ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/conf.c
Revision: 6550
Committed: Sat Sep 19 16:53:42 2015 UTC (8 years, 6 months ago) by michael
Content type: text/x-csrc
File size: 49694 byte(s)
Log Message:
- conf.c:conf_connect_allowed(): cleanup redundant test on 'conf'

File Contents

# Content
1 /*
2 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 *
4 * Copyright (c) 1997-2015 ircd-hybrid development team
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19 * USA
20 */
21
22 /*! \file conf.c
23 * \brief Configuration file functions.
24 * \version $Id$
25 */
26
27 #include "stdinc.h"
28 #include "list.h"
29 #include "ircd_defs.h"
30 #include "conf.h"
31 #include "conf_pseudo.h"
32 #include "server.h"
33 #include "resv.h"
34 #include "channel.h"
35 #include "client.h"
36 #include "event.h"
37 #include "irc_string.h"
38 #include "s_bsd.h"
39 #include "ircd.h"
40 #include "listener.h"
41 #include "hostmask.h"
42 #include "modules.h"
43 #include "numeric.h"
44 #include "fdlist.h"
45 #include "log.h"
46 #include "send.h"
47 #include "memory.h"
48 #include "res.h"
49 #include "userhost.h"
50 #include "user.h"
51 #include "channel_mode.h"
52 #include "parse.h"
53 #include "misc.h"
54 #include "conf_db.h"
55 #include "conf_class.h"
56 #include "motd.h"
57 #include "ipcache.h"
58 #include "isupport.h"
59
60
61 struct config_channel_entry ConfigChannel;
62 struct config_serverhide_entry ConfigServerHide;
63 struct config_general_entry ConfigGeneral;
64 struct config_log_entry ConfigLog = { .use_logging = 1 };
65 struct config_serverinfo_entry ConfigServerInfo;
66 struct config_admin_entry ConfigAdminInfo;
67 struct conf_parser_context conf_parser_ctx;
68
69 /* general conf items link list root, other than k lines etc. */
70 dlink_list service_items;
71 dlink_list server_items;
72 dlink_list cluster_items;
73 dlink_list oconf_items;
74 dlink_list uconf_items;
75 dlink_list xconf_items;
76 dlink_list nresv_items;
77 dlink_list cresv_items;
78
79 extern unsigned int lineno;
80 extern char linebuf[];
81 extern char conffilebuf[IRCD_BUFSIZE];
82 extern int yyparse(); /* defined in y.tab.c */
83
84
85 /* conf_dns_callback()
86 *
87 * inputs - pointer to struct MaskItem
88 * - pointer to DNSReply reply
89 * output - none
90 * side effects - called when resolver query finishes
91 * if the query resulted in a successful search, hp will contain
92 * a non-null pointer, otherwise hp will be null.
93 * if successful save hp in the conf item it was called with
94 */
95 static void
96 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name, size_t namelength)
97 {
98 struct MaskItem *const conf = vptr;
99
100 conf->dns_pending = 0;
101
102 if (addr)
103 memcpy(&conf->addr, addr, sizeof(conf->addr));
104 else
105 conf->dns_failed = 1;
106 }
107
108 /* conf_dns_lookup()
109 *
110 * do a nameserver lookup of the conf host
111 * if the conf entry is currently doing a ns lookup do nothing, otherwise
112 * allocate a dns_query and start ns lookup.
113 */
114 static void
115 conf_dns_lookup(struct MaskItem *conf)
116 {
117 if (conf->dns_pending)
118 return;
119
120 conf->dns_pending = 1;
121
122 if (conf->aftype == AF_INET)
123 gethost_byname_type(conf_dns_callback, conf, conf->host, T_A);
124 else
125 gethost_byname_type(conf_dns_callback, conf, conf->host, T_AAAA);
126 }
127
128 /* map_to_list()
129 *
130 * inputs - ConfType conf
131 * output - pointer to dlink_list to use
132 * side effects - none
133 */
134 static dlink_list *
135 map_to_list(enum maskitem_type type)
136 {
137 switch (type)
138 {
139 case CONF_XLINE:
140 return &xconf_items;
141 break;
142 case CONF_ULINE:
143 return &uconf_items;
144 break;
145 case CONF_NRESV:
146 return &nresv_items;
147 break;
148 case CONF_CRESV:
149 return &cresv_items;
150 break;
151 case CONF_OPER:
152 return &oconf_items;
153 break;
154 case CONF_SERVER:
155 return &server_items;
156 break;
157 case CONF_SERVICE:
158 return &service_items;
159 break;
160 case CONF_CLUSTER:
161 return &cluster_items;
162 break;
163 default:
164 return NULL;
165 }
166 }
167
168 struct MaskItem *
169 conf_make(enum maskitem_type type)
170 {
171 struct MaskItem *const conf = MyCalloc(sizeof(*conf));
172 dlink_list *list = NULL;
173
174 conf->type = type;
175 conf->active = 1;
176 conf->aftype = AF_INET;
177
178 if ((list = map_to_list(type)))
179 dlinkAdd(conf, &conf->node, list);
180 return conf;
181 }
182
183 void
184 conf_free(struct MaskItem *conf)
185 {
186 dlink_node *node = NULL, *node_next = NULL;
187 dlink_list *list = NULL;
188
189 if ((list = map_to_list(conf->type)))
190 dlinkFindDelete(list, conf);
191
192 MyFree(conf->name);
193
194 if (conf->dns_pending)
195 delete_resolver_queries(conf);
196 if (conf->passwd)
197 memset(conf->passwd, 0, strlen(conf->passwd));
198 if (conf->spasswd)
199 memset(conf->spasswd, 0, strlen(conf->spasswd));
200
201 conf->class = NULL;
202
203 MyFree(conf->passwd);
204 MyFree(conf->spasswd);
205 MyFree(conf->reason);
206 MyFree(conf->certfp);
207 MyFree(conf->whois);
208 MyFree(conf->user);
209 MyFree(conf->host);
210 #ifdef HAVE_LIBCRYPTO
211 MyFree(conf->cipher_list);
212
213 if (conf->rsa_public_key)
214 RSA_free(conf->rsa_public_key);
215 #endif
216 DLINK_FOREACH_SAFE(node, node_next, conf->hub_list.head)
217 {
218 MyFree(node->data);
219 dlinkDelete(node, &conf->hub_list);
220 free_dlink_node(node);
221 }
222
223 DLINK_FOREACH_SAFE(node, node_next, conf->leaf_list.head)
224 {
225 MyFree(node->data);
226 dlinkDelete(node, &conf->leaf_list);
227 free_dlink_node(node);
228 }
229
230 DLINK_FOREACH_SAFE(node, node_next, conf->exempt_list.head)
231 {
232 struct exempt *exptr = node->data;
233
234 dlinkDelete(node, &conf->exempt_list);
235 MyFree(exptr->name);
236 MyFree(exptr->user);
237 MyFree(exptr->host);
238 MyFree(exptr);
239 }
240
241 MyFree(conf);
242 }
243
244 /* attach_iline()
245 *
246 * inputs - client pointer
247 * - conf pointer
248 * output -
249 * side effects - do actual attach
250 */
251 static int
252 attach_iline(struct Client *client_p, struct MaskItem *conf)
253 {
254 const struct ClassItem *const class = conf->class;
255 struct ip_entry *ip_found;
256 int a_limit_reached = 0;
257 unsigned int local = 0, global = 0, ident = 0;
258
259 ip_found = ipcache_find_or_add_address(&client_p->connection->ip);
260 ip_found->count++;
261 AddFlag(client_p, FLAGS_IPHASH);
262
263 userhost_count(client_p->username, client_p->host,
264 &global, &local, &ident);
265
266 /* XXX blah. go down checking the various silly limits
267 * setting a_limit_reached if any limit is reached.
