/usr/src/usr.bin/login/login.c

Bug Summary

File:	src/usr.bin/login/login.c
Warning:	line 416, column 7 Null pointer passed as 1st argument to string length function

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name login.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -pic-is-pie -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/usr.bin/login/obj -resource-dir /usr/local/lib/clang/13.0.0 -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/usr.bin/login/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/usr.bin/login/login.c

1/*	$OpenBSD: login.c,v 1.73 2021/10/24 21:24:16 deraadt Exp $	*/
2/*	$NetBSD: login.c,v 1.13 1996/05/15 23:50:16 jtc Exp $	*/

4/*-
* Copyright (c) 1980, 1987, 1988, 1991, 1993, 1994
*	The Regents of the University of California.  All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
* 3. Neither the name of the University nor the names of its contributors
*    may be used to endorse or promote products derived from this software
*    without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/
32/*-
* Copyright (c) 1995 Berkeley Software Design, Inc. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
*    must display the following acknowledgement:
*      This product includes software developed by Berkeley Software Design,
*      Inc.
* 4. The name of Berkeley Software Design, Inc.  may not be used to endorse
*    or promote products derived from this software without specific prior
*    written permission.
*
* THIS SOFTWARE IS PROVIDED BY BERKELEY SOFTWARE DESIGN, INC. ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED.  IN NO EVENT SHALL BERKELEY SOFTWARE DESIGN, INC. BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
*	BSDI $From: login.c,v 2.28 1999/09/08 22:35:36 prb Exp $
*/

66/*
* login [ name ]
* login -h hostname	(for telnetd, etc.)
* login -f name	(for pre-authenticated login: datakit, xterm, etc.)
* login -p		(preserve existing environment; for getty)
*/

73#include <sys/socket.h>
74#include <sys/stat.h>
75#include <sys/time.h>
76#include <sys/resource.h>
77#include <sys/wait.h>

79#include <err.h>
80#include <errno(*__errno()).h>
81#include <fcntl.h>
82#include <grp.h>
83#include <login_cap.h>
84#include <netdb.h>
85#include <pwd.h>
86#include <signal.h>
87#include <stdarg.h>
88#include <stdio.h>
89#include <stdlib.h>
90#include <string.h>
91#include <syslog.h>
92#include <ttyent.h>
93#include <unistd.h>
94#include <limits.h>
95#include <utmp.h>
96#include <util.h>
97#include <bsd_auth.h>

99#include "pathnames.h"

101void	 badlogin(char *);
102void	 dolastlog(int);
103void	 getloginname(void);
104void	 motd(void);
105void	 quickexit(int);
106int	 rootterm(char *);
107void	 sigint(int);
108void	 sighup(int);
109void	 sleepexit(int);
110char	*stypeof(char *);
111void	 timedout(int);
112int	 main(int, char **);

114extern int check_failedlogin(uid_t);
115extern void log_failedlogin(uid_t, char *, char *, char *);

117#define	TTYGRPNAME"tty"	"tty"		/* name of group to own ttys */

119#define	SECSPERDAY(24 * 60 * 60)	(24 * 60 * 60)
120#define	TWOWEEKS(2 * 7 * (24 * 60 * 60))	(2 * 7 * SECSPERDAY(24 * 60 * 60))

122/*
* This bounds the time given to login; may be overridden by /etc/login.conf.
*/
125u_int		timeout = 300;

127struct passwd	*pwd;
128login_cap_t	*lc = NULL((void *)0);
129auth_session_t	*as = NULL((void *)0);
130int		failures;
131int		needbanner = 1;
132char		term[64], *hostname, *tty;
133char		*style;
134char		*username = NULL((void *)0), *rusername = NULL((void *)0);

136extern char **environ;

