Home | History | Annotate | Line # | Download | only in ftpd
ftpd.c revision 1.109
      1  1.109     lukem /*	$NetBSD: ftpd.c,v 1.109 2000/11/15 02:32:30 lukem Exp $	*/
      2   1.67    itojun 
      3   1.67    itojun /*
      4   1.82     lukem  * Copyright (c) 1997-2000 The NetBSD Foundation, Inc.
      5   1.67    itojun  * All rights reserved.
      6   1.73     lukem  *
      7   1.73     lukem  * This code is derived from software contributed to The NetBSD Foundation
      8   1.73     lukem  * by Luke Mewburn.
      9   1.73     lukem  *
     10   1.67    itojun  * Redistribution and use in source and binary forms, with or without
     11   1.67    itojun  * modification, are permitted provided that the following conditions
     12   1.67    itojun  * are met:
     13   1.67    itojun  * 1. Redistributions of source code must retain the above copyright
     14   1.67    itojun  *    notice, this list of conditions and the following disclaimer.
     15   1.67    itojun  * 2. Redistributions in binary form must reproduce the above copyright
     16   1.67    itojun  *    notice, this list of conditions and the following disclaimer in the
     17   1.67    itojun  *    documentation and/or other materials provided with the distribution.
     18   1.73     lukem  * 3. All advertising materials mentioning features or use of this software
     19   1.73     lukem  *    must display the following acknowledgement:
     20   1.73     lukem  *        This product includes software developed by the NetBSD
     21   1.73     lukem  *        Foundation, Inc. and its contributors.
     22   1.73     lukem  * 4. Neither the name of The NetBSD Foundation nor the names of its
     23   1.73     lukem  *    contributors may be used to endorse or promote products derived
     24   1.73     lukem  *    from this software without specific prior written permission.
     25   1.73     lukem  *
     26   1.73     lukem  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     27   1.73     lukem  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     28   1.73     lukem  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     29   1.73     lukem  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     30   1.73     lukem  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     31   1.73     lukem  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     32   1.73     lukem  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     33   1.73     lukem  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     34   1.73     lukem  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     35   1.73     lukem  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     36   1.73     lukem  * POSSIBILITY OF SUCH DAMAGE.
     37   1.67    itojun  */
     38   1.13       cgd 
     39    1.1       cgd /*
     40    1.8   deraadt  * Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994
     41    1.8   deraadt  *	The Regents of the University of California.  All rights reserved.
     42    1.1       cgd  *
     43    1.1       cgd  * Redistribution and use in source and binary forms, with or without
     44    1.1       cgd  * modification, are permitted provided that the following conditions
     45    1.1       cgd  * are met:
     46    1.1       cgd  * 1. Redistributions of source code must retain the above copyright
     47    1.1       cgd  *    notice, this list of conditions and the following disclaimer.
     48    1.1       cgd  * 2. Redistributions in binary form must reproduce the above copyright
     49    1.1       cgd  *    notice, this list of conditions and the following disclaimer in the
     50    1.1       cgd  *    documentation and/or other materials provided with the distribution.
     51    1.1       cgd  * 3. All advertising materials mentioning features or use of this software
     52    1.1       cgd  *    must display the following acknowledgement:
     53    1.1       cgd  *	This product includes software developed by the University of
     54    1.1       cgd  *	California, Berkeley and its contributors.
     55    1.1       cgd  * 4. Neither the name of the University nor the names of its contributors
     56    1.1       cgd  *    may be used to endorse or promote products derived from this software
     57    1.1       cgd  *    without specific prior written permission.
     58    1.1       cgd  *
     59    1.1       cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     60    1.1       cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     61    1.1       cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     62    1.1       cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     63    1.1       cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     64    1.1       cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     65    1.1       cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     66    1.1       cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     67    1.1       cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     68    1.1       cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     69    1.1       cgd  * SUCH DAMAGE.
     70    1.1       cgd  */
     71    1.1       cgd 
     72   1.62     lukem /*
     73   1.73     lukem  * Copyright (C) 1997 and 1998 WIDE Project.
     74   1.62     lukem  * All rights reserved.
     75   1.73     lukem  *
     76   1.62     lukem  * Redistribution and use in source and binary forms, with or without
     77   1.62     lukem  * modification, are permitted provided that the following conditions
     78   1.62     lukem  * are met:
     79   1.62     lukem  * 1. Redistributions of source code must retain the above copyright
     80   1.62     lukem  *    notice, this list of conditions and the following disclaimer.
     81   1.62     lukem  * 2. Redistributions in binary form must reproduce the above copyright
     82   1.62     lukem  *    notice, this list of conditions and the following disclaimer in the
     83   1.62     lukem  *    documentation and/or other materials provided with the distribution.
     84   1.73     lukem  * 3. Neither the name of the project nor the names of its contributors
     85   1.73     lukem  *    may be used to endorse or promote products derived from this software
     86   1.73     lukem  *    without specific prior written permission.
     87   1.73     lukem  *
     88   1.73     lukem  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     89   1.73     lukem  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     90   1.73     lukem  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     91   1.73     lukem  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     92   1.73     lukem  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     93   1.73     lukem  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     94   1.73     lukem  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     95   1.73     lukem  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     96   1.73     lukem  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     97   1.73     lukem  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     98   1.73     lukem  * SUCH DAMAGE.
     99   1.62     lukem  */
    100   1.62     lukem 
    101   1.25  christos #include <sys/cdefs.h>
    102    1.1       cgd #ifndef lint
    103   1.25  christos __COPYRIGHT(
    104    1.8   deraadt "@(#) Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994\n\
    105   1.25  christos 	The Regents of the University of California.  All rights reserved.\n");
    106    1.1       cgd #endif /* not lint */
    107    1.1       cgd 
    108    1.1       cgd #ifndef lint
    109   1.13       cgd #if 0
    110   1.17       cjs static char sccsid[] = "@(#)ftpd.c	8.5 (Berkeley) 4/28/95";
    111   1.13       cgd #else
    112  1.109     lukem __RCSID("$NetBSD: ftpd.c,v 1.109 2000/11/15 02:32:30 lukem Exp $");
    113   1.13       cgd #endif
    114    1.1       cgd #endif /* not lint */
    115    1.1       cgd 
    116    1.1       cgd /*
    117    1.1       cgd  * FTP server.
    118    1.1       cgd  */
    119    1.1       cgd #include <sys/param.h>
    120    1.1       cgd #include <sys/stat.h>
    121    1.1       cgd #include <sys/ioctl.h>
    122    1.1       cgd #include <sys/socket.h>
    123    1.1       cgd #include <sys/wait.h>
    124    1.1       cgd 
    125    1.1       cgd #include <netinet/in.h>
    126    1.1       cgd #include <netinet/in_systm.h>
    127    1.1       cgd #include <netinet/ip.h>
    128    1.1       cgd 
    129    1.1       cgd #define	FTP_NAMES
    130    1.1       cgd #include <arpa/ftp.h>
    131    1.1       cgd #include <arpa/inet.h>
    132    1.1       cgd #include <arpa/telnet.h>
    133    1.1       cgd 
    134    1.8   deraadt #include <ctype.h>
    135    1.1       cgd #include <dirent.h>
    136    1.8   deraadt #include <err.h>
    137    1.8   deraadt #include <errno.h>
    138    1.1       cgd #include <fcntl.h>
    139   1.21       cjs #include <fnmatch.h>
    140    1.8   deraadt #include <glob.h>
    141   1.81     lukem #include <grp.h>
    142    1.8   deraadt #include <limits.h>
    143    1.8   deraadt #include <netdb.h>
    144    1.1       cgd #include <pwd.h>
    145    1.1       cgd #include <setjmp.h>
    146    1.8   deraadt #include <signal.h>
    147   1.93     lukem #include <stdarg.h>
    148    1.1       cgd #include <stdio.h>
    149    1.1       cgd #include <stdlib.h>
    150    1.1       cgd #include <string.h>
    151    1.8   deraadt #include <syslog.h>
    152    1.8   deraadt #include <time.h>
    153    1.8   deraadt #include <unistd.h>
    154   1.73     lukem #include <util.h>
    155   1.78     lukem #include <utmp.h>
    156   1.25  christos #ifdef SKEY
    157   1.25  christos #include <skey.h>
    158   1.25  christos #endif
    159   1.38   mycroft #ifdef KERBEROS5
    160   1.86     aidan #include <com_err.h>
    161   1.69  christos #include <krb5/krb5.h>
    162   1.38   mycroft #endif
    163    1.8   deraadt 
    164   1.84     lukem #define	GLOBAL
    165   1.24     lukem #include "extern.h"
    166    1.1       cgd #include "pathnames.h"
    167   1.78     lukem #include "version.h"
    168    1.1       cgd 
    169    1.1       cgd int	data;
    170   1.87     lukem jmp_buf	urgcatch;
    171    1.1       cgd struct	passwd *pw;
    172   1.51   msaitoh int	sflag;
    173    1.1       cgd int	stru;			/* avoid C keyword */
    174    1.1       cgd int	mode;
    175  1.101     lukem int	doutmp;			/* update utmp file */
    176  1.102     lukem int	dowtmp;			/* update wtmp file */
    177  1.101     lukem int	dropprivs;		/* if privileges should or have been dropped */
    178  1.101     lukem int	mapped;			/* IPv4 connection on AF_INET6 socket */
    179    1.1       cgd off_t	file_size;
    180    1.1       cgd off_t	byte_count;
    181   1.13       cgd static char ttyline[20];
    182   1.78     lukem static struct utmp utmp;	/* for utmp */
    183   1.57     lukem 
    184   1.22       cjs static char *anondir = NULL;
    185   1.34     lukem static char confdir[MAXPATHLEN];
    186   1.24     lukem 
    187   1.38   mycroft #if defined(KERBEROS) || defined(KERBEROS5)
    188   1.91     fredb int	has_ccache = 0;
    189   1.13       cgd int	notickets = 1;
    190   1.13       cgd char	*krbtkfile_env = NULL;
    191   1.91     fredb char	*tty = ttyline;
    192   1.92  explorer int	login_krb5_forwardable_tgt = 0;
    193   1.73     lukem #endif
    194    1.4       cgd 
    195  1.104  christos #ifndef INET6_ADDRSTRLEN
    196  1.104  christos #define INET6_ADDRSTRLEN MAXHOSTNAMELEN
    197  1.104  christos #endif
    198  1.104  christos 
    199   1.67    itojun int epsvall = 0;
    200   1.67    itojun 
    201    1.1       cgd /*
    202    1.1       cgd  * Timeout intervals for retrying connections
    203    1.1       cgd  * to hosts that don't accept PORT cmds.  This
    204    1.1       cgd  * is a kludge, but given the problems with TCP...
    205    1.1       cgd  */
    206    1.1       cgd #define	SWAITMAX	90	/* wait at most 90 seconds */
    207    1.1       cgd #define	SWAITINT	5	/* interval between retries */
    208    1.1       cgd 
    209    1.1       cgd int	swaitmax = SWAITMAX;
    210    1.1       cgd int	swaitint = SWAITINT;
    211    1.1       cgd 
    212   1.88     lukem static int	 bind_pasv_addr(void);
    213   1.88     lukem static int	 checkuser(const char *, const char *, int, int, char **);
    214   1.88     lukem static int	 checkaccess(const char *);
    215   1.88     lukem static void	 dolog(struct sockaddr *);
    216   1.88     lukem static void	 end_login(void);
    217   1.88     lukem static FILE	*getdatasock(const char *);
    218   1.88     lukem static char	*gunique(const char *);
    219   1.88     lukem static void	 lostconn(int);
    220   1.88     lukem static void	 myoob(int);
    221   1.88     lukem static int	 receive_data(FILE *, FILE *);
    222   1.88     lukem static int	 send_data(FILE *, FILE *, off_t, int);
    223   1.88     lukem static struct passwd *sgetpwnam(const char *);
    224    1.8   deraadt 
    225   1.88     lukem int	main(int, char *[]);
    226   1.26    mellon 
    227   1.92  explorer #if defined(KERBEROS)
    228   1.88     lukem int	klogin(struct passwd *, char *, char *, char *);
    229   1.88     lukem void	kdestroy(void);
    230   1.26    mellon #endif
    231   1.92  explorer #if defined(KERBEROS5)
    232   1.92  explorer int	k5login(struct passwd *, char *, char *, char *);
    233   1.92  explorer void	k5destroy(void);
    234   1.92  explorer #endif
    235   1.63     lukem 
    236    1.8   deraadt int
    237   1.88     lukem main(int argc, char *argv[])
    238    1.1       cgd {
    239   1.76     lukem 	int		addrlen, ch, on = 1, tos, keepalive;
    240   1.73     lukem #ifdef KERBEROS5
    241   1.76     lukem 	krb5_error_code	kerror;
    242   1.38   mycroft #endif
    243    1.1       cgd 
    244   1.87     lukem 	connections = 1;
    245    1.1       cgd 	debug = 0;
    246   1.35     lukem 	logging = 0;
    247   1.87     lukem 	pdata = -1;
    248   1.51   msaitoh 	sflag = 0;
    249  1.102     lukem 	doutmp = 0;		/* default: don't log to utmp */
    250  1.102     lukem 	dowtmp = 1;		/* default: DO log to wtmp */
    251  1.101     lukem 	dropprivs = 0;
    252  1.101     lukem 	mapped = 0;
    253   1.87     lukem 	usedefault = 1;
    254   1.34     lukem 	(void)strcpy(confdir, _DEFAULT_CONFDIR);
    255   1.80     lukem 	hostname[0] = '\0';
    256  1.100     lukem 	homedir[0] = '\0';
    257   1.95     lukem 	gidcount = 0;
    258    1.1       cgd 
    259  1.101     lukem 	version = FTPD_VERSION;
    260  1.102     lukem 	while ((ch = getopt(argc, argv, "a:c:C:dh:Hlrst:T:u:UvV:W")) != -1) {
    261    1.8   deraadt 		switch (ch) {
    262   1.22       cjs 		case 'a':
    263   1.22       cjs 			anondir = optarg;
    264   1.22       cjs 			break;
    265   1.22       cjs 
    266   1.34     lukem 		case 'c':
    267   1.73     lukem 			(void)strlcpy(confdir, optarg, sizeof(confdir));
    268   1.34     lukem 			break;
    269   1.73     lukem 
    270   1.35     lukem 		case 'C':
    271   1.81     lukem 			pw = sgetpwnam(optarg);
    272   1.73     lukem 			exit(checkaccess(optarg) ? 0 : 1);
    273   1.35     lukem 			/* NOTREACHED */
    274   1.34     lukem 
    275    1.1       cgd 		case 'd':
    276   1.22       cjs 		case 'v':		/* deprecated */
    277    1.1       cgd 			debug = 1;
    278    1.1       cgd 			break;
    279    1.1       cgd 
    280   1.80     lukem 		case 'h':
    281   1.80     lukem 			strlcpy(hostname, optarg, sizeof(hostname));
    282   1.99     lukem 			break;
    283   1.99     lukem 
    284   1.99     lukem 		case 'H':
    285   1.99     lukem 			if (gethostname(hostname, sizeof(hostname)) == -1)
    286   1.99     lukem 				hostname[0] = '\0';
    287   1.99     lukem 			hostname[sizeof(hostname) - 1] = '\0';
    288   1.80     lukem 			break;
    289   1.80     lukem 
    290    1.1       cgd 		case 'l':
    291    1.8   deraadt 			logging++;	/* > 1 == extra logging */
    292    1.1       cgd 			break;
    293    1.1       cgd 
    294  1.101     lukem 		case 'r':
    295  1.101     lukem 			dropprivs = 1;
    296  1.101     lukem 			break;
    297  1.101     lukem 
    298   1.51   msaitoh 		case 's':
    299   1.51   msaitoh 			sflag = 1;
    300   1.51   msaitoh 			break;
    301   1.51   msaitoh 
    302    1.1       cgd 		case 't':
    303    1.1       cgd 		case 'T':
    304    1.1       cgd 		case 'u':
    305   1.32     lukem 			warnx("-%c has been deprecated in favour of ftpd.conf",
    306   1.24     lukem 			    ch);
    307    1.8   deraadt 			break;
    308    1.1       cgd 
    309   1.78     lukem 		case 'U':
    310   1.78     lukem 			doutmp = 1;
    311   1.78     lukem 			break;
    312   1.78     lukem 
    313  1.101     lukem 		case 'V':
    314  1.101     lukem 			if (EMPTYSTR(optarg) || strcmp(optarg, "-") == 0)
    315  1.101     lukem 				version = NULL;
    316  1.101     lukem 			else
    317  1.101     lukem 				version = xstrdup(optarg);
    318  1.101     lukem 			break;
    319  1.101     lukem 
    320  1.102     lukem 		case 'W':
    321  1.102     lukem 			dowtmp = 0;
    322  1.102     lukem 			break;
    323  1.102     lukem 
    324    1.1       cgd 		default:
    325   1.35     lukem 			if (optopt == 'a' || optopt == 'C')
    326   1.35     lukem 				exit(1);
    327    1.8   deraadt 			warnx("unknown flag -%c ignored", optopt);
    328    1.1       cgd 			break;
    329    1.1       cgd 		}
    330    1.1       cgd 	}
    331   1.35     lukem 
    332   1.35     lukem 	/*
    333   1.35     lukem 	 * LOG_NDELAY sets up the logging connection immediately,
    334   1.35     lukem 	 * necessary for anonymous ftp's that chroot and can't do it later.
    335   1.35     lukem 	 */
    336   1.79     lukem 	openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP);
    337  1.109     lukem 	memset((char *)&his_addr, 0, sizeof (his_addr));
    338  1.109     lukem 	addrlen = sizeof(his_addr.si_su);
    339  1.109     lukem 	if (getpeername(0, (struct sockaddr *)&his_addr.si_su, &addrlen) < 0) {
    340   1.35     lukem 		syslog(LOG_ERR, "getpeername (%s): %m",argv[0]);
    341   1.35     lukem 		exit(1);
    342   1.35     lukem 	}
    343  1.109     lukem 	his_addr.su_len = addrlen;
    344  1.109     lukem 	memset((char *)&ctrl_addr, 0, sizeof (ctrl_addr));
    345  1.109     lukem 	addrlen = sizeof(ctrl_addr.si_su);
    346   1.68    itojun 	if (getsockname(0, (struct sockaddr *)&ctrl_addr, &addrlen) < 0) {
    347   1.68    itojun 		syslog(LOG_ERR, "getsockname (%s): %m",argv[0]);
    348   1.68    itojun 		exit(1);
    349   1.68    itojun 	}
    350  1.109     lukem 	ctrl_addr.su_len = addrlen;
    351  1.104  christos #ifdef INET6
    352   1.67    itojun 	if (his_addr.su_family == AF_INET6
    353  1.109     lukem 	 && IN6_IS_ADDR_V4MAPPED(&his_addr.su_6addr)) {
    354   1.68    itojun #if 1
    355   1.68    itojun 		/*
    356   1.68    itojun 		 * IPv4 control connection arrived to AF_INET6 socket.
    357   1.68    itojun 		 * I hate to do this, but this is the easiest solution.
    358   1.90    itojun 		 *
    359   1.90    itojun 		 * The assumption is untrue on SIIT environment.
