version 1.30, 2000/05/15 21:36:37
|
version 1.57, 2001/01/17 15:35:53
|
Line 1
|
Line 1
|
/* filter.c - routines for parsing and dealing with filters */ |
/* filter.c - routines for parsing and dealing with filters */ |
/* $OpenLDAP: pkg/ldap/servers/slapd/filter.c,v 1.29 2000/05/15 17:28:26 kurt Exp $ */ |
/* $OpenLDAP: pkg/ldap/servers/slapd/filter.c,v 1.56 2001/01/15 18:17:30 gwilliams Exp $ */ |
/* |
/* |
* Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved. |
* Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved. |
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file |
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file |
Line 19 static int get_filter_list(
|
Line 19 static int get_filter_list(
|
BerElement *ber, |
BerElement *ber, |
Filter **f, |
Filter **f, |
char **fstr, |
char **fstr, |
char **text ); |
const char **text ); |
|
|
static int get_substring_filter( |
static int get_substring_filter( |
Connection *conn, |
Connection *conn, |
BerElement *ber, |
BerElement *ber, |
Filter *f, |
Filter *f, |
char **fstr, |
char **fstr, |
char **text ); |
const char **text ); |
|
|
|
static int filter_escape_value( |
|
struct berval *in, |
|
struct berval *out ); |
|
|
int |
int |
get_filter( |
get_filter( |
Line 33 get_filter(
|
Line 38 get_filter(
|
BerElement *ber, |
BerElement *ber, |
Filter **filt, |
Filter **filt, |
char **fstr, |
char **fstr, |
char **text ) |
const char **text ) |
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
ber_len_t len; |
ber_len_t len; |
int err; |
int err; |
Filter *f; |
Filter *f; |
char *ftmp = NULL; |
char *ftmp = NULL; |
|
struct berval escaped; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ENTRY, "get_filter: conn %d\n", |
|
conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "begin get_filter\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "begin get_filter\n", 0, 0, 0 ); |
|
#endif |
/* |
/* |
* A filter looks like this coming in: |
* A filter looks like this coming in: |
* Filter ::= CHOICE { |
* Filter ::= CHOICE { |
Line 59 get_filter(
|
Line 69 get_filter(
|
* } |
* } |
* |
* |
* SubstringFilter ::= SEQUENCE { |
* SubstringFilter ::= SEQUENCE { |
* type AttributeType, |
* type AttributeType, |
* SEQUENCE OF CHOICE { |
* SEQUENCE OF CHOICE { |
* initial [0] IA5String, |
* initial [0] IA5String, |
* any [1] IA5String, |
* any [1] IA5String, |
* final [2] IA5String |
* final [2] IA5String |
* } |
* } |
* } |
* } |
* |
* |
* MatchingRuleAssertion ::= SEQUENCE { |
* MatchingRuleAssertion ::= SEQUENCE { |
* matchingRule [1] MatchingRuleId OPTIONAL, |
* matchingRule [1] MatchingRuleId OPTIONAL, |
* type [2] AttributeDescription OPTIONAL, |
* type [2] AttributeDescription OPTIONAL, |
* matchValue [3] AssertionValue, |
* matchValue [3] AssertionValue, |
* dnAttributes [4] BOOLEAN DEFAULT FALSE |
* dnAttributes [4] BOOLEAN DEFAULT FALSE |
* } |
* } |
* |
* |
*/ |
*/ |
Line 92 get_filter(
|
Line 102 get_filter(
|
|
|
switch ( f->f_choice ) { |
switch ( f->f_choice ) { |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL2, |
|
"get_filter: conn %d EQUALITY\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "EQUALITY\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "EQUALITY\n", 0, 0, 0 ); |
|
#endif |
if ( (err = get_ava( ber, &f->f_ava )) != LDAP_SUCCESS ) { |
err = get_ava( ber, &f->f_ava, SLAP_MR_EQUALITY, text ); |
*text = "error decoding filter"; |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
assert( f->f_ava != NULL ); |
|
|
|
filter_escape_value( f->f_av_value, &escaped ); |
|
|
*fstr = ch_malloc( sizeof("(=)") |
*fstr = ch_malloc( sizeof("(=)") |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_value->bv_len ); |
+ escaped.bv_len ); |
|
|
sprintf( *fstr, "(%s=%s)", |
sprintf( *fstr, "(%s=%s)", |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_value->bv_val ); |
