Coverage Report

Created: 2024-01-18 20:17

/src/libxml2/valid.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * valid.c : part of the code use to do the DTD handling and the validity
3
 *           checking
4
 *
5
 * See Copyright for the status of this software.
6
 *
7
 * daniel@veillard.com
8
 */
9
10
#define IN_LIBXML
11
#include "libxml.h"
12
13
#include <string.h>
14
#include <stdlib.h>
15
16
#include <libxml/xmlmemory.h>
17
#include <libxml/hash.h>
18
#include <libxml/uri.h>
19
#include <libxml/valid.h>
20
#include <libxml/parser.h>
21
#include <libxml/parserInternals.h>
22
#include <libxml/xmlerror.h>
23
#include <libxml/list.h>
24
#include <libxml/globals.h>
25
26
#include "private/error.h"
27
#include "private/parser.h"
28
29
static xmlElementPtr xmlGetDtdElementDesc2(xmlDtdPtr dtd, const xmlChar *name,
30
                             int create);
31
/* #define DEBUG_VALID_ALGO */
32
/* #define DEBUG_REGEXP_ALGO */
33
34
#define TODO                \
35
    xmlGenericError(xmlGenericErrorContext,       \
36
      "Unimplemented block at %s:%d\n",       \
37
            __FILE__, __LINE__);
38
39
#ifdef LIBXML_VALID_ENABLED
40
static int
41
xmlValidateAttributeValueInternal(xmlDocPtr doc, xmlAttributeType type,
42
                                  const xmlChar *value);
43
#endif
44
/************************************************************************
45
 *                  *
46
 *      Error handling routines       *
47
 *                  *
48
 ************************************************************************/
49
50
/**
51
 * xmlVErrMemory:
52
 * @ctxt:  an XML validation parser context
53
 * @extra:  extra information
54
 *
55
 * Handle an out of memory error
56
 */
57
static void
58
xmlVErrMemory(xmlValidCtxtPtr ctxt, const char *extra)
59
0
{
60
0
    xmlGenericErrorFunc channel = NULL;
61
0
    xmlParserCtxtPtr pctxt = NULL;
62
0
    void *data = NULL;
63
64
0
    if (ctxt != NULL) {
65
0
        channel = ctxt->error;
66
0
        data = ctxt->userData;
67
  /* Look up flag to detect if it is part of a parsing
68
     context */
69
0
  if (ctxt->flags & XML_VCTXT_USE_PCTXT) {
70
0
      pctxt = ctxt->userData;
71
0
  }
72
0
    }
73
0
    if (extra)
74
0
        __xmlRaiseError(NULL, channel, data,
75
0
                        pctxt, NULL, XML_FROM_VALID, XML_ERR_NO_MEMORY,
76
0
                        XML_ERR_FATAL, NULL, 0, extra, NULL, NULL, 0, 0,
77
0
                        "Memory allocation failed : %s\n", extra);
78
0
    else
79
0
        __xmlRaiseError(NULL, channel, data,
80
0
                        pctxt, NULL, XML_FROM_VALID, XML_ERR_NO_MEMORY,
81
0
                        XML_ERR_FATAL, NULL, 0, NULL, NULL, NULL, 0, 0,
82
0
                        "Memory allocation failed\n");
83
0
}
84
85
/**
86
 * xmlErrValid:
87
 * @ctxt:  an XML validation parser context
88
 * @error:  the error number
89
 * @extra:  extra information
90
 *
91
 * Handle a validation error
92
 */
93
static void LIBXML_ATTR_FORMAT(3,0)
94
xmlErrValid(xmlValidCtxtPtr ctxt, xmlParserErrors error,
95
            const char *msg, const char *extra)
96
31.7k
{
97
31.7k
    xmlGenericErrorFunc channel = NULL;
98
31.7k
    xmlParserCtxtPtr pctxt = NULL;
99
31.7k
    void *data = NULL;
100
101
31.7k
    if (ctxt != NULL) {
102
7.15k
        channel = ctxt->error;
103
7.15k
        data = ctxt->userData;
104
  /* Look up flag to detect if it is part of a parsing
105
     context */
106
7.15k
  if (ctxt->flags & XML_VCTXT_USE_PCTXT) {
107
7.15k
      pctxt = ctxt->userData;
108
7.15k
  }
109
7.15k
    }
110
31.7k
    if (extra)
111
24.6k
        __xmlRaiseError(NULL, channel, data,
112
24.6k
                        pctxt, NULL, XML_FROM_VALID, error,
113
24.6k
                        XML_ERR_ERROR, NULL, 0, extra, NULL, NULL, 0, 0,
114
24.6k
                        msg, extra);
115
7.15k
    else
116
7.15k
        __xmlRaiseError(NULL, channel, data,
117
7.15k
                        pctxt, NULL, XML_FROM_VALID, error,
118
7.15k
                        XML_ERR_ERROR, NULL, 0, NULL, NULL, NULL, 0, 0,
119
7.15k
                        "%s", msg);
120
31.7k
}
121
122
#if defined(LIBXML_VALID_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
123
/**
124
 * xmlErrValidNode:
125
 * @ctxt:  an XML validation parser context
126
 * @node:  the node raising the error
127
 * @error:  the error number
128
 * @str1:  extra information
129
 * @str2:  extra information
130
 * @str3:  extra information
131
 *
132
 * Handle a validation error, provide contextual information
133
 */
134
static void LIBXML_ATTR_FORMAT(4,0)
135
xmlErrValidNode(xmlValidCtxtPtr ctxt,
136
                xmlNodePtr node, xmlParserErrors error,
137
                const char *msg, const xmlChar * str1,
138
                const xmlChar * str2, const xmlChar * str3)
139
4.01M
{
140
4.01M
    xmlStructuredErrorFunc schannel = NULL;
141
4.01M
    xmlGenericErrorFunc channel = NULL;
142
4.01M
    xmlParserCtxtPtr pctxt = NULL;
143
4.01M
    void *data = NULL;
144
145
4.01M
    if (ctxt != NULL) {
146
4.00M
        channel = ctxt->error;
147
4.00M
        data = ctxt->userData;
148
  /* Look up flag to detect if it is part of a parsing
149
     context */
150
4.00M
  if (ctxt->flags & XML_VCTXT_USE_PCTXT) {
151
3.92M
      pctxt = ctxt->userData;
152
3.92M
  }
153
4.00M
    }
154
4.01M
    __xmlRaiseError(schannel, channel, data, pctxt, node, XML_FROM_VALID, error,
155
4.01M
                    XML_ERR_ERROR, NULL, 0,
156
4.01M
                    (const char *) str1,
157
4.01M
                    (const char *) str2,
158
4.01M
                    (const char *) str3, 0, 0, msg, str1, str2, str3);
159
4.01M
}
160
#endif /* LIBXML_VALID_ENABLED or LIBXML_SCHEMAS_ENABLED */
161
162
#ifdef LIBXML_VALID_ENABLED
163
/**
164
 * xmlErrValidNodeNr:
165
 * @ctxt:  an XML validation parser context
166
 * @node:  the node raising the error
167
 * @error:  the error number
168
 * @str1:  extra information
169
 * @int2:  extra information
170
 * @str3:  extra information
171
 *
172
 * Handle a validation error, provide contextual information
173
 */
174
static void LIBXML_ATTR_FORMAT(4,0)
175
xmlErrValidNodeNr(xmlValidCtxtPtr ctxt,
176
                xmlNodePtr node, xmlParserErrors error,
177
                const char *msg, const xmlChar * str1,
178
                int int2, const xmlChar * str3)
179
48.7k
{
180
48.7k
    xmlStructuredErrorFunc schannel = NULL;
181
48.7k
    xmlGenericErrorFunc channel = NULL;
182
48.7k
    xmlParserCtxtPtr pctxt = NULL;
183
48.7k
    void *data = NULL;
184
185
48.7k
    if (ctxt != NULL) {
186
48.7k
        channel = ctxt->error;
187
48.7k
        data = ctxt->userData;
188
  /* Look up flag to detect if it is part of a parsing
189
     context */
190
48.7k
  if (ctxt->flags & XML_VCTXT_USE_PCTXT) {
191
7.08k
      pctxt = ctxt->userData;
192
7.08k
  }
193
48.7k
    }
194
48.7k
    __xmlRaiseError(schannel, channel, data, pctxt, node, XML_FROM_VALID, error,
195
48.7k
                    XML_ERR_ERROR, NULL, 0,
196
48.7k
                    (const char *) str1,
197
48.7k
                    (const char *) str3,
198
48.7k
                    NULL, int2, 0, msg, str1, int2, str3);
199
48.7k
}
200
201
/**
202
 * xmlErrValidWarning:
203
 * @ctxt:  an XML validation parser context
204
 * @node:  the node raising the error
205
 * @error:  the error number
206
 * @str1:  extra information
207
 * @str2:  extra information
208
 * @str3:  extra information
209
 *
210
 * Handle a validation error, provide contextual information
211
 */
212
static void LIBXML_ATTR_FORMAT(4,0)
213
xmlErrValidWarning(xmlValidCtxtPtr ctxt,
214
                xmlNodePtr node, xmlParserErrors error,
215
                const char *msg, const xmlChar * str1,
216
                const xmlChar * str2, const xmlChar * str3)
217
62.3k
{
218
62.3k
    xmlStructuredErrorFunc schannel = NULL;
219
62.3k
    xmlGenericErrorFunc channel = NULL;
220
62.3k
    xmlParserCtxtPtr pctxt = NULL;
221
62.3k
    void *data = NULL;
222
223
62.3k
    if (ctxt != NULL) {
224
62.3k
        channel = ctxt->warning;
225
62.3k
        data = ctxt->userData;
226
  /* Look up flag to detect if it is part of a parsing
227
     context */
228
62.3k
  if (ctxt->flags & XML_VCTXT_USE_PCTXT) {
229
62.3k
      pctxt = ctxt->userData;
230
62.3k
  }
231
62.3k
    }
232
62.3k
    __xmlRaiseError(schannel, channel, data, pctxt, node, XML_FROM_VALID, error,
233
62.3k
                    XML_ERR_WARNING, NULL, 0,
234
62.3k
                    (const char *) str1,
235
62.3k
                    (const char *) str2,
236
62.3k
                    (const char *) str3, 0, 0, msg, str1, str2, str3);
237
62.3k
}
238
239
240
241
#ifdef LIBXML_REGEXP_ENABLED
242
/*
243
 * If regexp are enabled we can do continuous validation without the
244
 * need of a tree to validate the content model. this is done in each
245
 * callbacks.
246
 * Each xmlValidState represent the validation state associated to the
247
 * set of nodes currently open from the document root to the current element.
248
 */
249
250
251
typedef struct _xmlValidState {
252
    xmlElementPtr  elemDecl;  /* pointer to the content model */
253
    xmlNodePtr           node;    /* pointer to the current node */
254
    xmlRegExecCtxtPtr    exec;    /* regexp runtime */
255
} _xmlValidState;
256
257
258
static int
259
1.22M
vstateVPush(xmlValidCtxtPtr ctxt, xmlElementPtr elemDecl, xmlNodePtr node) {
260
1.22M
    if ((ctxt->vstateMax == 0) || (ctxt->vstateTab == NULL)) {
261
31.9k
  ctxt->vstateMax = 10;
262
31.9k
  ctxt->vstateTab = (xmlValidState *) xmlMalloc(ctxt->vstateMax *
263
31.9k
                  sizeof(ctxt->vstateTab[0]));
264
31.9k
        if (ctxt->vstateTab == NULL) {
265
0
      xmlVErrMemory(ctxt, "malloc failed");
266
0
      return(-1);
267
0
  }
268
31.9k
    }
269
270
1.22M
    if (ctxt->vstateNr >= ctxt->vstateMax) {
271
4.18k
        xmlValidState *tmp;
272
273
4.18k
  tmp = (xmlValidState *) xmlRealloc(ctxt->vstateTab,
274
4.18k
               2 * ctxt->vstateMax * sizeof(ctxt->vstateTab[0]));
275
4.18k
        if (tmp == NULL) {
276
0
      xmlVErrMemory(ctxt, "realloc failed");
277
0
      return(-1);
278
0
  }
279
4.18k
  ctxt->vstateMax *= 2;
280
4.18k
  ctxt->vstateTab = tmp;
281
4.18k
    }
282
1.22M
    ctxt->vstate = &ctxt->vstateTab[ctxt->vstateNr];
283
1.22M
    ctxt->vstateTab[ctxt->vstateNr].elemDecl = elemDecl;
284
1.22M
    ctxt->vstateTab[ctxt->vstateNr].node = node;
285
1.22M
    if ((elemDecl != NULL) && (elemDecl->etype == XML_ELEMENT_TYPE_ELEMENT)) {
286
190k
  if (elemDecl->contModel == NULL)
287
36.8k
      xmlValidBuildContentModel(ctxt, elemDecl);
288
190k
  if (elemDecl->contModel != NULL) {
289
190k
      ctxt->vstateTab[ctxt->vstateNr].exec =
290
190k
    xmlRegNewExecCtxt(elemDecl->contModel, NULL, NULL);
291
190k
  } else {
292
0
      ctxt->vstateTab[ctxt->vstateNr].exec = NULL;
293
0
      xmlErrValidNode(ctxt, (xmlNodePtr) elemDecl,
294
0
                      XML_ERR_INTERNAL_ERROR,
295
0
          "Failed to build content model regexp for %s\n",
296
0
          node->name, NULL, NULL);
297
0
  }
298
190k
    }
299
1.22M
    return(ctxt->vstateNr++);
300
1.22M
}
301
302
static int
303
1.22M
vstateVPop(xmlValidCtxtPtr ctxt) {
304
1.22M
    xmlElementPtr elemDecl;
305
306
1.22M
    if (ctxt->vstateNr < 1) return(-1);
307
1.22M
    ctxt->vstateNr--;
308
1.22M
    elemDecl = ctxt->vstateTab[ctxt->vstateNr].elemDecl;
309
1.22M
    ctxt->vstateTab[ctxt->vstateNr].elemDecl = NULL;
310
1.22M
    ctxt->vstateTab[ctxt->vstateNr].node = NULL;
311
1.22M
    if ((elemDecl != NULL) && (elemDecl->etype == XML_ELEMENT_TYPE_ELEMENT)) {
312
190k
  xmlRegFreeExecCtxt(ctxt->vstateTab[ctxt->vstateNr].exec);
313
190k
    }
314
1.22M
    ctxt->vstateTab[ctxt->vstateNr].exec = NULL;
315
1.22M
    if (ctxt->vstateNr >= 1)
316
1.19M
  ctxt->vstate = &ctxt->vstateTab[ctxt->vstateNr - 1];
317
31.9k
    else
318
31.9k
  ctxt->vstate = NULL;
319
1.22M
    return(ctxt->vstateNr);
320
1.22M
}
321
322
#else /* not LIBXML_REGEXP_ENABLED */
323
/*
324
 * If regexp are not enabled, it uses a home made algorithm less
325
 * complex and easier to
326
 * debug/maintain than a generic NFA -> DFA state based algo. The
327
 * only restriction is on the deepness of the tree limited by the
328
 * size of the occurs bitfield
329
 *
330
 * this is the content of a saved state for rollbacks
331
 */
332
333
#define ROLLBACK_OR 0
334
#define ROLLBACK_PARENT 1
335
336
typedef struct _xmlValidState {
337
    xmlElementContentPtr cont;  /* pointer to the content model subtree */
338
    xmlNodePtr           node;  /* pointer to the current node in the list */
339
    long                 occurs;/* bitfield for multiple occurrences */
340
    unsigned char        depth; /* current depth in the overall tree */
341
    unsigned char        state; /* ROLLBACK_XXX */
342
} _xmlValidState;
343
344
#define MAX_RECURSE 25000
345
#define MAX_DEPTH ((sizeof(_xmlValidState.occurs)) * 8)
346
#define CONT ctxt->vstate->cont
347
#define NODE ctxt->vstate->node
348
#define DEPTH ctxt->vstate->depth
349
#define OCCURS ctxt->vstate->occurs
350
#define STATE ctxt->vstate->state
351
352
#define OCCURRENCE (ctxt->vstate->occurs & (1 << DEPTH))
353
#define PARENT_OCCURRENCE (ctxt->vstate->occurs & ((1 << DEPTH) - 1))
354
355
#define SET_OCCURRENCE ctxt->vstate->occurs |= (1 << DEPTH)
356
#define RESET_OCCURRENCE ctxt->vstate->occurs &= ((1 << DEPTH) - 1)
357
358
static int
359
vstateVPush(xmlValidCtxtPtr ctxt, xmlElementContentPtr cont,
360
      xmlNodePtr node, unsigned char depth, long occurs,
361
      unsigned char state) {
362
    int i = ctxt->vstateNr - 1;
363
364
    if (ctxt->vstateNr > MAX_RECURSE) {
365
  return(-1);
366
    }
367
    if (ctxt->vstateTab == NULL) {
368
  ctxt->vstateMax = 8;
369
  ctxt->vstateTab = (xmlValidState *) xmlMalloc(
370
         ctxt->vstateMax * sizeof(ctxt->vstateTab[0]));
371
  if (ctxt->vstateTab == NULL) {
372
      xmlVErrMemory(ctxt, "malloc failed");
373
      return(-1);
374
  }
375
    }
376
    if (ctxt->vstateNr >= ctxt->vstateMax) {
377
        xmlValidState *tmp;
378
379
        tmp = (xmlValidState *) xmlRealloc(ctxt->vstateTab,
380
               2 * ctxt->vstateMax * sizeof(ctxt->vstateTab[0]));
381
        if (tmp == NULL) {
382
      xmlVErrMemory(ctxt, "malloc failed");
383
      return(-1);
384
  }
385
  ctxt->vstateMax *= 2;
386
  ctxt->vstateTab = tmp;
387
  ctxt->vstate = &ctxt->vstateTab[0];
388
    }
389
    /*
390
     * Don't push on the stack a state already here
391
     */
392
    if ((i >= 0) && (ctxt->vstateTab[i].cont == cont) &&
393
  (ctxt->vstateTab[i].node == node) &&
394
  (ctxt->vstateTab[i].depth == depth) &&
395
  (ctxt->vstateTab[i].occurs == occurs) &&
396
  (ctxt->vstateTab[i].state == state))
397
  return(ctxt->vstateNr);
398
    ctxt->vstateTab[ctxt->vstateNr].cont = cont;
399
    ctxt->vstateTab[ctxt->vstateNr].node = node;
400
    ctxt->vstateTab[ctxt->vstateNr].depth = depth;
401
    ctxt->vstateTab[ctxt->vstateNr].occurs = occurs;
402
    ctxt->vstateTab[ctxt->vstateNr].state = state;
403
    return(ctxt->vstateNr++);
404
}
405
406
static int
407
vstateVPop(xmlValidCtxtPtr ctxt) {
408
    if (ctxt->vstateNr <= 1) return(-1);
409
    ctxt->vstateNr--;
410
    ctxt->vstate = &ctxt->vstateTab[0];
411
    ctxt->vstate->cont =  ctxt->vstateTab[ctxt->vstateNr].cont;
412
    ctxt->vstate->node = ctxt->vstateTab[ctxt->vstateNr].node;
413
    ctxt->vstate->depth = ctxt->vstateTab[ctxt->vstateNr].depth;
414
    ctxt->vstate->occurs = ctxt->vstateTab[ctxt->vstateNr].occurs;
415
    ctxt->vstate->state = ctxt->vstateTab[ctxt->vstateNr].state;
416
    return(ctxt->vstateNr);
417
}
418
419
#endif /* LIBXML_REGEXP_ENABLED */
420
421
static int
422
nodeVPush(xmlValidCtxtPtr ctxt, xmlNodePtr value)
423
734k
{
424
734k
    if (ctxt->nodeMax <= 0) {
425
19.3k
        ctxt->nodeMax = 4;
426
19.3k
        ctxt->nodeTab =
427
19.3k
            (xmlNodePtr *) xmlMalloc(ctxt->nodeMax *
428
19.3k
                                     sizeof(ctxt->nodeTab[0]));
429
19.3k
        if (ctxt->nodeTab == NULL) {
430
0
      xmlVErrMemory(ctxt, "malloc failed");
431
0
            ctxt->nodeMax = 0;
432
0
            return (0);
433
0
        }
434
19.3k
    }
435
734k
    if (ctxt->nodeNr >= ctxt->nodeMax) {
436
0
        xmlNodePtr *tmp;
437
0
        tmp = (xmlNodePtr *) xmlRealloc(ctxt->nodeTab,
438
0
            ctxt->nodeMax * 2 * sizeof(ctxt->nodeTab[0]));
439
0
        if (tmp == NULL) {
440
0
      xmlVErrMemory(ctxt, "realloc failed");
441
0
            return (0);
442
0
        }
443
0
        ctxt->nodeMax *= 2;
444
0
  ctxt->nodeTab = tmp;
445
0
    }
446
734k
    ctxt->nodeTab[ctxt->nodeNr] = value;
447
734k
    ctxt->node = value;
448
734k
    return (ctxt->nodeNr++);
449
734k
}
450
static xmlNodePtr
451
nodeVPop(xmlValidCtxtPtr ctxt)
452
1.56M
{
453
1.56M
    xmlNodePtr ret;
454
455
1.56M
    if (ctxt->nodeNr <= 0)
456
834k
        return (NULL);
457
733k
    ctxt->nodeNr--;
458
733k
    if (ctxt->nodeNr > 0)
459
713k
        ctxt->node = ctxt->nodeTab[ctxt->nodeNr - 1];
460
20.0k
    else
461
20.0k
        ctxt->node = NULL;
462
733k
    ret = ctxt->nodeTab[ctxt->nodeNr];
463
733k
    ctxt->nodeTab[ctxt->nodeNr] = NULL;
464
733k
    return (ret);
465
1.56M
}
466
467
#ifdef DEBUG_VALID_ALGO
468
static void
469
xmlValidPrintNode(xmlNodePtr cur) {
470
    if (cur == NULL) {
471
  xmlGenericError(xmlGenericErrorContext, "null");
472
  return;
473
    }
474
    switch (cur->type) {
475
  case XML_ELEMENT_NODE:
476
      xmlGenericError(xmlGenericErrorContext, "%s ", cur->name);
477
      break;
478
  case XML_TEXT_NODE:
479
      xmlGenericError(xmlGenericErrorContext, "text ");
480
      break;
481
  case XML_CDATA_SECTION_NODE:
482
      xmlGenericError(xmlGenericErrorContext, "cdata ");
483
      break;
484
  case XML_ENTITY_REF_NODE:
485
      xmlGenericError(xmlGenericErrorContext, "&%s; ", cur->name);
486
      break;
487
  case XML_PI_NODE:
488
      xmlGenericError(xmlGenericErrorContext, "pi(%s) ", cur->name);
489
      break;
490
  case XML_COMMENT_NODE:
491
      xmlGenericError(xmlGenericErrorContext, "comment ");
492
      break;
493
  case XML_ATTRIBUTE_NODE:
494
      xmlGenericError(xmlGenericErrorContext, "?attr? ");
495
      break;
496
  case XML_ENTITY_NODE:
497
      xmlGenericError(xmlGenericErrorContext, "?ent? ");
498
      break;
499
  case XML_DOCUMENT_NODE:
500
      xmlGenericError(xmlGenericErrorContext, "?doc? ");
501
      break;
502
  case XML_DOCUMENT_TYPE_NODE:
503
      xmlGenericError(xmlGenericErrorContext, "?doctype? ");
504
      break;
505
  case XML_DOCUMENT_FRAG_NODE:
506
      xmlGenericError(xmlGenericErrorContext, "?frag? ");
507
      break;
508
  case XML_NOTATION_NODE:
509
      xmlGenericError(xmlGenericErrorContext, "?nota? ");
510
      break;
511
  case XML_HTML_DOCUMENT_NODE:
512
      xmlGenericError(xmlGenericErrorContext, "?html? ");
513
      break;
514
  case XML_DTD_NODE:
515
      xmlGenericError(xmlGenericErrorContext, "?dtd? ");
516
      break;
517
  case XML_ELEMENT_DECL:
518
      xmlGenericError(xmlGenericErrorContext, "?edecl? ");
519
      break;
520
  case XML_ATTRIBUTE_DECL:
521
      xmlGenericError(xmlGenericErrorContext, "?adecl? ");
522
      break;
523
  case XML_ENTITY_DECL:
524
      xmlGenericError(xmlGenericErrorContext, "?entdecl? ");
525
      break;
526
  case XML_NAMESPACE_DECL:
527
      xmlGenericError(xmlGenericErrorContext, "?nsdecl? ");
528
      break;
529
  case XML_XINCLUDE_START:
530
      xmlGenericError(xmlGenericErrorContext, "incstart ");
531
      break;
532
  case XML_XINCLUDE_END:
533
      xmlGenericError(xmlGenericErrorContext, "incend ");
534
      break;
535
    }
536
}
537
538
static void
539
xmlValidPrintNodeList(xmlNodePtr cur) {
540
    if (cur == NULL)
541
  xmlGenericError(xmlGenericErrorContext, "null ");
542
    while (cur != NULL) {
543
  xmlValidPrintNode(cur);
544
  cur = cur->next;
545
    }
546
}
547
548
static void
549
xmlValidDebug(xmlNodePtr cur, xmlElementContentPtr cont) {
550
    char expr[5000];
551
552
    expr[0] = 0;
553
    xmlGenericError(xmlGenericErrorContext, "valid: ");
554
    xmlValidPrintNodeList(cur);
555
    xmlGenericError(xmlGenericErrorContext, "against ");
556
    xmlSnprintfElementContent(expr, 5000, cont, 1);
557
    xmlGenericError(xmlGenericErrorContext, "%s\n", expr);
558
}
559
560
static void
561
xmlValidDebugState(xmlValidStatePtr state) {
562
    xmlGenericError(xmlGenericErrorContext, "(");
563
    if (state->cont == NULL)
564
  xmlGenericError(xmlGenericErrorContext, "null,");
565
    else
566
  switch (state->cont->type) {
567
            case XML_ELEMENT_CONTENT_PCDATA:
568
    xmlGenericError(xmlGenericErrorContext, "pcdata,");
569
    break;
570
            case XML_ELEMENT_CONTENT_ELEMENT:
571
    xmlGenericError(xmlGenericErrorContext, "%s,",
572
              state->cont->name);
573
    break;
574
            case XML_ELEMENT_CONTENT_SEQ:
575
    xmlGenericError(xmlGenericErrorContext, "seq,");
576
    break;
577
            case XML_ELEMENT_CONTENT_OR:
578
    xmlGenericError(xmlGenericErrorContext, "or,");
579
    break;
580
  }
581
    xmlValidPrintNode(state->node);
582
    xmlGenericError(xmlGenericErrorContext, ",%d,%X,%d)",
583
      state->depth, state->occurs, state->state);
584
}
585
586
static void
587
xmlValidStateDebug(xmlValidCtxtPtr ctxt) {
588
    int i, j;
589
590
    xmlGenericError(xmlGenericErrorContext, "state: ");
591
    xmlValidDebugState(ctxt->vstate);
592
    xmlGenericError(xmlGenericErrorContext, " stack: %d ",
593
      ctxt->vstateNr - 1);
594
    for (i = 0, j = ctxt->vstateNr - 1;(i < 3) && (j > 0);i++,j--)
595
  xmlValidDebugState(&ctxt->vstateTab[j]);
596
    xmlGenericError(xmlGenericErrorContext, "\n");
597
}
598
599
/*****
600
#define DEBUG_VALID_STATE(n,c) xmlValidDebug(n,c);
601
 *****/
602
603
#define DEBUG_VALID_STATE(n,c) xmlValidStateDebug(ctxt);
604
#define DEBUG_VALID_MSG(m)          \
605
    xmlGenericError(xmlGenericErrorContext, "%s\n", m);
606
607
#else
608
#define DEBUG_VALID_STATE(n,c)
609
#define DEBUG_VALID_MSG(m)
610
#endif
611
612
/* TODO: use hash table for accesses to elem and attribute definitions */
613
614
615
#define CHECK_DTD           \
616
12.6M
   if (doc == NULL) return(0);         \
617
12.6M
   else if ((doc->intSubset == NULL) &&       \
618
12.6M
      (doc->extSubset == NULL)) return(0)
619
620
#ifdef LIBXML_REGEXP_ENABLED
621
622
/************************************************************************
623
 *                  *
624
 *    Content model validation based on the regexps   *
625
 *                  *
626
 ************************************************************************/
627
628
/**
629
 * xmlValidBuildAContentModel:
630
 * @content:  the content model
631
 * @ctxt:  the schema parser context
632
 * @name:  the element name whose content is being built
633
 *
634
 * Generate the automata sequence needed for that type
635
 *
636
 * Returns 1 if successful or 0 in case of error.
637
 */
638
static int
639
xmlValidBuildAContentModel(xmlElementContentPtr content,
640
               xmlValidCtxtPtr ctxt,
641
795k
               const xmlChar *name) {
642
795k
    if (content == NULL) {
643
0
  xmlErrValidNode(ctxt, NULL, XML_ERR_INTERNAL_ERROR,
644
0
      "Found NULL content in content model of %s\n",
645
0
      name, NULL, NULL);
646
0
  return(0);
647
0
    }
648
795k
    switch (content->type) {
649
0
  case XML_ELEMENT_CONTENT_PCDATA:
650
0
      xmlErrValidNode(ctxt, NULL, XML_ERR_INTERNAL_ERROR,
651
0
          "Found PCDATA in content model of %s\n",
652
0
                name, NULL, NULL);
653
0
      return(0);
654
0
      break;
655
690k
  case XML_ELEMENT_CONTENT_ELEMENT: {
656
690k
      xmlAutomataStatePtr oldstate = ctxt->state;
657
690k
      xmlChar fn[50];
658
690k
      xmlChar *fullname;
659
660
690k
      fullname = xmlBuildQName(content->name, content->prefix, fn, 50);
661
690k
      if (fullname == NULL) {
662
0
          xmlVErrMemory(ctxt, "Building content model");
663
0
    return(0);
664
0
      }
665
666
690k
      switch (content->ocur) {
667
567k
    case XML_ELEMENT_CONTENT_ONCE:
668
567k
        ctxt->state = xmlAutomataNewTransition(ctxt->am,
669
567k
          ctxt->state, NULL, fullname, NULL);
670
567k
        break;
671
44.2k
    case XML_ELEMENT_CONTENT_OPT:
672
44.2k
        ctxt->state = xmlAutomataNewTransition(ctxt->am,
673
44.2k
          ctxt->state, NULL, fullname, NULL);
674
44.2k
        xmlAutomataNewEpsilon(ctxt->am, oldstate, ctxt->state);
675
44.2k
        break;
676
40.0k
    case XML_ELEMENT_CONTENT_PLUS:
677
40.0k
        ctxt->state = xmlAutomataNewTransition(ctxt->am,
678
40.0k
          ctxt->state, NULL, fullname, NULL);
679
40.0k
        xmlAutomataNewTransition(ctxt->am, ctxt->state,
680
40.0k
                           ctxt->state, fullname, NULL);
681
40.0k
        break;
682
39.3k
    case XML_ELEMENT_CONTENT_MULT:
683
39.3k
        ctxt->state = xmlAutomataNewEpsilon(ctxt->am,
684
39.3k
              ctxt->state, NULL);
685
39.3k
        xmlAutomataNewTransition(ctxt->am,
686
39.3k
          ctxt->state, ctxt->state, fullname, NULL);
687
39.3k
        break;
688
690k
      }
689
690k
      if ((fullname != fn) && (fullname != content->name))
690
3.27k
    xmlFree(fullname);
691
690k
      break;
692
690k
  }
693
45.2k
  case XML_ELEMENT_CONTENT_SEQ: {
694
45.2k
      xmlAutomataStatePtr oldstate, oldend;
695
45.2k
      xmlElementContentOccur ocur;
696
697
      /*
698
       * Simply iterate over the content
699
       */
700
45.2k
      oldstate = ctxt->state;
701
45.2k
      ocur = content->ocur;
702
45.2k
      if (ocur != XML_ELEMENT_CONTENT_ONCE) {
703
5.04k
    ctxt->state = xmlAutomataNewEpsilon(ctxt->am, oldstate, NULL);
704
5.04k
    oldstate = ctxt->state;
705
5.04k
      }
706
129k
      do {
707
129k
    xmlValidBuildAContentModel(content->c1, ctxt, name);
708
129k
    content = content->c2;
709
129k
      } while ((content->type == XML_ELEMENT_CONTENT_SEQ) &&
710
129k
         (content->ocur == XML_ELEMENT_CONTENT_ONCE));
711
45.2k
      xmlValidBuildAContentModel(content, ctxt, name);
712
45.2k
      oldend = ctxt->state;
713
45.2k
      ctxt->state = xmlAutomataNewEpsilon(ctxt->am, oldend, NULL);
714
45.2k
      switch (ocur) {
715
40.2k
    case XML_ELEMENT_CONTENT_ONCE:
716
40.2k
        break;
717
1.42k
    case XML_ELEMENT_CONTENT_OPT:
718
1.42k
        xmlAutomataNewEpsilon(ctxt->am, oldstate, ctxt->state);
719
1.42k
        break;
720
942
    case XML_ELEMENT_CONTENT_MULT:
721
942
        xmlAutomataNewEpsilon(ctxt->am, oldstate, ctxt->state);
722
942
        xmlAutomataNewEpsilon(ctxt->am, oldend, oldstate);
723
942
        break;
724
2.67k
    case XML_ELEMENT_CONTENT_PLUS:
725
2.67k
        xmlAutomataNewEpsilon(ctxt->am, oldend, oldstate);
726
2.67k
        break;
727
45.2k
      }
728
45.2k
      break;
729
45.2k
  }
730
59.0k
  case XML_ELEMENT_CONTENT_OR: {
731
59.0k
      xmlAutomataStatePtr oldstate, oldend;
732
59.0k
      xmlElementContentOccur ocur;
733
734
59.0k
      ocur = content->ocur;
735
59.0k
      if ((ocur == XML_ELEMENT_CONTENT_PLUS) ||
736
59.0k
    (ocur == XML_ELEMENT_CONTENT_MULT)) {
737
49.8k
    ctxt->state = xmlAutomataNewEpsilon(ctxt->am,
738
49.8k
      ctxt->state, NULL);
739
49.8k
      }
740
59.0k
      oldstate = ctxt->state;
741
59.0k
      oldend = xmlAutomataNewState(ctxt->am);
742
743
      /*
744
       * iterate over the subtypes and remerge the end with an
745
       * epsilon transition
746
       */
747
422k
      do {
748
422k
    ctxt->state = oldstate;
749
422k
    xmlValidBuildAContentModel(content->c1, ctxt, name);
750
422k
    xmlAutomataNewEpsilon(ctxt->am, ctxt->state, oldend);
751
422k
    content = content->c2;
752
422k
      } while ((content->type == XML_ELEMENT_CONTENT_OR) &&
753
422k
         (content->ocur == XML_ELEMENT_CONTENT_ONCE));
754
59.0k
      ctxt->state = oldstate;
755
59.0k
      xmlValidBuildAContentModel(content, ctxt, name);
756
59.0k
      xmlAutomataNewEpsilon(ctxt->am, ctxt->state, oldend);
757
59.0k
      ctxt->state = xmlAutomataNewEpsilon(ctxt->am, oldend, NULL);
758
59.0k
      switch (ocur) {
759
8.54k
    case XML_ELEMENT_CONTENT_ONCE:
760
8.54k
        break;
761
685
    case XML_ELEMENT_CONTENT_OPT:
762
685
        xmlAutomataNewEpsilon(ctxt->am, oldstate, ctxt->state);
763
685
        break;
764
29.4k
    case XML_ELEMENT_CONTENT_MULT:
765
29.4k
        xmlAutomataNewEpsilon(ctxt->am, oldstate, ctxt->state);
766
29.4k
        xmlAutomataNewEpsilon(ctxt->am, oldend, oldstate);
767
29.4k
        break;
768
20.4k
    case XML_ELEMENT_CONTENT_PLUS:
769
20.4k
        xmlAutomataNewEpsilon(ctxt->am, oldend, oldstate);
770
20.4k
        break;
771
59.0k
      }
772
59.0k
      break;
773
59.0k
  }
774
59.0k
  default:
775
0
      xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
776
0
                  "ContentModel broken for element %s\n",
777
0
      (const char *) name);
778
0
      return(0);
779
795k
    }
780
795k
    return(1);
781
795k
}
782
/**
783
 * xmlValidBuildContentModel:
784
 * @ctxt:  a validation context
785
 * @elem:  an element declaration node
786
 *
787
 * (Re)Build the automata associated to the content model of this
788
 * element
789
 *
790
 * Returns 1 in case of success, 0 in case of error
791
 */
792
int
793
138k
xmlValidBuildContentModel(xmlValidCtxtPtr ctxt, xmlElementPtr elem) {
794
795
138k
    if ((ctxt == NULL) || (elem == NULL))
796
0
  return(0);
797
138k
    if (elem->type != XML_ELEMENT_DECL)
798
0
  return(0);
799
138k
    if (elem->etype != XML_ELEMENT_TYPE_ELEMENT)
800
0
  return(1);
801
    /* TODO: should we rebuild in this case ? */
802
138k
    if (elem->contModel != NULL) {
803
0
  if (!xmlRegexpIsDeterminist(elem->contModel)) {
804
0
      ctxt->valid = 0;
805
0
      return(0);
806
0
  }
807
0
  return(1);
808
0
    }
809
810
138k
    ctxt->am = xmlNewAutomata();
811
138k
    if (ctxt->am == NULL) {
812
0
  xmlErrValidNode(ctxt, (xmlNodePtr) elem,
813
0
                  XML_ERR_INTERNAL_ERROR,
814
0
                  "Cannot create automata for element %s\n",
815
0
            elem->name, NULL, NULL);
816
0
  return(0);
817
0
    }
818
138k
    ctxt->state = xmlAutomataGetInitState(ctxt->am);
819
138k
    xmlValidBuildAContentModel(elem->content, ctxt, elem->name);
820
138k
    xmlAutomataSetFinalState(ctxt->am, ctxt->state);
821
138k
    elem->contModel = xmlAutomataCompile(ctxt->am);
822
138k
    if (xmlRegexpIsDeterminist(elem->contModel) != 1) {
823
6.62k
  char expr[5000];
824
6.62k
  expr[0] = 0;
825
6.62k
  xmlSnprintfElementContent(expr, 5000, elem->content, 1);
826
6.62k
  xmlErrValidNode(ctxt, (xmlNodePtr) elem,
827
6.62k
                  XML_DTD_CONTENT_NOT_DETERMINIST,
828
6.62k
         "Content model of %s is not deterministic: %s\n",
829
6.62k
         elem->name, BAD_CAST expr, NULL);
830
#ifdef DEBUG_REGEXP_ALGO
831
        xmlRegexpPrint(stderr, elem->contModel);
832
#endif
833
6.62k
        ctxt->valid = 0;
834
6.62k
  ctxt->state = NULL;
835
6.62k
  xmlFreeAutomata(ctxt->am);
836
6.62k
  ctxt->am = NULL;
837
6.62k
  return(0);
838
6.62k
    }
839
131k
    ctxt->state = NULL;
840
131k
    xmlFreeAutomata(ctxt->am);
841
131k
    ctxt->am = NULL;
842
131k
    return(1);
843
138k
}
844
845
#endif /* LIBXML_REGEXP_ENABLED */
846
847
/****************************************************************
848
 *                *
849
 *  Util functions for data allocation/deallocation   *
850
 *                *
851
 ****************************************************************/
852
853
/**
854
 * xmlNewValidCtxt:
855
 *
856
 * Allocate a validation context structure.
