dbus-transport.c 46.4 KB
Newer Older
1
/* -*- mode: C; c-file-style: "gnu"; indent-tabs-mode: nil; -*- */
John Palmieri's avatar
John Palmieri committed
2
/* dbus-transport.c DBusTransport object (internal to D-Bus implementation)
3
 *
4
 * Copyright (C) 2002, 2003  Red Hat Inc.
5
 *
6
 * Licensed under the Academic Free License version 2.1
7 8 9 10 11 12 13 14 15 16 17 18 19
 * 
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
20
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
21 22 23
 *
 */

24
#include <config.h>
25 26
#include "dbus-transport-protected.h"
#include "dbus-transport-unix.h"
27
#include "dbus-transport-socket.h"
28
#include "dbus-connection-internal.h"
29
#include "dbus-watch.h"
30
#include "dbus-auth.h"
31
#include "dbus-address.h"
32
#include "dbus-credentials.h"
33
#include "dbus-mainloop.h"
34
#include "dbus-message.h"
35
#ifdef DBUS_ENABLE_EMBEDDED_TESTS
36
#include "dbus-server-debug-pipe.h"
37
#endif
38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59

/**
 * @defgroup DBusTransport DBusTransport object
 * @ingroup  DBusInternals
 * @brief "Backend" for a DBusConnection.
 *
 * Types and functions related to DBusTransport.  A transport is an
 * abstraction that can send and receive data via various kinds of
 * network connections or other IPC mechanisms.
 * 
 * @{
 */

/**
 * @typedef DBusTransport
 *
 * Opaque object representing a way message stream.
 * DBusTransport abstracts various kinds of actual
 * transport mechanism, such as different network protocols,
 * or encryption schemes.
 */

60
static void
61
live_messages_notify (DBusCounter *counter,
62 63 64 65
                           void        *user_data)
{
  DBusTransport *transport = user_data;

66
  _dbus_connection_lock (transport->connection);
67
  _dbus_transport_ref (transport);
68 69

#if 0
70 71 72 73
  _dbus_verbose ("Size counter value is now %d\n",
                 (int) _dbus_counter_get_size_value (counter));
  _dbus_verbose ("Unix FD counter value is now %d\n",
                 (int) _dbus_counter_get_unix_fd_value (counter));
74
#endif
75

76 77 78
  /* disable or re-enable the read watch for the transport if
   * required.
   */
79
  if (transport->vtable->live_messages_changed)
80 81 82
    {
      (* transport->vtable->live_messages_changed) (transport);
    }
83

84
  _dbus_transport_unref (transport);
85
  _dbus_connection_unlock (transport->connection);
86
}
87

88
/**
89 90 91 92 93
 * Initializes the base class members of DBusTransport.  Chained up to
 * by subclasses in their constructor.  The server GUID is the
 * globally unique ID for the server creating this connection
 * and will be #NULL for the client side of a connection. The GUID
 * is in hex format.
94 95 96
 *
 * @param transport the transport being created.
 * @param vtable the subclass vtable.
97
 * @param server_guid non-#NULL if this transport is on the server side of a connection
98
 * @param address the address of the transport
99 100 101 102
 * @returns #TRUE on success.
 */
dbus_bool_t
_dbus_transport_init_base (DBusTransport             *transport,
103
                           const DBusTransportVTable *vtable,
104
                           const DBusString          *server_guid,
105
                           const DBusString          *address)
106 107
{
  DBusMessageLoader *loader;
108
  DBusAuth *auth;
109
  DBusCounter *counter;
110
  char *address_copy;
111
  DBusCredentials *creds;
112
  
113 114 115
  loader = _dbus_message_loader_new ();
  if (loader == NULL)
    return FALSE;
116 117 118
  
  if (server_guid)
    auth = _dbus_auth_server_new (server_guid);
119
  else
120
    auth = _dbus_auth_client_new ();
121 122 123 124 125
  if (auth == NULL)
    {
      _dbus_message_loader_unref (loader);
      return FALSE;
    }
126 127 128 129

  counter = _dbus_counter_new ();
  if (counter == NULL)
    {
130
      _dbus_auth_unref (auth);
131 132
      _dbus_message_loader_unref (loader);
      return FALSE;
133
    }  
134 135 136 137 138

  creds = _dbus_credentials_new ();
  if (creds == NULL)
    {
      _dbus_counter_unref (counter);
139
      _dbus_auth_unref (auth);
140 141 142
      _dbus_message_loader_unref (loader);
      return FALSE;
    }
143
  
144
  if (server_guid)
145 146 147 148 149 150 151 152 153 154
    {
      _dbus_assert (address == NULL);
      address_copy = NULL;
    }
  else
    {
      _dbus_assert (address != NULL);

      if (!_dbus_string_copy_data (address, &address_copy))
        {
155
          _dbus_credentials_unref (creds);
156
          _dbus_counter_unref (counter);
157
          _dbus_auth_unref (auth);
158 159 160
          _dbus_message_loader_unref (loader);
          return FALSE;
        }
161
    }
162 163 164 165
  
  transport->refcount = 1;
  transport->vtable = vtable;
  transport->loader = loader;
166
  transport->auth = auth;
167
  transport->live_messages = counter;
168 169
  transport->authenticated = FALSE;
  transport->disconnected = FALSE;
170 171 172
  transport->is_server = (server_guid != NULL);
  transport->send_credentials_pending = !transport->is_server;
  transport->receive_credentials_pending = transport->is_server;
173
  transport->address = address_copy;
174 175 176 177
  
  transport->unix_user_function = NULL;
  transport->unix_user_data = NULL;
  transport->free_unix_user_data = NULL;
178

179 180 181 182
  transport->windows_user_function = NULL;
  transport->windows_user_data = NULL;
  transport->free_windows_user_data = NULL;
  
183
  transport->expected_guid = NULL;
184
  
185 186 187 188 189
  /* Try to default to something that won't totally hose the system,
   * but doesn't impose too much of a limitation.
   */
  transport->max_live_messages_size = _DBUS_ONE_MEGABYTE * 63;

190 191 192 193
  /* On Linux RLIMIT_NOFILE defaults to 1024, so allowing 4096 fds live
     should be more than enough */
  transport->max_live_messages_unix_fds = 4096;

194 195
  /* credentials read from socket if any */
  transport->credentials = creds;
196

