-rw-r--r-- | src/eyefiservice.cc | 29 |
1 files changed, 10 insertions, 19 deletions
diff --git a/src/eyefiservice.cc b/src/eyefiservice.cc index 0bf26c4..4ca2777 100644 --- a/src/eyefiservice.cc +++ b/src/eyefiservice.cc | |||
@@ -1,229 +1,220 @@ | |||
1 | #include <cassert> | 1 | #include <cassert> |
2 | #include <iostream> | 2 | #include <iostream> |
3 | #include <fstream> | 3 | #include <fstream> |
4 | #include <stdexcept> | 4 | #include <stdexcept> |
5 | #include <iterator> | 5 | #include <iterator> |
6 | #include <syslog.h> | 6 | #include <syslog.h> |
7 | #include <sys/wait.h> | 7 | #include <sys/wait.h> |
8 | #include <autosprintf.h> | 8 | #include <autosprintf.h> |
9 | #include "eyekinfig.h" | 9 | #include "eyekinfig.h" |
10 | #include "eyetil.h" | 10 | #include "eyetil.h" |
11 | #include "soapeyefiService.h" | 11 | #include "soapeyefiService.h" |
12 | 12 | ||
13 | static binary_t session_nonce; | 13 | static binary_t session_nonce; |
14 | 14 | ||
15 | static bool detached_child() { | 15 | static bool detached_child() { |
16 | pid_t p = fork(); | 16 | pid_t p = fork(); |
17 | if(p<0) throw std::runtime_error("failed to fork()"); | 17 | if(p<0) { |
18 | syslog(LOG_ERR,"Failed to fork away for hook execution"); | ||
19 | _exit(-1); | ||
20 | } | ||
18 | if(!p) { | 21 | if(!p) { |
19 | p = fork(); | 22 | setsid(); |
20 | if(p<0) { | 23 | for(int i=getdtablesize();i>=0;--i) close(i); |
21 | syslog(LOG_ERR,"Failed to re-fork child process"); | 24 | int i=open("/dev/null",O_RDWR); assert(i==0); |
22 | _exit(-1); | 25 | i = dup(i); assert(i==1); |
23 | } | 26 | i = dup(i); assert(i==2); |
24 | if(!p) { | 27 | return true; |
25 | setsid(); | ||
26 | for(int i=getdtablesize();i>=0;--i) close(i); | ||
27 | int i=open("/dev/null",O_RDWR); assert(i==0); | ||
28 | i = dup(i); assert(i==1); | ||
29 | i = dup(i); assert(i==2); | ||
30 | return true; | ||
31 | } | ||
32 | _exit(0); | ||
33 | } | 28 | } |
34 | int rc; | ||
35 | if(waitpid(p,&rc,0)<0) throw std::runtime_error("failed to waitpid()"); | ||
36 | if(!WIFEXITED(rc)) throw std::runtime_error("error in forked process"); | ||
37 | if(WEXITSTATUS(rc)) throw std::runtime_error("forked process signalled error"); | ||
38 | return false; | 29 | return false; |
39 | } | 30 | } |
40 | 31 | ||
41 | int eyefiService::StartSession( | 32 | int eyefiService::StartSession( |
42 | std::string macaddress,std::string cnonce, | 33 | std::string macaddress,std::string cnonce, |
43 | int transfermode,long transfermodetimestamp, | 34 | int transfermode,long transfermodetimestamp, |
44 | struct rns__StartSessionResponse &r ) try { | 35 | struct rns__StartSessionResponse &r ) try { |
45 | #ifndef NDEBUG | 36 | #ifndef NDEBUG |
46 | syslog(LOG_DEBUG, | 37 | syslog(LOG_DEBUG, |
47 | "StartSession request from %s with cnonce=%s, transfermode=%d, transfermodetimestamp=%ld", | 38 | "StartSession request from %s with cnonce=%s, transfermode=%d, transfermodetimestamp=%ld", |
48 | macaddress.c_str(), cnonce.c_str(), transfermode, transfermodetimestamp ); | 39 | macaddress.c_str(), cnonce.c_str(), transfermode, transfermodetimestamp ); |
49 | #endif | 40 | #endif |
50 | eyekinfig_t eyekinfig(macaddress); | 41 | eyekinfig_t eyekinfig(macaddress); |
51 | r.credential = binary_t(macaddress+cnonce+eyekinfig.get_upload_key()).md5().hex(); | 42 | r.credential = binary_t(macaddress+cnonce+eyekinfig.get_upload_key()).md5().hex(); |
52 | 43 | ||
53 | r.snonce = session_nonce.make_nonce().hex(); | 44 | r.snonce = session_nonce.make_nonce().hex(); |
54 | r.transfermode=transfermode; | 45 | r.transfermode=transfermode; |
55 | r.transfermodetimestamp=transfermodetimestamp; | 46 | r.transfermodetimestamp=transfermodetimestamp; |
56 | r.upsyncallowed=false; | 47 | r.upsyncallowed=false; |
57 | 48 | ||
58 | std::string cmd = eyekinfig.get_on_start_session(); | 49 | std::string cmd = eyekinfig.get_on_start_session(); |
59 | if(!cmd.empty()) { | 50 | if(!cmd.empty()) { |
60 | if(detached_child()) { | 51 | if(detached_child()) { |
61 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); | 52 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); |
62 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODE=%d",transfermode) ); | 53 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODE=%d",transfermode) ); |
63 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODETIMESTAMP=%ld",transfermodetimestamp) ); | 54 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODETIMESTAMP=%ld",transfermodetimestamp) ); |
64 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; | 55 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; |
65 | execv("/bin/sh",argv); | 56 | execv("/bin/sh",argv); |
66 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); | 57 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); |
67 | _exit(-1); | 58 | _exit(-1); |
68 | } | 59 | } |
69 | } | 60 | } |
70 | return SOAP_OK; | 61 | return SOAP_OK; |
71 | }catch(std::runtime_error& e) { | 62 | }catch(std::runtime_error& e) { |
72 | syslog(LOG_ERR,"error while processing StartSession: %s",e.what()); | 63 | syslog(LOG_ERR,"error while processing StartSession: %s",e.what()); |
73 | } | 64 | } |
74 | 65 | ||
75 | int eyefiService::GetPhotoStatus( | 66 | int eyefiService::GetPhotoStatus( |
76 | std::string credential, std::string macaddress, | 67 | std::string credential, std::string macaddress, |
77 | std::string filename, long filesize, std::string filesignature, | 68 | std::string filename, long filesize, std::string filesignature, |
78 | int flags, | 69 | int flags, |
79 | struct rns__GetPhotoStatusResponse &r ) { | 70 | struct rns__GetPhotoStatusResponse &r ) { |
80 | #ifndef NDEBUG | 71 | #ifndef NDEBUG |
81 | syslog(LOG_DEBUG, | 72 | syslog(LOG_DEBUG, |
82 | "GetPhotoStatus request from %s with credential=%s, filename=%s, filesize=%ld, filesignature=%s, flags=%d; session nonce=%s", | 73 | "GetPhotoStatus request from %s with credential=%s, filename=%s, filesize=%ld, filesignature=%s, flags=%d; session nonce=%s", |
83 | macaddress.c_str(), credential.c_str(), filename.c_str(), filesize, filesignature.c_str(), flags, | 74 | macaddress.c_str(), credential.c_str(), filename.c_str(), filesize, filesignature.c_str(), flags, |
84 | session_nonce.hex().c_str() ); | 75 | session_nonce.hex().c_str() ); |
85 | #endif | 76 | #endif |
86 | 77 | ||
87 | std::string computed_credential = binary_t(macaddress+eyekinfig_t(macaddress).get_upload_key()+session_nonce.hex()).md5().hex(); | 78 | std::string computed_credential = binary_t(macaddress+eyekinfig_t(macaddress).get_upload_key()+session_nonce.hex()).md5().hex(); |
88 | 79 | ||
89 | #ifndef NDEBUG | 80 | #ifndef NDEBUG |
90 | syslog(LOG_DEBUG, " computed credential=%s", computed_credential.c_str()); | 81 | syslog(LOG_DEBUG, " computed credential=%s", computed_credential.c_str()); |
91 | #endif | 82 | #endif |
92 | 83 | ||
93 | if (credential != computed_credential) throw std::runtime_error("card authentication failed"); | 84 | if (credential != computed_credential) throw std::runtime_error("card authentication failed"); |
94 | 85 | ||
95 | r.fileid = 1; r.offset = 0; | 86 | r.fileid = 1; r.offset = 0; |
96 | return SOAP_OK; | 87 | return SOAP_OK; |
97 | } | 88 | } |
98 | 89 | ||
99 | int eyefiService::MarkLastPhotoInRoll( | 90 | int eyefiService::MarkLastPhotoInRoll( |
100 | std::string macaddress, int mergedelta, | 91 | std::string macaddress, int mergedelta, |
101 | struct rns__MarkLastPhotoInRollResponse &r ) { | 92 | struct rns__MarkLastPhotoInRollResponse &r ) { |
102 | #ifndef NDEBUG | 93 | #ifndef NDEBUG |
103 | syslog(LOG_DEBUG, | 94 | syslog(LOG_DEBUG, |
104 | "MarkLastPhotoInRoll request from %s with mergedelta=%d", | 95 | "MarkLastPhotoInRoll request from %s with mergedelta=%d", |
105 | macaddress.c_str(), mergedelta ); | 96 | macaddress.c_str(), mergedelta ); |
106 | #endif | 97 | #endif |
107 | std::string cmd = eyekinfig_t(macaddress).get_on_mark_last_photo_in_roll(); | 98 | std::string cmd = eyekinfig_t(macaddress).get_on_mark_last_photo_in_roll(); |
108 | if(!cmd.empty()) { | 99 | if(!cmd.empty()) { |
109 | if(detached_child()) { | 100 | if(detached_child()) { |
110 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); | 101 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); |
111 | putenv( gnu::autosprintf("EYEFI_MERGEDELTA=%d",mergedelta) ); | 102 | putenv( gnu::autosprintf("EYEFI_MERGEDELTA=%d",mergedelta) ); |
112 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; | 103 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; |
113 | execv("/bin/sh",argv); | 104 | execv("/bin/sh",argv); |
114 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); | 105 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); |
115 | _exit(-1); | 106 | _exit(-1); |
116 | } | 107 | } |
117 | } | 108 | } |
118 | keep_alive = 0; | 109 | keep_alive = 0; |
119 | return SOAP_OK; | 110 | return SOAP_OK; |
120 | } | 111 | } |
121 | 112 | ||
122 | int eyefiService::UploadPhoto( | 113 | int eyefiService::UploadPhoto( |
123 | int fileid, std::string macaddress, | 114 | int fileid, std::string macaddress, |
124 | std::string filename, long filesize, std::string filesignature, | 115 | std::string filename, long filesize, std::string filesignature, |
125 | std::string encryption, int flags, | 116 | std::string encryption, int flags, |
126 | struct rns__UploadPhotoResponse& r ) { | 117 | struct rns__UploadPhotoResponse& r ) { |
127 | #ifndef NDEBUG | 118 | #ifndef NDEBUG |
128 | syslog(LOG_DEBUG, | 119 | syslog(LOG_DEBUG, |
129 | "UploadPhoto request from %s with fileid=%d, filename=%s, filesize=%ld," | 120 | "UploadPhoto request from %s with fileid=%d, filename=%s, filesize=%ld," |
130 | " filesignature=%s, encryption=%s, flags=%04X", | 121 | " filesignature=%s, encryption=%s, flags=%04X", |
131 | macaddress.c_str(), fileid, filename.c_str(), filesize, | 122 | macaddress.c_str(), fileid, filename.c_str(), filesize, |
132 | filesignature.c_str(), encryption.c_str(), flags ); | 123 | filesignature.c_str(), encryption.c_str(), flags ); |
133 | #endif | 124 | #endif |
134 | eyekinfig_t eyekinfig(macaddress); | 125 | eyekinfig_t eyekinfig(macaddress); |
135 | 126 | ||
136 | umask(eyekinfig.get_umask()); | 127 | umask(eyekinfig.get_umask()); |
137 | 128 | ||
138 | std::string td = eyekinfig.get_targetdir(); | 129 | std::string td = eyekinfig.get_targetdir(); |
139 | tmpdir_t indir(td+"/.incoming.XXXXXX"); | 130 | tmpdir_t indir(td+"/.incoming.XXXXXX"); |
140 | 131 | ||
141 | std::string jf,lf; | 132 | std::string jf,lf; |
142 | binary_t digest, idigest; | 133 | binary_t digest, idigest; |
143 | 134 | ||
144 | for(soap_multipart::iterator i=mime.begin(),ie=mime.end();i!=ie;++i) { | 135 | for(soap_multipart::iterator i=mime.begin(),ie=mime.end();i!=ie;++i) { |
145 | #ifndef NDEBUG | 136 | #ifndef NDEBUG |
146 | syslog(LOG_DEBUG, | 137 | syslog(LOG_DEBUG, |
147 | " MIME attachment with id=%s, type=%s, size=%ld", | 138 | " MIME attachment with id=%s, type=%s, size=%ld", |
148 | (*i).id, (*i).type, (long)(*i).size ); | 139 | (*i).id, (*i).type, (long)(*i).size ); |
149 | #endif | 140 | #endif |
150 | 141 | ||
151 | if((*i).id && !strcmp((*i).id,"INTEGRITYDIGEST")) { | 142 | if((*i).id && !strcmp((*i).id,"INTEGRITYDIGEST")) { |
152 | std::string idigestr((*i).ptr,(*i).size); | 143 | std::string idigestr((*i).ptr,(*i).size); |
153 | #ifndef NDEBUG | 144 | #ifndef NDEBUG |
154 | syslog(LOG_DEBUG, " INTEGRITYDIGEST=%s", idigestr.c_str()); | 145 | syslog(LOG_DEBUG, " INTEGRITYDIGEST=%s", idigestr.c_str()); |
155 | #endif | 146 | #endif |
156 | idigest.from_hex(idigestr); | 147 | idigest.from_hex(idigestr); |
157 | } | 148 | } |
158 | if( (*i).id && !strcmp((*i).id,"FILENAME") ) { | 149 | if( (*i).id && !strcmp((*i).id,"FILENAME") ) { |
159 | assert( (*i).type && !strcmp((*i).type,"application/x-tar") ); | 150 | assert( (*i).type && !strcmp((*i).type,"application/x-tar") ); |
160 | #ifdef III_SAVE_TARS | 151 | #ifdef III_SAVE_TARS |
161 | std::string tarfile = indir.get_file(filename); | 152 | std::string tarfile = indir.get_file(filename); |
162 | { | 153 | { |
163 | std::ofstream(tarfile.c_str(),std::ios::out|std::ios::binary).write((*i).ptr,(*i).size); | 154 | std::ofstream(tarfile.c_str(),std::ios::out|std::ios::binary).write((*i).ptr,(*i).size); |
164 | } | 155 | } |
165 | #endif | 156 | #endif |
166 | 157 | ||
167 | if(!jf.empty()) throw std::runtime_error("already seen tarball"); | 158 | if(!jf.empty()) throw std::runtime_error("already seen tarball"); |
168 | if(!digest.empty()) throw std::runtime_error("already have integrity digest"); | 159 | if(!digest.empty()) throw std::runtime_error("already have integrity digest"); |
169 | digest = integrity_digest((*i).ptr,(*i).size,eyekinfig.get_upload_key()); | 160 | digest = integrity_digest((*i).ptr,(*i).size,eyekinfig.get_upload_key()); |
170 | #ifndef NDEBUG | 161 | #ifndef NDEBUG |
171 | syslog(LOG_DEBUG," computed integrity digest=%s", digest.hex().c_str()); | 162 | syslog(LOG_DEBUG," computed integrity digest=%s", digest.hex().c_str()); |
172 | #endif | 163 | #endif |
173 | 164 | ||
174 | tarchive_t a((*i).ptr,(*i).size); | 165 | tarchive_t a((*i).ptr,(*i).size); |
175 | while(a.read_next_header()) { | 166 | while(a.read_next_header()) { |
176 | std::string f = indir.get_file(a.entry_pathname()); | 167 | std::string f = indir.get_file(a.entry_pathname()); |
177 | std::string::size_type fl = f.length(); | 168 | std::string::size_type fl = f.length(); |
178 | if(fl<4) continue; | 169 | if(fl<4) continue; |
179 | const char *s = f.c_str()+fl-4; | 170 | const char *s = f.c_str()+fl-4; |
180 | if(!strcasecmp(s,".JPG")) | 171 | if(!strcasecmp(s,".JPG")) |
181 | jf = f; | 172 | jf = f; |
182 | else if(!strcasecmp(s,".log")) | 173 | else if(!strcasecmp(s,".log")) |
183 | lf = f; | 174 | lf = f; |
184 | else continue; | 175 | else continue; |
185 | int fd=open(f.c_str(),O_CREAT|O_WRONLY,0666); | 176 | int fd=open(f.c_str(),O_CREAT|O_WRONLY,0666); |
186 | if(fd<0) | 177 | if(fd<0) |
187 | throw std::runtime_error(gnu::autosprintf("failed to create output file '%s'",f.c_str())); | 178 | throw std::runtime_error(gnu::autosprintf("failed to create output file '%s'",f.c_str())); |
188 | if(!a.read_data_into_fd(fd)) | 179 | if(!a.read_data_into_fd(fd)) |
189 | throw std::runtime_error(gnu::autosprintf("failed to untar file into '%s'",f.c_str())); | 180 | throw std::runtime_error(gnu::autosprintf("failed to untar file into '%s'",f.c_str())); |
190 | close(fd); | 181 | close(fd); |
191 | } | 182 | } |
192 | } | 183 | } |
193 | } | 184 | } |
194 | 185 | ||
195 | if(jf.empty()) throw std::runtime_error("haven't seen jpeg file"); | 186 | if(jf.empty()) throw std::runtime_error("haven't seen jpeg file"); |
196 | if(digest!=idigest) throw std::runtime_error("integrity digest verification failed"); | 187 | if(digest!=idigest) throw std::runtime_error("integrity digest verification failed"); |
197 | 188 | ||
198 | std::string::size_type ls = jf.rfind('/'); | 189 | std::string::size_type ls = jf.rfind('/'); |
199 | // XXX: actually, lack of '/' signifies error here | 190 | // XXX: actually, lack of '/' signifies error here |
200 | std::string jbn = (ls==std::string::npos)?jf:jf.substr(ls+1); | 191 | std::string jbn = (ls==std::string::npos)?jf:jf.substr(ls+1); |
201 | ls = lf.rfind('/'); | 192 | ls = lf.rfind('/'); |
202 | std::string lbn = (ls==std::string::npos)?lf:lf.substr(ls+1); | 193 | std::string lbn = (ls==std::string::npos)?lf:lf.substr(ls+1); |
203 | std::string tjf,tlf; | 194 | std::string tjf,tlf; |
204 | bool success = false; | 195 | bool success = false; |
205 | for(int i=0;i<32767;++i) { | 196 | for(int i=0;i<32767;++i) { |
206 | const char *fmt = i ? "%1$s/(%3$05d)%2$s" : "%1$s/%2$s"; | 197 | const char *fmt = i ? "%1$s/(%3$05d)%2$s" : "%1$s/%2$s"; |
207 | tjf = (const char*)gnu::autosprintf(fmt,td.c_str(),jbn.c_str(),i); | 198 | tjf = (const char*)gnu::autosprintf(fmt,td.c_str(),jbn.c_str(),i); |
208 | if(!lf.empty()) tlf = (const char*)gnu::autosprintf(fmt,td.c_str(),lbn.c_str(),i); | 199 | if(!lf.empty()) tlf = (const char*)gnu::autosprintf(fmt,td.c_str(),lbn.c_str(),i); |
209 | if( (!link(jf.c_str(),tjf.c_str())) && (lf.empty()) || !link(lf.c_str(),tlf.c_str()) ) { | 200 | if( (!link(jf.c_str(),tjf.c_str())) && (lf.empty()) || !link(lf.c_str(),tlf.c_str()) ) { |
210 | unlink(jf.c_str()); | 201 | unlink(jf.c_str()); |
211 | if(!lf.empty()) unlink(lf.c_str()); | 202 | if(!lf.empty()) unlink(lf.c_str()); |
212 | success=true; | 203 | success=true; |
213 | break; | 204 | break; |
214 | } | 205 | } |
215 | } | 206 | } |
216 | std::string cmd = eyekinfig.get_on_upload_photo(); | 207 | std::string cmd = eyekinfig.get_on_upload_photo(); |
217 | if(success && !cmd.empty()) { | 208 | if(success && !cmd.empty()) { |
218 | if(detached_child()) { | 209 | if(detached_child()) { |
219 | putenv( gnu::autosprintf("EYEFI_UPLOADED_ORIG=%s",jbn.c_str()) ); | 210 | putenv( gnu::autosprintf("EYEFI_UPLOADED_ORIG=%s",jbn.c_str()) ); |
220 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); | 211 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); |
221 | putenv( gnu::autosprintf("EYEFI_UPLOADED=%s",tjf.c_str()) ); | 212 | putenv( gnu::autosprintf("EYEFI_UPLOADED=%s",tjf.c_str()) ); |
222 | if(!lf.empty()) putenv( gnu::autosprintf("EYEFI_LOG=%s",tlf.c_str()) ); | 213 | if(!lf.empty()) putenv( gnu::autosprintf("EYEFI_LOG=%s",tlf.c_str()) ); |
223 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; | 214 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; |
224 | execv("/bin/sh",argv); | 215 | execv("/bin/sh",argv); |
225 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); | 216 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); |
226 | _exit(-1); | 217 | _exit(-1); |
227 | } | 218 | } |
228 | } | 219 | } |
229 | 220 | ||