]>
Commit | Line | Data |
---|---|---|
212380e3 AC |
1 | /* |
2 | * ircd-ratbox: A slightly useful ircd. | |
3 | * s_serv.c: Server related functions. | |
4 | * | |
5 | * Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center | |
6 | * Copyright (C) 1996-2002 Hybrid Development Team | |
7 | * Copyright (C) 2002-2005 ircd-ratbox development team | |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify | |
10 | * it under the terms of the GNU General Public License as published by | |
11 | * the Free Software Foundation; either version 2 of the License, or | |
12 | * (at your option) any later version. | |
13 | * | |
14 | * This program is distributed in the hope that it will be useful, | |
15 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
17 | * GNU General Public License for more details. | |
18 | * | |
19 | * You should have received a copy of the GNU General Public License | |
20 | * along with this program; if not, write to the Free Software | |
21 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 | |
22 | * USA | |
212380e3 AC |
23 | */ |
24 | ||
25 | #include "stdinc.h" | |
26 | ||
27 | #ifdef HAVE_LIBCRYPTO | |
28 | #include <openssl/rsa.h> | |
29 | #endif | |
30 | ||
212380e3 AC |
31 | #include "s_serv.h" |
32 | #include "class.h" | |
33 | #include "client.h" | |
212380e3 | 34 | #include "hash.h" |
4562c604 | 35 | #include "match.h" |
212380e3 AC |
36 | #include "ircd.h" |
37 | #include "ircd_defs.h" | |
38 | #include "numeric.h" | |
39 | #include "packet.h" | |
212380e3 AC |
40 | #include "s_conf.h" |
41 | #include "s_newconf.h" | |
4016731b | 42 | #include "logger.h" |
212380e3 AC |
43 | #include "s_stats.h" |
44 | #include "s_user.h" | |
45 | #include "scache.h" | |
46 | #include "send.h" | |
47 | #include "client.h" | |
212380e3 AC |
48 | #include "channel.h" /* chcap_usage_counts stuff... */ |
49 | #include "hook.h" | |
50 | #include "msg.h" | |
54015b5f | 51 | #include "reject.h" |
c6d72037 | 52 | #include "sslproc.h" |
346fba92 | 53 | #include "capability.h" |
77d3d2db | 54 | #include "s_assert.h" |
212380e3 | 55 | |
212380e3 AC |
56 | int MaxConnectionCount = 1; |
57 | int MaxClientCount = 1; | |
58 | int refresh_user_links = 0; | |
59 | ||
acd941bf | 60 | static char buf[BUFSIZE]; |
212380e3 | 61 | |
212380e3 AC |
62 | /* |
63 | * list of recognized server capabilities. "TS" is not on the list | |
64 | * because all servers that we talk to already do TS, and the kludged | |
65 | * extra argument to "PASS" takes care of checking that. -orabidoo | |
66 | */ | |
346fba92 | 67 | struct CapabilityIndex *serv_capindex = NULL; |
486cd344 | 68 | struct CapabilityIndex *cli_capindex = NULL; |
346fba92 AC |
69 | |
70 | unsigned int CAP_CAP; | |
71 | unsigned int CAP_QS; | |
72 | unsigned int CAP_EX; | |
73 | unsigned int CAP_CHW; | |
74 | unsigned int CAP_IE; | |
75 | unsigned int CAP_KLN; | |
76 | unsigned int CAP_ZIP; | |
77 | unsigned int CAP_KNOCK; | |
78 | unsigned int CAP_TB; | |
79 | unsigned int CAP_UNKLN; | |
80 | unsigned int CAP_CLUSTER; | |
81 | unsigned int CAP_ENCAP; | |
82 | unsigned int CAP_TS6; | |
83 | unsigned int CAP_SERVICE; | |
84 | unsigned int CAP_RSFNC; | |
85 | unsigned int CAP_SAVE; | |
86 | unsigned int CAP_EUID; | |
87 | unsigned int CAP_EOPMOD; | |
88 | unsigned int CAP_BAN; | |
89 | unsigned int CAP_MLOCK; | |
90 | ||
32df5e96 | 91 | unsigned int CLICAP_MULTI_PREFIX; |
32df5e96 AC |
92 | unsigned int CLICAP_ACCOUNT_NOTIFY; |
93 | unsigned int CLICAP_EXTENDED_JOIN; | |
94 | unsigned int CLICAP_AWAY_NOTIFY; | |
32df5e96 AC |
95 | unsigned int CLICAP_USERHOST_IN_NAMES; |
96 | unsigned int CLICAP_CAP_NOTIFY; | |
97 | unsigned int CLICAP_CHGHOST; | |
be2ce24c | 98 | unsigned int CLICAP_ECHO_MESSAGE; |
32df5e96 | 99 | |
346fba92 AC |
100 | /* |
101 | * initialize our builtin capability table. --nenolod | |
102 | */ | |
103 | void | |
104 | init_builtin_capabs(void) | |
105 | { | |
885cd603 | 106 | serv_capindex = capability_index_create("server capabilities"); |
346fba92 | 107 | |
22cae20f JT |
108 | /* These two are not set via CAPAB/GCAP keywords. */ |
109 | CAP_CAP = capability_put_anonymous(serv_capindex); | |
110 | CAP_TS6 = capability_put_anonymous(serv_capindex); | |
111 | ||
486cd344 AC |
112 | CAP_QS = capability_put(serv_capindex, "QS", NULL); |
113 | CAP_EX = capability_put(serv_capindex, "EX", NULL); | |
114 | CAP_CHW = capability_put(serv_capindex, "CHW", NULL); | |
115 | CAP_IE = capability_put(serv_capindex, "IE", NULL); | |
116 | CAP_KLN = capability_put(serv_capindex, "KLN", NULL); | |
117 | CAP_KNOCK = capability_put(serv_capindex, "KNOCK", NULL); | |
118 | CAP_ZIP = capability_put(serv_capindex, "ZIP", NULL); | |
119 | CAP_TB = capability_put(serv_capindex, "TB", NULL); | |
120 | CAP_UNKLN = capability_put(serv_capindex, "UNKLN", NULL); | |
121 | CAP_CLUSTER = capability_put(serv_capindex, "CLUSTER", NULL); | |
122 | CAP_ENCAP = capability_put(serv_capindex, "ENCAP", NULL); | |
123 | CAP_SERVICE = capability_put(serv_capindex, "SERVICES", NULL); | |
124 | CAP_RSFNC = capability_put(serv_capindex, "RSFNC", NULL); | |
125 | CAP_SAVE = capability_put(serv_capindex, "SAVE", NULL); | |
126 | CAP_EUID = capability_put(serv_capindex, "EUID", NULL); | |
127 | CAP_EOPMOD = capability_put(serv_capindex, "EOPMOD", NULL); | |
128 | CAP_BAN = capability_put(serv_capindex, "BAN", NULL); | |
129 | CAP_MLOCK = capability_put(serv_capindex, "MLOCK", NULL); | |
58b60c20 JT |
130 | |
131 | capability_require(serv_capindex, "QS"); | |
d0c2fc82 JT |
132 | capability_require(serv_capindex, "EX"); |
133 | capability_require(serv_capindex, "IE"); | |
58b60c20 | 134 | capability_require(serv_capindex, "ENCAP"); |
486cd344 AC |
135 | |
136 | cli_capindex = capability_index_create("client capabilities"); | |
32df5e96 AC |
137 | |
138 | CLICAP_MULTI_PREFIX = capability_put(cli_capindex, "multi-prefix", NULL); | |
32df5e96 AC |
139 | CLICAP_ACCOUNT_NOTIFY = capability_put(cli_capindex, "account-notify", NULL); |
140 | CLICAP_EXTENDED_JOIN = capability_put(cli_capindex, "extended-join", NULL); | |
141 | CLICAP_AWAY_NOTIFY = capability_put(cli_capindex, "away-notify", NULL); | |
32df5e96 AC |
142 | CLICAP_USERHOST_IN_NAMES = capability_put(cli_capindex, "userhost-in-names", NULL); |
143 | CLICAP_CAP_NOTIFY = capability_put(cli_capindex, "cap-notify", NULL); | |
144 | CLICAP_CHGHOST = capability_put(cli_capindex, "chghost", NULL); | |
be2ce24c | 145 | CLICAP_ECHO_MESSAGE = capability_put(cli_capindex, "echo-message", NULL); |
346fba92 | 146 | } |
212380e3 | 147 | |
212380e3 | 148 | static CNCB serv_connect_callback; |
c6d72037 | 149 | static CNCB serv_connect_ssl_callback; |
53789fdd | 150 | static SSL_OPEN_CB serv_connect_ssl_open_callback; |
212380e3 AC |
151 | |
152 | /* | |
153 | * hunt_server - Do the basic thing in delivering the message (command) | |
154 | * across the relays to the specific server (server) for | |
