/* 
 * The modifications to support SSLeay were done by Tim Hudson
 * tjh@cryptsoft.com
 *
 * You can do whatever you like with these patches except pretend that
 * you wrote them. 
 *
 * Email ssl-users-request@lists.cryptsoft.com to get instructions on how to
 * join the mailing list that discusses SSLeay and also these patches.
 *
 */

/*
 * Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994
 *	The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *	This product includes software developed by the University of
 *	California, Berkeley and its contributors.
 * 4. Neither the name of the University nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

/* 
 * From: @(#)ftpd.c	8.4 (Berkeley) 4/16/94
 * From: NetBSD: ftpd.c,v 1.15 1995/06/03 22:46:47 mycroft Exp
 * From: OpenBSD: ftpd.c,v 1.26 1996/12/07 09:00:22 bitblt Exp
 * From: OpenBSD: ftpd.c,v 1.35 1997/05/01 14:45:37 deraadt Exp
 * From: OpenBSD: ftpd.c,v 1.54 1999/04/29 21:38:43 downsj Exp
 */
char ftpd_rcsid[] = 
  "$Id: ftpd.c,v 1.20 2000/07/23 03:34:56 dholland Exp $";

char copyright[] =
  "@(#) Copyright (c) 1985, 1988, 1990, 1992, 1993, 1994\n"
  "     The Regents of the University of California.  All rights reserved.\n";

/*
 * FTP server.
 */

#if defined(__linux__) || defined(__GLIBC__) || defined(__GNU__)
#define _GNU_SOURCE
#endif

#include <sys/types.h>
#include <sys/param.h>
#include <sys/stat.h>
#include <sys/ioctl.h>
#include <sys/socket.h>
#include <sys/wait.h>
#include <sys/mman.h>

#include <netinet/in.h>
#include <netinet/ip.h>
#include <netinet/tcp.h>

#define	FTP_NAMES
#include <arpa/ftp.h>
#include <arpa/inet.h>
#include <arpa/telnet.h>

#include <ctype.h>
#include <dirent.h>
#include <errno.h>
#include <fcntl.h>
#include <glob.h>
#include <limits.h> /* for CHAR_BIT */
#include <netdb.h>
#include <pwd.h>
#include <setjmp.h>
#include <signal.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <syslog.h>
#include <time.h>
#include <vis.h>
#include <unistd.h>
#include <utmp.h>

#if !defined( __linux__) && !defined(__GLIBC__) && !defined(__GNU__)
#include <util.h>
#include <err.h>
#else
#include <grp.h>       /* for initgroups() */
/* #include <sys/file.h>  * for L_SET et al. * <--- not used? */
#endif

#include "../version.h"

/* glibc 2.[01] does not have TCP_CORK, so define it here */ 
#if __GLIBC__ >= 2 && defined(__linux__) && !defined(TCP_CORK)
#define TCP_CORK 3
#endif

#ifndef MAP_FAILED
#define MAP_FAILED ((void *)-1)
#endif

#ifdef USE_SHADOW
#include <shadow.h>
#include "isexpired.h"
#endif

#if defined(TCPWRAPPERS)
#include <tcpd.h>
#endif	/* TCPWRAPPERS */

#if defined(SKEY)
#include <skey.h>
#endif

#include "pathnames.h"
#include "extern.h"

#ifdef USE_SSL

#include "sslapp.c"

BIO *bio_err;
SSL *ssl_data_con;
int ssl_auto_login=0;

#if 0
#include "rsa.h"        /* extra ... */
/*
#include "asn1.h"
*/
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/ssl.h>
/*
#include "ssl_err.h"
*/

SSL *ssl_con;
SSL_CTX *ssl_ctx;
int ssl_debug_flag=0;
int ssl_only_flag=0;
int ssl_active_flag=0;
int ssl_secure_flag=0;
int ssl_verify_flag=SSL_VERIFY_NONE;
int ssl_certsok_flag=0;
#endif

static char *auth_ssl_name=NULL;
FILE *cin, *cout;

int ssl_data_active_flag=0;

/* for the moment this is a compile time option only --tjh */
int ssl_encrypt_data=1;

#define DEFAULT_SSL_FILE "/etc/ftpd-ssl/ftpd.pem"
char ssl_file_path[1024];    /* don't look at that nasty value to the left */

X509 *ssl_public_cert;
RSA *ssl_private_key;

static int ssl_legacy_flag = 0;

static char *my_ssl_key_file=NULL;
static char *my_ssl_cacert_file=NULL;
static char *my_ssl_cert_file=NULL;
static char *my_ssl_log_file = NULL;

#include "ssl_port.h"

int
do_ssl_start(void);
int 
ssl_getc(SSL *ssl_con);
static int 
ssl_putc(SSL *ssl_con,int oneint);
static int
ssl_putc_flush(SSL *ssl_con);

#endif /* USE_SSL */

#ifdef __STDC__
#include <stdarg.h>
#else
#include <varargs.h>
#endif

#ifdef USE_PAM
#include <sys/types.h>
#include <security/pam_appl.h>
#include <security/pam_misc.h>
/* backward compatibility hack for libpam < 0.58 */
#ifndef PAM_ESTABLISH_CRED
#define PAM_ESTABLISH_CRED PAM_CRED_ESTABLISH
#endif
#endif

/* POSIX does not requires these values, so GNU/Hurd
 * needs them specified. They only occur statically.
 * Use the BSD convention for these values. */
#ifndef MAXPATHLEN
# define MAXPATHLEN 1024
#endif

#ifndef MAXHOSTNAMELEN
# define MAXHOSTNAMELEN 256
#endif

static char versionpre[] = "Version 6.4/OpenBSD/Linux";
static char version[sizeof(versionpre)+sizeof(pkg)];

static int silence_flag = 0;	/* Suppress debugging of something.  */

extern	off_t restart_point;
extern	char cbuf[];

struct	sockaddr_storage server_addr;
struct	sockaddr_storage ctrl_addr;
struct	sockaddr_storage data_source;
struct	sockaddr_storage data_dest;
struct	sockaddr_storage his_addr;
struct	sockaddr_storage pasv_addr;

int	daemon_mode = 0;
int	data;
in_port_t	data_port;
jmp_buf	errcatch, urgcatch;
int	logged_in;
struct	passwd *pw;
#ifdef USE_SHADOW
struct	spwd *spw = NULL;
#endif
int	debug = 0;
int	timeout = 900;    /* timeout after 15 minutes of inactivity */
int	maxtimeout = 7200; /* don't allow idle time to be set beyond 2 hours */
int	numeric_hosts = 0; /* log numeric IP rather than doing lookup */
int	logging;
int	use_ipv6 = 1;		/* Let listening socket use IPv6. */
int	use_ipv4 = 1;		/* Let listening socket use IPv4. */
int	high_data_ports = 0;
int	anon_only = 0;
int	multihome = 0;
int	guest;
int	stats;
int	statfd = -1;
int	portcheck = 1;
int	dochroot;
int	type;
int	form;
int	stru;			/* avoid C keyword */
int	mode;
int	doutmp = 0;		/* update utmp file */
int	usedefault = 1;		/* for data transfers */
int	pdata = -1;		/* for passive mode */
sig_atomic_t transflag;
off_t	file_size;
off_t	byte_count;
#if !defined(CMASK) || CMASK == 0
#undef CMASK
#define CMASK 027
#endif
int	defumask = CMASK;		/* default umask value */
char	tmpline[7];
char	hostname[MAXHOSTNAMELEN];
char	remotehost[MAXHOSTNAMELEN];
char	dhostname[MAXHOSTNAMELEN];
char	*guestpw;
static char ttyline[20];
char	*tty = ttyline;		/* for klogin */
static struct utmp utmp;	/* for utmp */

#if defined(TCPWRAPPERS)
int	allow_severity = LOG_INFO;
int	deny_severity = LOG_NOTICE;
#endif	/* TCPWRAPPERS */

#if defined(KERBEROS)
int	notickets = 1;
char	*krbtkfile_env = NULL;
#endif

char	*ident = NULL;


/*
 * Timeout intervals for retrying connections
 * to hosts that don't accept PORT cmds.  This
 * is a kludge, but given the problems with TCP...
 */
#define	SWAITMAX	90	/* wait at most 90 seconds */
#define	SWAITINT	5	/* interval between retries */

int	swaitmax = SWAITMAX;
int	swaitint = SWAITINT;

#ifdef HASSETPROCTITLE
char	proctitle[BUFSIZ];	/* initial part of title */
#endif /* HASSETPROCTITLE */

#ifdef USE_PAM
static pam_handle_t *pamh;
static char *PAM_username;
static char *PAM_password;
static char *PAM_message;
static int PAM_accepted;
#endif

#define LOGCMD(cmd, file) \
	if (logging > 1) \
	    syslog(LOG_FTP | LOG_INFO,"%s %s%s", cmd, \
		*(file) == '/' ? "" : curdir(), file);
#define LOGCMD2(cmd, file1, file2) \
	 if (logging > 1) \
	    syslog(LOG_FTP | LOG_INFO,"%s %s%s %s%s", cmd, \
		*(file1) == '/' ? "" : curdir(), file1, \
		*(file2) == '/' ? "" : curdir(), file2);
#define LOGBYTES(cmd, file, cnt) \
	if (logging > 1) { \
		if (cnt == (off_t)-1) \
		    syslog(LOG_FTP | LOG_INFO,"%s %s%s", cmd, \
			*(file) == '/' ? "" : curdir(), file); \
		else \
		    syslog(LOG_FTP | LOG_INFO, "%s %s%s = %jd bytes", cmd, \
			*(file) == '/' ? "" : curdir(), file, (intmax_t)(cnt)); \
	}

static void	 ack __P((const char *));
static void	 myoob __P((int));
static int	 checkuser __P((const char *, const char *));
static FILE	*dataconn __P((const char *, off_t, const char *, int));
static void	 dolog __P((struct sockaddr *));
static const char	*curdir __P((void));
static void	 end_login __P((void));
static FILE	*getdatasock __P((const char *));
static int	guniquefd __P((const char *, char **));
static void	 lostconn __P((int));
static void	 sigquit __P((int));
static int	 receive_data __P((FILE *, FILE *));
static void	 replydirname __P((const char *, const char *));
static void	 send_data __P((FILE *, FILE *, off_t, off_t, int));
static struct passwd *
		 sgetpwnam __P((const char *));
static char	*sgetsave __P((char *));
static void	 reapchild __P((int));
static void	 authentication_setup(const char *);

#if defined(TCPWRAPPERS)
static int	 check_host __P((struct sockaddr *));
#endif

void logxfer __P((const char *, off_t, time_t));

#if defined(__linux__) || defined(__GLIBC__) || defined(__GNU__)
static void warnx(const char *format, ...) 
{
	va_list ap;
	va_start(ap, format);
	fprintf(stderr, "ftpd: ");
	vfprintf(stderr, format, ap);
	fprintf(stderr, "\n");
	va_end(ap);
}
#endif /* __linux__ */

static const char *
curdir(void)
{
	static char path[MAXPATHLEN+1];	/* path + '/' */

	if (getcwd(path, sizeof(path)-1) == NULL)
		return ("");
	if (path[1] != '\0')		/* special case for root dir. */
		strcat(path, "/");
	/* For guest account, skip / since it's chrooted */
	return (guest ? path+1 : path);
}

static uint32_t
get_ipv4address(struct sockaddr * ss)
{
	if (ss->sa_family == AF_INET)
		return ntohl(((struct sockaddr_in *) ss)->sin_addr.s_addr);
	else if(ss->sa_family == AF_INET6) {
		return ntohl(((struct sockaddr_in6 *) ss)->sin6_addr.s6_addr32[3]);
	} else
		/* Should Never happen. Sensible return value? */
		return (uint32_t) -2;
} /* get_ipv4address( struct sockaddr_storage * ) */

static int
get_port(struct sockaddr * sa)
{
	switch (sa->sa_family) {
		case AF_INET6:
			return ntohs(((struct sockaddr_in6 *) sa)->sin6_port);
			break;
		case AF_INET:
		default:
			return ntohs(((struct sockaddr_in *) sa)->sin_port);
	}
} /* get_port( struct sockaddr * ) */

static void
set_port(struct sockaddr * sa, short int port)
{
	switch (sa->sa_family) {
		case AF_INET6:
			((struct sockaddr_in6 *) sa)->sin6_port = htons(port);
			break;
		case AF_INET:
		default:
			((struct sockaddr_in *) sa)->sin_port = htons(port);
	}
} /* set_port( struct sockaddr *, short int ) */

#ifdef BREAKRFC
static int 
cmp_addresses(struct sockaddr * left, struct sockaddr * right)
{
	if (left->sa_family != right->sa_family)
		/* Should mapped or compatible IPv4 be handled? */
		return 1;

	if (left->sa_family == AF_INET6)
	    return IN6_ARE_ADDR_EQUAL(&((struct sockaddr_in6 *) left)->sin6_addr,
					&((struct sockaddr_in6 *) right)->sin6_addr)
			? 0 : 1;

	return (memcmp(&((struct sockaddr_in *) left)->sin_addr,
			&((struct sockaddr_in *) right)->sin_addr,
			sizeof(struct in_addr)));
} /* cmp_addresses(struct sockaddr *, struct sockaddr *) */
#endif

int
main(int argc, char *argv[], char **envp)
{
	int ch, on = 1, tos;
	socklen_t addrlen;
	char *cp, line[LINE_MAX];
	FILE *fd;
	const char *argstr = "AdDhlMnSt:T:u:UvP46z:";
	struct addrinfo hints, *aiptr;

#if defined(__linux__) || defined(__GLIBC__) || defined(__GNU__)
	initsetproctitle(argc, argv, envp);
	srandom(time(NULL)^(getpid()<<8));

