/*
* Copyright (C) 2007 Tomasz Kojm <tkojm@clamav.net>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
* MA 02110-1301, USA.
*/
#if HAVE_CONFIG_H
#include "clamav-config.h"
#endif
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <time.h>
#ifndef _WIN32
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#endif
#include "mirman.h"
#include "libclamav/cltypes.h"
#include "libclamav/clamav.h"
#include "shared/output.h"
#ifndef HAVE_GETADDRINFO
#ifndef AF_INET6
#define AF_INET6 0xbeef /* foo */
#endif
#endif
#define IGNORE_LONG 3 * 86400
#define IGNORE_SHORT 6 * 3600
void
mirman_free (struct mirdat *mdat)
{
if (mdat && mdat->num)
{
free (mdat->mirtab);
mdat->num = 0;
}
}
int
mirman_read (const char *file, struct mirdat *mdat, uint8_t active)
{
struct mirdat_ip mip;
int fd, bread;
memset (mdat, 0, sizeof (struct mirdat));
if (!(mdat->active = active))
return 0;
if ((fd = open (file, O_RDONLY | O_BINARY)) == -1)
return -1;
while ((bread = read (fd, &mip, sizeof (mip))) == sizeof (mip))
{
mdat->mirtab =
(struct mirdat_ip *) realloc (mdat->mirtab,
(mdat->num + 1) * sizeof (mip));
if (!mdat->mirtab)
{
logg ("!Can't allocate memory for mdat->mirtab\n");
mirman_free (mdat);
close (fd);
return -1;
}
memcpy (&mdat->mirtab[mdat->num], &mip, sizeof (mip));
mdat->num++;
}
close (fd);
if (bread)
{
logg ("^Removing broken %s file.\n", file);
unlink (file);
mirman_free (mdat);
return -1;
}
return 0;
}
int
mirman_check (uint32_t * ip, int af, struct mirdat *mdat,
struct mirdat_ip **md)
{
unsigned int i, flevel = cl_retflevel ();
if (md)
*md = NULL;
if (!mdat->active)
return 0;
for (i = 0; i < mdat->num; i++)
{
if ((af == AF_INET && mdat->mirtab[i].ip4 == *ip)
|| (af == AF_INET6
&& !memcmp (mdat->mirtab[i].ip6, ip, 4 * sizeof (uint32_t))))
{
if (!mdat->mirtab[i].atime && !mdat->mirtab[i].ignore)
{
if (md)
*md = &mdat->mirtab[i];
return 0;
}
if (mdat->dbflevel && (mdat->dbflevel > flevel)
&& (mdat->dbflevel - flevel > 3))
if (time (NULL) - mdat->mirtab[i].atime <
(mdat->dbflevel - flevel) * 3600)
return 2;
if (mdat->mirtab[i].ignore)
{
if (!mdat->mirtab[i].atime)
return 1;
if (time (NULL) - mdat->mirtab[i].atime > IGNORE_LONG)
{
mdat->mirtab[i].ignore = 0;
if (md)
*md = &mdat->mirtab[i];
return 0;
}
else
{
if (mdat->mirtab[i].ignore == 2
&& (time (NULL) - mdat->mirtab[i].atime >
IGNORE_SHORT))
{
if (md)
*md = &mdat->mirtab[i];
return 0;
}
return 1;
}
}
if (md)
*md = &mdat->mirtab[i];
return 0;
}
}
return 0;
}
static int
mirman_update_int (uint32_t * ip, int af, struct mirdat *mdat, uint8_t broken,
int succ, int fail)
{
unsigned int i, found = 0;
if (!mdat->active)
return 0;
for (i = 0; i < mdat->num; i++)
{
if ((af == AF_INET && mdat->mirtab[i].ip4 == *ip)
|| (af == AF_INET6
&& !memcmp (mdat->mirtab[i].ip6, ip, 4 * sizeof (uint32_t))))
{
found = 1;
break;
}
}
if (found)
{
mdat->mirtab[i].atime = 0; /* will be updated in mirman_write() */
if (succ || fail)
{
if ((int) mdat->mirtab[i].fail + fail < 0)
mdat->mirtab[i].fail = 0;
else
mdat->mirtab[i].fail += fail;
if ((int) mdat->mirtab[i].succ + succ < 0)
mdat->mirtab[i].succ = 0;
else
mdat->mirtab[i].succ += succ;
}
else
{
if (broken)
mdat->mirtab[i].fail++;
else
mdat->mirtab[i].succ++;
if (broken == 2)
{
mdat->mirtab[i].ignore = 2;
}
else
{
/*
* If the total number of failures is less than 3 then never
* mark a permanent failure, in other case use the real status.
