![[BACK]](/icons/back.gif){kind=icon}
Return to bgplg.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / bgplg|
Return to bgplg.c CVS log | Up to [local] / src / usr.bin / bgplg |
1.7 ! claudio 1: /* $OpenBSD: bgplg.c,v 1.6 2007/09/13 23:32:39 cloder Exp $ */
1.1 reyk 2:
3: /*
4: * Copyright (c) 2005, 2006 Reyk Floeter <reyk@vantronix.net>
5: *
6: * Permission to use, copy, modify, and distribute this software for any
7: * purpose with or without fee is hereby granted, provided that the above
8: * copyright notice and this permission notice appear in all copies.
9: *
10: * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11: * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12: * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13: * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14: * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15: * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16: * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17: */
18:
19: #include <sys/stat.h>
20: #include <sys/types.h>
21: #include <sys/param.h>
22:
23: #include <stdio.h>
24: #include <stdlib.h>
25: #include <signal.h>
26: #include <string.h>
27: #include <unistd.h>
28: #include <ctype.h>
29: #include <errno.h>
30: #include <fcntl.h>
31:
32: #include "bgplg.h"
33:
34: #define INC_STYLE "/conf/bgplg.css"
35: #define INC_HEAD "/conf/bgplg.head"
36: #define INC_FOOT "/conf/bgplg.foot"
37:
38: #define BGPDSOCK "/logs/bgpd.rsock"
39: #define BGPCTL "/bin/bgpctl", "-s", BGPDSOCK
40: #define PING "/bin/ping"
41: #define TRACEROUTE "/bin/traceroute"
1.4 reyk 42: #define CONTENT_TYPE "text/html"
1.1 reyk 43:
44: static struct cmd cmds[] = CMDS;
45:
46: char *lg_getenv(const char *, int *);
47: void lg_urldecode(char *);
48: char **lg_arg2argv(char *, int *);
49: char **lg_argextra(char **, int, struct cmd *);
50: char *lg_getarg(const char *, char *, int);
51: int lg_incl(const char *);
52:
53: void
54: lg_urldecode(char *str)
55: {
56: size_t i, c, len;
57: char code[3];
58: long result;
59:
60: if (str && *str) {
61: len = strlen(str);
62: i = c = 0;
63: while (i < len) {
64: if (str[i] == '%' && i <= (len - 2)) {
1.3 reyk 65: if (isxdigit(str[i + 1]) &&
1.1 reyk 66: isxdigit(str[i + 2])) {
67: code[0] = str[i + 1];
68: code[1] = str[i + 2];
69: code[2] = 0;
70: result = strtol(code, NULL, 16);
71: /* Replace NUL chars with a space */
72: if (result == 0)
73: result = ' ';
74: str[c++] = result;
75: i += 3;
76: } else {
77: str[c++] = '%';
78: i++;
79: }
80: } else if (str[i] == '+') {
81: str[i] = ' ';
82: } else {
83: if (c != i)
84: str[c] = str[i];
85: c++;
86: i++;
87: }
88: }
89: str[c] = 0x0;
90: }
91: }
92:
93: char *
94: lg_getenv(const char *name, int *lenp)
95: {
96: size_t len;
97: u_int i;
98: char *ptr;
99:
100: if ((ptr = getenv(name)) == NULL)
101: return (NULL);
102:
103: lg_urldecode(ptr);
104:
105: if (!(len = strlen(ptr)))
106: return (NULL);
107:
108: if (lenp != NULL)
109: *lenp = len;
110:
111: #define allowed_in_string(_x) \
1.7 ! claudio 112: (isalnum(_x) || strchr("-_.:/= ", _x))
1.1 reyk 113:
114: for (i = 0; i < len; i++) {
1.7 ! claudio 115: if (ptr[i] == '&')
! 116: ptr[i] = '\0';
1.1 reyk 117: if (!allowed_in_string(ptr[i])) {
118: printf("invalid character in input\n");
119: return (NULL);
120: }
121: }
122:
123: return (ptr);
124: }
125:
126: char *
127: lg_getarg(const char *name, char *arg, int len)
128: {
129: char *ptr = arg;
130: size_t namelen, ptrlen;
131: int i;
132:
133: namelen = strlen(name);
134:
135: for (i = 0; i < len; i++) {
136: if (arg[i] == '\0')
137: continue;
138: ptr = arg + i;
139: ptrlen = strlen(ptr);
140: if (namelen >= ptrlen)
141: continue;
142: if (strncmp(name, ptr, namelen) == 0)
143: return (ptr + namelen);
144: }
145:
146: return (NULL);
147: }
148:
149: char **
150: lg_arg2argv(char *arg, int *argc)
151: {
152: char **argv, *ptr = arg;
153: size_t len;
154: u_int i, c = 1;
155:
156: len = strlen(arg);
157:
158: /* Count elements */
159: for (i = 0; i < (len - 1); i++) {
160: if (isspace(arg[i])) {
161: /* filter out additional options */
162: if (arg[i + 1] == '-') {
163: printf("invalid input\n");
164: return (NULL);
165: }
166: arg[i] = '\0';
167: c++;
168: }
169: }
170:
171: /* Generate array */
172: if ((argv = calloc(c + 1, sizeof(char *))) == NULL) {
173: printf("fatal error: %s\n", strerror(errno));
174: return (NULL);
175: }
176:
177: argv[c] = NULL;
178: *argc = c;
179:
180: /* Fill array */
181: for (i = c = 0; i < (len - 1); i++) {
182: if (arg[i] == '\0' || i == 0) {
183: if (i != 0)
184: ptr = &arg[i + 1];
185: argv[c++] = ptr;
186: }
187: }
188:
189: return (argv);
190: }
191:
192: char **
193: lg_argextra(char **argv, int argc, struct cmd *cmdp)
194: {
195: char **new_argv;
196: int i, c = 0;
197:
198: /* Count elements */
199: for (i = 0; cmdp->earg[i] != NULL; i++)
200: c++;
201:
202: /* Generate array */
203: if ((new_argv = calloc(c + argc + 1, sizeof(char *))) == NULL) {
204: printf("fatal error: %s\n", strerror(errno));
205: return (NULL);
206: }
207:
208: /* Fill array */
209: for (i = c = 0; cmdp->earg[i] != NULL; i++)
210: new_argv[c++] = cmdp->earg[i];
211:
212: /* Append old array */
213: for (i = 0; i < argc; i++)
214: new_argv[c++] = argv[i];
215:
216: new_argv[c] = NULL;
217:
218: if (argv != NULL)
219: free(argv);
220:
221: return (new_argv);
222: }
223:
224: int
225: lg_incl(const char *file)
226: {
227: char buf[BUFSIZ];
228: int fd, len;
229:
230: if ((fd = open(file, O_RDONLY)) == -1)
231: return (errno);
232:
233: do {
234: len = read(fd, buf, sizeof(buf));
235: fwrite(buf, len, 1, stdout);
236: } while(len == BUFSIZ);
237:
238: return (0);
239: }
240:
241: int
242: main(void)
243: {
244: char *query, *self, *cmd = NULL, *req;
245: char **argv = NULL;
246: char myname[MAXHOSTNAMELEN];
247: int ret = 1, argc = 0, query_length = 0;
248: struct stat st;
249: u_int i;
250: struct cmd *cmdp = NULL;
251:
1.4 reyk 252: if (gethostname(myname, sizeof(myname)) != 0)
253: return (1);
254:
255: printf("Content-Type: %s\n"
1.1 reyk 256: "Cache-Control: no-cache\n\n"
1.2 reyk 257: "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?>\n"
258: "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.1//EN\" "
259: "\"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\">\n"
260: "<html xmlns=\"http://www.w3.org/1999/xhtml\">\n"
1.1 reyk 261: "<head>\n"
1.4 reyk 262: "<title>%s: %s</title>\n",
263: CONTENT_TYPE, NAME, myname);
1.1 reyk 264: if (stat(INC_STYLE, &st) == 0) {
265: printf("<style type='text/css'><!--\n");
266: lg_incl(INC_STYLE);
267: printf("--></style>\n");
268: }
269: if (stat(INC_HEAD, &st) != 0 || lg_incl(INC_HEAD) != 0) {
270: printf("</head>\n"
271: "<body>\n");
272: }
273:
274: printf("<h1>%s: %s</h1>\n", NAME, myname);
275: printf("<h2>%s</h2>\n", BRIEF);
276:
277: /* print a form with possible options */
278: if ((self = lg_getenv("SCRIPT_NAME", NULL)) == NULL) {
279: printf("fatal error: invalid request\n");
280: goto err;
281: }
282: if ((query = lg_getenv("QUERY_STRING", &query_length)) != NULL)
283: cmd = lg_getarg("cmd=", query, query_length);
1.2 reyk 284: printf(
285: "<form action='%s'>\n"
1.5 claudio 286: "<div class=\"command\">\n"
1.1 reyk 287: "<select name='cmd'>\n",
288: self);
289: for (i = 0; cmds[i].name != NULL; i++) {
290: if (!lg_checkperm(&cmds[i]))
291: continue;
292:
293: if (cmd != NULL && strcmp(cmd, cmds[i].name) == 0)
294: printf("<option value='%s' selected='selected'>%s"
295: "</option>\n",
296: cmds[i].name, cmds[i].name);
297: else
298: printf("<option value='%s'>%s</option>\n",
299: cmds[i].name, cmds[i].name);
300: }
301: printf("</select>\n"
302: "<input type='text' name='req'/>\n"
303: "<input type='submit' value='submit'/>\n"
1.2 reyk 304: "</div>\n"
1.1 reyk 305: "</form>\n"
306: "<pre>\n");
307: fflush(stdout);
308:
309: #ifdef DEBUG
310: if (close(2) == -1 || dup2(1, 2) == -1)
311: #else
312: if (close(2) == -1)
313: #endif
314: {
315: printf("fatal error: %s\n", strerror(errno));
316: goto err;
317: }
318:
319: if (query == NULL)
320: goto err;
321: if (cmd == NULL) {
322: printf("unspecified command\n");
323: goto err;
324: }
325: if ((req = lg_getarg("req=", query, query_length)) != NULL) {
326: /* Could be NULL */
327: argv = lg_arg2argv(req, &argc);
328: }
329:
330: for (i = 0; cmds[i].name != NULL; i++) {
331: if (strcmp(cmd, cmds[i].name) == 0) {
332: cmdp = &cmds[i];
333: break;
334: }
335: }
336:
337: if (cmdp == NULL) {
338: printf("invalid command: %s\n", cmd);
339: goto err;
340: }
341: if (argc > cmdp->maxargs) {
342: printf("superfluous argument(s): %s %s\n",
343: cmd, cmdp->args ? cmdp->args : "");
344: goto err;
345: }
346: if (argc < cmdp->minargs) {
347: printf("missing argument(s): %s %s\n", cmd, cmdp->args);
348: goto err;
349: }
350:
351: if (cmdp->func != NULL) {
352: ret = cmdp->func(cmds, argv);
353: } else {
354: if ((argv = lg_argextra(argv, argc, cmdp)) == NULL)
355: goto err;
356: ret = lg_exec(cmdp->earg[0], argv);
357: }
358: if (ret != 0)
359: printf("\nfailed%s\n", ret == 127 ? ": file not found" : ".");
360: else
361: printf("\nsuccess.\n");
362:
363: err:
364: fflush(stdout);
365:
1.6 cloder 366: if (argv != NULL)
1.1 reyk 367: free(argv);
368:
369: printf("</pre>\n");
370:
371: if (stat(INC_FOOT, &st) != 0 || lg_incl(INC_FOOT) != 0)
372: printf("<hr/>\n");
373:
374: printf("<div class='footer'>\n"
375: "<small>%s - %s<br/>Copyright (c) %s</small>\n"
376: "</div>\n"
377: "</body>\n"
378: "</html>\n", NAME, BRIEF, COPYRIGHT);
379:
380: return (ret);
381: }