Changeset 22934

Timestamp:

2010-09-21T18:45:17+12:00 (13 years ago)

Author:

ak19

Message:

For ticket no 712. Fixes to 2 related crashes that occurred when using a combination of advanced (server.exe and library.cgi depending on which web server was used): 1. When parsing cgi args, arrays stem and fold contained the URL encodings percent-2-C rather than commas for delimiters and weren't split properly resulting in arrays of unexpected lengths (and values). Need to decode the percent-2-C to commas by calling decode_commas() in cgiutils.cpp before splitting. 2. decode_commas in cgiutils.cpp was performing an illegal iterator operation by attempting to peek PAST the end of the iterator which doesn't seem to be allowed by the STL code. When the iteration really got past the end, the iteration operation causes a problem resulting in a server.exe crash of its own.

File:

• main/trunk/greenstone2/runtime-src/src/recpt/cgiutils.cpp (modified) (2 diffs)

main/trunk/greenstone2/runtime-src/src/recpt/cgiutils.cpp

@@ -412 +412 @@
   text_t::const_iterator end = intext.end ();
   
-  while (here != end) {
-    if ((here+2<end) && *here == '%' && *(here+1) == '2' &&
-    (*(here+2) == 'C' || *(here+2) == 'c')) {
+  /*while (here != end) {
+    if (((here+2)<end) && *here == '%' && *(here+1) == '2'
+        && (*(here+2) == 'C' || *(here+2) == 'c')) {
       here += 2;
       outtext.push_back(',');
@@ -421 +421 @@
     ++here;
   }
+  return outtext;*/
+
+  // iterators do not allow a forward increment/peek that goes past 
+  // iterator's end: tests like (here+2 <end) above cause errors if 
+  // the result ends up being > end. So have to test one character 
+  // at a time, since tests like (here != end) *are* allowed:
+
+  while (here != end) { // look for "%2C" to replace with ","
+     if(*here == '%') {
+         ++here;
+         if(here != end && *here == '2') {
+            ++here;
+            if(here != end && (*here == 'C' || *here == 'c')) {
+                outtext.push_back(',');
+            } else {
+                here -= 2;
+                outtext.push_back (*here);
+            }
+         } else { // go back to % char and push it back
+            --here;
+            outtext.push_back (*here);
+         }      
+     } else {
+        outtext.push_back (*here);
+     }
+
+     ++here;
+  } // end while
   return outtext;
 }