ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/server.c
(Generate patch)

Comparing:
ircd-hybrid-7.2/src/s_serv.c (file contents), Revision 1011 by michael, Fri Sep 18 10:14:09 2009 UTC vs.
ircd-hybrid-8/src/s_serv.c (file contents), Revision 1472 by michael, Sun Jul 22 12:03:18 2012 UTC

# Line 31 | Line 31
31   #include "channel.h"
32   #include "channel_mode.h"
33   #include "client.h"
34 #include "common.h"
34   #include "dbuf.h"
35   #include "event.h"
36   #include "fdlist.h"
37   #include "hash.h"
38   #include "irc_string.h"
40 #include "inet_misc.h"
39   #include "sprintf_irc.h"
40   #include "ircd.h"
41   #include "ircd_defs.h"
42   #include "s_bsd.h"
45 #include "irc_getnameinfo.h"
43   #include "numeric.h"
44   #include "packet.h"
45   #include "irc_res.h"
46 < #include "s_conf.h"
46 > #include "conf.h"
47   #include "s_serv.h"
48 < #include "s_log.h"
48 > #include "log.h"
49 > #include "s_misc.h"
50   #include "s_user.h"
51   #include "send.h"
52   #include "memory.h"
53   #include "channel.h" /* chcap_usage_counts stuff...*/
54 + #include "parse.h"
55  
56   #define MIN_CONN_FREQ 300
57  
58   static dlink_list cap_list = { NULL, NULL, 0 };
59   static void server_burst(struct Client *);
61 static int fork_server(struct Client *);
60   static void burst_all(struct Client *);
61   static void send_tb(struct Client *client_p, struct Channel *chptr);
62  
63   static CNCB serv_connect_callback;
64  
67 static void start_io(struct Client *);
65   static void burst_members(struct Client *, struct Channel *);
66  
70 static SlinkRplHnd slink_error;
71 static SlinkRplHnd slink_zipstats;
72
73
74 #ifdef HAVE_LIBCRYPTO
75 struct EncCapability CipherTable[] =
76 {
77 #ifdef HAVE_EVP_BF_CFB
78  { "BF/168",     CAP_ENC_BF_168,     24, CIPHER_BF     },
79  { "BF/128",     CAP_ENC_BF_128,     16, CIPHER_BF     },
80 #endif
81 #ifdef HAVE_EVP_CAST5_CFB
82  { "CAST/128",   CAP_ENC_CAST_128,   16, CIPHER_CAST   },
83 #endif
84 #ifdef HAVE_EVP_IDEA_CFB
85  { "IDEA/128",   CAP_ENC_IDEA_128,   16, CIPHER_IDEA   },
86 #endif
87 #ifdef HAVE_EVP_RC5_32_12_16_CFB
88  { "RC5.16/128", CAP_ENC_RC5_16_128, 16, CIPHER_RC5_16 },
89  { "RC5.12/128", CAP_ENC_RC5_12_128, 16, CIPHER_RC5_12 },
90  { "RC5.8/128",  CAP_ENC_RC5_8_128,  16, CIPHER_RC5_8  },
91 #endif
92 #ifdef HAVE_EVP_DES_EDE3_CFB
93  { "3DES/168",   CAP_ENC_3DES_168,   24, CIPHER_3DES   },
94 #endif
95 #ifdef HAVE_EVP_DES_CFB
96  { "DES/56",     CAP_ENC_DES_56,      8, CIPHER_DES    },
97 #endif
98  { 0,            0,                   0, 0             }
99 };
100 #endif
101
102 struct SlinkRplDef slinkrpltab[] = {
103  { SLINKRPL_ERROR,    slink_error,    SLINKRPL_FLAG_DATA },
104  { SLINKRPL_ZIPSTATS, slink_zipstats, SLINKRPL_FLAG_DATA },
105  { 0,                 0,              0 },
106 };
107
108
109 void
110 slink_error(unsigned int rpl, unsigned int len, unsigned char *data,
111            struct Client *server_p)
112 {
113  assert(rpl == SLINKRPL_ERROR);
114  assert(len < 256);
115
116  data[len-1] = '\0';
117
118  sendto_realops_flags(UMODE_ALL, L_ALL, "SlinkError for %s: %s",
119                       server_p->name, data);
120  /* XXX should this be exit_client? */
121  exit_client(server_p, &me, "servlink error -- terminating link");
122 }
123
124 void
125 slink_zipstats(unsigned int rpl, unsigned int len, unsigned char *data,
126               struct Client *server_p)
127 {
128  struct ZipStats zipstats;
129  uint64_t in = 0, in_wire = 0, out = 0, out_wire = 0;
130  int i = 0;
131
132  assert(rpl == SLINKRPL_ZIPSTATS);
133  assert(len == 16);
134  assert(IsCapable(server_p, CAP_ZIP));
135
136  /* Yes, it needs to be done this way, no we cannot let the compiler
137   * work with the pointer to the structure.  This works around a GCC
138   * bug on SPARC that affects all versions at the time of this writing.
139   * I will feed you to the creatures living in RMS's beard if you do
140   * not leave this as is, without being sure that you are not causing
141   * regression for most of our installed SPARC base.
142   * -jmallett, 04/27/2002
143   */
144  memcpy(&zipstats, &server_p->localClient->zipstats, sizeof(struct ZipStats));
145
146  in |= (data[i++] << 24);
147  in |= (data[i++] << 16);
148  in |= (data[i++] <<  8);
149  in |= (data[i++]      );
150
151  in_wire |= (data[i++] << 24);
152  in_wire |= (data[i++] << 16);
153  in_wire |= (data[i++] <<  8);
154  in_wire |= (data[i++]      );
155
156  out |= (data[i++] << 24);
157  out |= (data[i++] << 16);
158  out |= (data[i++] <<  8);
159  out |= (data[i++]      );
160
161  out_wire |= (data[i++] << 24);
162  out_wire |= (data[i++] << 16);
163  out_wire |= (data[i++] <<  8);
164  out_wire |= (data[i++]      );
165
166  /* This macro adds b to a if a plus b is not an overflow, and sets the
167   * value of a to b if it is.
168   * Add and Set if No Overflow.
169   */
170 #define ASNO(a, b) a = (a + b >= a ? a + b : b)
171
172  ASNO(zipstats.in, in);
173  ASNO(zipstats.out, out);
174  ASNO(zipstats.in_wire, in_wire);
175  ASNO(zipstats.out_wire, out_wire);
176
177  if (zipstats.in > 0)
178    zipstats.in_ratio = (((double)(zipstats.in - zipstats.in_wire) /
179                         (double)zipstats.in) * 100.00);
180  else
181    zipstats.in_ratio = 0;
182
183  if (zipstats.out > 0)
184    zipstats.out_ratio = (((double)(zipstats.out - zipstats.out_wire) /
185                          (double)zipstats.out) * 100.00);
186  else
187    zipstats.out_ratio = 0;
188
189  memcpy(&server_p->localClient->zipstats, &zipstats, sizeof(struct ZipStats));
190 }
191
192 void
193 collect_zipstats(void *unused)
194 {
195  dlink_node *ptr = NULL;
196
197  DLINK_FOREACH(ptr, serv_list.head)
198  {
199    struct Client *target_p = ptr->data;
200
201    if (IsCapable(target_p, CAP_ZIP))
202    {
203      /* only bother if we haven't already got something queued... */
204      if (!target_p->localClient->slinkq)
205      {
206        target_p->localClient->slinkq     = MyMalloc(1); /* sigh.. */
207        target_p->localClient->slinkq[0]  = SLINKCMD_ZIPSTATS;
208        target_p->localClient->slinkq_ofs = 0;
209        target_p->localClient->slinkq_len = 1;
210        send_queued_slink_write(target_p);
211      }
212    }
213  }
214 }
215
216 #ifdef HAVE_LIBCRYPTO
217 struct EncCapability *
218 check_cipher(struct Client *client_p, struct AccessItem *aconf)
219 {
220  struct EncCapability *epref = NULL;
221
222  /* Use connect{} specific info if available */
223  if (aconf->cipher_preference)
224    epref = aconf->cipher_preference;
225  else if (ConfigFileEntry.default_cipher_preference)
226    epref = ConfigFileEntry.default_cipher_preference;
227
228  /*
229   * If the server supports the capability in hand, return the matching
230   * conf struct.  Otherwise, return NULL (an error).
