Head

GCC Code Coverage Report

Directory:	./		Exec	Total	Coverage
File:	usr.bin/bgplg/bgplg/../bgplg.c	Lines:	0	153	0.0 %
Date:	2017-11-13	Branches:	0	118	0.0 %


/*	$OpenBSD: bgplg.c,v 1.16 2016/04/05 21:57:58 sthen Exp $	*/

/*
 * Copyright (c) 2005, 2006 Reyk Floeter <reyk@openbsd.org>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <sys/types.h>
#include <sys/stat.h>

#include <stdio.h>
#include <stdlib.h>
#include <signal.h>
#include <string.h>
#include <unistd.h>
#include <limits.h>
#include <ctype.h>
#include <errno.h>
#include <fcntl.h>
#include <err.h>

#include "bgplg.h"

#define INC_STYLE	"/conf/bgplg.css"
#define INC_HEAD	"/conf/bgplg.head"
#define INC_FOOT	"/conf/bgplg.foot"

#define BGPDSOCK	"/run/bgpd.rsock"
#define BGPCTL		"/bin/bgpctl", "-s", BGPDSOCK
#define PING		"/bin/ping"
#define TRACEROUTE	"/bin/traceroute"
#define PING6		"/bin/ping6"
#define TRACEROUTE6	"/bin/traceroute6"
#define CONTENT_TYPE	"text/html"

static struct cmd cmds[] = CMDS;

char		 *lg_getenv(const char *, int *);
void		  lg_urldecode(char *);
char		**lg_arg2argv(char *, int *);
char		**lg_argextra(char **, int, struct cmd *);
char		 *lg_getarg(const char *, char *, int);
int		  lg_incl(const char *);

void
lg_urldecode(char *str)
{
	size_t i, c, len;
	char code[3];
	long result;

	if (str && *str) {
		len = strlen(str);
		i = c = 0;
		while (i < len) {
			if (str[i] == '%' && i <= (len - 2)) {
				if (isxdigit((unsigned char)str[i + 1]) &&
				    isxdigit((unsigned char)str[i + 2])) {
					code[0] = str[i + 1];
					code[1] = str[i + 2];
					code[2] = 0;
					result = strtol(code, NULL, 16);
					/* Replace NUL chars with a space */
					if (result == 0)
						result = ' ';
					str[c++] = result;
					i += 3;
				} else {
					str[c++] = '%';
					i++;
				}
			} else if (str[i] == '+') {
				str[i] = ' ';
			} else {
				if (c != i)
					str[c] = str[i];
				c++;
				i++;
			}
		}
		str[c] = 0x0;
	}
}

char *
lg_getenv(const char *name, int *lenp)
{
	size_t len;
	u_int i;
	char *ptr;

	if ((ptr = getenv(name)) == NULL)
		return (NULL);

	lg_urldecode(ptr);

	if (!(len = strlen(ptr)))
		return (NULL);

	if (lenp != NULL)
		*lenp = len;

#define allowed_in_string(_x)                                           \
	(isalnum((unsigned char)_x) || strchr("-_.:/= ", _x))

	for (i = 0; i < len; i++) {
		if (ptr[i] == '&')
			ptr[i] = '\0';
		if (!allowed_in_string(ptr[i])) {
			printf("invalid character in input\n");
			return (NULL);
		}
	}

	return (ptr);
#undef allowed_in_string
}

char *
lg_getarg(const char *name, char *arg, int len)
{
	char *ptr = arg;
	size_t namelen, ptrlen;
	int i;

	namelen = strlen(name);

	for (i = 0; i < len; i++) {
		if (arg[i] == '\0')
			continue;
		ptr = arg + i;
		ptrlen = strlen(ptr);
		if (namelen >= ptrlen)
			continue;
		if (strncmp(name, ptr, namelen) == 0)
			return (ptr + namelen);
	}

	return (NULL);
}

char **
lg_arg2argv(char *arg, int *argc)
{
	char **argv, *ptr = arg;
	size_t len;
	u_int i, c = 1;

	len = strlen(arg);

	/* Count elements */
	for (i = 0; i < (len - 1); i++) {
		if (isspace((unsigned char)arg[i])) {
			/* filter out additional options */
			if (arg[i + 1] == '-') {
				printf("invalid input\n");
				return (NULL);
			}
			arg[i] = '\0';
			c++;
		}
	}

