1 /* $OpenBSD: privsep.c,v 1.7 2004/05/10 18:34:42 deraadt Exp $ */
4 * Copyright (c) 2004 Henning Brauer <henning@openbsd.org>
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF MIND, USE, DATA OR PROFITS, WHETHER IN
15 * AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
16 * OF OR IN CONNECTION WITH THE USE, ABUSE OR PERFORMANCE OF THIS SOFTWARE.
19 #include <sys/cdefs.h>
20 __FBSDID("$FreeBSD$");
30 if ((buf = calloc(1, sizeof(struct buf))) == NULL)
32 if ((buf->buf = malloc(len)) == NULL) {
42 buf_add(struct buf *buf, void *data, size_t len)
44 if (buf->wpos + len > buf->size)
47 memcpy(buf->buf + buf->wpos, data, len);
53 buf_close(int sock, struct buf *buf)
58 n = write(sock, buf->buf + buf->rpos, buf->size - buf->rpos);
61 if (n == 0) { /* connection closed */
65 } while (n == -1 && (errno == EAGAIN || errno == EINTR));
67 if (buf->rpos < buf->size)
68 error("short write: wanted %lu got %ld bytes",
69 (unsigned long)buf->size, (long)buf->rpos);
77 buf_read(int sock, void *buf, size_t nbytes)
84 n = read(sock, p, nbytes);
86 error("connection closed");
92 } while (n == -1 && (errno == EINTR || errno == EAGAIN));
95 error("buf_read: %m");
98 error("short read: wanted %lu got %ld bytes",
99 (unsigned long)nbytes, (long)r);
105 dispatch_imsg(struct interface_info *ifi, int fd)
108 char *medium, *reason, *filename,
109 *servername, *prefix;
110 size_t medium_len, reason_len, filename_len,
111 servername_len, optlen, prefix_len, totlen;
112 struct client_lease lease;
117 buf_read(fd, &hdr, sizeof(hdr));
120 case IMSG_SCRIPT_INIT:
121 if (hdr.len < sizeof(hdr) + sizeof(size_t))
122 error("corrupted message received");
123 buf_read(fd, &medium_len, sizeof(medium_len));
124 if (hdr.len < medium_len + sizeof(size_t) + sizeof(hdr)
125 + sizeof(size_t) || medium_len == SIZE_T_MAX)
126 error("corrupted message received");
127 if (medium_len > 0) {
128 if ((medium = calloc(1, medium_len + 1)) == NULL)
130 buf_read(fd, medium, medium_len);
134 buf_read(fd, &reason_len, sizeof(reason_len));
135 if (hdr.len < medium_len + reason_len + sizeof(hdr) ||
136 reason_len == SIZE_T_MAX)
137 error("corrupted message received");
138 if (reason_len > 0) {
139 if ((reason = calloc(1, reason_len + 1)) == NULL)
141 buf_read(fd, reason, reason_len);
145 priv_script_init(reason, medium);
149 case IMSG_SCRIPT_WRITE_PARAMS:
150 bzero(&lease, sizeof lease);
151 totlen = sizeof(hdr) + sizeof(lease) + sizeof(size_t);
152 if (hdr.len < totlen)
153 error("corrupted message received");
154 buf_read(fd, &lease, sizeof(lease));
156 buf_read(fd, &filename_len, sizeof(filename_len));
157 totlen += filename_len + sizeof(size_t);
158 if (hdr.len < totlen || filename_len == SIZE_T_MAX)
159 error("corrupted message received");
160 if (filename_len > 0) {
161 if ((filename = calloc(1, filename_len + 1)) == NULL)
163 buf_read(fd, filename, filename_len);
167 buf_read(fd, &servername_len, sizeof(servername_len));
168 totlen += servername_len + sizeof(size_t);
169 if (hdr.len < totlen || servername_len == SIZE_T_MAX)
170 error("corrupted message received");
171 if (servername_len > 0) {
173 calloc(1, servername_len + 1)) == NULL)
175 buf_read(fd, servername, servername_len);
179 buf_read(fd, &prefix_len, sizeof(prefix_len));
180 totlen += prefix_len;
181 if (hdr.len < totlen || prefix_len == SIZE_T_MAX)
182 error("corrupted message received");
183 if (prefix_len > 0) {
184 if ((prefix = calloc(1, prefix_len + 1)) == NULL)
186 buf_read(fd, prefix, prefix_len);
190 for (i = 0; i < 256; i++) {
191 totlen += sizeof(optlen);
192 if (hdr.len < totlen)
193 error("corrupted message received");
194 buf_read(fd, &optlen, sizeof(optlen));
195 lease.options[i].data = NULL;
196 lease.options[i].len = optlen;
199 if (hdr.len < totlen || optlen == SIZE_T_MAX)
200 error("corrupted message received");
201 lease.options[i].data =
202 calloc(1, optlen + 1);
203 if (lease.options[i].data == NULL)
205 buf_read(fd, lease.options[i].data, optlen);
208 lease.server_name = servername;
209 lease.filename = filename;
211 priv_script_write_params(prefix, &lease);
216 for (i = 0; i < 256; i++)
217 if (lease.options[i].len > 0)
218 free(lease.options[i].data);
221 if (hdr.len != sizeof(hdr))
222 error("corrupted message received");
224 ret = priv_script_go();
226 hdr.code = IMSG_SCRIPT_GO_RET;
227 hdr.len = sizeof(struct imsg_hdr) + sizeof(int);
228 if ((buf = buf_open(hdr.len)) == NULL)
229 error("buf_open: %m");
230 if (buf_add(buf, &hdr, sizeof(hdr)))
231 error("buf_add: %m");
232 if (buf_add(buf, &ret, sizeof(ret)))
233 error("buf_add: %m");
234 if (buf_close(fd, buf) == -1)
235 error("buf_close: %m");
237 case IMSG_SEND_PACKET:
238 send_packet_priv(ifi, &hdr, fd);
240 case IMSG_SET_INTERFACE_MTU:
241 if (hdr.len < sizeof(hdr) + sizeof(u_int16_t))
242 error("corrupted message received");
244 buf_read(fd, &mtu, sizeof(u_int16_t));
245 interface_set_mtu_priv(ifi->name, mtu);
248 error("received unknown message, code %d", hdr.code);