generic-library/libupnp
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

SF Bug Tracker id 3499781 - msvc doesn't have snprintf

Browse Source 
Submitted: Yoichi NAKAYAMA ( yoichi ) - 2012-03-08 10:18:39 PST

97a17ff5ad commit breaks build on
windows/msvc since there is no snprintf.

Note:
* Some existing sources use _snprintf when WIN32 is defined, but its
behavior is a bit different from C99 snprintf.
* snprintf does terminate the buffer, so the commit (use buffer size
minus 1 as argument) changes the behavior at the boundary.
* Truncation might be better than crash in some cases. But it may
result in not good.
This commit is contained in:
Fabrice Fontaine 2012-03-09 10:38:34 +01:00
parent 29ee36b1ca
commit e722d8c375
12 changed files with 231 additions and 93 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
ChangeLog
View File

@ -2,6 +2,23 @@
Version 1.6.16 Version 1.6.16
******************************************************************************* *******************************************************************************
2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange.com>
SF Bug Tracker id 3499781 - msvc doesn't have snprintf
Submitted: Yoichi NAKAYAMA ( yoichi ) - 2012-03-08 10:18:39 PST
97a17ff5add73c97844e2fa74456bab4df0800f1 commit breaks build on
windows/msvc since there is no snprintf.
Note:
* Some existing sources use _snprintf when WIN32 is defined, but its
behavior is a bit different from C99 snprintf.
* snprintf does terminate the buffer, so the commit (use buffer size
minus 1 as argument) changes the behavior at the boundary.
* Truncation might be better than crash in some cases. But it may
result in not good.
2012-03-08 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net> 2012-03-08 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net>
SF Bug Tracker id 3499878 - UpnpUnSubscribeAsync(): ‘retVal’ may be used uninitialized SF Bug Tracker id 3499878 - UpnpUnSubscribeAsync(): ‘retVal’ may be used uninitialized

19
upnp/src/api/upnptools.c
View File

@ -56,6 +56,9 @@
/*! Maximum action header buffer length. */ /*! Maximum action header buffer length. */
#define HEADER_LENGTH 2000 #define HEADER_LENGTH 2000
#ifdef WIN32
#define snprintf _snprintf
#endif
/*! /*!
* \brief Structure to maintain a error code and string associated with the * \brief Structure to maintain a error code and string associated with the
@ -222,14 +225,18 @@ static int addToAction(
memset(ActBuff, 0, HEADER_LENGTH); memset(ActBuff, 0, HEADER_LENGTH);
if (response) { if (response) {
snprintf(ActBuff, HEADER_LENGTH - 1, rc = snprintf(ActBuff, HEADER_LENGTH,
"<u:%sResponse xmlns:u=\"%s\">\r\n</u:%sResponse>", "<u:%sResponse xmlns:u=\"%s\">\r\n</u:%sResponse>",
ActionName, ServType, ActionName); ActionName, ServType, ActionName);
} else { } else {
snprintf(ActBuff, HEADER_LENGTH - 1, rc = snprintf(ActBuff, HEADER_LENGTH,
"<u:%s xmlns:u=\"%s\">\r\n</u:%s>", "<u:%s xmlns:u=\"%s\">\r\n</u:%s>",
ActionName, ServType, ActionName); ActionName, ServType, ActionName);
} }
if (rc < 0 || (unsigned int) rc >= HEADER_LENGTH) {
free(ActBuff);
return UPNP_E_OUTOF_MEMORY;
}
rc = ixmlParseBufferEx(ActBuff, ActionDoc); rc = ixmlParseBufferEx(ActBuff, ActionDoc);
free(ActBuff); free(ActBuff);
@ -284,6 +291,7 @@ static IXML_Document *makeAction(
IXML_Node *node; IXML_Node *node;
IXML_Element *Ele; IXML_Element *Ele;
IXML_Node *Txt = NULL; IXML_Node *Txt = NULL;
int rc = 0;
if (ActionName == NULL || ServType == NULL) { if (ActionName == NULL || ServType == NULL) {
return NULL; return NULL;
@ -296,15 +304,16 @@ static IXML_Document *makeAction(
memset(ActBuff, 0, HEADER_LENGTH); memset(ActBuff, 0, HEADER_LENGTH);
if (response) { if (response) {
snprintf(ActBuff, HEADER_LENGTH - 1, rc = snprintf(ActBuff, HEADER_LENGTH,
"<u:%sResponse xmlns:u=\"%s\">\r\n</u:%sResponse>", "<u:%sResponse xmlns:u=\"%s\">\r\n</u:%sResponse>",
ActionName, ServType, ActionName); ActionName, ServType, ActionName);
} else { } else {
snprintf(ActBuff, HEADER_LENGTH - 1, rc = snprintf(ActBuff, HEADER_LENGTH,
"<u:%s xmlns:u=\"%s\">\r\n</u:%s>", "<u:%s xmlns:u=\"%s\">\r\n</u:%s>",
ActionName, ServType, ActionName); ActionName, ServType, ActionName);
} }
if (ixmlParseBufferEx(ActBuff, &ActionDoc) != IXML_SUCCESS) { if (rc < 0 || (unsigned int) rc >= HEADER_LENGTH ||
ixmlParseBufferEx(ActBuff, &ActionDoc) != IXML_SUCCESS) {
free(ActBuff); free(ActBuff);
return NULL; return NULL;
} }

