|
290
|
1
|
|
|
2 /*
|
|
|
3 * Copyright (C) Igor Sysoev
|
|
660
|
4 * Copyright (C) Nginx, Inc.
|
|
290
|
5 */
|
|
|
6
|
|
|
7
|
|
|
8 #include <ngx_config.h>
|
|
|
9 #include <ngx_core.h>
|
|
|
10 #include <ngx_event.h>
|
|
|
11 #include <ngx_mail.h>
|
|
|
12
|
|
|
13
|
|
336
|
14 ngx_int_t
|
|
|
15 ngx_mail_pop3_parse_command(ngx_mail_session_t *s)
|
|
290
|
16 {
|
|
|
17 u_char ch, *p, *c, c0, c1, c2, c3;
|
|
|
18 ngx_str_t *arg;
|
|
|
19 enum {
|
|
|
20 sw_start = 0,
|
|
|
21 sw_spaces_before_argument,
|
|
|
22 sw_argument,
|
|
|
23 sw_almost_done
|
|
|
24 } state;
|
|
|
25
|
|
|
26 state = s->state;
|
|
|
27
|
|
|
28 for (p = s->buffer->pos; p < s->buffer->last; p++) {
|
|
|
29 ch = *p;
|
|
|
30
|
|
|
31 switch (state) {
|
|
|
32
|
|
|
33 /* POP3 command */
|
|
|
34 case sw_start:
|
|
|
35 if (ch == ' ' || ch == CR || ch == LF) {
|
|
|
36 c = s->buffer->start;
|
|
|
37
|
|
|
38 if (p - c == 4) {
|
|
|
39
|
|
|
40 c0 = ngx_toupper(c[0]);
|
|
|
41 c1 = ngx_toupper(c[1]);
|
|
|
42 c2 = ngx_toupper(c[2]);
|
|
|
43 c3 = ngx_toupper(c[3]);
|
|
|
44
|
|
|
45 if (c0 == 'U' && c1 == 'S' && c2 == 'E' && c3 == 'R')
|
|
|
46 {
|
|
|
47 s->command = NGX_POP3_USER;
|
|
|
48
|
|
|
49 } else if (c0 == 'P' && c1 == 'A' && c2 == 'S' && c3 == 'S')
|
|
|
50 {
|
|
|
51 s->command = NGX_POP3_PASS;
|
|
|
52
|
|
|
53 } else if (c0 == 'A' && c1 == 'P' && c2 == 'O' && c3 == 'P')
|
|
|
54 {
|
|
|
55 s->command = NGX_POP3_APOP;
|
|
|
56
|
|
|
57 } else if (c0 == 'Q' && c1 == 'U' && c2 == 'I' && c3 == 'T')
|
|
|
58 {
|
|
|
59 s->command = NGX_POP3_QUIT;
|
|
|
60
|
|
|
61 } else if (c0 == 'C' && c1 == 'A' && c2 == 'P' && c3 == 'A')
|
|
|
62 {
|
|
|
63 s->command = NGX_POP3_CAPA;
|
|
|
64
|
|
|
65 } else if (c0 == 'A' && c1 == 'U' && c2 == 'T' && c3 == 'H')
|
|
|
66 {
|
|
|
67 s->command = NGX_POP3_AUTH;
|
|
|
68
|
|
|
69 } else if (c0 == 'N' && c1 == 'O' && c2 == 'O' && c3 == 'P')
|
|
|
70 {
|
|
|
71 s->command = NGX_POP3_NOOP;
|
|
|
72 #if (NGX_MAIL_SSL)
|
|
|
73 } else if (c0 == 'S' && c1 == 'T' && c2 == 'L' && c3 == 'S')
|
|
|
74 {
|
|
|
75 s->command = NGX_POP3_STLS;
|
|
|
76 #endif
|
|
|
77 } else {
|
|
|
78 goto invalid;
|
|
|
79 }
|
|
|
80
|
|
|
81 } else {
|
|
|
82 goto invalid;
|
|
|
83 }
|
|
|
84
|
|
|
85 switch (ch) {
|
|
|
86 case ' ':
|
|
|
87 state = sw_spaces_before_argument;
|
|
|
88 break;
|
|
|
89 case CR:
|
|
|
90 state = sw_almost_done;
|
|
|
91 break;
|
|
|
92 case LF:
|
|
|
93 goto done;
|
|
|
94 }
|
|
|
95 break;
|
|
|
96 }
|
|
|
97
|
|
|
98 if ((ch < 'A' || ch > 'Z') && (ch < 'a' || ch > 'z')) {
|
|
|
99 goto invalid;
|
|
|
100 }
|
|
|
101
|
|
|
102 break;
|
|
|
103
|
|
|
104 case sw_spaces_before_argument:
|
|
|
105 switch (ch) {
|
|
|
106 case ' ':
|
|
|
107 break;
|
|
|
108 case CR:
|
|
|
109 state = sw_almost_done;
|
|
|
110 s->arg_end = p;