	/*
	 * Get the version number from pkg[] and put it in version[]
	 * (we do this like this because pkg[] gets updated by the build
	 * environment)
	 */
	{
	   char *tmp, *tmp2, tbuf[sizeof(pkg)+1];
	   strcpy(tbuf, pkg);
	   strcpy(version, versionpre);
	   tmp = strchr(tbuf, '-');
	   if (tmp) {
	      tmp2 = strchr(tmp, ' ');
	      if (tmp2) *tmp2=0;
	      strcat(version, tmp);
	   }
	}
#endif

	tzset();	/* in case no timezone database in ~ftp */

	/* set this here so klogin can use it... */
	(void)snprintf(ttyline, sizeof(ttyline), "ftp%d", getpid());

	while ((ch = getopt(argc, argv, argstr)) != -1) {
		switch (ch) {
		case 'A':
			anon_only = 1;
			break;

		case 'd':
			debug = 1;
			break;

		case 'D':
			daemon_mode = 1;
			break;

		case 'P':
			portcheck = 0;
			break;

		case 'h':
			high_data_ports = 1;
			break;

		case 'l':
			logging++;	/* > 1 == extra logging */
			break;

		case 'M':
			multihome = 1;
			break;

		case 'n':
			numeric_hosts = 1;
			break;

		case 'S':
			stats = 1;
			break;

		case 't':
			timeout = atoi(optarg);
			if (maxtimeout < timeout)
				maxtimeout = timeout;
			break;

		case 'T':
			maxtimeout = atoi(optarg);
			if (timeout > maxtimeout)
				timeout = maxtimeout;
			break;

		case 'u':
		    {
			long val = 0;

			val = strtol(optarg, &optarg, 8);
			if (*optarg != '\0' || val < 0 || (val & ~ACCESSPERMS))
				warnx("bad value for -u");
			else
				defumask = val;
			break;
		    }

		case 'U':
			doutmp = 1;
			break;

		case 'v':
			debug = 1;
			break;

		case '6':
			use_ipv6 = 1;
			use_ipv4 = 0;
			break;

		case '4':
			use_ipv6 = 0;
			use_ipv4 = 1;
			break;

#ifdef USE_SSL
                case 'z':
			if (strcmp(optarg, "legacy") == 0) {
			    ssl_legacy_flag = 1;
			}
		        if (strcmp(optarg, "debug") == 0 ) {
			    ssl_debug_flag=1;
			}
		        if (strncmp(optarg, "debug=", strlen("debug=")) == 0 ) {
			    ssl_debug_flag=1;
			    my_ssl_log_file = optarg + strlen("debug=");
			}
		        if (strcmp(optarg, "verbose") == 0 ) {
			    ssl_verbose_flag=1;
			}
		        if (strcmp(optarg, "ssl") == 0 ) {
			    ssl_only_flag=1;
			}
		        if (strcmp(optarg, "secure") == 0 ) {
			    ssl_secure_flag=1;
			}
                        if (strcmp(optarg, "certsok") == 0) {
                            ssl_certsok_flag=1;
                        }
			if (strcmp(optarg, "certrequired") == 0) {
			    ssl_cert_required = 1;
			}
		        if (strncmp(optarg, "verify=", strlen("verify=")) == 0 ) {
			    ssl_verify_flag=atoi(optarg+strlen("verify="));

			}
		        if (strncmp(optarg, "cacert=", strlen("cacert=")) == 0 ) {
			    my_ssl_cacert_file = optarg + strlen("cacert=");
			}
		        if (strncmp(optarg, "cert=", strlen("cert=")) == 0 ) {
			    my_ssl_cert_file=optarg+strlen("cert=");
			}
		        if (strncmp(optarg, "key=", strlen("key=")) == 0 ) {
			    my_ssl_key_file=optarg+strlen("key=");
			}
		        if (strncmp(optarg, "cipher=", strlen("cipher=")) == 0 ) {
			    ssl_cipher_list = optarg + strlen("cipher=");
			}
			/* we have swallowed an extra arg */
			/*argc--;
			argv++;*/
			break;
#endif /* USE_SSL */

		default:
			warnx("unknown flag -%c ignored", optopt);
			break;
		}
	}

#ifdef USE_SSL
        /* make sure we have access to the required certificate
	 * and key files now ... before we perhaps chroot and 
	 * do the other "muck" for anon-ftp style setup ... though
	 * why we want to run SSL for anon I don't know
	 */

        {
#if 0
            int i;
	    FILE *fp;
            char *filename;
#endif

	    /* keep the macros that are common between the client
	     * and the server happy 
	     */
	    cin=stdin;
	    cout=stderr;

	    if (my_ssl_cacert_file && *my_ssl_cacert_file) {
		ssl_cacert_file = my_ssl_cacert_file;
	    }
	    if (my_ssl_cert_file==NULL) {
		strcpy(ssl_file_path,DEFAULT_SSL_FILE);
		ssl_cert_file=ssl_file_path;
	    } else {
	    	ssl_cert_file=my_ssl_cert_file;
	    }
	    if (my_ssl_key_file && *my_ssl_key_file) {
		ssl_key_file = my_ssl_key_file;
	    }
	    if (my_ssl_log_file && *my_ssl_log_file)
		ssl_log_file = my_ssl_log_file;

	    if (ssl_certsok_flag || ssl_cert_required)
		ssl_verify_flag |= SSL_VERIFY_PEER;

	    if (ssl_cert_required)
		ssl_verify_flag |= SSL_VERIFY_FAIL_IF_NO_PEER_CERT;

	    if (!do_ssleay_init(1)) {
		if (ssl_debug_flag)
		    (void) BIO_printf(bio_err, "SSLeay initialisation failed\n");
		fprintf(stderr,"ftpd: SSLeay initialisation failed\n");
		fflush(stderr);
		sleep(1);
		exit(1);
	    }

#if 0
            /* if we are not running in debug then any error
             * stuff from SSL debug *must* not go down
             * the socket (which 0,1,2 are all pointing to by
             * default)
             */
            if (ssl_debug_flag) {
		if (standalone) {
		    SSL_ERR=stderr;
		    SSL_LOG=stderr;
		} else {
		    (void)freopen("ftpd.err","w",stderr);
		    SSL_ERR=stderr;
		    SSL_LOG=NULL;
		    SSL_debug("ftpd.log");
		    if (SSL_LOG==NULL) {
			SSL_LOG=fopen("ftpd.log","w");
			if (SSL_LOG==NULL)
			    SSL_LOG=stderr;
		    }
		}
            } else {
                /* disable all the debug and trace */
		SSL_LOG=SSL_ERR=NULL; /**/
            }

	    if (ssl_debug_flag) {
		if (SSL_LOG!=NULL) {
		    fprintf(SSL_LOG,"SSL_LOG started\n");
		    fflush(SSL_LOG);
		}
		if (SSL_ERR!=NULL) {
		    fprintf(SSL_ERR,"SSL_ERR started\n");
		    fflush(SSL_ERR);
		}
	    }

	    SSL_load_error_strings();

	    ssl_ctx=SSL_CTX_new();

	    /* I really should syslog any of the following
	     * errors but I haven't bothered at this stage
	     * as that can wait
	     */
/*
            if (!X509_set_default_verify_paths(ssl_ctx->cert)) 
*/
            if (!SSL_set_default_verify_paths(ssl_ctx)) {
		fprintf(stderr,"ftpd: cannot set default path via X509_set_default_verify_paths\n");
		fflush(stderr);
		sleep(1);
		exit(1);
            }

#if 0
            sprintf(ssl_file_path,"%s/%s",X509_get_default_cert_dir(),
                        "ftpd.cert");
#endif

	    strcpy(ssl_file_path,DEFAULT_SSL_FILE);

	    filename=my_ssl_cert_file==NULL?ssl_file_path:my_ssl_cert_file;
	    fp=fopen(filename,"r");
	    if (fp==NULL) {
		fprintf(stderr,"ftpd: cannot open public cert file \"%s\"\n",filename);
		fflush(stderr);
		exit(1);
	    }

	    ssl_public_cert=X509_new();
	    if (PEM_read_X509(fp,&ssl_public_cert,NULL)==NULL) {
		fprintf(stderr,"ftpd: error reading public cert - %s\n",
                                ERR_error_string(ERR_get_error(),NULL));
		fflush(stderr);
		exit(1);
	    }
	    fclose(fp);

	    if (ssl_debug_flag) {
		fprintf(SSL_LOG,"ftpd: got public cert\n");
		fflush(SSL_LOG);
	    }

#if 0
            sprintf(ssl_file_path,"%s/private/%s",X509_get_default_cert_area(),
                        "ftpd.key");
#endif

	    strcpy(ssl_file_path,DEFAULT_SSL_FILE);

	    filename=my_ssl_key_file==NULL?ssl_file_path:my_ssl_key_file;
	    fp=fopen(filename,"r");
	    if (fp==NULL) {
		fprintf(stderr,"ftpd: cannot open private key file \"%s\"\n",filename);
		fflush(stderr);
		exit(1);
	    }

	    ssl_private_key=RSA_new();
	    if (PEM_read_RSAPrivateKey(fp,&ssl_private_key,NULL)==0) {
		fprintf(stderr,"ftpd: error reading private key - %s\n",
			ERR_error_string(ERR_get_error(),NULL));
		fflush(stderr);
		exit(1);
	    }
	    fclose(fp);

	    if (ssl_debug_flag) {
		fprintf(SSL_LOG,"ftpd: got private key\n");
		fflush(SSL_LOG);
	    }
#endif /* 0 */

	    if (ssl_debug_flag) {
		(void) BIO_printf(bio_err, "Init of SSL is complete.\r\n");
		(void) BIO_printf(bio_err, "Flags: ssl %d, secure %d, verify %d, certsok %d, certreq %d\r\n",
				  ssl_only_flag, ssl_secure_flag,
				  ssl_verify_flag, ssl_certsok_flag,
				  ssl_cert_required);
		if (ssl_legacy_flag)
		    (void) BIO_printf(bio_err, "Warning: Legacy mode in use!\r\n");
		(void) BIO_flush(bio_err);
	    }
        }
#endif /* USE_SSL */

	(void) freopen(_PATH_DEVNULL, "w", stderr);

	/*
	 * LOG_NDELAY sets up the logging connection immediately,
	 * necessary for anonymous ftp's that chroot and can't do it later.
	 */
#ifndef LOG_FTP
#define LOG_FTP LOG_DAEMON
#endif
	openlog("ftpd", LOG_PID | LOG_NDELAY, LOG_FTP);

	if (daemon_mode) {
		int ctl_sock, fd2, rc;
		struct servent *sv;
		struct addrinfo hints, *ai, *aiptr;

		/*
		 * Detach from parent.
		 */
		if (daemon(1, 1) < 0) {
			syslog(LOG_FTP | LOG_ERR, "failed to become a daemon");
			exit(1);
		}
		(void) signal(SIGCHLD, reapchild);
		/*
		 * Get port number for ftp/tcp.
		 */
		sv = getservbyname("ftp", "tcp");
		if (sv == NULL) {
			syslog(LOG_FTP | LOG_ERR,
			    "getservbyname for ftp failed");
			exit(1);
		}
		/*
		 * Open a socket, bind it to the FTP port,
		 * and begin listening for calls.
		 */
		memset(&hints, 0, sizeof(hints));
		hints.ai_flags = AI_PASSIVE | AI_ADDRCONFIG;
		hints.ai_socktype = SOCK_STREAM;
		hints.ai_family = use_ipv6 ? AF_INET6 : AF_INET;

		if ((rc = getaddrinfo(NULL, "ftp", &hints, &aiptr))) {
			syslog(LOG_FTP | LOG_ERR,
			    "getaddrinfo for ftp failed (%s)",
			    gai_strerror(rc));
			exit(1);
		}
		/* Loop over possible alternatives. */
		for (ai = aiptr; ai; ai = ai->ai_next) {
			if ((ctl_sock = socket(ai->ai_family,
						ai->ai_socktype, ai->ai_protocol))
					< 0)
				continue;
			if (setsockopt(ctl_sock, SOL_SOCKET, SO_REUSEADDR,
			    (char *)&on, sizeof(on)) < 0)
				syslog(LOG_FTP | LOG_ERR, "control setsockopt: %m");;

			/* Should the listening control socket be dual stacked?
			 * Only one case needs this: use_ipv6 = use_ipv4 = 1.    */
			if (ai->ai_family == AF_INET6 && use_ipv4) {
				socklen_t off = 0;

				if (setsockopt(ctl_sock, IPPROTO_IPV6, IPV6_V6ONLY,
							&off, sizeof(off)))
					syslog(LOG_FTP | LOG_ERR, "control setsockopt: %m");
			}

			if (bind(ctl_sock, ai->ai_addr, ai->ai_addrlen)) {
				close(ctl_sock);
				continue;
			}
			if (listen(ctl_sock, 32) < 0) {
				close(ctl_sock);
				continue;
			}

			/* Socket successfully established: bound and listening. */
			break;
		}

		freeaddrinfo(aiptr);

		if (ai == NULL) {
			/* Failure, no socket established. */
			syslog(LOG_FTP | LOG_ERR, "listening socket failed");
			exit(1);
		}

		/*
		 * Loop forever, accepting connection requests, and forking off
		 * children to handle them.
		 */
		while (1) {
			addrlen = sizeof(his_addr);
			fd2 = accept(ctl_sock, (struct sockaddr *)&his_addr,
				    &addrlen);
			if (fork() == 0) {
				/* child */
				(void) dup2(fd2, 0);
				(void) dup2(fd2, 1);
				close(ctl_sock);
				break;
			}
			close(fd2);
		}

#if defined(TCPWRAPPERS)
		/* ..in the child. */
		if (!check_host((struct sockaddr *) &his_addr))
			exit(1);
#endif	/* TCPWRAPPERS */
	} else {
		addrlen = sizeof(his_addr);
		if (getpeername(0, (struct sockaddr *)&his_addr,
				&addrlen) < 0) {
			syslog(LOG_FTP | LOG_ERR, "getpeername (%s): %m",
			    argv[0]);
			exit(1);
		}
	}

	(void) signal(SIGHUP, sigquit);
	(void) signal(SIGINT, sigquit);
	(void) signal(SIGQUIT, sigquit);
	(void) signal(SIGTERM, sigquit);
	(void) signal(SIGPIPE, lostconn);
	(void) signal(SIGCHLD, SIG_IGN);
	if (signal(SIGURG, myoob) == SIG_ERR)
		syslog(LOG_FTP | LOG_ERR, "signal: %m");

	addrlen = sizeof(ctrl_addr);
	if (getsockname(0, (struct sockaddr *)&ctrl_addr, &addrlen) < 0) {
		syslog(LOG_FTP | LOG_ERR, "getsockname (%s): %m", argv[0]);
		exit(1);
	}
#ifdef IP_TOS
	tos = IPTOS_LOWDELAY;
#  if defined(__GLIBC__) && ! defined(__linux__)
	if ( (his_addr.ss_family == AF_INET)
		&& (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&tos,
				sizeof(int)) < 0) )
		syslog(LOG_FTP | LOG_WARNING, "setsockopt (IP_TOS): %m");
#  else /* __linux__ */
	if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&tos, sizeof(int)) < 0)
		syslog(LOG_FTP | LOG_WARNING, "setsockopt (IP_TOS): %m");
#  endif /* GNU/kfreebsd */
#endif /* IP_TOS */
	data_port = get_port((struct sockaddr *) &ctrl_addr) - 1;

