Define the citserver BUILD_ID as a five digit number consisting of the two digit...
[citadel.git] / citadel / server / internet_addressing.c
1 // This file contains functions which handle the mapping of Internet addresses
2 // to users on the Citadel system.
3 //
4 // Copyright (c) 1987-2022 by the citadel.org team
5 //
6 // This program is open source software.  Use, duplication, or disclosure
7 // is subject to the terms of the GNU General Public License, version 3.
8
9 #include "sysdep.h"
10 #include <stdlib.h>
11 #include <unistd.h>
12 #include <stdio.h>
13 #include <fcntl.h>
14 #include <ctype.h>
15 #include <signal.h>
16 #include <pwd.h>
17 #include <errno.h>
18 #include <sys/types.h>
19 #include <time.h>
20 #include <sys/wait.h>
21 #include <string.h>
22 #include <limits.h>
23 #include <libcitadel.h>
24 #include "citadel.h"
25 #include "server.h"
26 #include "sysdep_decls.h"
27 #include "citserver.h"
28 #include "support.h"
29 #include "config.h"
30 #include "msgbase.h"
31 #include "internet_addressing.h"
32 #include "user_ops.h"
33 #include "room_ops.h"
34 #include "parsedate.h"
35 #include "database.h"
36 #include "ctdl_module.h"
37 #ifdef HAVE_ICONV
38 #include <iconv.h>
39
40 // This is the non-define version in case it is needed for debugging
41 #if 0
42 inline void FindNextEnd (char *bptr, char *end)
43 {
44         /* Find the next ?Q? */
45         end = strchr(bptr + 2, '?');
46         if (end == NULL) return NULL;
47         if (((*(end + 1) == 'B') || (*(end + 1) == 'Q')) && 
48             (*(end + 2) == '?')) {
49                 /* skip on to the end of the cluster, the next ?= */
50                 end = strstr(end + 3, "?=");
51         }
52         else
53                 /* sort of half valid encoding, try to find an end. */
54                 end = strstr(bptr, "?=");
55 }
56 #endif
57
58 #define FindNextEnd(bptr, end) { \
59         end = strchr(bptr + 2, '?'); \
60         if (end != NULL) { \
61                 if (((*(end + 1) == 'B') || (*(end + 1) == 'Q')) && (*(end + 2) == '?')) { \
62                         end = strstr(end + 3, "?="); \
63                 } else end = strstr(bptr, "?="); \
64         } \
65 }
66
67 // Handle subjects with RFC2047 encoding such as:
68 // =?koi8-r?B?78bP0s3Mxc7JxSDXz9rE1dvO2c3JINvB0sHNySDP?=
69 void utf8ify_rfc822_string(char *buf) {
70         char *start, *end, *next, *nextend, *ptr;
71         char newbuf[1024];
72         char charset[128];
73         char encoding[16];
74         char istr[1024];
75         iconv_t ic = (iconv_t)(-1) ;
76         char *ibuf;                     // Buffer of characters to be converted
77         char *obuf;                     // Buffer for converted characters
78         size_t ibuflen;                 // Length of input buffer
79         size_t obuflen;                 // Length of output buffer
80         char *isav;                     // Saved pointer to input buffer
81         char *osav;                     // Saved pointer to output buffer
82         int passes = 0;
83         int i, len, delta;
84         int illegal_non_rfc2047_encoding = 0;
85
86         // Sometimes, badly formed messages contain strings which were simply
87         // written out directly in some foreign character set instead of
88         // using RFC2047 encoding.  This is illegal but we will attempt to
89         // handle it anyway by converting from a user-specified default
90         // charset to UTF-8 if we see any nonprintable characters.
91         len = strlen(buf);
92         for (i=0; i<len; ++i) {
93                 if ((buf[i] < 32) || (buf[i] > 126)) {
94                         illegal_non_rfc2047_encoding = 1;
95                         i = len;        // take a shortcut, it won't be more than one.
96                 }
97         }
98         if (illegal_non_rfc2047_encoding) {
99                 const char *default_header_charset = "iso-8859-1";
100                 if ( (strcasecmp(default_header_charset, "UTF-8")) && (strcasecmp(default_header_charset, "us-ascii")) ) {
101                         ctdl_iconv_open("UTF-8", default_header_charset, &ic);
102                         if (ic != (iconv_t)(-1) ) {
103                                 ibuf = malloc(1024);
104                                 isav = ibuf;
105                                 safestrncpy(ibuf, buf, 1024);
106                                 ibuflen = strlen(ibuf);
107                                 obuflen = 1024;
108                                 obuf = (char *) malloc(obuflen);
109                                 osav = obuf;
110                                 iconv(ic, &ibuf, &ibuflen, &obuf, &obuflen);
111                                 osav[1024-obuflen] = 0;
112                                 strcpy(buf, osav);
113                                 free(osav);
114                                 iconv_close(ic);
115                                 free(isav);
116                         }
117                 }
118         }
119
120         // pre evaluate the first pair
121         nextend = end = NULL;
122         len = strlen(buf);
123         start = strstr(buf, "=?");
124         if (start != NULL) 
125                 FindNextEnd (start, end);
126
127         while ((start != NULL) && (end != NULL)) {
128                 next = strstr(end, "=?");
129                 if (next != NULL)
130                         FindNextEnd(next, nextend);
131                 if (nextend == NULL)
132                         next = NULL;
133
134                 // did we find two partitions
135                 if ((next != NULL) && ((next - end) > 2)) {
136                         ptr = end + 2;
137                         while ((ptr < next) && 
138                                (isspace(*ptr) ||
139                                 (*ptr == '\r') ||
140                                 (*ptr == '\n') || 
141                                 (*ptr == '\t')))
142                                 ptr ++;
143                         // did we find a gab just filled with blanks?
144                         if (ptr == next) {
145                                 memmove(end + 2, next, len - (next - start));
146
147                                 // now terminate the gab at the end
148                                 delta = (next - end) - 2;
149                                 len -= delta;
150                                 buf[len] = '\0';
151
152                                 // move next to its new location.
153                                 next -= delta;
154                                 nextend -= delta;
155                         }
156                 }
157                 // our next-pair is our new first pair now.
158                 start = next;
159                 end = nextend;
160         }
161
162         // Now we handle foreign character sets properly encoded in RFC2047 format.
163         start = strstr(buf, "=?");
164         FindNextEnd((start != NULL)? start : buf, end);
165         while (start != NULL && end != NULL && end > start) {
166                 extract_token(charset, start, 1, '?', sizeof charset);
167                 extract_token(encoding, start, 2, '?', sizeof encoding);
168                 extract_token(istr, start, 3, '?', sizeof istr);
169
170                 ibuf = malloc(1024);
171                 isav = ibuf;
172                 if (!strcasecmp(encoding, "B")) {       // base64
173                         ibuflen = CtdlDecodeBase64(ibuf, istr, strlen(istr));
174                 }
175                 else if (!strcasecmp(encoding, "Q")) {  // quoted-printable
176                         size_t len;
177                         unsigned long pos;
178                         
179                         len = strlen(istr);
180                         pos = 0;
181                         while (pos < len) {
182                                 if (istr[pos] == '_') istr[pos] = ' ';
183                                 pos++;
184                         }
185                         ibuflen = CtdlDecodeQuotedPrintable(ibuf, istr, len);
186                 }
187                 else {
188                         strcpy(ibuf, istr);             // unknown encoding
189                         ibuflen = strlen(istr);
190                 }
191
192                 ctdl_iconv_open("UTF-8", charset, &ic);
193                 if (ic != (iconv_t)(-1) ) {
194                         obuflen = 1024;
195                         obuf = (char *) malloc(obuflen);
196                         osav = obuf;
197                         iconv(ic, &ibuf, &ibuflen, &obuf, &obuflen);
198                         osav[1024-obuflen] = 0;
199
200                         end = start;
201                         end++;
202                         strcpy(start, "");
203                         remove_token(end, 0, '?');
204                         remove_token(end, 0, '?');
205                         remove_token(end, 0, '?');
206                         remove_token(end, 0, '?');
207                         strcpy(end, &end[1]);
208
209                         snprintf(newbuf, sizeof newbuf, "%s%s%s", buf, osav, end);
210                         strcpy(buf, newbuf);
211                         free(osav);
212                         iconv_close(ic);
213                 }
214                 else {
215                         end = start;
216                         end++;
217                         strcpy(start, "");
218                         remove_token(end, 0, '?');
219                         remove_token(end, 0, '?');
220                         remove_token(end, 0, '?');
221                         remove_token(end, 0, '?');
222                         strcpy(end, &end[1]);
223
224                         snprintf(newbuf, sizeof newbuf, "%s(unreadable)%s", buf, end);
225                         strcpy(buf, newbuf);
226                 }
227
228                 free(isav);
229
230                 // Since spammers will go to all sorts of absurd lengths to get their
231                 // messages through, there are LOTS of corrupt headers out there.
232                 // So, prevent a really badly formed RFC2047 header from throwing
233                 // this function into an infinite loop.
234                 ++passes;
235                 if (passes > 20) return;
236
237                 start = strstr(buf, "=?");
238                 FindNextEnd((start != NULL)? start : buf, end);
239         }
240
241 }
242 #else
243 inline void utf8ify_rfc822_string(char *a){};
244
245 #endif
246
247
248 char *inetcfg = NULL;
249
250 // Return nonzero if the supplied name is an alias for this host.
251 int CtdlHostAlias(char *fqdn) {
252         int config_lines;
253         int i;
254         char buf[256];
255         char host[256], type[256];
256         int found = 0;
257
258         if (fqdn == NULL)                                       return(hostalias_nomatch);
259         if (IsEmptyStr(fqdn))                                   return(hostalias_nomatch);
260         if (!strcasecmp(fqdn, "localhost"))                     return(hostalias_localhost);
261         if (!strcasecmp(fqdn, CtdlGetConfigStr("c_fqdn")))      return(hostalias_localhost);
262         if (!strcasecmp(fqdn, CtdlGetConfigStr("c_nodename")))  return(hostalias_localhost);
263         if (inetcfg == NULL)                                    return(hostalias_nomatch);
264
265         config_lines = num_tokens(inetcfg, '\n');
266         for (i=0; i<config_lines; ++i) {
267                 extract_token(buf, inetcfg, i, '\n', sizeof buf);
268                 extract_token(host, buf, 0, '|', sizeof host);
269                 extract_token(type, buf, 1, '|', sizeof type);
270
271                 found = 0;
272
273                 // Process these in a specific order, in case there are multiple matches.
274                 // We want localhost to override masq, for example.
275
276                 if ( (!strcasecmp(type, "masqdomain")) && (!strcasecmp(fqdn, host))) {
277                         found = hostalias_masq;
278                 }
279
280                 if ( (!strcasecmp(type, "localhost")) && (!strcasecmp(fqdn, host))) {
281                         found = hostalias_localhost;
282                 }
283
284                 // "directory" used to be a distributed version of "localhost" but they're both the same now
285                 if ( (!strcasecmp(type, "directory")) && (!strcasecmp(fqdn, host))) {
286                         found = hostalias_localhost;
287                 }
288
289                 if (found) return(found);
290         }
291         return(hostalias_nomatch);
292 }
293
294
295 // Determine whether a given Internet address belongs to the current user
296 int CtdlIsMe(char *addr, int addr_buf_len) {
297         struct recptypes *recp;
298         int i;
299
300         recp = validate_recipients(addr, NULL, 0);
301         if (recp == NULL) return(0);
302
303         if (recp->num_local == 0) {
304                 free_recipients(recp);
305                 return(0);
306         }
307
308         for (i=0; i<recp->num_local; ++i) {
309                 extract_token(addr, recp->recp_local, i, '|', addr_buf_len);
310                 if (!strcasecmp(addr, CC->user.fullname)) {
311                         free_recipients(recp);
312                         return(1);
313                 }
314         }
315
316         free_recipients(recp);
317         return(0);
318 }
319
320
321 // If the last item in a list of recipients was truncated to a partial address,
322 // remove it completely in order to avoid choking library functions.
323 void sanitize_truncated_recipient(char *str) {
324         if (!str) return;
325         if (num_tokens(str, ',') < 2) return;
326
327         int len = strlen(str);
328         if (len < 900) return;
329         if (len > 998) str[998] = 0;
330
331         char *cptr = strrchr(str, ',');
332         if (!cptr) return;
333
334         char *lptr = strchr(cptr, '<');
335         char *rptr = strchr(cptr, '>');
336
337         if ( (lptr) && (rptr) && (rptr > lptr) ) return;
338
339         *cptr = 0;
340 }
341
342
343 // This function is self explanatory.
344 // (What can I say, I'm in a weird mood today...)
345 void remove_any_whitespace_to_the_left_or_right_of_at_symbol(char *name) {
346         char *ptr;
347         if (!name) return;
348
349         for (ptr=name; *ptr; ++ptr) {
350                 while ( (isspace(*ptr)) && (*(ptr+1)=='@') ) {
351                         strcpy(ptr, ptr+1);
352                         if (ptr > name) --ptr;
353                 }
354                 while ( (*ptr=='@') && (*(ptr+1)!=0) && (isspace(*(ptr+1))) ) {
355                         strcpy(ptr+1, ptr+2);
356                 }
357         }
358 }
359
360
361 // values that can be returned by expand_aliases()
362 enum {
363         EA_ERROR,               // Can't send message due to bad address
364         EA_MULTIPLE,            // Alias expanded into multiple recipients -- run me again!
365         EA_LOCAL,               // Local message, do no network processing
366         EA_INTERNET,            // Convert msg and send as Internet mail
367         EA_SKIP                 // This recipient has been invalidated -- skip it!
368 };
369
370
371 // Process alias and routing info for email addresses
372 int expand_aliases(char *name, char *aliases) {
373         int a;
374         char aaa[SIZ];
375         int at = 0;
376
377         if (aliases) {
378                 int num_aliases = num_tokens(aliases, '\n');
379                 for (a=0; a<num_aliases; ++a) {
380                         extract_token(aaa, aliases, a, '\n', sizeof aaa);
381                         char *bar = strchr(aaa, '|');
382                         if (bar) {
383                                 bar[0] = 0;
384                                 ++bar;
385                                 striplt(aaa);
386                                 striplt(bar);
387                                 if ( (!IsEmptyStr(aaa)) && (!strcasecmp(name, aaa)) ) {
388                                         syslog(LOG_DEBUG, "internet_addressing: global alias <%s> to <%s>", name, bar);
389                                         strcpy(name, bar);
390                                 }
391                         }
392                 }
393                 if (strchr(name, ',')) {
394                         return(EA_MULTIPLE);
395                 }
396         }
397
398         char original_name[256];                                // Now go for the regular aliases
399         safestrncpy(original_name, name, sizeof original_name);
400
401         // should these checks still be here, or maybe move them to split_recps() ?
402         striplt(name);
403         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
404         stripallbut(name, '<', '>');
405
406         // Hit the email address directory
407         if (CtdlDirectoryLookup(aaa, name, sizeof aaa) == 0) {
408                 strcpy(name, aaa);
409         }
410
411         if (strcasecmp(original_name, name)) {
412                 syslog(LOG_INFO, "internet_addressing: directory alias <%s> to <%s>", original_name, name);
413         }
414
415         // Change "user @ xxx" to "user" if xxx is an alias for this host
416         for (a=0; name[a] != '\0'; ++a) {
417                 if (name[a] == '@') {
418                         if (CtdlHostAlias(&name[a+1]) == hostalias_localhost) {
419                                 name[a] = 0;
420                                 syslog(LOG_DEBUG, "internet_addressing: host is local, recipient is <%s>", name);
421                                 break;
422                         }
423                 }
424         }
425
426         // Is this a local or remote recipient?
427         at = haschar(name, '@');
428         if (at == 0) {
429                 return(EA_LOCAL);                       // no @'s = local address
430         }
431         else if (at == 1) {
432                 return(EA_INTERNET);                    // one @ = internet address
433         }
434         else {
435                 return(EA_ERROR);                       // more than one @ = badly formed address
436         }
437 }
438
439
440 // Return a supplied list of email addresses as an array, removing superfluous information and syntax.
441 // If an existing Array is supplied as "append_to" it will do so; otherwise a new Array is allocated.
442 Array *split_recps(char *addresses, Array *append_to) {
443
444         if (IsEmptyStr(addresses)) {            // nothing supplied, nothing returned
445                 return(NULL);
446         }
447
448         // Copy the supplied address list into our own memory space, because we are going to modify it.
449         char *a = strdup(addresses);
450         if (a == NULL) {
451                 syslog(LOG_ERR, "internet_addressing: malloc() failed: %m");
452                 return(NULL);
453         }
454
455         // Strip out anything in double quotes
456         char *l = NULL;
457         char *r = NULL;
458         do {
459                 l = strchr(a, '\"');
460                 r = strrchr(a, '\"');
461                 if (r > l) {
462                         strcpy(l, r+1);
463                 }
464         } while (r > l);
465
466         // Transform all qualifying delimiters to commas
467         char *t;
468         for (t=a; t[0]; ++t) {
469                 if ((t[0]==';') || (t[0]=='|')) {
470                         t[0]=',';
471                 }
472         }
473
474         // Tokenize the recipients into an array.  No single recipient should be larger than 256 bytes.
475         Array *recipients_array = NULL;
476         if (append_to) {
477                 recipients_array = append_to;                   // Append to an existing array of recipients
478         }
479         else {
480                 recipients_array = array_new(256);              // This is a new array of recipients
481         }
482
483         int num_addresses = num_tokens(a, ',');
484         int i;
485         for (i=0; i<num_addresses; ++i) {
486                 char this_address[256];
487                 extract_token(this_address, a, i, ',', sizeof this_address);
488                 striplt(this_address);                          // strip leading and trailing whitespace
489                 stripout(this_address, '(', ')');               // remove any portion in parentheses
490                 stripallbut(this_address, '<', '>');            // if angle brackets are present, keep only what is inside them
491                 if (!IsEmptyStr(this_address)) {
492                         array_append(recipients_array, this_address);
493                 }
494         }
495
496         free(a);                                                // We don't need this buffer anymore.
497         return(recipients_array);                               // Return the completed array to the caller.
498 }
499
500
501 // Validate recipients, count delivery types and errors, and handle aliasing
502 //
503 // Returns 0 if all addresses are ok, ret->num_error = -1 if no addresses 
504 // were specified, or the number of addresses found invalid.
505 //
506 // Caller needs to free the result using free_recipients()
507 //
508 struct recptypes *validate_recipients(char *supplied_recipients, const char *RemoteIdentifier, int Flags) {
509         struct recptypes *ret;
510         char *recipients = NULL;
511         char append[SIZ];
512         long len;
513         int mailtype;
514         int invalid;
515         struct ctdluser tempUS;
516         struct ctdlroom original_room;
517         int err = 0;
518         char errmsg[SIZ];
519         char *org_recp;
520         char this_recp[256];
521
522         ret = (struct recptypes *) malloc(sizeof(struct recptypes));                    // Initialize
523         if (ret == NULL) return(NULL);
524         memset(ret, 0, sizeof(struct recptypes));                                       // set all values to null/zero
525
526         if (supplied_recipients == NULL) {
527                 recipients = strdup("");
528         }
529         else {
530                 recipients = strdup(supplied_recipients);
531         }
532
533         len = strlen(recipients) + 1024;                                                // allocate memory
534         ret->errormsg = malloc(len);
535         ret->recp_local = malloc(len);
536         ret->recp_internet = malloc(len);
537         ret->recp_room = malloc(len);
538         ret->display_recp = malloc(len);
539         ret->recp_orgroom = malloc(len);
540
541         ret->errormsg[0] = 0;
542         ret->recp_local[0] = 0;
543         ret->recp_internet[0] = 0;
544         ret->recp_room[0] = 0;
545         ret->recp_orgroom[0] = 0;
546         ret->display_recp[0] = 0;
547         ret->recptypes_magic = RECPTYPES_MAGIC;
548
549         Array *recp_array = split_recps(supplied_recipients, NULL);
550
551         char *aliases = CtdlGetSysConfig(GLOBAL_ALIASES);                               // First hit the Global Alias Table
552
553         int r;
554         for (r=0; (recp_array && r<array_len(recp_array)); ++r) {
555                 org_recp = (char *)array_get_element_at(recp_array, r);
556                 strncpy(this_recp, org_recp, sizeof this_recp);
557
558                 int i;
559                 for (i=0; i<3; ++i) {                                           // pass three times through the aliaser
560                         mailtype = expand_aliases(this_recp, aliases);
561         
562                         // If an alias expanded to multiple recipients, strip off those recipients and append them
563                         // to the end of the array.  This loop will hit those again when it gets there.
564                         if (mailtype == EA_MULTIPLE) {
565                                 recp_array = split_recps(this_recp, recp_array);
566                         }
567                 }
568
569                 // This loop searches for duplicate recipients in the final list and marks them to be skipped.
570                 int j;
571                 for (j=0; j<r; ++j) {
572                         if (!strcasecmp(this_recp, (char *)array_get_element_at(recp_array, j) )) {
573                                 mailtype = EA_SKIP;
574                         }
575                 }
576
577                 syslog(LOG_DEBUG, "Recipient #%d of type %d is <%s>", r, mailtype, this_recp);
578                 invalid = 0;
579                 errmsg[0] = 0;
580                 switch(mailtype) {
581                 case EA_LOCAL:                                  // There are several types of "local" recipients.
582
583                         // Old BBS conventions require mail to "sysop" to go somewhere.  Send it to the admin room.
584                         if (!strcasecmp(this_recp, "sysop")) {
585                                 ++ret->num_room;
586                                 strcpy(this_recp, CtdlGetConfigStr("c_aideroom"));
587                                 if (!IsEmptyStr(ret->recp_room)) {
588                                         strcat(ret->recp_room, "|");
589                                 }
590                                 strcat(ret->recp_room, this_recp);
591                         }
592
593                         // This handles rooms which can receive posts via email.
594                         else if (!strncasecmp(this_recp, "room_", 5)) {
595                                 original_room = CC->room;                               // Remember where we parked
596
597                                 char mail_to_room[ROOMNAMELEN];
598                                 char *m;
599                                 strncpy(mail_to_room, &this_recp[5], sizeof mail_to_room);
600                                 for (m = mail_to_room; *m; ++m) {
601                                         if (m[0] == '_') m[0]=' ';
602                                 }
603                                 if (!CtdlGetRoom(&CC->room, mail_to_room)) {            // Find the room they asked for
604
605                                         err = CtdlDoIHavePermissionToPostInThisRoom(    // check for write permissions to room
606                                                 errmsg, 
607                                                 sizeof errmsg, 
608                                                 Flags,
609                                                 0                                       // 0 means "this is not a reply"
610                                         );
611                                         if (err) {
612                                                 ++ret->num_error;
613                                                 invalid = 1;
614                                         } 
615                                         else {
616                                                 ++ret->num_room;
617                                                 if (!IsEmptyStr(ret->recp_room)) {
618                                                         strcat(ret->recp_room, "|");
619                                                 }
620                                                 strcat(ret->recp_room, CC->room.QRname);
621         
622                                                 if (!IsEmptyStr(ret->recp_orgroom)) {
623                                                         strcat(ret->recp_orgroom, "|");
624                                                 }
625                                                 strcat(ret->recp_orgroom, this_recp);
626         
627                                         }
628                                 }
629                                 else {                                                  // no such room exists
630                                         ++ret->num_error;
631                                         invalid = 1;
632                                 }
633                                                 
634                                 // Restore this session's original room location.
635                                 CC->room = original_room;
636
637                         }
638
639                         // This handles the most common case, which is mail to a user's inbox.
640                         else if (CtdlGetUser(&tempUS, this_recp) == 0) {
641                                 ++ret->num_local;
642                                 strcpy(this_recp, tempUS.fullname);
643                                 if (!IsEmptyStr(ret->recp_local)) {
644                                         strcat(ret->recp_local, "|");
645                                 }
646                                 strcat(ret->recp_local, this_recp);
647                         }
648
649                         // No match for this recipient
650                         else {
651                                 ++ret->num_error;
652                                 invalid = 1;
653                         }
654                         break;
655                 case EA_INTERNET:
656                         // Yes, you're reading this correctly: if the target domain points back to the local system,
657                         // the address is invalid.  That's because if the address were valid, we would have
658                         // already translated it to a local address by now.
659                         if (IsDirectory(this_recp, 0)) {
660                                 ++ret->num_error;
661                                 invalid = 1;
662                         }
663                         else {
664                                 ++ret->num_internet;
665                                 if (!IsEmptyStr(ret->recp_internet)) {
666                                         strcat(ret->recp_internet, "|");
667                                 }
668                                 strcat(ret->recp_internet, this_recp);
669                         }
670                         break;
671                 case EA_MULTIPLE:
672                 case EA_SKIP:
673                         // no action required, anything in this slot has already been processed elsewhere
674                         break;
675                 case EA_ERROR:
676                         ++ret->num_error;
677                         invalid = 1;
678                         break;
679                 }
680                 if (invalid) {
681                         if (IsEmptyStr(errmsg)) {
682                                 snprintf(append, sizeof append, "Invalid recipient: %s", this_recp);
683                         }
684                         else {
685                                 snprintf(append, sizeof append, "%s", errmsg);
686                         }
687                         if ( (strlen(ret->errormsg) + strlen(append) + 3) < SIZ) {
688                                 if (!IsEmptyStr(ret->errormsg)) {
689                                         strcat(ret->errormsg, "; ");
690                                 }
691                                 strcat(ret->errormsg, append);
692                         }
693                 }
694                 else {
695                         if (IsEmptyStr(ret->display_recp)) {
696                                 strcpy(append, this_recp);
697                         }
698                         else {
699                                 snprintf(append, sizeof append, ", %s", this_recp);
700                         }
701                         if ( (strlen(ret->display_recp)+strlen(append)) < SIZ) {
702                                 strcat(ret->display_recp, append);
703                         }
704                 }
705         }
706
707         if (aliases != NULL) {          // ok, we're done with the global alias list now
708                 free(aliases);
709         }
710
711         if ( (ret->num_local + ret->num_internet + ret->num_room + ret->num_error) == 0) {
712                 ret->num_error = (-1);
713                 strcpy(ret->errormsg, "No recipients specified.");
714         }
715
716         syslog(LOG_DEBUG, "internet_addressing: validate_recipients() = %d local, %d room, %d SMTP, %d error",
717                 ret->num_local, ret->num_room, ret->num_internet, ret->num_error
718         );
719
720         free(recipients);
721         if (recp_array) {
722                 array_free(recp_array);
723         }
724
725         return(ret);
726 }
727
728
729 // Destructor for recptypes
730 void free_recipients(struct recptypes *valid) {
731
732         if (valid == NULL) {
733                 return;
734         }
735
736         if (valid->recptypes_magic != RECPTYPES_MAGIC) {
737                 syslog(LOG_ERR, "internet_addressing: attempt to call free_recipients() on some other data type!");
738                 abort();
739         }
740
741         if (valid->errormsg != NULL)            free(valid->errormsg);
742         if (valid->recp_local != NULL)          free(valid->recp_local);
743         if (valid->recp_internet != NULL)       free(valid->recp_internet);
744         if (valid->recp_room != NULL)           free(valid->recp_room);
745         if (valid->recp_orgroom != NULL)        free(valid->recp_orgroom);
746         if (valid->display_recp != NULL)        free(valid->display_recp);
747         if (valid->bounce_to != NULL)           free(valid->bounce_to);
748         if (valid->envelope_from != NULL)       free(valid->envelope_from);
749         if (valid->sending_room != NULL)        free(valid->sending_room);
750         free(valid);
751 }
752
753
754 char *qp_encode_email_addrs(char *source) {
755         char *user, *node, *name;
756         const char headerStr[] = "=?UTF-8?Q?";
757         char *Encoded;
758         char *EncodedName;
759         char *nPtr;
760         int need_to_encode = 0;
761         long SourceLen;
762         long EncodedMaxLen;
763         long nColons = 0;
764         long *AddrPtr;
765         long *AddrUtf8;
766         long nAddrPtrMax = 50;
767         long nmax;
768         int InQuotes = 0;
769         int i, n;
770
771         if (source == NULL) return source;
772         if (IsEmptyStr(source)) return source;
773         syslog(LOG_DEBUG, "internet_addressing: qp_encode_email_addrs <%s>", source);
774
775         AddrPtr = malloc (sizeof (long) * nAddrPtrMax);
776         AddrUtf8 = malloc (sizeof (long) * nAddrPtrMax);
777         memset(AddrUtf8, 0, sizeof (long) * nAddrPtrMax);
778         *AddrPtr = 0;
779         i = 0;
780         while (!IsEmptyStr (&source[i])) {
781                 if (nColons >= nAddrPtrMax){
782                         long *ptr;
783
784                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
785                         memcpy (ptr, AddrPtr, sizeof (long) * nAddrPtrMax);
786                         free (AddrPtr), AddrPtr = ptr;
787
788                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
789                         memset(&ptr[nAddrPtrMax], 0, sizeof (long) * nAddrPtrMax);
790
791                         memcpy (ptr, AddrUtf8, sizeof (long) * nAddrPtrMax);
792                         free (AddrUtf8), AddrUtf8 = ptr;
793                         nAddrPtrMax *= 2;                               
794                 }
795                 if (((unsigned char) source[i] < 32) || ((unsigned char) source[i] > 126)) {
796                         need_to_encode = 1;
797                         AddrUtf8[nColons] = 1;
798                 }
799                 if (source[i] == '"') {
800                         InQuotes = !InQuotes;
801                 }
802                 if (!InQuotes && source[i] == ',') {
803                         AddrPtr[nColons] = i;
804                         nColons++;
805                 }
806                 i++;
807         }
808         if (need_to_encode == 0) {
809                 free(AddrPtr);
810                 free(AddrUtf8);
811                 return source;
812         }
813
814         SourceLen = i;
815         EncodedMaxLen = nColons * (sizeof(headerStr) + 3) + SourceLen * 3;
816         Encoded = (char*) malloc (EncodedMaxLen);
817
818         for (i = 0; i < nColons; i++) {
819                 source[AddrPtr[i]++] = '\0';
820         }
821         // TODO: if libidn, this might get larger
822         user = malloc(SourceLen + 1);
823         node = malloc(SourceLen + 1);
824         name = malloc(SourceLen + 1);
825
826         nPtr = Encoded;
827         *nPtr = '\0';
828         for (i = 0; i < nColons && nPtr != NULL; i++) {
829                 nmax = EncodedMaxLen - (nPtr - Encoded);
830                 if (AddrUtf8[i]) {
831                         process_rfc822_addr(&source[AddrPtr[i]], user, node, name);
832                         // TODO: libIDN here !
833                         if (IsEmptyStr(name)) {
834                                 n = snprintf(nPtr, nmax, (i==0)?"%s@%s" : ",%s@%s", user, node);
835                         }
836                         else {
837                                 EncodedName = rfc2047encode(name, strlen(name));                        
838                                 n = snprintf(nPtr, nmax, (i==0)?"%s <%s@%s>" : ",%s <%s@%s>", EncodedName, user, node);
839                                 free(EncodedName);
840                         }
841                 }
842                 else { 
843                         n = snprintf(nPtr, nmax, (i==0)?"%s" : ",%s", &source[AddrPtr[i]]);
844                 }
845                 if (n > 0 )
846                         nPtr += n;
847                 else { 
848                         char *ptr, *nnPtr;
849                         ptr = (char*) malloc(EncodedMaxLen * 2);
850                         memcpy(ptr, Encoded, EncodedMaxLen);
851                         nnPtr = ptr + (nPtr - Encoded), nPtr = nnPtr;
852                         free(Encoded), Encoded = ptr;
853                         EncodedMaxLen *= 2;
854                         i--; // do it once more with properly lengthened buffer
855                 }
856         }
857         for (i = 0; i < nColons; i++)
858                 source[--AddrPtr[i]] = ',';
859
860         free(user);
861         free(node);
862         free(name);
863         free(AddrUtf8);
864         free(AddrPtr);
865         return Encoded;
866 }
867
868
869 // Unfold a multi-line field into a single line, removing multi-whitespaces
870 void unfold_rfc822_field(char **field, char **FieldEnd) 
871 {
872         int quote = 0;
873         char *pField = *field;
874         char *sField;
875         char *pFieldEnd = *FieldEnd;
876
877         while (isspace(*pField))
878                 pField++;
879         // remove leading/trailing whitespace
880         ;
881
882         while (isspace(*pFieldEnd))
883                 pFieldEnd --;
884
885         *FieldEnd = pFieldEnd;
886         // convert non-space whitespace to spaces, and remove double blanks
887         for (sField = *field = pField; 
888              sField < pFieldEnd; 
889              pField++, sField++)
890         {
891                 if ((*sField=='\r') || (*sField=='\n'))
892                 {
893                         int offset = 1;
894                         while ( ( (*(sField + offset) == '\r') || (*(sField + offset) == '\n' )) && (sField + offset < pFieldEnd) ) {
895                                 offset ++;
896                         }
897                         sField += offset;
898                         *pField = *sField;
899                 }
900                 else {
901                         if (*sField=='\"') quote = 1 - quote;
902                         if (!quote) {
903                                 if (isspace(*sField)) {
904                                         *pField = ' ';
905                                         pField++;
906                                         sField++;
907                                         
908                                         while ((sField < pFieldEnd) && 
909                                                isspace(*sField))
910                                                 sField++;
911                                         *pField = *sField;
912                                 }
913                                 else *pField = *sField;
914                         }
915                         else *pField = *sField;
916                 }
917         }
918         *pField = '\0';
919         *FieldEnd = pField - 1;
920 }
921
922
923 // Split an RFC822-style address into userid, host, and full name
924 //
925 // Note: This still handles obsolete address syntaxes such as user%node@node and ...node!user
926 //       We should probably remove that.
927 void process_rfc822_addr(const char *rfc822, char *user, char *node, char *name) {
928         int a;
929
930         strcpy(user, "");
931         strcpy(node, CtdlGetConfigStr("c_fqdn"));
932         strcpy(name, "");
933
934         if (rfc822 == NULL) return;
935
936         // extract full name - first, it's From minus <userid>
937         strcpy(name, rfc822);
938         stripout(name, '<', '>');
939
940         // strip anything to the left of a bang
941         while ((!IsEmptyStr(name)) && (haschar(name, '!') > 0))
942                 strcpy(name, &name[1]);
943
944         // and anything to the right of a @ or %
945         for (a = 0; name[a] != '\0'; ++a) {
946                 if (name[a] == '@') {
947                         name[a] = 0;
948                         break;
949                 }
950                 if (name[a] == '%') {
951                         name[a] = 0;
952                         break;
953                 }
954         }
955
956         // but if there are parentheses, that changes the rules...
957         if ((haschar(rfc822, '(') == 1) && (haschar(rfc822, ')') == 1)) {
958                 strcpy(name, rfc822);
959                 stripallbut(name, '(', ')');
960         }
961
962         // but if there are a set of quotes, that supersedes everything
963         if (haschar(rfc822, 34) == 2) {
964                 strcpy(name, rfc822);
965                 while ((!IsEmptyStr(name)) && (name[0] != 34)) {
966                         strcpy(&name[0], &name[1]);
967                 }
968                 strcpy(&name[0], &name[1]);
969                 for (a = 0; name[a] != '\0'; ++a)
970                         if (name[a] == 34) {
971                                 name[a] = 0;
972                                 break;
973                         }
974         }
975         // extract user id
976         strcpy(user, rfc822);
977
978         // first get rid of anything in parens
979         stripout(user, '(', ')');
980
981         // if there's a set of angle brackets, strip it down to that
982         if ((haschar(user, '<') == 1) && (haschar(user, '>') == 1)) {
983                 stripallbut(user, '<', '>');
984         }
985
986         // strip anything to the left of a bang
987         while ((!IsEmptyStr(user)) && (haschar(user, '!') > 0))
988                 strcpy(user, &user[1]);
989
990         // and anything to the right of a @ or %
991         for (a = 0; user[a] != '\0'; ++a) {
992                 if (user[a] == '@') {
993                         user[a] = 0;
994                         break;
995                 }
996                 if (user[a] == '%') {
997                         user[a] = 0;
998                         break;
999                 }
1000         }
1001
1002
1003         // extract node name
1004         strcpy(node, rfc822);
1005
1006         // first get rid of anything in parens
1007         stripout(node, '(', ')');
1008
1009         // if there's a set of angle brackets, strip it down to that
1010         if ((haschar(node, '<') == 1) && (haschar(node, '>') == 1)) {
1011                 stripallbut(node, '<', '>');
1012         }
1013
1014         // If no node specified, tack ours on instead
1015         if (
1016                 (haschar(node, '@')==0)
1017                 && (haschar(node, '%')==0)
1018                 && (haschar(node, '!')==0)
1019         ) {
1020                 strcpy(node, CtdlGetConfigStr("c_nodename"));
1021         }
1022         else {
1023
1024                 // strip anything to the left of a @
1025                 while ((!IsEmptyStr(node)) && (haschar(node, '@') > 0))
1026                         strcpy(node, &node[1]);
1027         
1028                 // strip anything to the left of a %
1029                 while ((!IsEmptyStr(node)) && (haschar(node, '%') > 0))
1030                         strcpy(node, &node[1]);
1031         
1032                 // reduce multiple system bang paths to node!user
1033                 while ((!IsEmptyStr(node)) && (haschar(node, '!') > 1))
1034                         strcpy(node, &node[1]);
1035         
1036                 // now get rid of the user portion of a node!user string
1037                 for (a = 0; node[a] != '\0'; ++a)
1038                         if (node[a] == '!') {
1039                                 node[a] = 0;
1040                                 break;
1041                         }
1042         }
1043
1044         // strip leading and trailing spaces in all strings
1045         striplt(user);
1046         striplt(node);
1047         striplt(name);
1048
1049         // If we processed a string that had the address in angle brackets
1050         // but no name outside the brackets, we now have an empty name.  In
1051         // this case, use the user portion of the address as the name.
1052         if ((IsEmptyStr(name)) && (!IsEmptyStr(user))) {
1053                 strcpy(name, user);
1054         }
1055 }
1056
1057
1058 // convert_field() is a helper function for convert_internet_message().
1059 // Given start/end positions for an rfc822 field, it converts it to a Citadel
1060 // field if it wants to, and unfolds it if necessary.
1061 //
1062 // Returns 1 if the field was converted and inserted into the Citadel message
1063 // structure, implying that the source field should be removed from the
1064 // message text.
1065 int convert_field(struct CtdlMessage *msg, const char *beg, const char *end) {
1066         char *key, *value, *valueend;
1067         long len;
1068         const char *pos;
1069         int i;
1070         const char *colonpos = NULL;
1071         int processed = 0;
1072         char user[1024];
1073         char node[1024];
1074         char name[1024];
1075         char addr[1024];
1076         time_t parsed_date;
1077         long valuelen;
1078
1079         for (pos = end; pos >= beg; pos--) {
1080                 if (*pos == ':') colonpos = pos;
1081         }
1082
1083         if (colonpos == NULL) return(0);        /* no colon? not a valid header line */
1084
1085         len = end - beg;
1086         key = malloc(len + 2);
1087         memcpy(key, beg, len + 1);
1088         key[len] = '\0';
1089         valueend = key + len;
1090         * ( key + (colonpos - beg) ) = '\0';
1091         value = &key[(colonpos - beg) + 1];
1092         // printf("Header: [%s]\nValue: [%s]\n", key, value);
1093         unfold_rfc822_field(&value, &valueend);
1094         valuelen = valueend - value + 1;
1095         // printf("UnfoldedValue: [%s]\n", value);
1096
1097         // Here's the big rfc822-to-citadel loop.
1098
1099         // Date/time is converted into a unix timestamp.  If the conversion
1100         // fails, we replace it with the time the message arrived locally.
1101         if (!strcasecmp(key, "Date")) {
1102                 parsed_date = parsedate(value);
1103                 if (parsed_date < 0L) parsed_date = time(NULL);
1104
1105                 if (CM_IsEmpty(msg, eTimestamp))
1106                         CM_SetFieldLONG(msg, eTimestamp, parsed_date);
1107                 processed = 1;
1108         }
1109
1110         else if (!strcasecmp(key, "From")) {
1111                 process_rfc822_addr(value, user, node, name);
1112                 syslog(LOG_DEBUG, "internet_addressing: converted to <%s@%s> (%s)", user, node, name);
1113                 snprintf(addr, sizeof(addr), "%s@%s", user, node);
1114                 if (CM_IsEmpty(msg, eAuthor) && !IsEmptyStr(name)) {
1115                         CM_SetField(msg, eAuthor, name, -1);
1116                 }
1117                 if (CM_IsEmpty(msg, erFc822Addr) && !IsEmptyStr(addr)) {
1118                         CM_SetField(msg, erFc822Addr, addr, -1);
1119                 }
1120                 processed = 1;
1121         }
1122
1123         else if (!strcasecmp(key, "Subject")) {
1124                 if (CM_IsEmpty(msg, eMsgSubject))
1125                         CM_SetField(msg, eMsgSubject, value, valuelen);
1126                 processed = 1;
1127         }
1128
1129         else if (!strcasecmp(key, "List-ID")) {
1130                 if (CM_IsEmpty(msg, eListID))
1131                         CM_SetField(msg, eListID, value, valuelen);
1132                 processed = 1;
1133         }
1134
1135         else if (!strcasecmp(key, "To")) {
1136                 if (CM_IsEmpty(msg, eRecipient))
1137                         CM_SetField(msg, eRecipient, value, valuelen);
1138                 processed = 1;
1139         }
1140
1141         else if (!strcasecmp(key, "CC")) {
1142                 if (CM_IsEmpty(msg, eCarbonCopY))
1143                         CM_SetField(msg, eCarbonCopY, value, valuelen);
1144                 processed = 1;
1145         }
1146
1147         else if (!strcasecmp(key, "Message-ID")) {
1148                 if (!CM_IsEmpty(msg, emessageId)) {
1149                         syslog(LOG_WARNING, "internet_addressing: duplicate message id");
1150                 }
1151                 else {
1152                         char *pValue;
1153                         long pValueLen;
1154
1155                         pValue = value;
1156                         pValueLen = valuelen;
1157                         // Strip angle brackets
1158                         while (haschar(pValue, '<') > 0) {
1159                                 pValue ++;
1160                                 pValueLen --;
1161                         }
1162
1163                         for (i = 0; i <= pValueLen; ++i)
1164                                 if (pValue[i] == '>') {
1165                                         pValueLen = i;
1166                                         break;
1167                                 }
1168
1169                         CM_SetField(msg, emessageId, pValue, pValueLen);
1170                 }
1171
1172                 processed = 1;
1173         }
1174
1175         else if (!strcasecmp(key, "Return-Path")) {
1176                 if (CM_IsEmpty(msg, eMessagePath))
1177                         CM_SetField(msg, eMessagePath, value, valuelen);
1178                 processed = 1;
1179         }
1180
1181         else if (!strcasecmp(key, "Envelope-To")) {
1182                 if (CM_IsEmpty(msg, eenVelopeTo))
1183                         CM_SetField(msg, eenVelopeTo, value, valuelen);
1184                 processed = 1;
1185         }
1186
1187         else if (!strcasecmp(key, "References")) {
1188                 CM_SetField(msg, eWeferences, value, valuelen);
1189                 processed = 1;
1190         }
1191
1192         else if (!strcasecmp(key, "Reply-To")) {
1193                 CM_SetField(msg, eReplyTo, value, valuelen);
1194                 processed = 1;
1195         }
1196
1197         else if (!strcasecmp(key, "In-reply-to")) {
1198                 if (CM_IsEmpty(msg, eWeferences)) // References: supersedes In-reply-to:
1199                         CM_SetField(msg, eWeferences, value, valuelen);
1200                 processed = 1;
1201         }
1202
1203
1204
1205         // Clean up and move on.
1206         free(key);      // Don't free 'value', it's actually the same buffer
1207         return processed;
1208 }
1209
1210
1211 // Convert RFC822 references format (References) to Citadel references format (Weferences)
1212 void convert_references_to_wefewences(char *str) {
1213         int bracket_nesting = 0;
1214         char *ptr = str;
1215         char *moveptr = NULL;
1216         char ch;
1217
1218         while(*ptr) {
1219                 ch = *ptr;
1220                 if (ch == '>') {
1221                         --bracket_nesting;
1222                         if (bracket_nesting < 0) bracket_nesting = 0;
1223                 }
1224                 if ((ch == '>') && (bracket_nesting == 0) && (*(ptr+1)) && (ptr>str) ) {
1225                         *ptr = '|';
1226                         ++ptr;
1227                 }
1228                 else if (bracket_nesting > 0) {
1229                         ++ptr;
1230                 }
1231                 else {
1232                         moveptr = ptr;
1233                         while (*moveptr) {
1234                                 *moveptr = *(moveptr+1);
1235                                 ++moveptr;
1236                         }
1237                 }
1238                 if (ch == '<') ++bracket_nesting;
1239         }
1240
1241 }
1242
1243
1244 // Convert an RFC822 message (headers + body) to a CtdlMessage structure.
1245 // NOTE: the supplied buffer becomes part of the CtdlMessage structure, and
1246 // will be deallocated when CM_Free() is called.  Therefore, the
1247 // supplied buffer should be DEREFERENCED.  It should not be freed or used
1248 // again.
1249 struct CtdlMessage *convert_internet_message(char *rfc822) {
1250         StrBuf *RFCBuf = NewStrBufPlain(rfc822, -1);
1251         free (rfc822);
1252         return convert_internet_message_buf(&RFCBuf);
1253 }
1254
1255
1256 struct CtdlMessage *convert_internet_message_buf(StrBuf **rfc822)
1257 {
1258         struct CtdlMessage *msg;
1259         const char *pos, *beg, *end, *totalend;
1260         int done, alldone = 0;
1261         int converted;
1262         StrBuf *OtherHeaders;
1263
1264         msg = malloc(sizeof(struct CtdlMessage));
1265         if (msg == NULL) return msg;
1266
1267         memset(msg, 0, sizeof(struct CtdlMessage));
1268         msg->cm_magic = CTDLMESSAGE_MAGIC;      // self check
1269         msg->cm_anon_type = 0;                  // never anonymous
1270         msg->cm_format_type = FMT_RFC822;       // internet message
1271
1272         pos = ChrPtr(*rfc822);
1273         totalend = pos + StrLength(*rfc822);
1274         done = 0;
1275         OtherHeaders = NewStrBufPlain(NULL, StrLength(*rfc822));
1276
1277         while (!alldone) {
1278
1279                 /* Locate beginning and end of field, keeping in mind that
1280                  * some fields might be multiline
1281                  */
1282                 end = beg = pos;
1283
1284                 while ((end < totalend) && 
1285                        (end == beg) && 
1286                        (done == 0) ) 
1287                 {
1288
1289                         if ( (*pos=='\n') && ((*(pos+1))!=0x20) && ((*(pos+1))!=0x09) )
1290                         {
1291                                 end = pos;
1292                         }
1293
1294                         /* done with headers? */
1295                         if ((*pos=='\n') &&
1296                             ( (*(pos+1)=='\n') ||
1297                               (*(pos+1)=='\r')) ) 
1298                         {
1299                                 alldone = 1;
1300                         }
1301
1302                         if (pos >= (totalend - 1) )
1303                         {
1304                                 end = pos;
1305                                 done = 1;
1306                         }
1307
1308                         ++pos;
1309
1310                 }
1311
1312                 /* At this point we have a field.  Are we interested in it? */
1313                 converted = convert_field(msg, beg, end);
1314
1315                 /* Strip the field out of the RFC822 header if we used it */
1316                 if (!converted) {
1317                         StrBufAppendBufPlain(OtherHeaders, beg, end - beg, 0);
1318                         StrBufAppendBufPlain(OtherHeaders, HKEY("\n"), 0);
1319                 }
1320
1321                 /* If we've hit the end of the message, bail out */
1322                 if (pos >= totalend)
1323                         alldone = 1;
1324         }
1325         StrBufAppendBufPlain(OtherHeaders, HKEY("\n"), 0);
1326         if (pos < totalend)
1327                 StrBufAppendBufPlain(OtherHeaders, pos, totalend - pos, 0);
1328         FreeStrBuf(rfc822);
1329         CM_SetAsFieldSB(msg, eMesageText, &OtherHeaders);
1330
1331         /* Follow-up sanity checks... */
1332
1333         /* If there's no timestamp on this message, set it to now. */
1334         if (CM_IsEmpty(msg, eTimestamp)) {
1335                 CM_SetFieldLONG(msg, eTimestamp, time(NULL));
1336         }
1337
1338         /* If a W (references, or rather, Wefewences) field is present, we
1339          * have to convert it from RFC822 format to Citadel format.
1340          */
1341         if (!CM_IsEmpty(msg, eWeferences)) {
1342                 /// todo: API!
1343                 convert_references_to_wefewences(msg->cm_fields[eWeferences]);
1344         }
1345
1346         return msg;
1347 }
1348
1349
1350 /*
1351  * Look for a particular header field in an RFC822 message text.  If the
1352  * requested field is found, it is unfolded (if necessary) and returned to
1353  * the caller.  The field name is stripped out, leaving only its contents.
1354  * The caller is responsible for freeing the returned buffer.  If the requested
1355  * field is not present, or anything else goes wrong, it returns NULL.
1356  */
1357 char *rfc822_fetch_field(const char *rfc822, const char *fieldname) {
1358         char *fieldbuf = NULL;
1359         const char *end_of_headers;
1360         const char *field_start;
1361         const char *ptr;
1362         char *cont;
1363         char fieldhdr[SIZ];
1364
1365         /* Should never happen, but sometimes we get stupid */
1366         if (rfc822 == NULL) return(NULL);
1367         if (fieldname == NULL) return(NULL);
1368
1369         snprintf(fieldhdr, sizeof fieldhdr, "%s:", fieldname);
1370
1371         /* Locate the end of the headers, so we don't run past that point */
1372         end_of_headers = cbmstrcasestr(rfc822, "\n\r\n");
1373         if (end_of_headers == NULL) {
1374                 end_of_headers = cbmstrcasestr(rfc822, "\n\n");
1375         }
1376         if (end_of_headers == NULL) return (NULL);
1377
1378         field_start = cbmstrcasestr(rfc822, fieldhdr);
1379         if (field_start == NULL) return(NULL);
1380         if (field_start > end_of_headers) return(NULL);
1381
1382         fieldbuf = malloc(SIZ);
1383         strcpy(fieldbuf, "");
1384
1385         ptr = field_start;
1386         ptr = cmemreadline(ptr, fieldbuf, SIZ-strlen(fieldbuf) );
1387         while ( (isspace(ptr[0])) && (ptr < end_of_headers) ) {
1388                 strcat(fieldbuf, " ");
1389                 cont = &fieldbuf[strlen(fieldbuf)];
1390                 ptr = cmemreadline(ptr, cont, SIZ-strlen(fieldbuf) );
1391                 striplt(cont);
1392         }
1393
1394         strcpy(fieldbuf, &fieldbuf[strlen(fieldhdr)]);
1395         striplt(fieldbuf);
1396
1397         return(fieldbuf);
1398 }
1399
1400
1401 /*****************************************************************************
1402  *                      DIRECTORY MANAGEMENT FUNCTIONS                       *
1403  *****************************************************************************/
1404
1405 /*
1406  * Generate the index key for an Internet e-mail address to be looked up
1407  * in the database.
1408  */
1409 void directory_key(char *key, char *addr) {
1410         int i;
1411         int keylen = 0;
1412
1413         for (i=0; !IsEmptyStr(&addr[i]); ++i) {
1414                 if (!isspace(addr[i])) {
1415                         key[keylen++] = tolower(addr[i]);
1416                 }
1417         }
1418         key[keylen++] = 0;
1419
1420         syslog(LOG_DEBUG, "internet_addressing: directory key is <%s>", key);
1421 }
1422
1423
1424 /*
1425  * Return nonzero if the supplied address is in one of "our" domains
1426  */
1427 int IsDirectory(char *addr, int allow_masq_domains) {
1428         char domain[256];
1429         int h;
1430
1431         extract_token(domain, addr, 1, '@', sizeof domain);
1432         striplt(domain);
1433
1434         h = CtdlHostAlias(domain);
1435
1436         if ( (h == hostalias_masq) && allow_masq_domains)
1437                 return(1);
1438         
1439         if (h == hostalias_localhost) {
1440                 return(1);
1441         }
1442         else {
1443                 return(0);
1444         }
1445 }
1446
1447
1448 /*
1449  * Add an Internet e-mail address to the directory for a user
1450  */
1451 int CtdlDirectoryAddUser(char *internet_addr, char *citadel_addr) {
1452         char key[SIZ];
1453
1454         if (IsDirectory(internet_addr, 0) == 0) {
1455                 return 0;
1456         }
1457         syslog(LOG_DEBUG, "internet_addressing: create directory entry: %s --> %s", internet_addr, citadel_addr);
1458         directory_key(key, internet_addr);
1459         cdb_store(CDB_DIRECTORY, key, strlen(key), citadel_addr, strlen(citadel_addr)+1 );
1460         return 1;
1461 }
1462
1463
1464 /*
1465  * Delete an Internet e-mail address from the directory.
1466  *
1467  * (NOTE: we don't actually use or need the citadel_addr variable; it's merely
1468  * here because the callback API expects to be able to send it.)
1469  */
1470 int CtdlDirectoryDelUser(char *internet_addr, char *citadel_addr) {
1471         char key[SIZ];
1472         
1473         syslog(LOG_DEBUG, "internet_addressing: delete directory entry: %s --> %s", internet_addr, citadel_addr);
1474         directory_key(key, internet_addr);
1475         return cdb_delete(CDB_DIRECTORY, key, strlen(key) ) == 0;
1476 }
1477
1478
1479 /*
1480  * Look up an Internet e-mail address in the directory.
1481  * On success: returns 0, and Citadel address stored in 'target'
1482  * On failure: returns nonzero
1483  */
1484 int CtdlDirectoryLookup(char *target, char *internet_addr, size_t targbuflen) {
1485         struct cdbdata *cdbrec;
1486         char key[SIZ];
1487
1488         /* Dump it in there unchanged, just for kicks */
1489         if (target != NULL) {
1490                 safestrncpy(target, internet_addr, targbuflen);
1491         }
1492
1493         /* Only do lookups for addresses with hostnames in them */
1494         if (num_tokens(internet_addr, '@') != 2) return(-1);
1495
1496         /* Only do lookups for domains in the directory */
1497         if (IsDirectory(internet_addr, 0) == 0) return(-1);
1498
1499         directory_key(key, internet_addr);
1500         cdbrec = cdb_fetch(CDB_DIRECTORY, key, strlen(key) );
1501         if (cdbrec != NULL) {
1502                 if (target != NULL) {
1503                         safestrncpy(target, cdbrec->ptr, targbuflen);
1504                 }
1505                 cdb_free(cdbrec);
1506                 return(0);
1507         }
1508
1509         return(-1);
1510 }
1511
1512
1513 /*
1514  * Harvest any email addresses that someone might want to have in their
1515  * "collected addresses" book.
1516  */
1517 char *harvest_collected_addresses(struct CtdlMessage *msg) {
1518         char *coll = NULL;
1519         char addr[256];
1520         char user[256], node[256], name[256];
1521         int is_harvestable;
1522         int i, j, h;
1523         eMsgField field = 0;
1524
1525         if (msg == NULL) return(NULL);
1526
1527         is_harvestable = 1;
1528         strcpy(addr, "");       
1529         if (!CM_IsEmpty(msg, eAuthor)) {
1530                 strcat(addr, msg->cm_fields[eAuthor]);
1531         }
1532         if (!CM_IsEmpty(msg, erFc822Addr)) {
1533                 strcat(addr, " <");
1534                 strcat(addr, msg->cm_fields[erFc822Addr]);
1535                 strcat(addr, ">");
1536                 if (IsDirectory(msg->cm_fields[erFc822Addr], 0)) {
1537                         is_harvestable = 0;
1538                 }
1539         }
1540
1541         if (is_harvestable) {
1542                 coll = strdup(addr);
1543         }
1544         else {
1545                 coll = strdup("");
1546         }
1547
1548         if (coll == NULL) return(NULL);
1549
1550         /* Scan both the R (To) and Y (CC) fields */
1551         for (i = 0; i < 2; ++i) {
1552                 if (i == 0) field = eRecipient;
1553                 if (i == 1) field = eCarbonCopY;
1554
1555                 if (!CM_IsEmpty(msg, field)) {
1556                         for (j=0; j<num_tokens(msg->cm_fields[field], ','); ++j) {
1557                                 extract_token(addr, msg->cm_fields[field], j, ',', sizeof addr);
1558                                 if (strstr(addr, "=?") != NULL)
1559                                         utf8ify_rfc822_string(addr);
1560                                 process_rfc822_addr(addr, user, node, name);
1561                                 h = CtdlHostAlias(node);
1562                                 if (h != hostalias_localhost) {
1563                                         coll = realloc(coll, strlen(coll) + strlen(addr) + 4);
1564                                         if (coll == NULL) return(NULL);
1565                                         if (!IsEmptyStr(coll)) {
1566                                                 strcat(coll, ",");
1567                                         }
1568                                         striplt(addr);
1569                                         strcat(coll, addr);
1570                                 }
1571                         }
1572                 }
1573         }
1574
1575         if (IsEmptyStr(coll)) {
1576                 free(coll);
1577                 return(NULL);
1578         }
1579         return(coll);
1580 }
1581
1582
1583 /*
1584  * Helper function for CtdlRebuildDirectoryIndex()
1585  */
1586 void CtdlRebuildDirectoryIndex_backend(char *username, void *data) {
1587
1588         int j = 0;
1589         struct ctdluser usbuf;
1590
1591         if (CtdlGetUser(&usbuf, username) != 0) {
1592                 return;
1593         }
1594
1595         if ( (!IsEmptyStr(usbuf.fullname)) && (!IsEmptyStr(usbuf.emailaddrs)) ) {
1596                 for (j=0; j<num_tokens(usbuf.emailaddrs, '|'); ++j) {
1597                         char one_email[512];
1598                         extract_token(one_email, usbuf.emailaddrs, j, '|', sizeof one_email);
1599                         CtdlDirectoryAddUser(one_email, usbuf.fullname);
1600                 }
1601         }
1602 }
1603
1604
1605 /*
1606  * Initialize the directory database (erasing anything already there)
1607  */
1608 void CtdlRebuildDirectoryIndex(void) {
1609         syslog(LOG_INFO, "internet_addressing: rebuilding email address directory index");
1610         cdb_trunc(CDB_DIRECTORY);
1611         ForEachUser(CtdlRebuildDirectoryIndex_backend, NULL);
1612 }
1613
1614
1615 // Configure Internet email addresses for a user account, updating the Directory Index in the process
1616 void CtdlSetEmailAddressesForUser(char *requested_user, char *new_emailaddrs) {
1617         struct ctdluser usbuf;
1618         int i;
1619         char buf[SIZ];
1620
1621         if (CtdlGetUserLock(&usbuf, requested_user) != 0) {     // We can lock because the DirectoryIndex functions don't lock.
1622                 return;                                         // Silently fail here if the specified user does not exist.
1623         }
1624
1625         syslog(LOG_DEBUG, "internet_addressing: setting email addresses for <%s> to <%s>", usbuf.fullname, new_emailaddrs);
1626
1627         // Delete all of the existing directory index records for the user (easier this way)
1628         for (i=0; i<num_tokens(usbuf.emailaddrs, '|'); ++i) {
1629                 extract_token(buf, usbuf.emailaddrs, i, '|', sizeof buf);
1630                 CtdlDirectoryDelUser(buf, requested_user);
1631         }
1632
1633         strcpy(usbuf.emailaddrs, new_emailaddrs);               // make it official.
1634
1635         // Index all of the new email addresses (they've already been sanitized)
1636         for (i=0; i<num_tokens(usbuf.emailaddrs, '|'); ++i) {
1637                 extract_token(buf, usbuf.emailaddrs, i, '|', sizeof buf);
1638                 CtdlDirectoryAddUser(buf, requested_user);
1639         }
1640
1641         CtdlPutUserLock(&usbuf);
1642 }
1643
1644
1645 /*
1646  * Auto-generate an Internet email address for a user account
1647  */
1648 void AutoGenerateEmailAddressForUser(struct ctdluser *user) {
1649         char synthetic_email_addr[1024];
1650         int i, j;
1651         int u = 0;
1652
1653         for (i=0; u==0; ++i) {
1654                 if (i == 0) {
1655                         // first try just converting the user name to lowercase and replacing spaces with underscores
1656                         snprintf(synthetic_email_addr, sizeof synthetic_email_addr, "%s@%s", user->fullname, CtdlGetConfigStr("c_fqdn"));
1657                         for (j=0; ((synthetic_email_addr[j] != '\0')&&(synthetic_email_addr[j] != '@')); j++) {
1658                                 synthetic_email_addr[j] = tolower(synthetic_email_addr[j]);
1659                                 if (!isalnum(synthetic_email_addr[j])) {
1660                                         synthetic_email_addr[j] = '_';
1661                                 }
1662                         }
1663                 }
1664                 else if (i == 1) {
1665                         // then try 'ctdl' followed by the user number
1666                         snprintf(synthetic_email_addr, sizeof synthetic_email_addr, "ctdl%08lx@%s", user->usernum, CtdlGetConfigStr("c_fqdn"));
1667                 }
1668                 else if (i > 1) {
1669                         // oof.  just keep trying other numbers until we find one
1670                         snprintf(synthetic_email_addr, sizeof synthetic_email_addr, "ctdl%08x@%s", i, CtdlGetConfigStr("c_fqdn"));
1671                 }
1672                 u = CtdlDirectoryLookup(NULL, synthetic_email_addr, 0);
1673                 syslog(LOG_DEBUG, "user_ops: address <%s> lookup returned <%d>", synthetic_email_addr, u);
1674         }
1675
1676         CtdlSetEmailAddressesForUser(user->fullname, synthetic_email_addr);
1677         strncpy(CC->user.emailaddrs, synthetic_email_addr, sizeof(user->emailaddrs));
1678         syslog(LOG_DEBUG, "user_ops: auto-generated email address <%s> for <%s>", synthetic_email_addr, user->fullname);
1679 }
1680
1681
1682 // Determine whether the supplied email address is subscribed to the supplied room's mailing list service.
1683 int is_email_subscribed_to_list(char *email, char *room_name) {
1684         struct ctdlroom room;
1685         long roomnum;
1686         char *roomnetconfig;
1687         int found_it = 0;
1688
1689         if (CtdlGetRoom(&room, room_name)) {
1690                 return(0);                                      // room not found, so definitely not subscribed
1691         }
1692
1693         // If this room has the QR2_SMTP_PUBLIC flag set, anyone may email a post to this room, even non-subscribers.
1694         if (room.QRflags2 & QR2_SMTP_PUBLIC) {
1695                 return(1);
1696         }
1697
1698         roomnum = room.QRnumber;
1699         roomnetconfig = LoadRoomNetConfigFile(roomnum);
1700         if (roomnetconfig == NULL) {
1701                 return(0);
1702         }
1703
1704         // We're going to do a very sloppy match here and simply search for the specified email address
1705         // anywhere in the room's netconfig.  If you don't like this, fix it yourself.
1706         if (bmstrcasestr(roomnetconfig, email)) {
1707                 found_it = 1;
1708         }
1709         else {
1710                 found_it = 0;
1711         }
1712
1713         free(roomnetconfig);
1714         return(found_it);
1715 }