main.c 100 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023
  1. /* Copyright (c) 2001 Matej Pfajfar.
  2. * Copyright (c) 2001-2004, Roger Dingledine.
  3. * Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson.
  4. * Copyright (c) 2007-2013, The Tor Project, Inc. */
  5. /* See LICENSE for licensing information */
  6. /**
  7. * \file main.c
  8. * \brief Toplevel module. Handles signals, multiplexes between
  9. * connections, implements main loop, and drives scheduled events.
  10. **/
  11. #define MAIN_PRIVATE
  12. #include "or.h"
  13. #include "addressmap.h"
  14. #include "backtrace.h"
  15. #include "buffers.h"
  16. #include "channel.h"
  17. #include "channeltls.h"
  18. #include "circuitbuild.h"
  19. #include "circuitlist.h"
  20. #include "circuituse.h"
  21. #include "command.h"
  22. #include "config.h"
  23. #include "confparse.h"
  24. #include "connection.h"
  25. #include "connection_edge.h"
  26. #include "connection_or.h"
  27. #include "control.h"
  28. #include "cpuworker.h"
  29. #include "directory.h"
  30. #include "dirserv.h"
  31. #include "dirvote.h"
  32. #include "dns.h"
  33. #include "dnsserv.h"
  34. #include "entrynodes.h"
  35. #include "geoip.h"
  36. #include "hibernate.h"
  37. #include "main.h"
  38. #include "microdesc.h"
  39. #include "networkstatus.h"
  40. #include "nodelist.h"
  41. #include "ntmain.h"
  42. #include "onion.h"
  43. #include "policies.h"
  44. #include "transports.h"
  45. #include "relay.h"
  46. #include "rendclient.h"
  47. #include "rendcommon.h"
  48. #include "rendservice.h"
  49. #include "rephist.h"
  50. #include "router.h"
  51. #include "routerlist.h"
  52. #include "routerparse.h"
  53. #include "scheduler.h"
  54. #include "statefile.h"
  55. #include "status.h"
  56. #include "util_process.h"
  57. #include "ext_orport.h"
  58. #ifdef USE_DMALLOC
  59. #include <dmalloc.h>
  60. #include <openssl/crypto.h>
  61. #endif
  62. #include "memarea.h"
  63. #include "../common/sandbox.h"
  64. #ifdef HAVE_EVENT2_EVENT_H
  65. #include <event2/event.h>
  66. #else
  67. #include <event.h>
  68. #endif
  69. #ifdef USE_BUFFEREVENTS
  70. #include <event2/bufferevent.h>
  71. #endif
  72. void evdns_shutdown(int);
  73. /********* PROTOTYPES **********/
  74. static void dumpmemusage(int severity);
  75. static void dumpstats(int severity); /* log stats */
  76. static void conn_read_callback(evutil_socket_t fd, short event, void *_conn);
  77. static void conn_write_callback(evutil_socket_t fd, short event, void *_conn);
  78. static void second_elapsed_callback(periodic_timer_t *timer, void *args);
  79. static int conn_close_if_marked(int i);
  80. static void connection_start_reading_from_linked_conn(connection_t *conn);
  81. static int connection_should_read_from_linked_conn(connection_t *conn);
  82. /********* START VARIABLES **********/
  83. #ifndef USE_BUFFEREVENTS
  84. int global_read_bucket; /**< Max number of bytes I can read this second. */
  85. int global_write_bucket; /**< Max number of bytes I can write this second. */
  86. /** Max number of relayed (bandwidth class 1) bytes I can read this second. */
  87. int global_relayed_read_bucket;
  88. /** Max number of relayed (bandwidth class 1) bytes I can write this second. */
  89. int global_relayed_write_bucket;
  90. /** What was the read bucket before the last second_elapsed_callback() call?
  91. * (used to determine how many bytes we've read). */
  92. static int stats_prev_global_read_bucket;
  93. /** What was the write bucket before the last second_elapsed_callback() call?
  94. * (used to determine how many bytes we've written). */
  95. static int stats_prev_global_write_bucket;
  96. #endif
  97. /* DOCDOC stats_prev_n_read */
  98. static uint64_t stats_prev_n_read = 0;
  99. /* DOCDOC stats_prev_n_written */
  100. static uint64_t stats_prev_n_written = 0;
  101. /* XXX we might want to keep stats about global_relayed_*_bucket too. Or not.*/
  102. /** How many bytes have we read since we started the process? */
  103. static uint64_t stats_n_bytes_read = 0;
  104. /** How many bytes have we written since we started the process? */
  105. static uint64_t stats_n_bytes_written = 0;
  106. /** What time did this process start up? */
  107. time_t time_of_process_start = 0;
  108. /** How many seconds have we been running? */
  109. long stats_n_seconds_working = 0;
  110. /** When do we next launch DNS wildcarding checks? */
  111. static time_t time_to_check_for_correct_dns = 0;
  112. /** How often will we honor SIGNEWNYM requests? */
  113. #define MAX_SIGNEWNYM_RATE 10
  114. /** When did we last process a SIGNEWNYM request? */
  115. static time_t time_of_last_signewnym = 0;
  116. /** Is there a signewnym request we're currently waiting to handle? */
  117. static int signewnym_is_pending = 0;
  118. /** How many times have we called newnym? */
  119. static unsigned newnym_epoch = 0;
  120. /** Smartlist of all open connections. */
  121. static smartlist_t *connection_array = NULL;
  122. /** List of connections that have been marked for close and need to be freed
  123. * and removed from connection_array. */
  124. static smartlist_t *closeable_connection_lst = NULL;
  125. /** List of linked connections that are currently reading data into their
  126. * inbuf from their partner's outbuf. */
  127. static smartlist_t *active_linked_connection_lst = NULL;
  128. /** Flag: Set to true iff we entered the current libevent main loop via
  129. * <b>loop_once</b>. If so, there's no need to trigger a loopexit in order
  130. * to handle linked connections. */
  131. static int called_loop_once = 0;
  132. /** We set this to 1 when we've opened a circuit, so we can print a log
  133. * entry to inform the user that Tor is working. We set it to 0 when
  134. * we think the fact that we once opened a circuit doesn't mean we can do so
  135. * any longer (a big time jump happened, when we notice our directory is
  136. * heinously out-of-date, etc.
  137. */
  138. int can_complete_circuit=0;
  139. /** How often do we check for router descriptors that we should download
  140. * when we have too little directory info? */
  141. #define GREEDY_DESCRIPTOR_RETRY_INTERVAL (10)
  142. /** How often do we check for router descriptors that we should download
  143. * when we have enough directory info? */
  144. #define LAZY_DESCRIPTOR_RETRY_INTERVAL (60)
  145. /** How often do we 'forgive' undownloadable router descriptors and attempt
  146. * to download them again? */
  147. #define DESCRIPTOR_FAILURE_RESET_INTERVAL (60*60)
  148. /** Decides our behavior when no logs are configured/before any
  149. * logs have been configured. For 0, we log notice to stdout as normal.
  150. * For 1, we log warnings only. For 2, we log nothing.
  151. */
  152. int quiet_level = 0;
  153. /********* END VARIABLES ************/
  154. /****************************************************************************
  155. *
  156. * This section contains accessors and other methods on the connection_array
  157. * variables (which are global within this file and unavailable outside it).
  158. *
  159. ****************************************************************************/
  160. #if 0 && defined(USE_BUFFEREVENTS)
  161. static void
  162. free_old_inbuf(connection_t *conn)
  163. {
  164. if (! conn->inbuf)
  165. return;
  166. tor_assert(conn->outbuf);
  167. tor_assert(buf_datalen(conn->inbuf) == 0);
  168. tor_assert(buf_datalen(conn->outbuf) == 0);
  169. buf_free(conn->inbuf);
  170. buf_free(conn->outbuf);
  171. conn->inbuf = conn->outbuf = NULL;
  172. if (conn->read_event) {
  173. event_del(conn->read_event);
  174. tor_event_free(conn->read_event);
  175. }
  176. if (conn->write_event) {
  177. event_del(conn->read_event);
  178. tor_event_free(conn->write_event);
  179. }
  180. conn->read_event = conn->write_event = NULL;
  181. }
  182. #endif
  183. #if defined(_WIN32) && defined(USE_BUFFEREVENTS)
  184. /** Remove the kernel-space send and receive buffers for <b>s</b>. For use
  185. * with IOCP only. */
  186. static int
  187. set_buffer_lengths_to_zero(tor_socket_t s)
  188. {
  189. int zero = 0;
  190. int r = 0;
  191. if (setsockopt(s, SOL_SOCKET, SO_SNDBUF, (void*)&zero, sizeof(zero))) {
  192. log_warn(LD_NET, "Unable to clear SO_SNDBUF");
  193. r = -1;
  194. }
  195. if (setsockopt(s, SOL_SOCKET, SO_RCVBUF, (void*)&zero, sizeof(zero))) {
  196. log_warn(LD_NET, "Unable to clear SO_RCVBUF");
  197. r = -1;
  198. }
  199. return r;
  200. }
  201. #endif
  202. /** Add <b>conn</b> to the array of connections that we can poll on. The
  203. * connection's socket must be set; the connection starts out
  204. * non-reading and non-writing.
  205. */
  206. int
  207. connection_add_impl(connection_t *conn, int is_connecting)
  208. {
  209. tor_assert(conn);
  210. tor_assert(SOCKET_OK(conn->s) ||
  211. conn->linked ||
  212. (conn->type == CONN_TYPE_AP &&
  213. TO_EDGE_CONN(conn)->is_dns_request));
  214. tor_assert(conn->conn_array_index == -1); /* can only connection_add once */
  215. conn->conn_array_index = smartlist_len(connection_array);
  216. smartlist_add(connection_array, conn);
  217. #ifdef USE_BUFFEREVENTS
  218. if (connection_type_uses_bufferevent(conn)) {
  219. if (SOCKET_OK(conn->s) && !conn->linked) {
  220. #ifdef _WIN32
  221. if (tor_libevent_using_iocp_bufferevents() &&
  222. get_options()->UserspaceIOCPBuffers) {
  223. set_buffer_lengths_to_zero(conn->s);
  224. }
  225. #endif
  226. conn->bufev = bufferevent_socket_new(
  227. tor_libevent_get_base(),
  228. conn->s,
  229. BEV_OPT_DEFER_CALLBACKS);
  230. if (!conn->bufev) {
  231. log_warn(LD_BUG, "Unable to create socket bufferevent");
  232. smartlist_del(connection_array, conn->conn_array_index);
  233. conn->conn_array_index = -1;
  234. return -1;
  235. }
  236. if (is_connecting) {
  237. /* Put the bufferevent into a "connecting" state so that we'll get
  238. * a "connected" event callback on successful write. */
  239. bufferevent_socket_connect(conn->bufev, NULL, 0);
  240. }
  241. connection_configure_bufferevent_callbacks(conn);
  242. } else if (conn->linked && conn->linked_conn &&
  243. connection_type_uses_bufferevent(conn->linked_conn)) {
  244. tor_assert(!(SOCKET_OK(conn->s)));
  245. if (!conn->bufev) {
  246. struct bufferevent *pair[2] = { NULL, NULL };
  247. if (bufferevent_pair_new(tor_libevent_get_base(),
  248. BEV_OPT_DEFER_CALLBACKS,
  249. pair) < 0) {
  250. log_warn(LD_BUG, "Unable to create bufferevent pair");
  251. smartlist_del(connection_array, conn->conn_array_index);
  252. conn->conn_array_index = -1;
  253. return -1;
  254. }
  255. tor_assert(pair[0]);
  256. conn->bufev = pair[0];
  257. conn->linked_conn->bufev = pair[1];
  258. } /* else the other side already was added, and got a bufferevent_pair */
  259. connection_configure_bufferevent_callbacks(conn);
  260. } else {
  261. tor_assert(!conn->linked);
  262. }
  263. if (conn->bufev)
  264. tor_assert(conn->inbuf == NULL);
  265. if (conn->linked_conn && conn->linked_conn->bufev)
  266. tor_assert(conn->linked_conn->inbuf == NULL);
  267. }
  268. #else
  269. (void) is_connecting;
  270. #endif
  271. if (!HAS_BUFFEREVENT(conn) && (SOCKET_OK(conn->s) || conn->linked)) {
  272. conn->read_event = tor_event_new(tor_libevent_get_base(),
  273. conn->s, EV_READ|EV_PERSIST, conn_read_callback, conn);
  274. conn->write_event = tor_event_new(tor_libevent_get_base(),
  275. conn->s, EV_WRITE|EV_PERSIST, conn_write_callback, conn);
  276. /* XXXX CHECK FOR NULL RETURN! */
  277. }
  278. log_debug(LD_NET,"new conn type %s, socket %d, address %s, n_conns %d.",
  279. conn_type_to_string(conn->type), (int)conn->s, conn->address,
  280. smartlist_len(connection_array));
  281. return 0;
  282. }
  283. /** Tell libevent that we don't care about <b>conn</b> any more. */
  284. void
  285. connection_unregister_events(connection_t *conn)
  286. {
  287. if (conn->read_event) {
  288. if (event_del(conn->read_event))
  289. log_warn(LD_BUG, "Error removing read event for %d", (int)conn->s);
  290. tor_free(conn->read_event);
  291. }
  292. if (conn->write_event) {
  293. if (event_del(conn->write_event))
  294. log_warn(LD_BUG, "Error removing write event for %d", (int)conn->s);
  295. tor_free(conn->write_event);
  296. }
  297. #ifdef USE_BUFFEREVENTS
  298. if (conn->bufev) {
  299. bufferevent_free(conn->bufev);
  300. conn->bufev = NULL;
  301. }
  302. #endif
  303. if (conn->type == CONN_TYPE_AP_DNS_LISTENER) {
  304. dnsserv_close_listener(conn);
  305. }
  306. }
  307. /** Remove the connection from the global list, and remove the
  308. * corresponding poll entry. Calling this function will shift the last
  309. * connection (if any) into the position occupied by conn.
  310. */
  311. int
  312. connection_remove(connection_t *conn)
  313. {
  314. int current_index;
  315. connection_t *tmp;
  316. tor_assert(conn);
  317. log_debug(LD_NET,"removing socket %d (type %s), n_conns now %d",
  318. (int)conn->s, conn_type_to_string(conn->type),
  319. smartlist_len(connection_array));
  320. control_event_conn_bandwidth(conn);
  321. tor_assert(conn->conn_array_index >= 0);
  322. current_index = conn->conn_array_index;
  323. connection_unregister_events(conn); /* This is redundant, but cheap. */
  324. if (current_index == smartlist_len(connection_array)-1) { /* at the end */
  325. smartlist_del(connection_array, current_index);
  326. return 0;
  327. }
  328. /* replace this one with the one at the end */
  329. smartlist_del(connection_array, current_index);
  330. tmp = smartlist_get(connection_array, current_index);
  331. tmp->conn_array_index = current_index;
  332. return 0;
  333. }
  334. /** If <b>conn</b> is an edge conn, remove it from the list
  335. * of conn's on this circuit. If it's not on an edge,
  336. * flush and send destroys for all circuits on this conn.
  337. *
  338. * Remove it from connection_array (if applicable) and
  339. * from closeable_connection_list.
  340. *
  341. * Then free it.
  342. */
  343. static void
  344. connection_unlink(connection_t *conn)
  345. {
  346. connection_about_to_close_connection(conn);
  347. if (conn->conn_array_index >= 0) {
  348. connection_remove(conn);
  349. }
  350. if (conn->linked_conn) {
  351. conn->linked_conn->linked_conn = NULL;
  352. if (! conn->linked_conn->marked_for_close &&
  353. conn->linked_conn->reading_from_linked_conn)
  354. connection_start_reading(conn->linked_conn);
  355. conn->linked_conn = NULL;
  356. }
  357. smartlist_remove(closeable_connection_lst, conn);
  358. smartlist_remove(active_linked_connection_lst, conn);
  359. if (conn->type == CONN_TYPE_EXIT) {
  360. assert_connection_edge_not_dns_pending(TO_EDGE_CONN(conn));
  361. }
  362. if (conn->type == CONN_TYPE_OR) {
  363. if (!tor_digest_is_zero(TO_OR_CONN(conn)->identity_digest))
  364. connection_or_remove_from_identity_map(TO_OR_CONN(conn));
  365. /* connection_unlink() can only get called if the connection
  366. * was already on the closeable list, and it got there by
  367. * connection_mark_for_close(), which was called from
  368. * connection_or_close_normally() or
  369. * connection_or_close_for_error(), so the channel should
  370. * already be in CHANNEL_STATE_CLOSING, and then the
  371. * connection_about_to_close_connection() goes to
  372. * connection_or_about_to_close(), which calls channel_closed()
  373. * to notify the channel_t layer, and closed the channel, so
  374. * nothing more to do here to deal with the channel associated
  375. * with an orconn.
