version 1.134.2.5, 2007/09/27 21:38:25
|
version 1.135, 2006/09/09 14:23:02
|
Line 1
|
Line 1
|
/* filter.c - routines for parsing and dealing with filters */ |
/* filter.c - routines for parsing and dealing with filters */ |
/* $OpenLDAP: pkg/ldap/servers/slapd/filter.c,v 1.134.2.4 2007/09/27 21:14:23 ralf Exp $ */ |
/* $OpenLDAP: pkg/ldap/servers/slapd/filter.c,v 1.134 2006/01/23 19:53:52 hyc Exp $ */ |
/* This work is part of OpenLDAP Software <http://www.openldap.org/>. |
/* This work is part of OpenLDAP Software <http://www.openldap.org/>. |
* |
* |
* Copyright 1998-2007 The OpenLDAP Foundation. |
* Copyright 1998-2006 The OpenLDAP Foundation. |
* All rights reserved. |
* All rights reserved. |
* |
* |
* Redistribution and use in source and binary forms, with or without |
* Redistribution and use in source and binary forms, with or without |
Line 33
|
Line 33
|
|
|
#include "slap.h" |
#include "slap.h" |
|
|
const Filter *slap_filter_objectClass_pres; |
|
const struct berval *slap_filterstr_objectClass_pres; |
|
|
|
static int get_filter_list( |
static int get_filter_list( |
Operation *op, |
Operation *op, |
BerElement *ber, |
BerElement *ber, |
Line 45 static int get_filter_list(
|
Line 42 static int get_filter_list(
|
static int get_ssa( |
static int get_ssa( |
Operation *op, |
Operation *op, |
BerElement *ber, |
BerElement *ber, |
Filter *f, |
SubstringsAssertion **s, |
const char **text ); |
const char **text ); |
|
|
static void simple_vrFilter2bv( |
static void simple_vrFilter2bv( |
Line 60 static int get_simple_vrFilter(
|
Line 57 static int get_simple_vrFilter(
|
const char **text ); |
const char **text ); |
|
|
int |
int |
filter_init( void ) |
|
{ |
|
static Filter filter_objectClass_pres = { LDAP_FILTER_PRESENT }; |
|
static struct berval filterstr_objectClass_pres = BER_BVC("(objectClass=*)"); |
|
|
|
filter_objectClass_pres.f_desc = slap_schema.si_ad_objectClass; |
|
|
|
slap_filter_objectClass_pres = &filter_objectClass_pres; |
|
slap_filterstr_objectClass_pres = &filterstr_objectClass_pres; |
|
|
|
return 0; |
|
} |
|
|
|
void |
|
filter_destroy( void ) |
|
{ |
|
return; |
|
} |
|
|
|
int |
|
get_filter( |
get_filter( |
Operation *op, |
Operation *op, |
BerElement *ber, |
BerElement *ber, |
Line 102 get_filter(
|
Line 79 get_filter(
|
* substrings [4] SubstringFilter, |
* substrings [4] SubstringFilter, |
* greaterOrEqual [5] AttributeValueAssertion, |
* greaterOrEqual [5] AttributeValueAssertion, |
* lessOrEqual [6] AttributeValueAssertion, |
* lessOrEqual [6] AttributeValueAssertion, |
* present [7] AttributeType, |
* present [7] AttributeType,, |
* approxMatch [8] AttributeValueAssertion, |
* approxMatch [8] AttributeValueAssertion |
* extensibleMatch [9] MatchingRuleAssertion |
* extensibleMatch [9] MatchingRuleAssertion |
* } |
* } |
* |
* |
Line 140 get_filter(
|
Line 117 get_filter(
|
switch ( f.f_choice ) { |
switch ( f.f_choice ) { |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
Debug( LDAP_DEBUG_FILTER, "EQUALITY\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "EQUALITY\n", 0, 0, 0 ); |
err = get_ava( op, ber, &f, SLAP_MR_EQUALITY, text ); |
err = get_ava( op, ber, &f.f_ava, SLAP_MR_EQUALITY, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 150 get_filter(
|
Line 127 get_filter(
|
|
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
Debug( LDAP_DEBUG_FILTER, "SUBSTRINGS\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "SUBSTRINGS\n", 0, 0, 0 ); |
