ftpd.c revision 1.109 1 1.109 lukem /* $NetBSD: ftpd.c,v 1.109 2000/11/15 02:32:30 lukem Exp $ */
2 1.67 itojun
3 1.67 itojun /*
4 1.82 lukem * Copyright (c) 1997-2000 The NetBSD Foundation, Inc.
5 1.67 itojun * All rights reserved.
6 1.73 lukem *
7 1.73 lukem * This code is derived from software contributed to The NetBSD Foundation
8 1.73 lukem * by Luke Mewburn.
9 1.73 lukem *
10 1.67 itojun * Redistribution and use in source and binary forms, with or without
11 1.67 itojun * modification, are permitted provided that the following conditions
12 1.67 itojun * are met:
13 1.67 itojun * 1. Redistributions of source code must retain the above copyright
14 1.67 itojun * notice, this list of conditions and the following disclaimer.
15 1.67 itojun * 2. Redistributions in binary form must reproduce the above copyright
16 1.67 itojun * notice, this list of conditions and the following disclaimer in the
17 1.67 itojun * documentation and/or other materials provided with the distribution.
18 1.73 lukem * 3. All advertising materials mentioning features or use of this software
19 1.73 lukem * must display the following acknowledgement:
20 1.73 lukem * This product includes software developed by the NetBSD
21 1.73 lukem * Foundation, Inc. and its contributors.
22 1.73 lukem * 4. Neither the name of The NetBSD Foundation nor the names of its
23 1.73 lukem * contributors may be used to endorse or promote products derived
24 1.73 lukem * from this software without specific prior written permission.
25 1.73 lukem *
26 1.73 lukem * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
27 1.73 lukem * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
28 1.73 lukem * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
29 1.73 lukem * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
30 1.73 lukem * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
31 1.73 lukem * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
32 1.73 lukem * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
33 1.73 lukem * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
34 1.73 lukem * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
35 1.73 lukem * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
36 1.73 lukem * POSSIBILITY OF SUCH DAMAGE.
37 1.67 itojun */
38 1.13 cgd
39 1.1 cgd /*
40 1.8 deraadt * Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994
41 1.8 deraadt * The Regents of the University of California. All rights reserved.
42 1.1 cgd *
43 1.1 cgd * Redistribution and use in source and binary forms, with or without
44 1.1 cgd * modification, are permitted provided that the following conditions
45 1.1 cgd * are met:
46 1.1 cgd * 1. Redistributions of source code must retain the above copyright
47 1.1 cgd * notice, this list of conditions and the following disclaimer.
48 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
49 1.1 cgd * notice, this list of conditions and the following disclaimer in the
50 1.1 cgd * documentation and/or other materials provided with the distribution.
51 1.1 cgd * 3. All advertising materials mentioning features or use of this software
52 1.1 cgd * must display the following acknowledgement:
53 1.1 cgd * This product includes software developed by the University of
54 1.1 cgd * California, Berkeley and its contributors.
55 1.1 cgd * 4. Neither the name of the University nor the names of its contributors
56 1.1 cgd * may be used to endorse or promote products derived from this software
57 1.1 cgd * without specific prior written permission.
58 1.1 cgd *
59 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
60 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
61 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
62 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
63 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
64 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
65 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
66 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
67 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
68 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
69 1.1 cgd * SUCH DAMAGE.
70 1.1 cgd */
71 1.1 cgd
72 1.62 lukem /*
73 1.73 lukem * Copyright (C) 1997 and 1998 WIDE Project.
74 1.62 lukem * All rights reserved.
75 1.73 lukem *
76 1.62 lukem * Redistribution and use in source and binary forms, with or without
77 1.62 lukem * modification, are permitted provided that the following conditions
78 1.62 lukem * are met:
79 1.62 lukem * 1. Redistributions of source code must retain the above copyright
80 1.62 lukem * notice, this list of conditions and the following disclaimer.
81 1.62 lukem * 2. Redistributions in binary form must reproduce the above copyright
82 1.62 lukem * notice, this list of conditions and the following disclaimer in the
83 1.62 lukem * documentation and/or other materials provided with the distribution.
84 1.73 lukem * 3. Neither the name of the project nor the names of its contributors
85 1.73 lukem * may be used to endorse or promote products derived from this software
86 1.73 lukem * without specific prior written permission.
87 1.73 lukem *
88 1.73 lukem * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
89 1.73 lukem * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
90 1.73 lukem * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
91 1.73 lukem * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
92 1.73 lukem * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
93 1.73 lukem * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
94 1.73 lukem * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
95 1.73 lukem * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
96 1.73 lukem * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
97 1.73 lukem * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
98 1.73 lukem * SUCH DAMAGE.
99 1.62 lukem */
100 1.62 lukem
101 1.25 christos #include <sys/cdefs.h>
102 1.1 cgd #ifndef lint
103 1.25 christos __COPYRIGHT(
104 1.8 deraadt "@(#) Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994\n\
105 1.25 christos The Regents of the University of California. All rights reserved.\n");
106 1.1 cgd #endif /* not lint */
107 1.1 cgd
108 1.1 cgd #ifndef lint
109 1.13 cgd #if 0
110 1.17 cjs static char sccsid[] = "@(#)ftpd.c 8.5 (Berkeley) 4/28/95";
111 1.13 cgd #else
112 1.109 lukem __RCSID("$NetBSD: ftpd.c,v 1.109 2000/11/15 02:32:30 lukem Exp $");
113 1.13 cgd #endif
114 1.1 cgd #endif /* not lint */
115 1.1 cgd
116 1.1 cgd /*
117 1.1 cgd * FTP server.
118 1.1 cgd */
119 1.1 cgd #include <sys/param.h>
120 1.1 cgd #include <sys/stat.h>
121 1.1 cgd #include <sys/ioctl.h>
122 1.1 cgd #include <sys/socket.h>
123 1.1 cgd #include <sys/wait.h>
124 1.1 cgd
125 1.1 cgd #include <netinet/in.h>
126 1.1 cgd #include <netinet/in_systm.h>
127 1.1 cgd #include <netinet/ip.h>
128 1.1 cgd
129 1.1 cgd #define FTP_NAMES
130 1.1 cgd #include <arpa/ftp.h>
131 1.1 cgd #include <arpa/inet.h>
132 1.1 cgd #include <arpa/telnet.h>
133 1.1 cgd
134 1.8 deraadt #include <ctype.h>
135 1.1 cgd #include <dirent.h>
136 1.8 deraadt #include <err.h>
137 1.8 deraadt #include <errno.h>
138 1.1 cgd #include <fcntl.h>
139 1.21 cjs #include <fnmatch.h>
140 1.8 deraadt #include <glob.h>
141 1.81 lukem #include <grp.h>
142 1.8 deraadt #include <limits.h>
143 1.8 deraadt #include <netdb.h>
144 1.1 cgd #include <pwd.h>
145 1.1 cgd #include <setjmp.h>
146 1.8 deraadt #include <signal.h>
147 1.93 lukem #include <stdarg.h>
148 1.1 cgd #include <stdio.h>
149 1.1 cgd #include <stdlib.h>
150 1.1 cgd #include <string.h>
151 1.8 deraadt #include <syslog.h>
152 1.8 deraadt #include <time.h>
153 1.8 deraadt #include <unistd.h>
154 1.73 lukem #include <util.h>
155 1.78 lukem #include <utmp.h>
156 1.25 christos #ifdef SKEY
157 1.25 christos #include <skey.h>
158 1.25 christos #endif
159 1.38 mycroft #ifdef KERBEROS5
160 1.86 aidan #include <com_err.h>
161 1.69 christos #include <krb5/krb5.h>
162 1.38 mycroft #endif
163 1.8 deraadt
164 1.84 lukem #define GLOBAL
165 1.24 lukem #include "extern.h"
166 1.1 cgd #include "pathnames.h"
167 1.78 lukem #include "version.h"
168 1.1 cgd
169 1.1 cgd int data;
170 1.87 lukem jmp_buf urgcatch;
171 1.1 cgd struct passwd *pw;
172 1.51 msaitoh int sflag;
173 1.1 cgd int stru; /* avoid C keyword */
174 1.1 cgd int mode;
175 1.101 lukem int doutmp; /* update utmp file */
176 1.102 lukem int dowtmp; /* update wtmp file */
177 1.101 lukem int dropprivs; /* if privileges should or have been dropped */
178 1.101 lukem int mapped; /* IPv4 connection on AF_INET6 socket */
179 1.1 cgd off_t file_size;
180 1.1 cgd off_t byte_count;
181 1.13 cgd static char ttyline[20];
182 1.78 lukem static struct utmp utmp; /* for utmp */
183 1.57 lukem
184 1.22 cjs static char *anondir = NULL;
185 1.34 lukem static char confdir[MAXPATHLEN];
186 1.24 lukem
187 1.38 mycroft #if defined(KERBEROS) || defined(KERBEROS5)
188 1.91 fredb int has_ccache = 0;
189 1.13 cgd int notickets = 1;
190 1.13 cgd char *krbtkfile_env = NULL;
191 1.91 fredb char *tty = ttyline;
192 1.92 explorer int login_krb5_forwardable_tgt = 0;
193 1.73 lukem #endif
194 1.4 cgd
195 1.104 christos #ifndef INET6_ADDRSTRLEN
196 1.104 christos #define INET6_ADDRSTRLEN MAXHOSTNAMELEN
197 1.104 christos #endif
198 1.104 christos
199 1.67 itojun int epsvall = 0;
200 1.67 itojun
201 1.1 cgd /*
202 1.1 cgd * Timeout intervals for retrying connections
203 1.1 cgd * to hosts that don't accept PORT cmds. This
204 1.1 cgd * is a kludge, but given the problems with TCP...
205 1.1 cgd */
206 1.1 cgd #define SWAITMAX 90 /* wait at most 90 seconds */
207 1.1 cgd #define SWAITINT 5 /* interval between retries */
208 1.1 cgd
209 1.1 cgd int swaitmax = SWAITMAX;
210 1.1 cgd int swaitint = SWAITINT;
211 1.1 cgd
212 1.88 lukem static int bind_pasv_addr(void);
213 1.88 lukem static int checkuser(const char *, const char *, int, int, char **);
214 1.88 lukem static int checkaccess(const char *);
215 1.88 lukem static void dolog(struct sockaddr *);
216 1.88 lukem static void end_login(void);
217 1.88 lukem static FILE *getdatasock(const char *);
218 1.88 lukem static char *gunique(const char *);
219 1.88 lukem static void lostconn(int);
220 1.88 lukem static void myoob(int);
221 1.88 lukem static int receive_data(FILE *, FILE *);
222 1.88 lukem static int send_data(FILE *, FILE *, off_t, int);
223 1.88 lukem static struct passwd *sgetpwnam(const char *);
224 1.8 deraadt
225 1.88 lukem int main(int, char *[]);
226 1.26 mellon
227 1.92 explorer #if defined(KERBEROS)
228 1.88 lukem int klogin(struct passwd *, char *, char *, char *);
229 1.88 lukem void kdestroy(void);
230 1.26 mellon #endif
231 1.92 explorer #if defined(KERBEROS5)
232 1.92 explorer int k5login(struct passwd *, char *, char *, char *);
233 1.92 explorer void k5destroy(void);
234 1.92 explorer #endif
235 1.63 lukem
236 1.8 deraadt int
237 1.88 lukem main(int argc, char *argv[])
238 1.1 cgd {
239 1.76 lukem int addrlen, ch, on = 1, tos, keepalive;
240 1.73 lukem #ifdef KERBEROS5
241 1.76 lukem krb5_error_code kerror;
242 1.38 mycroft #endif
243 1.1 cgd
244 1.87 lukem connections = 1;
245 1.1 cgd debug = 0;
246 1.35 lukem logging = 0;
247 1.87 lukem pdata = -1;
248 1.51 msaitoh sflag = 0;
249 1.102 lukem doutmp = 0; /* default: don't log to utmp */
250 1.102 lukem dowtmp = 1; /* default: DO log to wtmp */
251 1.101 lukem dropprivs = 0;
252 1.101 lukem mapped = 0;
253 1.87 lukem usedefault = 1;
254 1.34 lukem (void)strcpy(confdir, _DEFAULT_CONFDIR);
255 1.80 lukem hostname[0] = '\0';
256 1.100 lukem homedir[0] = '\0';
257 1.95 lukem gidcount = 0;
258 1.1 cgd
259 1.101 lukem version = FTPD_VERSION;
260 1.102 lukem while ((ch = getopt(argc, argv, "a:c:C:dh:Hlrst:T:u:UvV:W")) != -1) {
261 1.8 deraadt switch (ch) {
262 1.22 cjs case 'a':
263 1.22 cjs anondir = optarg;
264 1.22 cjs break;
265 1.22 cjs
266 1.34 lukem case 'c':
267 1.73 lukem (void)strlcpy(confdir, optarg, sizeof(confdir));
268 1.34 lukem break;
269 1.73 lukem
270 1.35 lukem case 'C':
271 1.81 lukem pw = sgetpwnam(optarg);
272 1.73 lukem exit(checkaccess(optarg) ? 0 : 1);
273 1.35 lukem /* NOTREACHED */
274 1.34 lukem
275 1.1 cgd case 'd':
276 1.22 cjs case 'v': /* deprecated */
277 1.1 cgd debug = 1;
278 1.1 cgd break;
279 1.1 cgd
280 1.80 lukem case 'h':
281 1.80 lukem strlcpy(hostname, optarg, sizeof(hostname));
282 1.99 lukem break;
283 1.99 lukem
284 1.99 lukem case 'H':
285 1.99 lukem if (gethostname(hostname, sizeof(hostname)) == -1)
286 1.99 lukem hostname[0] = '\0';
287 1.99 lukem hostname[sizeof(hostname) - 1] = '\0';
288 1.80 lukem break;
289 1.80 lukem
290 1.1 cgd case 'l':
291 1.8 deraadt logging++; /* > 1 == extra logging */
292 1.1 cgd break;
293 1.1 cgd
294 1.101 lukem case 'r':
295 1.101 lukem dropprivs = 1;
296 1.101 lukem break;
297 1.101 lukem
298 1.51 msaitoh case 's':
299 1.51 msaitoh sflag = 1;
300 1.51 msaitoh break;
301 1.51 msaitoh
302 1.1 cgd case 't':
303 1.1 cgd case 'T':
304 1.1 cgd case 'u':
305 1.32 lukem warnx("-%c has been deprecated in favour of ftpd.conf",
306 1.24 lukem ch);
307 1.8 deraadt break;
308 1.1 cgd
309 1.78 lukem case 'U':
310 1.78 lukem doutmp = 1;
311 1.78 lukem break;
312 1.78 lukem
313 1.101 lukem case 'V':
314 1.101 lukem if (EMPTYSTR(optarg) || strcmp(optarg, "-") == 0)
315 1.101 lukem version = NULL;
316 1.101 lukem else
317 1.101 lukem version = xstrdup(optarg);
318 1.101 lukem break;
319 1.101 lukem
320 1.102 lukem case 'W':
321 1.102 lukem dowtmp = 0;
322 1.102 lukem break;
323 1.102 lukem
324 1.1 cgd default:
325 1.35 lukem if (optopt == 'a' || optopt == 'C')
326 1.35 lukem exit(1);
327 1.8 deraadt warnx("unknown flag -%c ignored", optopt);
328 1.1 cgd break;
329 1.1 cgd }
330 1.1 cgd }
331 1.35 lukem
332 1.35 lukem /*
333 1.35 lukem * LOG_NDELAY sets up the logging connection immediately,
334 1.35 lukem * necessary for anonymous ftp's that chroot and can't do it later.
335 1.35 lukem */
336 1.79 lukem openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP);
337 1.109 lukem memset((char *)&his_addr, 0, sizeof (his_addr));
338 1.109 lukem addrlen = sizeof(his_addr.si_su);
339 1.109 lukem if (getpeername(0, (struct sockaddr *)&his_addr.si_su, &addrlen) < 0) {
340 1.35 lukem syslog(LOG_ERR, "getpeername (%s): %m",argv[0]);
341 1.35 lukem exit(1);
342 1.35 lukem }
343 1.109 lukem his_addr.su_len = addrlen;
344 1.109 lukem memset((char *)&ctrl_addr, 0, sizeof (ctrl_addr));
345 1.109 lukem addrlen = sizeof(ctrl_addr.si_su);
346 1.68 itojun if (getsockname(0, (struct sockaddr *)&ctrl_addr, &addrlen) < 0) {
347 1.68 itojun syslog(LOG_ERR, "getsockname (%s): %m",argv[0]);
348 1.68 itojun exit(1);
349 1.68 itojun }
350 1.109 lukem ctrl_addr.su_len = addrlen;
351 1.104 christos #ifdef INET6
352 1.67 itojun if (his_addr.su_family == AF_INET6
353 1.109 lukem && IN6_IS_ADDR_V4MAPPED(&his_addr.su_6addr)) {
354 1.68 itojun #if 1
355 1.68 itojun /*
356 1.68 itojun * IPv4 control connection arrived to AF_INET6 socket.
357 1.68 itojun * I hate to do this, but this is the easiest solution.
358 1.90 itojun *
359 1.90 itojun * The assumption is untrue on SIIT environment.
