-rw-r--r-- | src/eyefiservice.cc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/eyefiservice.cc b/src/eyefiservice.cc index 5cbc396..fb2a90d 100644 --- a/src/eyefiservice.cc +++ b/src/eyefiservice.cc | |||
@@ -1,215 +1,217 @@ | |||
1 | #include <cassert> | 1 | #include <cassert> |
2 | #include <iostream> | 2 | #include <iostream> |
3 | #include <fstream> | 3 | #include <fstream> |
4 | #include <stdexcept> | 4 | #include <stdexcept> |
5 | #include <iterator> | 5 | #include <iterator> |
6 | #include <syslog.h> | 6 | #include <syslog.h> |
7 | #include <sys/wait.h> | 7 | #include <sys/wait.h> |
8 | #include <autosprintf.h> | 8 | #include <autosprintf.h> |
9 | #include <openssl/rand.h> | 9 | #include <openssl/rand.h> |
10 | #include "eyekinfig.h" | 10 | #include "eyekinfig.h" |
11 | #include "eyetil.h" | 11 | #include "eyetil.h" |
12 | #include "soapeyefiService.h" | 12 | #include "soapeyefiService.h" |
13 | 13 | ||
14 | static binary_t session_nonce; | 14 | static binary_t session_nonce; |
15 | 15 | ||
16 | static bool detached_child() { | 16 | static bool detached_child() { |
17 | pid_t p = fork(); | 17 | pid_t p = fork(); |
18 | if(p<0) throw std::runtime_error("failed to fork()"); | 18 | if(p<0) throw std::runtime_error("failed to fork()"); |
19 | if(!p) { | 19 | if(!p) { |
20 | p = fork(); | 20 | p = fork(); |
21 | if(p<0) { | 21 | if(p<0) { |
22 | syslog(LOG_ERR,"Failed to re-fork child process"); | 22 | syslog(LOG_ERR,"Failed to re-fork child process"); |
23 | _exit(-1); | 23 | _exit(-1); |
24 | } | 24 | } |
25 | if(!p) { | 25 | if(!p) { |
26 | setsid(); | 26 | setsid(); |
27 | for(int i=getdtablesize();i>=0;--i) close(i); | 27 | for(int i=getdtablesize();i>=0;--i) close(i); |
28 | int i=open("/dev/null",O_RDWR); assert(i==0); | 28 | int i=open("/dev/null",O_RDWR); assert(i==0); |
29 | i = dup(i); assert(i==1); | 29 | i = dup(i); assert(i==1); |
30 | i = dup(i); assert(i==2); | 30 | i = dup(i); assert(i==2); |
31 | return true; | 31 | return true; |
32 | } | 32 | } |
33 | _exit(0); | 33 | _exit(0); |
34 | } | 34 | } |
35 | int rc; | 35 | int rc; |
36 | if(waitpid(p,&rc,0)<0) throw std::runtime_error("failed to waitpid()"); | 36 | if(waitpid(p,&rc,0)<0) throw std::runtime_error("failed to waitpid()"); |
37 | if(!WIFEXITED(rc)) throw std::runtime_error("error in forked process"); | 37 | if(!WIFEXITED(rc)) throw std::runtime_error("error in forked process"); |
38 | if(WEXITSTATUS(rc)) throw std::runtime_error("forked process signalled error"); | 38 | if(WEXITSTATUS(rc)) throw std::runtime_error("forked process signalled error"); |
39 | return false; | 39 | return false; |
40 | } | 40 | } |
41 | 41 | ||
42 | int eyefiService::StartSession( | 42 | int eyefiService::StartSession( |
43 | std::string macaddress,std::string cnonce, | 43 | std::string macaddress,std::string cnonce, |
44 | int transfermode,long transfermodetimestamp, | 44 | int transfermode,long transfermodetimestamp, |
45 | struct rns__StartSessionResponse &r ) { | 45 | struct rns__StartSessionResponse &r ) try { |
46 | #ifndef NDEBUG | 46 | #ifndef NDEBUG |
47 | syslog(LOG_DEBUG, | 47 | syslog(LOG_DEBUG, |
48 | "StartSession request from %s with cnonce=%s, transfermode=%d, transfermodetimestamp=%ld", | 48 | "StartSession request from %s with cnonce=%s, transfermode=%d, transfermodetimestamp=%ld", |
