summaryrefslogtreecommitdiff
path: root/usr.bin/vi/build/recover
blob: 2abbc6e623595379c5555f2d6af15e04505fbf93 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
#!/usr/bin/perl -w
#
# $OpenBSD: recover,v 1.5 2000/04/20 15:24:24 millert Exp $
#
# Script to (safely) recover nvi edit sessions.
# NOTE: Assumes we are running *before* users may start processes.
#       If that is not the case then the chown and chmod below are not safe.
#

use Fcntl;

$recoverdir = $ARGV[0] || "/var/tmp/vi.recover";
$sendmail = "/usr/sbin/sendmail";

# Make the recovery dir if it does not exist.
if (!lstat($recoverdir)) {
	mkdir($recoverdir, 01777) || die "Unable to create $recoverdir: $!\n";
	chmod(01777, $recoverdir);
	exit(0);
}

# Sanity check the vi recovery dir
if (-l _) {
	die "Warning! $recoverdir is a symbolic link! (ignoring)\n";
} elsif (! -d _) {
	die "Warning! $recoverdir is not a directory! (ignoring)\n";
} elsif (! -O _) {
	warn "Warning! $recoverdir is not owned by root! (fixing)\n";
	chown 0, 0, $recoverdir;
}
if (((stat(_))[2] & 07777) != 01777) {
	warn "Warning! $recoverdir is not mode 01777! (fixing)\n";
	chmod(01777, $recoverdir);
}
chdir($recoverdir) || die "$0: can't chdir to $recoverdir: $!\n";

# Check editor backup files.
opendir(RECDIR, ".") || die "$0: can't open $recoverdir: $!\n";
foreach $file (readdir(RECDIR)) {
	next unless $file =~ /^vi\./;

	# Unmodified vi editor backup files either have the
	# execute bit set or are zero length.  Delete them.
	# Anything that is not a normal file gets deleted too.
	lstat($file) || die "$0: can't stat $file: $!\n";
	if (-x _ || ! -s _ || ! -f _) {
		unlink($file) unless -d _;
	}
}

# It is possible to get incomplete recovery files, if the editor crashes
# at the right time.
rewinddir(RECDIR);
foreach $file (readdir(RECDIR)) {
	next unless $file =~ /^recover\./;

	# Delete anything that is not a regular file as that is either
	# filesystem corruption from fsck or an exploit attempt.
	lstat($file) || die "$0: can't stat $file: $!\n";
	if (! -f _ || ! -s _) {
		unlink($file) unless -d _;
		next;
	}

	# Slurp in the recover.* file and search for X-vi-recover-path
	# (which should point to an existing vi.* file).
	sysopen(RECFILE, $file, O_RDONLY) || die "$0: can't open $file: $!\n";
	@recfile = <RECFILE>;
	close(RECFILE);
	@backups = grep(s/^X-vi-recover-path:\s*(.*)[\r\n]*$/$1/, @recfile);

	# Delete any recovery files that are zero length, corrupted,
	# or that have no corresponding backup file.  Else send mail
	# to the user.
	if ($#backups != 0) {
		unlink($file);
	} elsif (! -s $backups[0]) {
		unlink($file, $backups[0]);
	} else {
		open(SENDMAIL, "|$sendmail -t") ||
		    die "$0: can't run $sendmail -t: $!\n";
		print SENDMAIL @recfile;
		close(SENDMAIL);
	}
}
closedir(RECDIR);

exit(0);