18b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project/* 28b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * tftp.c - a simple, read-only tftp server for qemu 38b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 48b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * Copyright (c) 2004 Magnus Damm <damm@opensource.se> 58b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 68b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * Permission is hereby granted, free of charge, to any person obtaining a copy 78b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * of this software and associated documentation files (the "Software"), to deal 88b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * in the Software without restriction, including without limitation the rights 98b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * copies of the Software, and to permit persons to whom the Software is 118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * furnished to do so, subject to the following conditions: 128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * The above copyright notice and this permission notice shall be included in 148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * all copies or substantial portions of the Software. 158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * THE SOFTWARE. 238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project */ 248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project#include <slirp.h> 265d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner#include "qemu-common.h" // for pstrcpy 278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstruct tftp_session { 298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int in_use; 308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project unsigned char filename[TFTP_FILENAME_MAX]; 318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project uint32_t client_ip; 338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project uint16_t client_port; 348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int timestamp; 368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project}; 378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 385d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turnerstatic struct tftp_session tftp_sessions[TFTP_SESSIONS_MAX]; 398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectconst char *tftp_prefix; 418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_session_update(struct tftp_session *spt) 438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->timestamp = curtime; 458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->in_use = 1; 468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_session_terminate(struct tftp_session *spt) 498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->in_use = 0; 518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_session_allocate(struct tftp_t *tp) 548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 558b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_session *spt; 568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int k; 578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project for (k = 0; k < TFTP_SESSIONS_MAX; k++) { 598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt = &tftp_sessions[k]; 608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!spt->in_use) 628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project goto found; 638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* sessions time out after 5 inactive seconds */ 658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if ((int)(curtime - spt->timestamp) > 5000) 668b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project goto found; 678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project found: 728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(spt, 0, sizeof(*spt)); 738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip = ip_geth(tp->ip.ip_src); 748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port = port_geth(tp->udp.uh_sport); 758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_update(spt); 778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return k; 798b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_session_find(struct tftp_t *tp) 828b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_session *spt; 848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int k; 858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project for (k = 0; k < TFTP_SESSIONS_MAX; k++) { 878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt = &tftp_sessions[k]; 888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (spt->in_use) { 908b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (spt->client_ip == ip_geth(tp->ip.ip_src)) { 915d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner if (spt->client_port == port_geth(tp->udp.uh_sport)) { 925d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner return k; 935d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner } 948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 1008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_read_data(struct tftp_session *spt, u_int16_t block_nr, 1028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int8_t *buf, int len) 1038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 1048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int fd; 1058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int bytes_read = 0; 1068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project char buffer[1024]; 1078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int n; 1088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project n = snprintf(buffer, sizeof(buffer), "%s/%s", 1105d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner tftp_prefix, spt->filename); 1118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (n >= sizeof(buffer)) 1125d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner return -1; 1138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project fd = open(buffer, O_RDONLY | O_BINARY); 1158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (fd < 0) { 1178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 1198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (len) { 1218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project lseek(fd, block_nr * 512, SEEK_SET); 1228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project bytes_read = read(fd, buf, len); 1248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 1258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project close(fd); 1278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return bytes_read; 1298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 1308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_send_oack(struct tftp_session *spt, 1328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project const char *key, uint32_t value, 1338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *recv_tp) 1348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 1358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project SockAddress saddr, daddr; 1365d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner struct mbuf *m; 1378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp; 1388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int n = 0; 1398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1405d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m = m_get(); 1418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!m) 1435d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner return -1; 1448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(m->m_data, 0, m->m_size); 1468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1475d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m->m_data += IF_MAXLINKHDR; 1488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp = (void *)m->m_data; 1498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += sizeof(struct udpiphdr); 1508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->tp_op = htons(TFTP_OACK); 1525d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner n += snprintf((char *)tp->x.tp_buf + n, sizeof(tp->x.tp_buf) - n, "%s", 1535d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner key) + 1; 1545d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner n += snprintf((char *)tp->x.tp_buf + n, sizeof(tp->x.tp_buf) - n, "%u", 1555d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner value) + 1; 1568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &saddr, 1588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ip_geth(recv_tp->ip.ip_dst), 1598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project port_geth(recv_tp->udp.uh_dport) ); 1608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &daddr, 1628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip, 1638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port ); 1648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_len = sizeof(struct tftp_t) - 514 + n - 1665d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner sizeof(struct ip) - sizeof(struct udphdr); 1678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project udp_output2_(NULL, m, &saddr, &daddr, IPTOS_LOWDELAY); 1688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return 0; 1708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 1718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_send_error(struct tftp_session *spt, 1758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int16_t errorcode, const char *msg, 1768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *recv_tp) 1778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 1788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project SockAddress saddr, daddr; 1795d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner struct mbuf *m; 1808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp; 1818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1825d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m = m_get(); 1838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!m) { 1858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 1878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(m->m_data, 0, m->m_size); 1898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1905d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m->m_data += IF_MAXLINKHDR; 1918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp = (void *)m->m_data; 1928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += sizeof(struct udpiphdr); 1938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->tp_op = htons(TFTP_ERROR); 1958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->x.tp_error.tp_error_code = htons(errorcode); 1965d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner pstrcpy((char *)tp->x.tp_error.tp_msg, sizeof(tp->x.tp_error.tp_msg), msg); 1978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &saddr, 1998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ip_geth(recv_tp->ip.ip_dst), 2008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project port_geth(recv_tp->udp.uh_dport) ); 2018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &daddr, 2038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip, 2048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port ); 2058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_len = sizeof(struct tftp_t) - 514 + 3 + strlen(msg) - 2078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sizeof(struct ip) - sizeof(struct udphdr); 2088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project udp_output2_(NULL, m, &saddr, &daddr, IPTOS_LOWDELAY); 2108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_terminate(spt); 2128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return 0; 2148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 2158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_send_data(struct tftp_session *spt, 2178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int16_t block_nr, 2188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *recv_tp) 2198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 2208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project SockAddress saddr, daddr; 2215d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner struct mbuf *m; 2228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp; 2238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int nobytes; 2248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (block_nr < 1) { 2268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 2278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2295d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m = m_get(); 2308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!m) { 2328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 2338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(m->m_data, 0, m->m_size); 2368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2375d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m->m_data += IF_MAXLINKHDR; 2388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp = (void *)m->m_data; 2398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += sizeof(struct udpiphdr); 2408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->tp_op = htons(TFTP_DATA); 2428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->x.tp_data.tp_block_nr = htons(block_nr); 2438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &saddr, 2458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ip_geth(recv_tp->ip.ip_dst), 2468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project port_geth(recv_tp->udp.uh_dport) ); 2478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &daddr, 2498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip, 2508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port ); 2518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project nobytes = tftp_read_data(spt, block_nr - 1, tp->x.tp_data.tp_buf, 512); 2538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (nobytes < 0) { 2555d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner m_free(m); 2568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* send "file not found" error back */ 2588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 1, "File not found", tp); 2608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 2628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_len = sizeof(struct tftp_t) - (512 - nobytes) - 2658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sizeof(struct ip) - sizeof(struct udphdr); 2668b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project udp_output2_(NULL, m, &saddr, &daddr, IPTOS_LOWDELAY); 2688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (nobytes == 512) { 2708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_update(spt); 2718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project else { 2738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_terminate(spt); 2748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return 0; 2778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 2788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2798b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_handle_rrq(struct tftp_t *tp, int pktlen) 2808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 2818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_session *spt; 2828b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int s, k, n; 2838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int8_t *src, *dst; 2848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project s = tftp_session_allocate(tp); 2868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (s < 0) { 2888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 2898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2908b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt = &tftp_sessions[s]; 2928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project src = tp->x.tp_buf; 2948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project dst = spt->filename; 2958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project n = pktlen - ((uint8_t *)&tp->x.tp_buf[0] - (uint8_t *)tp); 2968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* get name */ 2988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project for (k = 0; k < n; k++) { 3008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (k < TFTP_FILENAME_MAX) { 3018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project dst[k] = src[k]; 3028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project else { 3048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (src[k] == '\0') { 3088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project break; 3098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (k >= n) { 3138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k++; 3178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* check mode */ 3198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if ((n - k) < 6) { 3208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (memcmp(&src[k], "octet\0", 6) != 0) { 3248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 4, "Unsupported transfer mode", tp); 3258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3285d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner k += 6; /* skipping octet */ 3298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* do sanity checks on the filename */ 3318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if ((spt->filename[0] != '/') 3335d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner || (spt->filename[strlen((char *)spt->filename) - 1] == '/') 3345d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner || strstr((char *)spt->filename, "/../")) { 3358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* only allow exported prefixes */ 3408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!tftp_prefix) { 3428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* check if the file exists */ 3478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (tftp_read_data(spt, 0, spt->filename, 0) < 0) { 3498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 1, "File not found", tp); 3508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (src[n - 1] != 0) { 3548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3558b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project while (k < n) { 3598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project const char *key, *value; 3608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3615d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner key = (char *)src + k; 3628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k += strlen(key) + 1; 3638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (k >= n) { 3655d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner tftp_send_error(spt, 2, "Access violation", tp); 3665d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner return; 3678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3695d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner value = (char *)src + k; 3708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k += strlen(value) + 1; 3718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (strcmp(key, "tsize") == 0) { 3735d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner int tsize = atoi(value); 3745d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner struct stat stat_p; 3758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3765d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner if (tsize == 0 && tftp_prefix) { 3775d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner char buffer[1024]; 3788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 379a2c14f947951612b45024095afd2210aa7368773David 'Digit' Turner snprintf(buffer, sizeof(buffer), "%s/%s", 380a2c14f947951612b45024095afd2210aa7368773David 'Digit' Turner tftp_prefix, spt->filename); 3818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3825d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner if (stat(buffer, &stat_p) == 0) 3835d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner tsize = stat_p.st_size; 3845d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner else { 3855d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner tftp_send_error(spt, 1, "File not found", tp); 3865d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner return; 3875d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner } 3885d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner } 3898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3905d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turner tftp_send_oack(spt, "tsize", tsize, tp); 3918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_data(spt, 1, tp); 3958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 3968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_handle_ack(struct tftp_t *tp, int pktlen) 3988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 3998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int s; 4008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project s = tftp_session_find(tp); 4028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (s < 0) { 4048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 4058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 4068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (tftp_send_data(&tftp_sessions[s], 4088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ntohs(tp->x.tp_data.tp_block_nr) + 1, 4098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp) < 0) { 4108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 4118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 4128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 4138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4145d8f37ad78fc66901af50c762029a501561f3b23David 'Digit' Turnervoid tftp_input(struct mbuf *m) 4158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 4168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp = (struct tftp_t *)m->m_data; 4178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project switch(ntohs(tp->tp_op)) { 4198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project case TFTP_RRQ: 4208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_handle_rrq(tp, m->m_len); 4218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project break; 4228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project case TFTP_ACK: 4248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_handle_ack(tp, m->m_len); 4258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project break; 4268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 4278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 428