1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
samba-mirror/source3/lib/ldap_escape.c
2009-07-09 22:25:29 +02:00

138 lines
2.5 KiB
C

/*
Unix SMB/CIFS implementation.
ldap filter argument escaping
Copyright (C) 1998, 1999, 2000 Luke Howard <lukeh@padl.com>,
Copyright (C) 2003 Andrew Bartlett <abartlet@samba.org>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
/**
* Escape a parameter to an LDAP filter string, so they cannot contain
* embeded ( ) * or \ chars which may cause it not to parse correctly.
*
* @param s The input string
*
* @return A string allocated with malloc(), containing the escaped string,
* and to be free()ed by the caller.
**/
char *escape_ldap_string(TALLOC_CTX *mem_ctx, const char *s)
{
size_t len = strlen(s)+1;
char *output = talloc_array(mem_ctx, char, len);
const char *sub;
int i = 0;
char *p = output;
if (output == NULL) {
return NULL;
}
while (*s)
{
switch (*s)
{
case '*':
sub = "\\2a";
break;
case '(':
sub = "\\28";
break;
case ')':
sub = "\\29";
break;
case '\\':
sub = "\\5c";
break;
default:
sub = NULL;
break;
}
if (sub) {
char *tmp;
len = len + 3;
tmp = talloc_realloc(mem_ctx, output, char, len);
if (tmp == NULL) {
TALLOC_FREE(output);
return NULL;
}
output = tmp;
p = &output[i];
strncpy (p, sub, 3);
p += 3;
i += 3;
} else {
*p = *s;
p++;
i++;
}
s++;
}
*p = '\0';
return output;
}
char *escape_rdn_val_string_alloc(const char *s)
{
char *output, *p;
/* The maximum size of the escaped string can be twice the actual size */
output = (char *)SMB_MALLOC(2*strlen(s) + 1);
if (output == NULL) {
return NULL;
}
p = output;
while (*s)
{
switch (*s)
{
case ',':
case '=':
case '+':
case '<':
case '>':
case '#':
case ';':
case '\\':
case '\"':
*p++ = '\\';
*p++ = *s;
break;
default:
*p = *s;
p++;
}
s++;
}
*p = '\0';
/* resize the string to the actual final size */
output = (char *)SMB_REALLOC(output, strlen(output) + 1);
return output;
}