%{

#pragma ident "%Z%%M% %I% %E% SMI"

#include "config.h"

#include <sys/param.h>

#include <sys/types.h>

#include <sys/socket.h>

#include <sys/stat.h>

#include <netinet/in.h>

#include <arpa/inet.h>

#include <arpa/ftp.h>

#include <stdio.h>

#include <signal.h>

#include <errno.h>

#include <ctype.h>

#include <pwd.h>

#include <setjmp.h>

#ifdef HAVE_SYS_SYSLOG_H

#include <sys/syslog.h>

#endif

#if defined(HAVE_SYSLOG_H) || (!defined(AUTOCONF) && !defined(HAVE_SYS_SYSLOG_H))

#include <syslog.h>

#endif

#include <time.h>

#include <stdlib.h>

#include <string.h>

#include <limits.h>

#include "extensions.h"

#include "pathnames.h"

#include "proto.h"

#if defined(USE_TLS) || defined(USE_GSS)

static int pbsz_command_issued = 0;

char *cur_auth_type = NULL;

extern char *protnames[];

#endif /* defined(USE_TLS) || defined(USE_GSS) */

#if defined(USE_GSS)

#include "gssutil.h"

extern gss_info_t gss_info;

#endif /* defined(USE_GSS) */

extern int dolreplies;

#ifndef INTERNAL_LS

extern char ls_long[];

extern char ls_short[];

#endif

extern struct SOCKSTORAGE data_dest;

extern struct SOCKSTORAGE his_addr;

extern int logged_in;

extern struct passwd *pw;

extern int anonymous;

extern int logging;

extern int log_commands;

extern int log_security;

extern int type;

extern int form;

extern int debug;

extern unsigned int timeout_idle;

extern unsigned int timeout_maxidle;

extern int pdata;

extern char hostname[], remotehost[], *remoteident;

extern char remoteaddr[];

extern char chroot_path[];

extern char guestpw[], authuser[]; /* added. _H */

extern char proctitle[];

extern char *globerr;

extern int usedefault;

extern int transflag;

extern char tmpline[];

extern int data;

extern int errno;

extern char *home;

off_t restart_point;

int yyerrorcalled;

extern char *strunames[];

extern char *typenames[];

extern char *modenames[];

extern char *formnames[];

extern int restricted_user; /* global flag indicating if user is restricted to home directory */

#ifdef TRANSFER_COUNT

extern off_t data_count_total;

extern off_t byte_count_total;

extern off_t byte_count_in;

extern int file_count_total;

extern int xfer_count_total;

#endif

extern int retrieve_is_data;

#ifdef VIRTUAL

extern int virtual_mode;

extern int virtual_ftpaccess;

extern char virtual_email[];

#endif

#ifdef IGNORE_NOOP

static int alarm_running = 0;

#endif

static unsigned short cliport = 0;

static struct in_addr cliaddr;

static int cmd_type;

static int cmd_form;

static int cmd_bytesz;

char cbuf[16 * BUFSIZ];

char *fromname;

#ifndef L_FORMAT /* Autoconf detects this... */

#if (defined(BSD) && (BSD >= 199103)) && !defined(LONGOFF_T)

#define L_FORMAT "qd"

#else

#ifdef _AIX42

#define L_FORMAT "lld"

#else

#ifdef SOLARIS_2

#define L_FORMAT "ld"

#else

#define L_FORMAT "d"

#endif

#endif

#endif

#endif

#ifdef INET6

extern int epsv_all;

int lport_error;

#endif

struct tab {

char *name;

short token;

short state;

short implemented; /* 1 if command is implemented */

char *help;

};

extern struct tab cmdtab[];

extern struct tab sitetab[];

static void toolong(int);

void help(struct tab *ctab, char *s);

struct tab *lookup(register struct tab *p, char *cmd);

int yylex(void);

static char *nullstr = "(null)";

#define CHECKNULL(p) ((p) ? (p) : nullstr)

extern int pasv_allowed(const char *remoteaddr);

extern int port_allowed(const char *remoteaddr);

%}

%token

A B C E F I

L N P R S T

SP CRLF COMMA STRING NUMBER

USER PASS ACCT REIN QUIT PORT

PASV TYPE STRU MODE RETR STOR

APPE MLFL MAIL MSND MSOM MSAM

MRSQ MRCP ALLO REST RNFR RNTO

ABOR DELE CWD LIST NLST SITE

STAT HELP NOOP MKD RMD PWD

CDUP STOU SMNT SYST SIZE MDTM

EPRT EPSV LPRT LPSV

PROT PBSZ AUTH ADAT CCC

UMASK IDLE CHMOD GROUP GPASS NEWER

MINFO INDEX EXEC ALIAS CDPATH GROUPS

CHECKMETHOD CHECKSUM

LEXERR

%union {

char *String;

int Number;

}

%type <String> STRING password pathname pathstring username method

%type <Number> NUMBER byte_size check_login form_code

%type <Number> struct_code mode_code octal_number

%type <Number> prot_code

%start cmd_list

%%

cmd_list: /* empty */

| cmd_list cmd

= {

if (fromname) {

free(fromname);

fromname = NULL;

}

restart_point = 0;

}

| cmd_list rcmd

;

cmd: USER SP username CRLF

= {

user($3);

if (log_commands)

syslog(LOG_INFO, "USER %s", $3);

free($3);

}

| PASS SP password CRLF

= {

if (log_commands)

if (anonymous)

syslog(LOG_INFO, "PASS %s", $3);

else

syslog(LOG_INFO, "PASS password");

pass($3);

free($3);

}

| PORT check_login SP host_port CRLF

= {

if (log_commands)

syslog(LOG_INFO, "PORT");

if ($2) {

#ifndef DISABLE_PORT

#ifdef INET6

if (epsv_all) {

reply(501, "PORT not allowed after EPSV ALL");

goto prt_done;

}

#endif

if (((sock_cmp_inaddr(&his_addr, cliaddr) == 0)

|| port_allowed(inet_ntoa(cliaddr)))

&& (ntohs(cliport) >= IPPORT_RESERVED)) {

usedefault = 0;

if (pdata >= 0) {

(void) close(pdata);

pdata = -1;

}

SET_SOCK_FAMILY(data_dest, SOCK_FAMILY(his_addr));

SET_SOCK_PORT(data_dest, cliport);

SET_SOCK_ADDR4(data_dest, cliaddr);

reply(200, "PORT command successful.");

}

else {

#endif /* DISABLE_PORT */

reply(502, "Illegal PORT Command");

prt_done:

usedefault = 1;

syslog(LOG_WARNING, "refused PORT %s,%d from %s",

inet_ntoa(cliaddr), ntohs(cliport), remoteident);

#ifndef DISABLE_PORT

}

#endif

}

}

| EPRT check_login SP STRING CRLF

= {

#ifdef INET6

if (log_commands)

syslog(LOG_INFO, "EPRT");

if ($2 && $4 != NULL) {

#ifndef DISABLE_PORT

char d, fmt[32], addr[INET6_ADDRSTRLEN + 1];

int proto;

unsigned short port;

if (epsv_all) {

reply(501, "EPRT not allowed after EPSV ALL");

goto eprt_done;

}

d = *((char *)$4);

if ((d < 33) || (d > 126)) {

reply(501, "Bad delimiter '%c' (%d).", d, d);

goto eprt_done;

}

if (d == '%')

(void) snprintf(fmt, sizeof(fmt),

"%%%1$c%%d%%%1$c%%%2$d[^%%%1$c]%%%1$c%%hu%%%1$c",

d, INET6_ADDRSTRLEN);

else

(void) snprintf(fmt, sizeof(fmt),

"%1$c%%d%1$c%%%2$d[^%1$c]%1$c%%hu%1$c",

d, INET6_ADDRSTRLEN);

if (sscanf((const char *)$4, fmt, &proto, addr, &port) != 3) {

reply(501, "EPRT bad format.");

goto eprt_done;

