Merge from trunk.
[bpt/emacs.git] / lib-src / movemail.c
CommitLineData
237e0016
RS
1/* movemail foo bar -- move file foo to file bar,
2 locking file foo the way /bin/mail respects.
95df8112 3
ab422c4d
PE
4Copyright (C) 1986, 1992-1994, 1996, 1999, 2001-2013 Free Software
5Foundation, Inc.
237e0016
RS
6
7This file is part of GNU Emacs.
8
294981c7 9GNU Emacs is free software: you can redistribute it and/or modify
93320c23 10it under the terms of the GNU General Public License as published by
294981c7
GM
11the Free Software Foundation, either version 3 of the License, or
12(at your option) any later version.
93320c23 13
237e0016 14GNU Emacs is distributed in the hope that it will be useful,
93320c23
JA
15but WITHOUT ANY WARRANTY; without even the implied warranty of
16MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17GNU General Public License for more details.
237e0016 18
93320c23 19You should have received a copy of the GNU General Public License
294981c7
GM
20along with GNU Emacs. If not, see <http://www.gnu.org/licenses/>. */
21
237e0016 22
63cf923d
RS
23/* Important notice: defining MAIL_USE_FLOCK or MAIL_USE_LOCKF *will
24 cause loss of mail* if you do it on a system that does not normally
0aa8781f 25 use flock/lockf as its way of interlocking access to inbox files. The
63cf923d
RS
26 setting of MAIL_USE_FLOCK and MAIL_USE_LOCKF *must agree* with the
27 system's own conventions. It is not a choice that is up to you.
08d0752f
RS
28
29 So, if your system uses lock files rather than flock, then the only way
30 you can get proper operation is to enable movemail to write lockfiles there.
31 This means you must either give that directory access modes
32 that permit everyone to write lockfiles in it, or you must make movemail
33 a setuid or setgid program. */
34
237e0016
RS
35/*
36 * Modified January, 1986 by Michael R. Gretzinger (Project Athena)
37 *
88c40feb 38 * Added POP (Post Office Protocol) service. When compiled -DMAIL_USE_POP
237e0016
RS
39 * movemail will accept input filename arguments of the form
40 * "po:username". This will cause movemail to open a connection to
41 * a pop server running on $MAILHOST (environment variable). Movemail
42 * must be setuid to root in order to work with POP.
177c0ea7 43 *
237e0016
RS
44 * New module: popmail.c
45 * Modified routines:
cfa191ff 46 * main - added code within #ifdef MAIL_USE_POP; added setuid (getuid ())
177c0ea7 47 * after POP code.
237e0016
RS
48 * New routines in movemail.c:
49 * get_errmsg - return pointer to system error message
50 *
2e82e3c3
RS
51 * Modified August, 1993 by Jonathan Kamens (OpenVision Technologies)
52 *
53 * Move all of the POP code into a separate file, "pop.c".
54 * Use strerror instead of get_errmsg.
55 *
237e0016
RS
56 */
57
752fb472 58#include <config.h>
237e0016
RS
59#include <sys/types.h>
60#include <sys/stat.h>
61#include <sys/file.h>
e2f9d9af 62#include <stdio.h>
237e0016 63#include <errno.h>
bd41a17d 64#include <time.h>
cc3b64e8 65
fea4325c 66#include <getopt.h>
f72adc12 67#include <unistd.h>
cc3b64e8 68#include <fcntl.h>
1725ae55 69#include <string.h>
f72adc12 70#include "syswait.h"
2e82e3c3
RS
71#ifdef MAIL_USE_POP
72#include "pop.h"
73#endif
237e0016 74
91cf09ac
RS
75#ifdef MSDOS
76#undef access
77#endif /* MSDOS */
78
7f75d5c6 79#ifdef WINDOWSNT
677a7bcf 80#include "ntlib.h"
7f75d5c6
RS
81#undef access
82#undef unlink
83#define fork() 0
4822b2e5 84#define wait(var) (*(var) = 0)
7f75d5c6
RS
85/* Unfortunately, Samba doesn't seem to properly lock Unix files even
86 though the locking call succeeds (and indeed blocks local access from
87 other NT programs). If you have direct file access using an NFS
88 client or something other than Samba, the locking call might work
677a7bcf
RS
89 properly - make sure it does before you enable this!
90
91 [18-Feb-97 andrewi] I now believe my comment above to be incorrect,
92 since it was based on a misunderstanding of how locking calls are
93 implemented and used on Unix. */
94//#define DISABLE_DIRECT_ACCESS
95
677a7bcf 96#include <fcntl.h>
7f75d5c6
RS
97#endif /* WINDOWSNT */
98
76ed5e01 99#ifdef WINDOWSNT
237e0016
RS
100#include <sys/locking.h>
101#endif
102
0aa8781f
GM
103/* If your system uses the `flock' or `lockf' system call for mail locking,
104 define MAIL_USE_SYSTEM_LOCK. If your system type should always define
105 MAIL_USE_LOCKF or MAIL_USE_FLOCK but configure does not do this,
106 please make a bug report. */
107
63cf923d
RS
108#ifdef MAIL_USE_LOCKF
109#define MAIL_USE_SYSTEM_LOCK
110#endif
111
112#ifdef MAIL_USE_FLOCK
113#define MAIL_USE_SYSTEM_LOCK
114#endif
115
4293ba7f
RS
116#ifdef MAIL_USE_MMDF
117extern int lk_open (), lk_close ();
118#endif
119
a4deff3c 120#if !defined (MAIL_USE_SYSTEM_LOCK) && !defined (MAIL_USE_MMDF) && \
dd843b6a
DL
121 (defined (HAVE_LIBMAIL) || defined (HAVE_LIBLOCKFILE)) && \
122 defined (HAVE_MAILLOCK_H)
a4deff3c
RS
123#include <maillock.h>
124/* We can't use maillock unless we know what directory system mail
125 files appear in. */
126#ifdef MAILDIR
127#define MAIL_USE_MAILLOCK
5a9c1e26 128static char *mail_spool_name (char *);
a4deff3c
RS
129#endif
130#endif
131
845ca893 132static _Noreturn void fatal (const char *s1, const char *s2, const char *s3);
988e88ab 133static void error (const char *s1, const char *s2, const char *s3);
845ca893
PE
134static _Noreturn void pfatal_with_name (char *name);
135static _Noreturn void pfatal_and_delete (char *name);
e2ad23ef 136#ifdef MAIL_USE_POP
1725ae55
AS
137static int popmail (char *mailbox, char *outfile, int preserve, char *password, int reverse_order);
138static int pop_retr (popserver server, int msgno, FILE *arg);
139static int mbx_write (char *line, int len, FILE *mbf);
140static int mbx_delimit_begin (FILE *mbf);
141static int mbx_delimit_end (FILE *mbf);
e2ad23ef 142#endif
237e0016 143
debd9b27 144#if (defined MAIL_USE_MAILLOCK \
c214e35e
PE
145 || (!defined DISABLE_DIRECT_ACCESS && !defined MAIL_USE_MMDF \
146 && !defined MAIL_USE_SYSTEM_LOCK))
147/* Like malloc but get fatal error if memory is exhausted. */
148
149static void *
150xmalloc (size_t size)
151{
152 void *result = malloc (size);
153 if (!result)
154 fatal ("virtual memory exhausted", 0, 0);
155 return result;
156}
157#endif
158
237e0016 159/* Nonzero means this is name of a lock file to delete on fatal error. */
b23b5a5b 160static char *delete_lockname;
237e0016 161
e2f9d9af 162int
873fbd0b 163main (int argc, char **argv)
237e0016
RS
164{
165 char *inname, *outname;
166 int indesc, outdesc;
728a982d 167 ssize_t nread;
27d41fb4 168 int wait_status;
fea4325c 169 int c, preserve_mail = 0;
237e0016 170
63cf923d 171#ifndef MAIL_USE_SYSTEM_LOCK
237e0016 172 struct stat st;
237e0016 173 int tem;
529a133c 174 char *lockname;
906ad89d 175 char *tempname;
c214e35e 176 size_t inname_len, inname_dirlen;
237e0016 177 int desc;
63cf923d 178#endif /* not MAIL_USE_SYSTEM_LOCK */
237e0016 179
a4deff3c
RS
180#ifdef MAIL_USE_MAILLOCK
181 char *spool_name;
182#endif
183
a2997b0f
KH
184#ifdef MAIL_USE_POP
185 int pop_reverse_order = 0;
186# define ARGSTR "pr"
187#else /* ! MAIL_USE_POP */
188# define ARGSTR "p"
189#endif /* MAIL_USE_POP */
190
5e617bc2
JB
191 uid_t real_gid = getgid ();
192 uid_t priv_gid = getegid ();
51a91f9d 193
9112a2a9
AI
194#ifdef WINDOWSNT
195 /* Ensure all file i/o is in binary mode. */
196 _fmode = _O_BINARY;
197#endif
198
237e0016
RS
199 delete_lockname = 0;
200
a2997b0f 201 while ((c = getopt (argc, argv, ARGSTR)) != EOF)
e2f9d9af 202 {
fea4325c 203 switch (c) {
a2997b0f
KH
204#ifdef MAIL_USE_POP
205 case 'r':
206 pop_reverse_order = 1;
207 break;
208#endif
fea4325c
RS
209 case 'p':
210 preserve_mail++;
211 break;
212 default:
