author | Lars Hjemli <hjemli@gmail.com> | 2007-05-18 11:06:45 (UTC) |
---|---|---|
committer | Lars Hjemli <hjemli@gmail.com> | 2007-05-18 20:51:02 (UTC) |
commit | 3de63b264c36888dfd42dfdf3fc0aad4ce0c2b5c (patch) (unidiff) | |
tree | 6a6af99ad81e5dcecf0de6469d09f0d00789593e | |
parent | 72fa5c63f80262019d807658cc537c9897c4b1d1 (diff) | |
download | cgit-3de63b264c36888dfd42dfdf3fc0aad4ce0c2b5c.zip cgit-3de63b264c36888dfd42dfdf3fc0aad4ce0c2b5c.tar.gz cgit-3de63b264c36888dfd42dfdf3fc0aad4ce0c2b5c.tar.bz2 |
Don't be fooled by trailing '/' in url-parameter
cgit_parse_url() didn't check if the path-part of urls contained a
real path or just a trailing slash. This made the log-page die since
the path filtering supplied an invalid path argument. This fixes it.
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
-rw-r--r-- | parsing.c | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -1,292 +1,293 @@ | |||
1 | /* config.c: parsing of config files | 1 | /* config.c: parsing of config files |
2 | * | 2 | * |
3 | * Copyright (C) 2006 Lars Hjemli | 3 | * Copyright (C) 2006 Lars Hjemli |
4 | * | 4 | * |
5 | * Licensed under GNU General Public License v2 | 5 | * Licensed under GNU General Public License v2 |
6 | * (see COPYING for full license text) | 6 | * (see COPYING for full license text) |
7 | */ | 7 | */ |
8 | 8 | ||
9 | #include "cgit.h" | 9 | #include "cgit.h" |
10 | 10 | ||
11 | int next_char(FILE *f) | 11 | int next_char(FILE *f) |
12 | { | 12 | { |
13 | int c = fgetc(f); | 13 | int c = fgetc(f); |
14 | if (c=='\r') { | 14 | if (c=='\r') { |
15 | c = fgetc(f); | 15 | c = fgetc(f); |
16 | if (c!='\n') { | 16 | if (c!='\n') { |
17 | ungetc(c, f); | 17 | ungetc(c, f); |
18 | c = '\r'; | 18 | c = '\r'; |
19 | } | 19 | } |
20 | } | 20 | } |
21 | return c; | 21 | return c; |
22 | } | 22 | } |
23 | 23 | ||
24 | void skip_line(FILE *f) | 24 | void skip_line(FILE *f) |
25 | { | 25 | { |
26 | int c; | 26 | int c; |
27 | 27 | ||
28 | while((c=next_char(f)) && c!='\n' && c!=EOF) | 28 | while((c=next_char(f)) && c!='\n' && c!=EOF) |
29 | ; | 29 | ; |
30 | } | 30 | } |
31 | 31 | ||
32 | int read_config_line(FILE *f, char *line, const char **value, int bufsize) | 32 | int read_config_line(FILE *f, char *line, const char **value, int bufsize) |
33 | { | 33 | { |
34 | int i = 0, isname = 0; | 34 | int i = 0, isname = 0; |
35 | 35 | ||
36 | *value = NULL; | 36 | *value = NULL; |
37 | while(i<bufsize-1) { | 37 | while(i<bufsize-1) { |
38 | int c = next_char(f); | 38 | int c = next_char(f); |
39 | if (!isname && (c=='#' || c==';')) { | 39 | if (!isname && (c=='#' || c==';')) { |
40 | skip_line(f); | 40 | skip_line(f); |
41 | continue; | 41 | continue; |
42 | } | 42 | } |
43 | if (!isname && isspace(c)) | 43 | if (!isname && isspace(c)) |
44 | continue; | 44 | continue; |
45 | 45 | ||
46 | if (c=='=' && !*value) { | 46 | if (c=='=' && !*value) { |
47 | line[i] = 0; | 47 | line[i] = 0; |
48 | *value = &line[i+1]; | 48 | *value = &line[i+1]; |
