git.marmaro.de Git - mmh/blob - uip/slocal.c

   1 /*
   2 ** slocal.c -- asynchronously filter and deliver new mail
   3 **
   4 ** This code is Copyright (c) 2002, by the authors of nmh.  See the
   5 ** COPYRIGHT file in the root directory of the nmh distribution for
   6 ** complete copyright information.
   7 */
   8
   9 /*
  10 **  Under sendmail, users should add the line
  11 **
  12 **      "| /usr/local/mmh/bin/slocal"
  13 **
  14 **  to their $HOME/.forward file.
  15 **
  16 */
  17
  18 #include <h/mh.h>
  19 #include <h/rcvmail.h>
  20 #include <h/signals.h>
  21 #include <h/tws.h>
  22 #include <h/utils.h>
  23 #include <pwd.h>
  24 #include <signal.h>
  25 #include <sys/ioctl.h>
  26 #include <fcntl.h>
  27 #include <unistd.h>
  28 #include <stdarg.h>
  29 #include <sys/stat.h>
  30 #include <locale.h>
  31 #include <sysexits.h>
  32
  33 #ifdef INITGROUPS_HEADER
  34 #include INITGROUPS_HEADER
  35 #else
  36 /*
  37 ** On AIX 4.1, initgroups() is defined and even documented (giving the
  38 ** parameter types as char* and int), but doesn't have a prototype in any
  39 ** of the system header files.  AIX 4.3, SunOS 4.1.3, and ULTRIX 4.2A have
  40 ** the same problem.
  41 */
  42 extern int  initgroups(char*, int);
  43 #endif
  44
  45 static struct swit switches[] = {
  46 #define ADDRSW  0
  47         { "addr address", 0 },
  48 #define USERSW  1
  49         { "user name", 0 },
  50 #define FILESW  2
  51         { "file file", 0 },
  52 #define SENDERSW  3
  53         { "sender address", 0 },
  54 #define MAILBOXSW  4
  55         { "mailbox file", 0 },
  56 #define HOMESW  5
  57         { "home directory", -4 },
  58 #define INFOSW  6
  59         { "info data", 0 },
  60 #define MAILSW  7
  61         { "maildelivery file", 0 },
  62 #define VERBSW  8
  63         { "verbose", 0 },
  64 #define NVERBSW  9
  65         { "noverbose", 2 },
  66 #define DEBUGSW  10
  67         { "debug", 0 },
  68 #define VERSIONSW  11
  69         { "Version", 0 },
  70 #define HELPSW  12
  71         { "help", 0 },
  72         { NULL, 0 }
  73 };
  74
  75
  76 static int globbed = 0;  /* have we built "vars" table yet? */
  77 static int parsed = 0;  /* have we built header field table yet */
  78
  79 static int verbose = 0;
  80 static int debug = 0;
  81
  82 static char *addr = NULL;
  83 static char *user = NULL;
  84 static char *info = NULL;
  85 static char *file = NULL;
  86 static char *sender = NULL;
  87 static char *envelope = NULL;  /* envelope information ("From " line)  */
  88 static char *mbox = NULL;
  89 static char *home = NULL;
  90
  91 static struct passwd *pw;  /* passwd file entry */
  92
  93 static char ddate[BUFSIZ];  /* record the delivery date */
  94 struct tws *now;
  95
  96 volatile sig_atomic_t eflag = 0; /* flag to indecate interrupt */
  97 static volatile pid_t child_id;
  98
  99 /* flags for pair->p_flags */
 100 #define P_NIL  0x00
 101 #define P_ADR  0x01  /* field is address */
 102 #define P_HID  0x02  /* special (fake) field */
 103 #define P_CHK  0x04
 104
 105 struct pair {
 106         char *p_name;
 107         char *p_value;
 108         char  p_flags;
 109 };
 110
 111 #define NVEC 100
 112
 113 /*
 114 ** Lookup table for matching fields and patterns
 115 ** in messages.  The rest of the table is added
 116 ** when the message is parsed.
 117 */
 118 static struct pair hdrs[NVEC + 1] = {
 119         { "source",  NULL, P_HID },
 120         { "addr",  NULL, P_HID },
 121         { "Return-Path",  NULL, P_ADR },
 122         { "Reply-To",  NULL, P_ADR },
 123         { "From",  NULL, P_ADR },
 124         { "Sender",  NULL, P_ADR },
 125         { "To",  NULL, P_ADR },
 126         { "cc",  NULL, P_ADR },
 127         { "Resent-Reply-To", NULL, P_ADR },
 128         { "Resent-From",  NULL, P_ADR },
 129         { "Resent-Sender",   NULL, P_ADR },
 130         { "Resent-To",  NULL, P_ADR },
 131         { "Resent-Cc",  NULL, P_ADR },
 132         { NULL, NULL, 0 }
 133 };
 134
 135 /*
 136 ** The list of builtin variables to expand in a string
 137 ** before it is executed by the "pipe" or "qpipe" action.
