lib/ldap_escape.c

説明を見る。

/* 
   Unix SMB/CIFS implementation.
   ldap filter argument escaping

   Copyright (C) 1998, 1999, 2000 Luke Howard <lukeh@padl.com>,
   Copyright (C) 2003 Andrew Bartlett <abartlet@samba.org>

  
   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 of the License, or
   (at your option) any later version.
   
   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.
   
   You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/

#include "includes.h"

/**
 * Escape a parameter to an LDAP filter string, so they cannot contain
 * embeded ( ) * or \ chars which may cause it not to parse correctly. 
 *
 * @param s The input string
 *
 * @return A string allocated with malloc(), containing the escaped string, 
 * and to be free()ed by the caller.
 **/

char *escape_ldap_string_alloc(const char *s)
{
        size_t len = strlen(s)+1;
        char *output = (char *)SMB_MALLOC(len);
        const char *sub;
        int i = 0;
        char *p = output;

        if (output == NULL) {
                return NULL;
        }
        
        while (*s)
        {
                switch (*s)
                {
                case '*':
                        sub = "\\2a";
                        break;
                case '(':
                        sub = "\\28";
                        break;
                case ')':
                        sub = "\\29";
                        break;
                case '\\':
                        sub = "\\5c";
                        break;
                default:
                        sub = NULL;
                        break;
                }
                
                if (sub) {
                        len = len + 3;
                        output = (char *)SMB_REALLOC(output, len);
                        if (!output) { 
                                return NULL;
                        }
                        
                        p = &output[i];
                        strncpy (p, sub, 3);
                        p += 3;
                        i += 3;

                } else {
                        *p = *s;
                        p++;
                        i++;
                }
                s++;
        }
        
        *p = '\0';
        return output;
}

char *escape_rdn_val_string_alloc(const char *s)
{
        char *output, *p;

        /* The maximum size of the escaped string can be twice the actual size */
        output = (char *)SMB_MALLOC(2*strlen(s) + 1);

        if (output == NULL) {
                return NULL;
        }

        p = output;
        
        while (*s)
        {
                switch (*s)
                {
                case ',':
                case '=':
                case '+':
                case '<':
                case '>':
                case '#':
                case ';':
                case '\\':
                case '\"':
                        *p++ = '\\';
                        *p++ = *s;
                        break;
                default:
                        *p = *s;
                        p++;
                }
                
                s++;
        }
        
        *p = '\0';

        /* resize the string to the actual final size */
        output = (char *)SMB_REALLOC(output, strlen(output) + 1);
        return output;
}

---