*/
if (mdat->mirtab[i].fail < 3)
mdat->mirtab[i].ignore = 0;
else
mdat->mirtab[i].ignore = broken;
}
}
}
else
{
mdat->mirtab =
(struct mirdat_ip *) realloc (mdat->mirtab,
(mdat->num +
1) * sizeof (struct mirdat_ip));
if (!mdat->mirtab)
{
logg ("!Can't allocate memory for new element in mdat->mirtab\n");
return -1;
}
if (af == AF_INET)
{
mdat->mirtab[mdat->num].ip4 = *ip;
}
else
{
mdat->mirtab[mdat->num].ip4 = 0;
memcpy (mdat->mirtab[mdat->num].ip6, ip, 4 * sizeof (uint32_t));
}
mdat->mirtab[mdat->num].atime = 0;
mdat->mirtab[mdat->num].succ = (succ > 0) ? succ : 0;
mdat->mirtab[mdat->num].fail = (fail > 0) ? fail : 0;
mdat->mirtab[mdat->num].ignore = (broken == 2) ? 2 : 0;
memset (&mdat->mirtab[mdat->num].res, 0xff,
sizeof (mdat->mirtab[mdat->num].res));
if (!succ && !fail)
{
if (broken)
mdat->mirtab[mdat->num].fail++;
else
mdat->mirtab[mdat->num].succ++;
}
mdat->num++;
}
return 0;
}
int
mirman_update (uint32_t * ip, int af, struct mirdat *mdat, uint8_t broken)
{
return mirman_update_int (ip, af, mdat, broken, 0, 0);
}
int
mirman_update_sf (uint32_t * ip, int af, struct mirdat *mdat, int succ,
int fail)
{
return mirman_update_int (ip, af, mdat, 0, succ, fail);
}
void
mirman_list (const struct mirdat *mdat)
{
unsigned int i;
time_t tm;
char ip[46];
for (i = 0; i < mdat->num; i++)
{
printf ("Mirror #%u\n", i + 1);
#ifdef HAVE_GETADDRINFO
if (mdat->mirtab[i].ip4)
printf ("IP: %s\n",
inet_ntop (AF_INET, &mdat->mirtab[i].ip4, ip,
sizeof (ip)));
else
printf ("IP: %s\n",
inet_ntop (AF_INET6, mdat->mirtab[i].ip6, ip,
sizeof (ip)));
#else
if (mdat->mirtab[i].ip4)
printf ("IP: %s\n",
inet_ntoa (*(struct in_addr *) &mdat->mirtab[i].ip4));
#endif
printf ("Successes: %u\n", mdat->mirtab[i].succ);
printf ("Failures: %u\n", mdat->mirtab[i].fail);
tm = mdat->mirtab[i].atime;
printf ("Last access: %s", ctime ((const time_t *) &tm));
printf ("Ignore: %s\n", mdat->mirtab[i].ignore ? "Yes" : "No");
if (i != mdat->num - 1)
printf ("-------------------------------------\n");
}
}
void
mirman_whitelist (struct mirdat *mdat, unsigned int mode)
{
unsigned int i;
logg ("*Whitelisting %s blacklisted mirrors\n",
mode == 1 ? "all" : "short-term");
for (i = 0; i < mdat->num; i++)
if (mode == 1 || (mode == 2 && mdat->mirtab[i].ignore == 2))
mdat->mirtab[i].ignore = 0;
}
int
mirman_write (const char *file, const char *dir, struct mirdat *mdat)
{
int fd;
unsigned int i;
char path[512];
snprintf (path, sizeof (path), "%s/%s", dir, file);
path[sizeof (path) - 1] = 0;
if (!mdat->num)
return 0;
if ((fd =
open (path, O_WRONLY | O_CREAT | O_TRUNC | O_BINARY, 0600)) == -1)
{
logg ("!Can't open %s for writing\n", path);
return -1;
}
for (i = 0; i < mdat->num; i++)
if (!mdat->mirtab[i].atime)
mdat->mirtab[i].atime = (uint32_t) time (NULL);
if (write (fd, mdat->mirtab, mdat->num * sizeof (struct mirdat_ip)) == -1)
{
logg ("!Can't write to %s\n", path);
close (fd);
return -1;
}
close (fd);
return 0;
}