|
|
| version 1.33, 2001/03/12 22:39:14 | version 1.44, 2001/03/18 17:18:34 |
|---|---|
| Line 14 | Line 14 |
| #include "pa_vint.h" | #include "pa_vint.h" |
| #include "pa_common.h" | #include "pa_common.h" |
| static void _if(Request& r, const String&, Array *params) { | static void _if(Request& r, const String& method_name, Array *params) { |
| bool condition= | Value& condition_code=*static_cast<Value *>(params->get(0)); |
| r.process( | // forcing ^if(this param type) |
| *static_cast<Value *>(params->get(0)), | r.fail_if_junction_(false, condition_code, |
| 0/*no name*/, | method_name, "condition must be junction"); |
| false/*don't intercept string*/).get_bool(); | |
| bool condition=r.process(condition_code, | |
| 0/*no name*/, | |
| false/*don't intercept string*/).get_bool(); | |
| if(condition) { | if(condition) { |
| Value& value=r.process(*static_cast<Value *>(params->get(1))); | Value& then_code=*static_cast<Value *>(params->get(1)); |
| r.write_pass_lang(value); | // forcing ^if(this param type) |
| r.fail_if_junction_(false, then_code, | |
| method_name, "then-parameter must be junction"); | |
| r.write_pass_lang(r.process(then_code)); | |
| } else if(params->size()==3) { | } else if(params->size()==3) { |
| Value& value=r.process(*static_cast<Value *>(params->get(2))); | Value& else_code=*static_cast<Value *>(params->get(2)); |
| r.write_pass_lang(value); | // forcing ^if(this param type) |
| r.fail_if_junction_(false, else_code, | |
| method_name, "else-parameter must be junction"); | |
| r.write_pass_lang(r.process(else_code)); | |
| } | } |
| } | } |
| Line 34 static void _untaint(Request& r, const S | Line 43 static void _untaint(Request& r, const S |
| String::Untaint_lang lang=static_cast<String::Untaint_lang>( | String::Untaint_lang lang=static_cast<String::Untaint_lang>( |
| untaint_lang_name2enum->get_int(lang_name)); | untaint_lang_name2enum->get_int(lang_name)); |
| if(!lang) | if(!lang) |
| R_THROW(0, 0, | RTHROW(0, 0, |
| &lang_name, | &lang_name, |
| "invalid untaint language"); | "invalid untaint language"); |
| { | { |
| Temp_lang temp_lang(r, lang); | |
| Value *vbody=static_cast<Value *>(params->get(1)); | Value *vbody=static_cast<Value *>(params->get(1)); |
| // forcing ^untaint[]{this param type} | // forcing ^untaint[]{this param type} |
| r.fail_if_junction_(false, *vbody, | r.fail_if_junction_(false, *vbody, |
| method_name, "body must be junction"); | method_name, "body must be junction"); |
| r.write_pass_lang(r.process(*vbody)); | Temp_lang temp_lang(r, lang); // set temporarily specified ^untaint[language; |
| r.write_pass_lang(r.process(*vbody)); // process marking tainted with that lang | |
| } | |
| } | |
| static void _taint(Request& r, const String& method_name, Array *params) { | |
| const String& lang_name=r.process(*static_cast<Value *>(params->get(0))).as_string(); | |
| String::Untaint_lang lang=static_cast<String::Untaint_lang>( | |
| untaint_lang_name2enum->get_int(lang_name)); | |
| if(!lang) | |
| RTHROW(0, 0, | |
| &lang_name, | |
| "invalid taint language"); | |
| { | |
| Value *vbody=static_cast<Value *>(params->get(1)); | |
| // forcing ^untaint[]{this param type} | |
| r.fail_if_junction_(true, *vbody, | |
| method_name, "body must not be junction"); | |
| // set temporarily as-is language | |
| Temp_lang temp_lang(r, String::Untaint_lang::AS_IS); | |
| String result(r.pool()); | |
| result.append( | |
| r.process(*vbody).as_string(), // process marking tainted with that lang | |
| lang); // switch result language to specified | |
| r.write_pass_lang(result); | |
| } | } |
| } | } |
| static void _process(Request& r, const String& method_name, Array *params) { | static void _process(Request& r, const String& method_name, Array *params) { |
| // calculate pseudo file name of processed chars | // calculate pseudo file name of processed chars |
| Line 63 static void _process(Request& r, const S | Line 96 static void _process(Request& r, const S |
| strncpy(place, MAX_STRING, method_name.cstr()); | strncpy(place, MAX_STRING, method_name.cstr()); |
| #endif | #endif |
| VClass& self_class=*r.self->get_class(); | VStateless_class& self_class=*r.self->get_class(); |
| { | { |
| // temporary zero @main so to maybe-replace it in processed code | // temporary zero @main so to maybe-replace it in processed code |
| Temp_method temp_method(self_class, *main_method_name, 0); | Temp_method temp_method(self_class, *main_method_name, 0); |
| Line 105 static void _while(Request& r, const Str | Line 138 static void _while(Request& r, const Str |
| int endless_loop_count=0; | int endless_loop_count=0; |
| while(true) { | while(true) { |
| if(++endless_loop_count>=1973) // endless loop? | if(++endless_loop_count>=1973) // endless loop? |
| R_THROW(0, 0, | RTHROW(0, 0, |
| &method_name, | &method_name, |
| "endless loop detected"); | "endless loop detected"); |
| Line 146 static void _for(Request& r, const Strin | Line 179 static void _for(Request& r, const Strin |
| Value *delim_code=params->size()==3+1+1?static_cast<Value *>(params->get(3+1)):0; | Value *delim_code=params->size()==3+1+1?static_cast<Value *>(params->get(3+1)):0; |
| bool need_delim=false; | bool need_delim=false; |
| VInt *vint=new(pool) VInt(pool, 0); | |
| int endless_loop_count=0; | int endless_loop_count=0; |
| for(VInt *vint=new(pool) VInt(pool, from); vint->get_int()<=to; vint->inc()) { | for(int i=from; i<=to; i++) { |
| if(++endless_loop_count>=2001) // endless loop? | if(++endless_loop_count>=2001) // endless loop? |
| R_THROW(0, 0, | RTHROW(0, 0, |
| &method_name, | &method_name, |
| "endless loop detected"); | "endless loop detected"); |
| vint->set_int(i); | |
| r.wcontext->put_element(var_name, vint); | r.wcontext->put_element(var_name, vint); |
| Value& processed_body=r.process(body_code); | Value& processed_body=r.process(body_code); |
| Line 180 static void _eval(Request& r, const Stri | Line 215 static void _eval(Request& r, const Stri |
| method_name, "fmt must not be junction"); | method_name, "fmt must not be junction"); |
| Pool& pool=r.pool(); | Pool& pool=r.pool(); |
| String *string=new(pool) String(pool); | String& string=*new(pool) String(pool); |
| string->APPEND_CONST(format(pool, result->get_double(), fmt.as_string().cstr())); | string.APPEND_CONST(format(pool, result->get_double(), fmt.as_string().cstr())); |
| result=new(pool) VString(*string); | result=new(pool) VString(string); |
| } | } |
| r.wcontext->write(*result, String::Untaint_lang::NO /*always object, not string*/); | r.write_no_lang(*result); |
| } | } |
| Line 192 typedef double (*math_one_double_op_func | Line 227 typedef double (*math_one_double_op_func |
| static double round(double op) { return floor(op+0.5); } | static double round(double op) { return floor(op+0.5); } |
| static double sign(double op) { return op > 0 ? 1 : ( op < 0 ? -1 : 0 ); } | static double sign(double op) { return op > 0 ? 1 : ( op < 0 ? -1 : 0 ); } |
| static void _math_one_double_op( | static void double_one_op( |
| Request& r, | Request& r, |
| const String& method_name, Array *params, | const String& method_name, Array *params, |
| math_one_double_op_func_ptr func) { | math_one_double_op_func_ptr func) { |
| Line 204 static void _math_one_double_op( | Line 239 static void _math_one_double_op( |
| method_name, "parameter must be expression"); | method_name, "parameter must be expression"); |
| Value& result=*new(pool) VDouble(pool, (*func)(r.process(param).get_double())); | Value& result=*new(pool) VDouble(pool, (*func)(r.process(param).get_double())); |
| r.wcontext->write(result, String::Untaint_lang::NO /*always object, not string*/); | r.write_no_lang(result); |
| } | } |
| static void _round(Request& r, const String& method_name, Array *params) { | static void _round(Request& r, const String& method_name, Array *params) { |
| _math_one_double_op(r, method_name, params, &round); | double_one_op(r, method_name, params, &round); |
| } | } |
| static void _floor(Request& r, const String& method_name, Array *params) { | static void _floor(Request& r, const String& method_name, Array *params) { |
| _math_one_double_op(r, method_name, params, &floor); | double_one_op(r, method_name, params, &floor); |
| } | } |
| static void _ceiling(Request& r, const String& method_name, Array *params) { | static void _ceiling(Request& r, const String& method_name, Array *params) { |
| _math_one_double_op(r, method_name, params, &ceil); | double_one_op(r, method_name, params, &ceil); |
| } | } |
| static void _abs(Request& r, const String& method_name, Array *params) { | static void _abs(Request& r, const String& method_name, Array *params) { |
| _math_one_double_op(r, method_name, params, &fabs); | double_one_op(r, method_name, params, &fabs); |
| } | } |
| static void _sign(Request& r, const String& method_name, Array *params) { | static void _sign(Request& r, const String& method_name, Array *params) { |
| _math_one_double_op(r, method_name, params, &sign); | double_one_op(r, method_name, params, &sign); |
| } | } |
| void initialize_root_class(Pool& pool, VClass& vclass) { | // initialize |
| void initialize_root_class(Pool& pool, VStateless_class& vclass) { | |
| // ^if(condition){code-when-true} | // ^if(condition){code-when-true} |
| // ^if(condition){code-when-true}{code-when-false} | // ^if(condition){code-when-true}{code-when-false} |
| vclass.add_native_method("if", _if, 2, 3); | vclass.add_native_method("if", _if, 2, 3); |
| // ^untaint[as-is|sql|js|html|html-typo]{code} | // ^untaint[as-is|uri|sql|js|html|html-typo]{code} |
| vclass.add_native_method("untaint", _untaint, 2, 2); | vclass.add_native_method("untaint", _untaint, 2, 2); |
| // ^taint[as-is|uri|sql|js|html|html-typo]{code} | |
| vclass.add_native_method("taint", _taint, 2, 2); | |
| // ^process[code] | // ^process[code] |
| vclass.add_native_method("process", _process, 1, 1); | vclass.add_native_method("process", _process, 1, 1); |