Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
504 lines (411 sloc) 13.8 KB
/* This file is part of "sshpass", a tool for batch running password ssh authentication
* Copyright (C) 2006 Lingnu Open Source Consulting Ltd.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version, provided that it was accepted by
* Lingnu Open Source Consulting Ltd. as an acceptable license for its
* projects. Consult http://www.lingnu.com/licenses.html
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
#if HAVE_CONFIG_H
#include "config.h"
#endif
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/wait.h>
#include <sys/ioctl.h>
#include <sys/select.h>
#include <unistd.h>
#include <fcntl.h>
#include <signal.h>
#if HAVE_TERMIOS_H
#include <termios.h>
#endif
#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <string.h>
enum program_return_codes {
RETURN_NOERROR,
RETURN_INVALID_ARGUMENTS,
RETURN_CONFLICTING_ARGUMENTS,
RETURN_RUNTIME_ERROR,
RETURN_PARSE_ERRROR,
RETURN_INCORRECT_PASSWORD,
RETURN_HOST_KEY_UNKNOWN,
RETURN_HOST_KEY_CHANGED,
};
// Some systems don't define posix_openpt
#ifndef HAVE_POSIX_OPENPT
int
posix_openpt(int flags)
{
return open("/dev/ptmx", flags);
}
#endif
int runprogram( int argc, char *argv[] );
struct {
enum { PWT_STDIN, PWT_FILE, PWT_FD, PWT_PASS } pwtype;
union {
const char *filename;
int fd;
const char *password;
} pwsrc;
} args;
static void show_help()
{
printf("Usage: " PACKAGE_NAME " [-f|-d|-p|-e] [-hV] command parameters\n"
" -f filename Take password to use from file\n"
" -d number Use number as file descriptor for getting password\n"
" -p password Provide password as argument (security unwise)\n"
" -e Password is passed as env-var \"SSHPASS\"\n"
" With no parameters - password will be taken from stdin\n\n"
" -h Show help (this screen)\n"
" -V Print version information\n"
"At most one of -f, -d, -p or -e should be used\n");
}
// Parse the command line. Fill in the "args" global struct with the results. Return argv offset
// on success, and a negative number on failure
static int parse_options( int argc, char *argv[] )
{
int error=-1;
int opt;
// Set the default password source to stdin
args.pwtype=PWT_STDIN;
args.pwsrc.fd=0;
#define VIRGIN_PWTYPE if( args.pwtype!=PWT_STDIN ) { \
fprintf(stderr, "Conflicting password source\n"); \
error=RETURN_CONFLICTING_ARGUMENTS; }
while( (opt=getopt(argc, argv, "+f:d:p:heV"))!=-1 && error==-1 ) {
switch( opt ) {
case 'f':
// Password should come from a file
VIRGIN_PWTYPE;
args.pwtype=PWT_FILE;
args.pwsrc.filename=optarg;
break;
case 'd':
// Password should come from an open file descriptor
VIRGIN_PWTYPE;
args.pwtype=PWT_FD;
args.pwsrc.fd=atoi(optarg);
break;
case 'p':
// Password is given on the command line
VIRGIN_PWTYPE;
args.pwtype=PWT_PASS;
args.pwsrc.password=strdup(optarg);
// Hide the original password from the command line
{
int i;
for( i=0; optarg[i]!='\0'; ++i )
optarg[i]='z';
}
break;
case 'e':
VIRGIN_PWTYPE;
args.pwtype=PWT_PASS;
args.pwsrc.password=getenv("SSHPASS");
if( args.pwsrc.password==NULL ) {
fprintf(stderr, "sshpass: -e option given but SSHPASS environment variable not set\n");
error=RETURN_INVALID_ARGUMENTS;
}
break;
case '?':
case ':':
error=RETURN_INVALID_ARGUMENTS;
break;
case 'h':
error=RETURN_NOERROR;
break;
case 'V':
printf("%s (C) 2006-2011 Lingnu Open Source Consulting Ltd.\n"
"This program is free software, and can be distributed under the terms of the GPL\n"
"See the COPYING file for more information.\n", PACKAGE_STRING );
exit(0);
break;
}
}
if( error>=0 )
return -(error+1);
else
return optind;
}
int main( int argc, char *argv[] )
{
int opt_offset=parse_options( argc, argv );
if( opt_offset<0 ) {
// There was some error
show_help();
return -(opt_offset+1); // -1 becomes 0, -2 becomes 1 etc.
