ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/src/conf.c
(Generate patch)

Comparing:
ircd-hybrid-7.2/src/s_conf.c (file contents), Revision 1009 by michael, Sun Sep 13 15:02:30 2009 UTC vs.
ircd-hybrid/trunk/src/conf.c (file contents), Revision 4744 by michael, Thu Oct 16 11:46:19 2014 UTC

# Line 1 | Line 1
1   /*
2 < *  ircd-hybrid: an advanced Internet Relay Chat Daemon(ircd).
3 < *  s_conf.c: Configuration file functions.
2 > *  ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3   *
4 < *  Copyright (C) 2002 by the past and present ircd coders, and others.
4 > *  Copyright (c) 1997-2014 ircd-hybrid development team
5   *
6   *  This program is free software; you can redistribute it and/or modify
7   *  it under the terms of the GNU General Public License as published by
# Line 16 | Line 15
15   *
16   *  You should have received a copy of the GNU General Public License
17   *  along with this program; if not, write to the Free Software
18 < *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
18 > *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19   *  USA
20 < *
21 < *  $Id$
20 > */
21 >
22 > /*! \file conf.c
23 > * \brief Configuration file functions.
24 > * \version $Id$
25   */
26  
27   #include "stdinc.h"
28 + #include "list.h"
29   #include "ircd_defs.h"
30 < #include "tools.h"
31 < #include "s_conf.h"
32 < #include "s_serv.h"
30 > #include "conf.h"
31 > #include "conf_pseudo.h"
32 > #include "server.h"
33   #include "resv.h"
34   #include "channel.h"
35   #include "client.h"
33 #include "common.h"
36   #include "event.h"
35 #include "hash.h"
36 #include "hook.h"
37   #include "irc_string.h"
38 #include "sprintf_irc.h"
38   #include "s_bsd.h"
40 #include "irc_getaddrinfo.h"
39   #include "ircd.h"
42 #include "list.h"
40   #include "listener.h"
41   #include "hostmask.h"
42   #include "modules.h"
43   #include "numeric.h"
44   #include "fdlist.h"
45 < #include "s_log.h"
45 > #include "log.h"
46   #include "send.h"
50 #include "s_gline.h"
51 #include "fileio.h"
47   #include "memory.h"
48 < #include "irc_res.h"
48 > #include "res.h"
49   #include "userhost.h"
50 < #include "s_user.h"
50 > #include "user.h"
51   #include "channel_mode.h"
52 + #include "parse.h"
53 + #include "misc.h"
54 + #include "conf_db.h"
55 + #include "conf_class.h"
56 + #include "motd.h"
57 + #include "ipcache.h"
58  
58 struct Callback *client_check_cb = NULL;
59 struct config_server_hide ConfigServerHide;
59  
60   /* general conf items link list root, other than k lines etc. */
61 + dlink_list service_items = { NULL, NULL, 0 };
62   dlink_list server_items  = { NULL, NULL, 0 };
63   dlink_list cluster_items = { NULL, NULL, 0 };
64 dlink_list hub_items     = { NULL, NULL, 0 };
65 dlink_list leaf_items    = { NULL, NULL, 0 };
64   dlink_list oconf_items   = { NULL, NULL, 0 };
65   dlink_list uconf_items   = { NULL, NULL, 0 };
66   dlink_list xconf_items   = { NULL, NULL, 0 };
69 dlink_list rxconf_items  = { NULL, NULL, 0 };
70 dlink_list rkconf_items  = { NULL, NULL, 0 };
67   dlink_list nresv_items   = { NULL, NULL, 0 };
68 < dlink_list class_items   = { NULL, NULL, 0 };
73 < dlink_list gdeny_items   = { NULL, NULL, 0 };
74 <
75 < dlink_list temporary_klines  = { NULL, NULL, 0 };
76 < dlink_list temporary_dlines  = { NULL, NULL, 0 };
77 < dlink_list temporary_xlines  = { NULL, NULL, 0 };
78 < dlink_list temporary_rklines = { NULL, NULL, 0 };
79 < dlink_list temporary_glines  = { NULL, NULL, 0 };
80 < dlink_list temporary_rxlines = { NULL, NULL, 0 };
81 < dlink_list temporary_resv = { NULL, NULL, 0 };
68 > dlink_list cresv_items   = { NULL, NULL, 0 };
69  
70   extern unsigned int lineno;
71   extern char linebuf[];
72   extern char conffilebuf[IRCD_BUFSIZE];
86 extern char yytext[];
73   extern int yyparse(); /* defined in y.tab.c */
74  
89 struct conf_parser_context conf_parser_ctx = { 0, 0, NULL };
90
75   /* internally defined functions */
76 < static void lookup_confhost(struct ConfItem *);
93 < static void set_default_conf(void);
94 < static void validate_conf(void);
95 < static void read_conf(FBFILE *);
76 > static void read_conf(FILE *);
77   static void clear_out_old_conf(void);
97 static void flush_deleted_I_P(void);
78   static void expire_tklines(dlink_list *);
79 < static void garbage_collect_ip_entries(void);
80 < static int hash_ip(struct irc_ssaddr *);
81 < static int verify_access(struct Client *, const char *);
102 < static int attach_iline(struct Client *, struct ConfItem *);
103 < static struct ip_entry *find_or_add_ip(struct irc_ssaddr *);
104 < static void parse_conf_file(int, int);
105 < static dlink_list *map_to_list(ConfType);
106 < static struct AccessItem *find_regexp_kline(const char *[]);
79 > static int verify_access(struct Client *);
80 > static int attach_iline(struct Client *, struct MaskItem *);
81 > static dlink_list *map_to_list(enum maskitem_type);
82   static int find_user_host(struct Client *, char *, char *, char *, unsigned int);
83  
109 /*
110 * bit_len
111 */
112 static int cidr_limit_reached(int, struct irc_ssaddr *, struct ClassItem *);
113 static void remove_from_cidr_check(struct irc_ssaddr *, struct ClassItem *);
114 static void destroy_cidr_class(struct ClassItem *);
115
116 static void flags_to_ascii(unsigned int, const unsigned int[], char *, int);
117
118 /* address of default class conf */
119 static struct ConfItem *class_default;
120
121 /* usually, with hash tables, you use a prime number...
122 * but in this case I am dealing with ip addresses,
123 * not ascii strings.
124 */
125 #define IP_HASH_SIZE 0x1000
126
127 struct ip_entry
128 {
129  struct irc_ssaddr ip;
130  int count;
131  time_t last_attempt;
132  struct ip_entry *next;
133 };
134
135 static struct ip_entry *ip_hash_table[IP_HASH_SIZE];
136 static BlockHeap *ip_entry_heap = NULL;
137 static int ip_entries_count = 0;
138
139
140 inline void *
141 map_to_conf(struct ConfItem *aconf)
142 {
143  void *conf;
144  conf = (void *)((unsigned long)aconf +
145                  (unsigned long)sizeof(struct ConfItem));
146  return(conf);
147 }
148
149 inline struct ConfItem *
150 unmap_conf_item(void *aconf)
151 {
152  struct ConfItem *conf;
153
154  conf = (struct ConfItem *)((unsigned long)aconf -
155                             (unsigned long)sizeof(struct ConfItem));
156  return(conf);
157 }
84  
85   /* conf_dns_callback()
86   *
87 < * inputs       - pointer to struct AccessItem
87 > * inputs       - pointer to struct MaskItem
88   *              - pointer to DNSReply reply
89   * output       - none
90   * side effects - called when resolver query finishes
# Line 167 | Line 93 | unmap_conf_item(void *aconf)
93   * if successful save hp in the conf item it was called with
94   */
95   static void
96 < conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name)
96 > conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name, size_t namelength)
97   {
98 <  struct AccessItem *aconf = vptr;
98 >  struct MaskItem *conf = vptr;
99  
100 <  aconf->dns_pending = 0;
100 >  conf->dns_pending = 0;
101  
102 <  if (addr != NULL)
103 <    memcpy(&aconf->ipnum, addr, sizeof(aconf->ipnum));
102 >  if (addr)
103 >    memcpy(&conf->addr, addr, sizeof(conf->addr));
104    else
105 <    aconf->dns_failed = 1;
105 >    conf->dns_failed = 1;
106   }
107  
108   /* conf_dns_lookup()
# Line 186 | Line 112 | conf_dns_callback(void *vptr, const stru
112   * allocate a dns_query and start ns lookup.
113   */
114   static void
115 < conf_dns_lookup(struct AccessItem *aconf)
115 > conf_dns_lookup(struct MaskItem *conf)
116   {
117 <  if (!aconf->dns_pending)
117 >  if (!conf->dns_pending)
118    {
119 <    aconf->dns_pending = 1;
120 <    gethost_byname(conf_dns_callback, aconf, aconf->host);
119 >    conf->dns_pending = 1;
120 >
121 >    if (conf->aftype == AF_INET)
122 >      gethost_byname_type(conf_dns_callback, conf, conf->host, T_A);
123 >    else
124 >      gethost_byname_type(conf_dns_callback, conf, conf->host, T_AAAA);
125    }
126   }
127  
128 < /* make_conf_item()
129 < *
200 < * inputs       - type of item
201 < * output       - pointer to new conf entry
202 < * side effects - none
203 < */
204 < struct ConfItem *
205 < make_conf_item(ConfType type)
128 > struct MaskItem *
129 > conf_make(enum maskitem_type type)
130   {
131 <  struct ConfItem *conf = NULL;
132 <  struct AccessItem *aconf = NULL;
209 <  struct ClassItem *aclass = NULL;
210 <  int status = 0;
131 >  struct MaskItem *conf = MyCalloc(sizeof(*conf));
132 >  dlink_list *list = NULL;
133  
134 <  switch (type)
135 <  {
136 <  case DLINE_TYPE:
215 <  case EXEMPTDLINE_TYPE:
216 <  case GLINE_TYPE:
217 <  case KLINE_TYPE:
218 <  case CLIENT_TYPE:
219 <  case OPER_TYPE:
220 <  case SERVER_TYPE:
221 <    conf = MyMalloc(sizeof(struct ConfItem) +
222 <                    sizeof(struct AccessItem));
223 <    aconf = map_to_conf(conf);
224 <    aconf->aftype = AF_INET;
225 <
226 <    /* Yes, sigh. switch on type again */
227 <    switch (type)
228 <    {
229 <    case EXEMPTDLINE_TYPE:
230 <      status = CONF_EXEMPTDLINE;
231 <      break;
232 <
233 <    case DLINE_TYPE:
234 <      status = CONF_DLINE;
235 <      break;
236 <
237 <    case KLINE_TYPE:
238 <      status = CONF_KLINE;
239 <      break;
240 <
241 <    case GLINE_TYPE:
242 <      status = CONF_GLINE;
243 <      break;
244 <
245 <    case CLIENT_TYPE:
246 <      status = CONF_CLIENT;
247 <      break;
248 <
249 <    case OPER_TYPE:
250 <      status = CONF_OPERATOR;
251 <      dlinkAdd(conf, &conf->node, &oconf_items);
252 <      break;
253 <
254 <    case SERVER_TYPE:
255 <      status = CONF_SERVER;
256 <      dlinkAdd(conf, &conf->node, &server_items);
257 <      break;
258 <
259 <    default:
260 <      break;
261 <    }
262 <    aconf->status = status;
263 <    break;
264 <
265 <  case LEAF_TYPE:
266 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
267 <                                       sizeof(struct MatchItem));
268 <    dlinkAdd(conf, &conf->node, &leaf_items);
269 <    break;
270 <
271 <  case HUB_TYPE:
272 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
273 <                                       sizeof(struct MatchItem));
274 <    dlinkAdd(conf, &conf->node, &hub_items);
275 <    break;
276 <
277 <  case ULINE_TYPE:
278 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
279 <                                       sizeof(struct MatchItem));
280 <    dlinkAdd(conf, &conf->node, &uconf_items);
281 <    break;
282 <
283 <  case GDENY_TYPE:
284 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
285 <                                       sizeof(struct AccessItem));
286 <    dlinkAdd(conf, &conf->node, &gdeny_items);
287 <    break;
288 <
289 <  case XLINE_TYPE:
290 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
291 <                                       sizeof(struct MatchItem));
292 <    dlinkAdd(conf, &conf->node, &xconf_items);
293 <    break;
294 < #ifdef HAVE_LIBPCRE
295 <  case RXLINE_TYPE:
296 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
297 <                                       sizeof(struct MatchItem));
298 <    dlinkAdd(conf, &conf->node, &rxconf_items);
299 <    break;
300 <
301 <  case RKLINE_TYPE:
302 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
303 <                                       sizeof(struct AccessItem));
304 <    aconf = map_to_conf(conf);
305 <    aconf->status = CONF_KLINE;
306 <    dlinkAdd(conf, &conf->node, &rkconf_items);
307 <    break;
308 < #endif
309 <  case CLUSTER_TYPE:
310 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem));
311 <    dlinkAdd(conf, &conf->node, &cluster_items);
312 <    break;
313 <
314 <  case CRESV_TYPE:
315 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
316 <                                       sizeof(struct ResvChannel));
317 <    break;
318 <
319 <  case NRESV_TYPE:
320 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
321 <                                       sizeof(struct MatchItem));
322 <    dlinkAdd(conf, &conf->node, &nresv_items);
323 <    break;
324 <
325 <  case CLASS_TYPE:
326 <    conf = MyMalloc(sizeof(struct ConfItem) +
327 <                           sizeof(struct ClassItem));
328 <    dlinkAdd(conf, &conf->node, &class_items);
329 <
330 <    aclass = map_to_conf(conf);
331 <    aclass->active = 1;
332 <    ConFreq(aclass) = DEFAULT_CONNECTFREQUENCY;
333 <    PingFreq(aclass) = DEFAULT_PINGFREQUENCY;
334 <    MaxTotal(aclass) = MAXIMUM_LINKS_DEFAULT;
335 <    MaxSendq(aclass) = DEFAULT_SENDQ;
336 <
337 <    break;
338 <
339 <  default:
340 <    conf = NULL;
341 <    break;
342 <  }
343 <
344 <  /* XXX Yes, this will core if default is hit. I want it to for now - db */
345 <  conf->type = type;
134 >  conf->type   = type;
135 >  conf->active = 1;
136 >  conf->aftype = AF_INET;
137  
138 +  if ((list = map_to_list(type)))
139 +    dlinkAdd(conf, &conf->node, list);
140    return conf;
141   }
142  
143   void
144 < delete_conf_item(struct ConfItem *conf)
144 > conf_free(struct MaskItem *conf)
145   {
146 <  dlink_node *m = NULL;
147 <  struct MatchItem *match_item;
148 <  struct AccessItem *aconf;
149 <  ConfType type = conf->type;
146 >  dlink_node *ptr = NULL, *ptr_next = NULL;
147 >  dlink_list *list = NULL;
148 >
149 >  if ((list = map_to_list(conf->type)))
150 >    dlinkFindDelete(list, conf);
151  
152    MyFree(conf->name);
359  conf->name = NULL;
153  
154 <  switch(type)
155 <  {
156 <  case DLINE_TYPE:
157 <  case EXEMPTDLINE_TYPE:
158 <  case GLINE_TYPE:
159 <  case KLINE_TYPE:
160 <  case CLIENT_TYPE:
161 <  case OPER_TYPE:
162 <  case SERVER_TYPE:
163 <    aconf = map_to_conf(conf);
164 <
165 <    if (aconf->dns_pending)
166 <      delete_resolver_queries(aconf);
167 <    if (aconf->passwd != NULL)
168 <      memset(aconf->passwd, 0, strlen(aconf->passwd));
376 <    if (aconf->spasswd != NULL)
377 <      memset(aconf->spasswd, 0, strlen(aconf->spasswd));
378 <    aconf->class_ptr = NULL;
379 <
380 <    MyFree(aconf->passwd);
381 <    MyFree(aconf->spasswd);
382 <    MyFree(aconf->reason);
383 <    MyFree(aconf->oper_reason);
384 <    MyFree(aconf->user);
385 <    MyFree(aconf->host);
386 <    MyFree(aconf->fakename);
154 >  if (conf->dns_pending)
155 >    delete_resolver_queries(conf);
156 >  if (conf->passwd)
157 >    memset(conf->passwd, 0, strlen(conf->passwd));
158 >  if (conf->spasswd)
159 >    memset(conf->spasswd, 0, strlen(conf->spasswd));
160 >
161 >  conf->class = NULL;
162 >
163 >  MyFree(conf->passwd);
164 >  MyFree(conf->spasswd);
165 >  MyFree(conf->reason);
166 >  MyFree(conf->certfp);
167 >  MyFree(conf->user);
168 >  MyFree(conf->host);
169   #ifdef HAVE_LIBCRYPTO
170 <    if (aconf->rsa_public_key)
389 <      RSA_free(aconf->rsa_public_key);
390 <    MyFree(aconf->rsa_public_key_file);
391 < #endif
392 <
393 <    /* Yes, sigh. switch on type again */
394 <    switch(type)
395 <    {
396 <    case EXEMPTDLINE_TYPE:
397 <    case DLINE_TYPE:
398 <    case GLINE_TYPE:
399 <    case KLINE_TYPE:
400 <    case CLIENT_TYPE:
401 <      MyFree(conf);
402 <      break;
403 <
404 <    case OPER_TYPE:
405 <      aconf = map_to_conf(conf);
406 <      if (!IsConfIllegal(aconf))
407 <        dlinkDelete(&conf->node, &oconf_items);
408 <      MyFree(conf);
409 <      break;
410 <
411 <    case SERVER_TYPE:
412 <      aconf = map_to_conf(conf);
413 <      if (!IsConfIllegal(aconf))
414 <        dlinkDelete(&conf->node, &server_items);
415 <      MyFree(conf);
416 <      break;
417 <
418 <    default:
419 <      break;
420 <    }
421 <    break;
422 <
423 <  case HUB_TYPE:
424 <    match_item = map_to_conf(conf);
425 <    MyFree(match_item->user);
426 <    MyFree(match_item->host);
427 <    MyFree(match_item->reason);
428 <    MyFree(match_item->oper_reason);
429 <    /* If marked illegal, its already been pulled off of the hub_items list */
430 <    if (!match_item->illegal)
431 <      dlinkDelete(&conf->node, &hub_items);
432 <    MyFree(conf);
433 <    break;
434 <
435 <  case LEAF_TYPE:
436 <    match_item = map_to_conf(conf);
437 <    MyFree(match_item->user);
438 <    MyFree(match_item->host);
439 <    MyFree(match_item->reason);
440 <    MyFree(match_item->oper_reason);
441 <    /* If marked illegal, its already been pulled off of the leaf_items list */
442 <    if (!match_item->illegal)
443 <      dlinkDelete(&conf->node, &leaf_items);
444 <    MyFree(conf);
445 <    break;
446 <
447 <  case ULINE_TYPE:
448 <    match_item = map_to_conf(conf);
449 <    MyFree(match_item->user);
450 <    MyFree(match_item->host);
451 <    MyFree(match_item->reason);
452 <    MyFree(match_item->oper_reason);
453 <    dlinkDelete(&conf->node, &uconf_items);
454 <    MyFree(conf);
455 <    break;
170 >  MyFree(conf->cipher_list);
171  
172 <  case XLINE_TYPE:
173 <    match_item = map_to_conf(conf);
459 <    MyFree(match_item->user);
460 <    MyFree(match_item->host);
461 <    MyFree(match_item->reason);
462 <    MyFree(match_item->oper_reason);
463 <    dlinkDelete(&conf->node, &xconf_items);
464 <    MyFree(conf);
465 <    break;
466 < #ifdef HAVE_LIBPCRE
467 <  case RKLINE_TYPE:
468 <    aconf = map_to_conf(conf);
469 <    MyFree(aconf->regexuser);
470 <    MyFree(aconf->regexhost);
471 <    MyFree(aconf->user);
472 <    MyFree(aconf->host);
473 <    MyFree(aconf->reason);
474 <    MyFree(aconf->oper_reason);
475 <    dlinkDelete(&conf->node, &rkconf_items);
476 <    MyFree(conf);
477 <    break;
478 <
479 <  case RXLINE_TYPE:
480 <    MyFree(conf->regexpname);
481 <    match_item = map_to_conf(conf);
482 <    MyFree(match_item->user);
483 <    MyFree(match_item->host);
484 <    MyFree(match_item->reason);
485 <    MyFree(match_item->oper_reason);
486 <    dlinkDelete(&conf->node, &rxconf_items);
487 <    MyFree(conf);
488 <    break;
172 >  if (conf->rsa_public_key)
173 >    RSA_free(conf->rsa_public_key);
174   #endif
175 <  case NRESV_TYPE:
176 <    match_item = map_to_conf(conf);
177 <    MyFree(match_item->user);
178 <    MyFree(match_item->host);
179 <    MyFree(match_item->reason);
495 <    MyFree(match_item->oper_reason);
496 <    dlinkDelete(&conf->node, &nresv_items);
497 <
498 <    if (conf->flags & CONF_FLAGS_TEMPORARY)
499 <      if ((m = dlinkFindDelete(&temporary_resv, conf)) != NULL)
500 <        free_dlink_node(m);
501 <
502 <    MyFree(conf);
503 <    break;
504 <
505 <  case GDENY_TYPE:
506 <    aconf = map_to_conf(conf);
507 <    MyFree(aconf->user);
508 <    MyFree(aconf->host);
509 <    dlinkDelete(&conf->node, &gdeny_items);
510 <    MyFree(conf);
511 <    break;
512 <
513 <  case CLUSTER_TYPE:
514 <    dlinkDelete(&conf->node, &cluster_items);
515 <    MyFree(conf);
516 <    break;
517 <
518 <  case CRESV_TYPE:
519 <    if (conf->flags & CONF_FLAGS_TEMPORARY)
520 <      if ((m = dlinkFindDelete(&temporary_resv, conf)) != NULL)
521 <        free_dlink_node(m);
522 <
523 <    MyFree(conf);
524 <    break;
525 <
526 <  case CLASS_TYPE:
527 <    dlinkDelete(&conf->node, &class_items);
528 <    MyFree(conf);
529 <    break;
530 <
531 <  default:
532 <    break;
175 >  DLINK_FOREACH_SAFE(ptr, ptr_next, conf->hub_list.head)
176 >  {
177 >    MyFree(ptr->data);
178 >    dlinkDelete(ptr, &conf->hub_list);
179 >    free_dlink_node(ptr);
180    }
534 }
535
536 /* free_access_item()
537 *
538 * inputs       - pointer to conf to free
539 * output       - none
540 * side effects - crucial password fields are zeroed, conf is freed
541 */
542 void
543 free_access_item(struct AccessItem *aconf)
544 {
545  struct ConfItem *conf;
546
547  if (aconf == NULL)
548    return;
549  conf = unmap_conf_item(aconf);
550  delete_conf_item(conf);
551 }
552
553 static const unsigned int shared_bit_table[] =
554  { 'K', 'k', 'U', 'X', 'x', 'Y', 'Q', 'q', 'R', 'L', 0};
