Home | History | Annotate | Line # | Download | only in ftpd
ftpd.c revision 1.26
      1  1.26    mellon /*	$NetBSD: ftpd.c,v 1.26 1997/06/21 04:38:54 mellon Exp $	*/
      2  1.13       cgd 
      3   1.1       cgd /*
      4   1.8   deraadt  * Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994
      5   1.8   deraadt  *	The Regents of the University of California.  All rights reserved.
      6   1.1       cgd  *
      7   1.1       cgd  * Redistribution and use in source and binary forms, with or without
      8   1.1       cgd  * modification, are permitted provided that the following conditions
      9   1.1       cgd  * are met:
     10   1.1       cgd  * 1. Redistributions of source code must retain the above copyright
     11   1.1       cgd  *    notice, this list of conditions and the following disclaimer.
     12   1.1       cgd  * 2. Redistributions in binary form must reproduce the above copyright
     13   1.1       cgd  *    notice, this list of conditions and the following disclaimer in the
     14   1.1       cgd  *    documentation and/or other materials provided with the distribution.
     15   1.1       cgd  * 3. All advertising materials mentioning features or use of this software
     16   1.1       cgd  *    must display the following acknowledgement:
     17   1.1       cgd  *	This product includes software developed by the University of
     18   1.1       cgd  *	California, Berkeley and its contributors.
     19   1.1       cgd  * 4. Neither the name of the University nor the names of its contributors
     20   1.1       cgd  *    may be used to endorse or promote products derived from this software
     21   1.1       cgd  *    without specific prior written permission.
     22   1.1       cgd  *
     23   1.1       cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     24   1.1       cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     25   1.1       cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     26   1.1       cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     27   1.1       cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     28   1.1       cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     29   1.1       cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     30   1.1       cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     31   1.1       cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     32   1.1       cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     33   1.1       cgd  * SUCH DAMAGE.
     34   1.1       cgd  */
     35   1.1       cgd 
     36  1.25  christos #include <sys/cdefs.h>
     37   1.1       cgd #ifndef lint
     38  1.25  christos __COPYRIGHT(
     39   1.8   deraadt "@(#) Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994\n\
     40  1.25  christos 	The Regents of the University of California.  All rights reserved.\n");
     41   1.1       cgd #endif /* not lint */
     42   1.1       cgd 
     43   1.1       cgd #ifndef lint
     44  1.13       cgd #if 0
     45  1.17       cjs static char sccsid[] = "@(#)ftpd.c	8.5 (Berkeley) 4/28/95";
     46  1.13       cgd #else
     47  1.26    mellon __RCSID("$NetBSD: ftpd.c,v 1.26 1997/06/21 04:38:54 mellon Exp $");
     48  1.13       cgd #endif
     49   1.1       cgd #endif /* not lint */
     50   1.1       cgd 
     51   1.1       cgd /*
     52   1.1       cgd  * FTP server.
     53   1.1       cgd  */
     54   1.1       cgd #include <sys/param.h>
     55   1.1       cgd #include <sys/stat.h>
     56   1.1       cgd #include <sys/ioctl.h>
     57   1.1       cgd #include <sys/socket.h>
     58   1.1       cgd #include <sys/wait.h>
     59   1.1       cgd 
     60   1.1       cgd #include <netinet/in.h>
     61   1.1       cgd #include <netinet/in_systm.h>
     62   1.1       cgd #include <netinet/ip.h>
     63   1.1       cgd 
     64   1.1       cgd #define	FTP_NAMES
     65   1.1       cgd #include <arpa/ftp.h>
     66   1.1       cgd #include <arpa/inet.h>
     67   1.1       cgd #include <arpa/telnet.h>
     68   1.1       cgd 
     69   1.8   deraadt #include <ctype.h>
     70   1.1       cgd #include <dirent.h>
     71   1.8   deraadt #include <err.h>
     72   1.8   deraadt #include <errno.h>
     73   1.1       cgd #include <fcntl.h>
     74  1.21       cjs #include <fnmatch.h>
     75   1.8   deraadt #include <glob.h>
     76   1.8   deraadt #include <limits.h>
     77   1.8   deraadt #include <netdb.h>
     78   1.1       cgd #include <pwd.h>
     79   1.1       cgd #include <setjmp.h>
     80   1.8   deraadt #include <signal.h>
     81   1.1       cgd #include <stdio.h>
     82   1.1       cgd #include <stdlib.h>
     83   1.1       cgd #include <string.h>
     84   1.8   deraadt #include <syslog.h>
     85   1.8   deraadt #include <time.h>
     86   1.8   deraadt #include <unistd.h>
     87  1.25  christos #ifdef SKEY
     88  1.25  christos #include <skey.h>
     89  1.25  christos #endif
     90   1.8   deraadt 
     91  1.24     lukem #include "extern.h"
     92   1.1       cgd #include "pathnames.h"
     93   1.1       cgd 
     94   1.8   deraadt #if __STDC__
     95   1.8   deraadt #include <stdarg.h>
     96   1.8   deraadt #else
     97   1.8   deraadt #include <varargs.h>
     98   1.8   deraadt #endif
     99   1.8   deraadt 
    100  1.24     lukem static char version[] = "Version 7.00";
    101   1.8   deraadt 
    102   1.8   deraadt extern	off_t restart_point;
    103   1.1       cgd extern	char cbuf[];
    104  1.25  christos extern  int yyparse __P((void));
    105   1.1       cgd 
    106   1.1       cgd struct	sockaddr_in ctrl_addr;
    107   1.1       cgd struct	sockaddr_in data_source;
    108   1.1       cgd struct	sockaddr_in data_dest;
    109   1.1       cgd struct	sockaddr_in his_addr;
    110   1.1       cgd struct	sockaddr_in pasv_addr;
    111   1.1       cgd 
    112   1.1       cgd int	data;
    113   1.1       cgd jmp_buf	errcatch, urgcatch;
    114   1.1       cgd int	logged_in;
    115   1.1       cgd struct	passwd *pw;
    116   1.1       cgd int	debug;
    117   1.1       cgd int	logging;
    118   1.1       cgd int	guest;
    119   1.5       cgd int	dochroot;
    120   1.1       cgd int	type;
    121   1.1       cgd int	form;
    122   1.1       cgd int	stru;			/* avoid C keyword */
    123   1.1       cgd int	mode;
    124   1.1       cgd int	usedefault = 1;		/* for data transfers */
    125   1.1       cgd int	pdata = -1;		/* for passive mode */
    126   1.8   deraadt sig_atomic_t transflag;
    127   1.1       cgd off_t	file_size;
    128   1.1       cgd off_t	byte_count;
    129   1.1       cgd char	tmpline[7];
    130   1.1       cgd char	hostname[MAXHOSTNAMELEN];
    131   1.1       cgd char	remotehost[MAXHOSTNAMELEN];
    132  1.13       cgd static char ttyline[20];
    133  1.13       cgd char	*tty = ttyline;		/* for klogin */
    134  1.22       cjs static char *anondir = NULL;
    135  1.24     lukem 
    136  1.24     lukem extern struct ftpclass curclass;
    137   1.1       cgd 
    138   1.4       cgd #if defined(KERBEROS)
    139  1.13       cgd int	notickets = 1;
    140  1.13       cgd char	*krbtkfile_env = NULL;
    141   1.4       cgd #endif
    142   1.4       cgd 
    143   1.1       cgd /*
    144   1.1       cgd  * Timeout intervals for retrying connections
    145   1.1       cgd  * to hosts that don't accept PORT cmds.  This
    146   1.1       cgd  * is a kludge, but given the problems with TCP...
    147   1.1       cgd  */
    148   1.1       cgd #define	SWAITMAX	90	/* wait at most 90 seconds */
    149   1.1       cgd #define	SWAITINT	5	/* interval between retries */
    150   1.1       cgd 
    151   1.1       cgd int	swaitmax = SWAITMAX;
    152   1.1       cgd int	swaitint = SWAITINT;
    153   1.1       cgd 
    154   1.6       cgd #ifdef HASSETPROCTITLE
    155   1.1       cgd char	proctitle[BUFSIZ];	/* initial part of title */
    156   1.6       cgd #endif /* HASSETPROCTITLE */
    157   1.1       cgd 
    158   1.8   deraadt #define LOGCMD(cmd, file) \
    159   1.8   deraadt 	if (logging > 1) \
    160   1.8   deraadt 	    syslog(LOG_INFO,"%s %s%s", cmd, \
    161   1.8   deraadt 		*(file) == '/' ? "" : curdir(), file);
    162   1.8   deraadt #define LOGCMD2(cmd, file1, file2) \
    163   1.8   deraadt 	 if (logging > 1) \
    164   1.8   deraadt 	    syslog(LOG_INFO,"%s %s%s %s%s", cmd, \
    165   1.8   deraadt 		*(file1) == '/' ? "" : curdir(), file1, \
    166   1.8   deraadt 		*(file2) == '/' ? "" : curdir(), file2);
    167   1.8   deraadt #define LOGBYTES(cmd, file, cnt) \
    168   1.8   deraadt 	if (logging > 1) { \
    169   1.8   deraadt 		if (cnt == (off_t)-1) \
    170   1.8   deraadt 		    syslog(LOG_INFO,"%s %s%s", cmd, \
    171   1.8   deraadt 			*(file) == '/' ? "" : curdir(), file); \
    172   1.8   deraadt 		else \
    173   1.8   deraadt 		    syslog(LOG_INFO, "%s %s%s = %qd bytes", \
    174   1.8   deraadt 			cmd, (*(file) == '/') ? "" : curdir(), file, cnt); \
    175   1.8   deraadt 	}
    176   1.8   deraadt 
    177   1.8   deraadt static void	 ack __P((char *));
    178   1.8   deraadt static void	 myoob __P((int));
    179   1.8   deraadt static int	 checkuser __P((char *, char *));
    180  1.19       cjs static int	 checkaccess __P((char *));
    181   1.8   deraadt static FILE	*dataconn __P((char *, off_t, char *));
    182   1.8   deraadt static void	 dolog __P((struct sockaddr_in *));
    183   1.8   deraadt static char	*curdir __P((void));
    184   1.8   deraadt static void	 end_login __P((void));
    185   1.8   deraadt static FILE	*getdatasock __P((char *));
    186   1.8   deraadt static char	*gunique __P((char *));
    187   1.8   deraadt static void	 lostconn __P((int));
    188   1.8   deraadt static int	 receive_data __P((FILE *, FILE *));
    189   1.8   deraadt static void	 send_data __P((FILE *, FILE *, off_t));
    190   1.8   deraadt static struct passwd *
    191   1.8   deraadt 		 sgetpwnam __P((char *));
    192   1.8   deraadt static char	*sgetsave __P((char *));
    193   1.8   deraadt 
    194  1.25  christos int main __P((int, char *[], char **));
    195  1.26    mellon 
    196  1.26    mellon #if defined (KERBEROS)
    197  1.26    mellon int  klogin __P((struct passwd *, char *, char *, char *));
    198  1.26    mellon #endif
    199  1.25  christos 
    200   1.8   deraadt static char *
    201   1.8   deraadt curdir()
    202   1.8   deraadt {
    203   1.8   deraadt 	static char path[MAXPATHLEN+1+1];	/* path + '/' + '\0' */
    204   1.8   deraadt 
    205   1.8   deraadt 	if (getcwd(path, sizeof(path)-2) == NULL)
    206   1.8   deraadt 		return ("");
    207   1.8   deraadt 	if (path[1] != '\0')		/* special case for root dir. */
    208   1.8   deraadt 		strcat(path, "/");
    209   1.8   deraadt 	/* For guest account, skip / since it's chrooted */
    210   1.8   deraadt 	return (guest ? path+1 : path);
    211   1.8   deraadt }
    212   1.8   deraadt 
    213   1.8   deraadt int
    214   1.1       cgd main(argc, argv, envp)
    215   1.1       cgd 	int argc;
    216   1.1       cgd 	char *argv[];
    217   1.1       cgd 	char **envp;
    218   1.1       cgd {
    219   1.8   deraadt 	int addrlen, ch, on = 1, tos;
    220   1.8   deraadt 	char *cp, line[LINE_MAX];
    221   1.8   deraadt 	FILE *fd;
    222   1.1       cgd 
    223   1.1       cgd 	/*
    224   1.1       cgd 	 * LOG_NDELAY sets up the logging connection immediately,
    225   1.1       cgd 	 * necessary for anonymous ftp's that chroot and can't do it later.
    226   1.1       cgd 	 */
    227   1.8   deraadt 	openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP);
    228   1.8   deraadt 	addrlen = sizeof(his_addr);
    229   1.1       cgd 	if (getpeername(0, (struct sockaddr *)&his_addr, &addrlen) < 0) {
    230   1.1       cgd 		syslog(LOG_ERR, "getpeername (%s): %m",argv[0]);
    231   1.1       cgd 		exit(1);
    232   1.1       cgd 	}
    233   1.8   deraadt 	addrlen = sizeof(ctrl_addr);
    234   1.1       cgd 	if (getsockname(0, (struct sockaddr *)&ctrl_addr, &addrlen) < 0) {
    235   1.1       cgd 		syslog(LOG_ERR, "getsockname (%s): %m",argv[0]);
    236   1.1       cgd 		exit(1);
    237   1.1       cgd 	}
    238   1.1       cgd #ifdef IP_TOS
    239   1.1       cgd 	tos = IPTOS_LOWDELAY;
    240   1.1       cgd 	if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&tos, sizeof(int)) < 0)
    241   1.1       cgd 		syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
    242   1.1       cgd #endif
    243   1.1       cgd 	data_source.sin_port = htons(ntohs(ctrl_addr.sin_port) - 1);
    244   1.1       cgd 	debug = 0;
    245   1.1       cgd 
    246  1.11    brezak 	/* set this here so klogin can use it... */
    247  1.11    brezak 	(void)sprintf(ttyline, "ftp%d", getpid());
    248  1.11    brezak 
    249  1.22       cjs 	while ((ch = getopt(argc, argv, "a:dlt:T:u:v")) != EOF) {
    250   1.8   deraadt 		switch (ch) {
    251  1.22       cjs 		case 'a':
    252  1.22       cjs 			anondir = optarg;
    253  1.22       cjs 			break;
    254  1.22       cjs 
    255   1.1       cgd 		case 'd':
    256  1.22       cjs 		case 'v':		/* deprecated */
    257   1.1       cgd 			debug = 1;
    258   1.1       cgd 			break;
    259   1.1       cgd 
    260   1.1       cgd 		case 'l':
    261   1.8   deraadt 			logging++;	/* > 1 == extra logging */
    262   1.1       cgd 			break;
    263   1.1       cgd 
    264   1.1       cgd 		case 't':
    265   1.1       cgd 		case 'T':
    266   1.1       cgd 		case 'u':
    267  1.24     lukem 			warnx("-%c has be deprecated in favour of ftpd.conf",
    268  1.24     lukem 			    ch);
    269   1.8   deraadt 			break;
    270   1.1       cgd 
    271   1.1       cgd 		default:
    272   1.8   deraadt 			warnx("unknown flag -%c ignored", optopt);
    273   1.1       cgd 			break;
    274   1.1       cgd 		}
    275   1.1       cgd 	}
    276   1.1       cgd 	(void) freopen(_PATH_DEVNULL, "w", stderr);
    277   1.1       cgd 	(void) signal(SIGPIPE, lostconn);
    278   1.1       cgd 	(void) signal(SIGCHLD, SIG_IGN);
    279  1.10       cgd 	if ((long)signal(SIGURG, myoob) < 0)
    280   1.1       cgd 		syslog(LOG_ERR, "signal: %m");
    281   1.1       cgd 
    282   1.1       cgd 	/* Try to handle urgent data inline */
    283   1.1       cgd #ifdef SO_OOBINLINE
    284   1.1       cgd 	if (setsockopt(0, SOL_SOCKET, SO_OOBINLINE, (char *)&on, sizeof(on)) < 0)
    285   1.1       cgd 		syslog(LOG_ERR, "setsockopt: %m");
    286   1.1       cgd #endif
    287   1.1       cgd 
    288   1.1       cgd #ifdef	F_SETOWN
    289   1.1       cgd 	if (fcntl(fileno(stdin), F_SETOWN, getpid()) == -1)
    290   1.1       cgd 		syslog(LOG_ERR, "fcntl F_SETOWN: %m");
    291   1.1       cgd #endif
    292   1.1       cgd 	dolog(&his_addr);
    293   1.1       cgd 	/*
    294   1.1       cgd 	 * Set up default state
    295   1.1       cgd 	 */
    296   1.1       cgd 	data = -1;
    297   1.1       cgd 	type = TYPE_A;
    298   1.1       cgd 	form = FORM_N;
    299   1.1       cgd 	stru = STRU_F;
    300   1.1       cgd 	mode = MODE_S;
    301   1.1       cgd 	tmpline[0] = '\0';
    302   1.8   deraadt 
    303   1.8   deraadt 	/* If logins are disabled, print out the message. */
    304   1.8   deraadt 	if ((fd = fopen(_PATH_NOLOGIN,"r")) != NULL) {
    305   1.8   deraadt 		while (fgets(line, sizeof(line), fd) != NULL) {
    306   1.8   deraadt 			if ((cp = strchr(line, '\n')) != NULL)
    307   1.8   deraadt 				*cp = '\0';
    308   1.8   deraadt 			lreply(530, "%s", line);
    309   1.8   deraadt 		}
    310   1.8   deraadt 		(void) fflush(stdout);
    311   1.8   deraadt 		(void) fclose(fd);
    312   1.8   deraadt 		reply(530, "System not available.");
    313   1.8   deraadt 		exit(0);
    314   1.8   deraadt 	}
    315   1.8   deraadt 	if ((fd = fopen(_PATH_FTPWELCOME, "r")) != NULL) {
    316   1.8   deraadt 		while (fgets(line, sizeof(line), fd) != NULL) {
    317   1.8   deraadt 			if ((cp = strchr(line, '\n')) != NULL)
    318   1.8   deraadt 				*cp = '\0';
    319   1.8   deraadt 			lreply(220, "%s", line);
    320   1.8   deraadt 		}
    321   1.8   deraadt 		(void) fflush(stdout);
    322   1.8   deraadt 		(void) fclose(fd);
    323   1.8   deraadt 		/* reply(220,) must follow */
    324   1.8   deraadt 	}
    325   1.8   deraadt 	(void) gethostname(hostname, sizeof(hostname));
    326   1.1       cgd 	reply(220, "%s FTP server (%s) ready.", hostname, version);
    327   1.1       cgd 	(void) setjmp(errcatch);
    328   1.1       cgd 	for (;;)
    329   1.1       cgd 		(void) yyparse();
    330   1.1       cgd 	/* NOTREACHED */
    331   1.1       cgd }
    332   1.1       cgd 
    333   1.8   deraadt static void
    334   1.8   deraadt lostconn(signo)
    335   1.8   deraadt 	int signo;
    336   1.1       cgd {
    337   1.8   deraadt 
    338   1.1       cgd 	if (debug)
    339   1.1       cgd 		syslog(LOG_DEBUG, "lost connection");
    340   1.1       cgd 	dologout(-1);
    341   1.1       cgd }
    342   1.1       cgd 
    343   1.1       cgd /*
    344   1.1       cgd  * Helper function for sgetpwnam().
    345   1.1       cgd  */
    346   1.8   deraadt static char *
    347   1.1       cgd sgetsave(s)
    348   1.1       cgd 	char *s;
    349   1.1       cgd {
    350   1.1       cgd 	char *new = malloc((unsigned) strlen(s) + 1);
    351   1.1       cgd 
    352   1.1       cgd 	if (new == NULL) {
    353   1.1       cgd 		perror_reply(421, "Local resource failure: malloc");
    354   1.1       cgd 		dologout(1);
    355   1.1       cgd 		/* NOTREACHED */
    356   1.1       cgd 	}
    357   1.1       cgd 	(void) strcpy(new, s);
    358   1.1       cgd 	return (new);
    359   1.1       cgd }
    360   1.1       cgd 
    361   1.1       cgd /*
    362   1.1       cgd  * Save the result of a getpwnam.  Used for USER command, since
    363   1.1       cgd  * the data returned must not be clobbered by any other command
    364   1.1       cgd  * (e.g., globbing).
    365   1.1       cgd  */
    366   1.8   deraadt static struct passwd *
    367   1.1       cgd sgetpwnam(name)
    368   1.1       cgd 	char *name;
    369   1.1       cgd {
    370   1.1       cgd 	static struct passwd save;
    371   1.8   deraadt 	struct passwd *p;
    372   1.1       cgd 
    373   1.1       cgd 	if ((p = getpwnam(name)) == NULL)
    374   1.1       cgd 		return (p);
    375   1.1       cgd 	if (save.pw_name) {
    376   1.1       cgd 		free(save.pw_name);
    377   1.1       cgd 		free(save.pw_passwd);
    378   1.1       cgd 		free(save.pw_gecos);
    379   1.1       cgd 		free(save.pw_dir);
    380   1.1       cgd 		free(save.pw_shell);
    381   1.1       cgd 	}
    382   1.1       cgd 	save = *p;
    383   1.1       cgd 	save.pw_name = sgetsave(p->pw_name);
    384   1.1       cgd 	save.pw_passwd = sgetsave(p->pw_passwd);
    385   1.1       cgd 	save.pw_gecos = sgetsave(p->pw_gecos);
    386   1.1       cgd 	save.pw_dir = sgetsave(p->pw_dir);
    387   1.1       cgd 	save.pw_shell = sgetsave(p->pw_shell);
    388   1.1       cgd 	return (&save);
    389   1.1       cgd }
    390   1.1       cgd 
    391   1.8   deraadt static int login_attempts;	/* number of failed login attempts */
    392   1.8   deraadt static int askpasswd;		/* had user command, ask for passwd */
    393   1.8   deraadt static char curname[10];	/* current USER name */
    394   1.1       cgd 
    395   1.1       cgd /*
    396   1.1       cgd  * USER command.
    397   1.1       cgd  * Sets global passwd pointer pw if named account exists and is acceptable;
    398   1.1       cgd  * sets askpasswd if a PASS command is expected.  If logged in previously,
    399   1.1       cgd  * need to reset state.  If name is "ftp" or "anonymous", the name is not in
    400   1.1       cgd  * _PATH_FTPUSERS, and ftp account exists, set guest and pw, then just return.
    401   1.1       cgd  * If account doesn't exist, ask for passwd anyway.  Otherwise, check user
    402   1.1       cgd  * requesting login privileges.  Disallow anyone who does not have a standard
    403   1.1       cgd  * shell as returned by getusershell().  Disallow anyone mentioned in the file
    404   1.1       cgd  * _PATH_FTPUSERS to allow people such as root and uucp to be avoided.
    405   1.1       cgd  */
    406   1.8   deraadt void
    407   1.1       cgd user(name)
    408   1.1       cgd 	char *name;
    409   1.1       cgd {
    410   1.1       cgd 	if (logged_in) {
    411   1.1       cgd 		if (guest) {
    412   1.1       cgd 			reply(530, "Can't change user from guest login.");
    413   1.1       cgd 			return;
    414   1.5       cgd 		} else if (dochroot) {
    415   1.5       cgd 			reply(530, "Can't change user from chroot user.");
    416   1.5       cgd 			return;
    417   1.1       cgd 		}
    418   1.1       cgd 		end_login();
    419   1.1       cgd 	}
    420   1.1       cgd 
    421   1.1       cgd 	guest = 0;
    422   1.1       cgd 	if (strcmp(name, "ftp") == 0 || strcmp(name, "anonymous") == 0) {
    423  1.19       cjs 		if (checkaccess("ftp") || checkaccess("anonymous"))
    424   1.1       cgd 			reply(530, "User %s access denied.", name);
    425   1.1       cgd 		else if ((pw = sgetpwnam("ftp")) != NULL) {
    426   1.1       cgd 			guest = 1;
    427   1.1       cgd 			askpasswd = 1;
    428   1.8   deraadt 			reply(331,
    429   1.8   deraadt 			    "Guest login ok, type your name as password.");
    430   1.1       cgd 		} else
    431   1.1       cgd 			reply(530, "User %s unknown.", name);
    432   1.8   deraadt 		if (!askpasswd && logging)
    433   1.8   deraadt 			syslog(LOG_NOTICE,
    434   1.8   deraadt 			    "ANONYMOUS FTP LOGIN REFUSED FROM %s", remotehost);
    435   1.1       cgd 		return;
    436   1.1       cgd 	}
    437  1.19       cjs 	pw = sgetpwnam(name);
    438   1.8   deraadt 	if (logging)
    439   1.8   deraadt 		strncpy(curname, name, sizeof(curname)-1);
    440   1.7   deraadt #ifdef SKEY
    441   1.8   deraadt 	if (!skey_haskey(name)) {
    442   1.8   deraadt 		char *myskey, *skey_keyinfo __P((char *name));
    443   1.7   deraadt 
    444   1.8   deraadt 		myskey = skey_keyinfo(name);
    445   1.7   deraadt 		reply(331, "Password [%s] for %s required.",
    446   1.8   deraadt 		    myskey ? myskey : "error getting challenge", name);
    447   1.7   deraadt 	} else
    448   1.7   deraadt #endif
    449   1.7   deraadt 		reply(331, "Password required for %s.", name);
    450   1.7   deraadt 
    451   1.1       cgd 	askpasswd = 1;
    452   1.1       cgd 	/*
    453   1.1       cgd 	 * Delay before reading passwd after first failed
    454   1.1       cgd 	 * attempt to slow down passwd-guessing programs.
    455   1.1       cgd 	 */
    456   1.1       cgd 	if (login_attempts)
    457   1.1       cgd 		sleep((unsigned) login_attempts);
    458   1.1       cgd }
    459   1.1       cgd 
    460   1.1       cgd /*
    461   1.5       cgd  * Check if a user is in the file "fname"
    462   1.1       cgd  */
    463   1.8   deraadt static int
    464   1.5       cgd checkuser(fname, name)
    465   1.5       cgd 	char *fname;
    466   1.1       cgd 	char *name;
    467   1.1       cgd {
    468   1.8   deraadt 	FILE *fd;
    469   1.8   deraadt 	int found = 0;
    470   1.8   deraadt 	char *p, line[BUFSIZ];
    471   1.1       cgd 
    472   1.5       cgd 	if ((fd = fopen(fname, "r")) != NULL) {
    473   1.1       cgd 		while (fgets(line, sizeof(line), fd) != NULL)
    474   1.8   deraadt 			if ((p = strchr(line, '\n')) != NULL) {
    475   1.1       cgd 				*p = '\0';
    476   1.1       cgd 				if (line[0] == '#')
    477   1.1       cgd 					continue;
    478   1.9       jtc 				if (strcmp(line, name) == 0) {
    479   1.8   deraadt 					found = 1;
    480   1.8   deraadt 					break;
    481   1.8   deraadt 				}
    482   1.1       cgd 			}
    483   1.1       cgd 		(void) fclose(fd);
    484   1.1       cgd 	}
    485   1.8   deraadt 	return (found);
    486   1.1       cgd }
    487   1.1       cgd 
    488   1.1       cgd /*
    489  1.19       cjs  * Determine whether a user has access, based on information in
    490  1.21       cjs  * _PATH_FTPUSERS. Each line is a shell-style glob followed by
    491  1.21       cjs  * `allow' or `deny' (with deny being the default if anything but
    492  1.21       cjs  * `allow', or nothing at all, is specified).
    493  1.19       cjs  *
    494  1.21       cjs  * Each glob is matched against the username in turn, and the first
    495  1.21       cjs  * match found is used. If no match is found, access is allowed.
    496  1.21       cjs  *
    497  1.21       cjs  * Any line starting with `#' is considered a comment and ignored.
    498  1.19       cjs  *
    499  1.19       cjs  * This is probably not the best way to do this, but it preserves
    500  1.19       cjs  * the old semantics where if a user was listed in the file he was
    501  1.19       cjs  * denied, otherwise he was allowed.
    502  1.19       cjs  *
    503  1.19       cjs  * There is one change in the semantics, however; ftpd will now `fail
    504  1.19       cjs  * safe' and deny all access if there's no /etc/ftpusers file.
    505  1.19       cjs  *
    506  1.19       cjs  * Return 1 if the user is denied, or 0 if he is allowed.
    507  1.19       cjs  */
    508  1.19       cjs static int
    509  1.19       cjs checkaccess(name)
    510  1.19       cjs 	char *name;
    511  1.19       cjs {
    512  1.19       cjs #define ALLOWED		0
    513  1.19       cjs #define	NOT_ALLOWED	1
    514  1.19       cjs 	FILE *fd;
    515  1.21       cjs 	int retval = ALLOWED;
    516  1.21       cjs 	char *glob, *perm, line[BUFSIZ];
    517  1.19       cjs 
    518  1.19       cjs 	if ((fd = fopen(_PATH_FTPUSERS, "r")) == NULL)
    519  1.19       cjs 		return NOT_ALLOWED;
    520  1.19       cjs 
    521  1.19       cjs 	while (fgets(line, sizeof(line), fd) != NULL)  {
    522  1.21       cjs 		glob = strtok(line, " \t\n");
    523  1.21       cjs 		if (glob[0] == '#')
    524  1.19       cjs 			continue;
    525  1.19       cjs 		perm = strtok(NULL, " \t\n");
    526  1.21       cjs 		if (fnmatch(glob, name, 0) == 0)  {
    527  1.19       cjs 			if (perm != NULL && strcmp(perm, "allow") == 0)
    528  1.21       cjs 				retval = ALLOWED;
    529  1.19       cjs 			else
    530  1.21       cjs 				retval = NOT_ALLOWED;
    531  1.21       cjs 			break;
    532  1.19       cjs 		}
    533  1.19       cjs 	}
    534  1.19       cjs 	(void) fclose(fd);
    535  1.21       cjs 	return (retval);
    536  1.21       cjs 
    537  1.19       cjs }
    538  1.19       cjs #undef	ALLOWED
    539  1.19       cjs #undef	NOT_ALLOWED
    540  1.19       cjs 
    541  1.19       cjs /*
    542   1.1       cgd  * Terminate login as previous user, if any, resetting state;
    543   1.1       cgd  * used when USER command is given or login fails.
    544   1.1       cgd  */
    545   1.8   deraadt static void
    546   1.1       cgd end_login()
    547   1.1       cgd {
    548   1.1       cgd 
    549   1.1       cgd 	(void) seteuid((uid_t)0);
    550   1.1       cgd 	if (logged_in)
    551   1.1       cgd 		logwtmp(ttyline, "", "");
    552   1.1       cgd 	pw = NULL;
    553   1.1       cgd 	logged_in = 0;
    554   1.1       cgd 	guest = 0;
    555   1.5       cgd 	dochroot = 0;
    556   1.1       cgd }
    557   1.1       cgd 
    558   1.8   deraadt void
    559   1.1       cgd pass(passwd)
    560   1.1       cgd 	char *passwd;
    561   1.1       cgd {
    562   1.4       cgd 	int rval;
    563   1.8   deraadt 	FILE *fd;
    564  1.19       cjs 	char *cp, *shell;
    565   1.1       cgd 
    566   1.1       cgd 	if (logged_in || askpasswd == 0) {
    567   1.1       cgd 		reply(503, "Login with USER first.");
    568   1.1       cgd 		return;
    569   1.1       cgd 	}
    570   1.1       cgd 	askpasswd = 0;
    571   1.1       cgd 	if (!guest) {		/* "ftp" is only account allowed no password */
    572   1.8   deraadt 		if (pw == NULL) {
    573   1.8   deraadt 			rval = 1;	/* failure below */
    574   1.8   deraadt 			goto skip;
    575   1.8   deraadt 		}
    576   1.4       cgd #if defined(KERBEROS)
    577   1.8   deraadt 		rval = klogin(pw, "", hostname, passwd);
    578   1.8   deraadt 		if (rval == 0)
    579   1.8   deraadt 			goto skip;
    580   1.4       cgd #endif
    581   1.7   deraadt #ifdef SKEY
    582   1.8   deraadt 		if (skey_haskey(pw->pw_name) == 0 &&
    583   1.8   deraadt 		   (skey_passcheck(pw->pw_name, passwd) != -1)) {
    584   1.8   deraadt 			rval = 0;
    585   1.8   deraadt 			goto skip;
    586   1.8   deraadt 		}
    587   1.7   deraadt #endif
    588   1.8   deraadt 		/* the strcmp does not catch null passwords! */
    589   1.8   deraadt 		if (pw == NULL || *pw->pw_passwd == '\0' ||
    590   1.8   deraadt 		    strcmp(crypt(passwd, (pw ? pw->pw_passwd : "xx")), pw->pw_passwd)) {
    591   1.8   deraadt 			rval = 1;	 /* failure */
    592   1.8   deraadt 			goto skip;
    593   1.7   deraadt 		}
    594   1.8   deraadt 		rval = 0;
    595   1.4       cgd 
    596   1.8   deraadt skip:
    597   1.4       cgd 		/*
    598   1.4       cgd 		 * If rval == 1, the user failed the authentication check
    599   1.4       cgd 		 * above.  If rval == 0, either Kerberos or local authentication
    600   1.4       cgd 		 * succeeded.
    601   1.4       cgd 		 */
    602   1.4       cgd 		if (rval) {
    603   1.1       cgd 			reply(530, "Login incorrect.");
    604  1.23     lukem 			if (logging) {
    605   1.8   deraadt 				syslog(LOG_NOTICE,
    606  1.23     lukem 				    "FTP LOGIN FAILED FROM %s", remotehost);
    607  1.23     lukem 				syslog(LOG_AUTHPRIV | LOG_NOTICE,
    608   1.8   deraadt 				    "FTP LOGIN FAILED FROM %s, %s",
    609   1.8   deraadt 				    remotehost, curname);
    610  1.23     lukem 			}
    611   1.1       cgd 			pw = NULL;
    612   1.1       cgd 			if (login_attempts++ >= 5) {
    613   1.1       cgd 				syslog(LOG_NOTICE,
    614   1.1       cgd 				    "repeated login failures from %s",
    615   1.1       cgd 				    remotehost);
    616   1.1       cgd 				exit(0);
    617   1.1       cgd 			}
    618   1.1       cgd 			return;
    619   1.1       cgd 		}
    620   1.1       cgd 	}
    621  1.19       cjs 
    622  1.19       cjs 	/* password was ok; see if anything else prevents login */
    623  1.19       cjs 	if (checkaccess(pw->pw_name))  {
    624  1.19       cjs 		reply(530, "User %s may not use FTP.", pw->pw_name);
    625  1.19       cjs 		if (logging)
    626  1.19       cjs 			syslog(LOG_NOTICE, "FTP LOGIN REFUSED FROM %s, %s",
    627  1.19       cjs 			    remotehost, pw->pw_name);
    628  1.19       cjs 		pw = (struct passwd *) NULL;
    629  1.19       cjs 		return;
    630  1.19       cjs 	}
    631  1.19       cjs 	/* check for valid shell, if not guest user */
    632  1.19       cjs 	if ((shell = pw->pw_shell) == NULL || *shell == 0)
    633  1.19       cjs 		shell = _PATH_BSHELL;
    634  1.19       cjs 	while ((cp = getusershell()) != NULL)
    635  1.19       cjs 		if (strcmp(cp, shell) == 0)
    636  1.19       cjs 			break;
    637  1.19       cjs 	endusershell();
    638  1.19       cjs 	if (cp == NULL && guest == 0) {
    639  1.19       cjs 		reply(530, "User %s may not use FTP.", pw->pw_name);
    640  1.19       cjs 		if (logging)
    641  1.19       cjs 			syslog(LOG_NOTICE,
    642  1.19       cjs 			    "FTP LOGIN REFUSED FROM %s, %s",
    643  1.19       cjs 			    remotehost, pw->pw_name);
    644  1.19       cjs 		pw = (struct passwd *) NULL;
    645  1.19       cjs 		return;
    646  1.19       cjs 	}
    647  1.19       cjs 
    648   1.1       cgd 	login_attempts = 0;		/* this time successful */
    649   1.8   deraadt 	if (setegid((gid_t)pw->pw_gid) < 0) {
    650   1.8   deraadt 		reply(550, "Can't set gid.");
    651   1.8   deraadt 		return;
    652   1.8   deraadt 	}
    653   1.1       cgd 	(void) initgroups(pw->pw_name, pw->pw_gid);
    654   1.1       cgd 
    655   1.1       cgd 	/* open wtmp before chroot */
    656   1.1       cgd 	logwtmp(ttyline, pw->pw_name, remotehost);
    657   1.1       cgd 	logged_in = 1;
    658   1.1       cgd 
    659   1.5       cgd 	dochroot = checkuser(_PATH_FTPCHROOT, pw->pw_name);
    660  1.24     lukem 
    661  1.24     lukem 	/* parse ftpd.conf, setting up various parameters */
    662  1.24     lukem 	if (guest)
    663  1.24     lukem 		parse_conf(CLASS_GUEST);
    664  1.24     lukem 	else if (dochroot)
    665  1.24     lukem 		parse_conf(CLASS_CHROOT);
    666  1.24     lukem 	else
    667  1.24     lukem 		parse_conf(CLASS_REAL);
    668  1.24     lukem 
    669   1.1       cgd 	if (guest) {
    670   1.1       cgd 		/*
    671   1.1       cgd 		 * We MUST do a chdir() after the chroot. Otherwise
    672   1.1       cgd 		 * the old current directory will be accessible as "."
    673   1.1       cgd 		 * outside the new root!
    674   1.1       cgd 		 */
    675  1.24     lukem 		if (chroot(anondir ? anondir : pw->pw_dir) < 0 ||
    676  1.24     lukem 		    chdir("/") < 0) {
    677   1.1       cgd 			reply(550, "Can't set guest privileges.");
    678   1.5       cgd 			goto bad;
    679   1.5       cgd 		}
    680   1.5       cgd 	} else if (dochroot) {
    681   1.5       cgd 		if (chroot(pw->pw_dir) < 0 || chdir("/") < 0) {
    682   1.5       cgd 			reply(550, "Can't change root.");
    683   1.1       cgd 			goto bad;
    684   1.1       cgd 		}
    685   1.1       cgd 	} else if (chdir(pw->pw_dir) < 0) {
    686   1.1       cgd 		if (chdir("/") < 0) {
    687   1.1       cgd 			reply(530, "User %s: can't change directory to %s.",
    688   1.1       cgd 			    pw->pw_name, pw->pw_dir);
    689   1.1       cgd 			goto bad;
    690   1.1       cgd 		} else
    691   1.1       cgd 			lreply(230, "No directory! Logging in with home=/");
    692   1.1       cgd 	}
    693   1.1       cgd 	if (seteuid((uid_t)pw->pw_uid) < 0) {
    694   1.1       cgd 		reply(550, "Can't set uid.");
    695   1.1       cgd 		goto bad;
    696   1.1       cgd 	}
    697   1.8   deraadt 	/*
    698   1.8   deraadt 	 * Display a login message, if it exists.
    699   1.8   deraadt 	 * N.B. reply(230,) must follow the message.
    700   1.8   deraadt 	 */
    701   1.8   deraadt 	if ((fd = fopen(_PATH_FTPLOGINMESG, "r")) != NULL) {
    702   1.8   deraadt 		char *cp, line[LINE_MAX];
    703   1.8   deraadt 
    704   1.8   deraadt 		while (fgets(line, sizeof(line), fd) != NULL) {
    705   1.8   deraadt 			if ((cp = strchr(line, '\n')) != NULL)
    706   1.8   deraadt 				*cp = '\0';
    707   1.8   deraadt 			lreply(230, "%s", line);
    708   1.8   deraadt 		}
    709   1.8   deraadt 		(void) fflush(stdout);
    710   1.8   deraadt 		(void) fclose(fd);
    711   1.8   deraadt 	}
    712  1.24     lukem 	show_chdir_messages(230);
    713   1.1       cgd 	if (guest) {
    714   1.1       cgd 		reply(230, "Guest login ok, access restrictions apply.");
    715   1.6       cgd #ifdef HASSETPROCTITLE
    716   1.8   deraadt 		snprintf(proctitle, sizeof(proctitle),
    717   1.8   deraadt 		    "%s: anonymous/%.*s", remotehost,
    718  1.25  christos 		    (int) (sizeof(proctitle) - sizeof(remotehost) -
    719  1.25  christos 		    sizeof(": anonymous/")), passwd);
    720   1.1       cgd 		setproctitle(proctitle);
    721   1.6       cgd #endif /* HASSETPROCTITLE */
    722   1.1       cgd 		if (logging)
    723   1.1       cgd 			syslog(LOG_INFO, "ANONYMOUS FTP LOGIN FROM %s, %s",
    724   1.1       cgd 			    remotehost, passwd);
    725   1.1       cgd 	} else {
    726   1.1       cgd 		reply(230, "User %s logged in.", pw->pw_name);
    727   1.6       cgd #ifdef HASSETPROCTITLE
    728   1.8   deraadt 		snprintf(proctitle, sizeof(proctitle),
    729   1.8   deraadt 		    "%s: %s", remotehost, pw->pw_name);
    730   1.1       cgd 		setproctitle(proctitle);
    731   1.6       cgd #endif /* HASSETPROCTITLE */
    732   1.1       cgd 		if (logging)
    733   1.8   deraadt 			syslog(LOG_INFO, "FTP LOGIN FROM %s as %s",
    734   1.1       cgd 			    remotehost, pw->pw_name);
    735   1.1       cgd 	}
    736  1.24     lukem 	(void) umask(curclass.umask);
    737   1.1       cgd 	return;
    738   1.1       cgd bad:
    739   1.1       cgd 	/* Forget all about it... */
    740   1.1       cgd 	end_login();
    741   1.1       cgd }
    742   1.1       cgd 
    743   1.8   deraadt void
    744   1.1       cgd retrieve(cmd, name)
    745   1.1       cgd 	char *cmd, *name;
    746   1.1       cgd {
    747   1.1       cgd 	FILE *fin, *dout;
    748   1.1       cgd 	struct stat st;
    749   1.8   deraadt 	int (*closefunc) __P((FILE *));
    750  1.24     lukem 	int log;
    751   1.1       cgd 
    752  1.24     lukem 	log = (cmd == 0);
    753   1.1       cgd 	if (cmd == 0) {
    754   1.1       cgd 		fin = fopen(name, "r"), closefunc = fclose;
    755  1.24     lukem 		if (fin == NULL)
    756  1.24     lukem 			cmd = do_conversion(name);
    757  1.24     lukem 	}
    758  1.24     lukem 	if (cmd) {
    759   1.1       cgd 		char line[BUFSIZ];
    760   1.1       cgd 
    761   1.1       cgd 		(void) sprintf(line, cmd, name), name = line;
    762  1.24     lukem 		fin = ftpd_popen(line, "r", 1), closefunc = ftpd_pclose;
    763   1.1       cgd 		st.st_size = -1;
    764   1.1       cgd 		st.st_blksize = BUFSIZ;
    765   1.1       cgd 	}
    766   1.1       cgd 	if (fin == NULL) {
    767   1.8   deraadt 		if (errno != 0) {
    768   1.1       cgd 			perror_reply(550, name);
    769  1.24     lukem 			if (log) {
    770   1.8   deraadt 				LOGCMD("get", name);
    771   1.8   deraadt 			}
    772   1.8   deraadt 		}
    773   1.1       cgd 		return;
    774   1.1       cgd 	}
    775   1.8   deraadt 	byte_count = -1;
    776   1.8   deraadt 	if (cmd == 0 && (fstat(fileno(fin), &st) < 0 || !S_ISREG(st.st_mode))) {
    777   1.1       cgd 		reply(550, "%s: not a plain file.", name);
    778   1.1       cgd 		goto done;
    779   1.1       cgd 	}
    780   1.1       cgd 	if (restart_point) {
    781   1.1       cgd 		if (type == TYPE_A) {
    782   1.8   deraadt 			off_t i, n;
    783   1.8   deraadt 			int c;
    784   1.1       cgd 
    785   1.1       cgd 			n = restart_point;
    786   1.1       cgd 			i = 0;
    787   1.1       cgd 			while (i++ < n) {
    788   1.1       cgd 				if ((c=getc(fin)) == EOF) {
    789   1.1       cgd 					perror_reply(550, name);
    790   1.1       cgd 					goto done;
    791   1.1       cgd 				}
    792   1.1       cgd 				if (c == '\n')
    793   1.1       cgd 					i++;
    794   1.8   deraadt 			}
    795   1.1       cgd 		} else if (lseek(fileno(fin), restart_point, L_SET) < 0) {
    796   1.1       cgd 			perror_reply(550, name);
    797   1.1       cgd 			goto done;
    798   1.1       cgd 		}
    799   1.1       cgd 	}
    800   1.1       cgd 	dout = dataconn(name, st.st_size, "w");
    801   1.1       cgd 	if (dout == NULL)
    802   1.1       cgd 		goto done;
    803   1.1       cgd 	send_data(fin, dout, st.st_blksize);
    804   1.1       cgd 	(void) fclose(dout);
    805   1.1       cgd 	data = -1;
    806   1.1       cgd 	pdata = -1;
    807   1.1       cgd done:
    808  1.24     lukem 	if (log)
    809   1.8   deraadt 		LOGBYTES("get", name, byte_count);
    810   1.1       cgd 	(*closefunc)(fin);
    811   1.1       cgd }
    812   1.1       cgd 
    813   1.8   deraadt void
    814   1.1       cgd store(name, mode, unique)
    815   1.1       cgd 	char *name, *mode;
    816   1.1       cgd 	int unique;
    817   1.1       cgd {
    818   1.1       cgd 	FILE *fout, *din;
    819   1.1       cgd 	struct stat st;
    820   1.8   deraadt 	int (*closefunc) __P((FILE *));
    821   1.1       cgd 
    822   1.1       cgd 	if (unique && stat(name, &st) == 0 &&
    823   1.8   deraadt 	    (name = gunique(name)) == NULL) {
    824   1.8   deraadt 		LOGCMD(*mode == 'w' ? "put" : "append", name);
    825   1.1       cgd 		return;
    826   1.8   deraadt 	}
    827   1.1       cgd 
    828   1.1       cgd 	if (restart_point)
    829   1.8   deraadt 		mode = "r+";
    830   1.1       cgd 	fout = fopen(name, mode);
    831   1.1       cgd 	closefunc = fclose;
    832   1.1       cgd 	if (fout == NULL) {
    833   1.1       cgd 		perror_reply(553, name);
    834   1.8   deraadt 		LOGCMD(*mode == 'w' ? "put" : "append", name);
    835   1.1       cgd 		return;
    836   1.1       cgd 	}
    837   1.8   deraadt 	byte_count = -1;
    838   1.1       cgd 	if (restart_point) {
    839   1.1       cgd 		if (type == TYPE_A) {
    840   1.8   deraadt 			off_t i, n;
    841   1.8   deraadt 			int c;
    842   1.1       cgd 
    843   1.1       cgd 			n = restart_point;
    844   1.1       cgd 			i = 0;
    845   1.1       cgd 			while (i++ < n) {
    846   1.1       cgd 				if ((c=getc(fout)) == EOF) {
    847   1.1       cgd 					perror_reply(550, name);
    848   1.1       cgd 					goto done;
    849   1.1       cgd 				}
    850   1.1       cgd 				if (c == '\n')
    851   1.1       cgd 					i++;
    852   1.8   deraadt 			}
    853   1.1       cgd 			/*
    854   1.1       cgd 			 * We must do this seek to "current" position
    855   1.1       cgd 			 * because we are changing from reading to
    856   1.1       cgd 			 * writing.
    857   1.1       cgd 			 */
    858  1.20     lukem 			if (fseek(fout, 0L, SEEK_CUR) < 0) {
    859   1.1       cgd 				perror_reply(550, name);
    860   1.1       cgd 				goto done;
    861   1.1       cgd 			}
    862   1.1       cgd 		} else if (lseek(fileno(fout), restart_point, L_SET) < 0) {
    863   1.1       cgd 			perror_reply(550, name);
    864   1.1       cgd 			goto done;
    865   1.1       cgd 		}
    866   1.1       cgd 	}
    867   1.1       cgd 	din = dataconn(name, (off_t)-1, "r");
    868   1.1       cgd 	if (din == NULL)
    869   1.1       cgd 		goto done;
    870   1.1       cgd 	if (receive_data(din, fout) == 0) {
    871   1.1       cgd 		if (unique)
    872   1.1       cgd 			reply(226, "Transfer complete (unique file name:%s).",
    873   1.1       cgd 			    name);
    874   1.1       cgd 		else
    875   1.1       cgd 			reply(226, "Transfer complete.");
    876   1.1       cgd 	}
    877   1.1       cgd 	(void) fclose(din);
    878   1.1       cgd 	data = -1;
    879   1.1       cgd 	pdata = -1;
    880   1.1       cgd done:
    881   1.8   deraadt 	LOGBYTES(*mode == 'w' ? "put" : "append", name, byte_count);
    882   1.1       cgd 	(*closefunc)(fout);
    883   1.1       cgd }
    884   1.1       cgd 
    885   1.8   deraadt static FILE *
    886   1.1       cgd getdatasock(mode)
    887   1.1       cgd 	char *mode;
    888   1.1       cgd {
    889   1.8   deraadt 	int on = 1, s, t, tries;
    890   1.1       cgd 
    891   1.1       cgd 	if (data >= 0)
    892   1.1       cgd 		return (fdopen(data, mode));
    893   1.1       cgd 	(void) seteuid((uid_t)0);
    894   1.1       cgd 	s = socket(AF_INET, SOCK_STREAM, 0);
    895   1.1       cgd 	if (s < 0)
    896   1.1       cgd 		goto bad;
    897   1.1       cgd 	if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
    898   1.8   deraadt 	    (char *) &on, sizeof(on)) < 0)
    899   1.1       cgd 		goto bad;
    900   1.1       cgd 	/* anchor socket to avoid multi-homing problems */
    901  1.15   mycroft 	data_source.sin_len = sizeof(struct sockaddr_in);
    902   1.1       cgd 	data_source.sin_family = AF_INET;
    903   1.1       cgd 	data_source.sin_addr = ctrl_addr.sin_addr;
    904   1.1       cgd 	for (tries = 1; ; tries++) {
    905   1.1       cgd 		if (bind(s, (struct sockaddr *)&data_source,
    906   1.8   deraadt 		    sizeof(data_source)) >= 0)
    907   1.1       cgd 			break;
    908   1.1       cgd 		if (errno != EADDRINUSE || tries > 10)
    909   1.1       cgd 			goto bad;
    910   1.1       cgd 		sleep(tries);
    911   1.1       cgd 	}
    912   1.1       cgd 	(void) seteuid((uid_t)pw->pw_uid);
    913   1.1       cgd #ifdef IP_TOS
    914   1.1       cgd 	on = IPTOS_THROUGHPUT;
    915   1.1       cgd 	if (setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&on, sizeof(int)) < 0)
    916   1.1       cgd 		syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
    917   1.1       cgd #endif
    918   1.1       cgd 	return (fdopen(s, mode));
    919   1.1       cgd bad:
    920   1.8   deraadt 	/* Return the real value of errno (close may change it) */
    921   1.8   deraadt 	t = errno;
    922   1.1       cgd 	(void) seteuid((uid_t)pw->pw_uid);
    923   1.1       cgd 	(void) close(s);
    924   1.8   deraadt 	errno = t;
    925   1.1       cgd 	return (NULL);
    926   1.1       cgd }
    927   1.1       cgd 
    928   1.8   deraadt static FILE *
    929   1.1       cgd dataconn(name, size, mode)
    930   1.1       cgd 	char *name;
    931   1.1       cgd 	off_t size;
    932   1.1       cgd 	char *mode;
    933   1.1       cgd {
    934   1.1       cgd 	char sizebuf[32];
    935   1.1       cgd 	FILE *file;
    936   1.1       cgd 	int retry = 0, tos;
    937   1.1       cgd 
    938   1.1       cgd 	file_size = size;
    939   1.1       cgd 	byte_count = 0;
    940   1.1       cgd 	if (size != (off_t) -1)
    941   1.8   deraadt 		(void) sprintf(sizebuf, " (%qd bytes)", size);
    942   1.1       cgd 	else
    943   1.1       cgd 		(void) strcpy(sizebuf, "");
    944   1.1       cgd 	if (pdata >= 0) {
    945   1.1       cgd 		struct sockaddr_in from;
    946   1.1       cgd 		int s, fromlen = sizeof(from);
    947   1.1       cgd 
    948   1.1       cgd 		s = accept(pdata, (struct sockaddr *)&from, &fromlen);
    949   1.1       cgd 		if (s < 0) {
    950   1.1       cgd 			reply(425, "Can't open data connection.");
    951   1.1       cgd 			(void) close(pdata);
    952   1.1       cgd 			pdata = -1;
    953   1.8   deraadt 			return (NULL);
    954   1.1       cgd 		}
    955   1.1       cgd 		(void) close(pdata);
    956   1.1       cgd 		pdata = s;
    957   1.1       cgd #ifdef IP_TOS
    958  1.12   mycroft 		tos = IPTOS_THROUGHPUT;
    959   1.1       cgd 		(void) setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&tos,
    960   1.1       cgd 		    sizeof(int));
    961   1.1       cgd #endif
    962   1.8   deraadt 		reply(150, "Opening %s mode data connection for '%s'%s.",
    963   1.1       cgd 		     type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
    964   1.8   deraadt 		return (fdopen(pdata, mode));
    965   1.1       cgd 	}
    966   1.1       cgd 	if (data >= 0) {
    967   1.8   deraadt 		reply(125, "Using existing data connection for '%s'%s.",
    968   1.1       cgd 		    name, sizebuf);
    969   1.1       cgd 		usedefault = 1;
    970   1.1       cgd 		return (fdopen(data, mode));
    971   1.1       cgd 	}
    972   1.1       cgd 	if (usedefault)
    973   1.1       cgd 		data_dest = his_addr;
    974   1.1       cgd 	usedefault = 1;
    975   1.1       cgd 	file = getdatasock(mode);
    976   1.1       cgd 	if (file == NULL) {
    977   1.1       cgd 		reply(425, "Can't create data socket (%s,%d): %s.",
    978   1.1       cgd 		    inet_ntoa(data_source.sin_addr),
    979   1.1       cgd 		    ntohs(data_source.sin_port), strerror(errno));
    980   1.1       cgd 		return (NULL);
    981   1.1       cgd 	}
    982   1.1       cgd 	data = fileno(file);
    983   1.1       cgd 	while (connect(data, (struct sockaddr *)&data_dest,
    984   1.8   deraadt 	    sizeof(data_dest)) < 0) {
    985   1.1       cgd 		if (errno == EADDRINUSE && retry < swaitmax) {
    986   1.1       cgd 			sleep((unsigned) swaitint);
    987   1.1       cgd 			retry += swaitint;
    988   1.1       cgd 			continue;
    989   1.1       cgd 		}
    990   1.1       cgd 		perror_reply(425, "Can't build data connection");
    991   1.1       cgd 		(void) fclose(file);
    992   1.1       cgd 		data = -1;
    993   1.1       cgd 		return (NULL);
    994   1.1       cgd 	}
    995   1.8   deraadt 	reply(150, "Opening %s mode data connection for '%s'%s.",
    996   1.1       cgd 	     type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
    997   1.1       cgd 	return (file);
    998   1.1       cgd }
    999   1.1       cgd 
   1000   1.1       cgd /*
   1001   1.8   deraadt  * Tranfer the contents of "instr" to "outstr" peer using the appropriate
   1002   1.8   deraadt  * encapsulation of the data subject * to Mode, Structure, and Type.
   1003   1.1       cgd  *
   1004   1.1       cgd  * NB: Form isn't handled.
   1005   1.1       cgd  */
   1006   1.8   deraadt static void
   1007   1.1       cgd send_data(instr, outstr, blksize)
   1008   1.1       cgd 	FILE *instr, *outstr;
   1009   1.1       cgd 	off_t blksize;
   1010   1.1       cgd {
   1011  1.24     lukem 	int	 c, cnt, filefd, netfd;
   1012  1.24     lukem 	char	*buf;
   1013   1.1       cgd 
   1014   1.1       cgd 	transflag++;
   1015   1.1       cgd 	if (setjmp(urgcatch)) {
   1016   1.1       cgd 		transflag = 0;
   1017   1.1       cgd 		return;
   1018   1.1       cgd 	}
   1019  1.24     lukem 
   1020   1.1       cgd 	switch (type) {
   1021   1.1       cgd 
   1022   1.1       cgd 	case TYPE_A:
   1023   1.1       cgd 		while ((c = getc(instr)) != EOF) {
   1024   1.1       cgd 			byte_count++;
   1025   1.1       cgd 			if (c == '\n') {
   1026   1.1       cgd 				if (ferror(outstr))
   1027   1.1       cgd 					goto data_err;
   1028   1.1       cgd 				(void) putc('\r', outstr);
   1029   1.1       cgd 			}
   1030   1.1       cgd 			(void) putc(c, outstr);
   1031   1.1       cgd 		}
   1032   1.1       cgd 		fflush(outstr);
   1033   1.1       cgd 		transflag = 0;
   1034   1.1       cgd 		if (ferror(instr))
   1035   1.1       cgd 			goto file_err;
   1036   1.1       cgd 		if (ferror(outstr))
   1037   1.1       cgd 			goto data_err;
   1038   1.1       cgd 		reply(226, "Transfer complete.");
   1039   1.1       cgd 		return;
   1040   1.1       cgd 
   1041   1.1       cgd 	case TYPE_I:
   1042   1.1       cgd 	case TYPE_L:
   1043   1.1       cgd 		if ((buf = malloc((u_int)blksize)) == NULL) {
   1044   1.1       cgd 			transflag = 0;
   1045   1.1       cgd 			perror_reply(451, "Local resource failure: malloc");
   1046   1.1       cgd 			return;
   1047   1.1       cgd 		}
   1048   1.1       cgd 		netfd = fileno(outstr);
   1049   1.1       cgd 		filefd = fileno(instr);
   1050   1.1       cgd 		while ((cnt = read(filefd, buf, (u_int)blksize)) > 0 &&
   1051   1.1       cgd 		    write(netfd, buf, cnt) == cnt)
   1052   1.1       cgd 			byte_count += cnt;
   1053   1.1       cgd 		transflag = 0;
   1054   1.1       cgd 		(void)free(buf);
   1055   1.1       cgd 		if (cnt != 0) {
   1056   1.1       cgd 			if (cnt < 0)
   1057   1.1       cgd 				goto file_err;
   1058   1.1       cgd 			goto data_err;
   1059   1.1       cgd 		}
   1060   1.1       cgd 		reply(226, "Transfer complete.");
   1061   1.1       cgd 		return;
   1062   1.1       cgd 	default:
   1063   1.1       cgd 		transflag = 0;
   1064   1.1       cgd 		reply(550, "Unimplemented TYPE %d in send_data", type);
   1065   1.1       cgd 		return;
   1066   1.1       cgd 	}
   1067   1.1       cgd 
   1068   1.1       cgd data_err:
   1069   1.1       cgd 	transflag = 0;
   1070   1.1       cgd 	perror_reply(426, "Data connection");
   1071   1.1       cgd 	return;
   1072   1.1       cgd 
   1073   1.1       cgd file_err:
   1074   1.1       cgd 	transflag = 0;
   1075   1.1       cgd 	perror_reply(551, "Error on input file");
   1076   1.1       cgd }
   1077   1.1       cgd 
   1078   1.1       cgd /*
   1079   1.8   deraadt  * Transfer data from peer to "outstr" using the appropriate encapulation of
   1080   1.8   deraadt  * the data subject to Mode, Structure, and Type.
   1081   1.1       cgd  *
   1082   1.1       cgd  * N.B.: Form isn't handled.
   1083   1.1       cgd  */
   1084   1.8   deraadt static int
   1085   1.1       cgd receive_data(instr, outstr)
   1086   1.1       cgd 	FILE *instr, *outstr;
   1087   1.1       cgd {
   1088  1.24     lukem 	int	c, cnt, bare_lfs;
   1089  1.24     lukem 	char	buf[BUFSIZ];
   1090  1.25  christos #ifdef __GNUC__
   1091  1.25  christos 	(void) &bare_lfs;
   1092  1.25  christos #endif
   1093   1.1       cgd 
   1094  1.24     lukem 	bare_lfs = 0;
   1095   1.1       cgd 	transflag++;
   1096   1.1       cgd 	if (setjmp(urgcatch)) {
   1097   1.1       cgd 		transflag = 0;
   1098   1.1       cgd 		return (-1);
   1099   1.1       cgd 	}
   1100  1.24     lukem 
   1101   1.1       cgd 	switch (type) {
   1102   1.1       cgd 
   1103   1.1       cgd 	case TYPE_I:
   1104   1.1       cgd 	case TYPE_L:
   1105   1.8   deraadt 		while ((cnt = read(fileno(instr), buf, sizeof(buf))) > 0) {
   1106   1.1       cgd 			if (write(fileno(outstr), buf, cnt) != cnt)
   1107   1.1       cgd 				goto file_err;
   1108   1.1       cgd 			byte_count += cnt;
   1109   1.1       cgd 		}
   1110   1.1       cgd 		if (cnt < 0)
   1111   1.1       cgd 			goto data_err;
   1112   1.1       cgd 		transflag = 0;
   1113   1.1       cgd 		return (0);
   1114   1.1       cgd 
   1115   1.1       cgd 	case TYPE_E:
   1116   1.1       cgd 		reply(553, "TYPE E not implemented.");
   1117   1.1       cgd 		transflag = 0;
   1118   1.1       cgd 		return (-1);
   1119   1.1       cgd 
   1120   1.1       cgd 	case TYPE_A:
   1121   1.1       cgd 		while ((c = getc(instr)) != EOF) {
   1122   1.1       cgd 			byte_count++;
   1123   1.1       cgd 			if (c == '\n')
   1124   1.1       cgd 				bare_lfs++;
   1125   1.1       cgd 			while (c == '\r') {
   1126   1.1       cgd 				if (ferror(outstr))
   1127   1.1       cgd 					goto data_err;
   1128   1.1       cgd 				if ((c = getc(instr)) != '\n') {
   1129   1.1       cgd 					(void) putc ('\r', outstr);
   1130   1.1       cgd 					if (c == '\0' || c == EOF)
   1131   1.1       cgd 						goto contin2;
   1132   1.1       cgd 				}
   1133   1.1       cgd 			}
   1134   1.1       cgd 			(void) putc(c, outstr);
   1135   1.1       cgd 	contin2:	;
   1136   1.1       cgd 		}
   1137   1.1       cgd 		fflush(outstr);
   1138   1.1       cgd 		if (ferror(instr))
   1139   1.1       cgd 			goto data_err;
   1140   1.1       cgd 		if (ferror(outstr))
   1141   1.1       cgd 			goto file_err;
   1142   1.1       cgd 		transflag = 0;
   1143   1.1       cgd 		if (bare_lfs) {
   1144   1.8   deraadt 			lreply(226,
   1145   1.8   deraadt 		"WARNING! %d bare linefeeds received in ASCII mode",
   1146   1.8   deraadt 			    bare_lfs);
   1147   1.8   deraadt 		(void)printf("   File may not have transferred correctly.\r\n");
   1148   1.1       cgd 		}
   1149   1.1       cgd 		return (0);
   1150   1.1       cgd 	default:
   1151   1.1       cgd 		reply(550, "Unimplemented TYPE %d in receive_data", type);
   1152   1.1       cgd 		transflag = 0;
   1153   1.1       cgd 		return (-1);
   1154   1.1       cgd 	}
   1155   1.1       cgd 
   1156   1.1       cgd data_err:
   1157   1.1       cgd 	transflag = 0;
   1158   1.1       cgd 	perror_reply(426, "Data Connection");
   1159   1.1       cgd 	return (-1);
   1160   1.1       cgd 
   1161   1.1       cgd file_err:
   1162   1.1       cgd 	transflag = 0;
   1163   1.1       cgd 	perror_reply(452, "Error writing file");
   1164   1.1       cgd 	return (-1);
   1165   1.1       cgd }
   1166   1.1       cgd 
   1167   1.8   deraadt void
   1168   1.1       cgd statfilecmd(filename)
   1169   1.1       cgd 	char *filename;
   1170   1.1       cgd {
   1171   1.1       cgd 	FILE *fin;
   1172   1.1       cgd 	int c;
   1173   1.8   deraadt 	char line[LINE_MAX];
   1174   1.1       cgd 
   1175   1.8   deraadt 	(void)snprintf(line, sizeof(line), "/bin/ls -lgA %s", filename);
   1176  1.24     lukem 	fin = ftpd_popen(line, "r", 0);
   1177   1.1       cgd 	lreply(211, "status of %s:", filename);
   1178   1.1       cgd 	while ((c = getc(fin)) != EOF) {
   1179   1.1       cgd 		if (c == '\n') {
   1180   1.1       cgd 			if (ferror(stdout)){
   1181   1.1       cgd 				perror_reply(421, "control connection");
   1182   1.1       cgd 				(void) ftpd_pclose(fin);
   1183   1.1       cgd 				dologout(1);
   1184   1.1       cgd 				/* NOTREACHED */
   1185   1.1       cgd 			}
   1186   1.1       cgd 			if (ferror(fin)) {
   1187   1.1       cgd 				perror_reply(551, filename);
   1188   1.1       cgd 				(void) ftpd_pclose(fin);
   1189   1.1       cgd 				return;
   1190   1.1       cgd 			}
   1191   1.1       cgd 			(void) putc('\r', stdout);
   1192   1.1       cgd 		}
   1193   1.1       cgd 		(void) putc(c, stdout);
   1194   1.1       cgd 	}
   1195   1.1       cgd 	(void) ftpd_pclose(fin);
   1196   1.1       cgd 	reply(211, "End of Status");
   1197   1.1       cgd }
   1198   1.1       cgd 
   1199   1.8   deraadt void
   1200   1.1       cgd statcmd()
   1201   1.1       cgd {
   1202   1.1       cgd 	struct sockaddr_in *sin;
   1203   1.1       cgd 	u_char *a, *p;
   1204   1.1       cgd 
   1205  1.24     lukem 	lreply(211, "%s FTP server status:", hostname);
   1206  1.24     lukem 	lreply(211, "%s", version);
   1207  1.24     lukem 	if (isdigit(remotehost[0]))
   1208  1.24     lukem 		lreply(211, "Connected to %s", remotehost);
   1209  1.24     lukem 	else
   1210  1.24     lukem 		lreply(211, "Connected to %s (%s)", remotehost,
   1211  1.24     lukem 		    inet_ntoa(his_addr.sin_addr));
   1212   1.1       cgd 	if (logged_in) {
   1213   1.1       cgd 		if (guest)
   1214  1.24     lukem 			lreply(211, "Logged in anonymously");
   1215   1.1       cgd 		else
   1216  1.24     lukem 			lreply(211, "Logged in as %s", pw->pw_name);
   1217   1.1       cgd 	} else if (askpasswd)
   1218  1.24     lukem 		lreply(211, "Waiting for password");
   1219   1.1       cgd 	else
   1220  1.24     lukem 		lreply(211, "Waiting for user name");
   1221  1.24     lukem 	printf("211- TYPE: %s", typenames[type]);
   1222   1.1       cgd 	if (type == TYPE_A || type == TYPE_E)
   1223   1.1       cgd 		printf(", FORM: %s", formnames[form]);
   1224   1.1       cgd 	if (type == TYPE_L)
   1225   1.1       cgd #if NBBY == 8
   1226   1.1       cgd 		printf(" %d", NBBY);
   1227   1.1       cgd #else
   1228   1.1       cgd 		printf(" %d", bytesize);	/* need definition! */
   1229   1.1       cgd #endif
   1230   1.1       cgd 	printf("; STRUcture: %s; transfer MODE: %s\r\n",
   1231   1.1       cgd 	    strunames[stru], modenames[mode]);
   1232   1.1       cgd 	if (data != -1)
   1233  1.24     lukem 		lreply(211, "Data connection open");
   1234   1.1       cgd 	else if (pdata != -1) {
   1235  1.24     lukem 		printf("211- in Passive mode");
   1236   1.1       cgd 		sin = &pasv_addr;
   1237   1.1       cgd 		goto printaddr;
   1238   1.1       cgd 	} else if (usedefault == 0) {
   1239  1.24     lukem 		printf("211- PORT");
   1240   1.1       cgd 		sin = &data_dest;
   1241   1.1       cgd printaddr:
   1242   1.1       cgd 		a = (u_char *) &sin->sin_addr;
   1243   1.1       cgd 		p = (u_char *) &sin->sin_port;
   1244   1.1       cgd #define UC(b) (((int) b) & 0xff)
   1245   1.1       cgd 		printf(" (%d,%d,%d,%d,%d,%d)\r\n", UC(a[0]),
   1246   1.1       cgd 			UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1]));
   1247   1.1       cgd #undef UC
   1248   1.1       cgd 	} else
   1249  1.24     lukem 		lreply(211, "No data connection");
   1250  1.24     lukem 
   1251  1.24     lukem 	if (logged_in) {
   1252  1.24     lukem 		struct ftpconv *cp;
   1253  1.24     lukem 
   1254  1.24     lukem 		lreply(211, "");
   1255  1.24     lukem 		lreply(211, "Class: %s", curclass.classname);
   1256  1.24     lukem 		if (curclass.display)
   1257  1.24     lukem 			lreply(211, "Display file: %s", curclass.display);
   1258  1.24     lukem 		if (curclass.notify)
   1259  1.24     lukem 			lreply(211, "Notify fileglob: %s", curclass.notify);
   1260  1.24     lukem 		lreply(211, "Idle timeout: %d, maximum timeout: %d",
   1261  1.24     lukem 		    curclass.timeout, curclass.maxtimeout);
   1262  1.24     lukem 		lreply(211, "dele, mkd, rmd, umask, chmod: %sabled",
   1263  1.24     lukem 		    curclass.modify ? "en" : "dis");
   1264  1.24     lukem 		lreply(211, "Umask: %.04o", curclass.umask);
   1265  1.24     lukem 		for (cp = curclass.conversions; cp != NULL; cp=cp->next) {
   1266  1.24     lukem 			if (cp->suffix == NULL || cp->types == NULL ||
   1267  1.24     lukem 			    cp->command == NULL)
   1268  1.24     lukem 				continue;
   1269  1.24     lukem 			lreply(211,
   1270  1.24     lukem 			    "Conversion: %s [%s] disable: %s, command: %s",
   1271  1.24     lukem 			    cp->suffix, cp->types, cp->disable, cp->command);
   1272  1.24     lukem 		}
   1273  1.24     lukem 	}
   1274  1.24     lukem 
   1275   1.1       cgd 	reply(211, "End of status");
   1276   1.1       cgd }
   1277   1.1       cgd 
   1278   1.8   deraadt void
   1279   1.1       cgd fatal(s)
   1280   1.1       cgd 	char *s;
   1281   1.1       cgd {
   1282   1.8   deraadt 
   1283   1.1       cgd 	reply(451, "Error in server: %s\n", s);
   1284   1.1       cgd 	reply(221, "Closing connection due to server error.");
   1285   1.1       cgd 	dologout(0);
   1286   1.1       cgd 	/* NOTREACHED */
   1287   1.1       cgd }
   1288   1.1       cgd 
   1289   1.8   deraadt void
   1290   1.8   deraadt #if __STDC__
   1291   1.8   deraadt reply(int n, const char *fmt, ...)
   1292   1.8   deraadt #else
   1293   1.8   deraadt reply(n, fmt, va_alist)
   1294   1.1       cgd 	int n;
   1295   1.1       cgd 	char *fmt;
   1296   1.8   deraadt         va_dcl
   1297   1.8   deraadt #endif
   1298   1.1       cgd {
   1299   1.8   deraadt 	va_list ap;
   1300   1.8   deraadt #if __STDC__
   1301   1.8   deraadt 	va_start(ap, fmt);
   1302   1.8   deraadt #else
   1303   1.8   deraadt 	va_start(ap);
   1304   1.8   deraadt #endif
   1305   1.8   deraadt 	(void)printf("%d ", n);
   1306   1.8   deraadt 	(void)vprintf(fmt, ap);
   1307   1.8   deraadt 	(void)printf("\r\n");
   1308   1.1       cgd 	(void)fflush(stdout);
   1309   1.1       cgd 	if (debug) {
   1310   1.1       cgd 		syslog(LOG_DEBUG, "<--- %d ", n);
   1311   1.8   deraadt 		vsyslog(LOG_DEBUG, fmt, ap);
   1312   1.8   deraadt 	}
   1313   1.1       cgd }
   1314   1.1       cgd 
   1315   1.8   deraadt void
   1316   1.8   deraadt #if __STDC__
   1317   1.8   deraadt lreply(int n, const char *fmt, ...)
   1318   1.8   deraadt #else
   1319   1.8   deraadt lreply(n, fmt, va_alist)
   1320   1.1       cgd 	int n;
   1321   1.1       cgd 	char *fmt;
   1322   1.8   deraadt         va_dcl
   1323   1.8   deraadt #endif
   1324   1.1       cgd {
   1325   1.8   deraadt 	va_list ap;
   1326   1.8   deraadt #if __STDC__
   1327   1.8   deraadt 	va_start(ap, fmt);
   1328   1.8   deraadt #else
   1329   1.8   deraadt 	va_start(ap);
   1330   1.8   deraadt #endif
   1331   1.8   deraadt 	(void)printf("%d- ", n);
   1332   1.8   deraadt 	(void)vprintf(fmt, ap);
   1333   1.8   deraadt 	(void)printf("\r\n");
   1334   1.1       cgd 	(void)fflush(stdout);
   1335   1.1       cgd 	if (debug) {
   1336   1.1       cgd 		syslog(LOG_DEBUG, "<--- %d- ", n);
   1337   1.8   deraadt 		vsyslog(LOG_DEBUG, fmt, ap);
   1338   1.1       cgd 	}
   1339   1.1       cgd }
   1340   1.1       cgd 
   1341   1.8   deraadt static void
   1342   1.1       cgd ack(s)
   1343   1.1       cgd 	char *s;
   1344   1.1       cgd {
   1345   1.8   deraadt 
   1346   1.1       cgd 	reply(250, "%s command successful.", s);
   1347   1.1       cgd }
   1348   1.1       cgd 
   1349   1.8   deraadt void
   1350   1.1       cgd nack(s)
   1351   1.1       cgd 	char *s;
   1352   1.1       cgd {
   1353   1.8   deraadt 
   1354   1.1       cgd 	reply(502, "%s command not implemented.", s);
   1355   1.1       cgd }
   1356   1.1       cgd 
   1357   1.1       cgd /* ARGSUSED */
   1358   1.8   deraadt void
   1359   1.1       cgd yyerror(s)
   1360   1.1       cgd 	char *s;
   1361   1.1       cgd {
   1362   1.1       cgd 	char *cp;
   1363   1.1       cgd 
   1364  1.20     lukem 	if ((cp = strchr(cbuf,'\n')) != NULL)
   1365   1.1       cgd 		*cp = '\0';
   1366   1.1       cgd 	reply(500, "'%s': command not understood.", cbuf);
   1367   1.1       cgd }
   1368   1.1       cgd 
   1369   1.8   deraadt void
   1370   1.1       cgd delete(name)
   1371   1.1       cgd 	char *name;
   1372   1.1       cgd {
   1373   1.1       cgd 	struct stat st;
   1374   1.1       cgd 
   1375   1.8   deraadt 	LOGCMD("delete", name);
   1376   1.1       cgd 	if (stat(name, &st) < 0) {
   1377   1.1       cgd 		perror_reply(550, name);
   1378   1.1       cgd 		return;
   1379   1.1       cgd 	}
   1380   1.1       cgd 	if ((st.st_mode&S_IFMT) == S_IFDIR) {
   1381   1.1       cgd 		if (rmdir(name) < 0) {
   1382   1.1       cgd 			perror_reply(550, name);
   1383   1.1       cgd 			return;
   1384   1.1       cgd 		}
   1385   1.1       cgd 		goto done;
   1386   1.1       cgd 	}
   1387   1.1       cgd 	if (unlink(name) < 0) {
   1388   1.1       cgd 		perror_reply(550, name);
   1389   1.1       cgd 		return;
   1390   1.1       cgd 	}
   1391   1.1       cgd done:
   1392   1.1       cgd 	ack("DELE");
   1393   1.1       cgd }
   1394   1.1       cgd 
   1395   1.8   deraadt void
   1396   1.1       cgd cwd(path)
   1397   1.1       cgd 	char *path;
   1398   1.1       cgd {
   1399   1.8   deraadt 
   1400   1.1       cgd 	if (chdir(path) < 0)
   1401   1.1       cgd 		perror_reply(550, path);
   1402  1.24     lukem 	else {
   1403  1.24     lukem 		show_chdir_messages(250);
   1404   1.1       cgd 		ack("CWD");
   1405  1.24     lukem 	}
   1406   1.1       cgd }
   1407   1.1       cgd 
   1408   1.8   deraadt void
   1409   1.1       cgd makedir(name)
   1410   1.1       cgd 	char *name;
   1411   1.1       cgd {
   1412   1.8   deraadt 
   1413   1.8   deraadt 	LOGCMD("mkdir", name);
   1414   1.1       cgd 	if (mkdir(name, 0777) < 0)
   1415   1.1       cgd 		perror_reply(550, name);
   1416   1.1       cgd 	else
   1417   1.1       cgd 		reply(257, "MKD command successful.");
   1418   1.1       cgd }
   1419   1.1       cgd 
   1420   1.8   deraadt void
   1421   1.1       cgd removedir(name)
   1422   1.1       cgd 	char *name;
   1423   1.1       cgd {
   1424   1.8   deraadt 
   1425   1.8   deraadt 	LOGCMD("rmdir", name);
   1426   1.1       cgd 	if (rmdir(name) < 0)
   1427   1.1       cgd 		perror_reply(550, name);
   1428   1.1       cgd 	else
   1429   1.1       cgd 		ack("RMD");
   1430   1.1       cgd }
   1431   1.1       cgd 
   1432   1.8   deraadt void
   1433   1.1       cgd pwd()
   1434   1.1       cgd {
   1435   1.1       cgd 	char path[MAXPATHLEN + 1];
   1436   1.1       cgd 
   1437   1.1       cgd 	if (getwd(path) == (char *)NULL)
   1438   1.1       cgd 		reply(550, "%s.", path);
   1439   1.1       cgd 	else
   1440   1.1       cgd 		reply(257, "\"%s\" is current directory.", path);
   1441   1.1       cgd }
   1442   1.1       cgd 
   1443   1.1       cgd char *
   1444   1.1       cgd renamefrom(name)
   1445   1.1       cgd 	char *name;
   1446   1.1       cgd {
   1447   1.1       cgd 	struct stat st;
   1448   1.1       cgd 
   1449   1.1       cgd 	if (stat(name, &st) < 0) {
   1450   1.1       cgd 		perror_reply(550, name);
   1451   1.1       cgd 		return ((char *)0);
   1452   1.1       cgd 	}
   1453   1.1       cgd 	reply(350, "File exists, ready for destination name");
   1454   1.1       cgd 	return (name);
   1455   1.1       cgd }
   1456   1.1       cgd 
   1457   1.8   deraadt void
   1458   1.1       cgd renamecmd(from, to)
   1459   1.1       cgd 	char *from, *to;
   1460   1.1       cgd {
   1461   1.8   deraadt 
   1462   1.8   deraadt 	LOGCMD2("rename", from, to);
   1463   1.1       cgd 	if (rename(from, to) < 0)
   1464   1.1       cgd 		perror_reply(550, "rename");
   1465   1.1       cgd 	else
   1466   1.1       cgd 		ack("RNTO");
   1467   1.1       cgd }
   1468   1.1       cgd 
   1469   1.8   deraadt static void
   1470   1.1       cgd dolog(sin)
   1471   1.1       cgd 	struct sockaddr_in *sin;
   1472   1.1       cgd {
   1473   1.1       cgd 	struct hostent *hp = gethostbyaddr((char *)&sin->sin_addr,
   1474   1.8   deraadt 		sizeof(struct in_addr), AF_INET);
   1475   1.1       cgd 
   1476   1.1       cgd 	if (hp)
   1477   1.8   deraadt 		(void) strncpy(remotehost, hp->h_name, sizeof(remotehost));
   1478   1.1       cgd 	else
   1479   1.1       cgd 		(void) strncpy(remotehost, inet_ntoa(sin->sin_addr),
   1480   1.8   deraadt 		    sizeof(remotehost));
   1481   1.6       cgd #ifdef HASSETPROCTITLE
   1482   1.8   deraadt 	snprintf(proctitle, sizeof(proctitle), "%s: connected", remotehost);
   1483   1.1       cgd 	setproctitle(proctitle);
   1484   1.6       cgd #endif /* HASSETPROCTITLE */
   1485   1.1       cgd 
   1486   1.8   deraadt 	if (logging)
   1487   1.8   deraadt 		syslog(LOG_INFO, "connection from %s", remotehost);
   1488   1.1       cgd }
   1489   1.1       cgd 
   1490   1.1       cgd /*
   1491   1.1       cgd  * Record logout in wtmp file
   1492   1.1       cgd  * and exit with supplied status.
   1493   1.1       cgd  */
   1494   1.8   deraadt void
   1495   1.1       cgd dologout(status)
   1496   1.1       cgd 	int status;
   1497   1.1       cgd {
   1498  1.16       mrg 	/*
   1499  1.16       mrg 	* Prevent reception of SIGURG from resulting in a resumption
   1500  1.16       mrg 	* back to the main program loop.
   1501  1.16       mrg 	*/
   1502  1.16       mrg 	transflag = 0;
   1503   1.8   deraadt 
   1504   1.1       cgd 	if (logged_in) {
   1505   1.1       cgd 		(void) seteuid((uid_t)0);
   1506   1.1       cgd 		logwtmp(ttyline, "", "");
   1507   1.4       cgd #if defined(KERBEROS)
   1508   1.4       cgd 		if (!notickets && krbtkfile_env)
   1509   1.4       cgd 			unlink(krbtkfile_env);
   1510   1.4       cgd #endif
   1511   1.1       cgd 	}
   1512   1.1       cgd 	/* beware of flushing buffers after a SIGPIPE */
   1513   1.1       cgd 	_exit(status);
   1514   1.1       cgd }
   1515   1.1       cgd 
   1516   1.8   deraadt static void
   1517   1.8   deraadt myoob(signo)
   1518   1.8   deraadt 	int signo;
   1519   1.1       cgd {
   1520   1.1       cgd 	char *cp;
   1521   1.1       cgd 
   1522   1.1       cgd 	/* only process if transfer occurring */
   1523   1.1       cgd 	if (!transflag)
   1524   1.1       cgd 		return;
   1525   1.1       cgd 	cp = tmpline;
   1526   1.1       cgd 	if (getline(cp, 7, stdin) == NULL) {
   1527   1.1       cgd 		reply(221, "You could at least say goodbye.");
   1528   1.1       cgd 		dologout(0);
   1529   1.1       cgd 	}
   1530   1.1       cgd 	upper(cp);
   1531   1.1       cgd 	if (strcmp(cp, "ABOR\r\n") == 0) {
   1532   1.1       cgd 		tmpline[0] = '\0';
   1533   1.1       cgd 		reply(426, "Transfer aborted. Data connection closed.");
   1534   1.1       cgd 		reply(226, "Abort successful");
   1535   1.1       cgd 		longjmp(urgcatch, 1);
   1536   1.1       cgd 	}
   1537   1.1       cgd 	if (strcmp(cp, "STAT\r\n") == 0) {
   1538   1.1       cgd 		if (file_size != (off_t) -1)
   1539   1.8   deraadt 			reply(213, "Status: %qd of %qd bytes transferred",
   1540   1.1       cgd 			    byte_count, file_size);
   1541   1.1       cgd 		else
   1542   1.8   deraadt 			reply(213, "Status: %qd bytes transferred", byte_count);
   1543   1.1       cgd 	}
   1544   1.1       cgd }
   1545   1.1       cgd 
   1546   1.1       cgd /*
   1547   1.1       cgd  * Note: a response of 425 is not mentioned as a possible response to
   1548   1.8   deraadt  *	the PASV command in RFC959. However, it has been blessed as
   1549   1.8   deraadt  *	a legitimate response by Jon Postel in a telephone conversation
   1550   1.1       cgd  *	with Rick Adams on 25 Jan 89.
   1551   1.1       cgd  */
   1552   1.8   deraadt void
   1553   1.1       cgd passive()
   1554   1.1       cgd {
   1555   1.1       cgd 	int len;
   1556   1.8   deraadt 	char *p, *a;
   1557   1.1       cgd 
   1558   1.1       cgd 	pdata = socket(AF_INET, SOCK_STREAM, 0);
   1559  1.23     lukem 	if (pdata < 0 || !logged_in) {
   1560   1.1       cgd 		perror_reply(425, "Can't open passive connection");
   1561   1.1       cgd 		return;
   1562   1.1       cgd 	}
   1563   1.1       cgd 	pasv_addr = ctrl_addr;
   1564   1.1       cgd 	pasv_addr.sin_port = 0;
   1565   1.1       cgd 	(void) seteuid((uid_t)0);
   1566   1.1       cgd 	if (bind(pdata, (struct sockaddr *)&pasv_addr, sizeof(pasv_addr)) < 0) {
   1567   1.1       cgd 		(void) seteuid((uid_t)pw->pw_uid);
   1568   1.1       cgd 		goto pasv_error;
   1569   1.1       cgd 	}
   1570   1.1       cgd 	(void) seteuid((uid_t)pw->pw_uid);
   1571   1.1       cgd 	len = sizeof(pasv_addr);
   1572   1.1       cgd 	if (getsockname(pdata, (struct sockaddr *) &pasv_addr, &len) < 0)
   1573   1.1       cgd 		goto pasv_error;
   1574   1.1       cgd 	if (listen(pdata, 1) < 0)
   1575   1.1       cgd 		goto pasv_error;
   1576   1.1       cgd 	a = (char *) &pasv_addr.sin_addr;
   1577   1.1       cgd 	p = (char *) &pasv_addr.sin_port;
   1578   1.1       cgd 
   1579   1.1       cgd #define UC(b) (((int) b) & 0xff)
   1580   1.1       cgd 
   1581   1.1       cgd 	reply(227, "Entering Passive Mode (%d,%d,%d,%d,%d,%d)", UC(a[0]),
   1582   1.1       cgd 		UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1]));
   1583   1.1       cgd 	return;
   1584   1.1       cgd 
   1585   1.1       cgd pasv_error:
   1586   1.1       cgd 	(void) close(pdata);
   1587   1.1       cgd 	pdata = -1;
   1588   1.1       cgd 	perror_reply(425, "Can't open passive connection");
   1589   1.1       cgd 	return;
   1590   1.1       cgd }
   1591   1.1       cgd 
   1592   1.1       cgd /*
   1593   1.1       cgd  * Generate unique name for file with basename "local".
   1594   1.1       cgd  * The file named "local" is already known to exist.
   1595   1.1       cgd  * Generates failure reply on error.
   1596   1.1       cgd  */
   1597   1.8   deraadt static char *
   1598   1.1       cgd gunique(local)
   1599   1.1       cgd 	char *local;
   1600   1.1       cgd {
   1601   1.1       cgd 	static char new[MAXPATHLEN];
   1602   1.1       cgd 	struct stat st;
   1603   1.8   deraadt 	int count;
   1604   1.8   deraadt 	char *cp;
   1605   1.1       cgd 
   1606   1.8   deraadt 	cp = strrchr(local, '/');
   1607   1.1       cgd 	if (cp)
   1608   1.1       cgd 		*cp = '\0';
   1609   1.1       cgd 	if (stat(cp ? local : ".", &st) < 0) {
   1610   1.1       cgd 		perror_reply(553, cp ? local : ".");
   1611   1.8   deraadt 		return ((char *) 0);
   1612   1.1       cgd 	}
   1613   1.1       cgd 	if (cp)
   1614   1.1       cgd 		*cp = '/';
   1615   1.1       cgd 	(void) strcpy(new, local);
   1616   1.1       cgd 	cp = new + strlen(new);
   1617   1.1       cgd 	*cp++ = '.';
   1618   1.1       cgd 	for (count = 1; count < 100; count++) {
   1619   1.8   deraadt 		(void)sprintf(cp, "%d", count);
   1620   1.1       cgd 		if (stat(new, &st) < 0)
   1621   1.8   deraadt 			return (new);
   1622   1.1       cgd 	}
   1623   1.1       cgd 	reply(452, "Unique file name cannot be created.");
   1624   1.8   deraadt 	return (NULL);
   1625   1.1       cgd }
   1626   1.1       cgd 
   1627   1.1       cgd /*
   1628   1.1       cgd  * Format and send reply containing system error number.
   1629   1.1       cgd  */
   1630   1.8   deraadt void
   1631   1.1       cgd perror_reply(code, string)
   1632   1.1       cgd 	int code;
   1633   1.1       cgd 	char *string;
   1634   1.1       cgd {
   1635   1.8   deraadt 
   1636   1.1       cgd 	reply(code, "%s: %s.", string, strerror(errno));
   1637   1.1       cgd }
   1638   1.1       cgd 
   1639   1.1       cgd static char *onefile[] = {
   1640   1.1       cgd 	"",
   1641   1.1       cgd 	0
   1642   1.1       cgd };
   1643   1.1       cgd 
   1644   1.8   deraadt void
   1645   1.8   deraadt send_file_list(whichf)
   1646   1.8   deraadt 	char *whichf;
   1647   1.1       cgd {
   1648   1.1       cgd 	struct stat st;
   1649   1.1       cgd 	DIR *dirp = NULL;
   1650   1.1       cgd 	struct dirent *dir;
   1651   1.1       cgd 	FILE *dout = NULL;
   1652   1.8   deraadt 	char **dirlist, *dirname;
   1653   1.1       cgd 	int simple = 0;
   1654   1.8   deraadt 	int freeglob = 0;
   1655   1.8   deraadt 	glob_t gl;
   1656  1.25  christos #ifdef __GNUC__
   1657  1.25  christos 	(void) &dout;
   1658  1.25  christos 	(void) &dirlist;
   1659  1.25  christos 	(void) &simple;
   1660  1.25  christos 	(void) &freeglob;
   1661  1.25  christos #endif
   1662   1.1       cgd 
   1663   1.8   deraadt 	if (strpbrk(whichf, "~{[*?") != NULL) {
   1664   1.8   deraadt 		int flags = GLOB_BRACE|GLOB_NOCHECK|GLOB_QUOTE|GLOB_TILDE;
   1665   1.1       cgd 
   1666   1.8   deraadt 		memset(&gl, 0, sizeof(gl));
   1667   1.8   deraadt 		freeglob = 1;
   1668   1.8   deraadt 		if (glob(whichf, flags, 0, &gl)) {
   1669   1.8   deraadt 			reply(550, "not found");
   1670   1.8   deraadt 			goto out;
   1671   1.8   deraadt 		} else if (gl.gl_pathc == 0) {
   1672   1.1       cgd 			errno = ENOENT;
   1673   1.8   deraadt 			perror_reply(550, whichf);
   1674   1.8   deraadt 			goto out;
   1675   1.1       cgd 		}
   1676   1.8   deraadt 		dirlist = gl.gl_pathv;
   1677   1.1       cgd 	} else {
   1678   1.8   deraadt 		onefile[0] = whichf;
   1679   1.1       cgd 		dirlist = onefile;
   1680   1.1       cgd 		simple = 1;
   1681   1.1       cgd 	}
   1682   1.1       cgd 
   1683   1.1       cgd 	if (setjmp(urgcatch)) {
   1684   1.1       cgd 		transflag = 0;
   1685   1.8   deraadt 		goto out;
   1686   1.1       cgd 	}
   1687  1.20     lukem 	while ((dirname = *dirlist++) != NULL) {
   1688   1.1       cgd 		if (stat(dirname, &st) < 0) {
   1689   1.1       cgd 			/*
   1690   1.1       cgd 			 * If user typed "ls -l", etc, and the client
   1691   1.1       cgd 			 * used NLST, do what the user meant.
   1692   1.1       cgd 			 */
   1693   1.1       cgd 			if (dirname[0] == '-' && *dirlist == NULL &&
   1694   1.1       cgd 			    transflag == 0) {
   1695   1.1       cgd 				retrieve("/bin/ls %s", dirname);
   1696   1.8   deraadt 				goto out;
   1697   1.1       cgd 			}
   1698   1.8   deraadt 			perror_reply(550, whichf);
   1699   1.1       cgd 			if (dout != NULL) {
   1700   1.1       cgd 				(void) fclose(dout);
   1701   1.1       cgd 				transflag = 0;
   1702   1.1       cgd 				data = -1;
   1703   1.1       cgd 				pdata = -1;
   1704   1.1       cgd 			}
   1705   1.8   deraadt 			goto out;
   1706   1.1       cgd 		}
   1707   1.1       cgd 
   1708   1.8   deraadt 		if (S_ISREG(st.st_mode)) {
   1709   1.1       cgd 			if (dout == NULL) {
   1710   1.1       cgd 				dout = dataconn("file list", (off_t)-1, "w");
   1711   1.1       cgd 				if (dout == NULL)
   1712   1.8   deraadt 					goto out;
   1713   1.1       cgd 				transflag++;
   1714   1.1       cgd 			}
   1715   1.1       cgd 			fprintf(dout, "%s%s\n", dirname,
   1716   1.1       cgd 				type == TYPE_A ? "\r" : "");
   1717   1.1       cgd 			byte_count += strlen(dirname) + 1;
   1718   1.1       cgd 			continue;
   1719   1.8   deraadt 		} else if (!S_ISDIR(st.st_mode))
   1720   1.1       cgd 			continue;
   1721   1.1       cgd 
   1722   1.1       cgd 		if ((dirp = opendir(dirname)) == NULL)
   1723   1.1       cgd 			continue;
   1724   1.1       cgd 
   1725   1.1       cgd 		while ((dir = readdir(dirp)) != NULL) {
   1726   1.1       cgd 			char nbuf[MAXPATHLEN];
   1727   1.1       cgd 
   1728   1.1       cgd 			if (dir->d_name[0] == '.' && dir->d_namlen == 1)
   1729   1.1       cgd 				continue;
   1730   1.1       cgd 			if (dir->d_name[0] == '.' && dir->d_name[1] == '.' &&
   1731   1.1       cgd 			    dir->d_namlen == 2)
   1732   1.1       cgd 				continue;
   1733   1.1       cgd 
   1734   1.1       cgd 			sprintf(nbuf, "%s/%s", dirname, dir->d_name);
   1735   1.1       cgd 
   1736   1.1       cgd 			/*
   1737   1.1       cgd 			 * We have to do a stat to insure it's
   1738   1.1       cgd 			 * not a directory or special file.
   1739   1.1       cgd 			 */
   1740   1.1       cgd 			if (simple || (stat(nbuf, &st) == 0 &&
   1741   1.8   deraadt 			    S_ISREG(st.st_mode))) {
   1742   1.1       cgd 				if (dout == NULL) {
   1743   1.1       cgd 					dout = dataconn("file list", (off_t)-1,
   1744   1.1       cgd 						"w");
   1745   1.1       cgd 					if (dout == NULL)
   1746   1.8   deraadt 						goto out;
   1747   1.1       cgd 					transflag++;
   1748   1.1       cgd 				}
   1749   1.1       cgd 				if (nbuf[0] == '.' && nbuf[1] == '/')
   1750   1.1       cgd 					fprintf(dout, "%s%s\n", &nbuf[2],
   1751   1.1       cgd 						type == TYPE_A ? "\r" : "");
   1752   1.1       cgd 				else
   1753   1.1       cgd 					fprintf(dout, "%s%s\n", nbuf,
   1754   1.1       cgd 						type == TYPE_A ? "\r" : "");
   1755   1.1       cgd 				byte_count += strlen(nbuf) + 1;
   1756   1.1       cgd 			}
   1757   1.1       cgd 		}
   1758   1.1       cgd 		(void) closedir(dirp);
   1759   1.1       cgd 	}
   1760   1.1       cgd 
   1761   1.1       cgd 	if (dout == NULL)
   1762   1.1       cgd 		reply(550, "No files found.");
   1763   1.1       cgd 	else if (ferror(dout) != 0)
   1764   1.1       cgd 		perror_reply(550, "Data connection");
   1765   1.1       cgd 	else
   1766   1.1       cgd 		reply(226, "Transfer complete.");
   1767   1.1       cgd 
   1768   1.1       cgd 	transflag = 0;
   1769   1.1       cgd 	if (dout != NULL)
   1770   1.1       cgd 		(void) fclose(dout);
   1771   1.1       cgd 	data = -1;
   1772   1.1       cgd 	pdata = -1;
   1773   1.8   deraadt out:
   1774   1.8   deraadt 	if (freeglob) {
   1775   1.8   deraadt 		freeglob = 0;
   1776   1.8   deraadt 		globfree(&gl);
   1777   1.8   deraadt 	}
   1778   1.1       cgd }
   1779