSL_malloc(i*sizeof(char *));
 319         if (ret->h_addr_list == NULL)
 320                 goto err;
 321         memset(ret->h_addr_list, 0, i*sizeof(char *));
 322
 323         j=strlen(a->h_name)+1;
 324         if ((ret->h_name=OPENSSL_malloc(j)) == NULL) goto err;
 325         memcpy((char *)ret->h_name,a->h_name,j);
 326         for (i=0; a->h_aliases[i] != NULL; i++)
 327                 {
 328                 j=strlen(a->h_aliases[i])+1;
 329                 if ((ret->h_aliases[i]=OPENSSL_malloc(j)) == NULL) goto err;
 330                 memcpy(ret->h_aliases[i],a->h_aliases[i],j);
 331                 }
 332         ret->h_length=a->h_length;
 333         ret->h_addrtype=a->h_addrtype;
 334         for (i=0; a->h_addr_list[i] != NULL; i++)
 335                 {
 336                 if ((ret->h_addr_list[i]=OPENSSL_malloc(a->h_length)) == NULL)
 337                         goto err;
 338                 memcpy(ret->h_addr_list[i],a->h_addr_list[i],a->h_length);
 339                 }
 340         if (0)
 341                 {
 342 err:
 343                 if (ret != NULL)
 344                         ghbn_free(ret);
 345                 ret=NULL;
 346                 }
 347         MemCheck_on();
 348         return(ret);
 349         }
 350
 351 static void ghbn_free(struct hostent *a)
 352         {
 353         int i;
 354
 355         if(a == NULL)
 356             return;
 357
 358         if (a->h_aliases != NULL)
 359                 {
 360                 for (i=0; a->h_aliases[i] != NULL; i++)
 361                         OPENSSL_free(a->h_aliases[i]);
 362                 OPENSSL_free(a->h_aliases);
 363                 }
 364         if (a->h_addr_list != NULL)
 365                 {
 366                 for (i=0; a->h_addr_list[i] != NULL; i++)
 367                         OPENSSL_free(a->h_addr_list[i]);
 368                 OPENSSL_free(a->h_addr_list);
 369                 }
 370         if (a->h_name != NULL) OPENSSL_free(a->h_name);
 371         OPENSSL_free(a);
 372         }
 373
 374 #endif
 375
 376 struct hostent *BIO_gethostbyname(const char *name)
 377         {
 378 #if 1
 379         /* Caching gethostbyname() results forever is wrong,
 380          * so we have to let the true gethostbyname() worry about this */
 381 #if (defined(NETWARE_BSDSOCK) && !defined(__NOVELL_LIBC__))
 382         return gethostbyname((char*)name);
 383 #else
 384         return gethostbyname(name);
 385 #endif
 386 #else
 387         struct hostent *ret;
 388         int i,lowi=0,j;
 389         unsigned long low= (unsigned long)-1;
 390
 391
 392 #  if 0
 393         /* It doesn't make sense to use locking here: The function interface
 394          * is not thread-safe, because threads can never be sure when
 395          * some other thread destroys the data they were given a pointer to.