555
556 /* report_confitem_types()
557 *
558 * inputs       - pointer to client requesting confitem report
559 *              - ConfType to report
560 * output       - none
561 * side effects -
562 */
563 void
564 report_confitem_types(struct Client *source_p, ConfType type, int temp)
565 {
566  dlink_node *ptr = NULL;
567  struct ConfItem *conf = NULL;
568  struct AccessItem *aconf = NULL;
569  struct MatchItem *matchitem = NULL;
570  struct ClassItem *classitem = NULL;
571  char buf[12];
572  char *p = NULL;
573  const char *pfx = NULL;
181  
182 <  switch (type)
182 >  DLINK_FOREACH_SAFE(ptr, ptr_next, conf->leaf_list.head)
183    {
184 <  case GDENY_TYPE:
185 <    DLINK_FOREACH(ptr, gdeny_items.head)
186 <    {
187 <      conf = ptr->data;
581 <      aconf = map_to_conf(conf);
582 <
583 <      p = buf;
584 <
585 <      if (aconf->flags & GDENY_BLOCK)
586 <        *p++ = 'B';
587 <      else
588 <        *p++ = 'b';
589 <
590 <      if (aconf->flags & GDENY_REJECT)
591 <        *p++ = 'R';
592 <      else
593 <        *p++ = 'r';
594 <
595 <      *p = '\0';
596 <
597 <      sendto_one(source_p, ":%s %d %s V %s@%s %s %s",
598 <                 me.name, RPL_STATSDEBUG, source_p->name,
599 <                 aconf->user, aconf->host, conf->name, buf);
600 <    }
601 <    break;
602 <
603 <  case XLINE_TYPE:
604 <    DLINK_FOREACH(ptr, xconf_items.head)
605 <    {
606 <      conf = ptr->data;
607 <      matchitem = map_to_conf(conf);
608 <
609 <      sendto_one(source_p, form_str(RPL_STATSXLINE),
610 <                 me.name, source_p->name,
611 <                 matchitem->hold ? "x": "X", matchitem->count,
612 <                 conf->name, matchitem->reason);
613 <    }
614 <    break;
615 <
616 < #ifdef HAVE_LIBPCRE
617 <  case RXLINE_TYPE:
618 <    DLINK_FOREACH(ptr, rxconf_items.head)
619 <    {
620 <      conf = ptr->data;
621 <      matchitem = map_to_conf(conf);
622 <
623 <      sendto_one(source_p, form_str(RPL_STATSXLINE),
624 <                 me.name, source_p->name,
625 <                 matchitem->hold ? "xR": "XR", matchitem->count,
626 <                 conf->name, matchitem->reason);
627 <    }
628 <    break;
629 <
630 <  case RKLINE_TYPE:
631 <    pfx = temp ? "kR" : "KR";
632 <
633 <    DLINK_FOREACH(ptr, rkconf_items.head)
634 <    {
635 <      aconf = map_to_conf((conf = ptr->data));
636 <
637 <      if (temp && !(conf->flags & CONF_FLAGS_TEMPORARY))
638 <        continue;
639 <
640 <      sendto_one(source_p, form_str(RPL_STATSKLINE), me.name,
641 <                 source_p->name, pfx, aconf->host, aconf->user,
642 <                 aconf->reason, aconf->oper_reason ? aconf->oper_reason : "");
643 <    }
644 <    break;
645 < #endif
646 <
647 <  case ULINE_TYPE:
648 <    DLINK_FOREACH(ptr, uconf_items.head)
649 <    {
650 <      conf = ptr->data;
651 <      matchitem = map_to_conf(conf);
652 <
653 <      p = buf;
654 <
655 <      /* some of these are redundant for the sake of
656 <       * consistency with cluster{} flags
657 <       */
658 <      *p++ = 'c';
659 <      flags_to_ascii(matchitem->action, shared_bit_table, p, 0);
660 <
661 <      sendto_one(source_p, form_str(RPL_STATSULINE),
662 <                 me.name, source_p->name, conf->name,
663 <                 matchitem->user?matchitem->user: "*",
664 <                 matchitem->host?matchitem->host: "*", buf);
665 <    }
666 <
667 <    DLINK_FOREACH(ptr, cluster_items.head)
668 <    {
669 <      conf = ptr->data;
670 <
671 <      p = buf;
672 <
673 <      *p++ = 'C';
674 <      flags_to_ascii(conf->flags, shared_bit_table, p, 0);
675 <
676 <      sendto_one(source_p, form_str(RPL_STATSULINE),
677 <                 me.name, source_p->name, conf->name,
678 <                 "*", "*", buf);
679 <    }
680 <
681 <    break;
682 <
683 <  case OPER_TYPE:
684 <    DLINK_FOREACH(ptr, oconf_items.head)
685 <    {
686 <      conf = ptr->data;
687 <      aconf = map_to_conf(conf);
688 <
689 <      /* Don't allow non opers to see oper privs */
690 <      if (IsOper(source_p))
691 <        sendto_one(source_p, form_str(RPL_STATSOLINE),
692 <                   me.name, source_p->name, 'O', aconf->user, aconf->host,
693 <                   conf->name, oper_privs_as_string(aconf->port),
694 <                   aconf->class_ptr ? aconf->class_ptr->name : "<default>");
695 <      else
696 <        sendto_one(source_p, form_str(RPL_STATSOLINE),
697 <                   me.name, source_p->name, 'O', aconf->user, aconf->host,
698 <                   conf->name, "0",
699 <                   aconf->class_ptr ? aconf->class_ptr->name : "<default>");
700 <    }
701 <    break;
702 <
703 <  case CLASS_TYPE:
704 <    DLINK_FOREACH(ptr, class_items.head)
705 <    {
706 <      conf = ptr->data;
707 <      classitem = map_to_conf(conf);
708 <      sendto_one(source_p, form_str(RPL_STATSYLINE),
709 <                 me.name, source_p->name, 'Y',
710 <                 conf->name, PingFreq(classitem),
711 <                 ConFreq(classitem),
712 <                 MaxTotal(classitem), MaxSendq(classitem),
713 <                 CurrUserCount(classitem),
714 <                 classitem->active ? "active" : "disabled");
715 <    }
716 <    break;
717 <
718 <  case CONF_TYPE:
719 <  case CLIENT_TYPE:
720 <    break;
721 <
722 <  case SERVER_TYPE:
723 <    DLINK_FOREACH(ptr, server_items.head)
724 <    {
725 <      p = buf;
726 <
727 <      conf = ptr->data;
728 <      aconf = map_to_conf(conf);
729 <
730 <      buf[0] = '\0';
731 <
732 <      if (IsConfAllowAutoConn(aconf))
733 <        *p++ = 'A';
734 <      if (IsConfCryptLink(aconf))
735 <        *p++ = 'C';
736 <      if (aconf->fakename)
737 <        *p++ = 'M';
738 <      if (IsConfTopicBurst(aconf))
739 <        *p++ = 'T';
740 <      if (IsConfCompressed(aconf))
741 <        *p++ = 'Z';
742 <      if (buf[0] == '\0')
743 <        *p++ = '*';
744 <
745 <      *p = '\0';
746 <
747 <      /*
748 <       * Allow admins to see actual ips unless hide_server_ips is enabled
749 <       */
750 <      if (!ConfigServerHide.hide_server_ips && IsAdmin(source_p))
751 <        sendto_one(source_p, form_str(RPL_STATSCLINE),
752 <                   me.name, source_p->name, 'C', aconf->host,
753 <                   buf, conf->name, aconf->port,
754 <                   aconf->class_ptr ? aconf->class_ptr->name : "<default>");
755 <        else
756 <          sendto_one(source_p, form_str(RPL_STATSCLINE),
757 <                     me.name, source_p->name, 'C',
758 <                     "*@127.0.0.1", buf, conf->name, aconf->port,
759 <                     aconf->class_ptr ? aconf->class_ptr->name : "<default>");
760 <    }
761 <    break;
762 <
763 <  case HUB_TYPE:
764 <    DLINK_FOREACH(ptr, hub_items.head)
765 <    {
766 <      conf = ptr->data;
767 <      matchitem = map_to_conf(conf);
768 <      sendto_one(source_p, form_str(RPL_STATSHLINE), me.name,
769 <                 source_p->name, 'H', matchitem->host, conf->name, 0, "*");
770 <    }
771 <    break;
184 >    MyFree(ptr->data);
185 >    dlinkDelete(ptr, &conf->leaf_list);
186 >    free_dlink_node(ptr);
187 >  }
188  
189 <  case LEAF_TYPE:
190 <    DLINK_FOREACH(ptr, leaf_items.head)
191 <    {
776 <      conf = ptr->data;
777 <      matchitem = map_to_conf(conf);
778 <      sendto_one(source_p, form_str(RPL_STATSLLINE), me.name,
779 <                 source_p->name, 'L', matchitem->host, conf->name, 0, "*");
780 <    }
781 <    break;
189 >  DLINK_FOREACH_SAFE(ptr, ptr_next, conf->exempt_list.head)
190 >  {
191 >    struct exempt *exptr = ptr->data;
192  
193 <  case GLINE_TYPE:
194 <  case KLINE_TYPE:
195 <  case DLINE_TYPE:
196 <  case EXEMPTDLINE_TYPE:
197 <  case CRESV_TYPE:
788 <  case NRESV_TYPE:
789 <  case CLUSTER_TYPE:
790 <  default:
791 <    break;
193 >    dlinkDelete(ptr, &conf->exempt_list);
194 >    MyFree(exptr->name);
195 >    MyFree(exptr->user);
196 >    MyFree(exptr->host);
197 >    MyFree(exptr);
198    }
199 +
200 +  MyFree(conf);
201   }
202  
203   /* check_client()
# Line 805 | Line 213 | report_confitem_types(struct Client *sou
213   *                Look for conf lines which have the same
214   *                status as the flags passed.
215   */
216 < static void *
217 < check_client(va_list args)
216 > int
217 > check_client(struct Client *source_p)
218   {
811  struct Client *source_p = va_arg(args, struct Client *);
812  const char *username = va_arg(args, const char *);
219    int i;
220 <
221 <  /* I'm already in big trouble if source_p->localClient is NULL -db */
222 <  if ((i = verify_access(source_p, username)))
817 <    ilog(L_INFO, "Access denied: %s[%s]",
220 >
221 >  if ((i = verify_access(source_p)))
222 >    ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
223           source_p->name, source_p->sockhost);
224  
225    switch (i)
226    {
227      case TOO_MANY:
228 <      sendto_realops_flags(UMODE_FULL, L_ALL,
228 >      sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
229                             "Too many on IP for %s (%s).",
230 <                           get_client_name(source_p, SHOW_IP),
231 <                           source_p->sockhost);
232 <      ilog(L_INFO,"Too many connections on IP from %s.",
233 <           get_client_name(source_p, SHOW_IP));
230 >                           get_client_name(source_p, SHOW_IP),
231 >                           source_p->sockhost);
232 >      ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
233 >           get_client_name(source_p, SHOW_IP));
234        ++ServerStats.is_ref;
235 <      exit_client(source_p, &me, "No more connections allowed on that IP");
235 >      exit_client(source_p, "No more connections allowed on that IP");
236        break;
237  
238      case I_LINE_FULL:
239 <      sendto_realops_flags(UMODE_FULL, L_ALL,
240 <                           "I-line is full for %s (%s).",
241 <                           get_client_name(source_p, SHOW_IP),
242 <                           source_p->sockhost);
243 <      ilog(L_INFO,"Too many connections from %s.",
244 <           get_client_name(source_p, SHOW_IP));
239 >      sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
240 >                           "auth{} block is full for %s (%s).",
241 >                           get_client_name(source_p, SHOW_IP),
242 >                           source_p->sockhost);
243 >      ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
244 >           get_client_name(source_p, SHOW_IP));
245        ++ServerStats.is_ref;
246 <      exit_client(source_p, &me,
842 <                "No more connections allowed in your connection class");
246 >      exit_client(source_p, "No more connections allowed in your connection class");
247        break;
248  
249      case NOT_AUTHORIZED:
250        ++ServerStats.is_ref;
251        /* jdc - lists server name & port connections are on */
252        /*       a purely cosmetical change */
253 <      sendto_realops_flags(UMODE_UNAUTH, L_ALL,
254 <                           "Unauthorized client connection from %s [%s] on [%s/%u].",
255 <                           get_client_name(source_p, SHOW_IP),
256 <                           source_p->sockhost,
257 <                           source_p->localClient->listener->name,
258 <                           source_p->localClient->listener->port);
259 <      ilog(L_INFO,
260 <          "Unauthorized client connection from %s on [%s/%u].",
261 <          get_client_name(source_p, SHOW_IP),
262 <          source_p->localClient->listener->name,
263 <          source_p->localClient->listener->port);
264 <
265 <      /* XXX It is prolematical whether it is better to use the
862 <       * capture reject code here or rely on the connecting too fast code.
863 <       * - Dianora
864 <       */
865 <      if (REJECT_HOLD_TIME > 0)
866 <      {
867 <        sendto_one(source_p, ":%s NOTICE %s :You are not authorized to use this server",
868 <                   me.name, source_p->name);
869 <        source_p->localClient->reject_delay = CurrentTime + REJECT_HOLD_TIME;
870 <        SetCaptured(source_p);
871 <      }
872 <      else
873 <        exit_client(source_p, &me, "You are not authorized to use this server");
253 >      sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
254 >                           "Unauthorized client connection from %s [%s] on [%s/%u].",
255 >                           get_client_name(source_p, SHOW_IP),
256 >                           source_p->sockhost,
257 >                           source_p->connection->listener->name,
258 >                           source_p->connection->listener->port);
259 >      ilog(LOG_TYPE_IRCD,
260 >           "Unauthorized client connection from %s on [%s/%u].",
261 >           get_client_name(source_p, SHOW_IP),
262 >           source_p->connection->listener->name,
263 >           source_p->connection->listener->port);
264 >
265 >      exit_client(source_p, "You are not authorized to use this server");
266        break;
267  
268     case BANNED_CLIENT:
269 <     /*
878 <      * Don't exit them immediately, play with them a bit.
879 <      * - Dianora
880 <      */
881 <     if (REJECT_HOLD_TIME > 0)
882 <     {
883 <       source_p->localClient->reject_delay = CurrentTime + REJECT_HOLD_TIME;
884 <       SetCaptured(source_p);
885 <     }
886 <     else
887 <       exit_client(source_p, &me, "Banned");
269 >     exit_client(source_p, "Banned");
270       ++ServerStats.is_ref;
271       break;
272  
# Line 893 | Line 275 | check_client(va_list args)
275       break;
276    }
277  
278 <  return (i < 0 ? NULL : source_p);
278 >  return (i < 0 ? 0 : 1);
279   }
280  
281   /* verify_access()
282   *
283   * inputs       - pointer to client to verify
902 *              - pointer to proposed username
284   * output       - 0 if success -'ve if not
285   * side effect  - find the first (best) I line to attach.
286   */
287   static int
288 < verify_access(struct Client *client_p, const char *username)
288 > verify_access(struct Client *client_p)
289   {
290 <  struct AccessItem *aconf = NULL, *rkconf = NULL;
291 <  struct ConfItem *conf = NULL;
911 <  char non_ident[USERLEN + 1] = { '~', '\0' };
912 <  const char *uhi[3];
290 >  struct MaskItem *conf = NULL;
291 >  char non_ident[USERLEN + 1] = "~";
292  
293    if (IsGotId(client_p))
294    {
295 <    aconf = find_address_conf(client_p->host, client_p->username,
296 <                             &client_p->localClient->ip,
297 <                             client_p->localClient->aftype,
298 <                             client_p->localClient->passwd);
295 >    conf = find_address_conf(client_p->host, client_p->username,
296 >                             &client_p->connection->ip,
297 >                             client_p->connection->aftype,
298 >                             client_p->connection->password);
299    }
300    else
301    {
302 <    strlcpy(non_ident+1, username, sizeof(non_ident)-1);
303 <    aconf = find_address_conf(client_p->host,non_ident,
304 <                             &client_p->localClient->ip,
305 <                             client_p->localClient->aftype,
306 <                             client_p->localClient->passwd);
302 >    strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
303 >    conf = find_address_conf(client_p->host,non_ident,
304 >                             &client_p->connection->ip,
305 >                             client_p->connection->aftype,
306 >                             client_p->connection->password);
307    }
308  
309 <  uhi[0] = IsGotId(client_p) ? client_p->username : non_ident;
931 <  uhi[1] = client_p->host;
932 <  uhi[2] = client_p->sockhost;
933 <
934 <  rkconf = find_regexp_kline(uhi);
935 <
936 <  if (aconf != NULL)
309 >  if (conf)
310    {
311 <    if (IsConfClient(aconf) && !rkconf)
311 >    if (IsConfClient(conf))
312      {
313 <      conf = unmap_conf_item(aconf);
941 <
942 <      if (IsConfRedir(aconf))
313 >      if (IsConfRedir(conf))
314        {
315 <        sendto_one(client_p, form_str(RPL_REDIR),
316 <                   me.name, client_p->name,
317 <                   conf->name ? conf->name : "",
318 <                   aconf->port);
948 <        return(NOT_AUTHORIZED);
315 >        sendto_one_numeric(client_p, &me, RPL_REDIR,
316 >                           conf->name ? conf->name : "",
317 >                           conf->port);
318 >        return NOT_AUTHORIZED;
319        }
320  
321 <      if (IsConfDoIdentd(aconf))
322 <        SetNeedId(client_p);
321 >      if (IsConfDoIdentd(conf))
322 >        SetNeedId(client_p);
323  
324        /* Thanks for spoof idea amm */
325 <      if (IsConfDoSpoofIp(aconf))
325 >      if (IsConfDoSpoofIp(conf))
326        {
327 <        conf = unmap_conf_item(aconf);
328 <
329 <        if (!ConfigFileEntry.hide_spoof_ips && IsConfSpoofNotice(aconf))
960 <          sendto_realops_flags(UMODE_ALL, L_ADMIN, "%s spoofing: %s as %s",
327 >        if (!ConfigGeneral.hide_spoof_ips && IsConfSpoofNotice(conf))
328 >          sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
329 >                               "%s spoofing: %s as %s",
330                                 client_p->name, client_p->host, conf->name);
331          strlcpy(client_p->host, conf->name, sizeof(client_p->host));
332 <        SetIPSpoof(client_p);
332 >        AddFlag(client_p, FLAGS_IP_SPOOFING | FLAGS_AUTH_SPOOF);
333        }
334  
335 <      return(attach_iline(client_p, conf));
335 >      return attach_iline(client_p, conf);
336      }
337 <    else if (rkconf || IsConfKill(aconf) || (ConfigFileEntry.glines && IsConfGline(aconf)))
337 >    else if (IsConfKill(conf) || (ConfigGeneral.glines && IsConfGline(conf)))
338      {
339 <      /* XXX */
340 <      aconf = rkconf ? rkconf : aconf;
341 <      if (IsConfGline(aconf))
342 <        sendto_one(client_p, ":%s NOTICE %s :*** G-lined", me.name,
974 <                   client_p->name);
975 <      if (ConfigFileEntry.kline_with_reason)
976 <        sendto_one(client_p, ":%s NOTICE %s :*** Banned %s",
977 <                  me.name, client_p->name, aconf->reason);
978 <      return(BANNED_CLIENT);
339 >      if (IsConfGline(conf))
340 >        sendto_one_notice(client_p, &me, ":*** G-lined");
341 >      sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
342 >      return BANNED_CLIENT;
343      }
344    }
345  
346 <  return(NOT_AUTHORIZED);
346 >  return NOT_AUTHORIZED;
347   }
348  
349   /* attach_iline()
# Line 990 | Line 354 | verify_access(struct Client *client_p, c
354   * side effects - do actual attach
355   */
356   static int
357 < attach_iline(struct Client *client_p, struct ConfItem *conf)
357 > attach_iline(struct Client *client_p, struct MaskItem *conf)
358   {
359 <  struct AccessItem *aconf;
996 <  struct ClassItem *aclass;
359 >  const struct ClassItem *class = conf->class;
360    struct ip_entry *ip_found;
361    int a_limit_reached = 0;
362 <  int local = 0, global = 0, ident = 0;
362 >  unsigned int local = 0, global = 0, ident = 0;
363  
364 <  ip_found = find_or_add_ip(&client_p->localClient->ip);
364 >  ip_found = ipcache_find_or_add_address(&client_p->connection->ip);
365    ip_found->count++;
366 <  SetIpHash(client_p);
1004 <
1005 <  aconf = map_to_conf(conf);
1006 <  if (aconf->class_ptr == NULL)
1007 <    return NOT_AUTHORIZED;  /* If class is missing, this is best */
1008 <
1009 <  aclass = map_to_conf(aconf->class_ptr);
366 >  AddFlag(client_p, FLAGS_IPHASH);
367  
368    count_user_host(client_p->username, client_p->host,
369                    &global, &local, &ident);
# Line 1015 | Line 372 | attach_iline(struct Client *client_p, st
372     * setting a_limit_reached if any limit is reached.
