dbus-transport.c 46.3 KB
Newer Older
1
/* -*- mode: C; c-file-style: "gnu"; indent-tabs-mode: nil; -*- */
John Palmieri's avatar
John Palmieri committed
2
/* dbus-transport.c DBusTransport object (internal to D-Bus implementation)
3
 *
4
 * Copyright (C) 2002, 2003  Red Hat Inc.
5
 *
6
 * Licensed under the Academic Free License version 2.1
7 8 9 10 11 12 13 14 15 16 17 18 19
 * 
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
20
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
21 22 23
 *
 */

24
#include <config.h>
25 26
#include "dbus-transport-protected.h"
#include "dbus-transport-unix.h"
27
#include "dbus-transport-socket.h"
28
#include "dbus-connection-internal.h"
29
#include "dbus-watch.h"
30
#include "dbus-auth.h"
31
#include "dbus-address.h"
32
#include "dbus-credentials.h"
33
#include "dbus-mainloop.h"
34
#include "dbus-message.h"
35
#ifdef DBUS_ENABLE_EMBEDDED_TESTS
36
#include "dbus-server-debug-pipe.h"
37
#endif
38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59

/**
 * @defgroup DBusTransport DBusTransport object
 * @ingroup  DBusInternals
 * @brief "Backend" for a DBusConnection.
 *
 * Types and functions related to DBusTransport.  A transport is an
 * abstraction that can send and receive data via various kinds of
 * network connections or other IPC mechanisms.
 * 
 * @{
 */

/**
 * @typedef DBusTransport
 *
 * Opaque object representing a way message stream.
 * DBusTransport abstracts various kinds of actual
 * transport mechanism, such as different network protocols,
 * or encryption schemes.
 */

60
static void
61
live_messages_notify (DBusCounter *counter,
62 63 64 65
                           void        *user_data)
{
  DBusTransport *transport = user_data;

66
  _dbus_connection_lock (transport->connection);
67
  _dbus_transport_ref (transport);
68 69

#if 0
70 71 72 73
  _dbus_verbose ("Size counter value is now %d\n",
                 (int) _dbus_counter_get_size_value (counter));
  _dbus_verbose ("Unix FD counter value is now %d\n",
                 (int) _dbus_counter_get_unix_fd_value (counter));
74
#endif
75

76 77 78
  /* disable or re-enable the read watch for the transport if
   * required.
   */
79
  if (transport->vtable->live_messages_changed)
80 81 82
    {
      (* transport->vtable->live_messages_changed) (transport);
    }
83

84
  _dbus_transport_unref (transport);
85
  _dbus_connection_unlock (transport->connection);
86
}
87

88
/**
89 90 91 92 93
 * Initializes the base class members of DBusTransport.  Chained up to
 * by subclasses in their constructor.  The server GUID is the
 * globally unique ID for the server creating this connection
 * and will be #NULL for the client side of a connection. The GUID
 * is in hex format.
94 95 96
 *
 * @param transport the transport being created.
 * @param vtable the subclass vtable.
97
 * @param server_guid non-#NULL if this transport is on the server side of a connection
98
 * @param address the address of the transport
99 100 101 102
 * @returns #TRUE on success.
 */
dbus_bool_t
_dbus_transport_init_base (DBusTransport             *transport,
103
                           const DBusTransportVTable *vtable,
104
                           const DBusString          *server_guid,
105
                           const DBusString          *address)
106 107
{
  DBusMessageLoader *loader;
108
  DBusAuth *auth;
109
  DBusCounter *counter;
110
  char *address_copy;
111
  DBusCredentials *creds;
112
  
113 114 115
  loader = _dbus_message_loader_new ();
  if (loader == NULL)
    return FALSE;
116 117 118
  
  if (server_guid)
    auth = _dbus_auth_server_new (server_guid);
119
  else
120
    auth = _dbus_auth_client_new ();
121 122 123 124 125
  if (auth == NULL)
    {
      _dbus_message_loader_unref (loader);
      return FALSE;
    }
126 127 128 129

  counter = _dbus_counter_new ();
  if (counter == NULL)
    {
130
      _dbus_auth_unref (auth);
131 132
      _dbus_message_loader_unref (loader);
      return FALSE;
133
    }  
134 135 136 137 138

  creds = _dbus_credentials_new ();
  if (creds == NULL)
    {
      _dbus_counter_unref (counter);
139
      _dbus_auth_unref (auth);
140 141 142
      _dbus_message_loader_unref (loader);
      return FALSE;
    }
143
  
144
  if (server_guid)
145 146 147 148 149 150 151 152 153 154
    {
      _dbus_assert (address == NULL);
      address_copy = NULL;
    }
  else
    {
      _dbus_assert (address != NULL);

      if (!_dbus_string_copy_data (address, &address_copy))
        {
155
          _dbus_credentials_unref (creds);
156
          _dbus_counter_unref (counter);
157
          _dbus_auth_unref (auth);
158 159 160
          _dbus_message_loader_unref (loader);
          return FALSE;
        }
161
    }
162 163 164 165
  
  transport->refcount = 1;
  transport->vtable = vtable;
  transport->loader = loader;
166
  transport->auth = auth;
167
  transport->live_messages = counter;
168 169
  transport->authenticated = FALSE;
  transport->disconnected = FALSE;
170 171 172
  transport->is_server = (server_guid != NULL);
  transport->send_credentials_pending = !transport->is_server;
  transport->receive_credentials_pending = transport->is_server;
173
  transport->address = address_copy;
174 175 176 177
  
  transport->unix_user_function = NULL;
  transport->unix_user_data = NULL;
  transport->free_unix_user_data = NULL;
178

179 180 181 182
  transport->windows_user_function = NULL;
  transport->windows_user_data = NULL;
  transport->free_windows_user_data = NULL;
  
183
  transport->expected_guid = NULL;
184
  
185 186 187 188 189
  /* Try to default to something that won't totally hose the system,
   * but doesn't impose too much of a limitation.
   */
  transport->max_live_messages_size = _DBUS_ONE_MEGABYTE * 63;

190 191 192 193
  /* On Linux RLIMIT_NOFILE defaults to 1024, so allowing 4096 fds live
     should be more than enough */
  transport->max_live_messages_unix_fds = 4096;

194 195
  /* credentials read from socket if any */
  transport->credentials = creds;
196

