Coverage Report

Created: 2025-08-09 07:13

/src/dropbear/src/svr-service.c
Line
Count
Source
1
/*
2
 * Dropbear - a SSH2 server
3
 * 
4
 * Copyright (c) 2002,2003 Matt Johnston
5
 * All rights reserved.
6
 * 
7
 * Permission is hereby granted, free of charge, to any person obtaining a copy
8
 * of this software and associated documentation files (the "Software"), to deal
9
 * in the Software without restriction, including without limitation the rights
10
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11
 * copies of the Software, and to permit persons to whom the Software is
12
 * furnished to do so, subject to the following conditions:
13
 * 
14
 * The above copyright notice and this permission notice shall be included in
15
 * all copies or substantial portions of the Software.
16
 * 
17
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
20
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
23
 * SOFTWARE. */
24
25
#include "includes.h"
26
#include "dbutil.h"
27
#include "service.h"
28
#include "session.h"
29
#include "packet.h"
30
#include "ssh.h"
31
#include "auth.h"
32
33
static void send_msg_service_accept(const char *name, int len);
34
35
/* processes a SSH_MSG_SERVICE_REQUEST, returning 0 if finished,
36
 * 1 if not */
37
2.85k
void recv_msg_service_request() {
38
39
2.85k
  char * name;
40
2.85k
  unsigned int len;
41
42
2.85k
  TRACE(("enter recv_msg_service_request"))
43
44
2.85k
  name = buf_getstring(ses.payload, &len);
45
46
  /* ssh-userauth */
47
2.85k
  if (len == SSH_SERVICE_USERAUTH_LEN && 
48
2.85k
      strncmp(SSH_SERVICE_USERAUTH, name, len) == 0) {
49
50
1.83k
    send_msg_service_accept(name, len);
51
1.83k
    m_free(name);
52
1.83k
    TRACE(("leave recv_msg_service_request: done ssh-userauth"))
53
1.83k
    return;
54
1.83k
  }
55
56
  /* ssh-connection */
57
1.01k
  if (len == SSH_SERVICE_CONNECTION_LEN &&
58
1.01k
      (strncmp(SSH_SERVICE_CONNECTION, name, len) == 0)) {
59
528
    if (ses.authstate.authdone != 1) {
60
2
      dropbear_exit("Request for connection before auth");
61
2
    }
62
63
526
    send_msg_service_accept(name, len);
64
526
    m_free(name);
65
526
    TRACE(("leave recv_msg_service_request: done ssh-connection"))
66
526
    return;
67
528
  }
68
69
487
  m_free(name);
70
  /* TODO this should be a MSG_DISCONNECT */
71
487
  dropbear_exit("Unrecognised SSH_MSG_SERVICE_REQUEST");
72
73
74
1.01k
}
75
76
2.36k
static void send_msg_service_accept(const char *name, int len) {
77
78
2.36k
  TRACE(("accepting service %s", name))
79
80
2.36k
  CHECKCLEARTOWRITE();
81
82
2.36k
  buf_putbyte(ses.writepayload, SSH_MSG_SERVICE_ACCEPT);
83
2.36k
  buf_putstring(ses.writepayload, name, len);
84
85
2.36k
  encrypt_packet();
86
87
2.36k
}