libclamav/msexpand.c
341e5433
 /*
2023340a
  *  Copyright (C) 2007-2008 Sourcefire, Inc.
  *
  *  Authors: Tomasz Kojm
341e5433
  *
  *  This program is free software; you can redistribute it and/or modify
6e47a652
  *  it under the terms of the GNU General Public License version 2 as
  *  published by the Free Software Foundation.
341e5433
  *
  *  This program is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  *  GNU General Public License for more details.
  *
  *  You should have received a copy of the GNU General Public License
  *  along with this program; if not, write to the Free Software
48b7b4a7
  *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
  *  MA 02110-1301, USA.
341e5433
  */
 
7dcdec59
 #if HAVE_CONFIG_H
 #include "clamav-config.h"
 #endif
 
341e5433
 #include <stdio.h>
6e47a652
 #include <stddef.h>
 #include <sys/types.h>
 #include <sys/stat.h>
 #include <fcntl.h>
341e5433
 
6e47a652
 #include "clamav.h"
341e5433
 #include "cltypes.h"
 #include "others.h"
079229d6
 #include "msexpand.h"
341e5433
 
6e47a652
 #ifndef HAVE_ATTRIB_PACKED
 #define __attribute__(x)
 #endif
341e5433
 
343dd145
 #ifdef HAVE_PRAGMA_PACK
 #pragma pack(1)
 #endif
 
 #ifdef HAVE_PRAGMA_PACK_HPPA
 #pragma pack 1
 #endif
 
6e47a652
 #define EC32(x) le32_to_host(x)
 #define EC16(x) le16_to_host(x)
 
 #define MAGIC1	0x44445a53
 #define MAGIC2	0x3327f088
 #define MAGIC3	0x0041
 
 struct msexp_hdr {
     uint32_t magic1;
     uint32_t magic2;
     uint16_t magic3;
     uint32_t fsize;
343dd145
 } __attribute__((packed));
 
 #ifdef HAVE_PRAGMA_PACK
 #pragma pack()
 #endif
 
 #ifdef HAVE_PRAGMA_PACK_HPPA
 #pragma pack
 #endif
6e47a652
 
 #define BSIZE 4096
 #define RWBUFF 2048
 
 #define READBYTES				\
     ret = cli_readn(fd, rbuff, RWBUFF);		\
     if(ret == -1)				\
871177cd
 	return CL_EREAD;			\
6e47a652
     if(!ret)					\
 	break;					\
     rbytes = (unsigned int) ret;		\
     r = 0;
 
 #define WRITEBYTES				\
     ret = cli_writen(ofd, wbuff, w);		\
     if(ret == -1 || (unsigned int) ret != w)	\
871177cd
 	return CL_EWRITE;			\
6e47a652
     wbytes += w;				\
dd5b8f1d
     if(wbytes >= EC32(hdr.fsize))		\
6e47a652
 	return CL_SUCCESS;			\
     w = 0;
 
 
 int cli_msexpand(int fd, int ofd, cli_ctx *ctx)
 {
 	struct msexp_hdr hdr;
 	uint8_t i, mask, bits;
 	unsigned char buff[BSIZE], rbuff[RWBUFF], wbuff[RWBUFF];
 	unsigned int j = BSIZE - 16, k, l, r = 0, w = 0, rbytes = 0, wbytes = 0;
 	int ret;
341e5433
 
 
6e47a652
     if(cli_readn(fd, &hdr, sizeof(hdr)) == -1)
871177cd
 	return CL_EREAD;
341e5433
 
6e47a652
     if(EC32(hdr.magic1) != MAGIC1 || EC32(hdr.magic2) != MAGIC2 || EC16(hdr.magic3) != MAGIC3) {
 	cli_dbgmsg("MSEXPAND: Not supported file format\n");
 	return CL_EFORMAT;
     }
341e5433
 
dd5b8f1d
     cli_dbgmsg("MSEXPAND: File size from header: %u\n", EC32(hdr.fsize));
341e5433
 
dd5b8f1d
     if(cli_checklimits("MSEXPAND", ctx, EC32(hdr.fsize), 0, 0)!=CL_CLEAN)
d91ab809
         return CL_SUCCESS;
341e5433
 
6e47a652
     while(1) {
341e5433
 
6e47a652
 	if(!rbytes || (r == rbytes)) {
 	    READBYTES;
341e5433
 	}
 
6e47a652
 	bits = rbuff[r]; r++;
341e5433
 
6e47a652
 	mask = 1;
 	for(i = 0; i < 8; i++) {
 	    if(bits & mask) {
 		if(r == rbytes) {
 		    READBYTES;
 		}
341e5433
 
6e47a652
 		if(w == RWBUFF) {
 		    WRITEBYTES;
 		}
341e5433
 
6e47a652
 		wbuff[w] = buff[j] = rbuff[r];
 		r++; w++;
 		j++; j %= BSIZE;
 	    } else {
 		if(r == rbytes) {
 		    READBYTES;
 		}
 		k = rbuff[r]; r++;
341e5433
 
6e47a652
 		if(r == rbytes) {
 		    READBYTES;
341e5433
 		}
6e47a652
 		l = rbuff[r]; r++;
341e5433
 
6e47a652
 		k += (l & 0xf0) << 4;
 		l = (l & 0x0f) + 3;
 		while(l--) {
 		    if(w == RWBUFF) {
 			WRITEBYTES;
 		    }
 		    wbuff[w] = buff[j] = buff[k];
 		    w++;
 		    k++; k %= BSIZE;
 		    j++; j %= BSIZE;
341e5433
 		}
 	    }
6e47a652
 	    mask *= 2;
341e5433
 	}
     }
 
6e47a652
     if(w) {
 	WRITEBYTES;
     }
 
     return CL_SUCCESS;
341e5433
 }