1/*
2 * Copyright (c) 1983 Regents of the University of California.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 *    must display the following acknowledgement:
15 *	This product includes software developed by the University of
16 *	California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#ifndef lint
35/*static char sccsid[] = "from: @(#)tftpsubs.c	5.6 (Berkeley) 2/28/91";*/
36/* static char rcsid[] = "$Id: tftpsubs.c 241182 2011-02-17 21:50:03Z $"; */
37#endif /* not lint */
38
39/* Simple minded read-ahead/write-behind subroutines for tftp user and
40   server.  Written originally with multiple buffers in mind, but current
41   implementation has two buffer logic wired in.
42
43   Todo:  add some sort of final error check so when the write-buffer
44   is finally flushed, the caller can detect if the disk filled up
45   (or had an i/o error) and return a nak to the other side.
46
47			Jim Guyton 10/85
48 */
49
50#include <sys/types.h>
51#include <sys/socket.h>
52#include <sys/ioctl.h>
53#include <netinet/in.h>
54#include <unistd.h>
55#include <stdio.h>
56
57#include "tftp.h"
58
59#define PKTSIZE SEGSIZE+4       /* should be moved to tftp.h */
60
61struct bf {
62	int counter;            /* size of data in buffer, or flag */
63	char buf[PKTSIZE];      /* room for data packet */
64} bfs[2];
65
66				/* Values for bf.counter  */
67#define BF_ALLOC -3             /* alloc'd but not yet filled */
68#define BF_FREE  -2             /* free */
69/* [-1 .. SEGSIZE] = size of data in the data buffer */
70
71static int nextone;     /* index of next buffer to use */
72static int current;     /* index of buffer in use */
73
74			/* control flags for crlf conversions */
75int newline = 0;        /* fillbuf: in middle of newline expansion */
76int prevchar = -1;      /* putbuf: previous char (cr check) */
77
78struct tftphdr *rw_init(int);
79
80struct tftphdr *w_init() { return rw_init(0); }         /* write-behind */
81struct tftphdr *r_init() { return rw_init(1); }         /* read-ahead */
82
83/* init for either read-ahead or write-behind */
84/* x is zero for write-behind, one for read-head */
85struct tftphdr *rw_init(int x)
86{
87	newline = 0;            /* init crlf flag */
88	prevchar = -1;
89	bfs[0].counter =  BF_ALLOC;     /* pass out the first buffer */
90	current = 0;
91	bfs[1].counter = BF_FREE;
92	nextone = x;                    /* ahead or behind? */
93	return (struct tftphdr *)bfs[0].buf;
94}
95
96
97/* Have emptied current buffer by sending to net and getting ack.
98   Free it and return next buffer filled with data.
99 */
100int readit(FILE * file, struct tftphdr **dpp, int convert)
101{
102	struct bf *b;
103
104	bfs[current].counter = BF_FREE; /* free old one */
105	current = !current;             /* "incr" current */
106
107	b = &bfs[current];              /* look at new buffer */
108	if (b->counter == BF_FREE)      /* if it's empty */
109		read_ahead(file, convert);      /* fill it */
110	*dpp = (struct tftphdr *)b->buf;        /* set caller's ptr */
111	return b->counter;
112}
113
114/*
115 * fill the input buffer, doing ascii conversions if requested
116 * conversions are  lf -> cr,lf  and cr -> cr, nul
117 */
118void read_ahead(FILE *file, int convert)
119{
120	register int i;
121	register char *p;
122	register int c;
123	struct bf *b;
124	struct tftphdr *dp;
125
126	b = &bfs[nextone];              /* look at "next" buffer */
127	if (b->counter != BF_FREE)      /* nop if not free */
128		return;
129	nextone = !nextone;             /* "incr" next buffer ptr */
130
131	dp = (struct tftphdr *)b->buf;
132
133	if (convert == 0) {
134		b->counter = read(fileno(file), dp->th_data, SEGSIZE);
135		return;
136	}
137
138	p = dp->th_data;
139	for (i = 0 ; i < SEGSIZE; i++) {
140		if (newline) {
141			if (prevchar == '\n')
142				c = '\n';       /* lf to cr,lf */
143			else    c = '\0';       /* cr to cr,nul */
144			newline = 0;
145		}
146		else {
147			c = getc(file);
148			if (c == EOF) break;
149			if (c == '\n' || c == '\r') {
150				prevchar = c;
151				c = '\r';
152				newline = 1;
153			}
154		}
155	       *p++ = c;
156	}
157	b->counter = (int)(p - dp->th_data);
158}
159
160/* Update count associated with the buffer, get new buffer
161   from the queue.  Calls write_behind only if next buffer not
162   available.
163 */
164int writeit(FILE *file, struct tftphdr **dpp, int ct, int convert)
165{
166	bfs[current].counter = ct;      /* set size of data to write */
167	current = !current;             /* switch to other buffer */
168	if (bfs[current].counter != BF_FREE)     /* if not free */
169		write_behind(file, convert);     /* flush it */
170	bfs[current].counter = BF_ALLOC;        /* mark as alloc'd */
171	*dpp =  (struct tftphdr *)bfs[current].buf;
172	return ct;                      /* this is a lie of course */
173}
174
175/*
176 * Output a buffer to a file, converting from netascii if requested.
177 * CR,NUL -> CR  and CR,LF => LF.
178 * Note spec is undefined if we get CR as last byte of file or a
179 * CR followed by anything else.  In this case we leave it alone.
180 */
181int write_behind(FILE *file, int convert)
182{
183	char *buf;
184	int count;
185	register int ct;
186	register char *p;
187	register int c;                 /* current character */
188	struct bf *b;
189	struct tftphdr *dp;
190
191	b = &bfs[nextone];
192	if (b->counter < -1)            /* anything to flush? */
193		return 0;               /* just nop if nothing to do */
194
195	count = b->counter;             /* remember byte count */
196	b->counter = BF_FREE;           /* reset flag */
197	dp = (struct tftphdr *)b->buf;
198	nextone = !nextone;             /* incr for next time */
199	buf = dp->th_data;
200
201	if (count <= 0) return -1;      /* nak logic? */
202
203	if (convert == 0)
204		return write(fileno(file), buf, count);
205
206	p = buf;
207	ct = count;
208	while (ct--) {                  /* loop over the buffer */
209	    c = *p++;                   /* pick up a character */
210	    if (prevchar == '\r') {     /* if prev char was cr */
211		if (c == '\n')          /* if have cr,lf then just */
212		   fseek(file, -1, 1);  /* smash lf on top of the cr */
213		else
214		   if (c == '\0')       /* if have cr,nul then */
215			goto skipit;    /* just skip over the putc */
216		/* else just fall through and allow it */
217	    }
218	    putc(c, file);
219skipit:
220	    prevchar = c;
221	}
222	return count;
223}
224
225
226/* When an error has occurred, it is possible that the two sides
227 * are out of synch.  Ie: that what I think is the other side's
228 * response to packet N is really their response to packet N-1.
229 *
230 * So, to try to prevent that, we flush all the input queued up
231 * for us on the network connection on our host.
232 *
233 * We return the number of packets we flushed (mostly for reporting
234 * when trace is active).
235 */
236
237int synchnet(int f)
238{
239	int j = 0;
240	char dummy;
241
242	while (1) {
243		if (recv(f, &dummy, 1, MSG_DONTWAIT) < 0)
244			break;
245		j++;
246	}
247	return j;
248}
249