	/* Try to handle urgent data inline */
#ifdef SO_OOBINLINE
	if (setsockopt(0, SOL_SOCKET, SO_OOBINLINE, (char *)&on, sizeof(on)) < 0)
		syslog(LOG_FTP | LOG_ERR, "setsockopt: %m");
#endif

#ifdef	F_SETOWN
	if (fcntl(fileno(stdin), F_SETOWN, getpid()) == -1)
		syslog(LOG_FTP | LOG_ERR, "fcntl F_SETOWN: %m");
#endif
	dolog((struct sockaddr *) &his_addr);
	/*
	 * Set up default state
	 */
	data = -1;
	type = TYPE_A;
	form = FORM_N;
	stru = STRU_F;
	mode = MODE_S;
	tmpline[0] = '\0';

	/* If logins are disabled, print out the message. */
	if ((fd = fopen(_PATH_NOLOGIN,"r")) != NULL) {
		while (fgets(line, sizeof(line), fd) != NULL) {
			if ((cp = strchr(line, '\n')) != NULL)
				*cp = '\0';
			lreply(530, "%s", line);
		}
		(void) fflush(stdout);
		(void) fclose(fd);
		reply(530, "System not available.");
		exit(0);
	}
	if ((fd = fopen(_PATH_FTPWELCOME, "r")) != NULL) {
		while (fgets(line, sizeof(line), fd) != NULL) {
			if ((cp = strchr(line, '\n')) != NULL)
				*cp = '\0';
			lreply(220, "%s", line);
		}
		(void) fflush(stdout);
		(void) fclose(fd);
		/* reply(220,) must follow */
	}
	(void) gethostname(hostname, sizeof(hostname));

	memset(&hints, 0, sizeof(hints));
	hints.ai_socktype = SOCK_STREAM;
	hints.ai_family = AF_UNSPEC;
	hints.ai_flags = AI_ADDRCONFIG | AI_CANONNAME;

	/* Make sure hostname is fully qualified. */
	if (getaddrinfo(hostname, NULL, &hints, &aiptr) == 0) {
		strncpy(hostname, aiptr->ai_canonname, sizeof(hostname));
		freeaddrinfo(aiptr);
	}

	if (multihome)
		(void) getnameinfo((struct sockaddr *) &ctrl_addr, addrlen,
				dhostname, sizeof(dhostname), NULL, 0, 0);

	reply(220, "%s FTP server (%s) ready.",
	      (multihome ? dhostname : hostname), version);
	(void) setjmp(errcatch);
	for (;;)
		(void) yyparse();
	/* NOTREACHED */
}

/*
 * Signal handlers.
 */

static void
lostconn(int signo)
{
	(void)signo;

	if (debug)
		syslog(LOG_FTP | LOG_DEBUG, "lost connection");
	dologout(-1);
}

static void sigquit(int signo)
{
	syslog(LOG_FTP | LOG_ERR, "got signal %s", strsignal(signo));

	dologout(-1);
}

/*
 * Helper function for sgetpwnam().
 */
static char * sgetsave(char *s)
{
	char *new = malloc((unsigned) strlen(s) + 1);

	if (new == NULL) {
		perror_reply(421, "Local resource failure: malloc");
		dologout(1);
		/* NOTREACHED */
	}
	(void) strcpy(new, s);
	return (new);
}

/*
 * Save the result of a getpwnam.  Used for USER command, since
 * the data returned must not be clobbered by any other command
 * (e.g., globbing).
 */
static struct passwd *sgetpwnam(const char *name)
{
	static struct passwd save;
	struct passwd *p;

	if ((p = getpwnam(name)) == NULL)
		return (p);
#ifdef USE_SHADOW
	if ((spw = getspnam(name)) != NULL)
		p->pw_passwd = spw->sp_pwdp;
	endspent();  /* ? */
#endif
	if (save.pw_name) {
		free(save.pw_name);
		memset(save.pw_passwd, 0, strlen(save.pw_passwd));
		free(save.pw_passwd);
		free(save.pw_gecos);
		free(save.pw_dir);
		free(save.pw_shell);
	}
	save = *p;
	save.pw_name = sgetsave(p->pw_name);
	save.pw_passwd = sgetsave(p->pw_passwd);
	save.pw_gecos = sgetsave(p->pw_gecos);
	save.pw_dir = sgetsave(p->pw_dir);
	save.pw_shell = sgetsave(p->pw_shell);
	return (&save);
}

static int login_attempts;	/* number of failed login attempts */
static int askpasswd;		/* had user command, ask for passwd */
static char curname[16];	/* current USER name */

int
good_ssl_user(char *name);

/*
 * USER command.
 * Sets global passwd pointer pw if named account exists and is acceptable;
 * sets askpasswd if a PASS command is expected.  If logged in previously,
 * need to reset state.  If name is "ftp" or "anonymous", the name is not in
 * _PATH_FTPUSERS, and ftp account exists, set guest and pw, then just return.
 * If account doesn't exist, ask for passwd anyway.  Otherwise, check user
 * requesting login privileges.  Disallow anyone who does not have a standard
 * shell as returned by getusershell().  Disallow anyone mentioned in the file
 * _PATH_FTPUSERS to allow people such as root and uucp to be avoided.
 *
 * pw maybe unset if we're using PAM and the login turns out to be anonymous.
 *	-- herbert
 */
void user(char *name)
{
#ifndef USE_PAM
	const char *cp, *shell;
#endif

	if (logged_in) {
		if (guest) {
			reply(530, "Can't change user from guest login.");
			return;
		} else if (dochroot) {
			reply(530, "Can't change user from chroot user.");
			return;
		}
		end_login();
	}

#ifdef USE_PAM
	authentication_setup(name);
#else /* !USE_PAM */
	guest = 0;
	if (strcmp(name, "ftp") == 0 || strcmp(name, "anonymous") == 0) {
		if (checkuser(_PATH_FTPUSERS, "ftp") ||
		    checkuser(_PATH_FTPUSERS, "anonymous"))
			reply(530, "User %s access denied.", name);
		else if ((pw = sgetpwnam("ftp")) != NULL) {
			guest = 1;
			askpasswd = 1;
			reply(331,
			    "Guest login ok, type your name as password.");
		} else
			reply(530, "User %s unknown.", name);
		if (!askpasswd && logging)
			syslog(LOG_FTP | LOG_NOTICE,
			    "ANONYMOUS FTP LOGIN REFUSED FROM %s", remotehost);
		return;
	}
	if (anon_only && !checkuser(_PATH_FTPCHROOT, name)) {
		reply(530, "Sorry, only anonymous ftp allowed.");
		return;
	}

	if ((pw = sgetpwnam(name))!=NULL) {
		if ((shell = pw->pw_shell) == NULL || *shell == 0)
			shell = _PATH_BSHELL;
		while ((cp = getusershell()) != NULL)
			if (strcmp(cp, shell) == 0)
				break;
		endusershell();

		if (cp == NULL || checkuser(_PATH_FTPUSERS, name)) {
			reply(530, "User %s access denied.", name);
			if (logging)
				syslog(LOG_FTP | LOG_NOTICE,
				    "FTP LOGIN REFUSED FROM %s, %s",
				    remotehost, name);
			pw = (struct passwd *) NULL;
			return;
		}
	}
#ifdef USE_SSL
        if (pw && good_ssl_user(name)) {
                reply(331, "Send dummy password to login.");
                ssl_auto_login = 1;
        } else
#endif
#ifdef SKEY
	if (!skey_haskey(name)) {
		char *myskey, *skey_keyinfo __P((char *name));

		myskey = skey_keyinfo(name);
		reply(331, "Password [ %s ] for %s required.",
		    myskey ? myskey : "error getting challenge", name);
	} else
#endif
		reply(331, "Password required for %s.", name);
#endif /* !USE_PAM */
	if (logging) {
		strncpy(curname, name, sizeof(curname)-1);
		curname[sizeof(curname)-1] = '\0';
	}

	askpasswd = 1;
	/*
	 * Delay before reading passwd after first failed
	 * attempt to slow down passwd-guessing programs.
	 */
	if (login_attempts)
		sleep((unsigned) login_attempts);
}

/*
 * Check if a user is in the file "fname"
 */
static int checkuser(const char *fname, const char *name)
{
	FILE *fd;
	int found = 0;
	char *p, line[BUFSIZ];

	if ((fd = fopen(fname, "r")) != NULL) {
		while (fgets(line, sizeof(line), fd) != NULL)
			if ((p = strchr(line, '\n')) != NULL) {
				*p = '\0';
				if (line[0] == '#')
					continue;
				if (strcmp(line, name) == 0) {
					found = 1;
					break;
				}
			}
		(void) fclose(fd);
	}
	return (found);
}

/*
 * Terminate login as previous user, if any, resetting state;
 * used when USER command is given or login fails.
 */
static void end_login(void)
{
	sigset_t allsigs;
	sigfillset (&allsigs);
	sigprocmask (SIG_BLOCK, &allsigs, NULL);
	(void) seteuid((uid_t)0);
	if (logged_in) {
#ifdef USE_PAM
		int error;
		error = pam_close_session(pamh, 0);
		pam_end(pamh, error);
		pamh = 0;
#endif
		ftpdlogwtmp(ttyline, "", "", NULL);
		if (doutmp)
			logout(utmp.ut_line);
#if defined(KERBEROS)
		if (!notickets && krbtkfile_env)
			unlink(krbtkfile_env);
#endif
	}
	pw = NULL;
	logged_in = 0;
	guest = 0;
	dochroot = 0;
}

#ifdef USE_PAM
/*
 * PAM authentication, now using the PAM's async feature.
 */
static int PAM_conv (int num_msg, const struct pam_message **msg,
		     struct pam_response **resp, void *appdata_ptr)
{
	struct pam_response *repl = NULL;
	int retval, count = 0, replies = 0;
	int size = sizeof(struct pam_response);

#define GET_MEM \
	if (!(repl = realloc(repl, size))) \
		return PAM_CONV_ERR; \
	size += sizeof(struct pam_response)
#define COPY_STRING(s) (s) ? strdup(s) : NULL

	(void) appdata_ptr;
	retval = PAM_SUCCESS;
	for (count = 0; count < num_msg; count++) {
		int savemsg = 0;

		switch (msg[count]->msg_style) {
		case PAM_PROMPT_ECHO_ON:
			GET_MEM;
			repl[replies].resp_retcode = PAM_SUCCESS;
			repl[replies].resp = COPY_STRING(PAM_username);
			replies++;
			break;
		case PAM_PROMPT_ECHO_OFF:
			GET_MEM;
			if (PAM_password == 0) {
				savemsg = 1;
				retval = PAM_CONV_AGAIN;
			} else {
				repl[replies].resp_retcode = PAM_SUCCESS;
				repl[replies].resp = COPY_STRING(PAM_password);
				replies++;
			}
			break;
		case PAM_TEXT_INFO:
			savemsg = 1;
			break;
		case PAM_ERROR_MSG:
		default:
			/* Must be an error of some sort... */
			retval = PAM_CONV_ERR;
		}

		if (savemsg) {
			char *sp;

			if (PAM_message) {
				/* XXX: make sure we split newlines correctly */
				lreply(331, "%s", PAM_message);
				free(PAM_message);
			}
			PAM_message = COPY_STRING(msg[count]->msg);

			/* Remove trailing `: ' */
			sp = PAM_message + strlen(PAM_message);
			while (sp > PAM_message && strchr(" \t\n:", *--sp))
				*sp = '\0';
		}

		/* In case of error, drop responses and return */
		if (retval) {
			_pam_drop_reply(repl, replies);
			return retval;
		}
	}
	if (repl)
		*resp = repl;
	return PAM_SUCCESS;
}

static struct pam_conv PAM_conversation = {
	&PAM_conv,
	&auth_ssl_name
};

static int pam_doit(void)
{
	static old_silence_flag = 0;
	static silent_password = 0;
	int error;

	error = pam_authenticate(pamh, 0);
	if (error == PAM_CONV_AGAIN || error == PAM_INCOMPLETE) {
		/* Avoid overly terse passwd messages */
		if (PAM_message && !strcasecmp(PAM_message, "password")) {
			free(PAM_message);
			PAM_message = 0;
		}
		if (PAM_message == 0) {
			reply(331, "Password required for %s.", PAM_username);
		} else {
			reply(331, "%s", PAM_message);
			free(PAM_message);
			PAM_message = 0;
		}

		silent_password = 1;
		old_silence_flag = silence_flag;
		silence_flag = 1;	/* Suppress debug exposure.  */

		return 1;
	}

	if (silent_password) {
	    silence_flag = old_silence_flag;
	    silent_password = 0;
	}

	/* Should a user be allowed entry when present in
	 * '/etc/ssl.users' despite giving an incorrect password?
	 */
	if (ssl_certsok_flag && (error == PAM_AUTH_ERR)
		&& *((char **) PAM_conversation.appdata_ptr)) {
	    /* XXX: Only issue debugging for now.
	     */
	    if (good_ssl_user(PAM_username)) {
		if (ssl_debug_flag)
		    BIO_printf(bio_err, "Certsok accepts: %s as %s\r\n",
			       PAM_username, auth_ssl_name);
		// error = PAM_SUCCESS;
		// PAM_accepted = 1;
	    } else {
		if (ssl_debug_flag)
		    BIO_printf(bio_err, "Certsok rejects: %s as %s\r\n",
			       PAM_username, auth_ssl_name);
		// PAM_accepted = 0;
	    }
	}

	if (error == PAM_SUCCESS) {
		const void *vp;