  376. */
  377. }
  378. connection_free(conn);
  379. }
  380. /** Initialize the global connection list, closeable connection list,
  381. * and active connection list. */
  382. STATIC void
  383. init_connection_lists(void)
  384. {
  385. if (!connection_array)
  386. connection_array = smartlist_new();
  387. if (!closeable_connection_lst)
  388. closeable_connection_lst = smartlist_new();
  389. if (!active_linked_connection_lst)
  390. active_linked_connection_lst = smartlist_new();
  391. }
  392. /** Schedule <b>conn</b> to be closed. **/
  393. void
  394. add_connection_to_closeable_list(connection_t *conn)
  395. {
  396. tor_assert(!smartlist_contains(closeable_connection_lst, conn));
  397. tor_assert(conn->marked_for_close);
  398. assert_connection_ok(conn, time(NULL));
  399. smartlist_add(closeable_connection_lst, conn);
  400. }
  401. /** Return 1 if conn is on the closeable list, else return 0. */
  402. int
  403. connection_is_on_closeable_list(connection_t *conn)
  404. {
  405. return smartlist_contains(closeable_connection_lst, conn);
  406. }
  407. /** Return true iff conn is in the current poll array. */
  408. int
  409. connection_in_array(connection_t *conn)
  410. {
  411. return smartlist_contains(connection_array, conn);
  412. }
  413. /** Set <b>*array</b> to an array of all connections, and <b>*n</b>
  414. * to the length of the array. <b>*array</b> and <b>*n</b> must not
  415. * be modified.
  416. */
  417. smartlist_t *
  418. get_connection_array(void)
  419. {
  420. if (!connection_array)
  421. connection_array = smartlist_new();
  422. return connection_array;
  423. }
  424. /** Provides the traffic read and written over the life of the process. */
  425. MOCK_IMPL(uint64_t,
  426. get_bytes_read,(void))
  427. {
  428. return stats_n_bytes_read;
  429. }
  430. /* DOCDOC get_bytes_written */
  431. MOCK_IMPL(uint64_t,
  432. get_bytes_written,(void))
  433. {
  434. return stats_n_bytes_written;
  435. }
  436. /** Set the event mask on <b>conn</b> to <b>events</b>. (The event
  437. * mask is a bitmask whose bits are READ_EVENT and WRITE_EVENT)
  438. */
  439. void
  440. connection_watch_events(connection_t *conn, watchable_events_t events)
  441. {
  442. IF_HAS_BUFFEREVENT(conn, {
  443. short ev = ((short)events) & (EV_READ|EV_WRITE);
  444. short old_ev = bufferevent_get_enabled(conn->bufev);
  445. if ((ev & ~old_ev) != 0) {
  446. bufferevent_enable(conn->bufev, ev);
  447. }
  448. if ((old_ev & ~ev) != 0) {
  449. bufferevent_disable(conn->bufev, old_ev & ~ev);
  450. }
  451. return;
  452. });
  453. if (events & READ_EVENT)
  454. connection_start_reading(conn);
  455. else
  456. connection_stop_reading(conn);
  457. if (events & WRITE_EVENT)
  458. connection_start_writing(conn);
  459. else
  460. connection_stop_writing(conn);
  461. }
  462. /** Return true iff <b>conn</b> is listening for read events. */
  463. int
  464. connection_is_reading(connection_t *conn)
  465. {
  466. tor_assert(conn);
  467. IF_HAS_BUFFEREVENT(conn,
  468. return (bufferevent_get_enabled(conn->bufev) & EV_READ) != 0;
  469. );
  470. return conn->reading_from_linked_conn ||
  471. (conn->read_event && event_pending(conn->read_event, EV_READ, NULL));
  472. }
  473. /** Tell the main loop to stop notifying <b>conn</b> of any read events. */
  474. MOCK_IMPL(void,
  475. connection_stop_reading,(connection_t *conn))
  476. {
  477. tor_assert(conn);
  478. IF_HAS_BUFFEREVENT(conn, {
  479. bufferevent_disable(conn->bufev, EV_READ);
  480. return;
  481. });
  482. tor_assert(conn->read_event);
  483. if (conn->linked) {
  484. conn->reading_from_linked_conn = 0;
  485. connection_stop_reading_from_linked_conn(conn);
  486. } else {
  487. if (event_del(conn->read_event))
  488. log_warn(LD_NET, "Error from libevent setting read event state for %d "
  489. "to unwatched: %s",
  490. (int)conn->s,
  491. tor_socket_strerror(tor_socket_errno(conn->s)));
  492. }
  493. }
  494. /** Tell the main loop to start notifying <b>conn</b> of any read events. */
  495. MOCK_IMPL(void,
  496. connection_start_reading,(connection_t *conn))
  497. {
  498. tor_assert(conn);
  499. IF_HAS_BUFFEREVENT(conn, {
  500. bufferevent_enable(conn->bufev, EV_READ);
  501. return;
  502. });
  503. tor_assert(conn->read_event);
  504. if (conn->linked) {
  505. conn->reading_from_linked_conn = 1;
  506. if (connection_should_read_from_linked_conn(conn))
  507. connection_start_reading_from_linked_conn(conn);
  508. } else {
  509. if (event_add(conn->read_event, NULL))
  510. log_warn(LD_NET, "Error from libevent setting read event state for %d "
  511. "to watched: %s",
  512. (int)conn->s,
  513. tor_socket_strerror(tor_socket_errno(conn->s)));
  514. }
  515. }
  516. /** Return true iff <b>conn</b> is listening for write events. */
  517. int
  518. connection_is_writing(connection_t *conn)
  519. {
  520. tor_assert(conn);
  521. IF_HAS_BUFFEREVENT(conn,
  522. return (bufferevent_get_enabled(conn->bufev) & EV_WRITE) != 0;
  523. );
  524. return conn->writing_to_linked_conn ||
  525. (conn->write_event && event_pending(conn->write_event, EV_WRITE, NULL));
  526. }
  527. /** Tell the main loop to stop notifying <b>conn</b> of any write events. */
  528. MOCK_IMPL(void,
  529. connection_stop_writing,(connection_t *conn))
  530. {
  531. tor_assert(conn);
  532. IF_HAS_BUFFEREVENT(conn, {
  533. bufferevent_disable(conn->bufev, EV_WRITE);
  534. return;
  535. });
  536. tor_assert(conn->write_event);
  537. if (conn->linked) {
  538. conn->writing_to_linked_conn = 0;
  539. if (conn->linked_conn)
  540. connection_stop_reading_from_linked_conn(conn->linked_conn);
  541. } else {
  542. if (event_del(conn->write_event))
  543. log_warn(LD_NET, "Error from libevent setting write event state for %d "
  544. "to unwatched: %s",
  545. (int)conn->s,
  546. tor_socket_strerror(tor_socket_errno(conn->s)));
  547. }
  548. }
  549. /** Tell the main loop to start notifying <b>conn</b> of any write events. */
  550. MOCK_IMPL(void,
  551. connection_start_writing,(connection_t *conn))
  552. {
  553. tor_assert(conn);
  554. IF_HAS_BUFFEREVENT(conn, {
  555. bufferevent_enable(conn->bufev, EV_WRITE);
  556. return;
  557. });
  558. tor_assert(conn->write_event);
  559. if (conn->linked) {
  560. conn->writing_to_linked_conn = 1;
  561. if (conn->linked_conn &&
  562. connection_should_read_from_linked_conn(conn->linked_conn))
  563. connection_start_reading_from_linked_conn(conn->linked_conn);
  564. } else {
  565. if (event_add(conn->write_event, NULL))
  566. log_warn(LD_NET, "Error from libevent setting write event state for %d "
  567. "to watched: %s",
  568. (int)conn->s,
  569. tor_socket_strerror(tor_socket_errno(conn->s)));
  570. }
  571. }
  572. /** Return true iff <b>conn</b> is linked conn, and reading from the conn
  573. * linked to it would be good and feasible. (Reading is "feasible" if the
  574. * other conn exists and has data in its outbuf, and is "good" if we have our
  575. * reading_from_linked_conn flag set and the other conn has its
  576. * writing_to_linked_conn flag set.)*/
  577. static int
  578. connection_should_read_from_linked_conn(connection_t *conn)
  579. {
  580. if (conn->linked && conn->reading_from_linked_conn) {
  581. if (! conn->linked_conn ||
  582. (conn->linked_conn->writing_to_linked_conn &&
  583. buf_datalen(conn->linked_conn->outbuf)))
  584. return 1;
  585. }
  586. return 0;
  587. }
  588. /** Helper: Tell the main loop to begin reading bytes into <b>conn</b> from
  589. * its linked connection, if it is not doing so already. Called by
  590. * connection_start_reading and connection_start_writing as appropriate. */
  591. static void
  592. connection_start_reading_from_linked_conn(connection_t *conn)
  593. {
  594. tor_assert(conn);
  595. tor_assert(conn->linked == 1);
  596. if (!conn->active_on_link) {
  597. conn->active_on_link = 1;
  598. smartlist_add(active_linked_connection_lst, conn);
  599. if (!called_loop_once) {
  600. /* This is the first event on the list; we won't be in LOOP_ONCE mode,
  601. * so we need to make sure that the event_base_loop() actually exits at
  602. * the end of its run through the current connections and lets us
  603. * activate read events for linked connections. */
  604. struct timeval tv = { 0, 0 };
  605. tor_event_base_loopexit(tor_libevent_get_base(), &tv);
  606. }
  607. } else {
  608. tor_assert(smartlist_contains(active_linked_connection_lst, conn));
  609. }
  610. }
  611. /** Tell the main loop to stop reading bytes into <b>conn</b> from its linked
  612. * connection, if is currently doing so. Called by connection_stop_reading,
  613. * connection_stop_writing, and connection_read. */
  614. void
  615. connection_stop_reading_from_linked_conn(connection_t *conn)
  616. {
  617. tor_assert(conn);
  618. tor_assert(conn->linked == 1);
  619. if (conn->active_on_link) {
  620. conn->active_on_link = 0;
  621. /* FFFF We could keep an index here so we can smartlist_del
  622. * cleanly. On the other hand, this doesn't show up on profiles,
  623. * so let's leave it alone for now. */
  624. smartlist_remove(active_linked_connection_lst, conn);
  625. } else {
  626. tor_assert(!smartlist_contains(active_linked_connection_lst, conn));
  627. }
  628. }
  629. /** Close all connections that have been scheduled to get closed. */
  630. STATIC void
  631. close_closeable_connections(void)
  632. {
  633. int i;
  634. for (i = 0; i < smartlist_len(closeable_connection_lst); ) {
  635. connection_t *conn = smartlist_get(closeable_connection_lst, i);
  636. if (conn->conn_array_index < 0) {
  637. connection_unlink(conn); /* blow it away right now */
  638. } else {
  639. if (!conn_close_if_marked(conn->conn_array_index))
  640. ++i;
  641. }
  642. }
  643. }
  644. /** Libevent callback: this gets invoked when (connection_t*)<b>conn</b> has
  645. * some data to read. */
  646. static void
  647. conn_read_callback(evutil_socket_t fd, short event, void *_conn)
  648. {
  649. connection_t *conn = _conn;
  650. (void)fd;
  651. (void)event;
  652. log_debug(LD_NET,"socket %d wants to read.",(int)conn->s);
  653. /* assert_connection_ok(conn, time(NULL)); */
  654. if (connection_handle_read(conn) < 0) {
  655. if (!conn->marked_for_close) {
  656. #ifndef _WIN32
  657. log_warn(LD_BUG,"Unhandled error on read for %s connection "
  658. "(fd %d); removing",
  659. conn_type_to_string(conn->type), (int)conn->s);
  660. tor_fragile_assert();
  661. #endif
  662. if (CONN_IS_EDGE(conn))
  663. connection_edge_end_errno(TO_EDGE_CONN(conn));
  664. connection_mark_for_close(conn);
  665. }
  666. }
  667. assert_connection_ok(conn, time(NULL));
  668. if (smartlist_len(closeable_connection_lst))
  669. close_closeable_connections();
  670. }
  671. /** Libevent callback: this gets invoked when (connection_t*)<b>conn</b> has
  672. * some data to write. */
  673. static void
  674. conn_write_callback(evutil_socket_t fd, short events, void *_conn)
  675. {
  676. connection_t *conn = _conn;
  677. (void)fd;
  678. (void)events;
  679. LOG_FN_CONN(conn, (LOG_DEBUG, LD_NET, "socket %d wants to write.",
  680. (int)conn->s));
  681. /* assert_connection_ok(conn, time(NULL)); */
  682. if (connection_handle_write(conn, 0) < 0) {
  683. if (!conn->marked_for_close) {
  684. /* this connection is broken. remove it. */
  685. log_fn(LOG_WARN,LD_BUG,
  686. "unhandled error on write for %s connection (fd %d); removing",
  687. conn_type_to_string(conn->type), (int)conn->s);
  688. tor_fragile_assert();
  689. if (CONN_IS_EDGE(conn)) {
  690. /* otherwise we cry wolf about duplicate close */
  691. edge_connection_t *edge_conn = TO_EDGE_CONN(conn);
  692. if (!edge_conn->end_reason)
  693. edge_conn->end_reason = END_STREAM_REASON_INTERNAL;
  694. edge_conn->edge_has_sent_end = 1;
  695. }
  696. connection_close_immediate(conn); /* So we don't try to flush. */
  697. connection_mark_for_close(conn);
  698. }
  699. }
  700. assert_connection_ok(conn, time(NULL));
  701. if (smartlist_len(closeable_connection_lst))
  702. close_closeable_connections();
  703. }
  704. /** If the connection at connection_array[i] is marked for close, then:
  705. * - If it has data that it wants to flush, try to flush it.
  706. * - If it _still_ has data to flush, and conn->hold_open_until_flushed is
  707. * true, then leave the connection open and return.
  708. * - Otherwise, remove the connection from connection_array and from
  709. * all other lists, close it, and free it.
  710. * Returns 1 if the connection was closed, 0 otherwise.