err = get_ssa( op, ber, &f, text ); |
err = get_ssa( op, ber, &f.f_sub, text ); |
if( err != LDAP_SUCCESS ) { |
if( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 159 get_filter(
|
Line 136 get_filter(
|
|
|
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
Debug( LDAP_DEBUG_FILTER, "GE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "GE\n", 0, 0, 0 ); |
err = get_ava( op, ber, &f, SLAP_MR_ORDERING, text ); |
err = get_ava( op, ber, &f.f_ava, SLAP_MR_ORDERING, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 168 get_filter(
|
Line 145 get_filter(
|
|
|
case LDAP_FILTER_LE: |
case LDAP_FILTER_LE: |
Debug( LDAP_DEBUG_FILTER, "LE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "LE\n", 0, 0, 0 ); |
err = get_ava( op, ber, &f, SLAP_MR_ORDERING, text ); |
err = get_ava( op, ber, &f.f_ava, SLAP_MR_ORDERING, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 189 get_filter(
|
Line 166 get_filter(
|
err = slap_bv2ad( &type, &f.f_desc, text ); |
err = slap_bv2ad( &type, &f.f_desc, text ); |
|
|
if( err != LDAP_SUCCESS ) { |
if( err != LDAP_SUCCESS ) { |
f.f_choice |= SLAPD_FILTER_UNDEFINED; |
|
err = slap_bv2undef_ad( &type, &f.f_desc, text, |
err = slap_bv2undef_ad( &type, &f.f_desc, text, |
SLAP_AD_PROXIED|SLAP_AD_NOINSERT ); |
SLAP_AD_PROXIED|SLAP_AD_NOINSERT ); |
|
|
Line 200 get_filter(
|
Line 176 get_filter(
|
"type=%s (%d)\n", |
"type=%s (%d)\n", |
op->o_connid, type.bv_val, err ); |
op->o_connid, type.bv_val, err ); |
|
|
|
f.f_choice = SLAPD_FILTER_COMPUTED; |
|
f.f_result = LDAP_COMPARE_FALSE; |
err = LDAP_SUCCESS; |
err = LDAP_SUCCESS; |
f.f_desc = slap_bv2tmp_ad( &type, op->o_tmpmemctx ); |
*text = NULL; |
|
break; |
} |
} |
*text = NULL; |
|
} |
} |
|
|
assert( f.f_desc != NULL ); |
assert( f.f_desc != NULL ); |
Line 211 get_filter(
|
Line 189 get_filter(
|
|
|
case LDAP_FILTER_APPROX: |
case LDAP_FILTER_APPROX: |
Debug( LDAP_DEBUG_FILTER, "APPROX\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "APPROX\n", 0, 0, 0 ); |
err = get_ava( op, ber, &f, SLAP_MR_EQUALITY_APPROX, text ); |
err = get_ava( op, ber, &f.f_ava, SLAP_MR_EQUALITY_APPROX, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 275 get_filter(
|
Line 253 get_filter(
|
case LDAP_FILTER_EXT: |
case LDAP_FILTER_EXT: |
Debug( LDAP_DEBUG_FILTER, "EXTENSIBLE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "EXTENSIBLE\n", 0, 0, 0 ); |
|
|
err = get_mra( op, ber, &f, text ); |
err = get_mra( op, ber, &f.f_mra, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 342 static int
|
Line 320 static int
|
get_ssa( |
get_ssa( |
Operation *op, |
Operation *op, |
BerElement *ber, |
BerElement *ber, |
Filter *f, |
SubstringsAssertion **out, |
const char **text ) |
const char **text ) |
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
Line 353 get_ssa(
|
Line 331 get_ssa(
|
SubstringsAssertion ssa; |
SubstringsAssertion ssa; |
|
|
*text = "error decoding filter"; |
*text = "error decoding filter"; |
|
*out = NULL; |
|
|
Debug( LDAP_DEBUG_FILTER, "begin get_ssa\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "begin get_ssa\n", 0, 0, 0 ); |
if ( ber_scanf( ber, "{m" /*}*/, &desc ) == LBER_ERROR ) { |
if ( ber_scanf( ber, "{m" /*}*/, &desc ) == LBER_ERROR ) { |
Line 369 get_ssa(
|
Line 348 get_ssa(
|
rc = slap_bv2ad( &desc, &ssa.sa_desc, text ); |
rc = slap_bv2ad( &desc, &ssa.sa_desc, text ); |
|
|
if( rc != LDAP_SUCCESS ) { |
if( rc != LDAP_SUCCESS ) { |
f->f_choice |= SLAPD_FILTER_UNDEFINED; |
|
