ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/src/conf.c
Revision: 4114
Committed: Tue Jul 1 16:47:15 2014 UTC (9 years, 8 months ago) by michael
Content type: text/x-csrc
File size: 58519 byte(s)
Log Message:
- Added ssl_message_digest_algorithm configuration option to serverinfo{} block.
  See doc/reference.conf for more information.

File Contents

# User Rev Content
1 adx 30 /*
2 michael 2916 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 adx 30 *
4 michael 2916 * Copyright (c) 1997-2014 ircd-hybrid development team
5 adx 30 *
6     * This program is free software; you can redistribute it and/or modify
7     * it under the terms of the GNU General Public License as published by
8     * the Free Software Foundation; either version 2 of the License, or
9     * (at your option) any later version.
10     *
11     * This program is distributed in the hope that it will be useful,
12     * but WITHOUT ANY WARRANTY; without even the implied warranty of
13     * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14     * GNU General Public License for more details.
15     *
16     * You should have received a copy of the GNU General Public License
17     * along with this program; if not, write to the Free Software
18     * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
19     * USA
20     */
21    
22 michael 2916 /*! \file conf.c
23     * \brief Configuration file functions.
24     * \version $Id$
25     */
26    
27 adx 30 #include "stdinc.h"
28 michael 1011 #include "list.h"
29 adx 30 #include "ircd_defs.h"
30 michael 1309 #include "conf.h"
31 michael 3347 #include "server.h"
32 adx 30 #include "resv.h"
33     #include "channel.h"
34     #include "client.h"
35     #include "event.h"
36     #include "irc_string.h"
37     #include "s_bsd.h"
38     #include "ircd.h"
39     #include "listener.h"
40     #include "hostmask.h"
41     #include "modules.h"
42     #include "numeric.h"
43     #include "fdlist.h"
44 michael 1309 #include "log.h"
45 adx 30 #include "send.h"
46     #include "memory.h"
47 michael 1654 #include "mempool.h"
48 michael 3322 #include "res.h"
49 adx 30 #include "userhost.h"
50 michael 3347 #include "user.h"
51 adx 30 #include "channel_mode.h"
52 michael 1243 #include "parse.h"
53 michael 3347 #include "misc.h"
54 michael 1622 #include "conf_db.h"
55 michael 1632 #include "conf_class.h"
56 michael 2150 #include "motd.h"
57 adx 30
58 michael 2872
59 adx 30 /* general conf items link list root, other than k lines etc. */
60 michael 1157 dlink_list service_items = { NULL, NULL, 0 };
61 adx 30 dlink_list server_items = { NULL, NULL, 0 };
62     dlink_list cluster_items = { NULL, NULL, 0 };
63     dlink_list oconf_items = { NULL, NULL, 0 };
64     dlink_list uconf_items = { NULL, NULL, 0 };
65     dlink_list xconf_items = { NULL, NULL, 0 };
66     dlink_list nresv_items = { NULL, NULL, 0 };
67 michael 4080 dlink_list cresv_items = { NULL, NULL, 0 };
68 adx 30
69     extern unsigned int lineno;
70     extern char linebuf[];
71     extern char conffilebuf[IRCD_BUFSIZE];
72     extern int yyparse(); /* defined in y.tab.c */
73    
74     /* internally defined functions */
75 michael 1325 static void read_conf(FILE *);
76 adx 30 static void clear_out_old_conf(void);
77     static void expire_tklines(dlink_list *);
78     static void garbage_collect_ip_entries(void);
79     static int hash_ip(struct irc_ssaddr *);
80 michael 1644 static int verify_access(struct Client *);
81 michael 1632 static int attach_iline(struct Client *, struct MaskItem *);
82 adx 30 static struct ip_entry *find_or_add_ip(struct irc_ssaddr *);
83 michael 1632 static dlink_list *map_to_list(enum maskitem_type);
84 adx 30 static int find_user_host(struct Client *, char *, char *, char *, unsigned int);
85    
86    
87     /* usually, with hash tables, you use a prime number...
88     * but in this case I am dealing with ip addresses,
89     * not ascii strings.
90     */
91     #define IP_HASH_SIZE 0x1000
92    
93     struct ip_entry
94     {
95     struct irc_ssaddr ip;
96 michael 3877 unsigned int count; /**< Number of registered users using this IP */
97     unsigned int connection_count; /**< Number of connections from this IP in the last throttle_time duration */
98     time_t last_attempt; /**< The last time someone connected from this IP */
99 adx 30 struct ip_entry *next;
100     };
101    
102     static struct ip_entry *ip_hash_table[IP_HASH_SIZE];
103 michael 1654 static mp_pool_t *ip_entry_pool = NULL;
104 adx 30 static int ip_entries_count = 0;
105    
106    
107     /* conf_dns_callback()
108     *
109 michael 1632 * inputs - pointer to struct MaskItem
110 adx 30 * - pointer to DNSReply reply
111     * output - none
112     * side effects - called when resolver query finishes
113     * if the query resulted in a successful search, hp will contain
114     * a non-null pointer, otherwise hp will be null.
115     * if successful save hp in the conf item it was called with
116     */
117     static void
118 michael 992 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name)
119 adx 30 {
120 michael 1632 struct MaskItem *conf = vptr;
121 adx 30
122 michael 1632 conf->dns_pending = 0;
123 adx 30
124 michael 3235 if (addr)
125 michael 1632 memcpy(&conf->addr, addr, sizeof(conf->addr));
126 michael 992 else
127 michael 1632 conf->dns_failed = 1;
128 adx 30 }
129    
130     /* conf_dns_lookup()
131     *
132     * do a nameserver lookup of the conf host
133     * if the conf entry is currently doing a ns lookup do nothing, otherwise
134     * allocate a dns_query and start ns lookup.
135     */
136     static void
137 michael 1632 conf_dns_lookup(struct MaskItem *conf)
138 adx 30 {
139 michael 1632 if (!conf->dns_pending)
140 adx 30 {
141 michael 1632 conf->dns_pending = 1;
142     gethost_byname(conf_dns_callback, conf, conf->host);
143 adx 30 }
144     }
145    
146 michael 1632 struct MaskItem *
147     conf_make(enum maskitem_type type)
148     {
149 michael 3504 struct MaskItem *conf = MyCalloc(sizeof(*conf));
150 michael 1632 dlink_list *list = NULL;
151    
152     conf->type = type;
153     conf->active = 1;
154     conf->aftype = AF_INET;
155    
156     if ((list = map_to_list(type)))
157     dlinkAdd(conf, &conf->node, list);
158     return conf;
159     }
160    
161     void
162     conf_free(struct MaskItem *conf)
163     {
164     dlink_node *ptr = NULL, *ptr_next = NULL;
165 michael 1636 dlink_list *list = NULL;
166    
167     if (conf->node.next)
168     if ((list = map_to_list(conf->type)))
169     dlinkDelete(&conf->node, list);
170    
171 michael 1632 MyFree(conf->name);
172    
173     if (conf->dns_pending)
174     delete_resolver_queries(conf);
175 michael 3235 if (conf->passwd)
176 michael 1632 memset(conf->passwd, 0, strlen(conf->passwd));
177 michael 3235 if (conf->spasswd)
178 michael 1632 memset(conf->spasswd, 0, strlen(conf->spasswd));
179    
180     conf->class = NULL;
181    
182     MyFree(conf->passwd);
183     MyFree(conf->spasswd);
184     MyFree(conf->reason);
185 michael 2228 MyFree(conf->certfp);
186 michael 1632 MyFree(conf->user);
187     MyFree(conf->host);
188     #ifdef HAVE_LIBCRYPTO
189     MyFree(conf->cipher_list);
190    
191     if (conf->rsa_public_key)
192     RSA_free(conf->rsa_public_key);
193     #endif
194     DLINK_FOREACH_SAFE(ptr, ptr_next, conf->hub_list.head)
195     {
196     MyFree(ptr->data);
197 michael 2736 dlinkDelete(ptr, &conf->hub_list);
198 michael 1632 free_dlink_node(ptr);
199     }
200    
201     DLINK_FOREACH_SAFE(ptr, ptr_next, conf->leaf_list.head)
202     {
203     MyFree(ptr->data);
204 michael 2736 dlinkDelete(ptr, &conf->leaf_list);
205 michael 1632 free_dlink_node(ptr);
206     }
207 adx 30
208 michael 1858 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->exempt_list.head)
209     {
210     struct exempt *exptr = ptr->data;
211    
212 michael 2736 dlinkDelete(ptr, &conf->exempt_list);
213 michael 1858 MyFree(exptr->name);
214     MyFree(exptr->user);
215     MyFree(exptr->host);
216     MyFree(exptr);
217     }
218    
219 michael 1636 MyFree(conf);
220 adx 30 }
221    
222     /* check_client()
223     *
224     * inputs - pointer to client
225     * output - 0 = Success
226     * NOT_AUTHORIZED (-1) = Access denied (no I line match)
227     * IRCD_SOCKET_ERROR (-2) = Bad socket.
228     * I_LINE_FULL (-3) = I-line is full
229     * TOO_MANY (-4) = Too many connections from hostname
230     * BANNED_CLIENT (-5) = K-lined
231     * side effects - Ordinary client access check.
232     * Look for conf lines which have the same
233     * status as the flags passed.
