From ae581a19fbe896a797450b9d9573fb66f2735227 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 16:37:38 +0200 Subject: Adding upstream version 1.9.13p3. Signed-off-by: Daniel Baumann --- plugins/sudoers/env_pattern.c | 93 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 93 insertions(+) create mode 100644 plugins/sudoers/env_pattern.c (limited to 'plugins/sudoers/env_pattern.c') diff --git a/plugins/sudoers/env_pattern.c b/plugins/sudoers/env_pattern.c new file mode 100644 index 0000000..d1b9a1b --- /dev/null +++ b/plugins/sudoers/env_pattern.c @@ -0,0 +1,93 @@ +/* + * SPDX-License-Identifier: ISC + * + * Copyright (c) 2017 Todd C. Miller + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + */ + +/* + * This is an open source non-commercial project. Dear PVS-Studio, please check it. + * PVS-Studio Static Code Analyzer for C, C++ and C#: http://www.viva64.com + */ + +#include + +#include +#include +#include + +#include "sudoers.h" + +/* extern for regress tests */ +bool +matches_env_pattern(const char *pattern, const char *var, bool *full_match) +{ + size_t len, sep_pos; + bool iswild = false, match = false; + bool saw_sep = false; + const char *cp; + debug_decl(matches_env_pattern, SUDOERS_DEBUG_ENV); + + /* Locate position of the '=' separator in var=value. */ + sep_pos = strcspn(var, "="); + + /* Locate '*' wildcard and compute len. */ + for (cp = pattern; *cp != '\0'; cp++) { + if (*cp == '*') { + iswild = true; + break; + } + } + len = (size_t)(cp - pattern); + + if (iswild) { + /* Match up to the '*' wildcard. */ + if (strncmp(pattern, var, len) == 0) { + while (*cp != '\0') { + if (*cp == '*') { + /* Collapse sequential '*'s */ + do { + cp++; + } while (*cp == '*'); + /* A '*' at the end of a pattern matches anything. */ + if (*cp == '\0') { + match = true; + break; + } + /* Keep track of whether we matched an equal sign. */ + if (*cp == '=') + saw_sep = true; + /* Look for first match of text after the '*' */ + while ((saw_sep || len != sep_pos) && + var[len] != '\0' && var[len] != *cp) + len++; + } + if (var[len] != *cp) + break; + cp++; + len++; + } + if (*cp == '\0' && (len == sep_pos || var[len] == '\0')) + match = true; + } + } else { + if (strncmp(pattern, var, len) == 0 && + (len == sep_pos || var[len] == '\0')) { + match = true; + } + } + if (match) + *full_match = len > sep_pos + 1; + debug_return_bool(match); +} -- cgit v1.2.3