mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-07-31 05:57:16 +00:00
domifaddr: Implement the remote protocol
daemon/remote.c
* Define remoteSerializeDomainInterface, remoteDispatchDomainInterfaceAddresses
src/remote/remote_driver.c
* Define remoteDomainInterfaceAddresses
src/remote/remote_protocol.x
* New RPC procedure: REMOTE_PROC_DOMAIN_INTERFACE_ADDRESSES
* Define structs remote_domain_ip_addr, remote_domain_interface,
remote_domain_interfaces_addresse_args, remote_domain_interface_addresses_ret
* Introduce upper bounds (to handle DoS attacks):
REMOTE_DOMAIN_INTERFACE_MAX = 2048
REMOTE_DOMAIN_IP_ADDR_MAX = 2048
Restrictions on the maximum number of aliases per interface were
removed after kernel v2.0, and theoretically, at present, there
are no upper limits on number of interfaces per virtual machine
and on the number of IP addresses per interface.
src/remote_protocol-structs
* New structs added
Signed-off-by: Nehal J Wani <nehaljw.kkd1@gmail.com>
This commit is contained in:
Nehal J Wani
Daniel P. Berrange
parent
5b5242a7cb
commit
71546d1798
124
daemon/remote.c
124
daemon/remote.c
@ -6499,6 +6499,130 @@ remoteDispatchDomainGetFSInfo(virNetServerPtr server ATTRIBUTE_UNUSED,
|
||||
}
|
||||
|
||||
|
||||
static int
|
||||
remoteSerializeDomainInterface(virDomainInterfacePtr *ifaces,
|
||||
unsigned int ifaces_count,
|
||||
remote_domain_interface_addresses_ret *ret)
|
||||
{
|
||||
size_t i, j;
|
||||
|
||||
if (ifaces_count > REMOTE_DOMAIN_INTERFACE_MAX) {
|
||||
virReportError(VIR_ERR_INTERNAL_ERROR,
|
||||
_("Number of interfaces, %d exceeds the max limit: %d"),
|
||||
ifaces_count, REMOTE_DOMAIN_INTERFACE_MAX);
|
||||
return -1;
|
||||
}
|
||||
|
||||
if (VIR_ALLOC_N(ret->ifaces.ifaces_val, ifaces_count) < 0)
|
||||
return -1;
|
||||
|
||||
ret->ifaces.ifaces_len = ifaces_count;
|
||||
|
||||
for (i = 0; i < ifaces_count; i++) {
|
||||
virDomainInterfacePtr iface = ifaces[i];
|
||||
remote_domain_interface *iface_ret = &(ret->ifaces.ifaces_val[i]);
|
||||
|
||||
if ((VIR_STRDUP(iface_ret->name, iface->name)) < 0)
|
||||
goto cleanup;
|
||||
|
||||
if ((VIR_STRDUP(iface_ret->hwaddr, iface->hwaddr)) < 0)
|
||||
goto cleanup;
|
||||
|
||||
if (iface->naddrs > REMOTE_DOMAIN_IP_ADDR_MAX) {
|
||||
virReportError(VIR_ERR_INTERNAL_ERROR,
|
||||
_("Number of interfaces, %d exceeds the max limit: %d"),
|
||||
iface->naddrs, REMOTE_DOMAIN_IP_ADDR_MAX);
|
||||
goto cleanup;
|
||||
}
|
||||
|
||||
if (VIR_ALLOC_N(iface_ret->addrs.addrs_val,
|
||||
iface->naddrs) < 0)
|
||||
goto cleanup;
|
||||
|
||||
iface_ret->addrs.addrs_len = iface->naddrs;
|
||||
|
||||
for (j = 0; j < iface->naddrs; j++) {
|
||||
virDomainIPAddressPtr ip_addr = &(iface->addrs[j]);
|
||||
remote_domain_ip_addr *ip_addr_ret =
|
||||
&(iface_ret->addrs.addrs_val[j]);
