]> andersk Git - openssh.git/blobdiff - serverloop.c
- markus@cvs.openbsd.org 2001/12/19 16:09:39
[openssh.git] / serverloop.c
index 2eb8603d1565092638603371521c8875d2dd1b70..c876dc0cae7e5886c808d829df3d1b5f6043c178 100644 (file)
@@ -35,7 +35,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: serverloop.c,v 1.71 2001/06/25 08:25:39 markus Exp $");
+RCSID("$OpenBSD: serverloop.c,v 1.87 2001/12/19 16:09:39 markus Exp $");
 
 #include "xmalloc.h"
 #include "packet.h"
@@ -59,6 +59,7 @@ extern ServerOptions options;
 
 /* XXX */
 extern Kex *xxx_kex;
+static Authctxt *xxx_authctxt;
 
 static Buffer stdin_buffer;    /* Buffer for stdin data. */
 static Buffer stdout_buffer;   /* Buffer for stdout data. */
@@ -79,18 +80,62 @@ static int connection_in;   /* Connection to client (input). */
 static int connection_out;     /* Connection to client (output). */
 static int connection_closed = 0;      /* Connection to client closed. */
 static u_int buffer_high;      /* "Soft" max buffer size. */
+static int client_alive_timeouts = 0;
 
 /*
  * This SIGCHLD kludge is used to detect when the child exits.  The server
  * will exit after that, as soon as forwarded connections have terminated.
  */
 
-static volatile int child_terminated;  /* The child has terminated. */
+static volatile sig_atomic_t child_terminated = 0;     /* The child has terminated. */
 
 /* prototypes */
 static void server_init_dispatch(void);
 
-int client_alive_timeouts = 0;
+/*
+ * we write to this pipe if a SIGCHLD is caught in order to avoid
+ * the race between select() and child_terminated
+ */
+static int notify_pipe[2];
+static void
+notify_setup(void)
+{
+       if (pipe(notify_pipe) < 0) {
+               error("pipe(notify_pipe) failed %s", strerror(errno));
+       } else if ((fcntl(notify_pipe[0], F_SETFD, 1) == -1) ||
+           (fcntl(notify_pipe[1], F_SETFD, 1) == -1)) {
+               error("fcntl(notify_pipe, F_SETFD) failed %s", strerror(errno));
+               close(notify_pipe[0]);
+               close(notify_pipe[1]);
+       } else {
+               set_nonblock(notify_pipe[0]);
+               set_nonblock(notify_pipe[1]);
+               return;
+       }
+       notify_pipe[0] = -1;    /* read end */
+       notify_pipe[1] = -1;    /* write end */
+}
+static void
+notify_parent(void)
+{
+       if (notify_pipe[1] != -1)
+               write(notify_pipe[1], "", 1);
+}
+static void
+notify_prepare(fd_set *readset)
+{
+       if (notify_pipe[0] != -1)
+               FD_SET(notify_pipe[0], readset);
+}
+static void
+notify_done(fd_set *readset)
+{
+       char c;
+
+       if (notify_pipe[0] != -1 && FD_ISSET(notify_pipe[0], readset))
+               while (read(notify_pipe[0], &c, 1) != -1)
+                       debug2("notify_done: reading");
+}
 
 static void
 sigchld_handler(int sig)
@@ -99,6 +144,7 @@ sigchld_handler(int sig)
        debug("Received SIGCHLD.");
        child_terminated = 1;
        mysignal(SIGCHLD, sigchld_handler);
+       notify_parent();
        errno = save_errno;
 }
 
