18 #include "trunnel/socks5.h"
25 #ifdef HAVE_NETINET_IN_H
26 #include <netinet/in.h>
28 #ifdef HAVE_ARPA_INET_H
29 #include <arpa/inet.h>
31 #ifdef HAVE_SYS_SOCKET_H
32 #include <sys/socket.h>
34 #ifdef HAVE_SYS_TYPES_H
35 #include <sys/types.h>
46 #define RESPONSE_LEN_4 8
47 #define log_sock_error(act, _s) \
49 log_fn(LOG_ERR, LD_NET, "Error while %s: %s", act, \
50 tor_socket_strerror(tor_socket_errno(_s))); \
53 static void usage(
void) ATTR_NORETURN;
61 build_socks4a_resolve_request(uint8_t **out,
69 const char *errmsg = NULL;
70 uint8_t *output = NULL;
71 socks4_client_request_t *rq = socks4_client_request_new();
73 socks4_client_request_set_version(rq, 4);
74 socks4_client_request_set_command(rq, CMD_RESOLVE);
75 socks4_client_request_set_port(rq, 0);
76 socks4_client_request_set_addr(rq, 0x00000001u);
77 socks4_client_request_set_username(rq, username);
78 socks4_client_request_set_socks4a_addr_hostname(rq, hostname);
80 errmsg = socks4_client_request_check(rq);
85 ssize_t encoded_len = socks4_client_request_encoded_len(rq);
86 if (encoded_len <= 0) {
87 errmsg =
"socks4_client_request_encoded_len failed";
91 output = tor_malloc(encoded_len);
92 memset(output, 0, encoded_len);
94 encoded_len = socks4_client_request_encode(output, encoded_len, rq);
95 if (encoded_len <= 0) {
96 errmsg =
"socks4_client_request_encode failed";
103 socks4_client_request_free(rq);
105 log_err(
LD_NET,
"build_socks4a_resolve_request failed: %s", errmsg);
109 return errmsg ? -1 : encoded_len;
112 #define SOCKS5_ATYPE_HOSTNAME 0x03
113 #define SOCKS5_ATYPE_IPV4 0x01
114 #define SOCKS5_ATYPE_IPV6 0x04
123 build_socks5_resolve_request(uint8_t **out,
124 const char *hostname,
127 const char *errmsg = NULL;
128 uint8_t *outbuf = NULL;
134 if (!is_ip_address && reverse) {
135 log_err(
LD_GENERAL,
"Tried to do a reverse lookup on a non-IP!");
139 addrlen = reverse ? (ipv6 ? 16 : 4) : 1 + strlen(hostname);
140 if (addrlen > UINT8_MAX) {
145 socks5_client_request_t *rq = socks5_client_request_new();
147 socks5_client_request_set_version(rq, 5);
149 socks5_client_request_set_command(rq, reverse ? CMD_RESOLVE_PTR :
151 socks5_client_request_set_reserved(rq, 0);
153 uint8_t atype = SOCKS5_ATYPE_HOSTNAME;
155 atype = ipv6 ? SOCKS5_ATYPE_IPV6 : SOCKS5_ATYPE_IPV4;
157 socks5_client_request_set_atype(rq, atype);
160 case SOCKS5_ATYPE_IPV4: {
161 socks5_client_request_set_dest_addr_ipv4(rq,
164 case SOCKS5_ATYPE_IPV6: {
165 uint8_t *ipv6_array =
166 socks5_client_request_getarray_dest_addr_ipv6(rq);
173 case SOCKS5_ATYPE_HOSTNAME: {
174 domainname_t *dn = domainname_new();
175 domainname_set_len(dn, addrlen - 1);
176 domainname_setlen_name(dn, addrlen - 1);
177 char *dn_buf = domainname_getarray_name(dn);
178 memcpy(dn_buf, hostname, addrlen - 1);
180 errmsg = domainname_check(dn);
186 socks5_client_request_set_dest_addr_domainname(rq, dn);
190 tor_assert_unreached();
194 socks5_client_request_set_dest_port(rq, 0);
196 errmsg = socks5_client_request_check(rq);
201 ssize_t encoded_len = socks5_client_request_encoded_len(rq);
202 if (encoded_len < 0) {
203 errmsg =
"Cannot predict encoded length";
207 outbuf = tor_malloc(encoded_len);
208 memset(outbuf, 0, encoded_len);
210 encoded_len = socks5_client_request_encode(outbuf, encoded_len, rq);
211 if (encoded_len < 0) {
212 errmsg =
"encoding failed";
219 socks5_client_request_free(rq);
222 log_err(
LD_NET,
"build_socks5_resolve_request failed with error: %s",
226 return errmsg ? -1 : encoded_len;
233 build_socks_resolve_request(uint8_t **out,
234 const char *username,
235 const char *hostname,
246 return build_socks4a_resolve_request(out, username, hostname);
247 }
else if (version == 5) {
248 return build_socks5_resolve_request(out, hostname, reverse);
251 tor_assert_unreached();
256 onion_warning(
const char *hostname)
259 "%s is a hidden service; those don't have IP addresses. "
260 "You can use the AutomapHostsOnResolve option to have Tor return a "
261 "fake address for hidden services. Or you can have your "
262 "application send the address to Tor directly; we recommend an "
263 "application that uses SOCKS 5 with hostnames.",
272 parse_socks4a_resolve_response(
const char *hostname,
273 const char *response,
size_t len,
281 socks4_server_reply_t *reply;
283 ssize_t parsed = socks4_server_reply_parse(&reply,
284 (
const uint8_t *)response,
288 log_warn(
LD_PROTOCOL,
"Failed parsing SOCKS4a response");
289 result = -1;
goto cleanup;
294 result = -1;
goto cleanup;
297 if (socks4_server_reply_get_version(reply) != 0) {
298 log_warn(
LD_PROTOCOL,
"Nonzero version in socks response: bad format.");
299 result = -1;
goto cleanup;
301 if (socks4_server_reply_get_port(reply) != 0) {
302 log_warn(
LD_PROTOCOL,
"Nonzero port in socks response: bad format.");
303 result = -1;
goto cleanup;
305 status = socks4_server_reply_get_status(reply);
307 log_warn(
LD_NET,
"Got status response '%d': socks request failed.", status);
309 onion_warning(hostname);
310 result = -1;
goto cleanup;
312 result = -1;
goto cleanup;
318 socks4_server_reply_free(reply);
324 socks5_reason_to_string(
char reason)
327 case SOCKS5_SUCCEEDED:
329 case SOCKS5_GENERAL_ERROR:
330 return "general error";
331 case SOCKS5_NOT_ALLOWED:
332 return "not allowed";
333 case SOCKS5_NET_UNREACHABLE:
334 return "network is unreachable";
335 case SOCKS5_HOST_UNREACHABLE:
336 return "host is unreachable";
337 case SOCKS5_CONNECTION_REFUSED:
338 return "connection refused";
339 case SOCKS5_TTL_EXPIRED:
340 return "ttl expired";
341 case SOCKS5_COMMAND_NOT_SUPPORTED:
342 return "command not supported";
343 case SOCKS5_ADDRESS_TYPE_NOT_SUPPORTED:
344 return "address type not supported";
346 return "unknown SOCKS5 code";
355 do_resolve(
const char *hostname,
356 const tor_addr_t *sockshost, uint16_t socksport,
357 int reverse,
int version,
358 tor_addr_t *result_addr,
char **result_hostname)
361 struct sockaddr_storage ss;
371 *result_hostname = NULL;
375 log_sock_error(
"creating_socket", -1);
380 (
struct sockaddr *)&ss,
sizeof(ss));
382 if (connect(s, (
struct sockaddr*)&ss, socklen)) {
383 log_sock_error(
"connecting to SOCKS host", s);
388 socks5_client_version_t *v = socks5_client_version_new();
390 socks5_client_version_set_version(v, 5);
391 socks5_client_version_set_n_methods(v, 1);
392 socks5_client_version_setlen_methods(v, 1);
393 socks5_client_version_set_methods(v, 0, 0x00);
396 ssize_t encoded_len = socks5_client_version_encoded_len(v);
399 uint8_t *buf = tor_malloc(encoded_len);
400 encoded_len = socks5_client_version_encode(buf, encoded_len, v);
403 socks5_client_version_free(v);
406 encoded_len) != encoded_len) {
407 log_err(
LD_NET,
"Error sending SOCKS5 method list.");
415 uint8_t method_buf[2];
418 log_err(
LD_NET,
"Error reading SOCKS5 methods.");
422 socks5_server_method_t *m;
423 ssize_t parsed = socks5_server_method_parse(&m, method_buf,
427 log_err(
LD_NET,
"Failed to parse SOCKS5 method selection "
429 socks5_server_method_free(m);
433 uint8_t method = socks5_server_method_get_method(m);
435 socks5_server_method_free(m);
437 if (method != 0x00) {
438 log_err(
LD_NET,
"Unrecognized socks authentication method: %u",
444 if ((len = build_socks_resolve_request(&req,
"", hostname, reverse,
446 log_err(
LD_BUG,
"Error generating SOCKS request");
451 log_sock_error(
"sending SOCKS request", s);
458 char reply_buf[RESPONSE_LEN_4];
460 log_err(
LD_NET,
"Error reading SOCKS4 response.");
463 if (parse_socks4a_resolve_response(hostname,
464 reply_buf, RESPONSE_LEN_4,
469 uint8_t reply_buf[512];
474 socks5_server_reply_t *reply;
476 ssize_t parsed = socks5_server_reply_parse(&reply,
480 log_err(
LD_NET,
"Failed parsing SOCKS5 response");
485 log_err(
LD_NET,
"Truncated SOCKS5 response");
490 uint8_t reply_field = socks5_server_reply_get_reply(reply);
491 if (reply_field != 0) {
492 log_warn(
LD_NET,
"Got SOCKS5 status response '%u': %s",
493 (
unsigned)reply_field,
494 socks5_reason_to_string(reply_field));
495 if (reply_field == 4 && !
