ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/conf.c
Revision: 4597
Committed: Sat Aug 30 16:56:59 2014 UTC (9 years, 6 months ago) by michael
Content type: text/x-csrc
File size: 51760 byte(s)
Log Message:
- conf.c:find_conf_name(): removed useless match(). with server name masking being removed
  with TS6, this is no longer needed.

File Contents

# Content
1 /*
2 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 *
4 * Copyright (c) 1997-2014 ircd-hybrid development team
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19 * USA
20 */
21
22 /*! \file conf.c
23 * \brief Configuration file functions.
24 * \version $Id$
25 */
26
27 #include "stdinc.h"
28 #include "list.h"
29 #include "ircd_defs.h"
30 #include "conf.h"
31 #include "conf_pseudo.h"
32 #include "server.h"
33 #include "resv.h"
34 #include "channel.h"
35 #include "client.h"
36 #include "event.h"
37 #include "irc_string.h"
38 #include "s_bsd.h"
39 #include "ircd.h"
40 #include "listener.h"
41 #include "hostmask.h"
42 #include "modules.h"
43 #include "numeric.h"
44 #include "fdlist.h"
45 #include "log.h"
46 #include "send.h"
47 #include "memory.h"
48 #include "res.h"
49 #include "userhost.h"
50 #include "user.h"
51 #include "channel_mode.h"
52 #include "parse.h"
53 #include "misc.h"
54 #include "conf_db.h"
55 #include "conf_class.h"
56 #include "motd.h"
57 #include "ipcache.h"
58
59
60 /* general conf items link list root, other than k lines etc. */
61 dlink_list service_items = { NULL, NULL, 0 };
62 dlink_list server_items = { NULL, NULL, 0 };
63 dlink_list cluster_items = { NULL, NULL, 0 };
64 dlink_list oconf_items = { NULL, NULL, 0 };
65 dlink_list uconf_items = { NULL, NULL, 0 };
66 dlink_list xconf_items = { NULL, NULL, 0 };
67 dlink_list nresv_items = { NULL, NULL, 0 };
68 dlink_list cresv_items = { NULL, NULL, 0 };
69
70 extern unsigned int lineno;
71 extern char linebuf[];
72 extern char conffilebuf[IRCD_BUFSIZE];
73 extern int yyparse(); /* defined in y.tab.c */
74
75 /* internally defined functions */
76 static void read_conf(FILE *);
77 static void clear_out_old_conf(void);
78 static void expire_tklines(dlink_list *);
79 static int verify_access(struct Client *);
80 static int attach_iline(struct Client *, struct MaskItem *);
81 static dlink_list *map_to_list(enum maskitem_type);
82 static int find_user_host(struct Client *, char *, char *, char *, unsigned int);
83
84
85 /* conf_dns_callback()
86 *
87 * inputs - pointer to struct MaskItem
88 * - pointer to DNSReply reply
89 * output - none
90 * side effects - called when resolver query finishes
91 * if the query resulted in a successful search, hp will contain
92 * a non-null pointer, otherwise hp will be null.
93 * if successful save hp in the conf item it was called with
94 */
95 static void
96 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name, size_t namelength)
97 {
98 struct MaskItem *conf = vptr;
99
100 conf->dns_pending = 0;
101
102 if (addr)
103 memcpy(&conf->addr, addr, sizeof(conf->addr));
104 else
105 conf->dns_failed = 1;
106 }
107
108 /* conf_dns_lookup()
109 *
110 * do a nameserver lookup of the conf host
111 * if the conf entry is currently doing a ns lookup do nothing, otherwise
112 * allocate a dns_query and start ns lookup.
113 */
114 static void
115 conf_dns_lookup(struct MaskItem *conf)
116 {
117 if (!conf->dns_pending)
118 {
119 conf->dns_pending = 1;
120
121 if (conf->aftype == AF_INET)
122 gethost_byname_type(conf_dns_callback, conf, conf->host, T_A);
123 else
124 gethost_byname_type(conf_dns_callback, conf, conf->host, T_AAAA);
125 }
126 }
127
128 struct MaskItem *
129 conf_make(enum maskitem_type type)
130 {
131 struct MaskItem *conf = MyCalloc(sizeof(*conf));
132 dlink_list *list = NULL;
133
134 conf->type = type;
135 conf->active = 1;
136 conf->aftype = AF_INET;
137
138 if ((list = map_to_list(type)))
139 dlinkAdd(conf, &conf->node, list);
140 return conf;
141 }
142
143 void
144 conf_free(struct MaskItem *conf)
145 {
146 dlink_node *ptr = NULL, *ptr_next = NULL;
147 dlink_list *list = NULL;
148
149 if ((list = map_to_list(conf->type)))
150 dlinkFindDelete(list, conf);
151
152 MyFree(conf->name);
153
154 if (conf->dns_pending)
155 delete_resolver_queries(conf);
156 if (conf->passwd)
157 memset(conf->passwd, 0, strlen(conf->passwd));
158 if (conf->spasswd)
159 memset(conf->spasswd, 0, strlen(conf->spasswd));
160
161 conf->class = NULL;
162
163 MyFree(conf->passwd);
164 MyFree(conf->spasswd);
165 MyFree(conf->reason);
166 MyFree(conf->certfp);
167 MyFree(conf->user);
168 MyFree(conf->host);
169 #ifdef HAVE_LIBCRYPTO
170 MyFree(conf->cipher_list);
171
172 if (conf->rsa_public_key)
173 RSA_free(conf->rsa_public_key);
174 #endif
175 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->hub_list.head)
176 {
177 MyFree(ptr->data);
178 dlinkDelete(ptr, &conf->hub_list);
179 free_dlink_node(ptr);
180 }
181
182 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->leaf_list.head)
183 {
184 MyFree(ptr->data);
185 dlinkDelete(ptr, &conf->leaf_list);
186 free_dlink_node(ptr);
187 }
188
189 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->exempt_list.head)
190 {
191 struct exempt *exptr = ptr->data;
192
193 dlinkDelete(ptr, &conf->exempt_list);
194 MyFree(exptr->name);
195 MyFree(exptr->user);
196 MyFree(exptr->host);
197 MyFree(exptr);
198 }
199
200 MyFree(conf);
201 }
202
203 /* check_client()
204 *
205 * inputs - pointer to client
206 * output - 0 = Success
207 * NOT_AUTHORIZED (-1) = Access denied (no I line match)
208 * IRCD_SOCKET_ERROR (-2) = Bad socket.
209 * I_LINE_FULL (-3) = I-line is full
210 * TOO_MANY (-4) = Too many connections from hostname
211 * BANNED_CLIENT (-5) = K-lined
212 * side effects - Ordinary client access check.
213 * Look for conf lines which have the same
214 * status as the flags passed.