197
  _dbus_counter_set_notify (transport->live_messages,
198
                            transport->max_live_messages_size,
199 200
                            transport->max_live_messages_unix_fds,
                            live_messages_notify,
201
                            transport);
202 203 204

  if (transport->address)
    _dbus_verbose ("Initialized transport on address %s\n", transport->address);
205

206 207 208 209 210 211 212 213 214 215 216 217 218 219
  return TRUE;
}

/**
 * Finalizes base class members of DBusTransport.
 * Chained up to from subclass finalizers.
 *
 * @param transport the transport.
 */
void
_dbus_transport_finalize_base (DBusTransport *transport)
{
  if (!transport->disconnected)
    _dbus_transport_disconnect (transport);
220

221 222 223 224 225 226
  if (transport->free_unix_user_data != NULL)
    (* transport->free_unix_user_data) (transport->unix_user_data);

  if (transport->free_windows_user_data != NULL)
    (* transport->free_windows_user_data) (transport->windows_user_data);
  
227
  _dbus_message_loader_unref (transport->loader);
228
  _dbus_auth_unref (transport->auth);
229 230 231
  _dbus_counter_set_notify (transport->live_messages,
                            0, 0, NULL, NULL);
  _dbus_counter_unref (transport->live_messages);
232
  dbus_free (transport->address);
233
  dbus_free (transport->expected_guid);
234 235
  if (transport->credentials)
    _dbus_credentials_unref (transport->credentials);
236 237
}

238 239 240 241 242 243 244

/**
 * Verifies if a given D-Bus address is a valid address
 * by attempting to connect to it. If it is, returns the
 * opened DBusTransport object. If it isn't, returns #NULL
 * and sets @p error.
 *
245
 * @param address the address to be checked.
246 247 248 249 250 251 252 253 254 255 256
 * @param error address where an error can be returned.
 * @returns a new transport, or #NULL on failure.
 */
static DBusTransport*
check_address (const char *address, DBusError *error)
{
  DBusAddressEntry **entries;
  DBusTransport *transport = NULL;
  int len, i;

  _dbus_assert (address != NULL);
257
  _DBUS_ASSERT_ERROR_IS_CLEAR (error);
258 259

  if (!dbus_parse_address (address, &entries, &len, error))
260
    return NULL;              /* not a valid address */
261 262 263

  for (i = 0; i < len; i++)
    {
264
      dbus_error_free (error);
265
      transport = _dbus_transport_open (entries[i], error);
266

267 268 269 270 271 272 273 274 275 276 277 278
      if (transport != NULL)
        break;
    }

  dbus_address_entries_free (entries);
  return transport;
}

/**
 * Creates a new transport for the "autostart" method.
 * This creates a client-side of a transport.
 *
279
 * @param scope scope of autolaunch (Windows only)
280 281 282 283
 * @param error address where an error can be returned.
 * @returns a new transport, or #NULL on failure.
 */
static DBusTransport*
284
_dbus_transport_new_for_autolaunch (const char *scope, DBusError *error)
285 286 287 288 289 290 291 292 293 294 295 296
{
  DBusString address;
  DBusTransport *result = NULL;

  _DBUS_ASSERT_ERROR_IS_CLEAR (error);

  if (!_dbus_string_init (&address))
    {
      dbus_set_error (error, DBUS_ERROR_NO_MEMORY, NULL);
      return NULL;
    }

297
  if (!_dbus_get_autolaunch_address (scope, &address, error))
298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325
    {
      _DBUS_ASSERT_ERROR_IS_SET (error);
      goto out;
    }

  result = check_address (_dbus_string_get_const_data (&address), error);
  if (result == NULL)
    _DBUS_ASSERT_ERROR_IS_SET (error);
  else
    _DBUS_ASSERT_ERROR_IS_CLEAR (error);

 out:
  _dbus_string_free (&address);
  return result;
}

static DBusTransportOpenResult
_dbus_transport_open_autolaunch (DBusAddressEntry  *entry,
                                 DBusTransport    **transport_p,
                                 DBusError         *error)
{
  const char *method;
  
  method = dbus_address_entry_get_method (entry);
  _dbus_assert (method != NULL);

  if (strcmp (method, "autolaunch") == 0)
    {
326 327 328
      const char *scope = dbus_address_entry_get_value (entry, "scope");

      *transport_p = _dbus_transport_new_for_autolaunch (scope, error);
329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347

      if (*transport_p == NULL)
        {
          _DBUS_ASSERT_ERROR_IS_SET (error);
          return DBUS_TRANSPORT_OPEN_DID_NOT_CONNECT;
        }
      else
        {
          _DBUS_ASSERT_ERROR_IS_CLEAR (error);
          return DBUS_TRANSPORT_OPEN_OK;
        }      
    }
  else
    {
      _DBUS_ASSERT_ERROR_IS_CLEAR (error);
      return DBUS_TRANSPORT_OPEN_NOT_HANDLED;
    }
}

348 349 350 351 352 353
static const struct {
  DBusTransportOpenResult (* func) (DBusAddressEntry *entry,
                                    DBusTransport   **transport_p,
                                    DBusError        *error);
} open_funcs[] = {
  { _dbus_transport_open_socket },
354 355
  { _dbus_transport_open_platform_specific },
  { _dbus_transport_open_autolaunch }
356
#ifdef DBUS_ENABLE_EMBEDDED_TESTS
357 358 359 360
  , { _dbus_transport_open_debug_pipe }
#endif
};

361
/**
362 363
 * Try to open a new transport for the given address entry.  (This
 * opens a client-side-of-the-connection transport.)
364
 * 
365
 * @param entry the address entry
366
 * @param error location to store reason for failure.
367 368 369
 * @returns new transport of #NULL on failure.
 */
DBusTransport*
370 371
_dbus_transport_open (DBusAddressEntry *entry,
                      DBusError        *error)
372 373
{
  DBusTransport *transport;
374 375
  const char *expected_guid_orig;
  char *expected_guid;
376
  int i;
377 378
  DBusError tmp_error = DBUS_ERROR_INIT;

379 380
  _DBUS_ASSERT_ERROR_IS_CLEAR (error);
  
381
  transport = NULL;
382 383 384 385 386 387 388 389
  expected_guid_orig = dbus_address_entry_get_value (entry, "guid");
  expected_guid = _dbus_strdup (expected_guid_orig);

  if (expected_guid_orig != NULL && expected_guid == NULL)
    {
      _DBUS_SET_OOM (error);
      return NULL;
    }
390

