ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/conf.c
Revision: 5604
Committed: Mon Feb 23 21:07:13 2015 UTC (9 years, 1 month ago) by michael
Content type: text/x-csrc
File size: 51704 byte(s)
Log Message:
- Fixed core in conjunction with OSX 10.10/possibly other system when parsing pseudo{} blocks as reported by Daniel Oaks
- Reverted -r4079, -r4608 and 4107 as they only cause undefined behavior on some systems

File Contents

# Content
1 /*
2 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 *
4 * Copyright (c) 1997-2015 ircd-hybrid development team
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19 * USA
20 */
21
22 /*! \file conf.c
23 * \brief Configuration file functions.
24 * \version $Id$
25 */
26
27 #include "stdinc.h"
28 #include "list.h"
29 #include "ircd_defs.h"
30 #include "conf.h"
31 #include "conf_pseudo.h"
32 #include "server.h"
33 #include "resv.h"
34 #include "channel.h"
35 #include "client.h"
36 #include "event.h"
37 #include "irc_string.h"
38 #include "s_bsd.h"
39 #include "ircd.h"
40 #include "listener.h"
41 #include "hostmask.h"
42 #include "modules.h"
43 #include "numeric.h"
44 #include "fdlist.h"
45 #include "log.h"
46 #include "send.h"
47 #include "memory.h"
48 #include "res.h"
49 #include "userhost.h"
50 #include "user.h"
51 #include "channel_mode.h"
52 #include "parse.h"
53 #include "misc.h"
54 #include "conf_db.h"
55 #include "conf_class.h"
56 #include "motd.h"
57 #include "ipcache.h"
58
59
60 struct config_channel_entry ConfigChannel;
61 struct config_server_hide ConfigServerHide;
62 struct config_general_entry ConfigGeneral;
63 struct logging_entry ConfigLog = { .use_logging = 1 };
64 struct server_info ConfigServerInfo;
65 struct admin_info ConfigAdminInfo;
66 struct conf_parser_context conf_parser_ctx;
67
68 /* general conf items link list root, other than k lines etc. */
69 dlink_list service_items;
70 dlink_list server_items;
71 dlink_list cluster_items;
72 dlink_list oconf_items;
73 dlink_list uconf_items;
74 dlink_list xconf_items;
75 dlink_list nresv_items;
76 dlink_list cresv_items;
77
78 extern unsigned int lineno;
79 extern char linebuf[];
80 extern char conffilebuf[IRCD_BUFSIZE];
81 extern int yyparse(); /* defined in y.tab.c */
82
83
84 /* conf_dns_callback()
85 *
86 * inputs - pointer to struct MaskItem
87 * - pointer to DNSReply reply
88 * output - none
89 * side effects - called when resolver query finishes
90 * if the query resulted in a successful search, hp will contain
91 * a non-null pointer, otherwise hp will be null.
92 * if successful save hp in the conf item it was called with
93 */
94 static void
95 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name, size_t namelength)
96 {
97 struct MaskItem *const conf = vptr;
98
99 conf->dns_pending = 0;
100
101 if (addr)
102 memcpy(&conf->addr, addr, sizeof(conf->addr));
103 else
104 conf->dns_failed = 1;
105 }
106
107 /* conf_dns_lookup()
108 *
109 * do a nameserver lookup of the conf host
110 * if the conf entry is currently doing a ns lookup do nothing, otherwise
111 * allocate a dns_query and start ns lookup.
112 */
113 static void
114 conf_dns_lookup(struct MaskItem *conf)
115 {
116 if (conf->dns_pending)
117 return;
118
119 conf->dns_pending = 1;
120
121 if (conf->aftype == AF_INET)
122 gethost_byname_type(conf_dns_callback, conf, conf->host, T_A);
123 else
124 gethost_byname_type(conf_dns_callback, conf, conf->host, T_AAAA);
125 }
126
127 /* map_to_list()
128 *
129 * inputs - ConfType conf
130 * output - pointer to dlink_list to use
131 * side effects - none
132 */
133 static dlink_list *
134 map_to_list(enum maskitem_type type)
135 {
136 switch (type)
137 {
138 case CONF_XLINE:
139 return &xconf_items;
140 break;
141 case CONF_ULINE:
142 return &uconf_items;
143 break;
144 case CONF_NRESV:
145 return &nresv_items;
146 break;
147 case CONF_CRESV:
148 return &cresv_items;
149 break;
150 case CONF_OPER:
151 return &oconf_items;
152 break;
153 case CONF_SERVER:
154 return &server_items;
155 break;
156 case CONF_SERVICE:
157 return &service_items;
158 break;
159 case CONF_CLUSTER:
160 return &cluster_items;
161 break;
162 default:
163 return NULL;
164 }
165 }
166
167 struct MaskItem *
168 conf_make(enum maskitem_type type)
169 {
170 struct MaskItem *const conf = MyCalloc(sizeof(*conf));
171 dlink_list *list = NULL;
172
173 conf->type = type;
174 conf->active = 1;
175 conf->aftype = AF_INET;
176
177 if ((list = map_to_list(type)))
178 dlinkAdd(conf, &conf->node, list);
179 return conf;
180 }
181
182 void
183 conf_free(struct MaskItem *conf)
184 {
185 dlink_node *node = NULL, *node_next = NULL;
186 dlink_list *list = NULL;
187
188 if ((list = map_to_list(conf->type)))
189 dlinkFindDelete(list, conf);
190
191 MyFree(conf->name);
192
193 if (conf->dns_pending)
194 delete_resolver_queries(conf);
195 if (conf->passwd)
196 memset(conf->passwd, 0, strlen(conf->passwd));
197 if (conf->spasswd)
198 memset(conf->spasswd, 0, strlen(conf->spasswd));
199
200 conf->class = NULL;
201
202 MyFree(conf->passwd);
203 MyFree(conf->spasswd);
204 MyFree(conf->reason);
205 MyFree(conf->certfp);
206 MyFree(conf->whois);
207 MyFree(conf->user);
208 MyFree(conf->host);
209 #ifdef HAVE_LIBCRYPTO
210 MyFree(conf->cipher_list);
211
212 if (conf->rsa_public_key)
213 RSA_free(conf->rsa_public_key);
214 #endif
215 DLINK_FOREACH_SAFE(node, node_next, conf->hub_list.head)
216 {
217 MyFree(node->data);
218 dlinkDelete(node, &conf->hub_list);
219 free_dlink_node(node);
220 }
221
222 DLINK_FOREACH_SAFE(node, node_next, conf->leaf_list.head)
223 {
224 MyFree(node->data);
225 dlinkDelete(node, &conf->leaf_list);
226 free_dlink_node(node);
227 }
228
229 DLINK_FOREACH_SAFE(node, node_next, conf->exempt_list.head)
230 {
231 struct exempt *exptr = node->data;
232
233 dlinkDelete(node, &conf->exempt_list);
234 MyFree(exptr->name);
235 MyFree(exptr->user);
236 MyFree(exptr->host);
237 MyFree(exptr);
238 }
239
240 MyFree(conf);
241 }
242
243 /* attach_iline()
244 *
245 * inputs - client pointer
246 * - conf pointer
247 * output -
248 * side effects - do actual attach
249 */
250 static int
251 attach_iline(struct Client *client_p, struct MaskItem *conf)
252 {
253 const struct ClassItem *const class = conf->class;
254 struct ip_entry *ip_found;
255 int a_limit_reached = 0;
256 unsigned int local = 0, global = 0, ident = 0;
257
258 ip_found = ipcache_find_or_add_address(&client_p->connection->ip);
259 ip_found->count++;
260 AddFlag(client_p, FLAGS_IPHASH);
261
262 count_user_host(client_p->username, client_p->host,
263 &global, &local, &ident);
264
265 /* XXX blah. go down checking the various silly limits
266 * setting a_limit_reached if any limit is reached.
