2.5.13/2.5.x/apache2/msc_multipart.h

@@ -0,0 +1,144 @@
+/*
+ * ModSecurity for Apache 2.x, http://www.modsecurity.org/
+ * Copyright (c) 2004-2010 Trustwave Holdings, Inc. (http://www.trustwave.com/)
+ *
+ * This product is released under the terms of the General Public Licence,
+ * version 2 (GPLv2). Please refer to the file LICENSE (included with this
+ * distribution) which contains the complete text of the licence.
+ *
+ * There are special exceptions to the terms and conditions of the GPL
+ * as it is applied to this software. View the full text of the exception in
+ * file MODSECURITY_LICENSING_EXCEPTION in the directory of this software
+ * distribution.
+ *
+ * If any of the files related to licensing are missing or if you have any
+ * other questions related to licensing please contact Trustwave Holdings, Inc.
+ * directly using the email address support@trustwave.com.
+ *
+ */
+#ifndef _MSC_MULTIPART_H_
+#define _MSC_MULTIPART_H_
+
+#define MULTIPART_BUF_SIZE              4096
+
+#define MULTIPART_FORMDATA              1
+#define MULTIPART_FILE                  2
+
+typedef struct multipart_part multipart_part;
+typedef struct multipart_data multipart_data;
+
+#include "apr_general.h"
+#include "apr_tables.h"
+#include "modsecurity.h"
+
+typedef struct value_part_t value_part_t;
+struct value_part_t {
+    char *data;
+    long int length;
+};
+
+struct multipart_part {
+    /* part type, can be MULTIPART_FORMDATA or MULTIPART_FILE */
+    int                      type;
+    /* the name */
+    char                    *name;
+
+    /* variables only, variable value */
+    char                    *value;
+    apr_array_header_t      *value_parts;
+
+    /* files only, the content type (where available) */
+    char                    *content_type;
+
+    /* files only, the name of the temporary file holding data */
+    char                    *tmp_file_name;
+    int                      tmp_file_fd;
+    unsigned int             tmp_file_size;
+    /* files only, filename as supplied by the browser */
+    char                    *filename;
+
+    char                    *last_header_name;
+    apr_table_t             *headers;
+
+    unsigned int             offset;
+    unsigned int             length;
+};
+
+struct multipart_data {
+    /* this array keeps parts */
+    apr_array_header_t      *parts;
+
+    /* Number of parts that are files */
+    int                      nfiles;
+
+    /* mime boundary used to detect when
+     * parts end and begin
+     */
+    char                    *boundary;
+    int                      boundary_count;
+
+    /* internal buffer and other variables
+     * used while parsing
+     */
+    char                     buf[MULTIPART_BUF_SIZE + 2];
+    int                      buf_contains_line;
+    char                    *bufptr;
+    int                      bufleft;
+
+    unsigned int             buf_offset;
+
+    /* pointer that keeps track of a part while
+     * it is being built
+     */
+    multipart_part          *mpp;
+
+
+    /* part parsing state; 0 means we are reading
+     * headers, 1 means we are collecting data
+     */
+    int                      mpp_state;
+
+    /* because of the way this parsing algorithm
+     * works we hold back the last two bytes of
+     * each data chunk so that we can discard it
+     * later if the next data chunk proves to be
+     * a boundary; the first byte is an indicator
+     * 0 - no content, 1 - two data bytes available
+     */
+    char                     reserve[4];
+
+    int                      seen_data;
+    int                      is_complete;
+
+    int                      flag_error;
+    int                      flag_data_before;
+    int                      flag_data_after;
+    int                      flag_header_folding;
+    int                      flag_boundary_quoted;
+    int                      flag_lf_line;
+    int                      flag_crlf_line;
+    int                      flag_unmatched_boundary;
+    int                      flag_boundary_whitespace;
+    int                      flag_missing_semicolon;
+    int                      flag_invalid_quoting;
+    int                      flag_invalid_header_folding;
+    int                      flag_file_limit_exceeded;
+};
+
+
+/* Functions */
+
+int DSOLOCAL multipart_init(modsec_rec *msr, char **error_msg);
+
+int DSOLOCAL multipart_complete(modsec_rec *msr, char **error_msg);
+
+int DSOLOCAL multipart_process_chunk(modsec_rec *msr, const char *buf,
+    unsigned int size, char **error_msg);
+
+apr_status_t DSOLOCAL multipart_cleanup(modsec_rec *msr);
+
+int DSOLOCAL multipart_get_arguments(modsec_rec *msr, char *origin, apr_table_t *arguments);
+
+char DSOLOCAL *multipart_reconstruct_urlencoded_body_sanitise(modsec_rec *msr);
+
+#endif