49 | } else if (c=='\n' && !isname) { | 49 | } else if (c=='\n' && !isname) { |
50 | i = 0; | 50 | i = 0; |
51 | continue; | 51 | continue; |
52 | } else if (c=='\n' || c==EOF) { | 52 | } else if (c=='\n' || c==EOF) { |
53 | line[i] = 0; | 53 | line[i] = 0; |
54 | break; | 54 | break; |
55 | } else { | 55 | } else { |
56 | line[i]=c; | 56 | line[i]=c; |
57 | } | 57 | } |
58 | isname = 1; | 58 | isname = 1; |
59 | i++; | 59 | i++; |
60 | } | 60 | } |
61 | line[i+1] = 0; | 61 | line[i+1] = 0; |
62 | return i; | 62 | return i; |
63 | } | 63 | } |
64 | 64 | ||
65 | int cgit_read_config(const char *filename, configfn fn) | 65 | int cgit_read_config(const char *filename, configfn fn) |
66 | { | 66 | { |
67 | static int nesting; | 67 | static int nesting; |
68 | int len; | 68 | int len; |
69 | char line[256]; | 69 | char line[256]; |
70 | const char *value; | 70 | const char *value; |
71 | FILE *f; | 71 | FILE *f; |
72 | 72 | ||
73 | /* cancel deeply nested include-commands */ | 73 | /* cancel deeply nested include-commands */ |
74 | if (nesting > 8) | 74 | if (nesting > 8) |
75 | return -1; | 75 | return -1; |
76 | if (!(f = fopen(filename, "r"))) | 76 | if (!(f = fopen(filename, "r"))) |
77 | return -1; | 77 | return -1; |
78 | nesting++; | 78 | nesting++; |
79 | while((len = read_config_line(f, line, &value, sizeof(line))) > 0) | 79 | while((len = read_config_line(f, line, &value, sizeof(line))) > 0) |
80 | (*fn)(line, value); | 80 | (*fn)(line, value); |
81 | nesting--; | 81 | nesting--; |
82 | fclose(f); | 82 | fclose(f); |
83 | return 0; | 83 | return 0; |
84 | } | 84 | } |
85 | 85 | ||
86 | char *convert_query_hexchar(char *txt) | 86 | char *convert_query_hexchar(char *txt) |
87 | { | 87 | { |
88 | int d1, d2; | 88 | int d1, d2; |
89 | if (strlen(txt) < 3) { | 89 | if (strlen(txt) < 3) { |
90 | *txt = '\0'; | 90 | *txt = '\0'; |
91 | return txt-1; | 91 | return txt-1; |
92 | } | 92 | } |
93 | d1 = hextoint(*(txt+1)); | 93 | d1 = hextoint(*(txt+1)); |
94 | d2 = hextoint(*(txt+2)); | 94 | d2 = hextoint(*(txt+2)); |
95 | if (d1<0 || d2<0) { | 95 | if (d1<0 || d2<0) { |
96 | strcpy(txt, txt+3); | 96 | strcpy(txt, txt+3); |
97 | return txt-1; | 97 | return txt-1; |
98 | } else { | 98 | } else { |
99 | *txt = d1 * 16 + d2; | 99 | *txt = d1 * 16 + d2; |
100 | strcpy(txt+1, txt+3); | 100 | strcpy(txt+1, txt+3); |
101 | return txt; | 101 | return txt; |
102 | } | 102 | } |
103 | } | 103 | } |
104 | 104 | ||
105 | int cgit_parse_query(char *txt, configfn fn) | 105 | int cgit_parse_query(char *txt, configfn fn) |
106 | { | 106 | { |
107 | char *t, *value = NULL, c; | 107 | char *t, *value = NULL, c; |
108 | 108 | ||
109 | if (!txt) | 109 | if (!txt) |
110 | return 0; | 110 | return 0; |
111 | 111 | ||
112 | t = txt = xstrdup(txt); | 112 | t = txt = xstrdup(txt); |
113 | 113 | ||
114 | while((c=*t) != '\0') { | 114 | while((c=*t) != '\0') { |
115 | if (c=='=') { | 115 | if (c=='=') { |
116 | *t = '\0'; | 116 | *t = '\0'; |