  711. */
  712. static int
  713. conn_close_if_marked(int i)
  714. {
  715. connection_t *conn;
  716. int retval;
  717. time_t now;
  718. conn = smartlist_get(connection_array, i);
  719. if (!conn->marked_for_close)
  720. return 0; /* nothing to see here, move along */
  721. now = time(NULL);
  722. assert_connection_ok(conn, now);
  723. /* assert_all_pending_dns_resolves_ok(); */
  724. #ifdef USE_BUFFEREVENTS
  725. if (conn->bufev) {
  726. if (conn->hold_open_until_flushed &&
  727. evbuffer_get_length(bufferevent_get_output(conn->bufev))) {
  728. /* don't close yet. */
  729. return 0;
  730. }
  731. if (conn->linked_conn && ! conn->linked_conn->marked_for_close) {
  732. /* We need to do this explicitly so that the linked connection
  733. * notices that there was an EOF. */
  734. bufferevent_flush(conn->bufev, EV_WRITE, BEV_FINISHED);
  735. }
  736. }
  737. #endif
  738. log_debug(LD_NET,"Cleaning up connection (fd "TOR_SOCKET_T_FORMAT").",
  739. conn->s);
  740. /* If the connection we are about to close was trying to connect to
  741. a proxy server and failed, the client won't be able to use that
  742. proxy. We should warn the user about this. */
  743. if (conn->proxy_state == PROXY_INFANT)
  744. log_failed_proxy_connection(conn);
  745. IF_HAS_BUFFEREVENT(conn, goto unlink);
  746. if ((SOCKET_OK(conn->s) || conn->linked_conn) &&
  747. connection_wants_to_flush(conn)) {
  748. /* s == -1 means it's an incomplete edge connection, or that the socket
  749. * has already been closed as unflushable. */
  750. ssize_t sz = connection_bucket_write_limit(conn, now);
  751. if (!conn->hold_open_until_flushed)
  752. log_info(LD_NET,
  753. "Conn (addr %s, fd %d, type %s, state %d) marked, but wants "
  754. "to flush %d bytes. (Marked at %s:%d)",
  755. escaped_safe_str_client(conn->address),
  756. (int)conn->s, conn_type_to_string(conn->type), conn->state,
  757. (int)conn->outbuf_flushlen,
  758. conn->marked_for_close_file, conn->marked_for_close);
  759. if (conn->linked_conn) {
  760. retval = move_buf_to_buf(conn->linked_conn->inbuf, conn->outbuf,
  761. &conn->outbuf_flushlen);
  762. if (retval >= 0) {
  763. /* The linked conn will notice that it has data when it notices that
  764. * we're gone. */
  765. connection_start_reading_from_linked_conn(conn->linked_conn);
  766. }
  767. log_debug(LD_GENERAL, "Flushed last %d bytes from a linked conn; "
  768. "%d left; flushlen %d; wants-to-flush==%d", retval,
  769. (int)connection_get_outbuf_len(conn),
  770. (int)conn->outbuf_flushlen,
  771. connection_wants_to_flush(conn));
  772. } else if (connection_speaks_cells(conn)) {
  773. if (conn->state == OR_CONN_STATE_OPEN) {
  774. retval = flush_buf_tls(TO_OR_CONN(conn)->tls, conn->outbuf, sz,
  775. &conn->outbuf_flushlen);
  776. } else
  777. retval = -1; /* never flush non-open broken tls connections */
  778. } else {
  779. retval = flush_buf(conn->s, conn->outbuf, sz, &conn->outbuf_flushlen);
  780. }
  781. if (retval >= 0 && /* Technically, we could survive things like
  782. TLS_WANT_WRITE here. But don't bother for now. */
  783. conn->hold_open_until_flushed && connection_wants_to_flush(conn)) {
  784. if (retval > 0) {
  785. LOG_FN_CONN(conn, (LOG_INFO,LD_NET,
  786. "Holding conn (fd %d) open for more flushing.",
  787. (int)conn->s));
  788. conn->timestamp_lastwritten = now; /* reset so we can flush more */
  789. } else if (sz == 0) {
  790. /* Also, retval==0. If we get here, we didn't want to write anything
  791. * (because of rate-limiting) and we didn't. */
  792. /* Connection must flush before closing, but it's being rate-limited.
  793. * Let's remove from Libevent, and mark it as blocked on bandwidth
  794. * so it will be re-added on next token bucket refill. Prevents
  795. * busy Libevent loops where we keep ending up here and returning
  796. * 0 until we are no longer blocked on bandwidth.
  797. */
  798. if (connection_is_writing(conn)) {
  799. conn->write_blocked_on_bw = 1;
  800. connection_stop_writing(conn);
  801. }
  802. if (connection_is_reading(conn)) {
  803. /* XXXX024 We should make this code unreachable; if a connection is
  804. * marked for close and flushing, there is no point in reading to it
  805. * at all. Further, checking at this point is a bit of a hack: it
  806. * would make much more sense to react in
  807. * connection_handle_read_impl, or to just stop reading in
  808. * mark_and_flush */
  809. #if 0
  810. #define MARKED_READING_RATE 180
  811. static ratelim_t marked_read_lim = RATELIM_INIT(MARKED_READING_RATE);
  812. char *m;
  813. if ((m = rate_limit_log(&marked_read_lim, now))) {
  814. log_warn(LD_BUG, "Marked connection (fd %d, type %s, state %s) "
  815. "is still reading; that shouldn't happen.%s",
  816. (int)conn->s, conn_type_to_string(conn->type),
  817. conn_state_to_string(conn->type, conn->state), m);
  818. tor_free(m);
  819. }
  820. #endif
  821. conn->read_blocked_on_bw = 1;
  822. connection_stop_reading(conn);
  823. }
  824. }
  825. return 0;
  826. }
  827. if (connection_wants_to_flush(conn)) {
  828. log_fn(LOG_INFO, LD_NET, "We stalled too much while trying to write %d "
  829. "bytes to address %s. If this happens a lot, either "
  830. "something is wrong with your network connection, or "
  831. "something is wrong with theirs. "
  832. "(fd %d, type %s, state %d, marked at %s:%d).",
  833. (int)connection_get_outbuf_len(conn),
  834. escaped_safe_str_client(conn->address),
  835. (int)conn->s, conn_type_to_string(conn->type), conn->state,
  836. conn->marked_for_close_file,
  837. conn->marked_for_close);
  838. }
  839. }
  840. #ifdef USE_BUFFEREVENTS
  841. unlink:
  842. #endif
  843. connection_unlink(conn); /* unlink, remove, free */
  844. return 1;
  845. }
  846. /** We've just tried every dirserver we know about, and none of
  847. * them were reachable. Assume the network is down. Change state
  848. * so next time an application connection arrives we'll delay it
  849. * and try another directory fetch. Kill off all the circuit_wait
  850. * streams that are waiting now, since they will all timeout anyway.
  851. */
  852. void
  853. directory_all_unreachable(time_t now)
  854. {
  855. connection_t *conn;
  856. (void)now;
  857. stats_n_seconds_working=0; /* reset it */
  858. while ((conn = connection_get_by_type_state(CONN_TYPE_AP,
  859. AP_CONN_STATE_CIRCUIT_WAIT))) {
  860. entry_connection_t *entry_conn = TO_ENTRY_CONN(conn);
  861. log_notice(LD_NET,
  862. "Is your network connection down? "
  863. "Failing connection to '%s:%d'.",
  864. safe_str_client(entry_conn->socks_request->address),
  865. entry_conn->socks_request->port);
  866. connection_mark_unattached_ap(entry_conn,
  867. END_STREAM_REASON_NET_UNREACHABLE);
  868. }
  869. control_event_general_status(LOG_ERR, "DIR_ALL_UNREACHABLE");
  870. }
  871. /** This function is called whenever we successfully pull down some new
  872. * network statuses or server descriptors. */
  873. void
  874. directory_info_has_arrived(time_t now, int from_cache)
  875. {
  876. const or_options_t *options = get_options();
  877. if (!router_have_minimum_dir_info()) {
  878. int quiet = from_cache ||
  879. directory_too_idle_to_fetch_descriptors(options, now);
  880. tor_log(quiet ? LOG_INFO : LOG_NOTICE, LD_DIR,
  881. "I learned some more directory information, but not enough to "
  882. "build a circuit: %s", get_dir_info_status_string());
  883. update_all_descriptor_downloads(now);
  884. return;
  885. } else {
  886. if (directory_fetches_from_authorities(options)) {
  887. update_all_descriptor_downloads(now);
  888. }
  889. /* if we have enough dir info, then update our guard status with
  890. * whatever we just learned. */
  891. entry_guards_compute_status(options, now);
  892. /* Don't even bother trying to get extrainfo until the rest of our
  893. * directory info is up-to-date */
  894. if (options->DownloadExtraInfo)
  895. update_extrainfo_downloads(now);
  896. }
  897. if (server_mode(options) && !net_is_disabled() && !from_cache &&
  898. (can_complete_circuit || !any_predicted_circuits(now)))
  899. consider_testing_reachability(1, 1);
  900. }
  901. /** Perform regular maintenance tasks for a single connection. This
  902. * function gets run once per second per connection by run_scheduled_events.
  903. */
  904. static void
  905. run_connection_housekeeping(int i, time_t now)
  906. {
  907. cell_t cell;
  908. connection_t *conn = smartlist_get(connection_array, i);
  909. const or_options_t *options = get_options();
  910. or_connection_t *or_conn;
  911. channel_t *chan = NULL;
  912. int have_any_circuits;
  913. int past_keepalive =
  914. now >= conn->timestamp_lastwritten + options->KeepalivePeriod;
  915. if (conn->outbuf && !connection_get_outbuf_len(conn) &&
  916. conn->type == CONN_TYPE_OR)
  917. TO_OR_CONN(conn)->timestamp_lastempty = now;
  918. if (conn->marked_for_close) {
  919. /* nothing to do here */
  920. return;
  921. }
  922. /* Expire any directory connections that haven't been active (sent
  923. * if a server or received if a client) for 5 min */
  924. if (conn->type == CONN_TYPE_DIR &&
  925. ((DIR_CONN_IS_SERVER(conn) &&
  926. conn->timestamp_lastwritten
  927. + options->TestingDirConnectionMaxStall < now) ||
  928. (!DIR_CONN_IS_SERVER(conn) &&
  929. conn->timestamp_lastread
  930. + options->TestingDirConnectionMaxStall < now))) {
  931. log_info(LD_DIR,"Expiring wedged directory conn (fd %d, purpose %d)",
  932. (int)conn->s, conn->purpose);
  933. /* This check is temporary; it's to let us know whether we should consider
  934. * parsing partial serverdesc responses. */
  935. if (conn->purpose == DIR_PURPOSE_FETCH_SERVERDESC &&
  936. connection_get_inbuf_len(conn) >= 1024) {
  937. log_info(LD_DIR,"Trying to extract information from wedged server desc "
  938. "download.");
  939. connection_dir_reached_eof(TO_DIR_CONN(conn));
  940. } else {
  941. connection_mark_for_close(conn);
  942. }
  943. return;
  944. }
  945. if (!connection_speaks_cells(conn))
  946. return; /* we're all done here, the rest is just for OR conns */
  947. /* If we haven't written to an OR connection for a while, then either nuke
  948. the connection or send a keepalive, depending. */
  949. or_conn = TO_OR_CONN(conn);
  950. #ifdef USE_BUFFEREVENTS
  951. tor_assert(conn->bufev);
  952. #else
  953. tor_assert(conn->outbuf);
  954. #endif
  955. chan = TLS_CHAN_TO_BASE(or_conn->chan);
  956. tor_assert(chan);
  957. if (channel_num_circuits(chan) != 0) {
  958. have_any_circuits = 1;
  959. chan->timestamp_last_had_circuits = now;
  960. } else {
  961. have_any_circuits = 0;
  962. }
  963. if (channel_is_bad_for_new_circs(TLS_CHAN_TO_BASE(or_conn->chan)) &&
  964. ! have_any_circuits) {
  965. /* It's bad for new circuits, and has no unmarked circuits on it:
  966. * mark it now. */
  967. log_info(LD_OR,
  968. "Expiring non-used OR connection to fd %d (%s:%d) [Too old].",
  969. (int)conn->s, conn->address, conn->port);
  970. if (conn->state == OR_CONN_STATE_CONNECTING)
  971. connection_or_connect_failed(TO_OR_CONN(conn),
  972. END_OR_CONN_REASON_TIMEOUT,
  973. "Tor gave up on the connection");
  974. connection_or_close_normally(TO_OR_CONN(conn), 1);
  975. } else if (!connection_state_is_open(conn)) {
  976. if (past_keepalive) {
  977. /* We never managed to actually get this connection open and happy. */
  978. log_info(LD_OR,"Expiring non-open OR connection to fd %d (%s:%d).",
  979. (int)conn->s,conn->address, conn->port);
  980. connection_or_close_normally(TO_OR_CONN(conn), 0);
  981. }
  982. } else if (we_are_hibernating() &&
  983. ! have_any_circuits &&
  984. !connection_get_outbuf_len(conn)) {
  985. /* We're hibernating, there's no circuits, and nothing to flush.*/
  986. log_info(LD_OR,"Expiring non-used OR connection to fd %d (%s:%d) "
  987. "[Hibernating or exiting].",
  988. (int)conn->s,conn->address, conn->port);
  989. connection_or_close_normally(TO_OR_CONN(conn), 1);
  990. } else if (!have_any_circuits &&
  991. now - or_conn->idle_timeout >=
  992. chan->timestamp_last_had_circuits) {
  993. log_info(LD_OR,"Expiring non-used OR connection to fd %d (%s:%d) "
  994. "[no circuits for %d; timeout %d; %scanonical].",
  995. (int)conn->s, conn->address, conn->port,
  996. (int)(now - chan->timestamp_last_had_circuits),
  997. or_conn->idle_timeout,
  998. or_conn->is_canonical ? "" : "non");
  999. connection_or_close_normally(TO_OR_CONN(conn), 0);
  1000. } else if (
  1001. now >= or_conn->timestamp_lastempty + options->KeepalivePeriod*10 &&
  1002. now >= conn->timestamp_lastwritten + options->KeepalivePeriod*10) {
  1003. log_fn(LOG_PROTOCOL_WARN,LD_PROTOCOL,
  1004. "Expiring stuck OR connection to fd %d (%s:%d). (%d bytes to "
  1005. "flush; %d seconds since last write)",
  1006. (int)conn->s, conn->address, conn->port,
  1007. (int)connection_get_outbuf_len(conn),
  1008. (int)(now-conn->timestamp_lastwritten));
  1009. connection_or_close_normally(TO_OR_CONN(conn), 0);
  1010. } else if (past_keepalive && !connection_get_outbuf_len(conn)) {
  1011. /* send a padding cell */
  1012. log_fn(LOG_DEBUG,LD_OR,"Sending keepalive to (%s:%d)",
  1013. conn->address, conn->port);
  1014. memset(&cell,0,sizeof(cell_t));
  1015. cell.command = CELL_PADDING;
  1016. connection_or_write_cell_to_buf(&cell, or_conn);
  1017. }
  1018. }
  1019. /** Honor a NEWNYM request: make future requests unlinkable to past
  1020. * requests. */
  1021. static void
  1022. signewnym_impl(time_t now)
  1023. {
  1024. const or_options_t *options = get_options();
  1025. if (!proxy_mode(options)) {
  1026. log_info(LD_CONTROL, "Ignoring SIGNAL NEWNYM because client functionality "
  1027. "is disabled.");
  1028. return;
  1029. }
  1030. circuit_mark_all_dirty_circs_as_unusable();
  1031. addressmap_clear_transient();
  1032. rend_client_purge_state();
  1033. time_of_last_signewnym = now;
  1034. signewnym_is_pending = 0;
  1035. ++newnym_epoch;
  1036. control_event_signal(SIGNEWNYM);
  1037. }
  1038. /** Return the number of times that signewnym has been called. */
  1039. unsigned
  1040. get_signewnym_epoch(void)
  1041. {
  1042. return newnym_epoch;
  1043. }
  1044. static time_t time_to_check_descriptor = 0;
  1045. /**
  1046. * Update our schedule so that we'll check whether we need to update our
  1047. * descriptor immediately, rather than after up to CHECK_DESCRIPTOR_INTERVAL
  1048. * seconds.
  1049. */
  1050. void
  1051. reschedule_descriptor_update_check(void)
  1052. {
  1053. time_to_check_descriptor = 0;
  1054. }
  1055. /** Perform regular maintenance tasks. This function gets run once per
  1056. * second by second_elapsed_callback().