857
 *
858
 * Returns NULL if not, otherwise the new validation context structure
859
 */
860
0
xmlValidCtxtPtr xmlNewValidCtxt(void) {
861
0
    xmlValidCtxtPtr ret;
862
863
0
    if ((ret = xmlMalloc(sizeof (xmlValidCtxt))) == NULL) {
864
0
  xmlVErrMemory(NULL, "malloc failed");
865
0
  return (NULL);
866
0
    }
867
868
0
    (void) memset(ret, 0, sizeof (xmlValidCtxt));
869
870
0
    return (ret);
871
0
}
872
873
/**
874
 * xmlFreeValidCtxt:
875
 * @cur:  the validation context to free
876
 *
877
 * Free a validation context structure.
878
 */
879
void
880
0
xmlFreeValidCtxt(xmlValidCtxtPtr cur) {
881
0
    if (cur->vstateTab != NULL)
882
0
        xmlFree(cur->vstateTab);
883
0
    if (cur->nodeTab != NULL)
884
0
        xmlFree(cur->nodeTab);
885
0
    xmlFree(cur);
886
0
}
887
888
#endif /* LIBXML_VALID_ENABLED */
889
890
/**
891
 * xmlNewDocElementContent:
892
 * @doc:  the document
893
 * @name:  the subelement name or NULL
894
 * @type:  the type of element content decl
895
 *
896
 * Allocate an element content structure for the document.
897
 *
898
 * Returns NULL if not, otherwise the new element content structure
899
 */
900
xmlElementContentPtr
901
xmlNewDocElementContent(xmlDocPtr doc, const xmlChar *name,
902
37.4M
                        xmlElementContentType type) {
903
37.4M
    xmlElementContentPtr ret;
904
37.4M
    xmlDictPtr dict = NULL;
905
906
37.4M
    if (doc != NULL)
907
37.4M
        dict = doc->dict;
908
909
37.4M
    switch(type) {
910
18.5M
  case XML_ELEMENT_CONTENT_ELEMENT:
911
18.5M
      if (name == NULL) {
912
0
          xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
913
0
      "xmlNewElementContent : name == NULL !\n",
914
0
      NULL);
915
0
      }
916
18.5M
      break;
917
2.19M
        case XML_ELEMENT_CONTENT_PCDATA:
918
4.33M
  case XML_ELEMENT_CONTENT_SEQ:
919
18.9M
  case XML_ELEMENT_CONTENT_OR:
920
18.9M
      if (name != NULL) {
921
0
          xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
922
0
      "xmlNewElementContent : name != NULL !\n",
923
0
      NULL);
924
0
      }
925
18.9M
      break;
926
0
  default:
927
0
      xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
928
0
        "Internal: ELEMENT content corrupted invalid type\n",
929
0
        NULL);
930
0
      return(NULL);
931
37.4M
    }
932
37.4M
    ret = (xmlElementContentPtr) xmlMalloc(sizeof(xmlElementContent));
933
37.4M
    if (ret == NULL) {
934
0
  xmlVErrMemory(NULL, "malloc failed");
935
0
  return(NULL);
936
0
    }
937
37.4M
    memset(ret, 0, sizeof(xmlElementContent));
938
37.4M
    ret->type = type;
939
37.4M
    ret->ocur = XML_ELEMENT_CONTENT_ONCE;
940
37.4M
    if (name != NULL) {
941
18.5M
        int l;
942
18.5M
  const xmlChar *tmp;
943
944
18.5M
  tmp = xmlSplitQName3(name, &l);
945
18.5M
  if (tmp == NULL) {
946
18.1M
      if (dict == NULL)
947
3.10M
    ret->name = xmlStrdup(name);
948
15.0M
      else
949
15.0M
          ret->name = xmlDictLookup(dict, name, -1);
950
18.1M
  } else {
951
422k
      if (dict == NULL) {
952
144k
    ret->prefix = xmlStrndup(name, l);
953
144k
    ret->name = xmlStrdup(tmp);
954
277k
      } else {
955
277k
          ret->prefix = xmlDictLookup(dict, name, l);
956
277k
    ret->name = xmlDictLookup(dict, tmp, -1);
957
277k
      }
958
422k
  }
959
18.5M
    }
960
37.4M
    return(ret);
961
37.4M
}
962
963
/**
964
 * xmlNewElementContent:
965
 * @name:  the subelement name or NULL
966
 * @type:  the type of element content decl
967
 *
968
 * Allocate an element content structure.
969
 * Deprecated in favor of xmlNewDocElementContent
970
 *
971
 * Returns NULL if not, otherwise the new element content structure
972
 */
973
xmlElementContentPtr
974
0
xmlNewElementContent(const xmlChar *name, xmlElementContentType type) {
975
0
    return(xmlNewDocElementContent(NULL, name, type));
976
0
}
977
978
/**
979
 * xmlCopyDocElementContent:
980
 * @doc:  the document owning the element declaration
981
 * @cur:  An element content pointer.
982
 *
983
 * Build a copy of an element content description.
984
 *
985
 * Returns the new xmlElementContentPtr or NULL in case of error.
986
 */
987
xmlElementContentPtr
988
0
xmlCopyDocElementContent(xmlDocPtr doc, xmlElementContentPtr cur) {
989
0
    xmlElementContentPtr ret = NULL, prev = NULL, tmp;
990
0
    xmlDictPtr dict = NULL;
991
992
0
    if (cur == NULL) return(NULL);
993
994
0
    if (doc != NULL)
995
0
        dict = doc->dict;
996
997
0
    ret = (xmlElementContentPtr) xmlMalloc(sizeof(xmlElementContent));
998
0
    if (ret == NULL) {
999
0
  xmlVErrMemory(NULL, "malloc failed");
1000
0
  return(NULL);
1001
0
    }
1002
0
    memset(ret, 0, sizeof(xmlElementContent));
1003
0
    ret->type = cur->type;
1004
0
    ret->ocur = cur->ocur;
1005
0
    if (cur->name != NULL) {
1006
0
  if (dict)
1007
0
      ret->name = xmlDictLookup(dict, cur->name, -1);
1008
0
  else
1009
0
      ret->name = xmlStrdup(cur->name);
1010
0
    }
1011
1012
0
    if (cur->prefix != NULL) {
1013
0
  if (dict)
1014
0
      ret->prefix = xmlDictLookup(dict, cur->prefix, -1);
1015
0
  else
1016
0
      ret->prefix = xmlStrdup(cur->prefix);
1017
0
    }
1018
0
    if (cur->c1 != NULL)
1019
0
        ret->c1 = xmlCopyDocElementContent(doc, cur->c1);
1020
0
    if (ret->c1 != NULL)
1021
0
  ret->c1->parent = ret;
1022
0
    if (cur->c2 != NULL) {
1023
0
        prev = ret;
1024
0
  cur = cur->c2;
1025
0
  while (cur != NULL) {
1026
0
      tmp = (xmlElementContentPtr) xmlMalloc(sizeof(xmlElementContent));
1027
0
      if (tmp == NULL) {
1028
0
    xmlVErrMemory(NULL, "malloc failed");
1029
0
    return(ret);
1030
0
      }
1031
0
      memset(tmp, 0, sizeof(xmlElementContent));
1032
0
      tmp->type = cur->type;
1033
0
      tmp->ocur = cur->ocur;
1034
0
      prev->c2 = tmp;
1035
0
      tmp->parent = prev;
1036
0
      if (cur->name != NULL) {
1037
0
    if (dict)
1038
0
        tmp->name = xmlDictLookup(dict, cur->name, -1);
1039
0
    else
1040
0
        tmp->name = xmlStrdup(cur->name);
1041
0
      }
1042
1043
0
      if (cur->prefix != NULL) {
1044
0
    if (dict)
1045
0
        tmp->prefix = xmlDictLookup(dict, cur->prefix, -1);
1046
0
    else
1047
0
        tmp->prefix = xmlStrdup(cur->prefix);
1048
0
      }
1049
0
      if (cur->c1 != NULL)
1050
0
          tmp->c1 = xmlCopyDocElementContent(doc,cur->c1);
1051
0
      if (tmp->c1 != NULL)
1052
0
    tmp->c1->parent = ret;
1053
0
      prev = tmp;
1054
0
      cur = cur->c2;
1055
0
  }
1056
0
    }
1057
0
    return(ret);
1058
0
}
1059
1060
/**
1061
 * xmlCopyElementContent:
1062
 * @cur:  An element content pointer.
1063
 *
1064
 * Build a copy of an element content description.
1065
 * Deprecated, use xmlCopyDocElementContent instead
1066
 *
1067
 * Returns the new xmlElementContentPtr or NULL in case of error.
1068
 */
1069
xmlElementContentPtr
1070
0
xmlCopyElementContent(xmlElementContentPtr cur) {
1071
0
    return(xmlCopyDocElementContent(NULL, cur));
1072
0
}
1073
1074
/**
1075
 * xmlFreeDocElementContent:
1076
 * @doc: the document owning the element declaration
1077
 * @cur:  the element content tree to free
1078
 *
1079
 * Free an element content structure. The whole subtree is removed.
1080
 */
1081
void
1082
5.13M
xmlFreeDocElementContent(xmlDocPtr doc, xmlElementContentPtr cur) {
1083
5.13M
    xmlDictPtr dict = NULL;
1084
5.13M
    size_t depth = 0;
1085
1086
5.13M
    if (cur == NULL)
1087
1.12M
        return;
1088
4.01M
    if (doc != NULL)
1089
4.00M
        dict = doc->dict;
1090
1091
37.4M
    while (1) {
1092
37.4M
        xmlElementContentPtr parent;
1093
1094
54.1M
        while ((cur->c1 != NULL) || (cur->c2 != NULL)) {
1095
16.7M
            cur = (cur->c1 != NULL) ? cur->c1 : cur->c2;
1096
16.7M
            depth += 1;
1097
16.7M
        }
1098
1099
37.4M
  switch (cur->type) {
1100
2.19M
      case XML_ELEMENT_CONTENT_PCDATA:
1101
20.7M
      case XML_ELEMENT_CONTENT_ELEMENT:
1102
22.8M
      case XML_ELEMENT_CONTENT_SEQ:
1103
37.4M
      case XML_ELEMENT_CONTENT_OR:
1104
37.4M
    break;
1105
0
      default:
1106
0
    xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
1107
0
      "Internal: ELEMENT content corrupted invalid type\n",
1108
0
      NULL);
1109
0
    return;
1110
37.4M
  }
1111
37.4M
  if (dict) {
1112
30.8M
      if ((cur->name != NULL) && (!xmlDictOwns(dict, cur->name)))
1113
0
          xmlFree((xmlChar *) cur->name);
1114
30.8M
      if ((cur->prefix != NULL) && (!xmlDictOwns(dict, cur->prefix)))
1115
0
          xmlFree((xmlChar *) cur->prefix);
1116
30.8M
  } else {
1117
6.55M
      if (cur->name != NULL) xmlFree((xmlChar *) cur->name);
1118
6.55M
      if (cur->prefix != NULL) xmlFree((xmlChar *) cur->prefix);
1119
6.55M
  }
1120
37.4M
        parent = cur->parent;
1121
37.4M
        if ((depth == 0) || (parent == NULL)) {
1122
4.01M
            xmlFree(cur);
1123
4.01M
            break;
1124
4.01M
        }
1125
33.4M
        if (cur == parent->c1)
1126
16.7M
            parent->c1 = NULL;
1127
16.7M
        else
1128
16.7M
            parent->c2 = NULL;
1129
33.4M
  xmlFree(cur);
1130
1131
33.4M
        if (parent->c2 != NULL) {
1132
16.7M
      cur = parent->c2;
1133
16.7M
        } else {
1134
16.7M
            depth -= 1;
1135
16.7M
            cur = parent;
1136
16.7M
        }
1137
33.4M
    }
1138
4.01M
}
1139
1140
/**
1141
 * xmlFreeElementContent:
1142
 * @cur:  the element content tree to free
1143
 *
1144
 * Free an element content structure. The whole subtree is removed.
1145
 * Deprecated, use xmlFreeDocElementContent instead
1146
 */
1147
void
1148
0
xmlFreeElementContent(xmlElementContentPtr cur) {
1149
0
    xmlFreeDocElementContent(NULL, cur);
1150
0
}
1151
1152
#ifdef LIBXML_OUTPUT_ENABLED
1153
/**
1154
 * xmlDumpElementOccur:
1155
 * @buf:  An XML buffer
1156
 * @cur:  An element table
1157
 *
1158
 * Dump the occurrence operator of an element.
1159
 */
1160
static void
1161
2.04M
xmlDumpElementOccur(xmlBufferPtr buf, xmlElementContentPtr cur) {
1162
2.04M
    switch (cur->ocur) {
1163
1.81M
        case XML_ELEMENT_CONTENT_ONCE:
1164
1.81M
            break;
1165
58.9k
        case XML_ELEMENT_CONTENT_OPT:
1166
58.9k
            xmlBufferWriteChar(buf, "?");
1167
58.9k
            break;
1168
144k
        case XML_ELEMENT_CONTENT_MULT:
1169
144k
            xmlBufferWriteChar(buf, "*");
1170
144k
            break;
1171
24.8k
        case XML_ELEMENT_CONTENT_PLUS:
1172
24.8k
            xmlBufferWriteChar(buf, "+");
1173
24.8k
            break;
1174
2.04M
    }
1175
2.04M
}
1176
1177
/**
1178
 * xmlDumpElementContent:
1179
 * @buf:  An XML buffer
1180
 * @content:  An element table
1181
 *
1182
 * This will dump the content of the element table as an XML DTD definition
1183
 */
1184
static void
1185
232k
xmlDumpElementContent(xmlBufferPtr buf, xmlElementContentPtr content) {
1186
232k
    xmlElementContentPtr cur;
1187
1188
232k
    if (content == NULL) return;
1189
1190
232k
    xmlBufferWriteChar(buf, "(");
1191
232k
    cur = content;
1192
1193
2.04M
    do {
1194
2.04M
        if (cur == NULL) return;
1195
1196
2.04M
        switch (cur->type) {
1197
132k
            case XML_ELEMENT_CONTENT_PCDATA:
1198
132k
                xmlBufferWriteChar(buf, "#PCDATA");
1199
132k
                break;
1200
1.00M
            case XML_ELEMENT_CONTENT_ELEMENT:
1201
1.00M
                if (cur->prefix != NULL) {
1202
75.4k
                    xmlBufferWriteCHAR(buf, cur->prefix);
1203
75.4k
                    xmlBufferWriteChar(buf, ":");
1204
75.4k
                }
1205
1.00M
                xmlBufferWriteCHAR(buf, cur->name);
1206
1.00M
                break;
1207
89.0k
            case XML_ELEMENT_CONTENT_SEQ:
1208
905k
            case XML_ELEMENT_CONTENT_OR:
1209
905k
                if ((cur != content) &&
1210
905k
                    (cur->parent != NULL) &&
1211
905k
                    ((cur->type != cur->parent->type) ||
1212
781k
                     (cur->ocur != XML_ELEMENT_CONTENT_ONCE)))
1213
10.3k
                    xmlBufferWriteChar(buf, "(");
1214
905k
                cur = cur->c1;
1215
905k
                continue;
1216
0
            default:
1217
0
                xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
1218
0
                        "Internal: ELEMENT cur corrupted invalid type\n",
1219
0
                        NULL);
1220
2.04M
        }
1221
1222
2.04M
        while (cur != content) {
1223
1.81M
            xmlElementContentPtr parent = cur->parent;
1224
1225
1.81M
            if (parent == NULL) return;
1226
1227
1.81M
            if (((cur->type == XML_ELEMENT_CONTENT_OR) ||
1228
1.81M
                 (cur->type == XML_ELEMENT_CONTENT_SEQ)) &&
1229
1.81M
                ((cur->type != parent->type) ||
1230
781k
                 (cur->ocur != XML_ELEMENT_CONTENT_ONCE)))
1231
10.3k
                xmlBufferWriteChar(buf, ")");
1232
1.81M
            xmlDumpElementOccur(buf, cur);
1233
1234
1.81M
            if (cur == parent->c1) {
1235
905k
                if (parent->type == XML_ELEMENT_CONTENT_SEQ)
1236
89.0k
                    xmlBufferWriteChar(buf, " , ");
1237
816k
                else if (parent->type == XML_ELEMENT_CONTENT_OR)
1238
816k
                    xmlBufferWriteChar(buf, " | ");
1239
1240
905k
                cur = parent->c2;
1241
905k
                break;
1242
905k
            }
1243
1244
905k
            cur = parent;
1245
905k
        }
1246
2.04M
    } while (cur != content);
1247
1248
232k
    xmlBufferWriteChar(buf, ")");
1249
232k
    xmlDumpElementOccur(buf, content);
1250
232k
}
1251
1252
/**
1253
 * xmlSprintfElementContent:
1254
 * @buf:  an output buffer
1255
 * @content:  An element table
1256
 * @englob: 1 if one must print the englobing parenthesis, 0 otherwise
1257
 *
1258
 * Deprecated, unsafe, use xmlSnprintfElementContent
1259
 */
1260
void
1261
xmlSprintfElementContent(char *buf ATTRIBUTE_UNUSED,
1262
                   xmlElementContentPtr content ATTRIBUTE_UNUSED,
1263
0
       int englob ATTRIBUTE_UNUSED) {
1264
0
}
1265
#endif /* LIBXML_OUTPUT_ENABLED */
1266
1267
/**
1268
 * xmlSnprintfElementContent:
1269
 * @buf:  an output buffer
1270
 * @size:  the buffer size
1271
 * @content:  An element table
1272
 * @englob: 1 if one must print the englobing parenthesis, 0 otherwise
1273
 *
1274
 * This will dump the content of the element content definition
1275
 * Intended just for the debug routine
1276
 */
1277
void
1278
318k
xmlSnprintfElementContent(char *buf, int size, xmlElementContentPtr content, int englob) {
1279
318k
    int len;
1280
1281
318k
    if (content == NULL) return;
1282
318k
    len = strlen(buf);
1283
318k
    if (size - len < 50) {
1284
101
  if ((size - len > 4) && (buf[len - 1] != '.'))
1285
101
      strcat(buf, " ...");
1286
101
  return;
1287
101
    }
1288
318k
    if (englob) strcat(buf, "(");
1289
318k
    switch (content->type) {
1290
0
        case XML_ELEMENT_CONTENT_PCDATA:
1291
0
            strcat(buf, "#PCDATA");
1292
0
      break;
1293
184k
  case XML_ELEMENT_CONTENT_ELEMENT: {
1294
184k
            int qnameLen = xmlStrlen(content->name);
1295
1296
184k
      if (content->prefix != NULL)
1297
55.1k
                qnameLen += xmlStrlen(content->prefix) + 1;
1298
184k
      if (size - len < qnameLen + 10) {
1299
1.80k
    strcat(buf, " ...");
1300
1.80k
    return;
1301
1.80k
      }
1302
182k
      if (content->prefix != NULL) {
1303
54.3k
    strcat(buf, (char *) content->prefix);
1304
54.3k
    strcat(buf, ":");
1305
54.3k
      }
1306
182k
      if (content->name != NULL)
1307
182k
    strcat(buf, (char *) content->name);
1308
182k
      break;
1309
184k
        }
1310
34.1k
  case XML_ELEMENT_CONTENT_SEQ:
1311
34.1k
      if ((content->c1->type == XML_ELEMENT_CONTENT_OR) ||
1312
34.1k
          (content->c1->type == XML_ELEMENT_CONTENT_SEQ))
1313
2.73k
    xmlSnprintfElementContent(buf, size, content->c1, 1);
1314
31.4k
      else
1315
31.4k
    xmlSnprintfElementContent(buf, size, content->c1, 0);
1316
34.1k
      len = strlen(buf);
1317
34.1k
      if (size - len < 50) {
1318
140
    if ((size - len > 4) && (buf[len - 1] != '.'))
1319
124
        strcat(buf, " ...");
1320
140
    return;
1321
140
      }
1322
33.9k
            strcat(buf, " , ");
1323
33.9k
      if (((content->c2->type == XML_ELEMENT_CONTENT_OR) ||
1324
33.9k
     (content->c2->ocur != XML_ELEMENT_CONTENT_ONCE)) &&
1325
33.9k
    (content->c2->type != XML_ELEMENT_CONTENT_ELEMENT))
1326
1.80k
    xmlSnprintfElementContent(buf, size, content->c2, 1);
1327
32.1k
      else
1328
32.1k
    xmlSnprintfElementContent(buf, size, content->c2, 0);
1329
33.9k
      break;
1330
100k
  case XML_ELEMENT_CONTENT_OR:
1331
100k
      if ((content->c1->type == XML_ELEMENT_CONTENT_OR) ||
1332
100k
          (content->c1->type == XML_ELEMENT_CONTENT_SEQ))
1333
5.37k
    xmlSnprintfElementContent(buf, size, content->c1, 1);
1334
94.7k
      else
1335
94.7k
    xmlSnprintfElementContent(buf, size, content->c1, 0);
1336
100k
      len = strlen(buf);
1337
100k
      if (size - len < 50) {
1338
344
    if ((size - len > 4) && (buf[len - 1] != '.'))
1339
281
        strcat(buf, " ...");
1340
344
    return;
1341
344
      }
1342
99.7k
            strcat(buf, " | ");
1343
99.7k
      if (((content->c2->type == XML_ELEMENT_CONTENT_SEQ) ||
1344
99.7k
     (content->c2->ocur != XML_ELEMENT_CONTENT_ONCE)) &&
1345
99.7k
    (content->c2->type != XML_ELEMENT_CONTENT_ELEMENT))
1346
2.86k
    xmlSnprintfElementContent(buf, size, content->c2, 1);
1347
96.8k
      else
1348
96.8k
    xmlSnprintfElementContent(buf, size, content->c2, 0);
1349
99.7k
      break;
1350
318k
    }
1351
316k
    if (size - strlen(buf) <= 2) return;
1352
316k
    if (englob)
1353
63.0k
        strcat(buf, ")");
1354
316k
    switch (content->ocur) {
1355
274k
        case XML_ELEMENT_CONTENT_ONCE:
1356
274k
      break;
1357
11.2k
        case XML_ELEMENT_CONTENT_OPT:
1358
11.2k
      strcat(buf, "?");
1359
11.2k
      break;
1360
22.4k
        case XML_ELEMENT_CONTENT_MULT:
1361
22.4k
      strcat(buf, "*");
1362
22.4k
      break;
1363
7.87k
        case XML_ELEMENT_CONTENT_PLUS:
1364
7.87k
      strcat(buf, "+");
1365
7.87k
      break;
1366
316k
    }
1367
316k
}
1368
1369
/****************************************************************
1370
 *                *
1371
 *  Registration of DTD declarations      *
1372
 *                *
1373
 ****************************************************************/
1374
1375
/**
1376
 * xmlFreeElement:
1377
 * @elem:  An element
1378
 *
1379
 * Deallocate the memory used by an element definition
1380
 */
1381
static void
1382
4.85M
xmlFreeElement(xmlElementPtr elem) {
1383
4.85M
    if (elem == NULL) return;
1384
4.85M
    xmlUnlinkNode((xmlNodePtr) elem);
1385
4.85M
    xmlFreeDocElementContent(elem->doc, elem->content);
1386
4.85M
    if (elem->name != NULL)
1387
4.85M
  xmlFree((xmlChar *) elem->name);
1388
4.85M
    if (elem->prefix != NULL)
1389
320k
  xmlFree((xmlChar *) elem->prefix);
1390
4.85M
#ifdef LIBXML_REGEXP_ENABLED
1391
4.85M
    if (elem->contModel != NULL)
1392
138k
  xmlRegFreeRegexp(elem->contModel);
1393
4.85M
#endif
1394
4.85M
    xmlFree(elem);
1395
4.85M
}
1396
1397
1398
/**
1399
 * xmlAddElementDecl:
1400
 * @ctxt:  the validation context
1401
 * @dtd:  pointer to the DTD
1402
 * @name:  the entity name
1403
 * @type:  the element type
1404
 * @content:  the element content tree or NULL
1405
 *
1406
 * Register a new element declaration
1407
 *
1408
 * Returns NULL if not, otherwise the entity
1409
 */
1410
xmlElementPtr
1411
xmlAddElementDecl(xmlValidCtxtPtr ctxt,
1412
                  xmlDtdPtr dtd, const xmlChar *name,
1413
                  xmlElementTypeVal type,
1414
4.81M
      xmlElementContentPtr content) {
1415
4.81M
    xmlElementPtr ret;
1416
4.81M
    xmlElementTablePtr table;
1417
4.81M
    xmlAttributePtr oldAttributes = NULL;
1418
4.81M
    xmlChar *ns, *uqname;
1419
1420
4.81M
    if (dtd == NULL) {
1421
0
  return(NULL);
1422
0
    }
1423
4.81M
    if (name == NULL) {
1424
0
  return(NULL);
1425
0
    }
1426
1427
4.81M
    switch (type) {
1428
1.02M
        case XML_ELEMENT_TYPE_EMPTY:
1429
1.02M
      if (content != NULL) {
1430
0
    xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
1431
0
            "xmlAddElementDecl: content != NULL for EMPTY\n",
1432
0
      NULL);
1433
0
    return(NULL);
1434
0
      }
1435
1.02M
      break;
1436
1.02M
  case XML_ELEMENT_TYPE_ANY:
1437
26.1k
      if (content != NULL) {
1438
0
    xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
1439
0
            "xmlAddElementDecl: content != NULL for ANY\n",
1440
0
      NULL);
1441
0
    return(NULL);
1442
0
      }
1443
26.1k
      break;
1444
2.06M
  case XML_ELEMENT_TYPE_MIXED:
1445
2.06M
      if (content == NULL) {
1446
1.64k
    xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
1447
1.64k
            "xmlAddElementDecl: content == NULL for MIXED\n",
1448
1.64k
      NULL);
1449
1.64k
    return(NULL);
1450
1.64k
      }
1451
2.06M
      break;
1452
2.06M
  case XML_ELEMENT_TYPE_ELEMENT:
1453
1.69M
      if (content == NULL) {
1454
5.51k
    xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
1455
5.51k
            "xmlAddElementDecl: content == NULL for ELEMENT\n",
1456
5.51k
      NULL);
1457
5.51k
    return(NULL);
1458
5.51k
      }
1459
1.68M
      break;
1460
1.68M
  default:
1461
0
      xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
1462
0
        "Internal: ELEMENT decl corrupted invalid type\n",
1463
0
        NULL);
1464
0
      return(NULL);
1465
4.81M
    }
1466
1467
    /*
1468
     * check if name is a QName
1469
     */
1470
4.80M
    uqname = xmlSplitQName2(name, &ns);
1471
4.80M
    if (uqname != NULL)
1472
309k
  name = uqname;
1473
1474
    /*
1475
     * Create the Element table if needed.
1476
     */
1477
4.80M
    table = (xmlElementTablePtr) dtd->elements;
1478
4.80M
    if (table == NULL) {
1479
333k
  xmlDictPtr dict = NULL;
1480
1481
333k
  if (dtd->doc != NULL)
1482
333k
      dict = dtd->doc->dict;
1483
333k
        table = xmlHashCreateDict(0, dict);
1484
333k
  dtd->elements = (void *) table;
1485
333k
    }
1486
4.80M
    if (table == NULL) {
1487
0
  xmlVErrMemory(ctxt,
1488
0
            "xmlAddElementDecl: Table creation failed!\n");
1489
0
  if (uqname != NULL)
1490
0
      xmlFree(uqname);
1491
0
  if (ns != NULL)
1492
0
      xmlFree(ns);
1493
0
        return(NULL);
1494
0
    }
1495
1496
    /*
1497
     * lookup old attributes inserted on an undefined element in the
1498
     * internal subset.
1499
     */
1500
4.80M
    if ((dtd->doc != NULL) && (dtd->doc->intSubset != NULL)) {
1501
4.80M
  ret = xmlHashLookup2(dtd->doc->intSubset->elements, name, ns);
1502
4.80M
  if ((ret != NULL) && (ret->etype == XML_ELEMENT_TYPE_UNDEFINED)) {
1503
5.25k
      oldAttributes = ret->attributes;
1504
5.25k
      ret->attributes = NULL;
1505
5.25k
      xmlHashRemoveEntry2(dtd->doc->intSubset->elements, name, ns, NULL);
1506
5.25k
      xmlFreeElement(ret);
1507
5.25k
  }
1508
4.80M
    }
1509
1510
    /*
1511
     * The element may already be present if one of its attribute
1512
     * was registered first
1513
     */
1514
4.80M
    ret = xmlHashLookup2(table, name, ns);
1515
4.80M
    if (ret != NULL) {
1516
29.2k
  if (ret->etype != XML_ELEMENT_TYPE_UNDEFINED) {
1517
28.1k
#ifdef LIBXML_VALID_ENABLED
1518
      /*
1519
       * The element is already defined in this DTD.
1520
       */
1521
28.1k
      xmlErrValidNode(ctxt, (xmlNodePtr) dtd, XML_DTD_ELEM_REDEFINED,
1522
28.1k
                      "Redefinition of element %s\n",
1523
28.1k
          name, NULL, NULL);
1524
28.1k
#endif /* LIBXML_VALID_ENABLED */
1525
28.1k
      if (uqname != NULL)
1526
4.46k
    xmlFree(uqname);
1527
28.1k
            if (ns != NULL)
1528
4.46k
          xmlFree(ns);
1529
28.1k
      return(NULL);
1530
28.1k
  }
1531
1.08k
  if (ns != NULL) {
1532
81
      xmlFree(ns);
1533
81
      ns = NULL;
1534
81
  }
1535
4.77M
    } else {
1536
4.77M
  ret = (xmlElementPtr) xmlMalloc(sizeof(xmlElement));
1537
4.77M
  if (ret == NULL) {
1538
0
      xmlVErrMemory(ctxt, "malloc failed");
1539
0
      if (uqname != NULL)
1540
0
    xmlFree(uqname);
1541
0
            if (ns != NULL)
1542
0
          xmlFree(ns);
1543
0
      return(NULL);
1544
0
  }
1545
4.77M
  memset(ret, 0, sizeof(xmlElement));
1546
4.77M
  ret->type = XML_ELEMENT_DECL;
1547
1548
  /*
1549
   * fill the structure.
1550
   */
1551
4.77M
  ret->name = xmlStrdup(name);
1552
4.77M
  if (ret->name == NULL) {
1553
0
      xmlVErrMemory(ctxt, "malloc failed");
1554
0
      if (uqname != NULL)
1555
0
    xmlFree(uqname);
1556
0
            if (ns != NULL)
1557
0
          xmlFree(ns);
1558
0
      xmlFree(ret);
1559
0
      return(NULL);
1560
0
  }
1561
4.77M
  ret->prefix = ns;
1562
1563
  /*
1564
   * Validity Check:
1565
   * Insertion must not fail
1566
   */
1567
4.77M
  if (xmlHashAddEntry2(table, name, ns, ret)) {
1568
0
#ifdef LIBXML_VALID_ENABLED
1569
      /*
1570
       * The element is already defined in this DTD.
1571
       */
1572
0
      xmlErrValidNode(ctxt, (xmlNodePtr) dtd, XML_DTD_ELEM_REDEFINED,
1573
0
                      "Redefinition of element %s\n",
1574
0
          name, NULL, NULL);
1575
0
#endif /* LIBXML_VALID_ENABLED */
1576
0
      xmlFreeElement(ret);
1577
0
      if (uqname != NULL)
1578
0
    xmlFree(uqname);
1579
0
      return(NULL);
1580
0
  }
1581
  /*
1582
   * For new element, may have attributes from earlier
1583
   * definition in internal subset
1584
   */
1585
4.77M
  ret->attributes = oldAttributes;
1586
4.77M
    }
1587
1588
    /*
1589
     * Finish to fill the structure.
1590
     */
1591
4.78M
    ret->etype = type;
1592
    /*
1593
     * Avoid a stupid copy when called by the parser
1594
     * and flag it by setting a special parent value
1595
     * so the parser doesn't unallocate it.
1596
     */
1597
4.78M
    if ((ctxt != NULL) && (ctxt->flags & XML_VCTXT_USE_PCTXT)) {
1598
4.78M
  ret->content = content;
1599
4.78M
  if (content != NULL)
1600
3.73M
      content->parent = (xmlElementContentPtr) 1;
1601
4.78M
    } else {
1602
0
  ret->content = xmlCopyDocElementContent(dtd->doc, content);
1603
0
    }
1604
1605
    /*
1606
     * Link it to the DTD
1607
     */
1608
4.78M
    ret->parent = dtd;
1609
4.78M
    ret->doc = dtd->doc;
1610
4.78M
    if (dtd->last == NULL) {
1611
277k
  dtd->children = dtd->last = (xmlNodePtr) ret;
1612
4.50M
    } else {
1613
4.50M
        dtd->last->next = (xmlNodePtr) ret;
1614
4.50M
  ret->prev = dtd->last;
1615
4.50M
  dtd->last = (xmlNodePtr) ret;
1616
4.50M
    }
1617
4.78M
    if (uqname != NULL)
1618
304k
  xmlFree(uqname);
1619
4.78M
    return(ret);
1620
4.80M
}
1621
1622
static void
1623
4.85M
xmlFreeElementTableEntry(void *elem, const xmlChar *name ATTRIBUTE_UNUSED) {
1624
4.85M
    xmlFreeElement((xmlElementPtr) elem);
1625
4.85M
}
1626
1627
/**
1628
 * xmlFreeElementTable:
1629
 * @table:  An element table
1630
 *
1631
 * Deallocate the memory used by an element hash table.
1632
 */
1633
void
1634
352k
xmlFreeElementTable(xmlElementTablePtr table) {
1635
352k
    xmlHashFree(table, xmlFreeElementTableEntry);
1636
352k
}
1637
1638
#ifdef LIBXML_TREE_ENABLED
1639
/**
1640
 * xmlCopyElement:
1641
 * @elem:  An element
1642
 *
1643
 * Build a copy of an element.
1644
 *
1645
 * Returns the new xmlElementPtr or NULL in case of error.
1646
 */
1647
static void *
1648
0
xmlCopyElement(void *payload, const xmlChar *name ATTRIBUTE_UNUSED) {
1649
0
    xmlElementPtr elem = (xmlElementPtr) payload;
1650
0
    xmlElementPtr cur;
1651
1652
0
    cur = (xmlElementPtr) xmlMalloc(sizeof(xmlElement));
1653
0
    if (cur == NULL) {
1654
0
  xmlVErrMemory(NULL, "malloc failed");
1655
0
  return(NULL);
1656
0
    }
1657
0
    memset(cur, 0, sizeof(xmlElement));
1658
0
    cur->type = XML_ELEMENT_DECL;
1659
0
    cur->etype = elem->etype;
1660
0
    if (elem->name != NULL)
1661
0
  cur->name = xmlStrdup(elem->name);
1662
0
    else
1663
0
  cur->name = NULL;
1664
0
    if (elem->prefix != NULL)
1665
0
  cur->prefix = xmlStrdup(elem->prefix);
1666
0
    else
1667
0
  cur->prefix = NULL;
1668
0
    cur->content = xmlCopyElementContent(elem->content);
1669
    /* TODO : rebuild the attribute list on the copy */
1670
0
    cur->attributes = NULL;
1671
0
    return(cur);
1672
0
}
1673
1674
/**
1675
 * xmlCopyElementTable:
1676
 * @table:  An element table
1677
 *
1678
 * Build a copy of an element table.
1679
 *
1680
 * Returns the new xmlElementTablePtr or NULL in case of error.
1681
 */
1682
xmlElementTablePtr
1683
0
xmlCopyElementTable(xmlElementTablePtr table) {
1684
0
    return((xmlElementTablePtr) xmlHashCopy(table, xmlCopyElement));
1685
0
}
1686
#endif /* LIBXML_TREE_ENABLED */
1687
1688
#ifdef LIBXML_OUTPUT_ENABLED
1689
/**
1690
 * xmlDumpElementDecl:
1691
 * @buf:  the XML buffer output
1692
 * @elem:  An element table
1693
 *
1694
 * This will dump the content of the element declaration as an XML
1695
 * DTD definition
1696
 */
1697
void
1698
351k
xmlDumpElementDecl(xmlBufferPtr buf, xmlElementPtr elem) {
1699
351k
    if ((buf == NULL) || (elem == NULL))
1700
0
        return;
1701
351k
    switch (elem->etype) {
1702
118k
  case XML_ELEMENT_TYPE_EMPTY:
1703
118k
      xmlBufferWriteChar(buf, "<!ELEMENT ");
1704
118k
      if (elem->prefix != NULL) {
1705
31.5k
    xmlBufferWriteCHAR(buf, elem->prefix);
1706
31.5k
    xmlBufferWriteChar(buf, ":");
1707
31.5k
      }
1708
118k
      xmlBufferWriteCHAR(buf, elem->name);
1709
118k
      xmlBufferWriteChar(buf, " EMPTY>\n");
1710
118k
      break;
1711
549
  case XML_ELEMENT_TYPE_ANY:
1712
549
      xmlBufferWriteChar(buf, "<!ELEMENT ");
1713
549
      if (elem->prefix != NULL) {
1714
17
    xmlBufferWriteCHAR(buf, elem->prefix);
1715
17
    xmlBufferWriteChar(buf, ":");
1716
17
      }
1717
549
      xmlBufferWriteCHAR(buf, elem->name);
1718
549
      xmlBufferWriteChar(buf, " ANY>\n");
1719
549
      break;
1720
132k
  case XML_ELEMENT_TYPE_MIXED:
1721
132k
      xmlBufferWriteChar(buf, "<!ELEMENT ");
1722
132k
      if (elem->prefix != NULL) {
1723
962
    xmlBufferWriteCHAR(buf, elem->prefix);
1724
962
    xmlBufferWriteChar(buf, ":");
1725
962
      }
1726
132k
      xmlBufferWriteCHAR(buf, elem->name);
1727
132k
      xmlBufferWriteChar(buf, " ");
1728
132k
      xmlDumpElementContent(buf, elem->content);
1729
132k
      xmlBufferWriteChar(buf, ">\n");
1730
132k
      break;
1731
100k
  case XML_ELEMENT_TYPE_ELEMENT:
1732
100k
      xmlBufferWriteChar(buf, "<!ELEMENT ");
1733
100k
      if (elem->prefix != NULL) {
1734
26.5k
    xmlBufferWriteCHAR(buf, elem->prefix);
1735
26.5k
    xmlBufferWriteChar(buf, ":");
1736
26.5k
      }
1737
100k
      xmlBufferWriteCHAR(buf, elem->name);
1738
100k
      xmlBufferWriteChar(buf, " ");
1739
100k
      xmlDumpElementContent(buf, elem->content);
1740
100k
      xmlBufferWriteChar(buf, ">\n");
1741
100k
      break;
1742
0
  default:
1743
0
      xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
1744
0
        "Internal: ELEMENT struct corrupted invalid type\n",
1745
0
        NULL);
1746
351k
    }
1747
351k
}
1748
1749
/**
1750
 * xmlDumpElementDeclScan:
1751
 * @elem:  An element table
1752
 * @buf:  the XML buffer output
1753
 *
1754
 * This routine is used by the hash scan function.  It just reverses
1755
 * the arguments.
1756
 */
1757
static void
1758
xmlDumpElementDeclScan(void *elem, void *buf,
1759
0
                       const xmlChar *name ATTRIBUTE_UNUSED) {
1760
0
    xmlDumpElementDecl((xmlBufferPtr) buf, (xmlElementPtr) elem);
1761
0
}
1762
1763
/**
1764
 * xmlDumpElementTable:
1765
 * @buf:  the XML buffer output
1766
 * @table:  An element table
1767
 *
1768
 * This will dump the content of the element table as an XML DTD definition
1769
 */
1770
void
1771
0
xmlDumpElementTable(xmlBufferPtr buf, xmlElementTablePtr table) {
1772
0
    if ((buf == NULL) || (table == NULL))
1773
0
        return;
1774
0
    xmlHashScan(table, xmlDumpElementDeclScan, buf);
1775
0
}
1776
#endif /* LIBXML_OUTPUT_ENABLED */
1777
1778
/**
1779
 * xmlCreateEnumeration:
1780
 * @name:  the enumeration name or NULL
1781
 *
1782
 * create and initialize an enumeration attribute node.
