blob: ff09becf9a30948a965c0388adb15792ed2de77b [file] [log] [blame]
Damien Milleraa180632010-10-07 21:25:27 +11001/* $OpenBSD: misc.c,v 1.82 2010/09/24 13:33:00 matthew Exp $ */
Damien Millere4340be2000-09-16 13:29:08 +11002/*
3 * Copyright (c) 2000 Markus Friedl. All rights reserved.
Damien Miller3f941882006-03-31 23:13:02 +11004 * Copyright (c) 2005,2006 Damien Miller. All rights reserved.
Damien Millere4340be2000-09-16 13:29:08 +11005 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25 */
26
Damien Miller61c51502000-08-18 14:01:04 +100027#include "includes.h"
Damien Miller17e91c02006-03-15 11:28:34 +110028
Damien Miller9f2abc42006-07-10 20:53:08 +100029#include <sys/types.h>
Damien Millerd7834352006-08-05 12:39:39 +100030#include <sys/ioctl.h>
Damien Miller8ec8c3e2006-07-10 20:35:38 +100031#include <sys/socket.h>
Damien Miller8dbffe72006-08-05 11:02:17 +100032#include <sys/param.h>
Damien Miller8ec8c3e2006-07-10 20:35:38 +100033
Darren Tucker5d196262006-07-12 22:15:16 +100034#include <stdarg.h>
Damien Millera7a73ee2006-08-05 11:37:59 +100035#include <stdio.h>
Damien Millere7a1e5c2006-08-05 11:34:19 +100036#include <stdlib.h>
Damien Millere3476ed2006-07-24 14:13:33 +100037#include <string.h>
Damien Millere6b3b612006-07-24 14:01:23 +100038#include <unistd.h>
Darren Tucker5d196262006-07-12 22:15:16 +100039
Damien Miller8ec8c3e2006-07-10 20:35:38 +100040#include <netinet/in.h>
Damien Miller3a4051e2006-03-15 11:19:42 +110041#include <netinet/tcp.h>
Damien Miller8ec8c3e2006-07-10 20:35:38 +100042
Darren Tucker39972492006-07-12 22:22:46 +100043#include <errno.h>
Damien Miller57cf6382006-07-10 21:13:46 +100044#include <fcntl.h>
Darren Tucker4abde772007-12-29 02:43:51 +110045#include <netdb.h>
Damien Miller03e20032006-03-15 11:16:59 +110046#ifdef HAVE_PATHS_H
Damien Millera9263d02006-03-15 11:18:26 +110047# include <paths.h>
Damien Miller9f2abc42006-07-10 20:53:08 +100048#include <pwd.h>
Damien Miller03e20032006-03-15 11:16:59 +110049#endif
Damien Miller3beb8522006-01-02 23:40:10 +110050#ifdef SSH_TUN_OPENBSD
51#include <net/if.h>
52#endif
Damien Miller61c51502000-08-18 14:01:04 +100053
Damien Millerd7834352006-08-05 12:39:39 +100054#include "xmalloc.h"
Kevin Stevesb6e773a2001-02-04 13:20:36 +000055#include "misc.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000056#include "log.h"
Darren Tuckerda345532006-07-10 23:04:19 +100057#include "ssh.h"
Damien Miller61c51502000-08-18 14:01:04 +100058
Ben Lindstrom4cc240d2001-07-04 04:46:56 +000059/* remove newline at end of string */
Damien Miller61c51502000-08-18 14:01:04 +100060char *
61chop(char *s)
62{
63 char *t = s;
64 while (*t) {
Ben Lindstrom1c37c6a2001-12-06 18:00:18 +000065 if (*t == '\n' || *t == '\r') {
Damien Miller61c51502000-08-18 14:01:04 +100066 *t = '\0';
67 return s;
68 }
69 t++;
70 }
71 return s;
72
73}
74
Ben Lindstrom4cc240d2001-07-04 04:46:56 +000075/* set/unset filedescriptor to non-blocking */
Damien Miller232711f2004-06-15 10:35:30 +100076int
Damien Miller61c51502000-08-18 14:01:04 +100077set_nonblock(int fd)
78{
79 int val;
Ben Lindstromc93e84c2001-05-12 00:08:37 +000080
Damien Miller61c51502000-08-18 14:01:04 +100081 val = fcntl(fd, F_GETFL, 0);
82 if (val < 0) {
83 error("fcntl(%d, F_GETFL, 0): %s", fd, strerror(errno));
Damien Miller232711f2004-06-15 10:35:30 +100084 return (-1);
Damien Miller61c51502000-08-18 14:01:04 +100085 }
Damien Miller69b69aa2000-10-28 14:19:58 +110086 if (val & O_NONBLOCK) {
Damien Miller232711f2004-06-15 10:35:30 +100087 debug3("fd %d is O_NONBLOCK", fd);
88 return (0);
Damien Miller69b69aa2000-10-28 14:19:58 +110089 }
Damien Milleref095ce2003-05-14 13:41:39 +100090 debug2("fd %d setting O_NONBLOCK", fd);
Damien Miller61c51502000-08-18 14:01:04 +100091 val |= O_NONBLOCK;
Damien Miller232711f2004-06-15 10:35:30 +100092 if (fcntl(fd, F_SETFL, val) == -1) {
93 debug("fcntl(%d, F_SETFL, O_NONBLOCK): %s", fd,
94 strerror(errno));
95 return (-1);
96 }
97 return (0);
Damien Miller61c51502000-08-18 14:01:04 +100098}
99
Damien Miller232711f2004-06-15 10:35:30 +1000100int
Ben Lindstromc93e84c2001-05-12 00:08:37 +0000101unset_nonblock(int fd)
102{
103 int val;
104
105 val = fcntl(fd, F_GETFL, 0);
106 if (val < 0) {
107 error("fcntl(%d, F_GETFL, 0): %s", fd, strerror(errno));
Damien Miller232711f2004-06-15 10:35:30 +1000108 return (-1);
Ben Lindstromc93e84c2001-05-12 00:08:37 +0000109 }
110 if (!(val & O_NONBLOCK)) {
Damien Miller232711f2004-06-15 10:35:30 +1000111 debug3("fd %d is not O_NONBLOCK", fd);
112 return (0);
Ben Lindstromc93e84c2001-05-12 00:08:37 +0000113 }
Ben Lindstrom352b1c22001-06-21 03:04:37 +0000114 debug("fd %d clearing O_NONBLOCK", fd);
Ben Lindstromc93e84c2001-05-12 00:08:37 +0000115 val &= ~O_NONBLOCK;
Damien Miller232711f2004-06-15 10:35:30 +1000116 if (fcntl(fd, F_SETFL, val) == -1) {
117 debug("fcntl(%d, F_SETFL, ~O_NONBLOCK): %s",
Ben Lindstrom84fcb312002-03-05 01:48:09 +0000118 fd, strerror(errno));
Damien Miller232711f2004-06-15 10:35:30 +1000119 return (-1);
120 }
121 return (0);
Ben Lindstromc93e84c2001-05-12 00:08:37 +0000122}
123
Darren Tucker4abde772007-12-29 02:43:51 +1100124const char *
125ssh_gai_strerror(int gaierr)
126{
Darren Tucker912428c2008-01-01 20:33:35 +1100127 if (gaierr == EAI_SYSTEM)
128 return strerror(errno);
129 return gai_strerror(gaierr);
Darren Tucker4abde772007-12-29 02:43:51 +1100130}
131
Damien Miller398e1cf2002-02-05 11:52:13 +1100132/* disable nagle on socket */
133void
134set_nodelay(int fd)
135{
Ben Lindstrome86de512002-03-05 01:28:14 +0000136 int opt;
137 socklen_t optlen;
Damien Miller398e1cf2002-02-05 11:52:13 +1100138
Ben Lindstrom1ebd7a52002-02-26 18:12:51 +0000139 optlen = sizeof opt;
140 if (getsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, &optlen) == -1) {
Darren Tucker6db8f932003-11-03 20:07:14 +1100141 debug("getsockopt TCP_NODELAY: %.100s", strerror(errno));
Ben Lindstrom1ebd7a52002-02-26 18:12:51 +0000142 return;
143 }
144 if (opt == 1) {
145 debug2("fd %d is TCP_NODELAY", fd);
146 return;
147 }
148 opt = 1;
Ben Lindstrom1d568f92002-12-23 02:44:36 +0000149 debug2("fd %d setting TCP_NODELAY", fd);
Ben Lindstrom1ebd7a52002-02-26 18:12:51 +0000150 if (setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof opt) == -1)
Damien Miller398e1cf2002-02-05 11:52:13 +1100151 error("setsockopt TCP_NODELAY: %.100s", strerror(errno));
152}
153
Damien Miller61c51502000-08-18 14:01:04 +1000154/* Characters considered whitespace in strsep calls. */
155#define WHITESPACE " \t\r\n"
Damien Miller306d1182006-03-15 12:05:59 +1100156#define QUOTE "\""
Damien Miller61c51502000-08-18 14:01:04 +1000157
Ben Lindstrom4cc240d2001-07-04 04:46:56 +0000158/* return next token in configuration line */
Damien Miller61c51502000-08-18 14:01:04 +1000159char *
160strdelim(char **s)
161{
162 char *old;
163 int wspace = 0;
164
165 if (*s == NULL)
166 return NULL;
167
168 old = *s;
169
Damien Miller306d1182006-03-15 12:05:59 +1100170 *s = strpbrk(*s, WHITESPACE QUOTE "=");
Damien Miller61c51502000-08-18 14:01:04 +1000171 if (*s == NULL)
172 return (old);
173
Damien Miller306d1182006-03-15 12:05:59 +1100174 if (*s[0] == '\"') {
175 memmove(*s, *s + 1, strlen(*s)); /* move nul too */
176 /* Find matching quote */
177 if ((*s = strpbrk(*s, QUOTE)) == NULL) {
178 return (NULL); /* no matching quote */
179 } else {
180 *s[0] = '\0';
Damien Miller9308fc72010-07-16 13:56:01 +1000181 *s += strspn(*s + 1, WHITESPACE) + 1;
Damien Miller306d1182006-03-15 12:05:59 +1100182 return (old);
183 }
184 }
185
Damien Miller61c51502000-08-18 14:01:04 +1000186 /* Allow only one '=' to be skipped */
187 if (*s[0] == '=')
188 wspace = 1;
189 *s[0] = '\0';
190
Damien Miller306d1182006-03-15 12:05:59 +1100191 /* Skip any extra whitespace after first token */
Damien Miller61c51502000-08-18 14:01:04 +1000192 *s += strspn(*s + 1, WHITESPACE) + 1;
193 if (*s[0] == '=' && !wspace)
194 *s += strspn(*s + 1, WHITESPACE) + 1;
195
196 return (old);
197}
Kevin Stevesb6e773a2001-02-04 13:20:36 +0000198
Ben Lindstrom086cf212001-03-05 05:56:40 +0000199struct passwd *
200pwcopy(struct passwd *pw)
201{
Damien Miller07d86be2006-03-26 14:19:21 +1100202 struct passwd *copy = xcalloc(1, sizeof(*copy));
Ben Lindstrom40304422001-03-05 06:22:01 +0000203
Ben Lindstrom086cf212001-03-05 05:56:40 +0000204 copy->pw_name = xstrdup(pw->pw_name);
205 copy->pw_passwd = xstrdup(pw->pw_passwd);
Ben Lindstrom40304422001-03-05 06:22:01 +0000206 copy->pw_gecos = xstrdup(pw->pw_gecos);
Ben Lindstrom086cf212001-03-05 05:56:40 +0000207 copy->pw_uid = pw->pw_uid;
208 copy->pw_gid = pw->pw_gid;
Kevin Steves82456952001-06-22 21:14:18 +0000209#ifdef HAVE_PW_EXPIRE_IN_PASSWD
Ben Lindstrom3af4d462001-06-21 03:11:27 +0000210 copy->pw_expire = pw->pw_expire;
Kevin Steves82456952001-06-22 21:14:18 +0000211#endif
212#ifdef HAVE_PW_CHANGE_IN_PASSWD
Ben Lindstrom3af4d462001-06-21 03:11:27 +0000213 copy->pw_change = pw->pw_change;
Kevin Steves82456952001-06-22 21:14:18 +0000214#endif
Ben Lindstrom0f68db42001-03-05 07:57:09 +0000215#ifdef HAVE_PW_CLASS_IN_PASSWD
Ben Lindstrom086cf212001-03-05 05:56:40 +0000216 copy->pw_class = xstrdup(pw->pw_class);
Ben Lindstrom0f68db42001-03-05 07:57:09 +0000217#endif
Ben Lindstrom086cf212001-03-05 05:56:40 +0000218 copy->pw_dir = xstrdup(pw->pw_dir);
219 copy->pw_shell = xstrdup(pw->pw_shell);
220 return copy;
221}
222
Ben Lindstrom4cc240d2001-07-04 04:46:56 +0000223/*
224 * Convert ASCII string to TCP/IP port number.
Damien Miller3dc71ad2009-01-28 16:31:22 +1100225 * Port must be >=0 and <=65535.
226 * Return -1 if invalid.
Ben Lindstrom4cc240d2001-07-04 04:46:56 +0000227 */
228int
229a2port(const char *s)
Ben Lindstrom19066a12001-04-12 23:39:26 +0000230{
Damien Miller3dc71ad2009-01-28 16:31:22 +1100231 long long port;
232 const char *errstr;
Ben Lindstrom19066a12001-04-12 23:39:26 +0000233
Damien Miller3dc71ad2009-01-28 16:31:22 +1100234 port = strtonum(s, 0, 65535, &errstr);
235 if (errstr != NULL)
236 return -1;
237 return (int)port;
Ben Lindstrom19066a12001-04-12 23:39:26 +0000238}
239
Damien Millerd27b9472005-12-13 19:29:02 +1100240int
241a2tun(const char *s, int *remote)
242{
243 const char *errstr = NULL;
244 char *sp, *ep;
245 int tun;
246
247 if (remote != NULL) {
Damien Miller7b58e802005-12-13 19:33:19 +1100248 *remote = SSH_TUNID_ANY;
Damien Millerd27b9472005-12-13 19:29:02 +1100249 sp = xstrdup(s);
250 if ((ep = strchr(sp, ':')) == NULL) {
251 xfree(sp);
252 return (a2tun(s, NULL));
253 }
254 ep[0] = '\0'; ep++;
255 *remote = a2tun(ep, NULL);
256 tun = a2tun(sp, NULL);
257 xfree(sp);
Damien Miller7b58e802005-12-13 19:33:19 +1100258 return (*remote == SSH_TUNID_ERR ? *remote : tun);
Damien Millerd27b9472005-12-13 19:29:02 +1100259 }
260
261 if (strcasecmp(s, "any") == 0)
Damien Miller7b58e802005-12-13 19:33:19 +1100262 return (SSH_TUNID_ANY);
Damien Millerd27b9472005-12-13 19:29:02 +1100263
Damien Miller7b58e802005-12-13 19:33:19 +1100264 tun = strtonum(s, 0, SSH_TUNID_MAX, &errstr);
265 if (errstr != NULL)
266 return (SSH_TUNID_ERR);
Damien Millerd27b9472005-12-13 19:29:02 +1100267
268 return (tun);
269}
270
Ben Lindstrom1bda4c82001-06-05 19:59:08 +0000271#define SECONDS 1
272#define MINUTES (SECONDS * 60)
273#define HOURS (MINUTES * 60)
274#define DAYS (HOURS * 24)
275#define WEEKS (DAYS * 7)
276
Ben Lindstrom4cc240d2001-07-04 04:46:56 +0000277/*
278 * Convert a time string into seconds; format is
279 * a sequence of:
280 * time[qualifier]
281 *
282 * Valid time qualifiers are:
283 * <none> seconds
284 * s|S seconds
285 * m|M minutes
286 * h|H hours
287 * d|D days
288 * w|W weeks
289 *
290 * Examples:
291 * 90m 90 minutes
292 * 1h30m 90 minutes
293 * 2d 2 days
294 * 1w 1 week
295 *
296 * Return -1 if time string is invalid.
297 */
298long
299convtime(const char *s)
Ben Lindstrom1bda4c82001-06-05 19:59:08 +0000300{
301 long total, secs;
302 const char *p;
303 char *endp;
304
305 errno = 0;
306 total = 0;
307 p = s;
308
309 if (p == NULL || *p == '\0')
310 return -1;
311
312 while (*p) {
313 secs = strtol(p, &endp, 10);
314 if (p == endp ||
315 (errno == ERANGE && (secs == LONG_MIN || secs == LONG_MAX)) ||
316 secs < 0)
317 return -1;
318
319 switch (*endp++) {
320 case '\0':
321 endp--;
Damien Miller69b72032006-03-26 14:02:35 +1100322 break;
Ben Lindstrom1bda4c82001-06-05 19:59:08 +0000323 case 's':
324 case 'S':
325 break;
326 case 'm':
327 case 'M':
328 secs *= MINUTES;
329 break;
330 case 'h':
331 case 'H':
332 secs *= HOURS;
333 break;
334 case 'd':
335 case 'D':
336 secs *= DAYS;
337 break;
338 case 'w':
339 case 'W':
340 secs *= WEEKS;
341 break;
342 default:
343 return -1;
344 }
345 total += secs;
346 if (total < 0)
347 return -1;
348 p = endp;
349 }
350
351 return total;
352}
353
Damien Millerf91ee4c2005-03-01 21:24:33 +1100354/*
Darren Tuckerda345532006-07-10 23:04:19 +1000355 * Returns a standardized host+port identifier string.
356 * Caller must free returned string.
357 */
358char *
359put_host_port(const char *host, u_short port)
360{
361 char *hoststr;
362
363 if (port == 0 || port == SSH_DEFAULT_PORT)
364 return(xstrdup(host));
365 if (asprintf(&hoststr, "[%s]:%d", host, (int)port) < 0)
366 fatal("put_host_port: asprintf: %s", strerror(errno));
367 debug3("put_host_port: %s", hoststr);
368 return hoststr;
369}
370
371/*
Damien Millerf91ee4c2005-03-01 21:24:33 +1100372 * Search for next delimiter between hostnames/addresses and ports.
373 * Argument may be modified (for termination).
374 * Returns *cp if parsing succeeds.
375 * *cp is set to the start of the next delimiter, if one was found.
376 * If this is the last field, *cp is set to NULL.
377 */
378char *
379hpdelim(char **cp)
380{
381 char *s, *old;
382
383 if (cp == NULL || *cp == NULL)
384 return NULL;
385
386 old = s = *cp;
387 if (*s == '[') {
388 if ((s = strchr(s, ']')) == NULL)
389 return NULL;
390 else
391 s++;
392 } else if ((s = strpbrk(s, ":/")) == NULL)
393 s = *cp + strlen(*cp); /* skip to end (see first case below) */
394
395 switch (*s) {
396 case '\0':
397 *cp = NULL; /* no more fields*/
398 break;
Darren Tucker47eede72005-03-14 23:08:12 +1100399
Damien Millerf91ee4c2005-03-01 21:24:33 +1100400 case ':':
401 case '/':
402 *s = '\0'; /* terminate */
403 *cp = s + 1;
404 break;
Darren Tucker47eede72005-03-14 23:08:12 +1100405
Damien Millerf91ee4c2005-03-01 21:24:33 +1100406 default:
407 return NULL;
408 }
409
410 return old;
411}
412
Ben Lindstrom4529b702001-05-03 23:39:53 +0000413char *
414cleanhostname(char *host)
415{
416 if (*host == '[' && host[strlen(host) - 1] == ']') {
417 host[strlen(host) - 1] = '\0';
418 return (host + 1);
419 } else
420 return host;
421}
422
423char *
424colon(char *cp)
425{
426 int flag = 0;
427
428 if (*cp == ':') /* Leading colon is part of file name. */
Damien Miller2e774462010-06-26 09:30:47 +1000429 return NULL;
Ben Lindstrom4529b702001-05-03 23:39:53 +0000430 if (*cp == '[')
431 flag = 1;
432
433 for (; *cp; ++cp) {
434 if (*cp == '@' && *(cp+1) == '[')
435 flag = 1;
436 if (*cp == ']' && *(cp+1) == ':' && flag)
437 return (cp+1);
438 if (*cp == ':' && !flag)
439 return (cp);
440 if (*cp == '/')
Damien Miller2e774462010-06-26 09:30:47 +1000441 return NULL;
Ben Lindstrom4529b702001-05-03 23:39:53 +0000442 }
Damien Miller2e774462010-06-26 09:30:47 +1000443 return NULL;
Ben Lindstrom4529b702001-05-03 23:39:53 +0000444}
445
Ben Lindstrom4cc240d2001-07-04 04:46:56 +0000446/* function to assist building execv() arguments */
Ben Lindstrom387c4722001-05-08 20:27:25 +0000447void
448addargs(arglist *args, char *fmt, ...)
449{
450 va_list ap;
Damien Miller3eec6b72006-01-31 21:49:27 +1100451 char *cp;
Darren Tuckerc7a6fc42004-08-13 21:18:00 +1000452 u_int nalloc;
Damien Miller3eec6b72006-01-31 21:49:27 +1100453 int r;
Ben Lindstrom387c4722001-05-08 20:27:25 +0000454
455 va_start(ap, fmt);
Damien Miller3eec6b72006-01-31 21:49:27 +1100456 r = vasprintf(&cp, fmt, ap);
Ben Lindstrom387c4722001-05-08 20:27:25 +0000457 va_end(ap);
Damien Miller3eec6b72006-01-31 21:49:27 +1100458 if (r == -1)
459 fatal("addargs: argument too long");
Ben Lindstrom387c4722001-05-08 20:27:25 +0000460
Darren Tuckerfb16b242003-09-22 21:04:23 +1000461 nalloc = args->nalloc;
Ben Lindstrom387c4722001-05-08 20:27:25 +0000462 if (args->list == NULL) {
Darren Tuckerfb16b242003-09-22 21:04:23 +1000463 nalloc = 32;
Ben Lindstrom387c4722001-05-08 20:27:25 +0000464 args->num = 0;
Darren Tuckerfb16b242003-09-22 21:04:23 +1000465 } else if (args->num+2 >= nalloc)
466 nalloc *= 2;
Ben Lindstrom387c4722001-05-08 20:27:25 +0000467
Damien Miller36812092006-03-26 14:22:47 +1100468 args->list = xrealloc(args->list, nalloc, sizeof(char *));
Darren Tuckerfb16b242003-09-22 21:04:23 +1000469 args->nalloc = nalloc;
Damien Miller3eec6b72006-01-31 21:49:27 +1100470 args->list[args->num++] = cp;
Ben Lindstrom387c4722001-05-08 20:27:25 +0000471 args->list[args->num] = NULL;
472}
Darren Tucker22cc7412004-12-06 22:47:41 +1100473
Damien Miller3eec6b72006-01-31 21:49:27 +1100474void
475replacearg(arglist *args, u_int which, char *fmt, ...)
476{
477 va_list ap;
478 char *cp;
479 int r;
480
481 va_start(ap, fmt);
482 r = vasprintf(&cp, fmt, ap);
483 va_end(ap);
484 if (r == -1)
485 fatal("replacearg: argument too long");
486
487 if (which >= args->num)
488 fatal("replacearg: tried to replace invalid arg %d >= %d",
489 which, args->num);
490 xfree(args->list[which]);
491 args->list[which] = cp;
492}
493
494void
495freeargs(arglist *args)
496{
497 u_int i;
498
499 if (args->list != NULL) {
500 for (i = 0; i < args->num; i++)
501 xfree(args->list[i]);
502 xfree(args->list);
503 args->nalloc = args->num = 0;
504 args->list = NULL;
505 }
506}
507
Darren Tucker22cc7412004-12-06 22:47:41 +1100508/*
Damien Miller5fd38c02005-05-26 12:02:14 +1000509 * Expands tildes in the file name. Returns data allocated by xmalloc.
510 * Warning: this calls getpw*.
511 */
512char *
513tilde_expand_filename(const char *filename, uid_t uid)
514{
515 const char *path;
516 char user[128], ret[MAXPATHLEN];
517 struct passwd *pw;
Damien Millereccb9de2005-06-17 12:59:34 +1000518 u_int len, slash;
Damien Miller5fd38c02005-05-26 12:02:14 +1000519
520 if (*filename != '~')
521 return (xstrdup(filename));
522 filename++;
523
524 path = strchr(filename, '/');
525 if (path != NULL && path > filename) { /* ~user/path */
Damien Millereccb9de2005-06-17 12:59:34 +1000526 slash = path - filename;
527 if (slash > sizeof(user) - 1)
Damien Miller5fd38c02005-05-26 12:02:14 +1000528 fatal("tilde_expand_filename: ~username too long");
Damien Millereccb9de2005-06-17 12:59:34 +1000529 memcpy(user, filename, slash);
530 user[slash] = '\0';
Damien Miller5fd38c02005-05-26 12:02:14 +1000531 if ((pw = getpwnam(user)) == NULL)
532 fatal("tilde_expand_filename: No such user %s", user);
533 } else if ((pw = getpwuid(uid)) == NULL) /* ~/path */
Darren Tucker7517b5b2008-06-13 14:48:59 +1000534 fatal("tilde_expand_filename: No such uid %ld", (long)uid);
Damien Miller5fd38c02005-05-26 12:02:14 +1000535
536 if (strlcpy(ret, pw->pw_dir, sizeof(ret)) >= sizeof(ret))
537 fatal("tilde_expand_filename: Path too long");
538
539 /* Make sure directory has a trailing '/' */
540 len = strlen(pw->pw_dir);
541 if ((len == 0 || pw->pw_dir[len - 1] != '/') &&
542 strlcat(ret, "/", sizeof(ret)) >= sizeof(ret))
543 fatal("tilde_expand_filename: Path too long");
544
545 /* Skip leading '/' from specified path */
546 if (path != NULL)
547 filename = path + 1;
548 if (strlcat(ret, filename, sizeof(ret)) >= sizeof(ret))
549 fatal("tilde_expand_filename: Path too long");
550
551 return (xstrdup(ret));
552}
553
554/*
Damien Miller6476cad2005-06-16 13:18:34 +1000555 * Expand a string with a set of %[char] escapes. A number of escapes may be
556 * specified as (char *escape_chars, char *replacement) pairs. The list must
Darren Tuckerbee73d52005-07-14 17:05:02 +1000557 * be terminated by a NULL escape_char. Returns replaced string in memory
Damien Miller6476cad2005-06-16 13:18:34 +1000558 * allocated by xmalloc.
559 */
560char *
561percent_expand(const char *string, ...)
562{
563#define EXPAND_MAX_KEYS 16
Darren Tucker70d87692010-01-08 18:49:16 +1100564 u_int num_keys, i, j;
Damien Miller6476cad2005-06-16 13:18:34 +1000565 struct {
566 const char *key;
567 const char *repl;
568 } keys[EXPAND_MAX_KEYS];
Damien Miller6476cad2005-06-16 13:18:34 +1000569 char buf[4096];
570 va_list ap;
571
572 /* Gather keys */
573 va_start(ap, string);
574 for (num_keys = 0; num_keys < EXPAND_MAX_KEYS; num_keys++) {
575 keys[num_keys].key = va_arg(ap, char *);
576 if (keys[num_keys].key == NULL)
577 break;
578 keys[num_keys].repl = va_arg(ap, char *);
579 if (keys[num_keys].repl == NULL)
Darren Tucker70d87692010-01-08 18:49:16 +1100580 fatal("%s: NULL replacement", __func__);
Damien Miller6476cad2005-06-16 13:18:34 +1000581 }
Darren Tucker70d87692010-01-08 18:49:16 +1100582 if (num_keys == EXPAND_MAX_KEYS && va_arg(ap, char *) != NULL)
583 fatal("%s: too many keys", __func__);
Damien Miller6476cad2005-06-16 13:18:34 +1000584 va_end(ap);
585
Damien Miller6476cad2005-06-16 13:18:34 +1000586 /* Expand string */
587 *buf = '\0';
588 for (i = 0; *string != '\0'; string++) {
589 if (*string != '%') {
590 append:
591 buf[i++] = *string;
592 if (i >= sizeof(buf))
Darren Tucker70d87692010-01-08 18:49:16 +1100593 fatal("%s: string too long", __func__);
Damien Miller6476cad2005-06-16 13:18:34 +1000594 buf[i] = '\0';
595 continue;
596 }
597 string++;
Darren Tucker70d87692010-01-08 18:49:16 +1100598 /* %% case */
Damien Miller6476cad2005-06-16 13:18:34 +1000599 if (*string == '%')
600 goto append;
601 for (j = 0; j < num_keys; j++) {
602 if (strchr(keys[j].key, *string) != NULL) {
603 i = strlcat(buf, keys[j].repl, sizeof(buf));
604 if (i >= sizeof(buf))
Darren Tucker70d87692010-01-08 18:49:16 +1100605 fatal("%s: string too long", __func__);
Damien Miller6476cad2005-06-16 13:18:34 +1000606 break;
607 }
608 }
609 if (j >= num_keys)
Darren Tucker70d87692010-01-08 18:49:16 +1100610 fatal("%s: unknown key %%%c", __func__, *string);
Damien Miller6476cad2005-06-16 13:18:34 +1000611 }
612 return (xstrdup(buf));
613#undef EXPAND_MAX_KEYS
614}
615
616/*
Darren Tucker22cc7412004-12-06 22:47:41 +1100617 * Read an entire line from a public key file into a static buffer, discarding
618 * lines that exceed the buffer size. Returns 0 on success, -1 on failure.
619 */
620int
621read_keyfile_line(FILE *f, const char *filename, char *buf, size_t bufsz,
Darren Tuckerf0f90982004-12-11 13:39:50 +1100622 u_long *lineno)
Darren Tucker22cc7412004-12-06 22:47:41 +1100623{
624 while (fgets(buf, bufsz, f) != NULL) {
Damien Miller3ca8b772007-01-05 16:24:47 +1100625 if (buf[0] == '\0')
626 continue;
Darren Tucker22cc7412004-12-06 22:47:41 +1100627 (*lineno)++;
628 if (buf[strlen(buf) - 1] == '\n' || feof(f)) {
629 return 0;
630 } else {
Darren Tuckerf0f90982004-12-11 13:39:50 +1100631 debug("%s: %s line %lu exceeds size limit", __func__,
632 filename, *lineno);
Darren Tucker22cc7412004-12-06 22:47:41 +1100633 /* discard remainder of line */
Darren Tucker47eede72005-03-14 23:08:12 +1100634 while (fgetc(f) != '\n' && !feof(f))
Darren Tucker22cc7412004-12-06 22:47:41 +1100635 ; /* nothing */
636 }
637 }
638 return -1;
639}
Damien Miller13390022005-07-06 09:44:19 +1000640
Damien Millerd27b9472005-12-13 19:29:02 +1100641int
Damien Miller7b58e802005-12-13 19:33:19 +1100642tun_open(int tun, int mode)
Damien Millerd27b9472005-12-13 19:29:02 +1100643{
Damien Miller62a31c92005-12-13 20:44:13 +1100644#if defined(CUSTOM_SYS_TUN_OPEN)
645 return (sys_tun_open(tun, mode));
Damien Miller2dcddbf2006-01-01 19:47:05 +1100646#elif defined(SSH_TUN_OPENBSD)
Damien Miller7b58e802005-12-13 19:33:19 +1100647 struct ifreq ifr;
Damien Millerd27b9472005-12-13 19:29:02 +1100648 char name[100];
Damien Miller7b58e802005-12-13 19:33:19 +1100649 int fd = -1, sock;
Damien Millerd27b9472005-12-13 19:29:02 +1100650
Damien Miller7b58e802005-12-13 19:33:19 +1100651 /* Open the tunnel device */
652 if (tun <= SSH_TUNID_MAX) {
Damien Millerd27b9472005-12-13 19:29:02 +1100653 snprintf(name, sizeof(name), "/dev/tun%d", tun);
Damien Miller7b58e802005-12-13 19:33:19 +1100654 fd = open(name, O_RDWR);
655 } else if (tun == SSH_TUNID_ANY) {
656 for (tun = 100; tun >= 0; tun--) {
657 snprintf(name, sizeof(name), "/dev/tun%d", tun);
658 if ((fd = open(name, O_RDWR)) >= 0)
659 break;
Damien Millerd27b9472005-12-13 19:29:02 +1100660 }
661 } else {
Damien Millera210d522006-01-02 23:40:30 +1100662 debug("%s: invalid tunnel %u", __func__, tun);
Damien Miller7b58e802005-12-13 19:33:19 +1100663 return (-1);
Damien Millerd27b9472005-12-13 19:29:02 +1100664 }
Damien Miller7b58e802005-12-13 19:33:19 +1100665
666 if (fd < 0) {
667 debug("%s: %s open failed: %s", __func__, name, strerror(errno));
668 return (-1);
669 }
670
671 debug("%s: %s mode %d fd %d", __func__, name, mode, fd);
672
673 /* Set the tunnel device operation mode */
674 snprintf(ifr.ifr_name, sizeof(ifr.ifr_name), "tun%d", tun);
675 if ((sock = socket(PF_UNIX, SOCK_STREAM, 0)) == -1)
676 goto failed;
677
678 if (ioctl(sock, SIOCGIFFLAGS, &ifr) == -1)
679 goto failed;
Damien Millera1d9a182006-01-02 23:41:21 +1100680
681 /* Set interface mode */
682 ifr.ifr_flags &= ~IFF_UP;
683 if (mode == SSH_TUNMODE_ETHERNET)
Damien Miller7b58e802005-12-13 19:33:19 +1100684 ifr.ifr_flags |= IFF_LINK0;
Damien Millera1d9a182006-01-02 23:41:21 +1100685 else
686 ifr.ifr_flags &= ~IFF_LINK0;
687 if (ioctl(sock, SIOCSIFFLAGS, &ifr) == -1)
688 goto failed;
689
690 /* Bring interface up */
Damien Miller7b58e802005-12-13 19:33:19 +1100691 ifr.ifr_flags |= IFF_UP;
692 if (ioctl(sock, SIOCSIFFLAGS, &ifr) == -1)
693 goto failed;
694
695 close(sock);
696 return (fd);
697
698 failed:
699 if (fd >= 0)
700 close(fd);
701 if (sock >= 0)
702 close(sock);
703 debug("%s: failed to set %s mode %d: %s", __func__, name,
704 mode, strerror(errno));
Damien Millerd27b9472005-12-13 19:29:02 +1100705 return (-1);
Damien Miller62a31c92005-12-13 20:44:13 +1100706#else
707 error("Tunnel interfaces are not supported on this platform");
708 return (-1);
709#endif
Damien Millerd27b9472005-12-13 19:29:02 +1100710}
711
Darren Tuckerce321d82005-10-03 18:11:24 +1000712void
713sanitise_stdfd(void)
714{
Damien Miller72c5b7d2006-01-06 14:50:44 +1100715 int nullfd, dupfd;
Darren Tuckerce321d82005-10-03 18:11:24 +1000716
Damien Miller72c5b7d2006-01-06 14:50:44 +1100717 if ((nullfd = dupfd = open(_PATH_DEVNULL, O_RDWR)) == -1) {
Damien Miller9eab9562009-02-22 08:47:02 +1100718 fprintf(stderr, "Couldn't open /dev/null: %s\n",
719 strerror(errno));
Darren Tuckerce321d82005-10-03 18:11:24 +1000720 exit(1);
721 }
Damien Miller72c5b7d2006-01-06 14:50:44 +1100722 while (++dupfd <= 2) {
723 /* Only clobber closed fds */
724 if (fcntl(dupfd, F_GETFL, 0) >= 0)
725 continue;
726 if (dup2(nullfd, dupfd) == -1) {
Damien Miller9eab9562009-02-22 08:47:02 +1100727 fprintf(stderr, "dup2: %s\n", strerror(errno));
Darren Tuckerce321d82005-10-03 18:11:24 +1000728 exit(1);
729 }
Darren Tuckerce321d82005-10-03 18:11:24 +1000730 }
731 if (nullfd > 2)
732 close(nullfd);
733}
734
Damien Miller13390022005-07-06 09:44:19 +1000735char *
Damien Miller3f941882006-03-31 23:13:02 +1100736tohex(const void *vp, size_t l)
Damien Miller13390022005-07-06 09:44:19 +1000737{
Damien Miller3f941882006-03-31 23:13:02 +1100738 const u_char *p = (const u_char *)vp;
Damien Miller13390022005-07-06 09:44:19 +1000739 char b[3], *r;
Damien Miller3f941882006-03-31 23:13:02 +1100740 size_t i, hl;
741
742 if (l > 65536)
743 return xstrdup("tohex: length > 65536");
Damien Miller13390022005-07-06 09:44:19 +1000744
745 hl = l * 2 + 1;
Damien Miller07d86be2006-03-26 14:19:21 +1100746 r = xcalloc(1, hl);
Damien Miller13390022005-07-06 09:44:19 +1000747 for (i = 0; i < l; i++) {
Damien Miller3f941882006-03-31 23:13:02 +1100748 snprintf(b, sizeof(b), "%02x", p[i]);
Damien Miller13390022005-07-06 09:44:19 +1000749 strlcat(r, b, hl);
750 }
751 return (r);
752}
753
Damien Miller3f941882006-03-31 23:13:02 +1100754u_int64_t
755get_u64(const void *vp)
756{
757 const u_char *p = (const u_char *)vp;
758 u_int64_t v;
759
760 v = (u_int64_t)p[0] << 56;
761 v |= (u_int64_t)p[1] << 48;
762 v |= (u_int64_t)p[2] << 40;
763 v |= (u_int64_t)p[3] << 32;
764 v |= (u_int64_t)p[4] << 24;
765 v |= (u_int64_t)p[5] << 16;
766 v |= (u_int64_t)p[6] << 8;
767 v |= (u_int64_t)p[7];
768
769 return (v);
770}
771
772u_int32_t
773get_u32(const void *vp)
774{
775 const u_char *p = (const u_char *)vp;
776 u_int32_t v;
777
778 v = (u_int32_t)p[0] << 24;
779 v |= (u_int32_t)p[1] << 16;
780 v |= (u_int32_t)p[2] << 8;
781 v |= (u_int32_t)p[3];
782
783 return (v);
784}
785
786u_int16_t
787get_u16(const void *vp)
788{
789 const u_char *p = (const u_char *)vp;
790 u_int16_t v;
791
792 v = (u_int16_t)p[0] << 8;
793 v |= (u_int16_t)p[1];
794
795 return (v);
796}
797
798void
799put_u64(void *vp, u_int64_t v)
800{
801 u_char *p = (u_char *)vp;
802
803 p[0] = (u_char)(v >> 56) & 0xff;
804 p[1] = (u_char)(v >> 48) & 0xff;
805 p[2] = (u_char)(v >> 40) & 0xff;
806 p[3] = (u_char)(v >> 32) & 0xff;
807 p[4] = (u_char)(v >> 24) & 0xff;
808 p[5] = (u_char)(v >> 16) & 0xff;
809 p[6] = (u_char)(v >> 8) & 0xff;
810 p[7] = (u_char)v & 0xff;
811}
812
813void
814put_u32(void *vp, u_int32_t v)
815{
816 u_char *p = (u_char *)vp;
817
818 p[0] = (u_char)(v >> 24) & 0xff;
819 p[1] = (u_char)(v >> 16) & 0xff;
820 p[2] = (u_char)(v >> 8) & 0xff;
821 p[3] = (u_char)v & 0xff;
822}
823
824
825void
826put_u16(void *vp, u_int16_t v)
827{
828 u_char *p = (u_char *)vp;
829
830 p[0] = (u_char)(v >> 8) & 0xff;
831 p[1] = (u_char)v & 0xff;
832}
Darren Tucker3fc464e2008-06-13 06:42:45 +1000833
834void
835ms_subtract_diff(struct timeval *start, int *ms)
836{
837 struct timeval diff, finish;
838
839 gettimeofday(&finish, NULL);
840 timersub(&finish, start, &diff);
841 *ms -= (diff.tv_sec * 1000) + (diff.tv_usec / 1000);
842}
843
844void
845ms_to_timeval(struct timeval *tv, int ms)
846{
847 if (ms < 0)
848 ms = 0;
849 tv->tv_sec = ms / 1000;
850 tv->tv_usec = (ms % 1000) * 1000;
851}
852
Damien Miller65e42f82010-09-24 22:15:11 +1000853void
854bandwidth_limit_init(struct bwlimit *bw, u_int64_t kbps, size_t buflen)
855{
856 bw->buflen = buflen;
857 bw->rate = kbps;
858 bw->thresh = bw->rate;
859 bw->lamt = 0;
860 timerclear(&bw->bwstart);
861 timerclear(&bw->bwend);
862}
863
864/* Callback from read/write loop to insert bandwidth-limiting delays */
865void
866bandwidth_limit(struct bwlimit *bw, size_t read_len)
867{
868 u_int64_t waitlen;
869 struct timespec ts, rm;
870
871 if (!timerisset(&bw->bwstart)) {
872 gettimeofday(&bw->bwstart, NULL);
873 return;
874 }
875
876 bw->lamt += read_len;
877 if (bw->lamt < bw->thresh)
878 return;
879
880 gettimeofday(&bw->bwend, NULL);
881 timersub(&bw->bwend, &bw->bwstart, &bw->bwend);
882 if (!timerisset(&bw->bwend))
883 return;
884
885 bw->lamt *= 8;
886 waitlen = (double)1000000L * bw->lamt / bw->rate;
887
888 bw->bwstart.tv_sec = waitlen / 1000000L;
889 bw->bwstart.tv_usec = waitlen % 1000000L;
890
891 if (timercmp(&bw->bwstart, &bw->bwend, >)) {
892 timersub(&bw->bwstart, &bw->bwend, &bw->bwend);
893
894 /* Adjust the wait time */
895 if (bw->bwend.tv_sec) {
896 bw->thresh /= 2;
897 if (bw->thresh < bw->buflen / 4)
898 bw->thresh = bw->buflen / 4;
899 } else if (bw->bwend.tv_usec < 10000) {
900 bw->thresh *= 2;
901 if (bw->thresh > bw->buflen * 8)
902 bw->thresh = bw->buflen * 8;
903 }
904
905 TIMEVAL_TO_TIMESPEC(&bw->bwend, &ts);
906 while (nanosleep(&ts, &rm) == -1) {
907 if (errno != EINTR)
908 break;
909 ts = rm;
910 }
911 }
912
913 bw->lamt = 0;
914 gettimeofday(&bw->bwstart, NULL);
915}
Damien Miller04ee0f82009-11-18 17:48:30 +1100916void
917sock_set_v6only(int s)
918{
919#ifdef IPV6_V6ONLY
920 int on = 1;
921
922 debug3("%s: set socket %d IPV6_V6ONLY", __func__, s);
923 if (setsockopt(s, IPPROTO_IPV6, IPV6_V6ONLY, &on, sizeof(on)) == -1)
924 error("setsockopt IPV6_V6ONLY: %s", strerror(errno));
925#endif
926}