1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
/*
* decode_pop.c
*
* Post Office Protocol.
*
* Copyright (c) 2000 Dug Song <dugsong@monkey.org>
*
* $Id: decode_pop.c,v 1.4 2001/03/15 08:33:02 dugsong Exp $
*
* Rewritten by Stefan Tomanek 2011 <stefan@pico.ruhr.de>
*/
#include "config.h"
#include <sys/types.h>
#include <stdio.h>
#include <string.h>
#include <strlcat.h>
#include "base64.h"
#include "options.h"
#include "decode.h"
extern struct _dc_meta dc_meta;
int
decode_poppass(u_char *buf, int len, u_char *obuf, int olen)
{
char *p;
obuf[0] = '\0';
for (p = strtok(buf, "\r\n"); p != NULL; p = strtok(NULL, "\r\n")) {
if (strncasecmp(p, "user ", 5) == 0 ||
strncasecmp(p, "pass ", 5) == 0 ||
strncasecmp(p, "newpass ", 8) == 0) {
strlcat(obuf, p, olen);
strlcat(obuf, "\n", olen);
}
}
if (strip_lines(obuf, Opt_lines) < 3)
return (0);
return (strlen(obuf));
}
int
decode_pop(u_char *buf, int len, u_char *obuf, int olen)
{
char *p;
char *s;
int n;
int i, j;
char *user;
char *password;
enum {
NONE,
AUTHPLAIN,
AUTHLOGIN,
USERPASS
} mode = NONE;
obuf[0] = '\0';
for (p = strtok(buf, "\r\n"); p != NULL; p = strtok(NULL, "\r\n")) {
if (mode == NONE) {
user = NULL;
password = NULL;
if (strncasecmp(p, "AUTH PLAIN", 10) == 0) {
mode = AUTHPLAIN;
continue;
}
if (strncasecmp(p, "AUTH LOGIN", 10) == 0) {
mode = AUTHLOGIN;
continue;
}
if (strncasecmp(p, "USER ", 5) == 0) {
mode = USERPASS;
/* the traditional login cuts right to the case,
* so no continue here
*/
}
}
if (mode == USERPASS) {
if (strncasecmp(p, "USER ", 5) == 0) {
user = &p[5];
} else if (strncasecmp(p, "PASS ", 5) == 0) {
password = &p[5];
}
}
if (mode == AUTHPLAIN) {
decode_authplain(p, &user, &password);
}
if (mode == AUTHLOGIN) {
j = base64_pton(p, p, strlen(p));
p[j] = '\0';
if (!user) {
user = p;
} else {
password = p;
/* got everything we need :-) */
}
}
if (user && password) {
strlcat(obuf, "username [", olen);
strlcat(obuf, user, olen);
strlcat(obuf, "] password [", olen);
strlcat(obuf, password, olen);
strlcat(obuf, "]\n", olen);
dc_meta.is_hot = 1;
mode = NONE;
}
}
return (strlen(obuf));
}
|
