Coverage Report

Created: 2025-03-12 04:16

/src/libxml2/uri.c
Line
Count
Source (jump to first uncovered line)
1
/**
2
 * uri.c: set of generic URI related routines
3
 *
4
 * Reference: RFCs 3986, 2732 and 2373
5
 *
6
 * See Copyright for the status of this software.
7
 *
8
 * daniel@veillard.com
9
 */
10
11
#define IN_LIBXML
12
#include "libxml.h"
13
14
#include <limits.h>
15
#include <string.h>
16
17
#include <libxml/xmlmemory.h>
18
#include <libxml/uri.h>
19
#include <libxml/globals.h>
20
#include <libxml/xmlerror.h>
21
22
#include "private/error.h"
23
24
/**
25
 * MAX_URI_LENGTH:
26
 *
27
 * The definition of the URI regexp in the above RFC has no size limit
28
 * In practice they are usually relatively short except for the
29
 * data URI scheme as defined in RFC 2397. Even for data URI the usual
30
 * maximum size before hitting random practical limits is around 64 KB
31
 * and 4KB is usually a maximum admitted limit for proper operations.
32
 * The value below is more a security limit than anything else and
33
 * really should never be hit by 'normal' operations
34
 * Set to 1 MByte in 2012, this is only enforced on output
35
 */
36
9.13k
#define MAX_URI_LENGTH 1024 * 1024
37
38
555k
#define PORT_EMPTY           0
39
1.38k
#define PORT_EMPTY_SERVER   -1
40
41
static void
42
xmlURIErrMemory(const char *extra)
43
0
{
44
0
    if (extra)
45
0
        __xmlRaiseError(NULL, NULL, NULL,
46
0
                        NULL, NULL, XML_FROM_URI,
47
0
                        XML_ERR_NO_MEMORY, XML_ERR_FATAL, NULL, 0,
48
0
                        extra, NULL, NULL, 0, 0,
49
0
                        "Memory allocation failed : %s\n", extra);
50
0
    else
51
0
        __xmlRaiseError(NULL, NULL, NULL,
52
0
                        NULL, NULL, XML_FROM_URI,
53
0
                        XML_ERR_NO_MEMORY, XML_ERR_FATAL, NULL, 0,
54
0
                        NULL, NULL, NULL, 0, 0,
55
0
                        "Memory allocation failed\n");
56
0
}
57
58
static void xmlCleanURI(xmlURIPtr uri);
59
60
/*
61
 * Old rule from 2396 used in legacy handling code
62
 * alpha    = lowalpha | upalpha
63
 */
64
52.1M
#define IS_ALPHA(x) (IS_LOWALPHA(x) || IS_UPALPHA(x))
65
66
67
/*
68
 * lowalpha = "a" | "b" | "c" | "d" | "e" | "f" | "g" | "h" | "i" | "j" |
69
 *            "k" | "l" | "m" | "n" | "o" | "p" | "q" | "r" | "s" | "t" |
70
 *            "u" | "v" | "w" | "x" | "y" | "z"
71
 */
72
73
52.1M
#define IS_LOWALPHA(x) (((x) >= 'a') && ((x) <= 'z'))
74
75
/*
76
 * upalpha = "A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" |
77
 *           "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" |
78
 *           "U" | "V" | "W" | "X" | "Y" | "Z"
79
 */
80
9.24M
#define IS_UPALPHA(x) (((x) >= 'A') && ((x) <= 'Z'))
81
82
#ifdef IS_DIGIT
83
#undef IS_DIGIT
84
#endif
85
/*
86
 * digit = "0" | "1" | "2" | "3" | "4" | "5" | "6" | "7" | "8" | "9"
87
 */
88
7.80M
#define IS_DIGIT(x) (((x) >= '0') && ((x) <= '9'))
89
90
/*
91
 * alphanum = alpha | digit
92
 */
93
94
52.1M
#define IS_ALPHANUM(x) (IS_ALPHA(x) || IS_DIGIT(x))
95
96
/*
97
 * mark = "-" | "_" | "." | "!" | "~" | "*" | "'" | "(" | ")"
98
 */
99
100
7.08M
#define IS_MARK(x) (((x) == '-') || ((x) == '_') || ((x) == '.') ||     \
101
7.08M
    ((x) == '!') || ((x) == '~') || ((x) == '*') || ((x) == '\'') ||    \
102
7.08M
    ((x) == '(') || ((x) == ')'))
103
104
/*
105
 * unwise = "{" | "}" | "|" | "\" | "^" | "`"
106
 */
107
108
#define IS_UNWISE(p)                                                    \
109
0
      (((*(p) == '{')) || ((*(p) == '}')) || ((*(p) == '|')) ||         \
110
0
       ((*(p) == '\\')) || ((*(p) == '^')) || ((*(p) == '[')) ||        \
111
0
       ((*(p) == ']')) || ((*(p) == '`')))
112
/*
113
 * reserved = ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" | "$" | "," |
114
 *            "[" | "]"
115
 */
116
117
1.30k
#define IS_RESERVED(x) (((x) == ';') || ((x) == '/') || ((x) == '?') || \
118
1.30k
        ((x) == ':') || ((x) == '@') || ((x) == '&') || ((x) == '=') || \
119
1.30k
        ((x) == '+') || ((x) == '$') || ((x) == ',') || ((x) == '[') || \
120
1.30k
        ((x) == ']'))
121
122
/*
123
 * unreserved = alphanum | mark
124
 */
125
126
26.0M
#define IS_UNRESERVED(x) (IS_ALPHANUM(x) || IS_MARK(x))
127
128
/*
129
 * Skip to next pointer char, handle escaped sequences
130
 */
131
132
6.21M
#define NEXT(p) ((*p == '%')? p += 3 : p++)
133
134
/*
135
 * Productions from the spec.
136
 *
137
 *    authority     = server | reg_name
138
 *    reg_name      = 1*( unreserved | escaped | "$" | "," |
139
 *                        ";" | ":" | "@" | "&" | "=" | "+" )
140
 *
141
 * path          = [ abs_path | opaque_part ]
142
 */
143
144
333k
#define STRNDUP(s, n) (char *) xmlStrndup((const xmlChar *)(s), (n))
145
146
/************************************************************************
147
 *                  *
148
 *                         RFC 3986 parser        *
149
 *                  *
150
 ************************************************************************/
151
152
6.71M
#define ISA_DIGIT(p) ((*(p) >= '0') && (*(p) <= '9'))
153
11.5M
#define ISA_ALPHA(p) (((*(p) >= 'a') && (*(p) <= 'z')) ||   \
154
11.5M
                      ((*(p) >= 'A') && (*(p) <= 'Z')))
155
#define ISA_HEXDIG(p)             \
156
717k
       (ISA_DIGIT(p) || ((*(p) >= 'a') && (*(p) <= 'f')) ||   \
157
717k
        ((*(p) >= 'A') && (*(p) <= 'F')))
158
159
/*
160
 *    sub-delims    = "!" / "$" / "&" / "'" / "(" / ")"
161
 *                     / "*" / "+" / "," / ";" / "="
162
 */
163
#define ISA_SUB_DELIM(p)            \
164
7.46M
      (((*(p) == '!')) || ((*(p) == '$')) || ((*(p) == '&')) ||   \
165
754k
       ((*(p) == '(')) || ((*(p) == ')')) || ((*(p) == '*')) ||   \
166
754k
       ((*(p) == '+')) || ((*(p) == ',')) || ((*(p) == ';')) ||   \
167
754k
       ((*(p) == '=')) || ((*(p) == '\'')))
168
169
/*
170
 *    gen-delims    = ":" / "/" / "?" / "#" / "[" / "]" / "@"
171
 */
172
#define ISA_GEN_DELIM(p)            \
173
      (((*(p) == ':')) || ((*(p) == '/')) || ((*(p) == '?')) ||         \
174
       ((*(p) == '#')) || ((*(p) == '[')) || ((*(p) == ']')) ||         \
175
       ((*(p) == '@')))
176
177
/*
178
 *    reserved      = gen-delims / sub-delims
179
 */
180
#define ISA_RESERVED(p) (ISA_GEN_DELIM(p) || (ISA_SUB_DELIM(p)))
181
182
/*
183
 *    unreserved    = ALPHA / DIGIT / "-" / "." / "_" / "~"
184
 */
185
#define ISA_UNRESERVED(p)           \
186
14.1M
      ((ISA_ALPHA(p)) || (ISA_DIGIT(p)) || ((*(p) == '-')) ||   \
187
7.06M
       ((*(p) == '.')) || ((*(p) == '_')) || ((*(p) == '~')))
188
189
/*
190
 *    pct-encoded   = "%" HEXDIG HEXDIG
191
 */
192
#define ISA_PCT_ENCODED(p)            \
193
8.17M
     ((*(p) == '%') && (ISA_HEXDIG(p + 1)) && (ISA_HEXDIG(p + 2)))
194
195
/*
196
 *    pchar         = unreserved / pct-encoded / sub-delims / ":" / "@"
197
 */
198
#define ISA_PCHAR(p)              \
199
10.5M
     (ISA_UNRESERVED(p) || ISA_PCT_ENCODED(p) || ISA_SUB_DELIM(p) ||  \
200
6.33M
      ((*(p) == ':')) || ((*(p) == '@')))
201
202
/**
203
 * xmlParse3986Scheme:
204
 * @uri:  pointer to an URI structure
205
 * @str:  pointer to the string to analyze
206
 *
207
 * Parse an URI scheme
208
 *
209
 * ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )
210
 *
211
 * Returns 0 or the error code
212
 */
213
static int
214
368k
xmlParse3986Scheme(xmlURIPtr uri, const char **str) {
215
368k
    const char *cur;
216
217
368k
    if (str == NULL)
218
0
  return(-1);
219
220
368k
    cur = *str;
221
368k
    if (!ISA_ALPHA(cur))
222
40.1k
  return(2);
223
328k
    cur++;
224
2.04M
    while (ISA_ALPHA(cur) || ISA_DIGIT(cur) ||
225
2.04M
           (*cur == '+') || (*cur == '-') || (*cur == '.')) cur++;
226
328k
    if (uri != NULL) {
227
328k
  if (uri->scheme != NULL) xmlFree(uri->scheme);
228
328k
  uri->scheme = STRNDUP(*str, cur - *str);
229
328k
    }
230
328k
    *str = cur;
231
328k
    return(0);
232
368k
}
233
234
/**
235
 * xmlParse3986Fragment:
236
 * @uri:  pointer to an URI structure
237
 * @str:  pointer to the string to analyze
238
 *
239
 * Parse the query part of an URI
240
 *
241
 * fragment      = *( pchar / "/" / "?" )
242
 * NOTE: the strict syntax as defined by 3986 does not allow '[' and ']'
243
 *       in the fragment identifier but this is used very broadly for
244
 *       xpointer scheme selection, so we are allowing it here to not break
245
 *       for example all the DocBook processing chains.
246
 *
247
 * Returns 0 or the error code
248
 */
249
static int
250
xmlParse3986Fragment(xmlURIPtr uri, const char **str)
251
6.01k
{
252
6.01k
    const char *cur;
253
254
6.01k
    if (str == NULL)
255
0
        return (-1);
256
257
6.01k
    cur = *str;
258
259
463k
    while ((ISA_PCHAR(cur)) || (*cur == '/') || (*cur == '?') ||
260
463k
           (*cur == '[') || (*cur == ']') ||
261
463k
           ((uri != NULL) && (uri->cleanup & 1) && (IS_UNWISE(cur))))
262
457k
        NEXT(cur);
263
6.01k
    if (uri != NULL) {
264
6.01k
        if (uri->fragment != NULL)
265
0
            xmlFree(uri->fragment);
266
6.01k
  if (uri->cleanup & 2)
267
0
      uri->fragment = STRNDUP(*str, cur - *str);
268
6.01k
  else
269
6.01k
      uri->fragment = xmlURIUnescapeString(*str, cur - *str, NULL);
270
6.01k
    }
271
6.01k
    *str = cur;
272
6.01k
    return (0);
273
6.01k
}
274
275
/**
276
 * xmlParse3986Query:
277
 * @uri:  pointer to an URI structure
278
 * @str:  pointer to the string to analyze
279
 *
280
 * Parse the query part of an URI
281
 *
282
 * query = *uric
283
 *
284
 * Returns 0 or the error code
285
 */
286
static int
287
xmlParse3986Query(xmlURIPtr uri, const char **str)
288
4.73k
{
289
4.73k
    const char *cur;
290
291
4.73k
    if (str == NULL)
292
0
        return (-1);
293
294
4.73k
    cur = *str;
295
296
789k
    while ((ISA_PCHAR(cur)) || (*cur == '/') || (*cur == '?') ||
297
789k
           ((uri != NULL) && (uri->cleanup & 1) && (IS_UNWISE(cur))))
298
784k
        NEXT(cur);
299
4.73k
    if (uri != NULL) {
300
4.73k
        if (uri->query != NULL)
301
0
            xmlFree(uri->query);
302
4.73k
  if (uri->cleanup & 2)
303
0
      uri->query = STRNDUP(*str, cur - *str);
304
4.73k
  else
305
4.73k
      uri->query = xmlURIUnescapeString(*str, cur - *str, NULL);
306
307
  /* Save the raw bytes of the query as well.
308
   * See: http://mail.gnome.org/archives/xml/2007-April/thread.html#00114
309
   */
310
4.73k
  if (uri->query_raw != NULL)
311
0
      xmlFree (uri->query_raw);
312
4.73k
  uri->query_raw = STRNDUP (*str, cur - *str);
313
4.73k
    }
314
4.73k
    *str = cur;
315
4.73k
    return (0);
316
4.73k
}
317
318
/**
319
 * xmlParse3986Port:
320
 * @uri:  pointer to an URI structure
321
 * @str:  the string to analyze
322
 *
323
 * Parse a port part and fills in the appropriate fields
324
 * of the @uri structure
325
 *
326
 * port          = *DIGIT
327
 *
328
 * Returns 0 or the error code
329
 */
330
static int
331
xmlParse3986Port(xmlURIPtr uri, const char **str)
332
1.11k
{
333
1.11k
    const char *cur = *str;
334
1.11k
    int port = 0;
335
336
1.11k
    if (ISA_DIGIT(cur)) {
337
390
  while (ISA_DIGIT(cur)) {
338
302
            int digit = *cur - '0';
339
340
302
            if (port > INT_MAX / 10)
341
5
                return(1);
342
297
            port *= 10;
343
297
            if (port > INT_MAX - digit)
344
0
                return(1);
345
297
      port += digit;
346
347
297
      cur++;
348
297
  }
349
88
  if (uri != NULL)
350
88
      uri->port = port;
351
88
  *str = cur;
352
88
  return(0);
353
93
    }
354
1.02k
    return(1);
355
1.11k
}
356
357
/**
358
 * xmlParse3986Userinfo:
359
 * @uri:  pointer to an URI structure
360
 * @str:  the string to analyze
361
 *
362
 * Parse an user information part and fills in the appropriate fields
363
 * of the @uri structure
364
 *
365
 * userinfo      = *( unreserved / pct-encoded / sub-delims / ":" )
366
 *
367
 * Returns 0 or the error code
368
 */
369
static int
370
xmlParse3986Userinfo(xmlURIPtr uri, const char **str)
371
28.9k
{
372
28.9k
    const char *cur;
373
374
28.9k
    cur = *str;
375
374k
    while (ISA_UNRESERVED(cur) || ISA_PCT_ENCODED(cur) ||
376
374k
           ISA_SUB_DELIM(cur) || (*cur == ':'))
377
345k
  NEXT(cur);
378
28.9k
    if (*cur == '@') {
379
1.68k
  if (uri != NULL) {
380
1.68k
      if (uri->user != NULL) xmlFree(uri->user);
381
1.68k
      if (uri->cleanup & 2)
382
0
    uri->user = STRNDUP(*str, cur - *str);
383
1.68k
      else
384
1.68k
    uri->user = xmlURIUnescapeString(*str, cur - *str, NULL);
385
1.68k
  }
386
1.68k
  *str = cur;
387
1.68k
  return(0);
388
1.68k
    }
389
27.2k
    return(1);
390
28.9k
}
391
392
/**
393
 * xmlParse3986DecOctet:
394
 * @str:  the string to analyze
395
 *
396
 *    dec-octet     = DIGIT                 ; 0-9
397
 *                  / %x31-39 DIGIT         ; 10-99
398
 *                  / "1" 2DIGIT            ; 100-199
399
 *                  / "2" %x30-34 DIGIT     ; 200-249
400
 *                  / "25" %x30-35          ; 250-255
401
 *
402
 * Skip a dec-octet.
403
 *
404
 * Returns 0 if found and skipped, 1 otherwise
405
 */
406
static int
407
203
xmlParse3986DecOctet(const char **str) {
408
203
    const char *cur = *str;
409
410
203
    if (!(ISA_DIGIT(cur)))
411
13
        return(1);
412
190
    if (!ISA_DIGIT(cur+1))
413
33
  cur++;
414
157
    else if ((*cur != '0') && (ISA_DIGIT(cur + 1)) && (!ISA_DIGIT(cur+2)))
415
0
  cur += 2;
416
157
    else if ((*cur == '1') && (ISA_DIGIT(cur + 1)) && (ISA_DIGIT(cur + 2)))
417
154
  cur += 3;
418
3
    else if ((*cur == '2') && (*(cur + 1) >= '0') &&
419
3
       (*(cur + 1) <= '4') && (ISA_DIGIT(cur + 2)))
420
0
  cur += 3;
421
3
    else if ((*cur == '2') && (*(cur + 1) == '5') &&
422
3
       (*(cur + 2) >= '0') && (*(cur + 1) <= '5'))
423
0
  cur += 3;
424
3
    else
425
3
        return(1);
426
187
    *str = cur;
427
187
    return(0);
428
190
}
429
/**
430
 * xmlParse3986Host:
431
 * @uri:  pointer to an URI structure
432
 * @str:  the string to analyze
433
 *
434
 * Parse an host part and fills in the appropriate fields
435
 * of the @uri structure
436
 *
437
 * host          = IP-literal / IPv4address / reg-name
438
 * IP-literal    = "[" ( IPv6address / IPvFuture  ) "]"
439
 * IPv4address   = dec-octet "." dec-octet "." dec-octet "." dec-octet
440
 * reg-name      = *( unreserved / pct-encoded / sub-delims )
441
 *
442
 * Returns 0 or the error code
443
 */
444
static int
445
xmlParse3986Host(xmlURIPtr uri, const char **str)
446
28.9k
{
447
28.9k
    const char *cur = *str;
448
28.9k
    const char *host;
449
450
28.9k
    host = cur;
451
    /*
452
     * IPv6 and future addressing scheme are enclosed between brackets
453
     */
454
28.9k
    if (*cur == '[') {
455
96
        cur++;
456
2.79k
  while ((*cur != ']') && (*cur != 0))
457
2.70k
      cur++;
458
96
  if (*cur != ']')
459
79
      return(1);
460
17
  cur++;
461
17
  goto found;
462
96
    }
463
    /*
464
     * try to parse an IPv4
465
     */
466
28.8k
    if (ISA_DIGIT(cur)) {
467
190
        if (xmlParse3986DecOctet(&cur) != 0)
468
3
      goto not_ipv4;
469
187
  if (*cur != '.')
470
174
      goto not_ipv4;
471
13
  cur++;
472
13
        if (xmlParse3986DecOctet(&cur) != 0)
473
13
      goto not_ipv4;
474
0
  if (*cur != '.')
475
0
      goto not_ipv4;
476
0
        if (xmlParse3986DecOctet(&cur) != 0)
477
0
      goto not_ipv4;
478
0
  if (*cur != '.')
479
0
      goto not_ipv4;
480
0
        if (xmlParse3986DecOctet(&cur) != 0)
481
0
      goto not_ipv4;
482
0
  goto found;
483
190
not_ipv4:
484
190
        cur = *str;
485
190
    }
486
    /*
487
     * then this should be a hostname which can be empty
488
     */
489
355k
    while (ISA_UNRESERVED(cur) || ISA_PCT_ENCODED(cur) || ISA_SUB_DELIM(cur))
490
327k
        NEXT(cur);
491
28.8k
found:
492
28.8k
    if (uri != NULL) {
493
28.8k
  if (uri->authority != NULL) xmlFree(uri->authority);
494
28.8k
  uri->authority = NULL;
495
28.8k
  if (uri->server != NULL) xmlFree(uri->server);
496
28.8k
  if (cur != host) {
497
27.3k
      if (uri->cleanup & 2)
498
0
    uri->server = STRNDUP(host, cur - host);
499
27.3k
      else
500
27.3k
    uri->server = xmlURIUnescapeString(host, cur - host, NULL);
501
27.3k
  } else
502
1.54k
      uri->server = NULL;
503
28.8k
    }
504
28.8k
    *str = cur;
505
28.8k
    return(0);
506
28.8k
}
507
508
/**
509
 * xmlParse3986Authority:
510
 * @uri:  pointer to an URI structure
511
 * @str:  the string to analyze
512
 *
513
 * Parse an authority part and fills in the appropriate fields
514
 * of the @uri structure
515
 *
516
 * authority     = [ userinfo "@" ] host [ ":" port ]
517
 *
518
 * Returns 0 or the error code
519
 */
520
static int
521
xmlParse3986Authority(xmlURIPtr uri, const char **str)
522
28.9k
{
523
28.9k
    const char *cur;
524
28.9k
    int ret;
525
526
28.9k
    cur = *str;
527
    /*
528
     * try to parse an userinfo and check for the trailing @
529
     */
530
28.9k
    ret = xmlParse3986Userinfo(uri, &cur);
531
28.9k
    if ((ret != 0) || (*cur != '@'))
532
27.2k
        cur = *str;
533
1.68k
    else
534
1.68k
        cur++;
535
28.9k
    ret = xmlParse3986Host(uri, &cur);
536
28.9k
    if (ret != 0) return(ret);
537
28.8k
    if (*cur == ':') {
538
1.11k
        cur++;
539
1.11k
        ret = xmlParse3986Port(uri, &cur);
540
1.11k
  if (ret != 0) return(ret);
541
1.11k
    }
542
27.8k
    *str = cur;
543
27.8k
    return(0);
544
28.8k
}
545
546
/**
547
 * xmlParse3986Segment:
548
 * @str:  the string to analyze
549
 * @forbid: an optional forbidden character
550
 * @empty: allow an empty segment
551
 *
552
 * Parse a segment and fills in the appropriate fields
553
 * of the @uri structure
554
 *
555
 * segment       = *pchar
556
 * segment-nz    = 1*pchar
557
 * segment-nz-nc = 1*( unreserved / pct-encoded / sub-delims / "@" )
558
 *               ; non-zero-length segment without any colon ":"
559
 *
560
 * Returns 0 or the error code
561
 */
562
static int
563
xmlParse3986Segment(const char **str, char forbid, int empty)
564
472k
{
565
472k
    const char *cur;
566
567
472k
    cur = *str;
568
472k
    if (!ISA_PCHAR(cur)) {
569
13.9k
        if (empty)
570
13.6k
      return(0);
571
343
  return(1);
572
13.9k
    }
573
4.25M
    while (ISA_PCHAR(cur) && (*cur != forbid))
574
3.79M
        NEXT(cur);
575
458k
    *str = cur;
576
458k
    return (0);
577
472k
}
578
579
/**
580
 * xmlParse3986PathAbEmpty:
581
 * @uri:  pointer to an URI structure
582
 * @str:  the string to analyze
583
 *
584
 * Parse an path absolute or empty and fills in the appropriate fields
585
 * of the @uri structure
586
 *
587
 * path-abempty  = *( "/" segment )
588
 *
589
 * Returns 0 or the error code
590
 */
591
static int
592
xmlParse3986PathAbEmpty(xmlURIPtr uri, const char **str)
593
27.8k
{
594
27.8k
    const char *cur;
595
27.8k
    int ret;
596
597
27.8k
    cur = *str;
598
599
78.1k
    while (*cur == '/') {
600
50.2k
        cur++;
601
50.2k
  ret = xmlParse3986Segment(&cur, 0, 1);
602
50.2k
  if (ret != 0) return(ret);
603
50.2k
    }
604
27.8k
    if (uri != NULL) {
605
27.8k
  if (uri->path != NULL) xmlFree(uri->path);
606
27.8k
        if (*str != cur) {
607
17.8k
            if (uri->cleanup & 2)
608
0
                uri->path = STRNDUP(*str, cur - *str);
609
17.8k
            else
610
17.8k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
611
17.8k
        } else {
612
9.99k
            uri->path = NULL;
613
9.99k
        }
614
27.8k
    }
615
27.8k
    *str = cur;
616
27.8k
    return (0);
617
27.8k
}
618
619
/**
620
 * xmlParse3986PathAbsolute:
621
 * @uri:  pointer to an URI structure
622
 * @str:  the string to analyze
623
 *
624
 * Parse an path absolute and fills in the appropriate fields
625
 * of the @uri structure
626
 *
627
 * path-absolute = "/" [ segment-nz *( "/" segment ) ]
628
 *
629
 * Returns 0 or the error code
630
 */
631
static int
632
xmlParse3986PathAbsolute(xmlURIPtr uri, const char **str)
633
2.02k
{
634
2.02k
    const char *cur;
635
2.02k
    int ret;
636
637
2.02k
    cur = *str;
638
639
2.02k
    if (*cur != '/')
640
0
        return(1);
641
2.02k
    cur++;
642
2.02k
    ret = xmlParse3986Segment(&cur, 0, 0);
643
2.02k
    if (ret == 0) {
644
3.20k
  while (*cur == '/') {
645
1.52k
      cur++;
646
1.52k
      ret = xmlParse3986Segment(&cur, 0, 1);
647
1.52k
      if (ret != 0) return(ret);