197
  _dbus_counter_set_notify (transport->live_messages,
198
                            transport->max_live_messages_size,
199 200
                            transport->max_live_messages_unix_fds,
                            live_messages_notify,
201
                            transport);
202 203 204

  if (transport->address)
    _dbus_verbose ("Initialized transport on address %s\n", transport->address);
205

206 207 208 209 210 211 212 213 214 215 216 217 218 219
  return TRUE;
}

/**
 * Finalizes base class members of DBusTransport.
 * Chained up to from subclass finalizers.
 *
 * @param transport the transport.
 */
void
_dbus_transport_finalize_base (DBusTransport *transport)
{
  if (!transport->disconnected)
    _dbus_transport_disconnect (transport);
220

221 222 223 224 225 226
  if (transport->free_unix_user_data != NULL)
    (* transport->free_unix_user_data) (transport->unix_user_data);

  if (transport->free_windows_user_data != NULL)
    (* transport->free_windows_user_data) (transport->windows_user_data);
  
227
  _dbus_message_loader_unref (transport->loader);
228
  _dbus_auth_unref (transport->auth);
229 230 231
  _dbus_counter_set_notify (transport->live_messages,
                            0, 0, NULL, NULL);
  _dbus_counter_unref (transport->live_messages);
232
  dbus_free (transport->address);
233
  dbus_free (transport->expected_guid);
234 235
  if (transport->credentials)
    _dbus_credentials_unref (transport->credentials);
236 237
}

238 239 240 241 242 243 244

/**
 * Verifies if a given D-Bus address is a valid address
 * by attempting to connect to it. If it is, returns the
 * opened DBusTransport object. If it isn't, returns #NULL
 * and sets @p error.
 *
245
 * @param address the address to be checked.
246 247 248 249 250 251 252 253 254 255 256 257 258
 * @param error address where an error can be returned.
 * @returns a new transport, or #NULL on failure.
 */
static DBusTransport*
check_address (const char *address, DBusError *error)
{
  DBusAddressEntry **entries;
  DBusTransport *transport = NULL;
  int len, i;

  _dbus_assert (address != NULL);

  if (!dbus_parse_address (address, &entries, &len, error))
259
    return NULL;              /* not a valid address */
260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275

  for (i = 0; i < len; i++)
    {
      transport = _dbus_transport_open (entries[i], error);
      if (transport != NULL)
        break;
    }

  dbus_address_entries_free (entries);
  return transport;
}

/**
 * Creates a new transport for the "autostart" method.
 * This creates a client-side of a transport.
 *
276
 * @param scope scope of autolaunch (Windows only)
277 278 279 280
 * @param error address where an error can be returned.
 * @returns a new transport, or #NULL on failure.
 */
static DBusTransport*
281
_dbus_transport_new_for_autolaunch (const char *scope, DBusError *error)
282 283 284 285 286 287 288 289 290 291 292 293
{
  DBusString address;
  DBusTransport *result = NULL;

  _DBUS_ASSERT_ERROR_IS_CLEAR (error);

  if (!_dbus_string_init (&address))
    {
      dbus_set_error (error, DBUS_ERROR_NO_MEMORY, NULL);
      return NULL;
    }

294
  if (!_dbus_get_autolaunch_address (scope, &address, error))
295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322
    {
      _DBUS_ASSERT_ERROR_IS_SET (error);
      goto out;
    }

  result = check_address (_dbus_string_get_const_data (&address), error);
  if (result == NULL)
    _DBUS_ASSERT_ERROR_IS_SET (error);
  else
    _DBUS_ASSERT_ERROR_IS_CLEAR (error);

 out:
  _dbus_string_free (&address);
  return result;
}

static DBusTransportOpenResult
_dbus_transport_open_autolaunch (DBusAddressEntry  *entry,
                                 DBusTransport    **transport_p,
                                 DBusError         *error)
{
  const char *method;
  
  method = dbus_address_entry_get_method (entry);
  _dbus_assert (method != NULL);

  if (strcmp (method, "autolaunch") == 0)
    {
323 324 325
      const char *scope = dbus_address_entry_get_value (entry, "scope");

      *transport_p = _dbus_transport_new_for_autolaunch (scope, error);
326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344

      if (*transport_p == NULL)
        {
          _DBUS_ASSERT_ERROR_IS_SET (error);
          return DBUS_TRANSPORT_OPEN_DID_NOT_CONNECT;
        }
      else
        {
          _DBUS_ASSERT_ERROR_IS_CLEAR (error);
          return DBUS_TRANSPORT_OPEN_OK;
        }      
    }
  else
    {
      _DBUS_ASSERT_ERROR_IS_CLEAR (error);
      return DBUS_TRANSPORT_OPEN_NOT_HANDLED;
    }
}

345 346 347 348 349 350
static const struct {
  DBusTransportOpenResult (* func) (DBusAddressEntry *entry,
                                    DBusTransport   **transport_p,
                                    DBusError        *error);
} open_funcs[] = {
  { _dbus_transport_open_socket },
351 352
  { _dbus_transport_open_platform_specific },
  { _dbus_transport_open_autolaunch }
353
#ifdef DBUS_ENABLE_EMBEDDED_TESTS
354 355 356 357
  , { _dbus_transport_open_debug_pipe }
#endif
};

358
/**
359 360
 * Try to open a new transport for the given address entry.  (This
 * opens a client-side-of-the-connection transport.)
361
 * 
362
 * @param entry the address entry
363
 * @param error location to store reason for failure.
364 365 366
 * @returns new transport of #NULL on failure.
 */
DBusTransport*
367 368
_dbus_transport_open (DBusAddressEntry *entry,
                      DBusError        *error)
369 370
{
  DBusTransport *transport;
371 372
  const char *expected_guid_orig;
  char *expected_guid;
373
  int i;
374 375
  DBusError tmp_error = DBUS_ERROR_INIT;

376 377
  _DBUS_ASSERT_ERROR_IS_CLEAR (error);
  
378
  transport = NULL;
379 380 381 382 383 384 385 386
  expected_guid_orig = dbus_address_entry_get_value (entry, "guid");
  expected_guid = _dbus_strdup (expected_guid_orig);

  if (expected_guid_orig != NULL && expected_guid == NULL)
    {
      _DBUS_SET_OOM (error);
      return NULL;
    }
387