49 | macaddress.c_str(), cnonce.c_str(), transfermode, transfermodetimestamp ); | 49 | macaddress.c_str(), cnonce.c_str(), transfermode, transfermodetimestamp ); |
50 | #endif | 50 | #endif |
51 | r.credential = binary_t(macaddress+cnonce+eyekinfig_t(macaddress).get_upload_key()).md5().hex(); | 51 | r.credential = binary_t(macaddress+cnonce+eyekinfig_t(macaddress).get_upload_key()).md5().hex(); |
52 | 52 | ||
53 | r.snonce = session_nonce.make_nonce().hex(); | 53 | r.snonce = session_nonce.make_nonce().hex(); |
54 | r.transfermode=transfermode; | 54 | r.transfermode=transfermode; |
55 | r.transfermodetimestamp=transfermodetimestamp; | 55 | r.transfermodetimestamp=transfermodetimestamp; |
56 | r.upsyncallowed=false; | 56 | r.upsyncallowed=false; |
57 | 57 | ||
58 | std::string cmd = eyekinfig_t(macaddress).get_on_start_session(); | 58 | std::string cmd = eyekinfig_t(macaddress).get_on_start_session(); |
59 | if(!cmd.empty()) { | 59 | if(!cmd.empty()) { |
60 | if(detached_child()) { | 60 | if(detached_child()) { |
61 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); | 61 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); |
62 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODE=%d",transfermode) ); | 62 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODE=%d",transfermode) ); |
63 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODETIMESTAMP=%ld",transfermodetimestamp) ); | 63 | putenv( gnu::autosprintf("EYEFI_TRANSFERMODETIMESTAMP=%ld",transfermodetimestamp) ); |
64 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; | 64 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; |
65 | execv("/bin/sh",argv); | 65 | execv("/bin/sh",argv); |
66 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); | 66 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); |
67 | _exit(-1); | 67 | _exit(-1); |
68 | } | 68 | } |
69 | } | 69 | } |
70 | return SOAP_OK; | 70 | return SOAP_OK; |
71 | }catch(std::runtime_error& e) { | ||
72 | syslog(LOG_ERR,"error while processing StartSession: %s",e.what()); | ||
71 | } | 73 | } |
72 | 74 | ||
73 | int eyefiService::GetPhotoStatus( | 75 | int eyefiService::GetPhotoStatus( |
74 | std::string credential, std::string macaddress, | 76 | std::string credential, std::string macaddress, |
75 | std::string filename, long filesize, std::string filesignature, | 77 | std::string filename, long filesize, std::string filesignature, |
76 | int flags, | 78 | int flags, |
77 | struct rns__GetPhotoStatusResponse &r ) { | 79 | struct rns__GetPhotoStatusResponse &r ) { |
78 | #ifndef NDEBUG | 80 | #ifndef NDEBUG |
79 | syslog(LOG_DEBUG, | 81 | syslog(LOG_DEBUG, |
80 | "GetPhotoStatus request from %s with credential=%s, filename=%s, filesize=%ld, filesignature=%s, flags=%d; session nonce=%s", | 82 | "GetPhotoStatus request from %s with credential=%s, filename=%s, filesize=%ld, filesignature=%s, flags=%d; session nonce=%s", |
81 | macaddress.c_str(), credential.c_str(), filename.c_str(), filesize, filesignature.c_str(), flags, | 83 | macaddress.c_str(), credential.c_str(), filename.c_str(), filesize, filesignature.c_str(), flags, |
82 | session_nonce.hex().c_str() ); | 84 | session_nonce.hex().c_str() ); |
83 | #endif | 85 | #endif |
84 | 86 | ||
85 | std::string computed_credential = binary_t(macaddress+eyekinfig_t(macaddress).get_upload_key()+session_nonce.hex()).md5().hex(); | 87 | std::string computed_credential = binary_t(macaddress+eyekinfig_t(macaddress).get_upload_key()+session_nonce.hex()).md5().hex(); |
86 | 88 | ||
87 | #ifndef NDEBUG | 89 | #ifndef NDEBUG |
88 | syslog(LOG_DEBUG, " computed credential=%s", computed_credential.c_str()); | 90 | syslog(LOG_DEBUG, " computed credential=%s", computed_credential.c_str()); |
89 | #endif | 91 | #endif |
90 | 92 | ||
91 | if (credential != computed_credential) throw std::runtime_error("card authentication failed"); | 93 | if (credential != computed_credential) throw std::runtime_error("card authentication failed"); |
92 | 94 | ||
93 | r.fileid = 1; r.offset = 0; | 95 | r.fileid = 1; r.offset = 0; |
94 | return SOAP_OK; | 96 | return SOAP_OK; |
95 | } | 97 | } |
96 | 98 | ||
97 | int eyefiService::MarkLastPhotoInRoll( | 99 | int eyefiService::MarkLastPhotoInRoll( |
98 | std::string macaddress, int mergedelta, | 100 | std::string macaddress, int mergedelta, |
99 | struct rns__MarkLastPhotoInRollResponse &r ) { | 101 | struct rns__MarkLastPhotoInRollResponse &r ) { |
100 | #ifndef NDEBUG | 102 | #ifndef NDEBUG |
101 | syslog(LOG_DEBUG, | 103 | syslog(LOG_DEBUG, |
102 | "MarkLastPhotoInRoll request from %s with mergedelta=%d", | 104 | "MarkLastPhotoInRoll request from %s with mergedelta=%d", |
103 | macaddress.c_str(), mergedelta ); | 105 | macaddress.c_str(), mergedelta ); |
104 | #endif | 106 | #endif |
105 | std::string cmd = eyekinfig_t(macaddress).get_on_mark_last_photo_in_roll(); | 107 | std::string cmd = eyekinfig_t(macaddress).get_on_mark_last_photo_in_roll(); |
106 | if(!cmd.empty()) { | 108 | if(!cmd.empty()) { |
107 | if(detached_child()) { | 109 | if(detached_child()) { |
108 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); | 110 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); |
109 | putenv( gnu::autosprintf("EYEFI_MERGEDELTA=%d",mergedelta) ); | 111 | putenv( gnu::autosprintf("EYEFI_MERGEDELTA=%d",mergedelta) ); |
110 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; | 112 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; |
111 | execv("/bin/sh",argv); | 113 | execv("/bin/sh",argv); |
112 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); | 114 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); |
113 | _exit(-1); | 115 | _exit(-1); |
114 | } | 116 | } |
115 | } | 117 | } |
116 | return SOAP_OK; | 118 | return SOAP_OK; |
117 | } | 119 | } |
118 | 120 | ||
119 | int eyefiService::UploadPhoto( | 121 | int eyefiService::UploadPhoto( |
120 | int fileid, std::string macaddress, | 122 | int fileid, std::string macaddress, |
121 | std::string filename, long filesize, std::string filesignature, | 123 | std::string filename, long filesize, std::string filesignature, |
122 | std::string encryption, int flags, | 124 | std::string encryption, int flags, |
123 | struct rns__UploadPhotoResponse& r ) { | 125 | struct rns__UploadPhotoResponse& r ) { |
124 | #ifndef NDEBUG | 126 | #ifndef NDEBUG |
125 | syslog(LOG_DEBUG, | 127 | syslog(LOG_DEBUG, |
126 | "UploadPhoto request from %s with fileid=%d, filename=%s, filesize=%ld," | 128 | "UploadPhoto request from %s with fileid=%d, filename=%s, filesize=%ld," |
127 | " filesignature=%s, encryption=%s, flags=%04X", | 129 | " filesignature=%s, encryption=%s, flags=%04X", |
128 | macaddress.c_str(), fileid, filename.c_str(), filesize, | 130 | macaddress.c_str(), fileid, filename.c_str(), filesize, |
129 | filesignature.c_str(), encryption.c_str(), flags ); | 131 | filesignature.c_str(), encryption.c_str(), flags ); |
130 | #endif | 132 | #endif |
131 | eyekinfig_t eyekinfig(macaddress); | 133 | eyekinfig_t eyekinfig(macaddress); |
132 | 134 | ||
133 | umask(eyekinfig.get_umask()); | 135 | umask(eyekinfig.get_umask()); |
134 | 136 | ||
135 | std::string td = eyekinfig.get_targetdir(); | 137 | std::string td = eyekinfig.get_targetdir(); |
136 | tmpdir_t indir(td+"/.incoming.XXXXXX"); | 138 | tmpdir_t indir(td+"/.incoming.XXXXXX"); |
137 | 139 | ||
138 | std::string jf; | 140 | std::string jf; |
139 | binary_t digest, idigest; | 141 | binary_t digest, idigest; |
140 | 142 | ||
141 | for(soap_multipart::iterator i=mime.begin(),ie=mime.end();i!=ie;++i) { | 143 | for(soap_multipart::iterator i=mime.begin(),ie=mime.end();i!=ie;++i) { |
142 | #ifndef NDEBUG | 144 | #ifndef NDEBUG |
143 | syslog(LOG_DEBUG, | 145 | syslog(LOG_DEBUG, |
144 | " MIME attachment with id=%s, type=%s, size=%ld", | 146 | " MIME attachment with id=%s, type=%s, size=%ld", |
145 | (*i).id, (*i).type, (long)(*i).size ); | 147 | (*i).id, (*i).type, (long)(*i).size ); |
146 | #endif | 148 | #endif |
147 | 149 | ||
148 | if((*i).id && !strcmp((*i).id,"INTEGRITYDIGEST")) { | 150 | if((*i).id && !strcmp((*i).id,"INTEGRITYDIGEST")) { |
149 | std::string idigestr((*i).ptr,(*i).size); | 151 | std::string idigestr((*i).ptr,(*i).size); |
150 | #ifndef NDEBUG | 152 | #ifndef NDEBUG |
151 | syslog(LOG_DEBUG, " INTEGRITYDIGEST=%s", idigestr.c_str()); | 153 | syslog(LOG_DEBUG, " INTEGRITYDIGEST=%s", idigestr.c_str()); |
152 | #endif | 154 | #endif |
153 | idigest.from_hex(idigestr); | 155 | idigest.from_hex(idigestr); |
154 | } | 156 | } |
155 | if( (*i).id && !strcmp((*i).id,"FILENAME") ) { | 157 | if( (*i).id && !strcmp((*i).id,"FILENAME") ) { |
156 | assert( (*i).type && !strcmp((*i).type,"application/x-tar") ); | 158 | assert( (*i).type && !strcmp((*i).type,"application/x-tar") ); |
157 | #ifdef III_SAVE_TARS | 159 | #ifdef III_SAVE_TARS |
158 | std::string tarfile = indir.get_file(filename); | 160 | std::string tarfile = indir.get_file(filename); |
159 | { | 161 | { |
160 | std::ofstream(tarfile.c_str(),std::ios::out|std::ios::binary).write((*i).ptr,(*i).size); | 162 | std::ofstream(tarfile.c_str(),std::ios::out|std::ios::binary).write((*i).ptr,(*i).size); |
161 | } | 163 | } |
162 | #endif | 164 | #endif |
163 | 165 | ||
164 | if(!jf.empty()) throw std::runtime_error("already seen tarball"); | 166 | if(!jf.empty()) throw std::runtime_error("already seen tarball"); |
165 | if(!digest.empty()) throw std::runtime_error("already have integrity digest"); | 167 | if(!digest.empty()) throw std::runtime_error("already have integrity digest"); |
166 | digest = integrity_digest((*i).ptr,(*i).size,eyekinfig.get_upload_key()); | 168 | digest = integrity_digest((*i).ptr,(*i).size,eyekinfig.get_upload_key()); |
167 | #ifndef NDEBUG | 169 | #ifndef NDEBUG |
168 | syslog(LOG_DEBUG," computed integrity digest=%s", digest.hex().c_str()); | 170 | syslog(LOG_DEBUG," computed integrity digest=%s", digest.hex().c_str()); |
169 | #endif | 171 | #endif |
170 | 172 | ||
171 | tarchive_t a((*i).ptr,(*i).size); | 173 | tarchive_t a((*i).ptr,(*i).size); |
172 | if(!a.read_next_header()) | 174 | if(!a.read_next_header()) |
173 | throw std::runtime_error("failed to tarchive_t::read_next_header())"); | 175 | throw std::runtime_error("failed to tarchive_t::read_next_header())"); |
174 | jf = indir.get_file(a.entry_pathname()); | 176 | jf = indir.get_file(a.entry_pathname()); |
175 | int fd=open(jf.c_str(),O_CREAT|O_WRONLY,0666); | 177 | int fd=open(jf.c_str(),O_CREAT|O_WRONLY,0666); |
176 | assert(fd>0); | 178 | assert(fd>0); |
177 | a.read_data_into_fd(fd); | 179 | a.read_data_into_fd(fd); |
178 | close(fd); | 180 | close(fd); |
179 | } | 181 | } |
180 | } | 182 | } |
181 | 183 | ||
182 | if(jf.empty()) throw std::runtime_error("haven't seen jpeg file"); | 184 | if(jf.empty()) throw std::runtime_error("haven't seen jpeg file"); |
183 | if(digest!=idigest) throw std::runtime_error("integrity digest verification failed"); | 185 | if(digest!=idigest) throw std::runtime_error("integrity digest verification failed"); |
184 | 186 | ||
185 | std::string::size_type ls = jf.rfind('/'); | 187 | std::string::size_type ls = jf.rfind('/'); |
186 | std::string jbn = (ls==std::string::npos)?jf:jf.substr(ls+1); | 188 | std::string jbn = (ls==std::string::npos)?jf:jf.substr(ls+1); |
187 | std::string tf = td+'/'+jbn; | 189 | std::string tf = td+'/'+jbn; |
188 | bool success = false; | 190 | bool success = false; |
189 | if(!link(jf.c_str(), tf.c_str())) { | 191 | if(!link(jf.c_str(), tf.c_str())) { |
190 | unlink(jf.c_str()); success = true; | 192 | unlink(jf.c_str()); success = true; |
191 | }else{ | 193 | }else{ |
192 | for(int i=1;i<32767;++i) { | 194 | for(int i=1;i<32767;++i) { |
193 | tf = (const char*)gnu::autosprintf( "%s/(%05d)%s", | 195 | tf = (const char*)gnu::autosprintf( "%s/(%05d)%s", |
194 | td.c_str(), i, jbn.c_str() ); | 196 | td.c_str(), i, jbn.c_str() ); |
195 | if(!link(jf.c_str(), tf.c_str())) { | 197 | if(!link(jf.c_str(), tf.c_str())) { |
196 | unlink(jf.c_str()); success = true; | 198 | unlink(jf.c_str()); success = true; |
197 | break; | 199 | break; |
198 | } | 200 | } |
199 | } | 201 | } |
200 | } | 202 | } |
201 | std::string cmd = eyekinfig.get_on_upload_photo(); | 203 | std::string cmd = eyekinfig.get_on_upload_photo(); |
202 | if(success && !cmd.empty()) { | 204 | if(success && !cmd.empty()) { |
203 | if(detached_child()) { | 205 | if(detached_child()) { |
204 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); | 206 | putenv( gnu::autosprintf("EYEFI_MACADDRESS=%s",macaddress.c_str()) ); |
205 | putenv( gnu::autosprintf("EYEFI_UPLOADED=%s",tf.c_str()) ); | 207 | putenv( gnu::autosprintf("EYEFI_UPLOADED=%s",tf.c_str()) ); |
206 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; | 208 | char *argv[] = { (char*)"/bin/sh", (char*)"-c", (char*)cmd.c_str(), 0 }; |
207 | execv("/bin/sh",argv); | 209 | execv("/bin/sh",argv); |
208 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); | 210 | syslog(LOG_ERR,"Failed to execute '%s'",cmd.c_str()); |
209 | _exit(-1); | 211 | _exit(-1); |
210 | } | 212 | } |
211 | } | 213 | } |
212 | 214 | ||
213 | r.success = true; | 215 | r.success = true; |
214 | return SOAP_OK; | 216 | return SOAP_OK; |
215 | } | 217 | } |