]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/schema_init.c
don't return entry if requested attr is not present (ITS#5650)
[openldap] / servers / slapd / schema_init.c
index ac0a73f68e7dab5badd029074ccc57845db7730f..fd386a74f2e2d2b59df75b07bc113a5566bd6171 100644 (file)
@@ -2,7 +2,7 @@
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- * Copyright 1998-2007 The OpenLDAP Foundation.
+ * Copyright 1998-2008 The OpenLDAP Foundation.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -2239,10 +2239,10 @@ integerIndexer(
                }
                rc = integerVal2Key( &values[i], &keys[i], &itmp, ctx );
                if ( rc )
-                       goto leave;
+                       goto func_leave;
        }
        *keysp = keys;
-leave:
+func_leave:
        if ( itmp.bv_val != ibuf ) {
                slap_sl_free( itmp.bv_val, ctx );
        }
@@ -2273,6 +2273,8 @@ integerFilter(
 
        keys[0].bv_len = index_intlen;
        keys[0].bv_val = slap_sl_malloc( index_intlen, ctx );
+       keys[1].bv_len = 0;
+       keys[1].bv_val = NULL;
 
        iv.bv_len = value->bv_len < index_intlen_strlen + INDEX_INTLEN_CHOP-1
                ? value->bv_len : index_intlen_strlen + INDEX_INTLEN_CHOP-1;
@@ -2753,7 +2755,7 @@ serialNumberAndIssuerCheck(
 
        } else {
                /* Parse GSER format */ 
-               int havesn=0,haveissuer=0;
+               int havesn = 0, haveissuer = 0, numdquotes = 0;
                struct berval x = *in;
                struct berval ni;
                x.bv_val++;
@@ -2819,7 +2821,10 @@ serialNumberAndIssuerCheck(
                        STRLENOF("serialNumber")) == 0 )
                {
                        /* parse serialNumber */
-                       int neg=0;
+                       int neg = 0;
+                       char first = '\0';
+                       int extra = 0;
+
                        x.bv_val += STRLENOF("serialNumber");
                        x.bv_len -= STRLENOF("serialNumber");
 
@@ -2840,29 +2845,45 @@ serialNumberAndIssuerCheck(
                        }
 
                        if ( sn->bv_val[0] == '0' && ( sn->bv_val[1] == 'x' ||
-                               sn->bv_val[1] == 'X' )) {
+                               sn->bv_val[1] == 'X' ))
+                       {
                                is_hex = 1;
+                               first = sn->bv_val[2];
+                               extra = 2;
+
+                               sn->bv_len += STRLENOF("0x");
                                for( ; sn->bv_len < x.bv_len; sn->bv_len++ ) {
                                        if ( !ASCII_HEX( sn->bv_val[sn->bv_len] )) break;
                                }
+
                        } else if ( sn->bv_val[0] == '\'' ) {
+                               first = sn->bv_val[1];
+                               extra = 3;
+
+                               sn->bv_len += STRLENOF("'");
+
                                for( ; sn->bv_len < x.bv_len; sn->bv_len++ ) {
                                        if ( !ASCII_HEX( sn->bv_val[sn->bv_len] )) break;
                                }
                                if ( sn->bv_val[sn->bv_len] == '\'' &&
-                                       sn->bv_val[sn->bv_len+1] == 'H' )
+                                       sn->bv_val[sn->bv_len + 1] == 'H' )
+                               {
+                                       sn->bv_len += STRLENOF("'H");
                                        is_hex = 1;
-                               else
+
+                               } else {
                                        return LDAP_INVALID_SYNTAX;
-                               sn->bv_len += 2;
+                               }
+
                        } else {
+                               first = sn->bv_val[0];
                                for( ; sn->bv_len < x.bv_len; sn->bv_len++ ) {
                                        if ( !ASCII_DIGIT( sn->bv_val[sn->bv_len] )) break;
                                }
                        }
 
                        if (!( sn->bv_len > neg )) return LDAP_INVALID_SYNTAX;
-                       if (( sn->bv_len > 1+neg ) && ( sn->bv_val[neg] == '0' )) {
+                       if (( sn->bv_len > extra+1+neg ) && ( first == '0' )) {
                                return LDAP_INVALID_SYNTAX;
                        }
 
@@ -2919,6 +2940,7 @@ serialNumberAndIssuerCheck(
                                }
                                if ( is->bv_val[is->bv_len+1] == '"' ) {
                                        /* double dquote */
+                                       numdquotes++;
                                        is->bv_len+=2;
                                        continue;
                                }
@@ -2991,11 +3013,25 @@ serialNumberAndIssuerCheck(
                /* should have no characters left... */
                if( x.bv_len ) return LDAP_INVALID_SYNTAX;
 
-               ber_dupbv_x( &ni, is, ctx );
-               *is = ni;
+               if ( numdquotes == 0 ) {
+                       ber_dupbv_x( &ni, is, ctx );
+               } else {
+                       ber_int_t src, dst;
 
-               /* need to handle double dquotes here */
+                       ni.bv_len = is->bv_len - numdquotes;
+                       ni.bv_val = ber_memalloc_x( ni.bv_len + 1, ctx );
+                       for ( src = 0, dst = 0; src < is->bv_len; src++, dst++ ) {
+                               if ( is->bv_val[src] == '"' ) {
+                                       src++;
+                               }
+                               ni.bv_val[dst] = is->bv_val[src];
+                       }
+                       ni.bv_val[dst] = '\0';
+               }
+                       
+               *is = ni;
        }
+
        return 0;
 }
        
@@ -3142,7 +3178,7 @@ serialNumberAndIssuerNormalize(
        sn2.bv_len = sn.bv_len;
        if ( lutil_str2bin( &sn, &sn2, ctx )) {
                rc = LDAP_INVALID_SYNTAX;
-               goto leave;
+               goto func_leave;
        }
 
        /* make room for sn + "$" */
@@ -3154,7 +3190,7 @@ serialNumberAndIssuerNormalize(
                out->bv_len = 0;
                slap_sl_free( ni.bv_val, ctx );
                rc = LDAP_OTHER;
-               goto leave;
+               goto func_leave;
        }
 
        n = 0;
@@ -3192,7 +3228,7 @@ serialNumberAndIssuerNormalize(
        Debug( LDAP_DEBUG_TRACE, "<<< serialNumberAndIssuerNormalize: <%s>\n",
                out->bv_val, 0, 0 );
 
-leave:
+func_leave:
        if ( stmp != sbuf )
                slap_sl_free( stmp, ctx );
        slap_sl_free( ni.bv_val, ctx );
@@ -3561,6 +3597,114 @@ csnValidate(
        return hexValidate( NULL, &bv );
 }
 
+/* Normalize a CSN in OpenLDAP 2.1 format */
+static int
+csnNormalize21(
+       slap_mask_t usage,
+       Syntax *syntax,
+       MatchingRule *mr,
+       struct berval *val,
+       struct berval *normalized,
+       void *ctx )
+{
+       struct berval   gt, cnt, sid, mod;
+       struct berval   bv;
+       char            buf[ STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" ) + 1 ];
+       char            *ptr;
+       int             i;
+
+       assert( SLAP_MR_IS_VALUE_OF_SYNTAX( usage ) != 0 );
+       assert( !BER_BVISEMPTY( val ) );
+
+       gt = *val;
+
+       ptr = ber_bvchr( &gt, '#' );
+       if ( ptr == NULL || ptr - gt.bv_val == gt.bv_len ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       gt.bv_len = ptr - gt.bv_val;
+       if ( gt.bv_len != STRLENOF( "YYYYmmddHH:MM:SSZ" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       if ( gt.bv_val[ 10 ] != ':' || gt.bv_val[ 13 ] != ':' ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       cnt.bv_val = ptr + 1;
+       cnt.bv_len = val->bv_len - ( cnt.bv_val - val->bv_val );
+
+       ptr = ber_bvchr( &cnt, '#' );
+       if ( ptr == NULL || ptr - val->bv_val == val->bv_len ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       cnt.bv_len = ptr - cnt.bv_val;
+       if ( cnt.bv_len != STRLENOF( "0x0000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       if ( strncmp( cnt.bv_val, "0x", STRLENOF( "0x" ) ) != 0 ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       cnt.bv_val += STRLENOF( "0x" );
+       cnt.bv_len -= STRLENOF( "0x" );
+
+       sid.bv_val = ptr + 1;
+       sid.bv_len = val->bv_len - ( sid.bv_val - val->bv_val );
+               
+       ptr = ber_bvchr( &sid, '#' );
+       if ( ptr == NULL || ptr - val->bv_val == val->bv_len ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       sid.bv_len = ptr - sid.bv_val;
+       if ( sid.bv_len != STRLENOF( "0" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       mod.bv_val = ptr + 1;
+       mod.bv_len = val->bv_len - ( mod.bv_val - val->bv_val );
+       if ( mod.bv_len != STRLENOF( "0000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       bv.bv_len = STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" );
+       bv.bv_val = buf;
+
+       ptr = bv.bv_val;
+       ptr = lutil_strncopy( ptr, gt.bv_val, STRLENOF( "YYYYmmddHH" ) );
+       ptr = lutil_strncopy( ptr, &gt.bv_val[ STRLENOF( "YYYYmmddHH:" ) ],
+               STRLENOF( "MM" ) );
+       ptr = lutil_strncopy( ptr, &gt.bv_val[ STRLENOF( "YYYYmmddHH:MM:" ) ],
+               STRLENOF( "SS" ) );
+       ptr = lutil_strcopy( ptr, ".000000Z#00" );
+       ptr = lutil_strncopy( ptr, cnt.bv_val, cnt.bv_len );
+       *ptr++ = '#';
+       *ptr++ = '0';
+       *ptr++ = '0';
+       *ptr++ = sid.bv_val[ 0 ];
+       *ptr++ = '#';
+       *ptr++ = '0';
+       *ptr++ = '0';
+       for ( i = 0; i < mod.bv_len; i++ ) {
+               *ptr++ = TOLOWER( mod.bv_val[ i ] );
+       }
+       *ptr = '\0';
+
+       assert( ptr - bv.bv_val == bv.bv_len );
+
+       if ( csnValidate( syntax, &bv ) != LDAP_SUCCESS ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       ber_dupbv_x( normalized, &bv, ctx );
+
+       return LDAP_SUCCESS;
+}
+
 /* Normalize a CSN in OpenLDAP 2.3 format */
 static int
 csnNormalize23(
@@ -3572,6 +3716,8 @@ csnNormalize23(
        void *ctx )
 {
        struct berval   gt, cnt, sid, mod;
+       struct berval   bv;
+       char            buf[ STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" ) + 1 ];
        char            *ptr;
        int             i;
 
@@ -3586,7 +3732,9 @@ csnNormalize23(
        }
 
        gt.bv_len = ptr - gt.bv_val;
-       assert( gt.bv_len == STRLENOF( "YYYYmmddHHMMSSZ" ) );
+       if ( gt.bv_len != STRLENOF( "YYYYmmddHHMMSSZ" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        cnt.bv_val = ptr + 1;
        cnt.bv_len = val->bv_len - ( cnt.bv_val - val->bv_val );
@@ -3597,7 +3745,9 @@ csnNormalize23(
        }
 
        cnt.bv_len = ptr - cnt.bv_val;
-       assert( cnt.bv_len == STRLENOF( "000000" ) );
+       if ( cnt.bv_len != STRLENOF( "000000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        sid.bv_val = ptr + 1;
        sid.bv_len = val->bv_len - ( sid.bv_val - val->bv_val );
@@ -3608,16 +3758,20 @@ csnNormalize23(
        }
 
        sid.bv_len = ptr - sid.bv_val;
-       assert( sid.bv_len == STRLENOF( "00" ) );
+       if ( sid.bv_len != STRLENOF( "00" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        mod.bv_val = ptr + 1;
        mod.bv_len = val->bv_len - ( mod.bv_val - val->bv_val );
-       assert( mod.bv_len == STRLENOF( "000000" ) );
+       if ( mod.bv_len != STRLENOF( "000000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
-       normalized->bv_len = STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" );
-       normalized->bv_val = ber_memalloc_x( normalized->bv_len + 1, ctx );
+       bv.bv_len = STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" );
+       bv.bv_val = buf;
 
-       ptr = normalized->bv_val;
+       ptr = bv.bv_val;
        ptr = lutil_strncopy( ptr, gt.bv_val, gt.bv_len - 1 );
        ptr = lutil_strcopy( ptr, ".000000Z#" );
        ptr = lutil_strncopy( ptr, cnt.bv_val, cnt.bv_len );
@@ -3632,7 +3786,12 @@ csnNormalize23(
        }
        *ptr = '\0';
 
-       assert( ptr - normalized->bv_val == normalized->bv_len );
+       assert( ptr - bv.bv_val == bv.bv_len );
+       if ( csnValidate( syntax, &bv ) != LDAP_SUCCESS ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       ber_dupbv_x( normalized, &bv, ctx );
 
        return LDAP_SUCCESS;
 }
@@ -3666,14 +3825,24 @@ csnNormalize(
                return csnNormalize23( usage, syntax, mr, val, normalized, ctx );
        }
 
-       assert( val->bv_len == STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" ) );
+       if ( val->bv_len == STRLENOF( "YYYYmmddHH:MM:SSZ#0xSSSS#I#ssss" ) ) {
+               /* Openldap 2.1 */
+
+               return csnNormalize21( usage, syntax, mr, val, normalized, ctx );
+       }
+
+       if ( val->bv_len != STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ#SSSSSS#SID#ssssss" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        ptr = ber_bvchr( val, '#' );
        if ( ptr == NULL || ptr - val->bv_val == val->bv_len ) {
                return LDAP_INVALID_SYNTAX;
        }
 
-       assert( ptr - val->bv_val == STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ" ) );
+       if ( ptr - val->bv_val != STRLENOF( "YYYYmmddHHMMSS.uuuuuuZ" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        cnt.bv_val = ptr + 1;
        cnt.bv_len = val->bv_len - ( cnt.bv_val - val->bv_val );
@@ -3683,7 +3852,9 @@ csnNormalize(
                return LDAP_INVALID_SYNTAX;
        }
 
-       assert( ptr - cnt.bv_val == STRLENOF( "000000" ) );
+       if ( ptr - cnt.bv_val != STRLENOF( "000000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        sid.bv_val = ptr + 1;
        sid.bv_len = val->bv_len - ( sid.bv_val - val->bv_val );
@@ -3694,12 +3865,16 @@ csnNormalize(
        }
 
        sid.bv_len = ptr - sid.bv_val;
-       assert( sid.bv_len == STRLENOF( "000" ) );
+       if ( sid.bv_len != STRLENOF( "000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        mod.bv_val = ptr + 1;
        mod.bv_len = val->bv_len - ( mod.bv_val - val->bv_val );
 
-       assert( mod.bv_len == STRLENOF( "000000" ) );
+       if ( mod.bv_len != STRLENOF( "000000" ) ) {
+               return LDAP_INVALID_SYNTAX;
+       }
 
        ber_dupbv_x( normalized, val, ctx );
 
@@ -4361,8 +4536,10 @@ firstComponentNormalize(
 
        if( val->bv_len < 3 ) return LDAP_INVALID_SYNTAX;
 
-       if( val->bv_val[0] != '(' /*')'*/ &&
-               val->bv_val[0] != '{' /*'}'*/ )
+       if( ! ( val->bv_val[0] == '(' /*')'*/
+                       && val->bv_val[val->bv_len - 1] == /*'('*/ ')' )
+               && ! ( val->bv_val[0] == '{' /*'}'*/
+                       && val->bv_val[val->bv_len - 1] == /*'('*/ '}' ) )
        {
                return LDAP_INVALID_SYNTAX;
        }
@@ -4377,7 +4554,7 @@ firstComponentNormalize(
 
        /* grab next word */
        comp.bv_val = &val->bv_val[len];
-       len = val->bv_len - len;
+       len = val->bv_len - len - STRLENOF(/*"{"*/ "}");
        for( comp.bv_len = 0;
                !ASCII_SPACE(comp.bv_val[comp.bv_len]) && comp.bv_len < len;
                comp.bv_len++ )