12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221322232233224322532263227322832293230323132323233323432353236323732383239324032413242324332443245324632473248324932503251325232533254325532563257325832593260326132623263326432653266326732683269327032713272327332743275327632773278327932803281328232833284328532863287328832893290329132923293329432953296329732983299330033013302330333043305330633073308330933103311331233133314331533163317331833193320332133223323332433253326332733283329333033313332333333343335333633373338333933403341334233433344334533463347334833493350335133523353335433553356335733583359336033613362336333643365336633673368336933703371337233733374337533763377337833793380338133823383338433853386338733883389339033913392339333943395339633973398339934003401340234033404340534063407340834093410341134123413341434153416341734183419342034213422342334243425342634273428342934303431343234333434343534363437343834393440344134423443344434453446344734483449345034513452345334543455345634573458345934603461346234633464346534663467346834693470347134723473347434753476347734783479348034813482348334843485348634873488348934903491349234933494349534963497349834993500350135023503350435053506350735083509351035113512351335143515351635173518351935203521352235233524352535263527352835293530353135323533353435353536353735383539354035413542354335443545354635473548354935503551355235533554355535563557355835593560356135623563356435653566356735683569357035713572357335743575357635773578357935803581358235833584358535863587358835893590359135923593359435953596359735983599360036013602360336043605360636073608360936103611361236133614361536163617361836193620362136223623362436253626362736283629363036313632363336343635363636373638363936403641364236433644364536463647364836493650365136523653365436553656365736583659366036613662366336643665366636673668366936703671367236733674367536763677367836793680368136823683368436853686368736883689369036913692369336943695369636973698369937003701370237033704370537063707370837093710371137123713371437153716371737183719372037213722372337243725372637273728372937303731373237333734373537363737373837393740374137423743374437453746374737483749375037513752375337543755 |
- /* Copyright (c) 2001 Matej Pfajfar.
- * Copyright (c) 2001-2004, Roger Dingledine.
- * Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson. */
- /* See LICENSE for licensing information */
- /* $Id$ */
- const char routerlist_c_id[] =
- "$Id$";
- /**
- * \file routerlist.c
- * \brief Code to
- * maintain and access the global list of routerinfos for known
- * servers.
- **/
- #include "or.h"
- /****************************************************************************/
- /* static function prototypes */
- static routerstatus_t *router_pick_directory_server_impl(int requireother,
- int fascistfirewall,
- int for_v2_directory);
- static routerstatus_t *router_pick_trusteddirserver_impl(
- int need_v1_authority, int requireother, int fascistfirewall);
- static void mark_all_trusteddirservers_up(void);
- static int router_nickname_is_in_list(routerinfo_t *router, const char *list);
- static int router_nickname_matches(routerinfo_t *router, const char *nickname);
- static void routerstatus_list_update_from_networkstatus(time_t now);
- static void local_routerstatus_free(local_routerstatus_t *rs);
- static void trusted_dir_server_free(trusted_dir_server_t *ds);
- static void update_networkstatus_cache_downloads(time_t now);
- static void update_networkstatus_client_downloads(time_t now);
- static int signed_desc_digest_is_recognized(signed_descriptor_t *desc);
- static void routerlist_assert_ok(routerlist_t *rl);
- #define MAX_DESCRIPTORS_PER_ROUTER 5
- /****************************************************************************/
- /** Global list of a trusted_dir_server_t object for each trusted directory
- * server. */
- static smartlist_t *trusted_dir_servers = NULL;
- /** Global list of all of the routers that we know about. */
- static routerlist_t *routerlist = NULL;
- /** Global list of all of the current network_status documents that we know
- * about. This list is kept sorted by published_on. */
- static smartlist_t *networkstatus_list = NULL;
- /** Global list of local_routerstatus_t for each router, known or unknown. */
- static smartlist_t *routerstatus_list = NULL;
- /** True iff any member of networkstatus_list has changed since the last time
- * we called routerstatus_list_update_from_networkstatus(). */
- static int networkstatus_list_has_changed = 0;
- /** True iff any element of routerstatus_list has changed since the last
- * time we called routers_update_all_from_networkstatus().*/
- static int routerstatus_list_has_changed = 0;
- /** List of strings for nicknames we've already warned about and that are
- * still unknown / unavailable. */
- static smartlist_t *warned_nicknames = NULL;
- /** List of strings for nicknames or fingerprints we've already warned about
- * and that are still conflicted. */
- static smartlist_t *warned_conflicts = NULL;
- /** The last time we tried to download any routerdesc, or 0 for "never". We
- * use this to rate-limit download attempts when the number of routerdescs to
- * download is low. */
- static time_t last_routerdesc_download_attempted = 0;
- /** The last time we tried to download a networkstatus, or 0 for "never". We
- * use this to rate-limit download attempts for directory caches (including
- * mirrors). Clients don't use this now. */
- static time_t last_networkstatus_download_attempted = 0;
- /* DOCDOC */
- static int have_warned_about_unverified_status = 0;
- static int have_warned_about_old_version = 0;
- static int have_warned_about_new_version = 0;
- /** Repopulate our list of network_status_t objects from the list cached on
- * disk. Return 0 on success, -1 on failure. */
- int
- router_reload_networkstatus(void)
- {
- char filename[512];
- struct stat st;
- smartlist_t *entries;
- char *s;
- tor_assert(get_options()->DataDirectory);
- if (!networkstatus_list)
- networkstatus_list = smartlist_create();
- tor_snprintf(filename,sizeof(filename),"%s/cached-status",
- get_options()->DataDirectory);
- entries = tor_listdir(filename);
- SMARTLIST_FOREACH(entries, const char *, fn, {
- char buf[DIGEST_LEN];
- if (strlen(fn) != HEX_DIGEST_LEN ||
- base16_decode(buf, sizeof(buf), fn, strlen(fn))) {
- info(LD_DIR,
- "Skipping cached-status file with unexpected name \"%s\"",fn);
- continue;
- }
- tor_snprintf(filename,sizeof(filename),"%s/cached-status/%s",
- get_options()->DataDirectory, fn);
- s = read_file_to_str(filename, 0);
- if (s) {
- stat(filename, &st);
- if (router_set_networkstatus(s, st.st_mtime, NS_FROM_CACHE, NULL)<0) {
- warn(LD_FS, "Couldn't load networkstatus from \"%s\"",filename);
- }
- tor_free(s);
- }
- });
- SMARTLIST_FOREACH(entries, char *, fn, tor_free(fn));
- smartlist_free(entries);
- networkstatus_list_clean(time(NULL));
- routers_update_all_from_networkstatus();
- return 0;
- }
- /* Router descriptor storage.
- *
- * Routerdescs are stored in a big file, named "cached-routers". As new
- * routerdescs arrive, we append them to a journal file named
- * "cached-routers.new".
- *
- * From time to time, we replace "cached-routers" with a new file containing
- * only the live, non-superseded descriptors, and clear cached-routers.new.
- *
- * On startup, we read both files.
- */
- /** The size of the router log, in bytes. */
- static size_t router_journal_len = 0;
- /** The size of the router store, in bytes. */
- static size_t router_store_len = 0;
- /** Total bytes dropped since last rebuild. */
- static size_t router_bytes_dropped = 0;
- /** Helper: return 1 iff the router log is so big we want to rebuild the
- * store. */
- static int
- router_should_rebuild_store(void)
- {
- if (router_store_len > (1<<16))
- return (router_journal_len > router_store_len / 2 ||
- router_bytes_dropped > router_store_len / 2);
- else
- return router_journal_len > (1<<15);
- }
- /** Add the <b>len</b>-type router descriptor in <b>s</b> to the router
- * journal. */
- static int
- router_append_to_journal(signed_descriptor_t *desc)
- {
- or_options_t *options = get_options();
- size_t fname_len = strlen(options->DataDirectory)+32;
- char *fname = tor_malloc(fname_len);
- const char *body = signed_descriptor_get_body(desc);
- size_t len = desc->signed_descriptor_len;
- tor_snprintf(fname, fname_len, "%s/cached-routers.new",
- options->DataDirectory);
- tor_assert(len == strlen(body));
- if (append_bytes_to_file(fname, body, len, 0)) {
- warn(LD_FS, "Unable to store router descriptor");
- tor_free(fname);
- return -1;
- }
- tor_free(fname);
- router_journal_len += len;
- return 0;
- }
- /** If the journal is too long, or if <b>force</b> is true, then atomically
- * replace the router store with the routers currently in our routerlist, and
- * clear the journal. Return 0 on success, -1 on failure.
- */
- static int
- router_rebuild_store(int force)
- {
- size_t len = 0;
- or_options_t *options;
- size_t fname_len;
- smartlist_t *chunk_list = NULL;
- char *fname = NULL;
- int r = -1, i;
- if (!force && !router_should_rebuild_store())
- return 0;
- if (!routerlist)
- return 0;
- /* Don't save deadweight. */
- routerlist_remove_old_routers();
- options = get_options();
- fname_len = strlen(options->DataDirectory)+32;
- fname = tor_malloc(fname_len);
- tor_snprintf(fname, fname_len, "%s/cached-routers", options->DataDirectory);
- chunk_list = smartlist_create();
- for (i = 0; i < 2; ++i) {
- smartlist_t *lst = (i == 0) ? routerlist->old_routers :
- routerlist->routers;
- SMARTLIST_FOREACH(lst, void *, ptr,
- {
- signed_descriptor_t *sd = (i==0) ?
- ((signed_descriptor_t*)ptr): &((routerinfo_t*)ptr)->cache_info;
- sized_chunk_t *c;
- const char *body = signed_descriptor_get_body(sd);
- if (!body) {
- warn(LD_BUG, "Bug! No descriptor available for router.");
- goto done;
- }
- c = tor_malloc(sizeof(sized_chunk_t));
- c->bytes = body;
- c->len = sd->signed_descriptor_len;
- smartlist_add(chunk_list, c);
- });
- }
- if (write_chunks_to_file(fname, chunk_list, 0)<0) {
- warn(LD_FS, "Error writing router store to disk.");
- goto done;
- }
- tor_snprintf(fname, fname_len, "%s/cached-routers.new",
- options->DataDirectory);
- write_str_to_file(fname, "", 0);
- r = 0;
- router_store_len = len;
- router_journal_len = 0;
- router_bytes_dropped = 0;
- done:
- tor_free(fname);
- if (chunk_list) {
- SMARTLIST_FOREACH(chunk_list, sized_chunk_t *, c, tor_free(c));
- smartlist_free(chunk_list);
- }
- return r;
- }
- /* Load all cached router descriptors from the store. Return 0 on success and
- * -1 on failure.
- */
- int
- router_reload_router_list(void)
- {
- or_options_t *options = get_options();
- size_t fname_len = strlen(options->DataDirectory)+32;
- char *fname = tor_malloc(fname_len);
- struct stat st;
- int j;
- if (!routerlist)
- router_get_routerlist(); /* mallocs and inits it in place */
- router_journal_len = router_store_len = 0;
- for (j = 0; j < 2; ++j) {
- char *contents;
- tor_snprintf(fname, fname_len,
- (j==0)?"%s/cached-routers":"%s/cached-routers.new",
- options->DataDirectory);
- contents = read_file_to_str(fname, 0);
- if (contents) {
- stat(fname, &st);
- if (j==0)
- router_store_len = st.st_size;
- else
- router_journal_len = st.st_size;
- router_load_routers_from_string(contents, 1, NULL);
- tor_free(contents);
- }
- }
- tor_free(fname);
- if (router_journal_len) {
- /* Always clear the journal on startup.*/
- router_rebuild_store(1);
- } else {
- /* Don't cache expired routers. (This is in an else because
- * router_rebuild_store() also calls remove_old_routers().) */
- routerlist_remove_old_routers();
- }
- return 0;
- }
- /** Set *<b>outp</b> to a smartlist containing a list of
- * trusted_dir_server_t * for all known trusted dirservers. Callers
- * must not modify the list or its contents.
- */
- void
- router_get_trusted_dir_servers(smartlist_t **outp)
- {
- if (!trusted_dir_servers)
- trusted_dir_servers = smartlist_create();
- *outp = trusted_dir_servers;
- }
- /** Try to find a running dirserver. If there are no running dirservers
- * in our routerlist and <b>retry_if_no_servers</b> is non-zero,
- * set all the authoritative ones as running again, and pick one;
- * if there are then no dirservers at all in our routerlist,
- * reload the routerlist and try one last time. If for_runningrouters is
- * true, then only pick a dirserver that can answer runningrouters queries
- * (that is, a trusted dirserver, or one running 0.0.9rc5-cvs or later).
- * Don't pick an authority if any non-authority is viable.
- * Other args are as in router_pick_directory_server_impl().
- */
- routerstatus_t *
- router_pick_directory_server(int requireother,
- int fascistfirewall,
- int for_v2_directory,
- int retry_if_no_servers)
- {
- routerstatus_t *choice;
- if (!routerlist)
- return NULL;
- choice = router_pick_directory_server_impl(requireother, fascistfirewall,
- for_v2_directory);
- if (choice || !retry_if_no_servers)
- return choice;
- info(LD_DIR,
- "No reachable router entries for dirservers. Trying them all again.");
- /* mark all authdirservers as up again */
- mark_all_trusteddirservers_up();
- /* try again */
- choice = router_pick_directory_server_impl(requireother, fascistfirewall,
- for_v2_directory);
- if (choice)
- return choice;
- info(LD_DIR,"Still no %s router entries. Reloading and trying again.",
- fascistfirewall ? "reachable" : "known");
- if (router_reload_router_list()) {
- return NULL;
- }
- /* give it one last try */
- choice = router_pick_directory_server_impl(requireother, fascistfirewall,
- for_v2_directory);
- return choice;
- }
- /** Return the trusted_dir_server_t for the directory authority whose identity
- * key hashes to <b>digest</b>, or NULL if no such authority is known.
- */
- trusted_dir_server_t *
- router_get_trusteddirserver_by_digest(const char *digest)
- {
- if (!trusted_dir_servers)
- return NULL;
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, ds,
- {
- if (!memcmp(ds->digest, digest, DIGEST_LEN))
- return ds;
- });
- return NULL;
- }
- /** Try to find a running trusted dirserver. If there are no running
- * trusted dirservers and <b>retry_if_no_servers</b> is non-zero,
- * set them all as running again, and try again.
- * If <b>need_v1_authority</b> is set, return only trusted servers
- * that are authorities for the V1 directory protocol.
- * Other args are as in router_pick_trusteddirserver_impl().
- */
- routerstatus_t *
- router_pick_trusteddirserver(int need_v1_authority,
- int requireother,
- int fascistfirewall,
- int retry_if_no_servers)
- {
- routerstatus_t *choice;
- choice = router_pick_trusteddirserver_impl(need_v1_authority,
- requireother, fascistfirewall);
- if (choice || !retry_if_no_servers)
- return choice;
- info(LD_DIR,"No trusted dirservers are reachable. Trying them all again.");
- mark_all_trusteddirservers_up();
- return router_pick_trusteddirserver_impl(need_v1_authority,
- requireother, fascistfirewall);
- }
- /** Pick a random running verified directory server/mirror from our
- * routerlist. Don't pick an authority if any non-authorities are viable.
- * If <b>fascistfirewall</b>,
- * make sure the router we pick is allowed by our firewall options.
- * If <b>requireother</b>, it cannot be us. If <b>for_v2_directory</b>,
- * choose a directory server new enough to support the v2 directory
- * functionality.
- */
- static routerstatus_t *
- router_pick_directory_server_impl(int requireother, int fascistfirewall,
- int for_v2_directory)
- {
- routerstatus_t *result;
- smartlist_t *sl;
- smartlist_t *trusted;
- if (!routerstatus_list)
- return NULL;
- /* Find all the running dirservers we know about. */
- sl = smartlist_create();
- trusted = smartlist_create();
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, _local_status,
- {
- routerstatus_t *status = &(_local_status->status);
- int is_trusted;
- if (!status->is_running || !status->dir_port || !status->is_valid)
- continue;
- if (requireother && router_digest_is_me(status->identity_digest))
- continue;
- if (fascistfirewall) {
- if (!fascist_firewall_allows_address(status->addr, status->dir_port))
- continue;
- }
- is_trusted = router_digest_is_trusted_dir(status->identity_digest);
- if (for_v2_directory && !(status->is_v2_dir || is_trusted))
- continue;
- smartlist_add(is_trusted ? trusted : sl, status);
- });
- if (smartlist_len(sl))
- result = smartlist_choose(sl);
- else
- result = smartlist_choose(trusted);
- smartlist_free(sl);
- smartlist_free(trusted);
- return result;
- }
- /** Choose randomly from among the trusted dirservers that are up. If
- * <b>fascistfirewall</b>, make sure the port we pick is allowed by our
- * firewall options. If <b>requireother</b>, it cannot be us. If
- * <b>need_v1_authority</b>, choose a trusted authority for the v1 directory
- * system.
