ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/conf.c
Revision: 5775
Committed: Sat Apr 4 17:31:06 2015 UTC (8 years, 11 months ago) by michael
Content type: text/x-csrc
File size: 51714 byte(s)
Log Message:
- Changed some function to void if we don't need a return value
- Have some other functions return saner values

File Contents

# Content
1 /*
2 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 *
4 * Copyright (c) 1997-2015 ircd-hybrid development team
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19 * USA
20 */
21
22 /*! \file conf.c
23 * \brief Configuration file functions.
24 * \version $Id$
25 */
26
27 #include "stdinc.h"
28 #include "list.h"
29 #include "ircd_defs.h"
30 #include "conf.h"
31 #include "conf_pseudo.h"
32 #include "server.h"
33 #include "resv.h"
34 #include "channel.h"
35 #include "client.h"
36 #include "event.h"
37 #include "irc_string.h"
38 #include "s_bsd.h"
39 #include "ircd.h"
40 #include "listener.h"
41 #include "hostmask.h"
42 #include "modules.h"
43 #include "numeric.h"
44 #include "fdlist.h"
45 #include "log.h"
46 #include "send.h"
47 #include "memory.h"
48 #include "res.h"
49 #include "userhost.h"
50 #include "user.h"
51 #include "channel_mode.h"
52 #include "parse.h"
53 #include "misc.h"
54 #include "conf_db.h"
55 #include "conf_class.h"
56 #include "motd.h"
57 #include "ipcache.h"
58
59
60 struct config_channel_entry ConfigChannel;
61 struct config_serverhide_entry ConfigServerHide;
62 struct config_general_entry ConfigGeneral;
63 struct config_log_entry ConfigLog = { .use_logging = 1 };
64 struct config_serverinfo_entry ConfigServerInfo;
65 struct config_admin_entry ConfigAdminInfo;
66 struct conf_parser_context conf_parser_ctx;
67
68 /* general conf items link list root, other than k lines etc. */
69 dlink_list service_items;
70 dlink_list server_items;
71 dlink_list cluster_items;
72 dlink_list oconf_items;
73 dlink_list uconf_items;
74 dlink_list xconf_items;
75 dlink_list nresv_items;
76 dlink_list cresv_items;
77
78 extern unsigned int lineno;
79 extern char linebuf[];
80 extern char conffilebuf[IRCD_BUFSIZE];
81 extern int yyparse(); /* defined in y.tab.c */
82
83
84 /* conf_dns_callback()
85 *
86 * inputs - pointer to struct MaskItem
87 * - pointer to DNSReply reply
88 * output - none
89 * side effects - called when resolver query finishes
90 * if the query resulted in a successful search, hp will contain
91 * a non-null pointer, otherwise hp will be null.
92 * if successful save hp in the conf item it was called with
93 */
94 static void
95 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name, size_t namelength)
96 {
97 struct MaskItem *const conf = vptr;
98
99 conf->dns_pending = 0;
100
101 if (addr)
102 memcpy(&conf->addr, addr, sizeof(conf->addr));
103 else
104 conf->dns_failed = 1;
105 }
106
107 /* conf_dns_lookup()
108 *
109 * do a nameserver lookup of the conf host
110 * if the conf entry is currently doing a ns lookup do nothing, otherwise
111 * allocate a dns_query and start ns lookup.
112 */
113 static void
114 conf_dns_lookup(struct MaskItem *conf)
115 {
116 if (conf->dns_pending)
117 return;
118
119 conf->dns_pending = 1;
120
121 if (conf->aftype == AF_INET)
122 gethost_byname_type(conf_dns_callback, conf, conf->host, T_A);
123 else
124 gethost_byname_type(conf_dns_callback, conf, conf->host, T_AAAA);
125 }
126
127 /* map_to_list()
128 *
129 * inputs - ConfType conf
130 * output - pointer to dlink_list to use
131 * side effects - none
132 */
133 static dlink_list *
134 map_to_list(enum maskitem_type type)
135 {
136 switch (type)
137 {
138 case CONF_XLINE:
139 return &xconf_items;
140 break;
141 case CONF_ULINE:
142 return &uconf_items;
143 break;
144 case CONF_NRESV:
145 return &nresv_items;
146 break;
147 case CONF_CRESV:
148 return &cresv_items;
149 break;
150 case CONF_OPER:
151 return &oconf_items;
152 break;
153 case CONF_SERVER:
154 return &server_items;
155 break;
156 case CONF_SERVICE:
157 return &service_items;
158 break;
159 case CONF_CLUSTER:
160 return &cluster_items;
161 break;
162 default:
163 return NULL;
164 }
165 }
166
167 struct MaskItem *
168 conf_make(enum maskitem_type type)
169 {
170 struct MaskItem *const conf = MyCalloc(sizeof(*conf));
171 dlink_list *list = NULL;
172
173 conf->type = type;
174 conf->active = 1;
175 conf->aftype = AF_INET;
176
177 if ((list = map_to_list(type)))
178 dlinkAdd(conf, &conf->node, list);
179 return conf;
180 }
181
182 void
183 conf_free(struct MaskItem *conf)
184 {
185 dlink_node *node = NULL, *node_next = NULL;
186 dlink_list *list = NULL;
187
188 if ((list = map_to_list(conf->type)))
189 dlinkFindDelete(list, conf);
190
191 MyFree(conf->name);
192
193 if (conf->dns_pending)
194 delete_resolver_queries(conf);
195 if (conf->passwd)
196 memset(conf->passwd, 0, strlen(conf->passwd));
197 if (conf->spasswd)
198 memset(conf->spasswd, 0, strlen(conf->spasswd));
199
200 conf->class = NULL;
201
202 MyFree(conf->passwd);
203 MyFree(conf->spasswd);
204 MyFree(conf->reason);
205 MyFree(conf->certfp);
206 MyFree(conf->whois);
207 MyFree(conf->user);
208 MyFree(conf->host);
209 #ifdef HAVE_LIBCRYPTO
210 MyFree(conf->cipher_list);
211
212 if (conf->rsa_public_key)
213 RSA_free(conf->rsa_public_key);
214 #endif
215 DLINK_FOREACH_SAFE(node, node_next, conf->hub_list.head)
216 {
217 MyFree(node->data);
218 dlinkDelete(node, &conf->hub_list);
219 free_dlink_node(node);
220 }
221
222 DLINK_FOREACH_SAFE(node, node_next, conf->leaf_list.head)
223 {
224 MyFree(node->data);
225 dlinkDelete(node, &conf->leaf_list);
226 free_dlink_node(node);
227 }
228
229 DLINK_FOREACH_SAFE(node, node_next, conf->exempt_list.head)
230 {
231 struct exempt *exptr = node->data;
232
233 dlinkDelete(node, &conf->exempt_list);
234 MyFree(exptr->name);
235 MyFree(exptr->user);
236 MyFree(exptr->host);
237 MyFree(exptr);
238 }
239
240 MyFree(conf);
241 }
242
243 /* attach_iline()
244 *
245 * inputs - client pointer
246 * - conf pointer
247 * output -
248 * side effects - do actual attach
249 */
250 static int
251 attach_iline(struct Client *client_p, struct MaskItem *conf)
252 {
253 const struct ClassItem *const class = conf->class;
254 struct ip_entry *ip_found;
255 int a_limit_reached = 0;
256 unsigned int local = 0, global = 0, ident = 0;
257
258 ip_found = ipcache_find_or_add_address(&client_p->connection->ip);
259 ip_found->count++;
260 AddFlag(client_p, FLAGS_IPHASH);
261
262 count_user_host(client_p->username, client_p->host,
263 &global, &local, &ident);
264
265 /* XXX blah. go down checking the various silly limits
266 * setting a_limit_reached if any limit is reached.
