ssh-keyscan.c revision 157019
1/* 2 * Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>. 3 * 4 * Modification and redistribution in source and binary forms is 5 * permitted provided that due credit is given to the author and the 6 * OpenBSD project by leaving this copyright notice intact. 7 */ 8 9#include "includes.h" 10RCSID("$OpenBSD: ssh-keyscan.c,v 1.57 2005/10/30 04:01:03 djm Exp $"); 11 12#include "openbsd-compat/sys-queue.h" 13 14#include <openssl/bn.h> 15 16#include <setjmp.h> 17#include "xmalloc.h" 18#include "ssh.h" 19#include "ssh1.h" 20#include "key.h" 21#include "kex.h" 22#include "compat.h" 23#include "myproposal.h" 24#include "packet.h" 25#include "dispatch.h" 26#include "buffer.h" 27#include "bufaux.h" 28#include "log.h" 29#include "atomicio.h" 30#include "misc.h" 31#include "hostfile.h" 32 33/* Flag indicating whether IPv4 or IPv6. This can be set on the command line. 34 Default value is AF_UNSPEC means both IPv4 and IPv6. */ 35int IPv4or6 = AF_UNSPEC; 36 37int ssh_port = SSH_DEFAULT_PORT; 38 39#define KT_RSA1 1 40#define KT_DSA 2 41#define KT_RSA 4 42 43int get_keytypes = KT_RSA1; /* Get only RSA1 keys by default */ 44 45int hash_hosts = 0; /* Hash hostname on output */ 46 47#define MAXMAXFD 256 48 49/* The number of seconds after which to give up on a TCP connection */ 50int timeout = 5; 51 52int maxfd; 53#define MAXCON (maxfd - 10) 54 55extern char *__progname; 56fd_set *read_wait; 57size_t read_wait_size; 58int ncon; 59int nonfatal_fatal = 0; 60jmp_buf kexjmp; 61Key *kexjmp_key; 62 63/* 64 * Keep a connection structure for each file descriptor. The state 65 * associated with file descriptor n is held in fdcon[n]. 66 */ 67typedef struct Connection { 68 u_char c_status; /* State of connection on this file desc. */ 69#define CS_UNUSED 0 /* File descriptor unused */ 70#define CS_CON 1 /* Waiting to connect/read greeting */ 71#define CS_SIZE 2 /* Waiting to read initial packet size */ 72#define CS_KEYS 3 /* Waiting to read public key packet */ 73 int c_fd; /* Quick lookup: c->c_fd == c - fdcon */ 74 int c_plen; /* Packet length field for ssh packet */ 75 int c_len; /* Total bytes which must be read. */ 76 int c_off; /* Length of data read so far. */ 77 int c_keytype; /* Only one of KT_RSA1, KT_DSA, or KT_RSA */ 78 char *c_namebase; /* Address to free for c_name and c_namelist */ 79 char *c_name; /* Hostname of connection for errors */ 80 char *c_namelist; /* Pointer to other possible addresses */ 81 char *c_output_name; /* Hostname of connection for output */ 82 char *c_data; /* Data read from this fd */ 83 Kex *c_kex; /* The key-exchange struct for ssh2 */ 84 struct timeval c_tv; /* Time at which connection gets aborted */ 85 TAILQ_ENTRY(Connection) c_link; /* List of connections in timeout order. */ 86} con; 87 88TAILQ_HEAD(conlist, Connection) tq; /* Timeout Queue */ 89con *fdcon; 90 91/* 92 * This is just a wrapper around fgets() to make it usable. 93 */ 94 95/* Stress-test. Increase this later. */ 96#define LINEBUF_SIZE 16 97 98typedef struct { 99 char *buf; 100 u_int size; 101 int lineno; 102 const char *filename; 103 FILE *stream; 104 void (*errfun) (const char *,...); 105} Linebuf; 106 107static Linebuf * 108Linebuf_alloc(const char *filename, void (*errfun) (const char *,...)) 109{ 110 Linebuf *lb; 111 112 if (!(lb = malloc(sizeof(*lb)))) { 113 if (errfun) 114 (*errfun) ("linebuf (%s): malloc failed\n", 115 filename ? filename : "(stdin)"); 116 return (NULL); 117 } 118 if (filename) { 119 lb->filename = filename; 120 if (!(lb->stream = fopen(filename, "r"))) { 121 xfree(lb); 122 if (errfun) 123 (*errfun) ("%s: %s\n", filename, strerror(errno)); 124 return (NULL); 125 } 126 } else { 127 lb->filename = "(stdin)"; 128 lb->stream = stdin; 129 } 130 131 if (!(lb->buf = malloc(lb->size = LINEBUF_SIZE))) { 132 if (errfun) 133 (*errfun) ("linebuf (%s): malloc failed\n", lb->filename); 134 xfree(lb); 135 return (NULL); 136 } 137 lb->errfun = errfun; 138 lb->lineno = 0; 139 return (lb); 140} 141 142static void 143Linebuf_free(Linebuf * lb) 144{ 145 fclose(lb->stream); 146 xfree(lb->buf); 147 xfree(lb); 148} 149 150#if 0 151static void 152Linebuf_restart(Linebuf * lb) 153{ 154 clearerr(lb->stream); 155 rewind(lb->stream); 156 lb->lineno = 0; 157} 158 159static int 160Linebuf_lineno(Linebuf * lb) 161{ 162 return (lb->lineno); 163} 164#endif 165 166static char * 167Linebuf_getline(Linebuf * lb) 168{ 169 size_t n = 0; 170 void *p; 171 172 lb->lineno++; 173 for (;;) { 174 /* Read a line */ 175 if (!fgets(&lb->buf[n], lb->size - n, lb->stream)) { 176 if (ferror(lb->stream) && lb->errfun) 177 (*lb->errfun)("%s: %s\n", lb->filename, 178 strerror(errno)); 179 return (NULL); 180 } 181 n = strlen(lb->buf); 182 183 /* Return it or an error if it fits */ 184 if (n > 0 && lb->buf[n - 1] == '\n') { 185 lb->buf[n - 1] = '\0'; 186 return (lb->buf); 187 } 188 if (n != lb->size - 1) { 189 if (lb->errfun) 190 (*lb->errfun)("%s: skipping incomplete last line\n", 191 lb->filename); 192 return (NULL); 193 } 194 /* Double the buffer if we need more space */ 195 lb->size *= 2; 196 if ((p = realloc(lb->buf, lb->size)) == NULL) { 197 lb->size /= 2; 198 if (lb->errfun) 199 (*lb->errfun)("linebuf (%s): realloc failed\n", 200 lb->filename); 201 return (NULL); 202 } 203 lb->buf = p; 204 } 205} 206 207static int 208fdlim_get(int hard) 209{ 210#if defined(HAVE_GETRLIMIT) && defined(RLIMIT_NOFILE) 211 struct rlimit rlfd; 212 213 if (getrlimit(RLIMIT_NOFILE, &rlfd) < 0) 214 return (-1); 215 if ((hard ? rlfd.rlim_max : rlfd.rlim_cur) == RLIM_INFINITY) 216 return SSH_SYSFDMAX; 217 else 218 return hard ? rlfd.rlim_max : rlfd.rlim_cur; 219#else 