388
  for (i = 0; i < (int) _DBUS_N_ELEMENTS (open_funcs); ++i)
389
    {
390
      DBusTransportOpenResult result;
391

392 393
      _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
      result = (* open_funcs[i].func) (entry, &transport, &tmp_error);
394

395
      switch (result)
396
        {
397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412
        case DBUS_TRANSPORT_OPEN_OK:
          _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
          goto out;
          break;
        case DBUS_TRANSPORT_OPEN_NOT_HANDLED:
          _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
          /* keep going through the loop of open funcs */
          break;
        case DBUS_TRANSPORT_OPEN_BAD_ADDRESS:
          _DBUS_ASSERT_ERROR_IS_SET (&tmp_error);
          goto out;
          break;
        case DBUS_TRANSPORT_OPEN_DID_NOT_CONNECT:
          _DBUS_ASSERT_ERROR_IS_SET (&tmp_error);
          goto out;
          break;
413
        }
414
    }
415

416 417
 out:
  
418
  if (transport == NULL)
419
    {
420 421 422 423 424 425 426
      if (!dbus_error_is_set (&tmp_error))
        _dbus_set_bad_address (&tmp_error,
                               NULL, NULL,
                               "Unknown address type (examples of valid types are \"tcp\" and on UNIX \"unix\")");
      
      _DBUS_ASSERT_ERROR_IS_SET (&tmp_error);
      dbus_move_error(&tmp_error, error);
427 428 429 430
      dbus_free (expected_guid);
    }
  else
    {
431
      _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447

      /* In the case of autostart the initial guid is NULL
       * and the autostart transport recursively calls
       * _dbus_open_transport wich returns a transport
       * with a guid.  That guid is the definitive one.
       *
       * FIXME: if more transports are added they may have
       * an effect on the expected_guid semantics (i.e. 
       * expected_guid and transport->expected_guid may
       * both have values).  This is very unlikely though
       * we should either throw asserts here for those 
       * corner cases or refactor the code so it is 
       * clearer on what is expected and what is not
       */
      if(expected_guid)
        transport->expected_guid = expected_guid;
448
    }
449

450
  return transport;
451 452 453 454 455 456
}

/**
 * Increments the reference count for the transport.
 *
 * @param transport the transport.
457
 * @returns the transport.
458
 */
459
DBusTransport *
460 461
_dbus_transport_ref (DBusTransport *transport)
{
462 463
  _dbus_assert (transport->refcount > 0);
  
464
  transport->refcount += 1;
465 466

  return transport;
467 468 469 470 471 472 473 474 475 476 477 478 479 480
}

/**
 * Decrements the reference count for the transport.
 * Disconnects and finalizes the transport if
 * the reference count reaches zero.
 *
 * @param transport the transport.
 */
void
_dbus_transport_unref (DBusTransport *transport)
{
  _dbus_assert (transport != NULL);
  _dbus_assert (transport->refcount > 0);
481
  
482 483 484
  transport->refcount -= 1;
  if (transport->refcount == 0)
    {
485
      _dbus_verbose ("finalizing\n");
486
      
487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503
      _dbus_assert (transport->vtable->finalize != NULL);
      
      (* transport->vtable->finalize) (transport);
    }
}

/**
 * Closes our end of the connection to a remote application. Further
 * attempts to use this transport will fail. Only the first call to
 * _dbus_transport_disconnect() will have an effect.
 *
 * @param transport the transport.
 * 
 */
void
_dbus_transport_disconnect (DBusTransport *transport)
{
504
  _dbus_verbose ("start\n");
505
  
506
  _dbus_assert (transport->vtable->disconnect != NULL);
507
  
508 509
  if (transport->disconnected)
    return;
510

511
  (* transport->vtable->disconnect) (transport);
512
  
513
  transport->disconnected = TRUE;
514

515
  _dbus_verbose ("end\n");
516 517 518 519 520 521 522 523
}

/**
 * Returns #TRUE if the transport has not been disconnected.
 * Disconnection can result from _dbus_transport_disconnect()
 * or because the server drops its end of the connection.
 *
 * @param transport the transport.
524
 * @returns whether we're connected
525 526 527 528 529 530 531
 */
dbus_bool_t
_dbus_transport_get_is_connected (DBusTransport *transport)
{
  return !transport->disconnected;
}

532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688
static dbus_bool_t
auth_via_unix_user_function (DBusTransport *transport)
{
  DBusCredentials *auth_identity;
  dbus_bool_t allow;
  DBusConnection *connection;
  DBusAllowUnixUserFunction unix_user_function;
  void *unix_user_data;
  dbus_uid_t uid;

  /* Dropping the lock here probably isn't that safe. */
  
  auth_identity = _dbus_auth_get_identity (transport->auth);
  _dbus_assert (auth_identity != NULL);

  connection = transport->connection;
  unix_user_function = transport->unix_user_function;
  unix_user_data = transport->unix_user_data;
  uid = _dbus_credentials_get_unix_uid (auth_identity);
              
  _dbus_verbose ("unlock\n");
  _dbus_connection_unlock (connection);

  allow = (* unix_user_function) (connection,
                                  uid,
                                  unix_user_data);
              
  _dbus_verbose ("lock post unix user function\n");
  _dbus_connection_lock (connection);

  if (allow)
    {
      _dbus_verbose ("Client UID "DBUS_UID_FORMAT" authorized\n", uid);
    }
  else
    {
      _dbus_verbose ("Client UID "DBUS_UID_FORMAT
                     " was rejected, disconnecting\n",
                     _dbus_credentials_get_unix_uid (auth_identity));
      _dbus_transport_disconnect (transport);
    }

  return allow;
}

static dbus_bool_t
auth_via_windows_user_function (DBusTransport *transport)
{
  DBusCredentials *auth_identity;  
  dbus_bool_t allow;
  DBusConnection *connection;
  DBusAllowWindowsUserFunction windows_user_function;
  void *windows_user_data;
  char *windows_sid;

  /* Dropping the lock here probably isn't that safe. */
  
  auth_identity = _dbus_auth_get_identity (transport->auth);
  _dbus_assert (auth_identity != NULL);

  connection = transport->connection;
  windows_user_function = transport->windows_user_function;
  windows_user_data = transport->unix_user_data;
  windows_sid = _dbus_strdup (_dbus_credentials_get_windows_sid (auth_identity));

  if (windows_sid == NULL)
    {
      /* OOM */
      return FALSE;
    }
                
  _dbus_verbose ("unlock\n");
  _dbus_connection_unlock (connection);

  allow = (* windows_user_function) (connection,
                                     windows_sid,
                                     windows_user_data);
              