215 */
216 int
217 check_client(struct Client *source_p)
218 {
219 int i;
220
221 if ((i = verify_access(source_p)))
222 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
223 source_p->name, source_p->sockhost);
224
225 switch (i)
226 {
227 case TOO_MANY:
228 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
229 "Too many on IP for %s (%s).",
230 get_client_name(source_p, SHOW_IP),
231 source_p->sockhost);
232 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
233 get_client_name(source_p, SHOW_IP));
234 ++ServerStats.is_ref;
235 exit_client(source_p, "No more connections allowed on that IP");
236 break;
237
238 case I_LINE_FULL:
239 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
240 "auth{} block is full for %s (%s).",
241 get_client_name(source_p, SHOW_IP),
242 source_p->sockhost);
243 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
244 get_client_name(source_p, SHOW_IP));
245 ++ServerStats.is_ref;
246 exit_client(source_p, "No more connections allowed in your connection class");
247 break;
248
249 case NOT_AUTHORIZED:
250 ++ServerStats.is_ref;
251 /* jdc - lists server name & port connections are on */
252 /* a purely cosmetical change */
253 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
254 "Unauthorized client connection from %s [%s] on [%s/%u].",
255 get_client_name(source_p, SHOW_IP),
256 source_p->sockhost,
257 source_p->connection->listener->name,
258 source_p->connection->listener->port);
259 ilog(LOG_TYPE_IRCD,
260 "Unauthorized client connection from %s on [%s/%u].",
261 get_client_name(source_p, SHOW_IP),
262 source_p->connection->listener->name,
263 source_p->connection->listener->port);
264
265 exit_client(source_p, "You are not authorized to use this server");
266 break;
267
268 case BANNED_CLIENT:
269 exit_client(source_p, "Banned");
270 ++ServerStats.is_ref;
271 break;
272
273 case 0:
274 default:
275 break;
276 }
277
278 return (i < 0 ? 0 : 1);
279 }
280
281 /* verify_access()
282 *
283 * inputs - pointer to client to verify
284 * output - 0 if success -'ve if not
285 * side effect - find the first (best) I line to attach.
286 */
287 static int
288 verify_access(struct Client *client_p)
289 {
290 struct MaskItem *conf = NULL;
291 char non_ident[USERLEN + 1] = "~";
292
293 if (IsGotId(client_p))
294 {
295 conf = find_address_conf(client_p->host, client_p->username,
296 &client_p->connection->ip,
297 client_p->connection->aftype,
298 client_p->connection->password);
299 }
300 else
301 {
302 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
303 conf = find_address_conf(client_p->host,non_ident,
304 &client_p->connection->ip,
305 client_p->connection->aftype,
306 client_p->connection->password);
307 }
308
309 if (conf)
310 {
311 if (IsConfClient(conf))
312 {
313 if (IsConfRedir(conf))
314 {
315 sendto_one_numeric(client_p, &me, RPL_REDIR,
316 conf->name ? conf->name : "",
317 conf->port);
318 return NOT_AUTHORIZED;
319 }
320
321 if (IsConfDoIdentd(conf))
322 SetNeedId(client_p);
323
324 /* Thanks for spoof idea amm */
325 if (IsConfDoSpoofIp(conf))
326 {
327 if (!ConfigGeneral.hide_spoof_ips && IsConfSpoofNotice(conf))
328 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
329 "%s spoofing: %s as %s",
330 client_p->name, client_p->host, conf->name);
331 strlcpy(client_p->host, conf->name, sizeof(client_p->host));
332 AddFlag(client_p, FLAGS_IP_SPOOFING | FLAGS_AUTH_SPOOF);
333 }
334
335 return attach_iline(client_p, conf);
336 }
337 else if (IsConfKill(conf) || (ConfigGeneral.glines && IsConfGline(conf)))
338 {
339 if (IsConfGline(conf))
340 sendto_one_notice(client_p, &me, ":*** G-lined");
341 sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
342 return BANNED_CLIENT;
343 }
344 }
345
346 return NOT_AUTHORIZED;
347 }
348
349 /* attach_iline()
350 *
351 * inputs - client pointer
352 * - conf pointer
353 * output -
354 * side effects - do actual attach
355 */
356 static int
357 attach_iline(struct Client *client_p, struct MaskItem *conf)
358 {
359 const struct ClassItem *class = conf->class;
360 struct ip_entry *ip_found;
361 int a_limit_reached = 0;
362 unsigned int local = 0, global = 0, ident = 0;
363
364 ip_found = ipcache_find_or_add_address(&client_p->connection->ip);
365 ip_found->count++;
366 AddFlag(client_p, FLAGS_IPHASH);
367
368 count_user_host(client_p->username, client_p->host,
369 &global, &local, &ident);
370
371 /* XXX blah. go down checking the various silly limits
372 * setting a_limit_reached if any limit is reached.
373 * - Dianora
374 */
375 if (class->max_total && class->ref_count >= class->max_total)
376 a_limit_reached = 1;
377 else if (class->max_perip && ip_found->count > class->max_perip)
378 a_limit_reached = 1;
379 else if (class->max_local && local >= class->max_local)
380 a_limit_reached = 1;
381 else if (class->max_global && global >= class->max_global)
382 a_limit_reached = 1;
383 else if (class->max_ident && ident >= class->max_ident &&
384 client_p->username[0] != '~')
385 a_limit_reached = 1;
386
387 if (a_limit_reached)
388 {
389 if (!IsConfExemptLimits(conf))
390 return TOO_MANY; /* Already at maximum allowed */
391
392 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
393 "but you have exceed_limit = yes;");
394 }
395
396 return attach_conf(client_p, conf);
397 }
398
399 /* detach_conf()
400 *
401 * inputs - pointer to client to detach
402 * - type of conf to detach
403 * output - 0 for success, -1 for failure
404 * side effects - Disassociate configuration from the client.
405 * Also removes a class from the list if marked for deleting.
406 */
407 void
408 detach_conf(struct Client *client_p, enum maskitem_type type)
409 {
410 dlink_node *ptr = NULL, *ptr_next = NULL;
411
412 DLINK_FOREACH_SAFE(ptr, ptr_next, client_p->connection->confs.head)
413 {
414 struct MaskItem *conf = ptr->data;
415
416 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
417 assert(conf->ref_count > 0);
418 assert(conf->class->ref_count > 0);
419
420 if (!(conf->type & type))
421 continue;
422
423 dlinkDelete(ptr, &client_p->connection->confs);
424 free_dlink_node(ptr);
425
426 if (conf->type == CONF_CLIENT)
427 remove_from_cidr_check(&client_p->connection->ip, conf->class);
428
429 if (--conf->class->ref_count == 0 && conf->class->active == 0)
430 {
431 class_free(conf->class);
432 conf->class = NULL;
433 }
434
435 if (--conf->ref_count == 0 && conf->active == 0)
436 conf_free(conf);
437 }
438 }
439
440 /* attach_conf()
441 *
442 * inputs - client pointer
443 * - conf pointer
444 * output -
445 * side effects - Associate a specific configuration entry to a *local*
446 * client (this is the one which used in accepting the
447 * connection). Note, that this automatically changes the
448 * attachment if there was an old one...