  1057. */
  1058. static void
  1059. run_scheduled_events(time_t now)
  1060. {
  1061. static time_t last_rotated_x509_certificate = 0;
  1062. static time_t time_to_check_v3_certificate = 0;
  1063. static time_t time_to_check_listeners = 0;
  1064. static time_t time_to_download_networkstatus = 0;
  1065. static time_t time_to_shrink_memory = 0;
  1066. static time_t time_to_try_getting_descriptors = 0;
  1067. static time_t time_to_reset_descriptor_failures = 0;
  1068. static time_t time_to_add_entropy = 0;
  1069. static time_t time_to_write_bridge_status_file = 0;
  1070. static time_t time_to_downrate_stability = 0;
  1071. static time_t time_to_save_stability = 0;
  1072. static time_t time_to_clean_caches = 0;
  1073. static time_t time_to_recheck_bandwidth = 0;
  1074. static time_t time_to_check_for_expired_networkstatus = 0;
  1075. static time_t time_to_write_stats_files = 0;
  1076. static time_t time_to_write_bridge_stats = 0;
  1077. static time_t time_to_check_port_forwarding = 0;
  1078. static time_t time_to_launch_reachability_tests = 0;
  1079. static int should_init_bridge_stats = 1;
  1080. static time_t time_to_retry_dns_init = 0;
  1081. static time_t time_to_next_heartbeat = 0;
  1082. const or_options_t *options = get_options();
  1083. int is_server = server_mode(options);
  1084. int i;
  1085. int have_dir_info;
  1086. /* 0. See if we've been asked to shut down and our timeout has
  1087. * expired; or if our bandwidth limits are exhausted and we
  1088. * should hibernate; or if it's time to wake up from hibernation.
  1089. */
  1090. consider_hibernation(now);
  1091. /* 0b. If we've deferred a signewnym, make sure it gets handled
  1092. * eventually. */
  1093. if (signewnym_is_pending &&
  1094. time_of_last_signewnym + MAX_SIGNEWNYM_RATE <= now) {
  1095. log_info(LD_CONTROL, "Honoring delayed NEWNYM request");
  1096. signewnym_impl(now);
  1097. }
  1098. /* 0c. If we've deferred log messages for the controller, handle them now */
  1099. flush_pending_log_callbacks();
  1100. /* 1a. Every MIN_ONION_KEY_LIFETIME seconds, rotate the onion keys,
  1101. * shut down and restart all cpuworkers, and update the directory if
  1102. * necessary.
  1103. */
  1104. if (is_server &&
  1105. get_onion_key_set_at()+MIN_ONION_KEY_LIFETIME < now) {
  1106. log_info(LD_GENERAL,"Rotating onion key.");
  1107. rotate_onion_key();
  1108. cpuworkers_rotate();
  1109. if (router_rebuild_descriptor(1)<0) {
  1110. log_info(LD_CONFIG, "Couldn't rebuild router descriptor");
  1111. }
  1112. if (advertised_server_mode() && !options->DisableNetwork)
  1113. router_upload_dir_desc_to_dirservers(0);
  1114. }
  1115. if (!should_delay_dir_fetches(options, NULL) &&
  1116. time_to_try_getting_descriptors < now) {
  1117. update_all_descriptor_downloads(now);
  1118. update_extrainfo_downloads(now);
  1119. if (router_have_minimum_dir_info())
  1120. time_to_try_getting_descriptors = now + LAZY_DESCRIPTOR_RETRY_INTERVAL;
  1121. else
  1122. time_to_try_getting_descriptors = now + GREEDY_DESCRIPTOR_RETRY_INTERVAL;
  1123. }
  1124. if (time_to_reset_descriptor_failures < now) {
  1125. router_reset_descriptor_download_failures();
  1126. time_to_reset_descriptor_failures =
  1127. now + DESCRIPTOR_FAILURE_RESET_INTERVAL;
  1128. }
  1129. if (options->UseBridges && !options->DisableNetwork)
  1130. fetch_bridge_descriptors(options, now);
  1131. /* 1b. Every MAX_SSL_KEY_LIFETIME_INTERNAL seconds, we change our
  1132. * TLS context. */
  1133. if (!last_rotated_x509_certificate)
  1134. last_rotated_x509_certificate = now;
  1135. if (last_rotated_x509_certificate+MAX_SSL_KEY_LIFETIME_INTERNAL < now) {
  1136. log_info(LD_GENERAL,"Rotating tls context.");
  1137. if (router_initialize_tls_context() < 0) {
  1138. log_warn(LD_BUG, "Error reinitializing TLS context");
  1139. /* XXX is it a bug here, that we just keep going? -RD */
  1140. }
  1141. last_rotated_x509_certificate = now;
  1142. /* We also make sure to rotate the TLS connections themselves if they've
  1143. * been up for too long -- but that's done via is_bad_for_new_circs in
  1144. * connection_run_housekeeping() above. */
  1145. }
  1146. if (time_to_add_entropy < now) {
  1147. if (time_to_add_entropy) {
  1148. /* We already seeded once, so don't die on failure. */
  1149. crypto_seed_rng(0);
  1150. }
  1151. /** How often do we add more entropy to OpenSSL's RNG pool? */
  1152. #define ENTROPY_INTERVAL (60*60)
  1153. time_to_add_entropy = now + ENTROPY_INTERVAL;
  1154. }
  1155. /* 1c. If we have to change the accounting interval or record
  1156. * bandwidth used in this accounting interval, do so. */
  1157. if (accounting_is_enabled(options))
  1158. accounting_run_housekeeping(now);
  1159. if (time_to_launch_reachability_tests < now &&
  1160. (authdir_mode_tests_reachability(options)) &&
  1161. !net_is_disabled()) {
  1162. time_to_launch_reachability_tests = now + REACHABILITY_TEST_INTERVAL;
  1163. /* try to determine reachability of the other Tor relays */
  1164. dirserv_test_reachability(now);
  1165. }
  1166. /* 1d. Periodically, we discount older stability information so that new
  1167. * stability info counts more, and save the stability information to disk as
  1168. * appropriate. */
  1169. if (time_to_downrate_stability < now)
  1170. time_to_downrate_stability = rep_hist_downrate_old_runs(now);
  1171. if (authdir_mode_tests_reachability(options)) {
  1172. if (time_to_save_stability < now) {
  1173. if (time_to_save_stability && rep_hist_record_mtbf_data(now, 1)<0) {
  1174. log_warn(LD_GENERAL, "Couldn't store mtbf data.");
  1175. }
  1176. #define SAVE_STABILITY_INTERVAL (30*60)
  1177. time_to_save_stability = now + SAVE_STABILITY_INTERVAL;
  1178. }
  1179. }
  1180. /* 1e. Periodically, if we're a v3 authority, we check whether our cert is
  1181. * close to expiring and warn the admin if it is. */
  1182. if (time_to_check_v3_certificate < now) {
  1183. v3_authority_check_key_expiry();
  1184. #define CHECK_V3_CERTIFICATE_INTERVAL (5*60)
  1185. time_to_check_v3_certificate = now + CHECK_V3_CERTIFICATE_INTERVAL;
  1186. }
  1187. /* 1f. Check whether our networkstatus has expired.
  1188. */
  1189. if (time_to_check_for_expired_networkstatus < now) {
  1190. networkstatus_t *ns = networkstatus_get_latest_consensus();
  1191. /*XXXX RD: This value needs to be the same as REASONABLY_LIVE_TIME in
  1192. * networkstatus_get_reasonably_live_consensus(), but that value is way
  1193. * way too high. Arma: is the bridge issue there resolved yet? -NM */
  1194. #define NS_EXPIRY_SLOP (24*60*60)
  1195. if (ns && ns->valid_until < now+NS_EXPIRY_SLOP &&
  1196. router_have_minimum_dir_info()) {
  1197. router_dir_info_changed();
  1198. }
  1199. #define CHECK_EXPIRED_NS_INTERVAL (2*60)
  1200. time_to_check_for_expired_networkstatus = now + CHECK_EXPIRED_NS_INTERVAL;
  1201. }
  1202. /* 1g. Check whether we should write statistics to disk.
  1203. */
  1204. if (time_to_write_stats_files < now) {
  1205. #define CHECK_WRITE_STATS_INTERVAL (60*60)
  1206. time_t next_time_to_write_stats_files = (time_to_write_stats_files > 0 ?
  1207. time_to_write_stats_files : now) + CHECK_WRITE_STATS_INTERVAL;
  1208. if (options->CellStatistics) {
  1209. time_t next_write =
  1210. rep_hist_buffer_stats_write(time_to_write_stats_files);
  1211. if (next_write && next_write < next_time_to_write_stats_files)
  1212. next_time_to_write_stats_files = next_write;
  1213. }
  1214. if (options->DirReqStatistics) {
  1215. time_t next_write = geoip_dirreq_stats_write(time_to_write_stats_files);
  1216. if (next_write && next_write < next_time_to_write_stats_files)
  1217. next_time_to_write_stats_files = next_write;
  1218. }
  1219. if (options->EntryStatistics) {
  1220. time_t next_write = geoip_entry_stats_write(time_to_write_stats_files);
  1221. if (next_write && next_write < next_time_to_write_stats_files)
  1222. next_time_to_write_stats_files = next_write;
  1223. }
  1224. if (options->ExitPortStatistics) {
  1225. time_t next_write = rep_hist_exit_stats_write(time_to_write_stats_files);
  1226. if (next_write && next_write < next_time_to_write_stats_files)
  1227. next_time_to_write_stats_files = next_write;
  1228. }
  1229. if (options->ConnDirectionStatistics) {
  1230. time_t next_write = rep_hist_conn_stats_write(time_to_write_stats_files);
  1231. if (next_write && next_write < next_time_to_write_stats_files)
  1232. next_time_to_write_stats_files = next_write;
  1233. }
  1234. if (options->BridgeAuthoritativeDir) {
  1235. time_t next_write = rep_hist_desc_stats_write(time_to_write_stats_files);
  1236. if (next_write && next_write < next_time_to_write_stats_files)
  1237. next_time_to_write_stats_files = next_write;
  1238. }
  1239. time_to_write_stats_files = next_time_to_write_stats_files;
  1240. }
  1241. /* 1h. Check whether we should write bridge statistics to disk.
  1242. */
  1243. if (should_record_bridge_info(options)) {
  1244. if (time_to_write_bridge_stats < now) {
  1245. if (should_init_bridge_stats) {
  1246. /* (Re-)initialize bridge statistics. */
  1247. geoip_bridge_stats_init(now);
  1248. time_to_write_bridge_stats = now + WRITE_STATS_INTERVAL;
  1249. should_init_bridge_stats = 0;
  1250. } else {
  1251. /* Possibly write bridge statistics to disk and ask when to write
  1252. * them next time. */
  1253. time_to_write_bridge_stats = geoip_bridge_stats_write(
  1254. time_to_write_bridge_stats);
  1255. }
  1256. }
  1257. } else if (!should_init_bridge_stats) {
  1258. /* Bridge mode was turned off. Ensure that stats are re-initialized
  1259. * next time bridge mode is turned on. */
  1260. should_init_bridge_stats = 1;
  1261. }
  1262. /* Remove old information from rephist and the rend cache. */
  1263. if (time_to_clean_caches < now) {
  1264. rep_history_clean(now - options->RephistTrackTime);
  1265. rend_cache_clean(now);
  1266. rend_cache_clean_v2_descs_as_dir(now);
  1267. microdesc_cache_rebuild(NULL, 0);
  1268. #define CLEAN_CACHES_INTERVAL (30*60)
  1269. time_to_clean_caches = now + CLEAN_CACHES_INTERVAL;
  1270. }
  1271. #define RETRY_DNS_INTERVAL (10*60)
  1272. /* If we're a server and initializing dns failed, retry periodically. */
  1273. if (time_to_retry_dns_init < now) {
  1274. time_to_retry_dns_init = now + RETRY_DNS_INTERVAL;
  1275. if (is_server && has_dns_init_failed())
  1276. dns_init();
  1277. }
  1278. /* 2. Periodically, we consider force-uploading our descriptor
  1279. * (if we've passed our internal checks). */
  1280. /** How often do we check whether part of our router info has changed in a
  1281. * way that would require an upload? That includes checking whether our IP
  1282. * address has changed. */
  1283. #define CHECK_DESCRIPTOR_INTERVAL (60)
  1284. /* 2b. Once per minute, regenerate and upload the descriptor if the old
  1285. * one is inaccurate. */
  1286. if (time_to_check_descriptor < now && !options->DisableNetwork) {
  1287. static int dirport_reachability_count = 0;
  1288. time_to_check_descriptor = now + CHECK_DESCRIPTOR_INTERVAL;
  1289. check_descriptor_bandwidth_changed(now);
  1290. check_descriptor_ipaddress_changed(now);
  1291. mark_my_descriptor_dirty_if_too_old(now);
  1292. consider_publishable_server(0);
  1293. /* also, check religiously for reachability, if it's within the first
  1294. * 20 minutes of our uptime. */
  1295. if (is_server &&
  1296. (can_complete_circuit || !any_predicted_circuits(now)) &&
  1297. !we_are_hibernating()) {
  1298. if (stats_n_seconds_working < TIMEOUT_UNTIL_UNREACHABILITY_COMPLAINT) {
  1299. consider_testing_reachability(1, dirport_reachability_count==0);
  1300. if (++dirport_reachability_count > 5)
  1301. dirport_reachability_count = 0;
  1302. } else if (time_to_recheck_bandwidth < now) {
  1303. /* If we haven't checked for 12 hours and our bandwidth estimate is
  1304. * low, do another bandwidth test. This is especially important for
  1305. * bridges, since they might go long periods without much use. */
  1306. const routerinfo_t *me = router_get_my_routerinfo();
  1307. if (time_to_recheck_bandwidth && me &&
  1308. me->bandwidthcapacity < me->bandwidthrate &&
  1309. me->bandwidthcapacity < 51200) {
  1310. reset_bandwidth_test();
  1311. }
  1312. #define BANDWIDTH_RECHECK_INTERVAL (12*60*60)
  1313. time_to_recheck_bandwidth = now + BANDWIDTH_RECHECK_INTERVAL;
  1314. }
  1315. }
  1316. /* If any networkstatus documents are no longer recent, we need to
  1317. * update all the descriptors' running status. */
  1318. /* Remove dead routers. */
  1319. routerlist_remove_old_routers();
  1320. }
  1321. /* 2c. Every minute (or every second if TestingTorNetwork), check
  1322. * whether we want to download any networkstatus documents. */
  1323. /* How often do we check whether we should download network status
  1324. * documents? */
  1325. #define networkstatus_dl_check_interval(o) ((o)->TestingTorNetwork ? 1 : 60)
  1326. if (!should_delay_dir_fetches(options, NULL) &&
  1327. time_to_download_networkstatus < now) {
  1328. time_to_download_networkstatus =
  1329. now + networkstatus_dl_check_interval(options);
  1330. update_networkstatus_downloads(now);
  1331. }
  1332. /* 2c. Let directory voting happen. */
  1333. if (authdir_mode_v3(options))
  1334. dirvote_act(options, now);
  1335. /* 3a. Every second, we examine pending circuits and prune the
  1336. * ones which have been pending for more than a few seconds.
  1337. * We do this before step 4, so it can try building more if
  1338. * it's not comfortable with the number of available circuits.
  1339. */
  1340. /* (If our circuit build timeout can ever become lower than a second (which
  1341. * it can't, currently), we should do this more often.) */
  1342. circuit_expire_building();
  1343. /* 3b. Also look at pending streams and prune the ones that 'began'
  1344. * a long time ago but haven't gotten a 'connected' yet.
  1345. * Do this before step 4, so we can put them back into pending
  1346. * state to be picked up by the new circuit.
  1347. */
  1348. connection_ap_expire_beginning();
  1349. /* 3c. And expire connections that we've held open for too long.
  1350. */
  1351. connection_expire_held_open();
  1352. /* 3d. And every 60 seconds, we relaunch listeners if any died. */
  1353. if (!net_is_disabled() && time_to_check_listeners < now) {
  1354. retry_all_listeners(NULL, NULL, 0);
  1355. time_to_check_listeners = now+60;
  1356. }
  1357. /* 4. Every second, we try a new circuit if there are no valid
  1358. * circuits. Every NewCircuitPeriod seconds, we expire circuits
  1359. * that became dirty more than MaxCircuitDirtiness seconds ago,
  1360. * and we make a new circ if there are no clean circuits.
  1361. */
  1362. have_dir_info = router_have_minimum_dir_info();
  1363. if (have_dir_info && !net_is_disabled()) {
  1364. circuit_build_needed_circs(now);
  1365. } else {
  1366. circuit_expire_old_circs_as_needed(now);
  1367. }
  1368. /* every 10 seconds, but not at the same second as other such events */
  1369. if (now % 10 == 5)
  1370. circuit_expire_old_circuits_serverside(now);
  1371. /* 5. We do housekeeping for each connection... */
  1372. connection_or_set_bad_connections(NULL, 0);
  1373. for (i=0;i<smartlist_len(connection_array);i++) {
  1374. run_connection_housekeeping(i, now);
  1375. }
  1376. if (time_to_shrink_memory < now) {
  1377. SMARTLIST_FOREACH(connection_array, connection_t *, conn, {
  1378. if (conn->outbuf)
  1379. buf_shrink(conn->outbuf);
  1380. if (conn->inbuf)
  1381. buf_shrink(conn->inbuf);
  1382. });
  1383. #ifdef ENABLE_MEMPOOL
  1384. clean_cell_pool();
  1385. #endif /* ENABLE_MEMPOOL */
  1386. buf_shrink_freelists(0);
  1387. /** How often do we check buffers and pools for empty space that can be
  1388. * deallocated? */
  1389. #define MEM_SHRINK_INTERVAL (60)
  1390. time_to_shrink_memory = now + MEM_SHRINK_INTERVAL;
  1391. }
  1392. /* 6. And remove any marked circuits... */
  1393. circuit_close_all_marked();
  1394. /* 7. And upload service descriptors if necessary. */
  1395. if (can_complete_circuit && !net_is_disabled()) {
  1396. rend_consider_services_upload(now);
  1397. rend_consider_descriptor_republication();
  1398. }
  1399. /* 8. and blow away any connections that need to die. have to do this now,
  1400. * because if we marked a conn for close and left its socket -1, then
  1401. * we'll pass it to poll/select and bad things will happen.
  1402. */
  1403. close_closeable_connections();
  1404. /* 8b. And if anything in our state is ready to get flushed to disk, we
  1405. * flush it. */
  1406. or_state_save(now);
  1407. /* 8c. Do channel cleanup just like for connections */
  1408. channel_run_cleanup();
  1409. channel_listener_run_cleanup();
  1410. /* 9. and if we're an exit node, check whether our DNS is telling stories
  1411. * to us. */
  1412. if (!net_is_disabled() &&
  1413. public_server_mode(options) &&
  1414. time_to_check_for_correct_dns < now &&
  1415. ! router_my_exit_policy_is_reject_star()) {
  1416. if (!time_to_check_for_correct_dns) {
  1417. time_to_check_for_correct_dns = now + 60 + crypto_rand_int(120);
  1418. } else {
  1419. dns_launch_correctness_checks();
  1420. time_to_check_for_correct_dns = now + 12*3600 +
  1421. crypto_rand_int(12*3600);
  1422. }
  1423. }
  1424. /* 10. write bridge networkstatus file to disk */
  1425. if (options->BridgeAuthoritativeDir &&
  1426. time_to_write_bridge_status_file < now) {
  1427. networkstatus_dump_bridge_status_to_file(now);
  1428. #define BRIDGE_STATUSFILE_INTERVAL (30*60)
  1429. time_to_write_bridge_status_file = now+BRIDGE_STATUSFILE_INTERVAL;
  1430. }
  1431. /* 11. check the port forwarding app */
  1432. if (!net_is_disabled() &&
  1433. time_to_check_port_forwarding < now &&
  1434. options->PortForwarding &&
  1435. is_server) {
  1436. #define PORT_FORWARDING_CHECK_INTERVAL 5
  1437. smartlist_t *ports_to_forward = get_list_of_ports_to_forward();
  1438. if (ports_to_forward) {
  1439. tor_check_port_forwarding(options->PortForwardingHelper,
  1440. ports_to_forward,
  1441. now);
  1442. SMARTLIST_FOREACH(ports_to_forward, char *, cp, tor_free(cp));
  1443. smartlist_free(ports_to_forward);
  1444. }
  1445. time_to_check_port_forwarding = now+PORT_FORWARDING_CHECK_INTERVAL;
  1446. }
  1447. /* 11b. check pending unconfigured managed proxies */
  1448. if (!net_is_disabled() && pt_proxies_configuration_pending())
  1449. pt_configure_remaining_proxies();
  1450. /* 12. write the heartbeat message */
  1451. if (options->HeartbeatPeriod &&
  1452. time_to_next_heartbeat <= now) {
  1453. if (time_to_next_heartbeat) /* don't log the first heartbeat */
  1454. log_heartbeat(now);
  1455. time_to_next_heartbeat = now+options->HeartbeatPeriod;
  1456. }
  1457. }
  1458. /** Timer: used to invoke second_elapsed_callback() once per second. */
  1459. static periodic_timer_t *second_timer = NULL;
  1460. /** Number of libevent errors in the last second: we die if we get too many. */
  1461. static int n_libevent_errors = 0;
  1462. /** Libevent callback: invoked once every second. */
  1463. static void
  1464. second_elapsed_callback(periodic_timer_t *timer, void *arg)
  1465. {
  1466. /* XXXX This could be sensibly refactored into multiple callbacks, and we
  1467. * could use Libevent's timers for this rather than checking the current
  1468. * time against a bunch of timeouts every second. */
  1469. static time_t current_second = 0;
  1470. time_t now;
  1471. size_t bytes_written;
  1472. size_t bytes_read;
  1473. int seconds_elapsed;
  1474. const or_options_t *options = get_options();
  1475. (void)timer;
  1476. (void)arg;
  1477. n_libevent_errors = 0;
  1478. /* log_notice(LD_GENERAL, "Tick."); */
  1479. now = time(NULL);
  1480. update_approx_time(now);
  1481. /* the second has rolled over. check more stuff. */
  1482. seconds_elapsed = current_second ? (int)(now - current_second) : 0;
  1483. #ifdef USE_BUFFEREVENTS
  1484. {
  1485. uint64_t cur_read,cur_written;
  1486. connection_get_rate_limit_totals(&cur_read, &cur_written);
  1487. bytes_written = (size_t)(cur_written - stats_prev_n_written);
  1488. bytes_read = (size_t)(cur_read - stats_prev_n_read);
  1489. stats_n_bytes_read += bytes_read;
  1490. stats_n_bytes_written += bytes_written;
  1491. if (accounting_is_enabled(options) && seconds_elapsed >= 0)
  1492. accounting_add_bytes(bytes_read, bytes_written, seconds_elapsed);
  1493. stats_prev_n_written = cur_written;
  1494. stats_prev_n_read = cur_read;
  1495. }
  1496. #else
  1497. bytes_read = (size_t)(stats_n_bytes_read - stats_prev_n_read);
  1498. bytes_written = (size_t)(stats_n_bytes_written - stats_prev_n_written);
  1499. stats_prev_n_read = stats_n_bytes_read;
  1500. stats_prev_n_written = stats_n_bytes_written;
  1501. #endif
  1502. control_event_bandwidth_used((uint32_t)bytes_read,(uint32_t)bytes_written);
  1503. control_event_stream_bandwidth_used();
  1504. control_event_conn_bandwidth_used();
  1505. control_event_circ_bandwidth_used();
  1506. control_event_circuit_cell_stats();
  1507. if (server_mode(options) &&
  1508. !net_is_disabled() &&
  1509. seconds_elapsed > 0 &&
  1510. can_complete_circuit &&
  1511. stats_n_seconds_working / TIMEOUT_UNTIL_UNREACHABILITY_COMPLAINT !=
  1512. (stats_n_seconds_working+seconds_elapsed) /
  1513. TIMEOUT_UNTIL_UNREACHABILITY_COMPLAINT) {
  1514. /* every 20 minutes, check and complain if necessary */
  1515. const routerinfo_t *me = router_get_my_routerinfo();
  1516. if (me && !check_whether_orport_reachable()) {
  1517. char *address = tor_dup_ip(me->addr);
  1518. log_warn(LD_CONFIG,"Your server (%s:%d) has not managed to confirm that "
  1519. "its ORPort is reachable. Please check your firewalls, ports, "
  1520. "address, /etc/hosts file, etc.",
  1521. address, me->or_port);
  1522. control_event_server_status(LOG_WARN,
  1523. "REACHABILITY_FAILED ORADDRESS=%s:%d",
  1524. address, me->or_port);
  1525. tor_free(address);
  1526. }
  1527. if (me && !check_whether_dirport_reachable()) {
  1528. char *address = tor_dup_ip(me->addr);
  1529. log_warn(LD_CONFIG,
  1530. "Your server (%s:%d) has not managed to confirm that its "
  1531. "DirPort is reachable. Please check your firewalls, ports, "
  1532. "address, /etc/hosts file, etc.",
  1533. address, me->dir_port);
  1534. control_event_server_status(LOG_WARN,
  1535. "REACHABILITY_FAILED DIRADDRESS=%s:%d",
  1536. address, me->dir_port);
  1537. tor_free(address);
  1538. }
  1539. }
  1540. /** If more than this many seconds have elapsed, probably the clock
  1541. * jumped: doesn't count. */
  1542. #define NUM_JUMPED_SECONDS_BEFORE_WARN 100
  1543. if (seconds_elapsed < -NUM_JUMPED_SECONDS_BEFORE_WARN ||
  1544. seconds_elapsed >= NUM_JUMPED_SECONDS_BEFORE_WARN) {
  1545. circuit_note_clock_jumped(seconds_elapsed);
  1546. /* XXX if the time jumps *back* many months, do our events in
  1547. * run_scheduled_events() recover? I don't think they do. -RD */
  1548. } else if (seconds_elapsed > 0)
  1549. stats_n_seconds_working += seconds_elapsed;
  1550. run_scheduled_events(now);
  1551. current_second = now; /* remember which second it is, for next time */
  1552. }
  1553. #ifndef USE_BUFFEREVENTS
  1554. /** Timer: used to invoke refill_callback(). */
  1555. static periodic_timer_t *refill_timer = NULL;
  1556. /** Libevent callback: invoked periodically to refill token buckets
  1557. * and count r/w bytes. It is only used when bufferevents are disabled. */
  1558. static void
  1559. refill_callback(periodic_timer_t *timer, void *arg)
  1560. {
  1561. static struct timeval current_millisecond;
  1562. struct timeval now;
  1563. size_t bytes_written;
  1564. size_t bytes_read;
  1565. int milliseconds_elapsed = 0;
  1566. int seconds_rolled_over = 0;
  1567. const or_options_t *options = get_options();
  1568. (void)timer;
  1569. (void)arg;
  1570. tor_gettimeofday(&now);
  1571. /* If this is our first time, no time has passed. */
  1572. if (current_millisecond.tv_sec) {
  1573. long mdiff = tv_mdiff(&current_millisecond, &now);
  1574. if (mdiff > INT_MAX)
  1575. mdiff = INT_MAX;
  1576. milliseconds_elapsed = (int)mdiff;
  1577. seconds_rolled_over = (int)(now.tv_sec - current_millisecond.tv_sec);
  1578. }
  1579. bytes_written = stats_prev_global_write_bucket - global_write_bucket;
  1580. bytes_read = stats_prev_global_read_bucket - global_read_bucket;
  1581. stats_n_bytes_read += bytes_read;
  1582. stats_n_bytes_written += bytes_written;
  1583. if (accounting_is_enabled(options) && milliseconds_elapsed >= 0)
  1584. accounting_add_bytes(bytes_read, bytes_written, seconds_rolled_over);
  1585. if (milliseconds_elapsed > 0)
  1586. connection_bucket_refill(milliseconds_elapsed, (time_t)now.tv_sec);
  1587. stats_prev_global_read_bucket = global_read_bucket;
  1588. stats_prev_global_write_bucket = global_write_bucket;
  1589. current_millisecond = now; /* remember what time it is, for next time */
  1590. }
  1591. #endif
  1592. #ifndef _WIN32
  1593. /** Called when a possibly ignorable libevent error occurs; ensures that we
  1594. * don't get into an infinite loop by ignoring too many errors from
  1595. * libevent. */
  1596. static int
  1597. got_libevent_error(void)
  1598. {
  1599. if (++n_libevent_errors > 8) {
  1600. log_err(LD_NET, "Too many libevent errors in one second; dying");
  1601. return -1;
  1602. }
  1603. return 0;
  1604. }
  1605. #endif
  1606. #define UPTIME_CUTOFF_FOR_NEW_BANDWIDTH_TEST (6*60*60)
  1607. /** Called when our IP address seems to have changed. <b>at_interface</b>
  1608. * should be true if we detected a change in our interface, and false if we
  1609. * detected a change in our published address. */
  1610. void
  1611. ip_address_changed(int at_interface)
  1612. {
  1613. int server = server_mode(get_options());
  1614. if (at_interface) {
  1615. if (! server) {
  1616. /* Okay, change our keys. */
  1617. if (init_keys()<0)
  1618. log_warn(LD_GENERAL, "Unable to rotate keys after IP change!");
  1619. }
  1620. } else {
  1621. if (server) {
  1622. if (stats_n_seconds_working > UPTIME_CUTOFF_FOR_NEW_BANDWIDTH_TEST)
  1623. reset_bandwidth_test();
  1624. stats_n_seconds_working = 0;
  1625. router_reset_reachability();
  1626. mark_my_descriptor_dirty("IP address changed");
  1627. }
  1628. }
  1629. dns_servers_relaunch_checks();
  1630. }
  1631. /** Forget what we've learned about the correctness of our DNS servers, and
  1632. * start learning again. */
  1633. void
  1634. dns_servers_relaunch_checks(void)
  1635. {
  1636. if (server_mode(get_options())) {
  1637. dns_reset_correctness_checks();
  1638. time_to_check_for_correct_dns = 0;
  1639. }
  1640. }
  1641. /** Called when we get a SIGHUP: reload configuration files and keys,
  1642. * retry all connections, and so on. */
  1643. static int
  1644. do_hup(void)
  1645. {
  1646. const or_options_t *options = get_options();
  1647. #ifdef USE_DMALLOC
  1648. dmalloc_log_stats();
  1649. dmalloc_log_changed(0, 1, 0, 0);
  1650. #endif
  1651. log_notice(LD_GENERAL,"Received reload signal (hup). Reloading config and "
  1652. "resetting internal state.");
  1653. if (accounting_is_enabled(options))
  1654. accounting_record_bandwidth_usage(time(NULL), get_or_state());
  1655. router_reset_warnings();
  1656. routerlist_reset_warnings();
  1657. /* first, reload config variables, in case they've changed */
  1658. if (options->ReloadTorrcOnSIGHUP) {
  1659. /* no need to provide argc/v, they've been cached in init_from_config */
  1660. if (options_init_from_torrc(0, NULL) < 0) {
  1661. log_err(LD_CONFIG,"Reading config failed--see warnings above. "
  1662. "For usage, try -h.");
  1663. return -1;
  1664. }
  1665. options = get_options(); /* they have changed now */
  1666. /* Logs are only truncated the first time they are opened, but were
  1667. probably intended to be cleaned up on signal. */
  1668. if (options->TruncateLogFile)
  1669. truncate_logs();
  1670. } else {
  1671. char *msg = NULL;
  1672. log_notice(LD_GENERAL, "Not reloading config file: the controller told "
  1673. "us not to.");
  1674. /* Make stuff get rescanned, reloaded, etc. */
  1675. if (set_options((or_options_t*)options, &msg) < 0) {
  1676. if (!msg)
  1677. msg = tor_strdup("Unknown error");
  1678. log_warn(LD_GENERAL, "Unable to re-set previous options: %s", msg);
  1679. tor_free(msg);
  1680. }
  1681. }
  1682. if (authdir_mode_handles_descs(options, -1)) {
  1683. /* reload the approved-routers file */
  1684. if (dirserv_load_fingerprint_file() < 0) {
  1685. /* warnings are logged from dirserv_load_fingerprint_file() directly */
  1686. log_info(LD_GENERAL, "Error reloading fingerprints. "
  1687. "Continuing with old list.");
  1688. }
  1689. }
  1690. /* Rotate away from the old dirty circuits. This has to be done
  1691. * after we've read the new options, but before we start using
  1692. * circuits for directory fetches. */
  1693. circuit_mark_all_dirty_circs_as_unusable();
  1694. /* retry appropriate downloads */
  1695. router_reset_status_download_failures();
  1696. router_reset_descriptor_download_failures();
  1697. if (!options->DisableNetwork)
  1698. update_networkstatus_downloads(time(NULL));
  1699. /* We'll retry routerstatus downloads in about 10 seconds; no need to
  1700. * force a retry there. */
  1701. if (server_mode(options)) {
  1702. /* Restart cpuworker and dnsworker processes, so they get up-to-date
  1703. * configuration options. */
  1704. cpuworkers_rotate();
  1705. dns_reset();
  1706. }
  1707. return 0;
  1708. }
  1709. /** Tor main loop. */
  1710. int
  1711. do_main_loop(void)
  1712. {
  1713. int loop_result;
  1714. time_t now;
  1715. /* initialize dns resolve map, spawn workers if needed */
  1716. if (dns_init() < 0) {
  1717. if (get_options()->ServerDNSAllowBrokenConfig)
  1718. log_warn(LD_GENERAL, "Couldn't set up any working nameservers. "
  1719. "Network not up yet? Will try again soon.");
  1720. else {
  1721. log_err(LD_GENERAL,"Error initializing dns subsystem; exiting. To "
  1722. "retry instead, set the ServerDNSAllowBrokenResolvConf option.");
  1723. }
  1724. }
  1725. #ifdef USE_BUFFEREVENTS
  1726. log_warn(LD_GENERAL, "Tor was compiled with the --enable-bufferevents "
  1727. "option. This is still experimental, and might cause strange "
  1728. "bugs. If you want a more stable Tor, be sure to build without "
  1729. "--enable-bufferevents.");
  1730. #endif
  1731. handle_signals(1);
  1732. /* load the private keys, if we're supposed to have them, and set up the
  1733. * TLS context. */
  1734. if (! client_identity_key_is_set()) {
  1735. if (init_keys() < 0) {
  1736. log_err(LD_BUG,"Error initializing keys; exiting");
  1737. return -1;
  1738. }
  1739. }
  1740. #ifdef ENABLE_MEMPOOLS
  1741. /* Set up the packed_cell_t memory pool. */
  1742. init_cell_pool();
  1743. #endif /* ENABLE_MEMPOOLS */
  1744. /* Set up our buckets */
  1745. connection_bucket_init();
  1746. #ifndef USE_BUFFEREVENTS
  1747. stats_prev_global_read_bucket = global_read_bucket;
  1748. stats_prev_global_write_bucket = global_write_bucket;
  1749. #endif
  1750. /* initialize the bootstrap status events to know we're starting up */
  1751. control_event_bootstrap(BOOTSTRAP_STATUS_STARTING, 0);
  1752. if (trusted_dirs_reload_certs()) {
  1753. log_warn(LD_DIR,
  1754. "Couldn't load all cached v3 certificates. Starting anyway.");
  1755. }
  1756. if (router_reload_consensus_networkstatus()) {
  1757. return -1;
  1758. }
  1759. /* load the routers file, or assign the defaults. */
  1760. if (router_reload_router_list()) {
  1761. return -1;
  1762. }
  1763. /* load the networkstatuses. (This launches a download for new routers as
  1764. * appropriate.)