- */
- static routerstatus_t *
- router_pick_trusteddirserver_impl(int need_v1_authority,
- int requireother, int fascistfirewall)
- {
- smartlist_t *sl;
- routerinfo_t *me;
- routerstatus_t *rs;
- sl = smartlist_create();
- me = router_get_my_routerinfo();
- if (!trusted_dir_servers)
- return NULL;
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, d,
- {
- if (!d->is_running) continue;
- if (need_v1_authority && !d->is_v1_authority)
- continue;
- if (requireother && me && router_digest_is_me(d->digest))
- continue;
- if (fascistfirewall) {
- if (!fascist_firewall_allows_address(d->addr, d->dir_port))
- continue;
- }
- smartlist_add(sl, &d->fake_status);
- });
- rs = smartlist_choose(sl);
- smartlist_free(sl);
- return rs;
- }
- /** Go through and mark the authoritative dirservers as up. */
- static void
- mark_all_trusteddirservers_up(void)
- {
- if (routerlist) {
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- if (router_digest_is_trusted_dir(router->cache_info.identity_digest) &&
- router->dir_port > 0) {
- router->is_running = 1;
- });
- }
- if (trusted_dir_servers) {
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, dir,
- {
- local_routerstatus_t *rs;
- dir->is_running = 1;
- dir->n_networkstatus_failures = 0;
- rs = router_get_combined_status_by_digest(dir->digest);
- if (rs)
- rs->status.is_running = 1;
- });
- }
- last_networkstatus_download_attempted = 0;
- }
- /** Reset all internal variables used to count failed downloads of network
- * status objects. */
- void
- router_reset_status_download_failures(void)
- {
- mark_all_trusteddirservers_up();
- }
- /** Add all the family of <b>router</b> to the smartlist <b>sl</b>.
- * This is used to make sure we don't pick siblings in a single path.
- */
- void
- routerlist_add_family(smartlist_t *sl, routerinfo_t *router)
- {
- routerinfo_t *r;
- config_line_t *cl;
- if (!router->declared_family)
- return;
- /* Add every r such that router declares familyness with r, and r
- * declares familyhood with router. */
- SMARTLIST_FOREACH(router->declared_family, const char *, n,
- {
- if (!(r = router_get_by_nickname(n, 0)))
- continue;
- if (!r->declared_family)
- continue;
- SMARTLIST_FOREACH(r->declared_family, const char *, n2,
- {
- if (router_nickname_matches(router, n2))
- smartlist_add(sl, r);
- });
- });
- /* If the user declared any families locally, honor those too. */
- for (cl = get_options()->NodeFamilies; cl; cl = cl->next) {
- if (router_nickname_is_in_list(router, cl->value)) {
- add_nickname_list_to_smartlist(sl, cl->value, 0, 1, 1);
- }
- }
- }
- /** Given a comma-and-whitespace separated list of nicknames, see which
- * nicknames in <b>list</b> name routers in our routerlist that are
- * currently running. Add the routerinfos for those routers to <b>sl</b>.
- */
- void
- add_nickname_list_to_smartlist(smartlist_t *sl, const char *list,
- int must_be_running,
- int warn_if_down, int warn_if_unnamed)
- {
- routerinfo_t *router;
- smartlist_t *nickname_list;
- int have_dir_info = router_have_minimum_dir_info();
- if (!list)
- return; /* nothing to do */
- tor_assert(sl);
- nickname_list = smartlist_create();
- if (!warned_nicknames)
- warned_nicknames = smartlist_create();
- smartlist_split_string(nickname_list, list, ",",
- SPLIT_SKIP_SPACE|SPLIT_IGNORE_BLANK, 0);
- SMARTLIST_FOREACH(nickname_list, const char *, nick, {
- int warned;
- if (!is_legal_nickname_or_hexdigest(nick)) {
- warn(LD_CONFIG, "Nickname '%s' is misformed; skipping", nick);
- continue;
- }
- router = router_get_by_nickname(nick, warn_if_unnamed);
- warned = smartlist_string_isin(warned_nicknames, nick);
- if (router) {
- if (!must_be_running || router->is_running) {
- smartlist_add(sl,router);
- if (warned)
- smartlist_string_remove(warned_nicknames, nick);
- } else {
- if (!warned) {
- log_fn(warn_if_down ? LOG_WARN : LOG_DEBUG, LD_CONFIG,
- "Nickname list includes '%s' which is known but down.",nick);
- smartlist_add(warned_nicknames, tor_strdup(nick));
- }
- }
- } else {
- if (!warned) {
- log_fn(have_dir_info ? LOG_WARN : LOG_INFO, LD_CONFIG,
- "Nickname list includes '%s' which isn't a known router.",nick);
- smartlist_add(warned_nicknames, tor_strdup(nick));
- }
- }
- });
- SMARTLIST_FOREACH(nickname_list, char *, nick, tor_free(nick));
- smartlist_free(nickname_list);
- }
- /** Return 1 iff any member of the comma-separated list <b>list</b> is an
- * acceptable nickname or hexdigest for <b>router</b>. Else return 0.
- */
- static int
- router_nickname_is_in_list(routerinfo_t *router, const char *list)
- {
- smartlist_t *nickname_list;
- int v = 0;
- if (!list)
- return 0; /* definitely not */
- tor_assert(router);
- nickname_list = smartlist_create();
- smartlist_split_string(nickname_list, list, ",",
- SPLIT_SKIP_SPACE|SPLIT_IGNORE_BLANK, 0);
- SMARTLIST_FOREACH(nickname_list, const char *, cp,
- if (router_nickname_matches(router, cp)) {v=1;break;});
- SMARTLIST_FOREACH(nickname_list, char *, cp, tor_free(cp));
- smartlist_free(nickname_list);
- return v;
- }
- /** Add every router from our routerlist that is currently running to
- * <b>sl</b>.
- */
- static void
- router_add_running_routers_to_smartlist(smartlist_t *sl, int allow_unverified,
- int need_uptime, int need_capacity)
- {
- if (!routerlist)
- return;
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- {
- if (router->is_running &&
- (router->is_verified ||
- (allow_unverified &&
- !router_is_unreliable(router, need_uptime, need_capacity)))) {
- /* If it's running, and either it's verified or we're ok picking
- * unverified routers and this one is suitable.
- */
- smartlist_add(sl, router);
- }
- });
- }
- /** Look through the routerlist until we find a router that has my key.
- Return it. */
- routerinfo_t *
- routerlist_find_my_routerinfo(void)
- {
- if (!routerlist)
- return NULL;
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- {
- if (router_is_me(router))
- return router;
- });
- return NULL;
- }
- /** Find a router that's up, that has this IP address, and
- * that allows exit to this address:port, or return NULL if there
- * isn't a good one.
- */
- routerinfo_t *
- router_find_exact_exit_enclave(const char *address, uint16_t port)
- {
- uint32_t addr;
- struct in_addr in;
- if (!tor_inet_aton(address, &in))
- return NULL; /* it's not an IP already */
- addr = ntohl(in.s_addr);
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- {
- if (router->is_running &&
- router->addr == addr &&
- router_compare_addr_to_addr_policy(addr, port, router->exit_policy) ==
- ADDR_POLICY_ACCEPTED)
- return router;
- });
- return NULL;
- }
- /** Return 1 if <b>router</b> is not suitable for these parameters, else 0.
- * If <b>need_uptime</b> is non-zero, we require a minimum uptime.
- * If <b>need_capacity</b> is non-zero, we require a minimum advertised
- * bandwidth.
- */
- int
- router_is_unreliable(routerinfo_t *router, int need_uptime, int need_capacity)
- {
- if (need_uptime && !router->is_stable)
- return 1;
- if (need_capacity && !router->is_fast)
- return 1;
- return 0;
- }
- /** Remove from routerlist <b>sl</b> all routers who have a low uptime. */
- static void
- routerlist_sl_remove_unreliable_routers(smartlist_t *sl)
- {
- int i;
- routerinfo_t *router;
- for (i = 0; i < smartlist_len(sl); ++i) {
- router = smartlist_get(sl, i);
- if (router_is_unreliable(router, 1, 0)) {
- // log(LOG_DEBUG, "Router '%s' has insufficient uptime; deleting.",
- // router->nickname);
- smartlist_del(sl, i--);
- }
- }
- }
- #define MAX_BELIEVABLE_BANDWIDTH 1500000 /* 1.5 MB/sec */
- /** Choose a random element of router list <b>sl</b>, weighted by
- * the advertised bandwidth of each router.
- */
- routerinfo_t *
- routerlist_sl_choose_by_bandwidth(smartlist_t *sl)
- {
- int i;
- routerinfo_t *router;
- smartlist_t *bandwidths;
- uint32_t this_bw, tmp, total_bw=0, rand_bw;
- uint32_t *p;
- /* First count the total bandwidth weight, and make a smartlist
- * of each value. */
- bandwidths = smartlist_create();
- for (i = 0; i < smartlist_len(sl); ++i) {
- router = smartlist_get(sl, i);
- this_bw = (router->bandwidthcapacity < router->bandwidthrate) ?
- router->bandwidthcapacity : router->bandwidthrate;
- /* if they claim something huge, don't believe it */
- if (this_bw > MAX_BELIEVABLE_BANDWIDTH)
- this_bw = MAX_BELIEVABLE_BANDWIDTH;
- p = tor_malloc(sizeof(uint32_t));
- *p = this_bw;
- smartlist_add(bandwidths, p);
- total_bw += this_bw;
- }
- if (!total_bw) {
- SMARTLIST_FOREACH(bandwidths, uint32_t*, p, tor_free(p));
- smartlist_free(bandwidths);
- return smartlist_choose(sl);
- }
- /* Second, choose a random value from the bandwidth weights. */
- rand_bw = crypto_rand_int(total_bw);
- /* Last, count through sl until we get to the element we picked */
- tmp = 0;
- for (i=0; ; i++) {
- tor_assert(i < smartlist_len(sl));
- p = smartlist_get(bandwidths, i);
- tmp += *p;
- if (tmp >= rand_bw)
- break;
- }
- SMARTLIST_FOREACH(bandwidths, uint32_t*, p, tor_free(p));
- smartlist_free(bandwidths);
- return (routerinfo_t *)smartlist_get(sl, i);
- }
- /** Return a random running router from the routerlist. If any node
- * named in <b>preferred</b> is available, pick one of those. Never
- * pick a node named in <b>excluded</b>, or whose routerinfo is in
- * <b>excludedsmartlist</b>, even if they are the only nodes
- * available. If <b>strict</b> is true, never pick any node besides
- * those in <b>preferred</b>.
- * If <b>need_uptime</b> is non-zero and any router has more than
- * a minimum uptime, return one of those.
- * If <b>need_capacity</b> is non-zero, weight your choice by the
- * advertised capacity of each router.
- */
- routerinfo_t *
- router_choose_random_node(const char *preferred,
- const char *excluded,
- smartlist_t *excludedsmartlist,
- int need_uptime, int need_capacity,
- int allow_unverified, int strict)
- {
- smartlist_t *sl, *excludednodes;
- routerinfo_t *choice = NULL;
- excludednodes = smartlist_create();
- add_nickname_list_to_smartlist(excludednodes,excluded,0,0,1);
- /* Try the preferred nodes first. Ignore need_uptime and need_capacity,
- * since the user explicitly asked for these nodes. */
- if (preferred) {
- sl = smartlist_create();
- add_nickname_list_to_smartlist(sl,preferred,1,1,1);
- smartlist_subtract(sl,excludednodes);
- if (excludedsmartlist)
- smartlist_subtract(sl,excludedsmartlist);
- choice = smartlist_choose(sl);
- smartlist_free(sl);
- }
- if (!choice && !strict) {
- /* Then give up on our preferred choices: any node
- * will do that has the required attributes. */
- sl = smartlist_create();
- router_add_running_routers_to_smartlist(sl, allow_unverified,
- need_uptime, need_capacity);
- smartlist_subtract(sl,excludednodes);
- if (excludedsmartlist)
- smartlist_subtract(sl,excludedsmartlist);
- if (need_uptime)
- routerlist_sl_remove_unreliable_routers(sl);
- if (need_capacity)
- choice = routerlist_sl_choose_by_bandwidth(sl);
- else
- choice = smartlist_choose(sl);
- smartlist_free(sl);
- if (!choice && (need_uptime || need_capacity)) {
- /* try once more -- recurse but with fewer restrictions. */
- info(LD_CIRC, "We couldn't find any live%s%s routers; falling back "
- "to list of all routers.",
- need_capacity?", fast":"",
- need_uptime?", stable":"");
- choice = router_choose_random_node(
- NULL, excluded, excludedsmartlist, 0, 0, allow_unverified, 0);
- }
- }
- smartlist_free(excludednodes);
- if (!choice)
- warn(LD_CIRC,"No available nodes when trying to choose node. Failing.");
- return choice;
- }
- /** Return true iff the digest of <b>router</b>'s identity key,
- * encoded in hexadecimal, matches <b>hexdigest</b> (which is
- * optionally prefixed with a single dollar sign). Return false if
- * <b>hexdigest</b> is malformed, or it doesn't match. */
- static INLINE int
- router_hex_digest_matches(routerinfo_t *router, const char *hexdigest)
- {
- char digest[DIGEST_LEN];
- tor_assert(hexdigest);
- if (hexdigest[0] == '$')
- ++hexdigest;
- /* XXXXNM Any place that uses this inside a loop could probably do better. */
- if (strlen(hexdigest) != HEX_DIGEST_LEN ||
- base16_decode(digest, DIGEST_LEN, hexdigest, HEX_DIGEST_LEN)<0)
- return 0;
- return (!memcmp(digest, router->cache_info.identity_digest, DIGEST_LEN));
- }
- /** Return true if <b>router</b>'s nickname matches <b>nickname</b>
- * (case-insensitive), or if <b>router's</b> identity key digest
- * matches a hexadecimal value stored in <b>nickname</b>. Return
- * false otherwise. */
- static int
- router_nickname_matches(routerinfo_t *router, const char *nickname)
- {
- if (nickname[0]!='$' && !strcasecmp(router->nickname, nickname))
- return 1;
- return router_hex_digest_matches(router, nickname);
- }
- /** Return the router in our routerlist whose (case-insensitive)
- * nickname or (case-sensitive) hexadecimal key digest is
- * <b>nickname</b>. Return NULL if no such router is known.
- */
- routerinfo_t *
- router_get_by_nickname(const char *nickname, int warn_if_unnamed)
- {
- int maybedigest;
- char digest[DIGEST_LEN];
- routerinfo_t *best_match=NULL;
- int n_matches = 0;
- tor_assert(nickname);
- if (!routerlist)
- return NULL;
- if (nickname[0] == '$')
- return router_get_by_hexdigest(nickname);
- if (server_mode(get_options()) &&
- !strcasecmp(nickname, get_options()->Nickname))
- return router_get_my_routerinfo();
- maybedigest = (strlen(nickname) == HEX_DIGEST_LEN) &&
- (base16_decode(digest,DIGEST_LEN,nickname,HEX_DIGEST_LEN) == 0);
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- {
- if (!strcasecmp(router->nickname, nickname)) {
- if (router->is_named)
- return router;
- else {
- ++n_matches;
- best_match = router;
- }
- } else if (maybedigest &&
- !memcmp(digest, router->cache_info.identity_digest, DIGEST_LEN)
- ) {
- return router;
- }
- });
- if (best_match) {
- if (warn_if_unnamed && n_matches > 1) {
- smartlist_t *fps = smartlist_create();
- int any_unwarned = 0;
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- {
- local_routerstatus_t *rs;
- char *desc;
- size_t dlen;
- char fp[HEX_DIGEST_LEN+1];
- if (strcasecmp(router->nickname, nickname))
- continue;
- rs = router_get_combined_status_by_digest(
- router->cache_info.identity_digest);
- if (!rs->name_lookup_warned) {
- rs->name_lookup_warned = 1;
- any_unwarned = 1;
- }
- base16_encode(fp, sizeof(fp),
- router->cache_info.identity_digest, DIGEST_LEN);
- dlen = 32 + HEX_DIGEST_LEN + strlen(router->address);
- desc = tor_malloc(dlen);
- tor_snprintf(desc, dlen, "\"$%s\" for the one at %s:%d",
- fp, router->address, router->or_port);
- smartlist_add(fps, desc);
- });
- if (any_unwarned) {
- char *alternatives = smartlist_join_strings(fps, "; ",0,NULL);
- warn(LD_CONFIG, "There are multiple matches for the nickname \"%s\","
- " but none is listed as named by the directory authories. "
- "Choosing one arbitrarily. If you meant one in particular, "
- "you should say %s.", nickname, alternatives);
- tor_free(alternatives);
- }
- SMARTLIST_FOREACH(fps, char *, cp, tor_free(cp));
- smartlist_free(fps);
- } else if (warn_if_unnamed) {
- local_routerstatus_t *rs = router_get_combined_status_by_digest(
- best_match->cache_info.identity_digest);
- if (rs && !rs->name_lookup_warned) {
- char fp[HEX_DIGEST_LEN+1];
- base16_encode(fp, sizeof(fp),
- best_match->cache_info.identity_digest, DIGEST_LEN);
- warn(LD_CONFIG, "You specified a server \"%s\" by name, but the "
- "directory authorities do not have a listing for this name. "
- "To make sure you get the same server in the future, refer to "
- "it by key, as \"$%s\".", nickname, fp);
- rs->name_lookup_warned = 1;
- }
- }
- return best_match;
- }
- return NULL;
- }
- /** Try to find a routerinfo for <b>digest</b>. If we don't have one,
- * return 1. If we do, ask tor_version_as_new_as() for the answer.
