/*      $NetBSD: ttymsg.c,v 1.23 2009/01/18 12:13:04 lukem Exp $        */

/*
 * Copyright (c) 1989, 1993
 *      The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the University nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include <sys/cdefs.h>
#if defined(LIBC_SCCS) && !defined(lint)
#if 0
static char sccsid[] = "@(#)ttymsg.c    8.2 (Berkeley) 11/16/93";
#else
__RCSID("$NetBSD: ttymsg.c,v 1.23 2009/01/18 12:13:04 lukem Exp $");
#endif
#endif /* LIBC_SCCS and not lint */

#include <sys/types.h>
#include <sys/uio.h>

#include <assert.h>
#include <dirent.h>
#include <errno.h>
#include <fcntl.h>
#include <paths.h>
#include <signal.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <util.h>

/*
 * Display the contents of a uio structure on a terminal.  Used by wall(1),
 * syslogd(8), and talkd(8).  Forks and finishes in child if write would block,
 * waiting up to tmout seconds.  Returns pointer to error string on unexpected
 * error; string is not newline-terminated.  Various "normal" errors are
 * ignored (exclusive-use, lack of permission, etc.).
 */
char *
ttymsg(struct iovec *iov, int iovcnt, const char *line, int tmout)
{
        static char errbuf[1024];
        char device[MAXNAMLEN];
        const char *ptr;
        int fd, ret;
        struct iovec localiov[32];
        sigset_t nset;
        int forked = 0;
        size_t cnt, left, wret;

        _DIAGASSERT(iov != NULL);
        _DIAGASSERT(iovcnt >= 0);
        _DIAGASSERT(line != NULL);

        if (iovcnt < 0) {
                (void)snprintf(errbuf, sizeof(errbuf),
                    "%s: negative iovcnt", __func__);
                return errbuf;
        }

        if ((size_t)iovcnt >= sizeof(localiov) / sizeof(localiov[0])) {
                (void)snprintf(errbuf, sizeof(errbuf),
                    "%s: too many iov's (%d) max is %zu", __func__,
                    iovcnt, sizeof(localiov) / sizeof(localiov[0]));
                return errbuf;
        }

        ptr = strncmp(line, "pts/", (size_t)4) == 0 ? line + 4 : line;
        if (strcspn(ptr, "./") != strlen(ptr)) {
                /* A slash or dot is an attempt to break security... */
                (void)snprintf(errbuf, sizeof(errbuf),
                    "%s: '/' or '.' in \"%s\"", __func__, line);
                return errbuf;
        }
        ret = snprintf(device, sizeof(device), "%s%s", _PATH_DEV, line);
        if (ret == -1 || ret >= (int)sizeof(device)) {
                (void) snprintf(errbuf, sizeof(errbuf),
                    "%s: line `%s' too long", __func__, line);
                return errbuf;
        }
        cnt = (size_t)ret;

        /*
         * open will fail on slip lines or exclusive-use lines
         * if not running as root; not an error.
         */
        if ((fd = open(device, O_WRONLY|O_NONBLOCK, 0)) < 0) {
                if (errno == EBUSY || errno == EACCES)
                        return NULL;
                (void)snprintf(errbuf, sizeof(errbuf),
                    "%s: Cannot open `%s' (%s)",
                    __func__, device, strerror(errno));
                return errbuf;
        }
        if (!isatty(fd)) {
                (void)snprintf(errbuf, sizeof(errbuf),
                    "%s: line `%s' is not a tty device", __func__, device);
                (void)close(fd);
                return errbuf;
        }

        for (cnt = left = 0; cnt < (size_t)iovcnt; ++cnt)
                left += iov[cnt].iov_len;

        for (;;) {
                wret = writev(fd, iov, iovcnt);
                if (wret >= left)
                        break;
                if (wret > 0) {
                        left -= wret;
                        if (iov != localiov) {
                                (void)memcpy(localiov, iov,
                                    iovcnt * sizeof(struct iovec));
                                iov = localiov;
                        }
                        for (cnt = 0; wret >= iov->iov_len; ++cnt) {
                                wret -= iov->iov_len;
                                ++iov;
                                --iovcnt;
                        }
                        if (wret) {
                                iov->iov_base =
                                    (char *)iov->iov_base + wret;
                                iov->iov_len -= wret;
                        }
                        continue;
                } else if (wret == 0) {
                        (void)snprintf(errbuf, sizeof(errbuf),
                            "%s: failed writing %zu bytes to `%s'", __func__,
                            left, device);
                        (void) close(fd);
                        if (forked)
                                _exit(1);
                        return errbuf;
                }
                if (errno == EWOULDBLOCK) {
                        pid_t cpid;

                        if (forked) {
                                (void)close(fd);
                                _exit(1);
                        }
                        cpid = fork();
                        if (cpid < 0) {
                                (void)snprintf(errbuf, sizeof(errbuf),
                                    "%s: Cannot fork (%s)", __func__,
                                    strerror(errno));
                                (void)close(fd);
                                return errbuf;
                        }
                        if (cpid) {     /* parent */
                                (void)close(fd);
                                return NULL;
                        }
                        forked++;
                        /* wait at most tmout seconds */
                        (void)signal(SIGALRM, SIG_DFL);
                        (void)signal(SIGTERM, SIG_DFL); /* XXX */
                        sigfillset(&nset);
                        (void)sigprocmask(SIG_UNBLOCK, &nset, NULL);
                        (void)alarm((u_int)tmout);
                        (void)fcntl(fd, F_SETFL, 0);    /* clear O_NONBLOCK */
                        continue;
                }
                /*
                 * We get ENODEV on a slip line if we're running as root,
                 * and EIO if the line just went away.
                 */
                if (errno == ENODEV || errno == EIO)
                        break;
                (void) close(fd);
                if (forked)
                        _exit(1);
                (void)snprintf(errbuf, sizeof(errbuf),
                    "%s: Write to line `%s' failed (%s)", __func__,
                    device, strerror(errno));
                return errbuf;
        }

        (void) close(fd);
        if (forked)
                _exit(0);
        return NULL;
}