  1765. */
  1766. now = time(NULL);
  1767. directory_info_has_arrived(now, 1);
  1768. if (server_mode(get_options())) {
  1769. /* launch cpuworkers. Need to do this *after* we've read the onion key. */
  1770. cpu_init();
  1771. }
  1772. /* set up once-a-second callback. */
  1773. if (! second_timer) {
  1774. struct timeval one_second;
  1775. one_second.tv_sec = 1;
  1776. one_second.tv_usec = 0;
  1777. second_timer = periodic_timer_new(tor_libevent_get_base(),
  1778. &one_second,
  1779. second_elapsed_callback,
  1780. NULL);
  1781. tor_assert(second_timer);
  1782. }
  1783. #ifndef USE_BUFFEREVENTS
  1784. if (!refill_timer) {
  1785. struct timeval refill_interval;
  1786. int msecs = get_options()->TokenBucketRefillInterval;
  1787. refill_interval.tv_sec = msecs/1000;
  1788. refill_interval.tv_usec = (msecs%1000)*1000;
  1789. refill_timer = periodic_timer_new(tor_libevent_get_base(),
  1790. &refill_interval,
  1791. refill_callback,
  1792. NULL);
  1793. tor_assert(refill_timer);
  1794. }
  1795. #endif
  1796. for (;;) {
  1797. if (nt_service_is_stopping())
  1798. return 0;
  1799. #ifndef _WIN32
  1800. /* Make it easier to tell whether libevent failure is our fault or not. */
  1801. errno = 0;
  1802. #endif
  1803. /* All active linked conns should get their read events activated. */
  1804. SMARTLIST_FOREACH(active_linked_connection_lst, connection_t *, conn,
  1805. event_active(conn->read_event, EV_READ, 1));
  1806. called_loop_once = smartlist_len(active_linked_connection_lst) ? 1 : 0;
  1807. update_approx_time(time(NULL));
  1808. /* poll until we have an event, or the second ends, or until we have
  1809. * some active linked connections to trigger events for. */
  1810. loop_result = event_base_loop(tor_libevent_get_base(),
  1811. called_loop_once ? EVLOOP_ONCE : 0);
  1812. /* let catch() handle things like ^c, and otherwise don't worry about it */
  1813. if (loop_result < 0) {
  1814. int e = tor_socket_errno(-1);
  1815. /* let the program survive things like ^z */
  1816. if (e != EINTR && !ERRNO_IS_EINPROGRESS(e)) {
  1817. log_err(LD_NET,"libevent call with %s failed: %s [%d]",
  1818. tor_libevent_get_method(), tor_socket_strerror(e), e);
  1819. return -1;
  1820. #ifndef _WIN32
  1821. } else if (e == EINVAL) {
  1822. log_warn(LD_NET, "EINVAL from libevent: should you upgrade libevent?");
  1823. if (got_libevent_error())
  1824. return -1;
  1825. #endif
  1826. } else {
  1827. if (ERRNO_IS_EINPROGRESS(e))
  1828. log_warn(LD_BUG,
  1829. "libevent call returned EINPROGRESS? Please report.");
  1830. log_debug(LD_NET,"libevent call interrupted.");
  1831. /* You can't trust the results of this poll(). Go back to the
  1832. * top of the big for loop. */
  1833. continue;
  1834. }
  1835. }
  1836. }
  1837. }
  1838. #ifndef _WIN32 /* Only called when we're willing to use signals */
  1839. /** Libevent callback: invoked when we get a signal.
  1840. */
  1841. static void
  1842. signal_callback(int fd, short events, void *arg)
  1843. {
  1844. uintptr_t sig = (uintptr_t)arg;
  1845. (void)fd;
  1846. (void)events;
  1847. process_signal(sig);
  1848. }
  1849. #endif
  1850. /** Do the work of acting on a signal received in <b>sig</b> */
  1851. void
  1852. process_signal(uintptr_t sig)
  1853. {
  1854. switch (sig)
  1855. {
  1856. case SIGTERM:
  1857. log_notice(LD_GENERAL,"Catching signal TERM, exiting cleanly.");
  1858. tor_cleanup();
  1859. exit(0);
  1860. break;
  1861. case SIGINT:
  1862. if (!server_mode(get_options())) { /* do it now */
  1863. log_notice(LD_GENERAL,"Interrupt: exiting cleanly.");
  1864. tor_cleanup();
  1865. exit(0);
  1866. }
  1867. hibernate_begin_shutdown();
  1868. break;
  1869. #ifdef SIGPIPE
  1870. case SIGPIPE:
  1871. log_debug(LD_GENERAL,"Caught SIGPIPE. Ignoring.");
  1872. break;
  1873. #endif
  1874. case SIGUSR1:
  1875. /* prefer to log it at INFO, but make sure we always see it */
  1876. dumpstats(get_min_log_level()<LOG_INFO ? get_min_log_level() : LOG_INFO);
  1877. control_event_signal(sig);
  1878. break;
  1879. case SIGUSR2:
  1880. switch_logs_debug();
  1881. log_debug(LD_GENERAL,"Caught USR2, going to loglevel debug. "
  1882. "Send HUP to change back.");
  1883. control_event_signal(sig);
  1884. break;
  1885. case SIGHUP:
  1886. if (do_hup() < 0) {
  1887. log_warn(LD_CONFIG,"Restart failed (config error?). Exiting.");
  1888. tor_cleanup();
  1889. exit(1);
  1890. }
  1891. control_event_signal(sig);
  1892. break;
  1893. #ifdef SIGCHLD
  1894. case SIGCHLD:
  1895. notify_pending_waitpid_callbacks();
  1896. break;
  1897. #endif
  1898. case SIGNEWNYM: {
  1899. time_t now = time(NULL);
  1900. if (time_of_last_signewnym + MAX_SIGNEWNYM_RATE > now) {
  1901. signewnym_is_pending = 1;
  1902. log_notice(LD_CONTROL,
  1903. "Rate limiting NEWNYM request: delaying by %d second(s)",
  1904. (int)(MAX_SIGNEWNYM_RATE+time_of_last_signewnym-now));
  1905. } else {
  1906. signewnym_impl(now);
  1907. }
  1908. break;
  1909. }
  1910. case SIGCLEARDNSCACHE:
  1911. addressmap_clear_transient();
  1912. control_event_signal(sig);
  1913. break;
  1914. }
  1915. }
  1916. /** Returns Tor's uptime. */
  1917. MOCK_IMPL(long,
  1918. get_uptime,(void))
  1919. {
  1920. return stats_n_seconds_working;
  1921. }
  1922. extern uint64_t rephist_total_alloc;
  1923. extern uint32_t rephist_total_num;
  1924. /**
  1925. * Write current memory usage information to the log.
  1926. */
  1927. static void
  1928. dumpmemusage(int severity)
  1929. {
  1930. connection_dump_buffer_mem_stats(severity);
  1931. tor_log(severity, LD_GENERAL, "In rephist: "U64_FORMAT" used by %d Tors.",
  1932. U64_PRINTF_ARG(rephist_total_alloc), rephist_total_num);
  1933. dump_routerlist_mem_usage(severity);
  1934. dump_cell_pool_usage(severity);
  1935. dump_dns_mem_usage(severity);
  1936. buf_dump_freelist_sizes(severity);
  1937. tor_log_mallinfo(severity);
  1938. }
  1939. /** Write all statistics to the log, with log level <b>severity</b>. Called
  1940. * in response to a SIGUSR1. */
  1941. static void
  1942. dumpstats(int severity)
  1943. {
  1944. time_t now = time(NULL);
  1945. time_t elapsed;
  1946. size_t rbuf_cap, wbuf_cap, rbuf_len, wbuf_len;
  1947. tor_log(severity, LD_GENERAL, "Dumping stats:");
  1948. SMARTLIST_FOREACH_BEGIN(connection_array, connection_t *, conn) {
  1949. int i = conn_sl_idx;
  1950. tor_log(severity, LD_GENERAL,
  1951. "Conn %d (socket %d) type %d (%s), state %d (%s), created %d secs ago",
  1952. i, (int)conn->s, conn->type, conn_type_to_string(conn->type),
  1953. conn->state, conn_state_to_string(conn->type, conn->state),
  1954. (int)(now - conn->timestamp_created));
  1955. if (!connection_is_listener(conn)) {
  1956. tor_log(severity,LD_GENERAL,
  1957. "Conn %d is to %s:%d.", i,
  1958. safe_str_client(conn->address),
  1959. conn->port);
  1960. tor_log(severity,LD_GENERAL,
  1961. "Conn %d: %d bytes waiting on inbuf (len %d, last read %d secs ago)",
  1962. i,
  1963. (int)connection_get_inbuf_len(conn),
  1964. (int)buf_allocation(conn->inbuf),
  1965. (int)(now - conn->timestamp_lastread));
  1966. tor_log(severity,LD_GENERAL,
  1967. "Conn %d: %d bytes waiting on outbuf "
  1968. "(len %d, last written %d secs ago)",i,
  1969. (int)connection_get_outbuf_len(conn),
  1970. (int)buf_allocation(conn->outbuf),
  1971. (int)(now - conn->timestamp_lastwritten));
  1972. if (conn->type == CONN_TYPE_OR) {
  1973. or_connection_t *or_conn = TO_OR_CONN(conn);
  1974. if (or_conn->tls) {
  1975. tor_tls_get_buffer_sizes(or_conn->tls, &rbuf_cap, &rbuf_len,
  1976. &wbuf_cap, &wbuf_len);
  1977. tor_log(severity, LD_GENERAL,
  1978. "Conn %d: %d/%d bytes used on OpenSSL read buffer; "
  1979. "%d/%d bytes used on write buffer.",
  1980. i, (int)rbuf_len, (int)rbuf_cap, (int)wbuf_len, (int)wbuf_cap);
  1981. }
  1982. }
  1983. }
  1984. circuit_dump_by_conn(conn, severity); /* dump info about all the circuits
  1985. * using this conn */
  1986. } SMARTLIST_FOREACH_END(conn);
  1987. channel_dumpstats(severity);
  1988. channel_listener_dumpstats(severity);
  1989. tor_log(severity, LD_NET,
  1990. "Cells processed: "U64_FORMAT" padding\n"
  1991. " "U64_FORMAT" create\n"
  1992. " "U64_FORMAT" created\n"
  1993. " "U64_FORMAT" relay\n"
  1994. " ("U64_FORMAT" relayed)\n"
  1995. " ("U64_FORMAT" delivered)\n"
  1996. " "U64_FORMAT" destroy",
  1997. U64_PRINTF_ARG(stats_n_padding_cells_processed),
  1998. U64_PRINTF_ARG(stats_n_create_cells_processed),
  1999. U64_PRINTF_ARG(stats_n_created_cells_processed),
  2000. U64_PRINTF_ARG(stats_n_relay_cells_processed),
  2001. U64_PRINTF_ARG(stats_n_relay_cells_relayed),
  2002. U64_PRINTF_ARG(stats_n_relay_cells_delivered),
  2003. U64_PRINTF_ARG(stats_n_destroy_cells_processed));
  2004. if (stats_n_data_cells_packaged)
  2005. tor_log(severity,LD_NET,"Average packaged cell fullness: %2.3f%%",
  2006. 100*(U64_TO_DBL(stats_n_data_bytes_packaged) /
  2007. U64_TO_DBL(stats_n_data_cells_packaged*RELAY_PAYLOAD_SIZE)) );
  2008. if (stats_n_data_cells_received)
  2009. tor_log(severity,LD_NET,"Average delivered cell fullness: %2.3f%%",
  2010. 100*(U64_TO_DBL(stats_n_data_bytes_received) /
  2011. U64_TO_DBL(stats_n_data_cells_received*RELAY_PAYLOAD_SIZE)) );
  2012. cpuworker_log_onionskin_overhead(severity, ONION_HANDSHAKE_TYPE_TAP, "TAP");
  2013. cpuworker_log_onionskin_overhead(severity, ONION_HANDSHAKE_TYPE_NTOR,"ntor");
  2014. if (now - time_of_process_start >= 0)
  2015. elapsed = now - time_of_process_start;
  2016. else
  2017. elapsed = 0;
  2018. if (elapsed) {
  2019. tor_log(severity, LD_NET,
  2020. "Average bandwidth: "U64_FORMAT"/%d = %d bytes/sec reading",
  2021. U64_PRINTF_ARG(stats_n_bytes_read),
  2022. (int)elapsed,
  2023. (int) (stats_n_bytes_read/elapsed));
  2024. tor_log(severity, LD_NET,
  2025. "Average bandwidth: "U64_FORMAT"/%d = %d bytes/sec writing",
  2026. U64_PRINTF_ARG(stats_n_bytes_written),
  2027. (int)elapsed,
  2028. (int) (stats_n_bytes_written/elapsed));
  2029. }
  2030. tor_log(severity, LD_NET, "--------------- Dumping memory information:");
  2031. dumpmemusage(severity);
  2032. rep_hist_dump_stats(now,severity);
  2033. rend_service_dump_stats(severity);
  2034. dump_pk_ops(severity);
  2035. dump_distinct_digest_count(severity);
  2036. }
  2037. /** Called by exit() as we shut down the process.
