|
|
| version 1.188, 2009/05/13 07:36:04 | version 1.194, 2009/06/24 09:03:57 |
|---|---|
| Line 28 static const char * const IDENT_FILE_C=" | Line 28 static const char * const IDENT_FILE_C=" |
| // defines | // defines |
| #define TEXT_MODE_NAME "text" | |
| #define BINARY_MODE_NAME "binary" | |
| #define STDIN_EXEC_PARAM_NAME "stdin" | #define STDIN_EXEC_PARAM_NAME "stdin" |
| #define CHARSET_EXEC_PARAM_NAME "charset" | #define CHARSET_EXEC_PARAM_NAME "charset" |
| Line 45 extern String sql_offset_name; | Line 43 extern String sql_offset_name; |
| class MFile: public Methoded { | class MFile: public Methoded { |
| public: // VStateless_class | public: // VStateless_class |
| Value* create_new_value(Pool&, HashStringValue&) { return new VFile(); } | Value* create_new_value(Pool&, HashStringValue*) { return new VFile(); } |
| public: // Methoded | public: // Methoded |
| bool used_directly() { return true; } | bool used_directly() { return true; } |
| Line 114 static const String::Body cdate_name("cd | Line 112 static const String::Body cdate_name("cd |
| // methods | // methods |
| static bool is_valid_mode (const String& mode) { | static bool is_valid_mode (const String& mode) { |
| return (mode==TEXT_MODE_NAME || mode==BINARY_MODE_NAME); | return (mode==text_mode_name || mode==binary_mode_name); |
| } | } |
| static bool is_text_mode(const String& mode) { | static bool is_text_mode(const String& mode) { |
| if(mode==TEXT_MODE_NAME) | if(mode==text_mode_name) |
| return true; | return true; |
| if(mode==BINARY_MODE_NAME) | if(mode==binary_mode_name) |
| return false; | return false; |
| throw Exception(PARSER_RUNTIME, | throw Exception(PARSER_RUNTIME, |
| &mode, | &mode, |
| Line 250 static void _load(Request& r, MethodPara | Line 248 static void _load(Request& r, MethodPara |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, file.str, file.length, user_file_name, vcontent_type); | self.set(true/*tainted*/, file.str, file.length, user_file_name, vcontent_type); |
| self.set_mode(as_text); | |
| if(file.headers){ | if(file.headers){ |
| file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); | file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); |
| } else { | } else { |
| Line 263 static void _load(Request& r, MethodPara | Line 263 static void _load(Request& r, MethodPara |
| ff.put(mdate_name, new VDate(mtime)); | ff.put(mdate_name, new VDate(mtime)); |
| ff.put(cdate_name, new VDate(ctime)); | ff.put(cdate_name, new VDate(ctime)); |
| } | } |
| } | } |
| static void _create(Request& r, MethodParams& params) { | static void _create(Request& r, MethodParams& params) { |
| Value& vmode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE); | const String& mode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE).as_string(); |
| if(!is_text_mode(vmode_name.as_string())) | if(!is_text_mode(mode_name)) |
| throw Exception(PARSER_RUNTIME, | throw Exception(PARSER_RUNTIME, |
| 0, | 0, |
| "only text mode is currently supported"); | "only text mode is currently supported"); |
| Line 283 static void _create(Request& r, MethodPa | Line 282 static void _create(Request& r, MethodPa |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, content_cstr, strlen(content_cstr), user_file_name_cstr, vcontent_type); | self.set(true/*tainted*/, content_cstr, strlen(content_cstr), user_file_name_cstr, vcontent_type); |
| self.set_mode(true/*as_text*/); | |
| } | } |
| static void _stat(Request& r, MethodParams& params) { | static void _stat(Request& r, MethodParams& params) { |
| Line 373 static void append_to_argv(Request& r, A | Line 374 static void append_to_argv(Request& r, A |
| } | } |
| /// @todo fix `` in perl - they produced flipping consoles and no output to perl | /// @todo fix `` in perl - they produced flipping consoles and no output to perl |
| static void _exec_cgi(Request& r, MethodParams& params, | static void _exec_cgi(Request& r, MethodParams& params, bool cgi) { |
| bool cgi) { | bool as_text=true; |
| size_t param_index=0; | |
| Value& first_param=params.as_no_junction(0, FIRST_ARG_MUST_NOT_BE_CODE); | const String& mode_name=params.as_no_junction(0, FIRST_ARG_MUST_NOT_BE_CODE).as_string(); |
| if(is_valid_mode(mode_name)){ | |
| bool is_mode_specified=is_valid_mode(first_param.as_string()); | as_text=is_text_mode(mode_name); |
| const String& mode_name=(is_mode_specified) ? first_param.as_string() : *new String(TEXT_MODE_NAME); | param_index++; |
| size_t param_index=1; | |
| if(!is_mode_specified){ | |
| --param_index; | |
| } | } |
| if(param_index>=params.count()) | if(param_index>=params.count()) |
| Line 401 static void _exec_cgi(Request& r, Method | Line 398 static void _exec_cgi(Request& r, Method |
| if(value_cstr) \ | if(value_cstr) \ |
| env.put( \ | env.put( \ |
| String::Body(#name), \ | String::Body(#name), \ |
| String::Body(value_cstr)); \ | String::Body(*value_cstr?value_cstr:0)); \ |
| // passing SAPI::environment | // passing SAPI::environment |
| if(const char *const *pairs=SAPI::environment(r.sapi_info)) { | if(const char *const *pairs=SAPI::environment(r.sapi_info)) { |
| while(const char* pair=*pairs++) | while(const char* pair=*pairs++) |
| Line 513 static void _exec_cgi(Request& r, Method | Line 510 static void _exec_cgi(Request& r, Method |
| if(charset) | if(charset) |
| real_err=&Charset::transcode(*real_err, *charset, r.charsets.source()); | real_err=&Charset::transcode(*real_err, *charset, r.charsets.source()); |
| if(file_out->length && is_text_mode(mode_name)){ | if(file_out->length && as_text){ |
| fix_line_breaks(file_out->str, file_out->length); | fix_line_breaks(file_out->str, file_out->length); |
| // treat output as string | // treat output as string |
| String *real_out = new String(file_out->str); | String *real_out = new String(file_out->str); |
| Line 555 static void _exec_cgi(Request& r, Method | Line 552 static void _exec_cgi(Request& r, Method |
| "output does not contain CGI header; " | "output does not contain CGI header; " |
| "exit status=%d; stdoutsize=%u; stdout: \"%s\"; stderrsize=%u; stderr: \"%s\"", | "exit status=%d; stdoutsize=%u; stdout: \"%s\"; stderrsize=%u; stderr: \"%s\"", |
| execution.status, | execution.status, |
| (size_t)file_out->length, (file_out->length) ? (file_out->str) : "", | file_out->length, (file_out->length) ? (file_out->str) : "", |
| (size_t)real_err->length(), real_err->cstr()); | real_err->length(), real_err->cstr()); |
| break; //never reached | break; //never reached |
| } | } |
| Line 581 static void _exec_cgi(Request& r, Method | Line 578 static void _exec_cgi(Request& r, Method |
| self.set(false/*not tainted*/, file_out->str, file_out->length); | self.set(false/*not tainted*/, file_out->str, file_out->length); |
| // $fields << header | // $fields << header |
| if(header && eol_marker) { | if(header) { |
| ArrayString rows; | ArrayString rows; |
| size_t pos_after=0; | size_t pos_after=0; |
| header->split(rows, pos_after, eol_marker); | header->split(rows, pos_after, eol_marker); |
| Line 597 static void _exec_cgi(Request& r, Method | Line 594 static void _exec_cgi(Request& r, Method |
| self.set(false/*not tainted*/, file_out->str, file_out->length); | self.set(false/*not tainted*/, file_out->str, file_out->length); |
| } | } |
| self.set_mode(as_text); | |
| // $status | // $status |
| self.fields().put(file_status_name, new VInt(execution.status)); | self.fields().put(file_status_name, new VInt(execution.status)); |
| Line 616 static void _cgi(Request& r, MethodParam | Line 615 static void _cgi(Request& r, MethodParam |
| static void _list(Request& r, MethodParams& params) { | static void _list(Request& r, MethodParams& params) { |
| Value& relative_path=params.as_no_junction(0, "path must not be code"); | Value& relative_path=params.as_no_junction(0, "path must not be code"); |
| VRegex* vregex; | VRegex* vregex=0; |
| VRegexCleaner vrcleaner; | VRegexCleaner vrcleaner; |
| if(params.count()>1){ | if(params.count()>1){ |
| Value& regexp=params.as_no_junction(1, "regexp must not be code"); | Value& regexp=params.as_no_junction(1, "regexp must not be code"); |
| if(Value* value=regexp.as(VREGEX_TYPE, false)){ | if(regexp.is_defined()){ |
| vregex=static_cast<VRegex*>(value); | if(Value* value=regexp.as(VREGEX_TYPE, false)){ |
| } else { | vregex=static_cast<VRegex*>(value); |
| vregex=new VRegex(r.charsets.source(), ®exp.as_string(), 0/*options*/); | } else { |
| vregex->study(); | vregex=new VRegex(r.charsets.source(), ®exp.as_string(), 0/*options*/); |
| vrcleaner.vregex=vregex; | vregex->study(); |
| vrcleaner.vregex=vregex; | |
| } | |
| } | } |
| } else { | |
| vregex=0; | |
| } | } |
| const char* absolute_path_cstr=r.absolute(relative_path.as_string()).cstr(String::L_FILE_SPEC); | const char* absolute_path_cstr=r.absolute(relative_path.as_string()).cstr(String::L_FILE_SPEC); |
| Line 646 static void _list(Request& r, MethodPara | Line 645 static void _list(Request& r, MethodPara |
| if(!vregex || vregex->exec(ffblk.ff_name, file_name_size, ovector, ovector_size)>=0) { | if(!vregex || vregex->exec(ffblk.ff_name, file_name_size, ovector, ovector_size)>=0) { |
| Table::element_type row(new ArrayString); | Table::element_type row(new ArrayString); |
| *row+=new String(pa_strdup(file_name_cstr, file_name_size), true/*tainted*/); | *row+=new String(pa_strdup(file_name_cstr, file_name_size), String::L_TAINTED); |
| table+=row; | table+=row; |
| } | } |
| ); | ); |
| Line 740 static void _dirname(Request& r, MethodP | Line 739 static void _dirname(Request& r, MethodP |
| if(afterslash>0) | if(afterslash>0) |
| r.write_assign_lang(file_spec.mid(0, afterslash==1?1:afterslash-1)); | r.write_assign_lang(file_spec.mid(0, afterslash==1?1:afterslash-1)); |
| else | else |
| r.write_assign_lang(String(".", 1)); | r.write_assign_lang(String(".")); |
| } | } |
| static void _basename(Request& r, MethodParams& params) { | static void _basename(Request& r, MethodParams& params) { |
| Line 827 public: | Line 826 public: |
| break; | break; |
| case 1: | case 1: |
| if(!user_file_name) // user not specified? | if(!user_file_name) // user not specified? |
| user_file_name=new String(str, true); | user_file_name=new String(str, String::L_TAINTED); |
| break; | break; |
| case 2: | case 2: |
| if(!user_content_type) // user not specified? | if(!user_content_type) // user not specified? |
| user_content_type=new String(str, true); | user_content_type=new String(str, String::L_TAINTED); |
| break; | break; |
| default: | default: |
| error=SQL_Error(PARSER_RUNTIME, "result must not contain more then one row, three rows"); | error=SQL_Error(PARSER_RUNTIME, "result must not contain more then one row, three rows"); |
| Line 904 static void _sql(Request& r, MethodParam | Line 903 static void _sql(Request& r, MethodParam |
| : 0; | : 0; |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, handlers.value.str, handlers.value.length, user_file_name_cstr, vcontent_type); | self.set(true/*tainted*/, handlers.value.str, handlers.value.length, user_file_name_cstr, vcontent_type); |
| self.set_mode(false/*binary*/); | |
| } | } |
| static void _base64(Request& r, MethodParams& params) { | static void _base64(Request& r, MethodParams& params) { |
| Line 921 static void _base64(Request& r, MethodPa | Line 921 static void _base64(Request& r, MethodPa |
| } else { | } else { |
| // encode: ^f.base64[] | // encode: ^f.base64[] |
| const char* encoded=pa_base64_encode(self.value_ptr(), self.value_size()); | const char* encoded=pa_base64_encode(self.value_ptr(), self.value_size()); |
| r.write_assign_lang(*new String(encoded, true/*tainted. once ?param=base64(something) was needed**/)); | r.write_assign_lang(*new String(encoded, String::L_TAINTED/*once ?param=base64(something) was needed**/)); |
| } | } |
| } else { | } else { |
| // encode: ^file:base64[filespec] | // encode: ^file:base64[filespec] |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| const char* encoded=pa_base64_encode(r.absolute(file_spec)); | const char* encoded=pa_base64_encode(r.absolute(file_spec)); |
| r.write_assign_lang(*new String(encoded, true/*tainted. once ?param=base64(something) was needed*/)); | r.write_assign_lang(*new String(encoded, String::L_TAINTED/*once ?param=base64(something) was needed*/)); |
| } | } |
| } | } |