ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/src/conf.c
Revision: 4325
Committed: Fri Aug 1 18:06:07 2014 UTC (11 years ago) by michael
Content type: text/x-csrc
File size: 51759 byte(s)
Log Message:
- Moved all ip caching related code to ipcache.c

File Contents

# Content
1 /*
2 * ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3 *
4 * Copyright (c) 1997-2014 ircd-hybrid development team
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
19 * USA
20 */
21
22 /*! \file conf.c
23 * \brief Configuration file functions.
24 * \version $Id$
25 */
26
27 #include "stdinc.h"
28 #include "list.h"
29 #include "ircd_defs.h"
30 #include "conf.h"
31 #include "server.h"
32 #include "resv.h"
33 #include "channel.h"
34 #include "client.h"
35 #include "event.h"
36 #include "irc_string.h"
37 #include "s_bsd.h"
38 #include "ircd.h"
39 #include "listener.h"
40 #include "hostmask.h"
41 #include "modules.h"
42 #include "numeric.h"
43 #include "fdlist.h"
44 #include "log.h"
45 #include "send.h"
46 #include "memory.h"
47 #include "res.h"
48 #include "userhost.h"
49 #include "user.h"
50 #include "channel_mode.h"
51 #include "parse.h"
52 #include "misc.h"
53 #include "conf_db.h"
54 #include "conf_class.h"
55 #include "motd.h"
56 #include "ipcache.h"
57
58
59 /* general conf items link list root, other than k lines etc. */
60 dlink_list service_items = { NULL, NULL, 0 };
61 dlink_list server_items = { NULL, NULL, 0 };
62 dlink_list cluster_items = { NULL, NULL, 0 };
63 dlink_list oconf_items = { NULL, NULL, 0 };
64 dlink_list uconf_items = { NULL, NULL, 0 };
65 dlink_list xconf_items = { NULL, NULL, 0 };
66 dlink_list nresv_items = { NULL, NULL, 0 };
67 dlink_list cresv_items = { NULL, NULL, 0 };
68
69 extern unsigned int lineno;
70 extern char linebuf[];
71 extern char conffilebuf[IRCD_BUFSIZE];
72 extern int yyparse(); /* defined in y.tab.c */
73
74 /* internally defined functions */
75 static void read_conf(FILE *);
76 static void clear_out_old_conf(void);
77 static void expire_tklines(dlink_list *);
78 static int verify_access(struct Client *);
79 static int attach_iline(struct Client *, struct MaskItem *);
80 static dlink_list *map_to_list(enum maskitem_type);
81 static int find_user_host(struct Client *, char *, char *, char *, unsigned int);
82
83
84 /* conf_dns_callback()
85 *
86 * inputs - pointer to struct MaskItem
87 * - pointer to DNSReply reply
88 * output - none
89 * side effects - called when resolver query finishes
90 * if the query resulted in a successful search, hp will contain
91 * a non-null pointer, otherwise hp will be null.
92 * if successful save hp in the conf item it was called with
93 */
94 static void
95 conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name)
96 {
97 struct MaskItem *conf = vptr;
98
99 conf->dns_pending = 0;
100
101 if (addr)
102 memcpy(&conf->addr, addr, sizeof(conf->addr));
103 else
104 conf->dns_failed = 1;
105 }
106
107 /* conf_dns_lookup()
108 *
109 * do a nameserver lookup of the conf host
110 * if the conf entry is currently doing a ns lookup do nothing, otherwise
111 * allocate a dns_query and start ns lookup.
112 */
113 static void
114 conf_dns_lookup(struct MaskItem *conf)
115 {
116 if (!conf->dns_pending)
117 {
118 conf->dns_pending = 1;
119 gethost_byname(conf_dns_callback, conf, conf->host);
120 }
121 }
122
123 struct MaskItem *
124 conf_make(enum maskitem_type type)
125 {
126 struct MaskItem *conf = MyCalloc(sizeof(*conf));
127 dlink_list *list = NULL;
128
129 conf->type = type;
130 conf->active = 1;
131 conf->aftype = AF_INET;
132
133 if ((list = map_to_list(type)))
134 dlinkAdd(conf, &conf->node, list);
135 return conf;
136 }
137
138 void
139 conf_free(struct MaskItem *conf)
140 {
141 dlink_node *ptr = NULL, *ptr_next = NULL;
142 dlink_list *list = NULL;
143
144 if (conf->node.next)
145 if ((list = map_to_list(conf->type)))
146 dlinkDelete(&conf->node, list);
147
148 MyFree(conf->name);
149
150 if (conf->dns_pending)
151 delete_resolver_queries(conf);
152 if (conf->passwd)
153 memset(conf->passwd, 0, strlen(conf->passwd));
154 if (conf->spasswd)
155 memset(conf->spasswd, 0, strlen(conf->spasswd));
156
157 conf->class = NULL;
158
159 MyFree(conf->passwd);
160 MyFree(conf->spasswd);
161 MyFree(conf->reason);
162 MyFree(conf->certfp);
163 MyFree(conf->user);
164 MyFree(conf->host);
165 #ifdef HAVE_LIBCRYPTO
166 MyFree(conf->cipher_list);
167
168 if (conf->rsa_public_key)
169 RSA_free(conf->rsa_public_key);
170 #endif
171 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->hub_list.head)
172 {
173 MyFree(ptr->data);
174 dlinkDelete(ptr, &conf->hub_list);
175 free_dlink_node(ptr);
176 }
177
178 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->leaf_list.head)
179 {
180 MyFree(ptr->data);
181 dlinkDelete(ptr, &conf->leaf_list);
182 free_dlink_node(ptr);
183 }
184
185 DLINK_FOREACH_SAFE(ptr, ptr_next, conf->exempt_list.head)
186 {
187 struct exempt *exptr = ptr->data;
188
189 dlinkDelete(ptr, &conf->exempt_list);
190 MyFree(exptr->name);
191 MyFree(exptr->user);
192 MyFree(exptr->host);
193 MyFree(exptr);
194 }
195
196 MyFree(conf);
197 }
198
199 /* check_client()
200 *
201 * inputs - pointer to client
202 * output - 0 = Success
203 * NOT_AUTHORIZED (-1) = Access denied (no I line match)
204 * IRCD_SOCKET_ERROR (-2) = Bad socket.
205 * I_LINE_FULL (-3) = I-line is full
206 * TOO_MANY (-4) = Too many connections from hostname
207 * BANNED_CLIENT (-5) = K-lined
208 * side effects - Ordinary client access check.
209 * Look for conf lines which have the same
210 * status as the flags passed.