escaped.bv_val ); |
|
|
#else |
ber_memfree( escaped.bv_val ); |
*fstr = ch_malloc( sizeof("(=)") |
|
+ strlen( f->f_avtype ) |
|
+ f->f_avvalue.bv_len); |
|
sprintf( *fstr, "(%s=%s)", f->f_avtype, |
|
f->f_avvalue.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d SUBSTRINGS\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "SUBSTRINGS\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "SUBSTRINGS\n", 0, 0, 0 ); |
|
#endif |
err = get_substring_filter( conn, ber, f, fstr, text ); |
err = get_substring_filter( conn, ber, f, fstr, text ); |
break; |
break; |
|
|
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d GE\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "GE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "GE\n", 0, 0, 0 ); |
|
#endif |
if ( (err = get_ava( ber, &f->f_ava )) != LDAP_SUCCESS ) { |
err = get_ava( ber, &f->f_ava, SLAP_MR_ORDERING, text ); |
*text = "decoding filter error"; |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
filter_escape_value( f->f_av_value, &escaped ); |
|
|
*fstr = ch_malloc( sizeof("(>=)") |
*fstr = ch_malloc( sizeof("(>=)") |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_value->bv_len ); |
+ escaped.bv_len ); |
|
|
sprintf( *fstr, "(%s>=%s)", |
sprintf( *fstr, "(%s>=%s)", |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_value->bv_val ); |
escaped.bv_val ); |
|
|
#else |
ber_memfree( escaped.bv_val ); |
*fstr = ch_malloc( sizeof("(>=)") |
|
+ strlen( f->f_avtype ) |
|
+ f->f_avvalue.bv_len); |
|
sprintf( *fstr, "(%s>=%s)", f->f_avtype, |
|
f->f_avvalue.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_LE: |
case LDAP_FILTER_LE: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d LE\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "LE\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "LE\n", 0, 0, 0 ); |
|
#endif |
if ( (err = get_ava( ber, &f->f_ava )) != LDAP_SUCCESS ) { |
err = get_ava( ber, &f->f_ava, SLAP_MR_ORDERING, text ); |
*text = "decoding filter error"; |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
|
filter_escape_value( f->f_av_value, &escaped ); |
|
|
*fstr = ch_malloc( sizeof("(<=)") |
*fstr = ch_malloc( sizeof("(<=)") |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_value->bv_len ); |
+ escaped.bv_len ); |
|
|
sprintf( *fstr, "(%s<=%s)", |
sprintf( *fstr, "(%s<=%s)", |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_value->bv_val ); |
escaped.bv_val ); |
|
|
#else |
ber_memfree( escaped.bv_val ); |
*fstr = ch_malloc( sizeof("(<=)") |
|
+ strlen( f->f_avtype ) |
|
+ f->f_avvalue.bv_len); |
|
sprintf( *fstr, "(%s<=%s)", f->f_avtype, |
|
f->f_avvalue.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_PRESENT: { |
case LDAP_FILTER_PRESENT: { |
struct berval type; |
struct berval type; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d PRESENT\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "PRESENT\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "PRESENT\n", 0, 0, 0 ); |
|
#endif |
if ( ber_scanf( ber, "o", &type ) == LBER_ERROR ) { |
if ( ber_scanf( ber, "o", &type ) == LBER_ERROR ) { |
err = SLAPD_DISCONNECT; |
err = SLAPD_DISCONNECT; |
*text = "error decoding filter"; |
*text = "error decoding filter"; |
break; |
break; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
f->f_desc = NULL; |
{ |
err = slap_bv2ad( &type, &f->f_desc, text ); |
char *text; |
|
int rc; |
|
|
|
err = slap_bv2ad( &type, &f->f_desc, &text ); |
|
|
|
if( err != LDAP_SUCCESS ) { |
|
ch_free( type.bv_val ); |
|
break; |
|
} |
|
|
|
|
if( err != LDAP_SUCCESS ) { |
ch_free( type.bv_val ); |
ch_free( type.bv_val ); |
|
break; |
} |
} |
|
|
|
ch_free( type.bv_val ); |
|
|
*fstr = ch_malloc( sizeof("(=*)") |
*fstr = ch_malloc( sizeof("(=*)") |
+ f->f_desc->ad_cname->bv_len ); |
