1/*
2 * Copyright (c) 1980, 1993
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 4. Neither the name of the University nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30#include <sys/types.h>
31#include <sys/socket.h>
32
33#include <netinet/in.h>
34
35#include <alloca.h>
36#include <stdio.h>
37#include <netdb.h>
38#include <errno.h>
39#include <stdlib.h>
40#include <string.h>
41#include <unistd.h>
42#include <sys/uio.h>
43
44int rexecoptions;
45libc_freeres_ptr (static char *ahostbuf);
46
47int
48rexec_af (char **ahost, int rport, const char *name, const char *pass,
49 const char *cmd, int *fd2p, sa_family_t af)
50{
51 struct sockaddr_storage from;
52 struct addrinfo hints, *res0;
53 const char *orig_name = name;
54 const char *orig_pass = pass;
55 u_short port = 0;
56 int s, timo = 1, s3;
57 char c;
58 int gai;
59 char servbuff[NI_MAXSERV];
60
61 __snprintf(servbuff, sizeof(servbuff), "%d", ntohs(rport));
62 servbuff[sizeof(servbuff) - 1] = '\0';
63
64 memset(&hints, '\0', sizeof(hints));
65 hints.ai_family = af;
66 hints.ai_socktype = SOCK_STREAM;
67 hints.ai_flags = AI_CANONNAME;
68 gai = getaddrinfo(*ahost, servbuff, &hints, &res0);
69 if (gai){
70 /* XXX: set errno? */
71 return -1;
72 }
73
74 if (res0->ai_canonname){
75 free (ahostbuf);
76 ahostbuf = __strdup (res0->ai_canonname);
77 if (ahostbuf == NULL) {
78 perror ("rexec: strdup");
79 return (-1);
80 }
81 *ahost = ahostbuf;
82 } else {
83 *ahost = NULL;
84 __set_errno (ENOENT);
85 return -1;
86 }
87 ruserpass(res0->ai_canonname, &name, &pass);
88retry:
89 /* NB: No SOCK_CLOEXEC for backwards compatibility. */
90 s = __socket(res0->ai_family, res0->ai_socktype, 0);
91 if (s < 0) {
92 perror("rexec: socket");
93 return (-1);
94 }
95 if (__connect(s, res0->ai_addr, res0->ai_addrlen) < 0) {
96 if (errno == ECONNREFUSED && timo <= 16) {
97 (void) __close(s);
98 __sleep(timo);
99 timo *= 2;
100 goto retry;
101 }
102 perror(res0->ai_canonname);
103 return (-1);
104 }
105 if (fd2p == 0) {
106 (void) __write(s, "", 1);
107 port = 0;
108 } else {
109 char num[32];
110 int s2;
111 union
112 {
113 struct sockaddr_storage ss;
114 struct sockaddr sa;
115 } sa2;
116 socklen_t sa2len;
117
118 s2 = __socket(res0->ai_family, res0->ai_socktype, 0);
119 if (s2 < 0) {
120 (void) __close(s);
121 return (-1);
122 }
123 __listen(s2, 1);
124 sa2len = sizeof (sa2);
125 if (__getsockname(s2, &sa2.sa, &sa2len) < 0) {
126 perror("getsockname");
127 (void) __close(s2);
128 goto bad;
129 } else if (sa2len != SA_LEN(&sa2.sa)) {
130 __set_errno(EINVAL);
131 (void) __close(s2);
132 goto bad;
133 }
134 port = 0;
135 if (!getnameinfo(&sa2.sa, sa2len,
136 NULL, 0, servbuff, sizeof(servbuff),
137 NI_NUMERICSERV))
138 port = atoi(servbuff);
139 (void) sprintf(num, "%u", port);
140 (void) __write(s, num, strlen(num)+1);
141 { socklen_t len = sizeof (from);
142 s3 = TEMP_FAILURE_RETRY (accept(s2, (struct sockaddr *)&from,
143 &len));
144 __close(s2);
145 if (s3 < 0) {
146 perror("accept");
147 port = 0;
148 goto bad;
149 }
150 }
151 *fd2p = s3;
152 }
153
154 struct iovec iov[3] =
155 {
156 [0] = { .iov_base = (void *) name, .iov_len = strlen (name) + 1 },
157 /* should public key encypt the password here */
158 [1] = { .iov_base = (void *) pass, .iov_len = strlen (pass) + 1 },
159 [2] = { .iov_base = (void *) cmd, .iov_len = strlen (cmd) + 1 }
160 };
161 (void) TEMP_FAILURE_RETRY (__writev (s, iov, 3));
162
163 /* We don't need the memory allocated for the name and the password
164 in ruserpass anymore. */
165 if (name != orig_name)
166 free ((char *) name);
167 if (pass != orig_pass)
168 free ((char *) pass);
169
170 if (__read(s, &c, 1) != 1) {
171 perror(*ahost);
172 goto bad;
173 }
174 if (c != 0) {
175 while (__read(s, &c, 1) == 1) {
176 (void) __write(2, &c, 1);
177 if (c == '\n')
178 break;
179 }
180 goto bad;
181 }
182 freeaddrinfo(res0);
183 return (s);
184bad:
185 if (port)
186 (void) __close(*fd2p);
187 (void) __close(s);
188 freeaddrinfo(res0);
189 return (-1);
190}
191libc_hidden_def (rexec_af)
192
193int
194rexec (char **ahost, int rport, const char *name, const char *pass,
195 const char *cmd, int *fd2p)
196{
197 return rexec_af(ahost, rport, name, pass, cmd, fd2p, AF_INET);
198}
199