373     * - Dianora
374     */
375 <  if (MaxTotal(aclass) != 0 && CurrUserCount(aclass) >= MaxTotal(aclass))
375 >  if (class->max_total && class->ref_count >= class->max_total)
376      a_limit_reached = 1;
377 <  else if (MaxPerIp(aclass) != 0 && ip_found->count > MaxPerIp(aclass))
377 >  else if (class->max_perip && ip_found->count > class->max_perip)
378      a_limit_reached = 1;
379 <  else if (MaxLocal(aclass) != 0 && local >= MaxLocal(aclass))
379 >  else if (class->max_local && local >= class->max_local)
380      a_limit_reached = 1;
381 <  else if (MaxGlobal(aclass) != 0 && global >= MaxGlobal(aclass))
381 >  else if (class->max_global && global >= class->max_global)
382      a_limit_reached = 1;
383 <  else if (MaxIdent(aclass) != 0 && ident >= MaxIdent(aclass) &&
383 >  else if (class->max_ident && ident >= class->max_ident &&
384             client_p->username[0] != '~')
385      a_limit_reached = 1;
386  
387    if (a_limit_reached)
388    {
389 <    if (!IsConfExemptLimits(aconf))
389 >    if (!IsConfExemptLimits(conf))
390        return TOO_MANY;   /* Already at maximum allowed */
391  
392 <    sendto_one(client_p,
393 <               ":%s NOTICE %s :*** Your connection class is full, "
1037 <               "but you have exceed_limit = yes;", me.name, client_p->name);
392 >    sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
393 >                      "but you have exceed_limit = yes;");
394    }
395  
396    return attach_conf(client_p, conf);
397   }
398  
1043 /* init_ip_hash_table()
1044 *
1045 * inputs               - NONE
1046 * output               - NONE
1047 * side effects         - allocate memory for ip_entry(s)
1048 *                      - clear the ip hash table
1049 */
1050 void
1051 init_ip_hash_table(void)
1052 {
1053  ip_entry_heap = BlockHeapCreate("ip", sizeof(struct ip_entry),
1054    2 * hard_fdlimit);
1055  memset(ip_hash_table, 0, sizeof(ip_hash_table));
1056 }
1057
1058 /* find_or_add_ip()
1059 *
1060 * inputs       - pointer to struct irc_ssaddr
1061 * output       - pointer to a struct ip_entry
1062 * side effects -
1063 *
1064 * If the ip # was not found, a new struct ip_entry is created, and the ip
1065 * count set to 0.
1066 */
1067 static struct ip_entry *
1068 find_or_add_ip(struct irc_ssaddr *ip_in)
1069 {
1070  struct ip_entry *ptr, *newptr;
1071  int hash_index = hash_ip(ip_in), res;
1072  struct sockaddr_in *v4 = (struct sockaddr_in *)ip_in, *ptr_v4;
1073 #ifdef IPV6
1074  struct sockaddr_in6 *v6 = (struct sockaddr_in6 *)ip_in, *ptr_v6;
1075 #endif
1076
1077  for (ptr = ip_hash_table[hash_index]; ptr; ptr = ptr->next)
1078  {
1079 #ifdef IPV6
1080    if (ptr->ip.ss.ss_family != ip_in->ss.ss_family)
1081      continue;
1082    if (ip_in->ss.ss_family == AF_INET6)
1083    {
1084      ptr_v6 = (struct sockaddr_in6 *)&ptr->ip;
1085      res = memcmp(&v6->sin6_addr, &ptr_v6->sin6_addr, sizeof(struct in6_addr));
1086    }
1087    else
1088 #endif
1089    {
1090      ptr_v4 = (struct sockaddr_in *)&ptr->ip;
1091      res = memcmp(&v4->sin_addr, &ptr_v4->sin_addr, sizeof(struct in_addr));
1092    }
1093    if (res == 0)
1094    {
1095      /* Found entry already in hash, return it. */
1096      return ptr;
1097    }
1098  }
1099
1100  if (ip_entries_count >= 2 * hard_fdlimit)
1101    garbage_collect_ip_entries();
1102
1103  newptr = BlockHeapAlloc(ip_entry_heap);
1104  ip_entries_count++;
1105  memcpy(&newptr->ip, ip_in, sizeof(struct irc_ssaddr));
1106
1107  newptr->next = ip_hash_table[hash_index];
1108  ip_hash_table[hash_index] = newptr;
1109
1110  return newptr;
1111 }
1112
1113 /* remove_one_ip()
1114 *
1115 * inputs        - unsigned long IP address value
1116 * output        - NONE
1117 * side effects  - The ip address given, is looked up in ip hash table
1118 *                 and number of ip#'s for that ip decremented.
1119 *                 If ip # count reaches 0 and has expired,
1120 *                 the struct ip_entry is returned to the ip_entry_heap
1121 */
1122 void
1123 remove_one_ip(struct irc_ssaddr *ip_in)
1124 {
1125  struct ip_entry *ptr;
1126  struct ip_entry *last_ptr = NULL;
1127  int hash_index = hash_ip(ip_in), res;
1128  struct sockaddr_in *v4 = (struct sockaddr_in *)ip_in, *ptr_v4;
1129 #ifdef IPV6
1130  struct sockaddr_in6 *v6 = (struct sockaddr_in6 *)ip_in, *ptr_v6;
1131 #endif
1132
1133  for (ptr = ip_hash_table[hash_index]; ptr; ptr = ptr->next)
1134  {
1135 #ifdef IPV6
1136    if (ptr->ip.ss.ss_family != ip_in->ss.ss_family)
1137      continue;
1138    if (ip_in->ss.ss_family == AF_INET6)
1139    {
1140      ptr_v6 = (struct sockaddr_in6 *)&ptr->ip;
1141      res = memcmp(&v6->sin6_addr, &ptr_v6->sin6_addr, sizeof(struct in6_addr));
1142    }
1143    else
1144 #endif
1145    {
1146      ptr_v4 = (struct sockaddr_in *)&ptr->ip;
1147      res = memcmp(&v4->sin_addr, &ptr_v4->sin_addr, sizeof(struct in_addr));
1148    }
1149    if (res)
1150      continue;
1151    if (ptr->count > 0)
1152      ptr->count--;
1153    if (ptr->count == 0 &&
1154        (CurrentTime-ptr->last_attempt) >= ConfigFileEntry.throttle_time)
1155    {
1156      if (last_ptr != NULL)
1157        last_ptr->next = ptr->next;
1158      else
1159        ip_hash_table[hash_index] = ptr->next;
1160
1161      BlockHeapFree(ip_entry_heap, ptr);
1162      ip_entries_count--;
1163      return;
1164    }
1165    last_ptr = ptr;
1166  }
1167 }
1168
1169 /* hash_ip()
1170 *
1171 * input        - pointer to an irc_inaddr
1172 * output       - integer value used as index into hash table
1173 * side effects - hopefully, none
1174 */
1175 static int
1176 hash_ip(struct irc_ssaddr *addr)
1177 {
1178  if (addr->ss.ss_family == AF_INET)
1179  {
1180    struct sockaddr_in *v4 = (struct sockaddr_in *)addr;
1181    int hash;
1182    u_int32_t ip;
1183
1184    ip   = ntohl(v4->sin_addr.s_addr);
1185    hash = ((ip >> 12) + ip) & (IP_HASH_SIZE-1);
1186    return hash;
1187  }
1188 #ifdef IPV6
1189  else
1190  {
1191    int hash;
1192    struct sockaddr_in6 *v6 = (struct sockaddr_in6 *)addr;
1193    u_int32_t *ip = (u_int32_t *)&v6->sin6_addr.s6_addr;
1194
1195    hash  = ip[0] ^ ip[3];
1196    hash ^= hash >> 16;  
1197    hash ^= hash >> 8;  
1198    hash  = hash & (IP_HASH_SIZE - 1);
1199    return hash;
1200  }
1201 #else
1202  return 0;
1203 #endif
1204 }
1205
1206 /* count_ip_hash()
1207 *
1208 * inputs        - pointer to counter of number of ips hashed
1209 *               - pointer to memory used for ip hash
1210 * output        - returned via pointers input
1211 * side effects  - NONE
1212 *
1213 * number of hashed ip #'s is counted up, plus the amount of memory
1214 * used in the hash.
1215 */
1216 void
1217 count_ip_hash(unsigned int *number_ips_stored, uint64_t *mem_ips_stored)
1218 {
1219  struct ip_entry *ptr;
1220  int i;
1221
1222  *number_ips_stored = 0;
1223  *mem_ips_stored    = 0;
1224
1225  for (i = 0; i < IP_HASH_SIZE; i++)
1226  {
1227    for (ptr = ip_hash_table[i]; ptr; ptr = ptr->next)
1228    {
1229      *number_ips_stored += 1;
1230      *mem_ips_stored += sizeof(struct ip_entry);
1231    }
1232  }
1233 }
1234
1235 /* garbage_collect_ip_entries()
1236 *
1237 * input        - NONE
1238 * output       - NONE
1239 * side effects - free up all ip entries with no connections
1240 */
1241 static void
1242 garbage_collect_ip_entries(void)
1243 {
1244  struct ip_entry *ptr;
1245  struct ip_entry *last_ptr;
1246  struct ip_entry *next_ptr;
1247  int i;
1248
1249  for (i = 0; i < IP_HASH_SIZE; i++)
1250  {
1251    last_ptr = NULL;
1252
1253    for (ptr = ip_hash_table[i]; ptr; ptr = next_ptr)
1254    {
1255      next_ptr = ptr->next;
1256
1257      if (ptr->count == 0 &&
1258          (CurrentTime - ptr->last_attempt) >= ConfigFileEntry.throttle_time)
1259      {
1260        if (last_ptr != NULL)
1261          last_ptr->next = ptr->next;
1262        else
1263          ip_hash_table[i] = ptr->next;
1264        BlockHeapFree(ip_entry_heap, ptr);
1265        ip_entries_count--;
1266      }
1267      else
1268        last_ptr = ptr;
1269    }
1270  }
1271 }
1272
399   /* detach_conf()
400   *
401   * inputs       - pointer to client to detach
# Line 1278 | Line 404 | garbage_collect_ip_entries(void)
404   * side effects - Disassociate configuration from the client.
405   *                Also removes a class from the list if marked for deleting.
406   */
407 < int
408 < detach_conf(struct Client *client_p, ConfType type)
407 > void
408 > detach_conf(struct Client *client_p, enum maskitem_type type)
409   {
410 <  dlink_node *ptr, *next_ptr;
1285 <  struct ConfItem *conf;
1286 <  struct ClassItem *aclass;
1287 <  struct AccessItem *aconf;
1288 <  struct ConfItem *aclass_conf;
1289 <  struct MatchItem *match_item;
410 >  dlink_node *ptr = NULL, *ptr_next = NULL;
411  
412 <  DLINK_FOREACH_SAFE(ptr, next_ptr, client_p->localClient->confs.head)
412 >  DLINK_FOREACH_SAFE(ptr, ptr_next, client_p->connection->confs.head)
413    {
414 <    conf = ptr->data;
1294 <
1295 <    if (type == CONF_TYPE || conf->type == type)
1296 <    {
1297 <      dlinkDelete(ptr, &client_p->localClient->confs);
1298 <      free_dlink_node(ptr);
1299 <
1300 <      switch (conf->type)
1301 <      {
1302 <      case CLIENT_TYPE:
1303 <      case OPER_TYPE:
1304 <      case SERVER_TYPE:
1305 <        aconf = map_to_conf(conf);
1306 <
1307 <        assert(aconf->clients > 0);
1308 <
1309 <        if ((aclass_conf = ClassPtr(aconf)) != NULL)
1310 <        {
1311 <          aclass = map_to_conf(aclass_conf);
1312 <
1313 <          assert(aclass->curr_user_count > 0);
414 >    struct MaskItem *conf = ptr->data;
415  
416 <          if (conf->type == CLIENT_TYPE)
417 <            remove_from_cidr_check(&client_p->localClient->ip, aclass);
418 <          if (--aclass->curr_user_count == 0 && aclass->active == 0)
1318 <            delete_conf_item(aclass_conf);
1319 <        }
416 >    assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
417 >    assert(conf->ref_count > 0);
418 >    assert(conf->class->ref_count > 0);
419  
420 <        if (--aconf->clients == 0 && IsConfIllegal(aconf))
421 <          delete_conf_item(conf);
420 >    if (!(conf->type & type))
421 >      continue;
422  
423 <        break;
423 >    dlinkDelete(ptr, &client_p->connection->confs);
424 >    free_dlink_node(ptr);
425  
426 <      case LEAF_TYPE:
427 <      case HUB_TYPE:
1328 <        match_item = map_to_conf(conf);
1329 <        if (match_item->ref_count == 0 && match_item->illegal)
1330 <          delete_conf_item(conf);
1331 <        break;
1332 <      default:
1333 <        break;
1334 <      }
426 >    if (conf->type == CONF_CLIENT)
427 >      remove_from_cidr_check(&client_p->connection->ip, conf->class);
428  
429 <      if (type != CONF_TYPE)
430 <        return 0;
429 >    if (--conf->class->ref_count == 0 && conf->class->active == 0)
430 >    {
431 >      class_free(conf->class);
432 >      conf->class = NULL;
433      }
1339  }
434  
435 <  return -1;
435 >    if (--conf->ref_count == 0 && conf->active == 0)
436 >      conf_free(conf);
437 >  }
438   }
439  
440   /* attach_conf()
# Line 1352 | Line 448 | detach_conf(struct Client *client_p, Con
448   *                attachment if there was an old one...
449   */
450   int
451 < attach_conf(struct Client *client_p, struct ConfItem *conf)
451 > attach_conf(struct Client *client_p, struct MaskItem *conf)
452   {
453 <  if (dlinkFind(&client_p->localClient->confs, conf) != NULL)
453 >  if (dlinkFind(&client_p->connection->confs, conf))
454      return 1;
455  
456 <  if (conf->type == CLIENT_TYPE ||
457 <      conf->type == SERVER_TYPE ||
458 <      conf->type == OPER_TYPE)
459 <  {
1364 <    struct AccessItem *aconf = map_to_conf(conf);
1365 <    struct ClassItem *aclass = map_to_conf(aconf->class_ptr);
456 >  if (conf->type == CONF_CLIENT)
457 >    if (cidr_limit_reached(IsConfExemptLimits(conf),
458 >                           &client_p->connection->ip, conf->class))
459 >      return TOO_MANY;    /* Already at maximum allowed */
460  
461 <    if (IsConfIllegal(aconf))
462 <      return NOT_AUTHORIZED;
461 >  conf->class->ref_count++;
462 >  conf->ref_count++;
463  
464 <    if (conf->type == CLIENT_TYPE)
1371 <      if (cidr_limit_reached(IsConfExemptLimits(aconf),
1372 <                             &client_p->localClient->ip, aclass))
1373 <        return TOO_MANY;    /* Already at maximum allowed */
1374 <
1375 <    CurrUserCount(aclass)++;
1376 <    aconf->clients++;
1377 <  }
1378 <  else if (conf->type == HUB_TYPE || conf->type == LEAF_TYPE)
1379 <  {
1380 <    struct MatchItem *match_item = map_to_conf(conf);
1381 <    match_item->ref_count++;
1382 <  }
1383 <
1384 <  dlinkAdd(conf, make_dlink_node(), &client_p->localClient->confs);
464 >  dlinkAdd(conf, make_dlink_node(), &client_p->connection->confs);
465  
466    return 0;
467   }
# Line 1399 | Line 479 | attach_connect_block(struct Client *clie
479                       const char *host)
480   {
481    dlink_node *ptr;
482 <  struct ConfItem *conf;
1403 <  struct AccessItem *aconf;
482 >  struct MaskItem *conf = NULL;
483  
484    assert(client_p != NULL);
485    assert(host != NULL);
# Line 1411 | Line 490 | attach_connect_block(struct Client *clie
490    DLINK_FOREACH(ptr, server_items.head)
491    {
492      conf = ptr->data;
1414    aconf = map_to_conf(conf);
493  
494 <    if (match(conf->name, name) == 0 || match(aconf->host, host) == 0)
494 >    if (match(conf->name, name) || match(conf->host, host))
495        continue;
496  
497      attach_conf(client_p, conf);
# Line 1423 | Line 501 | attach_connect_block(struct Client *clie
501    return 0;
502   }
503  
1426 /* find_conf_exact()
1427 *
1428 * inputs       - type of ConfItem
1429 *              - pointer to name to find
1430 *              - pointer to username to find
1431 *              - pointer to host to find
1432 * output       - NULL or pointer to conf found
1433 * side effects - find a conf entry which matches the hostname
1434 *                and has the same name.
1435 */
1436 struct ConfItem *
1437 find_conf_exact(ConfType type, const char *name, const char *user,
1438                const char *host)
1439 {
1440  dlink_node *ptr;
1441  dlink_list *list_p;
1442  struct ConfItem *conf = NULL;
1443  struct AccessItem *aconf;
1444
1445  /* Only valid for OPER_TYPE and ...? */
1446  list_p = map_to_list(type);
1447
1448  DLINK_FOREACH(ptr, (*list_p).head)
1449  {
1450    conf = ptr->data;
1451
1452    if (conf->name == NULL)
1453      continue;
1454    aconf = map_to_conf(conf);
1455    if (aconf->host == NULL)
1456      continue;
1457    if (irccmp(conf->name, name) != 0)
1458      continue;
1459
1460    /*
1461    ** Accept if the *real* hostname (usually sockethost)
1462    ** socket host) matches *either* host or name field
1463    ** of the configuration.