267 * - Dianora
268 */
269 if (class->max_total && class->ref_count >= class->max_total)
270 a_limit_reached = 1;
271 else if (class->max_perip && ip_found->count > class->max_perip)
272 a_limit_reached = 1;
273 else if (class->max_local && local >= class->max_local)
274 a_limit_reached = 1;
275 else if (class->max_global && global >= class->max_global)
276 a_limit_reached = 1;
277 else if (class->max_ident && ident >= class->max_ident &&
278 client_p->username[0] != '~')
279 a_limit_reached = 1;
280
281 if (a_limit_reached)
282 {
283 if (!IsConfExemptLimits(conf))
284 return TOO_MANY; /* Already at maximum allowed */
285
286 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
287 "but you have exceed_limit = yes;");
288 }
289
290 return attach_conf(client_p, conf);
291 }
292
293 /* verify_access()
294 *
295 * inputs - pointer to client to verify
296 * output - 0 if success -'ve if not
297 * side effect - find the first (best) I line to attach.
298 */
299 static int
300 verify_access(struct Client *client_p)
301 {
302 struct MaskItem *conf = NULL;
303
304 if (IsGotId(client_p))
305 {
306 conf = find_address_conf(client_p->host, client_p->username,
307 &client_p->connection->ip,
308 client_p->connection->aftype,
309 client_p->connection->password);
310 }
311 else
312 {
313 char non_ident[USERLEN + 1] = "~";
314
315 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
316 conf = find_address_conf(client_p->host, non_ident,
317 &client_p->connection->ip,
318 client_p->connection->aftype,
319 client_p->connection->password);
320 }
321
322 if (conf)
323 {
324 if (IsConfClient(conf))
325 {
326 if (IsConfRedir(conf))
327 {
328 sendto_one_numeric(client_p, &me, RPL_REDIR,
329 conf->name ? conf->name : "",
330 conf->port);
331 return NOT_AUTHORIZED;
332 }
333
334 /* Thanks for spoof idea amm */
335 if (IsConfDoSpoofIp(conf))
336 {
337 if (IsConfSpoofNotice(conf))
338 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE, "%s spoofing: %s as %s",
339 client_p->name, client_p->host, conf->name);
340
341 strlcpy(client_p->host, conf->name, sizeof(client_p->host));
342 }
343
344 return attach_iline(client_p, conf);
345 }
346 else if (IsConfKill(conf) || (ConfigGeneral.glines && IsConfGline(conf)))
347 {
348 if (IsConfGline(conf))
349 sendto_one_notice(client_p, &me, ":*** G-lined");
350
351 sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
352 return BANNED_CLIENT;
353 }
354 }
355
356 return NOT_AUTHORIZED;
357 }
358
359 /* check_client()
360 *
361 * inputs - pointer to client
362 * output - 0 = Success
363 * NOT_AUTHORIZED (-1) = Access denied (no I line match)
364 * IRCD_SOCKET_ERROR (-2) = Bad socket.
365 * I_LINE_FULL (-3) = I-line is full
366 * TOO_MANY (-4) = Too many connections from hostname
367 * BANNED_CLIENT (-5) = K-lined
368 * side effects - Ordinary client access check.
369 * Look for conf lines which have the same
370 * status as the flags passed.
371 */
372 int
373 check_client(struct Client *source_p)
374 {
375 int i;
376
377 if ((i = verify_access(source_p)))
378 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
379 source_p->name, source_p->sockhost);
380
381 switch (i)
382 {
383 case TOO_MANY:
384 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
385 "Too many on IP for %s (%s).",
386 get_client_name(source_p, SHOW_IP),
387 source_p->sockhost);
388 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
389 get_client_name(source_p, SHOW_IP));
390 ++ServerStats.is_ref;
391 exit_client(source_p, "No more connections allowed on that IP");
392 break;
393
394 case I_LINE_FULL:
395 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
396 "auth {} block is full for %s (%s).",
397 get_client_name(source_p, SHOW_IP),
398 source_p->sockhost);
399 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
400 get_client_name(source_p, SHOW_IP));
401 ++ServerStats.is_ref;
402 exit_client(source_p, "No more connections allowed in your connection class");
403 break;
404
405 case NOT_AUTHORIZED:
406 /* jdc - lists server name & port connections are on */
407 /* a purely cosmetical change */
408 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
409 "Unauthorized client connection from %s [%s] on [%s/%u].",
410 get_client_name(source_p, SHOW_IP),
411 source_p->sockhost,
412 source_p->connection->listener->name,
413 source_p->connection->listener->port);
414 ilog(LOG_TYPE_IRCD, "Unauthorized client connection from %s on [%s/%u].",
415 get_client_name(source_p, SHOW_IP),
416 source_p->connection->listener->name,
417 source_p->connection->listener->port);
418
419 ++ServerStats.is_ref;
420 exit_client(source_p, "You are not authorized to use this server");
421 break;
422
423 case BANNED_CLIENT:
424 ++ServerStats.is_ref;
425 exit_client(source_p, "Banned");
426 break;
427
428 case 0:
429 default:
430 break;
431 }
432
433 return !(i < 0);
434 }
435
436 /* detach_conf()
437 *
438 * inputs - pointer to client to detach
439 * - type of conf to detach
440 * output - 0 for success, -1 for failure
441 * side effects - Disassociate configuration from the client.
442 * Also removes a class from the list if marked for deleting.
443 */
444 void
445 detach_conf(struct Client *client_p, enum maskitem_type type)
446 {
447 dlink_node *node = NULL, *node_next = NULL;
448
449 DLINK_FOREACH_SAFE(node, node_next, client_p->connection->confs.head)
450 {
451 struct MaskItem *conf = node->data;
452
453 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
454 assert(conf->ref_count > 0);
455 assert(conf->class->ref_count > 0);
456
457 if (!(conf->type & type))
458 continue;
459
460 dlinkDelete(node, &client_p->connection->confs);
461 free_dlink_node(node);
462
463 if (conf->type == CONF_CLIENT)
464 remove_from_cidr_check(&client_p->connection->ip, conf->class);
465
466 if (--conf->class->ref_count == 0 && conf->class->active == 0)
467 {
468 class_free(conf->class);
469 conf->class = NULL;
470 }
471
472 if (--conf->ref_count == 0 && conf->active == 0)
473 conf_free(conf);
474 }
475 }
476
477 /* attach_conf()
478 *
479 * inputs - client pointer
480 * - conf pointer
481 * output -
482 * side effects - Associate a specific configuration entry to a *local*
483 * client (this is the one which used in accepting the
484 * connection). Note, that this automatically changes the
485 * attachment if there was an old one...
