tftp.c revision 8b23a6c7e1aee255004dd19098d4c2462b61b849
18b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project/* 28b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * tftp.c - a simple, read-only tftp server for qemu 38b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 48b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * Copyright (c) 2004 Magnus Damm <damm@opensource.se> 58b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 68b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * Permission is hereby granted, free of charge, to any person obtaining a copy 78b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * of this software and associated documentation files (the "Software"), to deal 88b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * in the Software without restriction, including without limitation the rights 98b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * copies of the Software, and to permit persons to whom the Software is 118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * furnished to do so, subject to the following conditions: 128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * The above copyright notice and this permission notice shall be included in 148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * all copies or substantial portions of the Software. 158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * 168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project * THE SOFTWARE. 238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project */ 248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project#include <slirp.h> 268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project#include <fcntl.h> 278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project#include <sys/stat.h> 288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstruct tftp_session { 308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int in_use; 318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project unsigned char filename[TFTP_FILENAME_MAX]; 328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project uint32_t client_ip; 348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project uint16_t client_port; 358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int timestamp; 378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project}; 388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstruct tftp_session tftp_sessions[TFTP_SESSIONS_MAX]; 408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectconst char *tftp_prefix; 428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_session_update(struct tftp_session *spt) 448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->timestamp = curtime; 468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->in_use = 1; 478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_session_terminate(struct tftp_session *spt) 508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->in_use = 0; 528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_session_allocate(struct tftp_t *tp) 558b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_session *spt; 578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int k; 588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project for (k = 0; k < TFTP_SESSIONS_MAX; k++) { 608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt = &tftp_sessions[k]; 618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!spt->in_use) 638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project goto found; 648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* sessions time out after 5 inactive seconds */ 668b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if ((int)(curtime - spt->timestamp) > 5000) 678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project goto found; 688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project found: 738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(spt, 0, sizeof(*spt)); 748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip = ip_geth(tp->ip.ip_src); 758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port = port_geth(tp->udp.uh_sport); 768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_update(spt); 788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 798b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return k; 808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 828b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_session_find(struct tftp_t *tp) 838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_session *spt; 858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int k; 868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project for (k = 0; k < TFTP_SESSIONS_MAX; k++) { 888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt = &tftp_sessions[k]; 898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 908b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (spt->in_use) { 918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (spt->client_ip == ip_geth(tp->ip.ip_src)) { 928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (spt->client_port == port_geth(tp->udp.uh_sport)) { 938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return k; 948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 1018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_read_data(struct tftp_session *spt, u_int16_t block_nr, 1038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int8_t *buf, int len) 1048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 1058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int fd; 1068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int bytes_read = 0; 1078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project char buffer[1024]; 1088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int n; 1098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project n = snprintf(buffer, sizeof(buffer), "%s/%s", 1118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_prefix, spt->filename); 1128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (n >= sizeof(buffer)) 1138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project fd = open(buffer, O_RDONLY | O_BINARY); 1168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (fd < 0) { 1188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 1208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (len) { 1228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project lseek(fd, block_nr * 512, SEEK_SET); 1238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project bytes_read = read(fd, buf, len); 1258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 1268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project close(fd); 1288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return bytes_read; 1308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 1318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_send_oack(struct tftp_session *spt, 1338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project const char *key, uint32_t value, 1348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *recv_tp) 1358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 1368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project SockAddress saddr, daddr; 1378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project MBuf m; 1388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp; 1398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int n = 0; 1408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m = mbuf_alloc(); 1428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!m) 1448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(m->m_data, 0, m->m_size); 1478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += if_maxlinkhdr; 1498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp = (void *)m->m_data; 1508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += sizeof(struct udpiphdr); 1518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->tp_op = htons(TFTP_OACK); 1538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project n += sprintf((char*)tp->x.tp_buf + n, "%s", key) + 1; 1548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project n += sprintf((char*)tp->x.tp_buf + n, "%u", value) + 1; 1558b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &saddr, 1578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ip_geth(recv_tp->ip.ip_dst), 1588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project port_geth(recv_tp->udp.uh_dport) ); 1598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &daddr, 1618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip, 1628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port ); 1638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_len = sizeof(struct tftp_t) - 514 + n - 1658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sizeof(struct ip) - sizeof(struct udphdr); 1668b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project udp_output2_(NULL, m, &saddr, &daddr, IPTOS_LOWDELAY); 1678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return 0; 1698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 1708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_send_error(struct tftp_session *spt, 1748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int16_t errorcode, const char *msg, 1758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *recv_tp) 1768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 1778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project SockAddress saddr, daddr; 1788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project MBuf m; 1798b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp; 1808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int nobytes; 1818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1828b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m = mbuf_alloc(); 1838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!m) { 1858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 1868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 1878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(m->m_data, 0, m->m_size); 1898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1908b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += if_maxlinkhdr; 1918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp = (void *)m->m_data; 1928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += sizeof(struct udpiphdr); 1938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->tp_op = htons(TFTP_ERROR); 1958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->x.tp_error.tp_error_code = htons(errorcode); 1968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project strcpy((char*)tp->x.tp_error.tp_msg, msg); 1978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 1988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &saddr, 1998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ip_geth(recv_tp->ip.ip_dst), 2008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project port_geth(recv_tp->udp.uh_dport) ); 2018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &daddr, 2038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip, 2048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port ); 2058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project nobytes = 2; 2078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_len = sizeof(struct tftp_t) - 514 + 3 + strlen(msg) - 2098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sizeof(struct ip) - sizeof(struct udphdr); 2108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project udp_output2_(NULL, m, &saddr, &daddr, IPTOS_LOWDELAY); 2128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_terminate(spt); 2148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return 0; 2168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 2178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic int tftp_send_data(struct tftp_session *spt, 2198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int16_t block_nr, 2208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *recv_tp) 2218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 2228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project SockAddress saddr, daddr; 2238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project MBuf m; 2248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp; 