1ae8c6e27Sflorian /* 2ae8c6e27Sflorian * util/fptr_wlist.c - function pointer whitelists. 3ae8c6e27Sflorian * 4ae8c6e27Sflorian * Copyright (c) 2007, NLnet Labs. All rights reserved. 5ae8c6e27Sflorian * 6ae8c6e27Sflorian * This software is open source. 7ae8c6e27Sflorian * 8ae8c6e27Sflorian * Redistribution and use in source and binary forms, with or without 9ae8c6e27Sflorian * modification, are permitted provided that the following conditions 10ae8c6e27Sflorian * are met: 11ae8c6e27Sflorian * 12ae8c6e27Sflorian * Redistributions of source code must retain the above copyright notice, 13ae8c6e27Sflorian * this list of conditions and the following disclaimer. 14ae8c6e27Sflorian * 15ae8c6e27Sflorian * Redistributions in binary form must reproduce the above copyright notice, 16ae8c6e27Sflorian * this list of conditions and the following disclaimer in the documentation 17ae8c6e27Sflorian * and/or other materials provided with the distribution. 18ae8c6e27Sflorian * 19ae8c6e27Sflorian * Neither the name of the NLNET LABS nor the names of its contributors may 20ae8c6e27Sflorian * be used to endorse or promote products derived from this software without 21ae8c6e27Sflorian * specific prior written permission. 22ae8c6e27Sflorian * 23ae8c6e27Sflorian * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 24ae8c6e27Sflorian * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 25ae8c6e27Sflorian * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 26ae8c6e27Sflorian * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 27ae8c6e27Sflorian * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 28ae8c6e27Sflorian * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 29ae8c6e27Sflorian * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 30ae8c6e27Sflorian * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31ae8c6e27Sflorian * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32ae8c6e27Sflorian * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33ae8c6e27Sflorian * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34ae8c6e27Sflorian */ 35ae8c6e27Sflorian 36ae8c6e27Sflorian /** 37ae8c6e27Sflorian * \file 38ae8c6e27Sflorian * 39ae8c6e27Sflorian * This file contains functions that check function pointers. 40ae8c6e27Sflorian * The functions contain a whitelist of known good callback values. 41ae8c6e27Sflorian * Any other values lead to an error. 42ae8c6e27Sflorian * 43ae8c6e27Sflorian * Due to the listing nature, this file violates all the modularization 44ae8c6e27Sflorian * boundaries in the program. 45ae8c6e27Sflorian */ 46ae8c6e27Sflorian #include "config.h" 47ae8c6e27Sflorian #include "util/fptr_wlist.h" 48ae8c6e27Sflorian #include "util/mini_event.h" 49ae8c6e27Sflorian #include "services/outside_network.h" 50ae8c6e27Sflorian #include "services/mesh.h" 51ae8c6e27Sflorian #include "services/localzone.h" 52ae8c6e27Sflorian #include "services/authzone.h" 53ae8c6e27Sflorian #include "services/cache/infra.h" 54ae8c6e27Sflorian #include "services/cache/rrset.h" 55ae8c6e27Sflorian #include "services/view.h" 56ae8c6e27Sflorian #include "dns64/dns64.h" 57ae8c6e27Sflorian #include "iterator/iterator.h" 58ae8c6e27Sflorian #include "iterator/iter_fwd.h" 59ae8c6e27Sflorian #include "validator/validator.h" 60ae8c6e27Sflorian #include "validator/val_anchor.h" 61ae8c6e27Sflorian #include "validator/val_nsec3.h" 62ae8c6e27Sflorian #include "validator/val_sigcrypt.h" 63ae8c6e27Sflorian #include "validator/val_kentry.h" 64ae8c6e27Sflorian #include "validator/val_neg.h" 65ae8c6e27Sflorian #include "validator/autotrust.h" 66ae8c6e27Sflorian #include "util/data/msgreply.h" 67ae8c6e27Sflorian #include "util/data/packed_rrset.h" 68ae8c6e27Sflorian #include "util/storage/slabhash.h" 69ae8c6e27Sflorian #include "util/storage/dnstree.h" 70ae8c6e27Sflorian #include "util/locks.h" 71ae8c6e27Sflorian #include "libunbound/libworker.h" 72ae8c6e27Sflorian #include "libunbound/context.h" 73ae8c6e27Sflorian #include "libunbound/worker.h" 74ae8c6e27Sflorian #include "util/tube.h" 75ae8c6e27Sflorian #include "util/config_file.h" 76ae8c6e27Sflorian #ifdef UB_ON_WINDOWS 77ae8c6e27Sflorian #include "winrc/win_svc.h" 78ae8c6e27Sflorian #endif 79ae8c6e27Sflorian #include "respip/respip.h" 80ae8c6e27Sflorian 81ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 82ae8c6e27Sflorian #include "pythonmod/pythonmod.h" 83ae8c6e27Sflorian #endif 84e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 85e47fef9eSflorian #include "dynlibmod/dynlibmod.h" 86e47fef9eSflorian #endif 87ae8c6e27Sflorian #ifdef USE_CACHEDB 88ae8c6e27Sflorian #include "cachedb/cachedb.h" 89ae8c6e27Sflorian #endif 90ae8c6e27Sflorian #ifdef USE_IPSECMOD 91ae8c6e27Sflorian #include "ipsecmod/ipsecmod.h" 92ae8c6e27Sflorian #endif 93ae8c6e27Sflorian #ifdef CLIENT_SUBNET 94ae8c6e27Sflorian #include "edns-subnet/subnetmod.h" 95ae8c6e27Sflorian #endif 96da8c8390Sflorian #ifdef USE_IPSET 97da8c8390Sflorian #include "ipset/ipset.h" 98da8c8390Sflorian #endif 99e47fef9eSflorian #ifdef USE_DNSTAP 100e47fef9eSflorian #include "dnstap/dtstream.h" 101e47fef9eSflorian #endif 102ae8c6e27Sflorian 103ae8c6e27Sflorian int 104ae8c6e27Sflorian fptr_whitelist_comm_point(comm_point_callback_type *fptr) 105ae8c6e27Sflorian { 106ae8c6e27Sflorian if(fptr == &worker_handle_request) return 1; 107ae8c6e27Sflorian else if(fptr == &outnet_udp_cb) return 1; 108ae8c6e27Sflorian else if(fptr == &outnet_tcp_cb) return 1; 109ae8c6e27Sflorian else if(fptr == &tube_handle_listen) return 1; 110ae8c6e27Sflorian else if(fptr == &auth_xfer_probe_udp_callback) return 1; 111ae8c6e27Sflorian else if(fptr == &auth_xfer_transfer_tcp_callback) return 1; 112ae8c6e27Sflorian else if(fptr == &auth_xfer_transfer_http_callback) return 1; 113ae8c6e27Sflorian return 0; 114ae8c6e27Sflorian } 115ae8c6e27Sflorian 116ae8c6e27Sflorian int 117ae8c6e27Sflorian fptr_whitelist_comm_point_raw(comm_point_callback_type *fptr) 118ae8c6e27Sflorian { 119ae8c6e27Sflorian if(fptr == &tube_handle_listen) return 1; 120ae8c6e27Sflorian else if(fptr == &tube_handle_write) return 1; 121ae8c6e27Sflorian else if(fptr == &remote_accept_callback) return 1; 122ae8c6e27Sflorian else if(fptr == &remote_control_callback) return 1; 123ae8c6e27Sflorian return 0; 124ae8c6e27Sflorian } 125ae8c6e27Sflorian 126ae8c6e27Sflorian int 127ae8c6e27Sflorian fptr_whitelist_comm_timer(void (*fptr)(void*)) 128ae8c6e27Sflorian { 129ae8c6e27Sflorian if(fptr == &pending_udp_timer_cb) return 1; 130ae8c6e27Sflorian else if(fptr == &outnet_tcptimer) return 1; 131ae8c6e27Sflorian else if(fptr == &pending_udp_timer_delay_cb) return 1; 132ae8c6e27Sflorian else if(fptr == &worker_stat_timer_cb) return 1; 133ae8c6e27Sflorian else if(fptr == &worker_probe_timer_cb) return 1; 134fed3efa7Sflorian else if(fptr == &validate_suspend_timer_cb) return 1; 135ae8c6e27Sflorian #ifdef UB_ON_WINDOWS 136ae8c6e27Sflorian else if(fptr == &wsvc_cron_cb) return 1; 137ae8c6e27Sflorian #endif 138ae8c6e27Sflorian else if(fptr == &auth_xfer_timer) return 1; 139ae8c6e27Sflorian else if(fptr == &auth_xfer_probe_timer_callback) return 1; 1409b465e50Sflorian else if(fptr == &auth_xfer_transfer_timer_callback) return 1; 141d32eb43cSflorian else if(fptr == &mesh_serve_expired_callback) return 1; 142a1a7ba80Sflorian else if(fptr == &serviced_timer_cb) return 1; 143f4f0f0ceSflorian #ifdef USE_DNSTAP 144f4f0f0ceSflorian else if(fptr == &mq_wakeup_cb) return 1; 145f4f0f0ceSflorian #endif 146ae8c6e27Sflorian return 0; 147ae8c6e27Sflorian } 148ae8c6e27Sflorian 149ae8c6e27Sflorian int 150ae8c6e27Sflorian fptr_whitelist_comm_signal(void (*fptr)(int, void*)) 151ae8c6e27Sflorian { 152ae8c6e27Sflorian if(fptr == &worker_sighandler) return 1; 153ae8c6e27Sflorian return 0; 154ae8c6e27Sflorian } 155ae8c6e27Sflorian 156ae8c6e27Sflorian int fptr_whitelist_start_accept(void (*fptr)(void*)) 157ae8c6e27Sflorian { 158ae8c6e27Sflorian if(fptr == &worker_start_accept) return 1; 159ae8c6e27Sflorian return 0; 160ae8c6e27Sflorian } 161ae8c6e27Sflorian 162ae8c6e27Sflorian int fptr_whitelist_stop_accept(void (*fptr)(void*)) 163ae8c6e27Sflorian { 164ae8c6e27Sflorian if(fptr == &worker_stop_accept) return 1; 165ae8c6e27Sflorian return 0; 166ae8c6e27Sflorian } 167ae8c6e27Sflorian 168ae8c6e27Sflorian int 169ae8c6e27Sflorian fptr_whitelist_event(void (*fptr)(int, short, void *)) 170ae8c6e27Sflorian { 171ae8c6e27Sflorian if(fptr == &comm_point_udp_callback) return 1; 17254cc57acSflorian #if defined(AF_INET6) && defined(IPV6_PKTINFO) && defined(HAVE_RECVMSG) 173ae8c6e27Sflorian else if(fptr == &comm_point_udp_ancil_callback) return 1; 17454cc57acSflorian #endif 175ae8c6e27Sflorian else if(fptr == &comm_point_tcp_accept_callback) return 1; 176ae8c6e27Sflorian else if(fptr == &comm_point_tcp_handle_callback) return 1; 177ae8c6e27Sflorian else if(fptr == &comm_timer_callback) return 1; 178ae8c6e27Sflorian else if(fptr == &comm_signal_callback) return 1; 179ae8c6e27Sflorian else if(fptr == &comm_point_local_handle_callback) return 1; 180ae8c6e27Sflorian else if(fptr == &comm_point_raw_handle_callback) return 1; 181ae8c6e27Sflorian else if(fptr == &tube_handle_signal) return 1; 182ae8c6e27Sflorian else if(fptr == &comm_base_handle_slow_accept) return 1; 183ae8c6e27Sflorian else if(fptr == &comm_point_http_handle_callback) return 1; 184e47fef9eSflorian #ifdef USE_DNSTAP 185e47fef9eSflorian else if(fptr == &dtio_output_cb) return 1; 186e47fef9eSflorian else if(fptr == &dtio_cmd_cb) return 1; 187e47fef9eSflorian else if(fptr == &dtio_reconnect_timeout_cb) return 1; 188e47fef9eSflorian else if(fptr == &dtio_stop_timer_cb) return 1; 189e47fef9eSflorian else if(fptr == &dtio_stop_ev_cb) return 1; 190e47fef9eSflorian else if(fptr == &dtio_tap_callback) return 1; 191e47fef9eSflorian else if(fptr == &dtio_mainfdcallback) return 1; 192e47fef9eSflorian #endif 193ae8c6e27Sflorian #ifdef UB_ON_WINDOWS 194ae8c6e27Sflorian else if(fptr == &worker_win_stop_cb) return 1; 195ae8c6e27Sflorian #endif 196ae8c6e27Sflorian return 0; 197ae8c6e27Sflorian } 198ae8c6e27Sflorian 199ae8c6e27Sflorian int 200ae8c6e27Sflorian fptr_whitelist_pending_udp(comm_point_callback_type *fptr) 201ae8c6e27Sflorian { 202ae8c6e27Sflorian if(fptr == &serviced_udp_callback) return 1; 203ae8c6e27Sflorian return 0; 204ae8c6e27Sflorian } 205ae8c6e27Sflorian 206ae8c6e27Sflorian int 207ae8c6e27Sflorian fptr_whitelist_pending_tcp(comm_point_callback_type *fptr) 208ae8c6e27Sflorian { 209ae8c6e27Sflorian if(fptr == &serviced_tcp_callback) return 1; 210ae8c6e27Sflorian return 0; 211ae8c6e27Sflorian } 212ae8c6e27Sflorian 213ae8c6e27Sflorian int 214ae8c6e27Sflorian fptr_whitelist_serviced_query(comm_point_callback_type *fptr) 215ae8c6e27Sflorian { 216ae8c6e27Sflorian if(fptr == &worker_handle_service_reply) return 1; 217ae8c6e27Sflorian else if(fptr == &libworker_handle_service_reply) return 1; 218ae8c6e27Sflorian return 0; 219ae8c6e27Sflorian } 220ae8c6e27Sflorian 221ae8c6e27Sflorian int 222ae8c6e27Sflorian fptr_whitelist_rbtree_cmp(int (*fptr) (const void *, const void *)) 223ae8c6e27Sflorian { 224ae8c6e27Sflorian if(fptr == &mesh_state_compare) return 1; 225ae8c6e27Sflorian else if(fptr == &mesh_state_ref_compare) return 1; 226ae8c6e27Sflorian else if(fptr == &addr_tree_compare) return 1; 2275c45b740Sflorian else if(fptr == &addr_tree_addrport_compare) return 1; 228ae8c6e27Sflorian else if(fptr == &local_zone_cmp) return 1; 229ae8c6e27Sflorian else if(fptr == &local_data_cmp) return 1; 230ae8c6e27Sflorian else if(fptr == &fwd_cmp) return 1; 231ae8c6e27Sflorian else if(fptr == &pending_cmp) return 1; 232ae8c6e27Sflorian else if(fptr == &serviced_cmp) return 1; 233853e076fSflorian else if(fptr == &reuse_cmp) return 1; 234853e076fSflorian else if(fptr == &reuse_id_cmp) return 1; 235ae8c6e27Sflorian else if(fptr == &name_tree_compare) return 1; 236ae8c6e27Sflorian else if(fptr == &order_lock_cmp) return 1; 237ae8c6e27Sflorian else if(fptr == &codeline_cmp) return 1; 238ae8c6e27Sflorian else if(fptr == &nsec3_hash_cmp) return 1; 239ae8c6e27Sflorian else if(fptr == &mini_ev_cmp) return 1; 240ae8c6e27Sflorian else if(fptr == &anchor_cmp) return 1; 241ae8c6e27Sflorian else if(fptr == &canonical_tree_compare) return 1; 242ae8c6e27Sflorian else if(fptr == &context_query_cmp) return 1; 243ae8c6e27Sflorian else if(fptr == &val_neg_data_compare) return 1; 244ae8c6e27Sflorian else if(fptr == &val_neg_zone_compare) return 1; 245ae8c6e27Sflorian else if(fptr == &probetree_cmp) return 1; 246ae8c6e27Sflorian else if(fptr == &replay_var_compare) return 1; 247ae8c6e27Sflorian else if(fptr == &view_cmp) return 1; 248ae8c6e27Sflorian else if(fptr == &auth_zone_cmp) return 1; 249ae8c6e27Sflorian else if(fptr == &auth_data_cmp) return 1; 250ae8c6e27Sflorian else if(fptr == &auth_xfer_cmp) return 1; 251ae8c6e27Sflorian return 0; 252ae8c6e27Sflorian } 253ae8c6e27Sflorian 254ae8c6e27Sflorian int 255ae8c6e27Sflorian fptr_whitelist_hash_sizefunc(lruhash_sizefunc_type fptr) 256ae8c6e27Sflorian { 257ae8c6e27Sflorian if(fptr == &msgreply_sizefunc) return 1; 258ae8c6e27Sflorian else if(fptr == &ub_rrset_sizefunc) return 1; 259ae8c6e27Sflorian else if(fptr == &infra_sizefunc) return 1; 260ae8c6e27Sflorian else if(fptr == &key_entry_sizefunc) return 1; 261ae8c6e27Sflorian else if(fptr == &rate_sizefunc) return 1; 262ae8c6e27Sflorian else if(fptr == &ip_rate_sizefunc) return 1; 263ae8c6e27Sflorian else if(fptr == &test_slabhash_sizefunc) return 1; 264ae8c6e27Sflorian #ifdef CLIENT_SUBNET 265ae8c6e27Sflorian else if(fptr == &msg_cache_sizefunc) return 1; 266ae8c6e27Sflorian #endif 267ae8c6e27Sflorian #ifdef USE_DNSCRYPT 268ae8c6e27Sflorian else if(fptr == &dnsc_shared_secrets_sizefunc) return 1; 269ae8c6e27Sflorian else if(fptr == &dnsc_nonces_sizefunc) return 1; 270ae8c6e27Sflorian #endif 271ae8c6e27Sflorian return 0; 272ae8c6e27Sflorian } 273ae8c6e27Sflorian 274ae8c6e27Sflorian int 275ae8c6e27Sflorian fptr_whitelist_hash_compfunc(lruhash_compfunc_type fptr) 276ae8c6e27Sflorian { 277ae8c6e27Sflorian if(fptr == &query_info_compare) return 1; 278ae8c6e27Sflorian else if(fptr == &ub_rrset_compare) return 1; 279ae8c6e27Sflorian else if(fptr == &infra_compfunc) return 1; 280ae8c6e27Sflorian else if(fptr == &key_entry_compfunc) return 1; 281ae8c6e27Sflorian else if(fptr == &rate_compfunc) return 1; 282ae8c6e27Sflorian else if(fptr == &ip_rate_compfunc) return 1; 283ae8c6e27Sflorian else if(fptr == &test_slabhash_compfunc) return 1; 284ae8c6e27Sflorian #ifdef USE_DNSCRYPT 285ae8c6e27Sflorian else if(fptr == &dnsc_shared_secrets_compfunc) return 1; 286ae8c6e27Sflorian else if(fptr == &dnsc_nonces_compfunc) return 1; 287ae8c6e27Sflorian #endif 288ae8c6e27Sflorian return 0; 289ae8c6e27Sflorian } 290ae8c6e27Sflorian 291ae8c6e27Sflorian int 292ae8c6e27Sflorian fptr_whitelist_hash_delkeyfunc(lruhash_delkeyfunc_type fptr) 293ae8c6e27Sflorian { 294ae8c6e27Sflorian if(fptr == &query_entry_delete) return 1; 295ae8c6e27Sflorian else if(fptr == &ub_rrset_key_delete) return 1; 296ae8c6e27Sflorian else if(fptr == &infra_delkeyfunc) return 1; 297ae8c6e27Sflorian else if(fptr == &key_entry_delkeyfunc) return 1; 298ae8c6e27Sflorian else if(fptr == &rate_delkeyfunc) return 1; 299ae8c6e27Sflorian else if(fptr == &ip_rate_delkeyfunc) return 1; 300ae8c6e27Sflorian else if(fptr == &test_slabhash_delkey) return 1; 301ae8c6e27Sflorian #ifdef USE_DNSCRYPT 302ae8c6e27Sflorian else if(fptr == &dnsc_shared_secrets_delkeyfunc) return 1; 303ae8c6e27Sflorian else if(fptr == &dnsc_nonces_delkeyfunc) return 1; 304ae8c6e27Sflorian #endif 305ae8c6e27Sflorian return 0; 306ae8c6e27Sflorian } 307ae8c6e27Sflorian 308ae8c6e27Sflorian int 309ae8c6e27Sflorian fptr_whitelist_hash_deldatafunc(lruhash_deldatafunc_type fptr) 310ae8c6e27Sflorian { 311ae8c6e27Sflorian if(fptr == &reply_info_delete) return 1; 312ae8c6e27Sflorian else if(fptr == &rrset_data_delete) return 1; 313ae8c6e27Sflorian else if(fptr == &infra_deldatafunc) return 1; 314ae8c6e27Sflorian else if(fptr == &key_entry_deldatafunc) return 1; 315ae8c6e27Sflorian else if(fptr == &rate_deldatafunc) return 1; 316ae8c6e27Sflorian else if(fptr == &test_slabhash_deldata) return 1; 317ae8c6e27Sflorian #ifdef CLIENT_SUBNET 318ae8c6e27Sflorian else if(fptr == &subnet_data_delete) return 1; 319ae8c6e27Sflorian #endif 320ae8c6e27Sflorian #ifdef USE_DNSCRYPT 321ae8c6e27Sflorian else if(fptr == &dnsc_shared_secrets_deldatafunc) return 1; 322ae8c6e27Sflorian else if(fptr == &dnsc_nonces_deldatafunc) return 1; 323ae8c6e27Sflorian #endif 324ae8c6e27Sflorian return 0; 325ae8c6e27Sflorian } 326ae8c6e27Sflorian 327ae8c6e27Sflorian int 328ae8c6e27Sflorian fptr_whitelist_hash_markdelfunc(lruhash_markdelfunc_type fptr) 329ae8c6e27Sflorian { 330ae8c6e27Sflorian if(fptr == NULL) return 1; 331ae8c6e27Sflorian else if(fptr == &rrset_markdel) return 1; 332ae8c6e27Sflorian #ifdef CLIENT_SUBNET 333ae8c6e27Sflorian else if(fptr == &subnet_markdel) return 1; 334ae8c6e27Sflorian #endif 335ae8c6e27Sflorian return 0; 336ae8c6e27Sflorian } 337ae8c6e27Sflorian 338ae8c6e27Sflorian /** whitelist env->send_query callbacks */ 339ae8c6e27Sflorian int 340ae8c6e27Sflorian fptr_whitelist_modenv_send_query(struct outbound_entry* (*fptr)( 341ae8c6e27Sflorian struct query_info* qinfo, uint16_t flags, int dnssec, int want_dnssec, 342a1a7ba80Sflorian int nocaps, int check_ratelimit, struct sockaddr_storage* addr, 343a1a7ba80Sflorian socklen_t addrlen, uint8_t* zone, size_t zonelen, int tcp_upstream, 344a1a7ba80Sflorian int ssl_upstream, char* tls_auth_name, struct module_qstate* q, 345a1a7ba80Sflorian int* was_ratelimited)) 346ae8c6e27Sflorian { 347ae8c6e27Sflorian if(fptr == &worker_send_query) return 1; 348ae8c6e27Sflorian else if(fptr == &libworker_send_query) return 1; 349ae8c6e27Sflorian return 0; 350ae8c6e27Sflorian } 351ae8c6e27Sflorian 352ae8c6e27Sflorian int 353ae8c6e27Sflorian fptr_whitelist_modenv_detach_subs(void (*fptr)( 354ae8c6e27Sflorian struct module_qstate* qstate)) 355ae8c6e27Sflorian { 356ae8c6e27Sflorian if(fptr == &mesh_detach_subs) return 1; 357ae8c6e27Sflorian return 0; 358ae8c6e27Sflorian } 359ae8c6e27Sflorian 360ae8c6e27Sflorian int 361ae8c6e27Sflorian fptr_whitelist_modenv_attach_sub(int (*fptr)( 362ae8c6e27Sflorian struct module_qstate* qstate, struct query_info* qinfo, 363ae8c6e27Sflorian uint16_t qflags, int prime, int valrec, struct module_qstate** newq)) 364ae8c6e27Sflorian { 365ae8c6e27Sflorian if(fptr == &mesh_attach_sub) return 1; 366ae8c6e27Sflorian return 0; 367ae8c6e27Sflorian } 368ae8c6e27Sflorian 369ae8c6e27Sflorian int 370ae8c6e27Sflorian fptr_whitelist_modenv_add_sub(int (*fptr)( 371ae8c6e27Sflorian struct module_qstate* qstate, struct query_info* qinfo, 372ae8c6e27Sflorian uint16_t qflags, int prime, int valrec, struct module_qstate** newq, 373ae8c6e27Sflorian struct mesh_state** sub)) 374ae8c6e27Sflorian { 375ae8c6e27Sflorian if(fptr == &mesh_add_sub) return 1; 376ae8c6e27Sflorian return 0; 377ae8c6e27Sflorian } 378ae8c6e27Sflorian 379ae8c6e27Sflorian int 380ae8c6e27Sflorian fptr_whitelist_modenv_kill_sub(void (*fptr)(struct module_qstate* newq)) 381ae8c6e27Sflorian { 382ae8c6e27Sflorian if(fptr == &mesh_state_delete) return 1; 383ae8c6e27Sflorian return 0; 384ae8c6e27Sflorian } 385ae8c6e27Sflorian 386ae8c6e27Sflorian int 387ae8c6e27Sflorian fptr_whitelist_modenv_detect_cycle(int (*fptr)( 388ae8c6e27Sflorian struct module_qstate* qstate, struct query_info* qinfo, 389ae8c6e27Sflorian uint16_t flags, int prime, int valrec)) 390ae8c6e27Sflorian { 391ae8c6e27Sflorian if(fptr == &mesh_detect_cycle) return 1; 392ae8c6e27Sflorian return 0; 393ae8c6e27Sflorian } 394ae8c6e27Sflorian 395ae8c6e27Sflorian int 396ae8c6e27Sflorian fptr_whitelist_mod_init(int (*fptr)(struct module_env* env, int id)) 397ae8c6e27Sflorian { 398ae8c6e27Sflorian if(fptr == &iter_init) return 1; 399ae8c6e27Sflorian else if(fptr == &val_init) return 1; 400ae8c6e27Sflorian else if(fptr == &dns64_init) return 1; 401ae8c6e27Sflorian else if(fptr == &respip_init) return 1; 402ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 403ae8c6e27Sflorian else if(fptr == &pythonmod_init) return 1; 404ae8c6e27Sflorian #endif 405e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 406e47fef9eSflorian else if(fptr == &dynlibmod_init) return 1; 407e47fef9eSflorian #endif 408ae8c6e27Sflorian #ifdef USE_CACHEDB 409ae8c6e27Sflorian else if(fptr == &cachedb_init) return 1; 410ae8c6e27Sflorian #endif 411ae8c6e27Sflorian #ifdef USE_IPSECMOD 412ae8c6e27Sflorian else if(fptr == &ipsecmod_init) return 1; 413ae8c6e27Sflorian #endif 414ae8c6e27Sflorian #ifdef CLIENT_SUBNET 415ae8c6e27Sflorian else if(fptr == &subnetmod_init) return 1; 416ae8c6e27Sflorian #endif 417da8c8390Sflorian #ifdef USE_IPSET 418da8c8390Sflorian else if(fptr == &ipset_init) return 1; 419da8c8390Sflorian #endif 420ae8c6e27Sflorian return 0; 421ae8c6e27Sflorian } 422ae8c6e27Sflorian 423ae8c6e27Sflorian int 424ae8c6e27Sflorian fptr_whitelist_mod_deinit(void (*fptr)(struct module_env* env, int id)) 425ae8c6e27Sflorian { 426ae8c6e27Sflorian if(fptr == &iter_deinit) return 1; 427ae8c6e27Sflorian else if(fptr == &val_deinit) return 1; 428ae8c6e27Sflorian else if(fptr == &dns64_deinit) return 1; 429ae8c6e27Sflorian else if(fptr == &respip_deinit) return 1; 430ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 431ae8c6e27Sflorian else if(fptr == &pythonmod_deinit) return 1; 432ae8c6e27Sflorian #endif 433e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 434e47fef9eSflorian else if(fptr == &dynlibmod_deinit) return 1; 435e47fef9eSflorian #endif 436ae8c6e27Sflorian #ifdef USE_CACHEDB 437ae8c6e27Sflorian else if(fptr == &cachedb_deinit) return 1; 438ae8c6e27Sflorian #endif 439ae8c6e27Sflorian #ifdef USE_IPSECMOD 440ae8c6e27Sflorian else if(fptr == &ipsecmod_deinit) return 1; 441ae8c6e27Sflorian #endif 442ae8c6e27Sflorian #ifdef CLIENT_SUBNET 443ae8c6e27Sflorian else if(fptr == &subnetmod_deinit) return 1; 444ae8c6e27Sflorian #endif 445da8c8390Sflorian #ifdef USE_IPSET 446da8c8390Sflorian else if(fptr == &ipset_deinit) return 1; 447da8c8390Sflorian #endif 448ae8c6e27Sflorian return 0; 449ae8c6e27Sflorian } 450ae8c6e27Sflorian 451ae8c6e27Sflorian int 452*7037e34cSflorian fptr_whitelist_mod_startup(int (*fptr)(struct module_env* env, int id)) 453*7037e34cSflorian { 454*7037e34cSflorian #ifdef USE_IPSET 455*7037e34cSflorian if(fptr == &ipset_startup) return 1; 456*7037e34cSflorian #else 457*7037e34cSflorian (void)fptr; 458*7037e34cSflorian #endif 459*7037e34cSflorian return 0; 460*7037e34cSflorian } 461*7037e34cSflorian 462*7037e34cSflorian int 463*7037e34cSflorian fptr_whitelist_mod_destartup(void (*fptr)(struct module_env* env, int id)) 464*7037e34cSflorian { 465*7037e34cSflorian #ifdef USE_IPSET 466*7037e34cSflorian if(fptr == &ipset_destartup) return 1; 467*7037e34cSflorian #else 468*7037e34cSflorian (void)fptr; 469*7037e34cSflorian #endif 470*7037e34cSflorian return 0; 471*7037e34cSflorian } 472*7037e34cSflorian 473*7037e34cSflorian int 474ae8c6e27Sflorian fptr_whitelist_mod_operate(void (*fptr)(struct module_qstate* qstate, 475ae8c6e27Sflorian enum module_ev event, int id, struct outbound_entry* outbound)) 476ae8c6e27Sflorian { 477ae8c6e27Sflorian if(fptr == &iter_operate) return 1; 478ae8c6e27Sflorian else if(fptr == &val_operate) return 1; 479ae8c6e27Sflorian else if(fptr == &dns64_operate) return 1; 480ae8c6e27Sflorian else if(fptr == &respip_operate) return 1; 481ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 482ae8c6e27Sflorian else if(fptr == &pythonmod_operate) return 1; 483ae8c6e27Sflorian #endif 484e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 485e47fef9eSflorian else if(fptr == &dynlibmod_operate) return 1; 486e47fef9eSflorian #endif 487ae8c6e27Sflorian #ifdef USE_CACHEDB 488ae8c6e27Sflorian else if(fptr == &cachedb_operate) return 1; 489ae8c6e27Sflorian #endif 490ae8c6e27Sflorian #ifdef USE_IPSECMOD 491ae8c6e27Sflorian else if(fptr == &ipsecmod_operate) return 1; 492ae8c6e27Sflorian #endif 493ae8c6e27Sflorian #ifdef CLIENT_SUBNET 494ae8c6e27Sflorian else if(fptr == &subnetmod_operate) return 1; 495ae8c6e27Sflorian #endif 496da8c8390Sflorian #ifdef USE_IPSET 497da8c8390Sflorian else if(fptr == &ipset_operate) return 1; 498da8c8390Sflorian #endif 499ae8c6e27Sflorian return 0; 500ae8c6e27Sflorian } 501ae8c6e27Sflorian 502ae8c6e27Sflorian int 503ae8c6e27Sflorian fptr_whitelist_mod_inform_super(void (*fptr)( 504ae8c6e27Sflorian struct module_qstate* qstate, int id, struct module_qstate* super)) 505ae8c6e27Sflorian { 506ae8c6e27Sflorian if(fptr == &iter_inform_super) return 1; 507ae8c6e27Sflorian else if(fptr == &val_inform_super) return 1; 508ae8c6e27Sflorian else if(fptr == &dns64_inform_super) return 1; 509ae8c6e27Sflorian else if(fptr == &respip_inform_super) return 1; 510ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 511ae8c6e27Sflorian else if(fptr == &pythonmod_inform_super) return 1; 512ae8c6e27Sflorian #endif 513e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 514e47fef9eSflorian else if(fptr == &dynlibmod_inform_super) return 1; 515e47fef9eSflorian #endif 516ae8c6e27Sflorian #ifdef USE_CACHEDB 517ae8c6e27Sflorian else if(fptr == &cachedb_inform_super) return 1; 518ae8c6e27Sflorian #endif 519ae8c6e27Sflorian #ifdef USE_IPSECMOD 520ae8c6e27Sflorian else if(fptr == &ipsecmod_inform_super) return 1; 521ae8c6e27Sflorian #endif 522ae8c6e27Sflorian #ifdef CLIENT_SUBNET 523ae8c6e27Sflorian else if(fptr == &subnetmod_inform_super) return 1; 524ae8c6e27Sflorian #endif 525da8c8390Sflorian #ifdef USE_IPSET 526da8c8390Sflorian else if(fptr == &ipset_inform_super) return 1; 527da8c8390Sflorian #endif 528ae8c6e27Sflorian return 0; 529ae8c6e27Sflorian } 530ae8c6e27Sflorian 531ae8c6e27Sflorian int 532ae8c6e27Sflorian fptr_whitelist_mod_clear(void (*fptr)(struct module_qstate* qstate, 533ae8c6e27Sflorian int id)) 534ae8c6e27Sflorian { 535ae8c6e27Sflorian if(fptr == &iter_clear) return 1; 536ae8c6e27Sflorian else if(fptr == &val_clear) return 1; 537ae8c6e27Sflorian else if(fptr == &dns64_clear) return 1; 538ae8c6e27Sflorian else if(fptr == &respip_clear) return 1; 539ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 540ae8c6e27Sflorian else if(fptr == &pythonmod_clear) return 1; 541ae8c6e27Sflorian #endif 542e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 543e47fef9eSflorian else if(fptr == &dynlibmod_clear) return 1; 544e47fef9eSflorian #endif 545ae8c6e27Sflorian #ifdef USE_CACHEDB 546ae8c6e27Sflorian else if(fptr == &cachedb_clear) return 1; 547ae8c6e27Sflorian #endif 548ae8c6e27Sflorian #ifdef USE_IPSECMOD 549ae8c6e27Sflorian else if(fptr == &ipsecmod_clear) return 1; 550ae8c6e27Sflorian #endif 551ae8c6e27Sflorian #ifdef CLIENT_SUBNET 552ae8c6e27Sflorian else if(fptr == &subnetmod_clear) return 1; 553ae8c6e27Sflorian #endif 554da8c8390Sflorian #ifdef USE_IPSET 555da8c8390Sflorian else if(fptr == &ipset_clear) return 1; 556da8c8390Sflorian #endif 557ae8c6e27Sflorian return 0; 558ae8c6e27Sflorian } 559ae8c6e27Sflorian 560ae8c6e27Sflorian int 561ae8c6e27Sflorian fptr_whitelist_mod_get_mem(size_t (*fptr)(struct module_env* env, int id)) 562ae8c6e27Sflorian { 563ae8c6e27Sflorian if(fptr == &iter_get_mem) return 1; 564ae8c6e27Sflorian else if(fptr == &val_get_mem) return 1; 565ae8c6e27Sflorian else if(fptr == &dns64_get_mem) return 1; 566ae8c6e27Sflorian else if(fptr == &respip_get_mem) return 1; 567ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 568ae8c6e27Sflorian else if(fptr == &pythonmod_get_mem) return 1; 569ae8c6e27Sflorian #endif 570e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 571e47fef9eSflorian else if(fptr == &dynlibmod_get_mem) return 1; 572e47fef9eSflorian #endif 573ae8c6e27Sflorian #ifdef USE_CACHEDB 574ae8c6e27Sflorian else if(fptr == &cachedb_get_mem) return 1; 575ae8c6e27Sflorian #endif 576ae8c6e27Sflorian #ifdef USE_IPSECMOD 577ae8c6e27Sflorian else if(fptr == &ipsecmod_get_mem) return 1; 578ae8c6e27Sflorian #endif 579ae8c6e27Sflorian #ifdef CLIENT_SUBNET 580ae8c6e27Sflorian else if(fptr == &subnetmod_get_mem) return 1; 581ae8c6e27Sflorian #endif 582da8c8390Sflorian #ifdef USE_IPSET 583da8c8390Sflorian else if(fptr == &ipset_get_mem) return 1; 584da8c8390Sflorian #endif 585ae8c6e27Sflorian return 0; 586ae8c6e27Sflorian } 587ae8c6e27Sflorian 588ae8c6e27Sflorian int 589ae8c6e27Sflorian fptr_whitelist_alloc_cleanup(void (*fptr)(void*)) 590ae8c6e27Sflorian { 591ae8c6e27Sflorian if(fptr == &worker_alloc_cleanup) return 1; 592ae8c6e27Sflorian return 0; 593ae8c6e27Sflorian } 594ae8c6e27Sflorian 595ae8c6e27Sflorian int fptr_whitelist_tube_listen(tube_callback_type* fptr) 596ae8c6e27Sflorian { 597ae8c6e27Sflorian if(fptr == &worker_handle_control_cmd) return 1; 598ae8c6e27Sflorian else if(fptr == &libworker_handle_control_cmd) return 1; 599ae8c6e27Sflorian return 0; 600ae8c6e27Sflorian } 601ae8c6e27Sflorian 602ae8c6e27Sflorian int fptr_whitelist_mesh_cb(mesh_cb_func_type fptr) 603ae8c6e27Sflorian { 604ae8c6e27Sflorian if(fptr == &libworker_fg_done_cb) return 1; 605ae8c6e27Sflorian else if(fptr == &libworker_bg_done_cb) return 1; 606ae8c6e27Sflorian else if(fptr == &libworker_event_done_cb) return 1; 607ae8c6e27Sflorian else if(fptr == &probe_answer_cb) return 1; 608ae8c6e27Sflorian else if(fptr == &auth_xfer_probe_lookup_callback) return 1; 609ae8c6e27Sflorian else if(fptr == &auth_xfer_transfer_lookup_callback) return 1; 610411c5950Sflorian else if(fptr == &auth_zonemd_dnskey_lookup_callback) return 1; 611ae8c6e27Sflorian return 0; 612ae8c6e27Sflorian } 613ae8c6e27Sflorian 614ae8c6e27Sflorian int fptr_whitelist_print_func(void (*fptr)(char*,void*)) 615ae8c6e27Sflorian { 616ae8c6e27Sflorian if(fptr == &config_print_func) return 1; 617ae8c6e27Sflorian else if(fptr == &config_collate_func) return 1; 618ae8c6e27Sflorian else if(fptr == &remote_get_opt_ssl) return 1; 619ae8c6e27Sflorian return 0; 620ae8c6e27Sflorian } 621ae8c6e27Sflorian 622ae8c6e27Sflorian int fptr_whitelist_inplace_cb_reply_generic(inplace_cb_reply_func_type* fptr, 623ae8c6e27Sflorian enum inplace_cb_list_type type) 624ae8c6e27Sflorian { 625ae8c6e27Sflorian #ifndef WITH_PYTHONMODULE 626ae8c6e27Sflorian (void)fptr; 627ae8c6e27Sflorian #endif 628ae8c6e27Sflorian if(type == inplace_cb_reply) { 629ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 630ae8c6e27Sflorian if(fptr == &python_inplace_cb_reply_generic) return 1; 631ae8c6e27Sflorian #endif 632e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 633e47fef9eSflorian if(fptr == &dynlib_inplace_cb_reply_generic) return 1; 634e47fef9eSflorian #endif 635ae8c6e27Sflorian } else if(type == inplace_cb_reply_cache) { 636ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 637ae8c6e27Sflorian if(fptr == &python_inplace_cb_reply_generic) return 1; 638ae8c6e27Sflorian #endif 639e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 640e47fef9eSflorian if(fptr == &dynlib_inplace_cb_reply_generic) return 1; 641e47fef9eSflorian #endif 642ae8c6e27Sflorian } else if(type == inplace_cb_reply_local) { 643ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 644ae8c6e27Sflorian if(fptr == &python_inplace_cb_reply_generic) return 1; 645ae8c6e27Sflorian #endif 646e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 647e47fef9eSflorian if(fptr == &dynlib_inplace_cb_reply_generic) return 1; 648e47fef9eSflorian #endif 649ae8c6e27Sflorian } else if(type == inplace_cb_reply_servfail) { 650ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 651ae8c6e27Sflorian if(fptr == &python_inplace_cb_reply_generic) return 1; 652ae8c6e27Sflorian #endif 653e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 654e47fef9eSflorian if(fptr == &dynlib_inplace_cb_reply_generic) return 1; 655e47fef9eSflorian #endif 656ae8c6e27Sflorian } 657ae8c6e27Sflorian return 0; 658ae8c6e27Sflorian } 659ae8c6e27Sflorian 660ae8c6e27Sflorian int fptr_whitelist_inplace_cb_query(inplace_cb_query_func_type* fptr) 661ae8c6e27Sflorian { 662ae8c6e27Sflorian #ifdef CLIENT_SUBNET 663ae8c6e27Sflorian if(fptr == &ecs_whitelist_check) 664ae8c6e27Sflorian return 1; 665ae8c6e27Sflorian #endif 666ae8c6e27Sflorian #ifdef WITH_PYTHONMODULE 667ae8c6e27Sflorian if(fptr == &python_inplace_cb_query_generic) 668ae8c6e27Sflorian return 1; 669ae8c6e27Sflorian #endif 670e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 671e47fef9eSflorian if(fptr == &dynlib_inplace_cb_query_generic) 672e47fef9eSflorian return 1; 673e47fef9eSflorian #endif 674ae8c6e27Sflorian (void)fptr; 675ae8c6e27Sflorian return 0; 676ae8c6e27Sflorian } 677ae8c6e27Sflorian 678ae8c6e27Sflorian int fptr_whitelist_inplace_cb_edns_back_parsed( 679ae8c6e27Sflorian inplace_cb_edns_back_parsed_func_type* fptr) 680ae8c6e27Sflorian { 681ae8c6e27Sflorian #ifdef CLIENT_SUBNET 682ae8c6e27Sflorian if(fptr == &ecs_edns_back_parsed) 683ae8c6e27Sflorian return 1; 684ae8c6e27Sflorian #else 685ae8c6e27Sflorian (void)fptr; 686ae8c6e27Sflorian #endif 687d500c338Sflorian #ifdef WITH_PYTHONMODULE 688d500c338Sflorian if(fptr == &python_inplace_cb_edns_back_parsed_call) 689d500c338Sflorian return 1; 690d500c338Sflorian #endif 691e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 692e47fef9eSflorian if(fptr == &dynlib_inplace_cb_edns_back_parsed) 693e47fef9eSflorian return 1; 694e47fef9eSflorian #endif 695ae8c6e27Sflorian return 0; 696ae8c6e27Sflorian } 697ae8c6e27Sflorian 698ae8c6e27Sflorian int fptr_whitelist_inplace_cb_query_response( 699ae8c6e27Sflorian inplace_cb_query_response_func_type* fptr) 700ae8c6e27Sflorian { 701ae8c6e27Sflorian #ifdef CLIENT_SUBNET 702ae8c6e27Sflorian if(fptr == &ecs_query_response) 703ae8c6e27Sflorian return 1; 704ae8c6e27Sflorian #else 705ae8c6e27Sflorian (void)fptr; 706ae8c6e27Sflorian #endif 707d500c338Sflorian #ifdef WITH_PYTHONMODULE 708d500c338Sflorian if(fptr == &python_inplace_cb_query_response) 709d500c338Sflorian return 1; 710d500c338Sflorian #endif 711e47fef9eSflorian #ifdef WITH_DYNLIBMODULE 712e47fef9eSflorian if(fptr == &dynlib_inplace_cb_query_response) 713e47fef9eSflorian return 1; 714e47fef9eSflorian #endif 715ae8c6e27Sflorian return 0; 716ae8c6e27Sflorian } 717da8c8390Sflorian 718d32eb43cSflorian int fptr_whitelist_serve_expired_lookup(serve_expired_lookup_func_type* fptr) 719d32eb43cSflorian { 720d32eb43cSflorian if(fptr == &mesh_serve_expired_lookup) 721d32eb43cSflorian return 1; 722d32eb43cSflorian return 0; 723d32eb43cSflorian } 724