		/* Alright, we got it */
		error = pam_acct_mgmt(pamh, 0);
		if (error == PAM_SUCCESS)
			error = pam_open_session(pamh, 0);
		if (error == PAM_SUCCESS)
			error = pam_setcred(pamh, PAM_ESTABLISH_CRED);
		if (error == PAM_SUCCESS)
			error = pam_get_item(pamh, PAM_USER, &vp);
		if (error == PAM_SUCCESS) {
			const char *user = vp;

			if (strcmp(user, "ftp") == 0) {
				guest = 1;
			}
			pw = sgetpwnam(user);
		}
		if (error == PAM_SUCCESS && pw)
			PAM_accepted = 1;
	}

	return (error == PAM_SUCCESS);
}


static void authentication_setup(const char *username)
{
	int error;

	if (pamh != 0) {
		pam_end(pamh, PAM_ABORT);
		pamh = 0;
	}

	if (PAM_username)
		free(PAM_username);
	PAM_username = strdup(username);
	PAM_password = 0;
	PAM_message  = 0;
	PAM_accepted = 0;

	error = pam_start("ftp", PAM_username, &PAM_conversation, &pamh);
	if (error == PAM_SUCCESS)
		error = pam_set_item(pamh, PAM_RHOST, remotehost);
	if (error != PAM_SUCCESS) {
		reply(550, "Authentication failure");
		pam_end(pamh, error);
		pamh = 0;
	}

	if (pamh && !pam_doit())
		reply(550, "Authentication failure");
}

static int authenticate(char *passwd)
{
	if (PAM_accepted)
		return 1;

	if (pamh == 0)
		return 0;

	PAM_password = passwd;
	pam_doit();
	PAM_password = 0;

	return PAM_accepted;
}

#else /* !USE_PAM */
static int authenticate(char *passwd)
{
	if (pw == NULL) {
		useconds_t us;

		/* Sleep between 1 and 3 seconds to emulate a crypt. */
#if !defined(__linux__) && !defined(__GLIBC__) && !defined(__GNU__)
		us = arc4random() % 3000000;
#else
		us = random() % 3000000;
#endif
		usleep(us);
		return 0;
	}

#if defined(KERBEROS)
	if (klogin(pw, "", hostname, passwd) == 0)
		return 1;
#endif
#ifdef SKEY
	if (skey_haskey(pw->pw_name) == 0 &&
	   (skey_passcheck(pw->pw_name, passwd) != -1))
		return 1;
#endif
	/* the strcmp does not catch null passwords! */
	if (pw == NULL || *pw->pw_passwd == '\0' ||
	    strcmp(crypt(passwd, pw->pw_passwd), pw->pw_passwd))
		return 0;	 /* failure */

	return 1;
}
#endif /* !USE_PAM */


void pass(char *passwd)
{
	FILE *fd;
	static char homedir[MAXPATHLEN];
	char rootdir[MAXPATHLEN];
	sigset_t allsigs;

	if (logged_in || askpasswd == 0) {
		reply(503, "Login with USER first.");
		return;
	}
	askpasswd = 0;
#ifndef USE_PAM
	if (!guest
#ifdef USE_SSL
             && !ssl_auto_login
#endif
	    ) {		/* "ftp" is only account allowed no password */
#endif /* !USE_PAM */
		/*
		 * Try to authenticate the user
		 */
		if (!authenticate(passwd)) {
			reply(530, "Login incorrect.");
			if (logging)
				syslog(LOG_FTP | LOG_NOTICE,
				    "FTP LOGIN FAILED FROM %s, %s",
				    remotehost, curname);
			pw = NULL;
			if (login_attempts++ >= 5) {
				syslog(LOG_FTP | LOG_NOTICE,
				    "repeated login failures from %s",
				    remotehost);
				exit(0);
			}
			return;
		}
#ifdef USE_PAM
	if (guest
#ifdef USE_SSL
             || ssl_auto_login
#endif
	    ) {
#else /* !USE_PAM */
	} else {
#endif
		/* Save anonymous' password. */
		guestpw = strdup(passwd);
		if (guestpw == (char *)NULL)
			fatal("Out of memory");
	}
	login_attempts = 0;		/* this time successful */
#if defined(USE_SHADOW) && !defined(USE_PAM)
	switch (isexpired(spw)) {
	  case 0: /* success */
		break;
	  case 1:
		syslog(LOG_FTP | LOG_NOTICE, "expired password from %s, %s",
		       remotehost, pw->pw_name);
		reply(530, "Please change your password and try again.");
		return;
	  case 2:
       		syslog(LOG_FTP | LOG_NOTICE, "inactive login from %s, %s",
		       remotehost, pw->pw_name);
		reply(530, "Login inactive -- contact administrator.");
		return;
	  case 3:
		syslog(LOG_FTP | LOG_NOTICE, "expired login from %s, %s",
		       remotehost, pw->pw_name);
		reply(530, "Account expired -- contact administrator.");
		return;
	}
#endif
	if (setegid((gid_t)pw->pw_gid) < 0) {
		reply(550, "Can't set gid.");
		return;
	}
	(void) initgroups(pw->pw_name, pw->pw_gid);

	/* open wtmp before chroot */
	ftpdlogwtmp(ttyline, pw->pw_name, remotehost, &his_addr);

	/* open utmp before chroot */
	if (doutmp) {
		memset((void *)&utmp, 0, sizeof(utmp));

#if __WORDSIZE == 64 && __WORDSIZE_COMPAT32
		/* Length of 'time_t' is 64 bits, but 'utmp.ut_time' has 32 bits.*/
		time_t now;

		(void)time(&now);
		utmp.ut_time = now & 0xffffffff; /* Discard the upper 32 bits. */
#else
		/* Equal size time representations. */
		(void)time(&utmp.ut_time);
#endif /* Mixed 64 and 32 bits time */

		(void)strncpy(utmp.ut_name, pw->pw_name, sizeof(utmp.ut_name));
		(void)strncpy(utmp.ut_host, remotehost, sizeof(utmp.ut_host));
		(void)strncpy(utmp.ut_line, ttyline, sizeof(utmp.ut_line));
		switch (his_addr.ss_family) {
			case AF_INET6:
				memcpy(&utmp.ut_addr,
					&((struct sockaddr_in6 *) &his_addr)->sin6_addr,
					sizeof(struct in6_addr));
				break;
			case AF_INET:
				memcpy(&utmp.ut_addr,
					&((struct sockaddr_in *) &his_addr)->sin_addr,
					sizeof(struct in_addr));
			default:
				break;
		}
		login(&utmp);
	}

	/* open stats file before chroot */
	if (guest && (stats == 1) && (statfd < 0))
		if ((statfd = open(_PATH_FTPDSTATFILE, O_WRONLY|O_APPEND)) < 0)
			stats = 0;

	logged_in = 1;

	dochroot = checkuser(_PATH_FTPCHROOT, pw->pw_name);
	if (guest || dochroot) {
		if (multihome && guest) {
			struct stat ts;

			/* Compute root directory. */
			snprintf(rootdir, sizeof(rootdir), "%s/%s",
				  pw->pw_dir, dhostname);
			if (stat(rootdir, &ts) < 0) {
				snprintf(rootdir, sizeof(rootdir), "%s/%s",
					  pw->pw_dir, hostname);
			}
		} else
			strcpy(rootdir, pw->pw_dir);
	}
	if (guest) {
		/*
		 * We MUST do a chdir() after the chroot. Otherwise
		 * the old current directory will be accessible as "."
		 * outside the new root!
		 */
		if (chroot(rootdir) < 0 || chdir("/") < 0) {
			reply(550, "Can't set guest privileges.");
			goto bad;
		}
		strcpy(pw->pw_dir, "/");
		setenv("HOME", "/", 1);
	} else if (dochroot) {
		if (chroot(rootdir) < 0 || chdir("/") < 0) {
			reply(550, "Can't change root.");
			goto bad;
		}
		strcpy(pw->pw_dir, "/");
		setenv("HOME", "/", 1);
	}
	/* PSz 25 Aug 06  chdir for real users done after setting UID */
	if (seteuid((uid_t)pw->pw_uid) < 0) {
		reply(550, "Can't set uid.");
		goto bad;
	}
	if (guest || dochroot) { /* do nothing, handled above */
	} else if (chdir(pw->pw_dir) < 0) {
		if (chdir("/") < 0) {
			reply(530, "User %s: can't change directory to %s.",
			    pw->pw_name, pw->pw_dir);
			goto bad;
		} else
			lreply(230, "No directory! Logging in with home=/");
	}

	sigfillset(&allsigs);
	sigprocmask(SIG_UNBLOCK,&allsigs,NULL);

	/*
	 * Set home directory so that use of ~ (tilde) works correctly.
	 */
	if (getcwd(homedir, sizeof homedir) != NULL)
		setenv("HOME", homedir, 1);

	/*
	 * Display a login message, if it exists.
	 * N.B. reply(230,) must follow the message.
	 */
	if ((fd = fopen(_PATH_FTPLOGINMESG, "r")) != NULL) {
		char *cp, line[LINE_MAX];

		while (fgets(line, sizeof(line), fd) != NULL) {
			if ((cp = strchr(line, '\n')) != NULL)
				*cp = '\0';
			lreply(230, "%s", line);
		}
		(void) fflush(stdout);
		(void) fclose(fd);
	}
	if (guest) {
		if (ident != NULL)
			free(ident);
		ident = strdup(passwd);
		if (ident == (char *)NULL)
			fatal("Ran out of memory.");
		reply(230, "Guest login ok, access restrictions apply.");
#ifdef HASSETPROCTITLE
		snprintf(proctitle, sizeof(proctitle),
		    "%s: anonymous/%.*s", remotehost,
		    (int)(sizeof(proctitle) - sizeof(remotehost) -
		    sizeof(": anonymous/")), passwd);
		setproctitle("%s", proctitle);
#endif /* HASSETPROCTITLE */
		if (logging)
			syslog(LOG_FTP | LOG_INFO,
			    "ANONYMOUS FTP LOGIN FROM %s, %s",
			    remotehost,
			    passwd && *passwd ? passwd : "(no passwd)");
	} else {
		reply(230, "User %s logged in.", pw->pw_name);
#ifdef HASSETPROCTITLE
		snprintf(proctitle, sizeof(proctitle),
		    "%s: %s", remotehost, pw->pw_name);
		setproctitle("%s", proctitle);
#endif /* HASSETPROCTITLE */
		if (logging)
			syslog(LOG_FTP | LOG_INFO, "FTP LOGIN FROM %s as %s",
			    remotehost, pw->pw_name);
	}
	(void) umask(defumask);
	return;
bad:
	/* Forget all about it... */
	end_login();
}

void retrieve(const char *cmd, const char *name)
{
	FILE *fin, *dout;
	struct stat st;
	int (*closefunc) __P((FILE *));
	time_t start;

	if (cmd == 0) {
		fin = fopen(name, "r"), closefunc = fclose;
		st.st_size = 0;
	} else {
		char line[BUFSIZ];

		(void) snprintf(line, sizeof(line), cmd, name);
		name = line;
		fin = ftpd_popen(line, "r"), closefunc = ftpd_pclose;
		st.st_size = -1;
		st.st_blksize = BUFSIZ;
	}
	if (fin == NULL) {
		if (errno != 0) {
			perror_reply(550, name);
			if (cmd == 0) {
				LOGCMD("get", name);
			}
		}
		return;
	}
	byte_count = -1;
	if (cmd == 0 && (fstat(fileno(fin), &st) < 0 || !S_ISREG(st.st_mode))) {
		reply(550, "%s: not a plain file.", name);
		goto done;
	}
	if (restart_point) {
		if (type == TYPE_A) {
			off_t i, n;
			int c;

			n = restart_point;
			i = 0;
			while (i++ < n) {
				if ((c=getc(fin)) == EOF) {
					perror_reply(550, name);
					goto done;
				}
				if (c == '\n')
					i++;
			}
		} else if (lseek(fileno(fin), restart_point, SEEK_SET) < 0) {
			perror_reply(550, name);
			goto done;
		}
	}
	dout = dataconn(name, st.st_size, "w", 0);
	if (dout == NULL)
		goto done;
	time(&start);
	send_data(fin, dout, st.st_blksize, st.st_size,
		  (restart_point == 0 && cmd == 0 && S_ISREG(st.st_mode)));
	if ((cmd == 0) && stats)
		logxfer(name, st.st_size, start);

#ifdef USE_SSL
	if (ssl_data_active_flag && (ssl_data_con!=NULL)) {
	    SSL_free(ssl_data_con);
	    ssl_data_active_flag=0;
	    ssl_data_con=NULL;
	}
#endif /* USE_SSL */

	(void) fclose(dout);
	data = -1;
	pdata = -1;
done:
	if (cmd == 0)
		LOGBYTES("get", name, byte_count);
	(*closefunc)(fin);
}

void store(const char *name, const char *mode, int unique)
{
	FILE *fout, *din;
	int (*closefunc) __P((FILE *));
	struct stat st;
	int fd;

	if (restart_point && *mode != 'a')
		mode = "r+";

	if (unique && stat(name, &st) == 0) {
		char *nam;

		fd = guniquefd(name, &nam);
		if (fd == -1) {
			LOGCMD(*mode == 'w' ? "put" : "append", name);
			return;
		}
		name = nam;
		fout = fdopen(fd, mode);
	} else
		fout = fopen(name, mode);

	closefunc = fclose;
	if (fout == NULL) {
		perror_reply(553, name);
		LOGCMD(*mode == 'w' ? "put" : "append", name);
		return;
	}
	byte_count = -1;
	if (restart_point) {
		if (type == TYPE_A) {
			off_t i, n;
			int c;

			n = restart_point;
			i = 0;
			while (i++ < n) {
				if ((c=getc(fout)) == EOF) {
					perror_reply(550, name);
					goto done;
				}
				if (c == '\n')
					i++;
			}
			/*
			 * We must do this seek to "current" position
			 * because we are changing from reading to
			 * writing.
			 */
			if (fseek(fout, 0L, SEEK_CUR) < 0) {
				perror_reply(550, name);
				goto done;
			}
		} else if (lseek(fileno(fout), restart_point, SEEK_SET) < 0) {
			perror_reply(550, name);
			goto done;
		}
	}
	din = dataconn(name, (off_t)-1, "r", unique);
	if (din == NULL)
		goto done;
	if (receive_data(din, fout) == 0) {
		if (unique)
			reply(226, "Transfer complete (unique file name:%s).",
			    name);
		else
			reply(226, "Transfer complete.");
	}
	(void) fclose(din);
	data = -1;
	pdata = -1;
done:
	LOGBYTES(*mode == 'w' ? "put" : "append", name, byte_count);
	(*closefunc)(fout);
}

static FILE * getdatasock(const char *mode)
{
	int on = 1, s, t, tries;
	socklen_t off = 0;
	sigset_t allsigs;

	if (data >= 0)
		return (fdopen(data, mode));
	sigfillset(&allsigs);
	sigprocmask (SIG_BLOCK, &allsigs, NULL);
	(void) seteuid((uid_t)0);
	s = socket(his_addr.ss_family, SOCK_STREAM, 0);
	if (s < 0)
		goto bad;
	if (setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
	    (char *) &on, sizeof(on)) < 0)
		goto bad;
	if (his_addr.ss_family == AF_INET6 && use_ipv4)
		if (setsockopt(s, IPPROTO_IPV6, IPV6_V6ONLY,
					&off, sizeof(off)))
			syslog(LOG_FTP | LOG_ERR, "getdatasock(), setsockopt: %m");