  _dbus_verbose ("lock post windows user function\n");
  _dbus_connection_lock (connection);

  if (allow)
    {
      _dbus_verbose ("Client SID '%s' authorized\n", windows_sid);
    }
  else
    {
      _dbus_verbose ("Client SID '%s' was rejected, disconnecting\n",
                     _dbus_credentials_get_windows_sid (auth_identity));
      _dbus_transport_disconnect (transport);
    }

  return allow;
}

static dbus_bool_t
auth_via_default_rules (DBusTransport *transport)
{
  DBusCredentials *auth_identity;
  DBusCredentials *our_identity;
  dbus_bool_t allow;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);
  _dbus_assert (auth_identity != NULL);

  /* By default, connection is allowed if the client is 1) root or 2)
   * has the same UID as us or 3) anonymous is allowed.
   */
  
  our_identity = _dbus_credentials_new_from_current_process ();
  if (our_identity == NULL)
    {
      /* OOM */
      return FALSE;
    }
              
  if (transport->allow_anonymous ||
      _dbus_credentials_get_unix_uid (auth_identity) == 0 ||
      _dbus_credentials_same_user (our_identity,
                                   auth_identity))
    {
      if (_dbus_credentials_include(our_identity,DBUS_CREDENTIAL_WINDOWS_SID))
          _dbus_verbose ("Client authorized as SID '%s'"
                         "matching our SID '%s'\n",
                         _dbus_credentials_get_windows_sid(auth_identity),
                         _dbus_credentials_get_windows_sid(our_identity));
      else
          _dbus_verbose ("Client authorized as UID "DBUS_UID_FORMAT
                         " matching our UID "DBUS_UID_FORMAT"\n",
                         _dbus_credentials_get_unix_uid(auth_identity),
                         _dbus_credentials_get_unix_uid(our_identity));
      /* We have authenticated! */
      allow = TRUE;
    }
  else
    {
      if (_dbus_credentials_include(our_identity,DBUS_CREDENTIAL_WINDOWS_SID))
          _dbus_verbose ("Client authorized as SID '%s'"
                         " but our SID is '%s', disconnecting\n",
                         (_dbus_credentials_get_windows_sid(auth_identity) ?
                          _dbus_credentials_get_windows_sid(auth_identity) : "<null>"),
                         (_dbus_credentials_get_windows_sid(our_identity) ?
                          _dbus_credentials_get_windows_sid(our_identity) : "<null>"));
      else
          _dbus_verbose ("Client authorized as UID "DBUS_UID_FORMAT
                         " but our UID is "DBUS_UID_FORMAT", disconnecting\n",
                         _dbus_credentials_get_unix_uid(auth_identity),
                         _dbus_credentials_get_unix_uid(our_identity));
      _dbus_transport_disconnect (transport);
      allow = FALSE;
    }  

  _dbus_credentials_unref (our_identity);
  
  return allow;
}

689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704
/**
 * Returns #TRUE if we have been authenticated. It will return #TRUE even if
 * the transport is now disconnected, but was ever authenticated before
 * disconnecting.
 *
 * This replaces the older _dbus_transport_get_is_authenticated() which
 * had side-effects.
 *
 * @param transport the transport
 * @returns whether we're authenticated
 */
dbus_bool_t
_dbus_transport_peek_is_authenticated (DBusTransport *transport)
{
  return transport->authenticated;
}
705

706
/**
707 708 709 710 711 712 713 714 715
 * Returns #TRUE if we have been authenticated. It will return #TRUE even if
 * the transport is now disconnected, but was ever authenticated before
 * disconnecting.
 *
 * If we have not finished authenticating, but we have enough buffered input
 * to finish the job, then this function will do so before it returns.
 *
 * This used to be called _dbus_transport_get_is_authenticated(), but that
 * name seems inappropriate for a function with side-effects.
716
 *
717
 * @todo we drop connection->mutex when calling the unix_user_function,
718
 * and windows_user_function, which may not be safe really.
719
 *
720 721 722 723
 * @param transport the transport
 * @returns whether we're authenticated
 */
dbus_bool_t
724
_dbus_transport_try_to_authenticate (DBusTransport *transport)
725
{  
726 727 728 729
  if (transport->authenticated)
    return TRUE;
  else
    {
730 731
      dbus_bool_t maybe_authenticated;
      
732 733
      if (transport->disconnected)
        return FALSE;
734

735 736 737
      /* paranoia ref since we call user callbacks sometimes */
      _dbus_connection_ref_unlocked (transport->connection);
      
738
      maybe_authenticated =
739
        (!(transport->send_credentials_pending ||
740
           transport->receive_credentials_pending));
741

742 743 744 745 746 747 748 749 750 751 752
      if (maybe_authenticated)
        {
          switch (_dbus_auth_do_work (transport->auth))
            {
            case DBUS_AUTH_STATE_AUTHENTICATED:
              /* leave as maybe_authenticated */
              break;
            default:
              maybe_authenticated = FALSE;
            }
        }
753

754 755
      /* If we're the client, verify the GUID
       */
756 757 758 759 760 761 762 763 764 765 766 767 768
      if (maybe_authenticated && !transport->is_server)
        {
          const char *server_guid;

          server_guid = _dbus_auth_get_guid_from_server (transport->auth);
          _dbus_assert (server_guid != NULL);

          if (transport->expected_guid &&
              strcmp (transport->expected_guid, server_guid) != 0)
            {
              _dbus_verbose ("Client expected GUID '%s' and we got '%s' from the server\n",
                             transport->expected_guid, server_guid);
              _dbus_transport_disconnect (transport);
769
              _dbus_connection_unref_unlocked (transport->connection);
770 771 772
              return FALSE;
            }
        }
773

774 775 776 777
      /* If we're the server, see if we want to allow this identity to proceed.
       */
      if (maybe_authenticated && transport->is_server)
        {
778
          dbus_bool_t allow;
779
          DBusCredentials *auth_identity;
780
          