391
  for (i = 0; i < (int) _DBUS_N_ELEMENTS (open_funcs); ++i)
392
    {
393
      DBusTransportOpenResult result;
394

395 396
      _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
      result = (* open_funcs[i].func) (entry, &transport, &tmp_error);
397

398
      switch (result)
399
        {
400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415
        case DBUS_TRANSPORT_OPEN_OK:
          _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
          goto out;
          break;
        case DBUS_TRANSPORT_OPEN_NOT_HANDLED:
          _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
          /* keep going through the loop of open funcs */
          break;
        case DBUS_TRANSPORT_OPEN_BAD_ADDRESS:
          _DBUS_ASSERT_ERROR_IS_SET (&tmp_error);
          goto out;
          break;
        case DBUS_TRANSPORT_OPEN_DID_NOT_CONNECT:
          _DBUS_ASSERT_ERROR_IS_SET (&tmp_error);
          goto out;
          break;
416
        }
417
    }
418

419 420
 out:
  
421
  if (transport == NULL)
422
    {
423 424 425 426 427 428 429
      if (!dbus_error_is_set (&tmp_error))
        _dbus_set_bad_address (&tmp_error,
                               NULL, NULL,
                               "Unknown address type (examples of valid types are \"tcp\" and on UNIX \"unix\")");
      
      _DBUS_ASSERT_ERROR_IS_SET (&tmp_error);
      dbus_move_error(&tmp_error, error);
430 431 432 433
      dbus_free (expected_guid);
    }
  else
    {
434
      _DBUS_ASSERT_ERROR_IS_CLEAR (&tmp_error);
435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450

      /* In the case of autostart the initial guid is NULL
       * and the autostart transport recursively calls
       * _dbus_open_transport wich returns a transport
       * with a guid.  That guid is the definitive one.
       *
       * FIXME: if more transports are added they may have
       * an effect on the expected_guid semantics (i.e. 
       * expected_guid and transport->expected_guid may
       * both have values).  This is very unlikely though
       * we should either throw asserts here for those 
       * corner cases or refactor the code so it is 
       * clearer on what is expected and what is not
       */
      if(expected_guid)
        transport->expected_guid = expected_guid;
451
    }
452

453
  return transport;
454 455 456 457 458 459
}

/**
 * Increments the reference count for the transport.
 *
 * @param transport the transport.
460
 * @returns the transport.
461
 */
462
DBusTransport *
463 464
_dbus_transport_ref (DBusTransport *transport)
{
465 466
  _dbus_assert (transport->refcount > 0);
  
467
  transport->refcount += 1;
468 469

  return transport;
470 471 472 473 474 475 476 477 478 479 480 481 482 483
}

/**
 * Decrements the reference count for the transport.
 * Disconnects and finalizes the transport if
 * the reference count reaches zero.
 *
 * @param transport the transport.
 */
void
_dbus_transport_unref (DBusTransport *transport)
{
  _dbus_assert (transport != NULL);
  _dbus_assert (transport->refcount > 0);
484
  
485 486 487
  transport->refcount -= 1;
  if (transport->refcount == 0)
    {
488
      _dbus_verbose ("finalizing\n");
489
      
490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506
      _dbus_assert (transport->vtable->finalize != NULL);
      
      (* transport->vtable->finalize) (transport);
    }
}

/**
 * Closes our end of the connection to a remote application. Further
 * attempts to use this transport will fail. Only the first call to
 * _dbus_transport_disconnect() will have an effect.
 *
 * @param transport the transport.
 * 
 */
void
_dbus_transport_disconnect (DBusTransport *transport)
{
507
  _dbus_verbose ("start\n");
508
  
509
  _dbus_assert (transport->vtable->disconnect != NULL);
510
  
511 512
  if (transport->disconnected)
    return;
513

514
  (* transport->vtable->disconnect) (transport);
515
  
516
  transport->disconnected = TRUE;
517

518
  _dbus_verbose ("end\n");
519 520 521 522 523 524 525 526
}

/**
 * Returns #TRUE if the transport has not been disconnected.
 * Disconnection can result from _dbus_transport_disconnect()
 * or because the server drops its end of the connection.
 *
 * @param transport the transport.
527
 * @returns whether we're connected
528 529 530 531 532 533 534
 */
dbus_bool_t
_dbus_transport_get_is_connected (DBusTransport *transport)
{
  return !transport->disconnected;
}

535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691
static dbus_bool_t
auth_via_unix_user_function (DBusTransport *transport)
{
  DBusCredentials *auth_identity;
  dbus_bool_t allow;
  DBusConnection *connection;
  DBusAllowUnixUserFunction unix_user_function;
  void *unix_user_data;
  dbus_uid_t uid;

  /* Dropping the lock here probably isn't that safe. */
  
  auth_identity = _dbus_auth_get_identity (transport->auth);
  _dbus_assert (auth_identity != NULL);

  connection = transport->connection;
  unix_user_function = transport->unix_user_function;
  unix_user_data = transport->unix_user_data;
  uid = _dbus_credentials_get_unix_uid (auth_identity);
              
  _dbus_verbose ("unlock\n");
  _dbus_connection_unlock (connection);

  allow = (* unix_user_function) (connection,
                                  uid,
                                  unix_user_data);
              
  _dbus_verbose ("lock post unix user function\n");
  _dbus_connection_lock (connection);

  if (allow)
    {
      _dbus_verbose ("Client UID "DBUS_UID_FORMAT" authorized\n", uid);
    }
  else
    {
      _dbus_verbose ("Client UID "DBUS_UID_FORMAT
                     " was rejected, disconnecting\n",
                     _dbus_credentials_get_unix_uid (auth_identity));
      _dbus_transport_disconnect (transport);
    }

  return allow;
}

static dbus_bool_t
auth_via_windows_user_function (DBusTransport *transport)
{
  DBusCredentials *auth_identity;  
  dbus_bool_t allow;
  DBusConnection *connection;
  DBusAllowWindowsUserFunction windows_user_function;
  void *windows_user_data;
  char *windows_sid;