|
||||
|
||||
if (VIR_STRDUP(ip_addr_ret->addr, ip_addr->addr) < 0)
|
||||
goto cleanup;
|
||||
|
||||
ip_addr_ret->prefix = ip_addr->prefix;
|
||||
ip_addr_ret->type = ip_addr->type;
|
||||
}
|
||||
}
|
||||
|
||||
return 0;
|
||||
|
||||
cleanup:
|
||||
if (ret->ifaces.ifaces_val) {
|
||||
for (i = 0; i < ifaces_count; i++) {
|
||||
remote_domain_interface *iface_ret = &(ret->ifaces.ifaces_val[i]);
|
||||
VIR_FREE(iface_ret->name);
|
||||
VIR_FREE(iface_ret->hwaddr);
|
||||
for (j = 0; j < iface_ret->addrs.addrs_len; j++) {
|
||||
remote_domain_ip_addr *ip_addr =
|
||||
&(iface_ret->addrs.addrs_val[j]);
|
||||
VIR_FREE(ip_addr->addr);
|
||||
}
|
||||
}
|
||||
VIR_FREE(ret->ifaces.ifaces_val);
|
||||
}
|
||||
|
||||
return -1;
|
||||
}
|
||||
|
||||
|
||||
static int
|
||||
remoteDispatchDomainInterfaceAddresses(virNetServerPtr server ATTRIBUTE_UNUSED,
|
||||
virNetServerClientPtr client,
|
||||
virNetMessagePtr msg ATTRIBUTE_UNUSED,
|
||||
virNetMessageErrorPtr rerr,
|
||||
remote_domain_interface_addresses_args *args,
|
||||
remote_domain_interface_addresses_ret *ret)
|
||||
{
|
||||
size_t i;
|
||||
int rv = -1;
|
||||
virDomainPtr dom = NULL;
|
||||
virDomainInterfacePtr *ifaces = NULL;
|
||||
int ifaces_count = 0;
|
||||
struct daemonClientPrivate *priv =
|
||||
virNetServerClientGetPrivateData(client);
|
||||
|
||||
if (!priv->conn) {
|
||||
virReportError(VIR_ERR_INTERNAL_ERROR, "%s", _("connection not open"));
|
||||
goto cleanup;
|
||||
}
|
||||
|
||||
if (!(dom = get_nonnull_domain(priv->conn, args->dom)))
|
||||
goto cleanup;
|
||||
|
||||
if ((ifaces_count = virDomainInterfaceAddresses(dom, &ifaces, args->source, args->flags)) < 0)
|
||||
goto cleanup;
|
||||
|
||||
if (remoteSerializeDomainInterface(ifaces, ifaces_count, ret) < 0)
|
||||
goto cleanup;
|
||||
|
||||
rv = 0;
|
||||
|
||||
cleanup:
|
||||
if (rv < 0)
|
||||
virNetMessageSaveError(rerr);
|
||||
|
||||
virObjectUnref(dom);
|
||||
|
||||
if (ifaces && ifaces_count > 0) {
|
||||
for (i = 0; i < ifaces_count; i++)
|
||||
virDomainInterfaceFree(ifaces[i]);
|
||||
}
|
||||
VIR_FREE(ifaces);
|
||||
|
||||
return rv;
|
||||
}
|
||||
|
||||
|
||||
/*----- Helpers. -----*/
|
||||
|
||||
/* get_nonnull_domain and get_nonnull_network turn an on-wire
|
||||
|
||||
@ -7909,6 +7909,108 @@ remoteDomainGetFSInfo(virDomainPtr dom,
|
||||
}
|
||||
|
||||
|
||||
static int
|
||||
remoteDomainInterfaceAddresses(virDomainPtr dom,
|
||||
virDomainInterfacePtr **ifaces,
|
||||
unsigned int source,
|
||||
unsigned int flags)
|
||||
{
|
||||
int rv = -1;
|
||||
size_t i, j;
|
||||
|
||||
virDomainInterfacePtr *ifaces_ret = NULL;
|
||||
remote_domain_interface_addresses_args args;
|
||||
remote_domain_interface_addresses_ret ret;
|
||||
|
||||
struct private_data *priv = dom->conn->privateData;