- */
- int
- router_digest_version_as_new_as(const char *digest, const char *cutoff)
- {
- routerinfo_t *router = router_get_by_digest(digest);
- if (!router)
- return 1;
- return tor_version_as_new_as(router->platform, cutoff);
- }
- /** Return true iff <b>digest</b> is the digest of the identity key of
- * a trusted directory. */
- int
- router_digest_is_trusted_dir(const char *digest)
- {
- if (!trusted_dir_servers)
- return 0;
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, ent,
- if (!memcmp(digest, ent->digest, DIGEST_LEN)) return 1);
- return 0;
- }
- /** Return the router in our routerlist whose hexadecimal key digest
- * is <b>hexdigest</b>. Return NULL if no such router is known. */
- routerinfo_t *
- router_get_by_hexdigest(const char *hexdigest)
- {
- char digest[DIGEST_LEN];
- tor_assert(hexdigest);
- if (!routerlist)
- return NULL;
- if (hexdigest[0]=='$')
- ++hexdigest;
- if (strlen(hexdigest) != HEX_DIGEST_LEN ||
- base16_decode(digest,DIGEST_LEN,hexdigest,HEX_DIGEST_LEN) < 0)
- return NULL;
- return router_get_by_digest(digest);
- }
- /** Return the router in our routerlist whose 20-byte key digest
- * is <b>digest</b>. Return NULL if no such router is known. */
- routerinfo_t *
- router_get_by_digest(const char *digest)
- {
- tor_assert(digest);
- if (!routerlist) return NULL;
- // routerlist_assert_ok(routerlist);
- return digestmap_get(routerlist->identity_map, digest);
- }
- /** Return the router in our routerlist whose 20-byte descriptor
- * is <b>digest</b>. Return NULL if no such router is known. */
- signed_descriptor_t *
- router_get_by_descriptor_digest(const char *digest)
- {
- tor_assert(digest);
- if (!routerlist) return NULL;
- return digestmap_get(routerlist->desc_digest_map, digest);
- }
- const char *
- signed_descriptor_get_body(signed_descriptor_t *desc)
- {
- return desc->signed_descriptor_body;
- }
- /** Return the current list of all known routers. */
- routerlist_t *
- router_get_routerlist(void)
- {
- if (!routerlist) {
- routerlist = tor_malloc_zero(sizeof(routerlist_t));
- routerlist->routers = smartlist_create();
- routerlist->old_routers = smartlist_create();
- routerlist->identity_map = digestmap_new();
- routerlist->desc_digest_map = digestmap_new();
- }
- return routerlist;
- }
- /** Free all storage held by <b>router</b>. */
- void
- routerinfo_free(routerinfo_t *router)
- {
- if (!router)
- return;
- tor_free(router->cache_info.signed_descriptor_body);
- tor_free(router->address);
- tor_free(router->nickname);
- tor_free(router->platform);
- tor_free(router->contact_info);
- if (router->onion_pkey)
- crypto_free_pk_env(router->onion_pkey);
- if (router->identity_pkey)
- crypto_free_pk_env(router->identity_pkey);
- if (router->declared_family) {
- SMARTLIST_FOREACH(router->declared_family, char *, s, tor_free(s));
- smartlist_free(router->declared_family);
- }
- addr_policy_free(router->exit_policy);
- tor_free(router);
- }
- /** Release storage held by <b>sd</b>. */
- static void
- signed_descriptor_free(signed_descriptor_t *sd)
- {
- tor_free(sd->signed_descriptor_body);
- tor_free(sd);
- }
- /** Extract a signed_descriptor_t from a routerinfo, and free the routerinfo.
- */
- static signed_descriptor_t *
- signed_descriptor_from_routerinfo(routerinfo_t *ri)
- {
- signed_descriptor_t *sd = tor_malloc_zero(sizeof(signed_descriptor_t));
- memcpy(sd, &(ri->cache_info), sizeof(signed_descriptor_t));
- ri->cache_info.signed_descriptor_body = NULL;
- routerinfo_free(ri);
- return sd;
- }
- /** Free all storage held by a routerlist <b>rl</b> */
- void
- routerlist_free(routerlist_t *rl)
- {
- tor_assert(rl);
- digestmap_free(rl->identity_map, NULL);
- digestmap_free(rl->desc_digest_map, NULL);
- SMARTLIST_FOREACH(rl->routers, routerinfo_t *, r,
- routerinfo_free(r));
- SMARTLIST_FOREACH(rl->old_routers, signed_descriptor_t *, sd,
- signed_descriptor_free(sd));
- smartlist_free(rl->routers);
- smartlist_free(rl->old_routers);
- tor_free(rl);
- }
- void
- dump_routerlist_mem_usage(int severity)
- {
- uint64_t livedescs = 0;
- uint64_t olddescs = 0;
- if (!routerlist)
- return;
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, r,
- livedescs += r->cache_info.signed_descriptor_len);
- SMARTLIST_FOREACH(routerlist->old_routers, signed_descriptor_t *, sd,
- olddescs += sd->signed_descriptor_len);
- log(severity, LD_GENERAL,
- "In %d live descriptors: "U64_FORMAT" bytes. "
- "In %d old descriptors: "U64_FORMAT" bytes.",
- smartlist_len(routerlist->routers), U64_PRINTF_ARG(livedescs),
- smartlist_len(routerlist->old_routers), U64_PRINTF_ARG(olddescs));
- }
- /** Return non-zero if we have a lot of extra descriptors in our
- * routerlist, and should get rid of some of them. Else return 0.
- *
- * We should be careful to not return true too eagerly, since we
- * could churn. By using "+1" below, we make sure this function
- * only returns true at most every smartlist_len(rl-\>routers)
- * new descriptors.
- */
- static INLINE int
- routerlist_is_overfull(routerlist_t *rl)
- {
- return smartlist_len(rl->old_routers) >
- smartlist_len(rl->routers)*(MAX_DESCRIPTORS_PER_ROUTER+1);
- }
- static INLINE int
- _routerlist_find_elt(smartlist_t *sl, void *ri, int idx)
- {
- if (idx < 0 || smartlist_get(sl, idx) != ri) {
- idx = -1;
- SMARTLIST_FOREACH(sl, routerinfo_t *, r,
- if (r == ri) {
- idx = r_sl_idx;
- break;
- });
- }
- return idx;
- }
- /** Insert an item <b>ri</b> into the routerlist <b>rl</b>, updating indices
- * as needed. */
- static void
- routerlist_insert(routerlist_t *rl, routerinfo_t *ri)
- {
- digestmap_set(rl->identity_map, ri->cache_info.identity_digest, ri);
- digestmap_set(rl->desc_digest_map, ri->cache_info.signed_descriptor_digest,
- &(ri->cache_info));
- smartlist_add(rl->routers, ri);
- // routerlist_assert_ok(rl);
- }
- static void
- routerlist_insert_old(routerlist_t *rl, routerinfo_t *ri)
- {
- if (get_options()->DirPort &&
- !digestmap_get(rl->desc_digest_map,
- ri->cache_info.signed_descriptor_digest)) {
- signed_descriptor_t *sd = signed_descriptor_from_routerinfo(ri);
- digestmap_set(rl->desc_digest_map, sd->signed_descriptor_digest, sd);
- smartlist_add(rl->old_routers, sd);
- } else {
- routerinfo_free(ri);
- }
- // routerlist_assert_ok(rl);
- }
- /** Remove an item <b>ri</b> into the routerlist <b>rl</b>, updating indices
- * as needed. If <b>idx</b> is nonnegative and smartlist_get(rl->routers,
- * idx) == ri, we don't need to do a linear search over the list to decide
- * which to remove. We fill the gap in rl->routers with a later element in
- * the list, if any exists. <b>ri</b> is freed. */
- void
- routerlist_remove(routerlist_t *rl, routerinfo_t *ri, int idx, int make_old)
- {
- routerinfo_t *ri_tmp;
- idx = _routerlist_find_elt(rl->routers, ri, idx);
- if (idx < 0)
- return;
- smartlist_del(rl->routers, idx);
- ri_tmp = digestmap_remove(rl->identity_map, ri->cache_info.identity_digest);
- tor_assert(ri_tmp == ri);
- if (make_old && get_options()->DirPort) {
- signed_descriptor_t *sd;
- sd = signed_descriptor_from_routerinfo(ri);
- smartlist_add(rl->old_routers, sd);
- digestmap_set(rl->desc_digest_map, sd->signed_descriptor_digest, sd);
- } else {
- ri_tmp = digestmap_remove(rl->desc_digest_map,
- ri->cache_info.signed_descriptor_digest);
- tor_assert(ri_tmp == ri);
- router_bytes_dropped += ri->cache_info.signed_descriptor_len;
- routerinfo_free(ri);
- }
- // routerlist_assert_ok(rl);
- }
- static void
- routerlist_remove_old(routerlist_t *rl, signed_descriptor_t *sd, int idx)
- {
- signed_descriptor_t *sd_tmp;
- idx = _routerlist_find_elt(rl->old_routers, sd, idx);
- if (idx < 0)
- return;
- smartlist_del(rl->old_routers, idx);
- sd_tmp = digestmap_remove(rl->desc_digest_map,
- sd->signed_descriptor_digest);
- tor_assert(sd_tmp == sd);
- router_bytes_dropped += sd->signed_descriptor_len;
- signed_descriptor_free(sd);
- // routerlist_assert_ok(rl);
- }
- /** Remove <b>ri_old</b> from the routerlist <b>rl</b>, and replace it with
- * <b>ri_new</b>, updating all index info. If <b>idx</b> is nonnegative and
- * smartlist_get(rl->routers, idx) == ri, we don't need to do a linear
- * search over the list to decide which to remove. We put ri_new in the same
- * index as ri_old, if possible. ri is freed as appropriate. */
- static void
- routerlist_replace(routerlist_t *rl, routerinfo_t *ri_old,
- routerinfo_t *ri_new, int idx, int make_old)
- {
- tor_assert(ri_old != ri_new);
- idx = _routerlist_find_elt(rl->routers, ri_old, idx);
- if (idx >= 0) {
- smartlist_set(rl->routers, idx, ri_new);
- } else {
- warn(LD_BUG, "Appending entry from routerlist_replace.");
- routerlist_insert(rl, ri_new);
- return;
- }
- if (memcmp(ri_old->cache_info.identity_digest,
- ri_new->cache_info.identity_digest, DIGEST_LEN)) {
- /* digests don't match; digestmap_set won't replace */
- digestmap_remove(rl->identity_map, ri_old->cache_info.identity_digest);
- }
- digestmap_set(rl->identity_map, ri_new->cache_info.identity_digest, ri_new);
- digestmap_set(rl->desc_digest_map,
- ri_new->cache_info.signed_descriptor_digest, &(ri_new->cache_info));
- if (make_old && get_options()->DirPort) {
- signed_descriptor_t *sd = signed_descriptor_from_routerinfo(ri_old);
- smartlist_add(rl->old_routers, sd);
- digestmap_set(rl->desc_digest_map, sd->signed_descriptor_digest, sd);
- } else {
- if (memcmp(ri_old->cache_info.signed_descriptor_digest,
- ri_new->cache_info.signed_descriptor_digest,
- DIGEST_LEN)) {
- /* digests don't match; digestmap_set didn't replace */
- digestmap_remove(rl->desc_digest_map,
- ri_old->cache_info.signed_descriptor_digest);
- }
- routerinfo_free(ri_old);
- }
- // routerlist_assert_ok(rl);
- }
- /** Free all memory held by the routerlist module. */
- void
- routerlist_free_all(void)
- {
- if (routerlist)
- routerlist_free(routerlist);
- routerlist = NULL;
- if (warned_nicknames) {
- SMARTLIST_FOREACH(warned_nicknames, char *, cp, tor_free(cp));
- smartlist_free(warned_nicknames);
- warned_nicknames = NULL;
- }
- if (warned_conflicts) {
- SMARTLIST_FOREACH(warned_conflicts, char *, cp, tor_free(cp));
- smartlist_free(warned_conflicts);
- warned_conflicts = NULL;
- }
- if (trusted_dir_servers) {
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, ds,
- trusted_dir_server_free(ds));
- smartlist_free(trusted_dir_servers);
- trusted_dir_servers = NULL;
- }
- if (networkstatus_list) {
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- networkstatus_free(ns));
- smartlist_free(networkstatus_list);
- networkstatus_list = NULL;
- }
- if (routerstatus_list) {
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, rs,
- local_routerstatus_free(rs));
- smartlist_free(routerstatus_list);
- routerstatus_list = NULL;
- }
- }
- /** Free all storage held by the routerstatus object <b>rs</b>. */
- void
- routerstatus_free(routerstatus_t *rs)
- {
- tor_free(rs);
- }
- /** Free all storage held by the local_routerstatus object <b>rs</b>. */
- static void
- local_routerstatus_free(local_routerstatus_t *rs)
- {
- tor_free(rs);
- }
- /** Free all storage held by the networkstatus object <b>ns</b>. */
- void
- networkstatus_free(networkstatus_t *ns)
- {
- tor_free(ns->source_address);
- tor_free(ns->contact);
- if (ns->signing_key)
- crypto_free_pk_env(ns->signing_key);
- tor_free(ns->client_versions);
- tor_free(ns->server_versions);
- if (ns->entries) {
- SMARTLIST_FOREACH(ns->entries, routerstatus_t *, rs,
- routerstatus_free(rs));
- smartlist_free(ns->entries);
- }
- tor_free(ns);
- }
- /** Forget that we have issued any router-related warnings, so that we'll
- * warn again if we see the same errors. */
- void
- routerlist_reset_warnings(void)
- {
- if (!warned_nicknames)
- warned_nicknames = smartlist_create();
- SMARTLIST_FOREACH(warned_nicknames, char *, cp, tor_free(cp));
- smartlist_clear(warned_nicknames); /* now the list is empty. */
- if (!warned_conflicts)
- warned_conflicts = smartlist_create();
- SMARTLIST_FOREACH(warned_conflicts, char *, cp, tor_free(cp));
- smartlist_clear(warned_conflicts); /* now the list is empty. */
- if (!routerstatus_list)
- routerstatus_list = smartlist_create();
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, rs,
- rs->name_lookup_warned = 0);
- have_warned_about_unverified_status = 0;
- have_warned_about_old_version = 0;
- have_warned_about_new_version = 0;
- }
- /** Mark the router with ID <b>digest</b> as non-running in our routerlist. */
- void
- router_mark_as_down(const char *digest)
- {
- routerinfo_t *router;
- local_routerstatus_t *status;
- tor_assert(digest);
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, d,
- if (!memcmp(d->digest, digest, DIGEST_LEN))
- d->is_running = 0);
- router = router_get_by_digest(digest);
- if (router) {
- debug(LD_DIR,"Marking router '%s' as down.",router->nickname);
- if (router_is_me(router) && !we_are_hibernating())
- warn(LD_NET, "We just marked ourself as down. Are your external "
- "addresses reachable?");
- router->is_running = 0;
- }
- status = router_get_combined_status_by_digest(digest);
- if (status) {
- status->status.is_running = 0;
- }
- }
- /** Add <b>router</b> to the routerlist, if we don't already have it. Replace
- * older entries (if any) with the same key. Note: Callers should not hold
- * their pointers to <b>router</b> if this function fails; <b>router</b>
- * will either be inserted into the routerlist or freed.
- *
- * Returns >= 0 if the router was added; less than 0 if it was not.
- *
- * If we're returning non-zero, then assign to *<b>msg</b> a static string
- * describing the reason for not liking the routerinfo.
- *
- * If the return value is less than -1, there was a problem with the
- * routerinfo. If the return value is equal to -1, then the routerinfo was
- * fine, but out-of-date. If the return value is equal to 1, the
- * routerinfo was accepted, but we should notify the generator of the
- * descriptor using the message *<b>msg</b>.
