]> git.sur5r.net Git - openldap/blob - servers/slapd/back-sql/entry-id.c
benign buffer overflow fix (ITS#1964)
[openldap] / servers / slapd / back-sql / entry-id.c
1 /*
2  *       Copyright 1999, Dmitry Kovalev <mit@openldap.org>, All rights reserved.
3  *
4  *       Redistribution and use in source and binary forms are permitted only
5  *       as authorized by the OpenLDAP Public License.  A copy of this
6  *       license is available at http://www.OpenLDAP.org/license.html or
7  *       in file LICENSE in the top-level directory of the distribution.
8  */
9
10 #include "portable.h"
11
12 #ifdef SLAPD_SQL
13
14 #include <stdio.h>
15 #include <sys/types.h>
16 #include "ac/string.h"
17 #include "lber_pvt.h"
18 #include "ldap_pvt.h"
19 #include "slap.h"
20 #include "back-sql.h"
21 #include "sql-wrap.h"
22 #include "schema-map.h"
23 #include "entry-id.h"
24 #include "util.h"
25
26 backsql_entryID *
27 backsql_free_entryID( backsql_entryID *id, int freeit )
28 {
29         backsql_entryID         *next;
30
31         assert( id );
32
33         next = id->next;
34
35         if ( id->dn.bv_val != NULL ) {
36                 free( id->dn.bv_val );
37         }
38
39         if ( freeit ) {
40                 free( id );
41         }
42
43         return next;
44 }
45
46 int
47 backsql_dn2id(
48         backsql_info            *bi,
49         backsql_entryID         *id,
50         SQLHDBC                 dbh,
51         struct berval           *dn )
52 {
53         SQLHSTMT                sth; 
54         BACKSQL_ROW_NTS         row;
55         RETCODE                 rc;
56         int                     res;
57
58         /* TimesTen */
59         char                    upperdn[ BACKSQL_MAX_DN_LEN + 1 ];
60         char                    *toBind;
61         int                     i, j;
62
63         Debug( LDAP_DEBUG_TRACE, "==>backsql_dn2id(): dn='%s'\n", 
64                         dn->bv_val, 0, 0 );
65
66         assert( id );
67
68         if ( dn->bv_len > BACKSQL_MAX_DN_LEN ) {
69                 Debug( LDAP_DEBUG_TRACE, 
70                         "backsql_dn2id(): DN \"%s\" (%ld bytes) "
71                         "exceeds max DN length (%d):\n",
72                         dn->bv_val, dn->bv_len, BACKSQL_MAX_DN_LEN );
73                 return LDAP_OTHER;
74         }
75         
76         /* begin TimesTen */
77         Debug(LDAP_DEBUG_TRACE, "id_query '%s'\n", bi->id_query, 0, 0);
78         assert( bi->id_query );
79         rc = backsql_Prepare( dbh, &sth, bi->id_query, 0 );
80         if ( rc != SQL_SUCCESS ) {
81                 Debug( LDAP_DEBUG_TRACE, 
82                         "backsql_dn2id(): error preparing SQL:\n%s", 
83                         bi->id_query, 0, 0);
84                 backsql_PrintErrors( SQL_NULL_HENV, dbh, sth, rc );
85                 SQLFreeStmt( sth, SQL_DROP );
86                 return LDAP_OTHER;
87         }
88
89         if ( BACKSQL_HAS_LDAPINFO_DN_RU( bi ) ) {
90                 /*
91                  * Prepare an upper cased, byte reversed version 
92                  * that can be searched using indexes
93                  */
94
95                 for ( i = 0, j = dn->bv_len - 1; dn->bv_val[ i ]; i++, j--) {
96                         upperdn[ i ] = dn->bv_val[ j ];
97                 }
98                 upperdn[ i ] = '\0';
99                 ldap_pvt_str2upper( upperdn );
100
101                 Debug( LDAP_DEBUG_TRACE, "==>backsql_dn2id(): upperdn='%s'\n",
102                                 upperdn, 0, 0 );
103                 toBind = upperdn;
104         } else {
105                 if ( BACKSQL_USE_REVERSE_DN( bi ) ) {
106                         AC_MEMCPY( upperdn, dn->bv_val, dn->bv_len + 1 );
107                         ldap_pvt_str2upper( upperdn );
108                         Debug( LDAP_DEBUG_TRACE,
109                                 "==>backsql_dn2id(): upperdn='%s'\n",
110                                 upperdn, 0, 0 );
111                         toBind = upperdn;
112
113                 } else {
114                         toBind = dn->bv_val;
115                 }
116         }
117
118         rc = backsql_BindParamStr( sth, 1, toBind, BACKSQL_MAX_DN_LEN );
119         if ( rc != SQL_SUCCESS) {
120                 /* end TimesTen */ 
121                 Debug( LDAP_DEBUG_TRACE, "backsql_dn2id(): "
122                         "error binding dn=\"%s\" parameter:\n", 
123                         toBind, 0, 0 );
124                 backsql_PrintErrors( SQL_NULL_HENV, dbh, sth, rc );
125                 SQLFreeStmt( sth, SQL_DROP );
126                 return LDAP_OTHER;
127         }
128
129         rc = SQLExecute( sth );
130         if ( rc != SQL_SUCCESS ) {
131                 Debug( LDAP_DEBUG_TRACE, "backsql_dn2id(): "
132                         "error executing query (\"%s\", \"%s\"):\n", 
133                         bi->id_query, toBind, 0 );
134                 backsql_PrintErrors( SQL_NULL_HENV, dbh, sth, rc );
135                 SQLFreeStmt( sth, SQL_DROP );
136                 return LDAP_OTHER;
137         }
138
139         backsql_BindRowAsStrings( sth, &row );
140         rc = SQLFetch( sth );
141         if ( BACKSQL_SUCCESS( rc ) ) {
142                 id->id = strtol( row.cols[ 0 ], NULL, 0 );
143                 id->keyval = strtol( row.cols[ 1 ], NULL, 0 );
144                 id->oc_id = strtol( row.cols[ 2 ], NULL, 0 );
145                 ber_dupbv( &id->dn, dn );
146                 id->next = NULL;
147
148                 res = LDAP_SUCCESS;
149
150         } else {
151                 res = LDAP_NO_SUCH_OBJECT;
152         }
153         backsql_FreeRow( &row );
154
155         SQLFreeStmt( sth, SQL_DROP );
156         if ( res == LDAP_SUCCESS ) {
157                 Debug( LDAP_DEBUG_TRACE, "<==backsql_dn2id(): id=%ld\n",
158                                 id->id, 0, 0 );
159         } else {
160                 Debug( LDAP_DEBUG_TRACE, "<==backsql_dn2id(): no match\n",
161                                 0, 0, 0 );
162         }
163         return res;
164 }
165
166 int
167 backsql_count_children(
168         backsql_info            *bi,
169         SQLHDBC                 dbh,
170         struct berval           *dn,
171         unsigned long           *nchildren )
172 {
173         SQLHSTMT                sth; 
174         BACKSQL_ROW_NTS         row;
175         RETCODE                 rc;
176         int                     res = LDAP_SUCCESS;
177
178         Debug( LDAP_DEBUG_TRACE, "==>backsql_count_children(): dn='%s'\n", 
179                         dn->bv_val, 0, 0 );
180
181         if ( dn->bv_len > BACKSQL_MAX_DN_LEN ) {
182                 Debug( LDAP_DEBUG_TRACE, 
183                         "backsql_count_children(): DN \"%s\" (%ld bytes) "
184                         "exceeds max DN length (%d):\n",
185                         dn->bv_val, dn->bv_len, BACKSQL_MAX_DN_LEN );
186                 return LDAP_OTHER;
187         }
188         
189         /* begin TimesTen */
190         Debug(LDAP_DEBUG_TRACE, "children id query '%s'\n", 
191                         bi->has_children_query, 0, 0);
192         assert( bi->has_children_query );
193         rc = backsql_Prepare( dbh, &sth, bi->has_children_query, 0 );
194         if ( rc != SQL_SUCCESS ) {
195                 Debug( LDAP_DEBUG_TRACE, 
196                         "backsql_count_children(): error preparing SQL:\n%s", 
197                         bi->has_children_query, 0, 0);
198                 backsql_PrintErrors( SQL_NULL_HENV, dbh, sth, rc );
199                 SQLFreeStmt( sth, SQL_DROP );
200                 return LDAP_OTHER;
201         }
202
203         rc = backsql_BindParamStr( sth, 1, dn->bv_val, BACKSQL_MAX_DN_LEN );
204         if ( rc != SQL_SUCCESS) {
205                 /* end TimesTen */ 
206                 Debug( LDAP_DEBUG_TRACE, "backsql_count_children(): "
207                         "error binding dn=\"%s\" parameter:\n", 
208                         dn->bv_val, 0, 0 );
209                 backsql_PrintErrors( SQL_NULL_HENV, dbh, sth, rc );
210                 SQLFreeStmt( sth, SQL_DROP );
211                 return LDAP_OTHER;
212         }
213
214         rc = SQLExecute( sth );
215         if ( rc != SQL_SUCCESS ) {
216                 Debug( LDAP_DEBUG_TRACE, "backsql_count_children(): "
217                         "error executing query (\"%s\", \"%s\"):\n", 
218                         bi->has_children_query, dn->bv_val, 0 );
219                 backsql_PrintErrors( SQL_NULL_HENV, dbh, sth, rc );
220                 SQLFreeStmt( sth, SQL_DROP );
221                 return LDAP_OTHER;
222         }
223
224         backsql_BindRowAsStrings( sth, &row );
225         
226         rc = SQLFetch( sth );
227         if ( BACKSQL_SUCCESS( rc ) ) {
228                 char *end;
229
230                 *nchildren = strtol( row.cols[ 0 ], &end, 0 );
231                 if ( end[ 0 ] != '\0' ) {
232                         res = LDAP_OTHER;
233                 }
234
235         } else {
236                 res = LDAP_OTHER;
237         }
238         backsql_FreeRow( &row );
239
240         SQLFreeStmt( sth, SQL_DROP );
241
242         Debug( LDAP_DEBUG_TRACE, "<==backsql_count_children(): %lu\n",
243                         *nchildren, 0, 0 );
244
245         return res;
246 }
247
248 int
249 backsql_has_children(
250         backsql_info            *bi,
251         SQLHDBC                 dbh,
252         struct berval           *dn )
253 {
254         unsigned long   nchildren;
255         int             rc;
256
257         rc = backsql_count_children( bi, dbh, dn, &nchildren );
258
259         if ( rc == LDAP_SUCCESS ) {
260                 return nchildren > 0 ? LDAP_COMPARE_TRUE : LDAP_COMPARE_FALSE;
261         }
262
263         return rc;
264 }
265
266 int
267 backsql_get_attr_vals( backsql_at_map_rec *at, backsql_srch_info *bsi )
268 {
269         RETCODE         rc;
270         SQLHSTMT        sth;
271         BACKSQL_ROW_NTS row;
272         int             i;
273
274         assert( at );
275         assert( bsi );
276  
277         Debug( LDAP_DEBUG_TRACE, "==>backsql_get_attr_vals(): "
278                 "oc='%s' attr='%s' keyval=%ld\n",
279                 BACKSQL_OC_NAME( bsi->oc ), at->ad->ad_cname.bv_val, 
280                 bsi->c_eid->keyval );
281
282         rc = backsql_Prepare( bsi->dbh, &sth, at->query, 0 );
283         if ( rc != SQL_SUCCESS ) {
284                 Debug( LDAP_DEBUG_TRACE, "backsql_get_attr_values(): "
285                         "error preparing query: %s\n", at->query, 0, 0 );
286                 backsql_PrintErrors( bsi->bi->db_env, bsi->dbh, sth, rc );
287                 return 1;
288         }
289
290         rc = backsql_BindParamID( sth, 1, &bsi->c_eid->keyval );
291         if ( rc != SQL_SUCCESS ) {
292                 Debug( LDAP_DEBUG_TRACE, "backsql_get_attr_values(): "
293                         "error binding key value parameter\n", 0, 0, 0 );
294                 return 1;
295         }
296
297         rc = SQLExecute( sth );
298         if ( ! BACKSQL_SUCCESS( rc ) ) {
299                 Debug( LDAP_DEBUG_TRACE, "backsql_get_attr_values(): "
300                         "error executing attribute query '%s'\n",
301                         at->query, 0, 0 );
302                 backsql_PrintErrors( bsi->bi->db_env, bsi->dbh, sth, rc );
303                 SQLFreeStmt( sth, SQL_DROP );
304                 return 1;
305         }
306
307         backsql_BindRowAsStrings( sth, &row );
308
309         rc = SQLFetch( sth );
310         for ( ; BACKSQL_SUCCESS( rc ); rc = SQLFetch( sth ) ) {
311                 for ( i = 0; i < row.ncols; i++ ) {
312                         if ( row.value_len[ i ] > 0 ) {
313                                 struct berval   bv;
314
315                                 bv.bv_val = row.cols[ i ];
316 #if 0
317                                 bv.bv_len = row.col_prec[ i ];
318 #else
319                                 /*
320                                  * FIXME: what if a binary 
321                                  * is fetched?
322                                  */
323                                 bv.bv_len = strlen( row.cols[ i ] );
324 #endif
325                                 backsql_entry_addattr( bsi->e, 
326                                                 &row.col_names[ i ], &bv );
327
328 #ifdef BACKSQL_TRACE
329                                 Debug( LDAP_DEBUG_TRACE, "prec=%d\n",
330                                         (int)row.col_prec[ i ], 0, 0 );
331                         } else {
332                                 Debug( LDAP_DEBUG_TRACE, "NULL value "
333                                         "in this row for attribute '%s'\n",
334                                         row.col_names[ i ].bv_val, 0, 0 );
335 #endif /* BACKSQL_TRACE */
336                         }
337                 }
338         }
339
340         backsql_FreeRow( &row );
341         SQLFreeStmt( sth, SQL_DROP );
342         Debug( LDAP_DEBUG_TRACE, "<==backsql_get_attr_vals()\n", 0, 0, 0 );
343
344         return 1;
345 }
346
347 Entry *
348 backsql_id2entry( backsql_srch_info *bsi, Entry *e, backsql_entryID *eid )
349 {
350         int                     i;
351         backsql_at_map_rec      *at;
352         int                     rc;
353         AttributeDescription    *ad_oc = slap_schema.si_ad_objectClass;
354
355         Debug( LDAP_DEBUG_TRACE, "==>backsql_id2entry()\n", 0, 0, 0 );
356
357         rc = dnPrettyNormal( NULL, &eid->dn, &e->e_name, &e->e_nname );
358         if ( rc != LDAP_SUCCESS ) {
359                 return NULL;
360         }
361
362         bsi->oc = backsql_id2oc( bsi->bi, eid->oc_id );
363         bsi->e = e;
364         bsi->c_eid = eid;
365         e->e_attrs = NULL;
366         e->e_private = NULL;
367  
368         /* if ( bsi->base_dn != NULL)??? */
369         
370         e->e_id = eid->id;
371  
372         if ( bsi->attrs != NULL ) {
373                 Debug( LDAP_DEBUG_TRACE, "backsql_id2entry(): "
374                         "custom attribute list\n", 0, 0, 0 );
375                 for ( i = 0; bsi->attrs[ i ].an_name.bv_val; i++ ) {
376                         AttributeName *attr = &bsi->attrs[ i ];
377
378                         if ( attr->an_desc == ad_oc
379 #if 0   /* FIXME: what is 0.10 ? */
380                                         || !BACKSQL_NCMP( &attr->an_name, &bv_n_0_10 ) 
381 #endif
382                                         ) {
383 #if 0
384                                 backsql_entry_addattr( bsi->e, 
385                                                 &bv_n_objectclass,
386                                                 BACKSQL_OC_NAME( bsi->oc ) );
387 #endif
388                                 continue;
389                         }
390
391                         at = backsql_ad2at( bsi->oc, attr->an_desc );
392                         if ( at != NULL ) {
393                                 backsql_get_attr_vals( at, bsi );
394                         } else {
395                                 Debug( LDAP_DEBUG_TRACE, "backsql_id2entry(): "
396                                         "attribute '%s' is not defined "
397                                         "for objectlass '%s'\n",
398                                         attr->an_name.bv_val, 
399                                         BACKSQL_OC_NAME( bsi->oc ), 0 );
400                         }
401                 }
402
403         } else {
404                 Debug( LDAP_DEBUG_TRACE, "backsql_id2entry(): "
405                         "retrieving all attributes\n", 0, 0, 0 );
406                 avl_apply( bsi->oc->attrs, (AVL_APPLY)backsql_get_attr_vals,
407                                 bsi, 0, AVL_INORDER );
408         }
409
410         if ( attr_merge_one( bsi->e, ad_oc, &bsi->oc->oc->soc_cname ) ) {
411                 entry_free( e );
412                 return NULL;
413         }
414
415         if ( global_schemacheck ) {
416                 const char      *text = NULL;
417                 char            textbuf[ 1024 ];
418                 size_t          textlen = sizeof( textbuf );
419                 struct berval   bv[ 2 ] = { bsi->oc->oc->soc_cname, BER_BVNULL };
420                 struct berval   soc;
421                 AttributeDescription    *ad_soc
422                         = slap_schema.si_ad_structuralObjectClass;
423
424                 int rc = structural_class( bv, &soc, NULL, 
425                                 &text, textbuf, textlen );
426                 if ( rc != LDAP_SUCCESS ) {
427                         entry_free( e );
428                         return NULL;
429                 }
430
431                 if ( bsi->bsi_flags | BSQL_SF_ALL_OPER 
432                                 || an_find( bsi->attrs, &AllOper ) ) {
433                         if ( attr_merge_one( bsi->e, ad_soc, &soc ) ) {
434                                 entry_free( e );
435                                 return NULL;
436                         }
437                 }
438         }
439
440         Debug( LDAP_DEBUG_TRACE, "<==backsql_id2entry()\n", 0, 0, 0 );
441
442         return e;
443 }
444
445 #endif /* SLAPD_SQL */
446