360 1.68 itojun */
361 1.109 lukem struct sockinet tmp_addr;
362 1.74 itojun const int off = sizeof(struct in6_addr) - sizeof(struct in_addr);
363 1.68 itojun
364 1.68 itojun tmp_addr = his_addr;
365 1.68 itojun memset(&his_addr, 0, sizeof(his_addr));
366 1.109 lukem his_addr.su_family = AF_INET;
367 1.109 lukem his_addr.su_len = sizeof(his_addr.si_su.su_sin);
368 1.109 lukem memcpy(&his_addr.su_addr, &tmp_addr.su_6addr.s6_addr[off],
369 1.109 lukem sizeof(his_addr.su_addr));
370 1.109 lukem his_addr.su_port = tmp_addr.su_port;
371 1.68 itojun
372 1.68 itojun tmp_addr = ctrl_addr;
373 1.68 itojun memset(&ctrl_addr, 0, sizeof(ctrl_addr));
374 1.109 lukem ctrl_addr.su_family = AF_INET;
375 1.109 lukem ctrl_addr.su_len = sizeof(ctrl_addr.si_su.su_sin);
376 1.109 lukem memcpy(&ctrl_addr.su_addr, &tmp_addr.su_6addr.s6_addr[off],
377 1.109 lukem sizeof(ctrl_addr.su_addr));
378 1.109 lukem ctrl_addr.su_port = tmp_addr.su_port;
379 1.68 itojun #else
380 1.67 itojun while (fgets(line, sizeof(line), fd) != NULL) {
381 1.67 itojun if ((cp = strchr(line, '\n')) != NULL)
382 1.67 itojun *cp = '\0';
383 1.95 lukem reply(-530, "%s", line);
384 1.67 itojun }
385 1.67 itojun (void) fflush(stdout);
386 1.67 itojun (void) fclose(fd);
387 1.67 itojun reply(530,
388 1.101 lukem "Connection from IPv4 mapped address is not supported.");
389 1.67 itojun exit(0);
390 1.68 itojun #endif
391 1.75 itojun
392 1.75 itojun mapped = 1;
393 1.75 itojun } else
394 1.109 lukem #endif /* INET6 */
395 1.75 itojun mapped = 0;
396 1.35 lukem #ifdef IP_TOS
397 1.75 itojun if (!mapped && his_addr.su_family == AF_INET) {
398 1.67 itojun tos = IPTOS_LOWDELAY;
399 1.67 itojun if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&tos,
400 1.67 itojun sizeof(int)) < 0)
401 1.67 itojun syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
402 1.67 itojun }
403 1.35 lukem #endif
404 1.80 lukem /* if the hostname hasn't been given, attempt to determine it */
405 1.80 lukem if (hostname[0] == '\0') {
406 1.109 lukem if (getnameinfo((struct sockaddr *)&ctrl_addr.si_su,
407 1.109 lukem ctrl_addr.su_len, hostname, sizeof(hostname), NULL, 0, 0)
408 1.109 lukem != 0)
409 1.80 lukem (void)gethostname(hostname, sizeof(hostname));
410 1.80 lukem hostname[sizeof(hostname) - 1] = '\0';
411 1.80 lukem }
412 1.79 lukem
413 1.35 lukem /* set this here so klogin can use it... */
414 1.35 lukem (void)snprintf(ttyline, sizeof(ttyline), "ftp%d", getpid());
415 1.35 lukem
416 1.1 cgd (void) freopen(_PATH_DEVNULL, "w", stderr);
417 1.1 cgd (void) signal(SIGPIPE, lostconn);
418 1.1 cgd (void) signal(SIGCHLD, SIG_IGN);
419 1.78 lukem if (signal(SIGURG, myoob) == SIG_ERR)
420 1.1 cgd syslog(LOG_ERR, "signal: %m");
421 1.1 cgd
422 1.1 cgd /* Try to handle urgent data inline */
423 1.1 cgd #ifdef SO_OOBINLINE
424 1.1 cgd if (setsockopt(0, SOL_SOCKET, SO_OOBINLINE, (char *)&on, sizeof(on)) < 0)
425 1.1 cgd syslog(LOG_ERR, "setsockopt: %m");
426 1.1 cgd #endif
427 1.66 briggs /* Set keepalives on the socket to detect dropped connections. */
428 1.66 briggs #ifdef SO_KEEPALIVE
429 1.66 briggs keepalive = 1;
430 1.66 briggs if (setsockopt(0, SOL_SOCKET, SO_KEEPALIVE, (char *)&keepalive,
431 1.66 briggs sizeof(int)) < 0)
432 1.66 briggs syslog(LOG_WARNING, "setsockopt (SO_KEEPALIVE): %m");
433 1.66 briggs #endif
434 1.1 cgd
435 1.1 cgd #ifdef F_SETOWN
436 1.1 cgd if (fcntl(fileno(stdin), F_SETOWN, getpid()) == -1)
437 1.1 cgd syslog(LOG_ERR, "fcntl F_SETOWN: %m");
438 1.1 cgd #endif
439 1.67 itojun dolog((struct sockaddr *)&his_addr);
440 1.1 cgd /*
441 1.1 cgd * Set up default state
442 1.1 cgd */
443 1.1 cgd data = -1;
444 1.1 cgd type = TYPE_A;
445 1.1 cgd form = FORM_N;
446 1.1 cgd stru = STRU_F;
447 1.1 cgd mode = MODE_S;
448 1.1 cgd tmpline[0] = '\0';
449 1.57 lukem hasyyerrored = 0;
450 1.8 deraadt
451 1.38 mycroft #ifdef KERBEROS5
452 1.38 mycroft kerror = krb5_init_context(&kcontext);
453 1.38 mycroft if (kerror) {
454 1.38 mycroft syslog(LOG_NOTICE, "%s when initializing Kerberos context",
455 1.38 mycroft error_message(kerror));
456 1.38 mycroft exit(0);
457 1.38 mycroft }
458 1.45 christos #endif /* KERBEROS5 */
459 1.38 mycroft
460 1.82 lukem init_curclass();
461 1.82 lukem curclass.timeout = 300; /* 5 minutes, as per login(1) */
462 1.82 lukem curclass.type = CLASS_REAL;
463 1.82 lukem
464 1.8 deraadt /* If logins are disabled, print out the message. */
465 1.100 lukem if (display_file(_PATH_NOLOGIN, 530)) {
466 1.8 deraadt reply(530, "System not available.");
467 1.8 deraadt exit(0);
468 1.8 deraadt }
469 1.100 lukem (void)display_file(conffilename(_PATH_FTPWELCOME), 220);
470 1.8 deraadt /* reply(220,) must follow */
471 1.101 lukem if (EMPTYSTR(version))
472 1.101 lukem reply(220, "%s FTP server ready.", hostname);
473 1.101 lukem else
474 1.101 lukem reply(220, "%s FTP server (%s) ready.", hostname, version);
475 1.73 lukem
476 1.1 cgd (void) setjmp(errcatch);
477 1.1 cgd for (;;)
478 1.1 cgd (void) yyparse();
479 1.1 cgd /* NOTREACHED */
480 1.1 cgd }
481 1.1 cgd
482 1.8 deraadt static void
483 1.88 lukem lostconn(int signo)
484 1.1 cgd {
485 1.8 deraadt
486 1.1 cgd if (debug)
487 1.1 cgd syslog(LOG_DEBUG, "lost connection");
488 1.35 lukem dologout(1);
489 1.1 cgd }
490 1.1 cgd
491 1.1 cgd /*
492 1.1 cgd * Save the result of a getpwnam. Used for USER command, since
493 1.1 cgd * the data returned must not be clobbered by any other command
494 1.1 cgd * (e.g., globbing).
495 1.1 cgd */
496 1.8 deraadt static struct passwd *
497 1.88 lukem sgetpwnam(const char *name)
498 1.1 cgd {
499 1.1 cgd static struct passwd save;
500 1.8 deraadt struct passwd *p;
501 1.1 cgd
502 1.1 cgd if ((p = getpwnam(name)) == NULL)
503 1.1 cgd return (p);
504 1.1 cgd if (save.pw_name) {
505 1.54 mycroft free((char *)save.pw_name);
506 1.78 lukem memset(save.pw_passwd, 0, strlen(save.pw_passwd));
507 1.54 mycroft free((char *)save.pw_passwd);
508 1.54 mycroft free((char *)save.pw_gecos);
509 1.54 mycroft free((char *)save.pw_dir);
510 1.54 mycroft free((char *)save.pw_shell);
511 1.1 cgd }
512 1.1 cgd save = *p;
513 1.58 lukem save.pw_name = xstrdup(p->pw_name);
514 1.58 lukem save.pw_passwd = xstrdup(p->pw_passwd);
515 1.58 lukem save.pw_gecos = xstrdup(p->pw_gecos);
516 1.58 lukem save.pw_dir = xstrdup(p->pw_dir);
517 1.58 lukem save.pw_shell = xstrdup(p->pw_shell);
518 1.1 cgd return (&save);
519 1.1 cgd }
520 1.1 cgd
521 1.93 lukem static int login_attempts; /* number of failed login attempts */
522 1.93 lukem static int askpasswd; /* had user command, ask for passwd */
523 1.93 lukem static char curname[10]; /* current USER name */
524 1.1 cgd
525 1.1 cgd /*
526 1.1 cgd * USER command.
527 1.1 cgd * Sets global passwd pointer pw if named account exists and is acceptable;
528 1.1 cgd * sets askpasswd if a PASS command is expected. If logged in previously,
529 1.1 cgd * need to reset state. If name is "ftp" or "anonymous", the name is not in
530 1.1 cgd * _PATH_FTPUSERS, and ftp account exists, set guest and pw, then just return.
531 1.1 cgd * If account doesn't exist, ask for passwd anyway. Otherwise, check user
532 1.1 cgd * requesting login privileges. Disallow anyone who does not have a standard
533 1.1 cgd * shell as returned by getusershell(). Disallow anyone mentioned in the file
534 1.1 cgd * _PATH_FTPUSERS to allow people such as root and uucp to be avoided.
535 1.1 cgd */
536 1.8 deraadt void
537 1.88 lukem user(const char *name)
538 1.1 cgd {
539 1.1 cgd if (logged_in) {
540 1.73 lukem switch (curclass.type) {
541 1.73 lukem case CLASS_GUEST:
542 1.1 cgd reply(530, "Can't change user from guest login.");
543 1.1 cgd return;
544 1.73 lukem case CLASS_CHROOT:
545 1.5 cgd reply(530, "Can't change user from chroot user.");
546 1.5 cgd return;
547 1.73 lukem case CLASS_REAL:
548 1.101 lukem if (dropprivs) {
549 1.101 lukem reply(530, "Can't change user.");
550 1.101 lukem return;
551 1.101 lukem }
552 1.73 lukem end_login();
553 1.73 lukem break;
554 1.73 lukem default:
555 1.73 lukem abort();
556 1.1 cgd }
557 1.1 cgd }
558 1.1 cgd
559 1.92 explorer #if defined(KERBEROS)
560 1.38 mycroft kdestroy();
561 1.38 mycroft #endif
562 1.92 explorer #if defined(KERBEROS5)
563 1.92 explorer k5destroy();
564 1.92 explorer #endif
565 1.38 mycroft
566 1.73 lukem curclass.type = CLASS_REAL;
567 1.1 cgd if (strcmp(name, "ftp") == 0 || strcmp(name, "anonymous") == 0) {
568 1.81 lukem /* need `pw' setup for checkaccess() and checkuser () */
569 1.81 lukem if ((pw = sgetpwnam("ftp")) == NULL)
570 1.81 lukem reply(530, "User %s unknown.", name);
571 1.82 lukem else if (! checkaccess("ftp") || ! checkaccess("anonymous"))
572 1.1 cgd reply(530, "User %s access denied.", name);
573 1.81 lukem else {
574 1.73 lukem curclass.type = CLASS_GUEST;
575 1.1 cgd askpasswd = 1;
576 1.8 deraadt reply(331,
577 1.8 deraadt "Guest login ok, type your name as password.");
578 1.81 lukem }
579 1.8 deraadt if (!askpasswd && logging)
580 1.8 deraadt syslog(LOG_NOTICE,
581 1.8 deraadt "ANONYMOUS FTP LOGIN REFUSED FROM %s", remotehost);
582 1.1 cgd return;
583 1.1 cgd }
584 1.34 lukem
585 1.19 cjs pw = sgetpwnam(name);
586 1.8 deraadt if (logging)
587 1.73 lukem strlcpy(curname, name, sizeof(curname));
588 1.36 mycroft
589 1.7 deraadt #ifdef SKEY
590 1.36 mycroft if (skey_haskey(name) == 0) {
591 1.103 martin const char *myskey;
592 1.7 deraadt
593 1.8 deraadt myskey = skey_keyinfo(name);
594 1.36 mycroft reply(331, "Password [%s] required for %s.",
595 1.8 deraadt myskey ? myskey : "error getting challenge", name);
596 1.7 deraadt } else
597 1.7 deraadt #endif
598 1.7 deraadt reply(331, "Password required for %s.", name);
599 1.7 deraadt
600 1.1 cgd askpasswd = 1;
601 1.1 cgd /*
602 1.1 cgd * Delay before reading passwd after first failed
603 1.1 cgd * attempt to slow down passwd-guessing programs.
604 1.1 cgd */
605 1.1 cgd if (login_attempts)
606 1.1 cgd sleep((unsigned) login_attempts);
607 1.1 cgd }
608 1.1 cgd
609 1.1 cgd /*
610 1.58 lukem * Determine whether something is to happen (allow access, chroot)
611 1.58 lukem * for a user. Each line is a shell-style glob followed by
612 1.58 lukem * `yes' or `no'.
613 1.58 lukem *
614 1.58 lukem * For backward compatability, `allow' and `deny' are synonymns
615 1.58 lukem * for `yes' and `no', respectively.
616 1.19 cjs *
617 1.21 cjs * Each glob is matched against the username in turn, and the first
618 1.58 lukem * match found is used. If no match is found, the result is the
619 1.58 lukem * argument `def'. If a match is found but without and explicit
620 1.58 lukem * `yes'/`no', the result is the opposite of def.
621 1.58 lukem *
622 1.58 lukem * If the file doesn't exist at all, the result is the argument
623 1.58 lukem * `nofile'
624 1.21 cjs *
625 1.21 cjs * Any line starting with `#' is considered a comment and ignored.
626 1.19 cjs *
627 1.73 lukem * Returns 0 if the user is denied, or 1 if they are allowed.
628 1.81 lukem *
629 1.81 lukem * NOTE: needs struct passwd *pw setup before use.
