version 1.65.2.5, 2002/06/02 22:56:10 |
version 1.66, 2001/04/29 19:16:52 |
|
|
* |
* |
* |
* |
* SSH2 support added by Markus Friedl. |
* SSH2 support added by Markus Friedl. |
* Copyright (c) 1999, 2000, 2001 Markus Friedl. All rights reserved. |
* Copyright (c) 1999,2000 Markus Friedl. All rights reserved. |
* |
* |
* Redistribution and use in source and binary forms, with or without |
* Redistribution and use in source and binary forms, with or without |
* modification, are permitted provided that the following conditions |
* modification, are permitted provided that the following conditions |
|
|
#include "atomicio.h" |
#include "atomicio.h" |
#include "sshtty.h" |
#include "sshtty.h" |
#include "misc.h" |
#include "misc.h" |
#include "readpass.h" |
|
|
|
/* import options */ |
/* import options */ |
extern Options options; |
extern Options options; |
|
|
* window size to be sent to the server a little later. This is volatile |
* window size to be sent to the server a little later. This is volatile |
* because this is updated in a signal handler. |
* because this is updated in a signal handler. |
*/ |
*/ |
static volatile sig_atomic_t received_window_change_signal = 0; |
static volatile int received_window_change_signal = 0; |
static volatile sig_atomic_t received_signal = 0; |
|
|
|
/* Flag indicating whether the user\'s terminal is in non-blocking mode. */ |
/* Flag indicating whether the user\'s terminal is in non-blocking mode. */ |
static int in_non_blocking_mode = 0; |
static int in_non_blocking_mode = 0; |
|
|
static int need_rekeying; /* Set to non-zero if rekeying is requested. */ |
static int need_rekeying; /* Set to non-zero if rekeying is requested. */ |
static int session_closed = 0; /* In SSH2: login session closed. */ |
static int session_closed = 0; /* In SSH2: login session closed. */ |
|
|
static void client_init_dispatch(void); |
void client_init_dispatch(void); |
int session_ident = -1; |
int session_ident = -1; |
|
|
/*XXX*/ |
/*XXX*/ |
|
|
|
|
/* Restores stdin to blocking mode. */ |
/* Restores stdin to blocking mode. */ |
|
|
static void |
void |
leave_non_blocking(void) |
leave_non_blocking(void) |
{ |
{ |
if (in_non_blocking_mode) { |
if (in_non_blocking_mode) { |
|
|
|
|
/* Puts stdin terminal in non-blocking mode. */ |
/* Puts stdin terminal in non-blocking mode. */ |
|
|
static void |
void |
enter_non_blocking(void) |
enter_non_blocking(void) |
{ |
{ |
in_non_blocking_mode = 1; |
in_non_blocking_mode = 1; |
|
|
* flag indicating that the window has changed. |
* flag indicating that the window has changed. |
*/ |
*/ |
|
|
static void |
void |
window_change_handler(int sig) |
window_change_handler(int sig) |
{ |
{ |
received_window_change_signal = 1; |
received_window_change_signal = 1; |
|
|
* signals must be trapped to restore terminal modes. |
* signals must be trapped to restore terminal modes. |
*/ |
*/ |
|
|
static void |
void |
signal_handler(int sig) |
signal_handler(int sig) |
{ |
{ |
received_signal = sig; |
if (in_raw_mode()) |
quit_pending = 1; |
leave_raw_mode(); |
|
if (in_non_blocking_mode) |
|
leave_non_blocking(); |
|
channel_stop_listening(); |
|
packet_close(); |
|
fatal("Killed by signal %d.", sig); |
} |
} |
|
|
/* |
/* |
|
|
* available resolution. |
* available resolution. |
*/ |
*/ |
|
|
static double |
double |
get_current_time(void) |
get_current_time(void) |
{ |
{ |
struct timeval tv; |
struct timeval tv; |
|
|
* not appear to wake up when redirecting from /dev/null. |
* not appear to wake up when redirecting from /dev/null. |
*/ |
*/ |
|
|
static void |
void |
client_check_initial_eof_on_stdin(void) |
client_check_initial_eof_on_stdin(void) |
{ |
{ |
int len; |
int len; |
|
|
* connection. |
* connection. |
*/ |
*/ |
|
|
static void |
void |
client_make_packets_from_stdin_data(void) |