}

port = htons(port);

switch (proto) {

case 1:

SET_SOCK_FAMILY(data_dest, AF_INET);

break;

case 2:

memset(&data_dest, 0, sizeof(struct sockaddr_in6));

SET_SOCK_FAMILY(data_dest, AF_INET6);

break;

default:

reply(522, "Network protocol not supported, use (1,2)");

goto eprt_done;

}

if (inet_pton(SOCK_FAMILY(data_dest), addr, SOCK_ADDR(data_dest))

!= 1) {

reply(501, "Bad address %s.", addr);

goto eprt_done;

}

if (((sock_cmp_addr(&his_addr, &data_dest) == 0)

|| port_allowed(inet_stop(&data_dest)))

&& (ntohs(port) >= IPPORT_RESERVED)) {

usedefault = 0;

if (pdata >= 0) {

(void) close(pdata);

pdata = -1;

}

SET_SOCK_PORT(data_dest, port);

SET_SOCK_SCOPE(data_dest, his_addr);

reply(200, "EPRT command successful.");

}

else {

#endif /* DISABLE_PORT */

reply(502, "Illegal EPRT Command");

eprt_done:

usedefault = 1;

syslog(LOG_WARNING, "refused EPRT %s from %s",

$4, remoteident);

#ifndef DISABLE_PORT

}

#endif

}

if ($4 != NULL)

free($4);

#endif /* INET6 */

}

| LPRT check_login SP host_lport CRLF

= {

#ifdef INET6

if (log_commands)

syslog(LOG_INFO, "LPRT");

if ($2) {

#ifndef DISABLE_PORT

if (lport_error)

goto lprt_done;

if (((sock_cmp_addr(&his_addr, &data_dest) == 0)

|| port_allowed(inet_stop(&data_dest)))

&& (SOCK_PORT(data_dest) >= IPPORT_RESERVED)) {

usedefault = 0;

if (pdata >= 0) {

(void) close(pdata);

pdata = -1;

}

SET_SOCK_SCOPE(data_dest, his_addr);

reply(200, "LPRT command successful.");

}

else {

#endif /* DISABLE_PORT */

reply(502, "Illegal LPRT Command");

lprt_done:

usedefault = 1;

syslog(LOG_WARNING, "refused LPRT from %s", remoteident);

#ifndef DISABLE_PORT

}

#endif

}

#endif /* INET6 */

}

| PASV check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "PASV");

if ($2)

#if (defined (DISABLE_PORT) || !defined (DISABLE_PASV))

#ifdef INET6

if (epsv_all)

reply(501, "PASV not allowed after EPSV ALL");

else

#endif

passive(TYPE_PASV, 0);

#else

reply(502, "Illegal PASV Command");

#endif

}

| EPSV check_login CRLF

= {

#ifdef INET6

if (log_commands)

syslog(LOG_INFO, "EPSV");

if ($2)

#if (defined (DISABLE_PORT) || !defined (DISABLE_PASV))

passive(TYPE_EPSV, 0);

#else

reply(502, "Illegal EPSV Command");

#endif

#endif /* INET6 */

}

| EPSV check_login SP STRING CRLF

= {

#ifdef INET6

if (log_commands)

syslog(LOG_INFO, "EPSV");

if ($2 && $4 != NULL)

#if (defined (DISABLE_PORT) || !defined (DISABLE_PASV))

if (strcasecmp((const char *)$4, "ALL") == 0) {

epsv_all = 1;

reply(200, "EPSV ALL command successful.");

}

else {

int af;

char *endp;

af = strtoul((char *)$4, &endp, 0);

if (*endp)

reply(501, "'EPSV %s':" "command not understood.", $4);

else {

/* Not allowed to specify address family 0 */

if (af == 0)

af = -1;

passive(TYPE_EPSV, af);

}

}

#else

reply(502, "Illegal EPSV Command");

#endif

if ($4 != NULL)

free($4);

#endif /* INET6 */

}

| LPSV check_login CRLF

= {

#ifdef INET6

if (log_commands)

syslog(LOG_INFO, "LPSV");

if ($2)

#if (defined (DISABLE_PORT) || !defined (DISABLE_PASV))

if (epsv_all)

reply(501, "LPSV not allowed after EPSV ALL");

else

passive(TYPE_LPSV, 0);

#else

reply(502, "Illegal LPSV Command");

#endif

#endif /* INET6 */

}

| TYPE check_login SP type_code CRLF

= {

if (log_commands)

syslog(LOG_INFO, "TYPE %s", typenames[cmd_type]);

if ($2)

switch (cmd_type) {

case TYPE_A:

if (cmd_form == FORM_N) {

reply(200, "Type set to A.");

type = cmd_type;

form = cmd_form;

}

else

reply(504, "Form must be N.");

break;

case TYPE_E:

reply(504, "Type E not implemented.");

break;

case TYPE_I:

reply(200, "Type set to I.");

type = cmd_type;

break;

case TYPE_L:

#if NBBY == 8

if (cmd_bytesz == 8) {

reply(200,

"Type set to L (byte size 8).");

type = cmd_type;

}

else

reply(504, "Byte size must be 8.");

#else /* NBBY == 8 */

#error UNIMPLEMENTED for NBBY != 8

#endif /* NBBY == 8 */

}

}

| STRU check_login SP struct_code CRLF

= {

if (log_commands)

syslog(LOG_INFO, "STRU %s", strunames[$4]);

if ($2)

switch ($4) {

case STRU_F:

reply(200, "STRU F ok.");

break;

default:

reply(504, "Unimplemented STRU type.");

}

}

| MODE check_login SP mode_code CRLF

= {

if (log_commands)

syslog(LOG_INFO, "MODE %s", modenames[$4]);

if ($2)

switch ($4) {

case MODE_S:

reply(200, "MODE S ok.");

break;

default:

reply(502, "Unimplemented MODE type.");

}

}

| ALLO check_login SP NUMBER CRLF

= {

if (log_commands)

syslog(LOG_INFO, "ALLO %d", $4);

if ($2)

reply(202, "ALLO command ignored.");

}

| ALLO check_login SP NUMBER SP R SP NUMBER CRLF

= {

if (log_commands)

syslog(LOG_INFO, "ALLO %d R %d", $4, $8);

if ($2)

reply(202, "ALLO command ignored.");

}

| RETR check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "RETR %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4)) {

retrieve_is_data = 1;

retrieve((char *) NULL, $4);

}

if ($4 != NULL)

free($4);

}

| STOR check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "STOR %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

store($4, "w", 0);

if ($4 != NULL)

free($4);

}

| APPE check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "APPE %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

store($4, "a", 0);

if ($4 != NULL)

free($4);

}

| NLST check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "NLST");

if ($2 && !restrict_check("."))

send_file_list("");

}

| NLST check_login SP STRING CRLF

= {

if (log_commands)

syslog(LOG_INFO, "NLST %s", $4);

if ($2 && $4 && !restrict_check($4))

send_file_list($4);

if ($4 != NULL)

free($4);

}

| LIST check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "LIST");

if ($2 && !restrict_check(".")) {

retrieve_is_data = 0;

#ifndef INTERNAL_LS

if (anonymous && dolreplies)

retrieve(ls_long, "");

else

retrieve(ls_short, "");

#else

ls(NULL, 0);

#endif

}

}

| LIST check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "LIST %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_list_check($4)) {

retrieve_is_data = 0;

#ifndef INTERNAL_LS

if (anonymous && dolreplies)

retrieve(ls_long, $4);

else

retrieve(ls_short, $4);

#else

ls($4, 0);

#endif

}

if ($4 != NULL)

free($4);

}

| STAT check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "STAT %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

statfilecmd($4);

if ($4 != NULL)

free($4);

}

| STAT check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "STAT");

if ($2)

statcmd();

}

| DELE check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "DELE %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

delete($4);

if ($4 != NULL)

free($4);

}

| RNTO check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "RNTO %s", CHECKNULL($4));

if ($2 && $4 && !restrict_check($4)) {

if (fromname) {

renamecmd(fromname, $4);

free(fromname);

fromname = NULL;

}

else {

reply(503, "Bad sequence of commands.");

}

}

if ($4)

free($4);

}

| ABOR check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "ABOR");

if ($2)

reply(225, "ABOR command successful.");

}

| CWD check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "CWD");

if ($2 && !restrict_check(home))

cwd(home);

}

| CWD check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "CWD %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

cwd($4);

if ($4 != NULL)

free($4);

}

| HELP check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "HELP");

if ($2)

help(cmdtab, (char *) NULL);

}

| HELP check_login SP STRING CRLF

= {

register char *cp = (char *) $4;

if (log_commands)

syslog(LOG_INFO, "HELP %s", $4);

if ($2)

if (strncasecmp(cp, "SITE", 4) == 0) {

cp = (char *) $4 + 4;

if (*cp == ' ')

cp++;

if (*cp)

help(sitetab, cp);

else

help(sitetab, (char *) NULL);

}

else

help(cmdtab, $4);

if ($4 != NULL)

free($4);

}

| NOOP check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "NOOP");

if ($2)

reply(200, "NOOP command successful.");

}

| MKD check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "MKD %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

makedir($4);

if ($4 != NULL)

free($4);

}

| RMD check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "RMD %s", CHECKNULL($4));

if ($2 && $4 != NULL && !restrict_check($4))

removedir($4);

if ($4 != NULL)

free($4);

}

| PWD check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "PWD");

if ($2)

pwd();

}

| CDUP check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "CDUP");

if ($2)

if (!test_restriction(".."))

cwd("..");

else

ack("CWD");

}

| SITE check_login SP HELP CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE HELP");

if ($2)

help(sitetab, (char *) NULL);

}

| SITE check_login SP HELP SP STRING CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE HELP %s", $6);

if ($2)

help(sitetab, $6);

if ($6 != NULL)

free($6);

}

| SITE check_login SP UMASK CRLF

= {

mode_t oldmask;

if (log_commands)

syslog(LOG_INFO, "SITE UMASK");

if ($2) {

oldmask = umask(0);

(void) umask(oldmask);

reply(200, "Current UMASK is %03o", oldmask);

}

}

| SITE check_login SP UMASK SP octal_number CRLF

= {

mode_t oldmask;

struct aclmember *entry = NULL;

int ok = 1;

if (log_commands)

syslog(LOG_INFO, "SITE UMASK %03o", $6);

if ($2) {

/* check for umask permission */

while (getaclentry("umask", &entry) && ARG0 && ARG1 != NULL) {

if (type_match(ARG1))

if (*ARG0 == 'n')

ok = 0;

}

if (ok && !restricted_user) {

if (($6 < 0) || ($6 > 0777)) {

reply(501, "Bad UMASK value");

}

else {

oldmask = umask((mode_t) $6);

reply(200, "UMASK set to %03o (was %03o)", $6, oldmask);

}

}

else

reply(553, "Permission denied on server. (umask)");

}

}

| SITE check_login SP CHMOD SP octal_number SP pathname CRLF

= {

struct aclmember *entry = NULL;

int ok = (anonymous ? 0 : 1);

if (log_commands)

syslog(LOG_INFO, "SITE CHMOD %03o %s", $6, CHECKNULL($8));

if ($2 && $8) {

/* check for chmod permission */

while (getaclentry("chmod", &entry) && ARG0 && ARG1 != NULL) {

if (type_match(ARG1))

if (anonymous) {

if (*ARG0 == 'y')

ok = 1;

}

else if (*ARG0 == 'n')

ok = 0;

}

if (ok) {

#ifdef UNRESTRICTED_CHMOD

if (chmod($8, (mode_t) $6) < 0)

#else

if (($6 < 0) || ($6 > 0777))

reply(501,

"CHMOD: Mode value must be between 0 and 0777");

else if (chmod($8, (mode_t) $6) < 0)

#endif

perror_reply(550, $8);

else {

char path[MAXPATHLEN];

wu_realpath($8, path, chroot_path);

if (log_security)

if (anonymous) {

syslog(LOG_NOTICE, "%s of %s changed permissions for %s", guestpw, remoteident, path);

}

else {

syslog(LOG_NOTICE, "%s of %s changed permissions for %s", pw->pw_name,

remoteident, path);

}

reply(200, "CHMOD command successful.");

}

}

else

reply(553, "Permission denied on server. (chmod)");

}

if ($8 != NULL)

free($8);

}

| SITE check_login SP IDLE CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE IDLE");

if ($2)

reply(200,

"Current IDLE time limit is %d seconds; max %d",

timeout_idle, timeout_maxidle);

}

| SITE check_login SP IDLE SP NUMBER CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE IDLE %d", $6);

if ($2)

if ($6 < 30 || $6 > timeout_maxidle) {

reply(501,

"Maximum IDLE time must be between 30 and %d seconds",

timeout_maxidle);

}

else {

timeout_idle = $6;

reply(200, "Maximum IDLE time set to %d seconds", timeout_idle);

}

}

| SITE check_login SP GROUP SP username CRLF

= {

#ifndef NO_PRIVATE

if (log_commands)

syslog(LOG_INFO, "SITE GROUP %s", $6);

if (!restricted_user && $2 && $6)

priv_group($6);

free($6);

#endif /* !NO_PRIVATE */

}

| SITE check_login SP GPASS SP password CRLF

= {

#ifndef NO_PRIVATE

if (log_commands)

syslog(LOG_INFO, "SITE GPASS password");

if (!restricted_user && $2 && $6)

priv_gpass($6);

free($6);

#endif /* !NO_PRIVATE */

}

| SITE check_login SP GPASS CRLF

= {

#ifndef NO_PRIVATE

if (log_commands)

syslog(LOG_INFO, "SITE GPASS");

if (!restricted_user && $2)

priv_gpass(NULL);

#endif /* !NO_PRIVATE */

}

| SITE check_login SP NEWER SP STRING CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE NEWER %s", $6);

#ifdef SITE_NEWER

if ($2 && $6 && !restrict_check("."))

newer($6, ".", 0);

#else

reply(502, "Command no longer honored by this server");

#endif

free($6);

}

| SITE check_login SP NEWER SP STRING SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE NEWER %s %s", $6,

CHECKNULL($8));

#ifdef SITE_NEWER

if ($2 && $6 && $8 && !restrict_check($8))

newer($6, $8, 0);

#else

reply(502, "Command no longer honored by this server");

#endif

free($6);

if ($8)

free($8);

}

| SITE check_login SP MINFO SP STRING CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE MINFO %s", $6);

#ifdef SITE_NEWER

if ($2 && $6 && !restrict_check("."))

newer($6, ".", 1);

#else

reply(502, "Command no longer honored by this server");

#endif

free($6);

}

| SITE check_login SP MINFO SP STRING SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE MINFO %s %s", $6,

CHECKNULL($8));

#ifdef SITE_NEWER

if ($2 && $6 && $8 && !restrict_check($8))

newer($6, $8, 1);

#else

reply(502, "Command no longer honored by this server");

#endif

free($6);

if ($8)

free($8);

}

| SITE check_login SP INDEX SP STRING CRLF

= {

/* this is just for backward compatibility since we

if (!restricted_user && $2 != 0 && $6 != NULL) {

char buf[MAXPATHLEN];

if (strlen($6) + 7 <= sizeof(buf)) {

(void) snprintf(buf, sizeof(buf), "index %s", (char *) $6);

(void) site_exec(buf);

}

}

if ($6 != NULL)

free($6);

}

| SITE check_login SP EXEC SP STRING CRLF

= {

if (!restricted_user && $2 != 0 && $6 != NULL) {

(void) site_exec((char *) $6);

}

if ($6 != NULL)

free($6);

}

| STOU check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "STOU %s", CHECKNULL($4));

if ($2 && $4 && !restrict_check($4))

store($4, "w", 1);

if ($4 != NULL)

free($4);

}

| SYST check_login CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SYST");

if ($2)

#ifdef BSD

reply(215, "UNIX Type: L%d Version: BSD-%d", NBBY, BSD);

#elif defined(SOLARIS_2)

reply(215, "UNIX Type: L%d Version: SUNOS", NBBY);

#elif defined(unix) || defined(__unix__)

reply(215, "UNIX Type: L%d", NBBY);

#else

reply(215, "UNKNOWN Type: L%d", NBBY);

#endif /* BSD */

}

/*

| SIZE check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SIZE %s", CHECKNULL($4));

if ($2 && $4 && !restrict_check($4)) {

sizecmd($4);

}

if ($4 != NULL)

free($4);

}

/*

| MDTM check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "MDTM %s", CHECKNULL($4));

if ($2 && $4 && !restrict_check($4)) {

struct stat stbuf;

if (stat($4, &stbuf) < 0)

perror_reply(550, $4);

else if ((stbuf.st_mode & S_IFMT) != S_IFREG) {

reply(550, "%s: not a plain file.",

$4);

}

else {

register struct tm *t;

t = gmtime(&stbuf.st_mtime);

reply(213,

"%04d%02d%02d%02d%02d%02d",

t->tm_year + 1900, t->tm_mon + 1, t->tm_mday,

t->tm_hour, t->tm_min, t->tm_sec);

}

}

if ($4 != NULL)

free($4);

}

| QUIT CRLF

= {

if (log_commands)

syslog(LOG_INFO, "QUIT");

#ifdef TRANSFER_COUNT

if (logged_in) {

lreply(221, "You have transferred %" L_FORMAT " bytes in %d files.", data_count_total, file_count_total);

lreply(221, "Total traffic for this session was %" L_FORMAT " bytes in %d transfers.", byte_count_total, xfer_count_total);

lreply(221, "Thank you for using the FTP service on %s.", hostname);

}

#endif /* TRANSFER_COUNT */

reply(221, "Goodbye.");

dologout(0);

}

| error CRLF

= {

yyerrok;

}

;

rcmd: RNFR check_login SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "RNFR %s", CHECKNULL($4));

if ($2)

restart_point = 0;

if (fromname) {

free(fromname);

fromname = NULL;

}

if ($2 && $4 && !restrict_check($4)) {

fromname = renamefrom($4);

}

if (fromname == NULL && $4)

free($4);

}

| REST check_login SP STRING CRLF

= {

if (log_commands)

syslog(LOG_INFO, "REST %s", CHECKNULL($4));

if ($2 && $4 != NULL) {

char *endp;

if (fromname) {

free(fromname);

fromname = NULL;

}

errno = 0;

#if _FILE_OFFSET_BITS == 64

restart_point = strtoll($4, &endp, 10);

#else

restart_point = strtol($4, &endp, 10);

#endif

if ((errno == 0) && (restart_point >= 0) && (*endp == '\0')) {

reply(350, "Restarting at %" L_FORMAT

". Send STORE or RETRIEVE to initiate transfer.",

restart_point);

}

else {

restart_point = 0;

reply(501, "Bad value for REST: %s", $4);

}

}

if ($4 != NULL)

free($4);

}

| SITE check_login SP ALIAS CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE ALIAS");

if ($2)

alias((char *) NULL);

}

| SITE check_login SP ALIAS SP STRING CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE ALIAS %s", $6);

if ($2)

alias($6);

if ($6 != NULL)

free($6);

}

| SITE check_login SP GROUPS CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE GROUPS");

if ($2)

print_groups();

}

| SITE check_login SP CDPATH CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE CDPATH");

if ($2)

cdpath();

}

| SITE check_login SP CHECKMETHOD SP method CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE CHECKMETHOD %s", CHECKNULL($6));

if (($2) && ($6 != NULL))

SetCheckMethod($6);

if ($6 != NULL)

free($6);

}

| SITE check_login SP CHECKMETHOD CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE CHECKMETHOD");

if ($2)

ShowCheckMethod();

}

| SITE check_login SP CHECKSUM SP pathname CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE CHECKSUM %s", CHECKNULL($6));

if (($2) && ($6 != NULL) && (!restrict_check($6)))

CheckSum($6);

if ($6 != NULL)

free($6);

}

| SITE check_login SP CHECKSUM CRLF

= {

if (log_commands)

syslog(LOG_INFO, "SITE CHECKSUM");

if ($2)

CheckSumLastFile();

}

| PBSZ SP STRING CRLF

= {

#if defined(USE_TLS) || defined(USE_GSS)

if (log_commands)

syslog(LOG_INFO, "PBSZ %s", $3);

{

int sz = 0;

#if defined(USE_GSS)

sz = gss_setpbsz((char *)$3);

#else

reply(200, "PBSZ=%d", sz);

#endif /* defined(USE_GSS) */

pbsz_command_issued = 1;

}

#endif /* defined(USE_TLS) || defined(USE_GSS) */

if ($3 != NULL)

free((char *)$3);

}

| AUTH SP STRING CRLF

= {

#if defined(USE_TLS) || defined(USE_GSS)

register char *cp = (char *) $3;

if (log_commands)

syslog(LOG_INFO, "AUTH %s", $3);

/* convert to UPPER case as per RFC 2228 */

while (*cp) {

*cp = toupper(*cp);

cp++;

}

#if defined(USE_GSS)

if (!strcmp((char *) $3, "GSSAPI")) {

if (cur_auth_type != NULL) {

reply(534, "Authentication type already set to %s",

cur_auth_type);

syslog(LOG_ERR, "Rejecting duplicate AUTH command");

} else {

cur_auth_type = strdup((char *)$3);

reply(334, "Using AUTH type %s; ADAT must follow",

cur_auth_type);

}

} else

#endif /* defined(USE_GSS) */

{

/*

if (cur_auth_type != NULL) {

free(cur_auth_type);

cur_auth_type = NULL;

}

reply(504,"AUTH %s not supported.", $3);

}

#endif /* !(defined(USE_TLS)) && !defined(USE_GSS) */

if ($3 != NULL)

free((char *)$3);

}

| PROT SP prot_code CRLF

= {

#if defined(USE_TLS) || defined(USE_GSS)

if (log_commands)

syslog(LOG_INFO, "PROT %s", protnames[$3]);

{

if (!pbsz_command_issued) {

reply(503, "PROT command not valid before PBSZ.");

} else {

switch ($3) {

case PROT_P:

reply(200, "PROT P ok.");

#if defined(USE_GSS)

gss_info.data_prot = PROT_P;

#endif /* defined(USE_GSS) */

break;

case PROT_C:

reply(200, "PROT C ok.");

#if defined(USE_GSS)

gss_info.data_prot = PROT_C;

#endif /* defined(USE_GSS) */

break;

case PROT_E:

reply(536, "PROT E unsupported");

break;

case PROT_S:

#if defined(USE_GSS)

reply(200, "PROT S ok.");

gss_info.data_prot = PROT_S;

#endif /* defined(USE_GSS) */

break;

default:

reply(504, "Invalid PROT type.");

}

#if defined(USE_GSS)

gss_adjust_buflen();

#endif /* defined(USE_GSS) */

}

}

#endif /* !(defined(USE_TLS) && !defined(USE_GSS)) */

}

| ADAT SP STRING CRLF

= {

#if defined(USE_GSS)

if (log_commands)

syslog(LOG_INFO, "ADAT %s", $3);

if (cur_auth_type == NULL || strcmp(cur_auth_type, "GSSAPI")) {

reply(503, "Must identify AUTH GSSAPI before sending ADAT");

} else

(void) gss_adat((char *)$3);

#endif

if ($3 != NULL)

free((char *)$3);

}

| CCC CRLF

= {

#if defined(USE_GSS)

if (log_commands)

syslog(LOG_INFO, "CCC");

ccc();

#endif /* defined(USE_GSS) */

}

;

username: STRING

;

password: /* empty */

= {

$$ = (char *) malloc(1);

$$[0] = '\0';

}

| STRING

;

byte_size: NUMBER

;

host_port: NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER

= {

register char *a, *p;

a = (char *) &cliaddr;

a[0] = $1;

a[1] = $3;

a[2] = $5;

a[3] = $7;

p = (char *) &cliport;

p[0] = $9;

p[1] = $11;

}

;

host_lport: NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER

= {

#ifdef INET6

char *a, *p;

struct sockaddr_in6 *data_dest_sin6;

lport_error = 0;

if (epsv_all) {

reply(501, "LPRT not allowed after EPSV ALL");

lport_error = 1;

goto lport_done6;

}

if ($1 != 6) {

reply(521, "Supported address families are (4, 6)");

lport_error = 1;

goto lport_done6;

}

if (($3 != 16) || ($37 != 2)) {

reply(501, "Bad length.");

lport_error = 1;

goto lport_done6;

}

memset(&data_dest, 0, sizeof(struct sockaddr_in6));

data_dest_sin6 = (struct sockaddr_in6 *) &data_dest;

data_dest_sin6->sin6_family = AF_INET6;

a = (char *)&data_dest_sin6->sin6_addr;

a[0] = $5; a[1] = $7; a[2] = $9; a[3] = $11;

a[4] = $13; a[5] = $15; a[6] = $17; a[7] = $19;

a[8] = $21; a[9] = $23; a[10] = $25; a[11] = $27;

a[12] = $29; a[13] = $31; a[14] = $33; a[15] = $35;

p = (char *)&data_dest_sin6->sin6_port;

p[0] = $39; p[1] = $41;

lport_done6:;

#endif /* INET6 */

}

| NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER COMMA NUMBER COMMA

NUMBER COMMA NUMBER COMMA NUMBER

= {

#ifdef INET6

char *a, *p;

struct sockaddr_in *data_dest_sin;

lport_error = 0;

if (epsv_all) {

reply(501, "LPRT not allowed after EPSV ALL");

lport_error = 1;

goto lport_done4;

}

if ($1 != 4) {

reply(521, "Supported address families are (4, 6)");

lport_error = 1;

goto lport_done4;

}

if (($3 != 4) || ($13 != 2)) {

reply(501, "Bad length.");

lport_error = 1;

goto lport_done4;

}

data_dest_sin = (struct sockaddr_in *) &data_dest;

data_dest_sin->sin_family = AF_INET;

a = (char *)&data_dest_sin->sin_addr;

a[0] = $5; a[1] = $7; a[2] = $9; a[3] = $11;

p = (char *)&data_dest_sin->sin_port;

p[0] = $15; p[1] = $17;

lport_done4:;

#endif /* INET6 */

}

;

form_code: N

= {

$$ = FORM_N;

}

| T

= {

$$ = FORM_T;

}

| C

= {

$$ = FORM_C;

}

;

type_code: A

= {

cmd_type = TYPE_A;

cmd_form = FORM_N;

}

| A SP form_code

= {

cmd_type = TYPE_A;

cmd_form = $3;

}

| E

= {

cmd_type = TYPE_E;

cmd_form = FORM_N;

}

| E SP form_code

= {

cmd_type = TYPE_E;

cmd_form = $3;

}

| I

= {

cmd_type = TYPE_I;

}

| L

= {

cmd_type = TYPE_L;

cmd_bytesz = NBBY;

}

| L SP byte_size

= {

cmd_type = TYPE_L;

cmd_bytesz = $3;

}

/* this is for a bug in the BBN ftp */

| L byte_size

= {

cmd_type = TYPE_L;

cmd_bytesz = $2;

}

;

prot_code: C

= {

#if defined(USE_GSS)

$$ = PROT_C;

#endif

}

| P

= {

#if defined(USE_GSS)

$$ = PROT_P;

#endif

}

| S

= {

#if defined(USE_GSS)

$$ = PROT_S;

#endif

}

| E

= {

#if defined(USE_GSS)

$$ = PROT_E;

#endif

}

;

struct_code: F

= {

$$ = STRU_F;

}

| R

= {

$$ = STRU_R;

}

| P

= {

$$ = STRU_P;

}

;

mode_code: S

= {

$$ = MODE_S;

}

| B

= {

$$ = MODE_B;

}

| C

= {

$$ = MODE_C;

}

;

pathname: pathstring

= {

/*

if (restricted_user && logged_in && $1 && strncmp($1, "/", 1) == 0) {

/*

size_t len = strlen($1) + 2;

char **globlist;

char *t = calloc(len, sizeof(char));

if (t == NULL) {

errno = EAGAIN;

perror_reply(550, $1);

$$ = NULL;

}

else {

t[0] = '~';

t[1] = '\0';

if (strncmp($1, "/../", 4) == 0)

(void) strlcat(t, $1 + 3, len);

else if (strcmp($1, "/..") != 0)

(void) strlcat(t, $1, len);

globlist = ftpglob(t);

if (globerr) {

reply(550, "%s", globerr);

$$ = NULL;

if (globlist) {

blkfree(globlist);

free((char *) globlist);

}

}

else if (globlist && *globlist) {

$$ = *globlist;

blkfree(&globlist[1]);

free((char *) globlist);

}

else {

if (globlist) {

blkfree(globlist);

free((char *) globlist);

}

errno = ENOENT;

perror_reply(550, $1);

$$ = NULL;

}

free(t);

}

free($1);

}

else if (logged_in && $1 && strncmp($1, "~", 1) == 0) {

char **globlist;

globlist = ftpglob($1);

if (globerr) {

reply(550, "%s", globerr);

$$ = NULL;

if (globlist) {

blkfree(globlist);

free((char *) globlist);

}

}

else if (globlist && *globlist) {

$$ = *globlist;

blkfree(&globlist[1]);

free((char *) globlist);

}

else {

if (globlist) {

blkfree(globlist);

free((char *) globlist);

}

errno = ENOENT;

perror_reply(550, $1);

$$ = NULL;

}

free($1);

}

else

$$ = $1;

}

;

pathstring: STRING

;

method: STRING

;

octal_number: NUMBER

= {

register int ret, dec, multby, digit;

/*

dec = $1;

multby = 1;

ret = 0;

while (dec) {

digit = dec % 10;

if (digit > 7) {

ret = -1;

break;

}

ret += digit * multby;

multby *= 8;

dec /= 10;

}

$$ = ret;

}

;

check_login: /* empty */

= {

if (logged_in)

$$ = 1;

else {

if (log_commands)

syslog(LOG_INFO, "cmd failure - not logged in");

reply(530, "Please login with USER and PASS.");

$$ = 0;

yyerrorcalled = 1;

}

}

;

%%

extern jmp_buf errcatch;

#define CMD 0 /* beginning of command */

#define ARGS 1 /* expect miscellaneous arguments */

#define STR1 2 /* expect SP followed by STRING */

#define STR2 3 /* expect STRING */

#define OSTR 4 /* optional SP then STRING */

#define ZSTR1 5 /* SP then optional STRING */

#define ZSTR2 6 /* optional STRING after SP */

#define SITECMD 7 /* SITE command */

#define NSTR 8 /* Number followed by a string */

#define STR3 9 /* expect STRING followed by optional SP then STRING */

struct tab cmdtab[] =

{ /* In order defined in RFC 765 */

{"USER", USER, STR1, 1, "<sp> username"},

{"PASS", PASS, ZSTR1, 1, "<sp> password"},

{"ACCT", ACCT, STR1, 0, "(specify account)"},

{"SMNT", SMNT, ARGS, 0, "(structure mount)"},

{"REIN", REIN, ARGS, 0, "(reinitialize server state)"},

{"QUIT", QUIT, ARGS, 1, "(terminate service)",},

{"PORT", PORT, ARGS, 1, "<sp> h1, h2, h3, h4, p1, p2"},

{"PASV", PASV, ARGS, 1, "(set server in passive mode)"},

#ifdef INET6

{"EPRT", EPRT, STR1, 1, "<sp> |af|addr|port|"},

{"EPSV", EPSV, OSTR, 1, "[<sp> af|ALL]"},

{"LPRT", LPRT, ARGS, 1, "<sp> af, hal, h1, h2, ..., pal, p1, p2, ..."},

{"LPSV", LPSV, ARGS, 1, "(set server in long passive mode)"},

#endif

{"TYPE", TYPE, ARGS, 1, "<sp> [ A | E | I | L ]"},

{"STRU", STRU, ARGS, 1, "(specify file structure)"},

{"MODE", MODE, ARGS, 1, "(specify transfer mode)"},

{"RETR", RETR, STR1, 1, "<sp> file-name"},

{"STOR", STOR, STR1, 1, "<sp> file-name"},

{"APPE", APPE, STR1, 1, "<sp> file-name"},

{"MLFL", MLFL, OSTR, 0, "(mail file)"},

{"MAIL", MAIL, OSTR, 0, "(mail to user)"},

{"MSND", MSND, OSTR, 0, "(mail send to terminal)"},

{"MSOM", MSOM, OSTR, 0, "(mail send to terminal or mailbox)"},

{"MSAM", MSAM, OSTR, 0, "(mail send to terminal and mailbox)"},

{"MRSQ", MRSQ, OSTR, 0, "(mail recipient scheme question)"},

{"MRCP", MRCP, STR1, 0, "(mail recipient)"},

{"ALLO", ALLO, ARGS, 1, "allocate storage (vacuously)"},

{"REST", REST, STR1, 1, "(restart command)"},

{"RNFR", RNFR, STR1, 1, "<sp> file-name"},

{"RNTO", RNTO, STR1, 1, "<sp> file-name"},

{"ABOR", ABOR, ARGS, 1, "(abort operation)"},

{"DELE", DELE, STR1, 1, "<sp> file-name"},

{"CWD", CWD, OSTR, 1, "[ <sp> directory-name ]"},

{"XCWD", CWD, OSTR, 1, "[ <sp> directory-name ]"},

{"LIST", LIST, OSTR, 1, "[ <sp> path-name ]"},

{"NLST", NLST, OSTR, 1, "[ <sp> path-name ]"},

{"SITE", SITE, SITECMD, 1, "site-cmd [ <sp> arguments ]"},

{"SYST", SYST, ARGS, 1, "(get type of operating system)"},

{"STAT", STAT, OSTR, 1, "[ <sp> path-name ]"},

{"HELP", HELP, OSTR, 1, "[ <sp> <string> ]"},

{"NOOP", NOOP, ARGS, 1, ""},

{"MKD", MKD, STR1, 1, "<sp> path-name"},

{"XMKD", MKD, STR1, 1, "<sp> path-name"},

{"RMD", RMD, STR1, 1, "<sp> path-name"},

{"XRMD", RMD, STR1, 1, "<sp> path-name"},

{"PWD", PWD, ARGS, 1, "(return current directory)"},

{"XPWD", PWD, ARGS, 1, "(return current directory)"},

{"CDUP", CDUP, ARGS, 1, "(change to parent directory)"},

{"XCUP", CDUP, ARGS, 1, "(change to parent directory)"},

{"STOU", STOU, STR1, 1, "<sp> file-name"},

{"SIZE", SIZE, OSTR, 1, "<sp> path-name"},

{"MDTM", MDTM, OSTR, 1, "<sp> path-name"},

#if defined(USE_TLS) || defined(USE_GSS)

{"PROT", PROT, ARGS, 1, "<sp> protection-level"},

{"PBSZ", PBSZ, STR1, 1, "<sp> protection-buffer-size"},

{"AUTH", AUTH, STR1, 1, "<sp> authentication-mechanism"},

{"ADAT", ADAT, STR1, 1, "<sp> authentication-data"},

#if defined(USE_GSS)

{"CCC", CCC, ARGS, 1, "(clear command channel)"},

#endif

#endif /* defined(USE_TLS) || defined(USE_GSS) */

{NULL, 0, 0, 0, 0}

};

struct tab sitetab[] =

{

{"UMASK", UMASK, ARGS, 1, "[ <sp> umask ]"},

{"IDLE", IDLE, ARGS, 1, "[ <sp> maximum-idle-time ]"},

{"CHMOD", CHMOD, NSTR, 1, "<sp> mode <sp> file-name"},

{"HELP", HELP, OSTR, 1, "[ <sp> <string> ]"},

{"GROUP", GROUP, STR1, 1, "<sp> access-group"},

{"GPASS", GPASS, OSTR, 1, "<sp> access-password"},

{"NEWER", NEWER, STR3, 1, "<sp> YYYYMMDDHHMMSS [ <sp> path-name ]"},

{"MINFO", MINFO, STR3, 1, "<sp> YYYYMMDDHHMMSS [ <sp> path-name ]"},

{"INDEX", INDEX, STR1, 1, "<sp> pattern"},

{"EXEC", EXEC, STR1, 1, "<sp> command [ <sp> arguments ]"},

{"ALIAS", ALIAS, OSTR, 1, "[ <sp> alias ] "},

{"CDPATH", CDPATH, OSTR, 1, "[ <sp> ] "},

{"GROUPS", GROUPS, OSTR, 1, "[ <sp> ] "},

{"CHECKMETHOD", CHECKMETHOD, OSTR, 1, "[ <sp> crc|md5 ]"},

{"CHECKSUM", CHECKSUM, OSTR, 1, "[ <sp> file-name ]"},

{NULL, 0, 0, 0, 0}

};

struct tab *lookup(register struct tab *p, char *cmd)

{

for (; p->name != NULL; p++)

if (strcmp(cmd, p->name) == 0)

return (p);

return (0);

}

#include <arpa/telnet.h>

char *wu_getline(char *s, int n, register FILE *iop)

{

register int c;

register char *cs;

char *passtxt = "PASS password\r\n";

cs = s;

for (c = 0; tmpline[c] != '\0' && --n > 0; ++c) {

*cs++ = tmpline[c];

if (tmpline[c] == '\n') {

*cs++ = '\0';

if (debug) {

if (strncasecmp(passtxt, s, 5) == 0)

syslog(LOG_DEBUG, "command: %s", passtxt);

else

syslog(LOG_DEBUG, "command: %s", s);

}

tmpline[0] = '\0';

return (s);

}

if (c == 0)

tmpline[0] = '\0';

}

retry:

while ((c = getc(iop)) != EOF) {

#ifdef TRANSFER_COUNT

byte_count_total++;

byte_count_in++;

#endif

c &= 0377;

if (c == IAC) {

if ((c = getc(iop)) != EOF) {

#ifdef TRANSFER_COUNT

byte_count_total++;

byte_count_in++;

#endif

c &= 0377;

switch (c) {

case WILL:

case WONT:

c = getc(iop);

#ifdef TRANSFER_COUNT

byte_count_total++;

byte_count_in++;

#endif

printf("%c%c%c", IAC, DONT, 0377 & c);

(void) fflush(stdout);

continue;

case DO:

case DONT:

c = getc(iop);

#ifdef TRANSFER_COUNT

byte_count_total++;

byte_count_in++;

#endif

printf("%c%c%c", IAC, WONT, 0377 & c);

(void) fflush(stdout);

continue;

case IAC:

break;

default:

continue; /* ignore command */

}

}

}

*cs++ = c;

if (--n <= 0 || c == '\n')

break;

}

if (c == EOF && cs == s) {

if (ferror(iop) && (errno == EINTR))

goto retry;

return (NULL);

}

*cs++ = '\0';

#if defined(USE_GSS)

if (IS_GSSAUTH(cur_auth_type) &&

(gss_info.authstate & GSS_ADAT_DONE) &&

gss_info.context != GSS_C_NO_CONTEXT) {

s = sec_decode_command(s);

} else if (IS_GSSAUTH(cur_auth_type) &&

(!strncmp(s, "ENC", 3) || !strncmp(s, "MIC", 3) ||

!strncmp(s, "CONF", 4)) &&

!(gss_info.authstate & GSS_ADAT_DONE)) {

if (debug)

syslog(LOG_DEBUG, "command: %s", s);

reply(503, "Must perform authentication before sending protected commands");

*s = '\0';

return(s);

}

#endif /* USE_GSS */

if (debug) {

if (strncasecmp(passtxt, s, 5) == 0)

syslog(LOG_DEBUG, "command: %s", passtxt);

else

syslog(LOG_DEBUG, "command: %s", s);

}

return (s);

}

static void toolong(int a) /* signal that caused this function to be called */

{

time_t now;

reply(421,

"Timeout (%d seconds): closing control connection.", timeout_idle);

(void) time(&now);

if (logging) {

syslog(LOG_INFO,

"User %s timed out after %d seconds at %.24s",

(pw ? pw->pw_name : "unknown"), timeout_idle, ctime(&now));

}

dologout(1);

}

int yylex(void)

{

static int cpos, state;

register char *cp, *cp2;

register struct tab *p;

int n;

time_t now;

char c = '\0';

extern time_t limit_time;

extern time_t login_time;

for (;;) {

switch (state) {

case CMD:

yyerrorcalled = 0;

setproctitle("%s: IDLE", proctitle);

if (is_shutdown(!logged_in, 0) != 0) {

reply(221, "Server shutting down. Goodbye.");

dologout(0);

}

time(&now);

if ((limit_time > 0) && (((now - login_time) / 60) >= limit_time)) {

reply(221, "Time limit reached. Goodbye.");

dologout(0);

}

#ifdef IGNORE_NOOP

if (!alarm_running) {

(void) signal(SIGALRM, toolong);

(void) alarm((unsigned) timeout_idle);

alarm_running = 1;

}

#else

(void) signal(SIGALRM, toolong);

(void) alarm((unsigned) timeout_idle);

#endif

if (wu_getline(cbuf, sizeof(cbuf) - 1, stdin) == NULL) {

(void) alarm(0);

reply(221, "You could at least say goodbye.");

dologout(0);

}

#ifndef IGNORE_NOOP

(void) alarm(0);

#endif

if ((cp = strchr(cbuf, '\r'))) {

*cp++ = '\n';

*cp = '\0';

}

if ((cp = strpbrk(cbuf, " \n")))

cpos = cp - cbuf;

if (cpos == 0)

cpos = 4;

c = cbuf[cpos];

cbuf[cpos] = '\0';

upper(cbuf);

#ifdef IGNORE_NOOP

if (strncasecmp(cbuf, "NOOP", 4) != 0) {

(void) alarm(0);

alarm_running = 0;

}

#endif

p = lookup(cmdtab, cbuf);

cbuf[cpos] = c;

if (strncasecmp(cbuf, "PASS", 4) != 0 &&

strncasecmp(cbuf, "SITE GPASS", 10) != 0) {

if ((cp = strchr(cbuf, '\n')))

*cp = '\0';

setproctitle("%s: %s", proctitle, cbuf);

if (cp)

*cp = '\n';

}

if (p != 0) {

if (p->implemented == 0) {

nack(p->name);

longjmp(errcatch, 0);

/* NOTREACHED */

}

state = p->state;

yylval.String = p->name;

return (p->token);

}

break;

case SITECMD:

if (cbuf[cpos] == ' ') {

cpos++;

return (SP);

}

cp = &cbuf[cpos];

if ((cp2 = strpbrk(cp, " \n")))

cpos = cp2 - cbuf;

c = cbuf[cpos];

cbuf[cpos] = '\0';

upper(cp);

p = lookup(sitetab, cp);

cbuf[cpos] = c;

if (p != 0) {

#ifndef PARANOID /* what GOOD is SITE *, anyways?! _H */

if (p->implemented == 0) {

#else

if (1) {

syslog(LOG_WARNING, "refused SITE %s %s from %s of %s",

p->name, &cbuf[cpos],

anonymous ? guestpw : authuser, remoteident);

#endif /* PARANOID */

state = CMD;

nack(p->name);

longjmp(errcatch, 0);

/* NOTREACHED */

}

state = p->state;

yylval.String = p->name;

return (p->token);

}

state = CMD;

break;

case OSTR:

if (cbuf[cpos] == '\n') {

state = CMD;

return (CRLF);

}

/* FALLTHROUGH */

case STR1:

case ZSTR1:

dostr1:

if (cbuf[cpos] == ' ') {

cpos++;

if (state == OSTR)

state = STR2;

else

++state;

return (SP);

}

break;

case ZSTR2:

if (cbuf[cpos] == '\n') {

state = CMD;

return (CRLF);

}

/* FALLTHROUGH */

case STR2:

cp = &cbuf[cpos];

n = strlen(cp);

cpos += n - 1;

/*

if (n > 1 && cbuf[cpos] == '\n') {

cbuf[cpos] = '\0';

yylval.String = copy(cp);

cbuf[cpos] = '\n';

state = ARGS;

return (STRING);

}

break;

case NSTR:

if (cbuf[cpos] == ' ') {

cpos++;

return (SP);

}

if (isdigit(cbuf[cpos])) {

cp = &cbuf[cpos];

while (isdigit(cbuf[++cpos]));

c = cbuf[cpos];

cbuf[cpos] = '\0';

yylval.Number = atoi(cp);

cbuf[cpos] = c;

state = STR1;

return (NUMBER);

}

state = STR1;

goto dostr1;

case STR3:

if (cbuf[cpos] == ' ') {

cpos++;

return (SP);

}

cp = &cbuf[cpos];

cp2 = strpbrk(cp, " \n");

if (cp2 != NULL) {

c = *cp2;

*cp2 = '\0';

}

n = strlen(cp);

cpos += n;

/*

if ((cp2 - cp) > 1) {

yylval.String = copy(cp);

cbuf[cpos] = c;

state = OSTR;

return (STRING);

}

break;

case ARGS:

if (isdigit(cbuf[cpos])) {

cp = &cbuf[cpos];

while (isdigit(cbuf[++cpos]));

c = cbuf[cpos];

cbuf[cpos] = '\0';

yylval.Number = atoi(cp);

cbuf[cpos] = c;

return (NUMBER);

}

switch (cbuf[cpos++]) {

case '\n':

state = CMD;

return (CRLF);

case ' ':

return (SP);

case ',':

return (COMMA);

case 'A':

case 'a':

return (A);

case 'B':

case 'b':

return (B);

case 'C':

case 'c':

return (C);

case 'E':

case 'e':

return (E);

case 'F':

case 'f':

return (F);

case 'I':

case 'i':

return (I);

case 'L':

case 'l':

return (L);

case 'N':

case 'n':

return (N);

case 'P':

case 'p':

return (P);

case 'R':

case 'r':

return (R);

case 'S':

case 's':

return (S);

case 'T':

case 't':

return (T);

}

break;

default:

fatal("Unknown state in scanner.");

}

if (yyerrorcalled == 0) {

if ((cp = strchr(cbuf, '\n')) != NULL)

*cp = '\0';

if (logged_in)

reply(500, "'%s': command not understood.", cbuf);

else

reply(530, "Please login with USER and PASS.");

}

state = CMD;

longjmp(errcatch, 0);

}

}

void upper(char *s)

{

while (*s != '\0') {

if (islower(*s))

*s = toupper(*s);

s++;

}

}

char *copy(char *s)

{

char *p;

p = strdup(s);

if (p == NULL)

fatal("Ran out of memory.");

return (p);

}

void help(struct tab *ctab, char *s)

{

struct aclmember *entry = NULL;

struct tab *c;

size_t width, NCMDS;

char *type;

if (ctab == sitetab)

type = "SITE ";

else

type = "";

width = 0, NCMDS = 0;

for (c = ctab; c->name != NULL; c++) {

size_t len = strlen(c->name);

if (len > width)

width = len;

NCMDS++;

}

width = (width + 8) & ~7;

if (s == 0) {

register size_t i, j, w;

size_t columns, lines;

lreply(214, "The following %scommands are recognized %s.",

type, "(* =>'s unimplemented)");

columns = 76 / width;

if (columns == 0)

columns = 1;

lines = (NCMDS + columns - 1) / columns;

for (i = 0; i < lines; i++) {

char line[BUFSIZ], *ptr = line;

ptr += strlcpy(line, " ", sizeof(line));

for (j = 0; j < columns; j++) {

c = ctab + j * lines + i;

(void) snprintf(ptr, line + sizeof(line) - ptr, "%s%c",

c->name, c->implemented ? ' ' : '*');

w = strlen(c->name) + 1;

ptr += w;

if (c + lines >= &ctab[NCMDS])

break;

while (w < width) {

*(ptr++) = ' ';

w++;

}

}

*ptr = '\0';

lreply(0, "%s", line);

}

(void) fflush(stdout);

#ifdef VIRTUAL

if (virtual_mode && !virtual_ftpaccess && virtual_email[0] != '\0')

reply(214, "Direct comments to %s.", virtual_email);

else

#endif

if ((getaclentry("email", &entry)) && ARG0)

reply(214, "Direct comments to %s.", ARG0);

else

reply(214, "Direct comments to ftp-bugs@%s.", hostname);

return;

}

upper(s);

c = lookup(ctab, s);

if (c == (struct tab *) NULL) {

reply(502, "Unknown command %s.", s);

return;

}

if (c->implemented)

reply(214, "Syntax: %s%s %s", type, c->name, c->help);

else

reply(214, "%s%-*s\t%s; unimplemented.", type, width,

c->name, c->help);

}

void sizecmd(char *filename)

{

switch (type) {

case TYPE_L:

case TYPE_I:{

struct stat stbuf;

if (stat(filename, &stbuf) < 0 ||

(stbuf.st_mode & S_IFMT) != S_IFREG)

reply(550, "%s: not a plain file.", filename);

else

reply(213, "%" L_FORMAT, stbuf.st_size);

break;

}

case TYPE_A:{

FILE *fin;

register int c;

register off_t count;

struct stat stbuf;

fin = fopen(filename, "r");

if (fin == NULL) {

perror_reply(550, filename);

return;

}

if (fstat(fileno(fin), &stbuf) < 0 ||

(stbuf.st_mode & S_IFMT) != S_IFREG) {

reply(550, "%s: not a plain file.", filename);

(void) fclose(fin);

return;

}

count = 0;

while ((c = getc(fin)) != EOF) {

if (c == '\n') /* will get expanded to \r\n */

count++;

count++;

}

(void) fclose(fin);

reply(213, "%" L_FORMAT, count);

break;

}

default:

reply(504, "SIZE not implemented for Type %c.", "?AEIL"[type]);

}

}

void site_exec(char *cmd)

{

#ifdef PARANOID

syslog(LOG_CRIT, "REFUSED SITE_EXEC (slipped through!!): %s", cmd);

#else

char buf[MAXPATHLEN];

char *sp = (char *) strchr(cmd, ' '), *slash, *t;

FILE *cmdf;

/* sanitize the command-string */

if (sp == 0) {

while ((slash = strchr(cmd, '/')) != 0)

cmd = slash + 1;

}

else {

while (sp && (slash = (char *) strchr(cmd, '/'))

&& (slash < sp))

cmd = slash + 1;

}

for (t = cmd; *t && !isspace(*t); t++) {

if (isupper(*t)) {

*t = tolower(*t);

}

}

/* build the command */

if (strlen(_PATH_EXECPATH) + strlen(cmd) + 2 > sizeof(buf))

return;

(void) snprintf(buf, sizeof(buf), "%s/%s", _PATH_EXECPATH, cmd);

cmdf = ftpd_popen(buf, "r", 0);

if (!cmdf) {

perror_reply(550, cmd);

if (log_commands)

syslog(LOG_INFO, "SITE EXEC (FAIL: %m): %s", cmd);

}

else {

int lines = 0;

int maxlines = 0;

struct aclmember *entry = NULL;

char class[BUFSIZ];

int maxfound = 0;

int defmaxlines = 20;

int which;

(void) acl_getclass(class);

while ((getaclentry("site-exec-max-lines", &entry)) && ARG0) {

if (ARG1)

for (which = 1; (which < MAXARGS) && ARG[which]; which++) {

if (!strcasecmp(ARG[which], class)) {

maxlines = atoi(ARG0);

maxfound = 1;

}

if (!strcmp(ARG[which], "*"))

defmaxlines = atoi(ARG0);

}

else

defmaxlines = atoi(ARG0);

}

if (!maxfound)

maxlines = defmaxlines;

lreply(200, "%s", cmd);

while (fgets(buf, sizeof buf, cmdf)) {

size_t len = strlen(buf);

if (len > 0 && buf[len - 1] == '\n')

buf[--len] = '\0';

lreply(200, "%s", buf);

if (maxlines <= 0)

++lines;

else if (++lines >= maxlines) {

lreply(200, "*** Truncated ***");

break;

}

}

reply(200, " (end of '%s')", cmd);

if (log_commands)

syslog(LOG_INFO, "SITE EXEC (lines: %d): %s", lines, cmd);

ftpd_pclose(cmdf);

}

#endif /* PARANOID */

}

void alias(char *s)

{

struct aclmember *entry = NULL;

if (s != (char *) NULL) {

while (getaclentry("alias", &entry) && ARG0 && ARG1 != NULL)

if (!strcmp(ARG0, s)) {

reply(214, "%s is an alias for %s.", ARG0, ARG1);

return;

}

reply(502, "Unknown alias %s.", s);

return;

}

lreply(214, "The following aliases are available.");

while (getaclentry("alias", &entry) && ARG0 && ARG1 != NULL)

lreply(0, " %-8s %s", ARG0, ARG1);

(void) fflush(stdout);

reply(214, "");

}

void cdpath(void)

{

struct aclmember *entry = NULL;

lreply(214, "The cdpath is:");

while (getaclentry("cdpath", &entry) && ARG0 != NULL)

lreply(0, " %s", ARG0);

(void) fflush(stdout);

reply(214, "");

}

void print_groups(void)

{

gid_t groups[NGROUPS_MAX];

int ngroups = 0;

if ((ngroups = getgroups(NGROUPS_MAX, groups)) < 0) {

return;

}

lreply(214, "Group membership is:");

ngroups--;

for (; ngroups >= 0; ngroups--)

lreply(214, " %d", groups[ngroups]);

(void) fflush(stdout);

reply(214, "");

}