781 782 783
          auth_identity = _dbus_auth_get_identity (transport->auth);
          _dbus_assert (auth_identity != NULL);
          
784 785 786 787 788 789
          /* If we have an auth'd user and a user function, delegate
           * deciding whether auth credentials are good enough to the
           * app; otherwise, use our default decision process.
           */
          if (transport->unix_user_function != NULL &&
              _dbus_credentials_include (auth_identity, DBUS_CREDENTIAL_UNIX_USER_ID))
790
            {
791 792 793 794 795 796 797 798 799 800
              allow = auth_via_unix_user_function (transport);
            }
          else if (transport->windows_user_function != NULL &&
                   _dbus_credentials_include (auth_identity, DBUS_CREDENTIAL_WINDOWS_SID))
            {
              allow = auth_via_windows_user_function (transport);
            }      
          else
            {
              allow = auth_via_default_rules (transport);
801
            }
802 803 804
          
          if (!allow)
            maybe_authenticated = FALSE;
805 806
        }

807
      transport->authenticated = maybe_authenticated;
808

809
      _dbus_connection_unref_unlocked (transport->connection);
810
      return maybe_authenticated;
811 812 813
    }
}

814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835
/**
 * See dbus_connection_get_is_anonymous().
 *
 * @param transport the transport
 * @returns #TRUE if not authenticated or authenticated as anonymous
 */
dbus_bool_t
_dbus_transport_get_is_anonymous (DBusTransport *transport)
{
  DBusCredentials *auth_identity;
  
  if (!transport->authenticated)
    return TRUE;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_are_anonymous (auth_identity))
    return TRUE;
  else
    return FALSE;
}

836 837 838 839 840 841 842 843 844 845 846 847
/**
 * Returns TRUE if the transport supports sending unix fds.
 *
 * @param transport the transport
 * @returns #TRUE if TRUE it is possible to send unix fds across the transport.
 */
dbus_bool_t
_dbus_transport_can_pass_unix_fd(DBusTransport *transport)
{
  return DBUS_TRANSPORT_CAN_SEND_UNIX_FD(transport);
}

848 849 850 851 852 853 854 855 856 857 858 859 860
/**
 * Gets the address of a transport. It will be
 * #NULL for a server-side transport.
 *
 * @param transport the transport
 * @returns transport's address
 */
const char*
_dbus_transport_get_address (DBusTransport *transport)
{
  return transport->address;
}

861 862 863 864 865 866 867 868 869 870 871 872
/**
 * Gets the id of the server we are connected to (see
 * dbus_server_get_id()). Only works on client side.
 *
 * @param transport the transport
 * @returns transport's server's id or #NULL if we are the server side
 */
const char*
_dbus_transport_get_server_id (DBusTransport *transport)
{
  if (transport->is_server)
    return NULL;
873 874
  else if (transport->authenticated)
    return _dbus_auth_get_guid_from_server (transport->auth);
875 876 877 878
  else
    return transport->expected_guid;
}

879 880 881 882 883 884 885
/**
 * Handles a watch by reading data, writing data, or disconnecting
 * the transport, as appropriate for the given condition.
 *
 * @param transport the transport.
 * @param watch the watch.
 * @param condition the current state of the watched file descriptor.
886
 * @returns #FALSE if not enough memory to fully handle the watch
887
 */
888
dbus_bool_t
889 890 891 892
_dbus_transport_handle_watch (DBusTransport           *transport,
                              DBusWatch               *watch,
                              unsigned int             condition)
{
893 894
  dbus_bool_t retval;
  
895 896 897
  _dbus_assert (transport->vtable->handle_watch != NULL);

  if (transport->disconnected)
898
    return TRUE;
899

900
  if (dbus_watch_get_socket (watch) < 0)
901
    {
902
      _dbus_warn_check_failed ("Tried to handle an invalidated watch; this watch should have been removed\n");
903
      return TRUE;
904
    }
905
  
906 907
  _dbus_watch_sanitize_condition (watch, &condition);

908
  _dbus_transport_ref (transport);
909
  _dbus_watch_ref (watch);
910
  retval = (* transport->vtable->handle_watch) (transport, watch, condition);
911
  _dbus_watch_unref (watch);
912
  _dbus_transport_unref (transport);
913 914

  return retval;
915 916 917 918 919 920 921 922 923
}

/**
 * Sets the connection using this transport. Allows the transport
 * to add watches to the connection, queue incoming messages,
 * and pull outgoing messages.
 *
 * @param transport the transport.
 * @param connection the connection.
924
 * @returns #FALSE if not enough memory
925
 */
926
dbus_bool_t
927 928 929 930 931 932 933 934
_dbus_transport_set_connection (DBusTransport  *transport,
                                DBusConnection *connection)
{
  _dbus_assert (transport->vtable->connection_set != NULL);
  _dbus_assert (transport->connection == NULL);
  
  transport->connection = connection;

935
  _dbus_transport_ref (transport);
936 937
  if (!(* transport->vtable->connection_set) (transport))
    transport->connection = NULL;
938
  _dbus_transport_unref (transport);
939 940

  return transport->connection != NULL;
941 942
}

943
/**
944
 * Get the socket file descriptor, if any.
945 946 947 948 949 950
 *
 * @param transport the transport
 * @param fd_p pointer to fill in with the descriptor
 * @returns #TRUE if a descriptor was available
 */
dbus_bool_t
951
_dbus_transport_get_socket_fd (DBusTransport *transport,
952
                               DBusSocket    *fd_p)
953 954 955
{
  dbus_bool_t retval;
  
956
  if (transport->vtable->get_socket_fd == NULL)
957 958 959 960 961 962 963
    return FALSE;

  if (transport->disconnected)
    return FALSE;

  _dbus_transport_ref (transport);

964 965
  retval = (* transport->vtable->get_socket_fd) (transport,
                                                 fd_p);
966 967 968 969 970 971
  
  _dbus_transport_unref (transport);

  return retval;
}

972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989
/**
 * Performs a single poll()/select() on the transport's file
 * descriptors and then reads/writes data as appropriate,
 * queueing incoming messages and sending outgoing messages.
 * This is the backend for _dbus_connection_do_iteration().
 * See _dbus_connection_do_iteration() for full details.
 *
 * @param transport the transport.
 * @param flags indicates whether to read or write, and whether to block.
 * @param timeout_milliseconds if blocking, timeout or -1 for no timeout.
 */
void
_dbus_transport_do_iteration (DBusTransport  *transport,
                              unsigned int    flags,
                              int             timeout_milliseconds)
{
  _dbus_assert (transport->vtable->do_iteration != NULL);