630 1.19 cjs */
631 1.58 lukem int
632 1.88 lukem checkuser(const char *fname, const char *name, int def, int nofile,
633 1.88 lukem char **retclass)
634 1.58 lukem {
635 1.58 lukem FILE *fd;
636 1.58 lukem int retval;
637 1.73 lukem char *glob, *perm, *class, *buf, *p;
638 1.76 lukem size_t len, line;
639 1.58 lukem
640 1.58 lukem retval = def;
641 1.73 lukem if (retclass != NULL)
642 1.73 lukem *retclass = NULL;
643 1.58 lukem if ((fd = fopen(conffilename(fname), "r")) == NULL)
644 1.58 lukem return nofile;
645 1.19 cjs
646 1.76 lukem line = 0;
647 1.73 lukem for (;
648 1.76 lukem (buf = fparseln(fd, &len, &line, NULL, FPARSELN_UNESCCOMM |
649 1.73 lukem FPARSELN_UNESCCONT | FPARSELN_UNESCESC)) != NULL;
650 1.73 lukem free(buf), buf = NULL) {
651 1.73 lukem glob = perm = class = NULL;
652 1.73 lukem p = buf;
653 1.73 lukem if (len < 1)
654 1.73 lukem continue;
655 1.73 lukem if (p[len - 1] == '\n')
656 1.73 lukem p[--len] = '\0';
657 1.73 lukem if (EMPTYSTR(p))
658 1.19 cjs continue;
659 1.73 lukem
660 1.73 lukem NEXTWORD(p, glob);
661 1.73 lukem NEXTWORD(p, perm);
662 1.73 lukem NEXTWORD(p, class);
663 1.73 lukem if (EMPTYSTR(glob))
664 1.70 tron continue;
665 1.76 lukem if (!EMPTYSTR(class)) {
666 1.76 lukem if (strcasecmp(class, "all") == 0 ||
667 1.76 lukem strcasecmp(class, "none") == 0) {
668 1.76 lukem syslog(LOG_WARNING,
669 1.76 lukem "%s line %d: illegal user-defined class `%s' - skipping entry",
670 1.76 lukem fname, (int)line, class);
671 1.76 lukem continue;
672 1.76 lukem }
673 1.76 lukem }
674 1.73 lukem
675 1.73 lukem /* have a host specifier */
676 1.73 lukem if ((p = strchr(glob, '@')) != NULL) {
677 1.109 lukem unsigned long net, mask, addr;
678 1.73 lukem int bits;
679 1.73 lukem
680 1.73 lukem *p++ = '\0';
681 1.73 lukem /* check against network or CIDR */
682 1.73 lukem if (isdigit(*p) &&
683 1.73 lukem (bits = inet_net_pton(AF_INET, p,
684 1.73 lukem &net, sizeof(net))) != -1) {
685 1.73 lukem net = ntohl(net);
686 1.73 lukem mask = 0xffffffffU << (32 - bits);
687 1.109 lukem addr = ntohl(his_addr.su_addr.s_addr);
688 1.73 lukem if ((addr & mask) != net)
689 1.73 lukem continue;
690 1.73 lukem
691 1.73 lukem /* check against hostname glob */
692 1.73 lukem } else if (fnmatch(p, remotehost, 0) != 0)
693 1.73 lukem continue;
694 1.19 cjs }
695 1.73 lukem
696 1.81 lukem /* have a group specifier */
697 1.81 lukem if ((p = strchr(glob, ':')) != NULL) {
698 1.81 lukem gid_t *groups, *ng;
699 1.81 lukem int gsize, i, found;
700 1.81 lukem
701 1.81 lukem *p++ = '\0';
702 1.81 lukem groups = NULL;
703 1.81 lukem gsize = 16;
704 1.81 lukem do {
705 1.81 lukem ng = realloc(groups, gsize * sizeof(gid_t));
706 1.81 lukem if (ng == NULL)
707 1.81 lukem fatal(
708 1.81 lukem "Local resource failure: realloc");
709 1.81 lukem groups = ng;
710 1.81 lukem } while (getgrouplist(pw->pw_name, pw->pw_gid,
711 1.81 lukem groups, &gsize) == -1);
712 1.81 lukem found = 0;
713 1.81 lukem for (i = 0; i < gsize; i++) {
714 1.81 lukem struct group *g;
715 1.81 lukem
716 1.81 lukem if ((g = getgrgid(groups[i])) == NULL)
717 1.81 lukem continue;
718 1.81 lukem if (fnmatch(p, g->gr_name, 0) == 0) {
719 1.81 lukem found = 1;
720 1.81 lukem break;
721 1.81 lukem }
722 1.81 lukem }
723 1.81 lukem free(groups);
724 1.81 lukem if (!found)
725 1.81 lukem continue;
726 1.81 lukem }
727 1.81 lukem
728 1.73 lukem /* check against username glob */
729 1.73 lukem if (fnmatch(glob, name, 0) != 0)
730 1.73 lukem continue;
731 1.73 lukem
732 1.73 lukem if (perm != NULL &&
733 1.73 lukem ((strcasecmp(perm, "allow") == 0) ||
734 1.73 lukem (strcasecmp(perm, "yes") == 0)))
735 1.73 lukem retval = 1;
736 1.73 lukem else if (perm != NULL &&
737 1.73 lukem ((strcasecmp(perm, "deny") == 0) ||
738 1.73 lukem (strcasecmp(perm, "no") == 0)))
739 1.73 lukem retval = 0;
740 1.73 lukem else
741 1.73 lukem retval = !def;
742 1.73 lukem if (!EMPTYSTR(class) && retclass != NULL)
743 1.73 lukem *retclass = xstrdup(class);
744 1.73 lukem free(buf);
745 1.73 lukem break;
746 1.19 cjs }
747 1.19 cjs (void) fclose(fd);
748 1.21 cjs return (retval);
749 1.19 cjs }
750 1.58 lukem
751 1.58 lukem /*
752 1.58 lukem * Check if user is allowed by /etc/ftpusers
753 1.73 lukem * returns 1 for yes, 0 for no
754 1.81 lukem *
755 1.81 lukem * NOTE: needs struct passwd *pw setup (for checkuser())
756 1.58 lukem */
757 1.58 lukem int
758 1.88 lukem checkaccess(const char *name)
759 1.58 lukem {
760 1.58 lukem
761 1.73 lukem return (checkuser(_PATH_FTPUSERS, name, 1, 0, NULL));
762 1.58 lukem }
763 1.19 cjs
764 1.19 cjs /*
765 1.1 cgd * Terminate login as previous user, if any, resetting state;
766 1.1 cgd * used when USER command is given or login fails.
767 1.1 cgd */
768 1.8 deraadt static void
769 1.88 lukem end_login(void)
770 1.1 cgd {
771 1.1 cgd
772 1.78 lukem if (logged_in) {
773 1.102 lukem if (dowtmp)
774 1.102 lukem logwtmp(ttyline, "", "");
775 1.78 lukem if (doutmp)
776 1.78 lukem logout(utmp.ut_line);
777 1.78 lukem }
778 1.101 lukem /* reset login state */
779 1.101 lukem (void) seteuid((uid_t)0);
780 1.1 cgd pw = NULL;
781 1.1 cgd logged_in = 0;
782 1.85 lukem quietmessages = 0;
783 1.95 lukem gidcount = 0;
784 1.73 lukem curclass.type = CLASS_REAL;
785 1.1 cgd }
786 1.1 cgd
787 1.8 deraadt void
788 1.88 lukem pass(const char *passwd)
789 1.1 cgd {
790 1.78 lukem int rval;
791 1.100 lukem const char *cp, *shell;
792 1.100 lukem char *class, root[MAXPATHLEN];
793 1.1 cgd
794 1.73 lukem class = NULL;
795 1.1 cgd if (logged_in || askpasswd == 0) {
796 1.1 cgd reply(503, "Login with USER first.");
797 1.1 cgd return;
798 1.1 cgd }
799 1.1 cgd askpasswd = 0;
800 1.73 lukem if (curclass.type != CLASS_GUEST) {
801 1.101 lukem /* "ftp" is the only account allowed with no password */
802 1.8 deraadt if (pw == NULL) {
803 1.8 deraadt rval = 1; /* failure below */
804 1.8 deraadt goto skip;
805 1.8 deraadt }
806 1.92 explorer #if defined(KERBEROS)
807 1.64 thorpej if (klogin(pw, "", hostname, (char *)passwd) == 0) {
808 1.92 explorer rval = 0;
809 1.92 explorer goto skip;
810 1.92 explorer }
811 1.92 explorer #endif
812 1.92 explorer #if defined(KERBEROS5)
813 1.92 explorer if (k5login(pw, "", hostname, (char *)passwd) == 0) {
814 1.37 mycroft rval = 0;
815 1.37 mycroft goto skip;
816 1.37 mycroft }
817 1.37 mycroft #endif
818 1.36 mycroft #ifdef SKEY
819 1.62 lukem if (skey_haskey(pw->pw_name) == 0) {
820 1.62 lukem char *p;
821 1.62 lukem int r;
822 1.62 lukem
823 1.62 lukem p = xstrdup(passwd);
824 1.62 lukem r = skey_passcheck(pw->pw_name, p);
825 1.62 lukem free(p);
826 1.62 lukem if (r != -1) {
827 1.62 lukem rval = 0;
828 1.62 lukem goto skip;
829 1.62 lukem }
830 1.36 mycroft }
831 1.4 cgd #endif
832 1.51 msaitoh if (!sflag && *pw->pw_passwd != '\0' &&
833 1.37 mycroft !strcmp(crypt(passwd, pw->pw_passwd), pw->pw_passwd)) {
834 1.8 deraadt rval = 0;
835 1.8 deraadt goto skip;
836 1.8 deraadt }
837 1.37 mycroft rval = 1;
838 1.4 cgd
839 1.89 lukem skip:
840 1.46 cjs if (pw != NULL && pw->pw_expire && time(NULL) >= pw->pw_expire)
841 1.45 christos rval = 2;
842 1.101 lukem
843 1.101 lukem /*
844 1.101 lukem * If rval > 0, the user failed the authentication check
845 1.101 lukem * above. If rval == 0, either Kerberos or local
846 1.101 lukem * authentication succeeded.
847 1.101 lukem */
848 1.4 cgd if (rval) {
849 1.98 sommerfe reply(530, "%s", rval == 2 ? "Password expired." :
850 1.45 christos "Login incorrect.");
851 1.23 lukem if (logging) {
852 1.8 deraadt syslog(LOG_NOTICE,
853 1.23 lukem "FTP LOGIN FAILED FROM %s", remotehost);
854 1.23 lukem syslog(LOG_AUTHPRIV | LOG_NOTICE,
855 1.8 deraadt "FTP LOGIN FAILED FROM %s, %s",
856 1.8 deraadt remotehost, curname);
857 1.23 lukem }
858 1.1 cgd pw = NULL;
859 1.1 cgd if (login_attempts++ >= 5) {
860 1.1 cgd syslog(LOG_NOTICE,
861 1.1 cgd "repeated login failures from %s",
862 1.1 cgd remotehost);
863 1.1 cgd exit(0);
864 1.1 cgd }
865 1.1 cgd return;
866 1.1 cgd }
867 1.1 cgd }
868 1.19 cjs
869 1.101 lukem /* password ok; see if anything else prevents login */
870 1.73 lukem if (! checkuser(_PATH_FTPUSERS, pw->pw_name, 1, 0, &class)) {
871 1.19 cjs reply(530, "User %s may not use FTP.", pw->pw_name);
872 1.19 cjs if (logging)
873 1.19 cjs syslog(LOG_NOTICE, "FTP LOGIN REFUSED FROM %s, %s",
874 1.19 cjs remotehost, pw->pw_name);
875 1.82 lukem goto bad;
876 1.19 cjs }
877 1.101 lukem /* if not guest user, check for valid shell */
878 1.19 cjs if ((shell = pw->pw_shell) == NULL || *shell == 0)
879 1.19 cjs shell = _PATH_BSHELL;
880 1.19 cjs while ((cp = getusershell()) != NULL)
881 1.19 cjs if (strcmp(cp, shell) == 0)
882 1.19 cjs break;
883 1.19 cjs endusershell();
884 1.73 lukem if (cp == NULL && curclass.type != CLASS_GUEST) {
885 1.19 cjs reply(530, "User %s may not use FTP.", pw->pw_name);
886 1.19 cjs if (logging)
887 1.62 lukem syslog(LOG_NOTICE, "FTP LOGIN REFUSED FROM %s, %s",
888 1.19 cjs remotehost, pw->pw_name);
889 1.82 lukem goto bad;
890 1.19 cjs }
891 1.19 cjs
892 1.1 cgd login_attempts = 0; /* this time successful */
893 1.8 deraadt if (setegid((gid_t)pw->pw_gid) < 0) {
894 1.8 deraadt reply(550, "Can't set gid.");
895 1.82 lukem goto bad;
896 1.8 deraadt }
897 1.1 cgd (void) initgroups(pw->pw_name, pw->pw_gid);
898 1.101 lukem /* cache groups for cmds.c::matchgroup() */
899 1.95 lukem gidcount = getgroups(sizeof(gidlist), gidlist);
900 1.1 cgd
901 1.101 lukem /* open wtmp before chroot */
902 1.102 lukem if (dowtmp)
903 1.102 lukem logwtmp(ttyline, pw->pw_name, remotehost);
904 1.78 lukem
905 1.101 lukem /* open utmp before chroot */
906 1.78 lukem if (doutmp) {
907 1.78 lukem memset((void *)&utmp, 0, sizeof(utmp));
908 1.78 lukem (void)time(&utmp.ut_time);
909 1.78 lukem (void)strncpy(utmp.ut_name, pw->pw_name, sizeof(utmp.ut_name));
910 1.78 lukem (void)strncpy(utmp.ut_host, remotehost, sizeof(utmp.ut_host));
911 1.78 lukem (void)strncpy(utmp.ut_line, ttyline, sizeof(utmp.ut_line));
912 1.78 lukem login(&utmp);
913 1.78 lukem }
914 1.78 lukem
915 1.1 cgd logged_in = 1;
916 1.1 cgd
917 1.73 lukem /* check user in /etc/ftpchroot */
918 1.73 lukem if (checkuser(_PATH_FTPCHROOT, pw->pw_name, 0, 0, NULL)) {
919 1.73 lukem if (curclass.type == CLASS_GUEST) {
920 1.73 lukem syslog(LOG_NOTICE,
921 1.73 lukem "Can't change guest user to chroot class; remove entry in %s",
922 1.73 lukem _PATH_FTPCHROOT);
923 1.73 lukem exit(1);
924 1.73 lukem }
925 1.73 lukem curclass.type = CLASS_CHROOT;
926 1.73 lukem }
927 1.73 lukem if (class == NULL) {
928 1.73 lukem switch (curclass.type) {
929 1.73 lukem case CLASS_GUEST:
930 1.73 lukem class = xstrdup("guest");
931 1.73 lukem break;
932 1.73 lukem case CLASS_CHROOT:
933 1.73 lukem class = xstrdup("chroot");
934 1.73 lukem break;
935 1.73 lukem case CLASS_REAL:
936 1.73 lukem class = xstrdup("real");
937 1.73 lukem break;
938 1.73 lukem default:
939 1.73 lukem abort();
940 1.73 lukem }
941 1.73 lukem }
942 1.24 lukem
943 1.101 lukem /* parse ftpd.conf, setting up various parameters */
944 1.73 lukem parse_conf(class);
945 1.82 lukem count_users();
946 1.82 lukem if (curclass.limit != -1 && connections > curclass.limit) {
947 1.82 lukem if (! EMPTYSTR(curclass.limitfile))
948 1.100 lukem (void)display_file(conffilename(curclass.limitfile),
949 1.100 lukem 530);
950 1.82 lukem reply(530,
951 1.83 lukem "User %s access denied, connection limit of %d reached.",
952 1.82 lukem pw->pw_name, curclass.limit);
953 1.82 lukem syslog(LOG_NOTICE,
954 1.100 lukem "Maximum connection limit of %d for class %s reached, login refused for %s",
955 1.100 lukem curclass.limit, curclass.classname, pw->pw_name);
956 1.82 lukem goto bad;
957 1.82 lukem }
958 1.24 lukem
959 1.100 lukem homedir[0] = '/';
960 1.73 lukem switch (curclass.type) {
961 1.73 lukem case CLASS_GUEST:
962 1.101 lukem /*
963 1.101 lukem * We MUST do a chdir() after the chroot. Otherwise
964 1.101 lukem * the old current directory will be accessible as "."
965 1.101 lukem * outside the new root!
966 1.101 lukem */
967 1.100 lukem format_path(root,
968 1.100 lukem curclass.chroot ? curclass.chroot :
969 1.100 lukem anondir ? anondir :
970 1.100 lukem pw->pw_dir);
971 1.100 lukem format_path(homedir,
972 1.100 lukem curclass.homedir ? curclass.homedir :
973 1.100 lukem "/");
974 1.100 lukem if (EMPTYSTR(homedir))
975 1.100 lukem homedir[0] = '/';
976 1.100 lukem if (EMPTYSTR(root) || chroot(root) < 0) {
977 1.100 lukem syslog(LOG_NOTICE,
978 1.100 lukem "GUEST user %s: can't chroot to %s: %m",
979 1.100 lukem pw->pw_name, root);
980 1.100 lukem goto bad_guest;
981 1.100 lukem }
982 1.100 lukem if (chdir(homedir) < 0) {
983 1.100 lukem syslog(LOG_NOTICE,
984 1.100 lukem "GUEST user %s: can't chdir to %s: %m",
985 1.100 lukem pw->pw_name, homedir);
986 1.100 lukem bad_guest:
987 1.1 cgd reply(550, "Can't set guest privileges.");
988 1.5 cgd goto bad;
989 1.5 cgd }
990 1.73 lukem break;
991 1.73 lukem case CLASS_CHROOT:
992 1.100 lukem format_path(root,
993 1.100 lukem curclass.chroot ? curclass.chroot :
994 1.100 lukem pw->pw_dir);
995 1.100 lukem format_path(homedir,
996 1.100 lukem curclass.homedir ? curclass.homedir :
997 1.100 lukem "/");
998 1.100 lukem if (EMPTYSTR(homedir))
999 1.100 lukem homedir[0] = '/';
1000 1.100 lukem if (EMPTYSTR(root) || chroot(root) < 0) {
1001 1.100 lukem syslog(LOG_NOTICE,
1002 1.100 lukem "CHROOT user %s: can't chroot to %s: %m",
1003 1.100 lukem pw->pw_name, root);
1004 1.100 lukem goto bad_chroot;
1005 1.100 lukem }
1006 1.100 lukem if (chdir(homedir) < 0) {
1007 1.100 lukem syslog(LOG_NOTICE,
1008 1.100 lukem "CHROOT user %s: can't chdir to %s: %m",
1009 1.100 lukem pw->pw_name, homedir);
1010 1.100 lukem bad_chroot:
1011 1.5 cgd reply(550, "Can't change root.");
1012 1.1 cgd goto bad;
1013 1.1 cgd }
1014 1.73 lukem break;
1015 1.73 lukem case CLASS_REAL:
1016 1.100 lukem format_path(homedir,
1017 1.100 lukem curclass.homedir ? curclass.homedir :
1018 1.100 lukem pw->pw_dir);
1019 1.100 lukem if (EMPTYSTR(homedir) || chdir(homedir) < 0) {
1020 1.73 lukem if (chdir("/") < 0) {
1021 1.100 lukem syslog(LOG_NOTICE,
1022 1.100 lukem "REAL user %s: can't chdir to %s: %m",
1023 1.100 lukem pw->pw_name,
1024 1.100 lukem !EMPTYSTR(homedir) ? homedir : "/");
1025 1.73 lukem reply(530,
1026 1.73 lukem "User %s: can't change directory to %s.",
1027 1.100 lukem pw->pw_name,
1028 1.100 lukem !EMPTYSTR(homedir) ? homedir : "/");
1029 1.73 lukem goto bad;
1030 1.100 lukem } else {
1031 1.95 lukem reply(-230,
1032 1.73 lukem "No directory! Logging in with home=/");
1033 1.100 lukem homedir[0] = '/';
1034 1.100 lukem }
1035 1.100 lukem }
1036 1.73 lukem break;
1037 1.73 lukem }
1038 1.105 jdolecek setlogin(pw->pw_name);
1039 1.101 lukem if (dropprivs ||
1040 1.101 lukem (curclass.type != CLASS_REAL &&
1041 1.101 lukem ntohs(ctrl_addr.su_port) > IPPORT_RESERVED + 1)) {
1042 1.101 lukem dropprivs++;
1043 1.101 lukem if (setgid((gid_t)pw->pw_gid) < 0) {
1044 1.101 lukem reply(550, "Can't set gid.");
1045 1.101 lukem goto bad;
1046 1.101 lukem }
1047 1.101 lukem if (setuid((uid_t)pw->pw_uid) < 0) {
1048 1.101 lukem reply(550, "Can't set uid.");
1049 1.101 lukem goto bad;
1050 1.101 lukem }
1051 1.101 lukem } else {
1052 1.101 lukem if (seteuid((uid_t)pw->pw_uid) < 0) {
1053 1.101 lukem reply(550, "Can't set uid.");
1054 1.101 lukem goto bad;
1055 1.101 lukem }
1056 1.1 cgd }
1057 1.100 lukem setenv("HOME", homedir, 1);
1058 1.44 lukem
1059 1.85 lukem if (curclass.type == CLASS_GUEST && passwd[0] == '-')
1060 1.85 lukem quietmessages = 1;
1061 1.85 lukem
1062 1.101 lukem /*
1063 1.101 lukem * Display a login message, if it exists.
