123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161 |
- #include "includes.h"
- #include "buffer.h"
- #include "dbutil.h"
- #include "session.h"
- #include "ssh.h"
- #include "runopts.h"
- #if DROPBEAR_CLI_PASSWORD_AUTH
- #if DROPBEAR_CLI_ASKPASS_HELPER
- static int want_askpass()
- {
- char* askpass_prog = NULL;
- askpass_prog = getenv("SSH_ASKPASS");
- return askpass_prog &&
- ((!isatty(STDIN_FILENO) && getenv("DISPLAY") )
- || getenv("SSH_ASKPASS_ALWAYS"));
- }
- static char *gui_getpass(const char *prompt) {
- pid_t pid;
- int p[2], maxlen, len, status;
- static char buf[DROPBEAR_MAX_CLI_PASS + 1];
- char* helper = NULL;
- TRACE(("enter gui_getpass"))
- helper = getenv("SSH_ASKPASS");
- if (!helper)
- {
- TRACE(("leave gui_getpass: no askpass program"))
- return NULL;
- }
- if (pipe(p) < 0) {
- TRACE(("error creating child pipe"))
- return NULL;
- }
- pid = fork();
- if (pid < 0) {
- TRACE(("fork error"))
- return NULL;
- }
- if (!pid) {
-
- close(p[0]);
- if (dup2(p[1], STDOUT_FILENO) < 0) {
- TRACE(("error redirecting stdout"))
- exit(1);
- }
- close(p[1]);
- execlp(helper, helper, prompt, (char *)0);
- TRACE(("execlp error"))
- exit(1);
- }
- close(p[1]);
- maxlen = sizeof(buf);
- while (maxlen > 0) {
- len = read(p[0], buf + sizeof(buf) - maxlen, maxlen);
- if (len > 0) {
- maxlen -= len;
- } else {
- if (errno != EINTR)
- break;
- }
- }
- close(p[0]);
- while (waitpid(pid, &status, 0) < 0 && errno == EINTR)
- ;
- if (!WIFEXITED(status) || WEXITSTATUS(status) != 0)
- return(NULL);
- len = sizeof(buf) - maxlen;
- buf[len] = '\0';
- if (len > 0 && buf[len - 1] == '\n')
- buf[len - 1] = '\0';
- TRACE(("leave gui_getpass"))
- return(buf);
- }
- #endif
- void cli_auth_password() {
- char* password = NULL;
- char prompt[80];
- DEBUG1(("enter cli_auth_password"))
- CHECKCLEARTOWRITE();
- snprintf(prompt, sizeof(prompt), "%s@%s's password: ",
- cli_opts.username, cli_opts.remotehost);
- #if DROPBEAR_CLI_ASKPASS_HELPER
- if (want_askpass())
- {
- password = gui_getpass(prompt);
- if (!password) {
- dropbear_exit("No password");
- }
- } else
- #endif
- {
- password = getpass_or_cancel(prompt);
- }
- buf_putbyte(ses.writepayload, SSH_MSG_USERAUTH_REQUEST);
- buf_putstring(ses.writepayload, cli_opts.username,
- strlen(cli_opts.username));
- buf_putstring(ses.writepayload, SSH_SERVICE_CONNECTION,
- SSH_SERVICE_CONNECTION_LEN);
- buf_putstring(ses.writepayload, AUTH_METHOD_PASSWORD,
- AUTH_METHOD_PASSWORD_LEN);
- buf_putbyte(ses.writepayload, 0);
- buf_putstring(ses.writepayload, password, strlen(password));
- encrypt_packet();
- m_burn(password, strlen(password));
- cli_ses.is_trivial_auth = 0;
- TRACE(("leave cli_auth_password"))
- }
- #endif
|