Fix uip/whom.c for C89 compatibility
[mmh] / uip / send.c
index e39ab80..d7691db 100644 (file)
 #include <errno.h>
 #include <signal.h>
 #include <h/signals.h>
-#include <setjmp.h>
 #include <h/mime.h>
 #include <h/tws.h>
 #include <h/utils.h>
-
-#ifdef TIME_WITH_SYS_TIME
+#include <sysexits.h>
+#include <sys/wait.h>
+#include <unistd.h>
+#include <ctype.h>
+#include <sys/stat.h>
+#include <locale.h>
+
+#ifdef HAVE_SYS_TIME_H
 # include <sys/time.h>
-# include <time.h>
-#else
-# ifdef TM_IN_SYS_TIME
-#  include <sys/time.h>
-# else
-#  include <time.h>
-# endif
+#endif
+#include <time.h>
+
+#ifdef HAVE_SYS_PARAM_H
+# include <sys/param.h>
 #endif
 
 int debugsw = 0;  /* global */
-int forwsw  = 1;
-int pushsw  = 0;
-int verbsw  = 0;
-char *altmsg   = NULL;
+char *altmsg = NULL;
 char *annotext = NULL;
 char *distfile = NULL;
 
-static jmp_buf env;
-
 /* name of temp file for body content */
 static char body_file_name[MAXPATHLEN + 1];
 /* name of mhbuild composition temporary file */
@@ -50,66 +48,49 @@ static FILE *composition_file;  /* composition file pointer */
 /*
 ** static prototypes
 */
-static int sendsbr(char **, int, char *, struct stat *, int);
-static void armed_done(int) NORETURN;
-static void alert(char *, int);
-static int tmp_fd(void);
+static int sendsbr(char **, int, char *, struct stat *);
 static void anno(struct stat *);
 static int sendaux(char **, int, char *, struct stat *);
 static int attach(char *);
+static int signandenc(char *);
 static void clean_up_temporary_files(void);
 static int get_line(void);
 static void make_mime_composition_file_entry(char *);
+static char* strexit(int status);
 
 
 static struct swit switches[] = {
-#define ALIASW  0
-       { "alias aliasfile", 0 },
-#define DEBUGSW  1
+#define DEBUGSW  0
        { "debug", -5 },
-#define FORWSW  2
-       { "forward", 0 },
-#define NFORWSW  3
-       { "noforward", 0 },
-#define PUSHSW  4
-       { "push", 0 },
-#define NPUSHSW  5
-       { "nopush", 0 },
-#define VERBSW  6
+#define VERBSW  1
        { "verbose", 0 },
-#define NVERBSW  7
-       { "noverbose", 0 },
-#define WATCSW  8
-       { "watch", 0 },
-#define NWATCSW  9
-       { "nowatch", 0 },
-#define VERSIONSW  10
-       { "version", 0 },
-#define HELPSW  11
+#define NVERBSW  2
+       { "noverbose", 2 },
+#define VERSIONSW  3
+       { "Version", 0 },
+#define HELPSW  4
        { "help", 0 },
        { NULL, 0 }
 };
 
+char *version=VERSION;
 
 int
 main(int argc, char **argv)
 {
-       int msgp = 0, nfiles = 0, distsw = 0, vecp = 1;
+       int nmsgs = 0, nfiles = 0, distsw = 0, vecp = 1;
        int msgnum, status;
        int in, out;
        int n;
-       char *cp, *maildir = NULL;
-       char buf[BUFSIZ], **ap, **argp, **arguments;
+       char *cp, *maildir = NULL, *folder = NULL;
+       char buf[BUFSIZ], **argp, **arguments;
        char *msgs[MAXARGS], *vec[MAXARGS];
        char *files[MAXARGS];
        struct msgs *mp;
        struct stat st;
        struct stat st2;
 
-
-#ifdef LOCALE
        setlocale(LC_ALL, "");
-#endif
        invo_name = mhbasename(argv[0]);
 
        /* read user profile/context */
@@ -118,119 +99,85 @@ main(int argc, char **argv)
        arguments = getarguments(invo_name, argc, argv, 1);
        argp = arguments;
 