1064 1.101 lukem * N.B. reply(230,) must follow the message.
1065 1.101 lukem */
1066 1.100 lukem (void)display_file(conffilename(curclass.motd), 230);
1067 1.24 lukem show_chdir_messages(230);
1068 1.73 lukem if (curclass.type == CLASS_GUEST) {
1069 1.1 cgd reply(230, "Guest login ok, access restrictions apply.");
1070 1.6 cgd #ifdef HASSETPROCTITLE
1071 1.8 deraadt snprintf(proctitle, sizeof(proctitle),
1072 1.8 deraadt "%s: anonymous/%.*s", remotehost,
1073 1.25 christos (int) (sizeof(proctitle) - sizeof(remotehost) -
1074 1.25 christos sizeof(": anonymous/")), passwd);
1075 1.97 itojun setproctitle("%s", proctitle);
1076 1.6 cgd #endif /* HASSETPROCTITLE */
1077 1.1 cgd if (logging)
1078 1.81 lukem syslog(LOG_INFO,
1079 1.81 lukem "ANONYMOUS FTP LOGIN FROM %s, %s (class: %s, type: %s)",
1080 1.81 lukem remotehost, passwd,
1081 1.81 lukem curclass.classname, CURCLASSTYPE);
1082 1.1 cgd } else {
1083 1.1 cgd reply(230, "User %s logged in.", pw->pw_name);
1084 1.6 cgd #ifdef HASSETPROCTITLE
1085 1.8 deraadt snprintf(proctitle, sizeof(proctitle),
1086 1.8 deraadt "%s: %s", remotehost, pw->pw_name);
1087 1.97 itojun setproctitle("%s", proctitle);
1088 1.6 cgd #endif /* HASSETPROCTITLE */
1089 1.1 cgd if (logging)
1090 1.81 lukem syslog(LOG_INFO,
1091 1.81 lukem "FTP LOGIN FROM %s as %s (class: %s, type: %s)",
1092 1.81 lukem remotehost, pw->pw_name,
1093 1.81 lukem curclass.classname, CURCLASSTYPE);
1094 1.1 cgd }
1095 1.24 lukem (void) umask(curclass.umask);
1096 1.73 lukem goto cleanuppass;
1097 1.73 lukem bad:
1098 1.101 lukem /* Forget all about it... */
1099 1.1 cgd end_login();
1100 1.73 lukem cleanuppass:
1101 1.73 lukem if (class)
1102 1.73 lukem free(class);
1103 1.1 cgd }
1104 1.1 cgd
1105 1.8 deraadt void
1106 1.88 lukem retrieve(char *argv[], const char *name)
1107 1.1 cgd {
1108 1.95 lukem FILE *fin, *dout;
1109 1.1 cgd struct stat st;
1110 1.88 lukem int (*closefunc)(FILE *) = NULL;
1111 1.63 lukem int log, sendrv, closerv, stderrfd, isconversion, isdata, isls;
1112 1.62 lukem struct timeval start, finish, td, *tdp;
1113 1.62 lukem const char *dispname;
1114 1.1 cgd
1115 1.49 lukem sendrv = closerv = stderrfd = -1;
1116 1.63 lukem isconversion = isdata = isls = log = 0;
1117 1.62 lukem tdp = NULL;
1118 1.62 lukem dispname = name;
1119 1.95 lukem fin = dout = NULL;
1120 1.71 lukem if (argv == NULL) {
1121 1.62 lukem log = 1;
1122 1.62 lukem isdata = 1;
1123 1.62 lukem fin = fopen(name, "r");
1124 1.62 lukem closefunc = fclose;
1125 1.24 lukem if (fin == NULL)
1126 1.71 lukem argv = do_conversion(name);
1127 1.71 lukem if (argv != NULL) {
1128 1.49 lukem isconversion++;
1129 1.71 lukem syslog(LOG_INFO, "get command: '%s' on '%s'",
1130 1.71 lukem argv[0], name);
1131 1.49 lukem }
1132 1.24 lukem }
1133 1.71 lukem if (argv != NULL) {
1134 1.82 lukem char temp[MAXPATHLEN];
1135 1.1 cgd
1136 1.71 lukem if (strcmp(argv[0], INTERNAL_LS) == 0) {
1137 1.63 lukem isls = 1;
1138 1.63 lukem stderrfd = -1;
1139 1.63 lukem } else {
1140 1.63 lukem (void)snprintf(temp, sizeof(temp), "%s", TMPFILE);
1141 1.63 lukem stderrfd = mkstemp(temp);
1142 1.63 lukem if (stderrfd != -1)
1143 1.63 lukem (void)unlink(temp);
1144 1.63 lukem }
1145 1.71 lukem dispname = argv[0];
1146 1.71 lukem fin = ftpd_popen(argv, "r", stderrfd);
1147 1.62 lukem closefunc = ftpd_pclose;
1148 1.1 cgd st.st_size = -1;
1149 1.1 cgd st.st_blksize = BUFSIZ;
1150 1.1 cgd }
1151 1.1 cgd if (fin == NULL) {
1152 1.8 deraadt if (errno != 0) {
1153 1.62 lukem perror_reply(550, dispname);
1154 1.62 lukem if (log)
1155 1.62 lukem logcmd("get", -1, name, NULL, NULL,
1156 1.62 lukem strerror(errno));
1157 1.8 deraadt }
1158 1.71 lukem goto cleanupretrieve;
1159 1.1 cgd }
1160 1.8 deraadt byte_count = -1;
1161 1.71 lukem if (argv == NULL
1162 1.49 lukem && (fstat(fileno(fin), &st) < 0 || !S_ISREG(st.st_mode))) {
1163 1.62 lukem reply(550, "%s: not a plain file.", dispname);
1164 1.1 cgd goto done;
1165 1.1 cgd }
1166 1.1 cgd if (restart_point) {
1167 1.1 cgd if (type == TYPE_A) {
1168 1.49 lukem off_t i;
1169 1.8 deraadt int c;
1170 1.1 cgd
1171 1.49 lukem for (i = 0; i < restart_point; i++) {
1172 1.1 cgd if ((c=getc(fin)) == EOF) {
1173 1.62 lukem perror_reply(550, dispname);
1174 1.1 cgd goto done;
1175 1.1 cgd }
1176 1.1 cgd if (c == '\n')
1177 1.1 cgd i++;
1178 1.8 deraadt }
1179 1.31 kleink } else if (lseek(fileno(fin), restart_point, SEEK_SET) < 0) {
1180 1.62 lukem perror_reply(550, dispname);
1181 1.1 cgd goto done;
1182 1.1 cgd }
1183 1.1 cgd }
1184 1.62 lukem dout = dataconn(dispname, st.st_size, "w");
1185 1.1 cgd if (dout == NULL)
1186 1.1 cgd goto done;
1187 1.62 lukem
1188 1.62 lukem (void)gettimeofday(&start, NULL);
1189 1.62 lukem sendrv = send_data(fin, dout, st.st_blksize, isdata);
1190 1.62 lukem (void)gettimeofday(&finish, NULL);
1191 1.95 lukem (void) fclose(dout); /* close now to affect timing stats */
1192 1.95 lukem dout = NULL;
1193 1.62 lukem timersub(&finish, &start, &td);
1194 1.62 lukem tdp = &td;
1195 1.89 lukem done:
1196 1.24 lukem if (log)
1197 1.62 lukem logcmd("get", byte_count, name, NULL, tdp, NULL);
1198 1.49 lukem closerv = (*closefunc)(fin);
1199 1.49 lukem if (sendrv == 0) {
1200 1.49 lukem FILE *err;
1201 1.49 lukem struct stat sb;
1202 1.49 lukem
1203 1.71 lukem if (!isls && argv != NULL && closerv != 0) {
1204 1.95 lukem reply(-226,
1205 1.49 lukem "Command returned an exit status of %d",
1206 1.49 lukem closerv);
1207 1.49 lukem if (isconversion)
1208 1.49 lukem syslog(LOG_INFO,
1209 1.71 lukem "retrieve command: '%s' returned %d",
1210 1.71 lukem argv[0], closerv);
1211 1.49 lukem }
1212 1.71 lukem if (!isls && argv != NULL && stderrfd != -1 &&
1213 1.49 lukem (fstat(stderrfd, &sb) == 0) && sb.st_size > 0 &&
1214 1.49 lukem ((err = fdopen(stderrfd, "r")) != NULL)) {
1215 1.49 lukem char *cp, line[LINE_MAX];
1216 1.49 lukem
1217 1.95 lukem reply(-226, "Command error messages:");
1218 1.49 lukem rewind(err);
1219 1.49 lukem while (fgets(line, sizeof(line), err) != NULL) {
1220 1.49 lukem if ((cp = strchr(line, '\n')) != NULL)
1221 1.49 lukem *cp = '\0';
1222 1.95 lukem reply(0, " %s", line);
1223 1.49 lukem }
1224 1.49 lukem (void) fflush(stdout);
1225 1.49 lukem (void) fclose(err);
1226 1.49 lukem /* a reply(226,) must follow */
1227 1.49 lukem }
1228 1.49 lukem reply(226, "Transfer complete.");
1229 1.49 lukem }
1230 1.71 lukem cleanupretrieve:
1231 1.95 lukem closedataconn(dout);
1232 1.49 lukem if (stderrfd != -1)
1233 1.49 lukem (void)close(stderrfd);
1234 1.71 lukem if (isconversion)
1235 1.71 lukem free(argv);
1236 1.1 cgd }
1237 1.1 cgd
1238 1.8 deraadt void
1239 1.88 lukem store(const char *name, const char *mode, int unique)
1240 1.1 cgd {
1241 1.1 cgd FILE *fout, *din;
1242 1.1 cgd struct stat st;
1243 1.88 lukem int (*closefunc)(FILE *);
1244 1.62 lukem struct timeval start, finish, td, *tdp;
1245 1.62 lukem char *desc;
1246 1.1 cgd
1247 1.95 lukem din = NULL;
1248 1.62 lukem desc = (*mode == 'w') ? "put" : "append";
1249 1.1 cgd if (unique && stat(name, &st) == 0 &&
1250 1.8 deraadt (name = gunique(name)) == NULL) {
1251 1.62 lukem logcmd(desc, -1, name, NULL, NULL, "cannot create unique file");
1252 1.89 lukem goto cleanupstore;
1253 1.8 deraadt }
1254 1.1 cgd
1255 1.1 cgd if (restart_point)
1256 1.8 deraadt mode = "r+";
1257 1.1 cgd fout = fopen(name, mode);
1258 1.1 cgd closefunc = fclose;
1259 1.62 lukem tdp = NULL;
1260 1.1 cgd if (fout == NULL) {
1261 1.1 cgd perror_reply(553, name);
1262 1.62 lukem logcmd(desc, -1, name, NULL, NULL, strerror(errno));
1263 1.89 lukem goto cleanupstore;
1264 1.1 cgd }
1265 1.8 deraadt byte_count = -1;
1266 1.1 cgd if (restart_point) {
1267 1.1 cgd if (type == TYPE_A) {
1268 1.49 lukem off_t i;
1269 1.8 deraadt int c;
1270 1.1 cgd
1271 1.49 lukem for (i = 0; i < restart_point; i++) {
1272 1.1 cgd if ((c=getc(fout)) == EOF) {
1273 1.1 cgd perror_reply(550, name);
1274 1.1 cgd goto done;
1275 1.1 cgd }
1276 1.1 cgd if (c == '\n')
1277 1.1 cgd i++;
1278 1.8 deraadt }
1279 1.1 cgd /*
1280 1.1 cgd * We must do this seek to "current" position
1281 1.1 cgd * because we are changing from reading to
1282 1.1 cgd * writing.
1283 1.1 cgd */
1284 1.20 lukem if (fseek(fout, 0L, SEEK_CUR) < 0) {
1285 1.1 cgd perror_reply(550, name);
1286 1.1 cgd goto done;
1287 1.1 cgd }
1288 1.31 kleink } else if (lseek(fileno(fout), restart_point, SEEK_SET) < 0) {
1289 1.1 cgd perror_reply(550, name);
1290 1.1 cgd goto done;
1291 1.1 cgd }
1292 1.1 cgd }
1293 1.1 cgd din = dataconn(name, (off_t)-1, "r");
1294 1.1 cgd if (din == NULL)
1295 1.1 cgd goto done;
1296 1.62 lukem (void)gettimeofday(&start, NULL);
1297 1.1 cgd if (receive_data(din, fout) == 0) {
1298 1.1 cgd if (unique)
1299 1.1 cgd reply(226, "Transfer complete (unique file name:%s).",
1300 1.1 cgd name);
1301 1.1 cgd else
1302 1.1 cgd reply(226, "Transfer complete.");
1303 1.1 cgd }
1304 1.62 lukem (void)gettimeofday(&finish, NULL);
1305 1.95 lukem (void) fclose(din); /* close now to affect timing stats */
1306 1.95 lukem din = NULL;
1307 1.62 lukem timersub(&finish, &start, &td);
1308 1.62 lukem tdp = &td;
1309 1.89 lukem done:
1310 1.62 lukem logcmd(desc, byte_count, name, NULL, tdp, NULL);
1311 1.1 cgd (*closefunc)(fout);
1312 1.89 lukem cleanupstore:
1313 1.95 lukem closedataconn(din);
1314 1.1 cgd }
1315 1.1 cgd
1316 1.8 deraadt static FILE *
1317 1.88 lukem getdatasock(const char *mode)
1318 1.1 cgd {
1319 1.101 lukem int on, s, t, tries;
1320 1.101 lukem in_port_t port;
1321 1.1 cgd
1322 1.101 lukem on = 1;
1323 1.1 cgd if (data >= 0)
1324 1.1 cgd return (fdopen(data, mode));
1325 1.101 lukem if (! dropprivs)
1326 1.101 lukem (void) seteuid((uid_t)0);
1327 1.67 itojun s = socket(ctrl_addr.su_family, SOCK_STREAM, 0);
1328 1.1 cgd if (s < 0)
1329 1.1 cgd goto bad;
1330 1.1 cgd if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
1331 1.8 deraadt (char *) &on, sizeof(on)) < 0)
1332 1.1 cgd goto bad;
1333 1.66 briggs if (setsockopt(s, SOL_SOCKET, SO_KEEPALIVE,
1334 1.66 briggs (char *) &on, sizeof(on)) < 0)
1335 1.66 briggs goto bad;
1336 1.101 lukem /* anchor socket to avoid multi-homing problems */
1337 1.67 itojun data_source = ctrl_addr;
1338 1.101 lukem /*
1339 1.101 lukem * By default source port for PORT connctions is
1340 1.101 lukem * ctrlport-1 (see RFC959 section 5.2).
1341 1.101 lukem * However, if privs have been dropped and that
1342 1.101 lukem * would be < IPPORT_RESERVED, use a random port
1343 1.101 lukem * instead.