234     */
235 michael 1644 int
236     check_client(struct Client *source_p)
237 adx 30 {
238     int i;
239 michael 2916
240 michael 1644 if ((i = verify_access(source_p)))
241 michael 2916 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
242 adx 30 source_p->name, source_p->sockhost);
243    
244     switch (i)
245     {
246     case TOO_MANY:
247 michael 1618 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
248 adx 30 "Too many on IP for %s (%s).",
249 michael 2182 get_client_name(source_p, SHOW_IP),
250     source_p->sockhost);
251 michael 1247 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
252 michael 2182 get_client_name(source_p, SHOW_IP));
253 michael 896 ++ServerStats.is_ref;
254 michael 3171 exit_client(source_p, "No more connections allowed on that IP");
255 adx 30 break;
256    
257     case I_LINE_FULL:
258 michael 1618 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
259     "auth{} block is full for %s (%s).",
260 michael 2182 get_client_name(source_p, SHOW_IP),
261     source_p->sockhost);
262 michael 1247 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
263 michael 2182 get_client_name(source_p, SHOW_IP));
264 michael 896 ++ServerStats.is_ref;
265 michael 3171 exit_client(source_p, "No more connections allowed in your connection class");
266 adx 30 break;
267    
268     case NOT_AUTHORIZED:
269 michael 896 ++ServerStats.is_ref;
270 adx 30 /* jdc - lists server name & port connections are on */
271     /* a purely cosmetical change */
272 michael 1618 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
273 michael 2182 "Unauthorized client connection from %s [%s] on [%s/%u].",
274     get_client_name(source_p, SHOW_IP),
275     source_p->sockhost,
276     source_p->localClient->listener->name,
277     source_p->localClient->listener->port);
278 michael 1247 ilog(LOG_TYPE_IRCD,
279 michael 2182 "Unauthorized client connection from %s on [%s/%u].",
280     get_client_name(source_p, SHOW_IP),
281     source_p->localClient->listener->name,
282     source_p->localClient->listener->port);
283 adx 30
284 michael 3171 exit_client(source_p, "You are not authorized to use this server");
285 adx 30 break;
286 michael 891
287 adx 30 case BANNED_CLIENT:
288 michael 3171 exit_client(source_p, "Banned");
289 michael 896 ++ServerStats.is_ref;
290 adx 30 break;
291    
292     case 0:
293     default:
294     break;
295     }
296    
297 michael 1644 return (i < 0 ? 0 : 1);
298 adx 30 }
299    
300     /* verify_access()
301     *
302     * inputs - pointer to client to verify
303     * output - 0 if success -'ve if not
304     * side effect - find the first (best) I line to attach.
305     */
306     static int
307 michael 1644 verify_access(struct Client *client_p)
308 adx 30 {
309 michael 1949 struct MaskItem *conf = NULL;
310 michael 3215 char non_ident[USERLEN + 1] = "~";
311 adx 30
312     if (IsGotId(client_p))
313     {
314 michael 1632 conf = find_address_conf(client_p->host, client_p->username,
315 michael 2182 &client_p->localClient->ip,
316     client_p->localClient->aftype,
317 adx 30 client_p->localClient->passwd);
318     }
319     else
320     {
321 michael 2182 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
322 michael 1632 conf = find_address_conf(client_p->host,non_ident,
323 michael 2182 &client_p->localClient->ip,
324     client_p->localClient->aftype,
325     client_p->localClient->passwd);
326 adx 30 }
327    
328 michael 3215 if (conf)
329 adx 30 {
330 michael 1921 if (IsConfClient(conf))
331 adx 30 {
332 michael 1632 if (IsConfRedir(conf))
333 adx 30 {
334 michael 3109 sendto_one_numeric(client_p, &me, RPL_REDIR,
335     conf->name ? conf->name : "",
336     conf->port);
337 michael 2182 return NOT_AUTHORIZED;
338 adx 30 }
339    
340 michael 1632 if (IsConfDoIdentd(conf))
341 michael 2182 SetNeedId(client_p);
342 adx 30
343     /* Thanks for spoof idea amm */
344 michael 1632 if (IsConfDoSpoofIp(conf))
345 adx 30 {
346 michael 1632 if (!ConfigFileEntry.hide_spoof_ips && IsConfSpoofNotice(conf))
347 michael 1618 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
348     "%s spoofing: %s as %s",
349 adx 30 client_p->name, client_p->host, conf->name);
350     strlcpy(client_p->host, conf->name, sizeof(client_p->host));
351 michael 2138 AddFlag(client_p, FLAGS_IP_SPOOFING | FLAGS_AUTH_SPOOF);
352 adx 30 }
353    
354 michael 2182 return attach_iline(client_p, conf);
355 adx 30 }
356 michael 1921 else if (IsConfKill(conf) || (ConfigFileEntry.glines && IsConfGline(conf)))
357 adx 30 {
358 michael 1632 if (IsConfGline(conf))
359 michael 3110 sendto_one_notice(client_p, &me, ":*** G-lined");
360     sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
361 michael 2182 return BANNED_CLIENT;
362 adx 30 }
363     }
364    
365 michael 2182 return NOT_AUTHORIZED;
366 adx 30 }
367    
368     /* attach_iline()
369     *
370     * inputs - client pointer
371     * - conf pointer
372     * output -
373     * side effects - do actual attach
374     */
375     static int
376 michael 1632 attach_iline(struct Client *client_p, struct MaskItem *conf)
377 adx 30 {
378 michael 1632 struct ClassItem *class = NULL;
379 adx 30 struct ip_entry *ip_found;
380     int a_limit_reached = 0;
381 michael 1644 unsigned int local = 0, global = 0, ident = 0;
382 adx 30
383 michael 2317 assert(conf->class);
384    
385 adx 30 ip_found = find_or_add_ip(&client_p->localClient->ip);
386     ip_found->count++;
387     SetIpHash(client_p);
388    
389 michael 1632 class = conf->class;
390 adx 30
391     count_user_host(client_p->username, client_p->host,
392     &global, &local, &ident);
393    
394     /* XXX blah. go down checking the various silly limits
395     * setting a_limit_reached if any limit is reached.
396     * - Dianora
397     */
398 michael 3375 if (class->max_total && class->ref_count >= class->max_total)
399 adx 30 a_limit_reached = 1;
400 michael 3375 else if (class->max_perip && ip_found->count > class->max_perip)
401 adx 30 a_limit_reached = 1;
402 michael 3375 else if (class->max_local && local >= class->max_local)
403 adx 30 a_limit_reached = 1;
404 michael 3375 else if (class->max_global && global >= class->max_global)
405 adx 30 a_limit_reached = 1;
406 michael 3375 else if (class->max_ident && ident >= class->max_ident &&
407 adx 30 client_p->username[0] != '~')
408     a_limit_reached = 1;
409    
410     if (a_limit_reached)
411     {
412 michael 1632 if (!IsConfExemptLimits(conf))
413 michael 624 return TOO_MANY; /* Already at maximum allowed */
414 adx 30
415 michael 3110 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
416     "but you have exceed_limit = yes;");
417 adx 30 }
418    
419     return attach_conf(client_p, conf);
420     }
421    
422     /* init_ip_hash_table()
423     *
424     * inputs - NONE
425     * output - NONE
426     * side effects - allocate memory for ip_entry(s)
427     * - clear the ip hash table
428     */
429     void
430     init_ip_hash_table(void)
431     {
432 michael 1964 ip_entry_pool = mp_pool_new(sizeof(struct ip_entry), MP_CHUNK_SIZE_IP_ENTRY);
433 adx 30 memset(ip_hash_table, 0, sizeof(ip_hash_table));
434     }
435    
436     /* find_or_add_ip()
437     *
438     * inputs - pointer to struct irc_ssaddr
439     * output - pointer to a struct ip_entry
440     * side effects -
441     *
442     * If the ip # was not found, a new struct ip_entry is created, and the ip
443     * count set to 0.
444     */
445     static struct ip_entry *
446     find_or_add_ip(struct irc_ssaddr *ip_in)
447     {
448     struct ip_entry *ptr, *newptr;
449     int hash_index = hash_ip(ip_in), res;
450     struct sockaddr_in *v4 = (struct sockaddr_in *)ip_in, *ptr_v4;
451     #ifdef IPV6
452     struct sockaddr_in6 *v6 = (struct sockaddr_in6 *)ip_in, *ptr_v6;
453     #endif
454    
455     for (ptr = ip_hash_table[hash_index]; ptr; ptr = ptr->next)
456     {
457     #ifdef IPV6
458     if (ptr->ip.ss.ss_family != ip_in->ss.ss_family)
459     continue;
460     if (ip_in->ss.ss_family == AF_INET6)
461     {
462     ptr_v6 = (struct sockaddr_in6 *)&ptr->ip;
463     res = memcmp(&v6->sin6_addr, &ptr_v6->sin6_addr, sizeof(struct in6_addr));
464     }
465     else
466     #endif
467     {
468     ptr_v4 = (struct sockaddr_in *)&ptr->ip;
469     res = memcmp(&v4->sin_addr, &ptr_v4->sin_addr, sizeof(struct in_addr));
470     }
471     if (res == 0)
472     {
473     /* Found entry already in hash, return it. */
474     return ptr;
475     }
476     }
477    
478     if (ip_entries_count >= 2 * hard_fdlimit)
479     garbage_collect_ip_entries();
480    
481 michael 1654 newptr = mp_pool_get(ip_entry_pool);
482 michael 4086
483 adx 30 ip_entries_count++;
484     memcpy(&newptr->ip, ip_in, sizeof(struct irc_ssaddr));
485    
486     newptr->next = ip_hash_table[hash_index];
487     ip_hash_table[hash_index] = newptr;
488    
489     return newptr;
490     }
491    
492     /* remove_one_ip()
493     *
494     * inputs - unsigned long IP address value
495     * output - NONE
496     * side effects - The ip address given, is looked up in ip hash table
497     * and number of ip#'s for that ip decremented.