client_make_packets_from_stdin_data(void) |
{ |
{ |
u_int len; |
u_int len; |
|
|
/* Send buffered stdin data to the server. */ |
/* Send buffered stdin data to the server. */ |
while (buffer_len(&stdin_buffer) > 0 && |
while (buffer_len(&stdin_buffer) > 0 && |
packet_not_very_much_data_to_write()) { |
packet_not_very_much_data_to_write()) { |
len = buffer_len(&stdin_buffer); |
len = buffer_len(&stdin_buffer); |
/* Keep the packets at reasonable size. */ |
/* Keep the packets at reasonable size. */ |
if (len > packet_get_maxsize()) |
if (len > packet_get_maxsize()) |
|
|
* appropriate. |
* appropriate. |
*/ |
*/ |
|
|
static void |
void |
client_check_window_change(void) |
client_check_window_change(void) |
{ |
{ |
struct winsize ws; |
struct winsize ws; |
|
|
* one of the file descriptors). |
* one of the file descriptors). |
*/ |
*/ |
|
|
static void |
void |
client_wait_until_can_do_something(fd_set **readsetp, fd_set **writesetp, |
client_wait_until_can_do_something(fd_set **readsetp, fd_set **writesetp, |
int *maxfdp, int *nallocp, int rekeying) |
int *maxfdp, int rekeying) |
{ |
{ |
/* Add any selections by the channel mechanism. */ |
/* Add any selections by the channel mechanism. */ |
channel_prepare_select(readsetp, writesetp, maxfdp, nallocp, rekeying); |
channel_prepare_select(readsetp, writesetp, maxfdp, rekeying); |
|
|
if (!compat20) { |
if (!compat20) { |
/* Read from the connection, unless our buffers are full. */ |
/* Read from the connection, unless our buffers are full. */ |
|
|
if (buffer_len(&stderr_buffer) > 0) |
if (buffer_len(&stderr_buffer) > 0) |
FD_SET(fileno(stderr), *writesetp); |
FD_SET(fileno(stderr), *writesetp); |
} else { |
} else { |
/* channel_prepare_select could have closed the last channel */ |
FD_SET(connection_in, *readsetp); |
if (session_closed && !channel_still_open() && |
|
!packet_have_data_to_write()) { |
|
/* clear mask since we did not call select() */ |
|
memset(*readsetp, 0, *nallocp); |
|
memset(*writesetp, 0, *nallocp); |
|
return; |
|
} else { |
|
FD_SET(connection_in, *readsetp); |
|
} |
|
} |
} |
|
|
/* Select server connection if have data to write to the server. */ |
/* Select server connection if have data to write to the server. */ |
|
|
* We have to return, because the mainloop checks for the flags |
* We have to return, because the mainloop checks for the flags |
* set by the signal handlers. |
* set by the signal handlers. |
*/ |
*/ |
memset(*readsetp, 0, *nallocp); |
memset(*readsetp, 0, *maxfdp); |
memset(*writesetp, 0, *nallocp); |
memset(*writesetp, 0, *maxfdp); |
|
|
if (errno == EINTR) |
if (errno == EINTR) |
return; |
return; |
|
|
} |
} |
} |
} |
|
|
static void |
void |
client_suspend_self(Buffer *bin, Buffer *bout, Buffer *berr) |
client_suspend_self(Buffer *bin, Buffer *bout, Buffer *berr) |
{ |
{ |
struct winsize oldws, newws; |
struct winsize oldws, newws; |
|
|
/* Check if the window size has changed. */ |
/* Check if the window size has changed. */ |
if (ioctl(fileno(stdin), TIOCGWINSZ, &newws) >= 0 && |
if (ioctl(fileno(stdin), TIOCGWINSZ, &newws) >= 0 && |
(oldws.ws_row != newws.ws_row || |
(oldws.ws_row != newws.ws_row || |
oldws.ws_col != newws.ws_col || |
oldws.ws_col != newws.ws_col || |
oldws.ws_xpixel != newws.ws_xpixel || |
oldws.ws_xpixel != newws.ws_xpixel || |
oldws.ws_ypixel != newws.ws_ypixel)) |
oldws.ws_ypixel != newws.ws_ypixel)) |
received_window_change_signal = 1; |
received_window_change_signal = 1; |
|
|
/* OK, we have been continued by the user. Reinitialize buffers. */ |
/* OK, we have been continued by the user. Reinitialize buffers. */ |
|
|
enter_raw_mode(); |
enter_raw_mode(); |
} |
} |
|
|
static void |
void |
client_process_net_input(fd_set * readset) |
client_process_net_input(fd_set * readset) |
{ |
{ |
int len; |
int len; |
|
|
} |
} |
} |
} |
|
|
static void |
|
process_cmdline(void) |
|
{ |
|
void (*handler)(int); |
|
char *s, *cmd; |
|
u_short fwd_port, fwd_host_port; |
|
char buf[1024], sfwd_port[6], sfwd_host_port[6]; |
|
int local = 0; |
|
|
|
leave_raw_mode(); |
|
handler = signal(SIGINT, SIG_IGN); |
|
cmd = s = read_passphrase("\r\nssh> ", RP_ECHO); |
|
if (s == NULL) |
|
goto out; |
|
while (*s && isspace(*s)) |
|
s++; |
|
if (*s == 0) |
|
goto out; |
|
if (strlen(s) < 2 || s[0] != '-' || !(s[1] == 'L' || s[1] == 'R')) { |
|
log("Invalid command."); |
|
goto out; |
|
} |
|
if (s[1] == 'L') |
|
local = 1; |
|
if (!local && !compat20) { |
|
log("Not supported for SSH protocol version 1."); |
|
goto out; |
|
} |
|
s += 2; |
|
while (*s && isspace(*s)) |
|
s++; |
|
|
|
if (sscanf(s, "%5[0-9]:%255[^:]:%5[0-9]", |
|
sfwd_port, buf, sfwd_host_port) != 3 && |
|
sscanf(s, "%5[0-9]/%255[^/]/%5[0-9]", |
|
sfwd_port, buf, sfwd_host_port) != 3) { |
|
log("Bad forwarding specification."); |
|
goto out; |
|
} |
|
if ((fwd_port = a2port(sfwd_port)) == 0 || |
|
(fwd_host_port = a2port(sfwd_host_port)) == 0) { |
|
log("Bad forwarding port(s)."); |
|
goto out; |
|
} |
|
if (local) { |
|
if (channel_setup_local_fwd_listener(fwd_port, buf, |
|
fwd_host_port, options.gateway_ports) < 0) { |
|
log("Port forwarding failed."); |
|
goto out; |
|
} |
|
} else |
|
channel_request_remote_forwarding(fwd_port, buf, |
|
fwd_host_port); |
|
log("Forwarding port."); |
|
out: |
|
signal(SIGINT, handler); |
|
enter_raw_mode(); |
|
if (cmd) |
|
xfree(cmd); |
|
} |
|
|
|
/* process the characters one by one */ |
/* process the characters one by one */ |
static int |
int |
process_escapes(Buffer *bin, Buffer *bout, Buffer *berr, char *buf, int len) |
process_escapes(Buffer *bin, Buffer *bout, Buffer *berr, char *buf, int len) |
{ |
{ |
char string[1024]; |
char string[1024]; |
|
|
continue; |
continue; |
|
|
case '&': |
case '&': |
|
/* XXX does not work yet with proto 2 */ |
|
if (compat20) |
|
continue; |
/* |
/* |
* Detach the program (continue to serve connections, |
* Detach the program (continue to serve connections, |
* but put in background and no more new connections). |
* but put in background and no more new connections). |
*/ |
*/ |
|
if (!stdin_eof) { |
|
/* |
|
* Sending SSH_CMSG_EOF alone does not always appear |
|
* to be enough. So we try to send an EOF character |
|
* first. |
|
*/ |
|
packet_start(SSH_CMSG_STDIN_DATA); |
|
packet_put_string("\004", 1); |
|
packet_send(); |
|
/* Close stdin. */ |
|
stdin_eof = 1; |
|
if (buffer_len(bin) == 0) { |
|
packet_start(SSH_CMSG_EOF); |
|
packet_send(); |
|
} |
|
} |
/* Restore tty modes. */ |
/* Restore tty modes. */ |
leave_raw_mode(); |
leave_raw_mode(); |
|
|
/* Stop listening for new connections. */ |
/* Stop listening for new connections. */ |
channel_stop_listening(); |
channel_stop_listening(); |
|
|
snprintf(string, sizeof string, |
printf("%c& [backgrounded]\n", escape_char); |
"%c& [backgrounded]\n", escape_char); |
|
buffer_append(berr, string, strlen(string)); |
|
|
|
/* Fork into background. */ |
/* Fork into background. */ |
pid = fork(); |
pid = fork(); |
|
|
exit(0); |
exit(0); |
} |
} |
/* The child continues serving connections. */ |
/* The child continues serving connections. */ |
if (compat20) { |
continue; /*XXX ? */ |
buffer_append(bin, "\004", 1); |
|
/* fake EOF on stdin */ |
|
return -1; |
|
} else if (!stdin_eof) { |
|
/* |
|
* Sending SSH_CMSG_EOF alone does not always appear |
|
* to be enough. So we try to send an EOF character |
|
* first. |
|
*/ |
|
packet_start(SSH_CMSG_STDIN_DATA); |
|
packet_put_string("\004", 1); |
|
packet_send(); |
|
/* Close stdin. */ |
|
stdin_eof = 1; |
|
if (buffer_len(bin) == 0) { |
|
packet_start(SSH_CMSG_EOF); |
|
packet_send(); |
|
} |
|
} |
|
continue; |
|
|
|
case '?': |
case '?': |
snprintf(string, sizeof string, |
snprintf(string, sizeof string, |
"%c?\r\n\ |
"%c?\r\n\ |
Supported escape sequences:\r\n\ |
Supported escape sequences:\r\n\ |
~. - terminate connection\r\n\ |
~. - terminate connection\r\n\ |
~C - open a command line\r\n\ |
~R - Request rekey (SSH protocol 2 only)\r\n\ |
~R - Request rekey (SSH protocol 2 only)\r\n\ |
|
~^Z - suspend ssh\r\n\ |
~^Z - suspend ssh\r\n\ |
~# - list forwarded connections\r\n\ |
~# - list forwarded connections\r\n\ |
~& - background ssh (when waiting for connections to terminate)\r\n\ |
~& - background ssh (when waiting for connections to terminate)\r\n\ |
|
|
xfree(s); |
xfree(s); |
continue; |
continue; |
|
|
case 'C': |
|
process_cmdline(); |
|
continue; |
|
|
|
default: |
default: |
if (ch != escape_char) { |
if (ch != escape_char) { |
buffer_put_char(bin, escape_char); |
buffer_put_char(bin, escape_char); |
|
|
return bytes; |
return bytes; |
} |
} |
|
|
static void |
void |
client_process_input(fd_set * readset) |
client_process_input(fd_set * readset) |
{ |
{ |
int len; |
int len; |
|
|
packet_start(SSH_CMSG_EOF); |
packet_start(SSH_CMSG_EOF); |
packet_send(); |
packet_send(); |
} |
} |
} else if (escape_char == SSH_ESCAPECHAR_NONE) { |
} else if (escape_char == -1) { |
/* |
/* |
* Normal successful read, and no escape character. |
* Normal successful read, and no escape character. |
* Just append the data to buffer. |
* Just append the data to buffer. |
|
|
} |
} |
} |
} |
|
|
static void |
void |
client_process_output(fd_set * writeset) |
client_process_output(fd_set * writeset) |
{ |
{ |
int len; |
int len; |
|
|
* preparatory phase. |
* preparatory phase. |
*/ |
*/ |
|
|
static void |
void |
client_process_buffered_input_packets(void) |
client_process_buffered_input_packets(void) |
{ |
{ |
dispatch_run(DISPATCH_NONBLOCK, &quit_pending, compat20 ? xxx_kex : NULL); |
dispatch_run(DISPATCH_NONBLOCK, &quit_pending, compat20 ? xxx_kex : NULL); |
|
|
|
|
/* scan buf[] for '~' before sending data to the peer */ |
/* scan buf[] for '~' before sending data to the peer */ |
|
|
static int |
int |
simple_escape_filter(Channel *c, char *buf, int len) |
simple_escape_filter(Channel *c, char *buf, int len) |
{ |
{ |
/* XXX we assume c->extended is writeable */ |
/* XXX we assume c->extended is writeable */ |
return process_escapes(&c->input, &c->output, &c->extended, buf, len); |
return process_escapes(&c->input, &c->output, &c->extended, buf, len); |
} |
} |
|
|
static void |
void |
client_channel_closed(int id, void *arg) |
client_channel_closed(int id, void *arg) |
{ |
{ |
if (id != session_ident) |
if (id != session_ident) |
error("client_channel_closed: id %d != session_ident %d", |
error("client_channel_closed: id %d != session_ident %d", |
id, session_ident); |
id, session_ident); |
channel_cancel_cleanup(id); |
|
session_closed = 1; |
session_closed = 1; |
if (in_raw_mode()) |
if (in_raw_mode()) |
leave_raw_mode(); |
leave_raw_mode(); |
|
|
/* |
/* |
* Implements the interactive session with the server. This is called after |
* Implements the interactive session with the server. This is called after |
* the user has been authenticated, and a command has been started on the |
* the user has been authenticated, and a command has been started on the |
* remote host. If escape_char != SSH_ESCAPECHAR_NONE, it is the character |
* remote host. If escape_char != -1, it is the character used as an escape |
* used as an escape character for terminating or suspending the session. |
* character for terminating or suspending the session. |
*/ |
*/ |
|
|
int |
int |
|
|
{ |
{ |
fd_set *readset = NULL, *writeset = NULL; |
fd_set *readset = NULL, *writeset = NULL; |
double start_time, total_time; |
double start_time, total_time; |
int max_fd = 0, max_fd2 = 0, len, rekeying = 0, nalloc = 0; |
int max_fd = 0, len, rekeying = 0; |
char buf[100]; |
char buf[100]; |
|
|
debug("Entering interactive session."); |
debug("Entering interactive session."); |
|
|
signal(SIGINT, signal_handler); |
signal(SIGINT, signal_handler); |
signal(SIGQUIT, signal_handler); |
signal(SIGQUIT, signal_handler); |
signal(SIGTERM, signal_handler); |
signal(SIGTERM, signal_handler); |
|
signal(SIGPIPE, SIG_IGN); |
if (have_pty) |
if (have_pty) |
signal(SIGWINCH, window_change_handler); |
signal(SIGWINCH, window_change_handler); |
|
|
|
|
|
|
if (compat20) { |
if (compat20) { |
session_ident = ssh2_chan_id; |
session_ident = ssh2_chan_id; |
if (escape_char != SSH_ESCAPECHAR_NONE) |
if (escape_char != -1) |
channel_register_filter(session_ident, |
channel_register_filter(session_ident, |
simple_escape_filter); |
simple_escape_filter); |
if (session_ident != -1) |
if (session_ident != -1) |
|
|
* Wait until we have something to do (something becomes |
* Wait until we have something to do (something becomes |
* available on one of the descriptors). |
* available on one of the descriptors). |
*/ |
*/ |
max_fd2 = max_fd; |
|
client_wait_until_can_do_something(&readset, &writeset, |
client_wait_until_can_do_something(&readset, &writeset, |
&max_fd2, &nalloc, rekeying); |
&max_fd, rekeying); |
|
|
if (quit_pending) |
if (quit_pending) |
break; |
break; |
|
|
if (have_pty) |
if (have_pty) |
signal(SIGWINCH, SIG_DFL); |
signal(SIGWINCH, SIG_DFL); |
|
|
channel_free_all(); |
/* Stop listening for connections. */ |
|
channel_stop_listening(); |
|
|
if (have_pty) |
|
leave_raw_mode(); |
|
|
|
/* restore blocking io */ |
|
if (!isatty(fileno(stdin))) |
|
unset_nonblock(fileno(stdin)); |
|
if (!isatty(fileno(stdout))) |
|
unset_nonblock(fileno(stdout)); |
|
if (!isatty(fileno(stderr))) |
|
unset_nonblock(fileno(stderr)); |
|
|
|
if (received_signal) { |
|
if (in_non_blocking_mode) /* XXX */ |
|
leave_non_blocking(); |
|
fatal("Killed by signal %d.", (int) received_signal); |
|
} |
|
|
|
/* |
/* |
* In interactive mode (with pseudo tty) display a message indicating |
* In interactive mode (with pseudo tty) display a message indicating |
* that the connection has been closed. |
* that the connection has been closed. |
|
|
snprintf(buf, sizeof buf, "Connection to %.64s closed.\r\n", host); |
snprintf(buf, sizeof buf, "Connection to %.64s closed.\r\n", host); |
buffer_append(&stderr_buffer, buf, strlen(buf)); |
buffer_append(&stderr_buffer, buf, strlen(buf)); |
} |
} |
|
|
/* Output any buffered data for stdout. */ |
/* Output any buffered data for stdout. */ |
while (buffer_len(&stdout_buffer) > 0) { |
while (buffer_len(&stdout_buffer) > 0) { |
len = write(fileno(stdout), buffer_ptr(&stdout_buffer), |
len = write(fileno(stdout), buffer_ptr(&stdout_buffer), |
|
|
stderr_bytes += len; |
stderr_bytes += len; |
} |
} |
|
|
|
if (have_pty) |
|
leave_raw_mode(); |
|
|
/* Clear and free any buffers. */ |
/* Clear and free any buffers. */ |
memset(buf, 0, sizeof(buf)); |
memset(buf, 0, sizeof(buf)); |
buffer_free(&stdin_buffer); |
buffer_free(&stdin_buffer); |
|
|
/* Report bytes transferred, and transfer rates. */ |
/* Report bytes transferred, and transfer rates. */ |
total_time = get_current_time() - start_time; |
total_time = get_current_time() - start_time; |
debug("Transferred: stdin %lu, stdout %lu, stderr %lu bytes in %.1f seconds", |
debug("Transferred: stdin %lu, stdout %lu, stderr %lu bytes in %.1f seconds", |
stdin_bytes, stdout_bytes, stderr_bytes, total_time); |
stdin_bytes, stdout_bytes, stderr_bytes, total_time); |
if (total_time > 0) |
if (total_time > 0) |
debug("Bytes per second: stdin %.1f, stdout %.1f, stderr %.1f", |
debug("Bytes per second: stdin %.1f, stdout %.1f, stderr %.1f", |
stdin_bytes / total_time, stdout_bytes / total_time, |
stdin_bytes / total_time, stdout_bytes / total_time, |
stderr_bytes / total_time); |
stderr_bytes / total_time); |
|
|
/* Return the exit status of the program. */ |
/* Return the exit status of the program. */ |
debug("Exit status %d", exit_status); |
debug("Exit status %d", exit_status); |
|
|
|
|
/*********/ |
/*********/ |
|
|
static void |
void |
client_input_stdout_data(int type, u_int32_t seq, void *ctxt) |
client_input_stdout_data(int type, int plen, void *ctxt) |
{ |
{ |
u_int data_len; |
u_int data_len; |
char *data = packet_get_string(&data_len); |
char *data = packet_get_string(&data_len); |
packet_check_eom(); |
packet_integrity_check(plen, 4 + data_len, type); |
buffer_append(&stdout_buffer, data, data_len); |
buffer_append(&stdout_buffer, data, data_len); |
memset(data, 0, data_len); |
memset(data, 0, data_len); |
xfree(data); |
xfree(data); |
} |
} |
static void |
void |
client_input_stderr_data(int type, u_int32_t seq, void *ctxt) |
client_input_stderr_data(int type, int plen, void *ctxt) |
{ |
{ |
u_int data_len; |
u_int data_len; |
char *data = packet_get_string(&data_len); |
char *data = packet_get_string(&data_len); |
packet_check_eom(); |
packet_integrity_check(plen, 4 + data_len, type); |
buffer_append(&stderr_buffer, data, data_len); |
buffer_append(&stderr_buffer, data, data_len); |
memset(data, 0, data_len); |
memset(data, 0, data_len); |
xfree(data); |
xfree(data); |
} |
} |
static void |
void |
client_input_exit_status(int type, u_int32_t seq, void *ctxt) |
client_input_exit_status(int type, int plen, void *ctxt) |
{ |
{ |
|
packet_integrity_check(plen, 4, type); |
exit_status = packet_get_int(); |
exit_status = packet_get_int(); |
packet_check_eom(); |
|
/* Acknowledge the exit. */ |
/* Acknowledge the exit. */ |
packet_start(SSH_CMSG_EXIT_CONFIRMATION); |
packet_start(SSH_CMSG_EXIT_CONFIRMATION); |
packet_send(); |
packet_send(); |
|
|
quit_pending = 1; |
quit_pending = 1; |
} |
} |
|
|
static Channel * |
Channel * |
client_request_forwarded_tcpip(const char *request_type, int rchan) |
client_request_forwarded_tcpip(const char *request_type, int rchan) |
{ |
{ |
Channel* c = NULL; |
Channel* c = NULL; |
char *listen_address, *originator_address; |
char *listen_address, *originator_address; |
int listen_port, originator_port; |
int listen_port, originator_port; |
int sock; |
int sock, newch; |
|
|
/* Get rest of the packet */ |
/* Get rest of the packet */ |
listen_address = packet_get_string(NULL); |
listen_address = packet_get_string(NULL); |
listen_port = packet_get_int(); |
listen_port = packet_get_int(); |
originator_address = packet_get_string(NULL); |
originator_address = packet_get_string(NULL); |
originator_port = packet_get_int(); |
originator_port = packet_get_int(); |
packet_check_eom(); |
packet_done(); |
|
|
debug("client_request_forwarded_tcpip: listen %s port %d, originator %s port %d", |
debug("client_request_forwarded_tcpip: listen %s port %d, originator %s port %d", |
listen_address, listen_port, originator_address, originator_port); |
listen_address, listen_port, originator_address, originator_port); |
|
|
sock = channel_connect_by_listen_address(listen_port); |
sock = channel_connect_by_listen_adress(listen_port); |
if (sock < 0) { |
if (sock >= 0) { |
xfree(originator_address); |
newch = channel_new("forwarded-tcpip", |
xfree(listen_address); |
SSH_CHANNEL_CONNECTING, sock, sock, -1, |
return NULL; |
CHAN_TCP_WINDOW_DEFAULT, CHAN_TCP_WINDOW_DEFAULT, 0, |
|
xstrdup(originator_address), 1); |
|
c = channel_lookup(newch); |
} |
} |
c = channel_new("forwarded-tcpip", |
|
SSH_CHANNEL_CONNECTING, sock, sock, -1, |
|
CHAN_TCP_WINDOW_DEFAULT, CHAN_TCP_WINDOW_DEFAULT, 0, |
|
xstrdup(originator_address), 1); |
|
xfree(originator_address); |
xfree(originator_address); |
xfree(listen_address); |
xfree(listen_address); |
return c; |
return c; |
} |
} |
|
|
static Channel* |
Channel* |
client_request_x11(const char *request_type, int rchan) |
client_request_x11(const char *request_type, int rchan) |
{ |
{ |
Channel *c = NULL; |
Channel *c = NULL; |
char *originator; |
char *originator; |
int originator_port; |
int originator_port; |
int sock; |
int sock, newch; |
|
|
if (!options.forward_x11) { |
if (!options.forward_x11) { |
error("Warning: ssh server tried X11 forwarding."); |
error("Warning: ssh server tried X11 forwarding."); |
|
|
} else { |
} else { |
originator_port = packet_get_int(); |
originator_port = packet_get_int(); |
} |
} |
packet_check_eom(); |
packet_done(); |
/* XXX check permission */ |
/* XXX check permission */ |
debug("client_request_x11: request from %s %d", originator, |
debug("client_request_x11: request from %s %d", originator, |
originator_port); |
originator_port); |
xfree(originator); |
|
sock = x11_connect_display(); |
sock = x11_connect_display(); |
if (sock < 0) |
if (sock >= 0) { |
return NULL; |
newch = channel_new("x11", |
c = channel_new("x11", |
SSH_CHANNEL_X11_OPEN, sock, sock, -1, |
SSH_CHANNEL_X11_OPEN, sock, sock, -1, |
CHAN_TCP_WINDOW_DEFAULT, CHAN_X11_PACKET_DEFAULT, 0, |
CHAN_TCP_WINDOW_DEFAULT, CHAN_X11_PACKET_DEFAULT, 0, |
xstrdup("x11"), 1); |
xstrdup("x11"), 1); |
c = channel_lookup(newch); |
c->force_drain = 1; |
} |
|
xfree(originator); |
return c; |
return c; |
} |
} |
|
|
static Channel* |
Channel* |
client_request_agent(const char *request_type, int rchan) |
client_request_agent(const char *request_type, int rchan) |
{ |
{ |
Channel *c = NULL; |
Channel *c = NULL; |
int sock; |
int sock, newch; |
|
|
if (!options.forward_agent) { |
if (!options.forward_agent) { |
error("Warning: ssh server tried agent forwarding."); |
error("Warning: ssh server tried agent forwarding."); |
|
|
return NULL; |
return NULL; |
} |
} |
sock = ssh_get_authentication_socket(); |
sock = ssh_get_authentication_socket(); |
if (sock < 0) |
if (sock >= 0) { |
return NULL; |
newch = channel_new("authentication agent connection", |
c = channel_new("authentication agent connection", |
SSH_CHANNEL_OPEN, sock, sock, -1, |
SSH_CHANNEL_OPEN, sock, sock, -1, |
CHAN_X11_WINDOW_DEFAULT, CHAN_TCP_WINDOW_DEFAULT, 0, |
CHAN_X11_WINDOW_DEFAULT, CHAN_TCP_WINDOW_DEFAULT, 0, |
xstrdup("authentication agent connection"), 1); |
xstrdup("authentication agent connection"), 1); |
c = channel_lookup(newch); |
c->force_drain = 1; |
} |
return c; |
return c; |
} |
} |
|
|
/* XXXX move to generic input handler */ |
/* XXXX move to generic input handler */ |
static void |
void |
client_input_channel_open(int type, u_int32_t seq, void *ctxt) |
client_input_channel_open(int type, int plen, void *ctxt) |
{ |
{ |
Channel *c = NULL; |
Channel *c = NULL; |
char *ctype; |
char *ctype; |
|
|
c->remote_id = rchan; |
c->remote_id = rchan; |
c->remote_window = rwindow; |
c->remote_window = rwindow; |
c->remote_maxpacket = rmaxpack; |
c->remote_maxpacket = rmaxpack; |
if (c->type != SSH_CHANNEL_CONNECTING) { |
|
packet_start(SSH2_MSG_CHANNEL_OPEN_CONFIRMATION); |
packet_start(SSH2_MSG_CHANNEL_OPEN_CONFIRMATION); |
packet_put_int(c->remote_id); |
packet_put_int(c->remote_id); |
packet_put_int(c->self); |
packet_put_int(c->self); |
packet_put_int(c->local_window); |
packet_put_int(c->local_window); |
packet_put_int(c->local_maxpacket); |
packet_put_int(c->local_maxpacket); |
packet_send(); |
packet_send(); |
} |
|
} else { |
} else { |
debug("failure %s", ctype); |
debug("failure %s", ctype); |
packet_start(SSH2_MSG_CHANNEL_OPEN_FAILURE); |
packet_start(SSH2_MSG_CHANNEL_OPEN_FAILURE); |
packet_put_int(rchan); |
packet_put_int(rchan); |
packet_put_int(SSH2_OPEN_ADMINISTRATIVELY_PROHIBITED); |
packet_put_int(SSH2_OPEN_ADMINISTRATIVELY_PROHIBITED); |
if (!(datafellows & SSH_BUG_OPENFAILURE)) { |
if (!(datafellows & SSH_BUG_OPENFAILURE)) { |
packet_put_cstring("open failed"); |
packet_put_cstring("bla bla"); |
packet_put_cstring(""); |
packet_put_cstring(""); |
} |
} |
packet_send(); |
packet_send(); |
} |
} |
xfree(ctype); |
xfree(ctype); |
} |
} |
static void |
void |
client_input_channel_req(int type, u_int32_t seq, void *ctxt) |
client_input_channel_req(int type, int plen, void *ctxt) |
{ |
{ |
Channel *c = NULL; |
Channel *c = NULL; |
int id, reply, success = 0; |
int id, reply, success = 0; |
|
|
} else if (strcmp(rtype, "exit-status") == 0) { |
} else if (strcmp(rtype, "exit-status") == 0) { |
success = 1; |
success = 1; |
exit_status = packet_get_int(); |
exit_status = packet_get_int(); |
packet_check_eom(); |
packet_done(); |
} |
} |
if (reply) { |
if (reply) { |
packet_start(success ? |
packet_start(success ? |
|
|
} |
} |
xfree(rtype); |
xfree(rtype); |
} |
} |
static void |
|
client_input_global_request(int type, u_int32_t seq, void *ctxt) |
|
{ |
|
char *rtype; |
|
int want_reply; |
|
int success = 0; |
|
|
|
rtype = packet_get_string(NULL); |
void |
want_reply = packet_get_char(); |
|
debug("client_input_global_request: rtype %s want_reply %d", rtype, want_reply); |
|
if (want_reply) { |
|
packet_start(success ? |
|
SSH2_MSG_REQUEST_SUCCESS : SSH2_MSG_REQUEST_FAILURE); |
|
packet_send(); |
|
packet_write_wait(); |
|
} |
|
xfree(rtype); |
|
} |
|
|
|
static void |
|
client_init_dispatch_20(void) |
client_init_dispatch_20(void) |
{ |
{ |
dispatch_init(&dispatch_protocol_error); |
dispatch_init(&dispatch_protocol_error); |
|
|
dispatch_set(SSH2_MSG_CHANNEL_CLOSE, &channel_input_oclose); |
dispatch_set(SSH2_MSG_CHANNEL_CLOSE, &channel_input_oclose); |
dispatch_set(SSH2_MSG_CHANNEL_DATA, &channel_input_data); |
dispatch_set(SSH2_MSG_CHANNEL_DATA, &channel_input_data); |
dispatch_set(SSH2_MSG_CHANNEL_EOF, &channel_input_ieof); |
dispatch_set(SSH2_MSG_CHANNEL_EOF, &channel_input_ieof); |
|
|
dispatch_set(SSH2_MSG_CHANNEL_OPEN_FAILURE, &channel_input_open_failure); |
dispatch_set(SSH2_MSG_CHANNEL_OPEN_FAILURE, &channel_input_open_failure); |
dispatch_set(SSH2_MSG_CHANNEL_REQUEST, &client_input_channel_req); |
dispatch_set(SSH2_MSG_CHANNEL_REQUEST, &client_input_channel_req); |
dispatch_set(SSH2_MSG_CHANNEL_WINDOW_ADJUST, &channel_input_window_adjust); |
dispatch_set(SSH2_MSG_CHANNEL_WINDOW_ADJUST, &channel_input_window_adjust); |
dispatch_set(SSH2_MSG_GLOBAL_REQUEST, &client_input_global_request); |
|
|
|
/* rekeying */ |
/* rekeying */ |
dispatch_set(SSH2_MSG_KEXINIT, &kex_input_kexinit); |
dispatch_set(SSH2_MSG_KEXINIT, &kex_input_kexinit); |
|
|
/* global request reply messages */ |
|
dispatch_set(SSH2_MSG_REQUEST_FAILURE, &client_global_request_reply); |
|
dispatch_set(SSH2_MSG_REQUEST_SUCCESS, &client_global_request_reply); |
|
} |
} |
static void |
void |
client_init_dispatch_13(void) |
client_init_dispatch_13(void) |
{ |
{ |
dispatch_init(NULL); |
dispatch_init(NULL); |
|
|
dispatch_set(SSH_SMSG_X11_OPEN, options.forward_x11 ? |
dispatch_set(SSH_SMSG_X11_OPEN, options.forward_x11 ? |
&x11_input_open : &deny_input_open); |
&x11_input_open : &deny_input_open); |
} |
} |
static void |
void |
client_init_dispatch_15(void) |
client_init_dispatch_15(void) |
{ |
{ |
client_init_dispatch_13(); |
client_init_dispatch_13(); |
dispatch_set(SSH_MSG_CHANNEL_CLOSE, &channel_input_ieof); |
dispatch_set(SSH_MSG_CHANNEL_CLOSE, &channel_input_ieof); |
dispatch_set(SSH_MSG_CHANNEL_CLOSE_CONFIRMATION, & channel_input_oclose); |
dispatch_set(SSH_MSG_CHANNEL_CLOSE_CONFIRMATION, & channel_input_oclose); |
} |
} |
static void |
void |
client_init_dispatch(void) |
client_init_dispatch(void) |
{ |
{ |
if (compat20) |
if (compat20) |