!C99Shell v. 1.0 pre-release build #13!

Software: Apache/2.0.54 (Unix) mod_perl/1.99_09 Perl/v5.8.0 mod_ssl/2.0.54 OpenSSL/0.9.7l DAV/2 FrontPage/5.0.2.2635 PHP/4.4.0 mod_gzip/2.0.26.1a 

uname -a: Linux snow.he.net 4.4.276-v2-mono-1 #1 SMP Wed Jul 21 11:21:17 PDT 2021 i686 

uid=99(nobody) gid=98(nobody) groups=98(nobody) 

Safe-mode: OFF (not secure)

/usr/src/linux-2.4.18-xfs-1.1/net/bridge/   drwxr-xr-x
Free 318.39 GB of 458.09 GB (69.5%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     br_ioctl.c (5.79 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
/*
 *    Ioctl handler
 *    Linux ethernet bridge
 *
 *    Authors:
 *    Lennert Buytenhek        <buytenh@gnu.org>
 *
 *    $Id: br_ioctl.c,v 1.4 2000/11/08 05:16:40 davem Exp $
 *
 *    This program is free software; you can redistribute it and/or
 *    modify it under the terms of the GNU General Public License
 *    as published by the Free Software Foundation; either version
 *    2 of the License, or (at your option) any later version.
 */

#include <linux/kernel.h>
#include <linux/if_bridge.h>
#include <linux/inetdevice.h>
#include <asm/uaccess.h>
#include "br_private.h"

static int br_ioctl_device(struct net_bridge *br,
               unsigned int cmd,
               unsigned long arg0,
               unsigned long arg1,
               unsigned long arg2)
{
    if (br == NULL)
        return -EINVAL;

    switch (cmd)
    {
    case BRCTL_ADD_IF:
    case BRCTL_DEL_IF:
    {
        struct net_device *dev;
        int ret;

        dev = dev_get_by_index(arg0);
        if (dev == NULL)
            return -EINVAL;

        if (cmd == BRCTL_ADD_IF)
            ret = br_add_if(br, dev);
        else
            ret = br_del_if(br, dev);

        dev_put(dev);
        return ret;
    }

    case BRCTL_GET_BRIDGE_INFO:
    {
        struct __bridge_info b;

        memset(&b, 0, sizeof(struct __bridge_info));
        memcpy(&b.designated_root, &br->designated_root, 8);
        memcpy(&b.bridge_id, &br->bridge_id, 8);
        b.root_path_cost = br->root_path_cost;
        b.max_age = br->max_age;
        b.hello_time = br->hello_time;
        b.forward_delay = br->forward_delay;
        b.bridge_max_age = br->bridge_max_age;
        b.bridge_hello_time = br->bridge_hello_time;
        b.bridge_forward_delay = br->bridge_forward_delay;
        b.topology_change = br->topology_change;
        b.topology_change_detected = br->topology_change_detected;
        b.root_port = br->root_port;
        b.stp_enabled = br->stp_enabled;
        b.ageing_time = br->ageing_time;
        b.gc_interval = br->gc_interval;
        b.hello_timer_value = br_timer_get_residue(&br->hello_timer);
        b.tcn_timer_value = br_timer_get_residue(&br->tcn_timer);
        b.topology_change_timer_value = br_timer_get_residue(&br->topology_change_timer);
        b.gc_timer_value = br_timer_get_residue(&br->gc_timer);

        if (copy_to_user((void *)arg0, &b, sizeof(b)))
            return -EFAULT;

        return 0;
    }

    case BRCTL_GET_PORT_LIST:
    {
        int i;
        int indices[256];

        for (i=0;i<256;i++)
            indices[i] = 0;

        br_get_port_ifindices(br, indices);
        if (copy_to_user((void *)arg0, indices, 256*sizeof(int)))
            return -EFAULT;

        return 0;
    }

    case BRCTL_SET_BRIDGE_FORWARD_DELAY:
        br->bridge_forward_delay = arg0;
        if (br_is_root_bridge(br))
            br->forward_delay = arg0;
        return 0;

    case BRCTL_SET_BRIDGE_HELLO_TIME:
        br->bridge_hello_time = arg0;
        if (br_is_root_bridge(br))
            br->hello_time = arg0;
        return 0;

    case BRCTL_SET_BRIDGE_MAX_AGE:
        br->bridge_max_age = arg0;
        if (br_is_root_bridge(br))
            br->max_age = arg0;
        return 0;

    case BRCTL_SET_AGEING_TIME:
        br->ageing_time = arg0;
        return 0;

    case BRCTL_SET_GC_INTERVAL:
        br->gc_interval = arg0;
        return 0;

    case BRCTL_GET_PORT_INFO:
    {
        struct __port_info p;
        struct net_bridge_port *pt;

        if ((pt = br_get_port(br, arg1)) == NULL)
            return -EINVAL;

        memset(&p, 0, sizeof(struct __port_info));
        memcpy(&p.designated_root, &pt->designated_root, 8);
        memcpy(&p.designated_bridge, &pt->designated_bridge, 8);
        p.port_id = pt->port_id;
        p.designated_port = pt->designated_port;
        p.path_cost = pt->path_cost;
        p.designated_cost = pt->designated_cost;
        p.state = pt->state;
        p.top_change_ack = pt->topology_change_ack;
        p.config_pending = pt->config_pending;
        p.message_age_timer_value = br_timer_get_residue(&pt->message_age_timer);
        p.forward_delay_timer_value = br_timer_get_residue(&pt->forward_delay_timer);
        p.hold_timer_value = br_timer_get_residue(&pt->hold_timer);

        if (copy_to_user((void *)arg0, &p, sizeof(p)))
            return -EFAULT;

        return 0;
    }

    case BRCTL_SET_BRIDGE_STP_STATE:
        br->stp_enabled = arg0?1:0;
        return 0;

    case BRCTL_SET_BRIDGE_PRIORITY:
        br_stp_set_bridge_priority(br, arg0);
        return 0;

    case BRCTL_SET_PORT_PRIORITY:
    {
        struct net_bridge_port *p;

        if ((p = br_get_port(br, arg0)) == NULL)
            return -EINVAL;
        br_stp_set_port_priority(p, arg1);
        return 0;
    }

    case BRCTL_SET_PATH_COST:
    {
        struct net_bridge_port *p;

        if ((p = br_get_port(br, arg0)) == NULL)
            return -EINVAL;
        br_stp_set_path_cost(p, arg1);
        return 0;
    }

    case BRCTL_GET_FDB_ENTRIES:
        return br_fdb_get_entries(br, (void *)arg0, arg1, arg2);
    }

    return -EOPNOTSUPP;
}

static int br_ioctl_deviceless(unsigned int cmd,
                   unsigned long arg0,
                   unsigned long arg1)
{
    switch (cmd)
    {
    case BRCTL_GET_VERSION:
        return BRCTL_VERSION;

    case BRCTL_GET_BRIDGES:
    {
        int i;
        int indices[64];

        for (i=0;i<64;i++)
            indices[i] = 0;

        if (arg1 > 64)
            arg1 = 64;
        arg1 = br_get_bridge_ifindices(indices, arg1);
        if (copy_to_user((void *)arg0, indices, arg1*sizeof(int)))
            return -EFAULT;

        return arg1;
    }

    case BRCTL_ADD_BRIDGE:
    case BRCTL_DEL_BRIDGE:
    {
        char buf[IFNAMSIZ];

        if (copy_from_user(buf, (void *)arg0, IFNAMSIZ))
            return -EFAULT;

        buf[IFNAMSIZ-1] = 0;

        if (cmd == BRCTL_ADD_BRIDGE)
            return br_add_bridge(buf);

        return br_del_bridge(buf);
    }
    }

    return -EOPNOTSUPP;
}

DECLARE_MUTEX(ioctl_mutex);

int br_ioctl_deviceless_stub(unsigned long arg)
{
    int err;
    unsigned long i[3];

    if (!capable(CAP_NET_ADMIN))
        return -EPERM;

    if (copy_from_user(i, (void *)arg, 3*sizeof(unsigned long)))
        return -EFAULT;

    down(&ioctl_mutex);
    err = br_ioctl_deviceless(i[0], i[1], i[2]);
    up(&ioctl_mutex);

    return err;
}

int br_ioctl(struct net_bridge *br, unsigned int cmd, unsigned long arg0, unsigned long arg1, unsigned long arg2)
{
    int err;

    if (!capable(CAP_NET_ADMIN))
        return -EPERM;

    down(&ioctl_mutex);
    err = br_ioctl_deviceless(cmd, arg0, arg1);
    if (err == -EOPNOTSUPP)
        err = br_ioctl_device(br, cmd, arg0, arg1, arg2);
    up(&ioctl_mutex);

    return err;
}

void br_call_ioctl_atomic(void (*fn)(void))
{
    down(&ioctl_mutex);
    fn();
    up(&ioctl_mutex);
}

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0208 ]--