| 6 |
* Copyright (C) 2004-2025 Leaflet <leaflet@leafok.com> |
* Copyright (C) 2004-2025 Leaflet <leaflet@leafok.com> |
| 7 |
*/ |
*/ |
| 8 |
|
|
| 9 |
|
#ifdef HAVE_CONFIG_H |
| 10 |
|
#include "config.h" |
| 11 |
|
#endif |
| 12 |
|
|
| 13 |
#include "bbs.h" |
#include "bbs.h" |
| 14 |
#include "bbs_main.h" |
#include "bbs_main.h" |
| 15 |
#include "bwf.h" |
#include "bwf.h" |
| 16 |
#include "common.h" |
#include "common.h" |
| 17 |
#include "database.h" |
#include "database.h" |
| 18 |
#include "file_loader.h" |
#include "file_loader.h" |
| 19 |
|
#include "hash_dict.h" |
| 20 |
#include "io.h" |
#include "io.h" |
| 21 |
#include "init.h" |
#include "init.h" |
| 22 |
#include "log.h" |
#include "log.h" |
| 53 |
SSH_AUTH_MAX_DURATION = 60 * 1000, // milliseconds |
SSH_AUTH_MAX_DURATION = 60 * 1000, // milliseconds |
| 54 |
}; |
}; |
| 55 |
|
|
|
struct process_sockaddr_t |
|
|
{ |
|
|
pid_t pid; |
|
|
in_addr_t s_addr; |
|
|
}; |
|
|
typedef struct process_sockaddr_t PROCESS_SOCKADDR; |
|
|
|
|
|
static PROCESS_SOCKADDR process_sockaddr_pool[MAX_CLIENT_LIMIT]; |
|
|
|
|
| 56 |
static const char SFTP_SERVER_PATH[] = "/usr/lib/sftp-server"; |
static const char SFTP_SERVER_PATH[] = "/usr/lib/sftp-server"; |
| 57 |
|
|
| 58 |
/* A userdata struct for session. */ |
/* A userdata struct for session. */ |
| 393 |
} |
} |
| 394 |
|
|
| 395 |
// Redirect Input |
// Redirect Input |
|
close(STDIN_FILENO); |
|
| 396 |
if (dup2(socket_client, STDIN_FILENO) == -1) |
if (dup2(socket_client, STDIN_FILENO) == -1) |
| 397 |
{ |
{ |
| 398 |
log_error("Redirect stdin to client socket failed\n"); |
log_error("Redirect stdin to client socket failed\n"); |
| 400 |
} |
} |
| 401 |
|
|
| 402 |
// Redirect Output |
// Redirect Output |
|
close(STDOUT_FILENO); |
|
| 403 |
if (dup2(socket_client, STDOUT_FILENO) == -1) |
if (dup2(socket_client, STDOUT_FILENO) == -1) |
| 404 |
{ |
{ |
| 405 |
log_error("Redirect stdout to client socket failed\n"); |
log_error("Redirect stdout to client socket failed\n"); |
| 446 |
|
|
| 447 |
int net_server(const char *hostaddr, in_port_t port[]) |
int net_server(const char *hostaddr, in_port_t port[]) |
| 448 |
{ |
{ |
| 449 |
|
HASH_DICT *hash_dict_pid_sockaddr = NULL; |
| 450 |
|
HASH_DICT *hash_dict_sockaddr_count = NULL; |
| 451 |
|
|
| 452 |
unsigned int addrlen; |
unsigned int addrlen; |
| 453 |
int ret; |
int ret; |
| 454 |
int flags[2]; |
int flags[2]; |
| 544 |
fcntl(socket_server[i], F_SETFL, flags[i] | O_NONBLOCK); |
fcntl(socket_server[i], F_SETFL, flags[i] | O_NONBLOCK); |
| 545 |
} |
} |
| 546 |
|
|
| 547 |
|
hash_dict_pid_sockaddr = hash_dict_create(MAX_CLIENT_LIMIT); |
| 548 |
|
if (hash_dict_pid_sockaddr == NULL) |
| 549 |
|
{ |
| 550 |
|
log_error("hash_dict_create(hash_dict_pid_sockaddr) error\n"); |
| 551 |
|
return -1; |
| 552 |
|
} |
| 553 |
|
hash_dict_sockaddr_count = hash_dict_create(MAX_CLIENT_LIMIT); |
