bin/rcp/rcp.c

   1 /*
   2  * Copyright (c) 1983, 1990, 1992, 1993
   3  *      The Regents of the University of California.  All rights reserved.
   4  * Copyright (c) 2002 Networks Associates Technology, Inc.
   5  * All rights reserved.
   6  *
   7  * Portions of this software were developed for the FreeBSD Project by
   8  * ThinkSec AS and NAI Labs, the Security Research Division of Network
   9  * Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
  10  * ("CBOSS"), as part of the DARPA CHATS research program.
  11  *
  12  * Redistribution and use in source and binary forms, with or without
  13  * modification, are permitted provided that the following conditions
  14  * are met:
  15  * 1. Redistributions of source code must retain the above copyright
  16  *    notice, this list of conditions and the following disclaimer.
  17  * 2. Redistributions in binary form must reproduce the above copyright
  18  *    notice, this list of conditions and the following disclaimer in the
  19  *    documentation and/or other materials provided with the distribution.
  20  * 3. All advertising materials mentioning features or use of this software
  21  *    must display the following acknowledgement:
  22  *      This product includes software developed by the University of
  23  *      California, Berkeley and its contributors.
  24  * 4. Neither the name of the University nor the names of its contributors
  25  *    may be used to endorse or promote products derived from this software
  26  *    without specific prior written permission.
  27  *
  28  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  29  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  30  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  31  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  32  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  33  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  34  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  35  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  36  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  37  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  38  * SUCH DAMAGE.
  39  *
  40  * @(#) Copyright (c) 1983, 1990, 1992, 1993 The Regents of the University of California.  All rights reserved.
  41  * @(#)rcp.c    8.2 (Berkeley) 4/2/94
  42  * $FreeBSD: src/bin/rcp/rcp.c,v 1.26.2.5 2002/08/16 20:06:34 ume Exp $
  43  * $DragonFly: src/bin/rcp/rcp.c,v 1.3 2004/03/19 17:17:46 cpressey Exp $
  44  */
  45
  46 #include <sys/param.h>
  47 #include <sys/stat.h>
  48 #include <sys/time.h>
  49 #include <sys/socket.h>
  50 #include <netinet/in.h>
  51 #include <netinet/in_systm.h>
  52 #include <netinet/ip.h>
  53
  54 #include <ctype.h>
  55 #include <dirent.h>
  56 #include <err.h>
  57 #include <errno.h>
  58 #include <fcntl.h>
  59 #include <libutil.h>
  60 #include <limits.h>
  61 #include <netdb.h>
  62 #include <paths.h>
  63 #include <pwd.h>
  64 #include <signal.h>
  65 #include <stdio.h>
  66 #include <stdlib.h>
  67 #include <string.h>
  68 #include <string.h>
  69 #include <unistd.h>
  70
  71 #include "extern.h"
  72
  73 #ifdef KERBEROS
  74 #include <openssl/des.h>
  75 #include <krb.h>
  76 #include "bsd_locl.h"
  77
  78 char    dst_realm_buf[REALM_SZ];
  79 char    *dest_realm = NULL;
  80 int     use_kerberos = 1;
  81 CREDENTIALS     cred;
  82 Key_schedule    schedule;
  83 extern  char    *krb_realmofhost();
  84 #ifdef CRYPT
  85 int     doencrypt = 0;
  86 #define OPTIONS "46dfKk:prtx"
  87 #else
  88 #define OPTIONS "46dfKk:prt"
  89 #endif
  90 #else
  91 #define OPTIONS "46dfprt"
  92 #endif
  93
  94 struct passwd *pwd;
  95 u_short port;
  96 uid_t   userid;
  97 int errs, rem;
  98 int pflag, iamremote, iamrecursive, targetshouldbedirectory;
  99 int family = PF_UNSPEC;
 100
 101 static int argc_copy;
 102 static char **argv_copy;
 103
 104 #define CMDNEEDS        64
 105 char cmd[CMDNEEDS];             /* must hold "rcp -r -p -d\0" */
 106
 107 #ifdef KERBEROS
 108 int      kerberos(char **, char *, char *, char *);
 109 void     oldw(const char *, ...) __printflike(1, 2);
 110 #endif
 111 int      response(void);
 112 void     rsource(char *, struct stat *);
 113 void     run_err(const char *, ...) __printflike(1, 2);
 114 void     sink(int, char *[]);
 115 void     source(int, char *[]);
 116 void     tolocal(int, char *[]);
 117 void     toremote(char *, int, char *[]);
 118 void     usage(void);
 119
 120 int
 121 main(int argc, char *argv[])
 122 {
 123         struct servent *sp;
 124         int ch, fflag, i, tflag;
 125         char *targ, *shell;
 126 #ifdef KERBEROS
 127         char *k;
 128 #endif
 129
 130         /*
 131          * Prepare for execing ourselves.
