]> git.sur5r.net Git - openldap/blobdiff - libraries/liblber/io.c
Re-fix ITS#6764 (check for ber == NULL _before_ using ber)
[openldap] / libraries / liblber / io.c
index 2f60e27ca85acb2d49ce1d7f9f6f3a34cfee9c95..40b5acf6bf364f481b3111aa1d76274da8bcf8ee 100644 (file)
@@ -1,11 +1,19 @@
 /* io.c - ber general i/o routines */
 /* $OpenLDAP$ */
-/*
- * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved.
- * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
+ *
+ * Copyright 1998-2011 The OpenLDAP Foundation.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
+ *
+ * A copy of this license is available in the file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
  */
-/* Portions
- * Copyright (c) 1990 Regents of the University of Michigan.
+/* Portions Copyright (c) 1990 Regents of the University of Michigan.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms are permitted
  * software without specific prior written permission. This software
  * is provided ``as is'' without express or implied warranty.
  */
+/* ACKNOWLEDGEMENTS:
+ * This work was originally developed by the University of Michigan
+ * (as part of U-MICH LDAP).
+ */
 
 #include "portable.h"
 
 #include "lber-int.h"
 #include "ldap_log.h"
 
+ber_slen_t
+ber_skip_data(
+       BerElement *ber,
+       ber_len_t len )
+{
+       ber_len_t       actuallen, nleft;
+
+       assert( ber != NULL );
+       assert( LBER_VALID( ber ) );
+
+       nleft = ber_pvt_ber_remaining( ber );
+       actuallen = nleft < len ? nleft : len;
+       ber->ber_ptr += actuallen;
+       ber->ber_tag = *(unsigned char *)ber->ber_ptr;
+
+       return( (ber_slen_t) actuallen );
+}
+
+/*
+ * Read from the ber buffer.  The caller must maintain ber->ber_tag.
+ * Do not use to read whole tags.  See ber_get_tag() and ber_skip_data().
+ */
 ber_slen_t
 ber_read(
        BerElement *ber,
@@ -45,7 +79,6 @@ ber_read(
 
        assert( ber != NULL );
        assert( buf != NULL );
-
        assert( LBER_VALID( ber ) );
 
        nleft = ber_pvt_ber_remaining( ber );
@@ -58,51 +91,54 @@ ber_read(
        return( (ber_slen_t) actuallen );
 }
 
+/*
+ * Write to the ber buffer.
+ * Note that ber_start_seqorset/ber_put_seqorset() bypass ber_write().
+ */
 ber_slen_t
 ber_write(
        BerElement *ber,
        LDAP_CONST char *buf,
        ber_len_t len,
-       int nosos )
+       int zero )      /* nonzero is unsupported from OpenLDAP 2.4.18 */
 {
+       char **p;
+
        assert( ber != NULL );
        assert( buf != NULL );
-
        assert( LBER_VALID( ber ) );
 
-       if ( nosos || ber->ber_sos == NULL ) {
-               if ( ber->ber_ptr + len > ber->ber_end ) {
-                       if ( ber_realloc( ber, len ) != 0 )
-                               return( -1 );
-               }
-               AC_MEMCPY( ber->ber_ptr, buf, (size_t)len );
-               ber->ber_ptr += len;
-               return( (ber_slen_t) len );
+       if ( zero != 0 ) {
+               ber_log_printf( LDAP_DEBUG_ANY, ber->ber_debug, "%s",
+                       "ber_write: nonzero 4th argument not supported\n" );
+               return( -1 );
+       }
 
-       } else {
-               if ( ber->ber_sos->sos_ptr + len > ber->ber_end ) {
-                       if ( ber_realloc( ber, len ) != 0 )
-                               return( -1 );
-               }
-               AC_MEMCPY( ber->ber_sos->sos_ptr, buf, (size_t)len );
-               ber->ber_sos->sos_ptr += len;
-               ber->ber_sos->sos_clen += len;
-               return( (ber_slen_t) len );
+       p = ber->ber_sos_ptr == NULL ? &ber->ber_ptr : &ber->ber_sos_ptr;
+       if ( len > (ber_len_t) (ber->ber_end - *p) ) {
+               if ( ber_realloc( ber, len ) != 0 ) return( -1 );
        }
+       AC_MEMCPY( *p, buf, len );
+       *p += len;
+
+       return( (ber_slen_t) len );
 }
 
+/* Resize the ber buffer */
 int
 ber_realloc( BerElement *ber, ber_len_t len )
 {
-       ber_len_t       total;
-       Seqorset        *s;
-       long            off;
-       char            *oldbuf;
+       ber_len_t       total, offset, sos_offset;
+       char            *buf;
 
        assert( ber != NULL );
-       assert( len > 0 );
        assert( LBER_VALID( ber ) );
 
+       /* leave room for ber_flatten() to \0-terminate ber_buf */
+       if ( ++len == 0 ) {
+               return( -1 );
+       }
+
        total = ber_pvt_ber_total( ber );
 
 #define LBER_EXBUFSIZ  4060 /* a few words less than 2^N for binary buddy */
@@ -111,7 +147,7 @@ ber_realloc( BerElement *ber, ber_len_t len )
        /* don't realloc by small amounts */
        total += len < LBER_EXBUFSIZ ? LBER_EXBUFSIZ : len;
 # else
-       {       /* not sure what value this adds */
+       {       /* not sure what value this adds.  reduce fragmentation? */
                ber_len_t have = (total + (LBER_EXBUFSIZE - 1)) / LBER_EXBUFSIZ;
                ber_len_t need = (len + (LBER_EXBUFSIZ - 1)) / LBER_EXBUFSIZ;
                total = ( have + need ) * LBER_EXBUFSIZ;
@@ -121,83 +157,70 @@ ber_realloc( BerElement *ber, ber_len_t len )
        total += len;   /* realloc just what's needed */
 #endif
 
-       oldbuf = ber->ber_buf;
-
-       ber->ber_buf = (char *) ber_memrealloc_x( oldbuf, total, ber->ber_memctx );
-       
-       if ( ber->ber_buf == NULL ) {
-               ber->ber_buf = oldbuf;
+       if ( total < len || total > (ber_len_t)-1 / 2 /* max ber_slen_t */ ) {
                return( -1 );
        }
 
-       ber->ber_end = ber->ber_buf + total;
-
-       /*
-        * If the stinking thing was moved, we need to go through and
-        * reset all the sos and ber pointers.  Offsets would've been
-        * a better idea... oh well.
-        */
+       buf = ber->ber_buf;
+       offset = ber->ber_ptr - buf;
+       sos_offset = ber->ber_sos_ptr ? ber->ber_sos_ptr - buf : 0;
+       /* if ber_sos_ptr != NULL, it is > ber_buf so that sos_offset > 0 */
 
-       if ( ber->ber_buf != oldbuf ) {
-               ber->ber_ptr = ber->ber_buf + (ber->ber_ptr - oldbuf);
-
-               for ( s = ber->ber_sos; s != NULL; s = s->sos_next ) {
-                       off = s->sos_first - oldbuf;
-                       s->sos_first = ber->ber_buf + off;
-
-                       off = s->sos_ptr - oldbuf;
-                       s->sos_ptr = ber->ber_buf + off;
-               }
+       buf = (char *) ber_memrealloc_x( buf, total, ber->ber_memctx );
+       if ( buf == NULL ) {
+               return( -1 );
        }
 
+       ber->ber_buf = buf;
+       ber->ber_end = buf + total;
+       ber->ber_ptr = buf + offset;
+       if ( sos_offset )
+               ber->ber_sos_ptr = buf + sos_offset;
+
        return( 0 );
 }
 
 void
 ber_free_buf( BerElement *ber )
 {
-       Seqorset *s, *next;
-
        assert( LBER_VALID( ber ) );
 
        if ( ber->ber_buf) ber_memfree_x( ber->ber_buf, ber->ber_memctx );
 
-       for( s = ber->ber_sos ; s != NULL ; s = next ) {
-               next = s->sos_next;
-               ber_memfree_x( s, ber->ber_memctx );
-       }
-
        ber->ber_buf = NULL;
-       ber->ber_sos = NULL;
+       ber->ber_sos_ptr = NULL;
        ber->ber_valid = LBER_UNINITIALIZED;
 }
 
 void
 ber_free( BerElement *ber, int freebuf )
 {
-#ifdef LDAP_MEMORY_DEBUG
-       assert( ber != NULL );
-#endif
-
        if( ber == NULL ) {
+               LDAP_MEMORY_DEBUG_ASSERT( ber != NULL );
                return;
        }
 
-       if( freebuf )
-               ber_free_buf( ber );
+       if( freebuf ) ber_free_buf( ber );
 
        ber_memfree_x( (char *) ber, ber->ber_memctx );
 }
 
 int
 ber_flush( Sockbuf *sb, BerElement *ber, int freeit )
+{
+       return ber_flush2( sb, ber,
+               freeit ? LBER_FLUSH_FREE_ON_SUCCESS
+                       : LBER_FLUSH_FREE_NEVER );
+}
+
+int
+ber_flush2( Sockbuf *sb, BerElement *ber, int freeit )
 {
        ber_len_t       towrite;
-       ber_slen_t      rc;     
+       ber_slen_t      rc;
 
        assert( sb != NULL );
        assert( ber != NULL );
-
        assert( SOCKBUF_VALID( sb ) );
        assert( LBER_VALID( ber ) );
 
@@ -207,38 +230,32 @@ ber_flush( Sockbuf *sb, BerElement *ber, int freeit )
        towrite = ber->ber_ptr - ber->ber_rwptr;
 
        if ( sb->sb_debug ) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( BER, DETAIL1,
-                          "ber_flush: %ld bytes to sd %ld%s\n",
-                          towrite, (long)sb->sb_fd,
-                          ber->ber_rwptr != ber->ber_buf ? " (re-flush)" : "" );
-
-               if(LDAP_LOGS_TEST(BER, DETAIL2))
-                               BER_DUMP(( "liblber", LDAP_LEVEL_DETAIL2, ber, 1 ));
-
-#else
                ber_log_printf( LDAP_DEBUG_TRACE, sb->sb_debug,
-                       "ber_flush: %ld bytes to sd %ld%s\n",
+                       "ber_flush2: %ld bytes to sd %ld%s\n",
                        towrite, (long) sb->sb_fd,
                        ber->ber_rwptr != ber->ber_buf ?  " (re-flush)" : "" );
-               ber_log_bprint( LDAP_DEBUG_PACKETS, sb->sb_debug,
+               ber_log_bprint( LDAP_DEBUG_BER, sb->sb_debug,
                        ber->ber_rwptr, towrite );
-#endif
        }
 
        while ( towrite > 0 ) {
+#ifdef LBER_TRICKLE
+               sleep(1);
+               rc = ber_int_sb_write( sb, ber->ber_rwptr, 1 );
+#else
                rc = ber_int_sb_write( sb, ber->ber_rwptr, towrite );
-               if (rc<=0) {
+#endif
+               if ( rc <= 0 ) {
+                       if ( freeit & LBER_FLUSH_FREE_ON_ERROR ) ber_free( ber, 1 );
                        return -1;
                }
                towrite -= rc;
                ber->ber_rwptr += rc;
        } 
 
-       if ( freeit )
-               ber_free( ber, 1 );
+       if ( freeit & LBER_FLUSH_FREE_ON_SUCCESS ) ber_free( ber, 1 );
 
-       return( 0 );
+       return 0;
 }
 
 BerElement *
@@ -246,8 +263,6 @@ ber_alloc_t( int options )
 {
        BerElement      *ber;
 
-    ber_int_options.lbo_valid = LBER_INITIALIZED;
-
        ber = (BerElement *) LBER_CALLOC( 1, sizeof(BerElement) );
 
        if ( ber == NULL ) {
@@ -299,8 +314,6 @@ ber_init2( BerElement *ber, struct berval *bv, int options )
 {
        assert( ber != NULL );
 
-       ber_int_options.lbo_valid = LBER_INITIALIZED;
-
        (void) memset( (char *)ber, '\0', sizeof( BerElement ));
        ber->ber_valid = LBER_VALID_BERELEMENT;
        ber->ber_tag = LBER_DEFAULT;
@@ -334,8 +347,6 @@ ber_init( struct berval *bv )
 
        assert( bv != NULL );
 
-    ber_int_options.lbo_valid = LBER_INITIALIZED;
-
        if ( bv == NULL ) {
                return NULL;
        }
@@ -375,8 +386,6 @@ int ber_flatten2(
 {
        assert( bv != NULL );
 
-       ber_int_options.lbo_valid = LBER_INITIALIZED;
-
        if ( bv == NULL ) {
                return -1;
        }
@@ -386,6 +395,10 @@ int ber_flatten2(
                bv->bv_val = NULL;
                bv->bv_len = 0;
 
+       } else if ( ber->ber_sos_ptr != NULL ) {
+               /* unmatched "{" and "}" */
+               return -1;
+
        } else {
                /* copy the berval */
                ber_len_t len = ber_pvt_ber_write( ber );
@@ -396,10 +409,13 @@ int ber_flatten2(
                                return -1;
                        }
                        AC_MEMCPY( bv->bv_val, ber->ber_buf, len );
-               } else {
+                       bv->bv_val[len] = '\0';
+               } else if ( ber->ber_buf != NULL ) {
                        bv->bv_val = ber->ber_buf;
+                       bv->bv_val[len] = '\0';
+               } else {
+                       bv->bv_val = "";
                }
-               bv->bv_val[len] = '\0';
                bv->bv_len = len;
        }
        return 0;
@@ -414,8 +430,6 @@ int ber_flatten(
  
        assert( bvPtr != NULL );
 
-       ber_int_options.lbo_valid = LBER_INITIALIZED;
-
        if(bvPtr == NULL) {
                return -1;
        }
@@ -467,16 +481,13 @@ ber_get_next(
        assert( sb != NULL );
        assert( len != NULL );
        assert( ber != NULL );
-
        assert( SOCKBUF_VALID( sb ) );
        assert( LBER_VALID( ber ) );
 
-#ifdef NEW_LOGGING
-       LDAP_LOG( BER, ENTRY, "ber_get_next: enter\n", 0, 0, 0 );
-#else
-       ber_log_printf( LDAP_DEBUG_TRACE, ber->ber_debug,
-               "ber_get_next\n" );
-#endif
+       if ( ber->ber_debug & LDAP_DEBUG_TRACE ) {
+               ber_log_printf( LDAP_DEBUG_TRACE, ber->ber_debug,
+                       "ber_get_next\n" );
+       }
 
        /*
         * Any ber element looks like this: tag length contents.
@@ -500,23 +511,25 @@ ber_get_next(
         */
 
        if (ber->ber_rwptr == NULL) {
-#if 0
-               /* XXYYZ - dtest does like this assert.  */
                assert( ber->ber_buf == NULL );
-#endif
                ber->ber_rwptr = (char *) &ber->ber_len-1;
                ber->ber_ptr = ber->ber_rwptr;
                ber->ber_tag = 0;
        }
 
        while (ber->ber_rwptr > (char *)&ber->ber_tag && ber->ber_rwptr <
-               (char *)&ber->ber_len + LENSIZE*2 -1) {
+               (char *)&ber->ber_len + LENSIZE*2) {
                ber_slen_t sblen;
                char buf[sizeof(ber->ber_len)-1];
                ber_len_t tlen = 0;
 
-               sblen=ber_int_sb_read( sb, ber->ber_rwptr,
-                       ((char *)&ber->ber_len + LENSIZE*2 - 1)-ber->ber_rwptr);
+               /* The tag & len can be at most 9 bytes; we try to read up to 8 here */
+               sock_errset(0);
+               sblen=((char *)&ber->ber_len + LENSIZE*2 - 1)-ber->ber_rwptr;
+               /* Trying to read the last len byte of a 9 byte tag+len */
+               if (sblen<1)
+                       sblen = 1;
+               sblen=ber_int_sb_read( sb, ber->ber_rwptr, sblen );
                if (sblen<=0) return LBER_DEFAULT;
                ber->ber_rwptr += sblen;
 
@@ -534,60 +547,55 @@ ber_get_next(
                                                break;
                                        /* Is the tag too big? */
                                        if (i == sizeof(ber_tag_t)-1) {
-                                               errno = ERANGE;
+                                               sock_errset(ERANGE);
                                                return LBER_DEFAULT;
                                        }
                                }
                                /* Did we run out of bytes? */
                                if ((char *)p == ber->ber_rwptr) {
-#if defined( EWOULDBLOCK )
-                                       errno = EWOULDBLOCK;
-#elif defined( EAGAIN )
-                                       errno = EAGAIN;
-#endif                 
+                                       sock_errset(EWOULDBLOCK);
                                        return LBER_DEFAULT;
                                }
                        }
-                       if (sblen == 1) continue;
-
                        ber->ber_tag = tag;
                        ber->ber_ptr = (char *)p;
                }
 
+               if ( ber->ber_ptr == ber->ber_rwptr ) {
+                       sock_errset(EWOULDBLOCK);
+                       return LBER_DEFAULT;
+               }
+
                /* Now look for the length */
                if (*ber->ber_ptr & 0x80) {     /* multi-byte */
-                       ber_len_t i;
+                       int i;
                        unsigned char *p = (unsigned char *)ber->ber_ptr;
                        int llen = *p++ & 0x7f;
-                       if (llen > (int)sizeof(ber_len_t)) {
-                               errno = ERANGE;
+                       if (llen > LENSIZE) {
+                               sock_errset(ERANGE);
                                return LBER_DEFAULT;
                        }
                        /* Not enough bytes? */
                        if (ber->ber_rwptr - (char *)p < llen) {
-#if defined( EWOULDBLOCK )
-                               errno = EWOULDBLOCK;
-#elif defined( EAGAIN )
-                               errno = EAGAIN;
-#endif                 
+                               sock_errset(EWOULDBLOCK);
                                return LBER_DEFAULT;
                        }
-                       for (i=0; i<llen; i++)
-                       {
+                       for (i=0; i<llen; i++) {
                                tlen <<=8;
                                tlen |= *p++;
                        }
-                       ber->ber_ptr = p;
+                       ber->ber_ptr = (char *)p;
                } else {
                        tlen = *(unsigned char *)ber->ber_ptr++;
                }
 
                /* Are there leftover data bytes inside ber->ber_len? */
                if (ber->ber_ptr < (char *)&ber->ber_usertag) {
-                       if (ber->ber_rwptr < (char *)&ber->ber_usertag)
+                       if (ber->ber_rwptr < (char *)&ber->ber_usertag) {
                                sblen = ber->ber_rwptr - ber->ber_ptr;
-                       else
+                       } else {
                                sblen = (char *)&ber->ber_usertag - ber->ber_ptr;
+                       }
                        AC_MEMCPY(buf, ber->ber_ptr, sblen);
                        ber->ber_ptr += sblen;
                } else {
@@ -599,21 +607,15 @@ ber_get_next(
 
                /* make sure length is reasonable */
                if ( ber->ber_len == 0 ) {
-                       errno = ERANGE;
+                       sock_errset(ERANGE);
                        return LBER_DEFAULT;
                }
 
                if ( sb->sb_max_incoming && ber->ber_len > sb->sb_max_incoming ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( BER, ERR, 
-                               "ber_get_next: sockbuf_max_incoming exceeded "
-                               "(%d > %d)\n", ber->ber_len, sb->sb_max_incoming, 0 );
-#else
                        ber_log_printf( LDAP_DEBUG_CONNS, ber->ber_debug,
                                "ber_get_next: sockbuf_max_incoming exceeded "
                                "(%ld > %ld)\n", ber->ber_len, sb->sb_max_incoming );
-#endif
-                       errno = ERANGE;
+                       sock_errset(ERANGE);
                        return LBER_DEFAULT;
                }
 
@@ -624,7 +626,7 @@ ber_get_next(
                         * already read.
                         */
                        if ( ber->ber_len < sblen + l ) {
-                               errno = ERANGE;
+                               sock_errset(ERANGE);
                                return LBER_DEFAULT;
                        }
                        ber->ber_buf = (char *) ber_memalloc_x( ber->ber_len + 1, ber->ber_memctx );
@@ -639,6 +641,7 @@ ber_get_next(
                                AC_MEMCPY(ber->ber_buf + sblen, ber->ber_ptr, l);
                                sblen += l;
                        }
+                       *ber->ber_end = '\0';
                        ber->ber_ptr = ber->ber_buf;
                        ber->ber_usertag = 0;
                        if ((ber_len_t)sblen == ber->ber_len) {
@@ -655,34 +658,23 @@ ber_get_next(
                to_go = ber->ber_end - ber->ber_rwptr;
                assert( to_go > 0 );
                
+               sock_errset(0);
                res = ber_int_sb_read( sb, ber->ber_rwptr, to_go );
                if (res<=0) return LBER_DEFAULT;
                ber->ber_rwptr+=res;
                
                if (res<to_go) {
-#if defined( EWOULDBLOCK )
-                       errno = EWOULDBLOCK;
-#elif defined( EAGAIN )
-                       errno = EAGAIN;
-#endif                 
+                       sock_errset(EWOULDBLOCK);
                        return LBER_DEFAULT;
                }
 done:
                ber->ber_rwptr = NULL;
                *len = ber->ber_len;
                if ( ber->ber_debug ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( BER, DETAIL1, 
-                               "ber_get_next: tag 0x%lx len %ld\n", 
-                               ber->ber_tag, ber->ber_len, 0  );
-                       if(LDAP_LOGS_TEST(BER, DETAIL2))
-                                       BER_DUMP(( "liblber", LDAP_LEVEL_DETAIL2, ber, 1 ));
-#else
                        ber_log_printf( LDAP_DEBUG_TRACE, ber->ber_debug,
                                "ber_get_next: tag 0x%lx len %ld contents:\n",
                                ber->ber_tag, ber->ber_len );
                        ber_log_dump( LDAP_DEBUG_BER, ber->ber_debug, ber, 1 );
-#endif
                }
                return (ber->ber_tag);
        }
@@ -713,9 +705,13 @@ void
 ber_rewind ( BerElement * ber )
 {
        ber->ber_rwptr = NULL;
-       ber->ber_sos = NULL;
+       ber->ber_sos_ptr = NULL;
        ber->ber_end = ber->ber_ptr;
        ber->ber_ptr = ber->ber_buf;
+#if 0  /* TODO: Should we add this? */
+       ber->ber_tag = LBER_DEFAULT;
+       ber->ber_usertag = 0;
+#endif
 }
 
 int