External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2024-07-16 22:57:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

When reporting errors, use "conn" whenever possible.

Browse Source 
* src/remote_internal.c: change all error (NULL, ... to error (conn, ...
(check_cert_file): Add+use parameter, conn.
Adjust callers.
(initialise_gnutls): The "conn" parameter *is* used, so remove
ATTRIBUTE_UNUSED.


Author: Jim Meyering <meyering@redhat.com>
This commit is contained in:
Jim Meyering 2007-11-27 18:18:23 +00:00
parent ba8c4d7400
commit 59a375812d
2 changed files with 55 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
ChangeLog
View File

@ -1,3 +1,12 @@
Tue Nov 27 19:16:43 CET 2007 Jim Meyering <meyering@redhat.com>
When reporting errors, use "conn" whenever possible.
* src/remote_internal.c: change all error (NULL, ... to error (conn, ...
(check_cert_file): Add+use parameter, conn.
Adjust callers.
(initialise_gnutls): The "conn" parameter *is* used, so remove
ATTRIBUTE_UNUSED.
Tue Nov 27 16:40:29 CET 2007 Daniel Veillard <veillard@redhat.com>
* docs/site.xsl docs/libvir.html *.html: add boilerplate for
@ -19,7 +28,7 @@ Tue Nov 27 15:29:01 CET 2007 Daniel Veillard <veillard@redhat.com>
Mon Nov 26 15:06:19 CET 2007 Daniel Veillard <veillard@redhat.com>
* doc/*: modified the python page into a bindings page,
* doc/*: modified the python page into a bindings page,
added the Ruby binding link to all pages
Mon Nov 26 12:12:00 UTC 2007 Richard W.M. Jones <rjones@redhat.com>