498     * If ip # count reaches 0 and has expired,
499     * the struct ip_entry is returned to the ip_entry_heap
500     */
501     void
502     remove_one_ip(struct irc_ssaddr *ip_in)
503     {
504     struct ip_entry *ptr;
505     struct ip_entry *last_ptr = NULL;
506     int hash_index = hash_ip(ip_in), res;
507     struct sockaddr_in *v4 = (struct sockaddr_in *)ip_in, *ptr_v4;
508     #ifdef IPV6
509     struct sockaddr_in6 *v6 = (struct sockaddr_in6 *)ip_in, *ptr_v6;
510     #endif
511    
512     for (ptr = ip_hash_table[hash_index]; ptr; ptr = ptr->next)
513     {
514     #ifdef IPV6
515     if (ptr->ip.ss.ss_family != ip_in->ss.ss_family)
516     continue;
517     if (ip_in->ss.ss_family == AF_INET6)
518     {
519     ptr_v6 = (struct sockaddr_in6 *)&ptr->ip;
520     res = memcmp(&v6->sin6_addr, &ptr_v6->sin6_addr, sizeof(struct in6_addr));
521     }
522     else
523     #endif
524     {
525     ptr_v4 = (struct sockaddr_in *)&ptr->ip;
526     res = memcmp(&v4->sin_addr, &ptr_v4->sin_addr, sizeof(struct in_addr));
527     }
528     if (res)
529     continue;
530     if (ptr->count > 0)
531     ptr->count--;
532     if (ptr->count == 0 &&
533 michael 2182 (CurrentTime-ptr->last_attempt) >= ConfigFileEntry.throttle_time)
534 adx 30 {
535     if (last_ptr != NULL)
536 michael 2182 last_ptr->next = ptr->next;
537 adx 30 else
538 michael 2182 ip_hash_table[hash_index] = ptr->next;
539 adx 30
540 michael 1654 mp_pool_release(ptr);
541 adx 30 ip_entries_count--;
542     return;
543     }
544     last_ptr = ptr;
545     }
546     }
547    
548     /* hash_ip()
549     *
550     * input - pointer to an irc_inaddr
551     * output - integer value used as index into hash table
552     * side effects - hopefully, none
553     */
554     static int
555     hash_ip(struct irc_ssaddr *addr)
556     {
557     if (addr->ss.ss_family == AF_INET)
558     {
559     struct sockaddr_in *v4 = (struct sockaddr_in *)addr;
560     int hash;
561 michael 1032 uint32_t ip;
562 adx 30
563     ip = ntohl(v4->sin_addr.s_addr);
564     hash = ((ip >> 12) + ip) & (IP_HASH_SIZE-1);
565     return hash;
566     }
567     #ifdef IPV6
568     else
569     {
570     int hash;
571     struct sockaddr_in6 *v6 = (struct sockaddr_in6 *)addr;
572 michael 1032 uint32_t *ip = (uint32_t *)&v6->sin6_addr.s6_addr;
573 adx 30
574     hash = ip[0] ^ ip[3];
575 michael 2916 hash ^= hash >> 16;
576     hash ^= hash >> 8;
577 adx 30 hash = hash & (IP_HASH_SIZE - 1);
578     return hash;
579     }
580     #else
581     return 0;
582     #endif
583     }
584    
585     /* count_ip_hash()
586     *
587 michael 2916 * inputs - pointer to counter of number of ips hashed
588 adx 30 * - pointer to memory used for ip hash
589     * output - returned via pointers input
590     * side effects - NONE
591     *
592     * number of hashed ip #'s is counted up, plus the amount of memory
593     * used in the hash.
594     */
595     void
596 michael 948 count_ip_hash(unsigned int *number_ips_stored, uint64_t *mem_ips_stored)
597 adx 30 {
598     struct ip_entry *ptr;
599    
600     *number_ips_stored = 0;
601     *mem_ips_stored = 0;
602    
603 michael 3375 for (unsigned int i = 0; i < IP_HASH_SIZE; ++i)
604 adx 30 {
605     for (ptr = ip_hash_table[i]; ptr; ptr = ptr->next)
606     {
607     *number_ips_stored += 1;
608     *mem_ips_stored += sizeof(struct ip_entry);
609     }
610     }
611     }
612    
613     /* garbage_collect_ip_entries()
614     *
615     * input - NONE
616     * output - NONE
617     * side effects - free up all ip entries with no connections
618     */
619     static void
620     garbage_collect_ip_entries(void)
621     {
622     struct ip_entry *ptr;
623     struct ip_entry *last_ptr;
624     struct ip_entry *next_ptr;
625    
626 michael 3375 for (unsigned int i = 0; i < IP_HASH_SIZE; ++i)
627 adx 30 {
628     last_ptr = NULL;
629    
630     for (ptr = ip_hash_table[i]; ptr; ptr = next_ptr)
631     {
632     next_ptr = ptr->next;
633    
634     if (ptr->count == 0 &&
635     (CurrentTime - ptr->last_attempt) >= ConfigFileEntry.throttle_time)
636     {
637     if (last_ptr != NULL)
638     last_ptr->next = ptr->next;
639     else
640     ip_hash_table[i] = ptr->next;
641 michael 1654 mp_pool_release(ptr);
642 adx 30 ip_entries_count--;
643     }
644     else
645     last_ptr = ptr;
646     }
647     }
648     }
649    
650     /* detach_conf()
651     *
652     * inputs - pointer to client to detach
653     * - type of conf to detach
654     * output - 0 for success, -1 for failure
655     * side effects - Disassociate configuration from the client.
656     * Also removes a class from the list if marked for deleting.
657     */
658 michael 1632 void
659     detach_conf(struct Client *client_p, enum maskitem_type type)
660 adx 30 {
661 michael 3235 dlink_node *ptr = NULL, *ptr_next = NULL;
662 adx 30
663 michael 3235 DLINK_FOREACH_SAFE(ptr, ptr_next, client_p->localClient->confs.head)
664 adx 30 {
665 michael 1645 struct MaskItem *conf = ptr->data;
666 adx 30
667 michael 1645 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
668     assert(conf->ref_count > 0);
669     assert(conf->class->ref_count > 0);
670 adx 30
671 michael 1645 if (!(conf->type & type))
672     continue;
673 michael 671
674 michael 1645 dlinkDelete(ptr, &client_p->localClient->confs);
675     free_dlink_node(ptr);
676 michael 1644
677 michael 2278 if (conf->type == CONF_CLIENT)
678 michael 1645 remove_from_cidr_check(&client_p->localClient->ip, conf->class);
679 adx 30
680 michael 1645 if (--conf->class->ref_count == 0 && conf->class->active == 0)
681     {
682     class_free(conf->class);
683     conf->class = NULL;
684 adx 30 }
685 michael 1645
686     if (--conf->ref_count == 0 && conf->active == 0)
687     conf_free(conf);
688 adx 30 }
689     }
690    
691     /* attach_conf()
692     *
693     * inputs - client pointer
694     * - conf pointer
695     * output -
696     * side effects - Associate a specific configuration entry to a *local*
697     * client (this is the one which used in accepting the
698     * connection). Note, that this automatically changes the
699     * attachment if there was an old one...
700     */
701     int
702 michael 1632 attach_conf(struct Client *client_p, struct MaskItem *conf)
703 adx 30 {
704 michael 3235 if (dlinkFind(&client_p->localClient->confs, conf))
705 adx 30 return 1;
706    
707 michael 1632 if (conf->type == CONF_CLIENT)
708     if (cidr_limit_reached(IsConfExemptLimits(conf),
709     &client_p->localClient->ip, conf->class))
710 michael 1394 return TOO_MANY; /* Already at maximum allowed */
711 adx 30
712 michael 1632 conf->class->ref_count++;
713 michael 1644 conf->ref_count++;
714 adx 30
715     dlinkAdd(conf, make_dlink_node(), &client_p->localClient->confs);
716    
717     return 0;
718     }
719    
720     /* attach_connect_block()
721     *
722     * inputs - pointer to server to attach
723     * - name of server
724     * - hostname of server
725     * output - true (1) if both are found, otherwise return false (0)
726     * side effects - find connect block and attach them to connecting client
727     */
728     int
729     attach_connect_block(struct Client *client_p, const char *name,
730     const char *host)
731     {
732     dlink_node *ptr;
733 michael 1632 struct MaskItem *conf = NULL;
734 adx 30
735     assert(client_p != NULL);
736     assert(host != NULL);
737    
738     if (client_p == NULL || host == NULL)
739     return 0;
740    
741     DLINK_FOREACH(ptr, server_items.head)
742     {
743     conf = ptr->data;
744    
745 michael 1652 if (match(conf->name, name) || match(conf->host, host))
746 adx 30 continue;
747    
748     attach_conf(client_p, conf);
749     return -1;
750     }
751    
752     return 0;
753     }
754    
755     /* find_conf_name()
756     *
757     * inputs - pointer to conf link list to search
758     * - pointer to name to find
759     * - int mask of type of conf to find
760     * output - NULL or pointer to conf found
761     * side effects - find a conf entry which matches the name
762     * and has the given mask.
