1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
#include <sys/types.h>
#include <ctype.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <msg/msg.h>
#include <str/str.h>
#include "ucspi-proxy.h"
const char filter_connfail_prefix[] = "* NO ";
const char filter_connfail_suffix[] = "\r\n";
extern char* base64decode(char* data, unsigned long size);
extern const char* local_name;
static bool saw_auth = 0;
static str label;
static str saved_label;
static str username;
static str linebuf;
static char* parse_label(char* data, ssize_t size)
{
char* end;
if ((end = memchr(data, ' ', size)) == 0) return 0;
str_copyb(&label, data, end - data);
return end+1;
}
static void filter_client_data(char* data, ssize_t size)
{
char* cmd;
char* ptr;
char* start;
cmd = parse_label(data, size);
if(cmd) {
/* If we see a "AUTH" or "LOGIN" command, save the preceding label
* for reference when looking for the corresponding "OK" */
if(!strncasecmp(cmd, "AUTHENTICATE ", 5)) {
str_copy(&saved_label, &label);
str_truncate(&label, 0);
saw_auth = 1;
}
else if(!strncasecmp(cmd, "LOGIN ", 6)) {
ptr = cmd + 6;
while (isspace(*ptr))
++ptr;
start = ptr++;
if (*start == '"') {
while (*ptr != '"')
++ptr;
str_copyb(&username, start+1, ptr-(start+1));
}
else {
while (!isspace(*ptr))
++ptr;
str_copyb(&username, start, ptr-start);
}
if (local_name && memchr(start, '@', ptr-start) == 0) {
str_copyb(&linebuf, data, ptr-data);
str_catc(&linebuf, '@');
str_catc(&username, '@');
str_cats(&linebuf, local_name);
str_cats(&username, local_name);
str_catb(&linebuf, ptr, size-(ptr-data));
data = linebuf.s;
size = linebuf.len;
}
str_copy(&saved_label, &label);
str_truncate(&label, 0);
msg2("USER ", username.s);
}
}
else if(saw_auth) {
ptr = base64decode(data, size);
if (ptr) {
str_copys(&username, ptr);
ptr = username.s;
while (!isspace(*ptr)) ++ptr;
*ptr = 0;
}
saw_auth = 0;
}
write_server(data, size);
}
static void filter_server_data(char* data, ssize_t size)
{
if(saved_label.len > 0) {
/* Skip continuation data */
if(data[0] != '+') {
/* Check if the response is tagged with the saved label */
const char* resp = parse_label(data, size);
if(resp) {
if(!str_diff(&label, &saved_label)) {
/* Check if the response was an OK */
if(!strncasecmp(resp, "OK ", 3))
accept_client(username.s);
else
deny_client(username.s);
str_truncate(&saved_label, 0);
}
}
}
}
write_client(data, size);
}
void imap_filter_init(void)
{
set_filter(CLIENT_IN, filter_client_data, 0);
set_filter(SERVER_FD, filter_server_data, 0);
}
|
