1 13b2bc37 2022-10-23 stsp /*
  2 13b2bc37 2022-10-23 stsp  * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
  3 13b2bc37 2022-10-23 stsp  * Copyright (c) 2016-2019, 2020-2021 Tracey Emery <tracey@traceyemery.net>
  4 13b2bc37 2022-10-23 stsp  * Copyright (c) 2004, 2005 Esben Norby <norby@openbsd.org>
  5 13b2bc37 2022-10-23 stsp  * Copyright (c) 2004 Ryan McBride <mcbride@openbsd.org>
  6 13b2bc37 2022-10-23 stsp  * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org>
  7 13b2bc37 2022-10-23 stsp  * Copyright (c) 2001 Markus Friedl.  All rights reserved.
  8 13b2bc37 2022-10-23 stsp  * Copyright (c) 2001 Daniel Hartmeier.  All rights reserved.
  9 13b2bc37 2022-10-23 stsp  * Copyright (c) 2001 Theo de Raadt.  All rights reserved.
 10 13b2bc37 2022-10-23 stsp  *
 11 13b2bc37 2022-10-23 stsp  * Permission to use, copy, modify, and distribute this software for any
 12 13b2bc37 2022-10-23 stsp  * purpose with or without fee is hereby granted, provided that the above
 13 13b2bc37 2022-10-23 stsp  * copyright notice and this permission notice appear in all copies.
 14 13b2bc37 2022-10-23 stsp  *
 15 13b2bc37 2022-10-23 stsp  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 16 13b2bc37 2022-10-23 stsp  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 17 13b2bc37 2022-10-23 stsp  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 18 13b2bc37 2022-10-23 stsp  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 19 13b2bc37 2022-10-23 stsp  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 20 13b2bc37 2022-10-23 stsp  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 21 13b2bc37 2022-10-23 stsp  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 22 13b2bc37 2022-10-23 stsp  */
 23 13b2bc37 2022-10-23 stsp 
 24 13b2bc37 2022-10-23 stsp %{
 25 13b2bc37 2022-10-23 stsp #include <sys/time.h>
 26 13b2bc37 2022-10-23 stsp #include <sys/types.h>
 27 13b2bc37 2022-10-23 stsp #include <sys/queue.h>
 28 13b2bc37 2022-10-23 stsp #include <sys/stat.h>
 29 13b2bc37 2022-10-23 stsp 
 30 13b2bc37 2022-10-23 stsp #include <ctype.h>
 31 13b2bc37 2022-10-23 stsp #include <err.h>
 32 13b2bc37 2022-10-23 stsp #include <errno.h>
 33 13b2bc37 2022-10-23 stsp #include <event.h>
 34 13b2bc37 2022-10-23 stsp #include <imsg.h>
 35 13b2bc37 2022-10-23 stsp #include <limits.h>
 36 13b2bc37 2022-10-23 stsp #include <sha1.h>
 37 13b2bc37 2022-10-23 stsp #include <stdarg.h>
 38 13b2bc37 2022-10-23 stsp #include <stdlib.h>
 39 13b2bc37 2022-10-23 stsp #include <stdio.h>
 40 13b2bc37 2022-10-23 stsp #include <string.h>
 41 13b2bc37 2022-10-23 stsp #include <syslog.h>
 42 13b2bc37 2022-10-23 stsp #include <unistd.h>
 43 13b2bc37 2022-10-23 stsp 
 44 13b2bc37 2022-10-23 stsp #include "got_error.h"
 45 13b2bc37 2022-10-23 stsp #include "got_path.h"
 46 13b2bc37 2022-10-23 stsp 
 47 13b2bc37 2022-10-23 stsp #include "log.h"
 48 13b2bc37 2022-10-23 stsp #include "gotd.h"
 49 40b85cca 2023-01-03 stsp #include "auth.h"
 50 40b85cca 2023-01-03 stsp #include "listen.h"
 51 13b2bc37 2022-10-23 stsp 
 52 13b2bc37 2022-10-23 stsp TAILQ_HEAD(files, file)		 files = TAILQ_HEAD_INITIALIZER(files);
 53 13b2bc37 2022-10-23 stsp static struct file {
 54 13b2bc37 2022-10-23 stsp 	TAILQ_ENTRY(file)	 entry;
 55 13b2bc37 2022-10-23 stsp 	FILE			*stream;
 56 13b2bc37 2022-10-23 stsp 	char			*name;
 57 13b2bc37 2022-10-23 stsp 	int			 lineno;
 58 13b2bc37 2022-10-23 stsp 	int			 errors;
 59 13b2bc37 2022-10-23 stsp } *file;
 60 13b2bc37 2022-10-23 stsp struct file	*newfile(const char *, int);
 61 13b2bc37 2022-10-23 stsp static void	 closefile(struct file *);
 62 13b2bc37 2022-10-23 stsp int		 check_file_secrecy(int, const char *);
 63 13b2bc37 2022-10-23 stsp int		 yyparse(void);
 64 13b2bc37 2022-10-23 stsp int		 yylex(void);
 65 13b2bc37 2022-10-23 stsp int		 yyerror(const char *, ...)
 66 13b2bc37 2022-10-23 stsp     __attribute__((__format__ (printf, 1, 2)))
 67 13b2bc37 2022-10-23 stsp     __attribute__((__nonnull__ (1)));
 68 13b2bc37 2022-10-23 stsp int		 kw_cmp(const void *, const void *);
 69 13b2bc37 2022-10-23 stsp int		 lookup(char *);
 70 13b2bc37 2022-10-23 stsp int		 lgetc(int);
 71 13b2bc37 2022-10-23 stsp int		 lungetc(int);
 72 13b2bc37 2022-10-23 stsp int		 findeol(void);
 73 13b2bc37 2022-10-23 stsp 
 74 13b2bc37 2022-10-23 stsp TAILQ_HEAD(symhead, sym)	 symhead = TAILQ_HEAD_INITIALIZER(symhead);
 75 13b2bc37 2022-10-23 stsp struct sym {
 76 13b2bc37 2022-10-23 stsp 	TAILQ_ENTRY(sym)	 entry;
 77 13b2bc37 2022-10-23 stsp 	int			 used;
 78 13b2bc37 2022-10-23 stsp 	int			 persist;
 79 13b2bc37 2022-10-23 stsp 	char			*nam;
 80 13b2bc37 2022-10-23 stsp 	char			*val;
 81 13b2bc37 2022-10-23 stsp };
 82 13b2bc37 2022-10-23 stsp 
 83 13b2bc37 2022-10-23 stsp int	 symset(const char *, const char *, int);
 84 13b2bc37 2022-10-23 stsp char	*symget(const char *);
 85 13b2bc37 2022-10-23 stsp 
 86 13b2bc37 2022-10-23 stsp static int		 errors;
 87 13b2bc37 2022-10-23 stsp 
 88 13b2bc37 2022-10-23 stsp static struct gotd		*gotd;
 89 13b2bc37 2022-10-23 stsp static struct gotd_repo		*new_repo;
 90 fc89c900 2023-01-03 op static int			 conf_limit_user_connections(const char *, int);
 91 13b2bc37 2022-10-23 stsp static struct gotd_repo		*conf_new_repo(const char *);
 92 533abaaa 2022-11-18 op static void			 conf_new_access_rule(struct gotd_repo *,
 93 533abaaa 2022-11-18 op 				    enum gotd_access, int, char *);
 94 13b2bc37 2022-10-23 stsp static enum gotd_procid		 gotd_proc_id;