  /* Dropping the lock here probably isn't that safe. */
  
  auth_identity = _dbus_auth_get_identity (transport->auth);
  _dbus_assert (auth_identity != NULL);

  connection = transport->connection;
  windows_user_function = transport->windows_user_function;
  windows_user_data = transport->unix_user_data;
  windows_sid = _dbus_strdup (_dbus_credentials_get_windows_sid (auth_identity));

  if (windows_sid == NULL)
    {
      /* OOM */
      return FALSE;
    }
                
  _dbus_verbose ("unlock\n");
  _dbus_connection_unlock (connection);

  allow = (* windows_user_function) (connection,
                                     windows_sid,
                                     windows_user_data);
              
  _dbus_verbose ("lock post windows user function\n");
  _dbus_connection_lock (connection);

  if (allow)
    {
      _dbus_verbose ("Client SID '%s' authorized\n", windows_sid);
    }
  else
    {
      _dbus_verbose ("Client SID '%s' was rejected, disconnecting\n",
                     _dbus_credentials_get_windows_sid (auth_identity));
      _dbus_transport_disconnect (transport);
    }

  return allow;
}

static dbus_bool_t
auth_via_default_rules (DBusTransport *transport)
{
  DBusCredentials *auth_identity;
  DBusCredentials *our_identity;
  dbus_bool_t allow;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);
  _dbus_assert (auth_identity != NULL);

  /* By default, connection is allowed if the client is 1) root or 2)
   * has the same UID as us or 3) anonymous is allowed.
   */
  
  our_identity = _dbus_credentials_new_from_current_process ();
  if (our_identity == NULL)
    {
      /* OOM */
      return FALSE;
    }
              
  if (transport->allow_anonymous ||
      _dbus_credentials_get_unix_uid (auth_identity) == 0 ||
      _dbus_credentials_same_user (our_identity,
                                   auth_identity))
    {
      if (_dbus_credentials_include(our_identity,DBUS_CREDENTIAL_WINDOWS_SID))
          _dbus_verbose ("Client authorized as SID '%s'"
                         "matching our SID '%s'\n",
                         _dbus_credentials_get_windows_sid(auth_identity),
                         _dbus_credentials_get_windows_sid(our_identity));
      else
          _dbus_verbose ("Client authorized as UID "DBUS_UID_FORMAT
                         " matching our UID "DBUS_UID_FORMAT"\n",
                         _dbus_credentials_get_unix_uid(auth_identity),
                         _dbus_credentials_get_unix_uid(our_identity));
      /* We have authenticated! */
      allow = TRUE;
    }
  else
    {
      if (_dbus_credentials_include(our_identity,DBUS_CREDENTIAL_WINDOWS_SID))
          _dbus_verbose ("Client authorized as SID '%s'"
                         " but our SID is '%s', disconnecting\n",
                         (_dbus_credentials_get_windows_sid(auth_identity) ?
                          _dbus_credentials_get_windows_sid(auth_identity) : "<null>"),
                         (_dbus_credentials_get_windows_sid(our_identity) ?
                          _dbus_credentials_get_windows_sid(our_identity) : "<null>"));
      else
          _dbus_verbose ("Client authorized as UID "DBUS_UID_FORMAT
                         " but our UID is "DBUS_UID_FORMAT", disconnecting\n",
                         _dbus_credentials_get_unix_uid(auth_identity),
                         _dbus_credentials_get_unix_uid(our_identity));
      _dbus_transport_disconnect (transport);
      allow = FALSE;
    }  

  _dbus_credentials_unref (our_identity);
  
  return allow;
}

692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707
/**
 * Returns #TRUE if we have been authenticated. It will return #TRUE even if
 * the transport is now disconnected, but was ever authenticated before
 * disconnecting.
 *
 * This replaces the older _dbus_transport_get_is_authenticated() which
 * had side-effects.
 *
 * @param transport the transport
 * @returns whether we're authenticated
 */
dbus_bool_t
_dbus_transport_peek_is_authenticated (DBusTransport *transport)
{
  return transport->authenticated;
}
708

709
/**
710 711 712 713 714 715 716 717 718
 * Returns #TRUE if we have been authenticated. It will return #TRUE even if
 * the transport is now disconnected, but was ever authenticated before
 * disconnecting.
 *
 * If we have not finished authenticating, but we have enough buffered input
 * to finish the job, then this function will do so before it returns.
 *
 * This used to be called _dbus_transport_get_is_authenticated(), but that
 * name seems inappropriate for a function with side-effects.
719
 *
720
 * @todo we drop connection->mutex when calling the unix_user_function,
721
 * and windows_user_function, which may not be safe really.
722
 *
723 724 725 726
 * @param transport the transport
 * @returns whether we're authenticated
 */
dbus_bool_t
727
_dbus_transport_try_to_authenticate (DBusTransport *transport)
728
{  
729 730 731 732
  if (transport->authenticated)
    return TRUE;
  else
    {
733 734
      dbus_bool_t maybe_authenticated;
      
735 736
      if (transport->disconnected)
        return FALSE;
737

738 739 740
      /* paranoia ref since we call user callbacks sometimes */
      _dbus_connection_ref_unlocked (transport->connection);
      
741
      maybe_authenticated =
742
        (!(transport->send_credentials_pending ||
743
           transport->receive_credentials_pending));
744

745 746 747 748 749 750 751 752 753 754 755
      if (maybe_authenticated)
        {
          switch (_dbus_auth_do_work (transport->auth))
            {
            case DBUS_AUTH_STATE_AUTHENTICATED:
              /* leave as maybe_authenticated */
              break;
            default:
              maybe_authenticated = FALSE;
            }
        }
756

757 758
      /* If we're the client, verify the GUID
       */
759 760 761 762 763 764 765 766 767 768 769 770 771
      if (maybe_authenticated && !transport->is_server)
        {
          const char *server_guid;

          server_guid = _dbus_auth_get_guid_from_server (transport->auth);
          _dbus_assert (server_guid != NULL);

          if (transport->expected_guid &&
              strcmp (transport->expected_guid, server_guid) != 0)
            {
              _dbus_verbose ("Client expected GUID '%s' and we got '%s' from the server\n",
                             transport->expected_guid, server_guid);
              _dbus_transport_disconnect (transport);
772
              _dbus_connection_unref_unlocked (transport->connection);
773 774 775
              return FALSE;
            }
        }
776

777 778 779 780
      /* If we're the server, see if we want to allow this identity to proceed.
       */
      if (maybe_authenticated && transport->is_server)
        {
781
          dbus_bool_t allow;
782
          DBusCredentials *auth_identity;
783
          
784 785 786
          auth_identity = _dbus_auth_get_identity (transport->auth);
          _dbus_assert (auth_identity != NULL);
          
787 788 789 790 791 792
          /* If we have an auth'd user and a user function, delegate
           * deciding whether auth credentials are good enough to the
           * app; otherwise, use our default decision process.
           */
          if (transport->unix_user_function != NULL &&
              _dbus_credentials_include (auth_identity, DBUS_CREDENTIAL_UNIX_USER_ID))
793
            {
794 795 796 797 798 799 800 801 802 803
              allow = auth_via_unix_user_function (transport);
            }
          else if (transport->windows_user_function != NULL &&
                   _dbus_credentials_include (auth_identity, DBUS_CREDENTIAL_WINDOWS_SID))
            {
              allow = auth_via_windows_user_function (transport);
            }      
          else
            {
              allow = auth_via_default_rules (transport);
804
            }
805 806 807
          
          if (!allow)
            maybe_authenticated = FALSE;
808 809
        }

810
      transport->authenticated = maybe_authenticated;
811

812
      _dbus_connection_unref_unlocked (transport->connection);
813
      return maybe_authenticated;
814 815 816
    }
}

817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838
/**
 * See dbus_connection_get_is_anonymous().
 *
 * @param transport the transport
 * @returns #TRUE if not authenticated or authenticated as anonymous
 */
dbus_bool_t
_dbus_transport_get_is_anonymous (DBusTransport *transport)
{
  DBusCredentials *auth_identity;
  
  if (!transport->authenticated)
    return TRUE;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_are_anonymous (auth_identity))
    return TRUE;
  else
    return FALSE;
}

839 840 841 842 843 844 845 846 847 848 849 850
/**
 * Returns TRUE if the transport supports sending unix fds.
 *
 * @param transport the transport
 * @returns #TRUE if TRUE it is possible to send unix fds across the transport.
 */
dbus_bool_t
_dbus_transport_can_pass_unix_fd(DBusTransport *transport)
{
  return DBUS_TRANSPORT_CAN_SEND_UNIX_FD(transport);
}

851 852 853 854 855 856 857 858 859 860 861 862 863
/**
 * Gets the address of a transport. It will be
 * #NULL for a server-side transport.
 *
 * @param transport the transport
 * @returns transport's address
 */
const char*
_dbus_transport_get_address (DBusTransport *transport)
{
  return transport->address;
}

864 865 866 867 868 869 870 871 872 873 874 875
/**
 * Gets the id of the server we are connected to (see
 * dbus_server_get_id()). Only works on client side.
 *
 * @param transport the transport
 * @returns transport's server's id or #NULL if we are the server side
 */
const char*
_dbus_transport_get_server_id (DBusTransport *transport)
{
  if (transport->is_server)
    return NULL;
876 877
  else if (transport->authenticated)
    return _dbus_auth_get_guid_from_server (transport->auth);
878 879 880 881
  else
    return transport->expected_guid;
}

882 883 884 885 886 887 888
/**
 * Handles a watch by reading data, writing data, or disconnecting
 * the transport, as appropriate for the given condition.
 *
 * @param transport the transport.
 * @param watch the watch.
 * @param condition the current state of the watched file descriptor.
889
 * @returns #FALSE if not enough memory to fully handle the watch
890
 */
891
dbus_bool_t
892 893 894 895
_dbus_transport_handle_watch (DBusTransport           *transport,
                              DBusWatch               *watch,
                              unsigned int             condition)
{
896 897
  dbus_bool_t retval;
  
898 899 900
  _dbus_assert (transport->vtable->handle_watch != NULL);

  if (transport->disconnected)
901
    return TRUE;
902

903
  if (dbus_watch_get_socket (watch) < 0)
904
    {
905
      _dbus_warn_check_failed ("Tried to handle an invalidated watch; this watch should have been removed\n");
906
      return TRUE;
907
    }
908
  
909 910
  _dbus_watch_sanitize_condition (watch, &condition);

911
  _dbus_transport_ref (transport);
912
  _dbus_watch_ref (watch);
913
  retval = (* transport->vtable->handle_watch) (transport, watch, condition);
914
  _dbus_watch_unref (watch);
915
  _dbus_transport_unref (transport);
916 917

  return retval;
918 919 920 921 922 923 924 925 926
}

/**
 * Sets the connection using this transport. Allows the transport
 * to add watches to the connection, queue incoming messages,
 * and pull outgoing messages.
 *
 * @param transport the transport.
 * @param connection the connection.
927
 * @returns #FALSE if not enough memory
928
 */
929
dbus_bool_t
930 931 932 933 934 935 936 937
_dbus_transport_set_connection (DBusTransport  *transport,
                                DBusConnection *connection)
{
  _dbus_assert (transport->vtable->connection_set != NULL);
  _dbus_assert (transport->connection == NULL);
  
  transport->connection = connection;

938
  _dbus_transport_ref (transport);
939 940
  if (!(* transport->vtable->connection_set) (transport))
    transport->connection = NULL;
941
  _dbus_transport_unref (transport);
942 943

  return transport->connection != NULL;
944 945
}

946
/**
947
 * Get the socket file descriptor, if any.
948 949 950 951 952 953
 *
 * @param transport the transport
 * @param fd_p pointer to fill in with the descriptor
 * @returns #TRUE if a descriptor was available
 */
dbus_bool_t
954
_dbus_transport_get_socket_fd (DBusTransport *transport,
955
                               DBusSocket    *fd_p)
956 957 958
{
  dbus_bool_t retval;
  
959
  if (transport->vtable->get_socket_fd == NULL)
960 961 962 963 964 965 966
    return FALSE;

  if (transport->disconnected)
    return FALSE;

  _dbus_transport_ref (transport);

967 968
  retval = (* transport->vtable->get_socket_fd) (transport,
                                                 fd_p);
969 970 971 972 973 974
  
  _dbus_transport_unref (transport);

  return retval;
}

975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992
/**
 * Performs a single poll()/select() on the transport's file
 * descriptors and then reads/writes data as appropriate,
 * queueing incoming messages and sending outgoing messages.
 * This is the backend for _dbus_connection_do_iteration().
 * See _dbus_connection_do_iteration() for full details.
 *
 * @param transport the transport.
 * @param flags indicates whether to read or write, and whether to block.
 * @param timeout_milliseconds if blocking, timeout or -1 for no timeout.
 */
void
_dbus_transport_do_iteration (DBusTransport  *transport,
                              unsigned int    flags,
                              int             timeout_milliseconds)
{
  _dbus_assert (transport->vtable->do_iteration != NULL);

