[BACK]Return to readpass.c CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/readpass.c, Revision 1.25

1.1       deraadt     1: /*
1.8       deraadt     2:  * Copyright (c) 1988, 1993
                      3:  *      The Regents of the University of California.  All rights reserved.
                      4:  *
                      5:  * Redistribution and use in source and binary forms, with or without
                      6:  * modification, are permitted provided that the following conditions
                      7:  * are met:
                      8:  * 1. Redistributions of source code must retain the above copyright
                      9:  *    notice, this list of conditions and the following disclaimer.
                     10:  * 2. Redistributions in binary form must reproduce the above copyright
                     11:  *    notice, this list of conditions and the following disclaimer in the
                     12:  *    documentation and/or other materials provided with the distribution.
                     13:  * 3. All advertising materials mentioning features or use of this software
                     14:  *    must display the following acknowledgement:
                     15:  *      This product includes software developed by the University of
                     16:  *      California, Berkeley and its contributors.
                     17:  * 4. Neither the name of the University nor the names of its contributors
                     18:  *    may be used to endorse or promote products derived from this software
                     19:  *    without specific prior written permission.
                     20:  *
                     21:  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
                     22:  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     23:  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
                     24:  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
                     25:  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
                     26:  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
                     27:  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                     28:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
                     29:  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
                     30:  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
                     31:  * SUCH DAMAGE.
1.6       deraadt    32:  */
1.1       deraadt    33:
                     34: #include "includes.h"
1.25    ! markus     35: RCSID("$OpenBSD: readpass.c,v 1.24 2001/12/21 08:53:45 djm Exp $");
1.19      markus     36:
                     37: #include <readpassphrase.h>
1.1       deraadt    38:
                     39: #include "xmalloc.h"
1.14      itojun     40: #include "readpass.h"
1.15      markus     41: #include "pathnames.h"
                     42: #include "log.h"
                     43: #include "ssh.h"
                     44:
1.18      itojun     45: static char *
1.16      mouring    46: ssh_askpass(char *askpass, const char *msg)
1.15      markus     47: {
                     48:        pid_t pid;
                     49:        size_t len;
1.23      markus     50:        char *pass;
1.24      djm        51:        int p[2], status, ret;
1.15      markus     52:        char buf[1024];
                     53:
                     54:        if (fflush(stdout) != 0)
                     55:                error("ssh_askpass: fflush: %s", strerror(errno));
                     56:        if (askpass == NULL)
                     57:                fatal("internal error: askpass undefined");
1.21      markus     58:        if (pipe(p) < 0) {
                     59:                error("ssh_askpass: pipe: %s", strerror(errno));
                     60:                return xstrdup("");
                     61:        }
                     62:        if ((pid = fork()) < 0) {
                     63:                error("ssh_askpass: fork: %s", strerror(errno));
                     64:                return xstrdup("");
                     65:        }
1.15      markus     66:        if (pid == 0) {
                     67:                seteuid(getuid());
                     68:                setuid(getuid());
                     69:                close(p[0]);
                     70:                if (dup2(p[1], STDOUT_FILENO) < 0)
                     71:                        fatal("ssh_askpass: dup2: %s", strerror(errno));
                     72:                execlp(askpass, askpass, msg, (char *) 0);
                     73:                fatal("ssh_askpass: exec(%s): %s", askpass, strerror(errno));
                     74:        }
                     75:        close(p[1]);
1.24      djm        76:
                     77:        len = ret = 0;
                     78:        do {
                     79:                ret = read(p[0], buf + len, sizeof(buf) - 1 - len);
                     80:                if (ret == -1 && errno == EINTR)
                     81:                        continue;
                     82:                if (ret <= 0)
                     83:                        break;
                     84:                len += ret;
                     85:        } while (sizeof(buf) - 1 - len > 0);
                     86:        buf[len] = '\0';
                     87:
1.15      markus     88:        close(p[0]);
                     89:        while (waitpid(pid, &status, 0) < 0)
                     90:                if (errno != EINTR)
                     91:                        break;
1.24      djm        92:
1.23      markus     93:        buf[strcspn(buf, "\r\n")] = '\0';
1.15      markus     94:        pass = xstrdup(buf);
                     95:        memset(buf, 0, sizeof(buf));
                     96:        return pass;
                     97: }
                     98:
1.7       markus     99: /*
1.19      markus    100:  * Reads a passphrase from /dev/tty with echo turned off/on.  Returns the
                    101:  * passphrase (allocated with xmalloc).  Exits if EOF is encountered. If
                    102:  * RP_ALLOW_STDIN is set, the passphrase will be read from stdin if no
                    103:  * tty is available
1.12      markus    104:  */
1.5       markus    105: char *
1.19      markus    106: read_passphrase(const char *prompt, int flags)
1.1       deraadt   107: {
1.19      markus    108:        char *askpass = NULL, *ret, buf[1024];
                    109:        int rppflags, use_askpass = 0, ttyfd;
1.15      markus    110:
1.19      markus    111:        rppflags = (flags & RP_ECHO) ? RPP_ECHO_ON : RPP_ECHO_OFF;
                    112:        if (flags & RP_ALLOW_STDIN) {
1.15      markus    113:                if (!isatty(STDIN_FILENO))
                    114:                        use_askpass = 1;
                    115:        } else {
1.19      markus    116:                rppflags |= RPP_REQUIRE_TTY;
1.25    ! markus    117:                ttyfd = open(_PATH_TTY, O_RDWR);
1.15      markus    118:                if (ttyfd >= 0)
                    119:                        close(ttyfd);
                    120:                else
                    121:                        use_askpass = 1;
                    122:        }
                    123:
                    124:        if (use_askpass && getenv("DISPLAY")) {
                    125:                if (getenv(SSH_ASKPASS_ENV))
                    126:                        askpass = getenv(SSH_ASKPASS_ENV);
                    127:                else
                    128:                        askpass = _PATH_SSH_ASKPASS_DEFAULT;
                    129:                return ssh_askpass(askpass, prompt);
                    130:        }
                    131:
1.19      markus    132:        if (readpassphrase(prompt, buf, sizeof buf, rppflags) == NULL)
1.20      markus    133:                return xstrdup("");
1.19      markus    134:
                    135:        ret = xstrdup(buf);
                    136:        memset(buf, 'x', sizeof buf);
                    137:        return ret;
1.1       deraadt   138: }