modules/access/ftp.c

   1 /*****************************************************************************
   2  * ftp.c: FTP input module
   3  *****************************************************************************
   4  * Copyright (C) 2001-2006 VLC authors and VideoLAN
   5  * Copyright © 2006 Rémi Denis-Courmont
   6  * $Id$
   7  *
   8  * Authors: Laurent Aimar <fenrir@via.ecp.fr> - original code
   9  *          Rémi Denis-Courmont <rem # videolan.org> - EPSV support
  10  *
  11  * This program is free software; you can redistribute it and/or modify it
  12  * under the terms of the GNU Lesser General Public License as published by
  13  * the Free Software Foundation; either version 2.1 of the License, or
  14  * (at your option) any later version.
  15  *
  16  * This program is distributed in the hope that it will be useful,
  17  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  18  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  19  * GNU Lesser General Public License for more details.
  20  *
  21  * You should have received a copy of the GNU Lesser General Public License
  22  * along with this program; if not, write to the Free Software Foundation,
  23  * Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301, USA.
  24  *****************************************************************************/
  25
  26 /*****************************************************************************
  27  * Preamble
  28  *****************************************************************************/
  29 #ifdef HAVE_CONFIG_H
  30 # include "config.h"
  31 #endif
  32
  33 #include <assert.h>
  34 #include <stdint.h>
  35 #include <errno.h>
  36
  37 #include <vlc_common.h>
  38 #include <vlc_plugin.h>
  39 #include <vlc_access.h>
  40 #include <vlc_dialog.h>
  41 #include <vlc_input_item.h>
  42 #include <vlc_network.h>
  43 #include <vlc_url.h>
  44 #include <vlc_tls.h>
  45 #include <vlc_sout.h>
  46 #include <vlc_charset.h>
  47 #include <vlc_interrupt.h>
  48 #include <vlc_keystore.h>
  49
  50 #ifndef IPPORT_FTP
  51 # define IPPORT_FTP 21u
  52 #endif
  53
  54 #ifndef IPPORT_FTPS
  55 # define IPPORT_FTPS 990u
  56 #endif
  57
  58 /*****************************************************************************
  59  * Module descriptor
  60  *****************************************************************************/
  61 static int   InOpen ( vlc_object_t * );
  62 static void  InClose( vlc_object_t * );
  63 #ifdef ENABLE_SOUT
  64 static int  OutOpen ( vlc_object_t * );
  65 static void OutClose( vlc_object_t * );
  66 #endif
  67
  68 #define USER_TEXT N_("Username")
  69 #define USER_LONGTEXT N_("Username that will be used for the connection, " \
  70         "if no username is set in the URL.")
  71 #define PASS_TEXT N_("Password")
  72 #define PASS_LONGTEXT N_("Password that will be used for the connection, " \
  73         "if no username or password are set in URL.")
  74 #define ACCOUNT_TEXT N_("FTP account")
  75 #define ACCOUNT_LONGTEXT N_("Account that will be " \
  76     "used for the connection.")
  77
  78 #define LOGIN_DIALOG_TITLE _("FTP authentication")
  79 #define LOGIN_DIALOG_TEXT _("Please enter a valid login and password for " \
  80         "the ftp connexion to %s")
  81
  82 vlc_module_begin ()
  83     set_shortname( "FTP" )
  84     set_description( N_("FTP input") )
  85     set_capability( "access", 0 )
  86     set_category( CAT_INPUT )
  87     set_subcategory( SUBCAT_INPUT_ACCESS )
  88     add_string( "ftp-user", "anonymous", USER_TEXT, USER_LONGTEXT,
  89                 false )
  90     add_string( "ftp-pwd", "anonymous@example.com", PASS_TEXT,
  91                 PASS_LONGTEXT, false )
  92     add_string( "ftp-account", "anonymous", ACCOUNT_TEXT,
  93                 ACCOUNT_LONGTEXT, false )
  94     add_shortcut( "ftp", "ftps", "ftpes" )
  95     set_callbacks( InOpen, InClose )
  96
  97 #ifdef ENABLE_SOUT
  98     add_submodule ()
  99         set_shortname( "FTP" )
 100         set_description( N_("FTP upload output") )
 101         set_capability( "sout access", 0 )
 102         set_category( CAT_SOUT )
 103         set_subcategory( SUBCAT_SOUT_ACO )
 104         add_shortcut( "ftp", "ftps", "ftpes" )
 105         set_callbacks( OutOpen, OutClose )
 106 #endif
 107 vlc_module_end ()
 108
 109 /*****************************************************************************
 110  * Local prototypes
 111  *****************************************************************************/
 112 static ssize_t Read( access_t *, void *, size_t );
 113 static int Seek( access_t *, uint64_t );
 114 static int Control( access_t *, int, va_list );
 115 static int DirRead( access_t *, input_item_node_t * );
 116 #ifdef ENABLE_SOUT
 117 static int OutSeek( sout_access_out_t *, off_t );
 118 static ssize_t Write( sout_access_out_t *, block_t * );
 119 #endif
 120
 121 static int LoginUserPwd( vlc_object_t *, access_sys_t *,
 122                          const char *, const char *, bool * );
 123 static void FeaturesCheck( void *, const char * );
 124
 125 typedef struct ftp_features_t
 126 {
 127     bool b_unicode;