+ f->f_desc->ad_cname->bv_len ); |
sprintf( *fstr, "(%s=*)", |
sprintf( *fstr, "(%s=*)", |
f->f_desc->ad_cname->bv_val ); |
f->f_desc->ad_cname->bv_val ); |
|
|
#else |
|
f->f_type = type.bv_val; |
|
err = LDAP_SUCCESS; |
|
attr_normalize( f->f_type ); |
|
*fstr = ch_malloc( sizeof("(=*)") |
|
+ strlen( f->f_type ) ); |
|
sprintf( *fstr, "(%s=*)", f->f_type ); |
|
#endif |
|
} break; |
} break; |
|
|
case LDAP_FILTER_APPROX: |
case LDAP_FILTER_APPROX: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d APPROX\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "APPROX\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "APPROX\n", 0, 0, 0 ); |
|
#endif |
if ( (err = get_ava( ber, &f->f_ava )) != LDAP_SUCCESS ) { |
err = get_ava( ber, &f->f_ava, SLAP_MR_EQUALITY_APPROX, text ); |
*text = "decoding filter error"; |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
filter_escape_value( f->f_av_value, &escaped ); |
|
|
*fstr = ch_malloc( sizeof("(~=)") |
*fstr = ch_malloc( sizeof("(~=)") |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_desc->ad_cname->bv_len |
+ f->f_av_value->bv_len ); |
+ escaped.bv_len ); |
|
|
sprintf( *fstr, "(%s~=%s)", |
sprintf( *fstr, "(%s~=%s)", |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_value->bv_val ); |
escaped.bv_val ); |
|
|
#else |
ber_memfree( escaped.bv_val ); |
*fstr = ch_malloc( sizeof("(~=)") |
|
+ strlen( f->f_avtype ) |
|
+ f->f_avvalue.bv_len); |
|
sprintf( *fstr, "(%s~=%s)", f->f_avtype, |
|
f->f_avvalue.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_AND: |
case LDAP_FILTER_AND: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d AND\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "AND\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "AND\n", 0, 0, 0 ); |
|
#endif |
err = get_filter_list( conn, ber, &f->f_and, &ftmp, text ); |
err = get_filter_list( conn, ber, &f->f_and, &ftmp, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
Line 254 get_filter(
|
Line 264 get_filter(
|
break; |
break; |
|
|
case LDAP_FILTER_OR: |
case LDAP_FILTER_OR: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d OR\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "OR\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "OR\n", 0, 0, 0 ); |
|
#endif |
err = get_filter_list( conn, ber, &f->f_and, &ftmp, text ); |
err = get_filter_list( conn, ber, &f->f_and, &ftmp, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
break; |
break; |
Line 266 get_filter(
|
Line 281 get_filter(
|
break; |
break; |
|
|
case LDAP_FILTER_NOT: |
case LDAP_FILTER_NOT: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_filter: conn %d NOT\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "NOT\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "NOT\n", 0, 0, 0 ); |
|
#endif |
(void) ber_skip_tag( ber, &len ); |
(void) ber_skip_tag( ber, &len ); |
err = get_filter( conn, ber, &f->f_not, &ftmp, text ); |
err = get_filter( conn, ber, &f->f_not, &ftmp, text ); |
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
Line 279 get_filter(
|
Line 299 get_filter(
|
break; |
break; |
|
|
case LDAP_FILTER_EXT: |
case LDAP_FILTER_EXT: |
/* not yet implemented */ |
#ifdef NEW_LOGGING |
Debug( LDAP_DEBUG_ANY, "extensible match not yet implemented.\n", |
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
f->f_choice, 0, 0 ); |
"get_filter: conn %d EXTENSIBLE\n", conn->c_connid )); |
f->f_choice = SLAPD_FILTER_COMPUTED; |
#else |
f->f_result = SLAPD_COMPARE_UNDEFINED; |
Debug( LDAP_DEBUG_FILTER, "EXTENSIBLE\n", 0, 0, 0 ); |
*fstr = ch_strdup( "(extended)" ); |
#endif |
|
|
|
err = get_mra( ber, &f->f_mra, text ); |
|
if ( err != LDAP_SUCCESS ) { |
|
break; |
|
} |
|
|
|
assert( f->f_mra != NULL ); |
|
|
|
filter_escape_value( f->f_mr_value, &escaped ); |
|
|
|
