mirror of https://github.com/cbeuw/Cloak
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
122 lines
3.0 KiB
Go
122 lines
3.0 KiB
Go
//go:build android
|
|
// +build android
|
|
|
|
package main
|
|
|
|
// Stolen from https://github.com/shadowsocks/overture/blob/shadowsocks/core/utils/utils_android.go
|
|
|
|
/*
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <unistd.h>
|
|
#include <sys/time.h>
|
|
#include <sys/types.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/un.h>
|
|
#include <sys/uio.h>
|
|
|
|
#define ANCIL_FD_BUFFER(n) \
|
|
struct { \
|
|
struct cmsghdr h; \
|
|
int fd[n]; \
|
|
}
|
|
|
|
int ancil_send_fds_with_buffer(int sock, const int *fds, unsigned n_fds,
|
|
void *buffer) {
|
|
struct msghdr msghdr;
|
|
char nothing = '!';
|
|
struct iovec nothing_ptr;
|
|
struct cmsghdr *cmsg;
|
|
int i;
|
|
|
|
nothing_ptr.iov_base = ¬hing;
|
|
nothing_ptr.iov_len = 1;
|
|
msghdr.msg_name = NULL;
|
|
msghdr.msg_namelen = 0;
|
|
msghdr.msg_iov = ¬hing_ptr;
|
|
msghdr.msg_iovlen = 1;
|
|
msghdr.msg_flags = 0;
|
|
msghdr.msg_control = buffer;
|
|
msghdr.msg_controllen = sizeof(struct cmsghdr) + sizeof(int) * n_fds;
|
|
cmsg = CMSG_FIRSTHDR(&msghdr);
|
|
cmsg->cmsg_len = msghdr.msg_controllen;
|
|
cmsg->cmsg_level = SOL_SOCKET;
|
|
cmsg->cmsg_type = SCM_RIGHTS;
|
|
for (i = 0; i < n_fds; i++)
|
|
((int *)CMSG_DATA(cmsg))[i] = fds[i];
|
|
return (sendmsg(sock, &msghdr, 0) >= 0 ? 0 : -1);
|
|
}
|
|
|
|
int ancil_send_fd(int sock, int fd) {
|
|
ANCIL_FD_BUFFER(1) buffer;
|
|
|
|
return (ancil_send_fds_with_buffer(sock, &fd, 1, &buffer));
|
|
}
|
|
|
|
void set_timeout(int sock) {
|
|
struct timeval tv;
|
|
tv.tv_sec = 3;
|
|
tv.tv_usec = 0;
|
|
setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, (char *)&tv,
|
|
sizeof(struct timeval));
|
|
setsockopt(sock, SOL_SOCKET, SO_SNDTIMEO, (char *)&tv,
|
|
sizeof(struct timeval));
|
|
}
|
|
*/
|
|
import "C"
|
|
|
|
import (
|
|
"syscall"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
)
|
|
|
|
// In Android, once an app starts the VpnService, all outgoing traffic are routed by the system
|
|
// to the VPN app. In our case, the VPN app is ss-local. Our outgoing traffic to ck-server
|
|
// will be routed back to ss-local which creates an infinite loop.
|
|
//
|
|
// The Android system provides an API VpnService.protect(int socketFD)
|
|
// This tells the system to bypass the socket around the VPN.
|
|
func protector(network string, address string, c syscall.RawConn) error {
|
|
log.Println("Using Android VPN mode.")
|
|
fn := func(s uintptr) {
|
|
fd := int(s)
|
|
path := "protect_path"
|
|
|
|
socket, err := syscall.Socket(syscall.AF_UNIX, syscall.SOCK_STREAM, 0)
|
|
if err != nil {
|
|
log.Println(err)
|
|
return
|
|
}
|
|
|
|
defer syscall.Close(socket)
|
|
|
|
C.set_timeout(C.int(socket))
|
|
|
|
err = syscall.Connect(socket, &syscall.SockaddrUnix{Name: path})
|
|
if err != nil {
|
|
log.Println(err)
|
|
return
|
|
}
|
|
|
|
C.ancil_send_fd(C.int(socket), C.int(fd))
|
|
|
|
dummy := []byte{1}
|
|
n, err := syscall.Read(socket, dummy)
|
|
if err != nil {
|
|
log.Println(err)
|
|
return
|
|
}
|
|
if n != 1 {
|
|
log.Println("Failed to protect fd: ", fd)
|
|
return
|
|
}
|
|
}
|
|
|
|
if err := c.Control(fn); err != nil {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|