1 /* $NetBSD: ruserpass.c,v 1.33 2007/04/17 05:52:04 lukem Exp $ */
2
3 /*
4 * Copyright (c) 1985, 1993, 1994
5 * The Regents of the University of California. All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. Neither the name of the University nor the names of its contributors
16 * may be used to endorse or promote products derived from this software
17 * without specific prior written permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * SUCH DAMAGE.
30 */
31
32 #include <sys/cdefs.h>
33 #ifndef lint
34 #if 0
35 static char sccsid[] = "@(#)ruserpass.c 8.4 (Berkeley) 4/27/95";
36 #else
37 __RCSID("$NetBSD: ruserpass.c,v 1.33 2007/04/17 05:52:04 lukem Exp $");
38 #endif
39 #endif /* not lint */
40
41 #include <sys/types.h>
42 #include <sys/stat.h>
43
44 #include <ctype.h>
45 #include <err.h>
46 #include <errno.h>
47 #include <netdb.h>
48 #include <stdio.h>
49 #include <stdlib.h>
50 #include <string.h>
51 #include <unistd.h>
52
53 #include "ftp_var.h"
54
55 static int token(void);
56 static FILE *cfile;
57
58 #define DEFAULT 1
59 #define LOGIN 2
60 #define PASSWD 3
61 #define ACCOUNT 4
62 #define MACDEF 5
63 #define ID 10
64 #define MACH 11
65
66 static char tokval[100];
67
68 static struct toktab {
69 const char *tokstr;
70 int tval;
71 } toktab[] = {
72 { "default", DEFAULT },
73 { "login", LOGIN },
74 { "password", PASSWD },
75 { "passwd", PASSWD },
76 { "account", ACCOUNT },
77 { "machine", MACH },
78 { "macdef", MACDEF },
79 { NULL, 0 }
80 };
81
82 int
ruserpass(const char * host,char ** aname,char ** apass,char ** aacct)83 ruserpass(const char *host, char **aname, char **apass, char **aacct)
84 {
85 char *tmp;
86 const char *mydomain;
87 char myname[MAXHOSTNAMELEN + 1];
88 int t, i, c, usedefault = 0;
89 struct stat stb;
90
91 if (netrc[0] == '\0')
92 return (0);
93 cfile = fopen(netrc, "r");
94 if (cfile == NULL) {
95 if (errno != ENOENT)
96 warn("Can't read `%s'", netrc);
97 return (0);
98 }
99 if (gethostname(myname, sizeof(myname)) < 0)
100 myname[0] = '\0';
101 myname[sizeof(myname) - 1] = '\0';
102 if ((mydomain = strchr(myname, '.')) == NULL)
103 mydomain = "";
104 next:
105 while ((t = token()) > 0) switch(t) {
106
107 case DEFAULT:
108 usedefault = 1;
109 /* FALL THROUGH */
110
111 case MACH:
112 if (!usedefault) {
113 if ((t = token()) == -1)
114 goto bad;
115 if (t != ID)
116 continue;
117 /*
118 * Allow match either for user's input host name
119 * or official hostname. Also allow match of
120 * incompletely-specified host in local domain.
121 */
122 if (strcasecmp(host, tokval) == 0)
123 goto match;
124 if (strcasecmp(hostname, tokval) == 0)
125 goto match;
126 if ((tmp = strchr(hostname, '.')) != NULL &&
127 strcasecmp(tmp, mydomain) == 0 &&
128 strncasecmp(hostname, tokval, tmp-hostname) == 0 &&
129 tokval[tmp - hostname] == '\0')
130 goto match;
131 if ((tmp = strchr(host, '.')) != NULL &&
132 strcasecmp(tmp, mydomain) == 0 &&
133 strncasecmp(host, tokval, tmp - host) == 0 &&
134 tokval[tmp - host] == '\0')
135 goto match;
136 continue;
137 }
138 match:
139 while ((t = token()) > 0 &&
140 t != MACH && t != DEFAULT) switch(t) {
141
142 case LOGIN:
143 if ((t = token()) == -1)
144 goto bad;
145 if (t) {
146 if (*aname == NULL)
147 *aname = ftp_strdup(tokval);
148 else {
149 if (strcmp(*aname, tokval))
150 goto next;
151 }
152 }
153 break;
154 case PASSWD:
155 if ((*aname == NULL || strcmp(*aname, "anonymous")) &&
156 fstat(fileno(cfile), &stb) >= 0 &&
157 (stb.st_mode & 077) != 0) {
158 warnx("Error: .netrc file is readable by others");
159 warnx("Remove password or make file unreadable by others");
160 goto bad;
161 }
162 if ((t = token()) == -1)
163 goto bad;
164 if (t && *apass == NULL)
165 *apass = ftp_strdup(tokval);
166 break;
167 case ACCOUNT:
168 if (fstat(fileno(cfile), &stb) >= 0
169 && (stb.st_mode & 077) != 0) {
170 warnx("Error: .netrc file is readable by others");
171 warnx("Remove account or make file unreadable by others");
172 goto bad;
173 }
174 if ((t = token()) == -1)
175 goto bad;
176 if (t && *aacct == NULL)
177 *aacct = ftp_strdup(tokval);
178 break;
179 case MACDEF:
180 if (proxy) {
181 (void)fclose(cfile);
182 return (0);
183 }
184 while ((c = getc(cfile)) != EOF)
185 if (c != ' ' && c != '\t')
186 break;
187 if (c == EOF || c == '\n') {
188 fputs("Missing macdef name argument.\n",
189 ttyout);
190 goto bad;
191 }
192 if (macnum == 16) {
193 fputs(
194 "Limit of 16 macros have already been defined.\n",
195 ttyout);
196 goto bad;
197 }
198 tmp = macros[macnum].mac_name;
199 *tmp++ = c;
200 for (i = 0; i < 8 && (c = getc(cfile)) != EOF &&
201 !isspace(c); ++i) {
202 *tmp++ = c;
203 }
204 if (c == EOF) {
205 fputs(
206 "Macro definition missing null line terminator.\n",
207 ttyout);
208 goto bad;
209 }
210 *tmp = '\0';
211 if (c != '\n') {
212 while ((c = getc(cfile)) != EOF && c != '\n');
213 }
214 if (c == EOF) {
215 fputs(
216 "Macro definition missing null line terminator.\n",
217 ttyout);
218 goto bad;
219 }
220 if (macnum == 0) {
221 macros[macnum].mac_start = macbuf;
222 }
223 else {
224 macros[macnum].mac_start =
225 macros[macnum-1].mac_end + 1;
226 }
227 tmp = macros[macnum].mac_start;
228 while (tmp != macbuf + 4096) {
229 if ((c = getc(cfile)) == EOF) {
230 fputs(
231 "Macro definition missing null line terminator.\n",
232 ttyout);
233 goto bad;
234 }
235 *tmp = c;
236 if (*tmp == '\n') {
237 if (tmp == macros[macnum].mac_start) {
238 macros[macnum++].mac_end = tmp;
239 break;
240 } else if (*(tmp - 1) == '\0') {
241 macros[macnum++].mac_end =
242 tmp - 1;
243 break;
244 }
245 *tmp = '\0';
246 }
247 tmp++;
248 }
249 if (tmp == macbuf + 4096) {
250 fputs("4K macro buffer exceeded.\n",
251 ttyout);
252 goto bad;
253 }
254 break;
255 default:
256 warnx("Unknown .netrc keyword `%s'", tokval);
257 break;
258 }
259 goto done;
260 }
261 done:
262 if (t == -1)
263 goto bad;
264 (void)fclose(cfile);
265 return (0);
266 bad:
267 (void)fclose(cfile);
268 return (-1);
269 }
270
271 static int
token(void)272 token(void)
273 {
274 char *cp;
275 int c;
276 struct toktab *t;
277
278 if (feof(cfile) || ferror(cfile))
279 return (0);
280 while ((c = getc(cfile)) != EOF &&
281 (c == '\n' || c == '\t' || c == ' ' || c == ','))
282 continue;
283 if (c == EOF)
284 return (0);
285 cp = tokval;
286 if (c == '"') {
287 while ((c = getc(cfile)) != EOF && c != '"') {
288 if (c == '\\')
289 if ((c = getc(cfile)) == EOF)
290 break;
291 *cp++ = c;
292 if (cp == tokval + sizeof(tokval)) {
293 warnx("Token in .netrc too long");
294 return (-1);
295 }
296 }
297 } else {
298 *cp++ = c;
299 while ((c = getc(cfile)) != EOF
300 && c != '\n' && c != '\t' && c != ' ' && c != ',') {
301 if (c == '\\')
302 if ((c = getc(cfile)) == EOF)
303 break;
304 *cp++ = c;
305 if (cp == tokval + sizeof(tokval)) {
306 warnx("Token in .netrc too long");
307 return (-1);
308 }
309 }
310 }
311 *cp = 0;
312 if (tokval[0] == 0)
313 return (0);
314 for (t = toktab; t->tokstr; t++)
315 if (!strcmp(t->tokstr, tokval))
316 return (t->tval);
317 return (ID);
318 }
319