138int
139main(int argc, char *argv[])
140{
char *domain, *p, *ttyn, *shell, *fullname, *instance;
char *lipaddr, *script, *ripaddr, *style, *type, *fqdn;
char tbuf[PATH_MAX1024 + 2], tname[sizeof(_PATH_TTY"/dev/tty") + 10];
char localhost[HOST_NAME_MAX255+1], *copyright;
char mail[sizeof(_PATH_MAILDIR"/var/mail") + 1 + NAME_MAX255];
int ask, ch, cnt, fflag, pflag, quietlog, rootlogin, lastchance;
int error, homeless, needto, authok, tries, backoff;
struct addrinfo *ai, hints;
struct rlimit cds, scds;
quad_t expire, warning;
struct utmp utmp;
struct group *gr;
struct stat st;
uid_t uid;

openlog("login", LOG_ODELAY0x04, LOG_AUTH(4<<3));

fqdn = lipaddr = ripaddr = fullname = type = NULL((void *)0);
authok = 0;
tries = 10;
backoff = 3;

domain = NULL((void *)0);
if (gethostname(localhost, sizeof(localhost)) == -1) {
1
Assuming the condition is false→
2
←
Taking false branch→
syslog(LOG_ERR3, "couldn't get local hostname: %m");
strlcpy(localhost, "localhost", sizeof(localhost));
} else if ((domain = strchr(localhost, '.'))) {
3
←
Assuming 'domain' is null→
4
←
Taking false branch→
domain++;
if (*domain && strchr(domain, '.') == NULL((void *)0))
	domain = localhost;
}

if ((as = auth_open()) == NULL((void *)0)) {
5
←
Assuming the condition is false→
6
←
Taking false branch→
syslog(LOG_ERR3, "auth_open: %m");
err(1, "unable to initialize BSD authentication");
}
auth_setoption(as, "login", "yes");

/*
* -p is used by getty to tell login not to destroy the environment
* -f is used to skip a second login authentication
* -h is used by other servers to pass the name of the remote
*    host to login so that it may be placed in utmp and wtmp
*/
fflag = pflag = 0;
uid = getuid();
while ((ch = getopt(argc, argv, "fh:pu:L:R:")) != -1)
7
←
Assuming the condition is false→
8
←
Loop condition is false. Execution continues on line 261→
switch (ch) {
case 'f':
	fflag = 1;
	break;
case 'h':
	if (uid) {
		warnc(EPERM1, "-h option");
		quickexit(1);
	}
	free(fqdn);
	if ((fqdn = strdup(optarg)) == NULL((void *)0)) {
		warn(NULL((void *)0));
		quickexit(1);
	}
	auth_setoption(as, "fqdn", fqdn);
	if (domain && (p = strchr(optarg, '.')) &&
	    strcasecmp(p+1, domain) == 0)
		*p = 0;
	hostname = optarg;
	auth_setoption(as, "hostname", hostname);
	break;
case 'L':
	if (uid) {
		warnc(EPERM1, "-L option");
		quickexit(1);
	}
	if (lipaddr) {
		warnx("duplicate -L option");
		quickexit(1);
	}
	lipaddr = optarg;
	memset(&hints, 0, sizeof(hints));
	hints.ai_family = PF_UNSPEC0;
	hints.ai_flags = AI_CANONNAME2;
	error = getaddrinfo(lipaddr, NULL((void *)0), &hints, &ai);
	if (!error) {
		strlcpy(localhost, ai->ai_canonname,
		    sizeof(localhost));
		freeaddrinfo(ai);
	} else
		strlcpy(localhost, lipaddr, sizeof(localhost));
	auth_setoption(as, "local_addr", lipaddr);
	break;
case 'p':
	pflag = 1;
	break;
case 'R':
	if (uid) {
		warnc(EPERM1, "-R option");
		quickexit(1);
	}
	if (ripaddr) {
		warnx("duplicate -R option");
		quickexit(1);
	}
	ripaddr = optarg;
	auth_setoption(as, "remote_addr", ripaddr);
	break;
case 'u':
	if (uid) {
		warnc(EPERM1, "-u option");
		quickexit(1);
	}
	rusername = optarg;
	break;
default:
	if (!uid)
		syslog(LOG_ERR3, "invalid flag %c", ch);
	(void)fprintf(stderr(&__sF[2]),
	    "usage: login [-fp] [-h hostname] [-L local-addr] "
	    "[-R remote-addr] [-u username]\n\t[user]\n");
	quickexit(1);
}
argc -= optind;
argv += optind;

if (*argv) {
9
←
Assuming the condition is false→
10
←
Taking false branch→
username = *argv;
ask = 0;
} else
ask = 1;