|
|
|
111 break;
|
|
|
112 case LF:
|
|
|
113 s->arg_end = p;
|
|
|
114 goto done;
|
|
|
115 default:
|
|
|
116 if (s->args.nelts <= 2) {
|
|
|
117 state = sw_argument;
|
|
|
118 s->arg_start = p;
|
|
|
119 break;
|
|
|
120 }
|
|
|
121 goto invalid;
|
|
|
122 }
|
|
|
123 break;
|
|
|
124
|
|
|
125 case sw_argument:
|
|
|
126 switch (ch) {
|
|
|
127
|
|
|
128 case ' ':
|
|
|
129
|
|
|
130 /*
|
|
|
131 * the space should be considered as part of the at username
|
|
|
132 * or password, but not of argument in other commands
|
|
|
133 */
|
|
|
134
|
|
|
135 if (s->command == NGX_POP3_USER
|
|
|
136 || s->command == NGX_POP3_PASS)
|
|
|
137 {
|
|
|
138 break;
|
|
|
139 }
|
|
|
140
|
|
|
141 /* fall through */
|
|
|
142
|
|
|
143 case CR:
|
|
|
144 case LF:
|
|
|
145 arg = ngx_array_push(&s->args);
|
|
|
146 if (arg == NULL) {
|
|
|
147 return NGX_ERROR;
|
|
|
148 }
|
|
|
149 arg->len = p - s->arg_start;
|
|
|
150 arg->data = s->arg_start;
|
|
|
151 s->arg_start = NULL;
|
|
|
152
|
|
|
153 switch (ch) {
|
|
|
154 case ' ':
|
|
|
155 state = sw_spaces_before_argument;
|
|
|
156 break;
|
|
|
157 case CR:
|
|
|
158 state = sw_almost_done;
|
|
|
159 break;
|
|
|
160 case LF:
|
|
|
161 goto done;
|
|
|
162 }
|
|
|
163 break;
|
|
|
164
|
|
|
165 default:
|
|
|
166 break;
|
|
|
167 }
|
|
|
168 break;
|
|
|
169
|
|
|
170 case sw_almost_done:
|
|
|
171 switch (ch) {
|
|
|
172 case LF:
|
|
|
173 goto done;
|
|
|
174 default:
|
|
|
175 goto invalid;
|
|
|
176 }
|
|
|
177 }
|
|
|
178 }
|
|
|
179
|
|
|
180 s->buffer->pos = p;
|
|
|
181 s->state = state;
|
|
|
182
|
|
|
183 return NGX_AGAIN;
|
|
|
184
|
|
|
185 done:
|
|
|
186
|
|
|
187 s->buffer->pos = p + 1;
|
|
|
188
|
|
|
189 if (s->arg_start) {
|
|
|
190 arg = ngx_array_push(&s->args);
|
|
|
191 if (arg == NULL) {
|
|
|
192 return NGX_ERROR;
|
|
|
193 }
|
|
|
194 arg->len = s->arg_end - s->arg_start;
|
|
|
195 arg->data = s->arg_start;
|
|
|
196 s->arg_start = NULL;
|
|
|
197 }
|
|
|
198
|
|
|
199 s->state = (s->command != NGX_POP3_AUTH) ? sw_start : sw_argument;
|
|
|
200
|
|
|
201 return NGX_OK;
|
|
|
202
|
|
|
203 invalid:
|
|
|
204
|
|
|
205 s->state = sw_start;
|
|
|
206 s->arg_start = NULL;
|
|
|
207
|
|
|
208 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
209 }
|
|
|
210
|
|
|
211
|
|
336
|
212 ngx_int_t
|
|
|
213 ngx_mail_imap_parse_command(ngx_mail_session_t *s)
|
|
290
|
214 {
|
|
|
215 u_char ch, *p, *c;
|
|
|
216 ngx_str_t *arg;
|
|
|
217 enum {
|
|
|
218 sw_start = 0,
|
|
|
219 sw_spaces_before_command,
|
|
|
220 sw_command,
|
|
|
221 sw_spaces_before_argument,
|
|
|
222 sw_argument,
|
|
|
223 sw_backslash,
|
|
|
224 sw_literal,
|
|
|
225 sw_no_sync_literal_argument,
|
|
|
226 sw_start_literal_argument,
|
|
|
227 sw_literal_argument,
|
|
|
228 sw_end_literal_argument,
|
|
|
229 sw_almost_done
|
|
|
230 } state;
|
|
|
231
|
|
|
232 state = s->state;
|
|
|
233
|
|
|
234 for (p = s->buffer->pos; p < s->buffer->last; p++) {
|
|
|
235 ch = *p;
|
|
|
236
|
|
|
237 switch (state) {
|
|
|
238
|
|
|
239 /* IMAP tag */
|
|
|
240 case sw_start:
|
|
|
241 switch (ch) {
|
|
|
242 case ' ':
|
|
|
243 s->tag.len = p - s->buffer->start + 1;
|
|
|
244 s->tag.data = s->buffer->start;
|
|
|
245 state = sw_spaces_before_command;
|
|
|
246 break;
|
|
|
247 case CR:
|
|
|
248 s->state = sw_start;
|
|
|
249 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
250 case LF:
|
|
|
251 s->state = sw_start;
|
|
|
252 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
253 }
|
|
|
254 break;
|
|
|
255
|
|
|
256 case sw_spaces_before_command:
|
|
|
257 switch (ch) {
|
|
|
258 case ' ':
|
|
|
259 break;
|
|
|
260 case CR:
|
|
|
261 s->state = sw_start;
|
|
|
262 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
263 case LF:
|
|
|
264 s->state = sw_start;
|
|
|
265 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
266 default:
|
|
|
267 s->cmd_start = p;
|
|
|
268 state = sw_command;
|
|
|
269 break;
|
|
|
270 }
|
|
|
271 break;
|
|
|
272
|
|
|
273 case sw_command:
|
|
|
274 if (ch == ' ' || ch == CR || ch == LF) {
|
|
|
275
|
|
|
276 c = s->cmd_start;
|
|
|
277
|
|
|
278 switch (p - c) {
|
|
|
279
|
|
|
280 case 4:
|
|
|
281 if ((c[0] == 'N' || c[0] == 'n')
|
|
|
282 && (c[1] == 'O'|| c[1] == 'o')
|
|
|
283 && (c[2] == 'O'|| c[2] == 'o')
|
|
|
284 && (c[3] == 'P'|| c[3] == 'p'))
|
|
|
285 {
|
|
|
286 s->command = NGX_IMAP_NOOP;
|
|
|
287
|
|
|
288 } else {
|
|
|
289 goto invalid;
|
|
|
290 }
|
|
|
291 break;
|
|
|
292
|
|
|
293 case 5:
|
|
|
294 if ((c[0] == 'L'|| c[0] == 'l')
|
|
|
295 && (c[1] == 'O'|| c[1] == 'o')
|
|
|
296 && (c[2] == 'G'|| c[2] == 'g')
|
|
|
297 && (c[3] == 'I'|| c[3] == 'i')
|
|
|
298 && (c[4] == 'N'|| c[4] == 'n'))
|
|
|
299 {
|
|
|
300 s->command = NGX_IMAP_LOGIN;
|
|
|
301
|
|
|
302 } else {
|
|
|
303 goto invalid;
|
|
|
304 }
|
|
|
305 break;
|
|
|
306
|
|
|
307 case 6:
|
|
|
308 if ((c[0] == 'L'|| c[0] == 'l')
|
|
|
309 && (c[1] == 'O'|| c[1] == 'o')
|
|
|
310 && (c[2] == 'G'|| c[2] == 'g')
|
|
|
311 && (c[3] == 'O'|| c[3] == 'o')
|
|
|
312 && (c[4] == 'U'|| c[4] == 'u')
|
|
|
313 && (c[5] == 'T'|| c[5] == 't'))
|
|
|
314 {
|
|
|
315 s->command = NGX_IMAP_LOGOUT;
|
|
|
316
|
|
|
317 } else {
|
|
|
318 goto invalid;
|
|
|
319 }
|
|
|
320 break;
|
|
|
321
|
|
|
322 #if (NGX_MAIL_SSL)
|
|
|
323 case 8:
|
|
|
324 if ((c[0] == 'S'|| c[0] == 's')
|
|
|
325 && (c[1] == 'T'|| c[1] == 't')
|
|
|
326 && (c[2] == 'A'|| c[2] == 'a')
|
|
|
327 && (c[3] == 'R'|| c[3] == 'r')
|
|
|
328 && (c[4] == 'T'|| c[4] == 't')
|
|
|
329 && (c[5] == 'T'|| c[5] == 't')
|
|
|
330 && (c[6] == 'L'|| c[6] == 'l')
|
|
|
331 && (c[7] == 'S'|| c[7] == 's'))
