/** @file mime.c \brief MIME handling functions */ #include #include #include #include "mime.h" #include "sstring.h" #include "qrdata.h" #include "qoff.h" /** * skip whitespaces in header line * * @param line header field * @param len length of data, must be > 0 * @return pointer to first character after whitespace, NULL on syntax error (e.g. unfinished comment) * * This function skips whitespace from the current position. If a RfC 822 section 2.8 style comment is * found this is also skipped. If a newline is encountered before a non-whitespace and non-comment * character it is also skipped, including all following whitespace. * * If it returns (line + len) everything from line until end of data block is a comment * * line has to be a valid (but unparsed) and may be a folded header line. For this it has to meet this * constraints: * -it has to end with CR, LF or CRLF * -it may have CR, LF or CRLF in the middle, but this has to be directly followed by either SPACE or TAB */ const char * skipwhitespace(const char *line, const size_t len) { int ws = 0; /* found at least one whitespace */ size_t l = len; const char *c = line; for (;;) { int brace = 0; ws = 0; /* skip whitespaces */ if ((*c == ' ') || (*c == '\t')) { while ((*c == ' ') || (*c == '\t')) { c++; if (!--l) return c; } ws = 1; } /* RfC 822 Section 2.8 */ if (ws && (*c == ';')) { c++; if (!--l) return c; while ((*c != '\r') || (*c != '\n')) { c++; if (!--l) return c; } if (*c == '\r') { c++; if (--l && (*c == '\n')) { l--; c++; } } } ws = 0; if (*c == '\r') { c++; l--; ws = 1; } if (l && (*c == '\n')) { c++; l--; ws = 1; } if (ws) continue; if ((!--l) || (*c != '(')) { return c; } do { if (!--l) return NULL; if (*c == '(') { if (*(c - 1) != '\\') brace++; } else if (*c == ')') { if (*(c - 1) != '\\') brace--; } else if ((*c == '\r') || (*c == '\n')) { ws = 0; } c++; } while (brace); } } /** * scan "Content-Type" header line and check if type is multipart/(*) or message/(*) * * @param line header field * @param boundary reference to boundary is stored here * @return 1 if line contains multipart/(*) or message/(*) declaration, 0 if other type, -1 on syntax error */ int is_multipart(const cstring *line, cstring *boundary) { const char *ch; if (!line->len) return 0; if ( (ch = skipwhitespace(line->s + 13, line->len - 13)) == NULL) return -1; if (ch == line->s + line->len) return -1; STREMPTY(*boundary); if (!strncasecmp(ch, "multipart/", 10) || !strncasecmp(ch, "message/", 8)) { size_t i, j; if ((*(ch + 1) == 'u') || (*(ch + 1) == 'U')) { i = 10; } else { i = 8; } j = mime_token(ch + i, line->len - (ch - line->s) - i); i += j; if (!j || (ch[i] == '=')) return -1; if (ch[i] != ';') { return -1; } i++; for (;;) { ch += i; ch = skipwhitespace(ch, line->len - (ch - line->s)); /* multipart/(*) or message/(*) without boundary is invalid */ if (ch == line->s + line->len) return -1; i = mime_param(ch, line->len - (ch - line->s)); if (i >= 10) { if (!strncasecmp("boundary=", ch, 9)) { boundary->s = ch + 9; if (*(ch + 9) == '"') { const char *e; (boundary->s)++; e = memchr(ch + 10, '"', line->len - 10 - (ch - line->s)); boundary->len = e - ch - 10; if (!e) { write(1, "D5.6.3 boundary definition is unterminated quoted string\n", 58); exit(0); } else if (boundary->len > 68) { write(1, "D5.6.3 boundary definition is too long\n", 40); exit(0); } j = boundary->len; } else { j = 0; while (!WSPACE(boundary->s[j]) && (boundary->s[j] != ';') && (boundary->s + j < line->s + line ->len)) { j++; } boundary->len = j; } if (!boundary->len) { write(1, "D5.6.3 boundary definition is empty\n", 37); exit(0); } while (j > 0) { j--; if (!