  2038. */
  2039. static void
  2040. exit_function(void)
  2041. {
  2042. /* NOTE: If we ever daemonize, this gets called immediately. That's
  2043. * okay for now, because we only use this on Windows. */
  2044. #ifdef _WIN32
  2045. WSACleanup();
  2046. #endif
  2047. }
  2048. /** Set up the signal handlers for either parent or child. */
  2049. void
  2050. handle_signals(int is_parent)
  2051. {
  2052. #ifndef _WIN32 /* do signal stuff only on Unix */
  2053. int i;
  2054. static const int signals[] = {
  2055. SIGINT, /* do a controlled slow shutdown */
  2056. SIGTERM, /* to terminate now */
  2057. SIGPIPE, /* otherwise SIGPIPE kills us */
  2058. SIGUSR1, /* dump stats */
  2059. SIGUSR2, /* go to loglevel debug */
  2060. SIGHUP, /* to reload config, retry conns, etc */
  2061. #ifdef SIGXFSZ
  2062. SIGXFSZ, /* handle file-too-big resource exhaustion */
  2063. #endif
  2064. SIGCHLD, /* handle dns/cpu workers that exit */
  2065. -1 };
  2066. static struct event *signal_events[16]; /* bigger than it has to be. */
  2067. if (is_parent) {
  2068. for (i = 0; signals[i] >= 0; ++i) {
  2069. signal_events[i] = tor_evsignal_new(
  2070. tor_libevent_get_base(), signals[i], signal_callback,
  2071. (void*)(uintptr_t)signals[i]);
  2072. if (event_add(signal_events[i], NULL))
  2073. log_warn(LD_BUG, "Error from libevent when adding event for signal %d",
  2074. signals[i]);
  2075. }
  2076. } else {
  2077. struct sigaction action;
  2078. action.sa_flags = 0;
  2079. sigemptyset(&action.sa_mask);
  2080. action.sa_handler = SIG_IGN;
  2081. sigaction(SIGINT, &action, NULL);
  2082. sigaction(SIGTERM, &action, NULL);
  2083. sigaction(SIGPIPE, &action, NULL);
  2084. sigaction(SIGUSR1, &action, NULL);
  2085. sigaction(SIGUSR2, &action, NULL);
  2086. sigaction(SIGHUP, &action, NULL);
  2087. #ifdef SIGXFSZ
  2088. sigaction(SIGXFSZ, &action, NULL);
  2089. #endif
  2090. }
  2091. #else /* MS windows */
  2092. (void)is_parent;
  2093. #endif /* signal stuff */
  2094. }
  2095. /** Main entry point for the Tor command-line client.
  2096. */
  2097. int
  2098. tor_init(int argc, char *argv[])
  2099. {
  2100. char progname[256];
  2101. int quiet = 0;
  2102. time_of_process_start = time(NULL);
  2103. init_connection_lists();
  2104. /* Have the log set up with our application name. */
  2105. tor_snprintf(progname, sizeof(progname), "Tor %s", get_version());
  2106. log_set_application_name(progname);
  2107. /* Set up the crypto nice and early */
  2108. if (crypto_early_init() < 0) {
  2109. log_err(LD_GENERAL, "Unable to initialize the crypto subsystem!");
  2110. return 1;
  2111. }
  2112. /* Initialize the history structures. */
  2113. rep_hist_init();
  2114. /* Initialize the service cache. */
  2115. rend_cache_init();
  2116. addressmap_init(); /* Init the client dns cache. Do it always, since it's
  2117. * cheap. */
  2118. {
  2119. /* We search for the "quiet" option first, since it decides whether we
  2120. * will log anything at all to the command line. */
  2121. config_line_t *opts = NULL, *cmdline_opts = NULL;
  2122. const config_line_t *cl;
  2123. (void) config_parse_commandline(argc, argv, 1, &opts, &cmdline_opts);
  2124. for (cl = cmdline_opts; cl; cl = cl->next) {
  2125. if (!strcmp(cl->key, "--hush"))
  2126. quiet = 1;
  2127. if (!strcmp(cl->key, "--quiet") ||
  2128. !strcmp(cl->key, "--dump-config"))
  2129. quiet = 2;
  2130. /* --version, --digests, and --help imply --hush */
  2131. if (!strcmp(cl->key, "--version") || !strcmp(cl->key, "--digests") ||
  2132. !strcmp(cl->key, "--list-torrc-options") ||
  2133. !strcmp(cl->key, "--library-versions") ||
  2134. !strcmp(cl->key, "-h") || !strcmp(cl->key, "--help")) {
  2135. if (quiet < 1)
  2136. quiet = 1;
  2137. }
  2138. }
  2139. config_free_lines(opts);
  2140. config_free_lines(cmdline_opts);
  2141. }
  2142. /* give it somewhere to log to initially */
  2143. switch (quiet) {
  2144. case 2:
  2145. /* no initial logging */
  2146. break;
  2147. case 1:
  2148. add_temp_log(LOG_WARN);
  2149. break;
  2150. default:
  2151. add_temp_log(LOG_NOTICE);
  2152. }
  2153. quiet_level = quiet;
  2154. {
  2155. const char *version = get_version();
  2156. const char *bev_str =
  2157. #ifdef USE_BUFFEREVENTS
  2158. "(with bufferevents) ";
  2159. #else
  2160. "";
  2161. #endif
  2162. log_notice(LD_GENERAL, "Tor v%s %srunning on %s with Libevent %s, "
  2163. "OpenSSL %s and Zlib %s.", version, bev_str,
  2164. get_uname(),
  2165. tor_libevent_get_version_str(),
  2166. crypto_openssl_get_version_str(),
  2167. tor_zlib_get_version_str());
  2168. log_notice(LD_GENERAL, "Tor can't help you if you use it wrong! "
  2169. "Learn how to be safe at "
  2170. "https://www.torproject.org/download/download#warning");
  2171. if (strstr(version, "alpha") || strstr(version, "beta"))
  2172. log_notice(LD_GENERAL, "This version is not a stable Tor release. "
  2173. "Expect more bugs than usual.");
  2174. }
  2175. #ifdef NON_ANONYMOUS_MODE_ENABLED
  2176. log_warn(LD_GENERAL, "This copy of Tor was compiled to run in a "
  2177. "non-anonymous mode. It will provide NO ANONYMITY.");
  2178. #endif
  2179. if (network_init()<0) {
  2180. log_err(LD_BUG,"Error initializing network; exiting.");
  2181. return -1;
  2182. }
  2183. atexit(exit_function);
  2184. if (options_init_from_torrc(argc,argv) < 0) {
  2185. log_err(LD_CONFIG,"Reading config failed--see warnings above.");
  2186. return -1;
  2187. }
  2188. #ifndef _WIN32
  2189. if (geteuid()==0)
  2190. log_warn(LD_GENERAL,"You are running Tor as root. You don't need to, "
  2191. "and you probably shouldn't.");
  2192. #endif
  2193. if (crypto_global_init(get_options()->HardwareAccel,
  2194. get_options()->AccelName,
  2195. get_options()->AccelDir)) {
  2196. log_err(LD_BUG, "Unable to initialize OpenSSL. Exiting.");
  2197. return -1;
  2198. }
  2199. stream_choice_seed_weak_rng();
  2200. if (tor_init_libevent_rng() < 0) {
  2201. log_warn(LD_NET, "Problem initializing libevent RNG.");
  2202. }
  2203. return 0;
  2204. }
  2205. /** A lockfile structure, used to prevent two Tors from messing with the
  2206. * data directory at once. If this variable is non-NULL, we're holding
  2207. * the lockfile. */
  2208. static tor_lockfile_t *lockfile = NULL;
  2209. /** Try to grab the lock file described in <b>options</b>, if we do not
  2210. * already have it. If <b>err_if_locked</b> is true, warn if somebody else is
  2211. * holding the lock, and exit if we can't get it after waiting. Otherwise,
  2212. * return -1 if we can't get the lockfile. Return 0 on success.
  2213. */
  2214. int
  2215. try_locking(const or_options_t *options, int err_if_locked)
  2216. {
  2217. if (lockfile)
  2218. return 0;
  2219. else {
  2220. char *fname = options_get_datadir_fname2_suffix(options, "lock",NULL,NULL);
  2221. int already_locked = 0;
  2222. tor_lockfile_t *lf = tor_lockfile_lock(fname, 0, &already_locked);
  2223. tor_free(fname);
  2224. if (!lf) {
  2225. if (err_if_locked && already_locked) {
  2226. int r;
  2227. log_warn(LD_GENERAL, "It looks like another Tor process is running "
  2228. "with the same data directory. Waiting 5 seconds to see "
  2229. "if it goes away.");
  2230. #ifndef _WIN32
  2231. sleep(5);
  2232. #else
  2233. Sleep(5000);
  2234. #endif
  2235. r = try_locking(options, 0);
  2236. if (r<0) {
  2237. log_err(LD_GENERAL, "No, it's still there. Exiting.");
  2238. exit(0);
  2239. }
  2240. return r;
  2241. }
  2242. return -1;
  2243. }
  2244. lockfile = lf;
  2245. return 0;
  2246. }
  2247. }
  2248. /** Return true iff we've successfully acquired the lock file. */
  2249. int
  2250. have_lockfile(void)
  2251. {
  2252. return lockfile != NULL;
  2253. }
  2254. /** If we have successfully acquired the lock file, release it. */
  2255. void
  2256. release_lockfile(void)
  2257. {
  2258. if (lockfile) {
  2259. tor_lockfile_unlock(lockfile);
  2260. lockfile = NULL;
  2261. }
  2262. }
  2263. /** Free all memory that we might have allocated somewhere.
  2264. * If <b>postfork</b>, we are a worker process and we want to free
  2265. * only the parts of memory that we won't touch. If !<b>postfork</b>,
  2266. * Tor is shutting down and we should free everything.
  2267. *
  2268. * Helps us find the real leaks with dmalloc and the like. Also valgrind
  2269. * should then report 0 reachable in its leak report (in an ideal world --
  2270. * in practice libevent, SSL, libc etc never quite free everything). */
  2271. void
  2272. tor_free_all(int postfork)
  2273. {
  2274. if (!postfork) {
  2275. evdns_shutdown(1);
  2276. }
  2277. geoip_free_all();
  2278. dirvote_free_all();
  2279. routerlist_free_all();
  2280. networkstatus_free_all();
  2281. addressmap_free_all();
  2282. dirserv_free_all();
  2283. rend_service_free_all();
  2284. rend_cache_free_all();
  2285. rend_service_authorization_free_all();
  2286. rep_hist_free_all();
  2287. dns_free_all();
  2288. clear_pending_onions();
  2289. circuit_free_all();
  2290. entry_guards_free_all();
  2291. pt_free_all();
  2292. channel_tls_free_all();
  2293. channel_free_all();
  2294. connection_free_all();
  2295. scheduler_free_all();
  2296. buf_shrink_freelists(1);
  2297. memarea_clear_freelist();
  2298. nodelist_free_all();
  2299. microdesc_free_all();
  2300. ext_orport_free_all();
  2301. control_free_all();
  2302. sandbox_free_getaddrinfo_cache();
  2303. if (!postfork) {
  2304. config_free_all();
  2305. or_state_free_all();
  2306. router_free_all();
  2307. policies_free_all();
  2308. }
  2309. #ifdef ENABLE_MEMPOOLS
  2310. free_cell_pool();
  2311. #endif /* ENABLE_MEMPOOLS */
  2312. if (!postfork) {
  2313. tor_tls_free_all();
  2314. #ifndef _WIN32
  2315. tor_getpwnam(NULL);
  2316. #endif
  2317. }
  2318. /* stuff in main.c */
  2319. smartlist_free(connection_array);
  2320. smartlist_free(closeable_connection_lst);
  2321. smartlist_free(active_linked_connection_lst);
  2322. periodic_timer_free(second_timer);
  2323. #ifndef USE_BUFFEREVENTS
  2324. periodic_timer_free(refill_timer);
  2325. #endif
  2326. if (!postfork) {
  2327. release_lockfile();
  2328. }
  2329. /* Stuff in util.c and address.c*/
  2330. if (!postfork) {
  2331. escaped(NULL);
  2332. esc_router_info(NULL);
  2333. logs_free_all(); /* free log strings. do this last so logs keep working. */
  2334. }
  2335. }
  2336. /** Do whatever cleanup is necessary before shutting Tor down. */
  2337. void
  2338. tor_cleanup(void)
  2339. {
  2340. const or_options_t *options = get_options();
  2341. if (options->command == CMD_RUN_TOR) {
  2342. time_t now = time(NULL);
  2343. /* Remove our pid file. We don't care if there was an error when we
  2344. * unlink, nothing we could do about it anyways. */
  2345. if (options->PidFile) {
  2346. if (unlink(options->PidFile) != 0) {
  2347. log_warn(LD_FS, "Couldn't unlink pid file %s: %s",
  2348. options->PidFile, strerror(errno));
  2349. }
  2350. }
  2351. if (options->ControlPortWriteToFile) {
  2352. if (unlink(options->ControlPortWriteToFile) != 0) {
  2353. log_warn(LD_FS, "Couldn't unlink control port file %s: %s",
  2354. options->ControlPortWriteToFile,
  2355. strerror(errno));
  2356. }
  2357. }
  2358. if (accounting_is_enabled(options))
  2359. accounting_record_bandwidth_usage(now, get_or_state());
  2360. or_state_mark_dirty(get_or_state(), 0); /* force an immediate save. */
  2361. or_state_save(now);
  2362. if (authdir_mode_tests_reachability(options))
  2363. rep_hist_record_mtbf_data(now, 0);
  2364. }
  2365. #ifdef USE_DMALLOC
  2366. dmalloc_log_stats();
  2367. #endif
  2368. tor_free_all(0); /* We could move tor_free_all back into the ifdef below
  2369. later, if it makes shutdown unacceptably slow. But for
  2370. now, leave it here: it's helped us catch bugs in the
  2371. past. */
  2372. crypto_global_cleanup();
  2373. #ifdef USE_DMALLOC
  2374. dmalloc_log_unfreed();
  2375. dmalloc_shutdown();
  2376. #endif
  2377. }
  2378. /** Read/create keys as needed, and echo our fingerprint to stdout. */
  2379. static int
  2380. do_list_fingerprint(void)
  2381. {
  2382. char buf[FINGERPRINT_LEN+1];
  2383. crypto_pk_t *k;
  2384. const char *nickname = get_options()->Nickname;
  2385. if (!server_mode(get_options())) {
  2386. log_err(LD_GENERAL,
  2387. "Clients don't have long-term identity keys. Exiting.");
  2388. return -1;
  2389. }
  2390. tor_assert(nickname);
  2391. if (init_keys() < 0) {
  2392. log_err(LD_BUG,"Error initializing keys; can't display fingerprint");
  2393. return -1;
  2394. }
  2395. if (!(k = get_server_identity_key())) {