1464    */
1465    if (!match(aconf->host, host) || !match(aconf->user, user))
1466      continue;
1467    if (type == OPER_TYPE)
1468    {
1469      struct ClassItem *aclass = map_to_conf(aconf->class_ptr);
1470
1471      if (aconf->clients >= MaxTotal(aclass))
1472        continue;
1473    }
1474
1475    return conf;
1476  }
1477
1478  return NULL;
1479 }
1480
504   /* find_conf_name()
505   *
506   * inputs       - pointer to conf link list to search
# Line 1487 | Line 510 | find_conf_exact(ConfType type, const cha
510   * side effects - find a conf entry which matches the name
511   *                and has the given mask.
512   */
513 < struct ConfItem *
514 < find_conf_name(dlink_list *list, const char *name, ConfType type)
513 > struct MaskItem *
514 > find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
515   {
516    dlink_node *ptr;
517 <  struct ConfItem* conf;
517 >  struct MaskItem* conf;
518  
519    DLINK_FOREACH(ptr, list->head)
520    {
521      conf = ptr->data;
522 <    
522 >
523      if (conf->type == type)
524      {
525 <      if (conf->name && (irccmp(conf->name, name) == 0 ||
526 <                         match(conf->name, name)))
1504 <      return conf;
525 >      if (conf->name && !irccmp(conf->name, name))
526 >        return conf;
527      }
528    }
529  
# Line 1515 | Line 537 | find_conf_name(dlink_list *list, const c
537   * side effects - none
538   */
539   static dlink_list *
540 < map_to_list(ConfType type)
540 > map_to_list(enum maskitem_type type)
541   {
542    switch(type)
543    {
544 <  case RXLINE_TYPE:
1523 <    return(&rxconf_items);
1524 <    break;
1525 <  case XLINE_TYPE:
544 >  case CONF_XLINE:
545      return(&xconf_items);
546      break;
547 <  case ULINE_TYPE:
547 >  case CONF_ULINE:
548      return(&uconf_items);
549      break;
550 <  case NRESV_TYPE:
550 >  case CONF_NRESV:
551      return(&nresv_items);
552      break;
553 <  case OPER_TYPE:
553 >  case CONF_CRESV:
554 >    return(&cresv_items);
555 >  case CONF_OPER:
556      return(&oconf_items);
557      break;
558 <  case CLASS_TYPE:
1538 <    return(&class_items);
1539 <    break;
1540 <  case SERVER_TYPE:
558 >  case CONF_SERVER:
559      return(&server_items);
560      break;
561 <  case CLUSTER_TYPE:
561 >  case CONF_SERVICE:
562 >    return(&service_items);
563 >    break;
564 >  case CONF_CLUSTER:
565      return(&cluster_items);
566      break;
1546  case CONF_TYPE:
1547  case GLINE_TYPE:
1548  case KLINE_TYPE:
1549  case DLINE_TYPE:
1550  case CRESV_TYPE:
567    default:
568      return NULL;
569    }
# Line 1559 | Line 575 | map_to_list(ConfType type)
575   *              - pointer to name string to find
576   *              - pointer to user
577   *              - pointer to host
578 < *              - optional action to match on as well
579 < * output       - NULL or pointer to found struct MatchItem
578 > *              - optional flags to match on as well
579 > * output       - NULL or pointer to found struct MaskItem
580   * side effects - looks for a match on name field
581   */
582 < struct ConfItem *
583 < find_matching_name_conf(ConfType type, const char *name, const char *user,
584 <                        const char *host, int action)
582 > struct MaskItem *
583 > find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
584 >                        const char *host, unsigned int flags)
585   {
586    dlink_node *ptr=NULL;
587 <  struct ConfItem *conf=NULL;
1572 <  struct AccessItem *aconf=NULL;
1573 <  struct MatchItem *match_item=NULL;
587 >  struct MaskItem *conf=NULL;
588    dlink_list *list_p = map_to_list(type);
589  
590    switch (type)
591    {
592 < #ifdef HAVE_LIBPCRE
593 <  case RXLINE_TYPE:
594 <      DLINK_FOREACH(ptr, list_p->head)
595 <      {
1582 <        conf = ptr->data;
1583 <        assert(conf->regexpname);
592 >  case CONF_SERVICE:
593 >    DLINK_FOREACH(ptr, list_p->head)
594 >    {
595 >      conf = ptr->data;
596  
597 <        if (!ircd_pcre_exec(conf->regexpname, name))
598 <          return conf;
599 <      }
600 <      break;
601 < #endif
602 <  case XLINE_TYPE:
603 <  case ULINE_TYPE:
604 <  case NRESV_TYPE:
597 >      if (EmptyString(conf->name))
598 >        continue;
599 >      if ((name != NULL) && !irccmp(name, conf->name))
600 >        return conf;
601 >    }
602 >    break;
603 >
604 >  case CONF_XLINE:
605 >  case CONF_ULINE:
606 >  case CONF_NRESV:
607 >  case CONF_CRESV:
608      DLINK_FOREACH(ptr, list_p->head)
609      {
610        conf = ptr->data;
611  
1597      match_item = map_to_conf(conf);
612        if (EmptyString(conf->name))
613 <        continue;
614 <      if ((name != NULL) && match_esc(conf->name, name))
613 >        continue;
614 >      if ((name != NULL) && !match(conf->name, name))
615        {
616 <        if ((user == NULL && (host == NULL)))
617 <          return conf;
618 <        if ((match_item->action & action) != action)
616 >        if ((user == NULL && (host == NULL)))
617 >          return conf;
618 >        if ((conf->flags & flags) != flags)
619            continue;
620 <        if (EmptyString(match_item->user) || EmptyString(match_item->host))
621 <          return conf;
622 <        if (match(match_item->user, user) && match(match_item->host, host))
623 <          return conf;
620 >        if (EmptyString(conf->user) || EmptyString(conf->host))
621 >          return conf;
622 >        if (!match(conf->user, user) && !match(conf->host, host))
623 >          return conf;
624        }
625      }
626        break;
627  
628 <  case SERVER_TYPE:
628 >  case CONF_SERVER:
629      DLINK_FOREACH(ptr, list_p->head)
630      {
631        conf = ptr->data;
1618      aconf = map_to_conf(conf);
632  
633 <      if ((name != NULL) && match_esc(name, conf->name))
633 >      if ((name != NULL) && !match(name, conf->name))
634          return conf;
635 <      else if ((host != NULL) && match_esc(host, aconf->host))
635 >      else if ((host != NULL) && !match(host, conf->host))
636          return conf;
637      }
638      break;
639 <  
639 >
640    default:
641      break;
642    }
# Line 1636 | Line 649 | find_matching_name_conf(ConfType type, c
649   *              - pointer to name string to find
650   *              - pointer to user
651   *              - pointer to host
652 < * output       - NULL or pointer to found struct MatchItem
652 > * output       - NULL or pointer to found struct MaskItem
653   * side effects - looks for an exact match on name field
654   */
655 < struct ConfItem *
656 < find_exact_name_conf(ConfType type, const char *name,
655 > struct MaskItem *
656 > find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
657                       const char *user, const char *host)
658   {
659    dlink_node *ptr = NULL;
660 <  struct AccessItem *aconf;
661 <  struct ConfItem *conf;
1649 <  struct MatchItem *match_item;
1650 <  dlink_list *list_p;
1651 <
1652 <  list_p = map_to_list(type);
660 >  struct MaskItem *conf;
661 >  dlink_list *list_p = map_to_list(type);
662  
663    switch(type)
664    {
665 <  case RXLINE_TYPE:
666 <  case XLINE_TYPE:
667 <  case ULINE_TYPE:
668 <  case NRESV_TYPE:
665 >  case CONF_XLINE:
666 >  case CONF_ULINE:
667 >  case CONF_NRESV:
668 >  case CONF_CRESV:
669  
670      DLINK_FOREACH(ptr, list_p->head)
671      {
672        conf = ptr->data;
673 <      match_item = (struct MatchItem *)map_to_conf(conf);
673 >
674        if (EmptyString(conf->name))
675 <        continue;
676 <    
675 >        continue;
676 >
677        if (irccmp(conf->name, name) == 0)
678        {
679 <        if ((user == NULL && (host == NULL)))
680 <          return (conf);
681 <        if (EmptyString(match_item->user) || EmptyString(match_item->host))
682 <          return (conf);
683 <        if (match(match_item->user, user) && match(match_item->host, host))
684 <          return (conf);
679 >        if ((user == NULL && (host == NULL)))
680 >          return conf;
681 >        if (EmptyString(conf->user) || EmptyString(conf->host))
682 >          return conf;
683 >        if (!match(conf->user, user) && !match(conf->host, host))
684 >          return conf;
685        }
686      }
687      break;
688  
689 <  case OPER_TYPE:
689 >  case CONF_OPER:
690      DLINK_FOREACH(ptr, list_p->head)
691      {
692        conf = ptr->data;
693 <      aconf = (struct AccessItem *)map_to_conf(conf);
693 >
694        if (EmptyString(conf->name))
695 <        continue;
696 <    
697 <      if (irccmp(conf->name, name) == 0)
695 >        continue;
696 >
697 >      if (!irccmp(conf->name, name))
698        {
699 <        if ((user == NULL && (host == NULL)))
700 <          return (conf);
701 <        if (EmptyString(aconf->user) || EmptyString(aconf->host))
702 <          return (conf);
703 <        if (match(aconf->user, user) && match(aconf->host, host))
704 <          return (conf);
699 >        if (!who)
700 >          return conf;
701 >        if (EmptyString(conf->user) || EmptyString(conf->host))
702 >          return NULL;
703 >        if (!match(conf->user, who->username))
704 >        {
705 >          switch (conf->htype)
706 >          {
707 >            case HM_HOST:
708 >              if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
709 >                if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
710 >                  return conf;
711 >              break;
712 >            case HM_IPV4:
713 >              if (who->connection->aftype == AF_INET)
714 >                if (match_ipv4(&who->connection->ip, &conf->addr, conf->bits))
715 >                  if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
716 >                    return conf;
717 >              break;
718 >            case HM_IPV6:
719 >              if (who->connection->aftype == AF_INET6)
720 >                if (match_ipv6(&who->connection->ip, &conf->addr, conf->bits))
721 >                  if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
722 >                    return conf;
723 >              break;
724 >            default:
725 >              assert(0);
726 >          }
727 >        }
728        }
729      }
730 +
731      break;
732  
733 <  case SERVER_TYPE:
733 >  case CONF_SERVER:
734      DLINK_FOREACH(ptr, list_p->head)
735      {
736        conf = ptr->data;
737 <      aconf = (struct AccessItem *)map_to_conf(conf);
737 >
738        if (EmptyString(conf->name))
739 <        continue;
740 <    
739 >        continue;
740 >
741        if (name == NULL)
742        {
743 <        if (EmptyString(aconf->host))
744 <          continue;
745 <        if (irccmp(aconf->host, host) == 0)
746 <          return(conf);
743 >        if (EmptyString(conf->host))
744 >          continue;
745 >        if (irccmp(conf->host, host) == 0)
746 >          return conf;
747        }
748        else if (irccmp(conf->name, name) == 0)
749 <      {
1717 <          return (conf);
1718 <      }
749 >        return conf;
750      }
1720    break;
751  
1722  case CLASS_TYPE:
1723    DLINK_FOREACH(ptr, list_p->head)
1724    {
1725      conf = ptr->data;
1726      if (EmptyString(conf->name))
1727        continue;
1728    
1729      if (irccmp(conf->name, name) == 0)
1730        return (conf);
1731    }
752      break;
753  
754    default:
755      break;
756    }
757 <  return(NULL);
757 >
758 >  return NULL;
759   }
760  
761   /* rehash()
# Line 1746 | Line 767 | find_exact_name_conf(ConfType type, cons
767   int
768   rehash(int sig)
769   {
770 <  if (sig != 0)
771 <    sendto_realops_flags(UMODE_ALL, L_ALL,
772 <                         "Got signal SIGHUP, reloading ircd.conf file");
770 >  if (sig)
771 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
772 >                         "Got signal SIGHUP, reloading configuration file(s)");
773  
774    restart_resolver();
775  
776    /* don't close listeners until we know we can go ahead with the rehash */
777  
1757  /* Check to see if we magically got(or lost) IPv6 support */
1758  check_can_use_v6();
1759
778    read_conf_files(0);
779  
1762  if (ServerInfo.description != NULL)
1763    strlcpy(me.info, ServerInfo.description, sizeof(me.info));
1764
1765 #ifndef STATIC_MODULES
780    load_conf_modules();
781 < #endif
1768 <
1769 <  flush_deleted_I_P();
781 >  check_conf_klines();
782  
783 <  rehashed_klines = 1;
1772 <
1773 <  if (ConfigLoggingEntry.use_logging)
1774 <    reopen_log(logFileName);
1775 <
1776 <  return(0);
783 >  return 0;
784   }
785  
786   /* set_default_conf()
# Line 1791 | Line 798 | set_default_conf(void)
798    /* verify init_class() ran, this should be an unnecessary check
799     * but its not much work.
800     */
801 <  assert(class_default == (struct ConfItem *) class_items.tail->data);
801 >  assert(class_default == class_get_list()->tail->data);
802  
803   #ifdef HAVE_LIBCRYPTO
804 <  ServerInfo.rsa_private_key = NULL;
805 <  ServerInfo.rsa_private_key_file = NULL;
804 > #if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
805 >  {
806 >    EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
807 >
808 >    if (key)
809 >    {
810 >      SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
811 >      EC_KEY_free(key);
812 >    }
813 >  }
814 >
815 >  SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
816 > #endif
817 >
818 >  ConfigServerInfo.message_digest_algorithm = EVP_sha256();
819 >  ConfigServerInfo.rsa_private_key = NULL;
820 >  ConfigServerInfo.rsa_private_key_file = NULL;
821   #endif
822  
823 <  /* ServerInfo.name is not rehashable */
824 <  /* ServerInfo.name = ServerInfo.name; */
825 <  ServerInfo.description = NULL;
826 <  DupString(ServerInfo.network_name, NETWORK_NAME_DEFAULT);
827 <  DupString(ServerInfo.network_desc, NETWORK_DESC_DEFAULT);
828 <
829 <  memset(&ServerInfo.ip, 0, sizeof(ServerInfo.ip));
830 <  ServerInfo.specific_ipv4_vhost = 0;
831 <  memset(&ServerInfo.ip6, 0, sizeof(ServerInfo.ip6));
832 <  ServerInfo.specific_ipv6_vhost = 0;
833 <
834 <  ServerInfo.max_clients = MAXCLIENTS_MAX;
835 <
836 <  ServerInfo.hub = 0;
837 <  delete_capability("HUB");
838 <  ServerInfo.dns_host.sin_addr.s_addr = 0;
839 <  ServerInfo.dns_host.sin_port = 0;
840 <  AdminInfo.name = NULL;
841 <  AdminInfo.email = NULL;
842 <  AdminInfo.description = NULL;
843 <
844 <  set_log_level(L_NOTICE);
845 <  ConfigLoggingEntry.use_logging = 1;
846 <  ConfigLoggingEntry.operlog[0] = '\0';
847 <  ConfigLoggingEntry.userlog[0] = '\0';
848 <  ConfigLoggingEntry.klinelog[0] = '\0';
849 <  ConfigLoggingEntry.glinelog[0] = '\0';
850 <  ConfigLoggingEntry.killlog[0] = '\0';
851 <  ConfigLoggingEntry.operspylog[0] = '\0';
1830 <  ConfigLoggingEntry.ioerrlog[0] = '\0';
1831 <  ConfigLoggingEntry.failed_operlog[0] = '\0';
1832 <
1833 <  ConfigChannel.disable_fake_channels = NO;
1834 <  ConfigChannel.restrict_channels = NO;
1835 <  ConfigChannel.disable_local_channels = NO;
1836 <  ConfigChannel.use_invex = YES;
1837 <  ConfigChannel.use_except = YES;
1838 <  ConfigChannel.use_knock = YES;
1839 <  ConfigChannel.knock_delay = 300;
823 >  /* ConfigServerInfo.name is not rehashable */
824 >  /* ConfigServerInfo.name = ConfigServerInfo.name; */
825 >  ConfigServerInfo.description = NULL;
826 >  ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
827 >  ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
828 >
829 >  memset(&ConfigServerInfo.ip, 0, sizeof(ConfigServerInfo.ip));
830 >  ConfigServerInfo.specific_ipv4_vhost = 0;
831 >  memset(&ConfigServerInfo.ip6, 0, sizeof(ConfigServerInfo.ip6));
832 >  ConfigServerInfo.specific_ipv6_vhost = 0;
833 >
834 >  ConfigServerInfo.max_clients = MAXCLIENTS_MAX;
835 >  ConfigServerInfo.max_nick_length = 9;
836 >  ConfigServerInfo.max_topic_length = 80;
837 >  ConfigServerInfo.hub = 0;
838 >
839 >  ConfigAdminInfo.name = NULL;
840 >  ConfigAdminInfo.email = NULL;
841 >  ConfigAdminInfo.description = NULL;
842 >
843 >  log_del_all();
844 >
845 >  ConfigLog.use_logging = 1;
846 >
847 >  ConfigChannel.disable_fake_channels = 0;
848 >  ConfigChannel.invite_client_count = 10;
849 >  ConfigChannel.invite_client_time = 300;
850 >  ConfigChannel.knock_client_count = 1;
851 >  ConfigChannel.knock_client_time = 300;
852    ConfigChannel.knock_delay_channel = 60;
853 <  ConfigChannel.max_chans_per_user = 15;
1842 <  ConfigChannel.quiet_on_ban = YES;
853 >  ConfigChannel.max_channels = 25;
854    ConfigChannel.max_bans = 25;
855    ConfigChannel.default_split_user_count = 0;
856    ConfigChannel.default_split_server_count = 0;
857 <  ConfigChannel.no_join_on_split = NO;
858 <  ConfigChannel.no_create_on_split = NO;
1848 <  ConfigChannel.burst_topicwho = YES;
857 >  ConfigChannel.no_join_on_split = 0;
858 >  ConfigChannel.no_create_on_split = 0;
859  
860 <  ConfigServerHide.flatten_links = NO;
860 >  ConfigServerHide.flatten_links = 0;
861    ConfigServerHide.links_delay = 300;
862 <  ConfigServerHide.hidden = NO;
863 <  ConfigServerHide.disable_hidden = NO;
864 <  ConfigServerHide.hide_servers = NO;
865 <  DupString(ConfigServerHide.hidden_name, NETWORK_NAME_DEFAULT);
866 <  ConfigServerHide.hide_server_ips = NO;
867 <
868 <  
869 <  ConfigFileEntry.max_watch = WATCHSIZE_DEFAULT;
870 <  ConfigFileEntry.gline_min_cidr = 16;
871 <  ConfigFileEntry.gline_min_cidr6 = 48;
872 <  ConfigFileEntry.invisible_on_connect = YES;
873 <  ConfigFileEntry.burst_away = NO;
874 <  ConfigFileEntry.use_whois_actually = YES;
875 <  ConfigFileEntry.tkline_expire_notices = YES;
876 <  ConfigFileEntry.hide_spoof_ips = YES;
877 <  ConfigFileEntry.ignore_bogus_ts = NO;
878 <  ConfigFileEntry.disable_auth = NO;
879 <  ConfigFileEntry.disable_remote = NO;
880 <  ConfigFileEntry.kill_chase_time_limit = 90;
881 <  ConfigFileEntry.default_floodcount = 8; /* XXX */
882 <  ConfigFileEntry.failed_oper_notice = YES;
883 <  ConfigFileEntry.dots_in_ident = 0;      /* XXX */
884 <  ConfigFileEntry.dot_in_ip6_addr = YES;
885 <  ConfigFileEntry.min_nonwildcard = 4;
886 <  ConfigFileEntry.min_nonwildcard_simple = 3;
887 <  ConfigFileEntry.max_accept = 20;
888 <  ConfigFileEntry.anti_nick_flood = NO;   /* XXX */
889 <  ConfigFileEntry.max_nick_time = 20;
890 <  ConfigFileEntry.max_nick_changes = 5;
891 <  ConfigFileEntry.anti_spam_exit_message_time = 0;  /* XXX */
892 <  ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
893 <  ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;  /* XXX */
894 <  ConfigFileEntry.kline_with_reason = YES;
895 <  ConfigFileEntry.kline_reason = NULL;
896 <  ConfigFileEntry.warn_no_nline = YES;
897 <  ConfigFileEntry.stats_o_oper_only = NO; /* XXX */
898 <  ConfigFileEntry.stats_k_oper_only = 1;  /* masked */
899 <  ConfigFileEntry.stats_i_oper_only = 1;  /* masked */
900 <  ConfigFileEntry.stats_P_oper_only = NO;
901 <  ConfigFileEntry.caller_id_wait = 60;
902 <  ConfigFileEntry.opers_bypass_callerid = NO;
903 <  ConfigFileEntry.pace_wait = 10;
904 <  ConfigFileEntry.pace_wait_simple = 1;
905 <  ConfigFileEntry.short_motd = NO;
906 <  ConfigFileEntry.ping_cookie = NO;
907 <  ConfigFileEntry.no_oper_flood = NO;     /* XXX */
908 <  ConfigFileEntry.true_no_oper_flood = NO;  /* XXX */
909 <  ConfigFileEntry.oper_pass_resv = YES;
910 <  ConfigFileEntry.glines = NO;            /* XXX */
911 <  ConfigFileEntry.gline_time = 12 * 3600; /* XXX */
912 <  ConfigFileEntry.idletime = 0;
913 <  ConfigFileEntry.max_targets = MAX_TARGETS_DEFAULT;
914 <  ConfigFileEntry.client_flood = CLIENT_FLOOD_DEFAULT;
915 <  ConfigFileEntry.oper_only_umodes = UMODE_DEBUG;  /* XXX */
916 <  ConfigFileEntry.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE |
1907 <    UMODE_OPERWALL | UMODE_WALLOP;        /* XXX */
1908 <  DupString(ConfigFileEntry.servlink_path, SLPATH);
1909 < #ifdef HAVE_LIBCRYPTO
1910 <  /* jdc -- This is our default value for a cipher.  According to the
1911 <   *        CRYPTLINK document (doc/cryptlink.txt), BF/128 must be supported
1912 <   *        under all circumstances if cryptlinks are enabled.  So,
1913 <   *        this will be our default.
