ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/conf.c
Revision: 7007
Committed: Fri Jan 1 00:09:08 2016 UTC (8 years, 2 months ago) by michael
Content type: text/x-csrc
File size: 49624 byte(s)
Log Message:
- Update copyright years

File Contents

# Content
1 /*
2 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 *
4 * Copyright (c) 1997-2016 ircd-hybrid development team
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
19 * USA
20 */
21
22 /*! \file conf.c
23 * \brief Configuration file functions.
24 * \version $Id$
25 */
26
27 #include "stdinc.h"
28 #include "list.h"
29 #include "ircd_defs.h"
30 #include "conf.h"
31 #include "conf_pseudo.h"
32 #include "server.h"
33 #include "resv.h"
34 #include "channel.h"
35 #include "client.h"
36 #include "event.h"
37 #include "irc_string.h"
38 #include "s_bsd.h"
39 #include "ircd.h"
40 #include "listener.h"
41 #include "hostmask.h"
42 #include "modules.h"
43 #include "numeric.h"
44 #include "fdlist.h"
45 #include "log.h"
46 #include "send.h"
47 #include "memory.h"
48 #include "res.h"
49 #include "userhost.h"
50 #include "user.h"
51 #include "channel_mode.h"
52 #include "parse.h"
53 #include "misc.h"
54 #include "conf_db.h"
55 #include "conf_class.h"
56 #include "motd.h"
57 #include "ipcache.h"
58 #include "isupport.h"
59
60
61 struct config_channel_entry ConfigChannel;
62 struct config_serverhide_entry ConfigServerHide;
63 struct config_general_entry ConfigGeneral;
64 struct config_log_entry ConfigLog = { .use_logging = 1 };
65 struct config_serverinfo_entry ConfigServerInfo;
66 struct config_admin_entry ConfigAdminInfo;
67 struct conf_parser_context conf_parser_ctx;
68
69 /* general conf items link list root, other than k lines etc. */
70 dlink_list service_items;
71 dlink_list server_items;
72 dlink_list cluster_items;
73 dlink_list operator_items;
74 dlink_list shared_items;
75 dlink_list gecos_items;
76 dlink_list nresv_items;
77 dlink_list cresv_items;
78
79 extern unsigned int lineno;
80 extern char linebuf[];
81 extern char conffilebuf[IRCD_BUFSIZE];
82 extern int yyparse(); /* defined in y.tab.c */
83
84
85 /* conf_dns_callback()
86 *
87 * inputs - pointer to struct MaskItem
88 * - pointer to DNSReply reply
89 * output - none
90 * side effects - called when resolver query finishes
91 * if the query resulted in a successful search, hp will contain
92 * a non-null pointer, otherwise hp will be null.
93 * if successful save hp in the conf item it was called with
94 */
95 static void
96 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name, size_t namelength)
97 {
98 struct MaskItem *const conf = vptr;
99
100 conf->dns_pending = 0;
101
102 if (addr)
103 memcpy(&conf->addr, addr, sizeof(conf->addr));
104 else
105 conf->dns_failed = 1;
106 }
107
108 /* conf_dns_lookup()
109 *
110 * do a nameserver lookup of the conf host
111 * if the conf entry is currently doing a ns lookup do nothing, otherwise
112 * allocate a dns_query and start ns lookup.
113 */
114 static void
115 conf_dns_lookup(struct MaskItem *conf)
116 {
117 if (conf->dns_pending)
118 return;
119
120 conf->dns_pending = 1;
121
122 if (conf->aftype == AF_INET)
123 gethost_byname_type(conf_dns_callback, conf, conf->host, T_A);
124 else
125 gethost_byname_type(conf_dns_callback, conf, conf->host, T_AAAA);
126 }
127
128 /* map_to_list()
129 *
130 * inputs - ConfType conf
131 * output - pointer to dlink_list to use
132 * side effects - none
133 */
134 static dlink_list *
135 map_to_list(enum maskitem_type type)
136 {
137 switch (type)
138 {
139 case CONF_XLINE:
140 return &gecos_items;
141 break;
142 case CONF_SHARED:
143 return &shared_items;
144 break;
145 case CONF_NRESV:
146 return &nresv_items;
147 break;
148 case CONF_CRESV:
149 return &cresv_items;
150 break;
151 case CONF_OPER:
152 return &operator_items;
153 break;
154 case CONF_SERVER:
155 return &server_items;
156 break;
157 case CONF_SERVICE:
158 return &service_items;
159 break;
160 case CONF_CLUSTER:
161 return &cluster_items;
162 break;
163 default:
164 return NULL;
165 }
166 }
167
168 struct MaskItem *
169 conf_make(enum maskitem_type type)
170 {
171 struct MaskItem *const conf = MyCalloc(sizeof(*conf));
172 dlink_list *list = NULL;
173
174 conf->type = type;
175 conf->active = 1;
176 conf->aftype = AF_INET;
177
178 if ((list = map_to_list(type)))
179 dlinkAdd(conf, &conf->node, list);
180 return conf;
181 }
182
183 void
184 conf_free(struct MaskItem *conf)
185 {
186 dlink_node *node = NULL, *node_next = NULL;
187 dlink_list *list = NULL;
188
189 if ((list = map_to_list(conf->type)))
190 dlinkFindDelete(list, conf);
191
192 MyFree(conf->name);
193
194 if (conf->dns_pending)
195 delete_resolver_queries(conf);
196 if (conf->passwd)
197 memset(conf->passwd, 0, strlen(conf->passwd));
198 if (conf->spasswd)
199 memset(conf->spasswd, 0, strlen(conf->spasswd));
200
201 conf->class = NULL;
202
203 MyFree(conf->passwd);
204 MyFree(conf->spasswd);
205 MyFree(conf->reason);
206 MyFree(conf->certfp);
207 MyFree(conf->whois);
208 MyFree(conf->user);
209 MyFree(conf->host);
210 #ifdef HAVE_LIBCRYPTO
211 MyFree(conf->cipher_list);
212
213 if (conf->rsa_public_key)
214 RSA_free(conf->rsa_public_key);
215 #endif
216 DLINK_FOREACH_SAFE(node, node_next, conf->hub_list.head)
217 {
218 MyFree(node->data);
219 dlinkDelete(node, &conf->hub_list);
220 free_dlink_node(node);
221 }
222
223 DLINK_FOREACH_SAFE(node, node_next, conf->leaf_list.head)
224 {
225 MyFree(node->data);
226 dlinkDelete(node, &conf->leaf_list);
227 free_dlink_node(node);
228 }
229
230 DLINK_FOREACH_SAFE(node, node_next, conf->exempt_list.head)
231 {
232 struct exempt *exptr = node->data;
233
234 dlinkDelete(node, &conf->exempt_list);
235 MyFree(exptr->name);
236 MyFree(exptr->user);
237 MyFree(exptr->host);
238 MyFree(exptr);
239 }
240
241 MyFree(conf);
242 }
243
244 /* attach_iline()
245 *
246 * inputs - client pointer
247 * - conf pointer
248 * output -
249 * side effects - do actual attach
250 */
251 static int
252 attach_iline(struct Client *client_p, struct MaskItem *conf)
253 {
254 const struct ClassItem *const class = conf->class;
255 struct ip_entry *ip_found;
256 int a_limit_reached = 0;
257 unsigned int local = 0, global = 0, ident = 0;
258
259 ip_found = ipcache_find_or_add_address(&client_p->connection->ip);
260 ip_found->count++;
261 AddFlag(client_p, FLAGS_IPHASH);
262
263 userhost_count(client_p->username, client_p->host,
264 &global, &local, &ident);
265
266 /* XXX blah. go down checking the various silly limits
267 * setting a_limit_reached if any limit is reached.