/*
* If effective user is not root, just run su(1) to emulate login(1).
*/
if (geteuid() != 0) {
11
←
Assuming the condition is false→
12
←
Taking false branch→
char *av[5], **ap;

auth_close(as);
closelog();
closefrom(STDERR_FILENO2 + 1);

ap = av;
*ap++ = _PATH_SU"/usr/bin/su";
*ap++ = "-L";
if (!pflag)
	*ap++ = "-l";
if (!ask)
	*ap++ = username;
*ap = NULL((void *)0);
execv(_PATH_SU"/usr/bin/su", av);
warn("unable to exec %s", _PATH_SU"/usr/bin/su");
_exit(1);
}

ttyn = ttyname(STDIN_FILENO0);
if (ttyn == NULL((void *)0) || *ttyn == '\0') {
13
←
Assuming 'ttyn' is not equal to NULL→
14
←
Assuming the condition is false→
15
←
Taking false branch→
(void)snprintf(tname, sizeof(tname), "%s??", _PATH_TTY"/dev/tty");
ttyn = tname;
}
if ((tty = strrchr(ttyn, '/')))
16
←
Assuming 'tty' is null→
17
←
Taking false branch→
++tty;
else
tty = ttyn;

/*
* Since login deals with sensitive information, turn off coredumps.
*/
if (getrlimit(RLIMIT_CORE4, &scds) == -1) {
18
←
Assuming the condition is false→
19
←
Taking false branch→
syslog(LOG_ERR3, "couldn't get core dump size: %m");
scds.rlim_cur = scds.rlim_max = QUAD_MIN(-0x7fffffffffffffffLL-1);
}
cds.rlim_cur = cds.rlim_max = 0;
if (setrlimit(RLIMIT_CORE4, &cds) == -1) {
20
←
Assuming the condition is true→
21
←
Taking true branch→
syslog(LOG_ERR3, "couldn't set core dump size to 0: %m");
scds.rlim_cur = scds.rlim_max = QUAD_MIN(-0x7fffffffffffffffLL-1);
}

(void)signal(SIGALRM14, timedout);
if (argc > 1) {
22
←
Assuming 'argc' is > 1→
23
←
Taking true branch→
needto = 0;
(void)alarm(timeout);
} else
needto = 1;
(void)signal(SIGQUIT3, SIG_IGN(void (*)(int))1);
(void)signal(SIGINT2, SIG_IGN(void (*)(int))1);
(void)signal(SIGHUP1, SIG_IGN(void (*)(int))1);
(void)setpriority(PRIO_PROCESS0, 0, 0);

/* get the default login class */
if ((lc = login_getclass(0)) == NULL((void *)0)) { /* get the default class */
24
←
Assuming the condition is false→
25
←
Taking false branch→
warnx("Failure to retrieve default class");
quickexit(1);
}
timeout = (u_int)login_getcapnum(lc, "login-timeout", 300, 300);
if ((script = login_getcapstr(lc, "classify", NULL((void *)0), NULL((void *)0))) != NULL((void *)0)) {
26
←
Assuming the condition is false→
27
←
Taking false branch→
unsetenv("AUTH_TYPE");
unsetenv("REMOTE_NAME");
if (script[0] != '/') {
	syslog(LOG_ERR3, "Invalid classify script: %s", script);
	warnx("Classification failure");
	quickexit(1);
}
shell = strrchr(script, '/') + 1;
auth_setstate(as, AUTH_OKAY0x01);
if (fflag) {
	auth_call(as, script, shell, "-f", "--", username,
	    (char *)NULL((void *)0));
} else {
	auth_call(as, script, shell, "--", username,
	    (char *)NULL((void *)0));
}
if (!(auth_getstate(as) & AUTH_ALLOW(0x01 | 0x02 | 0x04)))
	quickexit(1);
auth_setenv(as);
if ((p = getenv("AUTH_TYPE")) != NULL((void *)0) &&
    strncmp(p, "auth-", 5) == 0)
	type = p;
if ((p = getenv("REMOTE_NAME")) != NULL((void *)0))
	hostname = p;
/*
 * we may have changed some values, reset them
 */
auth_clroptions(as);
if (type)
	auth_setoption(as, "auth_type", type);
if (fqdn)
	auth_setoption(as, "fqdn", fqdn);
if (hostname)
	auth_setoption(as, "hostname", hostname);
if (lipaddr)
	auth_setoption(as, "local_addr", lipaddr);
if (ripaddr)
	auth_setoption(as, "remote_addr", ripaddr);
}

/*
* Request that things like the approval script print things
* to stdout (in particular, the nologins files)
*/
auth_setitem(as, AUTHV_INTERACTIVE, "True");

for (cnt = 0;; ask = 1) {
28
←
Loop condition is true.  Entering loop body→
/*
 * Clean up our current authentication session.
 * Options are not cleared so we need to clear any
 * we might set below.
 */
auth_clean(as);
auth_clroption(as, "style");
auth_clroption(as, "lastchance");

lastchance = 0;

if (ask28.1
'ask' is 1
) {
29
←
Taking true branch→
	fflag = 0;
	getloginname();
}
if (needto29.1
'needto' is 0
) {
30
←
Taking false branch→
	needto = 0;
	alarm(timeout);
}
if ((style = strchr(username, ':')) != NULL((void *)0))
31
←
Assuming the condition is false→
32
←
Taking false branch→
	*style++ = '\0';
free(fullname);
if (auth_setitem(as, AUTHV_NAME, username) < 0 ||
33
←
Assuming the condition is false→
35
←
Taking false branch→
    (fullname = strdup(username)) == NULL((void *)0)) {
34
←
Assuming the condition is false→
	syslog(LOG_ERR3, "%m");
	warn(NULL((void *)0));
	quickexit(1);
}
rootlogin = 0;
if ((instance = strchr(username, '/')) != NULL((void *)0)) {
36
←
Assuming the condition is false→
37
←
Taking false branch→
	if (strncmp(instance + 1, "root", 4) == 0)
		rootlogin = 1;
	*instance = '\0';
}

if (strlen(username) > UT_NAMESIZE32)
38
←
Null pointer passed as 1st argument to string length function
	username[UT_NAMESIZE32] = '\0';

/*
 * Note if trying multiple user names; log failures for
 * previous user name, but don't bother logging one failure
 * for nonexistent name (mistyped username).
 */
if (failures && strcmp(tbuf, username)) {
	if (failures > (pwd ? 0 : 1))
		badlogin(tbuf);
	failures = 0;
}
(void)strlcpy(tbuf, username, sizeof(tbuf));

if ((pwd = getpwnam(username)) != NULL((void *)0) &&
    auth_setpwd(as, pwd) < 0) {
	syslog(LOG_ERR3, "%m");
	warn(NULL((void *)0));
	quickexit(1);
}

lc = login_getclass(pwd ? pwd->pw_class : NULL((void *)0));
if (!lc)
	goto failed;

style = login_getstyle(lc, style, type);
if (!style)
	goto failed;

/*
 * We allow "login-tries" attempts to login but start
 * slowing down after "login-backoff" attempts.
 */
tries = (int)login_getcapnum(lc, "login-tries", 10, 10);
backoff = (int)login_getcapnum(lc, "login-backoff", 3, 3);

/*
 * Turn off the fflag if we have an invalid user
 * or we are not root and we are trying to change uids.
 */
if (!pwd || (uid && uid != pwd->pw_uid))
	fflag = 0;

if (pwd && pwd->pw_uid == 0)
	rootlogin = 1;

/*
 * If we do not have the force flag authenticate the user
 */
if (!fflag) {
	lastchance =
	    login_getcaptime(lc, "password-dead", 0, 0) != 0;
	if (lastchance)
		auth_setoption(as, "lastchance", "yes");
	/*
	 * Once we start asking for a password
	 *  we want to log a failure on a hup.
	 */
	signal(SIGHUP1, sighup);
	auth_verify(as, style, NULL((void *)0), lc->lc_class, NULL((void *)0));
	authok = auth_getstate(as);
	/*
	 * If their password expired and it has not been
	 * too long since then, give the user one last
	 * chance to change their password
	 */
	if ((authok & AUTH_PWEXPIRED0x40) && lastchance) {
		authok = AUTH_OKAY0x01;
	} else
		lastchance = 0;
	if ((authok & AUTH_ALLOW(0x01 | 0x02 | 0x04)) == 0)
		goto failed;
	if (auth_setoption(as, "style", style) < 0) {
		syslog(LOG_ERR3, "%m");
		warn(NULL((void *)0));
		quickexit(1);
	}
}
/*
 * explicitly reject users without password file entries
 */
if (pwd == NULL((void *)0))
	goto failed;

/*
 * If trying to log in as root on an insecure terminal,
 * refuse the login attempt unless the authentication
 * style explicitly says a root login is okay.
 */
if (pwd && rootlogin && !rootterm(tty))
	goto failed;

if (fflag) {
	type = 0;
	style = "forced";
}
break;

515failed:
if (authok & AUTH_SILENT0x08)
	quickexit(0);
if (rootlogin && !rootterm(tty)) {
	warnx("%s login refused on this terminal.",
	    fullname);
	if (hostname)
		syslog(LOG_NOTICE5,
		    "LOGIN %s REFUSED FROM %s%s%s ON TTY %s",
		    fullname, rusername ? rusername : "",
		    rusername ? "@" : "", hostname, tty);
	else
		syslog(LOG_NOTICE5,
		    "LOGIN %s REFUSED ON TTY %s",
		    fullname, tty);
} else {
	if (!as || (p = auth_getvalue(as, "errormsg")) == NULL((void *)0))
		p = "Login incorrect";
	(void)printf("%s\n", p);
}
failures++;
if (pwd)
	log_failedlogin(pwd->pw_uid, hostname, rusername, tty);
/*
 * By default, we allow 10 tries, but after 3 we start
 * backing off to slow down password guessers.
 */
if (++cnt > backoff) {
	if (cnt >= tries) {
		badlogin(username);
		sleepexit(1);
	}
	sleep(1);
}
}

/* committed to login -- turn off timeout */
(void)alarm(0);

endpwent();

shell = login_getcapstr(lc, "shell", pwd->pw_shell, pwd->pw_shell);
if (*shell == '\0')
shell = _PATH_BSHELL"/bin/sh";
else if (strlen(shell) >= PATH_MAX1024) {
syslog(LOG_ERR3, "shell path too long: %s", shell);
warnx("invalid shell");
quickexit(1);
}

/* Destroy environment unless user has requested its preservation. */
if (!pflag) {
if ((environ = calloc(1, sizeof (char *))) == NULL((void *)0))
	err(1, "calloc");
} else {
char **cpp, **cpp2;

for (cpp2 = cpp = environ; *cpp; cpp++) {
	if (strncmp(*cpp, "LD_", 3) &&
	    strncmp(*cpp, "ENV=", 4) &&
	    strncmp(*cpp, "BASH_ENV=", 9) &&
	    strncmp(*cpp, "IFS=", 4))
		*cpp2++ = *cpp;
}
*cpp2 = 0;
}
/* Note: setusercontext(3) will set PATH */
if (setenv("HOME", pwd->pw_dir, 1) == -1 ||
   setenv("SHELL", pwd->pw_shell, 1) == -1) {
warn("unable to setenv()");
quickexit(1);
}
if (term[0] == '\0')
(void)strlcpy(term, stypeof(tty), sizeof(term));
(void)snprintf(mail, sizeof(mail), "%s/%s", _PATH_MAILDIR"/var/mail",
pwd->pw_name);
if (setenv("TERM", term, 0) == -1 ||
   setenv("LOGNAME", pwd->pw_name, 1) == -1 ||
   setenv("USER", pwd->pw_name, 1) == -1 ||
   setenv("MAIL", mail, 1) == -1) {
warn("unable to setenv()");
quickexit(1);
}
if (hostname) {
if (setenv("REMOTEHOST", hostname, 1) == -1) {
	warn("unable to setenv()");
	quickexit(1);
}
}
if (rusername) {
if (setenv("REMOTEUSER", rusername, 1) == -1) {
	warn("unable to setenv()");
	quickexit(1);
}
}

if (setusercontext(lc, pwd, pwd->pw_uid, LOGIN_SETPATH0x0004)) {
warn("unable to set user context");
quickexit(1);
}
auth_setenv(as);

/* if user not super-user, check for disabled logins */
if (!rootlogin)
auth_checknologin(lc);

setegid(pwd->pw_gid);
seteuid(pwd->pw_uid);

homeless = chdir(pwd->pw_dir);
if (homeless) {
if (login_getcapbool(lc, "requirehome", 0)) {
	(void)printf("No home directory %s!\n", pwd->pw_dir);
	quickexit(1);
}
if (chdir("/"))
	quickexit(0);
}

quietlog = ((strcmp(pwd->pw_shell, "/sbin/nologin") == 0) ||
   login_getcapbool(lc, "hushlogin", 0) ||
   (access(_PATH_HUSHLOGIN".hushlogin", F_OK0) == 0));

seteuid(0);
setegid(0);	/* XXX use a saved gid instead? */

if ((p = auth_getvalue(as, "warnmsg")) != NULL((void *)0))
(void)printf("WARNING: %s\n\n", p);

expire = auth_check_expire(as);
if (expire < 0) {
(void)printf("Sorry -- your account has expired.\n");
quickexit(1);
} else if (expire > 0 && !quietlog) {
warning = login_getcaptime(lc, "expire-warn",
    TWOWEEKS(2 * 7 * (24 * 60 * 60)), TWOWEEKS(2 * 7 * (24 * 60 * 60)));
if (expire < warning)
	(void)printf("Warning: your account expires on %s",
	    ctime(&pwd->pw_expire));
}

/* Nothing else left to fail -- really log in. */
(void)signal(SIGHUP1, SIG_DFL(void (*)(int))0);
memset(&utmp, 0, sizeof(utmp));
(void)time(&utmp.ut_time);
(void)strncpy(utmp.ut_name, username, sizeof(utmp.ut_name));
if (hostname)
(void)strncpy(utmp.ut_host, hostname, sizeof(utmp.ut_host));
(void)strncpy(utmp.ut_line, tty, sizeof(utmp.ut_line));
login(&utmp);

if (!quietlog)
(void)check_failedlogin(pwd->pw_uid);
dolastlog(quietlog);

login_fbtab(tty, pwd->pw_uid, pwd->pw_gid);

(void)chown(ttyn, pwd->pw_uid,
   (gr = getgrnam(TTYGRPNAME"tty")) ? gr->gr_gid : pwd->pw_gid);

/* If fflag is on, assume caller/authenticator has logged root login. */
if (rootlogin && fflag == 0) {
if (hostname)
	syslog(LOG_NOTICE5, "ROOT LOGIN (%s) ON %s FROM %s%s%s",
	    username, tty, rusername ? rusername : "",
	    rusername ? "@" : "", hostname);
else
	syslog(LOG_NOTICE5, "ROOT LOGIN (%s) ON %s", username, tty);
}

if (!quietlog) {
if ((copyright =
    login_getcapstr(lc, "copyright", NULL((void *)0), NULL((void *)0))) != NULL((void *)0))
	auth_cat(copyright);
motd();
if (stat(mail, &st) == 0 && st.st_size != 0)
	(void)printf("You have %smail.\n",
	    (st.st_mtimest_mtim.tv_sec > st.st_atimest_atim.tv_sec) ? "new " : "");
}

(void)signal(SIGALRM14, SIG_DFL(void (*)(int))0);
(void)signal(SIGQUIT3, SIG_DFL(void (*)(int))0);
(void)signal(SIGHUP1, SIG_DFL(void (*)(int))0);
(void)signal(SIGINT2, SIG_DFL(void (*)(int))0);
(void)signal(SIGTSTP18, SIG_IGN(void (*)(int))1);

tbuf[0] = '-';
(void)strlcpy(tbuf + 1, (p = strrchr(shell, '/')) ?
   p + 1 : shell, sizeof(tbuf) - 1);

if ((scds.rlim_cur != QUAD_MIN(-0x7fffffffffffffffLL-1) || scds.rlim_max != QUAD_MIN(-0x7fffffffffffffffLL-1)) &&
   setrlimit(RLIMIT_CORE4, &scds) == -1)
syslog(LOG_ERR3, "couldn't reset core dump size: %m");

if (lastchance)
(void)printf("WARNING: Your password has expired."
    "  You must change your password, now!\n");

if (setusercontext(lc, pwd, rootlogin ? 0 : pwd->pw_uid,
   LOGIN_SETALL0x00ff & ~LOGIN_SETPATH0x0004) < 0) {
warn("unable to set user context");
quickexit(1);
}

if (homeless) {
(void)printf("No home directory %s!\n", pwd->pw_dir);
(void)printf("Logging in with home = \"/\".\n");
(void)setenv("HOME", "/", 1);
}

if (auth_approval(as, lc, NULL((void *)0), "login") == 0) {
if (auth_getstate(as) & AUTH_EXPIRED0x20)
	(void)printf("Sorry -- your account has expired.\n");
else
	(void)printf("approval failure\n");
quickexit(1);
}

/*
* The last thing we do is discard all of the open file descriptors.
* Last because the C library may have some open.
*/
closefrom(STDERR_FILENO2 + 1);

/*
* Close the authentication session, make sure it is marked
* as okay so no files are removed.
*/
auth_setstate(as, AUTH_OKAY0x01);
auth_close(as);

execlp(shell, tbuf, (char *)NULL((void *)0));
err(1, "%s", shell);
748}

750/*
* Allow for a '.' and 16 characters for any instance as well as
* space for a ':' and 16 characters defining the authentication type.
*/
754#define NBUFSIZ(32 + 1 + 16 + 1 + 16)		(UT_NAMESIZE32 + 1 + 16 + 1 + 16)

756void
757getloginname(void)
758{
static char nbuf[NBUFSIZ(32 + 1 + 16 + 1 + 16)], *p;
int ch;

for (;;) {
(void)printf("login: ");
for (p = nbuf; (ch = getchar()(!__isthreaded ? (--((&__sF[0]))->_r < 0 ? __srget(
(&__sF[0])) : (int)(*((&__sF[0]))->_p++)) : (getc)
((&__sF[0])))) != '\n'; ) {
	if (ch == EOF(-1)) {
		badlogin(username);
		quickexit(0);
	}
	if (p < nbuf + (NBUFSIZ(32 + 1 + 16 + 1 + 16) - 1))
		*p++ = ch;
}
if (p > nbuf) {
	if (nbuf[0] == '-')
		(void)fprintf(stderr(&__sF[2]),
		    "login names may not start with '-'.\n");
	else {
		*p = '\0';
		username = nbuf;
		break;
	}
}
}
783}

785int
786rootterm(char *ttyn)
787{
struct ttyent *t;

/* XXX - stash output of getttynam() elsewhere */
return ((t = getttynam(ttyn)) && t->ty_status & TTY_SECURE0x02);
792}

794void
795motd(void)
796{
char tbuf[8192], *motd;
int fd, nchars;
struct sigaction sa, osa;

motd = login_getcapstr(lc, "welcome", _PATH_MOTDFILE"/etc/motd", _PATH_MOTDFILE"/etc/motd");

if ((fd = open(motd, O_RDONLY0x0000)) == -1)
return;

memset(&sa, 0, sizeof(sa));
sa.sa_handler__sigaction_u.__sa_handler = sigint;
sigemptyset(&sa.sa_mask);
sa.sa_flags = 0;		/* don't set SA_RESTART */
(void)sigaction(SIGINT2, &sa, &osa);

/* read and spew motd until EOF, error, or SIGINT */
while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0 &&
   write(STDOUT_FILENO1, tbuf, nchars) == nchars)
;

(void)sigaction(SIGINT2, &osa, NULL((void *)0));
(void)close(fd);
819}

821/* ARGSUSED */
822void
823sigint(int signo)
824{
return;			/* just interrupt syscall */
826}

828/* ARGSUSED */
829void
830timedout(int signo)
831{
dprintf(STDERR_FILENO2,
   "Login timed out after %d seconds\n", timeout);
if (username)
badlogin(username);
_exit(0);
837}

839void
840dolastlog(int quiet)
841{
struct lastlog ll;
off_t pos;
int fd;

if ((fd = open(_PATH_LASTLOG"/var/log/lastlog", O_RDWR0x0002)) >= 0) {
pos = (off_t)pwd->pw_uid * sizeof(ll);
if (!quiet) {
	if (pread(fd, &ll, sizeof(ll), pos) == sizeof(ll) &&
	    ll.ll_time != 0) {
		(void)printf("Last login: %.*s ",
		    24-5, (char *)ctime(&ll.ll_time));
		(void)printf("on %.*s",
		    (int)sizeof(ll.ll_line),
		    ll.ll_line);
		if (*ll.ll_host != '\0')
			(void)printf(" from %.*s",
			    (int)sizeof(ll.ll_host),
			    ll.ll_host);
		(void)putchar('\n')(!__isthreaded ? __sputc('\n', (&__sF[1])) : (putc)('\n',
 (&__sF[1])));
	}
}
memset(&ll, 0, sizeof(ll));
(void)time(&ll.ll_time);
(void)strncpy(ll.ll_line, tty, sizeof(ll.ll_line));
if (hostname)
	(void)strncpy(ll.ll_host, hostname, sizeof(ll.ll_host));
(void)pwrite(fd, &ll, sizeof(ll), pos);
(void)close(fd);
}
871}

873void
874badlogin(char *name)
875{
struct syslog_data sdata = SYSLOG_DATA_INIT{0, (const char *)0, (1<<3), 0xff};

if (failures == 0)
return;
if (hostname) {
syslog_r(LOG_NOTICE5, &sdata,
    "%d LOGIN FAILURE%s FROM %s%s%s",
    failures, failures > 1 ? "S" : "",
    rusername ? rusername : "", rusername ? "@" : "", hostname);
syslog_r(LOG_AUTHPRIV(10<<3)|LOG_NOTICE5, &sdata,
    "%d LOGIN FAILURE%s FROM %s%s%s, %s",
    failures, failures > 1 ? "S" : "",
    rusername ? rusername : "", rusername ? "@" : "",
    hostname, name);
} else {
syslog_r(LOG_NOTICE5, &sdata,
    "%d LOGIN FAILURE%s ON %s",
    failures, failures > 1 ? "S" : "", tty);
syslog_r(LOG_AUTHPRIV(10<<3)|LOG_NOTICE5, &sdata,
    "%d LOGIN FAILURE%s ON %s, %s",
    failures, failures > 1 ? "S" : "", tty, name);
}
898}

900#undef	UNKNOWN"su"
901#define	UNKNOWN"su"	"su"

903char *
904stypeof(char *ttyid)
905{
struct ttyent *t;

return (ttyid && (t = getttynam(ttyid)) ? t->ty_type :
   login_getcapstr(lc, "term", UNKNOWN"su", UNKNOWN"su"));
910}

912void
913sleepexit(int eval)
914{
auth_close(as);
(void)sleep(5);
exit(eval);
918}

920void
921quickexit(int eval)
922{
if (as)
auth_close(as);
exit(eval);
926}


929void
930sighup(int signum)
931{
if (username)
badlogin(username);
_exit(0);
935}