2258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int nobytes; 2268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (block_nr < 1) { 2288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 2298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m = mbuf_alloc(); 2328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!m) { 2348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 2358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project memset(m->m_data, 0, m->m_size); 2388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += if_maxlinkhdr; 2408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp = (void *)m->m_data; 2418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_data += sizeof(struct udpiphdr); 2428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->tp_op = htons(TFTP_DATA); 2448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp->x.tp_data.tp_block_nr = htons(block_nr); 2458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &saddr, 2478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ip_geth(recv_tp->ip.ip_dst), 2488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project port_geth(recv_tp->udp.uh_dport) ); 2498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sock_address_init_inet( &daddr, 2518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_ip, 2528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt->client_port ); 2538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project nobytes = tftp_read_data(spt, block_nr - 1, tp->x.tp_data.tp_buf, 512); 2558b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (nobytes < 0) { 2578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project mbuf_free(m); 2588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* send "file not found" error back */ 2608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 1, "File not found", tp); 2628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return -1; 2648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2668b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project m->m_len = sizeof(struct tftp_t) - (512 - nobytes) - 2678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project sizeof(struct ip) - sizeof(struct udphdr); 2688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project udp_output2_(NULL, m, &saddr, &daddr, IPTOS_LOWDELAY); 2708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (nobytes == 512) { 2728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_update(spt); 2738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project else { 2758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_session_terminate(spt); 2768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return 0; 2798b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 2808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_handle_rrq(struct tftp_t *tp, int pktlen) 2828b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 2838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_session *spt; 2848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int s, k, n; 2858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project u_int8_t *src, *dst; 2868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project s = tftp_session_allocate(tp); 2888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (s < 0) { 2908b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 2918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 2928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project spt = &tftp_sessions[s]; 2948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project src = tp->x.tp_buf; 2968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project dst = spt->filename; 2978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project n = pktlen - ((uint8_t *)&tp->x.tp_buf[0] - (uint8_t *)tp); 2988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 2998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* get name */ 3008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project for (k = 0; k < n; k++) { 3028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (k < TFTP_FILENAME_MAX) { 3038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project dst[k] = src[k]; 3048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project else { 3068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (src[k] == '\0') { 3108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project break; 3118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (k >= n) { 3158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k++; 3198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* check mode */ 3218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if ((n - k) < 6) { 3228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (memcmp(&src[k], "octet\0", 6) != 0) { 3268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 4, "Unsupported transfer mode", tp); 3278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k += 6; /* skipping octet */ 3318b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3328b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* do sanity checks on the filename */ 3338b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3348b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if ((spt->filename[0] != '/') 3358b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project || (spt->filename[strlen((const char*)spt->filename) - 1] == '/') 3368b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project || strstr((const char*)spt->filename, "/../")) { 3378b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3388b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3398b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3408b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3418b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* only allow exported prefixes */ 3428b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3438b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (!tftp_prefix) { 3448b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3458b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3468b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3478b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3488b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project /* check if the file exists */ 3498b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3508b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (tftp_read_data(spt, 0, spt->filename, 0) < 0) { 3518b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 1, "File not found", tp); 3528b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3538b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3548b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3558b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (src[n - 1] != 0) { 3568b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3578b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3588b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3598b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3608b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project while (k < n) { 3618b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project const char *key, *value; 3628b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3638b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project key = (const char*)src + k; 3648b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k += strlen(key) + 1; 3658b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3668b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (k >= n) { 3678b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 2, "Access violation", tp); 3688b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3698b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3708b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3718b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project value = (const char*)src + k; 3728b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project k += strlen(value) + 1; 3738b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3748b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (strcmp(key, "tsize") == 0) { 3758b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int tsize = atoi(value); 3768b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct stat stat_p; 3778b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3788b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (tsize == 0 && tftp_prefix) { 3798b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project char buffer[1024]; 3808b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int len; 3818b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3828b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project len = snprintf(buffer, sizeof(buffer), "%s/%s", 3838b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_prefix, spt->filename); 3848b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3858b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (stat(buffer, &stat_p) == 0) 3868b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tsize = stat_p.st_size; 3878b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project else { 3888b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_error(spt, 1, "File not found", tp); 3898b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 3908b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3918b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3928b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3938b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_oack(spt, "tsize", tsize, tp); 3948b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3958b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 3968b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 3978b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_send_data(spt, 1, tp); 3988b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 3998b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4008b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectstatic void tftp_handle_ack(struct tftp_t *tp, int pktlen) 4018b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 4028b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project int s; 4038b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4048b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project s = tftp_session_find(tp); 4058b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4068b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (s < 0) { 4078b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 4088b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 4098b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4108b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project if (tftp_send_data(&tftp_sessions[s], 4118b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project ntohs(tp->x.tp_data.tp_block_nr) + 1, 4128b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tp) < 0) { 4138b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project return; 4148b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 4158b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 4168b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4178b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Projectvoid tftp_input(MBuf m) 4188b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project{ 4198b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project struct tftp_t *tp = (struct tftp_t *)m->m_data; 4208b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4218b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project switch(ntohs(tp->tp_op)) { 4228b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project case TFTP_RRQ: 4238b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_handle_rrq(tp, m->m_len); 4248b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project break; 4258b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project 4268b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project case TFTP_ACK: 4278b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project tftp_handle_ack(tp, m->m_len); 4288b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project break; 4298b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project } 4308b23a6c7e1aee255004dd19098d4c2462b61b849The Android Open Source Project} 431