17
upnp/src/gena/gena_ctrlpt.c
View File

@ -52,6 +52,9 @@
#include "uuid.h" #include "uuid.h"
#include "upnpapi.h" #include "upnpapi.h"
#ifdef WIN32
#define snprintf _snprintf
#endif
extern ithread_mutex_t GlobalClientSubscribeMutex; extern ithread_mutex_t GlobalClientSubscribeMutex;
@ -289,6 +292,7 @@ static int gena_subscribe(
membuffer request; membuffer request;
uri_type dest_url; uri_type dest_url;
http_parser_t response; http_parser_t response;
int rc = 0;
memset(timeout_str, 0, sizeof(timeout_str)); memset(timeout_str, 0, sizeof(timeout_str));
UpnpString_clear(sid); UpnpString_clear(sid);
@ -300,11 +304,13 @@ static int gena_subscribe(
if (*timeout < 0) { if (*timeout < 0) {
strncpy(timeout_str, "infinite", sizeof(timeout_str) - 1); strncpy(timeout_str, "infinite", sizeof(timeout_str) - 1);
} else if(*timeout < CP_MINIMUM_SUBSCRIPTION_TIME) { } else if(*timeout < CP_MINIMUM_SUBSCRIPTION_TIME) {
snprintf(timeout_str, sizeof(timeout_str) - 1, rc = snprintf(timeout_str, sizeof(timeout_str),
"%d", CP_MINIMUM_SUBSCRIPTION_TIME); "%d", CP_MINIMUM_SUBSCRIPTION_TIME);
} else { } else {
snprintf(timeout_str, sizeof(timeout_str) - 1, "%d", *timeout); rc = snprintf(timeout_str, sizeof(timeout_str), "%d", *timeout);
} }
if (rc < 0 || (unsigned int) rc >= sizeof(timeout_str))
return UPNP_E_OUTOF_MEMORY;
/* parse url */ /* parse url */
return_code = http_FixStrUrl( return_code = http_FixStrUrl(
@ -520,6 +526,7 @@ int genaSubscribe(
UpnpString *ActualSID = UpnpString_new(); UpnpString *ActualSID = UpnpString_new();
UpnpString *EventURL = UpnpString_new(); UpnpString *EventURL = UpnpString_new();
struct Handle_Info *handle_info; struct Handle_Info *handle_info;
int rc = 0;
memset(temp_sid, 0, sizeof(temp_sid)); memset(temp_sid, 0, sizeof(temp_sid));
memset(temp_sid2, 0, sizeof(temp_sid2)); memset(temp_sid2, 0, sizeof(temp_sid2));
@ -556,7 +563,11 @@ int genaSubscribe(
/* generate client SID */ /* generate client SID */
uuid_create(&uid ); uuid_create(&uid );
uuid_unpack(&uid, temp_sid); uuid_unpack(&uid, temp_sid);
snprintf(temp_sid2, sizeof(temp_sid2) - 1, "uuid:%s", temp_sid); rc = snprintf(temp_sid2, sizeof(temp_sid2), "uuid:%s", temp_sid);
if (rc < 0 || (unsigned int) rc >= sizeof(temp_sid2)) {
return_code = UPNP_E_OUTOF_MEMORY;
goto error_handler;
}
UpnpString_set_String(out_sid, temp_sid2); UpnpString_set_String(out_sid, temp_sid2);
/* create event url */ /* create event url */

