/* Licensed to the Apache Software Foundation (ASF) under one or more

 * contributor license agreements.  See the NOTICE file distributed with

 * this work for additional information regarding copyright ownership.

 * The ASF licenses this file to You under the Apache License, Version 2.0

 * (the "License"); you may not use this file except in compliance with

 * the License.  You may obtain a copy of the License at

 *

 *     http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

#include "apr_xml.h"

#include "httpd.h"

#include "http_protocol.h"

#include "http_log.h"

#include "http_core.h"

#include "util_charset.h"

#include "util_xml.h"

/* used for reading input blocks */

#define READ_BLOCKSIZE 2048

/* we know core's module_index is 0 */

#undef APLOG_MODULE_INDEX

#define APLOG_MODULE_INDEX AP_CORE_MODULE_INDEX

AP_DECLARE(int) ap_xml_parse_input(request_rec * r, apr_xml_doc **pdoc)

{

    apr_xml_parser *parser;

    apr_bucket_brigade *brigade;

    int seen_eos;

    apr_status_t status;

    char errbuf[200];

    apr_size_t total_read = 0;

    apr_size_t limit_xml_body = ap_get_limit_xml_body(r);

    int result = HTTP_BAD_REQUEST;

    parser = apr_xml_parser_create(r->pool);

    brigade = apr_brigade_create(r->pool, r->connection->bucket_alloc);

    seen_eos = 0;

    total_read = 0;

    do {

        apr_bucket *bucket;

        /* read the body, stuffing it into the parser */

        status = ap_get_brigade(r->input_filters, brigade,

                                AP_MODE_READBYTES, APR_BLOCK_READ,

                                READ_BLOCKSIZE);

        if (status != APR_SUCCESS) {

            result = ap_map_http_request_error(status, HTTP_BAD_REQUEST);

            goto read_error;

        }

        for (bucket = APR_BRIGADE_FIRST(brigade);

             bucket != APR_BRIGADE_SENTINEL(brigade);

             bucket = APR_BUCKET_NEXT(bucket))

        {

            const char *data;

            apr_size_t len;

            if (APR_BUCKET_IS_EOS(bucket)) {

                seen_eos = 1;

                break;

            }

            if (APR_BUCKET_IS_METADATA(bucket)) {

                continue;

            }

            status = apr_bucket_read(bucket, &data, &len, APR_BLOCK_READ);

            if (status != APR_SUCCESS) {

                goto read_error;

            }

            total_read += len;

            if (limit_xml_body && total_read > limit_xml_body) {

                ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00539)

                              "XML request body is larger than the configured "

                              "limit of %lu", (unsigned long)limit_xml_body);

                result = HTTP_REQUEST_ENTITY_TOO_LARGE;

                goto read_error;

            }

            status = apr_xml_parser_feed(parser, data, len);

            if (status) {

                goto parser_error;

            }

        }

        apr_brigade_cleanup(brigade);

    } while (!seen_eos);

    apr_brigade_destroy(brigade);

    /* tell the parser that we're done */

    status = apr_xml_parser_done(parser, pdoc);

    if (status) {

        /* Some parsers are stupid and return an error on blank documents. */

        if (!total_read) {

            *pdoc = NULL;

            return OK;

        }

        ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00540)

                      "XML parser error (at end). status=%d", status);

        return HTTP_BAD_REQUEST;

    }

#if APR_CHARSET_EBCDIC

    apr_xml_parser_convert_doc(r->pool, *pdoc, ap_hdrs_from_ascii);

#endif

    return OK;

  parser_error:

    (void) apr_xml_parser_geterror(parser, errbuf, sizeof(errbuf));

    ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00541)

                  "XML Parser Error: %s", errbuf);

    /* FALLTHRU */

  read_error:

    /* make sure the parser is terminated */

    (void) apr_xml_parser_done(parser, NULL);

    apr_brigade_destroy(brigade);

    /* Apache will supply a default error, plus the error log above. */

    return result;

}