ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/src/server.c
(Generate patch)

Comparing:
ircd-hybrid-7.3/src/s_serv.c (file contents), Revision 1118 by michael, Thu Jan 6 13:39:10 2011 UTC vs.
ircd-hybrid/branches/8.2.x/src/server.c (file contents), Revision 3452 by michael, Thu May 1 19:20:08 2014 UTC

# Line 1 | Line 1
1   /*
2 < *  ircd-hybrid: an advanced Internet Relay Chat Daemon(ircd).
3 < *  s_serv.c: Server related functions.
2 > *  ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3   *
4 < *  Copyright (C) 2005 by the past and present ircd coders, and others.
4 > *  Copyright (c) 1997-2014 ircd-hybrid development team
5   *
6   *  This program is free software; you can redistribute it and/or modify
7   *  it under the terms of the GNU General Public License as published by
# Line 18 | Line 17
17   *  along with this program; if not, write to the Free Software
18   *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
19   *  USA
20 < *
21 < *  $Id$
20 > */
21 >
22 > /*! \file s_serv.c
23 > * \brief Server related functions.
24 > * \version $Id$
25   */
26  
27   #include "stdinc.h"
# Line 28 | Line 30
30   #include "rsa.h"
31   #endif
32   #include "list.h"
31 #include "channel.h"
32 #include "channel_mode.h"
33   #include "client.h"
34 #include "common.h"
35 #include "dbuf.h"
34   #include "event.h"
37 #include "fdlist.h"
35   #include "hash.h"
36   #include "irc_string.h"
40 #include "inet_misc.h"
41 #include "sprintf_irc.h"
37   #include "ircd.h"
38   #include "ircd_defs.h"
39   #include "s_bsd.h"
45 #include "irc_getnameinfo.h"
40   #include "numeric.h"
41   #include "packet.h"
42 < #include "irc_res.h"
43 < #include "s_conf.h"
44 < #include "s_serv.h"
45 < #include "s_log.h"
52 < #include "s_user.h"
42 > #include "conf.h"
43 > #include "server.h"
44 > #include "log.h"
45 > #include "user.h"
46   #include "send.h"
47   #include "memory.h"
48 < #include "channel.h" /* chcap_usage_counts stuff...*/
48 > #include "channel.h"
49 > #include "parse.h"
50  
51   #define MIN_CONN_FREQ 300
52  
53 + dlink_list flatten_links;
54   static dlink_list cap_list = { NULL, NULL, 0 };
60 static void server_burst(struct Client *);
61 static int fork_server(struct Client *);
62 static void burst_all(struct Client *);
63 static void send_tb(struct Client *client_p, struct Channel *chptr);
64
55   static CNCB serv_connect_callback;
56  
67 static void start_io(struct Client *);
68 static void burst_members(struct Client *, struct Channel *);
69
70 static SlinkRplHnd slink_error;
71 static SlinkRplHnd slink_zipstats;
72
73
74 #ifdef HAVE_LIBCRYPTO
75 struct EncCapability CipherTable[] =
76 {
77 #ifdef HAVE_EVP_BF_CFB
78  { "BF/168",     CAP_ENC_BF_168,     24, CIPHER_BF     },
79  { "BF/128",     CAP_ENC_BF_128,     16, CIPHER_BF     },
80 #endif
81 #ifdef HAVE_EVP_CAST5_CFB
82  { "CAST/128",   CAP_ENC_CAST_128,   16, CIPHER_CAST   },
83 #endif
84 #ifdef HAVE_EVP_IDEA_CFB
85  { "IDEA/128",   CAP_ENC_IDEA_128,   16, CIPHER_IDEA   },
86 #endif
87 #ifdef HAVE_EVP_RC5_32_12_16_CFB
88  { "RC5.16/128", CAP_ENC_RC5_16_128, 16, CIPHER_RC5_16 },
89  { "RC5.12/128", CAP_ENC_RC5_12_128, 16, CIPHER_RC5_12 },
90  { "RC5.8/128",  CAP_ENC_RC5_8_128,  16, CIPHER_RC5_8  },
91 #endif
92 #ifdef HAVE_EVP_DES_EDE3_CFB
93  { "3DES/168",   CAP_ENC_3DES_168,   24, CIPHER_3DES   },
94 #endif
95 #ifdef HAVE_EVP_DES_CFB
96  { "DES/56",     CAP_ENC_DES_56,      8, CIPHER_DES    },
97 #endif
98  { 0,            0,                   0, 0             }
99 };
100 #endif
101
102 struct SlinkRplDef slinkrpltab[] = {
103  { SLINKRPL_ERROR,    slink_error,    SLINKRPL_FLAG_DATA },
104  { SLINKRPL_ZIPSTATS, slink_zipstats, SLINKRPL_FLAG_DATA },
105  { 0,                 0,              0 },
106 };
107
108
109 void
110 slink_error(unsigned int rpl, unsigned int len, unsigned char *data,
111            struct Client *server_p)
112 {
113  assert(rpl == SLINKRPL_ERROR);
114  assert(len < 256);
115
116  data[len-1] = '\0';
117
118  sendto_realops_flags(UMODE_ALL, L_ALL, "SlinkError for %s: %s",
119                       server_p->name, data);
120  /* XXX should this be exit_client? */
121  exit_client(server_p, &me, "servlink error -- terminating link");
122 }
123
124 void
125 slink_zipstats(unsigned int rpl, unsigned int len, unsigned char *data,
126               struct Client *server_p)
127 {
128  struct ZipStats zipstats;
129  uint64_t in = 0, in_wire = 0, out = 0, out_wire = 0;
130  int i = 0;
131
132  assert(rpl == SLINKRPL_ZIPSTATS);
133  assert(len == 16);
134  assert(IsCapable(server_p, CAP_ZIP));
135
136  /* Yes, it needs to be done this way, no we cannot let the compiler
137   * work with the pointer to the structure.  This works around a GCC
138   * bug on SPARC that affects all versions at the time of this writing.
139   * I will feed you to the creatures living in RMS's beard if you do
140   * not leave this as is, without being sure that you are not causing
141   * regression for most of our installed SPARC base.
142   * -jmallett, 04/27/2002
143   */
144  memcpy(&zipstats, &server_p->localClient->zipstats, sizeof(struct ZipStats));
145
146  in |= (data[i++] << 24);
147  in |= (data[i++] << 16);
148  in |= (data[i++] <<  8);
149  in |= (data[i++]      );
150
151  in_wire |= (data[i++] << 24);
152  in_wire |= (data[i++] << 16);
153  in_wire |= (data[i++] <<  8);
154  in_wire |= (data[i++]      );
155
156  out |= (data[i++] << 24);
157  out |= (data[i++] << 16);
158  out |= (data[i++] <<  8);
159  out |= (data[i++]      );
160
161  out_wire |= (data[i++] << 24);
162  out_wire |= (data[i++] << 16);
163  out_wire |= (data[i++] <<  8);
164  out_wire |= (data[i++]      );
165
166  /* This macro adds b to a if a plus b is not an overflow, and sets the
167   * value of a to b if it is.
168   * Add and Set if No Overflow.
169   */
170 #define ASNO(a, b) a = (a + b >= a ? a + b : b)
171
172  ASNO(zipstats.in, in);
173  ASNO(zipstats.out, out);
174  ASNO(zipstats.in_wire, in_wire);
175  ASNO(zipstats.out_wire, out_wire);
176
177  if (zipstats.in > 0)
178    zipstats.in_ratio = (((double)(zipstats.in - zipstats.in_wire) /
179                         (double)zipstats.in) * 100.00);
180  else
181    zipstats.in_ratio = 0;
182
183  if (zipstats.out > 0)
184    zipstats.out_ratio = (((double)(zipstats.out - zipstats.out_wire) /
185                          (double)zipstats.out) * 100.00);
186  else
187    zipstats.out_ratio = 0;
188
189  memcpy(&server_p->localClient->zipstats, &zipstats, sizeof(struct ZipStats));
190 }
191
192 void
193 collect_zipstats(void *unused)
194 {
195  dlink_node *ptr = NULL;
196
197  DLINK_FOREACH(ptr, serv_list.head)
198  {
199    struct Client *target_p = ptr->data;
200
201    if (IsCapable(target_p, CAP_ZIP))
202    {
203      /* only bother if we haven't already got something queued... */
204      if (!target_p->localClient->slinkq)
205      {
206        target_p->localClient->slinkq     = MyMalloc(1); /* sigh.. */
207        target_p->localClient->slinkq[0]  = SLINKCMD_ZIPSTATS;
208        target_p->localClient->slinkq_ofs = 0;
209        target_p->localClient->slinkq_len = 1;
210        send_queued_slink_write(target_p);
211      }
212    }
213  }
214 }
215
216 #ifdef HAVE_LIBCRYPTO
217 struct EncCapability *
218 check_cipher(struct Client *client_p, struct AccessItem *aconf)
219 {
220  struct EncCapability *epref = NULL;
221
222  /* Use connect{} specific info if available */
223  if (aconf->cipher_preference)
224    epref = aconf->cipher_preference;
225  else if (ConfigFileEntry.default_cipher_preference)
226    epref = ConfigFileEntry.default_cipher_preference;
227
228  /*
229   * If the server supports the capability in hand, return the matching
230   * conf struct.  Otherwise, return NULL (an error).
231   */
232  if (epref && IsCapableEnc(client_p, epref->cap))
233    return epref;
234
235  return NULL;
236 }
237 #endif /* HAVE_LIBCRYPTO */
57  
58   /*
59   * write_links_file
# Line 245 | Line 64 | check_cipher(struct Client *client_p, st
64   *                but in no particular order.
65   */
66   void
67 < write_links_file(void* notused)
67 > write_links_file(void *notused)
68   {
69 <  MessageFileLine *next_mptr = 0;
70 <  MessageFileLine *mptr = 0;
71 <  MessageFileLine *currentMessageLine = 0;
253 <  MessageFileLine *newMessageLine = 0;
254 <  MessageFile *MessageFileptr;
255 <  const char *p;
256 <  FBFILE *file;
257 <  char buff[512];
258 <  dlink_node *ptr;
69 >  FILE *file = NULL;
70 >  dlink_node *ptr = NULL, *ptr_next = NULL;
71 >  char buff[IRCD_BUFSIZE] = "";
72  
73 <  MessageFileptr = &ConfigFileEntry.linksfile;
261 <
262 <  if ((file = fbopen(MessageFileptr->fileName, "w")) == NULL)
73 >  if ((file = fopen(LIPATH, "w")) == NULL)
74      return;
75  
76 <  for (mptr = MessageFileptr->contentsOfFile; mptr; mptr = next_mptr)
76 >  DLINK_FOREACH_SAFE(ptr, ptr_next, flatten_links.head)
77    {
78 <    next_mptr = mptr->next;
79 <    MyFree(mptr);
78 >    dlinkDelete(ptr, &flatten_links);
79 >    MyFree(ptr->data);
80 >    free_dlink_node(ptr);
81    }
82  
271  MessageFileptr->contentsOfFile = NULL;
272  currentMessageLine             = NULL;
273
83    DLINK_FOREACH(ptr, global_serv_list.head)
84    {
85 <    size_t nbytes = 0;
277 <    struct Client *target_p = ptr->data;
85 >    const struct Client *target_p = ptr->data;
86  
87 <    /* skip ourselves, we send ourselves in /links */
88 <    if (IsMe(target_p))
87 >    /*
88 >     * Skip hidden servers, aswell as ourselves, since we already send
89 >     * ourselves in /links
90 >     */
91 >    if (IsHidden(target_p) || IsMe(target_p))
92        continue;
93  
94 <    /* skip hidden servers */
284 <    if (IsHidden(target_p) && !ConfigServerHide.disable_hidden)
94 >    if (HasFlag(target_p, FLAGS_SERVICE) && ConfigServerHide.hide_services)
95        continue;
96  
97 <    if (target_p->info[0])
98 <      p = target_p->info;
289 <    else
290 <      p = "(Unknown Location)";
291 <
292 <    newMessageLine = MyMalloc(sizeof(MessageFileLine));
293 <
294 <    /* Attempt to format the file in such a way it follows the usual links output
97 >    /*
98 >     * Attempt to format the file in such a way it follows the usual links output
99       * ie  "servername uplink :hops info"
100       * Mostly for aesthetic reasons - makes it look pretty in mIRC ;)
101       * - madmax
102       */
103 +    snprintf(buff, sizeof(buff), "%s %s :1 %s",   target_p->name,
104 +             me.name, target_p->info);
105 +    dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links);
106 +    snprintf(buff, sizeof(buff), "%s %s :1 %s\n", target_p->name,
107 +             me.name, target_p->info);
108  
109 <    /*
110 <     * For now, check this ircsprintf wont overflow - it shouldnt on a
302 <     * default config but it is configurable..