220 return SSH_SYSFDMAX; 221#endif 222} 223 224static int 225fdlim_set(int lim) 226{ 227#if defined(HAVE_SETRLIMIT) && defined(RLIMIT_NOFILE) 228 struct rlimit rlfd; 229#endif 230 231 if (lim <= 0) 232 return (-1); 233#if defined(HAVE_SETRLIMIT) && defined(RLIMIT_NOFILE) 234 if (getrlimit(RLIMIT_NOFILE, &rlfd) < 0) 235 return (-1); 236 rlfd.rlim_cur = lim; 237 if (setrlimit(RLIMIT_NOFILE, &rlfd) < 0) 238 return (-1); 239#elif defined (HAVE_SETDTABLESIZE) 240 setdtablesize(lim); 241#endif 242 return (0); 243} 244 245/* 246 * This is an strsep function that returns a null field for adjacent 247 * separators. This is the same as the 4.4BSD strsep, but different from the 248 * one in the GNU libc. 249 */ 250static char * 251xstrsep(char **str, const char *delim) 252{ 253 char *s, *e; 254 255 if (!**str) 256 return (NULL); 257 258 s = *str; 259 e = s + strcspn(s, delim); 260 261 if (*e != '\0') 262 *e++ = '\0'; 263 *str = e; 264 265 return (s); 266} 267 268/* 269 * Get the next non-null token (like GNU strsep). Strsep() will return a 270 * null token for two adjacent separators, so we may have to loop. 271 */ 272static char * 273strnnsep(char **stringp, char *delim) 274{ 275 char *tok; 276 277 do { 278 tok = xstrsep(stringp, delim); 279 } while (tok && *tok == '\0'); 280 return (tok); 281} 282 283static Key * 284keygrab_ssh1(con *c) 285{ 286 static Key *rsa; 287 static Buffer msg; 288 289 if (rsa == NULL) { 290 buffer_init(&msg); 291 rsa = key_new(KEY_RSA1); 292 } 293 buffer_append(&msg, c->c_data, c->c_plen); 294 buffer_consume(&msg, 8 - (c->c_plen & 7)); /* padding */ 295 if (buffer_get_char(&msg) != (int) SSH_SMSG_PUBLIC_KEY) { 296 error("%s: invalid packet type", c->c_name); 297 buffer_clear(&msg); 298 return NULL; 299 } 300 buffer_consume(&msg, 8); /* cookie */ 301 302 /* server key */ 303 (void) buffer_get_int(&msg); 304 buffer_get_bignum(&msg, rsa->rsa->e); 305 buffer_get_bignum(&msg, rsa->rsa->n); 306 307 /* host key */ 308 (void) buffer_get_int(&msg); 309 buffer_get_bignum(&msg, rsa->rsa->e); 310 buffer_get_bignum(&msg, rsa->rsa->n); 311 312 buffer_clear(&msg); 313 314 return (rsa); 315} 316 317static int 318hostjump(Key *hostkey) 319{ 320 kexjmp_key = hostkey; 321 longjmp(kexjmp, 1); 322} 323 324static int 325ssh2_capable(int remote_major, int remote_minor) 326{ 327 switch (remote_major) { 328 case 1: 329 if (remote_minor == 99) 330 return 1; 331 break; 332 case 2: 333 return 1; 334 default: 335 break; 336 } 337 return 0; 338} 339 340static Key * 341keygrab_ssh2(con *c) 342{ 343 int j; 344 345 packet_set_connection(c->c_fd, c->c_fd); 346 enable_compat20(); 347 myproposal[PROPOSAL_SERVER_HOST_KEY_ALGS] = c->c_keytype == KT_DSA? 348 "ssh-dss": "ssh-rsa"; 349 c->c_kex = kex_setup(myproposal); 350 c->c_kex->kex[KEX_DH_GRP1_SHA1] = kexdh_client; 351 c->c_kex->kex[KEX_DH_GRP14_SHA1] = kexdh_client; 352 c->c_kex->kex[KEX_DH_GEX_SHA1] = kexgex_client; 353 c->c_kex->verify_host_key = hostjump; 354 355 if (!(j = setjmp(kexjmp))) { 356 nonfatal_fatal = 1; 357 dispatch_run(DISPATCH_BLOCK, &c->c_kex->done, c->c_kex); 358 fprintf(stderr, "Impossible! dispatch_run() returned!\n"); 359 exit(1); 360 } 361 nonfatal_fatal = 0; 362 xfree(c->c_kex); 363 c->c_kex = NULL; 364 packet_close(); 365 366 return j < 0? NULL : kexjmp_key; 367} 368 369static void 370keyprint(con *c, Key *key) 371{ 372 char *host = c->c_output_name ? c->c_output_name : c->c_name; 373 374 if (!key) 375 return; 376 if (hash_hosts && (host = host_hash(host, NULL, 0)) == NULL) 377 fatal("host_hash failed"); 378 379 fprintf(stdout, "%s ", host); 380 key_write(key, stdout); 381 fputs("\n", stdout); 382} 383 384static int 385tcpconnect(char *host) 386{ 387 struct addrinfo hints, *ai, *aitop; 388 char strport[NI_MAXSERV]; 389 int gaierr, s = -1; 390 391 snprintf(strport, sizeof strport, "%d", ssh_port); 392 memset(&hints, 0, sizeof(hints)); 393 hints.ai_family = IPv4or6; 394 hints.ai_socktype = SOCK_STREAM; 395 if ((gaierr = getaddrinfo(host, strport, &hints, &aitop)) != 0) 396 fatal("getaddrinfo %s: %s", host, gai_strerror(gaierr)); 397 for (ai = aitop; ai; ai = ai->ai_next) { 398 s = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol); 399 if (s < 0) { 400 error("socket: %s", strerror(errno)); 401 continue; 402 } 403 if (set_nonblock(s) == -1) 404 fatal("%s: set_nonblock(%d)", __func__, s); 405 if (connect(s, ai->ai_addr, ai->ai_addrlen) < 0 && 406 errno != EINPROGRESS) 407 error("connect (`%s'): %s", host, strerror(errno)); 408 else 409 break; 410 close(s); 411 s = -1; 412 } 413 freeaddrinfo(aitop); 414 return s; 415} 416 417static int 418conalloc(char *iname, char *oname, int keytype) 419{ 420 char *namebase, *name, *namelist; 421 int s; 422 423 namebase = namelist = xstrdup(iname); 424 425 do { 426 name = xstrsep(&namelist, ","); 427 if (!name) { 428 xfree(namebase); 429 return (-1); 430 } 431 } while ((s = tcpconnect(name)) < 0); 432 433 if (s >= maxfd) 434 fatal("conalloc: fdno %d too high", s); 435 if (fdcon[s].c_status) 436 fatal("conalloc: attempt to reuse fdno %d", s); 437 438 fdcon[s].c_fd = s; 439 fdcon[s].c_status = CS_CON; 440 fdcon[s].c_namebase = namebase; 441 fdcon[s].c_name = name; 442 fdcon[s].c_namelist = namelist; 443 fdcon[s].c_output_name = xstrdup(oname); 444 fdcon[s].c_data = (char *) &fdcon[s].c_plen; 445 fdcon[s].c_len = 4; 446 fdcon[s].c_off = 0; 447 fdcon[s].c_keytype = keytype; 448 gettimeofday(&fdcon[s].c_tv, NULL); 449 fdcon[s].c_tv.tv_sec += timeout; 450 TAILQ_INSERT_TAIL(&tq, &fdcon[s], c_link); 451 FD_SET(s, read_wait); 452 ncon++; 453 return (s); 454} 455 456static void 457confree(int s) 458{ 459 if (s >= maxfd || fdcon[s].c_status == CS_UNUSED) 460 fatal("confree: attempt to free bad fdno %d", s); 461 close(s); 462 xfree(fdcon[s].c_namebase); 463 xfree(fdcon[s].c_output_name); 464 if (fdcon[s].c_status == CS_KEYS) 465 xfree(fdcon[s].c_data); 466 fdcon[s].c_status = CS_UNUSED; 467 fdcon[s].c_keytype = 0; 468 TAILQ_REMOVE(&tq, &fdcon[s], c_link); 469 FD_CLR(s, read_wait); 470 ncon--; 471} 472 473static void 474contouch(int s) 475{ 476 TAILQ_REMOVE(&tq, &fdcon[s], c_link); 477 gettimeofday(&fdcon[s].c_tv, NULL); 478 fdcon[s].c_tv.tv_sec += timeout; 479 TAILQ_INSERT_TAIL(&tq, &fdcon[s], c_link); 480} 481 482static int 483conrecycle(int s) 484{ 485 con *c = &fdcon[s]; 486 int ret; 487 488 ret = conalloc(c->c_namelist, c->c_output_name, c->c_keytype); 489 confree(s); 490 return (ret); 491} 492 493static void 494congreet(int s) 495{ 496 int n = 0, remote_major = 0, remote_minor = 0; 497 char buf[256], *cp; 498 char remote_version[sizeof buf]; 499 size_t bufsiz; 500 con *c = &fdcon[s]; 501 502 for (;;) { 503 memset(buf, '\0', sizeof(buf)); 504 bufsiz = sizeof(buf); 505 cp = buf; 506 while (bufsiz-- && 507 (n = atomicio(read, s, cp, 1)) == 1 && *cp != '\n') { 508 if (*cp == '\r') 509 *cp = '\n'; 510 cp++; 511 } 512 if (n != 1 || strncmp(buf, "SSH-", 4) == 0) 513 break; 514 } 515 if (n == 0) { 516 switch (errno) { 517 case EPIPE: 518 error("%s: Connection closed by remote host", c->c_name); 519 break; 520 case ECONNREFUSED: 521 break; 522 default: 523 error("read (%s): %s", c->c_name, strerror(errno)); 524 break; 525 } 526 conrecycle(s); 527 return; 528 } 529 if (*cp != '\n' && *cp != '\r') { 530 error("%s: bad greeting", c->c_name); 531 confree(s); 532 return; 533 } 534 *cp = '\0'; 535 if (sscanf(buf, "SSH-%d.%d-%[^\n]\n", 536 &remote_major, &remote_minor, remote_version) == 3) 537 compat_datafellows(remote_version); 538 else 539 datafellows = 0; 540 if (c->c_keytype != KT_RSA1) { 541 if (!ssh2_capable(remote_major, remote_minor)) { 542 debug("%s doesn't support ssh2", c->c_name); 543 confree(s); 544 return; 545 } 546 } else if (remote_major != 1) { 547 debug("%s doesn't support ssh1", c->c_name); 548 confree(s); 549 return; 550 } 551 fprintf(stderr, "# %s %s\n", c->c_name, chop(buf)); 552 n = snprintf(buf, sizeof buf, "SSH-%d.%d-OpenSSH-keyscan\r\n", 553 c->c_keytype == KT_RSA1? PROTOCOL_MAJOR_1 : PROTOCOL_MAJOR_2, 554 c->c_keytype == KT_RSA1? PROTOCOL_MINOR_1 : PROTOCOL_MINOR_2); 555 if (n < 0 || (size_t)n >= sizeof(buf)) { 556 error("snprintf: buffer too small"); 557 confree(s); 558 return; 559 } 560 if (atomicio(vwrite, s, buf, n) != (size_t)n) { 561 error("write (%s): %s", c->c_name, strerror(errno)); 562 confree(s); 563 return; 564 } 565 if (c->c_keytype != KT_RSA1) { 566 keyprint(c, keygrab_ssh2(c)); 567 confree(s); 568 return; 569 } 570 c->c_status = CS_SIZE; 571 contouch(s); 572} 573 574static void 575conread(int s) 576{ 577 con *c = &fdcon[s]; 578 size_t n; 579 580 if (c->c_status == CS_CON) { 581 congreet(s); 582 return; 583 } 584 n = atomicio(read, s, c->c_data + c->c_off, c->c_len - c->c_off); 585 if (n == 0) { 586 error("read (%s): %s", c->c_name, strerror(errno)); 587 confree(s); 588 return; 589 } 590 c->c_off += n; 591 592 if (c->c_off == c->c_len) 593 switch (c->c_status) { 594 case CS_SIZE: 595 c->c_plen = htonl(c->c_plen); 596 c->c_len = c->c_plen + 8 - (c->c_plen & 7); 597 c->c_off = 0; 598 c->c_data = xmalloc(c->c_len); 599 c->c_status = CS_KEYS; 600 break; 601 case CS_KEYS: 602 keyprint(c, keygrab_ssh1(c)); 603 confree(s); 604 return; 605 break; 606 default: 607 fatal("conread: invalid status %d", c->c_status); 608 break; 609 } 610 611 contouch(s); 612} 613 614static void 615conloop(void) 616{ 617 struct timeval seltime, now; 618 fd_set *r, *e; 619 con *c; 620 int i; 621 622 gettimeofday(&now, NULL); 623 c = TAILQ_FIRST(&tq); 624 625 if (c && (c->c_tv.tv_sec > now.tv_sec || 626 (c->c_tv.tv_sec == now.tv_sec && c->c_tv.tv_usec > now.tv_usec))) { 627 seltime = c->c_tv; 628 seltime.tv_sec -= now.tv_sec; 629 seltime.tv_usec -= now.tv_usec; 630 if (seltime.tv_usec < 0) { 631 seltime.tv_usec += 1000000; 632 seltime.tv_sec--; 633 } 634 } else 635 seltime.tv_sec = seltime.tv_usec = 0; 636 637 r = xmalloc(read_wait_size); 638 memcpy(r, read_wait, read_wait_size); 639 e = xmalloc(read_wait_size); 640 memcpy(e, read_wait, read_wait_size); 641 642 while (select(maxfd, r, NULL, e, &seltime) == -1 && 643 (errno == EAGAIN || errno == EINTR)) 644 ; 645 646 for (i = 0; i < maxfd; i++) { 647 if (FD_ISSET(i, e)) { 648 error("%s: exception!", fdcon[i].c_name); 649 confree(i); 650 } else if (FD_ISSET(i, r)) 651 conread(i); 652 } 653 xfree(r); 654 xfree(e); 655 656 c = TAILQ_FIRST(&tq); 657 while (c && (c->c_tv.tv_sec < now.tv_sec || 658 (c->c_tv.tv_sec == now.tv_sec && c->c_tv.tv_usec < now.tv_usec))) { 659 int s = c->c_fd; 660 661 c = TAILQ_NEXT(c, c_link); 662 conrecycle(s); 663 } 664} 665 666static void 667do_host(char *host) 668{ 669 char *name = strnnsep(&host, " \t\n"); 670 int j; 671 672 if (name == NULL) 673 return; 674 for (j = KT_RSA1; j <= KT_RSA; j *= 2) { 675 if (get_keytypes & j) { 676 while (ncon >= MAXCON) 677 conloop(); 678 conalloc(name, *host ? host : name, j); 679 } 680 } 681} 682 683void 684fatal(const char *fmt,...) 685{ 686 va_list args; 687 688 va_start(args, fmt); 689 do_log(SYSLOG_LEVEL_FATAL, fmt, args); 690 va_end(args); 691 if (nonfatal_fatal) 692 longjmp(kexjmp, -1); 693 else 694 exit(255); 695} 696 697static void 698usage(void) 699{ 700 fprintf(stderr, "usage: %s [-46Hv] [-f file] [-p port] [-T timeout] [-t type]\n" 701 "\t\t [host | addrlist namelist] [...]\n", 702 __progname); 703 exit(1); 704} 705 706int 707main(int argc, char **argv) 708{ 709 int debug_flag = 0, log_level = SYSLOG_LEVEL_INFO; 710 int opt, fopt_count = 0; 711 char *tname; 712 713 extern int optind; 714 extern char *optarg; 715 716 __progname = ssh_get_progname(argv[0]); 717 init_rng(); 718 seed_rng(); 719 TAILQ_INIT(&tq); 720 721 /* Ensure that fds 0, 1 and 2 are open or directed to /dev/null */ 722 sanitise_stdfd(); 723 724 if (argc <= 1) 725 usage(); 726 727 while ((opt = getopt(argc, argv, "Hv46p:T:t:f:")) != -1) { 728 switch (opt) { 729 case 'H': 730 hash_hosts = 1; 731 break; 732 case 'p': 733 ssh_port = a2port(optarg); 734 if (ssh_port == 0) { 735 fprintf(stderr, "Bad port '%s'\n", optarg); 736 exit(1); 737 } 738 break; 739 case 'T': 740 timeout = convtime(optarg); 741 if (timeout == -1 || timeout == 0) { 742 fprintf(stderr, "Bad timeout '%s'\n", optarg); 743 usage(); 744 } 745 break; 746 case 'v': 747 if (!debug_flag) { 748 debug_flag = 1; 749 log_level = SYSLOG_LEVEL_DEBUG1; 750 } 751 else if (log_level < SYSLOG_LEVEL_DEBUG3) 752 log_level++; 753 else 754 fatal("Too high debugging level."); 755 break; 756 case 'f': 757 if (strcmp(optarg, "-") == 0) 758 optarg = NULL; 759 argv[fopt_count++] = optarg; 760 break; 761 case 't': 762 get_keytypes = 0; 763 tname = strtok(optarg, ","); 764 while (tname) { 765 int type = key_type_from_name(tname); 766 switch (type) { 767 case KEY_RSA1: 768 get_keytypes |= KT_RSA1; 769 break; 770 case KEY_DSA: 771 get_keytypes |= KT_DSA; 772 break; 773 case KEY_RSA: 774 get_keytypes |= KT_RSA; 775 break; 776 case KEY_UNSPEC: 777 fatal("unknown key type %s", tname); 778 } 779 tname = strtok(NULL, ","); 780 } 781 break; 782 case '4': 783 IPv4or6 = AF_INET; 784 break; 785 case '6': 786 IPv4or6 = AF_INET6; 787 break; 788 case '?': 789 default: 790 usage(); 791 } 792 } 793 if (optind == argc && !fopt_count) 794 usage(); 795 796 log_init("ssh-keyscan", log_level, SYSLOG_FACILITY_USER, 1); 797 798 maxfd = fdlim_get(1); 799 if (maxfd < 0) 800 fatal("%s: fdlim_get: bad value", __progname); 801 if (maxfd > MAXMAXFD) 802 maxfd = MAXMAXFD; 803 if (MAXCON <= 0) 804 fatal("%s: not enough file descriptors", __progname); 805 if (maxfd > fdlim_get(0)) 806 fdlim_set(maxfd); 807 fdcon = xmalloc(maxfd * sizeof(con)); 808 memset(fdcon, 0, maxfd * sizeof(con)); 809 810 read_wait_size = howmany(maxfd, NFDBITS) * sizeof(fd_mask); 811 read_wait = xmalloc(read_wait_size); 812 memset(read_wait, 0, read_wait_size); 813 814 if (fopt_count) { 815 Linebuf *lb; 816 char *line; 817 int j; 818 819 for (j = 0; j < fopt_count; j++) { 820 lb = Linebuf_alloc(argv[j], error); 821 if (!lb) 822 continue; 823 while ((line = Linebuf_getline(lb)) != NULL) 824 do_host(line); 825 Linebuf_free(lb); 826 } 827 } 828 829 while (optind < argc) 830 do_host(argv[optind++]); 831 832 while (ncon > 0) 833 conloop(); 834 835 return (0); 836} 837