117 | value = t+1; | 117 | value = t+1; |
118 | } else if (c=='+') { | 118 | } else if (c=='+') { |
119 | *t = ' '; | 119 | *t = ' '; |
120 | } else if (c=='%') { | 120 | } else if (c=='%') { |
121 | t = convert_query_hexchar(t); | 121 | t = convert_query_hexchar(t); |
122 | } else if (c=='&') { | 122 | } else if (c=='&') { |
123 | *t = '\0'; | 123 | *t = '\0'; |
124 | (*fn)(txt, value); | 124 | (*fn)(txt, value); |
125 | txt = t+1; | 125 | txt = t+1; |
126 | value = NULL; | 126 | value = NULL; |
127 | } | 127 | } |
128 | t++; | 128 | t++; |
129 | } | 129 | } |
130 | if (t!=txt) | 130 | if (t!=txt) |
131 | (*fn)(txt, value); | 131 | (*fn)(txt, value); |
132 | return 0; | 132 | return 0; |
133 | } | 133 | } |
134 | 134 | ||
135 | /* | 135 | /* |
136 | * url syntax: [repo ['/' cmd [ '/' path]]] | 136 | * url syntax: [repo ['/' cmd [ '/' path]]] |
137 | * repo: any valid repo url, may contain '/' | 137 | * repo: any valid repo url, may contain '/' |
138 | * cmd: log | commit | diff | tree | view | blob | snapshot | 138 | * cmd: log | commit | diff | tree | view | blob | snapshot |
139 | * path: any valid path, may contain '/' | 139 | * path: any valid path, may contain '/' |
140 | * | 140 | * |
141 | */ | 141 | */ |
142 | void cgit_parse_url(const char *url) | 142 | void cgit_parse_url(const char *url) |
143 | { | 143 | { |
144 | char *cmd, *p; | 144 | char *cmd, *p; |
145 | 145 | ||
146 | cgit_repo = NULL; | 146 | cgit_repo = NULL; |
147 | if (!url || url[0] == '\0') | 147 | if (!url || url[0] == '\0') |
148 | return; | 148 | return; |
149 | 149 | ||
150 | cgit_repo = cgit_get_repoinfo(url); | 150 | cgit_repo = cgit_get_repoinfo(url); |
151 | if (cgit_repo) { | 151 | if (cgit_repo) { |
152 | cgit_query_repo = cgit_repo->url; | 152 | cgit_query_repo = cgit_repo->url; |
153 | return; | 153 | return; |
154 | } | 154 | } |
155 | 155 | ||
156 | cmd = strchr(url, '/'); | 156 | cmd = strchr(url, '/'); |
157 | while (!cgit_repo && cmd) { | 157 | while (!cgit_repo && cmd) { |
158 | cmd[0] = '\0'; | 158 | cmd[0] = '\0'; |
159 | cgit_repo = cgit_get_repoinfo(url); | 159 | cgit_repo = cgit_get_repoinfo(url); |
160 | if (cgit_repo == NULL) { | 160 | if (cgit_repo == NULL) { |
161 | cmd[0] = '/'; | 161 | cmd[0] = '/'; |
162 | cmd = strchr(cmd + 1, '/'); | 162 | cmd = strchr(cmd + 1, '/'); |
163 | continue; | 163 | continue; |
164 | } | 164 | } |
165 | 165 | ||
166 | cgit_query_repo = cgit_repo->url; | 166 | cgit_query_repo = cgit_repo->url; |
167 | p = strchr(cmd + 1, '/'); | 167 | p = strchr(cmd + 1, '/'); |
168 | if (p) { | 168 | if (p) { |
169 | p[0] = '\0'; | 169 | p[0] = '\0'; |
170 | cgit_query_path = xstrdup(p + 1); | 170 | if (p[1]) |
171 | cgit_query_path = xstrdup(p + 1); | ||
171 | } | 172 | } |
172 | cgit_cmd = cgit_get_cmd_index(cmd + 1); | 173 | cgit_cmd = cgit_get_cmd_index(cmd + 1); |
173 | cgit_query_page = xstrdup(cmd + 1); | 174 | cgit_query_page = xstrdup(cmd + 1); |
174 | return; | 175 | return; |
175 | } | 176 | } |
176 | } | 177 | } |
