/*
 * Copyright (c) 1998-2002, 2004, 2008, 2020 Proofpoint, Inc. and its suppliers.
 *	All rights reserved.
 * Copyright (c) 1992 Eric P. Allman.  All rights reserved.
 * Copyright (c) 1992, 1993
 *	The Regents of the University of California.  All rights reserved.
 *
 * By using this file, you agree to the terms and conditions set
 * forth in the LICENSE file which can be found at the top level of
 * the sendmail distribution.
 *
 */

#include <sm/gen.h>

SM_IDSTR(copyright,
"@(#) Copyright (c) 1998-2002, 2004 Proofpoint, Inc. and its suppliers.\n\
	All rights reserved.\n\
     Copyright (c) 1992 Eric P. Allman.  All rights reserved.\n\
     Copyright (c) 1992, 1993\n\
	The Regents of the University of California.  All rights reserved.\n")

SM_IDSTR(id, "@(#)$Id: makemap.c,v 8.183 2013-11-22 20:51:52 ca Exp $")


#include <sys/types.h>
#ifndef ISC_UNIX
# include <sys/file.h>
#endif
#include <ctype.h>
#include <stdlib.h>
#include <unistd.h>
#ifdef EX_OK
# undef EX_OK		/* unistd.h may have another use for this */
#endif
#include <sysexits.h>
#include <sendmail/sendmail.h>
#include <sm/path.h>
#include <sendmail/pathnames.h>
#include <libsmdb/smdb.h>
#if USE_EAI
# include <sm/ixlen.h>
#endif

uid_t	RealUid;
gid_t	RealGid;
char	*RealUserName;
uid_t	RunAsUid;
gid_t	RunAsGid;
char	*RunAsUserName;
int	Verbose = 2;
bool	DontInitGroups = false;
uid_t	TrustedUid = 0;
BITMAP256 DontBlameSendmail;

#define BUFSIZE		1024
#define ISASCII(c)	isascii((unsigned char)(c))
#define ISSEP(c) (sep == '\0' ? ISASCII(c) && isspace(c) : (c) == sep)

static void usage __P((const char *));
static char *readcf __P((const char *, char *, bool));

static void
usage(progname)
	const char *progname;
{
	sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
		      "Usage: %s [-C cffile] [-N] [-c cachesize] [-D commentchar]\n",
		      progname);
	sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
		      "       %*s [-d] [-e] [-f] [-l] [-o] [-r] [-s] [-t delimiter]\n",
		      (int) strlen(progname), "");
#if _FFR_TESTS
	sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
		      "       %*s [-S n]\n",
		      (int) strlen(progname), "");
#endif
	sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
		      "       %*s [-u] [-v] type mapname\n",
		      (int) strlen(progname), "");
	exit(EX_USAGE);
}

/*
**  READCF -- read some settings from configuration file.
**
**	Parameters:
**		cfile -- configuration file name.
**		mapfile -- file name of map to look up (if not NULL/empty)
**			Note: this finds the first match, so in case someone
**			uses the same map file for different maps, they are
**			hopefully using the same map type.
**		fullpath -- compare the full paths or just the "basename"s?
**			(even excluding any .ext !)
**
**	Returns:
**		pointer to map class name (static!)
*/

static char *
readcf(cfile, mapfile, fullpath)
	const char *cfile;
	char *mapfile;
	bool fullpath;
{
	SM_FILE_T *cfp;
	char buf[MAXLINE];
	static char classbuf[MAXLINE];
	char *classname;
	char *p;

	if ((cfp = sm_io_open(SmFtStdio, SM_TIME_DEFAULT, cfile,
			      SM_IO_RDONLY, NULL)) == NULL)
	{
		sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
			      "makemap: %s: %s\n",
			      cfile, sm_errstring(errno));
		exit(EX_NOINPUT);
	}
	classname = NULL;
	classbuf[0] = '\0';

	if (!fullpath && mapfile != NULL)
	{
		p = strrchr(mapfile, '/');
		if (p != NULL)
			mapfile = ++p;
		p = strrchr(mapfile, '.');
		if (p != NULL)
			*p = '\0';
	}

	while (sm_io_fgets(cfp, SM_TIME_DEFAULT, buf, sizeof(buf)) >= 0)
	{
		char *b;

		if ((b = strchr(buf, '\n')) != NULL)
			*b = '\0';

		b = buf;
		switch (*b++)
		{
		  case 'O':		/* option */
#if HASFCHOWN
			if (strncasecmp(b, " TrustedUser", 12) == 0 &&
			    !(ISASCII(b[12]) && isalnum(b[12])))
			{
				b = strchr(b, '=');
				if (b == NULL)
					continue;
				while (ISASCII(*++b) && isspace(*b))
					continue;
				if (ISASCII(*b) && isdigit(*b))
					TrustedUid = atoi(b);
				else
				{
					struct passwd *pw;

					TrustedUid = 0;
					pw = getpwnam(b);
					if (pw == NULL)
						(void) sm_io_fprintf(smioerr,
								     SM_TIME_DEFAULT,
								     "TrustedUser: unknown user %s\n", b);
					else
						TrustedUid = pw->pw_uid;
				}

# ifdef UID_MAX
				if (TrustedUid > UID_MAX)
				{
					(void) sm_io_fprintf(smioerr,
							     SM_TIME_DEFAULT,
							     "TrustedUser: uid value (%ld) > UID_MAX (%ld)",
						(long) TrustedUid,
						(long) UID_MAX);
					TrustedUid = 0;
				}
# endif /* UID_MAX */
			}
#endif /* HASFCHOWN */
			break;

		  case 'K':		/* Keyfile (map) */
			if (classname != NULL)	/* found it already */
				continue;
			if (mapfile == NULL || *mapfile == '\0')
				continue;

			/* cut off trailing spaces */
			for (p = buf + strlen(buf) - 1; ISASCII(*p) && isspace(*p) && p > buf; p--)
				*p = '\0';

			/* find the last argument */
			p = strrchr(buf, ' ');
			if (p == NULL)
				continue;
			b = strstr(p, mapfile);
			if (b == NULL)
				continue;
			if (b <= buf)
				continue;
			if (!fullpath)
			{
				p = strrchr(b, '.');
				if (p != NULL)
					*p = '\0';
			}

			/* allow trailing white space? */
			if (strcmp(mapfile, b) != 0)
				continue;
			/* SM_ASSERT(b > buf); */
			--b;
			if (!ISASCII(*b))
				continue;
			if (!isspace(*b) && fullpath)
				continue;
			if (!fullpath && !(SM_IS_DIR_DELIM(*b) || isspace(*b)))
				continue;

			/* basically from readcf.c */
			for (b = buf + 1; ISASCII(*b) && isspace(*b); b++)
				;
			if (!(ISASCII(*b) && isalnum(*b)))
			{
				/* syserr("readcf: config K line: no map name"); */
				return NULL;
			}

			while ((ISASCII(*++b) && isalnum(*b)) || *b == '_' || *b == '.')
				;
			if (*b != '\0')
				*b++ = '\0';
			while (ISASCII(*b) && isspace(*b))
				b++;
			if (!(ISASCII(*b) && isalnum(*b)))
			{
				/* syserr("readcf: config K line, map %s: no map class", b); */
				return NULL;
			}
			classname = b;
			while (ISASCII(*++b) && isalnum(*b))
				;
			if (*b != '\0')
				*b++ = '\0';
			(void) sm_strlcpy(classbuf, classname, sizeof classbuf);
			break;

		  default:
			continue;
		}
	}
	(void) sm_io_close(cfp, SM_TIME_DEFAULT);

	return classbuf;
}

int
main(argc, argv)
	int argc;
	char **argv;
{
	char *progname;
	char *cfile;
	bool inclnull = false;
	bool notrunc = false;
	bool allowreplace = false;
	bool allowempty = false;
	bool verbose = false;
	bool foldcase = true;
	bool unmake = false;
	bool didreadcf = false;
	char sep = '\0';
	char comment = '#';
	int exitstat;
	int opt;
	char *typename = NULL;
	char *fallback = NULL;
	char *mapname = NULL;
	unsigned int lineno;
	int st;
	int mode;
	int smode;
	int putflags = 0;
	long sff = SFF_ROOTOK|SFF_REGONLY;
	struct passwd *pw;
	SMDB_DATABASE *database;
	SMDB_CURSOR *cursor;
	SMDB_DBENT db_key, db_val;
	SMDB_DBPARAMS params;
	SMDB_USER_INFO user_info;
	char ibuf[BUFSIZE];
	static char rnamebuf[MAXNAME];	/* holds RealUserName */
	extern char *optarg;
	extern int optind;
#if USE_EAI
	bool ascii = true;
#endif
#if _FFR_TESTS
	int slp = 0;
#endif

	memset(&params, '\0', sizeof params);
	params.smdbp_cache_size = 1024 * 1024;

	progname = strrchr(argv[0], '/');
	if (progname != NULL)
		progname++;
	else
		progname = argv[0];
	cfile = getcfname(0, 0, SM_GET_SENDMAIL_CF, NULL);

	clrbitmap(DontBlameSendmail);
	RunAsUid = RealUid = getuid();
	RunAsGid = RealGid = getgid();
	pw = getpwuid(RealUid);
	if (pw != NULL)
		(void) sm_strlcpy(rnamebuf, pw->pw_name, sizeof rnamebuf);
	else
		(void) sm_snprintf(rnamebuf, sizeof rnamebuf,
		    "Unknown UID %d", (int) RealUid);
	RunAsUserName = RealUserName = rnamebuf;
	user_info.smdbu_id = RunAsUid;
	user_info.smdbu_group_id = RunAsGid;
	(void) sm_strlcpy(user_info.smdbu_name, RunAsUserName,
		       SMDB_MAX_USER_NAME_LEN);

#define OPTIONS		"C:D:Nc:defi:Llorst:uvx"
#if _FFR_TESTS
# define X_OPTIONS		"S:"
#else
# define X_OPTIONS
#endif
	while ((opt = getopt(argc, argv, OPTIONS X_OPTIONS)) != -1)
	{
		switch (opt)
		{
		  case 'C':
			cfile = optarg;
			break;

		  case 'N':
			inclnull = true;
			break;

		  case 'c':
			params.smdbp_cache_size = atol(optarg);
			break;

		  case 'd':
			params.smdbp_allow_dup = true;
			break;

		  case 'e':
			allowempty = true;
			break;

		  case 'f':
			foldcase = false;
			break;

		  case 'i':
			fallback =optarg;
			break;

		  case 'D':
			comment = *optarg;
			break;

		  case 'L':
			smdb_print_available_types(false);
			sm_io_fprintf(smioout, SM_TIME_DEFAULT,
				      "cf\nCF\n");
			exit(EX_OK);
			break;

		  case 'l':
			smdb_print_available_types(false);
			exit(EX_OK);
			break;

		  case 'o':
			notrunc = true;
			break;

		  case 'r':
			allowreplace = true;
			break;

#if _FFR_TESTS
		  case 'S':
			slp = atoi(optarg);
			break;
#endif

		  case 's':
			setbitn(DBS_MAPINUNSAFEDIRPATH, DontBlameSendmail);
			setbitn(DBS_WRITEMAPTOHARDLINK, DontBlameSendmail);
			setbitn(DBS_WRITEMAPTOSYMLINK, DontBlameSendmail);
			setbitn(DBS_LINKEDMAPINWRITABLEDIR, DontBlameSendmail);
			break;

		  case 't':
			if (optarg == NULL || *optarg == '\0')
			{
				sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
					      "Invalid separator\n");
				break;
			}
			sep = *optarg;
			break;

		  case 'u':
			unmake = true;
			break;

		  case 'v':
			verbose = true;
			break;

		  case 'x':
			smdb_print_available_types(true);
			exit(EX_OK);
			break;

		  default:
			usage(progname);
			/* NOTREACHED */
		}
	}

	if (!bitnset(DBS_WRITEMAPTOSYMLINK, DontBlameSendmail))
		sff |= SFF_NOSLINK;
	if (!bitnset(DBS_WRITEMAPTOHARDLINK, DontBlameSendmail))
		sff |= SFF_NOHLINK;
	if (!bitnset(DBS_LINKEDMAPINWRITABLEDIR, DontBlameSendmail))
		sff |= SFF_NOWLINK;

	argc -= optind;
	argv += optind;
	if (argc != 2)
	{
		usage(progname);
		/* NOTREACHED */
	}
	else
	{
		typename = argv[0];
		mapname = argv[1];
	}

#define TYPEFROMCF	(strcasecmp(typename, "cf") == 0)
#define FULLPATHFROMCF	(strcmp(typename, "cf") == 0)

#if HASFCHOWN
	if (geteuid() == 0)
	{
		if (TYPEFROMCF)
			typename = readcf(cfile, mapname, FULLPATHFROMCF);
		else
			(void) readcf(cfile, NULL, false);
		didreadcf = true;
	}
#endif /* HASFCHOWN */

	if (!params.smdbp_allow_dup && !allowreplace)
		putflags = SMDBF_NO_OVERWRITE;

	if (unmake)
	{
		mode = O_RDONLY;
		smode = S_IRUSR;
	}
	else
	{
		mode = O_RDWR;
		if (!notrunc)
		{
			mode |= O_CREAT|O_TRUNC;
			sff |= SFF_CREAT;
		}
		smode = S_IWUSR;
	}

	params.smdbp_num_elements = 4096;

	if (!didreadcf && TYPEFROMCF)
	{
		typename = readcf(cfile, mapname, FULLPATHFROMCF);
		didreadcf = true;
	}
	if (didreadcf && (typename == NULL || *typename == '\0'))
	{
		if (fallback != NULL && *fallback != '\0')
		{
			typename = fallback;
			if (verbose)
				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
				     "%s: mapfile %s: not found in %s, using fallback %s\n",
				     progname, mapname, cfile, fallback);
		}
		else
		{
			(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
				     "%s: mapfile %s: not found in %s\n",
				     progname, mapname, cfile);
			exit(EX_DATAERR);
		}
	}

	/*
	**  Note: if "implicit" is selected it does not work like
	**  sendmail: it will just use the first available DB type,
	**  it won't try several (for -u) to find one that "works".
	*/

	errno = smdb_open_database(&database, mapname, mode, smode, sff,
				   typename, &user_info, &params);
	if (errno != SMDBE_OK)
	{
		char *hint;

		if (errno == SMDBE_UNSUPPORTED_DB_TYPE &&
		    (hint = smdb_db_definition(typename)) != NULL)
			(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
					     "%s: Need to recompile with -D%s for %s support\n",
					     progname, hint, typename);
		else
			(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
					     "%s: error opening type %s map %s: %s\n",
					     progname, typename, mapname,
					     sm_errstring(errno));
		exit(EX_CANTCREAT);
	}

	(void) database->smdb_sync(database, 0);

	if (!unmake && geteuid() == 0 && TrustedUid != 0)
	{
		errno = database->smdb_set_owner(database, TrustedUid, -1);
		if (errno != SMDBE_OK)
		{
			(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
					     "WARNING: ownership change on %s failed %s",
					     mapname, sm_errstring(errno));
		}
	}

	/*
	**  Copy the data
	*/

	exitstat = EX_OK;
	if (unmake)
	{
		errno = database->smdb_cursor(database, &cursor, 0);
		if (errno != SMDBE_OK)
		{

			(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
					     "%s: cannot make cursor for type %s map %s\n",
					     progname, typename, mapname);
			exit(EX_SOFTWARE);
		}

		memset(&db_key, '\0', sizeof db_key);
		memset(&db_val, '\0', sizeof db_val);

		for (lineno = 0; ; lineno++)
		{
			errno = cursor->smdbc_get(cursor, &db_key, &db_val,
						  SMDB_CURSOR_GET_NEXT);
			if (errno != SMDBE_OK)
				break;

			(void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
					     "%.*s%c%.*s\n",
					     (int) db_key.size,
					     (char *) db_key.data,
					     (sep != '\0') ? sep : '\t',
					     (int) db_val.size,
					     (char *)db_val.data);

		}
		(void) cursor->smdbc_close(cursor);
	}
	else
	{
		lineno = 0;
		while (sm_io_fgets(smioin, SM_TIME_DEFAULT, ibuf, sizeof ibuf)
		       >= 0)
		{
			register char *p;

			lineno++;

			/*
			**  Parse the line.
			*/

			p = strchr(ibuf, '\n');
			if (p != NULL)
				*p = '\0';
			else if (!sm_io_eof(smioin))
			{
				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
						     "%s: %s: line %u: line too long (%ld bytes max)\n",
						     progname, mapname, lineno,
						     (long) sizeof ibuf);
				exitstat = EX_DATAERR;
				continue;
			}

			if (ibuf[0] == '\0' || ibuf[0] == comment)
				continue;
			if (sep == '\0' && ISASCII(ibuf[0]) && isspace(ibuf[0]))
			{
				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
						     "%s: %s: line %u: syntax error (leading space)\n",
						     progname, mapname, lineno);
				exitstat = EX_DATAERR;
				continue;
			}

			memset(&db_key, '\0', sizeof db_key);
			memset(&db_val, '\0', sizeof db_val);
			db_key.data = ibuf;

#if USE_EAI
			db_key.size = 0;
			if (foldcase)
			{
				for (p = ibuf; *p != '\0' && !ISSEP(*p); p++)
				{
					if (!ISASCII(*p))
						ascii = false;
				}
				if (!ascii)
				{
					char sep;
					char *lkey;

					sep = *p;
					*p = '\0';

					lkey = sm_lowercase(ibuf);
					db_key.data = lkey;
					db_key.size = strlen(lkey);
					*p = sep;
				}
			}
			if (ascii)
#endif /* USE_EAI */
			/* NOTE: see if () above! */
			for (p = ibuf; *p != '\0' && !ISSEP(*p); p++)
			{
				if (foldcase && ISASCII(*p) && isupper(*p))
					*p = tolower(*p);
			}
#if USE_EAI
			if (0 == db_key.size)
#endif
				db_key.size = p - ibuf;
			if (inclnull)
				db_key.size++;

			if (*p != '\0')
				*p++ = '\0';
			while (*p != '\0' && ISSEP(*p))
				p++;
			if (!allowempty && *p == '\0')
			{
				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
						     "%s: %s: line %u: no RHS for LHS %s\n",
						     progname, mapname, lineno,
						     (char *) db_key.data);
				exitstat = EX_DATAERR;
				continue;
			}

			db_val.data = p;
			db_val.size = strlen(p);
			if (inclnull)
				db_val.size++;

			/*
			**  Do the database insert.
			*/

			if (verbose)
			{
				(void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
						     "key=`%s', val=`%s'\n",
						     (char *) db_key.data,
						     (char *) db_val.data);
			}

			errno = database->smdb_put(database, &db_key, &db_val,
						   putflags);
			switch (errno)
			{
			  case SMDBE_KEY_EXIST:
				st = 1;
				break;

			  case 0:
				st = 0;
				break;

			  default:
				st = -1;
				break;
			}

			if (st < 0)
			{
				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
						     "%s: %s: line %u: key %s: put error: %s\n",
						     progname, mapname, lineno,
						     (char *) db_key.data,
						     sm_errstring(errno));
				exitstat = EX_IOERR;
			}
			else if (st > 0)
			{
				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
						     "%s: %s: line %u: key %s: duplicate key\n",
						     progname, mapname,
						     lineno,
						     (char *) db_key.data);
				exitstat = EX_DATAERR;
			}
		}
	}

#if _FFR_TESTS
	if (slp > 0)
		sleep(slp);
#endif

	/*
	**  Now close the database.
	*/

	errno = database->smdb_close(database);
	if (errno != SMDBE_OK)
	{
		(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
				     "%s: close(%s): %s\n",
				     progname, mapname, sm_errstring(errno));
		exitstat = EX_IOERR;
	}
	smdb_free_database(database);

	exit(exitstat);

	/* NOTREACHED */
	return exitstat;
}