 95 13b2bc37 2022-10-23 stsp 
 96 13b2bc37 2022-10-23 stsp typedef struct {
 97 13b2bc37 2022-10-23 stsp 	union {
 98 13b2bc37 2022-10-23 stsp 		long long	 number;
 99 13b2bc37 2022-10-23 stsp 		char		*string;
100 40b85cca 2023-01-03 stsp 		struct timeval	 tv;
101 13b2bc37 2022-10-23 stsp 	} v;
102 13b2bc37 2022-10-23 stsp 	int lineno;
103 13b2bc37 2022-10-23 stsp } YYSTYPE;
104 13b2bc37 2022-10-23 stsp 
105 13b2bc37 2022-10-23 stsp %}
106 13b2bc37 2022-10-23 stsp 
107 0ccf3acb 2022-11-16 stsp %token	PATH ERROR ON UNIX_SOCKET UNIX_GROUP USER REPOSITORY PERMIT DENY
108 40b85cca 2023-01-03 stsp %token	RO RW CONNECTION LIMIT REQUEST TIMEOUT
109 13b2bc37 2022-10-23 stsp 
110 13b2bc37 2022-10-23 stsp %token	<v.string>	STRING
111 13b2bc37 2022-10-23 stsp %token	<v.number>	NUMBER
112 13b2bc37 2022-10-23 stsp %type	<v.number>	boolean
113 40b85cca 2023-01-03 stsp %type	<v.tv>		timeout
114 13b2bc37 2022-10-23 stsp 
115 13b2bc37 2022-10-23 stsp %%
116 13b2bc37 2022-10-23 stsp 
117 13b2bc37 2022-10-23 stsp grammar		:
118 13b2bc37 2022-10-23 stsp 		| grammar '\n'
119 13b2bc37 2022-10-23 stsp 		| grammar main '\n'
120 13b2bc37 2022-10-23 stsp 		| grammar repository '\n'
121 13b2bc37 2022-10-23 stsp 		;
122 13b2bc37 2022-10-23 stsp 
123 13b2bc37 2022-10-23 stsp boolean		: STRING {
124 13b2bc37 2022-10-23 stsp 			if (strcasecmp($1, "1") == 0 ||
125 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "yes") == 0 ||
126 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "on") == 0)
127 13b2bc37 2022-10-23 stsp 				$$ = 1;
128 13b2bc37 2022-10-23 stsp 			else if (strcasecmp($1, "0") == 0 ||
129 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "off") == 0 ||
130 13b2bc37 2022-10-23 stsp 			    strcasecmp($1, "no") == 0)
131 13b2bc37 2022-10-23 stsp 				$$ = 0;
132 13b2bc37 2022-10-23 stsp 			else {
133 13b2bc37 2022-10-23 stsp 				yyerror("invalid boolean value '%s'", $1);
134 13b2bc37 2022-10-23 stsp 				free($1);
135 13b2bc37 2022-10-23 stsp 				YYERROR;
136 13b2bc37 2022-10-23 stsp 			}
137 13b2bc37 2022-10-23 stsp 			free($1);
138 13b2bc37 2022-10-23 stsp 		}
139 13b2bc37 2022-10-23 stsp 		| ON { $$ = 1; }
140 13b2bc37 2022-10-23 stsp 		| NUMBER { $$ = $1; }
141 13b2bc37 2022-10-23 stsp 		;
142 13b2bc37 2022-10-23 stsp 
143 40b85cca 2023-01-03 stsp timeout		: NUMBER {
144 40b85cca 2023-01-03 stsp 			if ($1 < 0) {
145 40b85cca 2023-01-03 stsp 				yyerror("invalid timeout: %lld", $1);
146 40b85cca 2023-01-03 stsp 				YYERROR;
147 40b85cca 2023-01-03 stsp 			}
148 40b85cca 2023-01-03 stsp 			$$.tv_sec = $1;
149 40b85cca 2023-01-03 stsp 			$$.tv_usec = 0;
150 40b85cca 2023-01-03 stsp 		}
151 40b85cca 2023-01-03 stsp 		;
152 40b85cca 2023-01-03 stsp 
153 13b2bc37 2022-10-23 stsp main		: UNIX_SOCKET STRING {
154 d93ecf7d 2022-12-14 stsp 			if (gotd_proc_id == PROC_LISTEN) {
155 13b2bc37 2022-10-23 stsp 				if (strlcpy(gotd->unix_socket_path, $2,
156 13b2bc37 2022-10-23 stsp 				    sizeof(gotd->unix_socket_path)) >=
157 13b2bc37 2022-10-23 stsp 				    sizeof(gotd->unix_socket_path)) {
158 13b2bc37 2022-10-23 stsp 					yyerror("%s: unix socket path too long",
159 13b2bc37 2022-10-23 stsp 					    __func__);
160 13b2bc37 2022-10-23 stsp 					free($2);
161 13b2bc37 2022-10-23 stsp 					YYERROR;
162 13b2bc37 2022-10-23 stsp 				}
163 13b2bc37 2022-10-23 stsp 			}
164 13b2bc37 2022-10-23 stsp 			free($2);
165 13b2bc37 2022-10-23 stsp 		}
166 13b2bc37 2022-10-23 stsp 		| UNIX_GROUP STRING {
167 13b2bc37 2022-10-23 stsp 			if (strlcpy(gotd->unix_group_name, $2,
168 13b2bc37 2022-10-23 stsp 			    sizeof(gotd->unix_group_name)) >=
169 13b2bc37 2022-10-23 stsp 			    sizeof(gotd->unix_group_name)) {
170 13b2bc37 2022-10-23 stsp 				yyerror("%s: unix group name too long",
171 13b2bc37 2022-10-23 stsp 				    __func__);
172 13b2bc37 2022-10-23 stsp 				free($2);
173 13b2bc37 2022-10-23 stsp 				YYERROR;
174 13b2bc37 2022-10-23 stsp 			}
175 13b2bc37 2022-10-23 stsp 			free($2);
176 13b2bc37 2022-10-23 stsp 		}
177 13b2bc37 2022-10-23 stsp 		| USER STRING {
178 13b2bc37 2022-10-23 stsp 			if (strlcpy(gotd->user_name, $2,
179 13b2bc37 2022-10-23 stsp 			    sizeof(gotd->user_name)) >=
180 13b2bc37 2022-10-23 stsp 			    sizeof(gotd->user_name)) {
181 13b2bc37 2022-10-23 stsp 				yyerror("%s: user name too long", __func__);
182 13b2bc37 2022-10-23 stsp 				free($2);
183 13b2bc37 2022-10-23 stsp 				YYERROR;
184 13b2bc37 2022-10-23 stsp 			}
185 13b2bc37 2022-10-23 stsp 			free($2);
186 13b2bc37 2022-10-23 stsp 		}
187 40b85cca 2023-01-03 stsp 		| connection
188 13b2bc37 2022-10-23 stsp 		;
189 13b2bc37 2022-10-23 stsp 
190 40b85cca 2023-01-03 stsp connection	: CONNECTION '{' optnl conflags_l '}'
191 40b85cca 2023-01-03 stsp 		| CONNECTION conflags
192 40b85cca 2023-01-03 stsp 
193 40b85cca 2023-01-03 stsp conflags_l	: conflags optnl conflags_l
194 40b85cca 2023-01-03 stsp 		| conflags optnl
195 40b85cca 2023-01-03 stsp 		;
196 40b85cca 2023-01-03 stsp 
197 40b85cca 2023-01-03 stsp conflags	: REQUEST TIMEOUT timeout		{
198 40b85cca 2023-01-03 stsp 			memcpy(&gotd->request_timeout, &$3,
199 40b85cca 2023-01-03 stsp 			    sizeof(gotd->request_timeout));
200 40b85cca 2023-01-03 stsp 		}
201 40b85cca 2023-01-03 stsp 		| LIMIT USER STRING NUMBER	{
202 40b85cca 2023-01-03 stsp 			if (gotd_proc_id == PROC_LISTEN &&
203 40b85cca 2023-01-03 stsp 			    conf_limit_user_connections($3, $4) == -1) {
204 40b85cca 2023-01-03 stsp 				free($3);
205 40b85cca 2023-01-03 stsp 				YYERROR;