267 * - Dianora
268 */
269 if (class->max_total && class->ref_count >= class->max_total)
270 a_limit_reached = 1;
271 else if (class->max_perip && ip_found->count > class->max_perip)
272 a_limit_reached = 1;
273 else if (class->max_local && local >= class->max_local)
274 a_limit_reached = 1;
275 else if (class->max_global && global >= class->max_global)
276 a_limit_reached = 1;
277 else if (class->max_ident && ident >= class->max_ident &&
278 client_p->username[0] != '~')
279 a_limit_reached = 1;
280
281 if (a_limit_reached)
282 {
283 if (!IsConfExemptLimits(conf))
284 return TOO_MANY; /* Already at maximum allowed */
285
286 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
287 "but you have exceed_limit = yes;");
288 }
289
290 return attach_conf(client_p, conf);
291 }
292
293 /* verify_access()
294 *
295 * inputs - pointer to client to verify
296 * output - 0 if success -'ve if not
297 * side effect - find the first (best) I line to attach.
298 */
299 static int
300 verify_access(struct Client *client_p)
301 {
302 struct MaskItem *conf = NULL;
303
304 if (IsGotId(client_p))
305 {
306 conf = find_address_conf(client_p->host, client_p->username,
307 &client_p->connection->ip,
308 client_p->connection->aftype,
309 client_p->connection->password);
310 }
311 else
312 {
313 char non_ident[USERLEN + 1] = "~";
314
315 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
316 conf = find_address_conf(client_p->host, non_ident,
317 &client_p->connection->ip,
318 client_p->connection->aftype,
319 client_p->connection->password);
320 }
321
322 if (conf)
323 {
324 if (IsConfClient(conf))
325 {
326 if (IsConfRedir(conf))
327 {
328 sendto_one_numeric(client_p, &me, RPL_REDIR,
329 conf->name ? conf->name : "",
330 conf->port);
331 return NOT_AUTHORIZED;
332 }
333
334 /* Thanks for spoof idea amm */
335 if (IsConfDoSpoofIp(conf))
336 {
337 if (IsConfSpoofNotice(conf))
338 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, "%s spoofing: %s as %s",
339 client_p->name, client_p->host, conf->name);
340
341 strlcpy(client_p->host, conf->name, sizeof(client_p->host));
342 }
343
344 return attach_iline(client_p, conf);
345 }
346 else if (IsConfKill(conf) || (ConfigGeneral.glines && IsConfGline(conf)))
347 {
348 if (IsConfGline(conf))
349 sendto_one_notice(client_p, &me, ":*** G-lined");
350
351 sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
352 return BANNED_CLIENT;
353 }
354 }
355
356 return NOT_AUTHORIZED;
357 }
358
359 /* check_client()
360 *
361 * inputs - pointer to client
362 * output - 0 = Success
363 * NOT_AUTHORIZED (-1) = Access denied (no I line match)
364 * IRCD_SOCKET_ERROR (-2) = Bad socket.
365 * I_LINE_FULL (-3) = I-line is full
366 * TOO_MANY (-4) = Too many connections from hostname
367 * BANNED_CLIENT (-5) = K-lined
368 * side effects - Ordinary client access check.
369 * Look for conf lines which have the same
370 * status as the flags passed.
371 */
372 int
373 check_client(struct Client *source_p)
374 {
375 int i;
376
377 if ((i = verify_access(source_p)))
378 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
379 source_p->name, source_p->sockhost);
380
381 switch (i)
382 {
383 case TOO_MANY:
384 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
385 "Too many on IP for %s (%s).",
386 get_client_name(source_p, SHOW_IP),
387 source_p->sockhost);
388 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
389 get_client_name(source_p, SHOW_IP));
390 ++ServerStats.is_ref;
391 exit_client(source_p, "No more connections allowed on that IP");
392 break;
393
394 case I_LINE_FULL:
395 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
396 "auth {} block is full for %s (%s).",
397 get_client_name(source_p, SHOW_IP),
398 source_p->sockhost);
399 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
400 get_client_name(source_p, SHOW_IP));
401 ++ServerStats.is_ref;
402 exit_client(source_p, "No more connections allowed in your connection class");
403 break;
404
405 case NOT_AUTHORIZED:
406 /* jdc - lists server name & port connections are on */
407 /* a purely cosmetical change */
408 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
409 "Unauthorized client connection from %s [%s] on [%s/%u].",
410 get_client_name(source_p, SHOW_IP),
411 source_p->sockhost,
412 source_p->connection->listener->name,
413 source_p->connection->listener->port);
414 ilog(LOG_TYPE_IRCD, "Unauthorized client connection from %s on [%s/%u].",
415 get_client_name(source_p, SHOW_IP),
416 source_p->connection->listener->name,
417 source_p->connection->listener->port);
418
419 ++ServerStats.is_ref;
420 exit_client(source_p, "You are not authorized to use this server");
421 break;
422
423 case BANNED_CLIENT:
424 ++ServerStats.is_ref;
425 exit_client(source_p, "Banned");
426 break;
427
428 case 0:
429 default:
430 break;
431 }
432
433 return !(i < 0);
434 }
435
436 /* detach_conf()
437 *
438 * inputs - pointer to client to detach
439 * - type of conf to detach
440 * output - 0 for success, -1 for failure
441 * side effects - Disassociate configuration from the client.
442 * Also removes a class from the list if marked for deleting.
443 */
444 void
445 detach_conf(struct Client *client_p, enum maskitem_type type)
446 {
447 dlink_node *node = NULL, *node_next = NULL;
448
449 DLINK_FOREACH_SAFE(node, node_next, client_p->connection->confs.head)
450 {
451 struct MaskItem *conf = node->data;
452
453 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
454 assert(conf->ref_count > 0);
455 assert(conf->class->ref_count > 0);
456
457 if (!(conf->type & type))
458 continue;
459
460 dlinkDelete(node, &client_p->connection->confs);
461 free_dlink_node(node);
462
463 if (conf->type == CONF_CLIENT)
464 remove_from_cidr_check(&client_p->connection->ip, conf->class);
465
466 if (--conf->class->ref_count == 0 && conf->class->active == 0)
467 {
468 class_free(conf->class);
469 conf->class = NULL;
470 }
471
472 if (--conf->ref_count == 0 && conf->active == 0)
473 conf_free(conf);
474 }
475 }
476
477 /* attach_conf()
478 *
479 * inputs - client pointer
480 * - conf pointer
481 * output -
482 * side effects - Associate a specific configuration entry to a *local*
483 * client (this is the one which used in accepting the
484 * connection). Note, that this automatically changes the
485 * attachment if there was an old one...
