xref: /netbsd-src/libexec/ftpd/conf.c (revision 23c8222edbfb0f0932d88a8351d3a0cf817dfb9e)
1 /*	$NetBSD: conf.c,v 1.52 2004/08/09 12:56:47 lukem Exp $	*/
2 
3 /*-
4  * Copyright (c) 1997-2004 The NetBSD Foundation, Inc.
5  * All rights reserved.
6  *
7  * This code is derived from software contributed to The NetBSD Foundation
8  * by Simon Burge and Luke Mewburn.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  * 3. All advertising materials mentioning features or use of this software
19  *    must display the following acknowledgement:
20  *        This product includes software developed by the NetBSD
21  *        Foundation, Inc. and its contributors.
22  * 4. Neither the name of The NetBSD Foundation nor the names of its
23  *    contributors may be used to endorse or promote products derived
24  *    from this software without specific prior written permission.
25  *
26  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
27  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
28  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
29  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
30  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
31  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
32  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
33  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
34  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
35  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
36  * POSSIBILITY OF SUCH DAMAGE.
37  */
38 
39 #include <sys/cdefs.h>
40 #ifndef lint
41 __RCSID("$NetBSD: conf.c,v 1.52 2004/08/09 12:56:47 lukem Exp $");
42 #endif /* not lint */
43 
44 #include <sys/types.h>
45 #include <sys/param.h>
46 #include <sys/socket.h>
47 #include <sys/stat.h>
48 
49 #include <ctype.h>
50 #include <errno.h>
51 #include <fcntl.h>
52 #include <glob.h>
53 #include <netdb.h>
54 #include <signal.h>
55 #include <stdio.h>
56 #include <stdlib.h>
57 #include <string.h>
58 #include <stringlist.h>
59 #include <syslog.h>
60 #include <time.h>
61 #include <unistd.h>
62 #include <util.h>
63 
64 #ifdef KERBEROS5
65 #include <krb5/krb5.h>
66 #endif
67 
68 #include "extern.h"
69 #include "pathnames.h"
70 
71 static char *strend(const char *, char *);
72 static int filetypematch(char *, int);
73 
74 
75 		/* class defaults */
76 #define DEFAULT_LIMIT		-1		/* unlimited connections */
77 #define DEFAULT_MAXFILESIZE	-1		/* unlimited file size */
78 #define DEFAULT_MAXTIMEOUT	7200		/* 2 hours */
79 #define DEFAULT_TIMEOUT		900		/* 15 minutes */
80 #define DEFAULT_UMASK		027		/* 15 minutes */
81 
82 /*
83  * Initialise curclass to an `empty' state
84  */
85 void
86 init_curclass(void)
87 {
88 	struct ftpconv	*conv, *cnext;
89 
90 	for (conv = curclass.conversions; conv != NULL; conv = cnext) {
91 		REASSIGN(conv->suffix, NULL);
92 		REASSIGN(conv->types, NULL);
93 		REASSIGN(conv->disable, NULL);
94 		REASSIGN(conv->command, NULL);
95 		cnext = conv->next;
96 		free(conv);
97 	}
98 
99 	memset((char *)&curclass.advertise, 0, sizeof(curclass.advertise));
100 	curclass.advertise.su_len = 0;		/* `not used' */
101 	REASSIGN(curclass.chroot, NULL);
102 	REASSIGN(curclass.classname, NULL);
103 	curclass.conversions =	NULL;
104 	REASSIGN(curclass.display, NULL);
105 	REASSIGN(curclass.homedir, NULL);
106 	curclass.limit =	DEFAULT_LIMIT;
107 	REASSIGN(curclass.limitfile, NULL);
108 	curclass.maxfilesize =	DEFAULT_MAXFILESIZE;
109 	curclass.maxrateget =	0;
110 	curclass.maxrateput =	0;
111 	curclass.maxtimeout =	DEFAULT_MAXTIMEOUT;
112 	REASSIGN(curclass.motd, xstrdup(_PATH_FTPLOGINMESG));
113 	REASSIGN(curclass.notify, NULL);
114 	curclass.portmin =	0;
115 	curclass.portmax =	0;
116 	curclass.rateget =	0;
117 	curclass.rateput =	0;
118 	curclass.timeout =	DEFAULT_TIMEOUT;
119 	    /* curclass.type is set elsewhere */
120 	curclass.umask =	DEFAULT_UMASK;
121 	curclass.mmapsize =	0;
122 	curclass.readsize =	0;
123 	curclass.writesize =	0;
124 	curclass.sendbufsize =	0;
125 	curclass.sendlowat =	0;
126 
127 	CURCLASS_FLAGS_SET(checkportcmd);
128 	CURCLASS_FLAGS_CLR(denyquick);
129 	CURCLASS_FLAGS_SET(modify);
130 	CURCLASS_FLAGS_SET(passive);
131 	CURCLASS_FLAGS_CLR(private);
132 	CURCLASS_FLAGS_CLR(sanenames);
133 	CURCLASS_FLAGS_SET(upload);
134 }
135 
136 /*
137  * Parse the configuration file, looking for the named class, and
138  * define curclass to contain the appropriate settings.
