126 void	session_set_fds(struct ssh *, Session *, int, int, int, int, int);
129 int	session_setup_x11fwd(struct ssh *, Session *);
130 int	do_exec_pty(struct ssh *, Session *, const char *);
131 int	do_exec_no_pty(struct ssh *, Session *, const char *);
132 int	do_exec(struct ssh *, Session *, const char *);
133 void	do_login(struct ssh *, Session *, const char *);
134 void	do_child(struct ssh *, Session *, const char *);
138 static void do_authenticated2(struct ssh *, Authctxt *);
140 static int session_pty_req(struct ssh *, Session *);
195 auth_input_request_forwarding(struct ssh *ssh, struct passwd * pw)  in auth_input_request_forwarding()  argument
213 		ssh_packet_send_debug(ssh, "Agent forwarding disabled: "  in auth_input_request_forwarding()
235 	nc = channel_new(ssh, "auth-listener",  in auth_input_request_forwarding()
305 set_fwdpermit_from_authopts(struct ssh *ssh, const struct sshauthopt *opts)  in set_fwdpermit_from_authopts()  argument
312 		channel_clear_permission(ssh, FORWARD_USER, FORWARD_LOCAL);  in set_fwdpermit_from_authopts()
321 			channel_add_permission(ssh,  in set_fwdpermit_from_authopts()
327 		channel_clear_permission(ssh, FORWARD_USER, FORWARD_REMOTE);  in set_fwdpermit_from_authopts()
336 			channel_add_permission(ssh,  in set_fwdpermit_from_authopts()
344 do_authenticated(struct ssh *ssh, Authctxt *authctxt)  in do_authenticated()  argument
352 	set_fwdpermit_from_authopts(ssh, auth_opts);  in do_authenticated()
356 		channel_disable_admin(ssh, FORWARD_LOCAL);  in do_authenticated()
357 		channel_disable_admin(ssh, FORWARD_REMOTE);  in do_authenticated()
360 			channel_disable_admin(ssh, FORWARD_LOCAL);  in do_authenticated()
362 			channel_permit_all(ssh, FORWARD_LOCAL);  in do_authenticated()
364 			channel_disable_admin(ssh, FORWARD_REMOTE);  in do_authenticated()
366 			channel_permit_all(ssh, FORWARD_REMOTE);  in do_authenticated()
368 	auth_debug_send(ssh);  in do_authenticated()
372 	do_authenticated2(ssh, authctxt);  in do_authenticated()
374 	do_cleanup(ssh, authctxt);  in do_authenticated()
399 do_exec_no_pty(struct ssh *ssh, Session *s, const char *command)  in do_exec_no_pty()  argument
516 		do_child(ssh, s, command);  in do_exec_no_pty()
528 	ssh_packet_set_interactive(ssh, s->display != NULL,  in do_exec_no_pty()
544 	session_set_fds(ssh, s, pin[1], pout[0], perr[0],  in do_exec_no_pty()
555 	session_set_fds(ssh, s, inout[1], inout[1], err[1],  in do_exec_no_pty()
568 do_exec_pty(struct ssh *ssh, Session *s, const char *command)  in do_exec_pty()  argument
634 		do_login(ssh, s, command);  in do_exec_pty()
640 		do_child(ssh, s, command);  in do_exec_pty()
657 	ssh_packet_set_interactive(ssh, 1,  in do_exec_pty()
659 	session_set_fds(ssh, s, ptyfd, fdout, -1, 1, 1);  in do_exec_pty()
668 do_exec(struct ssh *ssh, Session *s, const char *command)  in do_exec()  argument
714 	    ssh_remote_ipaddr(ssh),  in do_exec()
715 	    ssh_remote_port(ssh),  in do_exec()
730 		ret = do_exec_pty(ssh, s, command);  in do_exec()
732 		ret = do_exec_no_pty(ssh, s, command);  in do_exec()
748 do_login(struct ssh *ssh, Session *s, const char *command)  in do_login()  argument
759 	if (ssh_packet_connection_is_on_socket(ssh)) {  in do_login()
760 		if (getpeername(ssh_packet_get_connection_in(ssh),  in do_login()
971 do_setup_env(struct ssh *ssh, Session *s, const char *shell)  in do_setup_env()  argument
1172 	    ssh_remote_ipaddr(ssh), ssh_remote_port(ssh),  in do_setup_env()
1173 	    ssh_local_port(ssh));  in do_setup_env()
1176 	laddr = get_local_ipaddr(ssh_packet_get_connection_in(ssh));  in do_setup_env()
1178 	    ssh_remote_ipaddr(ssh), ssh_remote_port(ssh),  in do_setup_env()
1179 	    laddr, ssh_local_port(ssh));  in do_setup_env()
1207 do_rc_files(struct ssh *ssh, Session *s, const char *shell)  in do_rc_files()  argument
1473 child_close_fds(struct ssh *ssh)  in child_close_fds()  argument
1482 	if (ssh_packet_get_connection_in(ssh) ==  in child_close_fds()
1483 	    ssh_packet_get_connection_out(ssh))  in child_close_fds()
1484 		close(ssh_packet_get_connection_in(ssh));  in child_close_fds()
1486 		close(ssh_packet_get_connection_in(ssh));  in child_close_fds()
1487 		close(ssh_packet_get_connection_out(ssh));  in child_close_fds()
1494 	channel_close_all(ssh);  in child_close_fds()
1521 do_child(struct ssh *ssh, Session *s, const char *command)  in do_child()  argument
1529 	sshpkt_fmt_connection_id(ssh, remote_id, sizeof(remote_id));  in do_child()
1533 	ssh_packet_clear_keys(ssh);  in do_child()
1538 		child_close_fds(ssh);  in do_child()
1583 	env = do_setup_env(ssh, s, shell);  in do_child()
1596 	child_close_fds(ssh);  in do_child()
1647 	do_rc_files(ssh, s, shell);  in do_child()
1892 session_window_change_req(struct ssh *ssh, Session *s)  in session_window_change_req()  argument
1896 	if ((r = sshpkt_get_u32(ssh, &s->col)) != 0 ||  in session_window_change_req()
1897 	    (r = sshpkt_get_u32(ssh, &s->row)) != 0 ||  in session_window_change_req()
1898 	    (r = sshpkt_get_u32(ssh, &s->xpixel)) != 0 ||  in session_window_change_req()
1899 	    (r = sshpkt_get_u32(ssh, &s->ypixel)) != 0 ||  in session_window_change_req()
1900 	    (r = sshpkt_get_end(ssh)) != 0)  in session_window_change_req()
1901 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_window_change_req()
1907 session_pty_req(struct ssh *ssh, Session *s)  in session_pty_req()  argument
1916 		ssh_packet_disconnect(ssh, "Protocol error: you already have a pty.");  in session_pty_req()
1920 	if ((r = sshpkt_get_cstring(ssh, &s->term, NULL)) != 0 ||  in session_pty_req()
1921 	    (r = sshpkt_get_u32(ssh, &s->col)) != 0 ||  in session_pty_req()
1922 	    (r = sshpkt_get_u32(ssh, &s->row)) != 0 ||  in session_pty_req()
1923 	    (r = sshpkt_get_u32(ssh, &s->xpixel)) != 0 ||  in session_pty_req()
1924 	    (r = sshpkt_get_u32(ssh, &s->ypixel)) != 0)  in session_pty_req()
1925 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_pty_req()
1944 	ssh_tty_parse_modes(ssh, s->ttyfd);  in session_pty_req()
1946 	if ((r = sshpkt_get_end(ssh)) != 0)  in session_pty_req()
1947 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_pty_req()
1957 session_subsystem_req(struct ssh *ssh, Session *s)  in session_subsystem_req()  argument
1964 	if ((r = sshpkt_get_cstring(ssh, &s->subsys, NULL)) != 0 ||  in session_subsystem_req()
1965 	    (r = sshpkt_get_end(ssh)) != 0)  in session_subsystem_req()
1966 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_subsystem_req()
1986 			channel_set_xtype(ssh, s->chanid, type);  in session_subsystem_req()
1988 			success = do_exec(ssh, s, cmd) == 0;  in session_subsystem_req()
2001 session_x11_req(struct ssh *ssh, Session *s)  in session_x11_req()  argument
2011 	if ((r = sshpkt_get_u8(ssh, &single_connection)) != 0 ||  in session_x11_req()
2012 	    (r = sshpkt_get_cstring(ssh, &s->auth_proto, NULL)) != 0 ||  in session_x11_req()
2013 	    (r = sshpkt_get_cstring(ssh, &s->auth_data, NULL)) != 0 ||  in session_x11_req()
2014 	    (r = sshpkt_get_u32(ssh, &s->screen)) != 0 ||  in session_x11_req()
2015 	    (r = sshpkt_get_end(ssh)) != 0)  in session_x11_req()
2016 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_x11_req()
2022 		success = session_setup_x11fwd(ssh, s);  in session_x11_req()
2037 session_shell_req(struct ssh *ssh, Session *s)  in session_shell_req()  argument
2041 	if ((r = sshpkt_get_end(ssh)) != 0)  in session_shell_req()
2042 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_shell_req()
2044 	channel_set_xtype(ssh, s->chanid, "session:shell");  in session_shell_req()
2046 	return do_exec(ssh, s, NULL) == 0;  in session_shell_req()
2050 session_exec_req(struct ssh *ssh, Session *s)  in session_exec_req()  argument
2056 	if ((r = sshpkt_get_cstring(ssh, &command, NULL)) != 0 ||  in session_exec_req()
2057 	    (r = sshpkt_get_end(ssh)) != 0)  in session_exec_req()
2058 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_exec_req()
2060 	channel_set_xtype(ssh, s->chanid, "session:command");  in session_exec_req()
2062 	success = do_exec(ssh, s, command) == 0;  in session_exec_req()
2068 session_break_req(struct ssh *ssh, Session *s)  in session_break_req()  argument
2072 	if ((r = sshpkt_get_u32(ssh, NULL)) != 0 || /* ignore */  in session_break_req()
2073 	    (r = sshpkt_get_end(ssh)) != 0)  in session_break_req()
2074 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_break_req()
2082 session_env_req(struct ssh *ssh, Session *s)  in session_env_req()  argument
2088 	if ((r = sshpkt_get_cstring(ssh, &name, NULL)) != 0 ||  in session_env_req()
2089 	    (r = sshpkt_get_cstring(ssh, &val, NULL)) != 0 ||  in session_env_req()
2090 	    (r = sshpkt_get_end(ssh)) != 0)  in session_env_req()
2091 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_env_req()
2143 session_signal_req(struct ssh *ssh, Session *s)  in session_signal_req()  argument
2148 	if ((r = sshpkt_get_cstring(ssh, &signame, NULL)) != 0 ||  in session_signal_req()
2149 	    (r = sshpkt_get_end(ssh)) != 0) {  in session_signal_req()
2189 session_auth_agent_req(struct ssh *ssh, Session *s)  in session_auth_agent_req()  argument
2194 	if ((r = sshpkt_get_end(ssh)) != 0)  in session_auth_agent_req()
2195 		sshpkt_fatal(ssh, r, "%s: parse packet", __func__);  in session_auth_agent_req()
2205 		return auth_input_request_forwarding(ssh, s->pw);  in session_auth_agent_req()
2210 session_input_channel_req(struct ssh *ssh, Channel *c, const char *rtype)  in session_input_channel_req()  argument
2227 			success = session_shell_req(ssh, s);  in session_input_channel_req()
2229 			success = session_exec_req(ssh, s);  in session_input_channel_req()
2231 			success = session_pty_req(ssh, s);  in session_input_channel_req()
2233 			success = session_x11_req(ssh, s);  in session_input_channel_req()
2235 			success = session_auth_agent_req(ssh, s);  in session_input_channel_req()
2237 			success = session_subsystem_req(ssh, s);  in session_input_channel_req()
2239 			success = session_env_req(ssh, s);  in session_input_channel_req()
2243 		success = session_window_change_req(ssh, s);  in session_input_channel_req()
2245 		success = session_break_req(ssh, s);  in session_input_channel_req()
2247 		success = session_signal_req(ssh, s);  in session_input_channel_req()
2254 session_set_fds(struct ssh *ssh, Session *s,  in session_set_fds()  argument
2263 	channel_set_fds(ssh, s->chanid,  in session_set_fds()
2334 session_close_x11(struct ssh *ssh, int id)  in session_close_x11()  argument
2338 	if ((c = channel_by_id(ssh, id)) == NULL) {  in session_close_x11()
2343 		channel_cancel_cleanup(ssh, id);  in session_close_x11()
2345 			chan_mark_dead(ssh, c);  in session_close_x11()
2350 session_close_single_x11(struct ssh *ssh, int id, int force, void *arg)  in session_close_single_x11()  argument
2356 	channel_cancel_cleanup(ssh, id);  in session_close_single_x11()
2367 			session_close_x11(ssh, s->x11_chanids[i]);  in session_close_single_x11()
2382 session_exit_message(struct ssh *ssh, Session *s, int status)  in session_exit_message()  argument
2388 	if ((c = channel_lookup(ssh, s->chanid)) == NULL)  in session_exit_message()
2392 		channel_request_start(ssh, s->chanid, "exit-status", 0);  in session_exit_message()
2393 		if ((r = sshpkt_put_u32(ssh, WEXITSTATUS(status))) != 0 ||  in session_exit_message()
2394 		    (r = sshpkt_send(ssh)) != 0)  in session_exit_message()
2395 			sshpkt_fatal(ssh, r, "%s: exit reply", __func__);  in session_exit_message()
2398 		channel_request_start(ssh, s->chanid, "exit-signal", 0);  in session_exit_message()
2402 		if ((r = sshpkt_put_cstring(ssh, sig2name(WTERMSIG(status)))) != 0 ||  in session_exit_message()
2403 		    (r = sshpkt_put_u8(ssh, WCOREDUMP(status)? 1 : 0)) != 0 ||  in session_exit_message()
2404 		    (r = sshpkt_put_cstring(ssh, "")) != 0 ||  in session_exit_message()
2405 		    (r = sshpkt_put_cstring(ssh, "")) != 0 ||  in session_exit_message()
2406 		    (r = sshpkt_send(ssh)) != 0)  in session_exit_message()
2407 			sshpkt_fatal(ssh, r, "%s: exit reply", __func__);  in session_exit_message()
2412 		ssh_packet_disconnect(ssh, "wait returned status %04x.",  in session_exit_message()
2428 	channel_register_cleanup(ssh, c->self, session_close_by_channel, 1);  in session_exit_message()
2437 		chan_write_failed(ssh, c);  in session_exit_message()
2441 session_close(struct ssh *ssh, Session *s)  in session_close()  argument
2447 	    ssh_remote_ipaddr(ssh),  in session_close()
2448 	    ssh_remote_port(ssh),  in session_close()
2472 session_close_by_pid(struct ssh *ssh, pid_t pid, int status)  in session_close_by_pid()  argument
2480 		session_exit_message(ssh, s, status);  in session_close_by_pid()
2491 session_close_by_channel(struct ssh *ssh, int id, int force, void *arg)  in session_close_by_channel()  argument
2514 	channel_cancel_cleanup(ssh, s->chanid);  in session_close_by_channel()
2519 			session_close_x11(ssh, s->x11_chanids[i]);  in session_close_by_channel()
2525 	session_close(ssh, s);  in session_close_by_channel()
2529 session_destroy_all(struct ssh *ssh, void (*closefunc)(Session *))  in session_destroy_all()  argument
2538 				session_close(ssh, s);  in session_destroy_all()
2581 session_setup_x11fwd(struct ssh *ssh, Session *s)  in session_setup_x11fwd()  argument
2589 		ssh_packet_send_debug(ssh, "X11 forwarding disabled by key options.");  in session_setup_x11fwd()
2598 		ssh_packet_send_debug(ssh, "No xauth program; cannot forward X11.");  in session_setup_x11fwd()
2605 	if (x11_create_display_inet(ssh, options.x11_display_offset,  in session_setup_x11fwd()
2612 		channel_register_cleanup(ssh, s->x11_chanids[i],  in session_setup_x11fwd()
2639 			ssh_packet_send_debug(ssh, "Can't get IP address for X11 DISPLAY.");  in session_setup_x11fwd()
2657 do_authenticated2(struct ssh *ssh, Authctxt *authctxt)  in do_authenticated2()  argument
2659 	server_loop2(ssh, authctxt);  in do_authenticated2()
2663 do_cleanup(struct ssh *ssh, Authctxt *authctxt)  in do_cleanup()  argument
2719 		session_destroy_all(ssh, session_pty_cleanup2);  in do_cleanup()
2725 session_get_remote_name_or_ip(struct ssh *ssh, u_int utmp_size, int use_dns)  in session_get_remote_name_or_ip()  argument
2730 		remote = auth_get_canonical_hostname(ssh, use_dns);  in session_get_remote_name_or_ip()
2732 		remote = ssh_remote_ipaddr(ssh);  in session_get_remote_name_or_ip()