486 */
487 int
488 attach_conf(struct Client *client_p, struct MaskItem *conf)
489 {
490 if (dlinkFind(&client_p->connection->confs, conf))
491 return 1;
492
493 if (conf->type == CONF_CLIENT)
494 if (cidr_limit_reached(IsConfExemptLimits(conf),
495 &client_p->connection->ip, conf->class))
496 return TOO_MANY; /* Already at maximum allowed */
497
498 conf->class->ref_count++;
499 conf->ref_count++;
500
501 dlinkAdd(conf, make_dlink_node(), &client_p->connection->confs);
502
503 return 0;
504 }
505
506 /* attach_connect_block()
507 *
508 * inputs - pointer to server to attach
509 * - name of server
510 * - hostname of server
511 * output - true (1) if both are found, otherwise return false (0)
512 * side effects - find connect block and attach them to connecting client
513 */
514 int
515 attach_connect_block(struct Client *client_p, const char *name,
516 const char *host)
517 {
518 dlink_node *node = NULL;
519
520 assert(host);
521
522 DLINK_FOREACH(node, server_items.head)
523 {
524 struct MaskItem *conf = node->data;
525
526 if (match(conf->name, name) || match(conf->host, host))
527 continue;
528
529 attach_conf(client_p, conf);
530 return 1;
531 }
532
533 return 0;
534 }
535
536 /* find_conf_name()
537 *
538 * inputs - pointer to conf link list to search
539 * - pointer to name to find
540 * - int mask of type of conf to find
541 * output - NULL or pointer to conf found
542 * side effects - find a conf entry which matches the name
543 * and has the given mask.
544 */
545 struct MaskItem *
546 find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
547 {
548 dlink_node *node = NULL;
549
550 DLINK_FOREACH(node, list->head)
551 {
552 struct MaskItem *conf = node->data;
553
554 if (conf->type == type)
555 {
556 if (conf->name && !irccmp(conf->name, name))
557 return conf;
558 }
559 }
560
561 return NULL;
562 }
563
564 /* find_matching_name_conf()
565 *
566 * inputs - type of link list to look in
567 * - pointer to name string to find
568 * - pointer to user
569 * - pointer to host
570 * - optional flags to match on as well
571 * output - NULL or pointer to found struct MaskItem
572 * side effects - looks for a match on name field
573 */
574 struct MaskItem *
575 find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
576 const char *host, unsigned int flags)
577 {
578 dlink_node *node = NULL;
579 dlink_list *list = map_to_list(type);
580 struct MaskItem *conf = NULL;
581
582 switch (type)
583 {
584 case CONF_SERVICE:
585 DLINK_FOREACH(node, list->head)
586 {
587 conf = node->data;
588
589 if (EmptyString(conf->name))
590 continue;
591 if (name && !irccmp(name, conf->name))
592 return conf;
593 }
594 break;
595
596 case CONF_XLINE:
597 case CONF_ULINE:
598 case CONF_NRESV:
599 case CONF_CRESV:
600 DLINK_FOREACH(node, list->head)
601 {
602 conf = node->data;
603
604 if (EmptyString(conf->name))
605 continue;
606 if (name && !match(conf->name, name))
607 {
608 if ((user == NULL && (host == NULL)))
609 return conf;
610 if ((conf->flags & flags) != flags)
611 continue;
612 if (EmptyString(conf->user) || EmptyString(conf->host))
613 return conf;
614 if (!match(conf->user, user) && !match(conf->host, host))
615 return conf;
616 }
617 }
618 break;
619
620 case CONF_SERVER:
621 DLINK_FOREACH(node, list->head)
622 {
623 conf = node->data;
624
625 if (name && !match(name, conf->name))
626 return conf;
627 if (host && !match(host, conf->host))
628 return conf;
629 }
630 break;
631
632 default:
633 break;
634 }
635 return NULL;
636 }
637
638 /* find_exact_name_conf()
639 *
640 * inputs - type of link list to look in
641 * - pointer to name string to find
642 * - pointer to user
643 * - pointer to host
644 * output - NULL or pointer to found struct MaskItem
645 * side effects - looks for an exact match on name field
646 */
647 struct MaskItem *
648 find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
649 const char *user, const char *host)
650 {
651 dlink_node *node = NULL;
652 dlink_list *list = map_to_list(type);
653 struct MaskItem *conf = NULL;
654
655 switch(type)
656 {
657 case CONF_XLINE:
658 case CONF_ULINE:
659 case CONF_NRESV:
660 case CONF_CRESV:
661
662 DLINK_FOREACH(node, list->head)
663 {
664 conf = node->data;
665
666 if (EmptyString(conf->name))
667 continue;
668
669 if (irccmp(conf->name, name) == 0)
670 {
671 if ((user == NULL && (host == NULL)))
672 return conf;
673 if (EmptyString(conf->user) || EmptyString(conf->host))
674 return conf;
675 if (!match(conf->user, user) && !match(conf->host, host))
676 return conf;
677 }
678 }
679 break;
680
681 case CONF_OPER:
682 DLINK_FOREACH(node, list->head)
683 {
684 conf = node->data;
685
686 if (EmptyString(conf->name))
687 continue;
688
689 if (!irccmp(conf->name, name))
690 {
691 if (!who)
692 return conf;
693 if (EmptyString(conf->user) || EmptyString(conf->host))
694 return NULL;
695 if (!match(conf->user, who->username))
696 {
697 switch (conf->htype)
698 {
699 case HM_HOST:
700 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
701 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
702 return conf;
703 break;
704 case HM_IPV4:
705 if (who->connection->aftype == AF_INET)
706 if (match_ipv4(&who->connection->ip, &conf->addr, conf->bits))
707 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
708 return conf;
709 break;
710 case HM_IPV6:
711 if (who->connection->aftype == AF_INET6)
712 if (match_ipv6(&who->connection->ip, &conf->addr, conf->bits))
713 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
714 return conf;
715 break;
716 default:
717 assert(0);
718 }
719 }
720 }
721 }
722
723 break;
724
725 case CONF_SERVER:
726 DLINK_FOREACH(node, list->head)
727 {
728 conf = node->data;
729
730 if (EmptyString(conf->name))
731 continue;
732
733 if (name == NULL)
734 {
735 if (EmptyString(conf->host))
736 continue;
737 if (irccmp(conf->host, host) == 0)
738 return conf;
739 }
740 else if (irccmp(conf->name, name) == 0)
741 return conf;
742 }
743
744 break;
745
746 default:
747 break;
748 }
749
750 return NULL;
751 }
752
753 /* set_default_conf()
754 *
755 * inputs - NONE
756 * output - NONE
757 * side effects - Set default values here.
758 * This is called **PRIOR** to parsing the
759 * configuration file. If you want to do some validation
760 * of values later, put them in validate_conf().
761 */
762 static void
763 set_default_conf(void)
764 {
765 /* verify init_class() ran, this should be an unnecessary check
766 * but its not much work.
