mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-25 01:55:19 +01:00
3c491303b5
ftp://ftp.nrl.navy.mil/pub/security/opie/
1287 lines
27 KiB
Plaintext
1287 lines
27 KiB
Plaintext
/* ftpcmd.y: yacc parser for the FTP daemon.
|
|
|
|
%%% portions-copyright-cmetz
|
|
Portions of this software are Copyright 1996 by Craig Metz, All Rights
|
|
Reserved. The Inner Net License Version 2 applies to these portions of
|
|
the software.
|
|
You should have received a copy of the license with this software. If
|
|
you didn't get a copy, you may request one from <license@inner.net>.
|
|
|
|
History:
|
|
|
|
Modified by cmetz for OPIE 2.3. Moved LS_COMMAND here.
|
|
Modified by cmetz for OPIE 2.2. Fixed a *lot* of warnings.
|
|
Use FUNCTION declaration et al. Removed useless strings.
|
|
Changed some char []s to char *s. Deleted comment address.
|
|
Changed tmpline references to be more pure-pointer
|
|
references. Changed tmpline declaration back to char [].
|
|
Modified at NRL for OPIE 2.1. Minor changes for autoconf.
|
|
Modified at NRL for OPIE 2.01. Added forward declaration for sitetab[]
|
|
-- fixes problems experienced by bison users. Merged in new
|
|
PORT attack fixes from Hobbit.
|
|
Modified at NRL for OPIE 2.0.
|
|
Originally from BSD.
|
|
*/
|
|
/*
|
|
* Copyright (c) 1985, 1988 Regents of the University of California.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by the University of
|
|
* California, Berkeley and its contributors.
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* @(#)ftpcmd.y 5.24 (Berkeley) 2/25/91
|
|
*/
|
|
|
|
/*
|
|
* Grammar for FTP commands.
|
|
* See RFC 959.
|
|
*/
|
|
|
|
%{
|
|
#include "opie_cfg.h"
|
|
|
|
#include <sys/param.h>
|
|
#include <sys/types.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/stat.h>
|
|
#include <netinet/in.h>
|
|
#include <arpa/ftp.h>
|
|
#include <signal.h>
|
|
#include <setjmp.h>
|
|
#include <syslog.h>
|
|
#if TM_IN_SYS_TIME
|
|
#include <sys/time.h>
|
|
#else /* TM_IN_SYS_TIME */
|
|
#include <time.h>
|
|
#endif /* TM_IN_SYS_TIME */
|
|
#include <pwd.h>
|
|
#include <unistd.h>
|
|
#include <stdio.h>
|
|
#include <ctype.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include "opie.h"
|
|
|
|
#if HAVE_LS_G_FLAG
|
|
#define LS_COMMAND "/bin/ls -lgA"
|
|
#else /* HAVE_LS_G_FLAG */
|
|
#define LS_COMMAND "/bin/ls -lA"
|
|
#endif /* HAVE_LS_G_FLAG */
|
|
|
|
extern struct sockaddr_in data_dest;
|
|
extern struct sockaddr_in his_addr;
|
|
extern int logged_in;
|
|
extern struct passwd *pw;
|
|
extern int guest;
|
|
extern int type;
|
|
extern int form;
|
|
extern int debug;
|
|
extern int timeout;
|
|
extern int maxtimeout;
|
|
extern int pdata;
|
|
extern char *remotehost;
|
|
extern char *proctitle;
|
|
extern char *globerr;
|
|
extern int usedefault;
|
|
extern int transflag;
|
|
extern char tmpline[];
|
|
char **ftpglob();
|
|
|
|
VOIDRET dologout __P((int));
|
|
VOIDRET upper __P((char *));
|
|
VOIDRET nack __P((char *));
|
|
VOIDRET opiefatal __P((char *));
|
|
|
|
VOIDRET pass __P((char *));
|
|
int user __P((char *));
|
|
VOIDRET passive __P((void));
|
|
VOIDRET retrieve __P((char *, char *));
|
|
VOIDRET store __P((char *, char *, int));
|
|
VOIDRET send_file_list __P((char *));
|
|
VOIDRET statfilecmd __P((char *));
|
|
VOIDRET statcmd __P((void));
|
|
VOIDRET delete __P((char *));
|
|
VOIDRET renamecmd __P((char *, char *));
|
|
VOIDRET cwd __P((char *));
|
|
VOIDRET makedir __P((char *));
|
|
VOIDRET removedir __P((char *));
|
|
VOIDRET pwd __P((void));
|
|
|
|
VOIDRET sizecmd __P((char *));
|
|
|
|
off_t restart_point;
|
|
|
|
static int cmd_type;
|
|
static int cmd_form;
|
|
static int cmd_bytesz;
|
|
static unsigned short cliport = 0;
|
|
char cbuf[512];
|
|
char *fromname;
|
|
|
|
struct tab {
|
|
char *name;
|
|
short token;
|
|
short state;
|
|
short implemented; /* 1 if command is implemented */
|
|
char *help;
|
|
};
|
|
|
|
VOIDRET help __P((struct tab *, char *));
|
|
|
|
struct tab cmdtab[], sitetab[];
|
|
|
|
%}
|
|
|
|
%token
|
|
A B C E F I
|
|
L N P R S T
|
|
|
|
SP CRLF COMMA STRING NUMBER
|
|
|
|
USER PASS ACCT REIN QUIT PORT
|
|
PASV TYPE STRU MODE RETR STOR
|
|
APPE MLFL MAIL MSND MSOM MSAM
|
|
MRSQ MRCP ALLO REST RNFR RNTO
|
|
ABOR DELE CWD LIST NLST SITE
|
|
STAT HELP NOOP MKD RMD PWD
|
|
CDUP STOU SMNT SYST SIZE MDTM
|
|
|
|
UMASK IDLE CHMOD
|
|
|
|
LEXERR
|
|
|
|
%start cmd_list
|
|
|
|
%%
|
|
|
|
cmd_list: /* empty */
|
|
| cmd_list cmd
|
|
= {
|
|
fromname = (char *) 0;
|
|
restart_point = (off_t) 0;
|
|
}
|
|
| cmd_list rcmd
|
|
;
|
|
|
|
cmd: USER SP username CRLF
|
|
= {
|
|
user((char *) $3);
|
|
free((char *) $3);
|
|
}
|
|
| PASS SP password CRLF
|
|
= {
|
|
pass((char *) $3);
|
|
free((char *) $3);
|
|
}
|
|
| PORT check_login SP host_port CRLF
|
|
= {
|
|
usedefault = 0;
|
|
if (pdata >= 0) {
|
|
(void) close(pdata);
|
|
pdata = -1;
|
|
}
|
|
/* H* port fix, part B: admonish the twit.
|
|
Also require login before PORT works */
|
|
if ($2) {
|
|
if ((cliport > 1023) && (data_dest.sin_addr.s_addr > 0)) {
|
|
reply(200, "PORT command successful.");
|
|
} else {
|
|
syslog (LOG_WARNING, "refused %s from %s",
|
|
cbuf, remotehost);
|
|
reply(500, "You've GOT to be joking.");
|
|
}
|
|
}
|
|
}
|
|
/* | PASV CRLF
|
|
= {
|
|
passive();
|
|
} */
|
|
| PASV check_login CRLF
|
|
= {
|
|
/* Require login for PASV, too. This actually fixes a bug -- telnet to an
|
|
unfixed wu-ftpd and type PASV first off, and it crashes! */
|
|
if ($2) {
|
|
passive();
|
|
}
|
|
}
|
|
| TYPE SP type_code CRLF
|
|
= {
|
|
switch (cmd_type) {
|
|
|
|
case TYPE_A:
|
|
if (cmd_form == FORM_N) {
|
|
reply(200, "Type set to A.");
|
|
type = cmd_type;
|
|
form = cmd_form;
|
|
} else
|
|
reply(504, "Form must be N.");
|
|
break;
|
|
|
|
case TYPE_E:
|
|
reply(504, "Type E not implemented.");
|
|
break;
|
|
|
|
case TYPE_I:
|
|
reply(200, "Type set to I.");
|
|
type = cmd_type;
|
|
break;
|
|
|
|
case TYPE_L:
|
|
#if NBBY == 8
|
|
if (cmd_bytesz == 8) {
|
|
reply(200,
|
|
"Type set to L (byte size 8).");
|
|
type = cmd_type;
|
|
} else
|
|
reply(504, "Byte size must be 8.");
|
|
#else /* NBBY == 8 */
|
|
UNIMPLEMENTED for NBBY != 8
|
|
#endif /* NBBY == 8 */
|
|
}
|
|
}
|
|
| STRU SP struct_code CRLF
|
|
= {
|
|
switch ($3) {
|
|
|
|
case STRU_F:
|
|
reply(200, "STRU F ok.");
|
|
break;
|
|
|
|
default:
|
|
reply(504, "Unimplemented STRU type.");
|
|
}
|
|
}
|
|
| MODE SP mode_code CRLF
|
|
= {
|
|
switch ($3) {
|
|
|
|
case MODE_S:
|
|
reply(200, "MODE S ok.");
|
|
break;
|
|
|
|
default:
|
|
reply(502, "Unimplemented MODE type.");
|
|
}
|
|
}
|
|
| ALLO SP NUMBER CRLF
|
|
= {
|
|
reply(202, "ALLO command ignored.");
|
|
}
|
|
| ALLO SP NUMBER SP R SP NUMBER CRLF
|
|
= {
|
|
reply(202, "ALLO command ignored.");
|
|
}
|
|
| RETR check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
retrieve((char *) 0, (char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| STOR check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
store((char *) $4, "w", 0);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| APPE check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
store((char *) $4, "a", 0);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| NLST check_login CRLF
|
|
= {
|
|
if ($2)
|
|
send_file_list(".");
|
|
}
|
|
| NLST check_login SP STRING CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
send_file_list((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| LIST check_login CRLF
|
|
= {
|
|
if ($2)
|
|
retrieve(LS_COMMAND, "");
|
|
}
|
|
| LIST check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
{
|
|
char buffer[sizeof(LS_COMMAND)+3];
|
|
strcpy(buffer, LS_COMMAND);
|
|
strcat(buffer, " %s");
|
|
retrieve(buffer, (char *) $4);
|
|
}
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| STAT check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
statfilecmd((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| STAT CRLF
|
|
= {
|
|
statcmd();
|
|
}
|
|
| DELE check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
delete((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| RNTO SP pathname CRLF
|
|
= {
|
|
if (fromname) {
|
|
renamecmd(fromname, (char *) $3);
|
|
free(fromname);
|
|
fromname = (char *) 0;
|
|
} else {
|
|
reply(503, "Bad sequence of commands.");
|
|
}
|
|
free((char *) $3);
|
|
}
|
|
| ABOR CRLF
|
|
= {
|
|
reply(225, "ABOR command successful.");
|
|
}
|
|
| CWD check_login CRLF
|
|
= {
|
|
if ($2)
|
|
cwd(pw->pw_dir);
|
|
}
|
|
| CWD check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
cwd((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| HELP CRLF
|
|
= {
|
|
help(cmdtab, (char *) 0);
|
|
}
|
|
| HELP SP STRING CRLF
|
|
= {
|
|
register char *cp = (char *)$3;
|
|
|
|
if (strncasecmp(cp, "SITE", 4) == 0) {
|
|
cp = (char *)$3 + 4;
|
|
if (*cp == ' ')
|
|
cp++;
|
|
if (*cp)
|
|
help(sitetab, cp);
|
|
else
|
|
help(sitetab, (char *) 0);
|
|
} else
|
|
help(cmdtab, (char *) $3);
|
|
}
|
|
| NOOP CRLF
|
|
= {
|
|
reply(200, "NOOP command successful.");
|
|
}
|
|
| MKD check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
makedir((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| RMD check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
removedir((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| PWD check_login CRLF
|
|
= {
|
|
if ($2)
|
|
pwd();
|
|
}
|
|
| CDUP check_login CRLF
|
|
= {
|
|
if ($2)
|
|
cwd("..");
|
|
}
|
|
| SITE SP HELP CRLF
|
|
= {
|
|
help(sitetab, (char *) 0);
|
|
}
|
|
| SITE SP HELP SP STRING CRLF
|
|
= {
|
|
help(sitetab, (char *) $5);
|
|
}
|
|
| SITE SP UMASK check_login CRLF
|
|
= {
|
|
int oldmask;
|
|
|
|
if ($4) {
|
|
oldmask = umask(0);
|
|
(void) umask(oldmask);
|
|
reply(200, "Current UMASK is %03o", oldmask);
|
|
}
|
|
}
|
|
| SITE SP UMASK check_login SP octal_number CRLF
|
|
= {
|
|
int oldmask;
|
|
|
|
if ($4) {
|
|
if (($6 == -1) || ($6 > 0777)) {
|
|
reply(501, "Bad UMASK value");
|
|
} else {
|
|
oldmask = umask($6);
|
|
reply(200,
|
|
"UMASK set to %03o (was %03o)",
|
|
$6, oldmask);
|
|
}
|
|
}
|
|
}
|
|
| SITE SP CHMOD check_login SP octal_number SP pathname CRLF
|
|
= {
|
|
if ($4 && $8) {
|
|
if ($6 > 0777)
|
|
reply(501,
|
|
"CHMOD: Mode value must be between 0 and 0777");
|
|
else if (chmod((char *) $8, $6) < 0)
|
|
perror_reply(550, (char *) $8);
|
|
else
|
|
reply(200, "CHMOD command successful.");
|
|
}
|
|
if ($8)
|
|
free((char *) $8);
|
|
}
|
|
| SITE SP IDLE CRLF
|
|
= {
|
|
reply(200,
|
|
"Current IDLE time limit is %d seconds; max %d",
|
|
timeout, maxtimeout);
|
|
}
|
|
| SITE SP IDLE SP NUMBER CRLF
|
|
= {
|
|
if ($5 < 30 || $5 > maxtimeout) {
|
|
reply(501,
|
|
"Maximum IDLE time must be between 30 and %d seconds",
|
|
maxtimeout);
|
|
} else {
|
|
timeout = $5;
|
|
(void) alarm((unsigned) timeout);
|
|
reply(200,
|
|
"Maximum IDLE time set to %d seconds",
|
|
timeout);
|
|
}
|
|
}
|
|
| STOU check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
store((char *) $4, "w", 1);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| SYST CRLF
|
|
= {
|
|
#ifdef unix
|
|
#ifdef BSD
|
|
reply(215, "UNIX Type: L%d Version: BSD-%d",
|
|
NBBY, BSD);
|
|
#else /* BSD */
|
|
reply(215, "UNIX Type: L%d", NBBY);
|
|
#endif /* BSD */
|
|
#else /* unix */
|
|
reply(215, "UNKNOWN Type: L%d", NBBY);
|
|
#endif /* unix */
|
|
}
|
|
|
|
/*
|
|
* SIZE is not in RFC959, but Postel has blessed it and
|
|
* it will be in the updated RFC.
|
|
*
|
|
* Return size of file in a format suitable for
|
|
* using with RESTART (we just count bytes).
|
|
*/
|
|
| SIZE check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4)
|
|
sizecmd((char *) $4);
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
|
|
/*
|
|
* MDTM is not in RFC959, but Postel has blessed it and
|
|
* it will be in the updated RFC.
|
|
*
|
|
* Return modification time of file as an ISO 3307
|
|
* style time. E.g. YYYYMMDDHHMMSS or YYYYMMDDHHMMSS.xxx
|
|
* where xxx is the fractional second (of any precision,
|
|
* not necessarily 3 digits)
|
|
*/
|
|
| MDTM check_login SP pathname CRLF
|
|
= {
|
|
if ($2 && $4) {
|
|
struct stat stbuf;
|
|
if (stat((char *) $4, &stbuf) < 0)
|
|
perror_reply(550, (char *) $4);
|
|
else if ((stbuf.st_mode&S_IFMT) != S_IFREG) {
|
|
reply(550, "%s: not a plain file.",
|
|
(char *) $4);
|
|
} else {
|
|
register struct tm *t;
|
|
struct tm *gmtime();
|
|
t = gmtime(&stbuf.st_mtime);
|
|
reply(213,
|
|
"19%02d%02d%02d%02d%02d%02d",
|
|
t->tm_year, t->tm_mon+1, t->tm_mday,
|
|
t->tm_hour, t->tm_min, t->tm_sec);
|
|
}
|
|
}
|
|
if ($4)
|
|
free((char *) $4);
|
|
}
|
|
| QUIT CRLF
|
|
= {
|
|
reply(221, "Goodbye.");
|
|
dologout(0);
|
|
}
|
|
| error CRLF
|
|
= {
|
|
yyerrok;
|
|
}
|
|
;
|
|
rcmd: RNFR check_login SP pathname CRLF
|
|
= {
|
|
char *renamefrom();
|
|
|
|
restart_point = (off_t) 0;
|
|
if ($2 && $4) {
|
|
fromname = renamefrom((char *) $4);
|
|
if (fromname == (char *) 0 && $4) {
|
|
free((char *) $4);
|
|
}
|
|
}
|
|
}
|
|
| REST SP byte_size CRLF
|
|
= {
|
|
long atol();
|
|
|
|
fromname = (char *) 0;
|
|
restart_point = $3;
|
|
reply(350, "Restarting at %ld. %s", restart_point,
|
|
"Send STORE or RETRIEVE to initiate transfer.");
|
|
}
|
|
;
|
|
|
|
username: STRING
|
|
;
|
|
|
|
password: /* empty */
|
|
= {
|
|
*(char **)&($$) = (char *)calloc(1, sizeof(char));
|
|
}
|
|
| STRING
|
|
;
|
|
|
|
byte_size: NUMBER
|
|
;
|
|
|
|
host_port: NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA
|
|
NUMBER COMMA NUMBER
|
|
= {
|
|
register char *a, *p;
|
|
|
|
a = (char *)&data_dest.sin_addr;
|
|
a[0] = $1; a[1] = $3; a[2] = $5; a[3] = $7;
|
|
|
|
/* H* port fix, part A-1: Check the args against the client addr */
|
|
p = (char *)&his_addr.sin_addr;
|
|
if (memcmp (a, p, sizeof (data_dest.sin_addr)))
|
|
memset (a, 0, sizeof (data_dest.sin_addr)); /* XXX */
|
|
|
|
p = (char *)&data_dest.sin_port;
|
|
|
|
/* H* port fix, part A-2: only allow client ports in "user space" */
|
|
p[0] = 0; p[1] = 0;
|
|
cliport = ($9 << 8) + $11;
|
|
if (cliport > 1023) {
|
|
p[0] = $9; p[1] = $11;
|
|
}
|
|
|
|
p[0] = $9; p[1] = $11;
|
|
data_dest.sin_family = AF_INET;
|
|
}
|
|
;
|
|
|
|
form_code: N
|
|
= {
|
|
$$ = FORM_N;
|
|
}
|
|
| T
|
|
= {
|
|
$$ = FORM_T;
|
|
}
|
|
| C
|
|
= {
|
|
$$ = FORM_C;
|
|
}
|
|
;
|
|
|
|
type_code: A
|
|
= {
|
|
cmd_type = TYPE_A;
|
|
cmd_form = FORM_N;
|
|
}
|
|
| A SP form_code
|
|
= {
|
|
cmd_type = TYPE_A;
|
|
cmd_form = $3;
|
|
}
|
|
| E
|
|
= {
|
|
cmd_type = TYPE_E;
|
|
cmd_form = FORM_N;
|
|
}
|
|
| E SP form_code
|
|
= {
|
|
cmd_type = TYPE_E;
|
|
cmd_form = $3;
|
|
}
|
|
| I
|
|
= {
|
|
cmd_type = TYPE_I;
|
|
}
|
|
| L
|
|
= {
|
|
cmd_type = TYPE_L;
|
|
cmd_bytesz = NBBY;
|
|
}
|
|
| L SP byte_size
|
|
= {
|
|
cmd_type = TYPE_L;
|
|
cmd_bytesz = $3;
|
|
}
|
|
/* this is for a bug in the BBN ftp */
|
|
| L byte_size
|
|
= {
|
|
cmd_type = TYPE_L;
|
|
cmd_bytesz = $2;
|
|
}
|
|
;
|
|
|
|
struct_code: F
|
|
= {
|
|
$$ = STRU_F;
|
|
}
|
|
| R
|
|
= {
|
|
$$ = STRU_R;
|
|
}
|
|
| P
|
|
= {
|
|
$$ = STRU_P;
|
|
}
|
|
;
|
|
|
|
mode_code: S
|
|
= {
|
|
$$ = MODE_S;
|
|
}
|
|
| B
|
|
= {
|
|
$$ = MODE_B;
|
|
}
|
|
| C
|
|
= {
|
|
$$ = MODE_C;
|
|
}
|
|
;
|
|
|
|
pathname: pathstring
|
|
= {
|
|
/*
|
|
* Problem: this production is used for all pathname
|
|
* processing, but only gives a 550 error reply.
|
|
* This is a valid reply in some cases but not in others.
|
|
*/
|
|
if (logged_in && $1 && strncmp((char *) $1, "~", 1) == 0) {
|
|
*(char **)&($$) = *ftpglob((char *) $1);
|
|
if (globerr != NULL) {
|
|
reply(550, globerr);
|
|
/* $$ = NULL; */
|
|
$$ = 0;
|
|
}
|
|
free((char *) $1);
|
|
} else
|
|
$$ = $1;
|
|
}
|
|
;
|
|
|
|
pathstring: STRING
|
|
;
|
|
|
|
octal_number: NUMBER
|
|
= {
|
|
register int ret, dec, multby, digit;
|
|
|
|
/*
|
|
* Convert a number that was read as decimal number
|
|
* to what it would be if it had been read as octal.
|
|
*/
|
|
dec = $1;
|
|
multby = 1;
|
|
ret = 0;
|
|
while (dec) {
|
|
digit = dec%10;
|
|
if (digit > 7) {
|
|
ret = -1;
|
|
break;
|
|
}
|
|
ret += digit * multby;
|
|
multby *= 8;
|
|
dec /= 10;
|
|
}
|
|
$$ = ret;
|
|
}
|
|
;
|
|
|
|
check_login: /* empty */
|
|
= {
|
|
if (logged_in)
|
|
$$ = 1;
|
|
else {
|
|
reply(530, "Please login with USER and PASS.");
|
|
$$ = 0;
|
|
}
|
|
}
|
|
;
|
|
|
|
%%
|
|
|
|
extern jmp_buf errcatch;
|
|
|
|
#define CMD 0 /* beginning of command */
|
|
#define ARGS 1 /* expect miscellaneous arguments */
|
|
#define STR1 2 /* expect SP followed by STRING */
|
|
#define STR2 3 /* expect STRING */
|
|
#define OSTR 4 /* optional SP then STRING */
|
|
#define ZSTR1 5 /* SP then optional STRING */
|
|
#define ZSTR2 6 /* optional STRING after SP */
|
|
#define SITECMD 7 /* SITE command */
|
|
#define NSTR 8 /* Number followed by a string */
|
|
|
|
struct tab cmdtab[] = { /* In order defined in RFC 765 */
|
|
{ "USER", USER, STR1, 1, "<sp> username" },
|
|
{ "PASS", PASS, ZSTR1, 1, "<sp> password" },
|
|
{ "ACCT", ACCT, STR1, 0, "(specify account)" },
|
|
{ "SMNT", SMNT, ARGS, 0, "(structure mount)" },
|
|
{ "REIN", REIN, ARGS, 0, "(reinitialize server state)" },
|
|
{ "QUIT", QUIT, ARGS, 1, "(terminate service)", },
|
|
{ "PORT", PORT, ARGS, 1, "<sp> b0, b1, b2, b3, b4" },
|
|
{ "PASV", PASV, ARGS, 1, "(set server in passive mode)" },
|
|
{ "TYPE", TYPE, ARGS, 1, "<sp> [ A | E | I | L ]" },
|
|
{ "STRU", STRU, ARGS, 1, "(specify file structure)" },
|
|
{ "MODE", MODE, ARGS, 1, "(specify transfer mode)" },
|
|
{ "RETR", RETR, STR1, 1, "<sp> file-name" },
|
|
{ "STOR", STOR, STR1, 1, "<sp> file-name" },
|
|
{ "APPE", APPE, STR1, 1, "<sp> file-name" },
|
|
{ "MLFL", MLFL, OSTR, 0, "(mail file)" },
|
|
{ "MAIL", MAIL, OSTR, 0, "(mail to user)" },
|
|
{ "MSND", MSND, OSTR, 0, "(mail send to terminal)" },
|
|
{ "MSOM", MSOM, OSTR, 0, "(mail send to terminal or mailbox)" },
|
|
{ "MSAM", MSAM, OSTR, 0, "(mail send to terminal and mailbox)" },
|
|
{ "MRSQ", MRSQ, OSTR, 0, "(mail recipient scheme question)" },
|
|
{ "MRCP", MRCP, STR1, 0, "(mail recipient)" },
|
|
{ "ALLO", ALLO, ARGS, 1, "allocate storage (vacuously)" },
|
|
{ "REST", REST, ARGS, 1, "(restart command)" },
|
|
{ "RNFR", RNFR, STR1, 1, "<sp> file-name" },
|
|
{ "RNTO", RNTO, STR1, 1, "<sp> file-name" },
|
|
{ "ABOR", ABOR, ARGS, 1, "(abort operation)" },
|
|
{ "DELE", DELE, STR1, 1, "<sp> file-name" },
|
|
{ "CWD", CWD, OSTR, 1, "[ <sp> directory-name ]" },
|
|
{ "XCWD", CWD, OSTR, 1, "[ <sp> directory-name ]" },
|
|
{ "LIST", LIST, OSTR, 1, "[ <sp> path-name ]" },
|
|
{ "NLST", NLST, OSTR, 1, "[ <sp> path-name ]" },
|
|
{ "SITE", SITE, SITECMD, 1, "site-cmd [ <sp> arguments ]" },
|
|
{ "SYST", SYST, ARGS, 1, "(get type of operating system)" },
|
|
{ "STAT", STAT, OSTR, 1, "[ <sp> path-name ]" },
|
|
{ "HELP", HELP, OSTR, 1, "[ <sp> <string> ]" },
|
|
{ "NOOP", NOOP, ARGS, 1, "" },
|
|
{ "MKD", MKD, STR1, 1, "<sp> path-name" },
|
|
{ "XMKD", MKD, STR1, 1, "<sp> path-name" },
|
|
{ "RMD", RMD, STR1, 1, "<sp> path-name" },
|
|
{ "XRMD", RMD, STR1, 1, "<sp> path-name" },
|
|
{ "PWD", PWD, ARGS, 1, "(return current directory)" },
|
|
{ "XPWD", PWD, ARGS, 1, "(return current directory)" },
|
|
{ "CDUP", CDUP, ARGS, 1, "(change to parent directory)" },
|
|
{ "XCUP", CDUP, ARGS, 1, "(change to parent directory)" },
|
|
{ "STOU", STOU, STR1, 1, "<sp> file-name" },
|
|
{ "SIZE", SIZE, OSTR, 1, "<sp> path-name" },
|
|
{ "MDTM", MDTM, OSTR, 1, "<sp> path-name" },
|
|
{ NULL, 0, 0, 0, 0 }
|
|
};
|
|
|
|
struct tab sitetab[] = {
|
|
{ "UMASK", UMASK, ARGS, 1, "[ <sp> umask ]" },
|
|
{ "IDLE", IDLE, ARGS, 1, "[ <sp> maximum-idle-time ]" },
|
|
{ "CHMOD", CHMOD, NSTR, 1, "<sp> mode <sp> file-name" },
|
|
{ "HELP", HELP, OSTR, 1, "[ <sp> <string> ]" },
|
|
{ NULL, 0, 0, 0, 0 }
|
|
};
|
|
|
|
struct tab *lookup FUNCTION((p, cmd), register struct tab *p AND char *cmd)
|
|
{
|
|
|
|
for (; p->name != NULL; p++)
|
|
if (strcmp(cmd, p->name) == 0)
|
|
return (p);
|
|
return (0);
|
|
}
|
|
|
|
#include <arpa/telnet.h>
|
|
|
|
/*
|
|
* getline - a hacked up version of fgets to ignore TELNET escape codes.
|
|
*/
|
|
char *getline FUNCTION((s, n, iop), char *s AND int n AND FILE *iop)
|
|
{
|
|
register c;
|
|
register char *cs;
|
|
|
|
cs = s;
|
|
/* tmpline may contain saved command from urgent mode interruption */
|
|
for (c = 0; *(tmpline + c) && --n > 0; ++c) {
|
|
*cs++ = *(tmpline + c);
|
|
if (*(tmpline + c) == '\n') {
|
|
*cs++ = '\0';
|
|
if (debug)
|
|
syslog(LOG_DEBUG, "command: %s", s);
|
|
*tmpline = '\0';
|
|
return(s);
|
|
}
|
|
if (c == 0)
|
|
*tmpline = '\0';
|
|
}
|
|
while ((c = getc(iop)) != EOF) {
|
|
c &= 0377;
|
|
if (c == IAC) {
|
|
if ((c = getc(iop)) != EOF) {
|
|
c &= 0377;
|
|
switch (c) {
|
|
case WILL:
|
|
case WONT:
|
|
c = getc(iop);
|
|
printf("%c%c%c", IAC, DONT, 0377&c);
|
|
(void) fflush(stdout);
|
|
continue;
|
|
case DO:
|
|
case DONT:
|
|
c = getc(iop);
|
|
printf("%c%c%c", IAC, WONT, 0377&c);
|
|
(void) fflush(stdout);
|
|
continue;
|
|
case IAC:
|
|
break;
|
|
default:
|
|
continue; /* ignore command */
|
|
}
|
|
}
|
|
}
|
|
*cs++ = c;
|
|
if (--n <= 0 || c == '\n')
|
|
break;
|
|
}
|
|
if (c == EOF && cs == s)
|
|
return (NULL);
|
|
*cs++ = '\0';
|
|
if (debug)
|
|
syslog(LOG_DEBUG, "command: %s", s);
|
|
return (s);
|
|
}
|
|
|
|
static VOIDRET toolong FUNCTION((input), int input)
|
|
{
|
|
time_t now;
|
|
|
|
reply(421, "Timeout (%d seconds): closing control connection.", timeout);
|
|
(void) time(&now);
|
|
syslog(LOG_INFO, "User %s timed out after %d seconds at %s",
|
|
(pw ? pw -> pw_name : "unknown"), timeout, ctime(&now));
|
|
dologout(1);
|
|
}
|
|
|
|
int yylex FUNCTION_NOARGS
|
|
{
|
|
static int cpos, state;
|
|
register char *cp, *cp2;
|
|
register struct tab *p;
|
|
int n;
|
|
char c, *copy();
|
|
|
|
for (;;) {
|
|
switch (state) {
|
|
|
|
case CMD:
|
|
(void) signal(SIGALRM, toolong);
|
|
(void) alarm((unsigned) timeout);
|
|
if (getline(cbuf, sizeof(cbuf)-1, stdin) == NULL) {
|
|
reply(221, "You could at least say goodbye.");
|
|
dologout(0);
|
|
}
|
|
(void) alarm(0);
|
|
#ifdef SETPROCTITLE
|
|
if (strncasecmp(cbuf, "PASS", 4) != NULL)
|
|
setproctitle("%s: %s", proctitle, cbuf);
|
|
#endif /* SETPROCTITLE */
|
|
if ((cp = strchr(cbuf, '\r'))) {
|
|
*cp++ = '\n';
|
|
*cp = '\0';
|
|
}
|
|
if ((cp = strpbrk(cbuf, " \n")))
|
|
cpos = cp - cbuf;
|
|
if (cpos == 0)
|
|
cpos = 4;
|
|
c = cbuf[cpos];
|
|
cbuf[cpos] = '\0';
|
|
upper(cbuf);
|
|
p = lookup(cmdtab, cbuf);
|
|
cbuf[cpos] = c;
|
|
if (p != 0) {
|
|
if (p->implemented == 0) {
|
|
nack(p->name);
|
|
longjmp(errcatch,0);
|
|
/* NOTREACHED */
|
|
}
|
|
state = p->state;
|
|
*(char **)&yylval = p->name;
|
|
return (p->token);
|
|
}
|
|
break;
|
|
|
|
case SITECMD:
|
|
if (cbuf[cpos] == ' ') {
|
|
cpos++;
|
|
return (SP);
|
|
}
|
|
cp = &cbuf[cpos];
|
|
if ((cp2 = strpbrk(cp, " \n")))
|
|
cpos = cp2 - cbuf;
|
|
c = cbuf[cpos];
|
|
cbuf[cpos] = '\0';
|
|
upper(cp);
|
|
p = lookup(sitetab, cp);
|
|
cbuf[cpos] = c;
|
|
if (p != 0) {
|
|
if (p->implemented == 0) {
|
|
state = CMD;
|
|
nack(p->name);
|
|
longjmp(errcatch,0);
|
|
/* NOTREACHED */
|
|
}
|
|
state = p->state;
|
|
*(char **)&yylval = p->name;
|
|
return (p->token);
|
|
}
|
|
state = CMD;
|
|
break;
|
|
|
|
case OSTR:
|
|
if (cbuf[cpos] == '\n') {
|
|
state = CMD;
|
|
return (CRLF);
|
|
}
|
|
/* FALLTHROUGH */
|
|
|
|
case STR1:
|
|
case ZSTR1:
|
|
dostr1:
|
|
if (cbuf[cpos] == ' ') {
|
|
cpos++;
|
|
state = state == OSTR ? STR2 : ++state;
|
|
return (SP);
|
|
}
|
|
break;
|
|
|
|
case ZSTR2:
|
|
if (cbuf[cpos] == '\n') {
|
|
state = CMD;
|
|
return (CRLF);
|
|
}
|
|
/* FALLTHROUGH */
|
|
|
|
case STR2:
|
|
cp = &cbuf[cpos];
|
|
n = strlen(cp);
|
|
cpos += n - 1;
|
|
/*
|
|
* Make sure the string is nonempty and \n terminated.
|
|
*/
|
|
if (n > 1 && cbuf[cpos] == '\n') {
|
|
cbuf[cpos] = '\0';
|
|
*(char **)&yylval = copy(cp);
|
|
cbuf[cpos] = '\n';
|
|
state = ARGS;
|
|
return (STRING);
|
|
}
|
|
break;
|
|
|
|
case NSTR:
|
|
if (cbuf[cpos] == ' ') {
|
|
cpos++;
|
|
return (SP);
|
|
}
|
|
if (isdigit(cbuf[cpos])) {
|
|
cp = &cbuf[cpos];
|
|
while (isdigit(cbuf[++cpos]))
|
|
;
|
|
c = cbuf[cpos];
|
|
cbuf[cpos] = '\0';
|
|
yylval = atoi(cp);
|
|
cbuf[cpos] = c;
|
|
state = STR1;
|
|
return (NUMBER);
|
|
}
|
|
state = STR1;
|
|
goto dostr1;
|
|
|
|
case ARGS:
|
|
if (isdigit(cbuf[cpos])) {
|
|
cp = &cbuf[cpos];
|
|
while (isdigit(cbuf[++cpos]))
|
|
;
|
|
c = cbuf[cpos];
|
|
cbuf[cpos] = '\0';
|
|
yylval = atoi(cp);
|
|
cbuf[cpos] = c;
|
|
return (NUMBER);
|
|
}
|
|
switch (cbuf[cpos++]) {
|
|
|
|
case '\n':
|
|
state = CMD;
|
|
return (CRLF);
|
|
|
|
case ' ':
|
|
return (SP);
|
|
|
|
case ',':
|
|
return (COMMA);
|
|
|
|
case 'A':
|
|
case 'a':
|
|
return (A);
|
|
|
|
case 'B':
|
|
case 'b':
|
|
return (B);
|
|
|
|
case 'C':
|
|
case 'c':
|
|
return (C);
|
|
|
|
case 'E':
|
|
case 'e':
|
|
return (E);
|
|
|
|
case 'F':
|
|
case 'f':
|
|
return (F);
|
|
|
|
case 'I':
|
|
case 'i':
|
|
return (I);
|
|
|
|
case 'L':
|
|
case 'l':
|
|
return (L);
|
|
|
|
case 'N':
|
|
case 'n':
|
|
return (N);
|
|
|
|
case 'P':
|
|
case 'p':
|
|
return (P);
|
|
|
|
case 'R':
|
|
case 'r':
|
|
return (R);
|
|
|
|
case 'S':
|
|
case 's':
|
|
return (S);
|
|
|
|
case 'T':
|
|
case 't':
|
|
return (T);
|
|
|
|
}
|
|
break;
|
|
|
|
default:
|
|
opiefatal("Unknown state in scanner.");
|
|
}
|
|
yyerror((char *) 0);
|
|
state = CMD;
|
|
longjmp(errcatch,0);
|
|
}
|
|
}
|
|
|
|
VOIDRET upper FUNCTION((s), char *s)
|
|
{
|
|
while (*s != '\0') {
|
|
if (islower(*s))
|
|
*s = toupper(*s);
|
|
s++;
|
|
}
|
|
}
|
|
|
|
char *copy FUNCTION((s), char *s)
|
|
{
|
|
char *p;
|
|
|
|
p = malloc((unsigned) strlen(s) + 1);
|
|
if (p == NULL)
|
|
opiefatal("Ran out of memory.");
|
|
(void) strcpy(p, s);
|
|
return (p);
|
|
}
|
|
|
|
VOIDRET help FUNCTION((ctab, s), struct tab *ctab AND char *s)
|
|
{
|
|
register struct tab *c;
|
|
register int width, NCMDS;
|
|
char *type;
|
|
|
|
if (ctab == sitetab)
|
|
type = "SITE ";
|
|
else
|
|
type = "";
|
|
width = 0, NCMDS = 0;
|
|
for (c = ctab; c->name != NULL; c++) {
|
|
int len = strlen(c->name);
|
|
|
|
if (len > width)
|
|
width = len;
|
|
NCMDS++;
|
|
}
|
|
width = (width + 8) &~ 7;
|
|
if (s == 0) {
|
|
register int i, j, w;
|
|
int columns, lines;
|
|
|
|
lreply(214, "The following %scommands are recognized %s.",
|
|
type, "(* =>'s unimplemented)");
|
|
columns = 76 / width;
|
|
if (columns == 0)
|
|
columns = 1;
|
|
lines = (NCMDS + columns - 1) / columns;
|
|
for (i = 0; i < lines; i++) {
|
|
printf(" ");
|
|
for (j = 0; j < columns; j++) {
|
|
c = ctab + j * lines + i;
|
|
printf("%s%c", c->name,
|
|
c->implemented ? ' ' : '*');
|
|
if (c + lines >= &ctab[NCMDS])
|
|
break;
|
|
w = strlen(c->name) + 1;
|
|
while (w < width) {
|
|
putchar(' ');
|
|
w++;
|
|
}
|
|
}
|
|
printf("\r\n");
|
|
}
|
|
(void) fflush(stdout);
|
|
return;
|
|
}
|
|
upper(s);
|
|
c = lookup(ctab, s);
|
|
if (c == (struct tab *)0) {
|
|
reply(502, "Unknown command %s.", s);
|
|
return;
|
|
}
|
|
if (c->implemented)
|
|
reply(214, "Syntax: %s%s %s", type, c->name, c->help);
|
|
else
|
|
reply(214, "%s%-*s\t%s; unimplemented.", type, width,
|
|
c->name, c->help);
|
|
}
|
|
|
|
VOIDRET sizecmd FUNCTION((filename), char *filename)
|
|
{
|
|
switch (type) {
|
|
case TYPE_L:
|
|
case TYPE_I: {
|
|
struct stat stbuf;
|
|
if (stat(filename, &stbuf) < 0 ||
|
|
(stbuf.st_mode&S_IFMT) != S_IFREG)
|
|
reply(550, "%s: not a plain file.", filename);
|
|
else
|
|
reply(213, "%lu", stbuf.st_size);
|
|
break;}
|
|
case TYPE_A: {
|
|
FILE *fin;
|
|
register int c;
|
|
register long count;
|
|
struct stat stbuf;
|
|
fin = fopen(filename, "r");
|
|
if (fin == NULL) {
|
|
perror_reply(550, filename);
|
|
return;
|
|
}
|
|
if (fstat(fileno(fin), &stbuf) < 0 ||
|
|
(stbuf.st_mode&S_IFMT) != S_IFREG) {
|
|
reply(550, "%s: not a plain file.", filename);
|
|
(void) fclose(fin);
|
|
return;
|
|
}
|
|
|
|
count = 0;
|
|
while((c=getc(fin)) != EOF) {
|
|
if (c == '\n') /* will get expanded to \r\n */
|
|
count++;
|
|
count++;
|
|
}
|
|
(void) fclose(fin);
|
|
|
|
reply(213, "%ld", count);
|
|
break;}
|
|
default:
|
|
reply(504, "SIZE not implemented for Type %c.", "?AEIL"[type]);
|
|
}
|
|
}
|