1914 <   *
1915 <   *        NOTE: I apologise for the hard-coded value of "1" (BF/128).
1916 <   *              This should be moved into a find_cipher() routine.
1917 <   */
1918 <  ConfigFileEntry.default_cipher_preference = &CipherTable[1];
1919 < #endif
1920 <  ConfigFileEntry.use_egd = NO;
1921 <  ConfigFileEntry.egdpool_path = NULL;
1922 < #ifdef HAVE_LIBZ
1923 <  ConfigFileEntry.compression_level = 0;
1924 < #endif
1925 <  ConfigFileEntry.throttle_time = 10;
862 >  ConfigServerHide.hidden = 0;
863 >  ConfigServerHide.hide_servers = 0;
864 >  ConfigServerHide.hide_services = 0;
865 >  ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
866 >  ConfigServerHide.hide_server_ips = 0;
867 >  ConfigServerHide.disable_remote_commands = 0;
868 >
869 >  ConfigGeneral.away_count = 2;
870 >  ConfigGeneral.away_time = 10;
871 >  ConfigGeneral.max_watch = WATCHSIZE_DEFAULT;
872 >  ConfigGeneral.cycle_on_host_change = 1;
873 >  ConfigGeneral.glines = 0;
874 >  ConfigGeneral.gline_time = 12 * 3600;
875 >  ConfigGeneral.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
876 >  ConfigGeneral.gline_min_cidr = 16;
877 >  ConfigGeneral.gline_min_cidr6 = 48;
878 >  ConfigGeneral.invisible_on_connect = 1;
879 >  ConfigGeneral.tkline_expire_notices = 1;
880 >  ConfigGeneral.hide_spoof_ips = 1;
881 >  ConfigGeneral.ignore_bogus_ts = 0;
882 >  ConfigGeneral.disable_auth = 0;
883 >  ConfigGeneral.kill_chase_time_limit = 90;
884 >  ConfigGeneral.default_floodcount = 8;
885 >  ConfigGeneral.failed_oper_notice = 1;
886 >  ConfigGeneral.dots_in_ident = 0;
887 >  ConfigGeneral.min_nonwildcard = 4;
888 >  ConfigGeneral.min_nonwildcard_simple = 3;
889 >  ConfigGeneral.max_accept = 20;
890 >  ConfigGeneral.anti_nick_flood = 0;
891 >  ConfigGeneral.max_nick_time = 20;
892 >  ConfigGeneral.max_nick_changes = 5;
893 >  ConfigGeneral.anti_spam_exit_message_time = 0;
894 >  ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
895 >  ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
896 >  ConfigGeneral.warn_no_connect_block = 1;
897 >  ConfigGeneral.stats_e_disabled = 0;
898 >  ConfigGeneral.stats_o_oper_only = 0;
899 >  ConfigGeneral.stats_k_oper_only = 1;  /* 1 = masked */
900 >  ConfigGeneral.stats_i_oper_only = 1;  /* 1 = masked */
901 >  ConfigGeneral.stats_P_oper_only = 0;
902 >  ConfigGeneral.stats_u_oper_only = 0;
903 >  ConfigGeneral.caller_id_wait = 60;
904 >  ConfigGeneral.opers_bypass_callerid = 0;
905 >  ConfigGeneral.pace_wait = 10;
906 >  ConfigGeneral.pace_wait_simple = 1;
907 >  ConfigGeneral.short_motd = 0;
908 >  ConfigGeneral.ping_cookie = 0;
909 >  ConfigGeneral.no_oper_flood = 0;
910 >  ConfigGeneral.true_no_oper_flood = 0;
911 >  ConfigGeneral.oper_pass_resv = 1;
912 >  ConfigGeneral.max_targets = MAX_TARGETS_DEFAULT;
913 >  ConfigGeneral.oper_only_umodes = UMODE_DEBUG;
914 >  ConfigGeneral.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
915 >  ConfigGeneral.throttle_count = 1;
916 >  ConfigGeneral.throttle_time = 1;
917   }
918  
919 < /* read_conf()
919 > static void
920 > validate_conf(void)
921 > {
922 >  if (ConfigGeneral.ts_warn_delta < TS_WARN_DELTA_MIN)
923 >    ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
924 >
925 >  if (ConfigGeneral.ts_max_delta < TS_MAX_DELTA_MIN)
926 >    ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
927 >
928 >  if (ConfigServerInfo.network_name == NULL)
929 >    ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
930 >
931 >  if (ConfigServerInfo.network_desc == NULL)
932 >    ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
933 >
934 >  ConfigGeneral.max_watch = IRCD_MAX(ConfigGeneral.max_watch, WATCHSIZE_MIN);
935 > }
936 >
937 > /* read_conf()
938   *
939   * inputs       - file descriptor pointing to config file to use
940   * output       - None
941   * side effects - Read configuration file.
942   */
943   static void
944 < read_conf(FBFILE *file)
944 > read_conf(FILE *file)
945   {
946    lineno = 0;
947  
948 <  set_default_conf(); /* Set default values prior to conf parsing */
948 >  set_default_conf();  /* Set default values prior to conf parsing */
949    conf_parser_ctx.pass = 1;
950 <  yyparse();          /* pick up the classes first */
950 >  yyparse();  /* Pick up the classes first */
951  
952 <  fbrewind(file);
952 >  rewind(file);
953  
954    conf_parser_ctx.pass = 2;
955 <  yyparse();          /* Load the values from the conf */
956 <  validate_conf();    /* Check to make sure some values are still okay. */
957 <                      /* Some global values are also loaded here. */
958 <  check_class();      /* Make sure classes are valid */
1950 < }
1951 <
1952 < static void
1953 < validate_conf(void)
1954 < {
1955 <  if (ConfigFileEntry.ts_warn_delta < TS_WARN_DELTA_MIN)
1956 <    ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
1957 <
1958 <  if (ConfigFileEntry.ts_max_delta < TS_MAX_DELTA_MIN)
1959 <    ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
1960 <
1961 <  if (ConfigFileEntry.servlink_path == NULL)
1962 <    DupString(ConfigFileEntry.servlink_path, SLPATH);
1963 <
1964 <  if (ServerInfo.network_name == NULL)
1965 <    DupString(ServerInfo.network_name,NETWORK_NAME_DEFAULT);
1966 <
1967 <  if (ServerInfo.network_desc == NULL)
1968 <    DupString(ServerInfo.network_desc,NETWORK_DESC_DEFAULT);
1969 <
1970 <  if ((ConfigFileEntry.client_flood < CLIENT_FLOOD_MIN) ||
1971 <      (ConfigFileEntry.client_flood > CLIENT_FLOOD_MAX))
1972 <    ConfigFileEntry.client_flood = CLIENT_FLOOD_MAX;
1973 <
1974 <  ConfigFileEntry.max_watch = IRCD_MAX(ConfigFileEntry.max_watch, WATCHSIZE_MIN);
955 >  yyparse();  /* Load the values from the conf */
956 >  validate_conf();  /* Check to make sure some values are still okay. */
957 >                    /* Some global values are also loaded here. */
958 >  class_delete_marked();  /* Delete unused classes that are marked for deletion */
959   }
960  
961   /* lookup_confhost()
# Line 1979 | Line 963 | validate_conf(void)
963   * start DNS lookups of all hostnames in the conf
964   * line and convert an IP addresses in a.b.c.d number for to IP#s.
965   */
966 < static void
967 < lookup_confhost(struct ConfItem *conf)
966 > void
967 > lookup_confhost(struct MaskItem *conf)
968   {
1985  struct AccessItem *aconf;
969    struct addrinfo hints, *res;
970  
971 <  aconf = map_to_conf(conf);
972 <
1990 <  if (EmptyString(aconf->host) ||
1991 <      EmptyString(aconf->user))
1992 <  {
1993 <    ilog(L_ERROR, "Host/server name error: (%s) (%s)",
1994 <         aconf->host, conf->name);
1995 <    return;
1996 <  }
1997 <
1998 <  if (strchr(aconf->host, '*') ||
1999 <      strchr(aconf->host, '?'))
2000 <    return;
2001 <
2002 <  /* Do name lookup now on hostnames given and store the
971 >  /*
972 >   * Do name lookup now on hostnames given and store the
973     * ip numbers in conf structure.
974     */
975    memset(&hints, 0, sizeof(hints));
# Line 2010 | Line 980 | lookup_confhost(struct ConfItem *conf)
980    /* Get us ready for a bind() and don't bother doing dns lookup */
981    hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
982  
983 <  if (irc_getaddrinfo(aconf->host, NULL, &hints, &res))
983 >  if (getaddrinfo(conf->host, NULL, &hints, &res))
984    {
985 <    conf_dns_lookup(aconf);
985 >    conf_dns_lookup(conf);
986      return;
987    }
988  
989 <  assert(res != NULL);
989 >  assert(res);
990  
991 <  memcpy(&aconf->ipnum, res->ai_addr, res->ai_addrlen);
992 <  aconf->ipnum.ss_len = res->ai_addrlen;
993 <  aconf->ipnum.ss.ss_family = res->ai_family;
994 <  irc_freeaddrinfo(res);
991 >  memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
992 >  conf->addr.ss_len = res->ai_addrlen;
993 >  conf->addr.ss.ss_family = res->ai_family;
994 >
995 >  freeaddrinfo(res);
996   }
997  
998   /* conf_connect_allowed()
# Line 2034 | Line 1005 | lookup_confhost(struct ConfItem *conf)
1005   int
1006   conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1007   {
1008 <  struct ip_entry *ip_found;
1009 <  struct AccessItem *aconf = find_dline_conf(addr, aftype);
1008 >  struct ip_entry *ip_found = NULL;
1009 >  struct MaskItem *conf = find_dline_conf(addr, aftype);
1010  
1011    /* DLINE exempt also gets you out of static limits/pacing... */
1012 <  if (aconf && (aconf->status & CONF_EXEMPTDLINE))
1012 >  if (conf && (conf->type == CONF_EXEMPT))
1013      return 0;
1014  
1015 <  if (aconf != NULL)
1015 >  if (conf)
1016      return BANNED_CLIENT;
1017  
1018 <  ip_found = find_or_add_ip(addr);
1018 >  ip_found = ipcache_find_or_add_address(addr);
1019  
1020 <  if ((CurrentTime - ip_found->last_attempt) <
2050 <      ConfigFileEntry.throttle_time)
1020 >  if ((CurrentTime - ip_found->last_attempt) < ConfigGeneral.throttle_time)
1021    {
1022 <    ip_found->last_attempt = CurrentTime;
1023 <    return TOO_FAST;
1022 >    if (ip_found->connection_count >= ConfigGeneral.throttle_count)
1023 >      return TOO_FAST;
1024 >
1025 >    ++ip_found->connection_count;
1026    }
1027 +  else
1028 +    ip_found->connection_count = 1;
1029  
1030    ip_found->last_attempt = CurrentTime;
1031    return 0;
1032   }
1033  
2060 static struct AccessItem *
2061 find_regexp_kline(const char *uhi[])
2062 {
2063 #ifdef HAVE_LIBPCRE
2064  const dlink_node *ptr = NULL;
2065
2066  DLINK_FOREACH(ptr, rkconf_items.head)
2067  {
2068    struct AccessItem *aptr = map_to_conf(ptr->data);
2069
2070    assert(aptr->regexuser);
2071    assert(aptr->regexhost);
2072
2073    if (!ircd_pcre_exec(aptr->regexuser, uhi[0]) &&
2074        (!ircd_pcre_exec(aptr->regexhost, uhi[1]) ||
2075         !ircd_pcre_exec(aptr->regexhost, uhi[2])))
2076      return aptr;
2077  }
2078 #endif
2079  return NULL;
2080 }
2081
2082 /* find_kill()
2083 *
2084 * inputs       - pointer to client structure
2085 * output       - pointer to struct AccessItem if found
2086 * side effects - See if this user is klined already,
2087 *                and if so, return struct AccessItem pointer
2088 */
2089 struct AccessItem *
2090 find_kill(struct Client *client_p)
2091 {
2092  struct AccessItem *aconf = NULL;
2093  const char *uhi[3];
2094
2095  uhi[0] = client_p->username;
2096  uhi[1] = client_p->host;
2097  uhi[2] = client_p->sockhost;
2098
2099  assert(client_p != NULL);
2100
2101  aconf = find_kline_conf(client_p->host, client_p->username,
2102                          &client_p->localClient->ip,
2103                          client_p->localClient->aftype);
2104  if (aconf == NULL)
2105    aconf = find_regexp_kline(uhi);
2106
2107  if (aconf && (aconf->status & CONF_KLINE))
2108    return aconf;
2109
2110  return NULL;
2111 }
2112
2113 struct AccessItem *
2114 find_gline(struct Client *client_p)
2115 {
2116  struct AccessItem *aconf;
2117
2118  assert(client_p != NULL);
2119
2120  aconf = find_gline_conf(client_p->host, client_p->username,
2121                          &client_p->localClient->ip,
2122                          client_p->localClient->aftype);
2123
2124  if (aconf && (aconf->status & CONF_GLINE))
2125    return aconf;
2126
2127  return NULL;
2128 }
2129
2130 /* add_temp_line()
2131 *
2132 * inputs        - pointer to struct ConfItem
2133 * output        - none
2134 * Side effects  - links in given struct ConfItem into
2135 *                 temporary *line link list
2136 */
2137 void
2138 add_temp_line(struct ConfItem *conf)
2139 {
2140  struct AccessItem *aconf;
2141
2142  if (conf->type == DLINE_TYPE)
2143  {
2144    aconf = map_to_conf(conf);
2145    SetConfTemporary(aconf);
2146    dlinkAdd(conf, &conf->node, &temporary_dlines);
2147    MyFree(aconf->user);
2148    aconf->user = NULL;
2149    add_conf_by_address(CONF_DLINE, aconf);
2150  }
2151  else if (conf->type == KLINE_TYPE)
2152  {
2153    aconf = map_to_conf(conf);
2154    SetConfTemporary(aconf);
2155    dlinkAdd(conf, &conf->node, &temporary_klines);
2156    add_conf_by_address(CONF_KILL, aconf);
2157  }
2158  else if (conf->type == GLINE_TYPE)
2159  {
2160    aconf = map_to_conf(conf);
2161    SetConfTemporary(aconf);
2162    dlinkAdd(conf, &conf->node, &temporary_glines);
2163    add_conf_by_address(CONF_GLINE, aconf);
2164  }
2165  else if (conf->type == XLINE_TYPE)
2166  {
2167    conf->flags |= CONF_FLAGS_TEMPORARY;
2168    dlinkAdd(conf, make_dlink_node(), &temporary_xlines);
2169  }
2170  else if (conf->type == RXLINE_TYPE)
2171  {
2172    conf->flags |= CONF_FLAGS_TEMPORARY;
2173    dlinkAdd(conf, make_dlink_node(), &temporary_rxlines);
2174  }
2175  else if (conf->type == RKLINE_TYPE)
2176  {
2177    conf->flags |= CONF_FLAGS_TEMPORARY;
2178    dlinkAdd(conf, make_dlink_node(), &temporary_rklines);
2179  }
2180  else if ((conf->type == NRESV_TYPE) || (conf->type == CRESV_TYPE))
2181  {
2182    conf->flags |= CONF_FLAGS_TEMPORARY;
2183    dlinkAdd(conf, make_dlink_node(), &temporary_resv);
2184  }
2185 }
2186
1034   /* cleanup_tklines()
1035   *
1036   * inputs       - NONE
# Line 2192 | Line 1039 | add_temp_line(struct ConfItem *conf)
1039   *                This is an event started off in ircd.c
1040   */
1041   void
1042 < cleanup_tklines(void *notused)
1042 > cleanup_tklines(void *unused)
1043   {
1044 <  expire_tklines(&temporary_glines);
1045 <  expire_tklines(&temporary_klines);
1046 <  expire_tklines(&temporary_dlines);
1047 <  expire_tklines(&temporary_xlines);
2201 <  expire_tklines(&temporary_rxlines);
2202 <  expire_tklines(&temporary_rklines);
2203 <  expire_tklines(&temporary_resv);
1044 >  hostmask_expire_temporary();
1045 >  expire_tklines(&xconf_items);
1046 >  expire_tklines(&nresv_items);
1047 >  expire_tklines(&cresv_items);
1048   }
1049  
1050   /* expire_tklines()
# Line 2212 | Line 1056 | cleanup_tklines(void *notused)
1056   static void
1057   expire_tklines(dlink_list *tklist)
1058   {
1059 <  dlink_node *ptr;
1060 <  dlink_node *next_ptr;
2217 <  struct ConfItem *conf;
2218 <  struct MatchItem *xconf;
2219 <  struct MatchItem *nconf;
2220 <  struct AccessItem *aconf;
2221 <  struct ResvChannel *cconf;
1059 >  dlink_node *ptr = NULL, *ptr_next = NULL;
1060 >  struct MaskItem *conf = NULL;
1061  
1062 <  DLINK_FOREACH_SAFE(ptr, next_ptr, tklist->head)
1062 >  DLINK_FOREACH_SAFE(ptr, ptr_next, tklist->head)
1063    {
1064      conf = ptr->data;
2226    if (conf->type == GLINE_TYPE ||
2227        conf->type == KLINE_TYPE ||
2228        conf->type == DLINE_TYPE)
2229    {
2230      aconf = (struct AccessItem *)map_to_conf(conf);
2231      if (aconf->hold <= CurrentTime)
2232      {
2233        /* XXX - Do we want GLINE expiry notices?? */
2234        /* Alert opers that a TKline expired - Hwy */
2235        if (ConfigFileEntry.tkline_expire_notices)
2236        {
2237          if (aconf->status & CONF_KILL)
2238          {
2239            sendto_realops_flags(UMODE_ALL, L_ALL,
2240                                 "Temporary K-line for [%s@%s] expired",
2241                                 (aconf->user) ? aconf->user : "*",
2242                                 (aconf->host) ? aconf->host : "*");
2243          }
2244          else if (conf->type == DLINE_TYPE)
2245          {
2246            sendto_realops_flags(UMODE_ALL, L_ALL,
2247                                 "Temporary D-line for [%s] expired",
2248                                 (aconf->host) ? aconf->host : "*");
2249          }
2250        }
1065  
1066 <        dlinkDelete(ptr, tklist);
1067 <        delete_one_address_conf(aconf->host, aconf);
1068 <      }
1069 <    }
2256 <    else if (conf->type == XLINE_TYPE ||
2257 <             conf->type == RXLINE_TYPE)
2258 <    {
2259 <      xconf = (struct MatchItem *)map_to_conf(conf);
2260 <      if (xconf->hold <= CurrentTime)
2261 <      {
2262 <        if (ConfigFileEntry.tkline_expire_notices)
2263 <          sendto_realops_flags(UMODE_ALL, L_ALL,
2264 <                               "Temporary X-line for [%s] %sexpired", conf->name,
2265 <                               conf->type == RXLINE_TYPE ? "(REGEX) " : "");
2266 <        dlinkDelete(ptr, tklist);
2267 <        free_dlink_node(ptr);
2268 <        delete_conf_item(conf);
2269 <      }
2270 <    }
2271 <    else if (conf->type == RKLINE_TYPE)
1066 >    if (!conf->until || conf->until > CurrentTime)
1067 >      continue;
1068 >
1069 >    if (conf->type == CONF_XLINE)
1070      {
1071 <      aconf = map_to_conf(conf);
1072 <      if (aconf->hold <= CurrentTime)
1073 <      {
1074 <        if (ConfigFileEntry.tkline_expire_notices)
2277 <           sendto_realops_flags(UMODE_ALL, L_ALL,
2278 <                                "Temporary K-line for [%s@%s] (REGEX) expired",
2279 <                                (aconf->user) ? aconf->user : "*",
2280 <                                (aconf->host) ? aconf->host : "*");
2281 <        dlinkDelete(ptr, tklist);
2282 <        free_dlink_node(ptr);
2283 <        delete_conf_item(conf);
2284 <      }
1071 >      if (ConfigGeneral.tkline_expire_notices)
1072 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1073 >                               "Temporary X-line for [%s] expired", conf->name);
1074 >      conf_free(conf);
1075      }
1076 <    else if (conf->type == NRESV_TYPE)
1076 >    else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1077      {
1078 <      nconf = (struct MatchItem *)map_to_conf(conf);
1079 <      if (nconf->hold <= CurrentTime)
2290 <      {
2291 <        if (ConfigFileEntry.tkline_expire_notices)
2292 <          sendto_realops_flags(UMODE_ALL, L_ALL,
1078 >      if (ConfigGeneral.tkline_expire_notices)
1079 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1080                                 "Temporary RESV for [%s] expired", conf->name);
1081 <        dlinkDelete(ptr, tklist);
2295 <        free_dlink_node(ptr);
2296 <        delete_conf_item(conf);
2297 <      }
2298 <    }
2299 <    else if (conf->type == CRESV_TYPE)
2300 <    {
2301 <      cconf = (struct ResvChannel *)map_to_conf(conf);
2302 <      if (cconf->hold <= CurrentTime)
2303 <      {
2304 <        if (ConfigFileEntry.tkline_expire_notices)
2305 <          sendto_realops_flags(UMODE_ALL, L_ALL,
2306 <                               "Temporary RESV for [%s] expired", cconf->name);
2307 <        delete_channel_resv(cconf);
2308 <      }
1081 >      conf_free(conf);
1082      }
1083    }
1084   }
# Line 2318 | Line 1091 | expire_tklines(dlink_list *tklist)
1091   */
1092   static const struct oper_privs
1093   {
1094 <  const unsigned int oprivs;
2322 <  const unsigned int hidden;
1094 >  const unsigned int flag;
1095    const unsigned char c;
1096   } flag_list[] = {
1097 <  { OPER_FLAG_ADMIN,       OPER_FLAG_HIDDEN_ADMIN,  'A' },
1098 <  { OPER_FLAG_REMOTEBAN,   0,                       'B' },
1099 <  { OPER_FLAG_DIE,         0,                       'D' },
1100 <  { OPER_FLAG_GLINE,       0,                       'G' },
1101 <  { OPER_FLAG_REHASH,      0,                       'H' },
1102 <  { OPER_FLAG_K,           0,                       'K' },
1103 <  { OPER_FLAG_OPERWALL,    0,                       'L' },
1104 <  { OPER_FLAG_N,           0,                       'N' },
1105 <  { OPER_FLAG_GLOBAL_KILL, 0,                       'O' },
1106 <  { OPER_FLAG_REMOTE,      0,                       'R' },
1107 <  { OPER_FLAG_OPER_SPY,    0,                       'S' },
1108 <  { OPER_FLAG_UNKLINE,     0,                       'U' },
1109 <  { OPER_FLAG_X,           0,                       'X' },
1110 <  { 0, 0, '\0' }
1097 >  { OPER_FLAG_ADMIN,          'A' },
1098 >  { OPER_FLAG_REMOTEBAN,      'B' },
1099 >  { OPER_FLAG_DIE,            'D' },
1100 >  { OPER_FLAG_GLINE,          'G' },
1101 >  { OPER_FLAG_REHASH,         'H' },
1102 >  { OPER_FLAG_KLINE,          'K' },
1103 >  { OPER_FLAG_KILL,           'N' },
1104 >  { OPER_FLAG_KILL_REMOTE,    'O' },
1105 >  { OPER_FLAG_CONNECT,        'P' },
1106 >  { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1107 >  { OPER_FLAG_SQUIT,          'R' },
1108 >  { OPER_FLAG_SQUIT_REMOTE,   'S' },
1109 >  { OPER_FLAG_UNKLINE,        'U' },
1110 >  { OPER_FLAG_XLINE,          'X' },
1111 >  { 0, '\0' }
1112   };
1113  
1114   char *
1115   oper_privs_as_string(const unsigned int port)
1116   {
1117 <  static char privs_out[16];
1117 >  static char privs_out[IRCD_BUFSIZE];
1118    char *privs_ptr = privs_out;
2346  unsigned int i = 0;
1119  
1120 <  for (; flag_list[i].oprivs; ++i)
1120 >  for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1121    {
1122 <    if ((port & flag_list[i].oprivs) &&
1123 <        (port & flag_list[i].hidden) == 0)
2352 <      *privs_ptr++ = flag_list[i].c;
1122 >    if (port & opriv->flag)
1123 >      *privs_ptr++ = opriv->c;
1124      else
1125 <      *privs_ptr++ = ToLowerTab[flag_list[i].c];
1125 >      *privs_ptr++ = ToLower(opriv->c);
1126    }
1127  
1128    *privs_ptr = '\0';
# Line 2360 | Line 1131 | oper_privs_as_string(const unsigned int
1131   }
1132  
1133   /*
1134 < * Input: A client to find the active oper{} name for.