65396510 213 exit (EXIT_FAILURE);
fea4325c
RS
214 }
215 }
216
217 if (
218#ifdef MAIL_USE_POP
219 (argc - optind < 2) || (argc - optind > 3)
220#else
221 (argc - optind != 2)
222#endif
223 )
224 {
fea4325c 225#ifdef MAIL_USE_POP
f213f2c0 226 fprintf (stderr, "Usage: movemail [-p] [-r] inbox destfile%s\n",
bb5618fe 227 " [POP-password]");
fea4325c 228#else
bb5618fe 229 fprintf (stderr, "Usage: movemail [-p] inbox destfile%s\n", "");
fea4325c 230#endif
65396510 231 exit (EXIT_FAILURE);
e2f9d9af 232 }
237e0016 233
fea4325c
RS
234 inname = argv[optind];
235 outname = argv[optind+1];
237e0016 236
4293ba7f
RS
237#ifdef MAIL_USE_MMDF
238 mmdf_init (argv[0]);
239#endif
240
af7bd34e 241 if (*outname == 0)
a9eedf40 242 fatal ("Destination file name is empty", 0, 0);
af7bd34e 243
237e0016 244#ifdef MAIL_USE_POP
12a0565a 245 if (!strncmp (inname, "po:", 3))
237e0016 246 {
b3112191 247 int status;
237e0016 248
fea4325c 249 status = popmail (inname + 3, outname, preserve_mail,
a2997b0f
KH
250 (argc - optind == 3) ? argv[optind+2] : NULL,
251 pop_reverse_order);
237e0016
RS
252 exit (status);
253 }
254
51a91f9d
CY
255 if (setuid (getuid ()) < 0)
256 fatal ("Failed to drop privileges", 0, 0);
257
237e0016
RS
258#endif /* MAIL_USE_POP */
259
7f75d5c6 260#ifndef DISABLE_DIRECT_ACCESS
4293ba7f 261#ifndef MAIL_USE_MMDF
63cf923d 262#ifndef MAIL_USE_SYSTEM_LOCK
a4deff3c
RS
263#ifdef MAIL_USE_MAILLOCK
264 spool_name = mail_spool_name (inname);
5a9c1e26
PE
265 if (spool_name)
266 {
267#ifdef lint
268 lockname = 0;
269#endif
270 }
271 else
a4deff3c 272#endif
237e0016 273 {
a4deff3c
RS
274 /* Use a lock file named after our first argument with .lock appended:
275 If it exists, the mail file is locked. */
276 /* Note: this locking mechanism is *required* by the mailer
277 (on systems which use it) to prevent loss of mail.
278
279 On systems that use a lock file, extracting the mail without locking
280 WILL occasionally cause loss of mail due to timing errors!
281
7eaa9e44
GM
282 So, if creation of the lock file fails due to access
283 permission on the mail spool directory, you simply MUST
284 change the permission and/or make movemail a setgid program
a4deff3c
RS
285 so it can create lock files properly.
286
7eaa9e44 287 You might also wish to verify that your system is one which
0aa8781f 288 uses lock files for this purpose. Some systems use other methods. */
a4deff3c 289
c214e35e
PE
290 inname_len = strlen (inname);
291 lockname = xmalloc (inname_len + sizeof ".lock");
292 strcpy (lockname, inname);
293 strcpy (lockname + inname_len, ".lock");
294 for (inname_dirlen = inname_len;
529a133c
PE
295 inname_dirlen && !IS_DIRECTORY_SEP (inname[inname_dirlen - 1]);
296 inname_dirlen--)
297 continue;
e99a530f 298 tempname = xmalloc (inname_dirlen + sizeof "EXXXXXX");
237e0016 299
a4deff3c 300 while (1)
237e0016 301 {
a4deff3c
RS
302 /* Create the lock file, but not under the lock file name. */
303 /* Give up if cannot do that. */
529a133c
PE
304
305 memcpy (tempname, inname, inname_dirlen);
306 strcpy (tempname + inname_dirlen, "EXXXXXX");
307#ifdef HAVE_MKSTEMP
308 desc = mkstemp (tempname);
309#else
310 mktemp (tempname);
311 if (!*tempname)
312 desc = -1;
313 else
314 {
315 unlink (tempname);
316 desc = open (tempname, O_WRONLY | O_CREAT | O_EXCL, 0600);
317 }
318#endif
a4deff3c
RS
319 if (desc < 0)
320 {
529a133c 321 int mkstemp_errno = errno;
644a0faa
PE
322 error ("error while creating what would become the lock file",
323 0, 0);
529a133c 324 errno = mkstemp_errno;
644a0faa 325 pfatal_with_name (tempname);
a4deff3c
RS
326 }
327 close (desc);
328
329 tem = link (tempname, lockname);
097e9c90 330
e6bac876
PE
331 if (tem < 0 && errno != EEXIST)
332 pfatal_with_name (lockname);
097e9c90 333
a4deff3c
RS
334 unlink (tempname);
335 if (tem >= 0)
336 break;
337 sleep (1);
338
339 /* If lock file is five minutes old, unlock it.
