1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
|
/*
** listener.c -- a datagram sockets "server" demo
*/
#include "common.h"
int main(int argc, char **argv, char **envp) {
int fd;
int numbytes;
struct sockaddr_storage their_addr;
char buf[MAXBUFLEN];
socklen_t addr_len;
/* setup socket, parse cmd line */
{
struct sockaddr_in6 ba;
struct ipv6_mreq ga;
if (argc > 2) {
fprintf(stderr, "usage: %s [interface]\n", argv[0]);
exit(1);
}
if ((fd = socket(AF_INET6, SOCK_DGRAM, IPPROTO_UDP)) == -1) {
perror("listener: socket");
exit(1);
}
if (argc == 2) {
inet_pton(AF_INET6, "ff02::1", &(ba.sin6_addr));
if ((ba.sin6_scope_id = if_nametoindex(argv[1])) == 0) {
fprintf(stderr, "interface not found\n");
exit(1);
}
}else{
ba.sin6_addr = in6addr_any;
ba.sin6_scope_id = 0;
}
ba.sin6_family = AF_INET6;
ba.sin6_port = htons(SERVERPORT);
ba.sin6_flowinfo = 0;
if (bind(fd, (struct sockaddr*) &ba, sizeof ba) != 0) {
perror("listener: bind");
exit(1);
}
}
/* daemonize */
#ifndef DEBUG
switch (fork()) {
case 0:
setsid();
umask(0);
break;
case -1:
perror("fork");
exit(1);
default:
exit(0);
}
#endif
/* receive loop */
addr_len = sizeof their_addr;
while ((numbytes = recvfrom(fd, buf, MAXBUFLEN-1 , 0,
(struct sockaddr *) &their_addr, &addr_len)) != -1) {
/* decode packet & launch handler */
buf[numbytes] = '\0';
char *task = buf,
*cl_argv[3] = {task, (strlen(task)<numbytes) ? (buf+strlen(task)+1) : NULL, NULL };
if (task[0] == '/' || strstr(task, "..")) {
fprintf(stderr, "payload tried directory traversal\n");
continue;
}
switch (fork()) {
case 0:
close(fd); // close socket handler, leave std io
execve(task, cl_argv, envp);
perror("exec");
exit(1);
case -1:
perror("fork");
exit(1);
default:
wait();
}
}
perror("recvfrom");
return 1;
}
|