 128     bool b_authtls;
 129     bool b_mlst;
 130 } ftp_features_t;
 131
 132 enum tls_mode_e
 133 {
 134     NONE = 0,
 135     IMPLICIT,/* ftps */
 136     EXPLICIT /* ftpes */
 137 };
 138
 139 struct access_sys_t
 140 {
 141     vlc_url_t  url;
 142
 143     ftp_features_t   features;
 144     vlc_tls_creds_t *p_creds;
 145     enum tls_mode_e  tlsmode;
 146     vlc_tls_t *cmd;
 147     vlc_tls_t *data;
 148
 149     char       sz_epsv_ip[NI_MAXNUMERICHOST];
 150     bool       out;
 151     uint64_t   offset;
 152     uint64_t   size;
 153 };
 154 #define GET_OUT_SYS( p_this ) \
 155     ((access_sys_t *)(((sout_access_out_t *)(p_this))->p_sys))
 156
 157 static int ftp_SendCommand( vlc_object_t *obj, access_sys_t *sys,
 158                             const char *fmt, ... )
 159 {
 160     size_t fmtlen = strlen( fmt );
 161     char fmtbuf[fmtlen + 3];
 162
 163     memcpy( fmtbuf, fmt, fmtlen );
 164     memcpy( fmtbuf + fmtlen, "\r\n", 3 );
 165
 166     va_list args;
 167     char *cmd;
 168     int val;
 169
 170     va_start( args, fmt );
 171     val = vasprintf( &cmd, fmtbuf, args );
 172     va_end( args );
 173     if( unlikely(val == -1) )
 174         return -1;
 175
 176     if( strncmp( cmd, "PASS ", 5 ) && strncmp( cmd, "ACCT ", 5 ) )
 177         msg_Dbg( obj, "sending request: \"%.*s\" (%d bytes)", val-2, cmd, val );
 178     else
 179         msg_Dbg( obj, "sending request: \"%.*s XXXX\" (XX bytes)", 4, cmd );
 180
 181     if( vlc_tls_Write( sys->cmd, cmd, val ) != val )
 182     {
 183         msg_Err( obj, "request failure" );
 184         val = -1;
 185     }
 186     else
 187         val = 0;
 188     free( cmd );
 189     return val;
 190 }
 191
 192 static char *ftp_GetLine( vlc_object_t *obj, access_sys_t *sys )
 193 {
 194     char *resp = vlc_tls_GetLine( sys->cmd );
 195     if( resp == NULL )
 196         msg_Err( obj, "response failure" );
 197     return resp;
 198 }
 199
 200 /* TODO support this s**t :
 201  RFC 959 allows the client to send certain TELNET strings at any moment,
 202  even in the middle of a request:
 203
 204  * \377\377.
 205  * \377\376x where x is one byte.
 206  * \377\375x where x is one byte. The server is obliged to send \377\374x
 207  *                                immediately after reading x.
 208  * \377\374x where x is one byte.
 209  * \377\373x where x is one byte. The server is obliged to send \377\376x
 210  *                                immediately after reading x.
 211  * \377x for any other byte x.
 212
 213  These strings are not part of the requests, except in the case \377\377,
 214  where the request contains one \377. */
 215 static int ftp_RecvReply( vlc_object_t *obj, access_sys_t *sys,
 216                           char **restrict strp,
 217                           void (*cb)(void *, const char *), void *opaque )
 218 {
 219     char *resp = ftp_GetLine( obj, sys );
 220     if( resp == NULL )
 221         return -1;
 222
 223     char *end;
 224     unsigned code = strtoul( resp, &end, 10 );
 225     if( (end - resp) != 3 || (*end != '-' && *end != ' ') )
 226     {
 227         msg_Err( obj, "malformatted response" );
 228         goto error;
 229     }
 230     msg_Dbg( obj, "received response: \"%s\"", resp );
 231
 232     if( *end == '-' ) /* Multi-line response */
 233     {
 234         bool done;
 235
 236         *end = ' ';
 237         do
 238         {
 239             char *line = ftp_GetLine( obj, sys );
 240             if( line == NULL )
 241                 goto error;
 242
 243             done = !strncmp( resp, line, 4 );
 244             if( !done )
 245                 cb( opaque, line );
 246             free( line );
 247         }
 248         while( !done );
 249     }
 250
 251     if( strp != NULL )
 252         *strp = resp;
 253     else
 254         free( resp );
 255     return code;
 256 error:
 257     free( resp );
 258     return -1;
 259 }
 260
 261 static int ftp_RecvAnswer( vlc_object_t *obj, access_sys_t *sys,
 262                            int *restrict codep, char **restrict strp,
 263                            void (*cb)(void *, const char *), void *opaque )
 264 {
 265     char *str;
 266     int val = ftp_RecvReply( obj, sys, &str, cb, opaque );
 267     if( (val / 100) == 1 )
 268     {   /* There can be zero or one preliminary reply per command */
 269         free( str );
 270         val = ftp_RecvReply( obj, sys, &str, cb, opaque );
 271     }
 272
 273     if( val >= 0 )
 274     {
 275         if( codep != NULL )
 276             *codep = val;
 277         if( strp != NULL )
 278             *strp = str;
 279         else
 280             free( str );
 281         val /= 100;
 282     }
 283     else
 284     {
 285         if( codep != NULL )
 286             *codep = 500;
 287         if( strp != NULL )
 288             *strp = NULL;
 289     }
 290     return val;
 291 }
 292
 293 static void DummyLine( void *data, const char *str )
 294 {
 295     (void) data; (void) str;
 296 }
 297
 298 static int ftp_RecvCommand( vlc_object_t *obj, access_sys_t *sys,
 299                             int *restrict codep, char **restrict strp )
 300 {
 301     return ftp_RecvAnswer( obj, sys, codep, strp, DummyLine, NULL );
 302 }
 303
 304 static int ftp_StartStream( vlc_object_t *, access_sys_t *, uint64_t, bool );
 305 static int ftp_StopStream ( vlc_object_t *, access_sys_t * );
 306
 307 static int readTLSMode( vlc_object_t *obj, access_sys_t *p_sys,
 308                         const char * psz_access )
 309 {
 310     if ( !strncmp( psz_access, "ftps", 4 ) )
 311         p_sys->tlsmode = IMPLICIT;
 312     else
 313     if ( !strncmp( psz_access, "ftpes", 5 ) )
 314         p_sys->tlsmode = EXPLICIT;
 315     else
 316     {
 317         p_sys->p_creds = NULL;
 318         p_sys->tlsmode = NONE;
 319         return 0;
 320     }
 321
 322     p_sys->p_creds = vlc_tls_ClientCreate( obj );
 323     return (p_sys->p_creds != NULL) ? 0 : -1;
 324 }
 325
 326 static int createCmdTLS( vlc_object_t *p_access, access_sys_t *p_sys,
 327                          const char *psz_session_name )
 328 {
 329     /* TLS/SSL handshake */
 330     vlc_tls_t *secure = vlc_tls_ClientSessionCreate( p_sys->p_creds,
 331                                                      p_sys->cmd,
 332                                                      p_sys->url.psz_host,
 333                                                      psz_session_name,
 334                                                      NULL, NULL );
 335     if( secure == NULL )
 336     {
 337         msg_Err( p_access, "cannot establish FTP/TLS session on command channel" );
 338         return -1;
 339     }
 340     p_sys->cmd = secure;
 341     return 0;
 342 }
 343
 344 static void clearCmd( access_sys_t *p_sys )
 345 {
 346     if( p_sys->cmd != NULL )
 347     {
 348         vlc_tls_Close( p_sys->cmd );
 349         p_sys->cmd = NULL;
 350     }
 351 }
 352
 353 static int Login( vlc_object_t *p_access, access_sys_t *p_sys )
 354 {
 355     int i_answer;
 356
 357     /* *** Open a TCP connection with server *** */
 358     p_sys->cmd = vlc_tls_SocketOpenTCP( p_access, p_sys->url.psz_host,
 359                                         p_sys->url.i_port );
 360     if( p_sys->cmd == NULL )
 361     {
 362         msg_Err( p_access, "connection failed" );
 363         vlc_dialog_display_error( p_access, _("Network interaction failed"), "%s",
 364             _("VLC could not connect with the given server.") );
 365         return -1;
 366     }
 367
 368     if ( p_sys->tlsmode == IMPLICIT ) /* FTPS Mode */
 369     {
 370         if ( createCmdTLS( p_access, p_sys, "ftps") < 0 )
 371             goto error;
 372     }
 373
 374     while( ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) == 1 );
 375
 376     if( i_answer / 100 != 2 )
 377     {
 378         msg_Err( p_access, "connection rejected" );
 379         vlc_dialog_display_error( p_access, _("Network interaction failed"), "%s",
 380             _("VLC's connection to the given server was rejected.") );
 381         return -1;
 382     }
 383
 384     msg_Dbg( p_access, "connection accepted (%d)", i_answer );
 385
 386     /* Features check first */
 387     if( ftp_SendCommand( p_access, p_sys, "FEAT" ) < 0
 388      || ftp_RecvAnswer( p_access, p_sys, NULL, NULL,
 389                         FeaturesCheck, &p_sys->features ) < 0 )
 390     {
 391          msg_Err( p_access, "cannot get server features" );
 392          return -1;
 393     }
 394
 395     /* Create TLS Session */
 396     if( p_sys->tlsmode == EXPLICIT )
 397     {
 398         if ( ! p_sys->features.b_authtls )
 399         {
 400             msg_Err( p_access, "Server does not support TLS" );
 401             return -1;
 402         }
 403
 404         if( ftp_SendCommand( p_access, p_sys, "AUTH TLS" ) < 0
 405          || ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) < 0
 406          || i_answer != 234 )
 407         {
 408              msg_Err( p_access, "cannot switch to TLS: server replied with code %d",
 409                       i_answer );
 410              return -1;
 411         }
 412
 413         if( createCmdTLS( p_access, p_sys, "ftpes") < 0 )
 414         {
 415             goto error;
 416         }
 417     }
 418
 419     if( p_sys->tlsmode != NONE )
 420     {
 421         if( ftp_SendCommand( p_access, p_sys, "PBSZ 0" ) < 0 ||
 422             ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) < 0 ||
 423             i_answer != 200 )
 424         {
 425             msg_Err( p_access, "Can't truncate Protection buffer size for TLS" );
 426             goto error;
 427         }
 428
 429         if( ftp_SendCommand( p_access, p_sys, "PROT P" ) < 0 ||
 430             ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) < 0 ||
 431             i_answer != 200 )
 432         {
 433             msg_Err( p_access, "Can't set Data channel protection" );
 434             goto error;
 435         }
 436     }
 437
 438     vlc_url_t url;
 439     vlc_credential credential;
 440     vlc_UrlParse( &url, ((access_t *)p_access)->psz_url );
 441     vlc_credential_init( &credential, &url );
 442     bool b_logged = false;
 443
 444     while( vlc_credential_get( &credential, p_access, "ftp-user", "ftp-pwd",
 445                                LOGIN_DIALOG_TITLE, LOGIN_DIALOG_TEXT,
 446                                url.psz_host )
 447         && LoginUserPwd( p_access, p_sys, credential.psz_username,
 448                          credential.psz_password, &b_logged ) == 0
 449         && !b_logged );
 450     if( b_logged )
 451     {
 452         vlc_credential_store( &credential, p_access );
 453         vlc_credential_clean( &credential );
 454         vlc_UrlClean( &url );
 455         return 0;
 456     }
 457     vlc_credential_clean( &credential );
 458     vlc_UrlClean( &url );
 459 error:
 460     clearCmd( p_sys );
 461     return -1;
 462 }
 463
 464 static int LoginUserPwd( vlc_object_t *p_access, access_sys_t *p_sys,
 465                          const char *psz_user, const char *psz_pwd,
 466                          bool *p_logged )
 467 {
 468     int i_answer;
 469
 470     /* Send credentials over channel */
 471     if( ftp_SendCommand( p_access, p_sys, "USER %s", psz_user ) < 0 ||
 472         ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) < 0 )
 473         return -1;
 474
 475     switch( i_answer / 100 )
 476     {
 477         case 2:
 478             /* X.509 auth successful after AUTH TLS / RFC 2228 sec. 4 */
 479             if ( i_answer == 232 )
 480                 msg_Dbg( p_access, "user accepted and authenticated" );
 481             else
 482                 msg_Dbg( p_access, "user accepted" );
 483             break;
 484         case 3:
 485             msg_Dbg( p_access, "password needed" );
 486
 487             if( ftp_SendCommand( p_access, p_sys, "PASS %s", psz_pwd ) < 0 ||
 488                 ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) < 0 )
 489                 return -1;
 490
 491             switch( i_answer / 100 )
 492             {
 493                 case 2:
 494                     msg_Dbg( p_access, "password accepted" );
 495                     break;
 496                 case 3:
 497                 {
 498                     char *psz;
 499                     msg_Dbg( p_access, "account needed" );
 500                     psz = var_InheritString( p_access, "ftp-account" );
 501                     if( ftp_SendCommand( p_access, p_sys, "ACCT %s",
 502                                          psz ) < 0 ||
 503                         ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) < 0 )
 504                     {
 505                         free( psz );
 506                         return -1;
 507                     }
 508                     free( psz );
 509
 510                     if( i_answer / 100 != 2 )
 511                     {
 512                         msg_Err( p_access, "account rejected" );
 513                         vlc_dialog_display_error( p_access,
 514                           _("Network interaction failed"),
 515                           "%s", _("Your account was rejected.") );
 516                         return -1;
 517                     }
 518                     msg_Dbg( p_access, "account accepted" );
 519                     break;
 520                 }
 521
 522                 default:
 523                     msg_Warn( p_access, "password rejected" );
 524                     *p_logged = false;
 525                     return 0;
 526             }
 527             break;
 528         default:
 529             msg_Warn( p_access, "user rejected" );
 530             *p_logged = false;
 531             return 0;
 532     }
 533
 534     *p_logged = true;
 535     return 0;
 536 }
 537
 538 static void FeaturesCheck( void *opaque, const char *feature )
 539 {
 540     ftp_features_t *features = opaque;
 541
 542     if( strcasestr( feature, "UTF8" ) != NULL )
 543         features->b_unicode = true;
 544     else
 545     if( strcasestr( feature, "AUTH TLS" ) != NULL )
 546         features->b_authtls = true;
 547
 548     if( strcasestr( feature, "MLST" ) != NULL )
 549         features->b_mlst = true;
 550 }
 551
 552 static const char *IsASCII( const char *str )
 553 {
 554     int8_t c;
 555     for( const char *p = str; (c = *p) != '\0'; p++ )
 556         if( c < 0 )
 557             return NULL;
 558     return str;
 559 }
 560
 561 static int Connect( vlc_object_t *p_access, access_sys_t *p_sys )
 562 {
 563     if( Login( p_access, p_sys ) < 0 )
 564         return -1;
 565
 566     /* Extended passive mode */
 567     if( ftp_SendCommand( p_access, p_sys, "EPSV ALL" ) < 0 )
 568     {
 569         msg_Err( p_access, "cannot request extended passive mode" );
 570         goto error;
 571     }
 572
 573     if( ftp_RecvCommand( p_access, p_sys, NULL, NULL ) == 2 )
 574     {
 575         int fd = vlc_tls_GetFD(p_sys->cmd);
 576         if( net_GetPeerAddress( fd, p_sys->sz_epsv_ip, NULL ) )
 577             goto error;
 578     }
 579     else
 580     {
 581         /* If ESPV ALL fails, we fallback to PASV.
 582          * We have to restart the connection in case there is a NAT that
 583          * understands EPSV ALL in the way, and hence won't allow PASV on
 584          * the initial connection.
 585          */
 586         msg_Info( p_access, "FTP Extended passive mode disabled" );
 587         clearCmd( p_sys );
 588
 589         if( Login( p_access, p_sys ) )
 590             goto error;
 591     }
 592
 593     if( p_sys->url.psz_path &&
 594         (p_sys->features.b_unicode ? IsUTF8 : IsASCII)(p_sys->url.psz_path) == NULL )
 595     {
 596         msg_Err( p_access, "unsupported path: \"%s\"", p_sys->url.psz_path );
 597         goto error;
 598     }
 599
 600     /* check binary mode support */
 601     if( ftp_SendCommand( p_access, p_sys, "TYPE I" ) < 0 ||
 602         ftp_RecvCommand( p_access, p_sys, NULL, NULL ) != 2 )
 603     {
 604         msg_Err( p_access, "cannot set binary transfer mode" );
 605         goto error;
 606     }
 607
 608     return 0;
 609
 610 error:
 611     clearCmd( p_sys );
 612     return -1;
 613 }
 614
 615
 616 static int parseURL( vlc_url_t *url, const char *path, enum tls_mode_e mode )
 617 {
 618     if( path == NULL )
 619         return VLC_EGENERIC;
 620
 621     /* *** Parse URL and get server addr/port and path *** */
 622     while( *path == '/' )
 623         path++;
 624
 625     vlc_UrlParse( url, path );
 626
 627     if( url->psz_host == NULL || *url->psz_host == '\0' )
 628         return VLC_EGENERIC;
 629
 630     if( url->i_port <= 0 )
 631     {
 632         if( mode == IMPLICIT )
 633             url->i_port = IPPORT_FTPS;
 634         else
 635             url->i_port = IPPORT_FTP; /* default port */
 636     }
 637
 638     if( url->psz_path == NULL )
 639         return VLC_SUCCESS;
 640     /* FTP URLs are relative to user's default directory (RFC1738 §3.2)
 641     For absolute path use ftp://foo.bar//usr/local/etc/filename */
 642     /* FIXME: we should issue a series of CWD, one per slash */
 643     if( url->psz_path )
 644     {
 645         assert( url->psz_path[0] == '/' );
 646         url->psz_path++;
 647     }
 648
 649     char *type = strstr( url->psz_path, ";type=" );
 650     if( type )
 651     {
 652         *type = '\0';
 653         if( strchr( "iI", type[6] ) == NULL )
 654             return VLC_EGENERIC; /* ASCII and directory not supported */
 655     }
 656     vlc_uri_decode( url->psz_path );
 657     return VLC_SUCCESS;
 658 }
 659
 660
 661 /****************************************************************************
 662  * Open: connect to ftp server and ask for file
 663  ****************************************************************************/
 664 static int InOpen( vlc_object_t *p_this )
 665 {
 666     access_t     *p_access = (access_t*)p_this;
 667     access_sys_t *p_sys;
 668     char         *psz_arg;
 669     bool          b_directory;
 670
 671     /* Init p_access */
 672     p_sys = p_access->p_sys = (access_sys_t*)calloc( 1, sizeof( access_sys_t ) );
 673     if( !p_sys )
 674         return VLC_ENOMEM;
 675     p_sys->data = NULL;
 676     p_sys->out = false;
 677     p_sys->offset = 0;
 678     p_sys->size = UINT64_MAX;
 679
 680     if( readTLSMode( p_this, p_sys, p_access->psz_name ) )
 681         goto exit_error;
 682
 683     if( parseURL( &p_sys->url, p_access->psz_url, p_sys->tlsmode ) )
 684         goto exit_error;
 685
 686     if( Connect( p_this, p_sys ) )
 687         goto exit_error;
 688
 689     do {
 690         /* get size */
 691         if( p_sys->url.psz_path == NULL || !*p_sys->url.psz_path )
 692         {
 693             b_directory = true;
 694             break;
 695         }
 696
 697         if( ftp_SendCommand( p_this, p_sys, "SIZE %s",
 698                              p_sys->url.psz_path ) < 0 )
 699             goto error;
 700
 701         int val = ftp_RecvCommand( p_this, p_sys, NULL, &psz_arg );
 702         if( val == 2 )
 703         {
 704             b_directory = false;
 705             p_sys->size = atoll( &psz_arg[4] );
 706             free( psz_arg );
 707             msg_Dbg( p_access, "file size: %"PRIu64, p_sys->size );
 708             break;
 709         }
 710         if( val >= 0 )
 711             free( psz_arg );
 712
 713         if( ftp_SendCommand( p_this, p_sys, "CWD %s",
 714                              p_sys->url.psz_path ) < 0 )
 715             goto error;
 716
 717         if( ftp_RecvCommand( p_this, p_sys, NULL, NULL ) == 2 )
 718         {
 719             b_directory = true;
 720             break;
 721         }
 722
 723         msg_Err( p_this, "file or directory does not exist" );
 724         goto error;
 725     } while (0);
 726
 727     if( b_directory )
 728     {
 729         p_access->pf_readdir = DirRead;
 730         p_access->pf_control = access_vaDirectoryControlHelper;
 731     } else
 732         ACCESS_SET_CALLBACKS( Read, NULL, Control, Seek ); \
 733
 734     /* Start the 'stream' */
 735     if( ftp_StartStream( p_this, p_sys, 0, b_directory ) < 0 )
 736     {
 737         msg_Err( p_this, "cannot retrieve file" );
 738         goto error;
 739     }
 740
 741     return VLC_SUCCESS;
 742
 743 error:
 744     clearCmd( p_sys );
 745
 746 exit_error:
 747     vlc_UrlClean( &p_sys->url );
 748     vlc_tls_Delete( p_sys->p_creds );
 749     free( p_sys );
 750     return VLC_EGENERIC;
 751 }
 752
 753 #ifdef ENABLE_SOUT
 754 static int OutOpen( vlc_object_t *p_this )
 755 {
 756     sout_access_out_t *p_access = (sout_access_out_t *)p_this;
 757     access_sys_t      *p_sys;
 758
 759     p_sys = calloc( 1, sizeof( *p_sys ) );
 760     if( !p_sys )
 761         return VLC_ENOMEM;
 762
 763     /* Init p_access */
 764     p_sys->data = NULL;
 765     p_sys->out = true;
 766
 767     if( readTLSMode( p_this, p_sys, p_access->psz_access ) )
 768         goto exit_error;
 769
 770     if( parseURL( &p_sys->url, p_access->psz_path, p_sys->tlsmode ) )
 771         goto exit_error;
 772     if( p_sys->url.psz_path == NULL )
 773     {
 774         msg_Err( p_this, "no filename specified" );
 775         goto exit_error;
 776     }
 777
 778     if( Connect( p_this, p_sys ) )
 779         goto exit_error;
 780
 781     /* Start the 'stream' */
 782     if( ftp_StartStream( p_this, p_sys, 0, false ) < 0 )
 783     {
 784         msg_Err( p_access, "cannot store file" );
 785         clearCmd( p_sys );
 786         goto exit_error;
 787     }
 788
 789     p_access->pf_seek = OutSeek;
 790     p_access->pf_write = Write;
 791     p_access->p_sys = (void *)p_sys;
 792
 793     return VLC_SUCCESS;
 794
 795 exit_error:
 796     vlc_UrlClean( &p_sys->url );
 797     vlc_tls_Delete( p_sys->p_creds );
 798     free( p_sys );
 799     return VLC_EGENERIC;
 800 }
 801 #endif
 802
 803 /*****************************************************************************
 804  * Close: free unused data structures
 805  *****************************************************************************/
 806 static void Close( vlc_object_t *p_access, access_sys_t *p_sys )
 807 {
 808     msg_Dbg( p_access, "stopping stream" );
 809     ftp_StopStream( p_access, p_sys );
 810
 811     if( ftp_SendCommand( p_access, p_sys, "QUIT" ) < 0 )
 812     {
 813         msg_Warn( p_access, "cannot quit" );
 814     }
 815     else
 816     {
 817         ftp_RecvCommand( p_access, p_sys, NULL, NULL );
 818     }
 819
 820     clearCmd( p_sys );
 821
 822     /* free memory */
 823     vlc_UrlClean( &p_sys->url );
 824     vlc_tls_Delete( p_sys->p_creds );
 825     free( p_sys );
 826 }
 827
 828 static void InClose( vlc_object_t *p_this )
 829 {
 830     Close( p_this, ((access_t *)p_this)->p_sys);
 831 }
 832
 833 #ifdef ENABLE_SOUT
 834 static void OutClose( vlc_object_t *p_this )
 835 {
 836     Close( p_this, GET_OUT_SYS(p_this));
 837 }
 838 #endif
 839
 840
 841 /*****************************************************************************
 842  * Seek: try to go at the right place
 843  *****************************************************************************/
 844 static int _Seek( vlc_object_t *p_access, access_sys_t *p_sys, uint64_t i_pos )
 845 {
 846     msg_Dbg( p_access, "seeking to %"PRIu64, i_pos );
 847
 848     ftp_StopStream( (vlc_object_t *)p_access, p_sys );
 849     if( ftp_StartStream( (vlc_object_t *)p_access, p_sys, i_pos, false ) < 0 )
 850         return VLC_EGENERIC;
 851
 852     return VLC_SUCCESS;
 853 }
 854
 855 static int Seek( access_t *p_access, uint64_t i_pos )
 856 {
 857     access_sys_t *p_sys = p_access->p_sys;
 858
 859     int val = _Seek( (vlc_object_t *)p_access, p_sys, i_pos );
 860     if( val )
 861         return val;
 862
 863     p_sys->offset = i_pos;
 864
 865     return VLC_SUCCESS;
 866 }
 867
 868 #ifdef ENABLE_SOUT
 869 static int OutSeek( sout_access_out_t *p_access, off_t i_pos )
 870 {
 871     return _Seek( (vlc_object_t *)p_access, GET_OUT_SYS( p_access ), i_pos);
 872 }
 873 #endif
 874
 875 /*****************************************************************************
 876  * Read:
 877  *****************************************************************************/
 878 static ssize_t Read( access_t *p_access, void *p_buffer, size_t i_len )
 879 {
 880     access_sys_t *p_sys = p_access->p_sys;
 881
 882     assert( p_sys->data != NULL );
 883     assert( !p_sys->out );
 884
 885     ssize_t i_read = vlc_tls_Read( p_sys->data, p_buffer, i_len, false );
 886     if( i_read >= 0 )
 887         p_sys->offset += i_read;
 888     else if( errno != EINTR && errno != EAGAIN )
 889     {
 890         msg_Err( p_access, "receive error: %s", vlc_strerror_c(errno) );
 891         i_read = 0;
 892     }
 893
 894     return i_read;
 895 }
 896
 897 /*****************************************************************************
 898  * DirRead:
 899  *****************************************************************************/
 900 static int DirRead (access_t *p_access, input_item_node_t *p_current_node)
 901 {
 902     access_sys_t *p_sys = p_access->p_sys;
 903     int i_ret = VLC_SUCCESS;
 904
 905     assert( p_sys->data != NULL );
 906     assert( !p_sys->out );
 907
 908     struct access_fsdir fsdir;
 909     access_fsdir_init( &fsdir, p_access, p_current_node );
 910
 911     while (i_ret == VLC_SUCCESS)
 912     {
 913         char *psz_file;
 914         int type = ITEM_TYPE_UNKNOWN;
 915
 916         char *psz_line = vlc_tls_GetLine( p_sys->data );
 917         if( psz_line == NULL )
 918             break;
 919
 920         if( p_sys->features.b_mlst )
 921         {
 922             /* MLST Format is key=val;key=val...; FILENAME */
 923             if( strstr( psz_line, "type=dir" ) )
 924                 type = ITEM_TYPE_DIRECTORY;
 925             if( strstr( psz_line, "type=file" ) )
 926                 type = ITEM_TYPE_FILE;
 927
 928             /* Get the filename or fail */
 929             psz_file = strchr( psz_line, ' ' );
 930             if( psz_file )
 931                 psz_file++;
 932             else
 933             {
 934                 msg_Warn( p_access, "Empty filename in MLST list" );
 935                 free( psz_line );
 936                 continue;
 937             }
 938         }
 939         else
 940             psz_file = psz_line;
 941
 942         char *psz_uri;
 943         char *psz_filename = vlc_uri_encode( psz_file );
 944         if( psz_filename != NULL &&
 945             asprintf( &psz_uri, "%s://%s:%d%s%s/%s",
 946                       ( p_sys->tlsmode == NONE ) ? "ftp" :
 947                       ( ( p_sys->tlsmode == IMPLICIT ) ? "ftps" : "ftpes" ),
 948                       p_sys->url.psz_host, p_sys->url.i_port,
 949                       p_sys->url.psz_path ? "/" : "",
 950                       p_sys->url.psz_path ? p_sys->url.psz_path : "",
 951                       psz_filename ) != -1 )
 952         {
 953             i_ret = access_fsdir_additem( &fsdir, psz_uri, psz_file,
 954                                           type, ITEM_NET );
 955             free( psz_uri );
 956         }
 957         free( psz_filename );
 958         free( psz_line );
 959     }
 960
 961     access_fsdir_finish( &fsdir, i_ret == VLC_SUCCESS );
 962     return i_ret;
 963 }
 964
 965 /*****************************************************************************
 966  * Write:
 967  *****************************************************************************/
 968 #ifdef ENABLE_SOUT
 969 static ssize_t Write( sout_access_out_t *p_access, block_t *p_buffer )
 970 {
 971     access_sys_t *p_sys = GET_OUT_SYS(p_access);
 972     size_t i_write = 0;
 973
 974     assert( p_sys->data != NULL );
 975
 976     while( p_buffer != NULL )
 977     {
 978         block_t *p_next = p_buffer->p_next;
 979
 980         i_write += vlc_tls_Write( p_sys->data,
 981                                   p_buffer->p_buffer, p_buffer->i_buffer );
 982         block_Release( p_buffer );
 983
 984         p_buffer = p_next;
 985     }
 986
 987     return i_write;
 988 }
 989 #endif
 990
 991 /*****************************************************************************
 992  * Control:
 993  *****************************************************************************/
 994 static int Control( access_t *p_access, int i_query, va_list args )
 995 {
 996     access_sys_t *sys = p_access->p_sys;
 997     bool    *pb_bool;
 998     int64_t *pi_64;
 999
1000     switch( i_query )
1001     {
1002         case STREAM_CAN_SEEK:
1003             pb_bool = va_arg( args, bool * );
1004             *pb_bool = true;
1005             break;
1006         case STREAM_CAN_FASTSEEK:
1007             pb_bool = va_arg( args, bool * );
1008             *pb_bool = false;
1009             break;
1010         case STREAM_CAN_PAUSE:
1011             pb_bool = va_arg( args, bool * );
1012             *pb_bool = true;    /* FIXME */
1013             break;
1014         case STREAM_CAN_CONTROL_PACE:
1015             pb_bool = va_arg( args, bool * );
1016             *pb_bool = true;    /* FIXME */
1017             break;
1018         case STREAM_GET_SIZE:
1019             if( sys->size == UINT64_MAX )
1020                 return VLC_EGENERIC;
1021             *va_arg( args, uint64_t * ) = sys->size;
1022             break;
1023
1024         case STREAM_GET_PTS_DELAY:
1025             pi_64 = va_arg( args, int64_t * );
1026             *pi_64 = INT64_C(1000)
1027                    * var_InheritInteger( p_access, "network-caching" );
1028             break;
1029
1030         case STREAM_SET_PAUSE_STATE:
1031             pb_bool = va_arg( args, bool * );
1032             if ( !pb_bool )
1033                  return Seek( p_access, sys->offset );
1034             break;
1035
1036         default:
1037             return VLC_EGENERIC;
1038
1039     }
1040     return VLC_SUCCESS;
1041 }
1042
1043 static int ftp_StartStream( vlc_object_t *p_access, access_sys_t *p_sys,
1044                             uint64_t i_start, bool b_directory )
1045 {
1046     char psz_ipv4[16], *psz_ip = p_sys->sz_epsv_ip;
1047     int  i_answer;
1048     char *psz_arg, *psz_parser;
1049     int  i_port;
1050
1051     assert( p_sys->data == NULL );
1052
1053     if( ( ftp_SendCommand( p_access, p_sys, *psz_ip ? "EPSV" : "PASV" ) < 0 )
1054      || ( ftp_RecvCommand( p_access, p_sys, &i_answer, &psz_arg ) != 2 ) )
1055     {
1056         msg_Err( p_access, "cannot set passive mode" );
1057         return VLC_EGENERIC;
1058     }
1059
1060     psz_parser = strchr( psz_arg, '(' );
1061     if( psz_parser == NULL )
1062     {
1063         free( psz_arg );
1064         msg_Err( p_access, "cannot parse passive mode response" );
1065         return VLC_EGENERIC;
1066     }
1067
1068     if( *psz_ip )
1069     {
1070         if( sscanf( psz_parser, "(%*3c%u", &i_port ) < 1 )
1071         {
1072             free( psz_arg );
1073             msg_Err( p_access, "cannot parse passive mode response" );
1074             return VLC_EGENERIC;
1075         }
1076     }
1077     else
1078     {
1079         unsigned a1, a2, a3, a4, p1, p2;
1080
1081         if( ( sscanf( psz_parser, "(%u,%u,%u,%u,%u,%u", &a1, &a2, &a3, &a4,
1082                       &p1, &p2 ) < 6 ) || ( a1 > 255 ) || ( a2 > 255 )
1083          || ( a3 > 255 ) || ( a4 > 255 ) || ( p1 > 255 ) || ( p2 > 255 ) )
1084         {
1085             free( psz_arg );
1086             msg_Err( p_access, "cannot parse passive mode response" );
1087             return VLC_EGENERIC;
1088         }
1089
1090         sprintf( psz_ipv4, "%u.%u.%u.%u", a1, a2, a3, a4 );
1091         psz_ip = psz_ipv4;
1092         i_port = (p1 << 8) | p2;
1093     }
1094     free( psz_arg );
1095
1096     msg_Dbg( p_access, "ip:%s port:%d", psz_ip, i_port );
1097
1098     if( ftp_SendCommand( p_access, p_sys, "TYPE I" ) < 0 ||
1099         ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) != 2 )
1100     {
1101         msg_Err( p_access, "cannot set binary transfer mode" );
1102         return VLC_EGENERIC;
1103     }
1104
1105     if( i_start > 0 )
1106     {
1107         if( ftp_SendCommand( p_access, p_sys, "REST %"PRIu64, i_start ) < 0 ||
1108             ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) > 3 )
1109         {
1110             msg_Err( p_access, "cannot set restart offset" );
1111             return VLC_EGENERIC;
1112         }
1113     }
1114
1115     msg_Dbg( p_access, "waiting for data connection..." );
1116     p_sys->data = vlc_tls_SocketOpenTCP( p_access, psz_ip, i_port );
1117     if( p_sys->data == NULL )
1118     {
1119         msg_Err( p_access, "failed to connect with server" );
1120         return VLC_EGENERIC;
1121     }
1122     msg_Dbg( p_access, "connection with \"%s:%d\" successful",
1123              psz_ip, i_port );
1124
1125     if( b_directory )
1126     {
1127         if( p_sys->features.b_mlst &&
1128             ftp_SendCommand( p_access, p_sys, "MLSD" ) >= 0 &&
1129             ftp_RecvCommand( p_access, p_sys, NULL, NULL ) <= 2 )
1130         {
1131             msg_Dbg( p_access, "Using MLST extension to list" );
1132         }
1133         else
1134         if( ftp_SendCommand( p_access, p_sys, "NLST" ) < 0 ||
1135             ftp_RecvCommand( p_access, p_sys, NULL, NULL ) > 2 )
1136         {
1137             msg_Err( p_access, "cannot list directory contents" );
1138             return VLC_EGENERIC;
1139         }
1140     }
1141     else
1142     {
1143         /* "1xx" message */
1144         assert( p_sys->url.psz_path );
1145         if( ftp_SendCommand( p_access, p_sys, "%s %s",
1146                              p_sys->out ? "STOR" : "RETR",
1147                              p_sys->url.psz_path ) < 0
1148          || ftp_RecvCommand( p_access, p_sys, &i_answer, NULL ) > 2 )
1149         {
1150             msg_Err( p_access, "cannot retrieve file" );
1151             return VLC_EGENERIC;
1152         }
1153     }
1154
1155     if( p_sys->tlsmode != NONE )
1156     {
1157         /* FIXME: Do Reuse TLS Session */
1158         /* TLS/SSL handshake */
1159         vlc_tls_t *secure = vlc_tls_ClientSessionCreate( p_sys->p_creds,
1160                             p_sys->data, p_sys->url.psz_host,
1161                             ( p_sys->tlsmode == EXPLICIT ) ? "ftpes-data"
1162                                                            : "ftps-data",
1163                                                          NULL, NULL );
1164         if( secure == NULL )
1165         {
1166             msg_Err( p_access, "cannot establish FTP/TLS session for data" \
1167                              ": server not allowing new session ?" );
1168             return VLC_EGENERIC;
1169         }
1170         p_sys->data = secure;
1171     }
1172
1173     return VLC_SUCCESS;
1174 }
1175
1176 static int ftp_StopStream ( vlc_object_t *p_access, access_sys_t *p_sys )
1177 {
1178     int ret = VLC_SUCCESS;
1179
1180     if( ftp_SendCommand( p_access, p_sys, "ABOR" ) < 0 )
1181     {
1182         msg_Warn( p_access, "cannot abort file" );
1183         ret = VLC_EGENERIC;
1184     }
1185
1186     if( p_sys->data != NULL )
1187     {
1188         vlc_tls_Close( p_sys->data );
1189         p_sys->data = NULL;
1190
1191         if( ret == VLC_SUCCESS )
1192             /* Read the final response from RETR/STOR, i.e. 426 or 226 */
1193             ftp_RecvCommand( p_access, p_sys, NULL, NULL );
1194     }
1195
1196     if( ret == VLC_SUCCESS )
1197         /* Read the response from ABOR, i.e. 226 or 225 */
1198         ftp_RecvCommand( p_access, p_sys, NULL, NULL );
1199
1200     return ret;
1201 }