| 554 |
|
if (hash_dict_sockaddr_count == NULL) |
| 555 |
|
{ |
| 556 |
|
log_error("hash_dict_create(hash_dict_sockaddr_count) error\n"); |
| 557 |
|
return -1; |
| 558 |
|
} |
| 559 |
|
|
| 560 |
// Startup complete |
// Startup complete |
| 561 |
sd_notifyf(0, "READY=1\n" |
sd_notifyf(0, "READY=1\n" |
| 562 |
"STATUS=Listening at %s:%d (Telnet) and %s:%d (SSH2)\n" |
"STATUS=Listening at %s:%d (Telnet) and %s:%d (SSH2)\n" |
| 586 |
|
|
| 587 |
if (siginfo.si_pid != section_list_loader_pid) |
if (siginfo.si_pid != section_list_loader_pid) |
| 588 |
{ |
{ |
| 589 |
i = 0; |
j = 0; |
| 590 |
for (; i < BBS_max_client; i++) |
ret = hash_dict_get(hash_dict_pid_sockaddr, (uint64_t)siginfo.si_pid, (int64_t *)&j); |
| 591 |
|
if (ret < 0) |
| 592 |
{ |
{ |
| 593 |
if (process_sockaddr_pool[i].pid == siginfo.si_pid) |
log_error("hash_dict_get(hash_dict_pid_sockaddr, %d) error\n", siginfo.si_pid); |
|
{ |
|
|
process_sockaddr_pool[i].pid = 0; |
|
|
break; |
|
|
} |
|
| 594 |
} |
} |
| 595 |
if (i >= BBS_max_client) |
else |
| 596 |
{ |
{ |
| 597 |
log_error("Child process (%d) not found in process sockaddr pool\n", siginfo.si_pid); |
sin.sin_addr.s_addr = (uint32_t)j; |
| 598 |
|
j = 0; |
| 599 |
|
ret = hash_dict_get(hash_dict_sockaddr_count, sin.sin_addr.s_addr, (int64_t *)&j); |
| 600 |
|
if (ret < 0) |
| 601 |
|
{ |
| 602 |
|
log_error("hash_dict_get(hash_dict_sockaddr_count, %d) error\n", sin.sin_addr.s_addr); |
| 603 |
|
} |
| 604 |
|
else if (ret == 0) |
| 605 |
|
{ |
| 606 |
|
log_error("hash_dict_get(hash_dict_sockaddr_count, %d) not found\n", sin.sin_addr.s_addr); |
| 607 |
|
j = 1; |
| 608 |
|
} |
| 609 |
|
|
| 610 |
|
j--; |
| 611 |
|
ret = hash_dict_set(hash_dict_sockaddr_count, sin.sin_addr.s_addr, j); |
| 612 |
|
if (ret < 0) |
| 613 |
|
{ |
| 614 |
|
log_error("hash_dict_set(hash_dict_sockaddr_count, %d, %d) error\n", sin.sin_addr.s_addr, j); |
| 615 |
|
} |
| 616 |
|
|
| 617 |
|
ret = hash_dict_del(hash_dict_pid_sockaddr, (uint64_t)siginfo.si_pid); |
| 618 |
|
if (ret < 0) |
| 619 |
|
{ |
| 620 |
|
log_error("hash_dict_del(hash_dict_pid_sockaddr, %d) error\n", siginfo.si_pid); |
| 621 |
|
} |
| 622 |
} |
} |
| 623 |
} |
} |
| 624 |
} |
} |
| 640 |
sd_notifyf(0, "STATUS=Notify %d child process to exit", SYS_child_process_count); |
sd_notifyf(0, "STATUS=Notify %d child process to exit", SYS_child_process_count); |
| 641 |
log_common("Notify %d child process to exit\n", SYS_child_process_count); |
log_common("Notify %d child process to exit\n", SYS_child_process_count); |
| 642 |
|
|
| 643 |
if (kill(0, SIGTERM) < 0) |
if (kill(-getpid(), SIGTERM) < 0) |
| 644 |
{ |
{ |
| 645 |
log_error("Send SIGTERM signal failed (%d)\n", errno); |
log_error("Send SIGTERM signal failed (%d)\n", errno); |
| 646 |
} |
} |
| 652 |
{ |
{ |
| 653 |
sd_notifyf(0, "STATUS=Kill %d child process", SYS_child_process_count); |