340 Five minutes should be good enough to cope with crashes
341 and wedgitude, and long enough to avoid being fooled
342 by time differences between machines. */
343 if (stat (lockname, &st) >= 0)
344 {
5a9c1e26 345 time_t now = time (0);
a4deff3c
RS
346 if (st.st_ctime < now - 300)
347 unlink (lockname);
348 }
237e0016 349 }
237e0016 350
a4deff3c
RS
351 delete_lockname = lockname;
352 }
63cf923d
RS
353#endif /* not MAIL_USE_SYSTEM_LOCK */
354#endif /* not MAIL_USE_MMDF */
237e0016 355
8ca83cfd
RS
356 if (fork () == 0)
357 {
25025815 358 int lockcount = 0;
a4deff3c
RS
359 int status = 0;
360#if defined (MAIL_USE_MAILLOCK) && defined (HAVE_TOUCHLOCK)
5a9c1e26
PE
361 time_t touched_lock;
362# ifdef lint
363 touched_lock = 0;
364# endif
a4deff3c 365#endif
25025815 366
fbf4af3a 367 if (setuid (getuid ()) < 0 || setregid (-1, real_gid) < 0)
51a91f9d 368 fatal ("Failed to drop privileges", 0, 0);
8ca83cfd 369
63cf923d
RS
370#ifndef MAIL_USE_MMDF
371#ifdef MAIL_USE_SYSTEM_LOCK
8ca83cfd 372 indesc = open (inname, O_RDWR);
63cf923d 373#else /* if not MAIL_USE_SYSTEM_LOCK */
8ca83cfd 374 indesc = open (inname, O_RDONLY);
63cf923d 375#endif /* not MAIL_USE_SYSTEM_LOCK */
8ca83cfd
RS
376#else /* MAIL_USE_MMDF */
377 indesc = lk_open (inname, O_RDONLY, 0, 0, 10);
4293ba7f
RS
378#endif /* MAIL_USE_MMDF */
379
8ca83cfd
RS
380 if (indesc < 0)
381 pfatal_with_name (inname);
237e0016 382
9e3edd30
PE
383 /* Make sure the user can read the output file. */
384 umask (umask (0) & 0377);
385
8ca83cfd
RS
386 outdesc = open (outname, O_WRONLY | O_CREAT | O_EXCL, 0666);
387 if (outdesc < 0)
388 pfatal_with_name (outname);
25025815 389
fbf4af3a 390 if (setregid (-1, priv_gid) < 0)
51a91f9d
CY
391 fatal ("Failed to regain privileges", 0, 0);
392
25025815
RS
393 /* This label exists so we can retry locking
394 after a delay, if it got EAGAIN or EBUSY. */
395 retry_lock:
396
397 /* Try to lock it. */
a4deff3c
RS
398#ifdef MAIL_USE_MAILLOCK
399 if (spool_name)
400 {
401 /* The "0 - " is to make it a negative number if maillock returns
402 non-zero. */
403 status = 0 - maillock (spool_name, 1);
404#ifdef HAVE_TOUCHLOCK
405 touched_lock = time (0);
406#endif
407 lockcount = 5;
408 }
409 else
410#endif /* MAIL_USE_MAILLOCK */
411 {
63cf923d
RS
412#ifdef MAIL_USE_SYSTEM_LOCK
413#ifdef MAIL_USE_LOCKF
a4deff3c 414 status = lockf (indesc, F_LOCK, 0);
63cf923d 415#else /* not MAIL_USE_LOCKF */
7f75d5c6 416#ifdef WINDOWSNT
a4deff3c 417 status = locking (indesc, LK_RLCK, -1L);
237e0016 418#else
a4deff3c 419 status = flock (indesc, LOCK_EX);
237e0016 420#endif
63cf923d
RS
421#endif /* not MAIL_USE_LOCKF */
422#endif /* MAIL_USE_SYSTEM_LOCK */
a4deff3c 423 }
237e0016 424
25025815
RS
425 /* If it fails, retry up to 5 times
426 for certain failure codes. */
427 if (status < 0)
428 {
22626a85 429 if (++lockcount <= 5 && (errno == EAGAIN || errno == EBUSY))
25025815 430 {
22626a85
PE
431 sleep (1);
432 goto retry_lock;
25025815
RS
433 }
434
435 pfatal_with_name (inname);
436 }
177c0ea7 437
08564963 438 {
8ca83cfd
RS
439 char buf[1024];
440
441 while (1)
08564963 442 {
8ca83cfd 443 nread = read (indesc, buf, sizeof buf);
5e5b35c7
RS
444 if (nread < 0)
445 pfatal_with_name (inname);
8ca83cfd
RS
446 if (nread != write (outdesc, buf, nread))
447 {
448 int saved_errno = errno;
449 unlink (outname);
450 errno = saved_errno;
451 pfatal_with_name (outname);
452 }
453 if (nread < sizeof buf)
454 break;
a4deff3c
RS
455#if defined (MAIL_USE_MAILLOCK) && defined (HAVE_TOUCHLOCK)
456 if (spool_name)
457 {
5a9c1e26 458 time_t now = time (0);
a4deff3c
RS
459 if (now - touched_lock > 60)
460 {
461 touchlock ();
462 touched_lock = now;
463 }
464 }
465#endif /* MAIL_USE_MAILLOCK */
08564963 466 }
08564963 467 }
237e0016 468
47d7532e 469 if (fsync (outdesc) != 0 && errno != EINVAL)
8ca83cfd 470 pfatal_and_delete (outname);
237e0016 471
51a91f9d 472 /* Prevent symlink attacks truncating other users' mailboxes */
fbf4af3a 473 if (setregid (-1, real_gid) < 0)
51a91f9d
CY
474 fatal ("Failed to drop privileges", 0, 0);
475
8ca83cfd
RS
476 /* Check to make sure no errors before we zap the inbox. */
477 if (close (outdesc) != 0)
478 pfatal_and_delete (outname);
237e0016 479
63cf923d 480#ifdef MAIL_USE_SYSTEM_LOCK
fea4325c
RS
481 if (! preserve_mail)
482 {
9055082e
PE
483 if (ftruncate (indesc, 0L) != 0)
484 pfatal_with_name (inname);
b1cb2966 485 }
63cf923d 486#endif /* MAIL_USE_SYSTEM_LOCK */
4293ba7f
RS
487
488#ifdef MAIL_USE_MMDF
8ca83cfd 489 lk_close (indesc, 0, 0, 0);
4293ba7f 490#else
8ca83cfd 491 close (indesc);
4293ba7f 492#endif
237e0016 493
63cf923d 494#ifndef MAIL_USE_SYSTEM_LOCK
fea4325c
RS
495 if (! preserve_mail)
496 {
497 /* Delete the input file; if we can't, at least get rid of its
498 contents. */
e97dd183 499#ifdef MAIL_UNLINK_SPOOL
fea4325c
RS
500 /* This is generally bad to do, because it destroys the permissions
501 that were set on the file. Better to just empty the file. */
502 if (unlink (inname) < 0 && errno != ENOENT)
e97dd183 503#endif /* MAIL_UNLINK_SPOOL */
fea4325c
RS
504 creat (inname, 0600);
505 }
63cf923d 506#endif /* not MAIL_USE_SYSTEM_LOCK */
8ca83cfd 507
51a91f9d 508 /* End of mailbox truncation */
fbf4af3a 509 if (setregid (-1, priv_gid) < 0)
51a91f9d
CY
510 fatal ("Failed to regain privileges", 0, 0);
511
a4deff3c
RS
512#ifdef MAIL_USE_MAILLOCK
513 /* This has to occur in the child, i.e., in the process that
514 acquired the lock! */
515 if (spool_name)
516 mailunlock ();
517#endif
65396510 518 exit (EXIT_SUCCESS);
8ca83cfd
RS
519 }
520
27d41fb4
PE
521 wait (&wait_status);
522 if (!WIFEXITED (wait_status))
65396510 523 exit (EXIT_FAILURE);
13294f95
PE
524 else if (WEXITSTATUS (wait_status) != 0)
525 exit (WEXITSTATUS (wait_status));
8ca83cfd 526
63cf923d 527#if !defined (MAIL_USE_MMDF) && !defined (MAIL_USE_SYSTEM_LOCK)
a4deff3c
RS
528#ifdef MAIL_USE_MAILLOCK
529 if (! spool_name)
530#endif /* MAIL_USE_MAILLOCK */
531 unlink (lockname);
63cf923d 532#endif /* not MAIL_USE_MMDF and not MAIL_USE_SYSTEM_LOCK */
7f75d5c6
RS
533
534#endif /* ! DISABLE_DIRECT_ACCESS */
535
65396510 536 return EXIT_SUCCESS;
237e0016 537}
a4deff3c
RS
538
539#ifdef MAIL_USE_MAILLOCK
540/* This function uses stat to confirm that the mail directory is
541 identical to the directory of the input file, rather than just
542 string-comparing the two paths, because one or both of them might
543 be symbolic links pointing to some other directory. */
544static char *
728a982d 545mail_spool_name (char *inname)
a4deff3c
RS
546{
547 struct stat stat1, stat2;
548 char *indir, *fname;
549 int status;
550
8966b757 551 if (! (fname = strrchr (inname, '/')))
a4deff3c
RS
552 return NULL;
553
554 fname++;
555
556 if (stat (MAILDIR, &stat1) < 0)
557 return NULL;
558
e99a530f
PE
559 indir = xmalloc (fname - inname + 1);
560 memcpy (indir, inname, fname - inname);
a4deff3c
RS
561 indir[fname-inname] = '\0';
562
563
564 status = stat (indir, &stat2);
565
566 free (indir);
567
568 if (status < 0)
569 return NULL;
570
c4009c1f
RS
571 if (stat1.st_dev == stat2.st_dev
572 && stat1.st_ino == stat2.st_ino)
a4deff3c
RS
573 return fname;
574
575 return NULL;
576}
577#endif /* MAIL_USE_MAILLOCK */
237e0016
RS
578\f
579/* Print error message and exit. */
580
1725ae55 581static void
988e88ab 582fatal (const char *s1, const char *s2, const char *s3)
237e0016
RS
583{
584 if (delete_lockname)
585 unlink (delete_lockname);
a9eedf40 586 error (s1, s2, s3);
65396510 587 exit (EXIT_FAILURE);
237e0016
RS
588}
589
cc3b64e8
DL
590/* Print error message. `s1' is printf control string, `s2' and `s3'
591 are args for it or null. */
237e0016 592
1725ae55 593static void
988e88ab 594error (const char *s1, const char *s2, const char *s3)
237e0016 595{
e2f9d9af 596 fprintf (stderr, "movemail: ");
cc3b64e8
DL
597 if (s3)
598 fprintf (stderr, s1, s2, s3);
599 else if (s2)
600 fprintf (stderr, s1, s2);
601 else
3b3807f8 602 fprintf (stderr, "%s", s1);
e2f9d9af 603 fprintf (stderr, "\n");
237e0016
RS
604}
605
1725ae55 606static void
873fbd0b 607pfatal_with_name (char *name)
237e0016 608{
a9eedf40 609 fatal ("%s for %s", strerror (errno), name);
237e0016
RS
610}
611
1725ae55 612static void
873fbd0b 613pfatal_and_delete (char *name)
cfa191ff 614{
a9eedf40 615 char *s = strerror (errno);
cfa191ff 616 unlink (name);
a9eedf40 617 fatal ("%s for %s", s, name);
cfa191ff 618}
237e0016
RS
619\f
620/* This is the guts of the interface to the Post Office Protocol. */
621
622#ifdef MAIL_USE_POP
623
7f75d5c6 624#ifndef WINDOWSNT
237e0016
RS
625#include <sys/socket.h>
626#include <netinet/in.h>
627#include <netdb.h>
7f75d5c6
RS
628#else
629#undef _WINSOCKAPI_
630#include <winsock.h>
631#endif
cecf0f21 632#include <pwd.h>
d228a23c 633#include <string.h>
237e0016 634
237e0016
RS
635#define NOTOK (-1)
636#define OK 0
237e0016 637
b23b5a5b 638static char Errmsg[200]; /* POP errors, at least, can exceed
752fb472 639 the original length of 80. */
237e0016 640
476b2799 641/*
4d90eee4 642 * The full valid syntax for a POP mailbox specification for movemail
476b2799
GM
643 * is "po:username:hostname". The ":hostname" is optional; if it is
644 * omitted, the MAILHOST environment variable will be consulted. Note
645 * that by the time popmail() is called the "po:" has been stripped
646 * off of the front of the mailbox name.
647 *
648 * If the mailbox is in the form "po:username:hostname", then it is
649 * modified by this function -- the second colon is replaced by a
650 * null.
65396510
TTN
651 *
652 * Return a value suitable for passing to `exit'.
476b2799
GM
653 */
654
1725ae55 655static int
873fbd0b 656popmail (char *mailbox, char *outfile, int preserve, char *password, int reverse_order)
237e0016 657{
b1ce62a8 658 int nmsgs, nbytes;
b1ce62a8
RS
659 register int i;
660 int mbfi;
661 FILE *mbf;
b32701a7 662 popserver server;
a2997b0f 663 int start, end, increment;
476b2799
GM
664 char *user, *hostname;
665
666 user = mailbox;
8966b757 667 if ((hostname = strchr (mailbox, ':')))
476b2799 668 *hostname++ = '\0';
237e0016 669
476b2799 670 server = pop_open (hostname, user, password, POP_NO_GETPASS);
2e82e3c3 671 if (! server)
b1ce62a8 672 {
cc3b64e8 673 error ("Error connecting to POP server: %s", pop_error, 0);
65396510 674 return EXIT_FAILURE;
237e0016
RS
675 }
676
2e82e3c3 677 if (pop_stat (server, &nmsgs, &nbytes))
b1ce62a8 678 {
cc3b64e8 679 error ("Error getting message count from POP server: %s", pop_error, 0);
65396510 680 return EXIT_FAILURE;
237e0016
RS
681 }
682
b1ce62a8
RS
683 if (!nmsgs)
684 {
2e82e3c3 685 pop_close (server);
65396510 686 return EXIT_SUCCESS;
b1ce62a8
RS
687 }
688
689 mbfi = open (outfile, O_WRONLY | O_CREAT | O_EXCL, 0666);
690 if (mbfi < 0)
691 {
2e82e3c3
RS
692 pop_close (server);
693 error ("Error in open: %s, %s", strerror (errno), outfile);
65396510 694 return EXIT_FAILURE;
b1ce62a8 695 }
f0939c31
PE
696
697 if (fchown (mbfi, getuid (), -1) != 0)
698 {
699 int fchown_errno = errno;
700 struct stat st;
701 if (fstat (mbfi, &st) != 0 || st.st_uid != getuid ())
702 {
703 pop_close (server);
704 error ("Error in fchown: %s, %s", strerror (fchown_errno), outfile);
705 return EXIT_FAILURE;
706 }
707 }
b1ce62a8 708
7f75d5c6 709 if ((mbf = fdopen (mbfi, "wb")) == NULL)
b1ce62a8 710 {
2e82e3c3 711 pop_close (server);
cc3b64e8 712 error ("Error in fdopen: %s", strerror (errno), 0);
2e82e3c3
RS
713 close (mbfi);
714 unlink (outfile);
65396510 715 return EXIT_FAILURE;
b1ce62a8
RS
716 }
717
a2997b0f
KH
718 if (reverse_order)
719 {
720 start = nmsgs;
721 end = 1;
722 increment = -1;
723 }
724 else
725 {
726 start = 1;
727 end = nmsgs;
728 increment = 1;
729 }
730
731 for (i = start; i * increment <= end * increment; i += increment)
b1ce62a8
RS
732 {
733 mbx_delimit_begin (mbf);
ff804ff5 734 if (pop_retr (server, i, mbf) != OK)
b1ce62a8 735 {
17a60964 736 error ("%s", Errmsg, 0);
b1ce62a8 737 close (mbfi);
65396510 738 return EXIT_FAILURE;
237e0016 739 }
b1ce62a8
RS
740 mbx_delimit_end (mbf);
741 fflush (mbf);
2e82e3c3
RS
742 if (ferror (mbf))
743 {
cc3b64e8 744 error ("Error in fflush: %s", strerror (errno), 0);
2e82e3c3
RS
745 pop_close (server);
746 close (mbfi);
65396510 747 return EXIT_FAILURE;
2e82e3c3 748 }
237e0016
RS
749 }
750
47d7532e 751 if (fsync (mbfi) != 0 && errno != EINVAL)
cfa191ff 752 {
08fa58c9 753 error ("Error in fsync: %s", strerror (errno), 0);
47d7532e 754 close (mbfi);
65396510 755 return EXIT_FAILURE;
cfa191ff
RS
756 }
757
47d7532e 758 if (close (mbfi) != 0)
cfa191ff 759 {
cc3b64e8 760 error ("Error in close: %s", strerror (errno), 0);
65396510 761 return EXIT_FAILURE;
cfa191ff
RS
762 }
763
fea4325c
RS
764 if (! preserve)
765 for (i = 1; i <= nmsgs; i++)
766 {
767 if (pop_delete (server, i))
768 {
cc3b64e8 769 error ("Error from POP server: %s", pop_error, 0);
fea4325c 770 pop_close (server);
65396510 771 return EXIT_FAILURE;
fea4325c
RS
772 }
773 }
237e0016 774
2e82e3c3 775 if (pop_quit (server))
b1ce62a8 776 {
cc3b64e8 777 error ("Error from POP server: %s", pop_error, 0);
65396510 778 return EXIT_FAILURE;
237e0016 779 }
177c0ea7 780
65396510 781 return EXIT_SUCCESS;
237e0016
RS
782}
783
1725ae55 784static int
873fbd0b 785pop_retr (popserver server, int msgno, FILE *arg)
237e0016 786{
2e82e3c3
RS
787 char *line;
788 int ret;
237e0016 789
2e82e3c3 790 if (pop_retrieve_first (server, msgno, &line))
b1ce62a8 791 {
e99a530f 792 snprintf (Errmsg, sizeof Errmsg, "Error from POP server: %s", pop_error);
2e82e3c3 793 return (NOTOK);
237e0016
RS
794 }
795
d89d0243 796 while ((ret = pop_retrieve_next (server, &line)) >= 0)
b1ce62a8 797 {
2e82e3c3
RS
798 if (! line)
799 break;
800
d89d0243 801 if (mbx_write (line, ret, arg) != OK)
b1ce62a8 802 {
2e82e3c3
RS
803 strcpy (Errmsg, strerror (errno));
804 pop_close (server);
805 return (NOTOK);
237e0016
RS
806 }
807 }
237e0016 808
2e82e3c3 809 if (ret)
b1ce62a8 810 {
e99a530f 811 snprintf (Errmsg, sizeof Errmsg, "Error from POP server: %s", pop_error);
2e82e3c3 812 return (NOTOK);
237e0016
RS
813 }
814
2e82e3c3 815 return (OK);
237e0016
RS
816}
817
1725ae55 818static int
873fbd0b 819mbx_write (char *line, int len, FILE *mbf)
237e0016 820{
d04f5031 821#ifdef MOVEMAIL_QUOTE_POP_FROM_LINES
5ecec6a7
PE
822 /* Do this as a macro instead of using strcmp to save on execution time. */
823 # define IS_FROM_LINE(a) ((a[0] == 'F') \
824 && (a[1] == 'r') \
825 && (a[2] == 'o') \
826 && (a[3] == 'm') \
827 && (a[4] == ' '))
2e82e3c3
RS
828 if (IS_FROM_LINE (line))
829 {
830 if (fputc ('>', mbf) == EOF)
831 return (NOTOK);
832 }
d04f5031
PE
833#endif
834 if (line[0] == '\037')
835 {
836 if (fputs ("^_", mbf) == EOF)
837 return (NOTOK);
838 line++;
839 len--;
840 }
177c0ea7 841 if (fwrite (line, 1, len, mbf) != len)
2e82e3c3
RS
842 return (NOTOK);
843 if (fputc (0x0a, mbf) == EOF)
844 return (NOTOK);
845 return (OK);
237e0016
RS
846}
847
1725ae55 848static int
873fbd0b 849mbx_delimit_begin (FILE *mbf)
237e0016 850{
d228a23c
GM
851 time_t now;
852 struct tm *ltime;
853 char fromline[40] = "From movemail ";
854
855 now = time (NULL);
856 ltime = localtime (&now);
857
858 strcat (fromline, asctime (ltime));
859
860 if (fputs (fromline, mbf) == EOF)
2e82e3c3
RS
861 return (NOTOK);
862 return (OK);
237e0016
RS
863}
864
1725ae55 865static int
873fbd0b 866mbx_delimit_end (FILE *mbf)
237e0016 867{
3f32be22 868 if (putc ('\n', mbf) == EOF)
2e82e3c3
RS
869 return (NOTOK);
870 return (OK);
237e0016
RS
871}
872
873#endif /* MAIL_USE_POP */