/src/proftpd/src/bindings.c

Source
/*
 * ProFTPD - FTP server daemon
 * Copyright (c) 2001-2026 The ProFTPD Project team
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, see <https://www.gnu.org/licenses/>.
 *
 * As a special exemption, The ProFTPD Project team and other respective
 * copyright holders give permission to link this program with OpenSSL, and
 * distribute the resulting executable, without including the source code for
 * OpenSSL in the source distribution.
 */

/* Routines to work with ProFTPD bindings. */

#include "conf.h"

/* From src/dirtree.c */
extern xaset_t *server_list;
extern server_rec *main_server;

static pr_ipbind_t *ipbind_table[PR_BINDINGS_TABLE_SIZE];
static int ipbind_table_initialized = FALSE;

static pool *binding_pool = NULL;
static pr_ipbind_t *ipbind_default_server = NULL,
  *ipbind_localhost_server = NULL;

static const char *trace_channel = "binding";

static unsigned int process_serveralias(server_rec *s);
static void trace_ipbind_table(void);

static void init_ipbind_table(void) {
  if (ipbind_table_initialized == TRUE) {
    return;
  }

  memset(ipbind_table, 0, sizeof(ipbind_table));
  ipbind_table_initialized = TRUE;
}

/* Server cleanup callback function */
static void server_cleanup_cb(void *conn) {
  *((conn_t **) conn) = NULL;
}

/* The hashing function for the hash table of bindings.  This algorithm
 * is stolen from Apache's http_vhost.c
 */
static unsigned int ipbind_hash_addr(const pr_netaddr_t *addr,
    unsigned int port) {
  size_t offset;
  unsigned int key, idx;

  offset = pr_netaddr_get_inaddr_len(addr);

  /* The key is the last four bytes of the IP address.
   * For IPv4, this is the entire address, as always.
   * For IPv6, this is usually part of the MAC address.
   */
  key = *(unsigned *) ((char *) pr_netaddr_get_inaddr(addr) + offset - 4);

  /* Add in the port number, to give better spread of key values when many
   * different port values are used.
   */
  key += port;

  key ^= (key >> 16);
  idx = ((key >> 8) ^ key) % PR_BINDINGS_TABLE_SIZE;
  return idx;
}

static pool *listening_conn_pool = NULL;
static xaset_t *listening_conn_list = NULL;
struct listener_rec {
  struct listener_rec *next, *prev;

  pool *pool;
  const pr_netaddr_t *addr;
  unsigned int port;
  conn_t *conn;
  int claimed;
};

conn_t *pr_ipbind_get_listening_conn(server_rec *server,
    const pr_netaddr_t *addr, unsigned int port) {
  conn_t *l, *sl;
  pool *p;
  struct listener_rec *lr;

  if (listening_conn_list) {
    for (lr = (struct listener_rec *) listening_conn_list->xas_list; lr;
        lr = lr->next) {
      int use_elt = FALSE;

      pr_signals_handle();

      if (addr != NULL &&
          lr->addr != NULL) {
        const char *lr_ipstr = NULL;

        lr_ipstr = pr_netaddr_get_ipstr(lr->addr);

        /* Note: lr_ipstr should never be null.  If it is, it means that
         * the lr->addr object never had its IP address resolved/stashed,
         * and in attempting to do, getnameinfo(3) failed for some reason.
         *
         * The IP address on which it's listening, if not available via
         * lr->addr, should thus be available via lr->conn->local_addr.
         */

        if (lr_ipstr == NULL &&
            lr->conn != NULL) {
          lr_ipstr = pr_netaddr_get_ipstr(lr->conn->local_addr);
        }

        if (lr_ipstr != NULL) {
          if (strcmp(pr_netaddr_get_ipstr(addr), lr_ipstr) == 0 &&
              port == lr->port) {
            use_elt = TRUE;
          }
        }

      } else if (addr == NULL &&
                 port == lr->port) {
        use_elt = TRUE;
      }

      if (use_elt == TRUE) {
        lr->claimed = TRUE;
        return lr->conn;
      }
    }
  }

  if (listening_conn_pool == NULL) {
    listening_conn_pool = make_sub_pool(permanent_pool);
    pr_pool_tag(listening_conn_pool, "Listening Connection Pool");

    listening_conn_list = xaset_create(listening_conn_pool, NULL);
  }

  p = make_sub_pool(listening_conn_pool);
  pr_pool_tag(p, "Listening conn subpool");

  l = pr_inet_create_conn(p, -1, addr, port, FALSE);
  if (l == NULL) {
    return NULL;
  }

  /* Inform any interested listeners that this socket was opened.  In order
   * to convey the discovered conn_t `l` to the event listener, we set it
   * on the server `s` temporarily.
   */
  sl = server->listen;
  server->listen = l;
  pr_inet_generate_socket_event("core.ctrl-listen", server, l->local_addr,
    l->listen_fd);
  server->listen = sl;

  lr = pcalloc(p, sizeof(struct listener_rec));
  lr->pool = p;
  lr->conn = l;
  lr->addr = pr_netaddr_dup(p, addr);
  if (lr->addr == NULL &&
      errno != EINVAL) {
    return NULL;
  }
  lr->port = port;
  lr->claimed = TRUE;

  xaset_insert(listening_conn_list, (xasetmember_t *) lr);
  return l;
}

/* Slight (clever?) optimization: the loop in server_loop() always
 * calls pr_ipbind_listen(), selects, then pr_ipbind_accept_conn().  Now,
 * rather than having both pr_ipbind_listen() and pr_ipbind_accept_conn()
 * scan the entire ipbind table looking for matches, what if pr_ipbind_listen
 * kept track of which listeners (connt_s) it used, so that
 * pr_ipbind_accept_conn() need merely check those listeners, rather than
 * scanning the entire table itself?
 */

static array_header *listener_list = NULL;

conn_t *pr_ipbind_accept_conn(fd_set *readfds, int *listenfd) {
  conn_t **listeners = listener_list->elts;
  register unsigned int i = 0;

  if (readfds == NULL ||
      listenfd == NULL) {
    errno = EINVAL;
    return NULL;
  }

  for (i = 0; i < listener_list->nelts; i++) {
    conn_t *listener = listeners[i];

    pr_signals_handle();
    if (FD_ISSET(listener->listen_fd, readfds) &&
        listener->mode == CM_LISTEN) {
      int fd = pr_inet_accept_nowait(listener->pool, listener);

      if (fd == -1) {
        int xerrno = errno;

        /* Handle errors gracefully.  If we're here, then
         * ipbind->ib_server->listen contains either error information, or
         * we just got caught in a blocking condition.
         */
        if (listener->mode == CM_ERROR) {

          /* Ignore ECONNABORTED, as they tend to be health checks/probes by
           * e.g. load balancers and other naive TCP clients.
           */
          if (listener->xerrno != ECONNABORTED) {
            pr_log_pri(PR_LOG_ERR, "error: unable to accept an incoming "
              "connection: %s", strerror(listener->xerrno));
          }

          listener->xerrno = 0;
          listener->mode = CM_LISTEN;

          errno = xerrno;
          return NULL;
        }
      }

      *listenfd = fd;
      return listener;
    }
  }

  errno = ENOENT;
  return NULL;
}

int pr_ipbind_add_binds(server_rec *serv) {
  int res = 0;
  config_rec *c = NULL;
  conn_t *listen_conn = NULL;
  const pr_netaddr_t *addr = NULL;

  if (serv == NULL) {
    errno = EINVAL;
    return -1;
  }

  c = find_config(serv->conf, CONF_PARAM, "_bind_", FALSE);
  while (c != NULL) {
    listen_conn = NULL;

    pr_signals_handle();

    addr = pr_netaddr_get_addr(serv->pool, c->argv[0], NULL);
    if (addr == NULL) {
      pr_log_pri(PR_LOG_WARNING,
       "notice: unable to determine IP address of '%s'", (char *) c->argv[0]);
      c = find_config_next(c, c->next, CONF_PARAM, "_bind_", FALSE);
      continue;
    }

    /* If the SocketBindTight directive is in effect, create a separate
     * listen socket for this address, and add it to the binding list.
     */
    if (SocketBindTight &&
        serv->ServerPort) {
      listen_conn = pr_ipbind_get_listening_conn(serv, addr, serv->ServerPort);
      if (listen_conn == NULL) {
        return -1;
      }

      res = pr_ipbind_create(serv, addr, serv->ServerPort);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
          __LINE__, serv->ServerAddress, serv->ServerPort, strerror(errno));
      }

      res = pr_ipbind_open(addr, serv->ServerPort, listen_conn, FALSE, FALSE,
        TRUE);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
          pr_netaddr_get_ipstr(addr), strerror(errno));
      }

    } else {
      res = pr_ipbind_create(serv, addr, serv->ServerPort);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
          __LINE__, serv->ServerAddress, serv->ServerPort, strerror(errno));
      }

      res = pr_ipbind_open(addr, serv->ServerPort, serv->listen, FALSE, FALSE,
        TRUE);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
          pr_netaddr_get_ipstr(addr), strerror(errno));
      }
    }

    c = find_config_next(c, c->next, CONF_PARAM, "_bind_", FALSE);
  }

  return 0;
}

int pr_ipbind_close(const pr_netaddr_t *addr, unsigned int port,
    unsigned char close_namebinds) {
  register unsigned int i = 0;

  if (addr != NULL) {
    pr_ipbind_t *ipbind = NULL;
    unsigned char have_ipbind = FALSE;

    i = ipbind_hash_addr(addr, port);

    if (ipbind_table[i] == NULL) {
      pr_log_pri(PR_LOG_NOTICE, "notice: no ipbind found for %s:%d",
        pr_netaddr_get_ipstr(addr), port);
      errno = ENOENT;
      return -1;
    }

    for (ipbind = ipbind_table[i]; ipbind; ipbind = ipbind->ib_next) {
      pr_signals_handle();

      if (pr_netaddr_cmp(ipbind->ib_addr, addr) == 0 &&
          (!ipbind->ib_port || ipbind->ib_port == port)) {
        have_ipbind = TRUE;
        break;
      }
    }

    if (have_ipbind == FALSE) {
      pr_log_pri(PR_LOG_NOTICE, "notice: no ipbind found for %s:%d",
        pr_netaddr_get_ipstr(addr), port);
      errno = ENOENT;
      return -1;
    }

    /* If already closed, exit now. */
    if (ipbind->ib_isactive == FALSE) {
      errno = EPERM;
      return -1;
    }

    /* Close the ipbinding's listen connection, if present.  The trick
     * here is determining whether this binding's listen member is
     * _the_ listening socket for the master daemon, or whether it's
     * been created for SocketBindTight, and can be closed.
     *
     * Actually, it's not that hard.  It's only _the_ listening socket
     * for the master daemon in inetd mode, in which case virtual servers
     * can't be shutdown via ftpdctl, anyway.
     */
    if (SocketBindTight &&
        ipbind->ib_listener != NULL) {
      pr_inet_close(ipbind->ib_server->pool, ipbind->ib_listener);
      ipbind->ib_listener = ipbind->ib_server->listen = NULL;
    }

    /* Mark this ipbind as inactive.  For SocketBindTight sockets, the
     * closing of the listening connection will suffice, from the clients'
     * point of view.  However, this covers the non-SocketBindTight case,
     * and will prevent this binding from returning its server_rec pointer
     * on future lookup requests via pr_ipbind_get_server().
     */
    ipbind->ib_isactive = FALSE;

    if (close_namebinds == TRUE &&
        ipbind->ib_namebinds != NULL) {
      register unsigned int j = 0;
      pr_namebind_t **namebinds = NULL;

      namebinds = (pr_namebind_t **) ipbind->ib_namebinds->elts;
      for (j = 0; j < ipbind->ib_namebinds->nelts; j++) {
        pr_namebind_t *nb;

        pr_signals_handle();

        nb = namebinds[j];
        if (pr_namebind_close(nb->nb_name, nb->nb_server->addr) < 0) {
          pr_trace_msg(trace_channel, 7,
            "notice: error closing namebind '%s' for address %s: %s",
            nb->nb_name, pr_netaddr_get_ipstr(nb->nb_server->addr),
            strerror(errno));
        }
      }
    }

  } else {
    /* A NULL addr has a special meaning: close _all_ ipbinds in the list. */
    for (i = 0; i < PR_BINDINGS_TABLE_SIZE; i++) {
      pr_ipbind_t *ipbind = NULL;

      pr_signals_handle();

      ipbind = ipbind_table[i];
      if (ipbind == NULL) {
        continue;
      }

      pr_trace_msg(trace_channel, 22,
        "found ipbind %p at index %u in table, closing", ipbind, i);

      for (; ipbind; ipbind = ipbind->ib_next) {
        if (SocketBindTight &&
            ipbind->ib_listener != NULL) {
          pr_inet_close(main_server->pool, ipbind->ib_listener);
          ipbind->ib_listener = ipbind->ib_server->listen = NULL;
        }

        /* Note: do not need to check if this ipbind was previously closed,
         * for the NULL addr is a request to shut down all ipbinds,
         * regardless of their current state.
         */
        ipbind->ib_isactive = FALSE;

        if (close_namebinds == TRUE &&
            ipbind->ib_namebinds != NULL) {
          register unsigned int j = 0;
          pr_namebind_t **namebinds = NULL;

          namebinds = (pr_namebind_t **) ipbind->ib_namebinds->elts;
          for (j = 0; j < ipbind->ib_namebinds->nelts; j++) {
            pr_namebind_t *nb;

            pr_signals_handle();

            nb = namebinds[j];
            if (pr_namebind_close(nb->nb_name, nb->nb_server->addr) < 0) {
              pr_trace_msg(trace_channel, 7,
                "notice: error closing namebind '%s' for address %s: %s",
                nb->nb_name, pr_netaddr_get_ipstr(nb->nb_server->addr),
               strerror(errno));
            }
          }
        }
      }
    }
  }

  return 0;
}

/* Need a way to close all listening fds in a child process. */
int pr_ipbind_close_listeners(void) {
  conn_t **listeners;
  register unsigned int i = 0;

  if (listener_list == NULL ||
      listener_list->nelts == 0) {
    return 0;
  }

  listeners = listener_list->elts;
  for (i = 0; i < listener_list->nelts; i++) {
    conn_t *listener;

    pr_signals_handle();

    listener = listeners[i];
    if (listener->listen_fd != -1) {
      (void) close(listener->listen_fd);
      listener->listen_fd = -1;
    }
  }

  return 0;
}

int pr_ipbind_create(server_rec *server, const pr_netaddr_t *addr,
    unsigned int port) {
  pr_ipbind_t *existing = NULL, *ipbind = NULL;
  register unsigned int i = 0;

  if (server == NULL||
      addr == NULL) {
    errno = EINVAL;
    return -1;
  }

  /* Ensure the ipbind table has been initialized. */
  init_ipbind_table();

  i = ipbind_hash_addr(addr, port);
  pr_trace_msg(trace_channel, 29, "hashed address '%s' to index %u",
    pr_netaddr_get_ipstr(addr), i);

  /* Make sure the address is not already in use */
  for (ipbind = ipbind_table[i]; ipbind; ipbind = ipbind->ib_next) {
    pr_signals_handle();

    if (pr_netaddr_cmp(ipbind->ib_addr, addr) == 0 &&
        ipbind->ib_port == port) {
      existing = ipbind;
      break;
    }
  }

  if (existing != NULL) {
    config_rec *c;

    /* If the given server config does not have any ServerAlias directives,
     * then this is an IP/port collision, and we need to return an error.
     *
     * However, if there are ServerAliases, this is a name-based config and
     * should be processed properly.
     */

    c = find_config(server->conf, CONF_PARAM, "ServerAlias", FALSE);
    if (c == NULL) {
      pr_log_pri(PR_LOG_WARNING, "notice: '%s' (%s:%u) already bound to '%s'",
        server->ServerName, pr_netaddr_get_ipstr(addr), port,
        existing->ib_server->ServerName);
      errno = EADDRINUSE;
      return -1;
    }

    pr_log_debug(DEBUG9, "notice: '%s' (%s:%u) already bound to '%s'",
      server->ServerName, pr_netaddr_get_ipstr(addr), port,
      existing->ib_server->ServerName);
  }

  if (binding_pool == NULL) {
    binding_pool = make_sub_pool(permanent_pool);
    pr_pool_tag(binding_pool, "Bindings Pool");
  }

  ipbind = pcalloc(server->pool, sizeof(pr_ipbind_t));
  ipbind->ib_server = server;
  ipbind->ib_addr = addr;
  ipbind->ib_port = port;
  ipbind->ib_namebinds = NULL;
  ipbind->ib_isdefault = FALSE;
  ipbind->ib_islocalhost = FALSE;
  ipbind->ib_isactive = FALSE;

  pr_trace_msg(trace_channel, 8, "created ipbind %p for %s#%u, server %p (%s)",
    ipbind, pr_netaddr_get_ipstr(ipbind->ib_addr), ipbind->ib_port,
    ipbind->ib_server, ipbind->ib_server->ServerName);

  /* Add the ipbind to the table, maintaining insertion order. */
  if (existing != NULL) {
    pr_trace_msg(trace_channel, 19,
      "found existing ipbind %p (server %p) at index %u in iptable table, "
      "adding to %p", existing, existing->ib_server, i, existing);
    if (existing->ib_next != NULL) {
      ipbind->ib_next = existing->ib_next;
    }
    existing->ib_next = ipbind;

  } else {
    if (ipbind_table[i] != NULL) {
      ipbind->ib_next = ipbind_table[i];
    }
    ipbind_table[i] = ipbind;
  }

  return 0;
}

/* Returns the LAST matching ipbind for the given port, if any.  If provided,
 * the match_count pointer will contain the number of ipbinds found that
 * matched that port.
 */
static pr_ipbind_t *ipbind_find_port(unsigned int port,
    unsigned char skip_inactive, unsigned int *match_count) {
  register unsigned int i;
  pr_ipbind_t *matched_ipbind = NULL;

  for (i = 0; i < PR_BINDINGS_TABLE_SIZE; i++) {
    pr_ipbind_t *ipbind;

    for (ipbind = ipbind_table[i]; ipbind; ipbind = ipbind->ib_next) {
      pr_signals_handle();

      if (skip_inactive &&
          !ipbind->ib_isactive) {
        continue;
      }

      if (ipbind->ib_port == port) {
        if (match_count != NULL) {
          (*match_count)++;
        }

        matched_ipbind = ipbind;
      }
    }
  }

  if (matched_ipbind == NULL) {
    errno = ENOENT;
    return NULL;
  }

  return matched_ipbind;
}

pr_ipbind_t *pr_ipbind_find(const pr_netaddr_t *addr, unsigned int port,
    unsigned char skip_inactive) {
  register unsigned int i;
  pr_ipbind_t *ipbind = NULL;

  if (addr == NULL) {
    errno = EINVAL;
    return NULL;
  }

  /* Ensure the ipbind table has been initialized. */
  init_ipbind_table();

  i = ipbind_hash_addr(addr, port);

  for (ipbind = ipbind_table[i]; ipbind; ipbind = ipbind->ib_next) {
    pr_signals_handle();

    if (ipbind->ib_isactive == FALSE &&
        skip_inactive == TRUE) {
      continue;
    }

    if (pr_netaddr_cmp(ipbind->ib_addr, addr) == 0) {
      if (ipbind->ib_port == 0 ||
          port == 0 ||
          ipbind->ib_port == port) {
        return ipbind;
      }
    }
  }

  errno = ENOENT;
  return NULL;
}

pr_ipbind_t *pr_ipbind_get(pr_ipbind_t *prev) {
  static unsigned int i = 0;

  if (prev != NULL) {
    /* If there's another ipbind in this chain, simply return that. */
    if (prev->ib_next != NULL) {
      return prev->ib_next;
    }

    /* If the increment is at the maximum size, return NULL (no more chains
     * to be examined).
     */
    if (i == PR_BINDINGS_TABLE_SIZE) {
      errno = ENOENT;
      return NULL;
    }

    /* Increment the index. At this point, we know that the given pointer is
     * the last in the chain, and that there are more chains in the table
     * to be examined.
     */
    i++;

  } else {
    /* Reset the index if prev is NULL. */
    i = 0;
  }

  /* Search for the next non-empty chain in the table. */
  for (; i < PR_BINDINGS_TABLE_SIZE; i++) {
    pr_signals_handle();

    if (ipbind_table[i] != NULL) {
      return ipbind_table[i];
    }
  }

  errno = ENOENT;
  return NULL;
}

server_rec *pr_ipbind_get_server(const pr_netaddr_t *addr, unsigned int port) {
  pr_ipbind_t *ipbind = NULL;
  pr_netaddr_t wildcard_addr;
  int addr_family;
  unsigned int match_count = 0;

  /* If we've got a binding configured for this exact address, return it
   * straight away.
   */
  ipbind = pr_ipbind_find(addr, port, TRUE);
  if (ipbind != NULL) {
    pr_trace_msg(trace_channel, 22,
      "matching ipbind %p found for %s#%u, using '%s'", ipbind,
      pr_netaddr_get_ipstr(addr), port, ipbind->ib_server->ServerName);
    pr_log_debug(DEBUG7, "matching vhost found for %s#%u, using '%s'",
      pr_netaddr_get_ipstr(addr), port, ipbind->ib_server->ServerName);
    return ipbind->ib_server;
  }

  /* Look for a vhost bound to the wildcard address (i.e. INADDR_ANY).
   *
   * This allows for "<VirtualHost 0.0.0.0>" configurations, where the
   * IP address to which the client might connect is not known at
   * configuration time.  (Usually happens when the same config file
   * is deployed to multiple machines.)
   */

  addr_family = pr_netaddr_get_family(addr);

  pr_netaddr_clear(&wildcard_addr);
  pr_netaddr_set_family(&wildcard_addr, addr_family);
  pr_netaddr_set_sockaddr_any(&wildcard_addr);

  ipbind = pr_ipbind_find(&wildcard_addr, port, TRUE);
  if (ipbind != NULL) {
    pr_trace_msg(trace_channel, 22, "no matching ipbind found for %s#%u, using "
      "'%s' listening on wildcard ipbind %p", pr_netaddr_get_ipstr(addr), port,
      ipbind->ib_server->ServerName, ipbind);
    pr_log_debug(DEBUG7, "no matching vhost found for %s#%u, using "
      "'%s' listening on wildcard address", pr_netaddr_get_ipstr(addr), port,
      ipbind->ib_server->ServerName);
    return ipbind->ib_server;
  }

#if defined(PR_USE_IPV6)
  if (addr_family == AF_INET6 &&
      pr_netaddr_use_ipv6()) {

    /* The pr_ipbind_find() probably returned NULL because there aren't any
     * <VirtualHost> sections configured explicitly for the wildcard IPv6
     * address of "::", just the IPv4 wildcard "0.0.0.0" address.
     *
     * So try the pr_ipbind_find() again, this time using the IPv4
     * wildcard.
     */
    pr_netaddr_clear(&wildcard_addr);
    pr_netaddr_set_family(&wildcard_addr, AF_INET);
    pr_netaddr_set_sockaddr_any(&wildcard_addr);

    ipbind = pr_ipbind_find(&wildcard_addr, port, TRUE);
    if (ipbind != NULL) {
      pr_log_debug(DEBUG7, "no matching vhost found for %s#%u, using "
        "'%s' listening on wildcard address", pr_netaddr_get_ipstr(addr),
        port, ipbind->ib_server->ServerName);
      return ipbind->ib_server;
    }
  }
#endif /* PR_USE_IPV6 */

  /* Check for any bindings that match the port.  IF there is only one ONE
   * vhost which matches the requested port, use that (Bug#4251).
   */
  ipbind = ipbind_find_port(port, TRUE, &match_count);
  if (ipbind != NULL) {
    pr_trace_msg(trace_channel, 18, "found %u possible %s for port %u",
      match_count, match_count != 1 ? "ipbinds" : "ipbind", port);
    if (match_count == 1) {
      return ipbind->ib_server;
    }
  }

  /* Use the default server, if set. */
  if (ipbind_default_server != NULL &&
      ipbind_default_server->ib_isactive) {
    pr_trace_msg(trace_channel, 22, "no matching ipbind found for %s#%u, using "
      "DefaultServer '%s' (%p)", pr_netaddr_get_ipstr(addr), port,
      ipbind_default_server->ib_server->ServerName, ipbind_default_server);
    pr_log_debug(DEBUG7, "no matching vhost found for %s#%u, using "
      "DefaultServer '%s'", pr_netaddr_get_ipstr(addr), port,
      ipbind_default_server->ib_server->ServerName);
    return ipbind_default_server->ib_server;
  }

  /* Not found in binding list, and no DefaultServer, so see if it's the
   * loopback address
   */
  if (pr_netaddr_is_loopback(addr) &&
      ipbind_localhost_server != NULL &&
      ipbind_localhost_server->ib_isactive) {
    pr_trace_msg(trace_channel, 22, "no matching ipbind found for %s#%u, using "
      "loopback ipbind %p", pr_netaddr_get_ipstr(addr), port,
      ipbind_localhost_server);
    return ipbind_localhost_server->ib_server;
  }

  return NULL;
}

int pr_ipbind_listen(fd_set *readfds) {
  int listen_flags = PR_INET_LISTEN_FL_FATAL_ON_ERROR, maxfd = 0;
  register unsigned int i = 0;

  /* sanity check */
  if (readfds == NULL) {
    errno = EINVAL;
    return -1;
  }

  FD_ZERO(readfds);

  if (binding_pool == NULL) {
    binding_pool = make_sub_pool(permanent_pool);
    pr_pool_tag(binding_pool, "Bindings Pool");
  }

  /* Reset the listener list. */
  if (listener_list == NULL) {
    listener_list = make_array(binding_pool, 1, sizeof(conn_t *));

  } else {
    /* Nasty hack to "clear" the list by making it think it has no
     * elements.
     */
    listener_list->nelts = 0;
  }

  /* Slower than the hash lookup, but...we have to check each and every
   * ipbind in the table.
   */
  for (i = 0; i < PR_BINDINGS_TABLE_SIZE; i++) {
    pr_ipbind_t *ipbind = NULL;

    for (ipbind = ipbind_table[i]; ipbind; ipbind = ipbind->ib_next) {
      pr_signals_handle();

      /* Skip inactive bindings, but only if SocketBindTight is in effect. */
      if (SocketBindTight &&
          ipbind->ib_isactive == FALSE) {
        continue;
      }

      if (ipbind->ib_listener != NULL) {
        if (ipbind->ib_listener->mode == CM_NONE) {
          pr_inet_listen(ipbind->ib_listener->pool, ipbind->ib_listener,
            tcpBackLog, listen_flags);
        }

        if (ipbind->ib_listener->mode == CM_ACCEPT) {
          if (pr_inet_resetlisten(ipbind->ib_listener->pool,
              ipbind->ib_listener) < 0) {
            pr_trace_msg(trace_channel, 3,
              "error resetting %s#%u for listening: %s",
              pr_netaddr_get_ipstr(ipbind->ib_addr), ipbind->ib_port,
              strerror(errno));
          }
        }

        if (ipbind->ib_listener->mode == CM_LISTEN) {
          FD_SET(ipbind->ib_listener->listen_fd, readfds);
          if (ipbind->ib_listener->listen_fd > maxfd) {
            maxfd = ipbind->ib_listener->listen_fd;
          }

          /* Add this to the listener list as well. */
          *((conn_t **) push_array(listener_list)) = ipbind->ib_listener;
        }
      }
    }
  }

  return maxfd;
}

int pr_ipbind_open(const pr_netaddr_t *addr, unsigned int port,
    conn_t *listen_conn, unsigned char isdefault, unsigned char islocalhost,
    unsigned char open_namebinds) {
  pr_ipbind_t *ipbind = NULL;

  if (addr == NULL) {
    errno = EINVAL;
    return -1;
  }

  /* Find the binding for this server/address */
  ipbind = pr_ipbind_find(addr, port, FALSE);
  if (ipbind == NULL) {
    errno = ENOENT;
    return -1;
  }

  if (listen_conn != NULL) {
    listen_conn->next = NULL;
  }

  ipbind->ib_listener = ipbind->ib_server->listen = listen_conn;
  ipbind->ib_listener = listen_conn;
  ipbind->ib_isdefault = isdefault;
  ipbind->ib_islocalhost = islocalhost;

  /* Stash a pointer to this ipbind, since it is designated as the
   * default server (via the DefaultServer directive), for use in the
   * lookup functions.
   *
   * Stash pointers to this ipbind for use in the lookup functions if:
   *
   * - It's the default server (specified via the DefaultServer directive)
   * - It handles connections to the loopback interface
   */
  if (isdefault) {
    ipbind_default_server = ipbind;
  }

  if (islocalhost) {
    ipbind_localhost_server = ipbind;
  }

  /* If requested, look for any namebinds for this ipbind, and open them. */
  if (open_namebinds &&
      ipbind->ib_namebinds) {
    register unsigned int i = 0;
    pr_namebind_t **namebinds = NULL;

    /* NOTE: in the future, these namebinds may need to be stored/
     * manipulated in hash tables themselves, but, for now, linked lists
     * should suffice.
     */
    namebinds = (pr_namebind_t **) ipbind->ib_namebinds->elts;
    for (i = 0; i < ipbind->ib_namebinds->nelts; i++) {
      int res;
      pr_namebind_t *nb;

      pr_signals_handle();

      nb = namebinds[i];
      res = pr_namebind_open(nb->nb_name, nb->nb_server->addr,
        nb->nb_server_port);
      if (res < 0) {
        pr_trace_msg(trace_channel, 2,
          "notice: unable to open namebind '%s': %s", nb->nb_name,
          strerror(errno));
      }
    }
  }

  /* Mark this binding as now being active. */
  ipbind->ib_isactive = TRUE;

  return 0;
}

int pr_namebind_close(const char *name, const pr_netaddr_t *addr) {
  pr_namebind_t *namebind = NULL;
  unsigned int port;

  if (name == NULL||
      addr == NULL) {
    errno = EINVAL;
    return -1;
  }

  port = ntohs(pr_netaddr_get_port(addr));
  namebind = pr_namebind_find(name, addr, port, FALSE);
  if (namebind == NULL) {
    errno = ENOENT;
    return -1;
  }

  namebind->nb_isactive = FALSE;
  return 0;
}

int pr_namebind_create(server_rec *server, const char *name,
    pr_ipbind_t *ipbind, const pr_netaddr_t *addr, unsigned int server_port) {
  pr_namebind_t *namebind = NULL, **namebinds = NULL;
  unsigned int port;

  if (server == NULL ||
      name == NULL) {
    errno = EINVAL;
    return -1;
  }

  /* First, find the ipbind to hold this namebind. */
  port = ntohs(pr_netaddr_get_port(addr));
  if (port == 0) {
    port = server_port;
  }

  if (ipbind == NULL) {
    pr_netaddr_t wildcard_addr;
    int addr_family;

    /* If not found, look for the wildcard address. */

    addr_family = pr_netaddr_get_family(addr);
    pr_netaddr_clear(&wildcard_addr);
    pr_netaddr_set_family(&wildcard_addr, addr_family);
    pr_netaddr_set_sockaddr_any(&wildcard_addr);

    ipbind = pr_ipbind_find(&wildcard_addr, port, FALSE);
#if defined(PR_USE_IPV6)
    if (ipbind == FALSE &&
        addr_family == AF_INET6 &&
        pr_netaddr_use_ipv6()) {

      /* No IPv6 wildcard address found; try the IPv4 wildcard address. */
      pr_netaddr_clear(&wildcard_addr);
      pr_netaddr_set_family(&wildcard_addr, AF_INET);
      pr_netaddr_set_sockaddr_any(&wildcard_addr);

      ipbind = pr_ipbind_find(&wildcard_addr, port, FALSE);
    }
#endif /* PR_USE_IPV6 */

    pr_trace_msg(trace_channel, 19,
      "found wildcard ipbind %p for namebind (name '%s', addr %s, port %u)",
      ipbind, name, pr_netaddr_get_ipstr(addr), port);
  }

  if (ipbind == NULL) {
    errno = ENOENT;
    return -1;
  }

  /* Make sure we can add this namebind. */
  if (ipbind->ib_namebinds == NULL) {
    ipbind->ib_namebinds = make_array(binding_pool, 0, sizeof(pr_namebind_t *));

  } else {
    register unsigned int i = 0;
    namebinds = (pr_namebind_t **) ipbind->ib_namebinds->elts;

    /* See if there is already a namebind for the given name. */
    for (i = 0; i < ipbind->ib_namebinds->nelts; i++) {
      pr_signals_handle();

      namebind = namebinds[i];
      if (namebind != NULL &&
          namebind->nb_name != NULL) {

        /* DNS names are case-insensitive, hence the case-insensitive check
         * here.
         *
         * XXX Ideally, we should check whether any existing namebinds which
         * are globs will match the newly added namebind as well.
         */

        if (strcasecmp(namebind->nb_name, name) == 0) {
          errno = EEXIST;
          return -1;
        }
      }
    }
  }

  namebind = (pr_namebind_t *) pcalloc(server->pool, sizeof(pr_namebind_t));
  namebind->nb_name = name;
  namebind->nb_server = server;
  namebind->nb_server_port = server_port;
  namebind->nb_isactive = FALSE;

  if (pr_str_is_fnmatch(name) == TRUE) {
    namebind->nb_iswildcard = TRUE;
  }

  pr_trace_msg(trace_channel, 8,
    "created namebind '%s' for %s#%u, server '%s' [%p]", name,
    pr_netaddr_get_ipstr(server->addr), server->ServerPort, server->ServerName,
    server);

  /* The given server should already have the following populated:
   *
   *  server->ServerName
   *  server->ServerAddress
   *  server->ServerFQDN
   */

  *((pr_namebind_t **) push_array(ipbind->ib_namebinds)) = namebind;
  return 0;
}

pr_namebind_t *pr_namebind_find(const char *name, const pr_netaddr_t *addr,
    unsigned int port, unsigned char skip_inactive) {
  pr_ipbind_t *ipbind = NULL, *iter;

  if (name == NULL ||
      addr == NULL) {
    errno = EINVAL;
    return NULL;
  }

  /* First, find an active ipbind for the given address. */
  ipbind = pr_ipbind_find(addr, port, skip_inactive);
  if (ipbind == NULL) {
    pr_netaddr_t wildcard_addr;
    int addr_family;

    /* If not found, look for the wildcard address. */

    addr_family = pr_netaddr_get_family(addr);
    pr_netaddr_clear(&wildcard_addr);
    pr_netaddr_set_family(&wildcard_addr, addr_family);
    pr_netaddr_set_sockaddr_any(&wildcard_addr);

    ipbind = pr_ipbind_find(&wildcard_addr, port, FALSE);
#if defined(PR_USE_IPV6)
    if (ipbind == FALSE &&
        addr_family == AF_INET6 &&
        pr_netaddr_use_ipv6()) {

      /* No IPv6 wildcard address found; try the IPv4 wildcard address. */
      pr_netaddr_clear(&wildcard_addr);
      pr_netaddr_set_family(&wildcard_addr, AF_INET);
      pr_netaddr_set_sockaddr_any(&wildcard_addr);

      ipbind = pr_ipbind_find(&wildcard_addr, port, FALSE);
    }
#endif /* PR_USE_IPV6 */
  } else {
    pr_trace_msg(trace_channel, 17,
      "found ipbind %p (server '%s' [%p]) for %s#%u", ipbind,
      ipbind->ib_server->ServerName, ipbind->ib_server,
      pr_netaddr_get_ipstr(addr), port);
  }

  if (ipbind == NULL) {
    errno = ENOENT;
    return NULL;
  }

  /* Now we need to search this ipbind list, to see if any of them have a
   * matching namebind.
   */

  for (iter = ipbind; iter; iter = iter->ib_next) {
    register unsigned int i = 0;
    pr_namebind_t *namebind = NULL, **namebinds = NULL;

    pr_signals_handle();

    if (iter->ib_namebinds == NULL) {
      pr_trace_msg(trace_channel, 17,
        "ipbind %p (server %p) for %s#%u has no namebinds", iter,
        iter->ib_server, pr_netaddr_get_ipstr(addr), port);
      continue;
    }

    namebinds = (pr_namebind_t **) iter->ib_namebinds->elts;
    pr_trace_msg(trace_channel, 17,
      "ipbind %p (server %p) for %s#%u has namebinds (%d)", iter,
      iter->ib_server, pr_netaddr_get_ipstr(addr), port,
      iter->ib_namebinds->nelts);

    for (i = 0; i < iter->ib_namebinds->nelts; i++) {
      pr_signals_handle();

      namebind = namebinds[i];
      if (namebind == NULL) {
        continue;
      }

      /* Skip inactive namebinds */
      if (skip_inactive == TRUE &&
          namebind->nb_isactive == FALSE) {
        pr_trace_msg(trace_channel, 17,
          "namebind #%u: %s is inactive, skipping", i, namebind->nb_name);
        continue;
      }

      /* At present, this looks for an exactly matching name.  In the future,
       * we may want to have something like Apache's matching scheme, which
       * looks for the most specific domain to the most general.  Note that
       * that scheme, however, is specific to DNS; should any other naming
       * scheme be desired, that sort of matching will be unnecessary.
       */
      if (namebind->nb_name != NULL) {
        pr_trace_msg(trace_channel, 17,
          "namebind #%u: %s (%s)", i, namebind->nb_name,
          namebind->nb_isactive ? "active" : "inactive");

        if (namebind->nb_iswildcard == FALSE) {
          if (strcasecmp(namebind->nb_name, name) == 0) {
            return namebind;
          }

        } else {
          int match_flags = PR_FNM_NOESCAPE|PR_FNM_CASEFOLD;

          if (pr_fnmatch(namebind->nb_name, name, match_flags) == 0) {
            pr_trace_msg(trace_channel, 9,
              "matched name '%s' against pattern '%s'", name,
              namebind->nb_name);
            return namebind;
          }

          pr_trace_msg(trace_channel, 9,
            "failed to match name '%s' against pattern '%s'", name,
            namebind->nb_name);
        }
      }
    }
  }

  return NULL;
}

server_rec *pr_namebind_get_server(const char *name, const pr_netaddr_t *addr,
    unsigned int port) {
  pr_namebind_t *namebind = NULL;

  /* Basically, just a wrapper around pr_namebind_find() */

  namebind = pr_namebind_find(name, addr, port, TRUE);
  if (namebind == NULL) {
    return NULL;
  }

  return namebind->nb_server;
}

unsigned int pr_namebind_count(server_rec *srv) {
  unsigned int count = 0;
  pr_ipbind_t *ipbind = NULL;

  if (srv == NULL) {
    return 0;
  }

  ipbind = pr_ipbind_find(srv->addr, srv->ServerPort, FALSE);
  if (ipbind != NULL &&
      ipbind->ib_namebinds != NULL) {
    count = ipbind->ib_namebinds->nelts;
  }

  return count;
}

int pr_namebind_open(const char *name, const pr_netaddr_t *addr,
    unsigned int server_port) {
  pr_namebind_t *namebind = NULL;
  unsigned int port;

  if (name == NULL ||
      addr == NULL) {
    errno = EINVAL;
    return -1;
  }

  port = ntohs(pr_netaddr_get_port(addr));
  if (port == 0) {
    port = server_port;
  }

  namebind = pr_namebind_find(name, addr, port, FALSE);
  if (namebind == NULL) {
    errno = ENOENT;
    return -1;
  }

  namebind->nb_isactive = TRUE;
  return 0;
}

void free_bindings(void) {
  if (binding_pool) {
    destroy_pool(binding_pool);
    binding_pool = NULL;
    listener_list = NULL;
  }

  memset(ipbind_table, 0, sizeof(ipbind_table));
  ipbind_table_initialized = FALSE;

  /* Mark all listening conns as "unclaimed"; any that remaining unclaimed
   * after init_bindings() can be closed.
   */
  if (listening_conn_list != NULL) {
    struct listener_rec *lr;

    for (lr = (struct listener_rec *) listening_conn_list->xas_list; lr; lr = lr->next) {
      pr_signals_handle();
      lr->claimed = FALSE;
    }
  }
}

static int init_inetd_bindings(void) {
  int res = 0;
  server_rec *serv = NULL;
  unsigned char *default_server = NULL, is_default = FALSE;

  /* We explicitly do NOT use the get_listening_conn() function here, since
   * inetd-run daemons will not a) handle restarts, and thus b) will not have
   * already-open connections to choose from.
   */

  main_server->listen = pr_inet_create_conn(main_server->pool, STDIN_FILENO,
    NULL, INPORT_ANY, FALSE);
  if (main_server->listen == NULL) {
    return -1;
  }

  /* Note: Since we are being called via inetd/xinetd, any socket options
   * which may be attempted by listeners for this event may not work.
   */
  pr_inet_generate_socket_event("core.ctrl-listen", main_server,
    main_server->addr, main_server->listen->listen_fd);

  /* Fill in all the important connection information. */
  if (pr_inet_get_conn_info(main_server->listen, STDIN_FILENO) == -1) {
    int xerrno = errno;

    pr_log_pri(PR_LOG_WARNING, "fatal: unable to get connection info: %s",
      strerror(xerrno));

    if (xerrno == ENOTSOCK) {
      pr_log_pri(PR_LOG_ERR, "(Running from command line? "
        "Use `ServerType standalone' in config file!)");
    }

    exit(1);
  }

  default_server = get_param_ptr(main_server->conf, "DefaultServer", FALSE);
  if (default_server != NULL &&
      *default_server == TRUE) {
    is_default = TRUE;
  }

  res = pr_ipbind_create(main_server, main_server->addr,
    main_server->ServerPort);
  if (res < 0) {
    pr_log_pri(PR_LOG_NOTICE,
      "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__, __LINE__,
      main_server->ServerAddress, main_server->ServerPort, strerror(errno));
  }

  res = pr_ipbind_open(main_server->addr, main_server->ServerPort,
    main_server->listen, is_default, TRUE, TRUE);
  if (res < 0) {
    pr_log_pri(PR_LOG_NOTICE,
      "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
      pr_netaddr_get_ipstr(main_server->addr), strerror(errno));
  }

  res = pr_ipbind_add_binds(main_server);
  if (res < 0) {
    pr_log_pri(PR_LOG_NOTICE,
      "%s:%d: notice: unable to add binds to ipbind '%s': %s", __FILE__,
      __LINE__, main_server->ServerAddress, strerror(errno));
  }

  (void) process_serveralias(main_server);

  /* Now attach the faked connection to all virtual servers. */
  for (serv = main_server->next; serv; serv = serv->next) {

    /* Because this server is sharing the connection with the
     * main server, we need a cleanup handler to remove
     * the server's reference when the original connection's
     * pool is destroyed.
     */

    serv->listen = main_server->listen;
    register_cleanup2(serv->listen->pool, &serv->listen, server_cleanup_cb);

    is_default = FALSE;
    default_server = get_param_ptr(serv->conf, "DefaultServer", FALSE);
    if (default_server != NULL &&
        *default_server == TRUE) {
      is_default = TRUE;
    }

    res = pr_ipbind_create(serv, serv->addr, serv->ServerPort);
    if (res < 0) {
      pr_log_pri(PR_LOG_NOTICE,
        "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
        __LINE__, serv->ServerAddress, serv->ServerPort, strerror(errno));
    }

    res = pr_ipbind_open(serv->addr, serv->ServerPort, serv->listen,
      is_default, FALSE, TRUE);
    if (res < 0) {
      pr_log_pri(PR_LOG_NOTICE,
        "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
        pr_netaddr_get_ipstr(serv->addr), strerror(errno));
    }

    res = pr_ipbind_add_binds(serv);
    if (res < 0) {
      pr_log_pri(PR_LOG_NOTICE,
        "%s:%d: notice: unable to add binds to ipbind '%s': %s", __FILE__,
        __LINE__, serv->ServerAddress, strerror(errno));
    }

    (void) process_serveralias(serv);
  }

  return 0;
}

static array_header *find_server_ipbinds(pool *p, server_rec *s) {
  register unsigned int i;
  array_header *ipbinds = NULL;

  for (i = 0; i < PR_BINDINGS_TABLE_SIZE; i++) {
    pr_ipbind_t *ipbind;

    for (ipbind = ipbind_table[i]; ipbind != NULL; ipbind = ipbind->ib_next) {
      pr_signals_handle();

      if (ipbind->ib_server == s) {
        if (ipbinds == NULL) {
          ipbinds = make_array(p, 16, sizeof(pr_ipbind_t *));
        }

        *((pr_ipbind_t **) push_array(ipbinds)) = ipbind;
      }
    }
  }

  return ipbinds;
}

static unsigned int process_serveralias(server_rec *s) {
  unsigned namebind_count = 0;
  config_rec *c;
  pr_ipbind_t *ipbind;
  array_header *ipbinds;
  pool *tmp_pool;

  /* If there is no ipbind already for this server, we cannot associate
   * any ServerAlias-based namebinds to it.
   *
   * Keep in mind that there may be multiple ipbinds pointed at this server:
   *
   *  <VirtualHost 1.2.3.4 5.6.7.8>
   *    ServerAlias alias
   *  </VirtualHost>
   *
   * And that multiple namebinds can point to the same ipbind for this server:
   *
   *  <VirtualHost 1.2.3.4>
   *    ServerAlias first
   *  </VirtualHost>
   *
   *  <VirtualHost 2.3.4.5>
   *    ServerAlias second
   *  </VirtualHost>
   */

  tmp_pool = make_sub_pool(s->pool);
  pr_pool_tag(tmp_pool, "ServerAlias Processing Pool");

  /* Remember that this will return cases where port is zero, too. */
  ipbind = pr_ipbind_find(s->addr, s->ServerPort, FALSE);
  if (ipbind != NULL &&
      ipbind->ib_server->ServerPort == s->ServerPort) {
    ipbinds = make_array(tmp_pool, 1, sizeof(pr_ipbind_t *));
    *((pr_ipbind_t **) push_array(ipbinds)) = ipbind;

  } else {
    ipbinds = find_server_ipbinds(tmp_pool, s);
    if (ipbinds == NULL) {
      destroy_pool(tmp_pool);
      return 0;
    }
  }

  c = find_config(s->conf, CONF_PARAM, "ServerAlias", FALSE);
  while (c != NULL) {
    register unsigned int i;
    int res;
    pr_ipbind_t **elts;

    pr_signals_handle();

    pr_trace_msg(trace_channel, 7, "handling ipbinds (%d) for ServerAlias '%s'",
      ipbinds->nelts, (char *) c->argv[0]);

    elts = ipbinds->elts;
    for (i = 0; i < ipbinds->nelts; i++) {
      pr_signals_handle();

      ipbind = elts[i];
      pr_trace_msg(trace_channel, 7, "adding ServerAlias '%s' to server '%s'",
        (char *) c->argv[0], s->ServerName);

      res = pr_namebind_create(s, c->argv[0], ipbind, s->addr, s->ServerPort);
      if (res == 0) {
        namebind_count++;

        res = pr_namebind_open(c->argv[0], ipbind->ib_addr, ipbind->ib_port);
        if (res < 0) {
          pr_trace_msg(trace_channel, 2,
            "notice: unable to open namebind '%s': %s", (char *) c->argv[0],
            strerror(errno));
        }

      } else {
        if (errno != ENOENT) {
          pr_trace_msg(trace_channel, 3,
            "unable to create namebind for '%s' to %s#%u: %s",
            (char *) c->argv[0], pr_netaddr_get_ipstr(ipbind->ib_addr),
            ipbind->ib_port, strerror(errno));
        }
      }
    }

    c = find_config_next(c, c->next, CONF_PARAM, "ServerAlias", FALSE);
  }

  destroy_pool(tmp_pool);
  return namebind_count;
}

static void trace_ipbind_table(void) {
  register unsigned int i;

  if (pr_trace_get_level(trace_channel) < 25) {
    return;
  }

  pr_trace_msg(trace_channel, 25, "displaying ipbind table:");
  for (i = 0; i < PR_BINDINGS_TABLE_SIZE; i++) {
    pr_ipbind_t *ipbind;

    pr_signals_handle();

    if (ipbind_table[i] == NULL) {
      continue;
    }

    pr_trace_msg(trace_channel, 25, "  index %u:", i);
    for (ipbind = ipbind_table[i]; ipbind; ipbind = ipbind->ib_next) {
      array_header *namebinds;

      pr_signals_handle();
      namebinds = ipbind->ib_namebinds;

      pr_trace_msg(trace_channel, 25, "    ipbind %p:", ipbind);
      pr_trace_msg(trace_channel, 25, "      address: %s#%u",
        pr_netaddr_get_ipstr(ipbind->ib_addr), ipbind->ib_port);
      pr_trace_msg(trace_channel, 25, "      server: %s (%p)",
        ipbind->ib_server->ServerName, ipbind->ib_server);
      pr_trace_msg(trace_channel, 25, "      active: %s",
        ipbind->ib_isactive ? "TRUE" : "FALSE");

      if (namebinds != NULL) {
        register unsigned int k;
        pr_namebind_t **elts;

        pr_trace_msg(trace_channel, 25, "      namebinds:");
        elts = namebinds->elts;
        for (k = 0; k < namebinds->nelts; k++) {
          pr_namebind_t *namebind;

          pr_signals_handle();
          namebind = elts[k];
          pr_trace_msg(trace_channel, 25, "      #%u: %p", k+1, namebind);
          pr_trace_msg(trace_channel, 25, "        name: %s",
            namebind->nb_server->ServerName);
          pr_trace_msg(trace_channel, 25, "        alias: %s",
            namebind->nb_name);
          pr_trace_msg(trace_channel, 25, "        server: %p",
            namebind->nb_server);
          pr_trace_msg(trace_channel, 25, "        active: %s",
            namebind->nb_isactive ? "TRUE" : "FALSE");
        }
      }
    }
  }
}

static int init_standalone_bindings(void) {
  int res = 0;
  server_rec *serv = NULL;
  unsigned char *default_server = NULL, is_default = FALSE;

  /* Ensure the ipbind table has been initialized. */
  init_ipbind_table();

  /* If a port is set to zero, the address/port is not bound to a socket
   * at all.
   */
  if (main_server->ServerPort > 0) {
    /* If SocketBindTight is off, then pr_inet_create_conn() will
     * create and bind to a wildcard socket.  However, should it be an
     * IPv4 or an IPv6 wildcard socket?
     */
    if (!SocketBindTight) {
#if defined(PR_USE_IPV6)
      if (pr_netaddr_use_ipv6()) {
        pr_inet_set_default_family(NULL, AF_INET6);

      } else {
        int default_family;

        default_family = pr_netaddr_get_family(main_server->addr);
        pr_inet_set_default_family(NULL, default_family);
      }
#else
      pr_inet_set_default_family(NULL,
        pr_netaddr_get_family(main_server->addr));
#endif /* PR_USE_IPV6 */
    }

    main_server->listen = pr_ipbind_get_listening_conn(main_server,
      (SocketBindTight ? main_server->addr : NULL), main_server->ServerPort);
    if (main_server->listen == NULL) {
      return -1;
    }

  } else {
    main_server->listen = NULL;
  }

  default_server = get_param_ptr(main_server->conf, "DefaultServer", FALSE);
  if (default_server != NULL &&
      *default_server == TRUE) {
    is_default = TRUE;
  }

  if (main_server->ServerPort == 0) {
    /* If there is no server port, then this vhost cannot be treated as the
     * DefaultServer.
     */
    is_default = FALSE;
  }

  if (main_server->ServerPort > 0 ||
      is_default == TRUE) {

    res = pr_ipbind_create(main_server, main_server->addr,
      main_server->ServerPort);
    if (res < 0) {
      pr_log_pri(PR_LOG_NOTICE,
        "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
        __LINE__, main_server->ServerAddress, main_server->ServerPort,
        strerror(errno));
    }

    res = pr_ipbind_open(main_server->addr, main_server->ServerPort,
      main_server->listen, is_default, TRUE, TRUE);
    if (res < 0) {
      pr_log_pri(PR_LOG_NOTICE,
        "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
        pr_netaddr_get_ipstr(main_server->addr), strerror(errno));
    }

    res = pr_ipbind_add_binds(main_server);
    if (res < 0) {
      pr_log_pri(PR_LOG_NOTICE,
        "%s:%d: notice: unable to add binds to ipbind '%s': %s", __FILE__,
        __LINE__, main_server->ServerAddress, strerror(errno));
    }

    (void) process_serveralias(main_server);
  }

  for (serv = main_server->next; serv; serv = serv->next) {
    unsigned int namebind_count;

    pr_signals_handle();

    namebind_count = process_serveralias(serv);
    if (namebind_count > 0) {
      /* If we successfully added ServerAlias namebinds, move on to the next
       * server.
       */
      continue;
    }

    if (serv->ServerPort != main_server->ServerPort ||
        SocketBindTight ||
        !main_server->listen) {
      is_default = FALSE;

      default_server = get_param_ptr(serv->conf, "DefaultServer", FALSE);
      if (default_server != NULL &&
          *default_server == TRUE) {
        is_default = TRUE;
      }

      if (serv->ServerPort == 0) {
        /* If there is no server port, then this vhost cannot be treated as the
         * DefaultServer.
         */
        is_default = FALSE;
      }

      if (serv->ServerPort > 0) {
        if (SocketBindTight == FALSE) {
#if defined(PR_USE_IPV6)
          if (pr_netaddr_use_ipv6()) {
            pr_inet_set_default_family(NULL, AF_INET6);

          } else {
            pr_inet_set_default_family(NULL, pr_netaddr_get_family(serv->addr));
          }
#else
          pr_inet_set_default_family(NULL, pr_netaddr_get_family(serv->addr));
#endif /* PR_USE_IPV6 */
        }

        serv->listen = pr_ipbind_get_listening_conn(serv,
          (SocketBindTight ? serv->addr : NULL), serv->ServerPort);
        if (serv->listen == NULL) {
          return -1;
        }

        res = pr_ipbind_create(serv, serv->addr, serv->ServerPort);
        if (res < 0) {
          pr_log_pri(PR_LOG_NOTICE,
            "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
            __LINE__, serv->ServerAddress, serv->ServerPort, strerror(errno));
        }

        res = pr_ipbind_open(serv->addr, serv->ServerPort, serv->listen,
          is_default, FALSE, TRUE);
        if (res < 0) {
          pr_log_pri(PR_LOG_NOTICE,
            "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
            pr_netaddr_get_ipstr(serv->addr), strerror(errno));
        }

        res = pr_ipbind_add_binds(serv);
        if (res < 0) {
          pr_log_pri(PR_LOG_NOTICE,
            "%s:%d: notice: unable to add binds to ipbind '%s': %s", __FILE__,
            __LINE__, serv->ServerAddress, strerror(errno));
        }

      } else if (is_default == TRUE) {
        serv->listen = NULL;

        res = pr_ipbind_create(serv, serv->addr, serv->ServerPort);
        if (res < 0) {
          pr_log_pri(PR_LOG_NOTICE,
            "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
            __LINE__, serv->ServerAddress, serv->ServerPort, strerror(errno));
        }

        res = pr_ipbind_open(serv->addr, serv->ServerPort, serv->listen,
          is_default, FALSE, TRUE);
        if (res < 0) {
          pr_log_pri(PR_LOG_NOTICE,
            "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
            pr_netaddr_get_ipstr(serv->addr), strerror(errno));
        }

        res = pr_ipbind_add_binds(serv);
        if (res < 0) {
          pr_log_pri(PR_LOG_NOTICE,
            "%s:%d: notice: unable to add binds to ipbind '%s': %s", __FILE__,
            __LINE__, serv->ServerAddress, strerror(errno));
        }

      } else {
        serv->listen = NULL;
      }

    } else {
      /* Because this server is sharing the connection with the main server,
       * we need a cleanup handler to remove the server's reference when the
       * original connection's pool is destroyed.
       */

      is_default = FALSE;
      default_server = get_param_ptr(serv->conf, "DefaultServer", FALSE);
      if (default_server != NULL &&
          *default_server == TRUE) {
        is_default = TRUE;
      }

      serv->listen = main_server->listen;
      register_cleanup2(serv->listen->pool, &serv->listen, server_cleanup_cb);

      res = pr_ipbind_create(serv, serv->addr, serv->ServerPort);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to create ipbind '%s#%u': %s", __FILE__,
          __LINE__, serv->ServerAddress, serv->ServerPort, strerror(errno));
      }

      res = pr_ipbind_open(serv->addr, serv->ServerPort, NULL, is_default,
        FALSE, TRUE);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to open ipbind '%s': %s", __FILE__, __LINE__,
          pr_netaddr_get_ipstr(serv->addr), strerror(errno));
      }

      res = pr_ipbind_add_binds(serv);
      if (res < 0) {
        pr_log_pri(PR_LOG_NOTICE,
          "%s:%d: notice: unable to add binds to ipbind '%s': %s", __FILE__,
          __LINE__, serv->ServerAddress, strerror(errno));
      }
    }

    /* Process any ServerAlias directives AFTER the server's ipbind has been
     * created/opened (Issue #932).
     */
    process_serveralias(serv);
  }

  trace_ipbind_table();

  /* Any "unclaimed" listening conns can be removed and closed. */
  if (listening_conn_list != NULL) {
    struct listener_rec *lr, *lrn;

    for (lr = (struct listener_rec *) listening_conn_list->xas_list; lr; lr = lrn) {
      pr_signals_handle();

      lrn = lr->next;
      if (lr->claimed == FALSE) {
        xaset_remove(listening_conn_list, (xasetmember_t *) lr);
        destroy_pool(lr->pool);
      }
    }
  }

  return 0;
}

void init_bindings(void) {
  int res = 0;

#if defined(PR_USE_IPV6)
  int sock;

  /* Check to see whether we can actually create an IPv6 socket. */
  sock = socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP);
  if (sock < 0) {
    pr_netaddr_disable_ipv6();

  } else {
    (void) close(sock);
  }
#endif /* PR_USE_IPV6 */

  if (ServerType == SERVER_INETD) {
    res = init_inetd_bindings();

  } else if (ServerType == SERVER_STANDALONE) {
    res = init_standalone_bindings();
  }

  if (res < 0) {
    pr_log_pri(PR_LOG_ERR, "%s",
      "Unable to start proftpd; check logs for more details");
    exit(1);
  }
}

Coverage Report

Created: 2026-10-12 07:08