211 */
212 int
213 check_client(struct Client *source_p)
214 {
215 int i;
216
217 if ((i = verify_access(source_p)))
218 ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
219 source_p->name, source_p->sockhost);
220
221 switch (i)
222 {
223 case TOO_MANY:
224 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
225 "Too many on IP for %s (%s).",
226 get_client_name(source_p, SHOW_IP),
227 source_p->sockhost);
228 ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
229 get_client_name(source_p, SHOW_IP));
230 ++ServerStats.is_ref;
231 exit_client(source_p, "No more connections allowed on that IP");
232 break;
233
234 case I_LINE_FULL:
235 sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
236 "auth{} block is full for %s (%s).",
237 get_client_name(source_p, SHOW_IP),
238 source_p->sockhost);
239 ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
240 get_client_name(source_p, SHOW_IP));
241 ++ServerStats.is_ref;
242 exit_client(source_p, "No more connections allowed in your connection class");
243 break;
244
245 case NOT_AUTHORIZED:
246 ++ServerStats.is_ref;
247 /* jdc - lists server name & port connections are on */
248 /* a purely cosmetical change */
249 sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
250 "Unauthorized client connection from %s [%s] on [%s/%u].",
251 get_client_name(source_p, SHOW_IP),
252 source_p->sockhost,
253 source_p->localClient->listener->name,
254 source_p->localClient->listener->port);
255 ilog(LOG_TYPE_IRCD,
256 "Unauthorized client connection from %s on [%s/%u].",
257 get_client_name(source_p, SHOW_IP),
258 source_p->localClient->listener->name,
259 source_p->localClient->listener->port);
260
261 exit_client(source_p, "You are not authorized to use this server");
262 break;
263
264 case BANNED_CLIENT:
265 exit_client(source_p, "Banned");
266 ++ServerStats.is_ref;
267 break;
268
269 case 0:
270 default:
271 break;
272 }
273
274 return (i < 0 ? 0 : 1);
275 }
276
277 /* verify_access()
278 *
279 * inputs - pointer to client to verify
280 * output - 0 if success -'ve if not
281 * side effect - find the first (best) I line to attach.
282 */
283 static int
284 verify_access(struct Client *client_p)
285 {
286 struct MaskItem *conf = NULL;
287 char non_ident[USERLEN + 1] = "~";
288
289 if (IsGotId(client_p))
290 {
291 conf = find_address_conf(client_p->host, client_p->username,
292 &client_p->localClient->ip,
293 client_p->localClient->aftype,
294 client_p->localClient->passwd);
295 }
296 else
297 {
298 strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
299 conf = find_address_conf(client_p->host,non_ident,
300 &client_p->localClient->ip,
301 client_p->localClient->aftype,
302 client_p->localClient->passwd);
303 }
304
305 if (conf)
306 {
307 if (IsConfClient(conf))
308 {
309 if (IsConfRedir(conf))
310 {
311 sendto_one_numeric(client_p, &me, RPL_REDIR,
312 conf->name ? conf->name : "",
313 conf->port);
314 return NOT_AUTHORIZED;
315 }
316
317 if (IsConfDoIdentd(conf))
318 SetNeedId(client_p);
319
320 /* Thanks for spoof idea amm */
321 if (IsConfDoSpoofIp(conf))
322 {
323 if (!ConfigFileEntry.hide_spoof_ips && IsConfSpoofNotice(conf))
324 sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
325 "%s spoofing: %s as %s",
326 client_p->name, client_p->host, conf->name);
327 strlcpy(client_p->host, conf->name, sizeof(client_p->host));
328 AddFlag(client_p, FLAGS_IP_SPOOFING | FLAGS_AUTH_SPOOF);
329 }
330
331 return attach_iline(client_p, conf);
332 }
333 else if (IsConfKill(conf) || (ConfigFileEntry.glines && IsConfGline(conf)))
334 {
335 if (IsConfGline(conf))
336 sendto_one_notice(client_p, &me, ":*** G-lined");
337 sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
338 return BANNED_CLIENT;
339 }
340 }
341
342 return NOT_AUTHORIZED;
343 }
344
345 /* attach_iline()
346 *
347 * inputs - client pointer
348 * - conf pointer
349 * output -
350 * side effects - do actual attach
351 */
352 static int
353 attach_iline(struct Client *client_p, struct MaskItem *conf)
354 {
355 struct ClassItem *class = NULL;
356 struct ip_entry *ip_found;
357 int a_limit_reached = 0;
358 unsigned int local = 0, global = 0, ident = 0;
359
360 assert(conf->class);
361
362 ip_found = ipcache_find_or_add_address(&client_p->localClient->ip);
363 ip_found->count++;
364 SetIpHash(client_p);
365
366 class = conf->class;
367
368 count_user_host(client_p->username, client_p->host,
369 &global, &local, &ident);
370
371 /* XXX blah. go down checking the various silly limits
372 * setting a_limit_reached if any limit is reached.
373 * - Dianora
374 */
375 if (class->max_total && class->ref_count >= class->max_total)
376 a_limit_reached = 1;
377 else if (class->max_perip && ip_found->count > class->max_perip)
378 a_limit_reached = 1;
379 else if (class->max_local && local >= class->max_local)
380 a_limit_reached = 1;
381 else if (class->max_global && global >= class->max_global)
382 a_limit_reached = 1;
383 else if (class->max_ident && ident >= class->max_ident &&
384 client_p->username[0] != '~')
385 a_limit_reached = 1;
386
387 if (a_limit_reached)
388 {
389 if (!IsConfExemptLimits(conf))
390 return TOO_MANY; /* Already at maximum allowed */
391
392 sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
393 "but you have exceed_limit = yes;");
394 }
395
396 return attach_conf(client_p, conf);
397 }
398
399 /* detach_conf()
400 *
401 * inputs - pointer to client to detach
402 * - type of conf to detach
403 * output - 0 for success, -1 for failure
404 * side effects - Disassociate configuration from the client.
405 * Also removes a class from the list if marked for deleting.
406 */
407 void
408 detach_conf(struct Client *client_p, enum maskitem_type type)
409 {
410 dlink_node *ptr = NULL, *ptr_next = NULL;
411
412 DLINK_FOREACH_SAFE(ptr, ptr_next, client_p->localClient->confs.head)
413 {
414 struct MaskItem *conf = ptr->data;
415
416 assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
417 assert(conf->ref_count > 0);
418 assert(conf->class->ref_count > 0);
419
420 if (!(conf->type & type))
421 continue;
422
423 dlinkDelete(ptr, &client_p->localClient->confs);
424 free_dlink_node(ptr);
425
426 if (conf->type == CONF_CLIENT)
427 remove_from_cidr_check(&client_p->localClient->ip, conf->class);
428
429 if (--conf->class->ref_count == 0 && conf->class->active == 0)
430 {
431 class_free(conf->class);
432 conf->class = NULL;
433 }
434
435 if (--conf->ref_count == 0 && conf->active == 0)
436 conf_free(conf);
437 }
438 }
439
440 /* attach_conf()
441 *
442 * inputs - client pointer
443 * - conf pointer
444 * output -
445 * side effects - Associate a specific configuration entry to a *local*
446 * client (this is the one which used in accepting the
447 * connection). Note, that this automatically changes the
448 * attachment if there was an old one...
449 */
450 int
451 attach_conf(struct Client *client_p, struct MaskItem *conf)
452 {
453 if (dlinkFind(&client_p->localClient->confs, conf))
454 return 1;
455
456 if (conf->type == CONF_CLIENT)
457 if (cidr_limit_reached(IsConfExemptLimits(conf),
458 &client_p->localClient->ip, conf->class))
459 return TOO_MANY; /* Already at maximum allowed */
460
461 conf->class->ref_count++;
462 conf->ref_count++;
463
464 dlinkAdd(conf, make_dlink_node(), &client_p->localClient->confs);
465
466 return 0;
467 }
468
469 /* attach_connect_block()
470 *
471 * inputs - pointer to server to attach
472 * - name of server
473 * - hostname of server
474 * output - true (1) if both are found, otherwise return false (0)
475 * side effects - find connect block and attach them to connecting client
476 */
477 int
478 attach_connect_block(struct Client *client_p, const char *name,
479 const char *host)
480 {
481 dlink_node *ptr;
482 struct MaskItem *conf = NULL;
483
484 assert(client_p != NULL);
485 assert(host != NULL);
486
487 if (client_p == NULL || host == NULL)
488 return 0;
489
490 DLINK_FOREACH(ptr, server_items.head)
491 {
492 conf = ptr->data;
493
494 if (match(conf->name, name) || match(conf->host, host))
495 continue;
496
497 attach_conf(client_p, conf);
498 return -1;
499 }
500
501 return 0;
502 }
503
504 /* find_conf_name()
505 *
506 * inputs - pointer to conf link list to search
507 * - pointer to name to find
508 * - int mask of type of conf to find
509 * output - NULL or pointer to conf found
510 * side effects - find a conf entry which matches the name
511 * and has the given mask.
