Annotation of embedaddon/sudo/plugins/sudoers/match_addr.c, revision 1.1.1.1
1.1 misho 1: /*
2: * Copyright (c) 1996, 1998-2005, 2007-2011
3: * Todd C. Miller <Todd.Miller@courtesan.com>
4: *
5: * Permission to use, copy, modify, and distribute this software for any
6: * purpose with or without fee is hereby granted, provided that the above
7: * copyright notice and this permission notice appear in all copies.
8: *
9: * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10: * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11: * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12: * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13: * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14: * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15: * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16: * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
17: * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
18: *
19: * Sponsored in part by the Defense Advanced Research Projects
20: * Agency (DARPA) and Air Force Research Laboratory, Air Force
21: * Materiel Command, USAF, under agreement number F39502-99-1-0512.
22: */
23:
24: #include <config.h>
25:
26: #include <sys/types.h>
27: #include <sys/socket.h>
28: #include <stdio.h>
29: #ifdef STDC_HEADERS
30: # include <stdlib.h>
31: # include <stddef.h>
32: #else
33: # ifdef HAVE_STDLIB_H
34: # include <stdlib.h>
35: # endif
36: #endif /* STDC_HEADERS */
37: #ifdef HAVE_STRING_H
38: # include <string.h>
39: #endif /* HAVE_STRING_H */
40: #ifdef HAVE_STRINGS_H
41: # include <strings.h>
42: #endif /* HAVE_STRINGS_H */
43: #ifdef HAVE_UNISTD_H
44: # include <unistd.h>
45: #endif /* HAVE_UNISTD_H */
46: #include <netinet/in.h>
47: #include <arpa/inet.h>
48: #include <netdb.h>
49:
50: #include "sudoers.h"
51: #include "interfaces.h"
52:
53: static int
54: addr_matches_if(char *n)
55: {
56: union sudo_in_addr_un addr;
57: struct interface *ifp;
58: #ifdef HAVE_IN6_ADDR
59: int j;
60: #endif
61: int family;
62:
63: #ifdef HAVE_IN6_ADDR
64: if (inet_pton(AF_INET6, n, &addr.ip6) > 0) {
65: family = AF_INET6;
66: } else
67: #endif
68: {
69: family = AF_INET;
70: addr.ip4.s_addr = inet_addr(n);
71: }
72:
73: for (ifp = interfaces; ifp != NULL; ifp = ifp->next) {
74: if (ifp->family != family)
75: continue;
76: switch(family) {
77: case AF_INET:
78: if (ifp->addr.ip4.s_addr == addr.ip4.s_addr ||
79: (ifp->addr.ip4.s_addr & ifp->netmask.ip4.s_addr)
80: == addr.ip4.s_addr)
81: return TRUE;
82: break;
83: #ifdef HAVE_IN6_ADDR
84: case AF_INET6:
85: if (memcmp(ifp->addr.ip6.s6_addr, addr.ip6.s6_addr,
86: sizeof(addr.ip6.s6_addr)) == 0)
87: return TRUE;
88: for (j = 0; j < sizeof(addr.ip6.s6_addr); j++) {
89: if ((ifp->addr.ip6.s6_addr[j] & ifp->netmask.ip6.s6_addr[j]) != addr.ip6.s6_addr[j])
90: break;
91: }
92: if (j == sizeof(addr.ip6.s6_addr))
93: return TRUE;
94: #endif
95: }
96: }
97:
98: return FALSE;
99: }
100:
101: static int
102: addr_matches_if_netmask(char *n, char *m)
103: {
104: int i;
105: union sudo_in_addr_un addr, mask;
106: struct interface *ifp;
107: #ifdef HAVE_IN6_ADDR
108: int j;
109: #endif
110: int family;
111:
112: #ifdef HAVE_IN6_ADDR
113: if (inet_pton(AF_INET6, n, &addr.ip6) > 0)
114: family = AF_INET6;
115: else
116: #endif
117: {
118: family = AF_INET;
119: addr.ip4.s_addr = inet_addr(n);
120: }
121:
122: if (family == AF_INET) {
123: if (strchr(m, '.')) {
124: mask.ip4.s_addr = inet_addr(m);
125: } else {
126: i = atoi(m);
127: if (i == 0)
128: mask.ip4.s_addr = 0;
129: else if (i == 32)
130: mask.ip4.s_addr = 0xffffffff;
131: else
132: mask.ip4.s_addr = 0xffffffff - (1 << (32 - i)) + 1;
133: mask.ip4.s_addr = htonl(mask.ip4.s_addr);
134: }
135: addr.ip4.s_addr &= mask.ip4.s_addr;
136: }
137: #ifdef HAVE_IN6_ADDR
138: else {
139: if (inet_pton(AF_INET6, m, &mask.ip6) <= 0) {
140: j = atoi(m);
141: for (i = 0; i < sizeof(addr.ip6.s6_addr); i++) {
142: if (j < i * 8)
143: mask.ip6.s6_addr[i] = 0;
144: else if (i * 8 + 8 <= j)
145: mask.ip6.s6_addr[i] = 0xff;
146: else
147: mask.ip6.s6_addr[i] = 0xff00 >> (j - i * 8);
148: addr.ip6.s6_addr[i] &= mask.ip6.s6_addr[i];
149: }
150: }
151: }
152: #endif /* HAVE_IN6_ADDR */
153:
154: for (ifp = interfaces; ifp != NULL; ifp = ifp->next) {
155: if (ifp->family != family)
156: continue;
157: switch(family) {
158: case AF_INET:
159: if ((ifp->addr.ip4.s_addr & mask.ip4.s_addr) == addr.ip4.s_addr)
160: return TRUE;
161: #ifdef HAVE_IN6_ADDR
162: case AF_INET6:
163: for (j = 0; j < sizeof(addr.ip6.s6_addr); j++) {
164: if ((ifp->addr.ip6.s6_addr[j] & mask.ip6.s6_addr[j]) != addr.ip6.s6_addr[j])
165: break;
166: }
167: if (j == sizeof(addr.ip6.s6_addr))
168: return TRUE;
169: #endif /* HAVE_IN6_ADDR */
170: }
171: }
172:
173: return FALSE;
174: }
175:
176: /*
177: * Returns TRUE if "n" is one of our ip addresses or if
178: * "n" is a network that we are on, else returns FALSE.
179: */
180: int
181: addr_matches(char *n)
182: {
183: char *m;
184: int retval;
185:
186: /* If there's an explicit netmask, use it. */
187: if ((m = strchr(n, '/'))) {
188: *m++ = '\0';
189: retval = addr_matches_if_netmask(n, m);
190: *(m - 1) = '/';
191: } else
192: retval = addr_matches_if(n);
193:
194: return retval;
195: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to match_addr.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo / plugins / sudoers