src/server/plugins/postgresql/webdav.h

Tue, 20 Aug 2024 12:34:32 +0200

author
Olaf Wintermann <olaf.wintermann@gmail.com>
date
Tue, 20 Aug 2024 12:34:32 +0200
changeset 553
a166a15f7b74
parent 415
d938228c382e
permissions
-rw-r--r--

fix pg ext uninitialized memory acces - fixes #420

/*
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
 *
 * Copyright 2022 Olaf Wintermann. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *   1. Redistributions of source code must retain the above copyright
 *      notice, this list of conditions and the following disclaimer.
 *
 *   2. Redistributions in binary form must reproduce the above copyright
 *      notice, this list of conditions and the following disclaimer in the
 *      documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

#ifndef WS_PG_WEBDAV_H
#define WS_PG_WEBDAV_H

#include "../../public/nsapi.h"
#include "../../public/webdav.h"

#include "config.h"

#include <libpq-fe.h>
#include <cx/buffer.h>

#ifdef __cplusplus
extern "C" {
#endif
    
#define PG_MAX_PATH_LEN 0x8000
    
typedef struct PgWebdavBackend {
    ResourceData *pg_resource;
    PGconn *connection;
    PgRepository *repository;
    char root_resource_id_str[32];
} PgWebdavBackend;

typedef struct PgPropfindExtCol {
    /*
     * property extension config
     */
    PgPropertyStoreExt *ext;
    /*
     * Result field number
     */
    int field_num;
} PgPropfindExtCol;
    
typedef struct PgPropfind {
    const char *path;
    int64_t resource_id;
    WebdavVFSProperties vfsproperties;
    PGresult *result;
    PgPropfindExtCol *ext;
    size_t numext;
    int nrows;
} PgPropfind;

typedef struct PgProppatchExtProp PgProppatchExtProp;
struct PgProppatchExtProp {
    PgPropertyStoreExt *column;
    WebdavProperty *property;
    PgProppatchExtProp *next;
};

typedef struct {
    PgProppatchExtProp *set_begin;
    PgProppatchExtProp *set_end;
    PgProppatchExtProp *remove_begin;
    PgProppatchExtProp *remove_end;
    WSBool isused;
} PgProppatchExt;

typedef struct {
    int64_t resource_id;
    PgProppatchExt *ext;
    size_t numext;
    WSBool extensions_used;
} PgProppatch;

void* pg_webdav_init(ServerConfiguration *cfg, pool_handle_t *pool, WSConfigNode *config);
WebdavBackend* pg_webdav_create(Session *sn, Request *rq, pblock *pb, void *initData);
WebdavBackend* pg_webdav_create_from_resdata(Session *sn, Request *rq, PgRepository *repo, ResourceData *resdata);

WebdavBackend* pg_webdav_prop_create(Session *sn, Request *rq, pblock *pb);

int pg_create_property_param_arrays(WebdavPList *plist, CxBuffer *xmlns, CxBuffer *pname);

/* ----------------- webdav backend functions ----------------- */
int pg_dav_propfind_init(
        WebdavPropfindRequest *rq,
        const char *path,
        const char *href,
        WebdavPList **outplist);

int pg_dav_propfind_do(
	WebdavPropfindRequest *rq,
	WebdavResponse *response,
	VFS_DIR parent,
	WebdavResource *resource,
	struct stat *s);

int pg_dav_propfind_finish(WebdavPropfindRequest *rq);

int pg_dav_proppatch_do(
	WebdavProppatchRequest *request,
	WebdavResource *response,
	VFSFile *file,
	WebdavPList **out_set,
	WebdavPList **out_remove);

int pg_dav_proppatch_finish(
	WebdavProppatchRequest *request,
	WebdavResource *response,
	VFSFile *file,
	WSBool commit);

#ifdef __cplusplus
}
#endif

#endif /* PG_WEBDAV_H */

mercurial