- *
- * If <b>from_cache</b>, this descriptor came from our disk cache. If
- * <b>from_fetch</b>, we received it in response to a request we made.
- * (If both are false, that means it was uploaded to us as an auth dir
- * server or via the controller.)
- *
- * This function should be called *after*
- * routers_update_status_from_networkstatus; subsequently, you should call
- * router_rebuild_store and control_event_descriptors_changed.
- *
- * XXXX never replace your own descriptor.
- */
- int
- router_add_to_routerlist(routerinfo_t *router, const char **msg,
- int from_cache, int from_fetch)
- {
- int i;
- char id_digest[DIGEST_LEN];
- int authdir = get_options()->AuthoritativeDir;
- int authdir_verified = 0;
- tor_assert(msg);
- if (!routerlist)
- router_get_routerlist();
- /* XXXX NM If this assert doesn't trigger, we should remove the id_digest
- * local. */
- crypto_pk_get_digest(router->identity_pkey, id_digest);
- tor_assert(!memcmp(id_digest, router->cache_info.identity_digest,
- DIGEST_LEN));
- /* Make sure that we haven't already got this exact descriptor. */
- if (digestmap_get(routerlist->desc_digest_map,
- router->cache_info.signed_descriptor_digest)) {
- info(LD_DIR, "Dropping descriptor that we already have for router '%s'",
- router->nickname);
- *msg = "Router descriptor was not new.";
- routerinfo_free(router);
- return -1;
- }
- if (routerlist_is_overfull(routerlist))
- routerlist_remove_old_routers();
- if (authdir) {
- if (authdir_wants_to_reject_router(router, msg,
- !from_cache && !from_fetch)) {
- tor_assert(*msg);
- routerinfo_free(router);
- return -2;
- }
- authdir_verified = router->is_verified;
- } else if (from_fetch) {
- /* Only check the descriptor digest against the network statuses when
- * we are receiving in response to a fetch. */
- if (!signed_desc_digest_is_recognized(&router->cache_info)) {
- warn(LD_DIR, "Dropping unrecognized descriptor for router '%s'",
- router->nickname);
- *msg = "Router descriptor is not referenced by any network-status.";
- routerinfo_free(router);
- return -1;
- }
- }
- /* If we have a router with this name, and the identity key is the same,
- * choose the newer one. If the identity key has changed, and one of the
- * routers is named, drop the unnamed ones. (If more than one are named,
- * drop the old ones.)
- */
- for (i = 0; i < smartlist_len(routerlist->routers); ++i) {
- routerinfo_t *old_router = smartlist_get(routerlist->routers, i);
- if (!crypto_pk_cmp_keys(router->identity_pkey,old_router->identity_pkey)) {
- if (router->cache_info.published_on <=
- old_router->cache_info.published_on) {
- /* Same key, but old */
- debug(LD_DIR, "Skipping not-new descriptor for router '%s'",
- router->nickname);
- routerlist_insert_old(routerlist, router);
- *msg = "Router descriptor was not new.";
- return -1;
- } else {
- /* Same key, new. */
- int unreachable = 0;
- debug(LD_DIR, "Replacing entry for router '%s/%s' [%s]",
- router->nickname, old_router->nickname,
- hex_str(id_digest,DIGEST_LEN));
- if (router->addr == old_router->addr &&
- router->or_port == old_router->or_port) {
- /* these carry over when the address and orport are unchanged.*/
- router->last_reachable = old_router->last_reachable;
- router->testing_since = old_router->testing_since;
- router->num_unreachable_notifications =
- old_router->num_unreachable_notifications;
- }
- if (authdir &&
- dirserv_thinks_router_is_blatantly_unreachable(router,
- time(NULL))) {
- if (router->num_unreachable_notifications >= 3) {
- unreachable = 1;
- notice(LD_DIR, "Notifying server '%s' that it's unreachable. "
- "(ContactInfo '%s', platform '%s').",
- router->nickname,
- router->contact_info ? router->contact_info : "",
- router->platform ? router->platform : "");
- } else {
- info(LD_DIR,"'%s' may be unreachable -- the %d previous "
- "descriptors were thought to be unreachable.",
- router->nickname, router->num_unreachable_notifications);
- router->num_unreachable_notifications++;
- }
- }
- routerlist_replace(routerlist, old_router, router, i, 1);
- if (!from_cache) {
- router_append_to_journal(&router->cache_info);
- }
- directory_set_dirty();
- *msg = unreachable ? "Dirserver believes your ORPort is unreachable" :
- authdir_verified ? "Verified server updated" :
- ("Unverified server updated. (Have you sent us your key "
- "fingerprint?)");
- return unreachable ? 1 : 0;
- }
- } else if (!strcasecmp(router->nickname, old_router->nickname)) {
- /* nicknames match, keys don't. */
- if (router->is_named) {
- /* The new verified router replaces the old one; remove the
- * old one. And carry on to the end of the list, in case
- * there are more old unverified routers with this nickname
- */
- /* mark-for-close connections using the old key, so we can
- * make new ones with the new key.
- */
- connection_t *conn;
- while ((conn = connection_or_get_by_identity_digest(
- old_router->cache_info.identity_digest))) {
- // And LD_OR? XXXXNM
- info(LD_DIR,"Closing conn to router '%s'; there is now a named "
- "router with that name.",
- old_router->nickname);
- connection_mark_for_close(conn);
- }
- routerlist_remove(routerlist, old_router, i--, 0);
- } else if (old_router->is_named) {
- /* Can't replace a verified router with an unverified one. */
- debug(LD_DIR, "Skipping unverified entry for verified router '%s'",
- router->nickname);
- routerinfo_free(router);
- *msg =
- "Already have named router with same nickname and different key.";
- return -2;
- }
- }
- }
- /* We haven't seen a router with this name before. Add it to the end of
- * the list. */
- routerlist_insert(routerlist, router);
- if (!from_cache)
- router_append_to_journal(&router->cache_info);
- directory_set_dirty();
- return 0;
- }
- static int
- _compare_old_routers_by_identity(const void **_a, const void **_b)
- {
- int i;
- const signed_descriptor_t *r1 = *_a, *r2 = *_b;
- if ((i = memcmp(r1->identity_digest, r2->identity_digest, DIGEST_LEN)))
- return i;
- return r1->published_on - r2->published_on;
- }
- struct duration_idx_t {
- int duration;
- int idx;
- int old;
- };
- static int
- _compare_duration_idx(const void *_d1, const void *_d2)
- {
- const struct duration_idx_t *d1 = _d1;
- const struct duration_idx_t *d2 = _d2;
- return d1->duration - d2->duration;
- }
- /** The range <b>lo</b> through <b>hi</b> inclusive of routerlist->old_routers
- * must contain routerinfo_t with the same identity and with publication time
- * in ascending order. Remove members from this range until there are no more
- * than MAX_DESCRIPTORS_PER_ROUTER remaining. Start by removing the oldest
- * members from before <b>cutoff</b>, then remove members which were current
- * for the lowest amount of time. The order of members of old_routers at
- * indices <b>lo</b> or higher may be changed.
- */
- static void
- routerlist_remove_old_cached_routers_with_id(time_t cutoff, int lo, int hi,
- digestmap_t *retain)
- {
- int i, n = hi-lo+1, n_extra;
- int n_rmv = 0;
- struct duration_idx_t *lifespans;
- uint8_t *rmv, *must_keep;
- smartlist_t *lst = routerlist->old_routers;
- #if 1
- const char *ident;
- tor_assert(hi < smartlist_len(lst));
- tor_assert(lo <= hi);
- ident = ((signed_descriptor_t*)smartlist_get(lst, lo))->identity_digest;
- for (i = lo+1; i <= hi; ++i) {
- signed_descriptor_t *r = smartlist_get(lst, i);
- tor_assert(!memcmp(ident, r->identity_digest, DIGEST_LEN));
- }
- #endif
- /* Check whether we need to do anything at all. */
- n_extra = n - MAX_DESCRIPTORS_PER_ROUTER;
- if (n_extra <= 0)
- return;
- lifespans = tor_malloc_zero(sizeof(struct duration_idx_t)*n);
- rmv = tor_malloc_zero(sizeof(uint8_t)*n);
- must_keep = tor_malloc_zero(sizeof(uint8_t)*n);
- /* Set lifespans to contain the lifespan and index of each server. */
- /* Set rmv[i-lo]=1 if we're going to remove a server for being too old. */
- for (i = lo; i <= hi; ++i) {
- signed_descriptor_t *r = smartlist_get(lst, i);
- signed_descriptor_t *r_next;
- lifespans[i-lo].idx = i;
- if (retain && digestmap_get(retain, r->signed_descriptor_digest)) {
- must_keep[i-lo] = 1;
- }
- if (i < hi) {
- r_next = smartlist_get(lst, i+1);
- tor_assert(r->published_on <= r_next->published_on);
- lifespans[i-lo].duration = (r_next->published_on - r->published_on);
- } else {
- r_next = NULL;
- lifespans[i-lo].duration = INT_MAX;
- }
- if (!must_keep[i-lo] && r->published_on < cutoff && n_rmv < n_extra) {
- ++n_rmv;
- lifespans[i-lo].old = 1;
- rmv[i-lo] = 1;
- }
- }
- if (n_rmv < n_extra) {
- /**
- * We aren't removing enough servers for being old. Sort lifespans by
- * the duration of liveness, and remove the ones we're not already going to
- * remove based on how long they were alive.
- **/
- qsort(lifespans, n, sizeof(struct duration_idx_t), _compare_duration_idx);
- for (i = 0; i < n && n_rmv < n_extra; ++i) {
- if (!must_keep[lifespans[i].idx-lo] && !lifespans[i].old) {
- rmv[lifespans[i].idx-lo] = 1;
- ++n_rmv;
- }
- }
- }
- for (i = hi; i >= lo; --i) {
- if (rmv[i-lo])
- routerlist_remove_old(routerlist, smartlist_get(lst, i), i);
- }
- tor_free(must_keep);
- tor_free(rmv);
- tor_free(lifespans);
- }
- /** Deactivate any routers from the routerlist that are more than
- * ROUTER_MAX_AGE seconds old; remove old routers from the list of
- * cached routers if we have too many.
- */
- void
- routerlist_remove_old_routers(void)
- {
- int i, hi=-1;
- const char *cur_id = NULL;
- time_t now = time(NULL);
- time_t cutoff;
- routerinfo_t *router;
- signed_descriptor_t *sd;
- digestmap_t *retain;
- or_options_t *options = get_options();
- if (!routerlist || !networkstatus_list)
- return;
- retain = digestmap_new();
- cutoff = now - OLD_ROUTER_DESC_MAX_AGE;
- if (server_mode(options) && options->DirPort) {
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- SMARTLIST_FOREACH(ns->entries, routerstatus_t *, rs,
- if (rs->published_on >= cutoff)
- digestmap_set(retain, rs->descriptor_digest, (void*)1));
- });
- }
- cutoff = now - ROUTER_MAX_AGE;
- /* Remove too-old members of routerlist->routers. */
- for (i = 0; i < smartlist_len(routerlist->routers); ++i) {
- router = smartlist_get(routerlist->routers, i);
- if (router->cache_info.published_on <= cutoff &&
- !digestmap_get(retain, router->cache_info.signed_descriptor_digest)) {
- /* Too old. Remove it. */
- info(LD_DIR, "Forgetting obsolete (too old) routerinfo for router '%s'",
- router->nickname);
- routerlist_remove(routerlist, router, i--, 1);
- }
- }
- /* Remove far-too-old members of routerlist->old_routers. */
- cutoff = now - OLD_ROUTER_DESC_MAX_AGE;
- for (i = 0; i < smartlist_len(routerlist->old_routers); ++i) {
- sd = smartlist_get(routerlist->old_routers, i);
- if (sd->published_on <= cutoff &&
- !digestmap_get(retain, sd->signed_descriptor_digest)) {
- /* Too old. Remove it. */
- routerlist_remove_old(routerlist, sd, i--);
- }
- }
- /* Now we're looking at routerlist->old_routers for extraneous
- * members. (We'd keep all the members if we could, but we'd like to save
- * space.) First, check whether we have too many router descriptors, total.
- * We're okay with having too many for some given router, so long as the
- * total number doesn't approach MAX_DESCRIPTORS_PER_ROUTER*len(router).
- */
- if (smartlist_len(routerlist->old_routers) <
- smartlist_len(routerlist->routers) * (MAX_DESCRIPTORS_PER_ROUTER - 1))
- goto done;
- smartlist_sort(routerlist->old_routers, _compare_old_routers_by_identity);
- /* Iterate through the list from back to front, so when we remove descriptors
- * we don't mess up groups we haven't gotten to. */
- for (i = smartlist_len(routerlist->old_routers)-1; i >= 0; --i) {
- signed_descriptor_t *r = smartlist_get(routerlist->old_routers, i);
- if (!cur_id) {
- cur_id = r->identity_digest;
- hi = i;
- }
- if (memcmp(cur_id, r->identity_digest, DIGEST_LEN)) {
- routerlist_remove_old_cached_routers_with_id(cutoff, i+1, hi, retain);
- cur_id = r->identity_digest;
- hi = i;
- }
- }
- if (hi>=0)
- routerlist_remove_old_cached_routers_with_id(cutoff, 0, hi, retain);
- routerlist_assert_ok(routerlist);
- done:
- digestmap_free(retain, NULL);
- }
- /**
- * Code to parse a single router descriptor and insert it into the
- * routerlist. Return -1 if the descriptor was ill-formed; 0 if the
- * descriptor was well-formed but could not be added; and 1 if the
- * descriptor was added.
- *
- * If we don't add it and <b>msg</b> is not NULL, then assign to
- * *<b>msg</b> a static string describing the reason for refusing the
- * descriptor.
- *
- * This is used only by the controller.
- */
- int
- router_load_single_router(const char *s, const char **msg)
- {
- routerinfo_t *ri;
- smartlist_t *lst;
- tor_assert(msg);
- *msg = NULL;
- if (!(ri = router_parse_entry_from_string(s, NULL))) {
- warn(LD_DIR, "Error parsing router descriptor; dropping.");
- *msg = "Couldn't parse router descriptor.";
- return -1;
- }
- if (router_is_me(ri)) {
- warn(LD_DIR, "Router's identity key matches mine; dropping.");
- *msg = "Router's identity key matches mine.";
- routerinfo_free(ri);
- return 0;
- }
- lst = smartlist_create();
- smartlist_add(lst, ri);
- routers_update_status_from_networkstatus(lst, 0);
- if (router_add_to_routerlist(ri, msg, 0, 0)<0) {
- warn(LD_DIR, "Couldn't add router to list: %s Dropping.",
- *msg?*msg:"(No message).");
- /* we've already assigned to *msg now, and ri is already freed */
- smartlist_free(lst);
- return 0;
- } else {
- control_event_descriptors_changed(lst);
- smartlist_free(lst);
- debug(LD_DIR, "Added router to list");
- return 1;
- }
- }
- /** Given a string <b>s</b> containing some routerdescs, parse it and put the
- * routers into our directory. If <b>from_cache</b> is false, the routers
- * are in response to a query to the network: cache them.
- *
- * If <b>requested_fingerprints</b> is provided, it must contain a list of
- * uppercased identity fingerprints. Do not update any router whose
- * fingerprint is not on the list; after updating a router, remove its
- * fingerprint from the list.