268 * - Dianora
269 */
270 if (class->max_total && class->ref_count >= class->max_total)
271 a_limit_reached = 1;
272 else if (class->max_perip && ip_found->count > class->max_perip)
273 a_limit_reached = 1;
274 else if (class->max_local && local >= class->max_local)
275 a_limit_reached = 1;
276 else if (class->max_global && global >= class->max_global)
277 a_limit_reached = 1;
278 else if (class->max_ident && ident >= class->max_ident &&
279 client_p->username[0] != '~')
280 a_limit_reached = 1;
281
282 if (a_limit_reached)
283 {
284 if (!IsConfExemptLimits(conf))
285 return TOO_MANY; /* Already at maximum allowed */
286
287 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
288 "but you have exceed_limit = yes;");
289 }
290
291 return attach_conf(client_p, conf);
292 }
293
294 /* verify_access()
295 *
296 * inputs - pointer to client to verify
297 * output - 0 if success -'ve if not
298 * side effect - find the first (best) I line to attach.
299 */
300 static int
301 verify_access(struct Client *client_p)
302 {
303 struct MaskItem *conf = NULL;
304
305 if (HasFlag(client_p, FLAGS_GOTID))
306 {
307 conf = find_address_conf(client_p->host, client_p->username,
308 &client_p->connection->ip,
309 client_p->connection->aftype,
310 client_p->connection->password);
311 }
312 else
313 {
314 char non_ident[USERLEN + 1] = "~";
315
316 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
317 conf = find_address_conf(client_p->host, non_ident,
318 &client_p->connection->ip,
319 client_p->connection->aftype,
320 client_p->connection->password);
321 }
322
323 if (!conf)
324 return NOT_AUTHORIZED;
325
326 assert(IsConfClient(conf) || IsConfKill(conf));
327
328 if (IsConfClient(conf))
329 {
330 if (IsConfRedir(conf))
331 {
332 sendto_one_numeric(client_p, &me, RPL_REDIR,
333 conf->name ? conf->name : "",
334 conf->port);
335 return NOT_AUTHORIZED;
336 }
337
338 if (IsConfDoSpoofIp(conf))
339 {
340 if (IsConfSpoofNotice(conf))
341 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE, "%s spoofing: %s as %s",
342 client_p->name, client_p->host, conf->name);
343
344 strlcpy(client_p->host, conf->name, sizeof(client_p->host));
345 }
346
347 return attach_iline(client_p, conf);
348 }
349
350 sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
351 return BANNED_CLIENT;
352 }
353
354 /* check_client()
355 *
356 * inputs - pointer to client
357 * output - 0 = Success
358 * NOT_AUTHORIZED (-1) = Access denied (no I line match)
359 * IRCD_SOCKET_ERROR (-2) = Bad socket.
360 * I_LINE_FULL (-3) = I-line is full
361 * TOO_MANY (-4) = Too many connections from hostname
362 * BANNED_CLIENT (-5) = K-lined
363 * side effects - Ordinary client access check.
364 * Look for conf lines which have the same
365 * status as the flags passed.
366 */
367 int
368 check_client(struct Client *source_p)
369 {
370 int i;
371
372 if ((i = verify_access(source_p)))
373 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
374 source_p->name, source_p->sockhost);
375
376 switch (i)
377 {
378 case TOO_MANY:
379 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
380 "Too many on IP for %s (%s).",
381 get_client_name(source_p, SHOW_IP),
382 source_p->sockhost);
383 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
384 get_client_name(source_p, SHOW_IP));
385 ++ServerStats.is_ref;
386 exit_client(source_p, "No more connections allowed on that IP");
387 break;
388
389 case I_LINE_FULL:
390 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
391 "auth {} block is full for %s (%s).",
392 get_client_name(source_p, SHOW_IP),
393 source_p->sockhost);
394 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
395 get_client_name(source_p, SHOW_IP));
396 ++ServerStats.is_ref;
397 exit_client(source_p, "No more connections allowed in your connection class");
398 break;
399
400 case NOT_AUTHORIZED:
401 /* jdc - lists server name & port connections are on */
402 /* a purely cosmetical change */
403 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
404 "Unauthorized client connection from %s [%s] on [%s/%u].",
405 get_client_name(source_p, SHOW_IP),
406 source_p->sockhost,
407 source_p->connection->listener->name,
408 source_p->connection->listener->port);
409 ilog(LOG_TYPE_IRCD, "Unauthorized client connection from %s on [%s/%u].",
410 get_client_name(source_p, SHOW_IP),
411 source_p->connection->listener->name,
412 source_p->connection->listener->port);
413
414 ++ServerStats.is_ref;
415 exit_client(source_p, "You are not authorized to use this server");
416 break;
417
418 case BANNED_CLIENT:
419 ++ServerStats.is_ref;
420 exit_client(source_p, "Banned");
421 break;
422
423 case 0:
424 default:
425 break;
426 }
427
428 return !(i < 0);
429 }
430
431 /* detach_conf()
432 *
433 * inputs - pointer to client to detach
434 * - type of conf to detach
435 * output - 0 for success, -1 for failure
436 * side effects - Disassociate configuration from the client.
437 * Also removes a class from the list if marked for deleting.
438 */
439 void
440 detach_conf(struct Client *client_p, enum maskitem_type type)
441 {
442 dlink_node *node = NULL, *node_next = NULL;
443
444 DLINK_FOREACH_SAFE(node, node_next, client_p->connection->confs.head)
445 {
446 struct MaskItem *conf = node->data;
447
448 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
449 assert(conf->ref_count > 0);
450 assert(conf->class->ref_count > 0);
451
452 if (!(conf->type & type))
453 continue;
454
455 dlinkDelete(node, &client_p->connection->confs);
456 free_dlink_node(node);
457
458 if (conf->type == CONF_CLIENT)
459 remove_from_cidr_check(&client_p->connection->ip, conf->class);
460
461 if (--conf->class->ref_count == 0 && conf->class->active == 0)
462 {
463 class_free(conf->class);
464 conf->class = NULL;
465 }
466
467 if (--conf->ref_count == 0 && conf->active == 0)
468 conf_free(conf);
469 }
470 }
471
472 /* attach_conf()
473 *
474 * inputs - client pointer
475 * - conf pointer
476 * output -
477 * side effects - Associate a specific configuration entry to a *local*
478 * client (this is the one which used in accepting the
479 * connection). Note, that this automatically changes the
480 * attachment if there was an old one...
481 */
482 int
483 attach_conf(struct Client *client_p, struct MaskItem *conf)
484 {
485 if (dlinkFind(&client_p->connection->confs, conf))
486 return 1;
487
488 if (conf->type == CONF_CLIENT)
489 if (cidr_limit_reached(IsConfExemptLimits(conf),
490 &client_p->connection->ip, conf->class))
491 return TOO_MANY; /* Already at maximum allowed */
492
493 conf->class->ref_count++;
494 conf->ref_count++;
495
496 dlinkAdd(conf, make_dlink_node(), &client_p->connection->confs);
497
498 return 0;
499 }
500
501 /* attach_connect_block()
502 *
503 * inputs - pointer to server to attach
504 * - name of server
505 * - hostname of server
506 * output - true (1) if both are found, otherwise return false (0)
507 * side effects - find connect block and attach them to connecting client
508 */
509 int
510 attach_connect_block(struct Client *client_p, const char *name,
511 const char *host)
512 {
513 dlink_node *node = NULL;
514
515 assert(host);
516
517 DLINK_FOREACH(node, server_items.head)
518 {
519 struct MaskItem *conf = node->data;
520
521 if (match(conf->name, name) || match(conf->host, host))
522 continue;
523
524 attach_conf(client_p, conf);
525 return 1;
526 }
527
528 return 0;
529 }
530
531 /* find_conf_name()
532 *
533 * inputs - pointer to conf link list to search
534 * - pointer to name to find
535 * - int mask of type of conf to find
536 * output - NULL or pointer to conf found
537 * side effects - find a conf entry which matches the name
538 * and has the given mask.
539 */
540 struct MaskItem *
541 find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
542 {
543 dlink_node *node = NULL;
544
545 DLINK_FOREACH(node, list->head)
546 {
547 struct MaskItem *conf = node->data;
548
549 if (conf->type == type)
550 {
551 if (conf->name && !irccmp(conf->name, name))
552 return conf;
553 }
554 }
555
556 return NULL;
557 }
558
559 /* find_matching_name_conf()
560 *
561 * inputs - type of link list to look in
562 * - pointer to name string to find
563 * - pointer to user
564 * - pointer to host
565 * - optional flags to match on as well
566 * output - NULL or pointer to found struct MaskItem
567 * side effects - looks for a match on name field
568 */
569 struct MaskItem *
570 find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
571 const char *host, unsigned int flags)
572 {
573 dlink_node *node = NULL;
574 dlink_list *list = map_to_list(type);
575 struct MaskItem *conf = NULL;
576
577 switch (type)
578 {
579 case CONF_SERVICE:
580 DLINK_FOREACH(node, list->head)
581 {
582 conf = node->data;
583
584 if (EmptyString(conf->name))
585 continue;
586 if (name && !irccmp(name, conf->name))
587 return conf;
588 }
589 break;
590
591 case CONF_XLINE:
592 case CONF_ULINE:
593 case CONF_NRESV:
594 case CONF_CRESV:
595 DLINK_FOREACH(node, list->head)
596 {
597 conf = node->data;
598
599 if (EmptyString(conf->name))
600 continue;
601 if (name && !match(conf->name, name))
602 {
603 if ((user == NULL && (host == NULL)))
604 return conf;
605 if ((conf->flags & flags) != flags)
606 continue;
607 if (EmptyString(conf->user) || EmptyString(conf->host))
608 return conf;
609 if (!match(conf->user, user) && !match(conf->host, host))
610 return conf;
611 }
612 }
613 break;
614
615 case CONF_SERVER:
616 DLINK_FOREACH(node, list->head)
617 {
618 conf = node->data;
619
620 if (name && !match(name, conf->name))
621 return conf;
622 if (host && !match(host, conf->host))
623 return conf;
624 }
625 break;
626
627 default:
628 break;
629 }
630 return NULL;
631 }
632
633 /* find_exact_name_conf()
634 *
635 * inputs - type of link list to look in
636 * - pointer to name string to find
637 * - pointer to user
638 * - pointer to host
639 * output - NULL or pointer to found struct MaskItem
640 * side effects - looks for an exact match on name field
641 */
642 struct MaskItem *
643 find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
644 const char *user, const char *host)
645 {
646 dlink_node *node = NULL;
647 dlink_list *list = map_to_list(type);
648 struct MaskItem *conf = NULL;
649
650 switch(type)
651 {
652 case CONF_XLINE:
653 case CONF_ULINE:
654 case CONF_NRESV:
655 case CONF_CRESV:
656
657 DLINK_FOREACH(node, list->head)
658 {
659 conf = node->data;
660
661 if (EmptyString(conf->name))
662 continue;
663
664 if (irccmp(conf->name, name) == 0)
665 {
666 if ((user == NULL && (host == NULL)))
667 return conf;
668 if (EmptyString(conf->user) || EmptyString(conf->host))
669 return conf;
670 if (!match(conf->user, user) && !match(conf->host, host))
671 return conf;
672 }
673 }
674 break;
675
676 case CONF_OPER:
677 DLINK_FOREACH(node, list->head)
678 {
679 conf = node->data;
680
681 if (EmptyString(conf->name))
682 continue;
683
684 if (!irccmp(conf->name, name))
685 {
686 if (!who)
687 return conf;
688 if (EmptyString(conf->user) || EmptyString(conf->host))
689 return NULL;
690 if (!match(conf->user, who->username))
691 {
692 switch (conf->htype)
693 {
694 case HM_HOST:
695 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
696 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
697 return conf;
698 break;
699 case HM_IPV4:
700 if (who->connection->aftype == AF_INET)
701 if (match_ipv4(&who->connection->ip, &conf->addr, conf->bits))
702 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
703 return conf;
704 break;
705 case HM_IPV6:
706 if (who->connection->aftype == AF_INET6)
707 if (match_ipv6(&who->connection->ip, &conf->addr, conf->bits))
708 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
709 return conf;
710 break;
711 default:
712 assert(0);
713 }
714 }
715 }
716 }
717
718 break;
719
720 case CONF_SERVER:
721 DLINK_FOREACH(node, list->head)
722 {
723 conf = node->data;
724
725 if (EmptyString(conf->name))
726 continue;
727
728 if (name == NULL)
729 {
730 if (EmptyString(conf->host))
731 continue;
732 if (irccmp(conf->host, host) == 0)
733 return conf;
734 }
735 else if (irccmp(conf->name, name) == 0)
736 return conf;
737 }
738
739 break;
740
741 default:
742 break;
743 }
744
745 return NULL;
746 }
747
748 /* set_default_conf()
749 *
750 * inputs - NONE
751 * output - NONE
752 * side effects - Set default values here.
753 * This is called **PRIOR** to parsing the
754 * configuration file. If you want to do some validation
755 * of values later, put them in validate_conf().
756 */
757 static void
758 set_default_conf(void)
759 {
760 /* verify init_class() ran, this should be an unnecessary check
761 * but its not much work.
762 */
763 assert(class_default == class_get_list()->tail->data);
764
765 #ifdef HAVE_LIBCRYPTO
766 #if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
767 {
768 EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
769
770 if (key)
771 {
772 SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
773 EC_KEY_free(key);
774 }
775 }
776
777 SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
778 #endif
779
780 SSL_CTX_set_cipher_list(ConfigServerInfo.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");
781 ConfigServerInfo.message_digest_algorithm = EVP_sha256();
782 ConfigServerInfo.rsa_private_key = NULL;
783 ConfigServerInfo.rsa_private_key_file = NULL;
784 #endif
785
786 /* ConfigServerInfo.name is not rehashable */
787 /* ConfigServerInfo.name = ConfigServerInfo.name; */
788 ConfigServerInfo.description = NULL;
789 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
790 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
791
792 memset(&ConfigServerInfo.ip, 0, sizeof(ConfigServerInfo.ip));
793 ConfigServerInfo.specific_ipv4_vhost = 0;
794 memset(&ConfigServerInfo.ip6, 0, sizeof(ConfigServerInfo.ip6));
795 ConfigServerInfo.specific_ipv6_vhost = 0;
796
797 ConfigServerInfo.default_max_clients = MAXCLIENTS_MAX;
798 ConfigServerInfo.max_nick_length = 9;
799 ConfigServerInfo.max_topic_length = 80;
800 ConfigServerInfo.hub = 0;
801
802 ConfigAdminInfo.name = NULL;
803 ConfigAdminInfo.email = NULL;
804 ConfigAdminInfo.description = NULL;
805
806 log_del_all();
807
808 ConfigLog.use_logging = 1;
809
810 ConfigChannel.disable_fake_channels = 0;
811 ConfigChannel.invite_client_count = 10;
812 ConfigChannel.invite_client_time = 300;
813 ConfigChannel.knock_client_count = 1;
814 ConfigChannel.knock_client_time = 300;
815 ConfigChannel.knock_delay_channel = 60;
816 ConfigChannel.max_channels = 25;
817 ConfigChannel.max_bans = 25;
818 ConfigChannel.default_join_flood_count = 18;
819 ConfigChannel.default_join_flood_time = 6;
820
821 ConfigServerHide.flatten_links = 0;
822 ConfigServerHide.links_delay = 300;
823 ConfigServerHide.hidden = 0;
824 ConfigServerHide.hide_servers = 0;
825 ConfigServerHide.hide_services = 0;
826 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
827 ConfigServerHide.hide_server_ips = 0;
828 ConfigServerHide.disable_remote_commands = 0;
829
830 ConfigGeneral.away_count = 2;
831 ConfigGeneral.away_time = 10;
832 ConfigGeneral.max_watch = WATCHSIZE_DEFAULT;
833 ConfigGeneral.cycle_on_host_change = 1;
834 ConfigGeneral.dline_min_cidr = 16;
835 ConfigGeneral.dline_min_cidr6 = 48;
836 ConfigGeneral.kline_min_cidr = 16;
837 ConfigGeneral.kline_min_cidr6 = 48;
838 ConfigGeneral.invisible_on_connect = 1;
839 ConfigGeneral.tkline_expire_notices = 1;
840 ConfigGeneral.ignore_bogus_ts = 0;
841 ConfigGeneral.disable_auth = 0;
842 ConfigGeneral.kill_chase_time_limit = 90;
843 ConfigGeneral.default_floodcount = 8;
844 ConfigGeneral.failed_oper_notice = 1;
845 ConfigGeneral.dots_in_ident = 0;
846 ConfigGeneral.min_nonwildcard = 4;
847 ConfigGeneral.min_nonwildcard_simple = 3;
848 ConfigGeneral.max_accept = 20;
849 ConfigGeneral.anti_nick_flood = 0;
850 ConfigGeneral.max_nick_time = 20;
851 ConfigGeneral.max_nick_changes = 5;
852 ConfigGeneral.anti_spam_exit_message_time = 0;
853 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
854 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
855 ConfigGeneral.warn_no_connect_block = 1;
856 ConfigGeneral.stats_e_disabled = 0;
857 ConfigGeneral.stats_i_oper_only = 1; /* 1 = masked */
858 ConfigGeneral.stats_k_oper_only = 1; /* 1 = masked */
859 ConfigGeneral.stats_o_oper_only = 1;
860 ConfigGeneral.stats_m_oper_only = 1;
861 ConfigGeneral.stats_P_oper_only = 0;
862 ConfigGeneral.stats_u_oper_only = 0;
863 ConfigGeneral.caller_id_wait = 60;
864 ConfigGeneral.opers_bypass_callerid = 0;
865 ConfigGeneral.pace_wait = 10;
866 ConfigGeneral.pace_wait_simple = 1;
867 ConfigGeneral.short_motd = 0;
868 ConfigGeneral.ping_cookie = 0;
869 ConfigGeneral.no_oper_flood = 0;
870 ConfigGeneral.max_targets = MAX_TARGETS_DEFAULT;
871 ConfigGeneral.oper_only_umodes = UMODE_DEBUG | UMODE_LOCOPS | UMODE_HIDDEN | UMODE_FARCONNECT |
872 UMODE_UNAUTH | UMODE_EXTERNAL | UMODE_BOTS | UMODE_NCHANGE |
873 UMODE_SPY | UMODE_FULL | UMODE_SKILL | UMODE_REJ | UMODE_CCONN;
874 ConfigGeneral.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
875 ConfigGeneral.throttle_count = 1;
876 ConfigGeneral.throttle_time = 1;
877 }
878
879 static void
880 validate_conf(void)
881 {
882 if (ConfigGeneral.ts_warn_delta < TS_WARN_DELTA_MIN)
883 ConfigGeneral.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
884
885 if (ConfigGeneral.ts_max_delta < TS_MAX_DELTA_MIN)
886 ConfigGeneral.ts_max_delta = TS_MAX_DELTA_DEFAULT;
887
888 if (EmptyString(ConfigServerInfo.network_name))
889 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
890
891 if (EmptyString(ConfigServerInfo.network_desc))
892 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
893
894 ConfigGeneral.max_watch = IRCD_MAX(ConfigGeneral.max_watch, WATCHSIZE_MIN);
895 }
896
897 /* read_conf()
898 *
899 * inputs - file descriptor pointing to config file to use
900 * output - None
901 * side effects - Read configuration file.
902 */
903 static void
904 read_conf(FILE *file)
905 {
906 lineno = 0;
907
908 set_default_conf(); /* Set default values prior to conf parsing */
909 conf_parser_ctx.pass = 1;
910 yyparse(); /* Pick up the classes first */
911
912 rewind(file);
913
914 conf_parser_ctx.pass = 2;
915 yyparse(); /* Load the values from the conf */
916 validate_conf(); /* Check to make sure some values are still okay. */
917 /* Some global values are also loaded here. */
918 class_delete_marked(); /* Delete unused classes that are marked for deletion */
919 }
920
921 /* conf_rehash()
922 *
923 * Actual REHASH service routine. Called with sig == 0 if it has been called
924 * as a result of an operator issuing this command, else assume it has been
925 * called as a result of the server receiving a HUP signal.
926 */
927 void
928 conf_rehash(int sig)
929 {
930 if (sig)
931 sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
932 "Got signal SIGHUP, reloading configuration file(s)");
933
934 restart_resolver();
935
936 /* don't close listeners until we know we can go ahead with the rehash */
937
938 read_conf_files(0);
939
940 load_conf_modules();
941 check_conf_klines();
942 }
943
944 /* lookup_confhost()
945 *
946 * start DNS lookups of all hostnames in the conf
947 * line and convert an IP addresses in a.b.c.d number for to IP#s.
948 */
949 void
950 lookup_confhost(struct MaskItem *conf)
951 {
952 struct addrinfo hints, *res;
953
954 /*
955 * Do name lookup now on hostnames given and store the
956 * ip numbers in conf structure.
957 */
958 memset(&hints, 0, sizeof(hints));
959
960 hints.ai_family = AF_UNSPEC;
961 hints.ai_socktype = SOCK_STREAM;
962
963 /* Get us ready for a bind() and don't bother doing dns lookup */
964 hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
965
966 if (getaddrinfo(conf->host, NULL, &hints, &res))
967 {
968 conf_dns_lookup(conf);
969 return;
970 }
971
972 assert(res);
973
974 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
975 conf->addr.ss_len = res->ai_addrlen;
976 conf->addr.ss.ss_family = res->ai_family;
977
978 freeaddrinfo(res);
979 }
980
981 /* conf_connect_allowed()
982 *
983 * inputs - pointer to inaddr
984 * - int type ipv4 or ipv6
985 * output - BANNED or accepted
986 * side effects - none
987 */
988 int
989 conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
990 {
991 struct ip_entry *ip_found = NULL;
992 const struct MaskItem *conf = find_dline_conf(addr, aftype);
993
994 if (conf)
995 {
996 /* DLINE exempt also gets you out of static limits/pacing... */
997 if (conf->type == CONF_EXEMPT)
998 return 0;
999 return BANNED_CLIENT;
1000 }
1001
1002 ip_found = ipcache_find_or_add_address(addr);
1003
1004 if ((CurrentTime - ip_found->last_attempt) < ConfigGeneral.throttle_time)
1005 {
1006 if (ip_found->connection_count >= ConfigGeneral.throttle_count)
1007 return TOO_FAST;
1008
1009 ++ip_found->connection_count;
1010 }
1011 else
1012 ip_found->connection_count = 1;
1013
1014 ip_found->last_attempt = CurrentTime;
1015 return 0;
1016 }
1017
1018 /* expire_tklines()
1019 *
1020 * inputs - tkline list pointer
1021 * output - NONE
1022 * side effects - expire tklines
1023 */
1024 static void
1025 expire_tklines(dlink_list *list)
1026 {
1027 dlink_node *node = NULL, *node_next = NULL;
1028
1029 DLINK_FOREACH_SAFE(node, node_next, list->head)
1030 {
1031 struct MaskItem *conf = node->data;
1032
1033 if (!conf->until || conf->until > CurrentTime)
1034 continue;
1035
1036 if (ConfigGeneral.tkline_expire_notices)
1037 sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE, "Temporary %s for [%s] expired",
1038 (conf->type == CONF_XLINE) ? "X-line" : "RESV", conf->name);
1039 conf_free(conf);
1040 }
1041 }
1042
1043 /* cleanup_tklines()
1044 *
1045 * inputs - NONE
1046 * output - NONE
1047 * side effects - call function to expire temporary k/d lines
1048 * This is an event started off in ircd.c
1049 */
1050 void
1051 cleanup_tklines(void *unused)
1052 {
1053 hostmask_expire_temporary();
1054 expire_tklines(&xconf_items);
1055 expire_tklines(&nresv_items);
1056 expire_tklines(&cresv_items);
1057 }
1058
1059 /* oper_privs_as_string()
1060 *
1061 * inputs - pointer to client_p
1062 * output - pointer to static string showing oper privs
1063 * side effects - return as string, the oper privs as derived from port
1064 */
1065 static const struct oper_privs
1066 {
1067 const unsigned int flag;
1068 const unsigned char c;
1069 } flag_list[] = {
1070 { OPER_FLAG_ADMIN, 'A' },
1071 { OPER_FLAG_REMOTEBAN, 'B' },
1072 { OPER_FLAG_DIE, 'D' },
1073 { OPER_FLAG_REHASH, 'H' },
1074 { OPER_FLAG_KLINE, 'K' },
1075 { OPER_FLAG_KILL, 'N' },
1076 { OPER_FLAG_KILL_REMOTE, 'O' },
1077 { OPER_FLAG_CONNECT, 'P' },
1078 { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1079 { OPER_FLAG_SQUIT, 'R' },
1080 { OPER_FLAG_SQUIT_REMOTE, 'S' },
1081 { OPER_FLAG_UNKLINE, 'U' },
1082 { OPER_FLAG_XLINE, 'X' },
1083 { 0, '\0' }
1084 };
1085
1086 const char *
1087 oper_privs_as_string(const unsigned int port)
1088 {
1089 static char privs_out[IRCD_BUFSIZE];
1090 char *privs_ptr = privs_out;
1091
1092 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1093 {
1094 if (port & opriv->flag)
1095 *privs_ptr++ = opriv->c;
1096 else
1097 *privs_ptr++ = ToLower(opriv->c);
1098 }
1099
1100 *privs_ptr = '\0';
1101
1102 return privs_out;
1103 }
1104
1105 /*
1106 * Input: A client to find the active operator {} name for.
1107 * Output: The nick!user@host{oper} of the oper.
1108 * "oper" is server name for remote opers
1109 * Side effects: None.
1110 */
1111 const char *
1112 get_oper_name(const struct Client *client_p)
1113 {
1114 static char buffer[IRCD_BUFSIZE];
1115
1116 if (IsServer(client_p))
1117 return client_p->name;
1118
1119 if (MyConnect(client_p))
1120 {
1121 const dlink_node *const node = client_p->connection->confs.head;
1122
1123 if (node)
1124 {
1125 const struct MaskItem *const conf = node->data;
1126
1127 if (conf->type == CONF_OPER)
1128 {
1129 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1130 client_p->username, client_p->host, conf->name);
1131 return buffer;
1132 }
1133 }
1134
1135 /*
1136 * Probably should assert here for now. If there is an oper out there
1137 * with no operator {} conf attached, it would be good for us to know...
1138 */
1139 assert(0); /* Oper without oper conf! */
1140 }
1141
1142 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1143 client_p->username, client_p->host, client_p->servptr->name);
1144 return buffer;
1145 }
1146
1147 /* clear_out_old_conf()
1148 *
1149 * inputs - none
1150 * output - none
1151 * side effects - Clear out the old configuration
1152 */
1153 static void
1154 clear_out_old_conf(void)
1155 {
1156 dlink_node *node = NULL, *node_next = NULL;
1157 dlink_list *free_items [] = {
1158 &server_items, &oconf_items,
1159 &uconf_items, &xconf_items,
1160 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1161 };
1162
1163 dlink_list ** iterator = free_items; /* C is dumb */
1164
1165 /* We only need to free anything allocated by yyparse() here.
1166 * Resetting structs, etc, is taken care of by set_default_conf().
1167 */
1168
1169 for (; *iterator; iterator++)
1170 {
1171 DLINK_FOREACH_SAFE(node, node_next, (*iterator)->head)
1172 {
1173 struct MaskItem *conf = node->data;
1174
1175 conf->active = 0;
1176
1177 if (!IsConfDatabase(conf))
1178 {
1179 dlinkDelete(&conf->node, *iterator);
1180
1181 if (!conf->ref_count)
1182 conf_free(conf);
1183 }
1184 }
1185 }
1186
1187 motd_clear();
1188
1189 /*
1190 * Don't delete the class table, rather mark all entries for deletion.
1191 * The table is cleaned up by class_delete_marked. - avalon
1192 */
1193 class_mark_for_deletion();
1194
1195 clear_out_address_conf();
1196
1197 /* Clean out module paths */
1198 mod_clear_paths();
1199
1200 pseudo_clear();
1201
1202 /* Clean out ConfigServerInfo */
1203 MyFree(ConfigServerInfo.description);
1204 ConfigServerInfo.description = NULL;
1205 MyFree(ConfigServerInfo.network_name);
1206 ConfigServerInfo.network_name = NULL;
1207 MyFree(ConfigServerInfo.network_desc);
1208 ConfigServerInfo.network_desc = NULL;
1209 #ifdef HAVE_LIBCRYPTO
1210 if (ConfigServerInfo.rsa_private_key)
1211 {
1212 RSA_free(ConfigServerInfo.rsa_private_key);
1213 ConfigServerInfo.rsa_private_key = NULL;
1214 }
1215
1216 MyFree(ConfigServerInfo.rsa_private_key_file);
1217 ConfigServerInfo.rsa_private_key_file = NULL;
1218 #endif
1219
1220 /* Clean out ConfigAdminInfo */
1221 MyFree(ConfigAdminInfo.name);
1222 ConfigAdminInfo.name = NULL;
1223 MyFree(ConfigAdminInfo.email);
1224 ConfigAdminInfo.email = NULL;
1225 MyFree(ConfigAdminInfo.description);
1226 ConfigAdminInfo.description = NULL;
1227
1228 /* Clean out listeners */
1229 listener_close_marked();
1230 }
1231
1232 /* read_conf_files()
1233 *
1234 * inputs - cold start YES or NO
1235 * output - none
1236 * side effects - read all conf files needed, ircd.conf kline.conf etc.
1237 */
1238 void
1239 read_conf_files(int cold)
1240 {
1241 const char *filename = NULL;
1242 char chanmodes[IRCD_BUFSIZE] = "";
1243 char chanlimit[IRCD_BUFSIZE] = "";
1244
1245 conf_parser_ctx.boot = cold;
1246 filename = ConfigGeneral.configfile;
1247
1248 /* We need to know the initial filename for the yyerror() to report
1249 FIXME: The full path is in conffilenamebuf first time since we
1250 don't know anything else
1251
1252 - Gozem 2002-07-21
1253 */
1254 strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1255
1256 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1257 {
1258 if (cold)
1259 {
1260 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1261 filename, strerror(errno));
1262 exit(-1);
1263 }
1264 else
1265 {
1266 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1267 "Unable to read configuration file '%s': %s",
1268 filename, strerror(errno));
1269 return;
1270 }
1271 }
1272
1273 if (!cold)
1274 clear_out_old_conf();
1275
1276 read_conf(conf_parser_ctx.conf_file);
1277 fclose(conf_parser_ctx.conf_file);
1278
1279 log_reopen_all();
1280
1281 isupport_add("NICKLEN", NULL, ConfigServerInfo.max_nick_length);
1282 isupport_add("NETWORK", ConfigServerInfo.network_name, -1);
1283
1284 snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1285 isupport_add("MAXLIST", chanmodes, -1);
1286 isupport_add("MAXTARGETS", NULL, ConfigGeneral.max_targets);
1287 isupport_add("CHANTYPES", "#", -1);
1288
1289 snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1290 ConfigChannel.max_channels);
1291 isupport_add("CHANLIMIT", chanlimit, -1);
1292 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstCMORS");
1293 isupport_add("CHANNELLEN", NULL, CHANNELLEN);
1294 isupport_add("TOPICLEN", NULL, ConfigServerInfo.max_topic_length);
1295 isupport_add("CHANMODES", chanmodes, -1);
1296
1297 /*
1298 * message_locale may have changed. rebuild isupport since it relies
1299 * on strlen(form_str(RPL_ISUPPORT))
1300 */
1301 isupport_rebuild();
1302 }
1303
1304 /* conf_add_class_to_conf()
1305 *
1306 * inputs - pointer to config item
1307 * output - NONE
1308 * side effects - Add a class pointer to a conf
1309 */
1310 void
1311 conf_add_class_to_conf(struct MaskItem *conf, const char *name)
1312 {
1313 if (EmptyString(name) || (conf->class = class_find(name, 1)) == NULL)
1314 {
1315 conf->class = class_default;
1316
1317 if (conf->type == CONF_CLIENT || conf->type == CONF_OPER)
1318 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1319 "Warning *** Defaulting to default class for %s@%s",
1320 conf->user, conf->host);
1321 else
1322 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1323 "Warning *** Defaulting to default class for %s",
1324 conf->name);
1325 }
1326 }
1327
1328 /* yyerror()
1329 *
1330 * inputs - message from parser
1331 * output - NONE
1332 * side effects - message to opers and log file entry is made
1333 */
1334 void
1335 yyerror(const char *msg)
1336 {
1337 char newlinebuf[IRCD_BUFSIZE];
1338
1339 if (conf_parser_ctx.pass != 1)
1340 return;
1341
1342 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1343 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1344 "\"%s\", line %u: %s: %s",
1345 conffilebuf, lineno + 1, msg, newlinebuf);
1346 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1347 conffilebuf, lineno + 1, msg, newlinebuf);
1348 }
1349
1350 void
1351 conf_error_report(const char *msg)
1352 {
1353 char newlinebuf[IRCD_BUFSIZE];
1354
1355 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1356 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1357 "\"%s\", line %u: %s: %s",
1358 conffilebuf, lineno + 1, msg, newlinebuf);
1359 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1360 conffilebuf, lineno + 1, msg, newlinebuf);
1361 }
1362
1363 /*
1364 * valid_tkline()
1365 *
1366 * inputs - pointer to ascii string to check
1367 * - whether the specified time is in seconds or minutes
1368 * output - -1 not enough parameters
1369 * - 0 if not an integer number, else the number
1370 * side effects - none
1371 * Originally written by Dianora (Diane, db@db.net)
1372 */
1373 time_t
1374 valid_tkline(const char *data, const int minutes)
1375 {
1376 const unsigned char *p = (const unsigned char *)data;
1377 unsigned char tmpch = '\0';
1378 time_t result = 0;
1379
1380 while ((tmpch = *p++))
1381 {
1382 if (!IsDigit(tmpch))
1383 return 0;
1384
1385 result *= 10;
1386 result += (tmpch & 0xF);
1387 }
1388
1389 /*
1390 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1391 * i.e. they specifically use 0, I am going to return 1 instead as a return
1392 * value of non-zero is used to flag it as a temporary kline
1393 */
1394 if (result == 0)
1395 result = 1;
1396
1397 /*
1398 * If the incoming time is in seconds convert it to minutes for the purpose
1399 * of this calculation
1400 */
1401 if (!minutes)
1402 result = result / 60;
1403
1404 if (result > MAX_TDKLINE_TIME)
1405 result = MAX_TDKLINE_TIME;
1406
1407 result = result * 60; /* Turn it into seconds */
1408
1409 return result;
1410 }
1411
1412 /* valid_wild_card_simple()
1413 *
1414 * inputs - data to check for sufficient non-wildcard characters
1415 * outputs - 1 if valid, else 0
1416 * side effects - none
1417 */
1418 int
1419 valid_wild_card_simple(const char *data)
1420 {
1421 const unsigned char *p = (const unsigned char *)data;
1422 unsigned char tmpch = '\0';
1423 unsigned int nonwild = 0, wild = 0;
1424
1425 while ((tmpch = *p++))
1426 {
1427 if (tmpch == '\\' && *p)
1428 {
1429 ++p;
1430 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1431 return 1;
1432 }
1433 else if (!IsMWildChar(tmpch))
1434 {
1435 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1436 return 1;
1437 }
1438 else
1439 ++wild;
1440 }
1441
1442 return !wild;
1443 }
1444
1445 /* valid_wild_card()
1446 *
1447 * input - pointer to client
1448 * - int flag, 0 for no warning oper 1 for warning oper
1449 * - count of following varargs to check
1450 * output - 0 if not valid, 1 if valid
1451 * side effects - NOTICE is given to source_p if warn is 1
1452 */
1453 int
1454 valid_wild_card(struct Client *source_p, int count, ...)
1455 {
1456 unsigned char tmpch = '\0';
1457 unsigned int nonwild = 0;
1458 va_list args;
1459
1460 /*
1461 * Now we must check the user and host to make sure there
1462 * are at least NONWILDCHARS non-wildcard characters in
1463 * them, otherwise assume they are attempting to kline
1464 * *@* or some variant of that. This code will also catch
1465 * people attempting to kline *@*.tld, as long as NONWILDCHARS
1466 * is greater than 3. In that case, there are only 3 non-wild
1467 * characters (tld), so if NONWILDCHARS is 4, the kline will
1468 * be disallowed.
1469 * -wnder
1470 */
1471
1472 va_start(args, count);
1473
1474 while (count--)
1475 {
1476 const unsigned char *p = va_arg(args, const unsigned char *);
1477 if (p == NULL)
1478 continue;
1479
1480 while ((tmpch = *p++))
1481 {
1482 if (!IsKWildChar(tmpch))
1483 {
1484 /*
1485 * If we find enough non-wild characters, we can
1486 * break - no point in searching further.
1487 */
1488 if (++nonwild >= ConfigGeneral.min_nonwildcard)
1489 {
1490 va_end(args);
1491 return 1;
1492 }
1493 }
1494 }
1495 }
1496
1497 if (IsClient(source_p))
1498 sendto_one_notice(source_p, &me,
1499 ":Please include at least %u non-wildcard characters with the mask",
1500 ConfigGeneral.min_nonwildcard);
1501 va_end(args);
1502 return 0;
1503 }
1504
1505 /* find_user_host()
1506 *
1507 * inputs - pointer to client placing kline
1508 * - pointer to user_host_or_nick
1509 * - pointer to user buffer
1510 * - pointer to host buffer
1511 * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1512 * side effects -
1513 */
1514 static int
1515 find_user_host(struct Client *source_p, char *user_host_or_nick,
1516 char *luser, char *lhost)
1517 {
1518 struct Client *target_p = NULL;
1519 char *hostp = NULL;
1520
1521 if (lhost == NULL)
1522 {
1523 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1524 return 1;
1525 }
1526
1527 if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1528 {
1529 /* Explicit user@host mask given */
1530 if (hostp) /* I'm a little user@host */
1531 {
1532 *(hostp++) = '\0'; /* short and squat */
1533
1534 if (*user_host_or_nick)
1535 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1536 else
1537 strcpy(luser, "*");
1538
1539 if (*hostp)
1540 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1541 else
1542 strcpy(lhost, "*");
1543 }
1544 else
1545 {
1546 luser[0] = '*'; /* no @ found, assume its *@somehost */
1547 luser[1] = '\0';
1548 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1549 }
1550
1551 return 1;
1552 }
1553 else
1554 {
1555 /* Try to find user@host mask from nick */
1556 /* Okay to use source_p as the first param, because source_p == client_p */
1557 if ((target_p =
1558 find_chasing(source_p, user_host_or_nick)) == NULL)
1559 return 0; /* find_chasing sends ERR_NOSUCHNICK */
1560
1561 if (HasFlag(target_p, FLAGS_EXEMPTKLINE))
1562 {
1563 if (IsClient(source_p))
1564 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1565 return 0;
1566 }
1567
1568 /*
1569 * Turn the "user" bit into "*user", blow away '~'
1570 * if found in original user name (non-idented)
1571 */
1572 strlcpy(luser, target_p->username, USERLEN*4 + 1);
1573
1574 if (target_p->username[0] == '~')
1575 luser[0] = '*';
1576
1577 if (!strcmp(target_p->sockhost, "0"))
1578 strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
1579 else
1580 strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
1581 return 1;
1582 }
1583
1584 return 0;
1585 }
1586
1587 /* XXX should this go into a separate file ? -Dianora */
1588 /* parse_aline
1589 *
1590 * input - pointer to cmd name being used
1591 * - pointer to client using cmd
1592 * - parc parameter count
1593 * - parv[] list of parameters to parse
1594 * - parse_flags bit map of things to test
1595 * - pointer to user or string to parse into
1596 * - pointer to host or NULL to parse into if non NULL
1597 * - pointer to optional tkline time or NULL
1598 * - pointer to target_server to parse into if non NULL
1599 * - pointer to reason to parse into
1600 *
1601 * output - 1 if valid, 0 if not valid
1602 * side effects - A generalised k/d/x etc. line parser,
1603 * "ALINE [time] user@host|string [ON] target :reason"
1604 * will parse returning a parsed user, host if
1605 * h_p pointer is non NULL, string otherwise.
1606 * if tkline_time pointer is non NULL a tk line will be set
1607 * to non zero if found.
1608 * if tkline_time pointer is NULL and tk line is found,
1609 * error is reported.
1610 * if target_server is NULL and an "ON" is found error
1611 * is reported.
1612 * if reason pointer is NULL ignore pointer,
1613 * this allows use of parse_a_line in unkline etc.
1614 *
1615 * - Dianora
1616 */
1617 int
1618 parse_aline(const char *cmd, struct Client *source_p,
1619 int parc, char **parv,
1620 int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1621 char **target_server, char **reason)
1622 {
1623 int found_tkline_time=0;
1624 static char default_reason[] = CONF_NOREASON;
1625 static char user[USERLEN*4+1];
1626 static char host[HOSTLEN*4+1];
1627
1628 parv++;
1629 parc--;
1630
1631 found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1632
1633 if (found_tkline_time)
1634 {
1635 parv++;
1636 parc--;
1637
1638 if (tkline_time)
1639 *tkline_time = found_tkline_time;
1640 else
1641 {
1642 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1643 return 0;
1644 }
1645 }
1646
1647 if (parc == 0)
1648 {
1649 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1650 return 0;
1651 }
1652
1653 if (h_p == NULL)
1654 *up_p = *parv;
1655 else
1656 {
1657 if (find_user_host(source_p, *parv, user, host) == 0)
1658 return 0;
1659
1660 *up_p = user;
1661 *h_p = host;
1662 }
1663
1664 parc--;
1665 parv++;
1666
1667 if (parc)
1668 {
1669 if (irccmp(*parv, "ON") == 0)
1670 {
1671 parc--;
1672 parv++;
1673
1674 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1675 {
1676 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1677 return 0;
1678 }
1679
1680 if (parc == 0 || EmptyString(*parv))
1681 {
1682 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1683 return 0;
1684 }
1685
1686 *target_server = *parv;
1687 parc--;
1688 parv++;
1689 }
1690 else
1691 {
1692 /* Make sure target_server *is* NULL if no ON server found
1693 * caller probably NULL'd it first, but no harm to do it again -db
1694 */
1695 if (target_server)
1696 *target_server = NULL;
1697 }
1698 }
1699
1700 if (h_p)
1701 {
1702 if (strchr(user, '!'))
1703 {
1704 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1705 return 0;
1706 }
1707
1708 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 2, *up_p, *h_p))
1709 return 0;
1710 }
1711 else
1712 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, *up_p))
1713 return 0;
1714
1715 if (reason)
1716 {
1717 if (parc && !EmptyString(*parv))
1718 *reason = *parv;
1719 else
1720 *reason = default_reason;
1721 }
1722
1723 return 1;
1724 }
1725
1726 /* match_conf_password()
1727 *
1728 * inputs - pointer to given password
1729 * - pointer to Conf
1730 * output - 1 or 0 if match
1731 * side effects - none
1732 */
1733 int
1734 match_conf_password(const char *password, const struct MaskItem *conf)
1735 {
1736 const char *encr = NULL;
1737
1738 if (EmptyString(password) || EmptyString(conf->passwd))
1739 return 0;
1740
1741 if (conf->flags & CONF_FLAGS_ENCRYPTED)
1742 encr = crypt(password, conf->passwd);
1743 else
1744 encr = password;
1745
1746 return encr && !strcmp(encr, conf->passwd);
1747 }
1748
1749 /*
1750 * cluster_a_line
1751 *
1752 * inputs - client sending the cluster
1753 * - command name "KLINE" "XLINE" etc.
1754 * - capab -- CAPAB_KLN etc. from server.h
1755 * - cluster type -- CLUSTER_KLINE etc. from conf.h
1756 * - pattern and args to send along
1757 * output - none
1758 * side effects - Take source_p send the pattern with args given
1759 * along to all servers that match capab and cluster type
1760 */
1761 void
1762 cluster_a_line(struct Client *source_p, const char *command, unsigned int capab,
1763 unsigned int cluster_type, const char *pattern, ...)
1764 {
1765 va_list args;
1766 char buffer[IRCD_BUFSIZE] = "";
1767 const dlink_node *node = NULL;
1768
1769 va_start(args, pattern);
1770 vsnprintf(buffer, sizeof(buffer), pattern, args);
1771 va_end(args);
1772
1773 DLINK_FOREACH(node, cluster_items.head)
1774 {
1775 const struct MaskItem *conf = node->data;
1776
1777 if (conf->flags & cluster_type)
1778 sendto_match_servs(source_p, conf->name, CAPAB_CLUSTER | capab,
1779 "%s %s %s", command, conf->name, buffer);
1780 }
1781 }
1782
1783 /*
1784 * split_nuh
1785 *
1786 * inputs - pointer to original mask (modified in place)
1787 * - pointer to pointer where nick should go
1788 * - pointer to pointer where user should go
1789 * - pointer to pointer where host should go
1790 * output - NONE
1791 * side effects - mask is modified in place
1792 * If nick pointer is NULL, ignore writing to it
1793 * this allows us to use this function elsewhere.
1794 *
1795 * mask nick user host
1796 * ---------------------- ------- ------- ------
1797 * Dianora!db@db.net Dianora db db.net
1798 * Dianora Dianora * *
1799 * db.net * * db.net
1800 * OR if nick pointer is NULL
1801 * Dianora - * Dianora
1802 * Dianora! Dianora * *
1803 * Dianora!@ Dianora * *
1804 * Dianora!db Dianora db *
1805 * Dianora!@db.net Dianora * db.net
1806 * db@db.net * db db.net
1807 * !@ * * *
1808 * @ * * *
1809 * ! * * *
1810 */
1811 void
1812 split_nuh(struct split_nuh_item *const iptr)
1813 {
1814 char *p = NULL, *q = NULL;
1815
1816 if (iptr->nickptr)
1817 strlcpy(iptr->nickptr, "*", iptr->nicksize);
1818
1819 if (iptr->userptr)
1820 strlcpy(iptr->userptr, "*", iptr->usersize);
1821
1822 if (iptr->hostptr)
1823 strlcpy(iptr->hostptr, "*", iptr->hostsize);
1824
1825 if ((p = strchr(iptr->nuhmask, '!')))
1826 {
1827 *p = '\0';
1828
1829 if (iptr->nickptr && *iptr->nuhmask)
1830 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1831
1832 if ((q = strchr(++p, '@')))
1833 {
1834 *q++ = '\0';
1835
1836 if (*p)
1837 strlcpy(iptr->userptr, p, iptr->usersize);
1838
1839 if (*q)
1840 strlcpy(iptr->hostptr, q, iptr->hostsize);
1841 }
1842 else
1843 {
1844 if (*p)
1845 strlcpy(iptr->userptr, p, iptr->usersize);
1846 }
1847 }
1848 else
1849 {
1850 /* No ! found so lets look for a user@host */
1851 if ((p = strchr(iptr->nuhmask, '@')))
1852 {
1853 /* if found a @ */
1854 *p++ = '\0';
1855
1856 if (*iptr->nuhmask)
1857 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1858
1859 if (*p)
1860 strlcpy(iptr->hostptr, p, iptr->hostsize);
1861 }
1862 else
1863 {
1864 /* No @ found */
1865 if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
1866 strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
1867 else
1868 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1869 }
1870 }
1871 }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision