0e4fbef2 |
/*
* Extract component parts of ARJ archives.
* |
c442ca9c |
* Copyright (C) 2013-2019 Cisco Systems, Inc. and/or its affiliates. All rights reserved.
* Copyright (C) 2007-2013 Sourcefire, Inc. |
2023340a |
*
* Authors: Trog |
0e4fbef2 |
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
* MA 02110-1301, USA.
*/
#if HAVE_CONFIG_H
#include "clamav-config.h"
#endif
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <ctype.h>
#include "clamav.h"
#include "others.h"
#include "unarj.h"
#define FIRST_HDR_SIZE 30
#define COMMENT_MAX 2048
#define FNAME_MAX 512
#define HEADERSIZE_MAX (FIRST_HDR_SIZE + 10 + FNAME_MAX + COMMENT_MAX)
#define MAXDICBIT 16
#define DDICSIZ 26624
#define THRESHOLD 3
#ifndef UCHAR_MAX
#define UCHAR_MAX (255)
#endif
#ifndef CHAR_BIT
#define CHAR_BIT (8)
#endif
#define MAXMATCH 256
#ifndef FALSE
#define FALSE (0)
#define TRUE (1)
#endif
#define CODE_BIT 16
#define NT (CODE_BIT + 3)
#define PBIT 5
#define TBIT 5
#define NC (UCHAR_MAX + MAXMATCH + 2 - THRESHOLD)
#define NP (MAXDICBIT + 1)
#define CBIT 9
#define CTABLESIZE 4096
#define PTABLESIZE 256
#define STRTP 9
#define STOPP 13
#define STRTL 0
#define STOPL 7
#if NT > NP
#define NPT NT
#else
#define NPT NP
#endif
#define GARBLE_FLAG 0x01
#ifndef HAVE_ATTRIB_PACKED
#define __attribute__(x)
#endif
#ifdef HAVE_PRAGMA_PACK
#pragma pack(1)
#endif
#ifdef HAVE_PRAGMA_PACK_HPPA
#pragma pack 1
#endif
typedef struct arj_main_hdr_tag {
uint8_t first_hdr_size; /* must be 30 bytes */
uint8_t version;
uint8_t min_version;
uint8_t host_os;
uint8_t flags;
uint8_t security_version;
uint8_t file_type;
uint8_t pad;
uint32_t time_created __attribute__ ((packed));
uint32_t time_modified __attribute__ ((packed));
uint32_t archive_size __attribute__ ((packed));
uint32_t sec_env_file_position __attribute__ ((packed));
uint16_t entryname_pos __attribute__ ((packed));
uint16_t sec_trail_size __attribute__ ((packed));
uint16_t host_data __attribute__ ((packed));
} arj_main_hdr_t;
typedef struct arj_file_hdr_tag {
uint8_t first_hdr_size; /* must be 30 bytes */
uint8_t version;
uint8_t min_version;
uint8_t host_os;
uint8_t flags;
uint8_t method;
uint8_t file_type;
uint8_t password_mod;
uint32_t time_modified __attribute__ ((packed));
uint32_t comp_size __attribute__ ((packed));
uint32_t orig_size __attribute__ ((packed));
uint32_t orig_crc __attribute__ ((packed));
uint16_t entryname_pos __attribute__ ((packed));
uint16_t file_mode __attribute__ ((packed));
uint16_t host_data __attribute__ ((packed));
} arj_file_hdr_t;
#ifdef HAVE_PRAGMA_PACK
#pragma pack()
#endif
#ifdef HAVE_PRAGMA_PACK_HPPA
#pragma pack
#endif
typedef struct arj_decode_tag {
unsigned char *text; |
3f065bbe |
fmap_t *map;
size_t offset;
const uint8_t *buf;
const void *bufend; |
0e4fbef2 |
uint16_t blocksize;
uint16_t bit_buf;
int bit_count;
uint32_t comp_size;
int16_t getlen, getbuf;
uint16_t left[2 * NC - 1];
uint16_t right[2 * NC - 1];
unsigned char c_len[NC];
uint16_t c_table[CTABLESIZE];
unsigned char pt_len[NPT]; |
b5231f5f |
unsigned char sub_bit_buf; |
0e4fbef2 |
uint16_t pt_table[PTABLESIZE]; |
d076ad02 |
int status; |
0e4fbef2 |
} arj_decode_t;
static int fill_buf(arj_decode_t *decode_data, int n)
{ |
afa9976c |
if (decode_data->status == CL_EFORMAT)
return CL_EFORMAT; |
d341e8e5 |
if (((uint64_t) decode_data->bit_buf) * (n > 0 ? 2 << (n - 1) : 0) > UINT32_MAX)
return CL_EFORMAT;
decode_data->bit_buf = (((uint64_t) decode_data->bit_buf) << n) & 0xFFFF; |
0e4fbef2 |
while (n > decode_data->bit_count) {
decode_data->bit_buf |= decode_data->sub_bit_buf << (n -= decode_data->bit_count);
if (decode_data->comp_size != 0) {
decode_data->comp_size--; |
3f065bbe |
if (decode_data->buf == decode_data->bufend) {
size_t len;
decode_data->buf = fmap_need_off_once_len(decode_data->map, decode_data->offset, 8192, &len);
if (!decode_data->buf || !len) { |
00cfd45f |
/* the file is most likely corrupted, so
* we return CL_EFORMAT instead of CL_EREAD
*/
decode_data->status = CL_EFORMAT;
return CL_EFORMAT; |
3f065bbe |
}
decode_data->bufend = decode_data->buf + len; |
0e4fbef2 |
} |
3f065bbe |
decode_data->sub_bit_buf = *decode_data->buf++;
decode_data->offset++; |
0e4fbef2 |
} else {
decode_data->sub_bit_buf = 0;
}
decode_data->bit_count = CHAR_BIT;
}
decode_data->bit_buf |= decode_data->sub_bit_buf >> (decode_data->bit_count -= n);
return CL_SUCCESS;
}
static int init_getbits(arj_decode_t *decode_data)
{
decode_data->bit_buf = 0;
decode_data->sub_bit_buf = 0;
decode_data->bit_count = 0;
return fill_buf(decode_data, 2 * CHAR_BIT);
}
static unsigned short arj_getbits(arj_decode_t *decode_data, int n)
{
unsigned short x;
x = decode_data->bit_buf >> (2 * CHAR_BIT - n);
fill_buf(decode_data, n);
return x;
}
static int decode_start(arj_decode_t *decode_data)
{
decode_data->blocksize = 0;
return init_getbits(decode_data);
}
static int write_text(int ofd, unsigned char *data, int length)
{
int count;
count = cli_writen(ofd, data, length);
if (count != length) { |
871177cd |
return CL_EWRITE; |
0e4fbef2 |
} else {
return CL_SUCCESS;
}
}
static int make_table(arj_decode_t *decode_data, int nchar, unsigned char *bitlen, int tablebits,
unsigned short *table, int tablesize)
{
unsigned short count[17], weight[17], start[18], *p;
unsigned int i, k, len, ch, jutbits, avail, nextcode, mask;
for (i = 1; i <=16; i++) {
count[i] = 0;
}
for (i = 0; (int)i < nchar; i++) { |
f0f7f92f |
if (bitlen[i] >= 17) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
count[bitlen[i]]++;
}
start[1] = 0;
for (i = 1; i <= 16; i++) {
start[i+1] = start[i] + (count[i] << (16 - i));
}
if (start[17] != (unsigned short) (1 << 16)) { |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
0e4fbef2 |
}
jutbits = 16 - tablebits; |
f0f7f92f |
if (tablebits >= 17) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
for (i = 1; (int)i <= tablebits; i++) {
start[i] >>= jutbits;
weight[i] = 1 << (tablebits - i);
}
while (i <= 16) {
weight[i] = 1 << (16 - i);
i++;
}
i = start[tablebits + 1] >> jutbits;
if (i != (unsigned short) (1 << 16)) {
k = 1 << tablebits;
while (i != k) { |
cd94be7a |
if (i >= (unsigned int)tablesize) { |
f0f7f92f |
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
table[i++] = 0;
}
}
avail = nchar;
mask = 1 << (15 - tablebits);
for (ch = 0; (int)ch < nchar; ch++) {
if ((len = bitlen[ch]) == 0) {
continue;
} |
f0f7f92f |
if (len >= 17) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
k = start[len];
nextcode = k + weight[len];
if ((int)len <= tablebits) {
if (nextcode > (unsigned int) tablesize) { |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
0e4fbef2 |
}
for (i = start[len]; i < nextcode; i++) {
table[i] = ch;
}
} else {
p = &table[k >> jutbits];
i = len - tablebits;
while (i != 0) {
if (*p == 0) { |
f0f7f92f |
if (avail >= (2 * NC - 1)) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
decode_data->right[avail] = decode_data->left[avail] = 0;
*p = avail++;
} |
f0f7f92f |
if (*p >= (2 * NC - 1)) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
if (k & mask) {
p = &decode_data->right[*p];
} else {
p = &decode_data->left[*p];
}
k <<= 1;
i--;
}
*p = ch;
}
start[len] = nextcode;
}
return CL_SUCCESS;
}
|
d076ad02 |
static int read_pt_len(arj_decode_t *decode_data, int nn, int nbit, int i_special) |
0e4fbef2 |
{
int i, n;
short c;
unsigned short mask;
n = arj_getbits(decode_data, nbit);
if (n == 0) { |
f0f7f92f |
if (nn > NPT) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
c = arj_getbits(decode_data, nbit);
for (i = 0; i < nn; i++) {
decode_data->pt_len[i] = 0;
}
for (i = 0; i < 256; i++) {
decode_data->pt_table[i] = c;
}
} else {
i = 0; |
2fda4dc0 |
while ((i < n) && (i < NPT)) { |
0e4fbef2 |
c = decode_data->bit_buf >> 13;
if (c == 7) {
mask = 1 << 12;
while (mask & decode_data->bit_buf) {
mask >>= 1;
c++;
}
}
fill_buf(decode_data, (c < 7) ? 3 : (int)(c - 3)); |
d076ad02 |
if (decode_data->status != CL_SUCCESS) {
return decode_data->status;
} |
0e4fbef2 |
decode_data->pt_len[i++] = (unsigned char) c;
if (i == i_special) {
c = arj_getbits(decode_data, 2); |
d076ad02 |
if (decode_data->status != CL_SUCCESS) {
return decode_data->status;
} |
2fda4dc0 |
while ((--c >= 0) && (i < NPT)) { |
0e4fbef2 |
decode_data->pt_len[i++] = 0;
}
}
} |
2fda4dc0 |
while ((i < nn) && (i < NPT)) { |
0e4fbef2 |
decode_data->pt_len[i++] = 0;
} |
d076ad02 |
if (make_table(decode_data, nn, decode_data->pt_len, 8, decode_data->pt_table, PTABLESIZE) != CL_SUCCESS) { |
871177cd |
return CL_EUNPACK; |
d076ad02 |
} |
0e4fbef2 |
} |
d076ad02 |
return CL_SUCCESS; |
0e4fbef2 |
}
static int read_c_len(arj_decode_t *decode_data)
{
short i, c, n;
unsigned short mask;
n = arj_getbits(decode_data, CBIT); |
d076ad02 |
if (decode_data->status != CL_SUCCESS) {
return decode_data->status;
} |
0e4fbef2 |
if (n == 0) {
c = arj_getbits(decode_data, CBIT); |
d076ad02 |
if (decode_data->status != CL_SUCCESS) {
return decode_data->status;
} |
0e4fbef2 |
for (i = 0; i < NC; i++) {
decode_data->c_len[i] = 0;
}
for (i = 0; i < CTABLESIZE; i++) {
decode_data->c_table[i] = c;
}
} else {
i = 0;
while (i < n) {
c = decode_data->pt_table[decode_data->bit_buf >> 8];
if (c >= NT) {
mask = 1 << 7;
do { |
2fda4dc0 |
if (c >= (2 * NC - 1)) { |
fc355be4 |
cli_dbgmsg("ERROR: bounds exceeded\n"); |
d076ad02 |
decode_data->status = CL_EFORMAT; |
2fda4dc0 |
return CL_EFORMAT;
} |
0e4fbef2 |
if (decode_data->bit_buf & mask) {
c = decode_data->right[c];
} else {
c = decode_data->left[c];
}
mask >>= 1;
} while (c >= NT);
} |
f0f7f92f |
if (c >= 19) {
cli_dbgmsg("UNARJ: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK;
return CL_EUNPACK; |
f0f7f92f |
} |
0e4fbef2 |
fill_buf(decode_data, (int)(decode_data->pt_len[c])); |
d076ad02 |
if (decode_data->status != CL_SUCCESS) {
return decode_data->status;
} |
0e4fbef2 |
if (c <= 2) {
if (c == 0) {
c = 1;
} else if (c == 1) {
c = arj_getbits(decode_data, 4) + 3;
} else {
c = arj_getbits(decode_data, CBIT) + 20;
} |
d076ad02 |
if (decode_data->status != CL_SUCCESS) {
return decode_data->status;
} |
0e4fbef2 |
while (--c >= 0) { |
f3a894d9 |
if (i >= NC) { |
fc355be4 |
cli_dbgmsg("ERROR: bounds exceeded\n"); |
d076ad02 |
decode_data->status = CL_EFORMAT; |
f3a894d9 |
return CL_EFORMAT;
} |
0e4fbef2 |
decode_data->c_len[i++] = 0;
}
} else { |
f3a894d9 |
if (i >= NC) { |
fc355be4 |
cli_dbgmsg("ERROR: bounds exceeded\n"); |
d076ad02 |
decode_data->status = CL_EFORMAT; |
f3a894d9 |
return CL_EFORMAT;
} |
0e4fbef2 |
decode_data->c_len[i++] = (unsigned char) (c - 2);
}
}
while (i < NC) {
decode_data->c_len[i++] = 0;
} |
d076ad02 |
if (make_table(decode_data, NC, decode_data->c_len, 12, decode_data->c_table, CTABLESIZE) != CL_SUCCESS) { |
871177cd |
return CL_EUNPACK; |
d076ad02 |
} |
0e4fbef2 |
}
return CL_SUCCESS;
}
static uint16_t decode_c(arj_decode_t *decode_data)
{
uint16_t j, mask;
if (decode_data->blocksize == 0) {
decode_data->blocksize = arj_getbits(decode_data, 16);
read_pt_len(decode_data, NT, TBIT, 3);
read_c_len(decode_data);
read_pt_len(decode_data, NT, PBIT, -1);
}
decode_data->blocksize--;
j = decode_data->c_table[decode_data->bit_buf >> 4];
if (j >= NC) {
mask = 1 << 3;
do { |
2fda4dc0 |
if (j >= (2 * NC - 1)) { |
fc355be4 |
cli_dbgmsg("ERROR: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK; |
2fda4dc0 |
return 0;
} |
0e4fbef2 |
if (decode_data->bit_buf & mask) {
j = decode_data->right[j];
} else {
j = decode_data->left[j];
}
mask >>= 1;
} while (j >= NC);
}
fill_buf(decode_data, (int)(decode_data->c_len[j]));
return j;
}
static uint16_t decode_p(arj_decode_t *decode_data)
{
unsigned short j, mask;
j = decode_data->pt_table[decode_data->bit_buf >> 8];
if (j >= NP) {
mask = 1 << 7;
do { |
997cefa4 |
if (j >= (2 * NC - 1)) { |
fc355be4 |
cli_dbgmsg("ERROR: bounds exceeded\n"); |
871177cd |
decode_data->status = CL_EUNPACK; |
997cefa4 |
return 0;
} |
0e4fbef2 |
if (decode_data->bit_buf & mask) {
j = decode_data->right[j];
} else {
j = decode_data->left[j];
}
mask >>= 1;
} while (j >= NP);
}
fill_buf(decode_data, (int)(decode_data->pt_len[j]));
if (j != 0) {
j--;
j = (1 << j) + arj_getbits(decode_data, (int)j);
}
return j;
}
|
3f065bbe |
static int decode(arj_metadata_t *metadata) |
0e4fbef2 |
{
int ret;
arj_decode_t decode_data;
uint32_t count=0, out_ptr=0;
int16_t chr, i, j;
|
fc355be4 |
memset(&decode_data, 0, sizeof(decode_data));
decode_data.text = (unsigned char *) cli_calloc(DDICSIZ, 1); |
0e4fbef2 |
if (!decode_data.text) {
return CL_EMEM;
} |
3f065bbe |
decode_data.map = metadata->map;
decode_data.offset = metadata->offset; |
0e4fbef2 |
decode_data.comp_size = metadata->comp_size;
ret = decode_start(&decode_data);
if (ret != CL_SUCCESS) { |
d076ad02 |
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
0e4fbef2 |
return ret;
} |
d076ad02 |
decode_data.status = CL_SUCCESS; |
0e4fbef2 |
while (count < metadata->orig_size) {
if ((chr = decode_c(&decode_data)) <= UCHAR_MAX) {
decode_data.text[out_ptr] = (unsigned char) chr;
count++;
if (++out_ptr >= DDICSIZ) {
out_ptr = 0; |
d076ad02 |
if (write_text(metadata->ofd, decode_data.text, DDICSIZ) != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
871177cd |
return CL_EWRITE; |
d076ad02 |
} |
0e4fbef2 |
}
} else {
j = chr - (UCHAR_MAX + 1 - THRESHOLD);
count += j;
i = decode_p(&decode_data);
if ((i = out_ptr - i - 1) < 0) {
i += DDICSIZ;
} |
997cefa4 |
if ((i >= DDICSIZ) || (i < 0)) { |
fc355be4 |
cli_dbgmsg("UNARJ: bounds exceeded - probably a corrupted file.\n"); |
997cefa4 |
break;
} |
cd94be7a |
if (out_ptr > (uint32_t)i && out_ptr < DDICSIZ - MAXMATCH - 1) { |
f3a894d9 |
while ((--j >= 0) && (i < DDICSIZ) && (out_ptr < DDICSIZ)) { |
0e4fbef2 |
decode_data.text[out_ptr++] = decode_data.text[i++];
}
} else { |
997cefa4 |
while (--j >= 0) { |
0e4fbef2 |
decode_data.text[out_ptr] = decode_data.text[i];
