--- parser3/src/main/pa_string.C 2001/03/07 09:29:54 1.32 +++ parser3/src/main/pa_string.C 2001/03/10 12:12:51 1.35 @@ -1,5 +1,5 @@ /* - $Id: pa_string.C,v 1.32 2001/03/07 09:29:54 paf Exp $ + $Id: pa_string.C,v 1.35 2001/03/10 12:12:51 paf Exp $ */ #include @@ -90,13 +90,14 @@ String::String(const String& src) : fsize=src.fsize; } -String& String::operator += (const String& src) { +String& String::append(const String& src, Untaint_lang lang) { int src_used_rows=src.used_rows(); int dst_free_rows=link_row-append_here; if(src_used_rows<=dst_free_rows) { // all new rows fit into last chunk memcpy(append_here, src.head.rows, sizeof(Chunk::Row)*src_used_rows); + set_lang(append_here, lang, src_used_rows); append_here+=src_used_rows; } else { // not all new rows fit into last chunk: shrinking it to used part, @@ -121,6 +122,7 @@ String& String::operator += (const Strin // not last source chunk // taking it all memcpy(new_rows, old_chunk->rows, sizeof(Chunk::Row)*old_count); + set_lang(new_rows, lang, old_count); new_rows+=old_count; rows_left_to_copy-=old_count; @@ -129,6 +131,7 @@ String& String::operator += (const Strin // the last source chunk // taking only those rows of chunk that _left_to_copy memcpy(new_rows, old_chunk->rows, sizeof(Chunk::Row)*rows_left_to_copy); + set_lang(new_rows, lang, rows_left_to_copy); break; } } @@ -139,6 +142,16 @@ String& String::operator += (const Strin return *this; } +void String::set_lang(Chunk::Row *row, Untaint_lang lang, size_t size) { + if(lang==PASS_APPENDED) + return; + + while(size--) { + Untaint_lang& item_lang=(row++)->item.lang; + if(item_lang==YES) // tainted? need untaint language assignment + item_lang=lang; // assign untaint language + } +} String& String::real_append(STRING_APPEND_PARAMS) { if(!src) @@ -153,6 +166,7 @@ String& String::real_append(STRING_APPEN append_here->item.ptr=src; fsize+=append_here->item.size=size; + append_here->item.lang=tainted?/*Untaint_lang::*/YES:Untaint_lang::NO; #ifndef NO_STRING_ORIGIN append_here->item.origin.file=file; append_here->item.origin.line=line; @@ -173,7 +187,22 @@ char *String::cstr() const { if(row==append_here) goto break2; - memcpy(copy_here, row->item.ptr, row->item.size); + switch(row->item.lang) { + case NO: + case YES: // for VString.get_double of tainted values + case AS_IS: + memcpy(copy_here, row->item.ptr, row->item.size); + break; + case HTML_TYPO: + memset(copy_here, '?', row->item.size); + break; + default: + THROW(0,0, + this, + "unknown untaint language #%d of %d piece", + static_cast(row->item.lang), + i); + } copy_here+=row->item.size; row++; } @@ -218,6 +247,11 @@ int String::cmp(const String& src) const bool b_break=false; int result; while(true) { + a_break=a_row==a_end; + b_break=b_row==b_end; + if(a_break || b_break) + break; + int size_diff= (a_row->item.size-a_offset)- (b_row->item.size-b_offset); @@ -242,11 +276,6 @@ int String::cmp(const String& src) const a_row++; a_countdown--; a_offset=0; } - a_break=a_row==a_end; - b_break=b_row==b_end; - if(a_break || b_break) - break; - if(!a_countdown) { a_chunk=a_row->link; a_row=a_chunk->rows;