![[BACK]](/icons/back.gif){kind=icon}
Return to ruserpass.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / ftp|
Return to ruserpass.c CVS log | Up to [local] / src / usr.bin / ftp |
1.18 ! deraadt 1: /* $OpenBSD: ruserpass.c,v 1.17 2003/12/16 21:46:22 deraadt Exp $ */
1.9 millert 2: /* $NetBSD: ruserpass.c,v 1.14 1997/07/20 09:46:01 lukem Exp $ */
1.1 deraadt 3:
4: /*
5: * Copyright (c) 1985, 1993, 1994
6: * The Regents of the University of California. All rights reserved.
7: *
8: * Redistribution and use in source and binary forms, with or without
9: * modification, are permitted provided that the following conditions
10: * are met:
11: * 1. Redistributions of source code must retain the above copyright
12: * notice, this list of conditions and the following disclaimer.
13: * 2. Redistributions in binary form must reproduce the above copyright
14: * notice, this list of conditions and the following disclaimer in the
15: * documentation and/or other materials provided with the distribution.
1.16 millert 16: * 3. Neither the name of the University nor the names of its contributors
1.1 deraadt 17: * may be used to endorse or promote products derived from this software
18: * without specific prior written permission.
19: *
20: * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23: * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30: * SUCH DAMAGE.
31: */
32:
33: #ifndef lint
1.4 millert 34: #if 0
1.1 deraadt 35: static char sccsid[] = "@(#)ruserpass.c 8.4 (Berkeley) 4/27/95";
1.4 millert 36: #else
1.17 deraadt 37: #ifndef SMALL
1.18 ! deraadt 38: static char rcsid[] = "$OpenBSD: ruserpass.c,v 1.17 2003/12/16 21:46:22 deraadt Exp $";
1.17 deraadt 39: #endif /* SMALL */
1.4 millert 40: #endif
1.1 deraadt 41: #endif /* not lint */
42:
43: #include <sys/types.h>
44: #include <sys/stat.h>
45:
46: #include <ctype.h>
47: #include <err.h>
48: #include <errno.h>
49: #include <stdio.h>
50: #include <stdlib.h>
51: #include <string.h>
52: #include <unistd.h>
53:
54: #include "ftp_var.h"
55:
1.13 millert 56: static int token(void);
1.1 deraadt 57: static FILE *cfile;
58:
59: #define DEFAULT 1
60: #define LOGIN 2
61: #define PASSWD 3
62: #define ACCOUNT 4
63: #define MACDEF 5
64: #define ID 10
65: #define MACH 11
66:
67: static char tokval[100];
68:
69: static struct toktab {
70: char *tokstr;
71: int tval;
72: } toktab[]= {
73: { "default", DEFAULT },
74: { "login", LOGIN },
75: { "password", PASSWD },
76: { "passwd", PASSWD },
77: { "account", ACCOUNT },
78: { "machine", MACH },
79: { "macdef", MACDEF },
80: { NULL, 0 }
81: };
82:
83: int
1.18 ! deraadt 84: ruserpass(const char *host, char **aname, char **apass, char **aacct)
1.1 deraadt 85: {
86: char *hdir, buf[BUFSIZ], *tmp;
87: char myname[MAXHOSTNAMELEN], *mydomain;
88: int t, i, c, usedefault = 0;
89: struct stat stb;
90:
91: hdir = getenv("HOME");
1.14 millert 92: if (hdir == NULL || *hdir == '\0')
1.12 millert 93: return (0);
1.4 millert 94: if (strlen(hdir) + sizeof(".netrc") < sizeof(buf)) {
1.15 deraadt 95: (void)snprintf(buf, sizeof buf, "%s/.netrc", hdir);
1.3 millert 96: } else {
97: warnx("%s/.netrc: %s", hdir, strerror(ENAMETOOLONG));
98: return (0);
99: }
1.1 deraadt 100: cfile = fopen(buf, "r");
101: if (cfile == NULL) {
102: if (errno != ENOENT)
103: warn("%s", buf);
104: return (0);
105: }
106: if (gethostname(myname, sizeof(myname)) < 0)
107: myname[0] = '\0';
108: if ((mydomain = strchr(myname, '.')) == NULL)
109: mydomain = "";
110: next:
111: while ((t = token())) switch(t) {
112:
113: case DEFAULT:
114: usedefault = 1;
115: /* FALL THROUGH */
116:
117: case MACH:
118: if (!usedefault) {
119: if (token() != ID)
120: continue;
121: /*
122: * Allow match either for user's input host name
1.4 millert 123: * or official hostname. Also allow match of
1.1 deraadt 124: * incompletely-specified host in local domain.
125: */
126: if (strcasecmp(host, tokval) == 0)
127: goto match;
128: if (strcasecmp(hostname, tokval) == 0)
129: goto match;
130: if ((tmp = strchr(hostname, '.')) != NULL &&
131: strcasecmp(tmp, mydomain) == 0 &&
1.9 millert 132: strncasecmp(hostname, tokval,
133: (size_t)(tmp - hostname)) == 0 &&
1.1 deraadt 134: tokval[tmp - hostname] == '\0')
135: goto match;
136: if ((tmp = strchr(host, '.')) != NULL &&
137: strcasecmp(tmp, mydomain) == 0 &&
1.9 millert 138: strncasecmp(host, tokval,
139: (size_t)(tmp - host)) == 0 &&
1.1 deraadt 140: tokval[tmp - host] == '\0')
141: goto match;
142: continue;
143: }
144: match:
145: while ((t = token()) && t != MACH && t != DEFAULT) switch(t) {
146:
147: case LOGIN:
1.11 deraadt 148: if (token()) {
1.15 deraadt 149: if (*aname == 0)
150: *aname = strdup(tokval);
151: else {
1.1 deraadt 152: if (strcmp(*aname, tokval))
153: goto next;
154: }
1.11 deraadt 155: }
1.1 deraadt 156: break;
157: case PASSWD:
158: if ((*aname == NULL || strcmp(*aname, "anonymous")) &&
159: fstat(fileno(cfile), &stb) >= 0 &&
160: (stb.st_mode & 077) != 0) {
161: warnx("Error: .netrc file is readable by others.");
162: warnx("Remove password or make file unreadable by others.");
163: goto bad;
164: }
1.15 deraadt 165: if (token() && *apass == 0)
166: *apass = strdup(tokval);
1.1 deraadt 167: break;
168: case ACCOUNT:
169: if (fstat(fileno(cfile), &stb) >= 0
170: && (stb.st_mode & 077) != 0) {
171: warnx("Error: .netrc file is readable by others.");
172: warnx("Remove account or make file unreadable by others.");
173: goto bad;
174: }
1.15 deraadt 175: if (token() && *aacct == 0)
176: *aacct = strdup(tokval);
1.1 deraadt 177: break;
178: case MACDEF:
179: if (proxy) {
1.5 millert 180: (void)fclose(cfile);
1.1 deraadt 181: return (0);
182: }
1.10 millert 183: while ((c = fgetc(cfile)) != EOF)
1.4 millert 184: if (c != ' ' && c != '\t')
185: break;
1.1 deraadt 186: if (c == EOF || c == '\n') {
1.8 deraadt 187: fputs("Missing macdef name argument.\n", ttyout);
1.1 deraadt 188: goto bad;
189: }
190: if (macnum == 16) {
1.8 deraadt 191: fputs(
192: "Limit of 16 macros have already been defined.\n", ttyout);
1.1 deraadt 193: goto bad;
194: }
195: tmp = macros[macnum].mac_name;
196: *tmp++ = c;
1.10 millert 197: for (i=0; i < 8 && (c = fgetc(cfile)) != EOF &&
1.1 deraadt 198: !isspace(c); ++i) {
199: *tmp++ = c;
200: }
201: if (c == EOF) {
1.8 deraadt 202: fputs(
203: "Macro definition missing null line terminator.\n", ttyout);
1.1 deraadt 204: goto bad;
205: }
206: *tmp = '\0';
207: if (c != '\n') {
1.10 millert 208: while ((c = fgetc(cfile)) != EOF && c != '\n');
1.1 deraadt 209: }
210: if (c == EOF) {
1.8 deraadt 211: fputs(
212: "Macro definition missing null line terminator.\n", ttyout);
1.1 deraadt 213: goto bad;
214: }
215: if (macnum == 0) {
216: macros[macnum].mac_start = macbuf;
217: }
218: else {
1.4 millert 219: macros[macnum].mac_start =
220: macros[macnum-1].mac_end + 1;
1.1 deraadt 221: }
222: tmp = macros[macnum].mac_start;
223: while (tmp != macbuf + 4096) {
1.10 millert 224: if ((c = fgetc(cfile)) == EOF) {
1.8 deraadt 225: fputs(
226: "Macro definition missing null line terminator.\n", ttyout);
1.1 deraadt 227: goto bad;
228: }
229: *tmp = c;
230: if (*tmp == '\n') {
231: if (*(tmp-1) == '\0') {
232: macros[macnum++].mac_end = tmp - 1;
233: break;
234: }
235: *tmp = '\0';
236: }
237: tmp++;
238: }
239: if (tmp == macbuf + 4096) {
1.8 deraadt 240: fputs("4K macro buffer exceeded.\n", ttyout);
1.1 deraadt 241: goto bad;
242: }
243: break;
244: default:
245: warnx("Unknown .netrc keyword %s", tokval);
246: break;
247: }
248: goto done;
249: }
250: done:
1.5 millert 251: (void)fclose(cfile);
1.1 deraadt 252: return (0);
253: bad:
1.5 millert 254: (void)fclose(cfile);
1.1 deraadt 255: return (-1);
256: }
257:
258: static int
1.18 ! deraadt 259: token(void)
1.1 deraadt 260: {
261: char *cp;
262: int c;
263: struct toktab *t;
264:
265: if (feof(cfile) || ferror(cfile))
266: return (0);
1.10 millert 267: while ((c = fgetc(cfile)) != EOF &&
1.1 deraadt 268: (c == '\n' || c == '\t' || c == ' ' || c == ','))
269: continue;
270: if (c == EOF)
271: return (0);
272: cp = tokval;
273: if (c == '"') {
1.10 millert 274: while ((c = fgetc(cfile)) != EOF && c != '"') {
1.1 deraadt 275: if (c == '\\')
1.10 millert 276: c = fgetc(cfile);
1.1 deraadt 277: *cp++ = c;
278: }
279: } else {
280: *cp++ = c;
1.10 millert 281: while ((c = fgetc(cfile)) != EOF
1.1 deraadt 282: && c != '\n' && c != '\t' && c != ' ' && c != ',') {
283: if (c == '\\')
1.10 millert 284: c = fgetc(cfile);
1.1 deraadt 285: *cp++ = c;
286: }
287: }
288: *cp = 0;
289: if (tokval[0] == 0)
290: return (0);
291: for (t = toktab; t->tokstr; t++)
292: if (!strcmp(t->tokstr, tokval))
293: return (t->tval);
294: return (ID);
295: }