767 */
768 assert(class_default == class_get_list()->tail->data);
769
770 #ifdef HAVE_LIBCRYPTO
771 #if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
772 {
773 EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
774
775 if (key)
776 {
777 SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
778 EC_KEY_free(key);
779 }
780 }
781
782 SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
783 #endif
784
785 SSL_CTX_set_cipher_list(ConfigServerInfo.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");
786 ConfigServerInfo.message_digest_algorithm = EVP_sha256();
787 ConfigServerInfo.rsa_private_key = NULL;
788 ConfigServerInfo.rsa_private_key_file = NULL;
789 #endif
790
791 /* ConfigServerInfo.name is not rehashable */
792 /* ConfigServerInfo.name = ConfigServerInfo.name; */
793 ConfigServerInfo.description = NULL;
794 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
795 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
796
797 memset(&ConfigServerInfo.ip, 0, sizeof(ConfigServerInfo.ip));
798 ConfigServerInfo.specific_ipv4_vhost = 0;
799 memset(&ConfigServerInfo.ip6, 0, sizeof(ConfigServerInfo.ip6));
800 ConfigServerInfo.specific_ipv6_vhost = 0;
801
802 ConfigServerInfo.default_max_clients = MAXCLIENTS_MAX;
803 ConfigServerInfo.max_nick_length = 9;
804 ConfigServerInfo.max_topic_length = 80;
805 ConfigServerInfo.hub = 0;
806
807 ConfigAdminInfo.name = NULL;
808 ConfigAdminInfo.email = NULL;
809 ConfigAdminInfo.description = NULL;
810
811 log_del_all();
812
813 ConfigLog.use_logging = 1;
814
815 ConfigChannel.disable_fake_channels = 0;
816 ConfigChannel.invite_client_count = 10;
817 ConfigChannel.invite_client_time = 300;
818 ConfigChannel.knock_client_count = 1;
819 ConfigChannel.knock_client_time = 300;
820 ConfigChannel.knock_delay_channel = 60;
821 ConfigChannel.max_channels = 25;
822 ConfigChannel.max_bans = 25;
823 ConfigChannel.default_join_flood_count = 18;
824 ConfigChannel.default_join_flood_time = 6;
825 ConfigChannel.default_split_user_count = 0;
826 ConfigChannel.default_split_server_count = 0;
827 ConfigChannel.no_join_on_split = 0;
828 ConfigChannel.no_create_on_split = 0;
829
830 ConfigServerHide.flatten_links = 0;
831 ConfigServerHide.links_delay = 300;
832 ConfigServerHide.hidden = 0;
833 ConfigServerHide.hide_servers = 0;
834 ConfigServerHide.hide_services = 0;
835 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
836 ConfigServerHide.hide_server_ips = 0;
837 ConfigServerHide.disable_remote_commands = 0;
838
839 ConfigGeneral.away_count = 2;
840 ConfigGeneral.away_time = 10;
841 ConfigGeneral.max_watch = WATCHSIZE_DEFAULT;
842 ConfigGeneral.cycle_on_host_change = 1;
843 ConfigGeneral.glines = 0;
844 ConfigGeneral.gline_time = 12 * 3600;
845 ConfigGeneral.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
846 ConfigGeneral.gline_min_cidr = 16;
847 ConfigGeneral.gline_min_cidr6 = 48;
848 ConfigGeneral.invisible_on_connect = 1;
849 ConfigGeneral.tkline_expire_notices = 1;
850 ConfigGeneral.ignore_bogus_ts = 0;
851 ConfigGeneral.disable_auth = 0;
852 ConfigGeneral.kill_chase_time_limit = 90;
853 ConfigGeneral.default_floodcount = 8;
854 ConfigGeneral.failed_oper_notice = 1;
855 ConfigGeneral.dots_in_ident = 0;
856 ConfigGeneral.min_nonwildcard = 4;
857 ConfigGeneral.min_nonwildcard_simple = 3;
858 ConfigGeneral.max_accept = 20;
859 ConfigGeneral.anti_nick_flood = 0;
860 ConfigGeneral.max_nick_time = 20;
861 ConfigGeneral.max_nick_changes = 5;
862 ConfigGeneral.anti_spam_exit_message_time = 0;
863 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
864 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
865 ConfigGeneral.warn_no_connect_block = 1;
866 ConfigGeneral.stats_e_disabled = 0;
867 ConfigGeneral.stats_i_oper_only = 1; /* 1 = masked */
868 ConfigGeneral.stats_k_oper_only = 1; /* 1 = masked */
869 ConfigGeneral.stats_o_oper_only = 1;
870 ConfigGeneral.stats_m_oper_only = 1;
871 ConfigGeneral.stats_P_oper_only = 0;
872 ConfigGeneral.stats_u_oper_only = 0;
873 ConfigGeneral.caller_id_wait = 60;
874 ConfigGeneral.opers_bypass_callerid = 0;
875 ConfigGeneral.pace_wait = 10;
876 ConfigGeneral.pace_wait_simple = 1;
877 ConfigGeneral.short_motd = 0;
878 ConfigGeneral.ping_cookie = 0;
879 ConfigGeneral.no_oper_flood = 0;
880 ConfigGeneral.oper_pass_resv = 1;
881 ConfigGeneral.max_targets = MAX_TARGETS_DEFAULT;
882 ConfigGeneral.oper_only_umodes = UMODE_DEBUG | UMODE_LOCOPS | UMODE_HIDDEN | UMODE_FARCONNECT |
883 UMODE_UNAUTH | UMODE_EXTERNAL | UMODE_BOTS | UMODE_NCHANGE |
884 UMODE_SPY | UMODE_FULL | UMODE_SKILL | UMODE_REJ | UMODE_CCONN;
885 ConfigGeneral.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
886 ConfigGeneral.throttle_count = 1;
887 ConfigGeneral.throttle_time = 1;
888 }
889
890 static void
891 validate_conf(void)
892 {
893 if (ConfigGeneral.ts_warn_delta < TS_WARN_DELTA_MIN)
894 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
895
896 if (ConfigGeneral.ts_max_delta < TS_MAX_DELTA_MIN)
897 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
898
899 if (EmptyString(ConfigServerInfo.network_name))
900 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
901
902 if (EmptyString(ConfigServerInfo.network_desc))
903 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
904
905 ConfigGeneral.max_watch = IRCD_MAX(ConfigGeneral.max_watch, WATCHSIZE_MIN);
906 }
907
908 /* read_conf()
909 *
910 * inputs - file descriptor pointing to config file to use
911 * output - None
912 * side effects - Read configuration file.
913 */
914 static void
915 read_conf(FILE *file)
916 {
917 lineno = 0;
918
919 set_default_conf(); /* Set default values prior to conf parsing */
920 conf_parser_ctx.pass = 1;
921 yyparse(); /* Pick up the classes first */
922
923 rewind(file);
924
925 conf_parser_ctx.pass = 2;
926 yyparse(); /* Load the values from the conf */
927 validate_conf(); /* Check to make sure some values are still okay. */
928 /* Some global values are also loaded here. */
929 class_delete_marked(); /* Delete unused classes that are marked for deletion */
930 }
931
932 /* conf_rehash()
933 *
934 * Actual REHASH service routine. Called with sig == 0 if it has been called
935 * as a result of an operator issuing this command, else assume it has been
936 * called as a result of the server receiving a HUP signal.
937 */
938 void
939 conf_rehash(int sig)
940 {
941 if (sig)
942 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
943 "Got signal SIGHUP, reloading configuration file(s)");
944
945 restart_resolver();
946
947 /* don't close listeners until we know we can go ahead with the rehash */
948
949 read_conf_files(0);
950
951 load_conf_modules();
952 check_conf_klines();
953 }
954
955 /* lookup_confhost()
956 *
957 * start DNS lookups of all hostnames in the conf
958 * line and convert an IP addresses in a.b.c.d number for to IP#s.
959 */
960 void
961 lookup_confhost(struct MaskItem *conf)
962 {
963 struct addrinfo hints, *res;
964
965 /*
966 * Do name lookup now on hostnames given and store the
967 * ip numbers in conf structure.
968 */
969 memset(&hints, 0, sizeof(hints));
970
971 hints.ai_family = AF_UNSPEC;
972 hints.ai_socktype = SOCK_STREAM;
973
974 /* Get us ready for a bind() and don't bother doing dns lookup */
975 hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
976
977 if (getaddrinfo(conf->host, NULL, &hints, &res))
978 {
979 conf_dns_lookup(conf);
980 return;
981 }
982
983 assert(res);
984
985 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
986 conf->addr.ss_len = res->ai_addrlen;
987 conf->addr.ss.ss_family = res->ai_family;
988
989 freeaddrinfo(res);
990 }
991
992 /* conf_connect_allowed()
993 *
994 * inputs - pointer to inaddr
995 * - int type ipv4 or ipv6
996 * output - BANNED or accepted
997 * side effects - none
998 */
999 int
1000 conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1001 {
1002 struct ip_entry *ip_found = NULL;
1003 struct MaskItem *const conf = find_dline_conf(addr, aftype);
1004
1005 /* DLINE exempt also gets you out of static limits/pacing... */
1006 if (conf && (conf->type == CONF_EXEMPT))
1007 return 0;
1008
1009 if (conf)
1010 return BANNED_CLIENT;
1011
1012 ip_found = ipcache_find_or_add_address(addr);
1013
1014 if ((CurrentTime - ip_found->last_attempt) < ConfigGeneral.throttle_time)
1015 {
1016 if (ip_found->connection_count >= ConfigGeneral.throttle_count)
1017 return TOO_FAST;
1018
1019 ++ip_found->connection_count;
1020 }
1021 else
1022 ip_found->connection_count = 1;
1023
1024 ip_found->last_attempt = CurrentTime;
1025 return 0;
1026 }
1027
1028 /* expire_tklines()
1029 *
1030 * inputs - tkline list pointer
1031 * output - NONE
1032 * side effects - expire tklines
1033 */
1034 static void
1035 expire_tklines(dlink_list *list)
1036 {
1037 dlink_node *node = NULL, *node_next = NULL;
1038
1039 DLINK_FOREACH_SAFE(node, node_next, list->head)
1040 {
1041 struct MaskItem *conf = node->data;
1042
1043 if (!conf->until || conf->until > CurrentTime)
1044 continue;
1045
1046 if (conf->type == CONF_XLINE)
1047 {
1048 if (ConfigGeneral.tkline_expire_notices)
1049 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1050 "Temporary X-line for [%s] expired", conf->name);
1051 conf_free(conf);
1052 }
1053 else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1054 {
1055 if (ConfigGeneral.tkline_expire_notices)
1056 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1057 "Temporary RESV for [%s] expired", conf->name);
1058 conf_free(conf);
1059 }
1060 }
1061 }
1062
1063 /* cleanup_tklines()
1064 *
1065 * inputs - NONE
1066 * output - NONE
1067 * side effects - call function to expire temporary k/d lines
1068 * This is an event started off in ircd.c
1069 */
1070 void
1071 cleanup_tklines(void *unused)
1072 {
1073 hostmask_expire_temporary();
1074 expire_tklines(&xconf_items);
1075 expire_tklines(&nresv_items);
1076 expire_tklines(&cresv_items);
1077 }
1078
1079 /* oper_privs_as_string()
1080 *
1081 * inputs - pointer to client_p
1082 * output - pointer to static string showing oper privs
1083 * side effects - return as string, the oper privs as derived from port
1084 */
1085 static const struct oper_privs
1086 {
1087 const unsigned int flag;
1088 const unsigned char c;
1089 } flag_list[] = {
1090 { OPER_FLAG_ADMIN, 'A' },
1091 { OPER_FLAG_REMOTEBAN, 'B' },
1092 { OPER_FLAG_DIE, 'D' },
1093 { OPER_FLAG_GLINE, 'G' },
1094 { OPER_FLAG_REHASH, 'H' },
1095 { OPER_FLAG_KLINE, 'K' },
1096 { OPER_FLAG_KILL, 'N' },
1097 { OPER_FLAG_KILL_REMOTE, 'O' },
1098 { OPER_FLAG_CONNECT, 'P' },
1099 { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1100 { OPER_FLAG_SQUIT, 'R' },
1101 { OPER_FLAG_SQUIT_REMOTE, 'S' },
1102 { OPER_FLAG_UNKLINE, 'U' },
1103 { OPER_FLAG_XLINE, 'X' },
1104 { 0, '\0' }
1105 };
1106
1107 const char *
1108 oper_privs_as_string(const unsigned int port)
1109 {
1110 static char privs_out[IRCD_BUFSIZE];
1111 char *privs_ptr = privs_out;
1112
1113 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1114 {
1115 if (port & opriv->flag)
1116 *privs_ptr++ = opriv->c;
1117 else
1118 *privs_ptr++ = ToLower(opriv->c);
1119 }
1120
1121 *privs_ptr = '\0';
1122
1123 return privs_out;
1124 }
1125
1126 /*
1127 * Input: A client to find the active operator {} name for.
1128 * Output: The nick!user@host{oper} of the oper.
1129 * "oper" is server name for remote opers
1130 * Side effects: None.
1131 */
1132 const char *
1133 get_oper_name(const struct Client *client_p)
1134 {
1135 static char buffer[IRCD_BUFSIZE];
1136
1137 if (IsServer(client_p))
1138 return client_p->name;
1139
1140 if (MyConnect(client_p))
1141 {
1142 const dlink_node *const node = client_p->connection->confs.head;
1143
1144 if (node)
1145 {
1146 const struct MaskItem *const conf = node->data;
1147
1148 if (conf->type == CONF_OPER)
1149 {
1150 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1151 client_p->username, client_p->host, conf->name);
1152 return buffer;
1153 }
1154 }
1155
1156 /*
1157 * Probably should assert here for now. If there is an oper out there
1158 * with no operator {} conf attached, it would be good for us to know...
1159 */
1160 assert(0); /* Oper without oper conf! */
1161 }
1162
1163 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1164 client_p->username, client_p->host, client_p->servptr->name);
1165 return buffer;
1166 }
1167
1168 /* clear_out_old_conf()
1169 *
1170 * inputs - none
1171 * output - none
1172 * side effects - Clear out the old configuration
1173 */
1174 static void
1175 clear_out_old_conf(void)
1176 {
1177 dlink_node *node = NULL, *node_next = NULL;
1178 dlink_list *free_items [] = {
1179 &server_items, &oconf_items,
1180 &uconf_items, &xconf_items,
1181 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1182 };
1183
1184 dlink_list ** iterator = free_items; /* C is dumb */
1185
1186 /* We only need to free anything allocated by yyparse() here.
1187 * Resetting structs, etc, is taken care of by set_default_conf().
1188 */
1189
1190 for (; *iterator; iterator++)
1191 {
1192 DLINK_FOREACH_SAFE(node, node_next, (*iterator)->head)
1193 {
1194 struct MaskItem *conf = node->data;
1195
1196 conf->active = 0;
1197 dlinkDelete(&conf->node, *iterator);
1198
1199 /* XXX This is less than pretty */
1200 if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1201 {
1202 if (!conf->ref_count)
1203 conf_free(conf);
1204 }
1205 else if (conf->type == CONF_XLINE)
1206 {
1207 if (!conf->until)
1208 conf_free(conf);
1209 }
1210 else
1211 conf_free(conf);
1212 }
1213 }
1214
1215 motd_clear();
1216
1217 /*
1218 * Don't delete the class table, rather mark all entries for deletion.
1219 * The table is cleaned up by class_delete_marked. - avalon
1220 */
1221 class_mark_for_deletion();
1222
1223 clear_out_address_conf();
1224
1225 /* Clean out module paths */
1226 mod_clear_paths();
1227
1228 pseudo_clear();
1229
1230 /* Clean out ConfigServerInfo */
1231 MyFree(ConfigServerInfo.description);
1232 ConfigServerInfo.description = NULL;
1233 MyFree(ConfigServerInfo.network_name);
1234 ConfigServerInfo.network_name = NULL;
1235 MyFree(ConfigServerInfo.network_desc);
1236 ConfigServerInfo.network_desc = NULL;
1237 #ifdef HAVE_LIBCRYPTO
1238 if (ConfigServerInfo.rsa_private_key)
1239 {
1240 RSA_free(ConfigServerInfo.rsa_private_key);
1241 ConfigServerInfo.rsa_private_key = NULL;
1242 }
1243
1244 MyFree(ConfigServerInfo.rsa_private_key_file);
1245 ConfigServerInfo.rsa_private_key_file = NULL;
1246 #endif
1247
1248 /* Clean out ConfigAdminInfo */
1249 MyFree(ConfigAdminInfo.name);
1250 ConfigAdminInfo.name = NULL;
1251 MyFree(ConfigAdminInfo.email);
1252 ConfigAdminInfo.email = NULL;
1253 MyFree(ConfigAdminInfo.description);
1254 ConfigAdminInfo.description = NULL;
1255
1256 /* Clean out listeners */
1257 close_listeners();
1258 }
1259
1260 /* read_conf_files()
1261 *
1262 * inputs - cold start YES or NO
1263 * output - none
1264 * side effects - read all conf files needed, ircd.conf kline.conf etc.
1265 */
1266 void
1267 read_conf_files(int cold)
1268 {
1269 const char *filename = NULL;
1270 char chanmodes[IRCD_BUFSIZE] = "";
1271 char chanlimit[IRCD_BUFSIZE] = "";
1272
1273 conf_parser_ctx.boot = cold;
1274 filename = ConfigGeneral.configfile;
1275
1276 /* We need to know the initial filename for the yyerror() to report
1277 FIXME: The full path is in conffilenamebuf first time since we
1278 don't know anything else
1279
1280 - Gozem 2002-07-21
1281 */
1282 strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1283
1284 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1285 {
1286 if (cold)
1287 {
1288 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1289 filename, strerror(errno));
1290 exit(-1);
1291 }
1292 else
1293 {
1294 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1295 "Unable to read configuration file '%s': %s",
1296 filename, strerror(errno));
1297 return;
1298 }
1299 }
1300
1301 if (!cold)
1302 clear_out_old_conf();
1303
1304 read_conf(conf_parser_ctx.conf_file);
1305 fclose(conf_parser_ctx.conf_file);
1306
1307 log_reopen_all();
1308
1309 add_isupport("NICKLEN", NULL, ConfigServerInfo.max_nick_length);
1310 add_isupport("NETWORK", ConfigServerInfo.network_name, -1);
1311
1312 snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1313 add_isupport("MAXLIST", chanmodes, -1);
1314 add_isupport("MAXTARGETS", NULL, ConfigGeneral.max_targets);
1315 add_isupport("CHANTYPES", "#", -1);
1316
1317 snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1318 ConfigChannel.max_channels);
1319 add_isupport("CHANLIMIT", chanlimit, -1);
1320 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstCMORS");
1321 add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1322 add_isupport("TOPICLEN", NULL, ConfigServerInfo.max_topic_length);
1323 add_isupport("CHANMODES", chanmodes, -1);
1324
1325 /*
1326 * message_locale may have changed. rebuild isupport since it relies
1327 * on strlen(form_str(RPL_ISUPPORT))
1328 */
1329 rebuild_isupport_message_line();
1330 }
1331
1332 /* conf_add_class_to_conf()
1333 *
1334 * inputs - pointer to config item
1335 * output - NONE
1336 * side effects - Add a class pointer to a conf
1337 */
1338 void
1339 conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1340 {
1341 if (class_name == NULL)
1342 {
1343 conf->class = class_default;
1344
1345 if (conf->type == CONF_CLIENT || conf->type == CONF_OPER)
1346 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1347 "Warning *** Defaulting to default class for %s@%s",
1348 conf->user, conf->host);
1349 else
1350 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1351 "Warning *** Defaulting to default class for %s",
1352 conf->name);
1353 }
1354 else
1355 conf->class = class_find(class_name, 1);
1356
1357 if (conf->class == NULL)
1358 {
1359 if (conf->type == CONF_CLIENT || conf->type == CONF_OPER)
1360 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1361 "Warning *** Defaulting to default class for %s@%s",
1362 conf->user, conf->host);
1363 else
1364 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1365 "Warning *** Defaulting to default class for %s",
1366 conf->name);
1367 conf->class = class_default;
1368 }
1369 }
1370
1371 /* yyerror()
1372 *
1373 * inputs - message from parser
1374 * output - NONE
1375 * side effects - message to opers and log file entry is made
1376 */
1377 void
1378 yyerror(const char *msg)
1379 {
1380 char newlinebuf[IRCD_BUFSIZE];
1381
1382 if (conf_parser_ctx.pass != 1)
1383 return;
1384
1385 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1386 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1387 "\"%s\", line %u: %s: %s",
1388 conffilebuf, lineno + 1, msg, newlinebuf);
1389 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1390 conffilebuf, lineno + 1, msg, newlinebuf);
1391 }
1392
1393 void
1394 conf_error_report(const char *msg)
1395 {
1396 char newlinebuf[IRCD_BUFSIZE];
1397
1398 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1399 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1400 "\"%s\", line %u: %s: %s",
1401 conffilebuf, lineno + 1, msg, newlinebuf);
1402 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1403 conffilebuf, lineno + 1, msg, newlinebuf);
1404 }
1405
1406 /*
1407 * valid_tkline()
1408 *
1409 * inputs - pointer to ascii string to check
1410 * - whether the specified time is in seconds or minutes
1411 * output - -1 not enough parameters
1412 * - 0 if not an integer number, else the number
1413 * side effects - none
1414 * Originally written by Dianora (Diane, db@db.net)
1415 */
1416 time_t
1417 valid_tkline(const char *data, const int minutes)
1418 {
1419 const unsigned char *p = (const unsigned char *)data;
1420 unsigned char tmpch = '\0';
1421 time_t result = 0;
1422
1423 while ((tmpch = *p++))
1424 {
1425 if (!IsDigit(tmpch))
1426 return 0;
1427
1428 result *= 10;
1429 result += (tmpch & 0xF);
1430 }
1431
1432 /*
1433 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1434 * i.e. they specifically use 0, I am going to return 1 instead as a return
1435 * value of non-zero is used to flag it as a temporary kline
1436 */
1437 if (result == 0)
1438 result = 1;
1439
1440 /*
1441 * If the incoming time is in seconds convert it to minutes for the purpose
1442 * of this calculation
1443 */
1444 if (!minutes)
1445 result = result / 60;
1446
1447 if (result > MAX_TDKLINE_TIME)
1448 result = MAX_TDKLINE_TIME;
1449
1450 result = result * 60; /* Turn it into seconds */
1451
1452 return result;
1453 }
1454
1455 /* valid_wild_card_simple()
1456 *
1457 * inputs - data to check for sufficient non-wildcard characters
1458 * outputs - 1 if valid, else 0
1459 * side effects - none
1460 */
1461 int
1462 valid_wild_card_simple(const char *data)
1463 {
1464 const unsigned char *p = (const unsigned char *)data;
1465 unsigned char tmpch = '\0';
1466 unsigned int nonwild = 0;
1467
1468 while ((tmpch = *p++))
1469 {
1470 if (tmpch == '\\' && *p)
1471 {
1472 ++p;
1473 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1474 return 1;
1475 }
1476 else if (!IsMWildChar(tmpch))
1477 {
1478 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1479 return 1;
1480 }
1481 }
1482
1483 return 0;
1484 }
1485
1486 /* valid_wild_card()
1487 *
1488 * input - pointer to client
1489 * - int flag, 0 for no warning oper 1 for warning oper
1490 * - count of following varargs to check
1491 * output - 0 if not valid, 1 if valid
1492 * side effects - NOTICE is given to source_p if warn is 1
1493 */
1494 int
1495 valid_wild_card(struct Client *source_p, int warn, int count, ...)
1496 {
1497 unsigned char tmpch = '\0';
1498 unsigned int nonwild = 0;
1499 va_list args;
1500
1501 /*
1502 * Now we must check the user and host to make sure there
1503 * are at least NONWILDCHARS non-wildcard characters in
1504 * them, otherwise assume they are attempting to kline
1505 * *@* or some variant of that. This code will also catch
1506 * people attempting to kline *@*.tld, as long as NONWILDCHARS
1507 * is greater than 3. In that case, there are only 3 non-wild
1508 * characters (tld), so if NONWILDCHARS is 4, the kline will
1509 * be disallowed.
1510 * -wnder
1511 */
1512
1513 va_start(args, count);
1514
1515 while (count--)
1516 {
1517 const unsigned char *p = va_arg(args, const unsigned char *);
1518 if (p == NULL)
1519 continue;
1520
1521 while ((tmpch = *p++))
1522 {
1523 if (!IsKWildChar(tmpch))
1524 {
1525 /*
1526 * If we find enough non-wild characters, we can
1527 * break - no point in searching further.
1528 */
1529 if (++nonwild >= ConfigGeneral.min_nonwildcard)
1530 {
1531 va_end(args);
1532 return 1;
1533 }
1534 }
1535 }
1536 }
1537
1538 if (warn)
1539 sendto_one_notice(source_p, &me,
1540 ":Please include at least %u non-wildcard characters with the mask",
1541 ConfigGeneral.min_nonwildcard);
1542 va_end(args);
1543 return 0;
1544 }
1545
1546 /* find_user_host()
1547 *
1548 * inputs - pointer to client placing kline
1549 * - pointer to user_host_or_nick
1550 * - pointer to user buffer
1551 * - pointer to host buffer
1552 * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1553 * side effects -
1554 */
1555 static int
1556 find_user_host(struct Client *source_p, char *user_host_or_nick,
1557 char *luser, char *lhost, unsigned int flags)
1558 {
1559 struct Client *target_p = NULL;
1560 char *hostp = NULL;
1561
1562 if (lhost == NULL)
1563 {
1564 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1565 return 1;
1566 }
1567
1568 if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1569 {
1570 /* Explicit user@host mask given */
1571 if (hostp) /* I'm a little user@host */
1572 {
1573 *(hostp++) = '\0'; /* short and squat */
1574
1575 if (*user_host_or_nick)
1576 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1577 else
1578 strcpy(luser, "*");
1579
1580 if (*hostp)
1581 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1582 else
1583 strcpy(lhost, "*");
1584 }
1585 else
1586 {
1587 luser[0] = '*'; /* no @ found, assume its *@somehost */
1588 luser[1] = '\0';
1589 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1590 }
1591
1592 return 1;
1593 }
1594 else
1595 {
1596 /* Try to find user@host mask from nick */
1597 /* Okay to use source_p as the first param, because source_p == client_p */
1598 if ((target_p =
1599 find_chasing(source_p, user_host_or_nick)) == NULL)
1600 return 0; /* find_chasing sends ERR_NOSUCHNICK */
1601
1602 if (IsExemptKline(target_p))
1603 {
1604 if (IsClient(source_p))
1605 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1606 return 0;
1607 }
1608
1609 /*
1610 * Turn the "user" bit into "*user", blow away '~'
1611 * if found in original user name (non-idented)
1612 */
1613 strlcpy(luser, target_p->username, USERLEN*4 + 1);
1614
1615 if (target_p->username[0] == '~')
1616 luser[0] = '*';
1617
1618 if (!strcmp(target_p->sockhost, "0"))
1619 strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
1620 else
1621 strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
1622 return 1;
1623 }
1624
1625 return 0;
1626 }
1627
1628 /* XXX should this go into a separate file ? -Dianora */
1629 /* parse_aline
1630 *
1631 * input - pointer to cmd name being used
1632 * - pointer to client using cmd
1633 * - parc parameter count
1634 * - parv[] list of parameters to parse
1635 * - parse_flags bit map of things to test
1636 * - pointer to user or string to parse into
1637 * - pointer to host or NULL to parse into if non NULL
1638 * - pointer to optional tkline time or NULL
1639 * - pointer to target_server to parse into if non NULL
1640 * - pointer to reason to parse into
1641 *
1642 * output - 1 if valid, 0 if not valid
1643 * side effects - A generalised k/d/x etc. line parser,
1644 * "ALINE [time] user@host|string [ON] target :reason"
1645 * will parse returning a parsed user, host if
1646 * h_p pointer is non NULL, string otherwise.
1647 * if tkline_time pointer is non NULL a tk line will be set
1648 * to non zero if found.
1649 * if tkline_time pointer is NULL and tk line is found,
1650 * error is reported.
1651 * if target_server is NULL and an "ON" is found error
1652 * is reported.
1653 * if reason pointer is NULL ignore pointer,
1654 * this allows use of parse_a_line in unkline etc.
1655 *
1656 * - Dianora
1657 */
1658 int
1659 parse_aline(const char *cmd, struct Client *source_p,
1660 int parc, char **parv,
1661 int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1662 char **target_server, char **reason)
1663 {
1664 int found_tkline_time=0;
1665 static char def_reason[] = CONF_NOREASON;
1666 static char user[USERLEN*4+1];
1667 static char host[HOSTLEN*4+1];
1668
1669 parv++;
1670 parc--;
1671
1672 found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1673
1674 if (found_tkline_time)
1675 {
1676 parv++;
1677 parc--;
1678
1679 if (tkline_time)
1680 *tkline_time = found_tkline_time;
1681 else
1682 {
1683 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1684 return 0;
1685 }
1686 }
1687
1688 if (parc == 0)
1689 {
1690 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1691 return 0;
1692 }
1693
1694 if (h_p == NULL)
1695 *up_p = *parv;
1696 else
1697 {
1698 if (find_user_host(source_p, *parv, user, host, parse_flags) == 0)
1699 return 0;
1700
1701 *up_p = user;
1702 *h_p = host;
1703 }
1704
1705 parc--;
1706 parv++;
1707
1708 if (parc)
1709 {
1710 if (irccmp(*parv, "ON") == 0)
1711 {
1712 parc--;
1713 parv++;
1714
1715 if (target_server == NULL)
1716 {
1717 sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1718 return 0;
1719 }
1720
1721 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1722 {
1723 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1724 return 0;
1725 }
1726
1727 if (parc == 0 || EmptyString(*parv))
1728 {
1729 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1730 return 0;
1731 }
1732
1733 *target_server = *parv;
1734 parc--;
1735 parv++;
1736 }
1737 else
1738 {
1739 /* Make sure target_server *is* NULL if no ON server found
1740 * caller probably NULL'd it first, but no harm to do it again -db
1741 */
1742 if (target_server)
1743 *target_server = NULL;
1744 }
1745 }
1746
1747 if (h_p)
1748 {
1749 if (strchr(user, '!'))
1750 {
1751 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1752 return 0;
1753 }
1754
1755 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 2, *up_p, *h_p))
1756 return 0;
1757 }
1758 else
1759 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 1, *up_p))
1760 return 0;
1761
1762 if (reason)
1763 {
1764 if (parc && !EmptyString(*parv))
1765 {
1766 *reason = *parv;
1767
1768 if (!valid_comment(source_p, *reason, 1))
1769 return 0;
1770 }
1771 else
1772 *reason = def_reason;
1773 }
1774
1775 return 1;
1776 }
1777
1778 /* valid_comment()
1779 *
1780 * inputs - pointer to client
1781 * - pointer to comment
1782 * output - 0 if no valid comment,
1783 * - 1 if valid
1784 * side effects - truncates reason where necessary
1785 */
1786 int
1787 valid_comment(struct Client *source_p, char *comment, int warn)
1788 {
1789 if (strlen(comment) > REASONLEN)
1790 comment[REASONLEN-1] = '\0';
1791
1792 return 1;
1793 }
1794
1795 /* match_conf_password()
1796 *
1797 * inputs - pointer to given password
1798 * - pointer to Conf
1799 * output - 1 or 0 if match
1800 * side effects - none
1801 */
1802 int
1803 match_conf_password(const char *password, const struct MaskItem *conf)
1804 {
1805 const char *encr = NULL;
1806
1807 if (EmptyString(password) || EmptyString(conf->passwd))
1808 return 0;
1809
1810 if (conf->flags & CONF_FLAGS_ENCRYPTED)
1811 encr = crypt(password, conf->passwd);
1812 else
1813 encr = password;
1814
1815 return encr && !strcmp(encr, conf->passwd);
1816 }
1817
1818 /*
1819 * cluster_a_line
1820 *
1821 * inputs - client sending the cluster
1822 * - command name "KLINE" "XLINE" etc.
1823 * - capab -- CAP_KLN etc. from server.h
1824 * - cluster type -- CLUSTER_KLINE etc. from conf.h
1825 * - pattern and args to send along
1826 * output - none
1827 * side effects - Take source_p send the pattern with args given
1828 * along to all servers that match capab and cluster type
1829 */
1830 void
1831 cluster_a_line(struct Client *source_p, const char *command, unsigned int capab,
1832 unsigned int cluster_type, const char *pattern, ...)
1833 {
1834 va_list args;
1835 char buffer[IRCD_BUFSIZE] = "";
1836 const dlink_node *node = NULL;
1837
1838 va_start(args, pattern);
1839 vsnprintf(buffer, sizeof(buffer), pattern, args);
1840 va_end(args);
1841
1842 DLINK_FOREACH(node, cluster_items.head)
1843 {
1844 const struct MaskItem *conf = node->data;
1845
1846 if (conf->flags & cluster_type)
1847 sendto_match_servs(source_p, conf->name, CAP_CLUSTER | capab,
1848 "%s %s %s", command, conf->name, buffer);
1849 }
1850 }
1851
1852 /*
1853 * split_nuh
1854 *
1855 * inputs - pointer to original mask (modified in place)
1856 * - pointer to pointer where nick should go
1857 * - pointer to pointer where user should go
1858 * - pointer to pointer where host should go
1859 * output - NONE
1860 * side effects - mask is modified in place
1861 * If nick pointer is NULL, ignore writing to it
1862 * this allows us to use this function elsewhere.
1863 *
1864 * mask nick user host
1865 * ---------------------- ------- ------- ------
1866 * Dianora!db@db.net Dianora db db.net
1867 * Dianora Dianora * *
1868 * db.net * * db.net
1869 * OR if nick pointer is NULL
1870 * Dianora - * Dianora
1871 * Dianora! Dianora * *
1872 * Dianora!@ Dianora * *
1873 * Dianora!db Dianora db *
1874 * Dianora!@db.net Dianora * db.net
1875 * db@db.net * db db.net
1876 * !@ * * *
1877 * @ * * *
1878 * ! * * *
1879 */
1880 void
1881 split_nuh(struct split_nuh_item *const iptr)
1882 {
1883 char *p = NULL, *q = NULL;
1884
1885 if (iptr->nickptr)
1886 strlcpy(iptr->nickptr, "*", iptr->nicksize);
1887
1888 if (iptr->userptr)
1889 strlcpy(iptr->userptr, "*", iptr->usersize);
1890
1891 if (iptr->hostptr)
1892 strlcpy(iptr->hostptr, "*", iptr->hostsize);
1893
1894 if ((p = strchr(iptr->nuhmask, '!')))
1895 {
1896 *p = '\0';
1897
1898 if (iptr->nickptr && *iptr->nuhmask)
1899 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1900
1901 if ((q = strchr(++p, '@')))
1902 {
1903 *q++ = '\0';
1904
1905 if (*p)
1906 strlcpy(iptr->userptr, p, iptr->usersize);
1907
1908 if (*q)
1909 strlcpy(iptr->hostptr, q, iptr->hostsize);
1910 }
1911 else
1912 {
1913 if (*p)
1914 strlcpy(iptr->userptr, p, iptr->usersize);
1915 }
1916 }
1917 else
1918 {
1919 /* No ! found so lets look for a user@host */
1920 if ((p = strchr(iptr->nuhmask, '@')))
1921 {
1922 /* if found a @ */
1923 *p++ = '\0';
1924
1925 if (*iptr->nuhmask)
1926 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1927
1928 if (*p)
1929 strlcpy(iptr->hostptr, p, iptr->hostsize);
1930 }
1931 else
1932 {
1933 /* No @ found */
1934 if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
1935 strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
1936 else
1937 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1938 }
1939 }
1940 }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision