1 files changed, 193 insertions, 6 deletions

diff --git a/linden/indra/newview/llstartup.cpp b/linden/indra/newview/llstartup.cpp
index 08e12ce..dcaa249 100644
--- a/linden/indra/newview/llstartup.cpp
+++ b/linden/indra/newview/llstartup.cpp
@@ -76,6 +76,7 @@
 #include "llstring.h"
 #include "lluserrelations.h"
 #include "llvfs.h"
+#include "llxorcipher.h"        // saved password, MAC address
 #include "message.h"
 #include "v3math.h"
 
@@ -216,6 +217,10 @@
 #include "hippogridmanager.h"
 #include "hippolimits.h"
 
+#if USE_OTR          // [$PLOTR$]
+#include "otr_wrapper.h"
+#endif // USE_OTR    // [/$PLOTR$]
+
 #include "lggautocorrect.h"
 //
 // exported globals
@@ -261,6 +266,7 @@ bool LLStartUp::sLoginFailed = false;
 
 void login_show();
 void login_callback(S32 option, void* userdata);
+bool is_hex_string(U8* str, S32 len);
 void show_first_run_dialog();
 bool first_run_dialog_callback(const LLSD& notification, const LLSD& response);
 void set_startup_status(const F32 frac, const std::string& string, const std::string& msg);
@@ -1004,8 +1010,9 @@ bool idle_startup()
                         gDebugInfo["LoginName"] = firstname + " " + lastname;
 
                         // create necessary directories
-                        gDirUtilp->setLindenUserDir(gHippoGridManager->getCurrentGridNick(), firstname, lastname);
-                        LLFile::mkdir(gDirUtilp->getLindenUserDir());
+                        // *FIX: these mkdir's should error check
+                        gDirUtilp->setViewerUserDir(gHippoGridManager->getCurrentGridNick(), firstname, lastname);
+                        LLFile::mkdir(gDirUtilp->getViewerUserDir());
                 }
                 else
                 {
@@ -1289,7 +1296,7 @@ bool idle_startup()
 
                 char hashed_mac_string[MD5HEX_STR_SIZE];                /* Flawfinder: ignore */
                 LLMD5 hashed_mac;
-                hashed_mac.update( gMACAddress, MAC_ADDRESS_BYTES );
+                hashed_mac.update( (const unsigned char*) "012345", MAC_ADDRESS_BYTES );  // Nope, LL ain't getting our MAC, and meta7 does not need it.
                 hashed_mac.finalize();
                 hashed_mac.hex_digest(hashed_mac_string);
 
@@ -2542,7 +2549,7 @@ bool idle_startup()
                         }
                 }
                 // Either we want to show tutorial because this is the first login
-                // to a Linden Help Island or the user quit with the tutorial
+                // to a grid Help Island or the user quit with the tutorial
                 // visible.  JC
                 if (show_hud
                         || gSavedSettings.getBOOL("ShowTutorial"))
@@ -2914,6 +2921,9 @@ bool idle_startup()
                 }
 
                 LLFirstUse::ClientTags();
+#if USE_OTR          // [$PLOTR$]
+                LLFirstUse::EmeraldOTR();
+#endif // USE_OTR    // [/$PLOTR$]
 
                 // Add login location to teleport history 'teleported-into'
                 LLVector3 agent_pos=gAgent.getPositionAgent();
@@ -2950,7 +2960,11 @@ bool idle_startup()
                 {
                         gAgent.requestEnterGodMode();
                 }
-                
+
+#if USE_OTR         // [$PLOTR$]
+        OTR_Wrapper::init();
+#endif // USE_OTR   // [/$PLOTR$]
+
                 // Start automatic replay if the flag is set.
                 if (gSavedSettings.getBOOL("StatsAutoRun"))
                 {
@@ -3112,6 +3126,179 @@ void login_callback(S32 option, void *userdata)
 }
 
 
+// static
+std::string LLStartUp::loadPasswordFromDisk()
+{
+        // Only load password if we also intend to save it (otherwise the user
+        // wonders what we're doing behind his back).  JC
+        BOOL remember_password = gSavedSettings.getBOOL("RememberPassword");
+        if (!remember_password)
+        {
+                return std::string("");
+        }
+
+        std::string hashed_password("");
+
+        // Look for legacy "marker" password from settings.ini
+        hashed_password = gSavedSettings.getString("Marker");
+        if (!hashed_password.empty())
+        {
+                // Stomp the Marker entry.
+                gSavedSettings.setString("Marker", "");
+
+                // Return that password.
+                return hashed_password;
+        }
+
+        // UUID is 16 bytes, written into ASCII is 32 characters
+        // without trailing \0
+        const S32 HASHED_LENGTH = 32;
+
+        std::string filepath = gDirUtilp->getExpandedFilename(LL_PATH_USER_SETTINGS,
+                                                                                                           "password.dat");
+        LLFILE* fp = LLFile::fopen(filepath, "rb");             /* Flawfinder: ignore */
+        if (!fp)
+        {
+#if LL_DARWIN
+                UInt32 passwordLength;
+                char *passwordData;
+                OSStatus stat = SecKeychainFindGenericPassword(NULL, 10, "meta-impy", 0, NULL, &passwordLength, (void**)&passwordData, NULL);
+                if (stat == noErr)
+                {
+                        if (passwordLength == HASHED_LENGTH)
+                                hashed_password.assign(passwordData, HASHED_LENGTH);
+                        SecKeychainItemFreeContent(NULL, passwordData);
+                }
+#endif
+                return hashed_password;
+        }
+
+        U8 buffer[HASHED_LENGTH+1];
+
+        if (1 != fread(buffer, HASHED_LENGTH, 1, fp))
+        {
+                return hashed_password;
+        }
+
+        fclose(fp);
+
+        // Decipher with MAC address
+        LLXORCipher cipher(gMACAddress, 6);  // The one and only legitimate use of the users MAC.
+        cipher.decrypt(buffer, HASHED_LENGTH);
+
+        buffer[HASHED_LENGTH] = '\0';
+
+        // Check to see if the mac address generated a bad hashed
+        // password. It should be a hex-string or else the mac adress has
+        // changed. This is a security feature to make sure that if you
+        // get someone's password.dat file, you cannot hack their account.
+        if(is_hex_string(buffer, HASHED_LENGTH))
+        {
+                hashed_password.assign((char*)buffer);
+        }
+#if LL_DARWIN
+        // we're migrating to the keychain
+        LLFile::remove(filepath);
+#endif
+
+        return hashed_password;
+}
+
+
+// static
+void LLStartUp::savePasswordToDisk(const std::string& hashed_password)
+{
+#if LL_DARWIN
+        SecKeychainItemRef keychainItem;
+        OSStatus status = SecKeychainFindGenericPassword(NULL, 10, "meta-impy", 0, NULL, NULL, NULL, &keychainItem);
+        if (status == noErr)
+        {
+                SecKeychainItemModifyAttributesAndData(keychainItem, NULL, hashed_password.length(), hashed_password.c_str());
+                CFRelease(keychainItem);
+        }
+        else
+        {
+                SecKeychainAddGenericPassword(NULL, 10, "meta-impy", 0, NULL, hashed_password.length(), hashed_password.c_str(), NULL);
+        }
+#else
+        std::string filepath = gDirUtilp->getExpandedFilename(LL_PATH_USER_SETTINGS,
+                                                                                                           "password.dat");
+        LLFILE* fp = LLFile::fopen(filepath, "wb");             /* Flawfinder: ignore */
+        if (!fp)
+        {
+                return;
+        }
+
+        // Encipher with MAC address
+        const S32 HASHED_LENGTH = 32;
+        U8 buffer[HASHED_LENGTH+1];
+
+        LLStringUtil::copy((char*)buffer, hashed_password.c_str(), HASHED_LENGTH+1);
+
+        LLXORCipher cipher(gMACAddress, 6);  // The one and only legitimate use of the users MAC.
+        cipher.encrypt(buffer, HASHED_LENGTH);
+
+        if (fwrite(buffer, HASHED_LENGTH, 1, fp) != 1)
+        {
+                LL_WARNS("AppInit") << "Short write" << LL_ENDL;
+        }
+
+        fclose(fp);
+#endif
+}
+
+
+// static
+void LLStartUp::deletePasswordFromDisk()
+{
+#if LL_DARWIN
+        SecKeychainItemRef keychainItem;
+        OSStatus status = SecKeychainFindGenericPassword(NULL, 10, "meta-impy", 0, NULL, NULL, NULL, &keychainItem);
+        if (status == noErr)
+        {
+                SecKeychainItemDelete(keychainItem);
+                CFRelease(keychainItem);
+        }
+#endif
+        std::string filepath = gDirUtilp->getExpandedFilename(LL_PATH_USER_SETTINGS,
+                                                                                                                  "password.dat");
+        LLFile::remove(filepath);
+}
+
+bool is_hex_string(U8* str, S32 len)
+{
+        bool rv = true;
+        U8* c = str;
+        while(rv && len--)
+        {
+                switch(*c)
+                {
+                case '0':
+                case '1':
+                case '2':
+                case '3':
+                case '4':
+                case '5':
+                case '6':
+                case '7':
+                case '8':
+                case '9':
+                case 'a':
+                case 'b':
+                case 'c':
+                case 'd':
+                case 'e':
+                case 'f':
+                        ++c;
+                        break;
+                default:
+                        rv = false;
+                        break;
+                }
+        }
+        return rv;
+}
+
 void show_first_run_dialog()
 {
         LLNotifications::instance().add("FirstRun", LLSD(), LLSD(), first_run_dialog_callback);
@@ -3697,7 +3884,7 @@ void init_start_screen(S32 location_id)
 
         LL_DEBUGS("AppInit") << "Loading startup bitmap..." << LL_ENDL;
 
-        std::string temp_str = gDirUtilp->getLindenUserDir() + gDirUtilp->getDirDelimiter();
+        std::string temp_str = gDirUtilp->getViewerUserDir() + gDirUtilp->getDirDelimiter();
 
         if ((S32)START_LOCATION_ID_LAST == location_id)
         {