]> git.netwichtig.de Git - user/henk/code/inspircd.git/blobdiff - src/coremods/core_message.cpp
Fix namedmodes exposing non-key secret parameters to outsiders.
[user/henk/code/inspircd.git] / src / coremods / core_message.cpp
index dca01e370689335f42148b915ef994a7e9fc9430..65eaa1bb7d7cb9e116f85ac36b86d1ddf65e9a6d 100644 (file)
 
 #include "inspircd.h"
 
+enum
+{
+       // From RFC 2812.
+       ERR_NOSUCHSERVICE = 408
+};
+
 class MessageDetailsImpl : public MessageDetails
 {
 public:
@@ -135,24 +141,159 @@ class CommandMessage : public Command
        ChanModeReference moderatedmode;
        ChanModeReference noextmsgmode;
 
-       /** Send a PRIVMSG or NOTICE message to all local users from the given user
-        * @param source The user sending the message.
-        * @param msg The details of the message to send.
-        */
-       static void SendAll(User* source, const MessageDetails& details)
+       CmdResult HandleChannelTarget(User* source, const Params& parameters, const char* target, PrefixMode* pm)
+       {
+               Channel* chan = ServerInstance->FindChan(target);
+               if (!chan)
+               {
+                       // The target channel does not exist.
+                       source->WriteNumeric(Numerics::NoSuchChannel(parameters[0]));
+                       return CMD_FAILURE;
+               }
+
+               if (IS_LOCAL(source))
+               {
+                       if (chan->IsModeSet(noextmsgmode) && !chan->HasUser(source))
+                       {
+                               // The noextmsg mode is set and the source is not in the channel.
+                               source->WriteNumeric(ERR_CANNOTSENDTOCHAN, chan->name, "Cannot send to channel (no external messages)");
+                               return CMD_FAILURE;
+                       }
+
+                       bool no_chan_priv = chan->GetPrefixValue(source) < VOICE_VALUE;
+                       if (no_chan_priv && chan->IsModeSet(moderatedmode))
+                       {
+                               // The moderated mode is set and the source has no status rank.
+                               source->WriteNumeric(ERR_CANNOTSENDTOCHAN, chan->name, "Cannot send to channel (+m)");
+                               return CMD_FAILURE;
+                       }
+
+                       if (no_chan_priv && ServerInstance->Config->RestrictBannedUsers != ServerConfig::BUT_NORMAL && chan->IsBanned(source))
+                       {
+                               // The source is banned in the channel and restrictbannedusers is enabled.
+                               if (ServerInstance->Config->RestrictBannedUsers == ServerConfig::BUT_RESTRICT_NOTIFY)
+                                       source->WriteNumeric(ERR_CANNOTSENDTOCHAN, chan->name, "Cannot send to channel (you're banned)");
+                               return CMD_FAILURE;
+                       }
+               }
+
+               // Fire the pre-message events.
+               MessageTarget msgtarget(chan, pm ? pm->GetPrefix() : 0);
+               MessageDetailsImpl msgdetails(msgtype, parameters[1], parameters.GetTags());
+               msgdetails.exemptions.insert(source);
+               if (!FirePreEvents(source, msgtarget, msgdetails))
+                       return CMD_FAILURE;
+
+               // Send the message to the members of the channel.
+               ClientProtocol::Messages::Privmsg privmsg(ClientProtocol::Messages::Privmsg::nocopy, source, chan, msgdetails.text, msgdetails.type, msgtarget.status);
+               privmsg.AddTags(msgdetails.tags_out);
+               privmsg.SetSideEffect(true);
+               chan->Write(ServerInstance->GetRFCEvents().privmsg, privmsg, msgtarget.status, msgdetails.exemptions);
+
+               // Create the outgoing message and message event.
+               return FirePostEvent(source, msgtarget, msgdetails);
+       }
+
+       CmdResult HandleServerTarget(User* source, const Params& parameters)
+       {
+               // If the source isn't allowed to mass message users then reject
+               // the attempt to mass-message users.
+               if (!source->HasPrivPermission("users/mass-message"))
+                       return CMD_FAILURE;
+
+               // Extract the server glob match from the target parameter.
+               std::string servername(parameters[0], 1);
+
+               // Fire the pre-message events.
+               MessageTarget msgtarget(&servername);
+               MessageDetailsImpl msgdetails(msgtype, parameters[1], parameters.GetTags());
+               if (!FirePreEvents(source, msgtarget, msgdetails))
+                       return CMD_FAILURE;
+
+               // If the current server name matches the server name glob then send
+               // the message out to the local users.
+               if (InspIRCd::Match(ServerInstance->Config->ServerName, servername))
+               {
+                       // Create the outgoing message and message event.
+                       ClientProtocol::Messages::Privmsg message(ClientProtocol::Messages::Privmsg::nocopy, source, "$*", msgdetails.text, msgdetails.type);
+                       message.AddTags(msgdetails.tags_out);
+                       message.SetSideEffect(true);
+                       ClientProtocol::Event messageevent(ServerInstance->GetRFCEvents().privmsg, message);
+
+                       const UserManager::LocalList& list = ServerInstance->Users.GetLocalUsers();
+                       for (UserManager::LocalList::const_iterator i = list.begin(); i != list.end(); ++i)
+                       {
+                               LocalUser* luser = *i;
+
+                               // Don't send to unregistered users or the user who is the source.
+                               if (luser->registered != REG_ALL || luser == source)
+                                       continue;
+
+                               // Only send to non-exempt users.
+                               if (!msgdetails.exemptions.count(luser))
+                                       luser->Send(messageevent);
+                       }
+               }
+
+               // Fire the post-message event.
+               return FirePostEvent(source, msgtarget, msgdetails);
+       }
+
+       CmdResult HandleUserTarget(User* source, const Params& parameters)
        {
-               ClientProtocol::Messages::Privmsg message(ClientProtocol::Messages::Privmsg::nocopy, source, "$*", details.text, details.type);
-               message.AddTags(details.tags_out);
-               message.SetSideEffect(true);
-               ClientProtocol::Event messageevent(ServerInstance->GetRFCEvents().privmsg, message);
+               User* target;
+               if (IS_LOCAL(source))
+               {
+                       // Local sources can specify either a nick or a nick@server mask as the target.
+                       const char* targetserver = strchr(parameters[0].c_str(), '@');
+                       if (targetserver)
+                       {
+                               // The target is a user on a specific server (e.g. jto@tolsun.oulu.fi).
+                               target = ServerInstance->FindNickOnly(parameters[0].substr(0, targetserver - parameters[0].c_str()));
+                               if (target && strcasecmp(target->server->GetName().c_str(), targetserver + 1))
+                                       target = NULL;
+                       }
+                       else
+                       {
+                               // If the source is a local user then we only look up the target by nick.
+                               target = ServerInstance->FindNickOnly(parameters[0]);
+                       }
+               }
+               else
+               {
+                       // Remote users can only specify a nick or UUID as the target.
+                       target = ServerInstance->FindNick(parameters[0]);
+               }
 
-               const UserManager::LocalList& list = ServerInstance->Users.GetLocalUsers();
-               for (UserManager::LocalList::const_iterator i = list.begin(); i != list.end(); ++i)
+               if (!target || target->registered != REG_ALL)
                {
-                       LocalUser* user = *i;
-                       if ((user->registered == REG_ALL) && (!details.exemptions.count(user)))
-                               user->Send(messageevent);
+                       // The target user does not exist or is not fully registered.
+                       source->WriteNumeric(Numerics::NoSuchNick(parameters[0]));
+                       return CMD_FAILURE;
                }
+
+               // If the target is away then inform the user.
+               if (target->IsAway() && msgtype == MSG_PRIVMSG)
+                       source->WriteNumeric(RPL_AWAY, target->nick, target->awaymsg);
+
+               // Fire the pre-message events.
+               MessageTarget msgtarget(target);
+               MessageDetailsImpl msgdetails(msgtype, parameters[1], parameters.GetTags());
+               if (!FirePreEvents(source, msgtarget, msgdetails))
+                       return CMD_FAILURE;
+
+               LocalUser* const localtarget = IS_LOCAL(target);
+               if (localtarget)
+               {
+                       // Send to the target if they are a local user.
+                       ClientProtocol::Messages::Privmsg privmsg(ClientProtocol::Messages::Privmsg::nocopy, source, localtarget->nick, msgdetails.text, msgtype);
+                       privmsg.AddTags(msgdetails.tags_out);
+                       privmsg.SetSideEffect(true);
+                       localtarget->Send(ServerInstance->GetRFCEvents().privmsg, privmsg);
+               }
+
+               // Fire the post-message event.
+               return FirePostEvent(source, msgtarget, msgdetails);
        }
 
  public:
@@ -162,7 +303,7 @@ class CommandMessage : public Command
                , moderatedmode(parent, "moderated")
                , noextmsgmode(parent, "noextmsg")
        {
-               syntax = "<target>{,<target>} <message>";
+               syntax = "<target>[,<target>]+ :<message>";
        }
 
        /** Handle command.
@@ -170,7 +311,35 @@ class CommandMessage : public Command
         * @param user The user issuing the command
         * @return A value from CmdResult to indicate command success or failure.
         */
-       CmdResult Handle(User* user, const Params& parameters) CXX11_OVERRIDE;
+       CmdResult Handle(User* user, const Params& parameters) CXX11_OVERRIDE
+       {
+               if (CommandParser::LoopCall(user, this, parameters, 0))
+                       return CMD_SUCCESS;
+
+               // The specified message was empty.
+               if (parameters[1].empty())
+               {
+                       user->WriteNumeric(ERR_NOTEXTTOSEND, "No text to send");
+                       return CMD_FAILURE;
+               }
+
+               // The target is a server glob.
+               if (parameters[0][0] == '$')
+                       return HandleServerTarget(user, parameters);
+
+               // If the message begins with a status character then look it up.
+               const char* target = parameters[0].c_str();
+               PrefixMode* pmh = ServerInstance->Modes->FindPrefix(target[0]);
+               if (pmh)
+                       target++;
+
+               // The target is a channel name.
+               if (*target == '#')
+                       return HandleChannelTarget(user, parameters, target, pmh);
+
+               // The target is a nickname.
+               return HandleUserTarget(user, parameters);
+       }
 
        RouteDescriptor GetRouting(User* user, const Params& parameters) CXX11_OVERRIDE
        {
@@ -182,170 +351,80 @@ class CommandMessage : public Command
        }
 };
 
-CmdResult CommandMessage::Handle(User* user, const Params& parameters)
+class CommandSQuery : public SplitCommand
 {
-       User *dest;
-       Channel *chan;
-
-       if (CommandParser::LoopCall(user, this, parameters, 0))
-               return CMD_SUCCESS;
-
-       if (parameters[0][0] == '$')
+ public:
+       CommandSQuery(Module* Creator)
+               : SplitCommand(Creator, "SQUERY", 2, 2)
        {
-               if (!user->HasPrivPermission("users/mass-message"))
-                       return CMD_SUCCESS;
-
-               std::string servername(parameters[0], 1);
-               MessageTarget msgtarget(&servername);
-               MessageDetailsImpl msgdetails(msgtype, parameters[1], parameters.GetTags());
-               if (!FirePreEvents(user, msgtarget, msgdetails))
-                       return CMD_FAILURE;
-
-               if (InspIRCd::Match(ServerInstance->Config->ServerName, servername, NULL))
-               {
-                       SendAll(user, msgdetails);
-               }
-               return FirePostEvent(user, msgtarget, msgdetails);
+               syntax = "<service> :<message>";
        }
 
-       char status = 0;
-       const char* target = parameters[0].c_str();
-
-       if (ServerInstance->Modes->FindPrefix(*target))
-       {
-               status = *target;
-               target++;
-       }
-       if (*target == '#')
+       CmdResult HandleLocal(LocalUser* user, const Params& parameters) CXX11_OVERRIDE
        {
-               chan = ServerInstance->FindChan(target);
-
-               if (chan)
-               {
-                       if (IS_LOCAL(user) && chan->GetPrefixValue(user) < VOICE_VALUE)
-                       {
-                               if (chan->IsModeSet(noextmsgmode) && !chan->HasUser(user))
-                               {
-                                       user->WriteNumeric(ERR_CANNOTSENDTOCHAN, chan->name, "Cannot send to channel (no external messages)");
-                                       return CMD_FAILURE;
-                               }
-
-                               if (chan->IsModeSet(moderatedmode))
-                               {
-                                       user->WriteNumeric(ERR_CANNOTSENDTOCHAN, chan->name, "Cannot send to channel (+m)");
-                                       return CMD_FAILURE;
-                               }
-
-                               if (ServerInstance->Config->RestrictBannedUsers != ServerConfig::BUT_NORMAL)
-                               {
-                                       if (chan->IsBanned(user))
-                                       {
-                                               if (ServerInstance->Config->RestrictBannedUsers == ServerConfig::BUT_RESTRICT_NOTIFY)
-                                                       user->WriteNumeric(ERR_CANNOTSENDTOCHAN, chan->name, "Cannot send to channel (you're banned)");
-                                               return CMD_FAILURE;
-                                       }
-                               }
-                       }
-
-                       MessageTarget msgtarget(chan, status);
-                       MessageDetailsImpl msgdetails(msgtype, parameters[1], parameters.GetTags());
-                       msgdetails.exemptions.insert(user);
-                       if (!FirePreEvents(user, msgtarget, msgdetails))
-                               return CMD_FAILURE;
-
-                       ClientProtocol::Messages::Privmsg privmsg(ClientProtocol::Messages::Privmsg::nocopy, user, chan, msgdetails.text, msgdetails.type, msgtarget.status);
-                       privmsg.AddTags(msgdetails.tags_out);
-                       privmsg.SetSideEffect(true);
-                       chan->Write(ServerInstance->GetRFCEvents().privmsg, privmsg, msgtarget.status, msgdetails.exemptions);
-                       return FirePostEvent(user, msgtarget, msgdetails);
-               }
-               else
+               // The specified message was empty.
+               if (parameters[1].empty())
                {
-                       /* channel does not exist */
-                       user->WriteNumeric(Numerics::NoSuchChannel(parameters[0]));
+                       user->WriteNumeric(ERR_NOTEXTTOSEND, "No text to send");
                        return CMD_FAILURE;
                }
-       }
-
-       const char* destnick = parameters[0].c_str();
-
-       if (IS_LOCAL(user))
-       {
-               const char* targetserver = strchr(destnick, '@');
 
+               // The target can be either a nick or a nick@server mask.
+               User* target;
+               const char* targetserver = strchr(parameters[0].c_str(), '@');
                if (targetserver)
                {
-                       std::string nickonly;
-
-                       nickonly.assign(destnick, 0, targetserver - destnick);
-                       dest = ServerInstance->FindNickOnly(nickonly);
-                       if (dest && strcasecmp(dest->server->GetName().c_str(), targetserver + 1))
-                       {
-                               /* Incorrect server for user */
-                               user->WriteNumeric(Numerics::NoSuchNick(parameters[0]));
-                               return CMD_FAILURE;
-                       }
+                       // The target is a user on a specific server (e.g. jto@tolsun.oulu.fi).
+                       target = ServerInstance->FindNickOnly(parameters[0].substr(0, targetserver - parameters[0].c_str()));
+                       if (target && strcasecmp(target->server->GetName().c_str(), targetserver + 1))
+                               target = NULL;
                }
                else
-                       dest = ServerInstance->FindNickOnly(destnick);
-       }
-       else
-               dest = ServerInstance->FindNick(destnick);
-
-       if ((dest) && (dest->registered == REG_ALL))
-       {
-               if (parameters[1].empty())
                {
-                       user->WriteNumeric(ERR_NOTEXTTOSEND, "No text to send");
-                       return CMD_FAILURE;
+                       // The targer can be on any server.
+                       target = ServerInstance->FindNickOnly(parameters[0]);
                }
 
-               if ((dest->IsAway()) && (msgtype == MSG_PRIVMSG))
+               if (!target || target->registered != REG_ALL || !target->server->IsULine())
                {
-                       /* auto respond with aweh msg */
-                       user->WriteNumeric(RPL_AWAY, dest->nick, dest->awaymsg);
+                       // The target user does not exist, is not fully registered, or is not a service.
+                       user->WriteNumeric(ERR_NOSUCHSERVICE, parameters[0], "No such service");
+                       return CMD_FAILURE;
                }
 
-               MessageTarget msgtarget(dest);
-               MessageDetailsImpl msgdetails(msgtype, parameters[1], parameters.GetTags());
+               // Fire the pre-message events.
+               MessageTarget msgtarget(target);
+               MessageDetailsImpl msgdetails(MSG_PRIVMSG, parameters[1], parameters.GetTags());
                if (!FirePreEvents(user, msgtarget, msgdetails))
                        return CMD_FAILURE;
 
-               LocalUser* const localtarget = IS_LOCAL(dest);
-               if (localtarget)
-               {
-                       // direct write, same server
-                       ClientProtocol::Messages::Privmsg privmsg(ClientProtocol::Messages::Privmsg::nocopy, user, localtarget->nick, msgdetails.text, msgtype);
-                       privmsg.AddTags(msgdetails.tags_out);
-                       privmsg.SetSideEffect(true);
-                       localtarget->Send(ServerInstance->GetRFCEvents().privmsg, privmsg);
-               }
+               // The SQUERY command targets a service on a U-lined server. This can never
+               // be on the server local to the source so we don't need to do any routing
+               // logic and can forward it as a PRIVMSG.
+
+               // Fire the post-message event.
                return FirePostEvent(user, msgtarget, msgdetails);
        }
-       else
-       {
-               /* no such nick/channel */
-               user->WriteNumeric(Numerics::NoSuchNick(parameters[0]));
-               return CMD_FAILURE;
-       }
-}
+};
 
 class ModuleCoreMessage : public Module
 {
  private:
        CommandMessage cmdprivmsg;
        CommandMessage cmdnotice;
+       CommandSQuery cmdsquery;
 
  public:
        ModuleCoreMessage()
                : cmdprivmsg(this, MSG_PRIVMSG)
                , cmdnotice(this, MSG_NOTICE)
+               , cmdsquery(this)
        {
        }
 
        Version GetVersion() CXX11_OVERRIDE
        {
-               return Version("PRIVMSG, NOTICE", VF_CORE|VF_VENDOR);
+               return Version("Provides the NOTICE, PRIVMSG, and SQUERY commands", VF_CORE|VF_VENDOR);
        }
 };