*fstr = ch_malloc( sizeof("(:dn::=)") |
|
+ (f->f_mr_desc ? f->f_mr_desc->ad_cname->bv_len : 0) |
|
+ (f->f_mr_rule_text ? strlen(f->f_mr_rule_text) : 0) |
|
+ escaped.bv_len ); |
|
|
|
sprintf( *fstr, "(%s%s%s%s:=%s)", |
|
(f->f_mr_desc ? f->f_mr_desc->ad_cname->bv_val : ""), |
|
(f->f_mr_dnattrs ? ":dn" : ""), |
|
(f->f_mr_rule_text ? ":" : ""), |
|
(f->f_mr_rule_text ? f->f_mr_rule_text : ""), |
|
escaped.bv_val ); |
|
|
|
ber_memfree( escaped.bv_val ); |
break; |
break; |
|
|
default: |
default: |
|
(void) ber_skip_tag( ber, &len ); |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ERR, |
|
"get_filter: conn %d unknown filter type=%lu\n", |
|
conn->c_connid, f->f_choice )); |
|
#else |
Debug( LDAP_DEBUG_ANY, "get_filter: unknown filter type=%lu\n", |
Debug( LDAP_DEBUG_ANY, "get_filter: unknown filter type=%lu\n", |
f->f_choice, 0, 0 ); |
f->f_choice, 0, 0 ); |
|
#endif |
f->f_choice = SLAPD_FILTER_COMPUTED; |
f->f_choice = SLAPD_FILTER_COMPUTED; |
f->f_result = SLAPD_COMPARE_UNDEFINED; |
f->f_result = SLAPD_COMPARE_UNDEFINED; |
*fstr = ch_strdup( "(undefined)" ); |
*fstr = ch_strdup( "(undefined)" ); |
break; |
break; |
} |
} |
|
|
|
free( ftmp ); |
|
|
if ( err != LDAP_SUCCESS ) { |
if ( err != LDAP_SUCCESS ) { |
free( (char *) f ); |
|
if ( *fstr != NULL ) { |
if ( *fstr != NULL ) { |
free( *fstr ); |
free( *fstr ); |
} |
} |
|
|
|
if( err != SLAPD_DISCONNECT ) { |
|
/* ignore error */ |
|
f->f_choice = SLAPD_FILTER_COMPUTED; |
|
f->f_result = SLAPD_COMPARE_UNDEFINED; |
|
*fstr = ch_strdup( "(badfilter)" ); |
|
err = LDAP_SUCCESS; |
|
*filt = f; |
|
|
|
} else { |
|
free(f); |
|
} |
} else { |
} else { |
*filt = f; |
*filt = f; |
} |
} |
|
|
free( ftmp ); |
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL2, |
|
"get_filter: conn %d exit\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "end get_filter %d\n", err, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "end get_filter %d\n", err, 0, 0 ); |
|
#endif |
return( err ); |
return( err ); |
} |
} |
|
|
static int |
static int |
get_filter_list( Connection *conn, BerElement *ber, Filter **f, char **fstr, char **text ) |
get_filter_list( Connection *conn, BerElement *ber, |
|
Filter **f, char **fstr, |
|
const char **text ) |
{ |
{ |
Filter **new; |
Filter **new; |
int err; |
int err; |
Line 320 get_filter_list( Connection *conn, BerEl
|
Line 388 get_filter_list( Connection *conn, BerEl
|
ber_len_t len; |
ber_len_t len; |
char *last, *ftmp; |
char *last, *ftmp; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ENTRY, |
|
"get_filter_list: conn %d start\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "begin get_filter_list\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "begin get_filter_list\n", 0, 0, 0 ); |
|
#endif |
*fstr = NULL; |
*fstr = NULL; |
new = f; |
new = f; |
for ( tag = ber_first_element( ber, &len, &last ); tag != LBER_DEFAULT; |
for ( tag = ber_first_element( ber, &len, &last ); tag != LBER_DEFAULT; |
Line 343 get_filter_list( Connection *conn, BerEl
|
Line 415 get_filter_list( Connection *conn, BerEl
|
} |
} |
*new = NULL; |
*new = NULL; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ENTRY, |
|
"get_filter_list: conn %d exit\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "end get_filter_list\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "end get_filter_list\n", 0, 0, 0 ); |
|
#endif |
return( LDAP_SUCCESS ); |
return( LDAP_SUCCESS ); |
} |
} |
|
|
Line 353 get_substring_filter(
|
Line 430 get_substring_filter(
|
BerElement *ber, |
BerElement *ber, |
Filter *f, |
Filter *f, |
char **fstr, |
char **fstr, |
char **text |
const char **text |
) |
) |
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
ber_len_t len; |
ber_len_t len; |
ber_tag_t rc; |
ber_tag_t rc; |
struct berval *val; |
struct berval *value; |
|