993 994 995
  _dbus_verbose ("Transport iteration flags 0x%x timeout %d connected = %d\n",
                 flags, timeout_milliseconds, !transport->disconnected);
  
996 997 998 999 1000
  if ((flags & (DBUS_ITERATION_DO_WRITING |
                DBUS_ITERATION_DO_READING)) == 0)
    return; /* Nothing to do */

  if (transport->disconnected)
1001
    return;
1002

1003
  _dbus_transport_ref (transport);
1004 1005
  (* transport->vtable->do_iteration) (transport, flags,
                                       timeout_milliseconds);
1006
  _dbus_transport_unref (transport);
1007

1008
  _dbus_verbose ("end\n");
1009 1010
}

1011 1012 1013 1014 1015 1016 1017 1018 1019 1020
static dbus_bool_t
recover_unused_bytes (DBusTransport *transport)
{
  if (_dbus_auth_needs_decoding (transport->auth))
    {
      DBusString plaintext;
      const DBusString *encoded;
      DBusString *buffer;
      int orig_len;
      
1021
      if (!_dbus_string_init (&plaintext))
1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050
        goto nomem;
      
      _dbus_auth_get_unused_bytes (transport->auth,
                                   &encoded);

      if (!_dbus_auth_decode_data (transport->auth,
                                   encoded, &plaintext))
        {
          _dbus_string_free (&plaintext);
          goto nomem;
        }
      
      _dbus_message_loader_get_buffer (transport->loader,
                                       &buffer);
      
      orig_len = _dbus_string_get_length (buffer);
      
      if (!_dbus_string_move (&plaintext, 0, buffer,
                              orig_len))
        {
          _dbus_string_free (&plaintext);
          goto nomem;
        }
      
      _dbus_verbose (" %d unused bytes sent to message loader\n", 
                     _dbus_string_get_length (buffer) -
                     orig_len);
      
      _dbus_message_loader_return_buffer (transport->loader,
1051
                                          buffer);
1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080

      _dbus_auth_delete_unused_bytes (transport->auth);
      
      _dbus_string_free (&plaintext);
    }
  else
    {
      const DBusString *bytes;
      DBusString *buffer;
      int orig_len;
      dbus_bool_t succeeded;

      _dbus_message_loader_get_buffer (transport->loader,
                                       &buffer);
                
      orig_len = _dbus_string_get_length (buffer);
                
      _dbus_auth_get_unused_bytes (transport->auth,
                                   &bytes);

      succeeded = TRUE;
      if (!_dbus_string_copy (bytes, 0, buffer, _dbus_string_get_length (buffer)))
        succeeded = FALSE;
      
      _dbus_verbose (" %d unused bytes sent to message loader\n", 
                     _dbus_string_get_length (buffer) -
                     orig_len);
      
      _dbus_message_loader_return_buffer (transport->loader,
1081
                                          buffer);
1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095

      if (succeeded)
        _dbus_auth_delete_unused_bytes (transport->auth);
      else
        goto nomem;
    }

  return TRUE;

 nomem:
  _dbus_verbose ("Not enough memory to transfer unused bytes from auth conversation\n");
  return FALSE;
}

1096 1097 1098 1099 1100 1101 1102 1103 1104 1105
/**
 * Reports our current dispatch status (whether there's buffered
 * data to be queued as messages, or not, or we need memory).
 *
 * @param transport the transport
 * @returns current status
 */
DBusDispatchStatus
_dbus_transport_get_dispatch_status (DBusTransport *transport)
{
1106 1107
  if (_dbus_counter_get_size_value (transport->live_messages) >= transport->max_live_messages_size ||
      _dbus_counter_get_unix_fd_value (transport->live_messages) >= transport->max_live_messages_unix_fds)
1108 1109
    return DBUS_DISPATCH_COMPLETE; /* complete for now */

1110
  if (!_dbus_transport_try_to_authenticate (transport))
1111
    {
1112 1113 1114
      if (_dbus_auth_do_work (transport->auth) ==
          DBUS_AUTH_STATE_WAITING_FOR_MEMORY)
        return DBUS_DISPATCH_NEED_MEMORY;
1115
      else if (!_dbus_transport_try_to_authenticate (transport))
1116
        return DBUS_DISPATCH_COMPLETE;
1117
    }
1118 1119 1120 1121 1122 1123

  if (!transport->unused_bytes_recovered &&
      !recover_unused_bytes (transport))
    return DBUS_DISPATCH_NEED_MEMORY;

  transport->unused_bytes_recovered = TRUE;
1124
  
1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145
  if (!_dbus_message_loader_queue_messages (transport->loader))
    return DBUS_DISPATCH_NEED_MEMORY;

  if (_dbus_message_loader_peek_message (transport->loader) != NULL)
    return DBUS_DISPATCH_DATA_REMAINS;
  else
    return DBUS_DISPATCH_COMPLETE;
}

/**
 * Processes data we've read while handling a watch, potentially
 * converting some of it to messages and queueing those messages on
 * the connection.
 *
 * @param transport the transport
 * @returns #TRUE if we had enough memory to queue all messages
 */
dbus_bool_t
_dbus_transport_queue_messages (DBusTransport *transport)
{
  DBusDispatchStatus status;
1146

1147
#if 0
1148
  _dbus_verbose ("_dbus_transport_queue_messages()\n");
1149
#endif
1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163
  
  /* Queue any messages */
  while ((status = _dbus_transport_get_dispatch_status (transport)) == DBUS_DISPATCH_DATA_REMAINS)
    {
      DBusMessage *message;
      DBusList *link;

      link = _dbus_message_loader_pop_message_link (transport->loader);
      _dbus_assert (link != NULL);
      
      message = link->data;
      
      _dbus_verbose ("queueing received message %p\n", message);

1164
      if (!_dbus_message_add_counter (message, transport->live_messages))
1165 1166 1167 1168 1169 1170 1171 1172
        {
          _dbus_message_loader_putback_message_link (transport->loader,
                                                     link);
          status = DBUS_DISPATCH_NEED_MEMORY;
          break;
        }
      else
        {
1173 1174 1175 1176 1177 1178 1179
          /* We didn't call the notify function when we added the counter, so
           * catch up now. Since we have the connection's lock, it's desirable
           * that we bypass the notify function and call this virtual method
           * directly. */
          if (transport->vtable->live_messages_changed)
            (* transport->vtable->live_messages_changed) (transport);