1783
 *
1784
 * Returns the xmlEnumerationPtr just created or NULL in case
1785
 *                of error.
1786
 */
1787
xmlEnumerationPtr
1788
4.65M
xmlCreateEnumeration(const xmlChar *name) {
1789
4.65M
    xmlEnumerationPtr ret;
1790
1791
4.65M
    ret = (xmlEnumerationPtr) xmlMalloc(sizeof(xmlEnumeration));
1792
4.65M
    if (ret == NULL) {
1793
0
  xmlVErrMemory(NULL, "malloc failed");
1794
0
        return(NULL);
1795
0
    }
1796
4.65M
    memset(ret, 0, sizeof(xmlEnumeration));
1797
1798
4.65M
    if (name != NULL)
1799
4.65M
        ret->name = xmlStrdup(name);
1800
4.65M
    return(ret);
1801
4.65M
}
1802
1803
/**
1804
 * xmlFreeEnumeration:
1805
 * @cur:  the tree to free.
1806
 *
1807
 * free an enumeration attribute node (recursive).
1808
 */
1809
void
1810
4.66M
xmlFreeEnumeration(xmlEnumerationPtr cur) {
1811
4.66M
    if (cur == NULL) return;
1812
1813
4.65M
    if (cur->next != NULL) xmlFreeEnumeration(cur->next);
1814
1815
4.65M
    if (cur->name != NULL) xmlFree((xmlChar *) cur->name);
1816
4.65M
    xmlFree(cur);
1817
4.65M
}
1818
1819
#ifdef LIBXML_TREE_ENABLED
1820
/**
1821
 * xmlCopyEnumeration:
1822
 * @cur:  the tree to copy.
1823
 *
1824
 * Copy an enumeration attribute node (recursive).
1825
 *
1826
 * Returns the xmlEnumerationPtr just created or NULL in case
1827
 *                of error.
1828
 */
1829
xmlEnumerationPtr
1830
0
xmlCopyEnumeration(xmlEnumerationPtr cur) {
1831
0
    xmlEnumerationPtr ret;
1832
1833
0
    if (cur == NULL) return(NULL);
1834
0
    ret = xmlCreateEnumeration((xmlChar *) cur->name);
1835
0
    if (ret == NULL) return(NULL);
1836
1837
0
    if (cur->next != NULL) ret->next = xmlCopyEnumeration(cur->next);
1838
0
    else ret->next = NULL;
1839
1840
0
    return(ret);
1841
0
}
1842
#endif /* LIBXML_TREE_ENABLED */
1843
1844
#ifdef LIBXML_OUTPUT_ENABLED
1845
/**
1846
 * xmlDumpEnumeration:
1847
 * @buf:  the XML buffer output
1848
 * @enum:  An enumeration
1849
 *
1850
 * This will dump the content of the enumeration
1851
 */
1852
static void
1853
425k
xmlDumpEnumeration(xmlBufferPtr buf, xmlEnumerationPtr cur) {
1854
425k
    if ((buf == NULL) || (cur == NULL))
1855
0
        return;
1856
1857
425k
    xmlBufferWriteCHAR(buf, cur->name);
1858
425k
    if (cur->next == NULL)
1859
142k
  xmlBufferWriteChar(buf, ")");
1860
283k
    else {
1861
283k
  xmlBufferWriteChar(buf, " | ");
1862
283k
  xmlDumpEnumeration(buf, cur->next);
1863
283k
    }
1864
425k
}
1865
#endif /* LIBXML_OUTPUT_ENABLED */
1866
1867
#ifdef LIBXML_VALID_ENABLED
1868
/**
1869
 * xmlScanIDAttributeDecl:
1870
 * @ctxt:  the validation context
1871
 * @elem:  the element name
1872
 * @err: whether to raise errors here
1873
 *
1874
 * Verify that the element don't have too many ID attributes
1875
 * declared.
1876
 *
1877
 * Returns the number of ID attributes found.
1878
 */
1879
static int
1880
5.05M
xmlScanIDAttributeDecl(xmlValidCtxtPtr ctxt, xmlElementPtr elem, int err) {
1881
5.05M
    xmlAttributePtr cur;
1882
5.05M
    int ret = 0;
1883
1884
5.05M
    if (elem == NULL) return(0);
1885
5.05M
    cur = elem->attributes;
1886
6.40M
    while (cur != NULL) {
1887
1.35M
        if (cur->atype == XML_ATTRIBUTE_ID) {
1888
1.23M
      ret ++;
1889
1.23M
      if ((ret > 1) && (err))
1890
11.7k
    xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_MULTIPLE_ID,
1891
11.7k
         "Element %s has too many ID attributes defined : %s\n",
1892
11.7k
           elem->name, cur->name, NULL);
1893
1.23M
  }
1894
1.35M
  cur = cur->nexth;
1895
1.35M
    }
1896
5.05M
    return(ret);
1897
5.05M
}
1898
#endif /* LIBXML_VALID_ENABLED */
1899
1900
/**
1901
 * xmlFreeAttribute:
1902
 * @elem:  An attribute
1903
 *
1904
 * Deallocate the memory used by an attribute definition
1905
 */
1906
static void
1907
14.8M
xmlFreeAttribute(xmlAttributePtr attr) {
1908
14.8M
    xmlDictPtr dict;
1909
1910
14.8M
    if (attr == NULL) return;
1911
14.8M
    if (attr->doc != NULL)
1912
14.8M
  dict = attr->doc->dict;
1913
0
    else
1914
0
  dict = NULL;
1915
14.8M
    xmlUnlinkNode((xmlNodePtr) attr);
1916
14.8M
    if (attr->tree != NULL)
1917
1.50M
        xmlFreeEnumeration(attr->tree);
1918
14.8M
    if (dict) {
1919
12.2M
        if ((attr->elem != NULL) && (!xmlDictOwns(dict, attr->elem)))
1920
0
      xmlFree((xmlChar *) attr->elem);
1921
12.2M
        if ((attr->name != NULL) && (!xmlDictOwns(dict, attr->name)))
1922
0
      xmlFree((xmlChar *) attr->name);
1923
12.2M
        if ((attr->prefix != NULL) && (!xmlDictOwns(dict, attr->prefix)))
1924
0
      xmlFree((xmlChar *) attr->prefix);
1925
12.2M
        if ((attr->defaultValue != NULL) &&
1926
12.2M
      (!xmlDictOwns(dict, attr->defaultValue)))
1927
0
      xmlFree((xmlChar *) attr->defaultValue);
1928
12.2M
    } else {
1929
2.59M
  if (attr->elem != NULL)
1930
2.59M
      xmlFree((xmlChar *) attr->elem);
1931
2.59M
  if (attr->name != NULL)
1932
2.59M
      xmlFree((xmlChar *) attr->name);
1933
2.59M
  if (attr->defaultValue != NULL)
1934
229k
      xmlFree((xmlChar *) attr->defaultValue);
1935
2.59M
  if (attr->prefix != NULL)
1936
204k
      xmlFree((xmlChar *) attr->prefix);
1937
2.59M
    }
1938
14.8M
    xmlFree(attr);
1939
14.8M
}
1940
1941
1942
/**
1943
 * xmlAddAttributeDecl:
1944
 * @ctxt:  the validation context
1945
 * @dtd:  pointer to the DTD
1946
 * @elem:  the element name
1947
 * @name:  the attribute name
1948
 * @ns:  the attribute namespace prefix
1949
 * @type:  the attribute type
1950
 * @def:  the attribute default type
1951
 * @defaultValue:  the attribute default value
1952
 * @tree:  if it's an enumeration, the associated list
1953
 *
1954
 * Register a new attribute declaration
1955
 * Note that @tree becomes the ownership of the DTD
1956
 *
1957
 * Returns NULL if not new, otherwise the attribute decl
1958
 */
1959
xmlAttributePtr
1960
xmlAddAttributeDecl(xmlValidCtxtPtr ctxt,
1961
                    xmlDtdPtr dtd, const xmlChar *elem,
1962
                    const xmlChar *name, const xmlChar *ns,
1963
        xmlAttributeType type, xmlAttributeDefault def,
1964
14.8M
        const xmlChar *defaultValue, xmlEnumerationPtr tree) {
1965
14.8M
    xmlAttributePtr ret;
1966
14.8M
    xmlAttributeTablePtr table;
1967
14.8M
    xmlElementPtr elemDef;
1968
14.8M
    xmlDictPtr dict = NULL;
1969
1970
14.8M
    if (dtd == NULL) {
1971
0
  xmlFreeEnumeration(tree);
1972
0
  return(NULL);
1973
0
    }
1974
14.8M
    if (name == NULL) {
1975
0
  xmlFreeEnumeration(tree);
1976
0
  return(NULL);
1977
0
    }
1978
14.8M
    if (elem == NULL) {
1979
0
  xmlFreeEnumeration(tree);
1980
0
  return(NULL);
1981
0
    }
1982
14.8M
    if (dtd->doc != NULL)
1983
14.8M
  dict = dtd->doc->dict;
1984
1985
14.8M
#ifdef LIBXML_VALID_ENABLED
1986
    /*
1987
     * Check the type and possibly the default value.
1988
     */
1989
14.8M
    switch (type) {
1990
6.14M
        case XML_ATTRIBUTE_CDATA:
1991
6.14M
      break;
1992
3.86M
        case XML_ATTRIBUTE_ID:
1993
3.86M
      break;
1994
165k
        case XML_ATTRIBUTE_IDREF:
1995
165k
      break;
1996
34.6k
        case XML_ATTRIBUTE_IDREFS:
1997
34.6k
      break;
1998
53.9k
        case XML_ATTRIBUTE_ENTITY:
1999
53.9k
      break;
2000
4.70k
        case XML_ATTRIBUTE_ENTITIES:
2001
4.70k
      break;
2002
2.37M
        case XML_ATTRIBUTE_NMTOKEN:
2003
2.37M
      break;
2004
672k
        case XML_ATTRIBUTE_NMTOKENS:
2005
672k
      break;
2006
1.45M
        case XML_ATTRIBUTE_ENUMERATION:
2007
1.45M
      break;
2008
47.3k
        case XML_ATTRIBUTE_NOTATION:
2009
47.3k
      break;
2010
0
  default:
2011
0
      xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
2012
0
        "Internal: ATTRIBUTE struct corrupted invalid type\n",
2013
0
        NULL);
2014
0
      xmlFreeEnumeration(tree);
2015
0
      return(NULL);
2016
14.8M
    }
2017
14.8M
    if ((defaultValue != NULL) &&
2018
14.8M
        (!xmlValidateAttributeValueInternal(dtd->doc, type, defaultValue))) {
2019
85.7k
  xmlErrValidNode(ctxt, (xmlNodePtr) dtd, XML_DTD_ATTRIBUTE_DEFAULT,
2020
85.7k
                  "Attribute %s of %s: invalid default value\n",
2021
85.7k
                  elem, name, defaultValue);
2022
85.7k
  defaultValue = NULL;
2023
85.7k
  if (ctxt != NULL)
2024
85.7k
      ctxt->valid = 0;
2025
85.7k
    }
2026
14.8M
#endif /* LIBXML_VALID_ENABLED */
2027
2028
    /*
2029
     * Check first that an attribute defined in the external subset wasn't
2030
     * already defined in the internal subset
2031
     */
2032
14.8M
    if ((dtd->doc != NULL) && (dtd->doc->extSubset == dtd) &&
2033
14.8M
  (dtd->doc->intSubset != NULL) &&
2034
14.8M
  (dtd->doc->intSubset->attributes != NULL)) {
2035
2.28M
        ret = xmlHashLookup3(dtd->doc->intSubset->attributes, name, ns, elem);
2036
2.28M
  if (ret != NULL) {
2037
16.0k
      xmlFreeEnumeration(tree);
2038
16.0k
      return(NULL);
2039
16.0k
  }
2040
2.28M
    }
2041
2042
    /*
2043
     * Create the Attribute table if needed.
2044
     */
2045
14.8M
    table = (xmlAttributeTablePtr) dtd->attributes;
2046
14.8M
    if (table == NULL) {
2047
249k
        table = xmlHashCreateDict(0, dict);
2048
249k
  dtd->attributes = (void *) table;
2049
249k
    }
2050
14.8M
    if (table == NULL) {
2051
0
  xmlVErrMemory(ctxt,
2052
0
            "xmlAddAttributeDecl: Table creation failed!\n");
2053
0
  xmlFreeEnumeration(tree);
2054
0
        return(NULL);
2055
0
    }
2056
2057
2058
14.8M
    ret = (xmlAttributePtr) xmlMalloc(sizeof(xmlAttribute));
2059
14.8M
    if (ret == NULL) {
2060
0
  xmlVErrMemory(ctxt, "malloc failed");
2061
0
  xmlFreeEnumeration(tree);
2062
0
  return(NULL);
2063
0
    }
2064
14.8M
    memset(ret, 0, sizeof(xmlAttribute));
2065
14.8M
    ret->type = XML_ATTRIBUTE_DECL;
2066
2067
    /*
2068
     * fill the structure.
2069
     */
2070
14.8M
    ret->atype = type;
2071
    /*
2072
     * doc must be set before possible error causes call
2073
     * to xmlFreeAttribute (because it's used to check on
2074
     * dict use)
2075
     */
2076
14.8M
    ret->doc = dtd->doc;
2077
14.8M
    if (dict) {
2078
12.2M
  ret->name = xmlDictLookup(dict, name, -1);
2079
12.2M
  ret->prefix = xmlDictLookup(dict, ns, -1);
2080
12.2M
  ret->elem = xmlDictLookup(dict, elem, -1);
2081
12.2M
    } else {
2082
2.59M
  ret->name = xmlStrdup(name);
2083
2.59M
  ret->prefix = xmlStrdup(ns);
2084
2.59M
  ret->elem = xmlStrdup(elem);
2085
2.59M
    }
2086
14.8M
    ret->def = def;
2087
14.8M
    ret->tree = tree;
2088
14.8M
    if (defaultValue != NULL) {
2089
962k
        if (dict)
2090
733k
      ret->defaultValue = xmlDictLookup(dict, defaultValue, -1);
2091
229k
  else
2092
229k
      ret->defaultValue = xmlStrdup(defaultValue);
2093
962k
    }
2094
2095
    /*
2096
     * Validity Check:
2097
     * Search the DTD for previous declarations of the ATTLIST
2098
     */
2099
14.8M
    if (xmlHashAddEntry3(table, ret->name, ret->prefix, ret->elem, ret) < 0) {
2100
59.5k
#ifdef LIBXML_VALID_ENABLED
2101
  /*
2102
   * The attribute is already defined in this DTD.
2103
   */
2104
59.5k
  xmlErrValidWarning(ctxt, (xmlNodePtr) dtd, XML_DTD_ATTRIBUTE_REDEFINED,
2105
59.5k
     "Attribute %s of element %s: already defined\n",
2106
59.5k
     name, elem, NULL);
2107
59.5k
#endif /* LIBXML_VALID_ENABLED */
2108
59.5k
  xmlFreeAttribute(ret);
2109
59.5k
  return(NULL);
2110
59.5k
    }
2111
2112
    /*
2113
     * Validity Check:
2114
     * Multiple ID per element
2115
     */
2116
14.7M
    elemDef = xmlGetDtdElementDesc2(dtd, elem, 1);
2117
14.7M
    if (elemDef != NULL) {
2118
2119
14.7M
#ifdef LIBXML_VALID_ENABLED
2120
14.7M
        if ((type == XML_ATTRIBUTE_ID) &&
2121
14.7M
      (xmlScanIDAttributeDecl(NULL, elemDef, 1) != 0)) {
2122
10.0k
      xmlErrValidNode(ctxt, (xmlNodePtr) dtd, XML_DTD_MULTIPLE_ID,
2123
10.0k
     "Element %s has too may ID attributes defined : %s\n",
2124
10.0k
       elem, name, NULL);
2125
10.0k
      if (ctxt != NULL)
2126
10.0k
    ctxt->valid = 0;
2127
10.0k
  }
2128
14.7M
#endif /* LIBXML_VALID_ENABLED */
2129
2130
  /*
2131
   * Insert namespace default def first they need to be
2132
   * processed first.
2133
   */
2134
14.7M
  if ((xmlStrEqual(ret->name, BAD_CAST "xmlns")) ||
2135
14.7M
      ((ret->prefix != NULL &&
2136
14.7M
       (xmlStrEqual(ret->prefix, BAD_CAST "xmlns"))))) {
2137
96.6k
      ret->nexth = elemDef->attributes;
2138
96.6k
      elemDef->attributes = ret;
2139
14.6M
  } else {
2140
14.6M
      xmlAttributePtr tmp = elemDef->attributes;
2141
2142
14.6M
      while ((tmp != NULL) &&
2143
14.6M
       ((xmlStrEqual(tmp->name, BAD_CAST "xmlns")) ||
2144
10.4M
        ((ret->prefix != NULL &&
2145
10.4M
         (xmlStrEqual(ret->prefix, BAD_CAST "xmlns")))))) {
2146
9.22k
    if (tmp->nexth == NULL)
2147
4.14k
        break;
2148
5.07k
    tmp = tmp->nexth;
2149
5.07k
      }
2150
14.6M
      if (tmp != NULL) {
2151
10.4M
    ret->nexth = tmp->nexth;
2152
10.4M
          tmp->nexth = ret;
2153
10.4M
      } else {
2154
4.20M
    ret->nexth = elemDef->attributes;
2155
4.20M
    elemDef->attributes = ret;
2156
4.20M
      }
2157
14.6M
  }
2158
14.7M
    }
2159
2160
    /*
2161
     * Link it to the DTD
2162
     */
2163
14.7M
    ret->parent = dtd;
2164
14.7M
    if (dtd->last == NULL) {
2165
14.9k
  dtd->children = dtd->last = (xmlNodePtr) ret;
2166
14.7M
    } else {
2167
14.7M
        dtd->last->next = (xmlNodePtr) ret;
2168
14.7M
  ret->prev = dtd->last;
2169
14.7M
  dtd->last = (xmlNodePtr) ret;
2170
14.7M
    }
2171
14.7M
    return(ret);
2172
14.8M
}
2173
2174
static void
2175
14.7M
xmlFreeAttributeTableEntry(void *attr, const xmlChar *name ATTRIBUTE_UNUSED) {
2176
14.7M
    xmlFreeAttribute((xmlAttributePtr) attr);
2177
14.7M
}
2178
2179
/**
2180
 * xmlFreeAttributeTable:
2181
 * @table:  An attribute table
2182
 *
2183
 * Deallocate the memory used by an entities hash table.
2184
 */
2185
void
2186
249k
xmlFreeAttributeTable(xmlAttributeTablePtr table) {
2187
249k
    xmlHashFree(table, xmlFreeAttributeTableEntry);
2188
249k
}
2189
2190
#ifdef LIBXML_TREE_ENABLED
2191
/**
2192
 * xmlCopyAttribute:
2193
 * @attr:  An attribute
2194
 *
2195
 * Build a copy of an attribute.
2196
 *
2197
 * Returns the new xmlAttributePtr or NULL in case of error.
2198
 */
2199
static void *
2200
0
xmlCopyAttribute(void *payload, const xmlChar *name ATTRIBUTE_UNUSED) {
2201
0
    xmlAttributePtr attr = (xmlAttributePtr) payload;
2202
0
    xmlAttributePtr cur;
2203
2204
0
    cur = (xmlAttributePtr) xmlMalloc(sizeof(xmlAttribute));
2205
0
    if (cur == NULL) {
2206
0
  xmlVErrMemory(NULL, "malloc failed");
2207
0
  return(NULL);
2208
0
    }
2209
0
    memset(cur, 0, sizeof(xmlAttribute));
2210
0
    cur->type = XML_ATTRIBUTE_DECL;
2211
0
    cur->atype = attr->atype;
2212
0
    cur->def = attr->def;
2213
0
    cur->tree = xmlCopyEnumeration(attr->tree);
2214
0
    if (attr->elem != NULL)
2215
0
  cur->elem = xmlStrdup(attr->elem);
2216
0
    if (attr->name != NULL)
2217
0
  cur->name = xmlStrdup(attr->name);
2218
0
    if (attr->prefix != NULL)
2219
0
  cur->prefix = xmlStrdup(attr->prefix);
2220
0
    if (attr->defaultValue != NULL)
2221
0
  cur->defaultValue = xmlStrdup(attr->defaultValue);
2222
0
    return(cur);
2223
0
}
2224
2225
/**
2226
 * xmlCopyAttributeTable:
2227
 * @table:  An attribute table
2228
 *
2229
 * Build a copy of an attribute table.
2230
 *
2231
 * Returns the new xmlAttributeTablePtr or NULL in case of error.
2232
 */
2233
xmlAttributeTablePtr
2234
0
xmlCopyAttributeTable(xmlAttributeTablePtr table) {
2235
0
    return((xmlAttributeTablePtr) xmlHashCopy(table, xmlCopyAttribute));
2236
0
}
2237
#endif /* LIBXML_TREE_ENABLED */
2238
2239
#ifdef LIBXML_OUTPUT_ENABLED
2240
/**
2241
 * xmlDumpAttributeDecl:
2242
 * @buf:  the XML buffer output
2243
 * @attr:  An attribute declaration
2244
 *
2245
 * This will dump the content of the attribute declaration as an XML
2246
 * DTD definition
2247
 */
2248
void
2249
1.03M
xmlDumpAttributeDecl(xmlBufferPtr buf, xmlAttributePtr attr) {
2250
1.03M
    if ((buf == NULL) || (attr == NULL))
2251
0
        return;
2252
1.03M
    xmlBufferWriteChar(buf, "<!ATTLIST ");
2253
1.03M
    xmlBufferWriteCHAR(buf, attr->elem);
2254
1.03M
    xmlBufferWriteChar(buf, " ");
2255
1.03M
    if (attr->prefix != NULL) {
2256
75.2k
  xmlBufferWriteCHAR(buf, attr->prefix);
2257
75.2k
  xmlBufferWriteChar(buf, ":");
2258
75.2k
    }
2259
1.03M
    xmlBufferWriteCHAR(buf, attr->name);
2260
1.03M
    switch (attr->atype) {
2261
421k
  case XML_ATTRIBUTE_CDATA:
2262
421k
      xmlBufferWriteChar(buf, " CDATA");
2263
421k
      break;
2264
228k
  case XML_ATTRIBUTE_ID:
2265
228k
      xmlBufferWriteChar(buf, " ID");
2266
228k
      break;
2267
15.9k
  case XML_ATTRIBUTE_IDREF:
2268
15.9k
      xmlBufferWriteChar(buf, " IDREF");
2269
15.9k
      break;
2270
8.57k
  case XML_ATTRIBUTE_IDREFS:
2271
8.57k
      xmlBufferWriteChar(buf, " IDREFS");
2272
8.57k
      break;
2273
5.33k
  case XML_ATTRIBUTE_ENTITY:
2274
5.33k
      xmlBufferWriteChar(buf, " ENTITY");
2275
5.33k
      break;
2276
676
  case XML_ATTRIBUTE_ENTITIES:
2277
676
      xmlBufferWriteChar(buf, " ENTITIES");
2278
676
      break;
2279
138k
  case XML_ATTRIBUTE_NMTOKEN:
2280
138k
      xmlBufferWriteChar(buf, " NMTOKEN");
2281
138k
      break;
2282
72.1k
  case XML_ATTRIBUTE_NMTOKENS:
2283
72.1k
      xmlBufferWriteChar(buf, " NMTOKENS");
2284
72.1k
      break;
2285
136k
  case XML_ATTRIBUTE_ENUMERATION:
2286
136k
      xmlBufferWriteChar(buf, " (");
2287
136k
      xmlDumpEnumeration(buf, attr->tree);
2288
136k
      break;
2289
5.41k
  case XML_ATTRIBUTE_NOTATION:
2290
5.41k
      xmlBufferWriteChar(buf, " NOTATION (");
2291
5.41k
      xmlDumpEnumeration(buf, attr->tree);
2292
5.41k
      break;
2293
0
  default:
2294
0
      xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
2295
0
        "Internal: ATTRIBUTE struct corrupted invalid type\n",
2296
0
        NULL);
2297
1.03M
    }
2298
1.03M
    switch (attr->def) {
2299
65.6k
  case XML_ATTRIBUTE_NONE:
2300
65.6k
      break;
2301
89.0k
  case XML_ATTRIBUTE_REQUIRED:
2302
89.0k
      xmlBufferWriteChar(buf, " #REQUIRED");
2303
89.0k
      break;
2304
853k
  case XML_ATTRIBUTE_IMPLIED:
2305
853k
      xmlBufferWriteChar(buf, " #IMPLIED");
2306
853k
      break;
2307
25.3k
  case XML_ATTRIBUTE_FIXED:
2308
25.3k
      xmlBufferWriteChar(buf, " #FIXED");
2309
25.3k
      break;
2310
0
  default:
2311
0
      xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
2312
0
        "Internal: ATTRIBUTE struct corrupted invalid def\n",
2313
0
        NULL);
2314
1.03M
    }
2315
1.03M
    if (attr->defaultValue != NULL) {
2316
71.7k
  xmlBufferWriteChar(buf, " ");
2317
71.7k
  xmlBufferWriteQuotedString(buf, attr->defaultValue);
2318
71.7k
    }
2319
1.03M
    xmlBufferWriteChar(buf, ">\n");
2320
1.03M
}
2321
2322
/**
2323
 * xmlDumpAttributeDeclScan:
2324
 * @attr:  An attribute declaration
2325
 * @buf:  the XML buffer output
2326
 *
2327
 * This is used with the hash scan function - just reverses arguments
2328
 */
2329
static void
2330
xmlDumpAttributeDeclScan(void *attr, void *buf,
2331
0
                         const xmlChar *name ATTRIBUTE_UNUSED) {
2332
0
    xmlDumpAttributeDecl((xmlBufferPtr) buf, (xmlAttributePtr) attr);
2333
0
}
2334
2335
/**
2336
 * xmlDumpAttributeTable:
2337
 * @buf:  the XML buffer output
2338
 * @table:  An attribute table
2339
 *
2340
 * This will dump the content of the attribute table as an XML DTD definition
2341
 */
2342
void
2343
0
xmlDumpAttributeTable(xmlBufferPtr buf, xmlAttributeTablePtr table) {
2344
0
    if ((buf == NULL) || (table == NULL))
2345
0
        return;
2346
0
    xmlHashScan(table, xmlDumpAttributeDeclScan, buf);
2347
0
}
2348
#endif /* LIBXML_OUTPUT_ENABLED */
2349
2350
/************************************************************************
2351
 *                  *
2352
 *        NOTATIONs       *
2353
 *                  *
2354
 ************************************************************************/
2355
/**
2356
 * xmlFreeNotation:
2357
 * @not:  A notation
2358
 *
2359
 * Deallocate the memory used by an notation definition
2360
 */
2361
static void
2362
38.6k
xmlFreeNotation(xmlNotationPtr nota) {
2363
38.6k
    if (nota == NULL) return;
2364
38.6k
    if (nota->name != NULL)
2365
38.6k
  xmlFree((xmlChar *) nota->name);
2366
38.6k
    if (nota->PublicID != NULL)
2367
21.8k
  xmlFree((xmlChar *) nota->PublicID);
2368
38.6k
    if (nota->SystemID != NULL)
2369
17.4k
  xmlFree((xmlChar *) nota->SystemID);
2370
38.6k
    xmlFree(nota);
2371
38.6k
}
2372
2373
2374
/**
2375
 * xmlAddNotationDecl:
2376
 * @dtd:  pointer to the DTD
2377
 * @ctxt:  the validation context
2378
 * @name:  the entity name
2379
 * @PublicID:  the public identifier or NULL
2380
 * @SystemID:  the system identifier or NULL
2381
 *
2382
 * Register a new notation declaration
2383
 *
2384
 * Returns NULL if not, otherwise the entity
2385
 */
2386
xmlNotationPtr
2387
xmlAddNotationDecl(xmlValidCtxtPtr ctxt, xmlDtdPtr dtd,
2388
             const xmlChar *name,
2389
38.6k
                   const xmlChar *PublicID, const xmlChar *SystemID) {
2390
38.6k
    xmlNotationPtr ret;
2391
38.6k
    xmlNotationTablePtr table;
2392
2393
38.6k
    if (dtd == NULL) {
2394
0
  return(NULL);
2395
0
    }
2396
38.6k
    if (name == NULL) {
2397
0
  return(NULL);
2398
0
    }
2399
38.6k
    if ((PublicID == NULL) && (SystemID == NULL)) {
2400
0
  return(NULL);
2401
0
    }
2402
2403
    /*
2404
     * Create the Notation table if needed.
2405
     */
2406
38.6k
    table = (xmlNotationTablePtr) dtd->notations;
2407
38.6k
    if (table == NULL) {
2408
12.1k
  xmlDictPtr dict = NULL;
2409
12.1k
  if (dtd->doc != NULL)
2410
12.1k
      dict = dtd->doc->dict;
2411
2412
12.1k
        dtd->notations = table = xmlHashCreateDict(0, dict);
2413
12.1k
    }
2414
38.6k
    if (table == NULL) {
2415
0
  xmlVErrMemory(ctxt,
2416
0
    "xmlAddNotationDecl: Table creation failed!\n");
2417
0
        return(NULL);
2418
0
    }
2419
2420
38.6k
    ret = (xmlNotationPtr) xmlMalloc(sizeof(xmlNotation));
2421
38.6k
    if (ret == NULL) {
2422
0
  xmlVErrMemory(ctxt, "malloc failed");
2423
0
  return(NULL);
2424
0
    }
2425
38.6k
    memset(ret, 0, sizeof(xmlNotation));
2426
2427
    /*
2428
     * fill the structure.
2429
     */
2430
38.6k
    ret->name = xmlStrdup(name);
2431
38.6k
    if (SystemID != NULL)
2432
17.4k
        ret->SystemID = xmlStrdup(SystemID);
2433
38.6k
    if (PublicID != NULL)
2434
21.8k
        ret->PublicID = xmlStrdup(PublicID);
2435
2436
    /*
2437
     * Validity Check:
2438
     * Check the DTD for previous declarations of the ATTLIST
2439
     */
2440
38.6k
    if (xmlHashAddEntry(table, name, ret)) {
2441
24.6k
#ifdef LIBXML_VALID_ENABLED
2442
24.6k
  xmlErrValid(NULL, XML_DTD_NOTATION_REDEFINED,
2443
24.6k
        "xmlAddNotationDecl: %s already defined\n",
2444
24.6k
        (const char *) name);
2445
24.6k
#endif /* LIBXML_VALID_ENABLED */
2446
24.6k
  xmlFreeNotation(ret);
2447
24.6k
  return(NULL);
2448
24.6k
    }
2449
13.9k
    return(ret);
2450
38.6k
}
2451
2452
static void
2453
13.9k
xmlFreeNotationTableEntry(void *nota, const xmlChar *name ATTRIBUTE_UNUSED) {
2454
13.9k
    xmlFreeNotation((xmlNotationPtr) nota);
2455
13.9k
}
2456
2457
/**
2458
 * xmlFreeNotationTable:
2459
 * @table:  An notation table
2460
 *
2461
 * Deallocate the memory used by an entities hash table.
2462
 */
2463
void
2464
12.1k
xmlFreeNotationTable(xmlNotationTablePtr table) {
2465
12.1k
    xmlHashFree(table, xmlFreeNotationTableEntry);
2466
12.1k
}
2467
2468
#ifdef LIBXML_TREE_ENABLED
2469
/**
2470
 * xmlCopyNotation:
2471
 * @nota:  A notation
2472
 *
2473
 * Build a copy of a notation.
2474
 *
2475
 * Returns the new xmlNotationPtr or NULL in case of error.
2476
 */
2477
static void *
2478
0
xmlCopyNotation(void *payload, const xmlChar *name ATTRIBUTE_UNUSED) {
2479
0
    xmlNotationPtr nota = (xmlNotationPtr) payload;
2480
0
    xmlNotationPtr cur;
2481
2482
0
    cur = (xmlNotationPtr) xmlMalloc(sizeof(xmlNotation));
2483
0
    if (cur == NULL) {
2484
0
  xmlVErrMemory(NULL, "malloc failed");
2485
0
  return(NULL);
2486
0
    }
2487
0
    if (nota->name != NULL)
2488
0
  cur->name = xmlStrdup(nota->name);
2489
0
    else
2490
0
  cur->name = NULL;
2491
0
    if (nota->PublicID != NULL)
2492
0
  cur->PublicID = xmlStrdup(nota->PublicID);
2493
0
    else
2494
0
  cur->PublicID = NULL;
2495
0
    if (nota->SystemID != NULL)
2496
0
  cur->SystemID = xmlStrdup(nota->SystemID);
2497
0
    else
2498
0
  cur->SystemID = NULL;
2499
0
    return(cur);
2500
0
}
2501
2502
/**
2503
 * xmlCopyNotationTable:
2504
 * @table:  A notation table
2505
 *
2506
 * Build a copy of a notation table.
2507
 *
2508
 * Returns the new xmlNotationTablePtr or NULL in case of error.
2509
 */
2510
xmlNotationTablePtr
2511
0
xmlCopyNotationTable(xmlNotationTablePtr table) {
2512
0
    return((xmlNotationTablePtr) xmlHashCopy(table, xmlCopyNotation));
2513
0
}
2514
#endif /* LIBXML_TREE_ENABLED */
2515
2516
#ifdef LIBXML_OUTPUT_ENABLED
2517
/**
2518
 * xmlDumpNotationDecl:
2519
 * @buf:  the XML buffer output
2520
 * @nota:  A notation declaration
2521
 *
2522
 * This will dump the content the notation declaration as an XML DTD definition
2523
 */
2524
void
2525
2.66k
xmlDumpNotationDecl(xmlBufferPtr buf, xmlNotationPtr nota) {
2526
2.66k
    if ((buf == NULL) || (nota == NULL))
2527
0
        return;
2528
2.66k
    xmlBufferWriteChar(buf, "<!NOTATION ");
2529
2.66k
    xmlBufferWriteCHAR(buf, nota->name);
2530
2.66k
    if (nota->PublicID != NULL) {
2531
1.70k
  xmlBufferWriteChar(buf, " PUBLIC ");
2532
1.70k
  xmlBufferWriteQuotedString(buf, nota->PublicID);
2533
1.70k
  if (nota->SystemID != NULL) {
2534
123
      xmlBufferWriteChar(buf, " ");
2535
123
      xmlBufferWriteQuotedString(buf, nota->SystemID);
2536
123
  }
2537
1.70k
    } else {
2538
957
  xmlBufferWriteChar(buf, " SYSTEM ");
2539
957
  xmlBufferWriteQuotedString(buf, nota->SystemID);
2540
957
    }
2541
2.66k
    xmlBufferWriteChar(buf, " >\n");
2542
2.66k
}
2543
2544
/**
2545
 * xmlDumpNotationDeclScan:
2546
 * @nota:  A notation declaration
2547
 * @buf:  the XML buffer output
2548
 *
2549
 * This is called with the hash scan function, and just reverses args
2550
 */
2551
static void
2552
xmlDumpNotationDeclScan(void *nota, void *buf,
2553
2.66k
                        const xmlChar *name ATTRIBUTE_UNUSED) {
2554
2.66k
    xmlDumpNotationDecl((xmlBufferPtr) buf, (xmlNotationPtr) nota);
2555
2.66k
}
2556
2557
/**
2558
 * xmlDumpNotationTable:
2559
 * @buf:  the XML buffer output
2560
 * @table:  A notation table
2561
 *
2562
 * This will dump the content of the notation table as an XML DTD definition
2563
 */
2564
void
2565
2.19k
xmlDumpNotationTable(xmlBufferPtr buf, xmlNotationTablePtr table) {
2566
2.19k
    if ((buf == NULL) || (table == NULL))
2567
0
        return;
2568
2.19k
    xmlHashScan(table, xmlDumpNotationDeclScan, buf);
2569
2.19k
}
2570
#endif /* LIBXML_OUTPUT_ENABLED */
2571
2572
/************************************************************************
2573
 *                  *
2574
 *        IDs         *
2575
 *                  *
2576
 ************************************************************************/
2577
/**
2578
 * DICT_FREE:
2579
 * @str:  a string
2580
 *
2581
 * Free a string if it is not owned by the "dict" dictionary in the
2582
 * current scope
2583
 */
2584
#define DICT_FREE(str)            \
2585
1.63M
  if ((str) && ((!dict) ||       \
2586
1.63M
      (xmlDictOwns(dict, (const xmlChar *)(str)) == 0)))  \
2587
1.63M
      xmlFree((char *)(str));
2588
2589
/**
2590
 * xmlValidNormalizeString:
2591
 * @str: a string
2592
 *
2593
 * Normalize a string in-place.
2594
 */
2595
static void
2596
874k
xmlValidNormalizeString(xmlChar *str) {
2597
874k
    xmlChar *dst;
2598
874k
    const xmlChar *src;
2599
2600
874k
    if (str == NULL)
2601
0
        return;
2602
874k
    src = str;
2603
874k
    dst = str;
2604
2605
915k
    while (*src == 0x20) src++;
2606
10.0M
    while (*src != 0) {
2607
9.14M
  if (*src == 0x20) {
2608
389k
      while (*src == 0x20) src++;
2609
128k
      if (*src != 0)
2610
117k
    *dst++ = 0x20;
2611
9.02M
  } else {
2612
9.02M
      *dst++ = *src++;
2613
9.02M
  }
2614
9.14M
    }
2615
874k
    *dst = 0;
2616
874k
}
2617
2618
static int
2619
4.25M
xmlIsStreaming(xmlValidCtxtPtr ctxt) {
2620
4.25M
    xmlParserCtxtPtr pctxt;
2621
2622
4.25M
    if (ctxt == NULL)
2623
10.0k
        return(0);
2624
4.24M
    if ((ctxt->flags & XML_VCTXT_USE_PCTXT) == 0)
2625
0
        return(0);
2626
4.24M
    pctxt = ctxt->userData;
2627
4.24M
    return(pctxt->parseMode == XML_PARSE_READER);
2628
4.24M
}
2629
2630
/**
2631
 * xmlFreeID:
2632
 * @not:  A id
2633
 *
2634
 * Deallocate the memory used by an id definition
2635
 */
2636
static void
2637
1.34M
xmlFreeID(xmlIDPtr id) {
2638
1.34M
    xmlDictPtr dict = NULL;
2639
2640
1.34M
    if (id == NULL) return;
2641
2642
1.34M
    if (id->doc != NULL)
2643
1.34M
        dict = id->doc->dict;
2644
2645
1.34M
    if (id->value != NULL)
2646
1.34M
  DICT_FREE(id->value)
2647
1.34M
    if (id->name != NULL)
2648
288k
  DICT_FREE(id->name)
2649
1.34M
    xmlFree(id);
2650
1.34M
}
2651
2652
2653
/**
2654
 * xmlAddID:
2655
 * @ctxt:  the validation context
2656
 * @doc:  pointer to the document
2657
 * @value:  the value name
2658
 * @attr:  the attribute holding the ID
2659
 *
2660
 * Register a new id declaration
2661
 *
2662
 * Returns NULL if not, otherwise the new xmlIDPtr
2663
 */
2664
xmlIDPtr
2665
xmlAddID(xmlValidCtxtPtr ctxt, xmlDocPtr doc, const xmlChar *value,
2666
1.34M
         xmlAttrPtr attr) {
2667
1.34M
    xmlIDPtr ret;
2668
1.34M
    xmlIDTablePtr table;
2669
2670
1.34M
    if (doc == NULL) {
2671
0
  return(NULL);
2672
0
    }
2673
1.34M
    if ((value == NULL) || (value[0] == 0)) {
2674
2.37k
  return(NULL);
2675
2.37k
    }
2676
1.34M
    if (attr == NULL) {
2677
0
  return(NULL);
2678
0
    }
2679
2680
    /*
2681
     * Create the ID table if needed.