-       vec[vecp++] = "-library";
-       vec[vecp++] = getcpy(toabsdir("+"));
-
        while ((cp = *argp++)) {
                if (*cp == '-') {
                        switch (smatch(++cp, switches)) {
                        case AMBIGSW:
                                ambigsw(cp, switches);
-                               done(1);
+                               exit(EX_USAGE);
                        case UNKWNSW:
-                               adios(NULL, "-%s unknown\n", cp);
+                               adios(EX_USAGE, NULL, "-%s unknown\n", cp);
 
                        case HELPSW:
                                snprintf(buf, sizeof(buf),
                                                "%s [file] [switches]",
                                                invo_name);
                                print_help(buf, switches, 1);
-                               done(1);
+                               exit(argc == 2 ? EX_OK : EX_USAGE);
                        case VERSIONSW:
                                print_version(invo_name);
-                               done(1);
-
-                       case PUSHSW:
-                               pushsw++;
-                               continue;
-                       case NPUSHSW:
-                               pushsw = 0;
-                               continue;
-
-                       case FORWSW:
-                               forwsw++;
-                               continue;
-                       case NFORWSW:
-                               forwsw = 0;
-                               continue;
+                               exit(argc == 2 ? EX_OK : EX_USAGE);
 
+                       case DEBUGSW:
+                               debugsw++;
+                               /* fall */
                        case VERBSW:
-                               verbsw++;
-                               vec[vecp++] = --cp;
-                               continue;
                        case NVERBSW:
-                               verbsw = 0;
                                vec[vecp++] = --cp;
                                continue;
-
-                       case DEBUGSW:
-                               debugsw++;  /* fall */
-                       case WATCSW:
-                       case NWATCSW:
-                               vec[vecp++] = --cp;
-                               continue;
-
-                       case ALIASW:
-                               vec[vecp++] = --cp;
-                               if (!(cp = *argp++) || *cp == '-') {
-                                       adios(NULL, "missing argument to %s",
-                                                       argp[-2]);
-                               }
-                               vec[vecp++] = cp;
-                               continue;
-
+                       }
+               } else if (*cp == '+' || *cp == '@') {
+                       if (folder) {
+                               adios(EX_USAGE, NULL, "only one folder at a time!");
+                       } else {
+                               folder = mh_xstrdup(expandfol(cp));
                        }
                } else {
                        if (*cp == '/') {
                                files[nfiles++] = cp;
                        } else {
-                               msgs[msgp++] = cp;
+                               msgs[nmsgs++] = cp;
                        }
                }
        }
 
-       /* check for "Aliasfile:" profile entry */
-       if ((cp = context_find("Aliasfile"))) {
-               char *dp = NULL;
-
-               for (ap=brkstring(dp=getcpy(cp), " ", "\n"); ap && *ap; ap++) {
-                       vec[vecp++] = "-alias";
-                       vec[vecp++] = getcpy(etcpath(*ap));
-               }
-       }
-
-       if (!msgp && !nfiles) {
-               msgs[msgp++] = seq_cur;
+       if (!nmsgs && !nfiles) {
+               msgs[nmsgs++] = seq_cur;
        }
-       maildir = toabsdir(draftfolder);
 
-       if (chdir(maildir) == NOTOK) {
-               adios(maildir, "unable to change directory to");
-       }
-
-       if (!(mp = folder_read(draftfolder))) {
-               adios(NULL, "unable to read draft folder %s", draftfolder);
-       }
-       if (mp->nummsg == 0) {
-               adios(NULL, "no messages in draft folder %s", draftfolder);
-       }
-       /* parse all the message ranges/sequences and set SELECTED */
-       for (msgnum = 0; msgnum < msgp; msgnum++) {
-               if (!m_convert(mp, msgs[msgnum])) {
-                       done(1);
+       if (nmsgs) {
+               folder = folder ? folder : draftfolder;
+               maildir = toabsdir(folder);
+               if (chdir(maildir) == NOTOK) {
+                       adios(EX_OSERR, maildir, "unable to change directory to");
                }
-       }
-       seq_setprev(mp);
+               if (!(mp = folder_read(folder))) {
+                       adios(EX_IOERR, NULL, "unable to read folder %s",
+                                       folder);
+               }
+               if (mp->nummsg == 0) {
+                       adios(EX_DATAERR, NULL, "no messages in folder %s",
+                                       folder);
+               }
+               /* parse all the msgranges/sequences and set SELECTED */
+               for (msgnum = 0; msgnum < nmsgs; msgnum++) {
+                       if (!m_convert(mp, msgs[msgnum])) {
+                               exit(EX_USAGE);
+                       }
+               }
+               seq_setprev(mp);
 
-       for (msgp = 0, msgnum = mp->lowsel; msgnum <= mp->hghsel; msgnum++) {
-               if (is_selected(mp, msgnum)) {
-                       files[nfiles++] = getcpy(m_name(msgnum));
-                       unset_exists(mp, msgnum);
+               for (nmsgs = 0, msgnum = mp->lowsel;
+                               msgnum <= mp->hghsel; msgnum++) {
+                       if (is_selected(mp, msgnum)) {
+                               files[nfiles++] = mh_xstrdup(m_name(msgnum));
+                               unset_exists(mp, msgnum);
+                       }
                }
-       }
 
-       mp->msgflags |= SEQMOD;
-       seq_save(mp);
+               mp->msgflags |= SEQMOD;
+               seq_save(mp);
+       }
 
        if (!(cp = getenv("SIGNATURE")) || !*cp) {
                if ((cp = context_find("signature")) && *cp) {
@@ -238,9 +185,9 @@ main(int argc, char **argv)
                }
        }
 
-       for (msgnum = 0; msgnum < nfiles; msgnum++) {
-               if (stat(files[msgnum], &st) == NOTOK) {
-                       adios(files[msgnum], "unable to stat draft file");
+       for (n = 0; n < nfiles; n++) {
+               if (stat(files[n], &st) == NOTOK) {
+                       adios(EX_IOERR, files[n], "unable to stat draft file");
                }
        }
 
@@ -254,12 +201,12 @@ main(int argc, char **argv)
        if ((cp = getenv("mhdist")) && *cp && (distsw = atoi(cp)) && altmsg) {
                vec[vecp++] = "-dist";
                if ((in = open(altmsg, O_RDONLY)) == NOTOK) {
-                       adios(altmsg, "unable to open for reading");
+                       adios(EX_IOERR, altmsg, "unable to open for reading");
                }
                fstat(in, &st2);
-               distfile = getcpy(m_mktemp2(NULL, invo_name, NULL, NULL));
+               distfile = mh_xstrdup(m_mktemp2(NULL, invo_name, NULL, NULL));
                if ((out = creat(distfile, (int)st2.st_mode & 0777))==NOTOK) {
-                       adios(distfile, "unable to open for writing");
+                       adios(EX_IOERR, distfile, "unable to open for writing");
                }
                cpydata(in, out, altmsg, distfile);
                close(in);
@@ -273,46 +220,16 @@ main(int argc, char **argv)
                st.st_dev = 0;
                st.st_ino = 0;
        }
-       if (pushsw) {
-               /* push a fork into the background */
-               pid_t pid;
-
-               switch (pid = fork()) {
-               case -1:
-                       /* fork error */
-                       advise(NULL, "unable to fork, so can't push...");
-                       break;
-
-               default:
-                       /* parent, just exit */
-                       done(0);
-
-               case 0:
-                       /* child, block a few signals and continue */
-                       SIGNAL(SIGHUP, SIG_IGN);
-                       SIGNAL(SIGINT, SIG_IGN);
-                       SIGNAL(SIGQUIT, SIG_IGN);
-                       SIGNAL(SIGTERM, SIG_IGN);
-#ifdef SIGTSTP
-                       SIGNAL(SIGTSTP, SIG_IGN);
-                       SIGNAL(SIGTTIN, SIG_IGN);
-                       SIGNAL(SIGTTOU, SIG_IGN);
-#endif
-                       freopen("/dev/null", "r", stdin);
-                       freopen("/dev/null", "w", stdout);
-                       break;
-               }
-       }
        status = 0;
        vec[0] = "spost";
        for (n=3; n<OPEN_MAX; n++) {
                close(n);
        }
 
-       for (msgnum = 0; msgnum < nfiles; msgnum++) {
-               switch (sendsbr(vec, vecp, files[msgnum], &st, 1)) {
+       for (n = 0; n < nfiles; n++) {
+               switch (sendsbr(vec, vecp, files[n], &st)) {
                case DONE:
-                       done(++status);
+                       exit(++status);
                case NOTOK:
                        status++;  /* fall */
                case OK:
@@ -321,8 +238,7 @@ main(int argc, char **argv)
        }
 
        context_save();
-       done(status);
-       return 1;
+       return status;
 }
 