139  */
140 void
141 parse_conf(const char *findclass)
142 {
143 	FILE		*f;
144 	char		*buf, *p;
145 	size_t		 len;
146 	LLT		 llval;
147 	int		 none, match;
148 	char		*endp, errbuf[100];
149 	char		*class, *word, *arg, *template;
150 	const char	*infile;
151 	size_t		 line;
152 	struct ftpconv	*conv, *cnext;
153 
154 	init_curclass();
155 	REASSIGN(curclass.classname, xstrdup(findclass));
156 			/* set more guest defaults */
157 	if (strcasecmp(findclass, "guest") == 0) {
158 		CURCLASS_FLAGS_CLR(modify);
159 		curclass.umask = 0707;
160 	}
161 
162 	infile = conffilename(_PATH_FTPDCONF);
163 	if ((f = fopen(infile, "r")) == NULL)
164 		return;
165 
166 	line = 0;
167 	template = NULL;
168 	for (;
169 	    (buf = fparseln(f, &len, &line, NULL, FPARSELN_UNESCCOMM |
170 			    FPARSELN_UNESCCONT | FPARSELN_UNESCESC)) != NULL;
171 	    free(buf)) {
172 		none = match = 0;
173 		p = buf;
174 		if (len < 1)
175 			continue;
176 		if (p[len - 1] == '\n')
177 			p[--len] = '\0';
178 		if (EMPTYSTR(p))
179 			continue;
180 
181 		NEXTWORD(p, word);
182 		NEXTWORD(p, class);
183 		NEXTWORD(p, arg);
184 		if (EMPTYSTR(word) || EMPTYSTR(class))
185 			continue;
186 		if (strcasecmp(class, "none") == 0)
187 			none = 1;
188 		if (! (strcasecmp(class, findclass) == 0 ||
189 		       (template != NULL && strcasecmp(class, template) == 0) ||
190 		       none ||
191 		       strcasecmp(class, "all") == 0) )
192 			continue;
193 
194 #define CONF_FLAG(Field)						\
195 	do {								\
196 		if (none ||						\
197 		    (!EMPTYSTR(arg) && strcasecmp(arg, "off") == 0))	\
198 			CURCLASS_FLAGS_CLR(Field);			\
199 		else							\
200 			CURCLASS_FLAGS_SET(Field);			\
201 	} while (0)
202 
203 #define CONF_STRING(Field)						\
204 	do {								\
205 		if (none || EMPTYSTR(arg))				\
206 			arg = NULL;					\
207 		else							\
208 			arg = xstrdup(arg);				\
209 		REASSIGN(curclass.Field, arg);				\
210 	} while (0)
211 
212 #define CONF_LL(Field,Arg,Min,Max)					\
213 	do {								\
214 		if (none || EMPTYSTR(Arg))				\
215 			goto nextline;					\
216 		llval = strsuftollx(#Field, Arg, Min, Max,		\
217 		    errbuf, sizeof(errbuf));				\
218 		if (errbuf[0]) {					\
219 			syslog(LOG_WARNING, "%s line %d: %s",		\
220 			    infile, (int)line, errbuf);			\
221 			goto nextline;					\
222 		}							\
223 		curclass.Field = llval;					\
224 	} while(0)
225 
226 		if (0)  {
227 			/* no-op */
228 
229 		} else if ((strcasecmp(word, "advertise") == 0)
230 			|| (strcasecmp(word, "advertize") == 0)) {
231 			struct addrinfo	hints, *res;
232 			int		error;
233 
234 			memset((char *)&curclass.advertise, 0,
235 			    sizeof(curclass.advertise));
236 			curclass.advertise.su_len = 0;
237 			if (none || EMPTYSTR(arg))
238 				continue;
239 			res = NULL;
240 			memset(&hints, 0, sizeof(hints));
241 					/*