449 */
450 int
451 attach_conf(struct Client *client_p, struct MaskItem *conf)
452 {
453 if (dlinkFind(&client_p->connection->confs, conf))
454 return 1;
455
456 if (conf->type == CONF_CLIENT)
457 if (cidr_limit_reached(IsConfExemptLimits(conf),
458 &client_p->connection->ip, conf->class))
459 return TOO_MANY; /* Already at maximum allowed */
460
461 conf->class->ref_count++;
462 conf->ref_count++;
463
464 dlinkAdd(conf, make_dlink_node(), &client_p->connection->confs);
465
466 return 0;
467 }
468
469 /* attach_connect_block()
470 *
471 * inputs - pointer to server to attach
472 * - name of server
473 * - hostname of server
474 * output - true (1) if both are found, otherwise return false (0)
475 * side effects - find connect block and attach them to connecting client
476 */
477 int
478 attach_connect_block(struct Client *client_p, const char *name,
479 const char *host)
480 {
481 dlink_node *ptr;
482 struct MaskItem *conf = NULL;
483
484 assert(client_p != NULL);
485 assert(host != NULL);
486
487 if (client_p == NULL || host == NULL)
488 return 0;
489
490 DLINK_FOREACH(ptr, server_items.head)
491 {
492 conf = ptr->data;
493
494 if (match(conf->name, name) || match(conf->host, host))
495 continue;
496
497 attach_conf(client_p, conf);
498 return -1;
499 }
500
501 return 0;
502 }
503
504 /* find_conf_name()
505 *
506 * inputs - pointer to conf link list to search
507 * - pointer to name to find
508 * - int mask of type of conf to find
509 * output - NULL or pointer to conf found
510 * side effects - find a conf entry which matches the name
511 * and has the given mask.
512 */
513 struct MaskItem *
514 find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
515 {
516 dlink_node *ptr;
517 struct MaskItem* conf;
518
519 DLINK_FOREACH(ptr, list->head)
520 {
521 conf = ptr->data;
522
523 if (conf->type == type)
524 {
525 if (conf->name && !irccmp(conf->name, name))
526 return conf;
527 }
528 }
529
530 return NULL;
531 }
532
533 /* map_to_list()
534 *
535 * inputs - ConfType conf
536 * output - pointer to dlink_list to use
537 * side effects - none
538 */
539 static dlink_list *
540 map_to_list(enum maskitem_type type)
541 {
542 switch(type)
543 {
544 case CONF_XLINE:
545 return(&xconf_items);
546 break;
547 case CONF_ULINE:
548 return(&uconf_items);
549 break;
550 case CONF_NRESV:
551 return(&nresv_items);
552 break;
553 case CONF_CRESV:
554 return(&cresv_items);
555 case CONF_OPER:
556 return(&oconf_items);
557 break;
558 case CONF_SERVER:
559 return(&server_items);
560 break;
561 case CONF_SERVICE:
562 return(&service_items);
563 break;
564 case CONF_CLUSTER:
565 return(&cluster_items);
566 break;
567 default:
568 return NULL;
569 }
570 }
571
572 /* find_matching_name_conf()
573 *
574 * inputs - type of link list to look in
575 * - pointer to name string to find
576 * - pointer to user
577 * - pointer to host
578 * - optional flags to match on as well
579 * output - NULL or pointer to found struct MaskItem
580 * side effects - looks for a match on name field
581 */
582 struct MaskItem *
583 find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
584 const char *host, unsigned int flags)
585 {
586 dlink_node *ptr=NULL;
587 struct MaskItem *conf=NULL;
588 dlink_list *list_p = map_to_list(type);
589
590 switch (type)
591 {
592 case CONF_SERVICE:
593 DLINK_FOREACH(ptr, list_p->head)
594 {
595 conf = ptr->data;
596
597 if (EmptyString(conf->name))
598 continue;
599 if ((name != NULL) && !irccmp(name, conf->name))
600 return conf;
601 }
602 break;
603
604 case CONF_XLINE:
605 case CONF_ULINE:
606 case CONF_NRESV:
607 case CONF_CRESV:
608 DLINK_FOREACH(ptr, list_p->head)
609 {
610 conf = ptr->data;
611
612 if (EmptyString(conf->name))
613 continue;
614 if ((name != NULL) && !match(conf->name, name))
615 {
616 if ((user == NULL && (host == NULL)))
617 return conf;
618 if ((conf->flags & flags) != flags)
619 continue;
620 if (EmptyString(conf->user) || EmptyString(conf->host))
621 return conf;
622 if (!match(conf->user, user) && !match(conf->host, host))
623 return conf;
624 }
625 }
626 break;
627
628 case CONF_SERVER:
629 DLINK_FOREACH(ptr, list_p->head)
630 {
631 conf = ptr->data;
632
633 if ((name != NULL) && !match(name, conf->name))
634 return conf;
635 else if ((host != NULL) && !match(host, conf->host))
636 return conf;
637 }
638 break;
639
640 default:
641 break;
642 }
643 return NULL;
644 }
645
646 /* find_exact_name_conf()
647 *
648 * inputs - type of link list to look in
649 * - pointer to name string to find
650 * - pointer to user
651 * - pointer to host
652 * output - NULL or pointer to found struct MaskItem
653 * side effects - looks for an exact match on name field
654 */
655 struct MaskItem *
656 find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
657 const char *user, const char *host)
658 {
659 dlink_node *ptr = NULL;
660 struct MaskItem *conf;
661 dlink_list *list_p = map_to_list(type);
662
663 switch(type)
664 {
665 case CONF_XLINE:
666 case CONF_ULINE:
667 case CONF_NRESV:
668 case CONF_CRESV:
669
670 DLINK_FOREACH(ptr, list_p->head)
671 {
672 conf = ptr->data;
673
674 if (EmptyString(conf->name))
675 continue;
676
677 if (irccmp(conf->name, name) == 0)
678 {
679 if ((user == NULL && (host == NULL)))
680 return conf;
681 if (EmptyString(conf->user) || EmptyString(conf->host))
682 return conf;
683 if (!match(conf->user, user) && !match(conf->host, host))
684 return conf;
685 }
686 }
687 break;
688
689 case CONF_OPER:
690 DLINK_FOREACH(ptr, list_p->head)
691 {
692 conf = ptr->data;
693
694 if (EmptyString(conf->name))
695 continue;
696
697 if (!irccmp(conf->name, name))
698 {
699 if (!who)
700 return conf;
701 if (EmptyString(conf->user) || EmptyString(conf->host))
702 return NULL;
703 if (!match(conf->user, who->username))
704 {
705 switch (conf->htype)
706 {
707 case HM_HOST:
708 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
709 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
710 return conf;
711 break;
712 case HM_IPV4:
713 if (who->connection->aftype == AF_INET)
714 if (match_ipv4(&who->connection->ip, &conf->addr, conf->bits))
715 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
716 return conf;
717 break;
718 case HM_IPV6:
719 if (who->connection->aftype == AF_INET6)
720 if (match_ipv6(&who->connection->ip, &conf->addr, conf->bits))
721 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
722 return conf;
723 break;
724 default:
725 assert(0);
726 }
727 }
728 }
729 }
730
731 break;
732
733 case CONF_SERVER:
734 DLINK_FOREACH(ptr, list_p->head)
735 {
736 conf = ptr->data;
737
738 if (EmptyString(conf->name))
739 continue;
740
741 if (name == NULL)
742 {
743 if (EmptyString(conf->host))
744 continue;
745 if (irccmp(conf->host, host) == 0)
746 return conf;
747 }
748 else if (irccmp(conf->name, name) == 0)
749 return conf;
750 }
751
752 break;
753
754 default:
755 break;
756 }
757
758 return NULL;
759 }
760
761 /* rehash()
762 *
763 * Actual REHASH service routine. Called with sig == 0 if it has been called
764 * as a result of an operator issuing this command, else assume it has been
765 * called as a result of the server receiving a HUP signal.
