src/lmtp/commands.c

	commands.c revision 3b22894b8805b186c73d8b754001e8d7e944be85
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen/* Copyright (c) 2009-2010 Dovecot authors, see the included COPYING file */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "lib.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "ioloop.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "array.h"
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde#include "str.h"
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde#include "strescape.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "hostpid.h"
cda217260716cfd8d8ec5e56f91708c64c140538Timo Sirainen#include "istream.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "istream-concat.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "ostream.h"
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde#include "istream-dot.h"
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen#include "safe-mkstemp.h"
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde#include "master-service.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "rfc822-parser.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "message-date.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "auth-master.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "mail-storage-service.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "index/raw/raw-storage.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "lda-settings.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "lmtp-settings.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "mail-deliver.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "main.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "client.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "commands.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include "lmtp-proxy.h"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#include <stdlib.h>
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#define ERRSTR_TEMP_MAILBOX_FAIL "451 4.3.0 <%s> Temporary internal error"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#define ERRSTR_TEMP_USERDB_FAIL_PREFIX "451 4.3.0 <%s> "
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen#define ERRSTR_TEMP_USERDB_FAIL \
f1743785713e7632459d623d5df2108f4b93accbTimo Sirainen    ERRSTR_TEMP_USERDB_FAIL_PREFIX "Temporary user lookup failure"
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen#define LMTP_PROXY_DEFAULT_TIMEOUT_MSECS (1000*30)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainenint cmd_lhlo(struct client *client, const char *args)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen{
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct rfc822_parser_context parser;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    string_t *domain = t_str_new(128);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    const char *p;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    int ret = 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (*args == '\0') {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "501 Missing hostname");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    /* domain / address-literal */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    rfc822_parser_init(&parser, (const unsigned char *)args, strlen(args),
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen               NULL);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (*args != '[')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        ret = rfc822_parse_dot_atom(&parser, domain);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        for (p = args+1; *p != ']'; p++) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            if (*p == '\\' || *p == '[')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                break;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        if (strcmp(p, "]") != 0)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            ret = -1;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (ret < 0) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        str_truncate(domain, 0);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        str_append(domain, "invalid");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    client_state_reset(client);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    client_send_line(client, "250-%s", client->my_domain);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    client_send_line(client, "250-8BITMIME");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    client_send_line(client, "250-ENHANCEDSTATUSCODES");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    client_send_line(client, "250 PIPELINING");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    client->state.lhlo = p_strdup(client->state_pool, str_c(domain));
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    return 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen}
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainenint cmd_mail(struct client *client, const char *args)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen{
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    const char *addr, *const *argv;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    unsigned int len;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (client->state.mail_from != NULL) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "503 5.5.1 MAIL already given");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    argv = t_strsplit(args, " ");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (argv == NULL)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        addr = "";
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        addr = argv[0];
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        argv++;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    len = strlen(addr);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (strncasecmp(addr, "FROM:<", 6) != 0 || addr[len-1] != '>') {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "501 5.5.4 Invalid parameters");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    for (; *argv != NULL; argv++) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        if (strcasecmp(*argv, "BODY=7BIT") == 0)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            client->mail_body_7bit = TRUE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        else if (strcasecmp(*argv, "BODY=8BITMIME") == 0)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            client->mail_body_8bitmime = TRUE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            client_send_line(client,
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                "501 5.5.4 Unsupported options");
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            return 0;
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde        }
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    }
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    client->state.mail_from =
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        p_strndup(client->state_pool, addr + 6, len - 7);
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    p_array_init(&client->state.rcpt_to, client->state_pool, 64);
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    client_send_line(client, "250 2.1.0 OK");
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    return 0;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen}
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainenstatic bool rcpt_is_duplicate(struct client *client, const char *address)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen{
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde    const struct mail_recipient *rcpt;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    array_foreach(&client->state.rcpt_to, rcpt) {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        if (strcmp(rcpt->address, address) == 0)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            return TRUE;
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde    }