155 | * actions. | |
156 | * | |
157 | * Note: The command is a format string and *MUST* be | |
158 | * of prefixed style (e.g. ":%s COMMAND %s ..."). | |
159 | * Command can have only max 8 parameters. | |
160 | * | |
161 | * server parv[server] is the parameter identifying the | |
162 | * target server. | |
163 | * | |
164 | * *WARNING* | |
165 | * parv[server] is replaced with the pointer to the | |
166 | * real servername from the matched client (I'm lazy | |
167 | * now --msa). | |
168 | * | |
169 | * returns: (see #defines) | |
170 | */ | |
171 | int | |
172 | hunt_server(struct Client *client_p, struct Client *source_p, | |
173 | const char *command, int server, int parc, const char *parv[]) | |
174 | { | |
175 | struct Client *target_p; | |
176 | int wilds; | |
330fc5c1 | 177 | rb_dlink_node *ptr; |
212380e3 AC |
178 | const char *old; |
179 | char *new; | |
180 | ||
181 | /* | |
182 | * Assume it's me, if no server | |
183 | */ | |
184 | if(parc <= server || EmptyString(parv[server]) || | |
4d7a1ee5 | 185 | match(parv[server], me.name) || (strcmp(parv[server], me.id) == 0)) |
212380e3 | 186 | return (HUNTED_ISME); |
346fba92 | 187 | |
212380e3 AC |
188 | new = LOCAL_COPY(parv[server]); |
189 | ||
190 | /* | |
191 | * These are to pickup matches that would cause the following | |
192 | * message to go in the wrong direction while doing quick fast | |
193 | * non-matching lookups. | |
194 | */ | |
195 | if(MyClient(source_p)) | |
196 | target_p = find_named_client(new); | |
197 | else | |
198 | target_p = find_client(new); | |
199 | ||
200 | if(target_p) | |
201 | if(target_p->from == source_p->from && !MyConnect(target_p)) | |
202 | target_p = NULL; | |
203 | ||
212380e3 AC |
204 | collapse(new); |
205 | wilds = (strchr(new, '?') || strchr(new, '*')); | |
206 | ||
207 | /* | |
208 | * Again, if there are no wild cards involved in the server | |
209 | * name, use the hash lookup | |
210 | */ | |
cd300c1b | 211 | if(!target_p && wilds) |
212380e3 | 212 | { |
2fb07961 | 213 | RB_DLINK_FOREACH(ptr, global_serv_list.head) |
212380e3 | 214 | { |
cd300c1b | 215 | if(match(new, ((struct Client *) (ptr->data))->name)) |
212380e3 | 216 | { |
cd300c1b JT |
217 | target_p = ptr->data; |
218 | break; | |
212380e3 AC |
219 | } |
220 | } | |
221 | } | |
222 | ||
cd300c1b JT |
223 | if(target_p && !IsRegistered(target_p)) |
224 | target_p = NULL; | |
225 | ||
212380e3 AC |
226 | if(target_p) |
227 | { | |
212380e3 AC |
228 | if(IsMe(target_p) || MyClient(target_p)) |
229 | return HUNTED_ISME; | |
230 | ||
231 | old = parv[server]; | |
232 | parv[server] = get_id(target_p, target_p); | |
233 | ||
234 | sendto_one(target_p, command, get_id(source_p, target_p), | |
235 | parv[1], parv[2], parv[3], parv[4], parv[5], parv[6], parv[7], parv[8]); | |
236 | parv[server] = old; | |
237 | return (HUNTED_PASS); | |
238 | } | |
239 | ||
95d36ef5 | 240 | if(MyClient(source_p) || !IsDigit(parv[server][0])) |
212380e3 AC |
241 | sendto_one_numeric(source_p, ERR_NOSUCHSERVER, |
242 | form_str(ERR_NOSUCHSERVER), parv[server]); | |
243 | return (HUNTED_NOSUCH); | |
244 | } | |
245 | ||
246 | /* | |
247 | * try_connections - scan through configuration and try new connections. | |
248 | * Returns the calendar time when the next call to this | |
249 | * function should be made latest. (No harm done if this | |
250 | * is called earlier or later...) | |
251 | */ | |
252 | void | |
253 | try_connections(void *unused) | |
254 | { | |
255 | struct Client *client_p; | |
256 | struct server_conf *server_p = NULL; | |
257 | struct server_conf *tmp_p; | |
258 | struct Class *cltmp; | |
330fc5c1 | 259 | rb_dlink_node *ptr; |
07554369 | 260 | bool connecting = false; |
212380e3 AC |
261 | int confrq = 0; |
262 | time_t next = 0; | |
263 | ||
5cefa1d6 | 264 | RB_DLINK_FOREACH(ptr, server_conf_list.head) |
212380e3 AC |
265 | { |
266 | tmp_p = ptr->data; | |
267 | ||
268 | if(ServerConfIllegal(tmp_p) || !ServerConfAutoconn(tmp_p)) | |
269 | continue; | |
270 | ||
f4a759c5 | 271 | /* don't allow ssl connections if ssl isn't setup */ |
bfc44622 | 272 | if(ServerConfSSL(tmp_p) && (!ircd_ssl_ok || !get_ssld_count())) |
c6d72037 VY |
273 | continue; |
274 | ||
212380e3 AC |
275 | cltmp = tmp_p->class; |
276 | ||
277 | /* | |
278 | * Skip this entry if the use of it is still on hold until | |
279 | * future. Otherwise handle this entry (and set it on hold | |
280 | * until next time). Will reset only hold times, if already | |
281 | * made one successfull connection... [this algorithm is | |
282 | * a bit fuzzy... -- msa >;) ] | |
283 | */ | |
e3354945 | 284 | if(tmp_p->hold > rb_current_time()) |
212380e3 AC |
285 | { |
286 | if(next > tmp_p->hold || next == 0) | |
287 | next = tmp_p->hold; | |
288 | continue; | |
289 | } | |
290 | ||
291 | confrq = get_con_freq(cltmp); | |
e3354945 | 292 | tmp_p->hold = rb_current_time() + confrq; |
212380e3 AC |
293 | |
294 | /* | |
295 | * Found a CONNECT config with port specified, scan clients | |
296 | * and see if this server is already connected? | |
297 | */ | |
298 | client_p = find_server(NULL, tmp_p->name); | |
299 | ||
300 | if(!client_p && (CurrUsers(cltmp) < MaxUsers(cltmp)) && !connecting) | |
301 | { | |
302 | server_p = tmp_p; | |
303 | ||
304 | /* We connect only one at time... */ | |
07554369 | 305 | connecting = true; |
212380e3 AC |
306 | } |
307 | ||
308 | if((next > tmp_p->hold) || (next == 0)) | |
309 | next = tmp_p->hold; | |
310 | } | |
311 | ||
312 | /* TODO: change this to set active flag to 0 when added to event! --Habeeb */ | |
313 | if(GlobalSetOptions.autoconn == 0) | |
314 | return; | |
315 | ||
316 | if(!connecting) | |
317 | return; | |
318 | ||
319 | /* move this connect entry to end.. */ | |
330fc5c1 AC |
320 | rb_dlinkDelete(&server_p->node, &server_conf_list); |
321 | rb_dlinkAddTail(server_p, &server_p->node, &server_conf_list); | |
212380e3 AC |
322 | |
323 | /* | |
324 | * We used to only print this if serv_connect() actually | |
b2f0da88 | 325 | * suceeded, but since rb_tcp_connect() can call the callback |
212380e3 AC |
326 | * immediately if there is an error, we were getting error messages |
327 | * in the wrong order. SO, we just print out the activated line, | |
328 | * and let serv_connect() / serv_connect_callback() print an | |
329 | * error afterwards if it fails. | |
330 | * -- adrian | |
331 | */ | |
212380e3 AC |
332 | sendto_realops_snomask(SNO_GENERAL, L_ALL, |
333 | "Connection to %s activated", | |
334 | server_p->name); | |
212380e3 AC |
335 | |
336 | serv_connect(server_p, 0); | |
337 | } | |
338 | ||
339 | int | |
340 | check_server(const char *name, struct Client *client_p) | |
341 | { | |
342 | struct server_conf *server_p = NULL; | |
343 | struct server_conf *tmp_p; | |
330fc5c1 | 344 | rb_dlink_node *ptr; |
212380e3 | 345 | int error = -1; |
e69375f3 | 346 | const char *encr; |
84e3e445 SA |
347 | bool name_matched = false; |
348 | bool host_matched = false; | |
349 | bool certfp_failed = false; | |
212380e3 AC |
350 | |
351 | s_assert(NULL != client_p); | |
352 | if(client_p == NULL) | |
353 | return error; | |
354 | ||
355 | if(!(client_p->localClient->passwd)) | |
356 | return -2; | |
357 | ||
358 | if(strlen(name) > HOSTLEN) | |
359 | return -4; | |
360 | ||
5cefa1d6 | 361 | RB_DLINK_FOREACH(ptr, server_conf_list.head) |
212380e3 | 362 | { |
d4214e94 SA |
363 | struct rb_sockaddr_storage client_addr; |
364 | ||
212380e3 AC |
365 | tmp_p = ptr->data; |
366 | ||
367 | if(ServerConfIllegal(tmp_p)) | |
368 | continue; | |
369 | ||
370 | if(!match(tmp_p->name, name)) | |
371 | continue; | |
372 | ||
84e3e445 | 373 | name_matched = true; |
212380e3 | 374 | |
d4214e94 SA |
375 | if(rb_inet_pton_sock(client_p->sockhost, (struct sockaddr *)&client_addr) <= 0) |
376 | SET_SS_FAMILY(&client_addr, AF_UNSPEC); | |
377 | ||
378 | if((tmp_p->connect_host && match(tmp_p->connect_host, client_p->host)) | |
379 | || (GET_SS_FAMILY(&client_addr) == GET_SS_FAMILY(&tmp_p->connect4) | |
380 | && comp_with_mask_sock((struct sockaddr *)&client_addr, | |
381 | (struct sockaddr *)&tmp_p->connect4, 32)) | |
d4214e94 SA |
382 | || (GET_SS_FAMILY(&client_addr) == GET_SS_FAMILY(&tmp_p->connect6) |
383 | && comp_with_mask_sock((struct sockaddr *)&client_addr, | |
384 | (struct sockaddr *)&tmp_p->connect6, 128)) | |
d4214e94 | 385 | ) |
212380e3 | 386 | { |
84e3e445 | 387 | host_matched = true; |
212380e3 | 388 | |
ff0cc1e6 | 389 | if(tmp_p->passwd) |
212380e3 | 390 | { |
ff0cc1e6 | 391 | if(ServerConfEncrypted(tmp_p)) |
212380e3 | 392 | { |
e69375f3 JT |
393 | encr = rb_crypt(client_p->localClient->passwd, |
394 | tmp_p->passwd); | |
395 | if(encr != NULL && !strcmp(tmp_p->passwd, encr)) | |
ff0cc1e6 AC |
396 | { |
397 | server_p = tmp_p; | |
398 | break; | |
399 | } | |
400 | else | |
401 | continue; | |
212380e3 | 402 | } |
ff0cc1e6 AC |
403 | else if(strcmp(tmp_p->passwd, client_p->localClient->passwd)) |
404 | continue; | |
212380e3 | 405 | } |
ff0cc1e6 AC |
406 | |
407 | if(tmp_p->certfp) | |
212380e3 | 408 | { |
84e3e445 SA |
409 | if(!client_p->certfp || rb_strcasecmp(tmp_p->certfp, client_p->certfp) != 0) { |
410 | certfp_failed = true; | |
ff0cc1e6 | 411 | continue; |
84e3e445 | 412 | } |
212380e3 | 413 | } |
ff0cc1e6 AC |
414 | |
415 | server_p = tmp_p; | |
416 | break; | |
212380e3 AC |
417 | } |
418 | } | |
419 | ||
420 | if(server_p == NULL) | |
84e3e445 SA |
421 | { |
422 | /* return the most specific error */ | |
423 | if(certfp_failed) | |
424 | error = -6; | |
425 | else if(host_matched) | |
426 | error = -2; | |
427 | else if(name_matched) | |
428 | error = -3; | |
429 | ||
212380e3 | 430 | return error; |
84e3e445 | 431 | } |
212380e3 | 432 | |
f4a759c5 VY |
433 | if(ServerConfSSL(server_p) && client_p->localClient->ssl_ctl == NULL) |
434 | { | |
435 | return -5; | |
c6d72037 VY |
436 | } |
437 | ||
d2b3a2a4 SA |
438 | if (client_p->localClient->att_sconf && client_p->localClient->att_sconf->class == server_p->class) { |
439 | /* this is an outgoing connection that is already attached to the correct class */ | |
440 | } else if (CurrUsers(server_p->class) >= MaxUsers(server_p->class)) { | |
441 | return -7; | |
442 | } | |
212380e3 AC |
443 | attach_server_conf(client_p, server_p); |
444 | ||
445 | /* clear ZIP/TB if they support but we dont want them */ | |
446 | #ifdef HAVE_LIBZ | |
447 | if(!ServerConfCompressed(server_p)) | |
448 | #endif | |
449 | ClearCap(client_p, CAP_ZIP); | |
450 | ||
451 | if(!ServerConfTb(server_p)) | |
452 | ClearCap(client_p, CAP_TB); | |
453 | ||
454 | return 0; | |
455 | } | |
456 | ||
457 | /* | |
458 | * send_capabilities | |
459 | * | |
460 | * inputs - Client pointer to send to | |
461 | * - int flag of capabilities that this server has | |
462 | * output - NONE | |
463 | * side effects - send the CAPAB line to a server -orabidoo | |
212380e3 AC |
464 | */ |
465 | void | |
346fba92 | 466 | send_capabilities(struct Client *client_p, unsigned int cap_can_send) |
212380e3 | 467 | { |
346fba92 | 468 | sendto_one(client_p, "CAPAB :%s", capability_index_list(serv_capindex, cap_can_send)); |
212380e3 AC |
469 | } |
470 | ||
431a1a27 JT |
471 | static void |
472 | burst_ban(struct Client *client_p) | |
473 | { | |
474 | rb_dlink_node *ptr; | |
475 | struct ConfItem *aconf; | |
476 | const char *type, *oper; | |
477 | /* +5 for !,@,{,} and null */ | |
478 | char operbuf[NICKLEN + USERLEN + HOSTLEN + HOSTLEN + 5]; | |
479 | char *p; | |
480 | size_t melen; | |
481 | ||
482 | melen = strlen(me.name); | |
483 | RB_DLINK_FOREACH(ptr, prop_bans.head) | |
484 | { | |
485 | aconf = ptr->data; | |
486 | ||
487 | /* Skip expired stuff. */ | |
488 | if(aconf->lifetime < rb_current_time()) | |
489 | continue; | |
490 | switch(aconf->status & ~CONF_ILLEGAL) | |
491 | { | |
492 | case CONF_KILL: type = "K"; break; | |
493 | case CONF_DLINE: type = "D"; break; | |
494 | case CONF_XLINE: type = "X"; break; | |
495 | case CONF_RESV_NICK: type = "R"; break; | |
496 | case CONF_RESV_CHANNEL: type = "R"; break; | |
497 | default: | |
498 | continue; | |
499 | } | |
500 | oper = aconf->info.oper; | |
501 | if(aconf->flags & CONF_FLAGS_MYOPER) | |
502 | { | |
503 | /* Our operator{} names may not be meaningful | |
504 | * to other servers, so rewrite to our server | |
505 | * name. | |
506 | */ | |
acd941bf | 507 | rb_strlcpy(operbuf, aconf->info.oper, sizeof operbuf); |
431a1a27 | 508 | p = strrchr(operbuf, '{'); |
ee6da53d JT |
509 | if (p != NULL && |
510 | operbuf + sizeof operbuf - p > (ptrdiff_t)(melen + 2)) | |
431a1a27 JT |
511 | { |
512 | memcpy(p + 1, me.name, melen); | |
513 | p[melen + 1] = '}'; | |
514 | p[melen + 2] = '\0'; | |
515 | oper = operbuf; | |
516 | } | |
517 | } | |
cedb7d05 | 518 | sendto_one(client_p, ":%s BAN %s %s %s %lu %d %d %s :%s%s%s", |
431a1a27 | 519 | me.id, |
431a1a27 JT |
520 | type, |
521 | aconf->user ? aconf->user : "*", aconf->host, | |
522 | (unsigned long)aconf->created, | |
523 | (int)(aconf->hold - aconf->created), | |
524 | (int)(aconf->lifetime - aconf->created), | |
525 | oper, | |
526 | aconf->passwd, | |
527 | aconf->spasswd ? "|" : "", | |
528 | aconf->spasswd ? aconf->spasswd : ""); | |
529 | } | |
530 | } | |
531 | ||
212380e3 AC |
532 | /* burst_modes_TS6() |
533 | * | |
534 | * input - client to burst to, channel name, list to burst, mode flag | |
535 | * output - | |
536 | * side effects - client is sent a list of +b, +e, or +I modes | |
537 | */ | |
538 | static void | |
55abcbb2 | 539 | burst_modes_TS6(struct Client *client_p, struct Channel *chptr, |
330fc5c1 | 540 | rb_dlink_list *list, char flag) |
212380e3 | 541 | { |
330fc5c1 | 542 | rb_dlink_node *ptr; |
212380e3 AC |
543 | struct Ban *banptr; |
544 | char *t; | |
545 | int tlen; | |
546 | int mlen; | |