(((boundary->s[j] >= 'a') && (boundary->s[j] <= 'z')) || ((boundary->s[j] >= 'A') && (boundary->s[j] <= 'Z')) || ((boundary->s[j] >= '+') && (boundary->s[j] <= ':')) || ((boundary->s[j] >= '\'') || (boundary->s[j] == ')')) || ((boundary->s[j] >= '+') || (boundary->s[j] == ')')) || (boundary->s[j] == '_') || (boundary->s[j] == '=') || (boundary->s[j] == '_'))) { write(1, "D5.6.3 boundary definition contains invalid character\n", 55); exit(0); } } /* we have a valid boundary definition, that's all what we're interested in */ return 1; } } if (!i) return -1; if (*(ch + i) == ';') i++; } return -1; } return 0; } /** * get length of a MIME header field, even if it is folded * * @param msg message data to scan * @param len length of data * @return length of header field, 0 if field does not end until end of data */ size_t getfieldlen(const char *msg, const size_t len) { const char *cr = msg; size_t r = len; do { while (r && (*cr != '\r') && (*cr != '\n')) { cr++; r--; } if (r && (*cr == '\r')) { cr++; r--; } if (r && (*cr == '\n')) { cr++; r--; } } while (r && ((*cr == ' ') || (*cr == '\t'))); return ((*(cr - 1) == '\n') || (*(cr - 1) == '\r')) ? len - r : 0; } /** * get length of MIME header parameter * * @param line header line to scan * @param len length of line * @return length of parameter, 0 on syntax error */ size_t mime_param(const char *line, const size_t len) { size_t i = mime_token(line, len); if (!i || (i == len) || (line[i] != '=')) return 0; i++; if (line[i] == '"') { for (i++; i < len; i++) { if ((line[i] == '"') && (line[i - 1] != '\\')) { break; } } if (i == len) { return i; } i++; if ((line[i] != ';') && (line[i] != '(') && !WSPACE(line[i])) { return 0; } return i; } else { size_t j; if (WSPACE(line[i])) return 0; j = mime_token(line + i, len - i); i += j; if ((line[i] == ';') || WSPACE(line[i])) return i; return 0; } } /** * get length of MIME header token as defined in RfC 2045, section 5.1 * * @param line header line to scan * @param len length of line * @return length of parameter, 0 on syntax error */ size_t mime_token(const char *line, const size_t len) { size_t i = 0; for (; i < len; i++) { if ((line[i] == ';') || (line[i] == '=')) { return i; } if ((line[i] == ' ') || (line[i] == '\t') || (line[i] == '\r') || (line[i] == '\n')) { const char *e = skipwhitespace(line + i, len - i); return (e == line + len) ? i : 0; } if ((line[i] <= 32) || TSPECIAL(line[i])) { return 0; } } return i; } /** * find next mime boundary * * @param buf buffer to scan * @param len length of buffer * @param boundary boundary limit string * @return offset of first character behind next boundary, 0 if no boundary found */ q_off_t find_boundary(const char *buf, const q_off_t len, const cstring *boundary) { q_off_t pos = 0; if (len < boundary->len + 3) return 0; while (pos < len - 3 - boundary->len) { if (((buf[pos] == '\r') || (buf[pos] == '\n')) && (buf[pos + 1] == '-') && (buf[pos + 2] == '-')) { if (!strncmp(buf + pos + 3, boundary->s, boundary->len)) { pos += 3 + boundary->len; if (WSPACE(buf[pos])) return pos; if (pos + 1 < len) { if ((buf[pos] == '-') && (buf[pos + 1] == '-') && ((pos + 2 == len) || (WSPACE(buf[pos + 2])))) { return pos; } } } } pos++; } return 0; }