1180 1181 1182 1183
          /* pass ownership of link and message ref to connection */
          _dbus_connection_queue_received_message_link (transport->connection,
                                                        link);
        }
1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194
    }

  if (_dbus_message_loader_get_is_corrupted (transport->loader))
    {
      _dbus_verbose ("Corrupted message stream, disconnecting\n");
      _dbus_transport_disconnect (transport);
    }

  return status != DBUS_DISPATCH_NEED_MEMORY;
}

1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207
/**
 * See dbus_connection_set_max_message_size().
 *
 * @param transport the transport
 * @param size the max size of a single message
 */
void
_dbus_transport_set_max_message_size (DBusTransport  *transport,
                                      long            size)
{
  _dbus_message_loader_set_max_message_size (transport->loader, size);
}

1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220
/**
 * See dbus_connection_set_max_message_unix_fds().
 *
 * @param transport the transport
 * @param n the max number of unix fds of a single message
 */
void
_dbus_transport_set_max_message_unix_fds (DBusTransport  *transport,
                                          long            n)
{
  _dbus_message_loader_set_max_message_unix_fds (transport->loader, n);
}

1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232
/**
 * See dbus_connection_get_max_message_size().
 *
 * @param transport the transport
 * @returns max message size
 */
long
_dbus_transport_get_max_message_size (DBusTransport  *transport)
{
  return _dbus_message_loader_get_max_message_size (transport->loader);
}

1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244
/**
 * See dbus_connection_get_max_message_unix_fds().
 *
 * @param transport the transport
 * @returns max message unix fds
 */
long
_dbus_transport_get_max_message_unix_fds (DBusTransport  *transport)
{
  return _dbus_message_loader_get_max_message_unix_fds (transport->loader);
}

1245
/**
1246
 * See dbus_connection_set_max_received_size().
1247 1248 1249 1250 1251
 *
 * @param transport the transport
 * @param size the max size of all incoming messages
 */
void
1252 1253
_dbus_transport_set_max_received_size (DBusTransport  *transport,
                                       long            size)
1254 1255
{
  transport->max_live_messages_size = size;
1256
  _dbus_counter_set_notify (transport->live_messages,
1257
                            transport->max_live_messages_size,
1258 1259
                            transport->max_live_messages_unix_fds,
                            live_messages_notify,
1260 1261 1262
                            transport);
}

1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279
/**
 * See dbus_connection_set_max_received_unix_fds().
 *
 * @param transport the transport
 * @param n the max unix fds of all incoming messages
 */
void
_dbus_transport_set_max_received_unix_fds (DBusTransport  *transport,
                                           long            n)
{
  transport->max_live_messages_unix_fds = n;
  _dbus_counter_set_notify (transport->live_messages,
                            transport->max_live_messages_size,
                            transport->max_live_messages_unix_fds,
                            live_messages_notify,
                            transport);
}
1280 1281

/**
1282
 * See dbus_connection_get_max_received_size().
1283 1284 1285 1286 1287
 *
 * @param transport the transport
 * @returns max bytes for all live messages
 */
long
1288
_dbus_transport_get_max_received_size (DBusTransport  *transport)
1289 1290 1291 1292
{
  return transport->max_live_messages_size;
}

1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304
/**
 * See dbus_connection_set_max_received_unix_fds().
 *
 * @param transport the transport
 * @returns max unix fds for all live messages
 */
long
_dbus_transport_get_max_received_unix_fds (DBusTransport  *transport)
{
  return transport->max_live_messages_unix_fds;
}

1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315
/**
 * See dbus_connection_get_unix_user().
 *
 * @param transport the transport
 * @param uid return location for the user ID
 * @returns #TRUE if uid is filled in with a valid user ID
 */
dbus_bool_t
_dbus_transport_get_unix_user (DBusTransport *transport,
                               unsigned long *uid)
{
1316
  DBusCredentials *auth_identity;
1317

1318 1319 1320 1321
  *uid = _DBUS_INT32_MAX; /* better than some root or system user in
                           * case of bugs in the caller. Caller should
                           * never use this value on purpose, however.
                           */
1322 1323 1324 1325
  
  if (!transport->authenticated)
    return FALSE;
  
1326
  auth_identity = _dbus_auth_get_identity (transport->auth);
1327

1328 1329
  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_UNIX_USER_ID))
1330
    {
1331
      *uid = _dbus_credentials_get_unix_uid (auth_identity);
1332 1333 1334 1335 1336 1337
      return TRUE;
    }
  else
    return FALSE;
}

1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348
/**
 * See dbus_connection_get_unix_process_id().
 *
 * @param transport the transport
 * @param pid return location for the process ID
 * @returns #TRUE if uid is filled in with a valid process ID
 */
dbus_bool_t
_dbus_transport_get_unix_process_id (DBusTransport *transport,
				     unsigned long *pid)
{
1349
  DBusCredentials *auth_identity;
1350 1351 1352 1353 1354 1355 1356 1357 1358

  *pid = DBUS_PID_UNSET; /* Caller should never use this value on purpose,
			  * but we set it to a safe number, INT_MAX,
			  * just to root out possible bugs in bad callers.
			  */
  
  if (!transport->authenticated)
    return FALSE;
  
1359
  auth_identity = _dbus_auth_get_identity (transport->auth);
1360

1361 1362
  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_UNIX_PROCESS_ID))
1363
    {
1364
      *pid = _dbus_credentials_get_pid (auth_identity);
1365 1366 1367 1368 1369 1370
      return TRUE;
    }
  else
    return FALSE;
}

1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404
/**
 * See dbus_connection_get_adt_audit_session_data().
 *
 * @param transport the transport
 * @param data return location for the ADT audit data 
 * @param data_size return length of audit data
 * @returns #TRUE if audit data is filled in with a valid ucred
 */
dbus_bool_t
_dbus_transport_get_adt_audit_session_data (DBusTransport      *transport,
                                            void              **data,
                                            int                *data_size)
{
  DBusCredentials *auth_identity;