1134 > * Input: A client to find the active operator {} name for.
1135   * Output: The nick!user@host{oper} of the oper.
1136   *         "oper" is server name for remote opers
1137   * Side effects: None.
1138   */
1139 < char *
1139 > const char *
1140   get_oper_name(const struct Client *client_p)
1141   {
1142 <  dlink_node *cnode;
2372 <  struct ConfItem *conf;
2373 <  struct AccessItem *aconf;
2374 <
1142 >  const dlink_node *cnode = NULL;
1143    /* +5 for !,@,{,} and null */
1144 <  static char buffer[NICKLEN+USERLEN+HOSTLEN+HOSTLEN+5];
1144 >  static char buffer[NICKLEN + USERLEN + HOSTLEN + HOSTLEN + 5];
1145 >
1146 >  if (IsServer(client_p))
1147 >    return client_p->name;
1148  
1149    if (MyConnect(client_p))
1150    {
1151 <    DLINK_FOREACH(cnode, client_p->localClient->confs.head)
1151 >    if ((cnode = client_p->connection->confs.head))
1152      {
1153 <      conf = cnode->data;
2383 <      aconf = map_to_conf(conf);
1153 >      const struct MaskItem *conf = cnode->data;
1154  
1155 <      if (IsConfOperator(aconf))
1155 >      if (IsConfOperator(conf))
1156        {
1157 <        ircsprintf(buffer, "%s!%s@%s{%s}", client_p->name,
1158 <                   client_p->username, client_p->host,
1159 <                   conf->name);
2390 <        return buffer;
1157 >        snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1158 >                 client_p->username, client_p->host, conf->name);
1159 >        return buffer;
1160        }
1161      }
1162  
1163 <    /* Probably should assert here for now. If there is an oper out there
1164 <     * with no oper{} conf attached, it would be good for us to know...
1163 >    /*
1164 >     * Probably should assert here for now. If there is an oper out there
1165 >     * with no operator {} conf attached, it would be good for us to know...
1166       */
1167 <    assert(0); /* Oper without oper conf! */
1167 >    assert(0);  /* Oper without oper conf! */
1168    }
1169  
1170 <  ircsprintf(buffer, "%s!%s@%s{%s}", client_p->name,
1171 <             client_p->username, client_p->host, client_p->servptr->name);
1170 >  snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1171 >           client_p->username, client_p->host, client_p->servptr->name);
1172    return buffer;
1173   }
1174  
# Line 2411 | Line 1181 | get_oper_name(const struct Client *clien
1181   void
1182   read_conf_files(int cold)
1183   {
1184 <  const char *filename;
1185 <  char chanmodes[32];
1186 <  char chanlimit[32];
1184 >  const char *filename = NULL;
1185 >  char chanmodes[IRCD_BUFSIZE] = "";
1186 >  char chanlimit[IRCD_BUFSIZE] = "";
1187  
1188    conf_parser_ctx.boot = cold;
1189 <  filename = get_conf_name(CONF_TYPE);
1189 >  filename = ConfigGeneral.configfile;
1190  
1191    /* We need to know the initial filename for the yyerror() to report
1192       FIXME: The full path is in conffilenamebuf first time since we
1193 <             dont know anything else
1193 >             don't know anything else
1194  
1195 <     - Gozem 2002-07-21
1195 >     - Gozem 2002-07-21
1196    */
1197    strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1198  
1199 <  if ((conf_parser_ctx.conf_file = fbopen(filename, "r")) == NULL)
1199 >  if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1200    {
1201      if (cold)
1202      {
1203 <      ilog(L_CRIT, "Unable to read configuration file '%s': %s",
1203 >      ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1204             filename, strerror(errno));
1205        exit(-1);
1206      }
1207      else
1208      {
1209 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1210 <                           "Unable to read configuration file '%s': %s",
1211 <                           filename, strerror(errno));
1209 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1210 >                           "Unable to read configuration file '%s': %s",
1211 >                           filename, strerror(errno));
1212        return;
1213      }
1214    }
# Line 2447 | Line 1217 | read_conf_files(int cold)
1217      clear_out_old_conf();
1218  
1219    read_conf(conf_parser_ctx.conf_file);
1220 <  fbclose(conf_parser_ctx.conf_file);
1220 >  fclose(conf_parser_ctx.conf_file);
1221  
1222 <  add_isupport("NETWORK", ServerInfo.network_name, -1);
1223 <  ircsprintf(chanmodes, "b%s%s:%d", ConfigChannel.use_except ? "e" : "",
1224 <             ConfigChannel.use_invex ? "I" : "", ConfigChannel.max_bans);
1222 >  log_reopen_all();
1223 >
1224 >  add_isupport("NICKLEN", NULL, ConfigServerInfo.max_nick_length);
1225 >  add_isupport("NETWORK", ConfigServerInfo.network_name, -1);
1226 >
1227 >  snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1228    add_isupport("MAXLIST", chanmodes, -1);
1229 <  add_isupport("MAXTARGETS", NULL, ConfigFileEntry.max_targets);
1230 <  if (ConfigChannel.disable_local_channels)
1231 <    add_isupport("CHANTYPES", "#", -1);
1232 <  else
1233 <    add_isupport("CHANTYPES", "#&", -1);
2461 <  ircsprintf(chanlimit, "%s:%d", ConfigChannel.disable_local_channels ? "#" : "#&",
2462 <             ConfigChannel.max_chans_per_user);
1229 >  add_isupport("MAXTARGETS", NULL, ConfigGeneral.max_targets);
1230 >  add_isupport("CHANTYPES", "#", -1);
1231 >
1232 >  snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1233 >           ConfigChannel.max_channels);
1234    add_isupport("CHANLIMIT", chanlimit, -1);
1235 <  ircsprintf(chanmodes, "%s%s%s", ConfigChannel.use_except ? "e" : "",
1236 <             ConfigChannel.use_invex ? "I" : "", "b,k,l,imnpst");
1237 <  add_isupport("CHANNELLEN", NULL, LOCAL_CHANNELLEN);
2467 <  if (ConfigChannel.use_except)
2468 <    add_isupport("EXCEPTS", "e", -1);
2469 <  if (ConfigChannel.use_invex)
2470 <    add_isupport("INVEX", "I", -1);
1235 >  snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstMORS");
1236 >  add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1237 >  add_isupport("TOPICLEN", NULL, ConfigServerInfo.max_topic_length);
1238    add_isupport("CHANMODES", chanmodes, -1);
1239  
1240    /*
# Line 2475 | Line 1242 | read_conf_files(int cold)
1242     * on strlen(form_str(RPL_ISUPPORT))
1243     */
1244    rebuild_isupport_message_line();
2478
2479 #ifdef HAVE_LIBPCRE
2480  parse_conf_file(RKLINE_TYPE, cold);
2481  parse_conf_file(RXLINE_TYPE, cold);
2482 #endif
2483  parse_conf_file(KLINE_TYPE, cold);
2484  parse_conf_file(DLINE_TYPE, cold);
2485  parse_conf_file(XLINE_TYPE, cold);
2486  parse_conf_file(NRESV_TYPE, cold);
2487  parse_conf_file(CRESV_TYPE, cold);
2488 }
2489
2490 /* parse_conf_file()
2491 *
2492 * inputs       - type of conf file to parse
2493 * output       - none
2494 * side effects - conf file for givenconf type is opened and read then parsed
2495 */
2496 static void
2497 parse_conf_file(int type, int cold)
2498 {
2499  FBFILE *file = NULL;
2500  const char *filename = get_conf_name(type);
2501
2502  if ((file = fbopen(filename, "r")) == NULL)
2503  {
2504    if (cold)
2505      ilog(L_ERROR, "Unable to read configuration file '%s': %s",
2506           filename, strerror(errno));
2507    else
2508      sendto_realops_flags(UMODE_ALL, L_ALL,
2509                    "Unable to read configuration file '%s': %s",
2510                           filename, strerror(errno));
2511  }
2512  else
2513  {
2514    parse_csv_file(file, type);
2515    fbclose(file);
2516  }
1245   }
1246  
1247   /* clear_out_old_conf()
# Line 2526 | Line 1254 | static void
1254   clear_out_old_conf(void)
1255   {
1256    dlink_node *ptr = NULL, *next_ptr = NULL;
2529  struct ConfItem *conf;
2530  struct AccessItem *aconf;
2531  struct ClassItem *cltmp;
2532  struct MatchItem *match_item;
1257    dlink_list *free_items [] = {
1258 <    &server_items,   &oconf_items,    &hub_items, &leaf_items,
1259 <     &uconf_items,   &xconf_items, &rxconf_items, &rkconf_items,
1260 <     &nresv_items, &cluster_items,  &gdeny_items, NULL
1258 >    &server_items,   &oconf_items,
1259 >     &uconf_items,   &xconf_items,
1260 >     &nresv_items, &cluster_items,  &service_items, &cresv_items, NULL
1261    };
1262  
1263    dlink_list ** iterator = free_items; /* C is dumb */
# Line 2541 | Line 1265 | clear_out_old_conf(void)
1265    /* We only need to free anything allocated by yyparse() here.
1266     * Resetting structs, etc, is taken care of by set_default_conf().
1267     */
1268 <  
1268 >
1269    for (; *iterator != NULL; iterator++)
1270    {
1271      DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
1272      {
1273 <      conf = ptr->data;
2550 <      /* XXX This is less than pretty */
2551 <      if (conf->type == SERVER_TYPE)
2552 <      {
2553 <        aconf = map_to_conf(conf);
1273 >      struct MaskItem *conf = ptr->data;
1274  
1275 <        if (aconf->clients != 0)
1276 <        {
2557 <          SetConfIllegal(aconf);
2558 <          dlinkDelete(&conf->node, &server_items);
2559 <        }
2560 <        else
2561 <        {
2562 <          delete_conf_item(conf);
2563 <        }
2564 <      }
2565 <      else if (conf->type == OPER_TYPE)
2566 <      {
2567 <        aconf = map_to_conf(conf);
1275 >      conf->active = 0;
1276 >      dlinkDelete(&conf->node, *iterator);
1277  
1278 <        if (aconf->clients != 0)
1279 <        {
2571 <          SetConfIllegal(aconf);
2572 <          dlinkDelete(&conf->node, &oconf_items);
2573 <        }
2574 <        else
2575 <        {
2576 <          delete_conf_item(conf);
2577 <        }
2578 <      }
2579 <      else if (conf->type == CLIENT_TYPE)
1278 >      /* XXX This is less than pretty */
1279 >      if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1280        {
1281 <        aconf = map_to_conf(conf);
1282 <
2583 <        if (aconf->clients != 0)
2584 <        {
2585 <          SetConfIllegal(aconf);
2586 <        }
2587 <        else
2588 <        {
2589 <          delete_conf_item(conf);
2590 <        }
1281 >        if (!conf->ref_count)
1282 >          conf_free(conf);
1283        }
1284 <      else if (conf->type == XLINE_TYPE  ||
2593 <               conf->type == RXLINE_TYPE ||
2594 <               conf->type == RKLINE_TYPE)
1284 >      else if (conf->type == CONF_XLINE)
1285        {
1286 <        /* temporary (r)xlines are also on
1287 <         * the (r)xconf items list */
2598 <        if (conf->flags & CONF_FLAGS_TEMPORARY)
2599 <          continue;
2600 <
2601 <        delete_conf_item(conf);
1286 >        if (!conf->until)
1287 >          conf_free(conf);
1288        }
1289        else
1290 <      {
2605 <        if ((conf->type == LEAF_TYPE) || (conf->type == HUB_TYPE))
2606 <        {
2607 <          match_item = map_to_conf(conf);
2608 <          if (match_item->ref_count <= 0)
2609 <            delete_conf_item(conf);
2610 <          else
2611 <          {
2612 <            match_item->illegal = 1;
2613 <            dlinkDelete(&conf->node, *iterator);
2614 <          }
2615 <        }
2616 <        else
2617 <          delete_conf_item(conf);
2618 <      }
1290 >        conf_free(conf);
1291      }
1292    }
1293  
1294 +  motd_clear();
1295 +
1296    /*
1297     * don't delete the class table, rather mark all entries
1298 <   * for deletion. The table is cleaned up by check_class. - avalon
1298 >   * for deletion. The table is cleaned up by class_delete_marked. - avalon
1299     */
1300 <  DLINK_FOREACH(ptr, class_items.head)
2627 <  {
2628 <    cltmp = map_to_conf(ptr->data);
2629 <
2630 <    if (ptr != class_items.tail)  /* never mark the "default" class */
2631 <      cltmp->active = 0;
2632 <  }
1300 >  class_mark_for_deletion();
1301  
1302    clear_out_address_conf();
1303  
1304    /* clean out module paths */
2637 #ifndef STATIC_MODULES
1305    mod_clear_paths();
2639 #endif
1306  
1307 <  /* clean out ServerInfo */
1308 <  MyFree(ServerInfo.description);
1309 <  ServerInfo.description = NULL;
1310 <  MyFree(ServerInfo.network_name);
1311 <  ServerInfo.network_name = NULL;
1312 <  MyFree(ServerInfo.network_desc);
1313 <  ServerInfo.network_desc = NULL;
1314 <  MyFree(ConfigFileEntry.egdpool_path);
1315 <  ConfigFileEntry.egdpool_path = NULL;
1307 >  pseudo_clear();
1308 >
1309 >  /* clean out ConfigServerInfo */
1310 >  MyFree(ConfigServerInfo.description);
1311 >  ConfigServerInfo.description = NULL;
1312 >  MyFree(ConfigServerInfo.network_name);
1313 >  ConfigServerInfo.network_name = NULL;
1314 >  MyFree(ConfigServerInfo.network_desc);
1315 >  ConfigServerInfo.network_desc = NULL;
1316   #ifdef HAVE_LIBCRYPTO
1317 <  if (ServerInfo.rsa_private_key != NULL)
1317 >  if (ConfigServerInfo.rsa_private_key)
1318    {
1319 <    RSA_free(ServerInfo.rsa_private_key);
1320 <    ServerInfo.rsa_private_key = NULL;
1319 >    RSA_free(ConfigServerInfo.rsa_private_key);
1320 >    ConfigServerInfo.rsa_private_key = NULL;
1321    }
1322  
1323 <  MyFree(ServerInfo.rsa_private_key_file);
1324 <  ServerInfo.rsa_private_key_file = NULL;
1323 >  MyFree(ConfigServerInfo.rsa_private_key_file);
1324 >  ConfigServerInfo.rsa_private_key_file = NULL;
1325   #endif
1326  
1327 <  /* clean out old resvs from the conf */
1328 <  clear_conf_resv();
1327 >  /* clean out ConfigAdminInfo */
1328 >  MyFree(ConfigAdminInfo.name);
1329 >  ConfigAdminInfo.name = NULL;
1330 >  MyFree(ConfigAdminInfo.email);
1331 >  ConfigAdminInfo.email = NULL;
1332 >  MyFree(ConfigAdminInfo.description);
1333 >  ConfigAdminInfo.description = NULL;
1334  
2664  /* clean out AdminInfo */
2665  MyFree(AdminInfo.name);
2666  AdminInfo.name = NULL;
2667  MyFree(AdminInfo.email);
2668  AdminInfo.email = NULL;
2669  MyFree(AdminInfo.description);
2670  AdminInfo.description = NULL;
2671
2672  /* operator{} and class{} blocks are freed above */
1335    /* clean out listeners */
1336    close_listeners();
2675
2676  /* auth{}, quarantine{}, shared{}, connect{}, kill{}, deny{},
2677   * exempt{} and gecos{} blocks are freed above too
2678   */
2679
2680  /* clean out general */
2681  MyFree(ConfigFileEntry.servlink_path);
2682  ConfigFileEntry.servlink_path = NULL;
2683 #ifdef HAVE_LIBCRYPTO
2684  ConfigFileEntry.default_cipher_preference = NULL;
2685 #endif /* HAVE_LIBCRYPTO */
2686  delete_isupport("INVEX");
2687  delete_isupport("EXCEPTS");
2688 }
2689
2690 /* flush_deleted_I_P()
2691 *
2692 * inputs       - none
2693 * output       - none
2694 * side effects - This function removes I/P conf items
2695 */
2696 static void
2697 flush_deleted_I_P(void)
2698 {
2699  dlink_node *ptr;
2700  dlink_node *next_ptr;
2701  struct ConfItem *conf;
2702  struct AccessItem *aconf;
2703  dlink_list * free_items [] = {
2704    &server_items, &oconf_items, NULL
2705  };
2706  dlink_list ** iterator = free_items; /* C is dumb */
2707
2708  /* flush out deleted I and P lines
2709   * although still in use.
2710   */
2711  for (; *iterator != NULL; iterator++)
2712  {
2713    DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
2714    {
2715      conf = ptr->data;
2716      aconf = (struct AccessItem *)map_to_conf(conf);
2717
2718      if (IsConfIllegal(aconf))
2719      {
2720        dlinkDelete(ptr, *iterator);
2721
2722        if (aconf->clients == 0)
2723          delete_conf_item(conf);
2724      }
2725    }
2726  }
2727 }
2728
2729 /* get_conf_name()
2730 *
2731 * inputs       - type of conf file to return name of file for
2732 * output       - pointer to filename for type of conf
2733 * side effects - none
2734 */
2735 const char *
2736 get_conf_name(ConfType type)
2737 {
2738  switch (type)
2739  {
2740    case CONF_TYPE:
2741      return ConfigFileEntry.configfile;
2742      break;
2743    case KLINE_TYPE:
2744      return ConfigFileEntry.klinefile;
2745      break;
2746    case RKLINE_TYPE:
2747      return ConfigFileEntry.rklinefile;
2748      break;
2749    case DLINE_TYPE:
2750      return ConfigFileEntry.dlinefile;
2751      break;
2752    case XLINE_TYPE:
2753      return ConfigFileEntry.xlinefile;
2754      break;
2755    case RXLINE_TYPE:
2756      return ConfigFileEntry.rxlinefile;
2757      break;
2758    case CRESV_TYPE:
2759      return ConfigFileEntry.cresvfile;
2760      break;
2761    case NRESV_TYPE:
2762      return ConfigFileEntry.nresvfile;
2763      break;
2764    case GLINE_TYPE:
2765      return ConfigFileEntry.glinefile;
2766      break;
2767
2768    default:
2769      return NULL;  /* This should NEVER HAPPEN since we call this function
2770                       only with the above values, this will cause us to core
2771                       at some point if this happens so we know where it was */
2772  }
2773 }
2774
2775 #define BAD_PING (-1)
2776
2777 /* get_conf_ping()
2778 *
2779 * inputs       - pointer to struct AccessItem
2780 *              - pointer to a variable that receives ping warning time
2781 * output       - ping frequency
2782 * side effects - NONE
2783 */
2784 static int
2785 get_conf_ping(struct ConfItem *conf, int *pingwarn)
2786 {
2787  struct ClassItem *aclass;
2788  struct AccessItem *aconf;
2789
2790  if (conf != NULL)
2791  {
2792    aconf = (struct AccessItem *)map_to_conf(conf);
2793    if (aconf->class_ptr != NULL)
2794    {
2795      aclass = (struct ClassItem *)map_to_conf(aconf->class_ptr);
2796      *pingwarn = PingWarning(aclass);
2797      return PingFreq(aclass);
2798    }
2799  }
2800
2801  return BAD_PING;
2802 }
2803
2804 /* get_client_class()
2805 *
2806 * inputs       - pointer to client struct
2807 * output       - pointer to name of class
2808 * side effects - NONE
2809 */
2810 const char *
2811 get_client_class(struct Client *target_p)
2812 {
2813  dlink_node *ptr;
2814  struct ConfItem *conf;
2815  struct AccessItem *aconf;
2816
2817  if (target_p != NULL && !IsMe(target_p) &&
2818      target_p->localClient->confs.head != NULL)
2819  {
2820    DLINK_FOREACH(ptr, target_p->localClient->confs.head)
2821    {
2822      conf = ptr->data;
2823
2824      if (conf->type == CLIENT_TYPE || conf->type == SERVER_TYPE ||
2825          conf->type == OPER_TYPE)
2826      {
2827        aconf = (struct AccessItem *) map_to_conf(conf);
2828        if (aconf->class_ptr != NULL)
2829          return aconf->class_ptr->name;
2830      }
2831    }
2832  }
2833
2834  return "default";
2835 }
2836
2837 /* get_client_ping()
2838 *
2839 * inputs       - pointer to client struct
2840 *              - pointer to a variable that receives ping warning time
2841 * output       - ping frequency
2842 * side effects - NONE
2843 */
2844 int
2845 get_client_ping(struct Client *target_p, int *pingwarn)
2846 {
2847  int ping;
2848  struct ConfItem *conf;
2849  dlink_node *nlink;
2850
2851  if (target_p->localClient->confs.head != NULL)
2852    DLINK_FOREACH(nlink, target_p->localClient->confs.head)
2853    {
2854      conf = nlink->data;
2855
2856      if ((conf->type == CLIENT_TYPE) || (conf->type == SERVER_TYPE) ||
2857          (conf->type == OPER_TYPE))
2858      {
2859        ping = get_conf_ping(conf, pingwarn);
2860        if (ping > 0)
2861          return ping;
2862      }
2863    }
2864
2865  *pingwarn = 0;
2866  return DEFAULT_PINGFREQUENCY;
2867 }
2868
2869 /* find_class()
2870 *
2871 * inputs       - string name of class
2872 * output       - corresponding Class pointer
2873 * side effects - NONE
2874 */
2875 struct ConfItem *
2876 find_class(const char *classname)
2877 {
2878  struct ConfItem *conf;
2879
2880  if ((conf = find_exact_name_conf(CLASS_TYPE, classname, NULL, NULL)) != NULL)
2881    return conf;
2882
2883  return class_default;
2884 }
2885
2886 /* check_class()
2887 *
2888 * inputs       - NONE
2889 * output       - NONE
2890 * side effects -
2891 */
2892 void
2893 check_class(void)
2894 {
2895  dlink_node *ptr = NULL, *next_ptr = NULL;
2896
2897  DLINK_FOREACH_SAFE(ptr, next_ptr, class_items.head)
2898  {
2899    struct ClassItem *aclass = map_to_conf(ptr->data);
2900
2901    if (!aclass->active && !CurrUserCount(aclass))
2902    {
2903      destroy_cidr_class(aclass);
2904      delete_conf_item(ptr->data);
2905    }
2906  }
2907 }
2908
2909 /* init_class()
2910 *
2911 * inputs       - NONE
2912 * output       - NONE
2913 * side effects -
2914 */
2915 void
2916 init_class(void)
2917 {
2918  struct ClassItem *aclass;
2919
2920  class_default = make_conf_item(CLASS_TYPE);
2921
2922  aclass = map_to_conf(class_default);
2923  aclass->active = 1;
2924  DupString(class_default->name, "default");
2925  ConFreq(aclass)  = DEFAULT_CONNECTFREQUENCY;
2926  PingFreq(aclass) = DEFAULT_PINGFREQUENCY;
2927  MaxTotal(aclass) = MAXIMUM_LINKS_DEFAULT;
2928  MaxSendq(aclass) = DEFAULT_SENDQ;
2929
2930  client_check_cb = register_callback("check_client", check_client);
2931 }
2932
2933 /* get_sendq()
2934 *
2935 * inputs       - pointer to client
2936 * output       - sendq for this client as found from its class
2937 * side effects - NONE
2938 */
2939 unsigned int
2940 get_sendq(struct Client *client_p)
2941 {
2942  unsigned int sendq = DEFAULT_SENDQ;
2943  dlink_node *ptr;
2944  struct ConfItem *conf;
2945  struct ConfItem *class_conf;
2946  struct ClassItem *aclass;
2947  struct AccessItem *aconf;
2948
2949  if (client_p && !IsMe(client_p) && (client_p->localClient->confs.head))
2950  {
2951    DLINK_FOREACH(ptr, client_p->localClient->confs.head)
2952    {
2953      conf = ptr->data;
2954      if ((conf->type == SERVER_TYPE) || (conf->type == OPER_TYPE)
2955          || (conf->type == CLIENT_TYPE))
2956      {
2957        aconf = (struct AccessItem *)map_to_conf(conf);
2958        if ((class_conf = aconf->class_ptr) == NULL)
2959          continue;
2960        aclass = (struct ClassItem *)map_to_conf(class_conf);
2961        sendq = MaxSendq(aclass);
2962        return sendq;
2963      }
2964    }
2965  }
2966  /* XXX return a default?
2967   * if here, then there wasn't an attached conf with a sendq
2968   * that is very bad -Dianora
2969   */
2970  return DEFAULT_SENDQ;
1337   }
1338  
1339   /* conf_add_class_to_conf()
1340   *
1341   * inputs       - pointer to config item
1342   * output       - NONE
1343 < * side effects - Add a class pointer to a conf
1343 > * side effects - Add a class pointer to a conf
1344   */
1345   void
1346 < conf_add_class_to_conf(struct ConfItem *conf, const char *class_name)
1346 > conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1347   {
1348 <  struct AccessItem *aconf = map_to_conf(conf);
2983 <  struct ClassItem *class = NULL;
2984 <
2985 <  if (class_name == NULL)
1348 >  if (class_name == NULL)
1349    {
1350 <    aconf->class_ptr = class_default;
1350 >    conf->class = class_default;
1351  
1352 <    if (conf->type == CLIENT_TYPE)
1353 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1354 <                           "Warning *** Defaulting to default class for %s@%s",
1355 <                           aconf->user, aconf->host);
1352 >    if (conf->type == CONF_CLIENT)
1353 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1354 >                           "Warning *** Defaulting to default class for %s@%s",
1355 >                           conf->user, conf->host);
1356      else
1357 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1358 <                           "Warning *** Defaulting to default class for %s",
1359 <                           conf->name);
1357 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1358 >                           "Warning *** Defaulting to default class for %s",
1359 >                           conf->name);
1360    }
1361    else
1362 <    aconf->class_ptr = find_class(class_name);
3000 <
3001 <  if (aconf->class_ptr)
3002 <    class = map_to_conf(aconf->class_ptr);
1362 >    conf->class = class_find(class_name, 1);
1363  
1364 <  if (aconf->class_ptr == NULL || !class->active)
1364 >  if (conf->class == NULL)
1365    {
1366 <    if (conf->type == CLIENT_TYPE)
1367 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1368 <                           "Warning *** Defaulting to default class for %s@%s",
1369 <                           aconf->user, aconf->host);
1366 >    if (conf->type == CONF_CLIENT)
1367 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1368 >                           "Warning *** Defaulting to default class for %s@%s",
1369 >                           conf->user, conf->host);
1370      else
1371 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1372 <                           "Warning *** Defaulting to default class for %s",
1373 <                           conf->name);
1374 <    aconf->class_ptr = class_default;
1371 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1372 >                           "Warning *** Defaulting to default class for %s",
1373 >                           conf->name);
1374 >    conf->class = class_default;
1375    }
1376   }
1377  
3018 /* conf_add_server()
3019 *
3020 * inputs       - pointer to config item
3021 *              - pointer to link count already on this conf
3022 * output       - NONE
3023 * side effects - Add a connect block
3024 */
3025 int
3026 conf_add_server(struct ConfItem *conf, const char *class_name)
3027 {
3028  struct AccessItem *aconf;
3029  struct split_nuh_item nuh;
3030  char conf_user[USERLEN + 1];
3031  char conf_host[HOSTLEN + 1];
3032
3033  aconf = map_to_conf(conf);
3034
3035  conf_add_class_to_conf(conf, class_name);
3036
3037  if (!aconf->host || !conf->name)
3038  {
3039    sendto_realops_flags(UMODE_ALL, L_ALL, "Bad connect block");
3040    ilog(L_WARN, "Bad connect block");
3041    return -1;
3042  }
3043
3044  if (EmptyString(aconf->passwd) && !IsConfCryptLink(aconf))
3045  {
3046    sendto_realops_flags(UMODE_ALL, L_ALL, "Bad connect block, name %s",
3047                         conf->name);
3048    ilog(L_WARN, "Bad connect block, host %s", conf->name);
3049    return -1;
3050  }
3051
3052  nuh.nuhmask  = aconf->host;
3053  nuh.nickptr  = NULL;
3054  nuh.userptr  = conf_user;
3055  nuh.hostptr  = conf_host;
3056
3057  nuh.nicksize = 0;
3058  nuh.usersize = sizeof(conf_user);
3059  nuh.hostsize = sizeof(conf_host);
3060
3061  split_nuh(&nuh);
3062
3063  MyFree(aconf->host);
3064  aconf->host = NULL;
3065
3066  DupString(aconf->user, conf_user); /* somehow username checking for servers
3067                                 got lost in H6/7, will have to be re-added */
3068  DupString(aconf->host, conf_host);
3069
3070  lookup_confhost(conf);
3071
3072  return 0;
3073 }
3074
1378   /* yyerror()
1379   *
1380   * inputs       - message from parser
# Line 3087 | Line 1390 | yyerror(const char *msg)
1390      return;
1391  
1392    strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1393 <  sendto_realops_flags(UMODE_ALL, L_ALL, "\"%s\", line %u: %s: %s",
1393 >  sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1394 >                       "\"%s\", line %u: %s: %s",
1395                         conffilebuf, lineno + 1, msg, newlinebuf);
1396 <  ilog(L_WARN, "\"%s\", line %u: %s: %s",
1396 >  ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1397         conffilebuf, lineno + 1, msg, newlinebuf);
1398   }
1399  
1400 < int
1401 < conf_fbgets(char *lbuf, unsigned int max_size, FBFILE *fb)
1400 > void
1401 > conf_error_report(const char *msg)
1402   {
1403 <  if (fbgets(lbuf, max_size, fb) == NULL)
3100 <    return 0;
3101 <
3102 <  return strlen(lbuf);
3103 < }
1403 >  char newlinebuf[IRCD_BUFSIZE];
1404  
1405 < int
1406 < conf_yy_fatal_error(const char *msg)
1407 < {
1408 <  return 0;
1405 >  strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1406 >  sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1407 >                       "\"%s\", line %u: %s: %s",
1408 >                       conffilebuf, lineno + 1, msg, newlinebuf);
1409 >  ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1410 >       conffilebuf, lineno + 1, msg, newlinebuf);
1411   }
1412  
1413   /*
1414   * valid_tkline()
1415 < *
1415 > *
1416   * inputs       - pointer to ascii string to check
1417   *              - whether the specified time is in seconds or minutes
1418   * output       - -1 not enough parameters
# Line 3119 | Line 1421 | conf_yy_fatal_error(const char *msg)
1421   * Originally written by Dianora (Diane, db@db.net)
1422   */
1423   time_t
1424 < valid_tkline(char *p, int minutes)
1424 > valid_tkline(const char *data, const int minutes)
1425   {
1426 +  const unsigned char *p = (const unsigned char *)data;
1427 +  unsigned char tmpch = '\0';
1428    time_t result = 0;
1429  
1430 <  while (*p)
1430 >  while ((tmpch = *p++))
1431    {
1432 <    if (IsDigit(*p))
3129 <    {
3130 <      result *= 10;
3131 <      result += ((*p) & 0xF);
3132 <      p++;
3133 <    }
3134 <    else
1432 >    if (!IsDigit(tmpch))
1433        return 0;
1434 +
1435 +    result *= 10;
1436 +    result += (tmpch & 0xF);
1437    }
1438  
1439 <  /* in the degenerate case where oper does a /quote kline 0 user@host :reason
1439 >  /*
1440 >   * In the degenerate case where oper does a /quote kline 0 user@host :reason
1441     * i.e. they specifically use 0, I am going to return 1 instead
1442     * as a return value of non-zero is used to flag it as a temporary kline
1443     */
3142
1444    if (result == 0)
1445      result = 1;
1446  
1447 <  /*
1447 >  /*
1448     * If the incoming time is in seconds convert it to minutes for the purpose
1449     * of this calculation
1450     */
1451    if (!minutes)
1452 <    result = result / (time_t)60;
1452 >    result = result / 60;
1453  
1454    if (result > MAX_TDKLINE_TIME)
1455      result = MAX_TDKLINE_TIME;
1456  
1457 <  result = result * (time_t)60;  /* turn it into seconds */
1457 >  result = result * 60;  /* turn it into seconds */
1458  
1459    return result;
1460   }
1461  
1462 + /* valid_wild_card_simple()
1463 + *
1464 + * inputs       - data to check for sufficient non-wildcard characters
1465 + * outputs      - 1 if valid, else 0
1466 + * side effects - none
1467 + */
1468 + int
1469 + valid_wild_card_simple(const char *data)
1470 + {
1471 +  const unsigned char *p = (const unsigned char *)data;
1472 +  unsigned char tmpch = '\0';
1473 +  unsigned int nonwild = 0;
1474 +
1475 +  while ((tmpch = *p++))
1476 +  {
1477 +    if (tmpch == '\\' && *p)
1478 +    {
1479 +      ++p;
1480 +      if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1481 +        return 1;
1482 +    }
1483 +    else if (!IsMWildChar(tmpch))
1484 +    {
1485 +      if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1486 +        return 1;
1487 +    }
1488 +  }
1489 +
1490 +  return 0;
1491 + }
1492 +
1493   /* valid_wild_card()
1494   *
1495   * input        - pointer to client
# Line 3169 | Line 1501 | valid_tkline(char *p, int minutes)
1501   int
1502   valid_wild_card(struct Client *source_p, int warn, int count, ...)
1503   {
1504 <  char *p;
1505 <  char tmpch;
3174 <  int nonwild = 0;
1504 >  unsigned char tmpch = '\0';
1505 >  unsigned int nonwild = 0;
1506    va_list args;
1507  
1508    /*
# Line 3190 | Line 1521 | valid_wild_card(struct Client *source_p,
1521  
1522    while (count--)
1523    {
1524 <    p = va_arg(args, char *);
1524 >    const unsigned char *p = va_arg(args, const unsigned char *);
1525      if (p == NULL)
1526        continue;
1527  
# Line 3202 | Line 1533 | valid_wild_card(struct Client *source_p,
1533           * If we find enough non-wild characters, we can
1534           * break - no point in searching further.
