1 /*
2 * Copyright (c) 1985, 1993, 1994
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 4. Neither the name of the University nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30 #include <sys/types.h>
31 #include <sys/stat.h>
32
33 #include <ctype.h>
34 #include <err.h>
35 #include <errno.h>
36 #include <netdb.h>
37 #include <stdio.h>
38 #include <stdio_ext.h>
39 #include <stdlib.h>
40 #include <string.h>
41 #include <unistd.h>
42 #include <libintl.h>
43
44 /* #include "ftp_var.h" */
45
46 static int token (void);
47 static FILE *cfile;
48
49 #define DEFAULT 1
50 #define LOGIN 2
51 #define PASSWD 3
52 #define ACCOUNT 4
53 #define MACDEF 5
54 #define ID 10
55 #define MACHINE 11
56
57 static char tokval[100];
58
59 static const char tokstr[] =
60 {
61 #define TOK_DEFAULT_IDX 0
62 "default\0"
63 #define TOK_LOGIN_IDX (TOK_DEFAULT_IDX + sizeof "default")
64 "login\0"
65 #define TOK_PASSWORD_IDX (TOK_LOGIN_IDX + sizeof "login")
66 "password\0"
67 #define TOK_PASSWD_IDX (TOK_PASSWORD_IDX + sizeof "password")
68 "passwd\0"
69 #define TOK_ACCOUNT_IDX (TOK_PASSWD_IDX + sizeof "passwd")
70 "account\0"
71 #define TOK_MACHINE_IDX (TOK_ACCOUNT_IDX + sizeof "account")
72 "machine\0"
73 #define TOK_MACDEF_IDX (TOK_MACHINE_IDX + sizeof "machine")
74 "macdef"
75 };
76
77 static const struct toktab {
78 int tokstr_off;
79 int tval;
80 } toktab[]= {
81 { TOK_DEFAULT_IDX, DEFAULT },
82 { TOK_LOGIN_IDX, LOGIN },
83 { TOK_PASSWORD_IDX, PASSWD },
84 { TOK_PASSWD_IDX, PASSWD },
85 { TOK_ACCOUNT_IDX, ACCOUNT },
86 { TOK_MACHINE_IDX, MACHINE },
87 { TOK_MACDEF_IDX, MACDEF }
88 };
89
90
91
92 int
93 ruserpass (const char *host, const char **aname, const char **apass)
94 {
95 char *hdir, *buf, *tmp;
96 char myname[1024], *mydomain;
97 int t, usedefault = 0;
98 struct __stat64_t64 stb;
99
100 hdir = __libc_secure_getenv("HOME");
101 if (hdir == NULL) {
102 /* If we can't get HOME, fail instead of trying ".",
103 which is no improvement. This really should call
104 getpwuid(getuid()). */
105 /*hdir = ".";*/
106 return -1;
107 }
108
109 buf = alloca (strlen (hdir) + 8);
110
111 __stpcpy (__stpcpy (buf, hdir), "/.netrc");
112 cfile = fopen(buf, "rce");
113 if (cfile == NULL) {
114 if (errno != ENOENT)
115 warn("%s", buf);
116 return (0);
117 }
118 /* No threads use this stream. */
119 __fsetlocking (cfile, FSETLOCKING_BYCALLER);
120 if (__gethostname(myname, sizeof(myname)) < 0)
121 myname[0] = '\0';
122 mydomain = __strchrnul(myname, '.');
123 next:
124 while ((t = token())) switch(t) {
125
126 case DEFAULT:
127 usedefault = 1;
128 /* FALL THROUGH */
129
130 case MACHINE:
131 if (!usedefault) {
132 if (token() != ID)
133 continue;
134 /*
135 * Allow match either for user's input host name
136 * or official hostname. Also allow match of
137 * incompletely-specified host in local domain.
138 */
139 if (__strcasecmp(host, tokval) == 0)
140 goto match;
141 /* if (__strcasecmp(hostname, tokval) == 0)
142 goto match;
143 if ((tmp = strchr(hostname, '.')) != NULL &&
144 __strcasecmp(tmp, mydomain) == 0 &&
145 __strncasecmp(hostname, tokval, tmp-hostname) == 0 &&
146 tokval[tmp - hostname] == '\0')
147 goto match; */
148 if ((tmp = strchr(host, '.')) != NULL &&
149 __strcasecmp(tmp, mydomain) == 0 &&
150 __strncasecmp(host, tokval, tmp - host) == 0 &&
151 tokval[tmp - host] == '\0')
152 goto match;
153 continue;
154 }
155 match:
156 while ((t = token()) && t != MACHINE && t != DEFAULT) switch(t) {
157
158 case LOGIN:
159 if (token()) {
160 if (*aname == 0) {
161 char *newp;
162 newp = malloc((unsigned) strlen(tokval) + 1);
163 if (newp == NULL)
164 {
165 warnx(_("out of memory"));
166 goto bad;
167 }
168 *aname = strcpy(newp, tokval);
169 } else {
170 if (strcmp(*aname, tokval))
171 goto next;
172 }
173 }
174 break;
175 case PASSWD:
176 if (strcmp(*aname, "anonymous") &&
177 __fstat64_time64(fileno(cfile), &stb) >= 0 &&
178 (stb.st_mode & 077) != 0) {
179 warnx(_("Error: .netrc file is readable by others."));
180 warnx(_("Remove 'password' line or make file unreadable by others."));
181 goto bad;
182 }
183 if (token() && *apass == 0) {
184 char *newp;
185 newp = malloc((unsigned) strlen(tokval) + 1);
186 if (newp == NULL)
187 {
188 warnx(_("out of memory"));
189 goto bad;
190 }
191 *apass = strcpy(newp, tokval);
192 }
193 break;
194 case ACCOUNT:
195 break;
196 case MACDEF:
197 break;
198 default:
199 warnx(_("Unknown .netrc keyword %s"), tokval);
200 break;
201 }
202 goto done;
203 }
204 done:
205 (void) fclose(cfile);
206 return (0);
207 bad:
208 (void) fclose(cfile);
209 return (-1);
210 }
211 libc_hidden_def (ruserpass)
212
213 static int
214 token (void)
215 {
216 char *cp;
217 int c;
218 int i;
219
220 if (feof_unlocked(cfile) || ferror_unlocked(cfile))
221 return (0);
222 while ((c = getc_unlocked(cfile)) != EOF &&
223 (c == '\n' || c == '\t' || c == ' ' || c == ','))
224 continue;
225 if (c == EOF)
226 return (0);
227 cp = tokval;
228 if (c == '"') {
229 while ((c = getc_unlocked(cfile)) != EOF && c != '"') {
230 if (c == '\\')
231 c = getc_unlocked(cfile);
232 *cp++ = c;
233 }
234 } else {
235 *cp++ = c;
236 while ((c = getc_unlocked(cfile)) != EOF
237 && c != '\n' && c != '\t' && c != ' ' && c != ',') {
238 if (c == '\\')
239 c = getc_unlocked(cfile);
240 *cp++ = c;
241 }
242 }
243 *cp = 0;
244 if (tokval[0] == 0)
245 return (0);
246 for (i = 0; i < (int) (sizeof (toktab) / sizeof (toktab[0])); ++i)
247 if (!strcmp(&tokstr[toktab[i].tokstr_off], tokval))
248 return toktab[i].tval;
249 return (ID);
250 }