    360   1.68    itojun 		 */
    361  1.109     lukem 		struct sockinet tmp_addr;
    362   1.74    itojun 		const int off = sizeof(struct in6_addr) - sizeof(struct in_addr);
    363   1.68    itojun 
    364   1.68    itojun 		tmp_addr = his_addr;
    365   1.68    itojun 		memset(&his_addr, 0, sizeof(his_addr));
    366  1.109     lukem 		his_addr.su_family = AF_INET;
    367  1.109     lukem 		his_addr.su_len = sizeof(his_addr.si_su.su_sin);
    368  1.109     lukem 		memcpy(&his_addr.su_addr, &tmp_addr.su_6addr.s6_addr[off],
    369  1.109     lukem 		    sizeof(his_addr.su_addr));
    370  1.109     lukem 		his_addr.su_port = tmp_addr.su_port;
    371   1.68    itojun 
    372   1.68    itojun 		tmp_addr = ctrl_addr;
    373   1.68    itojun 		memset(&ctrl_addr, 0, sizeof(ctrl_addr));
    374  1.109     lukem 		ctrl_addr.su_family = AF_INET;
    375  1.109     lukem 		ctrl_addr.su_len = sizeof(ctrl_addr.si_su.su_sin);
    376  1.109     lukem 		memcpy(&ctrl_addr.su_addr, &tmp_addr.su_6addr.s6_addr[off],
    377  1.109     lukem 		    sizeof(ctrl_addr.su_addr));
    378  1.109     lukem 		ctrl_addr.su_port = tmp_addr.su_port;
    379   1.68    itojun #else
    380   1.67    itojun 		while (fgets(line, sizeof(line), fd) != NULL) {
    381   1.67    itojun 			if ((cp = strchr(line, '\n')) != NULL)
    382   1.67    itojun 				*cp = '\0';
    383   1.95     lukem 			reply(-530, "%s", line);
    384   1.67    itojun 		}
    385   1.67    itojun 		(void) fflush(stdout);
    386   1.67    itojun 		(void) fclose(fd);
    387   1.67    itojun 		reply(530,
    388  1.101     lukem 		    "Connection from IPv4 mapped address is not supported.");
    389   1.67    itojun 		exit(0);
    390   1.68    itojun #endif
    391   1.75    itojun 
    392   1.75    itojun 		mapped = 1;
    393   1.75    itojun 	} else
    394  1.109     lukem #endif /* INET6 */
    395   1.75    itojun 		mapped = 0;
    396   1.35     lukem #ifdef IP_TOS
    397   1.75    itojun 	if (!mapped && his_addr.su_family == AF_INET) {
    398   1.67    itojun 		tos = IPTOS_LOWDELAY;
    399   1.67    itojun 		if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&tos,
    400   1.67    itojun 			       sizeof(int)) < 0)
    401   1.67    itojun 			syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
    402   1.67    itojun 	}
    403   1.35     lukem #endif
    404   1.80     lukem 	/* if the hostname hasn't been given, attempt to determine it */
    405   1.80     lukem 	if (hostname[0] == '\0') {
    406  1.109     lukem 		if (getnameinfo((struct sockaddr *)&ctrl_addr.si_su,
    407  1.109     lukem 		    ctrl_addr.su_len, hostname, sizeof(hostname), NULL, 0, 0)
    408  1.109     lukem 		    != 0)
    409   1.80     lukem 			(void)gethostname(hostname, sizeof(hostname));
    410   1.80     lukem 		hostname[sizeof(hostname) - 1] = '\0';
    411   1.80     lukem 	}
    412   1.79     lukem 
    413   1.35     lukem 	/* set this here so klogin can use it... */
    414   1.35     lukem 	(void)snprintf(ttyline, sizeof(ttyline), "ftp%d", getpid());
    415   1.35     lukem 
    416    1.1       cgd 	(void) freopen(_PATH_DEVNULL, "w", stderr);
    417    1.1       cgd 	(void) signal(SIGPIPE, lostconn);
    418    1.1       cgd 	(void) signal(SIGCHLD, SIG_IGN);
    419   1.78     lukem 	if (signal(SIGURG, myoob) == SIG_ERR)
    420    1.1       cgd 		syslog(LOG_ERR, "signal: %m");
    421    1.1       cgd 
    422    1.1       cgd 	/* Try to handle urgent data inline */
    423    1.1       cgd #ifdef SO_OOBINLINE
    424    1.1       cgd 	if (setsockopt(0, SOL_SOCKET, SO_OOBINLINE, (char *)&on, sizeof(on)) < 0)
    425    1.1       cgd 		syslog(LOG_ERR, "setsockopt: %m");
    426    1.1       cgd #endif
    427   1.66    briggs 	/* Set keepalives on the socket to detect dropped connections.  */
    428   1.66    briggs #ifdef SO_KEEPALIVE
    429   1.66    briggs 	keepalive = 1;
    430   1.66    briggs 	if (setsockopt(0, SOL_SOCKET, SO_KEEPALIVE, (char *)&keepalive,
    431   1.66    briggs 	    sizeof(int)) < 0)
    432   1.66    briggs 		syslog(LOG_WARNING, "setsockopt (SO_KEEPALIVE): %m");
    433   1.66    briggs #endif
    434    1.1       cgd 
    435    1.1       cgd #ifdef	F_SETOWN
    436    1.1       cgd 	if (fcntl(fileno(stdin), F_SETOWN, getpid()) == -1)
    437    1.1       cgd 		syslog(LOG_ERR, "fcntl F_SETOWN: %m");
    438    1.1       cgd #endif
    439   1.67    itojun 	dolog((struct sockaddr *)&his_addr);
    440    1.1       cgd 	/*
    441    1.1       cgd 	 * Set up default state
    442    1.1       cgd 	 */
    443    1.1       cgd 	data = -1;
    444    1.1       cgd 	type = TYPE_A;
    445    1.1       cgd 	form = FORM_N;
    446    1.1       cgd 	stru = STRU_F;
    447    1.1       cgd 	mode = MODE_S;
    448    1.1       cgd 	tmpline[0] = '\0';
    449   1.57     lukem 	hasyyerrored = 0;
    450    1.8   deraadt 
    451   1.38   mycroft #ifdef KERBEROS5
    452   1.38   mycroft 	kerror = krb5_init_context(&kcontext);
    453   1.38   mycroft 	if (kerror) {
    454   1.38   mycroft 		syslog(LOG_NOTICE, "%s when initializing Kerberos context",
    455   1.38   mycroft 		    error_message(kerror));
    456   1.38   mycroft 		exit(0);
    457   1.38   mycroft 	}
    458   1.45  christos #endif /* KERBEROS5 */
    459   1.38   mycroft 
    460   1.82     lukem 	init_curclass();
    461   1.82     lukem 	curclass.timeout = 300;		/* 5 minutes, as per login(1) */
    462   1.82     lukem 	curclass.type = CLASS_REAL;
    463   1.82     lukem 
    464    1.8   deraadt 	/* If logins are disabled, print out the message. */
    465  1.100     lukem 	if (display_file(_PATH_NOLOGIN, 530)) {
    466    1.8   deraadt 		reply(530, "System not available.");
    467    1.8   deraadt 		exit(0);
    468    1.8   deraadt 	}
    469  1.100     lukem 	(void)display_file(conffilename(_PATH_FTPWELCOME), 220);
    470    1.8   deraadt 		/* reply(220,) must follow */
    471  1.101     lukem 	if (EMPTYSTR(version))
    472  1.101     lukem 		reply(220, "%s FTP server ready.", hostname);
    473  1.101     lukem 	else
    474  1.101     lukem 		reply(220, "%s FTP server (%s) ready.", hostname, version);
    475   1.73     lukem 
    476    1.1       cgd 	(void) setjmp(errcatch);
    477    1.1       cgd 	for (;;)
    478    1.1       cgd 		(void) yyparse();
    479    1.1       cgd 	/* NOTREACHED */
    480    1.1       cgd }
    481    1.1       cgd 
    482    1.8   deraadt static void
    483   1.88     lukem lostconn(int signo)
    484    1.1       cgd {
    485    1.8   deraadt 
    486    1.1       cgd 	if (debug)
    487    1.1       cgd 		syslog(LOG_DEBUG, "lost connection");
    488   1.35     lukem 	dologout(1);
    489    1.1       cgd }
    490    1.1       cgd 
    491    1.1       cgd /*
    492    1.1       cgd  * Save the result of a getpwnam.  Used for USER command, since
    493    1.1       cgd  * the data returned must not be clobbered by any other command
    494    1.1       cgd  * (e.g., globbing).
    495    1.1       cgd  */
    496    1.8   deraadt static struct passwd *
    497   1.88     lukem sgetpwnam(const char *name)
    498    1.1       cgd {
    499    1.1       cgd 	static struct passwd save;
    500    1.8   deraadt 	struct passwd *p;
    501    1.1       cgd 
    502    1.1       cgd 	if ((p = getpwnam(name)) == NULL)
    503    1.1       cgd 		return (p);
    504    1.1       cgd 	if (save.pw_name) {
    505   1.54   mycroft 		free((char *)save.pw_name);
    506   1.78     lukem 		memset(save.pw_passwd, 0, strlen(save.pw_passwd));
    507   1.54   mycroft 		free((char *)save.pw_passwd);
    508   1.54   mycroft 		free((char *)save.pw_gecos);
    509   1.54   mycroft 		free((char *)save.pw_dir);
    510   1.54   mycroft 		free((char *)save.pw_shell);
    511    1.1       cgd 	}
    512    1.1       cgd 	save = *p;
    513   1.58     lukem 	save.pw_name = xstrdup(p->pw_name);
    514   1.58     lukem 	save.pw_passwd = xstrdup(p->pw_passwd);
    515   1.58     lukem 	save.pw_gecos = xstrdup(p->pw_gecos);
    516   1.58     lukem 	save.pw_dir = xstrdup(p->pw_dir);
    517   1.58     lukem 	save.pw_shell = xstrdup(p->pw_shell);
    518    1.1       cgd 	return (&save);
    519    1.1       cgd }
    520    1.1       cgd 
    521   1.93     lukem static int	login_attempts;	/* number of failed login attempts */
    522   1.93     lukem static int	askpasswd;	/* had user command, ask for passwd */
    523   1.93     lukem static char	curname[10];	/* current USER name */
    524    1.1       cgd 
    525    1.1       cgd /*
    526    1.1       cgd  * USER command.
    527    1.1       cgd  * Sets global passwd pointer pw if named account exists and is acceptable;
    528    1.1       cgd  * sets askpasswd if a PASS command is expected.  If logged in previously,
    529    1.1       cgd  * need to reset state.  If name is "ftp" or "anonymous", the name is not in
    530    1.1       cgd  * _PATH_FTPUSERS, and ftp account exists, set guest and pw, then just return.
    531    1.1       cgd  * If account doesn't exist, ask for passwd anyway.  Otherwise, check user
    532    1.1       cgd  * requesting login privileges.  Disallow anyone who does not have a standard
    533    1.1       cgd  * shell as returned by getusershell().  Disallow anyone mentioned in the file
    534    1.1       cgd  * _PATH_FTPUSERS to allow people such as root and uucp to be avoided.
    535    1.1       cgd  */
    536    1.8   deraadt void
    537   1.88     lukem user(const char *name)
    538    1.1       cgd {
    539    1.1       cgd 	if (logged_in) {
    540   1.73     lukem 		switch (curclass.type) {
    541   1.73     lukem 		case CLASS_GUEST:
    542    1.1       cgd 			reply(530, "Can't change user from guest login.");
    543    1.1       cgd 			return;
    544   1.73     lukem 		case CLASS_CHROOT:
    545    1.5       cgd 			reply(530, "Can't change user from chroot user.");
    546    1.5       cgd 			return;
    547   1.73     lukem 		case CLASS_REAL:
    548  1.101     lukem 			if (dropprivs) {
    549  1.101     lukem 				reply(530, "Can't change user.");
    550  1.101     lukem 				return;
    551  1.101     lukem 			}
    552   1.73     lukem 			end_login();
    553   1.73     lukem 			break;
    554   1.73     lukem 		default:
    555   1.73     lukem 			abort();
    556    1.1       cgd 		}
    557    1.1       cgd 	}
    558    1.1       cgd 
    559   1.92  explorer #if defined(KERBEROS)
    560   1.38   mycroft 	kdestroy();
    561   1.38   mycroft #endif
    562   1.92  explorer #if defined(KERBEROS5)
    563   1.92  explorer 	k5destroy();
    564   1.92  explorer #endif
    565   1.38   mycroft 
    566   1.73     lukem 	curclass.type = CLASS_REAL;
    567    1.1       cgd 	if (strcmp(name, "ftp") == 0 || strcmp(name, "anonymous") == 0) {
    568   1.81     lukem 			/* need `pw' setup for checkaccess() and checkuser () */
    569   1.81     lukem 		if ((pw = sgetpwnam("ftp")) == NULL)
    570   1.81     lukem 			reply(530, "User %s unknown.", name);
    571   1.82     lukem 		else if (! checkaccess("ftp") || ! checkaccess("anonymous"))
    572    1.1       cgd 			reply(530, "User %s access denied.", name);
    573   1.81     lukem 		else {
    574   1.73     lukem 			curclass.type = CLASS_GUEST;
    575    1.1       cgd 			askpasswd = 1;
    576    1.8   deraadt 			reply(331,
    577    1.8   deraadt 			    "Guest login ok, type your name as password.");
    578   1.81     lukem 		}
    579    1.8   deraadt 		if (!askpasswd && logging)
    580    1.8   deraadt 			syslog(LOG_NOTICE,
    581    1.8   deraadt 			    "ANONYMOUS FTP LOGIN REFUSED FROM %s", remotehost);
    582    1.1       cgd 		return;
    583    1.1       cgd 	}
    584   1.34     lukem 
    585   1.19       cjs 	pw = sgetpwnam(name);
    586    1.8   deraadt 	if (logging)
    587   1.73     lukem 		strlcpy(curname, name, sizeof(curname));
    588   1.36   mycroft 
    589    1.7   deraadt #ifdef SKEY
    590   1.36   mycroft 	if (skey_haskey(name) == 0) {
    591  1.103    martin 		const char *myskey;
    592    1.7   deraadt 
    593    1.8   deraadt 		myskey = skey_keyinfo(name);
    594   1.36   mycroft 		reply(331, "Password [%s] required for %s.",
    595    1.8   deraadt 		    myskey ? myskey : "error getting challenge", name);
    596    1.7   deraadt 	} else
    597    1.7   deraadt #endif
    598    1.7   deraadt 		reply(331, "Password required for %s.", name);
    599    1.7   deraadt 
    600    1.1       cgd 	askpasswd = 1;
    601    1.1       cgd 	/*
    602    1.1       cgd 	 * Delay before reading passwd after first failed
    603    1.1       cgd 	 * attempt to slow down passwd-guessing programs.
    604    1.1       cgd 	 */
    605    1.1       cgd 	if (login_attempts)
    606    1.1       cgd 		sleep((unsigned) login_attempts);
    607    1.1       cgd }
    608    1.1       cgd 
    609    1.1       cgd /*
    610   1.58     lukem  * Determine whether something is to happen (allow access, chroot)
    611   1.58     lukem  * for a user. Each line is a shell-style glob followed by
    612   1.58     lukem  * `yes' or `no'.
    613   1.58     lukem  *
    614   1.58     lukem  * For backward compatability, `allow' and `deny' are synonymns
    615   1.58     lukem  * for `yes' and `no', respectively.
    616   1.19       cjs  *
    617   1.21       cjs  * Each glob is matched against the username in turn, and the first
    618   1.58     lukem  * match found is used. If no match is found, the result is the
    619   1.58     lukem  * argument `def'. If a match is found but without and explicit
    620   1.58     lukem  * `yes'/`no', the result is the opposite of def.
    621   1.58     lukem  *
    622   1.58     lukem  * If the file doesn't exist at all, the result is the argument
    623   1.58     lukem  * `nofile'
    624   1.21       cjs  *
    625   1.21       cjs  * Any line starting with `#' is considered a comment and ignored.
    626   1.19       cjs  *
    627   1.73     lukem  * Returns 0 if the user is denied, or 1 if they are allowed.
    628   1.81     lukem  *
    629   1.81     lukem  * NOTE: needs struct passwd *pw setup before use.
    630   1.19       cjs  */
    631   1.58     lukem int
    632   1.88     lukem checkuser(const char *fname, const char *name, int def, int nofile,
    633   1.88     lukem 	    char **retclass)
    634   1.58     lukem {
    635   1.58     lukem 	FILE	*fd;
    636   1.58     lukem 	int	 retval;
    637   1.73     lukem 	char	*glob, *perm, *class, *buf, *p;
    638   1.76     lukem 	size_t	 len, line;
    639   1.58     lukem 
    640   1.58     lukem 	retval = def;
    641   1.73     lukem 	if (retclass != NULL)
    642   1.73     lukem 		*retclass = NULL;
    643   1.58     lukem 	if ((fd = fopen(conffilename(fname), "r")) == NULL)
    644   1.58     lukem 		return nofile;
    645   1.19       cjs 
    646   1.76     lukem 	line = 0;
    647   1.73     lukem 	for (;
    648   1.76     lukem 	    (buf = fparseln(fd, &len, &line, NULL, FPARSELN_UNESCCOMM |
    649   1.73     lukem 	    		FPARSELN_UNESCCONT | FPARSELN_UNESCESC)) != NULL;
    650   1.73     lukem 	    free(buf), buf = NULL) {
    651   1.73     lukem 		glob = perm = class = NULL;
    652   1.73     lukem 		p = buf;
    653   1.73     lukem 		if (len < 1)
    654   1.73     lukem 			continue;
    655   1.73     lukem 		if (p[len - 1] == '\n')
    656   1.73     lukem 			p[--len] = '\0';
    657   1.73     lukem 		if (EMPTYSTR(p))
    658   1.19       cjs 			continue;
    659   1.73     lukem 
    660   1.73     lukem 		NEXTWORD(p, glob);
    661   1.73     lukem 		NEXTWORD(p, perm);
    662   1.73     lukem 		NEXTWORD(p, class);
    663   1.73     lukem 		if (EMPTYSTR(glob))
    664   1.70      tron 			continue;
    665   1.76     lukem 		if (!EMPTYSTR(class)) {
    666   1.76     lukem 			if (strcasecmp(class, "all") == 0 ||
    667   1.76     lukem 			    strcasecmp(class, "none") == 0) {
    668   1.76     lukem 				syslog(LOG_WARNING,
    669   1.76     lukem 		"%s line %d: illegal user-defined class `%s' - skipping entry",
    670   1.76     lukem 					    fname, (int)line, class);
    671   1.76     lukem 				continue;
    672   1.76     lukem 			}
    673   1.76     lukem 		}
    674   1.73     lukem 
    675   1.73     lukem 					/* have a host specifier */
    676   1.73     lukem 		if ((p = strchr(glob, '@')) != NULL) {
    677  1.109     lukem 			unsigned long	net, mask, addr;
    678   1.73     lukem 			int		bits;
    679   1.73     lukem 
    680   1.73     lukem 			*p++ = '\0';
    681   1.73     lukem 					/* check against network or CIDR */
    682   1.73     lukem 			if (isdigit(*p) &&
    683   1.73     lukem 			    (bits = inet_net_pton(AF_INET, p,
    684   1.73     lukem 			    &net, sizeof(net))) != -1) {
    685   1.73     lukem 				net = ntohl(net);
    686   1.73     lukem 				mask = 0xffffffffU << (32 - bits);
    687  1.109     lukem 				addr = ntohl(his_addr.su_addr.s_addr);
    688   1.73     lukem 				if ((addr & mask) != net)
    689   1.73     lukem 					continue;
    690   1.73     lukem 
    691   1.73     lukem 					/* check against hostname glob */
    692   1.73     lukem 			} else if (fnmatch(p, remotehost, 0) != 0)
    693   1.73     lukem 				continue;
    694   1.19       cjs 		}
    695   1.73     lukem 
    696   1.81     lukem 					/* have a group specifier */
    697   1.81     lukem 		if ((p = strchr(glob, ':')) != NULL) {
    698   1.81     lukem 			gid_t	*groups, *ng;
    699   1.81     lukem 			int	 gsize, i, found;
    700   1.81     lukem 
    701   1.81     lukem 			*p++ = '\0';
    702   1.81     lukem 			groups = NULL;
    703   1.81     lukem 			gsize = 16;
    704   1.81     lukem 			do {
    705   1.81     lukem 				ng = realloc(groups, gsize * sizeof(gid_t));
    706   1.81     lukem 				if (ng == NULL)
    707   1.81     lukem 					fatal(
    708   1.81     lukem 					    "Local resource failure: realloc");
    709   1.81     lukem 				groups = ng;
    710   1.81     lukem 			} while (getgrouplist(pw->pw_name, pw->pw_gid,
    711   1.81     lukem 						groups, &gsize) == -1);
    712   1.81     lukem 			found = 0;
    713   1.81     lukem 			for (i = 0; i < gsize; i++) {
    714   1.81     lukem 				struct group *g;
    715   1.81     lukem 
    716   1.81     lukem 				if ((g = getgrgid(groups[i])) == NULL)
    717   1.81     lukem 					continue;
    718   1.81     lukem 				if (fnmatch(p, g->gr_name, 0) == 0) {
    719   1.81     lukem 					found = 1;
    720   1.81     lukem 					break;
    721   1.81     lukem 				}
    722   1.81     lukem 			}
    723   1.81     lukem 			free(groups);
    724   1.81     lukem 			if (!found)
    725   1.81     lukem 				continue;
    726   1.81     lukem 		}
    727   1.81     lukem 
    728   1.73     lukem 					/* check against username glob */
    729   1.73     lukem 		if (fnmatch(glob, name, 0) != 0)
    730   1.73     lukem 			continue;
    731   1.73     lukem 
    732   1.73     lukem 		if (perm != NULL &&
    733   1.73     lukem 		    ((strcasecmp(perm, "allow") == 0) ||
    734   1.73     lukem 		     (strcasecmp(perm, "yes") == 0)))
    735   1.73     lukem 			retval = 1;
    736   1.73     lukem 		else if (perm != NULL &&
    737   1.73     lukem 		    ((strcasecmp(perm, "deny") == 0) ||
    738   1.73     lukem 		     (strcasecmp(perm, "no") == 0)))
    739   1.73     lukem 			retval = 0;
    740   1.73     lukem 		else
    741   1.73     lukem 			retval = !def;
    742   1.73     lukem 		if (!EMPTYSTR(class) && retclass != NULL)
    743   1.73     lukem 			*retclass = xstrdup(class);
    744   1.73     lukem 		free(buf);
    745   1.73     lukem 		break;
    746   1.19       cjs 	}
    747   1.19       cjs 	(void) fclose(fd);
    748   1.21       cjs 	return (retval);
    749   1.19       cjs }
    750   1.58     lukem 
    751   1.58     lukem /*
    752   1.58     lukem  * Check if user is allowed by /etc/ftpusers
    753   1.73     lukem  * returns 1 for yes, 0 for no
    754   1.81     lukem  *
    755   1.81     lukem  * NOTE: needs struct passwd *pw setup (for checkuser())
    756   1.58     lukem  */
    757   1.58     lukem int
    758   1.88     lukem checkaccess(const char *name)
    759   1.58     lukem {
    760   1.58     lukem 
    761   1.73     lukem 	return (checkuser(_PATH_FTPUSERS, name, 1, 0, NULL));
    762   1.58     lukem }
    763   1.19       cjs 
    764   1.19       cjs /*
    765    1.1       cgd  * Terminate login as previous user, if any, resetting state;
    766    1.1       cgd  * used when USER command is given or login fails.
    767    1.1       cgd  */
    768    1.8   deraadt static void
    769   1.88     lukem end_login(void)
    770    1.1       cgd {
    771    1.1       cgd 
    772   1.78     lukem 	if (logged_in) {
    773  1.102     lukem 		if (dowtmp)
    774  1.102     lukem 			logwtmp(ttyline, "", "");
    775   1.78     lukem 		if (doutmp)
    776   1.78     lukem 			logout(utmp.ut_line);
    777   1.78     lukem 	}
    778  1.101     lukem 			/* reset login state */
    779  1.101     lukem 	(void) seteuid((uid_t)0);
    780    1.1       cgd 	pw = NULL;
    781    1.1       cgd 	logged_in = 0;
    782   1.85     lukem 	quietmessages = 0;
    783   1.95     lukem 	gidcount = 0;
    784   1.73     lukem 	curclass.type = CLASS_REAL;
    785    1.1       cgd }
    786    1.1       cgd 
    787    1.8   deraadt void
    788   1.88     lukem pass(const char *passwd)
    789    1.1       cgd {
    790   1.78     lukem 	int		 rval;
    791  1.100     lukem 	const char	*cp, *shell;
    792  1.100     lukem 	char		*class, root[MAXPATHLEN];
    793    1.1       cgd 
    794   1.73     lukem 	class = NULL;
    795    1.1       cgd 	if (logged_in || askpasswd == 0) {
    796    1.1       cgd 		reply(503, "Login with USER first.");
    797    1.1       cgd 		return;
    798    1.1       cgd 	}
    799    1.1       cgd 	askpasswd = 0;
    800   1.73     lukem 	if (curclass.type != CLASS_GUEST) {
    801  1.101     lukem 			/* "ftp" is the only account allowed with no password */
    802    1.8   deraadt 		if (pw == NULL) {
    803    1.8   deraadt 			rval = 1;	/* failure below */
    804    1.8   deraadt 			goto skip;
    805    1.8   deraadt 		}
    806   1.92  explorer #if defined(KERBEROS)
    807   1.64   thorpej 		if (klogin(pw, "", hostname, (char *)passwd) == 0) {
    808   1.92  explorer 			rval = 0;
    809   1.92  explorer 			goto skip;
    810   1.92  explorer 		}
    811   1.92  explorer #endif
    812   1.92  explorer #if defined(KERBEROS5)
    813   1.92  explorer 		if (k5login(pw, "", hostname, (char *)passwd) == 0) {
    814   1.37   mycroft 			rval = 0;
    815   1.37   mycroft 			goto skip;
    816   1.37   mycroft 		}
    817   1.37   mycroft #endif
    818   1.36   mycroft #ifdef SKEY
    819   1.62     lukem 		if (skey_haskey(pw->pw_name) == 0) {
    820   1.62     lukem 			char *p;
    821   1.62     lukem 			int r;
    822   1.62     lukem 
    823   1.62     lukem 			p = xstrdup(passwd);
    824   1.62     lukem 			r = skey_passcheck(pw->pw_name, p);
    825   1.62     lukem 			free(p);
    826   1.62     lukem 			if (r != -1) {
    827   1.62     lukem 				rval = 0;
    828   1.62     lukem 				goto skip;
    829   1.62     lukem 			}
    830   1.36   mycroft 		}
    831    1.4       cgd #endif
    832   1.51   msaitoh 		if (!sflag && *pw->pw_passwd != '\0' &&
    833   1.37   mycroft 		    !strcmp(crypt(passwd, pw->pw_passwd), pw->pw_passwd)) {
    834    1.8   deraadt 			rval = 0;
    835    1.8   deraadt 			goto skip;
    836    1.8   deraadt 		}
    837   1.37   mycroft 		rval = 1;
    838    1.4       cgd 
    839   1.89     lukem  skip:
    840   1.46       cjs 		if (pw != NULL && pw->pw_expire && time(NULL) >= pw->pw_expire)
    841   1.45  christos 			rval = 2;
    842  1.101     lukem 
    843  1.101     lukem 			/*
    844  1.101     lukem 			 * If rval > 0, the user failed the authentication check
    845  1.101     lukem 			 * above.  If rval == 0, either Kerberos or local
    846  1.101     lukem 			 * authentication succeeded.
    847  1.101     lukem 			 */
    848    1.4       cgd 		if (rval) {
    849   1.98  sommerfe 			reply(530, "%s", rval == 2 ? "Password expired." :
    850   1.45  christos 			    "Login incorrect.");
    851   1.23     lukem 			if (logging) {
    852    1.8   deraadt 				syslog(LOG_NOTICE,
    853   1.23     lukem 				    "FTP LOGIN FAILED FROM %s", remotehost);
    854   1.23     lukem 				syslog(LOG_AUTHPRIV | LOG_NOTICE,
    855    1.8   deraadt 				    "FTP LOGIN FAILED FROM %s, %s",
    856    1.8   deraadt 				    remotehost, curname);
    857   1.23     lukem 			}
    858    1.1       cgd 			pw = NULL;
    859    1.1       cgd 			if (login_attempts++ >= 5) {
    860    1.1       cgd 				syslog(LOG_NOTICE,
    861    1.1       cgd 				    "repeated login failures from %s",
    862    1.1       cgd 				    remotehost);
    863    1.1       cgd 				exit(0);
    864    1.1       cgd 			}
    865    1.1       cgd 			return;
    866    1.1       cgd 		}
    867    1.1       cgd 	}
    868   1.19       cjs 
    869  1.101     lukem 			/* password ok; see if anything else prevents login */
    870   1.73     lukem 	if (! checkuser(_PATH_FTPUSERS, pw->pw_name, 1, 0, &class)) {
    871   1.19       cjs 		reply(530, "User %s may not use FTP.", pw->pw_name);
    872   1.19       cjs 		if (logging)
    873   1.19       cjs 			syslog(LOG_NOTICE, "FTP LOGIN REFUSED FROM %s, %s",
    874   1.19       cjs 			    remotehost, pw->pw_name);
    875   1.82     lukem 		goto bad;
    876   1.19       cjs 	}
    877  1.101     lukem 			/* if not guest user, check for valid shell */
    878   1.19       cjs 	if ((shell = pw->pw_shell) == NULL || *shell == 0)
    879   1.19       cjs 		shell = _PATH_BSHELL;
    880   1.19       cjs 	while ((cp = getusershell()) != NULL)
    881   1.19       cjs 		if (strcmp(cp, shell) == 0)
    882   1.19       cjs 			break;
    883   1.19       cjs 	endusershell();
    884   1.73     lukem 	if (cp == NULL && curclass.type != CLASS_GUEST) {
    885   1.19       cjs 		reply(530, "User %s may not use FTP.", pw->pw_name);
    886   1.19       cjs 		if (logging)
    887   1.62     lukem 			syslog(LOG_NOTICE, "FTP LOGIN REFUSED FROM %s, %s",
    888   1.19       cjs 			    remotehost, pw->pw_name);
    889   1.82     lukem 		goto bad;
    890   1.19       cjs 	}
    891   1.19       cjs 
    892    1.1       cgd 	login_attempts = 0;		/* this time successful */
    893    1.8   deraadt 	if (setegid((gid_t)pw->pw_gid) < 0) {
    894    1.8   deraadt 		reply(550, "Can't set gid.");
    895   1.82     lukem 		goto bad;
    896    1.8   deraadt 	}
    897    1.1       cgd 	(void) initgroups(pw->pw_name, pw->pw_gid);
    898  1.101     lukem 			/* cache groups for cmds.c::matchgroup() */
    899   1.95     lukem 	gidcount = getgroups(sizeof(gidlist), gidlist);
    900    1.1       cgd 
    901  1.101     lukem 			/* open wtmp before chroot */
    902  1.102     lukem 	if (dowtmp)
    903  1.102     lukem 		logwtmp(ttyline, pw->pw_name, remotehost);
    904   1.78     lukem 
    905  1.101     lukem 			/* open utmp before chroot */
    906   1.78     lukem 	if (doutmp) {
    907   1.78     lukem 		memset((void *)&utmp, 0, sizeof(utmp));
    908   1.78     lukem 		(void)time(&utmp.ut_time);
    909   1.78     lukem 		(void)strncpy(utmp.ut_name, pw->pw_name, sizeof(utmp.ut_name));
    910   1.78     lukem 		(void)strncpy(utmp.ut_host, remotehost, sizeof(utmp.ut_host));
    911   1.78     lukem 		(void)strncpy(utmp.ut_line, ttyline, sizeof(utmp.ut_line));
    912   1.78     lukem 		login(&utmp);
    913   1.78     lukem 	}
    914   1.78     lukem 
    915    1.1       cgd 	logged_in = 1;
    916    1.1       cgd 
    917   1.73     lukem 			/* check user in /etc/ftpchroot */
    918   1.73     lukem 	if (checkuser(_PATH_FTPCHROOT, pw->pw_name, 0, 0, NULL)) {
    919   1.73     lukem 		if (curclass.type == CLASS_GUEST) {
    920   1.73     lukem 			syslog(LOG_NOTICE,
    921   1.73     lukem 	    "Can't change guest user to chroot class; remove entry in %s",
    922   1.73     lukem 			    _PATH_FTPCHROOT);
    923   1.73     lukem 			exit(1);
    924   1.73     lukem 		}
    925   1.73     lukem 		curclass.type = CLASS_CHROOT;
    926   1.73     lukem 	}
    927   1.73     lukem 	if (class == NULL) {
    928   1.73     lukem 		switch (curclass.type) {
    929   1.73     lukem 		case CLASS_GUEST:
    930   1.73     lukem 			class = xstrdup("guest");
    931   1.73     lukem 			break;
    932   1.73     lukem 		case CLASS_CHROOT:
    933   1.73     lukem 			class = xstrdup("chroot");
    934   1.73     lukem 			break;
    935   1.73     lukem 		case CLASS_REAL:
    936   1.73     lukem 			class = xstrdup("real");
    937   1.73     lukem 			break;
    938   1.73     lukem 		default:
    939   1.73     lukem 			abort();
    940   1.73     lukem 		}
    941   1.73     lukem 	}
    942   1.24     lukem 
    943  1.101     lukem 			/* parse ftpd.conf, setting up various parameters */
    944   1.73     lukem 	parse_conf(class);
    945   1.82     lukem 	count_users();
    946   1.82     lukem 	if (curclass.limit != -1 && connections > curclass.limit) {
    947   1.82     lukem 		if (! EMPTYSTR(curclass.limitfile))
    948  1.100     lukem 			(void)display_file(conffilename(curclass.limitfile),
    949  1.100     lukem 			    530);
    950   1.82     lukem 		reply(530,
    951   1.83     lukem 		    "User %s access denied, connection limit of %d reached.",
    952   1.82     lukem 		    pw->pw_name, curclass.limit);
    953   1.82     lukem 		syslog(LOG_NOTICE,
    954  1.100     lukem     "Maximum connection limit of %d for class %s reached, login refused for %s",
    955  1.100     lukem 		    curclass.limit, curclass.classname, pw->pw_name);
    956   1.82     lukem 		goto bad;
    957   1.82     lukem 	}
    958   1.24     lukem 
    959  1.100     lukem 	homedir[0] = '/';
    960   1.73     lukem 	switch (curclass.type) {
    961   1.73     lukem 	case CLASS_GUEST:
    962  1.101     lukem 			/*
    963  1.101     lukem 			 * We MUST do a chdir() after the chroot. Otherwise
    964  1.101     lukem 			 * the old current directory will be accessible as "."
    965  1.101     lukem 			 * outside the new root!
    966  1.101     lukem 			 */
    967  1.100     lukem 		format_path(root,
    968  1.100     lukem 		    curclass.chroot ? curclass.chroot :
    969  1.100     lukem 		    anondir ? anondir :
    970  1.100     lukem 		    pw->pw_dir);
    971  1.100     lukem 		format_path(homedir,
    972  1.100     lukem 		    curclass.homedir ? curclass.homedir :
    973  1.100     lukem 		    "/");
    974  1.100     lukem 		if (EMPTYSTR(homedir))
    975  1.100     lukem 			homedir[0] = '/';
    976  1.100     lukem 		if (EMPTYSTR(root) || chroot(root) < 0) {
    977  1.100     lukem 			syslog(LOG_NOTICE,
    978  1.100     lukem 			    "GUEST user %s: can't chroot to %s: %m",
    979  1.100     lukem 			    pw->pw_name, root);
    980  1.100     lukem 			goto bad_guest;
    981  1.100     lukem 		}
    982  1.100     lukem 		if (chdir(homedir) < 0) {
    983  1.100     lukem 			syslog(LOG_NOTICE,
    984  1.100     lukem 			    "GUEST user %s: can't chdir to %s: %m",
    985  1.100     lukem 			    pw->pw_name, homedir);
    986  1.100     lukem  bad_guest:
    987    1.1       cgd 			reply(550, "Can't set guest privileges.");
    988    1.5       cgd 			goto bad;
    989    1.5       cgd 		}
    990   1.73     lukem 		break;
    991   1.73     lukem 	case CLASS_CHROOT:
    992  1.100     lukem 		format_path(root,
    993  1.100     lukem 		    curclass.chroot ? curclass.chroot :
    994  1.100     lukem 		    pw->pw_dir);
    995  1.100     lukem 		format_path(homedir,
    996  1.100     lukem 		    curclass.homedir ? curclass.homedir :
    997  1.100     lukem 		    "/");
    998  1.100     lukem 		if (EMPTYSTR(homedir))
    999  1.100     lukem 			homedir[0] = '/';
   1000  1.100     lukem 		if (EMPTYSTR(root) || chroot(root) < 0) {
   1001  1.100     lukem 			syslog(LOG_NOTICE,
   1002  1.100     lukem 			    "CHROOT user %s: can't chroot to %s: %m",
   1003  1.100     lukem 			    pw->pw_name, root);
   1004  1.100     lukem 			goto bad_chroot;
   1005  1.100     lukem 		}
   1006  1.100     lukem 		if (chdir(homedir) < 0) {
   1007  1.100     lukem 			syslog(LOG_NOTICE,
   1008  1.100     lukem 			    "CHROOT user %s: can't chdir to %s: %m",
   1009  1.100     lukem 			    pw->pw_name, homedir);
   1010  1.100     lukem  bad_chroot:
   1011    1.5       cgd 			reply(550, "Can't change root.");
   1012    1.1       cgd 			goto bad;
   1013    1.1       cgd 		}
   1014   1.73     lukem 		break;
   1015   1.73     lukem 	case CLASS_REAL:
   1016  1.100     lukem 		format_path(homedir,
   1017  1.100     lukem 		    curclass.homedir ? curclass.homedir :
   1018  1.100     lukem 		    pw->pw_dir);
   1019  1.100     lukem 		if (EMPTYSTR(homedir) || chdir(homedir) < 0) {
   1020   1.73     lukem 			if (chdir("/") < 0) {
   1021  1.100     lukem 				syslog(LOG_NOTICE,
   1022  1.100     lukem 				    "REAL user %s: can't chdir to %s: %m",
   1023  1.100     lukem 				    pw->pw_name,
   1024  1.100     lukem 				    !EMPTYSTR(homedir) ?  homedir : "/");
   1025   1.73     lukem 				reply(530,
   1026   1.73     lukem 				    "User %s: can't change directory to %s.",
   1027  1.100     lukem 				    pw->pw_name,
   1028  1.100     lukem 				    !EMPTYSTR(homedir) ? homedir : "/");
   1029   1.73     lukem 				goto bad;
   1030  1.100     lukem 			} else {
   1031   1.95     lukem 				reply(-230,
   1032   1.73     lukem 				    "No directory! Logging in with home=/");
   1033  1.100     lukem 				homedir[0] = '/';
   1034  1.100     lukem 			}
   1035  1.100     lukem 		}
   1036   1.73     lukem 		break;
   1037   1.73     lukem 	}
   1038  1.105  jdolecek 	setlogin(pw->pw_name);
   1039  1.101     lukem 	if (dropprivs ||
   1040  1.101     lukem 	    (curclass.type != CLASS_REAL &&
   1041  1.101     lukem 	    ntohs(ctrl_addr.su_port) > IPPORT_RESERVED + 1)) {
   1042  1.101     lukem 		dropprivs++;
   1043  1.101     lukem 		if (setgid((gid_t)pw->pw_gid) < 0) {
   1044  1.101     lukem 			reply(550, "Can't set gid.");
   1045  1.101     lukem 			goto bad;
   1046  1.101     lukem 		}
   1047  1.101     lukem 		if (setuid((uid_t)pw->pw_uid) < 0) {
   1048  1.101     lukem 			reply(550, "Can't set uid.");
   1049  1.101     lukem 			goto bad;
   1050  1.101     lukem 		}
   1051  1.101     lukem 	} else {
   1052  1.101     lukem 		if (seteuid((uid_t)pw->pw_uid) < 0) {
   1053  1.101     lukem 			reply(550, "Can't set uid.");
   1054  1.101     lukem 			goto bad;
   1055  1.101     lukem 		}
   1056    1.1       cgd 	}
   1057  1.100     lukem 	setenv("HOME", homedir, 1);
   1058   1.44     lukem 
   1059   1.85     lukem 	if (curclass.type == CLASS_GUEST && passwd[0] == '-')
   1060   1.85     lukem 		quietmessages = 1;
   1061   1.85     lukem 
   1062  1.101     lukem 			/*
   1063  1.101     lukem 			 * Display a login message, if it exists.