sd_notifyf(0, "STATUS=Kill %d child process", SYS_child_process_count); |
| 654 |
|
|
| 655 |
for (i = 0; i < BBS_max_client; i++) |
if (kill(-getpid(), SIGKILL) < 0) |
| 656 |
{ |
{ |
| 657 |
if (process_sockaddr_pool[i].pid != 0) |
log_error("Send SIGKILL signal failed (%d)\n", errno); |
|
{ |
|
|
log_error("Kill child process (pid=%d)\n", process_sockaddr_pool[i].pid); |
|
|
if (kill(process_sockaddr_pool[i].pid, SIGKILL) < 0) |
|
|
{ |
|
|
log_error("Send SIGKILL signal failed (%d)\n", errno); |
|
|
} |
|
|
} |
|
| 658 |
} |
} |
| 659 |
|
|
| 660 |
notify_child_exit = 2; |
notify_child_exit = 2; |
| 786 |
if (SYS_child_process_count - 1 < BBS_max_client) |
if (SYS_child_process_count - 1 < BBS_max_client) |
| 787 |
{ |
{ |
| 788 |
j = 0; |
j = 0; |
| 789 |
for (i = 0; i < BBS_max_client; i++) |
ret = hash_dict_get(hash_dict_sockaddr_count, (uint64_t)sin.sin_addr.s_addr, (int64_t *)&j); |
| 790 |
|
if (ret < 0) |
| 791 |
{ |
{ |
| 792 |
if (process_sockaddr_pool[i].pid != 0 && process_sockaddr_pool[i].s_addr == sin.sin_addr.s_addr) |
log_error("hash_dict_get(hash_dict_sockaddr_count, %s) error\n", hostaddr_client); |
|
{ |
|
|
j++; |
|
|
if (j >= BBS_max_client_per_ip) |
|
|
{ |
|
|
log_common("Too many client connections (%d) from %s\n", j, hostaddr_client); |
|
|
break; |
|
|
} |
|
|
} |
|
| 793 |
} |
} |
| 794 |
|
|
| 795 |
if (j < BBS_max_client_per_ip) |
if (j < BBS_max_client_per_ip) |
| 800 |
} |
} |
| 801 |
else if (pid > 0) |
else if (pid > 0) |
| 802 |
{ |
{ |
| 803 |
i = 0; |
ret = hash_dict_set(hash_dict_pid_sockaddr, (uint64_t)pid, sin.sin_addr.s_addr); |
| 804 |
for (; i < BBS_max_client; i++) |
if (ret < 0) |
| 805 |
{ |
{ |
| 806 |
if (process_sockaddr_pool[i].pid == 0) |
log_error("hash_dict_set(hash_dict_pid_sockaddr, %d, %s) error\n", pid, hostaddr_client); |
|
{ |
|
|
break; |
|
|
} |
|
| 807 |
} |
} |
| 808 |
|
|
| 809 |
if (i >= BBS_max_client) |
ret = hash_dict_set(hash_dict_sockaddr_count, (uint64_t)sin.sin_addr.s_addr, j + 1); |
| 810 |
|
if (ret < 0) |
| 811 |
{ |
{ |
| 812 |
log_error("Process sockaddr pool depleted\n"); |
log_error("hash_dict_set(hash_dict_sockaddr_count, %s, %d) error\n", hostaddr_client, j + 1); |
|
} |
|
|
else |
|
|
{ |
|
|
process_sockaddr_pool[i].pid = pid; |
|
|
process_sockaddr_pool[i].s_addr = sin.sin_addr.s_addr; |
|
| 813 |
} |
} |
| 814 |
} |
} |
| 815 |
} |
} |
| 816 |
|
else |
| 817 |
|
{ |
| 818 |
|
log_error("Rejected client connection from %s over limit per IP (%d)\n", hostaddr_client, BBS_max_client_per_ip); |
| 819 |
|
} |
| 820 |
} |
} |
| 821 |
else |
else |
| 822 |
{ |
{ |
| 847 |
} |
} |
| 848 |
} |
} |
| 849 |
|
|
| 850 |
|
hash_dict_destroy(hash_dict_pid_sockaddr); |
| 851 |
|
hash_dict_destroy(hash_dict_sockaddr_count); |
| 852 |
|
|
| 853 |
ssh_bind_free(sshbind); |
ssh_bind_free(sshbind); |
| 854 |
ssh_finalize(); |
ssh_finalize(); |
| 855 |
|
|