90
src/remote_internal.c
View File

@ -280,7 +280,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
else if (strcasecmp (transport_str, "tcp") == 0)
transport = trans_tcp;
else {
error (NULL, VIR_ERR_INVALID_ARG,
error (conn, VIR_ERR_INVALID_ARG,
"remote_open: transport in URL not recognised "
"(should be tls|unix|ssh|ext|tcp)");
return VIR_DRV_OPEN_ERROR;
@ -308,7 +308,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
server = strdup (uri->server ? uri->server : "localhost");
if (!server) {
out_of_memory:
error (NULL, VIR_ERR_NO_MEMORY, "duplicating server name");
error (conn, VIR_ERR_NO_MEMORY, "duplicating server name");
goto failed;
}
if (uri->port != 0) {
@ -394,7 +394,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
/* For ext transport, command is required. */
if (transport == trans_ext && !command) {
error (NULL, VIR_ERR_INVALID_ARG, "remote_open: for 'ext' transport, command is required");
error (conn, VIR_ERR_INVALID_ARG, "remote_open: for 'ext' transport, command is required");
goto failed;
}
@ -438,7 +438,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
hints.ai_flags = AI_ADDRCONFIG;
int e = getaddrinfo (server, port, &hints, &res);
if (e != 0) {
error (NULL, VIR_ERR_INVALID_ARG, gai_strerror (e));
error (conn, VIR_ERR_INVALID_ARG, gai_strerror (e));
goto failed;
}
@ -458,7 +458,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
priv->sock = socket (r->ai_family, SOCK_STREAM, 0);
if (priv->sock == -1) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
continue;
}
@ -468,7 +468,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
sizeof no_slow_start);
if (connect (priv->sock, r->ai_addr, r->ai_addrlen) == -1) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
close (priv->sock);
continue;
}
@ -504,12 +504,12 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
uid_t uid = getuid();
if (!(pw = getpwuid(uid))) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
if (asprintf (&sockname, "@%s" LIBVIRTD_USER_UNIX_SOCKET, pw->pw_dir) < 0) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
} else {
@ -518,7 +518,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
else
sockname = strdup (LIBVIRTD_PRIV_UNIX_SOCKET);
if (sockname == NULL) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
}
@ -539,7 +539,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
autostart_retry:
priv->sock = socket (AF_UNIX, SOCK_STREAM, 0);
if (priv->sock == -1) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
if (connect (priv->sock, (struct sockaddr *) &addr, sizeof addr) == -1) {
@ -561,7 +561,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
goto autostart_retry;
}
}
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
@ -576,7 +576,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
command = command ? : strdup ("ssh");
if (command == NULL) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
@ -584,7 +584,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
// ssh -p $port [-l $username] $hostname $netcat -U $sockname [NULL]
cmd_argv = malloc (nr_args * sizeof (char *));
if (cmd_argv == NULL) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
@ -611,7 +611,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
assert (j == nr_args);
for (j = 0; j < nr_args; j++)
if (cmd_argv[j] == NULL) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (ENOMEM));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (ENOMEM));
goto failed;
}
}
@ -626,13 +626,13 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
* to faff around with two file descriptors (a la 'pipe(2)').
*/
if (socketpair (PF_UNIX, SOCK_STREAM, 0, sv) == -1) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
pid = fork ();
if (pid == -1) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
} else if (pid == 0) { /* Child. */
close (sv[0]);
@ -647,7 +647,7 @@ doRemoteOpen (virConnectPtr conn, struct private_data *priv,
if (!cmd_argv) {
cmd_argv = malloc (2 * sizeof (char *));
if (cmd_argv == NULL) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
goto failed;
}
cmd_argv[0] = command;
@ -724,7 +724,7 @@ remoteOpen (virConnectPtr conn, xmlURIPtr uri, int flags)
priv = malloc (sizeof(struct private_data));
if (!priv) {
error (NULL, VIR_ERR_NO_MEMORY, "struct private_data");
error (conn, VIR_ERR_NO_MEMORY, "struct private_data");
return VIR_DRV_OPEN_ERROR;
}
@ -947,11 +947,11 @@ static gnutls_certificate_credentials_t x509_cred;
static int
check_cert_file (const char *type, const char *file)
check_cert_file (virConnectPtr conn, const char *type, const char *file)
{
struct stat sb;
if (stat(file, &sb) < 0) {
__virRaiseError (NULL, NULL, NULL, VIR_FROM_REMOTE, VIR_ERR_RPC,
__virRaiseError (conn, NULL, NULL, VIR_FROM_REMOTE, VIR_ERR_RPC,
VIR_ERR_ERROR, LIBVIRT_CACERT, NULL, NULL, 0, 0,
"Cannot access %s '%s': %s (%d)",
type, file, strerror(errno), errno);
@ -962,7 +962,7 @@ check_cert_file (const char *type, const char *file)
static int
initialise_gnutls (virConnectPtr conn ATTRIBUTE_UNUSED)
initialise_gnutls (virConnectPtr conn)
{
static int initialised = 0;
int err;
@ -974,16 +974,16 @@ initialise_gnutls (virConnectPtr conn ATTRIBUTE_UNUSED)
/* X509 stuff */