struct berval escaped; |
char *last; |
char *last; |
char *type; |
struct berval type; |
int syntax; |
struct berval *nvalue; |
|
|
*text = "error decoding filter"; |
*text = "error decoding filter"; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ENTRY, |
|
"get_substring_filter: conn %d begin\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "begin get_substring_filter\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "begin get_substring_filter\n", 0, 0, 0 ); |
|
#endif |
if ( ber_scanf( ber, "{a" /*}*/, &type ) == LBER_ERROR ) { |
if ( ber_scanf( ber, "{o" /*}*/, &type ) == LBER_ERROR ) { |
return SLAPD_DISCONNECT; |
return SLAPD_DISCONNECT; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
f->f_sub = ch_calloc( 1, sizeof(SubstringsAssertion) ); |
/* not yet implemented */ |
f->f_sub_desc = NULL; |
#else |
rc = slap_bv2ad( &type, &f->f_sub_desc, text ); |
f->f_sub_type = type; |
|
attr_normalize( f->f_sub_type ); |
ch_free( type.bv_val ); |
|
|
/* should get real syntax and see if we have a substring matching rule */ |
if( rc != LDAP_SUCCESS ) { |
syntax = attr_syntax( f->f_sub_type ); |
text = NULL; |
#endif |
ch_free( f->f_sub ); |
|
f->f_choice = SLAPD_FILTER_COMPUTED; |
|
f->f_result = SLAPD_COMPARE_UNDEFINED; |
|
*fstr = ch_strdup( "(undefined)" ); |
|
return LDAP_SUCCESS; |
|
} |
|
|
f->f_sub_initial = NULL; |
f->f_sub_initial = NULL; |
f->f_sub_any = NULL; |
f->f_sub_any = NULL; |
f->f_sub_final = NULL; |
f->f_sub_final = NULL; |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
/* not yet implemented */ |
|
#else |
|
if( fstr ) { |
if( fstr ) { |
*fstr = ch_malloc( strlen( f->f_sub_type ) + 3 ); |
*fstr = ch_malloc( sizeof("(=" /*)*/) + |
sprintf( *fstr, "(%s=" /*)*/, f->f_sub_type ); |
f->f_sub_desc->ad_cname->bv_len ); |
|
sprintf( *fstr, "(%s=" /*)*/, f->f_sub_desc->ad_cname->bv_val ); |
} |
} |
#endif |
|
|
|
for ( tag = ber_first_element( ber, &len, &last ); tag != LBER_DEFAULT; |
for ( tag = ber_first_element( ber, &len, &last ); tag != LBER_DEFAULT; |
tag = ber_next_element( ber, &len, last ) ) |
tag = ber_next_element( ber, &len, last ) ) |
{ |
{ |
rc = ber_scanf( ber, "O", &val ); |
unsigned usage; |
|
|
|
rc = ber_scanf( ber, "O", &value ); |
if ( rc == LBER_ERROR ) { |
if ( rc == LBER_ERROR ) { |
rc = SLAPD_DISCONNECT; |
rc = SLAPD_DISCONNECT; |
goto return_error; |
goto return_error; |
} |
} |
|
|
if ( val == NULL || val->bv_len == 0 ) { |
if ( value == NULL || value->bv_len == 0 ) { |
ber_bvfree( val ); |
ber_bvfree( value ); |
rc = LDAP_INVALID_SYNTAX; |
rc = LDAP_INVALID_SYNTAX; |
goto return_error; |
goto return_error; |
} |
} |
|
|
rc = LDAP_PROTOCOL_ERROR; |
switch ( tag ) { |
|
case LDAP_SUBSTRING_INITIAL: |
|
usage = SLAP_MR_SUBSTR_INITIAL; |
|
break; |
|
|
|
case LDAP_SUBSTRING_ANY: |
|
usage = SLAP_MR_SUBSTR_ANY; |
|
break; |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
case LDAP_SUBSTRING_FINAL: |
/* not yet implemented */ |
usage = SLAP_MR_SUBSTR_FINAL; |
|
break; |
|
|
|
default: |
|
rc = LDAP_PROTOCOL_ERROR; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ERR, |
|
"get_filter_substring: conn %d unknown substring choice=%ld\n", |
|
conn->c_connid, (long)tag )); |
#else |
#else |
/* we should call a substring syntax normalization routine */ |
Debug( LDAP_DEBUG_FILTER, |
value_normalize( val->bv_val, syntax ); |
" unknown substring choice=%ld\n", |
/* this is bogus, value_normalize should take a berval */ |
(long) tag, 0, 0 ); |
val->bv_len = strlen( val->bv_val ); |
|
#endif |
#endif |
|
ber_bvfree( value ); |
|
goto return_error; |
|
} |
|
|
|
rc = value_normalize( f->f_sub_desc, usage, value, &nvalue, text ); |
|
ber_bvfree( value ); |
|
|
|
if( rc != LDAP_SUCCESS ) { |
|
goto return_error; |
|
} |
|
|
|
value = nvalue; |
|
|
|
rc = LDAP_PROTOCOL_ERROR; |
|
|