 396          */
 397         CRYPTO_w_lock(CRYPTO_LOCK_GETHOSTBYNAME);
 398 #  endif
 399         j=strlen(name);
 400         if (j < 128)
 401                 {
 402                 for (i=0; i<GHBN_NUM; i++)
 403                         {
 404                         if (low > ghbn_cache[i].order)
 405                                 {
 406                                 low=ghbn_cache[i].order;
 407                                 lowi=i;
 408                                 }
 409                         if (ghbn_cache[i].order > 0)
 410                                 {
 411                                 if (strncmp(name,ghbn_cache[i].name,128) == 0)
 412                                         break;
 413                                 }
 414                         }
 415                 }
 416         else
 417                 i=GHBN_NUM;
 418
 419         if (i == GHBN_NUM) /* no hit*/
 420                 {
 421                 BIO_ghbn_miss++;
 422                 /* Note: under VMS with SOCKETSHR, it seems like the first
 423                  * parameter is 'char *', instead of 'const char *'
 424                  */
 425 #  ifndef CONST_STRICT
 426                 ret=gethostbyname((char *)name);
 427 #  else
 428                 ret=gethostbyname(name);
 429 #  endif
 430
 431                 if (ret == NULL)
 432                         goto end;
 433                 if (j > 128) /* too big to cache */
 434                         {
 435 #  if 0
 436                         /* If we were trying to make this function thread-safe (which
 437                          * is bound to fail), we'd have to give up in this case
 438                          * (or allocate more memory). */
 439                         ret = NULL;
 440 #  endif
 441                         goto end;
 442                         }
 443
 444                 /* else add to cache */
 445                 if (ghbn_cache[lowi].ent != NULL)
 446                         ghbn_free(ghbn_cache[lowi].ent); /* XXX not thread-safe */
 447                 ghbn_cache[lowi].name[0] = '\0';
 448
 449                 if((ret=ghbn_cache[lowi].ent=ghbn_dup(ret)) == NULL)
 450                         {
 451                         BIOerr(BIO_F_BIO_GETHOSTBYNAME,ERR_R_MALLOC_FAILURE);
 452                         goto end;
 453                         }
 454                 strncpy(ghbn_cache[lowi].name,name,128);
 455                 ghbn_cache[lowi].order=BIO_ghbn_miss+BIO_ghbn_hits;
 456                 }
 457         else
 458                 {
 459                 BIO_ghbn_hits++;
 460                 ret= ghbn_cache[i].ent;
 461                 ghbn_cache[i].order=BIO_ghbn_miss+BIO_ghbn_hits;
 462                 }
 463 end:
 464 #  if 0
 465         CRYPTO_w_unlock(CRYPTO_LOCK_GETHOSTBYNAME);
 466 #  endif
 467         return(ret);
 468 #endif
 469         }
 470
 471
 472 int BIO_sock_init(void)
 473         {
 474 #ifdef OPENSSL_SYS_WINDOWS
 475         static struct WSAData wsa_state;
 476
 477         if (!wsa_init_done)
 478                 {
 479                 int err;
 480
 481                 wsa_init_done=1;
 482                 memset(&wsa_state,0,sizeof(wsa_state));
 483                 /* Not making wsa_state available to the rest of the
 484                  * code is formally wrong. But the structures we use
 485                  * are [beleived to be] invariable among Winsock DLLs,
 486                  * while API availability is [expected to be] probed
 487                  * at run-time with DSO_global_lookup. */
 488                 if (WSAStartup(0x0202,&wsa_state)!=0)
 489                         {
 490                         err=WSAGetLastError();
 491                         SYSerr(SYS_F_WSASTARTUP,err);
 492                         BIOerr(BIO_F_BIO_SOCK_INIT,BIO_R_WSASTARTUP);
 493                         return(-1);
 494                         }
 495                 }
 496 #endif /* OPENSSL_SYS_WINDOWS */
 497
 498 #if defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK)
 499     WORD wVerReq;
 500     WSADATA wsaData;
 501     int err;
 502
 503     if (!wsa_init_done)
 504     {
 505         wsa_init_done=1;
 506         wVerReq = MAKEWORD( 2, 0 );
 507         err = WSAStartup(wVerReq,&wsaData);
 508         if (err != 0)
 509         {
 510             SYSerr(SYS_F_WSASTARTUP,err);
 511             BIOerr(BIO_F_BIO_SOCK_INIT,BIO_R_WSASTARTUP);
 512             return(-1);
 513                         }
 514                 }
 515 #endif
 516
 517         return(1);
 518         }
 519
 520 void BIO_sock_cleanup(void)
 521         {
 522 #ifdef OPENSSL_SYS_WINDOWS
 523         if (wsa_init_done)
 524                 {
 525                 wsa_init_done=0;
 526 #if 0           /* this call is claimed to be non-present in Winsock2 */
 527                 WSACancelBlockingCall();
 528 #endif
 529                 WSACleanup();
 530                 }
 531 #elif defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK)
 532    if (wsa_init_done)
 533         {
 534         wsa_init_done=0;
 535         WSACleanup();
 536                 }
 537 #endif
 538         }
 539
 540 #if !defined(OPENSSL_SYS_VMS) || __VMS_VER >= 70000000
 541
 542 int BIO_socket_ioctl(int fd, long type, void *arg)
 543         {
 544         int i;
 545
 546 # if defined(OPENSSL_SYS_VMS)
 547         /* 2011-02-18 SMS.
 548          * VMS ioctl() can't tolerate a 64-bit "void *arg", but we
 549          * observe that all the consumers pass in an "unsigned long *",
 550          * so we arrange a local copy with a short pointer, and use
 551          * that, instead.
 552          */
 553 #  if __INITIAL_POINTER_SIZE == 64
 554 #   define ARG arg_32p
 555 #   pragma pointer_size save
 556 #   pragma pointer_size 32
 557         unsigned long arg_32;
 558         unsigned long *arg_32p;
 559 #   pragma pointer_size restore
 560         arg_32p = &arg_32;
 561         arg_32 = *((unsigned long *) arg);
 562 #  else /* __INITIAL_POINTER_SIZE == 64 */
 563 #   define ARG arg
 564 #  endif /* __INITIAL_POINTER_SIZE == 64 [else] */
 565 # else /* defined(OPENSSL_SYS_VMS) */
 566 #  define ARG arg
 567 # endif /* defined(OPENSSL_SYS_VMS) [else] */
 568         i=ioctlsocket(fd,type,ARG);
 569
 570         if (i < 0)
 571                 SYSerr(SYS_F_IOCTLSOCKET,get_last_socket_error());
 572         return(i);
 573         }
 574 #endif /* __VMS_VER */
 575
 576 /* The reason I have implemented this instead of using sscanf is because
 577  * Visual C 1.52c gives an unresolved external when linking a DLL :-( */
 578 static int get_ip(const char *str, unsigned char ip[4])
 579         {
 580         unsigned int tmp[4];
 581         int num=0,c,ok=0;
 582
 583         tmp[0]=tmp[1]=tmp[2]=tmp[3]=0;
 584
 585         for (;;)
 586                 {
 587                 c= *(str++);
 588                 if ((c >= '0') && (c <= '9'))
 589                         {
 590                         ok=1;
 591                         tmp[num]=tmp[num]*10+c-'0';
 592                         if (tmp[num] > 255) return(0);
 593                         }
 594                 else if (c == '.')
 595                         {
 596                         if (!ok) return(-1);
 597                         if (num == 3) return(0);
 598                         num++;
 599                         ok=0;
 600                         }
 601                 else if (c == '\0' && (num == 3) && ok)
 602                         break;
 603                 else
 604                         return(0);
 605                 }
 606         ip[0]=tmp[0];
 607         ip[1]=tmp[1];
 608         ip[2]=tmp[2];
 609         ip[3]=tmp[3];
 610         return(1);
 611         }
 612
 613 int BIO_get_accept_socket(char *host, int bind_mode)
 614         {
 615         int ret=0;
 616         union {
 617                 struct sockaddr sa;
 618                 struct sockaddr_in sa_in;
 619 #if OPENSSL_USE_IPV6
 620                 struct sockaddr_in6 sa_in6;
 621 #endif
 622         } server,client;
 623         int s=INVALID_SOCKET,cs,addrlen;
 624         unsigned char ip[4];
 625         unsigned short port;
 626         char *str=NULL,*e;
 627         char *h,*p;
 628         unsigned long l;
 629         int err_num;
 630
 631         if (BIO_sock_init() != 1) return(INVALID_SOCKET);
 632
 633         if ((str=BUF_strdup(host)) == NULL) return(INVALID_SOCKET);
 634
 635         h=p=NULL;
 636         h=str;
 637         for (e=str; *e; e++)
 638                 {
 639                 if (*e == ':')
 640                         {
 641                         p=e;
 642                         }
 643                 else if (*e == '/')
 644                         {
 645                         *e='\0';
 646                         break;
 647                         }
 648                 }
 649         if (p)  *p++='\0';      /* points at last ':', '::port' is special [see below] */
 650         else    p=h,h=NULL;
 651
 652 #ifdef EAI_FAMILY
 653         do {
 654         static union {  void *p;
 655                         int (WSAAPI *f)(const char *,const char *,
 656                                  const struct addrinfo *,
 657                                  struct addrinfo **);
 658                         } p_getaddrinfo = {NULL};
 659         static union {  void *p;
 660                         void (WSAAPI *f)(struct addrinfo *);
 661                         } p_freeaddrinfo = {NULL};
 662         struct addrinfo *res,hint;
 663
 664         if (p_getaddrinfo.p==NULL)
 665                 {
 666                 if ((p_getaddrinfo.p=DSO_global_lookup("getaddrinfo"))==NULL ||
 667                     (p_freeaddrinfo.p=DSO_global_lookup("freeaddrinfo"))==NULL)
 668                         p_getaddrinfo.p=(void*)-1;
 669                 }
 670         if (p_getaddrinfo.p==(void *)-1) break;
 671
 672         /* '::port' enforces IPv6 wildcard listener. Some OSes,
 673          * e.g. Solaris, default to IPv6 without any hint. Also
 674          * note that commonly IPv6 wildchard socket can service
 675          * IPv4 connections just as well...  */
 676         memset(&hint,0,sizeof(hint));
 677         hint.ai_flags = AI_PASSIVE;
 678         if (h)
 679                 {
 680                 if (strchr(h,':'))
 681                         {
 682                         if (h[1]=='\0') h=NULL;
 683 #if OPENSSL_USE_IPV6
 684                         hint.ai_family = AF_INET6;
 685 #else
 686                         h=NULL;
 687 #endif
 688                         }
 689                 else if (h[0]=='*' && h[1]=='\0')
 690                         {
 691                         hint.ai_family = AF_INET;
 692                         h=NULL;
 693                         }
 694                 }
 695
 696         if ((*p_getaddrinfo.f)(h,p,&hint,&res)) break;
 697
 698         addrlen = res->ai_addrlen<=sizeof(server) ?
 699                         res->ai_addrlen :
 700                         sizeof(server);
 701         memcpy(&server, res->ai_addr, addrlen);
 702
 703         (*p_freeaddrinfo.f)(res);
 704         goto again;
 705         } while (0);
 706 #endif
 707
 708         if (!BIO_get_port(p,&port)) goto err;
 709
 710         memset((char *)&server,0,sizeof(server));
 711         server.sa_in.sin_family=AF_INET;
 712         server.sa_in.sin_port=htons(port);
 713         addrlen = sizeof(server.sa_in);
 714
 715         if (h == NULL || strcmp(h,"*") == 0)
 716                 server.sa_in.sin_addr.s_addr=INADDR_ANY;
 717         else
 718                 {
 719                 if (!BIO_get_host_ip(h,&(ip[0]))) goto err;
 720                 l=(unsigned long)
 721                         ((unsigned long)ip[0]<<24L)|
 722                         ((unsigned long)ip[1]<<16L)|
 723                         ((unsigned long)ip[2]<< 8L)|
 724                         ((unsigned long)ip[3]);
 725                 server.sa_in.sin_addr.s_addr=htonl(l);
 726                 }
 727
 728 again:
 729         s=socket(server.sa.sa_family,SOCK_STREAM,SOCKET_PROTOCOL);
 730         if (s == INVALID_SOCKET)
 731                 {
 732                 SYSerr(SYS_F_SOCKET,get_last_socket_error());
 733                 ERR_add_error_data(3,"port='",host,"'");
 734                 BIOerr(BIO_F_BIO_GET_ACCEPT_SOCKET,BIO_R_UNABLE_TO_CREATE_SOCKET);
 735                 goto err;
 736                 }
 737
 738 #ifdef SO_REUSEADDR
 739         if (bind_mode == BIO_BIND_REUSEADDR)
 740                 {
 741                 int i=1;
 742
 743                 ret=setsockopt(s,SOL_SOCKET,SO_REUSEADDR,(char *)&i,sizeof(i));
 744                 bind_mode=BIO_BIND_NORMAL;
 745                 }
 746 #endif
 747         if (bind(s,&server.sa,addrlen) == -1)
 748                 {
 749 #ifdef SO_REUSEADDR
 750                 err_num=get_last_socket_error();
 751                 if ((bind_mode == BIO_BIND_REUSEADDR_IF_UNUSED) &&
 752 #ifdef OPENSSL_SYS_WINDOWS
 753                         /* Some versions of Windows define EADDRINUSE to
 754                          * a dummy value.
 755                          */
 756                         (err_num == WSAEADDRINUSE))
 757 #else
 758                         (err_num == EADDRINUSE))
 759 #endif
 760                         {
 761                         client = server;
 762                         if (h == NULL || strcmp(h,"*") == 0)
 763                                 {
 764 #if OPENSSL_USE_IPV6
 765                                 if (client.sa.sa_family == AF_INET6)
 766                                         {
 767                                         memset(&client.sa_in6.sin6_addr,0,sizeof(client.sa_in6.sin6_addr));
 768                                         client.sa_in6.sin6_addr.s6_addr[15]=1;
 769                                         }
 770                                 else
 771 #endif
 772                                 if (client.sa.sa_family == AF_INET)
 773                                         {
 774                                         client.sa_in.sin_addr.s_addr=htonl(0x7F000001);
 775                                         }
 776                                 else    goto err;
 777                                 }
 778                         cs=socket(client.sa.sa_family,SOCK_STREAM,SOCKET_PROTOCOL);
 779                         if (cs != INVALID_SOCKET)
 780                                 {
 781                                 int ii;
 782                                 ii=connect(cs,&client.sa,addrlen);
 783                                 closesocket(cs);
 784                                 if (ii == INVALID_SOCKET)
 785                                         {
 786                                         bind_mode=BIO_BIND_REUSEADDR;
 787                                         closesocket(s);
 788                                         goto again;
 789                                         }
 790                                 /* else error */
 791                                 }
 792                         /* else error */
 793                         }
 794 #endif
 795                 SYSerr(SYS_F_BIND,err_num);
 796                 ERR_add_error_data(3,"port='",host,"'");
 797                 BIOerr(BIO_F_BIO_GET_ACCEPT_SOCKET,BIO_R_UNABLE_TO_BIND_SOCKET);
 798                 goto err;
 799                 }
 800         if (listen(s,MAX_LISTEN) == -1)
 801                 {
 802                 SYSerr(SYS_F_BIND,get_last_socket_error());
 803                 ERR_add_error_data(3,"port='",host,"'");
 804                 BIOerr(BIO_F_BIO_GET_ACCEPT_SOCKET,BIO_R_UNABLE_TO_LISTEN_SOCKET);
 805                 goto err;
 806                 }
 807         ret=1;
 808 err:
 809         if (str != NULL) OPENSSL_free(str);
 810         if ((ret == 0) && (s != INVALID_SOCKET))
 811                 {
 812                 closesocket(s);
 813                 s= INVALID_SOCKET;
 814                 }
 815         return(s);
 816         }
 817
 818 int BIO_accept(int sock, char **addr)
 819         {
 820         int ret=INVALID_SOCKET;
 821         unsigned long l;
 822         unsigned short port;
 823         char *p;
 824
 825         struct {
 826         /*
 827          * As for following union. Trouble is that there are platforms
 828          * that have socklen_t and there are platforms that don't, on
 829          * some platforms socklen_t is int and on some size_t. So what
 830          * one can do? One can cook #ifdef spaghetti, which is nothing
 831          * but masochistic. Or one can do union between int and size_t.
 832          * One naturally does it primarily for 64-bit platforms where
 833          * sizeof(int) != sizeof(size_t). But would it work? Note that
 834          * if size_t member is initialized to 0, then later int member
 835          * assignment naturally does the job on little-endian platforms
 836          * regardless accept's expectations! What about big-endians?
 837          * If accept expects int*, then it works, and if size_t*, then
 838          * length value would appear as unreasonably large. But this
 839          * won't prevent it from filling in the address structure. The
 840          * trouble of course would be if accept returns more data than
 841          * actual buffer can accomodate and overwrite stack... That's
 842          * where early OPENSSL_assert comes into picture. Besides, the
 843          * only 64-bit big-endian platform found so far that expects
 844          * size_t* is HP-UX, where stack grows towards higher address.
 845          * <appro>
 846          */
 847         union { size_t s; int i; } len;
 848         union {
 849                 struct sockaddr sa;
 850                 struct sockaddr_in sa_in;
 851 #if OPENSSL_USE_IPV6
 852                 struct sockaddr_in6 sa_in6;
 853 #endif
 854                 } from;
 855         } sa;
 856
 857         sa.len.s=0;
 858         sa.len.i=sizeof(sa.from);
 859         memset(&sa.from,0,sizeof(sa.from));
 860         ret=accept(sock,&sa.from.sa,(void *)&sa.len);
 861         if (sizeof(sa.len.i)!=sizeof(sa.len.s) && sa.len.i==0)
 862                 {
 863                 OPENSSL_assert(sa.len.s<=sizeof(sa.from));
 864                 sa.len.i = (int)sa.len.s;
 865                 /* use sa.len.i from this point */
 866                 }
 867         if (ret == INVALID_SOCKET)
 868                 {
 869                 if(BIO_sock_should_retry(ret)) return -2;
 870                 SYSerr(SYS_F_ACCEPT,get_last_socket_error());
 871                 BIOerr(BIO_F_BIO_ACCEPT,BIO_R_ACCEPT_ERROR);
 872                 goto end;
 873                 }
 874
 875         if (addr == NULL) goto end;
 876
 877 #ifdef EAI_FAMILY
 878         do {
 879         char   h[NI_MAXHOST],s[NI_MAXSERV];
 880         size_t nl;
 881         static union {  void *p;
 882                         int (WSAAPI *f)(const struct sockaddr *,size_t/*socklen_t*/,
 883                                  char *,size_t,char *,size_t,int);
 884                         } p_getnameinfo = {NULL};
 885                         /* 2nd argument to getnameinfo is specified to
 886                          * be socklen_t. Unfortunately there is a number
 887                          * of environments where socklen_t is not defined.
 888                          * As it's passed by value, it's safe to pass it
 889                          * as size_t... <appro> */
 890
 891         if (p_getnameinfo.p==NULL)
 892                 {
 893                 if ((p_getnameinfo.p=DSO_global_lookup("getnameinfo"))==NULL)
 894                         p_getnameinfo.p=(void*)-1;
 895                 }
 896         if (p_getnameinfo.p==(void *)-1) break;
 897
 898         if ((*p_getnameinfo.f)(&sa.from.sa,sa.len.i,h,sizeof(h),s,sizeof(s),
 899             NI_NUMERICHOST|NI_NUMERICSERV)) break;
 900         nl = strlen(h)+strlen(s)+2;
 901         p = *addr;
 902         if (p)  { *p = '\0'; p = OPENSSL_realloc(p,nl); }
 903         else    { p = OPENSSL_malloc(nl);               }
 904         if (p==NULL)
 905                 {
 906                 BIOerr(BIO_F_BIO_ACCEPT,ERR_R_MALLOC_FAILURE);
 907                 goto end;
 908                 }
 909         *addr = p;
 910         BIO_snprintf(*addr,nl,"%s:%s",h,s);
 911         goto end;
 912         } while(0);
 913 #endif
 914         if (sa.from.sa.sa_family != AF_INET) goto end;
 915         l=ntohl(sa.from.sa_in.sin_addr.s_addr);
 916         port=ntohs(sa.from.sa_in.sin_port);
 917         if (*addr == NULL)
 918                 {
 919                 if ((p=OPENSSL_malloc(24)) == NULL)
 920                         {
 921                         BIOerr(BIO_F_BIO_ACCEPT,ERR_R_MALLOC_FAILURE);
 922                         goto end;
 923                         }
 924                 *addr=p;
 925                 }
 926         BIO_snprintf(*addr,24,"%d.%d.%d.%d:%d",
 927                      (unsigned char)(l>>24L)&0xff,
 928                      (unsigned char)(l>>16L)&0xff,
 929                      (unsigned char)(l>> 8L)&0xff,
 930                      (unsigned char)(l     )&0xff,
 931                      port);
 932 end:
 933         return(ret);
 934         }
 935
 936 int BIO_set_tcp_ndelay(int s, int on)
 937         {
 938         int ret=0;
 939 #if defined(TCP_NODELAY) && (defined(IPPROTO_TCP) || defined(SOL_TCP))
 940         int opt;
 941
 942 #ifdef SOL_TCP
 943         opt=SOL_TCP;
 944 #else
 945 #ifdef IPPROTO_TCP
 946         opt=IPPROTO_TCP;
 947 #endif
 948 #endif
 949
 950         ret=setsockopt(s,opt,TCP_NODELAY,(char *)&on,sizeof(on));
 951 #endif
 952         return(ret == 0);
 953         }
 954
 955 int BIO_socket_nbio(int s, int mode)
 956         {
 957         int ret= -1;
 958         int l;
 959
 960         l=mode;
 961 #ifdef FIONBIO
 962         ret=BIO_socket_ioctl(s,FIONBIO,&l);
 963 #endif
 964         return(ret == 0);
 965         }
 966 #endif