 132          */
 133         argc_copy = argc + 1;
 134         argv_copy = malloc((argc_copy + 1) * sizeof(*argv_copy));
 135         if (argv_copy == NULL)
 136                 err(1, "malloc");
 137         argv_copy[0] = argv[0];
 138         argv_copy[1] = "-K";
 139         for (i = 1; i < argc; ++i) {
 140                 argv_copy[i + 1] = strdup(argv[i]);
 141                 if (argv_copy[i + 1] == NULL)
 142                         errx(1, "strdup: out of memory");
 143         }
 144         argv_copy[argc + 1] = NULL;
 145
 146         fflag = tflag = 0;
 147         while ((ch = getopt(argc, argv, OPTIONS)) != -1)
 148                 switch(ch) {                    /* User-visible flags. */
 149                 case '4':
 150                         family = PF_INET;
 151                         break;
 152
 153                 case '6':
 154                         family = PF_INET6;
 155                         break;
 156
 157                 case 'K':
 158 #ifdef KERBEROS
 159                         use_kerberos = 0;
 160 #endif
 161                         break;
 162 #ifdef  KERBEROS
 163                 case 'k':
 164                         dest_realm = dst_realm_buf;
 165                         (void)strncpy(dst_realm_buf, optarg, REALM_SZ - 1);
 166                         dst_realm_buf[REALM_SZ - 1] = '\0';
 167                         break;
 168 #ifdef CRYPT
 169                 case 'x':
 170                         doencrypt = 1;
 171                         /* des_set_key(cred.session, schedule); */
 172                         break;
 173 #endif
 174 #endif
 175                 case 'p':
 176                         pflag = 1;
 177                         break;
 178                 case 'r':
 179                         iamrecursive = 1;
 180                         break;
 181                                                 /* Server options. */
 182                 case 'd':
 183                         targetshouldbedirectory = 1;
 184                         break;
 185                 case 'f':                       /* "from" */
 186                         iamremote = 1;
 187                         fflag = 1;
 188                         break;
 189                 case 't':                       /* "to" */
 190                         iamremote = 1;
 191                         tflag = 1;
 192                         break;
 193                 case '?':
 194                 default:
 195                         usage();
 196                 }
 197         argc -= optind;
 198         argv += optind;
 199
 200 #ifdef KERBEROS
 201         k = auth_getval("auth_list");
 202         if (k && !strstr(k, "kerberos"))
 203             use_kerberos = 0;
 204         if (use_kerberos) {
 205 #ifdef CRYPT
 206                 shell = doencrypt ? "ekshell" : "kshell";
 207 #else
 208                 shell = "kshell";
 209 #endif
 210                 if ((sp = getservbyname(shell, "tcp")) == NULL) {
 211                         use_kerberos = 0;
 212                         oldw("can't get entry for %s/tcp service", shell);
 213                         sp = getservbyname(shell = "shell", "tcp");
 214                 }
 215         } else
 216                 sp = getservbyname(shell = "shell", "tcp");
 217 #else
 218         sp = getservbyname(shell = "shell", "tcp");
 219 #endif
 220         if (sp == NULL)
 221                 errx(1, "%s/tcp: unknown service", shell);
 222         port = sp->s_port;
 223
 224         if ((pwd = getpwuid(userid = getuid())) == NULL)
 225                 errx(1, "unknown user %d", (int)userid);
 226
 227         rem = STDIN_FILENO;             /* XXX */
 228
 229         if (fflag) {                    /* Follow "protocol", send data. */
 230                 (void)response();
 231                 (void)setuid(userid);
 232                 source(argc, argv);
 233                 exit(errs);
 234         }
 235
 236         if (tflag) {                    /* Receive data. */
 237                 (void)setuid(userid);
 238                 sink(argc, argv);
 239                 exit(errs);
 240         }
 241
 242         if (argc < 2)
 243                 usage();
 244         if (argc > 2)
 245                 targetshouldbedirectory = 1;
 246
 247         rem = -1;
 248         /* Command to be executed on remote system using "rsh". */
 249 #ifdef  KERBEROS
 250         (void)snprintf(cmd, sizeof(cmd),
 251             "rcp%s%s%s%s", iamrecursive ? " -r" : "",
 252 #ifdef CRYPT
 253             (doencrypt && use_kerberos ? " -x" : ""),
 254 #else
 255             "",
 256 #endif
 257             pflag ? " -p" : "", targetshouldbedirectory ? " -d" : "");
 258 #else
 259         (void)snprintf(cmd, sizeof(cmd), "rcp%s%s%s",
 260             iamrecursive ? " -r" : "", pflag ? " -p" : "",
 261             targetshouldbedirectory ? " -d" : "");
 262 #endif
 263
 264         (void)signal(SIGPIPE, lostconn);
 265
 266         if ((targ = colon(argv[argc - 1])))     /* Dest is remote host. */
 267                 toremote(targ, argc, argv);
 268         else {
 269                 tolocal(argc, argv);            /* Dest is local host. */
 270                 if (targetshouldbedirectory)
 271                         verifydir(argv[argc - 1]);
 272         }
 273         exit(errs);
 274 }
 275
 276 void
 277 toremote(char *targ, int argc, char *argv[])
 278 {
 279         int i, len, tos;
 280         char *bp, *host, *src, *suser, *thost, *tuser;
 281
 282         *targ++ = 0;
 283         if (*targ == 0)
 284                 targ = ".";
 285
 286         if ((thost = strchr(argv[argc - 1], '@'))) {
 287                 /* user@host */
 288                 *thost++ = 0;
 289                 tuser = argv[argc - 1];
 290                 if (*tuser == '\0')
 291                         tuser = NULL;
 292                 else if (!okname(tuser))
 293                         exit(1);
 294         } else {
 295                 thost = argv[argc - 1];
 296                 tuser = NULL;
 297         }
 298
 299         for (i = 0; i < argc - 1; i++) {
 300                 src = colon(argv[i]);
 301                 if (src) {                      /* remote to remote */
 302                         *src++ = 0;
 303                         if (*src == 0)
 304                                 src = ".";
 305                         host = strchr(argv[i], '@');
 306                         len = strlen(_PATH_RSH) + strlen(argv[i]) +
 307                             strlen(src) + (tuser ? strlen(tuser) : 0) +
 308                             strlen(thost) + strlen(targ) + CMDNEEDS + 20;
 309                         if (!(bp = malloc(len)))
 310                                 err(1, "malloc");
 311                         if (host) {
 312                                 *host++ = 0;
 313                                 suser = argv[i];
 314                                 if (*suser == '\0')
 315                                         suser = pwd->pw_name;
 316                                 else if (!okname(suser)) {
 317                                         ++errs;
 318                                         continue;
 319                                 }
 320                                 (void)snprintf(bp, len,
 321                                     "%s %s -l %s -n %s %s '%s%s%s:%s'",
 322                                     _PATH_RSH, host, suser, cmd, src,
 323                                     tuser ? tuser : "", tuser ? "@" : "",
 324                                     thost, targ);
 325                         } else
 326                                 (void)snprintf(bp, len,
 327                                     "exec %s %s -n %s %s '%s%s%s:%s'",
 328                                     _PATH_RSH, argv[i], cmd, src,
 329                                     tuser ? tuser : "", tuser ? "@" : "",
 330                                     thost, targ);
 331                         (void)susystem(bp, userid);
 332                         (void)free(bp);
 333                 } else {                        /* local to remote */
 334                         if (rem == -1) {
 335                                 len = strlen(targ) + CMDNEEDS + 20;
 336                                 if (!(bp = malloc(len)))
 337                                         err(1, "malloc");
 338                                 (void)snprintf(bp, len, "%s -t %s", cmd, targ);
 339                                 host = thost;
 340 #ifdef KERBEROS
 341                                 if (use_kerberos)
 342                                         rem = kerberos(&host, bp,
 343                                             pwd->pw_name,
 344                                             tuser ? tuser : pwd->pw_name);
 345                                 else
 346 #endif
 347                                         rem = rcmd_af(&host, port,
 348                                             pwd->pw_name,
 349                                             tuser ? tuser : pwd->pw_name,
 350                                             bp, 0, family);
 351                                 if (rem < 0)
 352                                         exit(1);
 353                                 if (family == PF_INET) {
 354                                         tos = IPTOS_THROUGHPUT;
 355                                         if (setsockopt(rem, IPPROTO_IP, IP_TOS,
 356                                             &tos, sizeof(int)) < 0)
 357                                                 warn("TOS (ignored)");
 358                                 }
 359                                 if (response() < 0)
 360                                         exit(1);
 361                                 (void)free(bp);
 362                                 (void)setuid(userid);
 363                         }
 364                         source(1, argv+i);
 365                 }
 366         }
 367 }
 368
 369 void
 370 tolocal(int argc, char *argv[])
 371 {
 372         int i, len, tos;
 373         char *bp, *host, *src, *suser;
 374
 375         for (i = 0; i < argc - 1; i++) {
 376                 if (!(src = colon(argv[i]))) {          /* Local to local. */
 377                         len = strlen(_PATH_CP) + strlen(argv[i]) +
 378                             strlen(argv[argc - 1]) + 20;
 379                         if (!(bp = malloc(len)))
 380                                 err(1, "malloc");
 381                         (void)snprintf(bp, len, "exec %s%s%s %s %s", _PATH_CP,
 382                             iamrecursive ? " -PR" : "", pflag ? " -p" : "",
 383                             argv[i], argv[argc - 1]);
 384                         if (susystem(bp, userid))
 385                                 ++errs;
 386                         (void)free(bp);
 387                         continue;
 388                 }
 389                 *src++ = 0;
 390                 if (*src == 0)
 391                         src = ".";
 392                 if ((host = strchr(argv[i], '@')) == NULL) {
 393                         host = argv[i];
 394                         suser = pwd->pw_name;
 395                 } else {
 396                         *host++ = 0;
 397                         suser = argv[i];
 398                         if (*suser == '\0')
 399                                 suser = pwd->pw_name;
 400                         else if (!okname(suser)) {
 401                                 ++errs;
 402                                 continue;
 403                         }
 404                 }
 405                 len = strlen(src) + CMDNEEDS + 20;
 406                 if ((bp = malloc(len)) == NULL)
 407                         err(1, "malloc");
 408                 (void)snprintf(bp, len, "%s -f %s", cmd, src);
 409                 rem =
 410 #ifdef KERBEROS
 411                     use_kerberos ?
 412                         kerberos(&host, bp, pwd->pw_name, suser) :
 413 #endif
 414                         rcmd_af(&host, port, pwd->pw_name, suser, bp, 0,
 415                             family);
 416                 (void)free(bp);
 417                 if (rem < 0) {
 418                         ++errs;
 419                         continue;
 420                 }
 421                 (void)seteuid(userid);
 422                 if (family == PF_INET) {
 423                         tos = IPTOS_THROUGHPUT;
 424                         if (setsockopt(rem, IPPROTO_IP, IP_TOS, &tos,
 425                             sizeof(int)) < 0)
 426                                 warn("TOS (ignored)");
 427                 }
 428                 sink(1, argv + argc - 1);
 429                 (void)seteuid(0);
 430                 (void)close(rem);
 431                 rem = -1;
 432         }
 433 }
 434
 435 void
 436 source(int argc, char *argv[])
 437 {
 438         struct stat stb;
 439         static BUF buffer;
 440         BUF *bp;
 441         off_t i;
 442         int amt, fd, haderr, indx, result;
 443         char *last, *name, buf[BUFSIZ];
 444
 445         for (indx = 0; indx < argc; ++indx) {
 446                 name = argv[indx];
 447                 if ((fd = open(name, O_RDONLY, 0)) < 0)
 448                         goto syserr;
 449                 if (fstat(fd, &stb)) {
 450 syserr:                 run_err("%s: %s", name, strerror(errno));
 451                         goto next;
 452                 }
 453                 switch (stb.st_mode & S_IFMT) {
 454                 case S_IFREG:
 455                         break;
 456                 case S_IFDIR:
 457                         if (iamrecursive) {
 458                                 rsource(name, &stb);
 459                                 goto next;
 460                         }
 461                         /* FALLTHROUGH */
 462                 default:
 463                         run_err("%s: not a regular file", name);
 464                         goto next;
 465                 }
 466                 if ((last = strrchr(name, '/')) == NULL)
 467                         last = name;
 468                 else
 469                         ++last;
 470                 if (pflag) {
 471                         /*
 472                          * Make it compatible with possible future
 473                          * versions expecting microseconds.
 474                          */
 475                         (void)snprintf(buf, sizeof(buf), "T%ld 0 %ld 0\n",
 476                             (long)stb.st_mtimespec.tv_sec,
 477                             (long)stb.st_atimespec.tv_sec);
 478                         (void)write(rem, buf, strlen(buf));
 479                         if (response() < 0)
 480                                 goto next;
 481                 }
 482 #define MODEMASK        (S_ISUID|S_ISGID|S_ISTXT|S_IRWXU|S_IRWXG|S_IRWXO)
 483                 (void)snprintf(buf, sizeof(buf), "C%04o %qd %s\n",
 484                     stb.st_mode & MODEMASK, stb.st_size, last);
 485                 (void)write(rem, buf, strlen(buf));
 486                 if (response() < 0)
 487                         goto next;
 488                 if ((bp = allocbuf(&buffer, fd, BUFSIZ)) == NULL) {
 489 next:                   (void)close(fd);
 490                         continue;
 491                 }
 492
 493                 /* Keep writing after an error so that we stay sync'd up. */
 494                 for (haderr = i = 0; i < stb.st_size; i += bp->cnt) {
 495                         amt = bp->cnt;
 496                         if (i + amt > stb.st_size)
 497                                 amt = stb.st_size - i;
 498                         if (!haderr) {
 499                                 result = read(fd, bp->buf, amt);
 500                                 if (result != amt)
 501                                         haderr = result >= 0 ? EIO : errno;
 502                         }
 503                         if (haderr)
 504                                 (void)write(rem, bp->buf, amt);
 505                         else {
 506                                 result = write(rem, bp->buf, amt);
 507                                 if (result != amt)
 508                                         haderr = result >= 0 ? EIO : errno;
 509                         }
 510                 }
 511                 if (close(fd) && !haderr)
 512                         haderr = errno;
 513                 if (!haderr)
 514                         (void)write(rem, "", 1);
 515                 else
 516                         run_err("%s: %s", name, strerror(haderr));
 517                 (void)response();
 518         }
 519 }
 520
 521 void
 522 rsource(char *name, struct stat *statp)
 523 {
 524         DIR *dirp;
 525         struct dirent *dp;
 526         char *last, *vect[1], path[PATH_MAX];
 527
 528         if (!(dirp = opendir(name))) {
 529                 run_err("%s: %s", name, strerror(errno));
 530                 return;
 531         }
 532         last = strrchr(name, '/');
 533         if (last == 0)
 534                 last = name;
 535         else
 536                 last++;
 537         if (pflag) {
 538                 (void)snprintf(path, sizeof(path), "T%ld 0 %ld 0\n",
 539                     (long)statp->st_mtimespec.tv_sec,
 540                     (long)statp->st_atimespec.tv_sec);
 541                 (void)write(rem, path, strlen(path));
 542                 if (response() < 0) {
 543                         closedir(dirp);
 544                         return;
 545                 }
 546         }
 547         (void)snprintf(path, sizeof(path),
 548             "D%04o %d %s\n", statp->st_mode & MODEMASK, 0, last);
 549         (void)write(rem, path, strlen(path));
 550         if (response() < 0) {
 551                 closedir(dirp);
 552                 return;
 553         }
 554         while ((dp = readdir(dirp))) {
 555                 if (dp->d_ino == 0)
 556                         continue;
 557                 if (!strcmp(dp->d_name, ".") || !strcmp(dp->d_name, ".."))
 558                         continue;
 559                 if (strlen(name) + 1 + strlen(dp->d_name) >= sizeof(path)) {
 560                         run_err("%s/%s: name too long", name, dp->d_name);
 561                         continue;
 562                 }
 563                 (void)snprintf(path, sizeof(path), "%s/%s", name, dp->d_name);
 564                 vect[0] = path;
 565                 source(1, vect);
 566         }
 567         (void)closedir(dirp);
 568         (void)write(rem, "E\n", 2);
 569         (void)response();
 570 }
 571
 572 void
 573 sink(int argc, char *argv[])
 574 {
 575         static BUF buffer;
 576         struct stat stb;
 577         struct timeval tv[2];
 578         enum { YES, NO, DISPLAYED } wrerr;
 579         BUF *bp;
 580         off_t i, j, size;
 581         size_t amt, count;
 582         int exists, first, mask, mode, ofd, omode;
 583         int setimes, targisdir, wrerrno = 0;
 584         char ch, *cp, *np, *targ, *why, *vect[1], buf[BUFSIZ];
 585
 586 #define atime   tv[0]
 587 #define mtime   tv[1]
 588 #define SCREWUP(str)    { why = str; goto screwup; }
 589
 590         setimes = targisdir = 0;
 591         mask = umask(0);
 592         if (!pflag)
 593                 (void)umask(mask);
 594         if (argc != 1) {
 595                 run_err("ambiguous target");
 596                 exit(1);
 597         }
 598         targ = *argv;
 599         if (targetshouldbedirectory)
 600                 verifydir(targ);
 601         (void)write(rem, "", 1);
 602         if (stat(targ, &stb) == 0 && S_ISDIR(stb.st_mode))
 603                 targisdir = 1;
 604         for (first = 1;; first = 0) {
 605                 cp = buf;
 606                 if (read(rem, cp, 1) <= 0)
 607                         return;
 608                 if (*cp++ == '\n')
 609                         SCREWUP("unexpected <newline>");
 610                 do {
 611                         if (read(rem, &ch, sizeof(ch)) != sizeof(ch))
 612                                 SCREWUP("lost connection");
 613                         *cp++ = ch;
 614                 } while (cp < &buf[BUFSIZ - 1] && ch != '\n');
 615                 *cp = 0;
 616
 617                 if (buf[0] == '\01' || buf[0] == '\02') {
 618                         if (iamremote == 0)
 619                                 (void)write(STDERR_FILENO,
 620                                     buf + 1, strlen(buf + 1));
 621                         if (buf[0] == '\02')
 622                                 exit(1);
 623                         ++errs;
 624                         continue;
 625                 }
 626                 if (buf[0] == 'E') {
 627                         (void)write(rem, "", 1);
 628                         return;
 629                 }
 630
 631                 if (ch == '\n')
 632                         *--cp = 0;
 633
 634                 cp = buf;
 635                 if (*cp == 'T') {
 636                         setimes++;
 637                         cp++;
 638                         mtime.tv_sec = strtol(cp, &cp, 10);
 639                         if (!cp || *cp++ != ' ')
 640                                 SCREWUP("mtime.sec not delimited");
 641                         mtime.tv_usec = strtol(cp, &cp, 10);
 642                         if (!cp || *cp++ != ' ')
 643                                 SCREWUP("mtime.usec not delimited");
 644                         atime.tv_sec = strtol(cp, &cp, 10);
 645                         if (!cp || *cp++ != ' ')
 646                                 SCREWUP("atime.sec not delimited");
 647                         atime.tv_usec = strtol(cp, &cp, 10);
 648                         if (!cp || *cp++ != '\0')
 649                                 SCREWUP("atime.usec not delimited");
 650                         (void)write(rem, "", 1);
 651                         continue;
 652                 }
 653                 if (*cp != 'C' && *cp != 'D') {
 654                         /*
 655                          * Check for the case "rcp remote:foo\* local:bar".
 656                          * In this case, the line "No match." can be returned
 657                          * by the shell before the rcp command on the remote is
 658                          * executed so the ^Aerror_message convention isn't
 659                          * followed.
 660                          */
 661                         if (first) {
 662                                 run_err("%s", cp);
 663                                 exit(1);
 664                         }
 665                         SCREWUP("expected control record");
 666                 }
 667                 mode = 0;
 668                 for (++cp; cp < buf + 5; cp++) {
 669                         if (*cp < '0' || *cp > '7')
 670                                 SCREWUP("bad mode");
 671                         mode = (mode << 3) | (*cp - '0');
 672                 }
 673                 if (*cp++ != ' ')
 674                         SCREWUP("mode not delimited");
 675
 676                 for (size = 0; isdigit(*cp);)
 677                         size = size * 10 + (*cp++ - '0');
 678                 if (*cp++ != ' ')
 679                         SCREWUP("size not delimited");
 680                 if (targisdir) {
 681                         static char *namebuf = NULL;
 682                         static size_t cursize;
 683                         size_t need;
 684
 685                         need = strlen(targ) + strlen(cp) + 250;
 686                         if (need > cursize) {
 687                                 if (namebuf != NULL)
 688                                         free(namebuf);
 689                                 if (!(namebuf = malloc(need)))
 690                                         run_err("%s", strerror(errno));
 691                                 cursize = need;
 692                         }
 693                         (void)snprintf(namebuf, need, "%s%s%s", targ,
 694                             *targ ? "/" : "", cp);
 695                         np = namebuf;
 696                 } else
 697                         np = targ;
 698                 exists = stat(np, &stb) == 0;
 699                 if (buf[0] == 'D') {
 700                         int mod_flag = pflag;
 701                         if (exists) {
 702                                 if (!S_ISDIR(stb.st_mode)) {
 703                                         errno = ENOTDIR;
 704                                         goto bad;
 705                                 }
 706                                 if (pflag)
 707                                         (void)chmod(np, mode);
 708                         } else {
 709                                 /* Handle copying from a read-only directory */
 710                                 mod_flag = 1;
 711                                 if (mkdir(np, mode | S_IRWXU) < 0)
 712                                         goto bad;
 713                         }
 714                         vect[0] = np;
 715                         sink(1, vect);
 716                         if (setimes) {
 717                                 setimes = 0;
 718                                 if (utimes(np, tv) < 0)
 719                                     run_err("%s: set times: %s",
 720                                         np, strerror(errno));
 721                         }
 722                         if (mod_flag)
 723                                 (void)chmod(np, mode);
 724                         continue;
 725                 }
 726                 omode = mode;
 727                 mode |= S_IWRITE;
 728                 if ((ofd = open(np, O_WRONLY|O_CREAT, mode)) < 0) {
 729 bad:                    run_err("%s: %s", np, strerror(errno));
 730                         continue;
 731                 }
 732                 (void)write(rem, "", 1);
 733                 if ((bp = allocbuf(&buffer, ofd, BUFSIZ)) == NULL) {
 734                         (void)close(ofd);
 735                         continue;
 736                 }
 737                 cp = bp->buf;
 738                 wrerr = NO;
 739                 for (count = i = 0; i < size; i += BUFSIZ) {
 740                         amt = BUFSIZ;
 741                         if (i + amt > size)
 742                                 amt = size - i;
 743                         count += amt;
 744                         do {
 745                                 j = read(rem, cp, amt);
 746                                 if (j <= 0) {
 747                                         run_err("%s", j ? strerror(errno) :
 748                                             "dropped connection");
 749                                         exit(1);
 750                                 }
 751                                 amt -= j;
 752                                 cp += j;
 753                         } while (amt > 0);
 754                         if (count == bp->cnt) {
 755                                 /* Keep reading so we stay sync'd up. */
 756                                 if (wrerr == NO) {
 757                                         j = write(ofd, bp->buf, count);
 758                                         if (j != count) {
 759                                                 wrerr = YES;
 760                                                 wrerrno = j >= 0 ? EIO : errno;
 761                                         }
 762                                 }
 763                                 count = 0;
 764                                 cp = bp->buf;
 765                         }
 766                 }
 767                 if (count != 0 && wrerr == NO &&
 768                     (j = write(ofd, bp->buf, count)) != count) {
 769                         wrerr = YES;
 770                         wrerrno = j >= 0 ? EIO : errno;
 771                 }
 772                 if (ftruncate(ofd, size)) {
 773                         run_err("%s: truncate: %s", np, strerror(errno));
 774                         wrerr = DISPLAYED;
 775                 }
 776                 if (pflag) {
 777                         if (exists || omode != mode)
 778                                 if (fchmod(ofd, omode))
 779                                         run_err("%s: set mode: %s",
 780                                             np, strerror(errno));
 781                 } else {
 782                         if (!exists && omode != mode)
 783                                 if (fchmod(ofd, omode & ~mask))
 784                                         run_err("%s: set mode: %s",
 785                                             np, strerror(errno));
 786                 }
 787                 (void)close(ofd);
 788                 (void)response();
 789                 if (setimes && wrerr == NO) {
 790                         setimes = 0;
 791                         if (utimes(np, tv) < 0) {
 792                                 run_err("%s: set times: %s",
 793                                     np, strerror(errno));
 794                                 wrerr = DISPLAYED;
 795                         }
 796                 }
 797                 switch(wrerr) {
 798                 case YES:
 799                         run_err("%s: %s", np, strerror(wrerrno));
 800                         break;
 801                 case NO:
 802                         (void)write(rem, "", 1);
 803                         break;
 804                 case DISPLAYED:
 805                         break;
 806                 }
 807         }
 808 screwup:
 809         run_err("protocol error: %s", why);
 810         exit(1);
 811 }
 812
 813 #ifdef KERBEROS
 814 int
 815 kerberos(char **host, char *bp, char *locuser, char *user)
 816 {
 817         if (use_kerberos) {
 818                 setuid(getuid());
 819                 rem = KSUCCESS;
 820                 errno = 0;
 821                 if (dest_realm == NULL)
 822                         dest_realm = krb_realmofhost(*host);
 823                 rem =
 824 #ifdef CRYPT
 825                     doencrypt ?
 826                         krcmd_mutual(host,
 827                             port, user, bp, 0, dest_realm, &cred, schedule) :
 828 #endif
 829                         krcmd(host, port, user, bp, 0, dest_realm);
 830
 831                 if (rem < 0) {
 832                         if (errno == ECONNREFUSED)
 833                             oldw("remote host doesn't support Kerberos");
 834                         else if (errno == ENOENT)
 835                             oldw("can't provide Kerberos authentication data");
 836                         execv(_PATH_RCP, argv_copy);
 837                         err(1, "execv: %s", _PATH_RCP);
 838                 }
 839         } else {
 840 #ifdef CRYPT
 841                 if (doencrypt)
 842                         errx(1,
 843                            "the -x option requires Kerberos authentication");
 844 #endif
 845                 rem = rcmd_af(host, port, locuser, user, bp, 0, family);
 846         }
 847         return (rem);
 848 }
 849 #endif /* KERBEROS */
 850
 851 int
 852 response(void)
 853 {
 854         char ch, *cp, resp, rbuf[BUFSIZ];
 855
 856         if (read(rem, &resp, sizeof(resp)) != sizeof(resp))
 857                 lostconn(0);
 858
 859         cp = rbuf;
 860         switch(resp) {
 861         case 0:                         /* ok */
 862                 return (0);
 863         default:
 864                 *cp++ = resp;
 865                 /* FALLTHROUGH */
 866         case 1:                         /* error, followed by error msg */
 867         case 2:                         /* fatal error, "" */
 868                 do {
 869                         if (read(rem, &ch, sizeof(ch)) != sizeof(ch))
 870                                 lostconn(0);
 871                         *cp++ = ch;
 872                 } while (cp < &rbuf[BUFSIZ] && ch != '\n');
 873
 874                 if (!iamremote)
 875                         (void)write(STDERR_FILENO, rbuf, cp - rbuf);
 876                 ++errs;
 877                 if (resp == 1)
 878                         return (-1);
 879                 exit(1);
 880         }
 881         /* NOTREACHED */
 882 }
 883
 884 void
 885 usage(void)
 886 {
 887 #ifdef KERBEROS
 888 #ifdef CRYPT
 889         (void)fprintf(stderr, "%s\n%s\n",
 890             "usage: rcp [-46Kpx] [-k realm] f1 f2",
 891             "       rcp [-46Kprx] [-k realm] f1 ... fn directory");
 892 #else
 893         (void)fprintf(stderr, "%s\n%s\n",
 894             "usage: rcp [-46Kp] [-k realm] f1 f2",
 895             "       rcp [-46Kpr] [-k realm] f1 ... fn directory");
 896 #endif
 897 #else
 898         (void)fprintf(stderr, "%s\n%s\n",
 899             "usage: rcp [-46p] f1 f2",
 900             "       rcp [-46pr] f1 ... fn directory");
 901 #endif
 902         exit(1);
 903 }
 904
 905 #include <stdarg.h>
 906
 907 #ifdef KERBEROS
 908 void
 909 oldw(const char *fmt, ...)
 910 {
 911         va_list ap;
 912         va_start(ap, fmt);
 913         (void)fprintf(stderr, "rcp: ");
 914         (void)vfprintf(stderr, fmt, ap);
 915         (void)fprintf(stderr, ", using standard rcp\n");
 916         va_end(ap);
 917 }
 918 #endif
 919
 920 void
 921 run_err(const char *fmt, ...)
 922 {
 923         static FILE *fp;
 924         va_list ap;
 925         va_start(ap, fmt);
 926
 927         ++errs;
 928         if (fp == NULL && !(fp = fdopen(rem, "w")))
 929                 return;
 930         (void)fprintf(fp, "%c", 0x01);
 931         (void)fprintf(fp, "rcp: ");
 932         (void)vfprintf(fp, fmt, ap);
 933         (void)fprintf(fp, "\n");
 934         (void)fflush(fp);
 935
 936         if (!iamremote)
 937                 vwarnx(fmt, ap);
 938
 939         va_end(ap);
 940 }