op public repos

Blame

Date:: Sun Jan 8 14:16:36 2023 UTC
Message:: call realpath() during early startup in gotd's parse.y This ensures that all repositories exist when the process is first started. It will also help to avoid an "rpath" pledge promise in a future gotd which uses a separate session process, by avoiding realpath() calls while starting new processes.
Actions:: History | Blob | Raw File
  1 13b2bc37 2022-10-23 stsp /*
  2 13b2bc37 2022-10-23 stsp  * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
  3 13b2bc37 2022-10-23 stsp  * Copyright (c) 2016-2019, 2020-2021 Tracey Emery <tracey@traceyemery.net>
  4 13b2bc37 2022-10-23 stsp  * Copyright (c) 2004, 2005 Esben Norby <norby@openbsd.org>
  5 13b2bc37 2022-10-23 stsp  * Copyright (c) 2004 Ryan McBride <mcbride@openbsd.org>
  6 13b2bc37 2022-10-23 stsp  * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org>
  7 13b2bc37 2022-10-23 stsp  * Copyright (c) 2001 Markus Friedl.  All rights reserved.
  8 13b2bc37 2022-10-23 stsp  * Copyright (c) 2001 Daniel Hartmeier.  All rights reserved.
  9 13b2bc37 2022-10-23 stsp  * Copyright (c) 2001 Theo de Raadt.  All rights reserved.
 10 13b2bc37 2022-10-23 stsp  *
 11 13b2bc37 2022-10-23 stsp  * Permission to use, copy, modify, and distribute this software for any
 12 13b2bc37 2022-10-23 stsp  * purpose with or without fee is hereby granted, provided that the above
 13 13b2bc37 2022-10-23 stsp  * copyright notice and this permission notice appear in all copies.
 14 13b2bc37 2022-10-23 stsp  *
 15 13b2bc37 2022-10-23 stsp  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 16 13b2bc37 2022-10-23 stsp  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 17 13b2bc37 2022-10-23 stsp  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 18 13b2bc37 2022-10-23 stsp  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 19 13b2bc37 2022-10-23 stsp  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 20 13b2bc37 2022-10-23 stsp  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 21 13b2bc37 2022-10-23 stsp  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 22 13b2bc37 2022-10-23 stsp  */
 23 13b2bc37 2022-10-23 stsp 
 24 13b2bc37 2022-10-23 stsp %{
 25 13b2bc37 2022-10-23 stsp #include <sys/time.h>
 26 13b2bc37 2022-10-23 stsp #include <sys/types.h>
 27 13b2bc37 2022-10-23 stsp #include <sys/queue.h>
 28 13b2bc37 2022-10-23 stsp #include <sys/stat.h>
 29 13b2bc37 2022-10-23 stsp 
 30 13b2bc37 2022-10-23 stsp #include <ctype.h>
 31 13b2bc37 2022-10-23 stsp #include <err.h>
 32 13b2bc37 2022-10-23 stsp #include <errno.h>
 33 13b2bc37 2022-10-23 stsp #include <event.h>
 34 13b2bc37 2022-10-23 stsp #include <imsg.h>
 35 13b2bc37 2022-10-23 stsp #include <limits.h>
 36 13b2bc37 2022-10-23 stsp #include <sha1.h>
 37 13b2bc37 2022-10-23 stsp #include <stdarg.h>
 38 13b2bc37 2022-10-23 stsp #include <stdlib.h>
 39 13b2bc37 2022-10-23 stsp #include <stdio.h>
 40 13b2bc37 2022-10-23 stsp #include <string.h>
 41 13b2bc37 2022-10-23 stsp #include <syslog.h>
 42 13b2bc37 2022-10-23 stsp #include <unistd.h>
 43 13b2bc37 2022-10-23 stsp 
 44 13b2bc37 2022-10-23 stsp #include "got_error.h"
 45 13b2bc37 2022-10-23 stsp #include "got_path.h"
 46 13b2bc37 2022-10-23 stsp 
 47 13b2bc37 2022-10-23 stsp #include "log.h"
 48 13b2bc37 2022-10-23 stsp #include "gotd.h"
 49 40b85cca 2023-01-03 stsp #include "auth.h"
 50 40b85cca 2023-01-03 stsp #include "listen.h"
 51 13b2bc37 2022-10-23 stsp 
 52 13b2bc37 2022-10-23 stsp TAILQ_HEAD(files, file)		 files = TAILQ_HEAD_INITIALIZER(files);
 53 13b2bc37 2022-10-23 stsp static struct file {
 54 13b2bc37 2022-10-23 stsp 	TAILQ_ENTRY(file)	 entry;
 55 13b2bc37 2022-10-23 stsp 	FILE			*stream;
 56 13b2bc37 2022-10-23 stsp 	char			*name;
 57 13b2bc37 2022-10-23 stsp 	int			 lineno;
 58 13b2bc37 2022-10-23 stsp 	int			 errors;
 59 13b2bc37 2022-10-23 stsp } *file;
 60 13b2bc37 2022-10-23 stsp struct file	*newfile(const char *, int);
 61 13b2bc37 2022-10-23 stsp static void	 closefile(struct file *);
 62 13b2bc37 2022-10-23 stsp int		 check_file_secrecy(int, const char *);
 63 13b2bc37 2022-10-23 stsp int		 yyparse(void);
 64 13b2bc37 2022-10-23 stsp int		 yylex(void);
 65 13b2bc37 2022-10-23 stsp int		 yyerror(const char *, ...)
 66 13b2bc37 2022-10-23 stsp     __attribute__((__format__ (printf, 1, 2)))
 67 13b2bc37 2022-10-23 stsp     __attribute__((__nonnull__ (1)));
 68 13b2bc37 2022-10-23 stsp int		 kw_cmp(const void *, const void *);
 69 13b2bc37 2022-10-23 stsp int		 lookup(char *);
 70 13b2bc37 2022-10-23 stsp int		 lgetc(int);
 71 13b2bc37 2022-10-23 stsp int		 lungetc(int);
 72 13b2bc37 2022-10-23 stsp int		 findeol(void);
 73 13b2bc37 2022-10-23 stsp 
 74 13b2bc37 2022-10-23 stsp TAILQ_HEAD(symhead, sym)	 symhead = TAILQ_HEAD_INITIALIZER(symhead);
 75 13b2bc37 2022-10-23 stsp struct sym {
 76 13b2bc37 2022-10-23 stsp 	TAILQ_ENTRY(sym)	 entry;
 77 13b2bc37 2022-10-23 stsp 	int			 used;
 78 13b2bc37 2022-10-23 stsp 	int			 persist;
 79 13b2bc37 2022-10-23 stsp 	char			*nam;
 80 13b2bc37 2022-10-23 stsp 	char			*val;
 81 13b2bc37 2022-10-23 stsp };
 82 13b2bc37 2022-10-23 stsp 
 83 13b2bc37 2022-10-23 stsp int	 symset(const char *, const char *, int);
 84 13b2bc37 2022-10-23 stsp char	*symget(const char *);
 85 13b2bc37 2022-10-23 stsp 
 86 13b2bc37 2022-10-23 stsp static int		 errors;
 87 13b2bc37 2022-10-23 stsp 
 88 13b2bc37 2022-10-23 stsp static struct gotd		*gotd;
 89 13b2bc37 2022-10-23 stsp static struct gotd_repo		*new_repo;
 90 fc89c900 2023-01-03 op static int			 conf_limit_user_connections(const char *, int);
 91 13b2bc37 2022-10-23 stsp static struct gotd_repo		*conf_new_repo(const char *);