1344 1.101 lukem */
1345 1.101 lukem port = ntohs(ctrl_addr.su_port) - 1;
1346 1.101 lukem if (dropprivs && port < IPPORT_RESERVED)
1347 1.101 lukem port = 0; /* use random port */
1348 1.101 lukem data_source.su_port = htons(port);
1349 1.101 lukem
1350 1.1 cgd for (tries = 1; ; tries++) {
1351 1.109 lukem if (bind(s, (struct sockaddr *)&data_source.si_su,
1352 1.67 itojun data_source.su_len) >= 0)
1353 1.1 cgd break;
1354 1.1 cgd if (errno != EADDRINUSE || tries > 10)
1355 1.1 cgd goto bad;
1356 1.1 cgd sleep(tries);
1357 1.1 cgd }
1358 1.101 lukem if (! dropprivs)
1359 1.101 lukem (void) seteuid((uid_t)pw->pw_uid);
1360 1.1 cgd #ifdef IP_TOS
1361 1.75 itojun if (!mapped && ctrl_addr.su_family == AF_INET) {
1362 1.67 itojun on = IPTOS_THROUGHPUT;
1363 1.67 itojun if (setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&on,
1364 1.67 itojun sizeof(int)) < 0)
1365 1.67 itojun syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
1366 1.67 itojun }
1367 1.1 cgd #endif
1368 1.1 cgd return (fdopen(s, mode));
1369 1.89 lukem bad:
1370 1.101 lukem /* Return the real value of errno (close may change it) */
1371 1.8 deraadt t = errno;
1372 1.101 lukem if (! dropprivs)
1373 1.101 lukem (void) seteuid((uid_t)pw->pw_uid);
1374 1.1 cgd (void) close(s);
1375 1.8 deraadt errno = t;
1376 1.1 cgd return (NULL);
1377 1.1 cgd }
1378 1.1 cgd
1379 1.93 lukem FILE *
1380 1.88 lukem dataconn(const char *name, off_t size, const char *mode)
1381 1.1 cgd {
1382 1.1 cgd char sizebuf[32];
1383 1.1 cgd FILE *file;
1384 1.66 briggs int retry = 0, tos, keepalive;
1385 1.1 cgd
1386 1.1 cgd file_size = size;
1387 1.1 cgd byte_count = 0;
1388 1.1 cgd if (size != (off_t) -1)
1389 1.109 lukem (void)snprintf(sizebuf, sizeof(sizebuf), " (" LLF " byte%s)",
1390 1.109 lukem (LLT)size, PLURAL(size));
1391 1.1 cgd else
1392 1.29 mrg sizebuf[0] = '\0';
1393 1.1 cgd if (pdata >= 0) {
1394 1.109 lukem struct sockinet from;
1395 1.109 lukem int s, fromlen = sizeof(from.su_len);
1396 1.1 cgd
1397 1.42 lukem (void) alarm(curclass.timeout);
1398 1.109 lukem s = accept(pdata, (struct sockaddr *)&from.si_su, &fromlen);
1399 1.42 lukem (void) alarm(0);
1400 1.1 cgd if (s < 0) {
1401 1.1 cgd reply(425, "Can't open data connection.");
1402 1.1 cgd (void) close(pdata);
1403 1.1 cgd pdata = -1;
1404 1.8 deraadt return (NULL);
1405 1.1 cgd }
1406 1.1 cgd (void) close(pdata);
1407 1.1 cgd pdata = s;
1408 1.67 itojun switch (from.su_family) {
1409 1.67 itojun case AF_INET:
1410 1.1 cgd #ifdef IP_TOS
1411 1.75 itojun if (!mapped) {
1412 1.75 itojun tos = IPTOS_THROUGHPUT;
1413 1.75 itojun (void) setsockopt(s, IPPROTO_IP, IP_TOS,
1414 1.75 itojun (char *)&tos, sizeof(int));
1415 1.75 itojun }
1416 1.67 itojun break;
1417 1.66 briggs #endif
1418 1.67 itojun }
1419 1.66 briggs /* Set keepalives on the socket to detect dropped conns. */
1420 1.66 briggs #ifdef SO_KEEPALIVE
1421 1.66 briggs keepalive = 1;
1422 1.66 briggs (void) setsockopt(s, SOL_SOCKET, SO_KEEPALIVE,
1423 1.66 briggs (char *)&keepalive, sizeof(int));
1424 1.1 cgd #endif
1425 1.8 deraadt reply(150, "Opening %s mode data connection for '%s'%s.",
1426 1.1 cgd type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
1427 1.8 deraadt return (fdopen(pdata, mode));
1428 1.1 cgd }
1429 1.1 cgd if (data >= 0) {
1430 1.8 deraadt reply(125, "Using existing data connection for '%s'%s.",
1431 1.1 cgd name, sizebuf);
1432 1.1 cgd usedefault = 1;
1433 1.1 cgd return (fdopen(data, mode));
1434 1.1 cgd }
1435 1.1 cgd if (usedefault)
1436 1.1 cgd data_dest = his_addr;
1437 1.1 cgd usedefault = 1;
1438 1.1 cgd file = getdatasock(mode);
1439 1.1 cgd if (file == NULL) {
1440 1.67 itojun char hbuf[INET6_ADDRSTRLEN];
1441 1.67 itojun char pbuf[10];
1442 1.109 lukem
1443 1.109 lukem getnameinfo((struct sockaddr *)&data_source.si_su,
1444 1.109 lukem data_source.su_len, hbuf, sizeof(hbuf), pbuf, sizeof(pbuf),
1445 1.109 lukem NI_NUMERICHOST | NI_NUMERICSERV);
1446 1.67 itojun reply(425, "Can't create data socket (%s,%s): %s.",
1447 1.67 itojun hbuf, pbuf, strerror(errno));
1448 1.1 cgd return (NULL);
1449 1.1 cgd }
1450 1.1 cgd data = fileno(file);
1451 1.109 lukem while (connect(data, (struct sockaddr *)&data_dest.si_su,
1452 1.67 itojun data_dest.su_len) < 0) {
1453 1.1 cgd if (errno == EADDRINUSE && retry < swaitmax) {
1454 1.1 cgd sleep((unsigned) swaitint);
1455 1.1 cgd retry += swaitint;
1456 1.1 cgd continue;
1457 1.1 cgd }
1458 1.1 cgd perror_reply(425, "Can't build data connection");
1459 1.1 cgd (void) fclose(file);
1460 1.1 cgd data = -1;
1461 1.1 cgd return (NULL);
1462 1.1 cgd }
1463 1.8 deraadt reply(150, "Opening %s mode data connection for '%s'%s.",
1464 1.1 cgd type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
1465 1.1 cgd return (file);
1466 1.1 cgd }
1467 1.1 cgd
1468 1.95 lukem void
1469 1.95 lukem closedataconn(FILE *fd)
1470 1.95 lukem {
1471 1.95 lukem
1472 1.95 lukem if (fd != NULL)
1473 1.95 lukem (void)fclose(fd);
1474 1.95 lukem data = -1;
1475 1.95 lukem if (pdata >= 0)
1476 1.95 lukem (void)close(pdata);
1477 1.95 lukem pdata = -1;
1478 1.95 lukem }
1479 1.95 lukem
1480 1.1 cgd /*
1481 1.8 deraadt * Tranfer the contents of "instr" to "outstr" peer using the appropriate
1482 1.8 deraadt * encapsulation of the data subject * to Mode, Structure, and Type.
1483 1.1 cgd *
1484 1.1 cgd * NB: Form isn't handled.
1485 1.1 cgd */
1486 1.49 lukem static int
1487 1.88 lukem send_data(FILE *instr, FILE *outstr, off_t blksize, int isdata)
1488 1.1 cgd {
1489 1.73 lukem int c, filefd, netfd, rval;
1490 1.24 lukem char *buf;
1491 1.1 cgd
1492 1.62 lukem transflag = 1;
1493 1.62 lukem rval = -1;
1494 1.62 lukem buf = NULL;
1495 1.62 lukem if (setjmp(urgcatch))
1496 1.62 lukem goto cleanup_send_data;
1497 1.24 lukem
1498 1.1 cgd switch (type) {
1499 1.1 cgd
1500 1.1 cgd case TYPE_A:
1501 1.109 lukem /* XXXLUKEM: rate limit ascii send (get) */
1502 1.62 lukem (void) alarm(curclass.timeout);
1503 1.1 cgd while ((c = getc(instr)) != EOF) {
1504 1.1 cgd byte_count++;
1505 1.63 lukem if (c == '\n') {
1506 1.63 lukem if (ferror(outstr))
1507 1.63 lukem goto data_err;
1508 1.63 lukem (void) putc('\r', outstr);
1509 1.63 lukem if (isdata) {
1510 1.63 lukem total_data_out++;
1511 1.63 lukem total_data++;
1512 1.63 lukem }
1513 1.63 lukem total_bytes_out++;
1514 1.63 lukem total_bytes++;
1515 1.63 lukem }
1516 1.63 lukem (void) putc(c, outstr);
1517 1.62 lukem if (isdata) {
1518 1.62 lukem total_data_out++;
1519 1.62 lukem total_data++;
1520 1.62 lukem }
1521 1.62 lukem total_bytes_out++;
1522 1.62 lukem total_bytes++;
1523 1.62 lukem if ((byte_count % 4096) == 0)
1524 1.62 lukem (void) alarm(curclass.timeout);
1525 1.1 cgd }
1526 1.62 lukem (void) alarm(0);
1527 1.1 cgd fflush(outstr);
1528 1.1 cgd if (ferror(instr))
1529 1.1 cgd goto file_err;
1530 1.1 cgd if (ferror(outstr))
1531 1.1 cgd goto data_err;
1532 1.62 lukem rval = 0;
1533 1.62 lukem goto cleanup_send_data;
1534 1.1 cgd
1535 1.1 cgd case TYPE_I:
1536 1.1 cgd case TYPE_L:
1537 1.62 lukem if ((buf = malloc((size_t)blksize)) == NULL) {
1538 1.1 cgd perror_reply(451, "Local resource failure: malloc");
1539 1.62 lukem goto cleanup_send_data;
1540 1.1 cgd }
1541 1.63 lukem filefd = fileno(instr);
1542 1.1 cgd netfd = fileno(outstr);
1543 1.62 lukem (void) alarm(curclass.timeout);
1544 1.73 lukem if (curclass.rateget) {
1545 1.73 lukem while (1) {
1546 1.73 lukem int d;
1547 1.73 lukem struct timeval then, now, td;
1548 1.73 lukem off_t bufrem;
1549 1.73 lukem char *bufp;
1550 1.73 lukem
1551 1.73 lukem (void)gettimeofday(&then, NULL);
1552 1.73 lukem errno = c = d = 0;
1553 1.73 lukem bufrem = curclass.rateget;
1554 1.73 lukem while (bufrem > 0) {
1555 1.73 lukem if ((c = read(filefd, buf,
1556 1.73 lukem MIN(blksize, bufrem))) <= 0)
1557 1.73 lukem goto senddone;
1558 1.73 lukem (void) alarm(curclass.timeout);
1559 1.73 lukem bufrem -= c;
1560 1.73 lukem byte_count += c;
1561 1.73 lukem if (isdata) {
1562 1.73 lukem total_data_out += c;
1563 1.73 lukem total_data += c;
1564 1.73 lukem }
1565 1.73 lukem total_bytes_out += c;
1566 1.73 lukem total_bytes += c;
1567 1.73 lukem for (bufp = buf; c > 0;
1568 1.73 lukem c -= d, bufp += d)
1569 1.73 lukem if ((d =
1570 1.73 lukem write(netfd, bufp, c)) <= 0)
1571 1.73 lukem break;
1572 1.73 lukem if (d < 0)
1573 1.73 lukem goto data_err;
1574 1.73 lukem }
1575 1.73 lukem (void)gettimeofday(&now, NULL);
1576 1.73 lukem timersub(&now, &then, &td);
1577 1.96 lukem if (td.tv_sec == 0)
1578 1.96 lukem usleep(1000000 - td.tv_usec);
1579 1.73 lukem }
1580 1.73 lukem } else {
1581 1.73 lukem while ((c = read(filefd, buf, (size_t)blksize)) > 0) {
1582 1.73 lukem if (write(netfd, buf, c) != c)
1583 1.73 lukem goto data_err;
1584 1.73 lukem (void) alarm(curclass.timeout);
1585 1.73 lukem byte_count += c;
1586 1.73 lukem if (isdata) {
1587 1.73 lukem total_data_out += c;
1588 1.73 lukem total_data += c;
1589 1.73 lukem }
1590 1.73 lukem total_bytes_out += c;
1591 1.73 lukem total_bytes += c;
1592 1.62 lukem }
1593 1.1 cgd }
1594 1.73 lukem senddone:
1595 1.73 lukem if (c < 0)
1596 1.62 lukem goto file_err;
1597 1.62 lukem rval = 0;
1598 1.62 lukem goto cleanup_send_data;
1599 1.62 lukem
1600 1.1 cgd default:
1601 1.1 cgd reply(550, "Unimplemented TYPE %d in send_data", type);
1602 1.62 lukem goto cleanup_send_data;
1603 1.1 cgd }
1604 1.1 cgd
1605 1.89 lukem data_err:
1606 1.62 lukem (void) alarm(0);
1607 1.1 cgd perror_reply(426, "Data connection");
1608 1.62 lukem goto cleanup_send_data;
1609 1.1 cgd
1610 1.89 lukem file_err:
1611 1.62 lukem (void) alarm(0);
1612 1.62 lukem perror_reply(551, "Error on input file");
1613 1.62 lukem /* FALLTHROUGH */
1614 1.73 lukem
1615 1.89 lukem cleanup_send_data:
1616 1.62 lukem (void) alarm(0);
1617 1.1 cgd transflag = 0;
1618 1.62 lukem if (buf)
1619 1.62 lukem free(buf);
1620 1.62 lukem if (isdata) {
1621 1.62 lukem total_files_out++;
1622 1.62 lukem total_files++;
1623 1.62 lukem }
1624 1.62 lukem total_xfers_out++;
1625 1.62 lukem total_xfers++;
1626 1.62 lukem return (rval);
1627 1.1 cgd }
1628 1.1 cgd
1629 1.1 cgd /*
1630 1.8 deraadt * Transfer data from peer to "outstr" using the appropriate encapulation of
1631 1.8 deraadt * the data subject to Mode, Structure, and Type.
1632 1.1 cgd *
1633 1.1 cgd * N.B.: Form isn't handled.