990 991 992
  _dbus_verbose ("Transport iteration flags 0x%x timeout %d connected = %d\n",
                 flags, timeout_milliseconds, !transport->disconnected);
  
993 994 995 996 997
  if ((flags & (DBUS_ITERATION_DO_WRITING |
                DBUS_ITERATION_DO_READING)) == 0)
    return; /* Nothing to do */

  if (transport->disconnected)
998
    return;
999

1000
  _dbus_transport_ref (transport);
1001 1002
  (* transport->vtable->do_iteration) (transport, flags,
                                       timeout_milliseconds);
1003
  _dbus_transport_unref (transport);
1004

1005
  _dbus_verbose ("end\n");
1006 1007
}

1008 1009 1010 1011 1012 1013 1014 1015 1016 1017
static dbus_bool_t
recover_unused_bytes (DBusTransport *transport)
{
  if (_dbus_auth_needs_decoding (transport->auth))
    {
      DBusString plaintext;
      const DBusString *encoded;
      DBusString *buffer;
      int orig_len;
      
1018
      if (!_dbus_string_init (&plaintext))
1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047
        goto nomem;
      
      _dbus_auth_get_unused_bytes (transport->auth,
                                   &encoded);

      if (!_dbus_auth_decode_data (transport->auth,
                                   encoded, &plaintext))
        {
          _dbus_string_free (&plaintext);
          goto nomem;
        }
      
      _dbus_message_loader_get_buffer (transport->loader,
                                       &buffer);
      
      orig_len = _dbus_string_get_length (buffer);
      
      if (!_dbus_string_move (&plaintext, 0, buffer,
                              orig_len))
        {
          _dbus_string_free (&plaintext);
          goto nomem;
        }
      
      _dbus_verbose (" %d unused bytes sent to message loader\n", 
                     _dbus_string_get_length (buffer) -
                     orig_len);
      
      _dbus_message_loader_return_buffer (transport->loader,
1048
                                          buffer);
1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077

      _dbus_auth_delete_unused_bytes (transport->auth);
      
      _dbus_string_free (&plaintext);
    }
  else
    {
      const DBusString *bytes;
      DBusString *buffer;
      int orig_len;
      dbus_bool_t succeeded;

      _dbus_message_loader_get_buffer (transport->loader,
                                       &buffer);
                
      orig_len = _dbus_string_get_length (buffer);
                
      _dbus_auth_get_unused_bytes (transport->auth,
                                   &bytes);

      succeeded = TRUE;
      if (!_dbus_string_copy (bytes, 0, buffer, _dbus_string_get_length (buffer)))
        succeeded = FALSE;
      
      _dbus_verbose (" %d unused bytes sent to message loader\n", 
                     _dbus_string_get_length (buffer) -
                     orig_len);
      
      _dbus_message_loader_return_buffer (transport->loader,
1078
                                          buffer);
1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092

      if (succeeded)
        _dbus_auth_delete_unused_bytes (transport->auth);
      else
        goto nomem;
    }

  return TRUE;

 nomem:
  _dbus_verbose ("Not enough memory to transfer unused bytes from auth conversation\n");
  return FALSE;
}

1093 1094 1095 1096 1097 1098 1099 1100 1101 1102
/**
 * Reports our current dispatch status (whether there's buffered
 * data to be queued as messages, or not, or we need memory).
 *
 * @param transport the transport
 * @returns current status
 */
DBusDispatchStatus
_dbus_transport_get_dispatch_status (DBusTransport *transport)
{
1103 1104
  if (_dbus_counter_get_size_value (transport->live_messages) >= transport->max_live_messages_size ||
      _dbus_counter_get_unix_fd_value (transport->live_messages) >= transport->max_live_messages_unix_fds)
1105 1106
    return DBUS_DISPATCH_COMPLETE; /* complete for now */

1107
  if (!_dbus_transport_try_to_authenticate (transport))
1108
    {
1109 1110 1111
      if (_dbus_auth_do_work (transport->auth) ==
          DBUS_AUTH_STATE_WAITING_FOR_MEMORY)
        return DBUS_DISPATCH_NEED_MEMORY;
1112
      else if (!_dbus_transport_try_to_authenticate (transport))
1113
        return DBUS_DISPATCH_COMPLETE;
1114
    }
1115 1116 1117 1118 1119 1120

  if (!transport->unused_bytes_recovered &&
      !recover_unused_bytes (transport))
    return DBUS_DISPATCH_NEED_MEMORY;

  transport->unused_bytes_recovered = TRUE;
1121
  
1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142
  if (!_dbus_message_loader_queue_messages (transport->loader))
    return DBUS_DISPATCH_NEED_MEMORY;

  if (_dbus_message_loader_peek_message (transport->loader) != NULL)
    return DBUS_DISPATCH_DATA_REMAINS;
  else
    return DBUS_DISPATCH_COMPLETE;
}

/**
 * Processes data we've read while handling a watch, potentially
 * converting some of it to messages and queueing those messages on
 * the connection.
 *
 * @param transport the transport
 * @returns #TRUE if we had enough memory to queue all messages
 */
dbus_bool_t
_dbus_transport_queue_messages (DBusTransport *transport)
{
  DBusDispatchStatus status;
1143

1144
#if 0
1145
  _dbus_verbose ("_dbus_transport_queue_messages()\n");
1146
#endif
1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160
  
  /* Queue any messages */
  while ((status = _dbus_transport_get_dispatch_status (transport)) == DBUS_DISPATCH_DATA_REMAINS)
    {
      DBusMessage *message;
      DBusList *link;

      link = _dbus_message_loader_pop_message_link (transport->loader);
      _dbus_assert (link != NULL);
      
      message = link->data;
      
      _dbus_verbose ("queueing received message %p\n", message);

1161
      if (!_dbus_message_add_counter (message, transport->live_messages))
1162 1163 1164 1165 1166 1167 1168 1169
        {
          _dbus_message_loader_putback_message_link (transport->loader,
                                                     link);
          status = DBUS_DISPATCH_NEED_MEMORY;
          break;
        }
      else
        {
1170 1171 1172 1173 1174 1175 1176
          /* We didn't call the notify function when we added the counter, so
           * catch up now. Since we have the connection's lock, it's desirable
           * that we bypass the notify function and call this virtual method
           * directly. */
          if (transport->vtable->live_messages_changed)
            (* transport->vtable->live_messages_changed) (transport);

1177 1178 1179 1180
          /* pass ownership of link and message ref to connection */
          _dbus_connection_queue_received_message_link (transport->connection,
                                                        link);
        }
1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191
    }

  if (_dbus_message_loader_get_is_corrupted (transport->loader))
    {
      _dbus_verbose ("Corrupted message stream, disconnecting\n");
      _dbus_transport_disconnect (transport);
    }

  return status != DBUS_DISPATCH_NEED_MEMORY;
}

1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204
/**
 * See dbus_connection_set_max_message_size().
 *
 * @param transport the transport
 * @param size the max size of a single message
 */
void
_dbus_transport_set_max_message_size (DBusTransport  *transport,
                                      long            size)
{
  _dbus_message_loader_set_max_message_size (transport->loader, size);
}

1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217
/**
 * See dbus_connection_set_max_message_unix_fds().
 *
 * @param transport the transport
 * @param n the max number of unix fds of a single message
 */
void
_dbus_transport_set_max_message_unix_fds (DBusTransport  *transport,
                                          long            n)
{
  _dbus_message_loader_set_max_message_unix_fds (transport->loader, n);
}

1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229
/**
 * See dbus_connection_get_max_message_size().
 *
 * @param transport the transport
 * @returns max message size
 */
long
_dbus_transport_get_max_message_size (DBusTransport  *transport)
{
  return _dbus_message_loader_get_max_message_size (transport->loader);
}

1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241
/**
 * See dbus_connection_get_max_message_unix_fds().
 *
 * @param transport the transport
 * @returns max message unix fds
 */
long
_dbus_transport_get_max_message_unix_fds (DBusTransport  *transport)
{
  return _dbus_message_loader_get_max_message_unix_fds (transport->loader);
}

1242
/**
1243
 * See dbus_connection_set_max_received_size().
1244 1245 1246 1247 1248
 *
 * @param transport the transport
 * @param size the max size of all incoming messages
 */
void
1249 1250
_dbus_transport_set_max_received_size (DBusTransport  *transport,
                                       long            size)
1251 1252
{
  transport->max_live_messages_size = size;
1253
  _dbus_counter_set_notify (transport->live_messages,
1254
                            transport->max_live_messages_size,
1255 1256
                            transport->max_live_messages_unix_fds,
                            live_messages_notify,
1257 1258 1259
                            transport);
}

1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276
/**
 * See dbus_connection_set_max_received_unix_fds().
 *
 * @param transport the transport
 * @param n the max unix fds of all incoming messages
 */
void
_dbus_transport_set_max_received_unix_fds (DBusTransport  *transport,
                                           long            n)
{
  transport->max_live_messages_unix_fds = n;
  _dbus_counter_set_notify (transport->live_messages,
                            transport->max_live_messages_size,
                            transport->max_live_messages_unix_fds,
                            live_messages_notify,
                            transport);
}
1277 1278

/**
1279
 * See dbus_connection_get_max_received_size().
1280 1281 1282 1283 1284
 *
 * @param transport the transport
 * @returns max bytes for all live messages
 */
long
1285
_dbus_transport_get_max_received_size (DBusTransport  *transport)
1286 1287 1288 1289
{
  return transport->max_live_messages_size;
}

1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301
/**
 * See dbus_connection_set_max_received_unix_fds().
 *
 * @param transport the transport
 * @returns max unix fds for all live messages
 */
long
_dbus_transport_get_max_received_unix_fds (DBusTransport  *transport)
{
  return transport->max_live_messages_unix_fds;
}

1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312
/**
 * See dbus_connection_get_unix_user().
 *
 * @param transport the transport
 * @param uid return location for the user ID
 * @returns #TRUE if uid is filled in with a valid user ID
 */
dbus_bool_t
_dbus_transport_get_unix_user (DBusTransport *transport,
                               unsigned long *uid)
{
1313
  DBusCredentials *auth_identity;
1314

1315 1316 1317 1318
  *uid = _DBUS_INT32_MAX; /* better than some root or system user in
                           * case of bugs in the caller. Caller should
                           * never use this value on purpose, however.
                           */
1319 1320 1321 1322
  
  if (!transport->authenticated)
    return FALSE;
  
1323
  auth_identity = _dbus_auth_get_identity (transport->auth);
1324

1325 1326
  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_UNIX_USER_ID))
1327
    {
1328
      *uid = _dbus_credentials_get_unix_uid (auth_identity);
1329 1330 1331 1332 1333 1334
      return TRUE;
    }
  else
    return FALSE;
}

1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345
/**
 * See dbus_connection_get_unix_process_id().
 *
 * @param transport the transport
 * @param pid return location for the process ID
 * @returns #TRUE if uid is filled in with a valid process ID
 */
dbus_bool_t
_dbus_transport_get_unix_process_id (DBusTransport *transport,
				     unsigned long *pid)
{
1346
  DBusCredentials *auth_identity;
1347 1348 1349 1350 1351 1352 1353 1354 1355

  *pid = DBUS_PID_UNSET; /* Caller should never use this value on purpose,
			  * but we set it to a safe number, INT_MAX,
			  * just to root out possible bugs in bad callers.
			  */
  
  if (!transport->authenticated)
    return FALSE;
  
1356
  auth_identity = _dbus_auth_get_identity (transport->auth);
1357

1358 1359
  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_UNIX_PROCESS_ID))
1360
    {
1361
      *pid = _dbus_credentials_get_pid (auth_identity);
1362 1363 1364 1365 1366 1367
      return TRUE;
    }
  else
    return FALSE;
}

1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401
/**
 * See dbus_connection_get_adt_audit_session_data().
 *
 * @param transport the transport
 * @param data return location for the ADT audit data 
 * @param data_size return length of audit data
 * @returns #TRUE if audit data is filled in with a valid ucred
 */
dbus_bool_t
_dbus_transport_get_adt_audit_session_data (DBusTransport      *transport,
                                            void              **data,
                                            int                *data_size)
{
  DBusCredentials *auth_identity;