242 					 * only get addresses of the family
243 					 * that we're listening on
244 					 */
245 			hints.ai_family = ctrl_addr.su_family;
246 			hints.ai_socktype = SOCK_STREAM;
247 			error = getaddrinfo(arg, "0", &hints, &res);
248 			if (error) {
249 				syslog(LOG_WARNING, "%s line %d: %s",
250 				    infile, (int)line, gai_strerror(error));
251  advertiseparsefail:
252 				if (res)
253 					freeaddrinfo(res);
254 				continue;
255 			}
256 			if (res->ai_next) {
257 				syslog(LOG_WARNING,
258     "%s line %d: multiple addresses returned for `%s'; please be more specific",
259 				    infile, (int)line, arg);
260 				goto advertiseparsefail;
261 			}
262 			if (sizeof(curclass.advertise) < res->ai_addrlen || (
263 #ifdef INET6
264 			    res->ai_family != AF_INET6 &&
265 #endif
266 			    res->ai_family != AF_INET)) {
267 				syslog(LOG_WARNING,
268     "%s line %d: unsupported protocol %d for `%s'",
269 				    infile, (int)line, res->ai_family, arg);
270 				goto advertiseparsefail;
271 			}
272 			memcpy(&curclass.advertise, res->ai_addr,
273 			    res->ai_addrlen);
274 			curclass.advertise.su_len = res->ai_addrlen;
275 			freeaddrinfo(res);
276 
277 		} else if (strcasecmp(word, "checkportcmd") == 0) {
278 			CONF_FLAG(checkportcmd);
279 
280 		} else if (strcasecmp(word, "chroot") == 0) {
281 			CONF_STRING(chroot);
282 
283 		} else if (strcasecmp(word, "classtype") == 0) {
284 			if (!none && !EMPTYSTR(arg)) {
285 				if (strcasecmp(arg, "GUEST") == 0)
286 					curclass.type = CLASS_GUEST;
287 				else if (strcasecmp(arg, "CHROOT") == 0)
288 					curclass.type = CLASS_CHROOT;
289 				else if (strcasecmp(arg, "REAL") == 0)
290 					curclass.type = CLASS_REAL;
291 				else {
292 					syslog(LOG_WARNING,
293 				    "%s line %d: unknown class type `%s'",
294 					    infile, (int)line, arg);
295 					continue;
296 				}
297 			}
298 
299 		} else if (strcasecmp(word, "conversion") == 0) {
300 			char *suffix, *types, *disable, *convcmd;
301 
302 			if (EMPTYSTR(arg)) {
303 				syslog(LOG_WARNING,
304 				    "%s line %d: %s requires a suffix",
305 				    infile, (int)line, word);
306 				continue;	/* need a suffix */
307 			}
308 			NEXTWORD(p, types);
309 			NEXTWORD(p, disable);
310 			convcmd = p;
311 			if (convcmd)
312 				convcmd += strspn(convcmd, " \t");
313 			suffix = xstrdup(arg);
314 			if (none || EMPTYSTR(types) ||
315 			    EMPTYSTR(disable) || EMPTYSTR(convcmd)) {
316 				types = NULL;
317 				disable = NULL;
318 				convcmd = NULL;
319 			} else {
320 				types = xstrdup(types);
321 				disable = xstrdup(disable);
322 				convcmd = xstrdup(convcmd);
323 			}
324 			for (conv = curclass.conversions; conv != NULL;
325 			    conv = conv->next) {
326 				if (strcmp(conv->suffix, suffix) == 0)
327 					break;
328 			}
329 			if (conv == NULL) {
330 				conv = (struct ftpconv *)
331 				    calloc(1, sizeof(struct ftpconv));
332 				if (conv == NULL) {
333 					syslog(LOG_WARNING, "can't malloc");
334 					continue;
335 				}
336 				conv->next = NULL;
337 				for (cnext = curclass.conversions;
338 				    cnext != NULL; cnext = cnext->next)
339 					if (cnext->next == NULL)
340 						break;
341 				if (cnext != NULL)
342 					cnext->next = conv;
343 				else
344 					curclass.conversions = conv;
345 			}
346 			REASSIGN(conv->suffix, suffix);
347 			REASSIGN(conv->types, types);
348 			REASSIGN(conv->disable, disable);
349 			REASSIGN(conv->command, convcmd);
350 
351 		} else if (strcasecmp(word, "denyquick") == 0) {
352 			CONF_FLAG(denyquick);
353 
354 		} else if (strcasecmp(word, "display") == 0) {
355 			CONF_STRING(display);
356 
357 		} else if (strcasecmp(word, "homedir") == 0) {
358 			CONF_STRING(homedir);
359 
360 		} else if (strcasecmp(word, "limit") == 0) {
361 			curclass.limit = DEFAULT_LIMIT;
362 			REASSIGN(curclass.limitfile, NULL);
363 			CONF_LL(limit, arg, -1, LLTMAX);
364 			REASSIGN(curclass.limitfile,
365 			    EMPTYSTR(p) ? NULL : xstrdup(p));
366 
367 		} else if (strcasecmp(word, "maxfilesize") == 0) {
368 			curclass.maxfilesize = DEFAULT_MAXFILESIZE;
369 			CONF_LL(maxfilesize, arg, -1, LLTMAX);
370 
371 		} else if (strcasecmp(word, "maxtimeout") == 0) {
372 			curclass.maxtimeout = DEFAULT_MAXTIMEOUT;
373 			CONF_LL(maxtimeout, arg,
374 			    MIN(30, curclass.timeout), LLTMAX);
375 
376 		} else if (strcasecmp(word, "mmapsize") == 0) {
377 			curclass.mmapsize = 0;
378 			CONF_LL(mmapsize, arg, 0, LLTMAX);
379 
380 		} else if (strcasecmp(word, "readsize") == 0) {
381 			curclass.readsize = 0;
382 			CONF_LL(readsize, arg, 0, LLTMAX);
383 
384 		} else if (strcasecmp(word, "writesize") == 0) {
385 			curclass.writesize = 0;
386 			CONF_LL(writesize, arg, 0, LLTMAX);
387 
388 		} else if (strcasecmp(word, "sendbufsize") == 0) {
389 			curclass.sendbufsize = 0;
390 			CONF_LL(sendbufsize, arg, 0, LLTMAX);
391 
392 		} else if (strcasecmp(word, "sendlowat") == 0) {
393 			curclass.sendlowat = 0;
394 			CONF_LL(sendlowat, arg, 0, LLTMAX);
395 
396 		} else if (strcasecmp(word, "modify") == 0) {
397 			CONF_FLAG(modify);
398 
399 		} else if (strcasecmp(word, "motd") == 0) {
400 			CONF_STRING(motd);
401 
402 		} else if (strcasecmp(word, "notify") == 0) {
403 			CONF_STRING(notify);
404 
405 		} else if (strcasecmp(word, "passive") == 0) {
406 			CONF_FLAG(passive);
407 
408 		} else if (strcasecmp(word, "portrange") == 0) {
409 			long minport, maxport;
410 
411 			curclass.portmin = 0;
412 			curclass.portmax = 0;
413 			if (none || EMPTYSTR(arg))
414 				continue;
415 			if (EMPTYSTR(p)) {
416 				syslog(LOG_WARNING,
417 				   "%s line %d: missing maxport argument",
418 				   infile, (int)line);
419 				continue;
420 			}
421 			minport = strsuftollx("minport", arg, IPPORT_RESERVED,
422 			    IPPORT_ANONMAX, errbuf, sizeof(errbuf));
423 			if (errbuf[0]) {
424 				syslog(LOG_WARNING, "%s line %d: %s",
425 				    infile, (int)line, errbuf);
426 				continue;
427 			}
428 			maxport = strsuftollx("maxport", p, IPPORT_RESERVED,
429 			    IPPORT_ANONMAX, errbuf, sizeof(errbuf));
430 			if (errbuf[0]) {
431 				syslog(LOG_WARNING, "%s line %d: %s",
432 				    infile, (int)line, errbuf);
433 				continue;
434 			}
435 			if (minport >= maxport) {
436 				syslog(LOG_WARNING,
437 				    "%s line %d: minport %ld >= maxport %ld",
438 				    infile, (int)line, minport, maxport);
439 				continue;
440 			}
441 			curclass.portmin = (int)minport;
442 			curclass.portmax = (int)maxport;
443 
444 		} else if (strcasecmp(word, "private") == 0) {
445 			CONF_FLAG(private);
446 
447 		} else if (strcasecmp(word, "rateget") == 0) {
448 			curclass.maxrateget = curclass.rateget = 0;
449 			CONF_LL(rateget, arg, 0, LLTMAX);
450 			curclass.maxrateget = curclass.rateget;
451 
452 		} else if (strcasecmp(word, "rateput") == 0) {
453 			curclass.maxrateput = curclass.rateput = 0;
454 			CONF_LL(rateput, arg, 0, LLTMAX);
455 			curclass.maxrateput = curclass.rateput;
456 
457 		} else if (strcasecmp(word, "sanenames") == 0) {
458 			CONF_FLAG(sanenames);
459 
460 		} else if (strcasecmp(word, "timeout") == 0) {
461 			curclass.timeout = DEFAULT_TIMEOUT;
462 			CONF_LL(timeout, arg, 30, curclass.maxtimeout);
463 
464 		} else if (strcasecmp(word, "template") == 0) {
465 			if (none)
466 				continue;
467 			REASSIGN(template, EMPTYSTR(arg) ? NULL : xstrdup(arg));
468 
469 		} else if (strcasecmp(word, "umask") == 0) {
470 			u_long fumask;
471 
472 			curclass.umask = DEFAULT_UMASK;
473 			if (none || EMPTYSTR(arg))
474 				continue;
475 			errno = 0;
476 			endp = NULL;
477 			fumask = strtoul(arg, &endp, 8);
478 			if (errno || *arg == '\0' || *endp != '\0' ||
479 			    fumask > 0777) {
480 				syslog(LOG_WARNING,
481 				    "%s line %d: invalid umask %s",
482 				    infile, (int)line, arg);
483 				continue;
484 			}
485 			curclass.umask = (mode_t)fumask;
486 
487 		} else if (strcasecmp(word, "upload") == 0) {
488 			CONF_FLAG(upload);
489 			if (! CURCLASS_FLAGS_ISSET(upload))
490 				CURCLASS_FLAGS_CLR(modify);
491 
492 		} else {
493 			syslog(LOG_WARNING,
494 			    "%s line %d: unknown directive '%s'",
495 			    infile, (int)line, word);
496 			continue;
497 		}
498  nextline:
499 		;
500 	}
501 	REASSIGN(template, NULL);
502 	fclose(f);
503 }
504 
505 /*
506  * Show file listed in curclass.display first time in, and list all the
507  * files named in curclass.notify in the current directory.
508  * Send back responses with the prefix `code' + "-".
509  * If code == -1, flush the internal cache of directory names and return.
510  */
511 void
512 show_chdir_messages(int code)
513 {
514 	static StringList *slist = NULL;
515 
516 	struct stat st;
517 	struct tm *t;
518 	glob_t	 gl;
519 	time_t	 now, then;
520 	int	 age;
521 	char	 curwd[MAXPATHLEN];
522 	char	*cp, **rlist;
523 
524 	if (code == -1) {
525 		if (slist != NULL)
526 			sl_free(slist, 1);
527 		slist = NULL;
528 		return;
529 	}
530 
531 	if (quietmessages)
532 		return;
533 
534 		/* Setup list for directory cache */
535 	if (slist == NULL)
536 		slist = sl_init();
537 	if (slist == NULL) {
538 		syslog(LOG_WARNING, "can't allocate memory for stringlist");
539 		return;
540 	}
541 
542 		/* Check if this directory has already been visited */
543 	if (getcwd(curwd, sizeof(curwd) - 1) == NULL) {
544 		syslog(LOG_WARNING, "can't getcwd: %s", strerror(errno));
545 		return;
546 	}
547 	if (sl_find(slist, curwd) != NULL)
548 		return;
549 
550 	cp = xstrdup(curwd);
551 	if (sl_add(slist, cp) == -1)
552 		syslog(LOG_WARNING, "can't add `%s' to stringlist", cp);
553 
554 		/* First check for a display file */
555 	(void)display_file(curclass.display, code);
556 
557 		/* Now see if there are any notify files */
558 	if (EMPTYSTR(curclass.notify))
559 		return;
560 
561 	memset(&gl, 0, sizeof(gl));
562 	if (glob(curclass.notify, GLOB_BRACE|GLOB_LIMIT, NULL, &gl) != 0
563 	    || gl.gl_matchc == 0) {
564 		globfree(&gl);
565 		return;
566 	}
567 	time(&now);
568 	for (rlist = gl.gl_pathv; *rlist != NULL; rlist++) {
569 		if (stat(*rlist, &st) != 0)
570 			continue;
571 		if (!S_ISREG(st.st_mode))
572 			continue;
573 		then = st.st_mtime;
574 		if (code != 0) {
575 			reply(-code, "%s", "");
576 			code = 0;
577 		}
578 		reply(-code, "Please read the file %s", *rlist);
579 		t = localtime(&now);
580 		age = 365 * t->tm_year + t->tm_yday;
581 		t = localtime(&then);
582 		age -= 365 * t->tm_year + t->tm_yday;
583 		reply(-code, "  it was last modified on %.24s - %d day%s ago",
584 		    ctime(&then), age, PLURAL(age));
585 	}
586 	globfree(&gl);
587 }
588 
589 int
590 display_file(const char *file, int code)
591 {
592 	FILE   *f;
593 	char   *buf, *p;
594 	char	curwd[MAXPATHLEN];
595 	size_t	len;
596 	off_t	lastnum;
597 	time_t	now;
598 
599 	lastnum = 0;
600 	if (quietmessages)
601 		return (0);
602 
603 	if (EMPTYSTR(file))
604 		return(0);
605 	if ((f = fopen(file, "r")) == NULL)
606 		return (0);
607 	reply(-code, "%s", "");
608 
609 	for (;
610 	    (buf = fparseln(f, &len, NULL, "\0\0\0", 0)) != NULL; free(buf)) {
611 		if (len > 0)
612 			if (buf[len - 1] == '\n')
613 				buf[--len] = '\0';
614 		cprintf(stdout, "    ");
615 
616 		for (p = buf; *p; p++) {
617 			if (*p == '%') {
618 				p++;
619 				switch (*p) {
620 
621 				case 'c':
622 					cprintf(stdout, "%s",
623 					    curclass.classname ?
624 					    curclass.classname : "<unknown>");
625 					break;
626 
627 				case 'C':
628 					if (getcwd(curwd, sizeof(curwd)-1)
629 					    == NULL){
630 						syslog(LOG_WARNING,
631 						    "can't getcwd: %s",
632 						    strerror(errno));
633 						continue;
634 					}
635 					cprintf(stdout, "%s", curwd);
636 					break;
637 
638 				case 'E':
639 					if (! EMPTYSTR(emailaddr))
640 						cprintf(stdout, "%s",
641 						    emailaddr);
642 					break;
643 
644 				case 'L':
645 					cprintf(stdout, "%s", hostname);
646 					break;
647 
648 				case 'M':
649 					if (curclass.limit == -1) {
650 						cprintf(stdout, "unlimited");
651 						lastnum = 0;
652 					} else {
653 						cprintf(stdout, LLF,
654 						    (LLT)curclass.limit);
655 						lastnum = curclass.limit;
656 					}
657 					break;
658 
659 				case 'N':
660 					cprintf(stdout, "%d", connections);
661 					lastnum = connections;
662 					break;
663 
664 				case 'R':
665 					cprintf(stdout, "%s", remotehost);
666 					break;
667 
668 				case 's':
669 					if (lastnum != 1)
670 						cprintf(stdout, "s");
671 					break;
672 
673 				case 'S':
674 					if (lastnum != 1)
675 						cprintf(stdout, "S");
676 					break;
677 
678 				case 'T':
679 					now = time(NULL);
680 					cprintf(stdout, "%.24s", ctime(&now));
681 					break;
682 
683 				case 'U':
684 					cprintf(stdout, "%s",
685 					    pw ? pw->pw_name : "<unknown>");
686 					break;
687 
688 				case '%':
689 					CPUTC('%', stdout);
690 					break;
691 
692 				}
693 			} else
694 				CPUTC(*p, stdout);
695 		}
696 		cprintf(stdout, "\r\n");
697 	}
698 
699 	(void)fflush(stdout);
700 	(void)fclose(f);
701 	return (1);
702 }
703 
704 /*
705  * Parse src, expanding '%' escapes, into dst (which must be at least
706  * MAXPATHLEN long).
707  */
708 void
709 format_path(char *dst, const char *src)
710 {
711 	size_t len;
712 	const char *p;
713 
714 	dst[0] = '\0';
715 	len = 0;
716 	if (src == NULL)
717 		return;
718 	for (p = src; *p && len < MAXPATHLEN; p++) {
719 		if (*p == '%') {
720 			p++;
721 			switch (*p) {
722 
723 			case 'c':
724 				len += strlcpy(dst + len, curclass.classname,
725 				    MAXPATHLEN - len);
726 				break;
727 
728 			case 'd':
729 				len += strlcpy(dst + len, pw->pw_dir,
730 				    MAXPATHLEN - len);
731 				break;
732 
733 			case 'u':
734 				len += strlcpy(dst + len, pw->pw_name,
735 				    MAXPATHLEN - len);
736 				break;
737 
738 			case '%':
739 				dst[len++] = '%';
740 				break;
741 
742 			}
743 		} else
744 			dst[len++] = *p;
745 	}
746 	if (len < MAXPATHLEN)
747 		dst[len] = '\0';
748 	dst[MAXPATHLEN - 1] = '\0';
749 }
750 
751 /*
752  * Find s2 at the end of s1.  If found, return a string up to (but
753  * not including) s2, otherwise returns NULL.
754  */
755 static char *
756 strend(const char *s1, char *s2)
757 {
758 	static	char buf[MAXPATHLEN];
759 
760 	char	*start;
761 	size_t	l1, l2;
762 
763 	l1 = strlen(s1);
764 	l2 = strlen(s2);
765 
766 	if (l2 >= l1 || l1 >= sizeof(buf))
767 		return(NULL);
768 
769 	strlcpy(buf, s1, sizeof(buf));
770 	start = buf + (l1 - l2);
771 
772 	if (strcmp(start, s2) == 0) {
773 		*start = '\0';
774 		return(buf);
775 	} else
776 		return(NULL);
777 }
778 
779 static int
780 filetypematch(char *types, int mode)
781 {
782 	for ( ; types[0] != '\0'; types++)
783 		switch (*types) {
784 		  case 'd':
785 			if (S_ISDIR(mode))
786 				return(1);
787 			break;
788 		  case 'f':
789 			if (S_ISREG(mode))
790 				return(1);
791 			break;
792 		}
793 	return(0);
794 }
795 
796 /*
797  * Look for a conversion.  If we succeed, return a pointer to the
798  * command to execute for the conversion.
799  *
800  * The command is stored in a static array so there's no memory
801  * leak problems, and not too much to change in ftpd.c.  This
802  * routine doesn't need to be re-entrant unless we start using a
803  * multi-threaded ftpd, and that's not likely for a while...
804  */
805 char **
806 do_conversion(const char *fname)
807 {
808 	struct ftpconv	*cp;
809 	struct stat	 st;
810 	int		 o_errno;
811 	char		*base = NULL;
812 	char		*cmd, *p, *lp, **argv;
813 	StringList	*sl;
814 
815 	o_errno = errno;
816 	sl = NULL;
817 	cmd = NULL;
818 	for (cp = curclass.conversions; cp != NULL; cp = cp->next) {
819 		if (cp->suffix == NULL) {
820 			syslog(LOG_WARNING,
821 			    "cp->suffix==NULL in conv list; SHOULDN'T HAPPEN!");
822 			continue;
823 		}
824 		if ((base = strend(fname, cp->suffix)) == NULL)
825 			continue;
826 		if (cp->types == NULL || cp->disable == NULL ||
827 		    cp->command == NULL)
828 			continue;
829 					/* Is it enabled? */
830 		if (strcmp(cp->disable, ".") != 0 &&
831 		    stat(cp->disable, &st) == 0)
832 				continue;
833 					/* Does the base exist? */
834 		if (stat(base, &st) < 0)
835 			continue;
836 					/* Is the file type ok */
837 		if (!filetypematch(cp->types, st.st_mode))
838 			continue;
839 		break;			/* "We have a winner!" */
840 	}
841 
842 	/* If we got through the list, no conversion */
843 	if (cp == NULL)
844 		goto cleanup_do_conv;
845 
846 	/* Split up command into an argv */
847 	if ((sl = sl_init()) == NULL)
848 		goto cleanup_do_conv;
849 	cmd = xstrdup(cp->command);
850 	p = cmd;
851 	while (p) {
852 		NEXTWORD(p, lp);
853 		if (strcmp(lp, "%s") == 0)
854 			lp = base;
855 		if (sl_add(sl, xstrdup(lp)) == -1)
856 			goto cleanup_do_conv;
857 	}
858 
859 	if (sl_add(sl, NULL) == -1)
860 		goto cleanup_do_conv;
861 	argv = sl->sl_str;
862 	free(cmd);
863 	free(sl);
864 	return(argv);
865 
866  cleanup_do_conv:
867 	if (sl)
868 		sl_free(sl, 1);
869 	free(cmd);
870 	errno = o_errno;
871 	return(NULL);
872 }
873 
874 /*
875  * Count the number of current connections, reading from
876  *	/var/run/ftpd.pids-<class>
877  * Does a kill -0 on each pid in that file, and only counts
878  * processes that exist (or frees the slot if it doesn't).
879  * Adds getpid() to the first free slot. Truncates the file
880  * if possible.
881  */
882 void
883 count_users(void)
884 {
885 	char	fn[MAXPATHLEN];
886 	int	fd, i, last;
887 	size_t	count;
888 	pid_t  *pids, mypid;
889 	struct stat sb;
890 
891 	(void)strlcpy(fn, _PATH_CLASSPIDS, sizeof(fn));
892 	(void)strlcat(fn, curclass.classname, sizeof(fn));
893 	pids = NULL;
894 	connections = 1;
895 
896 	if ((fd = open(fn, O_RDWR | O_CREAT, 0600)) == -1)
897 		return;
898 	if (lockf(fd, F_TLOCK, 0) == -1)
899 		goto cleanup_count;
900 	if (fstat(fd, &sb) == -1)
901 		goto cleanup_count;
902 	if ((pids = malloc(sb.st_size + sizeof(pid_t))) == NULL)
903 		goto cleanup_count;
904 	count = read(fd, pids, sb.st_size);
905 	if (count < 0 || count != sb.st_size)
906 		goto cleanup_count;
907 	count /= sizeof(pid_t);
908 	mypid = getpid();
909 	last = 0;
910 	for (i = 0; i < count; i++) {
911 		if (pids[i] == 0)
912 			continue;
913 		if (kill(pids[i], 0) == -1 && errno != EPERM) {
914 			if (mypid != 0) {
915 				pids[i] = mypid;
916 				mypid = 0;
917 				last = i;
918 			}
919 		} else {
920 			connections++;
921 			last = i;
922 		}
923 	}
924 	if (mypid != 0) {
925 		if (pids[last] != 0)
926 			last++;
927 		pids[last] = mypid;
928 	}
929 	count = (last + 1) * sizeof(pid_t);
930 	if (lseek(fd, 0, SEEK_SET) == -1)
931 		goto cleanup_count;
932 	if (write(fd, pids, count) == -1)
933 		goto cleanup_count;
934 	(void)ftruncate(fd, count);
935 
936  cleanup_count:
937 	if (lseek(fd, 0, SEEK_SET) != -1)
938 		(void)lockf(fd, F_ULOCK, 0);
939 	close(fd);
940 	REASSIGN(pids, NULL);
941 }
942