1634 1.1 cgd */
1635 1.8 deraadt static int
1636 1.88 lukem receive_data(FILE *instr, FILE *outstr)
1637 1.1 cgd {
1638 1.73 lukem int c, bare_lfs, netfd, filefd, rval;
1639 1.24 lukem char buf[BUFSIZ];
1640 1.25 christos #ifdef __GNUC__
1641 1.25 christos (void) &bare_lfs;
1642 1.25 christos #endif
1643 1.1 cgd
1644 1.24 lukem bare_lfs = 0;
1645 1.62 lukem transflag = 1;
1646 1.62 lukem rval = -1;
1647 1.62 lukem if (setjmp(urgcatch))
1648 1.62 lukem goto cleanup_recv_data;
1649 1.24 lukem
1650 1.1 cgd switch (type) {
1651 1.1 cgd
1652 1.1 cgd case TYPE_I:
1653 1.1 cgd case TYPE_L:
1654 1.62 lukem netfd = fileno(instr);
1655 1.62 lukem filefd = fileno(outstr);
1656 1.62 lukem (void) alarm(curclass.timeout);
1657 1.73 lukem if (curclass.rateput) {
1658 1.73 lukem while (1) {
1659 1.73 lukem int d;
1660 1.73 lukem struct timeval then, now, td;
1661 1.73 lukem off_t bufrem;
1662 1.73 lukem
1663 1.73 lukem (void)gettimeofday(&then, NULL);
1664 1.73 lukem errno = c = d = 0;
1665 1.73 lukem for (bufrem = curclass.rateput; bufrem > 0; ) {
1666 1.73 lukem if ((c = read(netfd, buf,
1667 1.73 lukem MIN(sizeof(buf), bufrem))) <= 0)
1668 1.73 lukem goto recvdone;
1669 1.73 lukem if ((d = write(filefd, buf, c)) != c)
1670 1.73 lukem goto recvdone;
1671 1.73 lukem (void) alarm(curclass.timeout);
1672 1.73 lukem bufrem -= c;
1673 1.73 lukem byte_count += c;
1674 1.73 lukem total_data_in += c;
1675 1.73 lukem total_data += c;
1676 1.73 lukem total_bytes_in += c;
1677 1.73 lukem total_bytes += c;
1678 1.73 lukem }
1679 1.73 lukem (void)gettimeofday(&now, NULL);
1680 1.73 lukem timersub(&now, &then, &td);
1681 1.96 lukem if (td.tv_sec == 0)
1682 1.96 lukem usleep(1000000 - td.tv_usec);
1683 1.73 lukem }
1684 1.73 lukem } else {
1685 1.73 lukem while ((c = read(netfd, buf, sizeof(buf))) > 0) {
1686 1.73 lukem if (write(filefd, buf, c) != c)
1687 1.73 lukem goto file_err;
1688 1.73 lukem (void) alarm(curclass.timeout);
1689 1.73 lukem byte_count += c;
1690 1.73 lukem total_data_in += c;
1691 1.73 lukem total_data += c;
1692 1.73 lukem total_bytes_in += c;
1693 1.73 lukem total_bytes += c;
1694 1.73 lukem }
1695 1.1 cgd }
1696 1.73 lukem recvdone:
1697 1.73 lukem if (c < 0)
1698 1.1 cgd goto data_err;
1699 1.62 lukem rval = 0;
1700 1.62 lukem goto cleanup_recv_data;
1701 1.1 cgd
1702 1.1 cgd case TYPE_E:
1703 1.1 cgd reply(553, "TYPE E not implemented.");
1704 1.62 lukem goto cleanup_recv_data;
1705 1.1 cgd
1706 1.1 cgd case TYPE_A:
1707 1.62 lukem (void) alarm(curclass.timeout);
1708 1.109 lukem /* XXXLUKEM: rate limit ascii receive (put) */
1709 1.1 cgd while ((c = getc(instr)) != EOF) {
1710 1.1 cgd byte_count++;
1711 1.62 lukem total_data_in++;
1712 1.62 lukem total_data++;
1713 1.62 lukem total_bytes_in++;
1714 1.62 lukem total_bytes++;
1715 1.62 lukem if ((byte_count % 4096) == 0)
1716 1.62 lukem (void) alarm(curclass.timeout);
1717 1.1 cgd if (c == '\n')
1718 1.1 cgd bare_lfs++;
1719 1.1 cgd while (c == '\r') {
1720 1.1 cgd if (ferror(outstr))
1721 1.1 cgd goto data_err;
1722 1.1 cgd if ((c = getc(instr)) != '\n') {
1723 1.62 lukem byte_count++;
1724 1.62 lukem total_data_in++;
1725 1.62 lukem total_data++;
1726 1.62 lukem total_bytes_in++;
1727 1.62 lukem total_bytes++;
1728 1.62 lukem if ((byte_count % 4096) == 0)
1729 1.62 lukem (void) alarm(curclass.timeout);
1730 1.1 cgd (void) putc ('\r', outstr);
1731 1.1 cgd if (c == '\0' || c == EOF)
1732 1.1 cgd goto contin2;
1733 1.1 cgd }
1734 1.1 cgd }
1735 1.1 cgd (void) putc(c, outstr);
1736 1.1 cgd contin2: ;
1737 1.1 cgd }
1738 1.62 lukem (void) alarm(0);
1739 1.1 cgd fflush(outstr);
1740 1.1 cgd if (ferror(instr))
1741 1.1 cgd goto data_err;
1742 1.1 cgd if (ferror(outstr))
1743 1.1 cgd goto file_err;
1744 1.1 cgd if (bare_lfs) {
1745 1.95 lukem reply(-226,
1746 1.62 lukem "WARNING! %d bare linefeeds received in ASCII mode",
1747 1.8 deraadt bare_lfs);
1748 1.95 lukem reply(0, "File may not have transferred correctly.");
1749 1.1 cgd }
1750 1.62 lukem rval = 0;
1751 1.62 lukem goto cleanup_recv_data;
1752 1.62 lukem
1753 1.1 cgd default:
1754 1.1 cgd reply(550, "Unimplemented TYPE %d in receive_data", type);
1755 1.62 lukem goto cleanup_recv_data;
1756 1.1 cgd }
1757 1.1 cgd
1758 1.89 lukem data_err:
1759 1.62 lukem (void) alarm(0);
1760 1.1 cgd perror_reply(426, "Data Connection");
1761 1.62 lukem goto cleanup_recv_data;
1762 1.1 cgd
1763 1.89 lukem file_err:
1764 1.62 lukem (void) alarm(0);
1765 1.62 lukem perror_reply(452, "Error writing file");
1766 1.62 lukem goto cleanup_recv_data;
1767 1.62 lukem
1768 1.89 lukem cleanup_recv_data:
1769 1.62 lukem (void) alarm(0);
1770 1.1 cgd transflag = 0;
1771 1.62 lukem total_files_in++;
1772 1.62 lukem total_files++;
1773 1.62 lukem total_xfers_in++;
1774 1.62 lukem total_xfers++;
1775 1.62 lukem return (rval);
1776 1.1 cgd }
1777 1.1 cgd
1778 1.8 deraadt void
1779 1.88 lukem statcmd(void)
1780 1.1 cgd {
1781 1.109 lukem struct sockinet *su = NULL;
1782 1.67 itojun static char ntop_buf[INET6_ADDRSTRLEN];
1783 1.67 itojun u_char *a, *p;
1784 1.89 lukem int ispassive, af;
1785 1.93 lukem off_t otbi, otbo, otb;
1786 1.1 cgd
1787 1.67 itojun a = p = (u_char *)NULL;
1788 1.67 itojun
1789 1.95 lukem reply(-211, "%s FTP server status:", hostname);
1790 1.101 lukem reply(0, "Version: %s", EMPTYSTR(version) ? "<suppressed>" : version);
1791 1.67 itojun ntop_buf[0] = '\0';
1792 1.109 lukem if (!getnameinfo((struct sockaddr *)&his_addr.si_su, his_addr.su_len,
1793 1.109 lukem ntop_buf, sizeof(ntop_buf), NULL, 0, NI_NUMERICHOST)
1794 1.109 lukem && strcmp(remotehost, ntop_buf) != 0)
1795 1.95 lukem reply(0, "Connected to %s (%s)", remotehost, ntop_buf);
1796 1.104 christos else
1797 1.95 lukem reply(0, "Connected to %s", remotehost);
1798 1.104 christos
1799 1.1 cgd if (logged_in) {
1800 1.73 lukem if (curclass.type == CLASS_GUEST)
1801 1.95 lukem reply(0, "Logged in anonymously");
1802 1.1 cgd else
1803 1.95 lukem reply(0, "Logged in as %s%s", pw->pw_name,
1804 1.73 lukem curclass.type == CLASS_CHROOT ? " (chroot)" : "");
1805 1.1 cgd } else if (askpasswd)
1806 1.95 lukem reply(0, "Waiting for password");
1807 1.1 cgd else
1808 1.95 lukem reply(0, "Waiting for user name");
1809 1.95 lukem cprintf(stdout, " TYPE: %s", typenames[type]);
1810 1.93 lukem if (type == TYPE_A || type == TYPE_E)
1811 1.95 lukem cprintf(stdout, ", FORM: %s", formnames[form]);
1812 1.62 lukem if (type == TYPE_L) {
1813 1.1 cgd #if NBBY == 8
1814 1.95 lukem cprintf(stdout, " %d", NBBY);
1815 1.1 cgd #else
1816 1.62 lukem /* XXX: `bytesize' needs to be defined in this case */
1817 1.95 lukem cprintf(stdout, " %d", bytesize);
1818 1.1 cgd #endif
1819 1.62 lukem }
1820 1.95 lukem cprintf(stdout, "; STRUcture: %s; transfer MODE: %s\r\n",
1821 1.1 cgd strunames[stru], modenames[mode]);
1822 1.67 itojun ispassive = 0;
1823 1.67 itojun if (data != -1) {
1824 1.95 lukem reply(0, "Data connection open");
1825 1.67 itojun su = NULL;
1826 1.67 itojun } else if (pdata != -1) {
1827 1.95 lukem reply(0, "in Passive mode");
1828 1.109 lukem su = (struct sockinet *)&pasv_addr;
1829 1.67 itojun ispassive = 1;
1830 1.1 cgd goto printaddr;
1831 1.1 cgd } else if (usedefault == 0) {
1832 1.67 itojun if (epsvall) {
1833 1.95 lukem reply(0, "EPSV only mode (EPSV ALL)");
1834 1.67 itojun goto epsvonly;
1835 1.67 itojun }
1836 1.109 lukem su = (struct sockinet *)&data_dest;
1837 1.89 lukem printaddr:
1838 1.93 lukem /* PASV/PORT */
1839 1.67 itojun if (su->su_family == AF_INET) {
1840 1.109 lukem a = (u_char *) &su->su_addr;
1841 1.109 lukem p = (u_char *) &su->su_port;
1842 1.1 cgd #define UC(b) (((int) b) & 0xff)
1843 1.95 lukem reply(0, "%s (%d,%d,%d,%d,%d,%d)",
1844 1.93 lukem ispassive ? "PASV" : "PORT" ,
1845 1.67 itojun UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]),
1846 1.67 itojun UC(p[0]), UC(p[1]));
1847 1.67 itojun }
1848 1.67 itojun
1849 1.93 lukem /* LPSV/LPRT */
1850 1.67 itojun {
1851 1.67 itojun int alen, af, i;
1852 1.67 itojun
1853 1.67 itojun alen = 0;
1854 1.67 itojun switch (su->su_family) {
1855 1.67 itojun case AF_INET:
1856 1.109 lukem a = (u_char *) &su->su_addr;
1857 1.109 lukem p = (u_char *) &su->su_port;
1858 1.109 lukem alen = sizeof(su->su_addr);
1859 1.67 itojun af = 4;
1860 1.67 itojun break;
1861 1.104 christos #ifdef INET6
1862 1.67 itojun case AF_INET6:
1863 1.109 lukem a = (u_char *) &su->su_6addr;
1864 1.109 lukem p = (u_char *) &su->su_port;
1865 1.109 lukem alen = sizeof(su->su_6addr);
1866 1.67 itojun af = 6;
1867 1.67 itojun break;
1868 1.104 christos #endif
1869 1.67 itojun default:
1870 1.67 itojun af = 0;
1871 1.67 itojun break;
1872 1.67 itojun }
1873 1.67 itojun if (af) {
1874 1.95 lukem cprintf(stdout, " %s (%d,%d",
1875 1.93 lukem ispassive ? "LPSV" : "LPRT", af, alen);
1876 1.67 itojun for (i = 0; i < alen; i++)
1877 1.95 lukem cprintf(stdout, ",%d", UC(a[i]));
1878 1.95 lukem cprintf(stdout, ",%d,%d,%d)", 2, UC(p[0]), UC(p[1]));
1879 1.1 cgd #undef UC
1880 1.67 itojun }
1881 1.67 itojun }
1882 1.67 itojun
1883 1.67 itojun /* EPRT/EPSV */
1884 1.89 lukem epsvonly:
1885 1.109 lukem af = af2epsvproto(su->su_family);
1886 1.104 christos ntop_buf[0] = '\0';
1887 1.109 lukem if (af > 0) {
1888 1.109 lukem if (getnameinfo((struct sockaddr *)&su->si_su,
1889 1.109 lukem su->su_len, ntop_buf, sizeof(ntop_buf), NULL, 0,
1890 1.109 lukem NI_NUMERICHOST) == 0)
1891 1.95 lukem reply(0, "%s (|%d|%s|%d|)",
1892 1.93 lukem ispassive ? "EPSV" : "EPRT",
1893 1.93 lukem af, ntop_buf, ntohs(su->su_port));
1894 1.67 itojun }
1895 1.1 cgd } else
1896 1.95 lukem reply(0, "No data connection");
1897 1.62 lukem
1898 1.62 lukem if (logged_in) {
1899 1.109 lukem reply(0,
1900 1.109 lukem "Data sent: " LLF " byte%s in " LLF " file%s",
1901 1.109 lukem (LLT)total_data_out, PLURAL(total_data_out),
1902 1.109 lukem (LLT)total_files_out, PLURAL(total_files_out));
1903 1.109 lukem reply(0,
1904 1.109 lukem "Data received: " LLF " byte%s in " LLF " file%s",
1905 1.109 lukem (LLT)total_data_in, PLURAL(total_data_in),
1906 1.109 lukem (LLT)total_files_in, PLURAL(total_files_in));
1907 1.109 lukem reply(0,
1908 1.109 lukem "Total data: " LLF " byte%s in " LLF " file%s",
1909 1.109 lukem (LLT)total_data, PLURAL(total_data),
1910 1.109 lukem (LLT)total_files, PLURAL(total_files));
1911 1.62 lukem }
1912 1.62 lukem otbi = total_bytes_in;
1913 1.62 lukem otbo = total_bytes_out;
1914 1.62 lukem otb = total_bytes;
1915 1.109 lukem reply(0, "Traffic sent: " LLF " byte%s in " LLF " transfer%s",
1916 1.109 lukem (LLT)otbo, PLURAL(otbo),
1917 1.109 lukem (LLT)total_xfers_out, PLURAL(total_xfers_out));
1918 1.109 lukem reply(0, "Traffic received: " LLF " byte%s in " LLF " transfer%s",
1919 1.109 lukem (LLT)otbi, PLURAL(otbi),
1920 1.109 lukem (LLT)total_xfers_in, PLURAL(total_xfers_in));
1921 1.109 lukem reply(0, "Total traffic: " LLF " byte%s in " LLF " transfer%s",
1922 1.109 lukem (LLT)otb, PLURAL(otb),
1923 1.109 lukem (LLT)total_xfers, PLURAL(total_xfers));
1924 1.24 lukem
1925 1.24 lukem if (logged_in) {
1926 1.24 lukem struct ftpconv *cp;
1927 1.24 lukem
1928 1.98 sommerfe reply(0, "%s", "");
1929 1.95 lukem reply(0, "Class: %s, type: %s",
1930 1.81 lukem curclass.classname, CURCLASSTYPE);
1931 1.95 lukem reply(0, "Check PORT/LPRT commands: %sabled",
1932 1.41 lukem curclass.checkportcmd ? "en" : "dis");
1933 1.100 lukem if (! EMPTYSTR(curclass.display))
1934 1.95 lukem reply(0, "Display file: %s", curclass.display);
1935 1.100 lukem if (! EMPTYSTR(curclass.notify))
1936 1.95 lukem reply(0, "Notify fileglob: %s", curclass.notify);
1937 1.95 lukem reply(0, "Idle timeout: %d, maximum timeout: %d",
1938 1.24 lukem curclass.timeout, curclass.maxtimeout);
1939 1.95 lukem reply(0, "Current connections: %d", connections);
1940 1.82 lukem if (curclass.limit == -1)
1941 1.95 lukem reply(0, "Maximum connections: unlimited");
1942 1.82 lukem else
1943 1.95 lukem reply(0, "Maximum connections: %d", curclass.limit);
1944 1.82 lukem if (curclass.limitfile)
1945 1.95 lukem reply(0, "Connection limit exceeded file: %s",
1946 1.82 lukem curclass.limitfile);
1947 1.100 lukem if (! EMPTYSTR(curclass.chroot))
1948 1.100 lukem reply(0, "Chroot format: %s", curclass.chroot);
1949 1.100 lukem if (! EMPTYSTR(curclass.homedir))
1950 1.100 lukem reply(0, "Homedir format: %s", curclass.homedir);
1951 1.100 lukem if (! EMPTYSTR(curclass.motd))
1952 1.95 lukem reply(0, "MotD file: %s", curclass.motd);
1953 1.95 lukem reply(0,
1954 1.73 lukem "Modify commands (CHMOD, DELE, MKD, RMD, RNFR, UMASK): %sabled",
1955 1.24 lukem curclass.modify ? "en" : "dis");
1956 1.95 lukem reply(0, "Upload commands (APPE, STOR, STOU): %sabled",
1957 1.73 lukem curclass.upload ? "en" : "dis");
1958 1.85 lukem if (curclass.portmin && curclass.portmax)
1959 1.95 lukem reply(0, "PASV port range: %d - %d",
1960 1.85 lukem curclass.portmin, curclass.portmax);
1961 1.73 lukem if (curclass.rateget)
1962 1.95 lukem reply(0, "Rate get limit: %d bytes/sec",
1963 1.73 lukem curclass.rateget);
1964 1.73 lukem else
1965 1.95 lukem reply(0, "Rate get limit: disabled");
1966 1.73 lukem if (curclass.rateput)
1967 1.95 lukem reply(0, "Rate put limit: %d bytes/sec",
1968 1.73 lukem curclass.rateput);
1969 1.73 lukem else
1970 1.95 lukem reply(0, "Rate put limit: disabled");
1971 1.95 lukem reply(0, "Umask: %.04o", curclass.umask);
1972 1.24 lukem for (cp = curclass.conversions; cp != NULL; cp=cp->next) {
1973 1.24 lukem if (cp->suffix == NULL || cp->types == NULL ||
1974 1.24 lukem cp->command == NULL)
1975 1.24 lukem continue;
1976 1.95 lukem reply(0, "Conversion: %s [%s] disable: %s, command: %s",
1977 1.24 lukem cp->suffix, cp->types, cp->disable, cp->command);
1978 1.24 lukem }
1979 1.24 lukem }
1980 1.24 lukem
1981 1.1 cgd reply(211, "End of status");
1982 1.1 cgd }
1983 1.1 cgd
1984 1.8 deraadt void
1985 1.88 lukem fatal(const char *s)
1986 1.1 cgd {
1987 1.8 deraadt
1988 1.1 cgd reply(451, "Error in server: %s\n", s);
1989 1.1 cgd reply(221, "Closing connection due to server error.");
1990 1.1 cgd dologout(0);
1991 1.1 cgd /* NOTREACHED */
1992 1.1 cgd }
1993 1.1 cgd
1994 1.93 lukem /*
1995 1.93 lukem * reply() --
1996 1.95 lukem * depending on the value of n, display fmt with a trailing CRLF and
1997 1.95 lukem * prefix of:
1998 1.95 lukem * n < -1 prefix the message with abs(n) + "-" (initial line)
1999 1.95 lukem * n == 0 prefix the message with 4 spaces (middle lines)
2000 1.95 lukem * n > 0 prefix the message with n + " " (final line)
2001 1.93 lukem */
2002 1.8 deraadt void
2003 1.8 deraadt reply(int n, const char *fmt, ...)
2004 1.1 cgd {
2005 1.62 lukem off_t b;
2006 1.8 deraadt va_list ap;
2007 1.88 lukem
2008 1.8 deraadt va_start(ap, fmt);
2009 1.62 lukem b = 0;
2010 1.95 lukem if (n == 0)
2011 1.95 lukem cprintf(stdout, " ");
2012 1.95 lukem else if (n < 0)
2013 1.95 lukem cprintf(stdout, "%d-", -n);
2014 1.95 lukem else
2015 1.95 lukem cprintf(stdout, "%d ", n);
2016 1.95 lukem b = vprintf(fmt, ap);
2017 1.62 lukem total_bytes += b;
2018 1.62 lukem total_bytes_out += b;
2019 1.95 lukem cprintf(stdout, "\r\n");
2020 1.1 cgd (void)fflush(stdout);
2021 1.1 cgd if (debug) {
2022 1.95 lukem syslog(LOG_DEBUG, "<--- %d%c", abs(n), (n < 0) ? '-' : ' ');
2023 1.8 deraadt vsyslog(LOG_DEBUG, fmt, ap);
2024 1.1 cgd }
2025 1.1 cgd }
2026 1.1 cgd
2027 1.8 deraadt static void
2028 1.88 lukem dolog(struct sockaddr *who)
2029 1.1 cgd {
2030 1.109 lukem
2031 1.104 christos (void)getnameinfo(who, who->sa_len, remotehost, sizeof(remotehost),
2032 1.104 christos NULL, 0, 0);
2033 1.104 christos
2034 1.6 cgd #ifdef HASSETPROCTITLE
2035 1.8 deraadt snprintf(proctitle, sizeof(proctitle), "%s: connected", remotehost);
2036 1.97 itojun setproctitle("%s", proctitle);
2037 1.6 cgd #endif /* HASSETPROCTITLE */
2038 1.8 deraadt if (logging)
2039 1.79 lukem syslog(LOG_INFO, "connection from %s to %s",
2040 1.79 lukem remotehost, hostname);
2041 1.1 cgd }
2042 1.1 cgd
2043 1.1 cgd /*
2044 1.1 cgd * Record logout in wtmp file
2045 1.1 cgd * and exit with supplied status.
2046 1.1 cgd */
2047 1.8 deraadt void
2048 1.88 lukem dologout(int status)
2049 1.1 cgd {
2050 1.16 mrg /*
2051 1.16 mrg * Prevent reception of SIGURG from resulting in a resumption
2052 1.16 mrg * back to the main program loop.
2053 1.16 mrg */
2054 1.16 mrg transflag = 0;
2055 1.8 deraadt
2056 1.1 cgd if (logged_in) {
2057 1.102 lukem if (dowtmp)
2058 1.102 lukem logwtmp(ttyline, "", "");
2059 1.78 lukem if (doutmp)
2060 1.78 lukem logout(utmp.ut_line);
2061 1.36 mycroft #ifdef KERBEROS
2062 1.4 cgd if (!notickets && krbtkfile_env)
2063 1.4 cgd unlink(krbtkfile_env);
2064 1.4 cgd #endif
2065 1.1 cgd }
2066 1.1 cgd /* beware of flushing buffers after a SIGPIPE */
2067 1.1 cgd _exit(status);
2068 1.1 cgd }
2069 1.1 cgd
2070 1.8 deraadt static void
2071 1.88 lukem myoob(int signo)
2072 1.1 cgd {
2073 1.1 cgd char *cp;
2074 1.1 cgd
2075 1.1 cgd /* only process if transfer occurring */
2076 1.1 cgd if (!transflag)
2077 1.1 cgd return;
2078 1.1 cgd cp = tmpline;
2079 1.1 cgd if (getline(cp, 7, stdin) == NULL) {
2080 1.1 cgd reply(221, "You could at least say goodbye.");
2081 1.1 cgd dologout(0);
2082 1.1 cgd }
2083 1.58 lukem if (strcasecmp(cp, "ABOR\r\n") == 0) {
2084 1.1 cgd tmpline[0] = '\0';
2085 1.1 cgd reply(426, "Transfer aborted. Data connection closed.");
2086 1.1 cgd reply(226, "Abort successful");
2087 1.1 cgd longjmp(urgcatch, 1);
2088 1.1 cgd }
2089 1.58 lukem if (strcasecmp(cp, "STAT\r\n") == 0) {
2090 1.78 lukem tmpline[0] = '\0';
2091 1.1 cgd if (file_size != (off_t) -1)
2092 1.109 lukem reply(213,
2093 1.109 lukem "Status: " LLF " of " LLF " byte%s transferred",
2094 1.109 lukem (LLT)byte_count, (LLT)file_size,
2095 1.65 ross PLURAL(byte_count));
2096 1.1 cgd else
2097 1.109 lukem reply(213, "Status: " LLF " byte%s transferred",
2098 1.109 lukem (LLT)byte_count, PLURAL(byte_count));
2099 1.1 cgd }
2100 1.1 cgd }
2101 1.1 cgd
2102 1.84 lukem static int
2103 1.88 lukem bind_pasv_addr(void)
2104 1.84 lukem {
2105 1.84 lukem static int passiveport;
2106 1.84 lukem int port, len;
2107 1.84 lukem
2108 1.84 lukem len = pasv_addr.su_len;
2109 1.84 lukem if (curclass.portmin == 0 && curclass.portmax == 0) {
2110 1.84 lukem pasv_addr.su_port = 0;
2111 1.109 lukem return (bind(pdata, (struct sockaddr *)&pasv_addr.si_su, len));
2112 1.84 lukem }
2113 1.84 lukem
2114 1.84 lukem if (passiveport == 0) {
2115 1.84 lukem srand(getpid());
2116 1.84 lukem passiveport = rand() % (curclass.portmax - curclass.portmin)
2117 1.84 lukem + curclass.portmin;
2118 1.84 lukem }
2119 1.84 lukem
2120 1.84 lukem port = passiveport;
2121 1.84 lukem while (1) {
2122 1.84 lukem port++;
2123 1.84 lukem if (port > curclass.portmax)
2124 1.84 lukem port = curclass.portmin;
2125 1.84 lukem else if (port == passiveport) {
2126 1.84 lukem errno = EAGAIN;
2127 1.84 lukem return (-1);
2128 1.84 lukem }
2129 1.84 lukem pasv_addr.su_port = htons(port);
2130 1.109 lukem if (bind(pdata, (struct sockaddr *)&pasv_addr.si_su, len) == 0)
2131 1.84 lukem break;
2132 1.84 lukem if (errno != EADDRINUSE)
2133 1.84 lukem return (-1);
2134 1.84 lukem }
2135 1.84 lukem passiveport = port;
2136 1.84 lukem return (0);
2137 1.84 lukem }
2138 1.84 lukem
2139 1.1 cgd /*
2140 1.1 cgd * Note: a response of 425 is not mentioned as a possible response to
2141 1.8 deraadt * the PASV command in RFC959. However, it has been blessed as
2142 1.8 deraadt * a legitimate response by Jon Postel in a telephone conversation
2143 1.1 cgd * with Rick Adams on 25 Jan 89.
2144 1.1 cgd */
2145 1.8 deraadt void
2146 1.88 lukem passive(void)
2147 1.1 cgd {
2148 1.1 cgd int len;
2149 1.8 deraadt char *p, *a;
2150 1.1 cgd
2151 1.72 itojun if (pdata >= 0)
2152 1.72 itojun close(pdata);
2153 1.1 cgd pdata = socket(AF_INET, SOCK_STREAM, 0);
2154 1.23 lukem if (pdata < 0 || !logged_in) {
2155 1.1 cgd perror_reply(425, "Can't open passive connection");
2156 1.1 cgd return;
2157 1.1 cgd }
2158 1.1 cgd pasv_addr = ctrl_addr;
2159 1.84 lukem
2160 1.84 lukem if (bind_pasv_addr() < 0)
2161 1.84 lukem goto pasv_error;
2162 1.67 itojun len = pasv_addr.su_len;
2163 1.109 lukem if (getsockname(pdata, (struct sockaddr *) &pasv_addr.si_su, &len) < 0)
2164 1.1 cgd goto pasv_error;
2165 1.109 lukem pasv_addr.su_len = len;
2166 1.1 cgd if (listen(pdata, 1) < 0)
2167 1.1 cgd goto pasv_error;
2168 1.109 lukem a = (char *) &pasv_addr.su_addr;
2169 1.67 itojun p = (char *) &pasv_addr.su_port;
2170 1.1 cgd
2171 1.1 cgd #define UC(b) (((int) b) & 0xff)
2172 1.1 cgd
2173 1.1 cgd reply(227, "Entering Passive Mode (%d,%d,%d,%d,%d,%d)", UC(a[0]),
2174 1.1 cgd UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1]));
2175 1.1 cgd return;
2176 1.1 cgd
2177 1.89 lukem pasv_error:
2178 1.67 itojun (void) close(pdata);
2179 1.67 itojun pdata = -1;
2180 1.67 itojun perror_reply(425, "Can't open passive connection");
2181 1.67 itojun return;
2182 1.67 itojun }
2183 1.67 itojun
2184 1.67 itojun /*
2185 1.106 itojun * convert protocol identifier to/from AF
2186 1.106 itojun */
2187 1.106 itojun int
2188 1.106 itojun lpsvproto2af(int proto)
2189 1.106 itojun {
2190 1.106 itojun
2191 1.106 itojun switch (proto) {
2192 1.109 lukem case 4:
2193 1.109 lukem return AF_INET;
2194 1.106 itojun #ifdef INET6
2195 1.109 lukem case 6:
2196 1.109 lukem return AF_INET6;
2197 1.106 itojun #endif
2198 1.109 lukem default:
2199 1.109 lukem return -1;
2200 1.106 itojun }
2201 1.106 itojun }
2202 1.106 itojun
2203 1.106 itojun int
2204 1.106 itojun af2lpsvproto(int af)
2205 1.106 itojun {
2206 1.106 itojun
2207 1.106 itojun switch (af) {
2208 1.109 lukem case AF_INET:
2209 1.109 lukem return 4;
2210 1.106 itojun #ifdef INET6
2211 1.109 lukem case AF_INET6:
2212 1.109 lukem return 6;
2213 1.106 itojun #endif
2214 1.109 lukem default:
2215 1.109 lukem return -1;
2216 1.106 itojun }
2217 1.106 itojun }
2218 1.106 itojun
2219 1.106 itojun int
2220 1.106 itojun epsvproto2af(int proto)
2221 1.106 itojun {
2222 1.106 itojun
2223 1.106 itojun switch (proto) {
2224 1.109 lukem case 1:
2225 1.109 lukem return AF_INET;
2226 1.106 itojun #ifdef INET6
2227 1.109 lukem case 2:
2228 1.109 lukem return AF_INET6;
2229 1.106 itojun #endif
2230 1.109 lukem default:
2231 1.109 lukem return -1;
2232 1.106 itojun }
2233 1.106 itojun }
2234 1.106 itojun
2235 1.106 itojun int
2236 1.106 itojun af2epsvproto(int af)
2237 1.106 itojun {
2238 1.106 itojun
2239 1.106 itojun switch (af) {
2240 1.109 lukem case AF_INET:
2241 1.109 lukem return 1;
2242 1.106 itojun #ifdef INET6
2243 1.109 lukem case AF_INET6:
2244 1.109 lukem return 2;
2245 1.106 itojun #endif
2246 1.109 lukem default:
2247 1.109 lukem return -1;
2248 1.106 itojun }
2249 1.106 itojun }
2250 1.106 itojun
2251 1.106 itojun /*
2252 1.67 itojun * 228 Entering Long Passive Mode (af, hal, h1, h2, h3,..., pal, p1, p2...)
2253 1.67 itojun * 229 Entering Extended Passive Mode (|||port|)
2254 1.67 itojun */
2255 1.67 itojun void
2256 1.67 itojun long_passive(char *cmd, int pf)
2257 1.67 itojun {
2258 1.67 itojun int len;
2259 1.84 lukem char *p, *a;
2260 1.67 itojun
2261 1.67 itojun if (!logged_in) {
2262 1.67 itojun syslog(LOG_NOTICE, "long passive but not logged in");
2263 1.67 itojun reply(503, "Login with USER first.");
2264 1.67 itojun return;
2265 1.67 itojun }
2266 1.67 itojun
2267 1.106 itojun if (pf != PF_UNSPEC && ctrl_addr.su_family != pf) {
2268 1.106 itojun /*
2269 1.106 itojun * XXX
2270 1.106 itojun * only EPRT/EPSV ready clients will understand this
2271 1.106 itojun */
2272 1.106 itojun if (strcmp(cmd, "EPSV") != 0)
2273 1.106 itojun reply(501, "Network protocol mismatch"); /*XXX*/
2274 1.106 itojun else
2275 1.106 itojun epsv_protounsupp("Network protocol mismatch");
2276 1.67 itojun
2277 1.106 itojun return;
2278 1.67 itojun }
2279 1.73 lukem
2280 1.72 itojun if (pdata >= 0)
2281 1.72 itojun close(pdata);
2282 1.67 itojun pdata = socket(ctrl_addr.su_family, SOCK_STREAM, 0);
2283 1.67 itojun if (pdata < 0) {
2284 1.67 itojun perror_reply(425, "Can't open passive connection");
2285 1.67 itojun return;
2286 1.67 itojun }
2287 1.67 itojun pasv_addr = ctrl_addr;
2288 1.84 lukem if (bind_pasv_addr() < 0)
2289 1.67 itojun goto pasv_error;
2290 1.67 itojun len = pasv_addr.su_len;
2291 1.109 lukem if (getsockname(pdata, (struct sockaddr *) &pasv_addr.si_su, &len) < 0)
2292 1.67 itojun goto pasv_error;
2293 1.109 lukem pasv_addr.su_len = len;
2294 1.67 itojun if (listen(pdata, 1) < 0)
2295 1.67 itojun goto pasv_error;
2296 1.67 itojun p = (char *) &pasv_addr.su_port;
2297 1.67 itojun
2298 1.67 itojun #define UC(b) (((int) b) & 0xff)
2299 1.67 itojun
2300 1.67 itojun if (strcmp(cmd, "LPSV") == 0) {
2301 1.67 itojun switch (pasv_addr.su_family) {
2302 1.67 itojun case AF_INET:
2303 1.109 lukem a = (char *) &pasv_addr.su_addr;
2304 1.109 lukem reply(228,
2305 1.109 lukem "Entering Long Passive Mode (%d,%d,%d,%d,%d,%d,%d,%d,%d)",
2306 1.67 itojun 4, 4, UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]),
2307 1.67 itojun 2, UC(p[0]), UC(p[1]));
2308 1.67 itojun return;
2309 1.104 christos #ifdef INET6
2310 1.67 itojun case AF_INET6:
2311 1.109 lukem a = (char *) &pasv_addr.su_6addr;
2312 1.109 lukem reply(228,
2313 1.109 lukem "Entering Long Passive Mode (%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d)",
2314 1.67 itojun 6, 16,
2315 1.67 itojun UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]),
2316 1.67 itojun UC(a[4]), UC(a[5]), UC(a[6]), UC(a[7]),
2317 1.67 itojun UC(a[8]), UC(a[9]), UC(a[10]), UC(a[11]),
2318 1.67 itojun UC(a[12]), UC(a[13]), UC(a[14]), UC(a[15]),
2319 1.67 itojun 2, UC(p[0]), UC(p[1]));
2320 1.67 itojun return;
2321 1.104 christos #endif
2322 1.67 itojun }
2323 1.67 itojun #undef UC
2324 1.67 itojun } else if (strcmp(cmd, "EPSV") == 0) {
2325 1.67 itojun switch (pasv_addr.su_family) {
2326 1.67 itojun case AF_INET:
2327 1.109 lukem #ifdef INET6
2328 1.67 itojun case AF_INET6:
2329 1.109 lukem #endif
2330 1.67 itojun reply(229, "Entering Extended Passive Mode (|||%d|)",
2331 1.109 lukem ntohs(pasv_addr.su_port));
2332 1.67 itojun return;
2333 1.67 itojun }
2334 1.67 itojun } else {
2335 1.67 itojun /* more proper error code? */
2336 1.67 itojun }
2337 1.67 itojun
2338 1.89 lukem pasv_error:
2339 1.1 cgd (void) close(pdata);
2340 1.1 cgd pdata = -1;
2341 1.1 cgd perror_reply(425, "Can't open passive connection");
2342 1.1 cgd return;
2343 1.106 itojun }
2344 1.106 itojun
2345 1.106 itojun int
2346 1.106 itojun extended_port(const char *arg)
2347 1.106 itojun {
2348 1.106 itojun #ifdef INET6 /*not really IPv6-only. just to avoid the use of getaddrinfo*/
2349 1.106 itojun char *tmp = NULL;
2350 1.106 itojun char *result[3];
2351 1.106 itojun char *p, *q;
2352 1.106 itojun char delim;
2353 1.106 itojun struct addrinfo hints;
2354 1.106 itojun struct addrinfo *res = NULL;
2355 1.106 itojun int i;
2356 1.106 itojun unsigned long proto;
2357 1.106 itojun
2358 1.106 itojun tmp = xstrdup(arg);
2359 1.106 itojun p = tmp;
2360 1.106 itojun delim = p[0];
2361 1.106 itojun p++;
2362 1.106 itojun memset(result, 0, sizeof(result));
2363 1.106 itojun for (i = 0; i < 3; i++) {
2364 1.106 itojun q = strchr(p, delim);
2365 1.106 itojun if (!q || *q != delim)
2366 1.106 itojun goto parsefail;
2367 1.106 itojun *q++ = '\0';
2368 1.106 itojun result[i] = p;
2369 1.106 itojun p = q;
2370 1.106 itojun }
2371 1.106 itojun
2372 1.106 itojun /* some more sanity check */
2373 1.106 itojun p = NULL;
2374 1.106 itojun (void)strtoul(result[2], &p, 10);
2375 1.106 itojun if (!*result[2] || *p)
2376 1.108 itojun goto parsefail;
2377 1.106 itojun p = NULL;
2378 1.106 itojun proto = strtoul(result[0], &p, 10);
2379 1.106 itojun if (!*result[0] || *p)
2380 1.106 itojun goto protounsupp;
2381 1.106 itojun
2382 1.106 itojun memset(&hints, 0, sizeof(hints));
2383 1.106 itojun hints.ai_family = epsvproto2af((int)proto);
2384 1.106 itojun if (hints.ai_family < 0)
2385 1.106 itojun goto protounsupp;
2386 1.106 itojun hints.ai_socktype = SOCK_STREAM;
2387 1.106 itojun hints.ai_flags = AI_NUMERICHOST;
2388 1.106 itojun if (getaddrinfo(result[1], result[2], &hints, &res))
2389 1.106 itojun goto parsefail;
2390 1.106 itojun if (res->ai_next)
2391 1.106 itojun goto parsefail;
2392 1.106 itojun if (sizeof(data_dest) < res->ai_addrlen)
2393 1.106 itojun goto parsefail;
2394 1.106 itojun memcpy(&data_dest, res->ai_addr, res->ai_addrlen);
2395 1.106 itojun if (his_addr.su_family == AF_INET6 &&
2396 1.106 itojun data_dest.su_family == AF_INET6) {
2397 1.106 itojun /* XXX more sanity checks! */
2398 1.109 lukem data_dest.su_scope_id = his_addr.su_scope_id;
2399 1.106 itojun }
2400 1.106 itojun
2401 1.106 itojun if (tmp != NULL)
2402 1.106 itojun free(tmp);
2403 1.106 itojun if (res)
2404 1.106 itojun freeaddrinfo(res);
2405 1.106 itojun return 0;
2406 1.106 itojun
2407 1.109 lukem parsefail:
2408 1.106 itojun reply(500, "Invalid argument, rejected.");
2409 1.106 itojun usedefault = 1;
2410 1.107 itojun if (tmp != NULL)
2411 1.107 itojun free(tmp);
2412 1.107 itojun if (res)
2413 1.107 itojun freeaddrinfo(res);
2414 1.106 itojun return -1;
2415 1.106 itojun
2416 1.109 lukem protounsupp:
2417 1.106 itojun epsv_protounsupp("Protocol not supported");
2418 1.106 itojun usedefault = 1;
2419 1.107 itojun if (tmp != NULL)
2420 1.107 itojun free(tmp);
2421 1.107 itojun if (res)
2422 1.107 itojun freeaddrinfo(res);
2423 1.106 itojun return -1;
2424 1.106 itojun #else
2425 1.106 itojun reply(500, "Invalid argument, rejected.");
2426 1.106 itojun return -1;
2427 1.106 itojun #endif
2428 1.106 itojun }
2429 1.106 itojun
2430 1.106 itojun /*
2431 1.106 itojun * 522 Protocol not supported (proto,...)
2432 1.106 itojun * as we assume address family for control and data connections are the same,
2433 1.106 itojun * we do not return the list of address families we support - instead, we
2434 1.106 itojun * return the address family of the control connection.
2435 1.106 itojun */
2436 1.106 itojun void
2437 1.106 itojun epsv_protounsupp(const char *message)
2438 1.106 itojun {
2439 1.106 itojun int proto;
2440 1.106 itojun
2441 1.106 itojun proto = af2epsvproto(ctrl_addr.su_family);
2442 1.106 itojun if (proto < 0)
2443 1.106 itojun reply(501, "%s", message); /*XXX*/
2444 1.106 itojun else
2445 1.106 itojun reply(522, "%s, use (%d)", message, proto);
2446 1.1 cgd }
2447 1.1 cgd
2448 1.1 cgd /*
2449 1.1 cgd * Generate unique name for file with basename "local".
2450 1.1 cgd * The file named "local" is already known to exist.
2451 1.1 cgd * Generates failure reply on error.
2452 1.29 mrg *
2453 1.109 lukem * XXX: this function should under go changes similar to
2454 1.109 lukem * the mktemp(3)/mkstemp(3) changes.
2455 1.1 cgd */
2456 1.8 deraadt static char *
2457 1.88 lukem gunique(const char *local)
2458 1.1 cgd {
2459 1.82 lukem static char new[MAXPATHLEN];
2460 1.1 cgd struct stat st;
2461 1.8 deraadt char *cp;
2462 1.73 lukem int count;
2463 1.1 cgd
2464 1.8 deraadt cp = strrchr(local, '/');
2465 1.1 cgd if (cp)
2466 1.1 cgd *cp = '\0';
2467 1.1 cgd if (stat(cp ? local : ".", &st) < 0) {
2468 1.1 cgd perror_reply(553, cp ? local : ".");
2469 1.57 lukem return (NULL);
2470 1.1 cgd }
2471 1.1 cgd if (cp)
2472 1.1 cgd *cp = '/';
2473 1.1 cgd for (count = 1; count < 100; count++) {
2474 1.73 lukem (void)snprintf(new, sizeof(new) - 1, "%s.%d", local, count);
2475 1.1 cgd if (stat(new, &st) < 0)
2476 1.8 deraadt return (new);
2477 1.1 cgd }
2478 1.1 cgd reply(452, "Unique file name cannot be created.");
2479 1.8 deraadt return (NULL);
2480 1.1 cgd }
2481 1.1 cgd
2482 1.1 cgd /*
2483 1.1 cgd * Format and send reply containing system error number.
2484 1.1 cgd */
2485 1.8 deraadt void
2486 1.88 lukem perror_reply(int code, const char *string)
2487 1.1 cgd {
2488 1.62 lukem int save_errno;
2489 1.8 deraadt
2490 1.62 lukem save_errno = errno;
2491 1.1 cgd reply(code, "%s: %s.", string, strerror(errno));
2492 1.62 lukem errno = save_errno;
2493 1.1 cgd }
2494 1.1 cgd
2495 1.1 cgd static char *onefile[] = {
2496 1.1 cgd "",
2497 1.1 cgd 0
2498 1.1 cgd };
2499 1.1 cgd
2500 1.8 deraadt void
2501 1.88 lukem send_file_list(const char *whichf)
2502 1.1 cgd {
2503 1.1 cgd struct stat st;
2504 1.1 cgd DIR *dirp = NULL;
2505 1.1 cgd struct dirent *dir;
2506 1.1 cgd FILE *dout = NULL;
2507 1.62 lukem char **dirlist, *dirname, *p;
2508 1.1 cgd int simple = 0;
2509 1.8 deraadt int freeglob = 0;
2510 1.8 deraadt glob_t gl;
2511 1.62 lukem off_t b;
2512 1.62 lukem
2513 1.25 christos #ifdef __GNUC__
2514 1.25 christos (void) &dout;
2515 1.25 christos (void) &dirlist;
2516 1.25 christos (void) &simple;
2517 1.25 christos (void) &freeglob;
2518 1.25 christos #endif
2519 1.1 cgd
2520 1.62 lukem p = NULL;
2521 1.8 deraadt if (strpbrk(whichf, "~{[*?") != NULL) {
2522 1.50 kleink int flags = GLOB_BRACE|GLOB_NOCHECK|GLOB_TILDE;
2523 1.1 cgd
2524 1.8 deraadt memset(&gl, 0, sizeof(gl));
2525 1.8 deraadt freeglob = 1;
2526 1.8 deraadt if (glob(whichf, flags, 0, &gl)) {
2527 1.8 deraadt reply(550, "not found");
2528 1.8 deraadt goto out;
2529 1.8 deraadt } else if (gl.gl_pathc == 0) {
2530 1.1 cgd errno = ENOENT;
2531 1.8 deraadt perror_reply(550, whichf);
2532 1.8 deraadt goto out;
2533 1.1 cgd }
2534 1.8 deraadt dirlist = gl.gl_pathv;
2535 1.1 cgd } else {
2536 1.62 lukem p = xstrdup(whichf);
2537 1.62 lukem onefile[0] = p;
2538 1.1 cgd dirlist = onefile;
2539 1.1 cgd simple = 1;
2540 1.1 cgd }
2541 1.62 lukem /* XXX: } for vi sm */
2542 1.1 cgd
2543 1.1 cgd if (setjmp(urgcatch)) {
2544 1.1 cgd transflag = 0;
2545 1.8 deraadt goto out;
2546 1.1 cgd }
2547 1.20 lukem while ((dirname = *dirlist++) != NULL) {
2548 1.33 lukem int trailingslash = 0;
2549 1.33 lukem
2550 1.1 cgd if (stat(dirname, &st) < 0) {
2551 1.1 cgd /*
2552 1.1 cgd * If user typed "ls -l", etc, and the client
2553 1.1 cgd * used NLST, do what the user meant.
2554 1.1 cgd */
2555 1.71 lukem /* XXX: nuke this support? */
2556 1.1 cgd if (dirname[0] == '-' && *dirlist == NULL &&
2557 1.1 cgd transflag == 0) {
2558 1.71 lukem char *argv[] = { INTERNAL_LS, "", NULL };
2559 1.71 lukem
2560 1.71 lukem argv[1] = dirname;
2561 1.71 lukem retrieve(argv, dirname);
2562 1.8 deraadt goto out;
2563 1.1 cgd }
2564 1.8 deraadt perror_reply(550, whichf);
2565 1.95 lukem goto cleanup_send_file_list;
2566 1.1 cgd }
2567 1.1 cgd
2568 1.8 deraadt if (S_ISREG(st.st_mode)) {
2569 1.1 cgd if (dout == NULL) {
2570 1.1 cgd dout = dataconn("file list", (off_t)-1, "w");
2571 1.1 cgd if (dout == NULL)
2572 1.8 deraadt goto out;
2573 1.1 cgd transflag++;
2574 1.1 cgd }
2575 1.62 lukem b = fprintf(dout, "%s%s\n", dirname,
2576 1.62 lukem type == TYPE_A ? "\r" : "");
2577 1.62 lukem total_bytes += b;
2578 1.62 lukem total_bytes_out += b;
2579 1.1 cgd byte_count += strlen(dirname) + 1;
2580 1.1 cgd continue;
2581 1.8 deraadt } else if (!S_ISDIR(st.st_mode))
2582 1.1 cgd continue;
2583 1.1 cgd
2584 1.33 lukem if (dirname[strlen(dirname) - 1] == '/')
2585 1.33 lukem trailingslash++;
2586 1.33 lukem
2587 1.1 cgd if ((dirp = opendir(dirname)) == NULL)
2588 1.1 cgd continue;
2589 1.1 cgd
2590 1.1 cgd while ((dir = readdir(dirp)) != NULL) {
2591 1.82 lukem char nbuf[MAXPATHLEN];
2592 1.1 cgd
2593 1.93 lukem if (ISDOTDIR(dir->d_name) || ISDOTDOTDIR(dir->d_name))
2594 1.1 cgd continue;
2595 1.1 cgd
2596 1.33 lukem (void)snprintf(nbuf, sizeof(nbuf), "%s%s%s", dirname,
2597 1.33 lukem trailingslash ? "" : "/", dir->d_name);
2598 1.1 cgd
2599 1.1 cgd /*
2600 1.30 lukem * We have to do a stat to ensure it's
2601 1.1 cgd * not a directory or special file.
2602 1.1 cgd */
2603 1.71 lukem /* XXX: follow RFC959 and filter out non files ? */
2604 1.1 cgd if (simple || (stat(nbuf, &st) == 0 &&
2605 1.8 deraadt S_ISREG(st.st_mode))) {
2606 1.62 lukem char *p;
2607 1.62 lukem
2608 1.1 cgd if (dout == NULL) {
2609 1.1 cgd dout = dataconn("file list", (off_t)-1,
2610 1.1 cgd "w");
2611 1.1 cgd if (dout == NULL)
2612 1.8 deraadt goto out;
2613 1.1 cgd transflag++;
2614 1.1 cgd }
2615 1.62 lukem p = nbuf;
2616 1.1 cgd if (nbuf[0] == '.' && nbuf[1] == '/')
2617 1.62 lukem p = &nbuf[2];
2618 1.62 lukem b = fprintf(dout, "%s%s\n", p,
2619 1.62 lukem type == TYPE_A ? "\r" : "");
2620 1.62 lukem total_bytes += b;
2621 1.62 lukem total_bytes_out += b;
2622 1.1 cgd byte_count += strlen(nbuf) + 1;
2623 1.1 cgd }
2624 1.1 cgd }
2625 1.1 cgd (void) closedir(dirp);
2626 1.1 cgd }
2627 1.1 cgd
2628 1.1 cgd if (dout == NULL)
2629 1.1 cgd reply(550, "No files found.");
2630 1.1 cgd else if (ferror(dout) != 0)
2631 1.1 cgd perror_reply(550, "Data connection");
2632 1.1 cgd else
2633 1.1 cgd reply(226, "Transfer complete.");
2634 1.1 cgd
2635 1.95 lukem cleanup_send_file_list:
2636 1.1 cgd transflag = 0;
2637 1.95 lukem closedataconn(dout);
2638 1.89 lukem out:
2639 1.62 lukem total_xfers++;
2640 1.62 lukem total_xfers_out++;
2641 1.62 lukem if (p)
2642 1.62 lukem free(p);
2643 1.62 lukem if (freeglob)
2644 1.8 deraadt globfree(&gl);
2645 1.34 lukem }
2646 1.34 lukem
2647 1.34 lukem char *
2648 1.88 lukem conffilename(const char *s)
2649 1.34 lukem {
2650 1.82 lukem static char filename[MAXPATHLEN];
2651 1.34 lukem
2652 1.73 lukem if (*s == '/')
2653 1.73 lukem strlcpy(filename, s, sizeof(filename));
2654 1.73 lukem else
2655 1.73 lukem (void)snprintf(filename, sizeof(filename), "%s/%s", confdir ,s);
2656 1.73 lukem return (filename);
2657 1.62 lukem }
2658 1.62 lukem
2659 1.62 lukem /*
2660 1.62 lukem * logcmd --
2661 1.62 lukem * based on the arguments, syslog a message:
2662 1.62 lukem * if bytes != -1 "<command> <file1> = <bytes> bytes"
2663 1.62 lukem * else if file2 != NULL "<command> <file1> <file2>"
2664 1.62 lukem * else "<command> <file1>"
2665 1.62 lukem * if elapsed != NULL, append "in xxx.yyy seconds"
2666 1.62 lukem * if error != NULL, append ": " + error
2667 1.62 lukem */
2668 1.62 lukem void
2669 1.88 lukem logcmd(const char *command, off_t bytes, const char *file1, const char *file2,
2670 1.88 lukem const struct timeval *elapsed, const char *error)
2671 1.62 lukem {
2672 1.82 lukem char buf[MAXPATHLEN * 2 + 100], realfile[MAXPATHLEN];
2673 1.62 lukem const char *p;
2674 1.62 lukem size_t len;
2675 1.62 lukem
2676 1.62 lukem if (logging <=1)
2677 1.62 lukem return;
2678 1.62 lukem
2679 1.109 lukem if ((p = realpath(file1, realfile)) == NULL)
2680 1.62 lukem p = file1;
2681 1.62 lukem len = snprintf(buf, sizeof(buf), "%s %s", command, p);
2682 1.62 lukem
2683 1.62 lukem if (bytes != (off_t)-1) {
2684 1.62 lukem len += snprintf(buf + len, sizeof(buf) - len,
2685 1.109 lukem " = " LLF " byte%s", (LLT) bytes, PLURAL(bytes));
2686 1.62 lukem } else if (file2 != NULL) {
2687 1.109 lukem if ((p = realpath(file2, realfile)) == NULL)
2688 1.62 lukem p = file2;
2689 1.62 lukem len += snprintf(buf + len, sizeof(buf) - len, " %s", p);
2690 1.62 lukem }
2691 1.62 lukem
2692 1.62 lukem if (elapsed != NULL) {
2693 1.62 lukem len += snprintf(buf + len, sizeof(buf) - len,
2694 1.62 lukem " in %ld.%.03d seconds", elapsed->tv_sec,
2695 1.62 lukem (int)(elapsed->tv_usec / 1000));
2696 1.62 lukem }
2697 1.62 lukem
2698 1.62 lukem if (error != NULL)
2699 1.62 lukem len += snprintf(buf + len, sizeof(buf) - len, ": %s", error);
2700 1.62 lukem
2701 1.62 lukem syslog(LOG_INFO, "%s", buf);
2702 1.62 lukem }
2703 1.62 lukem
2704 1.62 lukem char *
2705 1.88 lukem xstrdup(const char *s)
2706 1.62 lukem {
2707 1.62 lukem char *new = strdup(s);
2708 1.62 lukem
2709 1.62 lukem if (new == NULL)
2710 1.62 lukem fatal("Local resource failure: malloc");
2711 1.62 lukem /* NOTREACHED */
2712 1.62 lukem return (new);
2713 1.95 lukem }
2714 1.95 lukem
2715 1.95 lukem /*
2716 1.95 lukem * As per fprintf(), but increment total_bytes and total_bytes_out,
2717 1.95 lukem * by the appropriate amount.
2718 1.95 lukem */
2719 1.95 lukem void
2720 1.95 lukem cprintf(FILE *fd, const char *fmt, ...)
2721 1.95 lukem {
2722 1.95 lukem off_t b;
2723 1.95 lukem va_list ap;
2724 1.95 lukem
2725 1.95 lukem va_start(ap, fmt);
2726 1.95 lukem b = vfprintf(fd, fmt, ap);
2727 1.95 lukem total_bytes += b;
2728 1.95 lukem total_bytes_out += b;
2729 1.1 cgd }
2730