/*	$NetBSD: ttymsg.c,v 1.23 2009/01/18 12:13:04 lukem Exp $	*/

/*
 * Copyright (c) 1989, 1993
 *	The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the University nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include <sys/cdefs.h>
#if defined(LIBC_SCCS) && !defined(lint)
#if 0
static char sccsid[] = "@(#)ttymsg.c	8.2 (Berkeley) 11/16/93";
#else
__RCSID("$NetBSD: ttymsg.c,v 1.23 2009/01/18 12:13:04 lukem Exp $");
#endif
#endif /* LIBC_SCCS and not lint */

#include <sys/types.h>
#include <sys/uio.h>

#include <assert.h>
#include <dirent.h>
#include <errno.h>
#include <fcntl.h>
#include <paths.h>
#include <signal.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <util.h>

/*
 * Display the contents of a uio structure on a terminal.  Used by wall(1),
 * syslogd(8), and talkd(8).  Forks and finishes in child if write would block,
 * waiting up to tmout seconds.  Returns pointer to error string on unexpected
 * error; string is not newline-terminated.  Various "normal" errors are
 * ignored (exclusive-use, lack of permission, etc.).
 */
char *
ttymsg(struct iovec *iov, int iovcnt, const char *line, int tmout)
{
	static char errbuf[1024];
	char device[MAXNAMLEN];
	const char *ptr;
	int fd, ret;
	struct iovec localiov[32];
	sigset_t nset;
	int forked = 0;
	size_t cnt, left, wret;

	_DIAGASSERT(iov != NULL);
	_DIAGASSERT(iovcnt >= 0);
	_DIAGASSERT(line != NULL);

	if (iovcnt < 0) {
		(void)snprintf(errbuf, sizeof(errbuf),
		    "%s: negative iovcnt", __func__);
		return errbuf;
	}

	if ((size_t)iovcnt >= sizeof(localiov) / sizeof(localiov[0])) {
		(void)snprintf(errbuf, sizeof(errbuf),
		    "%s: too many iov's (%d) max is %zu", __func__,
		    iovcnt, sizeof(localiov) / sizeof(localiov[0]));
		return errbuf;
	}

	ptr = strncmp(line, "pts/", (size_t)4) == 0 ? line + 4 : line;
	if (strcspn(ptr, "./") != strlen(ptr)) {
		/* A slash or dot is an attempt to break security... */
		(void)snprintf(errbuf, sizeof(errbuf),
		    "%s: '/' or '.' in \"%s\"", __func__, line);
		return errbuf;
	}
	ret = snprintf(device, sizeof(device), "%s%s", _PATH_DEV, line);
	if (ret == -1 || ret >= (int)sizeof(device)) {
		(void) snprintf(errbuf, sizeof(errbuf),
		    "%s: line `%s' too long", __func__, line);
		return errbuf;
	}
	cnt = (size_t)ret;

	/*
	 * open will fail on slip lines or exclusive-use lines
	 * if not running as root; not an error.
	 */
	if ((fd = open(device, O_WRONLY|O_NONBLOCK, 0)) < 0) {
		if (errno == EBUSY || errno == EACCES)
			return NULL;
		(void)snprintf(errbuf, sizeof(errbuf),
		    "%s: Cannot open `%s' (%s)",
		    __func__, device, strerror(errno));
		return errbuf;
	}
	if (!isatty(fd)) {
		(void)snprintf(errbuf, sizeof(errbuf),
		    "%s: line `%s' is not a tty device", __func__, device);
		(void)close(fd);
		return errbuf;
	}

	for (cnt = left = 0; cnt < (size_t)iovcnt; ++cnt)
		left += iov[cnt].iov_len;

	for (;;) {
		wret = writev(fd, iov, iovcnt);
		if (wret >= left)
			break;
		if (wret > 0) {
			left -= wret;
			if (iov != localiov) {
				(void)memcpy(localiov, iov,
				    iovcnt * sizeof(struct iovec));
				iov = localiov;
			}
			for (cnt = 0; wret >= iov->iov_len; ++cnt) {
				wret -= iov->iov_len;
				++iov;
				--iovcnt;
			}
			if (wret) {
				iov->iov_base =
				    (char *)iov->iov_base + wret;
				iov->iov_len -= wret;
			}
			continue;
		} else if (wret == 0) {
			(void)snprintf(errbuf, sizeof(errbuf),
			    "%s: failed writing %zu bytes to `%s'", __func__,
			    left, device);
			(void) close(fd);
			if (forked)
				_exit(1);
			return errbuf;
		}
		if (errno == EWOULDBLOCK) {
			pid_t cpid;

			if (forked) {
				(void)close(fd);
				_exit(1);
			}
			cpid = fork();
			if (cpid < 0) {
				(void)snprintf(errbuf, sizeof(errbuf),
				    "%s: Cannot fork (%s)", __func__,
				    strerror(errno));
				(void)close(fd);
				return errbuf;
			}
			if (cpid) {	/* parent */
				(void)close(fd);
				return NULL;
			}
			forked++;
			/* wait at most tmout seconds */
			(void)signal(SIGALRM, SIG_DFL);
			(void)signal(SIGTERM, SIG_DFL); /* XXX */
			sigfillset(&nset);
			(void)sigprocmask(SIG_UNBLOCK, &nset, NULL);
			(void)alarm((u_int)tmout);
			(void)fcntl(fd, F_SETFL, 0);	/* clear O_NONBLOCK */
			continue;
		}
		/*
		 * We get ENODEV on a slip line if we're running as root,
		 * and EIO if the line just went away.
		 */
		if (errno == ENODEV || errno == EIO)
			break;
		(void) close(fd);
		if (forked)
			_exit(1);
		(void)snprintf(errbuf, sizeof(errbuf),
		    "%s: Write to line `%s' failed (%s)", __func__,
		    device, strerror(errno));
		return errbuf;
	}

	(void) close(fd);
	if (forked)
		_exit(0);
	return NULL;
}