@@ -160,6 +206,26 @@ make_packets_from_stdout_data(void)
        }
 }
 
+static void
+client_alive_check(void)
+{
+       int id;
+
+       /* timeout, check to see how many we have had */
+       if (++client_alive_timeouts > options.client_alive_count_max)
+               packet_disconnect("Timeout, your session not responding.");
+
+       id = channel_find_open();
+       if (id == -1)
+               packet_disconnect("No open channels after timeout!");
+       /*
+        * send a bogus channel request with "wantreply",
+        * we should get back a failure
+        */
+       channel_request_start(id, "keepalive@openssh.com", 1);
+       packet_send();
+}
+
 /*
  * Sleep in select() until we can do something.  This will initialize the
  * select masks.  Upon return, the masks will indicate which descriptors
@@ -168,36 +234,35 @@ make_packets_from_stdout_data(void)
  */
 static void
 wait_until_can_do_something(fd_set **readsetp, fd_set **writesetp, int *maxfdp,
-    u_int max_time_milliseconds)
+    int *nallocp, u_int max_time_milliseconds)
 {
        struct timeval tv, *tvp;
        int ret;
        int client_alive_scheduled = 0;
 
        /*
-        * if using client_alive, set the max timeout accordingly, 
+        * if using client_alive, set the max timeout accordingly,
         * and indicate that this particular timeout was for client
         * alive by setting the client_alive_scheduled flag.
         *
         * this could be randomized somewhat to make traffic
-        * analysis more difficult, but we're not doing it yet.  
+        * analysis more difficult, but we're not doing it yet.
         */
-       if (max_time_milliseconds == 0 && options.client_alive_interval) {
+       if (compat20 &&
+           max_time_milliseconds == 0 && options.client_alive_interval) {
                client_alive_scheduled = 1;
                max_time_milliseconds = options.client_alive_interval * 1000;
-       } else 
-               client_alive_scheduled = 0;
-
-       /* When select fails we restart from here. */
-retry_select:
+       }
 
        /* Allocate and update select() masks for channel descriptors. */
-       channel_prepare_select(readsetp, writesetp, maxfdp, 0);
+       channel_prepare_select(readsetp, writesetp, maxfdp, nallocp, 0);
 
        if (compat20) {
+#if 0
                /* wrong: bad condition XXX */
                if (channel_not_very_much_buffered_data())
-                       FD_SET(connection_in, *readsetp);
+#endif
+               FD_SET(connection_in, *readsetp);
        } else {
                /*
                 * Read packets from the client unless we have too much
@@ -223,6 +288,7 @@ retry_select:
                if (fdin != -1 && buffer_len(&stdin_buffer) > 0)
                        FD_SET(fdin, *writesetp);
        }
+       notify_prepare(*readsetp);
 
        /*
         * If we have buffered packet data going to the client, mark that
@@ -247,41 +313,21 @@ retry_select:
                tvp = &tv;
        }
        if (tvp!=NULL)
-               debug3("tvp!=NULL kid %d mili %d", child_terminated, max_time_milliseconds);
+               debug3("tvp!=NULL kid %d mili %d", (int) child_terminated,
+                   max_time_milliseconds);
 
        /* Wait for something to happen, or the timeout to expire. */
        ret = select((*maxfdp)+1, *readsetp, *writesetp, NULL, tvp);
 
        if (ret == -1) {
+               memset(*readsetp, 0, *nallocp);
+               memset(*writesetp, 0, *nallocp);
                if (errno != EINTR)
                        error("select: %.100s", strerror(errno));
-               else
-                       goto retry_select;
-       }
-       if (ret == 0 && client_alive_scheduled) {
-               /* timeout, check to see how many we have had */
-               client_alive_timeouts++;
+       } else if (ret == 0 && client_alive_scheduled)
+               client_alive_check();
 
-               if (client_alive_timeouts > options.client_alive_count_max ) {
-                       packet_disconnect(
-                               "Timeout, your session not responding.");
-               } else {
-                       /*
-                        * send a bogus channel request with "wantreply" 
-                        * we should get back a failure
-                        */
-                       int id;
-                       
-                       id = channel_find_open();
-                       if (id != -1) {
-                               channel_request_start(id,
-                                 "keepalive@openssh.com", 1);
-                               packet_send();
-                       } else 
-                               packet_disconnect(
-                                       "No open channels after timeout!");
-               }
-       } 
+       notify_done(*readsetp);
 }
 
 /*
@@ -348,12 +394,15 @@ static void
 process_output(fd_set * writeset)
 {
        struct termios tio;
+       u_char *data;
+       u_int dlen;
        int len;
 
        /* Write buffered data to program stdin. */
        if (!compat20 && fdin != -1 && FD_ISSET(fdin, writeset)) {
-               len = write(fdin, buffer_ptr(&stdin_buffer),
-                   buffer_len(&stdin_buffer));
+               data = buffer_ptr(&stdin_buffer);
+               dlen = buffer_len(&stdin_buffer);
+               len = write(fdin, data, dlen);
                if (len < 0 && (errno == EINTR || errno == EAGAIN)) {
                        /* do nothing */
                } else if (len <= 0) {
@@ -368,7 +417,8 @@ process_output(fd_set * writeset)
                        fdin = -1;
                } else {
                        /* Successful write. */
-                       if (fdin_is_tty && tcgetattr(fdin, &tio) == 0 &&
+                       if (fdin_is_tty && dlen >= 1 && data[0] != '\r' &&
+                           tcgetattr(fdin, &tio) == 0 &&
                            !(tio.c_lflag & ECHO) && (tio.c_lflag & ICANON)) {
                                /*
                                 * Simulate echo to reduce the impact of
@@ -434,7 +484,7 @@ void
 server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
 {
        fd_set *readset = NULL, *writeset = NULL;
-       int max_fd;
+       int max_fd = 0, nalloc = 0;
        int wait_status;        /* Status returned by wait(). */
        pid_t wait_pid;         /* pid returned by wait(). */
        int waiting_termination = 0;    /* Have displayed waiting close message. */
@@ -447,7 +497,7 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
 
        /* Initialize the SIGCHLD kludge. */
        child_terminated = 0;
-       signal(SIGCHLD, sigchld_handler);
+       mysignal(SIGCHLD, sigchld_handler);
 
        /* Initialize our global variables. */
        fdin = fdin_arg;
@@ -467,6 +517,8 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
        connection_in = packet_get_connection_in();
        connection_out = packet_get_connection_out();
 
+       notify_setup();
+
        previous_stdout_buffer_bytes = 0;
 
        /* Set approximate I/O buffer size. */
@@ -475,12 +527,14 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
        else
                buffer_high = 64 * 1024;
 
+#if 0
        /* Initialize max_fd to the maximum of the known file descriptors. */
-       max_fd = MAX(fdin, fdout);
+       max_fd = MAX(connection_in, connection_out);
+       max_fd = MAX(max_fd, fdin);
+       max_fd = MAX(max_fd, fdout);
        if (fderr != -1)
                max_fd = MAX(max_fd, fderr);
-       max_fd = MAX(max_fd, connection_in);
-       max_fd = MAX(max_fd, connection_out);
+#endif
 
        /* Initialize Initialize buffers. */
        buffer_init(&stdin_buffer);
@@ -566,9 +620,15 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
                                xfree(cp);
                        }
                }
+               max_fd = MAX(connection_in, connection_out);
+               max_fd = MAX(max_fd, fdin);
+               max_fd = MAX(max_fd, fdout);
+               max_fd = MAX(max_fd, fderr);
+               max_fd = MAX(max_fd, notify_pipe[0]);
+
                /* Sleep in select() until we can do something. */
                wait_until_can_do_something(&readset, &writeset, &max_fd,
-                   max_time_milliseconds);
+                   &nalloc, max_time_milliseconds);
 
                /* Process any channel events. */
                channel_after_select(readset, writeset);
@@ -590,7 +650,7 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
        drain_output();
 
        debug("End of interactive session; stdin %ld, stdout (read %ld, sent %ld), stderr %ld bytes.",
-             stdin_bytes, fdout_bytes, stdout_bytes, stderr_bytes);
+           stdin_bytes, fdout_bytes, stdout_bytes, stderr_bytes);
 
        /* Free and clear the buffers. */
        buffer_free(&stdin_buffer);
@@ -613,7 +673,7 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
        channel_free_all();
 
        /* We no longer want our SIGCHLD handler to be called. */
-       signal(SIGCHLD, SIG_DFL);
+       mysignal(SIGCHLD, SIG_DFL);
 
        wait_pid = waitpid(-1, &wait_status, child_terminated ? WNOHANG : 0);
        if (wait_pid == -1)
@@ -657,12 +717,30 @@ server_loop(pid_t pid, int fdin_arg, int fdout_arg, int fderr_arg)
        /* NOTREACHED */
 }
 
+static void
+collect_children(void)
+{
+       pid_t pid;
+       sigset_t oset, nset;
+       int status;
+
+       /* block SIGCHLD while we check for dead children */
+       sigemptyset(&nset);
+       sigaddset(&nset, SIGCHLD);
+       sigprocmask(SIG_BLOCK, &nset, &oset);
+       if (child_terminated) {
+               while ((pid = waitpid(-1, &status, WNOHANG)) > 0)
+                       session_close_by_pid(pid, status);
+               child_terminated = 0;
+       }
+       sigprocmask(SIG_SETMASK, &oset, NULL);
+}
+
 void
-server_loop2(void)
+server_loop2(Authctxt *authctxt)
 {
        fd_set *readset = NULL, *writeset = NULL;
-       int rekeying = 0, max_fd, status;
-       pid_t pid;
+       int rekeying = 0, max_fd, nalloc = 0;
 
        debug("Entering interactive session for SSH2.");
 
@@ -671,7 +749,12 @@ server_loop2(void)
        connection_in = packet_get_connection_in();
        connection_out = packet_get_connection_out();
 
+       notify_setup();
+
        max_fd = MAX(connection_in, connection_out);
+       max_fd = MAX(max_fd, notify_pipe[0]);
+
+       xxx_authctxt = authctxt;
 
        server_init_dispatch();
 
@@ -683,12 +766,9 @@ server_loop2(void)
                if (!rekeying && packet_not_very_much_data_to_write())
                        channel_output_poll();
                wait_until_can_do_something(&readset, &writeset, &max_fd,
-                   rekeying);
-               if (child_terminated) {
-                       while ((pid = waitpid(-1, &status, WNOHANG)) > 0)
-                               session_close_by_pid(pid, status);
-                       child_terminated = 0;
-               }
+                   &nalloc, 0);
+
+               collect_children();
                if (!rekeying)
                        channel_after_select(readset, writeset);
                process_input(readset);
@@ -696,28 +776,30 @@ server_loop2(void)
                        break;
                process_output(writeset);
        }
+       collect_children();
+
        if (readset)
                xfree(readset);
        if (writeset)
                xfree(writeset);
 
+       /* free all channels, no more reads and writes */
        channel_free_all();
 
-       signal(SIGCHLD, SIG_DFL);
-       while ((pid = waitpid(-1, &status, WNOHANG)) > 0)
-               session_close_by_pid(pid, status);
+       /* free remaining sessions, e.g. remove wtmp entries */
+       session_destroy_all();
 }
 
 static void
 server_input_channel_failure(int type, int plen, void *ctxt)
 {
        debug("Got CHANNEL_FAILURE for keepalive");
-       /* 
+       /*
         * reset timeout, since we got a sane answer from the client.
         * even if this was generated by something other than
         * the bogus CHANNEL_REQUEST we send for keepalives.
         */
-       client_alive_timeouts = 0; 
+       client_alive_timeouts = 0;
 }
 
 
@@ -818,7 +900,7 @@ server_request_session(char *ctype)
                error("server_request_session: channel_new failed");
                return NULL;
        }
-       if (session_open(c->self) != 1) {
+       if (session_open(xxx_authctxt, c->self) != 1) {
                debug("session open failed, free channel %d", c->self);
                channel_free(c);
                return NULL;
@@ -982,4 +1064,3 @@ server_init_dispatch(void)
        else
                server_init_dispatch_15();
 }
-
This page took 0.082328 seconds and 4 git commands to generate.