268 * - Dianora
269 */
270 if (class->max_total && class->ref_count >= class->max_total)
271 a_limit_reached = 1;
272 else if (class->max_perip && ip_found->count > class->max_perip)
273 a_limit_reached = 1;
274 else if (class->max_local && local >= class->max_local)
275 a_limit_reached = 1;
276 else if (class->max_global && global >= class->max_global)
277 a_limit_reached = 1;
278 else if (class->max_ident && ident >= class->max_ident &&
279 client_p->username[0] != '~')
280 a_limit_reached = 1;
281
282 if (a_limit_reached)
283 {
284 if (!IsConfExemptLimits(conf))
285 return TOO_MANY; /* Already at maximum allowed */
286
287 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
288 "but you have exceed_limit = yes;");
289 }
290
291 return attach_conf(client_p, conf);
292 }
293
294 /* verify_access()
295 *
296 * inputs - pointer to client to verify
297 * output - 0 if success -'ve if not
298 * side effect - find the first (best) I line to attach.
299 */
300 static int
301 verify_access(struct Client *client_p)
302 {
303 struct MaskItem *conf = NULL;
304
305 if (HasFlag(client_p, FLAGS_GOTID))
306 {
307 conf = find_address_conf(client_p->host, client_p->username,
308 &client_p->connection->ip,
309 client_p->connection->aftype,
310 client_p->connection->password);
311 }
312 else
313 {
314 char non_ident[USERLEN + 1] = "~";
315
316 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
317 conf = find_address_conf(client_p->host, non_ident,
318 &client_p->connection->ip,
319 client_p->connection->aftype,
320 client_p->connection->password);
321 }
322
323 if (!conf)
324 return NOT_AUTHORIZED;
325
326 assert(IsConfClient(conf) || IsConfKill(conf));
327
328 if (IsConfClient(conf))
329 {
330 if (IsConfRedir(conf))
331 {
332 sendto_one_numeric(client_p, &me, RPL_REDIR,
333 conf->name ? conf->name : "",
334 conf->port);
335 return NOT_AUTHORIZED;
336 }
337
338 if (IsConfDoSpoofIp(conf))
339 {
340 if (IsConfSpoofNotice(conf))
341 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE, "%s spoofing: %s as %s",
342 client_p->name, client_p->host, conf->name);
343
344 strlcpy(client_p->host, conf->name, sizeof(client_p->host));
345 }
346
347 return attach_iline(client_p, conf);
348 }
349
350 sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
351 return BANNED_CLIENT;
352 }
353
354 /* check_client()
355 *
356 * inputs - pointer to client
357 * output - 0 = Success
358 * NOT_AUTHORIZED (-1) = Access denied (no I line match)
359 * IRCD_SOCKET_ERROR (-2) = Bad socket.
360 * I_LINE_FULL (-3) = I-line is full
361 * TOO_MANY (-4) = Too many connections from hostname
362 * BANNED_CLIENT (-5) = K-lined
363 * side effects - Ordinary client access check.
364 * Look for conf lines which have the same
365 * status as the flags passed.
366 */
367 int
368 check_client(struct Client *source_p)
369 {
370 int i;
371
372 if ((i = verify_access(source_p)))
373 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
374 source_p->name, source_p->sockhost);
375
376 switch (i)
377 {
378 case TOO_MANY:
379 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
380 "Too many on IP for %s (%s).",
381 get_client_name(source_p, SHOW_IP),
382 source_p->sockhost);
383 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
384 get_client_name(source_p, SHOW_IP));
385 ++ServerStats.is_ref;
386 exit_client(source_p, "No more connections allowed on that IP");
387 break;
388
389 case I_LINE_FULL:
390 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
391 "auth {} block is full for %s (%s).",
392 get_client_name(source_p, SHOW_IP),
393 source_p->sockhost);
394 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
395 get_client_name(source_p, SHOW_IP));
396 ++ServerStats.is_ref;
397 exit_client(source_p, "No more connections allowed in your connection class");
398 break;
399
400 case NOT_AUTHORIZED:
401 /* jdc - lists server name & port connections are on */
402 /* a purely cosmetical change */
403 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
404 "Unauthorized client connection from %s [%s] on [%s/%u].",
405 get_client_name(source_p, SHOW_IP),
406 source_p->sockhost,
407 source_p->connection->listener->name,
408 source_p->connection->listener->port);
409 ilog(LOG_TYPE_IRCD, "Unauthorized client connection from %s on [%s/%u].",
410 get_client_name(source_p, SHOW_IP),
411 source_p->connection->listener->name,
412 source_p->connection->listener->port);
413
414 ++ServerStats.is_ref;
415 exit_client(source_p, "You are not authorized to use this server");
416 break;
417
418 case BANNED_CLIENT:
419 ++ServerStats.is_ref;
420 exit_client(source_p, "Banned");
421 break;
422
423 case 0:
424 default:
425 break;
426 }
427
428 return !(i < 0);
429 }
430
431 /* detach_conf()
432 *
433 * inputs - pointer to client to detach
434 * - type of conf to detach
435 * output - 0 for success, -1 for failure
436 * side effects - Disassociate configuration from the client.
437 * Also removes a class from the list if marked for deleting.
438 */
439 void
440 detach_conf(struct Client *client_p, enum maskitem_type type)
441 {
442 dlink_node *node = NULL, *node_next = NULL;
443
444 DLINK_FOREACH_SAFE(node, node_next, client_p->connection->confs.head)
445 {
446 struct MaskItem *conf = node->data;
447
448 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
449 assert(conf->ref_count > 0);
450 assert(conf->class->ref_count > 0);
451
452 if (!(conf->type & type))
453 continue;
454
455 dlinkDelete(node, &client_p->connection->confs);
456 free_dlink_node(node);
457
458 if (conf->type == CONF_CLIENT)
459 remove_from_cidr_check(&client_p->connection->ip, conf->class);
460
461 if (--conf->class->ref_count == 0 && conf->class->active == 0)
462 {
463 class_free(conf->class);
464 conf->class = NULL;
465 }
466
467 if (--conf->ref_count == 0 && conf->active == 0)
468 conf_free(conf);
469 }
470 }
471
472 /* attach_conf()
473 *
474 * inputs - client pointer
475 * - conf pointer
476 * output -
477 * side effects - Associate a specific configuration entry to a *local*
478 * client (this is the one which used in accepting the
479 * connection). Note, that this automatically changes the
480 * attachment if there was an old one...
481 */
482 int
483 attach_conf(struct Client *client_p, struct MaskItem *conf)
484 {
485 if (dlinkFind(&client_p->connection->confs, conf))
486 return 1;
487
488 if (conf->type == CONF_CLIENT)
489 if (cidr_limit_reached(IsConfExemptLimits(conf),
490 &client_p->connection->ip, conf->class))
491 return TOO_MANY; /* Already at maximum allowed */
492
493 conf->class->ref_count++;
494 conf->ref_count++;
495
496 dlinkAdd(conf, make_dlink_node(), &client_p->connection->confs);
497
498 return 0;
499 }
500
501 /* attach_connect_block()
502 *
503 * inputs - pointer to server to attach
504 * - name of server
505 * - hostname of server
506 * output - true (1) if both are found, otherwise return false (0)
507 * side effects - find connect block and attach them to connecting client
508 */
509 int
510 attach_connect_block(struct Client *client_p, const char *name,
511 const char *host)
512 {
513 dlink_node *node = NULL;
514
515 assert(host);
516
517 DLINK_FOREACH(node, server_items.head)
518 {
519 struct MaskItem *conf = node->data;
520
521 if (match(conf->name, name) || match(conf->host, host))
522 continue;
523
524 attach_conf(client_p, conf);
525 return 1;
526 }
527
528 return 0;
529 }
530
531 /* find_conf_name()
532 *
533 * inputs - pointer to conf link list to search
534 * - pointer to name to find
535 * - int mask of type of conf to find
536 * output - NULL or pointer to conf found
537 * side effects - find a conf entry which matches the name
538 * and has the given mask.
539 */
540 struct MaskItem *
541 find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
542 {
543 dlink_node *node = NULL;
544
545 DLINK_FOREACH(node, list->head)
546 {
547 struct MaskItem *conf = node->data;
548
549 if (conf->type == type)
550 {
551 if (conf->name && !irccmp(conf->name, name))
552 return conf;
553 }
554 }
555
556 return NULL;
557 }
558
559 /* find_matching_name_conf()
560 *
561 * inputs - type of link list to look in
562 * - pointer to name string to find
563 * - pointer to user
564 * - pointer to host
565 * - optional flags to match on as well
566 * output - NULL or pointer to found struct MaskItem
567 * side effects - looks for a match on name field
568 */
569 struct MaskItem *
570 find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
571 const char *host, unsigned int flags)
572 {
573 dlink_node *node = NULL;
574 dlink_list *list = map_to_list(type);
575 struct MaskItem *conf = NULL;
576
577 switch (type)
578 {
579 case CONF_SERVICE:
580 DLINK_FOREACH(node, list->head)
581 {
582 conf = node->data;
583
584 if (EmptyString(conf->name))
585 continue;
586 if (name && !irccmp(name, conf->name))
587 return conf;
588 }
589 break;
590
591 case CONF_XLINE:
592 case CONF_SHARED:
593 case CONF_NRESV:
594 case CONF_CRESV:
595 DLINK_FOREACH(node, list->head)
596 {
597 conf = node->data;
598
599 if (EmptyString(conf->name))
600 continue;
601 if (name && !match(conf->name, name))
602 {
603 if ((user == NULL && (host == NULL)))
604 return conf;
605 if ((conf->flags & flags) != flags)
606 continue;
607 if (EmptyString(conf->user) || EmptyString(conf->host))
608 return conf;
609 if (!match(conf->user, user) && !match(conf->host, host))
610 return conf;
611 }
612 }
613 break;
614
615 case CONF_SERVER:
616 DLINK_FOREACH(node, list->head)
617 {
618 conf = node->data;
619
620 if (name && !match(name, conf->name))
621 return conf;
622 if (host && !match(host, conf->host))
623 return conf;
624 }
625 break;
626
627 default:
628 break;
629 }
630 return NULL;
631 }
632
633 /* find_exact_name_conf()
634 *
635 * inputs - type of link list to look in
636 * - pointer to name string to find
637 * - pointer to user
638 * - pointer to host
639 * output - NULL or pointer to found struct MaskItem
640 * side effects - looks for an exact match on name field
641 */
642 struct MaskItem *
643 find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
644 const char *user, const char *host)
645 {
646 dlink_node *node = NULL;
647 dlink_list *list = map_to_list(type);
648 struct MaskItem *conf = NULL;
649
650 switch(type)
651 {
652 case CONF_XLINE:
653 case CONF_SHARED:
654 case CONF_NRESV:
655 case CONF_CRESV:
656
657 DLINK_FOREACH(node, list->head)
658 {
659 conf = node->data;
660
661 if (EmptyString(conf->name))
662 continue;
663
664 if (irccmp(conf->name, name) == 0)
665 {
666 if ((user == NULL && (host == NULL)))
667 return conf;
668 if (EmptyString(conf->user) || EmptyString(conf->host))
669 return conf;
670 if (!match(conf->user, user) && !match(conf->host, host))
671 return conf;
672 }
673 }
674 break;
675
676 case CONF_OPER:
677 DLINK_FOREACH(node, list->head)
678 {
679 conf = node->data;
680
681 if (EmptyString(conf->name))
682 continue;
683
684 if (!irccmp(conf->name, name))
685 {
686 if (!who)
687 return conf;
688 if (EmptyString(conf->user) || EmptyString(conf->host))
689 return NULL;
690 if (!match(conf->user, who->username))
691 {
692 switch (conf->htype)
693 {
694 case HM_HOST:
695 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
696 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
697 return conf;
698 break;
699 case HM_IPV4:
700 if (who->connection->aftype == AF_INET)
701 if (match_ipv4(&who->connection->ip, &conf->addr, conf->bits))
702 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
703 return conf;
704 break;
705 case HM_IPV6:
706 if (who->connection->aftype == AF_INET6)
707 if (match_ipv6(&who->connection->ip, &conf->addr, conf->bits))
708 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
709 return conf;
710 break;
711 default:
712 assert(0);
713 }
714 }
715 }
716 }
717
718 break;
719
720 case CONF_SERVER:
721 DLINK_FOREACH(node, list->head)
722 {
723 conf = node->data;
724
725 if (EmptyString(conf->name))
726 continue;
727
728 if (name == NULL)
729 {
730 if (EmptyString(conf->host))
731 continue;
732 if (irccmp(conf->host, host) == 0)
733 return conf;
734 }
735 else if (irccmp(conf->name, name) == 0)
736 return conf;
737 }
738
739 break;
740
741 default:
742 break;
743 }
744
745 return NULL;
746 }
747
748 /* set_default_conf()
749 *
750 * inputs - NONE
751 * output - NONE
752 * side effects - Set default values here.
753 * This is called **PRIOR** to parsing the
754 * configuration file. If you want to do some validation
755 * of values later, put them in validate_conf().
756 */
757 static void
758 set_default_conf(void)
759 {
760 /* verify init_class() ran, this should be an unnecessary check
761 * but its not much work.
