Your request did not contain a k= parameter.
"); - } - for (p = token; *p; p += 1) { - if ((! isalnum(*p)) && - (*p != '-') && - (*p != ':')) { - cgi_result(409, "Not a token", "This token has untokenlike characteristics.
"); - } - } - } - - /* Award points */ - { - char *p = token; - char *q; - char category[40]; - char points_s[40]; - int points; - int ret; - - /* Pull category name out of the token */ - for (q = category; *p && (*p != ':'); p += 1) { - *p = tolower(*p); - *(q++) = *p; - } - *q = '\0'; - if (p) p += 1; - - /* Now we can check to see if it's valid */ - if ((! anchored_search(package_path("%s/tokens.txt", category), token, 0)) && - (! anchored_search(state_path("tokens.db"), token, 0))) { - cgi_result(409, "No such token", "This token has not been issued.
"); - } - - /* Pull point value out of the token (if it has one) */ - for (q = points_s; *p && (*p != ':'); p += 1) { - *(q++) = *p; - } - *q = '\0'; - points = atoi(points_s); - if (0 == points) points = 1; - - ret = award_points(team, category, points, token); - if (ret < 0) { - cgi_fail(ret); - } - } - - cgi_page("Point awarded", "Congratulations.
"); - - return 0; -} diff --git a/src/common.c b/src/common.c deleted file mode 100644 index 475700b..0000000 --- a/src/common.c +++ /dev/null @@ -1,549 +0,0 @@ -#include%s
![\"Los](\"images/lanl.png\")
\n");
- printf("![\"US](\"images/doe.png\")
\n");
- printf("![\"Sandia](\"images/sandia.png\")
\n");
- printf("The server is unable to award your points at this time.
"); - case ERR_NOTEAM: - cgi_result(409, "No such team", "There is no team with that hash.
"); - case ERR_CLAIMED: - cgi_result(409, "Already claimed", - "That is the correct answer, but your team has already claimed these points.
"); - default: - cgi_result(409, "Failure", "Failure code: %d
", err); - } -} - -void -cgi_page(char *title, char *fmt, ...) -{ - va_list ap; - - cgi_head(title); - va_start(ap, fmt); - vprintf(fmt, ap); - va_end(ap); - cgi_foot(); - exit(0); -} - -void -cgi_error(char *text) -{ - cgi_result(500, "Internal error", "%s
", text); -} - - -/* - * Common routines - */ - -/* - * cut -d$ANCHOR -f2- | grep -Fx "$NEEDLE" - */ -int -anchored_search(char const *filename, char const *needle, char const anchor) -{ - FILE *f = fopen(filename, "r"); - size_t nlen = strlen(needle); - char line[1024]; - int ret = 0; - - while (f) { - char *p; - - if (NULL == fgets(line, sizeof line, f)) { - break; - } - - /* - * Find anchor - */ - if (anchor) { - p = strchr(line, anchor); - if (!p) { - continue; - } - p += 1; - } else { - p = line; - } - - /* - * Don't bother with strcmp if string lengths differ. If this string is shorter than the previous, it's okay. This - * is just a performance hack. - */ - if ((p[nlen] != '\n') && (p[nlen] != '\0')) { - continue; - } - p[nlen] = 0; - - /* - * Okay, now we can compare! - */ - if (0 == strcmp(p, needle)) { - ret = 1; - break; - } - } - - if (f) { - fclose(f); - } - - return ret; -} - -void -urandom(char *buf, size_t buflen) -{ - static int fd = -2; - - if (-2 == fd) { - srandom(time(NULL) * getpid()); - fd = open("/dev/urandom", O_RDONLY); - } - if (-1 != fd) { - int len; - - len = read(fd, buf, buflen); - if (len == buflen) { - return; - } - } - - /* - * Fall back to libc's crappy thing - */ - { - int i; - - for (i = 0; i < buflen; i += 1) { - buf[i] = (char) random(); - } - } -} - -int -my_snprintf(char *buf, size_t buflen, char *fmt, ...) -{ - int len; - va_list ap; - - va_start(ap, fmt); - len = vsnprintf(buf, buflen - 1, fmt, ap); - va_end(ap); - buf[buflen - 1] = '\0'; - if (len >= buflen) { - return buflen - 1; - } else { - return len; - } -} - -void -ctf_chdir() -{ - static int initialized = 0; - int i; - - if (initialized) { - return; - } - initialized = 1; - - /* - * chdir to $CTF_BASE - */ - { - char const *ctf_base = getenv("CTF_BASE"); - - if (ctf_base) { - chdir(ctf_base); - } - } - - /* - * Keep going up one directory until there's an assigned.txt file - */ - for (i = 0; i < 5; i += 1) { - struct stat st; - - if ((0 == stat("assigned.txt", &st)) && S_ISREG(st.st_mode)) { - return; - } - chdir(".."); - } - fprintf(stderr, "Can not determine CTF_BASE directory: exiting.\n"); - exit(66); -} - - -static char * -mkpath(char const *type, char const *fmt, va_list ap) -{ - char relpath[PATH_MAX]; - static char path[PATH_MAX]; - - ctf_chdir(); - vsnprintf(relpath, sizeof(relpath) - 1, fmt, ap); - relpath[sizeof(relpath) - 1] = '\0'; - - /* - * $CTF_BASE/type/relpath - */ - my_snprintf(path, sizeof(path), "%s/%s", type, relpath); - return path; -} - -char * -state_path(char const *fmt, ...) -{ - va_list ap; - char *ret; - - va_start(ap, fmt); - ret = mkpath("state", fmt, ap); - va_end(ap); - return ret; -} - -char * -package_path(char const *fmt, ...) -{ - va_list ap; - char *ret; - - va_start(ap, fmt); - ret = mkpath("packages", fmt, ap); - va_end(ap); - return ret; -} - - -int -team_exists(char const *teamhash) -{ - struct stat buf; - int ret; - int i; - - if ((!teamhash) || (!*teamhash)) { - return 0; - } - - /* - * Check for invalid characters. - */ - for (i = 0; teamhash[i]; i += 1) { - if (!isalnum(teamhash[i])) { - return 0; - } - } - - /* - * stat seems to be the preferred way to check for existence. - */ - ret = stat(state_path("teams/%s", teamhash), &buf); - if (-1 == ret) { - return 0; - } - - return 1; -} - -/* - * Return values: -1: general error -2: no such team -3: points already awarded - */ -int -award_points(char const *teamhash, char const *category, const long points, char const *uid) -{ - char line[100]; - int linelen; - char *filename; - FILE *f; - time_t now = time(NULL); - - if (!team_exists(teamhash)) { - return ERR_NOTEAM; - } - - linelen = snprintf(line, sizeof(line), "%s %s %ld %s", teamhash, category, points, uid); - if (sizeof(line) <= linelen) { - return ERR_GENERAL; - } - - if (anchored_search(state_path("points.log"), line, ' ')) { - return ERR_CLAIMED; - } - - /* - * At one time I had this writing to a single log file, using lockf. This works, as long as nobody ever tries to edit the - * log file. Editing the log file would require locking it, which would block everything trying to score, effectively - * taking down the entire contest. If you can't lock it first--and nothing in busybox lets you do this--you have to bring - * down pretty much everything manually anyway. - * - * By putting new scores into new files and periodically appending those files to the main log file, it is possible to stop - * the thing that appends, edit the file at leisure, and then start the appender back up, all without affecting things - * trying to score: they're still able to record their score and move on. - */ - - filename = state_path("points.tmp/%lu.%d.%s.%s.%ld", (unsigned long) now, getpid(), teamhash, category, points); - f = fopen(filename, "w"); - if (!f) { - return ERR_GENERAL; - } - - if (EOF == fprintf(f, "%lu %s\n", (unsigned long) now, line)) { - return ERR_GENERAL; - } - - fclose(f); - - /* - * Rename into points.new - */ - { - char ofn[PATH_MAX]; - - strncpy(ofn, filename, sizeof(ofn)); - filename = state_path("points.new/%lu.%d.%s.%s.%ld", (unsigned long) now, getpid(), teamhash, category, points); - rename(ofn, filename); - } - - return 0; -} diff --git a/src/common.h b/src/common.h deleted file mode 100644 index fd48a86..0000000 --- a/src/common.h +++ /dev/null @@ -1,38 +0,0 @@ -#ifndef __COMMON_H__ -#define __COMMON_H__ - -#include%d points for %s.
\n" - "\n" - ""), - points, team, points); - - return 0; -} diff --git a/src/puzzles.cgi.c b/src/puzzles.cgi.c deleted file mode 100644 index cda601d..0000000 --- a/src/puzzles.cgi.c +++ /dev/null @@ -1,163 +0,0 @@ -#include- \n");
-
- /* For each file in /packages/ ... */
- while (1) {
- struct dirent *e = readdir(opt);
- char *cat;
- long maxpoints = 0;
- FILE *map;
-
- if (! e) break;
-
- cat = e->d_name;
- if ('.' == cat[0]) continue;
-
- /* Find the most points scored in this category */
- for (i = 0; i < ncats; i += 1) {
- if (0 == strcmp(cat, points_by_cat[i].cat)) {
- maxpoints = points_by_cat[i].points;
- break;
- }
- }
-
- /* Read in category's map file, print html until point limit reached */
- map = fopen(package_path("%s/map.txt", cat), "r");
- if (map == NULL) continue;
-
- printf("
- %s \n", cat); - printf("
- \n"); - - while (i < PUZZLES_MAX && (!feof(map))) { - char hash[20]; - char points_str[20]; - long points; - - read_until_char(map, points_str, sizeof(points_str), ' '); - read_until_char(map, hash, sizeof(hash), '\n'); - points = atol(points_str); - - if (0 == points) { - printf(" ⁂\n"); - break; - } - - printf(" %ld\n", cat, hash, points); - - if (points > maxpoints) break; - } - - printf(" \n"); - fclose(map); - } - - closedir(opt); - - printf("
New puzzles are unlocked when any team answers the highest-scoring puzzle in a category.
"); - printf("Are you using Windows? You have our pity. But you might enjoy a program called wget, which will allow you to download every open puzzle with a single wget -r!
"); - cgi_foot(); - - return 0; -} diff --git a/src/tea.c b/src/tea.c deleted file mode 100644 index 9aa09b5..0000000 --- a/src/tea.c +++ /dev/null @@ -1,130 +0,0 @@ -#include