 92 533abaaa 2022-11-18 op static void			 conf_new_access_rule(struct gotd_repo *,
 93 533abaaa 2022-11-18 op 				    enum gotd_access, int, char *);
 94 13b2bc37 2022-10-23 stsp static enum gotd_procid		 gotd_proc_id;
 95 13b2bc37 2022-10-23 stsp 
 96 13b2bc37 2022-10-23 stsp typedef struct {
 97 13b2bc37 2022-10-23 stsp 	union {
 98 13b2bc37 2022-10-23 stsp 		long long	 number;
 99 13b2bc37 2022-10-23 stsp 		char		*string;
100 40b85cca 2023-01-03 stsp 		struct timeval	 tv;
101 13b2bc37 2022-10-23 stsp 	} v;
102 13b2bc37 2022-10-23 stsp 	int lineno;
103 13b2bc37 2022-10-23 stsp } YYSTYPE;
104 13b2bc37 2022-10-23 stsp 
105 13b2bc37 2022-10-23 stsp %}
106 13b2bc37 2022-10-23 stsp 
107 83577462 2023-01-05 stsp %token	PATH ERROR LISTEN ON USER REPOSITORY PERMIT DENY
108 40b85cca 2023-01-03 stsp %token	RO RW CONNECTION LIMIT REQUEST TIMEOUT
109 13b2bc37 2022-10-23 stsp 
110 13b2bc37 2022-10-23 stsp %token	<v.string>	STRING
111 13b2bc37 2022-10-23 stsp %token	<v.number>	NUMBER
112 13b2bc37 2022-10-23 stsp %type	<v.number>	boolean
113 40b85cca 2023-01-03 stsp %type	<v.tv>		timeout
114 13b2bc37 2022-10-23 stsp 
115 13b2bc37 2022-10-23 stsp %%
116 13b2bc37 2022-10-23 stsp 
117 13b2bc37 2022-10-23 stsp grammar		:
118 13b2bc37 2022-10-23 stsp 		| grammar '\n'
119 13b2bc37 2022-10-23 stsp 		| grammar main '\n'
120 13b2bc37 2022-10-23 stsp 		| grammar repository '\n'
121 13b2bc37 2022-10-23 stsp 		;
122 13b2bc37 2022-10-23 stsp 
123 13b2bc37 2022-10-23 stsp boolean		: STRING {
124 13b2bc37 2022-10-23 stsp 			if (strcasecmp($1, "1") == 0 ||
125 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "yes") == 0 ||
126 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "on") == 0)
127 13b2bc37 2022-10-23 stsp 				$$ = 1;
128 13b2bc37 2022-10-23 stsp 			else if (strcasecmp($1, "0") == 0 ||
129 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "off") == 0 ||
130 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "no") == 0)
131 13b2bc37 2022-10-23 stsp 				$$ = 0;
132 13b2bc37 2022-10-23 stsp 			else {
133 13b2bc37 2022-10-23 stsp 				yyerror("invalid boolean value '%s'", $1);
134 13b2bc37 2022-10-23 stsp 				free($1);
135 13b2bc37 2022-10-23 stsp 				YYERROR;
136 13b2bc37 2022-10-23 stsp 			}
137 13b2bc37 2022-10-23 stsp 			free($1);
138 13b2bc37 2022-10-23 stsp 		}
139 13b2bc37 2022-10-23 stsp 		| ON { $$ = 1; }
140 13b2bc37 2022-10-23 stsp 		| NUMBER { $$ = $1; }
141 13b2bc37 2022-10-23 stsp 		;
142 13b2bc37 2022-10-23 stsp 
143 40b85cca 2023-01-03 stsp timeout		: NUMBER {
144 40b85cca 2023-01-03 stsp 			if ($1 < 0) {
145 40b85cca 2023-01-03 stsp 				yyerror("invalid timeout: %lld", $1);
146 40b85cca 2023-01-03 stsp 				YYERROR;
147 40b85cca 2023-01-03 stsp 			}
148 40b85cca 2023-01-03 stsp 			$$.tv_sec = $1;
149 40b85cca 2023-01-03 stsp 			$$.tv_usec = 0;
150 40b85cca 2023-01-03 stsp 		}
151 2be11cde 2023-01-03 op 		| STRING {
152 2be11cde 2023-01-03 op 			const char	*errstr;
153 2be11cde 2023-01-03 op 			const char	*type = "seconds";
154 2be11cde 2023-01-03 op 			size_t		 len;
155 2be11cde 2023-01-03 op 			int		 mul = 1;
156 2be11cde 2023-01-03 op 
157 2be11cde 2023-01-03 op 			if (*$1 == '\0') {
158 2be11cde 2023-01-03 op 				yyerror("invalid number of seconds: %s", $1);
159 2be11cde 2023-01-03 op 				free($1);
160 2be11cde 2023-01-03 op 				YYERROR;
161 2be11cde 2023-01-03 op 			}
162 2be11cde 2023-01-03 op 
163 2be11cde 2023-01-03 op 			len = strlen($1);
164 2be11cde 2023-01-03 op 			switch ($1[len - 1]) {
165 2be11cde 2023-01-03 op 			case 'S':
166 2be11cde 2023-01-03 op 			case 's':
167 2be11cde 2023-01-03 op 				$1[len - 1] = '\0';
168 2be11cde 2023-01-03 op 				break;
169 2be11cde 2023-01-03 op 			case 'M':
170 2be11cde 2023-01-03 op 			case 'm':
171 2be11cde 2023-01-03 op 				type = "minutes";
172 2be11cde 2023-01-03 op 				mul = 60;
173 2be11cde 2023-01-03 op 				$1[len - 1] = '\0';
174 2be11cde 2023-01-03 op 				break;
175 2be11cde 2023-01-03 op 			case 'H':
176 2be11cde 2023-01-03 op 			case 'h':
177 2be11cde 2023-01-03 op 				type = "hours";
178 2be11cde 2023-01-03 op 				mul = 60 * 60;
179 2be11cde 2023-01-03 op 				$1[len - 1] = '\0';
180 2be11cde 2023-01-03 op 				break;
181 2be11cde 2023-01-03 op 			}
182 2be11cde 2023-01-03 op 
183 2be11cde 2023-01-03 op 			$$.tv_usec = 0;
184 71cd355c 2023-01-03 op 			$$.tv_sec = strtonum($1, 0, INT_MAX / mul, &errstr);
185 2be11cde 2023-01-03 op 			if (errstr) {
186 2be11cde 2023-01-03 op 				yyerror("number of %s is %s: %s", type,
187 2be11cde 2023-01-03 op 				    errstr, $1);
188 2be11cde 2023-01-03 op 				free($1);
189 2be11cde 2023-01-03 op 				YYERROR;
190 2be11cde 2023-01-03 op 			}
191 2be11cde 2023-01-03 op 
192 2be11cde 2023-01-03 op 			$$.tv_sec *= mul;
193 2be11cde 2023-01-03 op 			free($1);
194 2be11cde 2023-01-03 op 		}
195 40b85cca 2023-01-03 stsp 		;
196 40b85cca 2023-01-03 stsp 
197 83577462 2023-01-05 stsp main		: LISTEN ON STRING {
198 d93ecf7d 2022-12-14 stsp 			if (gotd_proc_id == PROC_LISTEN) {
199 83577462 2023-01-05 stsp 				if (strlcpy(gotd->unix_socket_path, $3,
200 13b2bc37 2022-10-23 stsp 				    sizeof(gotd->unix_socket_path)) >=
201 13b2bc37 2022-10-23 stsp 				    sizeof(gotd->unix_socket_path)) {
202 13b2bc37 2022-10-23 stsp 					yyerror("%s: unix socket path too long",
203 13b2bc37 2022-10-23 stsp 					    __func__);
204 83577462 2023-01-05 stsp 					free($3);
205 13b2bc37 2022-10-23 stsp 					YYERROR;
206 13b2bc37 2022-10-23 stsp 				}
207 13b2bc37 2022-10-23 stsp 			}
208 83577462 2023-01-05 stsp 			free($3);
209 13b2bc37 2022-10-23 stsp 		}
210 13b2bc37 2022-10-23 stsp 		| USER STRING {
211 13b2bc37 2022-10-23 stsp 			if (strlcpy(gotd->user_name, $2,
212 13b2bc37 2022-10-23 stsp 			    sizeof(gotd->user_name)) >=
213 13b2bc37 2022-10-23 stsp 			    sizeof(gotd->user_name)) {
214 13b2bc37 2022-10-23 stsp 				yyerror("%s: user name too long", __func__);
215 13b2bc37 2022-10-23 stsp 				free($2);
216 13b2bc37 2022-10-23 stsp 				YYERROR;
217 13b2bc37 2022-10-23 stsp 			}
218 13b2bc37 2022-10-23 stsp 			free($2);
219 13b2bc37 2022-10-23 stsp 		}
220 40b85cca 2023-01-03 stsp 		| connection
221 13b2bc37 2022-10-23 stsp 		;
222 13b2bc37 2022-10-23 stsp 
223 40b85cca 2023-01-03 stsp connection	: CONNECTION '{' optnl conflags_l '}'
224 40b85cca 2023-01-03 stsp 		| CONNECTION conflags
225 40b85cca 2023-01-03 stsp 
226 40b85cca 2023-01-03 stsp conflags_l	: conflags optnl conflags_l
227 40b85cca 2023-01-03 stsp 		| conflags optnl
228 40b85cca 2023-01-03 stsp 		;
229 40b85cca 2023-01-03 stsp 
230 40b85cca 2023-01-03 stsp conflags	: REQUEST TIMEOUT timeout		{
231 46e48ac7 2023-01-03 stsp 			if ($3.tv_sec <= 0) {
232 46e48ac7 2023-01-03 stsp 				yyerror("invalid timeout: %lld", $3.tv_sec);
233 46e48ac7 2023-01-03 stsp 				YYERROR;
234 46e48ac7 2023-01-03 stsp 			}
235 40b85cca 2023-01-03 stsp 			memcpy(&gotd->request_timeout, &$3,
236 40b85cca 2023-01-03 stsp 			    sizeof(gotd->request_timeout));
237 40b85cca 2023-01-03 stsp 		}
238 40b85cca 2023-01-03 stsp 		| LIMIT USER STRING NUMBER	{
239 40b85cca 2023-01-03 stsp 			if (gotd_proc_id == PROC_LISTEN &&
240 40b85cca 2023-01-03 stsp 			    conf_limit_user_connections($3, $4) == -1) {
241 40b85cca 2023-01-03 stsp 				free($3);
242 40b85cca 2023-01-03 stsp 				YYERROR;
243 40b85cca 2023-01-03 stsp 			}
244 40b85cca 2023-01-03 stsp 			free($3);
245 40b85cca 2023-01-03 stsp 		}
246 40b85cca 2023-01-03 stsp 		;
247 40b85cca 2023-01-03 stsp 
248 13b2bc37 2022-10-23 stsp repository	: REPOSITORY STRING {
249 13b2bc37 2022-10-23 stsp 			struct gotd_repo *repo;
250 13b2bc37 2022-10-23 stsp 
251 13b2bc37 2022-10-23 stsp 			TAILQ_FOREACH(repo, &gotd->repos, entry) {
252 13b2bc37 2022-10-23 stsp 				if (strcmp(repo->name, $2) == 0) {
253 13b2bc37 2022-10-23 stsp 					yyerror("duplicate repository '%s'", $2);
254 13b2bc37 2022-10-23 stsp 					free($2);
255 13b2bc37 2022-10-23 stsp 					YYERROR;
256 13b2bc37 2022-10-23 stsp 				}
257 13b2bc37 2022-10-23 stsp 			}
258 13b2bc37 2022-10-23 stsp 
259 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_GOTD ||
260 5e25db14 2022-12-29 stsp 			    gotd_proc_id == PROC_AUTH) {
261 13b2bc37 2022-10-23 stsp 				new_repo = conf_new_repo($2);
262 13b2bc37 2022-10-23 stsp 			}
263 13b2bc37 2022-10-23 stsp 			free($2);
264 13b2bc37 2022-10-23 stsp 		} '{' optnl repoopts2 '}' {
265 13b2bc37 2022-10-23 stsp 		}
266 13b2bc37 2022-10-23 stsp 		;
267 13b2bc37 2022-10-23 stsp 
268 13b2bc37 2022-10-23 stsp repoopts1	: PATH STRING {
269 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_GOTD ||
270 5e25db14 2022-12-29 stsp 			    gotd_proc_id == PROC_AUTH) {
271 13b2bc37 2022-10-23 stsp 				if (!got_path_is_absolute($2)) {
272 13b2bc37 2022-10-23 stsp 					yyerror("%s: path %s is not absolute",
273 13b2bc37 2022-10-23 stsp 					    __func__, $2);
274 13b2bc37 2022-10-23 stsp 					free($2);
275 13b2bc37 2022-10-23 stsp 					YYERROR;
276 13b2bc37 2022-10-23 stsp 				}
277 9b7f22a6 2023-01-08 stsp 				if (realpath($2, new_repo->path) == NULL) {
278 9b7f22a6 2023-01-08 stsp 					yyerror("realpath %s: %s", $2, strerror(errno));
279 13b2bc37 2022-10-23 stsp 					free($2);
280 13b2bc37 2022-10-23 stsp 					YYERROR;
281 13b2bc37 2022-10-23 stsp 				}
282 13b2bc37 2022-10-23 stsp 			}
283 13b2bc37 2022-10-23 stsp 			free($2);
284 0ccf3acb 2022-11-16 stsp 		}
285 0ccf3acb 2022-11-16 stsp 		| PERMIT RO STRING {
286 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_AUTH) {
287 0ccf3acb 2022-11-16 stsp 				conf_new_access_rule(new_repo,
288 0ccf3acb 2022-11-16 stsp 				    GOTD_ACCESS_PERMITTED, GOTD_AUTH_READ, $3);
289 0ccf3acb 2022-11-16 stsp 			}
290 0ccf3acb 2022-11-16 stsp 		}
291 0ccf3acb 2022-11-16 stsp 		| PERMIT RW STRING {
292 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_AUTH) {
293 0ccf3acb 2022-11-16 stsp 				conf_new_access_rule(new_repo,
294 0ccf3acb 2022-11-16 stsp 				    GOTD_ACCESS_PERMITTED,
295 0ccf3acb 2022-11-16 stsp 				    GOTD_AUTH_READ | GOTD_AUTH_WRITE, $3);
296 0ccf3acb 2022-11-16 stsp 			}
297 13b2bc37 2022-10-23 stsp 		}
298 0ccf3acb 2022-11-16 stsp 		| DENY STRING {
299 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_AUTH) {
300 0ccf3acb 2022-11-16 stsp 				conf_new_access_rule(new_repo,
301 0ccf3acb 2022-11-16 stsp 				    GOTD_ACCESS_DENIED, 0, $2);
302 0ccf3acb 2022-11-16 stsp 			}
303 0ccf3acb 2022-11-16 stsp 		}
304 13b2bc37 2022-10-23 stsp 		;
305 13b2bc37 2022-10-23 stsp 
306 13b2bc37 2022-10-23 stsp repoopts2	: repoopts2 repoopts1 nl
307 13b2bc37 2022-10-23 stsp 		| repoopts1 optnl
308 13b2bc37 2022-10-23 stsp 		;
309 13b2bc37 2022-10-23 stsp 
310 13b2bc37 2022-10-23 stsp nl		: '\n' optnl
311 13b2bc37 2022-10-23 stsp 		;
312 13b2bc37 2022-10-23 stsp 
313 13b2bc37 2022-10-23 stsp optnl		: '\n' optnl		/* zero or more newlines */
314 13b2bc37 2022-10-23 stsp 		| /* empty */
315 13b2bc37 2022-10-23 stsp 		;
316 13b2bc37 2022-10-23 stsp 
317 13b2bc37 2022-10-23 stsp %%
318 13b2bc37 2022-10-23 stsp 
319 13b2bc37 2022-10-23 stsp struct keywords {
320 13b2bc37 2022-10-23 stsp 	const char	*k_name;
321 13b2bc37 2022-10-23 stsp 	int		 k_val;
322 13b2bc37 2022-10-23 stsp };
323 13b2bc37 2022-10-23 stsp 
324 13b2bc37 2022-10-23 stsp int
325 13b2bc37 2022-10-23 stsp yyerror(const char *fmt, ...)