   1064  1.101     lukem 			 * N.B. reply(230,) must follow the message.
   1065  1.101     lukem 			 */
   1066  1.100     lukem 	(void)display_file(conffilename(curclass.motd), 230);
   1067   1.24     lukem 	show_chdir_messages(230);
   1068   1.73     lukem 	if (curclass.type == CLASS_GUEST) {
   1069    1.1       cgd 		reply(230, "Guest login ok, access restrictions apply.");
   1070    1.6       cgd #ifdef HASSETPROCTITLE
   1071    1.8   deraadt 		snprintf(proctitle, sizeof(proctitle),
   1072    1.8   deraadt 		    "%s: anonymous/%.*s", remotehost,
   1073   1.25  christos 		    (int) (sizeof(proctitle) - sizeof(remotehost) -
   1074   1.25  christos 		    sizeof(": anonymous/")), passwd);
   1075   1.97    itojun 		setproctitle("%s", proctitle);
   1076    1.6       cgd #endif /* HASSETPROCTITLE */
   1077    1.1       cgd 		if (logging)
   1078   1.81     lukem 			syslog(LOG_INFO,
   1079   1.81     lukem 			"ANONYMOUS FTP LOGIN FROM %s, %s (class: %s, type: %s)",
   1080   1.81     lukem 			    remotehost, passwd,
   1081   1.81     lukem 			    curclass.classname, CURCLASSTYPE);
   1082    1.1       cgd 	} else {
   1083    1.1       cgd 		reply(230, "User %s logged in.", pw->pw_name);
   1084    1.6       cgd #ifdef HASSETPROCTITLE
   1085    1.8   deraadt 		snprintf(proctitle, sizeof(proctitle),
   1086    1.8   deraadt 		    "%s: %s", remotehost, pw->pw_name);
   1087   1.97    itojun 		setproctitle("%s", proctitle);
   1088    1.6       cgd #endif /* HASSETPROCTITLE */
   1089    1.1       cgd 		if (logging)
   1090   1.81     lukem 			syslog(LOG_INFO,
   1091   1.81     lukem 			    "FTP LOGIN FROM %s as %s (class: %s, type: %s)",
   1092   1.81     lukem 			    remotehost, pw->pw_name,
   1093   1.81     lukem 			    curclass.classname, CURCLASSTYPE);
   1094    1.1       cgd 	}
   1095   1.24     lukem 	(void) umask(curclass.umask);
   1096   1.73     lukem 	goto cleanuppass;
   1097   1.73     lukem  bad:
   1098  1.101     lukem 			/* Forget all about it... */
   1099    1.1       cgd 	end_login();
   1100   1.73     lukem  cleanuppass:
   1101   1.73     lukem 	if (class)
   1102   1.73     lukem 		free(class);
   1103    1.1       cgd }
   1104    1.1       cgd 
   1105    1.8   deraadt void
   1106   1.88     lukem retrieve(char *argv[], const char *name)
   1107    1.1       cgd {
   1108   1.95     lukem 	FILE *fin, *dout;
   1109    1.1       cgd 	struct stat st;
   1110   1.88     lukem 	int (*closefunc)(FILE *) = NULL;
   1111   1.63     lukem 	int log, sendrv, closerv, stderrfd, isconversion, isdata, isls;
   1112   1.62     lukem 	struct timeval start, finish, td, *tdp;
   1113   1.62     lukem 	const char *dispname;
   1114    1.1       cgd 
   1115   1.49     lukem 	sendrv = closerv = stderrfd = -1;
   1116   1.63     lukem 	isconversion = isdata = isls = log = 0;
   1117   1.62     lukem 	tdp = NULL;
   1118   1.62     lukem 	dispname = name;
   1119   1.95     lukem 	fin = dout = NULL;
   1120   1.71     lukem 	if (argv == NULL) {
   1121   1.62     lukem 		log = 1;
   1122   1.62     lukem 		isdata = 1;
   1123   1.62     lukem 		fin = fopen(name, "r");
   1124   1.62     lukem 		closefunc = fclose;
   1125   1.24     lukem 		if (fin == NULL)
   1126   1.71     lukem 			argv = do_conversion(name);
   1127   1.71     lukem 		if (argv != NULL) {
   1128   1.49     lukem 			isconversion++;
   1129   1.71     lukem 			syslog(LOG_INFO, "get command: '%s' on '%s'",
   1130   1.71     lukem 			    argv[0], name);
   1131   1.49     lukem 		}
   1132   1.24     lukem 	}
   1133   1.71     lukem 	if (argv != NULL) {
   1134   1.82     lukem 		char temp[MAXPATHLEN];
   1135    1.1       cgd 
   1136   1.71     lukem 		if (strcmp(argv[0], INTERNAL_LS) == 0) {
   1137   1.63     lukem 			isls = 1;
   1138   1.63     lukem 			stderrfd = -1;
   1139   1.63     lukem 		} else {
   1140   1.63     lukem 			(void)snprintf(temp, sizeof(temp), "%s", TMPFILE);
   1141   1.63     lukem 			stderrfd = mkstemp(temp);
   1142   1.63     lukem 			if (stderrfd != -1)
   1143   1.63     lukem 				(void)unlink(temp);
   1144   1.63     lukem 		}
   1145   1.71     lukem 		dispname = argv[0];
   1146   1.71     lukem 		fin = ftpd_popen(argv, "r", stderrfd);
   1147   1.62     lukem 		closefunc = ftpd_pclose;
   1148    1.1       cgd 		st.st_size = -1;
   1149    1.1       cgd 		st.st_blksize = BUFSIZ;
   1150    1.1       cgd 	}
   1151    1.1       cgd 	if (fin == NULL) {
   1152    1.8   deraadt 		if (errno != 0) {
   1153   1.62     lukem 			perror_reply(550, dispname);
   1154   1.62     lukem 			if (log)
   1155   1.62     lukem 				logcmd("get", -1, name, NULL, NULL,
   1156   1.62     lukem 				    strerror(errno));
   1157    1.8   deraadt 		}
   1158   1.71     lukem 		goto cleanupretrieve;
   1159    1.1       cgd 	}
   1160    1.8   deraadt 	byte_count = -1;
   1161   1.71     lukem 	if (argv == NULL
   1162   1.49     lukem 	    && (fstat(fileno(fin), &st) < 0 || !S_ISREG(st.st_mode))) {
   1163   1.62     lukem 		reply(550, "%s: not a plain file.", dispname);
   1164    1.1       cgd 		goto done;
   1165    1.1       cgd 	}
   1166    1.1       cgd 	if (restart_point) {
   1167    1.1       cgd 		if (type == TYPE_A) {
   1168   1.49     lukem 			off_t i;
   1169    1.8   deraadt 			int c;
   1170    1.1       cgd 
   1171   1.49     lukem 			for (i = 0; i < restart_point; i++) {
   1172    1.1       cgd 				if ((c=getc(fin)) == EOF) {
   1173   1.62     lukem 					perror_reply(550, dispname);
   1174    1.1       cgd 					goto done;
   1175    1.1       cgd 				}
   1176    1.1       cgd 				if (c == '\n')
   1177    1.1       cgd 					i++;
   1178    1.8   deraadt 			}
   1179   1.31    kleink 		} else if (lseek(fileno(fin), restart_point, SEEK_SET) < 0) {
   1180   1.62     lukem 			perror_reply(550, dispname);
   1181    1.1       cgd 			goto done;
   1182    1.1       cgd 		}
   1183    1.1       cgd 	}
   1184   1.62     lukem 	dout = dataconn(dispname, st.st_size, "w");
   1185    1.1       cgd 	if (dout == NULL)
   1186    1.1       cgd 		goto done;
   1187   1.62     lukem 
   1188   1.62     lukem 	(void)gettimeofday(&start, NULL);
   1189   1.62     lukem 	sendrv = send_data(fin, dout, st.st_blksize, isdata);
   1190   1.62     lukem 	(void)gettimeofday(&finish, NULL);
   1191   1.95     lukem 	(void) fclose(dout);		/* close now to affect timing stats */
   1192   1.95     lukem 	dout = NULL;
   1193   1.62     lukem 	timersub(&finish, &start, &td);
   1194   1.62     lukem 	tdp = &td;
   1195   1.89     lukem  done:
   1196   1.24     lukem 	if (log)
   1197   1.62     lukem 		logcmd("get", byte_count, name, NULL, tdp, NULL);
   1198   1.49     lukem 	closerv = (*closefunc)(fin);
   1199   1.49     lukem 	if (sendrv == 0) {
   1200   1.49     lukem 		FILE *err;
   1201   1.49     lukem 		struct stat sb;
   1202   1.49     lukem 
   1203   1.71     lukem 		if (!isls && argv != NULL && closerv != 0) {
   1204   1.95     lukem 			reply(-226,
   1205   1.49     lukem 			    "Command returned an exit status of %d",
   1206   1.49     lukem 			    closerv);
   1207   1.49     lukem 			if (isconversion)
   1208   1.49     lukem 				syslog(LOG_INFO,
   1209   1.71     lukem 				    "retrieve command: '%s' returned %d",
   1210   1.71     lukem 				    argv[0], closerv);
   1211   1.49     lukem 		}
   1212   1.71     lukem 		if (!isls && argv != NULL && stderrfd != -1 &&
   1213   1.49     lukem 		    (fstat(stderrfd, &sb) == 0) && sb.st_size > 0 &&
   1214   1.49     lukem 		    ((err = fdopen(stderrfd, "r")) != NULL)) {
   1215   1.49     lukem 			char *cp, line[LINE_MAX];
   1216   1.49     lukem 
   1217   1.95     lukem 			reply(-226, "Command error messages:");
   1218   1.49     lukem 			rewind(err);
   1219   1.49     lukem 			while (fgets(line, sizeof(line), err) != NULL) {
   1220   1.49     lukem 				if ((cp = strchr(line, '\n')) != NULL)
   1221   1.49     lukem 					*cp = '\0';
   1222   1.95     lukem 				reply(0, "  %s", line);
   1223   1.49     lukem 			}
   1224   1.49     lukem 			(void) fflush(stdout);
   1225   1.49     lukem 			(void) fclose(err);
   1226   1.49     lukem 				/* a reply(226,) must follow */
   1227   1.49     lukem 		}
   1228   1.49     lukem 		reply(226, "Transfer complete.");
   1229   1.49     lukem 	}
   1230   1.71     lukem  cleanupretrieve:
   1231   1.95     lukem 	closedataconn(dout);
   1232   1.49     lukem 	if (stderrfd != -1)
   1233   1.49     lukem 		(void)close(stderrfd);
   1234   1.71     lukem 	if (isconversion)
   1235   1.71     lukem 		free(argv);
   1236    1.1       cgd }
   1237    1.1       cgd 
   1238    1.8   deraadt void
   1239   1.88     lukem store(const char *name, const char *mode, int unique)
   1240    1.1       cgd {
   1241    1.1       cgd 	FILE *fout, *din;
   1242    1.1       cgd 	struct stat st;
   1243   1.88     lukem 	int (*closefunc)(FILE *);
   1244   1.62     lukem 	struct timeval start, finish, td, *tdp;
   1245   1.62     lukem 	char *desc;
   1246    1.1       cgd 
   1247   1.95     lukem 	din = NULL;
   1248   1.62     lukem 	desc = (*mode == 'w') ? "put" : "append";
   1249    1.1       cgd 	if (unique && stat(name, &st) == 0 &&
   1250    1.8   deraadt 	    (name = gunique(name)) == NULL) {
   1251   1.62     lukem 		logcmd(desc, -1, name, NULL, NULL, "cannot create unique file");
   1252   1.89     lukem 		goto cleanupstore;
   1253    1.8   deraadt 	}
   1254    1.1       cgd 
   1255    1.1       cgd 	if (restart_point)
   1256    1.8   deraadt 		mode = "r+";
   1257    1.1       cgd 	fout = fopen(name, mode);
   1258    1.1       cgd 	closefunc = fclose;
   1259   1.62     lukem 	tdp = NULL;
   1260    1.1       cgd 	if (fout == NULL) {
   1261    1.1       cgd 		perror_reply(553, name);
   1262   1.62     lukem 		logcmd(desc, -1, name, NULL, NULL, strerror(errno));
   1263   1.89     lukem 		goto cleanupstore;
   1264    1.1       cgd 	}
   1265    1.8   deraadt 	byte_count = -1;
   1266    1.1       cgd 	if (restart_point) {
   1267    1.1       cgd 		if (type == TYPE_A) {
   1268   1.49     lukem 			off_t i;
   1269    1.8   deraadt 			int c;
   1270    1.1       cgd 
   1271   1.49     lukem 			for (i = 0; i < restart_point; i++) {
   1272    1.1       cgd 				if ((c=getc(fout)) == EOF) {
   1273    1.1       cgd 					perror_reply(550, name);
   1274    1.1       cgd 					goto done;
   1275    1.1       cgd 				}
   1276    1.1       cgd 				if (c == '\n')
   1277    1.1       cgd 					i++;
   1278    1.8   deraadt 			}
   1279    1.1       cgd 			/*
   1280    1.1       cgd 			 * We must do this seek to "current" position
   1281    1.1       cgd 			 * because we are changing from reading to
   1282    1.1       cgd 			 * writing.
   1283    1.1       cgd 			 */
   1284   1.20     lukem 			if (fseek(fout, 0L, SEEK_CUR) < 0) {
   1285    1.1       cgd 				perror_reply(550, name);
   1286    1.1       cgd 				goto done;
   1287    1.1       cgd 			}
   1288   1.31    kleink 		} else if (lseek(fileno(fout), restart_point, SEEK_SET) < 0) {
   1289    1.1       cgd 			perror_reply(550, name);
   1290    1.1       cgd 			goto done;
   1291    1.1       cgd 		}
   1292    1.1       cgd 	}
   1293    1.1       cgd 	din = dataconn(name, (off_t)-1, "r");
   1294    1.1       cgd 	if (din == NULL)
   1295    1.1       cgd 		goto done;
   1296   1.62     lukem 	(void)gettimeofday(&start, NULL);
   1297    1.1       cgd 	if (receive_data(din, fout) == 0) {
   1298    1.1       cgd 		if (unique)
   1299    1.1       cgd 			reply(226, "Transfer complete (unique file name:%s).",
   1300    1.1       cgd 			    name);
   1301    1.1       cgd 		else
   1302    1.1       cgd 			reply(226, "Transfer complete.");
   1303    1.1       cgd 	}
   1304   1.62     lukem 	(void)gettimeofday(&finish, NULL);
   1305   1.95     lukem 	(void) fclose(din);		/* close now to affect timing stats */
   1306   1.95     lukem 	din = NULL;
   1307   1.62     lukem 	timersub(&finish, &start, &td);
   1308   1.62     lukem 	tdp = &td;
   1309   1.89     lukem  done:
   1310   1.62     lukem 	logcmd(desc, byte_count, name, NULL, tdp, NULL);
   1311    1.1       cgd 	(*closefunc)(fout);
   1312   1.89     lukem  cleanupstore:
   1313   1.95     lukem 	closedataconn(din);
   1314    1.1       cgd }
   1315    1.1       cgd 
   1316    1.8   deraadt static FILE *
   1317   1.88     lukem getdatasock(const char *mode)
   1318    1.1       cgd {
   1319  1.101     lukem 	int		on, s, t, tries;
   1320  1.101     lukem 	in_port_t	port;
   1321    1.1       cgd 
   1322  1.101     lukem 	on = 1;
   1323    1.1       cgd 	if (data >= 0)
   1324    1.1       cgd 		return (fdopen(data, mode));
   1325  1.101     lukem 	if (! dropprivs)
   1326  1.101     lukem 		(void) seteuid((uid_t)0);
   1327   1.67    itojun 	s = socket(ctrl_addr.su_family, SOCK_STREAM, 0);
   1328    1.1       cgd 	if (s < 0)
   1329    1.1       cgd 		goto bad;
   1330    1.1       cgd 	if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
   1331    1.8   deraadt 	    (char *) &on, sizeof(on)) < 0)
   1332    1.1       cgd 		goto bad;
   1333   1.66    briggs 	if (setsockopt(s, SOL_SOCKET, SO_KEEPALIVE,
   1334   1.66    briggs 	    (char *) &on, sizeof(on)) < 0)
   1335   1.66    briggs 		goto bad;
   1336  1.101     lukem 			/* anchor socket to avoid multi-homing problems */
   1337   1.67    itojun 	data_source = ctrl_addr;
   1338  1.101     lukem 			/*
   1339  1.101     lukem 			 * By default source port for PORT connctions is
   1340  1.101     lukem 			 * ctrlport-1 (see RFC959 section 5.2).
   1341  1.101     lukem 			 * However, if privs have been dropped and that
   1342  1.101     lukem 			 * would be < IPPORT_RESERVED, use a random port
   1343  1.101     lukem 			 * instead.