|
||||
|
||||
args.source = source;
|
||||
args.flags = flags;
|
||||
make_nonnull_domain(&args.dom, dom);
|
||||
|
||||
remoteDriverLock(priv);
|
||||
|
||||
memset(&ret, 0, sizeof(ret));
|
||||
|
||||
if (call(dom->conn, priv, 0, REMOTE_PROC_DOMAIN_INTERFACE_ADDRESSES,
|
||||
(xdrproc_t)xdr_remote_domain_interface_addresses_args,
|
||||
(char *)&args,
|
||||
(xdrproc_t)xdr_remote_domain_interface_addresses_ret,
|
||||
(char *)&ret) == -1) {
|
||||
goto done;
|
||||
}
|
||||
|
||||
if (ret.ifaces.ifaces_len > REMOTE_DOMAIN_INTERFACE_MAX) {
|
||||
virReportError(VIR_ERR_INTERNAL_ERROR,
|
||||
_("Number of interfaces, %d exceeds the max limit: %d"),
|
||||
ret.ifaces.ifaces_len, REMOTE_DOMAIN_INTERFACE_MAX);
|
||||
goto cleanup;
|
||||
}
|
||||
|
||||
if (ret.ifaces.ifaces_len &&
|
||||
VIR_ALLOC_N(ifaces_ret, ret.ifaces.ifaces_len) < 0)
|
||||
goto cleanup;
|
||||
|
||||
for (i = 0; i < ret.ifaces.ifaces_len; i++) {
|
||||
virDomainInterfacePtr iface;
|
||||
remote_domain_interface *iface_ret = &(ret.ifaces.ifaces_val[i]);
|
||||
|
||||
if (VIR_ALLOC(ifaces_ret[i]) < 0)
|
||||
goto cleanup;
|
||||
|
||||
iface = ifaces_ret[i];
|
||||
|
||||
if (VIR_STRDUP(iface->name, iface_ret->name) < 0)
|
||||
goto cleanup;
|
||||
|
||||
if (VIR_STRDUP(iface->hwaddr, iface_ret->hwaddr) < 0)
|
||||
goto cleanup;
|
||||
|
||||
if (iface_ret->addrs.addrs_len > REMOTE_DOMAIN_IP_ADDR_MAX) {
|
||||
virReportError(VIR_ERR_INTERNAL_ERROR,
|
||||
_("Number of interfaces, %d exceeds the max limit: %d"),
|
||||
iface_ret->addrs.addrs_len, REMOTE_DOMAIN_IP_ADDR_MAX);
|
||||
goto cleanup;
|
||||
}
|
||||
|
||||
iface->naddrs = iface_ret->addrs.addrs_len;
|
||||
|
||||
if (iface->naddrs) {
|
||||
if (VIR_ALLOC_N(iface->addrs, iface->naddrs) < 0)
|
||||
goto cleanup;
|
||||
|
||||
for (j = 0; j < iface->naddrs; j++) {
|
||||
virDomainIPAddressPtr ip_addr = &(iface->addrs[j]);
|
||||
remote_domain_ip_addr *ip_addr_ret =
|
||||
&(iface_ret->addrs.addrs_val[j]);
|
||||
|
||||
if (VIR_STRDUP(ip_addr->addr, ip_addr_ret->addr) < 0)
|
||||
goto cleanup;
|
||||
|
||||
ip_addr->prefix = ip_addr_ret->prefix;
|
||||
ip_addr->type = ip_addr_ret->type;
|
||||
}
|
||||
}
|
||||
}
|
||||
*ifaces = ifaces_ret;
|
||||
ifaces_ret = NULL;
|
||||
|
||||
rv = ret.ifaces.ifaces_len;
|
||||
|
||||
cleanup:
|
||||
if (ifaces_ret) {
|
||||
for (i = 0; i < ret.ifaces.ifaces_len; i++)
|
||||
virDomainInterfaceFree(ifaces_ret[i]);
|
||||
VIR_FREE(ifaces_ret);
|
||||
}
|
||||
xdr_free((xdrproc_t)xdr_remote_domain_interface_addresses_ret,
|
||||
(char *) &ret);
|
||||
done:
|
||||
remoteDriverUnlock(priv);
|
||||
return rv;
|
||||
}
|
||||
|
||||
|
||||
/* get_nonnull_domain and get_nonnull_network turn an on-wire
|
||||
* (name, uuid) pair into virDomainPtr or virNetworkPtr object.