177 | 178 | ||
178 | char *substr(const char *head, const char *tail) | 179 | char *substr(const char *head, const char *tail) |
179 | { | 180 | { |
180 | char *buf; | 181 | char *buf; |
181 | 182 | ||
182 | buf = xmalloc(tail - head + 1); | 183 | buf = xmalloc(tail - head + 1); |
183 | strncpy(buf, head, tail - head); | 184 | strncpy(buf, head, tail - head); |
184 | buf[tail - head] = '\0'; | 185 | buf[tail - head] = '\0'; |
185 | return buf; | 186 | return buf; |
186 | } | 187 | } |
187 | 188 | ||
188 | struct commitinfo *cgit_parse_commit(struct commit *commit) | 189 | struct commitinfo *cgit_parse_commit(struct commit *commit) |
189 | { | 190 | { |
190 | struct commitinfo *ret; | 191 | struct commitinfo *ret; |
191 | char *p = commit->buffer, *t = commit->buffer; | 192 | char *p = commit->buffer, *t = commit->buffer; |
192 | 193 | ||
193 | ret = xmalloc(sizeof(*ret)); | 194 | ret = xmalloc(sizeof(*ret)); |
194 | ret->commit = commit; | 195 | ret->commit = commit; |
195 | ret->author = NULL; | 196 | ret->author = NULL; |
196 | ret->author_email = NULL; | 197 | ret->author_email = NULL; |
197 | ret->committer = NULL; | 198 | ret->committer = NULL; |
198 | ret->committer_email = NULL; | 199 | ret->committer_email = NULL; |
199 | ret->subject = NULL; | 200 | ret->subject = NULL; |
200 | ret->msg = NULL; | 201 | ret->msg = NULL; |
201 | 202 | ||
202 | if (strncmp(p, "tree ", 5)) | 203 | if (strncmp(p, "tree ", 5)) |
203 | die("Bad commit: %s", sha1_to_hex(commit->object.sha1)); | 204 | die("Bad commit: %s", sha1_to_hex(commit->object.sha1)); |
204 | else | 205 | else |
205 | p += 46; // "tree " + hex[40] + "\n" | 206 | p += 46; // "tree " + hex[40] + "\n" |
206 | 207 | ||
207 | while (!strncmp(p, "parent ", 7)) | 208 | while (!strncmp(p, "parent ", 7)) |
208 | p += 48; // "parent " + hex[40] + "\n" | 209 | p += 48; // "parent " + hex[40] + "\n" |
209 | 210 | ||
210 | if (!strncmp(p, "author ", 7)) { | 211 | if (!strncmp(p, "author ", 7)) { |
211 | p += 7; | 212 | p += 7; |
212 | t = strchr(p, '<') - 1; | 213 | t = strchr(p, '<') - 1; |
213 | ret->author = substr(p, t); | 214 | ret->author = substr(p, t); |
214 | p = t; | 215 | p = t; |
215 | t = strchr(t, '>') + 1; | 216 | t = strchr(t, '>') + 1; |
216 | ret->author_email = substr(p, t); | 217 | ret->author_email = substr(p, t); |
217 | ret->author_date = atol(++t); | 218 | ret->author_date = atol(++t); |
218 | p = strchr(t, '\n') + 1; | 219 | p = strchr(t, '\n') + 1; |
219 | } | 220 | } |
220 | 221 | ||
221 | if (!strncmp(p, "committer ", 9)) { | 222 | if (!strncmp(p, "committer ", 9)) { |
222 | p += 9; | 223 | p += 9; |
223 | t = strchr(p, '<') - 1; | 224 | t = strchr(p, '<') - 1; |
224 | ret->committer = substr(p, t); | 225 | ret->committer = substr(p, t); |
225 | p = t; | 226 | p = t; |
226 | t = strchr(t, '>') + 1; | 227 | t = strchr(t, '>') + 1; |
227 | ret->committer_email = substr(p, t); | 228 | ret->committer_email = substr(p, t); |
228 | ret->committer_date = atol(++t); | 229 | ret->committer_date = atol(++t); |
229 | p = strchr(t, '\n') + 1; | 230 | p = strchr(t, '\n') + 1; |
230 | } | 231 | } |
231 | 232 | ||
232 | while (*p == '\n') | 233 | while (*p == '\n') |
233 | p = strchr(p, '\n') + 1; | 234 | p = strchr(p, '\n') + 1; |
234 | 235 | ||
235 | t = strchr(p, '\n'); | 236 | t = strchr(p, '\n'); |
236 | if (t && *t) { | 237 | if (t && *t) { |
237 | ret->subject = substr(p, t); | 238 | ret->subject = substr(p, t); |
238 | p = t + 1; | 239 | p = t + 1; |
239 | 240 | ||
240 | while (*p == '\n') | 241 | while (*p == '\n') |
241 | p = strchr(p, '\n') + 1; | 242 | p = strchr(p, '\n') + 1; |
242 | ret->msg = p; | 243 | ret->msg = p; |
243 | } | 244 | } |
244 | return ret; | 245 | return ret; |
245 | } | 246 | } |
246 | 247 | ||
247 | 248 | ||
248 | struct taginfo *cgit_parse_tag(struct tag *tag) | 249 | struct taginfo *cgit_parse_tag(struct tag *tag) |
249 | { | 250 | { |
250 | void *data; | 251 | void *data; |
251 | enum object_type type; | 252 | enum object_type type; |
252 | unsigned long size; | 253 | unsigned long size; |
253 | char *p, *t; | 254 | char *p, *t; |
254 | struct taginfo *ret; | 255 | struct taginfo *ret; |
255 | 256 | ||
256 | data = read_sha1_file(tag->object.sha1, &type, &size); | 257 | data = read_sha1_file(tag->object.sha1, &type, &size); |
257 | if (!data || type != OBJ_TAG) { | 258 | if (!data || type != OBJ_TAG) { |
258 | free(data); | 259 | free(data); |
259 | return 0; | 260 | return 0; |
260 | } | 261 | } |
261 | 262 | ||
262 | ret = xmalloc(sizeof(*ret)); | 263 | ret = xmalloc(sizeof(*ret)); |
263 | ret->tagger = NULL; | 264 | ret->tagger = NULL; |
264 | ret->tagger_email = NULL; | 265 | ret->tagger_email = NULL; |
265 | ret->tagger_date = 0; | 266 | ret->tagger_date = 0; |
266 | ret->msg = NULL; | 267 | ret->msg = NULL; |
267 | 268 | ||
268 | p = data; | 269 | p = data; |
269 | 270 | ||
270 | while (p && *p) { | 271 | while (p && *p) { |
271 | if (*p == '\n') | 272 | if (*p == '\n') |
272 | break; | 273 | break; |
273 | 274 | ||
274 | if (!strncmp(p, "tagger ", 7)) { | 275 | if (!strncmp(p, "tagger ", 7)) { |
275 | p += 7; | 276 | p += 7; |
276 | t = strchr(p, '<') - 1; | 277 | t = strchr(p, '<') - 1; |
277 | ret->tagger = substr(p, t); | 278 | ret->tagger = substr(p, t); |
278 | p = t; | 279 | p = t; |
279 | t = strchr(t, '>') + 1; | 280 | t = strchr(t, '>') + 1; |
280 | ret->tagger_email = substr(p, t); | 281 | ret->tagger_email = substr(p, t); |
281 | ret->tagger_date = atol(++t); | 282 | ret->tagger_date = atol(++t); |
282 | } | 283 | } |
283 | p = strchr(p, '\n') + 1; | 284 | p = strchr(p, '\n') + 1; |
284 | } | 285 | } |
285 | 286 | ||
286 | while (p && (*p == '\n')) | 287 | while (p && (*p == '\n')) |
287 | p = strchr(p, '\n') + 1; | 288 | p = strchr(p, '\n') + 1; |
288 | if (p && *p) | 289 | if (p && *p) |
289 | ret->msg = xstrdup(p); | 290 | ret->msg = xstrdup(p); |
290 | free(data); | 291 | free(data); |
291 | return ret; | 292 | return ret; |
292 | } | 293 | } |