Coverage Report

Created: 2024-05-15 07:10

/src/libxml2/uri.c
Line
Count
Source (jump to first uncovered line)
1
/**
2
 * uri.c: set of generic URI related routines
3
 *
4
 * Reference: RFCs 3986, 2732 and 2373
5
 *
6
 * See Copyright for the status of this software.
7
 *
8
 * daniel@veillard.com
9
 */
10
11
#define IN_LIBXML
12
#include "libxml.h"
13
14
#include <limits.h>
15
#include <string.h>
16
17
#include <libxml/xmlmemory.h>
18
#include <libxml/uri.h>
19
#include <libxml/globals.h>
20
#include <libxml/xmlerror.h>
21
22
#include "private/error.h"
23
24
/**
25
 * MAX_URI_LENGTH:
26
 *
27
 * The definition of the URI regexp in the above RFC has no size limit
28
 * In practice they are usually relatively short except for the
29
 * data URI scheme as defined in RFC 2397. Even for data URI the usual
30
 * maximum size before hitting random practical limits is around 64 KB
31
 * and 4KB is usually a maximum admitted limit for proper operations.
32
 * The value below is more a security limit than anything else and
33
 * really should never be hit by 'normal' operations
34
 * Set to 1 MByte in 2012, this is only enforced on output
35
 */
36
702k
#define MAX_URI_LENGTH 1024 * 1024
37
38
19.1M
#define PORT_EMPTY           0
39
5.53k
#define PORT_EMPTY_SERVER   -1
40
41
static void
42
xmlURIErrMemory(const char *extra)
43
5.74k
{
44
5.74k
    if (extra)
45
5.74k
        __xmlRaiseError(NULL, NULL, NULL,
46
5.74k
                        NULL, NULL, XML_FROM_URI,
47
5.74k
                        XML_ERR_NO_MEMORY, XML_ERR_FATAL, NULL, 0,
48
5.74k
                        extra, NULL, NULL, 0, 0,
49
5.74k
                        "Memory allocation failed : %s\n", extra);
50
0
    else
51
0
        __xmlRaiseError(NULL, NULL, NULL,
52
0
                        NULL, NULL, XML_FROM_URI,
53
0
                        XML_ERR_NO_MEMORY, XML_ERR_FATAL, NULL, 0,
54
0
                        NULL, NULL, NULL, 0, 0,
55
0
                        "Memory allocation failed\n");
56
5.74k
}
57
58
static void xmlCleanURI(xmlURIPtr uri);
59
60
/*
61
 * Old rule from 2396 used in legacy handling code
62
 * alpha    = lowalpha | upalpha
63
 */
64
30.7G
#define IS_ALPHA(x) (IS_LOWALPHA(x) || IS_UPALPHA(x))
65
66
67
/*
68
 * lowalpha = "a" | "b" | "c" | "d" | "e" | "f" | "g" | "h" | "i" | "j" |
69
 *            "k" | "l" | "m" | "n" | "o" | "p" | "q" | "r" | "s" | "t" |
70
 *            "u" | "v" | "w" | "x" | "y" | "z"
71
 */
72
73
30.7G
#define IS_LOWALPHA(x) (((x) >= 'a') && ((x) <= 'z'))
74
75
/*
76
 * upalpha = "A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" |
77
 *           "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" |
78
 *           "U" | "V" | "W" | "X" | "Y" | "Z"
79
 */
80
11.3G
#define IS_UPALPHA(x) (((x) >= 'A') && ((x) <= 'Z'))
81
82
#ifdef IS_DIGIT
83
#undef IS_DIGIT
84
#endif
85
/*
86
 * digit = "0" | "1" | "2" | "3" | "4" | "5" | "6" | "7" | "8" | "9"
87
 */
88
11.0G
#define IS_DIGIT(x) (((x) >= '0') && ((x) <= '9'))
89
90
/*
91
 * alphanum = alpha | digit
92
 */
93
94
30.7G
#define IS_ALPHANUM(x) (IS_ALPHA(x) || IS_DIGIT(x))
95
96
/*
97
 * mark = "-" | "_" | "." | "!" | "~" | "*" | "'" | "(" | ")"
98
 */
99
100
6.57G
#define IS_MARK(x) (((x) == '-') || ((x) == '_') || ((x) == '.') ||     \
101
6.57G
    ((x) == '!') || ((x) == '~') || ((x) == '*') || ((x) == '\'') ||    \
102
6.57G
    ((x) == '(') || ((x) == ')'))
103
104
/*
105
 * unwise = "{" | "}" | "|" | "\" | "^" | "`"
106
 */
107
108
#define IS_UNWISE(p)                                                    \
109
0
      (((*(p) == '{')) || ((*(p) == '}')) || ((*(p) == '|')) ||         \
110
0
       ((*(p) == '\\')) || ((*(p) == '^')) || ((*(p) == '[')) ||        \
111
0
       ((*(p) == ']')) || ((*(p) == '`')))
112
/*
113
 * reserved = ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" | "$" | "," |
114
 *            "[" | "]"
115
 */
116
117
32.0k
#define IS_RESERVED(x) (((x) == ';') || ((x) == '/') || ((x) == '?') || \
118
32.0k
        ((x) == ':') || ((x) == '@') || ((x) == '&') || ((x) == '=') || \
119
32.0k
        ((x) == '+') || ((x) == '$') || ((x) == ',') || ((x) == '[') || \
120
32.0k
        ((x) == ']'))
121
122
/*
123
 * unreserved = alphanum | mark
124
 */
125
126
15.3G
#define IS_UNRESERVED(x) (IS_ALPHANUM(x) || IS_MARK(x))
127
128
/*
129
 * Skip to next pointer char, handle escaped sequences
130
 */
131
132
8.76G
#define NEXT(p) ((*p == '%')? p += 3 : p++)
133
134
/*
135
 * Productions from the spec.
136
 *
137
 *    authority     = server | reg_name
138
 *    reg_name      = 1*( unreserved | escaped | "$" | "," |
139
 *                        ";" | ":" | "@" | "&" | "=" | "+" )
140
 *
141
 * path          = [ abs_path | opaque_part ]
142
 */
143
144
15.8M
#define STRNDUP(s, n) (char *) xmlStrndup((const xmlChar *)(s), (n))
145
146
/************************************************************************
147
 *                  *
148
 *                         RFC 3986 parser        *
149
 *                  *
150
 ************************************************************************/
151
152
19.1G
#define ISA_DIGIT(p) ((*(p) >= '0') && (*(p) <= '9'))
153
9.29G
#define ISA_ALPHA(p) (((*(p) >= 'a') && (*(p) <= 'z')) ||   \
154
9.29G
                      ((*(p) >= 'A') && (*(p) <= 'Z')))
155
#define ISA_HEXDIG(p)             \
156
6.20G
       (ISA_DIGIT(p) || ((*(p) >= 'a') && (*(p) <= 'f')) ||   \
157
6.20G
        ((*(p) >= 'A') && (*(p) <= 'F')))
158
159
/*
160
 *    sub-delims    = "!" / "$" / "&" / "'" / "(" / ")"
161
 *                     / "*" / "+" / "," / ";" / "="
162
 */
163
#define ISA_SUB_DELIM(p)            \
164
9.75G
      (((*(p) == '!')) || ((*(p) == '$')) || ((*(p) == '&')) ||   \
165
894M
       ((*(p) == '(')) || ((*(p) == ')')) || ((*(p) == '*')) ||   \
166
894M
       ((*(p) == '+')) || ((*(p) == ',')) || ((*(p) == ';')) ||   \
167
894M
       ((*(p) == '=')) || ((*(p) == '\'')))
168
169
/*
170
 *    gen-delims    = ":" / "/" / "?" / "#" / "[" / "]" / "@"
171
 */
172
#define ISA_GEN_DELIM(p)            \
173
      (((*(p) == ':')) || ((*(p) == '/')) || ((*(p) == '?')) ||         \
174
       ((*(p) == '#')) || ((*(p) == '[')) || ((*(p) == ']')) ||         \
175
       ((*(p) == '@')))
176
177
/*
178
 *    reserved      = gen-delims / sub-delims
179
 */
180
#define ISA_RESERVED(p) (ISA_GEN_DELIM(p) || (ISA_SUB_DELIM(p)))
181
182
/*
183
 *    unreserved    = ALPHA / DIGIT / "-" / "." / "_" / "~"
184
 */
185
#define ISA_UNRESERVED(p)           \
186
18.0G
      ((ISA_ALPHA(p)) || (ISA_DIGIT(p)) || ((*(p) == '-')) ||   \
187
9.01G
       ((*(p) == '.')) || ((*(p) == '_')) || ((*(p) == '~')))
188
189
/*
190
 *    pct-encoded   = "%" HEXDIG HEXDIG
191
 */
192
#define ISA_PCT_ENCODED(p)            \
193
13.0G
     ((*(p) == '%') && (ISA_HEXDIG(p + 1)) && (ISA_HEXDIG(p + 2)))
194
195
/*
196
 *    pchar         = unreserved / pct-encoded / sub-delims / ":" / "@"
197
 */
198
#define ISA_PCHAR(p)              \
199
16.0G
     (ISA_UNRESERVED(p) || ISA_PCT_ENCODED(p) || ISA_SUB_DELIM(p) ||  \
200
8.64G
      ((*(p) == ':')) || ((*(p) == '@')))
201
202
/**
203
 * xmlParse3986Scheme:
204
 * @uri:  pointer to an URI structure
205
 * @str:  pointer to the string to analyze
206
 *
207
 * Parse an URI scheme
208
 *
209
 * ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )
210
 *
211
 * Returns 0 or the error code
212
 */
213
static int
214
16.5M
xmlParse3986Scheme(xmlURIPtr uri, const char **str) {
215
16.5M
    const char *cur;
216
217
16.5M
    if (str == NULL)
218
0
  return(-1);
219
220
16.5M
    cur = *str;
221
16.5M
    if (!ISA_ALPHA(cur))
222
799k
  return(2);
223
15.7M
    cur++;
224
127M
    while (ISA_ALPHA(cur) || ISA_DIGIT(cur) ||
225
127M
           (*cur == '+') || (*cur == '-') || (*cur == '.')) cur++;
226
15.7M
    if (uri != NULL) {
227
15.7M
  if (uri->scheme != NULL) xmlFree(uri->scheme);
228
15.7M
  uri->scheme = STRNDUP(*str, cur - *str);
229
15.7M
    }
230
15.7M
    *str = cur;
231
15.7M
    return(0);
232
16.5M
}
233
234
/**
235
 * xmlParse3986Fragment:
236
 * @uri:  pointer to an URI structure
237
 * @str:  pointer to the string to analyze
238
 *
239
 * Parse the query part of an URI
240
 *
241
 * fragment      = *( pchar / "/" / "?" )
242
 * NOTE: the strict syntax as defined by 3986 does not allow '[' and ']'
243
 *       in the fragment identifier but this is used very broadly for
244
 *       xpointer scheme selection, so we are allowing it here to not break
245
 *       for example all the DocBook processing chains.
246
 *
247
 * Returns 0 or the error code
248
 */
249
static int
250
xmlParse3986Fragment(xmlURIPtr uri, const char **str)
251
106k
{
252
106k
    const char *cur;
253
254
106k
    if (str == NULL)
255
0
        return (-1);
256
257
106k
    cur = *str;
258
259
443M
    while ((ISA_PCHAR(cur)) || (*cur == '/') || (*cur == '?') ||
260
443M
           (*cur == '[') || (*cur == ']') ||
261
443M
           ((uri != NULL) && (uri->cleanup & 1) && (IS_UNWISE(cur))))
262
443M
        NEXT(cur);
263
106k
    if (uri != NULL) {
264
106k
        if (uri->fragment != NULL)
265
0
            xmlFree(uri->fragment);
266
106k
  if (uri->cleanup & 2)
267
0
      uri->fragment = STRNDUP(*str, cur - *str);
268
106k
  else
269
106k
      uri->fragment = xmlURIUnescapeString(*str, cur - *str, NULL);
270
106k
    }
271
106k
    *str = cur;
272
106k
    return (0);
273
106k
}
274
275
/**
276
 * xmlParse3986Query:
277
 * @uri:  pointer to an URI structure
278
 * @str:  pointer to the string to analyze
279
 *
280
 * Parse the query part of an URI
281
 *
282
 * query = *uric
283
 *
284
 * Returns 0 or the error code
285
 */
286
static int
287
xmlParse3986Query(xmlURIPtr uri, const char **str)
288
50.4k
{
289
50.4k
    const char *cur;
290
291
50.4k
    if (str == NULL)
292
0
        return (-1);
293
294
50.4k
    cur = *str;
295
296
570M
    while ((ISA_PCHAR(cur)) || (*cur == '/') || (*cur == '?') ||
297
570M
           ((uri != NULL) && (uri->cleanup & 1) && (IS_UNWISE(cur))))
298
570M
        NEXT(cur);
299
50.4k
    if (uri != NULL) {
300
50.4k
        if (uri->query != NULL)
301
0
            xmlFree(uri->query);
302
50.4k
  if (uri->cleanup & 2)
303
0
      uri->query = STRNDUP(*str, cur - *str);
304
50.4k
  else
305
50.4k
      uri->query = xmlURIUnescapeString(*str, cur - *str, NULL);
306
307
  /* Save the raw bytes of the query as well.
308
   * See: http://mail.gnome.org/archives/xml/2007-April/thread.html#00114
309
   */
310
50.4k
  if (uri->query_raw != NULL)
311
0
      xmlFree (uri->query_raw);
312
50.4k
  uri->query_raw = STRNDUP (*str, cur - *str);
313
50.4k
    }
314
50.4k
    *str = cur;
315
50.4k
    return (0);
316
50.4k
}
317
318
/**
319
 * xmlParse3986Port:
320
 * @uri:  pointer to an URI structure
321
 * @str:  the string to analyze
322
 *
323
 * Parse a port part and fills in the appropriate fields
324
 * of the @uri structure
325
 *
326
 * port          = *DIGIT
327
 *
328
 * Returns 0 or the error code
329
 */
330
static int
331
xmlParse3986Port(xmlURIPtr uri, const char **str)
332
5.65k
{
333
5.65k
    const char *cur = *str;
334
5.65k
    int port = 0;
335
336
5.65k
    if (ISA_DIGIT(cur)) {
337
6.67k
  while (ISA_DIGIT(cur)) {
338
5.61k
            int digit = *cur - '0';
339
340
5.61k
            if (port > INT_MAX / 10)
341
147
                return(1);
342
5.47k
            port *= 10;
343
5.47k
            if (port > INT_MAX - digit)
344
0
                return(1);
345
5.47k
      port += digit;
346
347
5.47k
      cur++;
348
5.47k
  }
349
1.05k
  if (uri != NULL)
350
1.05k
      uri->port = port;
351
1.05k
  *str = cur;
352
1.05k
  return(0);
353
1.20k
    }
354
4.45k
    return(1);
355
5.65k
}
356
357
/**
358
 * xmlParse3986Userinfo:
359
 * @uri:  pointer to an URI structure
360
 * @str:  the string to analyze
361
 *
362
 * Parse an user information part and fills in the appropriate fields
363
 * of the @uri structure
364
 *
365
 * userinfo      = *( unreserved / pct-encoded / sub-delims / ":" )
366
 *
367
 * Returns 0 or the error code
368
 */
369
static int
370
xmlParse3986Userinfo(xmlURIPtr uri, const char **str)
371
629k
{
372
629k
    const char *cur;
373
374
629k
    cur = *str;
375
209M
    while (ISA_UNRESERVED(cur) || ISA_PCT_ENCODED(cur) ||
376
209M
           ISA_SUB_DELIM(cur) || (*cur == ':'))
377
208M
  NEXT(cur);
378
629k
    if (*cur == '@') {
379
19.2k
  if (uri != NULL) {
380
19.2k
      if (uri->user != NULL) xmlFree(uri->user);
381
19.2k
      if (uri->cleanup & 2)
382
0
    uri->user = STRNDUP(*str, cur - *str);
383
19.2k
      else
384
19.2k
    uri->user = xmlURIUnescapeString(*str, cur - *str, NULL);
385
19.2k
  }
386
19.2k
  *str = cur;
387
19.2k
  return(0);
388
19.2k
    }
389
610k
    return(1);
390
629k
}
391
392
/**
393
 * xmlParse3986DecOctet:
394
 * @str:  the string to analyze
395
 *
396
 *    dec-octet     = DIGIT                 ; 0-9
397
 *                  / %x31-39 DIGIT         ; 10-99
398
 *                  / "1" 2DIGIT            ; 100-199
399
 *                  / "2" %x30-34 DIGIT     ; 200-249
400
 *                  / "25" %x30-35          ; 250-255
401
 *
402
 * Skip a dec-octet.
403
 *
404
 * Returns 0 if found and skipped, 1 otherwise
405
 */
406
static int
407
776
xmlParse3986DecOctet(const char **str) {
408
776
    const char *cur = *str;
409
410
776
    if (!(ISA_DIGIT(cur)))
411
6
        return(1);
412
770
    if (!ISA_DIGIT(cur+1))
413
446
  cur++;
414
324
    else if ((*cur != '0') && (ISA_DIGIT(cur + 1)) && (!ISA_DIGIT(cur+2)))
415
25
  cur += 2;
416
299
    else if ((*cur == '1') && (ISA_DIGIT(cur + 1)) && (ISA_DIGIT(cur + 2)))
417
89
  cur += 3;
418
210
    else if ((*cur == '2') && (*(cur + 1) >= '0') &&
419
210
       (*(cur + 1) <= '4') && (ISA_DIGIT(cur + 2)))
420
152
  cur += 3;
421
58
    else if ((*cur == '2') && (*(cur + 1) == '5') &&
422
58
       (*(cur + 2) >= '0') && (*(cur + 1) <= '5'))
423
0
  cur += 3;
424
58
    else
425
58
        return(1);
426
712
    *str = cur;
427
712
    return(0);
428
770
}
429
/**
430
 * xmlParse3986Host:
431
 * @uri:  pointer to an URI structure
432
 * @str:  the string to analyze
433
 *
434
 * Parse an host part and fills in the appropriate fields
435
 * of the @uri structure
436
 *
437
 * host          = IP-literal / IPv4address / reg-name
438
 * IP-literal    = "[" ( IPv6address / IPvFuture  ) "]"
439
 * IPv4address   = dec-octet "." dec-octet "." dec-octet "." dec-octet
440
 * reg-name      = *( unreserved / pct-encoded / sub-delims )
441
 *
442
 * Returns 0 or the error code
443
 */
444
static int
445
xmlParse3986Host(xmlURIPtr uri, const char **str)
446
629k
{
447
629k
    const char *cur = *str;
448
629k
    const char *host;
449
450
629k
    host = cur;
451
    /*
452
     * IPv6 and future addressing scheme are enclosed between brackets
453
     */
454
629k
    if (*cur == '[') {
455
187
        cur++;
456
1.27M
  while ((*cur != ']') && (*cur != 0))
457
1.27M
      cur++;
458
187
  if (*cur != ']')
459
84
      return(1);
460
103
  cur++;
461
103
  goto found;
462
187
    }
463
    /*
464
     * try to parse an IPv4
465
     */
466
629k
    if (ISA_DIGIT(cur)) {
467
729
        if (xmlParse3986DecOctet(&cur) != 0)
468
55
      goto not_ipv4;
469
674
  if (*cur != '.')
470
627
      goto not_ipv4;
471
47
  cur++;
472
47
        if (xmlParse3986DecOctet(&cur) != 0)
473
9
      goto not_ipv4;
474
38
  if (*cur != '.')
475
38
      goto not_ipv4;
476
0
        if (xmlParse3986DecOctet(&cur) != 0)
477
0
      goto not_ipv4;
478
0
  if (*cur != '.')
479
0
      goto not_ipv4;
480
0
        if (xmlParse3986DecOctet(&cur) != 0)
481
0
      goto not_ipv4;
482
0
  goto found;
483
729
not_ipv4:
484
729
        cur = *str;
485
729
    }
486
    /*
487
     * then this should be a hostname which can be empty
488
     */
489
160M
    while (ISA_UNRESERVED(cur) || ISA_PCT_ENCODED(cur) || ISA_SUB_DELIM(cur))
490
159M
        NEXT(cur);
491
629k
found:
492
629k
    if (uri != NULL) {
493
629k
  if (uri->authority != NULL) xmlFree(uri->authority);
494
629k
  uri->authority = NULL;
495
629k
  if (uri->server != NULL) xmlFree(uri->server);
496
629k
  if (cur != host) {
497
623k
      if (uri->cleanup & 2)
498
0
    uri->server = STRNDUP(host, cur - host);
499
623k
      else
500
623k
    uri->server = xmlURIUnescapeString(host, cur - host, NULL);
501
623k
  } else
502
5.74k
      uri->server = NULL;
503
629k
    }
504
629k
    *str = cur;
505
629k
    return(0);
506
629k
}
507
508
/**
509
 * xmlParse3986Authority:
510
 * @uri:  pointer to an URI structure
511
 * @str:  the string to analyze
512
 *
513
 * Parse an authority part and fills in the appropriate fields
514
 * of the @uri structure
515
 *
516
 * authority     = [ userinfo "@" ] host [ ":" port ]
517
 *
518
 * Returns 0 or the error code
519
 */
520
static int
521
xmlParse3986Authority(xmlURIPtr uri, const char **str)
522
629k
{
523
629k
    const char *cur;
524
629k
    int ret;
525
526
629k
    cur = *str;
527
    /*
528
     * try to parse an userinfo and check for the trailing @
529
     */
530
629k
    ret = xmlParse3986Userinfo(uri, &cur);
531
629k
    if ((ret != 0) || (*cur != '@'))
532
610k
        cur = *str;
533
19.2k
    else
534
19.2k
        cur++;
535
629k
    ret = xmlParse3986Host(uri, &cur);
536
629k
    if (ret != 0) return(ret);
537
629k
    if (*cur == ':') {
538
5.65k
        cur++;
539
5.65k
        ret = xmlParse3986Port(uri, &cur);
540
5.65k
  if (ret != 0) return(ret);
541
5.65k
    }
542
624k
    *str = cur;
543
624k
    return(0);
544
629k
}
545
546
/**
547
 * xmlParse3986Segment:
548
 * @str:  the string to analyze
549
 * @forbid: an optional forbidden character
550
 * @empty: allow an empty segment
551
 *
552
 * Parse a segment and fills in the appropriate fields
553
 * of the @uri structure
554
 *
555
 * segment       = *pchar
556
 * segment-nz    = 1*pchar
557
 * segment-nz-nc = 1*( unreserved / pct-encoded / sub-delims / "@" )
558
 *               ; non-zero-length segment without any colon ":"
559
 *
560
 * Returns 0 or the error code
561
 */
562
static int
563
xmlParse3986Segment(const char **str, char forbid, int empty)
564
238M
{
565
238M
    const char *cur;
566
567
238M
    cur = *str;
568
238M
    if (!ISA_PCHAR(cur)) {
569
263k
        if (empty)
570
259k
      return(0);
571
4.25k
  return(1);
572
263k
    }
573
7.38G
    while (ISA_PCHAR(cur) && (*cur != forbid))
574
7.14G
        NEXT(cur);
575
237M
    *str = cur;
576
237M
    return (0);
577
238M
}
578
579
/**
580
 * xmlParse3986PathAbEmpty:
581
 * @uri:  pointer to an URI structure
582
 * @str:  the string to analyze
583
 *
584
 * Parse an path absolute or empty and fills in the appropriate fields
585
 * of the @uri structure
586
 *
587
 * path-abempty  = *( "/" segment )
588
 *
589
 * Returns 0 or the error code
590
 */
591
static int
592
xmlParse3986PathAbEmpty(xmlURIPtr uri, const char **str)
593
624k
{
594
624k
    const char *cur;
595
624k
    int ret;
596
597
624k
    cur = *str;
598
599
221M
    while (*cur == '/') {
600
221M
        cur++;
601
221M
  ret = xmlParse3986Segment(&cur, 0, 1);
602
221M
  if (ret != 0) return(ret);
603
221M
    }
604
624k
    if (uri != NULL) {
605
624k
  if (uri->path != NULL) xmlFree(uri->path);
606
624k
        if (*str != cur) {
607
485k
            if (uri->cleanup & 2)
608
0
                uri->path = STRNDUP(*str, cur - *str);
609
485k
            else
610
485k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
611
485k
        } else {
612
139k
            uri->path = NULL;
613
139k
        }
614
624k
    }
615
624k
    *str = cur;
616
624k
    return (0);
617
624k
}
618
619
/**
620
 * xmlParse3986PathAbsolute:
621
 * @uri:  pointer to an URI structure
622
 * @str:  the string to analyze
623
 *
624
 * Parse an path absolute and fills in the appropriate fields
625
 * of the @uri structure
626
 *
627
 * path-absolute = "/" [ segment-nz *( "/" segment ) ]
628
 *
629
 * Returns 0 or the error code
630
 */
631
static int
632
xmlParse3986PathAbsolute(xmlURIPtr uri, const char **str)
633
34.7k
{
634
34.7k
    const char *cur;
635
34.7k
    int ret;
636
637
34.7k
    cur = *str;
638
639
34.7k
    if (*cur != '/')
640
0
        return(1);
641
34.7k
    cur++;
642
34.7k
    ret = xmlParse3986Segment(&cur, 0, 0);
643
34.7k
    if (ret == 0) {
644
54.4k
  while (*cur == '/') {
645
24.0k
      cur++;
646
24.0k
      ret = xmlParse3986Segment(&cur, 0, 1);
647
24.0k
      if (ret != 0) return(ret);
648
24.0k
  }
649
30.4k
    }
650
34.7k
    if (uri != NULL) {
651
34.7k
  if (uri->path != NULL) xmlFree(uri->path);
652
34.7k
        if (cur != *str) {
653
34.7k
            if (uri->cleanup & 2)
654
0
                uri->path = STRNDUP(*str, cur - *str);
655
34.7k
            else
656
34.7k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
657
34.7k
        } else {
658
0
            uri->path = NULL;
659
0
        }
660
34.7k
    }
661
34.7k
    *str = cur;
662
34.7k
    return (0);
663
34.7k
}
664
665
/**
666
 * xmlParse3986PathRootless:
667
 * @uri:  pointer to an URI structure
668
 * @str:  the string to analyze
669
 *
670
 * Parse an path without root and fills in the appropriate fields
671
 * of the @uri structure
672
 *
673
 * path-rootless = segment-nz *( "/" segment )
674
 *
675
 * Returns 0 or the error code
676
 */
677
static int
678
xmlParse3986PathRootless(xmlURIPtr uri, const char **str)
679
144k
{
680
144k
    const char *cur;
681
144k
    int ret;
682
683
144k
    cur = *str;
684
685
144k
    ret = xmlParse3986Segment(&cur, 0, 0);
686
144k
    if (ret != 0) return(ret);
687
171k
    while (*cur == '/') {
688
26.4k
        cur++;
689
26.4k
  ret = xmlParse3986Segment(&cur, 0, 1);
690
26.4k
  if (ret != 0) return(ret);
691
26.4k
    }
692
144k
    if (uri != NULL) {
693
144k
  if (uri->path != NULL) xmlFree(uri->path);
694
144k
        if (cur != *str) {
695
144k
            if (uri->cleanup & 2)
696
0
                uri->path = STRNDUP(*str, cur - *str);
697
144k
            else
698
144k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
699
144k
        } else {
700
0
            uri->path = NULL;
701
0
        }
702
144k
    }
703
144k
    *str = cur;
704
144k
    return (0);
705
144k
}
706
707
/**
708
 * xmlParse3986PathNoScheme:
709
 * @uri:  pointer to an URI structure
710
 * @str:  the string to analyze
711
 *
712
 * Parse an path which is not a scheme and fills in the appropriate fields
713
 * of the @uri structure
714
 *
715
 * path-noscheme = segment-nz-nc *( "/" segment )
716
 *
717
 * Returns 0 or the error code
718
 */
719
static int
720
xmlParse3986PathNoScheme(xmlURIPtr uri, const char **str)
721
15.5M
{
722
15.5M
    const char *cur;
723
15.5M
    int ret;
724
725
15.5M
    cur = *str;
726
727
15.5M
    ret = xmlParse3986Segment(&cur, ':', 0);
728
15.5M
    if (ret != 0) return(ret);
729
16.8M
    while (*cur == '/') {
730
1.25M
        cur++;
731
1.25M
  ret = xmlParse3986Segment(&cur, 0, 1);
732
1.25M
  if (ret != 0) return(ret);
733
1.25M
    }
734
15.5M
    if (uri != NULL) {
735
15.5M
  if (uri->path != NULL) xmlFree(uri->path);
736
15.5M
        if (cur != *str) {
737
15.5M
            if (uri->cleanup & 2)
738
0
                uri->path = STRNDUP(*str, cur - *str);
739
15.5M
            else
740
15.5M
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
741
15.5M
        } else {
742
5.21k
            uri->path = NULL;
743
5.21k
        }
744
15.5M
    }
745
15.5M
    *str = cur;
746
15.5M
    return (0);
747
15.5M
}
748
749
/**
750
 * xmlParse3986HierPart:
751
 * @uri:  pointer to an URI structure
752
 * @str:  the string to analyze
753
 *
754
 * Parse an hierarchical part and fills in the appropriate fields
755
 * of the @uri structure
756
 *
757
 * hier-part     = "//" authority path-abempty
758
 *                / path-absolute
759
 *                / path-rootless
760
 *                / path-empty
761
 *
762
 * Returns 0 or the error code
763
 */
764
static int
765
xmlParse3986HierPart(xmlURIPtr uri, const char **str)
766
789k
{
767
789k
    const char *cur;
768
789k
    int ret;
769
770
789k
    cur = *str;
771
772
789k
    if ((*cur == '/') && (*(cur + 1) == '/')) {
773
627k
        cur += 2;
774
627k
  ret = xmlParse3986Authority(uri, &cur);
775
627k
  if (ret != 0) return(ret);
776
        /*
777
         * An empty server is marked with a special URI value.
778
         */
779
623k
  if ((uri->server == NULL) && (uri->port == PORT_EMPTY))
780
5.53k
      uri->port = PORT_EMPTY_SERVER;
781
623k
  ret = xmlParse3986PathAbEmpty(uri, &cur);
782
623k
  if (ret != 0) return(ret);
783
623k
  *str = cur;
784
623k
  return(0);
785
623k
    } else if (*cur == '/') {
786
6.81k
        ret = xmlParse3986PathAbsolute(uri, &cur);
787
6.81k
  if (ret != 0) return(ret);
788
155k
    } else if (ISA_PCHAR(cur)) {
789
144k
        ret = xmlParse3986PathRootless(uri, &cur);
790
144k
  if (ret != 0) return(ret);
791
144k
    } else {
792
  /* path-empty is effectively empty */
793
10.5k
  if (uri != NULL) {
794
10.5k
      if (uri->path != NULL) xmlFree(uri->path);
795
10.5k
      uri->path = NULL;
796
10.5k
  }
797
10.5k
    }
798
162k
    *str = cur;
799
162k
    return (0);
800
789k
}
801
802
/**
803
 * xmlParse3986RelativeRef:
804
 * @uri:  pointer to an URI structure
805
 * @str:  the string to analyze
806
 *
807
 * Parse an URI string and fills in the appropriate fields
808
 * of the @uri structure
809
 *
810
 * relative-ref  = relative-part [ "?" query ] [ "#" fragment ]
811
 * relative-part = "//" authority path-abempty
812
 *               / path-absolute
813
 *               / path-noscheme
814
 *               / path-empty
815
 *
816
 * Returns 0 or the error code
817
 */
818
static int
819
15.9M
xmlParse3986RelativeRef(xmlURIPtr uri, const char *str) {
820
15.9M
    int ret;
821
822
15.9M
    if ((*str == '/') && (*(str + 1) == '/')) {
823
1.72k
        str += 2;
824
1.72k
  ret = xmlParse3986Authority(uri, &str);
825
1.72k
  if (ret != 0) return(ret);
826
1.68k
  ret = xmlParse3986PathAbEmpty(uri, &str);
827
1.68k
  if (ret != 0) return(ret);
828
15.9M
    } else if (*str == '/') {
829
27.8k
  ret = xmlParse3986PathAbsolute(uri, &str);
830
27.8k
  if (ret != 0) return(ret);
831
15.9M
    } else if (ISA_PCHAR(str)) {
832
15.5M
        ret = xmlParse3986PathNoScheme(uri, &str);
833
15.5M
  if (ret != 0) return(ret);
834
15.5M
    } else {
835
  /* path-empty is effectively empty */
836
347k
  if (uri != NULL) {
837
347k
      if (uri->path != NULL) xmlFree(uri->path);
838
347k
      uri->path = NULL;
839
347k
  }
840
347k
    }
841
842
15.9M
    if (*str == '?') {
843
24.8k
  str++;
844
24.8k
  ret = xmlParse3986Query(uri, &str);
845
24.8k
  if (ret != 0) return(ret);
846
24.8k
    }
847
15.9M
    if (*str == '#') {
848
64.5k
  str++;
849
64.5k
  ret = xmlParse3986Fragment(uri, &str);
850
64.5k
  if (ret != 0) return(ret);
851
64.5k
    }
852
15.9M
    if (*str != 0) {
853
1.17M
  xmlCleanURI(uri);
854
1.17M
  return(1);
855
1.17M
    }
856
14.7M
    return(0);
857
15.9M
}
858
859
860
/**
861
 * xmlParse3986URI:
862
 * @uri:  pointer to an URI structure
863
 * @str:  the string to analyze
864
 *
865
 * Parse an URI string and fills in the appropriate fields
866
 * of the @uri structure
867
 *
868
 * scheme ":" hier-part [ "?" query ] [ "#" fragment ]
869
 *
870
 * Returns 0 or the error code
871
 */
872
static int
873
16.5M
xmlParse3986URI(xmlURIPtr uri, const char *str) {
874
16.5M
    int ret;
875
876
16.5M
    ret = xmlParse3986Scheme(uri, &str);
877
16.5M
    if (ret != 0) return(ret);
878
15.7M
    if (*str != ':') {
879
14.9M
  return(1);
880
14.9M
    }
881
789k
    str++;
882
789k
    ret = xmlParse3986HierPart(uri, &str);
883
789k
    if (ret != 0) return(ret);
884
785k
    if (*str == '?') {
885
25.5k
  str++;
886
25.5k
  ret = xmlParse3986Query(uri, &str);
887
25.5k
  if (ret != 0) return(ret);
888
25.5k
    }
889
785k
    if (*str == '#') {
890
42.2k
  str++;
891
42.2k
  ret = xmlParse3986Fragment(uri, &str);
892
42.2k
  if (ret != 0) return(ret);
893
42.2k
    }
894
785k
    if (*str != 0) {
895
196k
  xmlCleanURI(uri);
896
196k
  return(1);
897
196k
    }
898
588k
    return(0);
899
785k
}
900
901
/**
902
 * xmlParse3986URIReference:
903
 * @uri:  pointer to an URI structure
904
 * @str:  the string to analyze
905
 *
906
 * Parse an URI reference string and fills in the appropriate fields
907
 * of the @uri structure
908
 *
909
 * URI-reference = URI / relative-ref
910
 *
911
 * Returns 0 or the error code
912
 */
913
static int
914
16.5M
xmlParse3986URIReference(xmlURIPtr uri, const char *str) {
915
16.5M
    int ret;
916
917
16.5M
    if (str == NULL)
918
0
  return(-1);
919
16.5M
    xmlCleanURI(uri);
920
921
    /*
922
     * Try first to parse absolute refs, then fallback to relative if
923
     * it fails.
924
     */
925
16.5M
    ret = xmlParse3986URI(uri, str);
926
16.5M
    if (ret != 0) {
927
15.9M
  xmlCleanURI(uri);
928
15.9M
        ret = xmlParse3986RelativeRef(uri, str);
929
15.9M
  if (ret != 0) {
930
1.17M
      xmlCleanURI(uri);
931
1.17M
      return(ret);
932
1.17M
  }
933
15.9M
    }
934
15.3M
    return(0);
935
16.5M
}
936
937
/**
938
 * xmlParseURI:
939
 * @str:  the URI string to analyze
940
 *
941
 * Parse an URI based on RFC 3986
942
 *
943
 * URI-reference = [ absoluteURI | relativeURI ] [ "#" fragment ]
944
 *
945
 * Returns a newly built xmlURIPtr or NULL in case of error
946
 */
947
xmlURIPtr
948
15.0M
xmlParseURI(const char *str) {
949
15.0M
    xmlURIPtr uri;
950
15.0M
    int ret;
951
952
15.0M
    if (str == NULL)
953
0
  return(NULL);
954
15.0M
    uri = xmlCreateURI();
955
15.0M
    if (uri != NULL) {
956
15.0M
  ret = xmlParse3986URIReference(uri, str);
957
15.0M
        if (ret) {
958
1.07M
      xmlFreeURI(uri);
959
1.07M
      return(NULL);
960
1.07M
  }
961
15.0M
    }
962
13.9M
    return(uri);
963
15.0M
}
964
965
/**
966
 * xmlParseURIReference:
967
 * @uri:  pointer to an URI structure
968
 * @str:  the string to analyze
969
 *
970
 * Parse an URI reference string based on RFC 3986 and fills in the
971
 * appropriate fields of the @uri structure
972
 *
973
 * URI-reference = URI / relative-ref
974
 *
975
 * Returns 0 or the error code
976
 */
977
int
978
1.50M
xmlParseURIReference(xmlURIPtr uri, const char *str) {
979
1.50M
    return(xmlParse3986URIReference(uri, str));
980
1.50M
}
981
982
/**
983
 * xmlParseURIRaw:
984
 * @str:  the URI string to analyze
985
 * @raw:  if 1 unescaping of URI pieces are disabled
986
 *
987
 * Parse an URI but allows to keep intact the original fragments.
988
 *
989
 * URI-reference = URI / relative-ref
990
 *
991
 * Returns a newly built xmlURIPtr or NULL in case of error
992
 */
993
xmlURIPtr
994
0
xmlParseURIRaw(const char *str, int raw) {
995
0
    xmlURIPtr uri;
996
0
    int ret;
997
998
0
    if (str == NULL)
999
0
  return(NULL);
1000
0
    uri = xmlCreateURI();
1001
0
    if (uri != NULL) {
1002
0
        if (raw) {
1003
0
      uri->cleanup |= 2;
1004
0
  }
1005
0
  ret = xmlParseURIReference(uri, str);
1006
0
        if (ret) {
1007
0
      xmlFreeURI(uri);
1008
0
      return(NULL);
1009
0
  }
1010
0
    }
1011
0
    return(uri);
1012
0
}
1013
1014
/************************************************************************
1015
 *                  *
1016
 *      Generic URI structure functions     *
1017
 *                  *
1018
 ************************************************************************/
1019
1020
/**
1021
 * xmlCreateURI:
1022
 *
1023
 * Simply creates an empty xmlURI
1024
 *
1025
 * Returns the new structure or NULL in case of error
1026
 */
1027
xmlURIPtr
1028
16.8M
xmlCreateURI(void) {
1029
16.8M
    xmlURIPtr ret;
1030
1031
16.8M
    ret = (xmlURIPtr) xmlMalloc(sizeof(xmlURI));
1032
16.8M
    if (ret == NULL) {
1033
0
        xmlURIErrMemory("creating URI structure\n");
1034
0
  return(NULL);
1035
0
    }
1036
16.8M
    memset(ret, 0, sizeof(xmlURI));
1037
16.8M
    ret->port = PORT_EMPTY;
1038
16.8M
    return(ret);
1039
16.8M
}
1040
1041
/**
1042
 * xmlSaveUriRealloc:
1043
 *
1044
 * Function to handle properly a reallocation when saving an URI
1045
 * Also imposes some limit on the length of an URI string output
1046
 */
1047
static xmlChar *
1048
702k
xmlSaveUriRealloc(xmlChar *ret, int *max) {
1049
702k
    xmlChar *temp;
1050
702k
    int tmp;
1051
1052
702k
    if (*max > MAX_URI_LENGTH) {
1053
4.98k
        xmlURIErrMemory("reaching arbitrary MAX_URI_LENGTH limit\n");
1054
4.98k
        return(NULL);
1055
4.98k
    }
1056
697k
    tmp = *max * 2;
1057
697k
    temp = (xmlChar *) xmlRealloc(ret, (tmp + 1));
1058
697k
    if (temp == NULL) {
1059
0
        xmlURIErrMemory("saving URI\n");
1060
0
        return(NULL);
1061
0
    }
1062
697k
    *max = tmp;
1063
697k
    return(temp);
1064
697k
}
1065
1066
/**
1067
 * xmlSaveUri:
1068
 * @uri:  pointer to an xmlURI
1069
 *
1070
 * Save the URI as an escaped string
1071
 *
1072
 * Returns a new string (to be deallocated by caller)
1073
 */
1074
xmlChar *
1075
1.39M
xmlSaveUri(xmlURIPtr uri) {
1076
1.39M
    xmlChar *ret = NULL;
1077
1.39M
    xmlChar *temp;
1078
1.39M
    const char *p;
1079
1.39M
    int len;
1080
1.39M
    int max;
1081
1082
1.39M
    if (uri == NULL) return(NULL);
1083
1084
1085
1.39M
    max = 80;
1086
1.39M
    ret = (xmlChar *) xmlMallocAtomic(max + 1);
1087
1.39M
    if (ret == NULL) {
1088
0
        xmlURIErrMemory("saving URI\n");
1089
0
  return(NULL);
1090
0
    }
1091
1.39M
    len = 0;
1092
1093
1.39M
    if (uri->scheme != NULL) {
1094
15.2k
  p = uri->scheme;
1095
7.13M
  while (*p != 0) {
1096
7.11M
      if (len >= max) {
1097
4.97k
                temp = xmlSaveUriRealloc(ret, &max);
1098
4.97k
                if (temp == NULL) goto mem_error;
1099
4.97k
    ret = temp;
1100
4.97k
      }
1101
7.11M
      ret[len++] = *p++;
1102
7.11M
  }
1103
15.2k
  if (len >= max) {
1104
6
            temp = xmlSaveUriRealloc(ret, &max);
1105
6
            if (temp == NULL) goto mem_error;
1106
6
            ret = temp;
1107
6
  }
1108
15.2k
  ret[len++] = ':';
1109
15.2k
    }
1110
1.39M
    if (uri->opaque != NULL) {
1111
0
  p = uri->opaque;
1112
0
  while (*p != 0) {
1113
0
      if (len + 3 >= max) {
1114
0
                temp = xmlSaveUriRealloc(ret, &max);
1115
0
                if (temp == NULL) goto mem_error;
1116
0
                ret = temp;
1117
0
      }
1118
0
      if (IS_RESERVED(*(p)) || IS_UNRESERVED(*(p)))
1119
0
    ret[len++] = *p++;
1120
0
      else {
1121
0
    int val = *(unsigned char *)p++;
1122
0
    int hi = val / 0x10, lo = val % 0x10;
1123
0
    ret[len++] = '%';
1124
0
    ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1125
0
    ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1126
0
      }
1127
0
  }
1128
1.39M
    } else {
1129
1.39M
  if ((uri->server != NULL) || (uri->port != PORT_EMPTY)) {
1130
13.4k
      if (len + 3 >= max) {
1131
0
                temp = xmlSaveUriRealloc(ret, &max);
1132
0
                if (temp == NULL) goto mem_error;
1133
0
                ret = temp;
1134
0
      }
1135
13.4k
      ret[len++] = '/';
1136
13.4k
      ret[len++] = '/';
1137
13.4k
      if (uri->user != NULL) {
1138
3.08k
    p = uri->user;
1139
11.9M
    while (*p != 0) {
1140
11.9M
        if (len + 3 >= max) {
1141
11.5k
                        temp = xmlSaveUriRealloc(ret, &max);
1142
11.5k
                        if (temp == NULL) goto mem_error;
1143
11.5k
                        ret = temp;
1144
11.5k
        }
1145
11.9M
        if ((IS_UNRESERVED(*(p))) ||
1146
11.9M
      ((*(p) == ';')) || ((*(p) == ':')) ||
1147
11.9M
      ((*(p) == '&')) || ((*(p) == '=')) ||
1148
11.9M
      ((*(p) == '+')) || ((*(p) == '$')) ||
1149
11.9M
      ((*(p) == ',')))
1150
11.4M
      ret[len++] = *p++;
1151
560k
        else {
1152
560k
      int val = *(unsigned char *)p++;
1153
560k
      int hi = val / 0x10, lo = val % 0x10;
1154
560k
      ret[len++] = '%';
1155
560k
      ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1156
560k
      ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1157
560k
        }
1158
11.9M
    }
1159
3.08k
    if (len + 3 >= max) {
1160
58
                    temp = xmlSaveUriRealloc(ret, &max);
1161
58
                    if (temp == NULL) goto mem_error;
1162
58
                    ret = temp;
1163
58
    }
1164
3.08k
    ret[len++] = '@';
1165
3.08k
      }
1166
13.4k
      if (uri->server != NULL) {
1167
13.4k
    p = uri->server;
1168
15.1M
    while (*p != 0) {
1169
15.1M
        if (len >= max) {
1170
15.8k
      temp = xmlSaveUriRealloc(ret, &max);
1171
15.8k
      if (temp == NULL) goto mem_error;
1172
15.8k
      ret = temp;
1173
15.8k
        }
1174
                    /* TODO: escaping? */
1175
15.1M
        ret[len++] = (xmlChar) *p++;
1176
15.1M
    }
1177
13.4k
      }
1178
13.4k
            if (uri->port > 0) {
1179
0
                if (len + 10 >= max) {
1180
0
                    temp = xmlSaveUriRealloc(ret, &max);
1181
0
                    if (temp == NULL) goto mem_error;
1182
0
                    ret = temp;
1183
0
                }
1184
0
                len += snprintf((char *) &ret[len], max - len, ":%d", uri->port);
1185
0
            }
1186
1.38M
  } else if (uri->authority != NULL) {
1187
0
      if (len + 3 >= max) {
1188
0
                temp = xmlSaveUriRealloc(ret, &max);
1189
0
                if (temp == NULL) goto mem_error;
1190
0
                ret = temp;
1191
0
      }
1192
0
      ret[len++] = '/';
1193
0
      ret[len++] = '/';
1194
0
      p = uri->authority;
1195
0
      while (*p != 0) {
1196
0
    if (len + 3 >= max) {
1197
0
                    temp = xmlSaveUriRealloc(ret, &max);
1198
0
                    if (temp == NULL) goto mem_error;
1199
0
                    ret = temp;
1200
0
    }
1201
0
    if ((IS_UNRESERVED(*(p))) ||
1202
0
                    ((*(p) == '$')) || ((*(p) == ',')) || ((*(p) == ';')) ||
1203
0
                    ((*(p) == ':')) || ((*(p) == '@')) || ((*(p) == '&')) ||
1204
0
                    ((*(p) == '=')) || ((*(p) == '+')))
1205
0
        ret[len++] = *p++;
1206
0
    else {
1207
0
        int val = *(unsigned char *)p++;
1208
0
        int hi = val / 0x10, lo = val % 0x10;
1209
0
        ret[len++] = '%';
1210
0
        ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1211
0
        ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1212
0
    }
1213
0
      }
1214
1.38M
  } else if (uri->scheme != NULL) {
1215
2.11k
      if (len + 3 >= max) {
1216
30
                temp = xmlSaveUriRealloc(ret, &max);
1217
30
                if (temp == NULL) goto mem_error;
1218
30
                ret = temp;
1219
30
      }
1220
2.11k
  }
1221
1.39M
  if (uri->path != NULL) {
1222
1.39M
      p = uri->path;
1223
      /*
1224
       * the colon in file:///d: should not be escaped or
1225
       * Windows accesses fail later.
1226
       */
1227
1.39M
      if ((uri->scheme != NULL) &&
1228
1.39M
    (p[0] == '/') &&
1229
1.39M
    (((p[1] >= 'a') && (p[1] <= 'z')) ||
1230
13.2k
     ((p[1] >= 'A') && (p[1] <= 'Z'))) &&
1231
1.39M
    (p[2] == ':') &&
1232
1.39M
          (xmlStrEqual(BAD_CAST uri->scheme, BAD_CAST "file"))) {
1233
0
    if (len + 3 >= max) {
1234
0
                    temp = xmlSaveUriRealloc(ret, &max);
1235
0
                    if (temp == NULL) goto mem_error;
1236
0
                    ret = temp;
1237
0
    }
1238
0
    ret[len++] = *p++;
1239
0
    ret[len++] = *p++;
1240
0
    ret[len++] = *p++;
1241
0
      }
1242
6.52G
      while (*p != 0) {
1243
6.52G
    if (len + 3 >= max) {
1244
601k
                    temp = xmlSaveUriRealloc(ret, &max);
1245
601k
                    if (temp == NULL) goto mem_error;
1246
596k
                    ret = temp;
1247
596k
    }
1248
6.52G
    if ((IS_UNRESERVED(*(p))) || ((*(p) == '/')) ||
1249
6.52G
                    ((*(p) == ';')) || ((*(p) == '@')) || ((*(p) == '&')) ||
1250
6.52G
              ((*(p) == '=')) || ((*(p) == '+')) || ((*(p) == '$')) ||
1251
6.52G
              ((*(p) == ',')))
1252
4.42G
        ret[len++] = *p++;
1253
2.10G
    else {
1254
2.10G
        int val = *(unsigned char *)p++;
1255
2.10G
        int hi = val / 0x10, lo = val % 0x10;
1256
2.10G
        ret[len++] = '%';
1257
2.10G
        ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1258
2.10G
        ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1259
2.10G
    }
1260
6.52G
      }
1261
1.39M
  }
1262
1.39M
  if (uri->query_raw != NULL) {
1263
5.92k
      if (len + 1 >= max) {
1264
5
                temp = xmlSaveUriRealloc(ret, &max);
1265
5
                if (temp == NULL) goto mem_error;
1266
5
                ret = temp;
1267
5
      }
1268
5.92k
      ret[len++] = '?';
1269
5.92k
      p = uri->query_raw;
1270
22.7M
      while (*p != 0) {
1271
22.7M
    if (len + 1 >= max) {
1272
7.47k
                    temp = xmlSaveUriRealloc(ret, &max);
1273
7.47k
                    if (temp == NULL) goto mem_error;
1274
7.47k
                    ret = temp;
1275
7.47k
    }
1276
22.7M
    ret[len++] = *p++;
1277
22.7M
      }
1278
1.38M
  } else if (uri->query != NULL) {
1279
0
      if (len + 3 >= max) {
1280
0
                temp = xmlSaveUriRealloc(ret, &max);
1281
0
                if (temp == NULL) goto mem_error;
1282
0
                ret = temp;
1283
0
      }
1284
0
      ret[len++] = '?';
1285
0
      p = uri->query;
1286
0
      while (*p != 0) {
1287
0
    if (len + 3 >= max) {
1288
0
                    temp = xmlSaveUriRealloc(ret, &max);
1289
0
                    if (temp == NULL) goto mem_error;
1290
0
                    ret = temp;
1291
0
    }
1292
0
    if ((IS_UNRESERVED(*(p))) || (IS_RESERVED(*(p))))
1293
0
        ret[len++] = *p++;
1294
0
    else {
1295
0
        int val = *(unsigned char *)p++;
1296
0
        int hi = val / 0x10, lo = val % 0x10;
1297
0
        ret[len++] = '%';
1298
0
        ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1299
0
        ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1300
0
    }
1301
0
      }
1302
0
  }
1303
1.39M
    }
1304
1.39M
    if (uri->fragment != NULL) {
1305
8.88k
  if (len + 3 >= max) {
1306
56
            temp = xmlSaveUriRealloc(ret, &max);
1307
56
            if (temp == NULL) goto mem_error;
1308
56
            ret = temp;
1309
56
  }
1310
8.88k
  ret[len++] = '#';
1311
8.88k
  p = uri->fragment;
1312
15.7M
  while (*p != 0) {
1313
15.7M
      if (len + 3 >= max) {
1314
10.0k
                temp = xmlSaveUriRealloc(ret, &max);
1315
10.0k
                if (temp == NULL) goto mem_error;
1316
10.0k
                ret = temp;
1317
10.0k
      }
1318
15.7M
      if ((IS_UNRESERVED(*(p))) || (IS_RESERVED(*(p))))
1319
15.7M
    ret[len++] = *p++;
1320
36
      else {
1321
36
    int val = *(unsigned char *)p++;
1322
36
    int hi = val / 0x10, lo = val % 0x10;
1323
36
    ret[len++] = '%';
1324
36
    ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1325
36
    ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1326
36
      }
1327
15.7M
  }
1328
8.88k
    }
1329
1.39M
    if (len >= max) {
1330
0
        temp = xmlSaveUriRealloc(ret, &max);
1331
0
        if (temp == NULL) goto mem_error;
1332
0
        ret = temp;
1333
0
    }
1334
1.39M
    ret[len] = 0;
1335
1.39M
    return(ret);
1336
1337
4.22k
mem_error:
1338
4.22k
    xmlFree(ret);
1339
4.22k
    return(NULL);
1340
1.39M
}
1341
1342
/**
1343
 * xmlPrintURI:
1344
 * @stream:  a FILE* for the output
1345
 * @uri:  pointer to an xmlURI
1346
 *
1347
 * Prints the URI in the stream @stream.
1348
 */
1349
void
1350
0
xmlPrintURI(FILE *stream, xmlURIPtr uri) {
1351
0
    xmlChar *out;
1352
1353
0
    out = xmlSaveUri(uri);
1354
0
    if (out != NULL) {
1355
0
  fprintf(stream, "%s", (char *) out);
1356
0
  xmlFree(out);
1357
0
    }
1358
0
}
1359
1360
/**
1361
 * xmlCleanURI:
1362
 * @uri:  pointer to an xmlURI
1363
 *
1364
 * Make sure the xmlURI struct is free of content
1365
 */
1366
static void
1367
35.0M
xmlCleanURI(xmlURIPtr uri) {
1368
35.0M
    if (uri == NULL) return;
1369
1370
35.0M
    if (uri->scheme != NULL) xmlFree(uri->scheme);
1371
35.0M
    uri->scheme = NULL;
1372
35.0M
    if (uri->server != NULL) xmlFree(uri->server);
1373
35.0M
    uri->server = NULL;
1374
35.0M
    if (uri->user != NULL) xmlFree(uri->user);
1375
35.0M
    uri->user = NULL;
1376
35.0M
    if (uri->path != NULL) xmlFree(uri->path);
1377
35.0M
    uri->path = NULL;
1378
35.0M
    if (uri->fragment != NULL) xmlFree(uri->fragment);
1379
35.0M
    uri->fragment = NULL;
1380
35.0M
    if (uri->opaque != NULL) xmlFree(uri->opaque);
1381
35.0M
    uri->opaque = NULL;
1382
35.0M
    if (uri->authority != NULL) xmlFree(uri->authority);
1383
35.0M
    uri->authority = NULL;
1384
35.0M
    if (uri->query != NULL) xmlFree(uri->query);
1385
35.0M
    uri->query = NULL;
1386
35.0M
    if (uri->query_raw != NULL) xmlFree(uri->query_raw);
1387
35.0M
    uri->query_raw = NULL;
1388
35.0M
}
1389
1390
/**
1391
 * xmlFreeURI:
1392
 * @uri:  pointer to an xmlURI
1393
 *
1394
 * Free up the xmlURI struct
1395
 */
1396
void
1397
16.8M
xmlFreeURI(xmlURIPtr uri) {
1398
16.8M
    if (uri == NULL) return;
1399
1400
16.8M
    if (uri->scheme != NULL) xmlFree(uri->scheme);
1401
16.8M
    if (uri->server != NULL) xmlFree(uri->server);
1402
16.8M
    if (uri->user != NULL) xmlFree(uri->user);
1403
16.8M
    if (uri->path != NULL) xmlFree(uri->path);
1404
16.8M
    if (uri->fragment != NULL) xmlFree(uri->fragment);
1405
16.8M
    if (uri->opaque != NULL) xmlFree(uri->opaque);
1406
16.8M
    if (uri->authority != NULL) xmlFree(uri->authority);
1407
16.8M
    if (uri->query != NULL) xmlFree(uri->query);
1408
16.8M
    if (uri->query_raw != NULL) xmlFree(uri->query_raw);
1409
16.8M
    xmlFree(uri);
1410
16.8M
}
1411
1412
/************************************************************************
1413
 *                  *
1414
 *      Helper functions        *
1415
 *                  *
1416
 ************************************************************************/
1417
1418
/**
1419
 * xmlNormalizeURIPath:
1420
 * @path:  pointer to the path string
1421
 *
1422
 * Applies the 5 normalization steps to a path string--that is, RFC 2396
1423
 * Section 5.2, steps 6.c through 6.g.
1424
 *
1425
 * Normalization occurs directly on the string, no new allocation is done
1426
 *
1427
 * Returns 0 or an error code
1428
 */
1429
int
1430
312k
xmlNormalizeURIPath(char *path) {
1431
312k
    char *cur, *out;
1432
1433
312k
    if (path == NULL)
1434
0
  return(-1);
1435
1436
    /* Skip all initial "/" chars.  We want to get to the beginning of the
1437
     * first non-empty segment.
1438
     */
1439
312k
    cur = path;
1440
325k
    while (cur[0] == '/')
1441
13.5k
      ++cur;
1442
312k
    if (cur[0] == '\0')
1443
0
      return(0);
1444
1445
    /* Keep everything we've seen so far.  */
1446
312k
    out = cur;
1447
1448
    /*
1449
     * Analyze each segment in sequence for cases (c) and (d).
1450
     */
1451
48.7M
    while (cur[0] != '\0') {
1452
  /*
1453
   * c) All occurrences of "./", where "." is a complete path segment,
1454
   *    are removed from the buffer string.
1455
   */
1456
48.7M
  if ((cur[0] == '.') && (cur[1] == '/')) {
1457
23
      cur += 2;
1458
      /* '//' normalization should be done at this point too */
1459
23
      while (cur[0] == '/')
1460
0
    cur++;
1461
23
      continue;
1462
23
  }
1463
1464
  /*
1465
   * d) If the buffer string ends with "." as a complete path segment,
1466
   *    that "." is removed.
1467
   */
1468
48.7M
  if ((cur[0] == '.') && (cur[1] == '\0'))
1469
2
      break;
1470
1471
  /* Otherwise keep the segment.  */
1472
1.44G
  while (cur[0] != '/') {
1473
1.39G
            if (cur[0] == '\0')
1474
311k
              goto done_cd;
1475
1.39G
      (out++)[0] = (cur++)[0];
1476
1.39G
  }
1477
  /* normalize // */
1478
48.4M
  while ((cur[0] == '/') && (cur[1] == '/'))
1479
19.3k
      cur++;
1480
1481
48.4M
        (out++)[0] = (cur++)[0];
1482
48.4M
    }
1483
312k
 done_cd:
1484
312k
    out[0] = '\0';
1485
1486
    /* Reset to the beginning of the first segment for the next sequence.  */
1487
312k
    cur = path;
1488
325k
    while (cur[0] == '/')
1489
13.5k
      ++cur;
1490
312k
    if (cur[0] == '\0')
1491
2
  return(0);
1492
1493
    /*
1494
     * Analyze each segment in sequence for cases (e) and (f).
1495
     *
1496
     * e) All occurrences of "<segment>/../", where <segment> is a
1497
     *    complete path segment not equal to "..", are removed from the
1498
     *    buffer string.  Removal of these path segments is performed
1499
     *    iteratively, removing the leftmost matching pattern on each
1500
     *    iteration, until no matching pattern remains.
1501
     *
1502
     * f) If the buffer string ends with "<segment>/..", where <segment>
1503
     *    is a complete path segment not equal to "..", that
1504
     *    "<segment>/.." is removed.
1505
     *
1506
     * To satisfy the "iterative" clause in (e), we need to collapse the
1507
     * string every time we find something that needs to be removed.  Thus,
1508
     * we don't need to keep two pointers into the string: we only need a
1509
     * "current position" pointer.
1510
     */
1511
48.7M
    while (1) {
1512
48.7M
        char *segp, *tmp;
1513
1514
        /* At the beginning of each iteration of this loop, "cur" points to
1515
         * the first character of the segment we want to examine.
1516
         */
1517
1518
        /* Find the end of the current segment.  */
1519
48.7M
        segp = cur;
1520
1.44G
        while ((segp[0] != '/') && (segp[0] != '\0'))
1521
1.39G
          ++segp;
1522
1523
        /* If this is the last segment, we're done (we need at least two
1524
         * segments to meet the criteria for the (e) and (f) cases).
1525
         */
1526
48.7M
        if (segp[0] == '\0')
1527
312k
          break;
1528
1529
        /* If the first segment is "..", or if the next segment _isn't_ "..",
1530
         * keep this segment and try the next one.
1531
         */
1532
48.4M
        ++segp;
1533
48.4M
        if (((cur[0] == '.') && (cur[1] == '.') && (segp == cur+3))
1534
48.4M
            || ((segp[0] != '.') || (segp[1] != '.')
1535
48.4M
                || ((segp[2] != '/') && (segp[2] != '\0')))) {
1536
48.4M
          cur = segp;
1537
48.4M
          continue;
1538
48.4M
        }
1539
1540
        /* If we get here, remove this segment and the next one and back up
1541
         * to the previous segment (if there is one), to implement the
1542
         * "iteratively" clause.  It's pretty much impossible to back up
1543
         * while maintaining two pointers into the buffer, so just compact
1544
         * the whole buffer now.
1545
         */
1546
1547
        /* If this is the end of the buffer, we're done.  */
1548
458
        if (segp[2] == '\0') {
1549
0
          cur[0] = '\0';
1550
0
          break;
1551
0
        }
1552
        /* Valgrind complained, strcpy(cur, segp + 3); */
1553
        /* string will overlap, do not use strcpy */
1554
458
        tmp = cur;
1555
458
        segp += 3;
1556
9.49M
        while ((*tmp++ = *segp++) != 0)
1557
9.49M
          ;
1558
1559
        /* If there are no previous segments, then keep going from here.  */
1560
458
        segp = cur;
1561
916
        while ((segp > path) && ((--segp)[0] == '/'))
1562
458
          ;
1563
458
        if (segp == path)
1564
29
          continue;
1565
1566
        /* "segp" is pointing to the end of a previous segment; find it's
1567
         * start.  We need to back up to the previous segment and start
1568
         * over with that to handle things like "foo/bar/../..".  If we
1569
         * don't do this, then on the first pass we'll remove the "bar/..",
1570
         * but be pointing at the second ".." so we won't realize we can also
1571
         * remove the "foo/..".
1572
         */
1573
429
        cur = segp;
1574
63.4k
        while ((cur > path) && (cur[-1] != '/'))
1575
62.9k
          --cur;
1576
429
    }
1577
312k
    out[0] = '\0';
1578
1579
    /*
1580
     * g) If the resulting buffer string still begins with one or more
1581
     *    complete path segments of "..", then the reference is
1582
     *    considered to be in error. Implementations may handle this
1583
     *    error by retaining these components in the resolved path (i.e.,
1584
     *    treating them as part of the final URI), by removing them from
1585
     *    the resolved path (i.e., discarding relative levels above the
1586
     *    root), or by avoiding traversal of the reference.
1587
     *
1588
     * We discard them from the final path.
1589
     */
1590
312k
    if (path[0] == '/') {
1591
13.3k
      cur = path;
1592
13.4k
      while ((cur[0] == '/') && (cur[1] == '.') && (cur[2] == '.')
1593
13.4k
             && ((cur[3] == '/') || (cur[3] == '\0')))
1594
145
  cur += 3;
1595
1596
13.3k
      if (cur != path) {
1597
26
  out = path;
1598
463k
  while (cur[0] != '\0')
1599
463k
          (out++)[0] = (cur++)[0];
1600
26
  out[0] = 0;
1601
26
      }
1602
13.3k
    }
1603
1604
312k
    return(0);
1605
312k
}
1606
1607
5.86G
static int is_hex(char c) {
1608
5.86G
    if (((c >= '0') && (c <= '9')) ||
1609
5.86G
        ((c >= 'a') && (c <= 'f')) ||
1610
5.86G
        ((c >= 'A') && (c <= 'F')))
1611
5.86G
  return(1);
1612
237k
    return(0);
1613
5.86G
}
1614
1615
/**
1616
 * xmlURIUnescapeString:
1617
 * @str:  the string to unescape
1618
 * @len:   the length in bytes to unescape (or <= 0 to indicate full string)
1619
 * @target:  optional destination buffer
1620
 *
1621
 * Unescaping routine, but does not check that the string is an URI. The
1622
 * output is a direct unsigned char translation of %XX values (no encoding)
1623
 * Note that the length of the result can only be smaller or same size as
1624
 * the input string.
1625
 *
1626
 * Returns a copy of the string, but unescaped, will return NULL only in case
1627
 * of error
1628
 */
1629
char *
1630
17.0M
xmlURIUnescapeString(const char *str, int len, char *target) {
1631
17.0M
    char *ret, *out;
1632
17.0M
    const char *in;
1633
1634
17.0M
    if (str == NULL)
1635
0
  return(NULL);
1636
17.0M
    if (len <= 0) len = strlen(str);
1637
17.0M
    if (len < 0) return(NULL);
1638
1639
17.0M
    if (target == NULL) {
1640
17.0M
  ret = (char *) xmlMallocAtomic(len + 1);
1641
17.0M
  if (ret == NULL) {
1642
0
            xmlURIErrMemory("unescaping URI value\n");
1643
0
      return(NULL);
1644
0
  }
1645
17.0M
    } else
1646
0
  ret = target;
1647
17.0M
    in = str;
1648
17.0M
    out = ret;
1649
8.91G
    while(len > 0) {
1650
8.90G
  if ((len > 2) && (*in == '%') && (is_hex(in[1])) && (is_hex(in[2]))) {
1651
2.93G
            int c = 0;
1652
2.93G
      in++;
1653
2.93G
      if ((*in >= '0') && (*in <= '9'))
1654
2.92G
          c = (*in - '0');
1655
8.70M
      else if ((*in >= 'a') && (*in <= 'f'))
1656
16.1k
          c = (*in - 'a') + 10;
1657
8.69M
      else if ((*in >= 'A') && (*in <= 'F'))
1658
8.69M
          c = (*in - 'A') + 10;
1659
2.93G
      in++;
1660
2.93G
      if ((*in >= '0') && (*in <= '9'))
1661
2.21G
          c = c * 16 + (*in - '0');
1662
716M
      else if ((*in >= 'a') && (*in <= 'f'))
1663
16.1k
          c = c * 16 + (*in - 'a') + 10;
1664
716M
      else if ((*in >= 'A') && (*in <= 'F'))
1665
716M
          c = c * 16 + (*in - 'A') + 10;
1666
2.93G
      in++;
1667
2.93G
      len -= 3;
1668
            /* Explicit sign change */
1669
2.93G
      *out++ = (char) c;
1670
5.96G
  } else {
1671
5.96G
      *out++ = *in++;
1672
5.96G
      len--;
1673
5.96G
  }
1674
8.90G
    }
1675
17.0M
    *out = 0;
1676
17.0M
    return(ret);
1677
17.0M
}
1678
1679
/**
1680
 * xmlURIEscapeStr:
1681
 * @str:  string to escape
1682
 * @list: exception list string of chars not to escape
1683
 *
1684
 * This routine escapes a string to hex, ignoring reserved characters
1685
 * (a-z, A-Z, 0-9, "@-_.!~*'()") and the characters in the exception list.
1686
 *
1687
 * Returns a new escaped string or NULL in case of error.
1688
 */
1689
xmlChar *
1690
53.2k
xmlURIEscapeStr(const xmlChar *str, const xmlChar *list) {
1691
53.2k
    xmlChar *ret, ch;
1692
53.2k
    xmlChar *temp;
1693
53.2k
    const xmlChar *in;
1694
53.2k
    int len, out;
1695
1696
53.2k
    if (str == NULL)
1697
0
  return(NULL);
1698
53.2k
    if (str[0] == 0)
1699
0
  return(xmlStrdup(str));
1700
53.2k
    len = xmlStrlen(str);
1701
53.2k
    if (!(len > 0)) return(NULL);
1702
1703
53.2k
    len += 20;
1704
53.2k
    ret = (xmlChar *) xmlMallocAtomic(len);
1705
53.2k
    if (ret == NULL) {
1706
0
        xmlURIErrMemory("escaping URI value\n");
1707
0
  return(NULL);
1708
0
    }
1709
53.2k
    in = (const xmlChar *) str;
1710
53.2k
    out = 0;
1711
8.81G
    while(*in != 0) {
1712
8.81G
  if (len - out <= 3) {
1713
50.8k
            temp = xmlSaveUriRealloc(ret, &len);
1714
50.8k
      if (temp == NULL) {
1715
760
                xmlURIErrMemory("escaping URI value\n");
1716
760
    xmlFree(ret);
1717
760
    return(NULL);
1718
760
      }
1719
50.0k
      ret = temp;
1720
50.0k
  }
1721
1722
8.81G
  ch = *in;
1723
1724
8.81G
  if ((ch != '@') && (!IS_UNRESERVED(ch)) && (!xmlStrchr(list, ch))) {
1725
2.89G
      unsigned char val;
1726
2.89G
      ret[out++] = '%';
1727
2.89G
      val = ch >> 4;
1728
2.89G
      if (val <= 9)
1729
2.88G
    ret[out++] = '0' + val;
1730
7.28M
      else
1731
7.28M
    ret[out++] = 'A' + val - 0xA;
1732
2.89G
      val = ch & 0xF;
1733
2.89G
      if (val <= 9)
1734
2.17G
    ret[out++] = '0' + val;
1735
720M
      else
1736
720M
    ret[out++] = 'A' + val - 0xA;
1737
2.89G
      in++;
1738
5.91G
  } else {
1739
5.91G
      ret[out++] = *in++;
1740
5.91G
  }
1741
1742
8.81G
    }
1743
52.4k
    ret[out] = 0;
1744
52.4k
    return(ret);
1745
53.2k
}
1746
1747
/**
1748
 * xmlURIEscape:
1749
 * @str:  the string of the URI to escape
1750
 *
1751
 * Escaping routine, does not do validity checks !
1752
 * It will try to escape the chars needing this, but this is heuristic
1753
 * based it's impossible to be sure.
1754
 *
1755
 * Returns an copy of the string, but escaped
1756
 *
1757
 * 25 May 2001
1758
 * Uses xmlParseURI and xmlURIEscapeStr to try to escape correctly
1759
 * according to RFC2396.
1760
 *   - Carl Douglas
1761
 */
1762
xmlChar *
1763
xmlURIEscape(const xmlChar * str)
1764
0
{
1765
0
    xmlChar *ret, *segment = NULL;
1766
0
    xmlURIPtr uri;
1767
0
    int ret2;
1768
1769
0
    if (str == NULL)
1770
0
        return (NULL);
1771
1772
0
    uri = xmlCreateURI();
1773
0
    if (uri != NULL) {
1774
  /*
1775
   * Allow escaping errors in the unescaped form
1776
   */
1777
0
        uri->cleanup = 1;
1778
0
        ret2 = xmlParseURIReference(uri, (const char *)str);
1779
0
        if (ret2) {
1780
0
            xmlFreeURI(uri);
1781
0
            return (NULL);
1782
0
        }
1783
0
    }
1784
1785
0
    if (!uri)
1786
0
        return NULL;
1787
1788
0
    ret = NULL;
1789
1790
0
#define NULLCHK(p) if(!p) { \
1791
0
         xmlURIErrMemory("escaping URI value\n"); \
1792
0
         xmlFreeURI(uri); \
1793
0
         xmlFree(ret); \
1794
0
         return NULL; } \
1795
0
1796
0
    if (uri->scheme) {
1797
0
        segment = xmlURIEscapeStr(BAD_CAST uri->scheme, BAD_CAST "+-.");
1798
0
        NULLCHK(segment)
1799
0
        ret = xmlStrcat(ret, segment);
1800
0
        ret = xmlStrcat(ret, BAD_CAST ":");
1801
0
        xmlFree(segment);
1802
0
    }
1803
1804
0
    if (uri->authority) {
1805
0
        segment =
1806
0
            xmlURIEscapeStr(BAD_CAST uri->authority, BAD_CAST "/?;:@");
1807
0
        NULLCHK(segment)
1808
0
        ret = xmlStrcat(ret, BAD_CAST "//");
1809
0
        ret = xmlStrcat(ret, segment);
1810
0
        xmlFree(segment);
1811
0
    }
1812
1813
0
    if (uri->user) {
1814
0
        segment = xmlURIEscapeStr(BAD_CAST uri->user, BAD_CAST ";:&=+$,");
1815
0
        NULLCHK(segment)
1816
0
        ret = xmlStrcat(ret,BAD_CAST "//");
1817
0
        ret = xmlStrcat(ret, segment);
1818
0
        ret = xmlStrcat(ret, BAD_CAST "@");
1819
0
        xmlFree(segment);
1820
0
    }
1821
1822
0
    if (uri->server) {
1823
0
        segment = xmlURIEscapeStr(BAD_CAST uri->server, BAD_CAST "/?;:@");
1824
0
        NULLCHK(segment)
1825
0
        if (uri->user == NULL)
1826
0
            ret = xmlStrcat(ret, BAD_CAST "//");
1827
0
        ret = xmlStrcat(ret, segment);
1828
0
        xmlFree(segment);
1829
0
    }
1830
1831
0
    if (uri->port > 0) {
1832
0
        xmlChar port[11];
1833
1834
0
        snprintf((char *) port, 11, "%d", uri->port);
1835
0
        ret = xmlStrcat(ret, BAD_CAST ":");
1836
0
        ret = xmlStrcat(ret, port);
1837
0
    }
1838
1839
0
    if (uri->path) {
1840
0
        segment =
1841
0
            xmlURIEscapeStr(BAD_CAST uri->path, BAD_CAST ":@&=+$,/?;");
1842
0
        NULLCHK(segment)
1843
0
        ret = xmlStrcat(ret, segment);
1844
0
        xmlFree(segment);
1845
0
    }
1846
1847
0
    if (uri->query_raw) {
1848
0
        ret = xmlStrcat(ret, BAD_CAST "?");
1849
0
        ret = xmlStrcat(ret, BAD_CAST uri->query_raw);
1850
0
    }
1851
0
    else if (uri->query) {
1852
0
        segment =
1853
0
            xmlURIEscapeStr(BAD_CAST uri->query, BAD_CAST ";/?:@&=+,$");
1854
0
        NULLCHK(segment)
1855
0
        ret = xmlStrcat(ret, BAD_CAST "?");
1856
0
        ret = xmlStrcat(ret, segment);
1857
0
        xmlFree(segment);
1858
0
    }
1859
1860
0
    if (uri->opaque) {
1861
0
        segment = xmlURIEscapeStr(BAD_CAST uri->opaque, BAD_CAST "");
1862
0
        NULLCHK(segment)
1863
0
        ret = xmlStrcat(ret, segment);
1864
0
        xmlFree(segment);
1865
0
    }
1866
1867
0
    if (uri->fragment) {
1868
0
        segment = xmlURIEscapeStr(BAD_CAST uri->fragment, BAD_CAST "#");
1869
0
        NULLCHK(segment)
1870
0
        ret = xmlStrcat(ret, BAD_CAST "#");
1871
0
        ret = xmlStrcat(ret, segment);
1872
0
        xmlFree(segment);
1873
0
    }
1874
1875
0
    xmlFreeURI(uri);
1876
0
#undef NULLCHK
1877
1878
0
    return (ret);
1879
0
}
1880
1881
/************************************************************************
1882
 *                  *
1883
 *      Public functions        *
1884
 *                  *
1885
 ************************************************************************/
1886
1887
/**
1888
 * xmlBuildURI:
1889
 * @URI:  the URI instance found in the document
1890
 * @base:  the base value
1891
 *
1892
 * Computes he final URI of the reference done by checking that
1893
 * the given URI is valid, and building the final URI using the
1894
 * base URI. This is processed according to section 5.2 of the
1895
 * RFC 2396
1896
 *
1897
 * 5.2. Resolving Relative References to Absolute Form
1898
 *
1899
 * Returns a new URI string (to be freed by the caller) or NULL in case
1900
 *         of error.
1901
 */
1902
xmlChar *
1903
1.12M
xmlBuildURI(const xmlChar *URI, const xmlChar *base) {
1904
1.12M
    xmlChar *val = NULL;
1905
1.12M
    int ret, len, indx, cur, out;
1906
1.12M
    xmlURIPtr ref = NULL;
1907
1.12M
    xmlURIPtr bas = NULL;
1908
1.12M
    xmlURIPtr res = NULL;
1909
1910
    /*
1911
     * 1) The URI reference is parsed into the potential four components and
1912
     *    fragment identifier, as described in Section 4.3.
1913
     *
1914
     *    NOTE that a completely empty URI is treated by modern browsers
1915
     *    as a reference to "." rather than as a synonym for the current
1916
     *    URI.  Should we do that here?
1917
     */
1918
1.12M
    if (URI == NULL)
1919
930
  ret = -1;
1920
1.12M
    else {
1921
1.12M
  if (*URI) {
1922
1.12M
      ref = xmlCreateURI();
1923
1.12M
      if (ref == NULL)
1924
0
    goto done;
1925
1.12M
      ret = xmlParseURIReference(ref, (const char *) URI);
1926
1.12M
  }
1927
238
  else
1928
238
      ret = 0;
1929
1.12M
    }
1930
1.12M
    if (ret != 0)
1931
23.7k
  goto done;
1932
1.09M
    if ((ref != NULL) && (ref->scheme != NULL)) {
1933
  /*
1934
   * The URI is absolute don't modify.
1935
   */
1936
72.8k
  val = xmlStrdup(URI);
1937
72.8k
  goto done;
1938
72.8k
    }
1939
1.02M
    if (base == NULL)
1940
637k
  ret = -1;
1941
388k
    else {
1942
388k
  bas = xmlCreateURI();
1943
388k
  if (bas == NULL)
1944
0
      goto done;
1945
388k
  ret = xmlParseURIReference(bas, (const char *) base);
1946
388k
    }
1947
1.02M
    if (ret != 0) {
1948
711k
  if (ref)
1949
711k
      val = xmlSaveUri(ref);
1950
711k
  goto done;
1951
711k
    }
1952
314k
    if (ref == NULL) {
1953
  /*
1954
   * the base fragment must be ignored
1955
   */
1956
136
  if (bas->fragment != NULL) {
1957
17
      xmlFree(bas->fragment);
1958
17
      bas->fragment = NULL;
1959
17
  }
1960
136
  val = xmlSaveUri(bas);
1961
136
  goto done;
1962
136
    }
1963
1964
    /*
1965
     * 2) If the path component is empty and the scheme, authority, and
1966
     *    query components are undefined, then it is a reference to the
1967
     *    current document and we are done.  Otherwise, the reference URI's
1968
     *    query and fragment components are defined as found (or not found)
1969
     *    within the URI reference and not inherited from the base URI.
1970
     *
1971
     *    NOTE that in modern browsers, the parsing differs from the above
1972
     *    in the following aspect:  the query component is allowed to be
1973
     *    defined while still treating this as a reference to the current
1974
     *    document.
1975
     */
1976
313k
    res = xmlCreateURI();
1977
313k
    if (res == NULL)
1978
0
  goto done;
1979
313k
    if ((ref->scheme == NULL) && (ref->path == NULL) &&
1980
313k
  ((ref->authority == NULL) && (ref->server == NULL) &&
1981
450
         (ref->port == PORT_EMPTY))) {
1982
388
  if (bas->scheme != NULL)
1983
87
      res->scheme = xmlMemStrdup(bas->scheme);
1984
388
  if (bas->authority != NULL)
1985
0
      res->authority = xmlMemStrdup(bas->authority);
1986
388
  else {
1987
388
      if (bas->server != NULL)
1988
87
    res->server = xmlMemStrdup(bas->server);
1989
388
      if (bas->user != NULL)
1990
39
    res->user = xmlMemStrdup(bas->user);
1991
388
      res->port = bas->port;
1992
388
  }
1993
388
  if (bas->path != NULL)
1994
332
      res->path = xmlMemStrdup(bas->path);
1995
388
  if (ref->query_raw != NULL)
1996
268
      res->query_raw = xmlMemStrdup (ref->query_raw);
1997
120
  else if (ref->query != NULL)
1998
0
      res->query = xmlMemStrdup(ref->query);
1999
120
  else if (bas->query_raw != NULL)
2000
56
      res->query_raw = xmlMemStrdup(bas->query_raw);
2001
64
  else if (bas->query != NULL)
2002
0
      res->query = xmlMemStrdup(bas->query);
2003
388
  if (ref->fragment != NULL)
2004
226
      res->fragment = xmlMemStrdup(ref->fragment);
2005
388
  goto step_7;
2006
388
    }
2007
2008
    /*
2009
     * 3) If the scheme component is defined, indicating that the reference
2010
     *    starts with a scheme name, then the reference is interpreted as an
2011
     *    absolute URI and we are done.  Otherwise, the reference URI's
2012
     *    scheme is inherited from the base URI's scheme component.
2013
     */
2014
313k
    if (ref->scheme != NULL) {
2015
0
  val = xmlSaveUri(ref);
2016
0
  goto done;
2017
0
    }
2018
313k
    if (bas->scheme != NULL)
2019
15.1k
  res->scheme = xmlMemStrdup(bas->scheme);
2020
2021
313k
    if (ref->query_raw != NULL)
2022
1.89k
  res->query_raw = xmlMemStrdup(ref->query_raw);
2023
311k
    else if (ref->query != NULL)
2024
0
  res->query = xmlMemStrdup(ref->query);
2025
313k
    if (ref->fragment != NULL)
2026
3.59k
  res->fragment = xmlMemStrdup(ref->fragment);
2027
2028
    /*
2029
     * 4) If the authority component is defined, then the reference is a
2030
     *    network-path and we skip to step 7.  Otherwise, the reference
2031
     *    URI's authority is inherited from the base URI's authority
2032
     *    component, which will also be undefined if the URI scheme does not
2033
     *    use an authority component.
2034
     */
2035
313k
    if ((ref->authority != NULL) || (ref->server != NULL) ||
2036
313k
         (ref->port != PORT_EMPTY)) {
2037
89
  if (ref->authority != NULL)
2038
0
      res->authority = xmlMemStrdup(ref->authority);
2039
89
  else {
2040
89
            if (ref->server != NULL)
2041
89
                res->server = xmlMemStrdup(ref->server);
2042
89
      if (ref->user != NULL)
2043
0
    res->user = xmlMemStrdup(ref->user);
2044
89
            res->port = ref->port;
2045
89
  }
2046
89
  if (ref->path != NULL)
2047
27
      res->path = xmlMemStrdup(ref->path);
2048
89
  goto step_7;
2049
89
    }
2050
313k
    if (bas->authority != NULL)
2051
0
  res->authority = xmlMemStrdup(bas->authority);
2052
313k
    else if ((bas->server != NULL) || (bas->port != PORT_EMPTY)) {
2053
13.1k
  if (bas->server != NULL)
2054
13.1k
      res->server = xmlMemStrdup(bas->server);
2055
13.1k
  if (bas->user != NULL)
2056
3.04k
      res->user = xmlMemStrdup(bas->user);
2057
13.1k
  res->port = bas->port;
2058
13.1k
    }
2059
2060
    /*
2061
     * 5) If the path component begins with a slash character ("/"), then
2062
     *    the reference is an absolute-path and we skip to step 7.
2063
     */
2064
313k
    if ((ref->path != NULL) && (ref->path[0] == '/')) {
2065
1.42k
  res->path = xmlMemStrdup(ref->path);
2066
1.42k
  goto step_7;
2067
1.42k
    }
2068
2069
2070
    /*
2071
     * 6) If this step is reached, then we are resolving a relative-path
2072
     *    reference.  The relative path needs to be merged with the base
2073
     *    URI's path.  Although there are many ways to do this, we will
2074
     *    describe a simple method using a separate string buffer.
2075
     *
2076
     * Allocate a buffer large enough for the result string.
2077
     */
2078
312k
    len = 2; /* extra / and 0 */
2079
312k
    if (ref->path != NULL)
2080
312k
  len += strlen(ref->path);
2081
312k
    if (bas->path != NULL)
2082
305k
  len += strlen(bas->path);
2083
312k
    res->path = (char *) xmlMallocAtomic(len);
2084
312k
    if (res->path == NULL) {
2085
0
        xmlURIErrMemory("resolving URI against base\n");
2086
0
  goto done;
2087
0
    }
2088
312k
    res->path[0] = 0;
2089
2090
    /*
2091
     * a) All but the last segment of the base URI's path component is
2092
     *    copied to the buffer.  In other words, any characters after the
2093
     *    last (right-most) slash character, if any, are excluded.
2094
     */
2095
312k
    cur = 0;
2096
312k
    out = 0;
2097
312k
    if (bas->path != NULL) {
2098
48.5M
  while (bas->path[cur] != 0) {
2099
1.43G
      while ((bas->path[cur] != 0) && (bas->path[cur] != '/'))
2100
1.38G
    cur++;
2101
48.5M
      if (bas->path[cur] == 0)
2102
305k
    break;
2103
2104
48.2M
      cur++;
2105
1.47G
      while (out < cur) {
2106
1.42G
    res->path[out] = bas->path[out];
2107
1.42G
    out++;
2108
1.42G
      }
2109
48.2M
  }
2110
305k
    }
2111
312k
    res->path[out] = 0;
2112
2113
    /*
2114
     * b) The reference's path component is appended to the buffer
2115
     *    string.
2116
     */
2117
312k
    if (ref->path != NULL && ref->path[0] != 0) {
2118
312k
  indx = 0;
2119
  /*
2120
   * Ensure the path includes a '/'
2121
   */
2122
312k
  if ((out == 0) && ((bas->server != NULL) || bas->port != PORT_EMPTY))
2123
2.27k
      res->path[out++] = '/';
2124
15.2M
  while (ref->path[indx] != 0) {
2125
14.9M
      res->path[out++] = ref->path[indx++];
2126
14.9M
  }
2127
312k
    }
2128
312k
    res->path[out] = 0;
2129
2130
    /*
2131
     * Steps c) to h) are really path normalization steps
2132
     */
2133
312k
    xmlNormalizeURIPath(res->path);
2134
2135
313k
step_7:
2136
2137
    /*
2138
     * 7) The resulting URI components, including any inherited from the
2139
     *    base URI, are recombined to give the absolute form of the URI
2140
     *    reference.
2141
     */
2142
313k
    val = xmlSaveUri(res);
2143
2144
1.12M
done:
2145
1.12M
    if (ref != NULL)
2146
1.12M
  xmlFreeURI(ref);
2147
1.12M
    if (bas != NULL)
2148
388k
  xmlFreeURI(bas);
2149
1.12M
    if (res != NULL)
2150
313k
  xmlFreeURI(res);
2151
1.12M
    return(val);
2152
313k
}
2153
2154
/**
2155
 * xmlBuildRelativeURI:
2156
 * @URI:  the URI reference under consideration
2157
 * @base:  the base value
2158
 *
2159
 * Expresses the URI of the reference in terms relative to the
2160
 * base.  Some examples of this operation include:
2161
 *     base = "http://site1.com/docs/book1.html"
2162
 *        URI input                        URI returned
2163
 *     docs/pic1.gif                    pic1.gif
2164
 *     docs/img/pic1.gif                img/pic1.gif
2165
 *     img/pic1.gif                     ../img/pic1.gif
2166
 *     http://site1.com/docs/pic1.gif   pic1.gif
2167
 *     http://site2.com/docs/pic1.gif   http://site2.com/docs/pic1.gif
2168
 *
2169
 *     base = "docs/book1.html"
2170
 *        URI input                        URI returned
2171
 *     docs/pic1.gif                    pic1.gif
2172
 *     docs/img/pic1.gif                img/pic1.gif
2173
 *     img/pic1.gif                     ../img/pic1.gif
2174
 *     http://site1.com/docs/pic1.gif   http://site1.com/docs/pic1.gif
2175
 *
2176
 *
2177
 * Note: if the URI reference is really weird or complicated, it may be
2178
 *       worthwhile to first convert it into a "nice" one by calling
2179
 *       xmlBuildURI (using 'base') before calling this routine,
2180
 *       since this routine (for reasonable efficiency) assumes URI has
2181
 *       already been through some validation.
2182
 *
2183
 * Returns a new URI string (to be freed by the caller) or NULL in case
2184
 * error.
2185
 */
2186
xmlChar *
2187
xmlBuildRelativeURI (const xmlChar * URI, const xmlChar * base)
2188
0
{
2189
0
    xmlChar *val = NULL;
2190
0
    int ret;
2191
0
    int ix;
2192
0
    int nbslash = 0;
2193
0
    int len;
2194
0
    xmlURIPtr ref = NULL;
2195
0
    xmlURIPtr bas = NULL;
2196
0
    xmlChar *bptr, *uptr, *vptr;
2197
0
    int remove_path = 0;
2198
2199
0
    if ((URI == NULL) || (*URI == 0))
2200
0
  return NULL;
2201
2202
    /*
2203
     * First parse URI into a standard form
2204
     */
2205
0
    ref = xmlCreateURI ();
2206
0
    if (ref == NULL)
2207
0
  return NULL;
2208
    /* If URI not already in "relative" form */
2209
0
    if (URI[0] != '.') {
2210
0
  ret = xmlParseURIReference (ref, (const char *) URI);
2211
0
  if (ret != 0)
2212
0
      goto done;   /* Error in URI, return NULL */
2213
0
    } else
2214
0
  ref->path = (char *)xmlStrdup(URI);
2215
2216
    /*
2217
     * Next parse base into the same standard form
2218
     */
2219
0
    if ((base == NULL) || (*base == 0)) {
2220
0
  val = xmlStrdup (URI);
2221
0
  goto done;
2222
0
    }
2223
0
    bas = xmlCreateURI ();
2224
0
    if (bas == NULL)
2225
0
  goto done;
2226
0
    if (base[0] != '.') {
2227
0
  ret = xmlParseURIReference (bas, (const char *) base);
2228
0
  if (ret != 0)
2229
0
      goto done;   /* Error in base, return NULL */
2230
0
    } else
2231
0
  bas->path = (char *)xmlStrdup(base);
2232
2233
    /*
2234
     * If the scheme / server on the URI differs from the base,
2235
     * just return the URI
2236
     */
2237
0
    if ((ref->scheme != NULL) &&
2238
0
  ((bas->scheme == NULL) ||
2239
0
   (xmlStrcmp ((xmlChar *)bas->scheme, (xmlChar *)ref->scheme)) ||
2240
0
   (xmlStrcmp ((xmlChar *)bas->server, (xmlChar *)ref->server)) ||
2241
0
         (bas->port != ref->port))) {
2242
0
  val = xmlStrdup (URI);
2243
0
  goto done;
2244
0
    }
2245
0
    if (xmlStrEqual((xmlChar *)bas->path, (xmlChar *)ref->path)) {
2246
0
  val = xmlStrdup(BAD_CAST "");
2247
0
  goto done;
2248
0
    }
2249
0
    if (bas->path == NULL) {
2250
0
  val = xmlStrdup((xmlChar *)ref->path);
2251
0
  goto done;
2252
0
    }
2253
0
    if (ref->path == NULL) {
2254
0
        ref->path = (char *) "/";
2255
0
  remove_path = 1;
2256
0
    }
2257
2258
    /*
2259
     * At this point (at last!) we can compare the two paths
2260
     *
2261
     * First we take care of the special case where either of the
2262
     * two path components may be missing (bug 316224)
2263
     */
2264
0
    bptr = (xmlChar *)bas->path;
2265
0
    {
2266
0
        xmlChar *rptr = (xmlChar *) ref->path;
2267
0
        int pos = 0;
2268
2269
        /*
2270
         * Next we compare the two strings and find where they first differ
2271
         */
2272
0
  if ((*rptr == '.') && (rptr[1] == '/'))
2273
0
            rptr += 2;
2274
0
  if ((*bptr == '.') && (bptr[1] == '/'))
2275
0
            bptr += 2;
2276
0
  else if ((*bptr == '/') && (*rptr != '/'))
2277
0
      bptr++;
2278
0
  while ((bptr[pos] == rptr[pos]) && (bptr[pos] != 0))
2279
0
      pos++;
2280
2281
0
  if (bptr[pos] == rptr[pos]) {
2282
0
      val = xmlStrdup(BAD_CAST "");
2283
0
      goto done;    /* (I can't imagine why anyone would do this) */
2284
0
  }
2285
2286
  /*
2287
   * In URI, "back up" to the last '/' encountered.  This will be the
2288
   * beginning of the "unique" suffix of URI
2289
   */
2290
0
  ix = pos;
2291
0
  for (; ix > 0; ix--) {
2292
0
      if (rptr[ix - 1] == '/')
2293
0
    break;
2294
0
  }
2295
0
  uptr = (xmlChar *)&rptr[ix];
2296
2297
  /*
2298
   * In base, count the number of '/' from the differing point
2299
   */
2300
0
  for (; bptr[ix] != 0; ix++) {
2301
0
      if (bptr[ix] == '/')
2302
0
    nbslash++;
2303
0
  }
2304
2305
  /*
2306
   * e.g: URI="foo/" base="foo/bar" -> "./"
2307
   */
2308
0
  if (nbslash == 0 && !uptr[0]) {
2309
0
      val = xmlStrdup(BAD_CAST "./");
2310
0
      goto done;
2311
0
  }
2312
2313
0
  len = xmlStrlen (uptr) + 1;
2314
0
    }
2315
2316
0
    if (nbslash == 0) {
2317
0
  if (uptr != NULL)
2318
      /* exception characters from xmlSaveUri */
2319
0
      val = xmlURIEscapeStr(uptr, BAD_CAST "/;&=+$,");
2320
0
  goto done;
2321
0
    }
2322
2323
    /*
2324
     * Allocate just enough space for the returned string -
2325
     * length of the remainder of the URI, plus enough space
2326
     * for the "../" groups, plus one for the terminator
2327
     */
2328
0
    val = (xmlChar *) xmlMalloc (len + 3 * nbslash);
2329
0
    if (val == NULL) {
2330
0
        xmlURIErrMemory("building relative URI\n");
2331
0
  goto done;
2332
0
    }
2333
0
    vptr = val;
2334
    /*
2335
     * Put in as many "../" as needed
2336
     */
2337
0
    for (; nbslash>0; nbslash--) {
2338
0
  *vptr++ = '.';
2339
0
  *vptr++ = '.';
2340
0
  *vptr++ = '/';
2341
0
    }
2342
    /*
2343
     * Finish up with the end of the URI
2344
     */
2345
0
    if (uptr != NULL) {
2346
0
        if ((vptr > val) && (len > 0) &&
2347
0
      (uptr[0] == '/') && (vptr[-1] == '/')) {
2348
0
      memcpy (vptr, uptr + 1, len - 1);
2349
0
      vptr[len - 2] = 0;
2350
0
  } else {
2351
0
      memcpy (vptr, uptr, len);
2352
0
      vptr[len - 1] = 0;
2353
0
  }
2354
0
    } else {
2355
0
  vptr[len - 1] = 0;
2356
0
    }
2357
2358
    /* escape the freshly-built path */
2359
0
    vptr = val;
2360
  /* exception characters from xmlSaveUri */
2361
0
    val = xmlURIEscapeStr(vptr, BAD_CAST "/;&=+$,");
2362
0
    xmlFree(vptr);
2363
2364
0
done:
2365
    /*
2366
     * Free the working variables
2367
     */
2368
0
    if (remove_path != 0)
2369
0
        ref->path = NULL;
2370
0
    if (ref != NULL)
2371
0
  xmlFreeURI (ref);
2372
0
    if (bas != NULL)
2373
0
  xmlFreeURI (bas);
2374
2375
0
    return val;
2376
0
}
2377
2378
/**
2379
 * xmlCanonicPath:
2380
 * @path:  the resource locator in a filesystem notation
2381
 *
2382
 * Constructs a canonic path from the specified path.
2383
 *
2384
 * Returns a new canonic path, or a duplicate of the path parameter if the
2385
 * construction fails. The caller is responsible for freeing the memory occupied
2386
 * by the returned string. If there is insufficient memory available, or the
2387
 * argument is NULL, the function returns NULL.
2388
 */
2389
#define IS_WINDOWS_PATH(p)          \
2390
  ((p != NULL) &&           \
2391
   (((p[0] >= 'a') && (p[0] <= 'z')) ||     \
2392
    ((p[0] >= 'A') && (p[0] <= 'Z'))) &&      \
2393
   (p[1] == ':') && ((p[2] == '/') || (p[2] == '\\')))
2394
xmlChar *
2395
xmlCanonicPath(const xmlChar *path)
2396
2.16M
{
2397
/*
2398
 * For Windows implementations, additional work needs to be done to
2399
 * replace backslashes in pathnames with "forward slashes"
2400
 */
2401
#if defined(_WIN32)
2402
    int len = 0;
2403
    char *p = NULL;
2404
#endif
2405
2.16M
    xmlURIPtr uri;
2406
2.16M
    xmlChar *ret;
2407
2.16M
    const xmlChar *absuri;
2408
2409
2.16M
    if (path == NULL)
2410
0
  return(NULL);
2411
2412
#if defined(_WIN32)
2413
    /*
2414
     * We must not change the backslashes to slashes if the the path
2415
     * starts with \\?\
2416
     * Those paths can be up to 32k characters long.
2417
     * Was added specifically for OpenOffice, those paths can't be converted
2418
     * to URIs anyway.
2419
     */
2420
    if ((path[0] == '\\') && (path[1] == '\\') && (path[2] == '?') &&
2421
        (path[3] == '\\') )
2422
  return xmlStrdup((const xmlChar *) path);
2423
#endif
2424
2425
  /* sanitize filename starting with // so it can be used as URI */
2426
2.16M
    if ((path[0] == '/') && (path[1] == '/') && (path[2] != '/'))
2427
1.46k
        path++;
2428
2429
2.16M
    if ((uri = xmlParseURI((const char *) path)) != NULL) {
2430
1.57M
  xmlFreeURI(uri);
2431
1.57M
  return xmlStrdup(path);
2432
1.57M
    }
2433
2434
    /* Check if this is an "absolute uri" */
2435
586k
    absuri = xmlStrstr(path, BAD_CAST "://");
2436
586k
    if (absuri != NULL) {
2437
95.8k
        int l, j;
2438
95.8k
  unsigned char c;
2439
95.8k
  xmlChar *escURI;
2440
2441
        /*
2442
   * this looks like an URI where some parts have not been
2443
   * escaped leading to a parsing problem.  Check that the first
2444
   * part matches a protocol.
2445
   */
2446
95.8k
  l = absuri - path;
2447
  /* Bypass if first part (part before the '://') is > 20 chars */
2448
95.8k
  if ((l <= 0) || (l > 20))
2449
36.8k
      goto path_processing;
2450
  /* Bypass if any non-alpha characters are present in first part */
2451
244k
  for (j = 0;j < l;j++) {
2452
191k
      c = path[j];
2453
191k
      if (!(((c >= 'a') && (c <= 'z')) || ((c >= 'A') && (c <= 'Z'))))
2454
5.81k
          goto path_processing;
2455
191k
  }
2456
2457
  /* Escape all except the characters specified in the supplied path */
2458
53.2k
        escURI = xmlURIEscapeStr(path, BAD_CAST ":/?_.#&;=");
2459
53.2k
  if (escURI != NULL) {
2460
      /* Try parsing the escaped path */
2461
52.4k
      uri = xmlParseURI((const char *) escURI);
2462
      /* If successful, return the escaped string */
2463
52.4k
      if (uri != NULL) {
2464
40.7k
          xmlFreeURI(uri);
2465
40.7k
    return escURI;
2466
40.7k
      }
2467
11.6k
            xmlFree(escURI);
2468
11.6k
  }
2469
53.2k
    }
2470
2471
545k
path_processing:
2472
/* For Windows implementations, replace backslashes with 'forward slashes' */
2473
#if defined(_WIN32)
2474
    /*
2475
     * Create a URI structure
2476
     */
2477
    uri = xmlCreateURI();
2478
    if (uri == NULL) {    /* Guard against 'out of memory' */
2479
        return(NULL);
2480
    }
2481
2482
    len = xmlStrlen(path);
2483
    if ((len > 2) && IS_WINDOWS_PATH(path)) {
2484
        /* make the scheme 'file' */
2485
  uri->scheme = (char *) xmlStrdup(BAD_CAST "file");
2486
  /* allocate space for leading '/' + path + string terminator */
2487
  uri->path = xmlMallocAtomic(len + 2);
2488
  if (uri->path == NULL) {
2489
      xmlFreeURI(uri);  /* Guard against 'out of memory' */
2490
      return(NULL);
2491
  }
2492
  /* Put in leading '/' plus path */
2493
  uri->path[0] = '/';
2494
  p = uri->path + 1;
2495
  strncpy(p, (char *) path, len + 1);
2496
    } else {
2497
  uri->path = (char *) xmlStrdup(path);
2498
  if (uri->path == NULL) {
2499
      xmlFreeURI(uri);
2500
      return(NULL);
2501
  }
2502
  p = uri->path;
2503
    }
2504
    /* Now change all occurrences of '\' to '/' */
2505
    while (*p != '\0') {
2506
  if (*p == '\\')
2507
      *p = '/';
2508
  p++;
2509
    }
2510
2511
    if (uri->scheme == NULL) {
2512
  ret = xmlStrdup((const xmlChar *) uri->path);
2513
    } else {
2514
  ret = xmlSaveUri(uri);
2515
    }
2516
2517
    xmlFreeURI(uri);
2518
#else
2519
545k
    ret = xmlStrdup((const xmlChar *) path);
2520
545k
#endif
2521
545k
    return(ret);
2522
586k
}
2523
2524
/**
2525
 * xmlPathToURI:
2526
 * @path:  the resource locator in a filesystem notation
2527
 *
2528
 * Constructs an URI expressing the existing path
2529
 *
2530
 * Returns a new URI, or a duplicate of the path parameter if the
2531
 * construction fails. The caller is responsible for freeing the memory
2532
 * occupied by the returned string. If there is insufficient memory available,
2533
 * or the argument is NULL, the function returns NULL.
2534
 */
2535
xmlChar *
2536
xmlPathToURI(const xmlChar *path)
2537
1.17M
{
2538
1.17M
    xmlURIPtr uri;
2539
1.17M
    xmlURI temp;
2540
1.17M
    xmlChar *ret, *cal;
2541
2542
1.17M
    if (path == NULL)
2543
0
        return(NULL);
2544
2545
1.17M
    if ((uri = xmlParseURI((const char *) path)) != NULL) {
2546
802k
  xmlFreeURI(uri);
2547
802k
  return xmlStrdup(path);
2548
802k
    }
2549
372k
    cal = xmlCanonicPath(path);
2550
372k
    if (cal == NULL)
2551
0
        return(NULL);
2552
#if defined(_WIN32)
2553
    /* xmlCanonicPath can return an URI on Windows (is that the intended behaviour?)
2554
       If 'cal' is a valid URI already then we are done here, as continuing would make
2555
       it invalid. */
2556
    if ((uri = xmlParseURI((const char *) cal)) != NULL) {
2557
  xmlFreeURI(uri);
2558
  return cal;
2559
    }
2560
    /* 'cal' can contain a relative path with backslashes. If that is processed
2561
       by xmlSaveURI, they will be escaped and the external entity loader machinery
2562
       will fail. So convert them to slashes. Misuse 'ret' for walking. */
2563
    ret = cal;
2564
    while (*ret != '\0') {
2565
  if (*ret == '\\')
2566
      *ret = '/';
2567
  ret++;
2568
    }
2569
#endif
2570
372k
    memset(&temp, 0, sizeof(temp));
2571
372k
    temp.path = (char *) cal;
2572
372k
    ret = xmlSaveUri(&temp);
2573
372k
    xmlFree(cal);
2574
372k
    return(ret);
2575
372k
}