rc = slap_bv2undef_ad( &desc, &ssa.sa_desc, text, |
rc = slap_bv2undef_ad( &desc, &ssa.sa_desc, text, |
SLAP_AD_PROXIED|SLAP_AD_NOINSERT ); |
SLAP_AD_PROXIED|SLAP_AD_NOINSERT ); |
|
|
Line 378 get_ssa(
|
Line 356 get_ssa(
|
"get_ssa: conn %lu unknown attribute type=%s (%ld)\n", |
"get_ssa: conn %lu unknown attribute type=%s (%ld)\n", |
op->o_connid, desc.bv_val, (long) rc ); |
op->o_connid, desc.bv_val, (long) rc ); |
|
|
ssa.sa_desc = slap_bv2tmp_ad( &desc, op->o_tmpmemctx ); |
/* skip over the rest of this filter */ |
|
for ( tag = ber_first_element( ber, &len, &last ); |
|
tag != LBER_DEFAULT; |
|
tag = ber_next_element( ber, &len, last ) ) { |
|
ber_scanf( ber, "x" ); |
|
} |
|
return rc; |
} |
} |
} |
} |
|
|
Line 471 return_error:
|
Line 455 return_error:
|
(long) rc, 0, 0 ); |
(long) rc, 0, 0 ); |
slap_sl_free( ssa.sa_initial.bv_val, op->o_tmpmemctx ); |
slap_sl_free( ssa.sa_initial.bv_val, op->o_tmpmemctx ); |
ber_bvarray_free_x( ssa.sa_any, op->o_tmpmemctx ); |
ber_bvarray_free_x( ssa.sa_any, op->o_tmpmemctx ); |
if ( ssa.sa_desc->ad_flags & SLAP_DESC_TEMPORARY ) |
|
op->o_tmpfree( ssa.sa_desc, op->o_tmpmemctx ); |
|
slap_sl_free( ssa.sa_final.bv_val, op->o_tmpmemctx ); |
slap_sl_free( ssa.sa_final.bv_val, op->o_tmpmemctx ); |
return rc; |
return rc; |
} |
} |
Line 481 return_error:
|
Line 463 return_error:
|
} |
} |
|
|
if( rc == LDAP_SUCCESS ) { |
if( rc == LDAP_SUCCESS ) { |
f->f_sub = op->o_tmpalloc( sizeof( ssa ), op->o_tmpmemctx ); |
*out = op->o_tmpalloc( sizeof( ssa ), op->o_tmpmemctx ); |
*f->f_sub = ssa; |
**out = ssa; |
} |
} |
|
|
Debug( LDAP_DEBUG_FILTER, "end get_ssa\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "end get_ssa\n", 0, 0, 0 ); |
Line 498 filter_free_x( Operation *op, Filter *f
|
Line 480 filter_free_x( Operation *op, Filter *f
|
return; |
return; |
} |
} |
|
|
f->f_choice &= SLAPD_FILTER_MASK; |
|
|
|
switch ( f->f_choice ) { |
switch ( f->f_choice ) { |
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
break; |
break; |
Line 519 filter_free_x( Operation *op, Filter *f
|
Line 499 filter_free_x( Operation *op, Filter *f
|
if ( f->f_sub_final.bv_val != NULL ) { |
if ( f->f_sub_final.bv_val != NULL ) { |
op->o_tmpfree( f->f_sub_final.bv_val, op->o_tmpmemctx ); |
op->o_tmpfree( f->f_sub_final.bv_val, op->o_tmpmemctx ); |
} |
} |
if ( f->f_sub->sa_desc->ad_flags & SLAP_DESC_TEMPORARY ) |
|
op->o_tmpfree( f->f_sub->sa_desc, op->o_tmpmemctx ); |
|
op->o_tmpfree( f->f_sub, op->o_tmpmemctx ); |
op->o_tmpfree( f->f_sub, op->o_tmpmemctx ); |
break; |
break; |
|
|
Line 575 filter2bv_x( Operation *op, Filter *f, s
|
Line 553 filter2bv_x( Operation *op, Filter *f, s
|
ber_bvunknown = BER_BVC( "(?=unknown)" ), |
ber_bvunknown = BER_BVC( "(?=unknown)" ), |
ber_bvnone = BER_BVC( "(?=none)" ); |
ber_bvnone = BER_BVC( "(?=none)" ); |
ber_len_t len; |
ber_len_t len; |
ber_tag_t choice; |
|
int undef; |
|
char *sign; |
|
|
|
if ( f == NULL ) { |
if ( f == NULL ) { |
ber_dupbv_x( fstr, &ber_bvnone, op->o_tmpmemctx ); |
ber_dupbv_x( fstr, &ber_bvnone, op->o_tmpmemctx ); |
return; |
return; |
} |
} |
|
|
undef = f->f_choice & SLAPD_FILTER_UNDEFINED; |
switch ( f->f_choice ) { |
choice = f->f_choice & SLAPD_FILTER_MASK; |
|
|
|
switch ( choice ) { |
|
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
fstr->bv_len = STRLENOF("(=)"); |
filter_escape_value_x( &f->f_av_value, &tmp, op->o_tmpmemctx ); |
sign = "="; |
/* NOTE: tmp can legitimately be NULL (meaning empty) |
