1ea022d16SRodney W. Grimes /* 2ea022d16SRodney W. Grimes * Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994 3ea022d16SRodney W. Grimes * The Regents of the University of California. All rights reserved. 4ea022d16SRodney W. Grimes * 5ea022d16SRodney W. Grimes * Redistribution and use in source and binary forms, with or without 6ea022d16SRodney W. Grimes * modification, are permitted provided that the following conditions 7ea022d16SRodney W. Grimes * are met: 8ea022d16SRodney W. Grimes * 1. Redistributions of source code must retain the above copyright 9ea022d16SRodney W. Grimes * notice, this list of conditions and the following disclaimer. 10ea022d16SRodney W. Grimes * 2. Redistributions in binary form must reproduce the above copyright 11ea022d16SRodney W. Grimes * notice, this list of conditions and the following disclaimer in the 12ea022d16SRodney W. Grimes * documentation and/or other materials provided with the distribution. 13ea022d16SRodney W. Grimes * 3. All advertising materials mentioning features or use of this software 14ea022d16SRodney W. Grimes * must display the following acknowledgement: 15ea022d16SRodney W. Grimes * This product includes software developed by the University of 16ea022d16SRodney W. Grimes * California, Berkeley and its contributors. 17ea022d16SRodney W. Grimes * 4. Neither the name of the University nor the names of its contributors 18ea022d16SRodney W. Grimes * may be used to endorse or promote products derived from this software 19ea022d16SRodney W. Grimes * without specific prior written permission. 20ea022d16SRodney W. Grimes * 21ea022d16SRodney W. Grimes * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 22ea022d16SRodney W. Grimes * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23ea022d16SRodney W. Grimes * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24ea022d16SRodney W. Grimes * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 25ea022d16SRodney W. Grimes * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26ea022d16SRodney W. Grimes * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27ea022d16SRodney W. Grimes * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28ea022d16SRodney W. Grimes * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29ea022d16SRodney W. Grimes * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30ea022d16SRodney W. Grimes * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31ea022d16SRodney W. Grimes * SUCH DAMAGE. 32ea022d16SRodney W. Grimes */ 33ea022d16SRodney W. Grimes 349aca17cbSMark Murray #if 0 35ea022d16SRodney W. Grimes #ifndef lint 36ea022d16SRodney W. Grimes static char copyright[] = 37ea022d16SRodney W. Grimes "@(#) Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994\n\ 38ea022d16SRodney W. Grimes The Regents of the University of California. All rights reserved.\n"; 39ea022d16SRodney W. Grimes #endif /* not lint */ 409aca17cbSMark Murray #endif 41ea022d16SRodney W. Grimes 42ea022d16SRodney W. Grimes #ifndef lint 43e02897faSPhilippe Charnier #if 0 44ea022d16SRodney W. Grimes static char sccsid[] = "@(#)ftpd.c 8.4 (Berkeley) 4/16/94"; 459aca17cbSMark Murray #endif 46e02897faSPhilippe Charnier static const char rcsid[] = 477f3dea24SPeter Wemm "$FreeBSD$"; 48e02897faSPhilippe Charnier #endif /* not lint */ 49ea022d16SRodney W. Grimes 50ea022d16SRodney W. Grimes /* 51ea022d16SRodney W. Grimes * FTP server. 52ea022d16SRodney W. Grimes */ 53ea022d16SRodney W. Grimes #include <sys/param.h> 54ea022d16SRodney W. Grimes #include <sys/ioctl.h> 559fc5823aSGarrett Wollman #include <sys/mman.h> 56eb2fc780SGarrett Wollman #include <sys/socket.h> 57eb2fc780SGarrett Wollman #include <sys/stat.h> 58eb2fc780SGarrett Wollman #include <sys/time.h> 59eb2fc780SGarrett Wollman #include <sys/wait.h> 60ea022d16SRodney W. Grimes 61ea022d16SRodney W. Grimes #include <netinet/in.h> 62ea022d16SRodney W. Grimes #include <netinet/in_systm.h> 63ea022d16SRodney W. Grimes #include <netinet/ip.h> 649fc5823aSGarrett Wollman #include <netinet/tcp.h> 65ea022d16SRodney W. Grimes 66ea022d16SRodney W. Grimes #define FTP_NAMES 67ea022d16SRodney W. Grimes #include <arpa/ftp.h> 68ea022d16SRodney W. Grimes #include <arpa/inet.h> 69ea022d16SRodney W. Grimes #include <arpa/telnet.h> 70ea022d16SRodney W. Grimes 71ea022d16SRodney W. Grimes #include <ctype.h> 72ea022d16SRodney W. Grimes #include <dirent.h> 73ea022d16SRodney W. Grimes #include <err.h> 74ea022d16SRodney W. Grimes #include <errno.h> 75ea022d16SRodney W. Grimes #include <fcntl.h> 76ea022d16SRodney W. Grimes #include <glob.h> 77ea022d16SRodney W. Grimes #include <limits.h> 78ea022d16SRodney W. Grimes #include <netdb.h> 79ea022d16SRodney W. Grimes #include <pwd.h> 8031fea7b8SDavid Nugent #include <grp.h> 8147499ecdSAndrey A. Chernov #include <opie.h> 82ea022d16SRodney W. Grimes #include <signal.h> 83ea022d16SRodney W. Grimes #include <stdio.h> 84ea022d16SRodney W. Grimes #include <stdlib.h> 85ea022d16SRodney W. Grimes #include <string.h> 86ea022d16SRodney W. Grimes #include <syslog.h> 87ea022d16SRodney W. Grimes #include <time.h> 88ea022d16SRodney W. Grimes #include <unistd.h> 89b63e1fe2SPeter Wemm #include <libutil.h> 90b071c689SDavid Nugent #ifdef LOGIN_CAP 91b071c689SDavid Nugent #include <login_cap.h> 92b071c689SDavid Nugent #endif 93ea022d16SRodney W. Grimes 945bc9d93dSMark Murray #ifdef USE_PAM 956c9134c0SMark Murray #include <security/pam_appl.h> 966c9134c0SMark Murray #endif 976c9134c0SMark Murray 98ea022d16SRodney W. Grimes #include "pathnames.h" 99ea022d16SRodney W. Grimes #include "extern.h" 100ea022d16SRodney W. Grimes 101ea022d16SRodney W. Grimes #include <stdarg.h> 102ea022d16SRodney W. Grimes 103af85d782SDavid Nugent static char version[] = "Version 6.00LS"; 104af85d782SDavid Nugent #undef main 105ea022d16SRodney W. Grimes 106ea022d16SRodney W. Grimes extern off_t restart_point; 107ea022d16SRodney W. Grimes extern char cbuf[]; 108ea022d16SRodney W. Grimes 1094dd8b5abSYoshinobu Inoue union sockunion ctrl_addr; 1104dd8b5abSYoshinobu Inoue union sockunion data_source; 1114dd8b5abSYoshinobu Inoue union sockunion data_dest; 1124dd8b5abSYoshinobu Inoue union sockunion his_addr; 1134dd8b5abSYoshinobu Inoue union sockunion pasv_addr; 114ea022d16SRodney W. Grimes 115cf09a206SDavid Greenman int daemon_mode; 116ea022d16SRodney W. Grimes int data; 11763591ba5SYaroslav Tykhiy int dataport; 118c152df28SYaroslav Tykhiy int hostinfo = 1; /* print host-specific info in messages */ 119ea022d16SRodney W. Grimes int logged_in; 120ea022d16SRodney W. Grimes struct passwd *pw; 121ce9287fcSYaroslav Tykhiy char *homedir; 122618b0bbaSMark Murray int ftpdebug; 123ea022d16SRodney W. Grimes int timeout = 900; /* timeout after 15 minutes of inactivity */ 124ea022d16SRodney W. Grimes int maxtimeout = 7200;/* don't allow idle time to be set beyond 2 hours */ 125ea022d16SRodney W. Grimes int logging; 1264c450ad7SPaul Traina int restricted_data_ports = 1; 127a5a4544eSPaul Traina int paranoid = 1; /* be extra careful about security */ 1285a392aecSTorsten Blum int anon_only = 0; /* Only anonymous ftp allowed */ 129ea022d16SRodney W. Grimes int guest; 130a5a4544eSPaul Traina int dochroot; 1315d7e0128SYaroslav Tykhiy int dowtmp = 1; 1323eb568f2SGuido van Rooij int stats; 1333eb568f2SGuido van Rooij int statfd = -1; 134ea022d16SRodney W. Grimes int type; 135ea022d16SRodney W. Grimes int form; 136ea022d16SRodney W. Grimes int stru; /* avoid C keyword */ 137ea022d16SRodney W. Grimes int mode; 138ea022d16SRodney W. Grimes int usedefault = 1; /* for data transfers */ 139ea022d16SRodney W. Grimes int pdata = -1; /* for passive mode */ 140a4b77a2aSPoul-Henning Kamp int readonly=0; /* Server is in readonly mode. */ 141a4b77a2aSPoul-Henning Kamp int noepsv=0; /* EPSV command is disabled. */ 14262513e76SNik Clayton int noretr=0; /* RETR command is disabled. */ 1431cc9f0bbSSheldon Hearn int noguestretr=0; /* RETR command is disabled for anon users. */ 144d186bb12SMatthew N. Dodd int noguestmkd=0; /* MKD command is disabled for anon users. */ 145a117c345SYaroslav Tykhiy int noguestmod=1; /* anon users may not modify existing files. */ 14662513e76SNik Clayton 1474b82fc95SYaroslav Tykhiy static volatile sig_atomic_t recvurg; 148ea022d16SRodney W. Grimes sig_atomic_t transflag; 149ea022d16SRodney W. Grimes off_t file_size; 150ea022d16SRodney W. Grimes off_t byte_count; 151ea022d16SRodney W. Grimes #if !defined(CMASK) || CMASK == 0 152ea022d16SRodney W. Grimes #undef CMASK 153ea022d16SRodney W. Grimes #define CMASK 027 154ea022d16SRodney W. Grimes #endif 155ea022d16SRodney W. Grimes int defumask = CMASK; /* default umask value */ 156ea022d16SRodney W. Grimes char tmpline[7]; 157ea4e54b9SDavid Nugent char *hostname; 158ad442344SDima Dorfman int epsvall = 0; 159ad442344SDima Dorfman 1600512556aSDavid Nugent #ifdef VIRTUAL_HOSTING 161ea4e54b9SDavid Nugent char *ftpuser; 162ea4e54b9SDavid Nugent 163ea4e54b9SDavid Nugent static struct ftphost { 164ea4e54b9SDavid Nugent struct ftphost *next; 165f38c6cadSYoshinobu Inoue struct addrinfo *hostinfo; 166ea4e54b9SDavid Nugent char *hostname; 167ea4e54b9SDavid Nugent char *anonuser; 168ea4e54b9SDavid Nugent char *statfile; 169ea4e54b9SDavid Nugent char *welcome; 170ea4e54b9SDavid Nugent char *loginmsg; 171ea4e54b9SDavid Nugent } *thishost, *firsthost; 172ea4e54b9SDavid Nugent 173ea4e54b9SDavid Nugent #endif 1749e9a43bdSBrian Somers char remotehost[MAXHOSTNAMELEN]; 1753eb568f2SGuido van Rooij char *ident = NULL; 176a5a4544eSPaul Traina 177a5a4544eSPaul Traina static char ttyline[20]; 178a5a4544eSPaul Traina char *tty = ttyline; /* for klogin */ 179a5a4544eSPaul Traina 1805bc9d93dSMark Murray #ifdef USE_PAM 181e4bc453cSWarner Losh static int auth_pam(struct passwd**, const char*); 1825bc9d93dSMark Murray pam_handle_t *pamh = NULL; 18347499ecdSAndrey A. Chernov #endif 184fa1746c9SMark Murray 185fa1746c9SMark Murray static struct opie opiedata; 186fa1746c9SMark Murray static char opieprompt[OPIE_CHALLENGE_MAX+1]; 18747499ecdSAndrey A. Chernov static int pwok; 1889aca17cbSMark Murray 189105a3c98SJulian Elischer char *pid_file = NULL; 190105a3c98SJulian Elischer 191ea022d16SRodney W. Grimes /* 1926d10cb2fSJonathan Lemon * Limit number of pathnames that glob can return. 1936d10cb2fSJonathan Lemon * A limit of 0 indicates the number of pathnames is unlimited. 1946d10cb2fSJonathan Lemon */ 1956d10cb2fSJonathan Lemon #define MAXGLOBARGS 16384 1966d10cb2fSJonathan Lemon # 1976d10cb2fSJonathan Lemon 1986d10cb2fSJonathan Lemon /* 199ea022d16SRodney W. Grimes * Timeout intervals for retrying connections 200ea022d16SRodney W. Grimes * to hosts that don't accept PORT cmds. This 201ea022d16SRodney W. Grimes * is a kludge, but given the problems with TCP... 202ea022d16SRodney W. Grimes */ 203ea022d16SRodney W. Grimes #define SWAITMAX 90 /* wait at most 90 seconds */ 204ea022d16SRodney W. Grimes #define SWAITINT 5 /* interval between retries */ 205ea022d16SRodney W. Grimes 206ea022d16SRodney W. Grimes int swaitmax = SWAITMAX; 207ea022d16SRodney W. Grimes int swaitint = SWAITINT; 208ea022d16SRodney W. Grimes 209ea022d16SRodney W. Grimes #ifdef SETPROCTITLE 210b63e1fe2SPeter Wemm #ifdef OLD_SETPROCTITLE 211ea022d16SRodney W. Grimes char **Argv = NULL; /* pointer to argument vector */ 212ea022d16SRodney W. Grimes char *LastArgv = NULL; /* end of argv */ 213b63e1fe2SPeter Wemm #endif /* OLD_SETPROCTITLE */ 214ea022d16SRodney W. Grimes char proctitle[LINE_MAX]; /* initial part of title */ 215ea022d16SRodney W. Grimes #endif /* SETPROCTITLE */ 216ea022d16SRodney W. Grimes 217ea022d16SRodney W. Grimes #define LOGCMD(cmd, file) \ 218ea022d16SRodney W. Grimes if (logging > 1) \ 219ea022d16SRodney W. Grimes syslog(LOG_INFO,"%s %s%s", cmd, \ 220ea022d16SRodney W. Grimes *(file) == '/' ? "" : curdir(), file); 221ea022d16SRodney W. Grimes #define LOGCMD2(cmd, file1, file2) \ 222ea022d16SRodney W. Grimes if (logging > 1) \ 223ea022d16SRodney W. Grimes syslog(LOG_INFO,"%s %s%s %s%s", cmd, \ 224ea022d16SRodney W. Grimes *(file1) == '/' ? "" : curdir(), file1, \ 225ea022d16SRodney W. Grimes *(file2) == '/' ? "" : curdir(), file2); 226ea022d16SRodney W. Grimes #define LOGBYTES(cmd, file, cnt) \ 227ea022d16SRodney W. Grimes if (logging > 1) { \ 228ea022d16SRodney W. Grimes if (cnt == (off_t)-1) \ 229ea022d16SRodney W. Grimes syslog(LOG_INFO,"%s %s%s", cmd, \ 230ea022d16SRodney W. Grimes *(file) == '/' ? "" : curdir(), file); \ 231ea022d16SRodney W. Grimes else \ 232ea022d16SRodney W. Grimes syslog(LOG_INFO, "%s %s%s = %qd bytes", \ 233ea022d16SRodney W. Grimes cmd, (*(file) == '/') ? "" : curdir(), file, cnt); \ 234ea022d16SRodney W. Grimes } 235ea022d16SRodney W. Grimes 236ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 237e4bc453cSWarner Losh static void inithosts(void); 238e4bc453cSWarner Losh static void selecthost(union sockunion *); 239ea4e54b9SDavid Nugent #endif 240e4bc453cSWarner Losh static void ack(char *); 241e4bc453cSWarner Losh static void sigurg(int); 242e4bc453cSWarner Losh static void myoob(void); 2438657b576SYaroslav Tykhiy static int checkuser(char *, char *, int, char **); 244e4bc453cSWarner Losh static FILE *dataconn(char *, off_t, char *); 245e4bc453cSWarner Losh static void dolog(struct sockaddr *); 246e4bc453cSWarner Losh static char *curdir(void); 247e4bc453cSWarner Losh static void end_login(void); 248e4bc453cSWarner Losh static FILE *getdatasock(char *); 249a117c345SYaroslav Tykhiy static int guniquefd(char *, char **); 250e4bc453cSWarner Losh static void lostconn(int); 251e4bc453cSWarner Losh static void sigquit(int); 252e4bc453cSWarner Losh static int receive_data(FILE *, FILE *); 253e4bc453cSWarner Losh static int send_data(FILE *, FILE *, off_t, off_t, int); 254ea022d16SRodney W. Grimes static struct passwd * 255e4bc453cSWarner Losh sgetpwnam(char *); 256e4bc453cSWarner Losh static char *sgetsave(char *); 257e4bc453cSWarner Losh static void reapchild(int); 258e4bc453cSWarner Losh static void logxfer(char *, off_t, time_t); 259e4648f05SYaroslav Tykhiy static char *doublequote(char *); 260206fe568SHajimu UMEMOTO static int *socksetup(int, char *, const char *); 261ea022d16SRodney W. Grimes 262ea022d16SRodney W. Grimes static char * 263e4bc453cSWarner Losh curdir(void) 264ea022d16SRodney W. Grimes { 265ea022d16SRodney W. Grimes static char path[MAXPATHLEN+1+1]; /* path + '/' + '\0' */ 266ea022d16SRodney W. Grimes 267ea022d16SRodney W. Grimes if (getcwd(path, sizeof(path)-2) == NULL) 268ea022d16SRodney W. Grimes return (""); 269ea022d16SRodney W. Grimes if (path[1] != '\0') /* special case for root dir. */ 270ea022d16SRodney W. Grimes strcat(path, "/"); 271ea022d16SRodney W. Grimes /* For guest account, skip / since it's chrooted */ 272ea022d16SRodney W. Grimes return (guest ? path+1 : path); 273ea022d16SRodney W. Grimes } 274ea022d16SRodney W. Grimes 275ea022d16SRodney W. Grimes int 276e4bc453cSWarner Losh main(int argc, char *argv[], char **envp) 277ea022d16SRodney W. Grimes { 278ea022d16SRodney W. Grimes int addrlen, ch, on = 1, tos; 279ea022d16SRodney W. Grimes char *cp, line[LINE_MAX]; 280ea022d16SRodney W. Grimes FILE *fd; 2814dd8b5abSYoshinobu Inoue int error; 2824dd8b5abSYoshinobu Inoue char *bindname = NULL; 28363591ba5SYaroslav Tykhiy const char *bindport = "ftp"; 2844dd8b5abSYoshinobu Inoue int family = AF_UNSPEC; 2854b82fc95SYaroslav Tykhiy struct sigaction sa; 286ea022d16SRodney W. Grimes 28734d1ba5cSAndrey A. Chernov tzset(); /* in case no timezone database in ~ftp */ 2884b82fc95SYaroslav Tykhiy sigemptyset(&sa.sa_mask); 2894b82fc95SYaroslav Tykhiy sa.sa_flags = SA_RESTART; 29034d1ba5cSAndrey A. Chernov 291b63e1fe2SPeter Wemm #ifdef OLD_SETPROCTITLE 292ea022d16SRodney W. Grimes /* 293ea022d16SRodney W. Grimes * Save start and extent of argv for setproctitle. 294ea022d16SRodney W. Grimes */ 295ea022d16SRodney W. Grimes Argv = argv; 296ea022d16SRodney W. Grimes while (*envp) 297ea022d16SRodney W. Grimes envp++; 298ea022d16SRodney W. Grimes LastArgv = envp[-1] + strlen(envp[-1]); 299b63e1fe2SPeter Wemm #endif /* OLD_SETPROCTITLE */ 300ea022d16SRodney W. Grimes 3013eb568f2SGuido van Rooij 302c152df28SYaroslav Tykhiy while ((ch = getopt(argc, argv, 303c152df28SYaroslav Tykhiy "46a:AdDEhlmMoOp:P:rRSt:T:u:UvW")) != -1) { 304ea022d16SRodney W. Grimes switch (ch) { 3050e063efeSYaroslav Tykhiy case '4': 306206fe568SHajimu UMEMOTO family = (family == AF_INET6) ? AF_UNSPEC : AF_INET; 3070e063efeSYaroslav Tykhiy break; 3080e063efeSYaroslav Tykhiy 3090e063efeSYaroslav Tykhiy case '6': 310206fe568SHajimu UMEMOTO family = (family == AF_INET) ? AF_UNSPEC : AF_INET6; 3110e063efeSYaroslav Tykhiy break; 3120e063efeSYaroslav Tykhiy 3130e063efeSYaroslav Tykhiy case 'a': 3140e063efeSYaroslav Tykhiy bindname = optarg; 3150e063efeSYaroslav Tykhiy break; 3160e063efeSYaroslav Tykhiy 3170e063efeSYaroslav Tykhiy case 'A': 3180e063efeSYaroslav Tykhiy anon_only = 1; 319cf09a206SDavid Greenman break; 320cf09a206SDavid Greenman 321ea022d16SRodney W. Grimes case 'd': 322618b0bbaSMark Murray ftpdebug++; 323ea022d16SRodney W. Grimes break; 324ea022d16SRodney W. Grimes 3250e063efeSYaroslav Tykhiy case 'D': 3260e063efeSYaroslav Tykhiy daemon_mode++; 3270e063efeSYaroslav Tykhiy break; 3280e063efeSYaroslav Tykhiy 329a4b77a2aSPoul-Henning Kamp case 'E': 330a4b77a2aSPoul-Henning Kamp noepsv = 1; 331a4b77a2aSPoul-Henning Kamp break; 332a4b77a2aSPoul-Henning Kamp 333c152df28SYaroslav Tykhiy case 'h': 334c152df28SYaroslav Tykhiy hostinfo = 0; 335c152df28SYaroslav Tykhiy break; 336c152df28SYaroslav Tykhiy 337ea022d16SRodney W. Grimes case 'l': 338ea022d16SRodney W. Grimes logging++; /* > 1 == extra logging */ 339ea022d16SRodney W. Grimes break; 340ea022d16SRodney W. Grimes 341a117c345SYaroslav Tykhiy case 'm': 342a117c345SYaroslav Tykhiy noguestmod = 0; 343a117c345SYaroslav Tykhiy break; 344a117c345SYaroslav Tykhiy 3450e063efeSYaroslav Tykhiy case 'M': 3460e063efeSYaroslav Tykhiy noguestmkd = 1; 3470e063efeSYaroslav Tykhiy break; 3480e063efeSYaroslav Tykhiy 3490e063efeSYaroslav Tykhiy case 'o': 3500e063efeSYaroslav Tykhiy noretr = 1; 3510e063efeSYaroslav Tykhiy break; 3520e063efeSYaroslav Tykhiy 3530e063efeSYaroslav Tykhiy case 'O': 3540e063efeSYaroslav Tykhiy noguestretr = 1; 3550e063efeSYaroslav Tykhiy break; 3560e063efeSYaroslav Tykhiy 3570e063efeSYaroslav Tykhiy case 'p': 3580e063efeSYaroslav Tykhiy pid_file = optarg; 3590e063efeSYaroslav Tykhiy break; 3600e063efeSYaroslav Tykhiy 36163591ba5SYaroslav Tykhiy case 'P': 36263591ba5SYaroslav Tykhiy bindport = optarg; 36363591ba5SYaroslav Tykhiy break; 36463591ba5SYaroslav Tykhiy 365a4b77a2aSPoul-Henning Kamp case 'r': 366a4b77a2aSPoul-Henning Kamp readonly = 1; 367a4b77a2aSPoul-Henning Kamp break; 368a4b77a2aSPoul-Henning Kamp 369a5a4544eSPaul Traina case 'R': 370a5a4544eSPaul Traina paranoid = 0; 371a5a4544eSPaul Traina break; 372a5a4544eSPaul Traina 373a5a4544eSPaul Traina case 'S': 374a5a4544eSPaul Traina stats++; 375a5a4544eSPaul Traina break; 376a5a4544eSPaul Traina 377ea022d16SRodney W. Grimes case 't': 378ea022d16SRodney W. Grimes timeout = atoi(optarg); 379ea022d16SRodney W. Grimes if (maxtimeout < timeout) 380ea022d16SRodney W. Grimes maxtimeout = timeout; 381ea022d16SRodney W. Grimes break; 382a5a4544eSPaul Traina 3830e063efeSYaroslav Tykhiy case 'T': 3840e063efeSYaroslav Tykhiy maxtimeout = atoi(optarg); 3850e063efeSYaroslav Tykhiy if (timeout > maxtimeout) 3860e063efeSYaroslav Tykhiy timeout = maxtimeout; 387105a3c98SJulian Elischer break; 388105a3c98SJulian Elischer 389ea022d16SRodney W. Grimes case 'u': 390ea022d16SRodney W. Grimes { 391ea022d16SRodney W. Grimes long val = 0; 392ea022d16SRodney W. Grimes 393ea022d16SRodney W. Grimes val = strtol(optarg, &optarg, 8); 394ea022d16SRodney W. Grimes if (*optarg != '\0' || val < 0) 395ea022d16SRodney W. Grimes warnx("bad value for -u"); 396ea022d16SRodney W. Grimes else 397ea022d16SRodney W. Grimes defumask = val; 398ea022d16SRodney W. Grimes break; 399ea022d16SRodney W. Grimes } 4000e063efeSYaroslav Tykhiy case 'U': 4010e063efeSYaroslav Tykhiy restricted_data_ports = 0; 4025a392aecSTorsten Blum break; 403ea022d16SRodney W. Grimes 404ea022d16SRodney W. Grimes case 'v': 40593bd9dc5SYaroslav Tykhiy ftpdebug++; 406ea022d16SRodney W. Grimes break; 407ea022d16SRodney W. Grimes 4085d7e0128SYaroslav Tykhiy case 'W': 4095d7e0128SYaroslav Tykhiy dowtmp = 0; 4105d7e0128SYaroslav Tykhiy break; 4115d7e0128SYaroslav Tykhiy 412ea022d16SRodney W. Grimes default: 413ea022d16SRodney W. Grimes warnx("unknown flag -%c ignored", optopt); 414ea022d16SRodney W. Grimes break; 415ea022d16SRodney W. Grimes } 416ea022d16SRodney W. Grimes } 417cf09a206SDavid Greenman 418ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 419ea4e54b9SDavid Nugent inithosts(); 420ea4e54b9SDavid Nugent #endif 421ea022d16SRodney W. Grimes (void) freopen(_PATH_DEVNULL, "w", stderr); 422cf09a206SDavid Greenman 423cf09a206SDavid Greenman /* 424cf09a206SDavid Greenman * LOG_NDELAY sets up the logging connection immediately, 425cf09a206SDavid Greenman * necessary for anonymous ftp's that chroot and can't do it later. 426cf09a206SDavid Greenman */ 427cf09a206SDavid Greenman openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP); 428cf09a206SDavid Greenman 429cf09a206SDavid Greenman if (daemon_mode) { 430206fe568SHajimu UMEMOTO int *ctl_sock, fd, maxfd = -1, nfds, i; 431206fe568SHajimu UMEMOTO fd_set defreadfds, readfds; 432206fe568SHajimu UMEMOTO pid_t pid; 433cf09a206SDavid Greenman 434cf09a206SDavid Greenman /* 435cf09a206SDavid Greenman * Detach from parent. 436cf09a206SDavid Greenman */ 437cf09a206SDavid Greenman if (daemon(1, 1) < 0) { 438cf09a206SDavid Greenman syslog(LOG_ERR, "failed to become a daemon"); 439cf09a206SDavid Greenman exit(1); 440cf09a206SDavid Greenman } 4414b82fc95SYaroslav Tykhiy sa.sa_handler = reapchild; 4424b82fc95SYaroslav Tykhiy (void)sigaction(SIGCHLD, &sa, NULL); 4434dd8b5abSYoshinobu Inoue 444cf09a206SDavid Greenman /* 445cf09a206SDavid Greenman * Open a socket, bind it to the FTP port, and start 446cf09a206SDavid Greenman * listening. 447cf09a206SDavid Greenman */ 448206fe568SHajimu UMEMOTO ctl_sock = socksetup(family, bindname, bindport); 449206fe568SHajimu UMEMOTO if (ctl_sock == NULL) 450cf09a206SDavid Greenman exit(1); 451206fe568SHajimu UMEMOTO 452206fe568SHajimu UMEMOTO FD_ZERO(&defreadfds); 453206fe568SHajimu UMEMOTO for (i = 1; i <= *ctl_sock; i++) { 454206fe568SHajimu UMEMOTO FD_SET(ctl_sock[i], &defreadfds); 455206fe568SHajimu UMEMOTO if (listen(ctl_sock[i], 32) < 0) { 456cf09a206SDavid Greenman syslog(LOG_ERR, "control listen: %m"); 457cf09a206SDavid Greenman exit(1); 458cf09a206SDavid Greenman } 459206fe568SHajimu UMEMOTO if (maxfd < ctl_sock[i]) 460206fe568SHajimu UMEMOTO maxfd = ctl_sock[i]; 461206fe568SHajimu UMEMOTO } 462206fe568SHajimu UMEMOTO 463cf09a206SDavid Greenman /* 464105a3c98SJulian Elischer * Atomically write process ID 465105a3c98SJulian Elischer */ 466105a3c98SJulian Elischer if (pid_file) 467105a3c98SJulian Elischer { 468105a3c98SJulian Elischer int fd; 469105a3c98SJulian Elischer char buf[20]; 470105a3c98SJulian Elischer 471105a3c98SJulian Elischer fd = open(pid_file, O_CREAT | O_WRONLY | O_TRUNC 472105a3c98SJulian Elischer | O_NONBLOCK | O_EXLOCK, 0644); 47385966371SWarner Losh if (fd < 0) { 474105a3c98SJulian Elischer if (errno == EAGAIN) 475105a3c98SJulian Elischer errx(1, "%s: file locked", pid_file); 476105a3c98SJulian Elischer else 477105a3c98SJulian Elischer err(1, "%s", pid_file); 47885966371SWarner Losh } 479105a3c98SJulian Elischer snprintf(buf, sizeof(buf), 480105a3c98SJulian Elischer "%lu\n", (unsigned long) getpid()); 481105a3c98SJulian Elischer if (write(fd, buf, strlen(buf)) < 0) 482105a3c98SJulian Elischer err(1, "%s: write", pid_file); 483105a3c98SJulian Elischer /* Leave the pid file open and locked */ 484105a3c98SJulian Elischer } 485105a3c98SJulian Elischer /* 486cf09a206SDavid Greenman * Loop forever accepting connection requests and forking off 487cf09a206SDavid Greenman * children to handle them. 488cf09a206SDavid Greenman */ 489cf09a206SDavid Greenman while (1) { 490206fe568SHajimu UMEMOTO FD_COPY(&defreadfds, &readfds); 491206fe568SHajimu UMEMOTO nfds = select(maxfd + 1, &readfds, NULL, NULL, 0); 492206fe568SHajimu UMEMOTO if (nfds <= 0) { 493206fe568SHajimu UMEMOTO if (nfds < 0 && errno != EINTR) 494206fe568SHajimu UMEMOTO syslog(LOG_WARNING, "select: %m"); 495206fe568SHajimu UMEMOTO continue; 496206fe568SHajimu UMEMOTO } 497206fe568SHajimu UMEMOTO 498206fe568SHajimu UMEMOTO pid = -1; 499206fe568SHajimu UMEMOTO for (i = 1; i <= *ctl_sock; i++) 500206fe568SHajimu UMEMOTO if (FD_ISSET(ctl_sock[i], &readfds)) { 501206fe568SHajimu UMEMOTO addrlen = sizeof(his_addr); 502206fe568SHajimu UMEMOTO fd = accept(ctl_sock[i], 503206fe568SHajimu UMEMOTO (struct sockaddr *)&his_addr, 504206fe568SHajimu UMEMOTO &addrlen); 505206fe568SHajimu UMEMOTO if ((pid = fork()) == 0) { 506cf09a206SDavid Greenman /* child */ 507cf09a206SDavid Greenman (void) dup2(fd, 0); 508cf09a206SDavid Greenman (void) dup2(fd, 1); 509206fe568SHajimu UMEMOTO close(ctl_sock[i]); 510206fe568SHajimu UMEMOTO } else 511cf09a206SDavid Greenman close(fd); 512cf09a206SDavid Greenman } 513206fe568SHajimu UMEMOTO if (pid == 0) 514206fe568SHajimu UMEMOTO break; 515206fe568SHajimu UMEMOTO } 516cf09a206SDavid Greenman } else { 517cf09a206SDavid Greenman addrlen = sizeof(his_addr); 518cf09a206SDavid Greenman if (getpeername(0, (struct sockaddr *)&his_addr, &addrlen) < 0) { 519cf09a206SDavid Greenman syslog(LOG_ERR, "getpeername (%s): %m",argv[0]); 520cf09a206SDavid Greenman exit(1); 521cf09a206SDavid Greenman } 522cf09a206SDavid Greenman } 523cf09a206SDavid Greenman 5244b82fc95SYaroslav Tykhiy sa.sa_handler = SIG_DFL; 5254b82fc95SYaroslav Tykhiy (void)sigaction(SIGCHLD, &sa, NULL); 5264b82fc95SYaroslav Tykhiy 5274b82fc95SYaroslav Tykhiy sa.sa_handler = sigurg; 5284b82fc95SYaroslav Tykhiy sa.sa_flags = 0; /* don't restart syscalls for SIGURG */ 5294b82fc95SYaroslav Tykhiy (void)sigaction(SIGURG, &sa, NULL); 5304b82fc95SYaroslav Tykhiy 5314b82fc95SYaroslav Tykhiy sigfillset(&sa.sa_mask); /* block all signals in handler */ 5324b82fc95SYaroslav Tykhiy sa.sa_flags = SA_RESTART; 5334b82fc95SYaroslav Tykhiy sa.sa_handler = sigquit; 5344b82fc95SYaroslav Tykhiy (void)sigaction(SIGHUP, &sa, NULL); 5354b82fc95SYaroslav Tykhiy (void)sigaction(SIGINT, &sa, NULL); 5364b82fc95SYaroslav Tykhiy (void)sigaction(SIGQUIT, &sa, NULL); 5374b82fc95SYaroslav Tykhiy (void)sigaction(SIGTERM, &sa, NULL); 5384b82fc95SYaroslav Tykhiy 5394b82fc95SYaroslav Tykhiy sa.sa_handler = lostconn; 5404b82fc95SYaroslav Tykhiy (void)sigaction(SIGPIPE, &sa, NULL); 541ea022d16SRodney W. Grimes 542cf09a206SDavid Greenman addrlen = sizeof(ctrl_addr); 543cf09a206SDavid Greenman if (getsockname(0, (struct sockaddr *)&ctrl_addr, &addrlen) < 0) { 544cf09a206SDavid Greenman syslog(LOG_ERR, "getsockname (%s): %m",argv[0]); 545cf09a206SDavid Greenman exit(1); 546cf09a206SDavid Greenman } 54763591ba5SYaroslav Tykhiy dataport = ntohs(ctrl_addr.su_port) - 1; /* as per RFC 959 */ 548ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 549ea4e54b9SDavid Nugent /* select our identity from virtual host table */ 5504dd8b5abSYoshinobu Inoue selecthost(&ctrl_addr); 551ea4e54b9SDavid Nugent #endif 552cf09a206SDavid Greenman #ifdef IP_TOS 5534dd8b5abSYoshinobu Inoue if (ctrl_addr.su_family == AF_INET) 5544dd8b5abSYoshinobu Inoue { 555cf09a206SDavid Greenman tos = IPTOS_LOWDELAY; 55657d4ef07SYaroslav Tykhiy if (setsockopt(0, IPPROTO_IP, IP_TOS, &tos, sizeof(int)) < 0) 557406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "control setsockopt (IP_TOS): %m"); 5584dd8b5abSYoshinobu Inoue } 559cf09a206SDavid Greenman #endif 560dadb9fb3SDavid Greenman /* 561dadb9fb3SDavid Greenman * Disable Nagle on the control channel so that we don't have to wait 562dadb9fb3SDavid Greenman * for peer's ACK before issuing our next reply. 563dadb9fb3SDavid Greenman */ 564dadb9fb3SDavid Greenman if (setsockopt(0, IPPROTO_TCP, TCP_NODELAY, &on, sizeof(on)) < 0) 565406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "control setsockopt (TCP_NODELAY): %m"); 566dadb9fb3SDavid Greenman 5674dd8b5abSYoshinobu Inoue data_source.su_port = htons(ntohs(ctrl_addr.su_port) - 1); 568cf09a206SDavid Greenman 569a5a4544eSPaul Traina /* set this here so klogin can use it... */ 570e760ef2cSWarner Losh (void)snprintf(ttyline, sizeof(ttyline), "ftp%d", getpid()); 571a5a4544eSPaul Traina 572ea022d16SRodney W. Grimes /* Try to handle urgent data inline */ 573ea022d16SRodney W. Grimes #ifdef SO_OOBINLINE 57457d4ef07SYaroslav Tykhiy if (setsockopt(0, SOL_SOCKET, SO_OOBINLINE, &on, sizeof(on)) < 0) 575406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "control setsockopt (SO_OOBINLINE): %m"); 576ea022d16SRodney W. Grimes #endif 577ea022d16SRodney W. Grimes 578ea022d16SRodney W. Grimes #ifdef F_SETOWN 579ea022d16SRodney W. Grimes if (fcntl(fileno(stdin), F_SETOWN, getpid()) == -1) 580ea022d16SRodney W. Grimes syslog(LOG_ERR, "fcntl F_SETOWN: %m"); 581ea022d16SRodney W. Grimes #endif 5824dd8b5abSYoshinobu Inoue dolog((struct sockaddr *)&his_addr); 583ea022d16SRodney W. Grimes /* 584ea022d16SRodney W. Grimes * Set up default state 585ea022d16SRodney W. Grimes */ 586ea022d16SRodney W. Grimes data = -1; 587ea022d16SRodney W. Grimes type = TYPE_A; 588ea022d16SRodney W. Grimes form = FORM_N; 589ea022d16SRodney W. Grimes stru = STRU_F; 590ea022d16SRodney W. Grimes mode = MODE_S; 591ea022d16SRodney W. Grimes tmpline[0] = '\0'; 592ea022d16SRodney W. Grimes 593ea022d16SRodney W. Grimes /* If logins are disabled, print out the message. */ 594ea022d16SRodney W. Grimes if ((fd = fopen(_PATH_NOLOGIN,"r")) != NULL) { 595ea022d16SRodney W. Grimes while (fgets(line, sizeof(line), fd) != NULL) { 596ea022d16SRodney W. Grimes if ((cp = strchr(line, '\n')) != NULL) 597ea022d16SRodney W. Grimes *cp = '\0'; 598ea022d16SRodney W. Grimes lreply(530, "%s", line); 599ea022d16SRodney W. Grimes } 600ea022d16SRodney W. Grimes (void) fflush(stdout); 601ea022d16SRodney W. Grimes (void) fclose(fd); 602ea022d16SRodney W. Grimes reply(530, "System not available."); 603ea022d16SRodney W. Grimes exit(0); 604ea022d16SRodney W. Grimes } 605ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 60663047c6fSDavid E. O'Brien fd = fopen(thishost->welcome, "r"); 607ea4e54b9SDavid Nugent #else 60863047c6fSDavid E. O'Brien fd = fopen(_PATH_FTPWELCOME, "r"); 609ea4e54b9SDavid Nugent #endif 61063047c6fSDavid E. O'Brien if (fd != NULL) { 611ea022d16SRodney W. Grimes while (fgets(line, sizeof(line), fd) != NULL) { 612ea022d16SRodney W. Grimes if ((cp = strchr(line, '\n')) != NULL) 613ea022d16SRodney W. Grimes *cp = '\0'; 614ea022d16SRodney W. Grimes lreply(220, "%s", line); 615ea022d16SRodney W. Grimes } 616ea022d16SRodney W. Grimes (void) fflush(stdout); 617ea022d16SRodney W. Grimes (void) fclose(fd); 618ea022d16SRodney W. Grimes /* reply(220,) must follow */ 619ea022d16SRodney W. Grimes } 620ea4e54b9SDavid Nugent #ifndef VIRTUAL_HOSTING 6210512556aSDavid Nugent if ((hostname = malloc(MAXHOSTNAMELEN)) == NULL) 622618b0bbaSMark Murray fatalerror("Ran out of memory."); 6239e9a43bdSBrian Somers (void) gethostname(hostname, MAXHOSTNAMELEN - 1); 6249e9a43bdSBrian Somers hostname[MAXHOSTNAMELEN - 1] = '\0'; 625ea4e54b9SDavid Nugent #endif 626c152df28SYaroslav Tykhiy if (hostinfo) 627ea022d16SRodney W. Grimes reply(220, "%s FTP server (%s) ready.", hostname, version); 628c152df28SYaroslav Tykhiy else 629c152df28SYaroslav Tykhiy reply(220, "FTP server ready."); 630ea022d16SRodney W. Grimes for (;;) 631ea022d16SRodney W. Grimes (void) yyparse(); 632ea022d16SRodney W. Grimes /* NOTREACHED */ 633ea022d16SRodney W. Grimes } 634ea022d16SRodney W. Grimes 635ea022d16SRodney W. Grimes static void 636e4bc453cSWarner Losh lostconn(int signo) 637ea022d16SRodney W. Grimes { 638ea022d16SRodney W. Grimes 639618b0bbaSMark Murray if (ftpdebug) 640ea022d16SRodney W. Grimes syslog(LOG_DEBUG, "lost connection"); 641e02897faSPhilippe Charnier dologout(1); 642ea022d16SRodney W. Grimes } 643ea022d16SRodney W. Grimes 6444b82fc95SYaroslav Tykhiy static void 645e4bc453cSWarner Losh sigquit(int signo) 6464b82fc95SYaroslav Tykhiy { 6474b82fc95SYaroslav Tykhiy 6484b82fc95SYaroslav Tykhiy syslog(LOG_ERR, "got signal %d", signo); 6494b82fc95SYaroslav Tykhiy dologout(1); 6504b82fc95SYaroslav Tykhiy } 6514b82fc95SYaroslav Tykhiy 652ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 653ea4e54b9SDavid Nugent /* 654ea4e54b9SDavid Nugent * read in virtual host tables (if they exist) 655ea4e54b9SDavid Nugent */ 656ea4e54b9SDavid Nugent 657ea4e54b9SDavid Nugent static void 658e4bc453cSWarner Losh inithosts(void) 659ea4e54b9SDavid Nugent { 66055b54aa7SYaroslav Tykhiy int insert; 661737d08f3SYaroslav Tykhiy size_t len; 662ea4e54b9SDavid Nugent FILE *fp; 663737d08f3SYaroslav Tykhiy char *cp, *mp, *line; 664737d08f3SYaroslav Tykhiy char *hostname; 66555b54aa7SYaroslav Tykhiy char *vhost, *anonuser, *statfile, *welcome, *loginmsg; 666ea4e54b9SDavid Nugent struct ftphost *hrp, *lhrp; 6674dd8b5abSYoshinobu Inoue struct addrinfo hints, *res, *ai; 668ea4e54b9SDavid Nugent 669ea4e54b9SDavid Nugent /* 670ea4e54b9SDavid Nugent * Fill in the default host information 671ea4e54b9SDavid Nugent */ 672737d08f3SYaroslav Tykhiy if ((hostname = malloc(MAXHOSTNAMELEN)) == NULL) 673618b0bbaSMark Murray fatalerror("Ran out of memory."); 674737d08f3SYaroslav Tykhiy if (gethostname(hostname, MAXHOSTNAMELEN) < 0) 675737d08f3SYaroslav Tykhiy hostname[0] = '\0'; 676737d08f3SYaroslav Tykhiy hostname[MAXHOSTNAMELEN - 1] = '\0'; 677737d08f3SYaroslav Tykhiy if ((hrp = malloc(sizeof(struct ftphost))) == NULL) 678737d08f3SYaroslav Tykhiy fatalerror("Ran out of memory."); 679737d08f3SYaroslav Tykhiy hrp->hostname = hostname; 680f38c6cadSYoshinobu Inoue hrp->hostinfo = NULL; 6814dd8b5abSYoshinobu Inoue 6824dd8b5abSYoshinobu Inoue memset(&hints, 0, sizeof(hints)); 6834dd8b5abSYoshinobu Inoue hints.ai_flags = AI_CANONNAME; 6844dd8b5abSYoshinobu Inoue hints.ai_family = AF_UNSPEC; 685b1d8d5cdSYaroslav Tykhiy if (getaddrinfo(hrp->hostname, NULL, &hints, &res) == 0) 686f38c6cadSYoshinobu Inoue hrp->hostinfo = res; 687ea4e54b9SDavid Nugent hrp->statfile = _PATH_FTPDSTATFILE; 688ea4e54b9SDavid Nugent hrp->welcome = _PATH_FTPWELCOME; 689ea4e54b9SDavid Nugent hrp->loginmsg = _PATH_FTPLOGINMESG; 690ea4e54b9SDavid Nugent hrp->anonuser = "ftp"; 691ea4e54b9SDavid Nugent hrp->next = NULL; 692ea4e54b9SDavid Nugent thishost = firsthost = lhrp = hrp; 693ea4e54b9SDavid Nugent if ((fp = fopen(_PATH_FTPHOSTS, "r")) != NULL) { 694ec009cf0SYaroslav Tykhiy int addrsize, gothost; 6954dd8b5abSYoshinobu Inoue void *addr; 6964dd8b5abSYoshinobu Inoue struct hostent *hp; 6974dd8b5abSYoshinobu Inoue 698737d08f3SYaroslav Tykhiy while ((line = fgetln(fp, &len)) != NULL) { 6994dd8b5abSYoshinobu Inoue int i, hp_error; 700ea4e54b9SDavid Nugent 701737d08f3SYaroslav Tykhiy /* skip comments */ 702737d08f3SYaroslav Tykhiy if (line[0] == '#') 703ea4e54b9SDavid Nugent continue; 704737d08f3SYaroslav Tykhiy if (line[len - 1] == '\n') { 705737d08f3SYaroslav Tykhiy line[len - 1] = '\0'; 706737d08f3SYaroslav Tykhiy mp = NULL; 707737d08f3SYaroslav Tykhiy } else { 708737d08f3SYaroslav Tykhiy if ((mp = malloc(len + 1)) == NULL) 709737d08f3SYaroslav Tykhiy fatalerror("Ran out of memory."); 710737d08f3SYaroslav Tykhiy memcpy(mp, line, len); 711737d08f3SYaroslav Tykhiy mp[len] = '\0'; 712737d08f3SYaroslav Tykhiy line = mp; 713ea4e54b9SDavid Nugent } 714ea4e54b9SDavid Nugent cp = strtok(line, " \t"); 715737d08f3SYaroslav Tykhiy /* skip empty lines */ 716737d08f3SYaroslav Tykhiy if (cp == NULL) 717737d08f3SYaroslav Tykhiy goto nextline; 71855b54aa7SYaroslav Tykhiy vhost = cp; 71955b54aa7SYaroslav Tykhiy 72055b54aa7SYaroslav Tykhiy /* set defaults */ 72155b54aa7SYaroslav Tykhiy anonuser = "ftp"; 72255b54aa7SYaroslav Tykhiy statfile = _PATH_FTPDSTATFILE; 72355b54aa7SYaroslav Tykhiy welcome = _PATH_FTPWELCOME; 72455b54aa7SYaroslav Tykhiy loginmsg = _PATH_FTPLOGINMESG; 72555b54aa7SYaroslav Tykhiy 72655b54aa7SYaroslav Tykhiy /* 72755b54aa7SYaroslav Tykhiy * Preparse the line so we can use its info 72855b54aa7SYaroslav Tykhiy * for all the addresses associated with 72955b54aa7SYaroslav Tykhiy * the virtual host name. 73055b54aa7SYaroslav Tykhiy * Field 0, the virtual host name, is special: 73155b54aa7SYaroslav Tykhiy * it's already parsed off and will be strdup'ed 73255b54aa7SYaroslav Tykhiy * later, after we know its canonical form. 73355b54aa7SYaroslav Tykhiy */ 73455b54aa7SYaroslav Tykhiy for (i = 1; i < 5 && (cp = strtok(NULL, " \t")); i++) 73555b54aa7SYaroslav Tykhiy if (*cp != '-' && (cp = strdup(cp))) 73655b54aa7SYaroslav Tykhiy switch (i) { 73755b54aa7SYaroslav Tykhiy case 1: /* anon user permissions */ 73855b54aa7SYaroslav Tykhiy anonuser = cp; 73955b54aa7SYaroslav Tykhiy break; 74055b54aa7SYaroslav Tykhiy case 2: /* statistics file */ 74155b54aa7SYaroslav Tykhiy statfile = cp; 74255b54aa7SYaroslav Tykhiy break; 74355b54aa7SYaroslav Tykhiy case 3: /* welcome message */ 74455b54aa7SYaroslav Tykhiy welcome = cp; 74555b54aa7SYaroslav Tykhiy break; 74655b54aa7SYaroslav Tykhiy case 4: /* login message */ 74755b54aa7SYaroslav Tykhiy loginmsg = cp; 74855b54aa7SYaroslav Tykhiy break; 74955b54aa7SYaroslav Tykhiy default: /* programming error */ 75055b54aa7SYaroslav Tykhiy abort(); 75155b54aa7SYaroslav Tykhiy /* NOTREACHED */ 75255b54aa7SYaroslav Tykhiy } 7534dd8b5abSYoshinobu Inoue 7544dd8b5abSYoshinobu Inoue hints.ai_flags = 0; 7554dd8b5abSYoshinobu Inoue hints.ai_family = AF_UNSPEC; 7564dd8b5abSYoshinobu Inoue hints.ai_flags = AI_PASSIVE; 757b1d8d5cdSYaroslav Tykhiy if (getaddrinfo(vhost, NULL, &hints, &res) != 0) 758737d08f3SYaroslav Tykhiy goto nextline; 7594dd8b5abSYoshinobu Inoue for (ai = res; ai != NULL && ai->ai_addr != NULL; 760b535a9bfSDavid Nugent ai = ai->ai_next) { 7614dd8b5abSYoshinobu Inoue 762b535a9bfSDavid Nugent gothost = 0; 763ea4e54b9SDavid Nugent for (hrp = firsthost; hrp != NULL; hrp = hrp->next) { 764f38c6cadSYoshinobu Inoue struct addrinfo *hi; 765f38c6cadSYoshinobu Inoue 766f38c6cadSYoshinobu Inoue for (hi = hrp->hostinfo; hi != NULL; 767f38c6cadSYoshinobu Inoue hi = hi->ai_next) 768f38c6cadSYoshinobu Inoue if (hi->ai_addrlen == ai->ai_addrlen && 769f38c6cadSYoshinobu Inoue memcmp(hi->ai_addr, 7704dd8b5abSYoshinobu Inoue ai->ai_addr, 771b535a9bfSDavid Nugent ai->ai_addr->sa_len) == 0) { 772b535a9bfSDavid Nugent gothost++; 773b535a9bfSDavid Nugent break; 774b535a9bfSDavid Nugent } 775b535a9bfSDavid Nugent if (gothost) 776ea4e54b9SDavid Nugent break; 777ea4e54b9SDavid Nugent } 778ea4e54b9SDavid Nugent if (hrp == NULL) { 779ea4e54b9SDavid Nugent if ((hrp = malloc(sizeof(struct ftphost))) == NULL) 780737d08f3SYaroslav Tykhiy goto nextline; 781b1d8d5cdSYaroslav Tykhiy hrp->hostname = NULL; 78255b54aa7SYaroslav Tykhiy insert = 1; 783f2fe752dSYaroslav Tykhiy } else { 7841f75c13eSYaroslav Tykhiy if (hrp->hostinfo && hrp->hostinfo != res) 785b1d8d5cdSYaroslav Tykhiy freeaddrinfo(hrp->hostinfo); 786f2fe752dSYaroslav Tykhiy insert = 0; /* host already in the chain */ 787f2fe752dSYaroslav Tykhiy } 788f38c6cadSYoshinobu Inoue hrp->hostinfo = res; 789f38c6cadSYoshinobu Inoue 790ea4e54b9SDavid Nugent /* 791ea4e54b9SDavid Nugent * determine hostname to use. 7924dd8b5abSYoshinobu Inoue * force defined name if there is a valid alias 793ea4e54b9SDavid Nugent * otherwise fallback to primary hostname 794ea4e54b9SDavid Nugent */ 7954dd8b5abSYoshinobu Inoue /* XXX: getaddrinfo() can't do alias check */ 796f38c6cadSYoshinobu Inoue switch(hrp->hostinfo->ai_family) { 7974dd8b5abSYoshinobu Inoue case AF_INET: 7984b4cc4c6SYaroslav Tykhiy addr = &((struct sockaddr_in *)hrp->hostinfo->ai_addr)->sin_addr; 7994b4cc4c6SYaroslav Tykhiy addrsize = sizeof(struct in_addr); 8004dd8b5abSYoshinobu Inoue break; 8014dd8b5abSYoshinobu Inoue case AF_INET6: 8024b4cc4c6SYaroslav Tykhiy addr = &((struct sockaddr_in6 *)hrp->hostinfo->ai_addr)->sin6_addr; 8034b4cc4c6SYaroslav Tykhiy addrsize = sizeof(struct in6_addr); 8044dd8b5abSYoshinobu Inoue break; 8054dd8b5abSYoshinobu Inoue default: 8064dd8b5abSYoshinobu Inoue /* should not reach here */ 807f38c6cadSYoshinobu Inoue freeaddrinfo(hrp->hostinfo); 808f2fe752dSYaroslav Tykhiy if (insert) 809f2fe752dSYaroslav Tykhiy free(hrp); /*not in chain, can free*/ 810f2fe752dSYaroslav Tykhiy else 811f2fe752dSYaroslav Tykhiy hrp->hostinfo = NULL; /*mark as blank*/ 812737d08f3SYaroslav Tykhiy goto nextline; 8134dd8b5abSYoshinobu Inoue /* NOTREACHED */ 8144dd8b5abSYoshinobu Inoue } 81557d4ef07SYaroslav Tykhiy if ((hp = getipnodebyaddr(addr, addrsize, 816f38c6cadSYoshinobu Inoue hrp->hostinfo->ai_family, 8174dd8b5abSYoshinobu Inoue &hp_error)) != NULL) { 81855b54aa7SYaroslav Tykhiy if (strcmp(vhost, hp->h_name) != 0) { 819ea4e54b9SDavid Nugent if (hp->h_aliases == NULL) 82055b54aa7SYaroslav Tykhiy vhost = hp->h_name; 821ea4e54b9SDavid Nugent else { 822ea4e54b9SDavid Nugent i = 0; 823ea4e54b9SDavid Nugent while (hp->h_aliases[i] && 82455b54aa7SYaroslav Tykhiy strcmp(vhost, hp->h_aliases[i]) != 0) 825ea4e54b9SDavid Nugent ++i; 826ea4e54b9SDavid Nugent if (hp->h_aliases[i] == NULL) 82755b54aa7SYaroslav Tykhiy vhost = hp->h_name; 828ea4e54b9SDavid Nugent } 829ea4e54b9SDavid Nugent } 830ea4e54b9SDavid Nugent } 831b1d8d5cdSYaroslav Tykhiy if (hrp->hostname && 832b1d8d5cdSYaroslav Tykhiy strcmp(hrp->hostname, vhost) != 0) { 833b1d8d5cdSYaroslav Tykhiy free(hrp->hostname); 834b1d8d5cdSYaroslav Tykhiy hrp->hostname = NULL; 835b1d8d5cdSYaroslav Tykhiy } 836b1d8d5cdSYaroslav Tykhiy if (hrp->hostname == NULL && 837f2fe752dSYaroslav Tykhiy (hrp->hostname = strdup(vhost)) == NULL) { 838f2fe752dSYaroslav Tykhiy freeaddrinfo(hrp->hostinfo); 839f2fe752dSYaroslav Tykhiy hrp->hostinfo = NULL; /* mark as blank */ 840f2fe752dSYaroslav Tykhiy if (hp) 841f2fe752dSYaroslav Tykhiy freehostent(hp); 84255b54aa7SYaroslav Tykhiy goto nextline; 843f2fe752dSYaroslav Tykhiy } 84455b54aa7SYaroslav Tykhiy hrp->anonuser = anonuser; 84555b54aa7SYaroslav Tykhiy hrp->statfile = statfile; 84655b54aa7SYaroslav Tykhiy hrp->welcome = welcome; 84755b54aa7SYaroslav Tykhiy hrp->loginmsg = loginmsg; 84855b54aa7SYaroslav Tykhiy if (insert) { 84955b54aa7SYaroslav Tykhiy hrp->next = NULL; 85055b54aa7SYaroslav Tykhiy lhrp->next = hrp; 85155b54aa7SYaroslav Tykhiy lhrp = hrp; 85255b54aa7SYaroslav Tykhiy } 853233c0f66SYaroslav Tykhiy if (hp) 8544dd8b5abSYoshinobu Inoue freehostent(hp); 8554dd8b5abSYoshinobu Inoue } 856737d08f3SYaroslav Tykhiy nextline: 857737d08f3SYaroslav Tykhiy if (mp) 858737d08f3SYaroslav Tykhiy free(mp); 859ea4e54b9SDavid Nugent } 860ea4e54b9SDavid Nugent (void) fclose(fp); 861ea4e54b9SDavid Nugent } 862ea4e54b9SDavid Nugent } 863ea4e54b9SDavid Nugent 864ea4e54b9SDavid Nugent static void 865e4bc453cSWarner Losh selecthost(union sockunion *su) 866ea4e54b9SDavid Nugent { 867ea4e54b9SDavid Nugent struct ftphost *hrp; 8684dd8b5abSYoshinobu Inoue u_int16_t port; 8694dd8b5abSYoshinobu Inoue #ifdef INET6 8704dd8b5abSYoshinobu Inoue struct in6_addr *mapped_in6 = NULL; 8714dd8b5abSYoshinobu Inoue #endif 872f38c6cadSYoshinobu Inoue struct addrinfo *hi; 8734dd8b5abSYoshinobu Inoue 8744dd8b5abSYoshinobu Inoue #ifdef INET6 8754dd8b5abSYoshinobu Inoue /* 8764dd8b5abSYoshinobu Inoue * XXX IPv4 mapped IPv6 addr consideraton, 8774dd8b5abSYoshinobu Inoue * specified in rfc2373. 8784dd8b5abSYoshinobu Inoue */ 8794dd8b5abSYoshinobu Inoue if (su->su_family == AF_INET6 && 8804dd8b5abSYoshinobu Inoue IN6_IS_ADDR_V4MAPPED(&su->su_sin6.sin6_addr)) 8814dd8b5abSYoshinobu Inoue mapped_in6 = &su->su_sin6.sin6_addr; 8824dd8b5abSYoshinobu Inoue #endif 883ea4e54b9SDavid Nugent 884ea4e54b9SDavid Nugent hrp = thishost = firsthost; /* default */ 8854dd8b5abSYoshinobu Inoue port = su->su_port; 8864dd8b5abSYoshinobu Inoue su->su_port = 0; 887ea4e54b9SDavid Nugent while (hrp != NULL) { 888b535a9bfSDavid Nugent for (hi = hrp->hostinfo; hi != NULL; hi = hi->ai_next) { 889f38c6cadSYoshinobu Inoue if (memcmp(su, hi->ai_addr, hi->ai_addrlen) == 0) { 890ea4e54b9SDavid Nugent thishost = hrp; 891ea4e54b9SDavid Nugent break; 892ea4e54b9SDavid Nugent } 8934dd8b5abSYoshinobu Inoue #ifdef INET6 8944dd8b5abSYoshinobu Inoue /* XXX IPv4 mapped IPv6 addr consideraton */ 895f38c6cadSYoshinobu Inoue if (hi->ai_addr->sa_family == AF_INET && mapped_in6 != NULL && 8964dd8b5abSYoshinobu Inoue (memcmp(&mapped_in6->s6_addr[12], 897f38c6cadSYoshinobu Inoue &((struct sockaddr_in *)hi->ai_addr)->sin_addr, 8984dd8b5abSYoshinobu Inoue sizeof(struct in_addr)) == 0)) { 8994dd8b5abSYoshinobu Inoue thishost = hrp; 9004dd8b5abSYoshinobu Inoue break; 9014dd8b5abSYoshinobu Inoue } 9024dd8b5abSYoshinobu Inoue #endif 903f38c6cadSYoshinobu Inoue } 904ea4e54b9SDavid Nugent hrp = hrp->next; 905ea4e54b9SDavid Nugent } 9064dd8b5abSYoshinobu Inoue su->su_port = port; 907ea4e54b9SDavid Nugent /* setup static variables as appropriate */ 908ea4e54b9SDavid Nugent hostname = thishost->hostname; 909ea4e54b9SDavid Nugent ftpuser = thishost->anonuser; 910ea4e54b9SDavid Nugent } 911ea4e54b9SDavid Nugent #endif 912ea4e54b9SDavid Nugent 913ea022d16SRodney W. Grimes /* 914ea022d16SRodney W. Grimes * Helper function for sgetpwnam(). 915ea022d16SRodney W. Grimes */ 916ea022d16SRodney W. Grimes static char * 917e4bc453cSWarner Losh sgetsave(char *s) 918ea022d16SRodney W. Grimes { 919ea022d16SRodney W. Grimes char *new = malloc((unsigned) strlen(s) + 1); 920ea022d16SRodney W. Grimes 921ea022d16SRodney W. Grimes if (new == NULL) { 922ea022d16SRodney W. Grimes perror_reply(421, "Local resource failure: malloc"); 923ea022d16SRodney W. Grimes dologout(1); 924ea022d16SRodney W. Grimes /* NOTREACHED */ 925ea022d16SRodney W. Grimes } 926ea022d16SRodney W. Grimes (void) strcpy(new, s); 927ea022d16SRodney W. Grimes return (new); 928ea022d16SRodney W. Grimes } 929ea022d16SRodney W. Grimes 930ea022d16SRodney W. Grimes /* 931ea022d16SRodney W. Grimes * Save the result of a getpwnam. Used for USER command, since 932ea022d16SRodney W. Grimes * the data returned must not be clobbered by any other command 933ea022d16SRodney W. Grimes * (e.g., globbing). 934ea022d16SRodney W. Grimes */ 935ea022d16SRodney W. Grimes static struct passwd * 936e4bc453cSWarner Losh sgetpwnam(char *name) 937ea022d16SRodney W. Grimes { 938ea022d16SRodney W. Grimes static struct passwd save; 939ea022d16SRodney W. Grimes struct passwd *p; 940ea022d16SRodney W. Grimes 941ea022d16SRodney W. Grimes if ((p = getpwnam(name)) == NULL) 942ea022d16SRodney W. Grimes return (p); 943ea022d16SRodney W. Grimes if (save.pw_name) { 944ea022d16SRodney W. Grimes free(save.pw_name); 945ea022d16SRodney W. Grimes free(save.pw_passwd); 946ea022d16SRodney W. Grimes free(save.pw_gecos); 947ea022d16SRodney W. Grimes free(save.pw_dir); 948ea022d16SRodney W. Grimes free(save.pw_shell); 949ea022d16SRodney W. Grimes } 950ea022d16SRodney W. Grimes save = *p; 951ea022d16SRodney W. Grimes save.pw_name = sgetsave(p->pw_name); 952ea022d16SRodney W. Grimes save.pw_passwd = sgetsave(p->pw_passwd); 953ea022d16SRodney W. Grimes save.pw_gecos = sgetsave(p->pw_gecos); 954ea022d16SRodney W. Grimes save.pw_dir = sgetsave(p->pw_dir); 955ea022d16SRodney W. Grimes save.pw_shell = sgetsave(p->pw_shell); 956ea022d16SRodney W. Grimes return (&save); 957ea022d16SRodney W. Grimes } 958ea022d16SRodney W. Grimes 959ea022d16SRodney W. Grimes static int login_attempts; /* number of failed login attempts */ 960ea022d16SRodney W. Grimes static int askpasswd; /* had user command, ask for passwd */ 96190906a46SSheldon Hearn static char curname[MAXLOGNAME]; /* current USER name */ 962ea022d16SRodney W. Grimes 963ea022d16SRodney W. Grimes /* 964ea022d16SRodney W. Grimes * USER command. 965ea022d16SRodney W. Grimes * Sets global passwd pointer pw if named account exists and is acceptable; 966ea022d16SRodney W. Grimes * sets askpasswd if a PASS command is expected. If logged in previously, 967ea022d16SRodney W. Grimes * need to reset state. If name is "ftp" or "anonymous", the name is not in 968ea022d16SRodney W. Grimes * _PATH_FTPUSERS, and ftp account exists, set guest and pw, then just return. 969ea022d16SRodney W. Grimes * If account doesn't exist, ask for passwd anyway. Otherwise, check user 970ea022d16SRodney W. Grimes * requesting login privileges. Disallow anyone who does not have a standard 971ea022d16SRodney W. Grimes * shell as returned by getusershell(). Disallow anyone mentioned in the file 972ea022d16SRodney W. Grimes * _PATH_FTPUSERS to allow people such as root and uucp to be avoided. 973ea022d16SRodney W. Grimes */ 974ea022d16SRodney W. Grimes void 975e4bc453cSWarner Losh user(char *name) 976ea022d16SRodney W. Grimes { 977ea022d16SRodney W. Grimes char *cp, *shell; 978ea022d16SRodney W. Grimes 979ea022d16SRodney W. Grimes if (logged_in) { 980ea022d16SRodney W. Grimes if (guest) { 981ea022d16SRodney W. Grimes reply(530, "Can't change user from guest login."); 982ea022d16SRodney W. Grimes return; 983a5a4544eSPaul Traina } else if (dochroot) { 984a5a4544eSPaul Traina reply(530, "Can't change user from chroot user."); 985a5a4544eSPaul Traina return; 986ea022d16SRodney W. Grimes } 987ea022d16SRodney W. Grimes end_login(); 988ea022d16SRodney W. Grimes } 989ea022d16SRodney W. Grimes 990ea022d16SRodney W. Grimes guest = 0; 99163047c6fSDavid E. O'Brien #ifdef VIRTUAL_HOSTING 99263047c6fSDavid E. O'Brien pw = sgetpwnam(thishost->anonuser); 99363047c6fSDavid E. O'Brien #else 99463047c6fSDavid E. O'Brien pw = sgetpwnam("ftp"); 99563047c6fSDavid E. O'Brien #endif 996ea022d16SRodney W. Grimes if (strcmp(name, "ftp") == 0 || strcmp(name, "anonymous") == 0) { 9978657b576SYaroslav Tykhiy if (checkuser(_PATH_FTPUSERS, "ftp", 0, NULL) || 9988657b576SYaroslav Tykhiy checkuser(_PATH_FTPUSERS, "anonymous", 0, NULL)) 999ea022d16SRodney W. Grimes reply(530, "User %s access denied.", name); 100063047c6fSDavid E. O'Brien else if (pw != NULL) { 1001ea022d16SRodney W. Grimes guest = 1; 1002ea022d16SRodney W. Grimes askpasswd = 1; 1003ea022d16SRodney W. Grimes reply(331, 10042c60c54cSPaul Traina "Guest login ok, send your email address as password."); 1005ea022d16SRodney W. Grimes } else 1006ea022d16SRodney W. Grimes reply(530, "User %s unknown.", name); 1007ea022d16SRodney W. Grimes if (!askpasswd && logging) 1008ea022d16SRodney W. Grimes syslog(LOG_NOTICE, 1009ea022d16SRodney W. Grimes "ANONYMOUS FTP LOGIN REFUSED FROM %s", remotehost); 1010ea022d16SRodney W. Grimes return; 1011ea022d16SRodney W. Grimes } 10125a392aecSTorsten Blum if (anon_only != 0) { 10135a392aecSTorsten Blum reply(530, "Sorry, only anonymous ftp allowed."); 10145a392aecSTorsten Blum return; 10155a392aecSTorsten Blum } 10165a392aecSTorsten Blum 10179aca17cbSMark Murray if ((pw = sgetpwnam(name))) { 1018ea022d16SRodney W. Grimes if ((shell = pw->pw_shell) == NULL || *shell == 0) 1019ea022d16SRodney W. Grimes shell = _PATH_BSHELL; 1020c433c9daSPhilippe Charnier setusershell(); 1021ea022d16SRodney W. Grimes while ((cp = getusershell()) != NULL) 1022ea022d16SRodney W. Grimes if (strcmp(cp, shell) == 0) 1023ea022d16SRodney W. Grimes break; 1024ea022d16SRodney W. Grimes endusershell(); 1025ea022d16SRodney W. Grimes 10268657b576SYaroslav Tykhiy if (cp == NULL || checkuser(_PATH_FTPUSERS, name, 1, NULL)) { 1027ea022d16SRodney W. Grimes reply(530, "User %s access denied.", name); 1028ea022d16SRodney W. Grimes if (logging) 1029ea022d16SRodney W. Grimes syslog(LOG_NOTICE, 1030ea022d16SRodney W. Grimes "FTP LOGIN REFUSED FROM %s, %s", 1031ea022d16SRodney W. Grimes remotehost, name); 1032ea022d16SRodney W. Grimes pw = (struct passwd *) NULL; 1033ea022d16SRodney W. Grimes return; 1034ea022d16SRodney W. Grimes } 1035ea022d16SRodney W. Grimes } 1036ea022d16SRodney W. Grimes if (logging) 1037ea022d16SRodney W. Grimes strncpy(curname, name, sizeof(curname)-1); 103847499ecdSAndrey A. Chernov 103947499ecdSAndrey A. Chernov pwok = 0; 1040fa1746c9SMark Murray #ifdef USE_PAM 1041fa1746c9SMark Murray /* XXX Kluge! The conversation mechanism needs to be fixed. */ 1042726040deSGuido van Rooij #endif 104347499ecdSAndrey A. Chernov if (opiechallenge(&opiedata, name, opieprompt) == 0) { 104447499ecdSAndrey A. Chernov pwok = (pw != NULL) && 104547499ecdSAndrey A. Chernov opieaccessfile(remotehost) && 104647499ecdSAndrey A. Chernov opiealways(pw->pw_dir); 104747499ecdSAndrey A. Chernov reply(331, "Response to %s %s for %s.", 104847499ecdSAndrey A. Chernov opieprompt, pwok ? "requested" : "required", name); 104947499ecdSAndrey A. Chernov } else { 105047499ecdSAndrey A. Chernov pwok = 1; 105147499ecdSAndrey A. Chernov reply(331, "Password required for %s.", name); 105247499ecdSAndrey A. Chernov } 1053ea022d16SRodney W. Grimes askpasswd = 1; 1054ea022d16SRodney W. Grimes /* 1055ea022d16SRodney W. Grimes * Delay before reading passwd after first failed 1056ea022d16SRodney W. Grimes * attempt to slow down passwd-guessing programs. 1057ea022d16SRodney W. Grimes */ 1058ea022d16SRodney W. Grimes if (login_attempts) 1059ea022d16SRodney W. Grimes sleep((unsigned) login_attempts); 1060ea022d16SRodney W. Grimes } 1061ea022d16SRodney W. Grimes 1062ea022d16SRodney W. Grimes /* 10638657b576SYaroslav Tykhiy * Check if a user is in the file "fname", 10648657b576SYaroslav Tykhiy * return a pointer to a malloc'd string with the rest 10658657b576SYaroslav Tykhiy * of the matching line in "residue" if not NULL. 1066ea022d16SRodney W. Grimes */ 1067ea022d16SRodney W. Grimes static int 10688657b576SYaroslav Tykhiy checkuser(char *fname, char *name, int pwset, char **residue) 1069ea022d16SRodney W. Grimes { 1070ea022d16SRodney W. Grimes FILE *fd; 1071ea022d16SRodney W. Grimes int found = 0; 1072737d08f3SYaroslav Tykhiy size_t len; 1073737d08f3SYaroslav Tykhiy char *line, *mp, *p; 1074ea022d16SRodney W. Grimes 1075a5a4544eSPaul Traina if ((fd = fopen(fname, "r")) != NULL) { 1076737d08f3SYaroslav Tykhiy while (!found && (line = fgetln(fd, &len)) != NULL) { 1077737d08f3SYaroslav Tykhiy /* skip comments */ 1078ea022d16SRodney W. Grimes if (line[0] == '#') 1079ea022d16SRodney W. Grimes continue; 1080737d08f3SYaroslav Tykhiy if (line[len - 1] == '\n') { 1081737d08f3SYaroslav Tykhiy line[len - 1] = '\0'; 1082737d08f3SYaroslav Tykhiy mp = NULL; 1083737d08f3SYaroslav Tykhiy } else { 1084737d08f3SYaroslav Tykhiy if ((mp = malloc(len + 1)) == NULL) 1085737d08f3SYaroslav Tykhiy fatalerror("Ran out of memory."); 1086737d08f3SYaroslav Tykhiy memcpy(mp, line, len); 1087737d08f3SYaroslav Tykhiy mp[len] = '\0'; 1088737d08f3SYaroslav Tykhiy line = mp; 1089737d08f3SYaroslav Tykhiy } 1090737d08f3SYaroslav Tykhiy /* avoid possible leading and trailing whitespace */ 1091737d08f3SYaroslav Tykhiy p = strtok(line, " \t"); 1092737d08f3SYaroslav Tykhiy /* skip empty lines */ 1093737d08f3SYaroslav Tykhiy if (p == NULL) 1094737d08f3SYaroslav Tykhiy goto nextline; 109531fea7b8SDavid Nugent /* 109631fea7b8SDavid Nugent * if first chr is '@', check group membership 109731fea7b8SDavid Nugent */ 1098737d08f3SYaroslav Tykhiy if (p[0] == '@') { 109931fea7b8SDavid Nugent int i = 0; 110031fea7b8SDavid Nugent struct group *grp; 110131fea7b8SDavid Nugent 11028657b576SYaroslav Tykhiy if (p[1] == '\0') /* single @ matches anyone */ 11038657b576SYaroslav Tykhiy found = 1; 11048657b576SYaroslav Tykhiy else { 1105737d08f3SYaroslav Tykhiy if ((grp = getgrnam(p+1)) == NULL) 1106737d08f3SYaroslav Tykhiy goto nextline; 11077edcb936SSteve Price /* 11087edcb936SSteve Price * Check user's default group 11097edcb936SSteve Price */ 11107edcb936SSteve Price if (pwset && grp->gr_gid == pw->pw_gid) 11117edcb936SSteve Price found = 1; 11127edcb936SSteve Price /* 11137edcb936SSteve Price * Check supplementary groups 11147edcb936SSteve Price */ 111531fea7b8SDavid Nugent while (!found && grp->gr_mem[i]) 111631fea7b8SDavid Nugent found = strcmp(name, 111731fea7b8SDavid Nugent grp->gr_mem[i++]) 111831fea7b8SDavid Nugent == 0; 1119ea022d16SRodney W. Grimes } 11208657b576SYaroslav Tykhiy } 112131fea7b8SDavid Nugent /* 112231fea7b8SDavid Nugent * Otherwise, just check for username match 112331fea7b8SDavid Nugent */ 112431fea7b8SDavid Nugent else 1125737d08f3SYaroslav Tykhiy found = strcmp(p, name) == 0; 11268657b576SYaroslav Tykhiy /* 11278657b576SYaroslav Tykhiy * Save the rest of line to "residue" if matched 11288657b576SYaroslav Tykhiy */ 11298657b576SYaroslav Tykhiy if (found && residue) { 11300ba71e24SYaroslav Tykhiy if ((p = strtok(NULL, "")) != NULL) 11310ba71e24SYaroslav Tykhiy p += strspn(p, " \t"); 11320ba71e24SYaroslav Tykhiy if (p && *p) { 11338657b576SYaroslav Tykhiy if ((*residue = strdup(p)) == NULL) 11348657b576SYaroslav Tykhiy fatalerror("Ran out of memory."); 11358657b576SYaroslav Tykhiy } else 11368657b576SYaroslav Tykhiy *residue = NULL; 11378657b576SYaroslav Tykhiy } 1138737d08f3SYaroslav Tykhiy nextline: 1139737d08f3SYaroslav Tykhiy if (mp) 1140737d08f3SYaroslav Tykhiy free(mp); 1141ea022d16SRodney W. Grimes } 1142ea022d16SRodney W. Grimes (void) fclose(fd); 1143ea022d16SRodney W. Grimes } 1144ea022d16SRodney W. Grimes return (found); 1145ea022d16SRodney W. Grimes } 1146ea022d16SRodney W. Grimes 1147ea022d16SRodney W. Grimes /* 1148ea022d16SRodney W. Grimes * Terminate login as previous user, if any, resetting state; 1149ea022d16SRodney W. Grimes * used when USER command is given or login fails. 1150ea022d16SRodney W. Grimes */ 1151ea022d16SRodney W. Grimes static void 1152e4bc453cSWarner Losh end_login(void) 1153ea022d16SRodney W. Grimes { 11545bc9d93dSMark Murray #ifdef USE_PAM 11555bc9d93dSMark Murray int e; 11565bc9d93dSMark Murray #endif 1157ea022d16SRodney W. Grimes 1158ea022d16SRodney W. Grimes (void) seteuid((uid_t)0); 11595d7e0128SYaroslav Tykhiy if (logged_in && dowtmp) 116046948173SHajimu UMEMOTO ftpd_logwtmp(ttyline, "", NULL); 1161ea022d16SRodney W. Grimes pw = NULL; 1162b071c689SDavid Nugent #ifdef LOGIN_CAP 1163b071c689SDavid Nugent setusercontext(NULL, getpwuid(0), (uid_t)0, 1164d9e2c424SRobert Watson LOGIN_SETPRIORITY|LOGIN_SETRESOURCES|LOGIN_SETUMASK| 1165d9e2c424SRobert Watson LOGIN_SETMAC); 1166b071c689SDavid Nugent #endif 11675bc9d93dSMark Murray #ifdef USE_PAM 11685bc9d93dSMark Murray if ((e = pam_setcred(pamh, PAM_DELETE_CRED)) != PAM_SUCCESS) 11695bc9d93dSMark Murray syslog(LOG_ERR, "pam_setcred: %s", pam_strerror(pamh, e)); 11705bc9d93dSMark Murray if ((e = pam_close_session(pamh,0)) != PAM_SUCCESS) 11715bc9d93dSMark Murray syslog(LOG_ERR, "pam_close_session: %s", pam_strerror(pamh, e)); 11725bc9d93dSMark Murray if ((e = pam_end(pamh, e)) != PAM_SUCCESS) 11735bc9d93dSMark Murray syslog(LOG_ERR, "pam_end: %s", pam_strerror(pamh, e)); 11745bc9d93dSMark Murray pamh = NULL; 11755bc9d93dSMark Murray #endif 1176ea022d16SRodney W. Grimes logged_in = 0; 1177ea022d16SRodney W. Grimes guest = 0; 1178a5a4544eSPaul Traina dochroot = 0; 1179ea022d16SRodney W. Grimes } 1180ea022d16SRodney W. Grimes 11815bc9d93dSMark Murray #ifdef USE_PAM 11826c9134c0SMark Murray 11836c9134c0SMark Murray /* 11846c9134c0SMark Murray * the following code is stolen from imap-uw PAM authentication module and 11856c9134c0SMark Murray * login.c 11866c9134c0SMark Murray */ 11876c9134c0SMark Murray #define COPY_STRING(s) (s ? strdup(s) : NULL) 11886c9134c0SMark Murray 11896c9134c0SMark Murray struct cred_t { 11906c9134c0SMark Murray const char *uname; /* user name */ 11916c9134c0SMark Murray const char *pass; /* password */ 11926c9134c0SMark Murray }; 11936c9134c0SMark Murray typedef struct cred_t cred_t; 11946c9134c0SMark Murray 11956c9134c0SMark Murray static int 11966c9134c0SMark Murray auth_conv(int num_msg, const struct pam_message **msg, 11976c9134c0SMark Murray struct pam_response **resp, void *appdata) 11986c9134c0SMark Murray { 11996c9134c0SMark Murray int i; 12006c9134c0SMark Murray cred_t *cred = (cred_t *) appdata; 120160769b19SDag-Erling Smørgrav struct pam_response *reply; 120260769b19SDag-Erling Smørgrav 120360769b19SDag-Erling Smørgrav reply = calloc(num_msg, sizeof *reply); 120460769b19SDag-Erling Smørgrav if (reply == NULL) 120560769b19SDag-Erling Smørgrav return PAM_BUF_ERR; 12066c9134c0SMark Murray 12076c9134c0SMark Murray for (i = 0; i < num_msg; i++) { 12086c9134c0SMark Murray switch (msg[i]->msg_style) { 12096c9134c0SMark Murray case PAM_PROMPT_ECHO_ON: /* assume want user name */ 12106c9134c0SMark Murray reply[i].resp_retcode = PAM_SUCCESS; 12116c9134c0SMark Murray reply[i].resp = COPY_STRING(cred->uname); 12126c9134c0SMark Murray /* PAM frees resp. */ 12136c9134c0SMark Murray break; 12146c9134c0SMark Murray case PAM_PROMPT_ECHO_OFF: /* assume want password */ 12156c9134c0SMark Murray reply[i].resp_retcode = PAM_SUCCESS; 12166c9134c0SMark Murray reply[i].resp = COPY_STRING(cred->pass); 12176c9134c0SMark Murray /* PAM frees resp. */ 12186c9134c0SMark Murray break; 12196c9134c0SMark Murray case PAM_TEXT_INFO: 12206c9134c0SMark Murray case PAM_ERROR_MSG: 12216c9134c0SMark Murray reply[i].resp_retcode = PAM_SUCCESS; 12226c9134c0SMark Murray reply[i].resp = NULL; 12236c9134c0SMark Murray break; 12246c9134c0SMark Murray default: /* unknown message style */ 12256c9134c0SMark Murray free(reply); 12266c9134c0SMark Murray return PAM_CONV_ERR; 12276c9134c0SMark Murray } 12286c9134c0SMark Murray } 12296c9134c0SMark Murray 12306c9134c0SMark Murray *resp = reply; 12316c9134c0SMark Murray return PAM_SUCCESS; 12326c9134c0SMark Murray } 12336c9134c0SMark Murray 12346c9134c0SMark Murray /* 12356c9134c0SMark Murray * Attempt to authenticate the user using PAM. Returns 0 if the user is 12366c9134c0SMark Murray * authenticated, or 1 if not authenticated. If some sort of PAM system 12376c9134c0SMark Murray * error occurs (e.g., the "/etc/pam.conf" file is missing) then this 12386c9134c0SMark Murray * function returns -1. This can be used as an indication that we should 12396c9134c0SMark Murray * fall back to a different authentication mechanism. 12406c9134c0SMark Murray */ 12416c9134c0SMark Murray static int 12426c9134c0SMark Murray auth_pam(struct passwd **ppw, const char *pass) 12436c9134c0SMark Murray { 12446c9134c0SMark Murray pam_handle_t *pamh = NULL; 12456c9134c0SMark Murray const char *tmpl_user; 12466c9134c0SMark Murray const void *item; 12476c9134c0SMark Murray int rval; 12486c9134c0SMark Murray int e; 12496c9134c0SMark Murray cred_t auth_cred = { (*ppw)->pw_name, pass }; 12506c9134c0SMark Murray struct pam_conv conv = { &auth_conv, &auth_cred }; 12516c9134c0SMark Murray 12526c9134c0SMark Murray e = pam_start("ftpd", (*ppw)->pw_name, &conv, &pamh); 12536c9134c0SMark Murray if (e != PAM_SUCCESS) { 12546c9134c0SMark Murray syslog(LOG_ERR, "pam_start: %s", pam_strerror(pamh, e)); 12556c9134c0SMark Murray return -1; 12566c9134c0SMark Murray } 12576c9134c0SMark Murray 1258ea413ab7SGuido van Rooij e = pam_set_item(pamh, PAM_RHOST, remotehost); 1259ea413ab7SGuido van Rooij if (e != PAM_SUCCESS) { 1260ea413ab7SGuido van Rooij syslog(LOG_ERR, "pam_set_item(PAM_RHOST): %s", 1261ea413ab7SGuido van Rooij pam_strerror(pamh, e)); 1262ea413ab7SGuido van Rooij return -1; 1263ea413ab7SGuido van Rooij } 1264ea413ab7SGuido van Rooij 12656c9134c0SMark Murray e = pam_authenticate(pamh, 0); 12666c9134c0SMark Murray switch (e) { 12676c9134c0SMark Murray case PAM_SUCCESS: 12686c9134c0SMark Murray /* 12696c9134c0SMark Murray * With PAM we support the concept of a "template" 12706c9134c0SMark Murray * user. The user enters a login name which is 12716c9134c0SMark Murray * authenticated by PAM, usually via a remote service 12726c9134c0SMark Murray * such as RADIUS or TACACS+. If authentication 12736c9134c0SMark Murray * succeeds, a different but related "template" name 12746c9134c0SMark Murray * is used for setting the credentials, shell, and 12756c9134c0SMark Murray * home directory. The name the user enters need only 12766c9134c0SMark Murray * exist on the remote authentication server, but the 12776c9134c0SMark Murray * template name must be present in the local password 12786c9134c0SMark Murray * database. 12796c9134c0SMark Murray * 12806c9134c0SMark Murray * This is supported by two various mechanisms in the 12816c9134c0SMark Murray * individual modules. However, from the application's 12826c9134c0SMark Murray * point of view, the template user is always passed 12836c9134c0SMark Murray * back as a changed value of the PAM_USER item. 12846c9134c0SMark Murray */ 12856c9134c0SMark Murray if ((e = pam_get_item(pamh, PAM_USER, &item)) == 12866c9134c0SMark Murray PAM_SUCCESS) { 12876c9134c0SMark Murray tmpl_user = (const char *) item; 12886c9134c0SMark Murray if (strcmp((*ppw)->pw_name, tmpl_user) != 0) 12896c9134c0SMark Murray *ppw = getpwnam(tmpl_user); 12906c9134c0SMark Murray } else 12916c9134c0SMark Murray syslog(LOG_ERR, "Couldn't get PAM_USER: %s", 12926c9134c0SMark Murray pam_strerror(pamh, e)); 12936c9134c0SMark Murray rval = 0; 12946c9134c0SMark Murray break; 12956c9134c0SMark Murray 12966c9134c0SMark Murray case PAM_AUTH_ERR: 12976c9134c0SMark Murray case PAM_USER_UNKNOWN: 12986c9134c0SMark Murray case PAM_MAXTRIES: 12996c9134c0SMark Murray rval = 1; 13006c9134c0SMark Murray break; 13016c9134c0SMark Murray 13026c9134c0SMark Murray default: 13035bc9d93dSMark Murray syslog(LOG_ERR, "pam_authenticate: %s", pam_strerror(pamh, e)); 13046c9134c0SMark Murray rval = -1; 13056c9134c0SMark Murray break; 13066c9134c0SMark Murray } 13076c9134c0SMark Murray 13085bc9d93dSMark Murray if (rval == 0) { 13095bc9d93dSMark Murray e = pam_acct_mgmt(pamh, 0); 13105bc9d93dSMark Murray if (e == PAM_NEW_AUTHTOK_REQD) { 13115bc9d93dSMark Murray e = pam_chauthtok(pamh, PAM_CHANGE_EXPIRED_AUTHTOK); 13125bc9d93dSMark Murray if (e != PAM_SUCCESS) { 13135bc9d93dSMark Murray syslog(LOG_ERR, "pam_chauthtok: %s", pam_strerror(pamh, e)); 13145bc9d93dSMark Murray rval = 1; 13155bc9d93dSMark Murray } 13165bc9d93dSMark Murray } else if (e != PAM_SUCCESS) { 13175bc9d93dSMark Murray rval = 1; 13185bc9d93dSMark Murray } 13195bc9d93dSMark Murray } 13205bc9d93dSMark Murray 13215bc9d93dSMark Murray if (rval != 0) { 13226c9134c0SMark Murray if ((e = pam_end(pamh, e)) != PAM_SUCCESS) { 13236c9134c0SMark Murray syslog(LOG_ERR, "pam_end: %s", pam_strerror(pamh, e)); 13245bc9d93dSMark Murray } 13255bc9d93dSMark Murray pamh = NULL; 13266c9134c0SMark Murray } 13276c9134c0SMark Murray return rval; 13286c9134c0SMark Murray } 13296c9134c0SMark Murray 13305bc9d93dSMark Murray #endif /* USE_PAM */ 13316c9134c0SMark Murray 1332ea022d16SRodney W. Grimes void 1333e4bc453cSWarner Losh pass(char *passwd) 1334ea022d16SRodney W. Grimes { 1335a5a4544eSPaul Traina int rval; 1336ea022d16SRodney W. Grimes FILE *fd; 1337b071c689SDavid Nugent #ifdef LOGIN_CAP 1338b071c689SDavid Nugent login_cap_t *lc = NULL; 1339b071c689SDavid Nugent #endif 13405bc9d93dSMark Murray #ifdef USE_PAM 13415bc9d93dSMark Murray int e; 13425bc9d93dSMark Murray #endif 1343ce9287fcSYaroslav Tykhiy char *chrootdir; 1344341e476eSYaroslav Tykhiy char *residue = NULL; 134547499ecdSAndrey A. Chernov char *xpasswd; 1346ea022d16SRodney W. Grimes 1347ea022d16SRodney W. Grimes if (logged_in || askpasswd == 0) { 1348ea022d16SRodney W. Grimes reply(503, "Login with USER first."); 1349ea022d16SRodney W. Grimes return; 1350ea022d16SRodney W. Grimes } 1351ea022d16SRodney W. Grimes askpasswd = 0; 1352ea022d16SRodney W. Grimes if (!guest) { /* "ftp" is only account allowed no password */ 1353a5a4544eSPaul Traina if (pw == NULL) { 1354a5a4544eSPaul Traina rval = 1; /* failure below */ 1355a5a4544eSPaul Traina goto skip; 1356a5a4544eSPaul Traina } 13575bc9d93dSMark Murray #ifdef USE_PAM 13586c9134c0SMark Murray rval = auth_pam(&pw, passwd); 1359f650a124SAndrey A. Chernov if (rval >= 0) { 1360f650a124SAndrey A. Chernov opieunlock(); 1361a5a4544eSPaul Traina goto skip; 1362f650a124SAndrey A. Chernov } 1363f650a124SAndrey A. Chernov #endif 136447499ecdSAndrey A. Chernov if (opieverify(&opiedata, passwd) == 0) 136547499ecdSAndrey A. Chernov xpasswd = pw->pw_passwd; 1366f650a124SAndrey A. Chernov else if (pwok) { 136747499ecdSAndrey A. Chernov xpasswd = crypt(passwd, pw->pw_passwd); 1368f650a124SAndrey A. Chernov if (passwd[0] == '\0' && pw->pw_passwd[0] != '\0') 1369f650a124SAndrey A. Chernov xpasswd = ":"; 1370f650a124SAndrey A. Chernov } else { 137147499ecdSAndrey A. Chernov rval = 1; 137247499ecdSAndrey A. Chernov goto skip; 137347499ecdSAndrey A. Chernov } 137447499ecdSAndrey A. Chernov rval = strcmp(pw->pw_passwd, xpasswd); 1375f650a124SAndrey A. Chernov if (pw->pw_expire && time(NULL) >= pw->pw_expire) 1376a5a4544eSPaul Traina rval = 1; /* failure */ 1377a5a4544eSPaul Traina skip: 1378a5a4544eSPaul Traina /* 1379a5a4544eSPaul Traina * If rval == 1, the user failed the authentication check 13806c9134c0SMark Murray * above. If rval == 0, either PAM or local authentication 1381a5a4544eSPaul Traina * succeeded. 1382a5a4544eSPaul Traina */ 1383a5a4544eSPaul Traina if (rval) { 1384ea022d16SRodney W. Grimes reply(530, "Login incorrect."); 1385b8939f6fSYaroslav Tykhiy if (logging) { 1386ea022d16SRodney W. Grimes syslog(LOG_NOTICE, 1387b8939f6fSYaroslav Tykhiy "FTP LOGIN FAILED FROM %s", 1388b8939f6fSYaroslav Tykhiy remotehost); 1389b8939f6fSYaroslav Tykhiy syslog(LOG_AUTHPRIV | LOG_NOTICE, 1390ea022d16SRodney W. Grimes "FTP LOGIN FAILED FROM %s, %s", 1391ea022d16SRodney W. Grimes remotehost, curname); 1392b8939f6fSYaroslav Tykhiy } 1393ea022d16SRodney W. Grimes pw = NULL; 1394ea022d16SRodney W. Grimes if (login_attempts++ >= 5) { 1395ea022d16SRodney W. Grimes syslog(LOG_NOTICE, 1396ea022d16SRodney W. Grimes "repeated login failures from %s", 1397ea022d16SRodney W. Grimes remotehost); 1398ea022d16SRodney W. Grimes exit(0); 1399ea022d16SRodney W. Grimes } 1400ea022d16SRodney W. Grimes return; 1401ea022d16SRodney W. Grimes } 1402ea022d16SRodney W. Grimes } 1403ea022d16SRodney W. Grimes login_attempts = 0; /* this time successful */ 1404ea022d16SRodney W. Grimes if (setegid((gid_t)pw->pw_gid) < 0) { 1405ea022d16SRodney W. Grimes reply(550, "Can't set gid."); 1406ea022d16SRodney W. Grimes return; 1407ea022d16SRodney W. Grimes } 1408b071c689SDavid Nugent /* May be overridden by login.conf */ 1409b071c689SDavid Nugent (void) umask(defumask); 1410b071c689SDavid Nugent #ifdef LOGIN_CAP 14115d0bfe39SDavid Nugent if ((lc = login_getpwclass(pw)) != NULL) { 1412b071c689SDavid Nugent char remote_ip[MAXHOSTNAMELEN]; 1413b071c689SDavid Nugent 14144dd8b5abSYoshinobu Inoue getnameinfo((struct sockaddr *)&his_addr, his_addr.su_len, 14154dd8b5abSYoshinobu Inoue remote_ip, sizeof(remote_ip) - 1, NULL, 0, 1416b0f06defSHajimu UMEMOTO NI_NUMERICHOST); 1417b071c689SDavid Nugent remote_ip[sizeof(remote_ip) - 1] = 0; 1418b071c689SDavid Nugent if (!auth_hostok(lc, remotehost, remote_ip)) { 1419b071c689SDavid Nugent syslog(LOG_INFO|LOG_AUTH, 1420b071c689SDavid Nugent "FTP LOGIN FAILED (HOST) as %s: permission denied.", 1421b071c689SDavid Nugent pw->pw_name); 1422b071c689SDavid Nugent reply(530, "Permission denied.\n"); 1423b071c689SDavid Nugent pw = NULL; 1424b071c689SDavid Nugent return; 1425b071c689SDavid Nugent } 1426b071c689SDavid Nugent if (!auth_timeok(lc, time(NULL))) { 1427b071c689SDavid Nugent reply(530, "Login not available right now.\n"); 1428b071c689SDavid Nugent pw = NULL; 1429b071c689SDavid Nugent return; 1430b071c689SDavid Nugent } 1431b071c689SDavid Nugent } 1432b071c689SDavid Nugent setusercontext(lc, pw, (uid_t)0, 1433e6fa0d43SDag-Erling Smørgrav LOGIN_SETLOGIN|LOGIN_SETGROUP|LOGIN_SETPRIORITY| 1434d9e2c424SRobert Watson LOGIN_SETRESOURCES|LOGIN_SETUMASK|LOGIN_SETMAC); 1435b071c689SDavid Nugent #else 1436e6fa0d43SDag-Erling Smørgrav setlogin(pw->pw_name); 1437ea022d16SRodney W. Grimes (void) initgroups(pw->pw_name, pw->pw_gid); 1438b071c689SDavid Nugent #endif 1439ea022d16SRodney W. Grimes 14405bc9d93dSMark Murray #ifdef USE_PAM 14415bc9d93dSMark Murray if (pamh) { 14425bc9d93dSMark Murray if ((e = pam_open_session(pamh, 0)) != PAM_SUCCESS) { 14435bc9d93dSMark Murray syslog(LOG_ERR, "pam_open_session: %s", pam_strerror(pamh, e)); 14445bc9d93dSMark Murray } else if ((e = pam_setcred(pamh, PAM_ESTABLISH_CRED)) != PAM_SUCCESS) { 14455bc9d93dSMark Murray syslog(LOG_ERR, "pam_setcred: %s", pam_strerror(pamh, e)); 14465bc9d93dSMark Murray } 14475bc9d93dSMark Murray } 14485bc9d93dSMark Murray #endif 14495bc9d93dSMark Murray 1450ea022d16SRodney W. Grimes /* open wtmp before chroot */ 14515d7e0128SYaroslav Tykhiy if (dowtmp) 14525d7e0128SYaroslav Tykhiy ftpd_logwtmp(ttyline, pw->pw_name, 14535d7e0128SYaroslav Tykhiy (struct sockaddr *)&his_addr); 1454ea022d16SRodney W. Grimes logged_in = 1; 1455ea022d16SRodney W. Grimes 1456a5a4544eSPaul Traina if (guest && stats && statfd < 0) 1457ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 145863047c6fSDavid E. O'Brien statfd = open(thishost->statfile, O_WRONLY|O_APPEND); 1459ea4e54b9SDavid Nugent #else 146063047c6fSDavid E. O'Brien statfd = open(_PATH_FTPDSTATFILE, O_WRONLY|O_APPEND); 1461ea4e54b9SDavid Nugent #endif 146263047c6fSDavid E. O'Brien if (statfd < 0) 14633eb568f2SGuido van Rooij stats = 0; 14643eb568f2SGuido van Rooij 1465b071c689SDavid Nugent dochroot = 1466341e476eSYaroslav Tykhiy checkuser(_PATH_FTPCHROOT, pw->pw_name, 1, &residue) 1467b071c689SDavid Nugent #ifdef LOGIN_CAP /* Allow login.conf configuration as well */ 14688657b576SYaroslav Tykhiy || login_getcapbool(lc, "ftp-chroot", 0) 1469b071c689SDavid Nugent #endif 14708657b576SYaroslav Tykhiy ; 1471ce9287fcSYaroslav Tykhiy chrootdir = NULL; 1472ea022d16SRodney W. Grimes /* 1473ce9287fcSYaroslav Tykhiy * For a chrooted local user, 1474ce9287fcSYaroslav Tykhiy * a) see whether ftpchroot(5) specifies a chroot directory, 1475ce9287fcSYaroslav Tykhiy * b) extract the directory pathname from the line, 1476ce9287fcSYaroslav Tykhiy * c) expand it to the absolute pathname if necessary. 1477ea022d16SRodney W. Grimes */ 1478ce9287fcSYaroslav Tykhiy if (dochroot && residue && 147939bce482SYaroslav Tykhiy (chrootdir = strtok(residue, " \t")) != NULL) { 148039bce482SYaroslav Tykhiy if (chrootdir[0] != '/') 1481341e476eSYaroslav Tykhiy asprintf(&chrootdir, "%s/%s", pw->pw_dir, chrootdir); 148239bce482SYaroslav Tykhiy else 148339bce482SYaroslav Tykhiy chrootdir = strdup(chrootdir); /* so it can be freed */ 1484341e476eSYaroslav Tykhiy if (chrootdir == NULL) 14858657b576SYaroslav Tykhiy fatalerror("Ran out of memory."); 14868657b576SYaroslav Tykhiy } 1487ce9287fcSYaroslav Tykhiy if (guest || dochroot) { 1488ce9287fcSYaroslav Tykhiy /* 1489ce9287fcSYaroslav Tykhiy * If no chroot directory set yet, use the login directory. 1490ce9287fcSYaroslav Tykhiy * Copy it so it can be modified while pw->pw_dir stays intact. 1491ce9287fcSYaroslav Tykhiy */ 1492ce9287fcSYaroslav Tykhiy if (chrootdir == NULL && 1493ce9287fcSYaroslav Tykhiy (chrootdir = strdup(pw->pw_dir)) == NULL) 1494ce9287fcSYaroslav Tykhiy fatalerror("Ran out of memory."); 1495ce9287fcSYaroslav Tykhiy /* 1496ce9287fcSYaroslav Tykhiy * Check for the "/chroot/./home" syntax, 1497ce9287fcSYaroslav Tykhiy * separate the chroot and home directory pathnames. 1498ce9287fcSYaroslav Tykhiy */ 1499ce9287fcSYaroslav Tykhiy if ((homedir = strstr(chrootdir, "/./")) != NULL) { 1500ce9287fcSYaroslav Tykhiy *(homedir++) = '\0'; /* wipe '/' */ 1501ce9287fcSYaroslav Tykhiy homedir++; /* skip '.' */ 1502ce9287fcSYaroslav Tykhiy /* so chrootdir can be freed later */ 1503ce9287fcSYaroslav Tykhiy if ((homedir = strdup(homedir)) == NULL) 1504ce9287fcSYaroslav Tykhiy fatalerror("Ran out of memory."); 1505ce9287fcSYaroslav Tykhiy } else { 1506ce9287fcSYaroslav Tykhiy /* 1507ce9287fcSYaroslav Tykhiy * We MUST do a chdir() after the chroot. Otherwise 1508ce9287fcSYaroslav Tykhiy * the old current directory will be accessible as "." 1509ce9287fcSYaroslav Tykhiy * outside the new root! 1510ce9287fcSYaroslav Tykhiy */ 1511ce9287fcSYaroslav Tykhiy homedir = "/"; 1512ce9287fcSYaroslav Tykhiy } 1513ce9287fcSYaroslav Tykhiy /* 1514ce9287fcSYaroslav Tykhiy * Finally, do chroot() 1515ce9287fcSYaroslav Tykhiy */ 1516ce9287fcSYaroslav Tykhiy if (chroot(chrootdir) < 0) { 1517a5a4544eSPaul Traina reply(550, "Can't change root."); 1518a5a4544eSPaul Traina goto bad; 1519a5a4544eSPaul Traina } 1520ce9287fcSYaroslav Tykhiy } else /* real user w/o chroot */ 1521ce9287fcSYaroslav Tykhiy homedir = pw->pw_dir; 1522ce9287fcSYaroslav Tykhiy /* 1523ce9287fcSYaroslav Tykhiy * Set euid *before* doing chdir() so 1524ce9287fcSYaroslav Tykhiy * a) the user won't be carried to a directory that he couldn't reach 1525ce9287fcSYaroslav Tykhiy * on his own due to no permission to upper path components, 1526ce9287fcSYaroslav Tykhiy * b) NFS mounted homedirs w/restrictive permissions will be accessible 1527ce9287fcSYaroslav Tykhiy * (uid 0 has no root power over NFS if not mapped explicitly.) 1528ce9287fcSYaroslav Tykhiy */ 1529ea022d16SRodney W. Grimes if (seteuid((uid_t)pw->pw_uid) < 0) { 1530ea022d16SRodney W. Grimes reply(550, "Can't set uid."); 1531ea022d16SRodney W. Grimes goto bad; 1532ea022d16SRodney W. Grimes } 1533ce9287fcSYaroslav Tykhiy if (chdir(homedir) < 0) { 1534ce9287fcSYaroslav Tykhiy if (guest || dochroot) { 1535ce9287fcSYaroslav Tykhiy reply(550, "Can't change to base directory."); 1536ce9287fcSYaroslav Tykhiy goto bad; 1537ce9287fcSYaroslav Tykhiy } else { 1538ce9287fcSYaroslav Tykhiy if (chdir("/") < 0) { 1539ce9287fcSYaroslav Tykhiy reply(550, "Root is inaccessible."); 1540ce9287fcSYaroslav Tykhiy goto bad; 1541ce9287fcSYaroslav Tykhiy } 1542ce9287fcSYaroslav Tykhiy lreply(230, "No directory! Logging in with home=/"); 1543ce9287fcSYaroslav Tykhiy } 1544ce9287fcSYaroslav Tykhiy } 154582c76939SDavid Greenman 154682c76939SDavid Greenman /* 1547ea022d16SRodney W. Grimes * Display a login message, if it exists. 1548ea022d16SRodney W. Grimes * N.B. reply(230,) must follow the message. 1549ea022d16SRodney W. Grimes */ 1550ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 155163047c6fSDavid E. O'Brien fd = fopen(thishost->loginmsg, "r"); 1552ea4e54b9SDavid Nugent #else 155363047c6fSDavid E. O'Brien fd = fopen(_PATH_FTPLOGINMESG, "r"); 1554ea4e54b9SDavid Nugent #endif 155563047c6fSDavid E. O'Brien if (fd != NULL) { 1556ea022d16SRodney W. Grimes char *cp, line[LINE_MAX]; 1557ea022d16SRodney W. Grimes 1558ea022d16SRodney W. Grimes while (fgets(line, sizeof(line), fd) != NULL) { 1559ea022d16SRodney W. Grimes if ((cp = strchr(line, '\n')) != NULL) 1560ea022d16SRodney W. Grimes *cp = '\0'; 1561ea022d16SRodney W. Grimes lreply(230, "%s", line); 1562ea022d16SRodney W. Grimes } 1563ea022d16SRodney W. Grimes (void) fflush(stdout); 1564ea022d16SRodney W. Grimes (void) fclose(fd); 1565ea022d16SRodney W. Grimes } 1566ea022d16SRodney W. Grimes if (guest) { 15673eb568f2SGuido van Rooij if (ident != NULL) 15683eb568f2SGuido van Rooij free(ident); 156961f891a6SPaul Traina ident = strdup(passwd); 157061f891a6SPaul Traina if (ident == NULL) 1571618b0bbaSMark Murray fatalerror("Ran out of memory."); 157261f891a6SPaul Traina 1573ea022d16SRodney W. Grimes reply(230, "Guest login ok, access restrictions apply."); 1574ea022d16SRodney W. Grimes #ifdef SETPROCTITLE 1575ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 1576ea4e54b9SDavid Nugent if (thishost != firsthost) 1577ea4e54b9SDavid Nugent snprintf(proctitle, sizeof(proctitle), 1578b3a0a7cdSMike Heffner "%s: anonymous(%s)/%s", remotehost, hostname, 1579b3a0a7cdSMike Heffner passwd); 1580ea4e54b9SDavid Nugent else 1581ea4e54b9SDavid Nugent #endif 1582ea022d16SRodney W. Grimes snprintf(proctitle, sizeof(proctitle), 1583b3a0a7cdSMike Heffner "%s: anonymous/%s", remotehost, passwd); 1584b63e1fe2SPeter Wemm setproctitle("%s", proctitle); 1585ea022d16SRodney W. Grimes #endif /* SETPROCTITLE */ 1586ea022d16SRodney W. Grimes if (logging) 1587ea022d16SRodney W. Grimes syslog(LOG_INFO, "ANONYMOUS FTP LOGIN FROM %s, %s", 1588ea022d16SRodney W. Grimes remotehost, passwd); 1589ea022d16SRodney W. Grimes } else { 15903401a71fSDaniel O'Callaghan if (dochroot) 159111342ab1SYaroslav Tykhiy reply(230, "User %s logged in, " 159211342ab1SYaroslav Tykhiy "access restrictions apply.", pw->pw_name); 15933401a71fSDaniel O'Callaghan else 1594ea022d16SRodney W. Grimes reply(230, "User %s logged in.", pw->pw_name); 15953401a71fSDaniel O'Callaghan 1596ea022d16SRodney W. Grimes #ifdef SETPROCTITLE 1597ea022d16SRodney W. Grimes snprintf(proctitle, sizeof(proctitle), 15987a29d7daSYaroslav Tykhiy "%s: user/%s", remotehost, pw->pw_name); 1599b63e1fe2SPeter Wemm setproctitle("%s", proctitle); 1600ea022d16SRodney W. Grimes #endif /* SETPROCTITLE */ 1601ea022d16SRodney W. Grimes if (logging) 1602ea022d16SRodney W. Grimes syslog(LOG_INFO, "FTP LOGIN FROM %s as %s", 1603ea022d16SRodney W. Grimes remotehost, pw->pw_name); 1604ea022d16SRodney W. Grimes } 1605b071c689SDavid Nugent #ifdef LOGIN_CAP 1606b071c689SDavid Nugent login_close(lc); 1607b071c689SDavid Nugent #endif 1608ce9287fcSYaroslav Tykhiy if (chrootdir) 1609ce9287fcSYaroslav Tykhiy free(chrootdir); 1610ce9287fcSYaroslav Tykhiy if (residue) 1611ce9287fcSYaroslav Tykhiy free(residue); 1612ea022d16SRodney W. Grimes return; 1613ea022d16SRodney W. Grimes bad: 1614ea022d16SRodney W. Grimes /* Forget all about it... */ 1615b071c689SDavid Nugent #ifdef LOGIN_CAP 1616b071c689SDavid Nugent login_close(lc); 1617b071c689SDavid Nugent #endif 1618ce9287fcSYaroslav Tykhiy if (chrootdir) 1619ce9287fcSYaroslav Tykhiy free(chrootdir); 1620ce9287fcSYaroslav Tykhiy if (residue) 1621ce9287fcSYaroslav Tykhiy free(residue); 1622ea022d16SRodney W. Grimes end_login(); 1623ea022d16SRodney W. Grimes } 1624ea022d16SRodney W. Grimes 1625ea022d16SRodney W. Grimes void 1626e4bc453cSWarner Losh retrieve(char *cmd, char *name) 1627ea022d16SRodney W. Grimes { 1628ea022d16SRodney W. Grimes FILE *fin, *dout; 1629ea022d16SRodney W. Grimes struct stat st; 1630e4bc453cSWarner Losh int (*closefunc)(FILE *); 1631158a00b2SJohn Birrell time_t start; 1632ea022d16SRodney W. Grimes 1633ea022d16SRodney W. Grimes if (cmd == 0) { 1634ea022d16SRodney W. Grimes fin = fopen(name, "r"), closefunc = fclose; 1635ea022d16SRodney W. Grimes st.st_size = 0; 1636ea022d16SRodney W. Grimes } else { 1637ea022d16SRodney W. Grimes char line[BUFSIZ]; 1638ea022d16SRodney W. Grimes 1639e760ef2cSWarner Losh (void) snprintf(line, sizeof(line), cmd, name), name = line; 1640ea022d16SRodney W. Grimes fin = ftpd_popen(line, "r"), closefunc = ftpd_pclose; 1641ea022d16SRodney W. Grimes st.st_size = -1; 1642ea022d16SRodney W. Grimes st.st_blksize = BUFSIZ; 1643ea022d16SRodney W. Grimes } 1644ea022d16SRodney W. Grimes if (fin == NULL) { 1645ea022d16SRodney W. Grimes if (errno != 0) { 1646ea022d16SRodney W. Grimes perror_reply(550, name); 1647ea022d16SRodney W. Grimes if (cmd == 0) { 1648ea022d16SRodney W. Grimes LOGCMD("get", name); 1649ea022d16SRodney W. Grimes } 1650ea022d16SRodney W. Grimes } 1651ea022d16SRodney W. Grimes return; 1652ea022d16SRodney W. Grimes } 1653ea022d16SRodney W. Grimes byte_count = -1; 1654ea701226SYaroslav Tykhiy if (cmd == 0) { 1655ea701226SYaroslav Tykhiy if (fstat(fileno(fin), &st) < 0) { 1656ea701226SYaroslav Tykhiy perror_reply(550, name); 1657ea701226SYaroslav Tykhiy goto done; 1658ea701226SYaroslav Tykhiy } 1659ea701226SYaroslav Tykhiy if (!S_ISREG(st.st_mode)) { 166010e89104SYaroslav Tykhiy /* 166110e89104SYaroslav Tykhiy * Never sending a raw directory is a workaround 166210e89104SYaroslav Tykhiy * for buggy clients that will attempt to RETR 166310e89104SYaroslav Tykhiy * a directory before listing it, e.g., Mozilla. 166410e89104SYaroslav Tykhiy * Preventing a guest from getting irregular files 166510e89104SYaroslav Tykhiy * is a simple security measure. 166610e89104SYaroslav Tykhiy */ 166710e89104SYaroslav Tykhiy if (S_ISDIR(st.st_mode) || guest) { 1668ea022d16SRodney W. Grimes reply(550, "%s: not a plain file.", name); 1669ea022d16SRodney W. Grimes goto done; 1670ea022d16SRodney W. Grimes } 1671ea701226SYaroslav Tykhiy st.st_size = -1; 1672ea701226SYaroslav Tykhiy /* st.st_blksize is set for all descriptor types */ 1673ea701226SYaroslav Tykhiy } 1674ea701226SYaroslav Tykhiy } 1675ea022d16SRodney W. Grimes if (restart_point) { 1676ea022d16SRodney W. Grimes if (type == TYPE_A) { 1677ea022d16SRodney W. Grimes off_t i, n; 1678ea022d16SRodney W. Grimes int c; 1679ea022d16SRodney W. Grimes 1680ea022d16SRodney W. Grimes n = restart_point; 1681ea022d16SRodney W. Grimes i = 0; 1682ea022d16SRodney W. Grimes while (i++ < n) { 1683ea022d16SRodney W. Grimes if ((c=getc(fin)) == EOF) { 1684ea022d16SRodney W. Grimes perror_reply(550, name); 1685ea022d16SRodney W. Grimes goto done; 1686ea022d16SRodney W. Grimes } 1687ea022d16SRodney W. Grimes if (c == '\n') 1688ea022d16SRodney W. Grimes i++; 1689ea022d16SRodney W. Grimes } 1690ea022d16SRodney W. Grimes } else if (lseek(fileno(fin), restart_point, L_SET) < 0) { 1691ea022d16SRodney W. Grimes perror_reply(550, name); 1692ea022d16SRodney W. Grimes goto done; 1693ea022d16SRodney W. Grimes } 1694ea022d16SRodney W. Grimes } 1695ea022d16SRodney W. Grimes dout = dataconn(name, st.st_size, "w"); 1696ea022d16SRodney W. Grimes if (dout == NULL) 1697ea022d16SRodney W. Grimes goto done; 16983eb568f2SGuido van Rooij time(&start); 16999fc5823aSGarrett Wollman send_data(fin, dout, st.st_blksize, st.st_size, 17009fc5823aSGarrett Wollman restart_point == 0 && cmd == 0 && S_ISREG(st.st_mode)); 17013eb568f2SGuido van Rooij if (cmd == 0 && guest && stats) 17023eb568f2SGuido van Rooij logxfer(name, st.st_size, start); 1703ea022d16SRodney W. Grimes (void) fclose(dout); 1704ea022d16SRodney W. Grimes data = -1; 1705ea022d16SRodney W. Grimes pdata = -1; 1706ea022d16SRodney W. Grimes done: 1707ea022d16SRodney W. Grimes if (cmd == 0) 1708ea022d16SRodney W. Grimes LOGBYTES("get", name, byte_count); 1709ea022d16SRodney W. Grimes (*closefunc)(fin); 1710ea022d16SRodney W. Grimes } 1711ea022d16SRodney W. Grimes 1712ea022d16SRodney W. Grimes void 1713e4bc453cSWarner Losh store(char *name, char *mode, int unique) 1714ea022d16SRodney W. Grimes { 1715a117c345SYaroslav Tykhiy int fd; 1716ea022d16SRodney W. Grimes FILE *fout, *din; 1717e4bc453cSWarner Losh int (*closefunc)(FILE *); 1718ea022d16SRodney W. Grimes 1719a117c345SYaroslav Tykhiy if (*mode == 'a') { /* APPE */ 1720a117c345SYaroslav Tykhiy if (unique) { 1721a117c345SYaroslav Tykhiy /* Programming error */ 1722a117c345SYaroslav Tykhiy syslog(LOG_ERR, "Internal: unique flag to APPE"); 1723a117c345SYaroslav Tykhiy unique = 0; 1724a117c345SYaroslav Tykhiy } 1725a117c345SYaroslav Tykhiy if (guest && noguestmod) { 1726a117c345SYaroslav Tykhiy reply(550, "Appending to existing file denied"); 1727a117c345SYaroslav Tykhiy goto err; 1728a117c345SYaroslav Tykhiy } 1729a117c345SYaroslav Tykhiy restart_point = 0; /* not affected by preceding REST */ 1730a117c345SYaroslav Tykhiy } 1731a117c345SYaroslav Tykhiy if (unique) /* STOU overrides REST */ 1732a117c345SYaroslav Tykhiy restart_point = 0; 1733a117c345SYaroslav Tykhiy if (guest && noguestmod) { 1734a117c345SYaroslav Tykhiy if (restart_point) { /* guest STOR w/REST */ 1735a117c345SYaroslav Tykhiy reply(550, "Modifying existing file denied"); 1736a117c345SYaroslav Tykhiy goto err; 1737a117c345SYaroslav Tykhiy } else /* treat guest STOR as STOU */ 1738a117c345SYaroslav Tykhiy unique = 1; 1739ea022d16SRodney W. Grimes } 1740ea022d16SRodney W. Grimes 1741ea022d16SRodney W. Grimes if (restart_point) 1742a117c345SYaroslav Tykhiy mode = "r+"; /* so ASCII manual seek can work */ 1743a117c345SYaroslav Tykhiy if (unique) { 1744a117c345SYaroslav Tykhiy if ((fd = guniquefd(name, &name)) < 0) 1745a117c345SYaroslav Tykhiy goto err; 1746a117c345SYaroslav Tykhiy fout = fdopen(fd, mode); 1747a117c345SYaroslav Tykhiy } else 1748ea022d16SRodney W. Grimes fout = fopen(name, mode); 1749ea022d16SRodney W. Grimes closefunc = fclose; 1750ea022d16SRodney W. Grimes if (fout == NULL) { 1751ea022d16SRodney W. Grimes perror_reply(553, name); 1752a117c345SYaroslav Tykhiy goto err; 1753ea022d16SRodney W. Grimes } 1754ea022d16SRodney W. Grimes byte_count = -1; 1755ea022d16SRodney W. Grimes if (restart_point) { 1756ea022d16SRodney W. Grimes if (type == TYPE_A) { 1757ea022d16SRodney W. Grimes off_t i, n; 1758ea022d16SRodney W. Grimes int c; 1759ea022d16SRodney W. Grimes 1760ea022d16SRodney W. Grimes n = restart_point; 1761ea022d16SRodney W. Grimes i = 0; 1762ea022d16SRodney W. Grimes while (i++ < n) { 1763ea022d16SRodney W. Grimes if ((c=getc(fout)) == EOF) { 1764ea022d16SRodney W. Grimes perror_reply(550, name); 1765ea022d16SRodney W. Grimes goto done; 1766ea022d16SRodney W. Grimes } 1767ea022d16SRodney W. Grimes if (c == '\n') 1768ea022d16SRodney W. Grimes i++; 1769ea022d16SRodney W. Grimes } 1770ea022d16SRodney W. Grimes /* 1771ea022d16SRodney W. Grimes * We must do this seek to "current" position 1772ea022d16SRodney W. Grimes * because we are changing from reading to 1773ea022d16SRodney W. Grimes * writing. 1774ea022d16SRodney W. Grimes */ 1775e4a71114SAndrey A. Chernov if (fseeko(fout, (off_t)0, SEEK_CUR) < 0) { 1776ea022d16SRodney W. Grimes perror_reply(550, name); 1777ea022d16SRodney W. Grimes goto done; 1778ea022d16SRodney W. Grimes } 1779ea022d16SRodney W. Grimes } else if (lseek(fileno(fout), restart_point, L_SET) < 0) { 1780ea022d16SRodney W. Grimes perror_reply(550, name); 1781ea022d16SRodney W. Grimes goto done; 1782ea022d16SRodney W. Grimes } 1783ea022d16SRodney W. Grimes } 1784ea022d16SRodney W. Grimes din = dataconn(name, (off_t)-1, "r"); 1785ea022d16SRodney W. Grimes if (din == NULL) 1786ea022d16SRodney W. Grimes goto done; 1787ea022d16SRodney W. Grimes if (receive_data(din, fout) == 0) { 1788ea022d16SRodney W. Grimes if (unique) 1789ea022d16SRodney W. Grimes reply(226, "Transfer complete (unique file name:%s).", 1790ea022d16SRodney W. Grimes name); 1791ea022d16SRodney W. Grimes else 1792ea022d16SRodney W. Grimes reply(226, "Transfer complete."); 1793ea022d16SRodney W. Grimes } 1794ea022d16SRodney W. Grimes (void) fclose(din); 1795ea022d16SRodney W. Grimes data = -1; 1796ea022d16SRodney W. Grimes pdata = -1; 1797ea022d16SRodney W. Grimes done: 17987c20f337SYaroslav Tykhiy LOGBYTES(*mode == 'a' ? "append" : "put", name, byte_count); 1799ea022d16SRodney W. Grimes (*closefunc)(fout); 1800a117c345SYaroslav Tykhiy return; 1801a117c345SYaroslav Tykhiy err: 1802a117c345SYaroslav Tykhiy LOGCMD(*mode == 'a' ? "append" : "put" , name); 1803a117c345SYaroslav Tykhiy return; 1804ea022d16SRodney W. Grimes } 1805ea022d16SRodney W. Grimes 1806ea022d16SRodney W. Grimes static FILE * 1807e4bc453cSWarner Losh getdatasock(char *mode) 1808ea022d16SRodney W. Grimes { 1809ea022d16SRodney W. Grimes int on = 1, s, t, tries; 1810ea022d16SRodney W. Grimes 1811ea022d16SRodney W. Grimes if (data >= 0) 1812ea022d16SRodney W. Grimes return (fdopen(data, mode)); 18134dd8b5abSYoshinobu Inoue 18144dd8b5abSYoshinobu Inoue s = socket(data_dest.su_family, SOCK_STREAM, 0); 1815ea022d16SRodney W. Grimes if (s < 0) 1816ea022d16SRodney W. Grimes goto bad; 181757d4ef07SYaroslav Tykhiy if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on)) < 0) 1818406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "data setsockopt (SO_REUSEADDR): %m"); 1819ea022d16SRodney W. Grimes /* anchor socket to avoid multi-homing problems */ 18204dd8b5abSYoshinobu Inoue data_source = ctrl_addr; 182163591ba5SYaroslav Tykhiy data_source.su_port = htons(dataport); 18226c124a84SYaroslav Tykhiy (void) seteuid((uid_t)0); 1823ea022d16SRodney W. Grimes for (tries = 1; ; tries++) { 18249ec7612aSYaroslav Tykhiy /* 18259ec7612aSYaroslav Tykhiy * We should loop here since it's possible that 18269ec7612aSYaroslav Tykhiy * another ftpd instance has passed this point and is 18279ec7612aSYaroslav Tykhiy * trying to open a data connection in active mode now. 18289ec7612aSYaroslav Tykhiy * Until the other connection is opened, we'll be getting 18299ec7612aSYaroslav Tykhiy * EADDRINUSE because no SOCK_STREAM sockets in the system 18309ec7612aSYaroslav Tykhiy * can share both local and remote addresses, localIP:20 18319ec7612aSYaroslav Tykhiy * and *:* in this case. 18329ec7612aSYaroslav Tykhiy */ 1833ea022d16SRodney W. Grimes if (bind(s, (struct sockaddr *)&data_source, 18344dd8b5abSYoshinobu Inoue data_source.su_len) >= 0) 1835ea022d16SRodney W. Grimes break; 1836ea022d16SRodney W. Grimes if (errno != EADDRINUSE || tries > 10) 1837ea022d16SRodney W. Grimes goto bad; 1838ea022d16SRodney W. Grimes sleep(tries); 1839ea022d16SRodney W. Grimes } 1840ea022d16SRodney W. Grimes (void) seteuid((uid_t)pw->pw_uid); 1841ea022d16SRodney W. Grimes #ifdef IP_TOS 18424dd8b5abSYoshinobu Inoue if (data_source.su_family == AF_INET) 18434dd8b5abSYoshinobu Inoue { 1844ea022d16SRodney W. Grimes on = IPTOS_THROUGHPUT; 184557d4ef07SYaroslav Tykhiy if (setsockopt(s, IPPROTO_IP, IP_TOS, &on, sizeof(int)) < 0) 1846406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "data setsockopt (IP_TOS): %m"); 18474dd8b5abSYoshinobu Inoue } 1848ea022d16SRodney W. Grimes #endif 18499fc5823aSGarrett Wollman #ifdef TCP_NOPUSH 18509fc5823aSGarrett Wollman /* 18519fc5823aSGarrett Wollman * Turn off push flag to keep sender TCP from sending short packets 18529fc5823aSGarrett Wollman * at the boundaries of each write(). Should probably do a SO_SNDBUF 18539fc5823aSGarrett Wollman * to set the send buffer size as well, but that may not be desirable 18549fc5823aSGarrett Wollman * in heavy-load situations. 18559fc5823aSGarrett Wollman */ 18569fc5823aSGarrett Wollman on = 1; 185757d4ef07SYaroslav Tykhiy if (setsockopt(s, IPPROTO_TCP, TCP_NOPUSH, &on, sizeof on) < 0) 1858406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "data setsockopt (TCP_NOPUSH): %m"); 18599fc5823aSGarrett Wollman #endif 18609fc5823aSGarrett Wollman #ifdef SO_SNDBUF 18619fc5823aSGarrett Wollman on = 65536; 186257d4ef07SYaroslav Tykhiy if (setsockopt(s, SOL_SOCKET, SO_SNDBUF, &on, sizeof on) < 0) 1863406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "data setsockopt (SO_SNDBUF): %m"); 18649fc5823aSGarrett Wollman #endif 18659fc5823aSGarrett Wollman 1866ea022d16SRodney W. Grimes return (fdopen(s, mode)); 1867ea022d16SRodney W. Grimes bad: 1868ea022d16SRodney W. Grimes /* Return the real value of errno (close may change it) */ 1869ea022d16SRodney W. Grimes t = errno; 1870ea022d16SRodney W. Grimes (void) seteuid((uid_t)pw->pw_uid); 1871ea022d16SRodney W. Grimes (void) close(s); 1872ea022d16SRodney W. Grimes errno = t; 1873ea022d16SRodney W. Grimes return (NULL); 1874ea022d16SRodney W. Grimes } 1875ea022d16SRodney W. Grimes 1876ea022d16SRodney W. Grimes static FILE * 1877e4bc453cSWarner Losh dataconn(char *name, off_t size, char *mode) 1878ea022d16SRodney W. Grimes { 1879ea022d16SRodney W. Grimes char sizebuf[32]; 1880ea022d16SRodney W. Grimes FILE *file; 1881e5094456SCrist J. Clark int retry = 0, tos, conerrno; 1882ea022d16SRodney W. Grimes 1883ea022d16SRodney W. Grimes file_size = size; 1884ea022d16SRodney W. Grimes byte_count = 0; 1885ea022d16SRodney W. Grimes if (size != (off_t) -1) 1886e760ef2cSWarner Losh (void) snprintf(sizebuf, sizeof(sizebuf), " (%qd bytes)", size); 1887ea022d16SRodney W. Grimes else 1888e760ef2cSWarner Losh *sizebuf = '\0'; 1889ea022d16SRodney W. Grimes if (pdata >= 0) { 18904dd8b5abSYoshinobu Inoue union sockunion from; 18914cd48bacSYaroslav Tykhiy int flags; 18924dd8b5abSYoshinobu Inoue int s, fromlen = ctrl_addr.su_len; 1893d6ed3c37SGuido van Rooij struct timeval timeout; 1894d6ed3c37SGuido van Rooij fd_set set; 1895ea022d16SRodney W. Grimes 1896d6ed3c37SGuido van Rooij FD_ZERO(&set); 1897d6ed3c37SGuido van Rooij FD_SET(pdata, &set); 1898d6ed3c37SGuido van Rooij 1899d6ed3c37SGuido van Rooij timeout.tv_usec = 0; 1900d6ed3c37SGuido van Rooij timeout.tv_sec = 120; 1901d6ed3c37SGuido van Rooij 19024cd48bacSYaroslav Tykhiy /* 19034cd48bacSYaroslav Tykhiy * Granted a socket is in the blocking I/O mode, 19044cd48bacSYaroslav Tykhiy * accept() will block after a successful select() 19054cd48bacSYaroslav Tykhiy * if the selected connection dies in between. 19064cd48bacSYaroslav Tykhiy * Therefore set the non-blocking I/O flag here. 19074cd48bacSYaroslav Tykhiy */ 19084cd48bacSYaroslav Tykhiy if ((flags = fcntl(pdata, F_GETFL, 0)) == -1 || 19094cd48bacSYaroslav Tykhiy fcntl(pdata, F_SETFL, flags | O_NONBLOCK) == -1) 19104cd48bacSYaroslav Tykhiy goto pdata_err; 19114cd48bacSYaroslav Tykhiy if (select(pdata+1, &set, (fd_set *) 0, (fd_set *) 0, &timeout) <= 0 || 19124cd48bacSYaroslav Tykhiy (s = accept(pdata, (struct sockaddr *) &from, &fromlen)) < 0) 19134cd48bacSYaroslav Tykhiy goto pdata_err; 1914ea022d16SRodney W. Grimes (void) close(pdata); 1915ea022d16SRodney W. Grimes pdata = s; 19164cd48bacSYaroslav Tykhiy /* 1917f6daca0dSYaroslav Tykhiy * Unset the inherited non-blocking I/O flag 1918f6daca0dSYaroslav Tykhiy * on the child socket so stdio can work on it. 19194cd48bacSYaroslav Tykhiy */ 19204cd48bacSYaroslav Tykhiy if ((flags = fcntl(pdata, F_GETFL, 0)) == -1 || 19214cd48bacSYaroslav Tykhiy fcntl(pdata, F_SETFL, flags & ~O_NONBLOCK) == -1) 19224cd48bacSYaroslav Tykhiy goto pdata_err; 1923ea022d16SRodney W. Grimes #ifdef IP_TOS 19244dd8b5abSYoshinobu Inoue if (from.su_family == AF_INET) 19254dd8b5abSYoshinobu Inoue { 1926a5a4544eSPaul Traina tos = IPTOS_THROUGHPUT; 192757d4ef07SYaroslav Tykhiy if (setsockopt(s, IPPROTO_IP, IP_TOS, &tos, sizeof(int)) < 0) 1928406d1ae9SYaroslav Tykhiy syslog(LOG_WARNING, "pdata setsockopt (IP_TOS): %m"); 19294dd8b5abSYoshinobu Inoue } 1930ea022d16SRodney W. Grimes #endif 1931ea022d16SRodney W. Grimes reply(150, "Opening %s mode data connection for '%s'%s.", 1932ea022d16SRodney W. Grimes type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf); 1933ea022d16SRodney W. Grimes return (fdopen(pdata, mode)); 19344cd48bacSYaroslav Tykhiy pdata_err: 19354cd48bacSYaroslav Tykhiy reply(425, "Can't open data connection."); 19364cd48bacSYaroslav Tykhiy (void) close(pdata); 19374cd48bacSYaroslav Tykhiy pdata = -1; 19384cd48bacSYaroslav Tykhiy return (NULL); 1939ea022d16SRodney W. Grimes } 1940ea022d16SRodney W. Grimes if (data >= 0) { 1941ea022d16SRodney W. Grimes reply(125, "Using existing data connection for '%s'%s.", 1942ea022d16SRodney W. Grimes name, sizebuf); 1943ea022d16SRodney W. Grimes usedefault = 1; 1944ea022d16SRodney W. Grimes return (fdopen(data, mode)); 1945ea022d16SRodney W. Grimes } 1946ea022d16SRodney W. Grimes if (usedefault) 1947ea022d16SRodney W. Grimes data_dest = his_addr; 1948ea022d16SRodney W. Grimes usedefault = 1; 1949e5094456SCrist J. Clark do { 1950ea022d16SRodney W. Grimes file = getdatasock(mode); 1951ea022d16SRodney W. Grimes if (file == NULL) { 19524dd8b5abSYoshinobu Inoue char hostbuf[BUFSIZ], portbuf[BUFSIZ]; 19534dd8b5abSYoshinobu Inoue getnameinfo((struct sockaddr *)&data_source, 19544dd8b5abSYoshinobu Inoue data_source.su_len, hostbuf, sizeof(hostbuf) - 1, 19554dd8b5abSYoshinobu Inoue portbuf, sizeof(portbuf), 1956b0f06defSHajimu UMEMOTO NI_NUMERICHOST|NI_NUMERICSERV); 19574dd8b5abSYoshinobu Inoue reply(425, "Can't create data socket (%s,%s): %s.", 19584dd8b5abSYoshinobu Inoue hostbuf, portbuf, strerror(errno)); 1959ea022d16SRodney W. Grimes return (NULL); 1960ea022d16SRodney W. Grimes } 1961ea022d16SRodney W. Grimes data = fileno(file); 1962e5094456SCrist J. Clark conerrno = 0; 1963e5094456SCrist J. Clark if (connect(data, (struct sockaddr *)&data_dest, 1964e5094456SCrist J. Clark data_dest.su_len) == 0) 1965e5094456SCrist J. Clark break; 1966e5094456SCrist J. Clark conerrno = errno; 1967ea022d16SRodney W. Grimes (void) fclose(file); 1968ea022d16SRodney W. Grimes data = -1; 1969e5094456SCrist J. Clark if (conerrno == EADDRINUSE) { 1970e5094456SCrist J. Clark sleep((unsigned) swaitint); 1971e5094456SCrist J. Clark retry += swaitint; 1972e5094456SCrist J. Clark } else { 1973e5094456SCrist J. Clark break; 1974e5094456SCrist J. Clark } 1975e5094456SCrist J. Clark } while (retry <= swaitmax); 1976e5094456SCrist J. Clark if (conerrno != 0) { 1977e5094456SCrist J. Clark perror_reply(425, "Can't build data connection"); 1978ea022d16SRodney W. Grimes return (NULL); 1979ea022d16SRodney W. Grimes } 1980ea022d16SRodney W. Grimes reply(150, "Opening %s mode data connection for '%s'%s.", 1981ea022d16SRodney W. Grimes type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf); 1982ea022d16SRodney W. Grimes return (file); 1983ea022d16SRodney W. Grimes } 1984ea022d16SRodney W. Grimes 1985ea022d16SRodney W. Grimes /* 1986ea022d16SRodney W. Grimes * Tranfer the contents of "instr" to "outstr" peer using the appropriate 19879fc5823aSGarrett Wollman * encapsulation of the data subject to Mode, Structure, and Type. 1988ea022d16SRodney W. Grimes * 1989ea022d16SRodney W. Grimes * NB: Form isn't handled. 1990ea022d16SRodney W. Grimes */ 19914b82fc95SYaroslav Tykhiy static int 1992e4bc453cSWarner Losh send_data(FILE *instr, FILE *outstr, off_t blksize, off_t filesize, int isreg) 1993ea022d16SRodney W. Grimes { 1994db1c2da3SYaroslav Tykhiy int c, cp, filefd, netfd; 1995f6f0c4b9SDan Moschuk char *buf; 1996f6f0c4b9SDan Moschuk off_t cnt; 1997ea022d16SRodney W. Grimes 1998ea022d16SRodney W. Grimes transflag++; 1999ea022d16SRodney W. Grimes switch (type) { 2000ea022d16SRodney W. Grimes 2001ea022d16SRodney W. Grimes case TYPE_A: 2002db1c2da3SYaroslav Tykhiy cp = '\0'; 2003ea022d16SRodney W. Grimes while ((c = getc(instr)) != EOF) { 20044b82fc95SYaroslav Tykhiy if (recvurg) 20054b82fc95SYaroslav Tykhiy goto got_oob; 2006ea022d16SRodney W. Grimes byte_count++; 2007db1c2da3SYaroslav Tykhiy if (c == '\n' && cp != '\r') { 2008ea022d16SRodney W. Grimes if (ferror(outstr)) 2009ea022d16SRodney W. Grimes goto data_err; 2010ea022d16SRodney W. Grimes (void) putc('\r', outstr); 2011ea022d16SRodney W. Grimes } 2012ea022d16SRodney W. Grimes (void) putc(c, outstr); 2013db1c2da3SYaroslav Tykhiy cp = c; 2014ea022d16SRodney W. Grimes } 20154b82fc95SYaroslav Tykhiy if (recvurg) 20164b82fc95SYaroslav Tykhiy goto got_oob; 2017ea022d16SRodney W. Grimes fflush(outstr); 2018ea022d16SRodney W. Grimes transflag = 0; 2019ea022d16SRodney W. Grimes if (ferror(instr)) 2020ea022d16SRodney W. Grimes goto file_err; 2021ea022d16SRodney W. Grimes if (ferror(outstr)) 2022ea022d16SRodney W. Grimes goto data_err; 2023ea022d16SRodney W. Grimes reply(226, "Transfer complete."); 20244b82fc95SYaroslav Tykhiy return (0); 2025ea022d16SRodney W. Grimes 2026ea022d16SRodney W. Grimes case TYPE_I: 2027ea022d16SRodney W. Grimes case TYPE_L: 20289fc5823aSGarrett Wollman /* 20299fc5823aSGarrett Wollman * isreg is only set if we are not doing restart and we 20309fc5823aSGarrett Wollman * are sending a regular file 20319fc5823aSGarrett Wollman */ 20329fc5823aSGarrett Wollman netfd = fileno(outstr); 20339fc5823aSGarrett Wollman filefd = fileno(instr); 20349fc5823aSGarrett Wollman 2035f6f0c4b9SDan Moschuk if (isreg) { 20369fc5823aSGarrett Wollman 2037f6f0c4b9SDan Moschuk off_t offset; 2038f6f0c4b9SDan Moschuk int err; 2039f6f0c4b9SDan Moschuk 2040f6f0c4b9SDan Moschuk err = cnt = offset = 0; 2041f6f0c4b9SDan Moschuk 2042492f1d9cSMaxim Konovalov while (err != -1 && filesize > 0) { 2043492f1d9cSMaxim Konovalov err = sendfile(filefd, netfd, offset, 0, 2044f6f0c4b9SDan Moschuk (struct sf_hdtr *) NULL, &cnt, 0); 20453af48c42SMaxim Konovalov /* 20463af48c42SMaxim Konovalov * Calculate byte_count before OOB processing. 20473af48c42SMaxim Konovalov * It can be used in myoob() later. 20483af48c42SMaxim Konovalov */ 20493af48c42SMaxim Konovalov byte_count += cnt; 20504b82fc95SYaroslav Tykhiy if (recvurg) 20514b82fc95SYaroslav Tykhiy goto got_oob; 2052f6f0c4b9SDan Moschuk offset += cnt; 2053492f1d9cSMaxim Konovalov filesize -= cnt; 2054f6f0c4b9SDan Moschuk 2055f6f0c4b9SDan Moschuk if (err == -1) { 2056f6f0c4b9SDan Moschuk if (!cnt) 2057f6f0c4b9SDan Moschuk goto oldway; 2058f6f0c4b9SDan Moschuk 20599fc5823aSGarrett Wollman goto data_err; 2060f6f0c4b9SDan Moschuk } 2061f6f0c4b9SDan Moschuk } 2062f6f0c4b9SDan Moschuk 20630849c184SDan Moschuk transflag = 0; 20649fc5823aSGarrett Wollman reply(226, "Transfer complete."); 20654b82fc95SYaroslav Tykhiy return (0); 20669fc5823aSGarrett Wollman } 20679fc5823aSGarrett Wollman 20689fc5823aSGarrett Wollman oldway: 2069ea022d16SRodney W. Grimes if ((buf = malloc((u_int)blksize)) == NULL) { 2070ea022d16SRodney W. Grimes transflag = 0; 2071ea022d16SRodney W. Grimes perror_reply(451, "Local resource failure: malloc"); 20724b82fc95SYaroslav Tykhiy return (-1); 2073ea022d16SRodney W. Grimes } 20749fc5823aSGarrett Wollman 2075ea022d16SRodney W. Grimes while ((cnt = read(filefd, buf, (u_int)blksize)) > 0 && 2076ea022d16SRodney W. Grimes write(netfd, buf, cnt) == cnt) 2077ea022d16SRodney W. Grimes byte_count += cnt; 2078ea022d16SRodney W. Grimes transflag = 0; 2079ea022d16SRodney W. Grimes (void)free(buf); 2080ea022d16SRodney W. Grimes if (cnt != 0) { 2081ea022d16SRodney W. Grimes if (cnt < 0) 2082ea022d16SRodney W. Grimes goto file_err; 2083ea022d16SRodney W. Grimes goto data_err; 2084ea022d16SRodney W. Grimes } 2085ea022d16SRodney W. Grimes reply(226, "Transfer complete."); 20864b82fc95SYaroslav Tykhiy return (0); 2087ea022d16SRodney W. Grimes default: 2088ea022d16SRodney W. Grimes transflag = 0; 2089ea022d16SRodney W. Grimes reply(550, "Unimplemented TYPE %d in send_data", type); 20904b82fc95SYaroslav Tykhiy return (-1); 2091ea022d16SRodney W. Grimes } 2092ea022d16SRodney W. Grimes 2093ea022d16SRodney W. Grimes data_err: 2094ea022d16SRodney W. Grimes transflag = 0; 2095ea022d16SRodney W. Grimes perror_reply(426, "Data connection"); 20964b82fc95SYaroslav Tykhiy return (-1); 2097ea022d16SRodney W. Grimes 2098ea022d16SRodney W. Grimes file_err: 2099ea022d16SRodney W. Grimes transflag = 0; 2100ea022d16SRodney W. Grimes perror_reply(551, "Error on input file"); 21014b82fc95SYaroslav Tykhiy return (-1); 21024b82fc95SYaroslav Tykhiy 21034b82fc95SYaroslav Tykhiy got_oob: 21044b82fc95SYaroslav Tykhiy myoob(); 21054b82fc95SYaroslav Tykhiy recvurg = 0; 21064b82fc95SYaroslav Tykhiy transflag = 0; 21074b82fc95SYaroslav Tykhiy return (-1); 2108ea022d16SRodney W. Grimes } 2109ea022d16SRodney W. Grimes 2110ea022d16SRodney W. Grimes /* 2111ea022d16SRodney W. Grimes * Transfer data from peer to "outstr" using the appropriate encapulation of 2112ea022d16SRodney W. Grimes * the data subject to Mode, Structure, and Type. 2113ea022d16SRodney W. Grimes * 2114ea022d16SRodney W. Grimes * N.B.: Form isn't handled. 2115ea022d16SRodney W. Grimes */ 2116ea022d16SRodney W. Grimes static int 2117e4bc453cSWarner Losh receive_data(FILE *instr, FILE *outstr) 2118ea022d16SRodney W. Grimes { 2119ea022d16SRodney W. Grimes int c; 212061f891a6SPaul Traina int cnt, bare_lfs; 2121ea022d16SRodney W. Grimes char buf[BUFSIZ]; 2122ea022d16SRodney W. Grimes 2123ea022d16SRodney W. Grimes transflag++; 212461f891a6SPaul Traina bare_lfs = 0; 212561f891a6SPaul Traina 2126ea022d16SRodney W. Grimes switch (type) { 2127ea022d16SRodney W. Grimes 2128ea022d16SRodney W. Grimes case TYPE_I: 2129ea022d16SRodney W. Grimes case TYPE_L: 2130ea022d16SRodney W. Grimes while ((cnt = read(fileno(instr), buf, sizeof(buf))) > 0) { 21314b82fc95SYaroslav Tykhiy if (recvurg) 21324b82fc95SYaroslav Tykhiy goto got_oob; 2133ea022d16SRodney W. Grimes if (write(fileno(outstr), buf, cnt) != cnt) 2134ea022d16SRodney W. Grimes goto file_err; 2135ea022d16SRodney W. Grimes byte_count += cnt; 2136ea022d16SRodney W. Grimes } 21374b82fc95SYaroslav Tykhiy if (recvurg) 21384b82fc95SYaroslav Tykhiy goto got_oob; 2139ea022d16SRodney W. Grimes if (cnt < 0) 2140ea022d16SRodney W. Grimes goto data_err; 2141ea022d16SRodney W. Grimes transflag = 0; 2142ea022d16SRodney W. Grimes return (0); 2143ea022d16SRodney W. Grimes 2144ea022d16SRodney W. Grimes case TYPE_E: 2145ea022d16SRodney W. Grimes reply(553, "TYPE E not implemented."); 2146ea022d16SRodney W. Grimes transflag = 0; 2147ea022d16SRodney W. Grimes return (-1); 2148ea022d16SRodney W. Grimes 2149ea022d16SRodney W. Grimes case TYPE_A: 2150ea022d16SRodney W. Grimes while ((c = getc(instr)) != EOF) { 21514b82fc95SYaroslav Tykhiy if (recvurg) 21524b82fc95SYaroslav Tykhiy goto got_oob; 2153ea022d16SRodney W. Grimes byte_count++; 2154ea022d16SRodney W. Grimes if (c == '\n') 2155ea022d16SRodney W. Grimes bare_lfs++; 2156ea022d16SRodney W. Grimes while (c == '\r') { 2157ea022d16SRodney W. Grimes if (ferror(outstr)) 2158ea022d16SRodney W. Grimes goto data_err; 2159ea022d16SRodney W. Grimes if ((c = getc(instr)) != '\n') { 2160ea022d16SRodney W. Grimes (void) putc ('\r', outstr); 2161ea022d16SRodney W. Grimes if (c == '\0' || c == EOF) 2162ea022d16SRodney W. Grimes goto contin2; 2163ea022d16SRodney W. Grimes } 2164ea022d16SRodney W. Grimes } 2165ea022d16SRodney W. Grimes (void) putc(c, outstr); 2166ea022d16SRodney W. Grimes contin2: ; 2167ea022d16SRodney W. Grimes } 21684b82fc95SYaroslav Tykhiy if (recvurg) 21694b82fc95SYaroslav Tykhiy goto got_oob; 2170ea022d16SRodney W. Grimes fflush(outstr); 2171ea022d16SRodney W. Grimes if (ferror(instr)) 2172ea022d16SRodney W. Grimes goto data_err; 2173ea022d16SRodney W. Grimes if (ferror(outstr)) 2174ea022d16SRodney W. Grimes goto file_err; 2175ea022d16SRodney W. Grimes transflag = 0; 2176ea022d16SRodney W. Grimes if (bare_lfs) { 2177ea022d16SRodney W. Grimes lreply(226, 2178ea022d16SRodney W. Grimes "WARNING! %d bare linefeeds received in ASCII mode", 2179ea022d16SRodney W. Grimes bare_lfs); 2180ea022d16SRodney W. Grimes (void)printf(" File may not have transferred correctly.\r\n"); 2181ea022d16SRodney W. Grimes } 2182ea022d16SRodney W. Grimes return (0); 2183ea022d16SRodney W. Grimes default: 2184ea022d16SRodney W. Grimes reply(550, "Unimplemented TYPE %d in receive_data", type); 2185ea022d16SRodney W. Grimes transflag = 0; 2186ea022d16SRodney W. Grimes return (-1); 2187ea022d16SRodney W. Grimes } 2188ea022d16SRodney W. Grimes 2189ea022d16SRodney W. Grimes data_err: 2190ea022d16SRodney W. Grimes transflag = 0; 2191ea022d16SRodney W. Grimes perror_reply(426, "Data Connection"); 2192ea022d16SRodney W. Grimes return (-1); 2193ea022d16SRodney W. Grimes 2194ea022d16SRodney W. Grimes file_err: 2195ea022d16SRodney W. Grimes transflag = 0; 2196ea022d16SRodney W. Grimes perror_reply(452, "Error writing file"); 2197ea022d16SRodney W. Grimes return (-1); 21984b82fc95SYaroslav Tykhiy 21994b82fc95SYaroslav Tykhiy got_oob: 22004b82fc95SYaroslav Tykhiy myoob(); 22014b82fc95SYaroslav Tykhiy recvurg = 0; 22024b82fc95SYaroslav Tykhiy transflag = 0; 22034b82fc95SYaroslav Tykhiy return (-1); 2204ea022d16SRodney W. Grimes } 2205ea022d16SRodney W. Grimes 2206ea022d16SRodney W. Grimes void 2207e4bc453cSWarner Losh statfilecmd(char *filename) 2208ea022d16SRodney W. Grimes { 2209ea022d16SRodney W. Grimes FILE *fin; 2210f8a581a0SYaroslav Tykhiy int atstart; 2211ea022d16SRodney W. Grimes int c; 2212ea022d16SRodney W. Grimes char line[LINE_MAX]; 2213ea022d16SRodney W. Grimes 2214af85d782SDavid Nugent (void)snprintf(line, sizeof(line), _PATH_LS " -lgA %s", filename); 2215ea022d16SRodney W. Grimes fin = ftpd_popen(line, "r"); 2216ea022d16SRodney W. Grimes lreply(211, "status of %s:", filename); 2217f8a581a0SYaroslav Tykhiy atstart = 1; 2218ea022d16SRodney W. Grimes while ((c = getc(fin)) != EOF) { 2219ea022d16SRodney W. Grimes if (c == '\n') { 2220ea022d16SRodney W. Grimes if (ferror(stdout)){ 2221ea022d16SRodney W. Grimes perror_reply(421, "control connection"); 2222ea022d16SRodney W. Grimes (void) ftpd_pclose(fin); 2223ea022d16SRodney W. Grimes dologout(1); 2224ea022d16SRodney W. Grimes /* NOTREACHED */ 2225ea022d16SRodney W. Grimes } 2226ea022d16SRodney W. Grimes if (ferror(fin)) { 2227ea022d16SRodney W. Grimes perror_reply(551, filename); 2228ea022d16SRodney W. Grimes (void) ftpd_pclose(fin); 2229ea022d16SRodney W. Grimes return; 2230ea022d16SRodney W. Grimes } 2231ea022d16SRodney W. Grimes (void) putc('\r', stdout); 2232ea022d16SRodney W. Grimes } 2233f8a581a0SYaroslav Tykhiy /* 2234f8a581a0SYaroslav Tykhiy * RFC 959 says neutral text should be prepended before 2235f8a581a0SYaroslav Tykhiy * a leading 3-digit number followed by whitespace, but 2236f8a581a0SYaroslav Tykhiy * many ftp clients can be confused by any leading digits, 2237f8a581a0SYaroslav Tykhiy * as a matter of fact. 2238f8a581a0SYaroslav Tykhiy */ 2239f8a581a0SYaroslav Tykhiy if (atstart && isdigit(c)) 2240f8a581a0SYaroslav Tykhiy (void) putc(' ', stdout); 2241ea022d16SRodney W. Grimes (void) putc(c, stdout); 2242f8a581a0SYaroslav Tykhiy atstart = (c == '\n'); 2243ea022d16SRodney W. Grimes } 2244ea022d16SRodney W. Grimes (void) ftpd_pclose(fin); 2245ea022d16SRodney W. Grimes reply(211, "End of Status"); 2246ea022d16SRodney W. Grimes } 2247ea022d16SRodney W. Grimes 2248ea022d16SRodney W. Grimes void 2249e4bc453cSWarner Losh statcmd(void) 2250ea022d16SRodney W. Grimes { 22514dd8b5abSYoshinobu Inoue union sockunion *su; 2252ea022d16SRodney W. Grimes u_char *a, *p; 2253b0f06defSHajimu UMEMOTO char hname[NI_MAXHOST]; 22544dd8b5abSYoshinobu Inoue int ispassive; 2255ea022d16SRodney W. Grimes 2256c152df28SYaroslav Tykhiy if (hostinfo) { 2257a23f61bcSYaroslav Tykhiy lreply(211, "%s FTP server status:", hostname); 2258ea022d16SRodney W. Grimes printf(" %s\r\n", version); 2259c152df28SYaroslav Tykhiy } else 2260c152df28SYaroslav Tykhiy lreply(211, "FTP server status:"); 2261ea022d16SRodney W. Grimes printf(" Connected to %s", remotehost); 22624dd8b5abSYoshinobu Inoue if (!getnameinfo((struct sockaddr *)&his_addr, his_addr.su_len, 2263b0f06defSHajimu UMEMOTO hname, sizeof(hname) - 1, NULL, 0, NI_NUMERICHOST)) { 22644dd8b5abSYoshinobu Inoue if (strcmp(hname, remotehost) != 0) 22654dd8b5abSYoshinobu Inoue printf(" (%s)", hname); 22664dd8b5abSYoshinobu Inoue } 2267ea022d16SRodney W. Grimes printf("\r\n"); 2268ea022d16SRodney W. Grimes if (logged_in) { 2269ea022d16SRodney W. Grimes if (guest) 2270ea022d16SRodney W. Grimes printf(" Logged in anonymously\r\n"); 2271ea022d16SRodney W. Grimes else 2272ea022d16SRodney W. Grimes printf(" Logged in as %s\r\n", pw->pw_name); 2273ea022d16SRodney W. Grimes } else if (askpasswd) 2274ea022d16SRodney W. Grimes printf(" Waiting for password\r\n"); 2275ea022d16SRodney W. Grimes else 2276ea022d16SRodney W. Grimes printf(" Waiting for user name\r\n"); 2277ea022d16SRodney W. Grimes printf(" TYPE: %s", typenames[type]); 2278ea022d16SRodney W. Grimes if (type == TYPE_A || type == TYPE_E) 2279ea022d16SRodney W. Grimes printf(", FORM: %s", formnames[form]); 2280ea022d16SRodney W. Grimes if (type == TYPE_L) 228189fdc4e1SMike Barcroft #if CHAR_BIT == 8 228289fdc4e1SMike Barcroft printf(" %d", CHAR_BIT); 2283ea022d16SRodney W. Grimes #else 2284ea022d16SRodney W. Grimes printf(" %d", bytesize); /* need definition! */ 2285ea022d16SRodney W. Grimes #endif 2286ea022d16SRodney W. Grimes printf("; STRUcture: %s; transfer MODE: %s\r\n", 2287ea022d16SRodney W. Grimes strunames[stru], modenames[mode]); 2288ea022d16SRodney W. Grimes if (data != -1) 2289ea022d16SRodney W. Grimes printf(" Data connection open\r\n"); 2290ea022d16SRodney W. Grimes else if (pdata != -1) { 22914dd8b5abSYoshinobu Inoue ispassive = 1; 22924dd8b5abSYoshinobu Inoue su = &pasv_addr; 2293ea022d16SRodney W. Grimes goto printaddr; 2294ea022d16SRodney W. Grimes } else if (usedefault == 0) { 22954dd8b5abSYoshinobu Inoue ispassive = 0; 22964dd8b5abSYoshinobu Inoue su = &data_dest; 2297ea022d16SRodney W. Grimes printaddr: 2298ea022d16SRodney W. Grimes #define UC(b) (((int) b) & 0xff) 22994dd8b5abSYoshinobu Inoue if (epsvall) { 23004dd8b5abSYoshinobu Inoue printf(" EPSV only mode (EPSV ALL)\r\n"); 23014dd8b5abSYoshinobu Inoue goto epsvonly; 23024dd8b5abSYoshinobu Inoue } 23034dd8b5abSYoshinobu Inoue 23044dd8b5abSYoshinobu Inoue /* PORT/PASV */ 23054dd8b5abSYoshinobu Inoue if (su->su_family == AF_INET) { 23064dd8b5abSYoshinobu Inoue a = (u_char *) &su->su_sin.sin_addr; 23074dd8b5abSYoshinobu Inoue p = (u_char *) &su->su_sin.sin_port; 23084dd8b5abSYoshinobu Inoue printf(" %s (%d,%d,%d,%d,%d,%d)\r\n", 23094dd8b5abSYoshinobu Inoue ispassive ? "PASV" : "PORT", 23104dd8b5abSYoshinobu Inoue UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]), 23114dd8b5abSYoshinobu Inoue UC(p[0]), UC(p[1])); 23124dd8b5abSYoshinobu Inoue } 23134dd8b5abSYoshinobu Inoue 23144dd8b5abSYoshinobu Inoue /* LPRT/LPSV */ 23154dd8b5abSYoshinobu Inoue { 23164dd8b5abSYoshinobu Inoue int alen, af, i; 23174dd8b5abSYoshinobu Inoue 23184dd8b5abSYoshinobu Inoue switch (su->su_family) { 23194dd8b5abSYoshinobu Inoue case AF_INET: 23204dd8b5abSYoshinobu Inoue a = (u_char *) &su->su_sin.sin_addr; 23214dd8b5abSYoshinobu Inoue p = (u_char *) &su->su_sin.sin_port; 23224dd8b5abSYoshinobu Inoue alen = sizeof(su->su_sin.sin_addr); 23234dd8b5abSYoshinobu Inoue af = 4; 23244dd8b5abSYoshinobu Inoue break; 23254dd8b5abSYoshinobu Inoue case AF_INET6: 23264dd8b5abSYoshinobu Inoue a = (u_char *) &su->su_sin6.sin6_addr; 23274dd8b5abSYoshinobu Inoue p = (u_char *) &su->su_sin6.sin6_port; 23284dd8b5abSYoshinobu Inoue alen = sizeof(su->su_sin6.sin6_addr); 23294dd8b5abSYoshinobu Inoue af = 6; 23304dd8b5abSYoshinobu Inoue break; 23314dd8b5abSYoshinobu Inoue default: 23324dd8b5abSYoshinobu Inoue af = 0; 23334dd8b5abSYoshinobu Inoue break; 23344dd8b5abSYoshinobu Inoue } 23354dd8b5abSYoshinobu Inoue if (af) { 23364dd8b5abSYoshinobu Inoue printf(" %s (%d,%d,", ispassive ? "LPSV" : "LPRT", 23374dd8b5abSYoshinobu Inoue af, alen); 23384dd8b5abSYoshinobu Inoue for (i = 0; i < alen; i++) 23394dd8b5abSYoshinobu Inoue printf("%d,", UC(a[i])); 23404dd8b5abSYoshinobu Inoue printf("%d,%d,%d)\r\n", 2, UC(p[0]), UC(p[1])); 23414dd8b5abSYoshinobu Inoue } 23424dd8b5abSYoshinobu Inoue } 23434dd8b5abSYoshinobu Inoue 23444dd8b5abSYoshinobu Inoue epsvonly:; 23454dd8b5abSYoshinobu Inoue /* EPRT/EPSV */ 23464dd8b5abSYoshinobu Inoue { 23474dd8b5abSYoshinobu Inoue int af; 23484dd8b5abSYoshinobu Inoue 23494dd8b5abSYoshinobu Inoue switch (su->su_family) { 23504dd8b5abSYoshinobu Inoue case AF_INET: 23514dd8b5abSYoshinobu Inoue af = 1; 23524dd8b5abSYoshinobu Inoue break; 23534dd8b5abSYoshinobu Inoue case AF_INET6: 23544dd8b5abSYoshinobu Inoue af = 2; 23554dd8b5abSYoshinobu Inoue break; 23564dd8b5abSYoshinobu Inoue default: 23574dd8b5abSYoshinobu Inoue af = 0; 23584dd8b5abSYoshinobu Inoue break; 23594dd8b5abSYoshinobu Inoue } 23604dd8b5abSYoshinobu Inoue if (af) { 2361b0f06defSHajimu UMEMOTO union sockunion tmp; 2362b0f06defSHajimu UMEMOTO 2363b0f06defSHajimu UMEMOTO tmp = *su; 2364b0f06defSHajimu UMEMOTO if (tmp.su_family == AF_INET6) 2365b0f06defSHajimu UMEMOTO tmp.su_sin6.sin6_scope_id = 0; 2366b0f06defSHajimu UMEMOTO if (!getnameinfo((struct sockaddr *)&tmp, tmp.su_len, 23674dd8b5abSYoshinobu Inoue hname, sizeof(hname) - 1, NULL, 0, 23684dd8b5abSYoshinobu Inoue NI_NUMERICHOST)) { 23694dd8b5abSYoshinobu Inoue printf(" %s |%d|%s|%d|\r\n", 23704dd8b5abSYoshinobu Inoue ispassive ? "EPSV" : "EPRT", 2371b0f06defSHajimu UMEMOTO af, hname, htons(tmp.su_port)); 23724dd8b5abSYoshinobu Inoue } 23734dd8b5abSYoshinobu Inoue } 23744dd8b5abSYoshinobu Inoue } 2375ea022d16SRodney W. Grimes #undef UC 2376ea022d16SRodney W. Grimes } else 2377ea022d16SRodney W. Grimes printf(" No data connection\r\n"); 2378ea022d16SRodney W. Grimes reply(211, "End of status"); 2379ea022d16SRodney W. Grimes } 2380ea022d16SRodney W. Grimes 2381ea022d16SRodney W. Grimes void 2382e4bc453cSWarner Losh fatalerror(char *s) 2383ea022d16SRodney W. Grimes { 2384ea022d16SRodney W. Grimes 2385ea022d16SRodney W. Grimes reply(451, "Error in server: %s\n", s); 2386ea022d16SRodney W. Grimes reply(221, "Closing connection due to server error."); 2387ea022d16SRodney W. Grimes dologout(0); 2388ea022d16SRodney W. Grimes /* NOTREACHED */ 2389ea022d16SRodney W. Grimes } 2390ea022d16SRodney W. Grimes 2391ea022d16SRodney W. Grimes void 2392ea022d16SRodney W. Grimes reply(int n, const char *fmt, ...) 2393ea022d16SRodney W. Grimes { 2394ea022d16SRodney W. Grimes va_list ap; 2395e4bc453cSWarner Losh 2396ea022d16SRodney W. Grimes (void)printf("%d ", n); 23979cbb335cSTim J. Robbins va_start(ap, fmt); 2398ea022d16SRodney W. Grimes (void)vprintf(fmt, ap); 23999cbb335cSTim J. Robbins va_end(ap); 2400ea022d16SRodney W. Grimes (void)printf("\r\n"); 2401ea022d16SRodney W. Grimes (void)fflush(stdout); 2402618b0bbaSMark Murray if (ftpdebug) { 2403ea022d16SRodney W. Grimes syslog(LOG_DEBUG, "<--- %d ", n); 24049cbb335cSTim J. Robbins va_start(ap, fmt); 2405ea022d16SRodney W. Grimes vsyslog(LOG_DEBUG, fmt, ap); 24069cbb335cSTim J. Robbins va_end(ap); 2407ea022d16SRodney W. Grimes } 2408ea022d16SRodney W. Grimes } 2409ea022d16SRodney W. Grimes 2410ea022d16SRodney W. Grimes void 2411ea022d16SRodney W. Grimes lreply(int n, const char *fmt, ...) 2412ea022d16SRodney W. Grimes { 2413ea022d16SRodney W. Grimes va_list ap; 2414e4bc453cSWarner Losh 2415ea022d16SRodney W. Grimes (void)printf("%d- ", n); 24169cbb335cSTim J. Robbins va_start(ap, fmt); 2417ea022d16SRodney W. Grimes (void)vprintf(fmt, ap); 24189cbb335cSTim J. Robbins va_end(ap); 2419ea022d16SRodney W. Grimes (void)printf("\r\n"); 2420ea022d16SRodney W. Grimes (void)fflush(stdout); 2421618b0bbaSMark Murray if (ftpdebug) { 2422ea022d16SRodney W. Grimes syslog(LOG_DEBUG, "<--- %d- ", n); 24239cbb335cSTim J. Robbins va_start(ap, fmt); 2424ea022d16SRodney W. Grimes vsyslog(LOG_DEBUG, fmt, ap); 24259cbb335cSTim J. Robbins va_end(ap); 2426ea022d16SRodney W. Grimes } 2427ea022d16SRodney W. Grimes } 2428ea022d16SRodney W. Grimes 2429ea022d16SRodney W. Grimes static void 2430e4bc453cSWarner Losh ack(char *s) 2431ea022d16SRodney W. Grimes { 2432ea022d16SRodney W. Grimes 2433ea022d16SRodney W. Grimes reply(250, "%s command successful.", s); 2434ea022d16SRodney W. Grimes } 2435ea022d16SRodney W. Grimes 2436ea022d16SRodney W. Grimes void 2437e4bc453cSWarner Losh nack(char *s) 2438ea022d16SRodney W. Grimes { 2439ea022d16SRodney W. Grimes 2440ea022d16SRodney W. Grimes reply(502, "%s command not implemented.", s); 2441ea022d16SRodney W. Grimes } 2442ea022d16SRodney W. Grimes 2443ea022d16SRodney W. Grimes /* ARGSUSED */ 2444ea022d16SRodney W. Grimes void 2445e4bc453cSWarner Losh yyerror(char *s) 2446ea022d16SRodney W. Grimes { 2447ea022d16SRodney W. Grimes char *cp; 2448ea022d16SRodney W. Grimes 24499aca17cbSMark Murray if ((cp = strchr(cbuf,'\n'))) 2450ea022d16SRodney W. Grimes *cp = '\0'; 2451ea022d16SRodney W. Grimes reply(500, "'%s': command not understood.", cbuf); 2452ea022d16SRodney W. Grimes } 2453ea022d16SRodney W. Grimes 2454ea022d16SRodney W. Grimes void 2455e4bc453cSWarner Losh delete(char *name) 2456ea022d16SRodney W. Grimes { 2457ea022d16SRodney W. Grimes struct stat st; 2458ea022d16SRodney W. Grimes 2459ea022d16SRodney W. Grimes LOGCMD("delete", name); 24601b0e12d7SYaroslav Tykhiy if (lstat(name, &st) < 0) { 2461ea022d16SRodney W. Grimes perror_reply(550, name); 2462ea022d16SRodney W. Grimes return; 2463ea022d16SRodney W. Grimes } 2464ea022d16SRodney W. Grimes if ((st.st_mode&S_IFMT) == S_IFDIR) { 2465ea022d16SRodney W. Grimes if (rmdir(name) < 0) { 2466ea022d16SRodney W. Grimes perror_reply(550, name); 2467ea022d16SRodney W. Grimes return; 2468ea022d16SRodney W. Grimes } 2469ea022d16SRodney W. Grimes goto done; 2470ea022d16SRodney W. Grimes } 24713f8b9cfeSYaroslav Tykhiy if (guest && noguestmod) { 24723f8b9cfeSYaroslav Tykhiy reply(550, "Operation not permitted"); 24733f8b9cfeSYaroslav Tykhiy return; 24743f8b9cfeSYaroslav Tykhiy } 24753f8b9cfeSYaroslav Tykhiy if (unlink(name) < 0) { 2476ea022d16SRodney W. Grimes perror_reply(550, name); 2477ea022d16SRodney W. Grimes return; 2478ea022d16SRodney W. Grimes } 2479ea022d16SRodney W. Grimes done: 2480ea022d16SRodney W. Grimes ack("DELE"); 2481ea022d16SRodney W. Grimes } 2482ea022d16SRodney W. Grimes 2483ea022d16SRodney W. Grimes void 2484e4bc453cSWarner Losh cwd(char *path) 2485ea022d16SRodney W. Grimes { 2486ea022d16SRodney W. Grimes 2487ea022d16SRodney W. Grimes if (chdir(path) < 0) 2488ea022d16SRodney W. Grimes perror_reply(550, path); 2489ea022d16SRodney W. Grimes else 2490ea022d16SRodney W. Grimes ack("CWD"); 2491ea022d16SRodney W. Grimes } 2492ea022d16SRodney W. Grimes 2493ea022d16SRodney W. Grimes void 2494e4bc453cSWarner Losh makedir(char *name) 2495ea022d16SRodney W. Grimes { 24962b748987SYaroslav Tykhiy char *s; 2497ea022d16SRodney W. Grimes 2498ea022d16SRodney W. Grimes LOGCMD("mkdir", name); 2499d186bb12SMatthew N. Dodd if (guest && noguestmkd) 2500d186bb12SMatthew N. Dodd reply(550, "%s: permission denied", name); 2501d186bb12SMatthew N. Dodd else if (mkdir(name, 0777) < 0) 2502ea022d16SRodney W. Grimes perror_reply(550, name); 25032b748987SYaroslav Tykhiy else { 25042b748987SYaroslav Tykhiy if ((s = doublequote(name)) == NULL) 25052b748987SYaroslav Tykhiy fatalerror("Ran out of memory."); 25062b748987SYaroslav Tykhiy reply(257, "\"%s\" directory created.", s); 25072b748987SYaroslav Tykhiy free(s); 25082b748987SYaroslav Tykhiy } 2509ea022d16SRodney W. Grimes } 2510ea022d16SRodney W. Grimes 2511ea022d16SRodney W. Grimes void 2512e4bc453cSWarner Losh removedir(char *name) 2513ea022d16SRodney W. Grimes { 2514ea022d16SRodney W. Grimes 2515ea022d16SRodney W. Grimes LOGCMD("rmdir", name); 2516ea022d16SRodney W. Grimes if (rmdir(name) < 0) 2517ea022d16SRodney W. Grimes perror_reply(550, name); 2518ea022d16SRodney W. Grimes else 2519ea022d16SRodney W. Grimes ack("RMD"); 2520ea022d16SRodney W. Grimes } 2521ea022d16SRodney W. Grimes 2522ea022d16SRodney W. Grimes void 2523e4bc453cSWarner Losh pwd(void) 2524ea022d16SRodney W. Grimes { 2525e4648f05SYaroslav Tykhiy char *s, path[MAXPATHLEN + 1]; 2526ea022d16SRodney W. Grimes 2527ea022d16SRodney W. Grimes if (getwd(path) == (char *)NULL) 2528ea022d16SRodney W. Grimes reply(550, "%s.", path); 2529e4648f05SYaroslav Tykhiy else { 2530e4648f05SYaroslav Tykhiy if ((s = doublequote(path)) == NULL) 2531e4648f05SYaroslav Tykhiy fatalerror("Ran out of memory."); 2532e4648f05SYaroslav Tykhiy reply(257, "\"%s\" is current directory.", s); 2533e4648f05SYaroslav Tykhiy free(s); 2534e4648f05SYaroslav Tykhiy } 2535ea022d16SRodney W. Grimes } 2536ea022d16SRodney W. Grimes 2537ea022d16SRodney W. Grimes char * 2538e4bc453cSWarner Losh renamefrom(char *name) 2539ea022d16SRodney W. Grimes { 2540ea022d16SRodney W. Grimes struct stat st; 2541ea022d16SRodney W. Grimes 2542b943b3c4SYaroslav Tykhiy if (guest && noguestmod) { 2543b943b3c4SYaroslav Tykhiy reply(550, "Operation not permitted"); 2544b943b3c4SYaroslav Tykhiy return (NULL); 2545b943b3c4SYaroslav Tykhiy } 25461b0e12d7SYaroslav Tykhiy if (lstat(name, &st) < 0) { 2547ea022d16SRodney W. Grimes perror_reply(550, name); 2548385f9bf0SYaroslav Tykhiy return (NULL); 2549ea022d16SRodney W. Grimes } 2550ea022d16SRodney W. Grimes reply(350, "File exists, ready for destination name"); 2551ea022d16SRodney W. Grimes return (name); 2552ea022d16SRodney W. Grimes } 2553ea022d16SRodney W. Grimes 2554ea022d16SRodney W. Grimes void 2555e4bc453cSWarner Losh renamecmd(char *from, char *to) 2556ea022d16SRodney W. Grimes { 255761f891a6SPaul Traina struct stat st; 2558ea022d16SRodney W. Grimes 2559ea022d16SRodney W. Grimes LOGCMD2("rename", from, to); 256061f891a6SPaul Traina 256161f891a6SPaul Traina if (guest && (stat(to, &st) == 0)) { 256261f891a6SPaul Traina reply(550, "%s: permission denied", to); 256361f891a6SPaul Traina return; 256461f891a6SPaul Traina } 256561f891a6SPaul Traina 2566ea022d16SRodney W. Grimes if (rename(from, to) < 0) 2567ea022d16SRodney W. Grimes perror_reply(550, "rename"); 2568ea022d16SRodney W. Grimes else 2569ea022d16SRodney W. Grimes ack("RNTO"); 2570ea022d16SRodney W. Grimes } 2571ea022d16SRodney W. Grimes 2572ea022d16SRodney W. Grimes static void 2573e4bc453cSWarner Losh dolog(struct sockaddr *who) 2574ea022d16SRodney W. Grimes { 25754dd8b5abSYoshinobu Inoue int error; 25764dd8b5abSYoshinobu Inoue 25774dd8b5abSYoshinobu Inoue realhostname_sa(remotehost, sizeof(remotehost) - 1, who, who->sa_len); 2578ea022d16SRodney W. Grimes 2579ea022d16SRodney W. Grimes #ifdef SETPROCTITLE 2580ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 2581ea4e54b9SDavid Nugent if (thishost != firsthost) 2582ea4e54b9SDavid Nugent snprintf(proctitle, sizeof(proctitle), "%s: connected (to %s)", 2583ea4e54b9SDavid Nugent remotehost, hostname); 2584ea4e54b9SDavid Nugent else 2585ea4e54b9SDavid Nugent #endif 2586ea4e54b9SDavid Nugent snprintf(proctitle, sizeof(proctitle), "%s: connected", 2587ea4e54b9SDavid Nugent remotehost); 2588b63e1fe2SPeter Wemm setproctitle("%s", proctitle); 2589ea022d16SRodney W. Grimes #endif /* SETPROCTITLE */ 2590ea022d16SRodney W. Grimes 2591ea4e54b9SDavid Nugent if (logging) { 2592ea4e54b9SDavid Nugent #ifdef VIRTUAL_HOSTING 2593ea4e54b9SDavid Nugent if (thishost != firsthost) 2594ea4e54b9SDavid Nugent syslog(LOG_INFO, "connection from %s (to %s)", 2595ea4e54b9SDavid Nugent remotehost, hostname); 2596ea4e54b9SDavid Nugent else 2597ea4e54b9SDavid Nugent #endif 25984dd8b5abSYoshinobu Inoue { 25994dd8b5abSYoshinobu Inoue char who_name[MAXHOSTNAMELEN]; 26004dd8b5abSYoshinobu Inoue 26014dd8b5abSYoshinobu Inoue error = getnameinfo(who, who->sa_len, 26024dd8b5abSYoshinobu Inoue who_name, sizeof(who_name) - 1, 2603b0f06defSHajimu UMEMOTO NULL, 0, NI_NUMERICHOST); 2604f5c57d05SEivind Eklund syslog(LOG_INFO, "connection from %s (%s)", remotehost, 26054dd8b5abSYoshinobu Inoue error == 0 ? who_name : ""); 26064dd8b5abSYoshinobu Inoue } 2607ea022d16SRodney W. Grimes } 2608ea4e54b9SDavid Nugent } 2609ea022d16SRodney W. Grimes 2610ea022d16SRodney W. Grimes /* 2611ea022d16SRodney W. Grimes * Record logout in wtmp file 2612ea022d16SRodney W. Grimes * and exit with supplied status. 2613ea022d16SRodney W. Grimes */ 2614ea022d16SRodney W. Grimes void 2615e4bc453cSWarner Losh dologout(int status) 2616ea022d16SRodney W. Grimes { 26170b4df2eeSDavid Greenman /* 26180b4df2eeSDavid Greenman * Prevent reception of SIGURG from resulting in a resumption 26190b4df2eeSDavid Greenman * back to the main program loop. 26200b4df2eeSDavid Greenman */ 26210b4df2eeSDavid Greenman transflag = 0; 2622ea022d16SRodney W. Grimes 26235d7e0128SYaroslav Tykhiy if (logged_in && dowtmp) { 2624ea022d16SRodney W. Grimes (void) seteuid((uid_t)0); 262546948173SHajimu UMEMOTO ftpd_logwtmp(ttyline, "", NULL); 2626ea022d16SRodney W. Grimes } 2627ea022d16SRodney W. Grimes /* beware of flushing buffers after a SIGPIPE */ 2628ea022d16SRodney W. Grimes _exit(status); 2629ea022d16SRodney W. Grimes } 2630ea022d16SRodney W. Grimes 2631ea022d16SRodney W. Grimes static void 2632e4bc453cSWarner Losh sigurg(int signo) 2633ea022d16SRodney W. Grimes { 26344b82fc95SYaroslav Tykhiy 26354b82fc95SYaroslav Tykhiy recvurg = 1; 26364b82fc95SYaroslav Tykhiy } 26374b82fc95SYaroslav Tykhiy 26384b82fc95SYaroslav Tykhiy static void 2639e4bc453cSWarner Losh myoob(void) 26404b82fc95SYaroslav Tykhiy { 2641ea022d16SRodney W. Grimes char *cp; 2642ea022d16SRodney W. Grimes 2643ea022d16SRodney W. Grimes /* only process if transfer occurring */ 2644ea022d16SRodney W. Grimes if (!transflag) 2645ea022d16SRodney W. Grimes return; 2646ea022d16SRodney W. Grimes cp = tmpline; 2647ea022d16SRodney W. Grimes if (getline(cp, 7, stdin) == NULL) { 2648ea022d16SRodney W. Grimes reply(221, "You could at least say goodbye."); 2649ea022d16SRodney W. Grimes dologout(0); 2650ea022d16SRodney W. Grimes } 2651ea022d16SRodney W. Grimes upper(cp); 2652ea022d16SRodney W. Grimes if (strcmp(cp, "ABOR\r\n") == 0) { 2653ea022d16SRodney W. Grimes tmpline[0] = '\0'; 2654ea022d16SRodney W. Grimes reply(426, "Transfer aborted. Data connection closed."); 2655ea022d16SRodney W. Grimes reply(226, "Abort successful"); 2656ea022d16SRodney W. Grimes } 2657ea022d16SRodney W. Grimes if (strcmp(cp, "STAT\r\n") == 0) { 26589db4bbf3SMichael Haro tmpline[0] = '\0'; 2659ea022d16SRodney W. Grimes if (file_size != (off_t) -1) 2660ea022d16SRodney W. Grimes reply(213, "Status: %qd of %qd bytes transferred", 2661ea022d16SRodney W. Grimes byte_count, file_size); 2662ea022d16SRodney W. Grimes else 2663ea022d16SRodney W. Grimes reply(213, "Status: %qd bytes transferred", byte_count); 2664ea022d16SRodney W. Grimes } 2665ea022d16SRodney W. Grimes } 2666ea022d16SRodney W. Grimes 2667ea022d16SRodney W. Grimes /* 2668ea022d16SRodney W. Grimes * Note: a response of 425 is not mentioned as a possible response to 2669ea022d16SRodney W. Grimes * the PASV command in RFC959. However, it has been blessed as 2670ea022d16SRodney W. Grimes * a legitimate response by Jon Postel in a telephone conversation 2671ea022d16SRodney W. Grimes * with Rick Adams on 25 Jan 89. 2672ea022d16SRodney W. Grimes */ 2673ea022d16SRodney W. Grimes void 2674e4bc453cSWarner Losh passive(void) 2675ea022d16SRodney W. Grimes { 26768af7c9a3SYaroslav Tykhiy int len, on; 2677ea022d16SRodney W. Grimes char *p, *a; 2678ea022d16SRodney W. Grimes 267961f891a6SPaul Traina if (pdata >= 0) /* close old port if one set */ 268061f891a6SPaul Traina close(pdata); 268161f891a6SPaul Traina 26824dd8b5abSYoshinobu Inoue pdata = socket(ctrl_addr.su_family, SOCK_STREAM, 0); 2683ea022d16SRodney W. Grimes if (pdata < 0) { 2684ea022d16SRodney W. Grimes perror_reply(425, "Can't open passive connection"); 2685ea022d16SRodney W. Grimes return; 2686ea022d16SRodney W. Grimes } 26878af7c9a3SYaroslav Tykhiy on = 1; 26888af7c9a3SYaroslav Tykhiy if (setsockopt(pdata, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on)) < 0) 26898af7c9a3SYaroslav Tykhiy syslog(LOG_WARNING, "pdata setsockopt (SO_REUSEADDR): %m"); 26904c450ad7SPaul Traina 26914c450ad7SPaul Traina (void) seteuid((uid_t)0); 269261f891a6SPaul Traina 2693dacc9752SPaul Traina #ifdef IP_PORTRANGE 26944dd8b5abSYoshinobu Inoue if (ctrl_addr.su_family == AF_INET) { 26958af7c9a3SYaroslav Tykhiy on = restricted_data_ports ? IP_PORTRANGE_HIGH 2696dacc9752SPaul Traina : IP_PORTRANGE_DEFAULT; 2697dacc9752SPaul Traina 269840e9d39eSPeter Wemm if (setsockopt(pdata, IPPROTO_IP, IP_PORTRANGE, 269957d4ef07SYaroslav Tykhiy &on, sizeof(on)) < 0) 27004c450ad7SPaul Traina goto pasv_error; 27014c450ad7SPaul Traina } 2702dacc9752SPaul Traina #endif 27032db39860SNick Sayer #ifdef IPV6_PORTRANGE 27042db39860SNick Sayer if (ctrl_addr.su_family == AF_INET6) { 27058af7c9a3SYaroslav Tykhiy on = restricted_data_ports ? IPV6_PORTRANGE_HIGH 27062db39860SNick Sayer : IPV6_PORTRANGE_DEFAULT; 27072db39860SNick Sayer 27082db39860SNick Sayer if (setsockopt(pdata, IPPROTO_IPV6, IPV6_PORTRANGE, 270957d4ef07SYaroslav Tykhiy &on, sizeof(on)) < 0) 27102db39860SNick Sayer goto pasv_error; 27112db39860SNick Sayer } 27122db39860SNick Sayer #endif 271340e9d39eSPeter Wemm 2714ea022d16SRodney W. Grimes pasv_addr = ctrl_addr; 27154dd8b5abSYoshinobu Inoue pasv_addr.su_port = 0; 27164dd8b5abSYoshinobu Inoue if (bind(pdata, (struct sockaddr *)&pasv_addr, pasv_addr.su_len) < 0) 2717ea022d16SRodney W. Grimes goto pasv_error; 271861f891a6SPaul Traina 2719ea022d16SRodney W. Grimes (void) seteuid((uid_t)pw->pw_uid); 27204c450ad7SPaul Traina 2721ea022d16SRodney W. Grimes len = sizeof(pasv_addr); 2722ea022d16SRodney W. Grimes if (getsockname(pdata, (struct sockaddr *) &pasv_addr, &len) < 0) 2723ea022d16SRodney W. Grimes goto pasv_error; 2724ea022d16SRodney W. Grimes if (listen(pdata, 1) < 0) 2725ea022d16SRodney W. Grimes goto pasv_error; 27264dd8b5abSYoshinobu Inoue if (pasv_addr.su_family == AF_INET) 27274dd8b5abSYoshinobu Inoue a = (char *) &pasv_addr.su_sin.sin_addr; 27284dd8b5abSYoshinobu Inoue else if (pasv_addr.su_family == AF_INET6 && 27294dd8b5abSYoshinobu Inoue IN6_IS_ADDR_V4MAPPED(&pasv_addr.su_sin6.sin6_addr)) 27304dd8b5abSYoshinobu Inoue a = (char *) &pasv_addr.su_sin6.sin6_addr.s6_addr[12]; 27314dd8b5abSYoshinobu Inoue else 27324dd8b5abSYoshinobu Inoue goto pasv_error; 27334dd8b5abSYoshinobu Inoue 27344dd8b5abSYoshinobu Inoue p = (char *) &pasv_addr.su_port; 2735ea022d16SRodney W. Grimes 2736ea022d16SRodney W. Grimes #define UC(b) (((int) b) & 0xff) 2737ea022d16SRodney W. Grimes 2738ea022d16SRodney W. Grimes reply(227, "Entering Passive Mode (%d,%d,%d,%d,%d,%d)", UC(a[0]), 2739ea022d16SRodney W. Grimes UC(a[1]), UC(a[2]), UC(a[3]), UC(p[0]), UC(p[1])); 2740ea022d16SRodney W. Grimes return; 2741ea022d16SRodney W. Grimes 2742ea022d16SRodney W. Grimes pasv_error: 274361f891a6SPaul Traina (void) seteuid((uid_t)pw->pw_uid); 2744ea022d16SRodney W. Grimes (void) close(pdata); 2745ea022d16SRodney W. Grimes pdata = -1; 2746ea022d16SRodney W. Grimes perror_reply(425, "Can't open passive connection"); 2747ea022d16SRodney W. Grimes return; 2748ea022d16SRodney W. Grimes } 2749ea022d16SRodney W. Grimes 2750ea022d16SRodney W. Grimes /* 27514dd8b5abSYoshinobu Inoue * Long Passive defined in RFC 1639. 27524dd8b5abSYoshinobu Inoue * 228 Entering Long Passive Mode 27534dd8b5abSYoshinobu Inoue * (af, hal, h1, h2, h3,..., pal, p1, p2...) 27544dd8b5abSYoshinobu Inoue */ 27554dd8b5abSYoshinobu Inoue 27564dd8b5abSYoshinobu Inoue void 2757e4bc453cSWarner Losh long_passive(char *cmd, int pf) 27584dd8b5abSYoshinobu Inoue { 27598af7c9a3SYaroslav Tykhiy int len, on; 27604dd8b5abSYoshinobu Inoue char *p, *a; 27614dd8b5abSYoshinobu Inoue 27624dd8b5abSYoshinobu Inoue if (pdata >= 0) /* close old port if one set */ 27634dd8b5abSYoshinobu Inoue close(pdata); 27644dd8b5abSYoshinobu Inoue 27654dd8b5abSYoshinobu Inoue if (pf != PF_UNSPEC) { 27664dd8b5abSYoshinobu Inoue if (ctrl_addr.su_family != pf) { 27674dd8b5abSYoshinobu Inoue switch (ctrl_addr.su_family) { 27684dd8b5abSYoshinobu Inoue case AF_INET: 27694dd8b5abSYoshinobu Inoue pf = 1; 27704dd8b5abSYoshinobu Inoue break; 27714dd8b5abSYoshinobu Inoue case AF_INET6: 27724dd8b5abSYoshinobu Inoue pf = 2; 27734dd8b5abSYoshinobu Inoue break; 27744dd8b5abSYoshinobu Inoue default: 27754dd8b5abSYoshinobu Inoue pf = 0; 27764dd8b5abSYoshinobu Inoue break; 27774dd8b5abSYoshinobu Inoue } 27784dd8b5abSYoshinobu Inoue /* 27794dd8b5abSYoshinobu Inoue * XXX 27804dd8b5abSYoshinobu Inoue * only EPRT/EPSV ready clients will understand this 27814dd8b5abSYoshinobu Inoue */ 27824dd8b5abSYoshinobu Inoue if (strcmp(cmd, "EPSV") == 0 && pf) { 27834dd8b5abSYoshinobu Inoue reply(522, "Network protocol mismatch, " 27844dd8b5abSYoshinobu Inoue "use (%d)", pf); 27854dd8b5abSYoshinobu Inoue } else 27864dd8b5abSYoshinobu Inoue reply(501, "Network protocol mismatch"); /*XXX*/ 27874dd8b5abSYoshinobu Inoue 27884dd8b5abSYoshinobu Inoue return; 27894dd8b5abSYoshinobu Inoue } 27904dd8b5abSYoshinobu Inoue } 27914dd8b5abSYoshinobu Inoue 27924dd8b5abSYoshinobu Inoue pdata = socket(ctrl_addr.su_family, SOCK_STREAM, 0); 27934dd8b5abSYoshinobu Inoue if (pdata < 0) { 27944dd8b5abSYoshinobu Inoue perror_reply(425, "Can't open passive connection"); 27954dd8b5abSYoshinobu Inoue return; 27964dd8b5abSYoshinobu Inoue } 27978af7c9a3SYaroslav Tykhiy on = 1; 27988af7c9a3SYaroslav Tykhiy if (setsockopt(pdata, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on)) < 0) 27998af7c9a3SYaroslav Tykhiy syslog(LOG_WARNING, "pdata setsockopt (SO_REUSEADDR): %m"); 28004dd8b5abSYoshinobu Inoue 28014dd8b5abSYoshinobu Inoue (void) seteuid((uid_t)0); 28024dd8b5abSYoshinobu Inoue 28034dd8b5abSYoshinobu Inoue pasv_addr = ctrl_addr; 28044dd8b5abSYoshinobu Inoue pasv_addr.su_port = 0; 28054dd8b5abSYoshinobu Inoue len = pasv_addr.su_len; 28064dd8b5abSYoshinobu Inoue 28072db39860SNick Sayer #ifdef IP_PORTRANGE 28082db39860SNick Sayer if (ctrl_addr.su_family == AF_INET) { 28098af7c9a3SYaroslav Tykhiy on = restricted_data_ports ? IP_PORTRANGE_HIGH 28102db39860SNick Sayer : IP_PORTRANGE_DEFAULT; 28112db39860SNick Sayer 28122db39860SNick Sayer if (setsockopt(pdata, IPPROTO_IP, IP_PORTRANGE, 281357d4ef07SYaroslav Tykhiy &on, sizeof(on)) < 0) 28142db39860SNick Sayer goto pasv_error; 28152db39860SNick Sayer } 28162db39860SNick Sayer #endif 28172db39860SNick Sayer #ifdef IPV6_PORTRANGE 28182db39860SNick Sayer if (ctrl_addr.su_family == AF_INET6) { 28198af7c9a3SYaroslav Tykhiy on = restricted_data_ports ? IPV6_PORTRANGE_HIGH 28202db39860SNick Sayer : IPV6_PORTRANGE_DEFAULT; 28212db39860SNick Sayer 28222db39860SNick Sayer if (setsockopt(pdata, IPPROTO_IPV6, IPV6_PORTRANGE, 282357d4ef07SYaroslav Tykhiy &on, sizeof(on)) < 0) 28242db39860SNick Sayer goto pasv_error; 28252db39860SNick Sayer } 28262db39860SNick Sayer #endif 28272db39860SNick Sayer 28284dd8b5abSYoshinobu Inoue if (bind(pdata, (struct sockaddr *)&pasv_addr, len) < 0) 28294dd8b5abSYoshinobu Inoue goto pasv_error; 28304dd8b5abSYoshinobu Inoue 28314dd8b5abSYoshinobu Inoue (void) seteuid((uid_t)pw->pw_uid); 28324dd8b5abSYoshinobu Inoue 28334dd8b5abSYoshinobu Inoue if (getsockname(pdata, (struct sockaddr *) &pasv_addr, &len) < 0) 28344dd8b5abSYoshinobu Inoue goto pasv_error; 28354dd8b5abSYoshinobu Inoue if (listen(pdata, 1) < 0) 28364dd8b5abSYoshinobu Inoue goto pasv_error; 28374dd8b5abSYoshinobu Inoue 28384dd8b5abSYoshinobu Inoue #define UC(b) (((int) b) & 0xff) 28394dd8b5abSYoshinobu Inoue 28404dd8b5abSYoshinobu Inoue if (strcmp(cmd, "LPSV") == 0) { 28414dd8b5abSYoshinobu Inoue p = (char *)&pasv_addr.su_port; 28424dd8b5abSYoshinobu Inoue switch (pasv_addr.su_family) { 28434dd8b5abSYoshinobu Inoue case AF_INET: 28444dd8b5abSYoshinobu Inoue a = (char *) &pasv_addr.su_sin.sin_addr; 28454dd8b5abSYoshinobu Inoue v4_reply: 28464dd8b5abSYoshinobu Inoue reply(228, 28474dd8b5abSYoshinobu Inoue "Entering Long Passive Mode (%d,%d,%d,%d,%d,%d,%d,%d,%d)", 28484dd8b5abSYoshinobu Inoue 4, 4, UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]), 28494dd8b5abSYoshinobu Inoue 2, UC(p[0]), UC(p[1])); 28504dd8b5abSYoshinobu Inoue return; 28514dd8b5abSYoshinobu Inoue case AF_INET6: 28524dd8b5abSYoshinobu Inoue if (IN6_IS_ADDR_V4MAPPED(&pasv_addr.su_sin6.sin6_addr)) { 28534dd8b5abSYoshinobu Inoue a = (char *) &pasv_addr.su_sin6.sin6_addr.s6_addr[12]; 28544dd8b5abSYoshinobu Inoue goto v4_reply; 28554dd8b5abSYoshinobu Inoue } 28564dd8b5abSYoshinobu Inoue a = (char *) &pasv_addr.su_sin6.sin6_addr; 28574dd8b5abSYoshinobu Inoue reply(228, 28584dd8b5abSYoshinobu Inoue "Entering Long Passive Mode " 28594dd8b5abSYoshinobu Inoue "(%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d)", 28604dd8b5abSYoshinobu Inoue 6, 16, UC(a[0]), UC(a[1]), UC(a[2]), UC(a[3]), 28614dd8b5abSYoshinobu Inoue UC(a[4]), UC(a[5]), UC(a[6]), UC(a[7]), 28624dd8b5abSYoshinobu Inoue UC(a[8]), UC(a[9]), UC(a[10]), UC(a[11]), 28634dd8b5abSYoshinobu Inoue UC(a[12]), UC(a[13]), UC(a[14]), UC(a[15]), 28644dd8b5abSYoshinobu Inoue 2, UC(p[0]), UC(p[1])); 28654dd8b5abSYoshinobu Inoue return; 28664dd8b5abSYoshinobu Inoue } 28674dd8b5abSYoshinobu Inoue } else if (strcmp(cmd, "EPSV") == 0) { 28684dd8b5abSYoshinobu Inoue switch (pasv_addr.su_family) { 28694dd8b5abSYoshinobu Inoue case AF_INET: 28704dd8b5abSYoshinobu Inoue case AF_INET6: 28714dd8b5abSYoshinobu Inoue reply(229, "Entering Extended Passive Mode (|||%d|)", 28724dd8b5abSYoshinobu Inoue ntohs(pasv_addr.su_port)); 28734dd8b5abSYoshinobu Inoue return; 28744dd8b5abSYoshinobu Inoue } 28754dd8b5abSYoshinobu Inoue } else { 28764dd8b5abSYoshinobu Inoue /* more proper error code? */ 28774dd8b5abSYoshinobu Inoue } 28784dd8b5abSYoshinobu Inoue 28794dd8b5abSYoshinobu Inoue pasv_error: 28804dd8b5abSYoshinobu Inoue (void) seteuid((uid_t)pw->pw_uid); 28814dd8b5abSYoshinobu Inoue (void) close(pdata); 28824dd8b5abSYoshinobu Inoue pdata = -1; 28834dd8b5abSYoshinobu Inoue perror_reply(425, "Can't open passive connection"); 28844dd8b5abSYoshinobu Inoue return; 28854dd8b5abSYoshinobu Inoue } 28864dd8b5abSYoshinobu Inoue 28874dd8b5abSYoshinobu Inoue /* 2888a117c345SYaroslav Tykhiy * Generate unique name for file with basename "local" 2889a117c345SYaroslav Tykhiy * and open the file in order to avoid possible races. 2890a117c345SYaroslav Tykhiy * Try "local" first, then "local.1", "local.2" etc, up to "local.99". 2891a117c345SYaroslav Tykhiy * Return descriptor to the file, set "name" to its name. 2892a117c345SYaroslav Tykhiy * 2893ea022d16SRodney W. Grimes * Generates failure reply on error. 2894ea022d16SRodney W. Grimes */ 2895a117c345SYaroslav Tykhiy static int 2896a117c345SYaroslav Tykhiy guniquefd(char *local, char **name) 2897ea022d16SRodney W. Grimes { 2898ea022d16SRodney W. Grimes static char new[MAXPATHLEN]; 2899ea022d16SRodney W. Grimes struct stat st; 2900ea022d16SRodney W. Grimes char *cp; 2901a117c345SYaroslav Tykhiy int count; 2902a117c345SYaroslav Tykhiy int fd; 2903ea022d16SRodney W. Grimes 2904ea022d16SRodney W. Grimes cp = strrchr(local, '/'); 2905ea022d16SRodney W. Grimes if (cp) 2906ea022d16SRodney W. Grimes *cp = '\0'; 2907ea022d16SRodney W. Grimes if (stat(cp ? local : ".", &st) < 0) { 2908ea022d16SRodney W. Grimes perror_reply(553, cp ? local : "."); 2909a117c345SYaroslav Tykhiy return (-1); 2910ea022d16SRodney W. Grimes } 2911a117c345SYaroslav Tykhiy if (cp) { 2912a117c345SYaroslav Tykhiy /* 2913a117c345SYaroslav Tykhiy * Let not overwrite dirname with counter suffix. 2914a117c345SYaroslav Tykhiy * -4 is for /nn\0 2915a117c345SYaroslav Tykhiy * In this extreme case dot won't be put in front of suffix. 2916a117c345SYaroslav Tykhiy */ 2917a117c345SYaroslav Tykhiy if (strlen(local) > sizeof(new) - 4) { 2918a117c345SYaroslav Tykhiy reply(553, "Pathname too long"); 2919a117c345SYaroslav Tykhiy return (-1); 2920a117c345SYaroslav Tykhiy } 2921ea022d16SRodney W. Grimes *cp = '/'; 2922a117c345SYaroslav Tykhiy } 2923e760ef2cSWarner Losh /* -4 is for the .nn<null> we put on the end below */ 2924e760ef2cSWarner Losh (void) snprintf(new, sizeof(new) - 4, "%s", local); 2925ea022d16SRodney W. Grimes cp = new + strlen(new); 2926a117c345SYaroslav Tykhiy /* 2927a117c345SYaroslav Tykhiy * Don't generate dotfile unless requested explicitly. 2928a117c345SYaroslav Tykhiy * This covers the case when basename gets truncated off 2929a117c345SYaroslav Tykhiy * by buffer size. 2930a117c345SYaroslav Tykhiy */ 2931a117c345SYaroslav Tykhiy if (cp > new && cp[-1] != '/') 2932ea022d16SRodney W. Grimes *cp++ = '.'; 2933a117c345SYaroslav Tykhiy for (count = 0; count < 100; count++) { 2934a117c345SYaroslav Tykhiy /* At count 0 try unmodified name */ 2935a117c345SYaroslav Tykhiy if (count) 2936ea022d16SRodney W. Grimes (void)sprintf(cp, "%d", count); 2937a117c345SYaroslav Tykhiy if ((fd = open(count ? new : local, 2938a117c345SYaroslav Tykhiy O_RDWR | O_CREAT | O_EXCL, 0666)) >= 0) { 2939a117c345SYaroslav Tykhiy *name = count ? new : local; 2940a117c345SYaroslav Tykhiy return (fd); 2941a117c345SYaroslav Tykhiy } 294288b70721SYaroslav Tykhiy if (errno != EEXIST) { 294350618d61SYaroslav Tykhiy perror_reply(553, count ? new : local); 294488b70721SYaroslav Tykhiy return (-1); 294588b70721SYaroslav Tykhiy } 2946ea022d16SRodney W. Grimes } 2947ea022d16SRodney W. Grimes reply(452, "Unique file name cannot be created."); 2948a117c345SYaroslav Tykhiy return (-1); 2949ea022d16SRodney W. Grimes } 2950ea022d16SRodney W. Grimes 2951ea022d16SRodney W. Grimes /* 2952ea022d16SRodney W. Grimes * Format and send reply containing system error number. 2953ea022d16SRodney W. Grimes */ 2954ea022d16SRodney W. Grimes void 2955e4bc453cSWarner Losh perror_reply(int code, char *string) 2956ea022d16SRodney W. Grimes { 2957ea022d16SRodney W. Grimes 2958ea022d16SRodney W. Grimes reply(code, "%s: %s.", string, strerror(errno)); 2959ea022d16SRodney W. Grimes } 2960ea022d16SRodney W. Grimes 2961ea022d16SRodney W. Grimes static char *onefile[] = { 2962ea022d16SRodney W. Grimes "", 2963ea022d16SRodney W. Grimes 0 2964ea022d16SRodney W. Grimes }; 2965ea022d16SRodney W. Grimes 2966ea022d16SRodney W. Grimes void 2967e4bc453cSWarner Losh send_file_list(char *whichf) 2968ea022d16SRodney W. Grimes { 2969ea022d16SRodney W. Grimes struct stat st; 2970ea022d16SRodney W. Grimes DIR *dirp = NULL; 2971ea022d16SRodney W. Grimes struct dirent *dir; 2972ea022d16SRodney W. Grimes FILE *dout = NULL; 2973ea022d16SRodney W. Grimes char **dirlist, *dirname; 2974ea022d16SRodney W. Grimes int simple = 0; 2975ea022d16SRodney W. Grimes int freeglob = 0; 2976ea022d16SRodney W. Grimes glob_t gl; 2977ea022d16SRodney W. Grimes 2978ea022d16SRodney W. Grimes if (strpbrk(whichf, "~{[*?") != NULL) { 297912da320bSMike Heffner int flags = GLOB_BRACE|GLOB_NOCHECK|GLOB_TILDE; 2980ea022d16SRodney W. Grimes 2981ea022d16SRodney W. Grimes memset(&gl, 0, sizeof(gl)); 29826d10cb2fSJonathan Lemon gl.gl_matchc = MAXGLOBARGS; 298375dc5f1aSMike Heffner flags |= GLOB_LIMIT; 2984ea022d16SRodney W. Grimes freeglob = 1; 2985ea022d16SRodney W. Grimes if (glob(whichf, flags, 0, &gl)) { 2986ea022d16SRodney W. Grimes reply(550, "not found"); 2987ea022d16SRodney W. Grimes goto out; 2988ea022d16SRodney W. Grimes } else if (gl.gl_pathc == 0) { 2989ea022d16SRodney W. Grimes errno = ENOENT; 2990ea022d16SRodney W. Grimes perror_reply(550, whichf); 2991ea022d16SRodney W. Grimes goto out; 2992ea022d16SRodney W. Grimes } 2993ea022d16SRodney W. Grimes dirlist = gl.gl_pathv; 2994ea022d16SRodney W. Grimes } else { 2995ea022d16SRodney W. Grimes onefile[0] = whichf; 2996ea022d16SRodney W. Grimes dirlist = onefile; 2997ea022d16SRodney W. Grimes simple = 1; 2998ea022d16SRodney W. Grimes } 2999ea022d16SRodney W. Grimes 30009aca17cbSMark Murray while ((dirname = *dirlist++)) { 3001ea022d16SRodney W. Grimes if (stat(dirname, &st) < 0) { 3002ea022d16SRodney W. Grimes /* 3003ea022d16SRodney W. Grimes * If user typed "ls -l", etc, and the client 3004ea022d16SRodney W. Grimes * used NLST, do what the user meant. 3005ea022d16SRodney W. Grimes */ 3006ea022d16SRodney W. Grimes if (dirname[0] == '-' && *dirlist == NULL && 3007ea022d16SRodney W. Grimes transflag == 0) { 3008af85d782SDavid Nugent retrieve(_PATH_LS " %s", dirname); 3009ea022d16SRodney W. Grimes goto out; 3010ea022d16SRodney W. Grimes } 3011ea022d16SRodney W. Grimes perror_reply(550, whichf); 3012ea022d16SRodney W. Grimes if (dout != NULL) { 3013ea022d16SRodney W. Grimes (void) fclose(dout); 3014ea022d16SRodney W. Grimes transflag = 0; 3015ea022d16SRodney W. Grimes data = -1; 3016ea022d16SRodney W. Grimes pdata = -1; 3017ea022d16SRodney W. Grimes } 3018ea022d16SRodney W. Grimes goto out; 3019ea022d16SRodney W. Grimes } 3020ea022d16SRodney W. Grimes 3021ea022d16SRodney W. Grimes if (S_ISREG(st.st_mode)) { 3022ea022d16SRodney W. Grimes if (dout == NULL) { 3023ea022d16SRodney W. Grimes dout = dataconn("file list", (off_t)-1, "w"); 3024ea022d16SRodney W. Grimes if (dout == NULL) 3025ea022d16SRodney W. Grimes goto out; 3026ea022d16SRodney W. Grimes transflag++; 3027ea022d16SRodney W. Grimes } 3028ea022d16SRodney W. Grimes fprintf(dout, "%s%s\n", dirname, 3029ea022d16SRodney W. Grimes type == TYPE_A ? "\r" : ""); 3030ea022d16SRodney W. Grimes byte_count += strlen(dirname) + 1; 3031ea022d16SRodney W. Grimes continue; 3032ea022d16SRodney W. Grimes } else if (!S_ISDIR(st.st_mode)) 3033ea022d16SRodney W. Grimes continue; 3034ea022d16SRodney W. Grimes 3035ea022d16SRodney W. Grimes if ((dirp = opendir(dirname)) == NULL) 3036ea022d16SRodney W. Grimes continue; 3037ea022d16SRodney W. Grimes 3038ea022d16SRodney W. Grimes while ((dir = readdir(dirp)) != NULL) { 3039ea022d16SRodney W. Grimes char nbuf[MAXPATHLEN]; 3040ea022d16SRodney W. Grimes 30414b82fc95SYaroslav Tykhiy if (recvurg) { 30424b82fc95SYaroslav Tykhiy myoob(); 30434b82fc95SYaroslav Tykhiy recvurg = 0; 30444b82fc95SYaroslav Tykhiy transflag = 0; 30454b82fc95SYaroslav Tykhiy goto out; 30464b82fc95SYaroslav Tykhiy } 30474b82fc95SYaroslav Tykhiy 3048ea022d16SRodney W. Grimes if (dir->d_name[0] == '.' && dir->d_namlen == 1) 3049ea022d16SRodney W. Grimes continue; 3050ea022d16SRodney W. Grimes if (dir->d_name[0] == '.' && dir->d_name[1] == '.' && 3051ea022d16SRodney W. Grimes dir->d_namlen == 2) 3052ea022d16SRodney W. Grimes continue; 3053ea022d16SRodney W. Grimes 3054e760ef2cSWarner Losh snprintf(nbuf, sizeof(nbuf), 3055e760ef2cSWarner Losh "%s/%s", dirname, dir->d_name); 3056ea022d16SRodney W. Grimes 3057ea022d16SRodney W. Grimes /* 3058ea022d16SRodney W. Grimes * We have to do a stat to insure it's 3059ea022d16SRodney W. Grimes * not a directory or special file. 3060ea022d16SRodney W. Grimes */ 3061ea022d16SRodney W. Grimes if (simple || (stat(nbuf, &st) == 0 && 3062ea022d16SRodney W. Grimes S_ISREG(st.st_mode))) { 3063ea022d16SRodney W. Grimes if (dout == NULL) { 3064ea022d16SRodney W. Grimes dout = dataconn("file list", (off_t)-1, 3065ea022d16SRodney W. Grimes "w"); 3066ea022d16SRodney W. Grimes if (dout == NULL) 3067ea022d16SRodney W. Grimes goto out; 3068ea022d16SRodney W. Grimes transflag++; 3069ea022d16SRodney W. Grimes } 3070ea022d16SRodney W. Grimes if (nbuf[0] == '.' && nbuf[1] == '/') 3071ea022d16SRodney W. Grimes fprintf(dout, "%s%s\n", &nbuf[2], 3072ea022d16SRodney W. Grimes type == TYPE_A ? "\r" : ""); 3073ea022d16SRodney W. Grimes else 3074ea022d16SRodney W. Grimes fprintf(dout, "%s%s\n", nbuf, 3075ea022d16SRodney W. Grimes type == TYPE_A ? "\r" : ""); 3076ea022d16SRodney W. Grimes byte_count += strlen(nbuf) + 1; 3077ea022d16SRodney W. Grimes } 3078ea022d16SRodney W. Grimes } 3079ea022d16SRodney W. Grimes (void) closedir(dirp); 3080ea022d16SRodney W. Grimes } 3081ea022d16SRodney W. Grimes 3082ea022d16SRodney W. Grimes if (dout == NULL) 3083ea022d16SRodney W. Grimes reply(550, "No files found."); 3084ea022d16SRodney W. Grimes else if (ferror(dout) != 0) 3085ea022d16SRodney W. Grimes perror_reply(550, "Data connection"); 3086ea022d16SRodney W. Grimes else 3087ea022d16SRodney W. Grimes reply(226, "Transfer complete."); 3088ea022d16SRodney W. Grimes 3089ea022d16SRodney W. Grimes transflag = 0; 3090ea022d16SRodney W. Grimes if (dout != NULL) 3091ea022d16SRodney W. Grimes (void) fclose(dout); 3092ea022d16SRodney W. Grimes data = -1; 3093ea022d16SRodney W. Grimes pdata = -1; 3094ea022d16SRodney W. Grimes out: 3095ea022d16SRodney W. Grimes if (freeglob) { 3096ea022d16SRodney W. Grimes freeglob = 0; 3097ea022d16SRodney W. Grimes globfree(&gl); 3098ea022d16SRodney W. Grimes } 3099ea022d16SRodney W. Grimes } 3100ea022d16SRodney W. Grimes 3101cf09a206SDavid Greenman void 3102e4bc453cSWarner Losh reapchild(int signo) 3103cf09a206SDavid Greenman { 3104cf09a206SDavid Greenman while (wait3(NULL, WNOHANG, NULL) > 0); 3105cf09a206SDavid Greenman } 3106cf09a206SDavid Greenman 3107b63e1fe2SPeter Wemm #ifdef OLD_SETPROCTITLE 3108ea022d16SRodney W. Grimes /* 3109ea022d16SRodney W. Grimes * Clobber argv so ps will show what we're doing. (Stolen from sendmail.) 3110ea022d16SRodney W. Grimes * Warning, since this is usually started from inetd.conf, it often doesn't 3111ea022d16SRodney W. Grimes * have much of an environment or arglist to overwrite. 3112ea022d16SRodney W. Grimes */ 3113ea022d16SRodney W. Grimes void 3114ea022d16SRodney W. Grimes setproctitle(const char *fmt, ...) 3115ea022d16SRodney W. Grimes { 3116ea022d16SRodney W. Grimes int i; 3117ea022d16SRodney W. Grimes va_list ap; 3118ea022d16SRodney W. Grimes char *p, *bp, ch; 3119ea022d16SRodney W. Grimes char buf[LINE_MAX]; 3120ea022d16SRodney W. Grimes 3121ea022d16SRodney W. Grimes va_start(ap, fmt); 3122ea022d16SRodney W. Grimes (void)vsnprintf(buf, sizeof(buf), fmt, ap); 3123ea022d16SRodney W. Grimes 3124ea022d16SRodney W. Grimes /* make ps print our process name */ 3125ea022d16SRodney W. Grimes p = Argv[0]; 3126ea022d16SRodney W. Grimes *p++ = '-'; 3127ea022d16SRodney W. Grimes 3128ea022d16SRodney W. Grimes i = strlen(buf); 3129ea022d16SRodney W. Grimes if (i > LastArgv - p - 2) { 3130ea022d16SRodney W. Grimes i = LastArgv - p - 2; 3131ea022d16SRodney W. Grimes buf[i] = '\0'; 3132ea022d16SRodney W. Grimes } 3133ea022d16SRodney W. Grimes bp = buf; 3134ea022d16SRodney W. Grimes while (ch = *bp++) 3135ea022d16SRodney W. Grimes if (ch != '\n' && ch != '\r') 3136ea022d16SRodney W. Grimes *p++ = ch; 3137ea022d16SRodney W. Grimes while (p < LastArgv) 3138ea022d16SRodney W. Grimes *p++ = ' '; 3139ea022d16SRodney W. Grimes } 3140b63e1fe2SPeter Wemm #endif /* OLD_SETPROCTITLE */ 31413eb568f2SGuido van Rooij 314261f891a6SPaul Traina static void 3143e4bc453cSWarner Losh logxfer(char *name, off_t size, time_t start) 31443eb568f2SGuido van Rooij { 31453eb568f2SGuido van Rooij char buf[1024]; 31463eb568f2SGuido van Rooij char path[MAXPATHLEN + 1]; 3147158a00b2SJohn Birrell time_t now; 31483eb568f2SGuido van Rooij 31493eb568f2SGuido van Rooij if (statfd >= 0 && getwd(path) != NULL) { 31503eb568f2SGuido van Rooij time(&now); 3151e4a71114SAndrey A. Chernov snprintf(buf, sizeof(buf), "%.20s!%s!%s!%s/%s!%qd!%ld\n", 31523eb568f2SGuido van Rooij ctime(&now)+4, ident, remotehost, 3153e4a71114SAndrey A. Chernov path, name, (long long)size, 3154e4a71114SAndrey A. Chernov (long)(now - start + (now == start))); 31553eb568f2SGuido van Rooij write(statfd, buf, strlen(buf)); 31563eb568f2SGuido van Rooij } 31573eb568f2SGuido van Rooij } 3158e4648f05SYaroslav Tykhiy 3159e4648f05SYaroslav Tykhiy static char * 3160e4648f05SYaroslav Tykhiy doublequote(char *s) 3161e4648f05SYaroslav Tykhiy { 3162e4648f05SYaroslav Tykhiy int n; 3163e4648f05SYaroslav Tykhiy char *p, *s2; 3164e4648f05SYaroslav Tykhiy 3165e4648f05SYaroslav Tykhiy for (p = s, n = 0; *p; p++) 3166e4648f05SYaroslav Tykhiy if (*p == '"') 3167e4648f05SYaroslav Tykhiy n++; 3168e4648f05SYaroslav Tykhiy 3169e4648f05SYaroslav Tykhiy if ((s2 = malloc(p - s + n + 1)) == NULL) 3170e4648f05SYaroslav Tykhiy return (NULL); 3171e4648f05SYaroslav Tykhiy 3172e4648f05SYaroslav Tykhiy for (p = s2; *s; s++, p++) { 3173e4648f05SYaroslav Tykhiy if ((*p = *s) == '"') 3174e4648f05SYaroslav Tykhiy *(++p) = '"'; 3175e4648f05SYaroslav Tykhiy } 3176e4648f05SYaroslav Tykhiy *p = '\0'; 3177e4648f05SYaroslav Tykhiy 3178e4648f05SYaroslav Tykhiy return (s2); 3179e4648f05SYaroslav Tykhiy } 3180206fe568SHajimu UMEMOTO 3181206fe568SHajimu UMEMOTO /* setup server socket for specified address family */ 3182206fe568SHajimu UMEMOTO /* if af is PF_UNSPEC more than one socket may be returned */ 3183206fe568SHajimu UMEMOTO /* the returned list is dynamically allocated, so caller needs to free it */ 3184206fe568SHajimu UMEMOTO static int * 3185206fe568SHajimu UMEMOTO socksetup(int af, char *bindname, const char *bindport) 3186206fe568SHajimu UMEMOTO { 3187206fe568SHajimu UMEMOTO struct addrinfo hints, *res, *r; 3188206fe568SHajimu UMEMOTO int error, maxs, *s, *socks; 3189206fe568SHajimu UMEMOTO const int on = 1; 3190206fe568SHajimu UMEMOTO 3191206fe568SHajimu UMEMOTO memset(&hints, 0, sizeof(hints)); 3192206fe568SHajimu UMEMOTO hints.ai_flags = AI_PASSIVE; 3193206fe568SHajimu UMEMOTO hints.ai_family = af; 3194206fe568SHajimu UMEMOTO hints.ai_socktype = SOCK_STREAM; 3195206fe568SHajimu UMEMOTO error = getaddrinfo(bindname, bindport, &hints, &res); 3196206fe568SHajimu UMEMOTO if (error) { 3197206fe568SHajimu UMEMOTO syslog(LOG_ERR, "%s", gai_strerror(error)); 3198206fe568SHajimu UMEMOTO if (error == EAI_SYSTEM) 3199206fe568SHajimu UMEMOTO syslog(LOG_ERR, "%s", strerror(errno)); 3200206fe568SHajimu UMEMOTO return NULL; 3201206fe568SHajimu UMEMOTO } 3202206fe568SHajimu UMEMOTO 3203206fe568SHajimu UMEMOTO /* Count max number of sockets we may open */ 3204206fe568SHajimu UMEMOTO for (maxs = 0, r = res; r; r = r->ai_next, maxs++) 3205206fe568SHajimu UMEMOTO ; 3206206fe568SHajimu UMEMOTO socks = malloc((maxs + 1) * sizeof(int)); 3207206fe568SHajimu UMEMOTO if (!socks) { 3208206fe568SHajimu UMEMOTO freeaddrinfo(res); 3209206fe568SHajimu UMEMOTO syslog(LOG_ERR, "couldn't allocate memory for sockets"); 3210206fe568SHajimu UMEMOTO return NULL; 3211206fe568SHajimu UMEMOTO } 3212206fe568SHajimu UMEMOTO 3213206fe568SHajimu UMEMOTO *socks = 0; /* num of sockets counter at start of array */ 3214206fe568SHajimu UMEMOTO s = socks + 1; 3215206fe568SHajimu UMEMOTO for (r = res; r; r = r->ai_next) { 3216206fe568SHajimu UMEMOTO *s = socket(r->ai_family, r->ai_socktype, r->ai_protocol); 3217206fe568SHajimu UMEMOTO if (*s < 0) { 3218206fe568SHajimu UMEMOTO syslog(LOG_DEBUG, "control socket: %m"); 3219206fe568SHajimu UMEMOTO continue; 3220206fe568SHajimu UMEMOTO } 3221206fe568SHajimu UMEMOTO if (setsockopt(*s, SOL_SOCKET, SO_REUSEADDR, 3222206fe568SHajimu UMEMOTO &on, sizeof(on)) < 0) 3223206fe568SHajimu UMEMOTO syslog(LOG_WARNING, 3224206fe568SHajimu UMEMOTO "control setsockopt (SO_REUSEADDR): %m"); 3225206fe568SHajimu UMEMOTO if (r->ai_family == AF_INET6) { 3226206fe568SHajimu UMEMOTO if (setsockopt(*s, IPPROTO_IPV6, IPV6_V6ONLY, 3227206fe568SHajimu UMEMOTO &on, sizeof(on)) < 0) 3228206fe568SHajimu UMEMOTO syslog(LOG_WARNING, 3229206fe568SHajimu UMEMOTO "control setsockopt (IPV6_V6ONLY): %m"); 3230206fe568SHajimu UMEMOTO } 3231206fe568SHajimu UMEMOTO if (bind(*s, r->ai_addr, r->ai_addrlen) < 0) { 3232206fe568SHajimu UMEMOTO syslog(LOG_DEBUG, "control bind: %m"); 3233206fe568SHajimu UMEMOTO close(*s); 3234206fe568SHajimu UMEMOTO continue; 3235206fe568SHajimu UMEMOTO } 3236206fe568SHajimu UMEMOTO (*socks)++; 3237206fe568SHajimu UMEMOTO s++; 3238206fe568SHajimu UMEMOTO } 3239206fe568SHajimu UMEMOTO 3240206fe568SHajimu UMEMOTO if (res) 3241206fe568SHajimu UMEMOTO freeaddrinfo(res); 3242206fe568SHajimu UMEMOTO 3243206fe568SHajimu UMEMOTO if (*socks == 0) { 3244206fe568SHajimu UMEMOTO syslog(LOG_ERR, "control socket: Couldn't bind to any socket"); 3245206fe568SHajimu UMEMOTO free(socks); 3246206fe568SHajimu UMEMOTO return NULL; 3247206fe568SHajimu UMEMOTO } 3248206fe568SHajimu UMEMOTO return(socks); 3249206fe568SHajimu UMEMOTO } 3250