1535           */
1536 <        if (++nonwild >= ConfigFileEntry.min_nonwildcard)
1536 >        if (++nonwild >= ConfigGeneral.min_nonwildcard)
1537 >        {
1538 >          va_end(args);
1539            return 1;
1540 +        }
1541        }
1542      }
1543    }
1544  
1545    if (warn)
1546 <    sendto_one(source_p, ":%s NOTICE %s :Please include at least %d non-wildcard characters with the mask",
1547 <               me.name, source_p->name, ConfigFileEntry.min_nonwildcard);
1546 >    sendto_one_notice(source_p, &me,
1547 >                      ":Please include at least %u non-wildcard characters with the mask",
1548 >                      ConfigGeneral.min_nonwildcard);
1549 >  va_end(args);
1550    return 0;
1551   }
1552  
# Line 3224 | Line 1560 | valid_wild_card(struct Client *source_p,
1560   *              - parse_flags bit map of things to test
1561   *              - pointer to user or string to parse into
1562   *              - pointer to host or NULL to parse into if non NULL
1563 < *              - pointer to optional tkline time or NULL
1563 > *              - pointer to optional tkline time or NULL
1564   *              - pointer to target_server to parse into if non NULL
1565   *              - pointer to reason to parse into
1566   *
# Line 3246 | Line 1582 | valid_wild_card(struct Client *source_p,
1582   */
1583   int
1584   parse_aline(const char *cmd, struct Client *source_p,
1585 <            int parc, char **parv,
1586 <            int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1587 <            char **target_server, char **reason)
1585 >            int parc, char **parv,
1586 >            int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1587 >            char **target_server, char **reason)
1588   {
1589    int found_tkline_time=0;
1590 <  static char def_reason[] = "No Reason";
1590 >  static char def_reason[] = CONF_NOREASON;
1591    static char user[USERLEN*4+1];
1592    static char host[HOSTLEN*4+1];
1593  
# Line 3269 | Line 1605 | parse_aline(const char *cmd, struct Clie
1605        *tkline_time = found_tkline_time;
1606      else
1607      {
1608 <      sendto_one(source_p, ":%s NOTICE %s :temp_line not supported by %s",
3273 <                 me.name, source_p->name, cmd);
1608 >      sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1609        return -1;
1610      }
1611    }
1612  
1613    if (parc == 0)
1614    {
1615 <    sendto_one(source_p, form_str(ERR_NEEDMOREPARAMS),
3281 <               me.name, source_p->name, cmd);
1615 >    sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1616      return -1;
1617    }
1618  
# Line 3292 | Line 1626 | parse_aline(const char *cmd, struct Clie
1626      *up_p = user;
1627      *h_p = host;
1628    }
1629 <
1629 >
1630    parc--;
1631    parv++;
1632  
# Line 3305 | Line 1639 | parse_aline(const char *cmd, struct Clie
1639  
1640        if (target_server == NULL)
1641        {
1642 <        sendto_one(source_p, ":%s NOTICE %s :ON server not supported by %s",
1643 <                   me.name, source_p->name, cmd);
3310 <        return -1;
1642 >        sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1643 >        return -1;
1644        }
1645  
1646 <      if (!IsOperRemoteBan(source_p))
1646 >      if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1647        {
1648 <        sendto_one(source_p, form_str(ERR_NOPRIVS),
3316 <                   me.name, source_p->name, "remoteban");
1648 >        sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1649          return -1;
1650        }
1651  
1652        if (parc == 0 || EmptyString(*parv))
1653        {
1654 <        sendto_one(source_p, form_str(ERR_NEEDMOREPARAMS),
1655 <                   me.name, source_p->name, cmd);
3324 <        return -1;
1654 >        sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1655 >        return -1;
1656        }
1657  
1658        *target_server = *parv;
# Line 3334 | Line 1665 | parse_aline(const char *cmd, struct Clie
1665         * caller probably NULL'd it first, but no harm to do it again -db
1666         */
1667        if (target_server != NULL)
1668 <        *target_server = NULL;
1668 >        *target_server = NULL;
1669      }
1670    }
1671  
# Line 3342 | Line 1673 | parse_aline(const char *cmd, struct Clie
1673    {
1674      if (strchr(user, '!') != NULL)
1675      {
1676 <      sendto_one(source_p, ":%s NOTICE %s :Invalid character '!' in kline",
3346 <                 me.name, source_p->name);
1676 >      sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1677        return -1;
1678      }
1679  
1680 <    if ((parse_flags & AWILD) && !valid_wild_card(source_p, YES, 2, *up_p, *h_p))
1680 >    if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 2, *up_p, *h_p))
1681        return -1;
1682    }
1683    else
1684 <    if ((parse_flags & AWILD) && !valid_wild_card(source_p, YES, 1, *up_p))
1684 >    if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 1, *up_p))
1685        return -1;
1686  
1687    if (reason != NULL)
# Line 3359 | Line 1689 | parse_aline(const char *cmd, struct Clie
1689      if (parc != 0 && !EmptyString(*parv))
1690      {
1691        *reason = *parv;
1692 <      if (!valid_comment(source_p, *reason, YES))
1693 <        return -1;
1692 >      if (!valid_comment(source_p, *reason, 1))
1693 >        return -1;
1694      }
1695      else
1696        *reason = def_reason;
# Line 3399 | Line 1729 | find_user_host(struct Client *source_p,
1729      {
1730        *(hostp++) = '\0';                       /* short and squat */
1731        if (*user_host_or_nick)
1732 <        strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1732 >        strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1733        else
1734 <        strcpy(luser, "*");
1734 >        strcpy(luser, "*");
1735 >
1736        if (*hostp)
1737 <        strlcpy(lhost, hostp, HOSTLEN + 1);    /* here is my host */
1737 >        strlcpy(lhost, hostp, HOSTLEN + 1);    /* here is my host */
1738        else
1739 <        strcpy(lhost, "*");
1739 >        strcpy(lhost, "*");
1740      }
1741      else
1742      {
1743        luser[0] = '*';             /* no @ found, assume its *@somehost */
1744 <      luser[1] = '\0';    
1744 >      luser[1] = '\0';
1745        strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1746      }
1747 <    
1747 >
1748      return 1;
1749    }
1750 <  else if (!(flags & NOUSERLOOKUP))
1750 >  else
1751    {
1752      /* Try to find user@host mask from nick */
1753      /* Okay to use source_p as the first param, because source_p == client_p */
1754 <    if ((target_p =
1755 <        find_chasing(source_p, source_p, user_host_or_nick, NULL)) == NULL)
1756 <      return 0;
1754 >    if ((target_p =
1755 >        find_chasing(source_p, user_host_or_nick)) == NULL)
1756 >      return 0;  /* find_chasing sends ERR_NOSUCHNICK */
1757  
1758      if (IsExemptKline(target_p))
1759      {
1760 <      if (!IsServer(source_p))
1761 <        sendto_one(source_p,
3431 <                   ":%s NOTICE %s :%s is E-lined",
3432 <                   me.name, source_p->name, target_p->name);
1760 >      if (IsClient(source_p))
1761 >        sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1762        return 0;
1763      }
1764  
# Line 3442 | Line 1771 | find_user_host(struct Client *source_p,
1771      if (target_p->username[0] == '~')
1772        luser[0] = '*';
1773  
1774 <    if (target_p->sockhost[0] == '\0' ||
3446 <        (target_p->sockhost[0] == '0' && target_p->sockhost[1] == '\0'))
1774 >    if (!strcmp(target_p->sockhost, "0"))
1775        strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
1776      else
1777        strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
# Line 3464 | Line 1792 | find_user_host(struct Client *source_p,
1792   int
1793   valid_comment(struct Client *source_p, char *comment, int warn)
1794   {
3467  if (strchr(comment, '"'))
3468  {
3469    if (warn)
3470      sendto_one(source_p, ":%s NOTICE %s :Invalid character '\"' in comment",
3471                 me.name, source_p->name);
3472    return 0;
3473  }
3474
1795    if (strlen(comment) > REASONLEN)
1796      comment[REASONLEN-1] = '\0';
1797  
# Line 3486 | Line 1806 | valid_comment(struct Client *source_p, c
1806   * side effects - none
1807   */
1808   int
1809 < match_conf_password(const char *password, const struct AccessItem *aconf)
1809 > match_conf_password(const char *password, const struct MaskItem *conf)
1810   {
1811    const char *encr = NULL;
1812  
1813 <  if (password == NULL || aconf->passwd == NULL)
1813 >  if (EmptyString(password) || EmptyString(conf->passwd))
1814      return 0;
1815  
1816 <  if (aconf->flags & CONF_FLAGS_ENCRYPTED)
1817 <  {
3498 <    /* use first two chars of the password they send in as salt */
3499 <    /* If the password in the conf is MD5, and ircd is linked
3500 <     * to scrypt on FreeBSD, or the standard crypt library on
3501 <     * glibc Linux, then this code will work fine on generating
3502 <     * the proper encrypted hash for comparison.
3503 <     */
3504 <    if (*aconf->passwd)
3505 <      encr = crypt(password, aconf->passwd);
3506 <    else
3507 <      encr = "";
3508 <  }
1816 >  if (conf->flags & CONF_FLAGS_ENCRYPTED)
1817 >    encr = crypt(password, conf->passwd);
1818    else
1819      encr = password;
1820  
1821 <  return !strcmp(encr, aconf->passwd);
1821 >  return encr && !strcmp(encr, conf->passwd);
1822   }
1823  
1824   /*
# Line 3517 | Line 1826 | match_conf_password(const char *password
1826   *
1827   * inputs       - client sending the cluster
1828   *              - command name "KLINE" "XLINE" etc.
1829 < *              - capab -- CAP_KLN etc. from s_serv.h
1830 < *              - cluster type -- CLUSTER_KLINE etc. from s_conf.h
1829 > *              - capab -- CAP_KLN etc. from server.h
1830 > *              - cluster type -- CLUSTER_KLINE etc. from conf.h
1831   *              - pattern and args to send along
1832   * output       - none
1833   * side effects - Take source_p send the pattern with args given
# Line 3529 | Line 1838 | cluster_a_line(struct Client *source_p,
1838                 int capab, int cluster_type, const char *pattern, ...)
1839   {
1840    va_list args;
1841 <  char buffer[IRCD_BUFSIZE];
1841 >  char buffer[IRCD_BUFSIZE] = "";
1842    const dlink_node *ptr = NULL;
1843  
1844    va_start(args, pattern);
# Line 3538 | Line 1847 | cluster_a_line(struct Client *source_p,
1847  
1848    DLINK_FOREACH(ptr, cluster_items.head)
1849    {
1850 <    const struct ConfItem *conf = ptr->data;
1850 >    const struct MaskItem *conf = ptr->data;
1851  
1852      if (conf->flags & cluster_type)
1853        sendto_match_servs(source_p, conf->name, CAP_CLUSTER|capab,
1854 <                         "%s %s %s", command, conf->name, buffer);
1854 >                         "%s %s %s", command, conf->name, buffer);
1855    }
1856   }
1857  
# Line 3590 | Line 1899 | split_nuh(struct split_nuh_item *const i
1899    {
1900      *p = '\0';
1901  
1902 <    if (iptr->nickptr && *iptr->nuhmask != '\0')
1902 >    if (iptr->nickptr && *iptr->nuhmask)
1903        strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1904  
1905 <    if ((q = strchr(++p, '@'))) {
1905 >    if ((q = strchr(++p, '@')))
1906 >    {
1907        *q++ = '\0';
1908  
1909 <      if (*p != '\0')
1909 >      if (*p)
1910          strlcpy(iptr->userptr, p, iptr->usersize);
1911  
1912 <      if (*q != '\0')
1912 >      if (*q)
1913          strlcpy(iptr->hostptr, q, iptr->hostsize);
1914      }
1915      else
1916      {
1917 <      if (*p != '\0')
1917 >      if (*p)
1918          strlcpy(iptr->userptr, p, iptr->usersize);
1919      }
1920    }
# Line 3616 | Line 1926 | split_nuh(struct split_nuh_item *const i
1926        /* if found a @ */
1927        *p++ = '\0';
1928  
1929 <      if (*iptr->nuhmask != '\0')
1929 >      if (*iptr->nuhmask)
1930          strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1931  
1932 <      if (*p != '\0')
1932 >      if (*p)
1933          strlcpy(iptr->hostptr, p, iptr->hostsize);
1934      }
1935      else
# Line 3632 | Line 1942 | split_nuh(struct split_nuh_item *const i
1942      }
1943    }
1944   }
3635
3636 /*
3637 * flags_to_ascii
3638 *
3639 * inputs       - flags is a bitmask
3640 *              - pointer to table of ascii letters corresponding
3641 *                to each bit
3642 *              - flag 1 for convert ToLower if bit missing
3643 *                0 if ignore.
3644 * output       - none
3645 * side effects - string pointed to by p has bitmap chars written to it
3646 */
3647 static void
3648 flags_to_ascii(unsigned int flags, const unsigned int bit_table[], char *p,
3649               int lowerit)
3650 {
3651  unsigned int mask = 1;
3652  int i = 0;
3653
3654  for (mask = 1; (mask != 0) && (bit_table[i] != 0); mask <<= 1, i++)
3655  {
3656    if (flags & mask)
3657      *p++ = bit_table[i];
3658    else if (lowerit)
3659      *p++ = ToLower(bit_table[i]);
3660  }
3661  *p = '\0';
3662 }
3663
3664 /*
3665 * cidr_limit_reached
3666 *
3667 * inputs       - int flag allowing over_rule of limits
3668 *              - pointer to the ip to be added
3669 *              - pointer to the class
3670 * output       - non zero if limit reached
3671 *                0 if limit not reached
3672 * side effects -
3673 */
3674 static int
3675 cidr_limit_reached(int over_rule,
3676                   struct irc_ssaddr *ip, struct ClassItem *aclass)
3677 {
3678  dlink_node *ptr = NULL;
3679  struct CidrItem *cidr;
3680
3681  if (NumberPerCidr(aclass) <= 0)
3682    return 0;
3683
3684  if (ip->ss.ss_family == AF_INET)
3685  {
3686    if (CidrBitlenIPV4(aclass) <= 0)
3687      return 0;
3688
3689    DLINK_FOREACH(ptr, aclass->list_ipv4.head)
3690    {
3691      cidr = ptr->data;
3692      if (match_ipv4(ip, &cidr->mask, CidrBitlenIPV4(aclass)))
3693      {
3694        if (!over_rule && (cidr->number_on_this_cidr >= NumberPerCidr(aclass)))
3695          return -1;
3696        cidr->number_on_this_cidr++;
3697        return 0;
3698      }
3699    }
3700    cidr = MyMalloc(sizeof(struct CidrItem));
3701    cidr->number_on_this_cidr = 1;
3702    cidr->mask = *ip;
3703    mask_addr(&cidr->mask, CidrBitlenIPV4(aclass));
3704    dlinkAdd(cidr, &cidr->node, &aclass->list_ipv4);
3705  }
3706 #ifdef IPV6
3707  else if (CidrBitlenIPV6(aclass) > 0)
3708  {
3709    DLINK_FOREACH(ptr, aclass->list_ipv6.head)
3710    {
3711      cidr = ptr->data;
3712      if (match_ipv6(ip, &cidr->mask, CidrBitlenIPV6(aclass)))
3713      {
3714        if (!over_rule && (cidr->number_on_this_cidr >= NumberPerCidr(aclass)))
3715          return -1;
3716        cidr->number_on_this_cidr++;
3717        return 0;
3718      }
3719    }
3720    cidr = MyMalloc(sizeof(struct CidrItem));
3721    cidr->number_on_this_cidr = 1;
3722    cidr->mask = *ip;
3723    mask_addr(&cidr->mask, CidrBitlenIPV6(aclass));
3724    dlinkAdd(cidr, &cidr->node, &aclass->list_ipv6);
3725  }
3726 #endif
3727  return 0;
3728 }
3729
3730 /*
3731 * remove_from_cidr_check
3732 *
3733 * inputs       - pointer to the ip to be removed
3734 *              - pointer to the class
3735 * output       - NONE
3736 * side effects -
3737 */
3738 static void
3739 remove_from_cidr_check(struct irc_ssaddr *ip, struct ClassItem *aclass)
3740 {
3741  dlink_node *ptr = NULL;
3742  dlink_node *next_ptr = NULL;
3743  struct CidrItem *cidr;
3744
3745  if (NumberPerCidr(aclass) == 0)
3746    return;
3747
3748  if (ip->ss.ss_family == AF_INET)
3749  {
3750    if (CidrBitlenIPV4(aclass) <= 0)
3751      return;
3752
3753    DLINK_FOREACH_SAFE(ptr, next_ptr, aclass->list_ipv4.head)
3754    {
3755      cidr = ptr->data;
3756      if (match_ipv4(ip, &cidr->mask, CidrBitlenIPV4(aclass)))
3757      {
3758        cidr->number_on_this_cidr--;
3759        if (cidr->number_on_this_cidr == 0)
3760        {
3761          dlinkDelete(ptr, &aclass->list_ipv4);
3762          MyFree(cidr);
3763          return;
3764        }
3765      }
3766    }
3767  }
3768 #ifdef IPV6
3769  else if (CidrBitlenIPV6(aclass) > 0)
3770  {
3771    DLINK_FOREACH_SAFE(ptr, next_ptr, aclass->list_ipv6.head)
3772    {
3773      cidr = ptr->data;
3774      if (match_ipv6(ip, &cidr->mask, CidrBitlenIPV6(aclass)))
3775      {
3776        cidr->number_on_this_cidr--;
3777        if (cidr->number_on_this_cidr == 0)
3778        {
3779          dlinkDelete(ptr, &aclass->list_ipv6);
3780          MyFree(cidr);
3781          return;
3782        }
3783      }
3784    }
3785  }
3786 #endif
3787 }
3788
3789 static void
3790 rebuild_cidr_list(int aftype, struct ConfItem *oldcl, struct ClassItem *newcl,
3791                  dlink_list *old_list, dlink_list *new_list, int changed)
3792 {
3793  dlink_node *ptr;
3794  struct Client *client_p;
3795  struct ConfItem *conf;
3796  struct AccessItem *aconf;
3797
3798  if (!changed)
3799  {
3800    *new_list = *old_list;
3801    old_list->head = old_list->tail = NULL;
3802    old_list->length = 0;
3803    return;
3804  }
3805
3806  DLINK_FOREACH(ptr, local_client_list.head)
3807  {
3808    client_p = ptr->data;
3809    if (client_p->localClient->aftype != aftype)
3810      continue;
3811    if (dlink_list_length(&client_p->localClient->confs) == 0)
3812      continue;
3813
3814    conf = client_p->localClient->confs.tail->data;
3815    if (conf->type == CLIENT_TYPE)
3816    {
3817      aconf = map_to_conf(conf);
3818      if (aconf->class_ptr == oldcl)
3819        cidr_limit_reached(1, &client_p->localClient->ip, newcl);
3820    }
3821  }
3822 }
3823
3824 /*
3825 * rebuild_cidr_class
3826 *
3827 * inputs       - pointer to old conf
3828 *              - pointer to new_class
3829 * output       - none
3830 * side effects - rebuilds the class link list of cidr blocks
3831 */
3832 void
3833 rebuild_cidr_class(struct ConfItem *conf, struct ClassItem *new_class)
3834 {
3835  struct ClassItem *old_class = map_to_conf(conf);
3836
3837  if (NumberPerCidr(old_class) > 0 && NumberPerCidr(new_class) > 0)
3838  {
3839    if (CidrBitlenIPV4(old_class) > 0 && CidrBitlenIPV4(new_class) > 0)
3840      rebuild_cidr_list(AF_INET, conf, new_class,
3841                        &old_class->list_ipv4, &new_class->list_ipv4,
3842                        CidrBitlenIPV4(old_class) != CidrBitlenIPV4(new_class));
3843
3844 #ifdef IPV6
3845    if (CidrBitlenIPV6(old_class) > 0 && CidrBitlenIPV6(new_class) > 0)
3846      rebuild_cidr_list(AF_INET6, conf, new_class,
3847                        &old_class->list_ipv6, &new_class->list_ipv6,
3848                        CidrBitlenIPV6(old_class) != CidrBitlenIPV6(new_class));
3849 #endif
3850  }
3851
3852  destroy_cidr_class(old_class);
3853 }
3854
3855 /*
3856 * destroy_cidr_list
3857 *
3858 * inputs       - pointer to class dlink list of cidr blocks
3859 * output       - none
3860 * side effects - completely destroys the class link list of cidr blocks
3861 */
3862 static void
3863 destroy_cidr_list(dlink_list *list)
3864 {
3865  dlink_node *ptr = NULL, *next_ptr = NULL;
3866
3867  DLINK_FOREACH_SAFE(ptr, next_ptr, list->head)
3868  {
3869    dlinkDelete(ptr, list);
3870    MyFree(ptr->data);
3871  }
3872 }
3873
3874 /*
3875 * destroy_cidr_class
3876 *
3877 * inputs       - pointer to class
3878 * output       - none
3879 * side effects - completely destroys the class link list of cidr blocks
3880 */
3881 static void
3882 destroy_cidr_class(struct ClassItem *aclass)
3883 {
3884  destroy_cidr_list(&aclass->list_ipv4);
3885  destroy_cidr_list(&aclass->list_ipv6);
3886 }

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)