ftpd.c revision 1.26 1 1.26 mellon /* $NetBSD: ftpd.c,v 1.26 1997/06/21 04:38:54 mellon Exp $ */
2 1.13 cgd
3 1.1 cgd /*
4 1.8 deraadt * Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994
5 1.8 deraadt * The Regents of the University of California. All rights reserved.
6 1.1 cgd *
7 1.1 cgd * Redistribution and use in source and binary forms, with or without
8 1.1 cgd * modification, are permitted provided that the following conditions
9 1.1 cgd * are met:
10 1.1 cgd * 1. Redistributions of source code must retain the above copyright
11 1.1 cgd * notice, this list of conditions and the following disclaimer.
12 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
13 1.1 cgd * notice, this list of conditions and the following disclaimer in the
14 1.1 cgd * documentation and/or other materials provided with the distribution.
15 1.1 cgd * 3. All advertising materials mentioning features or use of this software
16 1.1 cgd * must display the following acknowledgement:
17 1.1 cgd * This product includes software developed by the University of
18 1.1 cgd * California, Berkeley and its contributors.
19 1.1 cgd * 4. Neither the name of the University nor the names of its contributors
20 1.1 cgd * may be used to endorse or promote products derived from this software
21 1.1 cgd * without specific prior written permission.
22 1.1 cgd *
23 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
24 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 1.1 cgd * SUCH DAMAGE.
34 1.1 cgd */
35 1.1 cgd
36 1.25 christos #include <sys/cdefs.h>
37 1.1 cgd #ifndef lint
38 1.25 christos __COPYRIGHT(
39 1.8 deraadt "@(#) Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994\n\
40 1.25 christos The Regents of the University of California. All rights reserved.\n");
41 1.1 cgd #endif /* not lint */
42 1.1 cgd
43 1.1 cgd #ifndef lint
44 1.13 cgd #if 0
45 1.17 cjs static char sccsid[] = "@(#)ftpd.c 8.5 (Berkeley) 4/28/95";
46 1.13 cgd #else
47 1.26 mellon __RCSID("$NetBSD: ftpd.c,v 1.26 1997/06/21 04:38:54 mellon Exp $");
48 1.13 cgd #endif
49 1.1 cgd #endif /* not lint */
50 1.1 cgd
51 1.1 cgd /*
52 1.1 cgd * FTP server.
53 1.1 cgd */
54 1.1 cgd #include <sys/param.h>
55 1.1 cgd #include <sys/stat.h>
56 1.1 cgd #include <sys/ioctl.h>
57 1.1 cgd #include <sys/socket.h>
58 1.1 cgd #include <sys/wait.h>
59 1.1 cgd
60 1.1 cgd #include <netinet/in.h>
61 1.1 cgd #include <netinet/in_systm.h>
62 1.1 cgd #include <netinet/ip.h>
63 1.1 cgd
64 1.1 cgd #define FTP_NAMES
65 1.1 cgd #include <arpa/ftp.h>
66 1.1 cgd #include <arpa/inet.h>
67 1.1 cgd #include <arpa/telnet.h>
68 1.1 cgd
69 1.8 deraadt #include <ctype.h>
70 1.1 cgd #include <dirent.h>
71 1.8 deraadt #include <err.h>
72 1.8 deraadt #include <errno.h>
73 1.1 cgd #include <fcntl.h>
74 1.21 cjs #include <fnmatch.h>
75 1.8 deraadt #include <glob.h>
76 1.8 deraadt #include <limits.h>
77 1.8 deraadt #include <netdb.h>
78 1.1 cgd #include <pwd.h>
79 1.1 cgd #include <setjmp.h>
80 1.8 deraadt #include <signal.h>
81 1.1 cgd #include <stdio.h>
82 1.1 cgd #include <stdlib.h>
83 1.1 cgd #include <string.h>
84 1.8 deraadt #include <syslog.h>
85 1.8 deraadt #include <time.h>
86 1.8 deraadt #include <unistd.h>
87 1.25 christos #ifdef SKEY
88 1.25 christos #include <skey.h>
89 1.25 christos #endif
90 1.8 deraadt
91 1.24 lukem #include "extern.h"
92 1.1 cgd #include "pathnames.h"
93 1.1 cgd
94 1.8 deraadt #if __STDC__
95 1.8 deraadt #include <stdarg.h>
96 1.8 deraadt #else
97 1.8 deraadt #include <varargs.h>
98 1.8 deraadt #endif
99 1.8 deraadt
100 1.24 lukem static char version[] = "Version 7.00";
101 1.8 deraadt
102 1.8 deraadt extern off_t restart_point;
103 1.1 cgd extern char cbuf[];
104 1.25 christos extern int yyparse __P((void));
105 1.1 cgd
106 1.1 cgd struct sockaddr_in ctrl_addr;
107 1.1 cgd struct sockaddr_in data_source;
108 1.1 cgd struct sockaddr_in data_dest;
109 1.1 cgd struct sockaddr_in his_addr;
110 1.1 cgd struct sockaddr_in pasv_addr;
111 1.1 cgd
112 1.1 cgd int data;
113 1.1 cgd jmp_buf errcatch, urgcatch;
114 1.1 cgd int logged_in;
115 1.1 cgd struct passwd *pw;
116 1.1 cgd int debug;
117 1.1 cgd int logging;
118 1.1 cgd int guest;
119 1.5 cgd int dochroot;
120 1.1 cgd int type;
121 1.1 cgd int form;
122 1.1 cgd int stru; /* avoid C keyword */
123 1.1 cgd int mode;
124 1.1 cgd int usedefault = 1; /* for data transfers */
125 1.1 cgd int pdata = -1; /* for passive mode */
126 1.8 deraadt sig_atomic_t transflag;
127 1.1 cgd off_t file_size;
128 1.1 cgd off_t byte_count;
129 1.1 cgd char tmpline[7];
130 1.1 cgd char hostname[MAXHOSTNAMELEN];
131 1.1 cgd char remotehost[MAXHOSTNAMELEN];
132 1.13 cgd static char ttyline[20];
133 1.13 cgd char *tty = ttyline; /* for klogin */
134 1.22 cjs static char *anondir = NULL;
135 1.24 lukem
136 1.24 lukem extern struct ftpclass curclass;
137 1.1 cgd
138 1.4 cgd #if defined(KERBEROS)
139 1.13 cgd int notickets = 1;
140 1.13 cgd char *krbtkfile_env = NULL;
141 1.4 cgd #endif
142 1.4 cgd
143 1.1 cgd /*
144 1.1 cgd * Timeout intervals for retrying connections
145 1.1 cgd * to hosts that don't accept PORT cmds. This
146 1.1 cgd * is a kludge, but given the problems with TCP...
147 1.1 cgd */
148 1.1 cgd #define SWAITMAX 90 /* wait at most 90 seconds */
149 1.1 cgd #define SWAITINT 5 /* interval between retries */
150 1.1 cgd
151 1.1 cgd int swaitmax = SWAITMAX;
152 1.1 cgd int swaitint = SWAITINT;
153 1.1 cgd
154 1.6 cgd #ifdef HASSETPROCTITLE
155 1.1 cgd char proctitle[BUFSIZ]; /* initial part of title */
156 1.6 cgd #endif /* HASSETPROCTITLE */
157 1.1 cgd
158 1.8 deraadt #define LOGCMD(cmd, file) \
159 1.8 deraadt if (logging > 1) \
160 1.8 deraadt syslog(LOG_INFO,"%s %s%s", cmd, \
161 1.8 deraadt *(file) == '/' ? "" : curdir(), file);
162 1.8 deraadt #define LOGCMD2(cmd, file1, file2) \
163 1.8 deraadt if (logging > 1) \
164 1.8 deraadt syslog(LOG_INFO,"%s %s%s %s%s", cmd, \
165 1.8 deraadt *(file1) == '/' ? "" : curdir(), file1, \
166 1.8 deraadt *(file2) == '/' ? "" : curdir(), file2);
167 1.8 deraadt #define LOGBYTES(cmd, file, cnt) \
168 1.8 deraadt if (logging > 1) { \
169 1.8 deraadt if (cnt == (off_t)-1) \
170 1.8 deraadt syslog(LOG_INFO,"%s %s%s", cmd, \
171 1.8 deraadt *(file) == '/' ? "" : curdir(), file); \
172 1.8 deraadt else \
173 1.8 deraadt syslog(LOG_INFO, "%s %s%s = %qd bytes", \
174 1.8 deraadt cmd, (*(file) == '/') ? "" : curdir(), file, cnt); \
175 1.8 deraadt }
176 1.8 deraadt
177 1.8 deraadt static void ack __P((char *));
178 1.8 deraadt static void myoob __P((int));
179 1.8 deraadt static int checkuser __P((char *, char *));
180 1.19 cjs static int checkaccess __P((char *));
181 1.8 deraadt static FILE *dataconn __P((char *, off_t, char *));
182 1.8 deraadt static void dolog __P((struct sockaddr_in *));
183 1.8 deraadt static char *curdir __P((void));
184 1.8 deraadt static void end_login __P((void));
185 1.8 deraadt static FILE *getdatasock __P((char *));
186 1.8 deraadt static char *gunique __P((char *));
187 1.8 deraadt static void lostconn __P((int));
188 1.8 deraadt static int receive_data __P((FILE *, FILE *));
189 1.8 deraadt static void send_data __P((FILE *, FILE *, off_t));
190 1.8 deraadt static struct passwd *
191 1.8 deraadt sgetpwnam __P((char *));
192 1.8 deraadt static char *sgetsave __P((char *));
193 1.8 deraadt
194 1.25 christos int main __P((int, char *[], char **));
195 1.26 mellon
196 1.26 mellon #if defined (KERBEROS)
197 1.26 mellon int klogin __P((struct passwd *, char *, char *, char *));
198 1.26 mellon #endif
199 1.25 christos
200 1.8 deraadt static char *
201 1.8 deraadt curdir()
202 1.8 deraadt {
203 1.8 deraadt static char path[MAXPATHLEN+1+1]; /* path + '/' + '\0' */
204 1.8 deraadt
205 1.8 deraadt if (getcwd(path, sizeof(path)-2) == NULL)
206 1.8 deraadt return ("");
207 1.8 deraadt if (path[1] != '\0') /* special case for root dir. */
208 1.8 deraadt strcat(path, "/");
209 1.8 deraadt /* For guest account, skip / since it's chrooted */
210 1.8 deraadt return (guest ? path+1 : path);
211 1.8 deraadt }
212 1.8 deraadt
213 1.8 deraadt int
214 1.1 cgd main(argc, argv, envp)
215 1.1 cgd int argc;
216 1.1 cgd char *argv[];
217 1.1 cgd char **envp;
218 1.1 cgd {
219 1.8 deraadt int addrlen, ch, on = 1, tos;
220 1.8 deraadt char *cp, line[LINE_MAX];
221 1.8 deraadt FILE *fd;
222 1.1 cgd
223 1.1 cgd /*
224 1.1 cgd * LOG_NDELAY sets up the logging connection immediately,
225 1.1 cgd * necessary for anonymous ftp's that chroot and can't do it later.
226 1.1 cgd */
227 1.8 deraadt openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP);
228 1.8 deraadt addrlen = sizeof(his_addr);
229 1.1 cgd if (getpeername(0, (struct sockaddr *)&his_addr, &addrlen) < 0) {
230 1.1 cgd syslog(LOG_ERR, "getpeername (%s): %m",argv[0]);
231 1.1 cgd exit(1);
232 1.1 cgd }
233 1.8 deraadt addrlen = sizeof(ctrl_addr);
234 1.1 cgd if (getsockname(0, (struct sockaddr *)&ctrl_addr, &addrlen) < 0) {
235 1.1 cgd syslog(LOG_ERR, "getsockname (%s): %m",argv[0]);
236 1.1 cgd exit(1);
237 1.1 cgd }
238 1.1 cgd #ifdef IP_TOS
239 1.1 cgd tos = IPTOS_LOWDELAY;
240 1.1 cgd if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&tos, sizeof(int)) < 0)
241 1.1 cgd syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
242 1.1 cgd #endif
243 1.1 cgd data_source.sin_port = htons(ntohs(ctrl_addr.sin_port) - 1);
244 1.1 cgd debug = 0;
245 1.1 cgd
246 1.11 brezak /* set this here so klogin can use it... */
247 1.11 brezak (void)sprintf(ttyline, "ftp%d", getpid());
248 1.11 brezak
249 1.22 cjs while ((ch = getopt(argc, argv, "a:dlt:T:u:v")) != EOF) {
250 1.8 deraadt switch (ch) {
251 1.22 cjs case 'a':
252 1.22 cjs anondir = optarg;
253 1.22 cjs break;
254 1.22 cjs
255 1.1 cgd case 'd':
256 1.22 cjs case 'v': /* deprecated */
257 1.1 cgd debug = 1;
258 1.1 cgd break;
259 1.1 cgd
260 1.1 cgd case 'l':
261 1.8 deraadt logging++; /* > 1 == extra logging */
262 1.1 cgd break;
263 1.1 cgd
264 1.1 cgd case 't':
265 1.1 cgd case 'T':
266 1.1 cgd case 'u':
267 1.24 lukem warnx("-%c has be deprecated in favour of ftpd.conf",
268 1.24 lukem ch);
269 1.8 deraadt break;
270 1.1 cgd
271 1.1 cgd default:
272 1.8 deraadt warnx("unknown flag -%c ignored", optopt);
273 1.1 cgd break;
274 1.1 cgd }
275 1.1 cgd }
276 1.1 cgd (void) freopen(_PATH_DEVNULL, "w", stderr);
277 1.1 cgd (void) signal(SIGPIPE, lostconn);
278 1.1 cgd (void) signal(SIGCHLD, SIG_IGN);
279 1.10 cgd if ((long)signal(SIGURG, myoob) < 0)
280 1.1 cgd syslog(LOG_ERR, "signal: %m");
281 1.1 cgd
282 1.1 cgd /* Try to handle urgent data inline */
283 1.1 cgd #ifdef SO_OOBINLINE
284 1.1 cgd if (setsockopt(0, SOL_SOCKET, SO_OOBINLINE, (char *)&on, sizeof(on)) < 0)
285 1.1 cgd syslog(LOG_ERR, "setsockopt: %m");
286 1.1 cgd #endif
287 1.1 cgd
288 1.1 cgd #ifdef F_SETOWN
289 1.1 cgd if (fcntl(fileno(stdin), F_SETOWN, getpid()) == -1)
290 1.1 cgd syslog(LOG_ERR, "fcntl F_SETOWN: %m");
291 1.1 cgd #endif
292 1.1 cgd dolog(&his_addr);
293 1.1 cgd /*
294 1.1 cgd * Set up default state
295 1.1 cgd */
296 1.1 cgd data = -1;
297 1.1 cgd type = TYPE_A;
298 1.1 cgd form = FORM_N;
299 1.1 cgd stru = STRU_F;
300 1.1 cgd mode = MODE_S;
301 1.1 cgd tmpline[0] = '\0';
302 1.8 deraadt
303 1.8 deraadt /* If logins are disabled, print out the message. */
304 1.8 deraadt if ((fd = fopen(_PATH_NOLOGIN,"r")) != NULL) {
305 1.8 deraadt while (fgets(line, sizeof(line), fd) != NULL) {
306 1.8 deraadt if ((cp = strchr(line, '\n')) != NULL)
307 1.8 deraadt *cp = '\0';
308 1.8 deraadt lreply(530, "%s", line);
309 1.8 deraadt }
310 1.8 deraadt (void) fflush(stdout);
311 1.8 deraadt (void) fclose(fd);
312 1.8 deraadt reply(530, "System not available.");
313 1.8 deraadt exit(0);
314 1.8 deraadt }
315 1.8 deraadt if ((fd = fopen(_PATH_FTPWELCOME, "r")) != NULL) {
316 1.8 deraadt while (fgets(line, sizeof(line), fd) != NULL) {
317 1.8 deraadt if ((cp = strchr(line, '\n')) != NULL)
318 1.8 deraadt *cp = '\0';
319 1.8 deraadt lreply(220, "%s", line);
320 1.8 deraadt }
321 1.8 deraadt (void) fflush(stdout);
322 1.8 deraadt (void) fclose(fd);
323 1.8 deraadt /* reply(220,) must follow */
324 1.8 deraadt }
325 1.8 deraadt (void) gethostname(hostname, sizeof(hostname));
326 1.1 cgd reply(220, "%s FTP server (%s) ready.", hostname, version);
327 1.1 cgd (void) setjmp(errcatch);
328 1.1 cgd for (;;)
329 1.1 cgd (void) yyparse();
330 1.1 cgd /* NOTREACHED */
331 1.1 cgd }
332 1.1 cgd
333 1.8 deraadt static void
334 1.8 deraadt lostconn(signo)
335 1.8 deraadt int signo;
336 1.1 cgd {
337 1.8 deraadt
338 1.1 cgd if (debug)
339 1.1 cgd syslog(LOG_DEBUG, "lost connection");
340 1.1 cgd dologout(-1);
341 1.1 cgd }
342 1.1 cgd
343 1.1 cgd /*
344 1.1 cgd * Helper function for sgetpwnam().
345 1.1 cgd */
346 1.8 deraadt static char *
347 1.1 cgd sgetsave(s)
348 1.1 cgd char *s;
349 1.1 cgd {
350 1.1 cgd char *new = malloc((unsigned) strlen(s) + 1);
351 1.1 cgd
352 1.1 cgd if (new == NULL) {
353 1.1 cgd perror_reply(421, "Local resource failure: malloc");
354 1.1 cgd dologout(1);
355 1.1 cgd /* NOTREACHED */
356 1.1 cgd }
357 1.1 cgd (void) strcpy(new, s);
358 1.1 cgd return (new);
359 1.1 cgd }
360 1.1 cgd
361 1.1 cgd /*
362 1.1 cgd * Save the result of a getpwnam. Used for USER command, since
363 1.1 cgd * the data returned must not be clobbered by any other command
364 1.1 cgd * (e.g., globbing).
365 1.1 cgd */
366 1.8 deraadt static struct passwd *
367 1.1 cgd sgetpwnam(name)
368 1.1 cgd char *name;
369 1.1 cgd {
370 1.1 cgd static struct passwd save;
371 1.8 deraadt struct passwd *p;
372 1.1 cgd
373 1.1 cgd if ((p = getpwnam(name)) == NULL)
374 1.1 cgd return (p);
375 1.1 cgd if (save.pw_name) {
376 1.1 cgd free(save.pw_name);
377 1.1 cgd free(save.pw_passwd);
378 1.1 cgd free(save.pw_gecos);
379 1.1 cgd free(save.pw_dir);
380 1.1 cgd free(save.pw_shell);
381 1.1 cgd }
382 1.1 cgd save = *p;
383 1.1 cgd save.pw_name = sgetsave(p->pw_name);
384 1.1 cgd save.pw_passwd = sgetsave(p->pw_passwd);
385 1.1 cgd save.pw_gecos = sgetsave(p->pw_gecos);
386 1.1 cgd save.pw_dir = sgetsave(p->pw_dir);
387 1.1 cgd save.pw_shell = sgetsave(p->pw_shell);
388 1.1 cgd return (&save);
389 1.1 cgd }
390 1.1 cgd
391 1.8 deraadt static int login_attempts; /* number of failed login attempts */
392 1.8 deraadt static int askpasswd; /* had user command, ask for passwd */
393 1.8 deraadt static char curname[10]; /* current USER name */
394 1.1 cgd
395 1.1 cgd /*
396 1.1 cgd * USER command.
397 1.1 cgd * Sets global passwd pointer pw if named account exists and is acceptable;
398 1.1 cgd * sets askpasswd if a PASS command is expected. If logged in previously,
399 1.1 cgd * need to reset state. If name is "ftp" or "anonymous", the name is not in
400 1.1 cgd * _PATH_FTPUSERS, and ftp account exists, set guest and pw, then just return.
401 1.1 cgd * If account doesn't exist, ask for passwd anyway. Otherwise, check user
402 1.1 cgd * requesting login privileges. Disallow anyone who does not have a standard
403 1.1 cgd * shell as returned by getusershell(). Disallow anyone mentioned in the file
404 1.1 cgd * _PATH_FTPUSERS to allow people such as root and uucp to be avoided.
405 1.1 cgd */
406 1.8 deraadt void
407 1.1 cgd user(name)
408 1.1 cgd char *name;
409 1.1 cgd {
410 1.1 cgd if (logged_in) {
411 1.1 cgd if (guest) {
412 1.1 cgd reply(530, "Can't change user from guest login.");
413 1.1 cgd return;
414 1.5 cgd } else if (dochroot) {
415 1.5 cgd reply(530, "Can't change user from chroot user.");
416 1.5 cgd return;
417 1.1 cgd }
418 1.1 cgd end_login();
419 1.1 cgd }
420 1.1 cgd
421 1.1 cgd guest = 0;
422 1.1 cgd if (strcmp(name, "ftp") == 0 || strcmp(name, "anonymous") == 0) {
423 1.19 cjs if (checkaccess("ftp") || checkaccess("anonymous"))
424 1.1 cgd reply(530, "User %s access denied.", name);
425 1.1 cgd else if ((pw = sgetpwnam("ftp")) != NULL) {
426 1.1 cgd guest = 1;
427 1.1 cgd askpasswd = 1;
428 1.8 deraadt reply(331,
429 1.8 deraadt "Guest login ok, type your name as password.");
430 1.1 cgd } else
431 1.1 cgd reply(530, "User %s unknown.", name);
432 1.8 deraadt if (!askpasswd && logging)
433 1.8 deraadt syslog(LOG_NOTICE,
434 1.8 deraadt "ANONYMOUS FTP LOGIN REFUSED FROM %s", remotehost);
435 1.1 cgd return;
436 1.1 cgd }
437 1.19 cjs pw = sgetpwnam(name);
438 1.8 deraadt if (logging)
439 1.8 deraadt strncpy(curname, name, sizeof(curname)-1);
440 1.7 deraadt #ifdef SKEY
441 1.8 deraadt if (!skey_haskey(name)) {
442 1.8 deraadt char *myskey, *skey_keyinfo __P((char *name));
443 1.7 deraadt
444 1.8 deraadt myskey = skey_keyinfo(name);
445 1.7 deraadt reply(331, "Password [%s] for %s required.",
446 1.8 deraadt myskey ? myskey : "error getting challenge", name);
447 1.7 deraadt } else
448 1.7 deraadt #endif
449 1.7 deraadt reply(331, "Password required for %s.", name);
450 1.7 deraadt
451 1.1 cgd askpasswd = 1;
452 1.1 cgd /*
453 1.1 cgd * Delay before reading passwd after first failed
454 1.1 cgd * attempt to slow down passwd-guessing programs.
455 1.1 cgd */
456 1.1 cgd if (login_attempts)
457 1.1 cgd sleep((unsigned) login_attempts);
458 1.1 cgd }
459 1.1 cgd
460 1.1 cgd /*
461 1.5 cgd * Check if a user is in the file "fname"
462 1.1 cgd */
463 1.8 deraadt static int
464 1.5 cgd checkuser(fname, name)
465 1.5 cgd char *fname;
466 1.1 cgd char *name;
467 1.1 cgd {
468 1.8 deraadt FILE *fd;
469 1.8 deraadt int found = 0;
470 1.8 deraadt char *p, line[BUFSIZ];
471 1.1 cgd
472 1.5 cgd if ((fd = fopen(fname, "r")) != NULL) {
473 1.1 cgd while (fgets(line, sizeof(line), fd) != NULL)
474 1.8 deraadt if ((p = strchr(line, '\n')) != NULL) {
475 1.1 cgd *p = '\0';
476 1.1 cgd if (line[0] == '#')
477 1.1 cgd continue;
478 1.9 jtc if (strcmp(line, name) == 0) {
479 1.8 deraadt found = 1;
480 1.8 deraadt break;
481 1.8 deraadt }
482 1.1 cgd }
483 1.1 cgd (void) fclose(fd);
484 1.1 cgd }
485 1.8 deraadt return (found);
486 1.1 cgd }
487 1.1 cgd
488 1.1 cgd /*
489 1.19 cjs * Determine whether a user has access, based on information in
490 1.21 cjs * _PATH_FTPUSERS. Each line is a shell-style glob followed by
491 1.21 cjs * `allow' or `deny' (with deny being the default if anything but
492 1.21 cjs * `allow', or nothing at all, is specified).
493 1.19 cjs *
494 1.21 cjs * Each glob is matched against the username in turn, and the first
495 1.21 cjs * match found is used. If no match is found, access is allowed.
496 1.21 cjs *
497 1.21 cjs * Any line starting with `#' is considered a comment and ignored.
498 1.19 cjs *
499 1.19 cjs * This is probably not the best way to do this, but it preserves
500 1.19 cjs * the old semantics where if a user was listed in the file he was
501 1.19 cjs * denied, otherwise he was allowed.
502 1.19 cjs *
503 1.19 cjs * There is one change in the semantics, however; ftpd will now `fail
504 1.19 cjs * safe' and deny all access if there's no /etc/ftpusers file.
505 1.19 cjs *
506 1.19 cjs * Return 1 if the user is denied, or 0 if he is allowed.
507 1.19 cjs */
508 1.19 cjs static int
509 1.19 cjs checkaccess(name)
510 1.19 cjs char *name;
511 1.19 cjs {
512 1.19 cjs #define ALLOWED 0
513 1.19 cjs #define NOT_ALLOWED 1
514 1.19 cjs FILE *fd;
515 1.21 cjs int retval = ALLOWED;
516 1.21 cjs char *glob, *perm, line[BUFSIZ];
517 1.19 cjs
518 1.19 cjs if ((fd = fopen(_PATH_FTPUSERS, "r")) == NULL)
519 1.19 cjs return NOT_ALLOWED;
520 1.19 cjs
521 1.19 cjs while (fgets(line, sizeof(line), fd) != NULL) {
522 1.21 cjs glob = strtok(line, " \t\n");
523 1.21 cjs if (glob[0] == '#')
524 1.19 cjs continue;
525 1.19 cjs perm = strtok(NULL, " \t\n");
526 1.21 cjs if (fnmatch(glob, name, 0) == 0) {
527 1.19 cjs if (perm != NULL && strcmp(perm, "allow") == 0)
528 1.21 cjs retval = ALLOWED;
529 1.19 cjs else
530 1.21 cjs retval = NOT_ALLOWED;
531 1.21 cjs break;
532 1.19 cjs }
533 1.19 cjs }
534 1.19 cjs (void) fclose(fd);
535 1.21 cjs return (retval);
536 1.21 cjs
537 1.19 cjs }
538 1.19 cjs #undef ALLOWED
539 1.19 cjs #undef NOT_ALLOWED
540 1.19 cjs
541 1.19 cjs /*
542 1.1 cgd * Terminate login as previous user, if any, resetting state;
543 1.1 cgd * used when USER command is given or login fails.
544 1.1 cgd */
545 1.8 deraadt static void
546 1.1 cgd end_login()
547 1.1 cgd {
548 1.1 cgd
549 1.1 cgd (void) seteuid((uid_t)0);
550 1.1 cgd if (logged_in)
551 1.1 cgd logwtmp(ttyline, "", "");
552 1.1 cgd pw = NULL;
553 1.1 cgd logged_in = 0;
554 1.1 cgd guest = 0;
555 1.5 cgd dochroot = 0;
556 1.1 cgd }
557 1.1 cgd
558 1.8 deraadt void
559 1.1 cgd pass(passwd)
560 1.1 cgd char *passwd;
561 1.1 cgd {
562 1.4 cgd int rval;
563 1.8 deraadt FILE *fd;
564 1.19 cjs char *cp, *shell;
565 1.1 cgd
566 1.1 cgd if (logged_in || askpasswd == 0) {
567 1.1 cgd reply(503, "Login with USER first.");
568 1.1 cgd return;
569 1.1 cgd }
570 1.1 cgd askpasswd = 0;
571 1.1 cgd if (!guest) { /* "ftp" is only account allowed no password */
572 1.8 deraadt if (pw == NULL) {
573 1.8 deraadt rval = 1; /* failure below */
574 1.8 deraadt goto skip;
575 1.8 deraadt }
576 1.4 cgd #if defined(KERBEROS)
577 1.8 deraadt rval = klogin(pw, "", hostname, passwd);
578 1.8 deraadt if (rval == 0)
579 1.8 deraadt goto skip;
580 1.4 cgd #endif
581 1.7 deraadt #ifdef SKEY
582 1.8 deraadt if (skey_haskey(pw->pw_name) == 0 &&
583 1.8 deraadt (skey_passcheck(pw->pw_name, passwd) != -1)) {
584 1.8 deraadt rval = 0;
585 1.8 deraadt goto skip;
586 1.8 deraadt }
587 1.7 deraadt #endif
588 1.8 deraadt /* the strcmp does not catch null passwords! */
589 1.8 deraadt if (pw == NULL || *pw->pw_passwd == '\0' ||
590 1.8 deraadt strcmp(crypt(passwd, (pw ? pw->pw_passwd : "xx")), pw->pw_passwd)) {
591 1.8 deraadt rval = 1; /* failure */
592 1.8 deraadt goto skip;
593 1.7 deraadt }
594 1.8 deraadt rval = 0;
595 1.4 cgd
596 1.8 deraadt skip:
597 1.4 cgd /*
598 1.4 cgd * If rval == 1, the user failed the authentication check
599 1.4 cgd * above. If rval == 0, either Kerberos or local authentication
600 1.4 cgd * succeeded.
601 1.4 cgd */
602 1.4 cgd if (rval) {
603 1.1 cgd reply(530, "Login incorrect.");
604 1.23 lukem if (logging) {
605 1.8 deraadt syslog(LOG_NOTICE,
606 1.23 lukem "FTP LOGIN FAILED FROM %s", remotehost);
607 1.23 lukem syslog(LOG_AUTHPRIV | LOG_NOTICE,
608 1.8 deraadt "FTP LOGIN FAILED FROM %s, %s",
609 1.8 deraadt remotehost, curname);
610 1.23 lukem }
611 1.1 cgd pw = NULL;
612 1.1 cgd if (login_attempts++ >= 5) {
613 1.1 cgd syslog(LOG_NOTICE,
614 1.1 cgd "repeated login failures from %s",
615 1.1 cgd remotehost);
616 1.1 cgd exit(0);
617 1.1 cgd }
618 1.1 cgd return;
619 1.1 cgd }
620 1.1 cgd }
621 1.19 cjs
622 1.19 cjs /* password was ok; see if anything else prevents login */
623 1.19 cjs if (checkaccess(pw->pw_name)) {
624 1.19 cjs reply(530, "User %s may not use FTP.", pw->pw_name);
625 1.19 cjs if (logging)
626 1.19 cjs syslog(LOG_NOTICE, "FTP LOGIN REFUSED FROM %s, %s",
627 1.19 cjs remotehost, pw->pw_name);
628 1.19 cjs pw = (struct passwd *) NULL;
629 1.19 cjs return;
630 1.19 cjs }
631 1.19 cjs /* check for valid shell, if not guest user */
632 1.19 cjs if ((shell = pw->pw_shell) == NULL || *shell == 0)
633 1.19 cjs shell = _PATH_BSHELL;
634 1.19 cjs while ((cp = getusershell()) != NULL)
635 1.19 cjs if (strcmp(cp, shell) == 0)
636 1.19 cjs break;
637 1.19 cjs endusershell();
638 1.19 cjs if (cp == NULL && guest == 0) {
639 1.19 cjs reply(530, "User %s may not use FTP.", pw->pw_name);
640 1.19 cjs if (logging)
641 1.19 cjs syslog(LOG_NOTICE,
642 1.19 cjs "FTP LOGIN REFUSED FROM %s, %s",
643 1.19 cjs remotehost, pw->pw_name);
644 1.19 cjs pw = (struct passwd *) NULL;
645 1.19 cjs return;
646 1.19 cjs }
647 1.19 cjs
648 1.1 cgd login_attempts = 0; /* this time successful */
649 1.8 deraadt if (setegid((gid_t)pw->pw_gid) < 0) {
650 1.8 deraadt reply(550, "Can't set gid.");
651 1.8 deraadt return;
652 1.8 deraadt }
653 1.1 cgd (void) initgroups(pw->pw_name, pw->pw_gid);
654 1.1 cgd
655 1.1 cgd /* open wtmp before chroot */
656 1.1 cgd logwtmp(ttyline, pw->pw_name, remotehost);
657 1.1 cgd logged_in = 1;
658 1.1 cgd
659 1.5 cgd dochroot = checkuser(_PATH_FTPCHROOT, pw->pw_name);
660 1.24 lukem
661 1.24 lukem /* parse ftpd.conf, setting up various parameters */
662 1.24 lukem if (guest)
663 1.24 lukem parse_conf(CLASS_GUEST);
664 1.24 lukem else if (dochroot)
665 1.24 lukem parse_conf(CLASS_CHROOT);
666 1.24 lukem else
667 1.24 lukem parse_conf(CLASS_REAL);
668 1.24 lukem
669 1.1 cgd if (guest) {
670 1.1 cgd /*
671 1.1 cgd * We MUST do a chdir() after the chroot. Otherwise
672 1.1 cgd * the old current directory will be accessible as "."
673 1.1 cgd * outside the new root!
674 1.1 cgd */
675 1.24 lukem if (chroot(anondir ? anondir : pw->pw_dir) < 0 ||
676 1.24 lukem chdir("/") < 0) {
677 1.1 cgd reply(550, "Can't set guest privileges.");
678 1.5 cgd goto bad;
679 1.5 cgd }
680 1.5 cgd } else if (dochroot) {
681 1.5 cgd if (chroot(pw->pw_dir) < 0 || chdir("/") < 0) {
682 1.5 cgd reply(550, "Can't change root.");
683 1.1 cgd goto bad;
684 1.1 cgd }
685 1.1 cgd } else if (chdir(pw->pw_dir) < 0) {
686 1.1 cgd if (chdir("/") < 0) {
687 1.1 cgd reply(530, "User %s: can't change directory to %s.",
688 1.1 cgd pw->pw_name, pw->pw_dir);
689 1.1 cgd goto bad;
690 1.1 cgd } else
691 1.1 cgd lreply(230, "No directory! Logging in with home=/");
692 1.1 cgd }
693 1.1 cgd if (seteuid((uid_t)pw->pw_uid) < 0) {
694 1.1 cgd reply(550, "Can't set uid.");
695 1.1 cgd goto bad;
696 1.1 cgd }
697 1.8 deraadt /*
698 1.8 deraadt * Display a login message, if it exists.
699 1.8 deraadt * N.B. reply(230,) must follow the message.
700 1.8 deraadt */
701 1.8 deraadt if ((fd = fopen(_PATH_FTPLOGINMESG, "r")) != NULL) {
702 1.8 deraadt char *cp, line[LINE_MAX];
703 1.8 deraadt
704 1.8 deraadt while (fgets(line, sizeof(line), fd) != NULL) {
705 1.8 deraadt if ((cp = strchr(line, '\n')) != NULL)
706 1.8 deraadt *cp = '\0';
707 1.8 deraadt lreply(230, "%s", line);
708 1.8 deraadt }
709 1.8 deraadt (void) fflush(stdout);
710 1.8 deraadt (void) fclose(fd);
711 1.8 deraadt }
712 1.24 lukem show_chdir_messages(230);
713 1.1 cgd if (guest) {
714 1.1 cgd reply(230, "Guest login ok, access restrictions apply.");
715 1.6 cgd #ifdef HASSETPROCTITLE
716 1.8 deraadt snprintf(proctitle, sizeof(proctitle),
717 1.8 deraadt "%s: anonymous/%.*s", remotehost,
718 1.25 christos (int) (sizeof(proctitle) - sizeof(remotehost) -
719 1.25 christos sizeof(": anonymous/")), passwd);
720 1.1 cgd setproctitle(proctitle);
721 1.6 cgd #endif /* HASSETPROCTITLE */
722 1.1 cgd if (logging)
723 1.1 cgd syslog(LOG_INFO, "ANONYMOUS FTP LOGIN FROM %s, %s",
724 1.1 cgd remotehost, passwd);
725 1.1 cgd } else {
726 1.1 cgd reply(230, "User %s logged in.", pw->pw_name);
727 1.6 cgd #ifdef HASSETPROCTITLE
728 1.8 deraadt snprintf(proctitle, sizeof(proctitle),
729 1.8 deraadt "%s: %s", remotehost, pw->pw_name);
730 1.1 cgd setproctitle(proctitle);
731 1.6 cgd #endif /* HASSETPROCTITLE */
732 1.1 cgd if (logging)
733 1.8 deraadt syslog(LOG_INFO, "FTP LOGIN FROM %s as %s",
734 1.1 cgd remotehost, pw->pw_name);
735 1.1 cgd }
736 1.24 lukem (void) umask(curclass.umask);
737 1.1 cgd return;
738 1.1 cgd bad:
739 1.1 cgd /* Forget all about it... */
740 1.1 cgd end_login();
741 1.1 cgd }
742 1.1 cgd
743 1.8 deraadt void
744 1.1 cgd retrieve(cmd, name)
745 1.1 cgd char *cmd, *name;
746 1.1 cgd {
747 1.1 cgd FILE *fin, *dout;
748 1.1 cgd struct stat st;
749 1.8 deraadt int (*closefunc) __P((FILE *));
750 1.24 lukem int log;
751 1.1 cgd
752 1.24 lukem log = (cmd == 0);
753 1.1 cgd if (cmd == 0) {
754 1.1 cgd fin = fopen(name, "r"), closefunc = fclose;
755 1.24 lukem if (fin == NULL)
756 1.24 lukem cmd = do_conversion(name);
757 1.24 lukem }
758 1.24 lukem if (cmd) {
759 1.1 cgd char line[BUFSIZ];
760 1.1 cgd
761 1.1 cgd (void) sprintf(line, cmd, name), name = line;
762 1.24 lukem fin = ftpd_popen(line, "r", 1), closefunc = ftpd_pclose;
763 1.1 cgd st.st_size = -1;
764 1.1 cgd st.st_blksize = BUFSIZ;
765 1.1 cgd }
766 1.1 cgd if (fin == NULL) {
767 1.8 deraadt if (errno != 0) {
768 1.1 cgd perror_reply(550, name);
769 1.24 lukem if (log) {
770 1.8 deraadt LOGCMD("get", name);
771 1.8 deraadt }
772 1.8 deraadt }
773 1.1 cgd return;
774 1.1 cgd }
775 1.8 deraadt byte_count = -1;
776 1.8 deraadt if (cmd == 0 && (fstat(fileno(fin), &st) < 0 || !S_ISREG(st.st_mode))) {
777 1.1 cgd reply(550, "%s: not a plain file.", name);
778 1.1 cgd goto done;
779 1.1 cgd }
780 1.1 cgd if (restart_point) {
781 1.1 cgd if (type == TYPE_A) {
782 1.8 deraadt off_t i, n;
783 1.8 deraadt int c;
784 1.1 cgd
785 1.1 cgd n = restart_point;
786 1.1 cgd i = 0;
787 1.1 cgd while (i++ < n) {
788 1.1 cgd if ((c=getc(fin)) == EOF) {
789 1.1 cgd perror_reply(550, name);
790 1.1 cgd goto done;
791 1.1 cgd }
792 1.1 cgd if (c == '\n')
793 1.1 cgd i++;
794 1.8 deraadt }
795 1.1 cgd } else if (lseek(fileno(fin), restart_point, L_SET) < 0) {
796 1.1 cgd perror_reply(550, name);
797 1.1 cgd goto done;
798 1.1 cgd }
799 1.1 cgd }
800 1.1 cgd dout = dataconn(name, st.st_size, "w");
801 1.1 cgd if (dout == NULL)
802 1.1 cgd goto done;
803 1.1 cgd send_data(fin, dout, st.st_blksize);
804 1.1 cgd (void) fclose(dout);
805 1.1 cgd data = -1;
806 1.1 cgd pdata = -1;
807 1.1 cgd done:
808 1.24 lukem if (log)
809 1.8 deraadt LOGBYTES("get", name, byte_count);
810 1.1 cgd (*closefunc)(fin);
811 1.1 cgd }
812 1.1 cgd
813 1.8 deraadt void
814 1.1 cgd store(name, mode, unique)
815 1.1 cgd char *name, *mode;
816 1.1 cgd int unique;
817 1.1 cgd {
818 1.1 cgd FILE *fout, *din;
819 1.1 cgd struct stat st;
820 1.8 deraadt int (*closefunc) __P((FILE *));
821 1.1 cgd
822 1.1 cgd if (unique && stat(name, &st) == 0 &&
823 1.8 deraadt (name = gunique(name)) == NULL) {
824 1.8 deraadt LOGCMD(*mode == 'w' ? "put" : "append", name);
825 1.1 cgd return;
826 1.8 deraadt }
827 1.1 cgd
828 1.1 cgd if (restart_point)
829 1.8 deraadt mode = "r+";
830 1.1 cgd fout = fopen(name, mode);
831 1.1 cgd closefunc = fclose;
832 1.1 cgd if (fout == NULL) {
833 1.1 cgd perror_reply(553, name);
834 1.8 deraadt LOGCMD(*mode == 'w' ? "put" : "append", name);
835 1.1 cgd return;
836 1.1 cgd }
837 1.8 deraadt byte_count = -1;
838 1.1 cgd if (restart_point) {
839 1.1 cgd if (type == TYPE_A) {
840 1.8 deraadt off_t i, n;
841 1.8 deraadt int c;
842 1.1 cgd
843 1.1 cgd n = restart_point;
844 1.1 cgd i = 0;
845 1.1 cgd while (i++ < n) {
846 1.1 cgd if ((c=getc(fout)) == EOF) {
847 1.1 cgd perror_reply(550, name);
848 1.1 cgd goto done;
849 1.1 cgd }
850 1.1 cgd if (c == '\n')
851 1.1 cgd i++;
852 1.8 deraadt }
853 1.1 cgd /*
854 1.1 cgd * We must do this seek to "current" position
855 1.1 cgd * because we are changing from reading to
856 1.1 cgd * writing.
857 1.1 cgd */
858 1.20 lukem if (fseek(fout, 0L, SEEK_CUR) < 0) {
859 1.1 cgd perror_reply(550, name);
860 1.1 cgd goto done;
861 1.1 cgd }
862 1.1 cgd } else if (lseek(fileno(fout), restart_point, L_SET) < 0) {
863 1.1 cgd perror_reply(550, name);
864 1.1 cgd goto done;
865 1.1 cgd }
866 1.1 cgd }
867 1.1 cgd din = dataconn(name, (off_t)-1, "r");
868 1.1 cgd if (din == NULL)
869 1.1 cgd goto done;
870 1.1 cgd if (receive_data(din, fout) == 0) {
871 1.1 cgd if (unique)
872 1.1 cgd reply(226, "Transfer complete (unique file name:%s).",
873 1.1 cgd name);
874 1.1 cgd else
875 1.1 cgd reply(226, "Transfer complete.");
876 1.1 cgd }
877 1.1 cgd (void) fclose(din);
878 1.1 cgd data = -1;
879 1.1 cgd pdata = -1;
880 1.1 cgd done:
881 1.8 deraadt LOGBYTES(*mode == 'w' ? "put" : "append", name, byte_count);
882 1.1 cgd (*closefunc)(fout);
883 1.1 cgd }
884 1.1 cgd
885 1.8 deraadt static FILE *
886 1.1 cgd getdatasock(mode)
887 1.1 cgd char *mode;
888 1.1 cgd {
889 1.8 deraadt int on = 1, s, t, tries;
890 1.1 cgd
891 1.1 cgd if (data >= 0)
892 1.1 cgd return (fdopen(data, mode));
893 1.1 cgd (void) seteuid((uid_t)0);
894 1.1 cgd s = socket(AF_INET, SOCK_STREAM, 0);
895 1.1 cgd if (s < 0)
896 1.1 cgd goto bad;
897 1.1 cgd if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
898 1.8 deraadt (char *) &on, sizeof(on)) < 0)
899 1.1 cgd goto bad;
900 1.1 cgd /* anchor socket to avoid multi-homing problems */
901 1.15 mycroft data_source.sin_len = sizeof(struct sockaddr_in);
902 1.1 cgd data_source.sin_family = AF_INET;
903 1.1 cgd data_source.sin_addr = ctrl_addr.sin_addr;
904 1.1 cgd for (tries = 1; ; tries++) {
905 1.1 cgd if (bind(s, (struct sockaddr *)&data_source,
906 1.8 deraadt sizeof(data_source)) >= 0)
907 1.1 cgd break;
908 1.1 cgd if (errno != EADDRINUSE || tries > 10)
909 1.1 cgd goto bad;
910 1.1 cgd sleep(tries);
911 1.1 cgd }
912 1.1 cgd (void) seteuid((uid_t)pw->pw_uid);
913 1.1 cgd #ifdef IP_TOS
914 1.1 cgd on = IPTOS_THROUGHPUT;
915 1.1 cgd if (setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&on, sizeof(int)) < 0)
916 1.1 cgd syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
917 1.1 cgd #endif
918 1.1 cgd return (fdopen(s, mode));
919 1.1 cgd bad:
920 1.8 deraadt /* Return the real value of errno (close may change it) */
921 1.8 deraadt t = errno;
922 1.1 cgd (void) seteuid((uid_t)pw->pw_uid);
923 1.1 cgd (void) close(s);
924 1.8 deraadt errno = t;
925 1.1 cgd return (NULL);
926 1.1 cgd }
927 1.1 cgd
928 1.8 deraadt static FILE *
929 1.1 cgd dataconn(name, size, mode)
930 1.1 cgd char *name;
931 1.1 cgd off_t size;
932 1.1 cgd char *mode;
933 1.1 cgd {
934 1.1 cgd char sizebuf[32];
935 1.1 cgd FILE *file;
936 1.1 cgd int retry = 0, tos;
937 1.1 cgd
938 1.1 cgd file_size = size;
939 1.1 cgd byte_count = 0;
940 1.1 cgd if (size != (off_t) -1)
941 1.8 deraadt (void) sprintf(sizebuf, " (%qd bytes)", size);
942 1.1 cgd else
943 1.1 cgd (void) strcpy(sizebuf, "");
944 1.1 cgd if (pdata >= 0) {
945 1.1 cgd struct sockaddr_in from;
946 1.1 cgd int s, fromlen = sizeof(from);
947 1.1 cgd
948 1.1 cgd s = accept(pdata, (struct sockaddr *)&from, &fromlen);
949 1.1 cgd if (s < 0) {
950 1.1 cgd reply(425, "Can't open data connection.");
951 1.1 cgd (void) close(pdata);
952 1.1 cgd pdata = -1;
953 1.8 deraadt return (NULL);
954 1.1 cgd }
955 1.1 cgd (void) close(pdata);
956 1.1 cgd pdata = s;
957 1.1 cgd #ifdef IP_TOS
958 1.12 mycroft tos = IPTOS_THROUGHPUT;
959 1.1 cgd (void) setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&tos,
960 1.1 cgd sizeof(int));
961 1.1 cgd #endif
962 1.8 deraadt reply(150, "Opening %s mode data connection for '%s'%s.",
963 1.1 cgd type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
964 1.8 deraadt return (fdopen(pdata, mode));
965 1.1 cgd }
966 1.1 cgd if (data >= 0) {
967 1.8 deraadt reply(125, "Using existing data connection for '%s'%s.",
968 1.1 cgd name, sizebuf);
969 1.1 cgd usedefault = 1;
970 1.1 cgd return (fdopen(data, mode));
971 1.1 cgd }
972 1.1 cgd if (usedefault)
973 1.1 cgd data_dest = his_addr;
974 1.1 cgd usedefault = 1;
975 1.1 cgd file = getdatasock(mode);
976 1.1 cgd if (file == NULL) {
977 1.1 cgd reply(425, "Can't create data socket (%s,%d): %s.",
978 1.1 cgd inet_ntoa(data_source.sin_addr),
979 1.1 cgd ntohs(data_source.sin_port), strerror(errno));
980 1.1 cgd return (NULL);
981 1.1 cgd }
982 1.1 cgd data = fileno(file);
983 1.1 cgd while (connect(data, (struct sockaddr *)&data_dest,
984 1.8 deraadt sizeof(data_dest)) < 0) {
985 1.1 cgd if (errno == EADDRINUSE && retry < swaitmax) {
986 1.1 cgd sleep((unsigned) swaitint);
987 1.1 cgd retry += swaitint;
988 1.1 cgd continue;
989 1.1 cgd }
990 1.1 cgd perror_reply(425, "Can't build data connection");
991 1.1 cgd (void) fclose(file);
992 1.1 cgd data = -1;
993 1.1 cgd return (NULL);
994 1.1 cgd }
995 1.8 deraadt reply(150, "Opening %s mode data connection for '%s'%s.",
996 1.1 cgd type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);
997 1.1 cgd return (file);
998 1.1 cgd }
999 1.1 cgd
1000 1.1 cgd /*
1001 1.8 deraadt * Tranfer the contents of "instr" to "outstr" peer using the appropriate
1002 1.8 deraadt * encapsulation of the data subject * to Mode, Structure, and Type.
1003 1.1 cgd *
1004 1.1 cgd * NB: Form isn't handled.
1005 1.1 cgd */
1006 1.8 deraadt static void
1007 1.1 cgd send_data(instr, outstr, blksize)
1008 1.1 cgd FILE *instr, *outstr;
1009 1.1 cgd off_t blksize;
1010 1.1 cgd {
1011 1.24 lukem int c, cnt, filefd, netfd;
1012 1.24 lukem char *buf;
1013 1.1 cgd
1014 1.1 cgd transflag++;
1015 1.1 cgd if (setjmp(urgcatch)) {
1016 1.1 cgd transflag = 0;
1017 1.1 cgd return;
1018 1.1 cgd }
1019 1.24 lukem
1020 1.1 cgd switch (type) {
1021 1.1 cgd
1022 1.1 cgd case TYPE_A:
1023 1.1 cgd while ((c = getc(instr)) != EOF) {
1024 1.1 cgd byte_count++;
1025 1.1 cgd if (c == '\n') {
1026 1.1 cgd if (ferror(outstr))
1027 1.1 cgd goto data_err;
1028 1.1 cgd (void) putc('\r', outstr);
1029 1.1 cgd }
1030 1.1 cgd (void) putc(c, outstr);
1031 1.1 cgd }
1032 1.1 cgd fflush(outstr);
1033 1.1 cgd transflag = 0;
1034 1.1 cgd if (ferror(instr))
1035 1.1 cgd goto file_err;
1036 1.1 cgd if (ferror(outstr))
1037 1.1 cgd goto data_err;
1038 1.1 cgd reply(226, "Transfer complete.");
1039 1.1 cgd return;
1040 1.1 cgd
1041 1.1 cgd case TYPE_I:
1042 1.1 cgd case TYPE_L:
1043 1.1 cgd if ((buf = malloc((u_int)blksize)) == NULL) {
1044 1.1 cgd transflag = 0;
1045 1.1 cgd perror_reply(451, "Local resource failure: malloc");
1046 1.1 cgd return;
1047 1.1 cgd }
1048 1.1 cgd netfd = fileno(outstr);
1049 1.1 cgd filefd = fileno(instr);
1050 1.1 cgd while ((cnt = read(filefd, buf, (u_int)blksize)) > 0 &&
1051 1.1 cgd write(netfd, buf, cnt) == cnt)
1052 1.1 cgd byte_count += cnt;
1053 1.1 cgd transflag = 0;
1054 1.1 cgd (void)free(buf);
1055 1.1 cgd if (cnt != 0) {
1056 1.1 cgd if (cnt < 0)
1057 1.1 cgd goto file_err;
1058 1.1 cgd goto data_err;
1059 1.1 cgd }
1060 1.1 cgd reply(226, "Transfer complete.");
1061 1.1 cgd return;
1062 1.1 cgd default:
1063 1.1 cgd transflag = 0;
1064 1.1 cgd reply(550, "Unimplemented TYPE %d in send_data", type);
1065 1.1 cgd return;
1066 1.1 cgd }
1067 1.1 cgd
1068 1.1 cgd data_err:
1069 1.1 cgd transflag = 0;
1070 1.1 cgd perror_reply(426, "Data connection");
1071 1.1 cgd return;
1072 1.1 cgd
1073 1.1 cgd file_err:
1074 1.1 cgd transflag = 0;
1075 1.1 cgd perror_reply(551, "Error on input file");
1076 1.1 cgd }
1077 1.1 cgd
1078 1.1 cgd /*
1079 1.8 deraadt * Transfer data from peer to "outstr" using the appropriate encapulation of
1080 1.8 deraadt * the data subject to Mode, Structure, and Type.
1081 1.1 cgd *
1082 1.1 cgd * N.B.: Form isn't handled.
1083 1.1 cgd */
1084 1.8 deraadt static int
1085 1.1 cgd receive_data(instr, outstr)
1086 1.1 cgd FILE *instr, *outstr;
1087 1.1 cgd {
1088 1.24 lukem int c, cnt, bare_lfs;
1089 1.24 lukem char buf[BUFSIZ];
1090 1.25 christos #ifdef __GNUC__
1091 1.25 christos (void) &bare_lfs;
1092 1.25 christos #endif
1093 1.1 cgd
1094 1.24 lukem bare_lfs = 0;
1095 1.1 cgd transflag++;
1096 1.1 cgd if (setjmp(urgcatch)) {
1097 1.1 cgd transflag = 0;
1098 1.1 cgd return (-1);
1099 1.1 cgd }
1100 1.24 lukem
1101 1.1 cgd switch (type) {
1102 1.1 cgd
1103 1.1 cgd case TYPE_I:
1104 1.1 cgd case TYPE_L:
1105 1.8 deraadt while ((cnt = read(fileno(instr), buf, sizeof(buf))) > 0) {
1106 1.1 cgd if (write(fileno(outstr), buf, cnt) != cnt)
1107 1.1 cgd goto file_err;
1108 1.1 cgd byte_count += cnt;
1109 1.1 cgd }
1110 1.1 cgd if (cnt < 0)
1111 1.1 cgd goto data_err;
1112 1.1 cgd transflag = 0;
1113 1.1 cgd return (0);
1114 1.1 cgd
1115 1.1 cgd case TYPE_E:
1116 1.1 cgd reply(553, "TYPE E not implemented.");
1117 1.1 cgd transflag = 0;
1118 1.1 cgd return (-1);
1119 1.1 cgd
1120 1.1 cgd case TYPE_A:
1121 1.1 cgd while ((c = getc(instr)) != EOF) {
1122 1.1 cgd byte_count++;
1123 1.1 cgd if (c == '\n')
1124 1.1 cgd bare_lfs++;
1125 1.1 cgd while (c == '\r') {
1126 1.1 cgd if (ferror(outstr))
1127 1.1 cgd goto data_err;
1128 1.1 cgd if ((c = getc(instr)) != '\n') {
1129 1.1 cgd (void) putc ('\r', outstr);
1130 1.1 cgd if (c == '\0' || c == EOF)
1131 1.1 cgd goto contin2;
1132 1.1 cgd }
1133 1.1 cgd }
1134 1.1 cgd (void) putc(c, outstr);
1135 1.1 cgd contin2: ;
1136 1.1 cgd }
1137 1.1 cgd fflush(outstr);
1138 1.1 cgd if (ferror(instr))
1139 1.1 cgd goto data_err;
1140 1.1 cgd if (ferror(outstr))
1141 1.1 cgd goto file_err;
1142 1.1 cgd transflag = 0;
1143 1.1 cgd if (bare_lfs) {
1144 1.8 deraadt lreply(226,
1145 1.8 deraadt "WARNING! %d bare linefeeds received in ASCII mode",
1146 1.8 deraadt bare_lfs);
1147 1.8 deraadt (void)printf(" File may not have transferred correctly.\r\n");
1148 1.1 cgd }
1149 1.1 cgd return (0);
1150 1.1 cgd default:
1151 1.1 cgd reply(550, "Unimplemented TYPE %d in receive_data", type);
1152 1.1 cgd transflag = 0;
1153 1.1 cgd return (-1);
1154 1.1 cgd }
1155 1.1 cgd
1156 1.1 cgd data_err:
1157 1.1 cgd transflag = 0;
1158 1.1 cgd perror_reply(426, "Data Connection");
1159 1.1 cgd return (-1);
1160 1.1 cgd
1161 1.1 cgd file_err:
1162 1.1 cgd transflag = 0;
1163 1.1 cgd perror_reply(452, "Error writing file");
1164 1.1 cgd return (-1);
1165 1.1 cgd }
1166 1.1 cgd
1167 1.8 deraadt void
1168 1.1 cgd statfilecmd(filename)
1169 1.1 cgd char *filename;
1170 1.1 cgd {
1171 1.1 cgd FILE *fin;
1172 1.1 cgd int c;
1173 1.8 deraadt char line[LINE_MAX];
1174 1.1 cgd
1175 1.8 deraadt (void)snprintf(line, sizeof(line), "/bin/ls -lgA %s", filename);
1176 1.24 lukem fin = ftpd_popen(line, "r", 0);
1177 1.1 cgd lreply(211, "status of %s:", filename);
1178 1.1 cgd while ((c = getc(fin)) != EOF) {
1179 1.1 cgd if (c == '\n') {
1180 1.1 cgd if (ferror(stdout)){
1181 1.1 cgd perror_reply(421, "control connection");
1182 1.1 cgd (void) ftpd_pclose(fin);
1183 1.1 cgd dologout(1);
1184 1.1 cgd /* NOTREACHED */
1185 1.1 cgd }
1186 1.1 cgd if (ferror(fin)) {
1187 1.1 cgd perror_reply(551, filename);
1188 1.1 cgd (void) ftpd_pclose(fin);
1189 1.1 cgd return;
1190 1.1 cgd }
1191 1.1 cgd (void) putc('\r', stdout);
1192 1.1 cgd }
1193 1.1 cgd (void) putc(c, stdout);
1194 1.1 cgd }
1195 1.1 cgd (void) ftpd_pclose(fin);
1196 1.1 cgd reply(211, "End of Status");
1197 1.1 cgd }
1198 1.1 cgd
1199 1.8 deraadt void
1200 1.1 cgd statcmd()
1201 1.1 cgd {
1202 1.1 cgd struct sockaddr_in *sin;
1203 1.1 cgd u_char *a, *p;
1204 1.1 cgd
1205 1.24 lukem lreply(211, "%s FTP server status:", hostname);
1206 1.24 lukem lreply(211, "%s", version);
1207 1.24 lukem if (isdigit(remotehost[0]))
1208 1.24 lukem lreply(211, "Connected to %s", remotehost);
1209 1.24 lukem else
1210 1.24 lukem lreply(211, "Connected to %s (%s)", remotehost,
1211 1.24 lukem inet_ntoa(his_addr.sin_addr));
1212 1.1 cgd if (logged_in) {
1213 1.1 cgd if (guest)
1214 1.24 lukem lreply(211, "Logged in anonymously");
1215 1.1 cgd else
1216 1.24 lukem lreply(211, "Logged in as %s", pw->pw_name);
1217 1.1 cgd } else if (askpasswd)
1218 1.24 lukem lreply(211, "Waiting for password");
1219 1.1 cgd else
1220 1.24 lukem lreply(211, "Waiting for user name");
1221 1.24 lukem printf("211- TYPE: %s", typenames[type]);
1222 1.1 cgd if (type == TYPE_A || type == TYPE_E)
1223 1.1 cgd printf(", FORM: %s", formnames[form]);
1224 1.1 cgd if (type == TYPE_L)
1225 1.1 cgd #if NBBY == 8
1226 1.1 cgd printf(" %d", NBBY);
1227 1.1 cgd #else
1228 1.1 cgd printf(" %d", bytesize); /* need definition! */
1229 1.1 cgd #endif
1230 1.1 cgd printf("; STRUcture: %s; transfer MODE: %s\r\n",
1231 1.1 cgd strunames[stru], modenames[mode]);
1232 1.1 cgd if (data != -1)
1233 1.24 lukem lreply(211, "Data connection open");
1234 1.1 cgd else if (pdata != -1) {
1235 1.24 lukem printf("211- in Passive mode");
1236 1.1 cgd sin = &pasv_addr;
1237 1.1 cgd goto printaddr;
1238 1.1 cgd } else if (usedefault == 0) {
1239 1.24 lukem printf("211- PORT");
1240 1.1 cgd sin = &data_dest;
1241 1.1 cgd printaddr:
1242 1.1 cgd a = (u_char *) &sin->sin_addr;
1243 1.1 cgd p = (u_char *) &sin->sin_port;
1244 1.1 cgd #define UC(b) (((int) b) & 0xff)
1245 1.1 cgd printf(" (%d,%d,%d,%d,%d,%d)\r\n", UC(a[0]),
1246 1.1 cgd UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1]));
1247 1.1 cgd #undef UC
1248 1.1 cgd } else
1249 1.24 lukem lreply(211, "No data connection");
1250 1.24 lukem
1251 1.24 lukem if (logged_in) {
1252 1.24 lukem struct ftpconv *cp;
1253 1.24 lukem
1254 1.24 lukem lreply(211, "");
1255 1.24 lukem lreply(211, "Class: %s", curclass.classname);
1256 1.24 lukem if (curclass.display)
1257 1.24 lukem lreply(211, "Display file: %s", curclass.display);
1258 1.24 lukem if (curclass.notify)
1259 1.24 lukem lreply(211, "Notify fileglob: %s", curclass.notify);
1260 1.24 lukem lreply(211, "Idle timeout: %d, maximum timeout: %d",
1261 1.24 lukem curclass.timeout, curclass.maxtimeout);
1262 1.24 lukem lreply(211, "dele, mkd, rmd, umask, chmod: %sabled",
1263 1.24 lukem curclass.modify ? "en" : "dis");
1264 1.24 lukem lreply(211, "Umask: %.04o", curclass.umask);
1265 1.24 lukem for (cp = curclass.conversions; cp != NULL; cp=cp->next) {
1266 1.24 lukem if (cp->suffix == NULL || cp->types == NULL ||
1267 1.24 lukem cp->command == NULL)
1268 1.24 lukem continue;
1269 1.24 lukem lreply(211,
1270 1.24 lukem "Conversion: %s [%s] disable: %s, command: %s",
1271 1.24 lukem cp->suffix, cp->types, cp->disable, cp->command);
1272 1.24 lukem }
1273 1.24 lukem }
1274 1.24 lukem
1275 1.1 cgd reply(211, "End of status");
1276 1.1 cgd }
1277 1.1 cgd
1278 1.8 deraadt void
1279 1.1 cgd fatal(s)
1280 1.1 cgd char *s;
1281 1.1 cgd {
1282 1.8 deraadt
1283 1.1 cgd reply(451, "Error in server: %s\n", s);
1284 1.1 cgd reply(221, "Closing connection due to server error.");
1285 1.1 cgd dologout(0);
1286 1.1 cgd /* NOTREACHED */
1287 1.1 cgd }
1288 1.1 cgd
1289 1.8 deraadt void
1290 1.8 deraadt #if __STDC__
1291 1.8 deraadt reply(int n, const char *fmt, ...)
1292 1.8 deraadt #else
1293 1.8 deraadt reply(n, fmt, va_alist)
1294 1.1 cgd int n;
1295 1.1 cgd char *fmt;
1296 1.8 deraadt va_dcl
1297 1.8 deraadt #endif
1298 1.1 cgd {
1299 1.8 deraadt va_list ap;
1300 1.8 deraadt #if __STDC__
1301 1.8 deraadt va_start(ap, fmt);
1302 1.8 deraadt #else
1303 1.8 deraadt va_start(ap);
1304 1.8 deraadt #endif
1305 1.8 deraadt (void)printf("%d ", n);
1306 1.8 deraadt (void)vprintf(fmt, ap);
1307 1.8 deraadt (void)printf("\r\n");
1308 1.1 cgd (void)fflush(stdout);
1309 1.1 cgd if (debug) {
1310 1.1 cgd syslog(LOG_DEBUG, "<--- %d ", n);
1311 1.8 deraadt vsyslog(LOG_DEBUG, fmt, ap);
1312 1.8 deraadt }
1313 1.1 cgd }
1314 1.1 cgd
1315 1.8 deraadt void
1316 1.8 deraadt #if __STDC__
1317 1.8 deraadt lreply(int n, const char *fmt, ...)
1318 1.8 deraadt #else
1319 1.8 deraadt lreply(n, fmt, va_alist)
1320 1.1 cgd int n;
1321 1.1 cgd char *fmt;
1322 1.8 deraadt va_dcl
1323 1.8 deraadt #endif
1324 1.1 cgd {
1325 1.8 deraadt va_list ap;
1326 1.8 deraadt #if __STDC__
1327 1.8 deraadt va_start(ap, fmt);
1328 1.8 deraadt #else
1329 1.8 deraadt va_start(ap);
1330 1.8 deraadt #endif
1331 1.8 deraadt (void)printf("%d- ", n);
1332 1.8 deraadt (void)vprintf(fmt, ap);
1333 1.8 deraadt (void)printf("\r\n");
1334 1.1 cgd (void)fflush(stdout);
1335 1.1 cgd if (debug) {
1336 1.1 cgd syslog(LOG_DEBUG, "<--- %d- ", n);
1337 1.8 deraadt vsyslog(LOG_DEBUG, fmt, ap);
1338 1.1 cgd }
1339 1.1 cgd }
1340 1.1 cgd
1341 1.8 deraadt static void
1342 1.1 cgd ack(s)
1343 1.1 cgd char *s;
1344 1.1 cgd {
1345 1.8 deraadt
1346 1.1 cgd reply(250, "%s command successful.", s);
1347 1.1 cgd }
1348 1.1 cgd
1349 1.8 deraadt void
1350 1.1 cgd nack(s)
1351 1.1 cgd char *s;
1352 1.1 cgd {
1353 1.8 deraadt
1354 1.1 cgd reply(502, "%s command not implemented.", s);
1355 1.1 cgd }
1356 1.1 cgd
1357 1.1 cgd /* ARGSUSED */
1358 1.8 deraadt void
1359 1.1 cgd yyerror(s)
1360 1.1 cgd char *s;
1361 1.1 cgd {
1362 1.1 cgd char *cp;
1363 1.1 cgd
1364 1.20 lukem if ((cp = strchr(cbuf,'\n')) != NULL)
1365 1.1 cgd *cp = '\0';
1366 1.1 cgd reply(500, "'%s': command not understood.", cbuf);
1367 1.1 cgd }
1368 1.1 cgd
1369 1.8 deraadt void
1370 1.1 cgd delete(name)
1371 1.1 cgd char *name;
1372 1.1 cgd {
1373 1.1 cgd struct stat st;
1374 1.1 cgd
1375 1.8 deraadt LOGCMD("delete", name);
1376 1.1 cgd if (stat(name, &st) < 0) {
1377 1.1 cgd perror_reply(550, name);
1378 1.1 cgd return;
1379 1.1 cgd }
1380 1.1 cgd if ((st.st_mode&S_IFMT) == S_IFDIR) {
1381 1.1 cgd if (rmdir(name) < 0) {
1382 1.1 cgd perror_reply(550, name);
1383 1.1 cgd return;
1384 1.1 cgd }
1385 1.1 cgd goto done;
1386 1.1 cgd }
1387 1.1 cgd if (unlink(name) < 0) {
1388 1.1 cgd perror_reply(550, name);
1389 1.1 cgd return;
1390 1.1 cgd }
1391 1.1 cgd done:
1392 1.1 cgd ack("DELE");
1393 1.1 cgd }
1394 1.1 cgd
1395 1.8 deraadt void
1396 1.1 cgd cwd(path)
1397 1.1 cgd char *path;
1398 1.1 cgd {
1399 1.8 deraadt
1400 1.1 cgd if (chdir(path) < 0)
1401 1.1 cgd perror_reply(550, path);
1402 1.24 lukem else {
1403 1.24 lukem show_chdir_messages(250);
1404 1.1 cgd ack("CWD");
1405 1.24 lukem }
1406 1.1 cgd }
1407 1.1 cgd
1408 1.8 deraadt void
1409 1.1 cgd makedir(name)
1410 1.1 cgd char *name;
1411 1.1 cgd {
1412 1.8 deraadt
1413 1.8 deraadt LOGCMD("mkdir", name);
1414 1.1 cgd if (mkdir(name, 0777) < 0)
1415 1.1 cgd perror_reply(550, name);
1416 1.1 cgd else
1417 1.1 cgd reply(257, "MKD command successful.");
1418 1.1 cgd }
1419 1.1 cgd
1420 1.8 deraadt void
1421 1.1 cgd removedir(name)
1422 1.1 cgd char *name;
1423 1.1 cgd {
1424 1.8 deraadt
1425 1.8 deraadt LOGCMD("rmdir", name);
1426 1.1 cgd if (rmdir(name) < 0)
1427 1.1 cgd perror_reply(550, name);
1428 1.1 cgd else
1429 1.1 cgd ack("RMD");
1430 1.1 cgd }
1431 1.1 cgd
1432 1.8 deraadt void
1433 1.1 cgd pwd()
1434 1.1 cgd {
1435 1.1 cgd char path[MAXPATHLEN + 1];
1436 1.1 cgd
1437 1.1 cgd if (getwd(path) == (char *)NULL)
1438 1.1 cgd reply(550, "%s.", path);
1439 1.1 cgd else
1440 1.1 cgd reply(257, "\"%s\" is current directory.", path);
1441 1.1 cgd }
1442 1.1 cgd
1443 1.1 cgd char *
1444 1.1 cgd renamefrom(name)
1445 1.1 cgd char *name;
1446 1.1 cgd {
1447 1.1 cgd struct stat st;
1448 1.1 cgd
1449 1.1 cgd if (stat(name, &st) < 0) {
1450 1.1 cgd perror_reply(550, name);
1451 1.1 cgd return ((char *)0);
1452 1.1 cgd }
1453 1.1 cgd reply(350, "File exists, ready for destination name");
1454 1.1 cgd return (name);
1455 1.1 cgd }
1456 1.1 cgd
1457 1.8 deraadt void
1458 1.1 cgd renamecmd(from, to)
1459 1.1 cgd char *from, *to;
1460 1.1 cgd {
1461 1.8 deraadt
1462 1.8 deraadt LOGCMD2("rename", from, to);
1463 1.1 cgd if (rename(from, to) < 0)
1464 1.1 cgd perror_reply(550, "rename");
1465 1.1 cgd else
1466 1.1 cgd ack("RNTO");
1467 1.1 cgd }
1468 1.1 cgd
1469 1.8 deraadt static void
1470 1.1 cgd dolog(sin)
1471 1.1 cgd struct sockaddr_in *sin;
1472 1.1 cgd {
1473 1.1 cgd struct hostent *hp = gethostbyaddr((char *)&sin->sin_addr,
1474 1.8 deraadt sizeof(struct in_addr), AF_INET);
1475 1.1 cgd
1476 1.1 cgd if (hp)
1477 1.8 deraadt (void) strncpy(remotehost, hp->h_name, sizeof(remotehost));
1478 1.1 cgd else
1479 1.1 cgd (void) strncpy(remotehost, inet_ntoa(sin->sin_addr),
1480 1.8 deraadt sizeof(remotehost));
1481 1.6 cgd #ifdef HASSETPROCTITLE
1482 1.8 deraadt snprintf(proctitle, sizeof(proctitle), "%s: connected", remotehost);
1483 1.1 cgd setproctitle(proctitle);
1484 1.6 cgd #endif /* HASSETPROCTITLE */
1485 1.1 cgd
1486 1.8 deraadt if (logging)
1487 1.8 deraadt syslog(LOG_INFO, "connection from %s", remotehost);
1488 1.1 cgd }
1489 1.1 cgd
1490 1.1 cgd /*
1491 1.1 cgd * Record logout in wtmp file
1492 1.1 cgd * and exit with supplied status.
1493 1.1 cgd */
1494 1.8 deraadt void
1495 1.1 cgd dologout(status)
1496 1.1 cgd int status;
1497 1.1 cgd {
1498 1.16 mrg /*
1499 1.16 mrg * Prevent reception of SIGURG from resulting in a resumption
1500 1.16 mrg * back to the main program loop.
1501 1.16 mrg */
1502 1.16 mrg transflag = 0;
1503 1.8 deraadt
1504 1.1 cgd if (logged_in) {
1505 1.1 cgd (void) seteuid((uid_t)0);
1506 1.1 cgd logwtmp(ttyline, "", "");
1507 1.4 cgd #if defined(KERBEROS)
1508 1.4 cgd if (!notickets && krbtkfile_env)
1509 1.4 cgd unlink(krbtkfile_env);
1510 1.4 cgd #endif
1511 1.1 cgd }
1512 1.1 cgd /* beware of flushing buffers after a SIGPIPE */
1513 1.1 cgd _exit(status);
1514 1.1 cgd }
1515 1.1 cgd
1516 1.8 deraadt static void
1517 1.8 deraadt myoob(signo)
1518 1.8 deraadt int signo;
1519 1.1 cgd {
1520 1.1 cgd char *cp;
1521 1.1 cgd
1522 1.1 cgd /* only process if transfer occurring */
1523 1.1 cgd if (!transflag)
1524 1.1 cgd return;
1525 1.1 cgd cp = tmpline;
1526 1.1 cgd if (getline(cp, 7, stdin) == NULL) {
1527 1.1 cgd reply(221, "You could at least say goodbye.");
1528 1.1 cgd dologout(0);
1529 1.1 cgd }
1530 1.1 cgd upper(cp);
1531 1.1 cgd if (strcmp(cp, "ABOR\r\n") == 0) {
1532 1.1 cgd tmpline[0] = '\0';
1533 1.1 cgd reply(426, "Transfer aborted. Data connection closed.");
1534 1.1 cgd reply(226, "Abort successful");
1535 1.1 cgd longjmp(urgcatch, 1);
1536 1.1 cgd }
1537 1.1 cgd if (strcmp(cp, "STAT\r\n") == 0) {
1538 1.1 cgd if (file_size != (off_t) -1)
1539 1.8 deraadt reply(213, "Status: %qd of %qd bytes transferred",
1540 1.1 cgd byte_count, file_size);
1541 1.1 cgd else
1542 1.8 deraadt reply(213, "Status: %qd bytes transferred", byte_count);
1543 1.1 cgd }
1544 1.1 cgd }
1545 1.1 cgd
1546 1.1 cgd /*
1547 1.1 cgd * Note: a response of 425 is not mentioned as a possible response to
1548 1.8 deraadt * the PASV command in RFC959. However, it has been blessed as
1549 1.8 deraadt * a legitimate response by Jon Postel in a telephone conversation
1550 1.1 cgd * with Rick Adams on 25 Jan 89.
1551 1.1 cgd */
1552 1.8 deraadt void
1553 1.1 cgd passive()
1554 1.1 cgd {
1555 1.1 cgd int len;
1556 1.8 deraadt char *p, *a;
1557 1.1 cgd
1558 1.1 cgd pdata = socket(AF_INET, SOCK_STREAM, 0);
1559 1.23 lukem if (pdata < 0 || !logged_in) {
1560 1.1 cgd perror_reply(425, "Can't open passive connection");
1561 1.1 cgd return;
1562 1.1 cgd }
1563 1.1 cgd pasv_addr = ctrl_addr;
1564 1.1 cgd pasv_addr.sin_port = 0;
1565 1.1 cgd (void) seteuid((uid_t)0);
1566 1.1 cgd if (bind(pdata, (struct sockaddr *)&pasv_addr, sizeof(pasv_addr)) < 0) {
1567 1.1 cgd (void) seteuid((uid_t)pw->pw_uid);
1568 1.1 cgd goto pasv_error;
1569 1.1 cgd }
1570 1.1 cgd (void) seteuid((uid_t)pw->pw_uid);
1571 1.1 cgd len = sizeof(pasv_addr);
1572 1.1 cgd if (getsockname(pdata, (struct sockaddr *) &pasv_addr, &len) < 0)
1573 1.1 cgd goto pasv_error;
1574 1.1 cgd if (listen(pdata, 1) < 0)
1575 1.1 cgd goto pasv_error;
1576 1.1 cgd a = (char *) &pasv_addr.sin_addr;
1577 1.1 cgd p = (char *) &pasv_addr.sin_port;
1578 1.1 cgd
1579 1.1 cgd #define UC(b) (((int) b) & 0xff)
1580 1.1 cgd
1581 1.1 cgd reply(227, "Entering Passive Mode (%d,%d,%d,%d,%d,%d)", UC(a[0]),
1582 1.1 cgd UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1]));
1583 1.1 cgd return;
1584 1.1 cgd
1585 1.1 cgd pasv_error:
1586 1.1 cgd (void) close(pdata);
1587 1.1 cgd pdata = -1;
1588 1.1 cgd perror_reply(425, "Can't open passive connection");
1589 1.1 cgd return;
1590 1.1 cgd }
1591 1.1 cgd
1592 1.1 cgd /*
1593 1.1 cgd * Generate unique name for file with basename "local".
1594 1.1 cgd * The file named "local" is already known to exist.
1595 1.1 cgd * Generates failure reply on error.
1596 1.1 cgd */
1597 1.8 deraadt static char *
1598 1.1 cgd gunique(local)
1599 1.1 cgd char *local;
1600 1.1 cgd {
1601 1.1 cgd static char new[MAXPATHLEN];
1602 1.1 cgd struct stat st;
1603 1.8 deraadt int count;
1604 1.8 deraadt char *cp;
1605 1.1 cgd
1606 1.8 deraadt cp = strrchr(local, '/');
1607 1.1 cgd if (cp)
1608 1.1 cgd *cp = '\0';
1609 1.1 cgd if (stat(cp ? local : ".", &st) < 0) {
1610 1.1 cgd perror_reply(553, cp ? local : ".");
1611 1.8 deraadt return ((char *) 0);
1612 1.1 cgd }
1613 1.1 cgd if (cp)
1614 1.1 cgd *cp = '/';
1615 1.1 cgd (void) strcpy(new, local);
1616 1.1 cgd cp = new + strlen(new);
1617 1.1 cgd *cp++ = '.';
1618 1.1 cgd for (count = 1; count < 100; count++) {
1619 1.8 deraadt (void)sprintf(cp, "%d", count);
1620 1.1 cgd if (stat(new, &st) < 0)
1621 1.8 deraadt return (new);
1622 1.1 cgd }
1623 1.1 cgd reply(452, "Unique file name cannot be created.");
1624 1.8 deraadt return (NULL);
1625 1.1 cgd }
1626 1.1 cgd
1627 1.1 cgd /*
1628 1.1 cgd * Format and send reply containing system error number.
1629 1.1 cgd */
1630 1.8 deraadt void
1631 1.1 cgd perror_reply(code, string)
1632 1.1 cgd int code;
1633 1.1 cgd char *string;
1634 1.1 cgd {
1635 1.8 deraadt
1636 1.1 cgd reply(code, "%s: %s.", string, strerror(errno));
1637 1.1 cgd }
1638 1.1 cgd
1639 1.1 cgd static char *onefile[] = {
1640 1.1 cgd "",
1641 1.1 cgd 0
1642 1.1 cgd };
1643 1.1 cgd
1644 1.8 deraadt void
1645 1.8 deraadt send_file_list(whichf)
1646 1.8 deraadt char *whichf;
1647 1.1 cgd {
1648 1.1 cgd struct stat st;
1649 1.1 cgd DIR *dirp = NULL;
1650 1.1 cgd struct dirent *dir;
1651 1.1 cgd FILE *dout = NULL;
1652 1.8 deraadt char **dirlist, *dirname;
1653 1.1 cgd int simple = 0;
1654 1.8 deraadt int freeglob = 0;
1655 1.8 deraadt glob_t gl;
1656 1.25 christos #ifdef __GNUC__
1657 1.25 christos (void) &dout;
1658 1.25 christos (void) &dirlist;
1659 1.25 christos (void) &simple;
1660 1.25 christos (void) &freeglob;
1661 1.25 christos #endif
1662 1.1 cgd
1663 1.8 deraadt if (strpbrk(whichf, "~{[*?") != NULL) {
1664 1.8 deraadt int flags = GLOB_BRACE|GLOB_NOCHECK|GLOB_QUOTE|GLOB_TILDE;
1665 1.1 cgd
1666 1.8 deraadt memset(&gl, 0, sizeof(gl));
1667 1.8 deraadt freeglob = 1;
1668 1.8 deraadt if (glob(whichf, flags, 0, &gl)) {
1669 1.8 deraadt reply(550, "not found");
1670 1.8 deraadt goto out;
1671 1.8 deraadt } else if (gl.gl_pathc == 0) {
1672 1.1 cgd errno = ENOENT;
1673 1.8 deraadt perror_reply(550, whichf);
1674 1.8 deraadt goto out;
1675 1.1 cgd }
1676 1.8 deraadt dirlist = gl.gl_pathv;
1677 1.1 cgd } else {
1678 1.8 deraadt onefile[0] = whichf;
1679 1.1 cgd dirlist = onefile;
1680 1.1 cgd simple = 1;
1681 1.1 cgd }
1682 1.1 cgd
1683 1.1 cgd if (setjmp(urgcatch)) {
1684 1.1 cgd transflag = 0;
1685 1.8 deraadt goto out;
1686 1.1 cgd }
1687 1.20 lukem while ((dirname = *dirlist++) != NULL) {
1688 1.1 cgd if (stat(dirname, &st) < 0) {
1689 1.1 cgd /*
1690 1.1 cgd * If user typed "ls -l", etc, and the client
1691 1.1 cgd * used NLST, do what the user meant.
1692 1.1 cgd */
1693 1.1 cgd if (dirname[0] == '-' && *dirlist == NULL &&
1694 1.1 cgd transflag == 0) {
1695 1.1 cgd retrieve("/bin/ls %s", dirname);
1696 1.8 deraadt goto out;
1697 1.1 cgd }
1698 1.8 deraadt perror_reply(550, whichf);
1699 1.1 cgd if (dout != NULL) {
1700 1.1 cgd (void) fclose(dout);
1701 1.1 cgd transflag = 0;
1702 1.1 cgd data = -1;
1703 1.1 cgd pdata = -1;
1704 1.1 cgd }
1705 1.8 deraadt goto out;
1706 1.1 cgd }
1707 1.1 cgd
1708 1.8 deraadt if (S_ISREG(st.st_mode)) {
1709 1.1 cgd if (dout == NULL) {
1710 1.1 cgd dout = dataconn("file list", (off_t)-1, "w");
1711 1.1 cgd if (dout == NULL)
1712 1.8 deraadt goto out;
1713 1.1 cgd transflag++;
1714 1.1 cgd }
1715 1.1 cgd fprintf(dout, "%s%s\n", dirname,
1716 1.1 cgd type == TYPE_A ? "\r" : "");
1717 1.1 cgd byte_count += strlen(dirname) + 1;
1718 1.1 cgd continue;
1719 1.8 deraadt } else if (!S_ISDIR(st.st_mode))
1720 1.1 cgd continue;
1721 1.1 cgd
1722 1.1 cgd if ((dirp = opendir(dirname)) == NULL)
1723 1.1 cgd continue;
1724 1.1 cgd
1725 1.1 cgd while ((dir = readdir(dirp)) != NULL) {
1726 1.1 cgd char nbuf[MAXPATHLEN];
1727 1.1 cgd
1728 1.1 cgd if (dir->d_name[0] == '.' && dir->d_namlen == 1)
1729 1.1 cgd continue;
1730 1.1 cgd if (dir->d_name[0] == '.' && dir->d_name[1] == '.' &&
1731 1.1 cgd dir->d_namlen == 2)
1732 1.1 cgd continue;
1733 1.1 cgd
1734 1.1 cgd sprintf(nbuf, "%s/%s", dirname, dir->d_name);
1735 1.1 cgd
1736 1.1 cgd /*
1737 1.1 cgd * We have to do a stat to insure it's
1738 1.1 cgd * not a directory or special file.
1739 1.1 cgd */
1740 1.1 cgd if (simple || (stat(nbuf, &st) == 0 &&
1741 1.8 deraadt S_ISREG(st.st_mode))) {
1742 1.1 cgd if (dout == NULL) {
1743 1.1 cgd dout = dataconn("file list", (off_t)-1,
1744 1.1 cgd "w");
1745 1.1 cgd if (dout == NULL)
1746 1.8 deraadt goto out;
1747 1.1 cgd transflag++;
1748 1.1 cgd }
1749 1.1 cgd if (nbuf[0] == '.' && nbuf[1] == '/')
1750 1.1 cgd fprintf(dout, "%s%s\n", &nbuf[2],
1751 1.1 cgd type == TYPE_A ? "\r" : "");
1752 1.1 cgd else
1753 1.1 cgd fprintf(dout, "%s%s\n", nbuf,
1754 1.1 cgd type == TYPE_A ? "\r" : "");
1755 1.1 cgd byte_count += strlen(nbuf) + 1;
1756 1.1 cgd }
1757 1.1 cgd }
1758 1.1 cgd (void) closedir(dirp);
1759 1.1 cgd }
1760 1.1 cgd
1761 1.1 cgd if (dout == NULL)
1762 1.1 cgd reply(550, "No files found.");
1763 1.1 cgd else if (ferror(dout) != 0)
1764 1.1 cgd perror_reply(550, "Data connection");
1765 1.1 cgd else
1766 1.1 cgd reply(226, "Transfer complete.");
1767 1.1 cgd
1768 1.1 cgd transflag = 0;
1769 1.1 cgd if (dout != NULL)
1770 1.1 cgd (void) fclose(dout);
1771 1.1 cgd data = -1;
1772 1.1 cgd pdata = -1;
1773 1.8 deraadt out:
1774 1.8 deraadt if (freeglob) {
1775 1.8 deraadt freeglob = 0;
1776 1.8 deraadt globfree(&gl);
1777 1.8 deraadt }
1778 1.1 cgd }
1779