mirror of https://github.com/Cisco-Talos/clamav
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
370 lines
9.3 KiB
370 lines
9.3 KiB
/*
|
|
* Copyright (C) 2007 Tomasz Kojm <tkojm@clamav.net>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2 as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
|
|
* MA 02110-1301, USA.
|
|
*/
|
|
|
|
#if HAVE_CONFIG_H
|
|
#include "clamav-config.h"
|
|
#endif
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#ifdef HAVE_UNISTD_H
|
|
#include <unistd.h>
|
|
#endif
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
#include <time.h>
|
|
|
|
#ifndef _WIN32
|
|
#include <sys/socket.h>
|
|
#include <netinet/in.h>
|
|
#include <arpa/inet.h>
|
|
#endif
|
|
|
|
#include "mirman.h"
|
|
|
|
#include "libclamav/cltypes.h"
|
|
#include "libclamav/clamav.h"
|
|
|
|
#include "shared/output.h"
|
|
|
|
#ifndef HAVE_GETADDRINFO
|
|
#ifndef AF_INET6
|
|
#define AF_INET6 0xbeef /* foo */
|
|
#endif
|
|
#endif
|
|
|
|
#define IGNORE_LONG 3 * 86400
|
|
#define IGNORE_SHORT 6 * 3600
|
|
|
|
void
|
|
mirman_free (struct mirdat *mdat)
|
|
{
|
|
if (mdat && mdat->num)
|
|
{
|
|
free (mdat->mirtab);
|
|
mdat->num = 0;
|
|
}
|
|
}
|
|
|
|
int
|
|
mirman_read (const char *file, struct mirdat *mdat, uint8_t active)
|
|
{
|
|
struct mirdat_ip mip;
|
|
int fd, bread;
|
|
|
|
|
|
memset (mdat, 0, sizeof (struct mirdat));
|
|
|
|
if (!(mdat->active = active))
|
|
return 0;
|
|
|
|
if ((fd = open (file, O_RDONLY | O_BINARY)) == -1)
|
|
return -1;
|
|
|
|
while ((bread = read (fd, &mip, sizeof (mip))) == sizeof (mip))
|
|
{
|
|
mdat->mirtab =
|
|
(struct mirdat_ip *) realloc (mdat->mirtab,
|
|
(mdat->num + 1) * sizeof (mip));
|
|
if (!mdat->mirtab)
|
|
{
|
|
logg ("!Can't allocate memory for mdat->mirtab\n");
|
|
mirman_free (mdat);
|
|
close (fd);
|
|
return -1;
|
|
}
|
|
memcpy (&mdat->mirtab[mdat->num], &mip, sizeof (mip));
|
|
mdat->num++;
|
|
}
|
|
|
|
close (fd);
|
|
|
|
if (bread)
|
|
{
|
|
logg ("^Removing broken %s file.\n", file);
|
|
unlink (file);
|
|
mirman_free (mdat);
|
|
return -1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
mirman_check (uint32_t * ip, int af, struct mirdat *mdat,
|
|
struct mirdat_ip **md)
|
|
{
|
|
unsigned int i, flevel = cl_retflevel ();
|
|
|
|
|
|
if (md)
|
|
*md = NULL;
|
|
|
|
if (!mdat->active)
|
|
return 0;
|
|
|
|
for (i = 0; i < mdat->num; i++)
|
|
{
|
|
|
|
if ((af == AF_INET && mdat->mirtab[i].ip4 == *ip)
|
|
|| (af == AF_INET6
|
|
&& !memcmp (mdat->mirtab[i].ip6, ip, 4 * sizeof (uint32_t))))
|
|
{
|
|
|
|
if (!mdat->mirtab[i].atime && !mdat->mirtab[i].ignore)
|
|
{
|
|
if (md)
|
|
*md = &mdat->mirtab[i];
|
|
return 0;
|
|
}
|
|
|
|