if (++out_ptr >= DDICSIZ) {
out_ptr = 0; |
d076ad02 |
if (write_text(metadata->ofd, decode_data.text, DDICSIZ) != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
871177cd |
return CL_EWRITE; |
d076ad02 |
} |
0e4fbef2 |
}
if (++i >= DDICSIZ) {
i = 0;
}
}
}
} |
d076ad02 |
if (decode_data.status != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
d076ad02 |
return decode_data.status;
} |
0e4fbef2 |
}
if (out_ptr != 0) {
write_text(metadata->ofd, decode_data.text, out_ptr);
} |
3f065bbe |
|
0e4fbef2 |
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
0e4fbef2 |
return CL_SUCCESS;
}
|
d341e8e5 |
#define ARJ_BFIL(dd) \
{ \
dd->getbuf |= dd->bit_buf >> dd->getlen; \
fill_buf(dd, CODE_BIT - dd->getlen); \
dd->getlen = CODE_BIT; \
}
#define ARJ_GETBIT(dd, c) \
{ \
if (dd->getlen <= 0) ARJ_BFIL(dd) \
c = (dd->getbuf & 0x8000) != 0; \
dd->getbuf *= 2; \
dd->getlen--; \
}
#define ARJ_BPUL(dd, l) \
do { \
int i; \
int j = l; \
for (i = 0; i < j; i++) { \
dd->getbuf *= 2; \
} \
dd->getlen -= l; \
} while(0)
#define ARJ_GETBITS(dd, c, l) \
{ \
if (dd->getlen < l) ARJ_BFIL(dd) \
c = (uint16_t)dd->getbuf >> (CODE_BIT - l); \
ARJ_BPUL(dd, l); \
} |
0e4fbef2 |
static uint16_t decode_ptr(arj_decode_t *decode_data)
{
uint16_t c, width, plus, pwr;
plus = 0;
pwr = 1 << STRTP;
for (width = STRTP; width < STOPP; width++) {
ARJ_GETBIT(decode_data, c);
if (c == 0) {
break;
}
plus += pwr;
pwr <<= 1;
}
if (width != 0) {
ARJ_GETBITS(decode_data, c, width);
}
c += plus;
return c;
}
static uint16_t decode_len(arj_decode_t *decode_data)
{
uint16_t c, width, plus, pwr;
plus = 0;
pwr = 1 << STRTL;
for (width = STRTL; width < STOPL; width++) {
ARJ_GETBIT(decode_data, c);
if (c == 0) {
break;
}
plus += pwr;
pwr <<= 1;
}
if (width != 0) {
ARJ_GETBITS(decode_data, c, width);
}
c += plus;
return c;
}
|
3f065bbe |
static int decode_f(arj_metadata_t *metadata) |
0e4fbef2 |
{
int ret;
arj_decode_t decode_data, *dd;
uint32_t count=0, out_ptr=0;
int16_t chr, i, j, pos;
dd = &decode_data; |
fc355be4 |
memset(&decode_data, 0, sizeof(decode_data));
decode_data.text = (unsigned char *) cli_calloc(DDICSIZ, 1); |
0e4fbef2 |
if (!decode_data.text) {
return CL_EMEM;
} |
3f065bbe |
decode_data.map = metadata->map;
decode_data.offset = metadata->offset; |
0e4fbef2 |
decode_data.comp_size = metadata->comp_size;
ret = init_getbits(&decode_data);
if (ret != CL_SUCCESS) { |
3a5a0971 |
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
0e4fbef2 |
return ret;
} |
3f065bbe |
decode_data.getlen = decode_data.getbuf = 0; |
d076ad02 |
decode_data.status = CL_SUCCESS; |
3f065bbe |
|
0e4fbef2 |
while (count < metadata->orig_size) {
chr = decode_len(&decode_data); |
d076ad02 |
if (decode_data.status != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
d076ad02 |
return decode_data.status; |
3f065bbe |
} |
0e4fbef2 |
if (chr == 0) {
ARJ_GETBITS(dd, chr, CHAR_BIT); |
d076ad02 |
if (decode_data.status != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
d076ad02 |
return decode_data.status;
} |
0e4fbef2 |
decode_data.text[out_ptr] = (unsigned char) chr;
count++;
if (++out_ptr >= DDICSIZ) {
out_ptr = 0; |
d076ad02 |
if (write_text(metadata->ofd, decode_data.text, DDICSIZ) != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
871177cd |
return CL_EWRITE; |
d076ad02 |
} |
0e4fbef2 |
}
} else {
j = chr - 1 + THRESHOLD;
count += j;
pos = decode_ptr(&decode_data); |
d076ad02 |
if (decode_data.status != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
d076ad02 |
return decode_data.status;
} |
0e4fbef2 |
if ((i = out_ptr - pos - 1) < 0) {
i += DDICSIZ;
} |
997cefa4 |
if ((i >= DDICSIZ) || (i < 0)) { |
fc355be4 |
cli_dbgmsg("UNARJ: bounds exceeded - probably a corrupted file.\n"); |
997cefa4 |
break;
} |
0e4fbef2 |
while (j-- > 0) {
decode_data.text[out_ptr] = decode_data.text[i];
if (++out_ptr >= DDICSIZ) {
out_ptr = 0; |
d076ad02 |
if (write_text(metadata->ofd, decode_data.text, DDICSIZ) != CL_SUCCESS) {
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
871177cd |
return CL_EWRITE; |
d076ad02 |
} |
0e4fbef2 |
}
if (++i >= DDICSIZ) {
i = 0;
}
}
}
}
if (out_ptr != 0) {
write_text(metadata->ofd, decode_data.text, out_ptr);
} |
3f065bbe |
|
0e4fbef2 |
free(decode_data.text); |
3f065bbe |
metadata->offset = decode_data.offset; |
0e4fbef2 |
return CL_SUCCESS; |
3f065bbe |
} |
0e4fbef2 |
|
05fa206e |
static int arj_unstore(arj_metadata_t *metadata, int ofd, uint32_t len) |
0e4fbef2 |
{ |
3f065bbe |
const unsigned char *data;
uint32_t rem; |
0e4fbef2 |
unsigned int todo; |
3f065bbe |
size_t count; |
0e4fbef2 |
cli_dbgmsg("in arj_unstore\n");
rem = len;
while (rem > 0) { |
f3a894d9 |
todo = (unsigned int) MIN(8192, rem); |
3f065bbe |
data = fmap_need_off_once_len(metadata->map, metadata->offset, todo, &count); |
05fa206e |
if (!data || !count) {
/* Truncated file, not enough bytes available */
return CL_EFORMAT;
} |
3f065bbe |
metadata->offset += count; |
cd94be7a |
if ((size_t)cli_writen(ofd, data, count) != count) { |
05fa206e |
/* File writing problem */
return CL_EWRITE; |
0e4fbef2 |
}
rem -= count;
} |
05fa206e |
return CL_SUCCESS; |
0e4fbef2 |
}
|
3f065bbe |
static int is_arj_archive(arj_metadata_t *metadata) |
0e4fbef2 |
{
const char header_id[2] = {0x60, 0xea}; |
3f065bbe |
const char *mark;
mark = fmap_need_off_once(metadata->map, metadata->offset, 2);
if (!mark)
return FALSE;
metadata->offset += 2; |
0e4fbef2 |
if (memcmp(&mark[0], &header_id[0], 2) == 0) {
return TRUE;
}
cli_dbgmsg("Not an ARJ archive\n");
return FALSE;
}
|
3f065bbe |
static int arj_read_main_header(arj_metadata_t *metadata) |
0e4fbef2 |
{
uint16_t header_size, count;
arj_main_hdr_t main_hdr; |
3f065bbe |
const char *filename, *comment; |
0e4fbef2 |
off_t header_offset;
|
3f065bbe |
if (fmap_readn(metadata->map, &header_size, metadata->offset, 2) != 2)
return FALSE;
metadata->offset += 2;
header_offset = metadata->offset; |
0e4fbef2 |
header_size = le16_to_host(header_size);
cli_dbgmsg("Header Size: %d\n", header_size);
if (header_size == 0) {
/* End of archive */ |
f3a894d9 |
return FALSE; |
0e4fbef2 |
}
if (header_size > HEADERSIZE_MAX) {
cli_dbgmsg("arj_read_header: invalid header_size: %u\n ", header_size);
return FALSE;
} |
3f065bbe |
if (fmap_readn(metadata->map, &main_hdr, metadata->offset, 30) != 30)
return FALSE;
metadata->offset += 30;
|
0e4fbef2 |
cli_dbgmsg("ARJ Main File Header\n");
cli_dbgmsg("First Header Size: %d\n", main_hdr.first_hdr_size);
cli_dbgmsg("Version: %d\n", main_hdr.version);
cli_dbgmsg("Min version: %d\n", main_hdr.min_version);
cli_dbgmsg("Host OS: %d\n", main_hdr.host_os);
cli_dbgmsg("Flags: 0x%x\n", main_hdr.flags);
cli_dbgmsg("Security version: %d\n", main_hdr.security_version);
cli_dbgmsg("File type: %d\n", main_hdr.file_type);
if (main_hdr.first_hdr_size < 30) {
cli_dbgmsg("Format error. First Header Size < 30\n");
return FALSE;
}
if (main_hdr.first_hdr_size > 30) { |
3f065bbe |
metadata->offset += main_hdr.first_hdr_size - 30; |
0e4fbef2 |
}
|
3f065bbe |
filename = fmap_need_offstr(metadata->map, metadata->offset, header_size); |
241e7eb1 |
if (!filename) {
cli_dbgmsg("UNARJ: Unable to allocate memory for filename\n"); |
f3a894d9 |
return FALSE; |
241e7eb1 |
} |
3f065bbe |
metadata->offset += strlen(filename) + 1;
comment = fmap_need_offstr(metadata->map, metadata->offset, header_size); |
241e7eb1 |
if (!comment) {
cli_dbgmsg("UNARJ: Unable to allocate memory for comment\n"); |
0e4fbef2 |
return FALSE; |
241e7eb1 |
} |
3f065bbe |
metadata->offset += strlen(comment) + 1; |
0e4fbef2 |
cli_dbgmsg("Filename: %s\n", filename);
cli_dbgmsg("Comment: %s\n", comment); |
3f065bbe |
metadata->offset += 4; /* crc */ |
0e4fbef2 |
/* Skip past any extended header data */
for (;;) { |
3f065bbe |
const uint16_t *countp = fmap_need_off_once(metadata->map, metadata->offset, 2);
if (!countp) |
0e4fbef2 |
return FALSE; |
3f065bbe |
count = cli_readint16(countp);
metadata->offset += 2; |
f3a894d9 |
cli_dbgmsg("Extended header size: %d\n", count); |
0e4fbef2 |
if (count == 0) {
break;
} |
f3a894d9 |
/* Skip extended header + 4byte CRC */ |
3f065bbe |
metadata->offset += count + 4; |
0e4fbef2 |
}
return TRUE;
}
|
3f065bbe |
static int arj_read_file_header(arj_metadata_t *metadata) |
0e4fbef2 |
{
uint16_t header_size, count; |
3f065bbe |
const char *filename, *comment; |
0e4fbef2 |
arj_file_hdr_t file_hdr; |
3f065bbe |
if (fmap_readn(metadata->map, &header_size, metadata->offset, 2) != 2)
return CL_EFORMAT; |
0e4fbef2 |
header_size = le16_to_host(header_size); |
3f065bbe |
metadata->offset += 2;
|
0e4fbef2 |
cli_dbgmsg("Header Size: %d\n", header_size);
if (header_size == 0) {
/* End of archive */
return CL_BREAK;
}
if (header_size > HEADERSIZE_MAX) {
cli_dbgmsg("arj_read_file_header: invalid header_size: %u\n ", header_size);
return CL_EFORMAT;
} |
3f065bbe |
if (fmap_readn(metadata->map, &file_hdr, metadata->offset, 30) != 30) { |
0e4fbef2 |
return CL_EFORMAT;
} |
3f065bbe |
metadata->offset += 30; |
0e4fbef2 |
file_hdr.comp_size = le32_to_host(file_hdr.comp_size);
file_hdr.orig_size = le32_to_host(file_hdr.orig_size); |
3f065bbe |
|
0e4fbef2 |
cli_dbgmsg("ARJ File Header\n");
cli_dbgmsg("First Header Size: %d\n", file_hdr.first_hdr_size);
cli_dbgmsg("Version: %d\n", file_hdr.version);
cli_dbgmsg("Min version: %d\n", file_hdr.min_version);
cli_dbgmsg("Host OS: %d\n", file_hdr.host_os);
cli_dbgmsg("Flags: 0x%x\n", file_hdr.flags);
cli_dbgmsg("Method: %d\n", file_hdr.method);
cli_dbgmsg("File type: %d\n", file_hdr.file_type);
cli_dbgmsg("File type: %d\n", file_hdr.password_mod); |
f3a894d9 |
cli_dbgmsg("Compressed size: %u\n", file_hdr.comp_size);
cli_dbgmsg("Original size: %u\n", file_hdr.orig_size); |
0e4fbef2 |
if (file_hdr.first_hdr_size < 30) {
cli_dbgmsg("Format error. First Header Size < 30\n");
return CL_EFORMAT;
} |
f3a894d9 |
/* Note: this skips past any extended file start position data (multi-volume) */ |
0e4fbef2 |
if (file_hdr.first_hdr_size > 30) { |
3f065bbe |
metadata->offset += file_hdr.first_hdr_size - 30; |
0e4fbef2 |
}
|
3f065bbe |
filename = fmap_need_offstr(metadata->map, metadata->offset, header_size); |
241e7eb1 |
if (!filename) {
cli_dbgmsg("UNARJ: Unable to allocate memory for filename\n"); |
3f065bbe |
return FALSE; |
241e7eb1 |
} |
3f065bbe |
metadata->offset += strlen(filename) + 1; |
0e4fbef2 |
|
3f065bbe |
comment = fmap_need_offstr(metadata->map, metadata->offset, header_size); |
241e7eb1 |
if (!comment) {
cli_dbgmsg("UNARJ: Unable to allocate memory for comment\n"); |
3f065bbe |
return FALSE; |
241e7eb1 |
} |
3f065bbe |
metadata->offset += strlen(comment) + 1; |
0e4fbef2 |
cli_dbgmsg("Filename: %s\n", filename);
cli_dbgmsg("Comment: %s\n", comment);
metadata->filename = cli_strdup(filename);
|
f3a894d9 |
/* Skip CRC */ |
3f065bbe |
metadata->offset += 4;
|
0e4fbef2 |
/* Skip past any extended header data */
for (;;) { |
3f065bbe |
const uint16_t *countp = fmap_need_off_once(metadata->map, metadata->offset, 2);
if (!countp) { |
fc355be4 |
if(metadata->filename)
free(metadata->filename);
metadata->filename = NULL; |
0e4fbef2 |
return CL_EFORMAT;
} |
3f065bbe |
count = cli_readint16(countp);
metadata->offset += 2; |
f3a894d9 |
cli_dbgmsg("Extended header size: %d\n", count); |
0e4fbef2 |
if (count == 0) {
break;
} |
f3a894d9 |
/* Skip extended header + 4byte CRC */ |
3f065bbe |
metadata->offset += count + 4; |
0e4fbef2 |
}
metadata->comp_size = file_hdr.comp_size;
metadata->orig_size = file_hdr.orig_size;
metadata->method = file_hdr.method; |
f3a894d9 |
metadata->encrypted = ((file_hdr.flags & GARBLE_FLAG) != 0) ? TRUE : FALSE; |
0e4fbef2 |
metadata->ofd = -1;
if (!metadata->filename) {
return CL_EMEM;
} |
3f065bbe |
return CL_SUCCESS; |
0e4fbef2 |
}
|
3f065bbe |
int cli_unarj_open(fmap_t *map, const char *dirname, arj_metadata_t *metadata, size_t off) |
0e4fbef2 |
{ |
cd94be7a |
UNUSEDPARAM(dirname); |
0e4fbef2 |
cli_dbgmsg("in cli_unarj_open\n"); |
3f065bbe |
metadata->map = map;
metadata->offset = off;
if (!is_arj_archive(metadata)) { |
0e4fbef2 |
cli_dbgmsg("Not in ARJ format\n");
return CL_EFORMAT;
} |
3f065bbe |
if (!arj_read_main_header(metadata)) { |
0e4fbef2 |
cli_dbgmsg("Failed to read main header\n");
return CL_EFORMAT;
}
return CL_SUCCESS;
}
|
3f065bbe |
int cli_unarj_prepare_file(const char *dirname, arj_metadata_t *metadata) |
0e4fbef2 |
{
cli_dbgmsg("in cli_unarj_prepare_file\n"); |
3f065bbe |
if (!metadata || !dirname) { |
f3a894d9 |
return CL_ENULLARG;
} |
7cd9337a |
/* Each file is preceded by the ARJ file marker */ |
3f065bbe |
if (!is_arj_archive(metadata)) { |
0e4fbef2 |
cli_dbgmsg("Not in ARJ format\n");
return CL_EFORMAT;
} |
3f065bbe |
return arj_read_file_header(metadata); |
0e4fbef2 |
}
|
3f065bbe |
int cli_unarj_extract_file(const char *dirname, arj_metadata_t *metadata) |
0e4fbef2 |
{
int ret = CL_SUCCESS;
char filename[1024]; |
3f065bbe |
|
0e4fbef2 |
cli_dbgmsg("in cli_unarj_extract_file\n"); |
3f065bbe |
if (!metadata || !dirname) { |
f3a894d9 |
return CL_ENULLARG;
} |
0e4fbef2 |
if (metadata->encrypted) {
cli_dbgmsg("PASSWORDed file (skipping)\n"); |
3f065bbe |
metadata->offset += metadata->comp_size;
cli_dbgmsg("Target offset: %lu\n", (unsigned long int) metadata->offset); |
0e4fbef2 |
return CL_SUCCESS;
} |
3f065bbe |
|
58481352 |
snprintf(filename, 1024, "%s"PATHSEP"file.uar", dirname); |
0e4fbef2 |
cli_dbgmsg("Filename: %s\n", filename);
metadata->ofd = open(filename, O_RDWR|O_CREAT|O_TRUNC|O_BINARY, 0600);
if (metadata->ofd < 0) {
return CL_EOPEN;
}
switch (metadata->method) {
case 0: |
3f065bbe |
ret = arj_unstore(metadata, metadata->ofd, metadata->comp_size); |
0e4fbef2 |
break;
case 1:
case 2:
case 3: |
3f065bbe |
ret = decode(metadata); |
0e4fbef2 |
break;
case 4: |
3f065bbe |
ret = decode_f(metadata); |
0e4fbef2 |
break;
default:
ret = CL_EFORMAT;
break;
}
return ret;
} |