|
||||
* These can return NULL if underlying memory allocations fail,
|
||||
@ -8254,6 +8356,7 @@ static virHypervisorDriver hypervisor_driver = {
|
||||
.connectGetAllDomainStats = remoteConnectGetAllDomainStats, /* 1.2.8 */
|
||||
.nodeAllocPages = remoteNodeAllocPages, /* 1.2.9 */
|
||||
.domainGetFSInfo = remoteDomainGetFSInfo, /* 1.2.11 */
|
||||
.domainInterfaceAddresses = remoteDomainInterfaceAddresses, /* 1.2.14 */
|
||||
};
|
||||
|
||||
static virNetworkDriver network_driver = {
|
||||
|
||||
@ -259,6 +259,12 @@ const REMOTE_DOMAIN_FSINFO_MAX = 256;
|
||||
/* Upper limit on number of disks per mountpoint in fsinfo */
|
||||
const REMOTE_DOMAIN_FSINFO_DISKS_MAX = 256;
|
||||
|
||||
/* Upper limit on number of interfaces per domain */
|
||||
const REMOTE_DOMAIN_INTERFACE_MAX = 2048;
|
||||
|
||||
/* Upper limit on number of IP addresses per interface */
|
||||
const REMOTE_DOMAIN_IP_ADDR_MAX = 2048;
|
||||
|
||||
/* UUID. VIR_UUID_BUFLEN definition comes from libvirt.h */
|
||||
typedef opaque remote_uuid[VIR_UUID_BUFLEN];
|
||||
|
||||
@ -3177,6 +3183,29 @@ struct remote_domain_get_fsinfo_ret {
|
||||
unsigned int ret;
|
||||
};
|
||||
|
||||
struct remote_domain_ip_addr {
|
||||
int type;
|
||||
remote_nonnull_string addr;
|
||||
unsigned int prefix;
|
||||
};
|
||||
|
||||
struct remote_domain_interface {
|
||||
remote_nonnull_string name;
|
||||
remote_nonnull_string hwaddr;
|
||||
remote_domain_ip_addr addrs<REMOTE_DOMAIN_IP_ADDR_MAX>;
|
||||
};
|
||||
|
||||
struct remote_domain_interface_addresses_args {
|
||||
remote_nonnull_domain dom;
|
||||
unsigned int source;
|
||||
unsigned int flags;
|
||||
};
|
||||
|
||||
struct remote_domain_interface_addresses_ret {
|
||||
remote_domain_interface ifaces<REMOTE_DOMAIN_INTERFACE_MAX>;
|
||||
};
|
||||
|
||||
|
||||
/*----- Protocol. -----*/
|
||||
|
||||
/* Define the program number, protocol version and procedure numbers here. */
|
||||
@ -5608,5 +5637,11 @@ enum remote_procedure {
|
||||
* @acl: domain:save:!VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE
|
||||
* @acl: domain:save:VIR_DOMAIN_AFFECT_CONFIG
|
||||
*/
|
||||
REMOTE_PROC_DOMAIN_PIN_IOTHREAD = 352
|
||||
REMOTE_PROC_DOMAIN_PIN_IOTHREAD = 352,
|
||||
|
||||
/**
|
||||
* @generate: none
|
||||
* @acl: domain:read
|
||||
*/
|
||||
REMOTE_PROC_DOMAIN_INTERFACE_ADDRESSES = 353
|
||||
};
|
||||
|
||||
@ -2639,6 +2639,30 @@ struct remote_domain_get_fsinfo_ret {
|
||||
} info;
|
||||
u_int ret;
|
||||
};
|
||||
struct remote_domain_ip_addr {
|
||||
int type;
|
||||
remote_nonnull_string addr;
|
||||
u_int prefix;
|
||||
};
|
||||
struct remote_domain_interface {
|
||||
remote_nonnull_string name;
|
||||
remote_nonnull_string hwaddr;
|
||||
struct {
|
||||
u_int addrs_len;
|
||||
remote_domain_ip_addr * addrs_val;
|
||||
} addrs;
|
||||
};
|
||||
struct remote_domain_interface_addresses_args {
|
||||
remote_nonnull_domain dom;
|
||||
u_int source;
|
||||
u_int flags;
|
||||
};
|
||||
struct remote_domain_interface_addresses_ret {
|
||||
struct {
|
||||
u_int ifaces_len;
|
||||
remote_domain_interface * ifaces_val;
|
||||
} ifaces;
|
||||
};
|
||||
enum remote_procedure {
|
||||
REMOTE_PROC_CONNECT_OPEN = 1,
|
||||
REMOTE_PROC_CONNECT_CLOSE = 2,
|
||||
@ -2992,4 +3016,5 @@ enum remote_procedure {
|
||||
REMOTE_PROC_DOMAIN_DEFINE_XML_FLAGS = 350,
|
||||
REMOTE_PROC_DOMAIN_GET_IOTHREADS_INFO = 351,
|
||||
REMOTE_PROC_DOMAIN_PIN_IOTHREAD = 352,
|
||||
REMOTE_PROC_DOMAIN_INTERFACE_ADDRESSES = 353,
|
||||
};
|
||||
|
||||
Loading…
Reference in New Issue
Block a user