512 */
513 struct MaskItem *
514 find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
515 {
516 dlink_node *ptr;
517 struct MaskItem* conf;
518
519 DLINK_FOREACH(ptr, list->head)
520 {
521 conf = ptr->data;
522
523 if (conf->type == type)
524 {
525 if (conf->name && (!irccmp(conf->name, name) ||
526 !match(conf->name, name)))
527 return conf;
528 }
529 }
530
531 return NULL;
532 }
533
534 /* map_to_list()
535 *
536 * inputs - ConfType conf
537 * output - pointer to dlink_list to use
538 * side effects - none
539 */
540 static dlink_list *
541 map_to_list(enum maskitem_type type)
542 {
543 switch(type)
544 {
545 case CONF_XLINE:
546 return(&xconf_items);
547 break;
548 case CONF_ULINE:
549 return(&uconf_items);
550 break;
551 case CONF_NRESV:
552 return(&nresv_items);
553 break;
554 case CONF_CRESV:
555 return(&cresv_items);
556 case CONF_OPER:
557 return(&oconf_items);
558 break;
559 case CONF_SERVER:
560 return(&server_items);
561 break;
562 case CONF_SERVICE:
563 return(&service_items);
564 break;
565 case CONF_CLUSTER:
566 return(&cluster_items);
567 break;
568 default:
569 return NULL;
570 }
571 }
572
573 /* find_matching_name_conf()
574 *
575 * inputs - type of link list to look in
576 * - pointer to name string to find
577 * - pointer to user
578 * - pointer to host
579 * - optional flags to match on as well
580 * output - NULL or pointer to found struct MaskItem
581 * side effects - looks for a match on name field
582 */
583 struct MaskItem *
584 find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
585 const char *host, unsigned int flags)
586 {
587 dlink_node *ptr=NULL;
588 struct MaskItem *conf=NULL;
589 dlink_list *list_p = map_to_list(type);
590
591 switch (type)
592 {
593 case CONF_SERVICE:
594 DLINK_FOREACH(ptr, list_p->head)
595 {
596 conf = ptr->data;
597
598 if (EmptyString(conf->name))
599 continue;
600 if ((name != NULL) && !irccmp(name, conf->name))
601 return conf;
602 }
603 break;
604
605 case CONF_XLINE:
606 case CONF_ULINE:
607 case CONF_NRESV:
608 case CONF_CRESV:
609 DLINK_FOREACH(ptr, list_p->head)
610 {
611 conf = ptr->data;
612
613 if (EmptyString(conf->name))
614 continue;
615 if ((name != NULL) && !match(conf->name, name))
616 {
617 if ((user == NULL && (host == NULL)))
618 return conf;
619 if ((conf->flags & flags) != flags)
620 continue;
621 if (EmptyString(conf->user) || EmptyString(conf->host))
622 return conf;
623 if (!match(conf->user, user) && !match(conf->host, host))
624 return conf;
625 }
626 }
627 break;
628
629 case CONF_SERVER:
630 DLINK_FOREACH(ptr, list_p->head)
631 {
632 conf = ptr->data;
633
634 if ((name != NULL) && !match(name, conf->name))
635 return conf;
636 else if ((host != NULL) && !match(host, conf->host))
637 return conf;
638 }
639 break;
640
641 default:
642 break;
643 }
644 return NULL;
645 }
646
647 /* find_exact_name_conf()
648 *
649 * inputs - type of link list to look in
650 * - pointer to name string to find
651 * - pointer to user
652 * - pointer to host
653 * output - NULL or pointer to found struct MaskItem
654 * side effects - looks for an exact match on name field
655 */
656 struct MaskItem *
657 find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
658 const char *user, const char *host)
659 {
660 dlink_node *ptr = NULL;
661 struct MaskItem *conf;
662 dlink_list *list_p = map_to_list(type);
663
664 switch(type)
665 {
666 case CONF_XLINE:
667 case CONF_ULINE:
668 case CONF_NRESV:
669 case CONF_CRESV:
670
671 DLINK_FOREACH(ptr, list_p->head)
672 {
673 conf = ptr->data;
674
675 if (EmptyString(conf->name))
676 continue;
677
678 if (irccmp(conf->name, name) == 0)
679 {
680 if ((user == NULL && (host == NULL)))
681 return conf;
682 if (EmptyString(conf->user) || EmptyString(conf->host))
683 return conf;
684 if (!match(conf->user, user) && !match(conf->host, host))
685 return conf;
686 }
687 }
688 break;
689
690 case CONF_OPER:
691 DLINK_FOREACH(ptr, list_p->head)
692 {
693 conf = ptr->data;
694
695 if (EmptyString(conf->name))
696 continue;
697
698 if (!irccmp(conf->name, name))
699 {
700 if (!who)
701 return conf;
702 if (EmptyString(conf->user) || EmptyString(conf->host))
703 return NULL;
704 if (!match(conf->user, who->username))
705 {
706 switch (conf->htype)
707 {
708 case HM_HOST:
709 if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
710 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
711 return conf;
712 break;
713 case HM_IPV4:
714 if (who->localClient->aftype == AF_INET)
715 if (match_ipv4(&who->localClient->ip, &conf->addr, conf->bits))
716 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
717 return conf;
718 break;
719 #ifdef IPV6
720 case HM_IPV6:
721 if (who->localClient->aftype == AF_INET6)
722 if (match_ipv6(&who->localClient->ip, &conf->addr, conf->bits))
723 if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
724 return conf;
725 break;
726 #endif
727 default:
728 assert(0);
729 }
730 }
731 }
732 }
733
734 break;
735
736 case CONF_SERVER:
737 DLINK_FOREACH(ptr, list_p->head)
738 {
739 conf = ptr->data;
740
741 if (EmptyString(conf->name))
742 continue;
743
744 if (name == NULL)
745 {
746 if (EmptyString(conf->host))
747 continue;
748 if (irccmp(conf->host, host) == 0)
749 return conf;
750 }
751 else if (irccmp(conf->name, name) == 0)
752 return conf;
753 }
754
755 break;
756
757 default:
758 break;
759 }
760
761 return NULL;
762 }
763
764 /* rehash()
765 *
766 * Actual REHASH service routine. Called with sig == 0 if it has been called
767 * as a result of an operator issuing this command, else assume it has been
768 * called as a result of the server receiving a HUP signal.
769 */
770 int
771 rehash(int sig)
772 {
773 if (sig)
774 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
775 "Got signal SIGHUP, reloading configuration file(s)");
776
777 restart_resolver();
778
779 /* don't close listeners until we know we can go ahead with the rehash */
780
781 /* Check to see if we magically got(or lost) IPv6 support */
782 check_can_use_v6();
783
784 read_conf_files(0);
785
786 if (ServerInfo.description)
787 strlcpy(me.info, ServerInfo.description, sizeof(me.info));
788
789 load_conf_modules();
790 check_conf_klines();
791
792 return 0;
793 }
794
795 /* set_default_conf()
796 *
797 * inputs - NONE
798 * output - NONE
799 * side effects - Set default values here.
800 * This is called **PRIOR** to parsing the
801 * configuration file. If you want to do some validation
802 * of values later, put them in validate_conf().
803 */
804 static void
805 set_default_conf(void)
806 {
807 /* verify init_class() ran, this should be an unnecessary check
808 * but its not much work.
809 */
810 assert(class_default == class_get_list()->tail->data);
811
812 #ifdef HAVE_LIBCRYPTO
813 ServerInfo.message_digest_algorithm = EVP_sha256();
814 ServerInfo.rsa_private_key = NULL;
815 ServerInfo.rsa_private_key_file = NULL;
816 #endif
817
818 /* ServerInfo.name is not rehashable */
819 /* ServerInfo.name = ServerInfo.name; */
820 ServerInfo.description = NULL;
821 ServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
822 ServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
823
824 memset(&ServerInfo.ip, 0, sizeof(ServerInfo.ip));
825 ServerInfo.specific_ipv4_vhost = 0;
826 memset(&ServerInfo.ip6, 0, sizeof(ServerInfo.ip6));
827 ServerInfo.specific_ipv6_vhost = 0;
828
829 ServerInfo.max_clients = MAXCLIENTS_MAX;
830 ServerInfo.max_nick_length = 9;
831 ServerInfo.max_topic_length = 80;
832 ServerInfo.hub = 0;
833 ServerInfo.dns_host.sin_addr.s_addr = 0;
834 ServerInfo.dns_host.sin_port = 0;
835
836 AdminInfo.name = NULL;
837 AdminInfo.email = NULL;
838 AdminInfo.description = NULL;
839
840 log_del_all();
841
842 ConfigLoggingEntry.use_logging = 1;
843
844 ConfigChannel.disable_fake_channels = 0;
845 ConfigChannel.invite_client_count = 10;
846 ConfigChannel.invite_client_time = 300;
847 ConfigChannel.knock_client_count = 1;
848 ConfigChannel.knock_client_time = 300;
849 ConfigChannel.knock_delay_channel = 60;
850 ConfigChannel.max_channels = 25;
851 ConfigChannel.max_bans = 25;
852 ConfigChannel.default_split_user_count = 0;
853 ConfigChannel.default_split_server_count = 0;
854 ConfigChannel.no_join_on_split = 0;
855 ConfigChannel.no_create_on_split = 0;
856
857 ConfigServerHide.flatten_links = 0;
858 ConfigServerHide.links_delay = 300;
859 ConfigServerHide.hidden = 0;
860 ConfigServerHide.hide_servers = 0;
861 ConfigServerHide.hide_services = 0;
862 ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
863 ConfigServerHide.hide_server_ips = 0;
864 ConfigServerHide.disable_remote_commands = 0;
865
866 ConfigFileEntry.away_count = 2;
867 ConfigFileEntry.away_time = 10;
868 ConfigFileEntry.service_name = xstrdup(SERVICE_NAME_DEFAULT);
869 ConfigFileEntry.max_watch = WATCHSIZE_DEFAULT;
870 ConfigFileEntry.cycle_on_host_change = 1;
871 ConfigFileEntry.glines = 0;
872 ConfigFileEntry.gline_time = 12 * 3600;
873 ConfigFileEntry.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
874 ConfigFileEntry.gline_min_cidr = 16;
875 ConfigFileEntry.gline_min_cidr6 = 48;
876 ConfigFileEntry.invisible_on_connect = 1;
877 ConfigFileEntry.tkline_expire_notices = 1;
878 ConfigFileEntry.hide_spoof_ips = 1;
879 ConfigFileEntry.ignore_bogus_ts = 0;
880 ConfigFileEntry.disable_auth = 0;
881 ConfigFileEntry.kill_chase_time_limit = 90;
882 ConfigFileEntry.default_floodcount = 8;
883 ConfigFileEntry.failed_oper_notice = 1;
884 ConfigFileEntry.dots_in_ident = 0;
885 ConfigFileEntry.min_nonwildcard = 4;
886 ConfigFileEntry.min_nonwildcard_simple = 3;
887 ConfigFileEntry.max_accept = 20;
888 ConfigFileEntry.anti_nick_flood = 0;
889 ConfigFileEntry.max_nick_time = 20;
890 ConfigFileEntry.max_nick_changes = 5;
891 ConfigFileEntry.anti_spam_exit_message_time = 0;
892 ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
893 ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
894 ConfigFileEntry.warn_no_connect_block = 1;
895 ConfigFileEntry.stats_e_disabled = 0;
896 ConfigFileEntry.stats_o_oper_only = 0;
897 ConfigFileEntry.stats_k_oper_only = 1; /* 1 = masked */
898 ConfigFileEntry.stats_i_oper_only = 1; /* 1 = masked */
899 ConfigFileEntry.stats_P_oper_only = 0;
900 ConfigFileEntry.stats_u_oper_only = 0;
901 ConfigFileEntry.caller_id_wait = 60;
902 ConfigFileEntry.opers_bypass_callerid = 0;
903 ConfigFileEntry.pace_wait = 10;
904 ConfigFileEntry.pace_wait_simple = 1;
905 ConfigFileEntry.short_motd = 0;
906 ConfigFileEntry.ping_cookie = 0;
907 ConfigFileEntry.no_oper_flood = 0;
908 ConfigFileEntry.true_no_oper_flood = 0;
909 ConfigFileEntry.oper_pass_resv = 1;
910 ConfigFileEntry.max_targets = MAX_TARGETS_DEFAULT;
911 ConfigFileEntry.oper_only_umodes = UMODE_DEBUG;
912 ConfigFileEntry.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
913 ConfigFileEntry.throttle_count = 1;
914 ConfigFileEntry.throttle_time = 1;
915 }
916
917 static void
918 validate_conf(void)
919 {
920 if (ConfigFileEntry.ts_warn_delta < TS_WARN_DELTA_MIN)
921 ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
922
923 if (ConfigFileEntry.ts_max_delta < TS_MAX_DELTA_MIN)
924 ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
925
926 if (ServerInfo.network_name == NULL)
927 ServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
928
929 if (ServerInfo.network_desc == NULL)
930 ServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
931
932 if (ConfigFileEntry.service_name == NULL)
933 ConfigFileEntry.service_name = xstrdup(SERVICE_NAME_DEFAULT);
934
935 ConfigFileEntry.max_watch = IRCD_MAX(ConfigFileEntry.max_watch, WATCHSIZE_MIN);
936 }
937
938 /* read_conf()
939 *
940 * inputs - file descriptor pointing to config file to use
941 * output - None
942 * side effects - Read configuration file.
943 */
944 static void
945 read_conf(FILE *file)
946 {
947 lineno = 0;
948
949 set_default_conf(); /* Set default values prior to conf parsing */
950 conf_parser_ctx.pass = 1;
951 yyparse(); /* Pick up the classes first */
952
953 rewind(file);
954
955 conf_parser_ctx.pass = 2;
956 yyparse(); /* Load the values from the conf */
957 validate_conf(); /* Check to make sure some values are still okay. */
958 /* Some global values are also loaded here. */
959 class_delete_marked(); /* Delete unused classes that are marked for deletion */
960 }
961
962 /* lookup_confhost()
963 *
964 * start DNS lookups of all hostnames in the conf
965 * line and convert an IP addresses in a.b.c.d number for to IP#s.
966 */
967 void
968 lookup_confhost(struct MaskItem *conf)
969 {
970 struct addrinfo hints, *res;
971
972 /*
973 * Do name lookup now on hostnames given and store the
974 * ip numbers in conf structure.
975 */
976 memset(&hints, 0, sizeof(hints));
977
978 hints.ai_family = AF_UNSPEC;
979 hints.ai_socktype = SOCK_STREAM;
980
981 /* Get us ready for a bind() and don't bother doing dns lookup */
982 hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
983
984 if (getaddrinfo(conf->host, NULL, &hints, &res))
985 {
986 conf_dns_lookup(conf);
987 return;
988 }
989
990 assert(res);
991
992 memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
993 conf->addr.ss_len = res->ai_addrlen;
994 conf->addr.ss.ss_family = res->ai_family;
995
996 freeaddrinfo(res);
997 }
998
999 /* conf_connect_allowed()
1000 *
1001 * inputs - pointer to inaddr
1002 * - int type ipv4 or ipv6
1003 * output - BANNED or accepted
1004 * side effects - none
1005 */
1006 int
1007 conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1008 {
1009 struct ip_entry *ip_found = NULL;
1010 struct MaskItem *conf = find_dline_conf(addr, aftype);
1011
1012 /* DLINE exempt also gets you out of static limits/pacing... */
1013 if (conf && (conf->type == CONF_EXEMPT))
1014 return 0;
1015
1016 if (conf)
1017 return BANNED_CLIENT;
1018
1019 ip_found = ipcache_find_or_add_address(addr);
1020
1021 if ((CurrentTime - ip_found->last_attempt) < ConfigFileEntry.throttle_time)
1022 {
1023 if (ip_found->connection_count >= ConfigFileEntry.throttle_count)
1024 return TOO_FAST;
1025
1026 ++ip_found->connection_count;
1027 }
1028 else
1029 ip_found->connection_count = 1;
1030
1031 ip_found->last_attempt = CurrentTime;
1032 return 0;
1033 }
1034
1035 /* cleanup_tklines()
1036 *
1037 * inputs - NONE
1038 * output - NONE
1039 * side effects - call function to expire temporary k/d lines
1040 * This is an event started off in ircd.c
1041 */
1042 void
1043 cleanup_tklines(void *notused)
1044 {
1045 hostmask_expire_temporary();
1046 expire_tklines(&xconf_items);
1047 expire_tklines(&nresv_items);
1048 expire_tklines(&cresv_items);
1049 }
1050
1051 /* expire_tklines()
1052 *
1053 * inputs - tkline list pointer
1054 * output - NONE
1055 * side effects - expire tklines
1056 */
1057 static void
1058 expire_tklines(dlink_list *tklist)
1059 {
1060 dlink_node *ptr = NULL, *ptr_next = NULL;
1061 struct MaskItem *conf = NULL;
1062
1063 DLINK_FOREACH_SAFE(ptr, ptr_next, tklist->head)
1064 {
1065 conf = ptr->data;
1066
1067 if (!conf->until || conf->until > CurrentTime)
1068 continue;
1069
1070 if (conf->type == CONF_XLINE)
1071 {
1072 if (ConfigFileEntry.tkline_expire_notices)
1073 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1074 "Temporary X-line for [%s] expired", conf->name);
1075 conf_free(conf);
1076 }
1077 else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1078 {
1079 if (ConfigFileEntry.tkline_expire_notices)
1080 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1081 "Temporary RESV for [%s] expired", conf->name);
1082 conf_free(conf);
1083 }
1084 }
1085 }
1086
1087 /* oper_privs_as_string()
1088 *
1089 * inputs - pointer to client_p
1090 * output - pointer to static string showing oper privs
1091 * side effects - return as string, the oper privs as derived from port
1092 */
1093 static const struct oper_privs
1094 {
1095 const unsigned int flag;
1096 const unsigned char c;
1097 } flag_list[] = {
1098 { OPER_FLAG_ADMIN, 'A' },
1099 { OPER_FLAG_REMOTEBAN, 'B' },
1100 { OPER_FLAG_DIE, 'D' },
1101 { OPER_FLAG_GLINE, 'G' },
1102 { OPER_FLAG_REHASH, 'H' },
1103 { OPER_FLAG_KLINE, 'K' },
1104 { OPER_FLAG_KILL, 'N' },
1105 { OPER_FLAG_KILL_REMOTE, 'O' },
1106 { OPER_FLAG_CONNECT, 'P' },
1107 { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1108 { OPER_FLAG_SQUIT, 'R' },
1109 { OPER_FLAG_SQUIT_REMOTE, 'S' },
1110 { OPER_FLAG_UNKLINE, 'U' },
1111 { OPER_FLAG_XLINE, 'X' },
1112 { 0, '\0' }
1113 };
1114
1115 char *
1116 oper_privs_as_string(const unsigned int port)
1117 {
1118 static char privs_out[IRCD_BUFSIZE];
1119 char *privs_ptr = privs_out;
1120
1121 for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1122 {
1123 if (port & opriv->flag)
1124 *privs_ptr++ = opriv->c;
1125 else
1126 *privs_ptr++ = ToLower(opriv->c);
1127 }
1128
1129 *privs_ptr = '\0';
1130
1131 return privs_out;
1132 }
1133
1134 /*
1135 * Input: A client to find the active operator {} name for.
1136 * Output: The nick!user@host{oper} of the oper.
1137 * "oper" is server name for remote opers
1138 * Side effects: None.
1139 */
1140 const char *
1141 get_oper_name(const struct Client *client_p)
1142 {
1143 const dlink_node *cnode = NULL;
1144 /* +5 for !,@,{,} and null */
1145 static char buffer[NICKLEN + USERLEN + HOSTLEN + HOSTLEN + 5];
1146
1147 if (MyConnect(client_p))
1148 {
1149 if ((cnode = client_p->localClient->confs.head))
1150 {
1151 const struct MaskItem *conf = cnode->data;
1152
1153 if (IsConfOperator(conf))
1154 {
1155 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1156 client_p->username, client_p->host, conf->name);
1157 return buffer;
1158 }
1159 }
1160
1161 /*
1162 * Probably should assert here for now. If there is an oper out there
1163 * with no operator {} conf attached, it would be good for us to know...
1164 */
1165 assert(0); /* Oper without oper conf! */
1166 }
1167
1168 snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1169 client_p->username, client_p->host, client_p->servptr->name);
1170 return buffer;
1171 }
1172
1173 /* read_conf_files()
1174 *
1175 * inputs - cold start YES or NO
1176 * output - none
1177 * side effects - read all conf files needed, ircd.conf kline.conf etc.
1178 */
1179 void
1180 read_conf_files(int cold)
1181 {
1182 const char *filename = NULL;
1183 char chanmodes[IRCD_BUFSIZE] = "";
1184 char chanlimit[IRCD_BUFSIZE] = "";
1185
1186 conf_parser_ctx.boot = cold;
1187 filename = ConfigFileEntry.configfile;
1188
1189 /* We need to know the initial filename for the yyerror() to report
1190 FIXME: The full path is in conffilenamebuf first time since we
1191 don't know anything else
1192
1193 - Gozem 2002-07-21
1194 */
1195 strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1196
1197 if ((conf_parser_ctx.conf_file = fopen(filename, "r")) == NULL)
1198 {
1199 if (cold)
1200 {
1201 ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
1202 filename, strerror(errno));
1203 exit(-1);
1204 }
1205 else
1206 {
1207 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1208 "Unable to read configuration file '%s': %s",
1209 filename, strerror(errno));
1210 return;
1211 }
1212 }
1213
1214 if (!cold)
1215 clear_out_old_conf();
1216
1217 read_conf(conf_parser_ctx.conf_file);
1218 fclose(conf_parser_ctx.conf_file);
1219
1220 log_reopen_all();
1221
1222 add_isupport("NICKLEN", NULL, ServerInfo.max_nick_length);
1223 add_isupport("NETWORK", ServerInfo.network_name, -1);
1224
1225 snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1226 add_isupport("MAXLIST", chanmodes, -1);
1227 add_isupport("MAXTARGETS", NULL, ConfigFileEntry.max_targets);
1228 add_isupport("CHANTYPES", "#", -1);
1229
1230 snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1231 ConfigChannel.max_channels);
1232 add_isupport("CHANLIMIT", chanlimit, -1);
1233 snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstMORS");
1234 add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1235 add_isupport("TOPICLEN", NULL, ServerInfo.max_topic_length);
1236 add_isupport("CHANMODES", chanmodes, -1);
1237
1238 /*
1239 * message_locale may have changed. rebuild isupport since it relies
1240 * on strlen(form_str(RPL_ISUPPORT))
1241 */
1242 rebuild_isupport_message_line();
1243 }
1244
1245 /* clear_out_old_conf()
1246 *
1247 * inputs - none
1248 * output - none
1249 * side effects - Clear out the old configuration
1250 */
1251 static void
1252 clear_out_old_conf(void)
1253 {
1254 dlink_node *ptr = NULL, *next_ptr = NULL;
1255 struct MaskItem *conf;
1256 dlink_list *free_items [] = {
1257 &server_items, &oconf_items,
1258 &uconf_items, &xconf_items,
1259 &nresv_items, &cluster_items, &service_items, &cresv_items, NULL
1260 };
1261
1262 dlink_list ** iterator = free_items; /* C is dumb */
1263
1264 /* We only need to free anything allocated by yyparse() here.
1265 * Resetting structs, etc, is taken care of by set_default_conf().
1266 */
1267
1268 for (; *iterator != NULL; iterator++)
1269 {
1270 DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
1271 {
1272 conf = ptr->data;
1273
1274 dlinkDelete(&conf->node, map_to_list(conf->type));
1275
1276 /* XXX This is less than pretty */
1277 if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1278 {
1279 if (!conf->ref_count)
1280 conf_free(conf);
1281 }
1282 else if (conf->type == CONF_XLINE)
1283 {
1284 if (!conf->until)
1285 conf_free(conf);
1286 }
1287 else
1288 conf_free(conf);
1289 }
1290 }
1291
1292 motd_clear();
1293
1294 /*
1295 * don't delete the class table, rather mark all entries
1296 * for deletion. The table is cleaned up by class_delete_marked. - avalon
1297 */
1298 class_mark_for_deletion();
1299
1300 clear_out_address_conf();
1301
1302 /* clean out module paths */
1303 mod_clear_paths();
1304
1305 /* clean out ServerInfo */
1306 MyFree(ServerInfo.description);
1307 ServerInfo.description = NULL;
1308 MyFree(ServerInfo.network_name);
1309 ServerInfo.network_name = NULL;
1310 MyFree(ServerInfo.network_desc);
1311 ServerInfo.network_desc = NULL;
1312 #ifdef HAVE_LIBCRYPTO
1313 if (ServerInfo.rsa_private_key)
1314 {
1315 RSA_free(ServerInfo.rsa_private_key);
1316 ServerInfo.rsa_private_key = NULL;
1317 }
1318
1319 MyFree(ServerInfo.rsa_private_key_file);
1320 ServerInfo.rsa_private_key_file = NULL;
1321 #endif
1322
1323 /* clean out AdminInfo */
1324 MyFree(AdminInfo.name);
1325 AdminInfo.name = NULL;
1326 MyFree(AdminInfo.email);
1327 AdminInfo.email = NULL;
1328 MyFree(AdminInfo.description);
1329 AdminInfo.description = NULL;
1330
1331 /* clean out listeners */
1332 close_listeners();
1333
1334 /* clean out general */
1335 MyFree(ConfigFileEntry.service_name);
1336 ConfigFileEntry.service_name = NULL;
1337 }
1338
1339 /* conf_add_class_to_conf()
1340 *
1341 * inputs - pointer to config item
1342 * output - NONE
1343 * side effects - Add a class pointer to a conf
1344 */
1345 void
1346 conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1347 {
1348 if (class_name == NULL)
1349 {
1350 conf->class = class_default;
1351
1352 if (conf->type == CONF_CLIENT)
1353 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1354 "Warning *** Defaulting to default class for %s@%s",
1355 conf->user, conf->host);
1356 else
1357 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1358 "Warning *** Defaulting to default class for %s",
1359 conf->name);
1360 }
1361 else
1362 conf->class = class_find(class_name, 1);
1363
1364 if (conf->class == NULL)
1365 {
1366 if (conf->type == CONF_CLIENT)
1367 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1368 "Warning *** Defaulting to default class for %s@%s",
1369 conf->user, conf->host);
1370 else
1371 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1372 "Warning *** Defaulting to default class for %s",
1373 conf->name);
1374 conf->class = class_default;
1375 }
1376 }
1377
1378 /* yyerror()
1379 *
1380 * inputs - message from parser
1381 * output - NONE
1382 * side effects - message to opers and log file entry is made
1383 */
1384 void
1385 yyerror(const char *msg)
1386 {
1387 char newlinebuf[IRCD_BUFSIZE];
1388
1389 if (conf_parser_ctx.pass != 1)
1390 return;
1391
1392 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1393 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1394 "\"%s\", line %u: %s: %s",
1395 conffilebuf, lineno + 1, msg, newlinebuf);
1396 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1397 conffilebuf, lineno + 1, msg, newlinebuf);
1398 }
1399
1400 void
1401 conf_error_report(const char *msg)
1402 {
1403 char newlinebuf[IRCD_BUFSIZE];
1404
1405 strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1406 sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1407 "\"%s\", line %u: %s: %s",
1408 conffilebuf, lineno + 1, msg, newlinebuf);
1409 ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1410 conffilebuf, lineno + 1, msg, newlinebuf);
1411 }
1412
1413 /*
1414 * valid_tkline()
1415 *
1416 * inputs - pointer to ascii string to check
1417 * - whether the specified time is in seconds or minutes
1418 * output - -1 not enough parameters
1419 * - 0 if not an integer number, else the number
1420 * side effects - none
1421 * Originally written by Dianora (Diane, db@db.net)
1422 */
1423 time_t
1424 valid_tkline(const char *data, const int minutes)
1425 {
1426 const unsigned char *p = (const unsigned char *)data;
1427 unsigned char tmpch = '\0';
1428 time_t result = 0;
1429
1430 while ((tmpch = *p++))
1431 {
1432 if (!IsDigit(tmpch))
1433 return 0;
1434
1435 result *= 10;
1436 result += (tmpch & 0xF);
1437 }
1438
1439 /*
1440 * In the degenerate case where oper does a /quote kline 0 user@host :reason
1441 * i.e. they specifically use 0, I am going to return 1 instead
1442 * as a return value of non-zero is used to flag it as a temporary kline
1443 */
1444 if (result == 0)
1445 result = 1;
1446
1447 /*
1448 * If the incoming time is in seconds convert it to minutes for the purpose
1449 * of this calculation
1450 */
1451 if (!minutes)
1452 result = result / 60;
1453
1454 if (result > MAX_TDKLINE_TIME)
1455 result = MAX_TDKLINE_TIME;
1456
1457 result = result * 60; /* turn it into seconds */
1458
1459 return result;
1460 }
1461
1462 /* valid_wild_card_simple()
1463 *
1464 * inputs - data to check for sufficient non-wildcard characters
1465 * outputs - 1 if valid, else 0
1466 * side effects - none
1467 */
1468 int
1469 valid_wild_card_simple(const char *data)
1470 {
1471 const unsigned char *p = (const unsigned char *)data;
1472 unsigned char tmpch = '\0';
1473 unsigned int nonwild = 0;
1474
1475 while ((tmpch = *p++))
1476 {
1477 if (tmpch == '\\' && *p)
1478 {
1479 ++p;
1480 if (++nonwild >= ConfigFileEntry.min_nonwildcard_simple)
1481 return 1;
1482 }
1483 else if (!IsMWildChar(tmpch))
1484 {
1485 if (++nonwild >= ConfigFileEntry.min_nonwildcard_simple)
1486 return 1;
1487 }
1488 }
1489
1490 return 0;
1491 }
1492
1493 /* valid_wild_card()
1494 *
1495 * input - pointer to client
1496 * - int flag, 0 for no warning oper 1 for warning oper
1497 * - count of following varargs to check
1498 * output - 0 if not valid, 1 if valid
1499 * side effects - NOTICE is given to source_p if warn is 1
1500 */
1501 int
1502 valid_wild_card(struct Client *source_p, int warn, int count, ...)
1503 {
1504 unsigned char tmpch = '\0';
1505 unsigned int nonwild = 0;
1506 va_list args;
1507
1508 /*
1509 * Now we must check the user and host to make sure there
1510 * are at least NONWILDCHARS non-wildcard characters in
1511 * them, otherwise assume they are attempting to kline
1512 * *@* or some variant of that. This code will also catch
1513 * people attempting to kline *@*.tld, as long as NONWILDCHARS
1514 * is greater than 3. In that case, there are only 3 non-wild
1515 * characters (tld), so if NONWILDCHARS is 4, the kline will
1516 * be disallowed.
1517 * -wnder
1518 */
1519
1520 va_start(args, count);
1521
1522 while (count--)
1523 {
1524 const unsigned char *p = va_arg(args, const unsigned char *);
1525 if (p == NULL)
1526 continue;
1527
1528 while ((tmpch = *p++))
1529 {
1530 if (!IsKWildChar(tmpch))
1531 {
1532 /*
1533 * If we find enough non-wild characters, we can
1534 * break - no point in searching further.
1535 */
1536 if (++nonwild >= ConfigFileEntry.min_nonwildcard)
1537 {
1538 va_end(args);
1539 return 1;
1540 }
1541 }
1542 }
1543 }
1544
1545 if (warn)
1546 sendto_one_notice(source_p, &me,
1547 ":Please include at least %u non-wildcard characters with the mask",
1548 ConfigFileEntry.min_nonwildcard);
1549 va_end(args);
1550 return 0;
1551 }
1552
1553 /* XXX should this go into a separate file ? -Dianora */
1554 /* parse_aline
1555 *
1556 * input - pointer to cmd name being used
1557 * - pointer to client using cmd
1558 * - parc parameter count
1559 * - parv[] list of parameters to parse
1560 * - parse_flags bit map of things to test
1561 * - pointer to user or string to parse into
1562 * - pointer to host or NULL to parse into if non NULL
1563 * - pointer to optional tkline time or NULL
1564 * - pointer to target_server to parse into if non NULL
1565 * - pointer to reason to parse into
1566 *
1567 * output - 1 if valid, -1 if not valid
1568 * side effects - A generalised k/d/x etc. line parser,
1569 * "ALINE [time] user@host|string [ON] target :reason"
1570 * will parse returning a parsed user, host if
1571 * h_p pointer is non NULL, string otherwise.
1572 * if tkline_time pointer is non NULL a tk line will be set
1573 * to non zero if found.
1574 * if tkline_time pointer is NULL and tk line is found,
1575 * error is reported.
1576 * if target_server is NULL and an "ON" is found error
1577 * is reported.
1578 * if reason pointer is NULL ignore pointer,
1579 * this allows use of parse_a_line in unkline etc.
1580 *
1581 * - Dianora
1582 */
1583 int
1584 parse_aline(const char *cmd, struct Client *source_p,
1585 int parc, char **parv,
1586 int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1587 char **target_server, char **reason)
1588 {
1589 int found_tkline_time=0;
1590 static char def_reason[] = CONF_NOREASON;
1591 static char user[USERLEN*4+1];
1592 static char host[HOSTLEN*4+1];
1593
1594 parv++;
1595 parc--;
1596
1597 found_tkline_time = valid_tkline(*parv, TK_MINUTES);
1598
1599 if (found_tkline_time != 0)
1600 {
1601 parv++;
1602 parc--;
1603
1604 if (tkline_time != NULL)
1605 *tkline_time = found_tkline_time;
1606 else
1607 {
1608 sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1609 return -1;
1610 }
1611 }
1612
1613 if (parc == 0)
1614 {
1615 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1616 return -1;
1617 }
1618
1619 if (h_p == NULL)
1620 *up_p = *parv;
1621 else
1622 {
1623 if (find_user_host(source_p, *parv, user, host, parse_flags) == 0)
1624 return -1;
1625
1626 *up_p = user;
1627 *h_p = host;
1628 }
1629
1630 parc--;
1631 parv++;
1632
1633 if (parc != 0)
1634 {
1635 if (irccmp(*parv, "ON") == 0)
1636 {
1637 parc--;
1638 parv++;
1639
1640 if (target_server == NULL)
1641 {
1642 sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1643 return -1;
1644 }
1645
1646 if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1647 {
1648 sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1649 return -1;
1650 }
1651
1652 if (parc == 0 || EmptyString(*parv))
1653 {
1654 sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1655 return -1;
1656 }
1657
1658 *target_server = *parv;
1659 parc--;
1660 parv++;
1661 }
1662 else
1663 {
1664 /* Make sure target_server *is* NULL if no ON server found
1665 * caller probably NULL'd it first, but no harm to do it again -db
1666 */
1667 if (target_server != NULL)
1668 *target_server = NULL;
1669 }
1670 }
1671
1672 if (h_p != NULL)
1673 {
1674 if (strchr(user, '!') != NULL)
1675 {
1676 sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1677 return -1;
1678 }
1679
1680 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 2, *up_p, *h_p))
1681 return -1;
1682 }
1683 else
1684 if ((parse_flags & AWILD) && !valid_wild_card(source_p, 1, 1, *up_p))
1685 return -1;
1686
1687 if (reason != NULL)
1688 {
1689 if (parc != 0 && !EmptyString(*parv))
1690 {
1691 *reason = *parv;
1692 if (!valid_comment(source_p, *reason, 1))
1693 return -1;
1694 }
1695 else
1696 *reason = def_reason;
1697 }
1698
1699 return 1;
1700 }
1701
1702 /* find_user_host()
1703 *
1704 * inputs - pointer to client placing kline
1705 * - pointer to user_host_or_nick
1706 * - pointer to user buffer
1707 * - pointer to host buffer
1708 * output - 0 if not ok to kline, 1 to kline i.e. if valid user host
1709 * side effects -
1710 */
1711 static int
1712 find_user_host(struct Client *source_p, char *user_host_or_nick,
1713 char *luser, char *lhost, unsigned int flags)
1714 {
1715 struct Client *target_p = NULL;
1716 char *hostp = NULL;
1717
1718 if (lhost == NULL)
1719 {
1720 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1);
1721 return 1;
1722 }
1723
1724 if ((hostp = strchr(user_host_or_nick, '@')) || *user_host_or_nick == '*')
1725 {
1726 /* Explicit user@host mask given */
1727
1728 if (hostp != NULL) /* I'm a little user@host */
1729 {
1730 *(hostp++) = '\0'; /* short and squat */
1731 if (*user_host_or_nick)
1732 strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1733 else
1734 strcpy(luser, "*");
1735
1736 if (*hostp)
1737 strlcpy(lhost, hostp, HOSTLEN + 1); /* here is my host */
1738 else
1739 strcpy(lhost, "*");
1740 }
1741 else
1742 {
1743 luser[0] = '*'; /* no @ found, assume its *@somehost */
1744 luser[1] = '\0';
1745 strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1746 }
1747
1748 return 1;
1749 }
1750 else
1751 {
1752 /* Try to find user@host mask from nick */
1753 /* Okay to use source_p as the first param, because source_p == client_p */
1754 if ((target_p =
1755 find_chasing(source_p, user_host_or_nick)) == NULL)
1756 return 0; /* find_chasing sends ERR_NOSUCHNICK */
1757
1758 if (IsExemptKline(target_p))
1759 {
1760 if (!IsServer(source_p))
1761 sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
1762 return 0;
1763 }
1764
1765 /*
1766 * turn the "user" bit into "*user", blow away '~'
1767 * if found in original user name (non-idented)
1768 */
1769 strlcpy(luser, target_p->username, USERLEN*4 + 1);
1770
1771 if (target_p->username[0] == '~')
1772 luser[0] = '*';
1773
1774 if (target_p->sockhost[0] == '\0' ||
1775 (target_p->sockhost[0] == '0' && target_p->sockhost[1] == '\0'))
1776 strlcpy(lhost, target_p->host, HOSTLEN*4 + 1);
1777 else
1778 strlcpy(lhost, target_p->sockhost, HOSTLEN*4 + 1);
1779 return 1;
1780 }
1781
1782 return 0;
1783 }
1784
1785 /* valid_comment()
1786 *
1787 * inputs - pointer to client
1788 * - pointer to comment
1789 * output - 0 if no valid comment,
1790 * - 1 if valid
1791 * side effects - truncates reason where necessary
1792 */
1793 int
1794 valid_comment(struct Client *source_p, char *comment, int warn)
1795 {
1796 if (strlen(comment) > REASONLEN)
1797 comment[REASONLEN-1] = '\0';
1798
1799 return 1;
1800 }
1801
1802 /* match_conf_password()
1803 *
1804 * inputs - pointer to given password
1805 * - pointer to Conf
1806 * output - 1 or 0 if match
1807 * side effects - none
1808 */
1809 int
1810 match_conf_password(const char *password, const struct MaskItem *conf)
1811 {
1812 const char *encr = NULL;
1813
1814 if (EmptyString(password) || EmptyString(conf->passwd))
1815 return 0;
1816
1817 if (conf->flags & CONF_FLAGS_ENCRYPTED)
1818 encr = crypt(password, conf->passwd);
1819 else
1820 encr = password;
1821
1822 return encr && !strcmp(encr, conf->passwd);
1823 }
1824
1825 /*
1826 * cluster_a_line
1827 *
1828 * inputs - client sending the cluster
1829 * - command name "KLINE" "XLINE" etc.
1830 * - capab -- CAP_KLN etc. from server.h
1831 * - cluster type -- CLUSTER_KLINE etc. from conf.h
1832 * - pattern and args to send along
1833 * output - none
1834 * side effects - Take source_p send the pattern with args given
1835 * along to all servers that match capab and cluster type
1836 */
1837 void
1838 cluster_a_line(struct Client *source_p, const char *command,
1839 int capab, int cluster_type, const char *pattern, ...)
1840 {
1841 va_list args;
1842 char buffer[IRCD_BUFSIZE] = "";
1843 const dlink_node *ptr = NULL;
1844
1845 va_start(args, pattern);
1846 vsnprintf(buffer, sizeof(buffer), pattern, args);
1847 va_end(args);
1848
1849 DLINK_FOREACH(ptr, cluster_items.head)
1850 {
1851 const struct MaskItem *conf = ptr->data;
1852
1853 if (conf->flags & cluster_type)
1854 sendto_match_servs(source_p, conf->name, CAP_CLUSTER|capab,
1855 "%s %s %s", command, conf->name, buffer);
1856 }
1857 }
1858
1859 /*
1860 * split_nuh
1861 *
1862 * inputs - pointer to original mask (modified in place)
1863 * - pointer to pointer where nick should go
1864 * - pointer to pointer where user should go
1865 * - pointer to pointer where host should go
1866 * output - NONE
1867 * side effects - mask is modified in place
1868 * If nick pointer is NULL, ignore writing to it
1869 * this allows us to use this function elsewhere.
1870 *
1871 * mask nick user host
1872 * ---------------------- ------- ------- ------
1873 * Dianora!db@db.net Dianora db db.net
1874 * Dianora Dianora * *
1875 * db.net * * db.net
1876 * OR if nick pointer is NULL
1877 * Dianora - * Dianora
1878 * Dianora! Dianora * *
1879 * Dianora!@ Dianora * *
1880 * Dianora!db Dianora db *
1881 * Dianora!@db.net Dianora * db.net
1882 * db@db.net * db db.net
1883 * !@ * * *
1884 * @ * * *
1885 * ! * * *
1886 */
1887 void
1888 split_nuh(struct split_nuh_item *const iptr)
1889 {
1890 char *p = NULL, *q = NULL;
1891
1892 if (iptr->nickptr)
1893 strlcpy(iptr->nickptr, "*", iptr->nicksize);
1894 if (iptr->userptr)
1895 strlcpy(iptr->userptr, "*", iptr->usersize);
1896 if (iptr->hostptr)
1897 strlcpy(iptr->hostptr, "*", iptr->hostsize);
1898
1899 if ((p = strchr(iptr->nuhmask, '!')))
1900 {
1901 *p = '\0';
1902
1903 if (iptr->nickptr && *iptr->nuhmask)
1904 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1905
1906 if ((q = strchr(++p, '@')))
1907 {
1908 *q++ = '\0';
1909
1910 if (*p)
1911 strlcpy(iptr->userptr, p, iptr->usersize);
1912
1913 if (*q)
1914 strlcpy(iptr->hostptr, q, iptr->hostsize);
1915 }
1916 else
1917 {
1918 if (*p)
1919 strlcpy(iptr->userptr, p, iptr->usersize);
1920 }
1921 }
1922 else
1923 {
1924 /* No ! found so lets look for a user@host */
1925 if ((p = strchr(iptr->nuhmask, '@')))
1926 {
1927 /* if found a @ */
1928 *p++ = '\0';
1929
1930 if (*iptr->nuhmask)
1931 strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
1932
1933 if (*p)
1934 strlcpy(iptr->hostptr, p, iptr->hostsize);
1935 }
1936 else
1937 {
1938 /* no @ found */
1939 if (!iptr->nickptr || strpbrk(iptr->nuhmask, ".:"))
1940 strlcpy(iptr->hostptr, iptr->nuhmask, iptr->hostsize);
1941 else
1942 strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
1943 }
1944 }
1945 }

Properties

Name Value
svn:eol-style native
svn:keywords Id Revision