Context Navigation

← Previous Revision
Latest Revision
Next Revision →
Blame
Revision Log

source: trunk/src/sh_xfer_server.c@ 481

Last change on this file since 481 was 481, checked in by katerina, 9 years ago
Enhancements and fixes for tickets #374, #375, #376, #377, #378, and #379.
File size: 93.1 KB

Line
1	/* SAMHAIN file system integrity testing */
2	/* Copyright (C) 1999, 2000 Rainer Wichmann */
3	/* */
4	/* This program is free software; you can redistribute it */
5	/* and/or modify */
6	/* it under the terms of the GNU General Public License as */
7	/* published by */
8	/* the Free Software Foundation; either version 2 of the License, or */
9	/* (at your option) any later version. */
10	/* */
11	/* This program is distributed in the hope that it will be useful, */
12	/* but WITHOUT ANY WARRANTY; without even the implied warranty of */
13	/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the */
14	/* GNU General Public License for more details. */
15	/* */
16	/* You should have received a copy of the GNU General Public License */
17	/* along with this program; if not, write to the Free Software */
18	/* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
19
20	#include "config_xor.h"
21
22	#include <string.h>
23	#include <stdio.h>
24	#include <stdlib.h>
25	#include <ctype.h>
26
27	/* Must be early on FreeBSD
28	*/
29	#include <sys/types.h>
30
31	/* must be .le. than (1020 * 64)
32	* (see sh_tools.c -- put_header)
33	*
34	* also: must be (N * 16), otherwise
35	* binary files cannot be transferred encrypted
36	*
37	* 65280 = (1020*64)
38	* #define TRANS_BYTES 8000 V0.8
39	*/
40	#ifdef SH_ENCRYPT
41	#define TRANS_BYTES 65120
42	#else
43	#define TRANS_BYTES 65280
44	#endif
45
46	/* timeout for session key
47	*/
48	#define TIMEOUT_KEY 7200
49
50	/* max time between connection attempts
51	*/
52	#define TIMEOUT_CON 2048
53
54	/* #undef SRP_DEBUG */
55	/* #define SRP_DEBUG */
56
57	#ifdef HAVE_MEMORY_H
58	#include <memory.h>
59	#endif
60
61	#if TIME_WITH_SYS_TIME
62	#include <sys/time.h>
63	#include <time.h>
64	#else
65	#if HAVE_SYS_TIME_H
66	#include <sys/time.h>
67	#else
68	#include <time.h>
69	#endif
70	#endif
71
72	/*
73	#ifdef TM_IN_SYS_TIME
74	#include <sys/time.h>
75	#else
76	#include <time.h>
77	#endif
78	*/
79
80	#ifdef HAVE_SYS_SELECT_H
81	#include <sys/select.h>
82	#endif
83
84	#ifdef HAVE_UNISTD_H
85	#include <errno.h>
86	#include <signal.h>
87	#include <setjmp.h>
88	#include <pwd.h>
89	#include <grp.h>
90	#include <sys/stat.h>
91	#include <sys/resource.h>
92	#include <fcntl.h>
93	#include <sys/wait.h>
94	#include <unistd.h>
95	#endif
96
97	#ifndef FD_SET
98	#define NFDBITS 32
99	#define FD_SET(n, p) ((p)->fds_bits[(n)/NFDBITS] \|= (1 << ((n) % NFDBITS)))
100	#define FD_CLR(n, p) ((p)->fds_bits[(n)/NFDBITS] &= ~(1 << ((n) % NFDBITS)))
101	#define FD_ISSET(n, p) ((p)->fds_bits[(n)/NFDBITS] & (1 << ((n) % NFDBITS)))
102	#endif /* !FD_SET */
103	#ifndef FD_SETSIZE
104	#define FD_SETSIZE 32
105	#endif
106	#ifndef FD_ZERO
107	#define FD_ZERO(p) memset((char )(p), '\0', sizeof((p)))
108	#endif
109
110	#if defined(HAVE_MLOCK) && !defined(HAVE_BROKEN_MLOCK)
111	#include <sys/mman.h>
112	#endif
113
114
115	#include <netdb.h>
116	#include <sys/types.h>
117	#include <netinet/in.h>
118	#include <sys/socket.h>
119	#ifndef S_SPLINT_S
120	#include <arpa/inet.h>
121	#endif
122
123	#include "sh_ipvx.h"
124	#include "samhain.h"
125	#include "sh_tiger.h"
126	#include "sh_utils.h"
127	#include "sh_unix.h"
128	#include "sh_xfer.h"
129	#include "sh_srp.h"
130	#include "sh_fifo.h"
131	#include "sh_tools.h"
132	#include "sh_entropy.h"
133	#include "sh_html.h"
134	#include "sh_nmail.h"
135	#include "sh_socket.h"
136	#define SH_NEED_GETHOSTBYXXX
137	#include "sh_static.h"
138	#include "sh_guid.h"
139
140	#ifdef SH_ENCRYPT
141	#include "rijndael-api-fst.h"
142	char * sh_tools_makePack (unsigned char * header, int flag,
143	char * payload, unsigned long payload_size,
144	keyInstance * keyInstE);
145	char * sh_tools_revertPack (unsigned char * header, int flag, char * message,
146	keyInstance * keyInstE,
147	unsigned long message_size);
148	#endif
149
150	/* define this if you want to debug the client/server communication */
151	/* #define SH_DBG_PROT 1 */
152
153	#ifdef SH_DBG_PROT
154	#define SH_SHOWPROT(c,d) sh_tools_show_header((c), (d))
155	#else
156	#define SH_SHOWPROT(c,d)
157	#endif
158
159	/* the port client will be connecting to
160	*/
161	#ifndef SH_DEFAULT_PORT
162	#define SH_DEFAULT_PORT 49777
163	#endif
164
165	#ifndef SH_SELECT_REPEAT
166	#define SH_SELECT_REPEAT 60
167	#endif
168
169	#ifndef SH_HEADER_SIZE
170	#define SH_HEADER_SIZE 7
171	#endif
172
173	#ifndef SH_CHALLENGE_SIZE
174	#define SH_CHALLENGE_SIZE 9
175	#endif
176
177	#undef FIL__
178	#define FIL__ _("sh_xfer_server.c")
179
180	int clt_class = (-1);
181
182	extern int flag_err_debug;
183	extern int flag_err_info;
184
185
186	#if defined (SH_WITH_SERVER)
187
188	#if defined(WITH_TRACE) \|\| defined(WITH_TPT)
189	extern char * hu_trans(const char * ihu);
190	#endif
191	extern unsigned int ServerPort;
192	#if !defined(USE_SRP_PROTOCOL)
193	extern void sh_passwd (char * salt, char * password, char * nounce, char *hash);
194	#endif
195
196	static int StripDomain = S_TRUE;
197
198	int sh_xfer_set_strip (const char * str)
199	{
200	static int fromcl = 0;
201
202	if (fromcl == 1)
203	return 0;
204	else
205	return (sh_util_flagval(str, &StripDomain));
206	}
207
208	static char * sh_strip_domain (char *name)
209	{
210	char * out = NULL;
211
212	SL_ENTER(_("sh_strip_domain"));
213
214	if (StripDomain == S_FALSE \|\| strchr(name, '.') == NULL)
215	{
216	out = sh_util_strdup(name);
217	SL_RETURN( out, _("sh_strip_domain"));
218	}
219	else
220	{
221	/* check whether it is in dotted number format
222	* --> last part must be kept
223	*/
224	if (0 != sh_ipvx_is_numeric(name))
225	{
226	out = sh_util_strdup(name);
227	SL_RETURN( out, _("sh_strip_domain"));
228	}
229	else
230	{
231	char * p;
232	out = sh_util_strdup(name);
233	p = strchr(out, '.');
234	if (p) *p = '\0';
235	SL_RETURN( out, _("sh_strip_domain"));
236	}
237	}
238
239	SL_RETURN( out, _("sh_strip_domain"));
240	}
241
242	#ifndef USE_SRP_PROTOCOL
243
244	int sh_xfer_make_client (const char * str)
245	{
246	/* char * safer; */
247	char key[KEY_LEN+1];
248	unsigned char in[PW_LEN+1];
249	int i = 0, j, k, l = 0;
250	char hashbuf[KEYBUF_SIZE];
251
252	if (sl_strlen(str) != (PW_LEN * 2))
253	{
254	fprintf(stderr,
255	_("Input must be a %d digit hexadecimal number"\
256	" (only 0-9, a-f, A-F allowed in input)\n"),
257	(PW_LEN * 2));
258	_exit(EXIT_FAILURE);
259	}
260
261	while (i < (PW_LEN * 2))
262	{
263	k = sh_util_hexchar(str[i]); j = sh_util_hexchar(str[i+1]);
264	if (k != -1 && j != -1)
265	{
266	in[l] = (k * 16 + j);
267	++l; i+= 2;
268	}
269	else
270	{
271	fprintf(stderr, _("Invalid char %c\n"), str[i]);
272	_exit(EXIT_FAILURE);
273	}
274	}
275	in[PW_LEN] = '\0';
276
277	sl_strlcpy ((char *)key,
278	sh_tiger_hash ((char*)in, TIGER_DATA, PW_LEN,
279	hashbuf, sizeof(hashbuf)),
280	KEY_LEN+1);
281	key[KEY_LEN] = '\0';
282
283	fprintf(stdout, _("Client entry: Client=HOSTNAME@00000000@%s\n"),
284	key);
285	fflush(stdout);
286
287	_exit(EXIT_SUCCESS);
288	return 0;
289	}
290
291	#else
292
293	int sh_xfer_make_client (const char * str)
294	{
295	char * foo_v;
296
297	char salt[17];
298	char key[KEY_LEN+1];
299	char in[PW_LEN];
300	int i = 0, j, k, l = 0;
301	char hashbuf[KEYBUF_SIZE];
302
303	if (sl_strlen(str) != (PW_LEN*2))
304	{
305	fprintf(stderr,
306	_("Input must be a %d digit hexadecimal number"\
307	" (only 0-9, a-f, A-F allowed in input)\n"),
308	(PW_LEN*2));
309	_exit(EXIT_FAILURE);
310	}
311
312	while (i < (PW_LEN*2))
313	{
314	k = sh_util_hexchar(str[i]); j = sh_util_hexchar(str[i+1]);
315	if (k != -1 && j != -1)
316	{
317	in[l] = (k * 16 + j);
318	++l; i+= 2;
319	}
320	else
321	{
322	fprintf(stderr, _("Invalid char %c\n"), str[i]);
323	_exit(EXIT_FAILURE);
324	}
325	}
326
327
328	if (0 == sh_srp_init())
329	{
330	sh_util_keyinit(key, KEY_LEN);
331	sl_strlcpy(salt, sh_tiger_hash(key, TIGER_DATA, KEY_LEN,
332	hashbuf, sizeof(hashbuf)),
333	17);
334	sh_srp_x (salt, in);
335	foo_v = sh_srp_verifier ();
336	fprintf(stdout, _("Client=HOSTNAME@%s@%s\n"),
337	salt, foo_v);
338	fflush(stdout);
339	SH_FREE(foo_v);
340	sh_srp_exit();
341	_exit(EXIT_SUCCESS);
342	}
343	fprintf(stdout, "%s",_("ERROR initializing BigNum library.\n"));
344	fflush (stdout);
345	_exit(EXIT_FAILURE);
346	return -1;
347	}
348	#endif
349
350
351	int sh_xfer_create_password (const char * dummy)
352	{
353	UINT32 val[2];
354	char output[KEY_LEN+1];
355	char hashbuf[KEYBUF_SIZE];
356
357	val[0] = taus_get ();
358	val[1] = taus_get ();
359
360	sl_strlcpy (output,
361	sh_tiger_hash((char )(&val[0]), TIGER_DATA, 2sizeof(UINT32),
362	hashbuf, sizeof(hashbuf)),
363	KEY_LEN);
364
365	output[16] = '\0';
366
367	fprintf(stdout, _("%s\n"), output);
368	fflush (stdout);
369
370	if (dummy)
371	_exit(EXIT_SUCCESS);
372	else
373	_exit(EXIT_SUCCESS);
374	return (0); /* avoid compiler warning */
375	}
376
377	/* #if defined (SH_WITH_SERVER) */
378	#endif
379
380	/**************************************************
381	*
382	*
383	* S E R V E R
384	*
385	*
386	***************************************************/
387
388	#ifdef SH_WITH_SERVER
389
390	#include "sh_readconf.h"
391
392
393	#define CONN_FREE 0
394	#define CONN_READING 1
395	#define CONN_SENDING 2
396	#define CONN_PAUSE 3
397	#define CONN_BUSY 4
398
399	char * clt_stat[] = {
400	N_("Inactive"),
401	N_("Started"),
402	N_("ILLEGAL"),
403	N_("FAILED"),
404	N_("Exited"),
405	N_("PANIC"),
406	N_("POLICY"),
407	N_("File_transfer"),
408	N_("Message"),
409	N_("TIMEOUT_EXCEEDED"),
410	N_("Suspended"),
411	N_("Filecheck"),
412	};
413
414	#include <time.h>
415
416	/* in sh_html.h:
417	* typedef struct client_entry {
418	* } client_t;
419	*/
420
421	#include "zAVLTree.h"
422
423	static char * sh_tolower (char * s)
424	{
425	char * ret = s;
426	if (s)
427	{
428	for (; *s; ++s)
429	{
430	s = tolower((unsigned char) s);
431	}
432	}
433	return ret;
434	}
435
436	/* Function to return the key for indexing
437	* the argument
438	*/
439	zAVLKey sh_avl_key (void const * arg)
440	{
441	const client_t * sa = (const client_t *) arg;
442	return (zAVLKey) sa->hostname;
443	}
444
445	zAVLTree * all_clients = NULL;
446
447	void sh_xfer_html_write()
448	{
449	SL_ENTER(_("sh_xfer_html_write"));
450	sh_html_write(all_clients);
451	SL_RET0(_("sh_xfer_html_write"));
452	}
453
454
455	int sh_xfer_use_clt_class (const char * c)
456	{
457	int i;
458	SL_ENTER(_("sh_xfer_use_clt_class"));
459	i = sh_util_flagval(c, &(sh.flag.client_class));
460	SL_RETURN(i, _("sh_xfer_use_clt_class"));
461	}
462
463	int sh_xfer_use_clt_sev (const char * c)
464	{
465	int i;
466	SL_ENTER(_("sh_xfer_use_clt_sev"));
467	i = sh_util_flagval(c, &(sh.flag.client_severity));
468	SL_RETURN(i, _("sh_xfer_use_clt_sev"));
469	}
470
471
472	/* the destructor
473	*/
474	void free_client(void * inptr)
475	{
476	client_t * here;
477
478	SL_ENTER(_("free_client"));
479	if (inptr == NULL)
480	SL_RET0(_("free_client"));
481	else
482	here = (client_t *) inptr;
483
484	if (here->hostname != NULL)
485	SH_FREE(here->hostname);
486	if (here->salt != NULL)
487	SH_FREE(here->salt);
488	if (here->verifier != NULL)
489	SH_FREE(here->verifier);
490	SH_FREE(here);
491	SL_RET0(_("free_client"));
492	}
493
494
495	int sh_xfer_register_client (const char * str)
496	{
497	client_t * newclt;
498	client_t * testclt;
499
500	const char * ptr;
501	int sepnum = 0;
502	int sep[2];
503	register int i = 0;
504	int siz_str = 0;
505
506	SL_ENTER(_("sh_xfer_register_client"));
507
508	ptr = str;
509	while (*ptr) {
510	if (*ptr == '@' && sepnum < 2 )
511	{
512	sep[sepnum] = i;
513	++sepnum;
514	}
515	++ptr; ++i;
516	}
517
518	if (all_clients == NULL)
519	{
520	all_clients = zAVLAllocTree (sh_avl_key, zAVL_KEY_STRING);
521	if (all_clients == NULL)
522	{
523	(void) safe_logger (0, 0, NULL);
524	aud__exit(FIL__, __LINE__, EXIT_FAILURE);
525	}
526	}
527
528	if ((sepnum == 2) && (sep[0] > 0) && (sep[1] > sep[0]))
529	{
530	newclt = SH_ALLOC (sizeof(client_t));
531	newclt->hostname = SH_ALLOC (sep[0]+1);
532	newclt->salt = SH_ALLOC (sep[1]-sep[0]);
533	newclt->verifier = SH_ALLOC (sl_strlen(str)-sep[1]+1);
534	newclt->exit_flag = 0;
535	newclt->dead_flag = 0;
536	#ifdef SH_ENCRYPT
537	newclt->encf_flag = SH_PROTO_ENC;
538	newclt->ency_flag = SH_PROTO_ENC;
539	#else
540	newclt->encf_flag = 0;
541	newclt->ency_flag = 0;
542	#endif
543	newclt->ivst_flag = 0;
544	newclt->session_key[0] = '\0';
545	newclt->last_connect = (time_t) 0;
546	newclt->session_key_timer = (time_t) 0;
547	newclt->status_now = CLT_INACTIVE;
548	for (i = 0; i < CLT_MAX; ++i)
549	newclt->status_arr[i] = CLT_INACTIVE;
550	(void) sh_unix_time(0, newclt->timestamp[CLT_INACTIVE], TIM_MAX);
551
552	/* truncate */
553	sl_strlcpy(newclt->hostname, &str[0], sep[0]+1);
554	sh_tolower(newclt->hostname);
555
556	/* truncate */
557	sl_strlcpy(newclt->salt, &str[sep[0]+1], sep[1]-sep[0]);
558	sl_strlcpy(newclt->verifier, &str[sep[1]+1], sl_strlen(str)-sep[1]+1);
559
560	testclt = (client_t *) zAVLSearch (all_clients, newclt->hostname);
561
562	if (testclt != NULL)
563	{
564	SH_FREE(testclt->verifier);
565	siz_str = strlen (newclt->verifier) + 1;
566	testclt->verifier = SH_ALLOC (siz_str);
567	sl_strlcpy(testclt->verifier, newclt->verifier, siz_str);
568
569	SH_FREE(testclt->salt);
570	siz_str = strlen (newclt->salt) + 1;
571	testclt->salt = SH_ALLOC (siz_str);
572	sl_strlcpy(testclt->salt, newclt->salt, siz_str);
573
574	testclt->dead_flag = 0;
575
576	free_client(newclt);
577	SL_RETURN( 0, _("sh_xfer_register_client"));
578	}
579	else
580	{
581	if (0 == zAVLInsert (all_clients, newclt))
582	{
583	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_CREG,
584	newclt->hostname,
585	newclt->salt, newclt->verifier);
586	SL_RETURN( 0, _("sh_xfer_register_client"));
587	}
588	}
589	}
590	SL_RETURN (-1, _("sh_xfer_register_client"));
591	}
592
593	typedef struct {
594	int state;
595	int fd;
596	char * buf;
597	unsigned char head[SH_HEADER_SIZE];
598	char challenge[SH_CHALLENGE_SIZE];
599	char peer[SH_MINIBUF+1];
600	client_t * client_entry;
601	char * K;
602	char * M1;
603	char * A;
604	int headcount;
605	unsigned long bytecount;
606	unsigned long bytes_to_send;
607	unsigned long bytes_to_get;
608	int pass;
609	unsigned long timer;
610
611	char * FileName;
612	unsigned long FileLength;
613	unsigned long FileSent;
614	char FileType[5];
615
616	struct sh_sockaddr addr_peer;
617	} sh_conn_t;
618
619
620	static char zap_challenge[SH_CHALLENGE_SIZE] = { 0 };
621
622	void sh_xfer_do_free (sh_conn_t * conn)
623	{
624	SL_ENTER(_("sh_xfer_do_free"));
625
626	if (conn->K != NULL)
627	{
628	SH_FREE(conn->K);
629	conn->K = NULL;
630	}
631	if (conn->A != NULL)
632	{
633	SH_FREE(conn->A);
634	conn->A = NULL;
635	}
636	if (conn->M1 != NULL)
637	{
638	SH_FREE(conn->M1);
639	conn->M1 = NULL;
640	}
641	if (conn->buf != NULL)
642	{
643	SH_FREE(conn->buf);
644	conn->buf = NULL;
645	}
646	if (conn->fd != (-1))
647	{
648	sl_close_fd (FIL__, __LINE__, conn->fd);
649	conn->fd = -1;
650	}
651	memcpy(conn->challenge, zap_challenge, SH_CHALLENGE_SIZE);
652	conn->state = CONN_FREE;
653	conn->headcount = 0;
654	conn->bytecount = 0;
655	conn->bytes_to_send = 0;
656	conn->bytes_to_get = 0;
657	conn->pass = 0;
658	conn->timer = 0;
659	conn->client_entry = NULL;
660
661	if (conn->FileName != NULL)
662	{
663	SH_FREE(conn->FileName);
664	conn->FileName = NULL;
665	}
666	conn->FileLength = 0;
667	conn->FileSent = 0;
668	conn->FileType[0] = '\0';
669	conn->FileType[1] = '\0';
670	conn->FileType[2] = '\0';
671	conn->FileType[3] = '\0';
672	conn->FileType[4] = '\0';
673
674	--server_status.conn_open;
675
676	SL_RET0(_("sh_xfer_do_free"));
677	}
678
679	/****************************************
680	*
681	* -- Reconfiguration. --
682	*
683	* (1) Mark all clients as 'dead'.
684	* (2) Reload configuration - clients
685	* in config are non-dead now.
686	* (3) Remove all clients still
687	* marked as 'dead'.
688	*/
689
690	/* -- Mark all clients as dead.
691	*/
692	void sh_xfer_mark_dead (void)
693	{
694	zAVLCursor avlcursor;
695	client_t * item;
696
697	SL_ENTER(_("sh_xfer_mark_dead"));
698
699	for (item = (client_t *) zAVLFirst(&avlcursor, all_clients); item;
700	item = (client_t *) zAVLNext(&avlcursor))
701	{
702	item->dead_flag = 1;
703	}
704	SL_RET0(_("sh_xfer_mark_dead"));
705	}
706
707
708	/* -- Clean tree from dead clients.
709	*/
710	void sh_xfer_clean_tree (void)
711	{
712	zAVLCursor avlcursor;
713	client_t * item;
714
715	SL_ENTER(_("sh_xfer_clean_tree"));
716
717	repeat_search:
718
719	for (item = (client_t *) zAVLFirst(&avlcursor, all_clients); item;
720	item = (client_t *) zAVLNext(&avlcursor))
721	{
722	if (item->dead_flag == 1)
723	{
724	zAVLDelete (all_clients, item->hostname);
725	free_client (item);
726	goto repeat_search;
727	}
728	}
729	SL_RET0(_("sh_xfer_clean_tree"));
730	}
731
732	/*
733	*
734	**********************************************/
735
736
737
738	/* -- SERVER SEND FUNCTION. --
739	*/
740	void sh_xfer_prep_send_int (sh_conn_t * conn,
741	char * msg, unsigned long length,
742	char * u, char protocol,
743	int docrypt)
744	{
745	/* register unsigned long i; */
746	unsigned long length2;
747
748	#if !defined(SH_ENCRYPT)
749	(void) docrypt;
750	#endif
751
752	SL_ENTER(_("sh_xfer_prep_send_int"));
753
754	TPT((0, FIL__, __LINE__, _("msg=<%s>, docrypt=<%d>\n"), msg, docrypt ));
755
756	length2 = length;
757
758	conn->headcount = 0;
759	conn->bytecount = 0;
760	conn->bytes_to_send = 0;
761	conn->bytes_to_get = 0;
762
763	if (conn->buf != NULL)
764	{
765	SH_FREE(conn->buf);
766	conn->buf = NULL;
767	}
768
769	put_header (conn->head, protocol, &length2, u);
770	SH_SHOWPROT(conn->head,'>');
771
772	TPT((0, FIL__, __LINE__, _("msg=<put_header done>\n") ));
773
774	if (msg == NULL)
775	length2 = 0;
776
777	#ifdef SH_ENCRYPT
778	if ((S_TRUE == docrypt) && ((protocol & SH_PROTO_ENC) != 0))
779	{
780	TPT((0, FIL__, __LINE__, _("encrypting (version 2)\n")));
781
782	conn->buf = sh_tools_makePack (conn->head, conn->client_entry->ivst_flag,
783	msg, length2,
784	&(conn->client_entry->keyInstE));
785	}
786	else if (msg == NULL)
787	{
788	sh_error_handle((-1), FIL__, __LINE__, -1, MSG_E_SUBGEN,
789	_("msg is NULL"),
790	_("sh_xfer_prep_send_int: cipherInit"));
791	}
792	else
793	{
794	if ((length2 + 1) < length2) --length2;
795	conn->buf = SH_ALLOC(length2 + 1);
796
797	memcpy(conn->buf, msg, length2);
798	conn->buf[length2] = '\0';
799	TPT((0, FIL__, __LINE__, _("msg=<no encryption done>\n") ));
800	}
801	#else
802	if ((length2 + 1) < length2) --length2;
803	conn->buf = SH_ALLOC(length2 + 1);
804
805	memcpy(conn->buf, msg, length2);
806	conn->buf[length2] = '\0';
807	TPT((0, FIL__, __LINE__, _("msg=<no encryption done>\n") ));
808	#endif
809
810	conn->state = CONN_SENDING;
811	SL_RET0(_("sh_xfer_prep_send_int"));
812	}
813
814	/* -- Send/Receive. --
815	*/
816	void sh_xfer_prep_send (sh_conn_t * conn,
817	char * msg, unsigned long length,
818	char * u, char protocol)
819	{
820	SL_ENTER(_("sh_xfer_prep_send"));
821	sh_xfer_prep_send_int (conn, msg, length, u, protocol, S_FALSE);
822	SL_RET0(_("sh_xfer_prep_send"));
823	}
824
825	void sh_xfer_send_crypt (sh_conn_t * conn,
826	char * msg, unsigned long length,
827	char * u, char protocol)
828	{
829	SL_ENTER(_("sh_xfer_send_crypt"));
830	sh_xfer_prep_send_int (conn, msg, length, u, protocol, S_TRUE);
831	SL_RET0(_("sh_xfer_send_crypt"));
832	}
833
834	/* #include <sys/times.h> */
835
836	#if defined(WITH_EXTERNAL)
837	#include "sh_extern.h"
838	#endif
839
840	/* -- Update the client status. --
841	*
842	* Update the status array for the client,
843	* and eventually call external program.
844	*/
845	static void status_update (client_t * conn, int status)
846	{
847	#if defined(WITH_EXTERNAL)
848	char msg[2 * SH_MINIBUF + TIM_MAX + 3];
849	#endif
850
851	SL_ENTER(_("status_update"));
852
853	if (conn == NULL \|\|
854	status < 0 \|\| status >= CLT_MAX)
855	SL_RET0(_("status_update"));
856
857	conn->status_now = status;
858	conn->status_arr[status] = status;
859	(void) sh_unix_time(0, conn->timestamp[status], TIM_MAX);
860
861	#if defined(WITH_EXTERNAL)
862	sl_snprintf(msg, sizeof(msg), _("%s %s %s"),
863	conn->hostname, conn->timestamp[status], _(clt_stat[status]));
864	sh_ext_execute('s', 'r', 'v', msg, 0);
865	#endif
866
867	SL_RET0(_("status_update"));
868	}
869
870	static time_t time_client_limit = 86400;
871
872	int sh_xfer_set_time_limit (const char * c)
873	{
874	long val;
875
876	SL_ENTER(_("sh_xfer_set_time_limit"));
877
878	val = strtol (c, (char **)NULL, 10);
879	if (val <= 0)
880	SL_RETURN( (-1), _("sh_xfer_set_time_limit"));
881
882	time_client_limit = (time_t) val;
883	SL_RETURN( (0), _("sh_xfer_set_time_limit"));
884	}
885
886
887	/* -- Check for time limit exceeded. --
888	*/
889	static int client_time_check(void)
890	{
891	zAVLCursor avlcursor;
892	client_t * item;
893
894	SL_ENTER(_("client_time_check"));
895
896	if (time_client_limit == (time_t) 0)
897	SL_RETURN( 0, _("client_time_check"));
898
899	for (item = (client_t *) zAVLFirst(&avlcursor, all_clients); item;
900	item = (client_t *) zAVLNext(&avlcursor))
901	{
902	if (item->exit_flag == 0 && item->last_connect != (time_t) 0)
903	{
904	if ( (time(NULL) - item->last_connect) > time_client_limit)
905	{
906	if (item->status_now != CLT_TOOLONG)
907	{
908	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_TIMEXC,
909	item->hostname);
910	status_update (item, CLT_TOOLONG);
911	}
912	}
913	}
914	}
915	SL_RETURN( 0, _("client_time_check"));
916	}
917
918	static int lookup_err = SH_ERR_SEVERE;
919
920	int sh_xfer_lookup_level (const char * c)
921	{
922	int ci = sh_error_convert_level (c);
923
924	SL_ENTER(_("sh_xfer_lookup_level"));
925
926	if (ci >= 0)
927	{
928	lookup_err = ci;
929	SL_RETURN( 0, _("sh_xfer_lookup_level"));
930	}
931	else
932	SL_RETURN( (-1), _("sh_xfer_lookup_level"));
933	}
934
935	#ifndef MAXHOSTNAMELEN
936	#define MAXHOSTNAMELEN 127
937	#endif
938
939	int check_addr (const char * claim, struct sh_sockaddr * addr_peer)
940	{
941	char h_name[MAXHOSTNAMELEN + 1];
942	char h_peer[MAXHOSTNAMELEN + 1];
943	char h_peer_IP[SH_IP_BUF];
944	char tmp_peer_IP[SH_IP_BUF];
945	char * canonical;
946	char numeric[SH_IP_BUF];
947
948	SL_ENTER(_("check_addr"));
949
950	if (claim == NULL)
951	{
952	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
953	_("NULL input"), _("check_addr"));
954	SL_RETURN ((-1), _("check_addr"));
955	}
956
957	/* Make sure we have the canonical name for the client
958	*/
959	canonical = sh_ipvx_canonical(claim, numeric, sizeof(numeric));
960
961	/* copy canonical name into h_name
962	*/
963	if (canonical != NULL)
964	{
965	sl_strlcpy(h_name, canonical, MAXHOSTNAMELEN + 1);
966	SH_FREE(canonical);
967	}
968	else
969	{
970	sh_error_handle(lookup_err, FIL__, __LINE__, 0, MSG_TCP_RESCLT,
971	claim);
972	SL_RETURN ((0), _("check_addr"));
973	}
974
975
976	/* get canonical name of socket peer
977	*/
978	canonical = sh_ipvx_addrtoname(addr_peer);
979
980	if (canonical)
981	{
982	if (0 == sl_strcmp(canonical, _("localhost")))
983	sl_strlcpy(h_peer, sh.host.name, MAXHOSTNAMELEN + 1);
984	else
985	sl_strlcpy(h_peer, canonical, MAXHOSTNAMELEN + 1);
986	SH_FREE(canonical);
987	}
988	else
989	{
990	sh_ipvx_ntoa (tmp_peer_IP, sizeof(tmp_peer_IP), addr_peer);
991	sh_error_handle(lookup_err, FIL__, __LINE__, 0, MSG_TCP_RESPEER,
992	claim, tmp_peer_IP);
993	SL_RETURN ((0), _("check_addr"));
994	}
995
996	sh_ipvx_ntoa (h_peer_IP, sizeof(h_peer_IP), addr_peer);
997
998	/* reverse lookup
999	*/
1000	if (0 == sh_ipvx_reverse_check_ok (h_peer, ServerPort, addr_peer))
1001	{
1002	sh_ipvx_ntoa (tmp_peer_IP, sizeof(tmp_peer_IP), addr_peer);
1003
1004	sh_error_handle(lookup_err, FIL__, __LINE__, 0, MSG_TCP_LOOKERS,
1005	claim, h_peer, tmp_peer_IP);
1006	SL_RETURN ((0), _("check_addr"));
1007	}
1008
1009	/* Check whether claim and peer are identical
1010	*/
1011	sh_tolower(h_peer); /* Canonical name of what the peer is */
1012	sh_tolower(h_name); /* Canonical name of what the peer claims */
1013
1014	if ((0 == sl_strcmp(h_peer, h_name)) \|\| (0 == sl_strcmp(h_peer_IP, h_name)))
1015	{
1016	SL_RETURN ((0), _("check_addr"));
1017	}
1018	#if !defined(USE_IPVX)
1019	else
1020	{
1021	struct hostent * he = sh_gethostbyname(h_peer);
1022	int i = 0;
1023	int flag = 0;
1024
1025	while (he->h_aliases[i] != NULL)
1026	{
1027	if (0 == sl_strcmp(sh_tolower(he->h_aliases[i]), h_name))
1028	{
1029	flag = 1;
1030	break;
1031	}
1032	++i;
1033	}
1034	if (flag == 0)
1035	sh_error_handle(lookup_err, FIL__, __LINE__, 0, MSG_TCP_LOOKUP,
1036	claim, h_peer);
1037	}
1038	#endif
1039
1040	SL_RETURN ((0), _("check_addr"));
1041	}
1042
1043	static int UseSocketPeer = S_FALSE;
1044
1045	int set_socket_peer (const char * c)
1046	{
1047	return sh_util_flagval(c, &UseSocketPeer);
1048	}
1049
1050
1051	/* -- Search register. --
1052	*/
1053	client_t * search_register(sh_conn_t * conn, int pos)
1054	{
1055	client_t * this_client;
1056	char peer_ip[SH_IP_BUF];
1057	char numerical[SH_IP_BUF];
1058	char peer_name[MAXHOSTNAMELEN+1];
1059	char * search_string;
1060
1061	struct sh_sockaddr peer_addr;
1062	char * canonical;
1063
1064	SL_ENTER(_("search_register"));
1065
1066	if (UseSocketPeer == S_TRUE)
1067	{
1068	memcpy(&peer_addr, &(conn->addr_peer), sizeof(struct sh_sockaddr));
1069	sh_ipvx_ntoa (peer_ip, sizeof(peer_ip), &peer_addr);
1070
1071	/* get canonical name of socket peer
1072	*/
1073	canonical = sh_ipvx_canonical(peer_ip, numerical, sizeof(numerical));
1074
1075	if (canonical != NULL)
1076	{
1077	if (0 == sl_strcmp(canonical, _("localhost")))
1078	sl_strlcpy(peer_name, sh.host.name, MAXHOSTNAMELEN + 1);
1079	else
1080	sl_strlcpy(peer_name, canonical, MAXHOSTNAMELEN + 1);
1081	SH_FREE(canonical);
1082	}
1083
1084	if (0 == sh_ipvx_reverse_check_ok (peer_name, ServerPort, &peer_addr))
1085	{
1086	sl_strlcpy(peer_name, peer_ip, MAXHOSTNAMELEN + 1);
1087	}
1088
1089	search_string = peer_name;
1090	}
1091	else
1092	{
1093	search_string = &(conn->buf[pos]);
1094
1095	if (0 != check_addr (search_string, &(conn->addr_peer)))
1096	{
1097	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
1098	_("Reverse lookup failed"), search_string);
1099	sh_xfer_do_free (conn);
1100	SL_RETURN( NULL, _("search_register"));
1101	}
1102	}
1103
1104	sh_tolower(search_string);
1105
1106	/* ---- search the register -----
1107	*/
1108	this_client = zAVLSearch(all_clients, search_string);
1109
1110	if (this_client == NULL)
1111	{
1112	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
1113	_("Not in client list"), search_string);
1114	sh_xfer_do_free (conn);
1115	SL_RETURN( NULL, _("search_register"));
1116	}
1117	if (this_client->exit_flag == 1)
1118	{
1119	TPT((0, FIL__, __LINE__, _("msg=<this_client->exit_flag == 1>\n")));
1120	this_client->session_key_timer = (time_t) 0;
1121	this_client->session_key[0] = '\0';
1122	this_client->exit_flag = 0;
1123	}
1124	TPT((0, FIL__, __LINE__, _("msg=<search_register: client %s>\n"),
1125	this_client->hostname));
1126	TPT((0, FIL__, __LINE__, _("msg=<search_register: key %s>\n"),
1127	this_client->session_key));
1128	SL_RETURN( this_client, _("search_register"));
1129	}
1130
1131	client_t * do_check_client(sh_conn_t * conn, int * retval)
1132	{
1133	client_t * this_client = NULL;
1134	char sigbuf[KEYBUF_SIZE];
1135
1136	*retval = 0;
1137
1138	TPT(( 0, FIL__, __LINE__, _("msg=<Client connect - HELO (1).>\n")));
1139
1140	if (conn->buf == NULL \|\| sl_strlen(conn->buf) <= KEY_LEN)
1141	{
1142	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_NOCLT);
1143	sh_xfer_do_free (conn);
1144	return NULL;
1145	}
1146
1147	/* ---- search the register -----
1148	*/
1149
1150	this_client = search_register (conn, KEY_LEN);
1151	if (this_client == NULL)
1152	return NULL;
1153
1154	/* ---- force authentication -----
1155	*/
1156
1157	if (this_client->session_key[0] == '\0' \|\|
1158	(time(NULL) - this_client->session_key_timer)
1159	> (time_t) TIMEOUT_KEY )
1160	{
1161	size_t len;
1162
1163	/* fake an auth request and jump there
1164	*/
1165	conn->head[0] = (conn->head[0] \| SH_PROTO_SRP);
1166	conn->head[3] = 'S';
1167	conn->head[4] = 'A';
1168	conn->head[5] = 'L';
1169	conn->head[6] = 'T';
1170	if (flag_err_info == S_TRUE)
1171	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FAUTH,
1172	&(conn->buf[KEY_LEN]));
1173	len = sl_strlen(&(conn->buf[KEY_LEN])) + 1;
1174	/* may overlap, thus only memmove is correct */
1175	memmove(conn->buf, &(conn->buf[KEY_LEN]), len);
1176	this_client->session_key[0] = '\0';
1177	this_client->session_key_timer = (time_t) 1;
1178	*retval = -1;
1179	return NULL;
1180	}
1181
1182	/* --- check whether hostname is properly signed ---
1183	*/
1184	if (conn->K != NULL)
1185	{
1186	SH_FREE(conn->K);
1187	conn->K = NULL;
1188	}
1189
1190	conn->K = SH_ALLOC(KEY_LEN+1);
1191
1192	sl_strlcpy (conn->K,
1193	sh_util_siggen(this_client->session_key,
1194	&(conn->buf[KEY_LEN]),
1195	sl_strlen(&(conn->buf[KEY_LEN])),
1196	sigbuf, sizeof(sigbuf)),
1197	KEY_LEN+1);
1198
1199	if (0 != sl_strncmp(conn->K, conn->buf, KEY_LEN))
1200	{
1201	TPT((0, FIL__, __LINE__, _("msg=<clt %s>\n"), conn->buf));
1202	TPT((0, FIL__, __LINE__, _("msg=<srv %s>\n"), conn->K));
1203	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
1204	_("Signature mismatch"),
1205	&(conn->buf[KEY_LEN]));
1206
1207	this_client->session_key_timer =
1208	time(NULL) - (2*TIMEOUT_KEY);
1209
1210	sh_xfer_do_free (conn);
1211	return NULL;
1212	}
1213	SH_FREE(conn->K);
1214	conn->K = NULL;
1215
1216	return this_client;
1217	}
1218
1219	/* ------------------------------------------------------
1220	*
1221	* FILE TRANSFER
1222	*
1223	* ------------------------------------------------------ */
1224
1225	static void do_file_send_data(sh_conn_t * conn)
1226	{
1227	char * read_buf = 0;
1228	char * send_buf;
1229	int bytes;
1230	SL_TICKET sfd = -1;
1231	#ifdef SH_ENCRYPT
1232	int blkfac;
1233	int rem;
1234	int send_bytes;
1235	#endif
1236
1237	if (conn == NULL \|\| conn->FileName == NULL)
1238	{
1239	sh_error_handle((-1), FIL__, __LINE__, sfd, MSG_TCP_NFILE,
1240	conn->peer,
1241	(conn->FileName == NULL) ?
1242	_("(NULL)") : conn->FileName);
1243	status_update (conn->client_entry, CLT_FAILED);
1244	sh_xfer_do_free (conn);
1245	return;
1246	}
1247
1248	if (conn->FileSent == conn->FileLength)
1249	{
1250	send_buf = hash_me(conn->K, conn->peer, sl_strlen(conn->peer));
1251	#ifdef SH_ENCRYPT
1252	sh_xfer_send_crypt (conn, send_buf, sl_strlen(conn->peer)+KEY_LEN,
1253	_("EEOT"), SH_PROTO_BIG\|conn->client_entry->encf_flag);
1254	#else
1255	sh_xfer_send_crypt (conn, send_buf, sl_strlen(conn->peer)+KEY_LEN,
1256	_("EEOT"), SH_PROTO_BIG);
1257	#endif
1258	SH_FREE(send_buf);
1259	}
1260	else
1261	{
1262	bytes = -1;
1263
1264	sfd = sl_open_read(FIL__, __LINE__, conn->FileName, SL_YESPRIV);
1265
1266	if (!SL_ISERROR(sfd))
1267	{
1268	read_buf = SH_ALLOC(TRANS_BYTES);
1269	if (conn->FileSent > 0)
1270	sl_seek (sfd, (off_t) conn->FileSent);
1271	bytes = sl_read (sfd, read_buf, TRANS_BYTES);
1272	sl_close(sfd);
1273	}
1274	else
1275	{
1276	sh_error_handle((-1), FIL__, __LINE__, sfd,
1277	MSG_E_ACCESS, (long) geteuid(), conn->FileName);
1278	}
1279
1280	if (bytes >= 0)
1281	{
1282	#ifdef SH_ENCRYPT
1283	/* need to send N * B_SIZ bytes
1284	*/
1285	blkfac = bytes / B_SIZ;
1286	rem = bytes - (blkfac * B_SIZ);
1287	if (rem != 0)
1288	{
1289	memset(&read_buf[bytes], '\n', (B_SIZ-rem));
1290	++blkfac;
1291	send_bytes = blkfac * B_SIZ;
1292	}
1293	else
1294	send_bytes = bytes;
1295
1296	send_buf = hash_me(conn->K, read_buf, send_bytes);
1297
1298	sh_xfer_send_crypt (conn, send_buf, send_bytes+KEY_LEN, _("FILE"),
1299	SH_PROTO_BIG\|conn->client_entry->encf_flag);
1300	#else
1301	send_buf = hash_me(conn->K, read_buf, bytes);
1302	sh_xfer_send_crypt (conn, send_buf, bytes+KEY_LEN, _("FILE"),
1303	SH_PROTO_BIG);
1304	#endif
1305	conn->FileSent += bytes;
1306	if (send_buf) /* hash_me() may return NULL */
1307	SH_FREE(send_buf);
1308	SH_FREE(read_buf);
1309	}
1310	else
1311	{
1312	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_NFILE, conn->peer,
1313	(conn->FileName == NULL) ? _("(NULL)") : conn->FileName);
1314	status_update (conn->client_entry, CLT_FAILED);
1315	sh_xfer_do_free (conn);
1316	}
1317	}
1318	return;
1319	}
1320
1321	static void do_file_initial(sh_conn_t * conn)
1322	{
1323	char * ptok;
1324	char hashbuf[KEYBUF_SIZE];
1325
1326	/* --- get client nonce and compute hash ---
1327	*
1328	* K = H(NSRV, NCLT, session_key)
1329	*/
1330	if (conn->A != NULL)
1331	{
1332	SH_FREE(conn->A);
1333	conn->A = NULL;
1334	}
1335	conn->A = SH_ALLOC(3*KEY_LEN+1);
1336	sl_strlcpy (conn->A, conn->K, KEY_LEN+1);
1337	sl_strlcat(conn->A, conn->buf, /* truncate */
1338	2*KEY_LEN+1);
1339	sl_strlcat(conn->A, conn->client_entry->session_key,
1340	3*KEY_LEN+1);
1341	sl_strlcpy (conn->K, sh_tiger_hash(conn->A,TIGER_DATA,3*KEY_LEN,
1342	hashbuf, sizeof(hashbuf)),
1343	KEY_LEN+1);
1344	SH_FREE(conn->A);
1345	conn->A = NULL;
1346
1347
1348	/* Warn about encryption mismatch
1349	*/
1350	#ifdef SH_ENCRYPT
1351	if ((conn->client_entry->encf_flag != 0) && /* server */
1352	((conn->head[0] & SH_PROTO_ENC) == 0)) /* client */
1353	{
1354	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_MISENC,
1355	_("file download"), _("version2"), _("none"));
1356	}
1357
1358	else if ((conn->client_entry->encf_flag != 0) && /* server */
1359	((conn->head[0] & SH_MASK_ENC) != /* client */
1360	conn->client_entry->encf_flag))
1361	{
1362	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_MISENC,
1363	_("file download"), _("version2"),
1364	((conn->head[0] & SH_PROTO_ENC) == SH_PROTO_ENC) ?
1365	_("version2") : _("invalid"));
1366	conn->client_entry->encf_flag = (conn->head[0] & SH_MASK_ENC);
1367	}
1368	#else
1369	if ((conn->head[0] & SH_PROTO_ENC) != 0)
1370	{
1371	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_MISENC,
1372	_("file download"), _("none"),
1373	((conn->head[0] & SH_PROTO_ENC) == SH_PROTO_ENC) ?
1374	_("version2") : _("invalid"));
1375	}
1376	#endif
1377
1378
1379	if (conn->FileName != NULL)
1380	{
1381	SH_FREE(conn->FileName);
1382	conn->FileName = NULL;
1383	}
1384
1385	/* Determine what to send
1386	*/
1387	if (0 == sl_strncmp (_("CONF"), &(conn->buf[KEY_LEN]), 4))
1388	{
1389	strcpy(conn->FileType, _("CONF")); /* known to fit */
1390	conn->FileName = get_client_conf_file(conn->peer, &(conn->FileLength));
1391	conn->FileSent = 0;
1392	}
1393	else if (0 == sl_strncmp (_("DATA"), &(conn->buf[KEY_LEN]), 4))
1394	{
1395	strcpy(conn->FileType, _("DATA")); /* known to fit */
1396	conn->FileName = get_client_data_file(conn->peer, &(conn->FileLength));
1397	conn->FileSent = 0;
1398	}
1399	else if (0 == sh_uuid_check(&(conn->buf[KEY_LEN])))
1400	{
1401	char * uuid = &(conn->buf[KEY_LEN]);
1402	strcpy(conn->FileType, _("UUID")); /* known to fit */
1403	conn->FileName = get_client_uuid_file(conn->peer, &(conn->FileLength), uuid);
1404	conn->FileSent = 0;
1405	}
1406	else
1407	{
1408	ptok = sh_util_safe_name(&(conn->buf[KEY_LEN]));
1409	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FFILE,
1410	conn->peer,
1411	ptok);
1412	SH_FREE(ptok);
1413	status_update (conn->client_entry, CLT_FAILED);
1414	sh_xfer_do_free (conn);
1415	}
1416
1417	return;
1418	}
1419
1420
1421	static int do_file_transfer(sh_conn_t * conn, int state)
1422	{
1423	client_t * this_client;
1424	UINT32 ticks;
1425	char hashbuf[KEYBUF_SIZE];
1426
1427	SL_ENTER(_("do_file_transfer"));
1428
1429	if (state == SH_DO_READ) /* finished reading */
1430	{
1431	TPT(( 0, FIL__, __LINE__, _("msg=<File transfer - entry.>\n")));
1432
1433	/* -- Client requests challenge. --
1434	*/
1435	if (0 == check_request_nerr ((char *) &(conn->head[3]), _("HELO")))
1436	{
1437	int client_state;
1438
1439	this_client = do_check_client(conn, &client_state);
1440	if (!this_client)
1441	SL_RETURN(client_state, _("do_file_transfer"));
1442
1443	/* --- create and send a nonce ---
1444	*/
1445
1446	conn->client_entry = this_client;
1447	sl_strlcpy (conn->peer, &(conn->buf[KEY_LEN]), SH_MINIBUF+1);
1448
1449	ticks = (UINT32) taus_get ();
1450
1451	if (conn->K != NULL)
1452	{
1453	SH_FREE(conn->K);
1454	conn->K = NULL;
1455	}
1456	conn->K = SH_ALLOC(KEY_LEN+1);
1457	sl_strlcpy (conn->K,
1458	sh_tiger_hash ((char *) &ticks,
1459	TIGER_DATA, sizeof(UINT32),
1460	hashbuf, sizeof(hashbuf)),
1461	KEY_LEN+1);
1462
1463	TPT((0, FIL__, __LINE__, _("msg=<send nonce>\n")));
1464	sh_xfer_prep_send (conn, conn->K, KEY_LEN+1, _("NSRV"),
1465	SH_PROTO_BIG);
1466	}
1467
1468	/* --- Client has send a message. Check state and message. ---
1469	*/
1470	else if (0 == check_request_nerr((char *)&(conn->head[3]), _("NCLT")) &&
1471	conn->client_entry != NULL &&
1472	sl_strlen(conn->buf) > KEY_LEN &&
1473	conn->K != NULL)
1474	{
1475
1476	TPT(( 0, FIL__, __LINE__,
1477	_("msg=<File transfer - NCLT (3).>\n")));
1478
1479	do_file_initial(conn);
1480	do_file_send_data(conn);
1481	}
1482
1483	else if (0 == check_request_nerr((char *)&(conn->head[3]),
1484	_("RECV")) &&
1485	conn->client_entry != NULL &&
1486	conn->K != NULL &&
1487	conn->FileName != NULL)
1488	{
1489
1490	TPT(( 0, FIL__, __LINE__,
1491	_("msg=<File transfer - RCVT (5+).>\n")));
1492
1493	do_file_send_data(conn);
1494	}
1495
1496
1497	else if (0 == check_request_nerr((char *)&(conn->head[3]),
1498	_("EOTE")) &&
1499	conn->client_entry != NULL)
1500	{
1501
1502	TPT(( 0, FIL__, __LINE__,
1503	_("msg=<File transfer - EOTE (7).>\n")));
1504
1505	if (flag_err_info == S_TRUE)
1506	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_OKFILE,
1507	conn->peer);
1508
1509	if ((conn->client_entry->status_now != CLT_SUSPEND) &&
1510	(conn->client_entry->status_now != CLT_TOOLONG))
1511	{ status_update (conn->client_entry, CLT_FILE); }
1512	else
1513	{ conn->client_entry->session_key[0] = '\0'; }
1514	conn->client_entry->last_connect = time (NULL);
1515	sh_xfer_do_free (conn);
1516	}
1517
1518
1519	/* client does something unexpected
1520	*/
1521	else /* ---- ??? ----- */
1522	{
1523	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FINV,
1524	1, conn->pass, conn->peer,
1525	'\\', conn->head[3], '\\',conn->head[4],
1526	'\\', conn->head[5], '\\',conn->head[6]);
1527	status_update (conn->client_entry, CLT_FAILED);
1528	sh_xfer_do_free (conn);
1529	}
1530	}
1531
1532	else if (state == SH_DO_WRITE) /* finished writing */
1533	{
1534	TPT(( 0, FIL__, __LINE__, _("msg=<File transfer - (wait).>\n")));
1535
1536	/* challenge is sent, now wait for message from client
1537	*/
1538	conn->headcount = 0;
1539	conn->bytecount = 0;
1540	conn->bytes_to_send = 0;
1541	conn->bytes_to_get = 0;
1542	if (conn->buf != NULL)
1543	{
1544	SH_FREE(conn->buf);
1545	conn->buf = NULL;
1546	}
1547	conn->state = CONN_READING;
1548	}
1549	SL_RETURN(0, _("do_file_transfer"));
1550	}
1551
1552	/* ------------------------------------------------------
1553	*
1554	* MESSAGE TRANSFER
1555	*
1556	* ------------------------------------------------------ */
1557	static int do_message_transfer(sh_conn_t * conn, int state)
1558	{
1559	client_t * this_client;
1560	char * cmd;
1561	char hash[SH_MAXMSGLEN + KEY_LEN + KEY_LEN + 1];
1562	char * buffer;
1563	int clt_sev;
1564	char * ptok;
1565	UINT32 ticks;
1566	size_t len;
1567	int i;
1568	char * test;
1569	char sigbuf[KEYBUF_SIZE];
1570
1571	SL_ENTER(_("do_message_transfer"));
1572
1573	if (state == SH_DO_READ) /* finished reading */
1574	{
1575	TPT(( 0, FIL__, __LINE__, _("msg=<File transfer - entry.>\n")));
1576
1577	/* -- Client requests challenge. --
1578	*/
1579	if (0 == check_request_nerr ((char *) &(conn->head[3]), _("HELO")))
1580	{
1581	int client_state;
1582
1583	this_client = do_check_client(conn, &client_state);
1584	if (!this_client)
1585	SL_RETURN(client_state, _("do_message_transfer"));
1586
1587
1588	/* -- create a nonce and send it --
1589	*/
1590	conn->client_entry = this_client;
1591	sl_strlcpy (conn->peer, &(conn->buf[KEY_LEN]), SH_MINIBUF+1);
1592
1593	ticks = (UINT32) taus_get ();
1594
1595	test = (char *) &ticks;
1596	sh_util_cpylong (conn->challenge, test, 4);
1597	conn->challenge[4] = '\0';
1598	for (i = 0; i < 4; ++i)
1599	if (conn->challenge[i] == '\0')
1600	conn->challenge[i] = 0x01;
1601
1602	sh_xfer_prep_send (conn, conn->challenge, 5, _("TALK"),
1603	SH_PROTO_MSG);
1604	TPT(( 0, FIL__, __LINE__, _("msg=<Sent %s.>\n"),
1605	hu_trans(conn->challenge)));
1606	}
1607
1608	/* Client has send a message. Check whether we are in proper
1609	* state, and verify message.
1610	*/
1611	else if (0 ==
1612	check_request_nerr((char *)&(conn->head[3]), _("MESG")) &&
1613	conn->client_entry != NULL &&
1614	conn->client_entry->session_key[0] != '\0' &&
1615	(len = sl_strlen(conn->buf) - KEY_LEN) > 0 &&
1616	sl_strlen(conn->challenge) == 4)
1617	{
1618	TPT(( 0, FIL__, __LINE__,
1619	_("msg=<Message transfer - MESG (3).>\n")));
1620
1621	#ifdef SH_ENCRYPT
1622	if (conn->client_entry->encf_flag == 0) {
1623	conn->client_entry->ency_flag = 0;
1624	}
1625	if ((conn->client_entry->ency_flag != 0) &&
1626	((conn->head[0] & SH_PROTO_ENC) == 0))
1627	{
1628	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_MISENC,
1629	_("message transfer"),
1630	_("version2"),
1631	_("none"));
1632	}
1633	else if ((conn->client_entry->ency_flag != 0) &&
1634	((conn->head[0] & SH_MASK_ENC) !=
1635	conn->client_entry->ency_flag))
1636	{
1637	sh_error_handle(SH_ERR_NOTICE, FIL__, __LINE__, 0,
1638	MSG_TCP_MISENC,
1639	_("message transfer"),
1640	_("version2"),
1641	((conn->head[0] & SH_PROTO_ENC) == SH_PROTO_ENC) ? _("version2") : _("invalid"));
1642	conn->client_entry->ency_flag =
1643	(conn->head[0] & SH_MASK_ENC);
1644	}
1645	#else
1646	if ((conn->head[0] & SH_PROTO_ENC) != 0)
1647	{
1648	sh_error_handle((-1), FIL__, __LINE__, 0,
1649	MSG_TCP_MISENC,
1650	_("message transfer"),
1651	_("none"),
1652	((conn->head[0] & SH_PROTO_ENC) == SH_PROTO_ENC) ? _("version2") : _("invalid"));
1653	}
1654	#endif
1655
1656	TPT(( 0, FIL__, __LINE__, _("msg=<Rcvt %s.>\n"), conn->buf));
1657	/* get hash from message end, truncate message
1658	*/
1659	sl_strlcpy(hash, &(conn->buf[len]), KEY_LEN+1);
1660	conn->buf[len] = '\0';
1661
1662	/* verify hash
1663	*/
1664	buffer = sh_util_strconcat(conn->buf, conn->challenge, NULL);
1665	i = sl_strncmp(hash,
1666	sh_util_siggen(conn->client_entry->session_key,
1667	buffer,
1668	sl_strlen(buffer),
1669	sigbuf, sizeof(sigbuf)),
1670	KEY_LEN);
1671	TPT((0, FIL__, __LINE__, _("msg=<sign %s.>\n"),
1672	sh_util_siggen(conn->client_entry->session_key,
1673	buffer,
1674	sl_strlen(buffer),
1675	sigbuf, sizeof(sigbuf))));
1676
1677
1678	if (0 != i)
1679	{
1680	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1681	status_update (conn->client_entry, CLT_FAILED);
1682	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
1683	_("Msg signature mismatch"), conn->peer);
1684	conn->client_entry->session_key_timer =
1685	time(NULL) - (2*TIMEOUT_KEY);
1686	sh_xfer_do_free (conn);
1687	SL_RETURN(0, _("do_message_transfer"));
1688	}
1689	else
1690	{
1691	conn->client_entry->last_connect = time (NULL);
1692
1693	if (NULL != sl_strstr(conn->buf, _("EXIT")))
1694	{
1695	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1696	conn->client_entry->exit_flag = 1;
1697	status_update (conn->client_entry, CLT_EXITED);
1698	}
1699	else if (NULL != sl_strstr(conn->buf, _("PANIC")))
1700	{
1701	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1702	status_update (conn->client_entry, CLT_PANIC);
1703	}
1704	else if (NULL != sl_strstr(conn->buf, _("SUSPEND")))
1705	{
1706	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1707	status_update (conn->client_entry, CLT_SUSPEND);
1708	}
1709	else if (NULL != sl_strstr(conn->buf, _("POLICY")))
1710	{
1711	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1712	status_update (conn->client_entry, CLT_POLICY);
1713	}
1714	else if (NULL != sl_strstr(conn->buf,
1715	_("File check completed")))
1716	{
1717	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1718	status_update (conn->client_entry, CLT_CHECK);
1719	}
1720	else if (NULL != sl_strstr(conn->buf, _("START")))
1721	{
1722	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1723	sh_socket_add2reload (conn->client_entry->hostname);
1724	if (conn->client_entry->status_now == CLT_SUSPEND) {
1725	status_update (conn->client_entry, CLT_ILLEGAL);
1726	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_ILL,
1727	conn->peer);
1728	}
1729	else
1730	status_update (conn->client_entry, CLT_STARTED);
1731	}
1732	else
1733	{
1734	TPT((0, FIL__, __LINE__, _("msg=<update status>\n")));
1735	if (NULL != sl_strstr(conn->buf,
1736	_("Runtime configuration reloaded")))
1737	{
1738	sh_socket_add2reload (conn->client_entry->hostname);
1739	}
1740	status_update (conn->client_entry, CLT_MSG);
1741	}
1742
1743	TPT((0, FIL__, __LINE__, _("msg=<status updated>\n")));
1744	clt_sev = atoi(conn->buf);
1745	clt_class = (-1);
1746	ptok = strchr(conn->buf, '?');
1747	if (ptok != NULL)
1748	{
1749	++ptok;
1750	if (ptok != NULL && sh.flag.client_class == S_TRUE)
1751	clt_class = atoi(ptok); /* is a global */
1752	ptok = strchr(ptok, '?');
1753	if (ptok != NULL)
1754	++ptok;
1755	}
1756	if (sh.flag.client_severity == S_FALSE)
1757	clt_sev = (-1);
1758
1759	/* here we expect an xml formatted message, thus we don't
1760	escape xml special chars (flag == 0) */
1761	ptok =
1762	sh_tools_safe_name ((ptok!=NULL) ? ptok : conn->buf, 0);
1763
1764	/* push client name to error routine
1765	*/
1766	#if defined(SH_WITH_SERVER) && defined(HAVE_LIBPRELUDE)
1767	{
1768	char peer_ip[SH_IP_BUF];
1769	sh_ipvx_ntoa(peer_ip, sizeof(peer_ip), &(conn->addr_peer));
1770	sh_error_set_peer_ip( peer_ip );
1771	}
1772	#endif
1773	{
1774	char * pstrip = sh_strip_domain (conn->peer);
1775	sh_error_set_peer(pstrip);
1776	sh_error_handle(clt_sev, FIL__, __LINE__, 0, MSG_TCP_MSG,
1777	pstrip,
1778	ptok);
1779	SH_FREE(pstrip);
1780	sh_error_set_peer(NULL);
1781	}
1782	#if defined(SH_WITH_SERVER) && defined(HAVE_LIBPRELUDE)
1783	sh_error_set_peer_ip(NULL);
1784	#endif
1785
1786	TPT((0, FIL__, __LINE__, _("msg=<%s>\n"), ptok));
1787	SH_FREE(ptok);
1788	clt_class = (-1);
1789	}
1790	memset(buffer, '\0', sl_strlen(buffer));
1791	SH_FREE(buffer);
1792
1793	/* SERVER CONF SEND
1794	*/
1795	buffer = sh_util_strconcat(conn->buf,
1796	conn->challenge,
1797	NULL);
1798	sl_strlcpy(hash,
1799	sh_util_siggen ( conn->client_entry->session_key,
1800	buffer,
1801	sl_strlen(buffer),
1802	sigbuf, sizeof(sigbuf)),
1803	KEY_LEN+1);
1804
1805	/* --- SERVER CMD --- */
1806	cmd = sh_socket_check (conn->peer);
1807
1808	if (cmd != NULL)
1809	{
1810	/* max cmd size is SH_MAXMSGLEN bytes
1811	*/
1812	sl_strlcpy(&hash[KEY_LEN], cmd, SH_MAXMSGLEN);
1813	sl_strlcat(&hash[KEY_LEN],
1814	sh_util_siggen ( conn->client_entry->session_key,
1815	&hash[KEY_LEN],
1816	sl_strlen(&hash[KEY_LEN]),
1817	sigbuf, sizeof(sigbuf)),
1818	SH_MAXMSGLEN+KEY_LEN+1);
1819
1820	TPT((0, FIL__, __LINE__, _("CONF SEND <0> <%s>\n"),
1821	&hash[KEY_LEN]));
1822
1823	} else {
1824
1825	TPT((0, FIL__, __LINE__, _("CONF SEND <0> <[NULL]>\n")));
1826
1827	}
1828	/* --- SERVER CMD END --- */
1829
1830	TPT((0, FIL__, __LINE__, _("msg=<sign %s.>\n"),
1831	sh_util_siggen(conn->client_entry->session_key,
1832	buffer,
1833	sl_strlen(buffer),
1834	sigbuf, sizeof(sigbuf))));
1835
1836	#ifdef SH_ENCRYPT
1837	sh_xfer_send_crypt (conn, hash,
1838	sl_strlen(hash) /* KEY_LEN */,
1839	_("CONF"),
1840	SH_PROTO_MSG\|SH_PROTO_END\|conn->client_entry->ency_flag);
1841	#else
1842	sh_xfer_send_crypt (conn, hash,
1843	sl_strlen(hash) /* KEY_LEN */,
1844	_("CONF"),
1845	SH_PROTO_MSG\|SH_PROTO_END);
1846	#endif
1847
1848	memset(buffer, '\0', sl_strlen(buffer));
1849	SH_FREE(buffer);
1850
1851	/* sh_xfer_do_free (conn); */
1852	}
1853
1854	/* client does something unexpected
1855	*/
1856	else /* ---- ??? ----- */
1857	{
1858	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FINV,
1859	2, conn->pass, conn->peer,
1860	'\\', conn->head[3], '\\',conn->head[4],
1861	'\\', conn->head[5], '\\',conn->head[6]);
1862	status_update (conn->client_entry, CLT_FAILED);
1863	conn->client_entry->session_key_timer =
1864	time(NULL) - (2*TIMEOUT_KEY);
1865	sh_xfer_do_free (conn);
1866	}
1867	}
1868
1869	else if (state == SH_DO_WRITE) /* finished writing */
1870	{
1871	if (0 != (conn->head[0] & SH_PROTO_END))
1872	{
1873	if (flag_err_debug == S_TRUE)
1874	{
1875	char * pstrip = sh_strip_domain (conn->peer);
1876	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_OKMSG,
1877	pstrip);
1878	SH_FREE(pstrip);
1879	}
1880	sh_xfer_do_free (conn);
1881	SL_RETURN(0, _("do_message_transfer"));
1882	}
1883
1884	TPT(( 0, FIL__, __LINE__, _("msg=<Msg transfer - (wait).>\n")));
1885
1886	/* challenge is sent, now wait for message from client
1887	*/
1888	conn->headcount = 0;
1889	conn->bytecount = 0;
1890	conn->bytes_to_send = 0;
1891	conn->bytes_to_get = 0;
1892	if (conn->buf != NULL)
1893	{
1894	SH_FREE(conn->buf);
1895	conn->buf = NULL;
1896	}
1897	conn->state = CONN_READING;
1898	}
1899	TPT((0, FIL__, __LINE__, _("msg=<return>\n") ));
1900	SL_RETURN(0, _("do_message_transfer"));
1901	}
1902
1903	/* ------------------------------------------------------
1904	*
1905	* AUTHENTICATION
1906	*
1907	* ------------------------------------------------------ */
1908
1909	static void check_probe(sh_conn_t * conn)
1910	{
1911	if (conn && conn->client_entry)
1912	{
1913	/* If client has sent probe, change ivst_flag and clear probe in head[0].
1914	*/
1915	conn->head[0] = sh_tools_probe_store(conn->head[0],
1916	&(conn->client_entry->ivst_flag));
1917	}
1918	}
1919
1920	client_t * do_auth_start(sh_conn_t * conn)
1921	{
1922	client_t * this_client;
1923
1924	TPT((0, FIL__, __LINE__,
1925	_("msg=<Authentication - SALT (1).>\n")));
1926
1927	if (conn->buf == NULL \|\| sl_strlen(conn->buf) == 0)
1928	{
1929	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_NOCLT);
1930	sh_xfer_do_free (conn);
1931	return NULL;
1932	}
1933
1934	/* search the register
1935	*/
1936
1937	this_client = search_register (conn, 0);
1938	if (NULL == this_client)
1939	return NULL;
1940
1941	conn->client_entry = this_client;
1942	sl_strlcpy (conn->peer, conn->buf, SH_MINIBUF+1);
1943
1944	if (0 != check_request_s((char *)&(conn->head[3]),
1945	_("SALT"),conn->peer))
1946	{
1947	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
1948	_("No salt requested"), conn->peer);
1949	status_update (conn->client_entry, CLT_FAILED);
1950	conn->client_entry->session_key_timer =
1951	time(NULL) - (2*TIMEOUT_KEY);
1952	sh_xfer_do_free (conn);
1953	return NULL;
1954	}
1955
1956	check_probe(conn);
1957	return this_client;
1958	}
1959
1960	#if !defined(USE_SRP_PROTOCOL)
1961
1962	int do_auth(sh_conn_t * conn)
1963	{
1964	client_t * this_client;
1965	UINT32 ticks;
1966	char u[5] = "OOOO";
1967	#ifdef SH_ENCRYPT
1968	int err_num;
1969	char expbuf[SH_ERRBUF_SIZE];
1970	#endif
1971	char hash[SH_MAXMSGLEN + KEY_LEN + KEY_LEN + 1];
1972	char hashbuf[KEYBUF_SIZE];
1973
1974	/* first pass -- client request salt
1975	*/
1976	if (conn->pass == 1)
1977	{
1978	this_client = do_auth_start(conn);
1979
1980	if (!this_client)
1981	return -1;
1982
1983	/* -- create server nounce v --
1984	*/
1985	ticks = (UINT32) taus_get ();
1986
1987	if (conn->A != NULL)
1988	{
1989	SH_FREE(conn->A);
1990	conn->A = NULL;
1991	}
1992	conn->A = SH_ALLOC(KEY_LEN+1);
1993
1994	sl_strlcpy(conn->A,
1995	sh_tiger_hash((char *) &ticks,
1996	TIGER_DATA, sizeof(UINT32),
1997	hashbuf, sizeof(hashbuf)),
1998	KEY_LEN+1);
1999	u[0] = 'I'; u[1] = 'N'; u[2] = 'I'; u[3] = 'T'; u[4] = '\0';
2000
2001	if (conn->M1 != NULL)
2002	{
2003	SH_FREE(conn->M1);
2004	conn->M1 = NULL;
2005	}
2006	conn->M1 = SH_ALLOC(2*KEY_LEN+1);
2007
2008	/* compute hash key H(v(server), P)v(server)
2009	*/
2010	sh_passwd (conn->A, conn->client_entry->verifier,
2011	NULL, conn->M1);
2012
2013	sl_strlcat(conn->M1, conn->A, 2*KEY_LEN+1);
2014
2015
2016	/* --- send H(v(server), P)v(server) ----
2017	*/
2018	sh_xfer_prep_send (conn,
2019	conn->M1,
2020	sl_strlen(conn->M1),
2021	u,
2022	(conn->head[0]\|SH_PROTO_SRP));
2023
2024	SH_FREE(conn->M1);
2025	conn->M1 = NULL;
2026	}
2027
2028	/* client -- third pass
2029	* Message is H(H(u,v),P)u
2030	*
2031	* A := v, verifier := H(password),
2032	*/
2033	else if (conn->pass == 3 &&
2034	conn->client_entry != NULL)
2035	{
2036
2037	TPT((0, FIL__, __LINE__,
2038	_("msg=<Authentication - PASS (3).>\n")));
2039
2040	if (0 != check_request_s((char *) &(conn->head[3]), _("PASS"),
2041	conn->peer) \|\|
2042	sl_strlen(conn->buf) <= KEY_LEN \|\|
2043	conn->A == NULL)
2044	{
2045	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
2046	_("Invalid client request"), conn->peer);
2047	status_update (conn->client_entry, CLT_FAILED);
2048	conn->client_entry->session_key_timer =
2049	time(NULL) - (2*TIMEOUT_KEY);
2050	sh_xfer_do_free (conn);
2051	return -1;
2052	}
2053
2054	check_probe(conn);
2055
2056	/* store random nonce u from client
2057	*/
2058	if (conn->K != NULL)
2059	{
2060	SH_FREE(conn->K);
2061	conn->K = NULL;
2062	}
2063	conn->K = SH_ALLOC(KEY_LEN+1);
2064	sl_strlcpy(conn->K, &(conn->buf[KEY_LEN]), KEY_LEN+1);
2065
2066	/* verify random nonce u from client
2067	*/
2068	if (conn->M1 != NULL)
2069	{
2070	SH_FREE(conn->M1);
2071	conn->M1 = NULL;
2072	}
2073	conn->M1 = sh_util_strconcat(conn->K, conn->A, NULL);
2074
2075	TPT((0, FIL__, __LINE__, _("msg=<c/r: K = %s>\n"), conn->K));
2076	TPT((0, FIL__, __LINE__, _("msg=<c/r: A = %s>\n"), conn->A));
2077	TPT((0, FIL__, __LINE__, _("msg=<c/r: M = %s>\n"), conn->M1));
2078
2079	sl_strlcpy(hash, sh_tiger_hash (conn->M1,
2080	TIGER_DATA,
2081	sl_strlen(conn->M1),
2082	hashbuf, sizeof(hashbuf)),
2083	KEY_LEN+1);
2084	sh_passwd (hash, conn->client_entry->verifier, NULL, conn->M1);
2085
2086	TPT((0, FIL__, __LINE__, _("msg=<c/r: H = %s>\n"), hash));
2087	TPT((0, FIL__, __LINE__, _("msg=<c/r: P = %s>\n"), conn->M1));
2088
2089	if ( 0 != sl_strncmp(conn->M1, conn->buf, KEY_LEN))
2090	{
2091	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
2092	_("Session key mismatch"), conn->peer);
2093	status_update (conn->client_entry, CLT_FAILED);
2094	conn->client_entry->session_key_timer =
2095	time(NULL) - (2*TIMEOUT_KEY);
2096	sh_xfer_do_free (conn);
2097	return -1;
2098	}
2099
2100	/* ---- compute hash key H(v, P, u) ----
2101	*/
2102	sh_passwd (conn->A, conn->client_entry->verifier, conn->K,
2103	conn->M1);
2104
2105	sl_strlcpy(conn->client_entry->session_key,
2106	conn->M1, KEY_LEN+1);
2107	TPT((0, FIL__, __LINE__, _("msg=<c/r: Key = %s>\n"),
2108	conn->client_entry->session_key));
2109
2110	#ifdef SH_ENCRYPT
2111	err_num = rijndael_makeKey(&(conn->client_entry->keyInstE),
2112	DIR_ENCRYPT, 192,
2113	conn->client_entry->session_key);
2114	if (err_num < 0)
2115	sh_error_handle((-1), FIL__, __LINE__, -1, MSG_E_SUBGEN,
2116	errorExplain(err_num, expbuf, sizeof(expbuf)),
2117	_("check_protocol: makeKey"));
2118	err_num = rijndael_makeKey(&(conn->client_entry->keyInstD),
2119	DIR_DECRYPT, 192,
2120	conn->client_entry->session_key);
2121	if (err_num < 0)
2122	sh_error_handle((-1), FIL__, __LINE__, -1, MSG_E_SUBGEN,
2123	errorExplain(err_num, expbuf, sizeof(expbuf)),
2124	_("check_protocol: makeKey"));
2125	#endif
2126
2127	if (conn->K != NULL) SH_FREE (conn->K);
2128	conn->K = NULL;
2129	if (conn->A != NULL) SH_FREE (conn->A);
2130	conn->A = NULL;
2131	if (conn->M1 != NULL) SH_FREE (conn->M1);
2132	conn->M1 = NULL;
2133
2134	/* if (conn->client_entry->status_now == CLT_STARTED */
2135	if (((conn->client_entry->status_now != CLT_INACTIVE) &&
2136	(conn->client_entry->status_now != CLT_EXITED) &&
2137	(conn->client_entry->status_now != CLT_SUSPEND))
2138	&& conn->client_entry->session_key_timer > (time_t) 1)
2139	{
2140	status_update (conn->client_entry, CLT_ILLEGAL);
2141	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_ILL,
2142	conn->peer);
2143	}
2144	else if (conn->client_entry->session_key_timer == (time_t) 0)
2145	{
2146	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_NEW,
2147	conn->peer);
2148	if (conn->client_entry->status_now != CLT_SUSPEND)
2149	status_update (conn->client_entry, CLT_STARTED);
2150	}
2151
2152	conn->client_entry->session_key_timer = time (NULL);
2153	conn->client_entry->last_connect = time (NULL);
2154
2155	/* put in read state
2156	*/
2157	sh_xfer_prep_send (conn,
2158	_("AUTH"),
2159	5,
2160	_("AUTH"),
2161	(conn->head[0]\|SH_PROTO_SRP));
2162
2163	}
2164	else
2165	{
2166	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FINV,
2167	3, conn->pass, conn->peer,
2168	'\\', conn->head[3], '\\', conn->head[4],
2169	'\\', conn->head[5], '\\', conn->head[6]);
2170	sh_xfer_do_free (conn);
2171	}
2172	return 0;
2173	}
2174
2175	#else
2176
2177	static void noise()
2178	{
2179	UINT32 n = taus_get();
2180	retry_msleep(0, (n & 0x0000007F));
2181	return;
2182	}
2183
2184	/* use SRP */
2185
2186	int do_auth(sh_conn_t * conn)
2187	{
2188	client_t * this_client;
2189	UINT32 ticks;
2190	char u[5] = "OOOO";
2191	#ifdef SH_ENCRYPT
2192	int err_num;
2193	char expbuf[SH_ERRBUF_SIZE];
2194	#endif
2195	size_t len;
2196	char * test;
2197	char * foo_B;
2198	char * foo_Ss;
2199	char hashbuf[KEYBUF_SIZE];
2200
2201	/* use SRP
2202	*/
2203	if (conn->pass == 1)
2204	{
2205	this_client = do_auth_start(conn);
2206	if (!this_client)
2207	return -1;
2208
2209	u[0] = 'I'; u[1] = 'N'; u[2] = 'I'; u[3] = 'T'; u[4] = '\0';
2210	sh_xfer_prep_send (conn,
2211	conn->client_entry->salt,
2212	sl_strlen(conn->client_entry->salt),
2213	u,
2214	(conn->head[0]\|SH_PROTO_SRP));
2215	}
2216
2217	/* client has sent A -- third pass
2218	*/
2219	else if (conn->pass == 3 &&
2220	conn->client_entry != NULL)
2221	{
2222
2223	TPT((0, FIL__, __LINE__,
2224	_("msg=<Authentication - PC01 (3).>\n")));
2225
2226	if (0 != check_request_s((char *)&(conn->head[3]),_("PC01"),conn->peer)\|\|
2227	conn->buf == NULL
2228	)
2229	{
2230	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
2231	_("Invalid client request"), conn->peer);
2232	status_update (conn->client_entry, CLT_FAILED);
2233	conn->client_entry->session_key_timer =
2234	time(NULL) - (2*TIMEOUT_KEY);
2235	sh_xfer_do_free (conn);
2236	return -1;
2237	}
2238
2239	check_probe(conn); noise();
2240
2241	if (0 != sh_srp_init())
2242	{
2243	status_update (conn->client_entry, CLT_FAILED);
2244	sh_error_handle(SH_ERR_SEVERE, FIL__, __LINE__, 0,
2245	MSG_TCP_EBGN);
2246	sh_xfer_do_free (conn);
2247	return -1;
2248	}
2249
2250
2251	/* check A, only send B if correct
2252	*/
2253	if ( sl_strlen(conn->buf) < SH_BUFSIZE &&
2254	0 == sh_srp_check_zero (conn->buf) )
2255	{
2256	len = sl_strlen(conn->buf)+1;
2257
2258	if (conn->A != NULL)
2259	{
2260	SH_FREE(conn->A);
2261	conn->A = NULL;
2262	}
2263	conn->A = SH_ALLOC(len);
2264	sl_strlcpy (conn->A, conn->buf, len);
2265
2266	/*
2267	* compute B
2268	*/
2269	if (0 != sh_srp_make_a ()) /* b random number */
2270	{
2271	status_update (conn->client_entry, CLT_FAILED);
2272
2273	sh_error_handle(SH_ERR_SEVERE, FIL__, __LINE__, 0,
2274	MSG_TCP_EBGN);
2275	sh_srp_exit();
2276	sh_xfer_do_free (conn);
2277	return -1;
2278	}
2279
2280	foo_B = sh_srp_B /* B = v + g^b */
2281	(conn->client_entry->verifier);
2282
2283	if (foo_B == NULL)
2284	{
2285	status_update (conn->client_entry, CLT_FAILED);
2286
2287	sh_error_handle(SH_ERR_SEVERE, FIL__, __LINE__, 0,
2288	MSG_TCP_EBGN);
2289	sh_srp_exit();
2290	sh_xfer_do_free (conn);
2291	return -1;
2292	}
2293
2294	TPT((0, FIL__, __LINE__, _("msg=<srp: A = %s>\n"), conn->A));
2295	TPT((0, FIL__, __LINE__, _("msg=<srp: B = %s>\n"), foo_B));
2296
2297	/*
2298	* create nonce u
2299	*/
2300	ticks = (UINT32) taus_get ();
2301
2302	test = (char *) &ticks;
2303	sh_util_cpylong (u, test, 4); /* u nounce */
2304	u[4] = '\0';
2305	sl_strlcpy(conn->challenge,
2306	sh_tiger_hash(u, TIGER_DATA, 4, hashbuf, sizeof(hashbuf)),
2307	SH_CHALLENGE_SIZE);
2308
2309	TPT((0, FIL__, __LINE__, _("msg=<srp: u = %03o-%03o-%03o-%03o>\n"), u[0], u[1], u[2], u[3]));
2310	TPT((0, FIL__, __LINE__, _("msg=<srp: U = %s>\n"),
2311	conn->challenge));
2312
2313	/*
2314	* compute the session key K and M1 = Hash(A,B,K)
2315	*/
2316	foo_Ss = sh_srp_S_s (conn->challenge,
2317	conn->A,
2318	conn->client_entry->verifier);
2319
2320	if (foo_Ss == NULL \|\| 0 != sh_srp_check_zero (foo_Ss))
2321	{
2322	status_update (conn->client_entry, CLT_FAILED);
2323
2324	sh_error_handle(SH_ERR_SEVERE, FIL__, __LINE__, 0,
2325	MSG_TCP_EBGN);
2326	sh_srp_exit();
2327	sh_xfer_do_free (conn);
2328	return -1;
2329	}
2330
2331	if (conn->K != NULL)
2332	{
2333	SH_FREE(conn->K);
2334	conn->K = NULL;
2335	}
2336	conn->K = SH_ALLOC(KEY_LEN+1);
2337	sl_strlcpy(conn->K,
2338	sh_tiger_hash(foo_Ss, TIGER_DATA,
2339	sl_strlen(foo_Ss),
2340	hashbuf, sizeof(hashbuf)),
2341	KEY_LEN+1);
2342
2343	if (conn->M1 != NULL)
2344	{
2345	SH_FREE(conn->M1);
2346	conn->M1 = NULL;
2347	}
2348	conn->M1 = SH_ALLOC(KEY_LEN+1);
2349	sh_srp_M (conn->A, foo_B, conn->K, conn->M1, KEY_LEN+1);
2350
2351	TPT((0, FIL__, __LINE__, _("msg=<srp:Ss = %s>\n"), foo_Ss));
2352	TPT((0, FIL__, __LINE__, _("msg=<srp: K = %s>\n"), conn->K));
2353	TPT((0, FIL__, __LINE__, _("msg=<srp:M1 = %s>\n"),conn->M1));
2354
2355	/*
2356	* send B
2357	*/
2358	sh_xfer_prep_send (conn,
2359	foo_B,
2360	sl_strlen(foo_B)+1,
2361	u,
2362	(conn->head[0]\|SH_PROTO_SRP));
2363	if (foo_Ss != NULL)
2364	{
2365	SH_FREE(foo_Ss);
2366	foo_Ss = NULL;
2367	}
2368	if (foo_B != NULL)
2369	{
2370	SH_FREE(foo_B);
2371	foo_B = NULL;
2372	}
2373	}
2374	else
2375	{
2376	status_update (conn->client_entry, CLT_FAILED);
2377
2378	sh_error_handle(SH_ERR_SEVERE, FIL__, __LINE__, 0,
2379	MSG_TCP_EZERO);
2380	sh_xfer_do_free (conn);
2381	}
2382
2383	sh_srp_exit();
2384	}
2385
2386	/* client has sent M1 -- fifth pass
2387	*/
2388	else if (conn->pass == 5 &&
2389	conn->client_entry != NULL)
2390	{
2391	TPT((0, FIL__, __LINE__,
2392	_("msg=<Authentication - PC02 (5).>\n")));
2393
2394	/* check that the state is valid
2395	*/
2396	if (0 != check_request_s((char *)&(conn->head[3]), _("PC02"),
2397	conn->peer) \|\|
2398	conn->A == NULL \|\| conn->K == NULL \|\| conn->M1 == NULL)
2399	{
2400	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
2401	_("Invalid client request"), conn->peer);
2402	status_update (conn->client_entry, CLT_FAILED);
2403	conn->client_entry->session_key_timer =
2404	time(NULL) - (2*TIMEOUT_KEY);
2405	sh_xfer_do_free (conn);
2406	return -1;
2407	}
2408
2409	check_probe(conn); noise();
2410
2411	/* ------ verify M1 = H(A, B, K) -------
2412	* ----- send M2 = H(A, M1, K) -------
2413	*/
2414	if (conn->buf != NULL &&
2415	sl_strncmp(conn->buf, conn->M1, KEY_LEN) == 0)
2416	{
2417	/*
2418	* send M2
2419	*/
2420	char M_buf[KEY_LEN+1];
2421	sh_xfer_prep_send (conn,
2422	sh_srp_M (conn->A, conn->M1, conn->K,
2423	M_buf, sizeof(M_buf)),
2424	KEY_LEN+1,
2425	_("PARP"),
2426	(conn->head[0]\|SH_PROTO_SRP));
2427
2428	if (conn->A != NULL) SH_FREE(conn->A); conn->A = NULL;
2429	if (conn->M1 != NULL) SH_FREE(conn->M1); conn->M1 = NULL;
2430	sl_strlcpy(conn->client_entry->session_key,
2431	conn->K, KEY_LEN+1);
2432	TPT((0, FIL__, __LINE__, _("msg=<key %s>\n"),
2433	conn->client_entry->session_key));
2434
2435	#ifdef SH_ENCRYPT
2436	err_num = rijndael_makeKey(&(conn->client_entry->keyInstE),
2437	DIR_ENCRYPT, 192,
2438	conn->client_entry->session_key);
2439	if (err_num < 0)
2440	sh_error_handle((-1), FIL__, __LINE__, -1, MSG_E_SUBGEN,
2441	errorExplain(err_num, expbuf, sizeof(expbuf)),
2442	_("sh_xfer_prep_send_int: makeKey"));
2443	err_num = rijndael_makeKey(&(conn->client_entry->keyInstD),
2444	DIR_DECRYPT, 192,
2445	conn->client_entry->session_key);
2446	if (err_num < 0)
2447	sh_error_handle((-1), FIL__, __LINE__, -1, MSG_E_SUBGEN,
2448	errorExplain(err_num, expbuf, sizeof(expbuf)),
2449	_("sh_xfer_prep_send_int: makeKey"));
2450	#endif
2451
2452	if (conn->K != NULL) SH_FREE(conn->K); conn->K = NULL;
2453
2454	conn->client_entry->last_connect = time (NULL);
2455
2456	if (((conn->client_entry->status_now != CLT_INACTIVE) &&
2457	(conn->client_entry->status_now != CLT_EXITED) &&
2458	(conn->client_entry->status_now != CLT_SUSPEND))
2459	&& conn->client_entry->session_key_timer > (time_t) 1)
2460	{
2461	status_update (conn->client_entry, CLT_ILLEGAL);
2462
2463	sh_error_handle((-1), FIL__, __LINE__, 0,
2464	MSG_TCP_ILL,
2465	conn->peer);
2466	}
2467	else if (conn->client_entry->session_key_timer == (time_t) 0)
2468	{
2469	sh_error_handle((-1), FIL__, __LINE__, 0,
2470	MSG_TCP_NEW,
2471	conn->peer);
2472	if (conn->client_entry->status_now != CLT_SUSPEND)
2473	status_update (conn->client_entry, CLT_STARTED);
2474	}
2475	conn->client_entry->session_key_timer = time (NULL);
2476
2477	}
2478	else
2479	{
2480	status_update (conn->client_entry, CLT_FAILED);
2481	conn->client_entry->session_key_timer =
2482	time(NULL) - (2*TIMEOUT_KEY);
2483
2484	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_BADCONN,
2485	_("Session key mismatch"), conn->peer);
2486	sh_xfer_do_free (conn);
2487	}
2488	}
2489
2490	else
2491	{
2492	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FINV,
2493	4, conn->pass, conn->peer,
2494	'\\', conn->head[3], '\\', conn->head[4],
2495	'\\', conn->head[5], '\\', conn->head[6]);
2496	sh_xfer_do_free (conn);
2497	}
2498	return 0;
2499	}
2500	#endif
2501
2502	/************************************************************************
2503	*
2504	* Here we check the message received, and decide on the answer to send
2505	* (if any). The connection is in CONN_PAUSED state, thus we must:
2506	* (i) define the proper reaction
2507	* (ii) reset to CONN_READING or CONN_WRITING or CONN_FREE
2508	* (iii) eventually reset the connection entry
2509	*
2510	*************************************************************************/
2511	static
2512	void check_protocol(sh_conn_t * conn, int state)
2513	{
2514	SL_ENTER(_("check_protocol"));
2515
2516	/* seed / re-seed the PRNG if required
2517	*/
2518	(void) taus_seed();
2519
2520	/* protocols:
2521	* -- (iii) file transfer
2522	* -- (ii) authenticated message transfer
2523	* -- (i) SRP key exchange
2524	*/
2525
2526	/* --------- FILE TRANSFER -----------
2527	*/
2528	if ( (conn->head[0] & SH_PROTO_SRP) == 0 &&
2529	(conn->head[0] & SH_PROTO_BIG) != 0 /* is set */ )
2530	{
2531	/* nonzero means re-authentication is required
2532	*/
2533	if (0 == do_file_transfer(conn, state))
2534	SL_RET0(_("check_protocol"));
2535	}
2536	/* --------- END FILE TRANSFER ----------- */
2537
2538
2539	/* --------- message exchange -----------
2540	*/
2541	else if ((conn->head[0] & SH_PROTO_SRP) == 0 &&
2542	(conn->head[0] & SH_PROTO_MSG) != 0 /* is set */ )
2543	{
2544	/* nonzero means re-authentication is required
2545	*/
2546	if (0 == do_message_transfer(conn, state))
2547	SL_RET0(_("check_protocol"));
2548	}
2549	/* --------- END MESSAGE TRANSFER ------ */
2550
2551	/* --------- authentication -----------
2552	*/
2553	if ( (conn->head[0] & SH_PROTO_SRP) != 0 /* is set */ )
2554	{
2555	if (state == SH_DO_READ) /* finished reading */
2556	{
2557	do_auth(conn);
2558	}
2559
2560	else if (state == SH_DO_WRITE) /* finished writing */
2561	{
2562	TPT((0, FIL__, __LINE__, _("msg=<Authentication -- (wait).>\n")));
2563
2564	conn->headcount = 0;
2565	conn->bytecount = 0;
2566	conn->bytes_to_send = 0;
2567	conn->bytes_to_get = 0;
2568	if (conn->buf != NULL)
2569	{
2570	SH_FREE(conn->buf);
2571	conn->buf = NULL;
2572	}
2573	conn->state = CONN_READING;
2574	}
2575	}
2576	SL_RET0(_("check_protocol"));
2577	}
2578
2579
2580	/***********************************************************
2581	*
2582	* SERVER RECEIVE FUNCTION
2583	*
2584	***********************************************************
2585	*/
2586	int sh_xfer_do_read (sh_conn_t * conn)
2587	{
2588	unsigned long byteread; /* bytes read */
2589
2590	SL_ENTER(_("sh_xfer_do_read"));
2591
2592	if (conn->state == CONN_SENDING)
2593	{
2594	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_SYNC,
2595	conn->peer);
2596	SL_RETURN( (-1), _("sh_xfer_do_read"));
2597	}
2598
2599	if (conn->headcount < SH_HEADER_SIZE)
2600	{
2601	conn->bytes_to_get = SH_HEADER_SIZE - conn->headcount;
2602	byteread = read (conn->fd, &(conn->head[conn->headcount]),
2603	conn->bytes_to_get);
2604	if (byteread > 0 \|\| errno == EINTR)
2605	{
2606	if (byteread > 0)
2607	conn->headcount += byteread;
2608	if (conn->headcount == SH_HEADER_SIZE)
2609	{
2610	conn->bytes_to_get = (256 * (unsigned int)conn->head[1] +
2611	(unsigned int)conn->head[2]);
2612	SH_SHOWPROT(conn->head, '<');
2613	conn->bytecount = 0;
2614	}
2615	}
2616	else
2617	goto conn_reset;
2618	SL_RETURN( (0), _("sh_xfer_do_read"));
2619	}
2620
2621	/* limit message size
2622	*/
2623	conn->bytes_to_get = (conn->bytes_to_get > TRANS_BYTES) ?
2624	TRANS_BYTES : conn->bytes_to_get;
2625
2626	if (conn->headcount == SH_HEADER_SIZE && conn->bytes_to_get > 0)
2627	{
2628	if ( conn->bytecount == 0)
2629	{
2630	if (conn->buf != NULL)
2631	SH_FREE (conn->buf);
2632	conn->buf = SH_ALLOC(conn->bytes_to_get + 1); /* <= TRANS_BYTES+1 */
2633	}
2634
2635	byteread = read (conn->fd, &(conn->buf[conn->bytecount]),
2636	conn->bytes_to_get - conn->bytecount);
2637	if (byteread > 0 \|\| errno == EINTR)
2638	{
2639	if (byteread > 0)
2640	conn->bytecount += byteread;
2641	if (conn->bytecount == conn->bytes_to_get)
2642	{
2643	++conn->pass;
2644	/* always terminate with NULL - we might use sl_strcmp() */
2645	conn->buf[conn->bytecount] = '\0';
2646	conn->state = CONN_PAUSE;
2647
2648	#ifdef SH_ENCRYPT
2649	if ((conn->head[0] & SH_PROTO_ENC) != 0)
2650	{
2651	conn->buf = sh_tools_revertPack (conn->head,
2652	conn->client_entry->ivst_flag,
2653	conn->buf,
2654	&(conn->client_entry->keyInstD),
2655	conn->bytecount);
2656	}
2657	#endif
2658	/* ------ HERE CALL check_protocol(conn) ------- */
2659	check_protocol(conn, SH_DO_READ);
2660	}
2661	}
2662	else
2663	goto conn_reset;
2664	}
2665
2666	else if (conn->headcount == SH_HEADER_SIZE && conn->bytes_to_get == 0)
2667	{
2668	if (conn->buf != NULL)
2669	SH_FREE (conn->buf);
2670	conn->buf = NULL;
2671	conn->bytecount = 0;
2672	++conn->pass;
2673	conn->state = CONN_PAUSE;
2674	/* ------ HERE CALL check_protocol(conn) ------- */
2675	check_protocol(conn, SH_DO_READ);
2676	}
2677
2678	SL_RETURN( (0), _("sh_xfer_do_read"));
2679
2680	conn_reset:
2681	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_RESET,
2682	conn->peer);
2683	sh_xfer_do_free ( conn );
2684	SL_RETURN( (-1), _("sh_xfer_do_read"));
2685	}
2686
2687	#if !defined(O_NONBLOCK)
2688	#if defined(O_NDELAY)
2689	#define O_NONBLOCK O_NDELAY
2690	#else
2691	#define O_NONBLOCK 0
2692	#endif
2693	#endif
2694
2695	/* send to the client
2696	*/
2697	int sh_xfer_do_write (sh_conn_t * conn)
2698	{
2699	int flags;
2700	long arg = 0;
2701	long bytesent; /* bytes read */
2702
2703	SL_ENTER(_("sh_xfer_do_write"));
2704
2705	/* ---- consistency check ------
2706	*/
2707	if (conn->state == CONN_READING)
2708	{
2709	sh_error_handle( (-1), FIL__, __LINE__, 0, MSG_TCP_SYNC,
2710	conn->peer);
2711	SL_RETURN( (-1), _("sh_xfer_do_write"));
2712	}
2713
2714	flags = retry_fcntl (FIL__, __LINE__, conn->fd, F_GETFL, arg);
2715	retry_fcntl (FIL__, __LINE__, conn->fd, F_SETFL, flags\|O_NONBLOCK);
2716
2717	/* ---- send the header ------
2718	*/
2719	if (conn->headcount < SH_HEADER_SIZE)
2720	{
2721	conn->bytes_to_send = SH_HEADER_SIZE - conn->headcount;
2722	bytesent = write (conn->fd, &(conn->head[conn->headcount]),
2723	conn->bytes_to_send);
2724	if (bytesent >= 0 \|\| errno == EINTR \|\| errno == EAGAIN)
2725	{
2726	if (bytesent > 0)
2727	conn->headcount += bytesent;
2728	if (conn->headcount == SH_HEADER_SIZE)
2729	conn->bytes_to_send =
2730	(256 * (int)conn->head[1] + (int)conn->head[2]);
2731	}
2732	else
2733	goto conn_reset_w;
2734
2735	if (conn->fd >= 0)
2736	retry_fcntl (FIL__, __LINE__, conn->fd, F_SETFL, flags);
2737	SL_RETURN( (0), _("sh_xfer_do_write"));
2738	}
2739
2740	/* ---- send the body ------
2741	*/
2742
2743	if (conn->headcount == SH_HEADER_SIZE && conn->bytes_to_send > 0 &&
2744	conn->buf != NULL)
2745	{
2746	bytesent = write (conn->fd, &(conn->buf[conn->bytecount]),
2747	conn->bytes_to_send - conn->bytecount);
2748	if (bytesent >= 0 \|\| errno == EINTR \|\| errno == EAGAIN)
2749	{
2750	if (bytesent > 0)
2751	conn->bytecount += bytesent;
2752	if (conn->bytecount == conn->bytes_to_send)
2753	{
2754	++conn->pass;
2755	conn->state = CONN_PAUSE;
2756	/* ------ HERE CALL check_protocol(conn) ------- */
2757	check_protocol(conn, SH_DO_WRITE);
2758	}
2759	}
2760	else
2761	goto conn_reset_w;
2762	}
2763
2764	else if (conn->headcount == SH_HEADER_SIZE && conn->bytes_to_send == 0)
2765	{
2766	++conn->pass;
2767	conn->state = CONN_PAUSE;
2768	/* ------ HERE CALL check_protocol(conn) ------- */
2769	check_protocol(conn, SH_DO_WRITE);
2770	}
2771
2772	if (conn->fd >= 0)
2773	retry_fcntl (FIL__, __LINE__, conn->fd, F_SETFL, flags);
2774	SL_RETURN( (0), _("sh_xfer_do_write"));
2775
2776	conn_reset_w:
2777	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_RESET,
2778	conn->peer);
2779	sh_xfer_do_free ( conn );
2780	SL_RETURN( (-1), _("sh_xfer_do_write"));
2781	}
2782
2783	/* accept a connection from a client
2784	*/
2785	#include <syslog.h>
2786	#ifdef SH_USE_LIBWRAP
2787	#include <tcpd.h>
2788
2789	#ifndef ALLOW_SEVERITY
2790	#define ALLOW_SEVERITY LOG_INFO
2791	#define DENY_SEVERITY LOG_WARNING
2792	#endif
2793
2794	int allow_severity;
2795	int deny_severity;
2796	#endif
2797
2798	#ifdef SH_USE_LIBWRAP
2799	static int check_libwrap(int rc, sh_conn_t * newconn)
2800	{
2801	struct request_info request;
2802	char errbuf[128];
2803	char daemon[128];
2804
2805	sl_strlcpy(daemon, SH_INSTALL_NAME, sizeof(daemon));
2806	request_init(&request, RQ_DAEMON, daemon, RQ_FILE, rc, 0);
2807	fromhost(&request);
2808	if (!hosts_access(&request))
2809	{
2810	sl_strlcpy(errbuf, _("Refused connection from "), sizeof(errbuf));
2811	sl_strlcat(errbuf, eval_client(&request), sizeof(errbuf));
2812
2813	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
2814	errbuf, _("libwrap"));
2815	newconn->fd = -1;
2816	newconn->state = CONN_FREE;
2817	sl_close_fd(FIL__, __LINE__, rc);
2818	return -1;
2819	}
2820	return 0;
2821	}
2822	#endif
2823
2824	int sh_xfer_accept (int sock, sh_conn_t * newconn)
2825	{
2826	int errflag;
2827	int rc;
2828	struct sh_sockaddr addr;
2829
2830	/* handle AIX (size_t addrlen) in wrapper
2831	*/
2832	int addrlen = sizeof(addr);
2833
2834	SL_ENTER(_("sh_xfer_accept"));
2835
2836	rc = retry_accept(FIL__, __LINE__, sock, &addr, &addrlen);
2837
2838	if (rc < 0)
2839	{
2840	char err_buf[SH_ERRBUF_SIZE];
2841	errflag = errno;
2842	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
2843	sh_error_message(errflag,err_buf, sizeof(err_buf)), _("accept"));
2844	newconn->fd = -1;
2845	newconn->state = CONN_FREE;
2846	SL_RETURN( (-1), _("sh_xfer_accept"));
2847	}
2848
2849	if (addrlen == 0)
2850	{
2851	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
2852	_("Connecting entity unknown"), _("accept"));
2853	newconn->fd = -1;
2854	newconn->state = CONN_FREE;
2855	sl_close_fd(FIL__, __LINE__, rc);
2856	SL_RETURN( (-1), _("sh_xfer_accept"));
2857	}
2858
2859	#ifdef SH_USE_LIBWRAP
2860	if (check_libwrap(rc) < 0)
2861	SL_RETURN( (-1), _("sh_xfer_accept"));
2862	#endif
2863
2864	memcpy (&(newconn->addr_peer), &addr, sizeof(struct sh_sockaddr));
2865
2866	/* prepare for usage of connection
2867	*/
2868	(void) retry_fcntl( FIL__, __LINE__, rc, F_SETFD, 1 );
2869	newconn->fd = rc;
2870	newconn->state = CONN_READING;
2871	newconn->timer = (unsigned long) time (NULL);
2872
2873	if (flag_err_info == S_TRUE)
2874	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_CNEW, newconn->fd);
2875
2876	SL_RETURN( (0), _("sh_xfer_accept"));
2877	}
2878
2879	extern char sh_sig_msg[64]; /* defined in sh_unix.c */
2880
2881	/* ------------ port and interface -------
2882	*/
2883	static unsigned int server_port = SH_DEFAULT_PORT;
2884
2885	int sh_xfer_set_port (const char * str)
2886	{
2887	int retval = 0;
2888	unsigned long i;
2889	char * endptr;
2890
2891	SL_ENTER(_("sh_xfer_set_port"));
2892	i = strtoul (str, &endptr, 0);
2893	if (endptr == str) {
2894	retval = -1;
2895	} else if (i > 65535) {
2896	retval = -1;
2897	} else {
2898	server_port = i;
2899	}
2900	SL_RETURN( (retval), _("sh_xfer_set_port"));
2901	}
2902
2903	static struct sh_sockaddr server_interface;
2904	static int use_server_interface = 0;
2905
2906	int sh_xfer_set_interface (const char * str)
2907	{
2908	if (0 == strcmp(str, _("INADDR_ANY")))
2909	{
2910	use_server_interface = 0;
2911	return 0;
2912	}
2913
2914	if (0 == sh_ipvx_aton(str, &server_interface))
2915	{
2916	use_server_interface = 0;
2917	return -1;
2918	}
2919
2920	use_server_interface = 1;
2921	return 0;
2922	}
2923
2924	/* ------------ print error --------------
2925	*/
2926	struct sock_err_st {
2927	char msg[128];
2928	int errnum;
2929	int port;
2930	int line;
2931	int euid;
2932	};
2933
2934	static struct sock_err_st sock_err[2];
2935
2936	void sh_xfer_printerr(char * str, int errnum, unsigned int port, int line)
2937	{
2938	int slot = 0;
2939
2940	if (port != server_port)
2941	slot = 1;
2942	if (str == NULL)
2943	sock_err[slot].msg[0] = '\0';
2944	else
2945	sl_strlcpy(sock_err[slot].msg, str, 128);
2946	sock_err[slot].errnum = errnum;
2947	sock_err[slot].port = port;
2948	sock_err[slot].line = line;
2949	sock_err[slot].euid = (int) geteuid();
2950	}
2951
2952	int sh_xfer_printerr_final(int slot)
2953	{
2954	char errbuf[SH_ERRBUF_SIZE];
2955
2956	SL_ENTER(_("sh_xfer_printerr_final"));
2957	if (sock_err[slot].msg[0] != '\0')
2958	{
2959	dlog(1, FIL__, __LINE__,
2960	_("Could not set up the listening socket for the server because of the\nfollowing error: %s\nPossible reasons include:\n - insufficient privilege for UID %d, or\n - the port %d is already used by another program.\n"),
2961	sh_error_message(sock_err[slot].errnum, errbuf, sizeof(errbuf)),
2962	sock_err[slot].euid,
2963	sock_err[slot].port);
2964	sh_error_handle((-1), FIL__, sock_err[slot].line,
2965	sock_err[slot].errnum, MSG_EXIT_ABORTS,
2966	sh_error_message(sock_err[slot].errnum, errbuf, sizeof(errbuf)),
2967	sh.prg_name,
2968	sock_err[slot].msg);
2969	SL_RETURN((-1), _("sh_xfer_printerr_final"));
2970	}
2971	SL_RETURN(0, _("sh_xfer_printerr_final"));
2972	}
2973
2974	#define TIME_OUT_DEF 900
2975	static unsigned long time_out_val = TIME_OUT_DEF;
2976
2977	int sh_xfer_set_timeout (const char * c)
2978	{
2979	long val;
2980
2981	SL_ENTER(_("sh_xfer_set_time_out"));
2982
2983	val = strtol (c, (char **)NULL, 10);
2984
2985	if (val == 0)
2986	{
2987	val = TIME_OUT_DEF;
2988	}
2989	else if (val < 0)
2990	{
2991	time_out_val = TIME_OUT_DEF;
2992	SL_RETURN( (-1), _("sh_xfer_set_time_out"));
2993	}
2994
2995	time_out_val = (unsigned long) val;
2996	SL_RETURN( (0), _("sh_xfer_set_time_out"));
2997	}
2998
2999
3000	static sh_conn_t * conns = NULL;
3001	static int maxconn = 0; /* maximum number of simultaneous connections */
3002
3003
3004	#ifdef INET_SYSLOG
3005	#define INET_SUSPEND_TIME 180 /* equal to 3 minutes */
3006	#define SH_MINSOCK_DEFAULT 3
3007	int sh_xfer_syslog_sock[SH_SOCKMAX] = { -1 };
3008	extern int sh_xfer_recv_syslog_socket (int fd);
3009	int sh_xfer_syslog_sock_n = 0;
3010	#else
3011	#define SH_MINSOCK_DEFAULT 2
3012	#endif
3013
3014	int SH_MINSOCK = SH_MINSOCK_DEFAULT;
3015
3016	extern int pf_unix_fd;
3017
3018	/* the tcp socket, and the function to establish it
3019	*/
3020	static int sh_tcp_sock[SH_SOCKMAX] = { -1 };
3021	static int sh_tcp_sock_n = 0;
3022
3023	static int do_socket(int domain, int type, int protocol,
3024	struct sockaddr * sa, int salen)
3025	{
3026	int sock = -1;
3027	int errnum = 0;
3028	int flag = 1; /* non-zero to enable an option */
3029
3030	/* create the socket, bind() it and listen()
3031	*/
3032	if ((sock = socket(domain, type, protocol)) < 0 )
3033	{
3034	errnum = errno;
3035	sh_xfer_printerr (_("socket"), errnum, server_port, __LINE__);
3036	return -1;
3037	}
3038	(void) retry_fcntl( FIL__, __LINE__, sock, F_SETFD, 1 );
3039
3040	if ( setsockopt(sock, SOL_SOCKET, SO_REUSEADDR,
3041	(void *) &flag, sizeof(flag)) < 0 )
3042	{
3043	errnum = errno;
3044	sh_xfer_printerr (_("setsockopt"), errnum, server_port, __LINE__);
3045	sl_close_fd (FIL__, __LINE__, sock);
3046	return -1;
3047	}
3048
3049	if ( bind(sock, (struct sockaddr *) sa, salen) < 0)
3050	{
3051	if (errno != EADDRINUSE)
3052	{
3053	errnum = errno;
3054	sh_xfer_printerr (_("bind"), errnum, server_port, __LINE__);
3055	sl_close_fd (FIL__, __LINE__, sock);
3056	return -1;
3057	}
3058	else
3059	{
3060	sl_close_fd (FIL__, __LINE__, sock);
3061	return -2;
3062	}
3063	}
3064
3065	if ( retry_fcntl( FIL__, __LINE__, sock, F_SETFL, O_NONBLOCK ) < 0 )
3066	{
3067	errnum = errno;
3068	sh_xfer_printerr (_("fcntl"), errnum, server_port, __LINE__);
3069	sl_close_fd (FIL__, __LINE__, sock);
3070	return -1;
3071	}
3072
3073	if ( listen(sock, 64) < 0)
3074	{
3075	errnum = errno;
3076	sh_xfer_printerr (_("listen"), errnum, server_port, __LINE__);
3077	sl_close_fd (FIL__, __LINE__, sock);
3078	return -1;
3079	}
3080
3081	return sock;
3082	}
3083
3084	int sh_create_tcp_socket (void)
3085	{
3086	#if defined(USE_IPVX)
3087	struct addrinfo *ai;
3088	struct addrinfo *p;
3089	struct addrinfo hints;
3090	char port[32];
3091	#else
3092	struct sockaddr_in addr;
3093	int addrlen = sizeof(addr);
3094	#endif
3095
3096	int sock = -1;
3097
3098	SL_ENTER(_("sh_create_tcp_socket"));
3099
3100	sh_xfer_printerr (NULL, 0, server_port, __LINE__);
3101
3102	#if defined(USE_IPVX)
3103	if (use_server_interface == 0) /* INADDR_ANY, listen on all interfaces */
3104	{
3105	memset (&hints, '\0', sizeof (hints));
3106	hints.ai_flags = AI_PASSIVE \| AI_ADDRCONFIG;
3107	hints.ai_socktype = SOCK_STREAM;
3108	hints.ai_family = AF_UNSPEC;
3109	sl_snprintf(port, sizeof(port), "%d", server_port);
3110
3111	if (getaddrinfo (NULL, port, &hints, &ai) != 0)
3112	{
3113	int errnum = errno;
3114	sh_xfer_printerr (_("getaddrinfo"), errnum, server_port, __LINE__);
3115	sl_close_fd (FIL__, __LINE__, sock);
3116	SL_RETURN((-1), _("sl_create_tcp_socket"));
3117	}
3118
3119	p = ai;
3120
3121	while (p != NULL && sh_tcp_sock_n < SH_SOCKMAX)
3122	{
3123	sock = do_socket(p->ai_family, p->ai_socktype, p->ai_protocol,
3124	p->ai_addr, p->ai_addrlen);
3125
3126	if (sock >= 0) {
3127	if (sh_tcp_sock_n < SH_SOCKMAX) {
3128	sh_tcp_sock[sh_tcp_sock_n] = sock;
3129	++sh_tcp_sock_n;
3130	}
3131	else {
3132	sl_close_fd (FIL__, __LINE__, sock);
3133	}
3134	} else if (sock == -1) {
3135	freeaddrinfo (ai);
3136	goto end;
3137	}
3138	p = p->ai_next;
3139	}
3140
3141	freeaddrinfo (ai);
3142	}
3143	else
3144	{
3145	sh_ipvx_set_port(&server_interface, server_port);
3146
3147	sock = do_socket(server_interface.ss_family, SOCK_STREAM, 0,
3148	sh_ipvx_sockaddr_cast(&server_interface),
3149	SH_SS_LEN(server_interface));
3150
3151	if (sock >= 0) {
3152	sh_tcp_sock[0] = sock;
3153	sh_tcp_sock_n = 1;
3154	}
3155	}
3156	#else
3157	if (use_server_interface == 0)
3158	addr.sin_addr.s_addr = INADDR_ANY;
3159	else
3160	memcpy(&addr, sh_ipvx_sockaddr_cast(&server_interface), addrlen);
3161	addr.sin_family = AF_INET;
3162	addr.sin_port = htons(server_port);
3163
3164	sock = do_socket(AF_INET, SOCK_STREAM, 0, (struct sockaddr *) &addr, addrlen);
3165
3166	if (sock >= 0) {
3167	sh_tcp_sock[0] = sock;
3168	sh_tcp_sock_n = 1;
3169	}
3170
3171	#endif
3172
3173	#if defined(USE_IPVX)
3174	end:
3175	#endif
3176	if (sh_tcp_sock_n > 1)
3177	SH_MINSOCK += (sh_tcp_sock_n - 1);
3178
3179	SL_RETURN((sh_tcp_sock_n), _("sl_create_tcp_socket"));
3180	}
3181
3182	/*****************************************
3183	*
3184	* This is the server main loop.
3185	*
3186	* The server is set up for listening, and
3187	* and starts a select() loop.
3188	*
3189	*****************************************/
3190
3191	void sh_xfer_start_server()
3192	{
3193	#ifdef SH_USE_XML
3194	extern int sh_log_file (char * message, char * inet_peer);
3195	#endif
3196
3197	/* Use volatile to circumvent a gcc4 problem on RH/CentOS 4.8 (?) */
3198	volatile int sock = -1;
3199	sh_conn_t * cx;
3200	fd_set readset;
3201	fd_set writeset;
3202	struct timeval tv;
3203	int num_sel;
3204	int errnum;
3205	int nowconn;
3206	int status;
3207	int high_fd = -1;
3208	register int i;
3209	long dummy = 0;
3210	unsigned long time_now;
3211	unsigned long time_last = 0;
3212	unsigned long time_out = time_out_val;
3213
3214	time_t told;
3215	time_t tcurrent;
3216
3217	unsigned long tchkold;
3218
3219	int setsize_fd;
3220
3221	int sock_tcp[2];
3222	int sock_unix;
3223	#ifdef INET_SYSLOG
3224	int sock_log[2];
3225	#endif
3226
3227	SL_ENTER(_("sh_xfer_start_server"));
3228
3229	if ( sh_xfer_printerr_final(0) < 0)
3230	{
3231	aud_exit(FIL__, __LINE__, EXIT_FAILURE);
3232	}
3233
3234	sock = sh_tcp_sock[0];
3235
3236	/* ****************************************************************
3237	*
3238	* This is a non-forking server. We use select() on the listen()
3239	* socket to watch for new connections. For new connections, accept()
3240	* will return a new socket that is put in the read/write filesets.
3241	* Data about active connections are kept in the 'conns' table.
3242	*
3243	******************************************************************/
3244
3245	/* The table to hold info on sockets.
3246	* We reserve 6 file descriptors for misc. use.
3247	* The POSIX lower limit on open files seems to be eight.
3248	*/
3249	maxconn = get_open_max() - 6;
3250
3251	/* ugly fix for FreeBSD compiler warning; casting FD_SETSIZE in the
3252	* conditional expression does not suppress the warning... */
3253	setsize_fd = (int)FD_SETSIZE;
3254	maxconn = (setsize_fd < maxconn) ? setsize_fd : maxconn;
3255
3256	if (maxconn < 0 \|\| !sl_ok_muls(maxconn, sizeof(sh_conn_t)))
3257	{
3258	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_START_SRV,
3259	0, sock);
3260	aud_exit (FIL__, __LINE__, EXIT_FAILURE);
3261	}
3262	conns = SH_ALLOC (sizeof(sh_conn_t) * maxconn);
3263
3264	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_START_SRV,
3265	(maxconn-1), sock);
3266
3267	/* timer
3268	*/
3269	tcurrent = (unsigned long) time (NULL);
3270	told = tcurrent;
3271
3272	tchkold = tcurrent;
3273
3274	for (i = SH_MINSOCK; i < maxconn; ++i)
3275	{
3276	conns[i].buf = NULL;
3277	conns[i].K = NULL;
3278	conns[i].A = NULL;
3279	conns[i].M1 = NULL;
3280	conns[i].FileName = NULL;
3281	conns[i].fd = -1;
3282	sh_xfer_do_free ( &conns[i]);
3283	}
3284
3285	/* status init
3286	*/
3287	server_status.conn_open = 0;
3288	server_status.conn_total = 0;
3289	server_status.conn_max = maxconn-1;
3290	server_status.start = time (NULL);
3291	server_status.last = (time_t) 0;
3292
3293	nowconn = 1;
3294	tv.tv_sec = 5;
3295	tv.tv_usec = 0;
3296
3297	/* conns[0] is the listen() socket. Always in read mode.
3298	*/
3299	sock = 0;
3300
3301	sock_tcp[0] = 0;
3302	while (sock < sh_tcp_sock_n)
3303	{
3304	conns[sock].fd = sh_tcp_sock[sock];
3305	conns[sock].state = CONN_READING;
3306	/* high_fd = (sh_tcp_sock[sock] > high_fd) ? sh_tcp_sock[sock] : high_fd; */
3307	++sock;
3308	}
3309	sock_tcp[1] = sock;
3310
3311	conns[sock].fd = pf_unix_fd;
3312	conns[sock].state = CONN_READING;
3313	/* high_fd = (pf_unix_fd > high_fd) ? pf_unix_fd : high_fd; */
3314
3315	sock_unix = sock;
3316
3317	++sock;
3318
3319	#ifdef INET_SYSLOG
3320	conns[sock].fd = -1;
3321
3322	if ( sh_xfer_printerr_final(1) < 0)
3323	{
3324	SH_FREE(conns);
3325	conns = NULL;
3326	aud_exit(FIL__, __LINE__, EXIT_FAILURE);
3327	}
3328
3329	sock_log[0] = sock;
3330	sock_log[1] = sock;
3331
3332	if (sh_xfer_syslog_sock_n > 0)
3333	{
3334	int s2;
3335	for (s2 = 0; s2 < sh_xfer_syslog_sock_n; ++s2)
3336	{
3337	conns[sock].fd = sh_xfer_syslog_sock[s2];
3338	conns[sock].state = CONN_READING;
3339	/* high_fd = (high_fd > conns[sock].fd) ? high_fd : conns[sock].fd; */
3340	++sock;
3341	}
3342	sock_log[1] = sock;
3343
3344	}
3345	#endif
3346
3347	sh_html_write(all_clients);
3348
3349	/* This is the select() loop.
3350	*/
3351	while (1 == 1)
3352	{
3353
3354	if (sig_raised > 0)
3355	{
3356	TPT((0, FIL__, __LINE__, _("msg=<Process a signal.>\n")))
3357
3358	if (sig_termfast == 1) /* SIGTERM */
3359	{
3360	TPT((0, FIL__, __LINE__, _("msg=<Terminate.>\n")));
3361	strncpy (sh_sig_msg, _("SIGTERM"), 20);
3362	--sig_raised; --sig_urgent;
3363	aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
3364	}
3365
3366	if (sig_config_read_again == 1)
3367	{
3368	TPT((0, FIL__, __LINE__, _("msg=<Re-read configuration.>\n")));
3369	sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_RECONF);
3370
3371
3372	/* -- Delete the name server cache. --
3373	*/
3374
3375	delete_cache();
3376	#if defined(WITH_EXTERNAL)
3377	/* -- Delete list of external tasks. --
3378	*/
3379	(void) sh_ext_cleanup();
3380	#endif
3381	#if defined(SH_WITH_MAIL)
3382	sh_nmail_free();
3383	#endif
3384	/* - mark all clients dead
3385	* - read configuration file
3386	* - remove clients still dead
3387	*/
3388	sh_xfer_mark_dead ();
3389
3390	reset_count_dev_console();
3391	reset_count_dev_time();
3392	sl_trust_purge_user();
3393
3394	(void) sh_readconf_read ();
3395
3396	for (i = SH_MINSOCK; i < maxconn; ++i)
3397	if (conns[i].state != CONN_FREE &&
3398	conns[i].client_entry != NULL &&
3399	conns[i].client_entry->dead_flag == 1)
3400	sh_xfer_do_free ( &conns[i]);
3401	sh_xfer_clean_tree ();
3402
3403	sig_config_read_again = 0;
3404	--sig_raised;
3405	}
3406
3407	if (sig_fresh_trail == 1) /* SIGIOT */
3408	{
3409	/* Logfile access
3410	*/
3411	#ifdef SH_USE_XML
3412	sh_log_file (NULL, NULL);
3413	#endif
3414	TPT((0, FIL__, __LINE__, _("msg=<Logfile stop/restart.>\n")));
3415	sh_error_only_stderr (S_TRUE);
3416	sh_unix_rm_lock_file(sh.srvlog.name);
3417	retry_msleep(3, 0);
3418	sh.flag.log_start = S_TRUE;
3419	sh_error_only_stderr (S_FALSE);
3420	sig_fresh_trail = 0;
3421	--sig_raised;
3422	}
3423
3424
3425	if (sig_terminate == 1 && nowconn < 2) /* SIGQUIT */
3426	{
3427	TPT((0, FIL__, __LINE__, _("msg=<Terminate.>\n")));
3428	strncpy (sh_sig_msg, _("SIGQUIT"), 20);
3429	--sig_raised; --sig_urgent;
3430	aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
3431	}
3432
3433
3434	if (sig_debug_switch == 1) /* SIGUSR1 */
3435	{
3436	TPT((0, FIL__, __LINE__, _("msg=<Debug switch.>\n")));
3437	sh_error_dbg_switch();
3438	sig_debug_switch = 0;
3439	--sig_raised;
3440	}
3441
3442	if (sig_suspend_switch > 0) /* SIGUSR2 */
3443	{
3444	TPT((0, FIL__, __LINE__, _("msg=<Suspend switch.>\n")));
3445	if (sh_global_suspend_flag == 1) {
3446	sh_global_suspend_flag = 0;
3447	} else {
3448	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_SUSPEND,
3449	sh.prg_name);
3450	sh_global_suspend_flag = 1;
3451	}
3452	--sig_suspend_switch;
3453	--sig_raised; --sig_urgent;
3454	}
3455
3456	sig_raised = (sig_raised < 0) ? 0 : sig_raised;
3457	sig_urgent = (sig_urgent < 0) ? 0 : sig_urgent;
3458	TPT((0, FIL__, __LINE__, _("msg=<End signal processing.>\n")));
3459	}
3460
3461	if (sh_global_suspend_flag == 1)
3462	{
3463	(void) retry_msleep (1, 0);
3464	continue;
3465	}
3466
3467	/* Recompute the descriptor set. select() modifies it,
3468	* thus we update it using the info from the connection table.
3469	* Also recompute the number of open connections.
3470	*/
3471	FD_ZERO( &readset );
3472	FD_ZERO( &writeset );
3473	high_fd = conns[0].fd;
3474
3475	for (sock = sock_tcp[0]; sock < sock_tcp[1]; ++sock)
3476	{
3477	FD_SET(conns[sock].fd, &readset );
3478	high_fd = (high_fd > conns[sock].fd) ? high_fd : conns[sock].fd;
3479	}
3480
3481	if (conns[sock_unix].fd > -1)
3482	{
3483	FD_SET(conns[sock_unix].fd, &readset );
3484	high_fd = (high_fd > conns[sock_unix].fd) ? high_fd : conns[sock_unix].fd;
3485	}
3486
3487	#ifdef INET_SYSLOG
3488	for (sock = sock_log[0]; sock < sock_log[1]; ++sock)
3489	{
3490	if (conns[sock].fd > -1)
3491	{
3492	FD_SET(conns[sock].fd, &readset );
3493	high_fd = (high_fd > conns[sock].fd) ? high_fd : conns[sock].fd;
3494	}
3495	}
3496	#endif
3497
3498	time_now = (unsigned long) time (NULL);
3499	nowconn = 1;
3500
3501	for (i = SH_MINSOCK; i < maxconn; ++i)
3502	{
3503	/* eliminate timed out connections
3504	*/
3505	if (conns[i].state != CONN_FREE)
3506	{
3507	if (time_now-conns[i].timer > time_out)
3508	{
3509	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_TIMOUT,
3510	conns[i].peer);
3511	sh_xfer_do_free ( &conns[i]);
3512	}
3513	else
3514	++nowconn;
3515	}
3516
3517
3518	if (conns[i].state == CONN_READING)
3519	{
3520	FD_SET(conns[i].fd, &readset);
3521	high_fd = (high_fd < conns[i].fd ? conns[i].fd : high_fd);
3522	}
3523	else if (conns[i].state == CONN_SENDING)
3524	{
3525	FD_SET(conns[i].fd, &writeset);
3526	high_fd = (high_fd < conns[i].fd ? conns[i].fd : high_fd);
3527	}
3528	}
3529
3530	/* -- Exponentially reduce timeout limit if more than 1/2 full. --
3531	*/
3532	/* Eliminate this, will cause problems when too much clients are
3533	* starting up. */
3534	#if 0
3535	if (nowconn > (maxconn/2))
3536	time_out = ( (time_out/2) > 1) ? (time_out/2) : 1;
3537	else
3538	time_out = time_out_val;
3539	#endif
3540
3541
3542	/* -- Do the select(). --
3543	*/
3544	num_sel = select(high_fd+1, &readset, &writeset, NULL, &tv);
3545	errnum = errno;
3546
3547	/* reset timeout - modified by select() on some systems
3548	*/
3549	tv.tv_sec = 5;
3550	tv.tv_usec = 0;
3551
3552
3553	if ( (time_now - time_last) > 2L)
3554	{
3555	time_last = time_now;
3556	if (sh_html_write(all_clients) < 0)
3557	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_HTML);
3558	}
3559
3560
3561	/* Error handling.
3562	*/
3563	if ( num_sel < 0 ) /* some error */
3564	{
3565	char errbuf[SH_ERRBUF_SIZE];
3566
3567	if (sig_raised == 1)
3568	{
3569	sig_raised = 2;
3570	continue;
3571	}
3572
3573	if ( errnum == EINTR)
3574	continue; /* try again */
3575
3576	if ( errnum == EBADF)
3577	{
3578	/* seek and destroy the bad fd
3579	*/
3580	for (i = SH_MINSOCK; i < high_fd; ++i)
3581	{
3582	if ((conns[i].state == CONN_READING) \|\|
3583	(conns[i].state == CONN_SENDING))
3584	{
3585	if (-1 == retry_fcntl(FIL__, __LINE__,
3586	conns[i].fd, F_GETFL, dummy))
3587	sh_xfer_do_free ( &conns[i]);
3588	}
3589	}
3590	continue;
3591	}
3592
3593	sh_error_handle((-1), FIL__, __LINE__, errnum, MSG_EXIT_ABORTS,
3594	sh_error_message(errnum, errbuf, sizeof(errbuf)),
3595	sh.prg_name,
3596	_("select"));
3597	aud_exit(FIL__, __LINE__, EXIT_FAILURE );
3598	}
3599
3600
3601	/* log the timestamp
3602	*/
3603	if ((tcurrent - told) > sh.looptime )
3604	{
3605	told = tcurrent;
3606	#ifdef MEM_DEBUG
3607	sh_mem_check();
3608	sh_unix_count_mlock();
3609	#else
3610	sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_STAMP);
3611	#endif
3612	}
3613
3614	#if defined(SH_WITH_MAIL)
3615	/*
3616	* flush the mail queue
3617	*/
3618	if (tcurrent - sh.mailTime.alarm_last > sh.mailTime.alarm_interval)
3619	{
3620	TPT((0, FIL__, __LINE__, _("msg=<Flush mail queue.>\n")))
3621	(void) sh_nmail_flush ();
3622	sh.mailTime.alarm_last = tcurrent;
3623	}
3624	#endif
3625	#ifdef MEM_DEBUG
3626	sh_mem_dump();
3627	#endif
3628
3629	tcurrent = (unsigned long) time (NULL);
3630
3631	/* check for time limit exceeded
3632	*/
3633	if ((tcurrent - tchkold) > (unsigned int) 3 )
3634	{
3635	tchkold = tcurrent;
3636	client_time_check(/* all_clients */);
3637	/* reset cache */
3638	sh_userid_destroy();
3639	}
3640
3641	/* seed / re-seed the PRNG if required
3642	*/
3643	(void) taus_seed();
3644
3645	/* select() timeout handling.
3646	*/
3647	if ( num_sel == 0 ) /* timeout - no connection */
3648	{
3649	if (sh_html_write(all_clients) < 0)
3650	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_HTML);
3651	continue;
3652	}
3653
3654	/* New connection.
3655	*/
3656	for (sock = sock_tcp[0]; sock < sock_tcp[1]; ++sock)
3657	{
3658	if ( FD_ISSET(conns[sock].fd , &readset )) /* a new connection */
3659	{
3660	--num_sel;
3661	status = 0;
3662	if (nowconn < maxconn && sig_terminate == 0 && sig_termfast == 0)
3663	{
3664	/* Find a free slot to accept the connection
3665	*/
3666	i = SH_MINSOCK;
3667	while (i < maxconn)
3668	{
3669	if (conns[i].state == CONN_FREE)
3670	{
3671	/* Here we run the accept() and copy the peer to
3672	* the free slot.
3673	*/
3674	status = sh_xfer_accept(conns[sock].fd, &conns[i]);
3675
3676	if (status == 0)
3677	{
3678	high_fd =
3679	(high_fd > conns[i].fd ? high_fd : conns[i].fd);
3680	++server_status.conn_open;
3681	++server_status.conn_total;
3682	server_status.last = time (NULL);
3683	}
3684	break;
3685	}
3686	++i;
3687	}
3688	}
3689	/* This re-runs select to accept data on the new
3690	* connection, rather than first dealing with old
3691	* connections.
3692	*/
3693	if (status == 0)
3694	continue;
3695	}
3696	}
3697
3698	/* check for commands on the socket
3699	*/
3700	if (conns[sock_unix].fd > (-1) && FD_ISSET(conns[sock_unix].fd , &readset ))
3701	{
3702	sh_socket_poll();
3703	}
3704
3705	#ifdef INET_SYSLOG
3706	for (sock = sock_log[0]; sock < sock_log[1]; ++sock)
3707	{
3708	if (conns[sock].fd > (-1) && FD_ISSET(conns[sock].fd , &readset ))
3709	{
3710	sh_xfer_recv_syslog_socket (conns[sock].fd);
3711	}
3712	}
3713	#endif
3714
3715	/* Check for pending read/write on the rest of the sockets.
3716	*/
3717	for ( i = SH_MINSOCK; num_sel > 0 && i < maxconn; ++i )
3718	{
3719	if (sig_termfast == 1)
3720	break;
3721
3722	cx = &conns[i];
3723	if ( cx->state == CONN_READING &&
3724	FD_ISSET( cx->fd, &readset ) )
3725	{
3726	--num_sel;
3727	sh_xfer_do_read ( cx );
3728	}
3729	else if ( cx->state == CONN_SENDING &&
3730	FD_ISSET( cx->fd, &writeset ) )
3731	{
3732	--num_sel;
3733	sh_xfer_do_write ( cx );
3734	}
3735	}
3736	/* continue */
3737	}
3738	/* notreached */
3739	}
3740
3741	void free_client_tree (void)
3742	{
3743	SL_ENTER(_("free_client_tree"));
3744	zAVLFreeTree (all_clients, free_client);
3745	SL_RET0(_("free_client_tree"));
3746	}
3747
3748	void sh_xfer_free_all ()
3749	{
3750	register int i;
3751
3752	SL_ENTER(_("sh_xfer_free_all"));
3753
3754	if (conns != NULL)
3755	for (i = SH_MINSOCK; i < maxconn; ++i)
3756	{
3757	sh_xfer_do_free ( &conns[i]);
3758	}
3759
3760
3761	free_client_tree ();
3762
3763	if (conns != NULL)
3764	SH_FREE (conns);
3765
3766	SL_RET0(_("sh_xfer_free_all"));
3767	}
3768
3769
3770
3771	/* #ifdef SH_WITH_SERVER */
3772	#endif
3773
3774
3775
3776
3777
3778

Note: See TracBrowser for help on using the repository browser.

Download in other formats: