/* * IRC - Internet Relay Chat, ircd/s_bsd.c * Copyright (C) 1990 Jarkko Oikarinen and * University of Oulu, Computing Center * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 1, or (at your option) * any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. * * $Id: s_bsd.c 1438 2006-01-08 07:43:06Z rubinlinux $ */ #include "config.h" #include "s_bsd.h" #include "client.h" #include "IPcheck.h" #include "channel.h" #include "class.h" #include "hash.h" #include "ircd_log.h" #include "ircd_features.h" #include "ircd_osdep.h" #include "ircd_reply.h" #include "ircd_snprintf.h" #include "ircd_string.h" #include "ircd.h" #include "list.h" #include "listener.h" #include "msg.h" #include "msgq.h" #include "numeric.h" #include "numnicks.h" #include "packet.h" #include "parse.h" #include "querycmds.h" #include "res.h" #include "s_auth.h" #include "s_conf.h" #include "s_debug.h" #include "s_misc.h" #include "s_user.h" #include "send.h" #include "ircd_struct.h" #include "support.h" #include "sys.h" #include "uping.h" #include "version.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifdef USE_POLL #include #endif /* USE_POLL */ #ifndef INADDR_NONE #define INADDR_NONE 0xffffffff #endif struct Client* LocalClientArray[MAXCONNECTIONS]; int HighestFd = -1; struct sockaddr_in VirtualHost; static char readbuf[SERVER_TCP_WINDOW]; /* * report_error text constants */ const char* const ACCEPT_ERROR_MSG = "error accepting connection for %s: %s"; const char* const BIND_ERROR_MSG = "bind error for %s: %s"; const char* const CONNECT_ERROR_MSG = "connect to host %s failed: %s"; const char* const CONNLIMIT_ERROR_MSG = "connect limit exceeded for %s: %s"; const char* const LISTEN_ERROR_MSG = "listen error for %s: %s"; const char* const NONB_ERROR_MSG = "error setting non-blocking for %s: %s"; const char* const PEERNAME_ERROR_MSG = "getpeername failed for %s: %s"; const char* const POLL_ERROR_MSG = "poll error for %s: %s"; const char* const REGISTER_ERROR_MSG = "registering %s: %s"; const char* const REUSEADDR_ERROR_MSG = "error setting SO_REUSEADDR for %s: %s"; const char* const SELECT_ERROR_MSG = "select error for %s: %s"; const char* const SETBUFS_ERROR_MSG = "error setting buffer size for %s: %s"; const char* const SOCKET_ERROR_MSG = "error creating socket for %s: %s"; const char* const TOS_ERROR_MSG = "error setting TOS for %s: %s"; static void client_sock_callback(struct Event* ev); static void client_timer_callback(struct Event* ev); #if !defined(USE_POLL) #if FD_SETSIZE < (MAXCONNECTIONS + 4) /* * Sanity check * * All operating systems work when MAXCONNECTIONS <= 252. * Most operating systems work when MAXCONNECTIONS <= 1020 and FD_SETSIZE is * updated correctly in the system headers (on BSD systems our sys.h has * defined FD_SETSIZE to MAXCONNECTIONS+4 before including the system's headers * but sys/types.h might have abruptly redefined it so the check is still * done), you might already need to recompile your kernel. * For larger FD_SETSIZE your milage may vary (kernel patches may be needed). * The check is _NOT_ done if we will not use FD_SETS at all (USE_POLL) */ #error "FD_SETSIZE is too small or MAXCONNECTIONS too large." #endif #endif #ifdef USE_SSL /* Helper routines */ static IOResult client_recv(struct Client *cptr, char *buf, unsigned int length, unsigned int* count_out) { if (cli_socket(cptr).ssl) return ssl_recv(&cli_socket(cptr), buf, length, count_out); else return os_recv_nonb(cli_fd(cptr), buf, length, count_out); } static IOResult client_sendv(struct Client *cptr, struct MsgQ *buf, unsigned int *count_in, unsigned int *count_out) { if (cli_socket(cptr).ssl) return ssl_sendv(&cli_socket(cptr), buf, count_in, count_out); else return os_sendv_nonb(cli_fd(cptr), buf, count_in, count_out); } #endif /* USE_SSL */ /* * Cannot use perror() within daemon. stderr is closed in * ircd and cannot be used. And, worse yet, it might have * been reassigned to a normal connection... */ /* * report_error * * This a replacement for perror(). Record error to log and * also send a copy to all *LOCAL* opers online. * * text is a *format* string for outputting error. It must * contain only two '%s', the first will be replaced * by the sockhost from the cptr, and the latter will * be taken from sys_errlist[errno]. * * cptr if not NULL, is the *LOCAL* client associated with * the error. */ void report_error(const char* text, const char* who, int err) { static time_t last_notice = 0; int errtmp = errno; /* debug may change 'errno' */ const char* errmsg = (err) ? strerror(err) : ""; if (!errmsg) errmsg = "Unknown error"; if (EmptyString(who)) who = "unknown"; if (last_notice + 20 < CurrentTime) { /* * pace error messages so opers don't get flooded by transients */ sendto_opmask_butone(0, SNO_OLDSNO, text, who, errmsg); last_notice = CurrentTime; } log_write(LS_SOCKET, L_ERROR, 0, text, who, errmsg); errno = errtmp; } /* * connect_dns_callback - called when resolver query finishes * if the query resulted in a successful search, reply will contain * a non-null pointer, otherwise reply will be null. * if successful start the connection, otherwise notify opers */ static void connect_dns_callback(void* vptr, struct DNSReply* reply) { struct ConfItem* aconf = (struct ConfItem*) vptr; aconf->dns_pending = 0; if (reply) { memcpy(&aconf->ipnum, reply->hp->h_addr, sizeof(struct in_addr)); connect_server(aconf, 0, reply); } else sendto_opmask_butone(0, SNO_OLDSNO, "Connect to %s failed: host lookup", aconf->name); } /* * close_connections - closes all connections * close stderr if specified */ void close_connections(int close_stderr) { int i; close(0); close(1); if (close_stderr) close(2); for (i = 3; i < MAXCONNECTIONS; ++i) close(i); } /* * init_connection_limits - initialize process fd limit to * MAXCONNECTIONS */ int init_connection_limits(void) { int limit = os_set_fdlimit(MAXCONNECTIONS); if (0 == limit) return 1; if (limit < 0) { fprintf(stderr, "error setting max fd's to %d\n", limit); } else if (limit > 0) { fprintf(stderr, "ircd fd table too big\nHard Limit: %d IRC max: %d\n", limit, MAXCONNECTIONS); fprintf(stderr, "set MAXCONNECTIONS to a smaller value"); } return 0; } /* * connect_inet - set up address and port and make a connection */ static int connect_inet(struct ConfItem* aconf, struct Client* cptr) { static struct sockaddr_in sin, *locaddr = 0; IOResult result; assert(0 != aconf); assert(0 != cptr); /* * Might as well get sockhost from here, the connection is attempted * with it so if it fails its useless. */ cli_fd(cptr) = socket(AF_INET, SOCK_STREAM, 0); if (-1 == cli_fd(cptr)) { cli_error(cptr) = errno; report_error(SOCKET_ERROR_MSG, cli_name(cptr), errno); return 0; } if (cli_fd(cptr) >= MAXCLIENTS) { report_error(CONNLIMIT_ERROR_MSG, cli_name(cptr), 0); close(cli_fd(cptr)); cli_fd(cptr) = -1; return 0; } /* * Bind to a local IP# (with unknown port - let unix decide) so * we have some chance of knowing the IP# that gets used for a host * with more than one IP#. * * No we don't bind it, not all OS's can handle connecting with * an already bound socket, different ip# might occur anyway * leading to a freezing select() on this side for some time. * I had this on my Linux 1.1.88 --Run */ /* * No, we do bind it if we have virtual host support. If we don't * explicitly bind it, it will default to IN_ADDR_ANY and we lose * due to the other server not allowing our base IP --smg */ if (aconf->origin.s_addr != INADDR_NONE) { memset(&sin, 0, sizeof(sin)); sin.sin_family = AF_INET; sin.sin_addr.s_addr = aconf->origin.s_addr; locaddr = &sin; } else if (feature_bool(FEAT_VIRTUAL_HOST)) locaddr = &VirtualHost; if (locaddr && bind(cli_fd(cptr), (struct sockaddr*) locaddr, sizeof(struct sockaddr_in))) { report_error(BIND_ERROR_MSG, cli_name(cptr), errno); close(cli_fd(cptr)); cli_fd(cptr) = -1; return 0; } memset(&sin, 0, sizeof(sin)); sin.sin_family = AF_INET; sin.sin_addr.s_addr = aconf->ipnum.s_addr; sin.sin_port = htons(aconf->port); /* * save connection info in client */ (cli_ip(cptr)).s_addr = aconf->ipnum.s_addr; cli_port(cptr) = aconf->port; ircd_ntoa_r(cli_sock_ip(cptr), (const char*) &(cli_ip(cptr))); /* * we want a big buffer for server connections */ if (!os_set_sockbufs(cli_fd(cptr), feature_int(FEAT_SOCKSENDBUF), feature_int(FEAT_SOCKRECVBUF))) { cli_error(cptr) = errno; report_error(SETBUFS_ERROR_MSG, cli_name(cptr), errno); close(cli_fd(cptr)); cli_fd(cptr) = -1; return 0; } /* * ALWAYS set sockets non-blocking */ if (!os_set_nonblocking(cli_fd(cptr))) { cli_error(cptr) = errno; report_error(NONB_ERROR_MSG, cli_name(cptr), errno); close(cli_fd(cptr)); cli_fd(cptr) = -1; return 0; } if ((result = os_connect_nonb(cli_fd(cptr), &sin)) == IO_FAILURE) { cli_error(cptr) = errno; report_error(CONNECT_ERROR_MSG, cli_name(cptr), errno); close(cli_fd(cptr)); cli_fd(cptr) = -1; return 0; } if (!socket_add(&(cli_socket(cptr)), client_sock_callback, (void*) cli_connect(cptr), (result == IO_SUCCESS) ? SS_CONNECTED : SS_CONNECTING, SOCK_EVENT_READABLE, cli_fd(cptr))) { cli_error(cptr) = ENFILE; report_error(REGISTER_ERROR_MSG, cli_name(cptr), ENFILE); close(cli_fd(cptr)); cli_fd(cptr) = -1; return 0; } cli_freeflag(cptr) |= FREEFLAG_SOCKET; return 1; } /* * deliver_it * Attempt to send a sequence of bytes to the connection. * Returns * * < 0 Some fatal error occurred, (but not EWOULDBLOCK). * This return is a request to close the socket and * clean up the link. * * >= 0 No real error occurred, returns the number of * bytes actually transferred. EWOULDBLOCK and other * possibly similar conditions should be mapped to * zero return. Upper level routine will have to * decide what to do with those unwritten bytes... * * *NOTE* alarm calls have been preserved, so this should * work equally well whether blocking or non-blocking * mode is used... * * We don't use blocking anymore, that is impossible with the * net.loads today anyway. Commented out the alarms to save cpu. * --Run */ unsigned int deliver_it(struct Client *cptr, struct MsgQ *buf) { unsigned int bytes_written = 0; unsigned int bytes_count = 0; assert(0 != cptr); #ifdef USE_SSL switch (client_sendv(cptr, buf, &bytes_count, &bytes_written)) { #else switch (os_sendv_nonb(cli_fd(cptr), buf, &bytes_count, &bytes_written)) { #endif /* USE_SSL */ case IO_SUCCESS: ClrFlag(cptr, FLAG_BLOCKED); cli_sendB(cptr) += bytes_written; cli_sendB(&me) += bytes_written; if (cli_sendB(cptr) > 1023) { cli_sendK(cptr) += (cli_sendB(cptr) >> 10); cli_sendB(cptr) &= 0x03ff; /* 2^10 = 1024, 3ff = 1023 */ } if (cli_sendB(&me) > 1023) { cli_sendK(&me) += (cli_sendB(&me) >> 10); cli_sendB(&me) &= 0x03ff; } /* * XXX - hrmm.. set blocked here? the socket didn't * say it was blocked - yes, because maybe half went * and half was blocked, but thats not gonna gen an error -rubin */ if (bytes_written < bytes_count) SetFlag(cptr, FLAG_BLOCKED); break; case IO_BLOCKED: SetFlag(cptr, FLAG_BLOCKED); break; case IO_FAILURE: cli_error(cptr) = errno; /* If errno is 0:"Success" what does that mean exactly? * SSL_get_error() might have more info for ssl clients..*/ SetFlag(cptr, FLAG_DEADSOCKET); break; } return bytes_written; } void release_dns_reply(struct Client* cptr) { assert(0 != cptr); assert(MyConnect(cptr)); if (cli_dns_reply(cptr)) { assert(0 < cli_dns_reply(cptr)->ref_count); --(cli_dns_reply(cptr))->ref_count; cli_dns_reply(cptr) = 0; } } void release_dnsbl_reply(struct Client* cptr) { assert(0 != cptr); assert(MyConnect(cptr)); if (cli_dnsbl_reply(cptr)) { assert(0 < cli_dnsbl_reply(cptr)->ref_count); --(cli_dnsbl_reply(cptr))->ref_count; cli_dnsbl_reply(cptr) = 0; } } /* * completed_connection * * Complete non-blocking connect()-sequence. Check access and * terminate connection, if trouble detected. * * Return TRUE, if successfully completed * FALSE, if failed and ClientExit */ static int completed_connection(struct Client* cptr) { struct ConfItem *aconf; time_t newts; struct Client *acptr; int i; assert(0 != cptr); /* * get the socket status from the fd first to check if * connection actually succeeded */ if ((cli_error(cptr) = os_get_sockerr(cli_fd(cptr)))) { const char* msg = strerror(cli_error(cptr)); if (!msg) msg = "Unknown error"; sendto_opmask_butone(0, SNO_OLDSNO, "Connection failed to %s: %s", cli_name(cptr), msg); return 0; } if (!(aconf = find_conf_byname(cli_confs(cptr), cli_name(cptr), CONF_SERVER))) { sendto_opmask_butone(0, SNO_OLDSNO, "Lost Server Line for %s", cli_name(cptr)); return 0; } if (s_state(&(cli_socket(cptr))) == SS_CONNECTING) socket_state(&(cli_socket(cptr)), SS_CONNECTED); if (!EmptyString(aconf->passwd)) sendrawto_one(cptr, MSG_PASS " :%s", aconf->passwd); /* * Create a unique timestamp */ newts = TStime(); for (i = HighestFd; i > -1; --i) { if ((acptr = LocalClientArray[i]) && (IsServer(acptr) || IsHandshake(acptr))) { if (cli_serv(acptr)->timestamp >= newts) newts = cli_serv(acptr)->timestamp + 1; } } assert(0 != cli_serv(cptr)); cli_serv(cptr)->timestamp = newts; SetHandshake(cptr); /* * Make us timeout after twice the timeout for DNS look ups */ cli_lasttime(cptr) = CurrentTime; SetFlag(cptr, FLAG_PINGSENT); sendrawto_one(cptr, MSG_SERVER " %s 1 %Tu %Tu J%s %s%s +%s :%s", cli_name(&me), cli_serv(&me)->timestamp, newts, MAJOR_PROTOCOL, NumServCap(&me), feature_bool(FEAT_HUB) ? "h" : "", cli_info(&me)); return (IsDead(cptr)) ? 0 : 1; } /* * close_connection * * Close the physical connection. This function must make * MyConnect(cptr) == FALSE, and set cptr->from == NULL. */ void close_connection(struct Client *cptr) { struct ConfItem* aconf; if (IsServer(cptr)) { ServerStats->is_sv++; ServerStats->is_sbs += cli_sendB(cptr); ServerStats->is_sbr += cli_receiveB(cptr); ServerStats->is_sks += cli_sendK(cptr); ServerStats->is_skr += cli_receiveK(cptr); ServerStats->is_sti += CurrentTime - cli_firsttime(cptr); if (ServerStats->is_sbs > 1023) { ServerStats->is_sks += (ServerStats->is_sbs >> 10); ServerStats->is_sbs &= 0x3ff; } if (ServerStats->is_sbr > 1023) { ServerStats->is_skr += (ServerStats->is_sbr >> 10); ServerStats->is_sbr &= 0x3ff; } /* * If the connection has been up for a long amount of time, schedule * a 'quick' reconnect, else reset the next-connect cycle. */ if ((aconf = find_conf_exact(cli_name(cptr), 0, cli_sockhost(cptr), CONF_SERVER))) { /* * Reschedule a faster reconnect, if this was a automaticly * connected configuration entry. (Note that if we have had * a rehash in between, the status has been changed to * CONF_ILLEGAL). But only do this if it was a "good" link. */ aconf->hold = CurrentTime; aconf->hold += ((aconf->hold - cli_since(cptr) > feature_int(FEAT_HANGONGOODLINK)) ? feature_int(FEAT_HANGONRETRYDELAY) : ConfConFreq(aconf)); /* if (nextconnect > aconf->hold) */ /* nextconnect = aconf->hold; */ } } else if (IsUser(cptr)) { ServerStats->is_cl++; ServerStats->is_cbs += cli_sendB(cptr); ServerStats->is_cbr += cli_receiveB(cptr); ServerStats->is_cks += cli_sendK(cptr); ServerStats->is_ckr += cli_receiveK(cptr); ServerStats->is_cti += CurrentTime - cli_firsttime(cptr); if (ServerStats->is_cbs > 1023) { ServerStats->is_cks += (ServerStats->is_cbs >> 10); ServerStats->is_cbs &= 0x3ff; } if (ServerStats->is_cbr > 1023) { ServerStats->is_ckr += (ServerStats->is_cbr >> 10); ServerStats->is_cbr &= 0x3ff; } } else ServerStats->is_ni++; if (-1 < cli_fd(cptr)) { flush_connections(cptr); LocalClientArray[cli_fd(cptr)] = 0; close(cli_fd(cptr)); socket_del(&(cli_socket(cptr))); /* queue a socket delete */ cli_fd(cptr) = -1; } SetFlag(cptr, FLAG_DEADSOCKET); MsgQClear(&(cli_sendQ(cptr))); client_drop_sendq(cli_connect(cptr)); DBufClear(&(cli_recvQ(cptr))); memset(cli_passwd(cptr), 0, sizeof(cli_passwd(cptr))); set_snomask(cptr, 0, SNO_SET); det_confs_butmask(cptr, 0); if (cli_listener(cptr)) { release_listener(cli_listener(cptr)); cli_listener(cptr) = 0; } for ( ; HighestFd > 0; --HighestFd) { if (LocalClientArray[HighestFd]) break; } } int net_close_unregistered_connections(struct Client* source) { int i; struct Client* cptr; int count = 0; assert(0 != source); for (i = HighestFd; i > 0; --i) { if ((cptr = LocalClientArray[i]) && !IsRegistered(cptr)) { send_reply(source, RPL_CLOSING, get_client_name(source, HIDE_IP)); exit_client(source, cptr, &me, "Oper Closing"); ++count; } } return count; } /*---------------------------------------------------------------------------- * add_connection * * Creates a client which has just connected to us on the given fd. * The sockhost field is initialized with the ip# of the host. * The client is not added to the linked list of clients, it is * passed off to the auth handler for dns and ident queries. *--------------------------------------------------------------------------*/ #ifdef USE_SSL void add_connection(struct Listener* listener, int fd, void *ssl) { #else void add_connection(struct Listener* listener, int fd) { #endif /* USE_SSL */ struct sockaddr_in addr; struct Client *new_client; time_t next_target = 0; const char* const throttle_message = "ERROR :Your host is trying to (re)connect too fast -- throttled\r\n"; /* 12345678901234567890123456789012345679012345678901234567890123456 */ const char* const register_message = "ERROR :Unable to complete your registration\r\n"; assert(0 != listener); /* * Removed preliminary access check. Full check is performed in m_server and * m_user instead. Also connection time out help to get rid of unwanted * connections. */ if (!os_get_peername(fd, &addr) || !os_set_nonblocking(fd)) { ++ServerStats->is_ref; #ifdef USE_SSL ssl_murder(ssl, fd, ""); #else close(fd); #endif /* USE_SSL */ return; } /* * Disable IP (*not* TCP) options. In particular, this makes it impossible * to use source routing to connect to the server. If we didn't do this * (and if intermediate networks didn't drop source-routed packets), an * attacker could successfully IP spoof us...and even return the anti-spoof * ping, because the options would cause the packet to be routed back to * the spoofer's machine. When we disable the IP options, we delete the * source route, and the normal routing takes over. */ os_disable_options(fd); /* * Add this local client to the IPcheck registry. * * If they're throttled, murder them, but tell them why first. */ if (!IPcheck_local_connect(addr.sin_addr, &next_target) && !listener->server) { ++ServerStats->is_ref; #ifdef USE_SSL ssl_murder(ssl, fd, throttle_message); #else write(fd, throttle_message, strlen(throttle_message)); close(fd); #endif /* USE_SSL */ return; } new_client = make_client(0, ((listener->server) ? STAT_UNKNOWN_SERVER : STAT_UNKNOWN_USER)); /* * Copy ascii address to 'sockhost' just in case. Then we have something * valid to put into error messages... */ SetIPChecked(new_client); SetAccess(new_client); ircd_ntoa_r(cli_sock_ip(new_client), (const char*) &addr.sin_addr); strcpy(cli_sockhost(new_client), cli_sock_ip(new_client)); (cli_ip(new_client)).s_addr = addr.sin_addr.s_addr; cli_port(new_client) = ntohs(addr.sin_port); if (next_target) cli_nexttarget(new_client) = next_target; cli_fd(new_client) = fd; if (!socket_add(&(cli_socket(new_client)), client_sock_callback, (void*) cli_connect(new_client), SS_CONNECTED, 0, fd)) { ++ServerStats->is_ref; #ifdef USE_SSL ssl_murder(ssl, fd, register_message); #else write(fd, register_message, strlen(register_message)); close(fd); #endif /* USE_SSL */ cli_fd(new_client) = -1; return; } #ifdef USE_SSL if (ssl) cli_socket(new_client).ssl = ssl; #endif /* USE_SSL */ cli_freeflag(new_client) |= FREEFLAG_SOCKET; cli_listener(new_client) = listener; ++listener->ref_count; Count_newunknown(UserStats); /* if we've made it this far we can put the client on the auth query pile */ start_auth(new_client); } /* * update_write * * Determines whether to tell the events engine we're interested in * writable events */ void update_write(struct Client* cptr) { /* If there are messages that need to be sent along, or if the client * is in the middle of a /list, then we need to tell the engine that * we're interested in writable events--otherwise, we need to drop * that interest. */ socket_events(&(cli_socket(cptr)), ((MsgQLength(&cli_sendQ(cptr)) || cli_listing(cptr)) ? SOCK_ACTION_ADD : SOCK_ACTION_DEL) | SOCK_EVENT_WRITABLE); } /* * read_packet * * Read a 'packet' of data from a connection and process it. Read in 8k * chunks to give a better performance rating (for server connections). * Do some tricky stuff for client connections to make sure they don't do * any flooding >:-) -avalon */ static int read_packet(struct Client *cptr, int socket_ready) { unsigned int dolen = 0; unsigned int length = 0; if (socket_ready && !(IsUser(cptr) && !IsOper(cptr) && !IsBot(cptr) && DBufLength(&(cli_recvQ(cptr))) > feature_int(FEAT_CLIENT_FLOOD))) { #ifdef USE_SSL switch (client_recv(cptr, readbuf, sizeof(readbuf), &length)) { #else switch (os_recv_nonb(cli_fd(cptr), readbuf, sizeof(readbuf), &length)) { #endif /* USE_SSL */ case IO_SUCCESS: if (length) { if (!IsServer(cptr)) cli_lasttime(cptr) = CurrentTime; if (cli_lasttime(cptr) > cli_since(cptr)) cli_since(cptr) = cli_lasttime(cptr); ClrFlag(cptr, FLAG_PINGSENT); ClrFlag(cptr, FLAG_NONL); } break; case IO_BLOCKED: break; case IO_FAILURE: cli_error(cptr) = errno; /* SetFlag(cptr, FLAG_DEADSOCKET); */ return 0; } } /* * For server connections, we process as many as we can without * worrying about the time of day or anything :) */ if (length > 0 && IsServer(cptr)) return server_dopacket(cptr, readbuf, length); else if (length > 0 && (IsHandshake(cptr) || IsConnecting(cptr))) return connect_dopacket(cptr, readbuf, length); else { /* * Before we even think of parsing what we just read, stick * it on the end of the receive queue and do it when its * turn comes around. */ if (length > 0 && dbuf_put(&(cli_recvQ(cptr)), readbuf, length) == 0) return exit_client(cptr, cptr, &me, "dbuf_put fail"); if (IsUser(cptr)) { if (DBufLength(&(cli_recvQ(cptr))) > feature_int(FEAT_CLIENT_FLOOD) && !IsOper(cptr) && !IsBot(cptr)) return exit_client(cptr, cptr, &me, "Excess Flood"); } while (DBufLength(&(cli_recvQ(cptr))) && !NoNewLine(cptr) && (IsTrusted(cptr) || IsOper(cptr) || IsBot(cptr) || cli_since(cptr) - CurrentTime < 10)) { dolen = dbuf_getmsg(&(cli_recvQ(cptr)), cli_buffer(cptr), BUFSIZE); /* * Devious looking...whats it do ? well..if a client * sends a *long* message without any CR or LF, then * dbuf_getmsg fails and we pull it out using this * loop which just gets the next 512 bytes and then * deletes the rest of the buffer contents. * -avalon */ if (dolen == 0) { if (DBufLength(&(cli_recvQ(cptr))) < 510) SetFlag(cptr, FLAG_NONL); else DBufClear(&(cli_recvQ(cptr))); } else if (client_dopacket(cptr, dolen) == CPTR_KILLED) return CPTR_KILLED; /* * If it has become registered as a Server * then skip the per-message parsing below. */ if (IsHandshake(cptr) || IsServer(cptr)) { while (-1) { dolen = dbuf_get(&(cli_recvQ(cptr)), readbuf, sizeof(readbuf)); if (dolen <= 0) return 1; else if (dolen == 0) { if (DBufLength(&(cli_recvQ(cptr))) < 510) SetFlag(cptr, FLAG_NONL); else DBufClear(&(cli_recvQ(cptr))); } else if ((IsServer(cptr) && server_dopacket(cptr, readbuf, dolen) == CPTR_KILLED) || (!IsServer(cptr) && connect_dopacket(cptr, readbuf, dolen) == CPTR_KILLED)) return CPTR_KILLED; } } } /* If there's still data to process, wait 2 seconds first */ if (DBufLength(&(cli_recvQ(cptr))) && !NoNewLine(cptr) && !t_onqueue(&(cli_proc(cptr)))) { Debug((DEBUG_LIST, "Adding client process timer for %C", cptr)); cli_freeflag(cptr) |= FREEFLAG_TIMER; timer_add(&(cli_proc(cptr)), client_timer_callback, cli_connect(cptr), TT_RELATIVE, 2); } } return 1; } /* * connect_server - start or complete a connection to another server * returns true (1) if successful, false (0) otherwise * * aconf must point to a valid C:line * m_connect calls this with a valid by client and a null reply * try_connections calls this with a null by client, and a null reply * connect_dns_callback call this with a null by client, and a valid reply * * XXX - if this comes from an m_connect message and a dns query needs to * be done, we loose the information about who started the connection and * it's considered an auto connect. */ int connect_server(struct ConfItem* aconf, struct Client* by, struct DNSReply* reply) { struct Client* cptr = 0; assert(0 != aconf); if (aconf->dns_pending) { sendto_opmask_butone(0, SNO_OLDSNO, "Server %s connect DNS pending", aconf->name); return 0; } Debug((DEBUG_NOTICE, "Connect to %s[@%s]", aconf->name, ircd_ntoa((const char*) &aconf->ipnum))); if ((cptr = FindClient(aconf->name))) { if (IsServer(cptr) || IsMe(cptr)) { sendto_opmask_butone(0, SNO_OLDSNO, "Server %s already present from %s", aconf->name, cli_name(cli_from(cptr))); if (by && IsUser(by) && !MyUser(by)) { sendcmdto_one(&me, CMD_NOTICE, by, "%C :Server %s already present " "from %s", by, aconf->name, cli_name(cli_from(cptr))); } return 0; } else if (IsHandshake(cptr) || IsConnecting(cptr)) { if (by && IsUser(by)) { sendcmdto_one(&me, CMD_NOTICE, by, "%C :Connection to %s already in " "progress", by, cli_name(cptr)); } return 0; } } /* * If we dont know the IP# for this host and itis a hostname and * not a ip# string, then try and find the appropriate host record. */ if (INADDR_NONE == aconf->ipnum.s_addr) { char buf[HOSTLEN + 1]; assert(0 == reply); if (INADDR_NONE == (aconf->ipnum.s_addr = inet_addr(aconf->host))) { struct DNSQuery query; query.vptr = aconf; query.callback = connect_dns_callback; host_from_uh(buf, aconf->host, HOSTLEN); buf[HOSTLEN] = '\0'; reply = gethost_byname(buf, &query); if (!reply) { aconf->dns_pending = 1; return 0; } memcpy(&aconf->ipnum, reply->hp->h_addr, sizeof(struct in_addr)); } } cptr = make_client(NULL, STAT_UNKNOWN_SERVER); if (reply) ++reply->ref_count; cli_dns_reply(cptr) = reply; /* * Copy these in so we have something for error detection. */ ircd_strncpy(cli_name(cptr), aconf->name, HOSTLEN); ircd_strncpy(cli_sockhost(cptr), aconf->host, HOSTLEN); /* * Attach config entries to client here rather than in * completed_connection. This to avoid null pointer references */ attach_confs_byhost(cptr, aconf->host, CONF_SERVER); if (!find_conf_byhost(cli_confs(cptr), aconf->host, CONF_SERVER)) { sendto_opmask_butone(0, SNO_OLDSNO, "Host %s is not enabled for " "connecting: no C-line", aconf->name); if (by && IsUser(by) && !MyUser(by)) { sendcmdto_one(&me, CMD_NOTICE, by, "%C :Connect to host %s failed: no " "C-line", by, aconf->name); } det_confs_butmask(cptr, 0); free_client(cptr); return 0; } /* * attempt to connect to the server in the conf line */ if (!connect_inet(aconf, cptr)) { if (by && IsUser(by) && !MyUser(by)) { sendcmdto_one(&me, CMD_NOTICE, by, "%C :Couldn't connect to %s", by, cli_name(cptr)); } det_confs_butmask(cptr, 0); free_client(cptr); return 0; } /* * NOTE: if we're here we have a valid C:Line and the client should * have started the connection and stored the remote address/port and * ip address name in itself * * The socket has been connected or connect is in progress. */ make_server(cptr); if (by && IsUser(by)) { ircd_snprintf(0, cli_serv(cptr)->by, sizeof(cli_serv(cptr)->by), "%s%s", NumNick(by)); assert(0 == cli_serv(cptr)->user); cli_serv(cptr)->user = cli_user(by); cli_user(by)->refcnt++; } else { *(cli_serv(cptr))->by = '\0'; /* strcpy(cptr->serv->by, "Auto"); */ } cli_serv(cptr)->up = &me; SetConnecting(cptr); if (cli_fd(cptr) > HighestFd) HighestFd = cli_fd(cptr); LocalClientArray[cli_fd(cptr)] = cptr; Count_newunknown(UserStats); /* Actually we lie, the connect hasn't succeeded yet, but we have a valid * cptr, so we register it now. * Maybe these two calls should be merged. */ add_client_to_list(cptr); hAddClient(cptr); /* nextping = CurrentTime; */ return (s_state(&cli_socket(cptr)) == SS_CONNECTED) ? completed_connection(cptr) : 1; } /* * Setup local socket structure to use for binding to. */ void set_virtual_host(struct in_addr addr) { memset(&VirtualHost, 0, sizeof(VirtualHost)); VirtualHost.sin_family = AF_INET; VirtualHost.sin_addr.s_addr = addr.s_addr; } /* * Find the real hostname for the host running the server (or one which * matches the server's name) and its primary IP#. Hostname is stored * in the client structure passed as a pointer. */ void init_server_identity(void) { const struct LocalConf* conf = conf_get_local(); assert(0 != conf); ircd_strncpy(cli_name(&me), conf->name, HOSTLEN); SetYXXServerName(&me, conf->numeric); } /* * Process events on a client socket */ static void client_sock_callback(struct Event* ev) { struct Client* cptr; struct Connection* con; char *fmt = "%s"; char *fallback = 0; assert(0 != ev_socket(ev)); assert(0 != s_data(ev_socket(ev))); con = s_data(ev_socket(ev)); assert(0 != con_client(con) || ev_type(ev) == ET_DESTROY); cptr = con_client(con); assert(0 == cptr || con == cli_connect(cptr)); switch (ev_type(ev)) { case ET_DESTROY: con_freeflag(con) &= ~FREEFLAG_SOCKET; if (!con_freeflag(con) && !cptr) free_connection(con); #ifdef USE_SSL ssl_free(ev_socket(ev)); #endif /* USE_SSL */ break; case ET_CONNECT: /* socket connection completed */ if (!completed_connection(cptr) || IsDead(cptr)) fallback = cli_info(cptr); break; case ET_ERROR: /* an error occurred */ fallback = cli_info(cptr); cli_error(cptr) = ev_data(ev); if (s_state(&(con_socket(con))) == SS_CONNECTING) { completed_connection(cptr); /* From .12 patch: * for some reason, the os_get_sockerr() in completed_connect() * can return 0 even when ev_data(ev) indicates a real error, so * re-assign the client error here. */ cli_error(cptr) = ev_data(ev); break; } /*FALLTHROUGH*/ case ET_EOF: /* end of file on socket */ Debug((DEBUG_ERROR, "READ ERROR: fd = %d %d", cli_fd(cptr), cli_error(cptr))); SetFlag(cptr, FLAG_DEADSOCKET); if ((IsServer(cptr) || IsHandshake(cptr)) && cli_error(cptr) == 0) { exit_client_msg(cptr, cptr, &me, "Server %s closed the connection (%s)", cli_name(cptr), cli_serv(cptr)->last_error_msg); return; } else { fmt = "Read error: %s"; fallback = "EOF from client"; } break; case ET_WRITE: /* socket is writable */ ClrFlag(cptr, FLAG_BLOCKED); if (cli_listing(cptr) && MsgQLength(&(cli_sendQ(cptr))) < 2048) list_next_channels(cptr); Debug((DEBUG_SEND, "Sending queued data to %C", cptr)); send_queued(cptr); break; case ET_READ: /* socket is readable */ if (!IsDead(cptr)) { Debug((DEBUG_DEBUG, "Reading data from %C", cptr)); if (read_packet(cptr, 1) == 0) /* error while reading packet */ fallback = "EOF from client"; } break; default: #ifndef NDEBUG abort(); /* unrecognized event */ #endif break; } assert(0 == cptr || 0 == cli_connect(cptr) || con == cli_connect(cptr)); if (fallback) { const char* msg = (cli_error(cptr)) ? strerror(cli_error(cptr)) : fallback; if (!msg) msg = "Unknown error"; exit_client_msg(cptr, cptr, &me, fmt, msg); } } /* * Process a timer on client socket */ static void client_timer_callback(struct Event* ev) { struct Client* cptr; struct Connection* con; assert(0 != ev_timer(ev)); assert(0 != t_data(ev_timer(ev))); assert(ET_DESTROY == ev_type(ev) || ET_EXPIRE == ev_type(ev)); con = t_data(ev_timer(ev)); assert(0 != con_client(con) || ev_type(ev) == ET_DESTROY); cptr = con_client(con); assert(0 == cptr || con == cli_connect(cptr)); if (ev_type(ev)== ET_DESTROY) { con_freeflag(con) &= ~FREEFLAG_TIMER; /* timer has expired... */ if (!con_freeflag(con) && !cptr) free_connection(con); /* client is being destroyed */ } else { Debug((DEBUG_LIST, "Client process timer for %C expired; processing", cptr)); read_packet(cptr, 0); /* read_packet will re-add timer if needed */ } assert(0 == cptr || 0 == cli_connect(cptr) || con == cli_connect(cptr)); }