231   */
232  if (epref && IsCapableEnc(client_p, epref->cap))
233    return epref;
234
235  return NULL;
236 }
237 #endif /* HAVE_LIBCRYPTO */
238
239 /* my_name_for_link()
240 * return wildcard name of my server name
241 * according to given config entry --Jto
242 */
243 const char *
244 my_name_for_link(struct ConfItem *conf)
245 {
246  struct AccessItem *aconf;
247
248  aconf = (struct AccessItem *)map_to_conf(conf);
249  if (aconf->fakename != NULL)
250    return aconf->fakename;
251  else
252    return me.name;
253 }
254
67   /*
68   * write_links_file
69   *
# Line 269 | Line 81 | write_links_file(void* notused)
81    MessageFileLine *newMessageLine = 0;
82    MessageFile *MessageFileptr;
83    const char *p;
84 <  FBFILE *file;
84 >  FILE *file;
85    char buff[512];
86    dlink_node *ptr;
87  
88    MessageFileptr = &ConfigFileEntry.linksfile;
89  
90 <  if ((file = fbopen(MessageFileptr->fileName, "w")) == NULL)
90 >  if ((file = fopen(MessageFileptr->fileName, "w")) == NULL)
91      return;
92  
93    for (mptr = MessageFileptr->contentsOfFile; mptr; mptr = next_mptr)
# Line 289 | Line 101 | write_links_file(void* notused)
101  
102    DLINK_FOREACH(ptr, global_serv_list.head)
103    {
104 <    size_t nbytes = 0;
293 <    struct Client *target_p = ptr->data;
104 >    const struct Client *target_p = ptr->data;
105  
106      /* skip ourselves, we send ourselves in /links */
107      if (IsMe(target_p))
# Line 321 | Line 132 | write_links_file(void* notused)
132       */
133      assert(strlen(target_p->name) + strlen(me.name) + 6 + strlen(p) <=
134              MESSAGELINELEN);
135 <    ircsprintf(newMessageLine->line, "%s %s :1 %s",
136 <               target_p->name, me.name, p);
135 >    snprintf(newMessageLine->line, sizeof(newMessageLine->line), "%s %s :1 %s",
136 >             target_p->name, me.name, p);
137      newMessageLine->next = NULL;
138  
139      if (MessageFileptr->contentsOfFile)
# Line 337 | Line 148 | write_links_file(void* notused)
148        currentMessageLine = newMessageLine;
149      }
150  
151 <    nbytes = ircsprintf(buff, "%s %s :1 %s\n", target_p->name, me.name, p);
152 <    fbputs(buff, file, nbytes);
151 >    snprintf(buff, sizeof(buff), "%s %s :1 %s\n", target_p->name, me.name, p);
152 >    fputs(buff, file);
153    }
154  
155 <  fbclose(file);
155 >  fclose(file);
156   }
157  
158   /* hunt_server()
# Line 372 | Line 183 | hunt_server(struct Client *client_p, str
183    dlink_node *ptr;
184    int wilds;
185  
186 <  /* Assume it's me, if no server
187 <   */
188 <  if (parc <= server || EmptyString(parv[server]) ||
189 <      match(me.name, parv[server]) ||
190 <      match(parv[server], me.name) ||
191 <      !strcmp(parv[server], me.id))
381 <    return(HUNTED_ISME);
186 >  /* Assume it's me, if no server */
187 >  if (parc <= server || EmptyString(parv[server]))
188 >    return HUNTED_ISME;
189 >
190 >  if (!strcmp(parv[server], me.id) || match(parv[server], me.name))
191 >    return HUNTED_ISME;
192  
193    /* These are to pickup matches that would cause the following
194     * message to go in the wrong direction while doing quick fast
195     * non-matching lookups.
196     */
197    if (MyClient(source_p))
198 <    target_p = find_client(parv[server]);
198 >    target_p = hash_find_client(parv[server]);
199    else
200      target_p = find_person(client_p, parv[server]);
201  
# Line 393 | Line 203 | hunt_server(struct Client *client_p, str
203      if (target_p->from == source_p->from && !MyConnect(target_p))
204        target_p = NULL;
205  
206 <  if (target_p == NULL && (target_p = find_server(parv[server])))
206 >  if (target_p == NULL && (target_p = hash_find_server(parv[server])))
207      if (target_p->from == source_p->from && !MyConnect(target_p))
208        target_p = NULL;
209  
210    collapse(parv[server]);
211 <  wilds = (strchr(parv[server], '?') || strchr(parv[server], '*'));
211 >  wilds = has_wildcards(parv[server]);
212  
213    /* Again, if there are no wild cards involved in the server
214     * name, use the hash lookup
# Line 407 | Line 217 | hunt_server(struct Client *client_p, str
217    {
218      if (!wilds)
219      {
220 <      if (!(target_p = find_server(parv[server])))
220 >      if (!(target_p = hash_find_server(parv[server])))
221        {
222          sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
223 <                   me.name, parv[0], parv[server]);
223 >                   me.name, source_p->name, parv[server]);
224          return(HUNTED_NOSUCH);
225        }
226      }
# Line 438 | Line 248 | hunt_server(struct Client *client_p, str
248      if(!IsRegistered(target_p))
249      {
250        sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
251 <                 me.name, parv[0], parv[server]);
251 >                 me.name, source_p->name, parv[server]);
252        return HUNTED_NOSUCH;
253      }
254  
# Line 461 | Line 271 | hunt_server(struct Client *client_p, str
271    }
272  
273    sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
274 <             me.name, parv[0], parv[server]);
274 >             me.name, source_p->name, parv[server]);
275    return(HUNTED_NOSUCH);
276   }
277  
# Line 491 | Line 301 | try_connections(void *unused)
301    DLINK_FOREACH(ptr, server_items.head)
302    {
303      conf = ptr->data;
304 <    aconf = (struct AccessItem *)map_to_conf(conf);
304 >    aconf = map_to_conf(conf);
305  
306      /* Also when already connecting! (update holdtimes) --SRB
307       */
308 <    if (!(aconf->status & CONF_SERVER) || aconf->port <= 0 ||
308 >    if (!(aconf->status & CONF_SERVER) || !aconf->port ||
309          !(IsConfAllowAutoConn(aconf)))
310        continue;
311  
312 <    cltmp = (struct ClassItem *)map_to_conf(aconf->class_ptr);
312 >    cltmp = map_to_conf(aconf->class_ptr);
313  
314      /* Skip this entry if the use of it is still on hold until
315       * future. Otherwise handle this entry (and set it on hold
# Line 514 | Line 324 | try_connections(void *unused)
324        confrq = DEFAULT_CONNECTFREQUENCY;
325      else
326      {
327 <      confrq = ConFreq(cltmp);
328 <      if (confrq < MIN_CONN_FREQ )
327 >      confrq = cltmp->con_freq;
328 >      if (confrq < MIN_CONN_FREQ)
329          confrq = MIN_CONN_FREQ;
330      }
331  
# Line 524 | Line 334 | try_connections(void *unused)
334      /* Found a CONNECT config with port specified, scan clients
335       * and see if this server is already connected?
336       */
337 <    if (find_server(conf->name) != NULL)
337 >    if (hash_find_server(conf->name) != NULL)
338        continue;
339  
340 <    if (CurrUserCount(cltmp) < MaxTotal(cltmp))
340 >    if (cltmp->curr_user_count < cltmp->max_total)
341      {
342        /* Go to the end of the list, if not already last */
343        if (ptr->next != NULL)
# Line 562 | Line 372 | try_connections(void *unused)
372   }
373  
374   int
375 < check_server(const char *name, struct Client *client_p, int cryptlink)
375 > valid_servname(const char *name)
376 > {
377 >  unsigned int length = 0;
378 >  unsigned int dots   = 0;
379 >  const char *p = name;
380 >
381 >  for (; *p; ++p)
382 >  {
383 >    if (!IsServChar(*p))
384 >      return 0;
385 >
386 >    ++length;
387 >
388 >    if (*p == '.')
