1 /* 2 * Copyright (c) 1980, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. Neither the name of the University nor the names of its contributors 14 * may be used to endorse or promote products derived from this software 15 * without specific prior written permission. 16 * 17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 27 * SUCH DAMAGE. 28 * 29 * $FreeBSD: src/lib/libcompat/4.3/rexec.c,v 1.5.8.3 2000/11/22 13:36:00 ben Exp $ 30 * 31 * @(#)rexec.c 8.1 (Berkeley) 6/4/93 32 */ 33 34 #include <sys/types.h> 35 #include <sys/uio.h> 36 #include <sys/socket.h> 37 #include <sys/param.h> 38 #include <sys/stat.h> 39 40 #include <netinet/in.h> 41 42 #include <stdio.h> 43 #include <unistd.h> 44 #include <string.h> 45 #include <netdb.h> 46 #include <errno.h> 47 #include <ctype.h> 48 #include <err.h> 49 #include <stdlib.h> 50 51 #define SA_LEN(addr) ((addr)->sa_len) 52 #define __set_errno(val) errno = (val) 53 54 int rexecoptions; 55 char *getpass(), *getlogin(); 56 57 /* 58 * Options and other state info. 59 */ 60 struct macel { 61 char mac_name[9]; /* macro name */ 62 char *mac_start; /* start of macro in macbuf */ 63 char *mac_end; /* end of macro in macbuf */ 64 }; 65 66 int macnum; /* number of defined macros */ 67 struct macel macros[16]; 68 char macbuf[4096]; 69 70 static FILE *cfile; 71 72 #define DEFAULT 1 73 #define LOGIN 2 74 #define PASSWD 3 75 #define ACCOUNT 4 76 #define MACDEF 5 77 #define ID 10 78 #define MACH 11 79 80 static char tokval[100]; 81 82 static struct toktab { 83 char *tokstr; 84 int tval; 85 } toktab[]= { 86 { "default", DEFAULT }, 87 { "login", LOGIN }, 88 { "password", PASSWD }, 89 { "passwd", PASSWD }, 90 { "account", ACCOUNT }, 91 { "machine", MACH }, 92 { "macdef", MACDEF }, 93 { NULL, 0 } 94 }; 95 96 static int 97 token(void) 98 { 99 char *cp; 100 int c; 101 struct toktab *t; 102 103 if (feof(cfile) || ferror(cfile)) 104 return (0); 105 while ((c = getc(cfile)) != EOF && 106 (c == '\n' || c == '\t' || c == ' ' || c == ',')) 107 continue; 108 if (c == EOF) 109 return (0); 110 cp = tokval; 111 if (c == '"') { 112 while ((c = getc(cfile)) != EOF && c != '"') { 113 if (c == '\\') 114 c = getc(cfile); 115 *cp++ = c; 116 } 117 } else { 118 *cp++ = c; 119 while ((c = getc(cfile)) != EOF 120 && c != '\n' && c != '\t' && c != ' ' && c != ',') { 121 if (c == '\\') 122 c = getc(cfile); 123 *cp++ = c; 124 } 125 } 126 *cp = 0; 127 if (tokval[0] == 0) 128 return (0); 129 for (t = toktab; t->tokstr; t++) 130 if (!strcmp(t->tokstr, tokval)) 131 return (t->tval); 132 return (ID); 133 } 134 135 static int 136 ruserpass(char *host, const char **aname, const char **apass, char **aacct) 137 { 138 char *hdir, buf[BUFSIZ], *tmp; 139 char myname[MAXHOSTNAMELEN], *mydomain; 140 int t, i, c, usedefault = 0; 141 struct stat stb; 142 143 hdir = getenv("HOME"); 144 if (hdir == NULL) 145 hdir = "."; 146 if (strlen(hdir) + 8 > sizeof(buf)) 147 return (0); 148 (void) sprintf(buf, "%s/.netrc", hdir); 149 cfile = fopen(buf, "r"); 150 if (cfile == NULL) { 151 if (errno != ENOENT) 152 warn("%s", buf); 153 return (0); 154 } 155 if (gethostname(myname, sizeof(myname)) < 0) 156 myname[0] = '\0'; 157 if ((mydomain = strchr(myname, '.')) == NULL) 158 mydomain = ""; 159 next: 160 while ((t = token())) switch(t) { 161 162 case DEFAULT: 163 usedefault = 1; 164 /* FALL THROUGH */ 165 166 case MACH: 167 if (!usedefault) { 168 if (token() != ID) 169 continue; 170 /* 171 * Allow match either for user's input host name 172 * or official hostname. Also allow match of 173 * incompletely-specified host in local domain. 174 */ 175 if (strcasecmp(host, tokval) == 0) 176 goto match; 177 if ((tmp = strchr(host, '.')) != NULL && 178 strcasecmp(tmp, mydomain) == 0 && 179 strncasecmp(host, tokval, tmp - host) == 0 && 180 tokval[tmp - host] == '\0') 181 goto match; 182 continue; 183 } 184 match: 185 while ((t = token()) && t != MACH && t != DEFAULT) switch(t) { 186 187 case LOGIN: 188 if (token()) { 189 if (*aname == NULL) { 190 char *tmp; 191 tmp = malloc(strlen(tokval) + 1); 192 strcpy(tmp, tokval); 193 *aname = tmp; 194 } else { 195 if (strcmp(*aname, tokval)) 196 goto next; 197 } 198 } 199 break; 200 case PASSWD: 201 if ((*aname == NULL || strcmp(*aname, "anonymous")) && 202 fstat(fileno(cfile), &stb) >= 0 && 203 (stb.st_mode & 077) != 0) { 204 warnx("Error: .netrc file is readable by others."); 205 warnx("Remove password or make file unreadable by others."); 206 goto bad; 207 } 208 if (token() && *apass == NULL) { 209 char *tmp; 210 tmp = malloc(strlen(tokval) + 1); 211 strcpy(tmp, tokval); 212 *apass = tmp; 213 } 214 break; 215 case ACCOUNT: 216 if (fstat(fileno(cfile), &stb) >= 0 217 && (stb.st_mode & 077) != 0) { 218 warnx("Error: .netrc file is readable by others."); 219 warnx("Remove account or make file unreadable by others."); 220 goto bad; 221 } 222 if (token() && *aacct == NULL) { 223 *aacct = malloc((unsigned) strlen(tokval) + 1); 224 (void) strcpy(*aacct, tokval); 225 } 226 break; 227 case MACDEF: 228 while ((c=getc(cfile)) != EOF && 229 (c == ' ' || c == '\t')) 230 ; 231 if (c == EOF || c == '\n') { 232 printf("Missing macdef name argument.\n"); 233 goto bad; 234 } 235 if (macnum == 16) { 236 printf("Limit of 16 macros have already been defined\n"); 237 goto bad; 238 } 239 tmp = macros[macnum].mac_name; 240 *tmp++ = c; 241 for (i=0; i < 8 && (c=getc(cfile)) != EOF && 242 !isspace(c); ++i) { 243 *tmp++ = c; 244 } 245 if (c == EOF) { 246 printf("Macro definition missing null line terminator.\n"); 247 goto bad; 248 } 249 *tmp = '\0'; 250 if (c != '\n') { 251 while ((c=getc(cfile)) != EOF && c != '\n'); 252 } 253 if (c == EOF) { 254 printf("Macro definition missing null line terminator.\n"); 255 goto bad; 256 } 257 if (macnum == 0) { 258 macros[macnum].mac_start = macbuf; 259 } 260 else { 261 macros[macnum].mac_start = macros[macnum-1].mac_end + 1; 262 } 263 tmp = macros[macnum].mac_start; 264 while (tmp != macbuf + 4096) { 265 if ((c=getc(cfile)) == EOF) { 266 printf("Macro definition missing null line terminator.\n"); 267 goto bad; 268 } 269 *tmp = c; 270 if (*tmp == '\n') { 271 if (*(tmp-1) == '\0') { 272 macros[macnum++].mac_end = tmp - 1; 273 break; 274 } 275 *tmp = '\0'; 276 } 277 tmp++; 278 } 279 if (tmp == macbuf + 4096) { 280 printf("4K macro buffer exceeded\n"); 281 goto bad; 282 } 283 break; 284 default: 285 warnx("Unknown .netrc keyword %s", tokval); 286 break; 287 } 288 goto done; 289 } 290 done: 291 (void) fclose(cfile); 292 return (0); 293 bad: 294 (void) fclose(cfile); 295 return (-1); 296 } 297 298 int 299 rexec_af(char **ahost, int rport, const char *name, const char *pass, 300 const char *cmd, int *fd2p, sa_family_t *af) 301 { 302 struct sockaddr_storage sa2, from; 303 struct addrinfo hints, *res0; 304 const char *orig_name = name; 305 const char *orig_pass = pass; 306 static char *ahostbuf; 307 u_short port = 0; 308 int s, timo = 1, s3; 309 char c; 310 int gai; 311 char servbuff[NI_MAXSERV]; 312 313 snprintf(servbuff, sizeof(servbuff), "%d", ntohs(rport)); 314 servbuff[sizeof(servbuff) - 1] = '\0'; 315 316 memset(&hints, '\0', sizeof(hints)); 317 if (af) 318 hints.ai_family = *af; 319 hints.ai_socktype = SOCK_STREAM; 320 hints.ai_flags = AI_CANONNAME; 321 gai = getaddrinfo(*ahost, servbuff, &hints, &res0); 322 if (gai){ 323 /* XXX: set errno? */ 324 return -1; 325 } 326 327 if (res0->ai_canonname){ 328 free (ahostbuf); 329 ahostbuf = strdup (res0->ai_canonname); 330 if (ahostbuf == NULL) { 331 perror ("rexec: strdup"); 332 return (-1); 333 } 334 *ahost = ahostbuf; 335 } else { 336 *ahost = NULL; 337 __set_errno (ENOENT); 338 return -1; 339 } 340 ruserpass(res0->ai_canonname, &name, &pass, 0); 341 retry: 342 s = socket(res0->ai_family, res0->ai_socktype, 0); 343 if (s < 0) { 344 perror("rexec: socket"); 345 return (-1); 346 } 347 if (connect(s, res0->ai_addr, res0->ai_addrlen) < 0) { 348 if (errno == ECONNREFUSED && timo <= 16) { 349 (void) close(s); 350 sleep(timo); 351 timo *= 2; 352 goto retry; 353 } 354 perror(res0->ai_canonname); 355 return (-1); 356 } 357 if (fd2p == NULL) { 358 (void) write(s, "", 1); 359 port = 0; 360 } else { 361 char num[32]; 362 int s2; 363 socklen_t sa2len; 364 365 s2 = socket(res0->ai_family, res0->ai_socktype, 0); 366 if (s2 < 0) { 367 (void) close(s); 368 return (-1); 369 } 370 listen(s2, 1); 371 sa2len = sizeof (sa2); 372 if (getsockname(s2, (struct sockaddr *)&sa2, &sa2len) < 0) { 373 perror("getsockname"); 374 (void) close(s2); 375 goto bad; 376 } else if (sa2len != SA_LEN((struct sockaddr *)&sa2)) { 377 __set_errno(EINVAL); 378 (void) close(s2); 379 goto bad; 380 } 381 port = 0; 382 if (!getnameinfo((struct sockaddr *)&sa2, sa2len, 383 NULL, 0, servbuff, sizeof(servbuff), 384 NI_NUMERICSERV)) 385 port = atoi(servbuff); 386 (void) sprintf(num, "%u", port); 387 (void) write(s, num, strlen(num)+1); 388 { socklen_t len = sizeof (from); 389 s3 = accept(s2, (struct sockaddr *)&from, 390 &len); 391 close(s2); 392 if (s3 < 0) { 393 perror("accept"); 394 port = 0; 395 goto bad; 396 } 397 } 398 *fd2p = s3; 399 } 400 401 (void) write(s, name, strlen(name) + 1); 402 /* should public key encypt the password here */ 403 (void) write(s, pass, strlen(pass) + 1); 404 (void) write(s, cmd, strlen(cmd) + 1); 405 406 /* We don't need the memory allocated for the name and the password 407 in ruserpass anymore. */ 408 if (name != orig_name) 409 free ((char *) name); 410 if (pass != orig_pass) 411 free ((char *) pass); 412 413 if (read(s, &c, 1) != 1) { 414 perror(*ahost); 415 goto bad; 416 } 417 if (c != 0) { 418 while (read(s, &c, 1) == 1) { 419 (void) write(2, &c, 1); 420 if (c == '\n') 421 break; 422 } 423 goto bad; 424 } 425 freeaddrinfo(res0); 426 return (s); 427 bad: 428 if (port) 429 (void) close(*fd2p); 430 (void) close(s); 431 freeaddrinfo(res0); 432 return (-1); 433 } 434 435 436 int 437 rexec(char **ahost, int rport, const char *name, const char *pass, char *cmd, int *fd2p) 438 { 439 struct sockaddr_in sin, sin2, from; 440 struct hostent *hp; 441 u_short port; 442 int s, timo = 1, s3; 443 char c; 444 char *acct = NULL; 445 446 hp = gethostbyname(*ahost); 447 if (hp == NULL) { 448 herror(*ahost); 449 return (-1); 450 } 451 *ahost = hp->h_name; 452 ruserpass(hp->h_name, &name, &pass, &acct); 453 if (acct != NULL) 454 free(acct); 455 retry: 456 s = socket(AF_INET, SOCK_STREAM, 0); 457 if (s < 0) { 458 perror("rexec: socket"); 459 return (-1); 460 } 461 sin.sin_family = hp->h_addrtype; 462 sin.sin_port = rport; 463 bcopy(hp->h_addr, (caddr_t)&sin.sin_addr, hp->h_length); 464 if (connect(s, (struct sockaddr *)&sin, sizeof(sin)) < 0) { 465 if (errno == ECONNREFUSED && timo <= 16) { 466 (void) close(s); 467 sleep(timo); 468 timo *= 2; 469 goto retry; 470 } 471 perror(hp->h_name); 472 return (-1); 473 } 474 if (fd2p == NULL) { 475 (void) write(s, "", 1); 476 port = 0; 477 } else { 478 char num[8]; 479 int s2, sin2len; 480 481 s2 = socket(AF_INET, SOCK_STREAM, 0); 482 if (s2 < 0) { 483 (void) close(s); 484 return (-1); 485 } 486 listen(s2, 1); 487 sin2len = sizeof (sin2); 488 if (getsockname(s2, (struct sockaddr *)&sin2, &sin2len) < 0 || 489 sin2len != sizeof (sin2)) { 490 perror("getsockname"); 491 (void) close(s2); 492 goto bad; 493 } 494 port = ntohs((u_short)sin2.sin_port); 495 (void) sprintf(num, "%u", port); 496 (void) write(s, num, strlen(num)+1); 497 { int len = sizeof (from); 498 s3 = accept(s2, (struct sockaddr *)&from, &len); 499 close(s2); 500 if (s3 < 0) { 501 perror("accept"); 502 port = 0; 503 goto bad; 504 } 505 } 506 *fd2p = s3; 507 } 508 (void) write(s, name, strlen(name) + 1); 509 /* should public key encypt the password here */ 510 (void) write(s, pass, strlen(pass) + 1); 511 (void) write(s, cmd, strlen(cmd) + 1); 512 if (read(s, &c, 1) != 1) { 513 perror(*ahost); 514 goto bad; 515 } 516 if (c != 0) { 517 while (read(s, &c, 1) == 1) { 518 (void) write(2, &c, 1); 519 if (c == '\n') 520 break; 521 } 522 goto bad; 523 } 524 return (s); 525 bad: 526 if (port) 527 (void) close(*fd2p); 528 (void) close(s); 529 return (-1); 530 } 531