2682
     */
2683
1.34M
    table = (xmlIDTablePtr) doc->ids;
2684
1.34M
    if (table == NULL)  {
2685
53.9k
        doc->ids = table = xmlHashCreateDict(0, doc->dict);
2686
53.9k
    }
2687
1.34M
    if (table == NULL) {
2688
0
  xmlVErrMemory(ctxt,
2689
0
    "xmlAddID: Table creation failed!\n");
2690
0
        return(NULL);
2691
0
    }
2692
2693
1.34M
    ret = (xmlIDPtr) xmlMalloc(sizeof(xmlID));
2694
1.34M
    if (ret == NULL) {
2695
0
  xmlVErrMemory(ctxt, "malloc failed");
2696
0
  return(NULL);
2697
0
    }
2698
2699
    /*
2700
     * fill the structure.
2701
     */
2702
1.34M
    ret->value = xmlStrdup(value);
2703
1.34M
    ret->doc = doc;
2704
1.34M
    if (xmlIsStreaming(ctxt)) {
2705
  /*
2706
   * Operating in streaming mode, attr is gonna disappear
2707
   */
2708
288k
  if (doc->dict != NULL)
2709
263k
      ret->name = xmlDictLookup(doc->dict, attr->name, -1);
2710
24.8k
  else
2711
24.8k
      ret->name = xmlStrdup(attr->name);
2712
288k
  ret->attr = NULL;
2713
1.05M
    } else {
2714
1.05M
  ret->attr = attr;
2715
1.05M
  ret->name = NULL;
2716
1.05M
    }
2717
1.34M
    ret->lineno = xmlGetLineNo(attr->parent);
2718
2719
1.34M
    if (xmlHashAddEntry(table, value, ret) < 0) {
2720
49.1k
#ifdef LIBXML_VALID_ENABLED
2721
  /*
2722
   * The id is already defined in this DTD.
2723
   */
2724
49.1k
  if (ctxt != NULL) {
2725
39.2k
      xmlErrValidNode(ctxt, attr->parent, XML_DTD_ID_REDEFINED,
2726
39.2k
          "ID %s already defined\n", value, NULL, NULL);
2727
39.2k
  }
2728
49.1k
#endif /* LIBXML_VALID_ENABLED */
2729
49.1k
  xmlFreeID(ret);
2730
49.1k
  return(NULL);
2731
49.1k
    }
2732
1.29M
    if (attr != NULL)
2733
1.29M
  attr->atype = XML_ATTRIBUTE_ID;
2734
1.29M
    return(ret);
2735
1.34M
}
2736
2737
static void
2738
1.29M
xmlFreeIDTableEntry(void *id, const xmlChar *name ATTRIBUTE_UNUSED) {
2739
1.29M
    xmlFreeID((xmlIDPtr) id);
2740
1.29M
}
2741
2742
/**
2743
 * xmlFreeIDTable:
2744
 * @table:  An id table
2745
 *
2746
 * Deallocate the memory used by an ID hash table.
2747
 */
2748
void
2749
53.9k
xmlFreeIDTable(xmlIDTablePtr table) {
2750
53.9k
    xmlHashFree(table, xmlFreeIDTableEntry);
2751
53.9k
}
2752
2753
/**
2754
 * xmlIsID:
2755
 * @doc:  the document
2756
 * @elem:  the element carrying the attribute
2757
 * @attr:  the attribute
2758
 *
2759
 * Determine whether an attribute is of type ID. In case we have DTD(s)
2760
 * then this is done if DTD loading has been requested. In the case
2761
 * of HTML documents parsed with the HTML parser, then ID detection is
2762
 * done systematically.
2763
 *
2764
 * Returns 0 or 1 depending on the lookup result
2765
 */
2766
int
2767
16.8M
xmlIsID(xmlDocPtr doc, xmlNodePtr elem, xmlAttrPtr attr) {
2768
16.8M
    if ((attr == NULL) || (attr->name == NULL)) return(0);
2769
16.8M
    if ((attr->ns != NULL) && (attr->ns->prefix != NULL) &&
2770
16.8M
        (!strcmp((char *) attr->name, "id")) &&
2771
16.8M
        (!strcmp((char *) attr->ns->prefix, "xml")))
2772
3.20k
  return(1);
2773
16.8M
    if (doc == NULL) return(0);
2774
16.8M
    if ((doc->intSubset == NULL) && (doc->extSubset == NULL) &&
2775
16.8M
        (doc->type != XML_HTML_DOCUMENT_NODE)) {
2776
8.43M
  return(0);
2777
8.45M
    } else if (doc->type == XML_HTML_DOCUMENT_NODE) {
2778
0
        if ((xmlStrEqual(BAD_CAST "id", attr->name)) ||
2779
0
      ((xmlStrEqual(BAD_CAST "name", attr->name)) &&
2780
0
      ((elem == NULL) || (xmlStrEqual(elem->name, BAD_CAST "a")))))
2781
0
      return(1);
2782
0
  return(0);
2783
8.45M
    } else if (elem == NULL) {
2784
0
  return(0);
2785
8.45M
    } else {
2786
8.45M
  xmlAttributePtr attrDecl = NULL;
2787
2788
8.45M
  xmlChar felem[50], fattr[50];
2789
8.45M
  xmlChar *fullelemname, *fullattrname;
2790
2791
8.45M
  fullelemname = (elem->ns != NULL && elem->ns->prefix != NULL) ?
2792
301k
      xmlBuildQName(elem->name, elem->ns->prefix, felem, 50) :
2793
8.45M
      (xmlChar *)elem->name;
2794
2795
8.45M
  fullattrname = (attr->ns != NULL && attr->ns->prefix != NULL) ?
2796
427k
      xmlBuildQName(attr->name, attr->ns->prefix, fattr, 50) :
2797
8.45M
      (xmlChar *)attr->name;
2798
2799
8.45M
  if (fullelemname != NULL && fullattrname != NULL) {
2800
8.45M
      attrDecl = xmlGetDtdAttrDesc(doc->intSubset, fullelemname,
2801
8.45M
                             fullattrname);
2802
8.45M
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
2803
5.13M
    attrDecl = xmlGetDtdAttrDesc(doc->extSubset, fullelemname,
2804
5.13M
               fullattrname);
2805
8.45M
  }
2806
2807
8.45M
  if ((fullattrname != fattr) && (fullattrname != attr->name))
2808
1.84k
      xmlFree(fullattrname);
2809
8.45M
  if ((fullelemname != felem) && (fullelemname != elem->name))
2810
4.24k
      xmlFree(fullelemname);
2811
2812
8.45M
        if ((attrDecl != NULL) && (attrDecl->atype == XML_ATTRIBUTE_ID))
2813
1.04M
      return(1);
2814
8.45M
    }
2815
7.40M
    return(0);
2816
16.8M
}
2817
2818
/**
2819
 * xmlRemoveID:
2820
 * @doc:  the document
2821
 * @attr:  the attribute
2822
 *
2823
 * Remove the given attribute from the ID table maintained internally.
2824
 *
2825
 * Returns -1 if the lookup failed and 0 otherwise
2826
 */
2827
int
2828
1.02M
xmlRemoveID(xmlDocPtr doc, xmlAttrPtr attr) {
2829
1.02M
    xmlIDTablePtr table;
2830
1.02M
    xmlIDPtr id;
2831
1.02M
    xmlChar *ID;
2832
2833
1.02M
    if (doc == NULL) return(-1);
2834
1.02M
    if (attr == NULL) return(-1);
2835
2836
1.02M
    table = (xmlIDTablePtr) doc->ids;
2837
1.02M
    if (table == NULL)
2838
1.01M
        return(-1);
2839
2840
7.84k
    ID = xmlNodeListGetString(doc, attr->children, 1);
2841
7.84k
    if (ID == NULL)
2842
21
        return(-1);
2843
7.82k
    xmlValidNormalizeString(ID);
2844
2845
7.82k
    id = xmlHashLookup(table, ID);
2846
7.82k
    if (id == NULL || id->attr != attr) {
2847
4.35k
        xmlFree(ID);
2848
4.35k
        return(-1);
2849
4.35k
    }
2850
2851
3.47k
    xmlHashRemoveEntry(table, ID, xmlFreeIDTableEntry);
2852
3.47k
    xmlFree(ID);
2853
3.47k
    attr->atype = 0;
2854
3.47k
    return(0);
2855
7.82k
}
2856
2857
/**
2858
 * xmlGetID:
2859
 * @doc:  pointer to the document
2860
 * @ID:  the ID value
2861
 *
2862
 * Search the attribute declaring the given ID
2863
 *
2864
 * Returns NULL if not found, otherwise the xmlAttrPtr defining the ID
2865
 */
2866
xmlAttrPtr
2867
199k
xmlGetID(xmlDocPtr doc, const xmlChar *ID) {
2868
199k
    xmlIDTablePtr table;
2869
199k
    xmlIDPtr id;
2870
2871
199k
    if (doc == NULL) {
2872
0
  return(NULL);
2873
0
    }
2874
2875
199k
    if (ID == NULL) {
2876
0
  return(NULL);
2877
0
    }
2878
2879
199k
    table = (xmlIDTablePtr) doc->ids;
2880
199k
    if (table == NULL)
2881
87.3k
        return(NULL);
2882
2883
112k
    id = xmlHashLookup(table, ID);
2884
112k
    if (id == NULL)
2885
34.1k
  return(NULL);
2886
78.0k
    if (id->attr == NULL) {
2887
  /*
2888
   * We are operating on a stream, return a well known reference
2889
   * since the attribute node doesn't exist anymore
2890
   */
2891
26.2k
  return((xmlAttrPtr) doc);
2892
26.2k
    }
2893
51.8k
    return(id->attr);
2894
78.0k
}
2895
2896
/************************************************************************
2897
 *                  *
2898
 *        Refs          *
2899
 *                  *
2900
 ************************************************************************/
2901
typedef struct xmlRemoveMemo_t
2902
{
2903
  xmlListPtr l;
2904
  xmlAttrPtr ap;
2905
} xmlRemoveMemo;
2906
2907
typedef xmlRemoveMemo *xmlRemoveMemoPtr;
2908
2909
typedef struct xmlValidateMemo_t
2910
{
2911
    xmlValidCtxtPtr ctxt;
2912
    const xmlChar *name;
2913
} xmlValidateMemo;
2914
2915
typedef xmlValidateMemo *xmlValidateMemoPtr;
2916
2917
/**
2918
 * xmlFreeRef:
2919
 * @lk:  A list link
2920
 *
2921
 * Deallocate the memory used by a ref definition
2922
 */
2923
static void
2924
2.90M
xmlFreeRef(xmlLinkPtr lk) {
2925
2.90M
    xmlRefPtr ref = (xmlRefPtr)xmlLinkGetData(lk);
2926
2.90M
    if (ref == NULL) return;
2927
2.90M
    if (ref->value != NULL)
2928
2.90M
        xmlFree((xmlChar *)ref->value);
2929
2.90M
    if (ref->name != NULL)
2930
624k
        xmlFree((xmlChar *)ref->name);
2931
2.90M
    xmlFree(ref);
2932
2.90M
}
2933
2934
/**
2935
 * xmlFreeRefTableEntry:
2936
 * @list_ref:  A list of references.
2937
 *
2938
 * Deallocate the memory used by a list of references
2939
 */
2940
static void
2941
1.08M
xmlFreeRefTableEntry(void *payload, const xmlChar *name ATTRIBUTE_UNUSED) {
2942
1.08M
    xmlListPtr list_ref = (xmlListPtr) payload;
2943
1.08M
    if (list_ref == NULL) return;
2944
1.08M
    xmlListDelete(list_ref);
2945
1.08M
}
2946
2947
/**
2948
 * xmlWalkRemoveRef:
2949
 * @data:  Contents of current link
2950
 * @user:  Value supplied by the user
2951
 *
2952
 * Returns 0 to abort the walk or 1 to continue
2953
 */
2954
static int
2955
xmlWalkRemoveRef(const void *data, void *user)
2956
0
{
2957
0
    xmlAttrPtr attr0 = ((xmlRefPtr)data)->attr;
2958
0
    xmlAttrPtr attr1 = ((xmlRemoveMemoPtr)user)->ap;
2959
0
    xmlListPtr ref_list = ((xmlRemoveMemoPtr)user)->l;
2960
2961
0
    if (attr0 == attr1) { /* Matched: remove and terminate walk */
2962
0
        xmlListRemoveFirst(ref_list, (void *)data);
2963
0
        return 0;
2964
0
    }
2965
0
    return 1;
2966
0
}
2967
2968
/**
2969
 * xmlDummyCompare
2970
 * @data0:  Value supplied by the user
2971
 * @data1:  Value supplied by the user
2972
 *
2973
 * Do nothing, return 0. Used to create unordered lists.
2974
 */
2975
static int
2976
xmlDummyCompare(const void *data0 ATTRIBUTE_UNUSED,
2977
                const void *data1 ATTRIBUTE_UNUSED)
2978
1.82M
{
2979
1.82M
    return (0);
2980
1.82M
}
2981
2982
/**
2983
 * xmlAddRef:
2984
 * @ctxt:  the validation context
2985
 * @doc:  pointer to the document
2986
 * @value:  the value name
2987
 * @attr:  the attribute holding the Ref
2988
 *
2989
 * DEPRECATED, do not use. This function will be removed from the public API.
2990
 *
2991
 * Register a new ref declaration
2992
 *
2993
 * Returns NULL if not, otherwise the new xmlRefPtr
2994
 */
2995
xmlRefPtr
2996
xmlAddRef(xmlValidCtxtPtr ctxt, xmlDocPtr doc, const xmlChar *value,
2997
2.90M
    xmlAttrPtr attr) {
2998
2.90M
    xmlRefPtr ret;
2999
2.90M
    xmlRefTablePtr table;
3000
2.90M
    xmlListPtr ref_list;
3001
3002
2.90M
    if (doc == NULL) {
3003
0
        return(NULL);
3004
0
    }
3005
2.90M
    if (value == NULL) {
3006
0
        return(NULL);
3007
0
    }
3008
2.90M
    if (attr == NULL) {
3009
0
        return(NULL);
3010
0
    }
3011
3012
    /*
3013
     * Create the Ref table if needed.
3014
     */
3015
2.90M
    table = (xmlRefTablePtr) doc->refs;
3016
2.90M
    if (table == NULL) {
3017
33.2k
        doc->refs = table = xmlHashCreateDict(0, doc->dict);
3018
33.2k
    }
3019
2.90M
    if (table == NULL) {
3020
0
  xmlVErrMemory(ctxt,
3021
0
            "xmlAddRef: Table creation failed!\n");
3022
0
        return(NULL);
3023
0
    }
3024
3025
2.90M
    ret = (xmlRefPtr) xmlMalloc(sizeof(xmlRef));
3026
2.90M
    if (ret == NULL) {
3027
0
  xmlVErrMemory(ctxt, "malloc failed");
3028
0
        return(NULL);
3029
0
    }
3030
3031
    /*
3032
     * fill the structure.
3033
     */
3034
2.90M
    ret->value = xmlStrdup(value);
3035
2.90M
    if (xmlIsStreaming(ctxt)) {
3036
  /*
3037
   * Operating in streaming mode, attr is gonna disappear
3038
   */
3039
624k
  ret->name = xmlStrdup(attr->name);
3040
624k
  ret->attr = NULL;
3041
2.28M
    } else {
3042
2.28M
  ret->name = NULL;
3043
2.28M
  ret->attr = attr;
3044
2.28M
    }
3045
2.90M
    ret->lineno = xmlGetLineNo(attr->parent);
3046
3047
    /* To add a reference :-
3048
     * References are maintained as a list of references,
3049
     * Lookup the entry, if no entry create new nodelist
3050
     * Add the owning node to the NodeList
3051
     * Return the ref
3052
     */
3053
3054
2.90M
    if (NULL == (ref_list = xmlHashLookup(table, value))) {
3055
1.08M
        if (NULL == (ref_list = xmlListCreate(xmlFreeRef, xmlDummyCompare))) {
3056
0
      xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
3057
0
        "xmlAddRef: Reference list creation failed!\n",
3058
0
        NULL);
3059
0
      goto failed;
3060
0
        }
3061
1.08M
        if (xmlHashAddEntry(table, value, ref_list) < 0) {
3062
0
            xmlListDelete(ref_list);
3063
0
      xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
3064
0
        "xmlAddRef: Reference list insertion failed!\n",
3065
0
        NULL);
3066
0
      goto failed;
3067
0
        }
3068
1.08M
    }
3069
2.90M
    if (xmlListAppend(ref_list, ret) != 0) {
3070
0
  xmlErrValid(NULL, XML_ERR_INTERNAL_ERROR,
3071
0
        "xmlAddRef: Reference list insertion failed!\n",
3072
0
        NULL);
3073
0
        goto failed;
3074
0
    }
3075
2.90M
    return(ret);
3076
0
failed:
3077
0
    if (ret != NULL) {
3078
0
        if (ret->value != NULL)
3079
0
      xmlFree((char *)ret->value);
3080
0
        if (ret->name != NULL)
3081
0
      xmlFree((char *)ret->name);
3082
0
        xmlFree(ret);
3083
0
    }
3084
0
    return(NULL);
3085
2.90M
}
3086
3087
/**
3088
 * xmlFreeRefTable:
3089
 * @table:  An ref table
3090
 *
3091
 * DEPRECATED, do not use. This function will be removed from the public API.
3092
 *
3093
 * Deallocate the memory used by an Ref hash table.
3094
 */
3095
void
3096
33.2k
xmlFreeRefTable(xmlRefTablePtr table) {
3097
33.2k
    xmlHashFree(table, xmlFreeRefTableEntry);
3098
33.2k
}
3099
3100
/**
3101
 * xmlIsRef:
3102
 * @doc:  the document
3103
 * @elem:  the element carrying the attribute
3104
 * @attr:  the attribute
3105
 *
3106
 * DEPRECATED, do not use. This function will be removed from the public API.
3107
 *
3108
 * Determine whether an attribute is of type Ref. In case we have DTD(s)
3109
 * then this is simple, otherwise we use an heuristic: name Ref (upper
3110
 * or lowercase).
3111
 *
3112
 * Returns 0 or 1 depending on the lookup result
3113
 */
3114
int
3115
15.8M
xmlIsRef(xmlDocPtr doc, xmlNodePtr elem, xmlAttrPtr attr) {
3116
15.8M
    if (attr == NULL)
3117
0
        return(0);
3118
15.8M
    if (doc == NULL) {
3119
0
        doc = attr->doc;
3120
0
  if (doc == NULL) return(0);
3121
0
    }
3122
3123
15.8M
    if ((doc->intSubset == NULL) && (doc->extSubset == NULL)) {
3124
8.43M
        return(0);
3125
8.43M
    } else if (doc->type == XML_HTML_DOCUMENT_NODE) {
3126
        /* TODO @@@ */
3127
0
        return(0);
3128
7.39M
    } else {
3129
7.39M
        xmlAttributePtr attrDecl;
3130
3131
7.39M
        if (elem == NULL) return(0);
3132
7.39M
        attrDecl = xmlGetDtdAttrDesc(doc->intSubset, elem->name, attr->name);
3133
7.39M
        if ((attrDecl == NULL) && (doc->extSubset != NULL))
3134
4.11M
            attrDecl = xmlGetDtdAttrDesc(doc->extSubset,
3135
4.11M
                             elem->name, attr->name);
3136
3137
7.39M
  if ((attrDecl != NULL) &&
3138
7.39M
      (attrDecl->atype == XML_ATTRIBUTE_IDREF ||
3139
3.72M
       attrDecl->atype == XML_ATTRIBUTE_IDREFS))
3140
2.35M
  return(1);
3141
7.39M
    }
3142
5.03M
    return(0);
3143
15.8M
}
3144
3145
/**
3146
 * xmlRemoveRef:
3147
 * @doc:  the document
3148
 * @attr:  the attribute
3149
 *
3150
 * DEPRECATED, do not use. This function will be removed from the public API.
3151
 *
3152
 * Remove the given attribute from the Ref table maintained internally.
3153
 *
3154
 * Returns -1 if the lookup failed and 0 otherwise
3155
 */
3156
int
3157
0
xmlRemoveRef(xmlDocPtr doc, xmlAttrPtr attr) {
3158
0
    xmlListPtr ref_list;
3159
0
    xmlRefTablePtr table;
3160
0
    xmlChar *ID;
3161
0
    xmlRemoveMemo target;
3162
3163
0
    if (doc == NULL) return(-1);
3164
0
    if (attr == NULL) return(-1);
3165
3166
0
    table = (xmlRefTablePtr) doc->refs;
3167
0
    if (table == NULL)
3168
0
        return(-1);
3169
3170
0
    ID = xmlNodeListGetString(doc, attr->children, 1);
3171
0
    if (ID == NULL)
3172
0
        return(-1);
3173
3174
0
    ref_list = xmlHashLookup(table, ID);
3175
0
    if(ref_list == NULL) {
3176
0
        xmlFree(ID);
3177
0
        return (-1);
3178
0
    }
3179
3180
    /* At this point, ref_list refers to a list of references which
3181
     * have the same key as the supplied attr. Our list of references
3182
     * is ordered by reference address and we don't have that information
3183
     * here to use when removing. We'll have to walk the list and
3184
     * check for a matching attribute, when we find one stop the walk
3185
     * and remove the entry.
3186
     * The list is ordered by reference, so that means we don't have the
3187
     * key. Passing the list and the reference to the walker means we
3188
     * will have enough data to be able to remove the entry.
3189
     */
3190
0
    target.l = ref_list;
3191
0
    target.ap = attr;
3192
3193
    /* Remove the supplied attr from our list */
3194
0
    xmlListWalk(ref_list, xmlWalkRemoveRef, &target);
3195
3196
    /*If the list is empty then remove the list entry in the hash */
3197
0
    if (xmlListEmpty(ref_list))
3198
0
        xmlHashUpdateEntry(table, ID, NULL, xmlFreeRefTableEntry);
3199
0
    xmlFree(ID);
3200
0
    return(0);
3201
0
}
3202
3203
/**
3204
 * xmlGetRefs:
3205
 * @doc:  pointer to the document
3206
 * @ID:  the ID value
3207
 *
3208
 * DEPRECATED, do not use. This function will be removed from the public API.
3209
 *
3210
 * Find the set of references for the supplied ID.
3211
 *
3212
 * Returns NULL if not found, otherwise node set for the ID.
3213
 */
3214
xmlListPtr
3215
0
xmlGetRefs(xmlDocPtr doc, const xmlChar *ID) {
3216
0
    xmlRefTablePtr table;
3217
3218
0
    if (doc == NULL) {
3219
0
        return(NULL);
3220
0
    }
3221
3222
0
    if (ID == NULL) {
3223
0
        return(NULL);
3224
0
    }
3225
3226
0
    table = (xmlRefTablePtr) doc->refs;
3227
0
    if (table == NULL)
3228
0
        return(NULL);
3229
3230
0
    return (xmlHashLookup(table, ID));
3231
0
}
3232
3233
/************************************************************************
3234
 *                  *
3235
 *    Routines for validity checking        *
3236
 *                  *
3237
 ************************************************************************/
3238
3239
/**
3240
 * xmlGetDtdElementDesc:
3241
 * @dtd:  a pointer to the DtD to search
3242
 * @name:  the element name
3243
 *
3244
 * Search the DTD for the description of this element
3245
 *
3246
 * returns the xmlElementPtr if found or NULL
3247
 */
3248
3249
xmlElementPtr
3250
18.6M
xmlGetDtdElementDesc(xmlDtdPtr dtd, const xmlChar *name) {
3251
18.6M
    xmlElementTablePtr table;
3252
18.6M
    xmlElementPtr cur;
3253
18.6M
    xmlChar *uqname = NULL, *prefix = NULL;
3254
3255
18.6M
    if ((dtd == NULL) || (name == NULL)) return(NULL);
3256
17.6M
    if (dtd->elements == NULL)
3257
9.10M
  return(NULL);
3258
8.58M
    table = (xmlElementTablePtr) dtd->elements;
3259
3260
8.58M
    uqname = xmlSplitQName2(name, &prefix);
3261
8.58M
    if (uqname != NULL)
3262
100k
        name = uqname;
3263
8.58M
    cur = xmlHashLookup2(table, name, prefix);
3264
8.58M
    if (prefix != NULL) xmlFree(prefix);
3265
8.58M
    if (uqname != NULL) xmlFree(uqname);
3266
8.58M
    return(cur);
3267
17.6M
}
3268
/**
3269
 * xmlGetDtdElementDesc2:
3270
 * @dtd:  a pointer to the DtD to search
3271
 * @name:  the element name
3272
 * @create:  create an empty description if not found
3273
 *
3274
 * Search the DTD for the description of this element
3275
 *
3276
 * returns the xmlElementPtr if found or NULL
3277
 */
3278
3279
static xmlElementPtr
3280
14.7M
xmlGetDtdElementDesc2(xmlDtdPtr dtd, const xmlChar *name, int create) {
3281
14.7M
    xmlElementTablePtr table;
3282
14.7M
    xmlElementPtr cur;
3283
14.7M
    xmlChar *uqname = NULL, *prefix = NULL;
3284
3285
14.7M
    if (dtd == NULL) return(NULL);
3286
14.7M
    if (dtd->elements == NULL) {
3287
18.7k
  xmlDictPtr dict = NULL;
3288
3289
18.7k
  if (dtd->doc != NULL)
3290
18.7k
      dict = dtd->doc->dict;
3291
3292
18.7k
  if (!create)
3293
0
      return(NULL);
3294
  /*
3295
   * Create the Element table if needed.
3296
   */
3297
18.7k
  table = (xmlElementTablePtr) dtd->elements;
3298
18.7k
  if (table == NULL) {
3299
18.7k
      table = xmlHashCreateDict(0, dict);
3300
18.7k
      dtd->elements = (void *) table;
3301
18.7k
  }
3302
18.7k
  if (table == NULL) {
3303
0
      xmlVErrMemory(NULL, "element table allocation failed");
3304
0
      return(NULL);
3305
0
  }
3306
18.7k
    }
3307
14.7M
    table = (xmlElementTablePtr) dtd->elements;
3308
3309
14.7M
    uqname = xmlSplitQName2(name, &prefix);
3310
14.7M
    if (uqname != NULL)
3311
346k
        name = uqname;
3312
14.7M
    cur = xmlHashLookup2(table, name, prefix);
3313
14.7M
    if ((cur == NULL) && (create)) {
3314
78.6k
  cur = (xmlElementPtr) xmlMalloc(sizeof(xmlElement));
3315
78.6k
  if (cur == NULL) {
3316
0
      xmlVErrMemory(NULL, "malloc failed");
3317
0
      return(NULL);
3318
0
  }
3319
78.6k
  memset(cur, 0, sizeof(xmlElement));
3320
78.6k
  cur->type = XML_ELEMENT_DECL;
3321
3322
  /*
3323
   * fill the structure.
3324
   */
3325
78.6k
  cur->name = xmlStrdup(name);
3326
78.6k
  cur->prefix = xmlStrdup(prefix);
3327
78.6k
  cur->etype = XML_ELEMENT_TYPE_UNDEFINED;
3328
3329
78.6k
  xmlHashAddEntry2(table, name, prefix, cur);
3330
78.6k
    }
3331
14.7M
    if (prefix != NULL) xmlFree(prefix);
3332
14.7M
    if (uqname != NULL) xmlFree(uqname);
3333
14.7M
    return(cur);
3334
14.7M
}
3335
3336
/**
3337
 * xmlGetDtdQElementDesc:
3338
 * @dtd:  a pointer to the DtD to search
3339
 * @name:  the element name
3340
 * @prefix:  the element namespace prefix
3341
 *
3342
 * Search the DTD for the description of this element
3343
 *
3344
 * returns the xmlElementPtr if found or NULL
3345
 */
3346
3347
xmlElementPtr
3348
xmlGetDtdQElementDesc(xmlDtdPtr dtd, const xmlChar *name,
3349
11.8M
                const xmlChar *prefix) {
3350
11.8M
    xmlElementTablePtr table;
3351
3352
11.8M
    if (dtd == NULL) return(NULL);
3353
8.39M
    if (dtd->elements == NULL) return(NULL);
3354
3.26M
    table = (xmlElementTablePtr) dtd->elements;
3355
3356
3.26M
    return(xmlHashLookup2(table, name, prefix));
3357
8.39M
}
3358
3359
/**
3360
 * xmlGetDtdAttrDesc:
3361
 * @dtd:  a pointer to the DtD to search
3362
 * @elem:  the element name
3363
 * @name:  the attribute name
3364
 *
3365
 * Search the DTD for the description of this attribute on
3366
 * this element.
3367
 *
3368
 * returns the xmlAttributePtr if found or NULL
3369
 */
3370
3371
xmlAttributePtr
3372
33.3M
xmlGetDtdAttrDesc(xmlDtdPtr dtd, const xmlChar *elem, const xmlChar *name) {
3373
33.3M
    xmlAttributeTablePtr table;
3374
33.3M
    xmlAttributePtr cur;
3375
33.3M
    xmlChar *uqname = NULL, *prefix = NULL;
3376
3377
33.3M
    if (dtd == NULL) return(NULL);
3378
33.3M
    if (dtd->attributes == NULL) return(NULL);
3379
3380
13.4M
    table = (xmlAttributeTablePtr) dtd->attributes;
3381
13.4M
    if (table == NULL)
3382
0
  return(NULL);
3383
3384
13.4M
    uqname = xmlSplitQName2(name, &prefix);
3385
3386
13.4M
    if (uqname != NULL) {
3387
1.06M
  cur = xmlHashLookup3(table, uqname, prefix, elem);
3388
1.06M
  if (prefix != NULL) xmlFree(prefix);
3389
1.06M
  if (uqname != NULL) xmlFree(uqname);
3390
1.06M
    } else
3391
12.3M
  cur = xmlHashLookup3(table, name, NULL, elem);
3392
13.4M
    return(cur);
3393
13.4M
}
3394
3395
/**
3396
 * xmlGetDtdQAttrDesc:
3397
 * @dtd:  a pointer to the DtD to search
3398
 * @elem:  the element name
3399
 * @name:  the attribute name
3400
 * @prefix:  the attribute namespace prefix
3401
 *
3402
 * Search the DTD for the description of this qualified attribute on
3403
 * this element.
3404
 *
3405
 * returns the xmlAttributePtr if found or NULL
3406
 */
3407
3408
xmlAttributePtr
3409
xmlGetDtdQAttrDesc(xmlDtdPtr dtd, const xmlChar *elem, const xmlChar *name,
3410
834k
            const xmlChar *prefix) {
3411
834k
    xmlAttributeTablePtr table;
3412
3413
834k
    if (dtd == NULL) return(NULL);
3414
834k
    if (dtd->attributes == NULL) return(NULL);
3415
385k
    table = (xmlAttributeTablePtr) dtd->attributes;
3416
3417
385k
    return(xmlHashLookup3(table, name, prefix, elem));
3418
834k
}
3419
3420
/**
3421
 * xmlGetDtdNotationDesc:
3422
 * @dtd:  a pointer to the DtD to search
3423
 * @name:  the notation name
3424
 *
3425
 * Search the DTD for the description of this notation
3426
 *
3427
 * returns the xmlNotationPtr if found or NULL
3428
 */
3429
3430
xmlNotationPtr
3431
101k
xmlGetDtdNotationDesc(xmlDtdPtr dtd, const xmlChar *name) {
3432
101k
    xmlNotationTablePtr table;
3433
3434
101k
    if (dtd == NULL) return(NULL);
3435
98.5k
    if (dtd->notations == NULL) return(NULL);
3436
31.8k
    table = (xmlNotationTablePtr) dtd->notations;
3437
3438
31.8k
    return(xmlHashLookup(table, name));
3439
98.5k
}
3440
3441
#if defined(LIBXML_VALID_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
3442
/**
3443
 * xmlValidateNotationUse:
3444
 * @ctxt:  the validation context
3445
 * @doc:  the document
3446
 * @notationName:  the notation name to check
3447
 *
3448
 * Validate that the given name match a notation declaration.
3449
 * - [ VC: Notation Declared ]
3450
 *
3451
 * returns 1 if valid or 0 otherwise
3452
 */
3453
3454
int
3455
xmlValidateNotationUse(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
3456
13.8k
                       const xmlChar *notationName) {
3457
13.8k
    xmlNotationPtr notaDecl;
3458
13.8k
    if ((doc == NULL) || (doc->intSubset == NULL) ||
3459
13.8k
        (notationName == NULL)) return(-1);
3460
3461
13.8k
    notaDecl = xmlGetDtdNotationDesc(doc->intSubset, notationName);
3462
13.8k
    if ((notaDecl == NULL) && (doc->extSubset != NULL))
3463
942
  notaDecl = xmlGetDtdNotationDesc(doc->extSubset, notationName);
3464
3465
13.8k
    if ((notaDecl == NULL) && (ctxt != NULL)) {
3466
13.6k
  xmlErrValidNode(ctxt, (xmlNodePtr) doc, XML_DTD_UNKNOWN_NOTATION,
3467
13.6k
                  "NOTATION %s is not declared\n",
3468
13.6k
            notationName, NULL, NULL);
3469
13.6k
  return(0);
3470
13.6k
    }
3471
185
    return(1);
3472
13.8k
}
3473
#endif /* LIBXML_VALID_ENABLED or LIBXML_SCHEMAS_ENABLED */
3474
3475
/**
3476
 * xmlIsMixedElement:
3477
 * @doc:  the document
3478
 * @name:  the element name
3479
 *
3480
 * Search in the DtDs whether an element accept Mixed content (or ANY)
3481
 * basically if it is supposed to accept text childs
3482
 *
3483
 * returns 0 if no, 1 if yes, and -1 if no element description is available
3484
 */
3485
3486
int
3487
6.02M
xmlIsMixedElement(xmlDocPtr doc, const xmlChar *name) {
3488
6.02M
    xmlElementPtr elemDecl;
3489
3490
6.02M
    if ((doc == NULL) || (doc->intSubset == NULL)) return(-1);
3491
3492
3.79M
    elemDecl = xmlGetDtdElementDesc(doc->intSubset, name);
3493
3.79M
    if ((elemDecl == NULL) && (doc->extSubset != NULL))
3494
1.64M
  elemDecl = xmlGetDtdElementDesc(doc->extSubset, name);
3495
3.79M
    if (elemDecl == NULL) return(-1);
3496
1.53M
    switch (elemDecl->etype) {
3497
11.0k
  case XML_ELEMENT_TYPE_UNDEFINED:
3498
11.0k
      return(-1);
3499
1.43M
  case XML_ELEMENT_TYPE_ELEMENT:
3500
1.43M
      return(0);
3501
5.14k
        case XML_ELEMENT_TYPE_EMPTY:
3502
      /*
3503
       * return 1 for EMPTY since we want VC error to pop up
3504
       * on <empty>     </empty> for example
3505
       */
3506
5.20k
  case XML_ELEMENT_TYPE_ANY:
3507
90.4k
  case XML_ELEMENT_TYPE_MIXED:
3508
90.4k
      return(1);
3509
1.53M
    }
3510
0
    return(1);
3511
1.53M
}
3512
3513
#ifdef LIBXML_VALID_ENABLED
3514
3515
static int
3516
1.07M
xmlIsDocNameStartChar(xmlDocPtr doc, int c) {
3517
1.07M
    if ((doc == NULL) || (doc->properties & XML_DOC_OLD10) == 0) {
3518
        /*
3519
   * Use the new checks of production [4] [4a] amd [5] of the
3520
   * Update 5 of XML-1.0
3521
   */
3522
416k
  if (((c >= 'a') && (c <= 'z')) ||
3523
416k
      ((c >= 'A') && (c <= 'Z')) ||
3524
416k
      (c == '_') || (c == ':') ||
3525
416k
      ((c >= 0xC0) && (c <= 0xD6)) ||
3526
416k
      ((c >= 0xD8) && (c <= 0xF6)) ||
3527
416k
      ((c >= 0xF8) && (c <= 0x2FF)) ||
3528
416k
      ((c >= 0x370) && (c <= 0x37D)) ||
3529
416k
      ((c >= 0x37F) && (c <= 0x1FFF)) ||
3530
416k
      ((c >= 0x200C) && (c <= 0x200D)) ||
3531
416k
      ((c >= 0x2070) && (c <= 0x218F)) ||
3532
416k
      ((c >= 0x2C00) && (c <= 0x2FEF)) ||
3533
416k
      ((c >= 0x3001) && (c <= 0xD7FF)) ||
3534
416k
      ((c >= 0xF900) && (c <= 0xFDCF)) ||
3535
416k
      ((c >= 0xFDF0) && (c <= 0xFFFD)) ||
3536
416k
      ((c >= 0x10000) && (c <= 0xEFFFF)))
3537
379k
      return(1);
3538
653k
    } else {
3539
653k
        if (IS_LETTER(c) || (c == '_') || (c == ':'))
3540
634k
      return(1);
3541
653k
    }
3542
55.8k
    return(0);
3543
1.07M
}
3544
3545
static int
3546
11.9M
xmlIsDocNameChar(xmlDocPtr doc, int c) {
3547
11.9M
    if ((doc == NULL) || (doc->properties & XML_DOC_OLD10) == 0) {
3548
        /*
3549
   * Use the new checks of production [4] [4a] amd [5] of the
3550
   * Update 5 of XML-1.0
3551
   */
3552
5.10M
  if (((c >= 'a') && (c <= 'z')) ||
3553
5.10M
      ((c >= 'A') && (c <= 'Z')) ||
3554
5.10M
      ((c >= '0') && (c <= '9')) || /* !start */
3555
5.10M
      (c == '_') || (c == ':') ||
3556
5.10M
      (c == '-') || (c == '.') || (c == 0xB7) || /* !start */
3557
5.10M
      ((c >= 0xC0) && (c <= 0xD6)) ||
3558
5.10M
      ((c >= 0xD8) && (c <= 0xF6)) ||
3559
5.10M
      ((c >= 0xF8) && (c <= 0x2FF)) ||
3560
5.10M
      ((c >= 0x300) && (c <= 0x36F)) || /* !start */
3561
5.10M
      ((c >= 0x370) && (c <= 0x37D)) ||
3562
5.10M
      ((c >= 0x37F) && (c <= 0x1FFF)) ||
3563
5.10M
      ((c >= 0x200C) && (c <= 0x200D)) ||
3564
5.10M
      ((c >= 0x203F) && (c <= 0x2040)) || /* !start */
3565
5.10M
      ((c >= 0x2070) && (c <= 0x218F)) ||
3566
5.10M
      ((c >= 0x2C00) && (c <= 0x2FEF)) ||
3567
5.10M
      ((c >= 0x3001) && (c <= 0xD7FF)) ||
3568
5.10M
      ((c >= 0xF900) && (c <= 0xFDCF)) ||
3569
5.10M
      ((c >= 0xFDF0) && (c <= 0xFFFD)) ||
3570
5.10M
      ((c >= 0x10000) && (c <= 0xEFFFF)))
3571
4.29M
       return(1);
3572
6.80M
    } else {
3573
6.80M
        if ((IS_LETTER(c)) || (IS_DIGIT(c)) ||
3574
6.80M
            (c == '.') || (c == '-') ||
3575
6.80M
      (c == '_') || (c == ':') ||
3576
6.80M
      (IS_COMBINING(c)) ||
3577
6.80M
      (IS_EXTENDER(c)))
3578
5.99M
      return(1);
3579
6.80M
    }
3580
1.61M
    return(0);
3581
11.9M
}
3582
3583
/**
3584
 * xmlValidateNameValue:
3585
 * @doc:  pointer to the document or NULL
3586
 * @value:  an Name value
3587
 *
3588
 * Validate that the given value match Name production
3589
 *
3590
 * returns 1 if valid or 0 otherwise
3591
 */
3592
3593
static int
3594
904k
xmlValidateNameValueInternal(xmlDocPtr doc, const xmlChar *value) {
3595
904k
    const xmlChar *cur;
3596
904k
    int val, len;
3597
3598
904k
    if (value == NULL) return(0);
3599
904k
    cur = value;
3600
904k
    val = xmlStringCurrentChar(NULL, cur, &len);
3601
904k
    cur += len;
3602
904k
    if (!xmlIsDocNameStartChar(doc, val))
3603
37.3k
  return(0);
3604
3605
867k
    val = xmlStringCurrentChar(NULL, cur, &len);
3606
867k
    cur += len;
3607
7.87M
    while (xmlIsDocNameChar(doc, val)) {
3608
7.00M
  val = xmlStringCurrentChar(NULL, cur, &len);
3609
7.00M
  cur += len;
3610
7.00M
    }
3611
3612
867k
    if (val != 0) return(0);
3613
3614
850k
    return(1);
3615
867k
}
3616
3617
/**
3618
 * xmlValidateNameValue:
3619
 * @value:  an Name value
3620
 *
3621
 * Validate that the given value match Name production
3622
 *
3623
 * returns 1 if valid or 0 otherwise
3624
 */
3625
3626
int
3627
0
xmlValidateNameValue(const xmlChar *value) {
3628
0
    return(xmlValidateNameValueInternal(NULL, value));
3629
0
}
3630
3631
/**
3632
 * xmlValidateNamesValueInternal:
3633
 * @doc:  pointer to the document or NULL
3634
 * @value:  an Names value
3635
 *
3636
 * Validate that the given value match Names production
3637
 *
3638
 * returns 1 if valid or 0 otherwise
3639
 */
3640
3641
static int
3642
58.1k
xmlValidateNamesValueInternal(xmlDocPtr doc, const xmlChar *value) {
3643
58.1k
    const xmlChar *cur;
3644
58.1k
    int val, len;
3645
3646
58.1k
    if (value == NULL) return(0);
3647
58.1k
    cur = value;
3648
58.1k
    val = xmlStringCurrentChar(NULL, cur, &len);
3649
58.1k
    cur += len;
3650
3651
58.1k
    if (!xmlIsDocNameStartChar(doc, val))
3652
3.73k
  return(0);
3653
3654
54.3k
    val = xmlStringCurrentChar(NULL, cur, &len);
3655
54.3k
    cur += len;
3656
362k
    while (xmlIsDocNameChar(doc, val)) {
3657
307k
  val = xmlStringCurrentChar(NULL, cur, &len);
3658
307k
  cur += len;
3659
307k
    }
3660
3661
    /* Should not test IS_BLANK(val) here -- see erratum E20*/
3662
146k
    while (val == 0x20) {
3663
221k
  while (val == 0x20) {
3664
113k
      val = xmlStringCurrentChar(NULL, cur, &len);
3665
113k
      cur += len;
3666
113k
  }
3667
3668
107k
  if (!xmlIsDocNameStartChar(doc, val))
3669
14.8k
      return(0);
3670
3671
92.4k
  val = xmlStringCurrentChar(NULL, cur, &len);
3672
92.4k
  cur += len;
3673
3674
537k
  while (xmlIsDocNameChar(doc, val)) {
3675
444k
      val = xmlStringCurrentChar(NULL, cur, &len);
3676
444k
      cur += len;
3677
444k
  }
3678
92.4k
    }
3679
3680
39.5k
    if (val != 0) return(0);
3681
3682
29.5k
    return(1);
3683
39.5k
}
3684
3685
/**
3686
 * xmlValidateNamesValue:
3687
 * @value:  an Names value
3688
 *
3689
 * Validate that the given value match Names production
3690
 *
3691
 * returns 1 if valid or 0 otherwise
3692
 */
3693
3694
int
3695
0
xmlValidateNamesValue(const xmlChar *value) {
3696
0
    return(xmlValidateNamesValueInternal(NULL, value));
3697
0
}
3698
3699
/**
3700
 * xmlValidateNmtokenValueInternal:
3701
 * @doc:  pointer to the document or NULL
3702
 * @value:  an Nmtoken value
3703
 *
3704
 * Validate that the given value match Nmtoken production
3705
 *
3706
 * [ VC: Name Token ]
3707
 *
3708
 * returns 1 if valid or 0 otherwise
3709
 */
3710
3711
static int
3712
266k
xmlValidateNmtokenValueInternal(xmlDocPtr doc, const xmlChar *value) {
3713
266k
    const xmlChar *cur;
3714
266k
    int val, len;
3715
3716
266k
    if (value == NULL) return(0);
3717
266k
    cur = value;
3718
266k
    val = xmlStringCurrentChar(NULL, cur, &len);
3719
266k
    cur += len;
3720
3721
266k
    if (!xmlIsDocNameChar(doc, val))
3722
27.8k
  return(0);
3723
3724
238k
    val = xmlStringCurrentChar(NULL, cur, &len);
3725
238k
    cur += len;
3726
512k
    while (xmlIsDocNameChar(doc, val)) {
3727
273k
  val = xmlStringCurrentChar(NULL, cur, &len);
3728
273k
  cur += len;
3729
273k
    }
3730
3731
238k
    if (val != 0) return(0);
3732
3733
234k
    return(1);
3734
238k
}
3735
3736
/**
3737
 * xmlValidateNmtokenValue:
3738
 * @value:  an Nmtoken value
3739
 *
3740
 * Validate that the given value match Nmtoken production
3741
 *
3742
 * [ VC: Name Token ]
3743
 *
3744
 * returns 1 if valid or 0 otherwise
3745
 */
3746
3747
int
3748
0
xmlValidateNmtokenValue(const xmlChar *value) {
3749
0
    return(xmlValidateNmtokenValueInternal(NULL, value));
3750
0
}
3751
3752
/**
3753
 * xmlValidateNmtokensValueInternal:
3754
 * @doc:  pointer to the document or NULL
3755
 * @value:  an Nmtokens value
3756
 *
3757
 * Validate that the given value match Nmtokens production
3758
 *
3759
 * [ VC: Name Token ]
3760
 *
3761
 * returns 1 if valid or 0 otherwise
3762
 */
3763
3764
static int
3765
269k
xmlValidateNmtokensValueInternal(xmlDocPtr doc, const xmlChar *value) {
3766
269k
    const xmlChar *cur;
3767
269k
    int val, len;
3768
3769
269k
    if (value == NULL) return(0);
3770
269k
    cur = value;
3771
269k
    val = xmlStringCurrentChar(NULL, cur, &len);
3772
269k
    cur += len;
3773
3774
269k
    while (IS_BLANK(val)) {
3775
67.9k
  val = xmlStringCurrentChar(NULL, cur, &len);
3776
67.9k
  cur += len;
3777
67.9k
    }
3778
3779
269k
    if (!xmlIsDocNameChar(doc, val))
3780
5.75k
  return(0);
3781
3782
1.71M
    while (xmlIsDocNameChar(doc, val)) {
3783
1.44M
  val = xmlStringCurrentChar(NULL, cur, &len);
3784
1.44M
  cur += len;
3785
1.44M
    }
3786
3787
    /* Should not test IS_BLANK(val) here -- see erratum E20*/
3788
325k
    while (val == 0x20) {
3789
141k
  while (val == 0x20) {
3790
74.7k
      val = xmlStringCurrentChar(NULL, cur, &len);
3791
74.7k
      cur += len;
3792
74.7k
  }
3793
66.9k
  if (val == 0) return(1);
3794
3795
66.5k
  if (!xmlIsDocNameChar(doc, val))
3796
4.68k
      return(0);
3797
3798
61.9k
  val = xmlStringCurrentChar(NULL, cur, &len);
3799
61.9k
  cur += len;
3800
3801
310k
  while (xmlIsDocNameChar(doc, val)) {
3802
248k
      val = xmlStringCurrentChar(NULL, cur, &len);
3803
248k
      cur += len;
3804
248k
  }
3805
61.9k
    }
3806
3807
258k
    if (val != 0) return(0);
3808
3809
245k
    return(1);
3810
258k
}
3811
3812
/**
3813
 * xmlValidateNmtokensValue:
3814
 * @value:  an Nmtokens value
3815
 *
3816
 * Validate that the given value match Nmtokens production
3817
 *
3818
 * [ VC: Name Token ]
3819
 *
3820
 * returns 1 if valid or 0 otherwise
3821
 */
3822
3823
int
3824
0
xmlValidateNmtokensValue(const xmlChar *value) {
3825
0
    return(xmlValidateNmtokensValueInternal(NULL, value));
3826
0
}
3827
3828
/**
3829
 * xmlValidateNotationDecl:
3830
 * @ctxt:  the validation context
3831
 * @doc:  a document instance
3832
 * @nota:  a notation definition
3833
 *
3834
 * Try to validate a single notation definition
3835
 * basically it does the following checks as described by the
3836
 * XML-1.0 recommendation:
3837
 *  - it seems that no validity constraint exists on notation declarations
3838
 * But this function get called anyway ...
3839
 *
3840
 * returns 1 if valid or 0 otherwise
3841
 */
3842
3843
int
3844
xmlValidateNotationDecl(xmlValidCtxtPtr ctxt ATTRIBUTE_UNUSED, xmlDocPtr doc ATTRIBUTE_UNUSED,
3845
10.9k
                         xmlNotationPtr nota ATTRIBUTE_UNUSED) {
3846
10.9k
    int ret = 1;
3847
3848
10.9k
    return(ret);
3849
10.9k
}
3850
3851
/**
3852
 * xmlValidateAttributeValueInternal:
3853
 * @doc: the document
3854
 * @type:  an attribute type
3855
 * @value:  an attribute value
3856
 *
3857
 * Validate that the given attribute value match  the proper production
3858
 *
3859
 * returns 1 if valid or 0 otherwise
3860
 */
3861
3862
static int
3863
xmlValidateAttributeValueInternal(xmlDocPtr doc, xmlAttributeType type,
3864
2.80M
                                  const xmlChar *value) {
3865
2.80M
    switch (type) {
3866
3.85k
  case XML_ATTRIBUTE_ENTITIES:
3867
58.1k
  case XML_ATTRIBUTE_IDREFS:
3868
58.1k
      return(xmlValidateNamesValueInternal(doc, value));
3869
7.60k
  case XML_ATTRIBUTE_ENTITY:
3870
588k
  case XML_ATTRIBUTE_IDREF:
3871
850k
  case XML_ATTRIBUTE_ID:
3872
904k
  case XML_ATTRIBUTE_NOTATION:
3873
904k
      return(xmlValidateNameValueInternal(doc, value));
3874
36.2k
  case XML_ATTRIBUTE_NMTOKENS:
3875
269k
  case XML_ATTRIBUTE_ENUMERATION:
3876
269k
      return(xmlValidateNmtokensValueInternal(doc, value));
3877
266k
  case XML_ATTRIBUTE_NMTOKEN:
3878
266k
      return(xmlValidateNmtokenValueInternal(doc, value));
3879
1.30M
        case XML_ATTRIBUTE_CDATA:
3880
1.30M
      break;
3881
2.80M
    }
3882
1.30M
    return(1);
3883
2.80M
}
3884
3885
/**
3886
 * xmlValidateAttributeValue:
3887
 * @type:  an attribute type
3888
 * @value:  an attribute value
3889
 *
3890
 * Validate that the given attribute value match  the proper production
3891
 *
3892
 * [ VC: ID ]
3893
 * Values of type ID must match the Name production....
3894
 *
3895
 * [ VC: IDREF ]
3896
 * Values of type IDREF must match the Name production, and values
3897
 * of type IDREFS must match Names ...
3898
 *
3899
 * [ VC: Entity Name ]
3900
 * Values of type ENTITY must match the Name production, values
3901
 * of type ENTITIES must match Names ...
3902
 *
3903
 * [ VC: Name Token ]
3904
 * Values of type NMTOKEN must match the Nmtoken production; values
3905
 * of type NMTOKENS must match Nmtokens.
3906
 *
3907
 * returns 1 if valid or 0 otherwise
3908
 */
3909
int
3910
0
xmlValidateAttributeValue(xmlAttributeType type, const xmlChar *value) {
3911
0
    return(xmlValidateAttributeValueInternal(NULL, type, value));
3912
0
}
3913
3914
/**
3915
 * xmlValidateAttributeValue2:
3916
 * @ctxt:  the validation context
3917
 * @doc:  the document
3918
 * @name:  the attribute name (used for error reporting only)
3919
 * @type:  the attribute type
3920
 * @value:  the attribute value
3921
 *
3922
 * Validate that the given attribute value match a given type.
3923
 * This typically cannot be done before having finished parsing
3924
 * the subsets.
3925
 *
3926
 * [ VC: IDREF ]
3927
 * Values of type IDREF must match one of the declared IDs
3928
 * Values of type IDREFS must match a sequence of the declared IDs
3929
 * each Name must match the value of an ID attribute on some element
3930
 * in the XML document; i.e. IDREF values must match the value of
3931
 * some ID attribute
3932
 *
3933
 * [ VC: Entity Name ]
3934
 * Values of type ENTITY must match one declared entity
3935
 * Values of type ENTITIES must match a sequence of declared entities
3936
 *
3937
 * [ VC: Notation Attributes ]
3938
 * all notation names in the declaration must be declared.
3939
 *
3940
 * returns 1 if valid or 0 otherwise
3941
 */
3942
3943
static int
3944
xmlValidateAttributeValue2(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
3945
1.42M
      const xmlChar *name, xmlAttributeType type, const xmlChar *value) {
3946
1.42M
    int ret = 1;
3947
1.42M
    switch (type) {
3948
15.9k
  case XML_ATTRIBUTE_IDREFS:
3949
549k
  case XML_ATTRIBUTE_IDREF:
3950
791k
  case XML_ATTRIBUTE_ID:
3951
806k
  case XML_ATTRIBUTE_NMTOKENS:
3952
852k
  case XML_ATTRIBUTE_ENUMERATION:
3953
891k
  case XML_ATTRIBUTE_NMTOKEN:
3954
1.36M
        case XML_ATTRIBUTE_CDATA:
3955
1.36M
      break;
3956
4.06k
  case XML_ATTRIBUTE_ENTITY: {
3957
4.06k
      xmlEntityPtr ent;
3958
3959
4.06k
      ent = xmlGetDocEntity(doc, value);
3960
      /* yeah it's a bit messy... */
3961
4.06k
      if ((ent == NULL) && (doc->standalone == 1)) {
3962
8
    doc->standalone = 0;
3963
8
    ent = xmlGetDocEntity(doc, value);
3964
8
      }
3965
4.06k
      if (ent == NULL) {
3966
3.87k
    xmlErrValidNode(ctxt, (xmlNodePtr) doc,
3967
3.87k
        XML_DTD_UNKNOWN_ENTITY,
3968
3.87k
   "ENTITY attribute %s reference an unknown entity \"%s\"\n",
3969
3.87k
           name, value, NULL);
3970
3.87k
    ret = 0;
3971
3.87k
      } else if (ent->etype != XML_EXTERNAL_GENERAL_UNPARSED_ENTITY) {
3972
158
    xmlErrValidNode(ctxt, (xmlNodePtr) doc,
3973
158
        XML_DTD_ENTITY_TYPE,
3974
158
   "ENTITY attribute %s reference an entity \"%s\" of wrong type\n",
3975
158
           name, value, NULL);
3976
158
    ret = 0;
3977
158
      }
3978
4.06k
      break;
3979
891k
        }
3980
1.78k
  case XML_ATTRIBUTE_ENTITIES: {
3981
1.78k
      xmlChar *dup, *nam = NULL, *cur, save;
3982
1.78k
      xmlEntityPtr ent;
3983
3984
1.78k
      dup = xmlStrdup(value);
3985
1.78k
      if (dup == NULL)
3986
0
    return(0);
3987
1.78k
      cur = dup;
3988
28.8k
      while (*cur != 0) {
3989
28.6k
    nam = cur;
3990
416k
    while ((*cur != 0) && (!IS_BLANK_CH(*cur))) cur++;
3991
28.6k
    save = *cur;
3992
28.6k
    *cur = 0;
3993
28.6k
    ent = xmlGetDocEntity(doc, nam);
3994
28.6k
    if (ent == NULL) {
3995
26.5k
        xmlErrValidNode(ctxt, (xmlNodePtr) doc,
3996
26.5k
            XML_DTD_UNKNOWN_ENTITY,
3997
26.5k
       "ENTITIES attribute %s reference an unknown entity \"%s\"\n",
3998
26.5k
         name, nam, NULL);
3999
26.5k
        ret = 0;
4000
26.5k
    } else if (ent->etype != XML_EXTERNAL_GENERAL_UNPARSED_ENTITY) {
4001
1.90k
        xmlErrValidNode(ctxt, (xmlNodePtr) doc,
4002
1.90k
            XML_DTD_ENTITY_TYPE,
4003
1.90k
       "ENTITIES attribute %s reference an entity \"%s\" of wrong type\n",
4004
1.90k
         name, nam, NULL);
4005
1.90k
        ret = 0;
4006
1.90k
    }
4007
28.6k
    if (save == 0)
4008
1.51k
        break;
4009
27.1k
    *cur = save;
4010
31.7k
    while (IS_BLANK_CH(*cur)) cur++;
4011
27.1k
      }
4012
1.78k
      xmlFree(dup);
4013
1.78k
      break;
4014
1.78k
  }
4015
53.1k
  case XML_ATTRIBUTE_NOTATION: {
4016
53.1k
      xmlNotationPtr nota;
4017
4018
53.1k
      nota = xmlGetDtdNotationDesc(doc->intSubset, value);
4019
53.1k
      if ((nota == NULL) && (doc->extSubset != NULL))
4020
18.8k
    nota = xmlGetDtdNotationDesc(doc->extSubset, value);
4021
4022
53.1k
      if (nota == NULL) {
4023
52.1k
    xmlErrValidNode(ctxt, (xmlNodePtr) doc,
4024
52.1k
                    XML_DTD_UNKNOWN_NOTATION,
4025
52.1k
       "NOTATION attribute %s reference an unknown notation \"%s\"\n",
4026
52.1k
           name, value, NULL);
4027
52.1k
    ret = 0;
4028
52.1k
      }
4029
53.1k
      break;
4030
1.78k
        }
4031
1.42M
    }
4032
1.42M
    return(ret);
4033
1.42M
}
4034
4035
/**
4036
 * xmlValidCtxtNormalizeAttributeValue:
4037
 * @ctxt: the validation context
4038
 * @doc:  the document
4039
 * @elem:  the parent
4040
 * @name:  the attribute name
4041
 * @value:  the attribute value
4042
 * @ctxt:  the validation context or NULL
4043
 *
4044
 * Does the validation related extra step of the normalization of attribute
4045
 * values:
4046
 *
4047
 * If the declared value is not CDATA, then the XML processor must further
4048
 * process the normalized attribute value by discarding any leading and
4049
 * trailing space (#x20) characters, and by replacing sequences of space
4050
 * (#x20) characters by single space (#x20) character.
4051
 *
4052
 * Also  check VC: Standalone Document Declaration in P32, and update
4053
 *  ctxt->valid accordingly
4054
 *
4055
 * returns a new normalized string if normalization is needed, NULL otherwise
4056
 *      the caller must free the returned value.
4057
 */
4058
4059
xmlChar *
4060
xmlValidCtxtNormalizeAttributeValue(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
4061
6.88M
       xmlNodePtr elem, const xmlChar *name, const xmlChar *value) {
4062
6.88M
    xmlChar *ret;
4063
6.88M
    xmlAttributePtr attrDecl = NULL;
4064
6.88M
    int extsubset = 0;
4065
4066
6.88M
    if (doc == NULL) return(NULL);
4067
6.88M
    if (elem == NULL) return(NULL);
4068
6.88M
    if (name == NULL) return(NULL);
4069
6.88M
    if (value == NULL) return(NULL);
4070
4071
6.88M
    if ((elem->ns != NULL) && (elem->ns->prefix != NULL)) {
4072
216k
  xmlChar fn[50];
4073
216k
  xmlChar *fullname;
4074
4075
216k
  fullname = xmlBuildQName(elem->name, elem->ns->prefix, fn, 50);
4076
216k
  if (fullname == NULL)
4077
0
      return(NULL);
4078
216k
  attrDecl = xmlGetDtdAttrDesc(doc->intSubset, fullname, name);
4079
216k
  if ((attrDecl == NULL) && (doc->extSubset != NULL)) {
4080
17.5k
      attrDecl = xmlGetDtdAttrDesc(doc->extSubset, fullname, name);
4081
17.5k
      if (attrDecl != NULL)
4082
0
    extsubset = 1;
4083
17.5k
  }
4084
216k
  if ((fullname != fn) && (fullname != elem->name))
4085
8.19k
      xmlFree(fullname);
4086
216k
    }
4087
6.88M
    if ((attrDecl == NULL) && (doc->intSubset != NULL))
4088
3.02M
  attrDecl = xmlGetDtdAttrDesc(doc->intSubset, elem->name, name);
4089
6.88M
    if ((attrDecl == NULL) && (doc->extSubset != NULL)) {
4090
1.38M
  attrDecl = xmlGetDtdAttrDesc(doc->extSubset, elem->name, name);
4091
1.38M
  if (attrDecl != NULL)
4092
1.09M
      extsubset = 1;
4093
1.38M
    }
4094
4095
6.88M
    if (attrDecl == NULL)
4096
5.55M
  return(NULL);
4097
1.32M
    if (attrDecl->atype == XML_ATTRIBUTE_CDATA)
4098
527k
  return(NULL);
4099
4100
800k
    ret = xmlStrdup(value);
4101
800k
    if (ret == NULL)
4102
0
  return(NULL);
4103
800k
    xmlValidNormalizeString(ret);
4104
800k
    if ((doc->standalone) && (extsubset == 1) && (!xmlStrEqual(value, ret))) {
4105
1.01k
  xmlErrValidNode(ctxt, elem, XML_DTD_NOT_STANDALONE,
4106
1.01k
"standalone: %s on %s value had to be normalized based on external subset declaration\n",
4107
1.01k
         name, elem->name, NULL);
4108
1.01k
  ctxt->valid = 0;
4109
1.01k
    }
4110
800k
    return(ret);
4111
800k
}
4112
4113
/**
4114
 * xmlValidNormalizeAttributeValue:
4115
 * @doc:  the document
4116
 * @elem:  the parent
4117
 * @name:  the attribute name
4118
 * @value:  the attribute value
4119
 *
4120
 * Does the validation related extra step of the normalization of attribute
4121
 * values:
4122
 *
4123
 * If the declared value is not CDATA, then the XML processor must further
4124
 * process the normalized attribute value by discarding any leading and
4125
 * trailing space (#x20) characters, and by replacing sequences of space
4126
 * (#x20) characters by single space (#x20) character.
4127
 *
4128
 * Returns a new normalized string if normalization is needed, NULL otherwise
4129
 *      the caller must free the returned value.
4130
 */
4131
4132
xmlChar *
4133
xmlValidNormalizeAttributeValue(xmlDocPtr doc, xmlNodePtr elem,
4134
303k
              const xmlChar *name, const xmlChar *value) {
4135
303k
    xmlChar *ret;
4136
303k
    xmlAttributePtr attrDecl = NULL;
4137
4138
303k
    if (doc == NULL) return(NULL);
4139
303k
    if (elem == NULL) return(NULL);
4140
303k
    if (name == NULL) return(NULL);
4141
303k
    if (value == NULL) return(NULL);
4142
4143
303k
    if ((elem->ns != NULL) && (elem->ns->prefix != NULL)) {
4144
61.6k
  xmlChar fn[50];
4145
61.6k
  xmlChar *fullname;
4146
4147
61.6k
  fullname = xmlBuildQName(elem->name, elem->ns->prefix, fn, 50);
4148
61.6k
  if (fullname == NULL)
4149
0
      return(NULL);
4150
61.6k
  if ((fullname != fn) && (fullname != elem->name))
4151
2.13k
      xmlFree(fullname);
4152
61.6k
    }
4153
303k
    attrDecl = xmlGetDtdAttrDesc(doc->intSubset, elem->name, name);
4154
303k
    if ((attrDecl == NULL) && (doc->extSubset != NULL))
4155
108k
  attrDecl = xmlGetDtdAttrDesc(doc->extSubset, elem->name, name);
4156
4157
303k
    if (attrDecl == NULL)
4158
213k
  return(NULL);
4159
89.7k
    if (attrDecl->atype == XML_ATTRIBUTE_CDATA)
4160
24.1k
  return(NULL);
4161
4162
65.5k
    ret = xmlStrdup(value);
4163
65.5k
    if (ret == NULL)
4164
0
  return(NULL);
4165
65.5k
    xmlValidNormalizeString(ret);
4166
65.5k
    return(ret);
4167
65.5k
}
4168
4169
static void
4170
xmlValidateAttributeIdCallback(void *payload, void *data,
4171
3.03k
                         const xmlChar *name ATTRIBUTE_UNUSED) {
4172
3.03k
    xmlAttributePtr attr = (xmlAttributePtr) payload;
4173
3.03k
    int *count = (int *) data;
4174
3.03k
    if (attr->atype == XML_ATTRIBUTE_ID) (*count)++;
4175
3.03k
}
4176
4177
/**
4178
 * xmlValidateAttributeDecl:
4179
 * @ctxt:  the validation context
4180
 * @doc:  a document instance
4181
 * @attr:  an attribute definition
4182
 *
4183
 * Try to validate a single attribute definition
4184
 * basically it does the following checks as described by the
4185
 * XML-1.0 recommendation:
4186
 *  - [ VC: Attribute Default Legal ]
4187
 *  - [ VC: Enumeration ]
4188
 *  - [ VC: ID Attribute Default ]
4189
 *
4190
 * The ID/IDREF uniqueness and matching are done separately
4191
 *
4192
 * returns 1 if valid or 0 otherwise
4193
 */
4194
4195
int
4196
xmlValidateAttributeDecl(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
4197
4.43M
                         xmlAttributePtr attr) {
4198
4.43M
    int ret = 1;
4199
4.43M
    int val;
4200
4.43M
    CHECK_DTD;
4201
4.43M
    if(attr == NULL) return(1);
4202
4203
    /* Attribute Default Legal */
4204
    /* Enumeration */
4205
4.43M
    if (attr->defaultValue != NULL) {
4206
378k
  val = xmlValidateAttributeValueInternal(doc, attr->atype,
4207
378k
                                          attr->defaultValue);
4208
378k
  if (val == 0) {
4209
0
      xmlErrValidNode(ctxt, (xmlNodePtr) attr, XML_DTD_ATTRIBUTE_DEFAULT,
4210
0
         "Syntax of default value for attribute %s of %s is not valid\n",
4211
0
             attr->name, attr->elem, NULL);
4212
0
  }
4213
378k
        ret &= val;
4214
378k
    }
4215
4216
    /* ID Attribute Default */
4217
4.43M
    if ((attr->atype == XML_ATTRIBUTE_ID)&&
4218
4.43M
        (attr->def != XML_ATTRIBUTE_IMPLIED) &&
4219
4.43M
  (attr->def != XML_ATTRIBUTE_REQUIRED)) {
4220
9.13k
  xmlErrValidNode(ctxt, (xmlNodePtr) attr, XML_DTD_ID_FIXED,
4221
9.13k
          "ID attribute %s of %s is not valid must be #IMPLIED or #REQUIRED\n",
4222
9.13k
         attr->name, attr->elem, NULL);
4223
9.13k
  ret = 0;
4224
9.13k
    }
4225
4226
    /* One ID per Element Type */
4227
4.43M
    if (attr->atype == XML_ATTRIBUTE_ID) {
4228
1.19M
        int nbId;
4229
4230
  /* the trick is that we parse DtD as their own internal subset */
4231
1.19M
        xmlElementPtr elem = xmlGetDtdElementDesc(doc->intSubset,
4232
1.19M
                                            attr->elem);
4233
1.19M
  if (elem != NULL) {
4234
590k
      nbId = xmlScanIDAttributeDecl(NULL, elem, 0);
4235
605k
  } else {
4236
605k
      xmlAttributeTablePtr table;
4237
4238
      /*
4239
       * The attribute may be declared in the internal subset and the
4240
       * element in the external subset.
4241
       */
4242
605k
      nbId = 0;
4243
605k
      if (doc->intSubset != NULL) {
4244
605k
    table = (xmlAttributeTablePtr) doc->intSubset->attributes;
4245
605k
    xmlHashScan3(table, NULL, NULL, attr->elem,
4246
605k
           xmlValidateAttributeIdCallback, &nbId);
4247
605k
      }
4248
605k
  }
4249
1.19M
  if (nbId > 1) {
4250
4251
5.14k
      xmlErrValidNodeNr(ctxt, (xmlNodePtr) attr, XML_DTD_ID_SUBSET,
4252
5.14k
       "Element %s has %d ID attribute defined in the internal subset : %s\n",
4253
5.14k
       attr->elem, nbId, attr->name);
4254
1.19M
  } else if (doc->extSubset != NULL) {
4255
605k
      int extId = 0;
4256
605k
      elem = xmlGetDtdElementDesc(doc->extSubset, attr->elem);
4257
605k
      if (elem != NULL) {
4258
605k
    extId = xmlScanIDAttributeDecl(NULL, elem, 0);
4259
605k
      }
4260
605k
      if (extId > 1) {
4261
1.94k
    xmlErrValidNodeNr(ctxt, (xmlNodePtr) attr, XML_DTD_ID_SUBSET,
4262
1.94k
       "Element %s has %d ID attribute defined in the external subset : %s\n",
4263
1.94k
           attr->elem, extId, attr->name);
4264
603k
      } else if (extId + nbId > 1) {
4265
257
    xmlErrValidNode(ctxt, (xmlNodePtr) attr, XML_DTD_ID_SUBSET,
4266
257
"Element %s has ID attributes defined in the internal and external subset : %s\n",
4267
257
           attr->elem, attr->name, NULL);
4268
257
      }
4269
605k
  }
4270
1.19M
    }
4271
4272
    /* Validity Constraint: Enumeration */
4273
4.43M
    if ((attr->defaultValue != NULL) && (attr->tree != NULL)) {
4274
56.3k
        xmlEnumerationPtr tree = attr->tree;
4275
110k
  while (tree != NULL) {
4276
91.0k
      if (xmlStrEqual(tree->name, attr->defaultValue)) break;
4277
54.2k
      tree = tree->next;
4278
54.2k
  }
4279
56.3k
  if (tree == NULL) {
4280
19.5k
      xmlErrValidNode(ctxt, (xmlNodePtr) attr, XML_DTD_ATTRIBUTE_VALUE,
4281
19.5k
"Default value \"%s\" for attribute %s of %s is not among the enumerated set\n",
4282
19.5k
       attr->defaultValue, attr->name, attr->elem);
4283
19.5k
      ret = 0;
4284
19.5k
  }
4285
56.3k
    }
4286
4287
4.43M
    return(ret);
4288
4.43M
}
4289
4290
/**
4291
 * xmlValidateElementDecl:
4292
 * @ctxt:  the validation context
4293
 * @doc:  a document instance
4294
 * @elem:  an element definition
4295
 *
4296
 * Try to validate a single element definition
4297
 * basically it does the following checks as described by the
4298
 * XML-1.0 recommendation:
4299
 *  - [ VC: One ID per Element Type ]
4300
 *  - [ VC: No Duplicate Types ]
4301
 *  - [ VC: Unique Element Type Declaration ]
4302
 *
4303
 * returns 1 if valid or 0 otherwise
4304
 */
4305
4306
int
4307
xmlValidateElementDecl(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
4308
1.75M
                       xmlElementPtr elem) {
4309
1.75M
    int ret = 1;
4310
1.75M
    xmlElementPtr tst;
4311
4312
1.75M
    CHECK_DTD;
4313
4314
1.75M
    if (elem == NULL) return(1);
4315
4316
#if 0
4317
#ifdef LIBXML_REGEXP_ENABLED
4318
    /* Build the regexp associated to the content model */
4319
    ret = xmlValidBuildContentModel(ctxt, elem);
4320
#endif
4321
#endif
4322
4323
    /* No Duplicate Types */
4324
1.74M
    if (elem->etype == XML_ELEMENT_TYPE_MIXED) {
4325
713k
  xmlElementContentPtr cur, next;
4326
713k
        const xmlChar *name;
4327
4328
713k
  cur = elem->content;
4329
3.77M
  while (cur != NULL) {
4330
3.77M
      if (cur->type != XML_ELEMENT_CONTENT_OR) break;
4331
3.06M
      if (cur->c1 == NULL) break;
4332
3.06M
      if (cur->c1->type == XML_ELEMENT_CONTENT_ELEMENT) {
4333
2.76M
    name = cur->c1->name;
4334
2.76M
    next = cur->c2;
4335
27.6M
    while (next != NULL) {
4336
27.6M
        if (next->type == XML_ELEMENT_CONTENT_ELEMENT) {
4337
2.76M
            if ((xmlStrEqual(next->name, name)) &&
4338
2.76M
          (xmlStrEqual(next->prefix, cur->c1->prefix))) {
4339
7.40k
          if (cur->c1->prefix == NULL) {
4340
2.95k
        xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_CONTENT_ERROR,
4341
2.95k
       "Definition of %s has duplicate references of %s\n",
4342
2.95k
               elem->name, name, NULL);
4343
4.45k
          } else {
4344
4.45k
        xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_CONTENT_ERROR,
4345
4.45k
       "Definition of %s has duplicate references of %s:%s\n",
4346
4.45k
               elem->name, cur->c1->prefix, name);
4347
4.45k
          }
4348
7.40k
          ret = 0;
4349
7.40k
      }
4350
2.76M
      break;
4351
2.76M
        }
4352
24.9M
        if (next->c1 == NULL) break;
4353
24.9M
        if (next->c1->type != XML_ELEMENT_CONTENT_ELEMENT) break;
4354
24.9M
        if ((xmlStrEqual(next->c1->name, name)) &&
4355
24.9M
            (xmlStrEqual(next->c1->prefix, cur->c1->prefix))) {
4356
148k
      if (cur->c1->prefix == NULL) {
4357
50.3k
          xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_CONTENT_ERROR,
4358
50.3k
         "Definition of %s has duplicate references to %s\n",
4359
50.3k
           elem->name, name, NULL);
4360
98.1k
      } else {
4361
98.1k
          xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_CONTENT_ERROR,
4362
98.1k
         "Definition of %s has duplicate references to %s:%s\n",
4363
98.1k
           elem->name, cur->c1->prefix, name);
4364
98.1k
      }
4365
148k
      ret = 0;
4366
148k
        }
4367
24.9M
        next = next->c2;
4368
24.9M
    }
4369
2.76M
      }
4370
3.06M
      cur = cur->c2;
4371
3.06M
  }
4372
713k
    }
4373
4374
    /* VC: Unique Element Type Declaration */
4375
1.74M
    tst = xmlGetDtdElementDesc(doc->intSubset, elem->name);
4376
1.74M
    if ((tst != NULL ) && (tst != elem) &&
4377
1.74M
  ((tst->prefix == elem->prefix) ||
4378
4.26k
   (xmlStrEqual(tst->prefix, elem->prefix))) &&
4379
1.74M
  (tst->etype != XML_ELEMENT_TYPE_UNDEFINED)) {
4380
3.53k
  xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_ELEM_REDEFINED,
4381
3.53k
                  "Redefinition of element %s\n",
4382
3.53k
           elem->name, NULL, NULL);
4383
3.53k
  ret = 0;
4384
3.53k
    }
4385
1.74M
    tst = xmlGetDtdElementDesc(doc->extSubset, elem->name);
4386
1.74M
    if ((tst != NULL ) && (tst != elem) &&
4387
1.74M
  ((tst->prefix == elem->prefix) ||
4388
323
   (xmlStrEqual(tst->prefix, elem->prefix))) &&
4389
1.74M
  (tst->etype != XML_ELEMENT_TYPE_UNDEFINED)) {
4390
0
  xmlErrValidNode(ctxt, (xmlNodePtr) elem, XML_DTD_ELEM_REDEFINED,
4391
0
                  "Redefinition of element %s\n",
4392
0
           elem->name, NULL, NULL);
4393
0
  ret = 0;
4394
0
    }
4395
    /* One ID per Element Type
4396
     * already done when registering the attribute
4397
    if (xmlScanIDAttributeDecl(ctxt, elem) > 1) {
4398
  ret = 0;
4399
    } */
4400
1.74M
    return(ret);
4401
1.75M
}
4402
4403
/**
4404
 * xmlValidateOneAttribute:
4405
 * @ctxt:  the validation context
4406
 * @doc:  a document instance
4407
 * @elem:  an element instance
4408
 * @attr:  an attribute instance
4409
 * @value:  the attribute value (without entities processing)
4410
 *
4411
 * Try to validate a single attribute for an element
4412
 * basically it does the following checks as described by the
4413
 * XML-1.0 recommendation:
4414
 *  - [ VC: Attribute Value Type ]
4415
 *  - [ VC: Fixed Attribute Default ]
4416
 *  - [ VC: Entity Name ]
4417
 *  - [ VC: Name Token ]
4418
 *  - [ VC: ID ]
4419
 *  - [ VC: IDREF ]
4420
 *  - [ VC: Entity Name ]
4421
 *  - [ VC: Notation Attributes ]
4422
 *
4423
 * The ID/IDREF uniqueness and matching are done separately
4424
 *
4425
 * returns 1 if valid or 0 otherwise
4426
 */
4427
4428
int
4429
xmlValidateOneAttribute(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
4430
                        xmlNodePtr elem, xmlAttrPtr attr, const xmlChar *value)
4431
2.13M
{
4432
2.13M
    xmlAttributePtr attrDecl =  NULL;
4433
2.13M
    int val;
4434
2.13M
    int ret = 1;
4435
4436
2.13M
    CHECK_DTD;
4437
2.13M
    if ((elem == NULL) || (elem->name == NULL)) return(0);
4438
2.13M
    if ((attr == NULL) || (attr->name == NULL)) return(0);
4439
4440
2.13M
    if ((elem->ns != NULL) && (elem->ns->prefix != NULL)) {
4441
175k
  xmlChar fn[50];
4442
175k
  xmlChar *fullname;
4443
4444
175k
  fullname = xmlBuildQName(elem->name, elem->ns->prefix, fn, 50);
4445
175k
  if (fullname == NULL)
4446
0
      return(0);
4447
175k
  if (attr->ns != NULL) {
4448
162k
      attrDecl = xmlGetDtdQAttrDesc(doc->intSubset, fullname,
4449
162k
                              attr->name, attr->ns->prefix);
4450
162k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4451
4.33k
    attrDecl = xmlGetDtdQAttrDesc(doc->extSubset, fullname,
4452
4.33k
                attr->name, attr->ns->prefix);
4453
162k
  } else {
4454
13.2k
      attrDecl = xmlGetDtdAttrDesc(doc->intSubset, fullname, attr->name);
4455
13.2k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4456
3.64k
    attrDecl = xmlGetDtdAttrDesc(doc->extSubset,
4457
3.64k
               fullname, attr->name);
4458
13.2k
  }
4459
175k
  if ((fullname != fn) && (fullname != elem->name))
4460
3.54k
      xmlFree(fullname);
4461
175k
    }
4462
2.13M
    if (attrDecl == NULL) {
4463
1.99M
  if (attr->ns != NULL) {
4464
56.4k
      attrDecl = xmlGetDtdQAttrDesc(doc->intSubset, elem->name,
4465
56.4k
                              attr->name, attr->ns->prefix);
4466
56.4k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4467
31.3k
    attrDecl = xmlGetDtdQAttrDesc(doc->extSubset, elem->name,
4468
31.3k
                attr->name, attr->ns->prefix);
4469
1.93M
  } else {
4470
1.93M
      attrDecl = xmlGetDtdAttrDesc(doc->intSubset,
4471
1.93M
                             elem->name, attr->name);
4472
1.93M
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4473
1.15M
    attrDecl = xmlGetDtdAttrDesc(doc->extSubset,
4474
1.15M
               elem->name, attr->name);
4475
1.93M
  }
4476
1.99M
    }
4477
4478
4479
    /* Validity Constraint: Attribute Value Type */
4480
2.13M
    if (attrDecl == NULL) {
4481
816k
  xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_ATTRIBUTE,
4482
816k
         "No declaration for attribute %s of element %s\n",
4483
816k
         attr->name, elem->name, NULL);
4484
816k
  return(0);
4485
816k
    }
4486
1.32M
    attr->atype = attrDecl->atype;
4487
4488
1.32M
    val = xmlValidateAttributeValueInternal(doc, attrDecl->atype, value);
4489
1.32M
    if (val == 0) {
4490
48.8k
      xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_VALUE,
4491
48.8k
     "Syntax of value for attribute %s of %s is not valid\n",
4492
48.8k
         attr->name, elem->name, NULL);
4493
48.8k
        ret = 0;
4494
48.8k
    }
4495
4496
    /* Validity constraint: Fixed Attribute Default */
4497
1.32M
    if (attrDecl->def == XML_ATTRIBUTE_FIXED) {
4498
139k
  if (!xmlStrEqual(value, attrDecl->defaultValue)) {
4499
5.99k
      xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_DEFAULT,
4500
5.99k
     "Value for attribute %s of %s is different from default \"%s\"\n",
4501
5.99k
       attr->name, elem->name, attrDecl->defaultValue);
4502
5.99k
      ret = 0;
4503
5.99k
  }
4504
139k
    }
4505
4506
    /* Validity Constraint: ID uniqueness */
4507
1.32M
    if (attrDecl->atype == XML_ATTRIBUTE_ID) {
4508
241k
        if (xmlAddID(ctxt, doc, value, attr) == NULL)
4509
5.54k
      ret = 0;
4510
241k
    }
4511
4512
1.32M
    if ((attrDecl->atype == XML_ATTRIBUTE_IDREF) ||
4513
1.32M
  (attrDecl->atype == XML_ATTRIBUTE_IDREFS)) {
4514
548k
        if (xmlAddRef(ctxt, doc, value, attr) == NULL)
4515
0
      ret = 0;
4516
548k
    }
4517
4518
    /* Validity Constraint: Notation Attributes */
4519
1.32M
    if (attrDecl->atype == XML_ATTRIBUTE_NOTATION) {
4520
3.89k
        xmlEnumerationPtr tree = attrDecl->tree;
4521
3.89k
        xmlNotationPtr nota;
4522
4523
        /* First check that the given NOTATION was declared */
4524
3.89k
  nota = xmlGetDtdNotationDesc(doc->intSubset, value);
4525
3.89k
  if (nota == NULL)
4526
3.89k
      nota = xmlGetDtdNotationDesc(doc->extSubset, value);
4527
4528
3.89k
  if (nota == NULL) {
4529
3.89k
      xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_NOTATION,
4530
3.89k
       "Value \"%s\" for attribute %s of %s is not a declared Notation\n",
4531
3.89k
       value, attr->name, elem->name);
4532
3.89k
      ret = 0;
4533
3.89k
        }
4534
4535
  /* Second, verify that it's among the list */
4536
9.68k
  while (tree != NULL) {
4537
6.11k
      if (xmlStrEqual(tree->name, value)) break;
4538
5.79k
      tree = tree->next;
4539
5.79k
  }
4540
3.89k
  if (tree == NULL) {
4541
3.57k
      xmlErrValidNode(ctxt, elem, XML_DTD_NOTATION_VALUE,
4542
3.57k
"Value \"%s\" for attribute %s of %s is not among the enumerated notations\n",
4543
3.57k
       value, attr->name, elem->name);
4544
3.57k
      ret = 0;
4545
3.57k
  }
4546
3.89k
    }
4547
4548
    /* Validity Constraint: Enumeration */
4549
1.32M
    if (attrDecl->atype == XML_ATTRIBUTE_ENUMERATION) {
4550
39.2k
        xmlEnumerationPtr tree = attrDecl->tree;
4551
74.3k
  while (tree != NULL) {
4552
62.3k
      if (xmlStrEqual(tree->name, value)) break;
4553
35.0k
      tree = tree->next;
4554
35.0k
  }
4555
39.2k
  if (tree == NULL) {
4556
11.9k
      xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_VALUE,
4557
11.9k
       "Value \"%s\" for attribute %s of %s is not among the enumerated set\n",
4558
11.9k
       value, attr->name, elem->name);
4559
11.9k
      ret = 0;
4560
11.9k
  }
4561
39.2k
    }
4562
4563
    /* Fixed Attribute Default */
4564
1.32M
    if ((attrDecl->def == XML_ATTRIBUTE_FIXED) &&
4565
1.32M
        (!xmlStrEqual(attrDecl->defaultValue, value))) {
4566
5.99k
  xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_VALUE,
4567
5.99k
     "Value for attribute %s of %s must be \"%s\"\n",
4568
5.99k
         attr->name, elem->name, attrDecl->defaultValue);
4569
5.99k
        ret = 0;
4570
5.99k
    }
4571
4572
    /* Extra check for the attribute value */
4573
1.32M
    ret &= xmlValidateAttributeValue2(ctxt, doc, attr->name,
4574
1.32M
              attrDecl->atype, value);
4575
4576
1.32M
    return(ret);
4577
2.13M
}
4578
4579
/**
4580
 * xmlValidateOneNamespace:
4581
 * @ctxt:  the validation context
4582
 * @doc:  a document instance
4583
 * @elem:  an element instance
4584
 * @prefix:  the namespace prefix
4585
 * @ns:  an namespace declaration instance
4586
 * @value:  the attribute value (without entities processing)
4587
 *
4588
 * Try to validate a single namespace declaration for an element
4589
 * basically it does the following checks as described by the
4590
 * XML-1.0 recommendation:
4591
 *  - [ VC: Attribute Value Type ]
4592
 *  - [ VC: Fixed Attribute Default ]
4593
 *  - [ VC: Entity Name ]
4594
 *  - [ VC: Name Token ]
4595
 *  - [ VC: ID ]
4596
 *  - [ VC: IDREF ]
4597
 *  - [ VC: Entity Name ]
4598
 *  - [ VC: Notation Attributes ]
4599
 *
4600
 * The ID/IDREF uniqueness and matching are done separately
4601
 *
4602
 * returns 1 if valid or 0 otherwise
4603
 */
4604
4605
int
4606
xmlValidateOneNamespace(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
4607
137k
xmlNodePtr elem, const xmlChar *prefix, xmlNsPtr ns, const xmlChar *value) {
4608
    /* xmlElementPtr elemDecl; */
4609
137k
    xmlAttributePtr attrDecl =  NULL;
4610
137k
    int val;
4611
137k
    int ret = 1;
4612
4613
137k
    CHECK_DTD;
4614
137k
    if ((elem == NULL) || (elem->name == NULL)) return(0);
4615
137k
    if ((ns == NULL) || (ns->href == NULL)) return(0);
4616
4617
131k
    if (prefix != NULL) {
4618
81.7k
  xmlChar fn[50];
4619
81.7k
  xmlChar *fullname;
4620
4621
81.7k
  fullname = xmlBuildQName(elem->name, prefix, fn, 50);
4622
81.7k
  if (fullname == NULL) {
4623
0
      xmlVErrMemory(ctxt, "Validating namespace");
4624
0
      return(0);
4625
0
  }
4626
81.7k
  if (ns->prefix != NULL) {
4627
73.2k
      attrDecl = xmlGetDtdQAttrDesc(doc->intSubset, fullname,
4628
73.2k
                              ns->prefix, BAD_CAST "xmlns");
4629
73.2k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4630
11.4k
    attrDecl = xmlGetDtdQAttrDesc(doc->extSubset, fullname,
4631
11.4k
            ns->prefix, BAD_CAST "xmlns");
4632
73.2k
  } else {
4633
8.46k
      attrDecl = xmlGetDtdAttrDesc(doc->intSubset, fullname,
4634
8.46k
                             BAD_CAST "xmlns");
4635
8.46k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4636
2.92k
    attrDecl = xmlGetDtdAttrDesc(doc->extSubset, fullname,
4637
2.92k
                       BAD_CAST "xmlns");
4638
8.46k
  }
4639
81.7k
  if ((fullname != fn) && (fullname != elem->name))
4640
6.72k
      xmlFree(fullname);
4641
81.7k
    }
4642
131k
    if (attrDecl == NULL) {
4643
114k
  if (ns->prefix != NULL) {
4644
88.0k
      attrDecl = xmlGetDtdQAttrDesc(doc->intSubset, elem->name,
4645
88.0k
                              ns->prefix, BAD_CAST "xmlns");
4646
88.0k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4647
34.4k
    attrDecl = xmlGetDtdQAttrDesc(doc->extSubset, elem->name,
4648
34.4k
                ns->prefix, BAD_CAST "xmlns");
4649
88.0k
  } else {
4650
26.6k
      attrDecl = xmlGetDtdAttrDesc(doc->intSubset,
4651
26.6k
                             elem->name, BAD_CAST "xmlns");
4652
26.6k
      if ((attrDecl == NULL) && (doc->extSubset != NULL))
4653
8.28k
    attrDecl = xmlGetDtdAttrDesc(doc->extSubset,
4654
8.28k
               elem->name, BAD_CAST "xmlns");
4655
26.6k
  }
4656
114k
    }
4657
4658
4659
    /* Validity Constraint: Attribute Value Type */
4660
131k
    if (attrDecl == NULL) {
4661
77.2k
  if (ns->prefix != NULL) {
4662
61.4k
      xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_ATTRIBUTE,
4663
61.4k
       "No declaration for attribute xmlns:%s of element %s\n",
4664
61.4k
       ns->prefix, elem->name, NULL);
4665
61.4k
  } else {
4666
15.7k
      xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_ATTRIBUTE,
4667
15.7k
       "No declaration for attribute xmlns of element %s\n",
4668
15.7k
       elem->name, NULL, NULL);
4669
15.7k
  }
4670
77.2k
  return(0);
4671
77.2k
    }
4672
4673
54.0k
    val = xmlValidateAttributeValueInternal(doc, attrDecl->atype, value);
4674
54.0k
    if (val == 0) {
4675
3.49k
  if (ns->prefix != NULL) {
4676
3.09k
      xmlErrValidNode(ctxt, elem, XML_DTD_INVALID_DEFAULT,
4677
3.09k
         "Syntax of value for attribute xmlns:%s of %s is not valid\n",
4678
3.09k
       ns->prefix, elem->name, NULL);
4679
3.09k
  } else {
4680
405
      xmlErrValidNode(ctxt, elem, XML_DTD_INVALID_DEFAULT,
4681
405
         "Syntax of value for attribute xmlns of %s is not valid\n",
4682
405
       elem->name, NULL, NULL);
4683
405
  }
4684
3.49k
        ret = 0;
4685
3.49k
    }
4686
4687
    /* Validity constraint: Fixed Attribute Default */
4688
54.0k
    if (attrDecl->def == XML_ATTRIBUTE_FIXED) {
4689
44.9k
  if (!xmlStrEqual(value, attrDecl->defaultValue)) {
4690
4.24k
      if (ns->prefix != NULL) {
4691
2.23k
    xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_DEFAULT,
4692
2.23k
       "Value for attribute xmlns:%s of %s is different from default \"%s\"\n",
4693
2.23k
           ns->prefix, elem->name, attrDecl->defaultValue);
4694
2.23k
      } else {
4695
2.00k
    xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_DEFAULT,
4696
2.00k
       "Value for attribute xmlns of %s is different from default \"%s\"\n",
4697
2.00k
           elem->name, attrDecl->defaultValue, NULL);
4698
2.00k
      }
4699
4.24k
      ret = 0;
4700
4.24k
  }
4701
44.9k
    }
4702
4703
    /*
4704
     * Casting ns to xmlAttrPtr is wrong. We'd need separate functions
4705
     * xmlAddID and xmlAddRef for namespace declarations, but it makes
4706
     * no practical sense to use ID types anyway.
4707
     */
4708
#if 0
4709
    /* Validity Constraint: ID uniqueness */
4710
    if (attrDecl->atype == XML_ATTRIBUTE_ID) {
4711
        if (xmlAddID(ctxt, doc, value, (xmlAttrPtr) ns) == NULL)
4712
      ret = 0;
4713
    }
4714
4715
    if ((attrDecl->atype == XML_ATTRIBUTE_IDREF) ||
4716
  (attrDecl->atype == XML_ATTRIBUTE_IDREFS)) {
4717
        if (xmlAddRef(ctxt, doc, value, (xmlAttrPtr) ns) == NULL)
4718
      ret = 0;
4719
    }
4720
#endif
4721
4722
    /* Validity Constraint: Notation Attributes */
4723
54.0k
    if (attrDecl->atype == XML_ATTRIBUTE_NOTATION) {
4724
3.21k
        xmlEnumerationPtr tree = attrDecl->tree;
4725
3.21k
        xmlNotationPtr nota;
4726
4727
        /* First check that the given NOTATION was declared */
4728
3.21k
  nota = xmlGetDtdNotationDesc(doc->intSubset, value);
4729
3.21k
  if (nota == NULL)
4730
3.21k
      nota = xmlGetDtdNotationDesc(doc->extSubset, value);
4731
4732
3.21k
  if (nota == NULL) {
4733
3.21k
      if (ns->prefix != NULL) {
4734
1.10k
    xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_NOTATION,
4735
1.10k
       "Value \"%s\" for attribute xmlns:%s of %s is not a declared Notation\n",
4736
1.10k
           value, ns->prefix, elem->name);
4737
2.10k
      } else {
4738
2.10k
    xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_NOTATION,
4739
2.10k
       "Value \"%s\" for attribute xmlns of %s is not a declared Notation\n",
4740
2.10k
           value, elem->name, NULL);
4741
2.10k
      }
4742
3.21k
      ret = 0;
4743
3.21k
        }
4744
4745
  /* Second, verify that it's among the list */
4746
11.3k
  while (tree != NULL) {
4747
8.19k
      if (xmlStrEqual(tree->name, value)) break;
4748
8.17k
      tree = tree->next;
4749
8.17k
  }
4750
3.21k
  if (tree == NULL) {
4751
3.18k
      if (ns->prefix != NULL) {
4752
1.09k
    xmlErrValidNode(ctxt, elem, XML_DTD_NOTATION_VALUE,
4753
1.09k
"Value \"%s\" for attribute xmlns:%s of %s is not among the enumerated notations\n",
4754
1.09k
           value, ns->prefix, elem->name);
4755
2.09k
      } else {
4756
2.09k
    xmlErrValidNode(ctxt, elem, XML_DTD_NOTATION_VALUE,
4757
2.09k
"Value \"%s\" for attribute xmlns of %s is not among the enumerated notations\n",
4758
2.09k
           value, elem->name, NULL);
4759
2.09k
      }
4760
3.18k
      ret = 0;
4761
3.18k
  }
4762
3.21k
    }
4763
4764
    /* Validity Constraint: Enumeration */
4765
54.0k
    if (attrDecl->atype == XML_ATTRIBUTE_ENUMERATION) {
4766
6.69k
        xmlEnumerationPtr tree = attrDecl->tree;
4767
16.1k
  while (tree != NULL) {
4768
9.97k
      if (xmlStrEqual(tree->name, value)) break;
4769
9.49k
      tree = tree->next;
4770
9.49k
  }
4771
6.69k
  if (tree == NULL) {
4772
6.21k
      if (ns->prefix != NULL) {
4773
4.91k
    xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_VALUE,
4774
4.91k
"Value \"%s\" for attribute xmlns:%s of %s is not among the enumerated set\n",
4775
4.91k
           value, ns->prefix, elem->name);
4776
4.91k
      } else {
4777
1.30k
    xmlErrValidNode(ctxt, elem, XML_DTD_ATTRIBUTE_VALUE,
4778
1.30k
"Value \"%s\" for attribute xmlns of %s is not among the enumerated set\n",
4779
1.30k
           value, elem->name, NULL);
4780
1.30k
      }
4781
6.21k
      ret = 0;
4782
6.21k
  }
4783
6.69k
    }
4784
4785
    /* Fixed Attribute Default */
4786
54.0k
    if ((attrDecl->def == XML_ATTRIBUTE_FIXED) &&
4787
54.0k
        (!xmlStrEqual(attrDecl->defaultValue, value))) {
4788
4.24k
  if (ns->prefix != NULL) {
4789
2.23k
      xmlErrValidNode(ctxt, elem, XML_DTD_ELEM_NAMESPACE,
4790
2.23k
       "Value for attribute xmlns:%s of %s must be \"%s\"\n",
4791
2.23k
       ns->prefix, elem->name, attrDecl->defaultValue);
4792
2.23k
  } else {
4793
2.00k
      xmlErrValidNode(ctxt, elem, XML_DTD_ELEM_NAMESPACE,
4794
2.00k
       "Value for attribute xmlns of %s must be \"%s\"\n",
4795
2.00k
       elem->name, attrDecl->defaultValue, NULL);
4796
2.00k
  }
4797
4.24k
        ret = 0;
4798
4.24k
    }
4799
4800
    /* Extra check for the attribute value */
4801
54.0k
    if (ns->prefix != NULL) {
4802
42.3k
  ret &= xmlValidateAttributeValue2(ctxt, doc, ns->prefix,
4803
42.3k
            attrDecl->atype, value);
4804
42.3k
    } else {
4805
11.7k
  ret &= xmlValidateAttributeValue2(ctxt, doc, BAD_CAST "xmlns",
4806
11.7k
            attrDecl->atype, value);
4807
11.7k
    }
4808
4809
54.0k
    return(ret);
4810
131k
}
4811
4812
#ifndef  LIBXML_REGEXP_ENABLED
4813
/**
4814
 * xmlValidateSkipIgnorable:
4815
 * @ctxt:  the validation context
4816
 * @child:  the child list
4817
 *
4818
 * Skip ignorable elements w.r.t. the validation process
4819
 *
4820
 * returns the first element to consider for validation of the content model
4821
 */
4822
4823
static xmlNodePtr
4824
xmlValidateSkipIgnorable(xmlNodePtr child) {
4825
    while (child != NULL) {
4826
  switch (child->type) {
4827
      /* These things are ignored (skipped) during validation.  */
4828
      case XML_PI_NODE:
4829
      case XML_COMMENT_NODE:
4830
      case XML_XINCLUDE_START:
4831
      case XML_XINCLUDE_END:
4832
    child = child->next;
4833
    break;
4834
      case XML_TEXT_NODE:
4835
    if (xmlIsBlankNode(child))
4836
        child = child->next;
4837
    else
4838
        return(child);
4839
    break;
4840
      /* keep current node */
4841
      default:
4842
    return(child);
4843
  }
4844
    }
4845
    return(child);
4846
}
4847
4848
/**
4849
 * xmlValidateElementType:
4850
 * @ctxt:  the validation context
4851
 *
4852
 * Try to validate the content model of an element internal function
4853
 *
4854
 * returns 1 if valid or 0 ,-1 in case of error, -2 if an entity
4855
 *           reference is found and -3 if the validation succeeded but
4856
 *           the content model is not determinist.
4857
 */
4858
4859
static int
4860
xmlValidateElementType(xmlValidCtxtPtr ctxt) {
4861
    int ret = -1;
4862
    int determinist = 1;
4863
4864
    NODE = xmlValidateSkipIgnorable(NODE);
4865
    if ((NODE == NULL) && (CONT == NULL))
4866
  return(1);
4867
    if ((NODE == NULL) &&
4868
  ((CONT->ocur == XML_ELEMENT_CONTENT_MULT) ||
4869
   (CONT->ocur == XML_ELEMENT_CONTENT_OPT))) {
4870
  return(1);
4871
    }
4872
    if (CONT == NULL) return(-1);
4873
    if ((NODE != NULL) && (NODE->type == XML_ENTITY_REF_NODE))
4874
  return(-2);
4875
4876
    /*
4877
     * We arrive here when more states need to be examined
4878
     */
4879
cont:
4880
4881
    /*
4882
     * We just recovered from a rollback generated by a possible
4883
     * epsilon transition, go directly to the analysis phase
4884
     */
4885
    if (STATE == ROLLBACK_PARENT) {
4886
  DEBUG_VALID_MSG("restored parent branch");
4887
  DEBUG_VALID_STATE(NODE, CONT)
4888
  ret = 1;
4889
  goto analyze;
4890
    }
4891
4892
    DEBUG_VALID_STATE(NODE, CONT)
4893
    /*
4894
     * we may have to save a backup state here. This is the equivalent
4895
     * of handling epsilon transition in NFAs.
4896
     */
4897
    if ((CONT != NULL) &&
4898
  ((CONT->parent == NULL) ||
4899
   (CONT->parent == (xmlElementContentPtr) 1) ||
4900
   (CONT->parent->type != XML_ELEMENT_CONTENT_OR)) &&
4901
  ((CONT->ocur == XML_ELEMENT_CONTENT_MULT) ||
4902
   (CONT->ocur == XML_ELEMENT_CONTENT_OPT) ||
4903
   ((CONT->ocur == XML_ELEMENT_CONTENT_PLUS) && (OCCURRENCE)))) {
4904
  DEBUG_VALID_MSG("saving parent branch");
4905
  if (vstateVPush(ctxt, CONT, NODE, DEPTH, OCCURS, ROLLBACK_PARENT) < 0)
4906
      return(0);
4907
    }
4908
4909
4910
    /*
4911
     * Check first if the content matches
4912
     */
4913
    switch (CONT->type) {
4914
  case XML_ELEMENT_CONTENT_PCDATA:
4915
      if (NODE == NULL) {
4916
    DEBUG_VALID_MSG("pcdata failed no node");
4917
    ret = 0;
4918
    break;
4919
      }
4920
      if (NODE->type == XML_TEXT_NODE) {
4921
    DEBUG_VALID_MSG("pcdata found, skip to next");
4922
    /*
4923
     * go to next element in the content model
4924
     * skipping ignorable elems
4925
     */
4926
    do {
4927
        NODE = NODE->next;
4928
        NODE = xmlValidateSkipIgnorable(NODE);
4929
        if ((NODE != NULL) &&
4930
      (NODE->type == XML_ENTITY_REF_NODE))
4931
      return(-2);
4932
    } while ((NODE != NULL) &&
4933
       ((NODE->type != XML_ELEMENT_NODE) &&
4934
        (NODE->type != XML_TEXT_NODE) &&
4935
        (NODE->type != XML_CDATA_SECTION_NODE)));
4936
                ret = 1;
4937
    break;
4938
      } else {
4939
    DEBUG_VALID_MSG("pcdata failed");
4940
    ret = 0;
4941
    break;
4942
      }
4943
      break;
4944
  case XML_ELEMENT_CONTENT_ELEMENT:
4945
      if (NODE == NULL) {
4946
    DEBUG_VALID_MSG("element failed no node");
4947
    ret = 0;
4948
    break;
4949
      }
4950
      ret = ((NODE->type == XML_ELEMENT_NODE) &&
4951
       (xmlStrEqual(NODE->name, CONT->name)));
4952
      if (ret == 1) {
4953
    if ((NODE->ns == NULL) || (NODE->ns->prefix == NULL)) {
4954
        ret = (CONT->prefix == NULL);
4955
    } else if (CONT->prefix == NULL) {
4956
        ret = 0;
4957
    } else {
4958
        ret = xmlStrEqual(NODE->ns->prefix, CONT->prefix);
4959
    }
4960
      }
4961
      if (ret == 1) {
4962
    DEBUG_VALID_MSG("element found, skip to next");
4963
    /*
4964
     * go to next element in the content model
4965
     * skipping ignorable elems
4966
     */
4967
    do {
4968
        NODE = NODE->next;
4969
        NODE = xmlValidateSkipIgnorable(NODE);
4970
        if ((NODE != NULL) &&
4971
      (NODE->type == XML_ENTITY_REF_NODE))
4972
      return(-2);
4973
    } while ((NODE != NULL) &&
4974
       ((NODE->type != XML_ELEMENT_NODE) &&
4975
        (NODE->type != XML_TEXT_NODE) &&
4976
        (NODE->type != XML_CDATA_SECTION_NODE)));
4977
      } else {
4978
    DEBUG_VALID_MSG("element failed");
4979
    ret = 0;
4980
    break;
4981
      }
4982
      break;
4983
  case XML_ELEMENT_CONTENT_OR:
4984
      /*
4985
       * Small optimization.
4986
       */
4987
      if (CONT->c1->type == XML_ELEMENT_CONTENT_ELEMENT) {
4988
    if ((NODE == NULL) ||
4989
        (!xmlStrEqual(NODE->name, CONT->c1->name))) {
4990
        DEPTH++;
4991
        CONT = CONT->c2;
4992
        goto cont;
4993
    }
4994
    if ((NODE->ns == NULL) || (NODE->ns->prefix == NULL)) {
4995
        ret = (CONT->c1->prefix == NULL);
4996
    } else if (CONT->c1->prefix == NULL) {
4997
        ret = 0;
4998
    } else {
4999
        ret = xmlStrEqual(NODE->ns->prefix, CONT->c1->prefix);
5000
    }
5001
    if (ret == 0) {
5002
        DEPTH++;
5003
        CONT = CONT->c2;
5004
        goto cont;
5005
    }
5006
      }
5007
5008
      /*
5009
       * save the second branch 'or' branch
5010
       */
5011
      DEBUG_VALID_MSG("saving 'or' branch");
5012
      if (vstateVPush(ctxt, CONT->c2, NODE, DEPTH + 1,
5013
          OCCURS, ROLLBACK_OR) < 0)
5014
    return(-1);
5015
      DEPTH++;
5016
      CONT = CONT->c1;
5017
      goto cont;
5018
  case XML_ELEMENT_CONTENT_SEQ:
5019
      /*
5020
       * Small optimization.
5021
       */
5022
      if ((CONT->c1->type == XML_ELEMENT_CONTENT_ELEMENT) &&
5023
    ((CONT->c1->ocur == XML_ELEMENT_CONTENT_OPT) ||
5024
     (CONT->c1->ocur == XML_ELEMENT_CONTENT_MULT))) {
5025
    if ((NODE == NULL) ||
5026
        (!xmlStrEqual(NODE->name, CONT->c1->name))) {
5027
        DEPTH++;
5028
        CONT = CONT->c2;
5029
        goto cont;
5030
    }
5031
    if ((NODE->ns == NULL) || (NODE->ns->prefix == NULL)) {
5032
        ret = (CONT->c1->prefix == NULL);
5033
    } else if (CONT->c1->prefix == NULL) {
5034
        ret = 0;
5035
    } else {
5036
        ret = xmlStrEqual(NODE->ns->prefix, CONT->c1->prefix);
5037
    }
5038
    if (ret == 0) {
5039
        DEPTH++;
5040
        CONT = CONT->c2;
5041
        goto cont;
5042
    }
5043
      }
5044
      DEPTH++;
5045
      CONT = CONT->c1;
5046
      goto cont;
5047
    }
5048
5049
    /*
5050
     * At this point handle going up in the tree
5051
     */
5052
    if (ret == -1) {
5053
  DEBUG_VALID_MSG("error found returning");
5054
  return(ret);
5055
    }
5056
analyze:
5057
    while (CONT != NULL) {
5058
  /*
5059
   * First do the analysis depending on the occurrence model at
5060
   * this level.
5061
   */
5062
  if (ret == 0) {
5063
      switch (CONT->ocur) {
5064
    xmlNodePtr cur;
5065
5066
    case XML_ELEMENT_CONTENT_ONCE:
5067
        cur = ctxt->vstate->node;
5068
        DEBUG_VALID_MSG("Once branch failed, rollback");
5069
        if (vstateVPop(ctxt) < 0 ) {
5070
      DEBUG_VALID_MSG("exhaustion, failed");
5071
      return(0);
5072
        }
5073
        if (cur != ctxt->vstate->node)
5074
      determinist = -3;
5075
        goto cont;
5076
    case XML_ELEMENT_CONTENT_PLUS:
5077
        if (OCCURRENCE == 0) {
5078
      cur = ctxt->vstate->node;
5079
      DEBUG_VALID_MSG("Plus branch failed, rollback");
5080
      if (vstateVPop(ctxt) < 0 ) {
5081
          DEBUG_VALID_MSG("exhaustion, failed");
5082
          return(0);
5083
      }
5084
      if (cur != ctxt->vstate->node)
5085
          determinist = -3;
5086
      goto cont;
5087
        }
5088
        DEBUG_VALID_MSG("Plus branch found");
5089
        ret = 1;
5090
        break;
5091
    case XML_ELEMENT_CONTENT_MULT:
5092
#ifdef DEBUG_VALID_ALGO
5093
        if (OCCURRENCE == 0) {
5094
      DEBUG_VALID_MSG("Mult branch failed");
5095
        } else {
5096
      DEBUG_VALID_MSG("Mult branch found");
5097
        }
5098
#endif
5099
        ret = 1;
5100
        break;
5101
    case XML_ELEMENT_CONTENT_OPT:
5102
        DEBUG_VALID_MSG("Option branch failed");
5103
        ret = 1;
5104
        break;
5105
      }
5106
  } else {
5107
      switch (CONT->ocur) {
5108
    case XML_ELEMENT_CONTENT_OPT:
5109
        DEBUG_VALID_MSG("Option branch succeeded");
5110
        ret = 1;
5111
        break;
5112
    case XML_ELEMENT_CONTENT_ONCE:
5113
        DEBUG_VALID_MSG("Once branch succeeded");
5114
        ret = 1;
5115
        break;
5116
    case XML_ELEMENT_CONTENT_PLUS:
5117
        if (STATE == ROLLBACK_PARENT) {
5118
      DEBUG_VALID_MSG("Plus branch rollback");
5119
      ret = 1;
5120
      break;
5121
        }
5122
        if (NODE == NULL) {
5123
      DEBUG_VALID_MSG("Plus branch exhausted");
5124
      ret = 1;
5125
      break;
5126
        }
5127
        DEBUG_VALID_MSG("Plus branch succeeded, continuing");
5128
        SET_OCCURRENCE;
5129
        goto cont;
5130
    case XML_ELEMENT_CONTENT_MULT:
5131
        if (STATE == ROLLBACK_PARENT) {
5132
      DEBUG_VALID_MSG("Mult branch rollback");
5133
      ret = 1;
5134
      break;
5135
        }
5136
        if (NODE == NULL) {
5137
      DEBUG_VALID_MSG("Mult branch exhausted");
5138
      ret = 1;
5139
      break;
5140
        }
5141
        DEBUG_VALID_MSG("Mult branch succeeded, continuing");
5142
        /* SET_OCCURRENCE; */
5143
        goto cont;
5144
      }
5145
  }
5146
  STATE = 0;
5147
5148
  /*
5149
   * Then act accordingly at the parent level
5150
   */
5151
  RESET_OCCURRENCE;
5152
  if ((CONT->parent == NULL) ||
5153
            (CONT->parent == (xmlElementContentPtr) 1))
5154
      break;
5155
5156
  switch (CONT->parent->type) {
5157
      case XML_ELEMENT_CONTENT_PCDATA:
5158
    DEBUG_VALID_MSG("Error: parent pcdata");
5159
    return(-1);
5160
      case XML_ELEMENT_CONTENT_ELEMENT:
5161
    DEBUG_VALID_MSG("Error: parent element");
5162
    return(-1);
5163
      case XML_ELEMENT_CONTENT_OR:
5164
    if (ret == 1) {
5165
        DEBUG_VALID_MSG("Or succeeded");
5166
        CONT = CONT->parent;
5167
        DEPTH--;
5168
    } else {
5169
        DEBUG_VALID_MSG("Or failed");
5170
        CONT = CONT->parent;
5171
        DEPTH--;
5172
    }
5173
    break;
5174
      case XML_ELEMENT_CONTENT_SEQ:
5175
    if (ret == 0) {
5176
        DEBUG_VALID_MSG("Sequence failed");
5177
        CONT = CONT->parent;
5178
        DEPTH--;
5179
    } else if (CONT == CONT->parent->c1) {
5180
        DEBUG_VALID_MSG("Sequence testing 2nd branch");
5181
        CONT = CONT->parent->c2;
5182
        goto cont;
5183
    } else {
5184
        DEBUG_VALID_MSG("Sequence succeeded");
5185
        CONT = CONT->parent;
5186
        DEPTH--;
5187
    }
5188
  }
5189
    }
5190
    if (NODE != NULL) {
5191
  xmlNodePtr cur;
5192
5193
  cur = ctxt->vstate->node;
5194
  DEBUG_VALID_MSG("Failed, remaining input, rollback");
5195
  if (vstateVPop(ctxt) < 0 ) {
5196
      DEBUG_VALID_MSG("exhaustion, failed");
5197
      return(0);
5198
  }
5199
  if (cur != ctxt->vstate->node)
5200
      determinist = -3;
5201
  goto cont;
5202
    }
5203
    if (ret == 0) {
5204
  xmlNodePtr cur;
5205
5206
  cur = ctxt->vstate->node;
5207
  DEBUG_VALID_MSG("Failure, rollback");
5208
  if (vstateVPop(ctxt) < 0 ) {
5209
      DEBUG_VALID_MSG("exhaustion, failed");
5210
      return(0);
5211
  }
5212
  if (cur != ctxt->vstate->node)
5213
      determinist = -3;
5214
  goto cont;
5215
    }
5216
    return(determinist);
5217
}
5218
#endif
5219
5220
/**
5221
 * xmlSnprintfElements:
5222
 * @buf:  an output buffer
5223
 * @size:  the size of the buffer
5224
 * @content:  An element
5225
 * @glob: 1 if one must print the englobing parenthesis, 0 otherwise
5226
 *
5227
 * This will dump the list of elements to the buffer
5228
 * Intended just for the debug routine
5229
 */
5230
static void
5231
43.7k
xmlSnprintfElements(char *buf, int size, xmlNodePtr node, int glob) {
5232
43.7k
    xmlNodePtr cur;
5233
43.7k
    int len;
5234
5235
43.7k
    if (node == NULL) return;
5236
29.0k
    if (glob) strcat(buf, "(");
5237
29.0k
    cur = node;
5238
155k
    while (cur != NULL) {
5239
126k
  len = strlen(buf);
5240
126k
  if (size - len < 50) {
5241
86
      if ((size - len > 4) && (buf[len - 1] != '.'))
5242
86
    strcat(buf, " ...");
5243
86
      return;
5244
86
  }
5245
126k
        switch (cur->type) {
5246
45.0k
            case XML_ELEMENT_NODE:
5247
45.0k
    if ((cur->ns != NULL) && (cur->ns->prefix != NULL)) {
5248
16.3k
        if (size - len < xmlStrlen(cur->ns->prefix) + 10) {
5249
0
      if ((size - len > 4) && (buf[len - 1] != '.'))
5250
0
          strcat(buf, " ...");
5251
0
      return;
5252
0
        }
5253
16.3k
        strcat(buf, (char *) cur->ns->prefix);
5254
16.3k
        strcat(buf, ":");
5255
16.3k
    }
5256
45.0k
                if (size - len < xmlStrlen(cur->name) + 10) {
5257
193
        if ((size - len > 4) && (buf[len - 1] != '.'))
5258
193
      strcat(buf, " ...");
5259
193
        return;
5260
193
    }
5261
44.8k
          strcat(buf, (char *) cur->name);
5262
44.8k
    if (cur->next != NULL)
5263
39.7k
        strcat(buf, " ");
5264
44.8k
    break;
5265
62.6k
            case XML_TEXT_NODE:
5266
62.6k
    if (xmlIsBlankNode(cur))
5267
28.8k
        break;
5268
                /* Falls through. */
5269
34.8k
            case XML_CDATA_SECTION_NODE:
5270
50.2k
            case XML_ENTITY_REF_NODE:
5271
50.2k
          strcat(buf, "CDATA");
5272
50.2k
    if (cur->next != NULL)
5273
35.0k
        strcat(buf, " ");
5274
50.2k
    break;
5275
0
            case XML_ATTRIBUTE_NODE:
5276
0
            case XML_DOCUMENT_NODE:
5277
0
      case XML_HTML_DOCUMENT_NODE:
5278
0
            case XML_DOCUMENT_TYPE_NODE:
5279
0
            case XML_DOCUMENT_FRAG_NODE:
5280
0
            case XML_NOTATION_NODE:
5281
0
      case XML_NAMESPACE_DECL:
5282
0
          strcat(buf, "???");
5283
0
    if (cur->next != NULL)
5284
0
        strcat(buf, " ");
5285
0
    break;
5286
0
            case XML_ENTITY_NODE:
5287
1.52k
            case XML_PI_NODE:
5288
1.52k
            case XML_DTD_NODE:
5289
2.35k
            case XML_COMMENT_NODE:
5290
2.35k
      case XML_ELEMENT_DECL:
5291
2.35k
      case XML_ATTRIBUTE_DECL:
5292
2.35k
      case XML_ENTITY_DECL:
5293
2.35k
      case XML_XINCLUDE_START:
5294
2.35k
      case XML_XINCLUDE_END:
5295
2.35k
    break;
5296
126k
  }
5297
126k
  cur = cur->next;
5298
126k
    }
5299
28.7k
    if (glob) strcat(buf, ")");
5300
28.7k
}
5301
5302
/**
5303
 * xmlValidateElementContent:
5304
 * @ctxt:  the validation context
5305
 * @child:  the child list
5306
 * @elemDecl:  pointer to the element declaration
5307
 * @warn:  emit the error message
5308
 * @parent: the parent element (for error reporting)
5309
 *
5310
 * Try to validate the content model of an element
5311
 *
5312
 * returns 1 if valid or 0 if not and -1 in case of error
5313
 */
5314
5315
static int
5316
xmlValidateElementContent(xmlValidCtxtPtr ctxt, xmlNodePtr child,
5317
390k
       xmlElementPtr elemDecl, int warn, xmlNodePtr parent) {
5318
390k
    int ret = 1;
5319
#ifndef  LIBXML_REGEXP_ENABLED
5320
    xmlNodePtr repl = NULL, last = NULL, tmp;
5321
#endif
5322
390k
    xmlNodePtr cur;
5323
390k
    xmlElementContentPtr cont;
5324
390k
    const xmlChar *name;
5325
5326
390k
    if ((elemDecl == NULL) || (parent == NULL) || (ctxt == NULL))
5327
0
  return(-1);
5328
390k
    cont = elemDecl->content;
5329
390k
    name = elemDecl->name;
5330
5331
390k
#ifdef LIBXML_REGEXP_ENABLED
5332
    /* Build the regexp associated to the content model */
5333
390k
    if (elemDecl->contModel == NULL)
5334
101k
  ret = xmlValidBuildContentModel(ctxt, elemDecl);
5335
390k
    if (elemDecl->contModel == NULL) {
5336
0
  return(-1);
5337
390k
    } else {
5338
390k
  xmlRegExecCtxtPtr exec;
5339
5340
390k
  if (!xmlRegexpIsDeterminist(elemDecl->contModel)) {
5341
26.8k
      return(-1);
5342
26.8k
  }
5343
363k
  ctxt->nodeMax = 0;
5344
363k
  ctxt->nodeNr = 0;
5345
363k
  ctxt->nodeTab = NULL;
5346
363k
  exec = xmlRegNewExecCtxt(elemDecl->contModel, NULL, NULL);
5347
363k
  if (exec != NULL) {
5348
363k
      cur = child;
5349
1.84M
      while (cur != NULL) {
5350
1.49M
    switch (cur->type) {
5351
14.1k
        case XML_ENTITY_REF_NODE:
5352
      /*
5353
       * Push the current node to be able to roll back
5354
       * and process within the entity
5355
       */
5356
14.1k
      if ((cur->children != NULL) &&
5357
14.1k
          (cur->children->children != NULL)) {
5358
4.91k
          nodeVPush(ctxt, cur);
5359
4.91k
          cur = cur->children->children;
5360
4.91k
          continue;
5361
4.91k
      }
5362
9.23k
      break;
5363
608k
        case XML_TEXT_NODE:
5364
608k
      if (xmlIsBlankNode(cur))
5365
590k
          break;
5366
18.5k
      ret = 0;
5367
18.5k
      goto fail;
5368
411
        case XML_CDATA_SECTION_NODE:
5369
      /* TODO */
5370
411
      ret = 0;
5371
411
      goto fail;
5372
860k
        case XML_ELEMENT_NODE:
5373
860k
      if ((cur->ns != NULL) && (cur->ns->prefix != NULL)) {
5374
73.3k
          xmlChar fn[50];
5375
73.3k
          xmlChar *fullname;
5376
5377
73.3k
          fullname = xmlBuildQName(cur->name,
5378
73.3k
                             cur->ns->prefix, fn, 50);
5379
73.3k
          if (fullname == NULL) {
5380
0
        ret = -1;
5381
0
        goto fail;
5382
0
          }
5383
73.3k
                            ret = xmlRegExecPushString(exec, fullname, NULL);
5384
73.3k
          if ((fullname != fn) && (fullname != cur->name))
5385
861
        xmlFree(fullname);
5386
787k
      } else {
5387
787k
          ret = xmlRegExecPushString(exec, cur->name, NULL);
5388
787k
      }
5389
860k
      break;
5390
860k
        default:
5391
12.2k
      break;
5392
1.49M
    }
5393
    /*
5394
     * Switch to next element
5395
     */
5396
1.47M
    cur = cur->next;
5397
1.47M
    while (cur == NULL) {
5398
324k
        cur = nodeVPop(ctxt);
5399
324k
        if (cur == NULL)
5400
320k
      break;
5401
4.12k
        cur = cur->next;
5402
4.12k
    }
5403
1.47M
      }
5404
344k
      ret = xmlRegExecPushString(exec, NULL, NULL);
5405
363k
fail:
5406
363k
      xmlRegFreeExecCtxt(exec);
5407
363k
  }
5408
363k
    }
5409
#else  /* LIBXML_REGEXP_ENABLED */
5410
    /*
5411
     * Allocate the stack
5412
     */
5413
    ctxt->vstateMax = 8;
5414
    ctxt->vstateTab = (xmlValidState *) xmlMalloc(
5415
     ctxt->vstateMax * sizeof(ctxt->vstateTab[0]));
5416
    if (ctxt->vstateTab == NULL) {
5417
  xmlVErrMemory(ctxt, "malloc failed");
5418
  return(-1);
5419
    }
5420
    /*
5421
     * The first entry in the stack is reserved to the current state
5422
     */
5423
    ctxt->nodeMax = 0;
5424
    ctxt->nodeNr = 0;
5425
    ctxt->nodeTab = NULL;
5426
    ctxt->vstate = &ctxt->vstateTab[0];
5427
    ctxt->vstateNr = 1;
5428
    CONT = cont;
5429
    NODE = child;
5430
    DEPTH = 0;
5431
    OCCURS = 0;
5432
    STATE = 0;
5433
    ret = xmlValidateElementType(ctxt);
5434
    if ((ret == -3) && (warn)) {
5435
  char expr[5000];
5436
  expr[0] = 0;
5437
  xmlSnprintfElementContent(expr, 5000, elemDecl->content, 1);
5438
  xmlErrValidNode(ctxt, (xmlNodePtr) elemDecl,
5439
                XML_DTD_CONTENT_NOT_DETERMINIST,
5440
          "Content model of %s is not deterministic: %s\n",
5441
          name, BAD_CAST expr, NULL);
5442
    } else if (ret == -2) {
5443
  /*
5444
   * An entities reference appeared at this level.
5445
   * Build a minimal representation of this node content
5446
   * sufficient to run the validation process on it
5447
   */
5448
  DEBUG_VALID_MSG("Found an entity reference, linearizing");
5449
  cur = child;
5450
  while (cur != NULL) {
5451
      switch (cur->type) {
5452
    case XML_ENTITY_REF_NODE:
5453
        /*
5454
         * Push the current node to be able to roll back
5455
         * and process within the entity
5456
         */
5457
        if ((cur->children != NULL) &&
5458
      (cur->children->children != NULL)) {
5459
      nodeVPush(ctxt, cur);
5460
      cur = cur->children->children;
5461
      continue;
5462
        }
5463
        break;
5464
    case XML_TEXT_NODE:
5465
        if (xmlIsBlankNode(cur))
5466
      break;
5467
        /* no break on purpose */
5468
    case XML_CDATA_SECTION_NODE:
5469
        /* no break on purpose */
5470
    case XML_ELEMENT_NODE:
5471
        /*
5472
         * Allocate a new node and minimally fills in
5473
         * what's required
5474
         */
5475
        tmp = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
5476
        if (tmp == NULL) {
5477
      xmlVErrMemory(ctxt, "malloc failed");
5478
      xmlFreeNodeList(repl);
5479
      ret = -1;
5480
      goto done;
5481
        }
5482
        tmp->type = cur->type;
5483
        tmp->name = cur->name;
5484
        tmp->ns = cur->ns;
5485
        tmp->next = NULL;
5486
        tmp->content = NULL;
5487
        if (repl == NULL)
5488
      repl = last = tmp;
5489
        else {
5490
      last->next = tmp;
5491
      last = tmp;
5492
        }
5493
        if (cur->type == XML_CDATA_SECTION_NODE) {
5494
      /*
5495
       * E59 spaces in CDATA does not match the
5496
       * nonterminal S
5497
       */
5498
      tmp->content = xmlStrdup(BAD_CAST "CDATA");
5499
        }
5500
        break;
5501
    default:
5502
        break;
5503
      }
5504
      /*
5505
       * Switch to next element
5506
       */
5507
      cur = cur->next;
5508
      while (cur == NULL) {
5509
    cur = nodeVPop(ctxt);
5510
    if (cur == NULL)
5511
        break;
5512
    cur = cur->next;
5513
      }
5514
  }
5515
5516
  /*
5517
   * Relaunch the validation
5518
   */
5519
  ctxt->vstate = &ctxt->vstateTab[0];
5520
  ctxt->vstateNr = 1;
5521
  CONT = cont;
5522
  NODE = repl;
5523
  DEPTH = 0;
5524
  OCCURS = 0;
5525
  STATE = 0;
5526
  ret = xmlValidateElementType(ctxt);
5527
    }
5528
#endif /* LIBXML_REGEXP_ENABLED */
5529
363k
    if ((warn) && ((ret != 1) && (ret != -3))) {
5530
43.7k
  if (ctxt != NULL) {
5531
43.7k
      char expr[5000];
5532
43.7k
      char list[5000];
5533
5534
43.7k
      expr[0] = 0;
5535
43.7k
      xmlSnprintfElementContent(&expr[0], 5000, cont, 1);
5536
43.7k
      list[0] = 0;
5537
#ifndef LIBXML_REGEXP_ENABLED
5538
      if (repl != NULL)
5539
    xmlSnprintfElements(&list[0], 5000, repl, 1);
5540
      else
5541
#endif /* LIBXML_REGEXP_ENABLED */
5542
43.7k
    xmlSnprintfElements(&list[0], 5000, child, 1);
5543
5544
43.7k
      if (name != NULL) {
5545
43.7k
    xmlErrValidNode(ctxt, parent, XML_DTD_CONTENT_MODEL,
5546
43.7k
     "Element %s content does not follow the DTD, expecting %s, got %s\n",
5547
43.7k
           name, BAD_CAST expr, BAD_CAST list);
5548
43.7k
      } else {
5549
0
    xmlErrValidNode(ctxt, parent, XML_DTD_CONTENT_MODEL,
5550
0
     "Element content does not follow the DTD, expecting %s, got %s\n",
5551
0
           BAD_CAST expr, BAD_CAST list, NULL);
5552
0
      }
5553
43.7k
  } else {
5554
0
      if (name != NULL) {
5555
0
    xmlErrValidNode(ctxt, parent, XML_DTD_CONTENT_MODEL,
5556
0
           "Element %s content does not follow the DTD\n",
5557
0
           name, NULL, NULL);
5558
0
      } else {
5559
0
    xmlErrValidNode(ctxt, parent, XML_DTD_CONTENT_MODEL,
5560
0
           "Element content does not follow the DTD\n",
5561
0
                    NULL, NULL, NULL);
5562
0
      }
5563
0
  }
5564
43.7k
  ret = 0;
5565
43.7k
    }
5566
363k
    if (ret == -3)
5567
0
  ret = 1;
5568
5569
#ifndef  LIBXML_REGEXP_ENABLED
5570
done:
5571
    /*
5572
     * Deallocate the copy if done, and free up the validation stack
5573
     */
5574
    while (repl != NULL) {
5575
  tmp = repl->next;
5576
  xmlFree(repl);
5577
  repl = tmp;
5578
    }
5579
    ctxt->vstateMax = 0;
5580
    if (ctxt->vstateTab != NULL) {
5581
  xmlFree(ctxt->vstateTab);
5582
  ctxt->vstateTab = NULL;
5583
    }
5584
#endif
5585
363k
    ctxt->nodeMax = 0;
5586
363k
    ctxt->nodeNr = 0;
5587
363k
    if (ctxt->nodeTab != NULL) {
5588
3.85k
  xmlFree(ctxt->nodeTab);
5589
3.85k
  ctxt->nodeTab = NULL;
5590
3.85k
    }
5591
363k
    return(ret);
5592
5593
390k
}
5594
5595
/**
5596
 * xmlValidateCdataElement:
5597
 * @ctxt:  the validation context
5598
 * @doc:  a document instance
5599
 * @elem:  an element instance
5600
 *
5601
 * Check that an element follows #CDATA
5602
 *
5603
 * returns 1 if valid or 0 otherwise
5604
 */
5605
static int
5606
xmlValidateOneCdataElement(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
5607
565k
                           xmlNodePtr elem) {
5608
565k
    int ret = 1;
5609
565k
    xmlNodePtr cur, child;
5610
5611
565k
    if ((ctxt == NULL) || (doc == NULL) || (elem == NULL) ||
5612
565k
        (elem->type != XML_ELEMENT_NODE))
5613
0
  return(0);
5614
5615
565k
    child = elem->children;
5616
5617
565k
    cur = child;
5618
4.20M
    while (cur != NULL) {
5619
3.64M
  switch (cur->type) {
5620
2.34M
      case XML_ENTITY_REF_NODE:
5621
    /*
5622
     * Push the current node to be able to roll back
5623
     * and process within the entity
5624
     */
5625
2.34M
    if ((cur->children != NULL) &&
5626
2.34M
        (cur->children->children != NULL)) {
5627
729k
        nodeVPush(ctxt, cur);
5628
729k
        cur = cur->children->children;
5629
729k
        continue;
5630
729k
    }
5631
1.61M
    break;
5632
1.61M
      case XML_COMMENT_NODE:
5633
7.97k
      case XML_PI_NODE:
5634
1.28M
      case XML_TEXT_NODE:
5635
1.29M
      case XML_CDATA_SECTION_NODE:
5636
1.29M
    break;
5637
2.74k
      default:
5638
2.74k
    ret = 0;
5639
2.74k
    goto done;
5640
3.64M
  }
5641
  /*
5642
   * Switch to next element
5643
   */
5644
2.91M
  cur = cur->next;
5645
3.64M
  while (cur == NULL) {
5646
1.24M
      cur = nodeVPop(ctxt);
5647
1.24M
      if (cur == NULL)
5648
514k
    break;
5649
729k
      cur = cur->next;
5650
729k
  }
5651
2.91M
    }
5652
565k
done:
5653
565k
    ctxt->nodeMax = 0;
5654
565k
    ctxt->nodeNr = 0;
5655
565k
    if (ctxt->nodeTab != NULL) {
5656
15.4k
  xmlFree(ctxt->nodeTab);
5657
15.4k
  ctxt->nodeTab = NULL;
5658
15.4k
    }
5659
565k
    return(ret);
5660
565k
}
5661
5662
#ifdef LIBXML_REGEXP_ENABLED
5663
/**
5664
 * xmlValidateCheckMixed:
5665
 * @ctxt:  the validation context
5666
 * @cont:  the mixed content model
5667
 * @qname:  the qualified name as appearing in the serialization
5668
 *
5669
 * Check if the given node is part of the content model.
5670
 *
5671
 * Returns 1 if yes, 0 if no, -1 in case of error
5672
 */
5673
static int
5674
xmlValidateCheckMixed(xmlValidCtxtPtr ctxt,
5675
279k
                xmlElementContentPtr cont, const xmlChar *qname) {
5676
279k
    const xmlChar *name;
5677
279k
    int plen;
5678
279k
    name = xmlSplitQName3(qname, &plen);
5679
5680
279k
    if (name == NULL) {
5681
2.28M
  while (cont != NULL) {
5682
2.27M
      if (cont->type == XML_ELEMENT_CONTENT_ELEMENT) {
5683
15.2k
    if ((cont->prefix == NULL) && (xmlStrEqual(cont->name, qname)))
5684
1.97k
        return(1);
5685
2.25M
      } else if ((cont->type == XML_ELEMENT_CONTENT_OR) &&
5686
2.25M
         (cont->c1 != NULL) &&
5687
2.25M
         (cont->c1->type == XML_ELEMENT_CONTENT_ELEMENT)){
5688
1.99M
    if ((cont->c1->prefix == NULL) &&
5689
1.99M
        (xmlStrEqual(cont->c1->name, qname)))
5690
245k
        return(1);
5691
1.99M
      } else if ((cont->type != XML_ELEMENT_CONTENT_OR) ||
5692
260k
    (cont->c1 == NULL) ||
5693
260k
    (cont->c1->type != XML_ELEMENT_CONTENT_PCDATA)){
5694
0
    xmlErrValid(NULL, XML_DTD_MIXED_CORRUPT,
5695
0
      "Internal: MIXED struct corrupted\n",
5696
0
      NULL);
5697
0
    break;
5698
0
      }
5699
2.02M
      cont = cont->c2;
5700
2.02M
  }
5701
260k
    } else {
5702
113k
  while (cont != NULL) {
5703
97.7k
      if (cont->type == XML_ELEMENT_CONTENT_ELEMENT) {
5704
18.2k
    if ((cont->prefix != NULL) &&
5705
18.2k
        (xmlStrncmp(cont->prefix, qname, plen) == 0) &&
5706
18.2k
        (xmlStrEqual(cont->name, name)))
5707
2.84k
        return(1);
5708
79.5k
      } else if ((cont->type == XML_ELEMENT_CONTENT_OR) &&
5709
79.5k
         (cont->c1 != NULL) &&
5710
79.5k
         (cont->c1->type == XML_ELEMENT_CONTENT_ELEMENT)){
5711
60.2k
    if ((cont->c1->prefix != NULL) &&
5712
60.2k
        (xmlStrncmp(cont->c1->prefix, qname, plen) == 0) &&
5713
60.2k
        (xmlStrEqual(cont->c1->name, name)))
5714
998
        return(1);
5715
60.2k
      } else if ((cont->type != XML_ELEMENT_CONTENT_OR) ||
5716
19.2k
    (cont->c1 == NULL) ||
5717
19.2k
    (cont->c1->type != XML_ELEMENT_CONTENT_PCDATA)){
5718
0
    xmlErrValid(ctxt, XML_DTD_MIXED_CORRUPT,
5719
0
      "Internal: MIXED struct corrupted\n",
5720
0
      NULL);
5721
0
    break;
5722
0
      }
5723
93.9k
      cont = cont->c2;
5724
93.9k
  }
5725
19.2k
    }
5726
28.6k
    return(0);
5727
279k
}
5728
#endif /* LIBXML_REGEXP_ENABLED */
5729
5730
/**
5731
 * xmlValidGetElemDecl:
5732
 * @ctxt:  the validation context
5733
 * @doc:  a document instance
5734
 * @elem:  an element instance
5735
 * @extsubset:  pointer, (out) indicate if the declaration was found
5736
 *              in the external subset.
5737
 *
5738
 * Finds a declaration associated to an element in the document.
5739
 *
5740
 * returns the pointer to the declaration or NULL if not found.
5741
 */
5742
static xmlElementPtr
5743
xmlValidGetElemDecl(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
5744
5.25M
              xmlNodePtr elem, int *extsubset) {
5745
5.25M
    xmlElementPtr elemDecl = NULL;
5746
5.25M
    const xmlChar *prefix = NULL;
5747
5748
5.25M
    if ((ctxt == NULL) || (doc == NULL) ||
5749
5.25M
        (elem == NULL) || (elem->name == NULL))
5750
0
        return(NULL);
5751
5.25M
    if (extsubset != NULL)
5752
5.25M
  *extsubset = 0;
5753
5754
    /*
5755
     * Fetch the declaration for the qualified name
5756
     */
5757
5.25M
    if ((elem->ns != NULL) && (elem->ns->prefix != NULL))
5758
256k
  prefix = elem->ns->prefix;
5759
5760
5.25M
    if (prefix != NULL) {
5761
256k
  elemDecl = xmlGetDtdQElementDesc(doc->intSubset,
5762
256k
                             elem->name, prefix);
5763
256k
  if ((elemDecl == NULL) && (doc->extSubset != NULL)) {
5764
16.4k
      elemDecl = xmlGetDtdQElementDesc(doc->extSubset,
5765
16.4k
                                 elem->name, prefix);
5766
16.4k
      if ((elemDecl != NULL) && (extsubset != NULL))
5767
989
    *extsubset = 1;
5768
16.4k
  }
5769
256k
    }
5770
5771
    /*
5772
     * Fetch the declaration for the non qualified name
5773
     * This is "non-strict" validation should be done on the
5774
     * full QName but in that case being flexible makes sense.
5775
     */
5776
5.25M
    if (elemDecl == NULL) {
5777
5.08M
  elemDecl = xmlGetDtdElementDesc(doc->intSubset, elem->name);
5778
5.08M
  if ((elemDecl == NULL) && (doc->extSubset != NULL)) {
5779
2.81M
      elemDecl = xmlGetDtdElementDesc(doc->extSubset, elem->name);
5780
2.81M
      if ((elemDecl != NULL) && (extsubset != NULL))
5781
2.55M
    *extsubset = 1;
5782
2.81M
  }
5783
5.08M
    }
5784
5.25M
    if (elemDecl == NULL) {
5785
2.09M
  xmlErrValidNode(ctxt, elem,
5786
2.09M
      XML_DTD_UNKNOWN_ELEM,
5787
2.09M
         "No declaration for element %s\n",
5788
2.09M
         elem->name, NULL, NULL);
5789
2.09M
    }
5790
5.25M
    return(elemDecl);
5791
5.25M
}
5792
5793
#ifdef LIBXML_REGEXP_ENABLED
5794
/**
5795
 * xmlValidatePushElement:
5796
 * @ctxt:  the validation context
5797
 * @doc:  a document instance
5798
 * @elem:  an element instance
5799
 * @qname:  the qualified name as appearing in the serialization
5800
 *
5801
 * Push a new element start on the validation stack.
5802
 *
5803
 * returns 1 if no validation problem was found or 0 otherwise
5804
 */
5805
int
5806
xmlValidatePushElement(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
5807
1.22M
                       xmlNodePtr elem, const xmlChar *qname) {
5808
1.22M
    int ret = 1;
5809
1.22M
    xmlElementPtr eDecl;
5810
1.22M
    int extsubset = 0;
5811
5812
1.22M
    if (ctxt == NULL)
5813
0
        return(0);
5814
/* printf("PushElem %s\n", qname); */
5815
1.22M
    if ((ctxt->vstateNr > 0) && (ctxt->vstate != NULL)) {
5816
1.19M
  xmlValidStatePtr state = ctxt->vstate;
5817
1.19M
  xmlElementPtr elemDecl;
5818
5819
  /*
5820
   * Check the new element against the content model of the new elem.
5821
   */
5822
1.19M
  if (state->elemDecl != NULL) {
5823
826k
      elemDecl = state->elemDecl;
5824
5825
826k
      switch(elemDecl->etype) {
5826
5.37k
    case XML_ELEMENT_TYPE_UNDEFINED:
5827
5.37k
        ret = 0;
5828
5.37k
        break;
5829
9.07k
    case XML_ELEMENT_TYPE_EMPTY:
5830
9.07k
        xmlErrValidNode(ctxt, state->node,
5831
9.07k
            XML_DTD_NOT_EMPTY,
5832
9.07k
         "Element %s was declared EMPTY this one has content\n",
5833
9.07k
         state->node->name, NULL, NULL);
5834
9.07k
        ret = 0;
5835
9.07k
        break;
5836
924
    case XML_ELEMENT_TYPE_ANY:
5837
        /* I don't think anything is required then */
5838
924
        break;
5839
346k
    case XML_ELEMENT_TYPE_MIXED:
5840
        /* simple case of declared as #PCDATA */
5841
346k
        if ((elemDecl->content != NULL) &&
5842
346k
      (elemDecl->content->type ==
5843
346k
       XML_ELEMENT_CONTENT_PCDATA)) {
5844
66.6k
      xmlErrValidNode(ctxt, state->node,
5845
66.6k
          XML_DTD_NOT_PCDATA,
5846
66.6k
         "Element %s was declared #PCDATA but contains non text nodes\n",
5847
66.6k
        state->node->name, NULL, NULL);
5848
66.6k
      ret = 0;
5849
279k
        } else {
5850
279k
      ret = xmlValidateCheckMixed(ctxt, elemDecl->content,
5851
279k
                            qname);
5852
279k
      if (ret != 1) {
5853
28.6k
          xmlErrValidNode(ctxt, state->node,
5854
28.6k
              XML_DTD_INVALID_CHILD,
5855
28.6k
         "Element %s is not declared in %s list of possible children\n",
5856
28.6k
            qname, state->node->name, NULL);
5857
28.6k
      }
5858
279k
        }
5859
346k
        break;
5860
464k
    case XML_ELEMENT_TYPE_ELEMENT:
5861
        /*
5862
         * TODO:
5863
         * VC: Standalone Document Declaration
5864
         *     - element types with element content, if white space
5865
         *       occurs directly within any instance of those types.
5866
         */
5867
464k
        if (state->exec != NULL) {
5868
464k
      ret = xmlRegExecPushString(state->exec, qname, NULL);
5869
464k
      if (ret < 0) {
5870
42.3k
          xmlErrValidNode(ctxt, state->node,
5871
42.3k
              XML_DTD_CONTENT_MODEL,
5872
42.3k
         "Element %s content does not follow the DTD, Misplaced %s\n",
5873
42.3k
           state->node->name, qname, NULL);
5874
42.3k
          ret = 0;
5875
422k
      } else {
5876
422k
          ret = 1;
5877
422k
      }
5878
464k
        }
5879
464k
        break;
5880
826k
      }
5881
826k
  }
5882
1.19M
    }
5883
1.22M
    eDecl = xmlValidGetElemDecl(ctxt, doc, elem, &extsubset);
5884
1.22M
    vstateVPush(ctxt, eDecl, elem);
5885
1.22M
    return(ret);
5886
1.22M
}
5887
5888
/**
5889
 * xmlValidatePushCData:
5890
 * @ctxt:  the validation context
5891
 * @data:  some character data read
5892
 * @len:  the length of the data
5893
 *
5894
 * check the CData parsed for validation in the current stack
5895
 *
5896
 * returns 1 if no validation problem was found or 0 otherwise
5897
 */
5898
int
5899
2.71M
xmlValidatePushCData(xmlValidCtxtPtr ctxt, const xmlChar *data, int len) {
5900
2.71M
    int ret = 1;
5901
5902
/* printf("CDATA %s %d\n", data, len); */
5903
2.71M
    if (ctxt == NULL)
5904
0
        return(0);
5905
2.71M
    if (len <= 0)
5906
1.65k
  return(ret);
5907
2.70M
    if ((ctxt->vstateNr > 0) && (ctxt->vstate != NULL)) {
5908
2.70M
  xmlValidStatePtr state = ctxt->vstate;
5909
2.70M
  xmlElementPtr elemDecl;
5910
5911
  /*
5912
   * Check the new element against the content model of the new elem.
5913
   */
5914
2.70M
  if (state->elemDecl != NULL) {
5915
1.64M
      elemDecl = state->elemDecl;
5916
5917
1.64M
      switch(elemDecl->etype) {
5918
5.96k
    case XML_ELEMENT_TYPE_UNDEFINED:
5919
5.96k
        ret = 0;
5920
5.96k
        break;
5921
9.76k
    case XML_ELEMENT_TYPE_EMPTY:
5922
9.76k
        xmlErrValidNode(ctxt, state->node,
5923
9.76k
            XML_DTD_NOT_EMPTY,
5924
9.76k
         "Element %s was declared EMPTY this one has content\n",
5925
9.76k
         state->node->name, NULL, NULL);
5926
9.76k
        ret = 0;
5927
9.76k
        break;
5928
1.00k
    case XML_ELEMENT_TYPE_ANY:
5929
1.00k
        break;
5930
1.26M
    case XML_ELEMENT_TYPE_MIXED:
5931
1.26M
        break;
5932
358k
    case XML_ELEMENT_TYPE_ELEMENT: {
5933
358k
                    int i;
5934
5935
965k
                    for (i = 0;i < len;i++) {
5936
663k
                        if (!IS_BLANK_CH(data[i])) {
5937
56.3k
                            xmlErrValidNode(ctxt, state->node,
5938
56.3k
                                            XML_DTD_CONTENT_MODEL,
5939
56.3k
       "Element %s content does not follow the DTD, Text not allowed\n",
5940
56.3k
                                   state->node->name, NULL, NULL);
5941
56.3k
                            ret = 0;
5942
56.3k
                            goto done;
5943
56.3k
                        }
5944
663k
                    }
5945
                    /*
5946
                     * TODO:
5947
                     * VC: Standalone Document Declaration
5948
                     *  element types with element content, if white space
5949
                     *  occurs directly within any instance of those types.
5950
                     */
5951
302k
                    break;
5952
358k
                }
5953
1.64M
      }
5954
1.64M
  }
5955
2.70M
    }
5956
2.70M
done:
5957
2.70M
    return(ret);
5958
2.70M
}
5959
5960
/**
5961
 * xmlValidatePopElement:
5962
 * @ctxt:  the validation context
5963
 * @doc:  a document instance
5964
 * @elem:  an element instance
5965
 * @qname:  the qualified name as appearing in the serialization
5966
 *
5967
 * Pop the element end from the validation stack.
5968
 *
5969
 * returns 1 if no validation problem was found or 0 otherwise
5970
 */
5971
int
5972
xmlValidatePopElement(xmlValidCtxtPtr ctxt, xmlDocPtr doc ATTRIBUTE_UNUSED,
5973
                      xmlNodePtr elem ATTRIBUTE_UNUSED,
5974
1.22M
          const xmlChar *qname ATTRIBUTE_UNUSED) {
5975
1.22M
    int ret = 1;
5976
5977
1.22M
    if (ctxt == NULL)
5978
0
        return(0);
5979
/* printf("PopElem %s\n", qname); */
5980
1.22M
    if ((ctxt->vstateNr > 0) && (ctxt->vstate != NULL)) {
5981
1.22M
  xmlValidStatePtr state = ctxt->vstate;
5982
1.22M
  xmlElementPtr elemDecl;
5983
5984
  /*
5985
   * Check the new element against the content model of the new elem.
5986
   */
5987
1.22M
  if (state->elemDecl != NULL) {
5988
769k
      elemDecl = state->elemDecl;
5989
5990
769k
      if (elemDecl->etype == XML_ELEMENT_TYPE_ELEMENT) {
5991
190k
    if (state->exec != NULL) {
5992
190k
        ret = xmlRegExecPushString(state->exec, NULL, NULL);
5993
190k
        if (ret == 0) {
5994
8.13k
      xmlErrValidNode(ctxt, state->node,
5995
8.13k
                      XML_DTD_CONTENT_MODEL,
5996
8.13k
     "Element %s content does not follow the DTD, Expecting more child\n",
5997
8.13k
             state->node->name, NULL,NULL);
5998
182k
        } else {
5999
      /*
6000
       * previous validation errors should not generate
6001
       * a new one here
6002
       */
6003
182k
      ret = 1;
6004
182k
        }
6005
190k
    }
6006
190k
      }
6007
769k
  }
6008
1.22M
  vstateVPop(ctxt);
6009
1.22M
    }
6010
1.22M
    return(ret);
6011
1.22M
}
6012
#endif /* LIBXML_REGEXP_ENABLED */
6013
6014
/**
6015
 * xmlValidateOneElement:
6016
 * @ctxt:  the validation context
6017
 * @doc:  a document instance
6018
 * @elem:  an element instance
6019
 *
6020
 * Try to validate a single element and it's attributes,
6021
 * basically it does the following checks as described by the
6022
 * XML-1.0 recommendation:
6023
 *  - [ VC: Element Valid ]
6024
 *  - [ VC: Required Attribute ]
6025
 * Then call xmlValidateOneAttribute() for each attribute present.
6026
 *
6027
 * The ID/IDREF checkings are done separately
6028
 *
6029
 * returns 1 if valid or 0 otherwise
6030
 */
6031
6032
int
6033
xmlValidateOneElement(xmlValidCtxtPtr ctxt, xmlDocPtr doc,
6034
4.09M
                      xmlNodePtr elem) {
6035
4.09M
    xmlElementPtr elemDecl = NULL;
6036
4.09M
    xmlElementContentPtr cont;
6037
4.09M
    xmlAttributePtr attr;
6038
4.09M
    xmlNodePtr child;
6039
4.09M
    int ret = 1, tmp;
6040
4.09M
    const xmlChar *name;
6041
4.09M
    int extsubset = 0;
6042
6043
4.09M
    CHECK_DTD;
6044
6045
4.09M
    if (elem == NULL) return(0);
6046
4.09M
    switch (elem->type) {
6047
0
        case XML_ATTRIBUTE_NODE:
6048
0
      xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6049
0
       "Attribute element not expected\n", NULL, NULL ,NULL);
6050
0
      return(0);
6051
48.2k
        case XML_TEXT_NODE:
6052
48.2k
      if (elem->children != NULL) {
6053
0
    xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6054
0
                    "Text element has children !\n",
6055
0
        NULL,NULL,NULL);
6056
0
    return(0);
6057
0
      }
6058
48.2k
      if (elem->ns != NULL) {
6059
0
    xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6060
0
                    "Text element has namespace !\n",
6061
0
        NULL,NULL,NULL);
6062
0
    return(0);
6063
0
      }
6064
48.2k
      if (elem->content == NULL) {
6065
0
    xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6066
0
                    "Text element has no content !\n",
6067
0
        NULL,NULL,NULL);
6068
0
    return(0);
6069
0
      }
6070
48.2k
      return(1);
6071
0
        case XML_XINCLUDE_START:
6072
0
        case XML_XINCLUDE_END:
6073
0
            return(1);
6074
1.78k
        case XML_CDATA_SECTION_NODE:
6075
1.78k
        case XML_ENTITY_REF_NODE:
6076
9.43k
        case XML_PI_NODE:
6077
14.2k
        case XML_COMMENT_NODE:
6078
14.2k
      return(1);
6079
0
        case XML_ENTITY_NODE:
6080
0
      xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6081
0
       "Entity element not expected\n", NULL, NULL ,NULL);
6082
0
      return(0);
6083
0
        case XML_NOTATION_NODE:
6084
0
      xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6085
0
       "Notation element not expected\n", NULL, NULL ,NULL);
6086
0
      return(0);
6087
0
        case XML_DOCUMENT_NODE:
6088
0
        case XML_DOCUMENT_TYPE_NODE:
6089
0
        case XML_DOCUMENT_FRAG_NODE:
6090
0
      xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6091
0
       "Document element not expected\n", NULL, NULL ,NULL);
6092
0
      return(0);
6093
0
        case XML_HTML_DOCUMENT_NODE:
6094
0
      xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6095
0
       "HTML Document not expected\n", NULL, NULL ,NULL);
6096
0
      return(0);
6097
4.02M
        case XML_ELEMENT_NODE:
6098
4.02M
      break;
6099
0
  default:
6100
0
      xmlErrValidNode(ctxt, elem, XML_ERR_INTERNAL_ERROR,
6101
0
       "unknown element type\n", NULL, NULL ,NULL);
6102
0
      return(0);
6103
4.09M
    }
6104
6105
    /*
6106
     * Fetch the declaration
6107
     */
6108
4.02M
    elemDecl = xmlValidGetElemDecl(ctxt, doc, elem, &extsubset);
6109
4.02M
    if (elemDecl == NULL)
6110
1.63M
  return(0);
6111
6112
    /*
6113
     * If vstateNr is not zero that means continuous validation is
6114
     * activated, do not try to check the content model at that level.
6115
     */
6116
2.39M
    if (ctxt->vstateNr == 0) {
6117
    /* Check that the element content matches the definition */
6118
1.79M
    switch (elemDecl->etype) {
6119
17.2k
        case XML_ELEMENT_TYPE_UNDEFINED:
6120
17.2k
      xmlErrValidNode(ctxt, elem, XML_DTD_UNKNOWN_ELEM,
6121
17.2k
                      "No declaration for element %s\n",
6122
17.2k
       elem->name, NULL, NULL);
6123
17.2k
      return(0);
6124
208k
        case XML_ELEMENT_TYPE_EMPTY:
6125
208k
      if (elem->children != NULL) {
6126
4.60k
    xmlErrValidNode(ctxt, elem, XML_DTD_NOT_EMPTY,
6127
4.60k
         "Element %s was declared EMPTY this one has content\n",
6128
4.60k
                 elem->name, NULL, NULL);
6129
4.60k
    ret = 0;
6130
4.60k
      }
6131
208k
      break;
6132
1.06k
        case XML_ELEMENT_TYPE_ANY:
6133
      /* I don't think anything is required then */
6134
1.06k
      break;
6135
1.17M
        case XML_ELEMENT_TYPE_MIXED:
6136
6137
      /* simple case of declared as #PCDATA */
6138
1.17M
      if ((elemDecl->content != NULL) &&
6139
1.17M
    (elemDecl->content->type == XML_ELEMENT_CONTENT_PCDATA)) {
6140
565k
    ret = xmlValidateOneCdataElement(ctxt, doc, elem);
6141
565k
    if (!ret) {
6142
2.74k
        xmlErrValidNode(ctxt, elem, XML_DTD_NOT_PCDATA,
6143
2.74k
         "Element %s was declared #PCDATA but contains non text nodes\n",
6144
2.74k
         elem->name, NULL, NULL);
6145
2.74k
    }
6146
565k
    break;
6147
565k
      }
6148
611k
      child = elem->children;
6149
      /* Hum, this start to get messy */
6150
2.34M
      while (child != NULL) {
6151
1.73M
          if (child->type == XML_ELEMENT_NODE) {
6152
600k
        name = child->name;
6153
600k
        if ((child->ns != NULL) && (child->ns->prefix != NULL)) {
6154
20.1k
      xmlChar fn[50];
6155
20.1k
      xmlChar *fullname;
6156
6157
20.1k
      fullname = xmlBuildQName(child->name, child->ns->prefix,
6158
20.1k
                         fn, 50);
6159
20.1k
      if (fullname == NULL)
6160
0
          return(0);
6161
20.1k
      cont = elemDecl->content;
6162
94.3k
      while (cont != NULL) {
6163
74.6k
          if (cont->type == XML_ELEMENT_CONTENT_ELEMENT) {
6164
19.7k
        if (xmlStrEqual(cont->name, fullname))
6165
36
            break;
6166
54.8k
          } else if ((cont->type == XML_ELEMENT_CONTENT_OR) &&
6167
54.8k
             (cont->c1 != NULL) &&
6168
54.8k
             (cont->c1->type == XML_ELEMENT_CONTENT_ELEMENT)){
6169
34.7k
        if (xmlStrEqual(cont->c1->name, fullname))
6170
428
            break;
6171
34.7k
          } else if ((cont->type != XML_ELEMENT_CONTENT_OR) ||
6172
20.1k
        (cont->c1 == NULL) ||
6173
20.1k
        (cont->c1->type != XML_ELEMENT_CONTENT_PCDATA)){
6174
0
        xmlErrValid(NULL, XML_DTD_MIXED_CORRUPT,
6175
0
          "Internal: MIXED struct corrupted\n",
6176
0
          NULL);
6177
0
        break;
6178
0
          }
6179
74.1k
          cont = cont->c2;
6180
74.1k
      }
6181
20.1k
      if ((fullname != fn) && (fullname != child->name))
6182
4.41k
          xmlFree(fullname);
6183
20.1k
      if (cont != NULL)
6184
464
          goto child_ok;
6185
20.1k
        }
6186
599k
        cont = elemDecl->content;
6187
5.22M
        while (cont != NULL) {
6188
5.19M
            if (cont->type == XML_ELEMENT_CONTENT_ELEMENT) {
6189
30.7k
          if (xmlStrEqual(cont->name, name)) break;
6190
5.16M
      } else if ((cont->type == XML_ELEMENT_CONTENT_OR) &&
6191
5.16M
         (cont->c1 != NULL) &&
6192
5.16M
         (cont->c1->type == XML_ELEMENT_CONTENT_ELEMENT)) {
6193
4.56M
          if (xmlStrEqual(cont->c1->name, name)) break;
6194
4.56M
      } else if ((cont->type != XML_ELEMENT_CONTENT_OR) ||
6195
599k
          (cont->c1 == NULL) ||
6196
599k
          (cont->c1->type != XML_ELEMENT_CONTENT_PCDATA)) {
6197
0
          xmlErrValid(ctxt, XML_DTD_MIXED_CORRUPT,
6198
0
            "Internal: MIXED struct corrupted\n",
6199
0
            NULL);
6200
0
          break;
6201
0
      }
6202
4.62M
      cont = cont->c2;
6203
4.62M
        }
6204
599k
        if (cont == NULL) {
6205
24.3k
      xmlErrValidNode(ctxt, elem, XML_DTD_INVALID_CHILD,
6206
24.3k
         "Element %s is not declared in %s list of possible children\n",
6207
24.3k
             name, elem->name, NULL);
6208
24.3k
      ret = 0;
6209
24.3k
        }
6210
599k
    }
6211
1.73M
child_ok:
6212
1.73M
          child = child->next;
6213
1.73M
      }
6214
611k
      break;
6215
611k
        case XML_ELEMENT_TYPE_ELEMENT:
6216
390k
      if ((doc->standalone == 1) && (extsubset == 1)) {
6217
    /*
6218
     * VC: Standalone Document Declaration
6219
     *     - element types with element content, if white space
6220
     *       occurs directly within any instance of those types.
6221
     */
6222
1.28k
    child = elem->children;
6223
2.63k
    while (child != NULL) {
6224
1.63k
        if (child->type == XML_TEXT_NODE) {
6225
1.09k
      const xmlChar *content = child->content;
6226
6227
1.09k
      while (IS_BLANK_CH(*content))
6228
3.23k
          content++;
6229
1.09k
      if (*content == 0) {
6230
287
          xmlErrValidNode(ctxt, elem,
6231
287
                          XML_DTD_STANDALONE_WHITE_SPACE,
6232
287
"standalone: %s declared in the external subset contains white spaces nodes\n",
6233
287
           elem->name, NULL, NULL);
6234
287
          ret = 0;
6235
287
          break;
6236
287
      }
6237
1.09k
        }
6238
1.34k
        child =child->next;
6239
1.34k
    }
6240
1.28k
      }
6241
390k
      child = elem->children;
6242
390k
      cont = elemDecl->content;
6243
390k
      tmp = xmlValidateElementContent(ctxt, child, elemDecl, 1, elem);
6244
390k
      if (tmp <= 0)
6245
70.6k
    ret = tmp;
6246
390k
      break;
6247
1.79M
    }
6248
1.79M
    } /* not continuous */
6249
6250
    /* [ VC: Required Attribute ] */
6251
2.37M
    attr = elemDecl->attributes;
6252
7.50M
    while (attr != NULL) {
6253
5.12M
  if (attr->def == XML_ATTRIBUTE_REQUIRED) {
6254
854k
      int qualified = -1;
6255
6256
854k
      if ((attr->prefix == NULL) &&
6257
854k
    (xmlStrEqual(attr->name, BAD_CAST "xmlns"))) {
6258
713
    xmlNsPtr ns;
6259
6260
713
    ns = elem->nsDef;
6261
1.08k
    while (ns != NULL) {
6262
588
        if (ns->prefix == NULL)
6263
219
      goto found;
6264
369
        ns = ns->next;
6265
369
    }
6266
853k
      } else if (xmlStrEqual(attr->prefix, BAD_CAST "xmlns")) {
6267
1.96k
    xmlNsPtr ns;
6268
6269
1.96k
    ns = elem->nsDef;
6270
4.01k
    while (ns != NULL) {
6271
2.47k
        if (xmlStrEqual(attr->name, ns->prefix))
6272
429
      goto found;
6273
2.04k
        ns = ns->next;
6274
2.04k
    }
6275
851k
      } else {
6276
851k
    xmlAttrPtr attrib;
6277
6278
851k
    attrib = elem->properties;
6279
950k
    while (attrib != NULL) {
6280
937k
        if (xmlStrEqual(attrib->name, attr->name)) {
6281
841k
      if (attr->prefix != NULL) {
6282
105k
          xmlNsPtr nameSpace = attrib->ns;
6283
6284
105k
          if (nameSpace == NULL)
6285
1.70k
        nameSpace = elem->ns;
6286
          /*
6287
           * qualified names handling is problematic, having a
6288
           * different prefix should be possible but DTDs don't
6289
           * allow to define the URI instead of the prefix :-(
6290
           */
6291
105k
          if (nameSpace == NULL) {
6292
181
        if (qualified < 0)
6293
166
            qualified = 0;
6294
104k
          } else if (!xmlStrEqual(nameSpace->prefix,
6295
104k
                attr->prefix)) {
6296
2.73k
        if (qualified < 1)
6297
2.64k
            qualified = 1;
6298
2.73k
          } else
6299
102k
        goto found;
6300
736k
      } else {
6301
          /*
6302
           * We should allow applications to define namespaces
6303
           * for their application even if the DTD doesn't
6304
           * carry one, otherwise, basically we would always
6305
           * break.
6306
           */
6307
736k
          goto found;
6308
736k
      }
6309
841k
        }
6310
98.6k
        attrib = attrib->next;
6311
98.6k
    }
6312
851k
      }
6313
14.6k
      if (qualified == -1) {
6314
11.8k
    if (attr->prefix == NULL) {
6315
4.78k
        xmlErrValidNode(ctxt, elem, XML_DTD_MISSING_ATTRIBUTE,
6316
4.78k
           "Element %s does not carry attribute %s\n",
6317
4.78k
         elem->name, attr->name, NULL);
6318
4.78k
        ret = 0;
6319
7.06k
          } else {
6320
7.06k
        xmlErrValidNode(ctxt, elem, XML_DTD_MISSING_ATTRIBUTE,
6321
7.06k
           "Element %s does not carry attribute %s:%s\n",
6322
7.06k
         elem->name, attr->prefix,attr->name);
6323
7.06k
        ret = 0;
6324
7.06k
    }
6325
11.8k
      } else if (qualified == 0) {
6326
166
    xmlErrValidWarning(ctxt, elem, XML_DTD_NO_PREFIX,
6327
166
       "Element %s required attribute %s:%s has no prefix\n",
6328
166
           elem->name, attr->prefix, attr->name);
6329
2.64k
      } else if (qualified == 1) {
6330
2.64k
    xmlErrValidWarning(ctxt, elem, XML_DTD_DIFFERENT_PREFIX,
6331
2.64k
       "Element %s required attribute %s:%s has different prefix\n",
6332
2.64k
           elem->name, attr->prefix, attr->name);
6333
2.64k
      }
6334
4.27M
  } else if (attr->def == XML_ATTRIBUTE_FIXED) {
6335
      /*
6336
       * Special tests checking #FIXED namespace declarations
6337
       * have the right value since this is not done as an
6338
       * attribute checking
6339
       */
6340
252k
      if ((attr->prefix == NULL) &&
6341
252k
    (xmlStrEqual(attr->name, BAD_CAST "xmlns"))) {
6342
5.58k
    xmlNsPtr ns;
6343
6344
5.58k
    ns = elem->nsDef;
6345
6.82k
    while (ns != NULL) {
6346
5.40k
        if (ns->prefix == NULL) {
6347
4.16k
      if (!xmlStrEqual(attr->defaultValue, ns->href)) {
6348
1.10k
          xmlErrValidNode(ctxt, elem,
6349
1.10k
                 XML_DTD_ELEM_DEFAULT_NAMESPACE,
6350
1.10k
   "Element %s namespace name for default namespace does not match the DTD\n",
6351
1.10k
           elem->name, NULL, NULL);
6352
1.10k
          ret = 0;
6353
1.10k
      }
6354
4.16k
      goto found;
6355
4.16k
        }
6356
1.24k
        ns = ns->next;
6357
1.24k
    }
6358
246k
      } else if (xmlStrEqual(attr->prefix, BAD_CAST "xmlns")) {
6359
14.7k
    xmlNsPtr ns;
6360
6361
14.7k
    ns = elem->nsDef;
6362
18.3k
    while (ns != NULL) {
6363
15.5k
        if (xmlStrEqual(attr->name, ns->prefix)) {
6364
12.0k
      if (!xmlStrEqual(attr->defaultValue, ns->href)) {
6365
976
          xmlErrValidNode(ctxt, elem, XML_DTD_ELEM_NAMESPACE,
6366
976
       "Element %s namespace name for %s does not match the DTD\n",
6367
976
           elem->name, ns->prefix, NULL);
6368
976
          ret = 0;
6369
976
      }
6370
12.0k
      goto found;
6371
12.0k
        }
6372
3.54k
        ns = ns->next;
6373
3.54k
    }
6374
14.7k
      }
6375
252k
  }
6376
5.12M
found:
6377
5.12M
        attr = attr->nexth;
6378
5.12M
    }
6379
2.37M
    return(ret);
6380
2.37M
}
6381
6382
/**
6383
 * xmlValidateRoot:
6384
 * @ctxt:  the validation context
6385
 * @doc:  a document instance
6386
 *
6387
 * Try to validate a the root element
6388
 * basically it does the following check as described by the
6389
 * XML-1.0 recommendation:
6390
 *  - [ VC: Root Element Type ]
6391
 * it doesn't try to recurse or apply other check to the element
6392
 *
6393
 * returns 1 if valid or 0 otherwise
6394
 */
6395
6396
int
6397
210k
xmlValidateRoot(xmlValidCtxtPtr ctxt, xmlDocPtr doc) {
6398
210k
    xmlNodePtr root;
6399
210k
    int ret;
6400
6401
210k
    if (doc == NULL) return(0);
6402
6403
210k
    root = xmlDocGetRootElement(doc);
6404
210k
    if ((root == NULL) || (root->name == NULL)) {
6405
0
  xmlErrValid(ctxt, XML_DTD_NO_ROOT,
6406
0
              "no root element\n", NULL);
6407
0
        return(0);
6408
0
    }
6409
6410
    /*
6411
     * When doing post validation against a separate DTD, those may
6412
     * no internal subset has been generated
6413
     */
6414
210k
    if ((doc->intSubset != NULL) &&
6415
210k
  (doc->intSubset->name != NULL)) {
6416
  /*
6417
   * Check first the document root against the NQName
6418
   */
6419
210k
  if (!xmlStrEqual(doc->intSubset->name, root->name)) {
6420
62.8k
      if ((root->ns != NULL) && (root->ns->prefix != NULL)) {
6421
16.4k
    xmlChar fn[50];
6422
16.4k
    xmlChar *fullname;
6423
6424
16.4k
    fullname = xmlBuildQName(root->name, root->ns->prefix, fn, 50);
6425
16.4k
    if (fullname == NULL) {
6426
0
        xmlVErrMemory(ctxt, NULL);
6427
0
        return(0);
6428
0
    }
6429
16.4k
    ret = xmlStrEqual(doc->intSubset->name, fullname);
6430
16.4k
    if ((fullname != fn) && (fullname != root->name))
6431
795
        xmlFree(fullname);
6432
16.4k
    if (ret == 1)
6433
13.2k
        goto name_ok;
6434
16.4k
      }
6435
49.5k
      if ((xmlStrEqual(doc->intSubset->name, BAD_CAST "HTML")) &&
6436
49.5k
    (xmlStrEqual(root->name, BAD_CAST "html")))
6437
63
    goto name_ok;
6438
49.5k
      xmlErrValidNode(ctxt, root, XML_DTD_ROOT_NAME,
6439
49.5k
       "root and DTD name do not match '%s' and '%s'\n",
6440
49.5k
       root->name, doc->intSubset->name, NULL);
6441
49.5k
      return(0);
6442
49.5k
  }
6443
210k
    }
6444
161k
name_ok:
6445
161k
    return(1);
6446
210k
}
6447
6448
6449
/**
6450
 * xmlValidateElement:
6451
 * @ctxt:  the validation context
6452
 * @doc:  a document instance
6453
 * @elem:  an element instance
6454
 *
6455
 * Try to validate the subtree under an element
6456
 *
6457
 * returns 1 if valid or 0 otherwise
6458
 */
6459
6460
int
6461
107k
xmlValidateElement(xmlValidCtxtPtr ctxt, xmlDocPtr doc, xmlNodePtr elem) {
6462
107k
    xmlNodePtr child;
6463
107k
    xmlAttrPtr attr;
6464
107k
    xmlNsPtr ns;
6465
107k
    const xmlChar *value;
6466
107k
    int ret = 1;
6467
6468
107k
    if (elem == NULL) return(0);
6469
6470
    /*
6471
     * XInclude elements were added after parsing in the infoset,
6472
     * they don't really mean anything validation wise.
6473
     */
6474
107k
    if ((elem->type == XML_XINCLUDE_START) ||
6475
107k
  (elem->type == XML_XINCLUDE_END) ||
6476
107k
  (elem->type == XML_NAMESPACE_DECL))
6477
0
  return(1);
6478
6479
107k
    CHECK_DTD;
6480
6481
    /*
6482
     * Entities references have to be handled separately
6483
     */
6484
107k
    if (elem->type == XML_ENTITY_REF_NODE) {
6485
64
  return(1);
6486
64
    }
6487
6488
107k
    ret &= xmlValidateOneElement(ctxt, doc, elem);
6489
107k
    if (elem->type == XML_ELEMENT_NODE) {
6490
44.5k
  attr = elem->properties;
6491
60.2k
  while (attr != NULL) {
6492
15.6k
      value = xmlNodeListGetString(doc, attr->children, 0);
6493
15.6k
      ret &= xmlValidateOneAttribute(ctxt, doc, elem, attr, value);
6494
15.6k
      if (value != NULL)
6495
15.1k
    xmlFree((char *)value);
6496
15.6k
      attr= attr->next;
6497
15.6k
  }
6498
44.5k
  ns = elem->nsDef;
6499
57.6k
  while (ns != NULL) {
6500
13.1k
      if (elem->ns == NULL)
6501
7.70k
    ret &= xmlValidateOneNamespace(ctxt, doc, elem, NULL,
6502
7.70k
                 ns, ns->href);
6503
5.39k
      else
6504
5.39k
    ret &= xmlValidateOneNamespace(ctxt, doc, elem,
6505
5.39k
                                   elem->ns->prefix, ns, ns->href);
6506
13.1k
      ns = ns->next;
6507
13.1k
  }
6508
44.5k
    }
6509
107k
    child = elem->children;
6510
183k
    while (child != NULL) {
6511
76.4k
        ret &= xmlValidateElement(ctxt, doc, child);
6512
76.4k
        child = child->next;
6513
76.4k
    }
6514
6515
107k
    return(ret);
6516
107k
}
6517
6518
/**
6519
 * xmlValidateRef:
6520
 * @ref:   A reference to be validated
6521
 * @ctxt:  Validation context
6522
 * @name:  Name of ID we are searching for
6523
 *
6524
 */
6525
static void
6526
xmlValidateRef(xmlRefPtr ref, xmlValidCtxtPtr ctxt,
6527
100k
                     const xmlChar *name) {
6528
100k
    xmlAttrPtr id;
6529
100k
    xmlAttrPtr attr;
6530
6531
100k
    if (ref == NULL)
6532
0
  return;
6533
100k
    if ((ref->attr == NULL) && (ref->name == NULL))
6534
0
  return;
6535
100k
    attr = ref->attr;
6536
100k
    if (attr == NULL) {
6537
33.1k
  xmlChar *dup, *str = NULL, *cur, save;
6538
6539
33.1k
  dup = xmlStrdup(name);
6540
33.1k
  if (dup == NULL) {
6541
0
      ctxt->valid = 0;
6542
0
      return;
6543
0
  }
6544
33.1k
  cur = dup;
6545
68.2k
  while (*cur != 0) {
6546
67.9k
      str = cur;
6547
631k
      while ((*cur != 0) && (!IS_BLANK_CH(*cur))) cur++;
6548
67.9k
      save = *cur;
6549
67.9k
      *cur = 0;
6550
67.9k
      id = xmlGetID(ctxt->doc, str);
6551
67.9k
      if (id == NULL) {
6552
41.6k
    xmlErrValidNodeNr(ctxt, NULL, XML_DTD_UNKNOWN_ID,
6553
41.6k
     "attribute %s line %d references an unknown ID \"%s\"\n",
6554
41.6k
           ref->name, ref->lineno, str);
6555
41.6k
    ctxt->valid = 0;
6556
41.6k
      }
6557
67.9k
      if (save == 0)
6558
32.9k
    break;
6559
35.0k
      *cur = save;
6560
36.5k
      while (IS_BLANK_CH(*cur)) cur++;
6561
35.0k
  }
6562
33.1k
  xmlFree(dup);
6563
67.2k
    } else if (attr->atype == XML_ATTRIBUTE_IDREF) {
6564
60.5k
  id = xmlGetID(ctxt->doc, name);
6565
60.5k
  if (id == NULL) {
6566
8.79k
      xmlErrValidNode(ctxt, attr->parent, XML_DTD_UNKNOWN_ID,
6567
8.79k
     "IDREF attribute %s references an unknown ID \"%s\"\n",
6568
8.79k
       attr->name, name, NULL);
6569
8.79k
      ctxt->valid = 0;
6570
8.79k
  }
6571
60.5k
    } else if (attr->atype == XML_ATTRIBUTE_IDREFS) {
6572
6.71k
  xmlChar *dup, *str = NULL, *cur, save;
6573
6574
6.71k
  dup = xmlStrdup(name);
6575
6.71k
  if (dup == NULL) {
6576
0
      xmlVErrMemory(ctxt, "IDREFS split");
6577
0
      ctxt->valid = 0;
6578
0
      return;
6579
0
  }
6580
6.71k
  cur = dup;
6581
71.5k
  while (*cur != 0) {
6582
71.0k
      str = cur;
6583
537k
      while ((*cur != 0) && (!IS_BLANK_CH(*cur))) cur++;
6584
71.0k
      save = *cur;
6585
71.0k
      *cur = 0;
6586
71.0k
      id = xmlGetID(ctxt->doc, str);
6587
71.0k
      if (id == NULL) {
6588
70.9k
    xmlErrValidNode(ctxt, attr->parent, XML_DTD_UNKNOWN_ID,
6589
70.9k
     "IDREFS attribute %s references an unknown ID \"%s\"\n",
6590
70.9k
           attr->name, str, NULL);
6591
70.9k
    ctxt->valid = 0;
6592
70.9k
      }
6593
71.0k
      if (save == 0)
6594
6.21k
    break;
6595
64.8k
      *cur = save;
6596
68.0k
      while (IS_BLANK_CH(*cur)) cur++;
6597
64.8k
  }
6598
6.71k
  xmlFree(dup);
6599
6.71k
    }
6600
100k
}
6601
6602
/**
6603
 * xmlWalkValidateList:
6604
 * @data:  Contents of current link
6605
 * @user:  Value supplied by the user
6606
 *
6607
 * Returns 0 to abort the walk or 1 to continue
6608
 */
6609
static int
6610
xmlWalkValidateList(const void *data, void *user)
6611
100k
{
6612
100k
  xmlValidateMemoPtr memo = (xmlValidateMemoPtr)user;
6613
100k
  xmlValidateRef((xmlRefPtr)data, memo->ctxt, memo->name);
6614
100k
  return 1;
6615
100k
}
6616
6617
/**
6618
 * xmlValidateCheckRefCallback:
6619
 * @ref_list:  List of references
6620
 * @ctxt:  Validation context
6621
 * @name:  Name of ID we are searching for
6622
 *
6623
 */
6624
static void
6625
46.4k
xmlValidateCheckRefCallback(void *payload, void *data, const xmlChar *name) {
6626
46.4k
    xmlListPtr ref_list = (xmlListPtr) payload;
6627
46.4k
    xmlValidCtxtPtr ctxt = (xmlValidCtxtPtr) data;
6628
46.4k
    xmlValidateMemo memo;
6629
6630
46.4k
    if (ref_list == NULL)
6631
0
  return;
6632
46.4k
    memo.ctxt = ctxt;
6633
46.4k
    memo.name = name;
6634
6635
46.4k
    xmlListWalk(ref_list, xmlWalkValidateList, &memo);
6636
6637
46.4k
}
6638
6639
/**
6640
 * xmlValidateDocumentFinal:
6641
 * @ctxt:  the validation context
6642
 * @doc:  a document instance
6643
 *
6644
 * Does the final step for the document validation once all the
6645
 * incremental validation steps have been completed
6646
 *
6647
 * basically it does the following checks described by the XML Rec
6648
 *
6649
 * Check all the IDREF/IDREFS attributes definition for validity
6650
 *
6651
 * returns 1 if valid or 0 otherwise
6652
 */
6653
6654
int
6655
38.0k
xmlValidateDocumentFinal(xmlValidCtxtPtr ctxt, xmlDocPtr doc) {
6656
38.0k
    xmlRefTablePtr table;
6657
38.0k
    unsigned int save;
6658
6659
38.0k
    if (ctxt == NULL)
6660
0
        return(0);
6661
38.0k
    if (doc == NULL) {
6662
0
        xmlErrValid(ctxt, XML_DTD_NO_DOC,
6663
0
    "xmlValidateDocumentFinal: doc == NULL\n", NULL);
6664
0
  return(0);
6665
0
    }
6666
6667
    /* trick to get correct line id report */
6668
38.0k
    save = ctxt->flags;
6669
38.0k
    ctxt->flags &= ~XML_VCTXT_USE_PCTXT;
6670
6671
    /*
6672
     * Check all the NOTATION/NOTATIONS attributes
6673
     */
6674
    /*
6675
     * Check all the ENTITY/ENTITIES attributes definition for validity
6676
     */
6677
    /*
6678
     * Check all the IDREF/IDREFS attributes definition for validity
6679
     */
6680
38.0k
    table = (xmlRefTablePtr) doc->refs;
6681
38.0k
    ctxt->doc = doc;
6682
38.0k
    ctxt->valid = 1;
6683
38.0k
    xmlHashScan(table, xmlValidateCheckRefCallback, ctxt);
6684
6685
38.0k
    ctxt->flags = save;
6686
38.0k
    return(ctxt->valid);
6687
38.0k
}
6688
6689
/**
6690
 * xmlValidateDtd:
6691
 * @ctxt:  the validation context
6692
 * @doc:  a document instance
6693
 * @dtd:  a dtd instance
6694
 *
6695
 * Try to validate the document against the dtd instance
6696
 *
6697
 * Basically it does check all the definitions in the DtD.
6698
 * Note the the internal subset (if present) is de-coupled
6699
 * (i.e. not used), which could give problems if ID or IDREF
6700
 * is present.
6701
 *
6702
 * returns 1 if valid or 0 otherwise
6703
 */
6704
6705
int
6706
0
xmlValidateDtd(xmlValidCtxtPtr ctxt, xmlDocPtr doc, xmlDtdPtr dtd) {
6707
0
    int ret;
6708
0
    xmlDtdPtr oldExt, oldInt;
6709
0
    xmlNodePtr root;
6710
6711
0
    if (dtd == NULL) return(0);
6712
0
    if (doc == NULL) return(0);
6713
0
    oldExt = doc->extSubset;
6714
0
    oldInt = doc->intSubset;
6715
0
    doc->extSubset = dtd;
6716
0
    doc->intSubset = NULL;
6717
0
    ret = xmlValidateRoot(ctxt, doc);
6718
0
    if (ret == 0) {
6719
0
  doc->extSubset = oldExt;
6720
0
  doc->intSubset = oldInt;
6721
0
  return(ret);
6722
0
    }
6723
0
    if (doc->ids != NULL) {
6724
0
          xmlFreeIDTable(doc->ids);
6725
0
          doc->ids = NULL;
6726
0
    }
6727
0
    if (doc->refs != NULL) {
6728
0
          xmlFreeRefTable(doc->refs);
6729
0
          doc->refs = NULL;
6730
0
    }
6731
0
    root = xmlDocGetRootElement(doc);
6732
0
    ret = xmlValidateElement(ctxt, doc, root);
6733
0
    ret &= xmlValidateDocumentFinal(ctxt, doc);
6734
0
    doc->extSubset = oldExt;
6735
0
    doc->intSubset = oldInt;
6736
0
    return(ret);
6737
0
}
6738
6739
static void
6740
xmlValidateNotationCallback(void *payload, void *data,
6741
481k
                      const xmlChar *name ATTRIBUTE_UNUSED) {
6742
481k
    xmlEntityPtr cur = (xmlEntityPtr) payload;
6743
481k
    xmlValidCtxtPtr ctxt = (xmlValidCtxtPtr) data;
6744
481k
    if (cur == NULL)
6745
0
  return;
6746
481k
    if (cur->etype == XML_EXTERNAL_GENERAL_UNPARSED_ENTITY) {
6747
14.0k
  xmlChar *notation = cur->content;
6748
6749
14.0k
  if (notation != NULL) {
6750
13.8k
      int ret;
6751
6752
13.8k
      ret = xmlValidateNotationUse(ctxt, cur->doc, notation);
6753
13.8k
      if (ret != 1) {
6754
13.6k
    ctxt->valid = 0;
6755
13.6k
      }
6756
13.8k
  }
6757
14.0k
    }
6758
481k
}
6759
6760
static void
6761
xmlValidateAttributeCallback(void *payload, void *data,
6762
3.33M
                       const xmlChar *name ATTRIBUTE_UNUSED) {
6763
3.33M
    xmlAttributePtr cur = (xmlAttributePtr) payload;
6764
3.33M
    xmlValidCtxtPtr ctxt = (xmlValidCtxtPtr) data;
6765
3.33M
    int ret;
6766
3.33M
    xmlDocPtr doc;
6767
3.33M
    xmlElementPtr elem = NULL;
6768
6769
3.33M
    if (cur == NULL)
6770
0
  return;
6771
3.33M
    switch (cur->atype) {
6772
1.19M
  case XML_ATTRIBUTE_CDATA:
6773
2.09M
  case XML_ATTRIBUTE_ID:
6774
2.17M
  case XML_ATTRIBUTE_IDREF  :
6775
2.19M
  case XML_ATTRIBUTE_IDREFS:
6776
2.91M
  case XML_ATTRIBUTE_NMTOKEN:
6777
3.02M
  case XML_ATTRIBUTE_NMTOKENS:
6778
3.30M
  case XML_ATTRIBUTE_ENUMERATION:
6779
3.30M
      break;
6780
10.6k
  case XML_ATTRIBUTE_ENTITY:
6781
13.5k
  case XML_ATTRIBUTE_ENTITIES:
6782
31.7k
  case XML_ATTRIBUTE_NOTATION:
6783
31.7k
      if (cur->defaultValue != NULL) {
6784
6785
13.8k
    ret = xmlValidateAttributeValue2(ctxt, ctxt->doc, cur->name,
6786
13.8k
                               cur->atype, cur->defaultValue);
6787
13.8k
    if ((ret == 0) && (ctxt->valid == 1))
6788
4.46k
        ctxt->valid = 0;
6789
13.8k
      }
6790
31.7k
      if (cur->tree != NULL) {
6791
18.2k
    xmlEnumerationPtr tree = cur->tree;
6792
53.0k
    while (tree != NULL) {
6793
34.8k
        ret = xmlValidateAttributeValue2(ctxt, ctxt->doc,
6794
34.8k
            cur->name, cur->atype, tree->name);
6795
34.8k
        if ((ret == 0) && (ctxt->valid == 1))
6796
4.42k
      ctxt->valid = 0;
6797
34.8k
        tree = tree->next;
6798
34.8k
    }
6799
18.2k
      }
6800
3.33M
    }
6801
3.33M
    if (cur->atype == XML_ATTRIBUTE_NOTATION) {
6802
18.2k
  doc = cur->doc;
6803
18.2k
  if (cur->elem == NULL) {
6804
0
      xmlErrValid(ctxt, XML_ERR_INTERNAL_ERROR,
6805
0
       "xmlValidateAttributeCallback(%s): internal error\n",
6806
0
       (const char *) cur->name);
6807
0
      return;
6808
0
  }
6809
6810
18.2k
  if (doc != NULL)
6811
18.2k
      elem = xmlGetDtdElementDesc(doc->intSubset, cur->elem);
6812
18.2k
  if ((elem == NULL) && (doc != NULL))
6813
5.83k
      elem = xmlGetDtdElementDesc(doc->extSubset, cur->elem);
6814
18.2k
  if ((elem == NULL) && (cur->parent != NULL) &&
6815
18.2k
      (cur->parent->type == XML_DTD_NODE))
6816
0
      elem = xmlGetDtdElementDesc((xmlDtdPtr) cur->parent, cur->elem);
6817
18.2k
  if (elem == NULL) {
6818
0
      xmlErrValidNode(ctxt, NULL, XML_DTD_UNKNOWN_ELEM,
6819
0
       "attribute %s: could not find decl for element %s\n",
6820
0
       cur->name, cur->elem, NULL);
6821
0
      return;
6822
0
  }
6823
18.2k
  if (elem->etype == XML_ELEMENT_TYPE_EMPTY) {
6824
2.77k
      xmlErrValidNode(ctxt, NULL, XML_DTD_EMPTY_NOTATION,
6825
2.77k
       "NOTATION attribute %s declared for EMPTY element %s\n",
6826
2.77k
       cur->name, cur->elem, NULL);
6827
2.77k
      ctxt->valid = 0;
6828
2.77k
  }
6829
18.2k
    }
6830
3.33M
}
6831
6832
/**
6833
 * xmlValidateDtdFinal:
6834
 * @ctxt:  the validation context
6835
 * @doc:  a document instance
6836
 *
6837
 * Does the final step for the dtds validation once all the
6838
 * subsets have been parsed
6839
 *
6840
 * basically it does the following checks described by the XML Rec
6841
 * - check that ENTITY and ENTITIES type attributes default or
6842
 *   possible values matches one of the defined entities.
6843
 * - check that NOTATION type attributes default or
6844
 *   possible values matches one of the defined notations.
6845
 *
6846
 * returns 1 if valid or 0 if invalid and -1 if not well-formed
6847
 */
6848
6849
int
6850
210k
xmlValidateDtdFinal(xmlValidCtxtPtr ctxt, xmlDocPtr doc) {
6851
210k
    xmlDtdPtr dtd;
6852
210k
    xmlAttributeTablePtr table;
6853
210k
    xmlEntitiesTablePtr entities;
6854
6855
210k
    if ((doc == NULL) || (ctxt == NULL)) return(0);
6856
210k
    if ((doc->intSubset == NULL) && (doc->extSubset == NULL))
6857
0
  return(0);
6858
210k
    ctxt->doc = doc;
6859
210k
    ctxt->valid = 1;
6860
210k
    dtd = doc->intSubset;
6861
210k
    if ((dtd != NULL) && (dtd->attributes != NULL)) {
6862
92.5k
  table = (xmlAttributeTablePtr) dtd->attributes;
6863
92.5k
  xmlHashScan(table, xmlValidateAttributeCallback, ctxt);
6864
92.5k
    }
6865
210k
    if ((dtd != NULL) && (dtd->entities != NULL)) {
6866
80.9k
  entities = (xmlEntitiesTablePtr) dtd->entities;
6867
80.9k
  xmlHashScan(entities, xmlValidateNotationCallback, ctxt);
6868
80.9k
    }
6869
210k
    dtd = doc->extSubset;
6870
210k
    if ((dtd != NULL) && (dtd->attributes != NULL)) {
6871
38.4k
  table = (xmlAttributeTablePtr) dtd->attributes;
6872
38.4k
  xmlHashScan(table, xmlValidateAttributeCallback, ctxt);
6873
38.4k
    }
6874
210k
    if ((dtd != NULL) && (dtd->entities != NULL)) {
6875
17.7k
  entities = (xmlEntitiesTablePtr) dtd->entities;
6876
17.7k
  xmlHashScan(entities, xmlValidateNotationCallback, ctxt);
6877
17.7k
    }
6878
210k
    return(ctxt->valid);
6879
210k
}
6880
6881
/**
6882
 * xmlValidateDocument:
6883
 * @ctxt:  the validation context
6884
 * @doc:  a document instance
6885
 *
6886
 * Try to validate the document instance
6887
 *
6888
 * basically it does the all the checks described by the XML Rec
6889
 * i.e. validates the internal and external subset (if present)
6890
 * and validate the document tree.
6891
 *
6892
 * returns 1 if valid or 0 otherwise
6893
 */
6894
6895
int
6896
0
xmlValidateDocument(xmlValidCtxtPtr ctxt, xmlDocPtr doc) {
6897
0
    int ret;
6898
0
    xmlNodePtr root;
6899
6900
0
    if (doc == NULL)
6901
0
        return(0);
6902
0
    if ((doc->intSubset == NULL) && (doc->extSubset == NULL)) {
6903
0
        xmlErrValid(ctxt, XML_DTD_NO_DTD,
6904
0
              "no DTD found!\n", NULL);
6905
0
  return(0);
6906
0
    }
6907
0
    if ((doc->intSubset != NULL) && ((doc->intSubset->SystemID != NULL) ||
6908
0
  (doc->intSubset->ExternalID != NULL)) && (doc->extSubset == NULL)) {
6909
0
  xmlChar *sysID;
6910
0
  if (doc->intSubset->SystemID != NULL) {
6911
0
      sysID = xmlBuildURI(doc->intSubset->SystemID,
6912
0
      doc->URL);
6913
0
      if (sysID == NULL) {
6914
0
          xmlErrValid(ctxt, XML_DTD_LOAD_ERROR,
6915
0
      "Could not build URI for external subset \"%s\"\n",
6916
0
      (const char *) doc->intSubset->SystemID);
6917
0
    return 0;
6918
0
      }
6919
0
  } else
6920
0
      sysID = NULL;
6921
0
        doc->extSubset = xmlParseDTD(doc->intSubset->ExternalID,
6922
0
      (const xmlChar *)sysID);
6923
0
  if (sysID != NULL)
6924
0
      xmlFree(sysID);
6925
0
        if (doc->extSubset == NULL) {
6926
0
      if (doc->intSubset->SystemID != NULL) {
6927
0
    xmlErrValid(ctxt, XML_DTD_LOAD_ERROR,
6928
0
           "Could not load the external subset \"%s\"\n",
6929
0
           (const char *) doc->intSubset->SystemID);
6930
0
      } else {
6931
0
    xmlErrValid(ctxt, XML_DTD_LOAD_ERROR,
6932
0
           "Could not load the external subset \"%s\"\n",
6933
0
           (const char *) doc->intSubset->ExternalID);
6934
0
      }
6935
0
      return(0);
6936
0
  }
6937
0
    }
6938
6939
0
    if (doc->ids != NULL) {
6940
0
          xmlFreeIDTable(doc->ids);
6941
0
          doc->ids = NULL;
6942
0
    }
6943
0
    if (doc->refs != NULL) {
6944
0
          xmlFreeRefTable(doc->refs);
6945
0
          doc->refs = NULL;
6946
0
    }
6947
0
    ret = xmlValidateDtdFinal(ctxt, doc);
6948
0
    if (!xmlValidateRoot(ctxt, doc)) return(0);
6949
6950
0
    root = xmlDocGetRootElement(doc);
6951
0
    ret &= xmlValidateElement(ctxt, doc, root);
6952
0
    ret &= xmlValidateDocumentFinal(ctxt, doc);
6953
0
    return(ret);
6954
0
}
6955
6956
/************************************************************************
6957
 *                  *
6958
 *    Routines for dynamic validation editing     *
6959
 *                  *
6960
 ************************************************************************/
6961
6962
/**
6963
 * xmlValidGetPotentialChildren:
6964
 * @ctree:  an element content tree
6965
 * @names:  an array to store the list of child names
6966
 * @len:  a pointer to the number of element in the list
6967
 * @max:  the size of the array
6968
 *
6969
 * Build/extend a list of  potential children allowed by the content tree
6970
 *
6971
 * returns the number of element in the list, or -1 in case of error.
6972
 */
6973
6974
int
6975
xmlValidGetPotentialChildren(xmlElementContent *ctree,
6976
                             const xmlChar **names,
6977
0
                             int *len, int max) {
6978
0
    int i;
6979
6980
0
    if ((ctree == NULL) || (names == NULL) || (len == NULL))
6981
0
        return(-1);
6982
0
    if (*len >= max) return(*len);
6983
6984
0
    switch (ctree->type) {
6985
0
  case XML_ELEMENT_CONTENT_PCDATA:
6986
0
      for (i = 0; i < *len;i++)
6987
0
    if (xmlStrEqual(BAD_CAST "#PCDATA", names[i])) return(*len);
6988
0
      names[(*len)++] = BAD_CAST "#PCDATA";
6989
0
      break;
6990
0
  case XML_ELEMENT_CONTENT_ELEMENT:
6991
0
      for (i = 0; i < *len;i++)
6992
0
    if (xmlStrEqual(ctree->name, names[i])) return(*len);
6993
0
      names[(*len)++] = ctree->name;
6994
0
      break;
6995
0
  case XML_ELEMENT_CONTENT_SEQ:
6996
0
      xmlValidGetPotentialChildren(ctree->c1, names, len, max);
6997
0
      xmlValidGetPotentialChildren(ctree->c2, names, len, max);
6998
0
      break;
6999
0
  case XML_ELEMENT_CONTENT_OR:
7000
0
      xmlValidGetPotentialChildren(ctree->c1, names, len, max);
7001
0
      xmlValidGetPotentialChildren(ctree->c2, names, len, max);
7002
0
      break;
7003
0
   }
7004
7005
0
   return(*len);
7006
0
}
7007
7008
/*
7009
 * Dummy function to suppress messages while we try out valid elements
7010
 */
7011
static void xmlNoValidityErr(void *ctx ATTRIBUTE_UNUSED,
7012
0
                                const char *msg ATTRIBUTE_UNUSED, ...) {
7013
0
    return;
7014
0
}
7015
7016
/**
7017
 * xmlValidGetValidElements:
7018
 * @prev:  an element to insert after
7019
 * @next:  an element to insert next
7020
 * @names:  an array to store the list of child names
7021
 * @max:  the size of the array
7022
 *
7023
 * This function returns the list of authorized children to insert
7024
 * within an existing tree while respecting the validity constraints
7025
 * forced by the Dtd. The insertion point is defined using @prev and
7026
 * @next in the following ways:
7027
 *  to insert before 'node': xmlValidGetValidElements(node->prev, node, ...
7028
 *  to insert next 'node': xmlValidGetValidElements(node, node->next, ...
7029
 *  to replace 'node': xmlValidGetValidElements(node->prev, node->next, ...
7030
 *  to prepend a child to 'node': xmlValidGetValidElements(NULL, node->childs,
7031
 *  to append a child to 'node': xmlValidGetValidElements(node->last, NULL, ...
7032
 *
7033
 * pointers to the element names are inserted at the beginning of the array
7034
 * and do not need to be freed.
7035
 *
7036
 * returns the number of element in the list, or -1 in case of error. If
7037
 *    the function returns the value @max the caller is invited to grow the
7038
 *    receiving array and retry.
7039
 */
7040
7041
int
7042
xmlValidGetValidElements(xmlNode *prev, xmlNode *next, const xmlChar **names,
7043
0
                         int max) {
7044
0
    xmlValidCtxt vctxt;
7045
0
    int nb_valid_elements = 0;
7046
0
    const xmlChar *elements[256]={0};
7047
0
    int nb_elements = 0, i;
7048
0
    const xmlChar *name;
7049
7050
0
    xmlNode *ref_node;
7051
0
    xmlNode *parent;
7052
0
    xmlNode *test_node;
7053
7054
0
    xmlNode *prev_next;
7055
0
    xmlNode *next_prev;
7056
0
    xmlNode *parent_childs;
7057
0
    xmlNode *parent_last;
7058
7059
0
    xmlElement *element_desc;
7060
7061
0
    if (prev == NULL && next == NULL)
7062
0
        return(-1);
7063
7064
0
    if (names == NULL) return(-1);
7065
0
    if (max <= 0) return(-1);
7066
7067
0
    memset(&vctxt, 0, sizeof (xmlValidCtxt));
7068
0
    vctxt.error = xmlNoValidityErr; /* this suppresses err/warn output */
7069
7070
0
    nb_valid_elements = 0;
7071
0
    ref_node = prev ? prev : next;
7072
0
    parent = ref_node->parent;
7073
7074
    /*
7075
     * Retrieves the parent element declaration
7076
     */
7077
0
    element_desc = xmlGetDtdElementDesc(parent->doc->intSubset,
7078
0
                                         parent->name);
7079
0
    if ((element_desc == NULL) && (parent->doc->extSubset != NULL))
7080
0
        element_desc = xmlGetDtdElementDesc(parent->doc->extSubset,
7081
0
                                             parent->name);
7082
0
    if (element_desc == NULL) return(-1);
7083
7084
    /*
7085
     * Do a backup of the current tree structure
7086
     */
7087
0
    prev_next = prev ? prev->next : NULL;
7088
0
    next_prev = next ? next->prev : NULL;
7089
0
    parent_childs = parent->children;
7090
0
    parent_last = parent->last;
7091
7092
    /*
7093
     * Creates a dummy node and insert it into the tree
7094
     */
7095
0
    test_node = xmlNewDocNode (ref_node->doc, NULL, BAD_CAST "<!dummy?>", NULL);
7096
0
    if (test_node == NULL)
7097
0
        return(-1);
7098
7099
0
    test_node->parent = parent;
7100
0
    test_node->prev = prev;
7101
0
    test_node->next = next;
7102
0
    name = test_node->name;
7103
7104
0
    if (prev) prev->next = test_node;
7105
0
    else parent->children = test_node;
7106
7107
0
    if (next) next->prev = test_node;
7108
0
    else parent->last = test_node;
7109
7110
    /*
7111
     * Insert each potential child node and check if the parent is
7112
     * still valid
7113
     */
7114
0
    nb_elements = xmlValidGetPotentialChildren(element_desc->content,
7115
0
           elements, &nb_elements, 256);
7116
7117
0
    for (i = 0;i < nb_elements;i++) {
7118
0
  test_node->name = elements[i];
7119
0
  if (xmlValidateOneElement(&vctxt, parent->doc, parent)) {
7120
0
      int j;
7121
7122
0
      for (j = 0; j < nb_valid_elements;j++)
7123
0
    if (xmlStrEqual(elements[i], names[j])) break;
7124
0
      names[nb_valid_elements++] = elements[i];
7125
0
      if (nb_valid_elements >= max) break;
7126
0
  }
7127
0
    }
7128
7129
    /*
7130
     * Restore the tree structure
7131
     */
7132
0
    if (prev) prev->next = prev_next;
7133
0
    if (next) next->prev = next_prev;
7134
0
    parent->children = parent_childs;
7135
0
    parent->last = parent_last;
7136
7137
    /*
7138
     * Free up the dummy node
7139
     */
7140
0
    test_node->name = name;
7141
0
    xmlFreeNode(test_node);
7142
7143
0
    return(nb_valid_elements);
7144
0
}
7145
#endif /* LIBXML_VALID_ENABLED */
7146