326 13b2bc37 2022-10-23 stsp {
327 13b2bc37 2022-10-23 stsp 	va_list ap;
328 13b2bc37 2022-10-23 stsp 	char *msg;
329 13b2bc37 2022-10-23 stsp 
330 13b2bc37 2022-10-23 stsp 	file->errors++;
331 13b2bc37 2022-10-23 stsp 	va_start(ap, fmt);
332 13b2bc37 2022-10-23 stsp 	if (vasprintf(&msg, fmt, ap) == -1)
333 13b2bc37 2022-10-23 stsp 		fatalx("yyerror vasprintf");
334 13b2bc37 2022-10-23 stsp 	va_end(ap);
335 13b2bc37 2022-10-23 stsp 	logit(LOG_CRIT, "%s:%d: %s", file->name, yylval.lineno, msg);
336 13b2bc37 2022-10-23 stsp 	free(msg);
337 13b2bc37 2022-10-23 stsp 	return (0);
338 13b2bc37 2022-10-23 stsp }
339 13b2bc37 2022-10-23 stsp 
340 13b2bc37 2022-10-23 stsp int
341 13b2bc37 2022-10-23 stsp kw_cmp(const void *k, const void *e)
342 13b2bc37 2022-10-23 stsp {
343 13b2bc37 2022-10-23 stsp 	return (strcmp(k, ((const struct keywords *)e)->k_name));
344 13b2bc37 2022-10-23 stsp }
345 13b2bc37 2022-10-23 stsp 
346 13b2bc37 2022-10-23 stsp int
347 13b2bc37 2022-10-23 stsp lookup(char *s)
348 13b2bc37 2022-10-23 stsp {
349 13b2bc37 2022-10-23 stsp 	/* This has to be sorted always. */
350 13b2bc37 2022-10-23 stsp 	static const struct keywords keywords[] = {
351 40b85cca 2023-01-03 stsp 		{ "connection",			CONNECTION },
352 0ccf3acb 2022-11-16 stsp 		{ "deny",			DENY },
353 40b85cca 2023-01-03 stsp 		{ "limit",			LIMIT },
354 83577462 2023-01-05 stsp 		{ "listen",			LISTEN },
355 13b2bc37 2022-10-23 stsp 		{ "on",				ON },
356 13b2bc37 2022-10-23 stsp 		{ "path",			PATH },
357 0ccf3acb 2022-11-16 stsp 		{ "permit",			PERMIT },
358 13b2bc37 2022-10-23 stsp 		{ "repository",			REPOSITORY },
359 40b85cca 2023-01-03 stsp 		{ "request",			REQUEST },
360 0ccf3acb 2022-11-16 stsp 		{ "ro",				RO },
361 0ccf3acb 2022-11-16 stsp 		{ "rw",				RW },
362 40b85cca 2023-01-03 stsp 		{ "timeout",			TIMEOUT },
363 13b2bc37 2022-10-23 stsp 		{ "user",			USER },
364 13b2bc37 2022-10-23 stsp 	};
365 13b2bc37 2022-10-23 stsp 	const struct keywords *p;
366 13b2bc37 2022-10-23 stsp 
367 13b2bc37 2022-10-23 stsp 	p = bsearch(s, keywords, sizeof(keywords)/sizeof(keywords[0]),
368 13b2bc37 2022-10-23 stsp 	    sizeof(keywords[0]), kw_cmp);
369 13b2bc37 2022-10-23 stsp 
370 13b2bc37 2022-10-23 stsp 	if (p)
371 13b2bc37 2022-10-23 stsp 		return (p->k_val);
372 13b2bc37 2022-10-23 stsp 	else
373 13b2bc37 2022-10-23 stsp 		return (STRING);
374 13b2bc37 2022-10-23 stsp }
375 13b2bc37 2022-10-23 stsp 
376 13b2bc37 2022-10-23 stsp #define MAXPUSHBACK	128
377 13b2bc37 2022-10-23 stsp 
378 13b2bc37 2022-10-23 stsp unsigned char *parsebuf;
379 13b2bc37 2022-10-23 stsp int parseindex;
380 13b2bc37 2022-10-23 stsp unsigned char pushback_buffer[MAXPUSHBACK];
381 13b2bc37 2022-10-23 stsp int pushback_index = 0;
382 13b2bc37 2022-10-23 stsp 
383 13b2bc37 2022-10-23 stsp int
384 13b2bc37 2022-10-23 stsp lgetc(int quotec)
385 13b2bc37 2022-10-23 stsp {
386 13b2bc37 2022-10-23 stsp 	int c, next;
387 13b2bc37 2022-10-23 stsp 
388 13b2bc37 2022-10-23 stsp 	if (parsebuf) {
389 13b2bc37 2022-10-23 stsp 		/* Read character from the parsebuffer instead of input. */
390 13b2bc37 2022-10-23 stsp 		if (parseindex >= 0) {
391 13b2bc37 2022-10-23 stsp 			c = parsebuf[parseindex++];
392 13b2bc37 2022-10-23 stsp 			if (c != '\0')
393 13b2bc37 2022-10-23 stsp 				return (c);
394 13b2bc37 2022-10-23 stsp 			parsebuf = NULL;
395 13b2bc37 2022-10-23 stsp 		} else
396 13b2bc37 2022-10-23 stsp 			parseindex++;
397 13b2bc37 2022-10-23 stsp 	}
398 13b2bc37 2022-10-23 stsp 
399 13b2bc37 2022-10-23 stsp 	if (pushback_index)
400 13b2bc37 2022-10-23 stsp 		return (pushback_buffer[--pushback_index]);
401 13b2bc37 2022-10-23 stsp 
402 13b2bc37 2022-10-23 stsp 	if (quotec) {
403 13b2bc37 2022-10-23 stsp 		c = getc(file->stream);
404 13b2bc37 2022-10-23 stsp 		if (c == EOF)
405 13b2bc37 2022-10-23 stsp 			yyerror("reached end of file while parsing "
406 13b2bc37 2022-10-23 stsp 			    "quoted string");
407 13b2bc37 2022-10-23 stsp 		return (c);
408 13b2bc37 2022-10-23 stsp 	}
409 13b2bc37 2022-10-23 stsp 
410 13b2bc37 2022-10-23 stsp 	c = getc(file->stream);
411 13b2bc37 2022-10-23 stsp 	while (c == '\\') {
412 13b2bc37 2022-10-23 stsp 		next = getc(file->stream);
413 13b2bc37 2022-10-23 stsp 		if (next != '\n') {
414 13b2bc37 2022-10-23 stsp 			c = next;
415 13b2bc37 2022-10-23 stsp 			break;
416 13b2bc37 2022-10-23 stsp 		}
417 13b2bc37 2022-10-23 stsp 		yylval.lineno = file->lineno;
418 13b2bc37 2022-10-23 stsp 		file->lineno++;
419 13b2bc37 2022-10-23 stsp 		c = getc(file->stream);
420 13b2bc37 2022-10-23 stsp 	}
421 13b2bc37 2022-10-23 stsp 
422 13b2bc37 2022-10-23 stsp 	return (c);
423 13b2bc37 2022-10-23 stsp }
424 13b2bc37 2022-10-23 stsp 
425 13b2bc37 2022-10-23 stsp int
426 13b2bc37 2022-10-23 stsp lungetc(int c)
427 13b2bc37 2022-10-23 stsp {
428 13b2bc37 2022-10-23 stsp 	if (c == EOF)
429 13b2bc37 2022-10-23 stsp 		return (EOF);
430 13b2bc37 2022-10-23 stsp 	if (parsebuf) {
431 13b2bc37 2022-10-23 stsp 		parseindex--;
432 13b2bc37 2022-10-23 stsp 		if (parseindex >= 0)
433 13b2bc37 2022-10-23 stsp 			return (c);
434 13b2bc37 2022-10-23 stsp 	}
435 13b2bc37 2022-10-23 stsp 	if (pushback_index < MAXPUSHBACK-1)
436 13b2bc37 2022-10-23 stsp 		return (pushback_buffer[pushback_index++] = c);
437 13b2bc37 2022-10-23 stsp 	else
438 13b2bc37 2022-10-23 stsp 		return (EOF);
439 13b2bc37 2022-10-23 stsp }
440 13b2bc37 2022-10-23 stsp 
441 13b2bc37 2022-10-23 stsp int
442 13b2bc37 2022-10-23 stsp findeol(void)
443 13b2bc37 2022-10-23 stsp {
444 13b2bc37 2022-10-23 stsp 	int c;
445 13b2bc37 2022-10-23 stsp 
446 13b2bc37 2022-10-23 stsp 	parsebuf = NULL;
447 13b2bc37 2022-10-23 stsp 
448 13b2bc37 2022-10-23 stsp 	/* Skip to either EOF or the first real EOL. */
449 13b2bc37 2022-10-23 stsp 	while (1) {
450 13b2bc37 2022-10-23 stsp 		if (pushback_index)
451 13b2bc37 2022-10-23 stsp 			c = pushback_buffer[--pushback_index];
452 13b2bc37 2022-10-23 stsp 		else
453 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
454 13b2bc37 2022-10-23 stsp 		if (c == '\n') {
455 13b2bc37 2022-10-23 stsp 			file->lineno++;
456 13b2bc37 2022-10-23 stsp 			break;
457 13b2bc37 2022-10-23 stsp 		}
458 13b2bc37 2022-10-23 stsp 		if (c == EOF)
459 13b2bc37 2022-10-23 stsp 			break;
460 13b2bc37 2022-10-23 stsp 	}
461 13b2bc37 2022-10-23 stsp 	return (ERROR);
462 13b2bc37 2022-10-23 stsp }
463 13b2bc37 2022-10-23 stsp 
464 13b2bc37 2022-10-23 stsp int
465 13b2bc37 2022-10-23 stsp yylex(void)
466 13b2bc37 2022-10-23 stsp {
467 13b2bc37 2022-10-23 stsp 	unsigned char buf[8096];
468 13b2bc37 2022-10-23 stsp 	unsigned char *p, *val;
469 13b2bc37 2022-10-23 stsp 	int quotec, next, c;
470 13b2bc37 2022-10-23 stsp 	int token;
471 13b2bc37 2022-10-23 stsp 
472 13b2bc37 2022-10-23 stsp top:
473 13b2bc37 2022-10-23 stsp 	p = buf;
474 13b2bc37 2022-10-23 stsp 	c = lgetc(0);
475 13b2bc37 2022-10-23 stsp 	while (c == ' ' || c == '\t')
476 13b2bc37 2022-10-23 stsp 		c = lgetc(0); /* nothing */
477 13b2bc37 2022-10-23 stsp 
478 13b2bc37 2022-10-23 stsp 	yylval.lineno = file->lineno;
479 13b2bc37 2022-10-23 stsp 	if (c == '#') {
480 13b2bc37 2022-10-23 stsp 		c = lgetc(0);
481 13b2bc37 2022-10-23 stsp 		while (c != '\n' && c != EOF)
482 13b2bc37 2022-10-23 stsp 			c = lgetc(0); /* nothing */
483 13b2bc37 2022-10-23 stsp 	}
484 13b2bc37 2022-10-23 stsp 	if (c == '$' && parsebuf == NULL) {
485 13b2bc37 2022-10-23 stsp 		while (1) {
486 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
487 13b2bc37 2022-10-23 stsp 			if (c == EOF)
488 13b2bc37 2022-10-23 stsp 				return (0);
489 13b2bc37 2022-10-23 stsp 
490 13b2bc37 2022-10-23 stsp 			if (p + 1 >= buf + sizeof(buf) - 1) {
491 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
492 13b2bc37 2022-10-23 stsp 				return (findeol());
493 13b2bc37 2022-10-23 stsp 			}
494 13b2bc37 2022-10-23 stsp 			if (isalnum(c) || c == '_') {
495 13b2bc37 2022-10-23 stsp 				*p++ = c;
496 13b2bc37 2022-10-23 stsp 				continue;
497 13b2bc37 2022-10-23 stsp 			}
498 13b2bc37 2022-10-23 stsp 			*p = '\0';
499 13b2bc37 2022-10-23 stsp 			lungetc(c);
500 13b2bc37 2022-10-23 stsp 			break;
501 13b2bc37 2022-10-23 stsp 		}
502 13b2bc37 2022-10-23 stsp 		val = symget(buf);
503 13b2bc37 2022-10-23 stsp 		if (val == NULL) {
504 13b2bc37 2022-10-23 stsp 			yyerror("macro '%s' not defined", buf);
505 13b2bc37 2022-10-23 stsp 			return (findeol());
506 13b2bc37 2022-10-23 stsp 		}
507 13b2bc37 2022-10-23 stsp 		parsebuf = val;
508 13b2bc37 2022-10-23 stsp 		parseindex = 0;
509 13b2bc37 2022-10-23 stsp 		goto top;
510 13b2bc37 2022-10-23 stsp 	}
511 13b2bc37 2022-10-23 stsp 
512 13b2bc37 2022-10-23 stsp 	switch (c) {
513 13b2bc37 2022-10-23 stsp 	case '\'':
514 13b2bc37 2022-10-23 stsp 	case '"':
515 13b2bc37 2022-10-23 stsp 		quotec = c;
516 13b2bc37 2022-10-23 stsp 		while (1) {
517 13b2bc37 2022-10-23 stsp 			c = lgetc(quotec);
518 13b2bc37 2022-10-23 stsp 			if (c == EOF)
519 13b2bc37 2022-10-23 stsp 				return (0);
520 13b2bc37 2022-10-23 stsp 			if (c == '\n') {
521 13b2bc37 2022-10-23 stsp 				file->lineno++;
522 13b2bc37 2022-10-23 stsp 				continue;
523 13b2bc37 2022-10-23 stsp 			} else if (c == '\\') {
524 13b2bc37 2022-10-23 stsp 				next = lgetc(quotec);
525 13b2bc37 2022-10-23 stsp 				if (next == EOF)
526 13b2bc37 2022-10-23 stsp 					return (0);
527 13b2bc37 2022-10-23 stsp 				if (next == quotec || c == ' ' || c == '\t')
528 13b2bc37 2022-10-23 stsp 					c = next;
529 13b2bc37 2022-10-23 stsp 				else if (next == '\n') {
530 13b2bc37 2022-10-23 stsp 					file->lineno++;
531 13b2bc37 2022-10-23 stsp 					continue;
532 13b2bc37 2022-10-23 stsp 				} else
533 13b2bc37 2022-10-23 stsp 					lungetc(next);
534 13b2bc37 2022-10-23 stsp 			} else if (c == quotec) {
535 13b2bc37 2022-10-23 stsp 				*p = '\0';
536 13b2bc37 2022-10-23 stsp 				break;
537 13b2bc37 2022-10-23 stsp 			} else if (c == '\0') {
538 13b2bc37 2022-10-23 stsp 				yyerror("syntax error");
539 13b2bc37 2022-10-23 stsp 				return (findeol());
540 13b2bc37 2022-10-23 stsp 			}
541 13b2bc37 2022-10-23 stsp 			if (p + 1 >= buf + sizeof(buf) - 1) {
542 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
543 13b2bc37 2022-10-23 stsp 				return (findeol());
544 13b2bc37 2022-10-23 stsp 			}
545 13b2bc37 2022-10-23 stsp 			*p++ = c;
546 13b2bc37 2022-10-23 stsp 		}
547 13b2bc37 2022-10-23 stsp 		yylval.v.string = strdup(buf);
548 13b2bc37 2022-10-23 stsp 		if (yylval.v.string == NULL)
549 13b2bc37 2022-10-23 stsp 			err(1, "yylex: strdup");
550 13b2bc37 2022-10-23 stsp 		return (STRING);
551 13b2bc37 2022-10-23 stsp 	}
552 13b2bc37 2022-10-23 stsp 
553 13b2bc37 2022-10-23 stsp #define allowed_to_end_number(x) \
554 13b2bc37 2022-10-23 stsp 	(isspace(x) || x == ')' || x ==',' || x == '/' || x == '}' || x == '=')
555 13b2bc37 2022-10-23 stsp 
556 13b2bc37 2022-10-23 stsp 	if (c == '-' || isdigit(c)) {
557 13b2bc37 2022-10-23 stsp 		do {
558 13b2bc37 2022-10-23 stsp 			*p++ = c;
559 13b2bc37 2022-10-23 stsp 			if ((unsigned)(p-buf) >= sizeof(buf)) {
560 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
561 13b2bc37 2022-10-23 stsp 				return (findeol());
562 13b2bc37 2022-10-23 stsp 			}
563 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
564 13b2bc37 2022-10-23 stsp 		} while (c != EOF && isdigit(c));
565 13b2bc37 2022-10-23 stsp 		lungetc(c);
566 13b2bc37 2022-10-23 stsp 		if (p == buf + 1 && buf[0] == '-')
567 13b2bc37 2022-10-23 stsp 			goto nodigits;
568 13b2bc37 2022-10-23 stsp 		if (c == EOF || allowed_to_end_number(c)) {
569 13b2bc37 2022-10-23 stsp 			const char *errstr = NULL;
570 13b2bc37 2022-10-23 stsp 
571 13b2bc37 2022-10-23 stsp 			*p = '\0';
572 13b2bc37 2022-10-23 stsp 			yylval.v.number = strtonum(buf, LLONG_MIN,
573 13b2bc37 2022-10-23 stsp 			    LLONG_MAX, &errstr);
574 13b2bc37 2022-10-23 stsp 			if (errstr) {
575 13b2bc37 2022-10-23 stsp 				yyerror("\"%s\" invalid number: %s",
576 13b2bc37 2022-10-23 stsp 				    buf, errstr);
577 13b2bc37 2022-10-23 stsp 				return (findeol());
578 13b2bc37 2022-10-23 stsp 			}
579 13b2bc37 2022-10-23 stsp 			return (NUMBER);
580 13b2bc37 2022-10-23 stsp 		} else {
581 13b2bc37 2022-10-23 stsp nodigits:
582 13b2bc37 2022-10-23 stsp 			while (p > buf + 1)
583 13b2bc37 2022-10-23 stsp 				lungetc(*--p);
584 13b2bc37 2022-10-23 stsp 			c = *--p;
585 13b2bc37 2022-10-23 stsp 			if (c == '-')
586 13b2bc37 2022-10-23 stsp 				return (c);
587 13b2bc37 2022-10-23 stsp 		}
588 13b2bc37 2022-10-23 stsp 	}
589 13b2bc37 2022-10-23 stsp 
590 13b2bc37 2022-10-23 stsp #define allowed_in_string(x) \
591 13b2bc37 2022-10-23 stsp 	(isalnum(x) || (ispunct(x) && x != '(' && x != ')' && \
592 13b2bc37 2022-10-23 stsp 	x != '{' && x != '}' && \
593 13b2bc37 2022-10-23 stsp 	x != '!' && x != '=' && x != '#' && \
594 13b2bc37 2022-10-23 stsp 	x != ','))
595 13b2bc37 2022-10-23 stsp 
596 13b2bc37 2022-10-23 stsp 	if (isalnum(c) || c == ':' || c == '_') {
597 13b2bc37 2022-10-23 stsp 		do {
598 13b2bc37 2022-10-23 stsp 			*p++ = c;
599 13b2bc37 2022-10-23 stsp 			if ((unsigned)(p-buf) >= sizeof(buf)) {
600 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
601 13b2bc37 2022-10-23 stsp 				return (findeol());
602 13b2bc37 2022-10-23 stsp 			}
603 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
604 13b2bc37 2022-10-23 stsp 		} while (c != EOF && (allowed_in_string(c)));
605 13b2bc37 2022-10-23 stsp 		lungetc(c);
606 13b2bc37 2022-10-23 stsp 		*p = '\0';
607 13b2bc37 2022-10-23 stsp 		token = lookup(buf);
608 13b2bc37 2022-10-23 stsp 		if (token == STRING) {
609 13b2bc37 2022-10-23 stsp 			yylval.v.string = strdup(buf);
610 13b2bc37 2022-10-23 stsp 			if (yylval.v.string == NULL)
611 13b2bc37 2022-10-23 stsp 				err(1, "yylex: strdup");
612 13b2bc37 2022-10-23 stsp 		}
613 13b2bc37 2022-10-23 stsp 		return (token);
614 13b2bc37 2022-10-23 stsp 	}
615 13b2bc37 2022-10-23 stsp 	if (c == '\n') {
616 13b2bc37 2022-10-23 stsp 		yylval.lineno = file->lineno;
617 13b2bc37 2022-10-23 stsp 		file->lineno++;
618 13b2bc37 2022-10-23 stsp 	}
619 13b2bc37 2022-10-23 stsp 	if (c == EOF)
620 13b2bc37 2022-10-23 stsp 		return (0);
621 13b2bc37 2022-10-23 stsp 	return (c);
622 13b2bc37 2022-10-23 stsp }
623 13b2bc37 2022-10-23 stsp 
624 13b2bc37 2022-10-23 stsp int
625 13b2bc37 2022-10-23 stsp check_file_secrecy(int fd, const char *fname)
626 13b2bc37 2022-10-23 stsp {
627 13b2bc37 2022-10-23 stsp 	struct stat st;
628 13b2bc37 2022-10-23 stsp 
629 13b2bc37 2022-10-23 stsp 	if (fstat(fd, &st)) {
630 13b2bc37 2022-10-23 stsp 		log_warn("cannot stat %s", fname);
631 13b2bc37 2022-10-23 stsp 		return (-1);
632 13b2bc37 2022-10-23 stsp 	}
633 13b2bc37 2022-10-23 stsp 	if (st.st_uid != 0 && st.st_uid != getuid()) {
634 13b2bc37 2022-10-23 stsp 		log_warnx("%s: owner not root or current user", fname);
635 13b2bc37 2022-10-23 stsp 		return (-1);
636 13b2bc37 2022-10-23 stsp 	}
637 13b2bc37 2022-10-23 stsp 	if (st.st_mode & (S_IWGRP | S_IXGRP | S_IRWXO)) {
638 13b2bc37 2022-10-23 stsp 		log_warnx("%s: group writable or world read/writable", fname);
639 13b2bc37 2022-10-23 stsp 		return (-1);
640 13b2bc37 2022-10-23 stsp 	}
641 13b2bc37 2022-10-23 stsp 	return (0);
642 13b2bc37 2022-10-23 stsp }
643 13b2bc37 2022-10-23 stsp 
644 13b2bc37 2022-10-23 stsp struct file *
645 13b2bc37 2022-10-23 stsp newfile(const char *name, int secret)
646 13b2bc37 2022-10-23 stsp {
647 13b2bc37 2022-10-23 stsp 	struct file *nfile;
648 13b2bc37 2022-10-23 stsp 
649 13b2bc37 2022-10-23 stsp 	nfile = calloc(1, sizeof(struct file));
650 13b2bc37 2022-10-23 stsp 	if (nfile == NULL) {
651 13b2bc37 2022-10-23 stsp 		log_warn("calloc");
652 13b2bc37 2022-10-23 stsp 		return (NULL);
653 13b2bc37 2022-10-23 stsp 	}
654 13b2bc37 2022-10-23 stsp 	nfile->name = strdup(name);
655 13b2bc37 2022-10-23 stsp 	if (nfile->name == NULL) {
656 13b2bc37 2022-10-23 stsp 		log_warn("strdup");
657 13b2bc37 2022-10-23 stsp 		free(nfile);
658 13b2bc37 2022-10-23 stsp 		return (NULL);
659 13b2bc37 2022-10-23 stsp 	}
660 13b2bc37 2022-10-23 stsp 	nfile->stream = fopen(nfile->name, "r");
661 13b2bc37 2022-10-23 stsp 	if (nfile->stream == NULL) {
662 13b2bc37 2022-10-23 stsp 		/* no warning, we don't require a conf file */
663 13b2bc37 2022-10-23 stsp 		free(nfile->name);
664 13b2bc37 2022-10-23 stsp 		free(nfile);
665 13b2bc37 2022-10-23 stsp 		return (NULL);
666 13b2bc37 2022-10-23 stsp 	} else if (secret &&
667 13b2bc37 2022-10-23 stsp 	    check_file_secrecy(fileno(nfile->stream), nfile->name)) {
668 13b2bc37 2022-10-23 stsp 		fclose(nfile->stream);
669 13b2bc37 2022-10-23 stsp 		free(nfile->name);
670 13b2bc37 2022-10-23 stsp 		free(nfile);
671 13b2bc37 2022-10-23 stsp 		return (NULL);
672 13b2bc37 2022-10-23 stsp 	}
673 13b2bc37 2022-10-23 stsp 	nfile->lineno = 1;
674 13b2bc37 2022-10-23 stsp 	return (nfile);
675 13b2bc37 2022-10-23 stsp }
676 13b2bc37 2022-10-23 stsp 
677 13b2bc37 2022-10-23 stsp static void
678 13b2bc37 2022-10-23 stsp closefile(struct file *xfile)
679 13b2bc37 2022-10-23 stsp {
680 13b2bc37 2022-10-23 stsp 	fclose(xfile->stream);
681 13b2bc37 2022-10-23 stsp 	free(xfile->name);
682 13b2bc37 2022-10-23 stsp 	free(xfile);
683 13b2bc37 2022-10-23 stsp }
684 13b2bc37 2022-10-23 stsp 
685 13b2bc37 2022-10-23 stsp int
686 13b2bc37 2022-10-23 stsp parse_config(const char *filename, enum gotd_procid proc_id,
687 13b2bc37 2022-10-23 stsp     struct gotd *env)
688 13b2bc37 2022-10-23 stsp {
689 13b2bc37 2022-10-23 stsp 	struct sym *sym, *next;
690 3b706203 2023-01-02 stsp 	struct gotd_repo *repo;
691 13b2bc37 2022-10-23 stsp 
692 13b2bc37 2022-10-23 stsp 	memset(env, 0, sizeof(*env));
693 13b2bc37 2022-10-23 stsp 
694 13b2bc37 2022-10-23 stsp 	gotd = env;
695 13b2bc37 2022-10-23 stsp 	gotd_proc_id = proc_id;
696 13b2bc37 2022-10-23 stsp 	TAILQ_INIT(&gotd->repos);
697 13b2bc37 2022-10-23 stsp 
698 13b2bc37 2022-10-23 stsp 	/* Apply default values. */
699 13b2bc37 2022-10-23 stsp 	if (strlcpy(gotd->unix_socket_path, GOTD_UNIX_SOCKET,
700 13b2bc37 2022-10-23 stsp 	    sizeof(gotd->unix_socket_path)) >= sizeof(gotd->unix_socket_path)) {
701 13b2bc37 2022-10-23 stsp 		fprintf(stderr, "%s: unix socket path too long", __func__);
702 13b2bc37 2022-10-23 stsp 		return -1;
703 13b2bc37 2022-10-23 stsp 	}
704 13b2bc37 2022-10-23 stsp 	if (strlcpy(gotd->user_name, GOTD_USER,
705 13b2bc37 2022-10-23 stsp 	    sizeof(gotd->user_name)) >= sizeof(gotd->user_name)) {
706 13b2bc37 2022-10-23 stsp 		fprintf(stderr, "%s: user name too long", __func__);
707 13b2bc37 2022-10-23 stsp 		return -1;
708 13b2bc37 2022-10-23 stsp 	}
709 40b85cca 2023-01-03 stsp 
710 40b85cca 2023-01-03 stsp 	gotd->request_timeout.tv_sec = GOTD_DEFAULT_REQUEST_TIMEOUT;
711 40b85cca 2023-01-03 stsp 	gotd->request_timeout.tv_usec = 0;
712 13b2bc37 2022-10-23 stsp 
713 13b2bc37 2022-10-23 stsp 	file = newfile(filename, 0);
714 13b2bc37 2022-10-23 stsp 	if (file == NULL) {
715 13b2bc37 2022-10-23 stsp 		/* just return, as we don't require a conf file */
716 13b2bc37 2022-10-23 stsp 		return (0);
717 13b2bc37 2022-10-23 stsp 	}
718 13b2bc37 2022-10-23 stsp 
719 13b2bc37 2022-10-23 stsp 	yyparse();
720 13b2bc37 2022-10-23 stsp 	errors = file->errors;
721 13b2bc37 2022-10-23 stsp 	closefile(file);
722 13b2bc37 2022-10-23 stsp 
723 13b2bc37 2022-10-23 stsp 	/* Free macros and check which have not been used. */
724 13b2bc37 2022-10-23 stsp 	TAILQ_FOREACH_SAFE(sym, &symhead, entry, next) {
725 13b2bc37 2022-10-23 stsp 		if ((gotd->verbosity > 1) && !sym->used)
726 13b2bc37 2022-10-23 stsp 			fprintf(stderr, "warning: macro '%s' not used\n",
727 13b2bc37 2022-10-23 stsp 			    sym->nam);
728 13b2bc37 2022-10-23 stsp 		if (!sym->persist) {
729 13b2bc37 2022-10-23 stsp 			free(sym->nam);
730 13b2bc37 2022-10-23 stsp 			free(sym->val);
731 13b2bc37 2022-10-23 stsp 			TAILQ_REMOVE(&symhead, sym, entry);
732 13b2bc37 2022-10-23 stsp 			free(sym);
733 13b2bc37 2022-10-23 stsp 		}
734 13b2bc37 2022-10-23 stsp 	}
735 13b2bc37 2022-10-23 stsp 
736 13b2bc37 2022-10-23 stsp 	if (errors)
737 13b2bc37 2022-10-23 stsp 		return (-1);
738 13b2bc37 2022-10-23 stsp 
739 3b706203 2023-01-02 stsp 	TAILQ_FOREACH(repo, &gotd->repos, entry) {
740 3b706203 2023-01-02 stsp 		if (repo->path[0] == '\0') {
741 2507ffb7 2023-01-02 stsp 			log_warnx("repository \"%s\": no path provided in "
742 2507ffb7 2023-01-02 stsp 			    "configuration file", repo->name);
743 3b706203 2023-01-02 stsp 			return (-1);
744 3b706203 2023-01-02 stsp 		}
745 3b706203 2023-01-02 stsp 	}
746 3b706203 2023-01-02 stsp 
747 13b2bc37 2022-10-23 stsp 	return (0);
748 13b2bc37 2022-10-23 stsp }
749 13b2bc37 2022-10-23 stsp 
750 40b85cca 2023-01-03 stsp static int
751 40b85cca 2023-01-03 stsp uid_connection_limit_cmp(const void *pa, const void *pb)
752 40b85cca 2023-01-03 stsp {
753 40b85cca 2023-01-03 stsp 	const struct gotd_uid_connection_limit *a = pa, *b = pb;
754 40b85cca 2023-01-03 stsp 
755 40b85cca 2023-01-03 stsp 	if (a->uid < b->uid)
756 40b85cca 2023-01-03 stsp 		return -1;
757 40b85cca 2023-01-03 stsp 	else if (a->uid > b->uid);
758 40b85cca 2023-01-03 stsp 		return 1;
759 40b85cca 2023-01-03 stsp 
760 40b85cca 2023-01-03 stsp 	return 0;
761 40b85cca 2023-01-03 stsp }
762 40b85cca 2023-01-03 stsp 
763 40b85cca 2023-01-03 stsp static int
764 40b85cca 2023-01-03 stsp conf_limit_user_connections(const char *user, int maximum)
765 40b85cca 2023-01-03 stsp {
766 40b85cca 2023-01-03 stsp 	uid_t uid;
767 40b85cca 2023-01-03 stsp 	struct gotd_uid_connection_limit *limit;
768 40b85cca 2023-01-03 stsp 	size_t nlimits;
769 40b85cca 2023-01-03 stsp 
770 40b85cca 2023-01-03 stsp 	if (maximum < 1) {
771 40b85cca 2023-01-03 stsp 		yyerror("max connections cannot be smaller 1");
772 40b85cca 2023-01-03 stsp 		return -1;
773 40b85cca 2023-01-03 stsp 	}
774 40b85cca 2023-01-03 stsp 	if (maximum > GOTD_MAXCLIENTS) {
775 40b85cca 2023-01-03 stsp 		yyerror("max connections must be <= %d", GOTD_MAXCLIENTS);
776 40b85cca 2023-01-03 stsp 		return -1;
777 40b85cca 2023-01-03 stsp 	}
778 40b85cca 2023-01-03 stsp 
779 40b85cca 2023-01-03 stsp 	if (gotd_auth_parseuid(user, &uid) == -1) {
780 40b85cca 2023-01-03 stsp 		yyerror("%s: no such user", user);
781 40b85cca 2023-01-03 stsp 		return -1;
782 40b85cca 2023-01-03 stsp 	}
783 40b85cca 2023-01-03 stsp 
784 40b85cca 2023-01-03 stsp 	limit = gotd_find_uid_connection_limit(gotd->connection_limits,
785 40b85cca 2023-01-03 stsp 	    gotd->nconnection_limits, uid);
786 40b85cca 2023-01-03 stsp 	if (limit) {
787 40b85cca 2023-01-03 stsp 		limit->max_connections = maximum;
788 40b85cca 2023-01-03 stsp 		return 0;
789 40b85cca 2023-01-03 stsp 	}
790 40b85cca 2023-01-03 stsp 
791 40b85cca 2023-01-03 stsp 	limit = gotd->connection_limits;
792 40b85cca 2023-01-03 stsp 	nlimits = gotd->nconnection_limits + 1;
793 40b85cca 2023-01-03 stsp 	limit = reallocarray(limit, nlimits, sizeof(*limit));
794 40b85cca 2023-01-03 stsp 	if (limit == NULL)
795 40b85cca 2023-01-03 stsp 		fatal("reallocarray");
796 40b85cca 2023-01-03 stsp 
797 40b85cca 2023-01-03 stsp 	limit[nlimits - 1].uid = uid;
798 40b85cca 2023-01-03 stsp 	limit[nlimits - 1].max_connections = maximum;
799 40b85cca 2023-01-03 stsp 
800 40b85cca 2023-01-03 stsp 	gotd->connection_limits = limit;
801 40b85cca 2023-01-03 stsp 	gotd->nconnection_limits = nlimits;
802 40b85cca 2023-01-03 stsp 	qsort(gotd->connection_limits, gotd->nconnection_limits,
803 40b85cca 2023-01-03 stsp 	    sizeof(gotd->connection_limits[0]), uid_connection_limit_cmp);
804 40b85cca 2023-01-03 stsp 
805 40b85cca 2023-01-03 stsp 	return 0;
806 40b85cca 2023-01-03 stsp }
807 40b85cca 2023-01-03 stsp 
808 13b2bc37 2022-10-23 stsp static struct gotd_repo *
809 13b2bc37 2022-10-23 stsp conf_new_repo(const char *name)
810 13b2bc37 2022-10-23 stsp {
811 13b2bc37 2022-10-23 stsp 	struct gotd_repo *repo;
812 13b2bc37 2022-10-23 stsp 
813 7683f79a 2023-01-02 stsp 	if (name[0] == '\0') {
814 7683f79a 2023-01-02 stsp 		fatalx("syntax error: empty repository name found in %s",
815 7683f79a 2023-01-02 stsp 		    file->name);
816 7683f79a 2023-01-02 stsp 	}
817 7683f79a 2023-01-02 stsp 
818 2507ffb7 2023-01-02 stsp 	if (strchr(name, '\n') != NULL)
819 2507ffb7 2023-01-02 stsp 		fatalx("repository names must not contain linefeeds: %s", name);
820 13b2bc37 2022-10-23 stsp 
821 13b2bc37 2022-10-23 stsp 	repo = calloc(1, sizeof(*repo));
822 13b2bc37 2022-10-23 stsp 	if (repo == NULL)
823 13b2bc37 2022-10-23 stsp 		fatalx("%s: calloc", __func__);
824 13b2bc37 2022-10-23 stsp 
825 0ccf3acb 2022-11-16 stsp 	STAILQ_INIT(&repo->rules);
826 0ccf3acb 2022-11-16 stsp 
827 13b2bc37 2022-10-23 stsp 	if (strlcpy(repo->name, name, sizeof(repo->name)) >=
828 13b2bc37 2022-10-23 stsp 	    sizeof(repo->name))
829 13b2bc37 2022-10-23 stsp 		fatalx("%s: strlcpy", __func__);
830 13b2bc37 2022-10-23 stsp 
831 13b2bc37 2022-10-23 stsp 	TAILQ_INSERT_TAIL(&gotd->repos, repo, entry);
832 13b2bc37 2022-10-23 stsp 	gotd->nrepos++;
833 13b2bc37 2022-10-23 stsp 
834 13b2bc37 2022-10-23 stsp 	return repo;
835 13b2bc37 2022-10-23 stsp };
836 0ccf3acb 2022-11-16 stsp 
837 0ccf3acb 2022-11-16 stsp static void
838 0ccf3acb 2022-11-16 stsp conf_new_access_rule(struct gotd_repo *repo, enum gotd_access access,
839 0ccf3acb 2022-11-16 stsp     int authorization, char *identifier)
840 0ccf3acb 2022-11-16 stsp {
841 0ccf3acb 2022-11-16 stsp 	struct gotd_access_rule *rule;
842 0ccf3acb 2022-11-16 stsp 
843 0ccf3acb 2022-11-16 stsp 	rule = calloc(1, sizeof(*rule));
844 0ccf3acb 2022-11-16 stsp 	if (rule == NULL)
845 0ccf3acb 2022-11-16 stsp 		fatal("calloc");
846 13b2bc37 2022-10-23 stsp 
847 0ccf3acb 2022-11-16 stsp 	rule->access = access;
848 0ccf3acb 2022-11-16 stsp 	rule->authorization = authorization;
849 0ccf3acb 2022-11-16 stsp 	rule->identifier = identifier;
850 0ccf3acb 2022-11-16 stsp 
851 0ccf3acb 2022-11-16 stsp 	STAILQ_INSERT_TAIL(&repo->rules, rule, entry);
852 0ccf3acb 2022-11-16 stsp }
853 0ccf3acb 2022-11-16 stsp 
854 13b2bc37 2022-10-23 stsp int
855 13b2bc37 2022-10-23 stsp symset(const char *nam, const char *val, int persist)
856 13b2bc37 2022-10-23 stsp {
857 13b2bc37 2022-10-23 stsp 	struct sym *sym;
858 13b2bc37 2022-10-23 stsp 
859 13b2bc37 2022-10-23 stsp 	TAILQ_FOREACH(sym, &symhead, entry) {
860 13b2bc37 2022-10-23 stsp 		if (strcmp(nam, sym->nam) == 0)
861 13b2bc37 2022-10-23 stsp 			break;
862 13b2bc37 2022-10-23 stsp 	}
863 13b2bc37 2022-10-23 stsp 
864 13b2bc37 2022-10-23 stsp 	if (sym != NULL) {
865 13b2bc37 2022-10-23 stsp 		if (sym->persist == 1)
866 13b2bc37 2022-10-23 stsp 			return (0);
867 13b2bc37 2022-10-23 stsp 		else {
868 13b2bc37 2022-10-23 stsp 			free(sym->nam);
869 13b2bc37 2022-10-23 stsp 			free(sym->val);
870 13b2bc37 2022-10-23 stsp 			TAILQ_REMOVE(&symhead, sym, entry);
871 13b2bc37 2022-10-23 stsp 			free(sym);
872 13b2bc37 2022-10-23 stsp 		}
873 13b2bc37 2022-10-23 stsp 	}
874 13b2bc37 2022-10-23 stsp 	sym = calloc(1, sizeof(*sym));
875 13b2bc37 2022-10-23 stsp 	if (sym == NULL)
876 13b2bc37 2022-10-23 stsp 		return (-1);
877 13b2bc37 2022-10-23 stsp 
878 13b2bc37 2022-10-23 stsp 	sym->nam = strdup(nam);
879 13b2bc37 2022-10-23 stsp 	if (sym->nam == NULL) {
880 13b2bc37 2022-10-23 stsp 		free(sym);
881 13b2bc37 2022-10-23 stsp 		return (-1);
882 13b2bc37 2022-10-23 stsp 	}
883 13b2bc37 2022-10-23 stsp 	sym->val = strdup(val);
884 13b2bc37 2022-10-23 stsp 	if (sym->val == NULL) {
885 13b2bc37 2022-10-23 stsp 		free(sym->nam);
886 13b2bc37 2022-10-23 stsp 		free(sym);
887 13b2bc37 2022-10-23 stsp 		return (-1);
888 13b2bc37 2022-10-23 stsp 	}
889 13b2bc37 2022-10-23 stsp 	sym->used = 0;
890 13b2bc37 2022-10-23 stsp 	sym->persist = persist;
891 13b2bc37 2022-10-23 stsp 	TAILQ_INSERT_TAIL(&symhead, sym, entry);
892 13b2bc37 2022-10-23 stsp 	return (0);
893 13b2bc37 2022-10-23 stsp }
894 13b2bc37 2022-10-23 stsp 
895 13b2bc37 2022-10-23 stsp char *
896 13b2bc37 2022-10-23 stsp symget(const char *nam)
897 13b2bc37 2022-10-23 stsp {
898 13b2bc37 2022-10-23 stsp 	struct sym *sym;
899 13b2bc37 2022-10-23 stsp 
900 13b2bc37 2022-10-23 stsp 	TAILQ_FOREACH(sym, &symhead, entry) {
901 13b2bc37 2022-10-23 stsp 		if (strcmp(nam, sym->nam) == 0) {
902 13b2bc37 2022-10-23 stsp 			sym->used = 1;
903 13b2bc37 2022-10-23 stsp 			return (sym->val);
904 13b2bc37 2022-10-23 stsp 		}
905 13b2bc37 2022-10-23 stsp 	}
906 13b2bc37 2022-10-23 stsp 	return (NULL);
907 13b2bc37 2022-10-23 stsp }