	/* Generate array */
	if ((argv = calloc(c + 1, sizeof(char *))) == NULL) {
		printf("fatal error: %s\n", strerror(errno));
		return (NULL);
	}

	argv[c] = NULL;
	*argc = c;

	/* Fill array */
	for (i = c = 0; i < (len - 1); i++) {
		if (arg[i] == '\0' || i == 0) {
			if (i != 0)
				ptr = &arg[i + 1];
			argv[c++] = ptr;
		}
	}

	return (argv);
}

char **
lg_argextra(char **argv, int argc, struct cmd *cmdp)
{
	char **new_argv;
	int i, c = 0;

	/* Count elements */
	for (i = 0; cmdp->earg[i] != NULL; i++)
		c++;

	/* Generate array */
	if ((new_argv = calloc(c + argc + 1, sizeof(char *))) == NULL) {
		printf("fatal error: %s\n", strerror(errno));
		return (NULL);
	}

	/* Fill array */
	for (i = c = 0; cmdp->earg[i] != NULL; i++)
		new_argv[c++] = cmdp->earg[i];

	/* Append old array */
	for (i = 0; i < argc; i++)
		new_argv[c++] = argv[i];

	new_argv[c] = NULL;

	free(argv);

	return (new_argv);
}

int
lg_incl(const char *file)
{
	char buf[BUFSIZ];
	int fd, len;

	if ((fd = open(file, O_RDONLY)) == -1)
		return (errno);

	do {
		len = read(fd, buf, sizeof(buf));
		fwrite(buf, len, 1, stdout);
	} while(len == BUFSIZ);

	close(fd);
	return (0);
}

int
main(void)
{
	char *query, *myname, *self, *cmd = NULL, *req;
	char **argv = NULL;
	int ret = 1, argc = 0, query_length = 0;
	struct stat st;
	u_int i;
	struct cmd *cmdp = NULL;

	if (pledge("stdio rpath proc exec flock cpath wpath", NULL) == -1)
		err(1, "pledge");

	if ((myname = lg_getenv("SERVER_NAME", NULL)) == NULL)
		return (1);

	printf("Content-Type: %s\n"
	    "Cache-Control: no-cache\n\n"
	    "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?>\n"
	    "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.1//EN\" "
	    "\"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\">\n"
	    "<html xmlns=\"http://www.w3.org/1999/xhtml\">\n"
	    "<head>\n"
	    "<title>%s: %s</title>\n",
	    CONTENT_TYPE, NAME, myname);
	if (stat(INC_STYLE, &st) == 0) {
		printf("<style type='text/css'><!--\n");
		lg_incl(INC_STYLE);
		printf("--></style>\n");
	}
	if (stat(INC_HEAD, &st) != 0 || lg_incl(INC_HEAD) != 0) {
		printf("</head>\n"
		    "<body>\n");
	}

	printf("<h1>%s: %s</h1>\n", NAME, myname);
	printf("<h2>%s</h2>\n", BRIEF);

	/* print a form with possible options */
	if ((self = lg_getenv("SCRIPT_NAME", NULL)) == NULL) {
		printf("fatal error: invalid request\n");
		goto err;
	}
	if ((query = lg_getenv("QUERY_STRING", &query_length)) != NULL)
		cmd = lg_getarg("cmd=", query, query_length);
	printf(
	    "<form action='%s'>\n"
	    "<div class=\"command\">\n"
	    "<select name='cmd'>\n",
	    self);
	for (i = 0; cmds[i].name != NULL; i++) {
		if (!lg_checkperm(&cmds[i]))
			continue;

		if (cmd != NULL && strcmp(cmd, cmds[i].name) == 0)
			printf("<option value='%s' selected='selected'>%s"
			    "</option>\n",
			    cmds[i].name, cmds[i].name);
		else
			printf("<option value='%s'>%s</option>\n",
			    cmds[i].name, cmds[i].name);
	}
	printf("</select>\n"
	    "<input type='text' name='req'/>\n"
	    "<input type='submit' value='submit'/>\n"
	    "</div>\n"
	    "</form>\n"
	    "<pre>\n");
	fflush(stdout);

#ifdef DEBUG
	if (close(2) == -1 || dup2(1, 2) == -1)
#else
	if (close(2) == -1)
#endif
	{
		printf("fatal error: %s\n", strerror(errno));
		goto err;
	}

	if (query == NULL)
		goto err;
	if (cmd == NULL) {
		printf("unspecified command\n");
		goto err;
	}
	if ((req = lg_getarg("req=", query, query_length)) != NULL) {
		/* Could be NULL */
		argv = lg_arg2argv(req, &argc);
	}

	for (i = 0; cmds[i].name != NULL; i++) {
		if (strcmp(cmd, cmds[i].name) == 0) {
			cmdp = &cmds[i];
			break;
		}
	}

	if (cmdp == NULL) {
		printf("invalid command: %s\n", cmd);
		goto err;
	}
	if (argc > cmdp->maxargs) {
		printf("superfluous argument(s): %s %s\n",
		    cmd, cmdp->args ? cmdp->args : "");
		goto err;
	}
	if (argc < cmdp->minargs) {
		printf("missing argument(s): %s %s\n", cmd, cmdp->args);
		goto err;
	}

	if (cmdp->func != NULL) {
		ret = cmdp->func(cmds, argv);
	} else {
		if ((argv = lg_argextra(argv, argc, cmdp)) == NULL)
			goto err;
		ret = lg_exec(cmdp->earg[0], argv);
	}
	if (ret != 0)
		printf("\nfailed%s\n", ret == 127 ? ": file not found" : ".");
	else
		printf("\nsuccess.\n");

 err:
	fflush(stdout);

	free(argv);

	printf("</pre>\n");

	if (stat(INC_FOOT, &st) != 0 || lg_incl(INC_FOOT) != 0)
		printf("<hr/>\n");

	printf("<div class='footer'>\n"
	    "<small>%s - %s<br/>Copyright (c) %s</small>\n"
	    "</div>\n"
	    "</body>\n"
	    "</html>\n", NAME, BRIEF, COPYRIGHT);

	return (ret);
}


Generated by: GCOVR (Version 3.3)

Line	Branch	Exec	Source
1			/* $OpenBSD: bgplg.c,v 1.16 2016/04/05 21:57:58 sthen Exp $ */
2
3			/*
4			* Copyright (c) 2005, 2006 Reyk Floeter <reyk@openbsd.org>
5			*
6			* Permission to use, copy, modify, and distribute this software for any
7			* purpose with or without fee is hereby granted, provided that the above
8			* copyright notice and this permission notice appear in all copies.
9			*
10			* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11			* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12			* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13			* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14			* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15			* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16			* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17			*/
18
19			#include <sys/types.h>
20			#include <sys/stat.h>
21
22			#include <stdio.h>
23			#include <stdlib.h>
24			#include <signal.h>
25			#include <string.h>
26			#include <unistd.h>
27			#include <limits.h>
28			#include <ctype.h>
29			#include <errno.h>
30			#include <fcntl.h>
31			#include <err.h>
32
33			#include "bgplg.h"
34
35			#define INC_STYLE "/conf/bgplg.css"
36			#define INC_HEAD "/conf/bgplg.head"
37			#define INC_FOOT "/conf/bgplg.foot"
38
39			#define BGPDSOCK "/run/bgpd.rsock"
40			#define BGPCTL "/bin/bgpctl", "-s", BGPDSOCK
41			#define PING "/bin/ping"
42			#define TRACEROUTE "/bin/traceroute"
43			#define PING6 "/bin/ping6"
44			#define TRACEROUTE6 "/bin/traceroute6"
45			#define CONTENT_TYPE "text/html"
46
47			static struct cmd cmds[] = CMDS;
48
49			char lg_getenv(const char , int *);
50			void lg_urldecode(char *);
51			char *lg_arg2argv(char , int *);
52			char lg_argextra(char , int, struct cmd *);
53			char lg_getarg(const char , char *, int);
54			int lg_incl(const char *);
55
56			void
57			lg_urldecode(char *str)
58			{
59			size_t i, c, len;
60			char code[3];
61			long result;
62
63			if (str && *str) {
64			len = strlen(str);
65			i = c = 0;
66			while (i < len) {
67			if (str[i] == '%' && i <= (len - 2)) {
68			if (isxdigit((unsigned char)str[i + 1]) &&
69			isxdigit((unsigned char)str[i + 2])) {
70			code[0] = str[i + 1];
71			code[1] = str[i + 2];
72			code[2] = 0;
73			result = strtol(code, NULL, 16);
74			/* Replace NUL chars with a space */
75			if (result == 0)
76			result = ' ';
77			str[c++] = result;
78			i += 3;
79			} else {
80			str[c++] = '%';
81			i++;
82			}
83			} else if (str[i] == '+') {
84			str[i] = ' ';
85			} else {
86			if (c != i)
87			str[c] = str[i];
88			c++;
89			i++;
90			}
91			}
92			str[c] = 0x0;
93			}
94			}
95
96			char *
97			lg_getenv(const char name, int lenp)
98			{
99			size_t len;
100			u_int i;
101			char *ptr;
102
103			if ((ptr = getenv(name)) == NULL)
104			return (NULL);
105
106			lg_urldecode(ptr);
107
108			if (!(len = strlen(ptr)))
109			return (NULL);
110
111			if (lenp != NULL)
112			*lenp = len;
113
114			#define allowed_in_string(_x) \
115			(isalnum((unsigned char)_x) \|\| strchr("-_.:/= ", _x))
116
117			for (i = 0; i < len; i++) {
118			if (ptr[i] == '&')
119			ptr[i] = '\0';
120			if (!allowed_in_string(ptr[i])) {
121			printf("invalid character in input\n");
122			return (NULL);
123			}
124			}
125
126			return (ptr);
127			#undef allowed_in_string
128			}
129
130			char *
131			lg_getarg(const char name, char arg, int len)
132			{
133			char *ptr = arg;
134			size_t namelen, ptrlen;
135			int i;
136
137			namelen = strlen(name);
138
139			for (i = 0; i < len; i++) {
140			if (arg[i] == '\0')
141			continue;
142			ptr = arg + i;
143			ptrlen = strlen(ptr);
144			if (namelen >= ptrlen)
145			continue;
146			if (strncmp(name, ptr, namelen) == 0)
147			return (ptr + namelen);
148			}
149
150			return (NULL);
151			}
152
153			char **
154			lg_arg2argv(char arg, int argc)
155			{
156			char *argv, ptr = arg;
157			size_t len;
158			u_int i, c = 1;
159
160			len = strlen(arg);
161
162			/* Count elements */
163			for (i = 0; i < (len - 1); i++) {
164			if (isspace((unsigned char)arg[i])) {
165			/* filter out additional options */
166			if (arg[i + 1] == '-') {
167			printf("invalid input\n");
168			return (NULL);
169			}
170			arg[i] = '\0';
171			c++;
172			}
173			}
174
175			/* Generate array */
176			if ((argv = calloc(c + 1, sizeof(char *))) == NULL) {
177			printf("fatal error: %s\n", strerror(errno));
178			return (NULL);
179			}
180
181			argv[c] = NULL;
182			*argc = c;
183
184			/* Fill array */
185			for (i = c = 0; i < (len - 1); i++) {
186			if (arg[i] == '\0' \|\| i == 0) {
187			if (i != 0)
188			ptr = &arg[i + 1];
189			argv[c++] = ptr;
190			}
191			}
192
193			return (argv);
194			}
195
196			char **
197			lg_argextra(char *argv, int argc, struct cmd cmdp)
198			{
199			char **new_argv;
200			int i, c = 0;
201
202			/* Count elements */
203			for (i = 0; cmdp->earg[i] != NULL; i++)
204			c++;
205
206			/* Generate array */
207			if ((new_argv = calloc(c + argc + 1, sizeof(char *))) == NULL) {
208			printf("fatal error: %s\n", strerror(errno));
209			return (NULL);
210			}
211
212			/* Fill array */
213			for (i = c = 0; cmdp->earg[i] != NULL; i++)
214			new_argv[c++] = cmdp->earg[i];
215
216			/* Append old array */
217			for (i = 0; i < argc; i++)
218			new_argv[c++] = argv[i];
219
220			new_argv[c] = NULL;
221
222			free(argv);
223
224			return (new_argv);
225			}
226
227			int
228			lg_incl(const char *file)
229			{
230			char buf[BUFSIZ];
231			int fd, len;
232
233			if ((fd = open(file, O_RDONLY)) == -1)
234			return (errno);
235
236			do {
237			len = read(fd, buf, sizeof(buf));
238			fwrite(buf, len, 1, stdout);
239			} while(len == BUFSIZ);
240
241			close(fd);
242			return (0);
243			}
244
245			int
246			main(void)
247			{
248			char query, myname, self, cmd = NULL, *req;
249			char **argv = NULL;
250			int ret = 1, argc = 0, query_length = 0;
251			struct stat st;
252			u_int i;
253			struct cmd *cmdp = NULL;
254
255			if (pledge("stdio rpath proc exec flock cpath wpath", NULL) == -1)
256			err(1, "pledge");
257
258			if ((myname = lg_getenv("SERVER_NAME", NULL)) == NULL)
259			return (1);
260
261			printf("Content-Type: %s\n"
262			"Cache-Control: no-cache\n\n"
263			"<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?>\n"
264			"<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.1//EN\" "
265			"\"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd\">\n"
266			"<html xmlns=\"http://www.w3.org/1999/xhtml\">\n"
267			"<head>\n"
268			"<title>%s: %s</title>\n",
269			CONTENT_TYPE, NAME, myname);
270			if (stat(INC_STYLE, &st) == 0) {
271			printf("<style type='text/css'><!--\n");
272			lg_incl(INC_STYLE);
273			printf("--></style>\n");
274			}
275			if (stat(INC_HEAD, &st) != 0 \|\| lg_incl(INC_HEAD) != 0) {
276			printf("</head>\n"
277			"<body>\n");
278			}
279
280			printf("<h1>%s: %s</h1>\n", NAME, myname);
281			printf("<h2>%s</h2>\n", BRIEF);
282
283			/* print a form with possible options */
284			if ((self = lg_getenv("SCRIPT_NAME", NULL)) == NULL) {
285			printf("fatal error: invalid request\n");
286			goto err;
287			}
288			if ((query = lg_getenv("QUERY_STRING", &query_length)) != NULL)
289			cmd = lg_getarg("cmd=", query, query_length);
290			printf(
291			"<form action='%s'>\n"
292			"<div class=\"command\">\n"
293			"<select name='cmd'>\n",
294			self);
295			for (i = 0; cmds[i].name != NULL; i++) {
296			if (!lg_checkperm(&cmds[i]))
297			continue;
298
299			if (cmd != NULL && strcmp(cmd, cmds[i].name) == 0)
300			printf("<option value='%s' selected='selected'>%s"
301			"</option>\n",
302			cmds[i].name, cmds[i].name);
303			else
304			printf("<option value='%s'>%s</option>\n",
305			cmds[i].name, cmds[i].name);
306			}
307			printf("</select>\n"
308			"<input type='text' name='req'/>\n"
309			"<input type='submit' value='submit'/>\n"
310			"</div>\n"
311			"</form>\n"
312			"<pre>\n");
313			fflush(stdout);
314
315			#ifdef DEBUG
316			if (close(2) == -1 \|\| dup2(1, 2) == -1)
317			#else
318			if (close(2) == -1)
319			#endif
320			{
321			printf("fatal error: %s\n", strerror(errno));
322			goto err;
323			}
324
325			if (query == NULL)
326			goto err;
327			if (cmd == NULL) {
328			printf("unspecified command\n");
329			goto err;
330			}
331			if ((req = lg_getarg("req=", query, query_length)) != NULL) {
332			/* Could be NULL */
333			argv = lg_arg2argv(req, &argc);
334			}
335
336			for (i = 0; cmds[i].name != NULL; i++) {
337			if (strcmp(cmd, cmds[i].name) == 0) {
338			cmdp = &cmds[i];
339			break;
340			}
341			}
342
343			if (cmdp == NULL) {
344			printf("invalid command: %s\n", cmd);
345			goto err;
346			}
347			if (argc > cmdp->maxargs) {
348			printf("superfluous argument(s): %s %s\n",
349			cmd, cmdp->args ? cmdp->args : "");
350			goto err;
351			}
352			if (argc < cmdp->minargs) {
353			printf("missing argument(s): %s %s\n", cmd, cmdp->args);
354			goto err;
355			}
356
357			if (cmdp->func != NULL) {
358			ret = cmdp->func(cmds, argv);
359			} else {
360			if ((argv = lg_argextra(argv, argc, cmdp)) == NULL)
361			goto err;
362			ret = lg_exec(cmdp->earg[0], argv);
363			}
364			if (ret != 0)
365			printf("\nfailed%s\n", ret == 127 ? ": file not found" : ".");
366			else
367			printf("\nsuccess.\n");
368
369			err:
370			fflush(stdout);
371
372			free(argv);
373
374			printf("</pre>\n");
375
376			if (stat(INC_FOOT, &st) != 0 \|\| lg_incl(INC_FOOT) != 0)
377			printf("<hr/>\n");
378
379			printf("<div class='footer'>\n"
380			"<small>%s - %s<br/>Copyright (c) %s</small>\n"
381			"</div>\n"
382			"</body>\n"
383			"</html>\n", NAME, BRIEF, COPYRIGHT);
384
385			return (ret);
386			}