|
|
|
332 {
|
|
|
333 s->command = NGX_IMAP_STARTTLS;
|
|
|
334
|
|
|
335 } else {
|
|
|
336 goto invalid;
|
|
|
337 }
|
|
|
338 break;
|
|
|
339 #endif
|
|
|
340
|
|
|
341 case 10:
|
|
|
342 if ((c[0] == 'C'|| c[0] == 'c')
|
|
|
343 && (c[1] == 'A'|| c[1] == 'a')
|
|
|
344 && (c[2] == 'P'|| c[2] == 'p')
|
|
|
345 && (c[3] == 'A'|| c[3] == 'a')
|
|
|
346 && (c[4] == 'B'|| c[4] == 'b')
|
|
|
347 && (c[5] == 'I'|| c[5] == 'i')
|
|
|
348 && (c[6] == 'L'|| c[6] == 'l')
|
|
|
349 && (c[7] == 'I'|| c[7] == 'i')
|
|
|
350 && (c[8] == 'T'|| c[8] == 't')
|
|
|
351 && (c[9] == 'Y'|| c[9] == 'y'))
|
|
|
352 {
|
|
|
353 s->command = NGX_IMAP_CAPABILITY;
|
|
|
354
|
|
|
355 } else {
|
|
|
356 goto invalid;
|
|
|
357 }
|
|
|
358 break;
|
|
|
359
|
|
322
|
360 case 12:
|
|
|
361 if ((c[0] == 'A'|| c[0] == 'a')
|
|
|
362 && (c[1] == 'U'|| c[1] == 'u')
|
|
|
363 && (c[2] == 'T'|| c[2] == 't')
|
|
|
364 && (c[3] == 'H'|| c[3] == 'h')
|
|
|
365 && (c[4] == 'E'|| c[4] == 'e')
|
|
|
366 && (c[5] == 'N'|| c[5] == 'n')
|
|
|
367 && (c[6] == 'T'|| c[6] == 't')
|
|
|
368 && (c[7] == 'I'|| c[7] == 'i')
|
|
|
369 && (c[8] == 'C'|| c[8] == 'c')
|
|
|
370 && (c[9] == 'A'|| c[9] == 'a')
|
|
|
371 && (c[10] == 'T'|| c[10] == 't')
|
|
|
372 && (c[11] == 'E'|| c[11] == 'e'))
|
|
|
373 {
|
|
|
374 s->command = NGX_IMAP_AUTHENTICATE;
|
|
|
375
|
|
|
376 } else {
|
|
|
377 goto invalid;
|
|
|
378 }
|
|
|
379 break;
|
|
|
380
|
|
290
|
381 default:
|
|
|
382 goto invalid;
|
|
|
383 }
|
|
|
384
|
|
|
385 switch (ch) {
|
|
|
386 case ' ':
|
|
|
387 state = sw_spaces_before_argument;
|
|
|
388 break;
|
|
|
389 case CR:
|
|
|
390 state = sw_almost_done;
|
|
|
391 break;
|
|
|
392 case LF:
|
|
|
393 goto done;
|
|
|
394 }
|
|
|
395 break;
|
|
|
396 }
|
|
|
397
|
|
|
398 if ((ch < 'A' || ch > 'Z') && (ch < 'a' || ch > 'z')) {
|
|
|
399 goto invalid;
|
|
|
400 }
|
|
|
401
|
|
|
402 break;
|
|
|
403
|
|
|
404 case sw_spaces_before_argument:
|
|
|
405 switch (ch) {
|
|
|
406 case ' ':
|
|
|
407 break;
|
|
|
408 case CR:
|
|
|
409 state = sw_almost_done;
|
|
|
410 s->arg_end = p;
|
|
|
411 break;
|
|
|
412 case LF:
|
|
|
413 s->arg_end = p;
|
|
|
414 goto done;
|
|
|
415 case '"':
|
|
|
416 if (s->args.nelts <= 2) {
|
|
|
417 s->quoted = 1;
|
|
|
418 s->arg_start = p + 1;
|
|
|
419 state = sw_argument;
|
|
|
420 break;
|
|
|
421 }
|
|
|
422 goto invalid;
|
|
|
423 case '{':
|
|
|
424 if (s->args.nelts <= 2) {
|
|
|
425 state = sw_literal;
|
|
|
426 break;
|
|
|
427 }
|
|
|
428 goto invalid;
|
|
|
429 default:
|
|
|
430 if (s->args.nelts <= 2) {
|
|
|
431 s->arg_start = p;
|
|
|
432 state = sw_argument;
|
|
|
433 break;
|
|
|
434 }
|
|
|
435 goto invalid;
|
|
|
436 }
|
|
|
437 break;
|
|
|
438
|
|
|
439 case sw_argument:
|
|
328
|
440 if (ch == ' ' && s->quoted) {
|
|
|
441 break;
|
|
|
442 }
|
|
|
443
|
|
290
|
444 switch (ch) {
|
|
|
445 case '"':
|
|
|
446 if (!s->quoted) {
|
|
|
447 break;
|
|
|
448 }
|
|
|
449 s->quoted = 0;
|
|
|
450 /* fall through */
|
|
|
451 case ' ':
|
|
|
452 case CR:
|
|
|
453 case LF:
|
|
|
454 arg = ngx_array_push(&s->args);
|
|
|
455 if (arg == NULL) {
|
|
|
456 return NGX_ERROR;
|
|
|
457 }
|
|
|
458 arg->len = p - s->arg_start;
|
|
|
459 arg->data = s->arg_start;
|
|
|
460 s->arg_start = NULL;
|
|
|
461
|
|
|
462 switch (ch) {
|
|
|
463 case '"':
|
|
|
464 case ' ':
|
|
|
465 state = sw_spaces_before_argument;
|
|
|
466 break;
|
|
|
467 case CR:
|
|
|
468 state = sw_almost_done;
|
|
|
469 break;
|
|
|
470 case LF:
|
|
|
471 goto done;
|
|
|
472 }
|
|
|
473 break;
|
|
|
474 case '\\':
|
|
|
475 if (s->quoted) {
|
|
|
476 s->backslash = 1;
|
|
|
477 state = sw_backslash;
|
|
|
478 }
|
|
|
479 break;
|
|
|
480 }
|
|
|
481 break;
|
|
|
482
|
|
|
483 case sw_backslash:
|
|
|
484 switch (ch) {
|
|
|
485 case CR:
|
|
|
486 case LF:
|
|
|
487 goto invalid;
|
|
|
488 default:
|
|
|
489 state = sw_argument;
|
|
|
490 }
|
|
|
491 break;
|
|
|
492
|
|
|
493 case sw_literal:
|
|
|
494 if (ch >= '0' && ch <= '9') {
|
|
|
495 s->literal_len = s->literal_len * 10 + (ch - '0');
|
|
|
496 break;
|
|
|
497 }
|
|
|
498 if (ch == '}') {
|
|
|
499 state = sw_start_literal_argument;
|
|
|
500 break;
|
|
|
501 }
|
|
|
502 if (ch == '+') {
|
|
|
503 state = sw_no_sync_literal_argument;
|
|
|
504 break;
|
|
|
505 }
|
|
|
506 goto invalid;
|
|
|
507
|
|
|
508 case sw_no_sync_literal_argument:
|
|
|
509 if (ch == '}') {
|
|
|
510 s->no_sync_literal = 1;
|
|
|
511 state = sw_start_literal_argument;
|
|
|
512 break;
|
|
|
513 }
|
|
|
514 goto invalid;
|
|
|
515
|
|
|
516 case sw_start_literal_argument:
|
|
|
517 switch (ch) {
|
|
|
518 case CR:
|
|
|
519 break;
|
|
|
520 case LF:
|
|
|
521 s->buffer->pos = p + 1;
|
|
|
522 s->arg_start = p + 1;
|
|
|
523 if (s->no_sync_literal == 0) {
|
|
|
524 s->state = sw_literal_argument;
|
|
|
525 return NGX_IMAP_NEXT;
|
|
|
526 }
|
|
|
527 state = sw_literal_argument;
|
|
|
528 s->no_sync_literal = 0;
|
|
|
529 break;
|
|
|
530 default:
|
|
|
531 goto invalid;
|
|
|
532 }
|
|
|
533 break;
|
|
|
534
|
|
|
535 case sw_literal_argument:
|
|
|
536 if (s->literal_len && --s->literal_len) {
|
|
|
537 break;
|
|
|
538 }
|
|
|
539
|
|
|
540 arg = ngx_array_push(&s->args);
|
|
|
541 if (arg == NULL) {
|
|
|
542 return NGX_ERROR;
|
|
|
543 }
|
|
|
544 arg->len = p + 1 - s->arg_start;
|
|
|
545 arg->data = s->arg_start;
|
|
|
546 s->arg_start = NULL;
|
|
|
547 state = sw_end_literal_argument;
|
|
|
548
|
|
|
549 break;
|
|
|
550
|
|
|
551 case sw_end_literal_argument:
|
|
|
552 switch (ch) {
|
|
|
553 case '{':
|
|
|
554 if (s->args.nelts <= 2) {
|
|
|
555 state = sw_literal;
|
|
|
556 break;
|
|
|
557 }
|
|
|
558 goto invalid;
|
|
|
559 case CR:
|
|
|
560 state = sw_almost_done;
|
|
|
561 break;
|
|
|
562 case LF:
|
|
|
563 goto done;
|
|
|
564 default:
|
|
|
565 state = sw_spaces_before_argument;
|
|
|
566 break;
|
|
|
567 }
|
|
|
568 break;
|
|
|
569
|
|
|
570 case sw_almost_done:
|
|
|
571 switch (ch) {
|
|
|
572 case LF:
|
|
|
573 goto done;
|
|
|
574 default:
|
|
|
575 goto invalid;
|
|
|
576 }
|
|
|
577 }
|
|
|
578 }
|
|
|
579
|
|
|
580 s->buffer->pos = p;
|
|
|
581 s->state = state;
|
|
|
582
|
|
|
583 return NGX_AGAIN;
|
|
|
584
|
|
|
585 done:
|
|
|
586
|
|
|
587 s->buffer->pos = p + 1;
|
|
|
588
|
|
|
589 if (s->arg_start) {
|
|
|
590 arg = ngx_array_push(&s->args);
|
|
|
591 if (arg == NULL) {
|
|
|
592 return NGX_ERROR;
|
|
|
593 }
|
|
|
594 arg->len = s->arg_end - s->arg_start;
|
|
|
595 arg->data = s->arg_start;
|
|
|
596
|
|
|
597 s->arg_start = NULL;
|
|
|
598 s->cmd_start = NULL;
|
|
|
599 s->quoted = 0;
|
|
|
600 s->no_sync_literal = 0;
|
|
|
601 s->literal_len = 0;
|
|
|
602 }
|
|
|
603
|
|
322
|
604 s->state = (s->command != NGX_IMAP_AUTHENTICATE) ? sw_start : sw_argument;
|
|
290
|
605
|
|
|
606 return NGX_OK;
|
|
|
607
|
|
|
608 invalid:
|
|
|
609
|
|
|
610 s->state = sw_start;
|
|
|
611 s->quoted = 0;
|
|
|
612 s->no_sync_literal = 0;
|
|
|
613 s->literal_len = 0;
|
|
|
614
|
|
|
615 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
616 }
|
|
|
617
|
|
|
618
|
|
336
|
619 ngx_int_t
|
|
|
620 ngx_mail_smtp_parse_command(ngx_mail_session_t *s)
|
|
290
|
621 {
|
|
|
622 u_char ch, *p, *c, c0, c1, c2, c3;
|
|
|
623 ngx_str_t *arg;
|
|
|
624 enum {
|
|
|
625 sw_start = 0,
|
|
|
626 sw_spaces_before_argument,
|
|
|
627 sw_argument,
|
|
|
628 sw_almost_done
|
|
|
629 } state;
|
|
|
630
|
|
|
631 state = s->state;
|
|
|
632
|
|
|
633 for (p = s->buffer->pos; p < s->buffer->last; p++) {
|
|
|
634 ch = *p;
|
|
|
635
|
|
|
636 switch (state) {
|
|
|
637
|
|
|
638 /* SMTP command */
|
|
|
639 case sw_start:
|
|
|
640 if (ch == ' ' || ch == CR || ch == LF) {
|
|
|
641 c = s->buffer->start;
|
|
|
642
|
|
|
643 if (p - c == 4) {
|
|
|
644
|
|
|
645 c0 = ngx_toupper(c[0]);
|
|
|
646 c1 = ngx_toupper(c[1]);
|
|
|
647 c2 = ngx_toupper(c[2]);
|
|
|
648 c3 = ngx_toupper(c[3]);
|
|
|
649
|
|
|
650 if (c0 == 'H' && c1 == 'E' && c2 == 'L' && c3 == 'O')
|
|
|
651 {
|
|
|
652 s->command = NGX_SMTP_HELO;
|
|
|
653
|
|
|
654 } else if (c0 == 'E' && c1 == 'H' && c2 == 'L' && c3 == 'O')
|
|
|
655 {
|
|
|
656 s->command = NGX_SMTP_EHLO;
|
|
|
657
|
|
|
658 } else if (c0 == 'Q' && c1 == 'U' && c2 == 'I' && c3 == 'T')
|
|
|
659 {
|
|
|
660 s->command = NGX_SMTP_QUIT;
|
|
|
661
|
|
|
662 } else if (c0 == 'A' && c1 == 'U' && c2 == 'T' && c3 == 'H')
|
|
|
663 {
|
|
|
664 s->command = NGX_SMTP_AUTH;
|
|
|
665
|
|
|
666 } else if (c0 == 'N' && c1 == 'O' && c2 == 'O' && c3 == 'P')
|
|
|
667 {
|
|
|
668 s->command = NGX_SMTP_NOOP;
|
|
|
669
|
|
|
670 } else if (c0 == 'M' && c1 == 'A' && c2 == 'I' && c3 == 'L')
|
|
|
671 {
|
|
|
672 s->command = NGX_SMTP_MAIL;
|
|
|
673
|
|
|
674 } else if (c0 == 'R' && c1 == 'S' && c2 == 'E' && c3 == 'T')
|
|
|
675 {
|
|
|
676 s->command = NGX_SMTP_RSET;
|
|
|
677
|
|
322
|
678 } else if (c0 == 'R' && c1 == 'C' && c2 == 'P' && c3 == 'T')
|
|
|
679 {
|
|
|
680 s->command = NGX_SMTP_RCPT;
|
|
|
681
|
|
|
682 } else if (c0 == 'V' && c1 == 'R' && c2 == 'F' && c3 == 'Y')
|
|
|
683 {
|
|
|
684 s->command = NGX_SMTP_VRFY;
|
|
|
685
|
|
|
686 } else if (c0 == 'E' && c1 == 'X' && c2 == 'P' && c3 == 'N')
|
|
|
687 {
|
|
|
688 s->command = NGX_SMTP_EXPN;
|
|
|
689
|
|
|
690 } else if (c0 == 'H' && c1 == 'E' && c2 == 'L' && c3 == 'P')
|
|
|
691 {
|
|
|
692 s->command = NGX_SMTP_HELP;
|
|
|
693
|
|
290
|
694 } else {
|
|
|
695 goto invalid;
|
|
|
696 }
|
|
322
|
697 #if (NGX_MAIL_SSL)
|
|
|
698 } else if (p - c == 8) {
|
|
290
|
699
|
|
322
|
700 if ((c[0] == 'S'|| c[0] == 's')
|
|
|
701 && (c[1] == 'T'|| c[1] == 't')
|
|
|
702 && (c[2] == 'A'|| c[2] == 'a')
|
|
|
703 && (c[3] == 'R'|| c[3] == 'r')
|
|
|
704 && (c[4] == 'T'|| c[4] == 't')
|
|
|
705 && (c[5] == 'T'|| c[5] == 't')
|
|
|
706 && (c[6] == 'L'|| c[6] == 'l')
|
|
|
707 && (c[7] == 'S'|| c[7] == 's'))
|
|
|
708 {
|
|
|
709 s->command = NGX_SMTP_STARTTLS;
|
|
|
710
|
|
|
711 } else {
|
|
|
712 goto invalid;
|
|
|
713 }
|
|
|
714 #endif
|
|
290
|
715 } else {
|
|
|
716 goto invalid;
|
|
|
717 }
|
|
|
718
|
|
|
719 switch (ch) {
|
|
|
720 case ' ':
|
|
|
721 state = sw_spaces_before_argument;
|
|
|
722 break;
|
|
|
723 case CR:
|
|
|
724 state = sw_almost_done;
|
|
|
725 break;
|
|
|
726 case LF:
|
|
|
727 goto done;
|
|
|
728 }
|
|
|
729 break;
|
|
|
730 }
|
|
|
731
|
|
|
732 if ((ch < 'A' || ch > 'Z') && (ch < 'a' || ch > 'z')) {
|
|
|
733 goto invalid;
|
|
|
734 }
|
|
|
735
|
|
|
736 break;
|
|
|
737
|
|
|
738 case sw_spaces_before_argument:
|
|
|
739 switch (ch) {
|
|
|
740 case ' ':
|
|
|
741 break;
|
|
|
742 case CR:
|
|
|
743 state = sw_almost_done;
|
|
|
744 s->arg_end = p;
|
|
|
745 break;
|
|
|
746 case LF:
|
|
|
747 s->arg_end = p;
|
|
|
748 goto done;
|
|
|
749 default:
|
|
420
|
750 if (s->args.nelts <= 10) {
|
|
290
|
751 state = sw_argument;
|
|
|
752 s->arg_start = p;
|
|
|
753 break;
|
|
|
754 }
|
|
|
755 goto invalid;
|
|
|
756 }
|
|
|
757 break;
|
|
|
758
|
|
|
759 case sw_argument:
|
|
|
760 switch (ch) {
|
|
|
761 case ' ':
|
|
|
762 case CR:
|
|
|
763 case LF:
|
|
|
764 arg = ngx_array_push(&s->args);
|
|
|
765 if (arg == NULL) {
|
|
|
766 return NGX_ERROR;
|
|
|
767 }
|
|
|
768 arg->len = p - s->arg_start;
|
|
|
769 arg->data = s->arg_start;
|
|
|
770 s->arg_start = NULL;
|
|
|
771
|
|
|
772 switch (ch) {
|
|
|
773 case ' ':
|
|
|
774 state = sw_spaces_before_argument;
|
|
|
775 break;
|
|
|
776 case CR:
|
|
|
777 state = sw_almost_done;
|
|
|
778 break;
|
|
|
779 case LF:
|
|
|
780 goto done;
|
|
|
781 }
|
|
|
782 break;
|
|
|
783
|
|
|
784 default:
|
|
|
785 break;
|
|
|
786 }
|
|
|
787 break;
|
|
|
788
|
|
|
789 case sw_almost_done:
|
|
|
790 switch (ch) {
|
|
|
791 case LF:
|
|
|
792 goto done;
|
|
|
793 default:
|
|
|
794 goto invalid;
|
|
|
795 }
|
|
|
796 }
|
|
|
797 }
|
|
|
798
|
|
|
799 s->buffer->pos = p;
|
|
|
800 s->state = state;
|
|
|
801
|
|
|
802 return NGX_AGAIN;
|
|
|
803
|
|
|
804 done:
|
|
|
805
|
|
|
806 s->buffer->pos = p + 1;
|
|
|
807
|
|
|
808 if (s->arg_start) {
|
|
|
809 arg = ngx_array_push(&s->args);
|
|
|
810 if (arg == NULL) {
|
|
|
811 return NGX_ERROR;
|
|
|
812 }
|
|
|
813 arg->len = s->arg_end - s->arg_start;
|
|
|
814 arg->data = s->arg_start;
|
|
|
815 s->arg_start = NULL;
|
|
|
816 }
|
|
|
817
|
|
|
818 s->state = (s->command != NGX_SMTP_AUTH) ? sw_start : sw_argument;
|
|
|
819
|
|
|
820 return NGX_OK;
|
|
|
821
|
|
|
822 invalid:
|
|
|
823
|
|
|
824 s->state = sw_start;
|
|
|
825 s->arg_start = NULL;
|
|
|
826
|
|
|
827 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
828 }
|
|
336
|
829
|
|
|
830
|
|
|
831 ngx_int_t
|
|
|
832 ngx_mail_auth_parse(ngx_mail_session_t *s, ngx_connection_t *c)
|
|
|
833 {
|
|
|
834 ngx_str_t *arg;
|
|
|
835
|
|
|
836 #if (NGX_MAIL_SSL)
|
|
|
837 if (ngx_mail_starttls_only(s, c)) {
|
|
|
838 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
839 }
|
|
|
840 #endif
|
|
|
841
|
|
|
842 arg = s->args.elts;
|
|
|
843
|
|
|
844 if (arg[0].len == 5) {
|
|
|
845
|
|
|
846 if (ngx_strncasecmp(arg[0].data, (u_char *) "LOGIN", 5) == 0) {
|
|
|
847
|
|
|
848 if (s->args.nelts == 1) {
|
|
|
849 return NGX_MAIL_AUTH_LOGIN;
|
|
|
850 }
|
|
|
851
|
|
444
|
852 if (s->args.nelts == 2) {
|
|
|
853 return NGX_MAIL_AUTH_LOGIN_USERNAME;
|
|
|
854 }
|
|
|
855
|
|
336
|
856 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
857 }
|
|
|
858
|
|
|
859 if (ngx_strncasecmp(arg[0].data, (u_char *) "PLAIN", 5) == 0) {
|
|
|
860
|
|
|
861 if (s->args.nelts == 1) {
|
|
|
862 return NGX_MAIL_AUTH_PLAIN;
|
|
|
863 }
|
|
|
864
|
|
|
865 if (s->args.nelts == 2) {
|
|
|
866 return ngx_mail_auth_plain(s, c, 1);
|
|
|
867 }
|
|
|
868 }
|
|
|
869
|
|
|
870 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
871 }
|
|
|
872
|
|
|
873 if (arg[0].len == 8) {
|
|
|
874
|
|
|
875 if (s->args.nelts != 1) {
|
|
|
876 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
877 }
|
|
|
878
|
|
|
879 if (ngx_strncasecmp(arg[0].data, (u_char *) "CRAM-MD5", 8) == 0) {
|
|
|
880 return NGX_MAIL_AUTH_CRAM_MD5;
|
|
|
881 }
|
|
|
882 }
|
|
|
883
|
|
|
884 return NGX_MAIL_PARSE_INVALID_COMMAND;
|
|
|
885 }
|