  *data = NULL;
  *data_size = 0;
  
  if (!transport->authenticated)
    return FALSE;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_ADT_AUDIT_DATA_ID))
    {
      *data = (void *) _dbus_credentials_get_adt_audit_data (auth_identity);
      *data_size = _dbus_credentials_get_adt_audit_data_size (auth_identity);
      return TRUE;
    }
  else
    return FALSE;
}

1402 1403 1404 1405 1406 1407 1408 1409 1410 1411
/**
 * See dbus_connection_set_unix_user_function().
 *
 * @param transport the transport
 * @param function the predicate
 * @param data data to pass to the predicate
 * @param free_data_function function to free the data
 * @param old_data the old user data to be freed
 * @param old_free_data_function old free data function to free it with
 */
1412
void
1413 1414 1415 1416 1417 1418
_dbus_transport_set_unix_user_function (DBusTransport             *transport,
                                        DBusAllowUnixUserFunction  function,
                                        void                      *data,
                                        DBusFreeFunction           free_data_function,
                                        void                     **old_data,
                                        DBusFreeFunction          *old_free_data_function)
1419 1420 1421 1422 1423 1424 1425
{  
  *old_data = transport->unix_user_data;
  *old_free_data_function = transport->free_unix_user_data;

  transport->unix_user_function = function;
  transport->unix_user_data = data;
  transport->free_unix_user_data = free_data_function;
1426 1427
}

1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454
dbus_bool_t
_dbus_transport_get_linux_security_label (DBusTransport  *transport,
                                          char          **label_p)
{
  DBusCredentials *auth_identity;

  *label_p = NULL;

  if (!transport->authenticated)
    return FALSE;

  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_LINUX_SECURITY_LABEL))
    {
      /* If no memory, we are supposed to return TRUE and set NULL */
      *label_p = _dbus_strdup (_dbus_credentials_get_linux_security_label (auth_identity));

      return TRUE;
    }
  else
    {
      return FALSE;
    }
}

1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497
/**
 * See dbus_connection_get_windows_user().
 *
 * @param transport the transport
 * @param windows_sid_p return location for the user ID
 * @returns #TRUE if user is available; the returned value may still be #NULL if no memory to copy it
 */
dbus_bool_t
_dbus_transport_get_windows_user (DBusTransport              *transport,
                                  char                      **windows_sid_p)
{
  DBusCredentials *auth_identity;

  *windows_sid_p = NULL;
  
  if (!transport->authenticated)
    return FALSE;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_WINDOWS_SID))
    {
      /* If no memory, we are supposed to return TRUE and set NULL */
      *windows_sid_p = _dbus_strdup (_dbus_credentials_get_windows_sid (auth_identity));

      return TRUE;
    }
  else
    return FALSE;
}

/**
 * See dbus_connection_set_windows_user_function().
 *
 * @param transport the transport
 * @param function the predicate
 * @param data data to pass to the predicate
 * @param free_data_function function to free the data
 * @param old_data the old user data to be freed
 * @param old_free_data_function old free data function to free it with
 */

1498
void
1499 1500 1501 1502 1503 1504 1505
_dbus_transport_set_windows_user_function (DBusTransport              *transport,
                                           DBusAllowWindowsUserFunction   function,
                                           void                       *data,
                                           DBusFreeFunction            free_data_function,
                                           void                      **old_data,
                                           DBusFreeFunction           *old_free_data_function)
{
1506 1507 1508 1509 1510 1511
  *old_data = transport->windows_user_data;
  *old_free_data_function = transport->free_windows_user_data;

  transport->windows_user_function = function;
  transport->windows_user_data = data;
  transport->free_windows_user_data = free_data_function;
1512 1513
}

1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528
/**
 * Sets the SASL authentication mechanisms supported by this transport.
 *
 * @param transport the transport
 * @param mechanisms the #NULL-terminated array of mechanisms
 *
 * @returns #FALSE if no memory
 */
dbus_bool_t
_dbus_transport_set_auth_mechanisms (DBusTransport  *transport,
                                     const char    **mechanisms)
{
  return _dbus_auth_set_mechanisms (transport->auth, mechanisms);
}

1529 1530 1531 1532 1533 1534
/**
 * See dbus_connection_set_allow_anonymous()
 *
 * @param transport the transport
 * @param value #TRUE to allow anonymous connection
 */
1535
void
1536 1537 1538
_dbus_transport_set_allow_anonymous (DBusTransport              *transport,
                                     dbus_bool_t                 value)
{
1539
  transport->allow_anonymous = value != FALSE;
1540
}
1541

1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552
/**
 * Return how many file descriptors are pending in the loader
 *
 * @param transport the transport
 */
int
_dbus_transport_get_pending_fds_count (DBusTransport *transport)
{
  return _dbus_message_loader_get_pending_fds_count (transport->loader);
}

1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568
/**
 * Register a function to be called whenever the number of pending file
 * descriptors in the loader change.
 *
 * @param transport the transport
 * @param callback the callback
 */
void
_dbus_transport_set_pending_fds_function (DBusTransport *transport,
                                           void (* callback) (void *),
                                           void *data)
{
  _dbus_message_loader_set_pending_fds_function (transport->loader,
                                                 callback, data);
}

1569 1570 1571 1572
#ifdef DBUS_ENABLE_STATS
void
_dbus_transport_get_stats (DBusTransport  *transport,
                           dbus_uint32_t  *queue_bytes,
1573 1574 1575
                           dbus_uint32_t  *queue_fds,
                           dbus_uint32_t  *peak_queue_bytes,
                           dbus_uint32_t  *peak_queue_fds)
1576 1577 1578 1579 1580 1581
{
  if (queue_bytes != NULL)
    *queue_bytes = _dbus_counter_get_size_value (transport->live_messages);

  if (queue_fds != NULL)
    *queue_fds = _dbus_counter_get_unix_fd_value (transport->live_messages);
1582 1583 1584 1585 1586 1587

  if (peak_queue_bytes != NULL)
    *peak_queue_bytes = _dbus_counter_get_peak_size_value (transport->live_messages);

  if (peak_queue_fds != NULL)
    *peak_queue_fds = _dbus_counter_get_peak_unix_fd_value (transport->live_messages);
1588 1589 1590
}
#endif /* DBUS_ENABLE_STATS */

1591
/** @} */