206 40b85cca 2023-01-03 stsp 			}
207 40b85cca 2023-01-03 stsp 			free($3);
208 40b85cca 2023-01-03 stsp 		}
209 40b85cca 2023-01-03 stsp 		;
210 40b85cca 2023-01-03 stsp 
211 13b2bc37 2022-10-23 stsp repository	: REPOSITORY STRING {
212 13b2bc37 2022-10-23 stsp 			struct gotd_repo *repo;
213 13b2bc37 2022-10-23 stsp 
214 13b2bc37 2022-10-23 stsp 			TAILQ_FOREACH(repo, &gotd->repos, entry) {
215 13b2bc37 2022-10-23 stsp 				if (strcmp(repo->name, $2) == 0) {
216 13b2bc37 2022-10-23 stsp 					yyerror("duplicate repository '%s'", $2);
217 13b2bc37 2022-10-23 stsp 					free($2);
218 13b2bc37 2022-10-23 stsp 					YYERROR;
219 13b2bc37 2022-10-23 stsp 				}
220 13b2bc37 2022-10-23 stsp 			}
221 13b2bc37 2022-10-23 stsp 
222 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_GOTD ||
223 5e25db14 2022-12-29 stsp 			    gotd_proc_id == PROC_AUTH) {
224 13b2bc37 2022-10-23 stsp 				new_repo = conf_new_repo($2);
225 13b2bc37 2022-10-23 stsp 			}
226 13b2bc37 2022-10-23 stsp 			free($2);
227 13b2bc37 2022-10-23 stsp 		} '{' optnl repoopts2 '}' {
228 13b2bc37 2022-10-23 stsp 		}
229 13b2bc37 2022-10-23 stsp 		;
230 13b2bc37 2022-10-23 stsp 
231 13b2bc37 2022-10-23 stsp repoopts1	: PATH STRING {
232 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_GOTD ||
233 5e25db14 2022-12-29 stsp 			    gotd_proc_id == PROC_AUTH) {
234 13b2bc37 2022-10-23 stsp 				if (!got_path_is_absolute($2)) {
235 13b2bc37 2022-10-23 stsp 					yyerror("%s: path %s is not absolute",
236 13b2bc37 2022-10-23 stsp 					    __func__, $2);
237 13b2bc37 2022-10-23 stsp 					free($2);
238 13b2bc37 2022-10-23 stsp 					YYERROR;
239 13b2bc37 2022-10-23 stsp 				}
240 13b2bc37 2022-10-23 stsp 				if (strlcpy(new_repo->path, $2,
241 13b2bc37 2022-10-23 stsp 				    sizeof(new_repo->path)) >=
242 13b2bc37 2022-10-23 stsp 				    sizeof(new_repo->path)) {
243 13b2bc37 2022-10-23 stsp 					yyerror("%s: path truncated", __func__);
244 13b2bc37 2022-10-23 stsp 					free($2);
245 13b2bc37 2022-10-23 stsp 					YYERROR;
246 13b2bc37 2022-10-23 stsp 				}
247 13b2bc37 2022-10-23 stsp 			}
248 13b2bc37 2022-10-23 stsp 			free($2);
249 0ccf3acb 2022-11-16 stsp 		}
250 0ccf3acb 2022-11-16 stsp 		| PERMIT RO STRING {
251 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_AUTH) {
252 0ccf3acb 2022-11-16 stsp 				conf_new_access_rule(new_repo,
253 0ccf3acb 2022-11-16 stsp 				    GOTD_ACCESS_PERMITTED, GOTD_AUTH_READ, $3);
254 0ccf3acb 2022-11-16 stsp 			}
255 0ccf3acb 2022-11-16 stsp 		}
256 0ccf3acb 2022-11-16 stsp 		| PERMIT RW STRING {
257 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_AUTH) {
258 0ccf3acb 2022-11-16 stsp 				conf_new_access_rule(new_repo,
259 0ccf3acb 2022-11-16 stsp 				    GOTD_ACCESS_PERMITTED,
260 0ccf3acb 2022-11-16 stsp 				    GOTD_AUTH_READ | GOTD_AUTH_WRITE, $3);
261 0ccf3acb 2022-11-16 stsp 			}
262 13b2bc37 2022-10-23 stsp 		}
263 0ccf3acb 2022-11-16 stsp 		| DENY STRING {
264 5e25db14 2022-12-29 stsp 			if (gotd_proc_id == PROC_AUTH) {
265 0ccf3acb 2022-11-16 stsp 				conf_new_access_rule(new_repo,
266 0ccf3acb 2022-11-16 stsp 				    GOTD_ACCESS_DENIED, 0, $2);
267 0ccf3acb 2022-11-16 stsp 			}
268 0ccf3acb 2022-11-16 stsp 		}
269 13b2bc37 2022-10-23 stsp 		;
270 13b2bc37 2022-10-23 stsp 
271 13b2bc37 2022-10-23 stsp repoopts2	: repoopts2 repoopts1 nl
272 13b2bc37 2022-10-23 stsp 		| repoopts1 optnl
273 13b2bc37 2022-10-23 stsp 		;
274 13b2bc37 2022-10-23 stsp 
275 13b2bc37 2022-10-23 stsp nl		: '\n' optnl
276 13b2bc37 2022-10-23 stsp 		;
277 13b2bc37 2022-10-23 stsp 
278 13b2bc37 2022-10-23 stsp optnl		: '\n' optnl		/* zero or more newlines */
279 13b2bc37 2022-10-23 stsp 		| /* empty */
280 13b2bc37 2022-10-23 stsp 		;
281 13b2bc37 2022-10-23 stsp 
282 13b2bc37 2022-10-23 stsp %%
283 13b2bc37 2022-10-23 stsp 
284 13b2bc37 2022-10-23 stsp struct keywords {
285 13b2bc37 2022-10-23 stsp 	const char	*k_name;
286 13b2bc37 2022-10-23 stsp 	int		 k_val;
287 13b2bc37 2022-10-23 stsp };
288 13b2bc37 2022-10-23 stsp 
289 13b2bc37 2022-10-23 stsp int
290 13b2bc37 2022-10-23 stsp yyerror(const char *fmt, ...)
291 13b2bc37 2022-10-23 stsp {
292 13b2bc37 2022-10-23 stsp 	va_list ap;
293 13b2bc37 2022-10-23 stsp 	char *msg;
294 13b2bc37 2022-10-23 stsp 
295 13b2bc37 2022-10-23 stsp 	file->errors++;
296 13b2bc37 2022-10-23 stsp 	va_start(ap, fmt);
297 13b2bc37 2022-10-23 stsp 	if (vasprintf(&msg, fmt, ap) == -1)
298 13b2bc37 2022-10-23 stsp 		fatalx("yyerror vasprintf");
299 13b2bc37 2022-10-23 stsp 	va_end(ap);
300 13b2bc37 2022-10-23 stsp 	logit(LOG_CRIT, "%s:%d: %s", file->name, yylval.lineno, msg);
301 13b2bc37 2022-10-23 stsp 	free(msg);
302 13b2bc37 2022-10-23 stsp 	return (0);
303 13b2bc37 2022-10-23 stsp }
304 13b2bc37 2022-10-23 stsp 
305 13b2bc37 2022-10-23 stsp int
306 13b2bc37 2022-10-23 stsp kw_cmp(const void *k, const void *e)
307 13b2bc37 2022-10-23 stsp {
308 13b2bc37 2022-10-23 stsp 	return (strcmp(k, ((const struct keywords *)e)->k_name));
309 13b2bc37 2022-10-23 stsp }
310 13b2bc37 2022-10-23 stsp 
311 13b2bc37 2022-10-23 stsp int
312 13b2bc37 2022-10-23 stsp lookup(char *s)
313 13b2bc37 2022-10-23 stsp {
314 13b2bc37 2022-10-23 stsp 	/* This has to be sorted always. */
315 13b2bc37 2022-10-23 stsp 	static const struct keywords keywords[] = {
316 40b85cca 2023-01-03 stsp 		{ "connection",			CONNECTION },
317 0ccf3acb 2022-11-16 stsp 		{ "deny",			DENY },
318 40b85cca 2023-01-03 stsp 		{ "limit",			LIMIT },
319 13b2bc37 2022-10-23 stsp 		{ "on",				ON },
320 13b2bc37 2022-10-23 stsp 		{ "path",			PATH },
321 0ccf3acb 2022-11-16 stsp 		{ "permit",			PERMIT },
322 13b2bc37 2022-10-23 stsp 		{ "repository",			REPOSITORY },
323 40b85cca 2023-01-03 stsp 		{ "request",			REQUEST },
324 0ccf3acb 2022-11-16 stsp 		{ "ro",				RO },
325 0ccf3acb 2022-11-16 stsp 		{ "rw",				RW },
326 40b85cca 2023-01-03 stsp 		{ "timeout",			TIMEOUT },
327 13b2bc37 2022-10-23 stsp 		{ "unix_group",			UNIX_GROUP },
328 13b2bc37 2022-10-23 stsp 		{ "unix_socket",		UNIX_SOCKET },
329 13b2bc37 2022-10-23 stsp 		{ "user",			USER },
330 13b2bc37 2022-10-23 stsp 	};
331 13b2bc37 2022-10-23 stsp 	const struct keywords *p;
332 13b2bc37 2022-10-23 stsp 
333 13b2bc37 2022-10-23 stsp 	p = bsearch(s, keywords, sizeof(keywords)/sizeof(keywords[0]),
334 13b2bc37 2022-10-23 stsp 	    sizeof(keywords[0]), kw_cmp);
335 13b2bc37 2022-10-23 stsp 
336 13b2bc37 2022-10-23 stsp 	if (p)
337 13b2bc37 2022-10-23 stsp 		return (p->k_val);
338 13b2bc37 2022-10-23 stsp 	else
339 13b2bc37 2022-10-23 stsp 		return (STRING);
340 13b2bc37 2022-10-23 stsp }
341 13b2bc37 2022-10-23 stsp 
342 13b2bc37 2022-10-23 stsp #define MAXPUSHBACK	128
343 13b2bc37 2022-10-23 stsp 
344 13b2bc37 2022-10-23 stsp unsigned char *parsebuf;
345 13b2bc37 2022-10-23 stsp int parseindex;
346 13b2bc37 2022-10-23 stsp unsigned char pushback_buffer[MAXPUSHBACK];
347 13b2bc37 2022-10-23 stsp int pushback_index = 0;
348 13b2bc37 2022-10-23 stsp 
349 13b2bc37 2022-10-23 stsp int
350 13b2bc37 2022-10-23 stsp lgetc(int quotec)
351 13b2bc37 2022-10-23 stsp {
352 13b2bc37 2022-10-23 stsp 	int c, next;
353 13b2bc37 2022-10-23 stsp 
354 13b2bc37 2022-10-23 stsp 	if (parsebuf) {
355 13b2bc37 2022-10-23 stsp 		/* Read character from the parsebuffer instead of input. */
356 13b2bc37 2022-10-23 stsp 		if (parseindex >= 0) {
357 13b2bc37 2022-10-23 stsp 			c = parsebuf[parseindex++];
358 13b2bc37 2022-10-23 stsp 			if (c != '\0')
359 13b2bc37 2022-10-23 stsp 				return (c);
360 13b2bc37 2022-10-23 stsp 			parsebuf = NULL;
361 13b2bc37 2022-10-23 stsp 		} else
362 13b2bc37 2022-10-23 stsp 			parseindex++;
363 13b2bc37 2022-10-23 stsp 	}
364 13b2bc37 2022-10-23 stsp 
365 13b2bc37 2022-10-23 stsp 	if (pushback_index)
366 13b2bc37 2022-10-23 stsp 		return (pushback_buffer[--pushback_index]);
367 13b2bc37 2022-10-23 stsp 
368 13b2bc37 2022-10-23 stsp 	if (quotec) {
369 13b2bc37 2022-10-23 stsp 		c = getc(file->stream);
370 13b2bc37 2022-10-23 stsp 		if (c == EOF)
371 13b2bc37 2022-10-23 stsp 			yyerror("reached end of file while parsing "
372 13b2bc37 2022-10-23 stsp 			    "quoted string");
373 13b2bc37 2022-10-23 stsp 		return (c);
374 13b2bc37 2022-10-23 stsp 	}
375 13b2bc37 2022-10-23 stsp 
376 13b2bc37 2022-10-23 stsp 	c = getc(file->stream);
377 13b2bc37 2022-10-23 stsp 	while (c == '\\') {
378 13b2bc37 2022-10-23 stsp 		next = getc(file->stream);
379 13b2bc37 2022-10-23 stsp 		if (next != '\n') {
380 13b2bc37 2022-10-23 stsp 			c = next;
381 13b2bc37 2022-10-23 stsp 			break;
382 13b2bc37 2022-10-23 stsp 		}
383 13b2bc37 2022-10-23 stsp 		yylval.lineno = file->lineno;
384 13b2bc37 2022-10-23 stsp 		file->lineno++;
385 13b2bc37 2022-10-23 stsp 		c = getc(file->stream);
386 13b2bc37 2022-10-23 stsp 	}
387 13b2bc37 2022-10-23 stsp 
388 13b2bc37 2022-10-23 stsp 	return (c);
389 13b2bc37 2022-10-23 stsp }
390 13b2bc37 2022-10-23 stsp 
391 13b2bc37 2022-10-23 stsp int
392 13b2bc37 2022-10-23 stsp lungetc(int c)
393 13b2bc37 2022-10-23 stsp {
394 13b2bc37 2022-10-23 stsp 	if (c == EOF)
395 13b2bc37 2022-10-23 stsp 		return (EOF);
396 13b2bc37 2022-10-23 stsp 	if (parsebuf) {
397 13b2bc37 2022-10-23 stsp 		parseindex--;
398 13b2bc37 2022-10-23 stsp 		if (parseindex >= 0)
399 13b2bc37 2022-10-23 stsp 			return (c);
400 13b2bc37 2022-10-23 stsp 	}
401 13b2bc37 2022-10-23 stsp 	if (pushback_index < MAXPUSHBACK-1)
402 13b2bc37 2022-10-23 stsp 		return (pushback_buffer[pushback_index++] = c);
403 13b2bc37 2022-10-23 stsp 	else
404 13b2bc37 2022-10-23 stsp 		return (EOF);
405 13b2bc37 2022-10-23 stsp }
406 13b2bc37 2022-10-23 stsp 
407 13b2bc37 2022-10-23 stsp int
408 13b2bc37 2022-10-23 stsp findeol(void)
409 13b2bc37 2022-10-23 stsp {
410 13b2bc37 2022-10-23 stsp 	int c;
411 13b2bc37 2022-10-23 stsp 
412 13b2bc37 2022-10-23 stsp 	parsebuf = NULL;
413 13b2bc37 2022-10-23 stsp 
414 13b2bc37 2022-10-23 stsp 	/* Skip to either EOF or the first real EOL. */
415 13b2bc37 2022-10-23 stsp 	while (1) {
416 13b2bc37 2022-10-23 stsp 		if (pushback_index)
417 13b2bc37 2022-10-23 stsp 			c = pushback_buffer[--pushback_index];
418 13b2bc37 2022-10-23 stsp 		else
419 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
420 13b2bc37 2022-10-23 stsp 		if (c == '\n') {
421 13b2bc37 2022-10-23 stsp 			file->lineno++;
422 13b2bc37 2022-10-23 stsp 			break;
423 13b2bc37 2022-10-23 stsp 		}
424 13b2bc37 2022-10-23 stsp 		if (c == EOF)
425 13b2bc37 2022-10-23 stsp 			break;
426 13b2bc37 2022-10-23 stsp 	}
427 13b2bc37 2022-10-23 stsp 	return (ERROR);
428 13b2bc37 2022-10-23 stsp }
429 13b2bc37 2022-10-23 stsp 
430 13b2bc37 2022-10-23 stsp int
431 13b2bc37 2022-10-23 stsp yylex(void)
432 13b2bc37 2022-10-23 stsp {
433 13b2bc37 2022-10-23 stsp 	unsigned char buf[8096];
434 13b2bc37 2022-10-23 stsp 	unsigned char *p, *val;
435 13b2bc37 2022-10-23 stsp 	int quotec, next, c;
436 13b2bc37 2022-10-23 stsp 	int token;
437 13b2bc37 2022-10-23 stsp 
438 13b2bc37 2022-10-23 stsp top:
439 13b2bc37 2022-10-23 stsp 	p = buf;
440 13b2bc37 2022-10-23 stsp 	c = lgetc(0);
441 13b2bc37 2022-10-23 stsp 	while (c == ' ' || c == '\t')
442 13b2bc37 2022-10-23 stsp 		c = lgetc(0); /* nothing */
443 13b2bc37 2022-10-23 stsp 
444 13b2bc37 2022-10-23 stsp 	yylval.lineno = file->lineno;
445 13b2bc37 2022-10-23 stsp 	if (c == '#') {
446 13b2bc37 2022-10-23 stsp 		c = lgetc(0);
447 13b2bc37 2022-10-23 stsp 		while (c != '\n' && c != EOF)
448 13b2bc37 2022-10-23 stsp 			c = lgetc(0); /* nothing */
449 13b2bc37 2022-10-23 stsp 	}
450 13b2bc37 2022-10-23 stsp 	if (c == '$' && parsebuf == NULL) {
451 13b2bc37 2022-10-23 stsp 		while (1) {
452 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
453 13b2bc37 2022-10-23 stsp 			if (c == EOF)
454 13b2bc37 2022-10-23 stsp 				return (0);
455 13b2bc37 2022-10-23 stsp 
456 13b2bc37 2022-10-23 stsp 			if (p + 1 >= buf + sizeof(buf) - 1) {
457 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
458 13b2bc37 2022-10-23 stsp 				return (findeol());
459 13b2bc37 2022-10-23 stsp 			}
460 13b2bc37 2022-10-23 stsp 			if (isalnum(c) || c == '_') {
461 13b2bc37 2022-10-23 stsp 				*p++ = c;
462 13b2bc37 2022-10-23 stsp 				continue;
463 13b2bc37 2022-10-23 stsp 			}
464 13b2bc37 2022-10-23 stsp 			*p = '\0';
465 13b2bc37 2022-10-23 stsp 			lungetc(c);
466 13b2bc37 2022-10-23 stsp 			break;
467 13b2bc37 2022-10-23 stsp 		}
468 13b2bc37 2022-10-23 stsp 		val = symget(buf);
469 13b2bc37 2022-10-23 stsp 		if (val == NULL) {
470 13b2bc37 2022-10-23 stsp 			yyerror("macro '%s' not defined", buf);
471 13b2bc37 2022-10-23 stsp 			return (findeol());
472 13b2bc37 2022-10-23 stsp 		}
473 13b2bc37 2022-10-23 stsp 		parsebuf = val;
474 13b2bc37 2022-10-23 stsp 		parseindex = 0;
475 13b2bc37 2022-10-23 stsp 		goto top;
476 13b2bc37 2022-10-23 stsp 	}
477 13b2bc37 2022-10-23 stsp 
478 13b2bc37 2022-10-23 stsp 	switch (c) {
479 13b2bc37 2022-10-23 stsp 	case '\'':
480 13b2bc37 2022-10-23 stsp 	case '"':
481 13b2bc37 2022-10-23 stsp 		quotec = c;
482 13b2bc37 2022-10-23 stsp 		while (1) {
483 13b2bc37 2022-10-23 stsp 			c = lgetc(quotec);
484 13b2bc37 2022-10-23 stsp 			if (c == EOF)
485 13b2bc37 2022-10-23 stsp 				return (0);
486 13b2bc37 2022-10-23 stsp 			if (c == '\n') {
487 13b2bc37 2022-10-23 stsp 				file->lineno++;
488 13b2bc37 2022-10-23 stsp 				continue;
489 13b2bc37 2022-10-23 stsp 			} else if (c == '\\') {
490 13b2bc37 2022-10-23 stsp 				next = lgetc(quotec);
491 13b2bc37 2022-10-23 stsp 				if (next == EOF)
492 13b2bc37 2022-10-23 stsp 					return (0);
493 13b2bc37 2022-10-23 stsp 				if (next == quotec || c == ' ' || c == '\t')
494 13b2bc37 2022-10-23 stsp 					c = next;
495 13b2bc37 2022-10-23 stsp 				else if (next == '\n') {
496 13b2bc37 2022-10-23 stsp 					file->lineno++;
497 13b2bc37 2022-10-23 stsp 					continue;
498 13b2bc37 2022-10-23 stsp 				} else
499 13b2bc37 2022-10-23 stsp 					lungetc(next);
500 13b2bc37 2022-10-23 stsp 			} else if (c == quotec) {
501 13b2bc37 2022-10-23 stsp 				*p = '\0';
502 13b2bc37 2022-10-23 stsp 				break;
503 13b2bc37 2022-10-23 stsp 			} else if (c == '\0') {
504 13b2bc37 2022-10-23 stsp 				yyerror("syntax error");
505 13b2bc37 2022-10-23 stsp 				return (findeol());
506 13b2bc37 2022-10-23 stsp 			}
507 13b2bc37 2022-10-23 stsp 			if (p + 1 >= buf + sizeof(buf) - 1) {
508 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
509 13b2bc37 2022-10-23 stsp 				return (findeol());
510 13b2bc37 2022-10-23 stsp 			}
511 13b2bc37 2022-10-23 stsp 			*p++ = c;
512 13b2bc37 2022-10-23 stsp 		}
513 13b2bc37 2022-10-23 stsp 		yylval.v.string = strdup(buf);
514 13b2bc37 2022-10-23 stsp 		if (yylval.v.string == NULL)
515 13b2bc37 2022-10-23 stsp 			err(1, "yylex: strdup");
516 13b2bc37 2022-10-23 stsp 		return (STRING);
517 13b2bc37 2022-10-23 stsp 	}
518 13b2bc37 2022-10-23 stsp 
519 13b2bc37 2022-10-23 stsp #define allowed_to_end_number(x) \
520 13b2bc37 2022-10-23 stsp 	(isspace(x) || x == ')' || x ==',' || x == '/' || x == '}' || x == '=')
521 13b2bc37 2022-10-23 stsp 
522 13b2bc37 2022-10-23 stsp 	if (c == '-' || isdigit(c)) {
523 13b2bc37 2022-10-23 stsp 		do {
524 13b2bc37 2022-10-23 stsp 			*p++ = c;
525 13b2bc37 2022-10-23 stsp 			if ((unsigned)(p-buf) >= sizeof(buf)) {
526 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
527 13b2bc37 2022-10-23 stsp 				return (findeol());
528 13b2bc37 2022-10-23 stsp 			}
529 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
530 13b2bc37 2022-10-23 stsp 		} while (c != EOF && isdigit(c));
531 13b2bc37 2022-10-23 stsp 		lungetc(c);
532 13b2bc37 2022-10-23 stsp 		if (p == buf + 1 && buf[0] == '-')
533 13b2bc37 2022-10-23 stsp 			goto nodigits;
534 13b2bc37 2022-10-23 stsp 		if (c == EOF || allowed_to_end_number(c)) {
535 13b2bc37 2022-10-23 stsp 			const char *errstr = NULL;
536 13b2bc37 2022-10-23 stsp 
537 13b2bc37 2022-10-23 stsp 			*p = '\0';
538 13b2bc37 2022-10-23 stsp 			yylval.v.number = strtonum(buf, LLONG_MIN,
539 13b2bc37 2022-10-23 stsp 			    LLONG_MAX, &errstr);
540 13b2bc37 2022-10-23 stsp 			if (errstr) {
541 13b2bc37 2022-10-23 stsp 				yyerror("\"%s\" invalid number: %s",
542 13b2bc37 2022-10-23 stsp 				    buf, errstr);
543 13b2bc37 2022-10-23 stsp 				return (findeol());
544 13b2bc37 2022-10-23 stsp 			}
545 13b2bc37 2022-10-23 stsp 			return (NUMBER);
546 13b2bc37 2022-10-23 stsp 		} else {
547 13b2bc37 2022-10-23 stsp nodigits:
548 13b2bc37 2022-10-23 stsp 			while (p > buf + 1)
549 13b2bc37 2022-10-23 stsp 				lungetc(*--p);
550 13b2bc37 2022-10-23 stsp 			c = *--p;
551 13b2bc37 2022-10-23 stsp 			if (c == '-')
552 13b2bc37 2022-10-23 stsp 				return (c);
553 13b2bc37 2022-10-23 stsp 		}
554 13b2bc37 2022-10-23 stsp 	}
555 13b2bc37 2022-10-23 stsp 
556 13b2bc37 2022-10-23 stsp #define allowed_in_string(x) \
557 13b2bc37 2022-10-23 stsp 	(isalnum(x) || (ispunct(x) && x != '(' && x != ')' && \
558 13b2bc37 2022-10-23 stsp 	x != '{' && x != '}' && \
559 13b2bc37 2022-10-23 stsp 	x != '!' && x != '=' && x != '#' && \
560 13b2bc37 2022-10-23 stsp 	x != ','))
561 13b2bc37 2022-10-23 stsp 
562 13b2bc37 2022-10-23 stsp 	if (isalnum(c) || c == ':' || c == '_') {
563 13b2bc37 2022-10-23 stsp 		do {
564 13b2bc37 2022-10-23 stsp 			*p++ = c;
565 13b2bc37 2022-10-23 stsp 			if ((unsigned)(p-buf) >= sizeof(buf)) {
566 13b2bc37 2022-10-23 stsp 				yyerror("string too long");
567 13b2bc37 2022-10-23 stsp 				return (findeol());
568 13b2bc37 2022-10-23 stsp 			}
569 13b2bc37 2022-10-23 stsp 			c = lgetc(0);
570 13b2bc37 2022-10-23 stsp 		} while (c != EOF && (allowed_in_string(c)));
571 13b2bc37 2022-10-23 stsp 		lungetc(c);
572 13b2bc37 2022-10-23 stsp 		*p = '\0';
573 13b2bc37 2022-10-23 stsp 		token = lookup(buf);
574 13b2bc37 2022-10-23 stsp 		if (token == STRING) {
575 13b2bc37 2022-10-23 stsp 			yylval.v.string = strdup(buf);
576 13b2bc37 2022-10-23 stsp 			if (yylval.v.string == NULL)
577 13b2bc37 2022-10-23 stsp 				err(1, "yylex: strdup");
578 13b2bc37 2022-10-23 stsp 		}
579 13b2bc37 2022-10-23 stsp 		return (token);
580 13b2bc37 2022-10-23 stsp 	}
581 13b2bc37 2022-10-23 stsp 	if (c == '\n') {
582 13b2bc37 2022-10-23 stsp 		yylval.lineno = file->lineno;
583 13b2bc37 2022-10-23 stsp 		file->lineno++;
584 13b2bc37 2022-10-23 stsp 	}
585 13b2bc37 2022-10-23 stsp 	if (c == EOF)
586 13b2bc37 2022-10-23 stsp 		return (0);
587 13b2bc37 2022-10-23 stsp 	return (c);
588 13b2bc37 2022-10-23 stsp }
589 13b2bc37 2022-10-23 stsp 
590 13b2bc37 2022-10-23 stsp int
591 13b2bc37 2022-10-23 stsp check_file_secrecy(int fd, const char *fname)
592 13b2bc37 2022-10-23 stsp {
593 13b2bc37 2022-10-23 stsp 	struct stat st;
594 13b2bc37 2022-10-23 stsp 
595 13b2bc37 2022-10-23 stsp 	if (fstat(fd, &st)) {
596 13b2bc37 2022-10-23 stsp 		log_warn("cannot stat %s", fname);
597 13b2bc37 2022-10-23 stsp 		return (-1);
598 13b2bc37 2022-10-23 stsp 	}
599 13b2bc37 2022-10-23 stsp 	if (st.st_uid != 0 && st.st_uid != getuid()) {
600 13b2bc37 2022-10-23 stsp 		log_warnx("%s: owner not root or current user", fname);
601 13b2bc37 2022-10-23 stsp 		return (-1);
602 13b2bc37 2022-10-23 stsp 	}
603 13b2bc37 2022-10-23 stsp 	if (st.st_mode & (S_IWGRP | S_IXGRP | S_IRWXO)) {
604 13b2bc37 2022-10-23 stsp 		log_warnx("%s: group writable or world read/writable", fname);
605 13b2bc37 2022-10-23 stsp 		return (-1);
606 13b2bc37 2022-10-23 stsp 	}
607 13b2bc37 2022-10-23 stsp 	return (0);
608 13b2bc37 2022-10-23 stsp }
609 13b2bc37 2022-10-23 stsp 
610 13b2bc37 2022-10-23 stsp struct file *
611 13b2bc37 2022-10-23 stsp newfile(const char *name, int secret)
612 13b2bc37 2022-10-23 stsp {
613 13b2bc37 2022-10-23 stsp 	struct file *nfile;
614 13b2bc37 2022-10-23 stsp 
615 13b2bc37 2022-10-23 stsp 	nfile = calloc(1, sizeof(struct file));
616 13b2bc37 2022-10-23 stsp 	if (nfile == NULL) {
617 13b2bc37 2022-10-23 stsp 		log_warn("calloc");
618 13b2bc37 2022-10-23 stsp 		return (NULL);
619 13b2bc37 2022-10-23 stsp 	}
620 13b2bc37 2022-10-23 stsp 	nfile->name = strdup(name);
621 13b2bc37 2022-10-23 stsp 	if (nfile->name == NULL) {
622 13b2bc37 2022-10-23 stsp 		log_warn("strdup");
623 13b2bc37 2022-10-23 stsp 		free(nfile);
624 13b2bc37 2022-10-23 stsp 		return (NULL);
625 13b2bc37 2022-10-23 stsp 	}
626 13b2bc37 2022-10-23 stsp 	nfile->stream = fopen(nfile->name, "r");
627 13b2bc37 2022-10-23 stsp 	if (nfile->stream == NULL) {
628 13b2bc37 2022-10-23 stsp 		/* no warning, we don't require a conf file */
629 13b2bc37 2022-10-23 stsp 		free(nfile->name);
630 13b2bc37 2022-10-23 stsp 		free(nfile);
631 13b2bc37 2022-10-23 stsp 		return (NULL);
632 13b2bc37 2022-10-23 stsp 	} else if (secret &&
633 13b2bc37 2022-10-23 stsp 	    check_file_secrecy(fileno(nfile->stream), nfile->name)) {
634 13b2bc37 2022-10-23 stsp 		fclose(nfile->stream);
635 13b2bc37 2022-10-23 stsp 		free(nfile->name);
636 13b2bc37 2022-10-23 stsp 		free(nfile);
637 13b2bc37 2022-10-23 stsp 		return (NULL);
638 13b2bc37 2022-10-23 stsp 	}
639 13b2bc37 2022-10-23 stsp 	nfile->lineno = 1;
640 13b2bc37 2022-10-23 stsp 	return (nfile);
641 13b2bc37 2022-10-23 stsp }
642 13b2bc37 2022-10-23 stsp 
643 13b2bc37 2022-10-23 stsp static void
644 13b2bc37 2022-10-23 stsp closefile(struct file *xfile)
645 13b2bc37 2022-10-23 stsp {
646 13b2bc37 2022-10-23 stsp 	fclose(xfile->stream);
647 13b2bc37 2022-10-23 stsp 	free(xfile->name);
648 13b2bc37 2022-10-23 stsp 	free(xfile);
649 13b2bc37 2022-10-23 stsp }
650 13b2bc37 2022-10-23 stsp 
651 13b2bc37 2022-10-23 stsp int
652 13b2bc37 2022-10-23 stsp parse_config(const char *filename, enum gotd_procid proc_id,
653 13b2bc37 2022-10-23 stsp     struct gotd *env)
654 13b2bc37 2022-10-23 stsp {
655 13b2bc37 2022-10-23 stsp 	struct sym *sym, *next;
656 3b706203 2023-01-02 stsp 	struct gotd_repo *repo;
657 13b2bc37 2022-10-23 stsp 
658 13b2bc37 2022-10-23 stsp 	memset(env, 0, sizeof(*env));
659 13b2bc37 2022-10-23 stsp 
660 13b2bc37 2022-10-23 stsp 	gotd = env;
661 13b2bc37 2022-10-23 stsp 	gotd_proc_id = proc_id;
662 13b2bc37 2022-10-23 stsp 	TAILQ_INIT(&gotd->repos);
663 13b2bc37 2022-10-23 stsp 
664 13b2bc37 2022-10-23 stsp 	/* Apply default values. */
665 13b2bc37 2022-10-23 stsp 	if (strlcpy(gotd->unix_socket_path, GOTD_UNIX_SOCKET,
666 13b2bc37 2022-10-23 stsp 	    sizeof(gotd->unix_socket_path)) >= sizeof(gotd->unix_socket_path)) {
667 13b2bc37 2022-10-23 stsp 		fprintf(stderr, "%s: unix socket path too long", __func__);
668 13b2bc37 2022-10-23 stsp 		return -1;
669 13b2bc37 2022-10-23 stsp 	}
670 13b2bc37 2022-10-23 stsp 	if (strlcpy(gotd->unix_group_name, GOTD_UNIX_GROUP,
671 13b2bc37 2022-10-23 stsp 	    sizeof(gotd->unix_group_name)) >= sizeof(gotd->unix_group_name)) {
672 13b2bc37 2022-10-23 stsp 		fprintf(stderr, "%s: unix group name too long", __func__);
673 13b2bc37 2022-10-23 stsp 		return -1;
674 13b2bc37 2022-10-23 stsp 	}
675 13b2bc37 2022-10-23 stsp 	if (strlcpy(gotd->user_name, GOTD_USER,
676 13b2bc37 2022-10-23 stsp 	    sizeof(gotd->user_name)) >= sizeof(gotd->user_name)) {
677 13b2bc37 2022-10-23 stsp 		fprintf(stderr, "%s: user name too long", __func__);
678 13b2bc37 2022-10-23 stsp 		return -1;
679 13b2bc37 2022-10-23 stsp 	}
680 40b85cca 2023-01-03 stsp 
681 40b85cca 2023-01-03 stsp 	gotd->request_timeout.tv_sec = GOTD_DEFAULT_REQUEST_TIMEOUT;
682 40b85cca 2023-01-03 stsp 	gotd->request_timeout.tv_usec = 0;
683 13b2bc37 2022-10-23 stsp 
684 13b2bc37 2022-10-23 stsp 	file = newfile(filename, 0);
685 13b2bc37 2022-10-23 stsp 	if (file == NULL) {
686 13b2bc37 2022-10-23 stsp 		/* just return, as we don't require a conf file */
687 13b2bc37 2022-10-23 stsp 		return (0);
688 13b2bc37 2022-10-23 stsp 	}
689 13b2bc37 2022-10-23 stsp 
690 13b2bc37 2022-10-23 stsp 	yyparse();
691 13b2bc37 2022-10-23 stsp 	errors = file->errors;
692 13b2bc37 2022-10-23 stsp 	closefile(file);
693 13b2bc37 2022-10-23 stsp 
694 13b2bc37 2022-10-23 stsp 	/* Free macros and check which have not been used. */
695 13b2bc37 2022-10-23 stsp 	TAILQ_FOREACH_SAFE(sym, &symhead, entry, next) {
696 13b2bc37 2022-10-23 stsp 		if ((gotd->verbosity > 1) && !sym->used)
697 13b2bc37 2022-10-23 stsp 			fprintf(stderr, "warning: macro '%s' not used\n",
698 13b2bc37 2022-10-23 stsp 			    sym->nam);
699 13b2bc37 2022-10-23 stsp 		if (!sym->persist) {
700 13b2bc37 2022-10-23 stsp 			free(sym->nam);
701 13b2bc37 2022-10-23 stsp 			free(sym->val);
702 13b2bc37 2022-10-23 stsp 			TAILQ_REMOVE(&symhead, sym, entry);
703 13b2bc37 2022-10-23 stsp 			free(sym);
704 13b2bc37 2022-10-23 stsp 		}
705 13b2bc37 2022-10-23 stsp 	}
706 13b2bc37 2022-10-23 stsp 
707 13b2bc37 2022-10-23 stsp 	if (errors)
708 13b2bc37 2022-10-23 stsp 		return (-1);
709 13b2bc37 2022-10-23 stsp 
710 3b706203 2023-01-02 stsp 	TAILQ_FOREACH(repo, &gotd->repos, entry) {
711 3b706203 2023-01-02 stsp 		if (repo->path[0] == '\0') {
712 2507ffb7 2023-01-02 stsp 			log_warnx("repository \"%s\": no path provided in "
713 2507ffb7 2023-01-02 stsp 			    "configuration file", repo->name);
714 3b706203 2023-01-02 stsp 			return (-1);
715 3b706203 2023-01-02 stsp 		}
716 3b706203 2023-01-02 stsp 	}
717 3b706203 2023-01-02 stsp 
718 13b2bc37 2022-10-23 stsp 	return (0);
719 13b2bc37 2022-10-23 stsp }
720 13b2bc37 2022-10-23 stsp 
721 40b85cca 2023-01-03 stsp static int
722 40b85cca 2023-01-03 stsp uid_connection_limit_cmp(const void *pa, const void *pb)
723 40b85cca 2023-01-03 stsp {
724 40b85cca 2023-01-03 stsp 	const struct gotd_uid_connection_limit *a = pa, *b = pb;
725 40b85cca 2023-01-03 stsp 
726 40b85cca 2023-01-03 stsp 	if (a->uid < b->uid)
727 40b85cca 2023-01-03 stsp 		return -1;
728 40b85cca 2023-01-03 stsp 	else if (a->uid > b->uid);
729 40b85cca 2023-01-03 stsp 		return 1;
730 40b85cca 2023-01-03 stsp 
731 40b85cca 2023-01-03 stsp 	return 0;
732 40b85cca 2023-01-03 stsp }
733 40b85cca 2023-01-03 stsp 
734 40b85cca 2023-01-03 stsp static int
735 40b85cca 2023-01-03 stsp conf_limit_user_connections(const char *user, int maximum)
736 40b85cca 2023-01-03 stsp {
737 40b85cca 2023-01-03 stsp 	uid_t uid;
738 40b85cca 2023-01-03 stsp 	struct gotd_uid_connection_limit *limit;
739 40b85cca 2023-01-03 stsp 	size_t nlimits;
740 40b85cca 2023-01-03 stsp 
741 40b85cca 2023-01-03 stsp 	if (maximum < 1) {
742 40b85cca 2023-01-03 stsp 		yyerror("max connections cannot be smaller 1");
743 40b85cca 2023-01-03 stsp 		return -1;
744 40b85cca 2023-01-03 stsp 	}
745 40b85cca 2023-01-03 stsp 	if (maximum > GOTD_MAXCLIENTS) {
746 40b85cca 2023-01-03 stsp 		yyerror("max connections must be <= %d", GOTD_MAXCLIENTS);
747 40b85cca 2023-01-03 stsp 		return -1;
748 40b85cca 2023-01-03 stsp 	}
749 40b85cca 2023-01-03 stsp 
750 40b85cca 2023-01-03 stsp 	if (gotd_auth_parseuid(user, &uid) == -1) {
751 40b85cca 2023-01-03 stsp 		yyerror("%s: no such user", user);
752 40b85cca 2023-01-03 stsp 		return -1;
753 40b85cca 2023-01-03 stsp 	}
754 40b85cca 2023-01-03 stsp 
755 40b85cca 2023-01-03 stsp 	limit = gotd_find_uid_connection_limit(gotd->connection_limits,
756 40b85cca 2023-01-03 stsp 	    gotd->nconnection_limits, uid);
757 40b85cca 2023-01-03 stsp 	if (limit) {
758 40b85cca 2023-01-03 stsp 		limit->max_connections = maximum;
759 40b85cca 2023-01-03 stsp 		return 0;
760 40b85cca 2023-01-03 stsp 	}
761 40b85cca 2023-01-03 stsp 
762 40b85cca 2023-01-03 stsp 	limit = gotd->connection_limits;
763 40b85cca 2023-01-03 stsp 	nlimits = gotd->nconnection_limits + 1;
764 40b85cca 2023-01-03 stsp 	limit = reallocarray(limit, nlimits, sizeof(*limit));
765 40b85cca 2023-01-03 stsp 	if (limit == NULL)
766 40b85cca 2023-01-03 stsp 		fatal("reallocarray");
767 40b85cca 2023-01-03 stsp 
768 40b85cca 2023-01-03 stsp 	limit[nlimits - 1].uid = uid;
769 40b85cca 2023-01-03 stsp 	limit[nlimits - 1].max_connections = maximum;
770 40b85cca 2023-01-03 stsp 
771 40b85cca 2023-01-03 stsp 	gotd->connection_limits = limit;
772 40b85cca 2023-01-03 stsp 	gotd->nconnection_limits = nlimits;
773 40b85cca 2023-01-03 stsp 	qsort(gotd->connection_limits, gotd->nconnection_limits,
774 40b85cca 2023-01-03 stsp 	    sizeof(gotd->connection_limits[0]), uid_connection_limit_cmp);
775 40b85cca 2023-01-03 stsp 
776 40b85cca 2023-01-03 stsp 	return 0;
777 40b85cca 2023-01-03 stsp }
778 40b85cca 2023-01-03 stsp 
779 13b2bc37 2022-10-23 stsp static struct gotd_repo *
780 13b2bc37 2022-10-23 stsp conf_new_repo(const char *name)
781 13b2bc37 2022-10-23 stsp {
782 13b2bc37 2022-10-23 stsp 	struct gotd_repo *repo;
783 13b2bc37 2022-10-23 stsp 
784 7683f79a 2023-01-02 stsp 	if (name[0] == '\0') {
785 7683f79a 2023-01-02 stsp 		fatalx("syntax error: empty repository name found in %s",
786 7683f79a 2023-01-02 stsp 		    file->name);
787 7683f79a 2023-01-02 stsp 	}
788 7683f79a 2023-01-02 stsp 
789 2507ffb7 2023-01-02 stsp 	if (strchr(name, '\n') != NULL)
790 2507ffb7 2023-01-02 stsp 		fatalx("repository names must not contain linefeeds: %s", name);
791 13b2bc37 2022-10-23 stsp 
792 13b2bc37 2022-10-23 stsp 	repo = calloc(1, sizeof(*repo));
793 13b2bc37 2022-10-23 stsp 	if (repo == NULL)
794 13b2bc37 2022-10-23 stsp 		fatalx("%s: calloc", __func__);
795 13b2bc37 2022-10-23 stsp 
796 0ccf3acb 2022-11-16 stsp 	STAILQ_INIT(&repo->rules);
797 0ccf3acb 2022-11-16 stsp 
798 13b2bc37 2022-10-23 stsp 	if (strlcpy(repo->name, name, sizeof(repo->name)) >=
799 13b2bc37 2022-10-23 stsp 	    sizeof(repo->name))
800 13b2bc37 2022-10-23 stsp 		fatalx("%s: strlcpy", __func__);
801 13b2bc37 2022-10-23 stsp 
802 13b2bc37 2022-10-23 stsp 	TAILQ_INSERT_TAIL(&gotd->repos, repo, entry);
803 13b2bc37 2022-10-23 stsp 	gotd->nrepos++;
804 13b2bc37 2022-10-23 stsp 
805 13b2bc37 2022-10-23 stsp 	return repo;
806 13b2bc37 2022-10-23 stsp };
807 0ccf3acb 2022-11-16 stsp 
808 0ccf3acb 2022-11-16 stsp static void
809 0ccf3acb 2022-11-16 stsp conf_new_access_rule(struct gotd_repo *repo, enum gotd_access access,
810 0ccf3acb 2022-11-16 stsp     int authorization, char *identifier)
811 0ccf3acb 2022-11-16 stsp {
812 0ccf3acb 2022-11-16 stsp 	struct gotd_access_rule *rule;
813 0ccf3acb 2022-11-16 stsp 
814 0ccf3acb 2022-11-16 stsp 	rule = calloc(1, sizeof(*rule));
815 0ccf3acb 2022-11-16 stsp 	if (rule == NULL)
816 0ccf3acb 2022-11-16 stsp 		fatal("calloc");
817 13b2bc37 2022-10-23 stsp 
818 0ccf3acb 2022-11-16 stsp 	rule->access = access;
819 0ccf3acb 2022-11-16 stsp 	rule->authorization = authorization;
820 0ccf3acb 2022-11-16 stsp 	rule->identifier = identifier;
821 0ccf3acb 2022-11-16 stsp 
822 0ccf3acb 2022-11-16 stsp 	STAILQ_INSERT_TAIL(&repo->rules, rule, entry);
823 0ccf3acb 2022-11-16 stsp }
824 0ccf3acb 2022-11-16 stsp 
825 13b2bc37 2022-10-23 stsp int
826 13b2bc37 2022-10-23 stsp symset(const char *nam, const char *val, int persist)
827 13b2bc37 2022-10-23 stsp {
828 13b2bc37 2022-10-23 stsp 	struct sym *sym;
829 13b2bc37 2022-10-23 stsp 
830 13b2bc37 2022-10-23 stsp 	TAILQ_FOREACH(sym, &symhead, entry) {
831 13b2bc37 2022-10-23 stsp 		if (strcmp(nam, sym->nam) == 0)
832 13b2bc37 2022-10-23 stsp 			break;
833 13b2bc37 2022-10-23 stsp 	}
834 13b2bc37 2022-10-23 stsp 
835 13b2bc37 2022-10-23 stsp 	if (sym != NULL) {
836 13b2bc37 2022-10-23 stsp 		if (sym->persist == 1)
837 13b2bc37 2022-10-23 stsp 			return (0);
838 13b2bc37 2022-10-23 stsp 		else {
839 13b2bc37 2022-10-23 stsp 			free(sym->nam);
840 13b2bc37 2022-10-23 stsp 			free(sym->val);
841 13b2bc37 2022-10-23 stsp 			TAILQ_REMOVE(&symhead, sym, entry);
842 13b2bc37 2022-10-23 stsp 			free(sym);
843 13b2bc37 2022-10-23 stsp 		}
844 13b2bc37 2022-10-23 stsp 	}
845 13b2bc37 2022-10-23 stsp 	sym = calloc(1, sizeof(*sym));
846 13b2bc37 2022-10-23 stsp 	if (sym == NULL)
847 13b2bc37 2022-10-23 stsp 		return (-1);
848 13b2bc37 2022-10-23 stsp 
849 13b2bc37 2022-10-23 stsp 	sym->nam = strdup(nam);
850 13b2bc37 2022-10-23 stsp 	if (sym->nam == NULL) {
851 13b2bc37 2022-10-23 stsp 		free(sym);
852 13b2bc37 2022-10-23 stsp 		return (-1);
853 13b2bc37 2022-10-23 stsp 	}
854 13b2bc37 2022-10-23 stsp 	sym->val = strdup(val);
855 13b2bc37 2022-10-23 stsp 	if (sym->val == NULL) {
856 13b2bc37 2022-10-23 stsp 		free(sym->nam);
857 13b2bc37 2022-10-23 stsp 		free(sym);
858 13b2bc37 2022-10-23 stsp 		return (-1);
859 13b2bc37 2022-10-23 stsp 	}
860 13b2bc37 2022-10-23 stsp 	sym->used = 0;
861 13b2bc37 2022-10-23 stsp 	sym->persist = persist;
862 13b2bc37 2022-10-23 stsp 	TAILQ_INSERT_TAIL(&symhead, sym, entry);
863 13b2bc37 2022-10-23 stsp 	return (0);
864 13b2bc37 2022-10-23 stsp }
865 13b2bc37 2022-10-23 stsp 
866 13b2bc37 2022-10-23 stsp char *
867 13b2bc37 2022-10-23 stsp symget(const char *nam)
868 13b2bc37 2022-10-23 stsp {
869 13b2bc37 2022-10-23 stsp 	struct sym *sym;
870 13b2bc37 2022-10-23 stsp 
871 13b2bc37 2022-10-23 stsp 	TAILQ_FOREACH(sym, &symhead, entry) {
872 13b2bc37 2022-10-23 stsp 		if (strcmp(nam, sym->nam) == 0) {
873 13b2bc37 2022-10-23 stsp 			sym->used = 1;
874 13b2bc37 2022-10-23 stsp 			return (sym->val);
875 13b2bc37 2022-10-23 stsp 		}
876 13b2bc37 2022-10-23 stsp 	}
877 13b2bc37 2022-10-23 stsp 	return (NULL);
878 13b2bc37 2022-10-23 stsp }