switch ( tag ) { |
switch ( tag ) { |
case LDAP_SUBSTRING_INITIAL: |
case LDAP_SUBSTRING_INITIAL: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_substring_filter: conn %d INITIAL\n", |
|
conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, " INITIAL\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, " INITIAL\n", 0, 0, 0 ); |
|
#endif |
if ( f->f_sub_initial != NULL ) { |
if ( f->f_sub_initial != NULL ) { |
ber_bvfree( val ); |
ber_bvfree( value ); |
goto return_error; |
goto return_error; |
} |
} |
f->f_sub_initial = val; |
|
|
f->f_sub_initial = value; |
|
|
if( fstr ) { |
if( fstr ) { |
|
filter_escape_value( value, &escaped ); |
*fstr = ch_realloc( *fstr, |
*fstr = ch_realloc( *fstr, |
strlen( *fstr ) + val->bv_len + 1 ); |
strlen( *fstr ) + escaped.bv_len + 1 ); |
strcat( *fstr, val->bv_val ); |
strcat( *fstr, escaped.bv_val ); |
|
ber_memfree( escaped.bv_val ); |
} |
} |
break; |
break; |
|
|
case LDAP_SUBSTRING_ANY: |
case LDAP_SUBSTRING_ANY: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_substring_filter: conn %d ANY\n", |
|
conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, " ANY\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, " ANY\n", 0, 0, 0 ); |
if( ber_bvecadd( &f->f_sub_any, val ) < 0 ) { |
#endif |
ber_bvfree( val ); |
if( ber_bvecadd( &f->f_sub_any, value ) < 0 ) { |
|
ber_bvfree( value ); |
goto return_error; |
goto return_error; |
} |
} |
|
|
if( fstr ) { |
if( fstr ) { |
|
filter_escape_value( value, &escaped ); |
*fstr = ch_realloc( *fstr, |
*fstr = ch_realloc( *fstr, |
strlen( *fstr ) + val->bv_len + 2 ); |
strlen( *fstr ) + escaped.bv_len + 2 ); |
strcat( *fstr, "*" ); |
strcat( *fstr, "*" ); |
strcat( *fstr, val->bv_val ); |
strcat( *fstr, escaped.bv_val ); |
|
ber_memfree( escaped.bv_val ); |
} |
} |
break; |
break; |
|
|
case LDAP_SUBSTRING_FINAL: |
case LDAP_SUBSTRING_FINAL: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_DETAIL1, |
|
"get_substring_filter: conn %d FINAL\n", |
|
conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, " FINAL\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, " FINAL\n", 0, 0, 0 ); |
|
#endif |
if ( f->f_sub_final != NULL ) { |
if ( f->f_sub_final != NULL ) { |
ber_bvfree( val ); |
ber_bvfree( value ); |
goto return_error; |
goto return_error; |
} |
} |
f->f_sub_final = val; |
f->f_sub_final = value; |
|
|
if( fstr ) { |
if( fstr ) { |
|
filter_escape_value( value, &escaped ); |
*fstr = ch_realloc( *fstr, |
*fstr = ch_realloc( *fstr, |
strlen( *fstr ) + val->bv_len + 2 ); |
strlen( *fstr ) + escaped.bv_len + 2 ); |
strcat( *fstr, "*" ); |
strcat( *fstr, "*" ); |
strcat( *fstr, val->bv_val ); |
strcat( *fstr, escaped.bv_val ); |
|
ber_memfree( escaped.bv_val ); |
} |
} |
break; |
break; |
|
|
default: |
default: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_INFO, |
|
"get_substring_filter: conn %d unknown substring type %ld\n", |
|
conn->c_connid, (long)tag )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, |
Debug( LDAP_DEBUG_FILTER, |
" unknown substring type=%ld\n", |
" unknown substring type=%ld\n", |
(long) tag, 0, 0 ); |
(long) tag, 0, 0 ); |
|
#endif |
|
|
ber_bvfree( val ); |
ber_bvfree( value ); |
|
|
return_error: |
return_error: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_INFO, |
|
"get_substring_filter: conn %d error %ld\n", |
|
conn->c_connid, (long)rc )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, " error=%ld\n", |
Debug( LDAP_DEBUG_FILTER, " error=%ld\n", |
(long) rc, 0, 0 ); |
(long) rc, 0, 0 ); |
|
#endif |
if( fstr ) { |
if( fstr ) { |
free( *fstr ); |
free( *fstr ); |
*fstr = NULL; |
*fstr = NULL; |
} |
} |
|
|
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
ad_free( f->f_sub_desc, 1 ); |
/* not yet implemented */ |
|
#else |
|
ch_free( f->f_sub_type ); |
|
#endif |
|
ber_bvfree( f->f_sub_initial ); |
ber_bvfree( f->f_sub_initial ); |
ber_bvecfree( f->f_sub_any ); |
ber_bvecfree( f->f_sub_any ); |
ber_bvfree( f->f_sub_final ); |
ber_bvfree( f->f_sub_final ); |
|
ch_free( f->f_sub ); |
return rc; |
return rc; |
} |
} |
} |
} |
Line 504 return_error:
|
Line 651 return_error:
|
strcat( *fstr, /*(*/ ")" ); |
strcat( *fstr, /*(*/ ")" ); |
} |
} |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ENTRY, |
|
"get_substring_filter: conn %d exit\n", conn->c_connid )); |
|
#else |
Debug( LDAP_DEBUG_FILTER, "end get_substring_filter\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_FILTER, "end get_substring_filter\n", 0, 0, 0 ); |
|
#endif |
return( LDAP_SUCCESS ); |
return( LDAP_SUCCESS ); |
} |
} |
|
|
Line 519 filter_free( Filter *f )
|
Line 671 filter_free( Filter *f )
|
|
|
switch ( f->f_choice ) { |
switch ( f->f_choice ) { |
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
ad_free( f->f_desc, 1 ); |
ad_free( f->f_desc, 1 ); |
#else |
|
if ( f->f_type != NULL ) { |
|
free( f->f_type ); |
|
} |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
case LDAP_FILTER_LE: |
case LDAP_FILTER_LE: |
case LDAP_FILTER_APPROX: |
case LDAP_FILTER_APPROX: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
ava_free( f->f_ava, 1 ); |
ava_free( f->f_ava, 1 ); |
#else |
|
ava_free( &f->f_ava, 0 ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
ad_free( f->f_sub_desc, 1 ); |
ad_free( f->f_sub_desc, 1 ); |
if ( f->f_sub_initial != NULL ) { |
if ( f->f_sub_initial != NULL ) { |
ber_bvfree( f->f_sub_initial ); |
ber_bvfree( f->f_sub_initial ); |
Line 549 filter_free( Filter *f )
|
Line 690 filter_free( Filter *f )
|
if ( f->f_sub_final != NULL ) { |
if ( f->f_sub_final != NULL ) { |
ber_bvfree( f->f_sub_final ); |
ber_bvfree( f->f_sub_final ); |
} |
} |
#else |
|
if ( f->f_sub_type != NULL ) { |
|
free( f->f_sub_type ); |
|
} |
|
if ( f->f_sub_initial != NULL ) { |
|
ber_bvfree( f->f_sub_initial ); |
|
} |
|
ber_bvecfree( f->f_sub_any ); |
|
if ( f->f_sub_final != NULL ) { |
|
ber_bvfree( f->f_sub_final ); |
|
} |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_AND: |
case LDAP_FILTER_AND: |
Line 576 filter_free( Filter *f )
|
Line 705 filter_free( Filter *f )
|
break; |
break; |
|
|
default: |
default: |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG(( "filter", LDAP_LEVEL_ERR, |
|
"filter_free: unknown filter type %lu\n", f->f_choice )); |
|
#else |
Debug( LDAP_DEBUG_ANY, "filter_free: unknown filter type=%lu\n", |
Debug( LDAP_DEBUG_ANY, "filter_free: unknown filter type=%lu\n", |
f->f_choice, 0, 0 ); |
f->f_choice, 0, 0 ); |
|
#endif |
break; |
break; |
} |
} |
|
|
Line 585 filter_free( Filter *f )
|
Line 719 filter_free( Filter *f )
|
} |
} |
|
|
#ifdef LDAP_DEBUG |
#ifdef LDAP_DEBUG |
|
|
void |
void |
filter_print( Filter *f ) |
filter_print( Filter *f ) |
{ |
{ |
int i; |
int i; |
Filter *p; |
Filter *p; |
|
struct berval escaped; |
|
|
if ( f == NULL ) { |
if ( f == NULL ) { |
fprintf( stderr, "No filter!" ); |
fprintf( stderr, "No filter!" ); |
Line 598 filter_print( Filter *f )
|
Line 732 filter_print( Filter *f )
|
|
|
switch ( f->f_choice ) { |
switch ( f->f_choice ) { |
case LDAP_FILTER_EQUALITY: |
case LDAP_FILTER_EQUALITY: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
filter_escape_value( f->f_av_value, &escaped ); |
fprintf( stderr, "(%s=%s)", |
fprintf( stderr, "(%s=%s)", |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_value->bv_val ); |
escaped.bv_val ); |
#else |
ber_memfree( escaped.bv_val ); |
fprintf( stderr, "(%s=%s)", |
|
f->f_ava.ava_type, |
|
f->f_ava.ava_value.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_GE: |
case LDAP_FILTER_GE: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
filter_escape_value( f->f_av_value, &escaped ); |