  *data = NULL;
  *data_size = 0;
  
  if (!transport->authenticated)
    return FALSE;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_ADT_AUDIT_DATA_ID))
    {
      *data = (void *) _dbus_credentials_get_adt_audit_data (auth_identity);
      *data_size = _dbus_credentials_get_adt_audit_data_size (auth_identity);
      return TRUE;
    }
  else
    return FALSE;
}

1405 1406 1407 1408 1409 1410 1411 1412 1413 1414
/**
 * See dbus_connection_set_unix_user_function().
 *
 * @param transport the transport
 * @param function the predicate
 * @param data data to pass to the predicate
 * @param free_data_function function to free the data
 * @param old_data the old user data to be freed
 * @param old_free_data_function old free data function to free it with
 */
1415
void
1416 1417 1418 1419 1420 1421
_dbus_transport_set_unix_user_function (DBusTransport             *transport,
                                        DBusAllowUnixUserFunction  function,
                                        void                      *data,
                                        DBusFreeFunction           free_data_function,
                                        void                     **old_data,
                                        DBusFreeFunction          *old_free_data_function)
1422 1423 1424 1425 1426 1427 1428
{  
  *old_data = transport->unix_user_data;
  *old_free_data_function = transport->free_unix_user_data;

  transport->unix_user_function = function;
  transport->unix_user_data = data;
  transport->free_unix_user_data = free_data_function;
1429 1430
}

1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457
dbus_bool_t
_dbus_transport_get_linux_security_label (DBusTransport  *transport,
                                          char          **label_p)
{
  DBusCredentials *auth_identity;

  *label_p = NULL;

  if (!transport->authenticated)
    return FALSE;

  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_LINUX_SECURITY_LABEL))
    {
      /* If no memory, we are supposed to return TRUE and set NULL */
      *label_p = _dbus_strdup (_dbus_credentials_get_linux_security_label (auth_identity));

      return TRUE;
    }
  else
    {
      return FALSE;
    }
}

1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500
/**
 * See dbus_connection_get_windows_user().
 *
 * @param transport the transport
 * @param windows_sid_p return location for the user ID
 * @returns #TRUE if user is available; the returned value may still be #NULL if no memory to copy it
 */
dbus_bool_t
_dbus_transport_get_windows_user (DBusTransport              *transport,
                                  char                      **windows_sid_p)
{
  DBusCredentials *auth_identity;

  *windows_sid_p = NULL;
  
  if (!transport->authenticated)
    return FALSE;
  
  auth_identity = _dbus_auth_get_identity (transport->auth);

  if (_dbus_credentials_include (auth_identity,
                                 DBUS_CREDENTIAL_WINDOWS_SID))
    {
      /* If no memory, we are supposed to return TRUE and set NULL */
      *windows_sid_p = _dbus_strdup (_dbus_credentials_get_windows_sid (auth_identity));

      return TRUE;
    }
  else
    return FALSE;
}

/**
 * See dbus_connection_set_windows_user_function().
 *
 * @param transport the transport
 * @param function the predicate
 * @param data data to pass to the predicate
 * @param free_data_function function to free the data
 * @param old_data the old user data to be freed
 * @param old_free_data_function old free data function to free it with
 */

1501
void
1502 1503 1504 1505 1506 1507 1508
_dbus_transport_set_windows_user_function (DBusTransport              *transport,
                                           DBusAllowWindowsUserFunction   function,
                                           void                       *data,
                                           DBusFreeFunction            free_data_function,
                                           void                      **old_data,
                                           DBusFreeFunction           *old_free_data_function)
{
1509 1510 1511 1512 1513 1514
  *old_data = transport->windows_user_data;
  *old_free_data_function = transport->free_windows_user_data;

  transport->windows_user_function = function;
  transport->windows_user_data = data;
  transport->free_windows_user_data = free_data_function;
1515 1516
}

1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531
/**
 * Sets the SASL authentication mechanisms supported by this transport.
 *
 * @param transport the transport
 * @param mechanisms the #NULL-terminated array of mechanisms
 *
 * @returns #FALSE if no memory
 */
dbus_bool_t
_dbus_transport_set_auth_mechanisms (DBusTransport  *transport,
                                     const char    **mechanisms)
{
  return _dbus_auth_set_mechanisms (transport->auth, mechanisms);
}

1532 1533 1534 1535 1536 1537
/**
 * See dbus_connection_set_allow_anonymous()
 *
 * @param transport the transport
 * @param value #TRUE to allow anonymous connection
 */
1538
void
1539 1540 1541
_dbus_transport_set_allow_anonymous (DBusTransport              *transport,
                                     dbus_bool_t                 value)
{
1542
  transport->allow_anonymous = value != FALSE;
1543
}
1544

1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555
/**
 * Return how many file descriptors are pending in the loader
 *
 * @param transport the transport
 */
int
_dbus_transport_get_pending_fds_count (DBusTransport *transport)
{
  return _dbus_message_loader_get_pending_fds_count (transport->loader);
}

1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571
/**
 * Register a function to be called whenever the number of pending file
 * descriptors in the loader change.
 *
 * @param transport the transport
 * @param callback the callback
 */
void
_dbus_transport_set_pending_fds_function (DBusTransport *transport,
                                           void (* callback) (void *),
                                           void *data)
{
  _dbus_message_loader_set_pending_fds_function (transport->loader,
                                                 callback, data);
}

1572 1573 1574 1575
#ifdef DBUS_ENABLE_STATS
void
_dbus_transport_get_stats (DBusTransport  *transport,
                           dbus_uint32_t  *queue_bytes,
1576 1577 1578
                           dbus_uint32_t  *queue_fds,
                           dbus_uint32_t  *peak_queue_bytes,
                           dbus_uint32_t  *peak_queue_fds)
1579 1580 1581 1582 1583 1584
{
  if (queue_bytes != NULL)
    *queue_bytes = _dbus_counter_get_size_value (transport->live_messages);

  if (queue_fds != NULL)
    *queue_fds = _dbus_counter_get_unix_fd_value (transport->live_messages);
1585 1586 1587 1588 1589 1590

  if (peak_queue_bytes != NULL)
    *peak_queue_bytes = _dbus_counter_get_peak_size_value (transport->live_messages);

  if (peak_queue_fds != NULL)
    *peak_queue_fds = _dbus_counter_get_peak_unix_fd_value (transport->live_messages);
1591 1592 1593
}
#endif /* DBUS_ENABLE_STATS */

1594
/** @} */