|
|
| version 1.192, 2009/05/25 08:11:40 | version 1.195, 2009/07/06 08:49:49 |
|---|---|
| Line 28 static const char * const IDENT_FILE_C=" | Line 28 static const char * const IDENT_FILE_C=" |
| // defines | // defines |
| #define TEXT_MODE_NAME "text" | |
| #define BINARY_MODE_NAME "binary" | |
| #define STDIN_EXEC_PARAM_NAME "stdin" | #define STDIN_EXEC_PARAM_NAME "stdin" |
| #define CHARSET_EXEC_PARAM_NAME "charset" | #define CHARSET_EXEC_PARAM_NAME "charset" |
| Line 45 extern String sql_offset_name; | Line 43 extern String sql_offset_name; |
| class MFile: public Methoded { | class MFile: public Methoded { |
| public: // VStateless_class | public: // VStateless_class |
| Value* create_new_value(Pool&, HashStringValue&) { return new VFile(); } | Value* create_new_value(Pool&, HashStringValue*) { return new VFile(); } |
| public: // Methoded | public: // Methoded |
| bool used_directly() { return true; } | bool used_directly() { return true; } |
| Line 114 static const String::Body cdate_name("cd | Line 112 static const String::Body cdate_name("cd |
| // methods | // methods |
| static bool is_valid_mode (const String& mode) { | static bool is_valid_mode (const String& mode) { |
| return (mode==TEXT_MODE_NAME || mode==BINARY_MODE_NAME); | return (mode==text_mode_name || mode==binary_mode_name); |
| } | } |
| static bool is_text_mode(const String& mode) { | static bool is_text_mode(const String& mode) { |
| if(mode==TEXT_MODE_NAME) | if(mode==text_mode_name) |
| return true; | return true; |
| if(mode==BINARY_MODE_NAME) | if(mode==binary_mode_name) |
| return false; | return false; |
| throw Exception(PARSER_RUNTIME, | throw Exception(PARSER_RUNTIME, |
| &mode, | &mode, |
| Line 216 static void _load(Request& r, MethodPara | Line 214 static void _load(Request& r, MethodPara |
| if(param_index>1){ | if(param_index>1){ |
| const String& luser_file_name=params.as_string(param_index, FILE_NAME_MUST_BE_STRING); | const String& luser_file_name=params.as_string(param_index, FILE_NAME_MUST_BE_STRING); |
| if(!luser_file_name.is_empty()) | if(!luser_file_name.is_empty()) |
| user_file_name=luser_file_name.cstr(String::L_FILE_SPEC); | user_file_name=luser_file_name.cstr_taint(String::L_FILE_SPEC); |
| } | } |
| } | } |
| if(!user_file_name) | if(!user_file_name) |
| user_file_name=lfile_name.cstr(String::L_FILE_SPEC); | user_file_name=lfile_name.cstr_taint(String::L_FILE_SPEC); |
| size_t offset=0; | size_t offset=0; |
| size_t limit=0; | size_t limit=0; |
| Line 250 static void _load(Request& r, MethodPara | Line 248 static void _load(Request& r, MethodPara |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, file.str, file.length, user_file_name, vcontent_type); | self.set(true/*tainted*/, file.str, file.length, user_file_name, vcontent_type); |
| self.set_mode(as_text); | |
| if(file.headers){ | if(file.headers){ |
| file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); | file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); |
| } else { | } else { |
| Line 263 static void _load(Request& r, MethodPara | Line 263 static void _load(Request& r, MethodPara |
| ff.put(mdate_name, new VDate(mtime)); | ff.put(mdate_name, new VDate(mtime)); |
| ff.put(cdate_name, new VDate(ctime)); | ff.put(cdate_name, new VDate(ctime)); |
| } | } |
| } | } |
| static void _create(Request& r, MethodParams& params) { | static void _create(Request& r, MethodParams& params) { |
| Value& vmode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE); | const String& mode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE).as_string(); |
| if(!is_text_mode(vmode_name.as_string())) | if(!is_text_mode(mode_name)) |
| throw Exception(PARSER_RUNTIME, | throw Exception(PARSER_RUNTIME, |
| 0, | 0, |
| "only text mode is currently supported"); | "only text mode is currently supported"); |
| const char* user_file_name_cstr=r.absolute( | const char* user_file_name_cstr=r.absolute( |
| params.as_no_junction(1, FILE_NAME_MUST_NOT_BE_CODE).as_string()).cstr(String::L_FILE_SPEC); | params.as_no_junction(1, FILE_NAME_MUST_NOT_BE_CODE).as_string()).cstr_taint(String::L_FILE_SPEC); |
| const String& content=params.as_string(2, "content must be string"); | const String& content=params.as_string(2, "content must be string"); |
| const char* content_cstr=content.cstr(String::L_UNSPECIFIED); // explode content, honor tainting changes | const char* content_cstr=content.cstr(String::L_UNSPECIFIED); // explode content, honor tainting changes |
| Line 283 static void _create(Request& r, MethodPa | Line 282 static void _create(Request& r, MethodPa |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, content_cstr, strlen(content_cstr), user_file_name_cstr, vcontent_type); | self.set(true/*tainted*/, content_cstr, strlen(content_cstr), user_file_name_cstr, vcontent_type); |
| self.set_mode(true/*as_text*/); | |
| } | } |
| static void _stat(Request& r, MethodParams& params) { | static void _stat(Request& r, MethodParams& params) { |
| Line 296 static void _stat(Request& r, MethodPara | Line 297 static void _stat(Request& r, MethodPara |
| size, | size, |
| atime, mtime, ctime); | atime, mtime, ctime); |
| const char* user_file_name=lfile_name.cstr(String::L_FILE_SPEC); | const char* user_file_name=lfile_name.cstr_taint(String::L_FILE_SPEC); |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| Line 373 static void append_to_argv(Request& r, A | Line 374 static void append_to_argv(Request& r, A |
| } | } |
| /// @todo fix `` in perl - they produced flipping consoles and no output to perl | /// @todo fix `` in perl - they produced flipping consoles and no output to perl |
| static void _exec_cgi(Request& r, MethodParams& params, | static void _exec_cgi(Request& r, MethodParams& params, bool cgi) { |
| bool cgi) { | bool as_text=true; |
| size_t param_index=0; | |
| Value& first_param=params.as_no_junction(0, FIRST_ARG_MUST_NOT_BE_CODE); | const String& mode_name=params.as_no_junction(0, FIRST_ARG_MUST_NOT_BE_CODE).as_string(); |
| if(is_valid_mode(mode_name)){ | |
| bool is_mode_specified=is_valid_mode(first_param.as_string()); | as_text=is_text_mode(mode_name); |
| const String& mode_name=(is_mode_specified) ? first_param.as_string() : *new String(TEXT_MODE_NAME); | param_index++; |
| size_t param_index=1; | |
| if(!is_mode_specified){ | |
| --param_index; | |
| } | } |
| if(param_index>=params.count()) | if(param_index>=params.count()) |
| Line 513 static void _exec_cgi(Request& r, Method | Line 510 static void _exec_cgi(Request& r, Method |
| if(charset) | if(charset) |
| real_err=&Charset::transcode(*real_err, *charset, r.charsets.source()); | real_err=&Charset::transcode(*real_err, *charset, r.charsets.source()); |
| if(file_out->length && is_text_mode(mode_name)){ | if(file_out->length && as_text){ |
| fix_line_breaks(file_out->str, file_out->length); | fix_line_breaks(file_out->str, file_out->length); |
| // treat output as string | // treat output as string |
| String *real_out = new String(file_out->str); | String *real_out = new String(file_out->str); |
| Line 555 static void _exec_cgi(Request& r, Method | Line 552 static void _exec_cgi(Request& r, Method |
| "output does not contain CGI header; " | "output does not contain CGI header; " |
| "exit status=%d; stdoutsize=%u; stdout: \"%s\"; stderrsize=%u; stderr: \"%s\"", | "exit status=%d; stdoutsize=%u; stdout: \"%s\"; stderrsize=%u; stderr: \"%s\"", |
| execution.status, | execution.status, |
| (size_t)file_out->length, (file_out->length) ? (file_out->str) : "", | file_out->length, (file_out->length) ? (file_out->str) : "", |
| (size_t)real_err->length(), real_err->cstr()); | real_err->length(), real_err->cstr()); |
| break; //never reached | break; //never reached |
| } | } |
| Line 581 static void _exec_cgi(Request& r, Method | Line 578 static void _exec_cgi(Request& r, Method |
| self.set(false/*not tainted*/, file_out->str, file_out->length); | self.set(false/*not tainted*/, file_out->str, file_out->length); |
| // $fields << header | // $fields << header |
| if(header && eol_marker) { | if(header) { |
| ArrayString rows; | ArrayString rows; |
| size_t pos_after=0; | size_t pos_after=0; |
| header->split(rows, pos_after, eol_marker); | header->split(rows, pos_after, eol_marker); |
| Line 597 static void _exec_cgi(Request& r, Method | Line 594 static void _exec_cgi(Request& r, Method |
| self.set(false/*not tainted*/, file_out->str, file_out->length); | self.set(false/*not tainted*/, file_out->str, file_out->length); |
| } | } |
| self.set_mode(as_text); | |
| // $status | // $status |
| self.fields().put(file_status_name, new VInt(execution.status)); | self.fields().put(file_status_name, new VInt(execution.status)); |
| Line 631 static void _list(Request& r, MethodPara | Line 630 static void _list(Request& r, MethodPara |
| } | } |
| } | } |
| const char* absolute_path_cstr=r.absolute(relative_path.as_string()).cstr(String::L_FILE_SPEC); | const char* absolute_path_cstr=r.absolute(relative_path.as_string()).cstr_taint(String::L_FILE_SPEC); |
| Table::columns_type columns(new ArrayString); | Table::columns_type columns(new ArrayString); |
| *columns+=new String("name"); | *columns+=new String("name"); |
| Line 850 static void _sql(Request& r, MethodParam | Line 849 static void _sql(Request& r, MethodParam |
| Temp_lang temp_lang(r, String::L_SQL); | Temp_lang temp_lang(r, String::L_SQL); |
| const String& statement_string=r.process_to_string(statement); | const String& statement_string=r.process_to_string(statement); |
| const char* statement_cstr= | const char* statement_cstr=statement_string.cstr(String::L_UNSPECIFIED, r.connection()); |
| statement_string.cstr(String::L_UNSPECIFIED, r.connection()); | |
| File_sql_event_handlers handlers(statement_string, statement_cstr); | File_sql_event_handlers handlers(statement_string, statement_cstr); |
| ulong limit=SQL_NO_LIMIT; | ulong limit=SQL_NO_LIMIT; |
| Line 904 static void _sql(Request& r, MethodParam | Line 903 static void _sql(Request& r, MethodParam |
| : 0; | : 0; |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, handlers.value.str, handlers.value.length, user_file_name_cstr, vcontent_type); | self.set(true/*tainted*/, handlers.value.str, handlers.value.length, user_file_name_cstr, vcontent_type); |
| self.set_mode(false/*binary*/); | |
| } | } |
| static void _base64(Request& r, MethodParams& params) { | static void _base64(Request& r, MethodParams& params) { |