nc_bloaty.c 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915
  1. /* Based on netcat 1.10 RELEASE 960320 written by hobbit@avian.org.
  2. * Released into public domain by the author.
  3. *
  4. * Copyright (C) 2007 Denys Vlasenko.
  5. *
  6. * Licensed under GPLv2, see file LICENSE in this source tree.
  7. */
  8. /* Author's comments from nc 1.10:
  9. * =====================
  10. * Netcat is entirely my own creation, although plenty of other code was used as
  11. * examples. It is freely given away to the Internet community in the hope that
  12. * it will be useful, with no restrictions except giving credit where it is due.
  13. * No GPLs, Berkeley copyrights or any of that nonsense. The author assumes NO
  14. * responsibility for how anyone uses it. If netcat makes you rich somehow and
  15. * you're feeling generous, mail me a check. If you are affiliated in any way
  16. * with Microsoft Network, get a life. Always ski in control. Comments,
  17. * questions, and patches to hobbit@avian.org.
  18. * ...
  19. * Netcat and the associated package is a product of Avian Research, and is freely
  20. * available in full source form with no restrictions save an obligation to give
  21. * credit where due.
  22. * ...
  23. * A damn useful little "backend" utility begun 950915 or thereabouts,
  24. * as *Hobbit*'s first real stab at some sockets programming. Something that
  25. * should have and indeed may have existed ten years ago, but never became a
  26. * standard Unix utility. IMHO, "nc" could take its place right next to cat,
  27. * cp, rm, mv, dd, ls, and all those other cryptic and Unix-like things.
  28. * =====================
  29. *
  30. * Much of author's comments are still retained in the code.
  31. *
  32. * Functionality removed (rationale):
  33. * - miltiple-port ranges, randomized port scanning (use nmap)
  34. * - telnet support (use telnet)
  35. * - source routing
  36. * - multiple DNS checks
  37. * Functionalty which is different from nc 1.10:
  38. * - PROG in '-e PROG' can have ARGS (and options).
  39. * Because of this -e option must be last.
  40. //TODO: remove -e incompatibility?
  41. * - we don't redirect stderr to the network socket for the -e PROG.
  42. * (PROG can do it itself if needed, but sometimes it is NOT wanted!)
  43. * - numeric addresses are printed in (), not [] (IPv6 looks better),
  44. * port numbers are inside (): (1.2.3.4:5678)
  45. * - network read errors are reported on verbose levels > 1
  46. * (nc 1.10 treats them as EOF)
  47. * - TCP connects from wrong ip/ports (if peer ip:port is specified
  48. * on the command line, but accept() says that it came from different addr)
  49. * are closed, but we don't exit - we continue to listen/accept.
  50. * Since bbox 1.22:
  51. * - nc exits when _both_ stdin and network are closed.
  52. * This makes these two commands:
  53. * echo "Yes" | nc 127.0.0.1 1234
  54. * echo "no" | nc -lp 1234
  55. * exchange their data _and exit_ instead of being stuck.
  56. */
  57. /* done in nc.c: #include "libbb.h" */
  58. //usage:#if ENABLE_NC_110_COMPAT
  59. //usage:
  60. //usage:#define nc_trivial_usage
  61. //usage: "[OPTIONS] HOST PORT - connect"
  62. //usage: IF_NC_SERVER("\n"
  63. //usage: "nc [OPTIONS] -l -p PORT [HOST] [PORT] - listen"
  64. //usage: )
  65. //usage:#define nc_full_usage "\n\n"
  66. //usage: " -e PROG Run PROG after connect (must be last)"
  67. //usage: IF_NC_SERVER(
  68. //usage: "\n -l Listen mode, for inbound connects"
  69. //usage: "\n -lk With -e, provides persistent server"
  70. /* -ll does the same as -lk, but its our extension, while -k is BSD'd,
  71. * presumably more widely known. Therefore we advertise it, not -ll.
  72. * I would like to drop -ll support, but our "small" nc supports it,
  73. * and Rob uses it.