763     */
764 michael 1632 struct MaskItem *
765     find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
766 adx 30 {
767     dlink_node *ptr;
768 michael 1632 struct MaskItem* conf;
769 adx 30
770     DLINK_FOREACH(ptr, list->head)
771     {
772     conf = ptr->data;
773 michael 2916
774 adx 30 if (conf->type == type)
775     {
776 michael 3375 if (conf->name && (!irccmp(conf->name, name) ||
777 michael 1652 !match(conf->name, name)))
778 adx 30 return conf;
779     }
780     }
781    
782     return NULL;
783     }
784    
785     /* map_to_list()
786     *
787     * inputs - ConfType conf
788     * output - pointer to dlink_list to use
789     * side effects - none
790     */
791     static dlink_list *
792 michael 1632 map_to_list(enum maskitem_type type)
793 adx 30 {
794     switch(type)
795     {
796 michael 1632 case CONF_XLINE:
797 adx 30 return(&xconf_items);
798     break;
799 michael 1632 case CONF_ULINE:
800 adx 30 return(&uconf_items);
801     break;
802 michael 1632 case CONF_NRESV:
803 adx 30 return(&nresv_items);
804     break;
805 michael 1825 case CONF_CRESV:
806 michael 2174 return(&cresv_items);
807 michael 1632 case CONF_OPER:
808 adx 30 return(&oconf_items);
809     break;
810 michael 1632 case CONF_SERVER:
811 adx 30 return(&server_items);
812     break;
813 michael 1632 case CONF_SERVICE:
814 michael 1172 return(&service_items);
815     break;
816 michael 1632 case CONF_CLUSTER:
817 adx 30 return(&cluster_items);
818     break;
819     default:
820     return NULL;
821     }
822     }
823    
824     /* find_matching_name_conf()
825     *
826     * inputs - type of link list to look in
827     * - pointer to name string to find
828     * - pointer to user
829     * - pointer to host
830 michael 1644 * - optional flags to match on as well
831 michael 1632 * output - NULL or pointer to found struct MaskItem
832 adx 30 * side effects - looks for a match on name field
833     */
834 michael 1632 struct MaskItem *
835     find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
836 michael 1644 const char *host, unsigned int flags)
837 adx 30 {
838     dlink_node *ptr=NULL;
839 michael 1632 struct MaskItem *conf=NULL;
840 adx 30 dlink_list *list_p = map_to_list(type);
841    
842     switch (type)
843     {
844 michael 1632 case CONF_SERVICE:
845 michael 1157 DLINK_FOREACH(ptr, list_p->head)
846     {
847     conf = ptr->data;
848    
849     if (EmptyString(conf->name))
850     continue;
851     if ((name != NULL) && !irccmp(name, conf->name))
852     return conf;
853     }
854     break;
855    
856 michael 1632 case CONF_XLINE:
857     case CONF_ULINE:
858     case CONF_NRESV:
859 michael 1825 case CONF_CRESV:
860 adx 30 DLINK_FOREACH(ptr, list_p->head)
861     {
862     conf = ptr->data;
863    
864     if (EmptyString(conf->name))
865 michael 2182 continue;
866 michael 1653 if ((name != NULL) && !match(conf->name, name))
867 adx 30 {
868 michael 2182 if ((user == NULL && (host == NULL)))
869     return conf;
870     if ((conf->flags & flags) != flags)
871 adx 30 continue;
872 michael 2182 if (EmptyString(conf->user) || EmptyString(conf->host))
873     return conf;
874     if (!match(conf->user, user) && !match(conf->host, host))
875     return conf;
876 adx 30 }
877     }
878     break;
879    
880 michael 1632 case CONF_SERVER:
881 adx 30 DLINK_FOREACH(ptr, list_p->head)
882     {
883     conf = ptr->data;
884    
885 michael 1652 if ((name != NULL) && !match(name, conf->name))
886 adx 30 return conf;
887 michael 1652 else if ((host != NULL) && !match(host, conf->host))
888 adx 30 return conf;
889     }
890     break;
891 michael 2916
892 adx 30 default:
893     break;
894     }
895     return NULL;
896     }
897    
898     /* find_exact_name_conf()
899     *
900     * inputs - type of link list to look in
901     * - pointer to name string to find
902     * - pointer to user
903     * - pointer to host
904 michael 1632 * output - NULL or pointer to found struct MaskItem
905 adx 30 * side effects - looks for an exact match on name field
906     */
907 michael 1632 struct MaskItem *
908     find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
909 adx 30 const char *user, const char *host)
910     {
911     dlink_node *ptr = NULL;
912 michael 1632 struct MaskItem *conf;
913     dlink_list *list_p = map_to_list(type);
914 adx 30
915     switch(type)
916     {
917 michael 1632 case CONF_XLINE:
918     case CONF_ULINE:
919     case CONF_NRESV:
920 michael 1825 case CONF_CRESV:
921 adx 30
922     DLINK_FOREACH(ptr, list_p->head)
923     {
924     conf = ptr->data;
925 michael 1632
926 adx 30 if (EmptyString(conf->name))
927 michael 2182 continue;
928 michael 2916
929 adx 30 if (irccmp(conf->name, name) == 0)
930     {
931 michael 2182 if ((user == NULL && (host == NULL)))
932     return conf;
933     if (EmptyString(conf->user) || EmptyString(conf->host))
934     return conf;
935     if (!match(conf->user, user) && !match(conf->host, host))
936     return conf;
937 adx 30 }
938     }
939     break;
940    
941 michael 1632 case CONF_OPER:
942 adx 30 DLINK_FOREACH(ptr, list_p->head)
943     {
944     conf = ptr->data;
945 michael 1285
946 adx 30 if (EmptyString(conf->name))
947 michael 1285 continue;
948    
949     if (!irccmp(conf->name, name))
950 adx 30 {
951 michael 1285 if (!who)
952     return conf;
953 michael 1632 if (EmptyString(conf->user) || EmptyString(conf->host))
954 michael 1636 return NULL;
955 michael 1652 if (!match(conf->user, who->username))
956 michael 1285 {
957 michael 1632 switch (conf->htype)
958 michael 1285 {
959     case HM_HOST:
960 michael 1652 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
961 michael 1637 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
962     return conf;
963 michael 1285 break;
964     case HM_IPV4:
965     if (who->localClient->aftype == AF_INET)
966 michael 1632 if (match_ipv4(&who->localClient->ip, &conf->addr, conf->bits))
967 michael 1637 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
968     return conf;
969 michael 1285 break;
970     #ifdef IPV6
971     case HM_IPV6:
972     if (who->localClient->aftype == AF_INET6)
973 michael 1632 if (match_ipv6(&who->localClient->ip, &conf->addr, conf->bits))
974 michael 1637 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
975     return conf;
976 michael 1285 break;
977     #endif
978     default:
979     assert(0);
980     }
981     }
982 adx 30 }
983     }
984 michael 1285
985 adx 30 break;
986    
987 michael 1632 case CONF_SERVER:
988 adx 30 DLINK_FOREACH(ptr, list_p->head)
989     {
990     conf = ptr->data;
991 michael 1632
992 adx 30 if (EmptyString(conf->name))
993 michael 2182 continue;
994 michael 2916
995 adx 30 if (name == NULL)
996     {
997 michael 2182 if (EmptyString(conf->host))
998     continue;
999     if (irccmp(conf->host, host) == 0)
1000     return conf;
1001 adx 30 }
1002     else if (irccmp(conf->name, name) == 0)
1003 michael 2182 return conf;
1004 adx 30 }
1005 michael 2182
1006 adx 30 break;
1007    
1008     default:
1009     break;
1010     }
1011 michael 2182
1012     return NULL;
1013 adx 30 }
1014    
1015     /* rehash()
1016     *
1017     * Actual REHASH service routine. Called with sig == 0 if it has been called
1018     * as a result of an operator issuing this command, else assume it has been
1019     * called as a result of the server receiving a HUP signal.
1020     */
1021     int
1022     rehash(int sig)
1023     {
1024 michael 3235 if (sig)
1025 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1026 michael 2830 "Got signal SIGHUP, reloading configuration file(s)");
1027 adx 30
1028     restart_resolver();
1029 michael 1001
1030 adx 30 /* don't close listeners until we know we can go ahead with the rehash */
1031    
1032     /* Check to see if we magically got(or lost) IPv6 support */
1033     check_can_use_v6();
1034    
1035     read_conf_files(0);
1036    
1037 michael 3235 if (ServerInfo.description)
1038 adx 30 strlcpy(me.info, ServerInfo.description, sizeof(me.info));
1039    
1040     load_conf_modules();
1041 michael 3929 check_conf_klines();
1042 adx 30
1043 michael 1831 return 0;
1044 adx 30 }
1045    
1046     /* set_default_conf()
1047     *
1048     * inputs - NONE
1049     * output - NONE
1050     * side effects - Set default values here.
1051     * This is called **PRIOR** to parsing the
1052     * configuration file. If you want to do some validation
1053     * of values later, put them in validate_conf().
1054     */
1055     static void
1056     set_default_conf(void)
1057     {
1058     /* verify init_class() ran, this should be an unnecessary check
1059     * but its not much work.