766 */
767 int
768 rehash(int sig)
769 {
770 if (sig)
771 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
772 "Got signal SIGHUP, reloading configuration file(s)");
773
774 restart_resolver();
775
776 /* don't close listeners until we know we can go ahead with the rehash */
777
778 read_conf_files(0);
779
780 load_conf_modules();
781 check_conf_klines();
782
783 return 0;
784 }
785
786 /* set_default_conf()
787 *
788 * inputs - NONE
789 * output - NONE
790 * side effects - Set default values here.
791 * This is called **PRIOR** to parsing the
792 * configuration file. If you want to do some validation
793 * of values later, put them in validate_conf().
794 */
795 static void
796 set_default_conf(void)
797 {
798 /* verify init_class() ran, this should be an unnecessary check
799 * but its not much work.
800 */
801 assert(class_default == class_get_list()->tail->data);
802
803 #ifdef HAVE_LIBCRYPTO
804 #if OPENSSL_VERSION_NUMBER >= 0x1000005FL && !defined(OPENSSL_NO_ECDH)
805 {
806 EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
807
808 if (key)
809 {
810 SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
811 EC_KEY_free(key);
812 }
813 }
814
815 SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
816 #endif
817
818 ConfigServerInfo.message_digest_algorithm = EVP_sha256();
819 ConfigServerInfo.rsa_private_key = NULL;
820 ConfigServerInfo.rsa_private_key_file = NULL;
821 #endif
822
823 /* ConfigServerInfo.name is not rehashable */
824 /* ConfigServerInfo.name = ConfigServerInfo.name; */
825 ConfigServerInfo.description = NULL;
826 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
827 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
828
829 memset(&ConfigServerInfo.ip, 0, sizeof(ConfigServerInfo.ip));
830 ConfigServerInfo.specific_ipv4_vhost = 0;
831 memset(&ConfigServerInfo.ip6, 0, sizeof(ConfigServerInfo.ip6));
832 ConfigServerInfo.specific_ipv6_vhost = 0;
833
834 ConfigServerInfo.max_clients = MAXCLIENTS_MAX;
835 ConfigServerInfo.max_nick_length = 9;
836 ConfigServerInfo.max_topic_length = 80;
837 ConfigServerInfo.hub = 0;
838
839 ConfigAdminInfo.name = NULL;
840 ConfigAdminInfo.email = NULL;
841 ConfigAdminInfo.description = NULL;
842
843 log_del_all();
844
845 ConfigLog.use_logging = 1;
846
847 ConfigChannel.disable_fake_channels = 0;
848 ConfigChannel.invite_client_count = 10;
849 ConfigChannel.invite_client_time = 300;
850 ConfigChannel.knock_client_count = 1;
851 ConfigChannel.knock_client_time = 300;
852 ConfigChannel.knock_delay_channel = 60;
853 ConfigChannel.max_channels = 25;
854 ConfigChannel.max_bans = 25;
855 ConfigChannel.default_split_user_count = 0;
856 ConfigChannel.default_split_server_count = 0;
857 ConfigChannel.no_join_on_split = 0;
858 ConfigChannel.no_create_on_split = 0;
859
860 ConfigServerHide.flatten_links = 0;
861 ConfigServerHide.links_delay = 300;
862 ConfigServerHide.hidden = 0;
863 ConfigServerHide.hide_servers = 0;
864 ConfigServerHide.hide_services = 0;
865 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
866 ConfigServerHide.hide_server_ips = 0;
867 ConfigServerHide.disable_remote_commands = 0;
868
869 ConfigGeneral.away_count = 2;
870 ConfigGeneral.away_time = 10;
871 ConfigGeneral.max_watch = WATCHSIZE_DEFAULT;
872 ConfigGeneral.cycle_on_host_change = 1;
873 ConfigGeneral.glines = 0;
874 ConfigGeneral.gline_time = 12 * 3600;
875 ConfigGeneral.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
876 ConfigGeneral.gline_min_cidr = 16;
877 ConfigGeneral.gline_min_cidr6 = 48;
878 ConfigGeneral.invisible_on_connect = 1;
879 ConfigGeneral.tkline_expire_notices = 1;
880 ConfigGeneral.hide_spoof_ips = 1;
881 ConfigGeneral.ignore_bogus_ts = 0;
882 ConfigGeneral.disable_auth = 0;
883 ConfigGeneral.kill_chase_time_limit = 90;
884 ConfigGeneral.default_floodcount = 8;
885 ConfigGeneral.failed_oper_notice = 1;
886 ConfigGeneral.dots_in_ident = 0;
887 ConfigGeneral.min_nonwildcard = 4;
888 ConfigGeneral.min_nonwildcard_simple = 3;
889 ConfigGeneral.max_accept = 20;
890 ConfigGeneral.anti_nick_flood = 0;
891 ConfigGeneral.max_nick_time = 20;
892 ConfigGeneral.max_nick_changes = 5;
893 ConfigGeneral.anti_spam_exit_message_time = 0;
894 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
895 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
896 ConfigGeneral.warn_no_connect_block = 1;
897 ConfigGeneral.stats_e_disabled = 0;
898 ConfigGeneral.stats_o_oper_only = 0;
899 ConfigGeneral.stats_k_oper_only = 1; /* 1 = masked */
900 ConfigGeneral.stats_i_oper_only = 1; /* 1 = masked */
901 ConfigGeneral.stats_P_oper_only = 0;
902 ConfigGeneral.stats_u_oper_only = 0;
903 ConfigGeneral.caller_id_wait = 60;
904 ConfigGeneral.opers_bypass_callerid = 0;
905 ConfigGeneral.pace_wait = 10;
906 ConfigGeneral.pace_wait_simple = 1;
907 ConfigGeneral.short_motd = 0;
908 ConfigGeneral.ping_cookie = 0;
909 ConfigGeneral.no_oper_flood = 0;
910 ConfigGeneral.true_no_oper_flood = 0;
911 ConfigGeneral.oper_pass_resv = 1;
912 ConfigGeneral.max_targets = MAX_TARGETS_DEFAULT;
913 ConfigGeneral.oper_only_umodes = UMODE_DEBUG;
914 ConfigGeneral.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
915 ConfigGeneral.throttle_count = 1;
916 ConfigGeneral.throttle_time = 1;
917 }
918
919 static void
920 validate_conf(void)
921 {
922 if (ConfigGeneral.ts_warn_delta < TS_WARN_DELTA_MIN)
923 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
924
925 if (ConfigGeneral.ts_max_delta < TS_MAX_DELTA_MIN)
926 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
927
928 if (ConfigServerInfo.network_name == NULL)
929 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
930
931 if (ConfigServerInfo.network_desc == NULL)
932 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
933
934 ConfigGeneral.max_watch = IRCD_MAX(ConfigGeneral.max_watch, WATCHSIZE_MIN);
935 }
936
937 /* read_conf()
938 *
939 * inputs - file descriptor pointing to config file to use
940 * output - None
941 * side effects - Read configuration file.
942 */
943 static void
944 read_conf(FILE *file)
945 {
946 lineno = 0;
947
948 set_default_conf(); /* Set default values prior to conf parsing */
949 conf_parser_ctx.pass = 1;
950 yyparse(); /* Pick up the classes first */
951
952 rewind(file);
953
954 conf_parser_ctx.pass = 2;
955 yyparse(); /* Load the values from the conf */
956 validate_conf(); /* Check to make sure some values are still okay. */
957 /* Some global values are also loaded here. */
958 class_delete_marked(); /* Delete unused classes that are marked for deletion */
959 }
960
961 /* lookup_confhost()
962 *
963 * start DNS lookups of all hostnames in the conf
964 * line and convert an IP addresses in a.b.c.d number for to IP#s.
965 */
966 void
967 lookup_confhost(struct MaskItem *conf)
968 {
969 struct addrinfo hints, *res;
970
971 /*
972 * Do name lookup now on hostnames given and store the
973 * ip numbers in conf structure.
974 */
975 memset(&hints, 0, sizeof(hints));
976
977 hints.ai_family = AF_UNSPEC;
978 hints.ai_socktype = SOCK_STREAM;
979
980 /* Get us ready for a bind() and don't bother doing dns lookup */
981 hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
982
983 if (getaddrinfo(conf->host, NULL, &hints, &res))
984 {
985 conf_dns_lookup(conf);
986 return;
987 }
988
989 assert(res);
990
991 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
992 conf->addr.ss_len = res->ai_addrlen;
993 conf->addr.ss.ss_family = res->ai_family;
994
995 freeaddrinfo(res);
996 }
997
998 /* conf_connect_allowed()
999 *
1000 * inputs - pointer to inaddr
1001 * - int type ipv4 or ipv6
1002 * output - BANNED or accepted
1003 * side effects - none
1004 */
1005 int
1006 conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1007 {
1008 struct ip_entry *ip_found = NULL;
1009 struct MaskItem *conf = find_dline_conf(addr, aftype);
1010
1011 /* DLINE exempt also gets you out of static limits/pacing... */
1012 if (conf && (conf->type == CONF_EXEMPT))
1013 return 0;
1014
1015 if (conf)
1016 return BANNED_CLIENT;
1017
1018 ip_found = ipcache_find_or_add_address(addr);
1019
1020 if ((CurrentTime - ip_found->last_attempt) < ConfigGeneral.throttle_time)
1021 {
1022 if (ip_found->connection_count >= ConfigGeneral.throttle_count)
1023 return TOO_FAST;
1024
1025 ++ip_found->connection_count;
1026 }
1027 else
1028 ip_found->connection_count = 1;
1029
1030 ip_found->last_attempt = CurrentTime;
1031 return 0;
1032 }
1033
1034 /* cleanup_tklines()
1035 *
1036 * inputs - NONE
1037 * output - NONE
1038 * side effects - call function to expire temporary k/d lines
1039 * This is an event started off in ircd.c
1040 */
1041 void
1042 cleanup_tklines(void *unused)
1043 {
1044 hostmask_expire_temporary();
1045 expire_tklines(&xconf_items);
1046 expire_tklines(&nresv_items);
1047 expire_tklines(&cresv_items);
1048 }
1049
1050 /* expire_tklines()
1051 *
1052 * inputs - tkline list pointer
1053 * output - NONE
1054 * side effects - expire tklines
1055 */
1056 static void
1057 expire_tklines(dlink_list *tklist)
1058 {
1059 dlink_node *ptr = NULL, *ptr_next = NULL;
1060 struct MaskItem *conf = NULL;
1061
1062 DLINK_FOREACH_SAFE(ptr, ptr_next, tklist->head)
1063 {
1064 conf = ptr->data;
1065
1066 if (!conf->until || conf->until > CurrentTime)
1067 continue;
1068
1069 if (conf->type == CONF_XLINE)
1070 {
1071 if (ConfigGeneral.tkline_expire_notices)
1072 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1073 "Temporary X-line for [%s] expired", conf->name);
1074 conf_free(conf);
1075 }
1076 else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1077 {
1078 if (ConfigGeneral.tkline_expire_notices)
1079 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1080 "Temporary RESV for [%s] expired", conf->name);
1081 conf_free(conf);
1082 }
1083 }
1084 }
1085
1086 /* oper_privs_as_string()
1087 *
1088 * inputs - pointer to client_p
1089 * output - pointer to static string showing oper privs
1090 * side effects - return as string, the oper privs as derived from port
1091 */
1092 static const struct oper_privs
1093 {
1094 const unsigned int flag;
1095 const unsigned char c;
1096 } flag_list[] = {
1097 { OPER_FLAG_ADMIN, 'A' },
1098 { OPER_FLAG_REMOTEBAN, 'B' },
1099 { OPER_FLAG_DIE, 'D' },
1100 { OPER_FLAG_GLINE, 'G' },
1101 { OPER_FLAG_REHASH, 'H' },
1102 { OPER_FLAG_KLINE, 'K' },
1103 { OPER_FLAG_KILL, 'N' },
1104 { OPER_FLAG_KILL_REMOTE, 'O' },
1105 { OPER_FLAG_CONNECT, 'P' },
1106 { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1107 { OPER_FLAG_SQUIT, 'R' },
1108 { OPER_FLAG_SQUIT_REMOTE, 'S' },
1109 { OPER_FLAG_UNKLINE, 'U' },
1110 { OPER_FLAG_XLINE, 'X' },
1111 { 0, '\0' }
1112 };
1113
1114 char *
1115 oper_privs_as_string(const unsigned int port)
1116 {
1117 static char privs_out[IRCD_BUFSIZE];
1118 char *privs_ptr = privs_out;
1119
1120 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1121 {
1122 if (port & opriv->flag)
1123 *privs_ptr++ = opriv->c;
1124 else
1125 *privs_ptr++ = ToLower(opriv->c);
1126 }
1127
1128 *privs_ptr = '\0';
1129
1130 return privs_out;
1131 }
1132
1133 /*
1134 * Input: A client to find the active operator {} name for.
1135 * Output: The nick!user@host{oper} of the oper.
1136 * "oper" is server name for remote opers
1137 * Side effects: None.
1138 */
1139 const char *
1140 get_oper_name(const struct Client *client_p)
1141 {
1142 const dlink_node *cnode = NULL;
1143 /* +5 for !,@,{,} and null */
1144 static char buffer[NICKLEN + USERLEN + HOSTLEN + HOSTLEN + 5];
1145
1146 if (MyConnect(client_p))
1147 {
1148 if ((cnode = client_p->connection->confs.head))
1149 {
1150 const struct MaskItem *conf = cnode->data;
1151
1152 if (IsConfOperator(conf))
1153 {
1154 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1155 client_p->username, client_p->host, conf->name);
1156 return buffer;
1157 }
1158 }
1159
1160 /*
1161 * Probably should assert here for now. If there is an oper out there
1162 * with no operator {} conf attached, it would be good for us to know...
1163 */
1164 assert(0); /* Oper without oper conf! */
1165 }
1166
1167 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1168 client_p->username, client_p->host, client_p->servptr->name);
1169 return buffer;
1170 }
1171
1172 /* read_conf_files()
1173 *
1174 * inputs - cold start YES or NO
1175 * output - none
1176 * side effects - read all conf files needed, ircd.conf kline.conf etc.
1177 */
1178 void
1179 read_conf_files(int cold)
1180 {
1181 const char *filename = NULL;
1182 char chanmodes[IRCD_BUFSIZE] = "";
1183 char chanlimit[IRCD_BUFSIZE] = "";
1184
1185 conf_parser_ctx.boot = cold;
1186 filename = ConfigGeneral.configfile;
1187
1188 /* We need to know the initial filename for the yyerror() to report
1189 FIXME: The full path is in conffilenamebuf first time since we
1190 don't know anything else
1191
1192 - Gozem 2002-07-21
1193 */
1194 strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1195
1196 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1197 {
1198 if (cold)
1199 {
1200 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1201 filename, strerror(errno));
1202 exit(-1);
1203 }
1204 else
1205 {
1206 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1207 "Unable to read configuration file '%s': %s",
1208 filename, strerror(errno));
1209 return;
1210 }
1211 }
1212
1213 if (!cold)
1214 clear_out_old_conf();
1215
1216 read_conf(conf_parser_ctx.conf_file);
1217 fclose(conf_parser_ctx.conf_file);
1218
1219 log_reopen_all();
1220
1221 add_isupport("NICKLEN", NULL, ConfigServerInfo.max_nick_length);
1222 add_isupport("NETWORK", ConfigServerInfo.network_name, -1);
1223
1224 snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1225 add_isupport("MAXLIST", chanmodes, -1);
1226 add_isupport("MAXTARGETS", NULL, ConfigGeneral.max_targets);
1227 add_isupport("CHANTYPES", "#", -1);
1228
1229 snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1230 ConfigChannel.max_channels);
1231 add_isupport("CHANLIMIT", chanlimit, -1);
1232 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstMORS");
1233 add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1234 add_isupport("TOPICLEN", NULL, ConfigServerInfo.max_topic_length);
1235 add_isupport("CHANMODES", chanmodes, -1);
1236
1237 /*
1238 * message_locale may have changed. rebuild isupport since it relies
1239 * on strlen(form_str(RPL_ISUPPORT))
1240 */
1241 rebuild_isupport_message_line();
1242 }
1243
1244 /* clear_out_old_conf()
1245 *
1246 * inputs - none
1247 * output - none
1248 * side effects - Clear out the old configuration
1249 */
1250 static void
1251 clear_out_old_conf(void)
1252 {
1253 dlink_node *ptr = NULL, *next_ptr = NULL;
1254 dlink_list *free_items [] = {
1255 &server_items, &oconf_items,
1256 &uconf_items, &xconf_items,
1257 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1258 };
1259
1260 dlink_list ** iterator = free_items; /* C is dumb */
1261
1262 /* We only need to free anything allocated by yyparse() here.
1263 * Resetting structs, etc, is taken care of by set_default_conf().
1264 */
1265
1266 for (; *iterator != NULL; iterator++)
1267 {
1268 DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
1269 {
1270 struct MaskItem *conf = ptr->data;
1271
1272 conf->active = 0;
1273 dlinkDelete(&conf->node, *iterator);
1274
1275 /* XXX This is less than pretty */
1276 if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1277 {
1278 if (!conf->ref_count)
1279 conf_free(conf);
1280 }
1281 else if (conf->type == CONF_XLINE)
1282 {
1283 if (!conf->until)
1284 conf_free(conf);
1285 }
1286 else
1287 conf_free(conf);
1288 }
1289 }
1290
1291 motd_clear();
1292
1293 /*
1294 * don't delete the class table, rather mark all entries
1295 * for deletion. The table is cleaned up by class_delete_marked. - avalon
1296 */
1297 class_mark_for_deletion();
1298
1299 clear_out_address_conf();
1300
1301 /* clean out module paths */
1302 mod_clear_paths();
1303
1304 pseudo_clear();
1305
1306 /* clean out ConfigServerInfo */
1307 MyFree(ConfigServerInfo.description);
1308 ConfigServerInfo.description = NULL;
1309 MyFree(ConfigServerInfo.network_name);
1310 ConfigServerInfo.network_name = NULL;
1311 MyFree(ConfigServerInfo.network_desc);
1312 ConfigServerInfo.network_desc = NULL;
1313 #ifdef HAVE_LIBCRYPTO
1314 if (ConfigServerInfo.rsa_private_key)
1315 {
1316 RSA_free(ConfigServerInfo.rsa_private_key);
1317 ConfigServerInfo.rsa_private_key = NULL;
1318 }
1319
1320 MyFree(ConfigServerInfo.rsa_private_key_file);
1321 ConfigServerInfo.rsa_private_key_file = NULL;
1322 #endif
1323
1324 /* clean out ConfigAdminInfo */
1325 MyFree(ConfigAdminInfo.name);
1326 ConfigAdminInfo.name = NULL;
1327 MyFree(ConfigAdminInfo.email);
1328 ConfigAdminInfo.email = NULL;
1329 MyFree(ConfigAdminInfo.description);
1330 ConfigAdminInfo.description = NULL;
1331
1332 /* clean out listeners */
1333 close_listeners();
1334 }
1335
1336 /* conf_add_class_to_conf()
1337 *
1338 * inputs - pointer to config item
1339 * output - NONE
1340 * side effects - Add a class pointer to a conf
1341 */
1342 void
1343 conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1344 {
1345 if (class_name == NULL)
1346 {
1347 conf->class = class_default;
1348
1349 if (conf->type == CONF_CLIENT)
1350 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1351 "Warning *** Defaulting to default class for %s@%s",
1352 conf->user, conf->host);
1353 else
1354 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1355 "Warning *** Defaulting to default class for %s",
1356 conf->name);
1357 }
1358 else
1359 conf->class = class_find(class_name, 1);
1360
1361 if (conf->class == NULL)
1362 {
1363 if (conf->type == CONF_CLIENT)
1364 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1365 "Warning *** Defaulting to default class for %s@%s",
1366 conf->user, conf->host);
1367 else
1368 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1369 "Warning *** Defaulting to default class for %s",
1370 conf->name);
1371 conf->class = class_default;
1372 }
1373 }
1374
1375 /* yyerror()
1376 *
1377 * inputs - message from parser
1378 * output - NONE
1379 * side effects - message to opers and log file entry is made
1380 */
1381 void
1382 yyerror(const char *msg)
1383 {
1384 char newlinebuf[IRCD_BUFSIZE];
1385
1386 if (conf_parser_ctx.pass != 1)
1387 return;
1388
1389 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1390 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1391 "\"%s\", line %u: %s: %s",
1392 conffilebuf, lineno + 1, msg, newlinebuf);
1393 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1394 conffilebuf, lineno + 1, msg, newlinebuf);
1395 }
1396
1397 void
1398 conf_error_report(const char *msg)
1399 {
1400 char newlinebuf[IRCD_BUFSIZE];
1401
1402 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1403 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1404 "\"%s\", line %u: %s: %s",
1405 conffilebuf, lineno + 1, msg, newlinebuf);
1406 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1407 conffilebuf, lineno + 1, msg, newlinebuf);
1408 }
1409
1410 /*
1411 * valid_tkline()
1412 *
1413 * inputs - pointer to ascii string to check
1414 * - whether the specified time is in seconds or minutes
1415 * output - -1 not enough parameters
1416 * - 0 if not an integer number, else the number
1417 * side effects - none
1418 * Originally written by Dianora (Diane, db@db.net)
1419 */
1420 time_t
1421 valid_tkline(const char *data, const int minutes)
1422 {
1423 const unsigned char *p = (const unsigned char *)data;
1424 unsigned char tmpch = '\0';
1425 time_t result = 0;
1426
1427 while ((tmpch = *p++))
1428 {
1429 if (!IsDigit(tmpch))
1430 return 0;
1431
1432 result *= 10;
1433 result += (tmpch & 0xF);
1434 }
1435
1436 /*
1437 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1438 * i.e. they specifically use 0, I am going to return 1 instead
1439 * as a return value of non-zero is used to flag it as a temporary kline
1440 */
1441 if (result == 0)
1442 result = 1;
1443
1444 /*
1445 * If the incoming time is in seconds convert it to minutes for the purpose
1446 * of this calculation
1447 */
1448 if (!minutes)
1449 result = result / 60;
1450
1451 if (result > MAX_TDKLINE_TIME)
1452 result = MAX_TDKLINE_TIME;
1453
1454 result = result * 60; /* turn it into seconds */
1455
1456 return result;
1457 }
1458
1459 /* valid_wild_card_simple()
1460 *
1461 * inputs - data to check for sufficient non-wildcard characters
1462 * outputs - 1 if valid, else 0
1463 * side effects - none
1464 */
1465 int
1466 valid_wild_card_simple(const char *data)
1467 {
1468 const unsigned char *p = (const unsigned char *)data;
1469 unsigned char tmpch = '\0';
1470 unsigned int nonwild = 0;
1471
1472 while ((tmpch = *p++))
1473 {
1474 if (tmpch == '\\' && *p)
1475 {
1476 ++p;
1477 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1478 return 1;
1479 }
1480 else if (!IsMWildChar(tmpch))
1481 {
1482 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1483 return 1;
1484 }
1485 }
1486
1487 return 0;
1488 }
1489
1490 /* valid_wild_card()
1491 *
1492 * input - pointer to client
1493 * - int flag, 0 for no warning oper 1 for warning oper
1494 * - count of following varargs to check
1495 * output - 0 if not valid, 1 if valid
1496 * side effects - NOTICE is given to source_p if warn is 1
1497 */
1498 int
1499 valid_wild_card(struct Client *source_p, int warn, int count, ...)
1500 {
1501 unsigned char tmpch = '\0';
1502 unsigned int nonwild = 0;
1503 va_list args;
1504
1505 /*
1506 * Now we must check the user and host to make sure there
1507 * are at least NONWILDCHARS non-wildcard characters in
1508 * them, otherwise assume they are attempting to kline
1509 * *@* or some variant of that. This code will also catch
1510 * people attempting to kline *@*.tld, as long as NONWILDCHARS
1511 * is greater than 3. In that case, there are only 3 non-wild
1512 * characters (tld), so if NONWILDCHARS is 4, the kline will
1513 * be disallowed.
1514 * -wnder
1515 */
1516
1517 va_start(args, count);
1518
1519 while (count--)
1520 {
1521 const unsigned char *p = va_arg(args, const unsigned char *);
1522 if (p == NULL)
1523 continue;
1524
1525 while ((tmpch = *p++))
1526 {
1527 if (!IsKWildChar(tmpch))
1528 {
1529 /*
1530 * If we find enough non-wild characters, we can
1531 * break - no point in searching further.
1532 */
1533 if (++nonwild >= ConfigGeneral.min_nonwildcard)
1534 {
1535 va_end(args);
1536 return 1;
1537 }
1538 }
1539 }
1540 }
1541
1542 if (warn)
1543 sendto_one_notice(source_p, &me,
1544 ":Please include at least %u non-wildcard characters with the mask",
1545 ConfigGeneral.min_nonwildcard);
1546 va_end(args);
1547 return 0;
1548 }
1549
1550 /* XXX should this go into a separate file ? -Dianora */
1551 /* parse_aline
1552 *
1553 * input - pointer to cmd name being used
1554 * - pointer to client using cmd
1555 * - parc parameter count
1556 * - parv[] list of parameters to parse
1557 * - parse_flags bit map of things to test
1558 * - pointer to user or string to parse into
1559 * - pointer to host or NULL to parse into if non NULL
1560 * - pointer to optional tkline time or NULL
1561 * - pointer to target_server to parse into if non NULL
1562 * - pointer to reason to parse into
1563 *
1564 * output - 1 if valid, -1 if not valid
1565 * side effects - A generalised k/d/x etc. line parser,
1566 * "ALINE [time] user@host|string [ON] target :reason"
1567 * will parse returning a parsed user, host if
1568 * h_p pointer is non NULL, string otherwise.
1569 * if tkline_time pointer is non NULL a tk line will be set
1570 * to non zero if found.
1571 * if tkline_time pointer is NULL and tk line is found,
1572 * error is reported.
1573 * if target_server is NULL and an "ON" is found error
1574 * is reported.
1575 * if reason pointer is NULL ignore pointer,
1576 * this allows use of parse_a_line in unkline etc.
1577 *
1578 * - Dianora
1579 */
1580 int
1581 parse_aline(const char *cmd, struct Client *source_p,
1582 int parc, char **parv,
1583 int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1584 char **target_server, char **reason)
1585 {
1586 int found_tkline_time=0;
1587 static char def_reason[] = CONF_NOREASON;
1588 static char user[USERLEN*4+1];
1589 static char host[HOSTLEN*4+1];
1590
1591 parv++;
1592 parc--;
1593
1594 found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1595
1596 if (found_tkline_time != 0)
1597 {
1598 parv++;
1599 parc--;
1600
1601 if (tkline_time != NULL)
1602 *tkline_time = found_tkline_time;
1603 else
1604 {
1605 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1606 return -1;
1607 }
1608 }
1609
1610 if (parc == 0)
1611 {
1612 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1613 return -1;
1614 }
1615
1616 if (h_p == NULL)
1617 *up_p = *parv;
1618 else
1619 {
1620 if (find_user_host(source_p, *parv, user, host, parse_flags) == 0)
1621 return -1;
1622
1623 *up_p = user;
1624 *h_p = host;
1625 }
1626
1627 parc--;
1628 parv++;
1629
1630 if (parc != 0)
1631 {
1632 if (irccmp(*parv, "ON") == 0)
1633 {
1634 parc--;
1635 parv++;
1636
1637 if (target_server == NULL)
1638 {
1639 sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1640 return -1;
1641 }
1642
1643 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1644 {
1645 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1646 return -1;
1647 }
1648
1649 if (parc == 0 || EmptyString(*parv))
1650 {
1651 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1652 return -1;
1653 }
1654
1655 *target_server = *parv;
1656 parc--;
1657 parv++;
1658 }
1659 else
1660 {
1661 /* Make sure target_server *is* NULL if no ON server found
1662 * caller probably NULL'd it first, but no harm to do it again -db
1663 */
1664 if (target_server != NULL)
1665 *target_server = NULL;
1666 }
1667 }
1668
1669 if (h_p != NULL)
1670 {
1671 if (strchr(user, '!') != NULL)
1672 {
1673 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1674 return -1;
1675 }
1676
1677 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 2, *up_p, *h_p))
1678 return -1;
1679 }
1680 else
1681 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 1, *up_p))
1682 return -1;
1683
1684 if (reason != NULL)
1685 {
1686 if (parc != 0 && !EmptyString(*parv))
1687 {
1688 *reason = *parv;
1689 if (!valid_comment(source_p, *reason, 1))
1690 return -1;
1691 }
1692 else
1693 *reason = def_reason;
1694 }
1695
1696 return 1;
1697 }
1698
1699 /* find_user_host()
1700 *
1701 * inputs - pointer to client placing kline
1702 * - pointer to user_host_or_nick
1703 * - pointer to user buffer
1704 * - pointer to host buffer
1705 * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1706 * side effects -
1707 */
1708 static int
1709 find_user_host(struct Client *source_p, char *user_host_or_nick,
1710 char *luser, char *lhost, unsigned int flags)
1711 {
1712 struct Client *target_p = NULL;
1713 char *hostp = NULL;
1714
1715 if (lhost == NULL)
1716 {
1717 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1718 return 1;
1719 }
1720
1721 if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1722 {
1723 /* Explicit user@host mask given */
1724
1725 if (hostp != NULL) /* I'm a little user@host */
1726 {
1727 *(hostp++) = '\0'; /* short and squat */
1728 if (*user_host_or_nick)
1729 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1730 else
1731 strcpy(luser, "*");
1732
1733 if (*hostp)
1734 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1735 else
1736 strcpy(lhost, "*");
1737 }
1738 else
1739 {
1740 luser[0] = '*'; /* no @ found, assume its *@somehost */
1741 luser[1] = '\0';
1742 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1743 }
1744
1745 return 1;
1746 }
1747 else
1748 {
1749 /* Try to find user@host mask from nick */
1750 /* Okay to use source_p as the first param, because source_p == client_p */
1751 if ((target_p =
1752 find_chasing(source_p, user_host_or_nick)) == NULL)
1753 return 0; /* find_chasing sends ERR_NOSUCHNICK */
1754
1755 if (IsExemptKline(target_p))
1756 {
1757 if (!IsServer(source_p))
1758 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1759 return 0;
1760 }
1761
1762 /*
1763 * turn the "user" bit into "*user", blow away '~'
1764 * if found in original user name (non-idented)
1765 */
1766 strlcpy(luser, target_p->username, USERLEN*4 + 1);
1767
1768 if (target_p->username[0] == '~')
1769 luser[0] = '*';
1770
1771 if (target_p->sockhost[0] == '\0' ||
1772 (target_p->sockhost[0] == '0' && target_p->sockhost[1] == '\0'))
1773 strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
1774 else
1775 strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
1776 return 1;
1777 }
1778
1779 return 0;
1780 }
1781
1782 /* valid_comment()
1783 *
1784 * inputs - pointer to client
1785 * - pointer to comment
1786 * output - 0 if no valid comment,
1787 * - 1 if valid
1788 * side effects - truncates reason where necessary
1789 */
1790 int
1791 valid_comment(struct Client *source_p, char *comment, int warn)
1792 {
1793 if (strlen(comment) > REASONLEN)
1794 comment[REASONLEN-1] = '\0';
1795
1796 return 1;
1797 }
1798
1799 /* match_conf_password()
1800 *
1801 * inputs - pointer to given password
1802 * - pointer to Conf
1803 * output - 1 or 0 if match
1804 * side effects - none
1805 */
1806 int
1807 match_conf_password(const char *password, const struct MaskItem *conf)
1808 {
1809 const char *encr = NULL;
1810
1811 if (EmptyString(password) || EmptyString(conf->passwd))
1812 return 0;
1813
1814 if (conf->flags & CONF_FLAGS_ENCRYPTED)
1815 encr = crypt(password, conf->passwd);
1816 else
1817 encr = password;
1818
1819 return encr && !strcmp(encr, conf->passwd);
1820 }
1821
1822 /*
1823 * cluster_a_line
1824 *
1825 * inputs - client sending the cluster
1826 * - command name "KLINE" "XLINE" etc.
1827 * - capab -- CAP_KLN etc. from server.h
1828 * - cluster type -- CLUSTER_KLINE etc. from conf.h
1829 * - pattern and args to send along
1830 * output - none
1831 * side effects - Take source_p send the pattern with args given
1832 * along to all servers that match capab and cluster type
1833 */
1834 void
1835 cluster_a_line(struct Client *source_p, const char *command,
1836 int capab, int cluster_type, const char *pattern, ...)
1837 {
1838 va_list args;
1839 char buffer[IRCD_BUFSIZE] = "";
1840 const dlink_node *ptr = NULL;
1841
1842 va_start(args, pattern);
1843 vsnprintf(buffer, sizeof(buffer), pattern, args);
1844 va_end(args);
1845
1846 DLINK_FOREACH(ptr, cluster_items.head)
1847 {
1848 const struct MaskItem *conf = ptr->data;
1849
1850 if (conf->flags & cluster_type)
1851 sendto_match_servs(source_p, conf->name, CAP_CLUSTER|capab,
1852 "%s %s %s", command, conf->name, buffer);
1853 }
1854 }
1855
1856 /*
1857 * split_nuh
1858 *
1859 * inputs - pointer to original mask (modified in place)
1860 * - pointer to pointer where nick should go
1861 * - pointer to pointer where user should go
1862 * - pointer to pointer where host should go
1863 * output - NONE
1864 * side effects - mask is modified in place
1865 * If nick pointer is NULL, ignore writing to it
1866 * this allows us to use this function elsewhere.
1867 *
1868 * mask nick user host
1869 * ---------------------- ------- ------- ------
1870 * Dianora!db@db.net Dianora db db.net
1871 * Dianora Dianora * *
1872 * db.net * * db.net
1873 * OR if nick pointer is NULL
1874 * Dianora - * Dianora
1875 * Dianora! Dianora * *
1876 * Dianora!@ Dianora * *
1877 * Dianora!db Dianora db *
1878 * Dianora!@db.net Dianora * db.net
1879 * db@db.net * db db.net
1880 * !@ * * *
1881 * @ * * *
1882 * ! * * *
1883 */
1884 void
1885 split_nuh(struct split_nuh_item *const iptr)
1886 {
1887 char *p = NULL, *q = NULL;
1888
1889 if (iptr->nickptr)
1890 strlcpy(iptr->nickptr, "*", iptr->nicksize);
1891 if (iptr->userptr)
1892 strlcpy(iptr->userptr, "*", iptr->usersize);
1893 if (iptr->hostptr)
1894 strlcpy(iptr->hostptr, "*", iptr->hostsize);
1895
1896 if ((p = strchr(iptr->nuhmask, '!')))
1897 {
1898 *p = '\0';
1899
1900 if (iptr->nickptr && *iptr->nuhmask)
1901 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1902
1903 if ((q = strchr(++p, '@')))
1904 {
1905 *q++ = '\0';
1906
1907 if (*p)
1908 strlcpy(iptr->userptr, p, iptr->usersize);
1909
1910 if (*q)
1911 strlcpy(iptr->hostptr, q, iptr->hostsize);
1912 }
1913 else
1914 {
1915 if (*p)
1916 strlcpy(iptr->userptr, p, iptr->usersize);
1917 }
1918 }
1919 else
1920 {
1921 /* No ! found so lets look for a user@host */
1922 if ((p = strchr(iptr->nuhmask, '@')))
1923 {
1924 /* if found a @ */
1925 *p++ = '\0';
1926
1927 if (*iptr->nuhmask)
1928 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1929
1930 if (*p)
1931 strlcpy(iptr->hostptr, p, iptr->hostsize);
1932 }
1933 else
1934 {
1935 /* no @ found */
1936 if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
1937 strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
1938 else
1939 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1940 }
1941 }
1942 }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision