File netcat.add-shell-options.patch of Package netcat

Overview Repositories Revisions Requests Users Attributes Meta

File netcat.add-shell-options.patch of Package netcat (Revision bfe5586a8edd5bed50fbfce98d3601aa)

Currently displaying revision bfe5586a8edd5bed50fbfce98d3601aa , Show latest

Summary: Add -c -e option.
Contributor: Jan Minar <jjminar@fastmail.fm>

---
 netcat.c |   24 ++++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

--- a/netcat.c
+++ b/netcat.c
@@ -76,6 +76,7 @@
 #include <unistd.h>		/* read, write, yadda yadda */
 #ifdef HAVE_BIND
 #include <resolv.h>
+#include <unistd.h>
 #endif
 
 /* handy stuff: */
@@ -565,6 +566,7 @@ void loadports (block, lo, hi)
 
 #ifdef GAPING_SECURITY_HOLE
 char * pr00gie = NULL;			/* global ptr to -e arg */
+int doexec_use_sh = 0;			/* `-c' or `-e' option? */
 
 /* doexec :
    fiddle all the file descriptors around, and hand off to another prog.  Sort
@@ -581,6 +583,13 @@ doexec (fd)
   close (fd);				/* is apparently crucial; this is */
   dup2 (0, 1);				/* swiped directly out of "inetd". */
   dup2 (0, 2);
+
+  if (doexec_use_sh) {
+Debug (("gonna exec \"%s\" using /bin/sh...", pr00gie))
+    execl ("/bin/sh", "sh", "-c", pr00gie, NULL);
+    bail ("exec %s failed", pr00gie);	/* this gets sent out.  Hmm... */
+  }
+
   p = strrchr (pr00gie, '/');		/* shorter argv[0] */
   if (p)
     p++;
@@ -1400,15 +1409,20 @@ main (argc, argv)
 
 /* If your shitbox doesn't have getopt, step into the nineties already. */
 /* optarg, optind = next-argv-component [i.e. flag arg]; optopt = last-char */
-  while ((x = getopt (argc, argv, "ae:g:G:hi:lno:p:rs:tuvw:z")) != EOF) {
+  while ((x = getopt (argc, argv, "ac:e:g:G:hi:lno:p:rs:tuvw:z")) != EOF) {
 /* Debug (("in go: x now %c, optarg %x optind %d", x, optarg, optind)) */
     switch (x) {
       case 'a':
 	bail ("all-A-records NIY");
 	o_alla++; break;
 #ifdef GAPING_SECURITY_HOLE
-      case 'e':				/* prog to exec */
+      case 'c':				/* shell commands to exec */
 	pr00gie = optarg;
+	doexec_use_sh = 1;
+	break;
+      case 'e':				/* filename to exec */
+	pr00gie = optarg;
+	doexec_use_sh = 0;
 	break;
 #endif
       case 'G':				/* srcrt gateways pointer val */
@@ -1537,7 +1551,7 @@ Debug (("after go: x now %c, optarg %x o
 /* dolisten does its own connect reporting, so we don't holler anything here */
     if (netfd > 0) {
 #ifdef GAPING_SECURITY_HOLE
-      if (pr00gie)			/* -e given? */
+      if (pr00gie)			/* -c or -e given? */
 	doexec (netfd);
 #endif /* GAPING_SECURITY_HOLE */
       x = readwrite (netfd);		/* it even works with UDP! */
@@ -1650,7 +1664,9 @@ options:", basename, basename);
    newlines as they bloody please.  u-fix... */
 #ifdef GAPING_SECURITY_HOLE	/* needs to be separate holler() */
   holler ("\
-	-e prog			program to exec after connect [dangerous!!]");
+	-c shell commands	as `-e'; use /bin/sh to exec [dangerous!!]");
+  holler ("\
+	-e filename		program to exec after connect [dangerous!!]");
 #endif
   holler ("\
 	-g gateway		source-routing hop point[s], up to 8\n\

Places

File netcat.add-shell-options.patch of Package netcat (Revision bfe5586a8edd5bed50fbfce98d3601aa)

Places