goto simple; |
* since in a Filter values in AVAs are supposed |
|
* to have been normalized, meaning that an empty value |
|
* is legal for that attribute's syntax */ |
|
|
|
fstr->bv_len = f->f_av_desc->ad_cname.bv_len + |
|
tmp.bv_len + STRLENOF("(=)"); |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=%s)", |
|
f->f_av_desc->ad_cname.bv_val, |
|
tmp.bv_len ? tmp.bv_val : "" ); |
|
|
|
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
|
break; |
|
|
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
fstr->bv_len = STRLENOF("(>=)"); |
filter_escape_value_x( &f->f_av_value, &tmp, op->o_tmpmemctx ); |
sign = ">="; |
/* NOTE: tmp can legitimately be NULL (meaning empty) |
goto simple; |
* since in a Filter values in AVAs are supposed |
case LDAP_FILTER_LE: |
* to have been normalized, meaning that an empty value |
fstr->bv_len = STRLENOF("(<=)"); |
* is legal for that attribute's syntax */ |
sign = "<="; |
|
goto simple; |
fstr->bv_len = f->f_av_desc->ad_cname.bv_len + |
case LDAP_FILTER_APPROX: |
tmp.bv_len + STRLENOF("(>=)"); |
fstr->bv_len = STRLENOF("(~=)"); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
sign = "~="; |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s>=%s)", |
|
f->f_av_desc->ad_cname.bv_val, |
|
tmp.bv_len ? tmp.bv_val : ""); |
|
|
simple: |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
|
break; |
|
|
|
case LDAP_FILTER_LE: |
filter_escape_value_x( &f->f_av_value, &tmp, op->o_tmpmemctx ); |
filter_escape_value_x( &f->f_av_value, &tmp, op->o_tmpmemctx ); |
/* NOTE: tmp can legitimately be NULL (meaning empty) |
/* NOTE: tmp can legitimately be NULL (meaning empty) |
* since in a Filter values in AVAs are supposed |
* since in a Filter values in AVAs are supposed |
* to have been normalized, meaning that an empty value |
* to have been normalized, meaning that an empty value |
* is legal for that attribute's syntax */ |
* is legal for that attribute's syntax */ |
|
|
fstr->bv_len += f->f_av_desc->ad_cname.bv_len + tmp.bv_len; |
fstr->bv_len = f->f_av_desc->ad_cname.bv_len + |
if ( undef ) |
tmp.bv_len + STRLENOF("(<=)"); |
fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s%s%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s<=%s)", |
undef ? "?" : "", |
f->f_av_desc->ad_cname.bv_val, |
f->f_av_desc->ad_cname.bv_val, sign, |
tmp.bv_len ? tmp.bv_val : ""); |
tmp.bv_len ? tmp.bv_val : "" ); |
|
|
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
|
break; |
|
|
|
case LDAP_FILTER_APPROX: |
|
filter_escape_value_x( &f->f_av_value, &tmp, op->o_tmpmemctx ); |
|
/* NOTE: tmp can legitimately be NULL (meaning empty) |
|
* since in a Filter values in AVAs are supposed |
|
* to have been normalized, meaning that an empty value |
|
* is legal for that attribute's syntax */ |
|
|
|
fstr->bv_len = f->f_av_desc->ad_cname.bv_len + |
|
tmp.bv_len + STRLENOF("(~=)"); |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s~=%s)", |
|
f->f_av_desc->ad_cname.bv_val, |
|
tmp.bv_len ? tmp.bv_val : ""); |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
break; |
break; |
|
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
fstr->bv_len = f->f_sub_desc->ad_cname.bv_len + |
fstr->bv_len = f->f_sub_desc->ad_cname.bv_len + |
STRLENOF("(=*)"); |
STRLENOF("(=*)"); |
if ( undef ) |
|
fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 128, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 128, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s=*)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=*)", |
undef ? "?" : "", |
|
f->f_sub_desc->ad_cname.bv_val ); |
f->f_sub_desc->ad_cname.bv_val ); |
|
|
if ( f->f_sub_initial.bv_val != NULL ) { |
if ( f->f_sub_initial.bv_val != NULL ) { |
Line 641 simple:
|
Line 645 simple:
|
len = fstr->bv_len; |
len = fstr->bv_len; |
|
|
filter_escape_value_x( &f->f_sub_initial, &tmp, op->o_tmpmemctx ); |
filter_escape_value_x( &f->f_sub_initial, &tmp, op->o_tmpmemctx ); |
tmplen = tmp.bv_len; |
tmplen = tmp.bv_len ? tmp.bv_len : STRLENOF( "(null)" ); |
|
|
fstr->bv_len += tmplen; |
fstr->bv_len += tmplen; |
fstr->bv_val = op->o_tmprealloc( fstr->bv_val, |
fstr->bv_val = op->o_tmprealloc( fstr->bv_val, |
fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( &fstr->bv_val[len - 2], |
snprintf( &fstr->bv_val[len-2], |
tmplen + STRLENOF( /*(*/ "*)" ) + 1, |
tmplen + STRLENOF( /*(*/ "*)" ) + 1, |
/* "(attr=" */ "%s*)", |
/* "(attr=" */ "%s*)", |
tmp.bv_len ? tmp.bv_val : ""); |
tmp.bv_len ? tmp.bv_val : "(null)"); |
|
|
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
} |
} |
Line 662 simple:
|
Line 666 simple:
|
len = fstr->bv_len; |
len = fstr->bv_len; |
filter_escape_value_x( &f->f_sub_any[i], |
filter_escape_value_x( &f->f_sub_any[i], |
&tmp, op->o_tmpmemctx ); |
&tmp, op->o_tmpmemctx ); |
tmplen = tmp.bv_len; |
tmplen = tmp.bv_len ? tmp.bv_len : STRLENOF( "(null)" ); |
|
|
fstr->bv_len += tmplen + STRLENOF( /*(*/ ")" ); |
fstr->bv_len += tmplen + STRLENOF( /*(*/ ")" ); |
fstr->bv_val = op->o_tmprealloc( fstr->bv_val, |
fstr->bv_val = op->o_tmprealloc( fstr->bv_val, |
fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( &fstr->bv_val[len - 1], |
snprintf( &fstr->bv_val[len-1], |
tmplen + STRLENOF( /*(*/ "*)" ) + 1, |
tmplen + STRLENOF( /*(*/ "*)" ) + 1, |
/* "(attr=[init]*[any*]" */ "%s*)", |
/* "(attr=[init]*[any*]" */ "%s*)", |
tmp.bv_len ? tmp.bv_val : ""); |
tmp.bv_len ? tmp.bv_val : "(null)"); |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
} |
} |
} |
} |
Line 682 simple:
|
Line 686 simple:
|
len = fstr->bv_len; |
len = fstr->bv_len; |
|
|
filter_escape_value_x( &f->f_sub_final, &tmp, op->o_tmpmemctx ); |
filter_escape_value_x( &f->f_sub_final, &tmp, op->o_tmpmemctx ); |
tmplen = tmp.bv_len; |
tmplen = tmp.bv_len ? tmp.bv_len : STRLENOF( "(null)" ); |
|
|
fstr->bv_len += tmplen; |
fstr->bv_len += tmplen; |
fstr->bv_val = op->o_tmprealloc( fstr->bv_val, |
fstr->bv_val = op->o_tmprealloc( fstr->bv_val, |
fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( &fstr->bv_val[len - 1], |
snprintf( &fstr->bv_val[len-1], |
tmplen + STRLENOF( /*(*/ ")" ) + 1, |
tmplen + STRLENOF( /*(*/ ")" ) + 1, |
/* "(attr=[init*][any*]" */ "%s)", |
/* "(attr=[init*][any*]" */ "%s)", |
tmp.bv_len ? tmp.bv_val : ""); |
tmp.bv_len ? tmp.bv_val : "(null)"); |
|
|
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
ber_memfree_x( tmp.bv_val, op->o_tmpmemctx ); |
} |
} |
Line 701 simple:
|
Line 705 simple:
|
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
fstr->bv_len = f->f_desc->ad_cname.bv_len + |
fstr->bv_len = f->f_desc->ad_cname.bv_len + |
STRLENOF("(=*)"); |
STRLENOF("(=*)"); |
if ( undef ) |
|
fstr->bv_len++; |
|
|
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s=*)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=*)", |
undef ? "?" : "", |
|
f->f_desc->ad_cname.bv_val ); |
f->f_desc->ad_cname.bv_val ); |
break; |
break; |
|
|
Line 761 simple:
|
Line 761 simple:
|
tmp.bv_len + STRLENOF("(:=)"); |
tmp.bv_len + STRLENOF("(:=)"); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s%s%s%s:=%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s%s%s:=%s)", |
undef ? "?" : "", |
|
ad.bv_val, |
ad.bv_val, |
f->f_mr_dnattrs ? ":dn" : "", |
f->f_mr_dnattrs ? ":dn" : "", |
f->f_mr_rule_text.bv_len ? ":" : "", |
f->f_mr_rule_text.bv_len ? ":" : "", |
Line 825 filter_dup( Filter *f, void *memctx )
|
Line 824 filter_dup( Filter *f, void *memctx )
|
n->f_choice = f->f_choice; |
n->f_choice = f->f_choice; |
n->f_next = NULL; |
n->f_next = NULL; |
|
|
switch( f->f_choice & SLAPD_FILTER_MASK ) { |
switch( f->f_choice ) { |
case SLAPD_FILTER_COMPUTED: |
case SLAPD_FILTER_COMPUTED: |
n->f_result = f->f_result; |
n->f_result = f->f_result; |
break; |
break; |
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
if ( f->f_desc->ad_flags & SLAP_DESC_TEMPORARY ) |
n->f_desc = f->f_desc; |
n->f_desc = slap_bv2tmp_ad( &f->f_desc->ad_cname, memctx ); |
|
else |
|
n->f_desc = f->f_desc; |
|
break; |
break; |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
Line 842 filter_dup( Filter *f, void *memctx )
|
Line 838 filter_dup( Filter *f, void *memctx )
|
/* Should this be ava_dup() ? */ |
/* Should this be ava_dup() ? */ |
n->f_ava = mf->bmf_calloc( 1, sizeof(AttributeAssertion), memctx ); |
n->f_ava = mf->bmf_calloc( 1, sizeof(AttributeAssertion), memctx ); |
*n->f_ava = *f->f_ava; |
*n->f_ava = *f->f_ava; |
if ( f->f_av_desc->ad_flags & SLAP_DESC_TEMPORARY ) |
|
n->f_av_desc = slap_bv2tmp_ad( &f->f_av_desc->ad_cname, memctx ); |
|
ber_dupbv_x( &n->f_av_value, &f->f_av_value, memctx ); |
ber_dupbv_x( &n->f_av_value, &f->f_av_value, memctx ); |
break; |
break; |
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
n->f_sub = mf->bmf_calloc( 1, sizeof(SubstringsAssertion), memctx ); |
n->f_sub = mf->bmf_calloc( 1, sizeof(SubstringsAssertion), memctx ); |
if ( f->f_sub_desc->ad_flags & SLAP_DESC_TEMPORARY ) |
n->f_sub_desc = f->f_sub_desc; |
n->f_sub_desc = slap_bv2tmp_ad( &f->f_sub_desc->ad_cname, memctx ); |
|
else |
|
n->f_sub_desc = f->f_sub_desc; |
|
if ( !BER_BVISNULL( &f->f_sub_initial )) |
if ( !BER_BVISNULL( &f->f_sub_initial )) |
ber_dupbv_x( &n->f_sub_initial, &f->f_sub_initial, memctx ); |
ber_dupbv_x( &n->f_sub_initial, &f->f_sub_initial, memctx ); |
if ( f->f_sub_any ) { |
if ( f->f_sub_any ) { |
Line 875 filter_dup( Filter *f, void *memctx )
|
Line 866 filter_dup( Filter *f, void *memctx )
|
length += f->f_mr_rule_text.bv_len + 1; |
length += f->f_mr_rule_text.bv_len + 1; |
n->f_mra = mf->bmf_calloc( 1, length, memctx ); |
n->f_mra = mf->bmf_calloc( 1, length, memctx ); |
*n->f_mra = *f->f_mra; |
*n->f_mra = *f->f_mra; |
if ( f->f_mr_desc && ( f->f_sub_desc->ad_flags & SLAP_DESC_TEMPORARY )) |
|
n->f_mr_desc = slap_bv2tmp_ad( &f->f_mr_desc->ad_cname, memctx ); |
|
ber_dupbv_x( &n->f_mr_value, &f->f_mr_value, memctx ); |
ber_dupbv_x( &n->f_mr_value, &f->f_mr_value, memctx ); |
if ( !BER_BVISNULL( &f->f_mr_rule_text )) { |
if ( !BER_BVISNULL( &f->f_mr_rule_text )) { |
n->f_mr_rule_text.bv_val = (char *)(n->f_mra+1); |
n->f_mr_rule_text.bv_val = (char *)(n->f_mra+1); |
Line 926 get_simple_vrFilter(
|
Line 915 get_simple_vrFilter(
|
switch ( vrf.vrf_choice ) { |
switch ( vrf.vrf_choice ) { |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
Debug( LDAP_DEBUG_FILTER, "EQUALITY\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "EQUALITY\n", 0, 0, 0 ); |
err = get_ava( op, ber, (Filter *)&vrf, SLAP_MR_EQUALITY, text ); |
err = get_ava( op, ber, &vrf.vrf_ava, SLAP_MR_EQUALITY, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 936 get_simple_vrFilter(
|
Line 925 get_simple_vrFilter(
|
|
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
Debug( LDAP_DEBUG_FILTER, "SUBSTRINGS\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "SUBSTRINGS\n", 0, 0, 0 ); |
err = get_ssa( op, ber, (Filter *)&vrf, text ); |
err = get_ssa( op, ber, &vrf.vrf_sub, text ); |
break; |
break; |
|
|
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
Debug( LDAP_DEBUG_FILTER, "GE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "GE\n", 0, 0, 0 ); |
err = get_ava( op, ber, (Filter *)&vrf, SLAP_MR_ORDERING, text ); |
err = get_ava( op, ber, &vrf.vrf_ava, SLAP_MR_ORDERING, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 949 get_simple_vrFilter(
|
Line 938 get_simple_vrFilter(
|
|
|
case LDAP_FILTER_LE: |
case LDAP_FILTER_LE: |
Debug( LDAP_DEBUG_FILTER, "LE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "LE\n", 0, 0, 0 ); |
err = get_ava( op, ber, (Filter *)&vrf, SLAP_MR_ORDERING, text ); |
err = get_ava( op, ber, &vrf.vrf_ava, SLAP_MR_ORDERING, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 969 get_simple_vrFilter(
|
Line 958 get_simple_vrFilter(
|
err = slap_bv2ad( &type, &vrf.vrf_desc, text ); |
err = slap_bv2ad( &type, &vrf.vrf_desc, text ); |
|
|
if( err != LDAP_SUCCESS ) { |
if( err != LDAP_SUCCESS ) { |
vrf.vrf_choice |= SLAPD_FILTER_UNDEFINED; |
|
err = slap_bv2undef_ad( &type, &vrf.vrf_desc, text, |
err = slap_bv2undef_ad( &type, &vrf.vrf_desc, text, |
SLAP_AD_PROXIED); |
SLAP_AD_PROXIED|SLAP_AD_NOINSERT ); |
|
|
if( err != LDAP_SUCCESS ) { |
if( err != LDAP_SUCCESS ) { |
/* unrecognized attribute description or other error */ |
/* unrecognized attribute description or other error */ |
Line 990 get_simple_vrFilter(
|
Line 978 get_simple_vrFilter(
|
|
|
case LDAP_FILTER_APPROX: |
case LDAP_FILTER_APPROX: |
Debug( LDAP_DEBUG_FILTER, "APPROX\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "APPROX\n", 0, 0, 0 ); |
err = get_ava( op, ber, (Filter *)&vrf, SLAP_MR_EQUALITY_APPROX, text ); |
err = get_ava( op, ber, &vrf.vrf_ava, SLAP_MR_EQUALITY_APPROX, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 999 get_simple_vrFilter(
|
Line 987 get_simple_vrFilter(
|
case LDAP_FILTER_EXT: |
case LDAP_FILTER_EXT: |
Debug( LDAP_DEBUG_FILTER, "EXTENSIBLE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "EXTENSIBLE\n", 0, 0, 0 ); |
|
|
err = get_mra( op, ber, (Filter *)&vrf, text ); |
err = get_mra( op, ber, &vrf.vrf_mra, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
Line 1024 get_simple_vrFilter(
|
Line 1012 get_simple_vrFilter(
|
} |
} |
|
|
if ( err == LDAP_SUCCESS ) { |
if ( err == LDAP_SUCCESS ) { |
*filt = op->o_tmpalloc( sizeof vrf, op->o_tmpmemctx ); |
*filt = ch_malloc( sizeof vrf ); |
**filt = vrf; |
**filt = vrf; |
} |
} |
|
|
Line 1115 vrFilter_free( Operation *op, ValuesRetu
|
Line 1103 vrFilter_free( Operation *op, ValuesRetu
|
for ( p = vrf; p != NULL; p = next ) { |
for ( p = vrf; p != NULL; p = next ) { |
next = p->vrf_next; |
next = p->vrf_next; |
|
|
switch ( vrf->vrf_choice & SLAPD_FILTER_MASK ) { |
switch ( vrf->vrf_choice ) { |
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
break; |
break; |
|
|
Line 1193 simple_vrFilter2bv( Operation *op, Value
|
Line 1181 simple_vrFilter2bv( Operation *op, Value
|
{ |
{ |
struct berval tmp; |
struct berval tmp; |
ber_len_t len; |
ber_len_t len; |
int undef; |
|
|
|
if ( vrf == NULL ) { |
if ( vrf == NULL ) { |
ber_str2bv_x( "No filter!", STRLENOF("No filter!"), 1, fstr, |
ber_str2bv_x( "No filter!", STRLENOF("No filter!"), 1, fstr, |
op->o_tmpmemctx ); |
op->o_tmpmemctx ); |
return; |
return; |
} |
} |
undef = vrf->vrf_choice & SLAPD_FILTER_UNDEFINED; |
|
|
|
switch ( vrf->vrf_choice & SLAPD_FILTER_MASK ) { |
switch ( vrf->vrf_choice ) { |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
filter_escape_value_x( &vrf->vrf_av_value, &tmp, op->o_tmpmemctx ); |
filter_escape_value_x( &vrf->vrf_av_value, &tmp, op->o_tmpmemctx ); |
|
|
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
tmp.bv_len + STRLENOF("(=)"); |
tmp.bv_len + STRLENOF("(=)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=%s)", |
Line 1223 simple_vrFilter2bv( Operation *op, Value
|
Line 1208 simple_vrFilter2bv( Operation *op, Value
|
|
|
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
tmp.bv_len + STRLENOF("(>=)"); |
tmp.bv_len + STRLENOF("(>=)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s>=%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s>=%s)", |
Line 1238 simple_vrFilter2bv( Operation *op, Value
|
Line 1222 simple_vrFilter2bv( Operation *op, Value
|
|
|
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
tmp.bv_len + STRLENOF("(<=)"); |
tmp.bv_len + STRLENOF("(<=)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s<=%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s<=%s)", |
Line 1253 simple_vrFilter2bv( Operation *op, Value
|
Line 1236 simple_vrFilter2bv( Operation *op, Value
|
|
|
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
fstr->bv_len = vrf->vrf_av_desc->ad_cname.bv_len + |
tmp.bv_len + STRLENOF("(~=)"); |
tmp.bv_len + STRLENOF("(~=)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s~=%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s~=%s)", |
Line 1265 simple_vrFilter2bv( Operation *op, Value
|
Line 1247 simple_vrFilter2bv( Operation *op, Value
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
fstr->bv_len = vrf->vrf_sub_desc->ad_cname.bv_len + |
fstr->bv_len = vrf->vrf_sub_desc->ad_cname.bv_len + |
STRLENOF("(=*)"); |
STRLENOF("(=*)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 128, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 128, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=*)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=*)", |
Line 1326 simple_vrFilter2bv( Operation *op, Value
|
Line 1307 simple_vrFilter2bv( Operation *op, Value
|
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
fstr->bv_len = vrf->vrf_desc->ad_cname.bv_len + |
fstr->bv_len = vrf->vrf_desc->ad_cname.bv_len + |
STRLENOF("(=*)"); |
STRLENOF("(=*)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=*)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s=*)", |
Line 1349 simple_vrFilter2bv( Operation *op, Value
|
Line 1329 simple_vrFilter2bv( Operation *op, Value
|
( vrf->vrf_mr_rule_text.bv_len |
( vrf->vrf_mr_rule_text.bv_len |
? vrf->vrf_mr_rule_text.bv_len+1 : 0 ) + |
? vrf->vrf_mr_rule_text.bv_len+1 : 0 ) + |
tmp.bv_len + STRLENOF("(:=)"); |
tmp.bv_len + STRLENOF("(:=)"); |
if ( undef ) fstr->bv_len++; |
|
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
fstr->bv_val = op->o_tmpalloc( fstr->bv_len + 1, op->o_tmpmemctx ); |
|
|
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s%s%s:=%s)", |
snprintf( fstr->bv_val, fstr->bv_len + 1, "(%s%s%s%s:=%s)", |