	/* anchor socket to avoid multi-homing problems */
	memcpy(&data_source, &ctrl_addr, sizeof(data_source));
	set_port((struct sockaddr *) &data_source, data_port);

	for (tries = 1; ; tries++) {
		if (bind(s, (struct sockaddr *)&data_source,
				sizeof(data_source)) >= 0)
			break;
		if (errno != EADDRINUSE || tries > 10)
			goto bad;
		sleep(tries);
	}
/* PSz 25 Aug 06  Check return status */
	if (seteuid((uid_t)pw->pw_uid) != 0) _exit(1);
	sigfillset(&allsigs);
	sigprocmask (SIG_UNBLOCK, &allsigs, NULL);

#ifdef IP_TOS
	on = IPTOS_THROUGHPUT;
#  if defined(__GLIBC__) && ! defined(__linux__)
	if ( (his_addr.ss_family == AF_INET)
		&& (setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&on,
				sizeof(on)) < 0) )
		syslog(LOG_FTP | LOG_WARNING, "setsockopt (IP_TOS): %m");
#  else /* __linux__ */
	if (setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&on, sizeof(int)) < 0)
		syslog(LOG_FTP | LOG_WARNING, "setsockopt (IP_TOS): %m");
#  endif /* GNU/kfreebsd */
#endif /* IP_TOS */
#ifdef TCP_NOPUSH
	/*
	 * Turn off push flag to keep sender TCP from sending short packets
	 * at the boundaries of each write().  Should probably do a SO_SNDBUF
	 * to set the send buffer size as well, but that may not be desirable
	 * in heavy-load situations.
	 */
	on = 1;
	if (setsockopt(s, IPPROTO_TCP, TCP_NOPUSH, (char *)&on, sizeof on) < 0)
		syslog(LOG_FTP | LOG_WARNING, "setsockopt (TCP_NOPUSH): %m");
#endif
#if 0 /* Respect the user's settings */
#ifdef SO_SNDBUF
	on = 65536;
	if (setsockopt(s, SOL_SOCKET, SO_SNDBUF, (char *)&on, sizeof on) < 0)
		syslog(LOG_FTP | LOG_WARNING, "setsockopt (SO_SNDBUF): %m");
#endif
#endif

	return (fdopen(s, mode));
bad:
	/* Return the real value of errno (close may change it) */
	t = errno;
/* PSz 25 Aug 06  Check return status */
	if (seteuid((uid_t)pw->pw_uid) != 0) _exit(1);
	sigfillset (&allsigs);
	sigprocmask (SIG_UNBLOCK, &allsigs, NULL);
	(void) close(s);
	errno = t;
	return (NULL);
}

static FILE * dataconn(const char *name, off_t size, const char *mode, int stou)
{
	char sizebuf[32];
	FILE *file = NULL;
	int retry = 0, tos;

	file_size = size;
	byte_count = 0;
	if (size != (off_t) -1) {
		(void) snprintf(sizebuf, sizeof(sizebuf), " (%jd bytes)", 
				(intmax_t) size);
	} else
		sizebuf[0] = '\0';
	if (pdata >= 0) {
		struct sockaddr_storage from;
		int s;
		socklen_t fromlen = sizeof(from);

		signal (SIGALRM, toolong);
		(void) alarm ((unsigned) timeout);
		s = accept(pdata, (struct sockaddr *)&from, &fromlen);
		(void) alarm (0);
		if (s < 0) {
			reply(425, "Can't open data connection.");
			(void) close(pdata);
			pdata = -1;
			return (NULL);
		}
		if (get_port((struct sockaddr *) &from) < IPPORT_RESERVED) {
			perror_reply(425, "Can't build data connection");
			(void) close(pdata);
			(void) close(s);
			pdata = -1;
			return (NULL);
		}
#ifdef BREAKRFC
		if (cmp_addresses((struct sockaddr *) &from,
					(struct sockaddr *) &his_addr)) {
			perror_reply(435, "Can't build data connection"); 
			(void) close(pdata);
			(void) close(s);
			pdata = -1;
			return (NULL);
		}
#endif
		(void) close(pdata);
		pdata = s;
#ifdef IP_TOS
		tos = IPTOS_THROUGHPUT;
		(void) setsockopt(s, IPPROTO_IP, IP_TOS, (char *)&tos,
		    sizeof(int)); /* Errors silently ignored: GNU/kfreebsd. */
#endif
#ifdef USE_SSL
		/* time to negotiate SSL on the data connection ...
		 * do this via SSL_accept (as we are still the server
		 * even though things are started around the other way)
		 * 
		 * note: we really *must* make sure the session stuff
		 *       is copied correctly as we cannot afford a full
		 *       SSL negotiation for each data socket!
		 */
		/* TODO XXXX fill in the blanks :-)
		 */
		ssl_data_active_flag=0;
		if (ssl_active_flag && ssl_encrypt_data) {
		    /* do SSL */
		    int ret;

		    reply(150, "Opening %s mode SSL data connection for %s%s.",
			 type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);

		    if (ssl_data_con!=NULL) {
		      SSL_free(ssl_data_con);
		      ssl_data_con=NULL;
		    }
		    ssl_data_con=(SSL *)SSL_new(ssl_ctx);

		    /* copy session details ... */
		    SSL_copy_session_id(ssl_data_con,ssl_con);

		    /* for 0.5.2 - want to change the timeout value etc ... */

		    SSL_set_fd(ssl_data_con,pdata);

		    /* No reason to expect client to send certificate.  */
		    SSL_set_verify(ssl_data_con, SSL_VERIFY_NONE, NULL);

		    /* if is "safe" to read ahead */
		    /* SSL_set_read_ahead(ssl_data_con,1); */

		    if (ssl_debug_flag)
			BIO_printf(bio_err,"===>START SSL_accept on DATA\n");

		    ret = SSL_accept(ssl_data_con);
		    if (ret <= 0) {
			static char errbuf[1024];
			int err = SSL_get_error(ssl_data_con, ret);

			*errbuf = 0;

			if (err == SSL_ERROR_SSL) {
			    sprintf(errbuf, "ftpd: Verify %s",
				    X509_verify_cert_error_string(SSL_get_verify_result(ssl_data_con)));
			    reply(425, errbuf);
			}
			sprintf(errbuf,"ftpd: SSL_accept DATA %s",
				ERR_reason_error_string(ERR_peek_error()));
			errno = errno ? errno : 103;	/* ECONNABORTED */
			perror_reply(425, errbuf);
			/* abort time methinks ... */
			if(file != NULL){
				fclose(file);
				file = NULL;
			}
			return NULL;
		    } else {
			if (ssl_debug_flag) {
			    BIO_printf(bio_err,"[SSL DATA Cipher %s]\n",
					    SSL_get_cipher(ssl_data_con));
			}
			ssl_data_active_flag=1;
		    }

		    if (ssl_debug_flag)
			BIO_printf(bio_err,"===>DONE SSL_accept on DATA\n");

		} else {
#endif /* USE_SSL */
		if (stou) {
			reply(150, "FILE: %s", name);
		} else {
			reply(150,
			      "Opening %s mode data connection for '%s'%s.",
			      type == TYPE_A ? "ASCII" : "BINARY", name,
			      sizebuf);
		}
#ifdef USE_SSL
		}
#endif /* USE_SSL */
		return (fdopen(pdata, mode));
	}
	if (data >= 0) {
		if (stou) {
			reply(125, "FILE: %s", name);
		} else {
			reply(125,
			      "Using existing data connection for '%s'%s.",
			      name, sizebuf);
		}
		usedefault = 1;
		return (fdopen(data, mode));
	}
	if (usedefault)
		memcpy(&data_dest, &his_addr, sizeof(data_dest));
	usedefault = 1;
	file = getdatasock(mode);
	if (file == NULL) {
		char ipaddr[INET6_ADDRSTRLEN], port[12];

		(void) getnameinfo((struct sockaddr *) &data_source,
				sizeof(struct sockaddr_storage),
				ipaddr, sizeof(ipaddr), port, sizeof(port),
				NI_NUMERICHOST);

		reply(425, "Can't create data socket (%s,%d): %s.",
		    ipaddr, port, strerror(errno));
		return (NULL);
	}
	data = fileno(file);

	/*
	 * attempt to connect to reserved port on client machine;
	 * this looks like an attack
	 */
	if (get_port((struct sockaddr *) &data_dest) < IPPORT_RESERVED ||
	    get_port((struct sockaddr *) &data_dest) == 2049) {		/* XXX */
		perror_reply(425, "Can't build data connection");
		(void) fclose(file);
		data = -1;
		return NULL;
	}
#ifdef BREAKRFC
	if (cmp_addresses((struct sockaddr *) &data_dest,
				(struct sockaddr *) &his_addr)) {
		perror_reply(435, "Can't build data connection");
		(void) fclose(file);
		data = -1;
		return NULL;
	}
#endif
	while (connect(data, (struct sockaddr *)&data_dest,
	    sizeof(data_dest)) < 0) {
		if (errno == EADDRINUSE && retry < swaitmax) {
			sleep((unsigned) swaitint);
			retry += swaitint;
			continue;
		}
		perror_reply(425, "Can't build data connection");
		(void) fclose(file);
		data = -1;
		return (NULL);
	}
#ifdef USE_SSL
        /* time to negotiate SSL on the data connection ...
	 * do this via SSL_accept (as we are still the server
	 * even though things are started around the other way)
	 * 
	 * note: we really *must* make sure the session stuff
	 *       is copied correctly as we cannot afford a full
	 *       SSL negotiation for each data socket!
	 */
	/* TODO XXXX fill in the blanks :-)
	 */
	ssl_data_active_flag=0;
	if (ssl_active_flag && ssl_encrypt_data) {
	    /* do SSL */
	    int ret;

	    reply(150, "Opening %s mode SSL data connection for %s%s.",
		 type == TYPE_A ? "ASCII" : "BINARY", name, sizebuf);

	    if (ssl_data_con!=NULL) {
	      SSL_free(ssl_data_con);
	      ssl_data_con=NULL;
	    }
	    ssl_data_con=(SSL *)SSL_new(ssl_ctx);

            /* copy session details ... */
	    SSL_copy_session_id(ssl_data_con,ssl_con);

	    /* for 0.5.2 - want to change the timeout value etc ... */

	    SSL_set_fd(ssl_data_con,data);

	    /* No reason to expect client to send certificate.  */
	    SSL_set_verify(ssl_data_con, SSL_VERIFY_NONE, NULL);

	    /* if is "safe" to read ahead */
            /* SSL_set_read_ahead(ssl_data_con,1); */

	    if (ssl_debug_flag)
		BIO_printf(bio_err,"===>START SSL_accept on DATA\n");

	    ret = SSL_accept(ssl_data_con);
	    if (ret <= 0) {
                static char errbuf[1024];
		int err = SSL_get_error(ssl_data_con, ret);

		*errbuf = 0;

		if (err == SSL_ERROR_SSL) {
		    sprintf(errbuf, "ftpd: Verify %s",
			    X509_verify_cert_error_string(SSL_get_verify_result(ssl_data_con)));
		    reply(425, errbuf);
		}
		sprintf(errbuf,"ftpd: SSL_accept DATA %s",
			ERR_reason_error_string(ERR_peek_error()));
		errno = errno ? errno : 103;	/* ECONNABORTED */
		perror_reply(425, errbuf);
		/* abort time methinks ... */
		fclose(file);
		return NULL;
	    } else {
		if (ssl_debug_flag)
		    BIO_printf(bio_err,"[SSL DATA Cipher %s]\n",
			            SSL_get_cipher(ssl_data_con));
		ssl_data_active_flag=1;
	    }

	    if (ssl_debug_flag) 
		BIO_printf(bio_err,"===>DONE SSL_accept on DATA\n");

	} else {
#endif /* USE_SSL */
	if (stou) {
		reply(150, "FILE: %s", name);
	} else {
		reply(150,
		      "Opening %s mode data connection for '%s'%s.",
		      type == TYPE_A ? "ASCII" : "BINARY", name,
		      sizebuf);
	}
#ifdef USE_SSL
	}
#endif /* USE_SSL */
	return (file);
}

/*
 * Tranfer the contents of "instr" to "outstr" peer using the appropriate
 * encapsulation of the data subject to Mode, Structure, and Type.
 *
 * NB: Form isn't handled.
 */
static void send_data(FILE *instr, FILE *outstr, off_t blksize, off_t filesize, int isreg)
{
	int c, cnt, filefd, netfd;
	char *buf, *bp;
	size_t len,size;

	transflag++;
	if (setjmp(urgcatch)) {
		transflag = 0;
		return;
	}
	switch (type) {

	case TYPE_A:
		while ((c = getc(instr)) != EOF) {
			byte_count++;
			if (c == '\n') {
				if (ferror(outstr))
					goto data_err;
				(void) DATAPUTC('\r', outstr);
			}
			(void) DATAPUTC(c, outstr);
		}
		DATAFLUSH(outstr);
		transflag = 0;
		if (ferror(instr))
			goto file_err;
		if (ferror(outstr))
			goto data_err;
		reply(226, "Transfer complete.");
		return;

	case TYPE_I:
	case TYPE_L:
		/*
		 * isreg is only set if we are not doing restart and we
		 * are sending a regular file
		 */
		netfd = fileno(outstr);
		filefd = fileno(instr);

		if (
#ifdef USE_SSL
		    !ssl_data_active_flag &&
#endif /* USE_SSL */
		    isreg && filesize < (off_t)16 * 1024 * 1024) {
			buf = mmap(0, filesize, PROT_READ, MAP_SHARED, filefd,
				   (off_t)0);
			if (buf==MAP_FAILED || buf==NULL) {
				syslog(LOG_FTP | LOG_WARNING, "mmap(%lu): %m",
				       (unsigned long)filesize);
				goto oldway;
			}
			bp = buf;
			len = filesize;
			do {
				cnt = write(netfd, bp, len);
				len -= cnt;
				bp += cnt;
				if (cnt > 0) byte_count += cnt;
			} while(cnt > 0 && len > 0);

			transflag = 0;
			munmap(buf, (size_t)filesize);
			if (cnt < 0)
				goto data_err;
			reply(226, "Transfer complete.");
			return;
		}

oldway:
		size = blksize * 16; 
	
		if ((buf = malloc(size)) == NULL) {
			transflag = 0;
			perror_reply(451, "Local resource failure: malloc");
			return;
		}

#ifdef TCP_CORK
		{
		int on = 1;
		setsockopt(netfd, SOL_TCP, TCP_CORK, &on, sizeof on); 
		/* failure is harmless */ 
		}
#endif	
#ifdef USE_SSL
                if (ssl_data_active_flag) {
		    while ((cnt = read(filefd, buf, (u_int)blksize)) > 0 &&
			SSL_write(ssl_data_con, buf, cnt) == cnt)
			    byte_count += cnt;
		} else
#endif /* USE_SSL */
		while ((cnt = read(filefd, buf, size)) > 0 &&
		    write(netfd, buf, cnt) == cnt)
			byte_count += cnt;
#ifdef TCP_CORK
		{
		int off = 0;
		setsockopt(netfd, SOL_TCP, TCP_CORK, &off, sizeof off); 
		}
#endif	
		transflag = 0;
		(void)free(buf);
		if (cnt != 0) {
			if (cnt < 0)
				goto file_err;
			goto data_err;
		}
		reply(226, "Transfer complete.");
		return;
	default:
		transflag = 0;
		reply(550, "Unimplemented TYPE %d in send_data", type);
		return;
	}

data_err:
	transflag = 0;
	perror_reply(426, "Data connection");
	return;

file_err:
	transflag = 0;
	perror_reply(551, "Error on input file");
}

/*
 * Transfer data from peer to "outstr" using the appropriate encapulation of
 * the data subject to Mode, Structure, and Type.
 *
 * N.B.: Form isn't handled.
 */
static int receive_data(FILE *instr, FILE *outstr)
{
	int c;
	int cnt;
	volatile int bare_lfs = 0;
	char buf[BUFSIZ];

	transflag++;
	if (setjmp(urgcatch)) {
		transflag = 0;
		return (-1);
	}
	switch (type) {

	case TYPE_I:
	case TYPE_L:
		signal (SIGALRM, lostconn);

#ifdef USE_SSL
                if (ssl_data_active_flag) {
		    while ((cnt = SSL_read(ssl_data_con,buf,sizeof buf)) > 0) {
			    if (write(fileno(outstr), buf, cnt) != cnt)
				    goto file_err;
			    byte_count += cnt;
		    }
		} else 
#endif /* !USE_SSL */
                {
		do {
			(void) alarm ((unsigned) timeout);
			cnt = read(fileno(instr), buf, sizeof(buf));
			(void) alarm (0);

			if (cnt > 0) {
				if (write(fileno(outstr), buf, cnt) != cnt)
					goto file_err;
				byte_count += cnt;
			}
		} while (cnt > 0);
		}
		if (cnt < 0)
			goto data_err;
		transflag = 0;
		return (0);

	case TYPE_E:
		reply(553, "TYPE E not implemented.");
		transflag = 0;
		return (-1);

	case TYPE_A:
		while ((c = DATAGETC(instr)) != EOF) {
			byte_count++;
			if (c == '\n')
				bare_lfs++;
			while (c == '\r') {
				if (ferror(outstr))
					goto data_err;
				if ((c = DATAGETC(instr)) != '\n') {
					(void) putc ('\r', outstr);
					if (c == '\0' || c == EOF)
						goto contin2;
				}
			}
			(void) putc(c, outstr);
	contin2:	;
		}
		fflush(outstr);
		if (ferror(instr))
			goto data_err;
		if (ferror(outstr))
			goto file_err;
		transflag = 0;
		if (bare_lfs) {
			const char *mesg = "   File may not have transferred correctly.\r\n";

			lreply(226,
		"WARNING! %d bare linefeeds received in ASCII mode",
			    bare_lfs);
#ifdef USE_SSL
			if (ssl_active_flag)
				SSL_write(ssl_con, mesg, strlen(mesg));
			else
#endif /* USE_SSL */
				(void)printf("%s", mesg);
		}
		return (0);
	default:
		reply(550, "Unimplemented TYPE %d in receive_data", type);
		transflag = 0;
		return (-1);
	}

data_err:
	transflag = 0;
	perror_reply(426, "Data Connection");
	return (-1);

file_err:
	transflag = 0;
	perror_reply(452, "Error writing file");
	return (-1);
}

void statfilecmd(char *filename)
{
	FILE *fin;
	int c;
	char line[LINE_MAX];

	(void)snprintf(line, sizeof(line), "/bin/ls -lA %s", filename);
	fin = ftpd_popen(line, "r");
	lreply(211, "status of %s:", filename);
	while ((c = getc(fin)) != EOF) {
		if (c == '\n') {
			if (ferror(stdout)){
				perror_reply(421, "control connection");
				(void) ftpd_pclose(fin);
				dologout(1);
				/* NOTREACHED */
			}
			if (ferror(fin)) {
				perror_reply(551, filename);
				(void) ftpd_pclose(fin);
				return;
			}
#ifdef USE_SSL
			if (ssl_active_flag)
				SSL_write(ssl_con, "\r", 1);
			else
#endif /* USE_SSL */
			(void) putc('\r', stdout);
		}
#ifdef USE_SSL
		if (ssl_active_flag) {
			char chbuf[1];

			chbuf[0] = c;
			SSL_write(ssl_con, chbuf, 1);
		} else
#endif /* USE_SSL */
		(void) putc(c, stdout);
	}
	(void) ftpd_pclose(fin);
	reply(211, "End of Status");
}

void statcmd(void)
{
	struct sockaddr *sn;
	char ipaddr[INET6_ADDRSTRLEN];
	char *mesg, msgbuf[128];
	int len;

	lreply(211, "%s FTP server status:", hostname, version);
	len = sprintf(msgbuf, "     %s\r\n", version);
#ifdef USE_SSL
	if (ssl_active_flag)
		SSL_write(ssl_con, msgbuf, len);
	else
#endif /* USE_SSL */
	printf("%s", msgbuf);
	len = snprintf(msgbuf, sizeof msgbuf,
		       "     Connected to %s", remotehost);
#ifdef USE_SSL
	if (ssl_active_flag)
		SSL_write(ssl_con, msgbuf,
			  (len < sizeof msgbuf) ? len : sizeof msgbuf);
	else
#endif /* USE_SSL */
	printf("%s", msgbuf);
	if (!isdigit(remotehost[0])) {
		(void) getnameinfo((struct sockaddr *) &his_addr,
				sizeof(struct sockaddr_storage),
				ipaddr, sizeof(ipaddr), NULL, 0,
				NI_NUMERICHOST);
		len = sprintf(msgbuf, " (%s)", ipaddr);
#ifdef USE_SSL
		if (ssl_active_flag)
			SSL_write(ssl_con, msgbuf, len);
		else
#endif /* USE_SSL */
		printf("%s", msgbuf);
	}
#ifdef USE_SSL
	if (ssl_active_flag)
		SSL_write(ssl_con, "\r\n", 2);
	else
#endif /* USE_SSL */
	printf("\r\n");

	/* Exactly one of four possible messages, put it in MSG.  */
	if (logged_in) {
		if (guest)
			mesg = "     Logged in anonymously\r\n";
		else {
			len = snprintf(msgbuf, sizeof msgbuf,
				       "     Logged in as %s\r\n",
				       pw->pw_name);
			mesg = msgbuf;
		}
	} else if (askpasswd)
		mesg = "     Waiting for password\r\n";
	else
		mesg = "     Waiting for user name\r\n";

#ifdef USE_SSL
	if (ssl_active_flag)
		SSL_write(ssl_con, mesg, strlen(mesg));
	else
#endif /* USE_SSL */
	printf("%s", mesg);

	len = sprintf(msgbuf, "     TYPE: %s", typenames[type]);
#ifdef USE_SSL
	if (ssl_active_flag)
		SSL_write(ssl_con, msgbuf, len);
	else
#endif /* USE_SSL */
	printf("%s", msgbuf);

	if (type == TYPE_A || type == TYPE_E) {
		len = sprintf(msgbuf, ", FORM: %s", formnames[form]);
#ifdef USE_SSL
		if (ssl_active_flag)
			SSL_write(ssl_con, msgbuf, len);
		else
#endif /* USE_SSL */
		printf("%s", msgbuf);
	}
	if (type == TYPE_L) {
		len = sprintf(msgbuf,
#if CHAR_BIT == 8
			       " %d", CHAR_BIT
#else
			       " %d", bytesize	/* needs definition! */
#endif
			      );
#ifdef USE_SSL
		if (ssl_active_flag)
			SSL_write(ssl_con, msgbuf, len);
		else
#endif /* USE_SSL */
		printf("%s", msgbuf);
	}

	len = snprintf(msgbuf, sizeof msgbuf,
		       "; STRUcture: %s; transfer MODE: %s\r\n",
		       strunames[stru], modenames[mode]);
#ifdef USE_SSL
	if (ssl_active_flag)
		SSL_write(ssl_con, msgbuf, len);
	else
#endif /* USE_SSL */
	printf("%s", msgbuf);

	if (data != -1) {
		mesg = "     Data connection open\r\n";
#ifdef USE_SSL
		if (ssl_active_flag)
			SSL_write(ssl_con, mesg, strlen(mesg));
		else
#endif /* USE_SSL */
		printf("%s", mesg);
	}
	else if (pdata != -1) {
		mesg = "     in Passive mode";
		sn = (struct sockaddr *) &pasv_addr;
		goto printaddr;
	} else if (usedefault == 0) {
		mesg = "     PORT";
		sn = (struct sockaddr *) &data_dest;

printaddr:
		/* A constant message was prepared in two cases.  */
#ifdef USE_SSL
		if (ssl_active_flag)
			SSL_write(ssl_con, mesg, strlen(mesg));
		else
#endif /* USE_SSL */
			printf("%s", mesg);

#define UC(b) (((int) b) & 0xff)
		if (sn->sa_family == AF_INET6) {
			len = sprintf(msgbuf, " (|||%d|)\r\n",
				      get_port(sn));
#ifdef USE_SSL
			if (ssl_active_flag)
				SSL_write(ssl_con, msgbuf, len);
			else
#endif /* USE_SSL */
			printf("%s", msgbuf);
		} else {
			uint32_t ip4ad = get_ipv4address(sn);
			in_port_t port = get_port(sn);

			len = sprintf(msgbuf, " (%d,%d,%d,%d,%d,%d)\r\n",
				UC(ip4ad >> 24), UC(ip4ad >> 16),
				UC(ip4ad >> 8), UC(ip4ad),
				UC(port >> 8), UC(port));
#ifdef USE_SSL
			if (ssl_active_flag)
				SSL_write(ssl_con, msgbuf, len);
			else
#endif /* USE_SSL */
			printf("%s", msgbuf);
		}
#undef UC
	} else {
		mesg = "     No data connection\r\n";
#ifdef USE_SSL
		if (ssl_active_flag)
			SSL_write(ssl_con, mesg, strlen(mesg));
		else
#endif /* USE_SSL */
		printf("%s", mesg);
	}
	reply(211, "End of status");
}

void fatal(const char *s)
{

	reply(451, "Error in server: %s\n", s);
	reply(221, "Closing connection due to server error.");
	dologout(0);
	/* NOTREACHED */
}

void
#ifdef __STDC__
reply(int n, const char *fmt, ...)
#else
reply(int n, char *fmt, va_dcl va_alist)
#endif
{
#ifdef USE_SSL
        char outputbuf[2048];        /* allow for a 2k command string */
#endif /* USE_SSL */
	va_list ap;
#ifdef __STDC__
	va_start(ap, fmt);
#else
	va_start(ap);
#endif
#ifdef USE_SSL
        /* assemble the output into a buffer, checking for length */
	sprintf(outputbuf,"%d ",n);
        vsnprintf(outputbuf+strlen(outputbuf),2048-(strlen(outputbuf) + 3),fmt,ap); 
	strcat(outputbuf,"\r\n");

	if (ssl_debug_flag) {
	    (void) BIO_printf(bio_err,"<--- %s",outputbuf);
	    (void) BIO_flush(bio_err);
	}

	if (ssl_active_flag) {
	    SSL_write(ssl_con,outputbuf,strlen(outputbuf));
        } else {
	    fprintf(stdout,"%s",outputbuf);
	    fflush(stdout);
	}
	if (debug)
	    syslog(LOG_DEBUG, "<--- %s ", outputbuf);
#else /* !USE_SSL */
	(void)printf("%d ", n);
	(void)vprintf(fmt, ap);
	(void)printf("\r\n");
	va_end(ap);
	(void)fflush(stdout);
	if (debug) {
#ifdef __STDC__
		va_start(ap, fmt);
#else
		va_start(ap);
#endif
		syslog(LOG_FTP | LOG_DEBUG, "<--- %d ", n);
		vsyslog(LOG_FTP | LOG_DEBUG, fmt, ap);
		va_end(ap);
	}
#endif /* USE_SSL */
	va_end(ap);
}

void
#ifdef __STDC__
lreply(int n, const char *fmt, ...)
#else
lreply(n, fmt, va_alist)
	int n;
	char *fmt;
	va_dcl
#endif
{
#ifdef USE_SSL
        char outputbuf[2048];        /* allow for a 2k command string */
#endif /* USE_SSL */
	va_list ap;
#ifdef __STDC__
	va_start(ap, fmt);
#else
	va_start(ap);
#endif

#ifdef USE_SSL
        /* assemble the output into a buffer */
	sprintf(outputbuf,"%d- ",n);
	vsprintf(outputbuf+strlen(outputbuf),fmt,ap);
	strcat(outputbuf,"\r\n");

	if (ssl_debug_flag) 
	    BIO_printf(bio_err,"\n<--- %s",outputbuf);

	if (ssl_active_flag) {
	    SSL_write(ssl_con,outputbuf,strlen(outputbuf));
        } else {
	    fprintf(stdout,"%s",outputbuf);
	    fflush(stdout);
	}
	if (debug)
	    syslog(LOG_DEBUG, "<--- %s ", outputbuf);
#else /* !USE_SSL */
	(void)printf("%d- ", n);
	(void)vprintf(fmt, ap);
	(void)printf("\r\n");
	va_end(ap);
	(void)fflush(stdout);
	if (debug) {
#ifdef __STDC__
		va_start(ap, fmt);
#else
		va_start(ap);
#endif
		syslog(LOG_FTP | LOG_DEBUG, "<--- %d- ", n);
		vsyslog(LOG_FTP | LOG_DEBUG, fmt, ap);
		va_end(ap);
	}
#endif /* USE_SSL */
	va_end(ap);
}

static void ack(const char *s)
{

	reply(250, "%s command successful.", s);
}

void nack(const char *s)
{

	reply(502, "%s command not implemented.", s);
}

/* ARGSUSED */
void yyerror(char *s)
{
	char *cp;
        
	(void)s; /* ignore argument */

	if ((cp = strchr(cbuf,'\n'))!=NULL)
		*cp = '\0';
	reply(500, "'%s': command not understood.", cbuf);
}

void delete(char *name)
{
	struct stat st;

	LOGCMD("delete", name);
	if (stat(name, &st) < 0) {
		perror_reply(550, name);
		return;
	}
	if ((st.st_mode&S_IFMT) == S_IFDIR) {
		if (rmdir(name) < 0) {
			perror_reply(550, name);
			return;
		}
		goto done;
	}
	if (unlink(name) < 0) {
		perror_reply(550, name);
		return;
	}
done:
	ack("DELE");
}

void cwd(const char *path)
{
	FILE *message;

	if (chdir(path) < 0)
		perror_reply(550, path);
	else {
		if ((message = fopen(_PATH_CWDMESG, "r")) != NULL) {
			char *cp, line[LINE_MAX];

			while (fgets(line, sizeof(line), message) != NULL) {
				if ((cp = strchr(line, '\n')) != NULL)
					*cp = '\0';
				lreply(250, "%s", line);
			}
			(void) fflush(stdout);
			(void) fclose(message);
		}
		ack("CWD");
	}
}

void replydirname(const char *name, const char *message)
{
	char *p, *ep;
	char npath[MAXPATHLEN];

	p = npath;
	ep = &npath[sizeof(npath) - 1];
	while (*name) {
		if (*name == '"' && ep - p >= 2) {
			*p++ = *name++;
			*p++ = '"';
		} else if (ep - p >= 1)
			*p++ = *name++;
		else
			break;
	}
	*p = '\0';
	reply(257, "\"%s\" %s", npath, message);
}

void makedir(char *name)
{

	LOGCMD("mkdir", name);
	if (mkdir(name, 0777) < 0)
		perror_reply(550, name);
	else
		replydirname(name, "directory created.");
}

void removedir(char *name)
{

	LOGCMD("rmdir", name);
	if (rmdir(name) < 0)
		perror_reply(550, name);
	else
		ack("RMD");
}
void pwd(void)
{
	char path[MAXPATHLEN];

	if (getcwd(path, sizeof path) == (char *)NULL)
		reply(550, "%s.", path);
	else
		replydirname(path, "is current directory.");
}

char * renamefrom(char *name)
{
	struct stat st;

	if (stat(name, &st) < 0) {
		perror_reply(550, name);
		return ((char *)0);
	}
	reply(350, "File exists, ready for destination name");
	return (name);
}

void renamecmd(char *from, char *to)
{

	LOGCMD2("rename", from, to);
	if (rename(from, to) < 0)
		perror_reply(550, "rename");
	else
		ack("RNTO");
}

static void dolog(struct sockaddr *sa)
{
	char host[NI_MAXHOST];

	getnameinfo(sa, sizeof(struct sockaddr_storage),
			host, sizeof(host), NULL, 0,
			numeric_hosts ? NI_NUMERICHOST : 0);

	(void) strncpy(remotehost, host, sizeof(remotehost)-1);
	remotehost[sizeof(remotehost)-1] = '\0';

#ifdef HASSETPROCTITLE
	snprintf(proctitle, sizeof(proctitle), "%s: connected", remotehost);
	setproctitle("%s", proctitle);
#endif /* HASSETPROCTITLE */

	if (logging)
		syslog(LOG_FTP | LOG_INFO, "connection from %s", remotehost);
}

/*
 * Record logout in wtmp file
 * and exit with supplied status.
 */
void dologout(int status)
{
	transflag = 0;
	end_login();
	/* beware of flushing buffers after a SIGPIPE */
	_exit(status);
}

static void myoob(int signo)
{
	char *cp;
	int ret;
	int save_errno = errno;

	(void)signo;

	/* only process if transfer occurring */
	if (!transflag)
		return;
	cp = tmpline;
	ret=ftpd_getline(cp, 7, stdin);
	if (ret == -1) {
		reply(221, "You could at least say goodbye.");
		dologout(0);
	} else if (ret == -2) {
	        /* Ignore truncated command */
	        return;
	}
	upper(cp);
	if (strcmp(cp, "ABOR\r\n") == 0) {
		tmpline[0] = '\0';
		reply(426, "Transfer aborted. Data connection closed.");
		reply(226, "Abort successful");
		longjmp(urgcatch, 1);
	}
	if (strcmp(cp, "STAT\r\n") == 0) {
		if (file_size != (off_t) -1)
			reply(213, "Status: %jd of %jd bytes transferred",
			    (intmax_t) byte_count, (intmax_t) file_size);
		else
			reply(213, "Status: %jd bytes transferred", 
			    (intmax_t)byte_count);
	}
	errno = save_errno;
}

#define IS_MAPPED_IPV4(a) \
	(IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *) (a))->sin6_addr) || \
		IN6_IS_ADDR_V4COMPAT(&((struct sockaddr_in6 *) (a))->sin6_addr))

/*
 * Note: a response of 425 is not mentioned as a possible response to
 *	the PASV command in RFC959. However, it has been blessed as
 *	a legitimate response by Jon Postel in a telephone conversation
 *	with Rick Adams on 25 Jan 89.
 */
void passive(int extend)
{
	socklen_t len, off = 0;
#ifdef IP_PORTRANGE
	int on;
#else
	in_port_t port;
#endif

	if (pw == NULL) {
		reply(530, "Please login with USER and PASS");
		return;
	}
	if (pdata >= 0)
		close(pdata);
	pdata = socket(his_addr.ss_family, SOCK_STREAM, 0);
	if (pdata < 0) {
		perror_reply(425, "Can't open passive connection");
		return;
	}
	if (his_addr.ss_family == AF_INET6 && use_ipv4)
		if (setsockopt(pdata, IPPROTO_IPV6, IPV6_V6ONLY,
					&off, sizeof(off)))
			syslog(LOG_FTP | LOG_ERR, "passive(), setsockopt: %m");

	memcpy(&pasv_addr, &ctrl_addr, sizeof(pasv_addr));

#ifdef IP_PORTRANGE
	if (his_addr.ss_family == AF_INET6) {
		on = high_data_ports ? IPV6_PORTRANGE_HIGH : IPV6_PORTRANGE_DEFAULT;
		if (setsockopt(pdata, IPPROTO_IPV6, IPV6_PORTRANGE,
			       (char *)&on, sizeof(on)) < 0)
			goto pasv_error;
	} else {
		on = high_data_ports ? IP_PORTRANGE_HIGH : IP_PORTRANGE_DEFAULT;
		if (setsockopt(pdata, IPPROTO_IP, IP_PORTRANGE,
			       (char *)&on, sizeof(on)) < 0)
			goto pasv_error;
	}
#else
#define FTP_DATA_BOTTOM 40000
#define FTP_DATA_TOP    44999
	if (high_data_ports) {
		for (port = FTP_DATA_BOTTOM; port <= FTP_DATA_TOP; port++) {
			set_port((struct sockaddr *) &pasv_addr, port);

			if (bind(pdata, (struct sockaddr *) &pasv_addr,
				 sizeof(pasv_addr)) == 0)
				break;
			if (errno != EADDRINUSE)
				goto pasv_error;
		}
		if (port > FTP_DATA_TOP)
			goto pasv_error;
	}
	else
#endif
	{
		set_port((struct sockaddr *) &pasv_addr, 0);
		if (bind(pdata, (struct sockaddr *)&pasv_addr,
			 sizeof(pasv_addr)) < 0)
			goto pasv_error;
	}

	len = sizeof(pasv_addr);
	if (getsockname(pdata, (struct sockaddr *) &pasv_addr, &len) < 0)
		goto pasv_error;
	if (listen(pdata, 1) < 0)
		goto pasv_error;

#define UC(b) (((int) b) & 0xff)

	if (!extend && (pasv_addr.ss_family == AF_INET || IS_MAPPED_IPV4(&pasv_addr))) {
		uint32_t ip4ad = get_ipv4address((struct sockaddr *) &pasv_addr);
		in_port_t port = get_port((struct sockaddr *) &pasv_addr);

		reply(227, "Entering Passive Mode (%d,%d,%d,%d,%d,%d)",
				UC(ip4ad >> 24), UC(ip4ad >> 16),
				UC(ip4ad >> 8), UC(ip4ad),
				UC(port >> 8), UC(port));
	} else {
		reply(229, "Extended Passive Mode OK (|||%d|)",
			get_port((struct sockaddr *) &pasv_addr));
	}

#undef UC

	return;

pasv_error:
	(void) close(pdata);
	pdata = -1;
	perror_reply(425, "Can't open passive connection");
	return;
}

/*
 * test_eprt_string(char *)
 *
 * Parse the transport string used in EPRT command.
 *
 * Return values:
 *
 *  0: Success. Valid address in data_dest.
 *  1: Syntax error.
 *  2: Incorrect protocol family.
 *  3: Invalid address, or port, specification.
 */
int test_eprt_string(char * trans)
{
	char delim, ipaddr[INET6_ADDRSTRLEN], portstr[12];
	int pf, port;
	unsigned int j = 0;
	struct addrinfo hints, *aiptr;

	/* Easy sanity checks first. */
	if ( ! trans || strlen(trans) < 10 )
		return 1;	/* Syntax error. */

	/* Parse the contents. */
	delim = *(trans++);
	if ( *trans != '1' && *trans != '2')
		return 2;	/* Protocol family error. */
 
	if ( *(trans+1) != delim )
		return 1;	/* Syntax error. */

	pf = *trans - '0';	/* The character is '1' or '2'. */

	/* Check that address families match the claimed protocol. */
	if ((pf != 1 && his_addr.ss_family == AF_INET)
			|| (pf != 2 && his_addr.ss_family == AF_INET6))
		return 2;	/* Protocol family error. */

	trans += 2;	/* Jump to IP address portion, and extract it. */
	while (*trans && (j < sizeof(ipaddr) - 1) &&
				strchr("0123456789abcdefABCDEF.:", *trans))
		ipaddr[j++] = *(trans++);

	ipaddr[j] = '\0';

	if (*trans != delim)
		return 1;	/* Syntax error. */

	++trans;

	/* A port number should be next. */
	if (sscanf(trans, "%u", &port) != 1)
		return 1;	/* Syntax error. */

	while (isdigit(*trans))
		++trans;

	/* Last delimiter, at least one digit present by previous test. */
	if (*trans != delim)
		return 1;	/* Syntax error. */

	/* All components are parsed. Now try establishing the address. */
	sprintf(portstr, "%d", port);
	memset(&hints, 0, sizeof(hints));
	hints.ai_family = his_addr.ss_family;
	hints.ai_socktype = SOCK_STREAM;
	hints.ai_flags = AI_ADDRCONFIG | AI_NUMERICHOST | AI_NUMERICSERV;

	if (getaddrinfo(ipaddr, portstr, &hints, &aiptr))
		return 3;	/* Invalid address and port combination. */

	/* Record the established address. */
	memcpy(&data_dest, aiptr->ai_addr, aiptr->ai_addrlen);
	freeaddrinfo(aiptr);

	/* Close any previous passive socket. */
	if (pdata >= 0) {
		close(pdata);
		pdata = -1;
	}

	/* Turn standard listening mechanism off. A valid address exists! */
	usedefault = 0;

	return 0;	/* Success. */
} /* test_eprt_string(char *) */

/*
 * Generate unique name for file with basename "local".
 * The file named "local" is already known to exist.
 * Generates failure reply on error.
 */
static int guniquefd(const char *local, char **nam)
{
	static char new[MAXPATHLEN];
	struct stat st;
	int count, len, fd;
	char *cp;

	cp = strrchr(local, '/');
	if (cp)
		*cp = '\0';
	if (stat(cp ? local : ".", &st) < 0) {
		perror_reply(553, cp ? local : ".");
		return (-1);
	}
	if (cp)
		*cp = '/';
	(void) strncpy(new, local, sizeof(new)-1);
	new[sizeof(new)-1] = '\0';
	len = strlen(new);
	if (len+2+1 >= (int)sizeof(new)-1)
		return (-1);
	cp = new + len;
	*cp++ = '.';
	for (count = 1; count < 100; count++) {
		(void)snprintf(cp, sizeof(new) - (cp - new), "%d", count);
		fd = open(new, O_RDWR|O_CREAT|O_EXCL, 0666);
		if (fd == -1)
			continue;
		if (nam)
			*nam = new;
		return (fd);
	}
	reply(452, "Unique file name cannot be created.");
	return (-1);
}

/*
 * Format and send reply containing system error number.
 */
void perror_reply(int code, const char *string)
{

	reply(code, "%s: %s.", string, strerror(errno));
}

static const char *onefile[] = {
	"",
	0
};

void send_file_list(const char *whichf)
{
	struct stat st;
	DIR *dirp = NULL;
	struct dirent *dir;
	FILE *volatile dout = NULL;
	char const *const *volatile dirlist;
	const char *dirname;
	volatile int simple = 0;
	volatile int freeglob = 0;
	glob_t gl;
	char buf[1024];

