/* * Copyright (C) 2002 - 2004 Tomasz Kojm * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */ #if HAVE_CONFIG_H #include "clamav-config.h" #endif #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "cfgfile.h" #include "others.h" #include "scanner.h" #include "defaults.h" int checksymlink(const char *path) { struct stat statbuf; if(stat(path, &statbuf) == -1) return -1; if(S_ISDIR(statbuf.st_mode)) return 1; if(S_ISREG(statbuf.st_mode)) return 2; return 0; } /* :set nowrap, if you don't like this style ;)) */ int dirscan(const char *dirname, char **virname, unsigned long int *scanned, const struct cl_node *root, const struct cl_limits *limits, int options, const struct cfgstruct *copt, int odesc, unsigned int *reclev, short contscan) { DIR *dd; struct dirent *dent; struct stat statbuf; struct cfgstruct *cpt; char *fname; int ret = 0, scanret = 0; if((cpt = cfgopt(copt, "MaxDirectoryRecursion"))) { if(cpt->numarg) { if(*reclev > cpt->numarg) { logg("*Directory recursion limit exceeded at %s\n", dirname); return 0; } (*reclev)++; } } if((dd = opendir(dirname)) != NULL) { while((dent = readdir(dd))) { if(dent->d_ino) { if(strcmp(dent->d_name, ".") && strcmp(dent->d_name, "..")) { /* build the full name */ fname = mcalloc(strlen(dirname) + strlen(dent->d_name) + 2, sizeof(char)); sprintf(fname, "%s/%s", dirname, dent->d_name); /* stat the file */ if(lstat(fname, &statbuf) != -1) { if((S_ISDIR(statbuf.st_mode) && !S_ISLNK(statbuf.st_mode)) || (S_ISLNK(statbuf.st_mode) && (checksymlink(fname) == 1) && cfgopt(copt, "FollowDirectorySymlinks"))) { if(dirscan(fname, virname, scanned, root, limits, options, copt, odesc, reclev, contscan) == 1) { free(fname); closedir(dd); return 1; } } else { if(S_ISREG(statbuf.st_mode) || (S_ISLNK(statbuf.st_mode) && (checksymlink(fname) == 2) && cfgopt(copt, "FollowFileSymlinks"))) { if((scanret = cl_scanfile(fname, virname, scanned, root, limits, options)) == CL_VIRUS) { mdprintf(odesc, "%s: %s FOUND\n", fname, *virname); logg("%s: %s FOUND\n", fname, *virname); virusaction(fname, *virname, copt); if(!contscan) { closedir(dd); free(fname); return 1; } else ret = 2; } else if(scanret != CL_CLEAN) { mdprintf(odesc, "%s: %s ERROR\n", fname, cl_strerror(scanret)); logg("%s: %s ERROR\n", fname, cl_strerror(scanret)); } else if (logok) { logg("%s: OK\n", fname); } } } } free(fname); } } } closedir(dd); } else { return -1; } (*reclev)--; return ret; } int scan(const char *filename, unsigned long int *scanned, const struct cl_node *root, const struct cl_limits *limits, int options, const struct cfgstruct *copt, int odesc, short contscan) { struct stat sb; int ret = 0, reclev = 0; char *virname; /* check permissions */ if(access(filename, R_OK)) { mdprintf(odesc, "%s: Can't access the file ERROR\n", filename); return -1; } /* stat file */ if(lstat(filename, &sb) == -1) { mdprintf(odesc, "%s: Can't lstat() the file ERROR\n", filename); return -1; } switch(sb.st_mode & S_IFMT) { case S_IFLNK: if(!cfgopt(copt, "FollowFileSymlinks")) break; /* else go to the next case */ case S_IFREG: if(sb.st_size == 0) { /* empty file */ mdprintf(odesc, "%s: Empty file\n", filename); return 0; } ret = cl_scanfile(filename, &virname, scanned, root, limits, options); if(ret == CL_VIRUS) { mdprintf(odesc, "%s: %s FOUND\n", filename, virname); logg("%s: %s FOUND\n", filename, virname); virusaction(filename, virname, copt); } else if(ret != CL_CLEAN) { mdprintf(odesc, "%s: %s ERROR\n", filename, cl_strerror(ret)); logg("%s: %s ERROR\n", filename, cl_strerror(ret)); } else if (logok) { logg("%s: OK\n", filename); } break; case S_IFDIR: ret = dirscan(filename, &virname, scanned, root, limits, options, copt, odesc, &reclev, contscan); break; default: mdprintf(odesc, "%s: Not supported file type ERROR\n", filename); return -1; } if(!ret) mdprintf(odesc, "%s: OK\n", filename); return ret; } int scanstream(int odesc, unsigned long int *scanned, const struct cl_node *root, const struct cl_limits *limits, int options, const struct cfgstruct *copt) { int ret, flags, portscan = CL_DEFAULT_MAXPORTSCAN, sockfd, port, acceptd, tmpd, bread, count; long int size = 0, maxsize = 0; short bound = 0; char *virname, buff[32768]; struct sockaddr_in server; struct cfgstruct *cpt; FILE *tmp = NULL; struct pollfd poll_data[1]; while(!bound && portscan--) { if((port = cl_rndnum(60000)) < 1024) port += 2139; memset((char *) &server, 0, sizeof(server)); server.sin_family = AF_INET; server.sin_port = htons(port); server.sin_addr.s_addr = INADDR_ANY; if((sockfd = socket(AF_INET, SOCK_STREAM, 0)) == -1) continue; if(bind(sockfd, (struct sockaddr *) &server, sizeof(struct sockaddr_in)) == -1) close(sockfd); else bound = 1; } if(!bound && !portscan) { mdprintf(odesc, "ERROR\n"); logg("!ScanStream: Can't find any free port.\n"); return -1; } else { listen(sockfd, 1); mdprintf(odesc, "PORT %d\n", port); } poll_data[0].fd = sockfd; poll_data[0].events = POLLIN; poll_data[0].revents = 0; while (1) { count = poll(poll_data, 1, CL_DEFAULT_SCANTIMEOUT*1000); /* wait for timeout */ if (count != 1) { if ((count == -1) && (errno == EINTR)) { continue; } close(sockfd); mdprintf(odesc, "ERROR\n"); logg("!ScanStream: accept timeout.\n"); return -1; } else { break; } } if((acceptd = accept(sockfd, NULL, NULL)) == -1) { close(sockfd); mdprintf(odesc, "accept() ERROR\n"); logg("!ScanStream: accept() failed.\n"); return -1; } logg("*Accepted connection on port %d, fd %d\n", port, acceptd); poll_data[0].fd = acceptd; poll_data[0].events = POLLIN; poll_data[0].revents = 0; /* StreamSaveToDisk is enforced, to ensure timeoute */ /*if(cfgopt(copt, "StreamSaveToDisk")) { */ if((tmp = tmpfile()) == NULL) { shutdown(sockfd, 2); close(sockfd); close(acceptd); mdprintf(odesc, "Temporary file ERROR\n"); logg("!ScanStream: Can't create temporary file.\n"); return -1; } tmpd = fileno(tmp); if((cpt = cfgopt(copt, "StreamMaxLength"))) maxsize = cpt->numarg; while((count = poll(poll_data, 1, CL_DEFAULT_SCANTIMEOUT*1000)) == 1) { bread = read(acceptd, buff, sizeof(buff)); if (bread <= 0) { break; } size += bread; if(maxsize && (size + sizeof(buff)) > maxsize) { shutdown(sockfd, 2); close(sockfd); close(acceptd); mdprintf(odesc, "Size exceeded ERROR\n"); logg("^ScanStream: Size exceeded (stopped at %d, max: %d)\n", size, maxsize); if(tmp) fclose(tmp); return -1; } if(write(tmpd, buff, bread) < 0) { shutdown(sockfd, 2); close(sockfd); close(acceptd); mdprintf(odesc, "Temporary file -> write ERROR\n"); logg("!ScanStream: Can't write to temporary file.\n"); if(tmp) fclose(tmp); return -1; } } lseek(tmpd, 0, SEEK_SET); ret = cl_scandesc(tmpd, &virname, scanned, root, limits, options); if(tmp) fclose(tmp); /* } else ret = cl_scandesc(acceptd, &virname, scanned, root, limits, 0); */ close(acceptd); close(sockfd); if(ret == CL_VIRUS) { mdprintf(odesc, "stream: %s FOUND\n", virname); logg("stream: %s FOUND\n", virname); virusaction("InputStream", virname, copt); } else if(ret != CL_CLEAN) { mdprintf(odesc, "stream: %s ERROR\n", cl_strerror(ret)); logg("stream: %s ERROR\n", cl_strerror(ret)); } else { mdprintf(odesc, "stream: OK\n"); if (logok) logg("stream: OK\n"); } return ret; }