   1344  1.101     lukem 			 */
   1345  1.101     lukem 	port = ntohs(ctrl_addr.su_port) - 1;
   1346  1.101     lukem 	if (dropprivs && port < IPPORT_RESERVED)
   1347  1.101     lukem 		port = 0;		/* use random port */
   1348  1.101     lukem 	data_source.su_port = htons(port);
   1349  1.101     lukem 
   1350    1.1       cgd 	for (tries = 1; ; tries++) {
   1351  1.109     lukem 		if (bind(s, (struct sockaddr *)&data_source.si_su,
   1352   1.67    itojun 		    data_source.su_len) >= 0)
   1353    1.1       cgd 			break;
   1354    1.1       cgd 		if (errno != EADDRINUSE || tries > 10)
   1355    1.1       cgd 			goto bad;
   1356    1.1       cgd 		sleep(tries);
   1357    1.1       cgd 	}
   1358  1.101     lukem 	if (! dropprivs)
   1359  1.101     lukem 		(void) seteuid((uid_t)pw->pw_uid);
   1360    1.1       cgd #ifdef IP_TOS
   1361   1.75    itojun 	if (!mapped && ctrl_addr.su_family == AF_INET) {
   1362   1.67    itojun 		on = IPTOS_THROUGHPUT;
   1363   1.67    itojun 		if (setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&on,
   1364   1.67    itojun 			       sizeof(int)) < 0)
   1365   1.67    itojun 			syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
   1366   1.67    itojun 	}
   1367    1.1       cgd #endif
   1368    1.1       cgd 	return (fdopen(s, mode));
   1369   1.89     lukem  bad:
   1370  1.101     lukem 		/* Return the real value of errno (close may change it) */
   1371    1.8   deraadt 	t = errno;
   1372  1.101     lukem 	if (! dropprivs)
   1373  1.101     lukem 		(void) seteuid((uid_t)pw->pw_uid);
   1374    1.1       cgd 	(void) close(s);
   1375    1.8   deraadt 	errno = t;
   1376    1.1       cgd 	return (NULL);
   1377    1.1       cgd }
   1378    1.1       cgd 
   1379   1.93     lukem FILE *
   1380   1.88     lukem dataconn(const char *name, off_t size, const char *mode)
   1381    1.1       cgd {
   1382    1.1       cgd 	char sizebuf[32];
   1383    1.1       cgd 	FILE *file;
   1384   1.66    briggs 	int retry = 0, tos, keepalive;
   1385    1.1       cgd 
   1386    1.1       cgd 	file_size = size;
   1387    1.1       cgd 	byte_count = 0;
   1388    1.1       cgd 	if (size != (off_t) -1)
   1389  1.109     lukem 		(void)snprintf(sizebuf, sizeof(sizebuf), " (" LLF " byte%s)",
   1390  1.109     lukem 		    (LLT)size, PLURAL(size));
   1391    1.1       cgd 	else
   1392   1.29       mrg 		sizebuf[0] = '\0';
   1393    1.1       cgd 	if (pdata >= 0) {
   1394  1.109     lukem 		struct sockinet from;
   1395  1.109     lukem 		int s, fromlen = sizeof(from.su_len);
   1396    1.1       cgd 
   1397   1.42     lukem 		(void) alarm(curclass.timeout);
   1398  1.109     lukem 		s = accept(pdata, (struct sockaddr *)&from.si_su, &fromlen);
   1399   1.42     lukem 		(void) alarm(0);
   1400    1.1       cgd 		if (s < 0) {
   1401    1.1       cgd 			reply(425, "Can't open data connection.");
   1402    1.1       cgd 			(void) close(pdata);
   1403    1.1       cgd 			pdata = -1;
   1404    1.8   deraadt 			return (NULL);
   1405    1.1       cgd 		}
   1406    1.1       cgd 		(void) close(pdata);
   1407    1.1       cgd 		pdata = s;
   1408   1.67    itojun 		switch (from.su_family) {
   1409   1.67    itojun 		case AF_INET:
   1410    1.1       cgd #ifdef IP_TOS
   1411   1.75    itojun 			if (!mapped) {
   1412   1.75    itojun 				tos = IPTOS_THROUGHPUT;
   1413   1.75    itojun 				(void) setsockopt(s, IPPROTO_IP, IP_TOS,
   1414   1.75    itojun 				    (char *)&tos, sizeof(int));
   1415   1.75    itojun 			}
   1416   1.67    itojun 			break;
   1417   1.66    briggs #endif
   1418   1.67    itojun 		}
   1419   1.66    briggs 		/* Set keepalives on the socket to detect dropped conns. */
   1420   1.66    briggs #ifdef SO_KEEPALIVE
   1421   1.66    briggs 		keepalive = 1;
   1422   1.66    briggs 		(void) setsockopt(s, SOL_SOCKET, SO_KEEPALIVE,
   1423   1.66    briggs 		    (char *)&keepalive, sizeof(int));
   1424    1.1       cgd #endif
   1425    1.8   deraadt 		reply(150, "Opening %s mode data connection for '%s'%s.",
   1426    1.1       cgd 		     type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
   1427    1.8   deraadt 		return (fdopen(pdata, mode));
   1428    1.1       cgd 	}
   1429    1.1       cgd 	if (data >= 0) {
   1430    1.8   deraadt 		reply(125, "Using existing data connection for '%s'%s.",
   1431    1.1       cgd 		    name, sizebuf);
   1432    1.1       cgd 		usedefault = 1;
   1433    1.1       cgd 		return (fdopen(data, mode));
   1434    1.1       cgd 	}
   1435    1.1       cgd 	if (usedefault)
   1436    1.1       cgd 		data_dest = his_addr;
   1437    1.1       cgd 	usedefault = 1;
   1438    1.1       cgd 	file = getdatasock(mode);
   1439    1.1       cgd 	if (file == NULL) {
   1440   1.67    itojun 		char hbuf[INET6_ADDRSTRLEN];
   1441   1.67    itojun 		char pbuf[10];
   1442  1.109     lukem 
   1443  1.109     lukem 		getnameinfo((struct sockaddr *)&data_source.si_su,
   1444  1.109     lukem 		    data_source.su_len, hbuf, sizeof(hbuf), pbuf, sizeof(pbuf),
   1445  1.109     lukem 		    NI_NUMERICHOST | NI_NUMERICSERV);
   1446   1.67    itojun 		reply(425, "Can't create data socket (%s,%s): %s.",
   1447   1.67    itojun 		      hbuf, pbuf, strerror(errno));
   1448    1.1       cgd 		return (NULL);
   1449    1.1       cgd 	}
   1450    1.1       cgd 	data = fileno(file);
   1451  1.109     lukem 	while (connect(data, (struct sockaddr *)&data_dest.si_su,
   1452   1.67    itojun 	    data_dest.su_len) < 0) {
   1453    1.1       cgd 		if (errno == EADDRINUSE && retry < swaitmax) {
   1454    1.1       cgd 			sleep((unsigned) swaitint);
   1455    1.1       cgd 			retry += swaitint;
   1456    1.1       cgd 			continue;
   1457    1.1       cgd 		}
   1458    1.1       cgd 		perror_reply(425, "Can't build data connection");
   1459    1.1       cgd 		(void) fclose(file);
   1460    1.1       cgd 		data = -1;
   1461    1.1       cgd 		return (NULL);
   1462    1.1       cgd 	}
   1463    1.8   deraadt 	reply(150, "Opening %s mode data connection for '%s'%s.",
   1464    1.1       cgd 	     type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
   1465    1.1       cgd 	return (file);
   1466    1.1       cgd }
   1467    1.1       cgd 
   1468   1.95     lukem void
   1469   1.95     lukem closedataconn(FILE *fd)
   1470   1.95     lukem {
   1471   1.95     lukem 
   1472   1.95     lukem 	if (fd != NULL)
   1473   1.95     lukem 		(void)fclose(fd);
   1474   1.95     lukem 	data = -1;
   1475   1.95     lukem 	if (pdata >= 0)
   1476   1.95     lukem 		(void)close(pdata);
   1477   1.95     lukem 	pdata = -1;
   1478   1.95     lukem }
   1479   1.95     lukem 
   1480    1.1       cgd /*
   1481    1.8   deraadt  * Tranfer the contents of "instr" to "outstr" peer using the appropriate
   1482    1.8   deraadt  * encapsulation of the data subject * to Mode, Structure, and Type.
   1483    1.1       cgd  *
   1484    1.1       cgd  * NB: Form isn't handled.
   1485    1.1       cgd  */
   1486   1.49     lukem static int
   1487   1.88     lukem send_data(FILE *instr, FILE *outstr, off_t blksize, int isdata)
   1488    1.1       cgd {
   1489   1.73     lukem 	int	 c, filefd, netfd, rval;
   1490   1.24     lukem 	char	*buf;
   1491    1.1       cgd 
   1492   1.62     lukem 	transflag = 1;
   1493   1.62     lukem 	rval = -1;
   1494   1.62     lukem 	buf = NULL;
   1495   1.62     lukem 	if (setjmp(urgcatch))
   1496   1.62     lukem 		goto cleanup_send_data;
   1497   1.24     lukem 
   1498    1.1       cgd 	switch (type) {
   1499    1.1       cgd 
   1500    1.1       cgd 	case TYPE_A:
   1501  1.109     lukem  /* XXXLUKEM: rate limit ascii send (get) */
   1502   1.62     lukem 		(void) alarm(curclass.timeout);
   1503    1.1       cgd 		while ((c = getc(instr)) != EOF) {
   1504    1.1       cgd 			byte_count++;
   1505   1.63     lukem 			if (c == '\n') {
   1506   1.63     lukem 				if (ferror(outstr))
   1507   1.63     lukem 					goto data_err;
   1508   1.63     lukem 				(void) putc('\r', outstr);
   1509   1.63     lukem 				if (isdata) {
   1510   1.63     lukem 					total_data_out++;
   1511   1.63     lukem 					total_data++;
   1512   1.63     lukem 				}
   1513   1.63     lukem 				total_bytes_out++;
   1514   1.63     lukem 				total_bytes++;
   1515   1.63     lukem 			}
   1516   1.63     lukem 			(void) putc(c, outstr);
   1517   1.62     lukem 			if (isdata) {
   1518   1.62     lukem 				total_data_out++;
   1519   1.62     lukem 				total_data++;
   1520   1.62     lukem 			}
   1521   1.62     lukem 			total_bytes_out++;
   1522   1.62     lukem 			total_bytes++;
   1523   1.62     lukem 			if ((byte_count % 4096) == 0)
   1524   1.62     lukem 				(void) alarm(curclass.timeout);
   1525    1.1       cgd 		}
   1526   1.62     lukem 		(void) alarm(0);
   1527    1.1       cgd 		fflush(outstr);
   1528    1.1       cgd 		if (ferror(instr))
   1529    1.1       cgd 			goto file_err;
   1530    1.1       cgd 		if (ferror(outstr))
   1531    1.1       cgd 			goto data_err;
   1532   1.62     lukem 		rval = 0;
   1533   1.62     lukem 		goto cleanup_send_data;
   1534    1.1       cgd 
   1535    1.1       cgd 	case TYPE_I:
   1536    1.1       cgd 	case TYPE_L:
   1537   1.62     lukem 		if ((buf = malloc((size_t)blksize)) == NULL) {
   1538    1.1       cgd 			perror_reply(451, "Local resource failure: malloc");
   1539   1.62     lukem 			goto cleanup_send_data;
   1540    1.1       cgd 		}
   1541   1.63     lukem 		filefd = fileno(instr);
   1542    1.1       cgd 		netfd = fileno(outstr);
   1543   1.62     lukem 		(void) alarm(curclass.timeout);
   1544   1.73     lukem 		if (curclass.rateget) {
   1545   1.73     lukem 			while (1) {
   1546   1.73     lukem 				int d;
   1547   1.73     lukem 				struct timeval then, now, td;
   1548   1.73     lukem 				off_t bufrem;
   1549   1.73     lukem 				char *bufp;
   1550   1.73     lukem 
   1551   1.73     lukem 				(void)gettimeofday(&then, NULL);
   1552   1.73     lukem 				errno = c = d = 0;
   1553   1.73     lukem 				bufrem = curclass.rateget;
   1554   1.73     lukem 				while (bufrem > 0) {
   1555   1.73     lukem 					if ((c = read(filefd, buf,
   1556   1.73     lukem 					    MIN(blksize, bufrem))) <= 0)
   1557   1.73     lukem 						goto senddone;
   1558   1.73     lukem 					(void) alarm(curclass.timeout);
   1559   1.73     lukem 					bufrem -= c;
   1560   1.73     lukem 					byte_count += c;
   1561   1.73     lukem 					if (isdata) {
   1562   1.73     lukem 						total_data_out += c;
   1563   1.73     lukem 						total_data += c;
   1564   1.73     lukem 					}
   1565   1.73     lukem 					total_bytes_out += c;
   1566   1.73     lukem 					total_bytes += c;
   1567   1.73     lukem 					for (bufp = buf; c > 0;
   1568   1.73     lukem 					    c -= d, bufp += d)
   1569   1.73     lukem 						if ((d =
   1570   1.73     lukem 						    write(netfd, bufp, c)) <= 0)
   1571   1.73     lukem 							break;
   1572   1.73     lukem 					if (d < 0)
   1573   1.73     lukem 						goto data_err;
   1574   1.73     lukem 				}
   1575   1.73     lukem 				(void)gettimeofday(&now, NULL);
   1576   1.73     lukem 				timersub(&now, &then, &td);
   1577   1.96     lukem 				if (td.tv_sec == 0)
   1578   1.96     lukem 					usleep(1000000 - td.tv_usec);
   1579   1.73     lukem 			}
   1580   1.73     lukem 		} else {
   1581   1.73     lukem 			while ((c = read(filefd, buf, (size_t)blksize)) > 0) {
   1582   1.73     lukem 				if (write(netfd, buf, c) != c)
   1583   1.73     lukem 					goto data_err;
   1584   1.73     lukem 				(void) alarm(curclass.timeout);
   1585   1.73     lukem 				byte_count += c;
   1586   1.73     lukem 				if (isdata) {
   1587   1.73     lukem 					total_data_out += c;
   1588   1.73     lukem 					total_data += c;
   1589   1.73     lukem 				}
   1590   1.73     lukem 				total_bytes_out += c;
   1591   1.73     lukem 				total_bytes += c;
   1592   1.62     lukem 			}
   1593    1.1       cgd 		}
   1594   1.73     lukem  senddone:
   1595   1.73     lukem 		if (c < 0)
   1596   1.62     lukem 			goto file_err;
   1597   1.62     lukem 		rval = 0;
   1598   1.62     lukem 		goto cleanup_send_data;
   1599   1.62     lukem 
   1600    1.1       cgd 	default:
   1601    1.1       cgd 		reply(550, "Unimplemented TYPE %d in send_data", type);
   1602   1.62     lukem 		goto cleanup_send_data;
   1603    1.1       cgd 	}
   1604    1.1       cgd 
   1605   1.89     lukem  data_err:
   1606   1.62     lukem 	(void) alarm(0);
   1607    1.1       cgd 	perror_reply(426, "Data connection");
   1608   1.62     lukem 	goto cleanup_send_data;
   1609    1.1       cgd 
   1610   1.89     lukem  file_err:
   1611   1.62     lukem 	(void) alarm(0);
   1612   1.62     lukem 	perror_reply(551, "Error on input file");
   1613   1.62     lukem 		/* FALLTHROUGH */
   1614   1.73     lukem 
   1615   1.89     lukem  cleanup_send_data:
   1616   1.62     lukem 	(void) alarm(0);
   1617    1.1       cgd 	transflag = 0;
   1618   1.62     lukem 	if (buf)
   1619   1.62     lukem 		free(buf);
   1620   1.62     lukem 	if (isdata) {
   1621   1.62     lukem 		total_files_out++;
   1622   1.62     lukem 		total_files++;
   1623   1.62     lukem 	}
   1624   1.62     lukem 	total_xfers_out++;
   1625   1.62     lukem 	total_xfers++;
   1626   1.62     lukem 	return (rval);
   1627    1.1       cgd }
   1628    1.1       cgd 
   1629    1.1       cgd /*
   1630    1.8   deraadt  * Transfer data from peer to "outstr" using the appropriate encapulation of
   1631    1.8   deraadt  * the data subject to Mode, Structure, and Type.
   1632    1.1       cgd  *
   1633    1.1       cgd  * N.B.: Form isn't handled.
   1634    1.1       cgd  */
   1635    1.8   deraadt static int
   1636   1.88     lukem receive_data(FILE *instr, FILE *outstr)
   1637    1.1       cgd {
   1638   1.73     lukem 	int	c, bare_lfs, netfd, filefd, rval;
   1639   1.24     lukem 	char	buf[BUFSIZ];
   1640   1.25  christos #ifdef __GNUC__
   1641   1.25  christos 	(void) &bare_lfs;
   1642   1.25  christos #endif
   1643    1.1       cgd 
   1644   1.24     lukem 	bare_lfs = 0;
   1645   1.62     lukem 	transflag = 1;
   1646   1.62     lukem 	rval = -1;
   1647   1.62     lukem 	if (setjmp(urgcatch))
   1648   1.62     lukem 		goto cleanup_recv_data;
   1649   1.24     lukem 
   1650    1.1       cgd 	switch (type) {
   1651    1.1       cgd 
   1652    1.1       cgd 	case TYPE_I:
   1653    1.1       cgd 	case TYPE_L:
   1654   1.62     lukem 		netfd = fileno(instr);
   1655   1.62     lukem 		filefd = fileno(outstr);
   1656   1.62     lukem 		(void) alarm(curclass.timeout);
   1657   1.73     lukem 		if (curclass.rateput) {
   1658   1.73     lukem 			while (1) {
   1659   1.73     lukem 				int d;
   1660   1.73     lukem 				struct timeval then, now, td;
   1661   1.73     lukem 				off_t bufrem;
   1662   1.73     lukem 
   1663   1.73     lukem 				(void)gettimeofday(&then, NULL);
   1664   1.73     lukem 				errno = c = d = 0;
   1665   1.73     lukem 				for (bufrem = curclass.rateput; bufrem > 0; ) {
   1666   1.73     lukem 					if ((c = read(netfd, buf,
   1667   1.73     lukem 					    MIN(sizeof(buf), bufrem))) <= 0)
   1668   1.73     lukem 						goto recvdone;
   1669   1.73     lukem 					if ((d = write(filefd, buf, c)) != c)
   1670   1.73     lukem 						goto recvdone;
   1671   1.73     lukem 					(void) alarm(curclass.timeout);
   1672   1.73     lukem 					bufrem -= c;
   1673   1.73     lukem 					byte_count += c;
   1674   1.73     lukem 					total_data_in += c;
   1675   1.73     lukem 					total_data += c;
   1676   1.73     lukem 					total_bytes_in += c;
   1677   1.73     lukem 					total_bytes += c;
   1678   1.73     lukem 				}
   1679   1.73     lukem 				(void)gettimeofday(&now, NULL);
   1680   1.73     lukem 				timersub(&now, &then, &td);
   1681   1.96     lukem 				if (td.tv_sec == 0)
   1682   1.96     lukem 					usleep(1000000 - td.tv_usec);
   1683   1.73     lukem 			}
   1684   1.73     lukem 		} else {
   1685   1.73     lukem 			while ((c = read(netfd, buf, sizeof(buf))) > 0) {
   1686   1.73     lukem 				if (write(filefd, buf, c) != c)
   1687   1.73     lukem 					goto file_err;
   1688   1.73     lukem 				(void) alarm(curclass.timeout);
   1689   1.73     lukem 				byte_count += c;
   1690   1.73     lukem 				total_data_in += c;
   1691   1.73     lukem 				total_data += c;
   1692   1.73     lukem 				total_bytes_in += c;
   1693   1.73     lukem 				total_bytes += c;
   1694   1.73     lukem 			}
   1695    1.1       cgd 		}
   1696   1.73     lukem  recvdone:
   1697   1.73     lukem 		if (c < 0)
   1698    1.1       cgd 			goto data_err;
   1699   1.62     lukem 		rval = 0;
   1700   1.62     lukem 		goto cleanup_recv_data;
   1701    1.1       cgd 
   1702    1.1       cgd 	case TYPE_E:
   1703    1.1       cgd 		reply(553, "TYPE E not implemented.");
   1704   1.62     lukem 		goto cleanup_recv_data;
   1705    1.1       cgd 
   1706    1.1       cgd 	case TYPE_A:
   1707   1.62     lukem 		(void) alarm(curclass.timeout);
   1708  1.109     lukem  /* XXXLUKEM: rate limit ascii receive (put) */
   1709    1.1       cgd 		while ((c = getc(instr)) != EOF) {
   1710    1.1       cgd 			byte_count++;
   1711   1.62     lukem 			total_data_in++;
   1712   1.62     lukem 			total_data++;
   1713   1.62     lukem 			total_bytes_in++;
   1714   1.62     lukem 			total_bytes++;
   1715   1.62     lukem 			if ((byte_count % 4096) == 0)
   1716   1.62     lukem 				(void) alarm(curclass.timeout);
   1717    1.1       cgd 			if (c == '\n')
   1718    1.1       cgd 				bare_lfs++;
   1719    1.1       cgd 			while (c == '\r') {
   1720    1.1       cgd 				if (ferror(outstr))
   1721    1.1       cgd 					goto data_err;
   1722    1.1       cgd 				if ((c = getc(instr)) != '\n') {
   1723   1.62     lukem 					byte_count++;
   1724   1.62     lukem 					total_data_in++;
   1725   1.62     lukem 					total_data++;
   1726   1.62     lukem 					total_bytes_in++;
   1727   1.62     lukem 					total_bytes++;
   1728   1.62     lukem 					if ((byte_count % 4096) == 0)
   1729   1.62     lukem 						(void) alarm(curclass.timeout);
   1730    1.1       cgd 					(void) putc ('\r', outstr);
   1731    1.1       cgd 					if (c == '\0' || c == EOF)
   1732    1.1       cgd 						goto contin2;
   1733    1.1       cgd 				}
   1734    1.1       cgd 			}
   1735    1.1       cgd 			(void) putc(c, outstr);
   1736    1.1       cgd 	contin2:	;
   1737    1.1       cgd 		}
   1738   1.62     lukem 		(void) alarm(0);
   1739    1.1       cgd 		fflush(outstr);
   1740    1.1       cgd 		if (ferror(instr))
   1741    1.1       cgd 			goto data_err;
   1742    1.1       cgd 		if (ferror(outstr))
   1743    1.1       cgd 			goto file_err;
   1744    1.1       cgd 		if (bare_lfs) {
   1745   1.95     lukem 			reply(-226,
   1746   1.62     lukem 			    "WARNING! %d bare linefeeds received in ASCII mode",
   1747    1.8   deraadt 			    bare_lfs);
   1748   1.95     lukem 			reply(0, "File may not have transferred correctly.");
   1749    1.1       cgd 		}
   1750   1.62     lukem 		rval = 0;
   1751   1.62     lukem 		goto cleanup_recv_data;
   1752   1.62     lukem 
   1753    1.1       cgd 	default:
   1754    1.1       cgd 		reply(550, "Unimplemented TYPE %d in receive_data", type);
   1755   1.62     lukem 		goto cleanup_recv_data;
   1756    1.1       cgd 	}
   1757    1.1       cgd 
   1758   1.89     lukem  data_err:
   1759   1.62     lukem 	(void) alarm(0);
   1760    1.1       cgd 	perror_reply(426, "Data Connection");
   1761   1.62     lukem 	goto cleanup_recv_data;
   1762    1.1       cgd 
   1763   1.89     lukem  file_err:
   1764   1.62     lukem 	(void) alarm(0);
   1765   1.62     lukem 	perror_reply(452, "Error writing file");
   1766   1.62     lukem 	goto cleanup_recv_data;
   1767   1.62     lukem 
   1768   1.89     lukem  cleanup_recv_data:
   1769   1.62     lukem 	(void) alarm(0);
   1770    1.1       cgd 	transflag = 0;
   1771   1.62     lukem 	total_files_in++;
   1772   1.62     lukem 	total_files++;
   1773   1.62     lukem 	total_xfers_in++;
   1774   1.62     lukem 	total_xfers++;
   1775   1.62     lukem 	return (rval);
   1776    1.1       cgd }
   1777    1.1       cgd 
   1778    1.8   deraadt void
   1779   1.88     lukem statcmd(void)
   1780    1.1       cgd {
   1781  1.109     lukem 	struct sockinet *su = NULL;
   1782   1.67    itojun 	static char ntop_buf[INET6_ADDRSTRLEN];
   1783   1.67    itojun   	u_char *a, *p;
   1784   1.89     lukem 	int ispassive, af;
   1785   1.93     lukem 	off_t otbi, otbo, otb;
   1786    1.1       cgd 
   1787   1.67    itojun 	a = p = (u_char *)NULL;
   1788   1.67    itojun 
   1789   1.95     lukem 	reply(-211, "%s FTP server status:", hostname);
   1790  1.101     lukem 	reply(0, "Version: %s", EMPTYSTR(version) ? "<suppressed>" : version);
   1791   1.67    itojun 	ntop_buf[0] = '\0';
   1792  1.109     lukem 	if (!getnameinfo((struct sockaddr *)&his_addr.si_su, his_addr.su_len,
   1793  1.109     lukem 			ntop_buf, sizeof(ntop_buf), NULL, 0, NI_NUMERICHOST)
   1794  1.109     lukem 	    && strcmp(remotehost, ntop_buf) != 0)
   1795   1.95     lukem 		reply(0, "Connected to %s (%s)", remotehost, ntop_buf);
   1796  1.104  christos 	else
   1797   1.95     lukem 		reply(0, "Connected to %s", remotehost);
   1798  1.104  christos 
   1799    1.1       cgd 	if (logged_in) {
   1800   1.73     lukem 		if (curclass.type == CLASS_GUEST)
   1801   1.95     lukem 			reply(0, "Logged in anonymously");
   1802    1.1       cgd 		else
   1803   1.95     lukem 			reply(0, "Logged in as %s%s", pw->pw_name,
   1804   1.73     lukem 			    curclass.type == CLASS_CHROOT ? " (chroot)" : "");
   1805    1.1       cgd 	} else if (askpasswd)
   1806   1.95     lukem 		reply(0, "Waiting for password");
   1807    1.1       cgd 	else
   1808   1.95     lukem 		reply(0, "Waiting for user name");
   1809   1.95     lukem 	cprintf(stdout, "    TYPE: %s", typenames[type]);
   1810   1.93     lukem 	if (type == TYPE_A || type == TYPE_E)
   1811   1.95     lukem 		cprintf(stdout, ", FORM: %s", formnames[form]);
   1812   1.62     lukem 	if (type == TYPE_L) {
   1813    1.1       cgd #if NBBY == 8
   1814   1.95     lukem 		cprintf(stdout, " %d", NBBY);
   1815    1.1       cgd #else
   1816   1.62     lukem 			/* XXX: `bytesize' needs to be defined in this case */
   1817   1.95     lukem 		cprintf(stdout, " %d", bytesize);
   1818    1.1       cgd #endif
   1819   1.62     lukem 	}
   1820   1.95     lukem 	cprintf(stdout, "; STRUcture: %s; transfer MODE: %s\r\n",
   1821    1.1       cgd 	    strunames[stru], modenames[mode]);
   1822   1.67    itojun 	ispassive = 0;
   1823   1.67    itojun 	if (data != -1) {
   1824   1.95     lukem   		reply(0, "Data connection open");
   1825   1.67    itojun 		su = NULL;
   1826   1.67    itojun 	} else if (pdata != -1) {
   1827   1.95     lukem 		reply(0, "in Passive mode");
   1828  1.109     lukem 		su = (struct sockinet *)&pasv_addr;
   1829   1.67    itojun 		ispassive = 1;
   1830    1.1       cgd 		goto printaddr;
   1831    1.1       cgd 	} else if (usedefault == 0) {
   1832   1.67    itojun 		if (epsvall) {
   1833   1.95     lukem 			reply(0, "EPSV only mode (EPSV ALL)");
   1834   1.67    itojun 			goto epsvonly;
   1835   1.67    itojun 		}
   1836  1.109     lukem 		su = (struct sockinet *)&data_dest;
   1837   1.89     lukem  printaddr:
   1838   1.93     lukem 							/* PASV/PORT */
   1839   1.67    itojun 		if (su->su_family == AF_INET) {
   1840  1.109     lukem 			a = (u_char *) &su->su_addr;
   1841  1.109     lukem 			p = (u_char *) &su->su_port;
   1842    1.1       cgd #define UC(b) (((int) b) & 0xff)
   1843   1.95     lukem 			reply(0, "%s (%d,%d,%d,%d,%d,%d)",
   1844   1.93     lukem 				ispassive ? "PASV" : "PORT" ,
   1845   1.67    itojun 				UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]),
   1846   1.67    itojun 				UC(p[0]), UC(p[1]));
   1847   1.67    itojun 		}
   1848   1.67    itojun 
   1849   1.93     lukem 							/* LPSV/LPRT */
   1850   1.67    itojun 	    {
   1851   1.67    itojun 		int alen, af, i;
   1852   1.67    itojun 
   1853   1.67    itojun 		alen = 0;
   1854   1.67    itojun 		switch (su->su_family) {
   1855   1.67    itojun 		case AF_INET:
   1856  1.109     lukem 			a = (u_char *) &su->su_addr;
   1857  1.109     lukem 			p = (u_char *) &su->su_port;
   1858  1.109     lukem 			alen = sizeof(su->su_addr);
   1859   1.67    itojun 			af = 4;
   1860   1.67    itojun 			break;
   1861  1.104  christos #ifdef INET6
   1862   1.67    itojun 		case AF_INET6:
   1863  1.109     lukem 			a = (u_char *) &su->su_6addr;
   1864  1.109     lukem 			p = (u_char *) &su->su_port;
   1865  1.109     lukem 			alen = sizeof(su->su_6addr);
   1866   1.67    itojun 			af = 6;
   1867   1.67    itojun 			break;
   1868  1.104  christos #endif
   1869   1.67    itojun 		default:
   1870   1.67    itojun 			af = 0;
   1871   1.67    itojun 			break;
   1872   1.67    itojun 		}
   1873   1.67    itojun 		if (af) {
   1874   1.95     lukem 			cprintf(stdout, "    %s (%d,%d",
   1875   1.93     lukem 			    ispassive ? "LPSV" : "LPRT", af, alen);
   1876   1.67    itojun 			for (i = 0; i < alen; i++)
   1877   1.95     lukem 				cprintf(stdout, ",%d", UC(a[i]));
   1878   1.95     lukem 			cprintf(stdout, ",%d,%d,%d)", 2, UC(p[0]), UC(p[1]));
   1879    1.1       cgd #undef UC
   1880   1.67    itojun 		}
   1881   1.67    itojun 	    }
   1882   1.67    itojun 
   1883   1.67    itojun 		/* EPRT/EPSV */
   1884   1.89     lukem  epsvonly:
   1885  1.109     lukem 		af = af2epsvproto(su->su_family);
   1886  1.104  christos 		ntop_buf[0] = '\0';
   1887  1.109     lukem 		if (af > 0) {
   1888  1.109     lukem 			if (getnameinfo((struct sockaddr *)&su->si_su,
   1889  1.109     lukem 			    su->su_len, ntop_buf, sizeof(ntop_buf), NULL, 0,
   1890  1.109     lukem 			    NI_NUMERICHOST) == 0)
   1891   1.95     lukem 				reply(0, "%s (|%d|%s|%d|)",
   1892   1.93     lukem 				    ispassive ? "EPSV" : "EPRT",
   1893   1.93     lukem 				    af, ntop_buf, ntohs(su->su_port));
   1894   1.67    itojun 		}
   1895    1.1       cgd 	} else
   1896   1.95     lukem 		reply(0, "No data connection");
   1897   1.62     lukem 
   1898   1.62     lukem 	if (logged_in) {
   1899  1.109     lukem 		reply(0,
   1900  1.109     lukem 		    "Data sent:        " LLF " byte%s in " LLF " file%s",
   1901  1.109     lukem 		    (LLT)total_data_out, PLURAL(total_data_out),
   1902  1.109     lukem 		    (LLT)total_files_out, PLURAL(total_files_out));
   1903  1.109     lukem 		reply(0,
   1904  1.109     lukem 		    "Data received:    " LLF " byte%s in " LLF " file%s",
   1905  1.109     lukem 		    (LLT)total_data_in, PLURAL(total_data_in),
   1906  1.109     lukem 		    (LLT)total_files_in, PLURAL(total_files_in));
   1907  1.109     lukem 		reply(0,
   1908  1.109     lukem 		    "Total data:       " LLF " byte%s in " LLF " file%s",
   1909  1.109     lukem 		    (LLT)total_data, PLURAL(total_data),
   1910  1.109     lukem 		    (LLT)total_files, PLURAL(total_files));
   1911   1.62     lukem 	}
   1912   1.62     lukem 	otbi = total_bytes_in;
   1913   1.62     lukem 	otbo = total_bytes_out;
   1914   1.62     lukem 	otb = total_bytes;
   1915  1.109     lukem 	reply(0, "Traffic sent:     " LLF " byte%s in " LLF " transfer%s",
   1916  1.109     lukem 	    (LLT)otbo, PLURAL(otbo),
   1917  1.109     lukem 	    (LLT)total_xfers_out, PLURAL(total_xfers_out));
   1918  1.109     lukem 	reply(0, "Traffic received: " LLF " byte%s in " LLF " transfer%s",
   1919  1.109     lukem 	    (LLT)otbi, PLURAL(otbi),
   1920  1.109     lukem 	    (LLT)total_xfers_in, PLURAL(total_xfers_in));
   1921  1.109     lukem 	reply(0, "Total traffic:    " LLF " byte%s in " LLF " transfer%s",
   1922  1.109     lukem 	    (LLT)otb, PLURAL(otb),
   1923  1.109     lukem 	    (LLT)total_xfers, PLURAL(total_xfers));
   1924   1.24     lukem 
   1925   1.24     lukem 	if (logged_in) {
   1926   1.24     lukem 		struct ftpconv *cp;
   1927   1.24     lukem 
   1928   1.98  sommerfe 		reply(0, "%s", "");
   1929   1.95     lukem 		reply(0, "Class: %s, type: %s",
   1930   1.81     lukem 		    curclass.classname, CURCLASSTYPE);
   1931   1.95     lukem 		reply(0, "Check PORT/LPRT commands: %sabled",
   1932   1.41     lukem 		    curclass.checkportcmd ? "en" : "dis");
   1933  1.100     lukem 		if (! EMPTYSTR(curclass.display))
   1934   1.95     lukem 			reply(0, "Display file: %s", curclass.display);
   1935  1.100     lukem 		if (! EMPTYSTR(curclass.notify))
   1936   1.95     lukem 			reply(0, "Notify fileglob: %s", curclass.notify);
   1937   1.95     lukem 		reply(0, "Idle timeout: %d, maximum timeout: %d",
   1938   1.24     lukem 		    curclass.timeout, curclass.maxtimeout);
   1939   1.95     lukem 		reply(0, "Current connections: %d", connections);
   1940   1.82     lukem 		if (curclass.limit == -1)
   1941   1.95     lukem 			reply(0, "Maximum connections: unlimited");
   1942   1.82     lukem 		else
   1943   1.95     lukem 			reply(0, "Maximum connections: %d", curclass.limit);
   1944   1.82     lukem 		if (curclass.limitfile)
   1945   1.95     lukem 			reply(0, "Connection limit exceeded file: %s",
   1946   1.82     lukem 			    curclass.limitfile);
   1947  1.100     lukem 		if (! EMPTYSTR(curclass.chroot))
   1948  1.100     lukem 			reply(0, "Chroot format: %s", curclass.chroot);
   1949  1.100     lukem 		if (! EMPTYSTR(curclass.homedir))
   1950  1.100     lukem 			reply(0, "Homedir format: %s", curclass.homedir);
   1951  1.100     lukem 		if (! EMPTYSTR(curclass.motd))
   1952   1.95     lukem 			reply(0, "MotD file: %s", curclass.motd);
   1953   1.95     lukem 		reply(0,
   1954   1.73     lukem 	    "Modify commands (CHMOD, DELE, MKD, RMD, RNFR, UMASK): %sabled",
   1955   1.24     lukem 		    curclass.modify ? "en" : "dis");
   1956   1.95     lukem 		reply(0, "Upload commands (APPE, STOR, STOU): %sabled",
   1957   1.73     lukem 		    curclass.upload ? "en" : "dis");
   1958   1.85     lukem 		if (curclass.portmin && curclass.portmax)
   1959   1.95     lukem 			reply(0, "PASV port range: %d - %d",
   1960   1.85     lukem 			    curclass.portmin, curclass.portmax);
   1961   1.73     lukem 		if (curclass.rateget)
   1962   1.95     lukem 			reply(0, "Rate get limit: %d bytes/sec",
   1963   1.73     lukem 			    curclass.rateget);
   1964   1.73     lukem 		else
   1965   1.95     lukem 			reply(0, "Rate get limit: disabled");
   1966   1.73     lukem 		if (curclass.rateput)
   1967   1.95     lukem 			reply(0, "Rate put limit: %d bytes/sec",
   1968   1.73     lukem 			    curclass.rateput);
   1969   1.73     lukem 		else
   1970   1.95     lukem 			reply(0, "Rate put limit: disabled");
   1971   1.95     lukem 		reply(0, "Umask: %.04o", curclass.umask);
   1972   1.24     lukem 		for (cp = curclass.conversions; cp != NULL; cp=cp->next) {
   1973   1.24     lukem 			if (cp->suffix == NULL || cp->types == NULL ||
   1974   1.24     lukem 			    cp->command == NULL)
   1975   1.24     lukem 				continue;
   1976   1.95     lukem 			reply(0, "Conversion: %s [%s] disable: %s, command: %s",
   1977   1.24     lukem 			    cp->suffix, cp->types, cp->disable, cp->command);
   1978   1.24     lukem 		}
   1979   1.24     lukem 	}
   1980   1.24     lukem 
   1981    1.1       cgd 	reply(211, "End of status");
   1982    1.1       cgd }
   1983    1.1       cgd 
   1984    1.8   deraadt void
   1985   1.88     lukem fatal(const char *s)
   1986    1.1       cgd {
   1987    1.8   deraadt 
   1988    1.1       cgd 	reply(451, "Error in server: %s\n", s);
   1989    1.1       cgd 	reply(221, "Closing connection due to server error.");
   1990    1.1       cgd 	dologout(0);
   1991    1.1       cgd 	/* NOTREACHED */
   1992    1.1       cgd }
   1993    1.1       cgd 
   1994   1.93     lukem /*
   1995   1.93     lukem  * reply() --
   1996   1.95     lukem  *	depending on the value of n, display fmt with a trailing CRLF and
   1997   1.95     lukem  *	prefix of:
   1998   1.95     lukem  *	n < -1		prefix the message with abs(n) + "-"	(initial line)
   1999   1.95     lukem  *	n == 0		prefix the message with 4 spaces	(middle lines)
   2000   1.95     lukem  *	n >  0		prefix the message with n + " "		(final line)
   2001   1.93     lukem  */
   2002    1.8   deraadt void
   2003    1.8   deraadt reply(int n, const char *fmt, ...)
   2004    1.1       cgd {
   2005   1.62     lukem 	off_t b;
   2006    1.8   deraadt 	va_list ap;
   2007   1.88     lukem 
   2008    1.8   deraadt 	va_start(ap, fmt);
   2009   1.62     lukem 	b = 0;
   2010   1.95     lukem 	if (n == 0)
   2011   1.95     lukem 		cprintf(stdout, "    ");
   2012   1.95     lukem 	else if (n < 0)
   2013   1.95     lukem 		cprintf(stdout, "%d-", -n);
   2014   1.95     lukem 	else
   2015   1.95     lukem 		cprintf(stdout, "%d ", n);
   2016   1.95     lukem 	b = vprintf(fmt, ap);
   2017   1.62     lukem 	total_bytes += b;
   2018   1.62     lukem 	total_bytes_out += b;
   2019   1.95     lukem 	cprintf(stdout, "\r\n");
   2020    1.1       cgd 	(void)fflush(stdout);
   2021    1.1       cgd 	if (debug) {
   2022   1.95     lukem 		syslog(LOG_DEBUG, "<--- %d%c", abs(n), (n < 0) ? '-' : ' ');
   2023    1.8   deraadt 		vsyslog(LOG_DEBUG, fmt, ap);
   2024    1.1       cgd 	}
   2025    1.1       cgd }
   2026    1.1       cgd 
   2027    1.8   deraadt static void
   2028   1.88     lukem dolog(struct sockaddr *who)
   2029    1.1       cgd {
   2030  1.109     lukem 
   2031  1.104  christos 	(void)getnameinfo(who, who->sa_len, remotehost, sizeof(remotehost),
   2032  1.104  christos 	    NULL, 0, 0);
   2033  1.104  christos 
   2034    1.6       cgd #ifdef HASSETPROCTITLE
   2035    1.8   deraadt 	snprintf(proctitle, sizeof(proctitle), "%s: connected", remotehost);
   2036   1.97    itojun 	setproctitle("%s", proctitle);
   2037    1.6       cgd #endif /* HASSETPROCTITLE */
   2038    1.8   deraadt 	if (logging)
   2039   1.79     lukem 		syslog(LOG_INFO, "connection from %s to %s",
   2040   1.79     lukem 		    remotehost, hostname);
   2041    1.1       cgd }
   2042    1.1       cgd 
   2043    1.1       cgd /*
   2044    1.1       cgd  * Record logout in wtmp file
   2045    1.1       cgd  * and exit with supplied status.
   2046    1.1       cgd  */
   2047    1.8   deraadt void
   2048   1.88     lukem dologout(int status)
   2049    1.1       cgd {
   2050   1.16       mrg 	/*
   2051   1.16       mrg 	* Prevent reception of SIGURG from resulting in a resumption
   2052   1.16       mrg 	* back to the main program loop.
   2053   1.16       mrg 	*/
   2054   1.16       mrg 	transflag = 0;
   2055    1.8   deraadt 
   2056    1.1       cgd 	if (logged_in) {
   2057  1.102     lukem 		if (dowtmp)
   2058  1.102     lukem 			logwtmp(ttyline, "", "");
   2059   1.78     lukem 		if (doutmp)
   2060   1.78     lukem 			logout(utmp.ut_line);
   2061   1.36   mycroft #ifdef KERBEROS
   2062    1.4       cgd 		if (!notickets && krbtkfile_env)
   2063    1.4       cgd 			unlink(krbtkfile_env);
   2064    1.4       cgd #endif
   2065    1.1       cgd 	}
   2066    1.1       cgd 	/* beware of flushing buffers after a SIGPIPE */
   2067    1.1       cgd 	_exit(status);
   2068    1.1       cgd }
   2069    1.1       cgd 
   2070    1.8   deraadt static void
   2071   1.88     lukem myoob(int signo)
   2072    1.1       cgd {
   2073    1.1       cgd 	char *cp;
   2074    1.1       cgd 
   2075    1.1       cgd 	/* only process if transfer occurring */
   2076    1.1       cgd 	if (!transflag)
   2077    1.1       cgd 		return;
   2078    1.1       cgd 	cp = tmpline;
   2079    1.1       cgd 	if (getline(cp, 7, stdin) == NULL) {
   2080    1.1       cgd 		reply(221, "You could at least say goodbye.");
   2081    1.1       cgd 		dologout(0);
   2082    1.1       cgd 	}
   2083   1.58     lukem 	if (strcasecmp(cp, "ABOR\r\n") == 0) {
   2084    1.1       cgd 		tmpline[0] = '\0';
   2085    1.1       cgd 		reply(426, "Transfer aborted. Data connection closed.");
   2086    1.1       cgd 		reply(226, "Abort successful");
   2087    1.1       cgd 		longjmp(urgcatch, 1);
   2088    1.1       cgd 	}
   2089   1.58     lukem 	if (strcasecmp(cp, "STAT\r\n") == 0) {
   2090   1.78     lukem 		tmpline[0] = '\0';
   2091    1.1       cgd 		if (file_size != (off_t) -1)
   2092  1.109     lukem 			reply(213,
   2093  1.109     lukem 			    "Status: " LLF " of " LLF " byte%s transferred",
   2094  1.109     lukem 			    (LLT)byte_count, (LLT)file_size,
   2095   1.65      ross 			    PLURAL(byte_count));
   2096    1.1       cgd 		else
   2097  1.109     lukem 			reply(213, "Status: " LLF " byte%s transferred",
   2098  1.109     lukem 			    (LLT)byte_count, PLURAL(byte_count));
   2099    1.1       cgd 	}
   2100    1.1       cgd }
   2101    1.1       cgd 
   2102   1.84     lukem static int
   2103   1.88     lukem bind_pasv_addr(void)
   2104   1.84     lukem {
   2105   1.84     lukem 	static int passiveport;
   2106   1.84     lukem 	int port, len;
   2107   1.84     lukem 
   2108   1.84     lukem 	len = pasv_addr.su_len;
   2109   1.84     lukem 	if (curclass.portmin == 0 && curclass.portmax == 0) {
   2110   1.84     lukem 		pasv_addr.su_port = 0;
   2111  1.109     lukem 		return (bind(pdata, (struct sockaddr *)&pasv_addr.si_su, len));
   2112   1.84     lukem 	}
   2113   1.84     lukem 
   2114   1.84     lukem 	if (passiveport == 0) {
   2115   1.84     lukem 		srand(getpid());
   2116   1.84     lukem 		passiveport = rand() % (curclass.portmax - curclass.portmin)
   2117   1.84     lukem 		    + curclass.portmin;
   2118   1.84     lukem 	}
   2119   1.84     lukem 
   2120   1.84     lukem 	port = passiveport;
   2121   1.84     lukem 	while (1) {
   2122   1.84     lukem 		port++;
   2123   1.84     lukem 		if (port > curclass.portmax)
   2124   1.84     lukem 			port = curclass.portmin;
   2125   1.84     lukem 		else if (port == passiveport) {
   2126   1.84     lukem 			errno = EAGAIN;
   2127   1.84     lukem 			return (-1);
   2128   1.84     lukem 		}
   2129   1.84     lukem 		pasv_addr.su_port = htons(port);
   2130  1.109     lukem 		if (bind(pdata, (struct sockaddr *)&pasv_addr.si_su, len) == 0)
   2131   1.84     lukem 			break;
   2132   1.84     lukem 		if (errno != EADDRINUSE)
   2133   1.84     lukem 			return (-1);
   2134   1.84     lukem 	}
   2135   1.84     lukem 	passiveport = port;
   2136   1.84     lukem 	return (0);
   2137   1.84     lukem }
   2138   1.84     lukem 
   2139    1.1       cgd /*
   2140    1.1       cgd  * Note: a response of 425 is not mentioned as a possible response to
   2141    1.8   deraadt  *	the PASV command in RFC959. However, it has been blessed as
   2142    1.8   deraadt  *	a legitimate response by Jon Postel in a telephone conversation
   2143    1.1       cgd  *	with Rick Adams on 25 Jan 89.
   2144    1.1       cgd  */
   2145    1.8   deraadt void
   2146   1.88     lukem passive(void)
   2147    1.1       cgd {
   2148    1.1       cgd 	int len;
   2149    1.8   deraadt 	char *p, *a;
   2150    1.1       cgd 
   2151   1.72    itojun 	if (pdata >= 0)
   2152   1.72    itojun 		close(pdata);
   2153    1.1       cgd 	pdata = socket(AF_INET, SOCK_STREAM, 0);
   2154   1.23     lukem 	if (pdata < 0 || !logged_in) {
   2155    1.1       cgd 		perror_reply(425, "Can't open passive connection");
   2156    1.1       cgd 		return;
   2157    1.1       cgd 	}
   2158    1.1       cgd 	pasv_addr = ctrl_addr;
   2159   1.84     lukem 
   2160   1.84     lukem 	if (bind_pasv_addr() < 0)
   2161   1.84     lukem 		goto pasv_error;
   2162   1.67    itojun 	len = pasv_addr.su_len;
   2163  1.109     lukem 	if (getsockname(pdata, (struct sockaddr *) &pasv_addr.si_su, &len) < 0)
   2164    1.1       cgd 		goto pasv_error;
   2165  1.109     lukem 	pasv_addr.su_len = len;
   2166    1.1       cgd 	if (listen(pdata, 1) < 0)
   2167    1.1       cgd 		goto pasv_error;
   2168  1.109     lukem 	a = (char *) &pasv_addr.su_addr;
   2169   1.67    itojun 	p = (char *) &pasv_addr.su_port;
   2170    1.1       cgd 
   2171    1.1       cgd #define UC(b) (((int) b) & 0xff)
   2172    1.1       cgd 
   2173    1.1       cgd 	reply(227, "Entering Passive Mode (%d,%d,%d,%d,%d,%d)", UC(a[0]),
   2174    1.1       cgd 		UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1]));
   2175    1.1       cgd 	return;
   2176    1.1       cgd 
   2177   1.89     lukem  pasv_error:
   2178   1.67    itojun 	(void) close(pdata);
   2179   1.67    itojun 	pdata = -1;
   2180   1.67    itojun 	perror_reply(425, "Can't open passive connection");
   2181   1.67    itojun 	return;
   2182   1.67    itojun }
   2183   1.67    itojun 
   2184   1.67    itojun /*
   2185  1.106    itojun  * convert protocol identifier to/from AF
   2186  1.106    itojun  */
   2187  1.106    itojun int
   2188  1.106    itojun lpsvproto2af(int proto)
   2189  1.106    itojun {
   2190  1.106    itojun 
   2191  1.106    itojun 	switch (proto) {
   2192  1.109     lukem 	case 4:
   2193  1.109     lukem 		return AF_INET;
   2194  1.106    itojun #ifdef INET6
   2195  1.109     lukem 	case 6:
   2196  1.109     lukem 		return AF_INET6;
   2197  1.106    itojun #endif
   2198  1.109     lukem 	default:
   2199  1.109     lukem 		return -1;
   2200  1.106    itojun 	}
   2201  1.106    itojun }
   2202  1.106    itojun 
   2203  1.106    itojun int
   2204  1.106    itojun af2lpsvproto(int af)
   2205  1.106    itojun {
   2206  1.106    itojun 
   2207  1.106    itojun 	switch (af) {
   2208  1.109     lukem 	case AF_INET:
   2209  1.109     lukem 		return 4;
   2210  1.106    itojun #ifdef INET6
   2211  1.109     lukem 	case AF_INET6:
   2212  1.109     lukem 		return 6;
   2213  1.106    itojun #endif
   2214  1.109     lukem 	default:
   2215  1.109     lukem 		return -1;
   2216  1.106    itojun 	}
   2217  1.106    itojun }
   2218  1.106    itojun 
   2219  1.106    itojun int
   2220  1.106    itojun epsvproto2af(int proto)
   2221  1.106    itojun {
   2222  1.106    itojun 
   2223  1.106    itojun 	switch (proto) {
   2224  1.109     lukem 	case 1:
   2225  1.109     lukem 		return AF_INET;
   2226  1.106    itojun #ifdef INET6
   2227  1.109     lukem 	case 2:
   2228  1.109     lukem 		return AF_INET6;
   2229  1.106    itojun #endif
   2230  1.109     lukem 	default:
   2231  1.109     lukem 		return -1;
   2232  1.106    itojun 	}
   2233  1.106    itojun }
   2234  1.106    itojun 
   2235  1.106    itojun int
   2236  1.106    itojun af2epsvproto(int af)
   2237  1.106    itojun {
   2238  1.106    itojun 
   2239  1.106    itojun 	switch (af) {
   2240  1.109     lukem 	case AF_INET:
   2241  1.109     lukem 		return 1;
   2242  1.106    itojun #ifdef INET6
   2243  1.109     lukem 	case AF_INET6:
   2244  1.109     lukem 		return 2;
   2245  1.106    itojun #endif
   2246  1.109     lukem 	default:
   2247  1.109     lukem 		return -1;
   2248  1.106    itojun 	}
   2249  1.106    itojun }
   2250  1.106    itojun 
   2251  1.106    itojun /*
   2252   1.67    itojun  * 228 Entering Long Passive Mode (af, hal, h1, h2, h3,..., pal, p1, p2...)
   2253   1.67    itojun  * 229 Entering Extended Passive Mode (|||port|)
   2254   1.67    itojun  */
   2255   1.67    itojun void
   2256   1.67    itojun long_passive(char *cmd, int pf)
   2257   1.67    itojun {
   2258   1.67    itojun 	int len;
   2259   1.84     lukem 	char *p, *a;
   2260   1.67    itojun 
   2261   1.67    itojun 	if (!logged_in) {
   2262   1.67    itojun 		syslog(LOG_NOTICE, "long passive but not logged in");
   2263   1.67    itojun 		reply(503, "Login with USER first.");
   2264   1.67    itojun 		return;
   2265   1.67    itojun 	}
   2266   1.67    itojun 
   2267  1.106    itojun 	if (pf != PF_UNSPEC && ctrl_addr.su_family != pf) {
   2268  1.106    itojun 		/*
   2269  1.106    itojun 		 * XXX
   2270  1.106    itojun 		 * only EPRT/EPSV ready clients will understand this
   2271  1.106    itojun 		 */
   2272  1.106    itojun 		if (strcmp(cmd, "EPSV") != 0)
   2273  1.106    itojun 			reply(501, "Network protocol mismatch"); /*XXX*/
   2274  1.106    itojun 		else
   2275  1.106    itojun 			epsv_protounsupp("Network protocol mismatch");
   2276   1.67    itojun 
   2277  1.106    itojun 		return;
   2278   1.67    itojun 	}
   2279   1.73     lukem 
   2280   1.72    itojun 	if (pdata >= 0)
   2281   1.72    itojun 		close(pdata);
   2282   1.67    itojun 	pdata = socket(ctrl_addr.su_family, SOCK_STREAM, 0);
   2283   1.67    itojun 	if (pdata < 0) {
   2284   1.67    itojun 		perror_reply(425, "Can't open passive connection");
   2285   1.67    itojun 		return;
   2286   1.67    itojun 	}
   2287   1.67    itojun 	pasv_addr = ctrl_addr;
   2288   1.84     lukem 	if (bind_pasv_addr() < 0)
   2289   1.67    itojun 		goto pasv_error;
   2290   1.67    itojun 	len = pasv_addr.su_len;
   2291  1.109     lukem 	if (getsockname(pdata, (struct sockaddr *) &pasv_addr.si_su, &len) < 0)
   2292   1.67    itojun 		goto pasv_error;
   2293  1.109     lukem 	pasv_addr.su_len = len;
   2294   1.67    itojun 	if (listen(pdata, 1) < 0)
   2295   1.67    itojun 		goto pasv_error;
   2296   1.67    itojun 	p = (char *) &pasv_addr.su_port;
   2297   1.67    itojun 
   2298   1.67    itojun #define UC(b) (((int) b) & 0xff)
   2299   1.67    itojun 
   2300   1.67    itojun 	if (strcmp(cmd, "LPSV") == 0) {
   2301   1.67    itojun 		switch (pasv_addr.su_family) {
   2302   1.67    itojun 		case AF_INET:
   2303  1.109     lukem 			a = (char *) &pasv_addr.su_addr;
   2304  1.109     lukem 			reply(228,
   2305  1.109     lukem     "Entering Long Passive Mode (%d,%d,%d,%d,%d,%d,%d,%d,%d)",
   2306   1.67    itojun 				4, 4, UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]),
   2307   1.67    itojun 				2, UC(p[0]), UC(p[1]));
   2308   1.67    itojun 			return;
   2309  1.104  christos #ifdef INET6
   2310   1.67    itojun 		case AF_INET6:
   2311  1.109     lukem 			a = (char *) &pasv_addr.su_6addr;
   2312  1.109     lukem 			reply(228,
   2313  1.109     lukem     "Entering Long Passive Mode (%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d)",
   2314   1.67    itojun 				6, 16,
   2315   1.67    itojun 				UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]),
   2316   1.67    itojun 				UC(a[4]), UC(a[5]), UC(a[6]), UC(a[7]),
   2317   1.67    itojun 				UC(a[8]), UC(a[9]), UC(a[10]), UC(a[11]),
   2318   1.67    itojun 				UC(a[12]), UC(a[13]), UC(a[14]), UC(a[15]),
   2319   1.67    itojun 				2, UC(p[0]), UC(p[1]));
   2320   1.67    itojun 			return;
   2321  1.104  christos #endif
   2322   1.67    itojun 		}
   2323   1.67    itojun #undef UC
   2324   1.67    itojun 	} else if (strcmp(cmd, "EPSV") == 0) {
   2325   1.67    itojun 		switch (pasv_addr.su_family) {
   2326   1.67    itojun 		case AF_INET:
   2327  1.109     lukem #ifdef INET6
   2328   1.67    itojun 		case AF_INET6:
   2329  1.109     lukem #endif
   2330   1.67    itojun 			reply(229, "Entering Extended Passive Mode (|||%d|)",
   2331  1.109     lukem 			    ntohs(pasv_addr.su_port));
   2332   1.67    itojun 			return;
   2333   1.67    itojun 		}
   2334   1.67    itojun 	} else {
   2335   1.67    itojun 		/* more proper error code? */
   2336   1.67    itojun 	}
   2337   1.67    itojun 
   2338   1.89     lukem  pasv_error:
   2339    1.1       cgd 	(void) close(pdata);
   2340    1.1       cgd 	pdata = -1;
   2341    1.1       cgd 	perror_reply(425, "Can't open passive connection");
   2342    1.1       cgd 	return;
   2343  1.106    itojun }
   2344  1.106    itojun 
   2345  1.106    itojun int
   2346  1.106    itojun extended_port(const char *arg)
   2347  1.106    itojun {
   2348  1.106    itojun #ifdef INET6	/*not really IPv6-only.  just to avoid the use of getaddrinfo*/
   2349  1.106    itojun 	char *tmp = NULL;
   2350  1.106    itojun 	char *result[3];
   2351  1.106    itojun 	char *p, *q;
   2352  1.106    itojun 	char delim;
   2353  1.106    itojun 	struct addrinfo hints;
   2354  1.106    itojun 	struct addrinfo *res = NULL;
   2355  1.106    itojun 	int i;
   2356  1.106    itojun 	unsigned long proto;
   2357  1.106    itojun 
   2358  1.106    itojun 	tmp = xstrdup(arg);
   2359  1.106    itojun 	p = tmp;
   2360  1.106    itojun 	delim = p[0];
   2361  1.106    itojun 	p++;
   2362  1.106    itojun 	memset(result, 0, sizeof(result));
   2363  1.106    itojun 	for (i = 0; i < 3; i++) {
   2364  1.106    itojun 		q = strchr(p, delim);
   2365  1.106    itojun 		if (!q || *q != delim)
   2366  1.106    itojun 			goto parsefail;
   2367  1.106    itojun 		*q++ = '\0';
   2368  1.106    itojun 		result[i] = p;
   2369  1.106    itojun 		p = q;
   2370  1.106    itojun 	}
   2371  1.106    itojun 
   2372  1.106    itojun 	/* some more sanity check */
   2373  1.106    itojun 	p = NULL;
   2374  1.106    itojun 	(void)strtoul(result[2], &p, 10);
   2375  1.106    itojun 	if (!*result[2] || *p)
   2376  1.108    itojun 		goto parsefail;
   2377  1.106    itojun 	p = NULL;
   2378  1.106    itojun 	proto = strtoul(result[0], &p, 10);
   2379  1.106    itojun 	if (!*result[0] || *p)
   2380  1.106    itojun 		goto protounsupp;
   2381  1.106    itojun 
   2382  1.106    itojun 	memset(&hints, 0, sizeof(hints));
   2383  1.106    itojun 	hints.ai_family = epsvproto2af((int)proto);
   2384  1.106    itojun 	if (hints.ai_family < 0)
   2385  1.106    itojun 		goto protounsupp;
   2386  1.106    itojun 	hints.ai_socktype = SOCK_STREAM;
   2387  1.106    itojun 	hints.ai_flags = AI_NUMERICHOST;
   2388  1.106    itojun 	if (getaddrinfo(result[1], result[2], &hints, &res))
   2389  1.106    itojun 		goto parsefail;
   2390  1.106    itojun 	if (res->ai_next)
   2391  1.106    itojun 		goto parsefail;
   2392  1.106    itojun 	if (sizeof(data_dest) < res->ai_addrlen)
   2393  1.106    itojun 		goto parsefail;
   2394  1.106    itojun 	memcpy(&data_dest, res->ai_addr, res->ai_addrlen);
   2395  1.106    itojun 	if (his_addr.su_family == AF_INET6 &&
   2396  1.106    itojun 	    data_dest.su_family == AF_INET6) {
   2397  1.106    itojun 		/* XXX more sanity checks! */
   2398  1.109     lukem 		data_dest.su_scope_id = his_addr.su_scope_id;
   2399  1.106    itojun 	}
   2400  1.106    itojun 
   2401  1.106    itojun 	if (tmp != NULL)
   2402  1.106    itojun 		free(tmp);
   2403  1.106    itojun 	if (res)
   2404  1.106    itojun 		freeaddrinfo(res);
   2405  1.106    itojun 	return 0;
   2406  1.106    itojun 
   2407  1.109     lukem  parsefail:
   2408  1.106    itojun 	reply(500, "Invalid argument, rejected.");
   2409  1.106    itojun 	usedefault = 1;
   2410  1.107    itojun 	if (tmp != NULL)
   2411  1.107    itojun 		free(tmp);
   2412  1.107    itojun 	if (res)
   2413  1.107    itojun 		freeaddrinfo(res);
   2414  1.106    itojun 	return -1;
   2415  1.106    itojun 
   2416  1.109     lukem  protounsupp:
   2417  1.106    itojun 	epsv_protounsupp("Protocol not supported");
   2418  1.106    itojun 	usedefault = 1;
   2419  1.107    itojun 	if (tmp != NULL)
   2420  1.107    itojun 		free(tmp);
   2421  1.107    itojun 	if (res)
   2422  1.107    itojun 		freeaddrinfo(res);
   2423  1.106    itojun 	return -1;
   2424  1.106    itojun #else
   2425  1.106    itojun 	reply(500, "Invalid argument, rejected.");
   2426  1.106    itojun 	return -1;
   2427  1.106    itojun #endif
   2428  1.106    itojun }
   2429  1.106    itojun 
   2430  1.106    itojun /*
   2431  1.106    itojun  * 522 Protocol not supported (proto,...)
   2432  1.106    itojun  * as we assume address family for control and data connections are the same,
   2433  1.106    itojun  * we do not return the list of address families we support - instead, we
   2434  1.106    itojun  * return the address family of the control connection.
   2435  1.106    itojun  */
   2436  1.106    itojun void
   2437  1.106    itojun epsv_protounsupp(const char *message)
   2438  1.106    itojun {
   2439  1.106    itojun 	int proto;
   2440  1.106    itojun 
   2441  1.106    itojun 	proto = af2epsvproto(ctrl_addr.su_family);
   2442  1.106    itojun 	if (proto < 0)
   2443  1.106    itojun 		reply(501, "%s", message);	/*XXX*/
   2444  1.106    itojun 	else
   2445  1.106    itojun 		reply(522, "%s, use (%d)", message, proto);
   2446    1.1       cgd }
   2447    1.1       cgd 
   2448    1.1       cgd /*
   2449    1.1       cgd  * Generate unique name for file with basename "local".
   2450    1.1       cgd  * The file named "local" is already known to exist.
   2451    1.1       cgd  * Generates failure reply on error.
   2452   1.29       mrg  *
   2453  1.109     lukem  * XXX:	this function should under go changes similar to
   2454  1.109     lukem  *	the mktemp(3)/mkstemp(3) changes.
   2455    1.1       cgd  */
   2456    1.8   deraadt static char *
   2457   1.88     lukem gunique(const char *local)
   2458    1.1       cgd {
   2459   1.82     lukem 	static char new[MAXPATHLEN];
   2460    1.1       cgd 	struct stat st;
   2461    1.8   deraadt 	char *cp;
   2462   1.73     lukem 	int count;
   2463    1.1       cgd 
   2464    1.8   deraadt 	cp = strrchr(local, '/');
   2465    1.1       cgd 	if (cp)
   2466    1.1       cgd 		*cp = '\0';
   2467    1.1       cgd 	if (stat(cp ? local : ".", &st) < 0) {
   2468    1.1       cgd 		perror_reply(553, cp ? local : ".");
   2469   1.57     lukem 		return (NULL);
   2470    1.1       cgd 	}
   2471    1.1       cgd 	if (cp)
   2472    1.1       cgd 		*cp = '/';
   2473    1.1       cgd 	for (count = 1; count < 100; count++) {
   2474   1.73     lukem 		(void)snprintf(new, sizeof(new) - 1, "%s.%d", local, count);
   2475    1.1       cgd 		if (stat(new, &st) < 0)
   2476    1.8   deraadt 			return (new);
   2477    1.1       cgd 	}
   2478    1.1       cgd 	reply(452, "Unique file name cannot be created.");
   2479    1.8   deraadt 	return (NULL);
   2480    1.1       cgd }
   2481    1.1       cgd 
   2482    1.1       cgd /*
   2483    1.1       cgd  * Format and send reply containing system error number.
   2484    1.1       cgd  */
   2485    1.8   deraadt void
   2486   1.88     lukem perror_reply(int code, const char *string)
   2487    1.1       cgd {
   2488   1.62     lukem 	int save_errno;
   2489    1.8   deraadt 
   2490   1.62     lukem 	save_errno = errno;
   2491    1.1       cgd 	reply(code, "%s: %s.", string, strerror(errno));
   2492   1.62     lukem 	errno = save_errno;
   2493    1.1       cgd }
   2494    1.1       cgd 
   2495    1.1       cgd static char *onefile[] = {
   2496    1.1       cgd 	"",
   2497    1.1       cgd 	0
   2498    1.1       cgd };
   2499    1.1       cgd 
   2500    1.8   deraadt void
   2501   1.88     lukem send_file_list(const char *whichf)
   2502    1.1       cgd {
   2503    1.1       cgd 	struct stat st;
   2504    1.1       cgd 	DIR *dirp = NULL;
   2505    1.1       cgd 	struct dirent *dir;
   2506    1.1       cgd 	FILE *dout = NULL;
   2507   1.62     lukem 	char **dirlist, *dirname, *p;
   2508    1.1       cgd 	int simple = 0;
   2509    1.8   deraadt 	int freeglob = 0;
   2510    1.8   deraadt 	glob_t gl;
   2511   1.62     lukem 	off_t b;
   2512   1.62     lukem 
   2513   1.25  christos #ifdef __GNUC__
   2514   1.25  christos 	(void) &dout;
   2515   1.25  christos 	(void) &dirlist;
   2516   1.25  christos 	(void) &simple;
   2517   1.25  christos 	(void) &freeglob;
   2518   1.25  christos #endif
   2519    1.1       cgd 
   2520   1.62     lukem 	p = NULL;
   2521    1.8   deraadt 	if (strpbrk(whichf, "~{[*?") != NULL) {
   2522   1.50    kleink 		int flags = GLOB_BRACE|GLOB_NOCHECK|GLOB_TILDE;
   2523    1.1       cgd 
   2524    1.8   deraadt 		memset(&gl, 0, sizeof(gl));
   2525    1.8   deraadt 		freeglob = 1;
   2526    1.8   deraadt 		if (glob(whichf, flags, 0, &gl)) {
   2527    1.8   deraadt 			reply(550, "not found");
   2528    1.8   deraadt 			goto out;
   2529    1.8   deraadt 		} else if (gl.gl_pathc == 0) {
   2530    1.1       cgd 			errno = ENOENT;
   2531    1.8   deraadt 			perror_reply(550, whichf);
   2532    1.8   deraadt 			goto out;
   2533    1.1       cgd 		}
   2534    1.8   deraadt 		dirlist = gl.gl_pathv;
   2535    1.1       cgd 	} else {
   2536   1.62     lukem 		p = xstrdup(whichf);
   2537   1.62     lukem 		onefile[0] = p;
   2538    1.1       cgd 		dirlist = onefile;
   2539    1.1       cgd 		simple = 1;
   2540    1.1       cgd 	}
   2541   1.62     lukem 					/* XXX: } for vi sm */
   2542    1.1       cgd 
   2543    1.1       cgd 	if (setjmp(urgcatch)) {
   2544    1.1       cgd 		transflag = 0;
   2545    1.8   deraadt 		goto out;
   2546    1.1       cgd 	}
   2547   1.20     lukem 	while ((dirname = *dirlist++) != NULL) {
   2548   1.33     lukem 		int trailingslash = 0;
   2549   1.33     lukem 
   2550    1.1       cgd 		if (stat(dirname, &st) < 0) {
   2551    1.1       cgd 			/*
   2552    1.1       cgd 			 * If user typed "ls -l", etc, and the client
   2553    1.1       cgd 			 * used NLST, do what the user meant.
   2554    1.1       cgd 			 */
   2555   1.71     lukem 			/* XXX: nuke this support? */
   2556    1.1       cgd 			if (dirname[0] == '-' && *dirlist == NULL &&
   2557    1.1       cgd 			    transflag == 0) {
   2558   1.71     lukem 				char *argv[] = { INTERNAL_LS, "", NULL };
   2559   1.71     lukem 
   2560   1.71     lukem 				argv[1] = dirname;
   2561   1.71     lukem 				retrieve(argv, dirname);
   2562    1.8   deraadt 				goto out;
   2563    1.1       cgd 			}
   2564    1.8   deraadt 			perror_reply(550, whichf);
   2565   1.95     lukem 			goto cleanup_send_file_list;
   2566    1.1       cgd 		}
   2567    1.1       cgd 
   2568    1.8   deraadt 		if (S_ISREG(st.st_mode)) {
   2569    1.1       cgd 			if (dout == NULL) {
   2570    1.1       cgd 				dout = dataconn("file list", (off_t)-1, "w");
   2571    1.1       cgd 				if (dout == NULL)
   2572    1.8   deraadt 					goto out;
   2573    1.1       cgd 				transflag++;
   2574    1.1       cgd 			}
   2575   1.62     lukem 			b = fprintf(dout, "%s%s\n", dirname,
   2576   1.62     lukem 			    type == TYPE_A ? "\r" : "");
   2577   1.62     lukem 			total_bytes += b;
   2578   1.62     lukem 			total_bytes_out += b;
   2579    1.1       cgd 			byte_count += strlen(dirname) + 1;
   2580    1.1       cgd 			continue;
   2581    1.8   deraadt 		} else if (!S_ISDIR(st.st_mode))
   2582    1.1       cgd 			continue;
   2583    1.1       cgd 
   2584   1.33     lukem 		if (dirname[strlen(dirname) - 1] == '/')
   2585   1.33     lukem 			trailingslash++;
   2586   1.33     lukem 
   2587    1.1       cgd 		if ((dirp = opendir(dirname)) == NULL)
   2588    1.1       cgd 			continue;
   2589    1.1       cgd 
   2590    1.1       cgd 		while ((dir = readdir(dirp)) != NULL) {
   2591   1.82     lukem 			char nbuf[MAXPATHLEN];
   2592    1.1       cgd 
   2593   1.93     lukem 			if (ISDOTDIR(dir->d_name) || ISDOTDOTDIR(dir->d_name))
   2594    1.1       cgd 				continue;
   2595    1.1       cgd 
   2596   1.33     lukem 			(void)snprintf(nbuf, sizeof(nbuf), "%s%s%s", dirname,
   2597   1.33     lukem 			    trailingslash ? "" : "/", dir->d_name);
   2598    1.1       cgd 
   2599    1.1       cgd 			/*
   2600   1.30     lukem 			 * We have to do a stat to ensure it's
   2601    1.1       cgd 			 * not a directory or special file.
   2602    1.1       cgd 			 */
   2603   1.71     lukem 			/* XXX: follow RFC959 and filter out non files ? */
   2604    1.1       cgd 			if (simple || (stat(nbuf, &st) == 0 &&
   2605    1.8   deraadt 			    S_ISREG(st.st_mode))) {
   2606   1.62     lukem 				char *p;
   2607   1.62     lukem 
   2608    1.1       cgd 				if (dout == NULL) {
   2609    1.1       cgd 					dout = dataconn("file list", (off_t)-1,
   2610    1.1       cgd 						"w");
   2611    1.1       cgd 					if (dout == NULL)
   2612    1.8   deraadt 						goto out;
   2613    1.1       cgd 					transflag++;
   2614    1.1       cgd 				}
   2615   1.62     lukem 				p = nbuf;
   2616    1.1       cgd 				if (nbuf[0] == '.' && nbuf[1] == '/')
   2617   1.62     lukem 					p = &nbuf[2];
   2618   1.62     lukem 				b = fprintf(dout, "%s%s\n", p,
   2619   1.62     lukem 				    type == TYPE_A ? "\r" : "");
   2620   1.62     lukem 				total_bytes += b;
   2621   1.62     lukem 				total_bytes_out += b;
   2622    1.1       cgd 				byte_count += strlen(nbuf) + 1;
   2623    1.1       cgd 			}
   2624    1.1       cgd 		}
   2625    1.1       cgd 		(void) closedir(dirp);
   2626    1.1       cgd 	}
   2627    1.1       cgd 
   2628    1.1       cgd 	if (dout == NULL)
   2629    1.1       cgd 		reply(550, "No files found.");
   2630    1.1       cgd 	else if (ferror(dout) != 0)
   2631    1.1       cgd 		perror_reply(550, "Data connection");
   2632    1.1       cgd 	else
   2633    1.1       cgd 		reply(226, "Transfer complete.");
   2634    1.1       cgd 
   2635   1.95     lukem  cleanup_send_file_list:
   2636    1.1       cgd 	transflag = 0;
   2637   1.95     lukem 	closedataconn(dout);
   2638   1.89     lukem  out:
   2639   1.62     lukem 	total_xfers++;
   2640   1.62     lukem 	total_xfers_out++;
   2641   1.62     lukem 	if (p)
   2642   1.62     lukem 		free(p);
   2643   1.62     lukem 	if (freeglob)
   2644    1.8   deraadt 		globfree(&gl);
   2645   1.34     lukem }
   2646   1.34     lukem 
   2647   1.34     lukem char *
   2648   1.88     lukem conffilename(const char *s)
   2649   1.34     lukem {
   2650   1.82     lukem 	static char filename[MAXPATHLEN];
   2651   1.34     lukem 
   2652   1.73     lukem 	if (*s == '/')
   2653   1.73     lukem 		strlcpy(filename, s, sizeof(filename));
   2654   1.73     lukem 	else
   2655   1.73     lukem 		(void)snprintf(filename, sizeof(filename), "%s/%s", confdir ,s);
   2656   1.73     lukem 	return (filename);
   2657   1.62     lukem }
   2658   1.62     lukem 
   2659   1.62     lukem /*
   2660   1.62     lukem  * logcmd --
   2661   1.62     lukem  *	based on the arguments, syslog a message:
   2662   1.62     lukem  *	 if bytes != -1		"<command> <file1> = <bytes> bytes"
   2663   1.62     lukem  *	 else if file2 != NULL	"<command> <file1> <file2>"
   2664   1.62     lukem  *	 else			"<command> <file1>"
   2665   1.62     lukem  *	if elapsed != NULL, append "in xxx.yyy seconds"
   2666   1.62     lukem  *	if error != NULL, append ": " + error
   2667   1.62     lukem  */
   2668   1.62     lukem void
   2669   1.88     lukem logcmd(const char *command, off_t bytes, const char *file1, const char *file2,
   2670   1.88     lukem 	const struct timeval *elapsed, const char *error)
   2671   1.62     lukem {
   2672   1.82     lukem 	char	buf[MAXPATHLEN * 2 + 100], realfile[MAXPATHLEN];
   2673   1.62     lukem 	const char *p;
   2674   1.62     lukem 	size_t	len;
   2675   1.62     lukem 
   2676   1.62     lukem 	if (logging <=1)
   2677   1.62     lukem 		return;
   2678   1.62     lukem 
   2679  1.109     lukem 	if ((p = realpath(file1, realfile)) == NULL)
   2680   1.62     lukem 		p = file1;
   2681   1.62     lukem 	len = snprintf(buf, sizeof(buf), "%s %s", command, p);
   2682   1.62     lukem 
   2683   1.62     lukem 	if (bytes != (off_t)-1) {
   2684   1.62     lukem 		len += snprintf(buf + len, sizeof(buf) - len,
   2685  1.109     lukem 		    " = " LLF " byte%s", (LLT) bytes, PLURAL(bytes));
   2686   1.62     lukem 	} else if (file2 != NULL) {
   2687  1.109     lukem 		if ((p = realpath(file2, realfile)) == NULL)
   2688   1.62     lukem 			p = file2;
   2689   1.62     lukem 		len += snprintf(buf + len, sizeof(buf) - len, " %s", p);
   2690   1.62     lukem 	}
   2691   1.62     lukem 
   2692   1.62     lukem 	if (elapsed != NULL) {
   2693   1.62     lukem 		len += snprintf(buf + len, sizeof(buf) - len,
   2694   1.62     lukem 		    " in %ld.%.03d seconds", elapsed->tv_sec,
   2695   1.62     lukem 		    (int)(elapsed->tv_usec / 1000));
   2696   1.62     lukem 	}
   2697   1.62     lukem 
   2698   1.62     lukem 	if (error != NULL)
   2699   1.62     lukem 		len += snprintf(buf + len, sizeof(buf) - len, ": %s", error);
   2700   1.62     lukem 
   2701   1.62     lukem 	syslog(LOG_INFO, "%s", buf);
   2702   1.62     lukem }
   2703   1.62     lukem 
   2704   1.62     lukem char *
   2705   1.88     lukem xstrdup(const char *s)
   2706   1.62     lukem {
   2707   1.62     lukem 	char *new = strdup(s);
   2708   1.62     lukem 
   2709   1.62     lukem 	if (new == NULL)
   2710   1.62     lukem 		fatal("Local resource failure: malloc");
   2711   1.62     lukem 		/* NOTREACHED */
   2712   1.62     lukem 	return (new);
   2713   1.95     lukem }
   2714   1.95     lukem 
   2715   1.95     lukem /*
   2716   1.95     lukem  * As per fprintf(), but increment total_bytes and total_bytes_out,
   2717   1.95     lukem  * by the appropriate amount.
   2718   1.95     lukem  */
   2719   1.95     lukem void
   2720   1.95     lukem cprintf(FILE *fd, const char *fmt, ...)
   2721   1.95     lukem {
   2722   1.95     lukem 	off_t b;
   2723   1.95     lukem 	va_list ap;
   2724   1.95     lukem 
   2725   1.95     lukem 	va_start(ap, fmt);
   2726   1.95     lukem 	b = vfprintf(fd, fmt, ap);
   2727   1.95     lukem 	total_bytes += b;
   2728   1.95     lukem 	total_bytes_out += b;
   2729    1.1       cgd }
   2730