547 | int cur_len; | |
548 | ||
5203cba5 | 549 | cur_len = mlen = sprintf(buf, ":%s BMASK %ld %s %c :", |
212380e3 AC |
550 | me.id, (long) chptr->channelts, chptr->chname, flag); |
551 | t = buf + mlen; | |
552 | ||
5cefa1d6 | 553 | RB_DLINK_FOREACH(ptr, list->head) |
212380e3 AC |
554 | { |
555 | banptr = ptr->data; | |
556 | ||
7f0fc87d | 557 | tlen = strlen(banptr->banstr) + (banptr->forward ? strlen(banptr->forward) + 1 : 0) + 1; |
212380e3 AC |
558 | |
559 | /* uh oh */ | |
acd941bf | 560 | if(cur_len + tlen > BUFSIZE - 3) |
212380e3 AC |
561 | { |
562 | /* the one we're trying to send doesnt fit at all! */ | |
563 | if(cur_len == mlen) | |
564 | { | |
565 | s_assert(0); | |
566 | continue; | |
567 | } | |
568 | ||
569 | /* chop off trailing space and send.. */ | |
570 | *(t-1) = '\0'; | |
571 | sendto_one(client_p, "%s", buf); | |
572 | cur_len = mlen; | |
573 | t = buf + mlen; | |
574 | } | |
575 | ||
7f0fc87d | 576 | if (banptr->forward) |
5203cba5 | 577 | sprintf(t, "%s$%s ", banptr->banstr, banptr->forward); |
7f0fc87d | 578 | else |
5203cba5 | 579 | sprintf(t, "%s ", banptr->banstr); |
212380e3 AC |
580 | t += tlen; |
581 | cur_len += tlen; | |
582 | } | |
583 | ||
584 | /* cant ever exit the loop above without having modified buf, | |
585 | * chop off trailing space and send. | |
586 | */ | |
587 | *(t-1) = '\0'; | |
588 | sendto_one(client_p, "%s", buf); | |
589 | } | |
590 | ||
212380e3 AC |
591 | /* |
592 | * burst_TS6 | |
55abcbb2 | 593 | * |
212380e3 AC |
594 | * inputs - client (server) to send nick towards |
595 | * - client to send nick for | |
596 | * output - NONE | |
597 | * side effects - NICK message is sent towards given client_p | |
598 | */ | |
599 | static void | |
600 | burst_TS6(struct Client *client_p) | |
601 | { | |
acd941bf | 602 | char ubuf[BUFSIZE]; |
212380e3 AC |
603 | struct Client *target_p; |
604 | struct Channel *chptr; | |
605 | struct membership *msptr; | |
606 | hook_data_client hclientinfo; | |
607 | hook_data_channel hchaninfo; | |
330fc5c1 AC |
608 | rb_dlink_node *ptr; |
609 | rb_dlink_node *uptr; | |
212380e3 AC |
610 | char *t; |
611 | int tlen, mlen; | |
612 | int cur_len = 0; | |
613 | ||
614 | hclientinfo.client = hchaninfo.client = client_p; | |
615 | ||
5cefa1d6 | 616 | RB_DLINK_FOREACH(ptr, global_client_list.head) |
212380e3 AC |
617 | { |
618 | target_p = ptr->data; | |
619 | ||
620 | if(!IsPerson(target_p)) | |
621 | continue; | |
622 | ||
087555a0 AC |
623 | if(MyClient(target_p->from) && target_p->localClient->att_sconf != NULL && ServerConfNoExport(target_p->localClient->att_sconf)) |
624 | continue; | |
625 | ||
29c92cf9 | 626 | send_umode(NULL, target_p, 0, ubuf); |
212380e3 AC |
627 | if(!*ubuf) |
628 | { | |
629 | ubuf[0] = '+'; | |
630 | ubuf[1] = '\0'; | |
631 | } | |
632 | ||
bea2295f | 633 | if(IsCapable(client_p, CAP_EUID)) |
212380e3 AC |
634 | sendto_one(client_p, ":%s EUID %s %d %ld %s %s %s %s %s %s %s :%s", |
635 | target_p->servptr->id, target_p->name, | |
55abcbb2 | 636 | target_p->hopcount + 1, |
212380e3 AC |
637 | (long) target_p->tsinfo, ubuf, |
638 | target_p->username, target_p->host, | |
639 | IsIPSpoof(target_p) ? "0" : target_p->sockhost, | |
640 | target_p->id, | |
641 | IsDynSpoof(target_p) ? target_p->orighost : "*", | |
642 | EmptyString(target_p->user->suser) ? "*" : target_p->user->suser, | |
643 | target_p->info); | |
bea2295f | 644 | else |
212380e3 AC |
645 | sendto_one(client_p, ":%s UID %s %d %ld %s %s %s %s %s :%s", |
646 | target_p->servptr->id, target_p->name, | |
55abcbb2 | 647 | target_p->hopcount + 1, |
212380e3 AC |
648 | (long) target_p->tsinfo, ubuf, |
649 | target_p->username, target_p->host, | |
650 | IsIPSpoof(target_p) ? "0" : target_p->sockhost, | |
651 | target_p->id, target_p->info); | |
bea2295f | 652 | |
8eda114a JT |
653 | if(!EmptyString(target_p->certfp)) |
654 | sendto_one(client_p, ":%s ENCAP * CERTFP :%s", | |
655 | use_id(target_p), target_p->certfp); | |
656 | ||
bea2295f | 657 | if(!IsCapable(client_p, CAP_EUID)) |
212380e3 AC |
658 | { |
659 | if(IsDynSpoof(target_p)) | |
660 | sendto_one(client_p, ":%s ENCAP * REALHOST %s", | |
661 | use_id(target_p), target_p->orighost); | |
662 | if(!EmptyString(target_p->user->suser)) | |
663 | sendto_one(client_p, ":%s ENCAP * LOGIN %s", | |
664 | use_id(target_p), target_p->user->suser); | |
665 | } | |
666 | ||
c127b45b | 667 | if(ConfigFileEntry.burst_away && !EmptyString(target_p->user->away)) |
212380e3 AC |
668 | sendto_one(client_p, ":%s AWAY :%s", |
669 | use_id(target_p), | |
c127b45b | 670 | target_p->user->away); |
212380e3 AC |
671 | |
672 | hclientinfo.target = target_p; | |
673 | call_hook(h_burst_client, &hclientinfo); | |
674 | } | |
675 | ||
5cefa1d6 | 676 | RB_DLINK_FOREACH(ptr, global_channel_list.head) |
212380e3 AC |
677 | { |
678 | chptr = ptr->data; | |
679 | ||
680 | if(*chptr->chname != '#') | |
681 | continue; | |
682 | ||
5203cba5 | 683 | cur_len = mlen = sprintf(buf, ":%s SJOIN %ld %s %s :", me.id, |
212380e3 AC |
684 | (long) chptr->channelts, chptr->chname, |
685 | channel_modes(chptr, client_p)); | |
686 | ||
687 | t = buf + mlen; | |
688 | ||
5cefa1d6 | 689 | RB_DLINK_FOREACH(uptr, chptr->members.head) |
212380e3 AC |
690 | { |
691 | msptr = uptr->data; | |
692 | ||
693 | tlen = strlen(use_id(msptr->client_p)) + 1; | |
694 | if(is_chanop(msptr)) | |
695 | tlen++; | |
696 | if(is_voiced(msptr)) | |
697 | tlen++; | |
698 | ||
acd941bf | 699 | if(cur_len + tlen >= BUFSIZE - 3) |
212380e3 AC |
700 | { |
701 | *(t-1) = '\0'; | |
702 | sendto_one(client_p, "%s", buf); | |
703 | cur_len = mlen; | |
704 | t = buf + mlen; | |
705 | } | |
706 | ||
5203cba5 | 707 | sprintf(t, "%s%s ", find_channel_status(msptr, 1), |
212380e3 AC |
708 | use_id(msptr->client_p)); |
709 | ||
710 | cur_len += tlen; | |
711 | t += tlen; | |
712 | } | |
713 | ||
330fc5c1 | 714 | if (rb_dlink_list_length(&chptr->members) > 0) |
212380e3 AC |
715 | { |
716 | /* remove trailing space */ | |
717 | *(t-1) = '\0'; | |
718 | } | |
719 | sendto_one(client_p, "%s", buf); | |
720 | ||
330fc5c1 | 721 | if(rb_dlink_list_length(&chptr->banlist) > 0) |
212380e3 AC |
722 | burst_modes_TS6(client_p, chptr, &chptr->banlist, 'b'); |
723 | ||
724 | if(IsCapable(client_p, CAP_EX) && | |
330fc5c1 | 725 | rb_dlink_list_length(&chptr->exceptlist) > 0) |
212380e3 AC |
726 | burst_modes_TS6(client_p, chptr, &chptr->exceptlist, 'e'); |
727 | ||
728 | if(IsCapable(client_p, CAP_IE) && | |
330fc5c1 | 729 | rb_dlink_list_length(&chptr->invexlist) > 0) |
212380e3 AC |
730 | burst_modes_TS6(client_p, chptr, &chptr->invexlist, 'I'); |
731 | ||
330fc5c1 | 732 | if(rb_dlink_list_length(&chptr->quietlist) > 0) |
212380e3 AC |
733 | burst_modes_TS6(client_p, chptr, &chptr->quietlist, 'q'); |
734 | ||
735 | if(IsCapable(client_p, CAP_TB) && chptr->topic != NULL) | |
736 | sendto_one(client_p, ":%s TB %s %ld %s%s:%s", | |
737 | me.id, chptr->chname, (long) chptr->topic_time, | |
738 | ConfigChannel.burst_topicwho ? chptr->topic_info : "", | |
739 | ConfigChannel.burst_topicwho ? " " : "", | |
740 | chptr->topic); | |
741 | ||
084ecbe0 | 742 | if(IsCapable(client_p, CAP_MLOCK)) |
6b8db2da | 743 | sendto_one(client_p, ":%s MLOCK %ld %s :%s", |
084ecbe0 | 744 | me.id, (long) chptr->channelts, chptr->chname, |
6b8db2da | 745 | EmptyString(chptr->mode_lock) ? "" : chptr->mode_lock); |
084ecbe0 | 746 | |
212380e3 AC |
747 | hchaninfo.chptr = chptr; |
748 | call_hook(h_burst_channel, &hchaninfo); | |
749 | } | |
750 | ||
751 | hclientinfo.target = NULL; | |
752 | call_hook(h_burst_finished, &hclientinfo); | |
753 | } | |
754 | ||
755 | /* | |
756 | * show_capabilities - show current server capabilities | |
757 | * | |
758 | * inputs - pointer to an struct Client | |
759 | * output - pointer to static string | |
760 | * side effects - build up string representing capabilities of server listed | |
761 | */ | |
762 | const char * | |
763 | show_capabilities(struct Client *target_p) | |
764 | { | |
acd941bf | 765 | static char msgbuf[BUFSIZE]; |
346fba92 AC |
766 | |
767 | *msgbuf = '\0'; | |
212380e3 | 768 | |
f4a759c5 VY |
769 | if(has_id(target_p)) |
770 | rb_strlcpy(msgbuf, " TS6", sizeof(msgbuf)); | |
f4a759c5 VY |
771 | |
772 | if(IsSSL(target_p)) | |
773 | rb_strlcat(msgbuf, " SSL", sizeof(msgbuf)); | |
212380e3 AC |
774 | |
775 | if(!IsServer(target_p) || !target_p->serv->caps) /* short circuit if no caps */ | |
f4a759c5 | 776 | return msgbuf + 1; |
212380e3 | 777 | |
89fd463e | 778 | rb_strlcat(msgbuf, " ", sizeof(msgbuf)); |
346fba92 | 779 | rb_strlcat(msgbuf, capability_index_list(serv_capindex, target_p->serv->caps), sizeof(msgbuf)); |
212380e3 | 780 | |
f4a759c5 | 781 | return msgbuf + 1; |
212380e3 AC |
782 | } |
783 | ||
784 | /* | |
785 | * server_estab | |
786 | * | |
787 | * inputs - pointer to a struct Client | |
788 | * output - | |
789 | * side effects - | |
790 | */ | |
791 | int | |
792 | server_estab(struct Client *client_p) | |
793 | { | |
794 | struct Client *target_p; | |
795 | struct server_conf *server_p; | |
796 | hook_data_client hdata; | |
797 | char *host; | |
330fc5c1 | 798 | rb_dlink_node *ptr; |
6c528b8e | 799 | char note[HOSTLEN + 15]; |
212380e3 AC |
800 | |
801 | s_assert(NULL != client_p); | |
802 | if(client_p == NULL) | |
803 | return -1; | |
212380e3 AC |
804 | |
805 | host = client_p->name; | |
806 | ||
807 | if((server_p = client_p->localClient->att_sconf) == NULL) | |
808 | { | |
809 | /* This shouldn't happen, better tell the ops... -A1kmm */ | |
810 | sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL, | |
811 | "Warning: Lost connect{} block for server %s!", host); | |
812 | return exit_client(client_p, client_p, client_p, "Lost connect{} block!"); | |
813 | } | |
814 | ||
815 | /* We shouldn't have to check this, it should already done before | |
816 | * server_estab is called. -A1kmm | |
817 | */ | |
818 | if(client_p->localClient->passwd) | |
819 | { | |
820 | memset(client_p->localClient->passwd, 0, strlen(client_p->localClient->passwd)); | |
637c4932 | 821 | rb_free(client_p->localClient->passwd); |
212380e3 AC |
822 | client_p->localClient->passwd = NULL; |
823 | } | |
824 | ||
825 | /* Its got identd , since its a server */ | |
826 | SetGotId(client_p); | |
827 | ||
212380e3 AC |
828 | if(IsUnknown(client_p)) |
829 | { | |
ff0cc1e6 | 830 | /* the server may be linking based on certificate fingerprint now. --nenolod */ |
55abcbb2 | 831 | sendto_one(client_p, "PASS %s TS %d :%s", |
ff0cc1e6 | 832 | EmptyString(server_p->spasswd) ? "*" : server_p->spasswd, TS_CURRENT, me.id); |
212380e3 AC |
833 | |
834 | /* pass info to new server */ | |
ffedad8d | 835 | send_capabilities(client_p, default_server_capabs | CAP_MASK |
212380e3 AC |
836 | | (ServerConfCompressed(server_p) ? CAP_ZIP_SUPPORTED : 0) |
837 | | (ServerConfTb(server_p) ? CAP_TB : 0)); | |
838 | ||
839 | sendto_one(client_p, "SERVER %s 1 :%s%s", | |
840 | me.name, | |
841 | ConfigServerHide.hidden ? "(H) " : "", | |
842 | (me.info[0]) ? (me.info) : "IRCers United"); | |
843 | } | |
844 | ||
6c528b8e | 845 | if(!rb_set_buffers(client_p->localClient->F, READBUF_SIZE)) |
825ddf13 | 846 | ilog_error("rb_set_buffers failed for server"); |
212380e3 | 847 | |
c6d72037 | 848 | /* Enable compression now */ |
f4a759c5 VY |
849 | if(IsCapable(client_p, CAP_ZIP)) |
850 | { | |
851 | start_zlib_session(client_p); | |
852 | } | |
212380e3 AC |
853 | |
854 | client_p->servptr = &me; | |
855 | ||
856 | if(IsAnyDead(client_p)) | |
857 | return CLIENT_EXITED; | |
858 | ||
f41f7997 SA |
859 | sendto_one(client_p, "SVINFO %d %d 0 :%ld", TS_CURRENT, TS_MIN, (long int)rb_current_time()); |
860 | ||
330fc5c1 | 861 | rb_dlinkAdd(client_p, &client_p->lnode, &me.serv->servers); |
330fc5c1 AC |
862 | rb_dlinkMoveNode(&client_p->localClient->tnode, &unknown_list, &serv_list); |
863 | rb_dlinkAddTailAlloc(client_p, &global_serv_list); | |
212380e3 AC |
864 | |
865 | if(has_id(client_p)) | |
866 | add_to_id_hash(client_p->id, client_p); | |
867 | ||
868 | add_to_client_hash(client_p->name, client_p); | |
869 | /* doesnt duplicate client_p->serv if allocated this struct already */ | |
870 | make_server(client_p); | |
6c1e15a4 | 871 | SetServer(client_p); |
212380e3 AC |
872 | |
873 | client_p->serv->caps = client_p->localClient->caps; | |
874 | ||
875 | if(client_p->localClient->fullcaps) | |
876 | { | |
47a03750 | 877 | client_p->serv->fullcaps = rb_strdup(client_p->localClient->fullcaps); |
637c4932 | 878 | rb_free(client_p->localClient->fullcaps); |
212380e3 AC |
879 | client_p->localClient->fullcaps = NULL; |
880 | } | |
881 | ||
994544c2 | 882 | client_p->serv->nameinfo = scache_connect(client_p->name, client_p->info, IsHidden(client_p)); |
e3354945 | 883 | client_p->localClient->firsttime = rb_current_time(); |
212380e3 AC |
884 | /* fixing eob timings.. -gnp */ |
885 | ||
330fc5c1 | 886 | if((rb_dlink_list_length(&lclient_list) + rb_dlink_list_length(&serv_list)) > |
2f15f871 | 887 | (unsigned long)MaxConnectionCount) |
55abcbb2 | 888 | MaxConnectionCount = rb_dlink_list_length(&lclient_list) + |
330fc5c1 | 889 | rb_dlink_list_length(&serv_list); |
2f15f871 | 890 | |
212380e3 AC |
891 | /* Show the real host/IP to admins */ |
892 | sendto_realops_snomask(SNO_GENERAL, L_ALL, | |
893 | "Link with %s established: (%s) link", | |
b3ebc7ab | 894 | client_p->name, |
212380e3 AC |
895 | show_capabilities(client_p)); |
896 | ||
897 | ilog(L_SERVER, "Link with %s established: (%s) link", | |
898 | log_client_name(client_p, SHOW_IP), show_capabilities(client_p)); | |
899 | ||
900 | hdata.client = &me; | |
901 | hdata.target = client_p; | |
902 | call_hook(h_server_introduced, &hdata); | |
903 | ||
5203cba5 | 904 | snprintf(note, sizeof(note), "Server: %s", client_p->name); |
c6d72037 | 905 | rb_note(client_p->localClient->F, note); |
212380e3 AC |
906 | |
907 | /* | |
908 | ** Old sendto_serv_but_one() call removed because we now | |
909 | ** need to send different names to different servers | |
910 | ** (domain name matching) Send new server to other servers. | |
911 | */ | |
5cefa1d6 | 912 | RB_DLINK_FOREACH(ptr, serv_list.head) |
212380e3 AC |
913 | { |
914 | target_p = ptr->data; | |
915 | ||
916 | if(target_p == client_p) | |
917 | continue; | |
918 | ||
087555a0 AC |
919 | if(target_p->localClient->att_sconf != NULL && ServerConfNoExport(target_p->localClient->att_sconf)) |
920 | continue; | |
921 | ||
212380e3 AC |
922 | if(has_id(target_p) && has_id(client_p)) |
923 | { | |
924 | sendto_one(target_p, ":%s SID %s 2 %s :%s%s", | |
925 | me.id, client_p->name, client_p->id, | |
926 | IsHidden(client_p) ? "(H) " : "", client_p->info); | |
927 | ||
ce4fa447 | 928 | if(!EmptyString(client_p->serv->fullcaps)) |
212380e3 AC |
929 | sendto_one(target_p, ":%s ENCAP * GCAP :%s", |
930 | client_p->id, client_p->serv->fullcaps); | |
931 | } | |
932 | else | |
933 | { | |
934 | sendto_one(target_p, ":%s SERVER %s 2 :%s%s", | |
935 | me.name, client_p->name, | |
936 | IsHidden(client_p) ? "(H) " : "", client_p->info); | |
937 | ||
ce4fa447 | 938 | if(!EmptyString(client_p->serv->fullcaps)) |
212380e3 AC |
939 | sendto_one(target_p, ":%s ENCAP * GCAP :%s", |
940 | client_p->name, client_p->serv->fullcaps); | |
941 | } | |
942 | } | |
943 | ||
944 | /* | |
945 | ** Pass on my client information to the new server | |
946 | ** | |
947 | ** First, pass only servers (idea is that if the link gets | |
948 | ** cancelled beacause the server was already there, | |
949 | ** there are no NICK's to be cancelled...). Of course, | |
950 | ** if cancellation occurs, all this info is sent anyway, | |
951 | ** and I guess the link dies when a read is attempted...? --msa | |
55abcbb2 | 952 | ** |
212380e3 AC |
953 | ** Note: Link cancellation to occur at this point means |
954 | ** that at least two servers from my fragment are building | |
955 | ** up connection this other fragment at the same time, it's | |
956 | ** a race condition, not the normal way of operation... | |
957 | ** | |
958 | ** ALSO NOTE: using the get_client_name for server names-- | |
959 | ** see previous *WARNING*!!! (Also, original inpath | |
960 | ** is destroyed...) | |
961 | */ | |
5cefa1d6 | 962 | RB_DLINK_FOREACH(ptr, global_serv_list.head) |
212380e3 AC |
963 | { |
964 | target_p = ptr->data; | |
965 | ||
966 | /* target_p->from == target_p for target_p == client_p */ | |
967 | if(IsMe(target_p) || target_p->from == client_p) | |
968 | continue; | |
969 | ||
087555a0 AC |
970 | /* don't distribute downstream leaves of servers that are no-export */ |
971 | if(MyClient(target_p->from) && target_p->from->localClient->att_sconf != NULL && ServerConfNoExport(target_p->from->localClient->att_sconf)) | |
972 | continue; | |
973 | ||
212380e3 AC |
974 | /* presumption, if target has an id, so does its uplink */ |
975 | if(has_id(client_p) && has_id(target_p)) | |
976 | sendto_one(client_p, ":%s SID %s %d %s :%s%s", | |
66c8fdd2 | 977 | target_p->servptr->id, target_p->name, |
212380e3 AC |
978 | target_p->hopcount + 1, target_p->id, |
979 | IsHidden(target_p) ? "(H) " : "", target_p->info); | |
980 | else | |
981 | sendto_one(client_p, ":%s SERVER %s %d :%s%s", | |
66c8fdd2 | 982 | target_p->servptr->name, |
212380e3 AC |
983 | target_p->name, target_p->hopcount + 1, |
984 | IsHidden(target_p) ? "(H) " : "", target_p->info); | |
985 | ||
ce4fa447 | 986 | if(!EmptyString(target_p->serv->fullcaps)) |
212380e3 AC |
987 | sendto_one(client_p, ":%s ENCAP * GCAP :%s", |
988 | get_id(target_p, client_p), | |
989 | target_p->serv->fullcaps); | |
990 | } | |
991 | ||
431a1a27 JT |
992 | if(IsCapable(client_p, CAP_BAN)) |
993 | burst_ban(client_p); | |
994 | ||
7bb8c655 | 995 | burst_TS6(client_p); |
212380e3 AC |
996 | |
997 | /* Always send a PING after connect burst is done */ | |
998 | sendto_one(client_p, "PING :%s", get_id(&me, client_p)); | |
999 | ||
1000 | free_pre_client(client_p); | |
1001 | ||
0bd120ed | 1002 | send_pop_queue(client_p); |
212380e3 AC |
1003 | |
1004 | return 0; | |
212380e3 AC |
1005 | } |
1006 | ||
1007 | /* | |
1008 | * New server connection code | |
1009 | * Based upon the stuff floating about in s_bsd.c | |
1010 | * -- adrian | |
1011 | */ | |
1012 | ||
1013 | /* | |
1014 | * serv_connect() - initiate a server connection | |
1015 | * | |
5203cba5 | 1016 | * inputs - pointer to conf |
212380e3 AC |
1017 | * - pointer to client doing the connet |
1018 | * output - | |
1019 | * side effects - | |
1020 | * | |
1021 | * This code initiates a connection to a server. It first checks to make | |
1022 | * sure the given server exists. If this is the case, it creates a socket, | |
1023 | * creates a client, saves the socket information in the client, and | |
b2f0da88 | 1024 | * initiates a connection to the server through rb_connect_tcp(). The |
212380e3 AC |
1025 | * completion of this goes through serv_completed_connection(). |
1026 | * | |
1027 | * We return 1 if the connection is attempted, since we don't know whether | |
1028 | * it suceeded or not, and 0 if it fails in here somewhere. | |
1029 | */ | |
1030 | int | |
1031 | serv_connect(struct server_conf *server_p, struct Client *by) | |
1032 | { | |
1033 | struct Client *client_p; | |
6003ce76 SA |
1034 | struct sockaddr_storage sa_connect[2]; |
1035 | struct sockaddr_storage sa_bind[ARRAY_SIZE(sa_connect)]; | |
6c528b8e | 1036 | char note[HOSTLEN + 10]; |
1d02144f | 1037 | rb_fde_t *F; |
212380e3 AC |
1038 | |
1039 | s_assert(server_p != NULL); | |
1040 | if(server_p == NULL) | |
1041 | return 0; | |
1042 | ||
6003ce76 SA |
1043 | for (int i = 0; i < ARRAY_SIZE(sa_connect); i++) { |
1044 | SET_SS_FAMILY(&sa_connect[i], AF_UNSPEC); | |
1045 | SET_SS_FAMILY(&sa_bind[i], AF_UNSPEC); | |
1046 | } | |
86e1de17 | 1047 | |
4ce1cac4 | 1048 | if(server_p->aftype == AF_UNSPEC |
d4214e94 SA |
1049 | && GET_SS_FAMILY(&server_p->connect4) == AF_INET |
1050 | && GET_SS_FAMILY(&server_p->connect6) == AF_INET6) | |
1051 | { | |
1052 | if(rand() % 2 == 0) | |
1053 | { | |
6003ce76 SA |
1054 | sa_connect[0] = server_p->connect4; |
1055 | sa_connect[1] = server_p->connect6; | |
1056 | sa_bind[0] = server_p->bind4; | |
1057 | sa_bind[1] = server_p->bind6; | |
d4214e94 SA |
1058 | } |
1059 | else | |
1060 | { | |
6003ce76 SA |
1061 | sa_connect[0] = server_p->connect6; |
1062 | sa_connect[1] = server_p->connect4; | |
1063 | sa_bind[0] = server_p->bind6; | |
1064 | sa_bind[1] = server_p->bind4; | |
d4214e94 SA |
1065 | } |
1066 | } | |
1067 | else if(server_p->aftype == AF_INET || GET_SS_FAMILY(&server_p->connect4) == AF_INET) | |
d4214e94 | 1068 | { |
6003ce76 SA |
1069 | sa_connect[0] = server_p->connect4; |
1070 | sa_bind[0] = server_p->bind4; | |
d4214e94 | 1071 | } |
d4214e94 SA |
1072 | else if(server_p->aftype == AF_INET6 || GET_SS_FAMILY(&server_p->connect6) == AF_INET6) |
1073 | { | |
6003ce76 SA |
1074 | sa_connect[0] = server_p->connect6; |
1075 | sa_bind[0] = server_p->bind6; | |
d4214e94 | 1076 | } |
d4214e94 | 1077 | |
1d02144f | 1078 | /* log */ |
6003ce76 SA |
1079 | #ifdef HAVE_LIBSCTP |
1080 | if (ServerConfSCTP(server_p) && GET_SS_FAMILY(&sa_connect[1]) != AF_UNSPEC) { | |
1081 | char buf2[HOSTLEN + 1]; | |
1082 | ||
1083 | buf[0] = 0; | |
1084 | buf2[0] = 0; | |
1085 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[0], buf, sizeof(buf)); | |
1086 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[1], buf2, sizeof(buf2)); | |
1087 | ilog(L_SERVER, "Connect to *[%s] @%s&%s", server_p->name, buf, buf2); | |
1088 | } else { | |
1089 | #else | |
1090 | { | |
1091 | #endif | |
1092 | buf[0] = 0; | |
1093 | rb_inet_ntop_sock((struct sockaddr *)&sa_connect[0], buf, sizeof(buf)); | |
1094 | ilog(L_SERVER, "Connect to *[%s] @%s", server_p->name, buf); | |
1095 | } | |
1d02144f | 1096 | |
212380e3 AC |
1097 | /* |
1098 | * Make sure this server isn't already connected | |
1099 | */ | |
1100 | if((client_p = find_server(NULL, server_p->name))) | |
1101 | { | |
1102 | sendto_realops_snomask(SNO_GENERAL, L_ALL, | |
1103 | "Server %s already present from %s", | |
b3ebc7ab | 1104 | server_p->name, client_p->name); |
212380e3 AC |
1105 | if(by && IsPerson(by) && !MyClient(by)) |
1106 | sendto_one_notice(by, ":Server %s already present from %s", | |
b3ebc7ab | 1107 | server_p->name, client_p->name); |
212380e3 AC |
1108 | return 0; |
1109 | } | |
1110 | ||
e3cea4d8 SA |
1111 | if (CurrUsers(server_p->class) >= MaxUsers(server_p->class)) { |
1112 | sendto_realops_snomask(SNO_GENERAL, L_ALL, | |
1113 | "No more connections allowed in class \"%s\" for server %s", | |
1114 | server_p->class->class_name, server_p->name); | |
1115 | if(by && IsPerson(by) && !MyClient(by)) | |
1116 | sendto_one_notice(by, ":No more connections allowed in class \"%s\" for server %s", | |
1117 | server_p->class->class_name, server_p->name); | |
1118 | return 0; | |
1119 | } | |
1120 | ||
212380e3 | 1121 | /* create a socket for the server connection */ |
6003ce76 | 1122 | if(GET_SS_FAMILY(&sa_connect[0]) == AF_UNSPEC) { |
d4214e94 SA |
1123 | ilog_error("unspecified socket address family"); |
1124 | return 0; | |
6003ce76 SA |
1125 | #ifdef HAVE_LIBSCTP |
1126 | } else if (ServerConfSCTP(server_p)) { | |
1127 | if ((F = rb_socket(AF_INET6, SOCK_STREAM, IPPROTO_SCTP, NULL)) == NULL) { | |
1128 | ilog_error("opening a stream socket"); | |
1129 | return 0; | |
1130 | } | |
1131 | #endif | |
1132 | } else if ((F = rb_socket(GET_SS_FAMILY(&sa_connect[0]), SOCK_STREAM, IPPROTO_TCP, NULL)) == NULL) { | |
825ddf13 | 1133 | ilog_error("opening a stream socket"); |
212380e3 AC |
1134 | return 0; |
1135 | } | |
1136 | ||
1d02144f | 1137 | /* servernames are always guaranteed under HOSTLEN chars */ |
5203cba5 | 1138 | snprintf(note, sizeof(note), "Server: %s", server_p->name); |
6c528b8e | 1139 | rb_note(F, note); |
212380e3 AC |
1140 | |
1141 | /* Create a local client */ | |
1142 | client_p = make_client(NULL); | |
1143 | ||
1d02144f | 1144 | /* Copy in the server, hostname, fd */ |
f427c8b0 | 1145 | rb_strlcpy(client_p->name, server_p->name, sizeof(client_p->name)); |
d4214e94 SA |
1146 | if(server_p->connect_host) |
1147 | rb_strlcpy(client_p->host, server_p->connect_host, sizeof(client_p->host)); | |
1148 | else | |
1149 | rb_strlcpy(client_p->host, buf, sizeof(client_p->host)); | |
1d02144f | 1150 | rb_strlcpy(client_p->sockhost, buf, sizeof(client_p->sockhost)); |
6c528b8e | 1151 | client_p->localClient->F = F; |
1d02144f | 1152 | /* shove the port number into the sockaddr */ |
6003ce76 SA |
1153 | SET_SS_PORT(&sa_connect[0], htons(server_p->port)); |
1154 | SET_SS_PORT(&sa_connect[1], htons(server_p->port)); | |
212380e3 AC |
1155 | |
1156 | /* | |
1157 | * Set up the initial server evilness, ripped straight from | |
1158 | * connect_server(), so don't blame me for it being evil. | |
1159 | * -- adrian | |
1160 | */ | |
1161 | ||
6c528b8e | 1162 | if(!rb_set_buffers(client_p->localClient->F, READBUF_SIZE)) |
212380e3 | 1163 | { |
825ddf13 | 1164 | ilog_error("setting the buffer size for a server connection"); |
212380e3 AC |
1165 | } |
1166 | ||
1167 | /* | |
1168 | * Attach config entries to client here rather than in | |
1169 | * serv_connect_callback(). This to avoid null pointer references. | |
1170 | */ | |
1171 | attach_server_conf(client_p, server_p); | |
1172 | ||
1173 | /* | |
1174 | * at this point we have a connection in progress and C/N lines | |
1175 | * attached to the client, the socket info should be saved in the | |
1176 | * client and it should either be resolved or have a valid address. | |
1177 | * | |
1178 | * The socket has been connected or connect is in progress. | |
1179 | */ | |
1180 | make_server(client_p); | |
1d02144f | 1181 | if(by && IsClient(by)) |
4d5a902f | 1182 | rb_strlcpy(client_p->serv->by, by->name, sizeof(client_p->serv->by)); |
212380e3 | 1183 | else |
1d02144f AC |
1184 | strcpy(client_p->serv->by, "AutoConn."); |
1185 | ||
212380e3 | 1186 | SetConnecting(client_p); |
330fc5c1 | 1187 | rb_dlinkAddTail(client_p, &client_p->node, &global_client_list); |
212380e3 | 1188 | |
6003ce76 SA |
1189 | for (int i = 0; i < ARRAY_SIZE(sa_connect); i++) { |
1190 | if (GET_SS_FAMILY(&sa_bind[i]) == AF_UNSPEC) { | |
1191 | if (GET_SS_FAMILY(&sa_connect[i]) == GET_SS_FAMILY(&ServerInfo.bind4)) | |
1192 | sa_bind[i] = ServerInfo.bind4; | |
1193 | if (GET_SS_FAMILY(&sa_connect[i]) == GET_SS_FAMILY(&ServerInfo.bind6)) | |
1194 | sa_bind[i] = ServerInfo.bind6; | |
1195 | } | |
abe5dd20 | 1196 | } |
1d02144f | 1197 | |
6003ce76 SA |
1198 | #ifdef HAVE_LIBSCTP |
1199 | if (ServerConfSCTP(server_p)) { | |
1200 | rb_connect_sctp(client_p->localClient->F, | |
1201 | sa_connect, ARRAY_SIZE(sa_connect), sa_bind, ARRAY_SIZE(sa_bind), | |
1202 | ServerConfSSL(server_p) ? serv_connect_ssl_callback : serv_connect_callback, | |
1203 | client_p, ConfigFileEntry.connect_timeout); | |
1204 | } else { | |
1205 | #else | |
1206 | { | |
1207 | #endif | |
1208 | rb_connect_tcp(client_p->localClient->F, | |
1209 | (struct sockaddr *)&sa_connect[0], | |
1210 | GET_SS_FAMILY(&sa_bind[0]) == AF_UNSPEC ? NULL : (struct sockaddr *)&sa_bind[0], | |
1211 | ServerConfSSL(server_p) ? serv_connect_ssl_callback : serv_connect_callback, | |
1212 | client_p, ConfigFileEntry.connect_timeout); | |
1213 | } | |
1d02144f | 1214 | return 1; |
212380e3 AC |
1215 | } |
1216 | ||
f4a759c5 VY |
1217 | static void |
1218 | serv_connect_ssl_callback(rb_fde_t *F, int status, void *data) | |
1219 | { | |
1220 | struct Client *client_p = data; | |
1221 | rb_fde_t *xF[2]; | |
9ec51326 | 1222 | rb_connect_sockaddr(F, (struct sockaddr *)&client_p->localClient->ip, sizeof(client_p->localClient->ip)); |
f4a759c5 VY |
1223 | if(status != RB_OK) |
1224 | { | |
9ec51326 JT |
1225 | /* Print error message, just like non-SSL. */ |
1226 | serv_connect_callback(F, status, data); | |
f4a759c5 VY |
1227 | return; |
1228 | } | |
eda22d87 JT |
1229 | if(rb_socketpair(AF_UNIX, SOCK_STREAM, 0, &xF[0], &xF[1], "Outgoing ssld connection") == -1) |
1230 | { | |
1231 | ilog_error("rb_socketpair failed for server"); | |
1232 | serv_connect_callback(F, RB_ERROR, data); | |
1233 | return; | |
55abcbb2 | 1234 | |
eda22d87 | 1235 | } |
f4a759c5 | 1236 | client_p->localClient->F = xF[0]; |
53789fdd | 1237 | client_p->localClient->ssl_callback = serv_connect_ssl_open_callback; |
f4a759c5 | 1238 | |
de7cf7e0 | 1239 | client_p->localClient->ssl_ctl = start_ssld_connect(F, xF[1], connid_get(client_p)); |
5e270e7d SA |
1240 | if(!client_p->localClient->ssl_ctl) |
1241 | { | |
1242 | serv_connect_callback(client_p->localClient->F, RB_ERROR, data); | |
1243 | return; | |
1244 | } | |
f4a759c5 | 1245 | SetSSL(client_p); |
c6d72037 VY |
1246 | } |
1247 | ||
53789fdd SA |
1248 | static int |
1249 | serv_connect_ssl_open_callback(struct Client *client_p, int status) | |
1250 | { | |
1251 | serv_connect_callback(client_p->localClient->F, status, client_p); | |
1252 | return 1; /* suppress default exit_client handler for status != RB_OK */ | |
1253 | } | |
1254 | ||
212380e3 AC |
1255 | /* |
1256 | * serv_connect_callback() - complete a server connection. | |
55abcbb2 | 1257 | * |
212380e3 AC |
1258 | * This routine is called after the server connection attempt has |
1259 | * completed. If unsucessful, an error is sent to ops and the client | |
1260 | * is closed. If sucessful, it goes through the initialisation/check | |
1261 | * procedures, the capabilities are sent, and the socket is then | |
1262 | * marked for reading. | |
1263 | */ | |
1264 | static void | |
6c528b8e | 1265 | serv_connect_callback(rb_fde_t *F, int status, void *data) |
212380e3 AC |
1266 | { |
1267 | struct Client *client_p = data; | |
1268 | struct server_conf *server_p; | |
1269 | char *errstr; | |
1270 | ||
1271 | /* First, make sure its a real client! */ | |
1272 | s_assert(client_p != NULL); | |
6c528b8e | 1273 | s_assert(client_p->localClient->F == F); |
212380e3 AC |
1274 | |
1275 | if(client_p == NULL) | |
1276 | return; | |
1277 | ||
1278 | /* while we were waiting for the callback, its possible this already | |
1279 | * linked in.. --fl | |
1280 | */ | |
1281 | if(find_server(NULL, client_p->name) != NULL) | |
1282 | { | |
1283 | exit_client(client_p, client_p, &me, "Server Exists"); | |
1284 | return; | |
1285 | } | |
1286 | ||
f4a759c5 | 1287 | if(client_p->localClient->ssl_ctl == NULL) |
c6d72037 VY |
1288 | rb_connect_sockaddr(F, (struct sockaddr *)&client_p->localClient->ip, sizeof(client_p->localClient->ip)); |
1289 | ||
212380e3 | 1290 | /* Check the status */ |
6c528b8e | 1291 | if(status != RB_OK) |
212380e3 AC |
1292 | { |
1293 | /* COMM_ERR_TIMEOUT wont have an errno associated with it, | |
1294 | * the others will.. --fl | |
1295 | */ | |
4fbb7362 | 1296 | if(status == RB_ERR_TIMEOUT || status == RB_ERROR_SSL) |
212380e3 AC |
1297 | { |
1298 | sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL, | |
1299 | "Error connecting to %s[%s]: %s", | |
55abcbb2 | 1300 | client_p->name, |
212380e3 | 1301 | "255.255.255.255", |
b2f0da88 | 1302 | rb_errstr(status)); |
212380e3 AC |
1303 | ilog(L_SERVER, "Error connecting to %s[%s]: %s", |
1304 | client_p->name, client_p->sockhost, | |
b2f0da88 | 1305 | rb_errstr(status)); |
212380e3 AC |
1306 | } |
1307 | else | |
1308 | { | |
6c528b8e | 1309 | errstr = strerror(rb_get_sockerr(F)); |
212380e3 AC |
1310 | sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL, |
1311 | "Error connecting to %s[%s]: %s (%s)", | |
1312 | client_p->name, | |
212380e3 | 1313 | "255.255.255.255", |
b2f0da88 | 1314 | rb_errstr(status), errstr); |
212380e3 AC |
1315 | ilog(L_SERVER, "Error connecting to %s[%s]: %s (%s)", |
1316 | client_p->name, client_p->sockhost, | |
b2f0da88 | 1317 | rb_errstr(status), errstr); |
212380e3 AC |
1318 | } |
1319 | ||
b2f0da88 | 1320 | exit_client(client_p, client_p, &me, rb_errstr(status)); |
212380e3 AC |
1321 | return; |
1322 | } | |
1323 | ||
1324 | /* COMM_OK, so continue the connection procedure */ | |
1325 | /* Get the C/N lines */ | |
1326 | if((server_p = client_p->localClient->att_sconf) == NULL) | |
1327 | { | |
1328 | sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL, "Lost connect{} block for %s", | |
b3ebc7ab | 1329 | client_p->name); |
212380e3 AC |
1330 | exit_client(client_p, client_p, &me, "Lost connect{} block"); |
1331 | return; | |
1332 | } | |
1333 | ||
65f43a4f SA |
1334 | if(server_p->certfp && (!client_p->certfp || rb_strcasecmp(server_p->certfp, client_p->certfp) != 0)) |
1335 | { | |
1336 | sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL, | |
1337 | "Connection to %s has invalid certificate fingerprint %s", | |
1338 | client_p->name, client_p->certfp); | |
1339 | ilog(L_SERVER, "Access denied, invalid certificate fingerprint %s from %s", | |
1340 | client_p->certfp, log_client_name(client_p, SHOW_IP)); | |
1341 | ||
1342 | exit_client(client_p, client_p, &me, "Invalid fingerprint."); | |
1343 | return; | |
1344 | } | |
1345 | ||
212380e3 AC |
1346 | /* Next, send the initial handshake */ |
1347 | SetHandshake(client_p); | |
1348 | ||
ff0cc1e6 | 1349 | /* the server may be linking based on certificate fingerprint now. --nenolod */ |
55abcbb2 | 1350 | sendto_one(client_p, "PASS %s TS %d :%s", |
ff0cc1e6 | 1351 | EmptyString(server_p->spasswd) ? "*" : server_p->spasswd, TS_CURRENT, me.id); |
212380e3 AC |
1352 | |
1353 | /* pass my info to the new server */ | |
ffedad8d | 1354 | send_capabilities(client_p, default_server_capabs | CAP_MASK |
212380e3 AC |
1355 | | (ServerConfCompressed(server_p) ? CAP_ZIP_SUPPORTED : 0) |
1356 | | (ServerConfTb(server_p) ? CAP_TB : 0)); | |
1357 | ||
1358 | sendto_one(client_p, "SERVER %s 1 :%s%s", | |
1359 | me.name, | |
1360 | ConfigServerHide.hidden ? "(H) " : "", me.info); | |
1361 | ||
55abcbb2 | 1362 | /* |
212380e3 AC |
1363 | * If we've been marked dead because a send failed, just exit |
1364 | * here now and save everyone the trouble of us ever existing. | |
1365 | */ | |
1366 | if(IsAnyDead(client_p)) | |
1367 | { | |
1368 | sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL, | |
1369 | "%s went dead during handshake", client_p->name); | |
1370 | exit_client(client_p, client_p, &me, "Went dead during handshake"); | |
1371 | return; | |
1372 | } | |
1373 | ||
1374 | /* don't move to serv_list yet -- we haven't sent a burst! */ | |
1375 | ||
1376 | /* If we get here, we're ok, so lets start reading some data */ | |
6c528b8e | 1377 | read_packet(F, client_p); |
212380e3 | 1378 | } |