 
@@ -330,12 +246,10 @@ main(int argc, char **argv)
 ** message sending back-end
 */
 static int
-sendsbr(char **vec, int vecp, char *drft, struct stat *st, int rename_drft)
+sendsbr(char **vec, int vecp, char *drft, struct stat *st)
 {
-       int status;
-       char buffer[BUFSIZ];
+       int status, dupfd;
        char *original_draft;
-       char *p;  /* string pointer for building file name */
 
        /*
        ** Save the original name of the draft file.  The name of the
@@ -355,6 +269,7 @@ sendsbr(char **vec, int vecp, char *drft, struct stat *st, int rename_drft)
        */
        switch (attach(drft)) {
        case OK:
+               /* successfully MIMEified: use generate draft */
                drft = composition_file_name;
                break;
 
@@ -362,57 +277,53 @@ sendsbr(char **vec, int vecp, char *drft, struct stat *st, int rename_drft)
                return (NOTOK);
 
        case DONE:
+               /* already in MIME format: keep original draft */
                break;
        }
 
-       done=armed_done;
-       switch (setjmp(env)) {
+       /*
+       ** Sign and encrypt the message as needed.
+       ** Use the mhbuild composition file for the draft if there was
+       ** a successful conversion because that now contains the MIME
+       ** message.  A nice side effect of this is that it leaves the
+       ** original draft file untouched so that it can be retrieved
+       ** and modified if desired.
+       */
+       switch (signandenc(drft)) {
        case OK:
-               status = sendaux(vec, vecp, drft, st) ? NOTOK : OK;
-               /* rename the original draft */
-               if (rename_drft && status == OK &&
-                               rename(original_draft, strncpy(buffer,
-                               m_backup(original_draft), sizeof(buffer)))
-                               == NOTOK) {
-                       advise(buffer, "unable to rename %s to", drft);
-               }
+               drft = composition_file_name;
                break;
 
-       default:
-               status = DONE;
+       case NOTOK:
+               return (NOTOK);
+
+       case DONE:
                break;
        }
 
-       done=exit;
+       if ((status = sendaux(vec, vecp, drft, st)) == OK) {
+               /* move original draft to +trash folder */
+               /* temporary close stdin, for refile not to ask */
+               dupfd = dup(0);
+               close(0);
+               if (execprogl("refile", "refile", "-file",
+                               original_draft, "+trash",
+                               (char *)NULL) != 0) {
+                       advise(NULL, "unable to trash the draft");
+               }
+               dup2(dupfd, 0);
+               close(dupfd);
+       } else {
+               status = DONE;
+       }
+
        if (distfile) {
                unlink(distfile);
        }
 
-       /*
-       ** Get rid of any temporary files that we created for attachments.
-       ** Also get rid of the renamed composition file that mhbuild
-       ** leaves as a turd.  It looks confusing, but we use the body
-       ** file name to help build the renamed composition file name.
-       */
+       /* Get rid of temporary files that we created for attachments. */
        if (drft == composition_file_name) {
                clean_up_temporary_files();
-
-               if (strlen(composition_file_name) >=
-                               sizeof (composition_file_name) - 6) {
-                       advise(NULL, "unable to remove original composition file.");
-               } else {
-                       if (!(p = strrchr(composition_file_name, '/'))) {
-                               p = composition_file_name;
-                       } else {
-                               p++;
-                       }
-                       strcpy(body_file_name, p);
-                       *p++ = ',';
-                       strcpy(p, body_file_name);
-                       strcat(p, ".orig");
-
-                       unlink(composition_file_name);
-               }
        }
 
        return status;
@@ -423,60 +334,22 @@ attach(char *draft_file_name)
 {
        char buf[MAXPATHLEN + 6];
        int c;
-       int has_attachment;
-       int has_body;
-       int non_ascii; /* msg body contains non-ASCII chars */
-       int length;  /* length of attachment header field name */
+       int length = strlen(attach_hdr);
        char *p;
 