}
if( argc-opt_offset<1 ) {
show_help();
return 0;
}
return runprogram( argc-opt_offset, argv+opt_offset );
}
int handleoutput( int fd );
/* Global variables so that this information be shared with the signal handler */
static int ourtty; // Our own tty
static int masterpt;
void window_resize_handler(int signum);
void sigchld_handler(int signum);
int runprogram( int argc, char *argv[] )
{
struct winsize ttysize; // The size of our tty
// We need to interrupt a select with a SIGCHLD. In order to do so, we need a SIGCHLD handler
signal( SIGCHLD,sigchld_handler );
// Create a pseudo terminal for our process
masterpt=posix_openpt(O_RDWR);
if( masterpt==-1 ) {
perror("Failed to get a pseudo terminal");
return RETURN_RUNTIME_ERROR;
}
fcntl(masterpt, F_SETFL, O_NONBLOCK);
if( grantpt( masterpt )!=0 ) {
perror("Failed to change pseudo terminal's permission");
return RETURN_RUNTIME_ERROR;
}
if( unlockpt( masterpt )!=0 ) {
perror("Failed to unlock pseudo terminal");
return RETURN_RUNTIME_ERROR;
}
ourtty=open("/dev/tty", 0);
if( ourtty!=-1 && ioctl( ourtty, TIOCGWINSZ, &ttysize )==0 ) {
signal(SIGWINCH, window_resize_handler);
ioctl( masterpt, TIOCSWINSZ, &ttysize );
}
const char *name=ptsname(masterpt);
int slavept;
/*
Comment no. 3.14159
This comment documents the history of code.
We need to open the slavept inside the child process, after "setsid", so that it becomes the controlling
TTY for the process. We do not, otherwise, need the file descriptor open. The original approach was to
close the fd immediately after, as it is no longer needed.
It turns out that (at least) the Linux kernel considers a master ptty fd that has no open slave fds
to be unused, and causes "select" to return with "error on fd". The subsequent read would fail, causing us
to go into an infinite loop. This is a bug in the kernel, as the fact that a master ptty fd has no slaves
is not a permenant problem. As long as processes exist that have the slave end as their controlling TTYs,
new slave fds can be created by opening /dev/tty, which is exactly what ssh is, in fact, doing.
Our attempt at solving this problem, then, was to have the child process not close its end of the slave
ptty fd. We do, essentially, leak this fd, but this was a small price to pay. This worked great up until
openssh version 5.6.
Openssh version 5.6 looks at all of its open file descriptors, and closes any that it does not know what
they are for. While entirely within its prerogative, this breaks our fix, causing sshpass to either
hang, or do the infinite loop again.
Our solution is to keep the slave end open in both parent AND child, at least until the handshake is
complete, at which point we no longer need to monitor the TTY anyways.
*/
int childpid=fork();
if( childpid==0 ) {
// Child
// Detach us from the current TTY
setsid();
// This line makes the ptty our controlling tty. We do not otherwise need it open
slavept=open(name, O_RDWR );
close( slavept );
close( masterpt );
char **new_argv=malloc(sizeof(char *)*(argc+1));
int i;
for( i=0; i<argc; ++i ) {
new_argv[i]=argv[i];
}
new_argv[i]=NULL;
execvp( new_argv[0], new_argv );
perror("sshpass: Failed to run command");
exit(RETURN_RUNTIME_ERROR);
} else if( childpid<0 ) {
perror("sshpass: Failed to create child process");
return RETURN_RUNTIME_ERROR;
}
// We are the parent
slavept=open(name, O_RDWR|O_NOCTTY );
int status=0;
int terminate=0;
pid_t wait_id;
sigset_t sigmask, sigmask_select;
// Set the signal mask during the select
sigemptyset(&sigmask_select);
// And during the regular run
sigemptyset(&sigmask);
sigaddset(&sigmask, SIGCHLD);
sigprocmask( SIG_SETMASK, &sigmask, NULL );
do {
if( !terminate ) {
fd_set readfd;
FD_ZERO(&readfd);
FD_SET(masterpt, &readfd);
int selret=pselect( masterpt+1, &readfd, NULL, NULL, NULL, &sigmask_select );
if( selret>0 ) {
if( FD_ISSET( masterpt, &readfd ) ) {
int ret;
if( (ret=handleoutput( masterpt )) ) {
// Authentication failed or any other error
// handleoutput returns positive error number in case of some error, and a negative value
// if all that happened is that the slave end of the pt is closed.
if( ret>0 ) {
close( masterpt ); // Signal ssh that it's controlling TTY is now closed
close(slavept);
}
terminate=ret;
if( terminate ) {
close( slavept );
}
}
}
}
wait_id=waitpid( childpid, &status, WNOHANG );
} else {
wait_id=waitpid( childpid, &status, 0 );
}
} while( wait_id==0 || (!WIFEXITED( status ) && !WIFSIGNALED( status )) );
if( terminate>0 )
return terminate;
else if( WIFEXITED( status ) )
return WEXITSTATUS(status);
else
return 255;
}
int match( const char *reference, const char *buffer, ssize_t bufsize, int state );
void write_pass( int fd );
int handleoutput( int fd )
{
// We are looking for the string
static int prevmatch=0; // If the "password" prompt is repeated, we have the wrong password.
static int state1, state2, state3, state4;
static const char compare1[]="assword:"; // Asking for a password
static const char compare2[]="The authenticity of host "; // Asks to authenticate host
static const char compare3[]="assword for "; // Asking for a password using the new OpenPAM prompts
static const char compare4[]="Verification code:"; // Asking for a google authenticator TOTP Code
// static const char compare3[]="WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!"; // Warns about man in the middle attack
// The remote identification changed error is sent to stderr, not the tty, so we do not handle it.
// This is not a problem, as ssh exists immediately in such a case
char buffer[40];
int ret=0;
int numread=read(fd, buffer, sizeof(buffer) );
state1=match( compare1, buffer, numread, state1 );
// Are we at a password prompt?
if( compare1[state1]=='\0' ) {
if( !prevmatch ) {
write_pass( fd );
state1=0;
prevmatch=1;
} else {
// Wrong password - terminate with proper error code
ret=RETURN_INCORRECT_PASSWORD;
}
}
// Look for the newer OpenPAM prompt as well
if( ret==0 ) {
state3=match( compare3, buffer, numread, state3 );
if( compare3[state3]=='\0' ) {
if( !prevmatch ) {
write_pass( fd );
state3=0;
prevmatch=1;
} else {
ret=RETURN_INCORRECT_PASSWORD;
}
}
}
// Look for google authenticator TOTP codes
if( ret==0 ) {
state4=match( compare4, buffer, numread, state4 );
if( compare4[state4]=='\0' ) {
if( !prevmatch ) {
write_pass( fd );
state4=0;
prevmatch=1;
} else {
ret=RETURN_INCORRECT_PASSWORD;
}
}
}
if( ret==0 ) {
state2=match( compare2, buffer, numread, state2 );
// Are we being prompted to authenticate the host?
if( compare2[state2]=='\0' ) {
ret=RETURN_HOST_KEY_UNKNOWN;
}
}
return ret;
}
int match( const char *reference, const char *buffer, ssize_t bufsize, int state )
{
// This is a highly simplisic implementation. It's good enough for matching "Password: ", though.
int i;
for( i=0;reference[state]!='\0' && i<bufsize; ++i ) {
if( reference[state]==buffer[i] )
state++;
else {
state=0;
if( reference[state]==buffer[i] )
state++;
}
}
return state;
}
void write_pass_fd( int srcfd, int dstfd );
void write_pass( int fd )
{
switch( args.pwtype ) {
case PWT_STDIN:
write_pass_fd( STDIN_FILENO, fd );
break;
case PWT_FD:
write_pass_fd( args.pwsrc.fd, fd );
break;
case PWT_FILE:
{
int srcfd=open( args.pwsrc.filename, O_RDONLY );
if( srcfd!=-1 ) {
write_pass_fd( srcfd, fd );
close( srcfd );
}
}
break;
case PWT_PASS:
write( fd, args.pwsrc.password, strlen( args.pwsrc.password ) );
write( fd, "\n", 1 );
break;
}
}
void write_pass_fd( int srcfd, int dstfd )
{
int done=0;
while( !done ) {
char buffer[40];
int i;
int numread=read( srcfd, buffer, sizeof(buffer) );
done=(numread<1);
for( i=0; i<numread && !done; ++i ) {
if( buffer[i]!='\n' )
write( dstfd, buffer+i, 1 );
else
done=1;
}
}
write( dstfd, "\n", 1 );
}
void window_resize_handler(int signum)
{
struct winsize ttysize; // The size of our tty
if( ioctl( ourtty, TIOCGWINSZ, &ttysize )==0 )
ioctl( masterpt, TIOCSWINSZ, &ttysize );
}
// Do nothing handler - makes sure the select will terminate if the signal arrives, though.
void sigchld_handler(int signum)
{
}
You can’t perform that action at this time.