Blame nginx/modsecurity/apr_bucket_nginx.c

Packit Service 384592

Packit Service 384592
#include <apr_bucket_nginx.h>
Packit Service 384592

Packit Service 384592
static apr_status_t nginx_bucket_read(apr_bucket *b, const char **str,
Packit Service 384592
                                      apr_size_t *len, apr_read_type_e block);
Packit Service 384592
static void nginx_bucket_destroy(void *data);
Packit Service 384592

Packit Service 384592
static const apr_bucket_type_t apr_bucket_type_nginx = {
Packit Service 384592
    "NGINX", 5, APR_BUCKET_DATA,
Packit Service 384592
    nginx_bucket_destroy,
Packit Service 384592
    nginx_bucket_read,
Packit Service 384592
    apr_bucket_setaside_noop,
Packit Service 384592
    apr_bucket_shared_split,
Packit Service 384592
    apr_bucket_shared_copy
Packit Service 384592
};
Packit Service 384592

Packit Service 384592

Packit Service 384592
typedef struct apr_bucket_nginx {
Packit Service 384592
    apr_bucket_refcount  refcount;
Packit Service 384592
    ngx_buf_t           *buf;
Packit Service 384592
} apr_bucket_nginx;
Packit Service 384592

Packit Service 384592
/* ngx_buf_t to apr_bucket */
Packit Service 384592
apr_bucket * apr_bucket_nginx_create(ngx_buf_t *buf,
Packit Service 384592
                                     apr_pool_t *p,
Packit Service 384592
                                     apr_bucket_alloc_t *list)
Packit Service 384592
{
Packit Service 384592

Packit Service 384592
    apr_bucket *b = apr_bucket_alloc(sizeof(*b), list);
Packit Service 384592

Packit Service 384592
    APR_BUCKET_INIT(b); /* link */
Packit Service 384592
    b->free = apr_bucket_free;
Packit Service 384592
    b->list = list;
Packit Service 384592
    return apr_bucket_nginx_make(b, buf, p);
Packit Service 384592
}
Packit Service 384592

Packit Service 384592
apr_bucket * apr_bucket_nginx_make(apr_bucket *b, ngx_buf_t *buf,
Packit Service 384592
                                   apr_pool_t *pool)
Packit Service 384592
{
Packit Service 384592
    apr_bucket_nginx *n;
Packit Service 384592

Packit Service 384592
    n = apr_bucket_alloc(sizeof(*n), b->list);
Packit Service 384592

Packit Service 384592
    n->buf = buf;
Packit Service 384592

Packit Service 384592
    b = apr_bucket_shared_make(b, n, 0, ngx_buf_size(buf));
Packit Service 384592
    b->type = &apr_bucket_type_nginx;
Packit Service 384592
    return b;
Packit Service 384592
}
Packit Service 384592

Packit Service 384592
static apr_status_t nginx_bucket_read(apr_bucket *b, const char **str,
Packit Service 384592
                                      apr_size_t *len, apr_read_type_e block)
Packit Service 384592
{
Packit Service 384592
    apr_bucket_nginx *n = b->data;
Packit Service 384592
    ngx_buf_t        *buf = n->buf;
Packit Service 384592
    u_char           *data;
Packit Service 384592
    ssize_t           size;
Packit Service 384592

Packit Service 384592
    if (buf->pos == NULL && ngx_buf_size(buf) != 0) {
Packit Service 384592
        data = apr_bucket_alloc(ngx_buf_size(buf), b->list);
Packit Service 384592
        if (data == NULL) {
Packit Service 384592
            return APR_EGENERAL;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        size = ngx_read_file(buf->file, data, ngx_buf_size(buf), buf->file_pos);
Packit Service 384592
        if (size != ngx_buf_size(buf)) {
Packit Service 384592
            apr_bucket_free(data);
Packit Service 384592
            return APR_EGENERAL;
Packit Service 384592
        }
Packit Service 384592
        buf->pos = data;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    *str = (char *)buf->pos + b->start;
Packit Service 384592
    *len = b->length;
Packit Service 384592

Packit Service 384592
    return APR_SUCCESS;
Packit Service 384592
}
Packit Service 384592

Packit Service 384592

Packit Service 384592
static void nginx_bucket_destroy(void *data)
Packit Service 384592
{
Packit Service 384592
    apr_bucket_nginx *n = data;
Packit Service 384592
    ngx_buf_t *buf = n->buf;
Packit Service 384592

Packit Service 384592
    if (apr_bucket_shared_destroy(n)) {
Packit Service 384592
        if (!ngx_buf_in_memory(buf) && buf->pos != NULL) {
Packit Service 384592
            apr_bucket_free(buf->pos);
Packit Service 384592
            buf->pos = NULL;
Packit Service 384592
        }
Packit Service 384592
        apr_bucket_free(n);
Packit Service 384592
    }
Packit Service 384592
}
Packit Service 384592

Packit Service 384592
ngx_buf_t * apr_bucket_to_ngx_buf(apr_bucket *e, ngx_pool_t *pool) {
Packit Service 384592
    ngx_buf_t         *buf, *b;
Packit Service 384592
    apr_bucket_nginx  *n;
Packit Service 384592
    ngx_uint_t         len;
Packit Service 384592
    u_char            *data;
Packit Service 384592

Packit Service 384592
    if (e->type->is_metadata) {
Packit Service 384592
        return NULL;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    if (e->type == &apr_bucket_type_nginx) {
Packit Service 384592
        n = e->data;
Packit Service 384592
        b = n->buf;
Packit Service 384592

Packit Service 384592
        /* whole buf */
Packit Service 384592
        if (e->length == (apr_size_t)ngx_buf_size(b)) {
Packit Service 384592
            b->last_buf = 0;
Packit Service 384592
            return b;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        buf = ngx_palloc(pool, sizeof(ngx_buf_t));
Packit Service 384592
        if (buf == NULL) {
Packit Service 384592
            return NULL;
Packit Service 384592
        }
Packit Service 384592
        ngx_memcpy(buf, b, sizeof(ngx_buf_t));
Packit Service 384592

Packit Service 384592
        if (ngx_buf_in_memory(buf)) {
Packit Service 384592
            buf->start = buf->pos = buf->pos + e->start;
Packit Service 384592
            buf->end = buf->last = buf->pos + e->length;
Packit Service 384592
        } else {
Packit Service 384592
            buf->pos = NULL;
Packit Service 384592
            buf->file_pos += e->start;
Packit Service 384592
            buf->file_last = buf->file_pos + e->length;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        buf->last_buf = 0;
Packit Service 384592
        return buf;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    if (apr_bucket_read(e, (const char **)&data,
Packit Service 384592
                        &len, APR_BLOCK_READ) != APR_SUCCESS) {
Packit Service 384592
        return NULL;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    buf = ngx_calloc_buf(pool);
Packit Service 384592
    if (buf == NULL) {
Packit Service 384592
        return NULL;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    if (e->type == &apr_bucket_type_pool) {
Packit Service 384592
        buf->start = data;
Packit Service 384592
    } else if (len != 0) {
Packit Service 384592
        buf->start = ngx_palloc(pool, len);
Packit Service 384592
        ngx_memcpy(buf->start, data, len);
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    buf->pos = buf->start;
Packit Service 384592
    buf->end = buf->last = buf->start + len;
Packit Service 384592
    buf->temporary = 1;
Packit Service 384592
    return buf;
Packit Service 384592
}
Packit Service 384592

Packit Service 384592
ngx_int_t
Packit Service 384592
move_chain_to_brigade(ngx_chain_t *chain, apr_bucket_brigade *bb, ngx_pool_t *pool, ngx_int_t last_buf) {
Packit Service 384592
    apr_bucket         *e;
Packit Service 384592
    ngx_chain_t        *cl;
Packit Service 384592

Packit Service 384592
    while (chain) {
Packit Service 384592
        e = ngx_buf_to_apr_bucket(chain->buf, bb->p, bb->bucket_alloc);
Packit Service 384592
        if (e == NULL) {
Packit Service 384592
            return NGX_ERROR;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        APR_BRIGADE_INSERT_TAIL(bb, e);
Packit Service 384592
        if (chain->buf->last_buf) {
Packit Service 384592
            e = apr_bucket_eos_create(bb->bucket_alloc);
Packit Service 384592
            APR_BRIGADE_INSERT_TAIL(bb, e);
Packit Service 384592
            chain->buf->last_buf = 0;
Packit Service 384592
            return NGX_OK;
Packit Service 384592
        }
Packit Service 384592
        cl = chain;
Packit Service 384592
        chain = chain->next;
Packit Service 384592
        ngx_free_chain(pool, cl);
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    if (last_buf) {
Packit Service 384592
        e = apr_bucket_eos_create(bb->bucket_alloc);
Packit Service 384592
        APR_BRIGADE_INSERT_TAIL(bb, e);
Packit Service 384592
        return NGX_OK;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    return NGX_AGAIN;
Packit Service 384592
}
Packit Service 384592

Packit Service 384592
ngx_int_t
Packit Service 384592
move_brigade_to_chain(apr_bucket_brigade *bb, ngx_chain_t **ll, ngx_pool_t *pool) {
Packit Service 384592
    apr_bucket  *e;
Packit Service 384592
    ngx_buf_t   *buf;
Packit Service 384592
    ngx_chain_t *cl;
Packit Service 384592

Packit Service 384592
    cl = NULL;
Packit Service 384592

Packit Service 384592
    if (APR_BRIGADE_EMPTY(bb)) {
Packit Service 384592
        *ll = NULL;
Packit Service 384592
        return NGX_OK;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    for (e = APR_BRIGADE_FIRST(bb);
Packit Service 384592
            e != APR_BRIGADE_SENTINEL(bb);
Packit Service 384592
            e = APR_BUCKET_NEXT(e)) {
Packit Service 384592

Packit Service 384592
        if (APR_BUCKET_IS_EOS(e)) {
Packit Service 384592
            if (cl == NULL) {
Packit Service 384592
                cl = ngx_alloc_chain_link(pool);
Packit Service 384592
                if (cl == NULL) {
Packit Service 384592
                    break;
Packit Service 384592
                }
Packit Service 384592
                
Packit Service 384592
                cl->buf = ngx_calloc_buf(pool);
Packit Service 384592
                if (cl->buf == NULL) {
Packit Service 384592
                    break;
Packit Service 384592
                }
Packit Service 384592

Packit Service 384592
                cl->buf->last_buf = 1;
Packit Service 384592
                *ll = cl;
Packit Service 384592
            } else {
Packit Service 384592
                cl->buf->last_buf = 1;
Packit Service 384592
            }
Packit Service 384592
            apr_brigade_cleanup(bb);
Packit Service 384592
            return NGX_OK;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        if (APR_BUCKET_IS_METADATA(e)) {
Packit Service 384592
            continue;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        buf = apr_bucket_to_ngx_buf(e, pool);
Packit Service 384592
        if (buf == NULL) {
Packit Service 384592
            break;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        cl = ngx_alloc_chain_link(pool);
Packit Service 384592
        if (cl == NULL) {
Packit Service 384592
            break;
Packit Service 384592
        }
Packit Service 384592

Packit Service 384592
        cl->buf = buf;
Packit Service 384592
        cl->next = NULL;
Packit Service 384592
        *ll = cl;
Packit Service 384592
        ll = &cl->next;
Packit Service 384592
    }
Packit Service 384592

Packit Service 384592
    apr_brigade_cleanup(bb);
Packit Service 384592
    /* no eos or error */
Packit Service 384592
    return NGX_ERROR;
Packit Service 384592
}
Packit Service 384592