strcasecmpend(hostname,
".onion")) {
496 onion_warning(hostname);
499 socks5_server_reply_free(reply);
503 uint8_t atype = socks5_server_reply_get_atype(reply);
505 if (atype == SOCKS5_ATYPE_IPV4) {
508 socks5_server_reply_get_bind_addr_ipv4(reply));
509 }
else if (atype == SOCKS5_ATYPE_IPV6) {
512 socks5_server_reply_getarray_bind_addr_ipv6(reply));
513 }
else if (atype == SOCKS5_ATYPE_HOSTNAME) {
516 socks5_server_reply_get_bind_addr_domainname(reply);
518 *result_hostname = tor_strdup(domainname_getstr_name(dn));
521 socks5_server_reply_free(reply);
535 puts(
"Syntax: tor-resolve [-4] [-5] [-v] [-x] [-p port] "
536 "hostname [sockshost[:socksport]]");
542 main(
int argc,
char **argv)
545 uint16_t socksport = 0, port_option = 0;
546 int isSocks4 = 0, isVerbose = 0, isReverse = 0;
550 char *result_hostname = NULL;
553 sandbox_disable_getaddrinfo_cache();
561 if (!strcmp(arg[0],
"--version")) {
562 printf(
"Tor version %s.\n",VERSION);
565 while (n_args && *arg[0] ==
'-') {
566 if (!strcmp(
"-v", arg[0]))
568 else if (!strcmp(
"-4", arg[0]))
570 else if (!strcmp(
"-5", arg[0]))
572 else if (!strcmp(
"-x", arg[0]))
574 else if (!strcmp(
"-p", arg[0])) {
577 fprintf(stderr,
"No arguments given to -p\n");
581 if (p<1 || p > 65535) {
582 fprintf(stderr,
"-p requires a number between 1 and 65535\n");
585 port_option = (uint16_t) p;
589 fprintf(stderr,
"Unrecognized flag '%s'\n", arg[0]);
596 if (isSocks4 && isReverse) {
597 fprintf(stderr,
"Reverse lookups not supported with SOCKS4a\n");
611 log_debug(
LD_CONFIG,
"defaulting to localhost");
614 log_debug(
LD_CONFIG,
"Using port %d", (
int)port_option);
615 socksport = port_option;
617 log_debug(
LD_CONFIG,
"defaulting to port 9050");
620 }
else if (n_args == 2) {
622 fprintf(stderr,
"Couldn't parse/resolve address %s", arg[1]);
625 if (socksport && port_option && socksport != port_option) {
626 log_warn(
LD_CONFIG,
"Conflicting ports; using %d, not %d",
627 (
int)socksport, (
int)port_option);
628 }
else if (port_option) {
629 socksport = port_option;
630 }
else if (!socksport) {
631 log_debug(
LD_CONFIG,
"defaulting to port 9050");
639 log_err(
LD_BUG,
"Error initializing network; exiting.");
643 if (do_resolve(arg[0], &sockshost, socksport, isReverse,
644 isSocks4 ? 4 : 5, &result,
648 if (result_hostname) {
649 printf(
"%s\n", result_hostname);
socklen_t tor_addr_to_sockaddr(const tor_addr_t *a, uint16_t port, struct sockaddr *sa_out, socklen_t len)
void tor_addr_make_unspec(tor_addr_t *a)
int tor_addr_parse(tor_addr_t *addr, const char *src)
void tor_addr_from_ipv6_bytes(tor_addr_t *dest, const uint8_t *ipv6_bytes)
static sa_family_t tor_addr_family(const tor_addr_t *a)
static uint32_t tor_addr_to_ipv4h(const tor_addr_t *a)
#define tor_addr_to_in6_addr8(x)
#define tor_addr_from_ipv4h(dest, v4addr)
Inline functions for reading and writing multibyte values from the middle of strings,...
void init_logging(int disable_startup_queue)
void set_log_severity_config(int loglevelMin, int loglevelMax, log_severity_list_t *severity_out)
void add_stream_log(const log_severity_list_t *severity, const char *name, int fd)
Headers for util_malloc.c.
int tor_addr_port_lookup(const char *s, tor_addr_t *addr_out, uint16_t *port_out)
Header file for sandbox.c.
int tor_close_socket(tor_socket_t s)
ssize_t read_all_from_socket(tor_socket_t sock, char *buf, size_t count)
ssize_t write_all_to_socket(tor_socket_t fd, const char *buf, size_t count)
tor_socket_t tor_open_socket(int domain, int type, int protocol)
Status codes used by the SOCKS5 protocol.
int main(int argc, char *argv[])
int strcasecmpend(const char *s1, const char *s2)
Header for util_string.c.