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    return FALSE;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen}
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainenstatic bool
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainenclient_proxy_rcpt_parse_fields(struct lmtp_proxy_settings *set,
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                   const char *const *args, const char **address)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen{
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    const char *p, *key, *value;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    bool proxying = FALSE, port_set = FALSE;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    for (; *args != NULL; args++) {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        p = strchr(*args, '=');
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        if (p == NULL) {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            key = *args;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            value = "";
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        } else {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            key = t_strdup_until(*args, p);
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            value = p + 1;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        }
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        if (strcmp(key, "proxy") == 0)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            proxying = TRUE;
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde        else if (strcmp(key, "host") == 0)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            set->host = value;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        else if (strcmp(key, "port") == 0) {
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde            set->port = atoi(value);
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            port_set = TRUE;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        } else if (strcmp(key, "proxy_timeout") == 0)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            set->timeout_msecs = atoi(value)*1000;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        else if (strcmp(key, "protocol") == 0) {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            if (strcmp(value, "lmtp") == 0)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                set->protocol = LMTP_CLIENT_PROTOCOL_LMTP;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            else if (strcmp(value, "smtp") == 0) {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                set->protocol = LMTP_CLIENT_PROTOCOL_SMTP;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                if (!port_set)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                    set->port = 25;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            } else {
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde                i_error("proxy: Unknown protocol %s", value);
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde                return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        } else if (strcmp(key, "user") == 0) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            /* changing the username */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            *address = value;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        } else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            /* just ignore it */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (proxying && set->host == NULL) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        i_error("proxy: host not given");
c2ee17c9c263efdc9c0a339c4836c3d43f5cd3d9Sascha Wilde        return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    return proxying;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen}
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainenstatic bool
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainenclient_proxy_is_ourself(const struct client *client,
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            const struct lmtp_proxy_settings *set)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen{
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    struct ip_addr ip;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (set->port != client->local_port)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (net_addr2ip(set->host, &ip) < 0)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (!net_ip_compare(&ip, &client->local_ip))
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    return TRUE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen}
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainenstatic bool client_proxy_rcpt(struct client *client, const char *address,
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                  const char *username)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen{
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct auth_master_connection *auth_conn;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct lmtp_proxy_settings set;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct auth_user_info info;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct mail_storage_service_input input;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    const char *args, *const *fields, *errstr, *orig_username = username;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    pool_t pool;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    int ret;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    memset(&input, 0, sizeof(input));
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    input.module = input.service = "lmtp";
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    mail_storage_service_init_settings(storage_service, &input);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    memset(&info, 0, sizeof(info));
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    info.service = master_service_get_name(master_service);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    info.local_ip = client->local_ip;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    info.remote_ip = client->remote_ip;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    info.local_port = client->local_port;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    info.remote_port = client->remote_port;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    pool = pool_alloconly_create("auth lookup", 1024);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    auth_conn = mail_storage_service_get_auth_conn(storage_service);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    ret = auth_master_pass_lookup(auth_conn, username, &info,
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                      pool, &fields);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (ret <= 0) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        errstr = ret < 0 && fields[0] != NULL ? t_strdup(fields[0]) :
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            t_strdup_printf(ERRSTR_TEMP_USERDB_FAIL, address);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        pool_unref(&pool);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        if (ret < 0) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            client_send_line(client, "%s", errstr);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            return TRUE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        } else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            /* user not found from passdb. try userdb also. */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    memset(&set, 0, sizeof(set));
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    set.port = client->local_port;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    set.protocol = LMTP_CLIENT_PROTOCOL_LMTP;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    set.timeout_msecs = LMTP_PROXY_DEFAULT_TIMEOUT_MSECS;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    if (!client_proxy_rcpt_parse_fields(&set, fields, &username)) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        /* not proxying this user */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        pool_unref(&pool);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return FALSE;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (strcmp(username, orig_username) == 0 &&
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_proxy_is_ourself(client, &set)) {
c7194d1d3872ffb2901737e1df337cc227a3fa77Timo Sirainen        i_error("Proxying to <%s> loops to itself", username);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "554 5.4.6 <%s> "
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                 "Proxying loops to itself", address);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        pool_unref(&pool);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return FALSE;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    }
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    if (client->proxy == NULL) {
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        client->proxy = lmtp_proxy_init(client->set->hostname,
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                        dns_client_socket_path,
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen                        client->output);
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        if (client->mail_body_8bitmime)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            args = " BODY=8BITMIME";
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        else if (client->mail_body_7bit)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            args = " BODY=7BIT";
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        else
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            args = "";
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen        lmtp_proxy_mail_from(client->proxy, t_strdup_printf(
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen            "<%s>%s", client->state.mail_from, args));
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (lmtp_proxy_add_rcpt(client->proxy, address, &set) < 0)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, ERRSTR_TEMP_REMOTE_FAILURE);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    else
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "250 2.1.5 OK");
a988c3fd9251806e38931a011aaa4006dd081cbdTimo Sirainen    pool_unref(&pool);
a988c3fd9251806e38931a011aaa4006dd081cbdTimo Sirainen    return TRUE;
c7194d1d3872ffb2901737e1df337cc227a3fa77Timo Sirainen}
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainenstatic const char *lmtp_unescape_address(const char *name)
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen{
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    string_t *str;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    const char *p;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (*name != '"')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return name;
0d16525a729011f4fced989a3da74d755ea49e6dTimo Sirainen
0d16525a729011f4fced989a3da74d755ea49e6dTimo Sirainen    /* quoted-string local-part. drop the quotes unless there's a
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen       '@' character inside or there's an error. */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    str = t_str_new(128);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    for (p = name+1; *p != '"'; p++) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        if (*p == '\0')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            return name;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        if (*p == '\\') {
c7194d1d3872ffb2901737e1df337cc227a3fa77Timo Sirainen            if (p[1] == '\0') {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                /* error */
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                return name;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            p++;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        if (*p == '@')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            return name;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        str_append_c(str, *p);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    p++;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (*p != '@' && *p != '\0')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return name;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    str_append(str, p);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    return str_c(str);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen}
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainenstatic void rcpt_address_parse(struct client *client, const char *address,
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen                   const char **username_r, const char **detail_r)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen{
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    const char *p, *p2;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    *username_r = address;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    *detail_r = "";
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (*client->set->recipient_delimiter == '\0')
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    p = strstr(address, client->set->recipient_delimiter);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (p != NULL) {
f1743785713e7632459d623d5df2108f4b93accbTimo Sirainen        /* user+detail@domain */
f1743785713e7632459d623d5df2108f4b93accbTimo Sirainen        *username_r = t_strdup_until(*username_r, p);
f1743785713e7632459d623d5df2108f4b93accbTimo Sirainen        p2 = strchr(p, '@');
f1743785713e7632459d623d5df2108f4b93accbTimo Sirainen        if (p2 == NULL)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            *detail_r = p+1;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            *detail_r = t_strdup_until(p+1, p2);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen            *username_r = t_strconcat(*username_r, p2, NULL);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen}
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainenint cmd_rcpt(struct client *client, const char *args)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen{
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct mail_recipient rcpt;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    struct mail_storage_service_input input;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    const char *address, *username, *detail, *prefix;
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    const char *error = NULL, *arg, *const *argv;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    unsigned int len;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    int ret = 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (client->state.mail_from == NULL) {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "503 5.5.1 MAIL needed first");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    argv = t_strsplit(args, " ");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (argv == NULL)
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        arg = "";
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    else {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        arg = argv[0];
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        argv++;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
c4c9be10781e1a16b3b001dc6b0461c4640da101Timo Sirainen    len = strlen(arg);
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    if (strncasecmp(arg, "TO:<", 4) != 0 || arg[len-1] != '>') {
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        client_send_line(client, "501 5.5.4 Invalid parameters");
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen        return 0;
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen    }
4654f788834c9d7920a351306b89cf5d1c21772eTimo Sirainen
    memset(&rcpt, 0, sizeof(rcpt));
    address = lmtp_unescape_address(t_strndup(arg + 4, len - 5));

    if (rcpt_is_duplicate(client, address)) {
        client_send_line(client, "250 2.1.5 OK, ignoring duplicate");
        return 0;
    }

    if (*argv != NULL) {
        client_send_line(client, "501 5.5.4 Unsupported options");
        return 0;
    }
    rcpt_address_parse(client, address, &username, &detail);

    if (client->lmtp_set->lmtp_proxy) {
        if (client_proxy_rcpt(client, address, username))
            return 0;
    }

    memset(&input, 0, sizeof(input));
    input.module = input.service = "lmtp";
    input.username = username;
    input.local_ip = client->local_ip;
    input.remote_ip = client->remote_ip;

    ret = mail_storage_service_lookup(storage_service, &input,
                      &rcpt.service_user, &error);

    if (ret < 0) {
        prefix = t_strdup_printf(ERRSTR_TEMP_USERDB_FAIL_PREFIX,
                     username);
        client_send_line(client, "%s%s", prefix, error);
        return 0;
    }
    if (ret == 0) {
        client_send_line(client,
                 "550 5.1.1 <%s> User doesn't exist: %s",
                 address, username);
        return 0;
    }

    rcpt.address = p_strdup(client->state_pool, address);
    rcpt.detail = p_strdup(client->state_pool, detail);
    array_append(&client->state.rcpt_to, &rcpt, 1);

    client_send_line(client, "250 2.1.5 OK");
    return 0;
}

int cmd_quit(struct client *client, const char *args ATTR_UNUSED)
{
    client_destroy(client, "221 2.0.0", "Client quit");
    return -1;
}

int cmd_vrfy(struct client *client, const char *args ATTR_UNUSED)
{
    client_send_line(client, "252 2.3.3 Try RCPT instead");
    return 0;
}

int cmd_rset(struct client *client, const char *args ATTR_UNUSED)
{
    client_state_reset(client);
    client_send_line(client, "250 2.0.0 OK");
    return 0;
}

int cmd_noop(struct client *client, const char *args ATTR_UNUSED)
{
    client_send_line(client, "250 2.0.0 OK");
    return 0;
}

static int
client_deliver(struct client *client, const struct mail_recipient *rcpt,
           struct mail *src_mail)
{
    struct mail_deliver_context dctx;
    struct mail_storage *storage;
    const struct mail_storage_service_input *input;
    void **sets;
    uid_t old_uid;
    const char *error, *username;
    enum mail_error mail_error;
    int ret;

    old_uid = geteuid();

    input = mail_storage_service_user_get_input(rcpt->service_user);
    username = t_strdup(input->username);

    i_set_failure_prefix(t_strdup_printf("lmtp(%s, %s): ",
                         my_pid, username));
    if (mail_storage_service_next(storage_service, rcpt->service_user,
                      &client->state.dest_user) < 0) {
        client_send_line(client, ERRSTR_TEMP_MAILBOX_FAIL,
                 rcpt->address);
        return -1;
    }
    sets = mail_storage_service_user_get_set(rcpt->service_user);

    memset(&dctx, 0, sizeof(dctx));
    dctx.pool = pool_alloconly_create("mail delivery", 1024);
    dctx.set = sets[1];
    dctx.session_id = client->state.session_id;
    dctx.src_mail = src_mail;
    dctx.src_envelope_sender = client->state.mail_from;
    dctx.dest_user = client->state.dest_user;
    dctx.dest_addr = rcpt->address;
    dctx.dest_mailbox_name = *rcpt->detail == '\0' ? "INBOX" : rcpt->detail;
    dctx.save_dest_mail = array_count(&client->state.rcpt_to) > 1 &&
        client->state.first_saved_mail == NULL;

    if (mail_deliver(&dctx, &storage) == 0) {
        if (dctx.dest_mail != NULL) {
            i_assert(client->state.first_saved_mail == NULL);
            client->state.first_saved_mail = dctx.dest_mail;
        }
        client_send_line(client, "250 2.0.0 <%s> %s Saved",
                 rcpt->address, client->state.session_id);
        ret = 0;
    } else if (storage == NULL) {
        /* This shouldn't happen */
        i_error("BUG: Saving failed to unknown storage");
        client_send_line(client, ERRSTR_TEMP_MAILBOX_FAIL,
                 rcpt->address);
        ret = -1;
    } else {
        error = mail_storage_get_last_error(storage, &mail_error);
        if (mail_error == MAIL_ERROR_NOSPACE) {
            client_send_line(client, "%s <%s> %s",
                     dctx.set->quota_full_tempfail ?
                     "452 4.2.2" : "552 5.2.2",
                     rcpt->address, error);
        } else {
            client_send_line(client, "451 4.2.0 <%s> %s",
                     rcpt->address, error);
        }
        ret = -1;
    }
    if (old_uid == 0) {
        /* switch back to running as root, since that's what we're
           practically doing anyway. it's also important in case we
           lose e.g. config connection and need to reconnect to it. */
        if (seteuid(0) < 0)
            i_fatal("seteuid(0) failed: %m");
    }
    pool_unref(&dctx.pool);
    return ret;
}

static bool client_deliver_next(struct client *client, struct mail *src_mail)
{
    const struct mail_recipient *rcpts;
    unsigned int count;
    int ret;

    rcpts = array_get(&client->state.rcpt_to, &count);
    while (client->state.rcpt_idx < count) {
        ret = client_deliver(client, &rcpts[client->state.rcpt_idx],
                     src_mail);
        i_set_failure_prefix(t_strdup_printf("lmtp(%s): ", my_pid));

        client->state.rcpt_idx++;
        if (ret == 0)
            return TRUE;
        /* failed. try the next one. */
        if (client->state.dest_user != NULL)
            mail_user_unref(&client->state.dest_user);
    }
    return FALSE;
}

static void client_rcpt_fail_all(struct client *client)
{
    const struct mail_recipient *rcpt;

    array_foreach(&client->state.rcpt_to, rcpt) {
        client_send_line(client, ERRSTR_TEMP_MAILBOX_FAIL,
                 rcpt->address);
    }
}

static struct istream *client_get_input(struct client *client)
{
    struct client_state *state = &client->state;
    struct istream *cinput, *inputs[3];

    inputs[0] = i_stream_create_from_data(state->received_line,
                          strlen(state->received_line));

    if (state->mail_data_output != NULL) {
        o_stream_unref(&state->mail_data_output);
        inputs[1] = i_stream_create_fd(state->mail_data_fd,
                           MAIL_READ_FULL_BLOCK_SIZE,
                           FALSE);
        i_stream_set_init_buffer_size(inputs[1],
                          MAIL_READ_FULL_BLOCK_SIZE);
    } else {
        inputs[1] = i_stream_create_from_data(state->mail_data->data,
                              state->mail_data->used);
    }
    inputs[2] = NULL;

    cinput = i_stream_create_concat(inputs);
    i_stream_unref(&inputs[0]);
    i_stream_unref(&inputs[1]);
    return cinput;
}

static int client_open_raw_mail(struct client *client, struct istream *input)
{
    static const char *wanted_headers[] = {
        "From", "To", "Message-ID", "Subject", "Return-Path",
        NULL
    };
    struct mailbox *box;
    struct raw_mailbox *raw_box;
    struct mailbox_header_lookup_ctx *headers_ctx;
    enum mail_error error;

    client->state.raw_box = box =
        mailbox_alloc(client->raw_mail_user->namespaces->list,
                  "Dovecot Delivery Mail",
                  MAILBOX_FLAG_NO_INDEX_FILES);
    if (mailbox_open_stream(box, input) < 0 ||
        mailbox_sync(box, 0) < 0) {
        i_error("Can't open delivery mail as raw: %s",
            mail_storage_get_last_error(box->storage, &error));
        mailbox_free(&box);
        client_rcpt_fail_all(client);
        return -1;
    }
    raw_box = (struct raw_mailbox *)box;
    raw_box->envelope_sender = client->state.mail_from;

    client->state.raw_trans = mailbox_transaction_begin(box, 0);

    headers_ctx = mailbox_header_lookup_init(box, wanted_headers);
    client->state.raw_mail = mail_alloc(client->state.raw_trans,
                        0, headers_ctx);
    mailbox_header_lookup_unref(&headers_ctx);
    mail_set_seq(client->state.raw_mail, 1);
    return 0;
}

static void
client_input_data_write_local(struct client *client, struct istream *input)
{
    struct mail *src_mail;

    if (client_open_raw_mail(client, input) < 0)
        return;

    /* save the message to the first recipient's mailbox */
    src_mail = client->state.raw_mail;
    if (!client_deliver_next(client, src_mail))
        return;

    if (client->state.first_saved_mail == NULL)
        mail_user_unref(&client->state.dest_user);
    else
        src_mail = client->state.first_saved_mail;

    /* use the first saved message to save it elsewhere too.
       this might allow hard linking the files. */
    while (client_deliver_next(client, src_mail))
        mail_user_unref(&client->state.dest_user);

    if (client->state.first_saved_mail != NULL) {
        struct mail *mail = client->state.first_saved_mail;
        struct mailbox_transaction_context *trans = mail->transaction;
        struct mailbox *box = trans->box;
        struct mail_user *user = box->storage->user;

        mail_free(&mail);
        mailbox_transaction_rollback(&trans);
        mailbox_free(&box);
        mail_user_unref(&user);
    }
}

static void client_input_data_finish(struct client *client)
{
    client_io_reset(client);
    client_state_reset(client);
    if (i_stream_have_bytes_left(client->input))
        client_input_handle(client);
}

static void client_proxy_finish(bool timeout, void *context)
{
    struct client *client = context;

    lmtp_proxy_deinit(&client->proxy);
    if (timeout) {
        client_destroy(client,
            t_strdup_printf("421 4.4.2 %s", client->my_domain),
            "Disconnected for inactivity");
    } else {
        client_input_data_finish(client);
    }
}

static const char *client_get_received_line(struct client *client)
{
    string_t *str = t_str_new(200);
    const char *host;

    str_printfa(str, "Received: from %s", client->state.lhlo);
    if ((host = net_ip2addr(&client->remote_ip)) != NULL)
        str_printfa(str, " ([%s])", host);
    str_printfa(str, "\r\n\tby %s ("PACKAGE_NAME") with LMTP id %s",
            client->my_domain, client->state.session_id);

    str_append(str, "\r\n\t");
    if (array_count(&client->state.rcpt_to) == 1) {
        const struct mail_recipient *rcpt =
            array_idx(&client->state.rcpt_to, 0);

        str_printfa(str, "for <%s>", rcpt->address);
    }
    str_printfa(str, "; %s\r\n", message_date_create(ioloop_time));
    return str_c(str);
}

static bool client_input_data_write(struct client *client)
{
    struct istream *input;
    bool ret = TRUE;

    i_stream_destroy(&client->dot_input);

    input = client_get_input(client);
    client_input_data_write_local(client, input);
    if (client->proxy != NULL) {
        lmtp_proxy_start(client->proxy, input, NULL,
                 client_proxy_finish, client);
        ret = FALSE;
    }
    i_stream_unref(&input);
    return ret;
}

static int client_input_add_file(struct client *client,
                 const unsigned char *data, size_t size)
{
    struct client_state *state = &client->state;
    string_t *path;
    ssize_t ret;
    int fd;

    if (state->mail_data_output != NULL) {
        /* continue writing to file */
        if (o_stream_send(state->mail_data_output,
                  data, size) != (ssize_t)size)
            return -1;
        return 0;
    }

    /* move everything to a temporary file. FIXME: it really shouldn't
       be in /tmp.. */
    path = t_str_new(256);
    str_append(path, "/tmp/dovecot.lmtp.");
    fd = safe_mkstemp_hostpid(path, 0600, (uid_t)-1, (gid_t)-1);
    if (fd == -1)
        return -1;

    /* we just want the fd, unlink it */
    if (unlink(str_c(path)) < 0) {
        /* shouldn't happen.. */
        i_error("unlink(%s) failed: %m", str_c(path));
        (void)close(fd);
        return -1;
    }

    state->mail_data_fd = fd;
    state->mail_data_output = o_stream_create_fd_file(fd, 0, FALSE);
    o_stream_cork(state->mail_data_output);

    ret = o_stream_send(state->mail_data_output,
                state->mail_data->data, state->mail_data->used);
    if (ret != (ssize_t)state->mail_data->used)
        return -1;
    if (o_stream_send(client->state.mail_data_output,
              data, size) != (ssize_t)size)
        return -1;
    return 0;
}

static int
client_input_add(struct client *client, const unsigned char *data, size_t size)
{
    if (client->state.mail_data->used + size <=
        CLIENT_MAIL_DATA_MAX_INMEMORY_SIZE &&
        client->state.mail_data_output == NULL) {
        buffer_append(client->state.mail_data, data, size);
        return 0;
    } else {
        return client_input_add_file(client, data, size);
    }
}

static void client_input_data_handle(struct client *client)
{
    const unsigned char *data;
    size_t size;
    ssize_t ret;

    while ((ret = i_stream_read(client->dot_input)) > 0 || ret == -2) {
        data = i_stream_get_data(client->dot_input, &size);
        if (client_input_add(client, data, size) < 0) {
            client_destroy(client, "451 4.3.0",
                       "Temporary internal failure");
            return;
        }
        i_stream_skip(client->dot_input, size);
    }
    if (ret == 0)
        return;

    if (client_input_data_write(client))
        client_input_data_finish(client);
}

static void client_input_data(struct client *client)
{
    if (client_input_read(client) < 0)
        return;

    client_input_data_handle(client);
}

int cmd_data(struct client *client, const char *args ATTR_UNUSED)
{
    if (client->state.mail_from == NULL) {
        client_send_line(client, "503 5.5.1 MAIL needed first");
        return 0;
    }
    if (array_count(&client->state.rcpt_to) == 0 && client->proxy == NULL) {
        client_send_line(client, "554 5.5.1 No valid recipients");
        return 0;
    }

    client->state.received_line =
        p_strdup(client->state_pool, client_get_received_line(client));

    i_assert(client->state.mail_data == NULL);
    client->state.mail_data = buffer_create_dynamic(default_pool, 1024*64);

    i_assert(client->dot_input == NULL);
    client->dot_input = i_stream_create_dot(client->input, TRUE);
    client_send_line(client, "354 OK");

    io_remove(&client->io);
    if (array_count(&client->state.rcpt_to) == 0) {
        timeout_remove(&client->to_idle);
        lmtp_proxy_start(client->proxy, client->dot_input,
                 client->state.received_line,
                 client_proxy_finish, client);
        i_stream_unref(&client->dot_input);
    } else {
        client->io = io_add(client->fd_in, IO_READ,
                    client_input_data, client);
        client_input_data_handle(client);
    }
    return -1;
}