- */
- void
- router_load_routers_from_string(const char *s, int from_cache,
- smartlist_t *requested_fingerprints)
- {
- smartlist_t *routers = smartlist_create(), *changed = smartlist_create();
- char fp[HEX_DIGEST_LEN+1];
- const char *msg;
- router_parse_list_from_string(&s, routers);
- routers_update_status_from_networkstatus(routers, !from_cache);
- info(LD_DIR, "%d elements to add", smartlist_len(routers));
- SMARTLIST_FOREACH(routers, routerinfo_t *, ri,
- {
- base16_encode(fp, sizeof(fp), ri->cache_info.signed_descriptor_digest,
- DIGEST_LEN);
- if (requested_fingerprints) {
- if (smartlist_string_isin(requested_fingerprints, fp)) {
- smartlist_string_remove(requested_fingerprints, fp);
- } else {
- char *requested =
- smartlist_join_strings(requested_fingerprints," ",0,NULL);
- warn(LD_DIR,
- "We received a router descriptor with a fingerprint (%s) "
- "that we never requested. (We asked for: %s.) Dropping.",
- fp, requested);
- tor_free(requested);
- routerinfo_free(ri);
- continue;
- }
- }
- if (router_add_to_routerlist(ri, &msg, from_cache, !from_cache) >= 0)
- smartlist_add(changed, ri);
- });
- if (smartlist_len(changed))
- control_event_descriptors_changed(changed);
- routerlist_assert_ok(routerlist);
- router_rebuild_store(0);
- smartlist_free(routers);
- smartlist_free(changed);
- }
- /** Helper: return a newly allocated string containing the name of the filename
- * where we plan to cache <b>ns</b>. */
- static char *
- networkstatus_get_cache_filename(const networkstatus_t *ns)
- {
- const char *datadir = get_options()->DataDirectory;
- size_t len = strlen(datadir)+64;
- char fp[HEX_DIGEST_LEN+1];
- char *fn = tor_malloc(len+1);
- base16_encode(fp, HEX_DIGEST_LEN+1, ns->identity_digest, DIGEST_LEN);
- tor_snprintf(fn, len, "%s/cached-status/%s",datadir,fp);
- return fn;
- }
- /** Helper for smartlist_sort: Compare two networkstatus objects by
- * publication date. */
- static int
- _compare_networkstatus_published_on(const void **_a, const void **_b)
- {
- const networkstatus_t *a = *_a, *b = *_b;
- if (a->published_on < b->published_on)
- return -1;
- else if (a->published_on > b->published_on)
- return 1;
- else
- return 0;
- }
- /** Add the parsed neworkstatus in <b>ns</b> (with original document in
- * <b>s</b> to the disk cache (and the in-memory directory server cache) as
- * appropriate. */
- static int
- add_networkstatus_to_cache(const char *s,
- networkstatus_source_t source,
- networkstatus_t *ns)
- {
- if (source != NS_FROM_CACHE) {
- char *fn = networkstatus_get_cache_filename(ns);
- if (write_str_to_file(fn, s, 0)<0) {
- notice(LD_FS, "Couldn't write cached network status to \"%s\"", fn);
- }
- tor_free(fn);
- }
- if (get_options()->DirPort)
- dirserv_set_cached_networkstatus_v2(s,
- ns->identity_digest,
- ns->published_on);
- return 0;
- }
- /** How far in the future do we allow a network-status to get before removing
- * it? (seconds) */
- #define NETWORKSTATUS_ALLOW_SKEW (48*60*60)
- /** Given a string <b>s</b> containing a network status that we received at
- * <b>arrived_at</b> from <b>source</b>, try to parse it, see if we want to
- * store it, and put it into our cache is necessary.
- *
- * If <b>source</b> is NS_FROM_DIR or NS_FROM_CACHE, do not replace our
- * own networkstatus_t (if we're a directory server).
- *
- * If <b>source</b> is NS_FROM_CACHE, do not write our networkstatus_t to the
- * cache.
- *
- * If <b>requested_fingerprints</b> is provided, it must contain a list of
- * uppercased identity fingerprints. Do not update any networkstatus whose
- * fingerprint is not on the list; after updating a networkstatus, remove its
- * fingerprint from the list.
- *
- * Return 0 on success, -1 on failure.
- *
- * Callers should make sure that routers_update_all_from_networkstatus() is
- * invoked after this function succeeds.
- */
- int
- router_set_networkstatus(const char *s, time_t arrived_at,
- networkstatus_source_t source, smartlist_t *requested_fingerprints)
- {
- networkstatus_t *ns;
- int i, found;
- time_t now;
- int skewed = 0;
- trusted_dir_server_t *trusted_dir = NULL;
- const char *source_desc = NULL;
- char fp[HEX_DIGEST_LEN+1];
- char published[ISO_TIME_LEN+1];
- ns = networkstatus_parse_from_string(s);
- if (!ns) {
- warn(LD_DIR, "Couldn't parse network status.");
- return -1;
- }
- base16_encode(fp, HEX_DIGEST_LEN+1, ns->identity_digest, DIGEST_LEN);
- if (!(trusted_dir =
- router_get_trusteddirserver_by_digest(ns->identity_digest))) {
- info(LD_DIR, "Network status was signed, but not by an authoritative "
- "directory we recognize.");
- if (!get_options()->DirPort) {
- networkstatus_free(ns);
- return 0;
- }
- source_desc = fp;
- } else {
- source_desc = trusted_dir->description;
- }
- now = time(NULL);
- if (arrived_at > now)
- arrived_at = now;
- ns->received_on = arrived_at;
- format_iso_time(published, ns->published_on);
- if (ns->published_on > now + NETWORKSTATUS_ALLOW_SKEW) {
- warn(LD_GENERAL, "Network status from %s was published in the future "
- "(%s GMT). Somebody is skewed here: check your clock. Not caching.",
- source_desc, published);
- skewed = 1;
- }
- if (!networkstatus_list)
- networkstatus_list = smartlist_create();
- if (source == NS_FROM_DIR && router_digest_is_me(ns->identity_digest)) {
- /* Don't replace our own networkstatus when we get it from somebody else.*/
- networkstatus_free(ns);
- return 0;
- }
- if (requested_fingerprints) {
- if (smartlist_string_isin(requested_fingerprints, fp)) {
- smartlist_string_remove(requested_fingerprints, fp);
- } else {
- char *requested =
- smartlist_join_strings(requested_fingerprints," ",0,NULL);
- warn(LD_DIR,
- "We received a network status with a fingerprint (%s) that we "
- "never requested. (We asked for: %s.) Dropping.", fp, requested);
- tor_free(requested);
- return 0;
- }
- }
- if (!trusted_dir) {
- if (!skewed && get_options()->DirPort) {
- add_networkstatus_to_cache(s, source, ns);
- networkstatus_free(ns);
- }
- return 0;
- }
- if (source != NS_FROM_CACHE && trusted_dir)
- trusted_dir->n_networkstatus_failures = 0;
- found = 0;
- for (i=0; i < smartlist_len(networkstatus_list); ++i) {
- networkstatus_t *old_ns = smartlist_get(networkstatus_list, i);
- if (!memcmp(old_ns->identity_digest, ns->identity_digest, DIGEST_LEN)) {
- if (!memcmp(old_ns->networkstatus_digest,
- ns->networkstatus_digest, DIGEST_LEN)) {
- /* Same one we had before. */
- networkstatus_free(ns);
- info(LD_DIR,
- "Not replacing network-status from %s (published %s); "
- "we already have it.",
- trusted_dir->description, published);
- if (old_ns->received_on < arrived_at) {
- if (source != NS_FROM_CACHE) {
- char *fn = networkstatus_get_cache_filename(old_ns);
- /* We use mtime to tell when it arrived, so update that. */
- touch_file(fn);
- tor_free(fn);
- }
- old_ns->received_on = arrived_at;
- }
- return 0;
- } else if (old_ns->published_on >= ns->published_on) {
- char old_published[ISO_TIME_LEN+1];
- format_iso_time(old_published, old_ns->published_on);
- info(LD_DIR,
- "Not replacing network-status from %s (published %s);"
- " we have a newer one (published %s) for this authority.",
- trusted_dir->description, published,
- old_published);
- networkstatus_free(ns);
- return 0;
- } else {
- networkstatus_free(old_ns);
- smartlist_set(networkstatus_list, i, ns);
- found = 1;
- break;
- }
- }
- }
- if (!found)
- smartlist_add(networkstatus_list, ns);
- SMARTLIST_FOREACH(ns->entries, routerstatus_t *, rs,
- {
- if (!router_get_by_descriptor_digest(rs->descriptor_digest))
- rs->need_to_mirror = 1;
- });
- info(LD_DIR, "Setting networkstatus %s %s (published %s)",
- source == NS_FROM_CACHE?"cached from":
- (source==NS_FROM_DIR?"downloaded from":"generated for"),
- trusted_dir->description, published);
- networkstatus_list_has_changed = 1;
- smartlist_sort(networkstatus_list, _compare_networkstatus_published_on);
- if (!skewed)
- add_networkstatus_to_cache(s, source, ns);
- networkstatus_list_update_recent(now);
- return 0;
- }
- /** How old do we allow a network-status to get before removing it
- * completely? */
- #define MAX_NETWORKSTATUS_AGE (10*24*60*60)
- /** Remove all very-old network_status_t objects from memory and from the
- * disk cache. */
- void
- networkstatus_list_clean(time_t now)
- {
- int i;
- if (!networkstatus_list)
- return;
- for (i = 0; i < smartlist_len(networkstatus_list); ++i) {
- networkstatus_t *ns = smartlist_get(networkstatus_list, i);
- char *fname = NULL;;
- if (ns->published_on + MAX_NETWORKSTATUS_AGE > now)
- continue;
- /* Okay, this one is too old. Remove it from the list, and delete it
- * from the cache. */
- smartlist_del(networkstatus_list, i--);
- fname = networkstatus_get_cache_filename(ns);
- if (file_status(fname) == FN_FILE) {
- info(LD_DIR, "Removing too-old networkstatus in %s", fname);
- unlink(fname);
- }
- tor_free(fname);
- if (get_options()->DirPort) {
- dirserv_set_cached_networkstatus_v2(NULL, ns->identity_digest, 0);
- }
- networkstatus_free(ns);
- }
- }
- /** Helper for bsearching a list of routerstatus_t pointers.*/
- static int
- _compare_digest_to_routerstatus_entry(const void *_key, const void **_member)
- {
- const char *key = _key;
- const routerstatus_t *rs = *_member;
- return memcmp(key, rs->identity_digest, DIGEST_LEN);
- }
- /** Return the entry in <b>ns</b> for the identity digest <b>digest</b>, or
- * NULL if none was found. */
- static routerstatus_t *
- networkstatus_find_entry(networkstatus_t *ns, const char *digest)
- {
- return smartlist_bsearch(ns->entries, digest,
- _compare_digest_to_routerstatus_entry);
- }
- /** Return the consensus view of the status of the router whose digest is
- * <b>digest</b>, or NULL if we don't know about any such router. */
- local_routerstatus_t *
- router_get_combined_status_by_digest(const char *digest)
- {
- if (!routerstatus_list)
- return NULL;
- return smartlist_bsearch(routerstatus_list, digest,
- _compare_digest_to_routerstatus_entry);
- }
- /** Return true iff any networkstatus includes a descriptor whose digest
- * is that of <b>desc</b>. */
- static int
- signed_desc_digest_is_recognized(signed_descriptor_t *desc)
- {
- routerstatus_t *rs;
- if (!networkstatus_list)
- return 0;
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- if (!(rs = networkstatus_find_entry(ns, desc->identity_digest)))
- continue;
- if (!memcmp(rs->descriptor_digest,
- desc->signed_descriptor_digest, DIGEST_LEN))
- return 1;
- });
- return 0;
- }
- /* XXXX These should be configurable, perhaps? NM */
- #define AUTHORITY_NS_CACHE_INTERVAL 5*60
- #define NONAUTHORITY_NS_CACHE_INTERVAL 15*60
- /** We are a directory server, and so cache network_status documents.
- * Initiate downloads as needed to update them. For authorities, this means
- * asking each trusted directory for its network-status. For caches, this
- * means asking a random authority for all network-statuses.
- */
- static void
- update_networkstatus_cache_downloads(time_t now)
- {
- int authority = authdir_mode(get_options());
- int interval =
- authority ? AUTHORITY_NS_CACHE_INTERVAL : NONAUTHORITY_NS_CACHE_INTERVAL;
- if (last_networkstatus_download_attempted + interval >= now)
- return;
- if (!trusted_dir_servers)
- return;
- last_networkstatus_download_attempted = now;
- if (authority) {
- /* An authority launches a separate connection for everybody. */
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, ds,
- {
- char resource[HEX_DIGEST_LEN+6];
- if (router_digest_is_me(ds->digest))
- continue;
- if (connection_get_by_type_addr_port_purpose(
- CONN_TYPE_DIR, ds->addr, ds->dir_port,
- DIR_PURPOSE_FETCH_NETWORKSTATUS)) {
- /* We are already fetching this one. */
- continue;
- }
- strlcpy(resource, "fp/", sizeof(resource));
- base16_encode(resource+3, sizeof(resource)-3, ds->digest, DIGEST_LEN);
- strlcat(resource, ".z", sizeof(resource));
- directory_initiate_command_routerstatus(
- &ds->fake_status, DIR_PURPOSE_FETCH_NETWORKSTATUS,
- 0, /* Not private */
- resource,
- NULL, 0 /* No payload. */);
- });
- } else {
- /* A non-authority cache launches one connection to a random authority. */
- /* (Check whether we're currently fetching network-status objects.) */
- if (!connection_get_by_type_purpose(CONN_TYPE_DIR,
- DIR_PURPOSE_FETCH_NETWORKSTATUS))
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_NETWORKSTATUS,"all.z",1);
- }
- }
- /*XXXX Should these be configurable? NM*/
- /** How old (in seconds) can a network-status be before we try replacing it? */
- #define NETWORKSTATUS_MAX_VALIDITY (48*60*60)
- /** How long (in seconds) does a client wait after getting a network status
- * before downloading the next in sequence? */
- #define NETWORKSTATUS_CLIENT_DL_INTERVAL (30*60)
- /* How many times do we allow a networkstatus download to fail before we
- * assume that the authority isn't publishing? */
- #define NETWORKSTATUS_N_ALLOWABLE_FAILURES 3
- /** We are not a directory cache or authority. Update our network-status list
- * by launching a new directory fetch for enough network-status documents "as
- * necessary". See function comments for implementation details.
- */
- static void
- update_networkstatus_client_downloads(time_t now)
- {
- int n_live = 0, needed = 0, n_running_dirservers, n_dirservers, i;
- int most_recent_idx = -1;
- trusted_dir_server_t *most_recent = NULL;
- time_t most_recent_received = 0;
- char *resource, *cp;
- size_t resource_len;
- if (connection_get_by_type_purpose(CONN_TYPE_DIR,
- DIR_PURPOSE_FETCH_NETWORKSTATUS))
- return;
- /* This is a little tricky. We want to download enough network-status
- * objects so that we have at least half of them under
- * NETWORKSTATUS_MAX_VALIDITY publication time. We want to download a new
- * *one* if the most recent one's publication time is under
- * NETWORKSTATUS_CLIENT_DL_INTERVAL.
- */
- if (!trusted_dir_servers || !smartlist_len(trusted_dir_servers))
- return;
- n_dirservers = n_running_dirservers = smartlist_len(trusted_dir_servers);
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, ds,
- {
- networkstatus_t *ns = networkstatus_get_by_digest(ds->digest);
- if (!ns)
- continue;
- if (ds->n_networkstatus_failures > NETWORKSTATUS_N_ALLOWABLE_FAILURES) {
- --n_running_dirservers;
- continue;
- }
- if (ns->published_on > now-NETWORKSTATUS_MAX_VALIDITY)
- ++n_live;
- if (!most_recent || ns->received_on > most_recent_received) {
- most_recent_idx = ds_sl_idx; /* magic variable from FOREACH */
- most_recent = ds;
- most_recent_received = ns->received_on;
- }
- });
- /* Download enough so we have at least half live, but no more than all the
- * trusted dirservers we know.
- */
- if (n_live < (n_dirservers/2)+1)
- needed = (n_dirservers/2)+1-n_live;
- if (needed > n_running_dirservers)
- needed = n_running_dirservers;
- if (needed)
- info(LD_DIR, "For %d/%d running directory servers, we have %d live"
- " network-status documents. Downloading %d.",
- n_running_dirservers, n_dirservers, n_live, needed);
- /* Also, download at least 1 every NETWORKSTATUS_CLIENT_DL_INTERVAL. */
- if (n_running_dirservers &&
- most_recent_received < now-NETWORKSTATUS_CLIENT_DL_INTERVAL &&
- needed < 1) {
- info(LD_DIR, "Our most recent network-status document (from %s) "
- "is %d seconds old; downloading another.",
- most_recent?most_recent->description:"nobody",
- (int)(now-most_recent_received));
- needed = 1;
- }
- if (!needed)
- return;
- /* If no networkstatus was found, choose a dirserver at random as "most
- * recent". */
- if (most_recent_idx<0)
- most_recent_idx = crypto_rand_int(n_dirservers);
- /* Build a request string for all the resources we want. */
- resource_len = needed * (HEX_DIGEST_LEN+1) + 6;
- resource = tor_malloc(resource_len);
- memcpy(resource, "fp/", 3);
- cp = resource+3;
- for (i = most_recent_idx+1; needed; ++i) {
- trusted_dir_server_t *ds;
- if (i >= n_dirservers)
- i = 0;
- ds = smartlist_get(trusted_dir_servers, i);
- if (ds->n_networkstatus_failures > NETWORKSTATUS_N_ALLOWABLE_FAILURES)
- continue;
- base16_encode(cp, HEX_DIGEST_LEN+1, ds->digest, DIGEST_LEN);
- cp += HEX_DIGEST_LEN;
- --needed;
- if (needed)
- *cp++ = '+';
- }
- memcpy(cp, ".z", 3);
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_NETWORKSTATUS, resource, 1);
- tor_free(resource);
- }
- /** Launch requests for networkstatus documents as appropriate. */
- void
- update_networkstatus_downloads(time_t now)
- {
- or_options_t *options = get_options();
- if (server_mode(options) && options->DirPort)
- update_networkstatus_cache_downloads(time(NULL));
- else
- update_networkstatus_client_downloads(time(NULL));
- }
- /** Decide whether a given addr:port is definitely accepted,
- * definitely rejected, probably accepted, or probably rejected by a
- * given policy. If <b>addr</b> is 0, we don't know the IP of the
- * target address. If <b>port</b> is 0, we don't know the port of the
- * target address.
- *
- * For now, the algorithm is pretty simple: we look for definite and
- * uncertain matches. The first definite match is what we guess; if
- * it was preceded by no uncertain matches of the opposite policy,
- * then the guess is definite; otherwise it is probable. (If we
- * have a known addr and port, all matches are definite; if we have an
- * unknown addr/port, any address/port ranges other than "all" are
- * uncertain.)
- *
- * We could do better by assuming that some ranges never match typical
- * addresses (127.0.0.1, and so on). But we'll try this for now.
- */
- addr_policy_result_t
- router_compare_addr_to_addr_policy(uint32_t addr, uint16_t port,
- addr_policy_t *policy)
- {
- int maybe_reject = 0;
- int maybe_accept = 0;
- int match = 0;
- int maybe = 0;
- addr_policy_t *tmpe;
- for (tmpe=policy; tmpe; tmpe=tmpe->next) {
- maybe = 0;
- if (!addr) {
- /* Address is unknown. */
- if ((port >= tmpe->prt_min && port <= tmpe->prt_max) ||
- (!port && tmpe->prt_min<=1 && tmpe->prt_max>=65535)) {
- /* The port definitely matches. */
- if (tmpe->msk == 0) {
- match = 1;
- } else {
- maybe = 1;
- }
- } else if (!port) {
- /* The port maybe matches. */
- maybe = 1;
- }
- } else {
- /* Address is known */
- if ((addr & tmpe->msk) == (tmpe->addr & tmpe->msk)) {
- if (port >= tmpe->prt_min && port <= tmpe->prt_max) {
- /* Exact match for the policy */
- match = 1;
- } else if (!port) {
- maybe = 1;
- }
- }
- }
- if (maybe) {
- if (tmpe->policy_type == ADDR_POLICY_REJECT)
- maybe_reject = 1;
- else
- maybe_accept = 1;
- }
- if (match) {
- if (tmpe->policy_type == ADDR_POLICY_ACCEPT) {
- /* If we already hit a clause that might trigger a 'reject', than we
- * can't be sure of this certain 'accept'.*/
- return maybe_reject ? ADDR_POLICY_PROBABLY_ACCEPTED :
- ADDR_POLICY_ACCEPTED;
- } else {
- return maybe_accept ? ADDR_POLICY_PROBABLY_REJECTED :
- ADDR_POLICY_REJECTED;
- }
- }
- }
- /* accept all by default. */
- return maybe_reject ? ADDR_POLICY_PROBABLY_ACCEPTED : ADDR_POLICY_ACCEPTED;
- }
- /** Return 1 if all running sufficiently-stable routers will reject
- * addr:port, return 0 if any might accept it. */
- int
- router_exit_policy_all_routers_reject(uint32_t addr, uint16_t port,
- int need_uptime)
- {
- addr_policy_result_t r;
- if (!routerlist) return 1;
- SMARTLIST_FOREACH(routerlist->routers, routerinfo_t *, router,
- {
- if (router->is_running &&
- !router_is_unreliable(router, need_uptime, 0)) {
- r = router_compare_addr_to_addr_policy(addr, port, router->exit_policy);
- if (r != ADDR_POLICY_REJECTED && r != ADDR_POLICY_PROBABLY_REJECTED)
- return 0; /* this one could be ok. good enough. */
- }
- });
- return 1; /* all will reject. */
- }
- #if 0
- /**
- * If <b>policy</b> implicitly allows connections to any port in the
- * IP set <b>addr</b>/<b>mask</b>, then set *<b>policy_out</b> to the
- * part of the policy that allows it, and return 1. Else return 0.
- *
- * A policy allows an IP:Port combination <em>implicitly</em> if
- * it is included in a *: pattern, or in a fallback pattern.
- */
- static int
- policy_includes_addr_mask_implicitly(addr_policy_t *policy,
- uint32_t addr, uint32_t mask,
- addr_policy_t **policy_out)
- {
- uint32_t addr2;
- tor_assert(policy_out);
- addr &= mask;
- addr2 = addr | ~mask;
- for (; policy; policy=policy->next) {
- /* Does this policy cover all of the address range we're looking at? */
- /* Boolean logic time: range X is contained in range Y if, for
- * each bit B, all possible values of B in X are values of B in Y.
- * In "addr", we have every fixed bit set to its value, and every
- * free bit set to 0. In "addr2", we have every fixed bit set to
- * its value, and every free bit set to 1. So if addr and addr2 are
- * both in the policy, the range is covered by the policy.
- */
- uint32_t p_addr = policy->addr & policy->msk;
- if (p_addr == (addr & policy->msk) &&
- p_addr == (addr2 & policy->msk) &&
- (policy->prt_min <= 1 && policy->prt_max == 65535) &&
- policy->policy_type == ADDR_POLICY_REJECT) {
- return 0;
- }
- /* Does this policy cover some of the address range we're looking at? */
- /* Boolean logic time: range X and range Y intersect if there is
- * some z such that z & Xmask == Xaddr and z & Ymask == Yaddr.
- * This is FALSE iff there is some bit b where Xmask == yMask == 1
- * and Xaddr != Yaddr. So if X intersects with Y iff at every
- * place where Xmask&Ymask==1, Xaddr == Yaddr, or equivalently,
- * Xaddr&Xmask&Ymask == Yaddr&Xmask&Ymask.
- */
- if ((policy->addr & policy->msk & mask) == (addr & policy->msk) &&
- policy->policy_type == ADDR_POLICY_ACCEPT) {
- *policy_out = policy;
- return 1;
- }
- }
- *policy_out = NULL;
- return 1;
- }
- /** If <b>policy</b> implicitly allows connections to any port on
- * 127.*, 192.168.*, etc, then warn (if <b>should_warn</b> is set) and return
- * true. Else return false.
- **/
- int
- exit_policy_implicitly_allows_local_networks(addr_policy_t *policy,
- int should_warn)
- {
- addr_policy_t *p;
- int r=0,i;
- static struct {
- uint32_t addr; uint32_t mask; const char *network;
- } private_networks[] = {
- { 0x00000000, 0xff000000, "\"this\" network (0.0.0.0/8)" },
- { 0x7f000000, 0xff000000, "localhost (127.0.0.0/8)" },
- { 0x0a000000, 0xff000000, "addresses in private network 10.0.0.0/8" },
- { 0xa9fe0000, 0xffff0000, "addresses in private network 169.254.0.0/16" },
- { 0xac100000, 0xfff00000, "addresses in private network 172.16.0.0/12" },
- { 0xc0a80000, 0xffff0000, "addresses in private network 192.168.0.0/16" },
- { 0,0,NULL},
- };
- for (i=0; private_networks[i].mask; ++i) {
- p = NULL;
- /* info(LD_CONFIG,"Checking network %s", private_networks[i].network); */
- if (policy_includes_addr_mask_implicitly(
- policy, private_networks[i].addr, private_networks[i].mask, &p)) {
- if (should_warn)
- warn(LD_CONFIG, "Exit policy %s implicitly accepts %s",
- p?p->string:"(default)",
- private_networks[i].network);
- r = 1;
- }
- }
- return r;
- }
- #endif
- /** Return true iff <b>router</b> does not permit exit streams.
- */
- int
- router_exit_policy_rejects_all(routerinfo_t *router)
- {
- return router_compare_addr_to_addr_policy(0, 0, router->exit_policy)
- == ADDR_POLICY_REJECTED;
- }
- /** Add to the list of authorized directory servers one at
- * <b>address</b>:<b>port</b>, with identity key <b>digest</b>. If
- * <b>address</b> is NULL, add ourself. */
- void
- add_trusted_dir_server(const char *nickname, const char *address,
- uint16_t port, const char *digest, int supports_v1)
- {
- trusted_dir_server_t *ent;
- uint32_t a;
- char *hostname = NULL;
- size_t dlen;
- if (!trusted_dir_servers)
- trusted_dir_servers = smartlist_create();
- if (!address) { /* The address is us; we should guess. */
- if (resolve_my_address(get_options(), &a, &hostname) < 0) {
- warn(LD_CONFIG,
- "Couldn't find a suitable address when adding ourself as a "
- "trusted directory server.");
- return;
- }
- } else {
- if (tor_lookup_hostname(address, &a)) {
- warn(LD_CONFIG, "Unable to lookup address for directory server at '%s'",
- address);
- return;
- }
- hostname = tor_strdup(address);
- a = ntohl(a);
- }
- ent = tor_malloc_zero(sizeof(trusted_dir_server_t));
- ent->nickname = nickname ? tor_strdup(nickname) : NULL;
- ent->address = hostname;
- ent->addr = a;
- ent->dir_port = port;
- ent->is_running = 1;
- ent->is_v1_authority = supports_v1;
- memcpy(ent->digest, digest, DIGEST_LEN);
- dlen = 64 + strlen(hostname) + (nickname?strlen(nickname):0);
- ent->description = tor_malloc(dlen);
- if (nickname)
- tor_snprintf(ent->description, dlen, "directory server \"%s\" at %s:%d",
- nickname, hostname, (int)port);
- else
- tor_snprintf(ent->description, dlen, "directory server at %s:%d",
- hostname, (int)port);
- ent->fake_status.addr = ent->addr;
- memcpy(ent->fake_status.identity_digest, digest, DIGEST_LEN);
- if (nickname)
- strlcpy(ent->fake_status.nickname, nickname,
- sizeof(ent->fake_status.nickname));
- else
- ent->fake_status.nickname[0] = '\0';
- ent->fake_status.dir_port = ent->dir_port;
- smartlist_add(trusted_dir_servers, ent);
- }
- /** Free storage held in <b>ds</b> */
- void
- trusted_dir_server_free(trusted_dir_server_t *ds)
- {
- tor_free(ds->nickname);
- tor_free(ds->description);
- tor_free(ds->address);
- tor_free(ds);
- }
- /** Remove all members from the list of trusted dir servers. */
- void
- clear_trusted_dir_servers(void)
- {
- if (trusted_dir_servers) {
- SMARTLIST_FOREACH(trusted_dir_servers, trusted_dir_server_t *, ent,
- trusted_dir_server_free(ent));
- smartlist_clear(trusted_dir_servers);
- } else {
- trusted_dir_servers = smartlist_create();
- }
- }
- /** Return the network status with a given identity digest. */
- networkstatus_t *
- networkstatus_get_by_digest(const char *digest)
- {
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- if (!memcmp(ns->identity_digest, digest, DIGEST_LEN))
- return ns;
- });
- return NULL;
- }
- /** We believe networkstatuses more recent than this when they tell us that
- * our server is broken, invalid, obsolete, etc. */
- #define SELF_OPINION_INTERVAL 90*60
- /** Return a string naming the versions of Tor recommended by
- * at least n_needed versioning networkstatuses */
- static char *
- compute_recommended_versions(time_t now, int client)
- {
- int n_seen;
- char *current;
- smartlist_t *combined, *recommended;
- int n_recent;
- char *result;
- if (!networkstatus_list)
- return tor_strdup("<none>");
- combined = smartlist_create();
- n_recent = 0;
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- const char *vers;
- if (! ns->recommends_versions)
- continue;
- if (ns->received_on + SELF_OPINION_INTERVAL < now)
- continue;
- n_recent++;
- vers = client ? ns->client_versions : ns->server_versions;
- if (!vers)
- continue;
- smartlist_split_string(combined, vers, ",",
- SPLIT_SKIP_SPACE|SPLIT_IGNORE_BLANK, 0);
- });
- sort_version_list(combined);
- current = NULL;
- n_seen = 0;
- recommended = smartlist_create();
- SMARTLIST_FOREACH(combined, char *, cp,
- {
- if (current && !strcmp(cp, current)) {
- ++n_seen;
- } else {
- if (n_seen >= n_recent/2 && current)
- smartlist_add(recommended, current);
- n_seen = 0;
- current = cp;
- }
- });
- if (n_seen >= n_recent/2 && current)
- smartlist_add(recommended, current);
- result = smartlist_join_strings(recommended, ", ", 0, NULL);
- SMARTLIST_FOREACH(combined, char *, cp, tor_free(cp));
- smartlist_free(combined);
- smartlist_free(recommended);
- return result;
- }
- /** If the network-status list has changed since the last time we called this
- * function, update the status of every routerinfo from the network-status
- * list.
- */
- void
- routers_update_all_from_networkstatus(void)
- {
- routerinfo_t *me;
- time_t now;
- if (!routerlist || !networkstatus_list ||
- (!networkstatus_list_has_changed && !routerstatus_list_has_changed))
- return;
- now = time(NULL);
- if (networkstatus_list_has_changed)
- routerstatus_list_update_from_networkstatus(now);
- routers_update_status_from_networkstatus(routerlist->routers, 0);
- me = router_get_my_routerinfo();
- if (me && !have_warned_about_unverified_status) {
- int n_recent = 0, n_listing = 0, n_valid = 0, n_named = 0;
- routerstatus_t *rs;
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- if (ns->received_on + SELF_OPINION_INTERVAL < now)
- continue;
- ++n_recent;
- if (!(rs = networkstatus_find_entry(ns, me->cache_info.identity_digest)))
- continue;
- ++n_listing;
- if (rs->is_valid)
- ++n_valid;
- if (rs->is_named)
- ++n_named;
- });
- if (n_recent >= 2 && n_listing >= 2) {
- /* XXX When we have more than 3 dirservers, these warnings
- * might become spurious depending on which combination of
- * network-statuses we have. Perhaps we should wait until we
- * have tried all of them? -RD */
- if (n_valid <= n_recent/2) {
- warn(LD_GENERAL,
- "%d/%d recent directory servers list us as invalid. Please "
- "consider sending your identity fingerprint to the tor-ops.",
- n_recent-n_valid, n_recent);
- have_warned_about_unverified_status = 1;
- } else if (!n_named) { // (n_named <= n_recent/2) {
- warn(LD_GENERAL, "0/%d recent directory servers recognize this "
- "server. Please consider sending your identity fingerprint to "
- "the tor-ops.",
- n_recent);
- have_warned_about_unverified_status = 1;
- }
- }
- }
- entry_guards_set_status_from_directory();
- if (!have_warned_about_old_version) {
- int n_recent = 0;
- int n_recommended = 0;
- int is_server = server_mode(get_options());
- version_status_t consensus = VS_RECOMMENDED;
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- version_status_t vs;
- if (!ns->recommends_versions ||
- ns->received_on + SELF_OPINION_INTERVAL < now )
- continue;
- vs = tor_version_is_obsolete(
- VERSION, is_server ? ns->server_versions : ns->client_versions);
- if (vs == VS_RECOMMENDED)
- ++n_recommended;
- if (n_recent++ == 0) {
- consensus = vs;
- } else if (consensus != vs) {
- consensus = version_status_join(consensus, vs);
- }
- });
- if (n_recent > 2 && n_recommended < n_recent/2) {
- if (consensus == VS_NEW || consensus == VS_NEW_IN_SERIES) {
- if (!have_warned_about_new_version) {
- char *rec = compute_recommended_versions(now, !is_server);
- notice(LD_GENERAL, "This version of Tor (%s) is newer than any "
- "recommended version%s, according to %d/%d recent network "
- "statuses. Versions recommended by at least %d recent "
- "authorities are: %s",
- VERSION,
- consensus == VS_NEW_IN_SERIES ? " in its series" : "",
- n_recent-n_recommended, n_recent, n_recent/2, rec);
- have_warned_about_new_version = 1;
- tor_free(rec);
- }
- } else {
- char *rec = compute_recommended_versions(now, !is_server);
- warn(LD_GENERAL, "Please upgrade! "
- "This version of Tor (%s) is %s, according to "
- "%d/%d recent network statuses. Versions recommended by "
- "at least %d recent authorities are: %s",
- VERSION, consensus == VS_OLD ? "obsolete" : "not recommended",
- n_recent-n_recommended, n_recent, n_recent/2, rec);
- have_warned_about_old_version = 1;
- tor_free(rec);
- }
- } else {
- info(LD_GENERAL, "%d/%d recent directories think my version is ok.",
- n_recommended, n_recent);
- }
- }
- routerstatus_list_has_changed = 0;
- }
- /** Allow any network-status newer than this to influence our view of who's
- * running. */
- #define DEFAULT_RUNNING_INTERVAL 60*60
- /** If possible, always allow at least this many network-statuses to influence
- * our view of who's running. */
- #define MIN_TO_INFLUENCE_RUNNING 3
- /** Change the is_recent field of each member of networkstatus_list so that
- * all members more recent than DEFAULT_RUNNING_INTERVAL are recent, and
- * at least the MIN_TO_INFLUENCE_RUNNING most recent members are recent, and no
- * others are recent. Set networkstatus_list_has_changed if anything happened.
- */
- void
- networkstatus_list_update_recent(time_t now)
- {
- int n_statuses, n_recent, changed, i;
- char published[ISO_TIME_LEN+1];
- if (!networkstatus_list)
- return;
- n_statuses = smartlist_len(networkstatus_list);
- n_recent = 0;
- changed = 0;
- for (i=n_statuses-1; i >= 0; --i) {
- networkstatus_t *ns = smartlist_get(networkstatus_list, i);
- trusted_dir_server_t *ds =
- router_get_trusteddirserver_by_digest(ns->identity_digest);
- const char *src = ds?ds->description:ns->source_address;
- if (n_recent < MIN_TO_INFLUENCE_RUNNING ||
- ns->published_on + DEFAULT_RUNNING_INTERVAL > now) {
- if (!ns->is_recent) {
- format_iso_time(published, ns->published_on);
- info(LD_DIR,
- "Networkstatus from %s (published %s) is now \"recent\"",
- src, published);
- changed = 1;
- }
- ns->is_recent = 1;
- ++n_recent;
- } else {
- if (ns->is_recent) {
- format_iso_time(published, ns->published_on);
- info(LD_DIR,
- "Networkstatus from %s (published %s) is no longer \"recent\"",
- src, published);
- changed = 1;
- ns->is_recent = 0;
- }
- }
- }
- if (changed)
- networkstatus_list_has_changed = 1;
- }
- /** Helper for routerstatus_list_update_from_networkstatus: remember how many
- * authorities recommend a given descriptor digest. */
- typedef struct {
- routerstatus_t *rs;
- int count;
- } desc_digest_count_t;
- /** Update our view of router status (as stored in routerstatus_list) from the
- * current set of network status documents (as stored in networkstatus_list).
- * Do nothing unless the network status list has changed since the last time
- * this function was called.
- */
- static void
- routerstatus_list_update_from_networkstatus(time_t now)
- {
- or_options_t *options = get_options();
- int n_trusted, n_statuses, n_recent = 0, n_naming = 0;
- int i, j, warned;
- int *index, *size;
- networkstatus_t **networkstatus;
- smartlist_t *result;
- strmap_t *name_map;
- char conflict[DIGEST_LEN]; /* Sentinel value */
- desc_digest_count_t *digest_counts = NULL;
- /* compute which network statuses will have a vote now */
- networkstatus_list_update_recent(now);
- if (!networkstatus_list_has_changed)
- return;
- if (!networkstatus_list)
- networkstatus_list = smartlist_create();
- if (!routerstatus_list)
- routerstatus_list = smartlist_create();
- if (!trusted_dir_servers)
- trusted_dir_servers = smartlist_create();
- if (!warned_conflicts)
- warned_conflicts = smartlist_create();
- n_trusted = smartlist_len(trusted_dir_servers);
- n_statuses = smartlist_len(networkstatus_list);
- if (n_statuses < (n_trusted/2)+1) {
- /* Not enough statuses to adjust status. */
- notice(LD_DIR,"Not enough statuses to update router status list. (%d/%d)",
- n_statuses, n_trusted);
- return;
- }
- info(LD_DIR, "Rebuilding router status list.");
- index = tor_malloc(sizeof(int)*n_statuses);
- size = tor_malloc(sizeof(int)*n_statuses);
- networkstatus = tor_malloc(sizeof(networkstatus_t *)*n_statuses);
- for (i = 0; i < n_statuses; ++i) {
- index[i] = 0;
- networkstatus[i] = smartlist_get(networkstatus_list, i);
- size[i] = smartlist_len(networkstatus[i]->entries);
- if (networkstatus[i]->binds_names)
- ++n_naming;
- if (networkstatus[i]->is_recent)
- ++n_recent;
- }
- /** Iterate over all entries in all networkstatuses, and build
- * name_map as a map from lc nickname to identity digest. If there
- * is a conflict on that nickname, map the lc nickname to conflict.
- */
- name_map = strmap_new();
- memset(conflict, 0xff, sizeof(conflict));
- for (i = 0; i < n_statuses; ++i) {
- if (!networkstatus[i]->binds_names)
- continue;
- SMARTLIST_FOREACH(networkstatus[i]->entries, routerstatus_t *, rs,
- {
- const char *other_digest;
- if (!rs->is_named)
- continue;
- other_digest = strmap_get_lc(name_map, rs->nickname);
- warned = smartlist_string_isin(warned_conflicts, rs->nickname);
- if (!other_digest) {
- strmap_set_lc(name_map, rs->nickname, rs->identity_digest);
- if (warned)
- smartlist_string_remove(warned_conflicts, rs->nickname);
- } else if (memcmp(other_digest, rs->identity_digest, DIGEST_LEN) &&
- other_digest != conflict) {
- if (!warned) {
- int should_warn = options->DirPort && options->AuthoritativeDir;
- char fp1[HEX_DIGEST_LEN+1];
- char fp2[HEX_DIGEST_LEN+1];
- base16_encode(fp1, sizeof(fp1), other_digest, DIGEST_LEN);
- base16_encode(fp2, sizeof(fp2), rs->identity_digest, DIGEST_LEN);
- log_fn(should_warn ? LOG_WARN : LOG_INFO, LD_DIR,
- "Naming authorities disagree about which key goes with %s. "
- "($%s vs $%s)",
- rs->nickname, fp1, fp2);
- strmap_set_lc(name_map, rs->nickname, conflict);
- smartlist_add(warned_conflicts, tor_strdup(rs->nickname));
- }
- } else {
- if (warned)
- smartlist_string_remove(warned_conflicts, rs->nickname);
- }
- });
- }
- result = smartlist_create();
- digest_counts = tor_malloc_zero(sizeof(desc_digest_count_t)*n_statuses);
- /* Iterate through all of the sorted routerstatus lists in lockstep.
- * Invariants:
- * - For 0 <= i < n_statuses: index[i] is an index into
- * networkstatus[i]->entries, which has size[i] elements.
- * - For i1, i2, j such that 0 <= i1 < n_statuses, 0 <= i2 < n_statues, 0 <=
- * j < index[i1], networkstatus[i1]->entries[j]->identity_digest <
- * networkstatus[i2]->entries[index[i2]]->identity_digest.
- *
- * (That is, the indices are always advanced past lower digest before
- * higher.)
- */
- while (1) {
- int n_running=0, n_named=0, n_valid=0, n_listing=0;
- int n_v2_dir=0, n_fast=0, n_stable=0, n_exit=0, n_guard=0;
- int n_desc_digests=0, highest_count=0;
- const char *the_name = NULL;
- local_routerstatus_t *rs_out, *rs_old;
- routerstatus_t *rs, *most_recent;
- networkstatus_t *ns;
- const char *lowest = NULL;
- /* Find out which of the digests appears first. */
- for (i = 0; i < n_statuses; ++i) {
- if (index[i] < size[i]) {
- rs = smartlist_get(networkstatus[i]->entries, index[i]);
- if (!lowest || memcmp(rs->identity_digest, lowest, DIGEST_LEN)<0)
- lowest = rs->identity_digest;
- }
- }
- if (!lowest) {
- /* We're out of routers. Great! */
- break;
- }
- /* Okay. The routers at networkstatus[i]->entries[index[i]] whose digests
- * match "lowest" are next in order. Iterate over them, incrementing those
- * index[i] as we go. */
- for (i = 0; i < n_statuses; ++i) {
- if (index[i] >= size[i])
- continue;
- ns = networkstatus[i];
- rs = smartlist_get(ns->entries, index[i]);
- if (memcmp(rs->identity_digest, lowest, DIGEST_LEN))
- continue;
- /* At this point, we know that we're looking at a routersatus with
- * identity "lowest".
- */
- ++index[i];
- ++n_listing;
- /* Should we name this router? Only if all the names from naming
- * authorities match. */
- if (rs->is_named && ns->binds_names) {
- if (!the_name)
- the_name = rs->nickname;
- if (!strcasecmp(rs->nickname, the_name)) {
- ++n_named;
- } else if (strcmp(the_name,"**mismatch**")) {
- char hd[HEX_DIGEST_LEN+1];
- base16_encode(hd, HEX_DIGEST_LEN+1, rs->identity_digest, DIGEST_LEN);
- if (! smartlist_string_isin(warned_conflicts, hd)) {
- warn(LD_DIR, "Naming authorities disagree about nicknames for $%s "
- "(\"%s\" vs \"%s\")",
- hd, the_name, rs->nickname);
- smartlist_add(warned_conflicts, tor_strdup(hd));
- }
- the_name = "**mismatch**";
- }
- }
- /* Keep a running count of how often which descriptor digests
- * appear. */
- for (j = 0; j < n_desc_digests; ++j) {
- if (!memcmp(rs->descriptor_digest,
- digest_counts[j].rs->descriptor_digest, DIGEST_LEN)) {
- if (++digest_counts[j].count > highest_count)
- highest_count = digest_counts[j].count;
- goto found;
- }
- }
- digest_counts[n_desc_digests].rs = rs;
- digest_counts[n_desc_digests].count = 1;
- if (!highest_count)
- highest_count = 1;
- ++n_desc_digests;
- found:
- /* Now tally up the easily-tallied flags. */
- if (rs->is_valid)
- ++n_valid;
- if (rs->is_running && ns->is_recent)
- ++n_running;
- if (rs->is_exit)
- ++n_exit;
- if (rs->is_fast)
- ++n_fast;
- if (rs->is_possible_guard)
- ++n_guard;
- if (rs->is_stable)
- ++n_stable;
- if (rs->is_v2_dir)
- ++n_v2_dir;
- }
- /* Go over the descriptor digests and figure out which descriptor we
- * want. */
- most_recent = NULL;
- for (i = 0; i < n_desc_digests; ++i) {
- /* If any digest appears twice or more, ignore those that don't.*/
- if (highest_count >= 2 && digest_counts[i].count < 2)
- continue;
- if (!most_recent ||
- digest_counts[i].rs->published_on > most_recent->published_on)
- most_recent = digest_counts[i].rs;
- }
- rs_out = tor_malloc_zero(sizeof(local_routerstatus_t));
- memcpy(&rs_out->status, most_recent, sizeof(routerstatus_t));
- /* Copy status info about this router, if we had any before. */
- if ((rs_old = router_get_combined_status_by_digest(lowest))) {
- if (!memcmp(rs_out->status.descriptor_digest,
- most_recent->descriptor_digest, DIGEST_LEN)) {
- rs_out->n_download_failures = rs_old->n_download_failures;
- rs_out->next_attempt_at = rs_old->next_attempt_at;
- }
- rs_out->name_lookup_warned = rs_old->name_lookup_warned;
- }
- smartlist_add(result, rs_out);
- debug(LD_DIR, "Router '%s' is listed by %d/%d directories, "
- "named by %d/%d, validated by %d/%d, and %d/%d recent directories "
- "think it's running.",
- rs_out->status.nickname,
- n_listing, n_statuses, n_named, n_naming, n_valid, n_statuses,
- n_running, n_recent);
- rs_out->status.is_named = 0;
- if (the_name && strcmp(the_name, "**mismatch**") && n_named > 0) {
- const char *d = strmap_get_lc(name_map, the_name);
- if (d && d != conflict)
- rs_out->status.is_named = 1;
- if (smartlist_string_isin(warned_conflicts, rs_out->status.nickname))
- smartlist_string_remove(warned_conflicts, rs_out->status.nickname);
- }
- if (rs_out->status.is_named)
- strlcpy(rs_out->status.nickname, the_name,
- sizeof(rs_out->status.nickname));
- rs_out->status.is_valid = n_valid > n_statuses/2;
- rs_out->status.is_running = n_running > n_recent/2;
- rs_out->status.is_exit = n_exit > n_statuses/2;
- rs_out->status.is_fast = n_fast > n_statuses/2;
- rs_out->status.is_possible_guard = n_guard > n_statuses/2;
- rs_out->status.is_stable = n_stable > n_statuses/2;
- rs_out->status.is_v2_dir = n_v2_dir > n_statuses/2;
- }
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, rs,
- local_routerstatus_free(rs));
- smartlist_free(routerstatus_list);
- routerstatus_list = result;
- tor_free(networkstatus);
- tor_free(index);
- tor_free(size);
- tor_free(digest_counts);
- strmap_free(name_map, NULL);
- networkstatus_list_has_changed = 0;
- routerstatus_list_has_changed = 1;
- }
- /** Given a list <b>routers</b> of routerinfo_t *, update each routers's
- * is_named, is_verified, and is_running fields according to our current
- * networkstatus_t documents. */
- void
- routers_update_status_from_networkstatus(smartlist_t *routers,
- int reset_failures)
- {
- trusted_dir_server_t *ds;
- local_routerstatus_t *rs;
- routerstatus_t *rs2;
- or_options_t *options = get_options();
- int authdir = options->AuthoritativeDir;
- int namingdir = options->AuthoritativeDir &&
- options->NamingAuthoritativeDir;
- if (!routerstatus_list)
- return;
- SMARTLIST_FOREACH(routers, routerinfo_t *, router,
- {
- const char *digest = router->cache_info.identity_digest;
- rs = router_get_combined_status_by_digest(digest);
- ds = router_get_trusteddirserver_by_digest(digest);
- if (!rs)
- continue;
- if (!namingdir)
- router->is_named = rs->status.is_named;
- if (!authdir) {
- /* If we're an authdir, don't believe others. */
- router->is_verified = rs->status.is_valid;
- router->is_running = rs->status.is_running;
- router->is_fast = rs->status.is_fast;
- router->is_stable = rs->status.is_stable;
- }
- if (router->is_running && ds) {
- ds->n_networkstatus_failures = 0;
- }
- if (reset_failures) {
- rs->n_download_failures = 0;
- rs->next_attempt_at = 0;
- }
- /* Note that we have this descriptor. This may be redundant? */
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- rs2 = networkstatus_find_entry(ns, router->cache_info.identity_digest);
- if (rs2 && !memcmp(rs2->descriptor_digest,
- router->cache_info.signed_descriptor_digest,
- DIGEST_LEN))
- rs2->need_to_mirror = 0;
- });
- });
- }
- /** For every router descriptor we are currently downloading by descriptor
- * digest, set result[d] to 1. */
- static void
- list_pending_descriptor_downloads(digestmap_t *result)
- {
- const char *prefix = "d/";
- size_t p_len = strlen(prefix);
- int i, n_conns;
- connection_t **carray;
- smartlist_t *tmp = smartlist_create();
- tor_assert(result);
- get_connection_array(&carray, &n_conns);
- for (i = 0; i < n_conns; ++i) {
- connection_t *conn = carray[i];
- if (conn->type == CONN_TYPE_DIR &&
- conn->purpose == DIR_PURPOSE_FETCH_SERVERDESC &&
- !conn->marked_for_close) {
- if (!strcmpstart(conn->requested_resource, prefix))
- dir_split_resource_into_fingerprints(conn->requested_resource+p_len,
- tmp, NULL, 1);
- }
- }
- SMARTLIST_FOREACH(tmp, char *, d,
- {
- digestmap_set(result, d, (void*)1);
- tor_free(d);
- });
- smartlist_free(tmp);
- }
- /** Launch downloads for all the descriptors whose digests are listed
- * as digests[i] for lo <= i < hi. (Lo and hi may be out of range.)
- * If <b>source</b> is given, download from <b>source</b>; otherwise,
- * download from an appropriate random directory server.
- */
- static void
- initiate_descriptor_downloads(routerstatus_t *source,
- smartlist_t *digests,
- int lo, int hi)
- {
- int i, n = hi-lo;
- char *resource, *cp;
- size_t r_len;
- if (n <= 0)
- return;
- if (lo < 0)
- lo = 0;
- if (hi > smartlist_len(digests))
- hi = smartlist_len(digests);
- r_len = 8 + (HEX_DIGEST_LEN+1)*n;
- cp = resource = tor_malloc(r_len);
- memcpy(cp, "d/", 2);
- cp += 2;
- for (i = lo; i < hi; ++i) {
- base16_encode(cp, r_len-(cp-resource),
- smartlist_get(digests,i), DIGEST_LEN);
- cp += HEX_DIGEST_LEN;
- *cp++ = '+';
- }
- memcpy(cp-1, ".z", 3);
- if (source) {
- /* We know which authority we want. */
- directory_initiate_command_routerstatus(source,
- DIR_PURPOSE_FETCH_SERVERDESC,
- 0, /* not private */
- resource, NULL, 0);
- } else {
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_SERVERDESC,
- resource,
- 1);
- }
- tor_free(resource);
- }
- /** Return new list of ID fingerprints for routers that we (as a client) would
- * like to download.
