Sync with 1.8.1.5
[git/jnareb-git.git] / imap-send.c
blob43ac4e0bdfdba8850eff176b53d6bd071e8f424c
1 /*
2 * git-imap-send - drops patches into an imap Drafts folder
3 * derived from isync/mbsync - mailbox synchronizer
5 * Copyright (C) 2000-2002 Michael R. Elkins <me@mutt.org>
6 * Copyright (C) 2002-2004 Oswald Buddenhagen <ossi@users.sf.net>
7 * Copyright (C) 2004 Theodore Y. Ts'o <tytso@mit.edu>
8 * Copyright (C) 2006 Mike McCormack
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License as published by
12 * the Free Software Foundation; either version 2 of the License, or
13 * (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
25 #include "cache.h"
26 #include "exec_cmd.h"
27 #include "run-command.h"
28 #include "prompt.h"
29 #ifdef NO_OPENSSL
30 typedef void *SSL;
31 #else
32 #include <openssl/evp.h>
33 #include <openssl/hmac.h>
34 #include <openssl/x509v3.h>
35 #endif
37 static const char imap_send_usage[] = "git imap-send < <mbox>";
39 #undef DRV_OK
40 #define DRV_OK 0
41 #define DRV_MSG_BAD -1
42 #define DRV_BOX_BAD -2
43 #define DRV_STORE_BAD -3
45 static int Verbose, Quiet;
47 __attribute__((format (printf, 1, 2)))
48 static void imap_info(const char *, ...);
49 __attribute__((format (printf, 1, 2)))
50 static void imap_warn(const char *, ...);
52 static char *next_arg(char **);
54 __attribute__((format (printf, 3, 4)))
55 static int nfsnprintf(char *buf, int blen, const char *fmt, ...);
57 static int nfvasprintf(char **strp, const char *fmt, va_list ap)
59 int len;
60 char tmp[8192];
62 len = vsnprintf(tmp, sizeof(tmp), fmt, ap);
63 if (len < 0)
64 die("Fatal: Out of memory");
65 if (len >= sizeof(tmp))
66 die("imap command overflow!");
67 *strp = xmemdupz(tmp, len);
68 return len;
71 struct imap_server_conf {
72 char *name;
73 char *tunnel;
74 char *host;
75 int port;
76 char *user;
77 char *pass;
78 int use_ssl;
79 int ssl_verify;
80 int use_html;
81 char *auth_method;
84 static struct imap_server_conf server = {
85 NULL, /* name */
86 NULL, /* tunnel */
87 NULL, /* host */
88 0, /* port */
89 NULL, /* user */
90 NULL, /* pass */
91 0, /* use_ssl */
92 1, /* ssl_verify */
93 0, /* use_html */
94 NULL, /* auth_method */
97 struct imap_socket {
98 int fd[2];
99 SSL *ssl;
102 struct imap_buffer {
103 struct imap_socket sock;
104 int bytes;
105 int offset;
106 char buf[1024];
109 struct imap_cmd;
111 struct imap {
112 int uidnext; /* from SELECT responses */
113 unsigned caps, rcaps; /* CAPABILITY results */
114 /* command queue */
115 int nexttag, num_in_progress, literal_pending;
116 struct imap_cmd *in_progress, **in_progress_append;
117 struct imap_buffer buf; /* this is BIG, so put it last */
120 struct imap_store {
121 /* currently open mailbox */
122 const char *name; /* foreign! maybe preset? */
123 int uidvalidity;
124 struct imap *imap;
125 const char *prefix;
128 struct imap_cmd_cb {
129 int (*cont)(struct imap_store *ctx, struct imap_cmd *cmd, const char *prompt);
130 void (*done)(struct imap_store *ctx, struct imap_cmd *cmd, int response);
131 void *ctx;
132 char *data;
133 int dlen;
134 int uid;
135 unsigned create:1, trycreate:1;
138 struct imap_cmd {
139 struct imap_cmd *next;
140 struct imap_cmd_cb cb;
141 char *cmd;
142 int tag;
145 #define CAP(cap) (imap->caps & (1 << (cap)))
147 enum CAPABILITY {
148 NOLOGIN = 0,
149 UIDPLUS,
150 LITERALPLUS,
151 NAMESPACE,
152 STARTTLS,
153 AUTH_CRAM_MD5
156 static const char *cap_list[] = {
157 "LOGINDISABLED",
158 "UIDPLUS",
159 "LITERAL+",
160 "NAMESPACE",
161 "STARTTLS",
162 "AUTH=CRAM-MD5",
165 #define RESP_OK 0
166 #define RESP_NO 1
167 #define RESP_BAD 2
169 static int get_cmd_result(struct imap_store *ctx, struct imap_cmd *tcmd);
172 #ifndef NO_OPENSSL
173 static void ssl_socket_perror(const char *func)
175 fprintf(stderr, "%s: %s\n", func, ERR_error_string(ERR_get_error(), NULL));
177 #endif
179 static void socket_perror(const char *func, struct imap_socket *sock, int ret)
181 #ifndef NO_OPENSSL
182 if (sock->ssl) {
183 int sslerr = SSL_get_error(sock->ssl, ret);
184 switch (sslerr) {
185 case SSL_ERROR_NONE:
186 break;
187 case SSL_ERROR_SYSCALL:
188 perror("SSL_connect");
189 break;
190 default:
191 ssl_socket_perror("SSL_connect");
192 break;
194 } else
195 #endif
197 if (ret < 0)
198 perror(func);
199 else
200 fprintf(stderr, "%s: unexpected EOF\n", func);
204 #ifdef NO_OPENSSL
205 static int ssl_socket_connect(struct imap_socket *sock, int use_tls_only, int verify)
207 fprintf(stderr, "SSL requested but SSL support not compiled in\n");
208 return -1;
211 #else
213 static int host_matches(const char *host, const char *pattern)
215 if (pattern[0] == '*' && pattern[1] == '.') {
216 pattern += 2;
217 if (!(host = strchr(host, '.')))
