From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: passt.top; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=dnJjuJtD; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by passt.top (Postfix) with ESMTPS id 431185A004E for ; Thu, 09 Jan 2025 14:34:07 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1736429646; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FkogZNLfdzs0a5YfTMF35O+AqP6oEBu+WbsFK5qwg+U=; b=dnJjuJtDRIG3h8Re3lswvYjDLBWlHFYCoVvCWRuu/zq0Yws9byNi3NceOmAc9Z9I9p2eN9 pkZwt1A3aERwBw+Fd3iwdara4MuHMQVgGn0h4poQxpT38JzqzckU2JJ/f5bojVkkHVJGlX ZD68ZT46qOiIemFXOFQ3h50vklo7EKo= Received: from mail-wr1-f69.google.com (mail-wr1-f69.google.com [209.85.221.69]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-127-5iitIDucO-W25A4C0JuDsw-1; Thu, 09 Jan 2025 08:34:04 -0500 X-MC-Unique: 5iitIDucO-W25A4C0JuDsw-1 X-Mimecast-MFC-AGG-ID: 5iitIDucO-W25A4C0JuDsw Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-3860bc1d4f1so613695f8f.2 for ; Thu, 09 Jan 2025 05:34:04 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736429642; x=1737034442; h=content-transfer-encoding:mime-version:organization:references :in-reply-to:message-id:subject:cc:to:from:date:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=jDL+Ke0iyKjZ2z280jV6G/0HSboz2Pv10iIzZrIZSDI=; b=UpC0uFuNRscR8jXthbfqrij7mFhlfxj3TurMJjqgDUNsg7CbKEQmduANPv8iYwLfe3 BlZJhzj5PhcA9EdiysG/pAEuVfnZt+l+7t8lbMlct/C7xbL4huAIEWU79Ov9RQVKBk4z RU/WwNFeXOE8IYwyFiemZ4ia1GryDhQlDPxLLzfUWkcR2lGHxwubtyVDteYT41T6ykIa CVJDED+rL/JTehATRaB4fk0x+0drYR5lt3m+gR2u/SsmbaWf12RQP6IQNuqXKI3+aQTJ QCqy5fEQ33Dr5LNbVo7zGhrsBwd1T5Nv2iRLHHunHc7sJz+TRJQsqMoCuh6oWAXizBXc sv0A== X-Gm-Message-State: AOJu0YxgqqO4wm/wU7rs9fw1kOBPh8gbtlNMxW1k6cFCYfNsKNGLtsx3 Wg9nlPP98nVZVW3V2WgJoLCKXz6+12l62lHseOg+Wu3n1vQfyeQshexf8Z5S9FvtumzMAGNED/M i06DN/N0BFJboDSsb8qGotYOkkv+iU79jP3hz9vuwDfxhfr1h2ni1waV+lx7dRC/FVZtpzPRSGg 4CdsrVWAvHwZ71igePxpbhbeY8SmFmjTED X-Gm-Gg: ASbGncsDt+mTJgOXLUCl4vEEJIrUh/vdRK4R7nB5CSMX8FREwRwirDUWgKj10ZHUPLg fAjcIYuydgMbuil0h+txGvWGoAeZD7xga8s4jYFP30XMWszkxtNKxpKnKqdgYU+4T7H0esGwAMY OYKWES29gHG/r0UUnIernwqQ+ogGAeQV4V46ggiYP7VFUGxvpI57Q4lBrv5TjBDEHS/LbJ4yA/U h9dy9RLd2XcmasNIeKYbyG5E3FEpgGtqX5YhoMY35LkMQ1Ye1J8k+kmegE12rT7Az425xGi1YTa Dmy0/PXNCA== X-Received: by 2002:a5d:5f82:0:b0:386:3262:28c6 with SMTP id ffacd0b85a97d-38a872fc0famr6325136f8f.5.1736429642012; Thu, 09 Jan 2025 05:34:02 -0800 (PST) X-Google-Smtp-Source: AGHT+IEmZs2i2AXwkZYUqwfsySdWTn2utIjLg6qFtdJL+jMDS0+LMY7JKmzBFP2oqVhO2cfiI4oJ3w== X-Received: by 2002:a5d:5f82:0:b0:386:3262:28c6 with SMTP id ffacd0b85a97d-38a872fc0famr6325049f8f.5.1736429640997; Thu, 09 Jan 2025 05:34:00 -0800 (PST) Received: from maya.myfinge.rs (ifcgrfdd.trafficplex.cloud. [176.103.220.4]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-38a8e4c3428sm1809565f8f.87.2025.01.09.05.34.00 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 09 Jan 2025 05:34:00 -0800 (PST) Date: Thu, 9 Jan 2025 14:33:58 +0100 From: Stefano Brivio To: Enrique Llorente Pastora Subject: Re: [PATCH v7] dhcp, dhcpv6: Add hostname and client fqdn ops Message-ID: <20250109143358.334ef58a@elisabeth> In-Reply-To: References: <20250108145811.833308-1-ellorent@redhat.com> <20250109091631.03fefb0e@elisabeth> Organization: Red Hat X-Mailer: Claws Mail 4.2.0 (GTK 3.24.41; x86_64-pc-linux-gnu) MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: C8boIAqlKhb7yBRPFD8ByfNnJbEobYhfOOvtkD09Xhg_1736429643 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Message-ID-Hash: VLZHKAHOMO5AFSEP337OE7DKZFYFVQ6F X-Message-ID-Hash: VLZHKAHOMO5AFSEP337OE7DKZFYFVQ6F X-MailFrom: sbrivio@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-dev@passt.top X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: On Thu, 9 Jan 2025 13:57:38 +0100 Enrique Llorente Pastora wrote: > On Thu, Jan 9, 2025 at 9:16=E2=80=AFAM Stefano Brivio wrote: > > > > Just coding style comments, plus one functional issue, but it should be > > relatively contained: > > > > On Wed, 8 Jan 2025 15:58:11 +0100 > > Enrique Llorente wrote: > > =20 > > > Both DHCPv4 and DHCPv6 has the capability to pass the hostname to > > > clients, the DHCPv4 uses option 12 (hostname) while the DHCPv6 uses o= ption 39 > > > (client fqdn), for some virt deployments like kubevirt is expected to > > > have the VirtualMachine name as the guest hostname. > > > > > > This change add the following arguments: > > > - -H --hostname NAME to configure the hostname DHCPv4 option(12) > > > - --fqdn NAME to configure client fqdn option for both DHCPv4(81) an= d > > > DHCPv6(39) > > > > > > Signed-off-by: Enrique Llorente > > > --- > > > conf.c | 20 ++++++++++-- > > > dhcp.c | 54 ++++++++++++++++++++++++++---- > > > dhcpv6.c | 85 +++++++++++++++++++++++++++++++++++++++-------= -- > > > passt.1 | 10 ++++++ > > > passt.h | 5 +++ > > > pasta.c | 17 +++++++--- > > > test/lib/setup | 10 +++--- > > > test/passt.mbuto | 6 ++-- > > > test/passt/dhcp | 15 ++++++++- > > > util.c | 31 ++++++++++++++++++ > > > util.h | 6 ++++ > > > 11 files changed, 222 insertions(+), 37 deletions(-) > > > > > > diff --git a/conf.c b/conf.c > > > index df2b016..554e5c3 100644 > > > --- a/conf.c > > > +++ b/conf.c > > > @@ -854,7 +854,9 @@ static void usage(const char *name, FILE *f, int = status) > > > FPRINTF(f, " default: use addresses from /etc/resolv= .conf\n"); > > > FPRINTF(f, > > > " -S, --search LIST Space-separated list, search do= mains\n" > > > - " a single, empty option disables the DNS search lis= t\n"); > > > + " a single, empty option disables the DNS search lis= t\n" > > > + " -H, --hostname NAME Hostname to configure client wi= th\n" > > > + " --fqdn NAME FQDN to configure client with\n= "); > > > if (strstr(name, "pasta")) > > > FPRINTF(f, " default: don't use any search list\n"); > > > else > > > @@ -1313,6 +1315,7 @@ void conf(struct ctx *c, int argc, char **argv) > > > {"outbound", required_argument, NULL, = 'o' }, > > > {"dns", required_argument, NULL, = 'D' }, > > > {"search", required_argument, NULL, = 'S' }, > > > + {"hostname", required_argument, NULL, = 'H' }, > > > {"no-tcp", no_argument, &c->no_tcp, = 1 }, > > > {"no-udp", no_argument, &c->no_udp, = 1 }, > > > {"no-icmp", no_argument, &c->no_icmp, = 1 }, > > > @@ -1357,6 +1360,7 @@ void conf(struct ctx *c, int argc, char **argv) > > > /* vhost-user backend program convention */ > > > {"print-capabilities", no_argument, NULL, = 26 }, > > > {"socket-path", required_argument, NULL, = 's' }, > > > + {"fqdn", required_argument, NULL, = 27 }, > > > { 0 }, > > > }; > > > const char *logname =3D (c->mode =3D=3D MODE_PASTA) ? "pasta" := "passt"; > > > @@ -1379,9 +1383,9 @@ void conf(struct ctx *c, int argc, char **argv) > > > if (c->mode =3D=3D MODE_PASTA) { > > > c->no_dhcp_dns =3D c->no_dhcp_dns_search =3D 1; > > > fwd_default =3D FWD_AUTO; > > > - optstring =3D "+dqfel:hF:I:p:P:m:a:n:M:g:i:o:D:S:46t:u:= T:U:"; > > > + optstring =3D "+dqfel:hF:I:p:P:m:a:n:M:g:i:o:D:S:H:46t:= u:T:U:"; > > > } else { > > > - optstring =3D "+dqfel:hs:F:p:P:m:a:n:M:g:i:o:D:S:461t:u= :"; > > > + optstring =3D "+dqfel:hs:F:p:P:m:a:n:M:g:i:o:D:S:H:461t= :u:"; > > > } > > > > > > c->tcp.fwd_in.mode =3D c->tcp.fwd_out.mode =3D FWD_UNSET; > > > @@ -1558,6 +1562,11 @@ void conf(struct ctx *c, int argc, char **argv= ) > > > case 26: > > > vu_print_capabilities(); > > > break; > > > + case 27: > > > + if (snprintf_check(c->fqdn, PASST_MAXDNAME, > > > + "%s", optarg)) > > > + die("Invalid FQDN: %s", optarg); > > > + break; > > > case 'd': > > > c->debug =3D 1; > > > c->quiet =3D 0; > > > @@ -1727,6 +1736,11 @@ void conf(struct ctx *c, int argc, char **argv= ) > > > > > > die("Cannot use DNS search domain %s", optarg); > > > break; > > > + case 'H': > > > + if (snprintf_check(c->hostname, PASST_MAXDNAME, > > > + = "%s", optarg)) =20 > > > > Why? This was fine in v6. I'm not sure what happened here. In case your > > editor/email client doesn't show this, now it's: > > > > tab tab tab tab tab tab tab tab tab tab tab tab space "%s", optarg)) > > > > that is, twelve tabs and one space. See also: > > > > https://archives.passt.top/passt-dev/20250108145811.833308-1-ellorent= @redhat.com/#Z31conf.c > > > > It should be: > > > > if (snprintf_check(c->hostname, PASST_MAXDNAME, > > "%s", optarg)) > > > > tab tab tab tab tab space space space "%s", optarg)) > > > > that is, five tabs and three spaces. > > =20 >=20 > Fixed, no clue how I de-formated it. >=20 > > > + die("Invalid hostname: %s", optarg); > > > + break; > > > case '4': > > > v4_only =3D true; > > > v6_only =3D false; > > > diff --git a/dhcp.c b/dhcp.c > > > index d8515aa..50c220d 100644 > > > --- a/dhcp.c > > > +++ b/dhcp.c > > > @@ -63,6 +63,11 @@ static struct opt opts[255]; > > > > > > #define OPT_MIN 60 /* RFC 951 */ > > > > > > +/* Total option size (excluding end option) is 576 (RFC 2131), minus > > > + * offset of options (268), minus end option and its length (2). > > > + */ > > > +#define OPT_MAX 306 > > > + > > > /** > > > * dhcp_init() - Initialise DHCP options > > > */ > > > @@ -122,7 +127,7 @@ struct msg { > > > uint8_t sname[64]; > > > uint8_t file[128]; > > > uint32_t magic; > > > - uint8_t o[308]; > > > + uint8_t o[OPT_MAX + 2/*End option and its length*/]; =20 > > > > Same as my comment to v6: > > > > "Spaces around /* ... */ wouldn't be bad for readability." > > =20 >=20 > Right, I understood the opposite, fixing. >=20 > > > } __attribute__((__packed__)); > > > > > > /** > > > @@ -130,15 +135,28 @@ struct msg { > > > * @m: Message to fill > > > * @o: Option number > > > * @offset: Current offset within options field, updated on inserti= on > > > + * > > > + * Return: offset for the next option field or -1 if option do not f= it =20 > > > > Same as my comment to v6: > > > > "doesn't fit" > > > > It's a bit weird, but harmless, that this function updates 'offset', > > and also returns it (unless there's an error). Maybe it saves a bit of > > typing in callers, though (I would have just returned offset or -1 at > > this point, without passing a pointer). >=20 > Make sense to not pass a pointer to offset, I will change it. >=20 > > > */ > > > -static void fill_one(struct msg *m, int o, int *offset) > > > +static ssize_t fill_one(struct msg *m, int o, int *offset) > > > { > > > + size_t slen =3D opts[o].slen; > > > + > > > + /* If we don't have space to write the option, then just skip *= / > > > + if (*offset + 1 /* length of option */ + slen > OPT_MAX) > > > + return -1; > > > + > > > m->o[*offset] =3D o; > > > - m->o[*offset + 1] =3D opts[o].slen; > > > - memcpy(&m->o[*offset + 2], opts[o].s, opts[o].slen); > > > + m->o[*offset + 1] =3D slen; > > > + > > > + /* Move to option */ > > > + *offset +=3D 2; > > > + > > > + memcpy(&m->o[*offset], opts[o].s, slen); > > > > > > opts[o].sent =3D 1; > > > - *offset +=3D 2 + opts[o].slen; > > > + *offset +=3D slen; > > > + return *offset; > > > } > > > > > > /** > > > @@ -171,8 +189,11 @@ static int fill(struct msg *m) > > > } > > > > > > for (o =3D 0; o < 255; o++) { > > > - if (opts[o].slen !=3D -1 && !opts[o].sent) > > > - fill_one(m, o, &offset); > > > + if (opts[o].slen !=3D -1 && !opts[o].sent) { > > > + if (fill_one(m, o, &offset) =3D=3D -1) { =20 > > > > Curly brackets not needed. > > =20 >=20 > Done. >=20 > > > + debug("DHCP: skipping option %i", o); > > > + } > > > + } > > > } > > > > > > m->o[offset++] =3D 255; > > > @@ -398,6 +419,25 @@ int dhcp(const struct ctx *c, const struct pool = *p) > > > if (!opts[6].slen) > > > opts[6].slen =3D -1; > > > > > > + opt_len =3D strlen(c->hostname); > > > + if (opt_len > 0) { > > > + opts[12].slen =3D opt_len; > > > + memcpy(opts[12].s, &c->hostname, opt_len); > > > + } > > > + > > > + opt_len =3D strlen(c->fqdn); > > > + if (opt_len > 0) { > > > + size_t encoded_len; > > > + encoded_len =3D encode_domain_name((char *)opts[81].s += 3, sizeof(opts[81].s) - 3, > > > + c->fqdn, opt_len); =20 > > > > Arguments are aligned properly, but it exceeds 80 columns for no > > compelling reason. It should be: > > > > encoded_len =3D encode_domain_name((char *)opts[81].s += 3, > > sizeof(opts[81].s) - 3= , > > c->fqdn, opt_len); > > =20 >=20 > Done. >=20 > > > + if (encoded_len > 0 ) { =20 > > > > Excess whitespace between 0 and ). > > =20 >=20 > Done. >=20 > > > + opts[81].s[0] =3D 0x4; /* flags (E) */ > > > + opts[81].s[1] =3D 0xff; /* RCODE1 */ > > > + opts[81].s[2] =3D 0xff; /* RCODE2 */ > > > + opts[81].slen =3D encoded_len + 3; > > > + } > > > + } > > > + > > > if (!c->no_dhcp_dns_search) > > > opt_set_dns_search(c, sizeof(m->o)); > > > > > > diff --git a/dhcpv6.c b/dhcpv6.c > > > index 0523bba..07ce768 100644 > > > --- a/dhcpv6.c > > > +++ b/dhcpv6.c > > > @@ -48,6 +48,7 @@ struct opt_hdr { > > > # define STATUS_NOTONLINK htons_constant(4) > > > # define OPT_DNS_SERVERS htons_constant(23) > > > # define OPT_DNS_SEARCH htons_constant(24) > > > +# define OPT_CLIENT_FQDN htons_constant(39) > > > #define STR_NOTONLINK "Prefix not appropriate for lin= k." > > > > > > uint16_t l; > > > @@ -58,6 +59,9 @@ struct opt_hdr { > > > sizeof(struct opt_hdr)) > > > #define OPT_VSIZE(x) (sizeof(struct opt_##x) - = \ > > > sizeof(struct opt_hdr)) > > > +#define OPT_MAX_SIZE IPV6_MIN_MTU - (sizeof(struct ipv6hdr) = + \ > > > + sizeof(struct udphdr) += \ > > > + sizeof(struct msg_hdr)) > > > > > > /** > > > * struct opt_client_id - DHCPv6 Client Identifier option > > > @@ -163,6 +167,18 @@ struct opt_dns_search { > > > char list[MAXDNSRCH * NS_MAXDNAME]; > > > } __attribute__((packed)); > > > > > > +/** > > > + * struct opt_client_fqdn - Client FQDN option (RFC 4704) > > > + * @hdr: Option header > > > + * @flags: Flags described by RFC 4704 > > > + * @domain_name: Client FQDN > > > + */ > > > +struct opt_client_fqdn { > > > + struct opt_hdr hdr; > > > + uint8_t flags; > > > + char domain_name[PASST_MAXDNAME]; > > > +} __attribute__((packed)); > > > + > > > /** > > > * struct msg_hdr - DHCPv6 client/server message header > > > * @type: DHCP message type > > > @@ -193,6 +209,7 @@ struct msg_hdr { > > > * @client_id: Client Identifier, variable length > > > * @dns_servers: DNS Recursive Name Server, here just for storag= e size > > > * @dns_search: Domain Search List, here just for stora= ge size > > > + * @client_fqdn: Client FQDN, variable length > > > */ > > > static struct resp_t { > > > struct msg_hdr hdr; > > > @@ -203,6 +220,7 @@ static struct resp_t { > > > struct opt_client_id client_id; > > > struct opt_dns_servers dns_servers; > > > struct opt_dns_search dns_search; > > > + struct opt_client_fqdn client_fqdn; > > > } __attribute__((__packed__)) resp =3D { > > > { 0 }, > > > SERVER_ID, > > > @@ -228,6 +246,10 @@ static struct resp_t { > > > { { OPT_DNS_SEARCH, 0, }, > > > { 0 }, > > > }, > > > + > > > + { { OPT_CLIENT_FQDN, 0, }, > > > + 0, { 0 }, > > > + }, > > > }; > > > > > > static const struct opt_status_code sc_not_on_link =3D { > > > @@ -346,7 +368,6 @@ static size_t dhcpv6_dns_fill(const struct ctx *c= , char *buf, int offset) > > > { > > > struct opt_dns_servers *srv =3D NULL; > > > struct opt_dns_search *srch =3D NULL; > > > - char *p =3D NULL; > > > int i; > > > > > > if (c->no_dhcp_dns) > > > @@ -373,6 +394,7 @@ search: > > > return offset; > > > > > > for (i =3D 0; *c->dns_search[i].n; i++) { > > > + size_t encoded_name_len; > > > size_t name_len =3D strlen(c->dns_search[i].n); > > > > > > /* We already append separators, don't duplicate if pre= sent */ > > > @@ -388,29 +410,61 @@ search: > > > offset +=3D sizeof(struct opt_hdr); > > > srch->hdr.t =3D OPT_DNS_SEARCH; > > > srch->hdr.l =3D 0; > > > - p =3D srch->list; > > > } > > > > > > - *p =3D '.'; > > > - p =3D stpncpy(p + 1, c->dns_search[i].n, name_len); > > > - p++; > > > - srch->hdr.l +=3D name_len + 2; > > > - offset +=3D name_len + 2; > > > + encoded_name_len =3D encode_domain_name(srch->list, NS_= MAXDNAME, > > > + c->dns_search[i].= n, > > > + name_len); > > > + srch->hdr.l +=3D encoded_name_len; =20 > > > > ...not if encoded_name_len is -1. In that case, you could also have an > > integer overflow, other than broken functionality. > > =20 >=20 > Right, I will check -1 and skip on that case. >=20 > Also I have to move the list buffer or I will be storing it at the > first element. > encoded_name_len =3D encode_domain_name(srch->list + srch->hdr.l, > NS_MAXDNAME, > c->dns_search[i].n, > name_len); Oh, right. I didn't test this. Can't you just follow along where you are with 'offset'? I'm not sure, I didn't look into it. > > > + offset +=3D encoded_name_len; > > > } > > > > > > - if (srch) { > > > - for (i =3D 0; i < srch->hdr.l; i++) { > > > - if (srch->list[i] =3D=3D '.') { > > > - srch->list[i] =3D strcspn(srch->list + = i + 1, > > > - "."); > > > - } > > > - } > > > + if (srch) > > > srch->hdr.l =3D htons(srch->hdr.l); > > > - } > > > > > > return offset; > > > } > > > > > > +/** > > > + * dhcpv6_client_fqdn_fill() - Fill in client FQDN option > > > + * @c: Execution context > > > + * @buf: Response message buffer where options will be appended > > > + * @offset: Offset in message buffer for new options > > > + * > > > + * Return: updated length of response message buffer. > > > + */ > > > +static size_t dhcpv6_client_fqdn_fill(const struct pool *p, const st= ruct ctx *c, > > > + char *buf, int offset) > > > + > > > +{ > > > + ssize_t opt_len; > > > + struct opt_client_fqdn *o; > > > + struct opt_client_fqdn const *req_opt; =20 > > > > Same as my comment to v6: > > > > "These should go from longest to shortest." > > =20 >=20 > Done. >=20 > > > + > > > + opt_len =3D MIN(PASST_MAXDNAME, OPT_MAX_SIZE - (offset + sizeof= (struct opt_hdr) + 1/*flags*/)); =20 > > > > This should be PASST_MAXDNAME + 1, otherwise: > > > > ./passt -d -f --fqdn thirtytwocharactersforeachlabel.thirtytwocharacter= sforeachlabel.thirtytwocharactersforeachlabel.thirtytwocharactersforeachlab= el.thirtytwocharactersforeachlabel.thirtytwocharactersforeachlabel.thirtytw= ocharactersforeachlabel.and_get_to_252_with_this_one > > > > 19.4621: DHCPv6: received REQUEST/RENEW/CONFIRM, sending REPLY > > 19.4621: DHCPv6: client FQDN option does not fit, skipping > > =20 >=20 > Make sense I will change it >=20 > > ...but that domain name is 252 characters, and it's accepted > > (longer domains are not accepted, which makes me think: should > > PASST_MAXDNAME be 254 instead, as it includes the terminator?). >=20 > We are also using that const for validation (and on that case we don't > count the terminator) so > we cannot modify it >=20 > if (snprintf_check(c->fqdn, PASST_MAXDNAME, > "%s", optarg)) > die("Invalid FQDN: %s", optarg); Well, no, that was exactly my point. We do count the terminator there: $ ./passt -f --fqdn thirtytwocharactersforeachlabel.thirtytwocharactersfore= achlabel.thirtytwocharactersforeachlabel.thirtytwocharactersforeachlabel.th= irtytwocharactersforeachlabel.thirtytwocharactersforeachlabel.thirtytwochar= actersforeachlabel.then_get_to_253_with_this_one Invalid FQDN: thirtytwocharactersforeachlabel.thirtytwocharactersforeachlab= el.thirtytwocharactersforeachlabel.thirtytwocharactersforeachlabel.thirtytw= ocharactersforeachlabel.thirtytwocharactersforeachlabel.thirtytwocharacters= foreachlabel.then_get_to_253_with_this_one because snprintf_check() is snprintf()-like, see snprintf(3): The functions snprintf() and vsnprintf() write at most size bytes (including the terminating null byte ('\0')) to str. Back to RFC 1035 (3.1): To simplify implementations, the total length of a domain name (i.e., label octets and label length octets) is restricted to 255 octets or less. which means 253 characters before encoding, because we have two labels, at start and end. That's why we used 253. But that actually includes the terminator, so we should probably size everything to 254 bytes (either use PASST_MAXDNAME + 1 or define PASST_MAXDNAME as 254... the first one is more consistent with similar constants, the second one might be more practical, I'm not sure). > > If it's one byte shorter, then it works (254 bytes option > > size, 253 bytes of encoded domain, 251 of original domain). > > > > Once this is fixed, this reveals an issue in encode_domain_name(), more > > on that below. > > > > By the way, this exceeds 80 columns for no particular reason, and > > "+ 1 /* flags */" is probably a bit more readable. > > =20 > > > + > > > + o =3D (struct opt_client_fqdn *)(buf + offset); > > > + opt_len =3D encode_domain_name(o->domain_name, opt_len, c->fqdn= , strlen(c->fqdn)); =20 > > > > This now exceeds 80 columns. > > =20 >=20 > Done. >=20 > > > + if (opt_len =3D=3D -1) { > > > + debug("DHCPv6: client FQDN option does not fit, skippin= g"); > > > + return offset; > > > + } > > > + > > > + req_opt =3D (struct opt_client_fqdn *)dhcpv6_opt(p, &(size_t){ = 0 }, > > > + OPT_CLIENT_FQDN)= ; > > > + if (req_opt && req_opt->flags & 0x01 /* S flag */) > > > + o->flags =3D 0x02 /* O flag */; > > > + else > > > + o->flags =3D 0x00; > > > + > > > + opt_len++; > > > + > > > + o->hdr.t =3D OPT_CLIENT_FQDN; > > > + o->hdr.l =3D htons(opt_len); =20 > > > > It's much easier to follow now, I think. > > =20 > > > + > > > + return offset + sizeof(struct opt_hdr) + opt_len; > > > +} > > > + > > > /** > > > * dhcpv6() - Check if this is a DHCPv6 message, reply as needed > > > * @c: Execution context > > > @@ -544,6 +598,7 @@ int dhcpv6(struct ctx *c, const struct pool *p, > > > n =3D offsetof(struct resp_t, client_id) + > > > sizeof(struct opt_hdr) + ntohs(client_id->l); > > > n =3D dhcpv6_dns_fill(c, (char *)&resp, n); > > > + n =3D dhcpv6_client_fqdn_fill(p, c, (char *)&resp, n); > > > > > > resp.hdr.xid =3D mh->xid; > > > > > > diff --git a/passt.1 b/passt.1 > > > index d9cd33e..7051fc4 100644 > > > --- a/passt.1 > > > +++ b/passt.1 > > > @@ -401,6 +401,16 @@ Enable IPv6-only operation. IPv4 traffic will be= ignored. > > > By default, IPv4 operation is enabled as long as at least an IPv4 ro= ute and an > > > interface address are configured on a given host interface. > > > > > > +.TP > > > +.BR \-H ", " \-\-hostname " " \fIname > > > +Hostname to configure the client with. > > > +Send \fIname\fR as DHCP option 12 (hostname). > > > + > > > +.TP > > > +.BR \-\-fqdn " " \fIname > > > +FQDN to configure the client with. > > > +Send \fIname\fR as Client FQDN: DHCP option 81 and DHCPv6 option 39. > > > + > > > .SS \fBpasst\fR-only options > > > > > > .TP > > > diff --git a/passt.h b/passt.h > > > index 0dd4efa..f3151f0 100644 > > > --- a/passt.h > > > +++ b/passt.h > > > @@ -209,6 +209,8 @@ struct ip6_ctx { > > > * @ifi4: Template interface for IPv4, -1: none, 0: IPv4 = disabled > > > * @ip: IPv4 configuration > > > * @dns_search: DNS search list > > > + * @hostname: Guest hostname > > > + * @fqdn: Guest FQDN > > > * @ifi6: Template interface for IPv6, -1: none, 0: IPv6 = disabled > > > * @ip6: IPv6 configuration > > > * @pasta_ifn: Name of namespace interface for pasta > > > @@ -269,6 +271,9 @@ struct ctx { > > > > > > struct fqdn dns_search[MAXDNSRCH]; > > > > > > + char hostname[PASST_MAXDNAME]; > > > + char fqdn[PASST_MAXDNAME]; > > > + > > > int ifi6; > > > struct ip6_ctx ip6; > > > > > > diff --git a/pasta.c b/pasta.c > > > index ff41c95..f3b4cae 100644 > > > --- a/pasta.c > > > +++ b/pasta.c > > > @@ -169,10 +169,12 @@ void pasta_open_ns(struct ctx *c, const char *n= etns) > > > * struct pasta_spawn_cmd_arg - Argument for pasta_spawn_cmd() > > > * @exe: Executable to run > > > * @argv: Command and arguments to run > > > + * @ctx: Context to read config from > > > */ > > > struct pasta_spawn_cmd_arg { > > > const char *exe; > > > char *const *argv; > > > + struct ctx *c; > > > }; > > > > > > /** > > > @@ -186,6 +188,7 @@ static int pasta_spawn_cmd(void *arg) > > > { > > > char hostname[HOST_NAME_MAX + 1] =3D HOSTNAME_PREFIX; > > > const struct pasta_spawn_cmd_arg *a; > > > + size_t conf_hostname_len; > > > sigset_t set; > > > > > > /* We run in a detached PID and mount namespace: mount /proc ov= er */ > > > @@ -195,9 +198,15 @@ static int pasta_spawn_cmd(void *arg) > > > if (write_file("/proc/sys/net/ipv4/ping_group_range", "0 0")) > > > warn("Cannot set ping_group_range, ICMP requests might = fail"); > > > > > > - if (!gethostname(hostname + sizeof(HOSTNAME_PREFIX) - 1, > > > - HOST_NAME_MAX + 1 - sizeof(HOSTNAME_PREFIX)) |= | > > > - errno =3D=3D ENAMETOOLONG) { > > > + a =3D (const struct pasta_spawn_cmd_arg *)arg; > > > + > > > + conf_hostname_len =3D strlen(a->c->hostname); > > > + if (conf_hostname_len > 0) { > > > + if (sethostname(a->c->hostname, conf_hostname_len)) > > > + warn("Unable to set configured hostname"); > > > + } else if (!gethostname(hostname + sizeof(HOSTNAME_PREFIX) - 1, > > > + HOST_NAME_MAX + 1 - sizeof(HOSTNAME_PREFIX)) || > > > + errno =3D=3D ENAMETOOLONG) { =20 > > > > Same as my comment to v6, which was the same as my comment to v5...: > > > > "Same as for v5: this is an argument to gethostname(), so it should be > > aligned accordingly. ! is a unary operator, it doesn't take two operand= s. > > > > That is: > > > > } else if (!gethostname(hostname + sizeof(HOSTNAME_PREFIX) - 1, > > HOST_NAME_MAX + 1 - sizeof(HOSTNAME_PRE= FIX)) || > > > > see also the version without your patch." > > =20 > > > hostname[HOST_NAME_MAX] =3D '\0'; > > > if (sethostname(hostname, strlen(hostname))) > > > warn("Unable to set pasta-prefixed hostname"); = =20 >=20 > Done. >=20 > > > @@ -208,7 +217,6 @@ static int pasta_spawn_cmd(void *arg) > > > sigaddset(&set, SIGUSR1); > > > sigwaitinfo(&set, NULL); > > > > > > - a =3D (const struct pasta_spawn_cmd_arg *)arg; > > > execvp(a->exe, a->argv); > > > > > > die_perror("Failed to start command or shell"); > > > @@ -230,6 +238,7 @@ void pasta_start_ns(struct ctx *c, uid_t uid, gid= _t gid, > > > struct pasta_spawn_cmd_arg arg =3D { > > > .exe =3D argv[0], > > > .argv =3D argv, > > > + .c =3D c, > > > }; > > > char uidmap[BUFSIZ], gidmap[BUFSIZ]; > > > char *sh_argv[] =3D { NULL, NULL }; > > > diff --git a/test/lib/setup b/test/lib/setup > > > index 580825f..ee67152 100755 > > > --- a/test/lib/setup > > > +++ b/test/lib/setup > > > @@ -49,7 +49,7 @@ setup_passt() { > > > > > > context_run passt "make clean" > > > context_run passt "make valgrind" > > > - context_run_bg passt "valgrind --max-stackframe=3D$((4 * 1024 *= 1024)) --trace-children=3Dyes --vgdb=3Dno --error-exitcode=3D1 --suppressi= ons=3Dtest/valgrind.supp ./passt ${__opts} -s ${STATESETUP}/passt.socket -f= -t 10001 -u 10001 -P ${STATESETUP}/passt.pid" > > > + context_run_bg passt "valgrind --max-stackframe=3D$((4 * 1024 *= 1024)) --trace-children=3Dyes --vgdb=3Dno --error-exitcode=3D1 --suppressi= ons=3Dtest/valgrind.supp ./passt ${__opts} -s ${STATESETUP}/passt.socket -f= -t 10001 -u 10001 -H hostname1 --fqdn fqdn1.passt.test -P ${STATESETUP}/pa= sst.pid" > > > > > > # pidfile isn't created until passt is listening > > > wait_for [ -f "${STATESETUP}/passt.pid" ] > > > @@ -160,11 +160,11 @@ setup_passt_in_ns() { > > > if [ ${VALGRIND} -eq 1 ]; then > > > context_run passt "make clean" > > > context_run passt "make valgrind" > > > - context_run_bg passt "valgrind --max-stackframe=3D$((4 = * 1024 * 1024)) --trace-children=3Dyes --vgdb=3Dno --error-exitcode=3D1 --s= uppressions=3Dtest/valgrind.supp ./passt -f ${__opts} -s ${STATESETUP}/pass= t.socket -t 10001,10011,10021,10031 -u 10001,10011,10021,10031 -P ${STATESE= TUP}/passt.pid --map-host-loopback ${__map_ns4} --map-host-loopback ${__map= _ns6}" > > > + context_run_bg passt "valgrind --max-stackframe=3D$((4 = * 1024 * 1024)) --trace-children=3Dyes --vgdb=3Dno --error-exitcode=3D1 --s= uppressions=3Dtest/valgrind.supp ./passt -f ${__opts} -s ${STATESETUP}/pass= t.socket -H hostname1 --fqdn fqdn1.passt.test -t 10001,10011,10021,10031 -u= 10001,10011,10021,10031 -P ${STATESETUP}/passt.pid --map-host-loopback ${_= _map_ns4} --map-host-loopback ${__map_ns6}" > > > else > > > context_run passt "make clean" > > > context_run passt "make" > > > - context_run_bg passt "./passt -f ${__opts} -s ${STATESE= TUP}/passt.socket -t 10001,10011,10021,10031 -u 10001,10011,10021,10031 -P = ${STATESETUP}/passt.pid --map-host-loopback ${__map_ns4} --map-host-loopbac= k ${__map_ns6}" > > > + context_run_bg passt "./passt -f ${__opts} -s ${STATESE= TUP}/passt.socket -H hostname1 --fqdn fqdn1.passt.test -t 10001,10011,10021= ,10031 -u 10001,10011,10021,10031 -P ${STATESETUP}/passt.pid --map-host-loo= pback ${__map_ns4} --map-host-loopback ${__map_ns6}" > > > fi > > > wait_for [ -f "${STATESETUP}/passt.pid" ] > > > > > > @@ -243,7 +243,7 @@ setup_two_guests() { > > > [ ${TRACE} -eq 1 ] && __opts=3D"${__opts} --trace" > > > [ ${VHOST_USER} -eq 1 ] && __opts=3D"${__opts} --vhost-user" > > > > > > - context_run_bg passt_1 "./passt -s ${STATESETUP}/passt_1.socket= -P ${STATESETUP}/passt_1.pid -f ${__opts} -t 10001 -u 10001" > > > + context_run_bg passt_1 "./passt -s ${STATESETUP}/passt_1.socket= -P ${STATESETUP}/passt_1.pid -f ${__opts} --fqdn fqdn1.passt.test -H hostn= ame1 -t 10001 -u 10001" > > > wait_for [ -f "${STATESETUP}/passt_1.pid" ] > > > > > > __opts=3D > > > @@ -252,7 +252,7 @@ setup_two_guests() { > > > [ ${TRACE} -eq 1 ] && __opts=3D"${__opts} --trace" > > > [ ${VHOST_USER} -eq 1 ] && __opts=3D"${__opts} --vhost-user" > > > > > > - context_run_bg passt_2 "./passt -s ${STATESETUP}/passt_2.socket= -P ${STATESETUP}/passt_2.pid -f ${__opts} -t 10004 -u 10004" > > > + context_run_bg passt_2 "./passt -s ${STATESETUP}/passt_2.socket= -P ${STATESETUP}/passt_2.pid -f ${__opts} --hostname hostname2 --fqdn fqdn= 2 -t 10004 -u 10004" > > > wait_for [ -f "${STATESETUP}/passt_2.pid" ] > > > > > > __vmem=3D"$((${MEM_KIB} / 1024 / 4))" > > > diff --git a/test/passt.mbuto b/test/passt.mbuto > > > index 138d365..1e07693 100755 > > > --- a/test/passt.mbuto > > > +++ b/test/passt.mbuto > > > @@ -13,7 +13,7 @@ > > > PROGS=3D"${PROGS:-ash,dash,bash ip mount ls insmod mkdir ln cat chmo= d lsmod > > > modprobe find grep mknod mv rm umount jq iperf3 dhclient host= name > > > sed tr chown sipcalc cut socat dd strace ping tail killall sl= eep sysctl > > > - nproc tcp_rr tcp_crr udp_rr which tee seq bc sshd ssh-keygen = cmp}" > > > + nproc tcp_rr tcp_crr udp_rr which tee seq bc sshd ssh-keygen = cmp env}" > > > > > > # OpenSSH 9.8 introduced split binaries, with sshd being the daemon,= and > > > # sshd-session the per-session program. We need the latter as well, = and the path > > > @@ -41,6 +41,7 @@ FIXUP=3D"${FIXUP}"' > > > #!/bin/sh > > > LOG=3D/var/log/dhclient-script.log > > > echo \${reason} \${interface} >> \$LOG > > > +env >> \$LOG > > > set >> \$LOG > > > > > > [ -n "\${new_interface_mtu}" ] && ip link set dev \${interface= } mtu \${new_interface_mtu} > > > @@ -54,7 +55,8 @@ set >> \$LOG > > > [ -n "\${new_ip6_address}" ] && ip addr add \${new_ip6_addre= ss}/\${new_ip6_prefixlen} dev \${interface} > > > [ -n "\${new_dhcp6_name_servers}" ] && for d in \${new_dhcp6_name_s= ervers}; do echo "nameserver \${d}%\${interface}" >> /etc/resolv.conf; done > > > [ -n "\${new_dhcp6_domain_search}" ] && (printf "search"; for d in \= ${new_dhcp6_domain_search}; do printf " %s" "\${d}"; done; printf "\n") >> = /etc/resolv.conf > > > -[ -n "\${new_host_name}" ] && hostname "\${new_host_name}" > > > +[ -n "\${new_host_name}" ] && echo "\${new_host_name}" > /= tmp/new_host_name > > > +[ -n "\${new_fqdn_fqdn}" ] && echo "\${new_fqdn_fqdn}" > /= tmp/new_fqdn_fqdn > > > exit 0 > > > EOF > > > chmod 755 /sbin/dhclient-script > > > diff --git a/test/passt/dhcp b/test/passt/dhcp > > > index 9925ab9..145f1ba 100644 > > > --- a/test/passt/dhcp > > > +++ b/test/passt/dhcp > > > @@ -11,7 +11,7 @@ > > > # Copyright (c) 2021 Red Hat GmbH > > > # Author: Stefano Brivio > > > > > > -gtools ip jq dhclient sed tr > > > +gtools ip jq dhclient sed tr hostname > > > htools ip jq sed tr head > > > > > > test Interface name > > > @@ -47,7 +47,16 @@ gout SEARCH sed 's/\. / /g' /etc/resolv.conf= | sed 's/\.$//g' | sed -n 's/^searc > > > hout HOST_SEARCH sed 's/\. / /g' /etc/resolv.conf | sed 's/\.$//g' |= sed -n 's/^search \(.*\)/\1/p' | tr ' \n' ',' | sed 's/,$//;s/$/\n/' > > > check [ "__SEARCH__" =3D "__HOST_SEARCH__" ] > > > > > > +test DHCP: Hostname > > > +gout NEW_HOST_NAME cat /tmp/new_host_name > > > +check [ "__NEW_HOST_NAME__" =3D "hostname1" ] > > > + > > > +test DHCP: Client FQDN > > > +gout NEW_FQDN_FQDN cat /tmp/new_fqdn_fqdn > > > +check [ "__NEW_FQDN_FQDN__" =3D "fqdn1.passt.test" ] > > > + > > > test DHCPv6: address > > > +guest rm /tmp/new_fqdn_fqdn > > > guest /sbin/dhclient -6 __IFNAME__ > > > # Wait for DAD to complete > > > guest while ip -j -6 addr show tentative | jq -e '.[].addr_in= fo'; do sleep 0.1; done > > > @@ -70,3 +79,7 @@ test DHCPv6: search list > > > gout SEARCH6 sed 's/\. / /g' /etc/resolv.conf | sed 's/\.$//g' | sed= -n 's/^search \(.*\)/\1/p' | tr ' \n' ',' | sed 's/,$//;s/$/\n/' > > > hout HOST_SEARCH6 sed 's/\. / /g' /etc/resolv.conf | sed 's/\.$//g' = | sed -n 's/^search \(.*\)/\1/p' | tr ' \n' ',' | sed 's/,$//;s/$/\n/' > > > check [ "__SEARCH6__" =3D "__HOST_SEARCH6__" ] > > > + > > > +test DHCPv6: Hostname > > > +gout NEW_FQDN_FQDN cat /tmp/new_fqdn_fqdn > > > +check [ "__NEW_FQDN_FQDN__" =3D "fqdn1.passt.test" ] > > > diff --git a/util.c b/util.c > > > index 11973c4..ba876ea 100644 > > > --- a/util.c > > > +++ b/util.c > > > @@ -837,3 +837,34 @@ void raw_random(void *buf, size_t buflen) > > > if (random_read < buflen) > > > die("Unexpected EOF on random data source"); > > > } > > > +/** > > > + * encode_domain_name() - Encode domain name according to RFC 1035, = section 3.1 > > > + * @buf: Buffer to fill in with encoded domain name > > > + * @len Buffer length =20 > > > > @len: > > =20 >=20 > Done. >=20 > > > + * @domain_name: Input domain name > > > + * @domain_name_len Domain name length =20 > > > > @domain_name_len: > > =20 >=20 > Done. >=20 > > > + * > > > + * Return: encoded domain name length or -1 if it do not fit at buff= er =20 > > > > "doesn't" > > > > "fit in the buffer" (or simply "doesn't fit") > > =20 >=20 > Done. >=20 > > > + */ > > > +ssize_t encode_domain_name(char *buf, size_t len, const char *domain= _name, size_t domain_name_len) =20 > > > > This now exceeds 80 columns for no compelling reason. > > =20 >=20 > Done. >=20 > > > +{ > > > + char *p; > > > + size_t i; =20 > > > > These should go from longest to shortest. > > =20 >=20 > Done. >=20 > > > + > > > + if (domain_name_len + 2 > len) > > > + return -1; > > > + > > > + buf[0] =3D strcspn(domain_name, "."); > > > + p =3D buf + 1; > > > + for (i =3D 0; i < len; i++) { > > > + if (domain_name[i] =3D=3D '.') =20 > > > > This overflows the *input* buffer, if len > domain_name_len (which is > > the intended usage). > > > > I understand that if you limit len in the caller (<=3D PASST_MAXDNAME), > > then you avoid the overflow, but this looks extremely fragile (the > > restriction in the caller is buggy anyway), and it would leak host > > memory into the guest. > > > > I still think that v6 plus my suggestion (ensure adequate buffer size > > in the caller) would be a bit simpler. > > > > If you really want to add a check on the output buffer size here, I > > would suggest that you iterate over the *input* bytes anyway, and then > > at every byte check that you're not exceeding the output buffer. >=20 > So your suggestion is at the caller limiting|check buffer size and not > pass domain_name len, so function will be: > size_t encode_domain_name(char* buf, const char *domain_name) Yes, just like you had. > That means that the caller has to know that the encoded len is len > (without terminator) + 2, is that fine ? The idea for v7 > was encapsulating the size check at the function so we don't have to > repeat len + 2 check at all the callers, but maybe is > plain overengineering stuff. Well, the check is so simple that it's probably the same lines of code as checking if the return code is -1. Sure, it's nice in general to avoid duplication, but at the moment you have three bugs, which I don't think you introduced on purpose: - dhcp() uses encoded_len just as it is, even if it's -1 (I'm not sure if I reported this) - same for dhcpv6_dns_fill() - encode_domain_name() itself might overrun the *input* so perhaps it's actually less bug prone to have a simple check in the callers? Again, that's not the only way, you can still check the buffer size here, but it should be used as *check*, not to iterate on the input. Maybe implement both (it's a few lines) and see what looks simpler or more robust? > > > + p[i] =3D strcspn(domain_name + i + 1, "."); > > > + else > > > + p[i] =3D domain_name[i]; > > > + } > > > + > > > + /* domain name is terminated by a length byte of zero */ > > > + p[len + 1] =3D 0x00; > > > + > > > + return domain_name_len + 2; > > > +} > > > diff --git a/util.h b/util.h > > > index 3fa1d12..b7d5b91 100644 > > > --- a/util.h > > > +++ b/util.h > > > @@ -40,6 +40,9 @@ > > > #ifndef IP_MAX_MTU > > > #define IP_MAX_MTU USHRT_MAX > > > #endif > > > +#ifndef IPV6_MIN_MTU > > > +#define IPV6_MIN_MTU 1280 =20 > > > > This would need tabs instead of spaces (even better: align it with the > > other values above, so that it becomes some kind of table). > > =20 >=20 > Done. >=20 > > > +#endif > > > > > > #ifndef MIN > > > #define MIN(x, y) (((x) < (y)) ? (x) : (y)) > > > @@ -346,4 +349,7 @@ static inline int wrap_accept4(int sockfd, struct= sockaddr *addr, > > > #define accept4(s, addr, addrlen, flags) \ > > > wrap_accept4((s), (addr), (addrlen), (flags)) > > > > > > +#define PASST_MAXDNAME 253 /* RFC 1035 */ > > > +ssize_t encode_domain_name(char *buf, size_t len, const char *domain= _name, size_t domain_name_len); =20 > > > > This exceeds 80 columns and can conveniently be wrapped. > > =20 > > > + > > > #endif /* UTIL_H */ =20 --=20 Stefano