648
1.52k
  }
649
1.68k
    }
650
2.02k
    if (uri != NULL) {
651
2.02k
  if (uri->path != NULL) xmlFree(uri->path);
652
2.02k
        if (cur != *str) {
653
2.02k
            if (uri->cleanup & 2)
654
0
                uri->path = STRNDUP(*str, cur - *str);
655
2.02k
            else
656
2.02k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
657
2.02k
        } else {
658
0
            uri->path = NULL;
659
0
        }
660
2.02k
    }
661
2.02k
    *str = cur;
662
2.02k
    return (0);
663
2.02k
}
664
665
/**
666
 * xmlParse3986PathRootless:
667
 * @uri:  pointer to an URI structure
668
 * @str:  the string to analyze
669
 *
670
 * Parse an path without root and fills in the appropriate fields
671
 * of the @uri structure
672
 *
673
 * path-rootless = segment-nz *( "/" segment )
674
 *
675
 * Returns 0 or the error code
676
 */
677
static int
678
xmlParse3986PathRootless(xmlURIPtr uri, const char **str)
679
7.75k
{
680
7.75k
    const char *cur;
681
7.75k
    int ret;
682
683
7.75k
    cur = *str;
684
685
7.75k
    ret = xmlParse3986Segment(&cur, 0, 0);
686
7.75k
    if (ret != 0) return(ret);
687
9.80k
    while (*cur == '/') {
688
2.04k
        cur++;
689
2.04k
  ret = xmlParse3986Segment(&cur, 0, 1);
690
2.04k
  if (ret != 0) return(ret);
691
2.04k
    }
692
7.75k
    if (uri != NULL) {
693
7.75k
  if (uri->path != NULL) xmlFree(uri->path);
694
7.75k
        if (cur != *str) {
695
7.75k
            if (uri->cleanup & 2)
696
0
                uri->path = STRNDUP(*str, cur - *str);
697
7.75k
            else
698
7.75k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
699
7.75k
        } else {
700
0
            uri->path = NULL;
701
0
        }
702
7.75k
    }
703
7.75k
    *str = cur;
704
7.75k
    return (0);
705
7.75k
}
706
707
/**
708
 * xmlParse3986PathNoScheme:
709
 * @uri:  pointer to an URI structure
710
 * @str:  the string to analyze
711
 *
712
 * Parse an path which is not a scheme and fills in the appropriate fields
713
 * of the @uri structure
714
 *
715
 * path-noscheme = segment-nz-nc *( "/" segment )
716
 *
717
 * Returns 0 or the error code
718
 */
719
static int
720
xmlParse3986PathNoScheme(xmlURIPtr uri, const char **str)
721
326k
{
722
326k
    const char *cur;
723
326k
    int ret;
724
725
326k
    cur = *str;
726
727
326k
    ret = xmlParse3986Segment(&cur, ':', 0);
728
326k
    if (ret != 0) return(ret);
729
409k
    while (*cur == '/') {
730
82.7k
        cur++;
731
82.7k
  ret = xmlParse3986Segment(&cur, 0, 1);
732
82.7k
  if (ret != 0) return(ret);
733
82.7k
    }
734
326k
    if (uri != NULL) {
735
326k
  if (uri->path != NULL) xmlFree(uri->path);
736
326k
        if (cur != *str) {
737
325k
            if (uri->cleanup & 2)
738
0
                uri->path = STRNDUP(*str, cur - *str);
739
325k
            else
740
325k
                uri->path = xmlURIUnescapeString(*str, cur - *str, NULL);
741
325k
        } else {
742
416
            uri->path = NULL;
743
416
        }
744
326k
    }
745
326k
    *str = cur;
746
326k
    return (0);
747
326k
}
748
749
/**
750
 * xmlParse3986HierPart:
751
 * @uri:  pointer to an URI structure
752
 * @str:  the string to analyze
753
 *
754
 * Parse an hierarchical part and fills in the appropriate fields
755
 * of the @uri structure
756
 *
757
 * hier-part     = "//" authority path-abempty
758
 *                / path-absolute
759
 *                / path-rootless
760
 *                / path-empty
761
 *
762
 * Returns 0 or the error code
763
 */
764
static int
765
xmlParse3986HierPart(xmlURIPtr uri, const char **str)
766
37.7k
{
767
37.7k
    const char *cur;
768
37.7k
    int ret;
769
770
37.7k
    cur = *str;
771
772
37.7k
    if ((*cur == '/') && (*(cur + 1) == '/')) {
773
28.6k
        cur += 2;
774
28.6k
  ret = xmlParse3986Authority(uri, &cur);
775
28.6k
  if (ret != 0) return(ret);
776
        /*
777
         * An empty server is marked with a special URI value.
778
         */
779
27.5k
  if ((uri->server == NULL) && (uri->port == PORT_EMPTY))
780
1.38k
      uri->port = PORT_EMPTY_SERVER;
781
27.5k
  ret = xmlParse3986PathAbEmpty(uri, &cur);
782
27.5k
  if (ret != 0) return(ret);
783
27.5k
  *str = cur;
784
27.5k
  return(0);
785
27.5k
    } else if (*cur == '/') {
786
687
        ret = xmlParse3986PathAbsolute(uri, &cur);
787
687
  if (ret != 0) return(ret);
788
8.38k
    } else if (ISA_PCHAR(cur)) {
789
7.75k
        ret = xmlParse3986PathRootless(uri, &cur);
790
7.75k
  if (ret != 0) return(ret);
791
7.75k
    } else {
792
  /* path-empty is effectively empty */
793
626
  if (uri != NULL) {
794
626
      if (uri->path != NULL) xmlFree(uri->path);
795
626
      uri->path = NULL;
796
626
  }
797
626
    }
798
9.07k
    *str = cur;
799
9.07k
    return (0);
800
37.7k
}
801
802
/**
803
 * xmlParse3986RelativeRef:
804
 * @uri:  pointer to an URI structure
805
 * @str:  the string to analyze
806
 *
807
 * Parse an URI string and fills in the appropriate fields
808
 * of the @uri structure
809
 *
810
 * relative-ref  = relative-part [ "?" query ] [ "#" fragment ]
811
 * relative-part = "//" authority path-abempty
812
 *               / path-absolute
813
 *               / path-noscheme
814
 *               / path-empty
815
 *
816
 * Returns 0 or the error code
817
 */
818
static int
819
341k
xmlParse3986RelativeRef(xmlURIPtr uri, const char *str) {
820
341k
    int ret;
821
822
341k
    if ((*str == '/') && (*(str + 1) == '/')) {
823
288
        str += 2;
824
288
  ret = xmlParse3986Authority(uri, &str);
825
288
  if (ret != 0) return(ret);
826
265
  ret = xmlParse3986PathAbEmpty(uri, &str);
827
265
  if (ret != 0) return(ret);
828
341k
    } else if (*str == '/') {
829
1.33k
  ret = xmlParse3986PathAbsolute(uri, &str);
830
1.33k
  if (ret != 0) return(ret);
831
339k
    } else if (ISA_PCHAR(str)) {
832
326k
        ret = xmlParse3986PathNoScheme(uri, &str);
833
326k
  if (ret != 0) return(ret);
834
326k
    } else {
835
  /* path-empty is effectively empty */
836
13.5k
  if (uri != NULL) {
837
13.5k
      if (uri->path != NULL) xmlFree(uri->path);
838
13.5k
      uri->path = NULL;
839
13.5k
  }
840
13.5k
    }
841
842
341k
    if (*str == '?') {
843
3.11k
  str++;
844
3.11k
  ret = xmlParse3986Query(uri, &str);
845
3.11k
  if (ret != 0) return(ret);
846
3.11k
    }
847
341k
    if (*str == '#') {
848
3.81k
  str++;
849
3.81k
  ret = xmlParse3986Fragment(uri, &str);
850
3.81k
  if (ret != 0) return(ret);
851
3.81k
    }
852
341k
    if (*str != 0) {
853
51.3k
  xmlCleanURI(uri);
854
51.3k
  return(1);
855
51.3k
    }
856
290k
    return(0);
857
341k
}
858
859
860
/**
861
 * xmlParse3986URI:
862
 * @uri:  pointer to an URI structure
863
 * @str:  the string to analyze
864
 *
865
 * Parse an URI string and fills in the appropriate fields
866
 * of the @uri structure
867
 *
868
 * scheme ":" hier-part [ "?" query ] [ "#" fragment ]
869
 *
870
 * Returns 0 or the error code
871
 */
872
static int
873
368k
xmlParse3986URI(xmlURIPtr uri, const char *str) {
874
368k
    int ret;
875
876
368k
    ret = xmlParse3986Scheme(uri, &str);
877
368k
    if (ret != 0) return(ret);
878
328k
    if (*str != ':') {
879
290k
  return(1);
880
290k
    }
881
37.7k
    str++;
882
37.7k
    ret = xmlParse3986HierPart(uri, &str);
883
37.7k
    if (ret != 0) return(ret);
884
36.6k
    if (*str == '?') {
885
1.62k
  str++;
886
1.62k
  ret = xmlParse3986Query(uri, &str);
887
1.62k
  if (ret != 0) return(ret);
888
1.62k
    }
889
36.6k
    if (*str == '#') {
890
2.20k
  str++;
891
2.20k
  ret = xmlParse3986Fragment(uri, &str);
892
2.20k
  if (ret != 0) return(ret);
893
2.20k
    }
894
36.6k
    if (*str != 0) {
895
9.46k
  xmlCleanURI(uri);
896
9.46k
  return(1);
897
9.46k
    }
898
27.1k
    return(0);
899
36.6k
}
900
901
/**
902
 * xmlParse3986URIReference:
903
 * @uri:  pointer to an URI structure
904
 * @str:  the string to analyze
905
 *
906
 * Parse an URI reference string and fills in the appropriate fields
907
 * of the @uri structure
908
 *
909
 * URI-reference = URI / relative-ref
910
 *
911
 * Returns 0 or the error code
912
 */
913
static int
914
368k
xmlParse3986URIReference(xmlURIPtr uri, const char *str) {
915
368k
    int ret;
916
917
368k
    if (str == NULL)
918
0
  return(-1);
919
368k
    xmlCleanURI(uri);
920
921
    /*
922
     * Try first to parse absolute refs, then fallback to relative if
923
     * it fails.
924
     */
925
368k
    ret = xmlParse3986URI(uri, str);
926
368k
    if (ret != 0) {
927
341k
  xmlCleanURI(uri);
928
341k
        ret = xmlParse3986RelativeRef(uri, str);
929
341k
  if (ret != 0) {
930
51.3k
      xmlCleanURI(uri);
931
51.3k
      return(ret);
932
51.3k
  }
933
341k
    }
934
317k
    return(0);
935
368k
}
936
937
/**
938
 * xmlParseURI:
939
 * @str:  the URI string to analyze
940
 *
941
 * Parse an URI based on RFC 3986
942
 *
943
 * URI-reference = [ absoluteURI | relativeURI ] [ "#" fragment ]
944
 *
945
 * Returns a newly built xmlURIPtr or NULL in case of error
946
 */
947
xmlURIPtr
948
260k
xmlParseURI(const char *str) {
949
260k
    xmlURIPtr uri;
950
260k
    int ret;
951
952
260k
    if (str == NULL)
953
0
  return(NULL);
954
260k
    uri = xmlCreateURI();
955
260k
    if (uri != NULL) {
956
260k
  ret = xmlParse3986URIReference(uri, str);
957
260k
        if (ret) {
958
48.2k
      xmlFreeURI(uri);
959
48.2k
      return(NULL);
960
48.2k
  }
961
260k
    }
962
212k
    return(uri);
963
260k
}
964
965
/**
966
 * xmlParseURIReference:
967
 * @uri:  pointer to an URI structure
968
 * @str:  the string to analyze
969
 *
970
 * Parse an URI reference string based on RFC 3986 and fills in the
971
 * appropriate fields of the @uri structure
972
 *
973
 * URI-reference = URI / relative-ref
974
 *
975
 * Returns 0 or the error code
976
 */
977
int
978
108k
xmlParseURIReference(xmlURIPtr uri, const char *str) {
979
108k
    return(xmlParse3986URIReference(uri, str));
980
108k
}
981
982
/**
983
 * xmlParseURIRaw:
984
 * @str:  the URI string to analyze
985
 * @raw:  if 1 unescaping of URI pieces are disabled
986
 *
987
 * Parse an URI but allows to keep intact the original fragments.
988
 *
989
 * URI-reference = URI / relative-ref
990
 *
991
 * Returns a newly built xmlURIPtr or NULL in case of error
992
 */
993
xmlURIPtr
994
0
xmlParseURIRaw(const char *str, int raw) {
995
0
    xmlURIPtr uri;
996
0
    int ret;
997
998
0
    if (str == NULL)
999
0
  return(NULL);
1000
0
    uri = xmlCreateURI();
1001
0
    if (uri != NULL) {
1002
0
        if (raw) {
1003
0
      uri->cleanup |= 2;
1004
0
  }
1005
0
  ret = xmlParseURIReference(uri, str);
1006
0
        if (ret) {
1007
0
      xmlFreeURI(uri);
1008
0
      return(NULL);
1009
0
  }
1010
0
    }
1011
0
    return(uri);
1012
0
}
1013
1014
/************************************************************************
1015
 *                  *
1016
 *      Generic URI structure functions     *
1017
 *                  *
1018
 ************************************************************************/
1019
1020
/**
1021
 * xmlCreateURI:
1022
 *
1023
 * Simply creates an empty xmlURI
1024
 *
1025
 * Returns the new structure or NULL in case of error
1026
 */
1027
xmlURIPtr
1028
392k
xmlCreateURI(void) {
1029
392k
    xmlURIPtr ret;
1030
1031
392k
    ret = (xmlURIPtr) xmlMalloc(sizeof(xmlURI));
1032
392k
    if (ret == NULL) {
1033
0
        xmlURIErrMemory("creating URI structure\n");
1034
0
  return(NULL);
1035
0
    }
1036
392k
    memset(ret, 0, sizeof(xmlURI));
1037
392k
    ret->port = PORT_EMPTY;
1038
392k
    return(ret);
1039
392k
}
1040
1041
/**
1042
 * xmlSaveUriRealloc:
1043
 *
1044
 * Function to handle properly a reallocation when saving an URI
1045
 * Also imposes some limit on the length of an URI string output
1046
 */
1047
static xmlChar *
1048
9.13k
xmlSaveUriRealloc(xmlChar *ret, int *max) {
1049
9.13k
    xmlChar *temp;
1050
9.13k
    int tmp;
1051
1052
9.13k
    if (*max > MAX_URI_LENGTH) {
1053
0
        xmlURIErrMemory("reaching arbitrary MAX_URI_LENGTH limit\n");
1054
0
        return(NULL);
1055
0
    }
1056
9.13k
    tmp = *max * 2;
1057
9.13k
    temp = (xmlChar *) xmlRealloc(ret, (tmp + 1));
1058
9.13k
    if (temp == NULL) {
1059
0
        xmlURIErrMemory("saving URI\n");
1060
0
        return(NULL);
1061
0
    }
1062
9.13k
    *max = tmp;
1063
9.13k
    return(temp);
1064
9.13k
}
1065
1066
/**
1067
 * xmlSaveUri:
1068
 * @uri:  pointer to an xmlURI
1069
 *
1070
 * Save the URI as an escaped string
1071
 *
1072
 * Returns a new string (to be deallocated by caller)
1073
 */
1074
xmlChar *
1075
93.8k
xmlSaveUri(xmlURIPtr uri) {
1076
93.8k
    xmlChar *ret = NULL;
1077
93.8k
    xmlChar *temp;
1078
93.8k
    const char *p;
1079
93.8k
    int len;
1080
93.8k
    int max;
1081
1082
93.8k
    if (uri == NULL) return(NULL);
1083
1084
1085
93.8k
    max = 80;
1086
93.8k
    ret = (xmlChar *) xmlMallocAtomic(max + 1);
1087
93.8k
    if (ret == NULL) {
1088
0
        xmlURIErrMemory("saving URI\n");
1089
0
  return(NULL);
1090
0
    }
1091
93.8k
    len = 0;
1092
1093
93.8k
    if (uri->scheme != NULL) {
1094
1.08k
  p = uri->scheme;
1095
4.82k
  while (*p != 0) {
1096
3.73k
      if (len >= max) {
1097
0
                temp = xmlSaveUriRealloc(ret, &max);
1098
0
                if (temp == NULL) goto mem_error;
1099
0
    ret = temp;
1100
0
      }
1101
3.73k
      ret[len++] = *p++;
1102
3.73k
  }
1103
1.08k
  if (len >= max) {
1104
0
            temp = xmlSaveUriRealloc(ret, &max);
1105
0
            if (temp == NULL) goto mem_error;
1106
0
            ret = temp;
1107
0
  }
1108
1.08k
  ret[len++] = ':';
1109
1.08k
    }
1110
93.8k
    if (uri->opaque != NULL) {
1111
0
  p = uri->opaque;
1112
0
  while (*p != 0) {
1113
0
      if (len + 3 >= max) {
1114
0
                temp = xmlSaveUriRealloc(ret, &max);
1115
0
                if (temp == NULL) goto mem_error;
1116
0
                ret = temp;
1117
0
      }
1118
0
      if (IS_RESERVED(*(p)) || IS_UNRESERVED(*(p)))
1119
0
    ret[len++] = *p++;
1120
0
      else {
1121
0
    int val = *(unsigned char *)p++;
1122
0
    int hi = val / 0x10, lo = val % 0x10;
1123
0
    ret[len++] = '%';
1124
0
    ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1125
0
    ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1126
0
      }
1127
0
  }
1128
93.8k
    } else {
1129
93.8k
  if ((uri->server != NULL) || (uri->port != PORT_EMPTY)) {
1130
625
      if (len + 3 >= max) {
1131
0
                temp = xmlSaveUriRealloc(ret, &max);
1132
0
                if (temp == NULL) goto mem_error;
1133
0
                ret = temp;
1134
0
      }
1135
625
      ret[len++] = '/';
1136
625
      ret[len++] = '/';
1137
625
      if (uri->user != NULL) {
1138
15
    p = uri->user;
1139
140
    while (*p != 0) {
1140
125
        if (len + 3 >= max) {
1141
1
                        temp = xmlSaveUriRealloc(ret, &max);
1142
1
                        if (temp == NULL) goto mem_error;
1143
1
                        ret = temp;
1144
1
        }
1145
125
        if ((IS_UNRESERVED(*(p))) ||
1146
125
      ((*(p) == ';')) || ((*(p) == ':')) ||
1147
125
      ((*(p) == '&')) || ((*(p) == '=')) ||
1148
125
      ((*(p) == '+')) || ((*(p) == '$')) ||
1149
125
      ((*(p) == ',')))
1150
93
      ret[len++] = *p++;
1151
32
        else {
1152
32
      int val = *(unsigned char *)p++;
1153
32
      int hi = val / 0x10, lo = val % 0x10;
1154
32
      ret[len++] = '%';
1155
32
      ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1156
32
      ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1157
32
        }
1158
125
    }
1159
15
    if (len + 3 >= max) {
1160
0
                    temp = xmlSaveUriRealloc(ret, &max);
1161
0
                    if (temp == NULL) goto mem_error;
1162
0
                    ret = temp;
1163
0
    }
1164
15
    ret[len++] = '@';
1165
15
      }
1166
625
      if (uri->server != NULL) {
1167
622
    p = uri->server;
1168
5.28k
    while (*p != 0) {
1169
4.66k
        if (len >= max) {
1170
0
      temp = xmlSaveUriRealloc(ret, &max);
1171
0
      if (temp == NULL) goto mem_error;
1172
0
      ret = temp;
1173
0
        }
1174
                    /* TODO: escaping? */
1175
4.66k
        ret[len++] = (xmlChar) *p++;
1176
4.66k
    }
1177
622
      }
1178
625
            if (uri->port > 0) {
1179
0
                if (len + 10 >= max) {
1180
0
                    temp = xmlSaveUriRealloc(ret, &max);
1181
0
                    if (temp == NULL) goto mem_error;
1182
0
                    ret = temp;
1183
0
                }
1184
0
                len += snprintf((char *) &ret[len], max - len, ":%d", uri->port);
1185
0
            }
1186
93.2k
  } else if (uri->authority != NULL) {
1187
0
      if (len + 3 >= max) {
1188
0
                temp = xmlSaveUriRealloc(ret, &max);
1189
0
                if (temp == NULL) goto mem_error;
1190
0
                ret = temp;
1191
0
      }
1192
0
      ret[len++] = '/';
1193
0
      ret[len++] = '/';
1194
0
      p = uri->authority;
1195
0
      while (*p != 0) {
1196
0
    if (len + 3 >= max) {
1197
0
                    temp = xmlSaveUriRealloc(ret, &max);
1198
0
                    if (temp == NULL) goto mem_error;
1199
0
                    ret = temp;
1200
0
    }
1201
0
    if ((IS_UNRESERVED(*(p))) ||
1202
0
                    ((*(p) == '$')) || ((*(p) == ',')) || ((*(p) == ';')) ||
1203
0
                    ((*(p) == ':')) || ((*(p) == '@')) || ((*(p) == '&')) ||
1204
0
                    ((*(p) == '=')) || ((*(p) == '+')))
1205
0
        ret[len++] = *p++;
1206
0
    else {
1207
0
        int val = *(unsigned char *)p++;
1208
0
        int hi = val / 0x10, lo = val % 0x10;
1209
0
        ret[len++] = '%';
1210
0
        ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1211
0
        ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1212
0
    }
1213
0
      }
1214
93.2k
  } else if (uri->scheme != NULL) {
1215
497
      if (len + 3 >= max) {
1216
0
                temp = xmlSaveUriRealloc(ret, &max);
1217
0
                if (temp == NULL) goto mem_error;
1218
0
                ret = temp;
1219
0
      }
1220
497
  }
1221
93.8k
  if (uri->path != NULL) {
1222
93.7k
      p = uri->path;
1223
      /*
1224
       * the colon in file:///d: should not be escaped or
1225
       * Windows accesses fail later.
1226
       */
1227
93.7k
      if ((uri->scheme != NULL) &&
1228
93.7k
    (p[0] == '/') &&
1229
93.7k
    (((p[1] >= 'a') && (p[1] <= 'z')) ||
1230
629
     ((p[1] >= 'A') && (p[1] <= 'Z'))) &&
1231
93.7k
    (p[2] == ':') &&
1232
93.7k
          (xmlStrEqual(BAD_CAST uri->scheme, BAD_CAST "file"))) {
1233
0
    if (len + 3 >= max) {
1234
0
                    temp = xmlSaveUriRealloc(ret, &max);
1235
0
                    if (temp == NULL) goto mem_error;
1236
0
                    ret = temp;
1237
0
    }
1238
0
    ret[len++] = *p++;
1239
0
    ret[len++] = *p++;
1240
0
    ret[len++] = *p++;
1241
0
      }
1242
13.5M
      while (*p != 0) {
1243
13.4M
    if (len + 3 >= max) {
1244
6.80k
                    temp = xmlSaveUriRealloc(ret, &max);
1245
6.80k
                    if (temp == NULL) goto mem_error;
1246
6.80k
                    ret = temp;
1247
6.80k
    }
1248
13.4M
    if ((IS_UNRESERVED(*(p))) || ((*(p) == '/')) ||
1249
13.4M
                    ((*(p) == ';')) || ((*(p) == '@')) || ((*(p) == '&')) ||
1250
13.4M
              ((*(p) == '=')) || ((*(p) == '+')) || ((*(p) == '$')) ||
1251
13.4M
              ((*(p) == ',')))
1252
10.8M
        ret[len++] = *p++;
1253
2.55M
    else {
1254
2.55M
        int val = *(unsigned char *)p++;
1255
2.55M
        int hi = val / 0x10, lo = val % 0x10;
1256
2.55M
        ret[len++] = '%';
1257
2.55M
        ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1258
2.55M
        ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1259
2.55M
    }
1260
13.4M
      }
1261
93.7k
  }
1262
93.8k
  if (uri->query_raw != NULL) {
1263
395
      if (len + 1 >= max) {
1264
0
                temp = xmlSaveUriRealloc(ret, &max);
1265
0
                if (temp == NULL) goto mem_error;
1266
0
                ret = temp;
1267
0
      }
1268
395
      ret[len++] = '?';
1269
395
      p = uri->query_raw;
1270
2.62k
      while (*p != 0) {
1271
2.22k
    if (len + 1 >= max) {
1272
0
                    temp = xmlSaveUriRealloc(ret, &max);
1273
0
                    if (temp == NULL) goto mem_error;
1274
0
                    ret = temp;
1275
0
    }
1276
2.22k
    ret[len++] = *p++;
1277
2.22k
      }
1278
93.5k
  } else if (uri->query != NULL) {
1279
0
      if (len + 3 >= max) {
1280
0
                temp = xmlSaveUriRealloc(ret, &max);
1281
0
                if (temp == NULL) goto mem_error;
1282
0
                ret = temp;
1283
0
      }
1284
0
      ret[len++] = '?';
1285
0
      p = uri->query;
1286
0
      while (*p != 0) {
1287
0
    if (len + 3 >= max) {
1288
0
                    temp = xmlSaveUriRealloc(ret, &max);
1289
0
                    if (temp == NULL) goto mem_error;
1290
0
                    ret = temp;
1291
0
    }
1292
0
    if ((IS_UNRESERVED(*(p))) || (IS_RESERVED(*(p))))
1293
0
        ret[len++] = *p++;
1294
0
    else {
1295
0
        int val = *(unsigned char *)p++;
1296
0
        int hi = val / 0x10, lo = val % 0x10;
1297
0
        ret[len++] = '%';
1298
0
        ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1299
0
        ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1300
0
    }
1301
0
      }
1302
0
  }
1303
93.8k
    }
1304
93.8k
    if (uri->fragment != NULL) {
1305
440
  if (len + 3 >= max) {
1306
0
            temp = xmlSaveUriRealloc(ret, &max);
1307
0
            if (temp == NULL) goto mem_error;
1308
0
            ret = temp;
1309
0
  }
1310
440
  ret[len++] = '#';
1311
440
  p = uri->fragment;
1312
9.57k
  while (*p != 0) {
1313
9.13k
      if (len + 3 >= max) {
1314
0
                temp = xmlSaveUriRealloc(ret, &max);
1315
0
                if (temp == NULL) goto mem_error;
1316
0
                ret = temp;
1317
0
      }
1318
9.13k
      if ((IS_UNRESERVED(*(p))) || (IS_RESERVED(*(p))))
1319
9.13k
    ret[len++] = *p++;
1320
0
      else {
1321
0
    int val = *(unsigned char *)p++;
1322
0
    int hi = val / 0x10, lo = val % 0x10;
1323
0
    ret[len++] = '%';
1324
0
    ret[len++] = hi + (hi > 9? 'A'-10 : '0');
1325
0
    ret[len++] = lo + (lo > 9? 'A'-10 : '0');
1326
0
      }
1327
9.13k
  }
1328
440
    }
1329
93.8k
    if (len >= max) {
1330
0
        temp = xmlSaveUriRealloc(ret, &max);
1331
0
        if (temp == NULL) goto mem_error;
1332
0
        ret = temp;
1333
0
    }
1334
93.8k
    ret[len] = 0;
1335
93.8k
    return(ret);
1336
1337
0
mem_error:
1338
0
    xmlFree(ret);
1339
0
    return(NULL);
1340
93.8k
}
1341
1342
/**
1343
 * xmlPrintURI:
1344
 * @stream:  a FILE* for the output
1345
 * @uri:  pointer to an xmlURI
1346
 *
1347
 * Prints the URI in the stream @stream.
1348
 */
1349
void
1350
0
xmlPrintURI(FILE *stream, xmlURIPtr uri) {
1351
0
    xmlChar *out;
1352
1353
0
    out = xmlSaveUri(uri);
1354
0
    if (out != NULL) {
1355
0
  fprintf(stream, "%s", (char *) out);
1356
0
  xmlFree(out);
1357
0
    }
1358
0
}
1359
1360
/**
1361
 * xmlCleanURI:
1362
 * @uri:  pointer to an xmlURI
1363
 *
1364
 * Make sure the xmlURI struct is free of content
1365
 */
1366
static void
1367
822k
xmlCleanURI(xmlURIPtr uri) {
1368
822k
    if (uri == NULL) return;
1369
1370
822k
    if (uri->scheme != NULL) xmlFree(uri->scheme);
1371
822k
    uri->scheme = NULL;
1372
822k
    if (uri->server != NULL) xmlFree(uri->server);
1373
822k
    uri->server = NULL;
1374
822k
    if (uri->user != NULL) xmlFree(uri->user);
1375
822k
    uri->user = NULL;
1376
822k
    if (uri->path != NULL) xmlFree(uri->path);
1377
822k
    uri->path = NULL;
1378
822k
    if (uri->fragment != NULL) xmlFree(uri->fragment);
1379
822k
    uri->fragment = NULL;
1380
822k
    if (uri->opaque != NULL) xmlFree(uri->opaque);
1381
822k
    uri->opaque = NULL;
1382
822k
    if (uri->authority != NULL) xmlFree(uri->authority);
1383
822k
    uri->authority = NULL;
1384
822k
    if (uri->query != NULL) xmlFree(uri->query);
1385
822k
    uri->query = NULL;
1386
822k
    if (uri->query_raw != NULL) xmlFree(uri->query_raw);
1387
822k
    uri->query_raw = NULL;
1388
822k
}
1389
1390
/**
1391
 * xmlFreeURI:
1392
 * @uri:  pointer to an xmlURI
1393
 *
1394
 * Free up the xmlURI struct
1395
 */
1396
void
1397
392k
xmlFreeURI(xmlURIPtr uri) {
1398
392k
    if (uri == NULL) return;
1399
1400
392k
    if (uri->scheme != NULL) xmlFree(uri->scheme);
1401
392k
    if (uri->server != NULL) xmlFree(uri->server);
1402
392k
    if (uri->user != NULL) xmlFree(uri->user);
1403
392k
    if (uri->path != NULL) xmlFree(uri->path);
1404
392k
    if (uri->fragment != NULL) xmlFree(uri->fragment);
1405
392k
    if (uri->opaque != NULL) xmlFree(uri->opaque);
1406
392k
    if (uri->authority != NULL) xmlFree(uri->authority);
1407
392k
    if (uri->query != NULL) xmlFree(uri->query);
1408
392k
    if (uri->query_raw != NULL) xmlFree(uri->query_raw);
1409
392k
    xmlFree(uri);
1410
392k
}
1411
1412
/************************************************************************
1413
 *                  *
1414
 *      Helper functions        *
1415
 *                  *
1416
 ************************************************************************/
1417
1418
/**
1419
 * xmlNormalizeURIPath:
1420
 * @path:  pointer to the path string
1421
 *
1422
 * Applies the 5 normalization steps to a path string--that is, RFC 2396
1423
 * Section 5.2, steps 6.c through 6.g.
1424
 *
1425
 * Normalization occurs directly on the string, no new allocation is done
1426
 *
1427
 * Returns 0 or an error code
1428
 */
1429
int
1430
23.6k
xmlNormalizeURIPath(char *path) {
1431
23.6k
    char *cur, *out;
1432
1433
23.6k
    if (path == NULL)
1434
0
  return(-1);
1435
1436
    /* Skip all initial "/" chars.  We want to get to the beginning of the
1437
     * first non-empty segment.
1438
     */
1439
23.6k
    cur = path;
1440
24.5k
    while (cur[0] == '/')
1441
867
      ++cur;
1442
23.6k
    if (cur[0] == '\0')
1443
0
      return(0);
1444
1445
    /* Keep everything we've seen so far.  */
1446
23.6k
    out = cur;
1447
1448
    /*
1449
     * Analyze each segment in sequence for cases (c) and (d).
1450
     */
1451
41.3k
    while (cur[0] != '\0') {
1452
  /*
1453
   * c) All occurrences of "./", where "." is a complete path segment,
1454
   *    are removed from the buffer string.
1455
   */
1456
41.2k
  if ((cur[0] == '.') && (cur[1] == '/')) {
1457
2
      cur += 2;
1458
      /* '//' normalization should be done at this point too */
1459
2
      while (cur[0] == '/')
1460
0
    cur++;
1461
2
      continue;
1462
2
  }
1463
1464
  /*
1465
   * d) If the buffer string ends with "." as a complete path segment,
1466
   *    that "." is removed.
1467
   */
1468
41.2k
  if ((cur[0] == '.') && (cur[1] == '\0'))
1469
0
      break;
1470
1471
  /* Otherwise keep the segment.  */
1472
330k
  while (cur[0] != '/') {
1473
312k
            if (cur[0] == '\0')
1474
23.5k
              goto done_cd;
1475
289k
      (out++)[0] = (cur++)[0];
1476
289k
  }
1477
  /* normalize // */
1478
18.3k
  while ((cur[0] == '/') && (cur[1] == '/'))
1479
648
      cur++;
1480
1481
17.7k
        (out++)[0] = (cur++)[0];
1482
17.7k
    }
1483
23.6k
 done_cd:
1484
23.6k
    out[0] = '\0';
1485
1486
    /* Reset to the beginning of the first segment for the next sequence.  */
1487
23.6k
    cur = path;
1488
24.5k
    while (cur[0] == '/')
1489
867
      ++cur;
1490
23.6k
    if (cur[0] == '\0')
1491
0
  return(0);
1492
1493
    /*
1494
     * Analyze each segment in sequence for cases (e) and (f).
1495
     *
1496
     * e) All occurrences of "<segment>/../", where <segment> is a
1497
     *    complete path segment not equal to "..", are removed from the
1498
     *    buffer string.  Removal of these path segments is performed
1499
     *    iteratively, removing the leftmost matching pattern on each
1500
     *    iteration, until no matching pattern remains.
1501
     *
1502
     * f) If the buffer string ends with "<segment>/..", where <segment>
1503
     *    is a complete path segment not equal to "..", that
1504
     *    "<segment>/.." is removed.
1505
     *
1506
     * To satisfy the "iterative" clause in (e), we need to collapse the
1507
     * string every time we find something that needs to be removed.  Thus,
1508
     * we don't need to keep two pointers into the string: we only need a
1509
     * "current position" pointer.
1510
     */
1511
41.3k
    while (1) {
1512
41.3k
        char *segp, *tmp;
1513
1514
        /* At the beginning of each iteration of this loop, "cur" points to
1515
         * the first character of the segment we want to examine.
1516
         */
1517
1518
        /* Find the end of the current segment.  */
1519
41.3k
        segp = cur;
1520
330k
        while ((segp[0] != '/') && (segp[0] != '\0'))
1521
289k
          ++segp;
1522
1523
        /* If this is the last segment, we're done (we need at least two
1524
         * segments to meet the criteria for the (e) and (f) cases).
1525
         */
1526
41.3k
        if (segp[0] == '\0')
1527
23.6k
          break;
1528
1529
        /* If the first segment is "..", or if the next segment _isn't_ "..",
1530
         * keep this segment and try the next one.
1531
         */
1532
17.7k
        ++segp;
1533
17.7k
        if (((cur[0] == '.') && (cur[1] == '.') && (segp == cur+3))
1534
17.7k
            || ((segp[0] != '.') || (segp[1] != '.')
1535
17.7k
                || ((segp[2] != '/') && (segp[2] != '\0')))) {
1536
17.7k
          cur = segp;
1537
17.7k
          continue;
1538
17.7k
        }
1539
1540
        /* If we get here, remove this segment and the next one and back up
1541
         * to the previous segment (if there is one), to implement the
1542
         * "iteratively" clause.  It's pretty much impossible to back up
1543
         * while maintaining two pointers into the buffer, so just compact
1544
         * the whole buffer now.
1545
         */
1546
1547
        /* If this is the end of the buffer, we're done.  */
1548
0
        if (segp[2] == '\0') {
1549
0
          cur[0] = '\0';
1550
0
          break;
1551
0
        }
1552
        /* Valgrind complained, strcpy(cur, segp + 3); */
1553
        /* string will overlap, do not use strcpy */
1554
0
        tmp = cur;
1555
0
        segp += 3;
1556
0
        while ((*tmp++ = *segp++) != 0)
1557
0
          ;
1558
1559
        /* If there are no previous segments, then keep going from here.  */
1560
0
        segp = cur;
1561
0
        while ((segp > path) && ((--segp)[0] == '/'))
1562
0
          ;
1563
0
        if (segp == path)
1564
0
          continue;
1565
1566
        /* "segp" is pointing to the end of a previous segment; find it's
1567
         * start.  We need to back up to the previous segment and start
1568
         * over with that to handle things like "foo/bar/../..".  If we
1569
         * don't do this, then on the first pass we'll remove the "bar/..",
1570
         * but be pointing at the second ".." so we won't realize we can also
1571
         * remove the "foo/..".
1572
         */
1573
0
        cur = segp;
1574
0
        while ((cur > path) && (cur[-1] != '/'))
1575
0
          --cur;
1576
0
    }
1577
23.6k
    out[0] = '\0';
1578
1579
    /*
1580
     * g) If the resulting buffer string still begins with one or more
1581
     *    complete path segments of "..", then the reference is
1582
     *    considered to be in error. Implementations may handle this
1583
     *    error by retaining these components in the resolved path (i.e.,
1584
     *    treating them as part of the final URI), by removing them from
1585
     *    the resolved path (i.e., discarding relative levels above the
1586
     *    root), or by avoiding traversal of the reference.
1587
     *
1588
     * We discard them from the final path.
1589
     */
1590
23.6k
    if (path[0] == '/') {
1591
794
      cur = path;
1592
794
      while ((cur[0] == '/') && (cur[1] == '.') && (cur[2] == '.')
1593
794
             && ((cur[3] == '/') || (cur[3] == '\0')))
1594
0
  cur += 3;
1595
1596
794
      if (cur != path) {
1597
0
  out = path;
1598
0
  while (cur[0] != '\0')
1599
0
          (out++)[0] = (cur++)[0];
1600
0
  out[0] = 0;
1601
0
      }
1602
794
    }
1603
1604
23.6k
    return(0);
1605
23.6k
}
1606
1607
649k
static int is_hex(char c) {
1608
649k
    if (((c >= '0') && (c <= '9')) ||
1609
649k
        ((c >= 'a') && (c <= 'f')) ||
1610
649k
        ((c >= 'A') && (c <= 'F')))
1611
648k
  return(1);
1612
675
    return(0);
1613
649k
}
1614
1615
/**
1616
 * xmlURIUnescapeString:
1617
 * @str:  the string to unescape
1618
 * @len:   the length in bytes to unescape (or <= 0 to indicate full string)
1619
 * @target:  optional destination buffer
1620
 *
1621
 * Unescaping routine, but does not check that the string is an URI. The
1622
 * output is a direct unsigned char translation of %XX values (no encoding)
1623
 * Note that the length of the result can only be smaller or same size as
1624
 * the input string.
1625
 *
1626
 * Returns a copy of the string, but unescaped, will return NULL only in case
1627
 * of error
1628
 */
1629
char *
1630
393k
xmlURIUnescapeString(const char *str, int len, char *target) {
1631
393k
    char *ret, *out;
1632
393k
    const char *in;
1633
1634
393k
    if (str == NULL)
1635
0
  return(NULL);
1636
393k
    if (len <= 0) len = strlen(str);
1637
393k
    if (len < 0) return(NULL);
1638
1639
393k
    if (target == NULL) {
1640
393k
  ret = (char *) xmlMallocAtomic(len + 1);
1641
393k
  if (ret == NULL) {
1642
0
            xmlURIErrMemory("unescaping URI value\n");
1643
0
      return(NULL);
1644
0
  }
1645
393k
    } else
1646
0
  ret = target;
1647
393k
    in = str;
1648
393k
    out = ret;
1649
7.97M
    while(len > 0) {
1650
7.58M
  if ((len > 2) && (*in == '%') && (is_hex(in[1])) && (is_hex(in[2]))) {
1651
324k
            int c = 0;
1652
324k
      in++;
1653
324k
      if ((*in >= '0') && (*in <= '9'))
1654
287k
          c = (*in - '0');
1655
36.9k
      else if ((*in >= 'a') && (*in <= 'f'))
1656
1.10k
          c = (*in - 'a') + 10;
1657
35.8k
      else if ((*in >= 'A') && (*in <= 'F'))
1658
35.8k
          c = (*in - 'A') + 10;
1659
324k
      in++;
1660
324k
      if ((*in >= '0') && (*in <= '9'))
1661
196k
          c = c * 16 + (*in - '0');
1662
127k
      else if ((*in >= 'a') && (*in <= 'f'))
1663
1.07k
          c = c * 16 + (*in - 'a') + 10;
1664
126k
      else if ((*in >= 'A') && (*in <= 'F'))
1665
126k
          c = c * 16 + (*in - 'A') + 10;
1666
324k
      in++;
1667
324k
      len -= 3;
1668
            /* Explicit sign change */
1669
324k
      *out++ = (char) c;
1670
7.25M
  } else {
1671
7.25M
      *out++ = *in++;
1672
7.25M
      len--;
1673
7.25M
  }
1674
7.58M
    }
1675
393k
    *out = 0;
1676
393k
    return(ret);
1677
393k
}
1678
1679
/**
1680
 * xmlURIEscapeStr:
1681
 * @str:  string to escape
1682
 * @list: exception list string of chars not to escape
1683
 *
1684
 * This routine escapes a string to hex, ignoring reserved characters
1685
 * (a-z, A-Z, 0-9, "@-_.!~*'()") and the characters in the exception list.
1686
 *
1687
 * Returns a new escaped string or NULL in case of error.
1688
 */
1689
xmlChar *
1690
3.41k
xmlURIEscapeStr(const xmlChar *str, const xmlChar *list) {
1691
3.41k
    xmlChar *ret, ch;
1692
3.41k
    xmlChar *temp;
1693
3.41k
    const xmlChar *in;
1694
3.41k
    int len, out;
1695
1696
3.41k
    if (str == NULL)
1697
0
  return(NULL);
1698
3.41k
    if (str[0] == 0)
1699
0
  return(xmlStrdup(str));
1700
3.41k
    len = xmlStrlen(str);
1701
3.41k
    if (!(len > 0)) return(NULL);
1702
1703
3.41k
    len += 20;
1704
3.41k
    ret = (xmlChar *) xmlMallocAtomic(len);
1705
3.41k
    if (ret == NULL) {
1706
0
        xmlURIErrMemory("escaping URI value\n");
1707
0
  return(NULL);
1708
0
    }
1709
3.41k
    in = (const xmlChar *) str;
1710
3.41k
    out = 0;
1711
12.6M
    while(*in != 0) {
1712
12.6M
  if (len - out <= 3) {
1713
2.33k
            temp = xmlSaveUriRealloc(ret, &len);
1714
2.33k
      if (temp == NULL) {
1715
0
                xmlURIErrMemory("escaping URI value\n");
1716
0
    xmlFree(ret);
1717
0
    return(NULL);
1718
0
      }
1719
2.33k
      ret = temp;
1720
2.33k
  }
1721
1722
12.6M
  ch = *in;
1723
1724
12.6M
  if ((ch != '@') && (!IS_UNRESERVED(ch)) && (!xmlStrchr(list, ch))) {
1725
2.56M
      unsigned char val;
1726
2.56M
      ret[out++] = '%';
1727
2.56M
      val = ch >> 4;
1728
2.56M
      if (val <= 9)
1729
2.52M
    ret[out++] = '0' + val;
1730
30.9k
      else
1731
30.9k
    ret[out++] = 'A' + val - 0xA;
1732
2.56M
      val = ch & 0xF;
1733
2.56M
      if (val <= 9)
1734
1.41M
    ret[out++] = '0' + val;
1735
1.14M
      else
1736
1.14M
    ret[out++] = 'A' + val - 0xA;
1737
2.56M
      in++;
1738
10.0M
  } else {
1739
10.0M
      ret[out++] = *in++;
1740
10.0M
  }
1741
1742
12.6M
    }
1743
3.41k
    ret[out] = 0;
1744
3.41k
    return(ret);
1745
3.41k
}
1746
1747
/**
1748
 * xmlURIEscape:
1749
 * @str:  the string of the URI to escape
1750
 *
1751
 * Escaping routine, does not do validity checks !
1752
 * It will try to escape the chars needing this, but this is heuristic
1753
 * based it's impossible to be sure.
1754
 *
1755
 * Returns an copy of the string, but escaped
1756
 *
1757
 * 25 May 2001
1758
 * Uses xmlParseURI and xmlURIEscapeStr to try to escape correctly
1759
 * according to RFC2396.
1760
 *   - Carl Douglas
1761
 */
1762
xmlChar *
1763
xmlURIEscape(const xmlChar * str)
1764
0
{
1765
0
    xmlChar *ret, *segment = NULL;
1766
0
    xmlURIPtr uri;
1767
0
    int ret2;
1768
1769
0
    if (str == NULL)
1770
0
        return (NULL);
1771
1772
0
    uri = xmlCreateURI();
1773
0
    if (uri != NULL) {
1774
  /*
1775
   * Allow escaping errors in the unescaped form
1776
   */
1777
0
        uri->cleanup = 1;
1778
0
        ret2 = xmlParseURIReference(uri, (const char *)str);
1779
0
        if (ret2) {
1780
0
            xmlFreeURI(uri);
1781
0
            return (NULL);
1782
0
        }
1783
0
    }
1784
1785
0
    if (!uri)
1786
0
        return NULL;
1787
1788
0
    ret = NULL;
1789
1790
0
#define NULLCHK(p) if(!p) { \
1791
0
         xmlURIErrMemory("escaping URI value\n"); \
1792
0
         xmlFreeURI(uri); \
1793
0
         xmlFree(ret); \
1794
0
         return NULL; } \
1795
0
1796
0
    if (uri->scheme) {
1797
0
        segment = xmlURIEscapeStr(BAD_CAST uri->scheme, BAD_CAST "+-.");
1798
0
        NULLCHK(segment)
1799
0
        ret = xmlStrcat(ret, segment);
1800
0
        ret = xmlStrcat(ret, BAD_CAST ":");
1801
0
        xmlFree(segment);
1802
0
    }
1803
1804
0
    if (uri->authority) {
1805
0
        segment =
1806
0
            xmlURIEscapeStr(BAD_CAST uri->authority, BAD_CAST "/?;:@");
1807
0
        NULLCHK(segment)
1808
0
        ret = xmlStrcat(ret, BAD_CAST "//");
1809
0
        ret = xmlStrcat(ret, segment);
1810
0
        xmlFree(segment);
1811
0
    }
1812
1813
0
    if (uri->user) {
1814
0
        segment = xmlURIEscapeStr(BAD_CAST uri->user, BAD_CAST ";:&=+$,");
1815
0
        NULLCHK(segment)
1816
0
        ret = xmlStrcat(ret,BAD_CAST "//");
1817
0
        ret = xmlStrcat(ret, segment);
1818
0
        ret = xmlStrcat(ret, BAD_CAST "@");
1819
0
        xmlFree(segment);
1820
0
    }
1821
1822
0
    if (uri->server) {
1823
0
        segment = xmlURIEscapeStr(BAD_CAST uri->server, BAD_CAST "/?;:@");
1824
0
        NULLCHK(segment)
1825
0
        if (uri->user == NULL)
1826
0
            ret = xmlStrcat(ret, BAD_CAST "//");
1827
0
        ret = xmlStrcat(ret, segment);
1828
0
        xmlFree(segment);
1829
0
    }
1830
1831
0
    if (uri->port > 0) {
1832
0
        xmlChar port[11];
1833
1834
0
        snprintf((char *) port, 11, "%d", uri->port);
1835
0
        ret = xmlStrcat(ret, BAD_CAST ":");
1836
0
        ret = xmlStrcat(ret, port);
1837
0
    }
1838
1839
0
    if (uri->path) {
1840
0
        segment =
1841
0
            xmlURIEscapeStr(BAD_CAST uri->path, BAD_CAST ":@&=+$,/?;");
1842
0
        NULLCHK(segment)
1843
0
        ret = xmlStrcat(ret, segment);
1844
0
        xmlFree(segment);
1845
0
    }
1846
1847
0
    if (uri->query_raw) {
1848
0
        ret = xmlStrcat(ret, BAD_CAST "?");
1849
0
        ret = xmlStrcat(ret, BAD_CAST uri->query_raw);
1850
0
    }
1851
0
    else if (uri->query) {
1852
0
        segment =
1853
0
            xmlURIEscapeStr(BAD_CAST uri->query, BAD_CAST ";/?:@&=+,$");
1854
0
        NULLCHK(segment)
1855
0
        ret = xmlStrcat(ret, BAD_CAST "?");
1856
0
        ret = xmlStrcat(ret, segment);
1857
0
        xmlFree(segment);
1858
0
    }
1859
1860
0
    if (uri->opaque) {
1861
0
        segment = xmlURIEscapeStr(BAD_CAST uri->opaque, BAD_CAST "");
1862
0
        NULLCHK(segment)
1863
0
        ret = xmlStrcat(ret, segment);
1864
0
        xmlFree(segment);
1865
0
    }
1866
1867
0
    if (uri->fragment) {
1868
0
        segment = xmlURIEscapeStr(BAD_CAST uri->fragment, BAD_CAST "#");
1869
0
        NULLCHK(segment)
1870
0
        ret = xmlStrcat(ret, BAD_CAST "#");
1871
0
        ret = xmlStrcat(ret, segment);
1872
0
        xmlFree(segment);
1873
0
    }
1874
1875
0
    xmlFreeURI(uri);
1876
0
#undef NULLCHK
1877
1878
0
    return (ret);
1879
0
}
1880
1881
/************************************************************************
1882
 *                  *
1883
 *      Public functions        *
1884
 *                  *
1885
 ************************************************************************/
1886
1887
/**
1888
 * xmlBuildURI:
1889
 * @URI:  the URI instance found in the document
1890
 * @base:  the base value
1891
 *
1892
 * Computes he final URI of the reference done by checking that
1893
 * the given URI is valid, and building the final URI using the
1894
 * base URI. This is processed according to section 5.2 of the
1895
 * RFC 2396
1896
 *
1897
 * 5.2. Resolving Relative References to Absolute Form
1898
 *
1899
 * Returns a new URI string (to be freed by the caller) or NULL in case
1900
 *         of error.
1901
 */
1902
xmlChar *
1903
82.0k
xmlBuildURI(const xmlChar *URI, const xmlChar *base) {
1904
82.0k
    xmlChar *val = NULL;
1905
82.0k
    int ret, len, indx, cur, out;
1906
82.0k
    xmlURIPtr ref = NULL;
1907
82.0k
    xmlURIPtr bas = NULL;
1908
82.0k
    xmlURIPtr res = NULL;
1909
1910
    /*
1911
     * 1) The URI reference is parsed into the potential four components and
1912
     *    fragment identifier, as described in Section 4.3.
1913
     *
1914
     *    NOTE that a completely empty URI is treated by modern browsers
1915
     *    as a reference to "." rather than as a synonym for the current
1916
     *    URI.  Should we do that here?
1917
     */
1918
82.0k
    if (URI == NULL)
1919
33
  ret = -1;
1920
82.0k
    else {
1921
82.0k
  if (*URI) {
1922
81.9k
      ref = xmlCreateURI();
1923
81.9k
      if (ref == NULL)
1924
0
    goto done;
1925
81.9k
      ret = xmlParseURIReference(ref, (const char *) URI);
1926
81.9k
  }
1927
122
  else
1928
122
      ret = 0;
1929
82.0k
    }
1930
82.0k
    if (ret != 0)
1931
745
  goto done;
1932
81.3k
    if ((ref != NULL) && (ref->scheme != NULL)) {
1933
  /*
1934
   * The URI is absolute don't modify.
1935
   */
1936
3.51k
  val = xmlStrdup(URI);
1937
3.51k
  goto done;
1938
3.51k
    }
1939
77.8k
    if (base == NULL)
1940
51.5k
  ret = -1;
1941
26.2k
    else {
1942
26.2k
  bas = xmlCreateURI();
1943
26.2k
  if (bas == NULL)
1944
0
      goto done;
1945
26.2k
  ret = xmlParseURIReference(bas, (const char *) base);
1946
26.2k
    }
1947
77.8k
    if (ret != 0) {
1948
54.0k
  if (ref)
1949
53.9k
      val = xmlSaveUri(ref);
1950
54.0k
  goto done;
1951
54.0k
    }
1952
23.8k
    if (ref == NULL) {
1953
  /*
1954
   * the base fragment must be ignored
1955
   */
1956
74
  if (bas->fragment != NULL) {
1957
1
      xmlFree(bas->fragment);
1958
1
      bas->fragment = NULL;
1959
1
  }
1960
74
  val = xmlSaveUri(bas);
1961
74
  goto done;
1962
74
    }
1963
1964
    /*
1965
     * 2) If the path component is empty and the scheme, authority, and
1966
     *    query components are undefined, then it is a reference to the
1967
     *    current document and we are done.  Otherwise, the reference URI's
1968
     *    query and fragment components are defined as found (or not found)
1969
     *    within the URI reference and not inherited from the base URI.
1970
     *
1971
     *    NOTE that in modern browsers, the parsing differs from the above
1972
     *    in the following aspect:  the query component is allowed to be
1973
     *    defined while still treating this as a reference to the current
1974
     *    document.
1975
     */
1976
23.7k
    res = xmlCreateURI();
1977
23.7k
    if (res == NULL)
1978
0
  goto done;
1979
23.7k
    if ((ref->scheme == NULL) && (ref->path == NULL) &&
1980
23.7k
  ((ref->authority == NULL) && (ref->server == NULL) &&
1981
38
         (ref->port == PORT_EMPTY))) {
1982
38
  if (bas->scheme != NULL)
1983
2
      res->scheme = xmlMemStrdup(bas->scheme);
1984
38
  if (bas->authority != NULL)
1985
0
      res->authority = xmlMemStrdup(bas->authority);
1986
38
  else {
1987
38
      if (bas->server != NULL)
1988
0
    res->server = xmlMemStrdup(bas->server);
1989
38
      if (bas->user != NULL)
1990
0
    res->user = xmlMemStrdup(bas->user);
1991
38
      res->port = bas->port;
1992
38
  }
1993
38
  if (bas->path != NULL)
1994
32
      res->path = xmlMemStrdup(bas->path);
1995
38
  if (ref->query_raw != NULL)
1996
29
      res->query_raw = xmlMemStrdup (ref->query_raw);
1997
9
  else if (ref->query != NULL)
1998
0
      res->query = xmlMemStrdup(ref->query);
1999
9
  else if (bas->query_raw != NULL)
2000
0
      res->query_raw = xmlMemStrdup(bas->query_raw);
2001
9
  else if (bas->query != NULL)
2002
0
      res->query = xmlMemStrdup(bas->query);
2003
38
  if (ref->fragment != NULL)
2004
9
      res->fragment = xmlMemStrdup(ref->fragment);
2005
38
  goto step_7;
2006
38
    }
2007
2008
    /*
2009
     * 3) If the scheme component is defined, indicating that the reference
2010
     *    starts with a scheme name, then the reference is interpreted as an
2011
     *    absolute URI and we are done.  Otherwise, the reference URI's
2012
     *    scheme is inherited from the base URI's scheme component.
2013
     */
2014
23.6k
    if (ref->scheme != NULL) {
2015
0
  val = xmlSaveUri(ref);
2016
0
  goto done;
2017
0
    }
2018
23.6k
    if (bas->scheme != NULL)
2019
1.08k
  res->scheme = xmlMemStrdup(bas->scheme);
2020
2021
23.6k
    if (ref->query_raw != NULL)
2022
99
  res->query_raw = xmlMemStrdup(ref->query_raw);
2023
23.5k
    else if (ref->query != NULL)
2024
0
  res->query = xmlMemStrdup(ref->query);
2025
23.6k
    if (ref->fragment != NULL)
2026
211
  res->fragment = xmlMemStrdup(ref->fragment);
2027
2028
    /*
2029
     * 4) If the authority component is defined, then the reference is a
2030
     *    network-path and we skip to step 7.  Otherwise, the reference
2031
     *    URI's authority is inherited from the base URI's authority
2032
     *    component, which will also be undefined if the URI scheme does not
2033
     *    use an authority component.
2034
     */
2035
23.6k
    if ((ref->authority != NULL) || (ref->server != NULL) ||
2036
23.6k
         (ref->port != PORT_EMPTY)) {
2037
0
  if (ref->authority != NULL)
2038
0
      res->authority = xmlMemStrdup(ref->authority);
2039
0
  else {
2040
0
            if (ref->server != NULL)
2041
0
                res->server = xmlMemStrdup(ref->server);
2042
0
      if (ref->user != NULL)
2043
0
    res->user = xmlMemStrdup(ref->user);
2044
0
            res->port = ref->port;
2045
0
  }
2046
0
  if (ref->path != NULL)
2047
0
      res->path = xmlMemStrdup(ref->path);
2048
0
  goto step_7;
2049
0
    }
2050
23.6k
    if (bas->authority != NULL)
2051
0
  res->authority = xmlMemStrdup(bas->authority);
2052
23.6k
    else if ((bas->server != NULL) || (bas->port != PORT_EMPTY)) {
2053
625
  if (bas->server != NULL)
2054
622
      res->server = xmlMemStrdup(bas->server);
2055
625
  if (bas->user != NULL)
2056
15
      res->user = xmlMemStrdup(bas->user);
2057
625
  res->port = bas->port;
2058
625
    }
2059
2060
    /*
2061
     * 5) If the path component begins with a slash character ("/"), then
2062
     *    the reference is an absolute-path and we skip to step 7.
2063
     */
2064
23.6k
    if ((ref->path != NULL) && (ref->path[0] == '/')) {
2065
40
  res->path = xmlMemStrdup(ref->path);
2066
40
  goto step_7;
2067
40
    }
2068
2069
2070
    /*
2071
     * 6) If this step is reached, then we are resolving a relative-path
2072
     *    reference.  The relative path needs to be merged with the base
2073
     *    URI's path.  Although there are many ways to do this, we will
2074
     *    describe a simple method using a separate string buffer.
2075
     *
2076
     * Allocate a buffer large enough for the result string.
2077
     */
2078
23.6k
    len = 2; /* extra / and 0 */
2079
23.6k
    if (ref->path != NULL)
2080
23.6k
  len += strlen(ref->path);
2081
23.6k
    if (bas->path != NULL)
2082
22.7k
  len += strlen(bas->path);
2083
23.6k
    res->path = (char *) xmlMallocAtomic(len);
2084
23.6k
    if (res->path == NULL) {
2085
0
        xmlURIErrMemory("resolving URI against base\n");
2086
0
  goto done;
2087
0
    }
2088
23.6k
    res->path[0] = 0;
2089
2090
    /*
2091
     * a) All but the last segment of the base URI's path component is
2092
     *    copied to the buffer.  In other words, any characters after the
2093
     *    last (right-most) slash character, if any, are excluded.
2094
     */
2095
23.6k
    cur = 0;
2096
23.6k
    out = 0;
2097
23.6k
    if (bas->path != NULL) {
2098
25.1k
  while (bas->path[cur] != 0) {
2099
320k
      while ((bas->path[cur] != 0) && (bas->path[cur] != '/'))
2100
295k
    cur++;
2101
25.1k
      if (bas->path[cur] == 0)
2102
22.7k
    break;
2103
2104
2.38k
      cur++;
2105
14.7k
      while (out < cur) {
2106
12.3k
    res->path[out] = bas->path[out];
2107
12.3k
    out++;
2108
12.3k
      }
2109
2.38k
  }
2110
22.7k
    }
2111
23.6k
    res->path[out] = 0;
2112
2113
    /*
2114
     * b) The reference's path component is appended to the buffer
2115
     *    string.
2116
     */
2117
23.6k
    if (ref->path != NULL && ref->path[0] != 0) {
2118
23.6k
  indx = 0;
2119
  /*
2120
   * Ensure the path includes a '/'
2121
   */
2122
23.6k
  if ((out == 0) && ((bas->server != NULL) || bas->port != PORT_EMPTY))
2123
547
      res->path[out++] = '/';
2124
319k
  while (ref->path[indx] != 0) {
2125
295k
      res->path[out++] = ref->path[indx++];
2126
295k
  }
2127
23.6k
    }
2128
23.6k
    res->path[out] = 0;
2129
2130
    /*
2131
     * Steps c) to h) are really path normalization steps
2132
     */
2133
23.6k
    xmlNormalizeURIPath(res->path);
2134
2135
23.7k
step_7:
2136
2137
    /*
2138
     * 7) The resulting URI components, including any inherited from the
2139
     *    base URI, are recombined to give the absolute form of the URI
2140
     *    reference.
2141
     */
2142
23.7k
    val = xmlSaveUri(res);
2143
2144
82.0k
done:
2145
82.0k
    if (ref != NULL)
2146
81.9k
  xmlFreeURI(ref);
2147
82.0k
    if (bas != NULL)
2148
26.2k
  xmlFreeURI(bas);
2149
82.0k
    if (res != NULL)
2150
23.7k
  xmlFreeURI(res);
2151
82.0k
    return(val);
2152
23.7k
}
2153
2154
/**
2155
 * xmlBuildRelativeURI:
2156
 * @URI:  the URI reference under consideration
2157
 * @base:  the base value
2158
 *
2159
 * Expresses the URI of the reference in terms relative to the
2160
 * base.  Some examples of this operation include:
2161
 *     base = "http://site1.com/docs/book1.html"
2162
 *        URI input                        URI returned
2163
 *     docs/pic1.gif                    pic1.gif
2164
 *     docs/img/pic1.gif                img/pic1.gif
2165
 *     img/pic1.gif                     ../img/pic1.gif
2166
 *     http://site1.com/docs/pic1.gif   pic1.gif
2167
 *     http://site2.com/docs/pic1.gif   http://site2.com/docs/pic1.gif
2168
 *
2169
 *     base = "docs/book1.html"
2170
 *        URI input                        URI returned
2171
 *     docs/pic1.gif                    pic1.gif
2172
 *     docs/img/pic1.gif                img/pic1.gif
2173
 *     img/pic1.gif                     ../img/pic1.gif
2174
 *     http://site1.com/docs/pic1.gif   http://site1.com/docs/pic1.gif
2175
 *
2176
 *
2177
 * Note: if the URI reference is really weird or complicated, it may be
2178
 *       worthwhile to first convert it into a "nice" one by calling
2179
 *       xmlBuildURI (using 'base') before calling this routine,
2180
 *       since this routine (for reasonable efficiency) assumes URI has
2181
 *       already been through some validation.
2182
 *
2183
 * Returns a new URI string (to be freed by the caller) or NULL in case
2184
 * error.
2185
 */
2186
xmlChar *
2187
xmlBuildRelativeURI (const xmlChar * URI, const xmlChar * base)
2188
0
{
2189
0
    xmlChar *val = NULL;
2190
0
    int ret;
2191
0
    int ix;
2192
0
    int nbslash = 0;
2193
0
    int len;
2194
0
    xmlURIPtr ref = NULL;
2195
0
    xmlURIPtr bas = NULL;
2196
0
    xmlChar *bptr, *uptr, *vptr;
2197
0
    int remove_path = 0;
2198
2199
0
    if ((URI == NULL) || (*URI == 0))
2200
0
  return NULL;
2201
2202
    /*
2203
     * First parse URI into a standard form
2204
     */
2205
0
    ref = xmlCreateURI ();
2206
0
    if (ref == NULL)
2207
0
  return NULL;
2208
    /* If URI not already in "relative" form */
2209
0
    if (URI[0] != '.') {
2210
0
  ret = xmlParseURIReference (ref, (const char *) URI);
2211
0
  if (ret != 0)
2212
0
      goto done;   /* Error in URI, return NULL */
2213
0
    } else
2214
0
  ref->path = (char *)xmlStrdup(URI);
2215
2216
    /*
2217
     * Next parse base into the same standard form
2218
     */
2219
0
    if ((base == NULL) || (*base == 0)) {
2220
0
  val = xmlStrdup (URI);
2221
0
  goto done;
2222
0
    }
2223
0
    bas = xmlCreateURI ();
2224
0
    if (bas == NULL)
2225
0
  goto done;
2226
0
    if (base[0] != '.') {
2227
0
  ret = xmlParseURIReference (bas, (const char *) base);
2228
0
  if (ret != 0)
2229
0
      goto done;   /* Error in base, return NULL */
2230
0
    } else
2231
0
  bas->path = (char *)xmlStrdup(base);
2232
2233
    /*
2234
     * If the scheme / server on the URI differs from the base,
2235
     * just return the URI
2236
     */
2237
0
    if ((ref->scheme != NULL) &&
2238
0
  ((bas->scheme == NULL) ||
2239
0
   (xmlStrcmp ((xmlChar *)bas->scheme, (xmlChar *)ref->scheme)) ||
2240
0
   (xmlStrcmp ((xmlChar *)bas->server, (xmlChar *)ref->server)) ||
2241
0
         (bas->port != ref->port))) {
2242
0
  val = xmlStrdup (URI);
2243
0
  goto done;
2244
0
    }
2245
0
    if (xmlStrEqual((xmlChar *)bas->path, (xmlChar *)ref->path)) {
2246
0
  val = xmlStrdup(BAD_CAST "");
2247
0
  goto done;
2248
0
    }
2249
0
    if (bas->path == NULL) {
2250
0
  val = xmlStrdup((xmlChar *)ref->path);
2251
0
  goto done;
2252
0
    }
2253
0
    if (ref->path == NULL) {
2254
0
        ref->path = (char *) "/";
2255
0
  remove_path = 1;
2256
0
    }
2257
2258
    /*
2259
     * At this point (at last!) we can compare the two paths
2260
     *
2261
     * First we take care of the special case where either of the
2262
     * two path components may be missing (bug 316224)
2263
     */
2264
0
    bptr = (xmlChar *)bas->path;
2265
0
    {
2266
0
        xmlChar *rptr = (xmlChar *) ref->path;
2267
0
        int pos = 0;
2268
2269
        /*
2270
         * Next we compare the two strings and find where they first differ
2271
         */
2272
0
  if ((*rptr == '.') && (rptr[1] == '/'))
2273
0
            rptr += 2;
2274
0
  if ((*bptr == '.') && (bptr[1] == '/'))
2275
0
            bptr += 2;
2276
0
  else if ((*bptr == '/') && (*rptr != '/'))
2277
0
      bptr++;
2278
0
  while ((bptr[pos] == rptr[pos]) && (bptr[pos] != 0))
2279
0
      pos++;
2280
2281
0
  if (bptr[pos] == rptr[pos]) {
2282
0
      val = xmlStrdup(BAD_CAST "");
2283
0
      goto done;    /* (I can't imagine why anyone would do this) */
2284
0
  }
2285
2286
  /*
2287
   * In URI, "back up" to the last '/' encountered.  This will be the
2288
   * beginning of the "unique" suffix of URI
2289
   */
2290
0
  ix = pos;
2291
0
  for (; ix > 0; ix--) {
2292
0
      if (rptr[ix - 1] == '/')
2293
0
    break;
2294
0
  }
2295
0
  uptr = (xmlChar *)&rptr[ix];
2296
2297
  /*
2298
   * In base, count the number of '/' from the differing point
2299
   */
2300
0
  for (; bptr[ix] != 0; ix++) {
2301
0
      if (bptr[ix] == '/')
2302
0
    nbslash++;
2303
0
  }
2304
2305
  /*
2306
   * e.g: URI="foo/" base="foo/bar" -> "./"
2307
   */
2308
0
  if (nbslash == 0 && !uptr[0]) {
2309
0
      val = xmlStrdup(BAD_CAST "./");
2310
0
      goto done;
2311
0
  }
2312
2313
0
  len = xmlStrlen (uptr) + 1;
2314
0
    }
2315
2316
0
    if (nbslash == 0) {
2317
0
  if (uptr != NULL)
2318
      /* exception characters from xmlSaveUri */
2319
0
      val = xmlURIEscapeStr(uptr, BAD_CAST "/;&=+$,");
2320
0
  goto done;
2321
0
    }
2322
2323
    /*
2324
     * Allocate just enough space for the returned string -
2325
     * length of the remainder of the URI, plus enough space
2326
     * for the "../" groups, plus one for the terminator
2327
     */
2328
0
    val = (xmlChar *) xmlMalloc (len + 3 * nbslash);
2329
0
    if (val == NULL) {
2330
0
        xmlURIErrMemory("building relative URI\n");
2331
0
  goto done;
2332
0
    }
2333
0
    vptr = val;
2334
    /*
2335
     * Put in as many "../" as needed
2336
     */
2337
0
    for (; nbslash>0; nbslash--) {
2338
0
  *vptr++ = '.';
2339
0
  *vptr++ = '.';
2340
0
  *vptr++ = '/';
2341
0
    }
2342
    /*
2343
     * Finish up with the end of the URI
2344
     */
2345
0
    if (uptr != NULL) {
2346
0
        if ((vptr > val) && (len > 0) &&
2347
0
      (uptr[0] == '/') && (vptr[-1] == '/')) {
2348
0
      memcpy (vptr, uptr + 1, len - 1);
2349
0
      vptr[len - 2] = 0;
2350
0
  } else {
2351
0
      memcpy (vptr, uptr, len);
2352
0
      vptr[len - 1] = 0;
2353
0
  }
2354
0
    } else {
2355
0
  vptr[len - 1] = 0;
2356
0
    }
2357
2358
    /* escape the freshly-built path */
2359
0
    vptr = val;
2360
  /* exception characters from xmlSaveUri */
2361
0
    val = xmlURIEscapeStr(vptr, BAD_CAST "/;&=+$,");
2362
0
    xmlFree(vptr);
2363
2364
0
done:
2365
    /*
2366
     * Free the working variables
2367
     */
2368
0
    if (remove_path != 0)
2369
0
        ref->path = NULL;
2370
0
    if (ref != NULL)
2371
0
  xmlFreeURI (ref);
2372
0
    if (bas != NULL)
2373
0
  xmlFreeURI (bas);
2374
2375
0
    return val;
2376
0
}
2377
2378
/**
2379
 * xmlCanonicPath:
2380
 * @path:  the resource locator in a filesystem notation
2381
 *
2382
 * Constructs a canonic path from the specified path.
2383
 *
2384
 * Returns a new canonic path, or a duplicate of the path parameter if the
2385
 * construction fails. The caller is responsible for freeing the memory occupied
2386
 * by the returned string. If there is insufficient memory available, or the
2387
 * argument is NULL, the function returns NULL.
2388
 */
2389
#define IS_WINDOWS_PATH(p)          \
2390
  ((p != NULL) &&           \
2391
   (((p[0] >= 'a') && (p[0] <= 'z')) ||     \
2392
    ((p[0] >= 'A') && (p[0] <= 'Z'))) &&      \
2393
   (p[1] == ':') && ((p[2] == '/') || (p[2] == '\\')))
2394
xmlChar *
2395
xmlCanonicPath(const xmlChar *path)
2396
147k
{
2397
/*
2398
 * For Windows implementations, additional work needs to be done to
2399
 * replace backslashes in pathnames with "forward slashes"
2400
 */
2401
#if defined(_WIN32)
2402
    int len = 0;
2403
    char *p = NULL;
2404
#endif
2405
147k
    xmlURIPtr uri;
2406
147k
    xmlChar *ret;
2407
147k
    const xmlChar *absuri;
2408
2409
147k
    if (path == NULL)
2410
0
  return(NULL);
2411
2412
#if defined(_WIN32)
2413
    /*
2414
     * We must not change the backslashes to slashes if the the path
2415
     * starts with \\?\
2416
     * Those paths can be up to 32k characters long.
2417
     * Was added specifically for OpenOffice, those paths can't be converted
2418
     * to URIs anyway.
2419
     */
2420
    if ((path[0] == '\\') && (path[1] == '\\') && (path[2] == '?') &&
2421
        (path[3] == '\\') )
2422
  return xmlStrdup((const xmlChar *) path);
2423
#endif
2424
2425
  /* sanitize filename starting with // so it can be used as URI */
2426
147k
    if ((path[0] == '/') && (path[1] == '/') && (path[2] != '/'))
2427
200
        path++;
2428
2429
147k
    if ((uri = xmlParseURI((const char *) path)) != NULL) {
2430
121k
  xmlFreeURI(uri);
2431
121k
  return xmlStrdup(path);
2432
121k
    }
2433
2434
    /* Check if this is an "absolute uri" */
2435
26.2k
    absuri = xmlStrstr(path, BAD_CAST "://");
2436
26.2k
    if (absuri != NULL) {
2437
3.93k
        int l, j;
2438
3.93k
  unsigned char c;
2439
3.93k
  xmlChar *escURI;
2440
2441
        /*
2442
   * this looks like an URI where some parts have not been
2443
   * escaped leading to a parsing problem.  Check that the first
2444
   * part matches a protocol.
2445
   */
2446
3.93k
  l = absuri - path;
2447
  /* Bypass if first part (part before the '://') is > 20 chars */
2448
3.93k
  if ((l <= 0) || (l > 20))
2449
287
      goto path_processing;
2450
  /* Bypass if any non-alpha characters are present in first part */
2451
17.4k
  for (j = 0;j < l;j++) {
2452
14.0k
      c = path[j];
2453
14.0k
      if (!(((c >= 'a') && (c <= 'z')) || ((c >= 'A') && (c <= 'Z'))))
2454
238
          goto path_processing;
2455
14.0k
  }
2456
2457
  /* Escape all except the characters specified in the supplied path */
2458
3.41k
        escURI = xmlURIEscapeStr(path, BAD_CAST ":/?_.#&;=");
2459
3.41k
  if (escURI != NULL) {
2460
      /* Try parsing the escaped path */
2461
3.41k
      uri = xmlParseURI((const char *) escURI);
2462
      /* If successful, return the escaped string */
2463
3.41k
      if (uri != NULL) {
2464
2.28k
          xmlFreeURI(uri);
2465
2.28k
    return escURI;
2466
2.28k
      }
2467
1.12k
            xmlFree(escURI);
2468
1.12k
  }
2469
3.41k
    }
2470
2471
23.9k
path_processing:
2472
/* For Windows implementations, replace backslashes with 'forward slashes' */
2473
#if defined(_WIN32)
2474
    /*
2475
     * Create a URI structure
2476
     */
2477
    uri = xmlCreateURI();
2478
    if (uri == NULL) {    /* Guard against 'out of memory' */
2479
        return(NULL);
2480
    }
2481
2482
    len = xmlStrlen(path);
2483
    if ((len > 2) && IS_WINDOWS_PATH(path)) {
2484
        /* make the scheme 'file' */
2485
  uri->scheme = (char *) xmlStrdup(BAD_CAST "file");
2486
  /* allocate space for leading '/' + path + string terminator */
2487
  uri->path = xmlMallocAtomic(len + 2);
2488
  if (uri->path == NULL) {
2489
      xmlFreeURI(uri);  /* Guard against 'out of memory' */
2490
      return(NULL);
2491
  }
2492
  /* Put in leading '/' plus path */
2493
  uri->path[0] = '/';
2494
  p = uri->path + 1;
2495
  strncpy(p, (char *) path, len + 1);
2496
    } else {
2497
  uri->path = (char *) xmlStrdup(path);
2498
  if (uri->path == NULL) {
2499
      xmlFreeURI(uri);
2500
      return(NULL);
2501
  }
2502
  p = uri->path;
2503
    }
2504
    /* Now change all occurrences of '\' to '/' */
2505
    while (*p != '\0') {
2506
  if (*p == '\\')
2507
      *p = '/';
2508
  p++;
2509
    }
2510
2511
    if (uri->scheme == NULL) {
2512
  ret = xmlStrdup((const xmlChar *) uri->path);
2513
    } else {
2514
  ret = xmlSaveUri(uri);
2515
    }
2516
2517
    xmlFreeURI(uri);
2518
#else
2519
23.9k
    ret = xmlStrdup((const xmlChar *) path);
2520
23.9k
#endif
2521
23.9k
    return(ret);
2522
26.2k
}
2523
2524
/**
2525
 * xmlPathToURI:
2526
 * @path:  the resource locator in a filesystem notation
2527
 *
2528
 * Constructs an URI expressing the existing path
2529
 *
2530
 * Returns a new URI, or a duplicate of the path parameter if the
2531
 * construction fails. The caller is responsible for freeing the memory
2532
 * occupied by the returned string. If there is insufficient memory available,
2533
 * or the argument is NULL, the function returns NULL.
2534
 */
2535
xmlChar *
2536
xmlPathToURI(const xmlChar *path)
2537
72.9k
{
2538
72.9k
    xmlURIPtr uri;
2539
72.9k
    xmlURI temp;
2540
72.9k
    xmlChar *ret, *cal;
2541
2542
72.9k
    if (path == NULL)
2543
0
        return(NULL);
2544
2545
72.9k
    if ((uri = xmlParseURI((const char *) path)) != NULL) {
2546
56.8k
  xmlFreeURI(uri);
2547
56.8k
  return xmlStrdup(path);
2548
56.8k
    }
2549
16.1k
    cal = xmlCanonicPath(path);
2550
16.1k
    if (cal == NULL)
2551
0
        return(NULL);
2552
#if defined(_WIN32)
2553
    /* xmlCanonicPath can return an URI on Windows (is that the intended behaviour?)
2554
       If 'cal' is a valid URI already then we are done here, as continuing would make
2555
       it invalid. */
2556
    if ((uri = xmlParseURI((const char *) cal)) != NULL) {
2557
  xmlFreeURI(uri);
2558
  return cal;
2559
    }
2560
    /* 'cal' can contain a relative path with backslashes. If that is processed
2561
       by xmlSaveURI, they will be escaped and the external entity loader machinery
2562
       will fail. So convert them to slashes. Misuse 'ret' for walking. */
2563
    ret = cal;
2564
    while (*ret != '\0') {
2565
  if (*ret == '\\')
2566
      *ret = '/';
2567
  ret++;
2568
    }
2569
#endif
2570
16.1k
    memset(&temp, 0, sizeof(temp));
2571
16.1k
    temp.path = (char *) cal;
2572
16.1k
    ret = xmlSaveUri(&temp);
2573
16.1k
    xmlFree(cal);
2574
16.1k
    return(ret);
2575
16.1k
}