err = gnutls_certificate_allocate_credentials (&x509_cred);
if (err) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return -1;
}
if (check_cert_file("CA certificate", LIBVIRT_CACERT) < 0)
if (check_cert_file(conn, "CA certificate", LIBVIRT_CACERT) < 0)
return -1;
if (check_cert_file("client key", LIBVIRT_CLIENTKEY) < 0)
if (check_cert_file(conn, "client key", LIBVIRT_CLIENTKEY) < 0)
return -1;
if (check_cert_file("client certificate", LIBVIRT_CLIENTCERT) < 0)
if (check_cert_file(conn, "client certificate", LIBVIRT_CLIENTCERT) < 0)
return -1;
/* Set the trusted CA cert. */
@ -994,7 +994,7 @@ initialise_gnutls (virConnectPtr conn ATTRIBUTE_UNUSED)
gnutls_certificate_set_x509_trust_file (x509_cred, LIBVIRT_CACERT,
GNUTLS_X509_FMT_PEM);
if (err < 0) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return -1;
}
@ -1009,7 +1009,7 @@ initialise_gnutls (virConnectPtr conn ATTRIBUTE_UNUSED)
LIBVIRT_CLIENTKEY,
GNUTLS_X509_FMT_PEM);
if (err < 0) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return -1;
}
@ -1035,21 +1035,21 @@ negotiate_gnutls_on_connection (virConnectPtr conn,
*/
err = gnutls_init (&session, GNUTLS_CLIENT);
if (err) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return NULL;
}
/* Use default priorities */
err = gnutls_set_default_priority (session);
if (err) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return NULL;
}
err =
gnutls_certificate_type_set_priority (session,
cert_type_priority);
if (err) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return NULL;
}
@ -1057,7 +1057,7 @@ negotiate_gnutls_on_connection (virConnectPtr conn,
*/
err = gnutls_credentials_set (session, GNUTLS_CRD_CERTIFICATE, x509_cred);
if (err) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return NULL;
}
@ -1070,7 +1070,7 @@ negotiate_gnutls_on_connection (virConnectPtr conn,
if (err < 0) {
if (err == GNUTLS_E_AGAIN || err == GNUTLS_E_INTERRUPTED)
goto again;
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (err));
return NULL;
}
@ -1091,11 +1091,11 @@ negotiate_gnutls_on_connection (virConnectPtr conn,
if (len < 0 && len != GNUTLS_E_UNEXPECTED_PACKET_LENGTH) {
if (len == GNUTLS_E_AGAIN || len == GNUTLS_E_INTERRUPTED)
goto again_2;
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (len));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (len));
return NULL;
}
if (len != 1 || buf[0] != '\1') {
error (NULL, VIR_ERR_RPC,
error (conn, VIR_ERR_RPC,
"server verification (of our certificate or IP address) failed\n");
return NULL;
}
@ -1120,12 +1120,12 @@ verify_certificate (virConnectPtr conn ATTRIBUTE_UNUSED,
time_t now;
if ((ret = gnutls_certificate_verify_peers2 (session, &status)) < 0) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (ret));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (ret));
return -1;
}
if ((now = time(NULL)) == ((time_t)-1)) {
error (NULL, VIR_ERR_SYSTEM_ERROR, strerror (errno));
error (conn, VIR_ERR_SYSTEM_ERROR, strerror (errno));
return -1;
}
@ -1146,17 +1146,17 @@ verify_certificate (virConnectPtr conn ATTRIBUTE_UNUSED,
reason = "The certificate uses an insecure algorithm";
#endif
error (NULL, VIR_ERR_RPC, reason);
error (conn, VIR_ERR_RPC, reason);
return -1;
}
if (gnutls_certificate_type_get(session) != GNUTLS_CRT_X509) {
error (NULL, VIR_ERR_RPC, "Certificate type is not X.509");
error (conn, VIR_ERR_RPC, "Certificate type is not X.509");
return -1;
}
if (!(certs = gnutls_certificate_get_peers(session, &nCerts))) {
error (NULL, VIR_ERR_RPC, "gnutls_certificate_get_peers failed");
error (conn, VIR_ERR_RPC, "gnutls_certificate_get_peers failed");
return -1;
}
@ -1165,25 +1165,25 @@ verify_certificate (virConnectPtr conn ATTRIBUTE_UNUSED,
ret = gnutls_x509_crt_init (&cert);
if (ret < 0) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (ret));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (ret));
return -1;
}
ret = gnutls_x509_crt_import (cert, &certs[i], GNUTLS_X509_FMT_DER);
if (ret < 0) {
error (NULL, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (ret));
error (conn, VIR_ERR_GNUTLS_ERROR, gnutls_strerror (ret));
gnutls_x509_crt_deinit (cert);
return -1;
}
if (gnutls_x509_crt_get_expiration_time (cert) < now) {
error (NULL, VIR_ERR_RPC, "The certificate has expired");
error (conn, VIR_ERR_RPC, "The certificate has expired");
gnutls_x509_crt_deinit (cert);
return -1;
}
if (gnutls_x509_crt_get_activation_time (cert) > now) {
error (NULL, VIR_ERR_RPC, "The certificate is not yet activated");
error (conn, VIR_ERR_RPC, "The certificate is not yet activated");
gnutls_x509_crt_deinit (cert);
return -1;
}
@ -1191,7 +1191,7 @@ verify_certificate (virConnectPtr conn ATTRIBUTE_UNUSED,
if (i == 0) {
if (!gnutls_x509_crt_check_hostname (cert, hostname)) {
__virRaiseError
(NULL, NULL, NULL,
(conn, NULL, NULL,
VIR_FROM_REMOTE, VIR_ERR_RPC,
VIR_ERR_ERROR, hostname, NULL, NULL,
0, 0,
@ -2390,7 +2390,7 @@ remoteNetworkOpen (virConnectPtr conn,
struct private_data *priv = malloc (sizeof(struct private_data));
int ret, rflags = 0;
if (!priv) {
error (NULL, VIR_ERR_NO_MEMORY, "struct private_data");
error (conn, VIR_ERR_NO_MEMORY, "struct private_data");
return VIR_DRV_OPEN_ERROR;
}
if (flags & VIR_DRV_OPEN_RO)