486 */
487 int
488 attach_conf(struct Client *client_p, struct MaskItem *conf)
489 {
490 if (dlinkFind(&client_p->connection->confs, conf))
491 return 1;
492
493 if (conf->type == CONF_CLIENT)
494 if (cidr_limit_reached(IsConfExemptLimits(conf),
495 &client_p->connection->ip, conf->class))
496 return TOO_MANY; /* Already at maximum allowed */
497
498 conf->class->ref_count++;
499 conf->ref_count++;
500
501 dlinkAdd(conf, make_dlink_node(), &client_p->connection->confs);
502
503 return 0;
504 }
505
506 /* attach_connect_block()
507 *
508 * inputs - pointer to server to attach
509 * - name of server
510 * - hostname of server
511 * output - true (1) if both are found, otherwise return false (0)
512 * side effects - find connect block and attach them to connecting client
513 */
514 int
515 attach_connect_block(struct Client *client_p, const char *name,
516 const char *host)
517 {
518 dlink_node *node = NULL;
519
520 assert(host);
521
522 DLINK_FOREACH(node, server_items.head)
523 {
524 struct MaskItem *conf = node->data;
525
526 if (match(conf->name, name) || match(conf->host, host))
527 continue;
528
529 attach_conf(client_p, conf);
530 return -1;
531 }
532
533 return 0;
534 }
535
536 /* find_conf_name()
537 *
538 * inputs - pointer to conf link list to search
539 * - pointer to name to find
540 * - int mask of type of conf to find
541 * output - NULL or pointer to conf found
542 * side effects - find a conf entry which matches the name
543 * and has the given mask.
544 */
545 struct MaskItem *
546 find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
547 {
548 dlink_node *node = NULL;
549
550 DLINK_FOREACH(node, list->head)
551 {
552 struct MaskItem *conf = node->data;
553
554 if (conf->type == type)
555 {
556 if (conf->name && !irccmp(conf->name, name))
557 return conf;
558 }
559 }
560
561 return NULL;
562 }
563
564 /* find_matching_name_conf()
565 *
566 * inputs - type of link list to look in
567 * - pointer to name string to find
568 * - pointer to user
569 * - pointer to host
570 * - optional flags to match on as well
571 * output - NULL or pointer to found struct MaskItem
572 * side effects - looks for a match on name field
573 */
574 struct MaskItem *
575 find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
576 const char *host, unsigned int flags)
577 {
578 dlink_node *node = NULL;
579 dlink_list *list = map_to_list(type);
580 struct MaskItem *conf = NULL;
581
582 switch (type)
583 {
584 case CONF_SERVICE:
585 DLINK_FOREACH(node, list->head)
586 {
587 conf = node->data;
588
589 if (EmptyString(conf->name))
590 continue;
591 if (name && !irccmp(name, conf->name))
592 return conf;
593 }
594 break;
595
596 case CONF_XLINE:
597 case CONF_ULINE:
598 case CONF_NRESV:
599 case CONF_CRESV:
600 DLINK_FOREACH(node, list->head)
601 {
602 conf = node->data;
603
604 if (EmptyString(conf->name))
605 continue;
606 if (name && !match(conf->name, name))
607 {
608 if ((user == NULL && (host == NULL)))
609 return conf;
610 if ((conf->flags & flags) != flags)
611 continue;
612 if (EmptyString(conf->user) || EmptyString(conf->host))
613 return conf;
614 if (!match(conf->user, user) && !match(conf->host, host))
615 return conf;
616 }
617 }
618 break;
619
620 case CONF_SERVER:
621 DLINK_FOREACH(node, list->head)
622 {
623 conf = node->data;
624
625 if (name && !match(name, conf->name))
626 return conf;
627 if (host && !match(host, conf->host))
628 return conf;
629 }
630 break;
631
632 default:
633 break;
634 }
635 return NULL;
636 }
637
638 /* find_exact_name_conf()
639 *
640 * inputs - type of link list to look in
641 * - pointer to name string to find
642 * - pointer to user
643 * - pointer to host
644 * output - NULL or pointer to found struct MaskItem
645 * side effects - looks for an exact match on name field
646 */
647 struct MaskItem *
648 find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
649 const char *user, const char *host)
650 {
651 dlink_node *node = NULL;
652 dlink_list *list = map_to_list(type);
653 struct MaskItem *conf = NULL;
654
655 switch(type)
656 {
657 case CONF_XLINE:
658 case CONF_ULINE:
659 case CONF_NRESV:
660 case CONF_CRESV:
661
662 DLINK_FOREACH(node, list->head)
663 {
664 conf = node->data;
665
666 if (EmptyString(conf->name))
667 continue;
668
669 if (irccmp(conf->name, name) == 0)
670 {
671 if ((user == NULL && (host == NULL)))
672 return conf;
673 if (EmptyString(conf->user) || EmptyString(conf->host))
674 return conf;
675 if (!match(conf->user, user) && !match(conf->host, host))
676 return conf;
677 }
678 }
679 break;
680
681 case CONF_OPER:
682 DLINK_FOREACH(node, list->head)
683 {
684 conf = node->data;
685
686 if (EmptyString(conf->name))
687 continue;
688
689 if (!irccmp(conf->name, name))
690 {
691 if (!who)
692 return conf;
693 if (EmptyString(conf->user) || EmptyString(conf->host))
694 return NULL;
695 if (!match(conf->user, who->username))
696 {
697 switch (conf->htype)
698 {
699 case HM_HOST:
700 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
701 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
702 return conf;
703 break;
704 case HM_IPV4:
705 if (who->connection->aftype == AF_INET)
706 if (match_ipv4(&who->connection->ip, &conf->addr, conf->bits))
707 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
708 return conf;
709 break;
710 case HM_IPV6:
711 if (who->connection->aftype == AF_INET6)
712 if (match_ipv6(&who->connection->ip, &conf->addr, conf->bits))
713 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
714 return conf;
715 break;
716 default:
717 assert(0);
718 }
719 }
720 }
721 }
722
723 break;
724
725 case CONF_SERVER:
726 DLINK_FOREACH(node, list->head)
727 {
728 conf = node->data;
729
730 if (EmptyString(conf->name))
731 continue;
732
733 if (name == NULL)
734 {
735 if (EmptyString(conf->host))
736 continue;
737 if (irccmp(conf->host, host) == 0)
738 return conf;
739 }
740 else if (irccmp(conf->name, name) == 0)
741 return conf;
742 }
743
744 break;
745
746 default:
747 break;
748 }
749
750 return NULL;
751 }
752
753 /* set_default_conf()
754 *
755 * inputs - NONE
756 * output - NONE
757 * side effects - Set default values here.
758 * This is called **PRIOR** to parsing the
759 * configuration file. If you want to do some validation
760 * of values later, put them in validate_conf().
761 */
762 static void
763 set_default_conf(void)
764 {
765 /* verify init_class() ran, this should be an unnecessary check
766 * but its not much work.
767 */
768 assert(class_default == class_get_list()->tail->data);
769
770 #ifdef HAVE_LIBCRYPTO
771 #if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
772 {
773 EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
774
775 if (key)
776 {
777 SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
778 EC_KEY_free(key);
779 }
780 }
781
782 SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
783 #endif
784
785 SSL_CTX_set_cipher_list(ConfigServerInfo.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");
786 ConfigServerInfo.message_digest_algorithm = EVP_sha256();
787 ConfigServerInfo.rsa_private_key = NULL;
788 ConfigServerInfo.rsa_private_key_file = NULL;
789 #endif
790
791 /* ConfigServerInfo.name is not rehashable */
792 /* ConfigServerInfo.name = ConfigServerInfo.name; */
793 ConfigServerInfo.description = NULL;
794 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
795 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
796
797 memset(&ConfigServerInfo.ip, 0, sizeof(ConfigServerInfo.ip));
798 ConfigServerInfo.specific_ipv4_vhost = 0;
799 memset(&ConfigServerInfo.ip6, 0, sizeof(ConfigServerInfo.ip6));
800 ConfigServerInfo.specific_ipv6_vhost = 0;
801
802 ConfigServerInfo.default_max_clients = MAXCLIENTS_MAX;
803 ConfigServerInfo.max_nick_length = 9;
804 ConfigServerInfo.max_topic_length = 80;
805 ConfigServerInfo.hub = 0;
806
807 ConfigAdminInfo.name = NULL;
808 ConfigAdminInfo.email = NULL;
809 ConfigAdminInfo.description = NULL;
810
811 log_del_all();
812
813 ConfigLog.use_logging = 1;
814
815 ConfigChannel.disable_fake_channels = 0;
816 ConfigChannel.invite_client_count = 10;
817 ConfigChannel.invite_client_time = 300;
818 ConfigChannel.knock_client_count = 1;
819 ConfigChannel.knock_client_time = 300;
820 ConfigChannel.knock_delay_channel = 60;
821 ConfigChannel.max_channels = 25;
822 ConfigChannel.max_bans = 25;
823 ConfigChannel.default_join_flood_count = 18;
824 ConfigChannel.default_join_flood_time = 6;
825 ConfigChannel.default_split_user_count = 0;
826 ConfigChannel.default_split_server_count = 0;
827 ConfigChannel.no_join_on_split = 0;
828 ConfigChannel.no_create_on_split = 0;
829
830 ConfigServerHide.flatten_links = 0;
831 ConfigServerHide.links_delay = 300;
832 ConfigServerHide.hidden = 0;
833 ConfigServerHide.hide_servers = 0;
834 ConfigServerHide.hide_services = 0;
835 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
836 ConfigServerHide.hide_server_ips = 0;
837 ConfigServerHide.disable_remote_commands = 0;
838
839 ConfigGeneral.away_count = 2;
840 ConfigGeneral.away_time = 10;
841 ConfigGeneral.max_watch = WATCHSIZE_DEFAULT;
842 ConfigGeneral.cycle_on_host_change = 1;
843 ConfigGeneral.glines = 0;
844 ConfigGeneral.gline_time = 12 * 3600;
845 ConfigGeneral.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
846 ConfigGeneral.gline_min_cidr = 16;
847 ConfigGeneral.gline_min_cidr6 = 48;
848 ConfigGeneral.invisible_on_connect = 1;
849 ConfigGeneral.tkline_expire_notices = 1;
850 ConfigGeneral.ignore_bogus_ts = 0;
851 ConfigGeneral.disable_auth = 0;
852 ConfigGeneral.kill_chase_time_limit = 90;
853 ConfigGeneral.default_floodcount = 8;
854 ConfigGeneral.failed_oper_notice = 1;
855 ConfigGeneral.dots_in_ident = 0;
856 ConfigGeneral.min_nonwildcard = 4;
857 ConfigGeneral.min_nonwildcard_simple = 3;
858 ConfigGeneral.max_accept = 20;
859 ConfigGeneral.anti_nick_flood = 0;
860 ConfigGeneral.max_nick_time = 20;
861 ConfigGeneral.max_nick_changes = 5;
862 ConfigGeneral.anti_spam_exit_message_time = 0;
863 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
864 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
865 ConfigGeneral.warn_no_connect_block = 1;
866 ConfigGeneral.stats_e_disabled = 0;
867 ConfigGeneral.stats_i_oper_only = 1; /* 1 = masked */
868 ConfigGeneral.stats_k_oper_only = 1; /* 1 = masked */
869 ConfigGeneral.stats_o_oper_only = 1;
870 ConfigGeneral.stats_m_oper_only = 1;
871 ConfigGeneral.stats_P_oper_only = 0;
872 ConfigGeneral.stats_u_oper_only = 0;
873 ConfigGeneral.caller_id_wait = 60;
874 ConfigGeneral.opers_bypass_callerid = 0;
875 ConfigGeneral.pace_wait = 10;
876 ConfigGeneral.pace_wait_simple = 1;
877 ConfigGeneral.short_motd = 0;
878 ConfigGeneral.ping_cookie = 0;
879 ConfigGeneral.no_oper_flood = 0;
880 ConfigGeneral.oper_pass_resv = 1;
881 ConfigGeneral.max_targets = MAX_TARGETS_DEFAULT;
882 ConfigGeneral.oper_only_umodes = UMODE_DEBUG | UMODE_LOCOPS | UMODE_HIDDEN | UMODE_FARCONNECT |
883 UMODE_UNAUTH | UMODE_EXTERNAL | UMODE_BOTS | UMODE_NCHANGE |
884 UMODE_SPY | UMODE_FULL | UMODE_SKILL | UMODE_REJ | UMODE_CCONN;
885 ConfigGeneral.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
886 ConfigGeneral.throttle_count = 1;
887 ConfigGeneral.throttle_time = 1;
888 }
889
890 static void
891 validate_conf(void)
892 {
893 if (ConfigGeneral.ts_warn_delta < TS_WARN_DELTA_MIN)
894 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
895
896 if (ConfigGeneral.ts_max_delta < TS_MAX_DELTA_MIN)
897 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
898
899 if (EmptyString(ConfigServerInfo.network_name))
900 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
901
902 if (EmptyString(ConfigServerInfo.network_desc))
903 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
904
905 ConfigGeneral.max_watch = IRCD_MAX(ConfigGeneral.max_watch, WATCHSIZE_MIN);
906 }
907
908 /* read_conf()
909 *
910 * inputs - file descriptor pointing to config file to use
911 * output - None
912 * side effects - Read configuration file.
913 */
914 static void
915 read_conf(FILE *file)
916 {
917 lineno = 0;
918
919 set_default_conf(); /* Set default values prior to conf parsing */
920 conf_parser_ctx.pass = 1;
921 yyparse(); /* Pick up the classes first */
922
923 rewind(file);
924
925 conf_parser_ctx.pass = 2;
926 yyparse(); /* Load the values from the conf */
927 validate_conf(); /* Check to make sure some values are still okay. */
928 /* Some global values are also loaded here. */
929 class_delete_marked(); /* Delete unused classes that are marked for deletion */
930 }
931
932 /* conf_rehash()
933 *
934 * Actual REHASH service routine. Called with sig == 0 if it has been called
935 * as a result of an operator issuing this command, else assume it has been
936 * called as a result of the server receiving a HUP signal.
937 */
938 int
939 conf_rehash(int sig)
940 {
941 if (sig)
942 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
943 "Got signal SIGHUP, reloading configuration file(s)");
944
945 restart_resolver();
946
947 /* don't close listeners until we know we can go ahead with the rehash */
948
949 read_conf_files(0);
950
951 load_conf_modules();
952 check_conf_klines();
953
954 return 0;
955 }
956
957 /* lookup_confhost()
958 *
959 * start DNS lookups of all hostnames in the conf
960 * line and convert an IP addresses in a.b.c.d number for to IP#s.
961 */
962 void
963 lookup_confhost(struct MaskItem *conf)
964 {
965 struct addrinfo hints, *res;
966
967 /*
968 * Do name lookup now on hostnames given and store the
969 * ip numbers in conf structure.
970 */
971 memset(&hints, 0, sizeof(hints));
972
973 hints.ai_family = AF_UNSPEC;
974 hints.ai_socktype = SOCK_STREAM;
975
976 /* Get us ready for a bind() and don't bother doing dns lookup */
977 hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
978
979 if (getaddrinfo(conf->host, NULL, &hints, &res))
980 {
981 conf_dns_lookup(conf);
982 return;
983 }
984
985 assert(res);
986
987 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
988 conf->addr.ss_len = res->ai_addrlen;
989 conf->addr.ss.ss_family = res->ai_family;
990
991 freeaddrinfo(res);
992 }
993
994 /* conf_connect_allowed()
995 *
996 * inputs - pointer to inaddr
997 * - int type ipv4 or ipv6
998 * output - BANNED or accepted
999 * side effects - none
1000 */
1001 int
1002 conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1003 {
1004 struct ip_entry *ip_found = NULL;
1005 struct MaskItem *const conf = find_dline_conf(addr, aftype);
1006
1007 /* DLINE exempt also gets you out of static limits/pacing... */
1008 if (conf && (conf->type == CONF_EXEMPT))
1009 return 0;
1010
1011 if (conf)
1012 return BANNED_CLIENT;
1013
1014 ip_found = ipcache_find_or_add_address(addr);
1015
1016 if ((CurrentTime - ip_found->last_attempt) < ConfigGeneral.throttle_time)
1017 {
1018 if (ip_found->connection_count >= ConfigGeneral.throttle_count)
1019 return TOO_FAST;
1020
1021 ++ip_found->connection_count;
1022 }
1023 else
1024 ip_found->connection_count = 1;
1025
1026 ip_found->last_attempt = CurrentTime;
1027 return 0;
1028 }
1029
1030 /* expire_tklines()
1031 *
1032 * inputs - tkline list pointer
1033 * output - NONE
1034 * side effects - expire tklines
1035 */
1036 static void
1037 expire_tklines(dlink_list *list)
1038 {
1039 dlink_node *node = NULL, *node_next = NULL;
1040
1041 DLINK_FOREACH_SAFE(node, node_next, list->head)
1042 {
1043 struct MaskItem *conf = node->data;
1044
1045 if (!conf->until || conf->until > CurrentTime)
1046 continue;
1047
1048 if (conf->type == CONF_XLINE)
1049 {
1050 if (ConfigGeneral.tkline_expire_notices)
1051 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1052 "Temporary X-line for [%s] expired", conf->name);
1053 conf_free(conf);
1054 }
1055 else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1056 {
1057 if (ConfigGeneral.tkline_expire_notices)
1058 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1059 "Temporary RESV for [%s] expired", conf->name);
1060 conf_free(conf);
1061 }
1062 }
1063 }
1064
1065 /* cleanup_tklines()
1066 *
1067 * inputs - NONE
1068 * output - NONE
1069 * side effects - call function to expire temporary k/d lines
1070 * This is an event started off in ircd.c
1071 */
1072 void
1073 cleanup_tklines(void *unused)
1074 {
1075 hostmask_expire_temporary();
1076 expire_tklines(&xconf_items);
1077 expire_tklines(&nresv_items);
1078 expire_tklines(&cresv_items);
1079 }
1080
1081 /* oper_privs_as_string()
1082 *
1083 * inputs - pointer to client_p
1084 * output - pointer to static string showing oper privs
1085 * side effects - return as string, the oper privs as derived from port
1086 */
1087 static const struct oper_privs
1088 {
1089 const unsigned int flag;
1090 const unsigned char c;
1091 } flag_list[] = {
1092 { OPER_FLAG_ADMIN, 'A' },
1093 { OPER_FLAG_REMOTEBAN, 'B' },
1094 { OPER_FLAG_DIE, 'D' },
1095 { OPER_FLAG_GLINE, 'G' },
1096 { OPER_FLAG_REHASH, 'H' },
1097 { OPER_FLAG_KLINE, 'K' },
1098 { OPER_FLAG_KILL, 'N' },
1099 { OPER_FLAG_KILL_REMOTE, 'O' },
1100 { OPER_FLAG_CONNECT, 'P' },
1101 { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1102 { OPER_FLAG_SQUIT, 'R' },
1103 { OPER_FLAG_SQUIT_REMOTE, 'S' },
1104 { OPER_FLAG_UNKLINE, 'U' },
1105 { OPER_FLAG_XLINE, 'X' },
1106 { 0, '\0' }
1107 };
1108
1109 char *
1110 oper_privs_as_string(const unsigned int port)
1111 {
1112 static char privs_out[IRCD_BUFSIZE];
1113 char *privs_ptr = privs_out;
1114
1115 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1116 {
1117 if (port & opriv->flag)
1118 *privs_ptr++ = opriv->c;
1119 else
1120 *privs_ptr++ = ToLower(opriv->c);
1121 }
1122
1123 *privs_ptr = '\0';
1124
1125 return privs_out;
1126 }
1127
1128 /*
1129 * Input: A client to find the active operator {} name for.
1130 * Output: The nick!user@host{oper} of the oper.
1131 * "oper" is server name for remote opers
1132 * Side effects: None.
1133 */
1134 const char *
1135 get_oper_name(const struct Client *client_p)
1136 {
1137 static char buffer[IRCD_BUFSIZE];
1138
1139 if (IsServer(client_p))
1140 return client_p->name;
1141
1142 if (MyConnect(client_p))
1143 {
1144 const dlink_node *const node = client_p->connection->confs.head;
1145
1146 if (node)
1147 {
1148 const struct MaskItem *const conf = node->data;
1149
1150 if (conf->type == CONF_OPER)
1151 {
1152 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1153 client_p->username, client_p->host, conf->name);
1154 return buffer;
1155 }
1156 }
1157
1158 /*
1159 * Probably should assert here for now. If there is an oper out there
1160 * with no operator {} conf attached, it would be good for us to know...
1161 */
1162 assert(0); /* Oper without oper conf! */
1163 }
1164
1165 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1166 client_p->username, client_p->host, client_p->servptr->name);
1167 return buffer;
1168 }
1169
1170 /* clear_out_old_conf()
1171 *
1172 * inputs - none
1173 * output - none
1174 * side effects - Clear out the old configuration
1175 */
1176 static void
1177 clear_out_old_conf(void)
1178 {
1179 dlink_node *node = NULL, *node_next = NULL;
1180 dlink_list *free_items [] = {
1181 &server_items, &oconf_items,
1182 &uconf_items, &xconf_items,
1183 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1184 };
1185
1186 dlink_list ** iterator = free_items; /* C is dumb */
1187
1188 /* We only need to free anything allocated by yyparse() here.
1189 * Resetting structs, etc, is taken care of by set_default_conf().
1190 */
1191
1192 for (; *iterator; iterator++)
1193 {
1194 DLINK_FOREACH_SAFE(node, node_next, (*iterator)->head)
1195 {
1196 struct MaskItem *conf = node->data;
1197
1198 conf->active = 0;
1199 dlinkDelete(&conf->node, *iterator);
1200
1201 /* XXX This is less than pretty */
1202 if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1203 {
1204 if (!conf->ref_count)
1205 conf_free(conf);
1206 }
1207 else if (conf->type == CONF_XLINE)
1208 {
1209 if (!conf->until)
1210 conf_free(conf);
1211 }
1212 else
1213 conf_free(conf);
1214 }
1215 }
1216
1217 motd_clear();
1218
1219 /*
1220 * Don't delete the class table, rather mark all entries for deletion.
1221 * The table is cleaned up by class_delete_marked. - avalon
1222 */
1223 class_mark_for_deletion();
1224
1225 clear_out_address_conf();
1226
1227 /* Clean out module paths */
1228 mod_clear_paths();
1229
1230 pseudo_clear();
1231
1232 /* Clean out ConfigServerInfo */
1233 MyFree(ConfigServerInfo.description);
1234 ConfigServerInfo.description = NULL;
1235 MyFree(ConfigServerInfo.network_name);
1236 ConfigServerInfo.network_name = NULL;
1237 MyFree(ConfigServerInfo.network_desc);
1238 ConfigServerInfo.network_desc = NULL;
1239 #ifdef HAVE_LIBCRYPTO
1240 if (ConfigServerInfo.rsa_private_key)
1241 {
1242 RSA_free(ConfigServerInfo.rsa_private_key);
1243 ConfigServerInfo.rsa_private_key = NULL;
1244 }
1245
1246 MyFree(ConfigServerInfo.rsa_private_key_file);
1247 ConfigServerInfo.rsa_private_key_file = NULL;
1248 #endif
1249
1250 /* Clean out ConfigAdminInfo */
1251 MyFree(ConfigAdminInfo.name);
1252 ConfigAdminInfo.name = NULL;
1253 MyFree(ConfigAdminInfo.email);
1254 ConfigAdminInfo.email = NULL;
1255 MyFree(ConfigAdminInfo.description);
1256 ConfigAdminInfo.description = NULL;
1257
1258 /* Clean out listeners */
1259 close_listeners();
1260 }
1261
1262 /* read_conf_files()
1263 *
1264 * inputs - cold start YES or NO
1265 * output - none
1266 * side effects - read all conf files needed, ircd.conf kline.conf etc.
1267 */
1268 void
1269 read_conf_files(int cold)
1270 {
1271 const char *filename = NULL;
1272 char chanmodes[IRCD_BUFSIZE] = "";
1273 char chanlimit[IRCD_BUFSIZE] = "";
1274
1275 conf_parser_ctx.boot = cold;
1276 filename = ConfigGeneral.configfile;
1277
1278 /* We need to know the initial filename for the yyerror() to report
1279 FIXME: The full path is in conffilenamebuf first time since we
1280 don't know anything else
1281
1282 - Gozem 2002-07-21
1283 */
1284 strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1285
1286 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1287 {
1288 if (cold)
1289 {
1290 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1291 filename, strerror(errno));
1292 exit(-1);
1293 }
1294 else
1295 {
1296 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1297 "Unable to read configuration file '%s': %s",
1298 filename, strerror(errno));
1299 return;
1300 }
1301 }
1302
1303 if (!cold)
1304 clear_out_old_conf();
1305
1306 read_conf(conf_parser_ctx.conf_file);
1307 fclose(conf_parser_ctx.conf_file);
1308
1309 log_reopen_all();
1310
1311 add_isupport("NICKLEN", NULL, ConfigServerInfo.max_nick_length);
1312 add_isupport("NETWORK", ConfigServerInfo.network_name, -1);
1313
1314 snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1315 add_isupport("MAXLIST", chanmodes, -1);
1316 add_isupport("MAXTARGETS", NULL, ConfigGeneral.max_targets);
1317 add_isupport("CHANTYPES", "#", -1);
1318
1319 snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1320 ConfigChannel.max_channels);
1321 add_isupport("CHANLIMIT", chanlimit, -1);
1322 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstCMORS");
1323 add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1324 add_isupport("TOPICLEN", NULL, ConfigServerInfo.max_topic_length);
1325 add_isupport("CHANMODES", chanmodes, -1);
1326
1327 /*
1328 * message_locale may have changed. rebuild isupport since it relies
1329 * on strlen(form_str(RPL_ISUPPORT))
1330 */
1331 rebuild_isupport_message_line();
1332 }
1333
1334 /* conf_add_class_to_conf()
1335 *
1336 * inputs - pointer to config item
1337 * output - NONE
1338 * side effects - Add a class pointer to a conf
1339 */
1340 void
1341 conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1342 {
1343 if (class_name == NULL)
1344 {
1345 conf->class = class_default;
1346
1347 if (conf->type == CONF_CLIENT || conf->type == CONF_OPER)
1348 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1349 "Warning *** Defaulting to default class for %s@%s",
1350 conf->user, conf->host);
1351 else
1352 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1353 "Warning *** Defaulting to default class for %s",
1354 conf->name);
1355 }
1356 else
1357 conf->class = class_find(class_name, 1);
1358
1359 if (conf->class == NULL)
1360 {
1361 if (conf->type == CONF_CLIENT || conf->type == CONF_OPER)
1362 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1363 "Warning *** Defaulting to default class for %s@%s",
1364 conf->user, conf->host);
1365 else
1366 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1367 "Warning *** Defaulting to default class for %s",
1368 conf->name);
1369 conf->class = class_default;
1370 }
1371 }
1372
1373 /* yyerror()
1374 *
1375 * inputs - message from parser
1376 * output - NONE
1377 * side effects - message to opers and log file entry is made
1378 */
1379 void
1380 yyerror(const char *msg)
1381 {
1382 char newlinebuf[IRCD_BUFSIZE];
1383
1384 if (conf_parser_ctx.pass != 1)
1385 return;
1386
1387 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1388 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1389 "\"%s\", line %u: %s: %s",
1390 conffilebuf, lineno + 1, msg, newlinebuf);
1391 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1392 conffilebuf, lineno + 1, msg, newlinebuf);
1393 }
1394
1395 void
1396 conf_error_report(const char *msg)
1397 {
1398 char newlinebuf[IRCD_BUFSIZE];
1399
1400 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1401 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1402 "\"%s\", line %u: %s: %s",
1403 conffilebuf, lineno + 1, msg, newlinebuf);
1404 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1405 conffilebuf, lineno + 1, msg, newlinebuf);
1406 }
1407
1408 /*
1409 * valid_tkline()
1410 *
1411 * inputs - pointer to ascii string to check
1412 * - whether the specified time is in seconds or minutes
1413 * output - -1 not enough parameters
1414 * - 0 if not an integer number, else the number
1415 * side effects - none
1416 * Originally written by Dianora (Diane, db@db.net)
1417 */
1418 time_t
1419 valid_tkline(const char *data, const int minutes)
1420 {
1421 const unsigned char *p = (const unsigned char *)data;
1422 unsigned char tmpch = '\0';
1423 time_t result = 0;
1424
1425 while ((tmpch = *p++))
1426 {
1427 if (!IsDigit(tmpch))
1428 return 0;
1429
1430 result *= 10;
1431 result += (tmpch & 0xF);
1432 }
1433
1434 /*
1435 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1436 * i.e. they specifically use 0, I am going to return 1 instead as a return
1437 * value of non-zero is used to flag it as a temporary kline
1438 */
1439 if (result == 0)
1440 result = 1;
1441
1442 /*
1443 * If the incoming time is in seconds convert it to minutes for the purpose
1444 * of this calculation
1445 */
1446 if (!minutes)
1447 result = result / 60;
1448
1449 if (result > MAX_TDKLINE_TIME)
1450 result = MAX_TDKLINE_TIME;
1451
1452 result = result * 60; /* Turn it into seconds */
1453
1454 return result;
1455 }
1456
1457 /* valid_wild_card_simple()
1458 *
1459 * inputs - data to check for sufficient non-wildcard characters
1460 * outputs - 1 if valid, else 0
1461 * side effects - none
1462 */
1463 int
1464 valid_wild_card_simple(const char *data)
1465 {
1466 const unsigned char *p = (const unsigned char *)data;
1467 unsigned char tmpch = '\0';
1468 unsigned int nonwild = 0;
1469
1470 while ((tmpch = *p++))
1471 {
1472 if (tmpch == '\\' && *p)
1473 {
1474 ++p;
1475 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1476 return 1;
1477 }
1478 else if (!IsMWildChar(tmpch))
1479 {
1480 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1481 return 1;
1482 }
1483 }
1484
1485 return 0;
1486 }
1487
1488 /* valid_wild_card()
1489 *
1490 * input - pointer to client
1491 * - int flag, 0 for no warning oper 1 for warning oper
1492 * - count of following varargs to check
1493 * output - 0 if not valid, 1 if valid
1494 * side effects - NOTICE is given to source_p if warn is 1
1495 */
1496 int
1497 valid_wild_card(struct Client *source_p, int warn, int count, ...)
1498 {
1499 unsigned char tmpch = '\0';
1500 unsigned int nonwild = 0;
1501 va_list args;
1502
1503 /*
1504 * Now we must check the user and host to make sure there
1505 * are at least NONWILDCHARS non-wildcard characters in
1506 * them, otherwise assume they are attempting to kline
1507 * *@* or some variant of that. This code will also catch
1508 * people attempting to kline *@*.tld, as long as NONWILDCHARS
1509 * is greater than 3. In that case, there are only 3 non-wild
1510 * characters (tld), so if NONWILDCHARS is 4, the kline will
1511 * be disallowed.
1512 * -wnder
1513 */
1514
1515 va_start(args, count);
1516
1517 while (count--)
1518 {
1519 const unsigned char *p = va_arg(args, const unsigned char *);
1520 if (p == NULL)
1521 continue;
1522
1523 while ((tmpch = *p++))
1524 {
1525 if (!IsKWildChar(tmpch))
1526 {
1527 /*
1528 * If we find enough non-wild characters, we can
1529 * break - no point in searching further.
1530 */
1531 if (++nonwild >= ConfigGeneral.min_nonwildcard)
1532 {
1533 va_end(args);
1534 return 1;
1535 }
1536 }
1537 }
1538 }
1539
1540 if (warn)
1541 sendto_one_notice(source_p, &me,
1542 ":Please include at least %u non-wildcard characters with the mask",
1543 ConfigGeneral.min_nonwildcard);
1544 va_end(args);
1545 return 0;
1546 }
1547
1548 /* find_user_host()
1549 *
1550 * inputs - pointer to client placing kline
1551 * - pointer to user_host_or_nick
1552 * - pointer to user buffer
1553 * - pointer to host buffer
1554 * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1555 * side effects -
1556 */
1557 static int
1558 find_user_host(struct Client *source_p, char *user_host_or_nick,
1559 char *luser, char *lhost, unsigned int flags)
1560 {
1561 struct Client *target_p = NULL;
1562 char *hostp = NULL;
1563
1564 if (lhost == NULL)
1565 {
1566 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1567 return 1;
1568 }
1569
1570 if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1571 {
1572 /* Explicit user@host mask given */
1573 if (hostp) /* I'm a little user@host */
1574 {
1575 *(hostp++) = '\0'; /* short and squat */
1576
1577 if (*user_host_or_nick)
1578 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1579 else
1580 strcpy(luser, "*");
1581
1582 if (*hostp)
1583 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1584 else
1585 strcpy(lhost, "*");
1586 }
1587 else
1588 {
1589 luser[0] = '*'; /* no @ found, assume its *@somehost */
1590 luser[1] = '\0';
1591 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1592 }
1593
1594 return 1;
1595 }
1596 else
1597 {
1598 /* Try to find user@host mask from nick */
1599 /* Okay to use source_p as the first param, because source_p == client_p */
1600 if ((target_p =
1601 find_chasing(source_p, user_host_or_nick)) == NULL)
1602 return 0; /* find_chasing sends ERR_NOSUCHNICK */
1603
1604 if (IsExemptKline(target_p))
1605 {
1606 if (IsClient(source_p))
1607 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1608 return 0;
1609 }
1610
1611 /*
1612 * Turn the "user" bit into "*user", blow away '~'
1613 * if found in original user name (non-idented)
1614 */
1615 strlcpy(luser, target_p->username, USERLEN*4 + 1);
1616
1617 if (target_p->username[0] == '~')
1618 luser[0] = '*';
1619
1620 if (!strcmp(target_p->sockhost, "0"))
1621 strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
1622 else
1623 strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
1624 return 1;
1625 }
1626
1627 return 0;
1628 }
1629
1630 /* XXX should this go into a separate file ? -Dianora */
1631 /* parse_aline
1632 *
1633 * input - pointer to cmd name being used
1634 * - pointer to client using cmd
1635 * - parc parameter count
1636 * - parv[] list of parameters to parse
1637 * - parse_flags bit map of things to test
1638 * - pointer to user or string to parse into
1639 * - pointer to host or NULL to parse into if non NULL
1640 * - pointer to optional tkline time or NULL
1641 * - pointer to target_server to parse into if non NULL
1642 * - pointer to reason to parse into
1643 *
1644 * output - 1 if valid, -1 if not valid
1645 * side effects - A generalised k/d/x etc. line parser,
1646 * "ALINE [time] user@host|string [ON] target :reason"
1647 * will parse returning a parsed user, host if
1648 * h_p pointer is non NULL, string otherwise.
1649 * if tkline_time pointer is non NULL a tk line will be set
1650 * to non zero if found.
1651 * if tkline_time pointer is NULL and tk line is found,
1652 * error is reported.
1653 * if target_server is NULL and an "ON" is found error
1654 * is reported.
1655 * if reason pointer is NULL ignore pointer,
1656 * this allows use of parse_a_line in unkline etc.
1657 *
1658 * - Dianora
1659 */
1660 int
1661 parse_aline(const char *cmd, struct Client *source_p,
1662 int parc, char **parv,
1663 int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1664 char **target_server, char **reason)
1665 {
1666 int found_tkline_time=0;
1667 static char def_reason[] = CONF_NOREASON;
1668 static char user[USERLEN*4+1];
1669 static char host[HOSTLEN*4+1];
1670
1671 parv++;
1672 parc--;
1673
1674 found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1675
1676 if (found_tkline_time)
1677 {
1678 parv++;
1679 parc--;
1680
1681 if (tkline_time)
1682 *tkline_time = found_tkline_time;
1683 else
1684 {
1685 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1686 return -1;
1687 }
1688 }
1689
1690 if (parc == 0)
1691 {
1692 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1693 return -1;
1694 }
1695
1696 if (h_p == NULL)
1697 *up_p = *parv;
1698 else
1699 {
1700 if (find_user_host(source_p, *parv, user, host, parse_flags) == 0)
1701 return -1;
1702
1703 *up_p = user;
1704 *h_p = host;
1705 }
1706
1707 parc--;
1708 parv++;
1709
1710 if (parc)
1711 {
1712 if (irccmp(*parv, "ON") == 0)
1713 {
1714 parc--;
1715 parv++;
1716
1717 if (target_server == NULL)
1718 {
1719 sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1720 return -1;
1721 }
1722
1723 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1724 {
1725 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1726 return -1;
1727 }
1728
1729 if (parc == 0 || EmptyString(*parv))
1730 {
1731 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1732 return -1;
1733 }
1734
1735 *target_server = *parv;
1736 parc--;
1737 parv++;
1738 }
1739 else
1740 {
1741 /* Make sure target_server *is* NULL if no ON server found
1742 * caller probably NULL'd it first, but no harm to do it again -db
1743 */
1744 if (target_server)
1745 *target_server = NULL;
1746 }
1747 }
1748
1749 if (h_p)
1750 {
1751 if (strchr(user, '!'))
1752 {
1753 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1754 return -1;
1755 }
1756
1757 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 2, *up_p, *h_p))
1758 return -1;
1759 }
1760 else
1761 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 1, *up_p))
1762 return -1;
1763
1764 if (reason)
1765 {
1766 if (parc && !EmptyString(*parv))
1767 {
1768 *reason = *parv;
1769
1770 if (!valid_comment(source_p, *reason, 1))
1771 return -1;
1772 }
1773 else
1774 *reason = def_reason;
1775 }
1776
1777 return 1;
1778 }
1779
1780 /* valid_comment()
1781 *
1782 * inputs - pointer to client
1783 * - pointer to comment
1784 * output - 0 if no valid comment,
1785 * - 1 if valid
1786 * side effects - truncates reason where necessary
1787 */
1788 int
1789 valid_comment(struct Client *source_p, char *comment, int warn)
1790 {
1791 if (strlen(comment) > REASONLEN)
1792 comment[REASONLEN-1] = '\0';
1793
1794 return 1;
1795 }
1796
1797 /* match_conf_password()
1798 *
1799 * inputs - pointer to given password
1800 * - pointer to Conf
1801 * output - 1 or 0 if match
1802 * side effects - none
1803 */
1804 int
1805 match_conf_password(const char *password, const struct MaskItem *conf)
1806 {
1807 const char *encr = NULL;
1808
1809 if (EmptyString(password) || EmptyString(conf->passwd))
1810 return 0;
1811
1812 if (conf->flags & CONF_FLAGS_ENCRYPTED)
1813 encr = crypt(password, conf->passwd);
1814 else
1815 encr = password;
1816
1817 return encr && !strcmp(encr, conf->passwd);
1818 }
1819
1820 /*
1821 * cluster_a_line
1822 *
1823 * inputs - client sending the cluster
1824 * - command name "KLINE" "XLINE" etc.
1825 * - capab -- CAP_KLN etc. from server.h
1826 * - cluster type -- CLUSTER_KLINE etc. from conf.h
1827 * - pattern and args to send along
1828 * output - none
1829 * side effects - Take source_p send the pattern with args given
1830 * along to all servers that match capab and cluster type
1831 */
1832 void
1833 cluster_a_line(struct Client *source_p, const char *command, unsigned int capab,
1834 unsigned int cluster_type, const char *pattern, ...)
1835 {
1836 va_list args;
1837 char buffer[IRCD_BUFSIZE] = "";
1838 const dlink_node *node = NULL;
1839
1840 va_start(args, pattern);
1841 vsnprintf(buffer, sizeof(buffer), pattern, args);
1842 va_end(args);
1843
1844 DLINK_FOREACH(node, cluster_items.head)
1845 {
1846 const struct MaskItem *conf = node->data;
1847
1848 if (conf->flags & cluster_type)
1849 sendto_match_servs(source_p, conf->name, CAP_CLUSTER | capab,
1850 "%s %s %s", command, conf->name, buffer);
1851 }
1852 }
1853
1854 /*
1855 * split_nuh
1856 *
1857 * inputs - pointer to original mask (modified in place)
1858 * - pointer to pointer where nick should go
1859 * - pointer to pointer where user should go
1860 * - pointer to pointer where host should go
1861 * output - NONE
1862 * side effects - mask is modified in place
1863 * If nick pointer is NULL, ignore writing to it
1864 * this allows us to use this function elsewhere.
1865 *
1866 * mask nick user host
1867 * ---------------------- ------- ------- ------
1868 * Dianora!db@db.net Dianora db db.net
1869 * Dianora Dianora * *
1870 * db.net * * db.net
1871 * OR if nick pointer is NULL
1872 * Dianora - * Dianora
1873 * Dianora! Dianora * *
1874 * Dianora!@ Dianora * *
1875 * Dianora!db Dianora db *
1876 * Dianora!@db.net Dianora * db.net
1877 * db@db.net * db db.net
1878 * !@ * * *
1879 * @ * * *
1880 * ! * * *
1881 */
1882 void
1883 split_nuh(struct split_nuh_item *const iptr)
1884 {
1885 char *p = NULL, *q = NULL;
1886
1887 if (iptr->nickptr)
1888 strlcpy(iptr->nickptr, "*", iptr->nicksize);
1889
1890 if (iptr->userptr)
1891 strlcpy(iptr->userptr, "*", iptr->usersize);
1892
1893 if (iptr->hostptr)
1894 strlcpy(iptr->hostptr, "*", iptr->hostsize);
1895
1896 if ((p = strchr(iptr->nuhmask, '!')))
1897 {
1898 *p = '\0';
1899
1900 if (iptr->nickptr && *iptr->nuhmask)
1901 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1902
1903 if ((q = strchr(++p, '@')))
1904 {
1905 *q++ = '\0';
1906
1907 if (*p)
1908 strlcpy(iptr->userptr, p, iptr->usersize);
1909
1910 if (*q)
1911 strlcpy(iptr->hostptr, q, iptr->hostsize);
1912 }
1913 else
1914 {
1915 if (*p)
1916 strlcpy(iptr->userptr, p, iptr->usersize);
1917 }
1918 }
1919 else
1920 {
1921 /* No ! found so lets look for a user@host */
1922 if ((p = strchr(iptr->nuhmask, '@')))
1923 {
1924 /* if found a @ */
1925 *p++ = '\0';
1926
1927 if (*iptr->nuhmask)
1928 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1929
1930 if (*p)
1931 strlcpy(iptr->hostptr, p, iptr->hostsize);
1932 }
1933 else
1934 {
1935 /* No @ found */
1936 if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
1937 strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
1938 else
1939 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1940 }
1941 }
1942 }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision