xref: /freebsd/lib/libc/gen/getgrent.c (revision 49b49cda41feabe3439f7318e8bf40e3896c7bf4)
1 /*-
2  * Copyright (c) 2003 Networks Associates Technology, Inc.
3  * All rights reserved.
4  *
5  * This software was developed for the FreeBSD Project by
6  * Jacques A. Vidrine, Safeport Network Services, and Network
7  * Associates Laboratories, the Security Research Division of Network
8  * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035
9  * ("CBOSS"), as part of the DARPA CHATS research program.
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions
13  * are met:
14  * 1. Redistributions of source code must retain the above copyright
15  *    notice, this list of conditions and the following disclaimer.
16  * 2. Redistributions in binary form must reproduce the above copyright
17  *    notice, this list of conditions and the following disclaimer in the
18  *    documentation and/or other materials provided with the distribution.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  *
32  */
33 #include <sys/cdefs.h>
34 __FBSDID("$FreeBSD$");
35 
36 #include "namespace.h"
37 #include <sys/param.h>
38 #ifdef YP
39 #include <rpc/rpc.h>
40 #include <rpcsvc/yp_prot.h>
41 #include <rpcsvc/ypclnt.h>
42 #endif
43 #include <assert.h>
44 #include <ctype.h>
45 #include <errno.h>
46 #ifdef HESIOD
47 #include <hesiod.h>
48 #endif
49 #include <grp.h>
50 #include <nsswitch.h>
51 #include <pthread.h>
52 #include <pthread_np.h>
53 #include <stdio.h>
54 #include <stdlib.h>
55 #include <string.h>
56 #include <syslog.h>
57 #include <unistd.h>
58 #include "un-namespace.h"
59 #include "libc_private.h"
60 #include "nss_tls.h"
61 #ifdef NS_CACHING
62 #include "nscache.h"
63 #endif
64 
65 enum constants {
66 	GRP_STORAGE_INITIAL	= 1 << 10, /* 1 KByte */
67 	GRP_STORAGE_MAX		= 1 << 20, /* 1 MByte */
68 	SETGRENT		= 1,
69 	ENDGRENT		= 2,
70 	HESIOD_NAME_MAX		= 256,
71 };
72 
73 static const ns_src defaultsrc[] = {
74 	{ NSSRC_COMPAT, NS_SUCCESS },
75 	{ NULL, 0 }
76 };
77 
78 int	 __getgroupmembership(const char *, gid_t, gid_t *, int, int *);
79 int	 __gr_match_entry(const char *, size_t, enum nss_lookup_type,
80 	    const char *, gid_t);
81 int	 __gr_parse_entry(char *, size_t, struct group *, char *, size_t,
82 	    int *);
83 
84 static	int	 is_comment_line(const char *, size_t);
85 
86 union key {
87 	const char	*name;
88 	gid_t		 gid;
89 };
90 static	struct group *getgr(int (*)(union key, struct group *, char *, size_t,
91 		    struct group **), union key);
92 static	int	 wrap_getgrnam_r(union key, struct group *, char *, size_t,
93 		    struct group **);
94 static	int	 wrap_getgrgid_r(union key, struct group *, char *, size_t,
95 		    struct group **);
96 static	int	 wrap_getgrent_r(union key, struct group *, char *, size_t,
97 		    struct group **);
98 
99 struct files_state {
100 	FILE	*fp;
101 	int	 stayopen;
102 };
103 static	void	 files_endstate(void *);
104 NSS_TLS_HANDLING(files);
105 static	int	 files_setgrent(void *, void *, va_list);
106 static	int	 files_group(void *, void *, va_list);
107 
108 
109 #ifdef HESIOD
110 struct dns_state {
111 	long	counter;
112 };
113 static	void	 dns_endstate(void *);
114 NSS_TLS_HANDLING(dns);
115 static	int	 dns_setgrent(void *, void *, va_list);
116 static	int	 dns_group(void *, void *, va_list);
117 #endif
118 
119 
120 #ifdef YP
121 struct nis_state {
122 	char	 domain[MAXHOSTNAMELEN];
123 	int	 done;
124 	char	*key;
125 	int	 keylen;
126 };
127 static	void	 nis_endstate(void *);
128 NSS_TLS_HANDLING(nis);
129 static	int	 nis_setgrent(void *, void *, va_list);
130 static	int	 nis_group(void *, void *, va_list);
131 #endif
132 
133 struct compat_state {
134 	FILE	*fp;
135 	int	 stayopen;
136 	char	*name;
137 	enum _compat {
138 		COMPAT_MODE_OFF = 0,
139 		COMPAT_MODE_ALL,
140 		COMPAT_MODE_NAME
141 	}	 compat;
142 };
143 static	void	 compat_endstate(void *);
144 NSS_TLS_HANDLING(compat);
145 static	int	 compat_setgrent(void *, void *, va_list);
146 static	int	 compat_group(void *, void *, va_list);
147 
148 static	int	gr_addgid(gid_t, gid_t *, int, int *);
149 static	int	getgroupmembership_fallback(void *, void *, va_list);
150 
151 #ifdef NS_CACHING
152 static	int	 grp_id_func(char *, size_t *, va_list, void *);
153 static	int	 grp_marshal_func(char *, size_t *, void *, va_list, void *);
154 static	int	 grp_unmarshal_func(char *, size_t, void *, va_list, void *);
155 
156 static int
157 grp_id_func(char *buffer, size_t *buffer_size, va_list ap, void *cache_mdata)
158 {
159 	char	*name;
160 	gid_t	gid;
161 
162 	size_t	desired_size, size;
163 	int	res = NS_UNAVAIL;
164 	enum nss_lookup_type lookup_type;
165 
166 
167 	lookup_type = (enum nss_lookup_type)cache_mdata;
168 	switch (lookup_type) {
169 	case nss_lt_name:
170 		name = va_arg(ap, char *);
171 		size = strlen(name);
172 		desired_size = sizeof(enum nss_lookup_type) + size + 1;
173 		if (desired_size > *buffer_size) {
174 			res = NS_RETURN;
175 			goto fin;
176 		}
177 
178 		memcpy(buffer, &lookup_type, sizeof(enum nss_lookup_type));
179 		memcpy(buffer + sizeof(enum nss_lookup_type), name, size + 1);
180 
181 		res = NS_SUCCESS;
182 		break;
183 	case nss_lt_id:
184 		gid = va_arg(ap, gid_t);
185 		desired_size = sizeof(enum nss_lookup_type) + sizeof(gid_t);
186 		if (desired_size > *buffer_size) {
187 			res = NS_RETURN;
188 			goto fin;
189 		}
190 
191 		memcpy(buffer, &lookup_type, sizeof(enum nss_lookup_type));
192 		memcpy(buffer + sizeof(enum nss_lookup_type), &gid,
193 		    sizeof(gid_t));
194 
195 		res = NS_SUCCESS;
196 		break;
197 	default:
198 		/* should be unreachable */
199 		return (NS_UNAVAIL);
200 	}
201 
202 fin:
203 	*buffer_size = desired_size;
204 	return (res);
205 }
206 
207 static int
208 grp_marshal_func(char *buffer, size_t *buffer_size, void *retval, va_list ap,
209     void *cache_mdata)
210 {
211 	char *name;
212 	gid_t gid;
213 	struct group *grp;
214 	char *orig_buf;
215 	size_t orig_buf_size;
216 
217 	struct group new_grp;
218 	size_t desired_size, size, mem_size;
219 	char *p, **mem;
220 
221 	switch ((enum nss_lookup_type)cache_mdata) {
222 	case nss_lt_name:
223 		name = va_arg(ap, char *);
224 		break;
225 	case nss_lt_id:
226 		gid = va_arg(ap, gid_t);
227 		break;
228 	case nss_lt_all:
229 		break;
230 	default:
231 		/* should be unreachable */
232 		return (NS_UNAVAIL);
233 	}
234 
235 	grp = va_arg(ap, struct group *);
236 	orig_buf = va_arg(ap, char *);
237 	orig_buf_size = va_arg(ap, size_t);
238 
239 	desired_size = _ALIGNBYTES + sizeof(struct group) + sizeof(char *);
240 
241 	if (grp->gr_name != NULL)
242 		desired_size += strlen(grp->gr_name) + 1;
243 	if (grp->gr_passwd != NULL)
244 		desired_size += strlen(grp->gr_passwd) + 1;
245 
246 	if (grp->gr_mem != NULL) {
247 		mem_size = 0;
248 		for (mem = grp->gr_mem; *mem; ++mem) {
249 			desired_size += strlen(*mem) + 1;
250 			++mem_size;
251 		}
252 
253 		desired_size += _ALIGNBYTES + (mem_size + 1) * sizeof(char *);
254 	}
255 
256 	if (desired_size > *buffer_size) {
257 		/* this assignment is here for future use */
258 		*buffer_size = desired_size;
259 		return (NS_RETURN);
260 	}
261 
262 	memcpy(&new_grp, grp, sizeof(struct group));
263 	memset(buffer, 0, desired_size);
264 
265 	*buffer_size = desired_size;
266 	p = buffer + sizeof(struct group) + sizeof(char *);
267 	memcpy(buffer + sizeof(struct group), &p, sizeof(char *));
268 	p = (char *)_ALIGN(p);
269 
270 	if (new_grp.gr_name != NULL) {
271 		size = strlen(new_grp.gr_name);
272 		memcpy(p, new_grp.gr_name, size);
273 		new_grp.gr_name = p;
274 		p += size + 1;
275 	}
276 
277 	if (new_grp.gr_passwd != NULL) {
278 		size = strlen(new_grp.gr_passwd);
279 		memcpy(p, new_grp.gr_passwd, size);
280 		new_grp.gr_passwd = p;
281 		p += size + 1;
282 	}
283 
284 	if (new_grp.gr_mem != NULL) {
285 		p = (char *)_ALIGN(p);
286 		memcpy(p, new_grp.gr_mem, sizeof(char *) * mem_size);
287 		new_grp.gr_mem = (char **)p;
288 		p += sizeof(char *) * (mem_size + 1);
289 
290 		for (mem = new_grp.gr_mem; *mem; ++mem) {
291 			size = strlen(*mem);
292 			memcpy(p, *mem, size);
293 			*mem = p;
294 			p += size + 1;
295 		}
296 	}
297 
298 	memcpy(buffer, &new_grp, sizeof(struct group));
299 	return (NS_SUCCESS);
300 }
301 
302 static int
303 grp_unmarshal_func(char *buffer, size_t buffer_size, void *retval, va_list ap,
304     void *cache_mdata)
305 {
306 	char *name;
307 	gid_t gid;
308 	struct group *grp;
309 	char *orig_buf;
310 	size_t orig_buf_size;
311 	int *ret_errno;
312 
313 	char *p;
314 	char **mem;
315 
316 	switch ((enum nss_lookup_type)cache_mdata) {
317 	case nss_lt_name:
318 		name = va_arg(ap, char *);
319 		break;
320 	case nss_lt_id:
321 		gid = va_arg(ap, gid_t);
322 		break;
323 	case nss_lt_all:
324 		break;
325 	default:
326 		/* should be unreachable */
327 		return (NS_UNAVAIL);
328 	}
329 
330 	grp = va_arg(ap, struct group *);
331 	orig_buf = va_arg(ap, char *);
332 	orig_buf_size = va_arg(ap, size_t);
333 	ret_errno = va_arg(ap, int *);
334 
335 	if (orig_buf_size <
336 	    buffer_size - sizeof(struct group) - sizeof(char *)) {
337 		*ret_errno = ERANGE;
338 		return (NS_RETURN);
339 	}
340 
341 	memcpy(grp, buffer, sizeof(struct group));
342 	memcpy(&p, buffer + sizeof(struct group), sizeof(char *));
343 
344 	orig_buf = (char *)_ALIGN(orig_buf);
345 	memcpy(orig_buf, buffer + sizeof(struct group) + sizeof(char *) +
346 	    _ALIGN(p) - (size_t)p,
347 	    buffer_size - sizeof(struct group) - sizeof(char *) -
348 	    _ALIGN(p) + (size_t)p);
349 	p = (char *)_ALIGN(p);
350 
351 	NS_APPLY_OFFSET(grp->gr_name, orig_buf, p, char *);
352 	NS_APPLY_OFFSET(grp->gr_passwd, orig_buf, p, char *);
353 	if (grp->gr_mem != NULL) {
354 		NS_APPLY_OFFSET(grp->gr_mem, orig_buf, p, char **);
355 
356 		for (mem = grp->gr_mem; *mem; ++mem)
357 			NS_APPLY_OFFSET(*mem, orig_buf, p, char *);
358 	}
359 
360 	if (retval != NULL)
361 		*((struct group **)retval) = grp;
362 
363 	return (NS_SUCCESS);
364 }
365 
366 NSS_MP_CACHE_HANDLING(group);
367 #endif /* NS_CACHING */
368 
369 #ifdef NS_CACHING
370 static const nss_cache_info setgrent_cache_info = NS_MP_CACHE_INFO_INITIALIZER(
371 	group, (void *)nss_lt_all,
372 	NULL, NULL);
373 #endif
374 
375 static const ns_dtab setgrent_dtab[] = {
376 	{ NSSRC_FILES, files_setgrent, (void *)SETGRENT },
377 #ifdef HESIOD
378 	{ NSSRC_DNS, dns_setgrent, (void *)SETGRENT },
379 #endif
380 #ifdef YP
381 	{ NSSRC_NIS, nis_setgrent, (void *)SETGRENT },
382 #endif
383 	{ NSSRC_COMPAT, compat_setgrent, (void *)SETGRENT },
384 #ifdef NS_CACHING
385 	NS_CACHE_CB(&setgrent_cache_info)
386 #endif
387 	{ NULL, NULL, NULL }
388 };
389 
390 #ifdef NS_CACHING
391 static const nss_cache_info endgrent_cache_info = NS_MP_CACHE_INFO_INITIALIZER(
392 	group, (void *)nss_lt_all,
393 	NULL, NULL);
394 #endif
395 
396 static const ns_dtab endgrent_dtab[] = {
397 	{ NSSRC_FILES, files_setgrent, (void *)ENDGRENT },
398 #ifdef HESIOD
399 	{ NSSRC_DNS, dns_setgrent, (void *)ENDGRENT },
400 #endif
401 #ifdef YP
402 	{ NSSRC_NIS, nis_setgrent, (void *)ENDGRENT },
403 #endif
404 	{ NSSRC_COMPAT, compat_setgrent, (void *)ENDGRENT },
405 #ifdef NS_CACHING
406 	NS_CACHE_CB(&endgrent_cache_info)
407 #endif
408 	{ NULL, NULL, NULL }
409 };
410 
411 #ifdef NS_CACHING
412 static const nss_cache_info getgrent_r_cache_info = NS_MP_CACHE_INFO_INITIALIZER(
413 	group, (void *)nss_lt_all,
414 	grp_marshal_func, grp_unmarshal_func);
415 #endif
416 
417 static const ns_dtab getgrent_r_dtab[] = {
418 	{ NSSRC_FILES, files_group, (void *)nss_lt_all },
419 #ifdef HESIOD
420 	{ NSSRC_DNS, dns_group, (void *)nss_lt_all },
421 #endif
422 #ifdef YP
423 	{ NSSRC_NIS, nis_group, (void *)nss_lt_all },
424 #endif
425 	{ NSSRC_COMPAT, compat_group, (void *)nss_lt_all },
426 #ifdef NS_CACHING
427 	NS_CACHE_CB(&getgrent_r_cache_info)
428 #endif
429 	{ NULL, NULL, NULL }
430 };
431 
432 static int
433 gr_addgid(gid_t gid, gid_t *groups, int maxgrp, int *grpcnt)
434 {
435 	int     ret, dupc;
436 
437 	for (dupc = 0; dupc < MIN(maxgrp, *grpcnt); dupc++) {
438 		if (groups[dupc] == gid)
439 			return 1;
440 	}
441 
442 	ret = 1;
443 	if (*grpcnt < maxgrp)
444 		groups[*grpcnt] = gid;
445 	else
446 		ret = 0;
447 
448 	(*grpcnt)++;
449 
450 	return ret;
451 }
452 
453 static int
454 getgroupmembership_fallback(void *retval, void *mdata, va_list ap)
455 {
456 	const ns_src src[] = {
457 		{ mdata, NS_SUCCESS },
458 		{ NULL, 0}
459 	};
460 	struct group	grp;
461 	struct group	*grp_p;
462 	char		*buf;
463 	size_t		bufsize;
464 	const char	*uname;
465 	gid_t		*groups;
466 	gid_t		agroup;
467 	int 		maxgrp, *grpcnt;
468 	int		i, rv, ret_errno;
469 
470 	/*
471 	 * As this is a fallback method, only provided src
472 	 * list will be respected during methods search.
473 	 */
474 	assert(src[0].name != NULL);
475 
476 	uname = va_arg(ap, const char *);
477 	agroup = va_arg(ap, gid_t);
478 	groups = va_arg(ap, gid_t *);
479 	maxgrp = va_arg(ap, int);
480 	grpcnt = va_arg(ap, int *);
481 
482 	rv = NS_UNAVAIL;
483 
484 	buf = malloc(GRP_STORAGE_INITIAL);
485 	if (buf == NULL)
486 		goto out;
487 
488 	bufsize = GRP_STORAGE_INITIAL;
489 
490 	gr_addgid(agroup, groups, maxgrp, grpcnt);
491 
492 	_nsdispatch(NULL, setgrent_dtab, NSDB_GROUP, "setgrent", src, 0);
493 	for (;;) {
494 		do {
495 			ret_errno = 0;
496 			grp_p = NULL;
497 			rv = _nsdispatch(&grp_p, getgrent_r_dtab, NSDB_GROUP,
498 			    "getgrent_r", src, &grp, buf, bufsize, &ret_errno);
499 
500 			if (grp_p == NULL && ret_errno == ERANGE) {
501 				free(buf);
502 				if ((bufsize << 1) > GRP_STORAGE_MAX) {
503 					buf = NULL;
504 					errno = ERANGE;
505 					goto out;
506 				}
507 
508 				bufsize <<= 1;
509 				buf = malloc(bufsize);
510 				if (buf == NULL) {
511 					goto out;
512 				}
513 			}
514 		} while (grp_p == NULL && ret_errno == ERANGE);
515 
516 		if (ret_errno != 0) {
517 			errno = ret_errno;
518 			goto out;
519 		}
520 
521 		if (grp_p == NULL)
522 			break;
523 
524 		for (i = 0; grp.gr_mem[i]; i++) {
525 			if (strcmp(grp.gr_mem[i], uname) == 0)
526 			    gr_addgid(grp.gr_gid, groups, maxgrp, grpcnt);
527 		}
528 	}
529 
530 	_nsdispatch(NULL, endgrent_dtab, NSDB_GROUP, "endgrent", src);
531 out:
532 	free(buf);
533 	return (rv);
534 }
535 
536 /* XXX IEEE Std 1003.1, 2003 specifies `void setgrent(void)' */
537 int
538 setgrent(void)
539 {
540 	(void)_nsdispatch(NULL, setgrent_dtab, NSDB_GROUP, "setgrent", defaultsrc, 0);
541 	return (1);
542 }
543 
544 
545 int
546 setgroupent(int stayopen)
547 {
548 	(void)_nsdispatch(NULL, setgrent_dtab, NSDB_GROUP, "setgrent", defaultsrc,
549 	    stayopen);
550 	return (1);
551 }
552 
553 
554 void
555 endgrent(void)
556 {
557 	(void)_nsdispatch(NULL, endgrent_dtab, NSDB_GROUP, "endgrent", defaultsrc);
558 }
559 
560 
561 int
562 getgrent_r(struct group *grp, char *buffer, size_t bufsize,
563     struct group **result)
564 {
565 	int	rv, ret_errno;
566 
567 	ret_errno = 0;
568 	*result = NULL;
569 	rv = _nsdispatch(result, getgrent_r_dtab, NSDB_GROUP, "getgrent_r", defaultsrc,
570 	    grp, buffer, bufsize, &ret_errno);
571 	if (rv == NS_SUCCESS)
572 		return (0);
573 	else
574 		return (ret_errno);
575 }
576 
577 
578 int
579 getgrnam_r(const char *name, struct group *grp, char *buffer, size_t bufsize,
580     struct group **result)
581 {
582 #ifdef NS_CACHING
583 	static const nss_cache_info cache_info =
584     		NS_COMMON_CACHE_INFO_INITIALIZER(
585 		group, (void *)nss_lt_name,
586 		grp_id_func, grp_marshal_func, grp_unmarshal_func);
587 #endif
588 
589 	static const ns_dtab dtab[] = {
590 		{ NSSRC_FILES, files_group, (void *)nss_lt_name },
591 #ifdef HESIOD
592 		{ NSSRC_DNS, dns_group, (void *)nss_lt_name },
593 #endif
594 #ifdef YP
595 		{ NSSRC_NIS, nis_group, (void *)nss_lt_name },
596 #endif
597 		{ NSSRC_COMPAT, compat_group, (void *)nss_lt_name },
598 #ifdef NS_CACHING
599 		NS_CACHE_CB(&cache_info)
600 #endif
601 		{ NULL, NULL, NULL }
602 	};
603 	int	rv, ret_errno;
604 
605 	ret_errno = 0;
606 	*result = NULL;
607 	rv = _nsdispatch(result, dtab, NSDB_GROUP, "getgrnam_r", defaultsrc,
608 	    name, grp, buffer, bufsize, &ret_errno);
609 	if (rv == NS_SUCCESS)
610 		return (0);
611 	else
612 		return (ret_errno);
613 }
614 
615 
616 int
617 getgrgid_r(gid_t gid, struct group *grp, char *buffer, size_t bufsize,
618     struct group **result)
619 {
620 #ifdef NS_CACHING
621 	static const nss_cache_info cache_info =
622     		NS_COMMON_CACHE_INFO_INITIALIZER(
623 		group, (void *)nss_lt_id,
624 		grp_id_func, grp_marshal_func, grp_unmarshal_func);
625 #endif
626 
627 	static const ns_dtab dtab[] = {
628 		{ NSSRC_FILES, files_group, (void *)nss_lt_id },
629 #ifdef HESIOD
630 		{ NSSRC_DNS, dns_group, (void *)nss_lt_id },
631 #endif
632 #ifdef YP
633 		{ NSSRC_NIS, nis_group, (void *)nss_lt_id },
634 #endif
635 		{ NSSRC_COMPAT, compat_group, (void *)nss_lt_id },
636 #ifdef NS_CACHING
637 		NS_CACHE_CB(&cache_info)
638 #endif
639 		{ NULL, NULL, NULL }
640 	};
641 	int	rv, ret_errno;
642 
643 	ret_errno = 0;
644 	*result = NULL;
645 	rv = _nsdispatch(result, dtab, NSDB_GROUP, "getgrgid_r", defaultsrc,
646 	    gid, grp, buffer, bufsize, &ret_errno);
647 	if (rv == NS_SUCCESS)
648 		return (0);
649 	else
650 		return (ret_errno);
651 }
652 
653 
654 
655 int
656 __getgroupmembership(const char *uname, gid_t agroup, gid_t *groups,
657 	int maxgrp, int *grpcnt)
658 {
659 	static const ns_dtab dtab[] = {
660 		NS_FALLBACK_CB(getgroupmembership_fallback)
661 		{ NULL, NULL, NULL }
662 	};
663 
664 	assert(uname != NULL);
665 	/* groups may be NULL if just sizing when invoked with maxgrp = 0 */
666 	assert(grpcnt != NULL);
667 
668 	*grpcnt = 0;
669 	(void)_nsdispatch(NULL, dtab, NSDB_GROUP, "getgroupmembership",
670 	    defaultsrc, uname, agroup, groups, maxgrp, grpcnt);
671 
672 	/* too many groups found? */
673 	return (*grpcnt > maxgrp ? -1 : 0);
674 }
675 
676 
677 static struct group	 grp;
678 static char		*grp_storage;
679 static size_t		 grp_storage_size;
680 
681 static struct group *
682 getgr(int (*fn)(union key, struct group *, char *, size_t, struct group **),
683     union key key)
684 {
685 	int		 rv;
686 	struct group	*res;
687 
688 	if (grp_storage == NULL) {
689 		grp_storage = malloc(GRP_STORAGE_INITIAL);
690 		if (grp_storage == NULL)
691 			return (NULL);
692 		grp_storage_size = GRP_STORAGE_INITIAL;
693 	}
694 	do {
695 		rv = fn(key, &grp, grp_storage, grp_storage_size, &res);
696 		if (res == NULL && rv == ERANGE) {
697 			free(grp_storage);
698 			if ((grp_storage_size << 1) > GRP_STORAGE_MAX) {
699 				grp_storage = NULL;
700 				errno = ERANGE;
701 				return (NULL);
702 			}
703 			grp_storage_size <<= 1;
704 			grp_storage = malloc(grp_storage_size);
705 			if (grp_storage == NULL)
706 				return (NULL);
707 		}
708 	} while (res == NULL && rv == ERANGE);
709 	if (rv != 0)
710 		errno = rv;
711 	return (res);
712 }
713 
714 
715 static int
716 wrap_getgrnam_r(union key key, struct group *grp, char *buffer, size_t bufsize,
717     struct group **res)
718 {
719 	return (getgrnam_r(key.name, grp, buffer, bufsize, res));
720 }
721 
722 
723 static int
724 wrap_getgrgid_r(union key key, struct group *grp, char *buffer, size_t bufsize,
725     struct group **res)
726 {
727 	return (getgrgid_r(key.gid, grp, buffer, bufsize, res));
728 }
729 
730 
731 static int
732 wrap_getgrent_r(union key key __unused, struct group *grp, char *buffer,
733     size_t bufsize, struct group **res)
734 {
735 	return (getgrent_r(grp, buffer, bufsize, res));
736 }
737 
738 
739 struct group *
740 getgrnam(const char *name)
741 {
742 	union key key;
743 
744 	key.name = name;
745 	return (getgr(wrap_getgrnam_r, key));
746 }
747 
748 
749 struct group *
750 getgrgid(gid_t gid)
751 {
752 	union key key;
753 
754 	key.gid = gid;
755 	return (getgr(wrap_getgrgid_r, key));
756 }
757 
758 
759 struct group *
760 getgrent(void)
761 {
762 	union key key;
763 
764 	key.gid = 0; /* not used */
765 	return (getgr(wrap_getgrent_r, key));
766 }
767 
768 
769 static int
770 is_comment_line(const char *s, size_t n)
771 {
772 	const char	*eom;
773 
774 	eom = &s[n];
775 
776 	for (; s < eom; s++)
777 		if (*s == '#' || !isspace((unsigned char)*s))
778 			break;
779 	return (*s == '#' || s == eom);
780 }
781 
782 
783 /*
784  * files backend
785  */
786 static void
787 files_endstate(void *p)
788 {
789 
790 	if (p == NULL)
791 		return;
792 	if (((struct files_state *)p)->fp != NULL)
793 		fclose(((struct files_state *)p)->fp);
794 	free(p);
795 }
796 
797 
798 static int
799 files_setgrent(void *retval, void *mdata, va_list ap)
800 {
801 	struct files_state *st;
802 	int		 rv, stayopen;
803 
804 	rv = files_getstate(&st);
805 	if (rv != 0)
806 		return (NS_UNAVAIL);
807 	switch ((enum constants)mdata) {
808 	case SETGRENT:
809 		stayopen = va_arg(ap, int);
810 		if (st->fp != NULL)
811 			rewind(st->fp);
812 		else if (stayopen)
813 			st->fp = fopen(_PATH_GROUP, "re");
814 		break;
815 	case ENDGRENT:
816 		if (st->fp != NULL) {
817 			fclose(st->fp);
818 			st->fp = NULL;
819 		}
820 		break;
821 	default:
822 		break;
823 	}
824 	return (NS_UNAVAIL);
825 }
826 
827 
828 static int
829 files_group(void *retval, void *mdata, va_list ap)
830 {
831 	struct files_state	*st;
832 	enum nss_lookup_type	 how;
833 	const char		*name, *line;
834 	struct group		*grp;
835 	gid_t			 gid;
836 	char			*buffer;
837 	size_t			 bufsize, linesize;
838 	off_t			 pos;
839 	int			 rv, stayopen, *errnop;
840 
841 	name = NULL;
842 	gid = (gid_t)-1;
843 	how = (enum nss_lookup_type)mdata;
844 	switch (how) {
845 	case nss_lt_name:
846 		name = va_arg(ap, const char *);
847 		break;
848 	case nss_lt_id:
849 		gid = va_arg(ap, gid_t);
850 		break;
851 	case nss_lt_all:
852 		break;
853 	default:
854 		return (NS_NOTFOUND);
855 	}
856 	grp = va_arg(ap, struct group *);
857 	buffer = va_arg(ap, char *);
858 	bufsize = va_arg(ap, size_t);
859 	errnop = va_arg(ap, int *);
860 	*errnop = files_getstate(&st);
861 	if (*errnop != 0)
862 		return (NS_UNAVAIL);
863 	if (st->fp == NULL &&
864 	    ((st->fp = fopen(_PATH_GROUP, "re")) == NULL)) {
865 		*errnop = errno;
866 		return (NS_UNAVAIL);
867 	}
868 	if (how == nss_lt_all)
869 		stayopen = 1;
870 	else {
871 		rewind(st->fp);
872 		stayopen = st->stayopen;
873 	}
874 	rv = NS_NOTFOUND;
875 	pos = ftello(st->fp);
876 	while ((line = fgetln(st->fp, &linesize)) != NULL) {
877 		if (line[linesize-1] == '\n')
878 			linesize--;
879 		rv = __gr_match_entry(line, linesize, how, name, gid);
880 		if (rv != NS_SUCCESS)
881 			continue;
882 		/* We need room at least for the line, a string NUL
883 		 * terminator, alignment padding, and one (char *)
884 		 * pointer for the member list terminator.
885 		 */
886 		if (bufsize <= linesize + _ALIGNBYTES + sizeof(char *)) {
887 			*errnop = ERANGE;
888 			rv = NS_RETURN;
889 			break;
890 		}
891 		memcpy(buffer, line, linesize);
892 		buffer[linesize] = '\0';
893 		rv = __gr_parse_entry(buffer, linesize, grp,
894 		    &buffer[linesize + 1], bufsize - linesize - 1, errnop);
895 		if (rv & NS_TERMINATE)
896 			break;
897 		pos = ftello(st->fp);
898 	}
899 	if (st->fp != NULL && !stayopen) {
900 		fclose(st->fp);
901 		st->fp = NULL;
902 	}
903 	if (rv == NS_SUCCESS && retval != NULL)
904 		*(struct group **)retval = grp;
905 	else if (rv == NS_RETURN && *errnop == ERANGE && st->fp != NULL)
906 		fseeko(st->fp, pos, SEEK_SET);
907 	return (rv);
908 }
909 
910 
911 #ifdef HESIOD
912 /*
913  * dns backend
914  */
915 static void
916 dns_endstate(void *p)
917 {
918 
919 	free(p);
920 }
921 
922 
923 static int
924 dns_setgrent(void *retval, void *cb_data, va_list ap)
925 {
926 	struct dns_state	*st;
927 	int			 rv;
928 
929 	rv = dns_getstate(&st);
930 	if (rv != 0)
931 		return (NS_UNAVAIL);
932 	st->counter = 0;
933 	return (NS_UNAVAIL);
934 }
935 
936 
937 static int
938 dns_group(void *retval, void *mdata, va_list ap)
939 {
940 	char			 buf[HESIOD_NAME_MAX];
941 	struct dns_state	*st;
942 	struct group		*grp;
943 	const char		*name, *label;
944 	void			*ctx;
945 	char			*buffer, **hes;
946 	size_t			 bufsize, adjsize, linesize;
947 	gid_t			 gid;
948 	enum nss_lookup_type	 how;
949 	int			 rv, *errnop;
950 
951 	ctx = NULL;
952 	hes = NULL;
953 	name = NULL;
954 	gid = (gid_t)-1;
955 	how = (enum nss_lookup_type)mdata;
956 	switch (how) {
957 	case nss_lt_name:
958 		name = va_arg(ap, const char *);
959 		break;
960 	case nss_lt_id:
961 		gid = va_arg(ap, gid_t);
962 		break;
963 	case nss_lt_all:
964 		break;
965 	}
966 	grp     = va_arg(ap, struct group *);
967 	buffer  = va_arg(ap, char *);
968 	bufsize = va_arg(ap, size_t);
969 	errnop  = va_arg(ap, int *);
970 	*errnop = dns_getstate(&st);
971 	if (*errnop != 0)
972 		return (NS_UNAVAIL);
973 	if (hesiod_init(&ctx) != 0) {
974 		*errnop = errno;
975 		rv = NS_UNAVAIL;
976 		goto fin;
977 	}
978 	do {
979 		rv = NS_NOTFOUND;
980 		switch (how) {
981 		case nss_lt_name:
982 			label = name;
983 			break;
984 		case nss_lt_id:
985 			if (snprintf(buf, sizeof(buf), "%lu",
986 			    (unsigned long)gid) >= sizeof(buf))
987 				goto fin;
988 			label = buf;
989 			break;
990 		case nss_lt_all:
991 			if (st->counter < 0)
992 				goto fin;
993 			if (snprintf(buf, sizeof(buf), "group-%ld",
994 			    st->counter++) >= sizeof(buf))
995 				goto fin;
996 			label = buf;
997 			break;
998 		}
999 		hes = hesiod_resolve(ctx, label,
1000 		    how == nss_lt_id ? "gid" : "group");
1001 		if ((how == nss_lt_id && hes == NULL &&
1002 		    (hes = hesiod_resolve(ctx, buf, "group")) == NULL) ||
1003 		    hes == NULL) {
1004 			if (how == nss_lt_all)
1005 				st->counter = -1;
1006 			if (errno != ENOENT)
1007 				*errnop = errno;
1008 			goto fin;
1009 		}
1010 		rv = __gr_match_entry(hes[0], strlen(hes[0]), how, name, gid);
1011 		if (rv != NS_SUCCESS) {
1012 			hesiod_free_list(ctx, hes);
1013 			hes = NULL;
1014 			continue;
1015 		}
1016 		/* We need room at least for the line, a string NUL
1017 		 * terminator, alignment padding, and one (char *)
1018 		 * pointer for the member list terminator.
1019 		 */
1020 		adjsize = bufsize - _ALIGNBYTES - sizeof(char *);
1021 		linesize = strlcpy(buffer, hes[0], adjsize);
1022 		if (linesize >= adjsize) {
1023 			*errnop = ERANGE;
1024 			rv = NS_RETURN;
1025 			goto fin;
1026 		}
1027 		hesiod_free_list(ctx, hes);
1028 		hes = NULL;
1029 		rv = __gr_parse_entry(buffer, linesize, grp,
1030 		    &buffer[linesize + 1], bufsize - linesize - 1, errnop);
1031 	} while (how == nss_lt_all && !(rv & NS_TERMINATE));
1032 fin:
1033 	if (hes != NULL)
1034 		hesiod_free_list(ctx, hes);
1035 	if (ctx != NULL)
1036 		hesiod_end(ctx);
1037 	if (rv == NS_SUCCESS && retval != NULL)
1038 		*(struct group **)retval = grp;
1039 	return (rv);
1040 }
1041 #endif /* HESIOD */
1042 
1043 
1044 #ifdef YP
1045 /*
1046  * nis backend
1047  */
1048 static void
1049 nis_endstate(void *p)
1050 {
1051 
1052 	if (p == NULL)
1053 		return;
1054 	free(((struct nis_state *)p)->key);
1055 	free(p);
1056 }
1057 
1058 
1059 static int
1060 nis_setgrent(void *retval, void *cb_data, va_list ap)
1061 {
1062 	struct nis_state	*st;
1063 	int			 rv;
1064 
1065 	rv = nis_getstate(&st);
1066 	if (rv != 0)
1067 		return (NS_UNAVAIL);
1068 	st->done = 0;
1069 	free(st->key);
1070 	st->key = NULL;
1071 	return (NS_UNAVAIL);
1072 }
1073 
1074 
1075 static int
1076 nis_group(void *retval, void *mdata, va_list ap)
1077 {
1078 	char		 *map;
1079 	struct nis_state *st;
1080 	struct group	*grp;
1081 	const char	*name;
1082 	char		*buffer, *key, *result;
1083 	size_t		 bufsize;
1084 	gid_t		 gid;
1085 	enum nss_lookup_type how;
1086 	int		*errnop, keylen, resultlen, rv;
1087 
1088 	name = NULL;
1089 	gid = (gid_t)-1;
1090 	how = (enum nss_lookup_type)mdata;
1091 	switch (how) {
1092 	case nss_lt_name:
1093 		name = va_arg(ap, const char *);
1094 		map = "group.byname";
1095 		break;
1096 	case nss_lt_id:
1097 		gid = va_arg(ap, gid_t);
1098 		map = "group.bygid";
1099 		break;
1100 	case nss_lt_all:
1101 		map = "group.byname";
1102 		break;
1103 	}
1104 	grp     = va_arg(ap, struct group *);
1105 	buffer  = va_arg(ap, char *);
1106 	bufsize = va_arg(ap, size_t);
1107 	errnop  = va_arg(ap, int *);
1108 	*errnop = nis_getstate(&st);
1109 	if (*errnop != 0)
1110 		return (NS_UNAVAIL);
1111 	if (st->domain[0] == '\0') {
1112 		if (getdomainname(st->domain, sizeof(st->domain)) != 0) {
1113 			*errnop = errno;
1114 			return (NS_UNAVAIL);
1115 		}
1116 	}
1117 	result = NULL;
1118 	do {
1119 		rv = NS_NOTFOUND;
1120 		switch (how) {
1121 		case nss_lt_name:
1122 			if (strlcpy(buffer, name, bufsize) >= bufsize)
1123 				goto erange;
1124 			break;
1125 		case nss_lt_id:
1126 			if (snprintf(buffer, bufsize, "%lu",
1127 			    (unsigned long)gid) >= bufsize)
1128 				goto erange;
1129 			break;
1130 		case nss_lt_all:
1131 			if (st->done)
1132 				goto fin;
1133 			break;
1134 		}
1135 		result = NULL;
1136 		if (how == nss_lt_all) {
1137 			if (st->key == NULL)
1138 				rv = yp_first(st->domain, map, &st->key,
1139 				    &st->keylen, &result, &resultlen);
1140 			else {
1141 				key = st->key;
1142 				keylen = st->keylen;
1143 				st->key = NULL;
1144 				rv = yp_next(st->domain, map, key, keylen,
1145 				    &st->key, &st->keylen, &result,
1146 				    &resultlen);
1147 				free(key);
1148 			}
1149 			if (rv != 0) {
1150 				free(result);
1151 				free(st->key);
1152 				st->key = NULL;
1153 				if (rv == YPERR_NOMORE) {
1154 					st->done = 1;
1155 					rv = NS_NOTFOUND;
1156 				} else
1157 					rv = NS_UNAVAIL;
1158 				goto fin;
1159 			}
1160 		} else {
1161 			rv = yp_match(st->domain, map, buffer, strlen(buffer),
1162 			    &result, &resultlen);
1163 			if (rv == YPERR_KEY) {
1164 				rv = NS_NOTFOUND;
1165 				continue;
1166 			} else if (rv != 0) {
1167 				free(result);
1168 				rv = NS_UNAVAIL;
1169 				continue;
1170 			}
1171 		}
1172 		/* We need room at least for the line, a string NUL
1173 		 * terminator, alignment padding, and one (char *)
1174 		 * pointer for the member list terminator.
1175 		 */
1176 		if (resultlen >= bufsize - _ALIGNBYTES - sizeof(char *)) {
1177 			free(result);
1178 			goto erange;
1179 		}
1180 		memcpy(buffer, result, resultlen);
1181 		buffer[resultlen] = '\0';
1182 		free(result);
1183 		rv = __gr_match_entry(buffer, resultlen, how, name, gid);
1184 		if (rv == NS_SUCCESS)
1185 			rv = __gr_parse_entry(buffer, resultlen, grp,
1186 			    &buffer[resultlen+1], bufsize - resultlen - 1,
1187 			    errnop);
1188 	} while (how == nss_lt_all && !(rv & NS_TERMINATE));
1189 fin:
1190 	if (rv == NS_SUCCESS && retval != NULL)
1191 		*(struct group **)retval = grp;
1192 	return (rv);
1193 erange:
1194 	*errnop = ERANGE;
1195 	return (NS_RETURN);
1196 }
1197 #endif /* YP */
1198 
1199 
1200 
1201 /*
1202  * compat backend
1203  */
1204 static void
1205 compat_endstate(void *p)
1206 {
1207 	struct compat_state *st;
1208 
1209 	if (p == NULL)
1210 		return;
1211 	st = (struct compat_state *)p;
1212 	free(st->name);
1213 	if (st->fp != NULL)
1214 		fclose(st->fp);
1215 	free(p);
1216 }
1217 
1218 
1219 static int
1220 compat_setgrent(void *retval, void *mdata, va_list ap)
1221 {
1222 	static const ns_src compatsrc[] = {
1223 #ifdef YP
1224 		{ NSSRC_NIS, NS_SUCCESS },
1225 #endif
1226 		{ NULL, 0 }
1227 	};
1228 	ns_dtab dtab[] = {
1229 #ifdef HESIOD
1230 		{ NSSRC_DNS, dns_setgrent, NULL },
1231 #endif
1232 #ifdef YP
1233 		{ NSSRC_NIS, nis_setgrent, NULL },
1234 #endif
1235 		{ NULL, NULL, NULL }
1236 	};
1237 	struct compat_state *st;
1238 	int		 rv, stayopen;
1239 
1240 #define set_setent(x, y) do {	 				\
1241 	int i;							\
1242 	for (i = 0; i < (int)(nitems(x) - 1); i++)		\
1243 		x[i].mdata = (void *)y;				\
1244 } while (0)
1245 
1246 	rv = compat_getstate(&st);
1247 	if (rv != 0)
1248 		return (NS_UNAVAIL);
1249 	switch ((enum constants)mdata) {
1250 	case SETGRENT:
1251 		stayopen = va_arg(ap, int);
1252 		if (st->fp != NULL)
1253 			rewind(st->fp);
1254 		else if (stayopen)
1255 			st->fp = fopen(_PATH_GROUP, "re");
1256 		set_setent(dtab, mdata);
1257 		(void)_nsdispatch(NULL, dtab, NSDB_GROUP_COMPAT, "setgrent",
1258 		    compatsrc, 0);
1259 		break;
1260 	case ENDGRENT:
1261 		if (st->fp != NULL) {
1262 			fclose(st->fp);
1263 			st->fp = NULL;
1264 		}
1265 		set_setent(dtab, mdata);
1266 		(void)_nsdispatch(NULL, dtab, NSDB_GROUP_COMPAT, "endgrent",
1267 		    compatsrc, 0);
1268 		break;
1269 	default:
1270 		break;
1271 	}
1272 	st->compat = COMPAT_MODE_OFF;
1273 	free(st->name);
1274 	st->name = NULL;
1275 	return (NS_UNAVAIL);
1276 #undef set_setent
1277 }
1278 
1279 
1280 static int
1281 compat_group(void *retval, void *mdata, va_list ap)
1282 {
1283 	static const ns_src compatsrc[] = {
1284 #ifdef YP
1285 		{ NSSRC_NIS, NS_SUCCESS },
1286 #endif
1287 		{ NULL, 0 }
1288 	};
1289 	ns_dtab dtab[] = {
1290 #ifdef YP
1291 		{ NSSRC_NIS, nis_group, NULL },
1292 #endif
1293 #ifdef HESIOD
1294 		{ NSSRC_DNS, dns_group, NULL },
1295 #endif
1296 		{ NULL, NULL, NULL }
1297 	};
1298 	struct compat_state	*st;
1299 	enum nss_lookup_type	 how;
1300 	const char		*name, *line;
1301 	struct group		*grp;
1302 	gid_t			 gid;
1303 	char			*buffer, *p;
1304 	void			*discard;
1305 	size_t			 bufsize, linesize;
1306 	off_t			 pos;
1307 	int			 rv, stayopen, *errnop;
1308 
1309 #define set_lookup_type(x, y) do { 				\
1310 	int i;							\
1311 	for (i = 0; i < (int)(nitems(x) - 1); i++)		\
1312 		x[i].mdata = (void *)y;				\
1313 } while (0)
1314 
1315 	name = NULL;
1316 	gid = (gid_t)-1;
1317 	how = (enum nss_lookup_type)mdata;
1318 	switch (how) {
1319 	case nss_lt_name:
1320 		name = va_arg(ap, const char *);
1321 		break;
1322 	case nss_lt_id:
1323 		gid = va_arg(ap, gid_t);
1324 		break;
1325 	case nss_lt_all:
1326 		break;
1327 	default:
1328 		return (NS_NOTFOUND);
1329 	}
1330 	grp = va_arg(ap, struct group *);
1331 	buffer = va_arg(ap, char *);
1332 	bufsize = va_arg(ap, size_t);
1333 	errnop = va_arg(ap, int *);
1334 	*errnop = compat_getstate(&st);
1335 	if (*errnop != 0)
1336 		return (NS_UNAVAIL);
1337 	if (st->fp == NULL &&
1338 	    ((st->fp = fopen(_PATH_GROUP, "re")) == NULL)) {
1339 		*errnop = errno;
1340 		rv = NS_UNAVAIL;
1341 		goto fin;
1342 	}
1343 	if (how == nss_lt_all)
1344 		stayopen = 1;
1345 	else {
1346 		rewind(st->fp);
1347 		stayopen = st->stayopen;
1348 	}
1349 docompat:
1350 	switch (st->compat) {
1351 	case COMPAT_MODE_ALL:
1352 		set_lookup_type(dtab, how);
1353 		switch (how) {
1354 		case nss_lt_all:
1355 			rv = _nsdispatch(&discard, dtab, NSDB_GROUP_COMPAT,
1356 			    "getgrent_r", compatsrc, grp, buffer, bufsize,
1357 			    errnop);
1358 			break;
1359 		case nss_lt_id:
1360 			rv = _nsdispatch(&discard, dtab, NSDB_GROUP_COMPAT,
1361 			    "getgrgid_r", compatsrc, gid, grp, buffer, bufsize,
1362 			    errnop);
1363 			break;
1364 		case nss_lt_name:
1365 			rv = _nsdispatch(&discard, dtab, NSDB_GROUP_COMPAT,
1366 			    "getgrnam_r", compatsrc, name, grp, buffer,
1367 			    bufsize, errnop);
1368 			break;
1369 		}
1370 		if (rv & NS_TERMINATE)
1371 			goto fin;
1372 		st->compat = COMPAT_MODE_OFF;
1373 		break;
1374 	case COMPAT_MODE_NAME:
1375 		set_lookup_type(dtab, nss_lt_name);
1376 		rv = _nsdispatch(&discard, dtab, NSDB_GROUP_COMPAT,
1377 		    "getgrnam_r", compatsrc, st->name, grp, buffer, bufsize,
1378 		    errnop);
1379 		switch (rv) {
1380 		case NS_SUCCESS:
1381 			switch (how) {
1382 			case nss_lt_name:
1383 				if (strcmp(name, grp->gr_name) != 0)
1384 					rv = NS_NOTFOUND;
1385 				break;
1386 			case nss_lt_id:
1387 				if (gid != grp->gr_gid)
1388 					rv = NS_NOTFOUND;
1389 				break;
1390 			default:
1391 				break;
1392 			}
1393 			break;
1394 		case NS_RETURN:
1395 			goto fin;
1396 		default:
1397 			break;
1398 		}
1399 		free(st->name);
1400 		st->name = NULL;
1401 		st->compat = COMPAT_MODE_OFF;
1402 		if (rv == NS_SUCCESS)
1403 			goto fin;
1404 		break;
1405 	default:
1406 		break;
1407 	}
1408 	rv = NS_NOTFOUND;
1409 	pos = ftello(st->fp);
1410 	while ((line = fgetln(st->fp, &linesize)) != NULL) {
1411 		if (line[linesize-1] == '\n')
1412 			linesize--;
1413 		if (linesize > 2 && line[0] == '+') {
1414 			p = memchr(&line[1], ':', linesize);
1415 			if (p == NULL || p == &line[1])
1416 				st->compat = COMPAT_MODE_ALL;
1417 			else {
1418 				st->name = malloc(p - line);
1419 				if (st->name == NULL) {
1420 					syslog(LOG_ERR,
1421 					 "getgrent memory allocation failure");
1422 					*errnop = ENOMEM;
1423 					rv = NS_UNAVAIL;
1424 					break;
1425 				}
1426 				memcpy(st->name, &line[1], p - line - 1);
1427 				st->name[p - line - 1] = '\0';
1428 				st->compat = COMPAT_MODE_NAME;
1429 			}
1430 			goto docompat;
1431 		}
1432 		rv = __gr_match_entry(line, linesize, how, name, gid);
1433 		if (rv != NS_SUCCESS)
1434 			continue;
1435 		/* We need room at least for the line, a string NUL
1436 		 * terminator, alignment padding, and one (char *)
1437 		 * pointer for the member list terminator.
1438 		 */
1439 		if (bufsize <= linesize + _ALIGNBYTES + sizeof(char *)) {
1440 			*errnop = ERANGE;
1441 			rv = NS_RETURN;
1442 			break;
1443 		}
1444 		memcpy(buffer, line, linesize);
1445 		buffer[linesize] = '\0';
1446 		rv = __gr_parse_entry(buffer, linesize, grp,
1447 		    &buffer[linesize + 1], bufsize - linesize - 1, errnop);
1448 		if (rv & NS_TERMINATE)
1449 			break;
1450 		pos = ftello(st->fp);
1451 	}
1452 fin:
1453 	if (st->fp != NULL && !stayopen) {
1454 		fclose(st->fp);
1455 		st->fp = NULL;
1456 	}
1457 	if (rv == NS_SUCCESS && retval != NULL)
1458 		*(struct group **)retval = grp;
1459 	else if (rv == NS_RETURN && *errnop == ERANGE && st->fp != NULL)
1460 		fseeko(st->fp, pos, SEEK_SET);
1461 	return (rv);
1462 #undef set_lookup_type
1463 }
1464 
1465 
1466 /*
1467  * common group line matching and parsing
1468  */
1469 int
1470 __gr_match_entry(const char *line, size_t linesize, enum nss_lookup_type how,
1471     const char *name, gid_t gid)
1472 {
1473 	size_t		 namesize;
1474 	const char	*p, *eol;
1475 	char		*q;
1476 	unsigned long	 n;
1477 	int		 i, needed;
1478 
1479 	if (linesize == 0 || is_comment_line(line, linesize))
1480 		return (NS_NOTFOUND);
1481 	switch (how) {
1482 	case nss_lt_name:	needed = 1; break;
1483 	case nss_lt_id:		needed = 2; break;
1484 	default:		needed = 2; break;
1485 	}
1486 	eol = &line[linesize];
1487 	for (p = line, i = 0; i < needed && p < eol; p++)
1488 		if (*p == ':')
1489 			i++;
1490 	if (i < needed)
1491 		return (NS_NOTFOUND);
1492 	switch (how) {
1493 	case nss_lt_name:
1494 		namesize = strlen(name);
1495 		if (namesize + 1 == (size_t)(p - line) &&
1496 		    memcmp(line, name, namesize) == 0)
1497 			return (NS_SUCCESS);
1498 		break;
1499 	case nss_lt_id:
1500 		n = strtoul(p, &q, 10);
1501 		if (q < eol && *q == ':' && gid == (gid_t)n)
1502 			return (NS_SUCCESS);
1503 		break;
1504 	case nss_lt_all:
1505 		return (NS_SUCCESS);
1506 	default:
1507 		break;
1508 	}
1509 	return (NS_NOTFOUND);
1510 }
1511 
1512 
1513 int
1514 __gr_parse_entry(char *line, size_t linesize, struct group *grp, char *membuf,
1515     size_t membufsize, int *errnop)
1516 {
1517 	char	       *s_gid, *s_mem, *p, **members;
1518 	unsigned long	n;
1519 	int		maxmembers;
1520 
1521 	memset(grp, 0, sizeof(*grp));
1522 	members = (char **)_ALIGN(membuf);
1523 	membufsize -= (char *)members - membuf;
1524 	maxmembers = membufsize / sizeof(*members);
1525 	if (maxmembers <= 0 ||
1526 	    (grp->gr_name = strsep(&line, ":")) == NULL ||
1527 	    grp->gr_name[0] == '\0' ||
1528 	    (grp->gr_passwd = strsep(&line, ":")) == NULL ||
1529 	    (s_gid = strsep(&line, ":")) == NULL ||
1530 	    s_gid[0] == '\0')
1531 		return (NS_NOTFOUND);
1532 	s_mem = line;
1533 	n = strtoul(s_gid, &s_gid, 10);
1534 	if (s_gid[0] != '\0')
1535 		return (NS_NOTFOUND);
1536 	grp->gr_gid = (gid_t)n;
1537 	grp->gr_mem = members;
1538 	while (maxmembers > 1 && s_mem != NULL) {
1539 		p = strsep(&s_mem, ",");
1540 		if (p != NULL && *p != '\0') {
1541 			*members++ = p;
1542 			maxmembers--;
1543 		}
1544 	}
1545 	*members = NULL;
1546 	if (s_mem == NULL)
1547 		return (NS_SUCCESS);
1548 	else {
1549 		*errnop = ERANGE;
1550 		return (NS_RETURN);
1551 	}
1552 }
1553 
1554 
1555