wireshark/wsutil/plugins.c
John Thacker a7aff4f333 extcap, plugins: Check for identical personal plugin directory
Check for an identical personal plugin or extcap directory, and don't
try to load extcap or plugins a second time from an identical directory.
This mostly can happen when using the --global-profile option, though I
suppose there are other methods as well like links.

Prevents some warnings about trying to load the same plugin or extcap
(or a plugin or extcap of the same name) like:

tshark: The plugin 'usbdump.dll' was found in multiple directories
 ** (tshark:11896) 07:28:36.907856 [Extcap WARNING] C:\gitlab-builds\builds\MsQ3pox2\0\wireshark\wireshark\extcap.c:1955 -- process_new_extcap(): Cannot store interface C:\Program Files\Wireshark\extcap\ciscodump.exe, already loaded as personal plugin
 tshark: Unable to load sinsp plugin C:\Development\wsbuild68\run\RelWithDebInfo\plugins\falco\cloudtrail.dll: Caught sinsp exception cannot register plugin C:\Development\wsbuild68\run\RelWithDebInfo\plugins\falco\cloudtrail.dll in inspector: found another plugin with name cloudtrail. Aborting..

Ping #20454
2025-06-18 12:24:53 +00:00

340 lines
9.3 KiB
C

/* plugins.c
* plugin routines
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "config.h"
#define WS_LOG_DOMAIN LOG_DOMAIN_PLUGINS
#include "plugins.h"
#include <time.h>
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <gmodule.h>
#include <wsutil/filesystem.h>
#include <wsutil/privileges.h>
#include <wsutil/file_util.h>
#include <wsutil/report_message.h>
#include <wsutil/wslog.h>
typedef struct _plugin {
GModule *handle; /* handle returned by g_module_open */
char *name; /* plugin name */
const char *version; /* plugin version */
uint32_t flags; /* plugin flags */
} plugin;
#define TYPE_DIR_EPAN "epan"
#define TYPE_DIR_WIRETAP "wiretap"
#define TYPE_DIR_CODECS "codecs"
static GSList *plugins_module_list;
static inline const char *
type_to_dir(plugin_type_e type)
{
switch (type) {
case WS_PLUGIN_EPAN:
return TYPE_DIR_EPAN;
case WS_PLUGIN_WIRETAP:
return TYPE_DIR_WIRETAP;
case WS_PLUGIN_CODEC:
return TYPE_DIR_CODECS;
default:
ws_error("Unknown plugin type: %u. Aborting.", (unsigned) type);
break;
}
ws_assert_not_reached();
}
static inline const char *
flags_to_str(uint32_t flags)
{
/* XXX: Allow joining multiple types? Our plugins only implement a
* single type but out in the wild this may not be true. */
if (flags & WS_PLUGIN_DESC_DISSECTOR)
return "dissector";
else if (flags & WS_PLUGIN_DESC_FILE_TYPE)
return "file type";
else if (flags & WS_PLUGIN_DESC_CODEC)
return "codec";
else if (flags & WS_PLUGIN_DESC_EPAN)
return "epan";
else if (flags & WS_PLUGIN_DESC_TAP_LISTENER)
return "tap listener";
else if (flags & WS_PLUGIN_DESC_DFILTER)
return "dfilter";
else
return "unknown";
}
static void
free_plugin(void * data)
{
plugin *p = (plugin *)data;
g_module_close(p->handle);
g_free(p->name);
g_free(p);
}
static int
compare_plugins(const void *a, const void *b)
{
return g_strcmp0((*(plugin *const *)a)->name, (*(plugin *const *)b)->name);
}
static bool
pass_plugin_version_compatibility(GModule *handle, const char *name)
{
void * symb;
int major, minor;
if(!g_module_symbol(handle, "plugin_want_major", &symb)) {
report_failure("The plugin '%s' has no \"plugin_want_major\" symbol", name);
return false;
}
major = *(int *)symb;
if(!g_module_symbol(handle, "plugin_want_minor", &symb)) {
report_failure("The plugin '%s' has no \"plugin_want_minor\" symbol", name);
return false;
}
minor = *(int *)symb;
if (major != VERSION_MAJOR || minor != VERSION_MINOR) {
report_failure("The plugin '%s' was compiled for Wireshark version %d.%d",
name, major, minor);
return false;
}
return true;
}
// GLib and Qt allow ".dylib" and ".so" on macOS. Should we do the same?
#ifdef _WIN32
#define MODULE_SUFFIX ".dll"
#else
#define MODULE_SUFFIX ".so"
#endif
static void
scan_plugins_dir(GHashTable *plugins_module, const char *dirpath, plugin_type_e type, bool append_type)
{
GDir *dir;
const char *name; /* current file name */
char *plugin_folder;
char *plugin_file; /* current file full path */
GModule *handle; /* handle returned by g_module_open */
void * symbol;
const char *plug_version;
uint32_t flags;
plugin *new_plug;
if (append_type)
plugin_folder = g_build_filename(dirpath, type_to_dir(type), (char *)NULL);
else
plugin_folder = g_strdup(dirpath);
dir = g_dir_open(plugin_folder, 0, NULL);
if (dir == NULL) {
g_free(plugin_folder);
return;
}
ws_debug("Scanning plugins folder \"%s\"", plugin_folder);
while ((name = g_dir_read_name(dir)) != NULL) {
/* Skip anything but files with .dll or .so. */
if (!g_str_has_suffix(name, MODULE_SUFFIX))
continue;
/*
* Check if the same name is already registered.
*/
if (g_hash_table_lookup(plugins_module, name)) {
/* Yes, it is. */
report_warning("The plugin '%s' was found "
"in multiple directories", name);
continue;
}
plugin_file = g_build_filename(plugin_folder, name, (char *)NULL);
handle = g_module_open(plugin_file, G_MODULE_BIND_LOCAL);
if (handle == NULL) {
/* g_module_error() provides file path. */
report_failure("Couldn't load plugin '%s': %s", name,
g_module_error());
g_free(plugin_file);
continue;
}
if (!g_module_symbol(handle, "plugin_version", &symbol))
{
report_failure("The plugin '%s' has no \"plugin_version\" symbol", name);
g_module_close(handle);
g_free(plugin_file);
continue;
}
plug_version = (const char *)symbol;
if (!pass_plugin_version_compatibility(handle, name)) {
g_module_close(handle);
g_free(plugin_file);
continue;
}
/* Search for the entry point for the plugin registration function */
if (!g_module_symbol(handle, "plugin_register", &symbol)) {
report_failure("The plugin '%s' has no \"plugin_register\" symbol", name);
g_module_close(handle);
g_free(plugin_file);
continue;
}
DIAG_OFF_PEDANTIC
/* Found it, call the plugin registration function. */
((plugin_register_func)symbol)();
DIAG_ON_PEDANTIC
/* Search for the (optional) description flag registration function */
if (g_module_symbol(handle, "plugin_describe", &symbol))
flags = ((plugin_describe_func)symbol)();
else
flags = 0;
new_plug = g_new(plugin, 1);
new_plug->handle = handle;
new_plug->name = g_strdup(name);
new_plug->version = plug_version;
new_plug->flags = flags;
/* Add it to the list of plugins. */
g_hash_table_replace(plugins_module, new_plug->name, new_plug);
ws_info("Registered plugin: %s (%s)", new_plug->name, plugin_file);
g_free(plugin_file);
}
ws_dir_close(dir);
g_free(plugin_folder);
}
/*
* Scan for plugins.
*/
plugins_t *
plugins_init(plugin_type_e type)
{
if (!g_module_supported())
return NULL; /* nothing to do */
GHashTable *plugins_module = g_hash_table_new_full(g_str_hash, g_str_equal, NULL, free_plugin);
/*
* Scan the global plugin directory.
*/
scan_plugins_dir(plugins_module, get_plugins_dir_with_version(), type, true);
/*
* If the program wasn't started with special privileges,
* scan the users plugin directory. (Even if we relinquish
* them, plugins aren't safe unless we've *permanently*
* relinquished them, and we can't do that in Wireshark as,
* if we need privileges to start capturing, we'd need to
* reclaim them before each time we start capturing.)
*/
if (!started_with_special_privs() && !files_identical(get_plugins_dir_with_version(), get_plugins_pers_dir_with_version())) {
scan_plugins_dir(plugins_module, get_plugins_pers_dir_with_version(), type, true);
}
plugins_module_list = g_slist_prepend(plugins_module_list, plugins_module);
return plugins_module;
}
WS_DLL_PUBLIC void
plugins_get_descriptions(plugin_description_callback callback, void *callback_data)
{
GPtrArray *plugins_array = g_ptr_array_new();
GHashTableIter iter;
void * value;
for (GSList *l = plugins_module_list; l != NULL; l = l->next) {
g_hash_table_iter_init (&iter, (GHashTable *)l->data);
while (g_hash_table_iter_next (&iter, NULL, &value)) {
g_ptr_array_add(plugins_array, value);
}
}
g_ptr_array_sort(plugins_array, compare_plugins);
for (unsigned i = 0; i < plugins_array->len; i++) {
plugin *plug = (plugin *)plugins_array->pdata[i];
callback(plug->name, plug->version, plug->flags, g_module_name(plug->handle), callback_data);
}
g_ptr_array_free(plugins_array, true);
}
static void
print_plugin_description(const char *name, const char *version,
uint32_t flags, const char *filename,
void *user_data _U_)
{
printf("%-16s\t%s\t%s\t%s\n", name, version, flags_to_str(flags), filename);
}
void
plugins_dump_all(void)
{
plugins_get_descriptions(print_plugin_description, NULL);
}
int
plugins_get_count(void)
{
unsigned count = 0;
for (GSList *l = plugins_module_list; l != NULL; l = l->next) {
count += g_hash_table_size((GHashTable *)l->data);
}
return count;
}
void
plugins_cleanup(plugins_t *plugins)
{
if (!plugins)
return;
plugins_module_list = g_slist_remove(plugins_module_list, plugins);
g_hash_table_destroy((GHashTable *)plugins);
}
bool
plugins_supported(void)
{
return g_module_supported();
}
/*
* Editor modelines
*
* Local Variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* ex: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/