303 <     * This should be changed to an snprintf at some point, but I'm wanting to
304 <     * know if this is a cause of a bug - cryogen
305 <     */
306 <    assert(strlen(target_p->name) + strlen(me.name) + 6 + strlen(p) <=
307 <            MESSAGELINELEN);
308 <    ircsprintf(newMessageLine->line, "%s %s :1 %s",
309 <               target_p->name, me.name, p);
310 <    newMessageLine->next = NULL;
109 >    fputs(buff, file);
110 >  }
111  
112 <    if (MessageFileptr->contentsOfFile)
113 <    {
114 <      if (currentMessageLine)
115 <        currentMessageLine->next = newMessageLine;
116 <      currentMessageLine = newMessageLine;
117 <    }
118 <    else
119 <    {
120 <      MessageFileptr->contentsOfFile = newMessageLine;
121 <      currentMessageLine = newMessageLine;
122 <    }
112 >  fclose(file);
113 > }
114 >
115 > void
116 > read_links_file(void)
117 > {
118 >  FILE *file = NULL;
119 >  char *p = NULL;
120 >  char buff[IRCD_BUFSIZE] = "";
121 >
122 >  if ((file = fopen(LIPATH, "r")) == NULL)
123 >    return;
124 >
125 >  while (fgets(buff, sizeof(buff), file))
126 >  {
127 >    if ((p = strchr(buff, '\n')))
128 >      *p = '\0';
129  
130 <    nbytes = ircsprintf(buff, "%s %s :1 %s\n", target_p->name, me.name, p);
325 <    fbputs(buff, file, nbytes);
130 >    dlinkAddTail(xstrdup(buff), make_dlink_node(), &flatten_links);
131    }
132  
133 <  fbclose(file);
133 >  fclose(file);
134   }
135  
136   /* hunt_server()
# Line 348 | Line 153 | write_links_file(void* notused)
153   *      returns: (see #defines)
154   */
155   int
156 < hunt_server(struct Client *client_p, struct Client *source_p, const char *command,
157 <            int server, int parc, char *parv[])
156 > hunt_server(struct Client *source_p, const char *command,
157 >            const int server, const int parc, char *parv[])
158   {
159    struct Client *target_p = NULL;
160    struct Client *target_tmp = NULL;
161    dlink_node *ptr;
357  int wilds;
162  
163 <  /* Assume it's me, if no server
164 <   */
165 <  if (parc <= server || EmptyString(parv[server]) ||
166 <      match(me.name, parv[server]) ||
167 <      match(parv[server], me.name) ||
168 <      !strcmp(parv[server], me.id))
365 <    return(HUNTED_ISME);
163 >  /* Assume it's me, if no server */
164 >  if (parc <= server || EmptyString(parv[server]))
165 >    return HUNTED_ISME;
166 >
167 >  if (!strcmp(parv[server], me.id) || !match(parv[server], me.name))
168 >    return HUNTED_ISME;
169  
170    /* These are to pickup matches that would cause the following
171     * message to go in the wrong direction while doing quick fast
172     * non-matching lookups.
173     */
174    if (MyClient(source_p))
175 <    target_p = find_client(parv[server]);
175 >    target_p = hash_find_client(parv[server]);
176    else
177 <    target_p = find_person(client_p, parv[server]);
177 >    target_p = find_person(source_p, parv[server]);
178  
179    if (target_p)
180      if (target_p->from == source_p->from && !MyConnect(target_p))
181        target_p = NULL;
182  
183 <  if (target_p == NULL && (target_p = find_server(parv[server])))
183 >  if (target_p == NULL && (target_p = hash_find_server(parv[server])))
184      if (target_p->from == source_p->from && !MyConnect(target_p))
185        target_p = NULL;
186  
384  collapse(parv[server]);
385  wilds = (strchr(parv[server], '?') || strchr(parv[server], '*'));
386
187    /* Again, if there are no wild cards involved in the server
188     * name, use the hash lookup
189     */
190    if (target_p == NULL)
191    {
192 <    if (!wilds)
192 >    if (!has_wildcards(parv[server]))
193      {
194 <      if (!(target_p = find_server(parv[server])))
194 >      if (!(target_p = hash_find_server(parv[server])))
195        {
196 <        sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
197 <                   me.name, parv[0], parv[server]);
398 <        return(HUNTED_NOSUCH);
196 >        sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]);
197 >        return HUNTED_NOSUCH;
198        }
199      }
200      else
# Line 404 | Line 203 | hunt_server(struct Client *client_p, str
203        {
204          target_tmp = ptr->data;
205  
206 <        if (match(parv[server], target_tmp->name))
206 >        if (!match(parv[server], target_tmp->name))
207          {
208            if (target_tmp->from == source_p->from && !MyConnect(target_tmp))
209              continue;
210            target_p = ptr->data;
211  
212 <          if (IsRegistered(target_p) && (target_p != client_p))
212 >          if (IsRegistered(target_p) && (target_p != source_p->from))
213              break;
214          }
215        }
216      }
217    }
218  
219 <  if (target_p != NULL)
219 >  if (target_p)
220    {
221 <    if(!IsRegistered(target_p))
221 >    if (!IsRegistered(target_p))
222      {
223 <      sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
425 <                 me.name, parv[0], parv[server]);
223 >      sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]);
224        return HUNTED_NOSUCH;
225      }
226  
227      if (IsMe(target_p) || MyClient(target_p))
228        return HUNTED_ISME;
229  
230 <    if (!match(target_p->name, parv[server]))
230 >    if (match(target_p->name, parv[server]))
231        parv[server] = target_p->name;
232  
233      /* This is a little kludgy but should work... */
234 <    if (IsClient(source_p) &&
437 <        ((MyConnect(target_p) && IsCapable(target_p, CAP_TS6)) ||
438 <         (!MyConnect(target_p) && IsCapable(target_p->from, CAP_TS6))))
439 <      parv[0] = ID(source_p);
440 <
441 <    sendto_one(target_p, command, parv[0],
234 >    sendto_one(target_p, command, ID_or_name(source_p, target_p),
235                 parv[1], parv[2], parv[3], parv[4],
236                 parv[5], parv[6], parv[7], parv[8]);
237 <    return(HUNTED_PASS);
238 <  }
237 >    return HUNTED_PASS;
238 >  }
239  
240 <  sendto_one(source_p, form_str(ERR_NOSUCHSERVER),
241 <             me.name, parv[0], parv[server]);
449 <  return(HUNTED_NOSUCH);
240 >  sendto_one_numeric(source_p, &me, ERR_NOSUCHSERVER, parv[server]);
241 >  return HUNTED_NOSUCH;
242   }
243  
244   /* try_connections()
# Line 462 | Line 254 | hunt_server(struct Client *client_p, str
254   void
255   try_connections(void *unused)
256   {
257 <  dlink_node *ptr;
258 <  struct ConfItem *conf;
467 <  struct AccessItem *aconf;
468 <  struct ClassItem *cltmp;
469 <  int confrq;
257 >  dlink_node *ptr = NULL;
258 >  int confrq = 0;
259  
260    /* TODO: change this to set active flag to 0 when added to event! --Habeeb */
261    if (GlobalSetOptions.autoconn == 0)
# Line 474 | Line 263 | try_connections(void *unused)
263  
264    DLINK_FOREACH(ptr, server_items.head)
265    {
266 <    conf = ptr->data;
478 <    aconf = map_to_conf(conf);
266 >    struct MaskItem *conf = ptr->data;
267  
268 <    /* Also when already connecting! (update holdtimes) --SRB
268 >    assert(conf->type == CONF_SERVER);
269 >
270 >    /* Also when already connecting! (update holdtimes) --SRB
271       */
272 <    if (!(aconf->status & CONF_SERVER) || !aconf->port ||
483 <        !(IsConfAllowAutoConn(aconf)))
272 >    if (!conf->port ||!IsConfAllowAutoConn(conf))
273        continue;
274  
486    cltmp = map_to_conf(aconf->class_ptr);
275  
276      /* Skip this entry if the use of it is still on hold until
277       * future. Otherwise handle this entry (and set it on hold
# Line 491 | Line 279 | try_connections(void *unused)
279       * made one successfull connection... [this algorithm is
280       * a bit fuzzy... -- msa >;) ]
281       */
282 <    if (aconf->hold > CurrentTime)
282 >    if (conf->until > CurrentTime)
283        continue;
284  
285 <    if (cltmp == NULL)
285 >    if (conf->class == NULL)
286        confrq = DEFAULT_CONNECTFREQUENCY;
287      else
288      {
289 <      confrq = ConFreq(cltmp);
290 <      if (confrq < MIN_CONN_FREQ )
291 <        confrq = MIN_CONN_FREQ;
289 >      confrq = conf->class->con_freq;
290 >      if (confrq < MIN_CONN_FREQ)
291 >        confrq = MIN_CONN_FREQ;
292      }
293  
294 <    aconf->hold = CurrentTime + confrq;
294 >    conf->until = CurrentTime + confrq;
295  
296 <    /* Found a CONNECT config with port specified, scan clients
296 >    /*
297 >     * Found a CONNECT config with port specified, scan clients
298       * and see if this server is already connected?
299       */
300 <    if (find_server(conf->name) != NULL)
300 >    if (hash_find_server(conf->name))
301        continue;
302  
303 <    if (CurrUserCount(cltmp) < MaxTotal(cltmp))
303 >    if (conf->class->ref_count < conf->class->max_total)
304      {
305        /* Go to the end of the list, if not already last */
306 <      if (ptr->next != NULL)
306 >      if (ptr->next)
307        {
308          dlinkDelete(ptr, &server_items);
309          dlinkAddTail(conf, &conf->node, &server_items);
# Line 523 | Line 312 | try_connections(void *unused)
312        if (find_servconn_in_progress(conf->name))
313          return;
314  
315 <      /* We used to only print this if serv_connect() actually
315 >      /*
316 >       * We used to only print this if serv_connect() actually
317         * succeeded, but since comm_tcp_connect() can call the callback
318         * immediately if there is an error, we were getting error messages
319         * in the wrong order. SO, we just print out the activated line,
# Line 532 | Line 322 | try_connections(void *unused)
322         *   -- adrian
323         */
324        if (ConfigServerHide.hide_server_ips)
325 <        sendto_realops_flags(UMODE_ALL, L_ALL, "Connection to %s activated.",
325 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
326 >                             "Connection to %s activated.",
327                               conf->name);
328        else
329 <        sendto_realops_flags(UMODE_ALL, L_ALL, "Connection to %s[%s] activated.",
330 <                             conf->name, aconf->host);
329 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
330 >                             "Connection to %s[%s] activated.",
331 >                             conf->name, conf->host);
332  
333 <      serv_connect(aconf, NULL);
333 >      serv_connect(conf, NULL);
334        /* We connect only one at time... */
335        return;
336      }
# Line 548 | Line 340 | try_connections(void *unused)
340   int
341   valid_servname(const char *name)
342   {
343 <  unsigned int length = 0;
552 <  unsigned int dots   = 0;
343 >  unsigned int dots = 0;
344    const char *p = name;
345  
346    for (; *p; ++p)
# Line 557 | Line 348 | valid_servname(const char *name)
348      if (!IsServChar(*p))
349        return 0;
350  
560    ++length;
561
351      if (*p == '.')
