usr.bin/ftp/ruserpass.c

   1 /*      $NetBSD: ruserpass.c,v 1.33 2007/04/17 05:52:04 lukem Exp $     */
   2
   3 /*
   4  * Copyright (c) 1985, 1993, 1994
   5  *      The Regents of the University of California.  All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  * 2. Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in the
  14  *    documentation and/or other materials provided with the distribution.
  15  * 3. Neither the name of the University nor the names of its contributors
  16  *    may be used to endorse or promote products derived from this software
  17  *    without specific prior written permission.
  18  *
  19  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  29  * SUCH DAMAGE.
  30  */
  31
  32 #include <sys/cdefs.h>
  33 #ifndef lint
  34 #if 0
  35 static char sccsid[] = "@(#)ruserpass.c 8.4 (Berkeley) 4/27/95";
  36 #else
  37 __RCSID("$NetBSD: ruserpass.c,v 1.33 2007/04/17 05:52:04 lukem Exp $");
  38 #endif
  39 #endif /* not lint */
  40
  41 #include <sys/types.h>
  42 #include <sys/stat.h>
  43
  44 #include <ctype.h>
  45 #include <err.h>
  46 #include <errno.h>
  47 #include <netdb.h>
  48 #include <stdio.h>
  49 #include <stdlib.h>
  50 #include <string.h>
  51 #include <unistd.h>
  52
  53 #include "ftp_var.h"
  54
  55 static  int token(void);
  56 static  FILE *cfile;
  57
  58 #define DEFAULT 1
  59 #define LOGIN   2
  60 #define PASSWD  3
  61 #define ACCOUNT 4
  62 #define MACDEF  5
  63 #define ID      10
  64 #define MACH    11
  65
  66 static char tokval[100];
  67
  68 static struct toktab {
  69         const char *tokstr;
  70         int tval;
  71 } toktab[] = {
  72         { "default",    DEFAULT },
  73         { "login",      LOGIN },
  74         { "password",   PASSWD },
  75         { "passwd",     PASSWD },
  76         { "account",    ACCOUNT },
  77         { "machine",    MACH },
  78         { "macdef",     MACDEF },
  79         { NULL,         0 }
  80 };
  81
  82 int
  83 ruserpass(const char *host, char **aname, char **apass, char **aacct)
  84 {
  85         char *tmp;
  86         const char *mydomain;
  87         char myname[MAXHOSTNAMELEN + 1];
  88         int t, i, c, usedefault = 0;
  89         struct stat stb;
  90
  91         if (netrc[0] == '\0')
  92                 return (0);
  93         cfile = fopen(netrc, "r");
  94         if (cfile == NULL) {
  95                 if (errno != ENOENT)
  96                         warn("Can't read `%s'", netrc);
  97                 return (0);
  98         }
  99         if (gethostname(myname, sizeof(myname)) < 0)
 100                 myname[0] = '\0';
 101         myname[sizeof(myname) - 1] = '\0';
 102         if ((mydomain = strchr(myname, '.')) == NULL)
 103                 mydomain = "";
 104  next:
 105         while ((t = token()) > 0) switch(t) {
 106
 107         case DEFAULT:
 108                 usedefault = 1;
 109                 /* FALL THROUGH */
 110
 111         case MACH:
 112                 if (!usedefault) {
 113                         if ((t = token()) == -1)
 114                                 goto bad;
 115                         if (t != ID)
 116                                 continue;
 117                         /*
 118                          * Allow match either for user's input host name
 119                          * or official hostname.  Also allow match of
 120                          * incompletely-specified host in local domain.
 121                          */
 122                         if (strcasecmp(host, tokval) == 0)
 123                                 goto match;
 124                         if (strcasecmp(hostname, tokval) == 0)
 125                                 goto match;
 126                         if ((tmp = strchr(hostname, '.')) != NULL &&
 127                             strcasecmp(tmp, mydomain) == 0 &&
 128                             strncasecmp(hostname, tokval, tmp-hostname) == 0 &&
 129                             tokval[tmp - hostname] == '\0')
 130                                 goto match;
 131                         if ((tmp = strchr(host, '.')) != NULL &&
 132                             strcasecmp(tmp, mydomain) == 0 &&
 133                             strncasecmp(host, tokval, tmp - host) == 0 &&
 134                             tokval[tmp - host] == '\0')
 135                                 goto match;
 136                         continue;
 137                 }
 138         match:
 139                 while ((t = token()) > 0 &&
 140                     t != MACH && t != DEFAULT) switch(t) {
 141
 142                 case LOGIN:
 143                         if ((t = token()) == -1)
 144                                 goto bad;
 145                         if (t) {
 146                                 if (*aname == NULL)
 147                                         *aname = ftp_strdup(tokval);
 148                                 else {
 149                                         if (strcmp(*aname, tokval))
 150                                                 goto next;
 151                                 }
 152                         }
 153                         break;
 154                 case PASSWD:
 155                         if ((*aname == NULL || strcmp(*aname, "anonymous")) &&
 156                             fstat(fileno(cfile), &stb) >= 0 &&
 157                             (stb.st_mode & 077) != 0) {
 158         warnx("Error: .netrc file is readable by others");
 159         warnx("Remove password or make file unreadable by others");
 160                                 goto bad;
 161                         }
 162                         if ((t = token()) == -1)
 163                                 goto bad;
 164                         if (t && *apass == NULL)
 165                                 *apass = ftp_strdup(tokval);
 166                         break;
 167                 case ACCOUNT:
 168                         if (fstat(fileno(cfile), &stb) >= 0
 169                             && (stb.st_mode & 077) != 0) {
 170         warnx("Error: .netrc file is readable by others");
 171         warnx("Remove account or make file unreadable by others");
 172                                 goto bad;
 173                         }
 174                         if ((t = token()) == -1)
 175                                 goto bad;
 176                         if (t && *aacct == NULL)
 177                                 *aacct = ftp_strdup(tokval);
 178                         break;
 179                 case MACDEF:
 180                         if (proxy) {
 181                                 (void)fclose(cfile);
 182                                 return (0);
 183                         }
 184                         while ((c = getc(cfile)) != EOF)
 185                                 if (c != ' ' && c != '\t')
 186                                         break;
 187                         if (c == EOF || c == '\n') {
 188                                 fputs("Missing macdef name argument.\n",
 189                                     ttyout);
 190                                 goto bad;
 191                         }
 192                         if (macnum == 16) {
 193                                 fputs(
 194                             "Limit of 16 macros have already been defined.\n",
 195                                     ttyout);
 196                                 goto bad;
 197                         }
 198                         tmp = macros[macnum].mac_name;
 199                         *tmp++ = c;
 200                         for (i = 0; i < 8 && (c = getc(cfile)) != EOF &&
 201                             !isspace(c); ++i) {
 202                                 *tmp++ = c;
 203                         }
 204                         if (c == EOF) {
 205                                 fputs(
 206                             "Macro definition missing null line terminator.\n",
 207                                     ttyout);
 208                                 goto bad;
 209                         }
 210                         *tmp = '\0';
 211                         if (c != '\n') {
 212                                 while ((c = getc(cfile)) != EOF && c != '\n');
 213                         }
 214                         if (c == EOF) {
 215                                 fputs(
 216                             "Macro definition missing null line terminator.\n",
 217                                     ttyout);
 218                                 goto bad;
 219                         }
 220                         if (macnum == 0) {
 221                                 macros[macnum].mac_start = macbuf;
 222                         }
 223                         else {
 224                                 macros[macnum].mac_start =
 225                                     macros[macnum-1].mac_end + 1;
 226                         }
 227                         tmp = macros[macnum].mac_start;
 228                         while (tmp != macbuf + 4096) {
 229                                 if ((c = getc(cfile)) == EOF) {
 230                                         fputs(
 231                             "Macro definition missing null line terminator.\n",
 232                                             ttyout);
 233                                         goto bad;
 234                                 }
 235                                 *tmp = c;
 236                                 if (*tmp == '\n') {
 237                                         if (tmp == macros[macnum].mac_start) {
 238                                                 macros[macnum++].mac_end = tmp;
 239                                                 break;
 240                                         } else if (*(tmp - 1) == '\0') {
 241                                                 macros[macnum++].mac_end =
 242                                                     tmp - 1;
 243                                                 break;
 244                                         }
 245                                         *tmp = '\0';
 246                                 }
 247                                 tmp++;
 248                         }
 249                         if (tmp == macbuf + 4096) {
 250                                 fputs("4K macro buffer exceeded.\n",
 251                                     ttyout);
 252                                 goto bad;
 253                         }
 254                         break;
 255                 default:
 256                         warnx("Unknown .netrc keyword `%s'", tokval);
 257                         break;
 258                 }
 259                 goto done;
 260         }
 261  done:
 262         if (t == -1)
 263                 goto bad;
 264         (void)fclose(cfile);
 265         return (0);
 266  bad:
 267         (void)fclose(cfile);
 268         return (-1);
 269 }
 270
 271 static int
 272 token(void)
 273 {
 274         char *cp;
 275         int c;
 276         struct toktab *t;
 277
 278         if (feof(cfile) || ferror(cfile))
 279                 return (0);
 280         while ((c = getc(cfile)) != EOF &&
 281             (c == '\n' || c == '\t' || c == ' ' || c == ','))
 282                 continue;
 283         if (c == EOF)
 284                 return (0);
 285         cp = tokval;
 286         if (c == '"') {
 287                 while ((c = getc(cfile)) != EOF && c != '"') {
 288                         if (c == '\\')
 289                                 if ((c = getc(cfile)) == EOF)
 290                                         break;
 291                         *cp++ = c;
 292                         if (cp == tokval + sizeof(tokval)) {
 293                                 warnx("Token in .netrc too long");
 294                                 return (-1);
 295                         }
 296                 }
 297         } else {
 298                 *cp++ = c;
 299                 while ((c = getc(cfile)) != EOF
 300                     && c != '\n' && c != '\t' && c != ' ' && c != ',') {
 301                         if (c == '\\')
 302                                 if ((c = getc(cfile)) == EOF)
 303                                         break;
 304                         *cp++ = c;
 305                         if (cp == tokval + sizeof(tokval)) {
 306                                 warnx("Token in .netrc too long");
 307                                 return (-1);
 308                         }
 309                 }
 310         }
 311         *cp = 0;
 312         if (tokval[0] == 0)
 313                 return (0);
 314         for (t = toktab; t->tokstr; t++)
 315                 if (!strcmp(t->tokstr, tokval))
 316                         return (t->tval);
 317         return (ID);
 318 }