1060     */
1061 michael 1644 assert(class_default == class_get_list()->tail->data);
1062 adx 30
1063     #ifdef HAVE_LIBCRYPTO
1064 michael 4114 ServerInfo.message_digest_algorithm = EVP_sha256();
1065 adx 30 ServerInfo.rsa_private_key = NULL;
1066     ServerInfo.rsa_private_key_file = NULL;
1067     #endif
1068    
1069     /* ServerInfo.name is not rehashable */
1070     /* ServerInfo.name = ServerInfo.name; */
1071     ServerInfo.description = NULL;
1072 michael 1646 ServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
1073     ServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
1074 adx 30
1075     memset(&ServerInfo.ip, 0, sizeof(ServerInfo.ip));
1076     ServerInfo.specific_ipv4_vhost = 0;
1077     memset(&ServerInfo.ip6, 0, sizeof(ServerInfo.ip6));
1078     ServerInfo.specific_ipv6_vhost = 0;
1079    
1080     ServerInfo.max_clients = MAXCLIENTS_MAX;
1081 michael 1751 ServerInfo.max_nick_length = 9;
1082     ServerInfo.max_topic_length = 80;
1083 michael 956
1084     ServerInfo.hub = 0;
1085 adx 30 ServerInfo.dns_host.sin_addr.s_addr = 0;
1086     ServerInfo.dns_host.sin_port = 0;
1087     AdminInfo.name = NULL;
1088     AdminInfo.email = NULL;
1089     AdminInfo.description = NULL;
1090    
1091 michael 1831 log_del_all();
1092 michael 1247
1093 adx 30 ConfigLoggingEntry.use_logging = 1;
1094    
1095 michael 1243 ConfigChannel.disable_fake_channels = 0;
1096 michael 3860 ConfigChannel.invite_client_count = 10;
1097     ConfigChannel.invite_client_time = 300;
1098     ConfigChannel.knock_client_count = 1;
1099     ConfigChannel.knock_client_time = 300;
1100 adx 30 ConfigChannel.knock_delay_channel = 60;
1101 michael 3933 ConfigChannel.max_channels = 25;
1102 adx 30 ConfigChannel.max_bans = 25;
1103     ConfigChannel.default_split_user_count = 0;
1104     ConfigChannel.default_split_server_count = 0;
1105 michael 1243 ConfigChannel.no_join_on_split = 0;
1106     ConfigChannel.no_create_on_split = 0;
1107 adx 30
1108 michael 1243 ConfigServerHide.flatten_links = 0;
1109 adx 30 ConfigServerHide.links_delay = 300;
1110 michael 1243 ConfigServerHide.hidden = 0;
1111     ConfigServerHide.hide_servers = 0;
1112 michael 1851 ConfigServerHide.hide_services = 0;
1113 michael 1646 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
1114 michael 1243 ConfigServerHide.hide_server_ips = 0;
1115 michael 2196 ConfigServerHide.disable_remote_commands = 0;
1116 adx 30
1117 michael 1646 ConfigFileEntry.service_name = xstrdup(SERVICE_NAME_DEFAULT);
1118 michael 876 ConfigFileEntry.max_watch = WATCHSIZE_DEFAULT;
1119 michael 2283 ConfigFileEntry.cycle_on_host_change = 1;
1120 michael 1459 ConfigFileEntry.glines = 0;
1121     ConfigFileEntry.gline_time = 12 * 3600;
1122     ConfigFileEntry.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
1123 adx 30 ConfigFileEntry.gline_min_cidr = 16;
1124     ConfigFileEntry.gline_min_cidr6 = 48;
1125 michael 1243 ConfigFileEntry.invisible_on_connect = 1;
1126     ConfigFileEntry.tkline_expire_notices = 1;
1127     ConfigFileEntry.hide_spoof_ips = 1;
1128     ConfigFileEntry.ignore_bogus_ts = 0;
1129     ConfigFileEntry.disable_auth = 0;
1130 adx 30 ConfigFileEntry.kill_chase_time_limit = 90;
1131 michael 1119 ConfigFileEntry.default_floodcount = 8;
1132 michael 1243 ConfigFileEntry.failed_oper_notice = 1;
1133 michael 1119 ConfigFileEntry.dots_in_ident = 0;
1134 adx 30 ConfigFileEntry.min_nonwildcard = 4;
1135     ConfigFileEntry.min_nonwildcard_simple = 3;
1136     ConfigFileEntry.max_accept = 20;
1137 michael 1243 ConfigFileEntry.anti_nick_flood = 0;
1138 adx 30 ConfigFileEntry.max_nick_time = 20;
1139     ConfigFileEntry.max_nick_changes = 5;
1140 michael 1119 ConfigFileEntry.anti_spam_exit_message_time = 0;
1141 adx 30 ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
1142 michael 1119 ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
1143 michael 3473 ConfigFileEntry.warn_no_connect_block = 1;
1144 michael 3780 ConfigFileEntry.stats_e_disabled = 0;
1145 michael 1243 ConfigFileEntry.stats_o_oper_only = 0;
1146 michael 3375 ConfigFileEntry.stats_k_oper_only = 1; /* 1 = masked */
1147     ConfigFileEntry.stats_i_oper_only = 1; /* 1 = masked */
1148 michael 1243 ConfigFileEntry.stats_P_oper_only = 0;
1149 michael 2269 ConfigFileEntry.stats_u_oper_only = 0;
1150 adx 30 ConfigFileEntry.caller_id_wait = 60;
1151 michael 1243 ConfigFileEntry.opers_bypass_callerid = 0;
1152 adx 30 ConfigFileEntry.pace_wait = 10;
1153     ConfigFileEntry.pace_wait_simple = 1;
1154 michael 1243 ConfigFileEntry.short_motd = 0;
1155     ConfigFileEntry.ping_cookie = 0;
1156     ConfigFileEntry.no_oper_flood = 0;
1157     ConfigFileEntry.true_no_oper_flood = 0;
1158     ConfigFileEntry.oper_pass_resv = 1;
1159 adx 30 ConfigFileEntry.max_targets = MAX_TARGETS_DEFAULT;
1160 michael 1119 ConfigFileEntry.oper_only_umodes = UMODE_DEBUG;
1161 michael 3869 ConfigFileEntry.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
1162 michael 1243 ConfigFileEntry.use_egd = 0;
1163 adx 30 ConfigFileEntry.egdpool_path = NULL;
1164 michael 4068 ConfigFileEntry.throttle_count = 1;
1165     ConfigFileEntry.throttle_time = 1;
1166 adx 30 }
1167    
1168     static void
1169     validate_conf(void)
1170     {
1171     if (ConfigFileEntry.ts_warn_delta < TS_WARN_DELTA_MIN)
1172     ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
1173    
1174     if (ConfigFileEntry.ts_max_delta < TS_MAX_DELTA_MIN)
1175     ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
1176    
1177     if (ServerInfo.network_name == NULL)
1178 michael 1646 ServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
1179 adx 30
1180     if (ServerInfo.network_desc == NULL)
1181 michael 1646 ServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
1182 adx 30
1183 michael 1157 if (ConfigFileEntry.service_name == NULL)
1184 michael 1646 ConfigFileEntry.service_name = xstrdup(SERVICE_NAME_DEFAULT);
1185 michael 1157
1186 michael 876 ConfigFileEntry.max_watch = IRCD_MAX(ConfigFileEntry.max_watch, WATCHSIZE_MIN);
1187 adx 30 }
1188    
1189 michael 2916 /* read_conf()
1190 michael 1363 *
1191     * inputs - file descriptor pointing to config file to use
1192     * output - None
1193     * side effects - Read configuration file.
1194     */
1195     static void
1196     read_conf(FILE *file)
1197     {
1198     lineno = 0;
1199    
1200 michael 3375 set_default_conf(); /* Set default values prior to conf parsing */
1201 michael 1363 conf_parser_ctx.pass = 1;
1202 michael 3375 yyparse(); /* Pick up the classes first */
1203 michael 1363
1204     rewind(file);
1205    
1206     conf_parser_ctx.pass = 2;
1207 michael 3375 yyparse(); /* Load the values from the conf */
1208     validate_conf(); /* Check to make sure some values are still okay. */
1209     /* Some global values are also loaded here. */
1210     class_delete_marked(); /* Delete unused classes that are marked for deletion */
1211 michael 1363 }
1212    
1213 adx 30 /* lookup_confhost()
1214     *
1215     * start DNS lookups of all hostnames in the conf
1216     * line and convert an IP addresses in a.b.c.d number for to IP#s.
1217     */
1218 michael 1647 void
1219 michael 1632 lookup_confhost(struct MaskItem *conf)
1220 adx 30 {
1221     struct addrinfo hints, *res;
1222    
1223 michael 3375 /*
1224     * Do name lookup now on hostnames given and store the
1225 adx 30 * ip numbers in conf structure.
1226     */
1227     memset(&hints, 0, sizeof(hints));
1228    
1229     hints.ai_family = AF_UNSPEC;
1230     hints.ai_socktype = SOCK_STREAM;
1231    
1232     /* Get us ready for a bind() and don't bother doing dns lookup */
1233     hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
1234    
1235 michael 1632 if (getaddrinfo(conf->host, NULL, &hints, &res))
1236 adx 30 {
1237 michael 1632 conf_dns_lookup(conf);
1238 adx 30 return;
1239     }
1240    
1241 michael 3235 assert(res);
1242 adx 30
1243 michael 1632 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
1244     conf->addr.ss_len = res->ai_addrlen;
1245     conf->addr.ss.ss_family = res->ai_family;
1246    
1247 michael 1123 freeaddrinfo(res);
1248 adx 30 }
1249    
1250     /* conf_connect_allowed()
1251     *
1252     * inputs - pointer to inaddr
1253     * - int type ipv4 or ipv6
1254     * output - BANNED or accepted
1255     * side effects - none
1256     */
1257     int
1258     conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1259     {
1260 michael 3877 struct ip_entry *ip_found = NULL;
1261 michael 1632 struct MaskItem *conf = find_dline_conf(addr, aftype);
1262 adx 30
1263     /* DLINE exempt also gets you out of static limits/pacing... */
1264 michael 1636 if (conf && (conf->type == CONF_EXEMPT))
1265 adx 30 return 0;
1266    
1267 michael 3235 if (conf)
1268 adx 30 return BANNED_CLIENT;
1269    
1270     ip_found = find_or_add_ip(addr);
1271    
1272 michael 3877 if ((CurrentTime - ip_found->last_attempt) < ConfigFileEntry.throttle_time)
1273 adx 30 {
1274 michael 3877 if (ip_found->connection_count >= ConfigFileEntry.throttle_count)
1275     return TOO_FAST;
1276 michael 4055
1277     ++ip_found->connection_count;
1278 adx 30 }
1279 michael 3877 else
1280     ip_found->connection_count = 1;
1281 adx 30
1282     ip_found->last_attempt = CurrentTime;
1283     return 0;
1284     }
1285    
1286     /* cleanup_tklines()
1287     *
1288     * inputs - NONE
1289     * output - NONE
1290     * side effects - call function to expire temporary k/d lines
1291     * This is an event started off in ircd.c
1292     */
1293     void
1294     cleanup_tklines(void *notused)
1295     {
1296 michael 1369 hostmask_expire_temporary();
1297 michael 2916 expire_tklines(&xconf_items);
1298 michael 1628 expire_tklines(&nresv_items);
1299 michael 2174 expire_tklines(&cresv_items);
1300 adx 30 }
1301    
1302     /* expire_tklines()
1303     *
1304     * inputs - tkline list pointer
1305     * output - NONE
1306     * side effects - expire tklines
1307     */
1308     static void
1309     expire_tklines(dlink_list *tklist)
1310     {
1311 michael 3235 dlink_node *ptr = NULL, *ptr_next = NULL;
1312     struct MaskItem *conf = NULL;
1313 adx 30
1314 michael 3235 DLINK_FOREACH_SAFE(ptr, ptr_next, tklist->head)
1315 adx 30 {
1316     conf = ptr->data;
1317    
1318 michael 1649 if (!conf->until || conf->until > CurrentTime)
1319 michael 1644 continue;
1320    
1321 michael 1632 if (conf->type == CONF_XLINE)
1322 adx 30 {
1323 michael 1644 if (ConfigFileEntry.tkline_expire_notices)
1324     sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1325 michael 1618 "Temporary X-line for [%s] expired", conf->name);
1326 michael 1644 conf_free(conf);
1327 adx 30 }
1328 michael 1825 else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1329 adx 30 {
1330 michael 1644 if (ConfigFileEntry.tkline_expire_notices)
1331     sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1332 adx 30 "Temporary RESV for [%s] expired", conf->name);
1333 michael 1644 conf_free(conf);
1334 adx 30 }
1335     }
1336     }
1337    
1338     /* oper_privs_as_string()
1339     *
1340 michael 58 * inputs - pointer to client_p
1341 adx 30 * output - pointer to static string showing oper privs
1342     * side effects - return as string, the oper privs as derived from port
1343     */
1344 michael 58 static const struct oper_privs
1345     {
1346 michael 1644 const unsigned int flag;
1347 michael 58 const unsigned char c;
1348     } flag_list[] = {
1349 michael 2012 { OPER_FLAG_ADMIN, 'A' },
1350     { OPER_FLAG_REMOTEBAN, 'B' },
1351     { OPER_FLAG_DIE, 'D' },
1352     { OPER_FLAG_GLINE, 'G' },
1353     { OPER_FLAG_REHASH, 'H' },
1354 michael 4019 { OPER_FLAG_KLINE, 'K' },
1355 michael 2012 { OPER_FLAG_KILL, 'N' },
1356     { OPER_FLAG_KILL_REMOTE, 'O' },
1357     { OPER_FLAG_CONNECT, 'P' },
1358     { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1359     { OPER_FLAG_SQUIT, 'R' },
1360     { OPER_FLAG_SQUIT_REMOTE, 'S' },
1361     { OPER_FLAG_UNKLINE, 'U' },
1362 michael 2852 { OPER_FLAG_XLINE, 'X' },
1363 michael 1294 { 0, '\0' }
1364 michael 58 };
1365 adx 30
1366     char *
1367     oper_privs_as_string(const unsigned int port)
1368     {
1369 michael 2694 static char privs_out[IRCD_BUFSIZE];
1370 michael 58 char *privs_ptr = privs_out;
1371 adx 30
1372 michael 3283 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1373 michael 58 {
1374 michael 1644 if (port & opriv->flag)
1375     *privs_ptr++ = opriv->c;
1376 michael 58 else
1377 michael 1644 *privs_ptr++ = ToLower(opriv->c);
1378 michael 58 }
1379    
1380     *privs_ptr = '\0';
1381    
1382 adx 30 return privs_out;
1383     }
1384    
1385     /*
1386     * Input: A client to find the active oper{} name for.
1387     * Output: The nick!user@host{oper} of the oper.
1388     * "oper" is server name for remote opers
1389     * Side effects: None.
1390     */
1391 michael 1364 const char *
1392 adx 30 get_oper_name(const struct Client *client_p)
1393     {
1394 michael 3009 const dlink_node *cnode = NULL;
1395 adx 30 /* +5 for !,@,{,} and null */
1396 michael 1147 static char buffer[NICKLEN + USERLEN + HOSTLEN + HOSTLEN + 5];
1397 adx 30
1398     if (MyConnect(client_p))
1399     {
1400 michael 1364 if ((cnode = client_p->localClient->confs.head))
1401 adx 30 {
1402 michael 3009 const struct MaskItem *conf = cnode->data;
1403 adx 30
1404 michael 1632 if (IsConfOperator(conf))
1405 adx 30 {
1406 michael 2182 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1407 michael 1147 client_p->username, client_p->host, conf->name);
1408 michael 2182 return buffer;
1409 adx 30 }
1410     }
1411    
1412 michael 2916 /* Probably should assert here for now. If there is an oper out there
1413 adx 30 * with no oper{} conf attached, it would be good for us to know...
1414     */
1415     assert(0); /* Oper without oper conf! */
1416     }
1417    
1418 michael 1147 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1419 michael 2182 client_p->username, client_p->host, client_p->servptr->name);
1420 adx 30 return buffer;
1421     }
1422    
1423     /* read_conf_files()
1424     *
1425     * inputs - cold start YES or NO
1426     * output - none
1427     * side effects - read all conf files needed, ircd.conf kline.conf etc.
1428     */
1429     void
1430     read_conf_files(int cold)
1431     {
1432 michael 3375 const char *filename = NULL;
1433     char chanmodes[IRCD_BUFSIZE] = "";
1434     char chanlimit[IRCD_BUFSIZE] = "";
1435 adx 30
1436 michael 967 conf_parser_ctx.boot = cold;
1437 michael 1622 filename = ConfigFileEntry.configfile;
1438 adx 30
1439     /* We need to know the initial filename for the yyerror() to report
1440     FIXME: The full path is in conffilenamebuf first time since we
1441     dont know anything else
1442    
1443 michael 2916 - Gozem 2002-07-21
1444 adx 30 */
1445     strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1446    
1447 michael 1325 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1448 adx 30 {
1449     if (cold)
1450     {
1451 michael 1247 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1452 adx 30 filename, strerror(errno));
1453     exit(-1);
1454     }
1455     else
1456     {
1457 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1458 michael 2182 "Unable to read configuration file '%s': %s",
1459     filename, strerror(errno));
1460 adx 30 return;
1461     }
1462     }
1463    
1464     if (!cold)
1465     clear_out_old_conf();
1466    
1467 michael 967 read_conf(conf_parser_ctx.conf_file);
1468 michael 1325 fclose(conf_parser_ctx.conf_file);
1469 adx 30
1470 michael 1831 log_reopen_all();
1471    
1472 michael 1751 add_isupport("NICKLEN", NULL, ServerInfo.max_nick_length);
1473 adx 30 add_isupport("NETWORK", ServerInfo.network_name, -1);
1474 michael 1751
1475     snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1476 adx 30 add_isupport("MAXLIST", chanmodes, -1);
1477     add_isupport("MAXTARGETS", NULL, ConfigFileEntry.max_targets);
1478 michael 1474 add_isupport("CHANTYPES", "#", -1);
1479 michael 1147
1480 michael 1474 snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1481 michael 3933 ConfigChannel.max_channels);
1482 adx 30 add_isupport("CHANLIMIT", chanlimit, -1);
1483 michael 4054 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstMORS");
1484 michael 3421 add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1485 michael 1751 add_isupport("TOPICLEN", NULL, ServerInfo.max_topic_length);
1486 adx 30 add_isupport("CHANMODES", chanmodes, -1);
1487    
1488     /*
1489     * message_locale may have changed. rebuild isupport since it relies
1490     * on strlen(form_str(RPL_ISUPPORT))
1491     */
1492     rebuild_isupport_message_line();
1493     }
1494    
1495     /* clear_out_old_conf()
1496     *
1497     * inputs - none
1498     * output - none
1499     * side effects - Clear out the old configuration
1500     */
1501     static void
1502     clear_out_old_conf(void)
1503     {
1504     dlink_node *ptr = NULL, *next_ptr = NULL;
1505 michael 1632 struct MaskItem *conf;
1506 adx 30 dlink_list *free_items [] = {
1507 michael 1383 &server_items, &oconf_items,
1508 michael 1921 &uconf_items, &xconf_items,
1509 michael 2174 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1510 adx 30 };
1511    
1512     dlink_list ** iterator = free_items; /* C is dumb */
1513    
1514     /* We only need to free anything allocated by yyparse() here.
1515     * Resetting structs, etc, is taken care of by set_default_conf().
1516     */
1517 michael 2916
1518 adx 30 for (; *iterator != NULL; iterator++)
1519     {
1520     DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
1521     {
1522     conf = ptr->data;
1523 michael 1632
1524     dlinkDelete(&conf->node, map_to_list(conf->type));
1525    
1526 adx 30 /* XXX This is less than pretty */
1527 michael 1632 if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1528 adx 30 {
1529 michael 1644 if (!conf->ref_count)
1530 michael 2182 conf_free(conf);
1531 adx 30 }
1532 michael 1921 else if (conf->type == CONF_XLINE)
1533 adx 30 {
1534 michael 1649 if (!conf->until)
1535 michael 1632 conf_free(conf);
1536 adx 30 }
1537     else
1538 michael 1632 conf_free(conf);
1539 adx 30 }
1540     }
1541    
1542 michael 2150 motd_clear();
1543    
1544 michael 671 /*
1545     * don't delete the class table, rather mark all entries
1546 michael 1632 * for deletion. The table is cleaned up by class_delete_marked. - avalon
1547 adx 30 */
1548 michael 1632 class_mark_for_deletion();
1549 michael 671
1550 adx 30 clear_out_address_conf();
1551    
1552     /* clean out module paths */
1553     mod_clear_paths();
1554    
1555     /* clean out ServerInfo */
1556     MyFree(ServerInfo.description);
1557     ServerInfo.description = NULL;
1558     MyFree(ServerInfo.network_name);
1559     ServerInfo.network_name = NULL;
1560     MyFree(ServerInfo.network_desc);
1561     ServerInfo.network_desc = NULL;
1562     MyFree(ConfigFileEntry.egdpool_path);
1563     ConfigFileEntry.egdpool_path = NULL;
1564     #ifdef HAVE_LIBCRYPTO
1565 michael 3235 if (ServerInfo.rsa_private_key)
1566 adx 30 {
1567     RSA_free(ServerInfo.rsa_private_key);
1568     ServerInfo.rsa_private_key = NULL;
1569     }
1570    
1571     MyFree(ServerInfo.rsa_private_key_file);
1572     ServerInfo.rsa_private_key_file = NULL;
1573 michael 1316
1574     if (ServerInfo.server_ctx)
1575     SSL_CTX_set_options(ServerInfo.server_ctx, SSL_OP_NO_SSLv2|
1576     SSL_OP_NO_SSLv3|
1577     SSL_OP_NO_TLSv1);
1578     if (ServerInfo.client_ctx)
1579     SSL_CTX_set_options(ServerInfo.client_ctx, SSL_OP_NO_SSLv2|
1580     SSL_OP_NO_SSLv3|
1581     SSL_OP_NO_TLSv1);
1582 adx 30 #endif
1583    
1584     /* clean out AdminInfo */
1585     MyFree(AdminInfo.name);
1586     AdminInfo.name = NULL;
1587     MyFree(AdminInfo.email);
1588     AdminInfo.email = NULL;
1589     MyFree(AdminInfo.description);
1590     AdminInfo.description = NULL;
1591    
1592     /* clean out listeners */
1593     close_listeners();
1594    
1595     /* clean out general */
1596 michael 1157 MyFree(ConfigFileEntry.service_name);
1597     ConfigFileEntry.service_name = NULL;
1598 adx 30 }
1599    
1600     /* conf_add_class_to_conf()
1601     *
1602     * inputs - pointer to config item
1603     * output - NONE
1604 michael 2916 * side effects - Add a class pointer to a conf
1605 adx 30 */
1606     void
1607 michael 1632 conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1608 adx 30 {
1609 michael 2916 if (class_name == NULL)
1610 adx 30 {
1611 michael 1632 conf->class = class_default;
1612 michael 671
1613 michael 1632 if (conf->type == CONF_CLIENT)
1614 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1615 michael 2182 "Warning *** Defaulting to default class for %s@%s",
1616     conf->user, conf->host);
1617 adx 30 else
1618 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1619 michael 2182 "Warning *** Defaulting to default class for %s",
1620     conf->name);
1621 adx 30 }
1622     else
1623 michael 1632 conf->class = class_find(class_name, 1);
1624 adx 30
1625 michael 1632 if (conf->class == NULL)
1626 adx 30 {
1627 michael 1632 if (conf->type == CONF_CLIENT)
1628 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1629 michael 2182 "Warning *** Defaulting to default class for %s@%s",
1630     conf->user, conf->host);
1631 adx 30 else
1632 michael 1618 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1633 michael 2182 "Warning *** Defaulting to default class for %s",
1634     conf->name);
1635 michael 1632 conf->class = class_default;
1636 adx 30 }
1637     }
1638    
1639     /* yyerror()
1640     *
1641     * inputs - message from parser
1642     * output - NONE
1643     * side effects - message to opers and log file entry is made
1644     */
1645     void
1646     yyerror(const char *msg)
1647     {
1648     char newlinebuf[IRCD_BUFSIZE];
1649    
1650 michael 967 if (conf_parser_ctx.pass != 1)
1651 adx 30 return;
1652    
1653     strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1654 michael 1751 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1655 michael 1618 "\"%s\", line %u: %s: %s",
1656 adx 30 conffilebuf, lineno + 1, msg, newlinebuf);
1657 michael 1247 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1658 adx 30 conffilebuf, lineno + 1, msg, newlinebuf);
1659     }
1660    
1661 michael 1751 void
1662     conf_error_report(const char *msg)
1663     {
1664     char newlinebuf[IRCD_BUFSIZE];
1665    
1666     strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1667     sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1668     "\"%s\", line %u: %s: %s",
1669     conffilebuf, lineno + 1, msg, newlinebuf);
1670     ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1671     conffilebuf, lineno + 1, msg, newlinebuf);
1672     }
1673    
1674 adx 30 /*
1675     * valid_tkline()
1676 michael 2916 *
1677 adx 30 * inputs - pointer to ascii string to check
1678     * - whether the specified time is in seconds or minutes
1679     * output - -1 not enough parameters
1680     * - 0 if not an integer number, else the number
1681     * side effects - none
1682     * Originally written by Dianora (Diane, db@db.net)
1683     */
1684     time_t
1685 michael 2313 valid_tkline(const char *data, const int minutes)
1686 adx 30 {
1687 michael 2313 const unsigned char *p = (const unsigned char *)data;
1688     unsigned char tmpch = '\0';
1689 adx 30 time_t result = 0;
1690    
1691 michael 2313 while ((tmpch = *p++))
1692 adx 30 {
1693 michael 2313 if (!IsDigit(tmpch))
1694 michael 1121 return 0;
1695 michael 1120
1696     result *= 10;
1697 michael 2313 result += (tmpch & 0xF);
1698 adx 30 }
1699    
1700 michael 1120 /*
1701 michael 2916 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1702 adx 30 * i.e. they specifically use 0, I am going to return 1 instead
1703     * as a return value of non-zero is used to flag it as a temporary kline
1704     */
1705     if (result == 0)
1706     result = 1;
1707    
1708 michael 2916 /*
1709 adx 30 * If the incoming time is in seconds convert it to minutes for the purpose
1710     * of this calculation
1711     */
1712     if (!minutes)
1713 michael 2916 result = result / 60;
1714 adx 30
1715     if (result > MAX_TDKLINE_TIME)
1716     result = MAX_TDKLINE_TIME;
1717    
1718 michael 2313 result = result * 60; /* turn it into seconds */
1719 adx 30
1720     return result;
1721     }
1722    
1723 michael 2130 /* valid_wild_card_simple()
1724     *
1725     * inputs - data to check for sufficient non-wildcard characters
1726     * outputs - 1 if valid, else 0
1727     * side effects - none
1728     */
1729     int
1730     valid_wild_card_simple(const char *data)
1731     {
1732     const unsigned char *p = (const unsigned char *)data;
1733     unsigned char tmpch = '\0';
1734 michael 3870 unsigned int nonwild = 0;
1735 michael 2130
1736     while ((tmpch = *p++))
1737     {
1738     if (tmpch == '\\')
1739     {
1740     ++p;
1741     if (++nonwild >= ConfigFileEntry.min_nonwildcard_simple)
1742     return 1;
1743     }
1744     else if (!IsMWildChar(tmpch))
1745     {
1746     if (++nonwild >= ConfigFileEntry.min_nonwildcard_simple)
1747     return 1;
1748     }
1749     }
1750    
1751     return 0;
1752     }
1753    
1754 adx 30 /* valid_wild_card()
1755     *
1756     * input - pointer to client
1757     * - int flag, 0 for no warning oper 1 for warning oper
1758     * - count of following varargs to check
1759     * output - 0 if not valid, 1 if valid
1760     * side effects - NOTICE is given to source_p if warn is 1
1761     */
1762     int
1763     valid_wild_card(struct Client *source_p, int warn, int count, ...)
1764     {
1765 michael 3931 unsigned char tmpch = '\0';
1766 michael 3870 unsigned int nonwild = 0;
1767 adx 30 va_list args;
1768    
1769     /*
1770     * Now we must check the user and host to make sure there
1771     * are at least NONWILDCHARS non-wildcard characters in
1772     * them, otherwise assume they are attempting to kline
1773     * *@* or some variant of that. This code will also catch
1774     * people attempting to kline *@*.tld, as long as NONWILDCHARS
1775     * is greater than 3. In that case, there are only 3 non-wild
1776     * characters (tld), so if NONWILDCHARS is 4, the kline will
1777     * be disallowed.
1778     * -wnder
1779     */
1780    
1781     va_start(args, count);
1782    
1783     while (count--)
1784     {
1785 michael 3931 const unsigned char *p = va_arg(args, const unsigned char *);
1786 adx 30 if (p == NULL)
1787     continue;
1788    
1789     while ((tmpch = *p++))
1790     {
1791     if (!IsKWildChar(tmpch))
1792     {
1793     /*
1794     * If we find enough non-wild characters, we can
1795     * break - no point in searching further.
1796     */
1797     if (++nonwild >= ConfigFileEntry.min_nonwildcard)
1798 michael 2659 {
1799     va_end(args);
1800 adx 30 return 1;
1801 michael 2659 }
1802 adx 30 }
1803     }
1804     }
1805    
1806     if (warn)
1807 michael 3110 sendto_one_notice(source_p, &me,
1808 michael 4058 ":Please include at least %u non-wildcard characters with the mask",
1809 michael 3110 ConfigFileEntry.min_nonwildcard);
1810 michael 2659 va_end(args);
1811 adx 30 return 0;
1812     }
1813    
1814     /* XXX should this go into a separate file ? -Dianora */
1815     /* parse_aline
1816     *
1817     * input - pointer to cmd name being used
1818     * - pointer to client using cmd
1819     * - parc parameter count
1820     * - parv[] list of parameters to parse
1821     * - parse_flags bit map of things to test
1822     * - pointer to user or string to parse into
1823     * - pointer to host or NULL to parse into if non NULL
1824 michael 2916 * - pointer to optional tkline time or NULL
1825 adx 30 * - pointer to target_server to parse into if non NULL
1826     * - pointer to reason to parse into
1827     *
1828     * output - 1 if valid, -1 if not valid
1829     * side effects - A generalised k/d/x etc. line parser,
1830     * "ALINE [time] user@host|string [ON] target :reason"
1831     * will parse returning a parsed user, host if
1832     * h_p pointer is non NULL, string otherwise.
1833     * if tkline_time pointer is non NULL a tk line will be set
1834     * to non zero if found.
1835     * if tkline_time pointer is NULL and tk line is found,
1836     * error is reported.
1837     * if target_server is NULL and an "ON" is found error
1838     * is reported.
1839     * if reason pointer is NULL ignore pointer,
1840 db 936 * this allows use of parse_a_line in unkline etc.
1841 adx 30 *
1842     * - Dianora
1843     */
1844     int
1845     parse_aline(const char *cmd, struct Client *source_p,
1846 michael 2182 int parc, char **parv,
1847     int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1848     char **target_server, char **reason)
1849 adx 30 {
1850     int found_tkline_time=0;
1851 michael 3499 static char def_reason[] = CONF_NOREASON;
1852 adx 30 static char user[USERLEN*4+1];
1853     static char host[HOSTLEN*4+1];
1854    
1855     parv++;
1856     parc--;
1857    
1858     found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1859    
1860     if (found_tkline_time != 0)
1861     {
1862     parv++;
1863     parc--;
1864    
1865     if (tkline_time != NULL)
1866     *tkline_time = found_tkline_time;
1867     else
1868     {
1869 michael 3110 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1870 adx 30 return -1;
1871     }
1872     }
1873    
1874     if (parc == 0)
1875     {
1876 michael 3109 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1877 adx 30 return -1;
1878     }
1879    
1880     if (h_p == NULL)
1881     *up_p = *parv;
1882     else
1883     {
1884     if (find_user_host(source_p, *parv, user, host, parse_flags) == 0)
1885     return -1;
1886    
1887     *up_p = user;
1888     *h_p = host;
1889     }
1890 michael 2916
1891 adx 30 parc--;
1892     parv++;
1893    
1894     if (parc != 0)
1895     {
1896     if (irccmp(*parv, "ON") == 0)
1897     {
1898     parc--;
1899     parv++;
1900    
1901     if (target_server == NULL)
1902     {
1903 michael 3110 sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1904 michael 2182 return -1;
1905 adx 30 }
1906    
1907 michael 1219 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1908 adx 30 {
1909 michael 3109 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1910 adx 30 return -1;
1911     }
1912    
1913     if (parc == 0 || EmptyString(*parv))
1914     {
1915 michael 3109 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1916 michael 2182 return -1;
1917 adx 30 }
1918    
1919     *target_server = *parv;
1920     parc--;
1921     parv++;
1922     }
1923     else
1924     {
1925     /* Make sure target_server *is* NULL if no ON server found
1926     * caller probably NULL'd it first, but no harm to do it again -db
1927     */
1928     if (target_server != NULL)
1929 michael 2182 *target_server = NULL;
1930 adx 30 }
1931     }
1932    
1933     if (h_p != NULL)
1934     {
1935     if (strchr(user, '!') != NULL)
1936     {
1937 michael 3110 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1938 adx 30 return -1;
1939     }
1940    
1941 michael 1243 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 2, *up_p, *h_p))
1942 adx 30 return -1;
1943     }
1944     else
1945 michael 1243 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 1, *up_p))
1946 adx 30 return -1;
1947    
1948     if (reason != NULL)
1949     {
1950 michael 867 if (parc != 0 && !EmptyString(*parv))
1951 adx 30 {
1952     *reason = *parv;
1953 michael 1243 if (!valid_comment(source_p, *reason, 1))
1954 michael 2182 return -1;
1955 adx 30 }
1956     else
1957     *reason = def_reason;
1958     }
1959    
1960     return 1;
1961     }
1962    
1963     /* find_user_host()
1964     *
1965     * inputs - pointer to client placing kline
1966     * - pointer to user_host_or_nick
1967     * - pointer to user buffer
1968     * - pointer to host buffer
1969     * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1970     * side effects -
1971     */
1972     static int
1973     find_user_host(struct Client *source_p, char *user_host_or_nick,
1974     char *luser, char *lhost, unsigned int flags)
1975     {
1976     struct Client *target_p = NULL;
1977     char *hostp = NULL;
1978    
1979     if (lhost == NULL)
1980     {
1981     strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1982     return 1;
1983     }
1984    
1985     if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1986     {
1987     /* Explicit user@host mask given */
1988    
1989 michael 593 if (hostp != NULL) /* I'm a little user@host */
1990 adx 30 {
1991     *(hostp++) = '\0'; /* short and squat */
1992     if (*user_host_or_nick)
1993 michael 2182 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1994 adx 30 else
1995 michael 2182 strcpy(luser, "*");
1996    
1997 adx 30 if (*hostp)
1998 michael 2182 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1999 adx 30 else
2000 michael 2182 strcpy(lhost, "*");
2001 adx 30 }
2002     else
2003     {
2004     luser[0] = '*'; /* no @ found, assume its *@somehost */
2005 michael 2182 luser[1] = '\0';
2006 adx 30 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
2007     }
2008 michael 2916
2009 adx 30 return 1;
2010     }
2011 michael 1518 else
2012 adx 30 {
2013     /* Try to find user@host mask from nick */
2014     /* Okay to use source_p as the first param, because source_p == client_p */
2015 michael 2916 if ((target_p =
2016 michael 3192 find_chasing(source_p, user_host_or_nick)) == NULL)
2017 michael 3737 return 0; /* find_chasing sends ERR_NOSUCHNICK */
2018 adx 30
2019     if (IsExemptKline(target_p))
2020     {
2021     if (!IsServer(source_p))
2022 michael 3110 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
2023 adx 30 return 0;
2024     }
2025    
2026     /*
2027     * turn the "user" bit into "*user", blow away '~'
2028     * if found in original user name (non-idented)
2029     */
2030     strlcpy(luser, target_p->username, USERLEN*4 + 1);
2031    
2032     if (target_p->username[0] == '~')
2033     luser[0] = '*';
2034    
2035     if (target_p->sockhost[0] == '\0' ||
2036     (target_p->sockhost[0] == '0' && target_p->sockhost[1] == '\0'))
2037     strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
2038     else
2039     strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
2040     return 1;
2041     }
2042    
2043     return 0;
2044     }
2045    
2046     /* valid_comment()
2047     *
2048     * inputs - pointer to client
2049     * - pointer to comment
2050     * output - 0 if no valid comment,
2051     * - 1 if valid
2052     * side effects - truncates reason where necessary
2053     */
2054     int
2055     valid_comment(struct Client *source_p, char *comment, int warn)
2056     {
2057     if (strlen(comment) > REASONLEN)
2058     comment[REASONLEN-1] = '\0';
2059    
2060     return 1;
2061     }
2062    
2063     /* match_conf_password()
2064     *
2065     * inputs - pointer to given password
2066     * - pointer to Conf
2067     * output - 1 or 0 if match
2068     * side effects - none
2069     */
2070     int
2071 michael 1632 match_conf_password(const char *password, const struct MaskItem *conf)
2072 adx 30 {
2073     const char *encr = NULL;
2074    
2075 michael 1632 if (EmptyString(password) || EmptyString(conf->passwd))
2076 adx 30 return 0;
2077    
2078 michael 1632 if (conf->flags & CONF_FLAGS_ENCRYPTED)
2079     encr = crypt(password, conf->passwd);
2080 adx 30 else
2081     encr = password;
2082    
2083 michael 3263 return encr && !strcmp(encr, conf->passwd);
2084 adx 30 }
2085    
2086     /*
2087     * cluster_a_line
2088     *
2089     * inputs - client sending the cluster
2090     * - command name "KLINE" "XLINE" etc.
2091 michael 3347 * - capab -- CAP_KLN etc. from server.h
2092 michael 1309 * - cluster type -- CLUSTER_KLINE etc. from conf.h
2093 adx 30 * - pattern and args to send along
2094     * output - none
2095     * side effects - Take source_p send the pattern with args given
2096     * along to all servers that match capab and cluster type
2097     */
2098     void
2099     cluster_a_line(struct Client *source_p, const char *command,
2100 michael 593 int capab, int cluster_type, const char *pattern, ...)
2101 adx 30 {
2102     va_list args;
2103 michael 3375 char buffer[IRCD_BUFSIZE] = "";
2104 michael 593 const dlink_node *ptr = NULL;
2105 adx 30
2106     va_start(args, pattern);
2107     vsnprintf(buffer, sizeof(buffer), pattern, args);
2108     va_end(args);
2109    
2110     DLINK_FOREACH(ptr, cluster_items.head)
2111     {
2112 michael 1632 const struct MaskItem *conf = ptr->data;
2113 adx 30
2114     if (conf->flags & cluster_type)
2115     sendto_match_servs(source_p, conf->name, CAP_CLUSTER|capab,
2116 michael 2182 "%s %s %s", command, conf->name, buffer);
2117 adx 30 }
2118     }
2119    
2120     /*
2121     * split_nuh
2122     *
2123     * inputs - pointer to original mask (modified in place)
2124     * - pointer to pointer where nick should go
2125     * - pointer to pointer where user should go
2126     * - pointer to pointer where host should go
2127     * output - NONE
2128     * side effects - mask is modified in place
2129     * If nick pointer is NULL, ignore writing to it
2130     * this allows us to use this function elsewhere.
2131     *
2132     * mask nick user host
2133     * ---------------------- ------- ------- ------
2134     * Dianora!db@db.net Dianora db db.net
2135     * Dianora Dianora * *
2136     * db.net * * db.net
2137     * OR if nick pointer is NULL
2138     * Dianora - * Dianora
2139     * Dianora! Dianora * *
2140     * Dianora!@ Dianora * *
2141     * Dianora!db Dianora db *
2142     * Dianora!@db.net Dianora * db.net
2143     * db@db.net * db db.net
2144     * !@ * * *
2145     * @ * * *
2146     * ! * * *
2147     */
2148     void
2149 michael 593 split_nuh(struct split_nuh_item *const iptr)
2150 adx 30 {
2151     char *p = NULL, *q = NULL;
2152    
2153 michael 593 if (iptr->nickptr)
2154     strlcpy(iptr->nickptr, "*", iptr->nicksize);
2155     if (iptr->userptr)
2156     strlcpy(iptr->userptr, "*", iptr->usersize);
2157     if (iptr->hostptr)
2158     strlcpy(iptr->hostptr, "*", iptr->hostsize);
2159    
2160     if ((p = strchr(iptr->nuhmask, '!')))
2161 adx 30 {
2162     *p = '\0';
2163    
2164 michael 3375 if (iptr->nickptr && *iptr->nuhmask)
2165 michael 593 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
2166 adx 30
2167 michael 2525 if ((q = strchr(++p, '@')))
2168     {
2169 michael 593 *q++ = '\0';
2170    
2171 michael 3375 if (*p)
2172 michael 593 strlcpy(iptr->userptr, p, iptr->usersize);
2173 adx 30
2174 michael 3375 if (*q)
2175 michael 593 strlcpy(iptr->hostptr, q, iptr->hostsize);
2176 adx 30 }
2177     else
2178     {
2179 michael 3375 if (*p)
2180 michael 593 strlcpy(iptr->userptr, p, iptr->usersize);
2181 adx 30 }
2182     }
2183 michael 593 else
2184 adx 30 {
2185 michael 593 /* No ! found so lets look for a user@host */
2186     if ((p = strchr(iptr->nuhmask, '@')))
2187 adx 30 {
2188 michael 593 /* if found a @ */
2189     *p++ = '\0';
2190 adx 30
2191 michael 3375 if (*iptr->nuhmask)
2192 michael 593 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
2193 adx 30
2194 michael 3375 if (*p)
2195 michael 593 strlcpy(iptr->hostptr, p, iptr->hostsize);
2196 adx 30 }
2197 michael 593 else
2198 adx 30 {
2199 michael 593 /* no @ found */
2200     if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
2201     strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
2202 adx 30 else
2203 michael 593 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
2204 adx 30 }
2205     }
2206     }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision