2 8d1b399b 2021-07-22 op * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
3 8d1b399b 2021-07-22 op * Copyright (c) 2018 Florian Obser <florian@openbsd.org>
4 8d1b399b 2021-07-22 op * Copyright (c) 2005 Claudio Jeker <claudio@openbsd.org>
5 8d1b399b 2021-07-22 op * Copyright (c) 2004 Esben Norby <norby@openbsd.org>
6 8d1b399b 2021-07-22 op * Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
8 8d1b399b 2021-07-22 op * Permission to use, copy, modify, and distribute this software for any
9 8d1b399b 2021-07-22 op * purpose with or without fee is hereby granted, provided that the above
10 8d1b399b 2021-07-22 op * copyright notice and this permission notice appear in all copies.
12 8d1b399b 2021-07-22 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
13 8d1b399b 2021-07-22 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
14 8d1b399b 2021-07-22 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
15 8d1b399b 2021-07-22 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
16 8d1b399b 2021-07-22 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 8d1b399b 2021-07-22 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 8d1b399b 2021-07-22 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 8d1b399b 2021-07-22 op #include <sys/socket.h>
22 8d1b399b 2021-07-22 op #include <sys/wait.h>
24 8d1b399b 2021-07-22 op #include <arpa/inet.h>
25 8d1b399b 2021-07-22 op #include <netinet/in.h>
27 8d1b399b 2021-07-22 op #include <errno.h>
28 8d1b399b 2021-07-22 op #include <fcntl.h>
29 8d1b399b 2021-07-22 op #include <pwd.h>
30 8d1b399b 2021-07-22 op #include <signal.h>
31 8d1b399b 2021-07-22 op #include <stdio.h>
32 8d1b399b 2021-07-22 op #include <stdlib.h>
33 8d1b399b 2021-07-22 op #include <string.h>
34 8d1b399b 2021-07-22 op #include <syslog.h>
35 8d1b399b 2021-07-22 op #include <unistd.h>
37 8d1b399b 2021-07-22 op #include "client.h"
38 8d1b399b 2021-07-22 op #include "control.h"
39 8d1b399b 2021-07-22 op #include "kamid.h"
40 8d1b399b 2021-07-22 op #include "listener.h"
41 8d1b399b 2021-07-22 op #include "log.h"
42 8d1b399b 2021-07-22 op #include "sandbox.h"
43 8d1b399b 2021-07-22 op #include "utils.h"
45 8d1b399b 2021-07-22 op enum kd_process {
47 8d1b399b 2021-07-22 op PROC_LISTENER,
48 8d1b399b 2021-07-22 op PROC_CLIENTCONN,
51 8d1b399b 2021-07-22 op const char *saved_argv0;
52 8d1b399b 2021-07-22 op static int debug, nflag;
55 8d1b399b 2021-07-22 op __dead void usage(void);
57 8d1b399b 2021-07-22 op void main_sig_handler(int, short, void *);
58 8d1b399b 2021-07-22 op void main_dispatch_listener(int, short, void *);
59 8d1b399b 2021-07-22 op int main_reload(void);
60 8d1b399b 2021-07-22 op int main_imsg_send_config(struct kd_conf *);
61 8d1b399b 2021-07-22 op void main_dispatch_listener(int, short, void *);
62 8d1b399b 2021-07-22 op __dead void main_shutdown(void);
64 8d1b399b 2021-07-22 op static pid_t start_child(enum kd_process, int, int, int);
66 8d1b399b 2021-07-22 op struct kd_conf *main_conf;
67 8d1b399b 2021-07-22 op static struct imsgev *iev_listener;
68 8d1b399b 2021-07-22 op const char *conffile;
69 8d1b399b 2021-07-22 op pid_t listener_pid;
70 8d1b399b 2021-07-22 op uint32_t cmd_opts;
75 8d1b399b 2021-07-22 op fprintf(stderr, "usage: %s [-dnv] [-f file] [-s socket]\n",
76 8d1b399b 2021-07-22 op getprogname());
81 8d1b399b 2021-07-22 op main(int argc, char **argv)
83 8d1b399b 2021-07-22 op struct event ev_sigint, ev_sigterm, ev_sighup;
85 8d1b399b 2021-07-22 op int listener_flag = 0, client_flag = 0;
86 8d1b399b 2021-07-22 op int pipe_main2listener[2];
87 8d1b399b 2021-07-22 op int control_fd;
88 8d1b399b 2021-07-22 op const char *csock;
90 8d1b399b 2021-07-22 op conffile = KD_CONF_FILE;
91 8d1b399b 2021-07-22 op csock = KD_SOCKET;
93 8d1b399b 2021-07-22 op log_init(1, LOG_DAEMON); /* Log to stderr until deamonized. */
94 8d1b399b 2021-07-22 op log_setverbose(1);
96 8d1b399b 2021-07-22 op saved_argv0 = argv[0];
97 8d1b399b 2021-07-22 op if (saved_argv0 == NULL)
98 8d1b399b 2021-07-22 op saved_argv0 = "kamid";
100 8d1b399b 2021-07-22 op while ((ch = getopt(argc, argv, "D:df:nsT:v")) != -1) {
101 8d1b399b 2021-07-22 op switch (ch) {
103 8d1b399b 2021-07-22 op if (cmdline_symset(optarg) == -1)
104 8d1b399b 2021-07-22 op log_warnx("could not parse macro definition %s",
111 8d1b399b 2021-07-22 op conffile = optarg;
117 8d1b399b 2021-07-22 op csock = optarg;
120 8d1b399b 2021-07-22 op switch (*optarg) {
122 8d1b399b 2021-07-22 op client_flag = 1;
125 8d1b399b 2021-07-22 op listener_flag = 1;
128 8d1b399b 2021-07-22 op fatalx("invalid process spec %c", *optarg);
139 8d1b399b 2021-07-22 op argc -= optind;
140 8d1b399b 2021-07-22 op argv += optind;
141 8d1b399b 2021-07-22 op if (argc > 0 || (listener_flag && client_flag))
144 8d1b399b 2021-07-22 op if (client_flag)
145 8d1b399b 2021-07-22 op client(debug, verbose);
146 8d1b399b 2021-07-22 op else if (listener_flag)
147 8d1b399b 2021-07-22 op listener(debug, verbose);
149 8d1b399b 2021-07-22 op if ((main_conf = parse_config(conffile)) == NULL)
153 8d1b399b 2021-07-22 op fprintf(stderr, "configuratino OK\n");
157 8d1b399b 2021-07-22 op /* Check for root privileges. */
158 8d1b399b 2021-07-22 op if (geteuid())
159 8d1b399b 2021-07-22 op fatalx("need root privileges");
161 8d1b399b 2021-07-22 op /* Check for assigned daemon user. */
162 8d1b399b 2021-07-22 op if (getpwnam(KD_USER) == NULL)
163 8d1b399b 2021-07-22 op fatalx("unknown user %s", KD_USER);
165 8d1b399b 2021-07-22 op log_init(debug, LOG_DAEMON);
166 8d1b399b 2021-07-22 op log_setverbose(verbose);
169 8d1b399b 2021-07-22 op daemon(1, 0);
171 8d1b399b 2021-07-22 op log_info("startup");
173 8d1b399b 2021-07-22 op if (socketpair(AF_UNIX, SOCK_STREAM | SOCK_CLOEXEC | SOCK_NONBLOCK,
174 8d1b399b 2021-07-22 op PF_UNSPEC, pipe_main2listener) == -1)
175 8d1b399b 2021-07-22 op fatal("main2listener socketpair");
177 8d1b399b 2021-07-22 op /* Start children. */
178 8d1b399b 2021-07-22 op listener_pid = start_child(PROC_LISTENER, pipe_main2listener[1],
179 8d1b399b 2021-07-22 op debug, verbose);
181 8d1b399b 2021-07-22 op log_procinit("main");
183 8d1b399b 2021-07-22 op event_init();
185 8d1b399b 2021-07-22 op /* Setup signal handler */
186 8d1b399b 2021-07-22 op signal_set(&ev_sigint, SIGINT, main_sig_handler, NULL);
187 8d1b399b 2021-07-22 op signal_set(&ev_sigterm, SIGTERM, main_sig_handler, NULL);
188 8d1b399b 2021-07-22 op signal_set(&ev_sighup, SIGHUP, main_sig_handler, NULL);
190 8d1b399b 2021-07-22 op signal_add(&ev_sigint, NULL);
191 8d1b399b 2021-07-22 op signal_add(&ev_sigterm, NULL);
192 8d1b399b 2021-07-22 op signal_add(&ev_sighup, NULL);
194 8d1b399b 2021-07-22 op signal(SIGCHLD, SIG_IGN);
195 8d1b399b 2021-07-22 op signal(SIGPIPE, SIG_IGN);
197 8d1b399b 2021-07-22 op if ((iev_listener = malloc(sizeof(*iev_listener))) == NULL)
199 8d1b399b 2021-07-22 op imsg_init(&iev_listener->ibuf, pipe_main2listener[0]);
200 8d1b399b 2021-07-22 op iev_listener->handler = main_dispatch_listener;
202 8d1b399b 2021-07-22 op /* Setup event handlers for pipes to listener. */
203 8d1b399b 2021-07-22 op iev_listener->events = EV_READ;
204 8d1b399b 2021-07-22 op event_set(&iev_listener->ev, iev_listener->ibuf.fd,
205 8d1b399b 2021-07-22 op iev_listener->events, iev_listener->handler, iev_listener);
206 8d1b399b 2021-07-22 op event_add(&iev_listener->ev, NULL);
208 8d1b399b 2021-07-22 op if ((control_fd = control_init(csock)) == -1)
209 8d1b399b 2021-07-22 op fatalx("control socket setup failed");
211 8d1b399b 2021-07-22 op main_imsg_compose_listener(IMSG_CONTROLFD, control_fd, 0,
213 8d1b399b 2021-07-22 op main_imsg_send_config(main_conf);
215 8d1b399b 2021-07-22 op sandbox_main();
217 8d1b399b 2021-07-22 op event_dispatch();
219 8d1b399b 2021-07-22 op main_shutdown();
224 8d1b399b 2021-07-22 op main_sig_handler(int sig, short event, void *arg)
227 8d1b399b 2021-07-22 op * Normal signal handler rules don't apply because libevent
228 8d1b399b 2021-07-22 op * decouples for us.
231 8d1b399b 2021-07-22 op switch (sig) {
232 8d1b399b 2021-07-22 op case SIGTERM:
234 8d1b399b 2021-07-22 op main_shutdown();
237 8d1b399b 2021-07-22 op if (main_reload() == -1)
238 8d1b399b 2021-07-22 op log_warnx("configuration reload failed");
240 8d1b399b 2021-07-22 op log_debug("configuration reloaded");
243 8d1b399b 2021-07-22 op fatalx("unexpected signal %d", sig);
247 8d1b399b 2021-07-22 op static inline void
248 8d1b399b 2021-07-22 op do_auth_tls(struct imsg *imsg)
250 8d1b399b 2021-07-22 op const char *hash, *username = "op";
251 8d1b399b 2021-07-22 op struct passwd *pw;
254 8d1b399b 2021-07-22 op hash = imsg->data;
255 8d1b399b 2021-07-22 op if (hash[IMSG_DATA_SIZE(*imsg)-1] != '\0')
258 8d1b399b 2021-07-22 op log_debug("tls hash=%s", hash);
259 8d1b399b 2021-07-22 op log_debug("assuming it refers to user `%s'",
262 8d1b399b 2021-07-22 op if ((pw = getpwnam(username)) == NULL) {
263 8d1b399b 2021-07-22 op log_warn("getpwnam(%s)", username);
267 8d1b399b 2021-07-22 op if (socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK,
268 8d1b399b 2021-07-22 op PF_UNSPEC, p) == -1)
269 8d1b399b 2021-07-22 op fatal("socketpair");
271 8d1b399b 2021-07-22 op start_child(PROC_CLIENTCONN, p[1], debug, verbose);
273 8d1b399b 2021-07-22 op main_imsg_compose_listener(IMSG_AUTH, p[0], imsg->hdr.peerid,
274 8d1b399b 2021-07-22 op username, strlen(username)+1);
275 8d1b399b 2021-07-22 op main_imsg_compose_listener(IMSG_AUTH_DIR, -1, imsg->hdr.peerid,
276 8d1b399b 2021-07-22 op pw->pw_dir, strlen(pw->pw_dir)+1);
281 8d1b399b 2021-07-22 op main_imsg_compose_listener(IMSG_AUTH, -1, imsg->hdr.peerid,
286 8d1b399b 2021-07-22 op main_dispatch_listener(int fd, short event, void *d)
288 8d1b399b 2021-07-22 op struct imsgev *iev = d;
289 8d1b399b 2021-07-22 op struct imsgbuf *ibuf;
290 8d1b399b 2021-07-22 op struct imsg imsg;
292 8d1b399b 2021-07-22 op int shut = 0;
294 8d1b399b 2021-07-22 op ibuf = &iev->ibuf;
296 8d1b399b 2021-07-22 op if (event & EV_READ) {
297 8d1b399b 2021-07-22 op if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
298 8d1b399b 2021-07-22 op fatal("imsg_read error");
299 8d1b399b 2021-07-22 op if (n == 0) /* Connection closed. */
302 8d1b399b 2021-07-22 op if (event & EV_WRITE) {
303 8d1b399b 2021-07-22 op if ((n = msgbuf_write(&ibuf->w)) == -1 && errno != EAGAIN)
304 8d1b399b 2021-07-22 op fatal("msgbuf_write");
305 8d1b399b 2021-07-22 op if (n == 0) /* Connection closed. */
310 8d1b399b 2021-07-22 op if ((n = imsg_get(ibuf, &imsg)) == -1)
311 8d1b399b 2021-07-22 op fatal("imsg_get");
312 8d1b399b 2021-07-22 op if (n == 0) /* No more messages. */
315 8d1b399b 2021-07-22 op switch (imsg.hdr.type) {
316 8d1b399b 2021-07-22 op case IMSG_AUTH_TLS:
317 8d1b399b 2021-07-22 op do_auth_tls(&imsg);
320 8d1b399b 2021-07-22 op log_debug("%s: error handling imsg %d", __func__,
321 8d1b399b 2021-07-22 op imsg.hdr.type);
324 8d1b399b 2021-07-22 op imsg_free(&imsg);
327 8d1b399b 2021-07-22 op imsg_event_add(iev);
329 8d1b399b 2021-07-22 op /* This pipe is dead. Remove its event handler. */
330 8d1b399b 2021-07-22 op event_del(&iev->ev);
331 8d1b399b 2021-07-22 op event_loopexit(NULL);
336 8d1b399b 2021-07-22 op main_reload(void)
338 8d1b399b 2021-07-22 op struct kd_conf *xconf;
340 8d1b399b 2021-07-22 op if ((xconf = parse_config(conffile)) == NULL)
343 8d1b399b 2021-07-22 op if (main_imsg_send_config(xconf) == -1)
346 8d1b399b 2021-07-22 op merge_config(main_conf, xconf);
351 8d1b399b 2021-07-22 op static inline int
352 8d1b399b 2021-07-22 op make_socket_for(struct kd_listen_conf *l)
354 8d1b399b 2021-07-22 op struct sockaddr_in addr4;
358 8d1b399b 2021-07-22 op memset(&addr4, 0, sizeof(addr4));
359 8d1b399b 2021-07-22 op addr4.sin_family = AF_INET;
360 8d1b399b 2021-07-22 op addr4.sin_port = htons(l->port);
361 8d1b399b 2021-07-22 op addr4.sin_addr.s_addr = INADDR_ANY;
363 8d1b399b 2021-07-22 op if ((fd = socket(AF_INET, SOCK_STREAM, 0)) == -1)
364 8d1b399b 2021-07-22 op fatal("socket");
367 8d1b399b 2021-07-22 op if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &v, sizeof(v)) == -1)
368 8d1b399b 2021-07-22 op fatal("setsockopt(SO_REUSEADDR)");
371 8d1b399b 2021-07-22 op if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &v, sizeof(v)) == -1)
372 8d1b399b 2021-07-22 op fatal("setsockopt(SO_REUSEPORT)");
374 8d1b399b 2021-07-22 op len = sizeof(addr4);
375 8d1b399b 2021-07-22 op if (bind(fd, (struct sockaddr *)&addr4, len) == -1)
376 8d1b399b 2021-07-22 op fatal("bind(%s, %d)", l->iface, l->port);
378 8d1b399b 2021-07-22 op if (listen(fd, 16) == -1)
379 8d1b399b 2021-07-22 op fatal("l(%s, %d)", l->iface, l->port);
385 8d1b399b 2021-07-22 op main_imsg_send_config(struct kd_conf *xconf)
387 8d1b399b 2021-07-22 op struct kd_pki_conf *pki;
388 8d1b399b 2021-07-22 op struct kd_listen_conf *listen;
390 8d1b399b 2021-07-22 op #define SEND(type, fd, data, len) do { \
391 8d1b399b 2021-07-22 op if (main_imsg_compose_listener(type, fd, 0, data, len) \
396 8d1b399b 2021-07-22 op /* Send fixed part of config to children. */
397 8d1b399b 2021-07-22 op SEND(IMSG_RECONF_CONF, -1, xconf, sizeof(*xconf));
399 8d1b399b 2021-07-22 op SIMPLEQ_FOREACH(pki, &xconf->pki_head, entry) {
400 8d1b399b 2021-07-22 op log_debug("sending pki %s", pki->name);
401 8d1b399b 2021-07-22 op SEND(IMSG_RECONF_PKI, -1, pki->name, sizeof(pki->name));
402 8d1b399b 2021-07-22 op SEND(IMSG_RECONF_PKI_CERT, -1, pki->cert, pki->certlen);
403 8d1b399b 2021-07-22 op SEND(IMSG_RECONF_PKI_KEY, -1, pki->key, pki->keylen);
406 8d1b399b 2021-07-22 op SIMPLEQ_FOREACH(listen, &xconf->listen_head, entry) {
407 8d1b399b 2021-07-22 op log_debug("sending listen on port %d", listen->port);
408 8d1b399b 2021-07-22 op SEND(IMSG_RECONF_LISTEN, make_socket_for(listen), listen,
409 8d1b399b 2021-07-22 op sizeof(*listen));
412 8d1b399b 2021-07-22 op SEND(IMSG_RECONF_END, -1, NULL, 0);
419 8d1b399b 2021-07-22 op merge_config(struct kd_conf *conf, struct kd_conf *xconf)
421 8d1b399b 2021-07-22 op /* do stuff... */
426 8d1b399b 2021-07-22 op struct kd_conf *
427 8d1b399b 2021-07-22 op config_new_empty(void)
429 8d1b399b 2021-07-22 op struct kd_conf *xconf;
431 8d1b399b 2021-07-22 op if ((xconf = calloc(1, sizeof(*xconf))) == NULL)
434 8d1b399b 2021-07-22 op /* set default values */
436 8d1b399b 2021-07-22 op return xconf;
440 8d1b399b 2021-07-22 op config_clear(struct kd_conf *conf)
442 8d1b399b 2021-07-22 op struct kd_conf *xconf;
444 8d1b399b 2021-07-22 op /* Merge current config with an empty one. */
445 8d1b399b 2021-07-22 op xconf = config_new_empty();
446 8d1b399b 2021-07-22 op merge_config(conf, xconf);
452 8d1b399b 2021-07-22 op main_shutdown(void)
457 8d1b399b 2021-07-22 op /* close pipes. */
458 8d1b399b 2021-07-22 op config_clear(main_conf);
460 8d1b399b 2021-07-22 op log_debug("waiting for children to terminate");
462 8d1b399b 2021-07-22 op pid = wait(&status);
463 8d1b399b 2021-07-22 op if (pid == -1) {
464 8d1b399b 2021-07-22 op if (errno != EINTR && errno != ECHILD)
465 8d1b399b 2021-07-22 op fatal("wait");
466 8d1b399b 2021-07-22 op } else if (WIFSIGNALED(status))
467 8d1b399b 2021-07-22 op log_warnx("%s terminated; signal %d",
468 8d1b399b 2021-07-22 op (pid == listener_pid) ? "logger" : "clientconn",
469 8d1b399b 2021-07-22 op WTERMSIG(status));
470 8d1b399b 2021-07-22 op } while (pid != -1 || (pid == -1 && errno == EINTR));
472 8d1b399b 2021-07-22 op free(iev_listener);
474 8d1b399b 2021-07-22 op log_info("terminating");
479 8d1b399b 2021-07-22 op start_child(enum kd_process p, int fd, int debug, int verbose)
481 8d1b399b 2021-07-22 op const char *argv[5];
482 8d1b399b 2021-07-22 op int argc = 0;
485 8d1b399b 2021-07-22 op switch (pid = fork()) {
487 8d1b399b 2021-07-22 op fatal("cannot fork");
495 8d1b399b 2021-07-22 op if (fd != 3) {
496 8d1b399b 2021-07-22 op if (dup2(fd, 3) == -1)
497 8d1b399b 2021-07-22 op fatal("cannot setup imsg fd");
498 8d1b399b 2021-07-22 op } else if (fcntl(F_SETFD, 0) == -1)
499 8d1b399b 2021-07-22 op fatal("cannot setup imsg fd");
501 8d1b399b 2021-07-22 op argv[argc++] = saved_argv0;
503 8d1b399b 2021-07-22 op case PROC_MAIN:
504 8d1b399b 2021-07-22 op fatalx("Can not start main process");
505 8d1b399b 2021-07-22 op case PROC_LISTENER:
506 8d1b399b 2021-07-22 op argv[argc++] = "-Tl";
508 8d1b399b 2021-07-22 op case PROC_CLIENTCONN:
509 8d1b399b 2021-07-22 op argv[argc++] = "-Tc";
513 8d1b399b 2021-07-22 op argv[argc++] = "-d";
515 8d1b399b 2021-07-22 op argv[argc++] = "-v";
516 8d1b399b 2021-07-22 op argv[argc++] = NULL;
518 8d1b399b 2021-07-22 op /* really? */
519 8d1b399b 2021-07-22 op execvp(saved_argv0, (char *const *)argv);
520 8d1b399b 2021-07-22 op fatal("execvp");
524 8d1b399b 2021-07-22 op imsg_event_add(struct imsgev *iev)
526 8d1b399b 2021-07-22 op iev->events = EV_READ;
527 8d1b399b 2021-07-22 op if (iev->ibuf.w.queued)
528 8d1b399b 2021-07-22 op iev->events |= EV_WRITE;
530 8d1b399b 2021-07-22 op event_del(&iev->ev);
531 8d1b399b 2021-07-22 op event_set(&iev->ev, iev->ibuf.fd, iev->events, iev->handler, iev);
532 8d1b399b 2021-07-22 op event_add(&iev->ev, NULL);
536 8d1b399b 2021-07-22 op imsg_compose_event(struct imsgev *iev, uint16_t type, uint32_t peerid,
537 8d1b399b 2021-07-22 op pid_t pid, int fd, const void *data, uint16_t datalen)
541 8d1b399b 2021-07-22 op if ((ret = imsg_compose(&iev->ibuf, type, peerid, pid, fd, data,
542 8d1b399b 2021-07-22 op datalen) != -1))
543 8d1b399b 2021-07-22 op imsg_event_add(iev);
549 8d1b399b 2021-07-22 op main_imsg_compose_listener(int type, int fd, uint32_t peerid,
550 8d1b399b 2021-07-22 op const void *data, uint16_t datalen)
552 8d1b399b 2021-07-22 op if (iev_listener)
553 8d1b399b 2021-07-22 op return imsg_compose_event(iev_listener, type, peerid, 0,
554 8d1b399b 2021-07-22 op fd, data, datalen);