218 return 0;
219 host++;
222 return *host && *pattern && !strcasecmp(host, pattern);
225 static int verify_hostname(X509 *cert, const char *hostname)
227 int len;
228 X509_NAME *subj;
229 char cname[1000];
230 int i, found;
231 STACK_OF(GENERAL_NAME) *subj_alt_names;
233 /* try the DNS subjectAltNames */
234 found = 0;
235 if ((subj_alt_names = X509_get_ext_d2i(cert, NID_subject_alt_name, NULL, NULL))) {
236 int num_subj_alt_names = sk_GENERAL_NAME_num(subj_alt_names);
237 for (i = 0; !found && i < num_subj_alt_names; i++) {
238 GENERAL_NAME *subj_alt_name = sk_GENERAL_NAME_value(subj_alt_names, i);
239 if (subj_alt_name->type == GEN_DNS &&
240 strlen((const char *)subj_alt_name->d.ia5->data) == (size_t)subj_alt_name->d.ia5->length &&
241 host_matches(hostname, (const char *)(subj_alt_name->d.ia5->data)))
242 found = 1;
244 sk_GENERAL_NAME_pop_free(subj_alt_names, GENERAL_NAME_free);
246 if (found)
247 return 0;
249 /* try the common name */
250 if (!(subj = X509_get_subject_name(cert)))
251 return error("cannot get certificate subject");
252 if ((len = X509_NAME_get_text_by_NID(subj, NID_commonName, cname, sizeof(cname))) < 0)
253 return error("cannot get certificate common name");
254 if (strlen(cname) == (size_t)len && host_matches(hostname, cname))
255 return 0;
256 return error("certificate owner '%s' does not match hostname '%s'",
257 cname, hostname);
260 static int ssl_socket_connect(struct imap_socket *sock, int use_tls_only, int verify)
262 #if (OPENSSL_VERSION_NUMBER >= 0x10000000L)
263 const SSL_METHOD *meth;
264 #else
265 SSL_METHOD *meth;
266 #endif
267 SSL_CTX *ctx;
268 int ret;
269 X509 *cert;
271 SSL_library_init();
272 SSL_load_error_strings();
274 if (use_tls_only)
275 meth = TLSv1_method();
276 else
277 meth = SSLv23_method();
279 if (!meth) {
280 ssl_socket_perror("SSLv23_method");
281 return -1;
284 ctx = SSL_CTX_new(meth);
286 if (verify)
287 SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
289 if (!SSL_CTX_set_default_verify_paths(ctx)) {
290 ssl_socket_perror("SSL_CTX_set_default_verify_paths");
291 return -1;
293 sock->ssl = SSL_new(ctx);
294 if (!sock->ssl) {
295 ssl_socket_perror("SSL_new");
296 return -1;
298 if (!SSL_set_rfd(sock->ssl, sock->fd[0])) {
299 ssl_socket_perror("SSL_set_rfd");
300 return -1;
302 if (!SSL_set_wfd(sock->ssl, sock->fd[1])) {
303 ssl_socket_perror("SSL_set_wfd");
304 return -1;
307 ret = SSL_connect(sock->ssl);
308 if (ret <= 0) {
309 socket_perror("SSL_connect", sock, ret);
310 return -1;
313 if (verify) {
314 /* make sure the hostname matches that of the certificate */
315 cert = SSL_get_peer_certificate(sock->ssl);
316 if (!cert)
317 return error("unable to get peer certificate.");
318 if (verify_hostname(cert, server.host) < 0)
319 return -1;
322 return 0;
324 #endif
326 static int socket_read(struct imap_socket *sock, char *buf, int len)
328 ssize_t n;
329 #ifndef NO_OPENSSL
330 if (sock->ssl)
331 n = SSL_read(sock->ssl, buf, len);
332 else
333 #endif
334 n = xread(sock->fd[0], buf, len);
335 if (n <= 0) {
336 socket_perror("read", sock, n);
337 close(sock->fd[0]);
338 close(sock->fd[1]);
339 sock->fd[0] = sock->fd[1] = -1;
341 return n;
344 static int socket_write(struct imap_socket *sock, const char *buf, int len)
346 int n;
347 #ifndef NO_OPENSSL
348 if (sock->ssl)
349 n = SSL_write(sock->ssl, buf, len);
350 else
351 #endif
352 n = write_in_full(sock->fd[1], buf, len);
353 if (n != len) {
354 socket_perror("write", sock, n);
355 close(sock->fd[0]);
356 close(sock->fd[1]);
357 sock->fd[0] = sock->fd[1] = -1;
359 return n;
362 static void socket_shutdown(struct imap_socket *sock)
364 #ifndef NO_OPENSSL
365 if (sock->ssl) {
366 SSL_shutdown(sock->ssl);
367 SSL_free(sock->ssl);
369 #endif
370 close(sock->fd[0]);
371 close(sock->fd[1]);
374 /* simple line buffering */
375 static int buffer_gets(struct imap_buffer *b, char **s)
377 int n;
378 int start = b->offset;
380 *s = b->buf + start;
382 for (;;) {
383 /* make sure we have enough data to read the \r\n sequence */
384 if (b->offset + 1 >= b->bytes) {
385 if (start) {
386 /* shift down used bytes */
387 *s = b->buf;
389 assert(start <= b->bytes);
390 n = b->bytes - start;
392 if (n)
393 memmove(b->buf, b->buf + start, n);
394 b->offset -= start;
395 b->bytes = n;
396 start = 0;
399 n = socket_read(&b->sock, b->buf + b->bytes,
400 sizeof(b->buf) - b->bytes);
402 if (n <= 0)
403 return -1;
405 b->bytes += n;
408 if (b->buf[b->offset] == '\r') {
409 assert(b->offset + 1 < b->bytes);
410 if (b->buf[b->offset + 1] == '\n') {
411 b->buf[b->offset] = 0; /* terminate the string */
412 b->offset += 2; /* next line */
413 if (Verbose)
414 puts(*s);
415 return 0;
419 b->offset++;
421 /* not reached */
424 static void imap_info(const char *msg, ...)
426 va_list va;
428 if (!Quiet) {
429 va_start(va, msg);
430 vprintf(msg, va);
431 va_end(va);
432 fflush(stdout);
436 static void imap_warn(const char *msg, ...)
438 va_list va;
440 if (Quiet < 2) {
441 va_start(va, msg);
442 vfprintf(stderr, msg, va);
443 va_end(va);
447 static char *next_arg(char **s)
449 char *ret;
451 if (!s || !*s)
452 return NULL;
453 while (isspace((unsigned char) **s))
454 (*s)++;
455 if (!**s) {
456 *s = NULL;
457 return NULL;
459 if (**s == '"') {
460 ++*s;
461 ret = *s;
462 *s = strchr(*s, '"');
463 } else {
464 ret = *s;
465 while (**s && !isspace((unsigned char) **s))
466 (*s)++;
468 if (*s) {
469 if (**s)
470 *(*s)++ = 0;
471 if (!**s)
472 *s = NULL;
474 return ret;
477 static int nfsnprintf(char *buf, int blen, const char *fmt, ...)
479 int ret;
480 va_list va;
482 va_start(va, fmt);
483 if (blen <= 0 || (unsigned)(ret = vsnprintf(buf, blen, fmt, va)) >= (unsigned)blen)
484 die("Fatal: buffer too small. Please report a bug.");
485 va_end(va);
486 return ret;
489 static struct imap_cmd *v_issue_imap_cmd(struct imap_store *ctx,
490 struct imap_cmd_cb *cb,
491 const char *fmt, va_list ap)
493 struct imap *imap = ctx->imap;
494 struct imap_cmd *cmd;
495 int n, bufl;
496 char buf[1024];
498 cmd = xmalloc(sizeof(struct imap_cmd));
499 nfvasprintf(&cmd->cmd, fmt, ap);
500 cmd->tag = ++imap->nexttag;
502 if (cb)
503 cmd->cb = *cb;
504 else
505 memset(&cmd->cb, 0, sizeof(cmd->cb));
507 while (imap->literal_pending)
508 get_cmd_result(ctx, NULL);
510 if (!cmd->cb.data)
511 bufl = nfsnprintf(buf, sizeof(buf), "%d %s\r\n", cmd->tag, cmd->cmd);
512 else
513 bufl = nfsnprintf(buf, sizeof(buf), "%d %s{%d%s}\r\n",
514 cmd->tag, cmd->cmd, cmd->cb.dlen,
515 CAP(LITERALPLUS) ? "+" : "");
517 if (Verbose) {
518 if (imap->num_in_progress)
519 printf("(%d in progress) ", imap->num_in_progress);
520 if (memcmp(cmd->cmd, "LOGIN", 5))
521 printf(">>> %s", buf);
522 else
523 printf(">>> %d LOGIN <user> <pass>\n", cmd->tag);
525 if (socket_write(&imap->buf.sock, buf, bufl) != bufl) {
526 free(cmd->cmd);
527 free(cmd);
528 if (cb)
529 free(cb->data);
530 return NULL;
532 if (cmd->cb.data) {
533 if (CAP(LITERALPLUS)) {
534 n = socket_write(&imap->buf.sock, cmd->cb.data, cmd->cb.dlen);
535 free(cmd->cb.data);
536 if (n != cmd->cb.dlen ||
537 socket_write(&imap->buf.sock, "\r\n", 2) != 2) {
538 free(cmd->cmd);
539 free(cmd);
540 return NULL;
542 cmd->cb.data = NULL;
543 } else
544 imap->literal_pending = 1;
545 } else if (cmd->cb.cont)
546 imap->literal_pending = 1;
547 cmd->next = NULL;
548 *imap->in_progress_append = cmd;
549 imap->in_progress_append = &cmd->next;
550 imap->num_in_progress++;
551 return cmd;
554 __attribute__((format (printf, 3, 4)))
555 static struct imap_cmd *issue_imap_cmd(struct imap_store *ctx,
556 struct imap_cmd_cb *cb,
557 const char *fmt, ...)
559 struct imap_cmd *ret;
560 va_list ap;
562 va_start(ap, fmt);
563 ret = v_issue_imap_cmd(ctx, cb, fmt, ap);
564 va_end(ap);
565 return ret;
568 __attribute__((format (printf, 3, 4)))
569 static int imap_exec(struct imap_store *ctx, struct imap_cmd_cb *cb,
570 const char *fmt, ...)
572 va_list ap;
573 struct imap_cmd *cmdp;
575 va_start(ap, fmt);
576 cmdp = v_issue_imap_cmd(ctx, cb, fmt, ap);
577 va_end(ap);
578 if (!cmdp)
579 return RESP_BAD;
581 return get_cmd_result(ctx, cmdp);
584 __attribute__((format (printf, 3, 4)))
585 static int imap_exec_m(struct imap_store *ctx, struct imap_cmd_cb *cb,
586 const char *fmt, ...)
588 va_list ap;
589 struct imap_cmd *cmdp;
591 va_start(ap, fmt);
592 cmdp = v_issue_imap_cmd(ctx, cb, fmt, ap);
593 va_end(ap);
594 if (!cmdp)
595 return DRV_STORE_BAD;
597 switch (get_cmd_result(ctx, cmdp)) {
598 case RESP_BAD: return DRV_STORE_BAD;
599 case RESP_NO: return DRV_MSG_BAD;
600 default: return DRV_OK;
604 static int skip_imap_list_l(char **sp, int level)
606 char *s = *sp;
608 for (;;) {
609 while (isspace((unsigned char)*s))
610 s++;
611 if (level && *s == ')') {
612 s++;
613 break;
615 if (*s == '(') {
616 /* sublist */
617 s++;
618 if (skip_imap_list_l(&s, level + 1))
619 goto bail;
620 } else if (*s == '"') {
621 /* quoted string */
622 s++;
623 for (; *s != '"'; s++)
624 if (!*s)
625 goto bail;
626 s++;
627 } else {
628 /* atom */
629 for (; *s && !isspace((unsigned char)*s); s++)
630 if (level && *s == ')')
631 break;
634 if (!level)
635 break;
636 if (!*s)
637 goto bail;
639 *sp = s;
640 return 0;
642 bail:
643 return -1;
646 static void skip_list(char **sp)
648 skip_imap_list_l(sp, 0);
651 static void parse_capability(struct imap *imap, char *cmd)
653 char *arg;
654 unsigned i;
656 imap->caps = 0x80000000;
657 while ((arg = next_arg(&cmd)))
658 for (i = 0; i < ARRAY_SIZE(cap_list); i++)
659 if (!strcmp(cap_list[i], arg))
660 imap->caps |= 1 << i;
661 imap->rcaps = imap->caps;
664 static int parse_response_code(struct imap_store *ctx, struct imap_cmd_cb *cb,
665 char *s)
667 struct imap *imap = ctx->imap;
668 char *arg, *p;
670 if (*s != '[')
671 return RESP_OK; /* no response code */
672 s++;
673 if (!(p = strchr(s, ']'))) {
674 fprintf(stderr, "IMAP error: malformed response code\n");
675 return RESP_BAD;
677 *p++ = 0;
678 arg = next_arg(&s);
679 if (!strcmp("UIDVALIDITY", arg)) {
680 if (!(arg = next_arg(&s)) || !(ctx->uidvalidity = atoi(arg))) {
681 fprintf(stderr, "IMAP error: malformed UIDVALIDITY status\n");
682 return RESP_BAD;
684 } else if (!strcmp("UIDNEXT", arg)) {
685 if (!(arg = next_arg(&s)) || !(imap->uidnext = atoi(arg))) {
686 fprintf(stderr, "IMAP error: malformed NEXTUID status\n");
687 return RESP_BAD;
689 } else if (!strcmp("CAPABILITY", arg)) {
690 parse_capability(imap, s);
691 } else if (!strcmp("ALERT", arg)) {
692 /* RFC2060 says that these messages MUST be displayed
693 * to the user
695 for (; isspace((unsigned char)*p); p++);
696 fprintf(stderr, "*** IMAP ALERT *** %s\n", p);
697 } else if (cb && cb->ctx && !strcmp("APPENDUID", arg)) {
698 if (!(arg = next_arg(&s)) || !(ctx->uidvalidity = atoi(arg)) ||
699 !(arg = next_arg(&s)) || !(*(int *)cb->ctx = atoi(arg))) {
700 fprintf(stderr, "IMAP error: malformed APPENDUID status\n");
701 return RESP_BAD;
704 return RESP_OK;
707 static int get_cmd_result(struct imap_store *ctx, struct imap_cmd *tcmd)
709 struct imap *imap = ctx->imap;
710 struct imap_cmd *cmdp, **pcmdp, *ncmdp;
711 char *cmd, *arg, *arg1, *p;
712 int n, resp, resp2, tag;
714 for (;;) {
715 if (buffer_gets(&imap->buf, &cmd))
716 return RESP_BAD;
718 arg = next_arg(&cmd);
719 if (*arg == '*') {
720 arg = next_arg(&cmd);
721 if (!arg) {
722 fprintf(stderr, "IMAP error: unable to parse untagged response\n");
723 return RESP_BAD;
726 if (!strcmp("NAMESPACE", arg)) {
727 /* rfc2342 NAMESPACE response. */
728 skip_list(&cmd); /* Personal mailboxes */
729 skip_list(&cmd); /* Others' mailboxes */
730 skip_list(&cmd); /* Shared mailboxes */
731 } else if (!strcmp("OK", arg) || !strcmp("BAD", arg) ||
732 !strcmp("NO", arg) || !strcmp("BYE", arg)) {
733 if ((resp = parse_response_code(ctx, NULL, cmd)) != RESP_OK)
734 return resp;
735 } else if (!strcmp("CAPABILITY", arg)) {
736 parse_capability(imap, cmd);
737 } else if ((arg1 = next_arg(&cmd))) {
738 ; /*
739 * Unhandled response-data with at least two words.
740 * Ignore it.
742 * NEEDSWORK: Previously this case handled '<num> EXISTS'
743 * and '<num> RECENT' but as a probably-unintended side
744 * effect it ignores other unrecognized two-word
745 * responses. imap-send doesn't ever try to read
746 * messages or mailboxes these days, so consider
747 * eliminating this case.
749 } else {
750 fprintf(stderr, "IMAP error: unable to parse untagged response\n");
751 return RESP_BAD;
753 } else if (!imap->in_progress) {
754 fprintf(stderr, "IMAP error: unexpected reply: %s %s\n", arg, cmd ? cmd : "");
755 return RESP_BAD;
756 } else if (*arg == '+') {
757 /* This can happen only with the last command underway, as
758 it enforces a round-trip. */
759 cmdp = (struct imap_cmd *)((char *)imap->in_progress_append -
760 offsetof(struct imap_cmd, next));
761 if (cmdp->cb.data) {
762 n = socket_write(&imap->buf.sock, cmdp->cb.data, cmdp->cb.dlen);
763 free(cmdp->cb.data);
764 cmdp->cb.data = NULL;
765 if (n != (int)cmdp->cb.dlen)
766 return RESP_BAD;
767 } else if (cmdp->cb.cont) {
768 if (cmdp->cb.cont(ctx, cmdp, cmd))
769 return RESP_BAD;
770 } else {
771 fprintf(stderr, "IMAP error: unexpected command continuation request\n");
772 return RESP_BAD;
774 if (socket_write(&imap->buf.sock, "\r\n", 2) != 2)
775 return RESP_BAD;
776 if (!cmdp->cb.cont)
777 imap->literal_pending = 0;
778 if (!tcmd)
779 return DRV_OK;
780 } else {
781 tag = atoi(arg);
782 for (pcmdp = &imap->in_progress; (cmdp = *pcmdp); pcmdp = &cmdp->next)
783 if (cmdp->tag == tag)
784 goto gottag;
785 fprintf(stderr, "IMAP error: unexpected tag %s\n", arg);
786 return RESP_BAD;
787 gottag:
788 if (!(*pcmdp = cmdp->next))
789 imap->in_progress_append = pcmdp;
790 imap->num_in_progress--;
791 if (cmdp->cb.cont || cmdp->cb.data)
792 imap->literal_pending = 0;
793 arg = next_arg(&cmd);
794 if (!strcmp("OK", arg))
795 resp = DRV_OK;
796 else {
797 if (!strcmp("NO", arg)) {
798 if (cmdp->cb.create && cmd && (cmdp->cb.trycreate || !memcmp(cmd, "[TRYCREATE]", 11))) { /* SELECT, APPEND or UID COPY */
799 p = strchr(cmdp->cmd, '"');
800 if (!issue_imap_cmd(ctx, NULL, "CREATE \"%.*s\"", (int)(strchr(p + 1, '"') - p + 1), p)) {
801 resp = RESP_BAD;
802 goto normal;
804 /* not waiting here violates the spec, but a server that does not
805 grok this nonetheless violates it too. */
806 cmdp->cb.create = 0;
807 if (!(ncmdp = issue_imap_cmd(ctx, &cmdp->cb, "%s", cmdp->cmd))) {
808 resp = RESP_BAD;
809 goto normal;
811 free(cmdp->cmd);
812 free(cmdp);
813 if (!tcmd)
814 return 0; /* ignored */
815 if (cmdp == tcmd)
816 tcmd = ncmdp;
817 continue;
819 resp = RESP_NO;
820 } else /*if (!strcmp("BAD", arg))*/
821 resp = RESP_BAD;
822 fprintf(stderr, "IMAP command '%s' returned response (%s) - %s\n",
823 memcmp(cmdp->cmd, "LOGIN", 5) ?
824 cmdp->cmd : "LOGIN <user> <pass>",
825 arg, cmd ? cmd : "");
827 if ((resp2 = parse_response_code(ctx, &cmdp->cb, cmd)) > resp)
828 resp = resp2;
829 normal:
830 if (cmdp->cb.done)
831 cmdp->cb.done(ctx, cmdp, resp);
832 free(cmdp->cb.data);
833 free(cmdp->cmd);
834 free(cmdp);
835 if (!tcmd || tcmd == cmdp)
836 return resp;
839 /* not reached */
842 static void imap_close_server(struct imap_store *ictx)
844 struct imap *imap = ictx->imap;
846 if (imap->buf.sock.fd[0] != -1) {
847 imap_exec(ictx, NULL, "LOGOUT");
848 socket_shutdown(&imap->buf.sock);
850 free(imap);
853 static void imap_close_store(struct imap_store *ctx)
855 imap_close_server(ctx);
856 free(ctx);
859 #ifndef NO_OPENSSL
862 * hexchar() and cram() functions are based on the code from the isync
863 * project (http://isync.sf.net/).
865 static char hexchar(unsigned int b)
867 return b < 10 ? '0' + b : 'a' + (b - 10);
870 #define ENCODED_SIZE(n) (4*((n+2)/3))
871 static char *cram(const char *challenge_64, const char *user, const char *pass)
873 int i, resp_len, encoded_len, decoded_len;
874 HMAC_CTX hmac;
875 unsigned char hash[16];
876 char hex[33];
877 char *response, *response_64, *challenge;
880 * length of challenge_64 (i.e. base-64 encoded string) is a good
881 * enough upper bound for challenge (decoded result).
883 encoded_len = strlen(challenge_64);
884 challenge = xmalloc(encoded_len);
885 decoded_len = EVP_DecodeBlock((unsigned char *)challenge,
886 (unsigned char *)challenge_64, encoded_len);
887 if (decoded_len < 0)
888 die("invalid challenge %s", challenge_64);
889 HMAC_Init(&hmac, (unsigned char *)pass, strlen(pass), EVP_md5());
890 HMAC_Update(&hmac, (unsigned char *)challenge, decoded_len);
891 HMAC_Final(&hmac, hash, NULL);
892 HMAC_CTX_cleanup(&hmac);
894 hex[32] = 0;
895 for (i = 0; i < 16; i++) {
896 hex[2 * i] = hexchar((hash[i] >> 4) & 0xf);
897 hex[2 * i + 1] = hexchar(hash[i] & 0xf);
900 /* response: "<user> <digest in hex>" */
901 resp_len = strlen(user) + 1 + strlen(hex) + 1;
902 response = xmalloc(resp_len);
903 sprintf(response, "%s %s", user, hex);
905 response_64 = xmalloc(ENCODED_SIZE(resp_len) + 1);
906 encoded_len = EVP_EncodeBlock((unsigned char *)response_64,
907 (unsigned char *)response, resp_len);
908 if (encoded_len < 0)
909 die("EVP_EncodeBlock error");
910 response_64[encoded_len] = '\0';
911 return (char *)response_64;
914 #else
916 static char *cram(const char *challenge_64, const char *user, const char *pass)
918 die("If you want to use CRAM-MD5 authenticate method, "
919 "you have to build git-imap-send with OpenSSL library.");
922 #endif
924 static int auth_cram_md5(struct imap_store *ctx, struct imap_cmd *cmd, const char *prompt)
926 int ret;
927 char *response;
929 response = cram(prompt, server.user, server.pass);
931 ret = socket_write(&ctx->imap->buf.sock, response, strlen(response));
932 if (ret != strlen(response))
933 return error("IMAP error: sending response failed");
935 free(response);
937 return 0;
940 static struct imap_store *imap_open_store(struct imap_server_conf *srvc)
942 struct imap_store *ctx;
943 struct imap *imap;
944 char *arg, *rsp;
945 int s = -1, preauth;
947 ctx = xcalloc(sizeof(*ctx), 1);
949 ctx->imap = imap = xcalloc(sizeof(*imap), 1);
950 imap->buf.sock.fd[0] = imap->buf.sock.fd[1] = -1;
951 imap->in_progress_append = &imap->in_progress;
953 /* open connection to IMAP server */
955 if (srvc->tunnel) {
956 const char *argv[] = { srvc->tunnel, NULL };
957 struct child_process tunnel = {NULL};
959 imap_info("Starting tunnel '%s'... ", srvc->tunnel);
961 tunnel.argv = argv;
962 tunnel.use_shell = 1;
963 tunnel.in = -1;
964 tunnel.out = -1;
965 if (start_command(&tunnel))
966 die("cannot start proxy %s", argv[0]);
968 imap->buf.sock.fd[0] = tunnel.out;
969 imap->buf.sock.fd[1] = tunnel.in;
971 imap_info("ok\n");
972 } else {
973 #ifndef NO_IPV6
974 struct addrinfo hints, *ai0, *ai;
975 int gai;
976 char portstr[6];
978 snprintf(portstr, sizeof(portstr), "%d", srvc->port);
980 memset(&hints, 0, sizeof(hints));
981 hints.ai_socktype = SOCK_STREAM;
982 hints.ai_protocol = IPPROTO_TCP;
984 imap_info("Resolving %s... ", srvc->host);
985 gai = getaddrinfo(srvc->host, portstr, &hints, &ai);
986 if (gai) {
987 fprintf(stderr, "getaddrinfo: %s\n", gai_strerror(gai));
988 goto bail;
990 imap_info("ok\n");
992 for (ai0 = ai; ai; ai = ai->ai_next) {
993 char addr[NI_MAXHOST];
995 s = socket(ai->ai_family, ai->ai_socktype,
996 ai->ai_protocol);
997 if (s < 0)
998 continue;
1000 getnameinfo(ai->ai_addr, ai->ai_addrlen, addr,
1001 sizeof(addr), NULL, 0, NI_NUMERICHOST);
1002 imap_info("Connecting to [%s]:%s... ", addr, portstr);
1004 if (connect(s, ai->ai_addr, ai->ai_addrlen) < 0) {
1005 close(s);
1006 s = -1;
1007 perror("connect");
1008 continue;
1011 break;
1013 freeaddrinfo(ai0);
1014 #else /* NO_IPV6 */
1015 struct hostent *he;
1016 struct sockaddr_in addr;
1018 memset(&addr, 0, sizeof(addr));
1019 addr.sin_port = htons(srvc->port);
1020 addr.sin_family = AF_INET;
1022 imap_info("Resolving %s... ", srvc->host);
1023 he = gethostbyname(srvc->host);
1024 if (!he) {
1025 perror("gethostbyname");
1026 goto bail;
1028 imap_info("ok\n");
1030 addr.sin_addr.s_addr = *((int *) he->h_addr_list[0]);
1032 s = socket(PF_INET, SOCK_STREAM, 0);
1034 imap_info("Connecting to %s:%hu... ", inet_ntoa(addr.sin_addr), ntohs(addr.sin_port));
1035 if (connect(s, (struct sockaddr *)&addr, sizeof(addr))) {
1036 close(s);
1037 s = -1;
1038 perror("connect");
1040 #endif
1041 if (s < 0) {
1042 fputs("Error: unable to connect to server.\n", stderr);
1043 goto bail;
1046 imap->buf.sock.fd[0] = s;
1047 imap->buf.sock.fd[1] = dup(s);
1049 if (srvc->use_ssl &&
1050 ssl_socket_connect(&imap->buf.sock, 0, srvc->ssl_verify)) {
1051 close(s);
1052 goto bail;
1054 imap_info("ok\n");
1057 /* read the greeting string */
1058 if (buffer_gets(&imap->buf, &rsp)) {
1059 fprintf(stderr, "IMAP error: no greeting response\n");
1060 goto bail;
1062 arg = next_arg(&rsp);
1063 if (!arg || *arg != '*' || (arg = next_arg(&rsp)) == NULL) {
1064 fprintf(stderr, "IMAP error: invalid greeting response\n");
1065 goto bail;
1067 preauth = 0;
1068 if (!strcmp("PREAUTH", arg))
1069 preauth = 1;
1070 else if (strcmp("OK", arg) != 0) {
1071 fprintf(stderr, "IMAP error: unknown greeting response\n");
1072 goto bail;
1074 parse_response_code(ctx, NULL, rsp);
1075 if (!imap->caps && imap_exec(ctx, NULL, "CAPABILITY") != RESP_OK)
1076 goto bail;
1078 if (!preauth) {
1079 #ifndef NO_OPENSSL
1080 if (!srvc->use_ssl && CAP(STARTTLS)) {
1081 if (imap_exec(ctx, NULL, "STARTTLS") != RESP_OK)
1082 goto bail;
1083 if (ssl_socket_connect(&imap->buf.sock, 1,
1084 srvc->ssl_verify))
1085 goto bail;
1086 /* capabilities may have changed, so get the new capabilities */
1087 if (imap_exec(ctx, NULL, "CAPABILITY") != RESP_OK)
1088 goto bail;
1090 #endif
1091 imap_info("Logging in...\n");
1092 if (!srvc->user) {
1093 fprintf(stderr, "Skipping server %s, no user\n", srvc->host);
1094 goto bail;
1096 if (!srvc->pass) {
1097 struct strbuf prompt = STRBUF_INIT;
1098 strbuf_addf(&prompt, "Password (%s@%s): ", srvc->user, srvc->host);
1099 arg = git_getpass(prompt.buf);
1100 strbuf_release(&prompt);
1101 if (!*arg) {
1102 fprintf(stderr, "Skipping account %s@%s, no password\n", srvc->user, srvc->host);
1103 goto bail;
1106 * getpass() returns a pointer to a static buffer. make a copy
1107 * for long term storage.
1109 srvc->pass = xstrdup(arg);
1111 if (CAP(NOLOGIN)) {
1112 fprintf(stderr, "Skipping account %s@%s, server forbids LOGIN\n", srvc->user, srvc->host);
1113 goto bail;
1116 if (srvc->auth_method) {
1117 struct imap_cmd_cb cb;
1119 if (!strcmp(srvc->auth_method, "CRAM-MD5")) {
1120 if (!CAP(AUTH_CRAM_MD5)) {
1121 fprintf(stderr, "You specified"
1122 "CRAM-MD5 as authentication method, "
1123 "but %s doesn't support it.\n", srvc->host);
1124 goto bail;
1126 /* CRAM-MD5 */
1128 memset(&cb, 0, sizeof(cb));
1129 cb.cont = auth_cram_md5;
1130 if (imap_exec(ctx, &cb, "AUTHENTICATE CRAM-MD5") != RESP_OK) {
1131 fprintf(stderr, "IMAP error: AUTHENTICATE CRAM-MD5 failed\n");
1132 goto bail;
1134 } else {
1135 fprintf(stderr, "Unknown authentication method:%s\n", srvc->host);
1136 goto bail;
1138 } else {
1139 if (!imap->buf.sock.ssl)
1140 imap_warn("*** IMAP Warning *** Password is being "
1141 "sent in the clear\n");
1142 if (imap_exec(ctx, NULL, "LOGIN \"%s\" \"%s\"", srvc->user, srvc->pass) != RESP_OK) {
1143 fprintf(stderr, "IMAP error: LOGIN failed\n");
1144 goto bail;
1147 } /* !preauth */
1149 ctx->prefix = "";
1150 return ctx;
1152 bail:
1153 imap_close_store(ctx);
1154 return NULL;
1158 * Insert CR characters as necessary in *msg to ensure that every LF
1159 * character in *msg is preceded by a CR.
1161 static void lf_to_crlf(struct strbuf *msg)
1163 char *new;
1164 size_t i, j;
1165 char lastc;
1167 /* First pass: tally, in j, the size of the new string: */
1168 for (i = j = 0, lastc = '\0'; i < msg->len; i++) {
1169 if (msg->buf[i] == '\n' && lastc != '\r')
1170 j++; /* a CR will need to be added here */
1171 lastc = msg->buf[i];
1172 j++;
1175 new = xmalloc(j + 1);
1178 * Second pass: write the new string. Note that this loop is
1179 * otherwise identical to the first pass.
1181 for (i = j = 0, lastc = '\0'; i < msg->len; i++) {
1182 if (msg->buf[i] == '\n' && lastc != '\r')
1183 new[j++] = '\r';
1184 lastc = new[j++] = msg->buf[i];
1186 strbuf_attach(msg, new, j, j + 1);
1190 * Store msg to IMAP. Also detach and free the data from msg->data,
1191 * leaving msg->data empty.
1193 static int imap_store_msg(struct imap_store *ctx, struct strbuf *msg)
1195 struct imap *imap = ctx->imap;
1196 struct imap_cmd_cb cb;
1197 const char *prefix, *box;
1198 int ret;
1200 lf_to_crlf(msg);
1201 memset(&cb, 0, sizeof(cb));
1203 cb.dlen = msg->len;
1204 cb.data = strbuf_detach(msg, NULL);
1206 box = ctx->name;
1207 prefix = !strcmp(box, "INBOX") ? "" : ctx->prefix;
1208 cb.create = 0;
1209 ret = imap_exec_m(ctx, &cb, "APPEND \"%s%s\" ", prefix, box);
1210 imap->caps = imap->rcaps;
1211 if (ret != DRV_OK)
1212 return ret;
1214 return DRV_OK;
1217 static void wrap_in_html(struct strbuf *msg)
1219 struct strbuf buf = STRBUF_INIT;
1220 static char *content_type = "Content-Type: text/html;\n";
1221 static char *pre_open = "<pre>\n";
1222 static char *pre_close = "</pre>\n";
1223 const char *body = strstr(msg->buf, "\n\n");
1225 if (!body)
1226 return; /* Headers but no body; no wrapping needed */
1228 body += 2;
1230 strbuf_add(&buf, msg->buf, body - msg->buf - 1);
1231 strbuf_addstr(&buf, content_type);
1232 strbuf_addch(&buf, '\n');
1233 strbuf_addstr(&buf, pre_open);
1234 strbuf_addstr_xml_quoted(&buf, body);
1235 strbuf_addstr(&buf, pre_close);
1237 strbuf_release(msg);
1238 *msg = buf;
1241 #define CHUNKSIZE 0x1000
1243 static int read_message(FILE *f, struct strbuf *all_msgs)
1245 do {
1246 if (strbuf_fread(all_msgs, CHUNKSIZE, f) <= 0)
1247 break;
1248 } while (!feof(f));
1250 return ferror(f) ? -1 : 0;
1253 static int count_messages(struct strbuf *all_msgs)
1255 int count = 0;
1256 char *p = all_msgs->buf;
1258 while (1) {
1259 if (!prefixcmp(p, "From ")) {
1260 p = strstr(p+5, "\nFrom: ");
1261 if (!p) break;
1262 p = strstr(p+7, "\nDate: ");
1263 if (!p) break;
1264 p = strstr(p+7, "\nSubject: ");
1265 if (!p) break;
1266 p += 10;
1267 count++;
1269 p = strstr(p+5, "\nFrom ");
1270 if (!p)
1271 break;
1272 p++;
1274 return count;
1278 * Copy the next message from all_msgs, starting at offset *ofs, to
1279 * msg. Update *ofs to the start of the following message. Return
1280 * true iff a message was successfully copied.
1282 static int split_msg(struct strbuf *all_msgs, struct strbuf *msg, int *ofs)
1284 char *p, *data;
1285 size_t len;
1287 if (*ofs >= all_msgs->len)
1288 return 0;
1290 data = &all_msgs->buf[*ofs];
1291 len = all_msgs->len - *ofs;
1293 if (len < 5 || prefixcmp(data, "From "))
1294 return 0;
1296 p = strchr(data, '\n');
1297 if (p) {
1298 p++;
1299 len -= p - data;
1300 *ofs += p - data;
1301 data = p;
1304 p = strstr(data, "\nFrom ");
1305 if (p)
1306 len = &p[1] - data;
1308 strbuf_add(msg, data, len);
1309 *ofs += len;
1310 return 1;
1313 static char *imap_folder;
1315 static int git_imap_config(const char *key, const char *val, void *cb)
1317 char imap_key[] = "imap.";
1319 if (strncmp(key, imap_key, sizeof imap_key - 1))
1320 return 0;
1322 key += sizeof imap_key - 1;
1324 /* check booleans first, and barf on others */
1325 if (!strcmp("sslverify", key))
1326 server.ssl_verify = git_config_bool(key, val);
1327 else if (!strcmp("preformattedhtml", key))
1328 server.use_html = git_config_bool(key, val);
1329 else if (!val)
1330 return config_error_nonbool(key);
1332 if (!strcmp("folder", key)) {
1333 imap_folder = xstrdup(val);
1334 } else if (!strcmp("host", key)) {
1335 if (!prefixcmp(val, "imap:"))
1336 val += 5;
1337 else if (!prefixcmp(val, "imaps:")) {
1338 val += 6;
1339 server.use_ssl = 1;
1341 if (!prefixcmp(val, "//"))
1342 val += 2;
1343 server.host = xstrdup(val);
1344 } else if (!strcmp("user", key))
1345 server.user = xstrdup(val);
1346 else if (!strcmp("pass", key))
1347 server.pass = xstrdup(val);
1348 else if (!strcmp("port", key))
1349 server.port = git_config_int(key, val);
1350 else if (!strcmp("tunnel", key))
1351 server.tunnel = xstrdup(val);
1352 else if (!strcmp("authmethod", key))
1353 server.auth_method = xstrdup(val);
1355 return 0;
1358 int main(int argc, char **argv)
1360 struct strbuf all_msgs = STRBUF_INIT;
1361 struct strbuf msg = STRBUF_INIT;
1362 struct imap_store *ctx = NULL;
1363 int ofs = 0;
1364 int r;
1365 int total, n = 0;
1366 int nongit_ok;
1368 git_extract_argv0_path(argv[0]);
1370 git_setup_gettext();
1372 if (argc != 1)
1373 usage(imap_send_usage);
1375 setup_git_directory_gently(&nongit_ok);
1376 git_config(git_imap_config, NULL);
1378 if (!server.port)
1379 server.port = server.use_ssl ? 993 : 143;
1381 if (!imap_folder) {
1382 fprintf(stderr, "no imap store specified\n");
1383 return 1;
1385 if (!server.host) {
1386 if (!server.tunnel) {
1387 fprintf(stderr, "no imap host specified\n");
1388 return 1;
1390 server.host = "tunnel";
1393 /* read the messages */
1394 if (read_message(stdin, &all_msgs)) {
1395 fprintf(stderr, "error reading input\n");
1396 return 1;
1399 if (all_msgs.len == 0) {
1400 fprintf(stderr, "nothing to send\n");
1401 return 1;
1404 total = count_messages(&all_msgs);
1405 if (!total) {
1406 fprintf(stderr, "no messages to send\n");
1407 return 1;
1410 /* write it to the imap server */
1411 ctx = imap_open_store(&server);
1412 if (!ctx) {
1413 fprintf(stderr, "failed to open store\n");
1414 return 1;
1417 fprintf(stderr, "sending %d message%s\n", total, (total != 1) ? "s" : "");
1418 ctx->name = imap_folder;
1419 while (1) {
1420 unsigned percent = n * 100 / total;
1422 fprintf(stderr, "%4u%% (%d/%d) done\r", percent, n, total);
1423 if (!split_msg(&all_msgs, &msg, &ofs))
1424 break;
1425 if (server.use_html)
1426 wrap_in_html(&msg);
1427 r = imap_store_msg(ctx, &msg);
1428 if (r != DRV_OK)
1429 break;
1430 n++;
1432 fprintf(stderr, "\n");
1434 imap_close_store(ctx);
1436 return 0;