xref: /freebsd/usr.sbin/lpr/lpd/printjob.c (revision d397408818fbfa179246fb327659e3fb29ffff31)
1 /*
2  * Copyright (c) 1983, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  * 3. All advertising materials mentioning features or use of this software
15  *    must display the following acknowledgement:
16  *	This product includes software developed by the University of
17  *	California, Berkeley and its contributors.
18  * 4. Neither the name of the University nor the names of its contributors
19  *    may be used to endorse or promote products derived from this software
20  *    without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
26  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32  * SUCH DAMAGE.
33  */
34 
35 #ifndef lint
36 static const char copyright[] =
37 "@(#) Copyright (c) 1983, 1993\n\
38 	The Regents of the University of California.  All rights reserved.\n";
39 #endif /* not lint */
40 
41 #ifndef lint
42 /*
43 static char sccsid[] = "@(#)printjob.c	8.7 (Berkeley) 5/10/95";
44 */
45 static const char rcsid[] =
46   "$FreeBSD$";
47 #endif /* not lint */
48 
49 
50 /*
51  * printjob -- print jobs in the queue.
52  *
53  *	NOTE: the lock file is used to pass information to lpq and lprm.
54  *	it does not need to be removed because file locks are dynamic.
55  */
56 
57 #include <sys/param.h>
58 #include <sys/wait.h>
59 #include <sys/stat.h>
60 #include <sys/types.h>
61 
62 #include <pwd.h>
63 #include <unistd.h>
64 #include <signal.h>
65 #include <syslog.h>
66 #include <fcntl.h>
67 #include <dirent.h>
68 #include <errno.h>
69 #include <stdio.h>
70 #include <string.h>
71 #include <stdlib.h>
72 #include <sys/ioctl.h>
73 #include <termios.h>
74 #include <time.h>
75 #include "lp.h"
76 #include "lp.local.h"
77 #include "pathnames.h"
78 #include "extern.h"
79 
80 #define DORETURN	0	/* dofork should return "can't fork" error */
81 #define DOABORT		1	/* dofork should just die if fork() fails */
82 
83 /*
84  * Error tokens
85  */
86 #define REPRINT		-2
87 #define ERROR		-1
88 #define	OK		0
89 #define	FATALERR	1
90 #define	NOACCT		2
91 #define	FILTERERR	3
92 #define	ACCESS		4
93 
94 static dev_t	 fdev;		/* device of file pointed to by symlink */
95 static ino_t	 fino;		/* inode of file pointed to by symlink */
96 static FILE	*cfp;		/* control file */
97 static int	 child;		/* id of any filters */
98 static int	 job_dfcnt;	/* count of datafiles in current user job */
99 static int	 lfd;		/* lock file descriptor */
100 static int	 ofd;		/* output filter file descriptor */
101 static int	 ofilter;	/* id of output filter, if any */
102 static int	 tfd = -1;	/* output filter temp file output */
103 static int	 pfd;		/* prstatic inter file descriptor */
104 static int	 pid;		/* pid of lpd process */
105 static int	 prchild;	/* id of pr process */
106 static char	 title[80];	/* ``pr'' title */
107 static char      locale[80];    /* ``pr'' locale */
108 
109 /* these two are set from pp->daemon_user, but only if they are needed */
110 static char	*daemon_uname;	/* set from pwd->pw_name */
111 static int	 daemon_defgid;
112 
113 static char	class[32];		/* classification field */
114 static char	origin_host[MAXHOSTNAMELEN];	/* user's host machine */
115 				/* indentation size in static characters */
116 static char	indent[10] = "-i0";
117 static char	jobname[100];		/* job or file name */
118 static char	length[10] = "-l";	/* page length in lines */
119 static char	logname[32];		/* user's login name */
120 static char	pxlength[10] = "-y";	/* page length in pixels */
121 static char	pxwidth[10] = "-x";	/* page width in pixels */
122 /* tempstderr is the filename used to catch stderr from exec-ing filters */
123 static char	tempstderr[] = "errs.XXXXXXX";
124 static char	width[10] = "-w";	/* page width in static characters */
125 #define TFILENAME "fltXXXXXX"
126 static char	tfile[] = TFILENAME;	/* file name for filter output */
127 
128 static void	 abortpr(int _signo);
129 static void	 alarmhandler(int _signo);
130 static void	 banner(struct printer *_pp, char *_name1, char *_name2);
131 static int	 dofork(const struct printer *_pp, int _action);
132 static int	 dropit(int _c);
133 static int	 execfilter(struct printer *_pp, char *_f_cmd, char **_f_av,
134 		    int _infd, int _outfd);
135 static void	 init(struct printer *_pp);
136 static void	 openpr(const struct printer *_pp);
137 static void	 opennet(const struct printer *_pp);
138 static void	 opentty(const struct printer *_pp);
139 static void	 openrem(const struct printer *pp);
140 static int	 print(struct printer *_pp, int _format, char *_file);
141 static int	 printit(struct printer *_pp, char *_file);
142 static void	 pstatus(const struct printer *_pp, const char *_msg, ...)
143 		    __printflike(2, 3);
144 static char	 response(const struct printer *_pp);
145 static void	 scan_out(struct printer *_pp, int _scfd, char *_scsp,
146 		    int _dlm);
147 static char	*scnline(int _key, char *_p, int _c);
148 static int	 sendfile(struct printer *_pp, int _type, char *_file,
149 		    char _format);
150 static int	 sendit(struct printer *_pp, char *_file);
151 static void	 sendmail(struct printer *_pp, char *_userid, int _bombed);
152 static void	 setty(const struct printer *_pp);
153 
154 void
155 printjob(struct printer *pp)
156 {
157 	struct stat stb;
158 	register struct jobqueue *q, **qp;
159 	struct jobqueue **queue;
160 	register int i, nitems;
161 	off_t pidoff;
162 	int errcnt, jobcount, tempfd;
163 
164 	jobcount = 0;
165 	init(pp); /* set up capabilities */
166 	(void) write(1, "", 1);	/* ack that daemon is started */
167 	(void) close(2);			/* set up log file */
168 	if (open(pp->log_file, O_WRONLY|O_APPEND, LOG_FILE_MODE) < 0) {
169 		syslog(LOG_ERR, "%s: %m", pp->log_file);
170 		(void) open(_PATH_DEVNULL, O_WRONLY);
171 	}
172 	setgid(getegid());
173 	pid = getpid();				/* for use with lprm */
174 	setpgrp(0, pid);
175 
176 	/*
177 	 * At initial lpd startup, printjob may be called with various
178 	 * signal handlers in effect.  After that initial startup, any
179 	 * calls to printjob will have a *different* set of signal-handlers
180 	 * in effect.  Make sure all handlers are the ones we want.
181 	 */
182 	signal(SIGCHLD, SIG_DFL);
183 	signal(SIGHUP, abortpr);
184 	signal(SIGINT, abortpr);
185 	signal(SIGQUIT, abortpr);
186 	signal(SIGTERM, abortpr);
187 
188 	/*
189 	 * uses short form file names
190 	 */
191 	if (chdir(pp->spool_dir) < 0) {
192 		syslog(LOG_ERR, "%s: %m", pp->spool_dir);
193 		exit(1);
194 	}
195 	if (stat(pp->lock_file, &stb) == 0 && (stb.st_mode & LFM_PRINT_DIS))
196 		exit(0);		/* printing disabled */
197 	lfd = open(pp->lock_file, O_WRONLY|O_CREAT|O_EXLOCK|O_NONBLOCK,
198 		   LOCK_FILE_MODE);
199 	if (lfd < 0) {
200 		if (errno == EWOULDBLOCK)	/* active daemon present */
201 			exit(0);
202 		syslog(LOG_ERR, "%s: %s: %m", pp->printer, pp->lock_file);
203 		exit(1);
204 	}
205 	/* turn off non-blocking mode (was turned on for lock effects only) */
206 	if (fcntl(lfd, F_SETFL, 0) < 0) {
207 		syslog(LOG_ERR, "%s: %s: %m", pp->printer, pp->lock_file);
208 		exit(1);
209 	}
210 	ftruncate(lfd, 0);
211 	/*
212 	 * write process id for others to know
213 	 */
214 	sprintf(line, "%u\n", pid);
215 	pidoff = i = strlen(line);
216 	if (write(lfd, line, i) != i) {
217 		syslog(LOG_ERR, "%s: %s: %m", pp->printer, pp->lock_file);
218 		exit(1);
219 	}
220 	/*
221 	 * search the spool directory for work and sort by queue order.
222 	 */
223 	if ((nitems = getq(pp, &queue)) < 0) {
224 		syslog(LOG_ERR, "%s: can't scan %s", pp->printer,
225 		       pp->spool_dir);
226 		exit(1);
227 	}
228 	if (nitems == 0)		/* no work to do */
229 		exit(0);
230 	if (stb.st_mode & LFM_RESET_QUE) { /* reset queue flag */
231 		if (fchmod(lfd, stb.st_mode & ~LFM_RESET_QUE) < 0)
232 			syslog(LOG_ERR, "%s: %s: %m", pp->printer,
233 			       pp->lock_file);
234 	}
235 
236 	/* create a file which will be used to hold stderr from filters */
237 	if ((tempfd = mkstemp(tempstderr)) == -1) {
238 		syslog(LOG_ERR, "%s: mkstemp(%s): %m", pp->printer,
239 		       tempstderr);
240 		exit(1);
241 	}
242 	if ((i = fchmod(tempfd, 0664)) == -1) {
243 		syslog(LOG_ERR, "%s: fchmod(%s): %m", pp->printer,
244 		       tempstderr);
245 		exit(1);
246 	}
247 	/* lpd doesn't need it to be open, it just needs it to exist */
248 	close(tempfd);
249 
250 	openpr(pp);			/* open printer or remote */
251 again:
252 	/*
253 	 * we found something to do now do it --
254 	 *    write the name of the current control file into the lock file
255 	 *    so the spool queue program can tell what we're working on
256 	 */
257 	for (qp = queue; nitems--; free((char *) q)) {
258 		q = *qp++;
259 		if (stat(q->job_cfname, &stb) < 0)
260 			continue;
261 		errcnt = 0;
262 	restart:
263 		(void) lseek(lfd, pidoff, 0);
264 		(void) snprintf(line, sizeof(line), "%s\n", q->job_cfname);
265 		i = strlen(line);
266 		if (write(lfd, line, i) != i)
267 			syslog(LOG_ERR, "%s: %s: %m", pp->printer,
268 			       pp->lock_file);
269 		if (!pp->remote)
270 			i = printit(pp, q->job_cfname);
271 		else
272 			i = sendit(pp, q->job_cfname);
273 		/*
274 		 * Check to see if we are supposed to stop printing or
275 		 * if we are to rebuild the queue.
276 		 */
277 		if (fstat(lfd, &stb) == 0) {
278 			/* stop printing before starting next job? */
279 			if (stb.st_mode & LFM_PRINT_DIS)
280 				goto done;
281 			/* rebuild queue (after lpc topq) */
282 			if (stb.st_mode & LFM_RESET_QUE) {
283 				for (free(q); nitems--; free(q))
284 					q = *qp++;
285 				if (fchmod(lfd, stb.st_mode & ~LFM_RESET_QUE)
286 				    < 0)
287 					syslog(LOG_WARNING, "%s: %s: %m",
288 					       pp->printer, pp->lock_file);
289 				break;
290 			}
291 		}
292 		if (i == OK)		/* all files of this job printed */
293 			jobcount++;
294 		else if (i == REPRINT && ++errcnt < 5) {
295 			/* try reprinting the job */
296 			syslog(LOG_INFO, "restarting %s", pp->printer);
297 			if (ofilter > 0) {
298 				kill(ofilter, SIGCONT);	/* to be sure */
299 				(void) close(ofd);
300 				while ((i = wait(NULL)) > 0 && i != ofilter)
301 					;
302 				if (i < 0)
303 					syslog(LOG_WARNING, "%s: after kill(of=%d), wait() returned: %m",
304 					    pp->printer, ofilter);
305 				ofilter = 0;
306 			}
307 			(void) close(pfd);	/* close printer */
308 			if (ftruncate(lfd, pidoff) < 0)
309 				syslog(LOG_WARNING, "%s: %s: %m",
310 				       pp->printer, pp->lock_file);
311 			openpr(pp);		/* try to reopen printer */
312 			goto restart;
313 		} else {
314 			syslog(LOG_WARNING, "%s: job could not be %s (%s)",
315 			       pp->printer,
316 			       pp->remote ? "sent to remote host" : "printed",
317 			       q->job_cfname);
318 			if (i == REPRINT) {
319 				/* ensure we don't attempt this job again */
320 				(void) unlink(q->job_cfname);
321 				q->job_cfname[0] = 'd';
322 				(void) unlink(q->job_cfname);
323 				if (logname[0])
324 					sendmail(pp, logname, FATALERR);
325 			}
326 		}
327 	}
328 	free(queue);
329 	/*
330 	 * search the spool directory for more work.
331 	 */
332 	if ((nitems = getq(pp, &queue)) < 0) {
333 		syslog(LOG_ERR, "%s: can't scan %s", pp->printer,
334 		       pp->spool_dir);
335 		exit(1);
336 	}
337 	if (nitems == 0) {		/* no more work to do */
338 	done:
339 		if (jobcount > 0) {	/* jobs actually printed */
340 			if (!pp->no_formfeed && !pp->tof)
341 				(void) write(ofd, pp->form_feed,
342 					     strlen(pp->form_feed));
343 			if (pp->trailer != NULL) /* output trailer */
344 				(void) write(ofd, pp->trailer,
345 					     strlen(pp->trailer));
346 		}
347 		(void) close(ofd);
348 		(void) wait(NULL);
349 		(void) unlink(tempstderr);
350 		exit(0);
351 	}
352 	goto again;
353 }
354 
355 char	fonts[4][50];	/* fonts for troff */
356 
357 char ifonts[4][40] = {
358 	_PATH_VFONTR,
359 	_PATH_VFONTI,
360 	_PATH_VFONTB,
361 	_PATH_VFONTS,
362 };
363 
364 /*
365  * The remaining part is the reading of the control file (cf)
366  * and performing the various actions.
367  */
368 static int
369 printit(struct printer *pp, char *file)
370 {
371 	register int i;
372 	char *cp;
373 	int bombed, didignorehdr;
374 
375 	bombed = OK;
376 	didignorehdr = 0;
377 	/*
378 	 * open control file; ignore if no longer there.
379 	 */
380 	if ((cfp = fopen(file, "r")) == NULL) {
381 		syslog(LOG_INFO, "%s: %s: %m", pp->printer, file);
382 		return(OK);
383 	}
384 	/*
385 	 * Reset troff fonts.
386 	 */
387 	for (i = 0; i < 4; i++)
388 		strcpy(fonts[i], ifonts[i]);
389 	sprintf(&width[2], "%ld", pp->page_width);
390 	strcpy(indent+2, "0");
391 
392 	/* initialize job-specific count of datafiles processed */
393 	job_dfcnt = 0;
394 
395 	/*
396 	 *      read the control file for work to do
397 	 *
398 	 *      file format -- first character in the line is a command
399 	 *      rest of the line is the argument.
400 	 *      valid commands are:
401 	 *
402 	 *		S -- "stat info" for symbolic link protection
403 	 *		J -- "job name" on banner page
404 	 *		C -- "class name" on banner page
405 	 *              L -- "literal" user's name to print on banner
406 	 *		T -- "title" for pr
407 	 *		H -- "host name" of machine where lpr was done
408 	 *              P -- "person" user's login name
409 	 *              I -- "indent" amount to indent output
410 	 *		R -- laser dpi "resolution"
411 	 *              f -- "file name" name of text file to print
412 	 *		l -- "file name" text file with control chars
413 	 *		o -- "file name" postscript file, according to
414 	 *		     the RFC.  Here it is treated like an 'f'.
415 	 *		p -- "file name" text file to print with pr(1)
416 	 *		t -- "file name" troff(1) file to print
417 	 *		n -- "file name" ditroff(1) file to print
418 	 *		d -- "file name" dvi file to print
419 	 *		g -- "file name" plot(1G) file to print
420 	 *		v -- "file name" plain raster file to print
421 	 *		c -- "file name" cifplot file to print
422 	 *		1 -- "R font file" for troff
423 	 *		2 -- "I font file" for troff
424 	 *		3 -- "B font file" for troff
425 	 *		4 -- "S font file" for troff
426 	 *		N -- "name" of file (used by lpq)
427 	 *              U -- "unlink" name of file to remove
428 	 *                    (after we print it. (Pass 2 only)).
429 	 *		M -- "mail" to user when done printing
430 	 *              Z -- "locale" for pr
431 	 *
432 	 *      getline reads a line and expands tabs to blanks
433 	 */
434 
435 	/* pass 1 */
436 
437 	while (getline(cfp))
438 		switch (line[0]) {
439 		case 'H':
440 			strlcpy(origin_host, line + 1, sizeof(origin_host));
441 			if (class[0] == '\0') {
442 				strlcpy(class, line+1, sizeof(class));
443 			}
444 			continue;
445 
446 		case 'P':
447 			strlcpy(logname, line + 1, sizeof(logname));
448 			if (pp->restricted) { /* restricted */
449 				if (getpwnam(logname) == NULL) {
450 					bombed = NOACCT;
451 					sendmail(pp, line+1, bombed);
452 					goto pass2;
453 				}
454 			}
455 			continue;
456 
457 		case 'S':
458 			cp = line+1;
459 			i = 0;
460 			while (*cp >= '0' && *cp <= '9')
461 				i = i * 10 + (*cp++ - '0');
462 			fdev = i;
463 			cp++;
464 			i = 0;
465 			while (*cp >= '0' && *cp <= '9')
466 				i = i * 10 + (*cp++ - '0');
467 			fino = i;
468 			continue;
469 
470 		case 'J':
471 			if (line[1] != '\0') {
472 				strlcpy(jobname, line + 1, sizeof(jobname));
473 			} else
474 				strcpy(jobname, " ");
475 			continue;
476 
477 		case 'C':
478 			if (line[1] != '\0')
479 				strlcpy(class, line + 1, sizeof(class));
480 			else if (class[0] == '\0') {
481 				/* XXX - why call gethostname instead of
482 				 *       just strlcpy'ing local_host? */
483 				gethostname(class, sizeof(class));
484 				class[sizeof(class) - 1] = '\0';
485 			}
486 			continue;
487 
488 		case 'T':	/* header title for pr */
489 			strlcpy(title, line + 1, sizeof(title));
490 			continue;
491 
492 		case 'L':	/* identification line */
493 			if (!pp->no_header && !pp->header_last)
494 				banner(pp, line+1, jobname);
495 			continue;
496 
497 		case '1':	/* troff fonts */
498 		case '2':
499 		case '3':
500 		case '4':
501 			if (line[1] != '\0') {
502 				strlcpy(fonts[line[0]-'1'], line + 1,
503 				    (size_t)50);
504 			}
505 			continue;
506 
507 		case 'W':	/* page width */
508 			strlcpy(width+2, line + 1, sizeof(width) - 2);
509 			continue;
510 
511 		case 'I':	/* indent amount */
512 			strlcpy(indent+2, line + 1, sizeof(indent) - 2);
513 			continue;
514 
515 		case 'Z':       /* locale for pr */
516 			strlcpy(locale, line + 1, sizeof(locale));
517 			continue;
518 
519 		default:	/* some file to print */
520 			/* only lowercase cmd-codes include a file-to-print */
521 			if ((line[0] < 'a') || (line[0] > 'z')) {
522 				/* ignore any other lines */
523 				if (lflag <= 1)
524 					continue;
525 				if (!didignorehdr) {
526 					syslog(LOG_INFO, "%s: in %s :",
527 					       pp->printer, file);
528 					didignorehdr = 1;
529 				}
530 				syslog(LOG_INFO, "%s: ignoring line: '%c' %s",
531 				       pp->printer, line[0], &line[1]);
532 				continue;
533 			}
534 			i = print(pp, line[0], line+1);
535 			switch (i) {
536 			case ERROR:
537 				if (bombed == OK)
538 					bombed = FATALERR;
539 				break;
540 			case REPRINT:
541 				(void) fclose(cfp);
542 				return(REPRINT);
543 			case FILTERERR:
544 			case ACCESS:
545 				bombed = i;
546 				sendmail(pp, logname, bombed);
547 			}
548 			title[0] = '\0';
549 			continue;
550 
551 		case 'N':
552 		case 'U':
553 		case 'M':
554 		case 'R':
555 			continue;
556 		}
557 
558 	/* pass 2 */
559 
560 pass2:
561 	fseek(cfp, 0L, 0);
562 	while (getline(cfp))
563 		switch (line[0]) {
564 		case 'L':	/* identification line */
565 			if (!pp->no_header && pp->header_last)
566 				banner(pp, line+1, jobname);
567 			continue;
568 
569 		case 'M':
570 			if (bombed < NOACCT)	/* already sent if >= NOACCT */
571 				sendmail(pp, line+1, bombed);
572 			continue;
573 
574 		case 'U':
575 			if (strchr(line+1, '/'))
576 				continue;
577 			(void) unlink(line+1);
578 		}
579 	/*
580 	 * clean-up in case another control file exists
581 	 */
582 	(void) fclose(cfp);
583 	(void) unlink(file);
584 	return(bombed == OK ? OK : ERROR);
585 }
586 
587 /*
588  * Print a file.
589  * Set up the chain [ PR [ | {IF, OF} ] ] or {IF, RF, TF, NF, DF, CF, VF}.
590  * Return -1 if a non-recoverable error occured,
591  * 2 if the filter detected some errors (but printed the job anyway),
592  * 1 if we should try to reprint this job and
593  * 0 if all is well.
594  * Note: all filters take stdin as the file, stdout as the printer,
595  * stderr as the log file, and must not ignore SIGINT.
596  */
597 static int
598 print(struct printer *pp, int format, char *file)
599 {
600 	register int n, i;
601 	register char *prog;
602 	int fi, fo;
603 	FILE *fp;
604 	char *av[15], buf[BUFSIZ];
605 	int pid, p[2], stopped;
606 	union wait status;
607 	struct stat stb;
608 
609 	if (lstat(file, &stb) < 0 || (fi = open(file, O_RDONLY)) < 0) {
610 		syslog(LOG_INFO, "%s: unable to open %s ('%c' line)",
611 		       pp->printer, file, format);
612 		return(ERROR);
613 	}
614 	/*
615 	 * Check to see if data file is a symbolic link. If so, it should
616 	 * still point to the same file or someone is trying to print
617 	 * something he shouldn't.
618 	 */
619 	if ((stb.st_mode & S_IFMT) == S_IFLNK && fstat(fi, &stb) == 0 &&
620 	    (stb.st_dev != fdev || stb.st_ino != fino))
621 		return(ACCESS);
622 
623 	job_dfcnt++;		/* increment datafile counter for this job */
624 	stopped = 0;		/* output filter is not stopped */
625 
626 	/* everything seems OK, start it up */
627 	if (!pp->no_formfeed && !pp->tof) { /* start on a fresh page */
628 		(void) write(ofd, pp->form_feed, strlen(pp->form_feed));
629 		pp->tof = 1;
630 	}
631 	if (pp->filters[LPF_INPUT] == NULL
632 	    && (format == 'f' || format == 'l' || format == 'o')) {
633 		pp->tof = 0;
634 		while ((n = read(fi, buf, BUFSIZ)) > 0)
635 			if (write(ofd, buf, n) != n) {
636 				(void) close(fi);
637 				return(REPRINT);
638 			}
639 		(void) close(fi);
640 		return(OK);
641 	}
642 	switch (format) {
643 	case 'p':	/* print file using 'pr' */
644 		if (pp->filters[LPF_INPUT] == NULL) {	/* use output filter */
645 			prog = _PATH_PR;
646 			i = 0;
647 			av[i++] = "pr";
648 			av[i++] = width;
649 			av[i++] = length;
650 			av[i++] = "-h";
651 			av[i++] = *title ? title : " ";
652 			av[i++] = "-L";
653 			av[i++] = *locale ? locale : "C";
654 			av[i++] = "-F";
655 			av[i] = 0;
656 			fo = ofd;
657 			goto start;
658 		}
659 		pipe(p);
660 		if ((prchild = dofork(pp, DORETURN)) == 0) {	/* child */
661 			dup2(fi, 0);		/* file is stdin */
662 			dup2(p[1], 1);		/* pipe is stdout */
663 			closelog();
664 			closeallfds(3);
665 			execl(_PATH_PR, "pr", width, length,
666 			    "-h", *title ? title : " ",
667 			    "-L", *locale ? locale : "C",
668 			    "-F", (char *)0);
669 			syslog(LOG_ERR, "cannot execl %s", _PATH_PR);
670 			exit(2);
671 		}
672 		(void) close(p[1]);		/* close output side */
673 		(void) close(fi);
674 		if (prchild < 0) {
675 			prchild = 0;
676 			(void) close(p[0]);
677 			return(ERROR);
678 		}
679 		fi = p[0];			/* use pipe for input */
680 	case 'f':	/* print plain text file */
681 		prog = pp->filters[LPF_INPUT];
682 		av[1] = width;
683 		av[2] = length;
684 		av[3] = indent;
685 		n = 4;
686 		break;
687 	case 'o':	/* print postscript file */
688 		/*
689 		 * Treat this as a "plain file with control characters", and
690 		 * assume the standard LPF_INPUT filter will recognize that
691 		 * the data is postscript and know what to do with it.  These
692 		 * 'o'-file requests could come from MacOS 10.1 systems.
693 		 * (later versions of MacOS 10 will explicitly use 'l')
694 		 * A postscript file can contain binary data, which is why 'l'
695 		 * is somewhat more appropriate than 'f'.
696 		 */
697 		/* FALLTHROUGH */
698 	case 'l':	/* like 'f' but pass control characters */
699 		prog = pp->filters[LPF_INPUT];
700 		av[1] = "-c";
701 		av[2] = width;
702 		av[3] = length;
703 		av[4] = indent;
704 		n = 5;
705 		break;
706 	case 'r':	/* print a fortran text file */
707 		prog = pp->filters[LPF_FORTRAN];
708 		av[1] = width;
709 		av[2] = length;
710 		n = 3;
711 		break;
712 	case 't':	/* print troff output */
713 	case 'n':	/* print ditroff output */
714 	case 'd':	/* print tex output */
715 		(void) unlink(".railmag");
716 		if ((fo = creat(".railmag", FILMOD)) < 0) {
717 			syslog(LOG_ERR, "%s: cannot create .railmag",
718 			       pp->printer);
719 			(void) unlink(".railmag");
720 		} else {
721 			for (n = 0; n < 4; n++) {
722 				if (fonts[n][0] != '/')
723 					(void) write(fo, _PATH_VFONT,
724 					    sizeof(_PATH_VFONT) - 1);
725 				(void) write(fo, fonts[n], strlen(fonts[n]));
726 				(void) write(fo, "\n", 1);
727 			}
728 			(void) close(fo);
729 		}
730 		prog = (format == 't') ? pp->filters[LPF_TROFF]
731 			: ((format == 'n') ? pp->filters[LPF_DITROFF]
732 			   : pp->filters[LPF_DVI]);
733 		av[1] = pxwidth;
734 		av[2] = pxlength;
735 		n = 3;
736 		break;
737 	case 'c':	/* print cifplot output */
738 		prog = pp->filters[LPF_CIFPLOT];
739 		av[1] = pxwidth;
740 		av[2] = pxlength;
741 		n = 3;
742 		break;
743 	case 'g':	/* print plot(1G) output */
744 		prog = pp->filters[LPF_GRAPH];
745 		av[1] = pxwidth;
746 		av[2] = pxlength;
747 		n = 3;
748 		break;
749 	case 'v':	/* print raster output */
750 		prog = pp->filters[LPF_RASTER];
751 		av[1] = pxwidth;
752 		av[2] = pxlength;
753 		n = 3;
754 		break;
755 	default:
756 		(void) close(fi);
757 		syslog(LOG_ERR, "%s: illegal format character '%c'",
758 			pp->printer, format);
759 		return(ERROR);
760 	}
761 	if (prog == NULL) {
762 		(void) close(fi);
763 		syslog(LOG_ERR,
764 		   "%s: no filter found in printcap for format character '%c'",
765 		   pp->printer, format);
766 		return(ERROR);
767 	}
768 	if ((av[0] = strrchr(prog, '/')) != NULL)
769 		av[0]++;
770 	else
771 		av[0] = prog;
772 	av[n++] = "-n";
773 	av[n++] = logname;
774 	av[n++] = "-h";
775 	av[n++] = origin_host;
776 	av[n++] = pp->acct_file;
777 	av[n] = 0;
778 	fo = pfd;
779 	if (ofilter > 0) {		/* stop output filter */
780 		write(ofd, "\031\1", 2);
781 		while ((pid =
782 		    wait3((int *)&status, WUNTRACED, 0)) > 0 && pid != ofilter)
783 			;
784 		if (pid < 0)
785 			syslog(LOG_WARNING, "%s: after stopping 'of', wait3() returned: %m",
786 			    pp->printer);
787 		else if (status.w_stopval != WSTOPPED) {
788 			(void) close(fi);
789 			syslog(LOG_WARNING,
790 			       "%s: output filter died "
791 			       "(pid=%d retcode=%d termsig=%d)",
792 				pp->printer, ofilter, status.w_retcode,
793 			       status.w_termsig);
794 			return(REPRINT);
795 		}
796 		stopped++;
797 	}
798 start:
799 	if ((child = dofork(pp, DORETURN)) == 0) { /* child */
800 		dup2(fi, 0);
801 		dup2(fo, 1);
802 		/* setup stderr for the filter (child process)
803 		 * so it goes to our temporary errors file */
804 		n = open(tempstderr, O_WRONLY|O_TRUNC, 0664);
805 		if (n >= 0)
806 			dup2(n, 2);
807 		closelog();
808 		closeallfds(3);
809 		execv(prog, av);
810 		syslog(LOG_ERR, "%s: cannot execv(%s): %m", pp->printer,
811 		    prog);
812 		exit(2);
813 	}
814 	(void) close(fi);
815 	if (child < 0)
816 		status.w_retcode = 100;
817 	else {
818 		while ((pid = wait((int *)&status)) > 0 && pid != child)
819 			;
820 		if (pid < 0) {
821 			status.w_retcode = 100;
822 			syslog(LOG_WARNING, "%s: after execv(%s), wait() returned: %m",
823 			    pp->printer, prog);
824 		}
825 	}
826 	child = 0;
827 	prchild = 0;
828 	if (stopped) {		/* restart output filter */
829 		if (kill(ofilter, SIGCONT) < 0) {
830 			syslog(LOG_ERR, "cannot restart output filter");
831 			exit(1);
832 		}
833 	}
834 	pp->tof = 0;
835 
836 	/* Copy the filter's output to "lf" logfile */
837 	if ((fp = fopen(tempstderr, "r"))) {
838 		while (fgets(buf, sizeof(buf), fp))
839 			fputs(buf, stderr);
840 		fclose(fp);
841 	}
842 
843 	if (!WIFEXITED(status)) {
844 		syslog(LOG_WARNING, "%s: filter '%c' terminated (termsig=%d)",
845 			pp->printer, format, status.w_termsig);
846 		return(ERROR);
847 	}
848 	switch (status.w_retcode) {
849 	case 0:
850 		pp->tof = 1;
851 		return(OK);
852 	case 1:
853 		return(REPRINT);
854 	case 2:
855 		return(ERROR);
856 	default:
857 		syslog(LOG_WARNING, "%s: filter '%c' exited (retcode=%d)",
858 			pp->printer, format, status.w_retcode);
859 		return(FILTERERR);
860 	}
861 }
862 
863 /*
864  * Send the daemon control file (cf) and any data files.
865  * Return -1 if a non-recoverable error occured, 1 if a recoverable error and
866  * 0 if all is well.
867  */
868 static int
869 sendit(struct printer *pp, char *file)
870 {
871 	register int i, err = OK;
872 	char *cp, last[BUFSIZ];
873 
874 	/*
875 	 * open control file
876 	 */
877 	if ((cfp = fopen(file, "r")) == NULL)
878 		return(OK);
879 
880 	/* initialize job-specific count of datafiles processed */
881 	job_dfcnt = 0;
882 
883 	/*
884 	 *      read the control file for work to do
885 	 *
886 	 *      file format -- first character in the line is a command
887 	 *      rest of the line is the argument.
888 	 *      commands of interest are:
889 	 *
890 	 *            a-z -- "file name" name of file to print
891 	 *              U -- "unlink" name of file to remove
892 	 *                    (after we print it. (Pass 2 only)).
893 	 */
894 
895 	/*
896 	 * pass 1
897 	 */
898 	while (getline(cfp)) {
899 	again:
900 		if (line[0] == 'S') {
901 			cp = line+1;
902 			i = 0;
903 			while (*cp >= '0' && *cp <= '9')
904 				i = i * 10 + (*cp++ - '0');
905 			fdev = i;
906 			cp++;
907 			i = 0;
908 			while (*cp >= '0' && *cp <= '9')
909 				i = i * 10 + (*cp++ - '0');
910 			fino = i;
911 		} else if (line[0] == 'H') {
912 			strlcpy(origin_host, line + 1, sizeof(origin_host));
913 			if (class[0] == '\0') {
914 				strlcpy(class, line + 1, sizeof(class));
915 			}
916 		} else if (line[0] == 'P') {
917 			strlcpy(logname, line + 1, sizeof(logname));
918 			if (pp->restricted) { /* restricted */
919 				if (getpwnam(logname) == NULL) {
920 					sendmail(pp, line+1, NOACCT);
921 					err = ERROR;
922 					break;
923 				}
924 			}
925 		} else if (line[0] == 'I') {
926 			strlcpy(indent+2, line + 1, sizeof(indent) - 2);
927 		} else if (line[0] >= 'a' && line[0] <= 'z') {
928 			strcpy(last, line);
929 			while ((i = getline(cfp)) != 0)
930 				if (strcmp(last, line))
931 					break;
932 			switch (sendfile(pp, '\3', last+1, *last)) {
933 			case OK:
934 				if (i)
935 					goto again;
936 				break;
937 			case REPRINT:
938 				(void) fclose(cfp);
939 				return(REPRINT);
940 			case ACCESS:
941 				sendmail(pp, logname, ACCESS);
942 			case ERROR:
943 				err = ERROR;
944 			}
945 			break;
946 		}
947 	}
948 	if (err == OK && sendfile(pp, '\2', file, '\0') > 0) {
949 		(void) fclose(cfp);
950 		return(REPRINT);
951 	}
952 	/*
953 	 * pass 2
954 	 */
955 	fseek(cfp, 0L, 0);
956 	while (getline(cfp))
957 		if (line[0] == 'U' && !strchr(line+1, '/'))
958 			(void) unlink(line+1);
959 	/*
960 	 * clean-up in case another control file exists
961 	 */
962 	(void) fclose(cfp);
963 	(void) unlink(file);
964 	return(err);
965 }
966 
967 /*
968  * Send a data file to the remote machine and spool it.
969  * Return positive if we should try resending.
970  */
971 static int
972 sendfile(struct printer *pp, int type, char *file, char format)
973 {
974 	int i, amt;
975 	struct stat stb;
976 	char *av[15], *filtcmd;
977 	char buf[BUFSIZ], opt_c[4], opt_h[4], opt_n[4];
978 	int filtstat, narg, resp, sfd, sfres, sizerr, statrc;
979 
980 	statrc = lstat(file, &stb);
981 	if (statrc < 0) {
982 		syslog(LOG_ERR, "%s: error from lstat(%s): %m",
983 		    pp->printer, file);
984 		return (ERROR);
985 	}
986 	sfd = open(file, O_RDONLY);
987 	if (sfd < 0) {
988 		syslog(LOG_ERR, "%s: error from open(%s,O_RDONLY): %m",
989 		    pp->printer, file);
990 		return (ERROR);
991 	}
992 	/*
993 	 * Check to see if data file is a symbolic link. If so, it should
994 	 * still point to the same file or someone is trying to print something
995 	 * he shouldn't.
996 	 */
997 	if ((stb.st_mode & S_IFMT) == S_IFLNK && fstat(sfd, &stb) == 0 &&
998 	    (stb.st_dev != fdev || stb.st_ino != fino)) {
999 		close(sfd);
1000 		return (ACCESS);
1001 	}
1002 
1003 	/* Everything seems OK for reading the file, now to send it */
1004 	filtcmd = NULL;
1005 	sizerr = 0;
1006 	tfd = -1;
1007 	if (type == '\3') {
1008 		/*
1009 		 * Type == 3 means this is a datafile, not a control file.
1010 		 * Increment the counter of data-files in this job, and
1011 		 * then check for input or output filters (which are only
1012 		 * applied to datafiles, not control files).
1013 		 */
1014 		job_dfcnt++;
1015 
1016 		/*
1017 		 * Note that here we are filtering datafiles, one at a time,
1018 		 * as they are sent to the remote machine.  Here, the *only*
1019 		 * difference between an input filter (`if=') and an output
1020 		 * filter (`of=') is the argument list that the filter is
1021 		 * started up with.  Here, the output filter is executed
1022 		 * for each individual file as it is sent.  This is not the
1023 		 * same as local print queues, where the output filter is
1024 		 * started up once, and then all jobs are passed thru that
1025 		 * single invocation of the output filter.
1026 		 *
1027 		 * Also note that a queue for a remote-machine can have an
1028 		 * input filter or an output filter, but not both.
1029 		 */
1030 		if (pp->filters[LPF_INPUT]) {
1031 			filtcmd = pp->filters[LPF_INPUT];
1032 			av[0] = filtcmd;
1033 			narg = 0;
1034 			strcpy(opt_c, "-c");
1035 			strcpy(opt_h, "-h");
1036 			strcpy(opt_n, "-n");
1037 			if (format == 'l')
1038 				av[++narg] = opt_c;
1039 			av[++narg] = width;
1040 			av[++narg] = length;
1041 			av[++narg] = indent;
1042 			av[++narg] = opt_n;
1043 			av[++narg] = logname;
1044 			av[++narg] = opt_h;
1045 			av[++narg] = origin_host;
1046 			av[++narg] = pp->acct_file;
1047 			av[++narg] = NULL;
1048 		} else if (pp->filters[LPF_OUTPUT]) {
1049 			filtcmd = pp->filters[LPF_OUTPUT];
1050 			av[0] = filtcmd;
1051 			narg = 0;
1052 			av[++narg] = width;
1053 			av[++narg] = length;
1054 			av[++narg] = NULL;
1055 		}
1056 	}
1057 	if (filtcmd) {
1058 		/*
1059 		 * If there is an input or output filter, we have to run
1060 		 * the datafile thru that filter and store the result as
1061 		 * a temporary spool file, because the protocol requires
1062 		 * that we send the remote host the file-size before we
1063 		 * start to send any of the data.
1064 		 */
1065 		strcpy(tfile, TFILENAME);
1066 		tfd = mkstemp(tfile);
1067 		if (tfd == -1) {
1068 			syslog(LOG_ERR, "%s: mkstemp(%s): %m", pp->printer,
1069 			    TFILENAME);
1070 			sfres = ERROR;
1071 			goto return_sfres;
1072 		}
1073 		filtstat = execfilter(pp, filtcmd, av, sfd, tfd);
1074 
1075 		/* process the return-code from the filter */
1076 		switch (filtstat) {
1077 		case 0:
1078 			break;
1079 		case 1:
1080 			sfres = REPRINT;
1081 			goto return_sfres;
1082 		case 2:
1083 			sfres = ERROR;
1084 			goto return_sfres;
1085 		default:
1086 			syslog(LOG_WARNING,
1087 			    "%s: filter '%c' exited (retcode=%d)",
1088 			    pp->printer, format, filtstat);
1089 			sfres = FILTERERR;
1090 			goto return_sfres;
1091 		}
1092 		statrc = fstat(tfd, &stb);   /* to find size of tfile */
1093 		if (statrc < 0)	{
1094 			syslog(LOG_ERR,
1095 			    "%s: error processing 'if', fstat(%s): %m",
1096 			    pp->printer, tfile);
1097 			sfres = ERROR;
1098 			goto return_sfres;
1099 		}
1100 		close(sfd);
1101 		sfd = tfd;
1102 		lseek(sfd, 0, SEEK_SET);
1103 	}
1104 
1105 	(void) sprintf(buf, "%c%qd %s\n", type, stb.st_size, file);
1106 	amt = strlen(buf);
1107 	for (i = 0;  ; i++) {
1108 		if (write(pfd, buf, amt) != amt ||
1109 		    (resp = response(pp)) < 0 || resp == '\1') {
1110 			sfres = REPRINT;
1111 			goto return_sfres;
1112 		} else if (resp == '\0')
1113 			break;
1114 		if (i == 0)
1115 			pstatus(pp,
1116 				"no space on remote; waiting for queue to drain");
1117 		if (i == 10)
1118 			syslog(LOG_ALERT, "%s: can't send to %s; queue full",
1119 				pp->printer, pp->remote_host);
1120 		sleep(5 * 60);
1121 	}
1122 	if (i)
1123 		pstatus(pp, "sending to %s", pp->remote_host);
1124 	if (type == '\3')
1125 		trstat_init(pp, file, job_dfcnt);
1126 	for (i = 0; i < stb.st_size; i += BUFSIZ) {
1127 		amt = BUFSIZ;
1128 		if (i + amt > stb.st_size)
1129 			amt = stb.st_size - i;
1130 		if (sizerr == 0 && read(sfd, buf, amt) != amt)
1131 			sizerr = 1;
1132 		if (write(pfd, buf, amt) != amt) {
1133 			sfres = REPRINT;
1134 			goto return_sfres;
1135 		}
1136 	}
1137 
1138 	if (sizerr) {
1139 		syslog(LOG_INFO, "%s: %s: changed size", pp->printer, file);
1140 		/* tell recvjob to ignore this file */
1141 		(void) write(pfd, "\1", 1);
1142 		sfres = ERROR;
1143 		goto return_sfres;
1144 	}
1145 	if (write(pfd, "", 1) != 1 || response(pp)) {
1146 		sfres = REPRINT;
1147 		goto return_sfres;
1148 	}
1149 	if (type == '\3')
1150 		trstat_write(pp, TR_SENDING, stb.st_size, logname,
1151 				 pp->remote_host, origin_host);
1152 	sfres = OK;
1153 
1154 return_sfres:
1155 	(void)close(sfd);
1156 	if (tfd != -1) {
1157 		/*
1158 		 * If tfd is set, then it is the same value as sfd, and
1159 		 * therefore it is already closed at this point.  All
1160 		 * we need to do is remove the temporary file.
1161 		 */
1162 		tfd = -1;
1163 		unlink(tfile);
1164 	}
1165 	return (sfres);
1166 }
1167 
1168 /*
1169  *  This routine is called to execute one of the filters as was
1170  *  specified in a printcap entry.  While the child-process will read
1171  *  all of 'infd', it is up to the caller to close that file descriptor
1172  *  in the parent process.
1173  */
1174 static int
1175 execfilter(struct printer *pp, char *f_cmd, char *f_av[], int infd, int outfd)
1176 {
1177 	int errfd, fpid, wpid;
1178 	FILE *errfp;
1179 	union wait status; /* XXX */
1180 	char buf[BUFSIZ], *slash;
1181 
1182 	fpid = dofork(pp, DORETURN);
1183 	if (fpid != 0) {
1184 		/*
1185 		 * This is the parent process, which just waits for the child
1186 		 * to complete and then returns the result.  Note that it is
1187 		 * the child process which reads the input stream.
1188 		 */
1189 		if (fpid < 0)
1190 			status.w_retcode = 100;
1191 		else {
1192 			while ((wpid = wait((int *)&status)) > 0 &&
1193 			    wpid != fpid)
1194 				;
1195 			if (wpid < 0) {
1196 				status.w_retcode = 100;
1197 				syslog(LOG_WARNING,
1198 				    "%s: after execv(%s), wait() returned: %m",
1199 				    pp->printer, f_cmd);
1200 			}
1201 		}
1202 
1203 		/*
1204 		 * Copy everything the filter wrote to stderr from our
1205 		 * temporary errors file to the "lf=" logfile.
1206 		 */
1207 		errfp = fopen(tempstderr, "r");
1208 		if (errfp) {
1209 			while (fgets(buf, sizeof(buf), errfp))
1210 				fputs(buf, stderr);
1211 			fclose(errfp);
1212 		}
1213 
1214 		return (status.w_retcode);
1215 	}
1216 
1217 	/*
1218 	 * This is the child process, which is the one that executes the
1219 	 * given filter.
1220 	 */
1221 	/*
1222 	 * If the first parameter has any slashes in it, then change it
1223 	 * to point to the first character after the last slash.
1224 	 */
1225 	slash = strrchr(f_av[0], '/');
1226 	if (slash != NULL)
1227 		f_av[0] = slash + 1;
1228 	/*
1229 	 * XXX - in the future, this should setup an explicit list of
1230 	 *       environment variables and use execve()!
1231 	 */
1232 
1233 	/*
1234 	 * Setup stdin, stdout, and stderr as we want them when the filter
1235 	 * is running.  Stderr is setup so it points to a temporary errors
1236 	 * file, and the parent process will copy that temporary file to
1237 	 * the real logfile after the filter completes.
1238 	 */
1239 	dup2(infd, 0);
1240 	dup2(outfd, 1);
1241 	errfd = open(tempstderr, O_WRONLY|O_TRUNC, 0664);
1242 	if (errfd >= 0)
1243 		dup2(errfd, 2);
1244 	closelog();
1245 	closeallfds(3);
1246 	execv(f_cmd, f_av);
1247 	syslog(LOG_ERR, "%s: cannot execv(%s): %m", pp->printer, f_cmd);
1248 	exit(2);
1249 	/* NOTREACHED */
1250 }
1251 
1252 /*
1253  * Check to make sure there have been no errors and that both programs
1254  * are in sync with eachother.
1255  * Return non-zero if the connection was lost.
1256  */
1257 static char
1258 response(const struct printer *pp)
1259 {
1260 	char resp;
1261 
1262 	if (read(pfd, &resp, 1) != 1) {
1263 		syslog(LOG_INFO, "%s: lost connection", pp->printer);
1264 		return(-1);
1265 	}
1266 	return(resp);
1267 }
1268 
1269 /*
1270  * Banner printing stuff
1271  */
1272 static void
1273 banner(struct printer *pp, char *name1, char *name2)
1274 {
1275 	time_t tvec;
1276 
1277 	time(&tvec);
1278 	if (!pp->no_formfeed && !pp->tof)
1279 		(void) write(ofd, pp->form_feed, strlen(pp->form_feed));
1280 	if (pp->short_banner) {	/* short banner only */
1281 		if (class[0]) {
1282 			(void) write(ofd, class, strlen(class));
1283 			(void) write(ofd, ":", 1);
1284 		}
1285 		(void) write(ofd, name1, strlen(name1));
1286 		(void) write(ofd, "  Job: ", 7);
1287 		(void) write(ofd, name2, strlen(name2));
1288 		(void) write(ofd, "  Date: ", 8);
1289 		(void) write(ofd, ctime(&tvec), 24);
1290 		(void) write(ofd, "\n", 1);
1291 	} else {	/* normal banner */
1292 		(void) write(ofd, "\n\n\n", 3);
1293 		scan_out(pp, ofd, name1, '\0');
1294 		(void) write(ofd, "\n\n", 2);
1295 		scan_out(pp, ofd, name2, '\0');
1296 		if (class[0]) {
1297 			(void) write(ofd,"\n\n\n",3);
1298 			scan_out(pp, ofd, class, '\0');
1299 		}
1300 		(void) write(ofd, "\n\n\n\n\t\t\t\t\tJob:  ", 15);
1301 		(void) write(ofd, name2, strlen(name2));
1302 		(void) write(ofd, "\n\t\t\t\t\tDate: ", 12);
1303 		(void) write(ofd, ctime(&tvec), 24);
1304 		(void) write(ofd, "\n", 1);
1305 	}
1306 	if (!pp->no_formfeed)
1307 		(void) write(ofd, pp->form_feed, strlen(pp->form_feed));
1308 	pp->tof = 1;
1309 }
1310 
1311 static char *
1312 scnline(int key, char *p, int c)
1313 {
1314 	register int scnwidth;
1315 
1316 	for (scnwidth = WIDTH; --scnwidth;) {
1317 		key <<= 1;
1318 		*p++ = key & 0200 ? c : BACKGND;
1319 	}
1320 	return (p);
1321 }
1322 
1323 #define TRC(q)	(((q)-' ')&0177)
1324 
1325 static void
1326 scan_out(struct printer *pp, int scfd, char *scsp, int dlm)
1327 {
1328 	register char *strp;
1329 	register int nchrs, j;
1330 	char outbuf[LINELEN+1], *sp, c, cc;
1331 	int d, scnhgt;
1332 
1333 	for (scnhgt = 0; scnhgt++ < HEIGHT+DROP; ) {
1334 		strp = &outbuf[0];
1335 		sp = scsp;
1336 		for (nchrs = 0; ; ) {
1337 			d = dropit(c = TRC(cc = *sp++));
1338 			if ((!d && scnhgt > HEIGHT) || (scnhgt <= DROP && d))
1339 				for (j = WIDTH; --j;)
1340 					*strp++ = BACKGND;
1341 			else
1342 				strp = scnline(scnkey[(int)c][scnhgt-1-d], strp, cc);
1343 			if (*sp == dlm || *sp == '\0' ||
1344 			    nchrs++ >= pp->page_width/(WIDTH+1)-1)
1345 				break;
1346 			*strp++ = BACKGND;
1347 			*strp++ = BACKGND;
1348 		}
1349 		while (*--strp == BACKGND && strp >= outbuf)
1350 			;
1351 		strp++;
1352 		*strp++ = '\n';
1353 		(void) write(scfd, outbuf, strp-outbuf);
1354 	}
1355 }
1356 
1357 static int
1358 dropit(int c)
1359 {
1360 	switch(c) {
1361 
1362 	case TRC('_'):
1363 	case TRC(';'):
1364 	case TRC(','):
1365 	case TRC('g'):
1366 	case TRC('j'):
1367 	case TRC('p'):
1368 	case TRC('q'):
1369 	case TRC('y'):
1370 		return (DROP);
1371 
1372 	default:
1373 		return (0);
1374 	}
1375 }
1376 
1377 /*
1378  * sendmail ---
1379  *   tell people about job completion
1380  */
1381 static void
1382 sendmail(struct printer *pp, char *userid, int bombed)
1383 {
1384 	register int i;
1385 	int p[2], s;
1386 	register const char *cp;
1387 	struct stat stb;
1388 	FILE *fp;
1389 
1390 	pipe(p);
1391 	if ((s = dofork(pp, DORETURN)) == 0) {		/* child */
1392 		dup2(p[0], 0);
1393 		closelog();
1394 		closeallfds(3);
1395 		if ((cp = strrchr(_PATH_SENDMAIL, '/')) != NULL)
1396 			cp++;
1397 		else
1398 			cp = _PATH_SENDMAIL;
1399 		execl(_PATH_SENDMAIL, cp, "-t", (char *)0);
1400 		_exit(0);
1401 	} else if (s > 0) {				/* parent */
1402 		dup2(p[1], 1);
1403 		printf("To: %s@%s\n", userid, origin_host);
1404 		printf("Subject: %s printer job \"%s\"\n", pp->printer,
1405 			*jobname ? jobname : "<unknown>");
1406 		printf("Reply-To: root@%s\n\n", local_host);
1407 		printf("Your printer job ");
1408 		if (*jobname)
1409 			printf("(%s) ", jobname);
1410 
1411 		switch (bombed) {
1412 		case OK:
1413 			cp = "OK";
1414 			printf("\ncompleted successfully\n");
1415 			break;
1416 		default:
1417 		case FATALERR:
1418 			cp = "FATALERR";
1419 			printf("\ncould not be printed\n");
1420 			break;
1421 		case NOACCT:
1422 			cp = "NOACCT";
1423 			printf("\ncould not be printed without an account on %s\n",
1424 			    local_host);
1425 			break;
1426 		case FILTERERR:
1427 			cp = "FILTERERR";
1428 			if (stat(tempstderr, &stb) < 0 || stb.st_size == 0
1429 			    || (fp = fopen(tempstderr, "r")) == NULL) {
1430 				printf("\nhad some errors and may not have printed\n");
1431 				break;
1432 			}
1433 			printf("\nhad the following errors and may not have printed:\n");
1434 			while ((i = getc(fp)) != EOF)
1435 				putchar(i);
1436 			(void) fclose(fp);
1437 			break;
1438 		case ACCESS:
1439 			cp = "ACCESS";
1440 			printf("\nwas not printed because it was not linked to the original file\n");
1441 		}
1442 		fflush(stdout);
1443 		(void) close(1);
1444 	} else {
1445 		syslog(LOG_WARNING, "unable to send mail to %s: %m", userid);
1446 		return;
1447 	}
1448 	(void) close(p[0]);
1449 	(void) close(p[1]);
1450 	wait(NULL);
1451 	syslog(LOG_INFO, "mail sent to user %s about job %s on printer %s (%s)",
1452 	    userid, *jobname ? jobname : "<unknown>", pp->printer, cp);
1453 }
1454 
1455 /*
1456  * dofork - fork with retries on failure
1457  */
1458 static int
1459 dofork(const struct printer *pp, int action)
1460 {
1461 	int i, fail, forkpid;
1462 	struct passwd *pwd;
1463 
1464 	forkpid = -1;
1465 	if (daemon_uname == NULL) {
1466 		pwd = getpwuid(pp->daemon_user);
1467 		if (pwd == NULL) {
1468 			syslog(LOG_ERR, "%s: Can't lookup default daemon uid (%ld) in password file",
1469 			    pp->printer, pp->daemon_user);
1470 			goto error_ret;
1471 		}
1472 		daemon_uname = strdup(pwd->pw_name);
1473 		daemon_defgid = pwd->pw_gid;
1474 	}
1475 
1476 	for (i = 0; i < 20; i++) {
1477 		forkpid = fork();
1478 		if (forkpid < 0) {
1479 			sleep((unsigned)(i*i));
1480 			continue;
1481 		}
1482 		/*
1483 		 * Child should run as daemon instead of root
1484 		 */
1485 		if (forkpid == 0) {
1486 			errno = 0;
1487 			fail = initgroups(daemon_uname, daemon_defgid);
1488 			if (fail) {
1489 				syslog(LOG_ERR, "%s: initgroups(%s,%u): %m",
1490 				    pp->printer, daemon_uname, daemon_defgid);
1491 				break;
1492 			}
1493 			fail = setgid(daemon_defgid);
1494 			if (fail) {
1495 				syslog(LOG_ERR, "%s: setgid(%u): %m",
1496 				    pp->printer, daemon_defgid);
1497 				break;
1498 			}
1499 			fail = setuid(pp->daemon_user);
1500 			if (fail) {
1501 				syslog(LOG_ERR, "%s: setuid(%ld): %m",
1502 				    pp->printer, pp->daemon_user);
1503 				break;
1504 			}
1505 		}
1506 		return forkpid;
1507 	}
1508 
1509 	/*
1510 	 * An error occurred.  If the error is in the child process, then
1511 	 * this routine MUST always exit().  DORETURN only effects how
1512 	 * errors should be handled in the parent process.
1513 	 */
1514 error_ret:
1515 	if (forkpid == 0) {
1516 		syslog(LOG_ERR, "%s: dofork(): aborting child process...",
1517 		    pp->printer);
1518 		exit(1);
1519 	}
1520 	syslog(LOG_ERR, "%s: dofork(): failure in fork", pp->printer);
1521 
1522 	sleep(1);		/* throttle errors, as a safety measure */
1523 	switch (action) {
1524 	case DORETURN:
1525 		return -1;
1526 	default:
1527 		syslog(LOG_ERR, "bad action (%d) to dofork", action);
1528 		/* FALLTHROUGH */
1529 	case DOABORT:
1530 		exit(1);
1531 	}
1532 	/*NOTREACHED*/
1533 }
1534 
1535 /*
1536  * Kill child processes to abort current job.
1537  */
1538 static void
1539 abortpr(int signo __unused)
1540 {
1541 
1542 	(void) unlink(tempstderr);
1543 	kill(0, SIGINT);
1544 	if (ofilter > 0)
1545 		kill(ofilter, SIGCONT);
1546 	while (wait(NULL) > 0)
1547 		;
1548 	if (ofilter > 0 && tfd != -1)
1549 		unlink(tfile);
1550 	exit(0);
1551 }
1552 
1553 static void
1554 init(struct printer *pp)
1555 {
1556 	char *s;
1557 
1558 	sprintf(&width[2], "%ld", pp->page_width);
1559 	sprintf(&length[2], "%ld", pp->page_length);
1560 	sprintf(&pxwidth[2], "%ld", pp->page_pwidth);
1561 	sprintf(&pxlength[2], "%ld", pp->page_plength);
1562 	if ((s = checkremote(pp)) != 0) {
1563 		syslog(LOG_WARNING, "%s", s);
1564 		free(s);
1565 	}
1566 }
1567 
1568 void
1569 startprinting(const char *printer)
1570 {
1571 	struct printer myprinter, *pp = &myprinter;
1572 	int status;
1573 
1574 	init_printer(pp);
1575 	status = getprintcap(printer, pp);
1576 	switch(status) {
1577 	case PCAPERR_OSERR:
1578 		syslog(LOG_ERR, "can't open printer description file: %m");
1579 		exit(1);
1580 	case PCAPERR_NOTFOUND:
1581 		syslog(LOG_ERR, "unknown printer: %s", printer);
1582 		exit(1);
1583 	case PCAPERR_TCLOOP:
1584 		fatal(pp, "potential reference loop detected in printcap file");
1585 	default:
1586 		break;
1587 	}
1588 	printjob(pp);
1589 }
1590 
1591 /*
1592  * Acquire line printer or remote connection.
1593  */
1594 static void
1595 openpr(const struct printer *pp)
1596 {
1597 	int p[2];
1598 	char *cp;
1599 
1600 	if (pp->remote) {
1601 		openrem(pp);
1602 		/*
1603 		 * Lpd does support the setting of 'of=' filters for
1604 		 * jobs going to remote machines, but that does not
1605 		 * have the same meaning as 'of=' does when handling
1606 		 * local print queues.  For remote machines, all 'of='
1607 		 * filter processing is handled in sendfile(), and that
1608 		 * does not use these global "output filter" variables.
1609 		 */
1610 		ofd = -1;
1611 		ofilter = 0;
1612 		return;
1613 	} else if (*pp->lp) {
1614 		if ((cp = strchr(pp->lp, '@')) != NULL)
1615 			opennet(pp);
1616 		else
1617 			opentty(pp);
1618 	} else {
1619 		syslog(LOG_ERR, "%s: no line printer device or host name",
1620 			pp->printer);
1621 		exit(1);
1622 	}
1623 
1624 	/*
1625 	 * Start up an output filter, if needed.
1626 	 */
1627 	if (pp->filters[LPF_OUTPUT] && !pp->filters[LPF_INPUT] && !ofilter) {
1628 		pipe(p);
1629 		if (pp->remote) {
1630 			strcpy(tfile, TFILENAME);
1631 			tfd = mkstemp(tfile);
1632 		}
1633 		if ((ofilter = dofork(pp, DOABORT)) == 0) {	/* child */
1634 			dup2(p[0], 0);		/* pipe is std in */
1635 			/* tfile/printer is stdout */
1636 			dup2(pp->remote ? tfd : pfd, 1);
1637 			closelog();
1638 			closeallfds(3);
1639 			if ((cp = strrchr(pp->filters[LPF_OUTPUT], '/')) == NULL)
1640 				cp = pp->filters[LPF_OUTPUT];
1641 			else
1642 				cp++;
1643 			execl(pp->filters[LPF_OUTPUT], cp, width, length,
1644 			      (char *)0);
1645 			syslog(LOG_ERR, "%s: %s: %m", pp->printer,
1646 			       pp->filters[LPF_OUTPUT]);
1647 			exit(1);
1648 		}
1649 		(void) close(p[0]);		/* close input side */
1650 		ofd = p[1];			/* use pipe for output */
1651 	} else {
1652 		ofd = pfd;
1653 		ofilter = 0;
1654 	}
1655 }
1656 
1657 /*
1658  * Printer connected directly to the network
1659  * or to a terminal server on the net
1660  */
1661 static void
1662 opennet(const struct printer *pp)
1663 {
1664 	register int i;
1665 	int resp;
1666 	u_long port;
1667 	char *ep;
1668 	void (*savealrm)(int);
1669 
1670 	port = strtoul(pp->lp, &ep, 0);
1671 	if (*ep != '@' || port > 65535) {
1672 		syslog(LOG_ERR, "%s: bad port number: %s", pp->printer,
1673 		       pp->lp);
1674 		exit(1);
1675 	}
1676 	ep++;
1677 
1678 	for (i = 1; ; i = i < 256 ? i << 1 : i) {
1679 		resp = -1;
1680 		savealrm = signal(SIGALRM, alarmhandler);
1681 		alarm(pp->conn_timeout);
1682 		pfd = getport(pp, ep, port);
1683 		alarm(0);
1684 		(void)signal(SIGALRM, savealrm);
1685 		if (pfd < 0 && errno == ECONNREFUSED)
1686 			resp = 1;
1687 		else if (pfd >= 0) {
1688 			/*
1689 			 * need to delay a bit for rs232 lines
1690 			 * to stabilize in case printer is
1691 			 * connected via a terminal server
1692 			 */
1693 			delay(500);
1694 			break;
1695 		}
1696 		if (i == 1) {
1697 			if (resp < 0)
1698 				pstatus(pp, "waiting for %s to come up",
1699 					pp->lp);
1700 			else
1701 				pstatus(pp,
1702 					"waiting for access to printer on %s",
1703 					pp->lp);
1704 		}
1705 		sleep(i);
1706 	}
1707 	pstatus(pp, "sending to %s port %lu", ep, port);
1708 }
1709 
1710 /*
1711  * Printer is connected to an RS232 port on this host
1712  */
1713 static void
1714 opentty(const struct printer *pp)
1715 {
1716 	register int i;
1717 
1718 	for (i = 1; ; i = i < 32 ? i << 1 : i) {
1719 		pfd = open(pp->lp, pp->rw ? O_RDWR : O_WRONLY);
1720 		if (pfd >= 0) {
1721 			delay(500);
1722 			break;
1723 		}
1724 		if (errno == ENOENT) {
1725 			syslog(LOG_ERR, "%s: %m", pp->lp);
1726 			exit(1);
1727 		}
1728 		if (i == 1)
1729 			pstatus(pp,
1730 				"waiting for %s to become ready (offline?)",
1731 				pp->printer);
1732 		sleep(i);
1733 	}
1734 	if (isatty(pfd))
1735 		setty(pp);
1736 	pstatus(pp, "%s is ready and printing", pp->printer);
1737 }
1738 
1739 /*
1740  * Printer is on a remote host
1741  */
1742 static void
1743 openrem(const struct printer *pp)
1744 {
1745 	register int i;
1746 	int resp;
1747 	void (*savealrm)(int);
1748 
1749 	for (i = 1; ; i = i < 256 ? i << 1 : i) {
1750 		resp = -1;
1751 		savealrm = signal(SIGALRM, alarmhandler);
1752 		alarm(pp->conn_timeout);
1753 		pfd = getport(pp, pp->remote_host, 0);
1754 		alarm(0);
1755 		(void)signal(SIGALRM, savealrm);
1756 		if (pfd >= 0) {
1757 			if ((writel(pfd, "\2", pp->remote_queue, "\n",
1758 				    (char *)0)
1759 			     == 2 + strlen(pp->remote_queue))
1760 			    && (resp = response(pp)) == 0)
1761 				break;
1762 			(void) close(pfd);
1763 		}
1764 		if (i == 1) {
1765 			if (resp < 0)
1766 				pstatus(pp, "waiting for %s to come up",
1767 					pp->remote_host);
1768 			else {
1769 				pstatus(pp,
1770 					"waiting for queue to be enabled on %s",
1771 					pp->remote_host);
1772 				i = 256;
1773 			}
1774 		}
1775 		sleep(i);
1776 	}
1777 	pstatus(pp, "sending to %s", pp->remote_host);
1778 }
1779 
1780 /*
1781  * setup tty lines.
1782  */
1783 static void
1784 setty(const struct printer *pp)
1785 {
1786 	struct termios ttybuf;
1787 
1788 	if (ioctl(pfd, TIOCEXCL, (char *)0) < 0) {
1789 		syslog(LOG_ERR, "%s: ioctl(TIOCEXCL): %m", pp->printer);
1790 		exit(1);
1791 	}
1792 	if (tcgetattr(pfd, &ttybuf) < 0) {
1793 		syslog(LOG_ERR, "%s: tcgetattr: %m", pp->printer);
1794 		exit(1);
1795 	}
1796 	if (pp->baud_rate > 0)
1797 		cfsetspeed(&ttybuf, pp->baud_rate);
1798 	if (pp->mode_set) {
1799 		char *s = strdup(pp->mode_set), *tmp;
1800 
1801 		while ((tmp = strsep(&s, ",")) != NULL) {
1802 			(void) msearch(tmp, &ttybuf);
1803 		}
1804 	}
1805 	if (pp->mode_set != 0 || pp->baud_rate > 0) {
1806 		if (tcsetattr(pfd, TCSAFLUSH, &ttybuf) == -1) {
1807 			syslog(LOG_ERR, "%s: tcsetattr: %m", pp->printer);
1808 		}
1809 	}
1810 }
1811 
1812 #ifdef __STDC__
1813 #include <stdarg.h>
1814 #else
1815 #include <varargs.h>
1816 #endif
1817 
1818 static void
1819 #ifdef __STDC__
1820 pstatus(const struct printer *pp, const char *msg, ...)
1821 #else
1822 pstatus(pp, msg, va_alist)
1823 	const struct printer *pp;
1824 	char *msg;
1825         va_dcl
1826 #endif
1827 {
1828 	int fd;
1829 	char *buf;
1830 	va_list ap;
1831 #ifdef __STDC__
1832 	va_start(ap, msg);
1833 #else
1834 	va_start(ap);
1835 #endif
1836 
1837 	umask(0);
1838 	fd = open(pp->status_file, O_WRONLY|O_CREAT|O_EXLOCK, STAT_FILE_MODE);
1839 	if (fd < 0) {
1840 		syslog(LOG_ERR, "%s: %s: %m", pp->printer, pp->status_file);
1841 		exit(1);
1842 	}
1843 	ftruncate(fd, 0);
1844 	vasprintf(&buf, msg, ap);
1845 	va_end(ap);
1846 	writel(fd, buf, "\n", (char *)0);
1847 	close(fd);
1848 	free(buf);
1849 }
1850 
1851 void
1852 alarmhandler(int signo __unused)
1853 {
1854 	/* the signal is ignored */
1855 	/* (the '__unused' is just to avoid a compile-time warning) */
1856 }
1857