389 >      ++dots;
390 >  }
391 >
392 >  return dots != 0 && length <= HOSTLEN;
393 > }
394 >
395 > int
396 > check_server(const char *name, struct Client *client_p)
397   {
398    dlink_node *ptr;
399    struct ConfItem *conf           = NULL;
# Line 573 | Line 404 | check_server(const char *name, struct Cl
404  
405    assert(client_p != NULL);
406  
576  if (client_p == NULL)
577    return(error);
578
579  if (strlen(name) > HOSTLEN)
580    return(-4);
581
407    /* loop through looking for all possible connect items that might work */
408    DLINK_FOREACH(ptr, server_items.head)
409    {
410      conf = ptr->data;
411 <    aconf = (struct AccessItem *)map_to_conf(conf);
411 >    aconf = map_to_conf(conf);
412  
413      if (!match(name, conf->name))
414        continue;
# Line 596 | Line 421 | check_server(const char *name, struct Cl
421          match(aconf->host, client_p->sockhost))
422      {
423        error = -2;
599 #ifdef HAVE_LIBCRYPTO
600      if (cryptlink && IsConfCryptLink(aconf))
601      {
602        if (aconf->rsa_public_key)
603          server_conf = conf;
604      }
605      else if (!(cryptlink || IsConfCryptLink(aconf)))
606 #endif /* HAVE_LIBCRYPTO */
607      {
608        /* A NULL password is as good as a bad one */
609        if (EmptyString(client_p->localClient->passwd))
610          return(-2);
611
612        /* code in s_conf.c should not have allowed this to be NULL */
613        if (aconf->passwd == NULL)
614          return(-2);
424  
425 <        if (IsConfEncrypted(aconf))
426 <        {
427 <          if (strcmp(aconf->passwd,
428 <              (const char *)crypt(client_p->localClient->passwd,
620 <                                  aconf->passwd)) == 0)
621 <            server_conf = conf;
622 <        }
623 <        else
624 <        {
625 <          if (strcmp(aconf->passwd, client_p->localClient->passwd) == 0)
626 <            server_conf = conf;
627 <        }
628 <      }
425 >      if (!match_conf_password(client_p->localClient->passwd, aconf))
426 >        return -2;
427 >
428 >      server_conf = conf;
429      }
430    }
431  
# Line 634 | Line 434 | check_server(const char *name, struct Cl
434  
435    attach_conf(client_p, server_conf);
436  
637  /* Now find all leaf or hub config items for this server */
638  DLINK_FOREACH(ptr, hub_items.head)
639  {
640    conf = ptr->data;
641
642    if (!match(name, conf->name))
643      continue;
644    attach_conf(client_p, conf);
645  }
646
647  DLINK_FOREACH(ptr, leaf_items.head)
648  {
649    conf = ptr->data;
650
651    if (!match(name, conf->name))
652      continue;
653    attach_conf(client_p, conf);
654  }
655
437    server_aconf = map_to_conf(server_conf);
438  
658 #ifdef HAVE_LIBZ /* otherwise, clear it unconditionally */
659  if (!IsConfCompressed(server_aconf))
660 #endif
661    ClearCap(client_p, CAP_ZIP);
662  if (!IsConfCryptLink(server_aconf))
663    ClearCap(client_p, CAP_ENC);
439    if (!IsConfTopicBurst(server_aconf))
665  {
666    ClearCap(client_p, CAP_TB);
440      ClearCap(client_p, CAP_TBURST);
668  }
441  
670  /* Don't unset CAP_HUB here even if the server isn't a hub,
671   * it only indicates if the server thinks it's lazylinks are
672   * leafs or not.. if you unset it, bad things will happen
673   */
442    if (aconf != NULL)
443    {
444      struct sockaddr_in *v4;
# Line 681 | Line 449 | check_server(const char *name, struct Cl
449      {
450   #ifdef IPV6
451        case AF_INET6:
452 <        v6 = (struct sockaddr_in6 *)&aconf->ipnum;
452 >        v6 = (struct sockaddr_in6 *)&aconf->addr;
453  
454          if (IN6_IS_ADDR_UNSPECIFIED(&v6->sin6_addr))
455 <          memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
455 >          memcpy(&aconf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
456          break;
457   #endif
458        case AF_INET:
459 <        v4 = (struct sockaddr_in *)&aconf->ipnum;
459 >        v4 = (struct sockaddr_in *)&aconf->addr;
460  
461          if (v4->sin_addr.s_addr == INADDR_NONE)
462 <          memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
462 >          memcpy(&aconf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
463          break;
464      }
465    }
# Line 782 | Line 550 | find_capability(const char *capab)
550   * inputs       - Client pointer to send to
551   *              - Pointer to AccessItem (for crypt)
552   *              - int flag of capabilities that this server can send
785 *              - int flag of encryption capabilities
553   * output       - NONE
554   * side effects - send the CAPAB line to a server  -orabidoo
555   *
556   */
557   void
558   send_capabilities(struct Client *client_p, struct AccessItem *aconf,
559 <                  int cap_can_send, int enc_can_send)
559 >                  int cap_can_send)
560   {
561    struct Capability *cap=NULL;
562    char msgbuf[IRCD_BUFSIZE];
563    char *t;
564    int tl;
565    dlink_node *ptr;
799 #ifdef HAVE_LIBCRYPTO
800  const struct EncCapability *epref = NULL;
801  char *capend;
802  int sent_cipher = 0;
803 #endif
566  
567    t = msgbuf;
568  
# Line 814 | Line 576 | send_capabilities(struct Client *client_
576        t += tl;
577      }
578    }
817 #ifdef HAVE_LIBCRYPTO
818  if (enc_can_send)
819  {
820    capend = t;
821    strcpy(t, "ENC:");
822    t += 4;
823
824    /* use connect{} specific info if available */
825    if (aconf->cipher_preference)
826      epref = aconf->cipher_preference;
827    else if (ConfigFileEntry.default_cipher_preference)
828      epref = ConfigFileEntry.default_cipher_preference;
829
830    if (epref && (epref->cap & enc_can_send))
831    {
832      /* Leave the space -- it is removed later. */
833      tl = ircsprintf(t, "%s ", epref->name);
834      t += tl;
835      sent_cipher = 1;
836    }
579  
838    if (!sent_cipher)
839      t = capend; /* truncate string before ENC:, below */
840  }
841 #endif
580    *(t - 1) = '\0';
581    sendto_one(client_p, "CAPAB :%s", msgbuf);
582   }
# Line 858 | Line 596 | sendnick_TS(struct Client *client_p, str
596    if (!IsClient(target_p))
597      return;
598  
599 <  send_umode(NULL, target_p, 0, IsOperHiddenAdmin(target_p) ?
862 <    SEND_UMODES & ~UMODE_ADMIN : SEND_UMODES, ubuf);
599 >  send_umode(NULL, target_p, 0, SEND_UMODES, ubuf);
600  
601    if (ubuf[0] == '\0')
602    {
# Line 868 | Line 605 | sendnick_TS(struct Client *client_p, str
605    }
606  
607    /* XXX Both of these need to have a :me.name or :mySID!?!?! */
608 <  if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
609 <    sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s",
610 <               target_p->servptr->id,
611 <               target_p->name, target_p->hopcount + 1,
612 <               (unsigned long) target_p->tsinfo,
613 <               ubuf, target_p->username, target_p->host,
614 <               (MyClient(target_p) && IsIPSpoof(target_p)) ?
615 <               "0" : target_p->sockhost, target_p->id, target_p->info);
608 >  if (IsCapable(client_p, CAP_SVS))
609 >  {
610 >    if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
611 >      sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s %lu :%s",
612 >                 target_p->servptr->id,
613 >                 target_p->name, target_p->hopcount + 1,
614 >                 (unsigned long) target_p->tsinfo,
615 >                 ubuf, target_p->username, target_p->host,
616 >                 (MyClient(target_p) && IsIPSpoof(target_p)) ?
617 >                 "0" : target_p->sockhost, target_p->id,
618 >                 (unsigned long)target_p->servicestamp, target_p->info);
619 >    else
620 >      sendto_one(client_p, "NICK %s %d %lu %s %s %s %s %lu :%s",
621 >                 target_p->name, target_p->hopcount + 1,
622 >                 (unsigned long) target_p->tsinfo,
623 >                 ubuf, target_p->username, target_p->host,
624 >                 target_p->servptr->name, (unsigned long)target_p->servicestamp,
625 >                 target_p->info);
626 >  }
627    else
628 <    sendto_one(client_p, "NICK %s %d %lu %s %s %s %s :%s",
629 <               target_p->name, target_p->hopcount + 1,
630 <               (unsigned long) target_p->tsinfo,
631 <               ubuf, target_p->username, target_p->host,
632 <               target_p->servptr->name, target_p->info);
628 >  {
629 >    if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
630 >      sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s",
631 >                 target_p->servptr->id,
632 >                 target_p->name, target_p->hopcount + 1,
633 >                 (unsigned long) target_p->tsinfo,
634 >                 ubuf, target_p->username, target_p->host,
635 >                 (MyClient(target_p) && IsIPSpoof(target_p)) ?
636 >                 "0" : target_p->sockhost, target_p->id, target_p->info);
637 >    else
638 >      sendto_one(client_p, "NICK %s %d %lu %s %s %s %s :%s",
639 >                 target_p->name, target_p->hopcount + 1,
640 >                 (unsigned long) target_p->tsinfo,
641 >                 ubuf, target_p->username, target_p->host,
642 >                 target_p->servptr->name, target_p->info);
643 >  }
644  
645 <  if (IsConfAwayBurst((struct AccessItem *)map_to_conf(client_p->serv->sconf)))
645 >  if (IsConfAwayBurst((struct AccessItem *)map_to_conf(client_p->localClient->confs.head->data)))
646      if (!EmptyString(target_p->away))
647 <      sendto_one(client_p, ":%s AWAY :%s", target_p->name,
647 >      sendto_one(client_p, ":%s AWAY :%s", ID_or_name(target_p, client_p),
648                   target_p->away);
649  
650   }
# Line 913 | Line 672 | show_capabilities(struct Client *target_
672      if (IsCapable(target_p, cap->cap))
673        t += ircsprintf(t, "%s ", cap->name);
674    }
916 #ifdef HAVE_LIBCRYPTO
917  if (IsCapable(target_p, CAP_ENC) &&
918      target_p->localClient->in_cipher &&
919      target_p->localClient->out_cipher)
920    t += ircsprintf(t, "ENC:%s ",
921                    target_p->localClient->in_cipher->name);
922 #endif
923  *(t - 1) = '\0';
675  
676 <  return(msgbuf);
676 >  *(t - 1) = '\0';
677 >  return msgbuf;
678   }
679  
680   /* make_server()
# Line 956 | Line 708 | server_estab(struct Client *client_p)
708    char *host;
709    const char *inpath;
710    static char inpath_ip[HOSTLEN * 2 + USERLEN + 6];
959  dlink_node *m;
711    dlink_node *ptr;
712 + #ifdef HAVE_LIBCRYPTO
713 +  const COMP_METHOD *compression = NULL, *expansion = NULL;
714 + #endif
715  
716    assert(client_p != NULL);
717  
# Line 996 | Line 750 | server_estab(struct Client *client_p)
750      }
751    }
752  
753 <  aconf = (struct AccessItem *)map_to_conf(conf);
753 >  aconf = map_to_conf(conf);
754  
755 <  if (IsUnknown(client_p) && !IsConfCryptLink(aconf))
755 >  if (IsUnknown(client_p))
756    {
757      /* jdc -- 1.  Use EmptyString(), not [0] index reference.
758       *        2.  Check aconf->spasswd, not aconf->passwd.
759       */
760      if (!EmptyString(aconf->spasswd))
761 <    {
762 <      /* only send ts6 format PASS if we have ts6 enabled */
1009 <    if (me.id[0] != '\0')               /* Send TS 6 form only if id */
1010 <        sendto_one(client_p, "PASS %s TS %d %s",
1011 <                   aconf->spasswd, TS_CURRENT, me.id);
1012 <      else
1013 <        sendto_one(client_p, "PASS %s TS 5",
1014 <                   aconf->spasswd);
1015 <    }
761 >      sendto_one(client_p, "PASS %s TS %d %s",
762 >                 aconf->spasswd, TS_CURRENT, me.id);
763  
764      /* Pass my info to the new server
765       *
1019     * If this is a HUB, pass on CAP_HUB
766       * Pass on ZIP if supported
767       * Pass on TB if supported.
768       * - Dianora
769       */
770  
771 <    send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
772 <      | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1027 <      | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0);
1028 <
1029 <    /* SERVER is the last command sent before switching to ziplinks.
1030 <     * We set TCPNODELAY on the socket to make sure it gets sent out
1031 <     * on the wire immediately.  Otherwise, it could be sitting in
1032 <     * a kernel buffer when we start sending zipped data, and the
1033 <     * parser on the receiving side can't hand both unzipped and zipped
1034 <     * data in one packet. --Rodder
1035 <     *
1036 <     * currently we only need to call send_queued_write,
1037 <     * Nagle is already disabled at this point --adx
1038 <     */
1039 <    sendto_one(client_p, "SERVER %s 1 :%s%s",
1040 <               my_name_for_link(conf),
1041 <               ConfigServerHide.hidden ? "(H) " : "",
1042 <               (me.info[0]) ? (me.info) : "IRCers United");
1043 <    send_queued_write(client_p);
1044 <  }
771 >    send_capabilities(client_p, aconf,
772 >      (IsConfTopicBurst(aconf) ? CAP_TBURST : 0));
773  
774 <  /* Hand the server off to servlink now */
775 <  if (IsCapable(client_p, CAP_ENC) || IsCapable(client_p, CAP_ZIP))
1048 <  {
1049 <    if (fork_server(client_p) < 0)
1050 <    {
1051 <      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1052 <                           "Warning: fork failed for server %s -- check servlink_path (%s)",
1053 <                           get_client_name(client_p, HIDE_IP), ConfigFileEntry.servlink_path);
1054 <      sendto_realops_flags(UMODE_ALL, L_OPER, "Warning: fork failed for server "
1055 <                           "%s -- check servlink_path (%s)",
1056 <                           get_client_name(client_p, MASK_IP),
1057 <                           ConfigFileEntry.servlink_path);
1058 <      exit_client(client_p, &me, "fork failed");
1059 <      return;
1060 <    }
1061 <
1062 <    start_io(client_p);
1063 <    SetServlink(client_p);
774 >    sendto_one(client_p, "SERVER %s 1 :%s%s",
775 >               me.name, ConfigServerHide.hidden ? "(H) " : "", me.info);
776    }
777  
778 <  /* only send ts6 format SVINFO if we have ts6 enabled */
1067 <  sendto_one(client_p, "SVINFO %d %d 0 :%lu",
1068 <             (me.id[0] ? TS_CURRENT : 5), TS_MIN,
778 >  sendto_one(client_p, "SVINFO %d %d 0 :%lu", TS_CURRENT, TS_MIN,
779               (unsigned long)CurrentTime);
780  
781    /* assumption here is if they passed the correct TS version, they also passed an SID */
# Line 1099 | Line 809 | server_estab(struct Client *client_p)
809    /* Some day, all these lists will be consolidated *sigh* */
810    dlinkAdd(client_p, &client_p->lnode, &me.serv->server_list);
811  
812 <  m = dlinkFind(&unknown_list, client_p);
1103 <  assert(NULL != m);
812 >  assert(dlinkFind(&unknown_list, client_p));
813  
814 <  dlinkDelete(m, &unknown_list);
815 <  dlinkAdd(client_p, m, &serv_list);
814 >  dlink_move_node(&client_p->localClient->lclient_node,
815 >                  &unknown_list, &serv_list);
816  
817    Count.myserver++;
818  
# Line 1114 | Line 823 | server_estab(struct Client *client_p)
823    make_server(client_p);
824  
825    /* fixing eob timings.. -gnp */
826 <  client_p->firsttime = CurrentTime;
1118 <
1119 <  /* Show the real host/IP to admins */
1120 <  sendto_realops_flags(UMODE_ALL, L_ADMIN,
1121 <                       "Link with %s established: (%s) link",
1122 <                       inpath_ip,show_capabilities(client_p));
1123 <  /* Now show the masked hostname/IP to opers */
1124 <  sendto_realops_flags(UMODE_ALL, L_OPER,
1125 <                       "Link with %s established: (%s) link",
1126 <                       inpath,show_capabilities(client_p));
1127 <  ilog(L_NOTICE, "Link with %s established: (%s) link",
1128 <       inpath_ip, show_capabilities(client_p));
826 >  client_p->localClient->firsttime = CurrentTime;
827  
828 <  client_p->serv->sconf = conf;
828 >  if (find_matching_name_conf(SERVICE_TYPE, client_p->name, NULL, NULL, 0))
829 >    AddFlag(client_p, FLAGS_SERVICE);
830  
831 <  if (HasServlink(client_p))
831 >  /* Show the real host/IP to admins */
832 > #ifdef HAVE_LIBCRYPTO
833 >  if (client_p->localClient->fd.ssl)
834    {
835 <    /* we won't overflow FD_DESC_SZ here, as it can hold
836 <     * client_p->name + 64
837 <     */
838 <    fd_note(&client_p->localClient->fd, "slink data: %s", client_p->name);
839 <    fd_note(&client_p->localClient->ctrlfd, "slink ctrl: %s", client_p->name);
835 >    compression = SSL_get_current_compression(client_p->localClient->fd.ssl);
836 >    expansion   = SSL_get_current_expansion(client_p->localClient->fd.ssl);
837 >
838 >    sendto_realops_flags(UMODE_ALL, L_ADMIN,
839 >                         "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
840 >                         inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl),
841 >                         compression ? SSL_COMP_get_name(compression) : "NONE",
842 >                         expansion ? SSL_COMP_get_name(expansion) : "NONE",
843 >                         show_capabilities(client_p));
844 >    /* Now show the masked hostname/IP to opers */
845 >    sendto_realops_flags(UMODE_ALL, L_OPER,
846 >                         "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
847 >                         inpath, ssl_get_cipher(client_p->localClient->fd.ssl),
848 >                         compression ? SSL_COMP_get_name(compression) : "NONE",
849 >                         expansion ? SSL_COMP_get_name(expansion) : "NONE",
850 >                         show_capabilities(client_p));
851 >    ilog(LOG_TYPE_IRCD, "Link with %s established: [SSL: %s, Compression/Expansion method: %s/%s] (Capabilities: %s)",
852 >         inpath_ip, ssl_get_cipher(client_p->localClient->fd.ssl),
853 >         compression ? SSL_COMP_get_name(compression) : "NONE",
854 >         expansion ? SSL_COMP_get_name(expansion) : "NONE",
855 >         show_capabilities(client_p));
856    }
857    else
858 <    fd_note(&client_p->localClient->fd, "Server: %s", client_p->name);
858 > #endif
859 >  {
860 >    sendto_realops_flags(UMODE_ALL, L_ADMIN,
861 >                         "Link with %s established: (Capabilities: %s)",
862 >                         inpath_ip,show_capabilities(client_p));
863 >    /* Now show the masked hostname/IP to opers */
864 >    sendto_realops_flags(UMODE_ALL, L_OPER,
865 >                         "Link with %s established: (Capabilities: %s)",
866 >                         inpath,show_capabilities(client_p));
867 >    ilog(LOG_TYPE_IRCD, "Link with %s established: (Capabilities: %s)",
868 >         inpath_ip, show_capabilities(client_p));
869 >  }
870 >
871 >  fd_note(&client_p->localClient->fd, "Server: %s", client_p->name);
872  
873    /* Old sendto_serv_but_one() call removed because we now
874    ** need to send different names to different servers
# Line 1151 | Line 881 | server_estab(struct Client *client_p)
881      if (target_p == client_p)
882        continue;
883  
1154    if ((conf = target_p->serv->sconf) &&
1155         match(my_name_for_link(conf), client_p->name))
1156      continue;
1157
884      if (IsCapable(target_p, CAP_TS6) && HasID(client_p))
885        sendto_one(target_p, ":%s SID %s 2 %s :%s%s",
886                   me.id, client_p->name, client_p->id,
# Line 1185 | Line 911 | server_estab(struct Client *client_p)
911    **    is destroyed...)
912    */
913  
1188  conf = client_p->serv->sconf;
1189
914    DLINK_FOREACH_PREV(ptr, global_serv_list.tail)
915    {
916      target_p = ptr->data;
917  
918      /* target_p->from == target_p for target_p == client_p */
919 <    if (target_p->from == client_p)
1196 <      continue;
1197 <
1198 <    if (match(my_name_for_link(conf), target_p->name))
919 >    if (IsMe(target_p) || target_p->from == client_p)
920        continue;
921  
922      if (IsCapable(client_p, CAP_TS6))
# Line 1219 | Line 940 | server_estab(struct Client *client_p)
940    server_burst(client_p);
941   }
942  
1222 static void
1223 start_io(struct Client *server)
1224 {
1225  struct LocalUser *lserver = server->localClient;
1226  int alloclen = 1;
1227  char *buf;
1228  dlink_node *ptr;
1229  struct dbuf_block *block;
1230
1231  /* calculate how many bytes to allocate */
1232  if (IsCapable(server, CAP_ZIP))
1233    alloclen += 6;
1234 #ifdef HAVE_LIBCRYPTO
1235  if (IsCapable(server, CAP_ENC))
1236    alloclen += 16 + lserver->in_cipher->keylen + lserver->out_cipher->keylen;
1237 #endif
1238  alloclen += dbuf_length(&lserver->buf_recvq);
1239  alloclen += dlink_list_length(&lserver->buf_recvq.blocks) * 3;
1240  alloclen += dbuf_length(&lserver->buf_sendq);
1241  alloclen += dlink_list_length(&lserver->buf_sendq.blocks) * 3;
1242
1243  /* initialize servlink control sendq */
1244  lserver->slinkq = buf = MyMalloc(alloclen);
1245  lserver->slinkq_ofs = 0;
1246  lserver->slinkq_len = alloclen;
1247
1248  if (IsCapable(server, CAP_ZIP))
1249  {
1250    /* ziplink */
1251    *buf++ = SLINKCMD_SET_ZIP_OUT_LEVEL;
1252    *buf++ = 0; /* |          */
1253    *buf++ = 1; /* \ len is 1 */
1254    *buf++ = ConfigFileEntry.compression_level;
1255    *buf++ = SLINKCMD_START_ZIP_IN;
1256    *buf++ = SLINKCMD_START_ZIP_OUT;
1257  }
1258 #ifdef HAVE_LIBCRYPTO
1259  if (IsCapable(server, CAP_ENC))
1260  {
1261    /* Decryption settings */
1262    *buf++ = SLINKCMD_SET_CRYPT_IN_CIPHER;
1263    *buf++ = 0; /* /                     (upper 8-bits of len) */
1264    *buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */
1265    *buf++ = lserver->in_cipher->cipherid;
1266    *buf++ = SLINKCMD_SET_CRYPT_IN_KEY;
1267    *buf++ = 0; /* keylen < 256 */
1268    *buf++ = lserver->in_cipher->keylen;
1269    memcpy(buf, lserver->in_key, lserver->in_cipher->keylen);
1270    buf += lserver->in_cipher->keylen;
1271    /* Encryption settings */
1272    *buf++ = SLINKCMD_SET_CRYPT_OUT_CIPHER;
1273    *buf++ = 0; /* /                     (upper 8-bits of len) */
1274    *buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */
1275    *buf++ = lserver->out_cipher->cipherid;
1276    *buf++ = SLINKCMD_SET_CRYPT_OUT_KEY;
1277    *buf++ = 0; /* keylen < 256 */
1278    *buf++ = lserver->out_cipher->keylen;
1279    memcpy(buf, lserver->out_key, lserver->out_cipher->keylen);
1280    buf += lserver->out_cipher->keylen;
1281    *buf++ = SLINKCMD_START_CRYPT_IN;
1282    *buf++ = SLINKCMD_START_CRYPT_OUT;
1283  }
1284 #endif
1285
1286  /* pass the whole recvq to servlink */
1287  DLINK_FOREACH (ptr, lserver->buf_recvq.blocks.head)
1288  {
1289    block = ptr->data;
1290    *buf++ = SLINKCMD_INJECT_RECVQ;
1291    *buf++ = (block->size >> 8);
1292    *buf++ = (block->size & 0xff);
1293    memcpy(buf, &block->data[0], block->size);
1294    buf += block->size;
1295  }
1296
1297  dbuf_clear(&lserver->buf_recvq);
1298
1299  /* pass the whole sendq to servlink */
1300  DLINK_FOREACH (ptr, lserver->buf_sendq.blocks.head)
1301  {
1302    block = ptr->data;
1303    *buf++ = SLINKCMD_INJECT_SENDQ;
1304    *buf++ = (block->size >> 8);
1305    *buf++ = (block->size & 0xff);
1306    memcpy(buf, &block->data[0], block->size);
1307    buf += block->size;
1308  }
1309
1310  dbuf_clear(&lserver->buf_sendq);
1311
1312  /* start io */
1313  *buf++ = SLINKCMD_INIT;
1314
1315  /* schedule a write */
1316  send_queued_slink_write(server);
1317 }
1318
1319 /* fork_server()
1320 *
1321 * inputs       - struct Client *server
1322 * output       - success: 0 / failure: -1
1323 * side effect  - fork, and exec SERVLINK to handle this connection
1324 */
1325 static int
1326 fork_server(struct Client *server)
1327 {
1328 #ifndef HAVE_SOCKETPAIR
1329  return -1;
1330 #else
1331  int i;
1332  int slink_fds[2][2];
1333  /* 0? - ctrl  | 1? - data  
1334   * ?0 - child | ?1 - parent */
1335
1336  if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[0]) < 0)
1337    return -1;
1338  if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[1]) < 0)
1339    goto free_ctrl_fds;
1340
1341  if ((i = fork()) < 0)
1342  {
1343    close(slink_fds[1][0]);  close(slink_fds[1][1]);
1344    free_ctrl_fds:
1345    close(slink_fds[0][0]);  close(slink_fds[0][1]);
1346    return -1;
1347  }
1348
1349  if (i == 0)
1350  {
1351    char fd_str[3][6];   /* store 3x sizeof("65535") */
1352    char *kid_argv[7];
1353
1354 #ifdef O_ASYNC
1355    fcntl(server->localClient->fd.fd, F_SETFL,
1356          fcntl(server->localClient->fd.fd, F_GETFL, 0) & ~O_ASYNC);
1357 #endif
1358    close_fds(&server->localClient->fd);
1359    close(slink_fds[0][1]);
1360    close(slink_fds[1][1]);
1361
1362    sprintf(fd_str[0], "%d", slink_fds[0][0]);
1363    sprintf(fd_str[1], "%d", slink_fds[1][0]);
1364    sprintf(fd_str[2], "%d", server->localClient->fd.fd);
1365
1366    kid_argv[0] = "-slink";
1367    kid_argv[1] = kid_argv[2] = fd_str[0];  /* ctrl */
1368    kid_argv[3] = kid_argv[4] = fd_str[1];  /* data */
1369    kid_argv[5] = fd_str[2];    /* network */
1370    kid_argv[6] = NULL;
1371
1372    execv(ConfigFileEntry.servlink_path, kid_argv);
1373
1374    _exit(1);
1375  }
1376
1377  /* close the network fd and the child ends of the pipes */
1378  fd_close(&server->localClient->fd);
1379  close(slink_fds[0][0]);
1380  close(slink_fds[1][0]);
1381
1382  execute_callback(setup_socket_cb, slink_fds[0][1]);
1383  execute_callback(setup_socket_cb, slink_fds[1][1]);
1384
1385  fd_open(&server->localClient->ctrlfd, slink_fds[0][1], 1, "slink ctrl");
1386  fd_open(&server->localClient->fd, slink_fds[1][1], 1, "slink data");
1387
1388  read_ctrl_packet(&server->localClient->ctrlfd, server);
1389  read_packet(&server->localClient->fd, server);
1390
1391  return 0;
1392 #endif
1393 }
1394
943   /* server_burst()
944   *
945   * inputs       - struct Client pointer server
# Line 1440 | Line 988 | burst_all(struct Client *client_p)
988        burst_members(client_p, chptr);
989        send_channel_modes(client_p, chptr);
990  
991 <      if (IsCapable(client_p, CAP_TBURST) ||
1444 <          IsCapable(client_p, CAP_TB))
991 >      if (IsCapable(client_p, CAP_TBURST))
992          send_tb(client_p, chptr);
993      }
994    }
# Line 1452 | Line 999 | burst_all(struct Client *client_p)
999    {
1000      struct Client *target_p = ptr->data;
1001  
1002 <    if (!IsBursted(target_p) && target_p->from != client_p)
1002 >    if (!HasFlag(target_p, FLAGS_BURSTED) && target_p->from != client_p)
1003        sendnick_TS(client_p, target_p);
1004      
1005 <    ClearBursted(target_p);
1005 >    DelFlag(target_p, FLAGS_BURSTED);
1006    }
1007  
1008    /* We send the time we started the burst, and let the remote host determine an EOB time,
# Line 1473 | Line 1020 | burst_all(struct Client *client_p)
1020   *              - pointer to channel
1021   * output       - NONE
1022   * side effects - Called on a server burst when
1023 < *                server is CAP_TB|CAP_TBURST capable
1023 > *                server is CAP_TBURST capable
1024   */
1025   static void
1026   send_tb(struct Client *client_p, struct Channel *chptr)
# Line 1492 | Line 1039 | send_tb(struct Client *client_p, struct
1039     * for further information   -Michael
1040     */
1041    if (chptr->topic_time != 0)
1042 <  {
1043 <    if (IsCapable(client_p, CAP_TBURST))
1044 <      sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s",
1045 <                 me.name, (unsigned long)chptr->channelts, chptr->chname,
1046 <                 (unsigned long)chptr->topic_time,
1047 <                 chptr->topic_info ? chptr->topic_info : "",
1501 <                 chptr->topic ? chptr->topic : "");
1502 <    else if (IsCapable(client_p, CAP_TB))
1503 <    {
1504 <      if (ConfigChannel.burst_topicwho)
1505 <      {
1506 <        sendto_one(client_p, ":%s TB %s %lu %s :%s",
1507 <                   me.name, chptr->chname,
1508 <                   (unsigned long)chptr->topic_time,
1509 <                   chptr->topic_info, chptr->topic ? chptr->topic : "");
1510 <      }
1511 <      else
1512 <      {
1513 <        sendto_one(client_p, ":%s TB %s %lu :%s",
1514 <                   me.name, chptr->chname,
1515 <                   (unsigned long)chptr->topic_time,
1516 <                   chptr->topic ? chptr->topic : "");
1517 <      }
1518 <    }
1519 <  }
1042 >    sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s",
1043 >               ID_or_name(&me, client_p),
1044 >               (unsigned long)chptr->channelts, chptr->chname,
1045 >               (unsigned long)chptr->topic_time,
1046 >               chptr->topic_info,
1047 >               chptr->topic);
1048   }
1049  
1050   /* burst_members()
# Line 1538 | Line 1066 | burst_members(struct Client *client_p, s
1066      ms       = ptr->data;
1067      target_p = ms->client_p;
1068  
1069 <    if (!IsBursted(target_p))
1069 >    if (!HasFlag(target_p, FLAGS_BURSTED))
1070      {
1071 <      SetBursted(target_p);
1071 >      AddFlag(target_p, FLAGS_BURSTED);
1072  
1073        if (target_p->from != client_p)
1074          sendnick_TS(client_p, target_p);
# Line 1574 | Line 1102 | serv_connect(struct AccessItem *aconf, s
1102   {
1103    struct ConfItem *conf;
1104    struct Client *client_p;
1105 <  char buf[HOSTIPLEN];
1105 >  char buf[HOSTIPLEN + 1];
1106  
1107    /* conversion structs */
1108    struct sockaddr_in *v4;
1109    /* Make sure aconf is useful */
1110    assert(aconf != NULL);
1111  
1584  if(aconf == NULL)
1585    return (0);
1586
1112    /* XXX should be passing struct ConfItem in the first place */
1113    conf = unmap_conf_item(aconf);
1114  
1115    /* log */
1116 <  irc_getnameinfo((struct sockaddr*)&aconf->ipnum, aconf->ipnum.ss_len,
1117 <                  buf, HOSTIPLEN, NULL, 0, NI_NUMERICHOST);
1118 <  ilog(L_NOTICE, "Connect to %s[%s] @%s", aconf->user, aconf->host,
1116 >  getnameinfo((struct sockaddr *)&aconf->addr, aconf->addr.ss_len,
1117 >              buf, sizeof(buf), NULL, 0, NI_NUMERICHOST);
1118 >  ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, aconf->host,
1119         buf);
1120  
1121    /* Still processing a DNS lookup? -> exit */
# Line 1613 | Line 1138 | serv_connect(struct AccessItem *aconf, s
1138    /* Make sure this server isn't already connected
1139     * Note: aconf should ALWAYS be a valid C: line
1140     */
1141 <  if ((client_p = find_server(conf->name)) != NULL)
1141 >  if ((client_p = hash_find_server(conf->name)) != NULL)
1142    {
1143      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1144                           "Server %s already present from %s",
# Line 1636 | Line 1161 | serv_connect(struct AccessItem *aconf, s
1161    strlcpy(client_p->host, aconf->host, sizeof(client_p->host));
1162  
1163    /* We already converted the ip once, so lets use it - stu */
1164 <  strlcpy(client_p->sockhost, buf, HOSTIPLEN);
1164 >  strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost));
1165  
1166    /* create a socket for the server connection */
1167 <  if (comm_open(&client_p->localClient->fd, aconf->ipnum.ss.ss_family,
1167 >  if (comm_open(&client_p->localClient->fd, aconf->addr.ss.ss_family,
1168                  SOCK_STREAM, 0, NULL) < 0)
1169    {
1170      /* Eek, failure to create the socket */
# Line 1694 | Line 1219 | serv_connect(struct AccessItem *aconf, s
1219    switch (aconf->aftype)
1220    {
1221      case AF_INET:
1222 <      v4 = (struct sockaddr_in*)&aconf->my_ipnum;
1222 >      v4 = (struct sockaddr_in*)&aconf->bind;
1223        if (v4->sin_addr.s_addr != 0)
1224        {
1225          struct irc_ssaddr ipn;
1226          memset(&ipn, 0, sizeof(struct irc_ssaddr));
1227          ipn.ss.ss_family = AF_INET;
1228          ipn.ss_port = 0;
1229 <        memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr));
1229 >        memcpy(&ipn, &aconf->bind, sizeof(struct irc_ssaddr));
1230          comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
1231                           (struct sockaddr *)&ipn, ipn.ss_len,
1232                           serv_connect_callback, client_p, aconf->aftype,
# Line 1732 | Line 1257 | serv_connect(struct AccessItem *aconf, s
1257          struct sockaddr_in6 *v6conf;
1258  
1259          memset(&ipn, 0, sizeof(struct irc_ssaddr));
1260 <        v6conf = (struct sockaddr_in6 *)&aconf->my_ipnum;
1260 >        v6conf = (struct sockaddr_in6 *)&aconf->bind;
1261          v6 = (struct sockaddr_in6 *)&ipn;
1262  
1263          if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr,
1264                     sizeof(struct in6_addr)) != 0)
1265          {
1266 <          memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr));
1266 >          memcpy(&ipn, &aconf->bind, sizeof(struct irc_ssaddr));
1267            ipn.ss.ss_family = AF_INET6;
1268            ipn.ss_port = 0;
1269            comm_connect_tcp(&client_p->localClient->fd,
# Line 1769 | Line 1294 | serv_connect(struct AccessItem *aconf, s
1294    return (1);
1295   }
1296  
1297 + #ifdef HAVE_LIBCRYPTO
1298 + static void
1299 + finish_ssl_server_handshake(struct Client *client_p)
1300 + {
1301 +  struct ConfItem *conf=NULL;
1302 +  struct AccessItem *aconf=NULL;
1303 +
1304 +  conf = find_conf_name(&client_p->localClient->confs,
1305 +                        client_p->name, SERVER_TYPE);
1306 +  if (conf == NULL)
1307 +  {
1308 +    sendto_realops_flags(UMODE_ALL, L_ADMIN,
1309 +                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
1310 +    sendto_realops_flags(UMODE_ALL, L_OPER,
1311 +                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
1312 +
1313 +    exit_client(client_p, &me, "Lost connect{} block");
1314 +    return;
1315 +  }
1316 +
1317 +  aconf = map_to_conf(conf);
1318 +
1319 +  /* jdc -- Check and send spasswd, not passwd. */
1320 +  if (!EmptyString(aconf->spasswd))
1321 +    sendto_one(client_p, "PASS %s TS %d %s",
1322 +               aconf->spasswd, TS_CURRENT, me.id);
1323 +
1324 +  send_capabilities(client_p, aconf,
1325 +                   (IsConfTopicBurst(aconf) ? CAP_TBURST : 0));
1326 +
1327 +  sendto_one(client_p, "SERVER %s 1 :%s%s",
1328 +             me.name, ConfigServerHide.hidden ? "(H) " : "",
1329 +             me.info);
1330 +
1331 +  /* If we've been marked dead because a send failed, just exit
1332 +   * here now and save everyone the trouble of us ever existing.
1333 +   */
1334 +  if (IsDead(client_p))
1335 +  {
1336 +      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1337 +                           "%s[%s] went dead during handshake",
1338 +                           client_p->name,
1339 +                           client_p->host);
1340 +      sendto_realops_flags(UMODE_ALL, L_OPER,
1341 +                           "%s went dead during handshake", client_p->name);
1342 +      return;
1343 +  }
1344 +
1345 +  /* don't move to serv_list yet -- we haven't sent a burst! */
1346 +  /* If we get here, we're ok, so lets start reading some data */
1347 +  comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ, read_packet, client_p, 0);
1348 + }
1349 +
1350 + static void
1351 + ssl_server_handshake(fde_t *fd, struct Client *client_p)
1352 + {
1353 +  int ret;
1354 +  int err;
1355 +
1356 +  ret = SSL_connect(client_p->localClient->fd.ssl);
1357 +
1358 +  if (ret <= 0)
1359 +  {
1360 +    switch ((err = SSL_get_error(client_p->localClient->fd.ssl, ret)))
1361 +    {
1362 +      case SSL_ERROR_WANT_WRITE:
1363 +        comm_setselect(&client_p->localClient->fd, COMM_SELECT_WRITE,
1364 +                       (PF *)ssl_server_handshake, client_p, 0);
1365 +        return;
1366 +      case SSL_ERROR_WANT_READ:
1367 +        comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ,
1368 +                       (PF *)ssl_server_handshake, client_p, 0);
1369 +        return;
1370 +      default:
1371 +      {
1372 +        const char *sslerr = ERR_error_string(ERR_get_error(), NULL);
1373 +        sendto_realops_flags(UMODE_ALL, L_ALL,
1374 +                             "Error connecting to %s: %s", client_p->name,
1375 +                             sslerr ? sslerr : "unknown SSL error");
1376 +        exit_client(client_p, client_p, "Error during SSL handshake");
1377 +        return;
1378 +      }
1379 +    }
1380 +  }
1381 +
1382 +  finish_ssl_server_handshake(client_p);
1383 + }
1384 +
1385 + static void
1386 + ssl_connect_init(struct Client *client_p, struct AccessItem *aconf, fde_t *fd)
1387 + {
1388 +  if ((client_p->localClient->fd.ssl = SSL_new(ServerInfo.client_ctx)) == NULL)
1389 +  {
1390 +    ilog(LOG_TYPE_IRCD, "SSL_new() ERROR! -- %s",
1391 +         ERR_error_string(ERR_get_error(), NULL));
1392 +    SetDead(client_p);
1393 +    exit_client(client_p, client_p, "SSL_new failed");
1394 +    return;
1395 +  }
1396 +
1397 +  SSL_set_fd(fd->ssl, fd->fd);
1398 +
1399 +  if (!EmptyString(aconf->cipher_list))
1400 +    SSL_set_cipher_list(client_p->localClient->fd.ssl, aconf->cipher_list);
1401 +
1402 +  ssl_server_handshake(NULL, client_p);
1403 + }
1404 + #endif
1405 +
1406   /* serv_connect_callback() - complete a server connection.
1407   *
1408   * This routine is called after the server connection attempt has
# Line 1832 | Line 1466 | serv_connect_callback(fde_t *fd, int sta
1466      return;
1467    }
1468  
1469 <  aconf = (struct AccessItem *)map_to_conf(conf);
1469 >  aconf = map_to_conf(conf);
1470    /* Next, send the initial handshake */
1471    SetHandshake(client_p);
1472  
1473   #ifdef HAVE_LIBCRYPTO
1474 <  /* Handle all CRYPTLINK links in cryptlink_init */
1841 <  if (IsConfCryptLink(aconf))
1474 >  if (IsConfSSL(aconf))
1475    {
1476 <    cryptlink_init(client_p, conf, fd);
1476 >    ssl_connect_init(client_p, aconf, fd);
1477      return;
1478    }
1479   #endif
1480  
1481    /* jdc -- Check and send spasswd, not passwd. */
1482 <  if (!EmptyString(aconf->spasswd) && (me.id[0] != '\0'))
1850 <      /* Send TS 6 form only if id */
1482 >  if (!EmptyString(aconf->spasswd))
1483      sendto_one(client_p, "PASS %s TS %d %s",
1484                 aconf->spasswd, TS_CURRENT, me.id);
1853  else
1854    sendto_one(client_p, "PASS %s TS 5",
1855               aconf->spasswd);
1485  
1486 <  /* Pass my info to the new server
1487 <   *
1859 <   * If this is a HUB, pass on CAP_HUB
1860 <   * Pass on ZIP if supported
1861 <   * Pass on TB if supported.
1862 <   * - Dianora
1863 <   */
1864 <  send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
1865 <                    | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1866 <                    | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0);
1486 >  send_capabilities(client_p, aconf,
1487 >                   (IsConfTopicBurst(aconf) ? CAP_TBURST : 0));
1488  
1489    sendto_one(client_p, "SERVER %s 1 :%s%s",
1490 <             my_name_for_link(conf),
1870 <             ConfigServerHide.hidden ? "(H) " : "",
1490 >             me.name, ConfigServerHide.hidden ? "(H) " : "",
1491               me.info);
1492  
1493    /* If we've been marked dead because a send failed, just exit
# Line 1900 | Line 1520 | find_servconn_in_progress(const char *na
1520      cptr = ptr->data;
1521  
1522      if (cptr && cptr->name[0])
1523 <      if (match(cptr->name, name) || match(name, cptr->name))
1523 >      if (match(name, cptr->name))
1524          return cptr;
1525    }
1526    
1527    return NULL;
1528   }
1909
1910 #ifdef HAVE_LIBCRYPTO
1911 /*
1912 * sends a CRYPTLINK SERV command.
1913 */
1914 void
1915 cryptlink_init(struct Client *client_p, struct ConfItem *conf, fde_t *fd)
1916 {
1917  struct AccessItem *aconf;
1918  char *encrypted;
1919  unsigned char *key_to_send;
1920  char randkey[CIPHERKEYLEN];
1921  int enc_len;
1922
1923  /* get key */
1924  if ((!ServerInfo.rsa_private_key) ||
1925      (!RSA_check_key(ServerInfo.rsa_private_key)) )
1926  {
1927    cryptlink_error(client_p, "SERV", "Invalid RSA private key",
1928                                      "Invalid RSA private key");
1929    return;
1930  }
1931
1932  aconf = (struct AccessItem *)map_to_conf(conf);
1933
1934  if (aconf->rsa_public_key == NULL)
1935  {
1936    cryptlink_error(client_p, "SERV", "Invalid RSA public key",
1937                                      "Invalid RSA public key");
1938    return;
1939  }
1940
1941  if (get_randomness((unsigned char *)randkey, CIPHERKEYLEN) != 1)
1942  {
1943    cryptlink_error(client_p, "SERV", "Couldn't generate keyphrase",
1944                                      "Couldn't generate keyphrase");
1945    return;
1946  }
1947
1948  encrypted = MyMalloc(RSA_size(ServerInfo.rsa_private_key));
1949  enc_len   = RSA_public_encrypt(CIPHERKEYLEN,
1950                                 (unsigned char *)randkey,
1951                                 (unsigned char *)encrypted,
1952                                 aconf->rsa_public_key,
1953                                 RSA_PKCS1_PADDING);
1954
1955  memcpy(client_p->localClient->in_key, randkey, CIPHERKEYLEN);
1956
1957  if (enc_len <= 0)
1958  {
1959    report_crypto_errors();
1960    MyFree(encrypted);
1961    cryptlink_error(client_p, "SERV", "Couldn't encrypt data",
1962                                      "Couldn't encrypt data");
1963    return;
1964  }
1965
1966  if (!(base64_block(&key_to_send, encrypted, enc_len)))
1967  {
1968    MyFree(encrypted);
1969    cryptlink_error(client_p, "SERV", "Couldn't base64 encode key",
1970                                      "Couldn't base64 encode key");
1971    return;
1972  }
1973
1974  send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
1975                    | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1976                    | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), CAP_ENC_MASK);
1977
1978  if (me.id[0])
1979    sendto_one(client_p, "PASS . TS %d %s", TS_CURRENT, me.id);
1980
1981  sendto_one(client_p, "CRYPTLINK SERV %s %s :%s%s",
1982             my_name_for_link(conf), key_to_send,
1983             ConfigServerHide.hidden ? "(H) " : "", me.info);
1984
1985  SetHandshake(client_p);
1986  SetWaitAuth(client_p);
1987
1988  MyFree(encrypted);
1989  MyFree(key_to_send);
1990
1991  if (IsDead(client_p))
1992    cryptlink_error(client_p, "SERV", "Went dead during handshake",
1993                                      "Went dead during handshake");
1994  else if (fd != NULL)
1995    /* If we get here, we're ok, so lets start reading some data */
1996    comm_setselect(fd, COMM_SELECT_READ, read_packet, client_p, 0);
1997 }
1998
1999 void
2000 cryptlink_error(struct Client *client_p, const char *type,
2001                const char *reason, const char *client_reason)
2002 {
2003  sendto_realops_flags(UMODE_ALL, L_ADMIN, "%s: CRYPTLINK %s error - %s",
2004                       get_client_name(client_p, SHOW_IP), type, reason);
2005  sendto_realops_flags(UMODE_ALL, L_OPER,  "%s: CRYPTLINK %s error - %s",
2006                       get_client_name(client_p, MASK_IP), type, reason);
2007  ilog(L_ERROR, "%s: CRYPTLINK %s error - %s",
2008       get_client_name(client_p, SHOW_IP), type, reason);
2009
2010  /* If client_reason isn't NULL, then exit the client with the message
2011   * defined in the call.
2012   */
2013  if ((client_reason != NULL) && (!IsDead(client_p)))
2014    exit_client(client_p, &me, client_reason);
2015 }
2016
2017 static char base64_chars[] =
2018        "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
2019
2020 static char base64_values[] =
2021 {
2022 /* 00-15   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2023 /* 16-31   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2024 /* 32-47   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63,
2025 /* 48-63   */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1,  0, -1, -1,
2026 /* 64-79   */ -1,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,
2027 /* 80-95   */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1,
2028 /* 96-111  */ -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
2029 /* 112-127 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1,
2030 /* 128-143 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2031 /* 144-159 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2032 /* 160-175 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2033 /* 186-191 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2034 /* 192-207 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2035 /* 208-223 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2036 /* 224-239 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2037 /* 240-255 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1
2038 };
2039
2040 /*
2041 * base64_block will allocate and return a new block of memory
2042 * using MyMalloc().  It should be freed after use.
2043 */
2044 int
2045 base64_block(unsigned char **output, char *data, int len)
2046 {
2047  unsigned char *out;
2048  unsigned char *in = (unsigned char*)data;
2049  unsigned long int q_in;
2050  int i;
2051  int count = 0;
2052
2053  out = MyMalloc(((((len + 2) - ((len + 2) % 3)) / 3) * 4) + 1);
2054
2055  /* process 24 bits at a time */
2056  for( i = 0; i < len; i += 3)
2057  {
2058    q_in = 0;
2059
2060    if ( i + 2 < len )
2061    {
2062      q_in  = (in[i+2] & 0xc0) << 2;
2063      q_in |=  in[i+2];
2064    }
2065
2066    if ( i + 1 < len )
2067    {
2068      q_in |= (in[i+1] & 0x0f) << 10;
2069      q_in |= (in[i+1] & 0xf0) << 12;
2070    }
2071
2072    q_in |= (in[i]   & 0x03) << 20;
2073    q_in |=  in[i]           << 22;
2074
2075    q_in &= 0x3f3f3f3f;
2076
2077    out[count++] = base64_chars[((q_in >> 24)       )];
2078    out[count++] = base64_chars[((q_in >> 16) & 0xff)];
2079    out[count++] = base64_chars[((q_in >>  8) & 0xff)];
2080    out[count++] = base64_chars[((q_in      ) & 0xff)];
2081  }
2082  if ( (i - len) > 0 )
2083  {
2084    out[count-1] = '=';
2085    if ( (i - len) > 1 )
2086      out[count-2] = '=';
2087  }
2088
2089  out[count] = '\0';
2090  *output = out;
2091  return (count);
2092 }
2093
2094 /*
2095 * unbase64_block will allocate and return a new block of memory
2096 * using MyMalloc().  It should be freed after use.
2097 */
2098 int
2099 unbase64_block(unsigned char **output, char *data, int len)
2100 {
2101  unsigned char *out;
2102  unsigned char *in = (unsigned char*)data;
2103  unsigned long int q_in;
2104  int i;
2105  int count = 0;
2106
2107  if ((len % 4) != 0)
2108    return (0);
2109
2110  out = MyMalloc(((len / 4) * 3) + 1);
2111
2112  /* process 32 bits at a time */
2113  for( i = 0; (i + 3) < len; i+=4)
2114  {
2115    /* compress input (chars a, b, c and d) as follows:
2116     * (after converting ascii -> base64 value)
2117     *
2118     * |00000000aaaaaabbbbbbccccccdddddd|
2119     * |  765432  107654  321076  543210|
2120     */
2121
2122    q_in = 0;
2123
2124    if (base64_values[in[i+3]] > -1)
2125      q_in |= base64_values[in[i+3]]      ;
2126    if (base64_values[in[i+2]] > -1)
2127      q_in |= base64_values[in[i+2]] <<  6;
2128    if (base64_values[in[i+1]] > -1)
2129      q_in |= base64_values[in[i+1]] << 12;
2130    if (base64_values[in[i  ]] > -1)
2131      q_in |= base64_values[in[i  ]] << 18;
2132
2133    out[count++] = (q_in >> 16) & 0xff;
2134    out[count++] = (q_in >>  8) & 0xff;
2135    out[count++] = (q_in      ) & 0xff;
2136  }
2137
2138  if (in[i-1] == '=') count--;
2139  if (in[i-2] == '=') count--;
2140
2141  out[count] = '\0';
2142  *output = out;
2143  return (count);
2144 }
2145
2146 #endif /* HAVE_LIBCRYPTO */
2147

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)