 138 */
 139 static struct pair vars[] = {
 140         { "sender",   NULL, P_NIL },
 141         { "address",  NULL, P_NIL },
 142         { "size",  NULL, P_NIL },
 143         { "reply-to", NULL, P_CHK },
 144         { "info",  NULL, P_NIL },
 145         { NULL, NULL, 0 }
 146 };
 147
 148 extern char **environ;
 149
 150 /*
 151 ** static prototypes
 152 */
 153 static int localmail(int, char *);
 154 static int usr_delivery(int, char *, int);
 155 static int split(char *, char **);
 156 static int parse(int);
 157 static void expand(char *, char *, int);
 158 static void glob(int);
 159 static struct pair *lookup(struct pair *, char *);
 160 static int usr_file(int, char *);
 161 static int usr_pipe(int, char *, char *, char **, int);
 162 static int usr_folder(int, char *);
 163 static void alrmser(int);
 164 static void get_sender(char *, char **);
 165 static int copy_message(int, char *, int);
 166 static void verbose_printf(char *fmt, ...);
 167 static void adorn(char *, char *, ...);
 168 static void debug_printf(char *fmt, ...);
 169 static char *trimstr(char *);
 170
 171
 172 int
 173 main(int argc, char **argv)
 174 {
 175         int fd, status;
 176         FILE *fp = stdin;
 177         char *cp, *mdlvr = NULL, buf[BUFSIZ];
 178         char mailbox[BUFSIZ], tmpfil[BUFSIZ];
 179         char **argp, **arguments;
 180
 181         setlocale(LC_ALL, "");
 182         invo_name = mhbasename(*argv);
 183
 184         arguments = getarguments(invo_name, argc, argv, 0);
 185         argp = arguments;
 186
 187         /* Parse arguments */
 188         while ((cp = *argp++)) {
 189                 if (*cp == '-') {
 190                         switch (smatch(++cp, switches)) {
 191                         case AMBIGSW:
 192                                 ambigsw(cp, switches);
 193                                 exit(EX_USAGE);
 194                         case UNKWNSW:
 195                                 adios(EX_USAGE, NULL, "-%s unknown", cp);
 196
 197                         case HELPSW:
 198                                 snprintf(buf, sizeof(buf), "%s [switches] [address info sender]", invo_name);
 199                                 print_help(buf, switches, 0);
 200                                 exit(argc == 2 ? EX_OK : EX_USAGE);
 201                         case VERSIONSW:
 202                                 print_version(invo_name);
 203                                 exit(argc == 2 ? EX_OK : EX_USAGE);
 204
 205                         case ADDRSW:
 206                                 if (!(addr = *argp++)) {
 207                                         /* allow -xyz arguments */
 208                                         adios(EX_USAGE, NULL, "missing argument to %s",
 209                                                         argp[-2]);
 210                                 }
 211                                 continue;
 212                         case INFOSW:
 213                                 if (!(info = *argp++)) {
 214                                         /* allow -xyz arguments */
 215                                         adios(EX_USAGE, NULL, "missing argument to %s",
 216                                                         argp[-2]);
 217                                 }
 218                                 continue;
 219                         case USERSW:
 220                                 if (!(user = *argp++)) {
 221                                         /* allow -xyz arguments */
 222                                         adios(EX_USAGE, NULL, "missing argument to %s",
 223                                                         argp[-2]);
 224                                 }
 225                                 continue;
 226                         case FILESW:
 227                                 if (!(file = *argp++) || *file == '-') {
 228                                         adios(EX_USAGE, NULL, "missing argument to %s",
 229                                                         argp[-2]);
 230                                 }
 231                                 continue;
 232                         case SENDERSW:
 233                                 if (!(sender = *argp++)) {
 234                                         /* allow -xyz arguments */
 235                                         adios(EX_USAGE, NULL, "missing argument to %s",
 236                                                         argp[-2]);
 237                                 }
 238                                 continue;
 239                         case MAILBOXSW:
 240                                 if (!(mbox = *argp++) || *mbox == '-') {
 241                                         adios(EX_USAGE, NULL, "missing argument to %s",
 242                                                         argp[-2]);
 243                                 }
 244                                 continue;
 245                         case HOMESW:
 246                                 if (!(home = *argp++) || *home == '-') {
 247                                         adios(EX_USAGE, NULL, "missing argument to %s",
 248                                                         argp[-2]);
 249                                 }
 250                                 continue;
 251
 252                         case MAILSW:
 253                                 if (!(cp = *argp++) || *cp == '-') {
 254                                         adios(EX_USAGE, NULL, "missing argument to %s",
 255                                                         argp[-2]);
 256                                 }
 257                                 if (mdlvr) {
 258                                         adios(EX_USAGE, NULL, "only one maildelivery file at a time!");
 259                                 }
 260                                 mdlvr = cp;
 261                                 continue;
 262
 263                         case VERBSW:
 264                                 verbose++;
 265                                 continue;
 266                         case NVERBSW:
 267                                 verbose = 0;
 268                                 continue;
 269
 270                         case DEBUGSW:
 271                                 debug++;
 272                                 continue;
 273                         }
 274                 }
 275
 276                 switch (argp - (argv + 1)) {
 277                 case 1:
 278                         addr = cp;
 279                         break;
 280                 case 2:
 281                         info = cp;
 282                         break;
 283                 case 3:
 284                         sender = cp;
 285                         break;
 286                 }
 287         }
 288
 289         if (!addr) {
 290                 addr = getusername();
 291         }
 292         if (!user) {
 293                 user = (cp = strchr(addr, '.')) ? ++cp : addr;
 294         }
 295         if (!(pw = getpwnam(user))) {
 296                 adios(EX_NOUSER, NULL, "no such local user as %s", user);
 297         }
 298
 299         if (chdir(pw->pw_dir) == -1) {
 300                 chdir("/");
 301         }
 302         umask(0077);
 303
 304         if (geteuid() == 0) {
 305                 setgid(pw->pw_gid);
 306                 initgroups(pw->pw_name, pw->pw_gid);
 307                 setuid(pw->pw_uid);
 308         }
 309
 310         if (!info) {
 311                 info = "";
 312         }
 313
 314         setbuf(stdin, NULL);
 315
 316         /* Record the delivery time */
 317         if (!(now = dlocaltimenow())) {
 318                 adios(EX_OSERR, NULL, "unable to ascertain local time");
 319         }
 320         snprintf(ddate, sizeof(ddate), "Delivery-Date: %s\n", dtimenow());
 321
 322         /*
 323         ** Copy the message to a temporary file
 324         */
 325         if (file) {
 326                 int tempfd;
 327
 328                 /* getting message from file */
 329                 if ((tempfd = open(file, O_RDONLY)) == -1) {
 330                         adios(EX_IOERR, file, "unable to open");
 331                 }
 332                 if (debug) {
 333                         debug_printf("retrieving message from file \"%s\"\n",
 334                                         file);
 335                 }
 336                 if ((fd = copy_message(tempfd, tmpfil, 1)) == -1) {
 337                         adios(EX_CANTCREAT, NULL, "unable to create temporary file");
 338                 }
 339                 close(tempfd);
 340         } else {
 341                 /* getting message from stdin */
 342                 if (debug) {
 343                         debug_printf("retrieving message from stdin\n");
 344                 }
 345                 if ((fd = copy_message(fileno(stdin), tmpfil, 1)) == -1) {
 346                         adios(EX_CANTCREAT, NULL, "unable to create temporary file");
 347                 }
 348         }
 349
 350         if (debug) {
 351                 debug_printf("temporary file=\"%s\"\n", tmpfil);
 352         }
 353
 354         /*
 355         ** Delete the temp file now or a copy of every single message
 356         ** passed through slocal will be left in the /tmp directory until
 357         ** deleted manually!  This unlink() used to be under an 'else'
 358         ** of the 'if (debug)' above, but since some people like to
 359         ** always run slocal with -debug and log the results, the /tmp
 360         ** directory would get choked over time.  Of course, now that
 361         ** we always delete the temp file, the "temporary file=" message
 362         ** above is somewhat pointless -- someone watching debug output
 363         ** wouldn't have a chance to 'tail -f' or 'ln' the temp file
 364         ** before it's unlinked.  The best thing would be to delay this
 365         ** unlink() until later if debug == 1, but I'll leave that for
 366         ** someone who cares about the temp-file-accessing functionality
 367         ** (they'll have to watch out for cases where we adios()).
 368         */
 369         unlink(tmpfil);
 370
 371         if (!(fp = fdopen(fd, "r+"))) {
 372                 adios(EX_IOERR, NULL, "unable to access temporary file");
 373         }
 374
 375         /* If no sender given, extract it from envelope information. */
 376         if (!sender) {
 377                 get_sender(envelope, &sender);
 378         }
 379         if (!mbox) {
 380                 snprintf(mailbox, sizeof(mailbox), "%s/%s",
 381                                 mailspool, pw->pw_name);
 382                 mbox = mailbox;
 383         }
 384         if (!home) {
 385                 home = pw->pw_dir;
 386         }
 387
 388         if (debug) {
 389                 debug_printf("addr=\"%s\"\n", trimstr(addr));
 390                 debug_printf("user=\"%s\"\n", trimstr(user));
 391                 debug_printf("info=\"%s\"\n", trimstr(info));
 392                 debug_printf("sender=\"%s\"\n", trimstr(sender));
 393                 debug_printf("envelope=\"%s\"\n",
 394                                 envelope ? trimstr(envelope) : "");
 395                 debug_printf("mbox=\"%s\"\n", trimstr(mbox));
 396                 debug_printf("home=\"%s\"\n", trimstr(home));
 397                 debug_printf("ddate=\"%s\"\n", trimstr(ddate));
 398                 debug_printf("now=%02d:%02d\n\n", now->tw_hour, now->tw_min);
 399         }
 400
 401         /* deliver the message */
 402         status = localmail(fd, mdlvr);
 403
 404         return (status != -1 ? RCV_MOK : RCV_MBX);
 405 }
 406
 407
 408 /*
 409 ** Main routine for delivering message.
 410 */
 411 static int
 412 localmail(int fd, char *mdlvr)
 413 {
 414         char buf[BUFSIZ];
 415
 416         /* delivery according to personal Maildelivery file */
 417         if (usr_delivery(fd, mdlvr ? mdlvr : ".maildelivery", 0) != -1) {
 418                 return 0;
 419         }
 420         /* delivery according to global Maildelivery file */
 421         snprintf(buf, sizeof buf, "%s/%s", mhetcdir, "maildelivery");
 422         if (usr_delivery(fd, buf, 1) != -1) {
 423                 return 0;
 424         }
 425         if (verbose) {
 426                 verbose_printf("(delivering to standard mail spool)\n");
 427         }
 428         /* last resort - deliver to standard mail spool */
 429         return usr_file(fd, mbox);
 430 }
 431
 432
 433 #define matches(a,b) (stringdex(b, a) >= 0)
 434
 435 /*
 436 ** Parse the delivery file, and process incoming message.
 437 */
 438 static int
 439 usr_delivery(int fd, char *delivery, int su)
 440 {
 441         int i, accept, status=1, won, vecp, next;
 442         char *field, *pattern, *action, *result, *string;
 443         char buffer[BUFSIZ], tmpbuf[BUFSIZ];
 444         char *cp, *vec[NVEC];
 445         struct stat st;
 446         struct pair *p;
 447         FILE *fp;
 448
 449         /* open the delivery file */
 450         if (!(fp = fopen(delivery, "r"))) {
 451                 return -1;
 452         }
 453         /* check if delivery file has bad ownership or permissions */
 454         if (fstat(fileno(fp), &st) == -1 ||
 455                         (st.st_uid != 0 && (su || st.st_uid != pw->pw_uid)) ||
 456                         st.st_mode & (S_IWGRP|S_IWOTH)) {
 457                 if (verbose) {
 458                         verbose_printf("WARNING: %s has bad ownership/modes (su=%d,uid=%d,owner=%d,mode=0%o)\n", delivery, su, (int) pw->pw_uid, (int) st.st_uid, (int) st.st_mode);
 459                 }
 460                 return -1;
 461         }
 462
 463         won = 0;
 464         next = 1;
 465
 466         /* read and process delivery file */
 467         while (fgets(buffer, sizeof(buffer), fp)) {
 468                 /* skip comments and empty lines */
 469                 if (*buffer == '#' || *buffer == '\n') {
 470                         continue;
 471                 }
 472                 /* zap trailing newline */
 473                 if ((cp = strchr(buffer, '\n'))) {
 474                         *cp = '\0';
 475                 }
 476                 /* split buffer into fields */
 477                 vecp = split(buffer, vec);
 478
 479                 /* check for too few fields */
 480                 if (vecp < 5) {
 481                         if (debug)
 482                                 debug_printf("WARNING: entry with only %d fields, skipping.\n", vecp);
 483                         continue;
 484                 }
 485
 486                 if (debug) {
 487                         for (i = 0; vec[i]; i++) {
 488                                 debug_printf("vec[%d]: \"%s\"\n",
 489                                                 i, trimstr(vec[i]));
 490                         }
 491                 }
 492
 493                 field   = vec[0];
 494                 pattern = vec[1];
 495                 action  = vec[2];
 496                 result  = vec[3];
 497                 string  = vec[4];
 498
 499                 /* find out how to perform the action */
 500                 switch (result[0]) {
 501                 case 'N':
 502                 case 'n':
 503                         /*
 504                         ** If previous condition failed, don't
 505                         ** do this - else fall through
 506                         */
 507                         if (!next) {
 508                                 continue;
 509                         }
 510                         /* fall */
 511
 512                 case '?':
 513                         /*
 514                         ** If already delivered, skip this action.
 515                         ** Else consider delivered if action is
 516                         ** successful.
 517                         */
 518                         if (won) {
 519                                 continue;
 520                         }
 521                         /* fall */
 522
 523                 case 'A':
 524                 case 'a':
 525                         /*
 526                         ** Take action, and consider delivered if
 527                         ** action is successful.
 528                         */
 529                         accept = 1;
 530                         break;
 531
 532                 case 'R':
 533                 case 'r':
 534                 default:
 535                         /*
 536                         ** Take action, but don't consider delivered,
 537                         ** even if action is successful
 538                         */
 539                         accept = 0;
 540                         break;
 541                 }
 542
 543                 /* check if the field matches */
 544                 switch (*field) {
 545                 case '*':
 546                         /* always matches */
 547                         break;
 548
 549                 case 'd':
 550                         /*
 551                         ** "default" matches only if the message hasn't
 552                         ** been delivered yet.
 553                         */
 554                         if (mh_strcasecmp(field, "default")==0) {
 555                                 if (won) {
 556                                         continue;
 557                                 }
 558                                 break;
 559                         }
 560                         /* fall */
 561                 default:
 562                         /* parse message and build lookup table */
 563                         if (!parsed && parse(fd) == -1) {
 564                                 fclose(fp);
 565                                 return -1;
 566                         }
 567                         /*
 568                         ** find header field in lookup table, and
 569                         ** see if the pattern matches.
 570                         */
 571                         if ((p = lookup(hdrs, field)) && p->p_value &&
 572                                         matches(p->p_value, pattern)) {
 573                                 next = 1;
 574                         } else {
 575                                 next = 0;
 576                                 continue;
 577                         }
 578                         break;
 579                 }
 580
 581                 /* find out the action to perform */
 582                 switch (*action) {
 583                 case 'q':
 584                         /* deliver to quoted pipe */
 585                         if (mh_strcasecmp(action, "qpipe")) {
 586                                 continue;
 587                         }
 588                         /* fall */
 589                 case '^':
 590                         expand(tmpbuf, string, fd);
 591                         if (split(tmpbuf, vec) < 1) {
 592                                 continue;
 593                         }
 594                         status = usr_pipe(fd, tmpbuf, vec[0], vec, 0);
 595                         break;
 596
 597                 case 'p':
 598                         /* deliver to pipe */
 599                         if (mh_strcasecmp(action, "pipe")) {
 600                                 continue;
 601                         }
 602                         /* fall */
 603                 case '|':
 604                         vec[2] = "sh";
 605                         vec[3] = "-c";
 606                         expand(tmpbuf, string, fd);
 607                         vec[4] = tmpbuf;
 608                         vec[5] = NULL;
 609                         status = usr_pipe(fd, tmpbuf, "/bin/sh", vec+2, 0);
 610                         break;
 611
 612                 case 'f':
 613                         if (mh_strcasecmp(action, "file")==0) {
 614                                 /* mbox format */
 615                                 status = usr_file(fd, string);
 616                                 break;
 617                         }
 618                         if (mh_strcasecmp(action, "folder")!=0) {
 619                                 continue;
 620                         }
 621                         /* fall */
 622                 case '+':
 623                         /* deliver to nmh folder */
 624                         status = usr_folder(fd, string);
 625                         break;
 626
 627                 case 'm':
 628                         /* mbox format */
 629                         if (mh_strcasecmp(action, "mbox")!=0) {
 630                                 continue;
 631                         }
 632                         /* fall */
 633                 case '>':
 634                         /* mbox format */
 635                         status = usr_file(fd, string);
 636                         break;
 637
 638                 case 'd':
 639                         /* ignore message */
 640                         if (mh_strcasecmp(action, "destroy")!=0) {
 641                                 continue;
 642                         }
 643                         status = 0;
 644                         break;
 645                 }
 646
 647                 if (status) {
 648                         next = 0;  /* action failed, mark for 'N' result */
 649                 } else if (accept) {
 650                         won++;
 651                 }
 652         }
 653
 654         fclose(fp);
 655         return (won ? 0 : -1);
 656 }
 657
 658
 659 /*
 660 ** Split buffer into fields (delimited by whitespace or
 661 ** comma's).  Return the number of fields found.
