Return to readpass.c CVS log

Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/readpass.c, Revision 1.17

1.1       deraadt     1: /*
1.8       deraadt     2:  * Copyright (c) 1988, 1993
                      3:  *      The Regents of the University of California.  All rights reserved.
                      4:  *
                      5:  * Redistribution and use in source and binary forms, with or without
                      6:  * modification, are permitted provided that the following conditions
                      7:  * are met:
                      8:  * 1. Redistributions of source code must retain the above copyright
                      9:  *    notice, this list of conditions and the following disclaimer.
                     10:  * 2. Redistributions in binary form must reproduce the above copyright
                     11:  *    notice, this list of conditions and the following disclaimer in the
                     12:  *    documentation and/or other materials provided with the distribution.
                     13:  * 3. All advertising materials mentioning features or use of this software
                     14:  *    must display the following acknowledgement:
                     15:  *      This product includes software developed by the University of
                     16:  *      California, Berkeley and its contributors.
                     17:  * 4. Neither the name of the University nor the names of its contributors
                     18:  *    may be used to endorse or promote products derived from this software
                     19:  *    without specific prior written permission.
                     20:  *
                     21:  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
                     22:  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     23:  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
                     24:  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
                     25:  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
                     26:  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
                     27:  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                     28:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
                     29:  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
                     30:  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
                     31:  * SUCH DAMAGE.
1.6       deraadt    32:  */
1.1       deraadt    33:
                     34: #include "includes.h"
1.17    ! mouring    35: RCSID("$OpenBSD: readpass.c,v 1.16 2001/05/02 01:25:39 mouring Exp $");
1.1       deraadt    36:
                     37: #include "xmalloc.h"
1.12      markus     38: #include "cli.h"
1.14      itojun     39: #include "readpass.h"
1.15      markus     40: #include "pathnames.h"
                     41: #include "log.h"
                     42: #include "atomicio.h"
                     43: #include "ssh.h"
                     44:
                     45: char *
1.16      mouring    46: ssh_askpass(char *askpass, const char *msg)
1.15      markus     47: {
                     48:        pid_t pid;
                     49:        size_t len;
                     50:        char *nl, *pass;
                     51:        int p[2], status;
                     52:        char buf[1024];
                     53:
                     54:        if (fflush(stdout) != 0)
                     55:                error("ssh_askpass: fflush: %s", strerror(errno));
                     56:        if (askpass == NULL)
                     57:                fatal("internal error: askpass undefined");
                     58:        if (pipe(p) < 0)
                     59:                fatal("ssh_askpass: pipe: %s", strerror(errno));
                     60:        if ((pid = fork()) < 0)
                     61:                fatal("ssh_askpass: fork: %s", strerror(errno));
                     62:        if (pid == 0) {
                     63:                seteuid(getuid());
                     64:                setuid(getuid());
                     65:                close(p[0]);
                     66:                if (dup2(p[1], STDOUT_FILENO) < 0)
                     67:                        fatal("ssh_askpass: dup2: %s", strerror(errno));
                     68:                execlp(askpass, askpass, msg, (char *) 0);
                     69:                fatal("ssh_askpass: exec(%s): %s", askpass, strerror(errno));
                     70:        }
                     71:        close(p[1]);
                     72:        len = read(p[0], buf, sizeof buf);
                     73:        close(p[0]);
                     74:        while (waitpid(pid, &status, 0) < 0)
                     75:                if (errno != EINTR)
                     76:                        break;
                     77:        if (len <= 1)
                     78:                return xstrdup("");
                     79:        nl = strchr(buf, '\n');
                     80:        if (nl)
                     81:                *nl = '\0';
                     82:        pass = xstrdup(buf);
                     83:        memset(buf, 0, sizeof(buf));
                     84:        return pass;
                     85: }
                     86:
1.9       deraadt    87:
1.7       markus     88: /*
                     89:  * Reads a passphrase from /dev/tty with echo turned off.  Returns the
1.8       deraadt    90:  * passphrase (allocated with xmalloc), being very careful to ensure that
                     91:  * no other userland buffer is storing the password.
1.7       markus     92:  */
1.12      markus     93: /*
                     94:  * Note:  the funcationallity of this routing has been moved to
                     95:  * cli_read_passphrase().  This routing remains to maintain
                     96:  * compatibility with existing code.
                     97:  */
1.5       markus     98: char *
1.17    ! mouring    99: read_passphrase(const char *prompt, int from_stdin)
1.1       deraadt   100: {
1.15      markus    101:        char *askpass = NULL;
                    102:        int use_askpass = 0, ttyfd;
                    103:
                    104:        if (from_stdin) {
                    105:                if (!isatty(STDIN_FILENO))
                    106:                        use_askpass = 1;
                    107:        } else {
                    108:                ttyfd = open("/dev/tty", O_RDWR);
                    109:                if (ttyfd >= 0)
                    110:                        close(ttyfd);
                    111:                else
                    112:                        use_askpass = 1;
                    113:        }
                    114:
                    115:        if (use_askpass && getenv("DISPLAY")) {
                    116:                if (getenv(SSH_ASKPASS_ENV))
                    117:                        askpass = getenv(SSH_ASKPASS_ENV);
                    118:                else
                    119:                        askpass = _PATH_SSH_ASKPASS_DEFAULT;
                    120:                return ssh_askpass(askpass, prompt);
                    121:        }
                    122:
1.12      markus    123:        return cli_read_passphrase(prompt, from_stdin, 0);
1.1       deraadt   124: }