  74. */
  75. //usage: )
  76. //usage: "\n -p PORT Local port"
  77. //usage: "\n -s ADDR Local address"
  78. //usage: "\n -w SEC Timeout for connects and final net reads"
  79. //usage: IF_NC_EXTRA(
  80. //usage: "\n -i SEC Delay interval for lines sent" /* ", ports scanned" */
  81. //usage: )
  82. //usage: "\n -n Don't do DNS resolution"
  83. //usage: "\n -u UDP mode"
  84. //usage: "\n -v Verbose"
  85. //usage: IF_NC_EXTRA(
  86. //usage: "\n -o FILE Hex dump traffic"
  87. //usage: "\n -z Zero-I/O mode (scanning)"
  88. //usage: )
  89. //usage:#endif
  90. /* "\n -r Randomize local and remote ports" */
  91. /* "\n -g gateway Source-routing hop point[s], up to 8" */
  92. /* "\n -G num Source-routing pointer: 4, 8, 12, ..." */
  93. /* "\nport numbers can be individual or ranges: lo-hi [inclusive]" */
  94. /* -e PROG can take ARGS too: "nc ... -e ls -l", but we don't document it
  95. * in help text: nc 1.10 does not allow that. We don't want to entice
  96. * users to use this incompatibility */
  97. enum {
  98. SLEAZE_PORT = 31337, /* for UDP-scan RTT trick, change if ya want */
  99. BIGSIZ = 8192, /* big buffers */
  100. netfd = 3,
  101. ofd = 4,
  102. };
  103. struct globals {
  104. /* global cmd flags: */
  105. unsigned o_verbose;
  106. unsigned o_wait;
  107. #if ENABLE_NC_EXTRA
  108. unsigned o_interval;
  109. #endif
  110. /*int netfd;*/
  111. /*int ofd;*/ /* hexdump output fd */
  112. #if ENABLE_LFS
  113. #define SENT_N_RECV_M "sent %llu, rcvd %llu\n"
  114. unsigned long long wrote_out; /* total stdout bytes */
  115. unsigned long long wrote_net; /* total net bytes */
  116. #else
  117. #define SENT_N_RECV_M "sent %u, rcvd %u\n"
  118. unsigned wrote_out; /* total stdout bytes */
  119. unsigned wrote_net; /* total net bytes */
  120. #endif
  121. char *proggie0saved;
  122. /* ouraddr is never NULL and goes through three states as we progress:
  123. 1 - local address before bind (IP/port possibly zero)
  124. 2 - local address after bind (port is nonzero)
  125. 3 - local address after connect??/recv/accept (IP and port are nonzero) */
  126. struct len_and_sockaddr *ouraddr;
  127. /* themaddr is NULL if no peer hostname[:port] specified on command line */
  128. struct len_and_sockaddr *themaddr;
  129. /* remend is set after connect/recv/accept to the actual ip:port of peer */
  130. struct len_and_sockaddr remend;
  131. jmp_buf jbuf; /* timer crud */
  132. char bigbuf_in[BIGSIZ]; /* data buffers */
  133. char bigbuf_net[BIGSIZ];
  134. };
  135. #define G (*ptr_to_globals)
  136. #define wrote_out (G.wrote_out )
  137. #define wrote_net (G.wrote_net )
  138. #define ouraddr (G.ouraddr )
  139. #define themaddr (G.themaddr )
  140. #define remend (G.remend )
  141. #define jbuf (G.jbuf )
  142. #define bigbuf_in (G.bigbuf_in )
  143. #define bigbuf_net (G.bigbuf_net)
  144. #define o_verbose (G.o_verbose )
  145. #define o_wait (G.o_wait )
  146. #if ENABLE_NC_EXTRA
  147. #define o_interval (G.o_interval)
  148. #else
  149. #define o_interval 0
  150. #endif
  151. #define INIT_G() do { \
  152. SET_PTR_TO_GLOBALS(xzalloc(sizeof(G))); \
  153. } while (0)
  154. /* Must match getopt32 call! */
  155. enum {
  156. OPT_n = (1 << 0),
  157. OPT_p = (1 << 1),
  158. OPT_s = (1 << 2),
  159. OPT_u = (1 << 3),
  160. OPT_v = (1 << 4),
  161. OPT_w = (1 << 5),
  162. OPT_l = (1 << 6) * ENABLE_NC_SERVER,
  163. OPT_k = (1 << 7) * ENABLE_NC_SERVER,
  164. OPT_i = (1 << (6+2*ENABLE_NC_SERVER)) * ENABLE_NC_EXTRA,
  165. OPT_o = (1 << (7+2*ENABLE_NC_SERVER)) * ENABLE_NC_EXTRA,
  166. OPT_z = (1 << (8+2*ENABLE_NC_SERVER)) * ENABLE_NC_EXTRA,
  167. };
  168. #define o_nflag (option_mask32 & OPT_n)
  169. #define o_udpmode (option_mask32 & OPT_u)
  170. #if ENABLE_NC_EXTRA
  171. #define o_ofile (option_mask32 & OPT_o)
  172. #define o_zero (option_mask32 & OPT_z)
  173. #else
  174. #define o_ofile 0
  175. #define o_zero 0
  176. #endif
  177. /* Debug: squirt whatever message and sleep a bit so we can see it go by. */
  178. /* Beware: writes to stdOUT... */
  179. #if 0
  180. #define Debug(...) do { printf(__VA_ARGS__); printf("\n"); fflush_all(); sleep(1); } while (0)
  181. #else
  182. #define Debug(...) do { } while (0)
  183. #endif
  184. #define holler_error(...) do { if (o_verbose) bb_error_msg(__VA_ARGS__); } while (0)
  185. #define holler_perror(...) do { if (o_verbose) bb_perror_msg(__VA_ARGS__); } while (0)
  186. /* catch: no-brainer interrupt handler */
  187. static void catch(int sig)
  188. {
  189. if (o_verbose > 1) /* normally we don't care */
  190. fprintf(stderr, SENT_N_RECV_M, wrote_net, wrote_out);
  191. fprintf(stderr, "punt!\n");
  192. kill_myself_with_sig(sig);
  193. }
  194. /* unarm */
  195. static void unarm(void)
  196. {
  197. signal(SIGALRM, SIG_IGN);
  198. alarm(0);
  199. }
  200. /* timeout and other signal handling cruft */
  201. static void tmtravel(int sig UNUSED_PARAM)
  202. {
  203. unarm();
  204. longjmp(jbuf, 1);
  205. }
  206. /* arm: set the timer. */
  207. static void arm(unsigned secs)
  208. {
  209. signal(SIGALRM, tmtravel);
  210. alarm(secs);
  211. }
  212. /* findline:
  213. find the next newline in a buffer; return inclusive size of that "line",
  214. or the entire buffer size, so the caller knows how much to then write().
  215. Not distinguishing \n vs \r\n for the nonce; it just works as is... */
  216. static unsigned findline(char *buf, unsigned siz)
  217. {
  218. char * p;
  219. int x;
  220. if (!buf) /* various sanity checks... */
  221. return 0;
  222. if (siz > BIGSIZ)
  223. return 0;
  224. x = siz;
  225. for (p = buf; x > 0; x--) {
  226. if (*p == '\n') {
  227. x = (int) (p - buf);
  228. x++; /* 'sokay if it points just past the end! */
  229. Debug("findline returning %d", x);
  230. return x;
  231. }
  232. p++;
  233. } /* for */
  234. Debug("findline returning whole thing: %d", siz);
  235. return siz;
  236. } /* findline */
  237. /* doexec:
  238. fiddle all the file descriptors around, and hand off to another prog. Sort
  239. of like a one-off "poor man's inetd". This is the only section of code
  240. that would be security-critical, which is why it's ifdefed out by default.
  241. Use at your own hairy risk; if you leave shells lying around behind open
  242. listening ports you deserve to lose!! */
  243. static int doexec(char **proggie) NORETURN;
  244. static int doexec(char **proggie)
  245. {
  246. if (G.proggie0saved)
  247. proggie[0] = G.proggie0saved;
  248. xmove_fd(netfd, 0);
  249. dup2(0, 1);
  250. /* dup2(0, 2); - do we *really* want this? NO!
  251. * exec'ed prog can do it yourself, if needed */
  252. BB_EXECVP_or_die(proggie);
  253. }
  254. /* connect_w_timeout:
  255. return an fd for one of
  256. an open outbound TCP connection, a UDP stub-socket thingie, or
  257. an unconnected TCP or UDP socket to listen on.
  258. Examines various global o_blah flags to figure out what to do.
  259. lad can be NULL, then socket is not bound to any local ip[:port] */
  260. static int connect_w_timeout(int fd)
  261. {
  262. int rr;
  263. /* wrap connect inside a timer, and hit it */
  264. arm(o_wait);
  265. if (setjmp(jbuf) == 0) {
  266. rr = connect(fd, &themaddr->u.sa, themaddr->len);
  267. unarm();
  268. } else { /* setjmp: connect failed... */
  269. rr = -1;
  270. errno = ETIMEDOUT; /* fake it */
  271. }
  272. return rr;
  273. }
  274. /* dolisten:
  275. listens for
  276. incoming and returns an open connection *from* someplace. If we were
  277. given host/port args, any connections from elsewhere are rejected. This
  278. in conjunction with local-address binding should limit things nicely... */
  279. static void dolisten(int is_persistent, char **proggie)
  280. {
  281. int rr;
  282. if (!o_udpmode)
  283. xlisten(netfd, 1); /* TCP: gotta listen() before we can get */
  284. /* Various things that follow temporarily trash bigbuf_net, which might contain
  285. a copy of any recvfrom()ed packet, but we'll read() another copy later. */
  286. /* I can't believe I have to do all this to get my own goddamn bound address
  287. and port number. It should just get filled in during bind() or something.
  288. All this is only useful if we didn't say -p for listening, since if we
  289. said -p we *know* what port we're listening on. At any rate we won't bother
  290. with it all unless we wanted to see it, although listening quietly on a
  291. random unknown port is probably not very useful without "netstat". */
  292. if (o_verbose) {
  293. char *addr;
  294. getsockname(netfd, &ouraddr->u.sa, &ouraddr->len);
  295. //if (rr < 0)
  296. // bb_perror_msg_and_die("getsockname after bind");
  297. addr = xmalloc_sockaddr2dotted(&ouraddr->u.sa);
  298. fprintf(stderr, "listening on %s ...\n", addr);
  299. free(addr);
  300. }
  301. if (o_udpmode) {
  302. /* UDP is a speeeeecial case -- we have to do I/O *and* get the calling
  303. party's particulars all at once, listen() and accept() don't apply.
  304. At least in the BSD universe, however, recvfrom/PEEK is enough to tell
  305. us something came in, and we can set things up so straight read/write
  306. actually does work after all. Yow. YMMV on strange platforms! */
  307. /* I'm not completely clear on how this works -- BSD seems to make UDP
  308. just magically work in a connect()ed context, but we'll undoubtedly run
  309. into systems this deal doesn't work on. For now, we apparently have to
  310. issue a connect() on our just-tickled socket so we can write() back.
  311. Again, why the fuck doesn't it just get filled in and taken care of?!
  312. This hack is anything but optimal. Basically, if you want your listener
  313. to also be able to send data back, you need this connect() line, which
  314. also has the side effect that now anything from a different source or even a
  315. different port on the other end won't show up and will cause ICMP errors.
  316. I guess that's what they meant by "connect".
  317. Let's try to remember what the "U" is *really* for, eh? */
  318. /* If peer address is specified, connect to it */
  319. remend.len = LSA_SIZEOF_SA;
  320. if (themaddr) {
  321. remend = *themaddr;
  322. xconnect(netfd, &themaddr->u.sa, themaddr->len);
  323. }
  324. /* peek first packet and remember peer addr */
  325. arm(o_wait); /* might as well timeout this, too */
  326. if (setjmp(jbuf) == 0) { /* do timeout for initial connect */
  327. /* (*ouraddr) is prefilled with "default" address */
  328. /* and here we block... */
  329. rr = recv_from_to(netfd, NULL, 0, MSG_PEEK, /*was bigbuf_net, BIGSIZ*/
  330. &remend.u.sa, &ouraddr->u.sa, ouraddr->len);
  331. if (rr < 0)
  332. bb_perror_msg_and_die("recvfrom");
  333. unarm();
  334. } else
  335. bb_error_msg_and_die("timeout");
  336. /* Now we learned *to which IP* peer has connected, and we want to anchor
  337. our socket on it, so that our outbound packets will have correct local IP.
  338. Unfortunately, bind() on already bound socket will fail now (EINVAL):
  339. xbind(netfd, &ouraddr->u.sa, ouraddr->len);
  340. Need to read the packet, save data, close this socket and
  341. create new one, and bind() it. TODO */
  342. if (!themaddr)
  343. xconnect(netfd, &remend.u.sa, ouraddr->len);
  344. } else {
  345. /* TCP */
  346. another:
  347. arm(o_wait); /* wrap this in a timer, too; 0 = forever */
  348. if (setjmp(jbuf) == 0) {
  349. again:
  350. remend.len = LSA_SIZEOF_SA;
  351. rr = accept(netfd, &remend.u.sa, &remend.len);
  352. if (rr < 0)
  353. bb_perror_msg_and_die("accept");
  354. if (themaddr) {
  355. int sv_port, port, r;
  356. sv_port = get_nport(&remend.u.sa); /* save */
  357. port = get_nport(&themaddr->u.sa);
  358. if (port == 0) {
  359. /* "nc -nl -p LPORT RHOST" (w/o RPORT!):
  360. * we should accept any remote port */
  361. set_nport(&remend.u.sa, 0); /* blot out remote port# */
  362. }
  363. r = memcmp(&remend.u.sa, &themaddr->u.sa, remend.len);
  364. set_nport(&remend.u.sa, sv_port); /* restore */
  365. if (r != 0) {
  366. /* nc 1.10 bails out instead, and its error message
  367. * is not suppressed by o_verbose */
  368. if (o_verbose) {
  369. char *remaddr = xmalloc_sockaddr2dotted(&remend.u.sa);
  370. bb_error_msg("connect from wrong ip/port %s ignored", remaddr);
  371. free(remaddr);
  372. }
  373. close(rr);
  374. goto again;
  375. }
  376. }
  377. unarm();
  378. } else
  379. bb_error_msg_and_die("timeout");
  380. if (is_persistent && proggie) {
  381. /* -l -k -e PROG */
  382. signal(SIGCHLD, SIG_IGN); /* no zombies please */
  383. if (xvfork() != 0) {
  384. /* parent: go back and accept more connections */
  385. close(rr);
  386. goto another;
  387. }
  388. /* child */
  389. signal(SIGCHLD, SIG_DFL);
  390. }
  391. xmove_fd(rr, netfd); /* dump the old socket, here's our new one */
  392. /* find out what address the connection was *to* on our end, in case we're
  393. doing a listen-on-any on a multihomed machine. This allows one to
  394. offer different services via different alias addresses, such as the
  395. "virtual web site" hack. */
  396. getsockname(netfd, &ouraddr->u.sa, &ouraddr->len);
  397. //if (rr < 0)
  398. // bb_perror_msg_and_die("getsockname after accept");
  399. }
  400. if (o_verbose) {
  401. char *lcladdr, *remaddr, *remhostname;
  402. #if ENABLE_NC_EXTRA && defined(IP_OPTIONS)
  403. /* If we can, look for any IP options. Useful for testing the receiving end of
  404. such things, and is a good exercise in dealing with it. We do this before
  405. the connect message, to ensure that the connect msg is uniformly the LAST
  406. thing to emerge after all the intervening crud. Doesn't work for UDP on
  407. any machines I've tested, but feel free to surprise me. */
  408. char optbuf[40];
  409. socklen_t x = sizeof(optbuf);
  410. rr = getsockopt(netfd, IPPROTO_IP, IP_OPTIONS, optbuf, &x);
  411. if (rr >= 0 && x) { /* we've got options, lessee em... */
  412. *bin2hex(bigbuf_net, optbuf, x) = '\0';
  413. fprintf(stderr, "IP options: %s\n", bigbuf_net);
  414. }
  415. #endif
  416. /* now check out who it is. We don't care about mismatched DNS names here,
  417. but any ADDR and PORT we specified had better fucking well match the caller.
  418. Converting from addr to inet_ntoa and back again is a bit of a kludge, but
  419. gethostpoop wants a string and there's much gnarlier code out there already,
  420. so I don't feel bad.
  421. The *real* question is why BFD sockets wasn't designed to allow listens for
  422. connections *from* specific hosts/ports, instead of requiring the caller to
  423. accept the connection and then reject undesirable ones by closing.
  424. In other words, we need a TCP MSG_PEEK. */
  425. /* bbox: removed most of it */
  426. lcladdr = xmalloc_sockaddr2dotted(&ouraddr->u.sa);
  427. remaddr = xmalloc_sockaddr2dotted(&remend.u.sa);
  428. remhostname = o_nflag ? remaddr : xmalloc_sockaddr2host(&remend.u.sa);
  429. fprintf(stderr, "connect to %s from %s (%s)\n",
  430. lcladdr, remhostname, remaddr);
  431. free(lcladdr);
  432. free(remaddr);
  433. if (!o_nflag)
  434. free(remhostname);
  435. }
  436. if (proggie)
  437. doexec(proggie);
  438. }
  439. /* udptest:
  440. fire a couple of packets at a UDP target port, just to see if it's really
  441. there. On BSD kernels, ICMP host/port-unreachable errors get delivered to
  442. our socket as ECONNREFUSED write errors. On SV kernels, we lose; we'll have
  443. to collect and analyze raw ICMP ourselves a la satan's probe_udp_ports
  444. backend. Guess where one could swipe the appropriate code from...
  445. Use the time delay between writes if given, otherwise use the "tcp ping"
  446. trick for getting the RTT. [I got that idea from pluvius, and warped it.]
  447. Return either the original fd, or clean up and return -1. */
  448. #if ENABLE_NC_EXTRA
  449. static int udptest(void)
  450. {
  451. int rr;
  452. rr = write(netfd, bigbuf_in, 1);
  453. if (rr != 1)
  454. bb_perror_msg("udptest first write");
  455. if (o_wait)
  456. sleep(o_wait); // can be interrupted! while (t) nanosleep(&t)?
  457. else {
  458. /* use the tcp-ping trick: try connecting to a normally refused port, which
  459. causes us to block for the time that SYN gets there and RST gets back.
  460. Not completely reliable, but it *does* mostly work. */
  461. /* Set a temporary connect timeout, so packet filtration doesn't cause
  462. us to hang forever, and hit it */
  463. o_wait = 5; /* enough that we'll notice?? */
  464. rr = xsocket(ouraddr->u.sa.sa_family, SOCK_STREAM, 0);
  465. set_nport(&themaddr->u.sa, htons(SLEAZE_PORT));
  466. connect_w_timeout(rr);
  467. /* don't need to restore themaddr's port, it's not used anymore */
  468. close(rr);
  469. o_wait = 0; /* restore */
  470. }
  471. rr = write(netfd, bigbuf_in, 1);
  472. return (rr != 1); /* if rr == 1, return 0 (success) */
  473. }
  474. #else
  475. int udptest(void);
  476. #endif
  477. /* oprint:
  478. Hexdump bytes shoveled either way to a running logfile, in the format:
  479. D offset - - - - --- 16 bytes --- - - - - # .... ascii .....
  480. where "which" sets the direction indicator, D:
  481. 0 -- sent to network, or ">"
  482. 1 -- rcvd and printed to stdout, or "<"
  483. and "buf" and "n" are data-block and length. If the current block generates
  484. a partial line, so be it; we *want* that lockstep indication of who sent
  485. what when. Adapted from dgaudet's original example -- but must be ripping
  486. *fast*, since we don't want to be too disk-bound... */
  487. #if ENABLE_NC_EXTRA
  488. static void oprint(int direction, unsigned char *p, unsigned bc)
  489. {
  490. unsigned obc; /* current "global" offset */
  491. unsigned x;
  492. unsigned char *op; /* out hexdump ptr */
  493. unsigned char *ap; /* out asc-dump ptr */
  494. unsigned char stage[100];
  495. if (bc == 0)
  496. return;
  497. obc = wrote_net; /* use the globals! */
  498. if (direction == '<')
  499. obc = wrote_out;
  500. stage[0] = direction;
  501. stage[59] = '#'; /* preload separator */
  502. stage[60] = ' ';
  503. do { /* for chunk-o-data ... */
  504. x = 16;
  505. if (bc < 16) {
  506. /* memset(&stage[bc*3 + 11], ' ', 16*3 - bc*3); */
  507. memset(&stage[11], ' ', 16*3);
  508. x = bc;
  509. }
  510. sprintf((char *)&stage[1], " %8.8x ", obc); /* xxx: still slow? */
  511. bc -= x; /* fix current count */
  512. obc += x; /* fix current offset */
  513. op = &stage[11]; /* where hex starts */
  514. ap = &stage[61]; /* where ascii starts */
  515. do { /* for line of dump, however long ... */
  516. *op++ = 0x20 | bb_hexdigits_upcase[*p >> 4];
  517. *op++ = 0x20 | bb_hexdigits_upcase[*p & 0x0f];
  518. *op++ = ' ';
  519. if ((*p > 31) && (*p < 127))
  520. *ap = *p; /* printing */
  521. else
  522. *ap = '.'; /* nonprinting, loose def */
  523. ap++;
  524. p++;
  525. } while (--x);
  526. *ap++ = '\n'; /* finish the line */
  527. xwrite(ofd, stage, ap - stage);
  528. } while (bc);
  529. }
  530. #else
  531. void oprint(int direction, unsigned char *p, unsigned bc);
  532. #endif
  533. /* readwrite:
  534. handle stdin/stdout/network I/O. Bwahaha!! -- the i/o loop from hell.
  535. In this instance, return what might become our exit status. */
  536. static int readwrite(void)
  537. {
  538. char *zp = zp; /* gcc */ /* stdin buf ptr */
  539. char *np = np; /* net-in buf ptr */
  540. unsigned rzleft;
  541. unsigned rnleft;
  542. unsigned netretry; /* net-read retry counter */
  543. unsigned fds_open;
  544. struct pollfd pfds[2];
  545. pfds[0].fd = STDIN_FILENO;
  546. pfds[0].events = POLLIN;
  547. pfds[1].fd = netfd;
  548. pfds[1].events = POLLIN;
  549. fds_open = 2;
  550. netretry = 2;
  551. rzleft = rnleft = 0;
  552. if (o_interval)
  553. sleep(o_interval); /* pause *before* sending stuff, too */
  554. /* and now the big ol' shoveling loop ... */
  555. /* nc 1.10 has "while (FD_ISSET(netfd)" here */
  556. while (fds_open) {
  557. int rr;
  558. int poll_tmout_ms;
  559. unsigned wretry = 8200; /* net-write sanity counter */
  560. poll_tmout_ms = -1;
  561. if (o_wait) {
  562. poll_tmout_ms = INT_MAX;
  563. if (o_wait < INT_MAX / 1000)
  564. poll_tmout_ms = o_wait * 1000;
  565. }
  566. rr = poll(pfds, 2, poll_tmout_ms);
  567. if (rr < 0 && errno != EINTR) { /* might have gotten ^Zed, etc */
  568. holler_perror("poll");
  569. close(netfd);
  570. return 1;
  571. }
  572. /* if we have a timeout AND stdin is closed AND we haven't heard anything
  573. from the net during that time, assume it's dead and close it too. */
  574. if (rr == 0) {
  575. if (!pfds[0].revents) {
  576. netretry--; /* we actually try a coupla times. */
  577. if (!netretry) {
  578. if (o_verbose > 1) /* normally we don't care */
  579. fprintf(stderr, "net timeout\n");
  580. /*close(netfd); - redundant, exit will do it */
  581. return 0; /* not an error! */
  582. }
  583. }
  584. } /* timeout */
  585. /* Ding!! Something arrived, go check all the incoming hoppers, net first */
  586. if (pfds[1].revents) { /* net: ding! */
  587. rr = read(netfd, bigbuf_net, BIGSIZ);
  588. if (rr <= 0) {
  589. if (rr < 0 && o_verbose > 1) {
  590. /* nc 1.10 doesn't do this */
  591. bb_perror_msg("net read");
  592. }
  593. pfds[1].fd = -1; /* don't poll for netfd anymore */
  594. fds_open--;
  595. rzleft = 0; /* can't write anymore: broken pipe */
  596. } else {
  597. rnleft = rr;
  598. np = bigbuf_net;
  599. }
  600. Debug("got %d from the net, errno %d", rr, errno);
  601. } /* net:ding */
  602. /* if we're in "slowly" mode there's probably still stuff in the stdin
  603. buffer, so don't read unless we really need MORE INPUT! MORE INPUT! */
  604. if (rzleft)
  605. goto shovel;
  606. /* okay, suck more stdin */
  607. if (pfds[0].revents) { /* stdin: ding! */
  608. rr = read(STDIN_FILENO, bigbuf_in, BIGSIZ);
  609. /* Considered making reads here smaller for UDP mode, but 8192-byte
  610. mobygrams are kinda fun and exercise the reassembler. */
  611. if (rr <= 0) { /* at end, or fukt, or ... */
  612. pfds[0].fd = -1; /* disable stdin */
  613. /*close(STDIN_FILENO); - not really necessary */
  614. /* Let peer know we have no more data */
  615. /* nc 1.10 doesn't do this: */
  616. shutdown(netfd, SHUT_WR);
  617. fds_open--;
  618. } else {
  619. rzleft = rr;
  620. zp = bigbuf_in;
  621. }
  622. } /* stdin:ding */
  623. shovel:
  624. /* now that we've dingdonged all our thingdings, send off the results.
  625. Geez, why does this look an awful lot like the big loop in "rsh"? ...
  626. not sure if the order of this matters, but write net -> stdout first. */
  627. if (rnleft) {
  628. rr = write(STDOUT_FILENO, np, rnleft);
  629. if (rr > 0) {
  630. if (o_ofile) /* log the stdout */
  631. oprint('<', (unsigned char *)np, rr);
  632. np += rr;
  633. rnleft -= rr;
  634. wrote_out += rr; /* global count */
  635. }
  636. Debug("wrote %d to stdout, errno %d", rr, errno);
  637. } /* rnleft */
  638. if (rzleft) {
  639. if (o_interval) /* in "slowly" mode ?? */
  640. rr = findline(zp, rzleft);
  641. else
  642. rr = rzleft;
  643. rr = write(netfd, zp, rr); /* one line, or the whole buffer */
  644. if (rr > 0) {
  645. if (o_ofile) /* log what got sent */
  646. oprint('>', (unsigned char *)zp, rr);
  647. zp += rr;
  648. rzleft -= rr;
  649. wrote_net += rr; /* global count */
  650. }
  651. Debug("wrote %d to net, errno %d", rr, errno);
  652. } /* rzleft */
  653. if (o_interval) { /* cycle between slow lines, or ... */
  654. sleep(o_interval);
  655. continue; /* ...with hairy loop... */
  656. }
  657. if (rzleft || rnleft) { /* shovel that shit till they ain't */
  658. wretry--; /* none left, and get another load */
  659. /* net write retries sometimes happen on UDP connections */
  660. if (!wretry) { /* is something hung? */
  661. holler_error("too many output retries");
  662. return 1;
  663. }
  664. goto shovel;
  665. }
  666. } /* while (fds_open) */
  667. /* XXX: maybe want a more graceful shutdown() here, or screw around with
  668. linger times?? I suspect that I don't need to since I'm always doing
  669. blocking reads and writes and my own manual "last ditch" efforts to read
  670. the net again after a timeout. I haven't seen any screwups yet, but it's
  671. not like my test network is particularly busy... */
  672. close(netfd);
  673. return 0;
  674. } /* readwrite */
  675. /* main: now we pull it all together... */
  676. int nc_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
  677. int nc_main(int argc UNUSED_PARAM, char **argv)
  678. {
  679. char *str_p, *str_s;
  680. IF_NC_EXTRA(char *str_i, *str_o;)
  681. char *themdotted = themdotted; /* for compiler */
  682. char **proggie;
  683. int x;
  684. unsigned cnt_l = 0;
  685. unsigned o_lport = 0;
  686. INIT_G();
  687. /* catch a signal or two for cleanup */
  688. bb_signals(0
  689. + (1 << SIGINT)
  690. + (1 << SIGQUIT)
  691. + (1 << SIGTERM)
  692. , catch);
  693. /* and suppress others... */
  694. bb_signals(0
  695. #ifdef SIGURG
  696. + (1 << SIGURG)
  697. #endif
  698. + (1 << SIGPIPE) /* important! */
  699. , SIG_IGN);
  700. proggie = argv;
  701. while (*++proggie) {
  702. if (strcmp(*proggie, "-e") == 0) {
  703. *proggie = NULL;
  704. proggie++;
  705. goto e_found;
  706. }
  707. /* -<other_opts>e PROG [ARGS] ? */
  708. /* (aboriginal linux uses this form) */
  709. if (proggie[0][0] == '-') {
  710. char *optpos = *proggie + 1;
  711. /* Skip all valid opts w/o params */
  712. optpos = optpos + strspn(optpos, "nuv"IF_NC_SERVER("lk")IF_NC_EXTRA("z"));
  713. if (*optpos == 'e' && !optpos[1]) {
  714. *optpos = '\0';
  715. proggie++;
  716. G.proggie0saved = *proggie;
  717. *proggie = NULL; /* terminate argv for getopt32 */
  718. goto e_found;
  719. }
  720. }
  721. }
  722. proggie = NULL;
  723. e_found:
  724. // -g -G -t -r deleted, unimplemented -a deleted too
  725. opt_complementary = "?2:vv:ll"; /* max 2 params; -v and -l are counters; -w N */
  726. getopt32(argv, "np:s:uvw:+" IF_NC_SERVER("lk")
  727. IF_NC_EXTRA("i:o:z"),
  728. &str_p, &str_s, &o_wait
  729. IF_NC_EXTRA(, &str_i, &str_o), &o_verbose IF_NC_SERVER(, &cnt_l));
  730. argv += optind;
  731. #if ENABLE_NC_EXTRA
  732. if (option_mask32 & OPT_i) /* line-interval time */
  733. o_interval = xatou_range(str_i, 1, 0xffff);
  734. #endif
  735. #if ENABLE_NC_SERVER
  736. //if (option_mask32 & OPT_l) /* listen mode */
  737. if (option_mask32 & OPT_k) /* persistent server mode */
  738. cnt_l = 2;
  739. #endif
  740. //if (option_mask32 & OPT_n) /* numeric-only, no DNS lookups */
  741. //if (option_mask32 & OPT_o) /* hexdump log */
  742. if (option_mask32 & OPT_p) { /* local source port */
  743. o_lport = bb_lookup_port(str_p, o_udpmode ? "udp" : "tcp", 0);
  744. if (!o_lport)
  745. bb_error_msg_and_die("bad local port '%s'", str_p);
  746. }
  747. //if (option_mask32 & OPT_r) /* randomize various things */
  748. //if (option_mask32 & OPT_u) /* use UDP */
  749. //if (option_mask32 & OPT_v) /* verbose */
  750. //if (option_mask32 & OPT_w) /* wait time */
  751. //if (option_mask32 & OPT_z) /* little or no data xfer */
  752. /* We manage our fd's so that they are never 0,1,2 */
  753. /*bb_sanitize_stdio(); - not needed */
  754. if (argv[0]) {
  755. themaddr = xhost2sockaddr(argv[0],
  756. argv[1]
  757. ? bb_lookup_port(argv[1], o_udpmode ? "udp" : "tcp", 0)
  758. : 0);
  759. }
  760. /* create & bind network socket */
  761. x = (o_udpmode ? SOCK_DGRAM : SOCK_STREAM);
  762. if (option_mask32 & OPT_s) { /* local address */
  763. /* if o_lport is still 0, then we will use random port */
  764. ouraddr = xhost2sockaddr(str_s, o_lport);
  765. #ifdef BLOAT
  766. /* prevent spurious "UDP listen needs !0 port" */
  767. o_lport = get_nport(ouraddr);
  768. o_lport = ntohs(o_lport);
  769. #endif
  770. x = xsocket(ouraddr->u.sa.sa_family, x, 0);
  771. } else {
  772. /* We try IPv6, then IPv4, unless addr family is
  773. * implicitly set by way of remote addr/port spec */
  774. x = xsocket_type(&ouraddr,
  775. (themaddr ? themaddr->u.sa.sa_family : AF_UNSPEC),
  776. x);
  777. if (o_lport)
  778. set_nport(&ouraddr->u.sa, htons(o_lport));
  779. }
  780. xmove_fd(x, netfd);
  781. setsockopt_reuseaddr(netfd);
  782. if (o_udpmode)
  783. socket_want_pktinfo(netfd);
  784. if (!ENABLE_FEATURE_UNIX_LOCAL
  785. || cnt_l != 0 /* listen */
  786. || ouraddr->u.sa.sa_family != AF_UNIX
  787. ) {
  788. xbind(netfd, &ouraddr->u.sa, ouraddr->len);
  789. }
  790. #if 0
  791. setsockopt_SOL_SOCKET_int(netfd, SO_RCVBUF, o_rcvbuf);
  792. setsockopt_SOL_SOCKET_int(netfd, SO_SNDBUF, o_sndbuf);
  793. #endif
  794. #ifdef BLOAT
  795. if (OPT_l && (option_mask32 & (OPT_u|OPT_l)) == (OPT_u|OPT_l)) {
  796. /* apparently UDP can listen ON "port 0",
  797. but that's not useful */
  798. if (!o_lport)
  799. bb_error_msg_and_die("UDP listen needs nonzero -p port");
  800. }
  801. #endif
  802. if (proggie) {
  803. close(STDIN_FILENO); /* won't need stdin */
  804. option_mask32 &= ~OPT_o; /* -o with -e is meaningless! */
  805. }
  806. #if ENABLE_NC_EXTRA
  807. if (o_ofile)
  808. xmove_fd(xopen(str_o, O_WRONLY|O_CREAT|O_TRUNC), ofd);
  809. #endif
  810. if (cnt_l != 0) {
  811. dolisten((cnt_l - 1), proggie);
  812. /* dolisten does its own connect reporting */
  813. x = readwrite(); /* it even works with UDP! */
  814. } else {
  815. /* Outbound connects. Now we're more picky about args... */
  816. if (!themaddr)
  817. bb_show_usage();
  818. remend = *themaddr;
  819. if (o_verbose)
  820. themdotted = xmalloc_sockaddr2dotted(&themaddr->u.sa);
  821. x = connect_w_timeout(netfd);
  822. if (o_zero && x == 0 && o_udpmode) /* if UDP scanning... */
  823. x = udptest();
  824. if (x == 0) { /* Yow, are we OPEN YET?! */
  825. if (o_verbose)
  826. fprintf(stderr, "%s (%s) open\n", argv[0], themdotted);
  827. if (proggie) /* exec is valid for outbound, too */
  828. doexec(proggie);
  829. if (!o_zero)
  830. x = readwrite();
  831. } else { /* connect or udptest wasn't successful */
  832. x = 1; /* exit status */
  833. /* if we're scanning at a "one -v" verbosity level, don't print refusals.
  834. Give it another -v if you want to see everything. */
  835. if (o_verbose > 1 || (o_verbose && errno != ECONNREFUSED))
  836. bb_perror_msg("%s (%s)", argv[0], themdotted);
  837. }
  838. }
  839. if (o_verbose > 1) /* normally we don't care */
  840. fprintf(stderr, SENT_N_RECV_M, wrote_net, wrote_out);
  841. return x;
  842. }