-       if (!(draft_file = fopen(draft_file_name, "r"))) {
-               adios(NULL, "can't open draft file `%s'.", draft_file_name);
-       }
-
-       /* We'll grow the buffer as needed. */
-       field = (char *)mh_xmalloc(field_size = 256);
-
-       /*
-       ** Scan the draft file for an attachment header field name.
-       */
-       length = strlen(attach_hdr);
-       has_attachment = 0;
-       while (get_line() != EOF && *field != '\0' && *field != '-') {
-               if (strncasecmp(field, attach_hdr, length)==0 &&
-                               field[length] == ':') {
-                       has_attachment = 1;
-               }
+       if(distfile) {
+               return DONE;
        }
 
-       /*
-       ** Look for at least one non-blank line in the body of the
-       ** message which indicates content in the body.
-       ** Check if body contains at least one non-blank (= not empty)
-       ** and if it contains any non-ASCII chars (= need MIME).
-       */
-       has_body = 0;
-       non_ascii = 0;
-       while (get_line() != EOF) {
-               for (p = field; *p != '\0'; p++) {
-                       if (*p != ' ' && *p != '\t') {
-                               has_body = 1;
-                       }
-                       if (*p > 127 || *p < 0) {
-                               non_ascii = 1;
-                       }
-               }
-               if (has_body && non_ascii) {
-                       break;  /* that's been already enough information */
-               }
+       if (!(draft_file = fopen(draft_file_name, "r"))) {
+               adios(EX_IOERR, NULL, "can't open draft file `%s'.", draft_file_name);
        }
 
-       if (!has_attachment && non_ascii==0) {
-               /* We don't need to convert it to MIME. */
-               return DONE;
-       }
+       /* We'll grow the buffer as needed. */
+       field = mh_xcalloc(field_size = 256, sizeof(char));
 
        /*
-       ** Else: mimify
+       ** MIMEify
        */
 
        /* Make names for the temporary files.  */
@@ -487,19 +360,27 @@ attach(char *draft_file_name)
                        m_mktemp(toabsdir(invo_name), NULL, NULL),
                        sizeof (composition_file_name));
 
-       if (has_body) {
-               body_file = fopen(body_file_name, "w");
-       }
+       body_file = fopen(body_file_name, "w");
        composition_file = fopen(composition_file_name, "w");
 
-       if ((has_body && !body_file) || !composition_file) {
+       if (!body_file || !composition_file) {
                clean_up_temporary_files();
-               adios(NULL, "unable to open all of the temporary files.");
+               adios(EX_IOERR, NULL, "unable to open all of the temporary files.");
        }
 
        /* Copy non-attachment header fields to the temp composition file. */
        rewind(draft_file);
        while (get_line() != EOF && *field && *field != '-') {
+               if (strncasecmp(field, VRSN_FIELD, strlen(VRSN_FIELD))==0 &&
+                               field[strlen(VRSN_FIELD)] == ':') {
+                       /*
+                       ** The draft is already in MIME format, thus
+                       ** back out and use the original draft file.
+                       */
+                       clean_up_temporary_files();
+                       return DONE;
+               }
+
                if (strncasecmp(field, attach_hdr, length) != 0 ||
                                field[length] != ':') {
                        fprintf(composition_file, "%s\n", field);
@@ -507,17 +388,15 @@ attach(char *draft_file_name)
        }
        fputs("--------\n", composition_file);
 
-       if (has_body) {
-               /* Copy the message body to the temporary file. */
-               while ((c = getc(draft_file)) != EOF) {
-                       putc(c, body_file);
-               }
-               fclose(body_file);
-
-               /* Add a mhbuild MIME composition file line for the body */
-               /* charset will be discovered/guessed by mhbuild */
-               fprintf(composition_file, "#text/plain %s\n", body_file_name);
+       /* Copy the message body to the temporary file. */
+       while ((c = getc(draft_file)) != EOF) {
+               putc(c, body_file);
        }
+       fclose(body_file);
+
+       /* Add a mhbuild MIME composition file line for the body */
+       /* charset will be discovered/guessed by mhbuild */
+       fprintf(composition_file, "#text/plain %s\n", body_file_name);
 
        /*
        ** Now, go back to the beginning of the draft file and look for
@@ -528,9 +407,7 @@ attach(char *draft_file_name)
        while (get_line() != EOF && *field && *field != '-') {
                if (strncasecmp(field, attach_hdr, length) == 0 &&
                                field[length] == ':') {
-                       for (p = field+length+1; *p==' ' || *p=='\t'; p++) {
-                               continue;
-                       }
+                       p = trim(field+length+1);
                        if (*p == '+') {
                                /* forwarded message */
                                fprintf(composition_file, "#forw [forwarded message(s)] %s\n", p);
@@ -543,12 +420,74 @@ attach(char *draft_file_name)
        fclose(composition_file);
 
        /* We're ready to roll! */
-       sprintf(buf, "mhbuild %s", composition_file_name);
-       if (system(buf) != 0) {
+       if (execprogl("mhbuild", "mhbuild", composition_file_name,
+                       (char *)NULL) != 0) {
                /* some problem */
                clean_up_temporary_files();
                return (NOTOK);
        }
+       /* Remove the automatically created backup of mhbuild. */
+       snprintf(buf, sizeof buf, "%s.orig", composition_file_name);
+       if (unlink(buf) == -1) {
+               advise(NULL, "unable to remove original composition file.");
+       }
+
+       return (OK);
+}
+
+static int
+signandenc(char *draft_file_name)
+{
+       char buf[BUFSIZ];
+       int dosign = 0;
+       int doenc = 0;
+       int ret;
+
+       if(distfile) {
+               return DONE;
+       }
+
+       if (!(draft_file = fopen(draft_file_name, "r"))) {
+               adios(EX_IOERR, NULL, "can't open draft file `%s'.", draft_file_name);
+       }
+
+       /* We'll grow the buffer as needed. */
+       field = mh_xcalloc(field_size = 256, sizeof(char));
+
+       /* Scan the draft file for an attachment header field name. */
+       while (get_line() != EOF && *field != '\0' && *field != '-') {
+               if (strncasecmp(field, sign_hdr, strlen(sign_hdr))==0 &&
+                               field[strlen(sign_hdr)] == ':') {
+                       dosign = 1;
+               }
+               if (strncasecmp(field, enc_hdr, strlen(enc_hdr))==0 &&
+                               field[strlen(enc_hdr)] == ':') {
+                       doenc = 1;
+               }
+       }
+       if (!dosign && !doenc) {
+               return DONE;
+       }
+
+       strcpy(composition_file_name, draft_file_name);
+
+       /* We're ready to roll! */
+       if (doenc) {
+               ret = execprogl("mhsign", "mhsign", "-m", "-e",
+                               draft_file_name, (char *)NULL);
+       } else {
+               ret = execprogl("mhsign", "mhsign", "-m",
+                               draft_file_name, (char *)NULL);
+       }
+       if (ret != 0) {
+               /* some problem */
+               return (NOTOK);
+       }
+       /* Remove the automatically created backup of mhsign. */
+       snprintf(buf, sizeof buf, "%s.orig", draft_file_name);
+       if (unlink(buf) == -1) {
+               advise(NULL, "unable to remove original draft file.");
+       }
 
        return (OK);
 }
@@ -582,7 +521,7 @@ get_line(void)
                        break;
                }
                if (++n >= field_size - 1) {
-                       field = (char *)mh_xrealloc(field, field_size += 256);
+                       field = mh_xrealloc(field, field_size += 256);
                        p = field + n - 1;
                }
        }
@@ -600,6 +539,7 @@ make_mime_composition_file_entry(char *file_name)
        char content_type[BUFSIZ];
        char cmdbuf[BUFSIZ];
        char *cmd = mimetypequeryproc;
+       int semicolon = 0;
 
        for (np = m_defs; np; np = np->n_next) {
                if (strcasecmp(np->n_name, mimetypequery)==0) {
@@ -611,7 +551,7 @@ make_mime_composition_file_entry(char *file_name)
 
        if (!(fp = popen(cmdbuf, "r"))) {
                clean_up_temporary_files();
-               adios(NULL, "unable to determine content type with `%s'",
+               adios(EX_IOERR, NULL, "unable to determine content type with `%s'",
                                cmdbuf);
        }
        if (fgets(content_type, sizeof content_type, fp) &&
@@ -627,14 +567,26 @@ make_mime_composition_file_entry(char *file_name)
        /* TODO: don't use access(2) because it checks for ruid, not euid */
        if (access(file_name, R_OK) != 0) {
                clean_up_temporary_files();
-               adios(NULL, "unable to access file `%s'", file_name);
+               adios(EX_IOERR, NULL, "unable to access file `%s'", file_name);
        }
 
-       cp = (!(cp = strrchr(file_name, '/'))) ? file_name : cp + 1;
-       fprintf(composition_file, "#%s; name=\"%s\" <> [%s] {attachment}",
-                       content_type, cp, cp);
+       /* Check for broken file(1). See man page mh-profile(5). */
+       for (cp=content_type; *cp; cp++) {
+               if (isspace(*cp)) {
+                       if (!semicolon) {
+                               adios(EX_SOFTWARE, NULL, "Sorry, your Mime-Type-Query command (%s) is broken.\n\tThe output misses a semicolon before the whitespace.\n\tOutput was: %s", cmd, content_type);
+                       }
+               } else if (*cp == ';') {
+                       semicolon = 1;
+               } else {
+                       semicolon = 0;
+               }
+       }
 
-       fprintf(composition_file, " %s\n", file_name);
+       cp = (!(cp = strrchr(file_name, '/'))) ? file_name : cp + 1;
+       fprintf(composition_file,
+                       "#%s; name=\"%s\" <> [%s] {attachment} %s\n",
+                       content_type, cp, cp, file_name);
 
        return;
 }
@@ -647,63 +599,39 @@ static int
 sendaux(char **vec, int vecp, char *drft, struct stat *st)
 {
        pid_t child_id;
-       int status, fd;
+       int status;
        char backup[BUFSIZ];
 
-       /*
-       ** fd collects the output of spost, and is used for the
-       ** failure notice if we need to send one in alert().
-       */
-       fd = pushsw ? tmp_fd() : NOTOK;
-
        vec[vecp++] = drft;
        if (distfile && distout(drft, distfile, backup) == NOTOK) {
-               done(1);
+               return DONE;
        }
        vec[vecp] = NULL;
 
        switch (child_id = fork()) {
        case -1:
                /* oops -- fork error */
-               adios("fork", "unable to");
-               break;  /* NOT REACHED */
+               advise("fork", "unable to");
+               return DONE;
 
        case 0:
-               /*
-               ** child process -- send it
-               **
-               ** If fd is ok, then we are pushing and fd points to temp
-               ** file, so capture anything on stdout and stderr there.
-               */
-               if (fd != NOTOK) {
-                       dup2(fd, fileno(stdout));
-                       dup2(fd, fileno(stderr));
-                       close(fd);
-               }
+               /* child process -- send it */
                execvp(*vec, vec);
                fprintf(stderr, "unable to exec ");
                perror(*vec);
-               _exit(-1);
+               _exit(EX_OSERR);
                break;  /* NOT REACHED */
 
        default:
                /* parent process -- wait for it */
-               if ((status = pidwait(child_id, NOTOK)) == OK) {
+               status = pidwait(child_id, NOTOK);
+               if (WIFEXITED(status) && WEXITSTATUS(status) == EX_OK) {
                        if (annotext) {
                                anno(st);
                        }
                } else {
-                       /*
-                       ** If spost failed, and we have good fd (which
-                       ** means we pushed), then mail error message
-                       ** (and possibly the draft) back to the user.
-                       */
-                       if (fd != NOTOK) {
-                               alert(drft, fd);
-                               close(fd);
-                       } else {
-                               advise(NULL, "message not delivered to anyone");
-                       }
+                       /* spost failed */
+                       advise(NULL, "%s", strexit(status));
                        if (distfile) {
                                unlink(drft);
                                if (rename(backup, drft) == NOTOK) {
@@ -712,90 +640,9 @@ sendaux(char **vec, int vecp, char *drft, struct stat *st)
                                }
                        }
                }
-               break;
        }
 
-       return status;
-}
-
-
-/*
-** Mail error notification (and possibly a copy of the
-** message) back to the user, using mhmail(1).
-*/
-static void
-alert(char *file, int out)
-{
-       pid_t child_id;
-       int in;
-       char buf[BUFSIZ];
-
-       switch (child_id = fork()) {
-       case NOTOK:
-               /* oops -- fork error */
-               advise("fork", "unable to");
-
-       case OK:
-               /* child process -- send it */
-               SIGNAL(SIGHUP, SIG_IGN);
-               SIGNAL(SIGINT, SIG_IGN);
-               SIGNAL(SIGQUIT, SIG_IGN);
-               SIGNAL(SIGTERM, SIG_IGN);
-               if (forwsw) {
-                       if ((in = open(file, O_RDONLY)) == NOTOK) {
-                               admonish(file, "unable to re-open");
-                       } else {
-                               lseek(out, (off_t) 0, SEEK_END);
-                               strncpy(buf, "\nMessage not delivered to anyone.\n", sizeof(buf));
-                               write(out, buf, strlen(buf));
-                               strncpy(buf, "\n------- Unsent Draft\n\n", sizeof(buf));
-                               write(out, buf, strlen(buf));
-                               cpydgst(in, out, file, "temporary file");
-                               close(in);
-                               strncpy(buf, "\n------- End of Unsent Draft\n", sizeof(buf));
-                               write(out, buf, strlen(buf));
-                               if (rename(file, strncpy(buf, m_backup(file), sizeof(buf))) == NOTOK) {
-                                       admonish(buf, "unable to rename %s to", file);
-                               }
-                       }
-               }
-               lseek(out, (off_t) 0, SEEK_SET);
-               dup2(out, fileno(stdin));
-               close(out);
-               /* create subject for error notification */
-               snprintf(buf, sizeof(buf), "send failed on %s",
-                               forwsw ? "enclosed draft" : file);
-               execlp("mhmail", "mhmail", getusername(),
-                               "-subject", buf, NULL);
-               fprintf(stderr, "unable to exec ");
-               perror("mhmail");
-               _exit(-1);
-
-       default:  /* no waiting... */
-               break;
-       }
-}
-
-
-static int
-tmp_fd(void)
-{
-       int fd;
-       char *tfile = NULL;
-
-       tfile = m_mktemp2(NULL, invo_name, &fd, NULL);
-       if (tfile == NULL) return NOTOK;
-       fchmod(fd, 0600);
-
-       if (debugsw) {
-               advise(NULL, "temporary file %s selected", tfile);
-       } else {
-               if (unlink(tfile) == NOTOK) {
-                       advise(tfile, "unable to remove");
-               }
-       }
-
-       return fd;
+       return status ? NOTOK : status;
 }
 
 
@@ -805,6 +652,9 @@ anno(struct stat *st)
        struct stat st2;
        char *msgs, *folder;
        char buf[BUFSIZ];
+       char *vec[MAXARGS];
+       int vecp = 0;
+       char *cp, *dp;
 
        if (altmsg && (stat(altmsg, &st2) == NOTOK ||
                        st->st_mtime != st2.st_mtime ||
@@ -832,18 +682,45 @@ anno(struct stat *st)
                advise(NULL, "annotate as `%s': %s %s", annotext,
                                folder, msgs);
        }
-       snprintf(buf, sizeof buf, "anno -comp '%s' '+%s' %s",
-                       annotext, folder, msgs);
-       if (system(buf) != 0) {
+       vec[vecp++] = "anno";
+       vec[vecp++] = "-comp";
+       vec[vecp++] = annotext;
+       snprintf(buf, sizeof buf, "+%s", folder);
+       vec[vecp++] = buf;
+
+       while (isspace(*msgs)) {
+               msgs++;
+       }
+       for (cp=dp=msgs; *cp; cp++) {
+               if (isspace(*cp)) {
+                       while (isspace(*cp)) {
+                               *cp++ = '\0';
+                       }
+                       vec[vecp++] = dp;
+                       dp = cp;
+               }
+       }
+       vec[vecp++] = dp;
+       vec[vecp] = NULL;
+       if (execprog(*vec, vec) != 0) {
                advise(NULL, "unable to annotate");
        }
 }
 
 
-static void
-armed_done(int status)
+char*
+strexit(int status)
 {
-       longjmp(env, status ? status : NOTOK);
-
-       exit(status);
+       if (WIFSIGNALED(status)) {
+               return "spost or sendmail killed by signal";
+       }
+       if (!WIFEXITED(status)) {
+               return "message not delivered to anyone";
+       }
+       switch (WEXITSTATUS(status)) {
+       case EX_TEMPFAIL:
+               return "Temporary error, maybe the MTA has queued the message";
+       default:
+               return "message not delivered to anyone";
+       }
 }