  2396. log_err(LD_GENERAL,"Error: missing identity key.");
  2397. return -1;
  2398. }
  2399. if (crypto_pk_get_fingerprint(k, buf, 1)<0) {
  2400. log_err(LD_BUG, "Error computing fingerprint");
  2401. return -1;
  2402. }
  2403. printf("%s %s\n", nickname, buf);
  2404. return 0;
  2405. }
  2406. /** Entry point for password hashing: take the desired password from
  2407. * the command line, and print its salted hash to stdout. **/
  2408. static void
  2409. do_hash_password(void)
  2410. {
  2411. char output[256];
  2412. char key[S2K_SPECIFIER_LEN+DIGEST_LEN];
  2413. crypto_rand(key, S2K_SPECIFIER_LEN-1);
  2414. key[S2K_SPECIFIER_LEN-1] = (uint8_t)96; /* Hash 64 K of data. */
  2415. secret_to_key(key+S2K_SPECIFIER_LEN, DIGEST_LEN,
  2416. get_options()->command_arg, strlen(get_options()->command_arg),
  2417. key);
  2418. base16_encode(output, sizeof(output), key, sizeof(key));
  2419. printf("16:%s\n",output);
  2420. }
  2421. /** Entry point for configuration dumping: write the configuration to
  2422. * stdout. */
  2423. static int
  2424. do_dump_config(void)
  2425. {
  2426. const or_options_t *options = get_options();
  2427. const char *arg = options->command_arg;
  2428. int how;
  2429. char *opts;
  2430. if (!strcmp(arg, "short")) {
  2431. how = OPTIONS_DUMP_MINIMAL;
  2432. } else if (!strcmp(arg, "non-builtin")) {
  2433. how = OPTIONS_DUMP_DEFAULTS;
  2434. } else if (!strcmp(arg, "full")) {
  2435. how = OPTIONS_DUMP_ALL;
  2436. } else {
  2437. printf("%s is not a recognized argument to --dump-config. "
  2438. "Please select 'short', 'non-builtin', or 'full'", arg);
  2439. return -1;
  2440. }
  2441. opts = options_dump(options, how);
  2442. printf("%s", opts);
  2443. tor_free(opts);
  2444. return 0;
  2445. }
  2446. static void
  2447. init_addrinfo(void)
  2448. {
  2449. char hname[256];
  2450. // host name to sandbox
  2451. gethostname(hname, sizeof(hname));
  2452. sandbox_add_addrinfo(hname);
  2453. }
  2454. static sandbox_cfg_t*
  2455. sandbox_init_filter(void)
  2456. {
  2457. const or_options_t *options = get_options();
  2458. sandbox_cfg_t *cfg = sandbox_cfg_new();
  2459. int i;
  2460. sandbox_cfg_allow_openat_filename(&cfg,
  2461. get_datadir_fname("cached-status"));
  2462. #define OPEN(name) \
  2463. sandbox_cfg_allow_open_filename(&cfg, tor_strdup(name))
  2464. #define OPEN_DATADIR(name) \
  2465. sandbox_cfg_allow_open_filename(&cfg, get_datadir_fname(name))
  2466. #define OPEN_DATADIR2(name, name2) \
  2467. sandbox_cfg_allow_open_filename(&cfg, get_datadir_fname2((name), (name2)))
  2468. #define OPEN_DATADIR_SUFFIX(name, suffix) do { \
  2469. OPEN_DATADIR(name); \
  2470. OPEN_DATADIR(name suffix); \
  2471. } while (0)
  2472. #define OPEN_DATADIR2_SUFFIX(name, name2, suffix) do { \
  2473. OPEN_DATADIR2(name, name2); \
  2474. OPEN_DATADIR2(name, name2 suffix); \
  2475. } while (0)
  2476. OPEN_DATADIR_SUFFIX("cached-certs", ".tmp");
  2477. OPEN_DATADIR_SUFFIX("cached-consensus", ".tmp");
  2478. OPEN_DATADIR_SUFFIX("unverified-consensus", ".tmp");
  2479. OPEN_DATADIR_SUFFIX("unverified-microdesc-consensus", ".tmp");
  2480. OPEN_DATADIR_SUFFIX("cached-microdesc-consensus", ".tmp");
  2481. OPEN_DATADIR_SUFFIX("cached-microdescs", ".tmp");
  2482. OPEN_DATADIR_SUFFIX("cached-microdescs.new", ".tmp");
  2483. OPEN_DATADIR_SUFFIX("cached-descriptors", ".tmp");
  2484. OPEN_DATADIR_SUFFIX("cached-descriptors.new", ".tmp");
  2485. OPEN_DATADIR("cached-descriptors.tmp.tmp");
  2486. OPEN_DATADIR_SUFFIX("cached-extrainfo", ".tmp");
  2487. OPEN_DATADIR_SUFFIX("cached-extrainfo.new", ".tmp");
  2488. OPEN_DATADIR("cached-extrainfo.tmp.tmp");
  2489. OPEN_DATADIR_SUFFIX("state", ".tmp");
  2490. OPEN_DATADIR_SUFFIX("unparseable-desc", ".tmp");
  2491. OPEN_DATADIR_SUFFIX("v3-status-votes", ".tmp");
  2492. OPEN("/dev/srandom");
  2493. OPEN("/dev/urandom");
  2494. OPEN("/dev/random");
  2495. OPEN("/etc/hosts");
  2496. OPEN("/proc/meminfo");
  2497. if (options->ServerDNSResolvConfFile)
  2498. sandbox_cfg_allow_open_filename(&cfg,
  2499. tor_strdup(options->ServerDNSResolvConfFile));
  2500. else
  2501. sandbox_cfg_allow_open_filename(&cfg, tor_strdup("/etc/resolv.conf"));
  2502. for (i = 0; i < 2; ++i) {
  2503. if (get_torrc_fname(i)) {
  2504. sandbox_cfg_allow_open_filename(&cfg, tor_strdup(get_torrc_fname(i)));
  2505. }
  2506. }
  2507. #define RENAME_SUFFIX(name, suffix) \
  2508. sandbox_cfg_allow_rename(&cfg, \
  2509. get_datadir_fname(name suffix), \
  2510. get_datadir_fname(name))
  2511. #define RENAME_SUFFIX2(prefix, name, suffix) \
  2512. sandbox_cfg_allow_rename(&cfg, \
  2513. get_datadir_fname2(prefix, name suffix), \
  2514. get_datadir_fname2(prefix, name))
  2515. RENAME_SUFFIX("cached-certs", ".tmp");
  2516. RENAME_SUFFIX("cached-consensus", ".tmp");
  2517. RENAME_SUFFIX("unverified-consensus", ".tmp");
  2518. RENAME_SUFFIX("unverified-microdesc-consensus", ".tmp");
  2519. RENAME_SUFFIX("cached-microdesc-consensus", ".tmp");
  2520. RENAME_SUFFIX("cached-microdescs", ".tmp");
  2521. RENAME_SUFFIX("cached-microdescs", ".new");
  2522. RENAME_SUFFIX("cached-microdescs.new", ".tmp");
  2523. RENAME_SUFFIX("cached-descriptors", ".tmp");
  2524. RENAME_SUFFIX("cached-descriptors", ".new");
  2525. RENAME_SUFFIX("cached-descriptors.new", ".tmp");
  2526. RENAME_SUFFIX("cached-extrainfo", ".tmp");
  2527. RENAME_SUFFIX("cached-extrainfo", ".new");
  2528. RENAME_SUFFIX("cached-extrainfo.new", ".tmp");
  2529. RENAME_SUFFIX("state", ".tmp");
  2530. RENAME_SUFFIX("unparseable-desc", ".tmp");
  2531. RENAME_SUFFIX("v3-status-votes", ".tmp");
  2532. #define STAT_DATADIR(name) \
  2533. sandbox_cfg_allow_stat_filename(&cfg, get_datadir_fname(name))
  2534. #define STAT_DATADIR2(name, name2) \
  2535. sandbox_cfg_allow_stat_filename(&cfg, get_datadir_fname2((name), (name2)))
  2536. STAT_DATADIR(NULL);
  2537. STAT_DATADIR("lock");
  2538. STAT_DATADIR("state");
  2539. STAT_DATADIR("router-stability");
  2540. STAT_DATADIR("cached-extrainfo.new");
  2541. {
  2542. smartlist_t *files = smartlist_new();
  2543. tor_log_get_logfile_names(files);
  2544. SMARTLIST_FOREACH(files, char *, file_name, {
  2545. /* steals reference */
  2546. sandbox_cfg_allow_open_filename(&cfg, file_name);
  2547. });
  2548. smartlist_free(files);
  2549. }
  2550. {
  2551. smartlist_t *files = smartlist_new();
  2552. smartlist_t *dirs = smartlist_new();
  2553. rend_services_add_filenames_to_lists(files, dirs);
  2554. SMARTLIST_FOREACH(files, char *, file_name, {
  2555. char *tmp_name = NULL;
  2556. tor_asprintf(&tmp_name, "%s.tmp", file_name);
  2557. sandbox_cfg_allow_rename(&cfg,
  2558. tor_strdup(tmp_name), tor_strdup(file_name));
  2559. /* steals references */
  2560. sandbox_cfg_allow_open_filename(&cfg, file_name);
  2561. sandbox_cfg_allow_open_filename(&cfg, tmp_name);
  2562. });
  2563. SMARTLIST_FOREACH(dirs, char *, dir, {
  2564. /* steals reference */
  2565. sandbox_cfg_allow_stat_filename(&cfg, dir);
  2566. });
  2567. smartlist_free(files);
  2568. smartlist_free(dirs);
  2569. }
  2570. {
  2571. char *fname;
  2572. if ((fname = get_controller_cookie_file_name())) {
  2573. sandbox_cfg_allow_open_filename(&cfg, fname);
  2574. }
  2575. if ((fname = get_ext_or_auth_cookie_file_name())) {
  2576. sandbox_cfg_allow_open_filename(&cfg, fname);
  2577. }
  2578. }
  2579. if (options->DirPortFrontPage) {
  2580. sandbox_cfg_allow_open_filename(&cfg,
  2581. tor_strdup(options->DirPortFrontPage));
  2582. }
  2583. // orport
  2584. if (server_mode(get_options())) {
  2585. OPEN_DATADIR2_SUFFIX("keys", "secret_id_key", "tmp");
  2586. OPEN_DATADIR2_SUFFIX("keys", "secret_onion_key", ".tmp");
  2587. OPEN_DATADIR2_SUFFIX("keys", "secret_onion_key_ntor", ".tmp");
  2588. OPEN_DATADIR2("keys", "secret_id_key.old");
  2589. OPEN_DATADIR2("keys", "secret_onion_key.old");
  2590. OPEN_DATADIR2("keys", "secret_onion_key_ntor.old");
  2591. OPEN_DATADIR2_SUFFIX("stats", "bridge-stats", ".tmp");
  2592. OPEN_DATADIR2_SUFFIX("stats", "dirreq-stats", ".tmp");
  2593. OPEN_DATADIR2_SUFFIX("stats", "entry-stats", ".tmp");
  2594. OPEN_DATADIR2_SUFFIX("stats", "exit-stats", ".tmp");
  2595. OPEN_DATADIR2_SUFFIX("stats", "buffer-stats", ".tmp");
  2596. OPEN_DATADIR2_SUFFIX("stats", "conn-stats", ".tmp");
  2597. OPEN_DATADIR("approved-routers");
  2598. OPEN_DATADIR_SUFFIX("fingerprint", ".tmp");
  2599. OPEN_DATADIR_SUFFIX("hashed-fingerprint", ".tmp");
  2600. OPEN_DATADIR_SUFFIX("router-stability", ".tmp");
  2601. OPEN("/etc/resolv.conf");
  2602. RENAME_SUFFIX("fingerprint", ".tmp");
  2603. RENAME_SUFFIX2("keys", "secret_onion_key_ntor", ".tmp");
  2604. RENAME_SUFFIX2("keys", "secret_id_key", ".tmp");
  2605. RENAME_SUFFIX2("keys", "secret_id_key.old", ".tmp");
  2606. RENAME_SUFFIX2("keys", "secret_onion_key", ".tmp");
  2607. RENAME_SUFFIX2("keys", "secret_onion_key.old", ".tmp");
  2608. RENAME_SUFFIX2("stats", "bridge-stats", ".tmp");
  2609. RENAME_SUFFIX2("stats", "dirreq-stats", ".tmp");
  2610. RENAME_SUFFIX2("stats", "entry-stats", ".tmp");
  2611. RENAME_SUFFIX2("stats", "exit-stats", ".tmp");
  2612. RENAME_SUFFIX2("stats", "buffer-stats", ".tmp");
  2613. RENAME_SUFFIX2("stats", "conn-stats", ".tmp");
  2614. RENAME_SUFFIX("hashed-fingerprint", ".tmp");
  2615. RENAME_SUFFIX("router-stability", ".tmp");
  2616. sandbox_cfg_allow_rename(&cfg,
  2617. get_datadir_fname2("keys", "secret_onion_key"),
  2618. get_datadir_fname2("keys", "secret_onion_key.old"));
  2619. sandbox_cfg_allow_rename(&cfg,
  2620. get_datadir_fname2("keys", "secret_onion_key_ntor"),
  2621. get_datadir_fname2("keys", "secret_onion_key_ntor.old"));
  2622. STAT_DATADIR("keys");
  2623. STAT_DATADIR("stats");
  2624. STAT_DATADIR2("stats", "dirreq-stats");
  2625. }
  2626. init_addrinfo();
  2627. return cfg;
  2628. }
  2629. /** Main entry point for the Tor process. Called from main(). */
  2630. /* This function is distinct from main() only so we can link main.c into
  2631. * the unittest binary without conflicting with the unittests' main. */
  2632. int
  2633. tor_main(int argc, char *argv[])
  2634. {
  2635. int result = 0;
  2636. #ifdef _WIN32
  2637. /* Call SetProcessDEPPolicy to permanently enable DEP.
  2638. The function will not resolve on earlier versions of Windows,
  2639. and failure is not dangerous. */
  2640. HMODULE hMod = GetModuleHandleA("Kernel32.dll");
  2641. if (hMod) {
  2642. typedef BOOL (WINAPI *PSETDEP)(DWORD);
  2643. PSETDEP setdeppolicy = (PSETDEP)GetProcAddress(hMod,
  2644. "SetProcessDEPPolicy");
  2645. if (setdeppolicy) setdeppolicy(1); /* PROCESS_DEP_ENABLE */
  2646. }
  2647. #endif
  2648. configure_backtrace_handler(get_version());
  2649. update_approx_time(time(NULL));
  2650. tor_threads_init();
  2651. init_logging();
  2652. #ifdef USE_DMALLOC
  2653. {
  2654. /* Instruct OpenSSL to use our internal wrappers for malloc,
  2655. realloc and free. */
  2656. int r = CRYPTO_set_mem_ex_functions(tor_malloc_, tor_realloc_, tor_free_);
  2657. tor_assert(r);
  2658. }
  2659. #endif
  2660. #ifdef NT_SERVICE
  2661. {
  2662. int done = 0;
  2663. result = nt_service_parse_options(argc, argv, &done);
  2664. if (done) return result;
  2665. }
  2666. #endif
  2667. if (tor_init(argc, argv)<0)
  2668. return -1;
  2669. if (get_options()->Sandbox && get_options()->command == CMD_RUN_TOR) {
  2670. sandbox_cfg_t* cfg = sandbox_init_filter();
  2671. if (sandbox_init(cfg)) {
  2672. log_err(LD_BUG,"Failed to create syscall sandbox filter");
  2673. return -1;
  2674. }
  2675. // registering libevent rng
  2676. #ifdef HAVE_EVUTIL_SECURE_RNG_SET_URANDOM_DEVICE_FILE
  2677. evutil_secure_rng_set_urandom_device_file(
  2678. (char*) sandbox_intern_string("/dev/urandom"));
  2679. #endif
  2680. }
  2681. switch (get_options()->command) {
  2682. case CMD_RUN_TOR:
  2683. #ifdef NT_SERVICE
  2684. nt_service_set_state(SERVICE_RUNNING);
  2685. #endif
  2686. result = do_main_loop();
  2687. break;
  2688. case CMD_LIST_FINGERPRINT:
  2689. result = do_list_fingerprint();
  2690. break;
  2691. case CMD_HASH_PASSWORD:
  2692. do_hash_password();
  2693. result = 0;
  2694. break;
  2695. case CMD_VERIFY_CONFIG:
  2696. printf("Configuration was valid\n");
  2697. result = 0;
  2698. break;
  2699. case CMD_DUMP_CONFIG:
  2700. result = do_dump_config();
  2701. break;
  2702. case CMD_RUN_UNITTESTS: /* only set by test.c */
  2703. default:
  2704. log_warn(LD_BUG,"Illegal command number %d: internal error.",
  2705. get_options()->command);
  2706. result = -1;
  2707. }
  2708. tor_cleanup();
  2709. return result;
  2710. }