	/* XXX: should the { go away if __linux__? */
	if (strpbrk(whichf, "~{[*?") != NULL) {
#if defined(__linux__) || defined(__GLIBC__) || defined(__GNU__)
	        /* see popen.c */
		int flags = GLOB_NOCHECK;
#else
		int flags = GLOB_BRACE|GLOB_NOCHECK|GLOB_QUOTE|GLOB_TILDE;
#endif

		memset(&gl, 0, sizeof(gl));
		freeglob = 1;
		if (glob(whichf, flags, 0, &gl)) {
			reply(550, "not found");
			goto out;
		} else if (gl.gl_pathc == 0) {
			errno = ENOENT;
			perror_reply(550, whichf);
			goto out;
		}
		/* The cast is necessary because of bugs in C's type system */
		dirlist = (char const *const *) gl.gl_pathv;
	} else {
		onefile[0] = whichf;
		dirlist = onefile;
		simple = 1;
	}

	if (setjmp(urgcatch)) {
		transflag = 0;
		goto out;
	}
	while ((dirname = *dirlist++)!=NULL) {
		if (stat(dirname, &st) < 0) {
			/*
			 * If user typed "ls -l", etc, and the client
			 * used NLST, do what the user meant.
			 */
			if (dirname[0] == '-' && *dirlist == NULL &&
			    transflag == 0) {
				retrieve("/bin/ls %s", dirname);
				goto out;
			}
			perror_reply(550, whichf);
			if (dout != NULL) {
				(void) fclose(dout);
				transflag = 0;
				data = -1;
				pdata = -1;
			}
			goto out;
		}

		if (S_ISREG(st.st_mode)) {
			if (dout == NULL) {
				dout = dataconn("file list", (off_t)-1, "w", 0);
				if (dout == NULL)
					goto out;
				transflag++;
			}
			sprintf(buf,"%s%s\n", dirname,
				type == TYPE_A ? "\r" : "");
#ifdef USE_SSL
			if (ssl_active_flag)
				SSL_write(ssl_data_con,buf,strlen(buf));
		    	else
#endif /* USE_SSL */
				fwrite(buf,strlen(buf),1,dout);
			byte_count += strlen(dirname) + 1;
			continue;
		} else if (!S_ISDIR(st.st_mode))
			continue;

		if ((dirp = opendir(dirname)) == NULL)
			continue;

		while ((dir = readdir(dirp)) != NULL) {
			char nbuf[MAXPATHLEN];

#if defined(__linux__) || defined(__GLIBC__) || defined(__GNU__)
			if (!strcmp(dir->d_name, "."))
				continue;
			if (!strcmp(dir->d_name, ".."))
				continue;
#else
			if (dir->d_name[0] == '.' && dir->d_namlen == 1)
				continue;
			if (dir->d_name[0] == '.' && dir->d_name[1] == '.' &&
			    dir->d_namlen == 2)
				continue;
#endif

			snprintf(nbuf, sizeof(nbuf), "%s/%s", dirname,
				 dir->d_name);

			/*
			 * We have to do a stat to insure it's
			 * not a directory or special file.
			 */
			if (simple || (stat(nbuf, &st) == 0 &&
			    S_ISREG(st.st_mode))) {
				if (dout == NULL) {
					dout = dataconn("file list", (off_t)-1,
						"w", 0);
					if (dout == NULL)
						goto out;
					transflag++;
				}
				if (nbuf[0] == '.' && nbuf[1] == '/')
				        sprintf(buf, "%s%s\n", &nbuf[2],
						type == TYPE_A ? "\r" : "");
				else
				        sprintf(buf, "%s%s\n", nbuf,
						type == TYPE_A ? "\r" : "");
#ifdef USE_SSL
				if (ssl_active_flag)
				  SSL_write(ssl_data_con,buf,strlen(buf));
				else
#endif /* USE_SSL */
				  fwrite(buf,strlen(buf),1,dout);
				byte_count += strlen(nbuf) + 1;
			}
		}
		(void) closedir(dirp);
	}

	if (dout == NULL)
		reply(550, "No files found.");
	else if (ferror(dout) != 0)
		perror_reply(550, "Data connection");
	else
		reply(226, "Transfer complete.");

	transflag = 0;
	if (dout != NULL) {
#ifdef USE_SSL
                if (ssl_data_active_flag && (ssl_data_con!=NULL)) {
		    SSL_free(ssl_data_con);
		    ssl_data_active_flag=0;
		    ssl_data_con=NULL;
		}
#endif /* USE_SSL */
		(void) fclose(dout);
	}
	data = -1;
	pdata = -1;
out:
	if (freeglob) {
		freeglob = 0;
		globfree(&gl);
	}
}

static void reapchild(int signo)
{
	int save_errno = errno;

	(void)signo;

	while (wait3(NULL, WNOHANG, NULL) > 0)
		;
	errno = save_errno;
}

void logxfer(const char *name, off_t size, time_t start)
{
	char buf[400 + MAXHOSTNAMELEN*4 + MAXPATHLEN*4];
	char dir[MAXPATHLEN], path[MAXPATHLEN], rpath[MAXPATHLEN];
	char vremotehost[MAXHOSTNAMELEN*4], vpath[MAXPATHLEN*4];
	char *vpw;
	time_t now;

	if ((statfd >= 0) && (getcwd(dir, sizeof(dir)) != NULL)) {
		time(&now);

		vpw = (char *)malloc(strlen((guest) ? guestpw : pw->pw_name)*4+1);
		if (vpw == NULL)
			return;

		snprintf(path, sizeof path, "%s/%s", dir, name);
		if (realpath(path, rpath) == NULL) {
			strncpy(rpath, path, sizeof rpath-1);
			rpath[sizeof rpath-1] = '\0';
		}
		strvis(vpath, rpath, VIS_SAFE|VIS_NOSLASH);

		strvis(vremotehost, remotehost, VIS_SAFE|VIS_NOSLASH);
		strvis(vpw, (guest) ? guestpw : pw->pw_name, VIS_SAFE|VIS_NOSLASH);

		snprintf(buf, sizeof(buf),
		    "%.24s %ld %s %qd %s %c %s %c %c %s ftp %d %s %s\n",
		    ctime(&now), (long)(now - start + (now == start)),
		    vremotehost, (long long) size, vpath,
		    ((type == TYPE_A) ? 'a' : 'b'), "*" /* none yet */,
		    'o', ((guest) ? 'a' : 'r'),
		    vpw, 0 /* none yet */,
		    ((guest) ? "*" : pw->pw_name),
		    dhostname);
		write(statfd, buf, strlen(buf));
		free(vpw);
	}
}

#if defined(TCPWRAPPERS)
static int check_host(struct sockaddr *sa)
{
	char ipaddr[INET6_ADDRSTRLEN];
	char host[NI_MAXHOST];

	getnameinfo(sa, sizeof(struct sockaddr_storage),
			ipaddr, sizeof(ipaddr), NULL, 0, NI_NUMERICHOST);

	if (! getnameinfo(sa, sizeof(struct sockaddr_storage),
				host, sizeof(host), NULL, 0, NI_NAMEREQD) ) {
		if (!hosts_ctl("ftpd", host, ipaddr, STRING_UNKNOWN)) {
			syslog(LOG_FTP | LOG_NOTICE,
			    "tcpwrappers rejected: %s [%s]", host, ipaddr);
			return (0);
		}
	} else {
		if (!hosts_ctl("ftpd", STRING_UNKNOWN, ipaddr, STRING_UNKNOWN)) {
			syslog(LOG_FTP | LOG_NOTICE,
			    "tcpwrappers rejected: [%s]", ipaddr);
			return (0);
		}
	}
	return (1);
}
#endif	/* TCPWRAPPERS */

#ifdef USE_SSL

static 
int
verify_callback(int ok,
		X509_STORE_CTX *ctx);

int
do_ssl_start(void)
{
    static char errstr[1024];

    if (ssl_debug_flag) {
	(void) BIO_printf(bio_err,"do_ssl_start triggered\n");
	(void) BIO_flush(bio_err);
    }

    /* do the SSL stuff now ... before we play with pty's */
    ssl_con=(SSL *)SSL_new(ssl_ctx);

    /* we are working with stdin (inetd based) by default */
    SSL_set_fd(ssl_con,0);

#if 0
    if (SSL_use_RSAPrivateKey(ssl_con,ssl_private_key)==0) {
        sprintf(errstr,"ftpd: SSL_use_RSAPrivateKey %s",ERR_error_string(ERR_get_error(),NULL));
	perror_reply(421, errstr);
	dologout(1);
    }

    if (SSL_use_certificate(ssl_con,ssl_public_cert)==0) {
        sprintf(errstr,"ftpd: SSL_use_certificate %s",ERR_error_string(ERR_get_error(),NULL));
	perror_reply(421, errstr);
	dologout(1);
    }
#endif

    if (ssl_debug_flag && ssl_verify_flag)
	(void) BIO_printf(bio_err, "Setting callback for verification: flag 0x%02x\n", ssl_verify_flag);

    SSL_set_verify(ssl_con,ssl_verify_flag,
	    ssl_verify_flag ? verify_callback : NULL);

    if (SSL_accept(ssl_con)<=0) {
	sprintf(errstr,"ftpd: SSL_accept %s",ERR_error_string(ERR_get_error(),NULL));

	perror_reply(421, errstr);
	dologout(1);

	SSL_free(ssl_con);
	ssl_con=NULL;

	/* we will probably want to know this sort of stuff ...
	 * at least for the moment I'd like to keep track of
	 * who is using SSL - later I will probably make this
	 * just a debug option and only log after the user has
	 * actually connected --tjh
	 */
	if (logging)
	    syslog(LOG_NOTICE, "SSL FAILED WITH %s", remotehost);

    } else {
	ssl_active_flag=1;

	if (logging) {
            if (auth_ssl_name)
                syslog(LOG_NOTICE, "SSL SUCCEEDED WITH %s as %s", remotehost,
                    auth_ssl_name);
            else
                syslog(LOG_NOTICE, "SSL SUCCEEDED WITH %s", remotehost);
	}

	if (ssl_debug_flag)
	    BIO_printf(bio_err, "SSL Cipher %s, protocol %s\r\n",
		       SSL_get_cipher_name(ssl_con),
		       SSL_get_version(ssl_con));
    }

    /* ssl_fprintf calls require that this be null to test
     * for being an ssl stream
     */
    if (!ssl_active_flag) {
	if (ssl_con!=NULL)
	  SSL_free(ssl_con);
	ssl_con=NULL;
    }

    return 0;

}

/* we really shouldn't have code like this! --tjh */
int 
ssl_getc(SSL *ssl_con)
{
    char onebyte;

    if (SSL_read(ssl_con,&onebyte,1)!=1)
      return EOF;
    else {
	if (ssl_debug_flag && !silence_flag)
	    BIO_printf(bio_err, "SSL_read %d (%c) ",
		       onebyte & 0xff, isprint(onebyte) ? onebyte : '.');
	return onebyte & 0xff;
    }
}


/* got back to this an implemented some rather "simple" buffering */
static char putc_buf[BUFSIZ];
static int putc_buf_pos=0;

static int
ssl_putc_flush(SSL *ssl_con)
{
    if (putc_buf_pos>0) {
	if (SSL_write(ssl_con,putc_buf,putc_buf_pos)!=putc_buf_pos) {
	    if (ssl_debug_flag) 
		BIO_printf(bio_err,"ssl_putc_flush: WRITE FAILED\n");
	    putc_buf_pos=0;
	    return -1;
	}
    }
    putc_buf_pos=0;
    return 0;
}

static int 
ssl_putc(SSL *ssl_con,int oneint)
{
    char onebyte;

    onebyte = oneint & 0xff;

    /* make sure there is space */
    if (putc_buf_pos>=BUFSIZ) 
	if (ssl_putc_flush(ssl_con)!=0)
	  return EOF;
    putc_buf[putc_buf_pos++]=onebyte;

    return onebyte;
}

static 
int
verify_callback(int ok,
		X509_STORE_CTX *ctx)
{
    int depth,error;
    X509 *xs;

    depth = X509_STORE_CTX_get_error_depth(ctx);
    error = X509_STORE_CTX_get_error(ctx);
    xs=X509_STORE_CTX_get_current_cert(ctx);

    if (ssl_debug_flag) {
	char *p = (char *) ONELINE_NAME(X509_get_subject_name(xs));

	(void) BIO_printf(bio_err, "Subject %d: %s\r\n", depth, p);

	if (!ok || error) {
	    free(p);
	    p = (char *) ONELINE_NAME(X509_get_issuer_name(xs));
	    (void) BIO_printf(bio_err, "Issuer  %d: %s\r\n", depth, p);
	    (void) BIO_printf(bio_err, "At depth %d: %s\r\n",
			      depth, X509_verify_cert_error_string(error));
	}
	free(p);
    }

    /*
     * If the verification fails, then don't remember the name.  However,
     * if we don't require a certificate, then return success which will
     * still allow us to set up an encrypted session.
     *
     */
    if (!ok) {
	/* If we can't verify the issuer, then don't accept the name. */
    if (depth != 0 && auth_ssl_name) {
		free(auth_ssl_name);
 		auth_ssl_name = 0;
 	}

	/* The following manipulation was used up to Debian packaging
	 * of version 0.17.36+0.3-1.  It should not be used now that
	 * full verification is available, but is kept for now if the
	 * option '-z legacy' is applied.
	 * Keep old indentation for visibility in the patch file.
	 */
	if (ssl_legacy_flag) {
 	ok=ssl_verify_flag & SSL_VERIFY_FAIL_IF_NO_PEER_CERT ? 0 : 1;

	if (ssl_debug_flag)
	    (void) BIO_printf(bio_err,
			      "Forcing 'ok' to be %d for legacy.\r\n", ok);
	}
     }
     if (depth == 0) {
	free(auth_ssl_name);
 	auth_ssl_name =
 	    (char *)ONELINE_NAME(X509_get_subject_name(xs));
     }
done: ;

     if (ssl_debug_flag)
     	BIO_printf(bio_err,"verify_callback: returning %d\n",ok);

     return ok;
}

/* return true if this auth_ssl_name is authorized to use name. */
int
good_ssl_user(char *name)
{
   FILE *user_fp;
   char buf[2048];

   if (!auth_ssl_name)
      return 0;
   if (!ssl_certsok_flag)
      return 0;	/* can't happen */
   user_fp = fopen("/etc/ssl.users", "r");
   if (!user_fp)
      return 0;
   while (fgets(buf, sizeof buf, user_fp)) {
      char *cp;
      char *n;

      /* allow for comments in the file ... always nice
       * to be able to add a little novel in files and
       * also disable easily --tjh
       */
      if (buf[0]=='#')
	  continue;

      if ((cp = strchr(buf, '\n')))
	  *cp = '\0';
      cp = strchr(buf, ':');
      if (!cp)
	  continue;
      *cp++ = '\0';
      if (strcasecmp(cp, auth_ssl_name) == 0) {
	  n = buf;
	  while (n) {
	      cp = strchr(n, ',');
	      if (cp)
		  *cp++ = '\0';
	      if (!strcmp(name, n)) {
		  fclose(user_fp);
		  return 1;
	      }
	      n = cp;
	  }
      }
   }
   fclose(user_fp);
   return 0;
}

#endif /* USE_SSL */