762 */
763 assert(class_default == class_get_list()->tail->data);
764
765 #ifdef HAVE_LIBCRYPTO
766 #if OPENSSL_VERSION_NUMBER >= 0x009080FFL && !defined(OPENSSL_NO_ECDH)
767 {
768 EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
769
770 if (key)
771 {
772 SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key);
773 EC_KEY_free(key);
774 }
775 }
776
777 SSL_CTX_set_options(ConfigServerInfo.server_ctx, SSL_OP_SINGLE_ECDH_USE);
778 #endif
779
780 SSL_CTX_set_cipher_list(ConfigServerInfo.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL");
781 ConfigServerInfo.message_digest_algorithm = EVP_sha256();
782 #endif
783
784 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
785 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
786
787 memset(&ConfigServerInfo.ip, 0, sizeof(ConfigServerInfo.ip));
788 ConfigServerInfo.specific_ipv4_vhost = 0;
789 memset(&ConfigServerInfo.ip6, 0, sizeof(ConfigServerInfo.ip6));
790 ConfigServerInfo.specific_ipv6_vhost = 0;
791
792 ConfigServerInfo.default_max_clients = MAXCLIENTS_MAX;
793 ConfigServerInfo.max_nick_length = 9;
794 ConfigServerInfo.max_topic_length = 80;
795 ConfigServerInfo.hub = 0;
796
797 log_del_all();
798
799 ConfigLog.use_logging = 1;
800
801 ConfigChannel.disable_fake_channels = 0;
802 ConfigChannel.invite_client_count = 10;
803 ConfigChannel.invite_client_time = 300;
804 ConfigChannel.invite_delay_channel = 5;
805 ConfigChannel.knock_client_count = 1;
806 ConfigChannel.knock_client_time = 300;
807 ConfigChannel.knock_delay_channel = 60;
808 ConfigChannel.max_channels = 25;
809 ConfigChannel.max_bans = 25;
810 ConfigChannel.default_join_flood_count = 18;
811 ConfigChannel.default_join_flood_time = 6;
812
813 ConfigServerHide.flatten_links = 0;
814 ConfigServerHide.flatten_links_delay = 300;
815 ConfigServerHide.hidden = 0;
816 ConfigServerHide.hide_servers = 0;
817 ConfigServerHide.hide_services = 0;
818 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
819 ConfigServerHide.hide_server_ips = 0;
820 ConfigServerHide.disable_remote_commands = 0;
821
822 ConfigGeneral.away_count = 2;
823 ConfigGeneral.away_time = 10;
824 ConfigGeneral.max_watch = 50;
825 ConfigGeneral.cycle_on_host_change = 1;
826 ConfigGeneral.dline_min_cidr = 16;
827 ConfigGeneral.dline_min_cidr6 = 48;
828 ConfigGeneral.kline_min_cidr = 16;
829 ConfigGeneral.kline_min_cidr6 = 48;
830 ConfigGeneral.invisible_on_connect = 1;
831 ConfigGeneral.tkline_expire_notices = 1;
832 ConfigGeneral.ignore_bogus_ts = 0;
833 ConfigGeneral.disable_auth = 0;
834 ConfigGeneral.kill_chase_time_limit = 90;
835 ConfigGeneral.default_floodcount = 8;
836 ConfigGeneral.failed_oper_notice = 1;
837 ConfigGeneral.dots_in_ident = 0;
838 ConfigGeneral.min_nonwildcard = 4;
839 ConfigGeneral.min_nonwildcard_simple = 3;
840 ConfigGeneral.max_accept = 50;
841 ConfigGeneral.anti_nick_flood = 0;
842 ConfigGeneral.max_nick_time = 20;
843 ConfigGeneral.max_nick_changes = 5;
844 ConfigGeneral.anti_spam_exit_message_time = 0;
845 ConfigGeneral.ts_warn_delta = 30;
846 ConfigGeneral.ts_max_delta = 600;
847 ConfigGeneral.warn_no_connect_block = 1;
848 ConfigGeneral.stats_e_disabled = 0;
849 ConfigGeneral.stats_i_oper_only = 1; /* 1 = masked */
850 ConfigGeneral.stats_k_oper_only = 1; /* 1 = masked */
851 ConfigGeneral.stats_o_oper_only = 1;
852 ConfigGeneral.stats_m_oper_only = 1;
853 ConfigGeneral.stats_P_oper_only = 0;
854 ConfigGeneral.stats_u_oper_only = 0;
855 ConfigGeneral.caller_id_wait = 60;
856 ConfigGeneral.opers_bypass_callerid = 0;
857 ConfigGeneral.pace_wait = 10;
858 ConfigGeneral.pace_wait_simple = 1;
859 ConfigGeneral.short_motd = 0;
860 ConfigGeneral.ping_cookie = 0;
861 ConfigGeneral.no_oper_flood = 0;
862 ConfigGeneral.max_targets = MAX_TARGETS_DEFAULT;
863 ConfigGeneral.oper_only_umodes = UMODE_DEBUG | UMODE_LOCOPS | UMODE_HIDDEN | UMODE_FARCONNECT |
864 UMODE_UNAUTH | UMODE_EXTERNAL | UMODE_BOTS | UMODE_NCHANGE |
865 UMODE_SPY | UMODE_FULL | UMODE_SKILL | UMODE_REJ | UMODE_CCONN;
866 ConfigGeneral.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
867 ConfigGeneral.throttle_count = 1;
868 ConfigGeneral.throttle_time = 1;
869 }
870
871 static void
872 validate_conf(void)
873 {
874 if (EmptyString(ConfigServerInfo.network_name))
875 ConfigServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
876
877 if (EmptyString(ConfigServerInfo.network_desc))
878 ConfigServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
879 }
880
881 /* read_conf()
882 *
883 * inputs - file descriptor pointing to config file to use
884 * output - None
885 * side effects - Read configuration file.
886 */
887 static void
888 read_conf(FILE *file)
889 {
890 lineno = 0;
891
892 set_default_conf(); /* Set default values prior to conf parsing */
893 conf_parser_ctx.pass = 1;
894 yyparse(); /* Pick up the classes first */
895
896 rewind(file);
897
898 conf_parser_ctx.pass = 2;
899 yyparse(); /* Load the values from the conf */
900 validate_conf(); /* Check to make sure some values are still okay. */
901 /* Some global values are also loaded here. */
902 class_delete_marked(); /* Delete unused classes that are marked for deletion */
903 }
904
905 /* conf_rehash()
906 *
907 * Actual REHASH service routine. Called with sig == 0 if it has been called
908 * as a result of an operator issuing this command, else assume it has been
909 * called as a result of the server receiving a HUP signal.
910 */
911 void
912 conf_rehash(int sig)
913 {
914 if (sig)
915 sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE,
916 "Got signal SIGHUP, reloading configuration file(s)");
917
918 restart_resolver();
919
920 /* don't close listeners until we know we can go ahead with the rehash */
921
922 read_conf_files(0);
923
924 load_conf_modules();
925 check_conf_klines();
926 }
927
928 /* lookup_confhost()
929 *
930 * start DNS lookups of all hostnames in the conf
931 * line and convert an IP addresses in a.b.c.d number for to IP#s.
932 */
933 void
934 lookup_confhost(struct MaskItem *conf)
935 {
936 struct addrinfo hints, *res;
937
938 /*
939 * Do name lookup now on hostnames given and store the
940 * ip numbers in conf structure.
941 */
942 memset(&hints, 0, sizeof(hints));
943
944 hints.ai_family = AF_UNSPEC;
945 hints.ai_socktype = SOCK_STREAM;
946
947 /* Get us ready for a bind() and don't bother doing dns lookup */
948 hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
949
950 if (getaddrinfo(conf->host, NULL, &hints, &res))
951 {
952 conf_dns_lookup(conf);
953 return;
954 }
955
956 assert(res);
957
958 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
959 conf->addr.ss_len = res->ai_addrlen;
960 conf->addr.ss.ss_family = res->ai_family;
961
962 freeaddrinfo(res);
963 }
964
965 /* conf_connect_allowed()
966 *
967 * inputs - pointer to inaddr
968 * - int type ipv4 or ipv6
969 * output - BANNED or accepted
970 * side effects - none
971 */
972 int
973 conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
974 {
975 struct ip_entry *ip_found = NULL;
976 const struct MaskItem *conf = find_dline_conf(addr, aftype);
977
978 if (conf)
979 {
980 /* DLINE exempt also gets you out of static limits/pacing... */
981 if (conf->type == CONF_EXEMPT)
982 return 0;
983 return BANNED_CLIENT;
984 }
985
986 ip_found = ipcache_find_or_add_address(addr);
987
988 if ((CurrentTime - ip_found->last_attempt) < ConfigGeneral.throttle_time)
989 {
990 if (ip_found->connection_count >= ConfigGeneral.throttle_count)
991 return TOO_FAST;
992
993 ++ip_found->connection_count;
994 }
995 else
996 ip_found->connection_count = 1;
997
998 ip_found->last_attempt = CurrentTime;
999 return 0;
1000 }
1001
1002 /* expire_tklines()
1003 *
1004 * inputs - tkline list pointer
1005 * output - NONE
1006 * side effects - expire tklines
1007 */
1008 static void
1009 expire_tklines(dlink_list *list)
1010 {
1011 dlink_node *node = NULL, *node_next = NULL;
1012
1013 DLINK_FOREACH_SAFE(node, node_next, list->head)
1014 {
1015 struct MaskItem *conf = node->data;
1016
1017 if (!conf->until || conf->until > CurrentTime)
1018 continue;
1019
1020 if (ConfigGeneral.tkline_expire_notices)
1021 sendto_realops_flags(UMODE_SERVNOTICE, L_ALL, SEND_NOTICE, "Temporary %s for [%s] expired",
1022 (conf->type == CONF_XLINE) ? "X-line" : "RESV", conf->name);
1023 conf_free(conf);
1024 }
1025 }
1026
1027 /* cleanup_tklines()
1028 *
1029 * inputs - NONE
1030 * output - NONE
1031 * side effects - call function to expire temporary k/d lines
1032 * This is an event started off in ircd.c
1033 */
1034 void
1035 cleanup_tklines(void *unused)
1036 {
1037 hostmask_expire_temporary();
1038 expire_tklines(&gecos_items);
1039 expire_tklines(&nresv_items);
1040 expire_tklines(&cresv_items);
1041 }
1042
1043 /* oper_privs_as_string()
1044 *
1045 * inputs - pointer to client_p
1046 * output - pointer to static string showing oper privs
1047 * side effects - return as string, the oper privs as derived from port
1048 */
1049 static const struct oper_privs
1050 {
1051 const unsigned int flag;
1052 const unsigned char c;
1053 } flag_list[] = {
1054 { OPER_FLAG_ADMIN, 'A' },
1055 { OPER_FLAG_CLOSE, 'B' },
1056 { OPER_FLAG_CONNECT, 'C' },
1057 { OPER_FLAG_CONNECT_REMOTE, 'D' },
1058 { OPER_FLAG_DIE, 'E' },
1059 { OPER_FLAG_DLINE, 'F' },
1060 { OPER_FLAG_GLOBOPS, 'G' },
1061 { OPER_FLAG_JOIN_RESV, 'H' },
1062 { OPER_FLAG_KILL, 'I' },
1063 { OPER_FLAG_KILL_REMOTE, 'J' },
1064 { OPER_FLAG_KLINE, 'K' },
1065 { OPER_FLAG_LOCOPS, 'L' },
1066 { OPER_FLAG_MODULE, 'M' },
1067 { OPER_FLAG_NICK_RESV, 'N' },
1068 { OPER_FLAG_OPME, 'O' },
1069 { OPER_FLAG_REHASH, 'P' },
1070 { OPER_FLAG_REMOTEBAN, 'Q' },
1071 { OPER_FLAG_RESTART, 'R' },
1072 { OPER_FLAG_RESV, 'S' },
1073 { OPER_FLAG_SET, 'T' },
1074 { OPER_FLAG_SQUIT, 'U' },
1075 { OPER_FLAG_SQUIT_REMOTE, 'V' },
1076 { OPER_FLAG_UNDLINE, 'W' },
1077 { OPER_FLAG_UNKLINE, 'X' },
1078 { OPER_FLAG_UNRESV, 'Y' },
1079 { OPER_FLAG_UNXLINE, 'Z' },
1080 { OPER_FLAG_WALLOPS, 'a' },
1081 { OPER_FLAG_XLINE, 'b' },
1082 { 0, '\0' }
1083 };
1084
1085 const char *
1086 oper_privs_as_string(const unsigned int port)
1087 {
1088 static char privs_out[IRCD_BUFSIZE];
1089 char *privs_ptr = privs_out;
1090
1091 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1092 if (port & opriv->flag)
1093 *privs_ptr++ = opriv->c;
1094
1095 if (privs_ptr == privs_out)
1096 *privs_ptr++ = '0';
1097
1098 *privs_ptr = '\0';
1099
1100 return privs_out;
1101 }
1102
1103 /*
1104 * Input: A client to find the active operator {} name for.
1105 * Output: The nick!user@host{oper} of the oper.
1106 * "oper" is server name for remote opers
1107 * Side effects: None.
1108 */
1109 const char *
1110 get_oper_name(const struct Client *client_p)
1111 {
1112 static char buffer[IRCD_BUFSIZE];
1113
1114 if (IsServer(client_p))
1115 return client_p->name;
1116
1117 if (MyConnect(client_p))
1118 {
1119 const dlink_node *const node = client_p->connection->confs.head;
1120
1121 if (node)
1122 {
1123 const struct MaskItem *const conf = node->data;
1124
1125 if (conf->type == CONF_OPER)
1126 {
1127 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1128 client_p->username, client_p->host, conf->name);
1129 return buffer;
1130 }
1131 }
1132
1133 /*
1134 * Probably should assert here for now. If there is an oper out there
1135 * with no operator {} conf attached, it would be good for us to know...
1136 */
1137 assert(0); /* Oper without oper conf! */
1138 }
1139
1140 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1141 client_p->username, client_p->host, client_p->servptr->name);
1142 return buffer;
1143 }
1144
1145 /* clear_out_old_conf()
1146 *
1147 * inputs - none
1148 * output - none
1149 * side effects - Clear out the old configuration
1150 */
1151 static void
1152 clear_out_old_conf(void)
1153 {
1154 dlink_node *node = NULL, *node_next = NULL;
1155 dlink_list *free_items [] = {
1156 &server_items, &operator_items,
1157 &shared_items, &gecos_items,
1158 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1159 };
1160
1161 dlink_list ** iterator = free_items; /* C is dumb */
1162
1163 /* We only need to free anything allocated by yyparse() here.
1164 * Resetting structs, etc, is taken care of by set_default_conf().
1165 */
1166
1167 for (; *iterator; iterator++)
1168 {
1169 DLINK_FOREACH_SAFE(node, node_next, (*iterator)->head)
1170 {
1171 struct MaskItem *conf = node->data;
1172
1173 conf->active = 0;
1174
1175 if (!IsConfDatabase(conf))
1176 {
1177 dlinkDelete(&conf->node, *iterator);
1178
1179 if (!conf->ref_count)
1180 conf_free(conf);
1181 }
1182 }
1183 }
1184
1185 motd_clear();
1186
1187 /*
1188 * Don't delete the class table, rather mark all entries for deletion.
1189 * The table is cleaned up by class_delete_marked. - avalon
1190 */
1191 class_mark_for_deletion();
1192
1193 clear_out_address_conf();
1194
1195 /* Clean out module paths */
1196 mod_clear_paths();
1197
1198 pseudo_clear();
1199
1200 /* Clean out ConfigServerInfo */
1201 MyFree(ConfigServerInfo.description);
1202 ConfigServerInfo.description = NULL;
1203 MyFree(ConfigServerInfo.network_name);
1204 ConfigServerInfo.network_name = NULL;
1205 MyFree(ConfigServerInfo.network_desc);
1206 ConfigServerInfo.network_desc = NULL;
1207 #ifdef HAVE_LIBCRYPTO
1208 if (ConfigServerInfo.rsa_private_key)
1209 {
1210 RSA_free(ConfigServerInfo.rsa_private_key);
1211 ConfigServerInfo.rsa_private_key = NULL;
1212 }
1213
1214 MyFree(ConfigServerInfo.rsa_private_key_file);
1215 ConfigServerInfo.rsa_private_key_file = NULL;
1216 #endif
1217
1218 /* Clean out ConfigAdminInfo */
1219 MyFree(ConfigAdminInfo.name);
1220 ConfigAdminInfo.name = NULL;
1221 MyFree(ConfigAdminInfo.email);
1222 ConfigAdminInfo.email = NULL;
1223 MyFree(ConfigAdminInfo.description);
1224 ConfigAdminInfo.description = NULL;
1225
1226 MyFree(ConfigServerHide.flatten_links_file);
1227 ConfigServerHide.flatten_links_file = NULL;
1228
1229 /* Clean out listeners */
1230 listener_close_marked();
1231 }
1232
1233 /* read_conf_files()
1234 *
1235 * inputs - cold start YES or NO
1236 * output - none
1237 * side effects - read all conf files needed, ircd.conf kline.conf etc.
1238 */
1239 void
1240 read_conf_files(int cold)
1241 {
1242 const char *filename = NULL;
1243 char chanmodes[IRCD_BUFSIZE] = "";
1244 char chanlimit[IRCD_BUFSIZE] = "";
1245
1246 conf_parser_ctx.boot = cold;
1247 filename = ConfigGeneral.configfile;
1248
1249 /* We need to know the initial filename for the yyerror() to report
1250 FIXME: The full path is in conffilenamebuf first time since we
1251 don't know anything else
1252
1253 - Gozem 2002-07-21
1254 */
1255 strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1256
1257 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1258 {
1259 if (cold)
1260 {
1261 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1262 filename, strerror(errno));
1263 exit(EXIT_FAILURE);
1264 }
1265 else
1266 {
1267 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1268 "Unable to read configuration file '%s': %s",
1269 filename, strerror(errno));
1270 return;
1271 }
1272 }
1273
1274 if (!cold)
1275 clear_out_old_conf();
1276
1277 read_conf(conf_parser_ctx.conf_file);
1278 fclose(conf_parser_ctx.conf_file);
1279
1280 log_reopen_all();
1281
1282 isupport_add("NICKLEN", NULL, ConfigServerInfo.max_nick_length);
1283 isupport_add("NETWORK", ConfigServerInfo.network_name, -1);
1284
1285 snprintf(chanmodes, sizeof(chanmodes), "beI:%u", ConfigChannel.max_bans);
1286 isupport_add("MAXLIST", chanmodes, -1);
1287 isupport_add("MAXTARGETS", NULL, ConfigGeneral.max_targets);
1288 isupport_add("CHANTYPES", "#", -1);
1289
1290 snprintf(chanlimit, sizeof(chanlimit), "#:%u",
1291 ConfigChannel.max_channels);
1292 isupport_add("CHANLIMIT", chanlimit, -1);
1293 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstCMORST");
1294 isupport_add("CHANNELLEN", NULL, CHANNELLEN);
1295 isupport_add("TOPICLEN", NULL, ConfigServerInfo.max_topic_length);
1296 isupport_add("CHANMODES", chanmodes, -1);
1297
1298 /*
1299 * message_locale may have changed. rebuild isupport since it relies
1300 * on strlen(form_str(RPL_ISUPPORT))
1301 */
1302 isupport_rebuild();
1303 }
1304
1305 /* conf_add_class_to_conf()
1306 *
1307 * inputs - pointer to config item
1308 * output - NONE
1309 * side effects - Add a class pointer to a conf
1310 */
1311 void
1312 conf_add_class_to_conf(struct MaskItem *conf, const char *name)
1313 {
1314 if (EmptyString(name) || (conf->class = class_find(name, 1)) == NULL)
1315 {
1316 conf->class = class_default;
1317
1318 if (conf->type == CONF_CLIENT || conf->type == CONF_OPER)
1319 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1320 "Warning *** Defaulting to default class for %s@%s",
1321 conf->user, conf->host);
1322 else
1323 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1324 "Warning *** Defaulting to default class for %s",
1325 conf->name);
1326 }
1327 }
1328
1329 /* yyerror()
1330 *
1331 * inputs - message from parser
1332 * output - NONE
1333 * side effects - message to opers and log file entry is made
1334 */
1335 void
1336 yyerror(const char *msg)
1337 {
1338 char newlinebuf[IRCD_BUFSIZE];
1339
1340 if (conf_parser_ctx.pass != 1)
1341 return;
1342
1343 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1344 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1345 "\"%s\", line %u: %s: %s",
1346 conffilebuf, lineno + 1, msg, newlinebuf);
1347 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1348 conffilebuf, lineno + 1, msg, newlinebuf);
1349 }
1350
1351 void
1352 conf_error_report(const char *msg)
1353 {
1354 char newlinebuf[IRCD_BUFSIZE];
1355
1356 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1357 sendto_realops_flags(UMODE_SERVNOTICE, L_ADMIN, SEND_NOTICE,
1358 "\"%s\", line %u: %s: %s",
1359 conffilebuf, lineno + 1, msg, newlinebuf);
1360 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1361 conffilebuf, lineno + 1, msg, newlinebuf);
1362 }
1363
1364 /*
1365 * valid_tkline()
1366 *
1367 * inputs - pointer to ascii string to check
1368 * - whether the specified time is in seconds or minutes
1369 * output - -1 not enough parameters
1370 * - 0 if not an integer number, else the number
1371 * side effects - none
1372 * Originally written by Dianora (Diane, db@db.net)
1373 */
1374 time_t
1375 valid_tkline(const char *data, const int minutes)
1376 {
1377 const unsigned char *p = (const unsigned char *)data;
1378 unsigned char tmpch = '\0';
1379 time_t result = 0;
1380
1381 while ((tmpch = *p++))
1382 {
1383 if (!IsDigit(tmpch))
1384 return 0;
1385
1386 result *= 10;
1387 result += (tmpch & 0xF);
1388 }
1389
1390 /*
1391 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1392 * i.e. they specifically use 0, I am going to return 1 instead as a return
1393 * value of non-zero is used to flag it as a temporary kline
1394 */
1395 if (result == 0)
1396 result = 1;
1397
1398 /*
1399 * If the incoming time is in seconds convert it to minutes for the purpose
1400 * of this calculation
1401 */
1402 if (!minutes)
1403 result = result / 60;
1404
1405 if (result > MAX_TDKLINE_TIME)
1406 result = MAX_TDKLINE_TIME;
1407
1408 result = result * 60; /* Turn it into seconds */
1409
1410 return result;
1411 }
1412
1413 /* valid_wild_card_simple()
1414 *
1415 * inputs - data to check for sufficient non-wildcard characters
1416 * outputs - 1 if valid, else 0
1417 * side effects - none
1418 */
1419 int
1420 valid_wild_card_simple(const char *data)
1421 {
1422 const unsigned char *p = (const unsigned char *)data;
1423 unsigned char tmpch = '\0';
1424 unsigned int nonwild = 0, wild = 0;
1425
1426 while ((tmpch = *p++))
1427 {
1428 if (tmpch == '\\' && *p)
1429 {
1430 ++p;
1431 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1432 return 1;
1433 }
1434 else if (!IsMWildChar(tmpch))
1435 {
1436 if (++nonwild >= ConfigGeneral.min_nonwildcard_simple)
1437 return 1;
1438 }
1439 else
1440 ++wild;
1441 }
1442
1443 return !wild;
1444 }
1445
1446 /* valid_wild_card()
1447 *
1448 * input - pointer to client
1449 * - int flag, 0 for no warning oper 1 for warning oper
1450 * - count of following varargs to check
1451 * output - 0 if not valid, 1 if valid
1452 * side effects - NOTICE is given to source_p if warn is 1
1453 */
1454 int
1455 valid_wild_card(struct Client *source_p, int count, ...)
1456 {
1457 unsigned char tmpch = '\0';
1458 unsigned int nonwild = 0;
1459 va_list args;
1460
1461 /*
1462 * Now we must check the user and host to make sure there
1463 * are at least NONWILDCHARS non-wildcard characters in
1464 * them, otherwise assume they are attempting to kline
1465 * *@* or some variant of that. This code will also catch
1466 * people attempting to kline *@*.tld, as long as NONWILDCHARS
1467 * is greater than 3. In that case, there are only 3 non-wild
1468 * characters (tld), so if NONWILDCHARS is 4, the kline will
1469 * be disallowed.
1470 * -wnder
1471 */
1472
1473 va_start(args, count);
1474
1475 while (count--)
1476 {
1477 const unsigned char *p = va_arg(args, const unsigned char *);
1478 if (p == NULL)
1479 continue;
1480
1481 while ((tmpch = *p++))
1482 {
1483 if (!IsKWildChar(tmpch))
1484 {
1485 /*
1486 * If we find enough non-wild characters, we can
1487 * break - no point in searching further.
1488 */
1489 if (++nonwild >= ConfigGeneral.min_nonwildcard)
1490 {
1491 va_end(args);
1492 return 1;
1493 }
1494 }
1495 }
1496 }
1497
1498 if (IsClient(source_p))
1499 sendto_one_notice(source_p, &me,
1500 ":Please include at least %u non-wildcard characters with the mask",
1501 ConfigGeneral.min_nonwildcard);
1502 va_end(args);
1503 return 0;
1504 }
1505
1506 /* find_user_host()
1507 *
1508 * inputs - pointer to client placing kline
1509 * - pointer to user_host_or_nick
1510 * - pointer to user buffer
1511 * - pointer to host buffer
1512 * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1513 * side effects -
1514 */
1515 static int
1516 find_user_host(struct Client *source_p, char *user_host_or_nick,
1517 char *luser, char *lhost)
1518 {
1519 struct Client *target_p = NULL;
1520 char *hostp = NULL;
1521
1522 if (lhost == NULL)
1523 {
1524 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1525 return 1;
1526 }
1527
1528 if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1529 {
1530 /* Explicit user@host mask given */
1531 if (hostp) /* I'm a little user@host */
1532 {
1533 *(hostp++) = '\0'; /* short and squat */
1534
1535 if (*user_host_or_nick)
1536 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1537 else
1538 strcpy(luser, "*");
1539
1540 if (*hostp)
1541 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1542 else
1543 strcpy(lhost, "*");
1544 }
1545 else
1546 {
1547 luser[0] = '*'; /* no @ found, assume its *@somehost */
1548 luser[1] = '\0';
1549 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1550 }
1551
1552 return 1;
1553 }
1554 else
1555 {
1556 /* Try to find user@host mask from nick */
1557 /* Okay to use source_p as the first param, because source_p == client_p */
1558 if ((target_p =
1559 find_chasing(source_p, user_host_or_nick)) == NULL)
1560 return 0; /* find_chasing sends ERR_NOSUCHNICK */
1561
1562 if (HasFlag(target_p, FLAGS_EXEMPTKLINE))
1563 {
1564 if (IsClient(source_p))
1565 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1566 return 0;
1567 }
1568
1569 /*
1570 * Turn the "user" bit into "*user", blow away '~'
1571 * if found in original user name (non-idented)
1572 */
1573 strlcpy(luser, target_p->username, USERLEN*4 + 1);
1574
1575 if (target_p->username[0] == '~')
1576 luser[0] = '*';
1577
1578 strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
1579 return 1;
1580 }
1581
1582 return 0;
1583 }
1584
1585 /* XXX should this go into a separate file ? -Dianora */
1586 /* parse_aline
1587 *
1588 * input - pointer to cmd name being used
1589 * - pointer to client using cmd
1590 * - parc parameter count
1591 * - parv[] list of parameters to parse
1592 * - parse_flags bit map of things to test
1593 * - pointer to user or string to parse into
1594 * - pointer to host or NULL to parse into if non NULL
1595 * - pointer to optional tkline time or NULL
1596 * - pointer to target_server to parse into if non NULL
1597 * - pointer to reason to parse into
1598 *
1599 * output - 1 if valid, 0 if not valid
1600 * side effects - A generalised k/d/x etc. line parser,
1601 * "ALINE [time] user@host|string [ON] target :reason"
1602 * will parse returning a parsed user, host if
1603 * h_p pointer is non NULL, string otherwise.
1604 * if tkline_time pointer is non NULL a tk line will be set
1605 * to non zero if found.
1606 * if tkline_time pointer is NULL and tk line is found,
1607 * error is reported.
1608 * if target_server is NULL and an "ON" is found error
1609 * is reported.
1610 * if reason pointer is NULL ignore pointer,
1611 * this allows use of parse_a_line in unkline etc.
1612 *
1613 * - Dianora
1614 */
1615 int
1616 parse_aline(const char *cmd, struct Client *source_p,
1617 int parc, char **parv,
1618 int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1619 char **target_server, char **reason)
1620 {
1621 int found_tkline_time=0;
1622 static char default_reason[] = CONF_NOREASON;
1623 static char user[USERLEN*4+1];
1624 static char host[HOSTLEN*4+1];
1625
1626 parv++;
1627 parc--;
1628
1629 found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1630
1631 if (found_tkline_time)
1632 {
1633 parv++;
1634 parc--;
1635
1636 if (tkline_time)
1637 *tkline_time = found_tkline_time;
1638 else
1639 {
1640 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1641 return 0;
1642 }
1643 }
1644
1645 if (parc == 0)
1646 {
1647 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1648 return 0;
1649 }
1650
1651 if (h_p == NULL)
1652 *up_p = *parv;
1653 else
1654 {
1655 if (find_user_host(source_p, *parv, user, host) == 0)
1656 return 0;
1657
1658 *up_p = user;
1659 *h_p = host;
1660 }
1661
1662 parc--;
1663 parv++;
1664
1665 if (parc)
1666 {
1667 if (irccmp(*parv, "ON") == 0)
1668 {
1669 parc--;
1670 parv++;
1671
1672 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1673 {
1674 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1675 return 0;
1676 }
1677
1678 if (parc == 0 || EmptyString(*parv))
1679 {
1680 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1681 return 0;
1682 }
1683
1684 *target_server = *parv;
1685 parc--;
1686 parv++;
1687 }
1688 else
1689 {
1690 /* Make sure target_server *is* NULL if no ON server found
1691 * caller probably NULL'd it first, but no harm to do it again -db
1692 */
1693 if (target_server)
1694 *target_server = NULL;
1695 }
1696 }
1697
1698 if (h_p)
1699 {
1700 if (strchr(user, '!'))
1701 {
1702 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1703 return 0;
1704 }
1705
1706 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 2, *up_p, *h_p))
1707 return 0;
1708 }
1709 else
1710 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, *up_p))
1711 return 0;
1712
1713 if (reason)
1714 {
1715 if (parc && !EmptyString(*parv))
1716 *reason = *parv;
1717 else
1718 *reason = default_reason;
1719 }
1720
1721 return 1;
1722 }
1723
1724 /* match_conf_password()
1725 *
1726 * inputs - pointer to given password
1727 * - pointer to Conf
1728 * output - 1 or 0 if match
1729 * side effects - none
1730 */
1731 int
1732 match_conf_password(const char *password, const struct MaskItem *conf)
1733 {
1734 const char *encr = NULL;
1735
1736 if (EmptyString(password) || EmptyString(conf->passwd))
1737 return 0;
1738
1739 if (conf->flags & CONF_FLAGS_ENCRYPTED)
1740 encr = crypt(password, conf->passwd);
1741 else
1742 encr = password;
1743
1744 return encr && !strcmp(encr, conf->passwd);
1745 }
1746
1747 /*
1748 * cluster_a_line
1749 *
1750 * inputs - client sending the cluster
1751 * - command name "KLINE" "XLINE" etc.
1752 * - capab -- CAPAB_KLN etc. from server.h
1753 * - cluster type -- CLUSTER_KLINE etc. from conf.h
1754 * - pattern and args to send along
1755 * output - none
1756 * side effects - Take source_p send the pattern with args given
1757 * along to all servers that match capab and cluster type
1758 */
1759 void
1760 cluster_a_line(struct Client *source_p, const char *command, unsigned int capab,
1761 unsigned int cluster_type, const char *pattern, ...)
1762 {
1763 va_list args;
1764 char buffer[IRCD_BUFSIZE] = "";
1765 const dlink_node *node = NULL;
1766
1767 va_start(args, pattern);
1768 vsnprintf(buffer, sizeof(buffer), pattern, args);
1769 va_end(args);
1770
1771 DLINK_FOREACH(node, cluster_items.head)
1772 {
1773 const struct MaskItem *conf = node->data;
1774
1775 if (conf->flags & cluster_type)
1776 sendto_match_servs(source_p, conf->name, CAPAB_CLUSTER | capab,
1777 "%s %s %s", command, conf->name, buffer);
1778 }
1779 }
1780
1781 /*
1782 * split_nuh
1783 *
1784 * inputs - pointer to original mask (modified in place)
1785 * - pointer to pointer where nick should go
1786 * - pointer to pointer where user should go
1787 * - pointer to pointer where host should go
1788 * output - NONE
1789 * side effects - mask is modified in place
1790 * If nick pointer is NULL, ignore writing to it
1791 * this allows us to use this function elsewhere.
1792 *
1793 * mask nick user host
1794 * ---------------------- ------- ------- ------
1795 * Dianora!db@db.net Dianora db db.net
1796 * Dianora Dianora * *
1797 * db.net * * db.net
1798 * OR if nick pointer is NULL
1799 * Dianora - * Dianora
1800 * Dianora! Dianora * *
1801 * Dianora!@ Dianora * *
1802 * Dianora!db Dianora db *
1803 * Dianora!@db.net Dianora * db.net
1804 * db@db.net * db db.net
1805 * !@ * * *
1806 * @ * * *
1807 * ! * * *
1808 */
1809 void
1810 split_nuh(struct split_nuh_item *const iptr)
1811 {
1812 char *p = NULL, *q = NULL;
1813
1814 if (iptr->nickptr)
1815 strlcpy(iptr->nickptr, "*", iptr->nicksize);
1816
1817 if (iptr->userptr)
1818 strlcpy(iptr->userptr, "*", iptr->usersize);
1819
1820 if (iptr->hostptr)
1821 strlcpy(iptr->hostptr, "*", iptr->hostsize);
1822
1823 if ((p = strchr(iptr->nuhmask, '!')))
1824 {
1825 *p = '\0';
1826
1827 if (iptr->nickptr && *iptr->nuhmask)
1828 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1829
1830 if ((q = strchr(++p, '@')))
1831 {
1832 *q++ = '\0';
1833
1834 if (*p)
1835 strlcpy(iptr->userptr, p, iptr->usersize);
1836
1837 if (*q)
1838 strlcpy(iptr->hostptr, q, iptr->hostsize);
1839 }
1840 else
1841 {
1842 if (*p)
1843 strlcpy(iptr->userptr, p, iptr->usersize);
1844 }
1845 }
1846 else
1847 {
1848 /* No ! found so lets look for a user@host */
1849 if ((p = strchr(iptr->nuhmask, '@')))
1850 {
1851 /* if found a @ */
1852 *p++ = '\0';
1853
1854 if (*iptr->nuhmask)
1855 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1856
1857 if (*p)
1858 strlcpy(iptr->hostptr, p, iptr->hostsize);
1859 }
1860 else
1861 {
1862 /* No @ found */
1863 if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
1864 strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
1865 else
1866 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1867 }
1868 }
1869 }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision