1 # include <signal.h>
2 # include <errno.h>
3 # include "sendmail.h"
4 # include <sys/stat.h>
5 # ifdef LOG
6 # include <syslog.h>
7 # endif LOG
8 
9 SCCSID(@(#)deliver.c	3.62		01/23/82);
10 
11 /*
12 **  DELIVER -- Deliver a message to a list of addresses.
13 **
14 **	This routine delivers to everyone on the same host as the
15 **	user on the head of the list.  It is clever about mailers
16 **	that don't handle multiple users.  It is NOT guaranteed
17 **	that it will deliver to all these addresses however -- so
18 **	deliver should be called once for each address on the
19 **	list.
20 **
21 **	Parameters:
22 **		firstto -- head of the address list to deliver to.
23 **		editfcn -- if non-NULL, we want to call this function
24 **			to output the letter (instead of just out-
25 **			putting it raw).
26 **
27 **	Returns:
28 **		zero -- successfully delivered.
29 **		else -- some failure, see ExitStat for more info.
30 **
31 **	Side Effects:
32 **		The standard input is passed off to someone.
33 */
34 
35 deliver(firstto, editfcn)
36 	ADDRESS *firstto;
37 	int (*editfcn)();
38 {
39 	char *host;			/* host being sent to */
40 	char *user;			/* user being sent to */
41 	char **pvp;
42 	register char **mvp;
43 	register char *p;
44 	register struct mailer *m;	/* mailer for this recipient */
45 	register int i;
46 	extern putmessage();
47 	extern bool checkcompat();
48 	char *pv[MAXPV+1];
49 	char tobuf[MAXLINE];		/* text line of to people */
50 	char buf[MAXNAME];
51 	ADDRESS *ctladdr;
52 	extern ADDRESS *getctladdr();
53 	char tfrombuf[MAXNAME];		/* translated from person */
54 	extern char **prescan();
55 	register ADDRESS *to = firstto;
56 	bool clever = FALSE;		/* running user smtp to this mailer */
57 	bool tempfail = FALSE;
58 	ADDRESS *tochain = NULL;	/* chain of users in this mailer call */
59 
60 	errno = 0;
61 	if (!ForceMail && bitset(QDONTSEND, to->q_flags))
62 		return (0);
63 
64 # ifdef DEBUG
65 	if (Debug)
66 		printf("\n--deliver, mailer=%d, host=`%s', first user=`%s'\n",
67 			to->q_mailer->m_mno, to->q_host, to->q_user);
68 # endif DEBUG
69 
70 	/*
71 	**  Do initial argv setup.
72 	**	Insert the mailer name.  Notice that $x expansion is
73 	**	NOT done on the mailer name.  Then, if the mailer has
74 	**	a picky -f flag, we insert it as appropriate.  This
75 	**	code does not check for 'pv' overflow; this places a
76 	**	manifest lower limit of 4 for MAXPV.
77 	*/
78 
79 	m = to->q_mailer;
80 	host = to->q_host;
81 
82 	/* rewrite from address, using rewriting rules */
83 	(void) expand(m->m_from, buf, &buf[sizeof buf - 1]);
84 	mvp = prescan(buf, '\0');
85 	if (mvp == NULL)
86 	{
87 		syserr("bad mailer from translate \"%s\"", buf);
88 		return (EX_SOFTWARE);
89 	}
90 	rewrite(mvp, 2);
91 	cataddr(mvp, tfrombuf, sizeof tfrombuf);
92 
93 	define('g', tfrombuf);		/* translated sender address */
94 	define('h', host);		/* to host */
95 	Errors = 0;
96 	pvp = pv;
97 	*pvp++ = m->m_argv[0];
98 
99 	/* insert -f or -r flag as appropriate */
100 	if (bitset(M_FOPT|M_ROPT, m->m_flags) && FromFlag)
101 	{
102 		if (bitset(M_FOPT, m->m_flags))
103 			*pvp++ = "-f";
104 		else
105 			*pvp++ = "-r";
106 		(void) expand("$g", buf, &buf[sizeof buf - 1]);
107 		*pvp++ = newstr(buf);
108 	}
109 
110 	/*
111 	**  Append the other fixed parts of the argv.  These run
112 	**  up to the first entry containing "$u".  There can only
113 	**  be one of these, and there are only a few more slots
114 	**  in the pv after it.
115 	*/
116 
117 	for (mvp = m->m_argv; (p = *++mvp) != NULL; )
118 	{
119 		while ((p = index(p, '$')) != NULL)
120 			if (*++p == 'u')
121 				break;
122 		if (p != NULL)
123 			break;
124 
125 		/* this entry is safe -- go ahead and process it */
126 		(void) expand(*mvp, buf, &buf[sizeof buf - 1]);
127 		*pvp++ = newstr(buf);
128 		if (pvp >= &pv[MAXPV - 3])
129 		{
130 			syserr("Too many parameters to %s before $u", pv[0]);
131 			return (-1);
132 		}
133 	}
134 
135 	if (*mvp == NULL)
136 	{
137 		/* running SMTP */
138 # ifdef SMTP
139 		clever = TRUE;
140 		*pvp = NULL;
141 		i = smtpinit(m, pv, (ADDRESS *) NULL);
142 		giveresponse(i, TRUE, m);
143 # ifdef QUEUE
144 		if (i == EX_TEMPFAIL)
145 		{
146 			QueueUp = TRUE;
147 			tempfail = TRUE;
148 		}
149 # endif QUEUE
150 # else SMTP
151 		syserr("SMTP style mailer");
152 		return (EX_SOFTWARE);
153 # endif SMTP
154 	}
155 
156 	/*
157 	**  At this point *mvp points to the argument with $u.  We
158 	**  run through our address list and append all the addresses
159 	**  we can.  If we run out of space, do not fret!  We can
160 	**  always send another copy later.
161 	*/
162 
163 	tobuf[0] = '\0';
164 	To = tobuf;
165 	ctladdr = NULL;
166 	for (; to != NULL; to = to->q_next)
167 	{
168 		/* avoid sending multiple recipients to dumb mailers */
169 		if (tobuf[0] != '\0' && !bitset(M_MUSER, m->m_flags))
170 			break;
171 
172 		/* if already sent or not for this host, don't send */
173 		if ((!ForceMail && bitset(QDONTSEND, to->q_flags)) ||
174 		    strcmp(to->q_host, host) != 0 || to->q_mailer != firstto->q_mailer)
175 			continue;
176 
177 # ifdef DEBUG
178 		if (Debug)
179 		{
180 			printf("\nsend to ");
181 			printaddr(to, FALSE);
182 		}
183 # endif DEBUG
184 
185 		/* link together the chain of recipients */
186 		if (!bitset(QDONTSEND, to->q_flags))
187 		{
188 			to->q_tchain = tochain;
189 			tochain = to;
190 		}
191 
192 		/* compute effective uid/gid when sending */
193 		if (to->q_mailer == ProgMailer)
194 			ctladdr = getctladdr(to);
195 
196 		user = to->q_user;
197 		To = to->q_paddr;
198 		to->q_flags |= QDONTSEND;
199 		if (tempfail)
200 		{
201 			to->q_flags |= QQUEUEUP;
202 			continue;
203 		}
204 
205 		/*
206 		**  Check to see that these people are allowed to
207 		**  talk to each other.
208 		*/
209 
210 		if (!checkcompat(to))
211 		{
212 			giveresponse(EX_UNAVAILABLE, TRUE, m);
213 			continue;
214 		}
215 
216 		/*
217 		**  Strip quote bits from names if the mailer is dumb
218 		**	about them.
219 		*/
220 
221 		if (bitset(M_STRIPQ, m->m_flags))
222 		{
223 			stripquotes(user, TRUE);
224 			stripquotes(host, TRUE);
225 		}
226 		else
227 		{
228 			stripquotes(user, FALSE);
229 			stripquotes(host, FALSE);
230 		}
231 
232 		/*
233 		**  If an error message has already been given, don't
234 		**	bother to send to this address.
235 		**
236 		**	>>>>>>>>>> This clause assumes that the local mailer
237 		**	>> NOTE >> cannot do any further aliasing; that
238 		**	>>>>>>>>>> function is subsumed by sendmail.
239 		*/
240 
241 		if (bitset(QBADADDR, to->q_flags))
242 			continue;
243 
244 		/* save statistics.... */
245 		Stat.stat_nt[to->q_mailer->m_mno]++;
246 		Stat.stat_bt[to->q_mailer->m_mno] += kbytes(MsgSize);
247 
248 		/*
249 		**  See if this user name is "special".
250 		**	If the user name has a slash in it, assume that this
251 		**	is a file -- send it off without further ado.
252 		**	Note that this means that editfcn's will not
253 		**	be applied to the message.  Also note that
254 		**	this type of addresses is not processed along
255 		**	with the others, so we fudge on the To person.
256 		*/
257 
258 		if (m == LocalMailer)
259 		{
260 			if (user[0] == '/')
261 			{
262 				i = mailfile(user, getctladdr(to));
263 				giveresponse(i, TRUE, m);
264 				continue;
265 			}
266 		}
267 
268 		/*
269 		**  Address is verified -- add this user to mailer
270 		**  argv, and add it to the print list of recipients.
271 		*/
272 
273 		/* create list of users for error messages */
274 		if (tobuf[0] != '\0')
275 			(void) strcat(tobuf, ",");
276 		(void) strcat(tobuf, to->q_paddr);
277 		define('u', user);		/* to user */
278 		define('z', to->q_home);	/* user's home */
279 
280 		/*
281 		**  Expand out this user into argument list or
282 		**  send it to our SMTP server.
283 		*/
284 
285 		if (clever)
286 		{
287 # ifdef SMTP
288 			i = smtprcpt(to);
289 			if (i != EX_OK)
290 			{
291 # ifdef QUEUE
292 				if (i == EX_TEMPFAIL)
293 				{
294 					QueueUp = TRUE;
295 					to->q_flags |= QQUEUEUP;
296 				}
297 				else
298 # endif QUEUE
299 				{
300 					to->q_flags |= QBADADDR;
301 					giveresponse(i, TRUE, m);
302 				}
303 			}
304 # else SMTP
305 			syserr("trying to be clever");
306 # endif SMTP
307 		}
308 		else
309 		{
310 			(void) expand(*mvp, buf, &buf[sizeof buf - 1]);
311 			*pvp++ = newstr(buf);
312 			if (pvp >= &pv[MAXPV - 2])
313 			{
314 				/* allow some space for trailing parms */
315 				break;
316 			}
317 		}
318 	}
319 
320 	/* see if any addresses still exist */
321 	if (tobuf[0] == '\0')
322 	{
323 # ifdef SMTP
324 		if (clever)
325 			smtpquit(pv[0]);
326 # endif SMTP
327 		return (0);
328 	}
329 
330 	/* print out messages as full list */
331 	To = tobuf;
332 
333 	/*
334 	**  Fill out any parameters after the $u parameter.
335 	*/
336 
337 	while (!clever && *++mvp != NULL)
338 	{
339 		(void) expand(*mvp, buf, &buf[sizeof buf - 1]);
340 		*pvp++ = newstr(buf);
341 		if (pvp >= &pv[MAXPV])
342 			syserr("deliver: pv overflow after $u for %s", pv[0]);
343 	}
344 	*pvp++ = NULL;
345 
346 	/*
347 	**  Call the mailer.
348 	**	The argument vector gets built, pipes
349 	**	are created as necessary, and we fork & exec as
350 	**	appropriate.
351 	**	If we are running SMTP, we just need to clean up.
352 	*/
353 
354 	if (editfcn == NULL)
355 		editfcn = putmessage;
356 	if (ctladdr == NULL)
357 		ctladdr = &From;
358 # ifdef SMTP
359 	if (clever)
360 	{
361 		i = smtpfinish(m, editfcn);
362 		smtpquit(pv[0]);
363 	}
364 	else
365 # endif SMTP
366 		i = sendoff(m, pv, editfcn, ctladdr);
367 
368 	/*
369 	**  If we got a temporary failure, arrange to queue the
370 	**  addressees.
371 	*/
372 
373 # ifdef QUEUE
374 	if (i == EX_TEMPFAIL)
375 	{
376 		QueueUp = TRUE;
377 		for (to = tochain; to != NULL; to = to->q_tchain)
378 			to->q_flags |= QQUEUEUP;
379 	}
380 # endif QUEUE
381 
382 	errno = 0;
383 	return (i);
384 }
385 /*
386 **  DOFORK -- do a fork, retrying a couple of times on failure.
387 **
388 **	This MUST be a macro, since after a vfork we are running
389 **	two processes on the same stack!!!
390 **
391 **	Parameters:
392 **		none.
393 **
394 **	Returns:
395 **		From a macro???  You've got to be kidding!
396 **
397 **	Side Effects:
398 **		Modifies the ==> LOCAL <== variable 'pid', leaving:
399 **			pid of child in parent, zero in child.
400 **			-1 on unrecoverable error.
401 **
402 **	Notes:
403 **		I'm awfully sorry this looks so awful.  That's
404 **		vfork for you.....
405 */
406 
407 # define NFORKTRIES	5
408 # ifdef VFORK
409 # define XFORK	vfork
410 # else VFORK
411 # define XFORK	fork
412 # endif VFORK
413 
414 # define DOFORK(fORKfN) \
415 {\
416 	register int i;\
417 \
418 	for (i = NFORKTRIES; i-- > 0; )\
419 	{\
420 		pid = fORKfN();\
421 		if (pid >= 0)\
422 			break;\
423 		sleep((unsigned) NFORKTRIES - i);\
424 	}\
425 }
426 /*
427 **  DOFORK -- simple fork interface to DOFORK.
428 **
429 **	Parameters:
430 **		none.
431 **
432 **	Returns:
433 **		pid of child in parent.
434 **		zero in child.
435 **		-1 on error.
436 **
437 **	Side Effects:
438 **		returns twice, once in parent and once in child.
439 */
440 
441 dofork()
442 {
443 	register int pid;
444 
445 	DOFORK(fork);
446 	return (pid);
447 }
448 /*
449 **  SENDOFF -- send off call to mailer & collect response.
450 **
451 **	Parameters:
452 **		m -- mailer descriptor.
453 **		pvp -- parameter vector to send to it.
454 **		editfcn -- function to pipe it through.
455 **		ctladdr -- an address pointer controlling the
456 **			user/groupid etc. of the mailer.
457 **
458 **	Returns:
459 **		exit status of mailer.
460 **
461 **	Side Effects:
462 **		none.
463 */
464 
465 sendoff(m, pvp, editfcn, ctladdr)
466 	struct mailer *m;
467 	char **pvp;
468 	int (*editfcn)();
469 	ADDRESS *ctladdr;
470 {
471 	auto FILE *mfile;
472 	auto FILE *rfile;
473 	register int i;
474 	extern putmessage();
475 	int pid;
476 
477 	/*
478 	**  Create connection to mailer.
479 	*/
480 
481 	pid = openmailer(m, pvp, ctladdr, FALSE, &mfile, &rfile);
482 	if (pid < 0)
483 		return (-1);
484 
485 	/*
486 	**  Format and send message.
487 	*/
488 
489 	(void) signal(SIGPIPE, SIG_IGN);
490 	if (editfcn == NULL)
491 		editfcn = putmessage;
492 
493 	(*editfcn)(mfile, m, FALSE);
494 	(void) fclose(mfile);
495 
496 	i = endmailer(pid, pvp[0]);
497 	giveresponse(i, TRUE, m);
498 	return (i);
499 }
500 /*
501 **  ENDMAILER -- Wait for mailer to terminate.
502 **
503 **	We should never get fatal errors (e.g., segmentation
504 **	violation), so we report those specially.  For other
505 **	errors, we choose a status message (into statmsg),
506 **	and if it represents an error, we print it.
507 **
508 **	Parameters:
509 **		pid -- pid of mailer.
510 **		name -- name of mailer (for error messages).
511 **
512 **	Returns:
513 **		exit code of mailer.
514 **
515 **	Side Effects:
516 **		none.
517 */
518 
519 endmailer(pid, name)
520 	int pid;
521 	char *name;
522 {
523 	register int i;
524 	auto int st;
525 
526 	while ((i = wait(&st)) > 0 && i != pid)
527 		continue;
528 	if (i < 0)
529 	{
530 		syserr("wait");
531 		return (-1);
532 	}
533 	if ((st & 0377) != 0)
534 	{
535 		syserr("%s: stat %o", name, st);
536 		ExitStat = EX_UNAVAILABLE;
537 		return (-1);
538 	}
539 	i = (st >> 8) & 0377;
540 	return (i);
541 }
542 /*
543 **  OPENMAILER -- open connection to mailer.
544 **
545 **	Parameters:
546 **		m -- mailer descriptor.
547 **		pvp -- parameter vector to pass to mailer.
548 **		ctladdr -- controlling address for user.
549 **		clever -- create a full duplex connection.
550 **		pmfile -- pointer to mfile (to mailer) connection.
551 **		prfile -- pointer to rfile (from mailer) connection.
552 **
553 **	Returns:
554 **		pid of mailer.
555 **		-1 on error.
556 **
557 **	Side Effects:
558 **		creates a mailer in a subprocess.
559 */
560 
561 openmailer(m, pvp, ctladdr, clever, pmfile, prfile)
562 	struct mailer *m;
563 	char **pvp;
564 	ADDRESS *ctladdr;
565 	bool clever;
566 	FILE **pmfile;
567 	FILE **prfile;
568 {
569 	int pid;
570 	int mpvect[2];
571 	int rpvect[2];
572 	FILE *mfile;
573 	FILE *rfile;
574 	extern FILE *fdopen();
575 
576 # ifdef DEBUG
577 	if (Debug)
578 	{
579 		printf("openmailer:\n");
580 		printav(pvp);
581 	}
582 # endif DEBUG
583 	errno = 0;
584 
585 	/* create a pipe to shove the mail through */
586 	if (pipe(mpvect) < 0)
587 	{
588 		syserr("pipe (to mailer)");
589 		return (-1);
590 	}
591 
592 # ifdef SMTP
593 	/* if this mailer speaks smtp, create a return pipe */
594 	if (clever && pipe(rpvect) < 0)
595 	{
596 		syserr("pipe (from mailer)");
597 		(void) close(mpvect[0]);
598 		(void) close(mpvect[1]);
599 		return (-1);
600 	}
601 # endif SMTP
602 
603 	DOFORK(XFORK);
604 	/* pid is set by DOFORK */
605 	if (pid < 0)
606 	{
607 		syserr("Cannot fork");
608 		(void) close(mpvect[0]);
609 		(void) close(mpvect[1]);
610 		if (clever)
611 		{
612 			(void) close(rpvect[0]);
613 			(void) close(rpvect[1]);
614 		}
615 		return (-1);
616 	}
617 	else if (pid == 0)
618 	{
619 		/* child -- set up input & exec mailer */
620 		/* make diagnostic output be standard output */
621 		(void) signal(SIGINT, SIG_IGN);
622 		(void) signal(SIGHUP, SIG_IGN);
623 		(void) signal(SIGTERM, SIG_DFL);
624 
625 		/* arrange to filter standard & diag output of command */
626 		if (clever)
627 		{
628 			(void) close(rpvect[0]);
629 			(void) close(1);
630 			(void) dup(rpvect[1]);
631 			(void) close(rpvect[1]);
632 		}
633 		else if (OutChannel != stdout)
634 		{
635 			(void) close(1);
636 			(void) dup(fileno(OutChannel));
637 		}
638 		(void) close(2);
639 		(void) dup(1);
640 
641 		/* arrange to get standard input */
642 		(void) close(mpvect[1]);
643 		(void) close(0);
644 		if (dup(mpvect[0]) < 0)
645 		{
646 			syserr("Cannot dup to zero!");
647 			_exit(EX_OSERR);
648 		}
649 		(void) close(mpvect[0]);
650 		if (!bitset(M_RESTR, m->m_flags))
651 		{
652 			if (ctladdr->q_uid == 0)
653 			{
654 				extern int DefUid, DefGid;
655 
656 				(void) setgid(DefGid);
657 				(void) setuid(DefUid);
658 			}
659 			else
660 			{
661 				(void) setgid(ctladdr->q_gid);
662 				(void) setuid(ctladdr->q_uid);
663 			}
664 		}
665 # ifndef VFORK
666 		/*
667 		**  We have to be careful with vfork - we can't mung up the
668 		**  memory but we don't want the mailer to inherit any extra
669 		**  open files.  Chances are the mailer won't
670 		**  care about an extra file, but then again you never know.
671 		**  Actually, we would like to close(fileno(pwf)), but it's
672 		**  declared static so we can't.  But if we fclose(pwf), which
673 		**  is what endpwent does, it closes it in the parent too and
674 		**  the next getpwnam will be slower.  If you have a weird
675 		**  mailer that chokes on the extra file you should do the
676 		**  endpwent().
677 		**
678 		**  Similar comments apply to log.  However, openlog is
679 		**  clever enough to set the FIOCLEX mode on the file,
680 		**  so it will be closed automatically on the exec.
681 		*/
682 
683 		endpwent();
684 # ifdef LOG
685 		closelog();
686 # endif LOG
687 # endif VFORK
688 		execv(m->m_mailer, pvp);
689 		/* syserr fails because log is closed */
690 		/* syserr("Cannot exec %s", m->m_mailer); */
691 		printf("Cannot exec '%s' errno=%d\n", m->m_mailer, errno);
692 		(void) fflush(stdout);
693 		_exit(EX_UNAVAILABLE);
694 	}
695 
696 	/*
697 	**  Set up return value.
698 	*/
699 
700 	(void) close(mpvect[0]);
701 	mfile = fdopen(mpvect[1], "w");
702 	if (clever)
703 	{
704 		(void) close(rpvect[1]);
705 		rfile = fdopen(rpvect[0], "r");
706 	}
707 
708 	*pmfile = mfile;
709 	*prfile = rfile;
710 
711 	return (pid);
712 }
713 /*
714 **  GIVERESPONSE -- Interpret an error response from a mailer
715 **
716 **	Parameters:
717 **		stat -- the status code from the mailer (high byte
718 **			only; core dumps must have been taken care of
719 **			already).
720 **		force -- if set, force an error message output, even
721 **			if the mailer seems to like to print its own
722 **			messages.
723 **		m -- the mailer descriptor for this mailer.
724 **
725 **	Returns:
726 **		none.
727 **
728 **	Side Effects:
729 **		Errors may be incremented.
730 **		ExitStat may be set.
731 */
732 
733 giveresponse(stat, force, m)
734 	int stat;
735 	int force;
736 	register struct mailer *m;
737 {
738 	register char *statmsg;
739 	extern char *SysExMsg[];
740 	register int i;
741 	extern int N_SysEx;
742 	char buf[30];
743 
744 	/*
745 	**  Compute status message from code.
746 	*/
747 
748 	i = stat - EX__BASE;
749 	if (i < 0 || i > N_SysEx)
750 		statmsg = NULL;
751 	else
752 		statmsg = SysExMsg[i];
753 	if (stat == 0)
754 	{
755 		if (bitset(M_LOCAL, m->m_flags))
756 			statmsg = "delivered";
757 		else
758 			statmsg = "queued";
759 		if (Verbose)
760 			message(Arpa_Info, statmsg);
761 	}
762 # ifdef QUEUE
763 	else if (stat == EX_TEMPFAIL)
764 	{
765 		if (Verbose)
766 			message(Arpa_Info, "transmission deferred");
767 	}
768 # endif QUEUE
769 	else
770 	{
771 		Errors++;
772 		if (statmsg == NULL && m->m_badstat != 0)
773 		{
774 			stat = m->m_badstat;
775 			i = stat - EX__BASE;
776 # ifdef DEBUG
777 			if (i < 0 || i >= N_SysEx)
778 				syserr("Bad m_badstat %d", stat);
779 			else
780 # endif DEBUG
781 			statmsg = SysExMsg[i];
782 		}
783 		if (statmsg == NULL)
784 			usrerr("unknown mailer response %d", stat);
785 		else if (force || !bitset(M_QUIET, m->m_flags) || Verbose)
786 			usrerr("%s", statmsg);
787 	}
788 
789 	/*
790 	**  Final cleanup.
791 	**	Log a record of the transaction.  Compute the new
792 	**	ExitStat -- if we already had an error, stick with
793 	**	that.
794 	*/
795 
796 	if (statmsg == NULL)
797 	{
798 		(void) sprintf(buf, "error %d", stat);
799 		statmsg = buf;
800 	}
801 
802 # ifdef LOG
803 	syslog(LOG_INFO, "%s->%s: %ld: %s", From.q_paddr, To, MsgSize, statmsg);
804 # endif LOG
805 # ifdef QUEUE
806 	if (stat != EX_TEMPFAIL)
807 # endif QUEUE
808 		setstat(stat);
809 }
810 /*
811 **  PUTMESSAGE -- output a message to the final mailer.
812 **
813 **	This routine takes care of recreating the header from the
814 **	in-core copy, etc.
815 **
816 **	Parameters:
817 **		fp -- file to output onto.
818 **		m -- a mailer descriptor.
819 **		xdot -- if set, hide lines beginning with dot.
820 **
821 **	Returns:
822 **		none.
823 **
824 **	Side Effects:
825 **		The message is written onto fp.
826 */
827 
828 putmessage(fp, m, xdot)
829 	FILE *fp;
830 	struct mailer *m;
831 	bool xdot;
832 {
833 	char buf[BUFSIZ];
834 	register HDR *h;
835 	extern char *arpadate();
836 	bool anyheader = FALSE;
837 	extern char *capitalize();
838 	extern char *hvalue();
839 	extern bool samefrom();
840 	char *of_line;
841 
842 	/*
843 	**  Output "From" line unless supressed
844 	**
845 	**  >>>>>>>>>>	One of the ugliest hacks seen by human eyes is
846 	**  >>>>>>>>>>	contained herein: UUCP wants those stupid
847 	**  >>>>>>>>>>	"remote from <host>" lines.  Why oh why does a
848 	**  >> NOTE >>	well-meaning programmer such as myself have to
849 	**  >>>>>>>>>>	deal with this kind of antique garbage????
850 	**  >>>>>>>>>>  This even depends on the local UUCP host name
851 	**  >>>>>>>>>>  being in the $U macro!!!!
852 	*/
853 
854 	if (!bitset(M_NHDR, m->m_flags))
855 	{
856 # ifdef UGLYUUCP
857 		char *p = rindex(m->m_mailer, '/');
858 
859 		if (bitset(M_UGLYUUCP, m->m_flags))
860 			(void) expand("From $f  $d remote from $U", buf,
861 					&buf[sizeof buf - 1]);
862 		else
863 # endif UGLYUUCP
864 			(void) expand("$l", buf, &buf[sizeof buf - 1]);
865 		fprintf(fp, "%s\n", buf);
866 	}
867 
868 	/*
869 	**  Output all header lines
870 	*/
871 
872 	of_line = hvalue("original-from");
873 	for (h = Header; h != NULL; h = h->h_link)
874 	{
875 		register char *p;
876 		char *origfrom = OrigFrom;
877 		bool nooutput;
878 
879 		nooutput = FALSE;
880 		if (bitset(H_CHECK|H_ACHECK, h->h_flags) && !bitset(h->h_mflags, m->m_flags))
881 		{
882 			p = ")><(";		/* can't happen (I hope) */
883 			nooutput = TRUE;
884 		}
885 
886 		/* use From: line from message if generated is the same */
887 		if (strcmp(h->h_field, "from") == 0 && origfrom != NULL &&
888 		    strcmp(m->m_from, "$f") == 0 && of_line == NULL)
889 		{
890 			p = origfrom;
891 			origfrom = NULL;
892 		}
893 		else if (bitset(H_DEFAULT, h->h_flags))
894 		{
895 			(void) expand(h->h_value, buf, &buf[sizeof buf]);
896 			p = buf;
897 		}
898 		else
899 			p = h->h_value;
900 		if (p == NULL || *p == '\0')
901 			continue;
902 
903 		/* hack, hack -- output Original-From field if different */
904 		if (strcmp(h->h_field, "from") == 0 && origfrom != NULL)
905 		{
906 			/* output new Original-From line if needed */
907 			if (of_line == NULL && !samefrom(p, origfrom))
908 			{
909 				fprintf(fp, "Original-From: %s\n", origfrom);
910 				anyheader = TRUE;
911 			}
912 			if (of_line != NULL && !nooutput && samefrom(p, of_line))
913 			{
914 				/* delete Original-From: line if redundant */
915 				p = of_line;
916 				of_line = NULL;
917 			}
918 		}
919 		else if (strcmp(h->h_field, "original-from") == 0 && of_line == NULL)
920 			nooutput = TRUE;
921 
922 		/* finally, output the header line */
923 		if (!nooutput)
924 		{
925 			fprintf(fp, "%s: %s\n", capitalize(h->h_field), p);
926 			h->h_flags |= H_USED;
927 			anyheader = TRUE;
928 		}
929 	}
930 	if (anyheader)
931 		fprintf(fp, "\n");
932 
933 	/*
934 	**  Output the body of the message
935 	*/
936 
937 	if (TempFile != NULL)
938 	{
939 		rewind(TempFile);
940 		while (!ferror(fp) && fgets(buf, sizeof buf, TempFile) != NULL)
941 			fprintf(fp, "%s%s", xdot && buf[0] == '.' ? "." : "", buf);
942 
943 		if (ferror(TempFile))
944 		{
945 			syserr("putmessage: read error");
946 			setstat(EX_IOERR);
947 		}
948 	}
949 
950 	(void) fflush(fp);
951 	if (ferror(fp) && errno != EPIPE)
952 	{
953 		syserr("putmessage: write error");
954 		setstat(EX_IOERR);
955 	}
956 	errno = 0;
957 }
958 /*
959 **  SAMEFROM -- tell if two text addresses represent the same from address.
960 **
961 **	Parameters:
962 **		ifrom -- internally generated form of from address.
963 **		efrom -- external form of from address.
964 **
965 **	Returns:
966 **		TRUE -- if they convey the same info.
967 **		FALSE -- if any information has been lost.
968 **
969 **	Side Effects:
970 **		none.
971 */
972 
973 bool
974 samefrom(ifrom, efrom)
975 	char *ifrom;
976 	char *efrom;
977 {
978 	register char *p;
979 	char buf[MAXNAME + 4];
980 
981 # ifdef DEBUG
982 	if (Debug > 7)
983 		printf("samefrom(%s,%s)-->", ifrom, efrom);
984 # endif DEBUG
985 	if (strcmp(ifrom, efrom) == 0)
986 		goto success;
987 	p = index(ifrom, '@');
988 	if (p == NULL)
989 		goto failure;
990 	*p = '\0';
991 	strcpy(buf, ifrom);
992 	strcat(buf, " at ");
993 	*p++ = '@';
994 	strcat(buf, p);
995 	if (strcmp(buf, efrom) == 0)
996 		goto success;
997 
998   failure:
999 # ifdef DEBUG
1000 	if (Debug > 7)
1001 		printf("FALSE\n");
1002 # endif DEBUG
1003 	return (FALSE);
1004 
1005   success:
1006 # ifdef DEBUG
1007 	if (Debug > 7)
1008 		printf("TRUE\n");
1009 # endif DEBUG
1010 	return (TRUE);
1011 }
1012 /*
1013 **  MAILFILE -- Send a message to a file.
1014 **
1015 **	If the file has the setuid/setgid bits set, but NO execute
1016 **	bits, sendmail will try to become the owner of that file
1017 **	rather than the real user.  Obviously, this only works if
1018 **	sendmail runs as root.
1019 **
1020 **	Parameters:
1021 **		filename -- the name of the file to send to.
1022 **		ctladdr -- the controlling address header -- includes
1023 **			the userid/groupid to be when sending.
1024 **
1025 **	Returns:
1026 **		The exit code associated with the operation.
1027 **
1028 **	Side Effects:
1029 **		none.
1030 */
1031 
1032 mailfile(filename, ctladdr)
1033 	char *filename;
1034 	ADDRESS *ctladdr;
1035 {
1036 	register FILE *f;
1037 	register int pid;
1038 
1039 	/*
1040 	**  Fork so we can change permissions here.
1041 	**	Note that we MUST use fork, not vfork, because of
1042 	**	the complications of calling subroutines, etc.
1043 	*/
1044 
1045 	DOFORK(fork);
1046 
1047 	if (pid < 0)
1048 		return (EX_OSERR);
1049 	else if (pid == 0)
1050 	{
1051 		/* child -- actually write to file */
1052 		struct stat stb;
1053 		extern int DefUid, DefGid;
1054 
1055 		(void) signal(SIGINT, SIG_DFL);
1056 		(void) signal(SIGHUP, SIG_DFL);
1057 		(void) signal(SIGTERM, SIG_DFL);
1058 		umask(OldUmask);
1059 		if (stat(filename, &stb) < 0)
1060 			stb.st_mode = 0666;
1061 		if (bitset(0111, stb.st_mode))
1062 			exit(EX_CANTCREAT);
1063 		if (ctladdr == NULL)
1064 			ctladdr = &From;
1065 		if (!bitset(S_ISGID, stb.st_mode) || setgid(stb.st_gid) < 0)
1066 		{
1067 			if (ctladdr->q_uid == 0)
1068 				(void) setgid(DefGid);
1069 			else
1070 				(void) setgid(ctladdr->q_gid);
1071 		}
1072 		if (!bitset(S_ISUID, stb.st_mode) || setuid(stb.st_uid) < 0)
1073 		{
1074 			if (ctladdr->q_uid == 0)
1075 				(void) setuid(DefUid);
1076 			else
1077 				(void) setuid(ctladdr->q_uid);
1078 		}
1079 		f = fopen(filename, "a");
1080 		if (f == NULL)
1081 			exit(EX_CANTCREAT);
1082 
1083 		putmessage(f, Mailer[1], FALSE);
1084 		fputs("\n", f);
1085 		(void) fclose(f);
1086 		(void) fflush(stdout);
1087 
1088 		/* reset ISUID & ISGID bits */
1089 		(void) chmod(filename, (int) stb.st_mode);
1090 		exit(EX_OK);
1091 		/*NOTREACHED*/
1092 	}
1093 	else
1094 	{
1095 		/* parent -- wait for exit status */
1096 		register int i;
1097 		auto int stat;
1098 
1099 		while ((i = wait(&stat)) != pid)
1100 		{
1101 			if (i < 0)
1102 			{
1103 				stat = EX_OSERR << 8;
1104 				break;
1105 			}
1106 		}
1107 		if ((stat & 0377) != 0)
1108 			stat = EX_UNAVAILABLE << 8;
1109 		return ((stat >> 8) & 0377);
1110 	}
1111 }
1112 /*
1113 **  SENDALL -- actually send all the messages.
1114 **
1115 **	Parameters:
1116 **		verifyonly -- if set, only give verification messages.
1117 **
1118 **	Returns:
1119 **		none.
1120 **
1121 **	Side Effects:
1122 **		Scans the send lists and sends everything it finds.
1123 */
1124 
1125 sendall(verifyonly)
1126 	bool verifyonly;
1127 {
1128 	register ADDRESS *q;
1129 	typedef int (*fnptr)();
1130 
1131 # ifdef DEBUG
1132 	if (Debug > 1)
1133 	{
1134 		printf("\nSendQueue:\n");
1135 		printaddr(SendQueue, TRUE);
1136 	}
1137 # endif DEBUG
1138 
1139 	for (q = SendQueue; q != NULL; q = q->q_next)
1140 	{
1141 		if (verifyonly)
1142 		{
1143 			To = q->q_paddr;
1144 			if (!bitset(QDONTSEND|QBADADDR, q->q_flags))
1145 			{
1146 				if (bitset(M_LOCAL, q->q_mailer->m_flags))
1147 					message(Arpa_Info, "deliverable");
1148 				else
1149 					message(Arpa_Info, "queueable");
1150 			}
1151 		}
1152 		else
1153 			(void) deliver(q, (fnptr) NULL);
1154 	}
1155 }
1156