- */
- static smartlist_t *
- router_list_client_downloadable(void)
- {
- #define MAX_OLD_SERVER_DOWNLOAD_RATE 2*60*60
- #define ESTIMATED_PROPAGATION_TIME 10*60
- int n_downloadable = 0;
- smartlist_t *downloadable = smartlist_create();
- digestmap_t *downloading;
- time_t now = time(NULL);
- /* these are just used for logging */
- int n_not_ready = 0, n_in_progress = 0, n_uptodate = 0,
- n_obsolete = 0, n_too_young = 0, n_wouldnt_use = 0;
- if (!routerstatus_list)
- return downloadable;
- downloading = digestmap_new();
- list_pending_descriptor_downloads(downloading);
- routerstatus_list_update_from_networkstatus(now);
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, rs,
- {
- routerinfo_t *ri;
- if (rs->status.published_on + ROUTER_MAX_AGE < now) {
- /* This one is too old to consider. */
- ++n_obsolete;
- } else if (digestmap_get(downloading, rs->status.descriptor_digest)) {
- /* We're downloading this one now. */
- ++n_in_progress;
- } else if (!rs->status.is_running) {
- /* If we had this router descriptor, we wouldn't even bother using it. */
- ++n_wouldnt_use;
- } else if (router_get_by_descriptor_digest(rs->status.descriptor_digest)) {
- /* We have the 'best' descriptor for this router. */
- ++n_uptodate;
- } else if ((ri = router_get_by_digest(rs->status.identity_digest)) &&
- ri->cache_info.published_on > rs->status.published_on) {
- /* Oddly, we have a descriptor more recent than the 'best' one, but it
- was once best. So that's okay. */
- ++n_uptodate;
- } else if (rs->status.published_on + ESTIMATED_PROPAGATION_TIME > now) {
- /* Most caches probably don't have this descriptor yet. */
- ++n_too_young;
- } else if (rs->next_attempt_at > now) {
- /* We failed too recently to try again. */
- ++n_not_ready;
- } else {
- /* Okay, time to try it. */
- smartlist_add(downloadable, rs->status.descriptor_digest);
- ++n_downloadable;
- }
- });
- #if 0
- info(LD_DIR,
- "%d router descriptors are downloadable. %d are too old to consider. "
- "%d are in progress. %d are up-to-date. %d are too young to consider. "
- "%d are non-useful. %d failed too recently to retry.",
- n_downloadable, n_obsolete, n_in_progress, n_uptodate, n_too_young,
- n_wouldnt_use, n_not_ready);
- #endif
- digestmap_free(downloading, NULL);
- return downloadable;
- }
- /** Initiate new router downloads as needed.
- *
- * We only allow one router descriptor download at a time.
- * If we have less than two network-status documents, we ask
- * a directory for "all descriptors."
- * Otherwise, we ask for all descriptors that we think are different
- * from what we have.
- */
- static void
- update_router_descriptor_client_downloads(time_t now)
- {
- /* Max amount of hashes to download per request.
- * Since squid does not like URLs >= 4096 bytes we limit it to 96.
- * 4096 - strlen(http://255.255.255.255/tor/server/d/.z) == 4058
- * 4058/41 (40 for the hash and 1 for the + that separates them) => 98
- * So use 96 because it's a nice number.
- */
- #define MAX_DL_PER_REQUEST 96
- #define MIN_DL_PER_REQUEST 4
- #define MIN_REQUESTS 3
- #define MAX_DL_TO_DELAY 16
- #define MAX_CLIENT_INTERVAL_WITHOUT_REQUEST 10*60
- #define MAX_SERVER_INTERVAL_WITHOUT_REQUEST 1*60
- smartlist_t *downloadable = NULL;
- int should_delay, n_downloadable;
- or_options_t *options = get_options();
- if (server_mode(options) && options->DirPort) {
- warn(LD_BUG, "Called router_descriptor_client_downloads() on a mirror?");
- }
- if (networkstatus_list && smartlist_len(networkstatus_list) < 2) {
- /* XXXX Is this redundant? -NM */
- info(LD_DIR, "Not enough networkstatus documents to launch requests.");
- }
- downloadable = router_list_client_downloadable();
- n_downloadable = smartlist_len(downloadable);
- if (n_downloadable >= MAX_DL_TO_DELAY) {
- debug(LD_DIR,
- "There are enough downloadable routerdescs to launch requests.");
- should_delay = 0;
- } else if (n_downloadable == 0) {
- // debug(LD_DIR, "No routerdescs need to be downloaded.");
- should_delay = 1;
- } else {
- should_delay = (last_routerdesc_download_attempted +
- MAX_CLIENT_INTERVAL_WITHOUT_REQUEST) > now;
- if (!should_delay)
- info(LD_DIR, "There are not many downloadable routerdescs, but we've "
- "been waiting long enough (%d seconds). Downloading.",
- (int)(now-last_routerdesc_download_attempted));
- }
- if (! should_delay) {
- int i, n_per_request;
- n_per_request = (n_downloadable+MIN_REQUESTS-1) / MIN_REQUESTS;
- if (n_per_request > MAX_DL_PER_REQUEST)
- n_per_request = MAX_DL_PER_REQUEST;
- if (n_per_request < MIN_DL_PER_REQUEST)
- n_per_request = MIN_DL_PER_REQUEST;
- info(LD_DIR, "Launching %d request%s for %d router%s, %d at a time",
- (n_downloadable+n_per_request-1)/n_per_request,
- n_downloadable>n_per_request?"s":"",
- n_downloadable, n_downloadable>1?"s":"", n_per_request);
- for (i=0; i < n_downloadable; i += n_per_request) {
- initiate_descriptor_downloads(NULL, downloadable, i, i+n_per_request);
- }
- last_routerdesc_download_attempted = now;
- }
- smartlist_free(downloadable);
- }
- /* DOCDOC */
- static void
- update_router_descriptor_cache_downloads(time_t now)
- {
- smartlist_t **downloadable; /* For each authority, what can we dl from it? */
- smartlist_t **download_from; /* ... and, what will we dl from it? */
- digestmap_t *map; /* Which descs are in progress, or assigned? */
- int i, j, n;
- int n_download;
- or_options_t *options = get_options();
- if (!(server_mode(options) && options->DirPort)) {
- warn(LD_BUG, "Called update_router_descriptor_cache_downloads() "
- "on a non-mirror?");
- }
- if (!networkstatus_list || !smartlist_len(networkstatus_list))
- return;
- map = digestmap_new();
- n = smartlist_len(networkstatus_list);
- downloadable = tor_malloc_zero(sizeof(smartlist_t*) * n);
- download_from = tor_malloc_zero(sizeof(smartlist_t*) * n);
- /* Set map[d]=1 for the digest of every descriptor that we are currently
- * downloading. */
- list_pending_descriptor_downloads(map);
- /* For the digest of every descriptor that we don't have, and that we aren't
- * downloading, add d to downloadable[i] if the i'th networkstatus knows
- * about that descriptor, and we haven't already failed to get that
- * descriptor from the corresponding authority.
- */
- n_download = 0;
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- {
- smartlist_t *dl = smartlist_create();
- downloadable[ns_sl_idx] = dl;
- download_from[ns_sl_idx] = smartlist_create();
- SMARTLIST_FOREACH(ns->entries, routerstatus_t * , rs,
- {
- if (!rs->need_to_mirror)
- continue;
- if (router_get_by_descriptor_digest(rs->descriptor_digest)) {
- warn(LD_BUG, "We have a router descriptor, but need_to_mirror=1.");
- rs->need_to_mirror = 0;
- continue;
- }
- if (options->AuthoritativeDir && dirserv_would_reject_router(rs)) {
- rs->need_to_mirror = 0;
- continue;
- }
- if (digestmap_get(map, rs->descriptor_digest)) {
- /* We're downloading it already. */
- continue;
- } else {
- /* We could download it from this guy. */
- smartlist_add(dl, rs->descriptor_digest);
- ++n_download;
- }
- });
- });
- /* At random, assign descriptors to authorities such that:
- * - if d is a member of some downloadable[x], d is a member of some
- * download_from[y]. (Everything we want to download, we try to download
- * from somebody.)
- * - If d is a mamber of download_from[y], d is a member of downloadable[y].
- * (We only try to download descriptors from authorities who claim to have
- * them.)
- * - No d is a member of download_from[x] and download_from[y] s.t. x != y.
- * (We don't try to download anything from two authorities concurrently.)
- */
- while (n_download) {
- int which_ns = crypto_rand_int(n);
- smartlist_t *dl = downloadable[which_ns];
- int idx;
- char *d;
- tor_assert(dl);
- if (!smartlist_len(dl))
- continue;
- idx = crypto_rand_int(smartlist_len(dl));
- d = smartlist_get(dl, idx);
- if (! digestmap_get(map, d)) {
- smartlist_add(download_from[which_ns], d);
- digestmap_set(map, d, (void*) 1);
- }
- smartlist_del(dl, idx);
- --n_download;
- }
- /* Now, we can actually launch our requests. */
- for (i=0; i<n; ++i) {
- networkstatus_t *ns = smartlist_get(networkstatus_list, i);
- trusted_dir_server_t *ds =
- router_get_trusteddirserver_by_digest(ns->identity_digest);
- smartlist_t *dl = download_from[i];
- if (!ds) {
- warn(LD_BUG, "Networkstatus with no corresponding authority!");
- continue;
- }
- if (! smartlist_len(dl))
- continue;
- info(LD_DIR, "Requesting %d descriptors from authority \"%s\"",
- smartlist_len(dl), ds->nickname);
- for (j=0; j < smartlist_len(dl); j += MAX_DL_PER_REQUEST) {
- initiate_descriptor_downloads(&(ds->fake_status), dl, j,
- j+MAX_DL_PER_REQUEST);
- }
- }
- for (i=0; i<n; ++i) {
- smartlist_free(download_from[i]);
- smartlist_free(downloadable[i]);
- }
- tor_free(download_from);
- tor_free(downloadable);
- digestmap_free(map,NULL);
- }
- /* DOCDOC */
- void
- update_router_descriptor_downloads(time_t now)
- {
- or_options_t *options = get_options();
- if (server_mode(options) && options->DirPort) {
- update_router_descriptor_cache_downloads(now);
- } else {
- update_router_descriptor_client_downloads(now);
- }
- }
- /** Return true iff we have enough networkstatus and router information to
- * start building circuits. Right now, this means "at least 2 networkstatus
- * documents, and at least 1/4 of expected routers." */
- //XXX should consider whether we have enough exiting nodes here.
- int
- router_have_minimum_dir_info(void)
- {
- int tot = 0, num_running = 0;
- int n_ns, res, avg;
- static int have_enough = 0;
- if (!networkstatus_list || !routerlist) {
- res = 0;
- goto done;
- }
- n_ns = smartlist_len(networkstatus_list);
- if (n_ns<2) {
- res = 0;
- goto done;
- }
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- tot += smartlist_len(ns->entries));
- avg = tot / n_ns;
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, rs,
- {
- if (rs->status.is_running)
- num_running++;
- });
- res = smartlist_len(routerlist->routers) >= (avg/4) && num_running > 2;
- done:
- if (res && !have_enough) {
- log(LOG_NOTICE, LD_DIR,
- "We now have enough directory information to build circuits.");
- }
- if (!res && have_enough) {
- log(LOG_NOTICE, LD_DIR,"Our directory information is no longer up-to-date "
- "enough to build circuits.%s",
- num_running > 2 ? "" : " (Not enough servers seem reachable -- "
- "is your network connection down?)");
- }
- have_enough = res;
- return res;
- }
- /** Reset the descriptor download failure count on all routers, so that we
- * can retry any long-failed routers immediately.
- */
- void
- router_reset_descriptor_download_failures(void)
- {
- if (!routerstatus_list)
- return;
- SMARTLIST_FOREACH(routerstatus_list, local_routerstatus_t *, rs,
- {
- rs->n_download_failures = 0;
- rs->next_attempt_at = 0;
- });
- tor_assert(networkstatus_list);
- SMARTLIST_FOREACH(networkstatus_list, networkstatus_t *, ns,
- SMARTLIST_FOREACH(ns->entries, routerstatus_t *, rs,
- {
- if (!router_get_by_descriptor_digest(rs->descriptor_digest))
- rs->need_to_mirror = 1;
- }));
- last_routerdesc_download_attempted = 0;
- }
- /** Return true iff the only differences between r1 and r2 are such that
- * would not cause a recent (post 0.1.1.6) dirserver to republish.
- */
- int
- router_differences_are_cosmetic(routerinfo_t *r1, routerinfo_t *r2)
- {
- time_t r1pub, r2pub;
- tor_assert(r1 && r2);
- /* r1 should be the one that was published first. */
- if (r1->cache_info.published_on > r2->cache_info.published_on) {
- routerinfo_t *ri_tmp = r2;
- r2 = r1;
- r1 = ri_tmp;
- }
- /* If any key fields differ, they're different. */
- if (strcasecmp(r1->address, r2->address) ||
- strcasecmp(r1->nickname, r2->nickname) ||
- r1->or_port != r2->or_port ||
- r1->dir_port != r2->dir_port ||
- crypto_pk_cmp_keys(r1->onion_pkey, r2->onion_pkey) ||
- crypto_pk_cmp_keys(r1->identity_pkey, r2->identity_pkey) ||
- strcasecmp(r1->platform, r2->platform) ||
- (r1->contact_info && !r2->contact_info) || /* contact_info is optional */
- (!r1->contact_info && r2->contact_info) ||
- (r1->contact_info && r2->contact_info &&
- strcasecmp(r1->contact_info, r2->contact_info)) ||
- r1->is_hibernating != r2->is_hibernating ||
- config_cmp_addr_policies(r1->exit_policy, r2->exit_policy))
- return 0;
- if ((r1->declared_family == NULL) != (r2->declared_family == NULL))
- return 0;
- if (r1->declared_family && r2->declared_family) {
- int i, n;
- if (smartlist_len(r1->declared_family)!=smartlist_len(r2->declared_family))
- return 0;
- n = smartlist_len(r1->declared_family);
- for (i=0; i < n; ++i) {
- if (strcasecmp(smartlist_get(r1->declared_family, i),
- smartlist_get(r2->declared_family, i)))
- return 0;
- }
- }
- /* Did bandwidth change a lot? */
- if ((r1->bandwidthcapacity < r2->bandwidthcapacity/2) ||
- (r2->bandwidthcapacity < r1->bandwidthcapacity/2))
- return 0;
- /* Did more than 12 hours pass? */
- if (r1->cache_info.published_on + 12*60*60 < r2->cache_info.published_on)
- return 0;
- /* Did uptime fail to increase by approximately the amount we would think,
- * give or take 30 minutes? */
- r1pub = r1->cache_info.published_on;
- r2pub = r2->cache_info.published_on;
- if (abs(r2->uptime - (r1->uptime + (r2pub - r1pub))))
- return 0;
- /* Otherwise, the difference is cosmetic. */
- return 1;
- }
- static void
- routerlist_assert_ok(routerlist_t *rl)
- {
- digestmap_iter_t *iter;
- routerinfo_t *r2;
- signed_descriptor_t *sd2;
- if (!routerlist)
- return;
- SMARTLIST_FOREACH(rl->routers, routerinfo_t *, r,
- {
- r2 = digestmap_get(rl->identity_map, r->cache_info.identity_digest);
- tor_assert(r == r2);
- sd2 = digestmap_get(rl->desc_digest_map,
- r->cache_info.signed_descriptor_digest);
- tor_assert(&(r->cache_info) == sd2);
- });
- SMARTLIST_FOREACH(rl->old_routers, signed_descriptor_t *, sd,
- {
- r2 = digestmap_get(rl->identity_map, sd->identity_digest);
- tor_assert(sd != &(r2->cache_info));
- sd2 = digestmap_get(rl->desc_digest_map, sd->signed_descriptor_digest);
- tor_assert(sd == sd2);
- });
- iter = digestmap_iter_init(rl->identity_map);
- while (!digestmap_iter_done(iter)) {
- const char *d;
- void *_r;
- routerinfo_t *r;
- digestmap_iter_get(iter, &d, &_r);
- r = _r;
- tor_assert(!memcmp(r->cache_info.identity_digest, d, DIGEST_LEN));
- iter = digestmap_iter_next(rl->identity_map, iter);
- }
- iter = digestmap_iter_init(rl->desc_digest_map);
- while (!digestmap_iter_done(iter)) {
- const char *d;
- void *_sd;
- signed_descriptor_t *sd;
- digestmap_iter_get(iter, &d, &_sd);
- sd = _sd;
- tor_assert(!memcmp(sd->signed_descriptor_digest, d, DIGEST_LEN));
- iter = digestmap_iter_next(rl->desc_digest_map, iter);
- }
- }
|