fprintf( stderr, "(%s>=%s)", |
fprintf( stderr, "(%s>=%s)", |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_desc->ad_cname->bv_val, |
f->f_av_value->bv_val ); |
escaped.bv_val ); |
#else |
ber_memfree( escaped.bv_val ); |
fprintf( stderr, "(%s>=%s)", |
|
f->f_ava.ava_type, |
|
f->f_ava.ava_value.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_LE: |
case LDAP_FILTER_LE: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
filter_escape_value( f->f_av_value, &escaped ); |
fprintf( stderr, "(%s<=%s)", |
fprintf( stderr, "(%s<=%s)", |
f->f_ava->aa_desc->ad_cname->bv_val, |
f->f_ava->aa_desc->ad_cname->bv_val, |
f->f_ava->aa_value->bv_val ); |
escaped.bv_val ); |
#else |
ber_memfree( escaped.bv_val ); |
fprintf( stderr, "(%s<=%s)", |
|
f->f_ava.ava_type, |
|
f->f_ava.ava_value.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_APPROX: |
case LDAP_FILTER_APPROX: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
filter_escape_value( f->f_av_value, &escaped ); |
fprintf( stderr, "(%s~=%s)", |
fprintf( stderr, "(%s~=%s)", |
f->f_ava->aa_desc->ad_cname->bv_val, |
f->f_ava->aa_desc->ad_cname->bv_val, |
f->f_ava->aa_value->bv_val ); |
escaped.bv_val ); |
#else |
ber_memfree( escaped.bv_val ); |
fprintf( stderr, "(%s~=%s)", |
|
f->f_ava.ava_type, |
|
f->f_ava.ava_value.bv_val ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_SUBSTRINGS: |
case LDAP_FILTER_SUBSTRINGS: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
fprintf( stderr, "(%s=" /*)*/, |
fprintf( stderr, "(%s=" /*)*/, |
f->f_sub_desc->ad_cname->bv_val ); |
f->f_sub_desc->ad_cname->bv_val ); |
#else |
|
fprintf( stderr, "(%s=" /*)*/, |
|
f->f_sub_type ); |
|
#endif |
|
if ( f->f_sub_initial != NULL ) { |
if ( f->f_sub_initial != NULL ) { |
|
filter_escape_value( f->f_sub_initial, &escaped ); |
fprintf( stderr, "%s", |
fprintf( stderr, "%s", |
f->f_sub_initial->bv_val ); |
escaped.bv_val ); |
|
ber_memfree( escaped.bv_val ); |
} |
} |
if ( f->f_sub_any != NULL ) { |
if ( f->f_sub_any != NULL ) { |
for ( i = 0; f->f_sub_any[i] != NULL; i++ ) { |
for ( i = 0; f->f_sub_any[i] != NULL; i++ ) { |
|
filter_escape_value( f->f_sub_any[i], &escaped ); |
fprintf( stderr, "*%s", |
fprintf( stderr, "*%s", |
f->f_sub_any[i]->bv_val ); |
escaped.bv_val ); |
|
ber_memfree( escaped.bv_val ); |
} |
} |
} |
} |
if ( f->f_sub_final != NULL ) { |
if ( f->f_sub_final != NULL ) { |
|
filter_escape_value( f->f_sub_final, &escaped ); |
fprintf( stderr, |
fprintf( stderr, |
"*%s", f->f_sub_final->bv_val ); |
"*%s", escaped.bv_val ); |
|
ber_memfree( escaped.bv_val ); |
} |
} |
fprintf( stderr, /*(*/ ")" ); |
fprintf( stderr, /*(*/ ")" ); |
break; |
break; |
|
|
case LDAP_FILTER_PRESENT: |
case LDAP_FILTER_PRESENT: |
#ifdef SLAPD_SCHEMA_NOT_COMPAT |
|
fprintf( stderr, "(%s=*)", |
fprintf( stderr, "(%s=*)", |
f->f_desc->ad_cname->bv_val ); |
f->f_desc->ad_cname->bv_val ); |
#else |
|
fprintf( stderr, "(%s=*)", |
|
f->f_type ); |
|
#endif |
|
break; |
break; |
|
|
case LDAP_FILTER_AND: |
case LDAP_FILTER_AND: |
Line 707 filter_print( Filter *f )
|
Line 821 filter_print( Filter *f )
|
} |
} |
|
|
#endif /* ldap_debug */ |
#endif /* ldap_debug */ |
|
|
|
int filter_escape_value( |
|
struct berval *in, |
|
struct berval *out ) |
|
{ |
|
ber_len_t i; |
|
assert( in ); |
|
assert( out ); |
|
|
|
out->bv_val = (char *) ch_malloc( ( in->bv_len * 3 ) + 1 ); |
|
out->bv_len = 0; |
|
|
|
for( i=0; i < in->bv_len ; i++ ) { |
|
if( FILTER_ESCAPE(in->bv_val[i]) ) { |
|
out->bv_val[out->bv_len++] = SLAP_ESCAPE_CHAR; |
|
out->bv_val[out->bv_len++] = SLAP_ESCAPE_HI( in->bv_val[i] ); |
|
out->bv_val[out->bv_len++] = SLAP_ESCAPE_LO( in->bv_val[i] ); |
|
} else { |
|
out->bv_val[out->bv_len++] = in->bv_val[i]; |
|
} |
|
} |
|
|
|
out->bv_val[out->bv_len] = '\0'; |
|
return LDAP_SUCCESS; |
|
} |