if (mdat->dbflevel && (mdat->dbflevel > flevel)
|
|
&& (mdat->dbflevel - flevel > 3))
|
|
if (time (NULL) - mdat->mirtab[i].atime <
|
|
(mdat->dbflevel - flevel) * 3600)
|
|
return 2;
|
|
|
|
if (mdat->mirtab[i].ignore)
|
|
{
|
|
if (!mdat->mirtab[i].atime)
|
|
return 1;
|
|
|
|
if (time (NULL) - mdat->mirtab[i].atime > IGNORE_LONG)
|
|
{
|
|
mdat->mirtab[i].ignore = 0;
|
|
if (md)
|
|
*md = &mdat->mirtab[i];
|
|
return 0;
|
|
}
|
|
else
|
|
{
|
|
if (mdat->mirtab[i].ignore == 2
|
|
&& (time (NULL) - mdat->mirtab[i].atime >
|
|
IGNORE_SHORT))
|
|
{
|
|
if (md)
|
|
*md = &mdat->mirtab[i];
|
|
return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
if (md)
|
|
*md = &mdat->mirtab[i];
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int
|
|
mirman_update_int (uint32_t * ip, int af, struct mirdat *mdat, uint8_t broken,
|
|
int succ, int fail)
|
|
{
|
|
unsigned int i, found = 0;
|
|
|
|
|
|
if (!mdat->active)
|
|
return 0;
|
|
|
|
for (i = 0; i < mdat->num; i++)
|
|
{
|
|
if ((af == AF_INET && mdat->mirtab[i].ip4 == *ip)
|
|
|| (af == AF_INET6
|
|
&& !memcmp (mdat->mirtab[i].ip6, ip, 4 * sizeof (uint32_t))))
|
|
{
|
|
found = 1;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (found)
|
|
{
|
|
mdat->mirtab[i].atime = 0; /* will be updated in mirman_write() */
|
|
if (succ || fail)
|
|
{
|
|
if ((int) mdat->mirtab[i].fail + fail < 0)
|
|
mdat->mirtab[i].fail = 0;
|
|
else
|
|
mdat->mirtab[i].fail += fail;
|
|
|
|
if ((int) mdat->mirtab[i].succ + succ < 0)
|
|
mdat->mirtab[i].succ = 0;
|
|
else
|
|
mdat->mirtab[i].succ += succ;
|
|
}
|
|
else
|
|
{
|
|
if (broken)
|
|
mdat->mirtab[i].fail++;
|
|
else
|
|
mdat->mirtab[i].succ++;
|
|
|
|
if (broken == 2)
|
|
{
|
|
mdat->mirtab[i].ignore = 2;
|
|
}
|
|
else
|
|
{
|
|
/*
|
|
* If the total number of failures is less than 3 then never
|
|
* mark a permanent failure, in other case use the real status.
|
|
*/
|
|
if (mdat->mirtab[i].fail < 3)
|
|
mdat->mirtab[i].ignore = 0;
|
|
else
|
|
mdat->mirtab[i].ignore = broken;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
mdat->mirtab =
|
|
(struct mirdat_ip *) realloc (mdat->mirtab,
|
|
(mdat->num +
|
|
1) * sizeof (struct mirdat_ip));
|
|
if (!mdat->mirtab)
|
|
{
|
|
logg ("!Can't allocate memory for new element in mdat->mirtab\n");
|
|
return -1;
|
|
}
|
|
memset (&mdat->mirtab[mdat->num], 0, sizeof (struct mirdat_ip));
|
|
if (af == AF_INET)
|
|
{
|
|
mdat->mirtab[mdat->num].ip4 = *ip;
|
|
}
|
|
else
|
|
{
|
|
mdat->mirtab[mdat->num].ip4 = 0;
|
|
memcpy (mdat->mirtab[mdat->num].ip6, ip, 4 * sizeof (uint32_t));
|
|
}
|
|
mdat->mirtab[mdat->num].atime = 0;
|
|
mdat->mirtab[mdat->num].succ = (succ > 0) ? succ : 0;
|
|
mdat->mirtab[mdat->num].fail = (fail > 0) ? fail : 0;
|
|
mdat->mirtab[mdat->num].ignore = (broken == 2) ? 2 : 0;
|
|
if (!succ && !fail)
|
|
{
|
|
if (broken)
|
|
mdat->mirtab[mdat->num].fail++;
|
|
else
|
|
mdat->mirtab[mdat->num].succ++;
|
|
}
|
|
mdat->num++;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
mirman_update (uint32_t * ip, int af, struct mirdat *mdat, uint8_t broken)
|
|
{
|
|
return mirman_update_int (ip, af, mdat, broken, 0, 0);
|
|
}
|
|
|
|
int
|
|
mirman_update_sf (uint32_t * ip, int af, struct mirdat *mdat, int succ,
|
|
int fail)
|
|
{
|
|
return mirman_update_int (ip, af, mdat, 0, succ, fail);
|
|
}
|
|
|
|
void
|
|
mirman_list (const struct mirdat *mdat)
|
|
{
|
|
unsigned int i;
|
|
time_t tm;
|
|
char ip[46];
|
|
|
|
|
|
for (i = 0; i < mdat->num; i++)
|
|
{
|
|
printf ("Mirror #%u\n", i + 1);
|
|
#ifdef HAVE_GETADDRINFO
|
|
if (mdat->mirtab[i].ip4)
|
|
printf ("IP: %s\n",
|
|
inet_ntop (AF_INET, &mdat->mirtab[i].ip4, ip,
|
|
sizeof (ip)));
|
|
else
|
|
printf ("IP: %s\n",
|
|
inet_ntop (AF_INET6, mdat->mirtab[i].ip6, ip,
|
|
sizeof (ip)));
|
|
#else
|
|
if (mdat->mirtab[i].ip4)
|
|
printf ("IP: %s\n",
|
|
inet_ntoa (*(struct in_addr *) &mdat->mirtab[i].ip4));
|
|
#endif
|
|
printf ("Successes: %u\n", mdat->mirtab[i].succ);
|
|
printf ("Failures: %u\n", mdat->mirtab[i].fail);
|
|
tm = mdat->mirtab[i].atime;
|
|
printf ("Last access: %s", ctime ((const time_t *) &tm));
|
|
printf ("Ignore: %s\n", mdat->mirtab[i].ignore ? "Yes" : "No");
|
|
if (i != mdat->num - 1)
|
|
printf ("-------------------------------------\n");
|
|
}
|
|
}
|
|
|
|
void
|
|
mirman_whitelist (struct mirdat *mdat, unsigned int mode)
|
|
{
|
|
unsigned int i;
|
|
|
|
logg ("*Whitelisting %s blacklisted mirrors\n",
|
|
mode == 1 ? "all" : "short-term");
|
|
for (i = 0; i < mdat->num; i++)
|
|
if (mode == 1 || (mode == 2 && mdat->mirtab[i].ignore == 2))
|
|
mdat->mirtab[i].ignore = 0;
|
|
}
|
|
|
|
int
|
|
mirman_write (const char *file, const char *dir, struct mirdat *mdat)
|
|
{
|
|
int fd;
|
|
unsigned int i;
|
|
char path[512];
|
|
|
|
snprintf (path, sizeof (path), "%s/%s", dir, file);
|
|
path[sizeof (path) - 1] = 0;
|
|
|
|
if (!mdat->num)
|
|
return 0;
|
|
|
|
if ((fd =
|
|
open (path, O_WRONLY | O_CREAT | O_TRUNC | O_BINARY, 0600)) == -1)
|
|
{
|
|
logg ("!Can't open %s for writing\n", path);
|
|
return -1;
|
|
}
|
|
|
|
for (i = 0; i < mdat->num; i++)
|
|
if (!mdat->mirtab[i].atime)
|
|
mdat->mirtab[i].atime = (uint32_t) time (NULL);
|
|
|
|
if (write (fd, mdat->mirtab, mdat->num * sizeof (struct mirdat_ip)) == -1)
|
|
{
|
|
logg ("!Can't write to %s\n", path);
|
|
close (fd);
|
|
return -1;
|
|
}
|
|
|
|
close (fd);
|
|
return 0;
|
|
}
|
|
|