352        ++dots;
353    }
354  
355 <  return dots != 0 && length <= HOSTLEN;
355 >  return dots && (p - name) <= HOSTLEN;
356   }
357  
358   int
359 < check_server(const char *name, struct Client *client_p, int cryptlink)
359 > check_server(const char *name, struct Client *client_p)
360   {
361    dlink_node *ptr;
362 <  struct ConfItem *conf           = NULL;
363 <  struct ConfItem *server_conf    = NULL;
575 <  struct AccessItem *server_aconf = NULL;
576 <  struct AccessItem *aconf        = NULL;
362 >  struct MaskItem *conf        = NULL;
363 >  struct MaskItem *server_conf = NULL;
364    int error = -1;
365  
366 <  assert(client_p != NULL);
580 <
581 <  if (client_p == NULL)
582 <    return(error);
583 <
584 <  if (strlen(name) > HOSTLEN)
585 <    return(-4);
366 >  assert(client_p);
367  
368    /* loop through looking for all possible connect items that might work */
369    DLINK_FOREACH(ptr, server_items.head)
370    {
371      conf = ptr->data;
591    aconf = map_to_conf(conf);
372  
373 <    if (!match(name, conf->name))
373 >    if (match(name, conf->name))
374        continue;
375  
376      error = -3;
377  
378      /* XXX: Fix me for IPv6                    */
379      /* XXX sockhost is the IPv4 ip as a string */
380 <    if (match(aconf->host, client_p->host) ||
381 <        match(aconf->host, client_p->sockhost))
380 >    if (!match(conf->host, client_p->host) ||
381 >        !match(conf->host, client_p->sockhost))
382      {
383        error = -2;
604 #ifdef HAVE_LIBCRYPTO
605      if (cryptlink && IsConfCryptLink(aconf))
606      {
607        if (aconf->rsa_public_key)
608          server_conf = conf;
609      }
610      else if (!(cryptlink || IsConfCryptLink(aconf)))
611 #endif /* HAVE_LIBCRYPTO */
612      {
613        /* A NULL password is as good as a bad one */
614        if (EmptyString(client_p->localClient->passwd))
615          return(-2);
616
617        /* code in s_conf.c should not have allowed this to be NULL */
618        if (aconf->passwd == NULL)
619          return(-2);
384  
385 <        if (IsConfEncrypted(aconf))
386 <        {
387 <          if (strcmp(aconf->passwd,
388 <              (const char *)crypt(client_p->localClient->passwd,
389 <                                  aconf->passwd)) == 0)
390 <            server_conf = conf;
391 <        }
392 <        else
629 <        {
630 <          if (strcmp(aconf->passwd, client_p->localClient->passwd) == 0)
631 <            server_conf = conf;
632 <        }
633 <      }
385 >      if (!match_conf_password(client_p->localClient->passwd, conf))
386 >        return -2;
387 >
388 >      if (!EmptyString(conf->certfp))
389 >        if (EmptyString(client_p->certfp) || strcasecmp(client_p->certfp, conf->certfp))
390 >          return -4;
391 >
392 >      server_conf = conf;
393      }
394    }
395  
396    if (server_conf == NULL)
397 <    return(error);
397 >    return error;
398  
399    attach_conf(client_p, server_conf);
400  
642  /* Now find all leaf or hub config items for this server */
643  DLINK_FOREACH(ptr, hub_items.head)
644  {
645    conf = ptr->data;
646
647    if (!match(name, conf->name))
648      continue;
649    attach_conf(client_p, conf);
650  }
401  
402 <  DLINK_FOREACH(ptr, leaf_items.head)
653 <  {
654 <    conf = ptr->data;
655 <
656 <    if (!match(name, conf->name))
657 <      continue;
658 <    attach_conf(client_p, conf);
659 <  }
660 <
661 <  server_aconf = map_to_conf(server_conf);
662 <
663 < #ifdef HAVE_LIBZ /* otherwise, clear it unconditionally */
664 <  if (!IsConfCompressed(server_aconf))
665 < #endif
666 <    ClearCap(client_p, CAP_ZIP);
667 <  if (!IsConfCryptLink(server_aconf))
668 <    ClearCap(client_p, CAP_ENC);
669 <  if (!IsConfTopicBurst(server_aconf))
670 <  {
671 <    ClearCap(client_p, CAP_TB);
672 <    ClearCap(client_p, CAP_TBURST);
673 <  }
674 <
675 <  /* Don't unset CAP_HUB here even if the server isn't a hub,
676 <   * it only indicates if the server thinks it's lazylinks are
677 <   * leafs or not.. if you unset it, bad things will happen
678 <   */
679 <  if (aconf != NULL)
402 >  if (server_conf)
403    {
404      struct sockaddr_in *v4;
405   #ifdef IPV6
406      struct sockaddr_in6 *v6;
407   #endif
408 <    switch (aconf->aftype)
408 >    switch (server_conf->aftype)
409      {
410   #ifdef IPV6
411 <      case AF_INET6:
412 <        v6 = (struct sockaddr_in6 *)&aconf->ipnum;
411 >      case AF_INET6:
412 >        v6 = (struct sockaddr_in6 *)&server_conf->addr;
413  
414          if (IN6_IS_ADDR_UNSPECIFIED(&v6->sin6_addr))
415 <          memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
415 >          memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
416          break;
417   #endif
418        case AF_INET:
419 <        v4 = (struct sockaddr_in *)&aconf->ipnum;
419 >        v4 = (struct sockaddr_in *)&server_conf->addr;
420  
421          if (v4->sin_addr.s_addr == INADDR_NONE)
422 <          memcpy(&aconf->ipnum, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
422 >          memcpy(&server_conf->addr, &client_p->localClient->ip, sizeof(struct irc_ssaddr));
423          break;
424      }
425    }
426  
427 <  return(0);
427 >  return 0;
428   }
429  
430   /* add_capability()
# Line 718 | Line 441 | add_capability(const char *capab_name, i
441   {
442    struct Capability *cap = MyMalloc(sizeof(*cap));
443  
444 <  DupString(cap->name, capab_name);
444 >  cap->name = xstrdup(capab_name);
445    cap->cap = cap_flag;
446    dlinkAdd(cap, &cap->node, &cap_list);
447  
# Line 735 | Line 458 | add_capability(const char *capab_name, i
458   int
459   delete_capability(const char *capab_name)
460   {
461 <  dlink_node *ptr;
739 <  dlink_node *next_ptr;
740 <  struct Capability *cap;
461 >  dlink_node *ptr = NULL, *ptr_next = NULL;
462  
463 <  DLINK_FOREACH_SAFE(ptr, next_ptr, cap_list.head)
463 >  DLINK_FOREACH_SAFE(ptr, ptr_next, cap_list.head)
464    {
465 <    cap = ptr->data;
465 >    struct Capability *cap = ptr->data;
466  
467 <    if (cap->cap != 0)
467 >    if (cap->cap)
468      {
469 <      if (irccmp(cap->name, capab_name) == 0)
469 >      if (!irccmp(cap->name, capab_name))
470        {
471 <        default_server_capabs &= ~(cap->cap);
472 <        dlinkDelete(ptr, &cap_list);
473 <        MyFree(cap->name);
474 <        cap->name = NULL;
754 <        MyFree(cap);
471 >        default_server_capabs &= ~(cap->cap);
472 >        dlinkDelete(ptr, &cap_list);
473 >        MyFree(cap->name);
474 >        MyFree(cap);
475        }
476      }
477    }
# Line 766 | Line 486 | delete_capability(const char *capab_name
486   * output       - 0 if not found CAPAB otherwise
487   * side effects - none
488   */
489 < int
489 > unsigned int
490   find_capability(const char *capab)
491   {
492    const dlink_node *ptr = NULL;
# Line 785 | Line 505 | find_capability(const char *capab)
505   /* send_capabilities()
506   *
507   * inputs       - Client pointer to send to
788 *              - Pointer to AccessItem (for crypt)
508   *              - int flag of capabilities that this server can send
790 *              - int flag of encryption capabilities
509   * output       - NONE
510   * side effects - send the CAPAB line to a server  -orabidoo
511   *
512   */
513   void
514 < send_capabilities(struct Client *client_p, struct AccessItem *aconf,
797 <                  int cap_can_send, int enc_can_send)
514 > send_capabilities(struct Client *client_p, int cap_can_send)
515   {
516 <  struct Capability *cap=NULL;
517 <  char msgbuf[IRCD_BUFSIZE];
801 <  char *t;
516 >  char msgbuf[IRCD_BUFSIZE] = "";
517 >  char *t = msgbuf;
518    int tl;
519 <  dlink_node *ptr;
804 < #ifdef HAVE_LIBCRYPTO
805 <  const struct EncCapability *epref = NULL;
806 <  char *capend;
807 <  int sent_cipher = 0;
808 < #endif
809 <
810 <  t = msgbuf;
519 >  dlink_node *ptr = NULL;
520  
521    DLINK_FOREACH(ptr, cap_list.head)
522    {
523 <    cap = ptr->data;
523 >    struct Capability *cap = ptr->data;
524  
525      if (cap->cap & (cap_can_send|default_server_capabs))
526      {
527 <      tl = ircsprintf(t, "%s ", cap->name);
527 >      tl = sprintf(t, "%s ", cap->name);
528        t += tl;
529      }
530    }
822 #ifdef HAVE_LIBCRYPTO
823  if (enc_can_send)
824  {
825    capend = t;
826    strcpy(t, "ENC:");
827    t += 4;
828
829    /* use connect{} specific info if available */
830    if (aconf->cipher_preference)
831      epref = aconf->cipher_preference;
832    else if (ConfigFileEntry.default_cipher_preference)
833      epref = ConfigFileEntry.default_cipher_preference;
834
835    if (epref && (epref->cap & enc_can_send))
836    {
837      /* Leave the space -- it is removed later. */
838      tl = ircsprintf(t, "%s ", epref->name);
839      t += tl;
840      sent_cipher = 1;
841    }
531  
843    if (!sent_cipher)
844      t = capend; /* truncate string before ENC:, below */
845  }
846 #endif
532    *(t - 1) = '\0';
533    sendto_one(client_p, "CAPAB :%s", msgbuf);
534   }
535  
851 /* sendnick_TS()
852 *
853 * inputs       - client (server) to send nick towards
854 *          - client to send nick for
855 * output       - NONE
856 * side effects - NICK message is sent towards given client_p
857 */
858 void
859 sendnick_TS(struct Client *client_p, struct Client *target_p)
860 {
861  static char ubuf[12];
862
863  if (!IsClient(target_p))
864    return;
865
866  send_umode(NULL, target_p, 0, IsOperHiddenAdmin(target_p) ?
867    SEND_UMODES & ~UMODE_ADMIN : SEND_UMODES, ubuf);
868
869  if (ubuf[0] == '\0')
870  {
871    ubuf[0] = '+';
872    ubuf[1] = '\0';
873  }
874
875  /* XXX Both of these need to have a :me.name or :mySID!?!?! */
876  if (HasID(target_p) && IsCapable(client_p, CAP_TS6))
877    sendto_one(client_p, ":%s UID %s %d %lu %s %s %s %s %s :%s",
878               target_p->servptr->id,
879               target_p->name, target_p->hopcount + 1,
880               (unsigned long) target_p->tsinfo,
881               ubuf, target_p->username, target_p->host,
882               (MyClient(target_p) && IsIPSpoof(target_p)) ?
883               "0" : target_p->sockhost, target_p->id, target_p->info);
884  else
885    sendto_one(client_p, "NICK %s %d %lu %s %s %s %s :%s",
886               target_p->name, target_p->hopcount + 1,
887               (unsigned long) target_p->tsinfo,
888               ubuf, target_p->username, target_p->host,
889               target_p->servptr->name, target_p->info);
890
891  if (IsConfAwayBurst((struct AccessItem *)map_to_conf(client_p->serv->sconf)))
892    if (!EmptyString(target_p->away))
893      sendto_one(client_p, ":%s AWAY :%s", target_p->name,
894                 target_p->away);
895
896 }
897
536   /*
537   * show_capabilities - show current server capabilities
538   *
# Line 903 | Line 541 | sendnick_TS(struct Client *client_p, str
541   * side effects - build up string representing capabilities of server listed
542   */
543   const char *
544 < show_capabilities(struct Client *target_p)
544 > show_capabilities(const struct Client *target_p)
545   {
546 <  static char msgbuf[IRCD_BUFSIZE];
547 <  char *t = msgbuf;
910 <  dlink_node *ptr;
546 >  static char msgbuf[IRCD_BUFSIZE] = "";
547 >  const dlink_node *ptr = NULL;
548  
549 <  t += ircsprintf(msgbuf, "TS ");
549 >  strlcpy(msgbuf, "TS", sizeof(msgbuf));
550  
551    DLINK_FOREACH(ptr, cap_list.head)
552    {
553      const struct Capability *cap = ptr->data;
554  
555 <    if (IsCapable(target_p, cap->cap))
556 <      t += ircsprintf(t, "%s ", cap->name);
555 >    if (!IsCapable(target_p, cap->cap))
556 >      continue;
557 >
558 >    strlcat(msgbuf,       " ", sizeof(msgbuf));
559 >    strlcat(msgbuf, cap->name, sizeof(msgbuf));
560    }
921 #ifdef HAVE_LIBCRYPTO
922  if (IsCapable(target_p, CAP_ENC) &&
923      target_p->localClient->in_cipher &&
924      target_p->localClient->out_cipher)
925    t += ircsprintf(t, "ENC:%s ",
926                    target_p->localClient->in_cipher->name);
927 #endif
928  *(t - 1) = '\0';
561  
562 <  return(msgbuf);
562 >  return msgbuf;
563   }
564  
565   /* make_server()
# Line 946 | Line 578 | make_server(struct Client *client_p)
578    return client_p->serv;
579   }
580  
949 /* server_estab()
950 *
951 * inputs       - pointer to a struct Client
952 * output       -
953 * side effects -
954 */
955 void
956 server_estab(struct Client *client_p)
957 {
958  struct Client *target_p;
959  struct ConfItem *conf;
960  struct AccessItem *aconf=NULL;
961  char *host;
962  const char *inpath;
963  static char inpath_ip[HOSTLEN * 2 + USERLEN + 6];
964  dlink_node *m;
965  dlink_node *ptr;
966
967  assert(client_p != NULL);
968
969  strlcpy(inpath_ip, get_client_name(client_p, SHOW_IP), sizeof(inpath_ip));
970
971  inpath = get_client_name(client_p, MASK_IP); /* "refresh" inpath with host */
972  host   = client_p->name;
973
974  if ((conf = find_conf_name(&client_p->localClient->confs, host, SERVER_TYPE))
975      == NULL)
976  {
977    /* This shouldn't happen, better tell the ops... -A1kmm */
978    sendto_realops_flags(UMODE_ALL, L_ALL, "Warning: Lost connect{} block "
979                         "for server %s(this shouldn't happen)!", host);
980    exit_client(client_p, &me, "Lost connect{} block!");
981    return;
982  }
983
984  MyFree(client_p->localClient->passwd);
985  client_p->localClient->passwd = NULL;
986
987  /* Its got identd, since its a server */
988  SetGotId(client_p);
989
990  /* If there is something in the serv_list, it might be this
991   * connecting server..
992   */
993  if (!ServerInfo.hub && serv_list.head)  
994  {
995    if (client_p != serv_list.head->data || serv_list.head->next)
996    {
997      ++ServerStats.is_ref;
998      sendto_one(client_p, "ERROR :I'm a leaf not a hub");
999      exit_client(client_p, &me, "I'm a leaf");
1000      return;
1001    }
1002  }
1003
1004  aconf = map_to_conf(conf);
1005
1006  if (IsUnknown(client_p) && !IsConfCryptLink(aconf))
1007  {
1008    /* jdc -- 1.  Use EmptyString(), not [0] index reference.
1009     *        2.  Check aconf->spasswd, not aconf->passwd.
1010     */
1011    if (!EmptyString(aconf->spasswd))
1012      sendto_one(client_p, "PASS %s TS %d %s",
1013                 aconf->spasswd, TS_CURRENT, me.id);
1014
1015    /* Pass my info to the new server
1016     *
1017     * If this is a HUB, pass on CAP_HUB
1018     * Pass on ZIP if supported
1019     * Pass on TB if supported.
1020     * - Dianora
1021     */
1022
1023    send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
1024      | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1025      | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0);
1026
1027    /* SERVER is the last command sent before switching to ziplinks.
1028     * We set TCPNODELAY on the socket to make sure it gets sent out
1029     * on the wire immediately.  Otherwise, it could be sitting in
1030     * a kernel buffer when we start sending zipped data, and the
1031     * parser on the receiving side can't hand both unzipped and zipped
1032     * data in one packet. --Rodder
1033     *
1034     * currently we only need to call send_queued_write,
1035     * Nagle is already disabled at this point --adx
1036     */
1037    sendto_one(client_p, "SERVER %s 1 :%s%s",
1038               me.name, ConfigServerHide.hidden ? "(H) " : "", me.info);
1039    send_queued_write(client_p);
1040  }
1041
1042  /* Hand the server off to servlink now */
1043  if (IsCapable(client_p, CAP_ENC) || IsCapable(client_p, CAP_ZIP))
1044  {
1045    if (fork_server(client_p) < 0)
1046    {
1047      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1048                           "Warning: fork failed for server %s -- check servlink_path (%s)",
1049                           get_client_name(client_p, HIDE_IP), ConfigFileEntry.servlink_path);
1050      sendto_realops_flags(UMODE_ALL, L_OPER, "Warning: fork failed for server "
1051                           "%s -- check servlink_path (%s)",
1052                           get_client_name(client_p, MASK_IP),
1053                           ConfigFileEntry.servlink_path);
1054      exit_client(client_p, &me, "fork failed");
1055      return;
1056    }
1057
1058    start_io(client_p);
1059    SetServlink(client_p);
1060  }
1061
1062  sendto_one(client_p, "SVINFO %d %d 0 :%lu", TS_CURRENT, TS_MIN,
1063             (unsigned long)CurrentTime);
1064
1065  /* assumption here is if they passed the correct TS version, they also passed an SID */
1066  if (IsCapable(client_p, CAP_TS6))
1067    hash_add_id(client_p);
1068
1069  /* XXX Does this ever happen? I don't think so -db */
1070  detach_conf(client_p, OPER_TYPE);
1071
1072  /* *WARNING*
1073  **    In the following code in place of plain server's
1074  **    name we send what is returned by get_client_name
1075  **    which may add the "sockhost" after the name. It's
1076  **    *very* *important* that there is a SPACE between
1077  **    the name and sockhost (if present). The receiving
1078  **    server will start the information field from this
1079  **    first blank and thus puts the sockhost into info.
1080  **    ...a bit tricky, but you have been warned, besides
1081  **    code is more neat this way...  --msa
1082  */
1083  client_p->servptr = &me;
1084
1085  if (IsClosing(client_p))
1086    return;
1087
1088  SetServer(client_p);
1089
1090  /* Update the capability combination usage counts. -A1kmm */
1091  set_chcap_usage_counts(client_p);
1092
1093  /* Some day, all these lists will be consolidated *sigh* */
1094  dlinkAdd(client_p, &client_p->lnode, &me.serv->server_list);
1095
1096  m = dlinkFind(&unknown_list, client_p);
1097  assert(NULL != m);
1098
1099  dlinkDelete(m, &unknown_list);
1100  dlinkAdd(client_p, m, &serv_list);
1101
1102  Count.myserver++;
1103
1104  dlinkAdd(client_p, make_dlink_node(), &global_serv_list);
1105  hash_add_client(client_p);
1106
1107  /* doesnt duplicate client_p->serv if allocated this struct already */
1108  make_server(client_p);
1109
1110  /* fixing eob timings.. -gnp */
1111  client_p->firsttime = CurrentTime;
1112
1113  /* Show the real host/IP to admins */
1114  sendto_realops_flags(UMODE_ALL, L_ADMIN,
1115                       "Link with %s established: (%s) link",
1116                       inpath_ip,show_capabilities(client_p));
1117  /* Now show the masked hostname/IP to opers */
1118  sendto_realops_flags(UMODE_ALL, L_OPER,
1119                       "Link with %s established: (%s) link",
1120                       inpath,show_capabilities(client_p));
1121  ilog(L_NOTICE, "Link with %s established: (%s) link",
1122       inpath_ip, show_capabilities(client_p));
1123
1124  client_p->serv->sconf = conf;
1125
1126  if (HasServlink(client_p))
1127  {
1128    /* we won't overflow FD_DESC_SZ here, as it can hold
1129     * client_p->name + 64
1130     */
1131    fd_note(&client_p->localClient->fd, "slink data: %s", client_p->name);
1132    fd_note(&client_p->localClient->ctrlfd, "slink ctrl: %s", client_p->name);
1133  }
1134  else
1135    fd_note(&client_p->localClient->fd, "Server: %s", client_p->name);
1136
1137  /* Old sendto_serv_but_one() call removed because we now
1138  ** need to send different names to different servers
1139  ** (domain name matching) Send new server to other servers.
1140  */
1141  DLINK_FOREACH(ptr, serv_list.head)
1142  {
1143    target_p = ptr->data;
1144
1145    if (target_p == client_p)
1146      continue;
1147
1148    if (IsCapable(target_p, CAP_TS6) && HasID(client_p))
1149      sendto_one(target_p, ":%s SID %s 2 %s :%s%s",
1150                 me.id, client_p->name, client_p->id,
1151                 IsHidden(client_p) ? "(H) " : "",
1152                 client_p->info);
1153    else
1154      sendto_one(target_p,":%s SERVER %s 2 :%s%s",
1155                 me.name, client_p->name,
1156                 IsHidden(client_p) ? "(H) " : "",
1157                 client_p->info);
1158  }
1159
1160  /* Pass on my client information to the new server
1161  **
1162  ** First, pass only servers (idea is that if the link gets
1163  ** cancelled beacause the server was already there,
1164  ** there are no NICK's to be cancelled...). Of course,
1165  ** if cancellation occurs, all this info is sent anyway,
1166  ** and I guess the link dies when a read is attempted...? --msa
1167  **
1168  ** Note: Link cancellation to occur at this point means
1169  ** that at least two servers from my fragment are building
1170  ** up connection this other fragment at the same time, it's
1171  ** a race condition, not the normal way of operation...
1172  **
1173  ** ALSO NOTE: using the get_client_name for server names--
1174  **    see previous *WARNING*!!! (Also, original inpath
1175  **    is destroyed...)
1176  */
1177
1178  DLINK_FOREACH_PREV(ptr, global_serv_list.tail)
1179  {
1180    target_p = ptr->data;
1181
1182    /* target_p->from == target_p for target_p == client_p */
1183    if (IsMe(target_p) || target_p->from == client_p)
1184      continue;
1185
1186    if (IsCapable(client_p, CAP_TS6))
1187    {
1188      if (HasID(target_p))
1189        sendto_one(client_p, ":%s SID %s %d %s :%s%s",
1190                   ID(target_p->servptr), target_p->name, target_p->hopcount+1,
1191                   target_p->id, IsHidden(target_p) ? "(H) " : "",
1192                   target_p->info);
1193      else  /* introducing non-ts6 server */
1194        sendto_one(client_p, ":%s SERVER %s %d :%s%s",
1195                   ID(target_p->servptr), target_p->name, target_p->hopcount+1,
1196                   IsHidden(target_p) ? "(H) " : "", target_p->info);
1197    }
1198    else
1199      sendto_one(client_p, ":%s SERVER %s %d :%s%s",
1200                 target_p->servptr->name, target_p->name, target_p->hopcount+1,
1201                 IsHidden(target_p) ? "(H) " : "", target_p->info);
1202  }
1203
1204  server_burst(client_p);
1205 }
1206
1207 static void
1208 start_io(struct Client *server)
1209 {
1210  struct LocalUser *lserver = server->localClient;
1211  int alloclen = 1;
1212  char *buf;
1213  dlink_node *ptr;
1214  struct dbuf_block *block;
1215
1216  /* calculate how many bytes to allocate */
1217  if (IsCapable(server, CAP_ZIP))
1218    alloclen += 6;
1219 #ifdef HAVE_LIBCRYPTO
1220  if (IsCapable(server, CAP_ENC))
1221    alloclen += 16 + lserver->in_cipher->keylen + lserver->out_cipher->keylen;
1222 #endif
1223  alloclen += dbuf_length(&lserver->buf_recvq);
1224  alloclen += dlink_list_length(&lserver->buf_recvq.blocks) * 3;
1225  alloclen += dbuf_length(&lserver->buf_sendq);
1226  alloclen += dlink_list_length(&lserver->buf_sendq.blocks) * 3;
1227
1228  /* initialize servlink control sendq */
1229  lserver->slinkq = buf = MyMalloc(alloclen);
1230  lserver->slinkq_ofs = 0;
1231  lserver->slinkq_len = alloclen;
1232
1233  if (IsCapable(server, CAP_ZIP))
1234  {
1235    /* ziplink */
1236    *buf++ = SLINKCMD_SET_ZIP_OUT_LEVEL;
1237    *buf++ = 0; /* |          */
1238    *buf++ = 1; /* \ len is 1 */
1239    *buf++ = ConfigFileEntry.compression_level;
1240    *buf++ = SLINKCMD_START_ZIP_IN;
1241    *buf++ = SLINKCMD_START_ZIP_OUT;
1242  }
1243 #ifdef HAVE_LIBCRYPTO
1244  if (IsCapable(server, CAP_ENC))
1245  {
1246    /* Decryption settings */
1247    *buf++ = SLINKCMD_SET_CRYPT_IN_CIPHER;
1248    *buf++ = 0; /* /                     (upper 8-bits of len) */
1249    *buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */
1250    *buf++ = lserver->in_cipher->cipherid;
1251    *buf++ = SLINKCMD_SET_CRYPT_IN_KEY;
1252    *buf++ = 0; /* keylen < 256 */
1253    *buf++ = lserver->in_cipher->keylen;
1254    memcpy(buf, lserver->in_key, lserver->in_cipher->keylen);
1255    buf += lserver->in_cipher->keylen;
1256    /* Encryption settings */
1257    *buf++ = SLINKCMD_SET_CRYPT_OUT_CIPHER;
1258    *buf++ = 0; /* /                     (upper 8-bits of len) */
1259    *buf++ = 1; /* \ cipher id is 1 byte (lower 8-bits of len) */
1260    *buf++ = lserver->out_cipher->cipherid;
1261    *buf++ = SLINKCMD_SET_CRYPT_OUT_KEY;
1262    *buf++ = 0; /* keylen < 256 */
1263    *buf++ = lserver->out_cipher->keylen;
1264    memcpy(buf, lserver->out_key, lserver->out_cipher->keylen);
1265    buf += lserver->out_cipher->keylen;
1266    *buf++ = SLINKCMD_START_CRYPT_IN;
1267    *buf++ = SLINKCMD_START_CRYPT_OUT;
1268  }
1269 #endif
1270
1271  /* pass the whole recvq to servlink */
1272  DLINK_FOREACH (ptr, lserver->buf_recvq.blocks.head)
1273  {
1274    block = ptr->data;
1275    *buf++ = SLINKCMD_INJECT_RECVQ;
1276    *buf++ = (block->size >> 8);
1277    *buf++ = (block->size & 0xff);
1278    memcpy(buf, &block->data[0], block->size);
1279    buf += block->size;
1280  }
1281
1282  dbuf_clear(&lserver->buf_recvq);
1283
1284  /* pass the whole sendq to servlink */
1285  DLINK_FOREACH (ptr, lserver->buf_sendq.blocks.head)
1286  {
1287    block = ptr->data;
1288    *buf++ = SLINKCMD_INJECT_SENDQ;
1289    *buf++ = (block->size >> 8);
1290    *buf++ = (block->size & 0xff);
1291    memcpy(buf, &block->data[0], block->size);
1292    buf += block->size;
1293  }
1294
1295  dbuf_clear(&lserver->buf_sendq);
1296
1297  /* start io */
1298  *buf++ = SLINKCMD_INIT;
1299
1300  /* schedule a write */
1301  send_queued_slink_write(server);
1302 }
1303
1304 /* fork_server()
1305 *
1306 * inputs       - struct Client *server
1307 * output       - success: 0 / failure: -1
1308 * side effect  - fork, and exec SERVLINK to handle this connection
1309 */
1310 static int
1311 fork_server(struct Client *server)
1312 {
1313 #ifndef HAVE_SOCKETPAIR
1314  return -1;
1315 #else
1316  int i;
1317  int slink_fds[2][2];
1318  /* 0? - ctrl  | 1? - data  
1319   * ?0 - child | ?1 - parent */
1320
1321  if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[0]) < 0)
1322    return -1;
1323  if (socketpair(AF_UNIX, SOCK_STREAM, 0, slink_fds[1]) < 0)
1324    goto free_ctrl_fds;
1325
1326  if ((i = fork()) < 0)
1327  {
1328    close(slink_fds[1][0]);  close(slink_fds[1][1]);
1329    free_ctrl_fds:
1330    close(slink_fds[0][0]);  close(slink_fds[0][1]);
1331    return -1;
1332  }
1333
1334  if (i == 0)
1335  {
1336    char fd_str[3][6];   /* store 3x sizeof("65535") */
1337    char *kid_argv[7];
1338
1339 #ifdef O_ASYNC
1340    fcntl(server->localClient->fd.fd, F_SETFL,
1341          fcntl(server->localClient->fd.fd, F_GETFL, 0) & ~O_ASYNC);
1342 #endif
1343    close_fds(&server->localClient->fd);
1344    close(slink_fds[0][1]);
1345    close(slink_fds[1][1]);
1346
1347    sprintf(fd_str[0], "%d", slink_fds[0][0]);
1348    sprintf(fd_str[1], "%d", slink_fds[1][0]);
1349    sprintf(fd_str[2], "%d", server->localClient->fd.fd);
1350
1351    kid_argv[0] = "-slink";
1352    kid_argv[1] = kid_argv[2] = fd_str[0];  /* ctrl */
1353    kid_argv[3] = kid_argv[4] = fd_str[1];  /* data */
1354    kid_argv[5] = fd_str[2];    /* network */
1355    kid_argv[6] = NULL;
1356
1357    execv(ConfigFileEntry.servlink_path, kid_argv);
1358
1359    _exit(1);
1360  }
1361
1362  /* close the network fd and the child ends of the pipes */
1363  fd_close(&server->localClient->fd);
1364  close(slink_fds[0][0]);
1365  close(slink_fds[1][0]);
1366
1367  execute_callback(setup_socket_cb, slink_fds[0][1]);
1368  execute_callback(setup_socket_cb, slink_fds[1][1]);
1369
1370  fd_open(&server->localClient->ctrlfd, slink_fds[0][1], 1, "slink ctrl");
1371  fd_open(&server->localClient->fd, slink_fds[1][1], 1, "slink data");
1372
1373  read_ctrl_packet(&server->localClient->ctrlfd, server);
1374  read_packet(&server->localClient->fd, server);
1375
1376  return 0;
1377 #endif
1378 }
1379
1380 /* server_burst()
1381 *
1382 * inputs       - struct Client pointer server
1383 *              -
1384 * output       - none
1385 * side effects - send a server burst
1386 * bugs         - still too long
1387 */
1388 static void
1389 server_burst(struct Client *client_p)
1390 {
1391  /* Send it in the shortened format with the TS, if
1392  ** it's a TS server; walk the list of channels, sending
1393  ** all the nicks that haven't been sent yet for each
1394  ** channel, then send the channel itself -- it's less
1395  ** obvious than sending all nicks first, but on the
1396  ** receiving side memory will be allocated more nicely
1397  ** saving a few seconds in the handling of a split
1398  ** -orabidoo
1399  */
1400
1401  burst_all(client_p);
1402
1403  /* EOB stuff is now in burst_all */
1404  /* Always send a PING after connect burst is done */
1405  sendto_one(client_p, "PING :%s", ID_or_name(&me, client_p));
1406 }
1407
1408 /* burst_all()
1409 *
1410 * inputs       - pointer to server to send burst to
1411 * output       - NONE
1412 * side effects - complete burst of channels/nicks is sent to client_p
1413 */
1414 static void
1415 burst_all(struct Client *client_p)
1416 {
1417  dlink_node *ptr = NULL;
1418
1419  DLINK_FOREACH(ptr, global_channel_list.head)
1420  {
1421    struct Channel *chptr = ptr->data;
1422
1423    if (dlink_list_length(&chptr->members) != 0)
1424    {
1425      burst_members(client_p, chptr);
1426      send_channel_modes(client_p, chptr);
1427
1428      if (IsCapable(client_p, CAP_TBURST) ||
1429          IsCapable(client_p, CAP_TB))
1430        send_tb(client_p, chptr);
1431    }
1432  }
1433
1434  /* also send out those that are not on any channel
1435   */
1436  DLINK_FOREACH(ptr, global_client_list.head)
1437  {
1438    struct Client *target_p = ptr->data;
1439
1440    if (!IsBursted(target_p) && target_p->from != client_p)
1441      sendnick_TS(client_p, target_p);
1442    
1443    ClearBursted(target_p);
1444  }
1445
1446  /* We send the time we started the burst, and let the remote host determine an EOB time,
1447  ** as otherwise we end up sending a EOB of 0   Sending here means it gets sent last -- fl
1448  */
1449  /* Its simpler to just send EOB and use the time its been connected.. --fl_ */
1450  if (IsCapable(client_p, CAP_EOB))
1451    sendto_one(client_p, ":%s EOB", ID_or_name(&me, client_p));
1452 }
1453
1454 /*
1455 * send_tb
1456 *
1457 * inputs       - pointer to Client
1458 *              - pointer to channel
1459 * output       - NONE
1460 * side effects - Called on a server burst when
1461 *                server is CAP_TB|CAP_TBURST capable
1462 */
1463 static void
1464 send_tb(struct Client *client_p, struct Channel *chptr)
1465 {
1466  /*
1467   * We may also send an empty topic here, but only if topic_time isn't 0,
1468   * i.e. if we had a topic that got unset.  This is required for syncing
1469   * topics properly.
1470   *
1471   * Imagine the following scenario: Our downlink introduces a channel
1472   * to us with a TS that is equal to ours, but the channel topic on
1473   * their side got unset while the servers were in splitmode, which means
1474   * their 'topic' is newer.  They simply wanted to unset it, so we have to
1475   * deal with it in a more sophisticated fashion instead of just resetting
1476   * it to their old topic they had before.  Read m_tburst.c:ms_tburst
1477   * for further information   -Michael
1478   */
1479  if (chptr->topic_time != 0)
1480  {
1481    if (IsCapable(client_p, CAP_TBURST))
1482      sendto_one(client_p, ":%s TBURST %lu %s %lu %s :%s",
1483                 me.name, (unsigned long)chptr->channelts, chptr->chname,
1484                 (unsigned long)chptr->topic_time,
1485                 chptr->topic_info ? chptr->topic_info : "",
1486                 chptr->topic ? chptr->topic : "");
1487    else if (IsCapable(client_p, CAP_TB))
1488    {
1489      if (ConfigChannel.burst_topicwho)
1490      {
1491        sendto_one(client_p, ":%s TB %s %lu %s :%s",
1492                   me.name, chptr->chname,
1493                   (unsigned long)chptr->topic_time,
1494                   chptr->topic_info, chptr->topic ? chptr->topic : "");
1495      }
1496      else
1497      {
1498        sendto_one(client_p, ":%s TB %s %lu :%s",
1499                   me.name, chptr->chname,
1500                   (unsigned long)chptr->topic_time,
1501                   chptr->topic ? chptr->topic : "");
1502      }
1503    }
1504  }
1505 }
1506
1507 /* burst_members()
1508 *
1509 * inputs       - pointer to server to send members to
1510 *              - dlink_list pointer to membership list to send
1511 * output       - NONE
1512 * side effects -
1513 */
1514 static void
1515 burst_members(struct Client *client_p, struct Channel *chptr)
1516 {
1517  struct Client *target_p;
1518  struct Membership *ms;
1519  dlink_node *ptr;
1520
1521  DLINK_FOREACH(ptr, chptr->members.head)
1522  {
1523    ms       = ptr->data;
1524    target_p = ms->client_p;
1525
1526    if (!IsBursted(target_p))
1527    {
1528      SetBursted(target_p);
1529
1530      if (target_p->from != client_p)
1531        sendnick_TS(client_p, target_p);
1532    }
1533  }
1534 }
1535
581   /* New server connection code
582   * Based upon the stuff floating about in s_bsd.c
583   *   -- adrian
# Line 1540 | Line 585 | burst_members(struct Client *client_p, s
585  
586   /* serv_connect() - initiate a server connection
587   *
588 < * inputs       - pointer to conf
588 > * inputs       - pointer to conf
589   *              - pointer to client doing the connect
590   * output       -
591   * side effects -
# Line 1555 | Line 600 | burst_members(struct Client *client_p, s
600   * it suceeded or not, and 0 if it fails in here somewhere.
601   */
602   int
603 < serv_connect(struct AccessItem *aconf, struct Client *by)
603 > serv_connect(struct MaskItem *conf, struct Client *by)
604   {
605 <  struct ConfItem *conf;
606 <  struct Client *client_p;
1562 <  char buf[HOSTIPLEN];
605 >  struct Client *client_p = NULL;
606 >  char buf[HOSTIPLEN + 1] = "";
607  
608    /* conversion structs */
609    struct sockaddr_in *v4;
1566  /* Make sure aconf is useful */
1567  assert(aconf != NULL);
610  
611 <  if(aconf == NULL)
612 <    return (0);
611 >  /* Make sure conf is useful */
612 >  assert(conf);
613  
614 <  /* XXX should be passing struct ConfItem in the first place */
615 <  conf = unmap_conf_item(aconf);
616 <
1575 <  /* log */
1576 <  irc_getnameinfo((struct sockaddr*)&aconf->ipnum, aconf->ipnum.ss_len,
1577 <                  buf, HOSTIPLEN, NULL, 0, NI_NUMERICHOST);
1578 <  ilog(L_NOTICE, "Connect to %s[%s] @%s", aconf->user, aconf->host,
614 >  getnameinfo((struct sockaddr *)&conf->addr, conf->addr.ss_len,
615 >              buf, sizeof(buf), NULL, 0, NI_NUMERICHOST);
616 >  ilog(LOG_TYPE_IRCD, "Connect to %s[%s] @%s", conf->name, conf->host,
617         buf);
618  
619    /* Still processing a DNS lookup? -> exit */
620 <  if (aconf->dns_pending)
620 >  if (conf->dns_pending)
621    {
622 <    sendto_realops_flags(UMODE_ALL, L_ALL,
622 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
623                           "Error connecting to %s: DNS lookup for connect{} in progress.",
624                           conf->name);
625 <    return (0);
625 >    return 0;
626    }
627  
628 <  if (aconf->dns_failed)
628 >  if (conf->dns_failed)
629    {
630 <    sendto_realops_flags(UMODE_ALL, L_ALL,
630 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
631                           "Error connecting to %s: DNS lookup for connect{} failed.",
632                           conf->name);
633 <    return (0);
633 >    return 0;
634    }
635  
636    /* Make sure this server isn't already connected
637 <   * Note: aconf should ALWAYS be a valid C: line
637 >   * Note: conf should ALWAYS be a valid C: line
638     */
639 <  if ((client_p = find_server(conf->name)) != NULL)
640 <  {
641 <    sendto_realops_flags(UMODE_ALL, L_ADMIN,
642 <                         "Server %s already present from %s",
643 <                         conf->name, get_client_name(client_p, SHOW_IP));
644 <    sendto_realops_flags(UMODE_ALL, L_OPER,
645 <                         "Server %s already present from %s",
646 <                         conf->name, get_client_name(client_p, MASK_IP));
639 >  if ((client_p = hash_find_server(conf->name)))
640 >  {
641 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
642 >                         "Server %s already present from %s",
643 >                         conf->name, get_client_name(client_p, SHOW_IP));
644 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
645 >                         "Server %s already present from %s",
646 >                         conf->name, get_client_name(client_p, MASK_IP));
647      if (by && IsClient(by) && !MyClient(by))
648 <      sendto_one(by, ":%s NOTICE %s :Server %s already present from %s",
649 <                 me.name, by->name, conf->name,
650 <                 get_client_name(client_p, MASK_IP));
1613 <    return (0);
648 >      sendto_one_notice(by, &me, ":Server %s already present from %s",
649 >                        conf->name, get_client_name(client_p, MASK_IP));
650 >    return 0;
651    }
652 <    
652 >
653    /* Create a local client */
654    client_p = make_client(NULL);
655  
656    /* Copy in the server, hostname, fd */
657    strlcpy(client_p->name, conf->name, sizeof(client_p->name));
658 <  strlcpy(client_p->host, aconf->host, sizeof(client_p->host));
658 >  strlcpy(client_p->host, conf->host, sizeof(client_p->host));
659  
660    /* We already converted the ip once, so lets use it - stu */
661    strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost));
662  
663 <  /* create a socket for the server connection */
664 <  if (comm_open(&client_p->localClient->fd, aconf->ipnum.ss.ss_family,
1628 <                SOCK_STREAM, 0, NULL) < 0)
663 >  /* create a socket for the server connection */
664 >  if (comm_open(&client_p->localClient->fd, conf->addr.ss.ss_family, SOCK_STREAM, 0, NULL) < 0)
665    {
666      /* Eek, failure to create the socket */
667 <    report_error(L_ALL,
668 <                 "opening stream socket to %s: %s", conf->name, errno);
667 >    report_error(L_ALL, "opening stream socket to %s: %s", conf->name, errno);
668 >
669      SetDead(client_p);
670 <    exit_client(client_p, &me, "Connection failed");
671 <    return (0);
670 >    exit_client(client_p, "Connection failed");
671 >    return 0;
672    }
673  
674    /* servernames are always guaranteed under HOSTLEN chars */
# Line 1641 | Line 677 | serv_connect(struct AccessItem *aconf, s
677    /* Attach config entries to client here rather than in
678     * serv_connect_callback(). This to avoid null pointer references.
679     */
680 <  if (!attach_connect_block(client_p, conf->name, aconf->host))
680 >  if (!attach_connect_block(client_p, conf->name, conf->host))
681    {
682 <    sendto_realops_flags(UMODE_ALL, L_ALL,
683 <                         "Host %s is not enabled for connecting:no C/N-line",
684 <                         conf->name);
685 <    if (by && IsClient(by) && !MyClient(by))  
686 <      sendto_one(by, ":%s NOTICE %s :Connect to host %s failed.",
687 <                 me.name, by->name, client_p->name);
682 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
683 >                         "Host %s is not enabled for connecting: no connect{} block",
684 >                         conf->name);
685 >    if (by && IsClient(by) && !MyClient(by))
686 >      sendto_one_notice(by, &me, ":Connect to host %s failed.", client_p->name);
687 >
688      SetDead(client_p);
689 <    exit_client(client_p, client_p, "Connection failed");
690 <    return (0);
689 >    exit_client(client_p, "Connection failed");
690 >    return 0;
691    }
692  
693    /* at this point we have a connection in progress and C/N lines
# Line 1669 | Line 705 | serv_connect(struct AccessItem *aconf, s
705  
706    SetConnecting(client_p);
707    dlinkAdd(client_p, &client_p->node, &global_client_list);
708 <  /* from def_fam */
709 <  client_p->localClient->aftype = aconf->aftype;
708 >
709 >  client_p->localClient->aftype = conf->aftype;
710  
711    /* Now, initiate the connection */
712 <  /* XXX assume that a non 0 type means a specific bind address
712 >  /* XXX assume that a non 0 type means a specific bind address
713     * for this connect.
714     */
715 <  switch (aconf->aftype)
715 >  switch (conf->aftype)
716    {
717      case AF_INET:
718 <      v4 = (struct sockaddr_in*)&aconf->my_ipnum;
719 <      if (v4->sin_addr.s_addr != 0)
718 >      v4 = (struct sockaddr_in*)&conf->bind;
719 >      if (v4->sin_addr.s_addr)
720        {
721          struct irc_ssaddr ipn;
722          memset(&ipn, 0, sizeof(struct irc_ssaddr));
723          ipn.ss.ss_family = AF_INET;
724          ipn.ss_port = 0;
725 <        memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr));
726 <        comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
727 <                         (struct sockaddr *)&ipn, ipn.ss_len,
728 <                         serv_connect_callback, client_p, aconf->aftype,
729 <                         CONNECTTIMEOUT);
725 >        memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr));
726 >        comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
727 >                         (struct sockaddr *)&ipn, ipn.ss_len,
728 >                         serv_connect_callback, client_p, conf->aftype,
729 >                         CONNECTTIMEOUT);
730        }
731        else if (ServerInfo.specific_ipv4_vhost)
732        {
# Line 1699 | Line 735 | serv_connect(struct AccessItem *aconf, s
735          ipn.ss.ss_family = AF_INET;
736          ipn.ss_port = 0;
737          memcpy(&ipn, &ServerInfo.ip, sizeof(struct irc_ssaddr));
738 <        comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
738 >        comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
739                           (struct sockaddr *)&ipn, ipn.ss_len,
740 <                         serv_connect_callback, client_p, aconf->aftype,
741 <                         CONNECTTIMEOUT);
740 >                         serv_connect_callback, client_p, conf->aftype,
741 >                         CONNECTTIMEOUT);
742        }
743        else
744 <        comm_connect_tcp(&client_p->localClient->fd, aconf->host, aconf->port,
745 <                         NULL, 0, serv_connect_callback, client_p, aconf->aftype,
744 >        comm_connect_tcp(&client_p->localClient->fd, conf->host, conf->port,
745 >                         NULL, 0, serv_connect_callback, client_p, conf->aftype,
746                           CONNECTTIMEOUT);
747        break;
748   #ifdef IPV6
749      case AF_INET6:
750        {
751 <        struct irc_ssaddr ipn;
752 <        struct sockaddr_in6 *v6;
753 <        struct sockaddr_in6 *v6conf;
754 <
755 <        memset(&ipn, 0, sizeof(struct irc_ssaddr));
756 <        v6conf = (struct sockaddr_in6 *)&aconf->my_ipnum;
757 <        v6 = (struct sockaddr_in6 *)&ipn;
758 <
759 <        if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr,
760 <                   sizeof(struct in6_addr)) != 0)
761 <        {
762 <          memcpy(&ipn, &aconf->my_ipnum, sizeof(struct irc_ssaddr));
763 <          ipn.ss.ss_family = AF_INET6;
764 <          ipn.ss_port = 0;
765 <          comm_connect_tcp(&client_p->localClient->fd,
766 <                           aconf->host, aconf->port,
767 <                           (struct sockaddr *)&ipn, ipn.ss_len,
768 <                           serv_connect_callback, client_p,
769 <                           aconf->aftype, CONNECTTIMEOUT);
770 <        }
1735 <        else if (ServerInfo.specific_ipv6_vhost)
751 >        struct irc_ssaddr ipn;
752 >        struct sockaddr_in6 *v6;
753 >        struct sockaddr_in6 *v6conf;
754 >
755 >        memset(&ipn, 0, sizeof(struct irc_ssaddr));
756 >        v6conf = (struct sockaddr_in6 *)&conf->bind;
757 >        v6 = (struct sockaddr_in6 *)&ipn;
758 >
759 >        if (memcmp(&v6conf->sin6_addr, &v6->sin6_addr, sizeof(struct in6_addr)))
760 >        {
761 >          memcpy(&ipn, &conf->bind, sizeof(struct irc_ssaddr));
762 >          ipn.ss.ss_family = AF_INET6;
763 >          ipn.ss_port = 0;
764 >          comm_connect_tcp(&client_p->localClient->fd,
765 >                           conf->host, conf->port,
766 >                           (struct sockaddr *)&ipn, ipn.ss_len,
767 >                           serv_connect_callback, client_p,
768 >                           conf->aftype, CONNECTTIMEOUT);
769 >        }
770 >        else if (ServerInfo.specific_ipv6_vhost)
771          {
772 <          memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr));
773 <          ipn.ss.ss_family = AF_INET6;
774 <          ipn.ss_port = 0;
775 <          comm_connect_tcp(&client_p->localClient->fd,
776 <                           aconf->host, aconf->port,
777 <                           (struct sockaddr *)&ipn, ipn.ss_len,
778 <                           serv_connect_callback, client_p,
779 <                           aconf->aftype, CONNECTTIMEOUT);
780 <        }
781 <        else
782 <          comm_connect_tcp(&client_p->localClient->fd,
783 <                           aconf->host, aconf->port,
784 <                           NULL, 0, serv_connect_callback, client_p,
785 <                           aconf->aftype, CONNECTTIMEOUT);
772 >          memcpy(&ipn, &ServerInfo.ip6, sizeof(struct irc_ssaddr));
773 >          ipn.ss.ss_family = AF_INET6;
774 >          ipn.ss_port = 0;
775 >          comm_connect_tcp(&client_p->localClient->fd,
776 >                           conf->host, conf->port,
777 >                           (struct sockaddr *)&ipn, ipn.ss_len,
778 >                           serv_connect_callback, client_p,
779 >                           conf->aftype, CONNECTTIMEOUT);
780 >        }
781 >        else
782 >          comm_connect_tcp(&client_p->localClient->fd,
783 >                           conf->host, conf->port,
784 >                           NULL, 0, serv_connect_callback, client_p,
785 >                           conf->aftype, CONNECTTIMEOUT);
786        }
787   #endif
788    }
789 <  return (1);
789 >  return 1;
790 > }
791 >
792 > #ifdef HAVE_LIBCRYPTO
793 > static void
794 > finish_ssl_server_handshake(struct Client *client_p)
795 > {
796 >  struct MaskItem *conf = NULL;
797 >
798 >  conf = find_conf_name(&client_p->localClient->confs,
799 >                        client_p->name, CONF_SERVER);
800 >  if (conf == NULL)
801 >  {
802 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
803 >                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
804 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
805 >                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
806 >
807 >    exit_client(client_p, "Lost connect{} block");
808 >    return;
809 >  }
810 >
811 >  sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
812 >
813 >  send_capabilities(client_p, 0);
814 >
815 >  sendto_one(client_p, "SERVER %s 1 :%s%s",
816 >             me.name, ConfigServerHide.hidden ? "(H) " : "",
817 >             me.info);
818 >
819 >  /* If we've been marked dead because a send failed, just exit
820 >   * here now and save everyone the trouble of us ever existing.
821 >   */
822 >  if (IsDead(client_p))
823 >  {
824 >      sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
825 >                           "%s[%s] went dead during handshake",
826 >                           client_p->name,
827 >                           client_p->host);
828 >      sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
829 >                           "%s went dead during handshake", client_p->name);
830 >      return;
831 >  }
832 >
833 >  /* don't move to serv_list yet -- we haven't sent a burst! */
834 >  /* If we get here, we're ok, so lets start reading some data */
835 >  comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ, read_packet, client_p, 0);
836 > }
837 >
838 > static void
839 > ssl_server_handshake(fde_t *fd, struct Client *client_p)
840 > {
841 >  X509 *cert = NULL;
842 >  int ret = 0;
843 >
844 >  if ((ret = SSL_connect(client_p->localClient->fd.ssl)) <= 0)
845 >  {
846 >    switch (SSL_get_error(client_p->localClient->fd.ssl, ret))
847 >    {
848 >      case SSL_ERROR_WANT_WRITE:
849 >        comm_setselect(&client_p->localClient->fd, COMM_SELECT_WRITE,
850 >                       (PF *)ssl_server_handshake, client_p, 0);
851 >        return;
852 >      case SSL_ERROR_WANT_READ:
853 >        comm_setselect(&client_p->localClient->fd, COMM_SELECT_READ,
854 >                       (PF *)ssl_server_handshake, client_p, 0);
855 >        return;
856 >      default:
857 >      {
858 >        const char *sslerr = ERR_error_string(ERR_get_error(), NULL);
859 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
860 >                             "Error connecting to %s: %s", client_p->name,
861 >                             sslerr ? sslerr : "unknown SSL error");
862 >        exit_client(client_p, "Error during SSL handshake");
863 >        return;
864 >      }
865 >    }
866 >  }
867 >
868 >  if ((cert = SSL_get_peer_certificate(client_p->localClient->fd.ssl)))
869 >  {
870 >    int res = SSL_get_verify_result(client_p->localClient->fd.ssl);
871 >    char buf[EVP_MAX_MD_SIZE * 2 + 1] = "";
872 >    unsigned char md[EVP_MAX_MD_SIZE] = "";
873 >
874 >    if (res == X509_V_OK || res == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN ||
875 >        res == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE ||
876 >        res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)
877 >    {
878 >      unsigned int n = 0;
879 >
880 >      if (X509_digest(cert, EVP_sha256(), md, &n))
881 >      {
882 >        for (unsigned int i = 0; i < n; ++i)
883 >          snprintf(buf + 2 * i, 3, "%02X", md[i]);
884 >        client_p->certfp = xstrdup(buf);
885 >      }
886 >    }
887 >    else
888 >      ilog(LOG_TYPE_IRCD, "Server %s!%s@%s gave bad SSL client certificate: %d",
889 >           client_p->name, client_p->username, client_p->host, res);
890 >    X509_free(cert);
891 >  }
892 >
893 >  finish_ssl_server_handshake(client_p);
894   }
895  
896 + static void
897 + ssl_connect_init(struct Client *client_p, struct MaskItem *conf, fde_t *fd)
898 + {
899 +  if ((client_p->localClient->fd.ssl = SSL_new(ServerInfo.client_ctx)) == NULL)
900 +  {
901 +    ilog(LOG_TYPE_IRCD, "SSL_new() ERROR! -- %s",
902 +         ERR_error_string(ERR_get_error(), NULL));
903 +    SetDead(client_p);
904 +    exit_client(client_p, "SSL_new failed");
905 +    return;
906 +  }
907 +
908 +  SSL_set_fd(fd->ssl, fd->fd);
909 +
910 +  if (!EmptyString(conf->cipher_list))
911 +    SSL_set_cipher_list(client_p->localClient->fd.ssl, conf->cipher_list);
912 +
913 +  ssl_server_handshake(NULL, client_p);
914 + }
915 + #endif
916 +
917   /* serv_connect_callback() - complete a server connection.
918 < *
918 > *
919   * This routine is called after the server connection attempt has
920   * completed. If unsucessful, an error is sent to ops and the client
921   * is closed. If sucessful, it goes through the initialisation/check
# Line 1766 | Line 926 | static void
926   serv_connect_callback(fde_t *fd, int status, void *data)
927   {
928    struct Client *client_p = data;
929 <  struct ConfItem *conf=NULL;
1770 <  struct AccessItem *aconf=NULL;
929 >  struct MaskItem *conf = NULL;
930  
931    /* First, make sure its a real client! */
932 <  assert(client_p != NULL);
932 >  assert(client_p);
933    assert(&client_p->localClient->fd == fd);
934  
935    /* Next, for backward purposes, record the ip of the server */
936    memcpy(&client_p->localClient->ip, &fd->connect.hostaddr,
937           sizeof(struct irc_ssaddr));
938 +
939    /* Check the status */
940    if (status != COMM_OK)
941    {
# Line 1783 | Line 943 | serv_connect_callback(fde_t *fd, int sta
943       * Admins get to see any IP, mere opers don't *sigh*
944       */
945       if (ConfigServerHide.hide_server_ips)
946 <       sendto_realops_flags(UMODE_ALL, L_ADMIN,
946 >       sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
947                              "Error connecting to %s: %s",
948                              client_p->name, comm_errstr(status));
949       else
950 <       sendto_realops_flags(UMODE_ALL, L_ADMIN,
951 <                            "Error connecting to %s[%s]: %s", client_p->name,
952 <                            client_p->host, comm_errstr(status));
953 <
954 <     sendto_realops_flags(UMODE_ALL, L_OPER,
955 <                          "Error connecting to %s: %s",
956 <                          client_p->name, comm_errstr(status));
950 >       sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
951 >                            "Error connecting to %s[%s]: %s", client_p->name,
952 >                            client_p->host, comm_errstr(status));
953 >
954 >     sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
955 >                          "Error connecting to %s: %s",
956 >                          client_p->name, comm_errstr(status));
957  
958       /* If a fd goes bad, call dead_link() the socket is no
959        * longer valid for reading or writing.
# Line 1805 | Line 965 | serv_connect_callback(fde_t *fd, int sta
965    /* COMM_OK, so continue the connection procedure */
966    /* Get the C/N lines */
967    conf = find_conf_name(&client_p->localClient->confs,
968 <                        client_p->name, SERVER_TYPE);
968 >                        client_p->name, CONF_SERVER);
969    if (conf == NULL)
970    {
971 <    sendto_realops_flags(UMODE_ALL, L_ADMIN,
972 <                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
973 <    sendto_realops_flags(UMODE_ALL, L_OPER,
974 <                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
971 >    sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
972 >                         "Lost connect{} block for %s", get_client_name(client_p, HIDE_IP));
973 >    sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
974 >                         "Lost connect{} block for %s", get_client_name(client_p, MASK_IP));
975  
976 <    exit_client(client_p, &me, "Lost connect{} block");
976 >    exit_client(client_p, "Lost connect{} block");
977      return;
978    }
979  
1820  aconf = (struct AccessItem *)map_to_conf(conf);
980    /* Next, send the initial handshake */
981    SetHandshake(client_p);
982  
983   #ifdef HAVE_LIBCRYPTO
984 <  /* Handle all CRYPTLINK links in cryptlink_init */
1826 <  if (IsConfCryptLink(aconf))
984 >  if (IsConfSSL(conf))
985    {
986 <    cryptlink_init(client_p, conf, fd);
986 >    ssl_connect_init(client_p, conf, fd);
987      return;
988    }
989   #endif
990  
991 <  /* jdc -- Check and send spasswd, not passwd. */
1834 <  if (!EmptyString(aconf->spasswd))
1835 <      /* Send TS 6 form only if id */
1836 <    sendto_one(client_p, "PASS %s TS %d %s",
1837 <               aconf->spasswd, TS_CURRENT, me.id);
991 >  sendto_one(client_p, "PASS %s TS %d %s", conf->spasswd, TS_CURRENT, me.id);
992  
993 <  /* Pass my info to the new server
1840 <   *
1841 <   * If this is a HUB, pass on CAP_HUB
1842 <   * Pass on ZIP if supported
1843 <   * Pass on TB if supported.
1844 <   * - Dianora
1845 <   */
1846 <  send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
1847 <                    | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1848 <                    | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), 0);
993 >  send_capabilities(client_p, 0);
994  
995 <  sendto_one(client_p, "SERVER %s 1 :%s%s",
996 <             me.name, ConfigServerHide.hidden ? "(H) " : "",
1852 <             me.info);
995 >  sendto_one(client_p, "SERVER %s 1 :%s%s", me.name,
996 >             ConfigServerHide.hidden ? "(H) " : "", me.info);
997  
998    /* If we've been marked dead because a send failed, just exit
999     * here now and save everyone the trouble of us ever existing.
1000     */
1001 <  if (IsDead(client_p))
1001 >  if (IsDead(client_p))
1002    {
1003 <      sendto_realops_flags(UMODE_ALL, L_ADMIN,
1004 <                           "%s[%s] went dead during handshake",
1003 >      sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
1004 >                           "%s[%s] went dead during handshake",
1005                             client_p->name,
1006 <                           client_p->host);
1007 <      sendto_realops_flags(UMODE_ALL, L_OPER,
1008 <                           "%s went dead during handshake", client_p->name);
1006 >                           client_p->host);
1007 >      sendto_realops_flags(UMODE_ALL, L_OPER, SEND_NOTICE,
1008 >                           "%s went dead during handshake", client_p->name);
1009        return;
1010    }
1011  
# Line 1881 | Line 1025 | find_servconn_in_progress(const char *na
1025      cptr = ptr->data;
1026  
1027      if (cptr && cptr->name[0])
1028 <      if (match(name, cptr->name))
1028 >      if (!match(name, cptr->name))
1029          return cptr;
1030    }
1887  
1888  return NULL;
1889 }
1890
1891 #ifdef HAVE_LIBCRYPTO
1892 /*
1893 * sends a CRYPTLINK SERV command.
1894 */
1895 void
1896 cryptlink_init(struct Client *client_p, struct ConfItem *conf, fde_t *fd)
1897 {
1898  struct AccessItem *aconf;
1899  char *encrypted;
1900  unsigned char *key_to_send;
1901  char randkey[CIPHERKEYLEN];
1902  int enc_len;
1903
1904  /* get key */
1905  if ((!ServerInfo.rsa_private_key) ||
1906      (!RSA_check_key(ServerInfo.rsa_private_key)) )
1907  {
1908    cryptlink_error(client_p, "SERV", "Invalid RSA private key",
1909                                      "Invalid RSA private key");
1910    return;
1911  }
1912
1913  aconf = (struct AccessItem *)map_to_conf(conf);
1914
1915  if (aconf->rsa_public_key == NULL)
1916  {
1917    cryptlink_error(client_p, "SERV", "Invalid RSA public key",
1918                                      "Invalid RSA public key");
1919    return;
1920  }
1921
1922  if (get_randomness((unsigned char *)randkey, CIPHERKEYLEN) != 1)
1923  {
1924    cryptlink_error(client_p, "SERV", "Couldn't generate keyphrase",
1925                                      "Couldn't generate keyphrase");
1926    return;
1927  }
1928
1929  encrypted = MyMalloc(RSA_size(ServerInfo.rsa_private_key));
1930  enc_len   = RSA_public_encrypt(CIPHERKEYLEN,
1931                                 (unsigned char *)randkey,
1932                                 (unsigned char *)encrypted,
1933                                 aconf->rsa_public_key,
1934                                 RSA_PKCS1_PADDING);
1935
1936  memcpy(client_p->localClient->in_key, randkey, CIPHERKEYLEN);
1937
1938  if (enc_len <= 0)
1939  {
1940    report_crypto_errors();
1941    MyFree(encrypted);
1942    cryptlink_error(client_p, "SERV", "Couldn't encrypt data",
1943                                      "Couldn't encrypt data");
1944    return;
1945  }
1946
1947  if (!(base64_block(&key_to_send, encrypted, enc_len)))
1948  {
1949    MyFree(encrypted);
1950    cryptlink_error(client_p, "SERV", "Couldn't base64 encode key",
1951                                      "Couldn't base64 encode key");
1952    return;
1953  }
1954
1955  send_capabilities(client_p, aconf, (ServerInfo.hub ? CAP_HUB : 0)
1956                    | (IsConfCompressed(aconf) ? CAP_ZIP : 0)
1957                    | (IsConfTopicBurst(aconf) ? CAP_TBURST|CAP_TB : 0), CAP_ENC_MASK);
1958
1959  sendto_one(client_p, "PASS . TS %d %s", TS_CURRENT, me.id);
1960  sendto_one(client_p, "CRYPTLINK SERV %s %s :%s%s",
1961             me.name, key_to_send,
1962             ConfigServerHide.hidden ? "(H) " : "", me.info);
1031  
1032 <  SetHandshake(client_p);
1965 <  SetWaitAuth(client_p);
1966 <
1967 <  MyFree(encrypted);
1968 <  MyFree(key_to_send);
1969 <
1970 <  if (IsDead(client_p))
1971 <    cryptlink_error(client_p, "SERV", "Went dead during handshake",
1972 <                                      "Went dead during handshake");
1973 <  else if (fd != NULL)
1974 <    /* If we get here, we're ok, so lets start reading some data */
1975 <    comm_setselect(fd, COMM_SELECT_READ, read_packet, client_p, 0);
1976 < }
1977 <
1978 < void
1979 < cryptlink_error(struct Client *client_p, const char *type,
1980 <                const char *reason, const char *client_reason)
1981 < {
1982 <  sendto_realops_flags(UMODE_ALL, L_ADMIN, "%s: CRYPTLINK %s error - %s",
1983 <                       get_client_name(client_p, SHOW_IP), type, reason);
1984 <  sendto_realops_flags(UMODE_ALL, L_OPER,  "%s: CRYPTLINK %s error - %s",
1985 <                       get_client_name(client_p, MASK_IP), type, reason);
1986 <  ilog(L_ERROR, "%s: CRYPTLINK %s error - %s",
1987 <       get_client_name(client_p, SHOW_IP), type, reason);
1988 <
1989 <  /* If client_reason isn't NULL, then exit the client with the message
1990 <   * defined in the call.
1991 <   */
1992 <  if ((client_reason != NULL) && (!IsDead(client_p)))
1993 <    exit_client(client_p, &me, client_reason);
1994 < }
1995 <
1996 < static char base64_chars[] =
1997 <        "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
1998 <
1999 < static char base64_values[] =
2000 < {
2001 < /* 00-15   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2002 < /* 16-31   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2003 < /* 32-47   */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63,
2004 < /* 48-63   */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1,  0, -1, -1,
2005 < /* 64-79   */ -1,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,
2006 < /* 80-95   */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1,
2007 < /* 96-111  */ -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
2008 < /* 112-127 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1,
2009 < /* 128-143 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2010 < /* 144-159 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2011 < /* 160-175 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2012 < /* 186-191 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2013 < /* 192-207 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2014 < /* 208-223 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2015 < /* 224-239 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
2016 < /* 240-255 */ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1
2017 < };
2018 <
2019 < /*
2020 < * base64_block will allocate and return a new block of memory
2021 < * using MyMalloc().  It should be freed after use.
2022 < */
2023 < int
2024 < base64_block(unsigned char **output, char *data, int len)
2025 < {
2026 <  unsigned char *out;
2027 <  unsigned char *in = (unsigned char*)data;
2028 <  unsigned long int q_in;
2029 <  int i;
2030 <  int count = 0;
2031 <
2032 <  out = MyMalloc(((((len + 2) - ((len + 2) % 3)) / 3) * 4) + 1);
2033 <
2034 <  /* process 24 bits at a time */
2035 <  for( i = 0; i < len; i += 3)
2036 <  {
2037 <    q_in = 0;
2038 <
2039 <    if ( i + 2 < len )
2040 <    {
2041 <      q_in  = (in[i+2] & 0xc0) << 2;
2042 <      q_in |=  in[i+2];
2043 <    }
2044 <
2045 <    if ( i + 1 < len )
2046 <    {
2047 <      q_in |= (in[i+1] & 0x0f) << 10;
2048 <      q_in |= (in[i+1] & 0xf0) << 12;
2049 <    }
2050 <
2051 <    q_in |= (in[i]   & 0x03) << 20;
2052 <    q_in |=  in[i]           << 22;
2053 <
2054 <    q_in &= 0x3f3f3f3f;
2055 <
2056 <    out[count++] = base64_chars[((q_in >> 24)       )];
2057 <    out[count++] = base64_chars[((q_in >> 16) & 0xff)];
2058 <    out[count++] = base64_chars[((q_in >>  8) & 0xff)];
2059 <    out[count++] = base64_chars[((q_in      ) & 0xff)];
2060 <  }
2061 <  if ( (i - len) > 0 )
2062 <  {
2063 <    out[count-1] = '=';
2064 <    if ( (i - len) > 1 )
2065 <      out[count-2] = '=';
2066 <  }
2067 <
2068 <  out[count] = '\0';
2069 <  *output = out;
2070 <  return (count);
2071 < }
2072 <
2073 < /*
2074 < * unbase64_block will allocate and return a new block of memory
2075 < * using MyMalloc().  It should be freed after use.
2076 < */
2077 < int
2078 < unbase64_block(unsigned char **output, char *data, int len)
2079 < {
2080 <  unsigned char *out;
2081 <  unsigned char *in = (unsigned char*)data;
2082 <  unsigned long int q_in;
2083 <  int i;
2084 <  int count = 0;
2085 <
2086 <  if ((len % 4) != 0)
2087 <    return (0);
2088 <
2089 <  out = MyMalloc(((len / 4) * 3) + 1);
2090 <
2091 <  /* process 32 bits at a time */
2092 <  for( i = 0; (i + 3) < len; i+=4)
2093 <  {
2094 <    /* compress input (chars a, b, c and d) as follows:
2095 <     * (after converting ascii -> base64 value)
2096 <     *
2097 <     * |00000000aaaaaabbbbbbccccccdddddd|
2098 <     * |  765432  107654  321076  543210|
2099 <     */
2100 <
2101 <    q_in = 0;
2102 <
2103 <    if (base64_values[in[i+3]] > -1)
2104 <      q_in |= base64_values[in[i+3]]      ;
2105 <    if (base64_values[in[i+2]] > -1)
2106 <      q_in |= base64_values[in[i+2]] <<  6;
2107 <    if (base64_values[in[i+1]] > -1)
2108 <      q_in |= base64_values[in[i+1]] << 12;
2109 <    if (base64_values[in[i  ]] > -1)
2110 <      q_in |= base64_values[in[i  ]] << 18;
2111 <
2112 <    out[count++] = (q_in >> 16) & 0xff;
2113 <    out[count++] = (q_in >>  8) & 0xff;
2114 <    out[count++] = (q_in      ) & 0xff;
2115 <  }
2116 <
2117 <  if (in[i-1] == '=') count--;
2118 <  if (in[i-2] == '=') count--;
2119 <
2120 <  out[count] = '\0';
2121 <  *output = out;
2122 <  return (count);
1032 >  return NULL;
1033   }
2124
2125 #endif /* HAVE_LIBCRYPTO */
2126

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)