 662 */
 663 static int
 664 split(char *cp, char **vec)
 665 {
 666         int i;
 667         unsigned char *s;
 668
 669         s = cp;
 670
 671         /* split into a maximum of NVEC fields */
 672         for (i = 0; i <= NVEC;) {
 673                 vec[i] = NULL;
 674
 675                 /* zap any whitespace and comma's */
 676                 while (isspace(*s) || *s == ',') {
 677                         *s++ = '\0';
 678                 }
 679                 /* end of buffer, time to leave */
 680                 if (!*s) {
 681                         break;
 682                 }
 683                 /* get double quote text as a single field */
 684                 if (*s == '"') {
 685                         for (vec[i++] = ++s; *s && *s != '"'; s++) {
 686                                 /*
 687                                 ** Check for escaped double quote.  We need
 688                                 ** to shift the string to remove slash.
 689                                 */
 690                                 if (*s == '\\') {
 691                                         if (*++s == '"') {
 692                                                 strcpy(s - 1, s);
 693                                         }
 694                                         s--;
 695                                 }
 696                         }
 697                         if (*s == '"') {
 698                                 /* zap trailing double quote */
 699                                 *s++ = '\0';
 700                         }
 701                         continue;
 702                 }
 703
 704                 if (*s == '\\' && *++s != '"') {
 705                         s--;
 706                 }
 707                 vec[i++] = s++;
 708
 709                 /* move forward to next field delimiter */
 710                 while (*s && !isspace(*s) && *s != ',') {
 711                         s++;
 712                 }
 713         }
 714         vec[i] = NULL;
 715
 716         return i;
 717 }
 718
 719
 720 /*
 721 ** Parse the headers of a message, and build the
 722 ** lookup table for matching fields and patterns.
 723 */
 724 static int
 725 parse(int fd)
 726 {
 727         int i, state;
 728         int fd1;
 729         char *cp, *dp, *lp;
 730         char name[NAMESZ], field[BUFSIZ];
 731         struct pair *p, *q;
 732         FILE  *in;
 733
 734         if (parsed++) {
 735                 return 0;
 736         }
 737
 738         /* get a new FILE pointer to message */
 739         if ((fd1 = dup(fd)) == -1) {
 740                 return -1;
 741         }
 742         if (!(in = fdopen(fd1, "r"))) {
 743                 close(fd1);
 744                 return -1;
 745         }
 746         rewind(in);
 747
 748         /* add special entries to lookup table */
 749         if ((p = lookup(hdrs, "source"))) {
 750                 p->p_value = getcpy(sender);
 751         }
 752         if ((p = lookup(hdrs, "addr"))) {
 753                 p->p_value = getcpy(addr);
 754         }
 755
 756         /*
 757         ** Scan the headers of the message and build a lookup table.
 758         */
 759         for (i = 0, state = FLD;;) {
 760                 switch (state = m_getfld(state, name, field, sizeof(field),
 761                                 in)) {
 762                 case FLD:
 763                 case FLDPLUS:
 764                         lp = getcpy(field);
 765                         while (state == FLDPLUS) {
 766                                 state = m_getfld(state, name, field,
 767                                                 sizeof(field), in);
 768                                 lp = add(field, lp);
 769                         }
 770                         for (p = hdrs; p->p_name; p++) {
 771                                 if (mh_strcasecmp(p->p_name, name)!=0) {
 772                                         if (!(p->p_flags & P_HID)) {
 773                                                 if ((cp = p->p_value)) {
 774                                                         if (p->p_flags & P_ADR) {
 775                                                                 dp = cp + strlen(cp) - 1;
 776                                                                 if (*dp == '\n') {
 777                                                                         *dp = '\0';
 778                                                                 }
 779                                                                 cp = add(",\n\t", cp);
 780                                                         } else {
 781                                                                 cp = add("\t", cp);
 782                                                         }
 783                                                 }
 784                                                 p->p_value = add(lp, cp);
 785                                         }
 786                                         free(lp);
 787                                         break;
 788                                 }
 789                         }
 790                         if (!p->p_name && i < NVEC) {
 791                                 p->p_name = getcpy(name);
 792                                 p->p_value = lp;
 793                                 p->p_flags = P_NIL;
 794                                 p++, i++;
 795                                 p->p_name = NULL;
 796                         }
 797                         continue;
 798
 799                 case BODY:
 800                 case FILEEOF:
 801                         break;
 802
 803                 case LENERR:
 804                 case FMTERR:
 805                         advise(NULL, "format error in message");
 806                         break;
 807
 808                 default:
 809                         advise(NULL, "internal error in m_getfld");
 810                         fclose(in);
 811                         return -1;
 812                 }
 813                 break;
 814         }
 815         fclose(in);
 816
 817         if ((p = lookup(vars, "reply-to"))) {
 818                 if (!(q = lookup(hdrs, "reply-to")) || !q->p_value) {
 819                         q = lookup(hdrs, "from");
 820                 }
 821                 p->p_value = getcpy(q ? q->p_value : "");
 822                 p->p_flags &= ~P_CHK;
 823                 if (debug) {
 824                         debug_printf("vars[%d]: name=\"%s\" value=\"%s\"\n",
 825                                         p - vars, p->p_name, trimstr(p->p_value));
 826                 }
 827         }
 828         if (debug) {
 829                 for (p = hdrs; p->p_name; p++) {
 830                         debug_printf("hdrs[%d]: name=\"%s\" value=\"%s\"\n",
 831                                         p - hdrs, p->p_name,
 832                                         p->p_value ? trimstr(p->p_value) : "");
 833                 }
 834         }
 835         return 0;
 836 }
 837
 838
 839 /*
 840 ** Expand any builtin variables such as $(sender),
 841 ** $(address), etc., in a string.
 842 */
 843 static void
 844 expand(char *s1, char *s2, int fd)
 845 {
 846         char c, *cp;
 847         struct pair *p;
 848
 849         if (!globbed) {
 850                 glob(fd);
 851         }
 852         while ((c = *s2++)) {
 853                 if (c != '$' || *s2 != '(') {
 854                         *s1++ = c;
 855                 } else {
 856                         for (cp = ++s2; *s2 && *s2 != ')'; s2++) {
 857                                 continue;
 858                         }
 859                         if (*s2 != ')') {
 860                                 s2 = --cp;
 861                                 continue;
 862                         }
 863                         *s2++ = '\0';
 864                         if ((p = lookup(vars, cp))) {
 865                                 if (!parsed && (p->p_flags & P_CHK)) {
 866                                         parse(fd);
 867                                 }
 868                                 strcpy(s1, p->p_value);
 869                                 s1 += strlen(s1);
 870                         }
 871                 }
 872         }
 873         *s1 = '\0';
 874 }
 875
 876
 877 /*
 878 ** Fill in the information missing from the "vars"
 879 ** table, which is necessary to expand any builtin
 880 ** variables in the string for a "pipe" or "qpipe"
 881 ** action.
 882 */
 883 static void
 884 glob(int fd)
 885 {
 886         char buffer[BUFSIZ];
 887         struct stat st;
 888         struct pair *p;
 889
 890         if (globbed++) {
 891                 return;
 892         }
 893         if ((p = lookup(vars, "sender"))) {
 894                 p->p_value = getcpy(sender);
 895         }
 896         if ((p = lookup(vars, "address"))) {
 897                 p->p_value = getcpy(addr);
 898         }
 899         if ((p = lookup(vars, "size"))) {
 900                 snprintf(buffer, sizeof(buffer), "%d",
 901                                 fstat(fd, &st) != -1 ? (int) st.st_size : 0);
 902                 p->p_value = getcpy(buffer);
 903         }
 904         if ((p = lookup(vars, "info"))) {
 905                 p->p_value = getcpy(info);
 906         }
 907         if (debug) {
 908                 for (p = vars; p->p_name; p++) {
 909                         debug_printf("vars[%d]: name=\"%s\" value=\"%s\"\n",
 910                                         p - vars, p->p_name, trimstr(p->p_value));
 911                 }
 912         }
 913 }
 914
 915
 916 /*
 917 ** Find a matching name in a lookup table.  If found,
 918 ** return the "pairs" entry, else return NULL.
 919 */
 920 static struct pair *
 921 lookup(struct pair *pairs, char *key)
 922 {
 923         for (; pairs->p_name; pairs++) {
 924                 if (!mh_strcasecmp(pairs->p_name, key)) {
 925                         return pairs;
 926                 }
 927         }
 928         return NULL;
 929 }
 930
 931
 932 /*
 933 ** Deliver message by appending to a file, using rcvpack(1).
 934 */
 935 static int
 936 usr_file(int fd, char *mailbox)
 937 {
 938         char *vec[3];
 939
 940         if (verbose) {
 941                 verbose_printf("delivering to file \"%s\" (mbox style)",
 942                                 mailbox);
 943         }
 944         vec[0] = "rcvpack";
 945         vec[1] = mailbox;
 946         vec[2] = NULL;
 947
 948         return usr_pipe(fd, "rcvpack", "rcvpack", vec, 1);
 949 }
 950
 951
 952 /*
 953 ** Deliver message to a nmh folder, using rcvstore(1).
 954 */
 955 static int
 956 usr_folder(int fd, char *string)
 957 {
 958         char folder[BUFSIZ], *vec[3];
 959
 960         /* get folder name ready */
 961         if (*string == '+') {
 962                 strncpy(folder, string, sizeof(folder));
 963         }else {
 964                 snprintf(folder, sizeof(folder), "+%s", string);
 965         }
 966         if (verbose) {
 967                 verbose_printf("delivering to folder \"%s\"", folder + 1);
 968         }
 969         vec[0] = "rcvstore";
 970         vec[1] = folder;
 971         vec[2] = NULL;
 972
 973         return usr_pipe(fd, "rcvstore", "rcvstore", vec, 1);
 974 }
 975
 976 /*
 977 ** Deliver message to a process.
 978 */
 979 static int
 980 usr_pipe(int fd, char *cmd, char *pgm, char **vec, int suppress)
 981 {
 982         int bytes, seconds, status, n;
 983         struct stat st;
 984         char *path;
 985
 986         if (verbose && !suppress) {
 987                 verbose_printf("delivering to pipe \"%s\"", cmd);
 988         }
 989         lseek(fd, (off_t) 0, SEEK_SET);
 990
 991         switch ((child_id = fork())) {
 992         case -1:
 993                 /* fork error */
 994                 if (verbose) {
 995                         adorn("fork", "unable to");
 996                 }
 997                 return -1;
 998
 999         case 0:
1000                 /* child process */
1001                 if (fd != 0) {
1002                         dup2(fd, 0);
1003                 }
1004                 freopen("/dev/null", "w", stdout);
1005                 freopen("/dev/null", "w", stderr);
1006                 if (fd != 3) {
1007                         dup2(fd, 3);
1008                 }
1009                 for (n=4; n<OPEN_MAX; n++) {
1010                         close(n);
1011                 }
1012
1013 #ifdef TIOCNOTTY
1014                 if ((fd = open("/dev/tty", O_RDWR)) != -1) {
1015                         ioctl(fd, TIOCNOTTY, NULL);
1016                         close(fd);
1017                 }
1018 #endif /* TIOCNOTTY */
1019
1020                 /* put in own process group */
1021                 setpgid((pid_t) 0, getpid());
1022
1023                 path = getenv("PATH");
1024                 *environ = NULL;
1025                 m_putenv("USER", pw->pw_name);
1026                 m_putenv("HOME", pw->pw_dir);
1027                 m_putenv("SHELL", pw->pw_shell);
1028                 m_putenv("PATH", path);
1029
1030                 execvp(pgm, vec);
1031                 _exit(EX_OSERR);
1032
1033         default:
1034                 /* parent process */
1035                 SIGNAL(SIGALRM, alrmser);
1036                 bytes = fstat(fd, &st) != -1 ? (int) st.st_size : 100;
1037
1038                 /* amount of time to wait depends on message size */
1039                 if (bytes <= 100) {
1040                         /* give at least 5 minutes */
1041                         seconds = 300;
1042                 } else if (bytes >= 90000) {
1043                         /* a half hour is long enough */
1044                         seconds = 1800;
1045                 } else {
1046                         seconds = (bytes / 60) + 300;
1047                 }
1048                 alarm((unsigned int) seconds);
1049                 status = pidwait(child_id, 0);
1050                 alarm(0);
1051
1052                 if (eflag) {
1053                         if (verbose) {
1054                                 verbose_printf(", timed-out; terminated\n");
1055                         }
1056                         return -1;
1057                 }
1058
1059                 if (verbose) {
1060                         if (!status) {
1061                                 verbose_printf(", success.\n");
1062                         } else if ((status & 0xff00) == 0xff00) {
1063                                 verbose_printf(", system error\n");
1064                         } else {
1065                                 pidstatus(status, stdout, ", failed");
1066                         }
1067                 }
1068                 return (status == 0 ? 0 : -1);
1069         }
1070 }
1071
1072
1073 static void
1074 alrmser(int i)
1075 {
1076         eflag = 1;
1077         kill(-child_id, SIGKILL);
1078 }
1079
1080
1081 /*
1082 ** Get the `sender' from the envelope
1083 ** information ("From " line).
1084 */
1085 static void
1086 get_sender(char *envelope, char **sender)
1087 {
1088         int i;
1089         unsigned char *cp;
1090         unsigned char buffer[BUFSIZ];
1091
1092         if (!envelope) {
1093                 *sender = getcpy("");
1094                 return;
1095         }
1096
1097         i = strlen("From ");
1098         strncpy(buffer, envelope + i, sizeof(buffer));
1099         buffer[sizeof buffer -1] = '\0';  /* ensure termination */
1100         if ((cp = strchr(buffer, '\n'))) {
1101                 *cp = '\0';
1102                 cp -= 24;
1103                 if (cp < buffer) {
1104                         cp = buffer;
1105                 }
1106         } else {
1107                 cp = buffer;
1108         }
1109         *cp = '\0';
1110
1111         for (cp = buffer + strlen(buffer) - 1; cp >= buffer; cp--)
1112                 if (isspace(*cp)) {
1113                         *cp = '\0';
1114                 } else {
1115                         break;
1116                 }
1117         *sender = getcpy(buffer);
1118 }
1119
1120
1121 /*
1122 ** Copy message into a temporary file.
1123 ** While copying, it will do some header processing
1124 ** including the extraction of the envelope information.
1125 */
1126 static int
1127 copy_message(int qd, char *tmpfil, int fold)
1128 {
1129         int i, first = 1, fd1, fd2;
1130         char buffer[BUFSIZ];
1131         FILE *qfp, *ffp;
1132         char *tfile = NULL;
1133
1134         tfile = m_mktemp2("/tmp/", invo_name, &fd1, NULL);
1135         if (tfile == NULL) return -1;
1136         fchmod(fd1, 0600);
1137         strncpy(tmpfil, tfile, BUFSIZ);
1138
1139         if (!fold) {
1140                 while ((i = read(qd, buffer, sizeof(buffer))) > 0) {
1141                         if (write(fd1, buffer, i) != i) {
1142 you_lose:
1143                                 close(fd1);
1144                                 unlink(tmpfil);
1145                                 return -1;
1146                         }
1147                 }
1148                 if (i == -1) {
1149                         goto you_lose;
1150                 }
1151                 lseek(fd1, (off_t) 0, SEEK_SET);
1152                 return fd1;
1153         }
1154
1155         /* dup the fd for incoming message */
1156         if ((fd2 = dup(qd)) == -1) {
1157                 close(fd1);
1158                 return -1;
1159         }
1160
1161         /* now create a FILE pointer for it */
1162         if (!(qfp = fdopen(fd2, "r"))) {
1163                 close(fd1);
1164                 close(fd2);
1165                 return -1;
1166         }
1167
1168         /* dup the fd for temporary file */
1169         if ((fd2 = dup(fd1)) == -1) {
1170                 close(fd1);
1171                 fclose(qfp);
1172                 return -1;
1173         }
1174
1175         /* now create a FILE pointer for it */
1176         if (!(ffp = fdopen(fd2, "r+"))) {
1177                 close(fd1);
1178                 close(fd2);
1179                 fclose(qfp);
1180                 return -1;
1181         }
1182
1183         /*
1184         ** copy message into temporary file
1185         ** and massage the headers.  Save
1186         ** a copy of the "From " line for later.
1187         */
1188         i = strlen("From ");
1189         while (fgets(buffer, sizeof(buffer), qfp)) {
1190                 if (first) {
1191                         first = 0;
1192                         if (strncmp(buffer, "From ", i)==0) {
1193                                 /*
1194                                 ** get copy of envelope information
1195                                 ** ("From " line)
1196                                 */
1197                                 envelope = getcpy(buffer);
1198
1199                                 /* Put the delivery date in message */
1200                                 fputs(ddate, ffp);
1201                                 if (ferror(ffp)) {
1202                                         goto fputs_error;
1203                                 }
1204                                 continue;
1205                         }
1206                 }
1207
1208                 fputs(buffer, ffp);
1209                 if (ferror(ffp)) {
1210                         goto fputs_error;
1211                 }
1212         }
1213
1214         fclose(ffp);
1215         if (ferror(qfp)) {
1216                 close(fd1);
1217                 fclose(qfp);
1218                 return -1;
1219         }
1220         fclose(qfp);
1221         lseek(fd1, (off_t) 0, SEEK_SET);
1222         return fd1;
1223
1224 fputs_error:
1225         close(fd1);
1226         fclose(ffp);
1227         fclose(qfp);
1228         return -1;
1229 }
1230
1231 /*
1232 ** Trim strings for pretty printing of debugging output
1233 */
1234 static char *
1235 trimstr(char *cp)
1236 {
1237         char buffer[BUFSIZ*4];
1238         unsigned char *bp, *sp;
1239
1240         if (!cp) {
1241                 return NULL;
1242         }
1243
1244         /* copy string into temp buffer */
1245         strncpy(buffer, cp, sizeof(buffer));
1246         bp = buffer;
1247
1248         /* skip over leading whitespace */
1249         while (isspace(*bp)) {
1250                 bp++;
1251         }
1252         /* start at the end and zap trailing whitespace */
1253         for (sp = bp + strlen(bp) - 1; sp >= bp; sp--) {
1254                 if (isspace(*sp)) {
1255                         *sp = '\0';
1256                 } else {
1257                         break;
1258                 }
1259         }
1260
1261         /* replace remaining whitespace with spaces */
1262         for (sp = bp; *sp; sp++) {
1263                 if (isspace(*sp)) {
1264                         *sp = ' ';
1265                 }
1266         }
1267         return getcpy(bp);
1268 }
1269
1270 /*
1271 ** Function for printing `verbose' messages.
1272 */
1273 static void
1274 verbose_printf(char *fmt, ...)
1275 {
1276         va_list ap;
1277
1278         va_start(ap, fmt);
1279         vfprintf(stdout, fmt, ap);
1280         va_end(ap);
1281         fflush(stdout);
1282 }
1283
1284
1285 /*
1286 ** Function for printing `verbose' delivery
1287 ** error messages.
1288 */
1289 static void
1290 adorn(char *what, char *fmt, ...)
1291 {
1292         va_list ap;
1293         int eindex;
1294         char *s;
1295
1296         eindex = errno;  /* save the errno */
1297         fprintf(stdout, ", ");
1298
1299         va_start(ap, fmt);
1300         vfprintf(stdout, fmt, ap);
1301         va_end(ap);
1302
1303         if (what) {
1304                 if (*what) {
1305                         fprintf(stdout, " %s: ", what);
1306                 }
1307                 if ((s = strerror(eindex))) {
1308                         fprintf(stdout, "%s", s);
1309                 } else {
1310                         fprintf(stdout, "Error %d", eindex);
1311                 }
1312         }
1313
1314         fputc('\n', stdout);
1315         fflush(stdout);
1316 }
1317
1318
1319 /*
1320 ** Function for printing `debug' messages.
1321 */
1322 static void
1323 debug_printf(char *fmt, ...)
1324 {
1325         va_list ap;
1326
1327         va_start(ap, fmt);
1328         vfprintf(stderr, fmt, ap);
1329         va_end(ap);
1330 }