28
upnp/src/gena/gena_device.c
View File

@ -50,6 +50,10 @@
#include "upnpapi.h" #include "upnpapi.h"
#include "uuid.h" #include "uuid.h"
#ifdef WIN32
#define snprintf _snprintf
#endif
/*! /*!
* \brief Unregisters a device. * \brief Unregisters a device.
* *
@ -413,6 +417,7 @@ static char *AllocGenaHeaders(
char *headers = NULL; char *headers = NULL;
size_t headers_size = 0; size_t headers_size = 0;
int line = 0; int line = 0;
int rc = 0;
headers_size = headers_size =
strlen(HEADER_LINE_1 ) + strlen(HEADER_LINE_1 ) +
@ -425,7 +430,8 @@ static char *AllocGenaHeaders(
line = __LINE__; line = __LINE__;
goto ExitFunction; goto ExitFunction;
} }
sprintf(headers, "%s%s%"PRIzu"%s%s%s", memset(headers, 0, headers_size);
rc = snprintf(headers, headers_size, "%s%s%"PRIzu"%s%s%s",
HEADER_LINE_1, HEADER_LINE_1,
HEADER_LINE_2A, HEADER_LINE_2A,
strlen(propertySet) + 1, strlen(propertySet) + 1,
@ -434,7 +440,7 @@ static char *AllocGenaHeaders(
HEADER_LINE_4); HEADER_LINE_4);
ExitFunction: ExitFunction:
if (headers == NULL) { if (headers == NULL || rc < 0 || (unsigned int) rc >= headers_size) {
UpnpPrintf(UPNP_ALL, GENA, __FILE__, line, UpnpPrintf(UPNP_ALL, GENA, __FILE__, line,
"AllocGenaHeaders(): Error UPNP_E_OUTOF_MEMORY\n"); "AllocGenaHeaders(): Error UPNP_E_OUTOF_MEMORY\n");
} }
@ -1074,17 +1080,22 @@ static int respond_ok(
int return_code; int return_code;
char timeout_str[100]; char timeout_str[100];
int upnp_timeout = UPNP_TIMEOUT; int upnp_timeout = UPNP_TIMEOUT;
int rc = 0;
memset( timeout_str, 0, sizeof( timeout_str ) ); memset( timeout_str, 0, sizeof( timeout_str ) );
http_CalcResponseVersion( request->major_version, http_CalcResponseVersion( request->major_version,
request->minor_version, &major, &minor ); request->minor_version, &major, &minor );
if( time_out >= 0 ) { if( time_out >= 0 ) {
snprintf( timeout_str, sizeof ( timeout_str ) - 1, rc = snprintf( timeout_str, sizeof ( timeout_str ),
"TIMEOUT: Second-%d", time_out ); "TIMEOUT: Second-%d", time_out );
} else { } else {
strncpy( timeout_str, "TIMEOUT: Second-infinite", strncpy( timeout_str, "TIMEOUT: Second-infinite",
sizeof ( timeout_str ) - 1 ); sizeof ( timeout_str ) - 1);
}
if (rc < 0 || (unsigned int) rc >= sizeof ( timeout_str ) ) {
error_respond( info, HTTP_INTERNAL_SERVER_ERROR, request );
return UPNP_E_OUTOF_MEMORY;
} }
membuffer_init( &response ); membuffer_init( &response );
@ -1216,6 +1227,7 @@ void gena_process_subscription_request(
char *event_url_path = NULL; char *event_url_path = NULL;
memptr callback_hdr; memptr callback_hdr;
memptr timeout_hdr; memptr timeout_hdr;
int rc = 0;
memset(&request_struct, 0, sizeof(request_struct)); memset(&request_struct, 0, sizeof(request_struct));
@ -1349,10 +1361,12 @@ void gena_process_subscription_request(
uuid_create(&uid); uuid_create(&uid);
uuid_unpack(&uid, temp_sid); uuid_unpack(&uid, temp_sid);
memset(sub->sid, 0, sizeof(sub->sid)); memset(sub->sid, 0, sizeof(sub->sid));
snprintf(sub->sid, sizeof(sub->sid) - 1, "uuid:%s", temp_sid); rc = snprintf(sub->sid, sizeof(sub->sid), "uuid:%s", temp_sid);
/* respond OK */ /* respond OK */
if (respond_ok(info, time_out, sub, request) != UPNP_E_SUCCESS) { if (rc < 0 || (unsigned int) rc >= sizeof(sub->sid) ||
(respond_ok(info, time_out,
sub, request) != UPNP_E_SUCCESS)) {
freeSubscriptionList(sub); freeSubscriptionList(sub);
HandleUnlock(); HandleUnlock();
goto exit_function; goto exit_function;

34
upnp/src/genlib/net/http/httpreadwrite.c
View File

@ -59,6 +59,7 @@
#ifdef WIN32 #ifdef WIN32
#include <malloc.h> #include <malloc.h>
#define fseeko fseek #define fseeko fseek
#define snprintf _snprintf
#else #else
#include <arpa/inet.h> #include <arpa/inet.h>
#include <sys/types.h> #include <sys/types.h>
@ -451,7 +452,7 @@ int http_SendMessage(SOCKINFO *info, int *TimeOut, const char *fmt, ...)
memset(Chunk_Header, 0, memset(Chunk_Header, 0,
sizeof(Chunk_Header)); sizeof(Chunk_Header));
snprintf(Chunk_Header, snprintf(Chunk_Header,
sizeof(Chunk_Header) - strlen ("\r\n") - 1, sizeof(Chunk_Header) - strlen ("\r\n"),
"%" PRIzx, num_read); "%" PRIzx, num_read);
/*itoa(num_read,Chunk_Header,16); */ /*itoa(num_read,Chunk_Header,16); */
strncat(Chunk_Header, "\r\n", strlen ("\r\n")); strncat(Chunk_Header, "\r\n", strlen ("\r\n"));
@ -1592,6 +1593,7 @@ int http_MakeMessage(membuffer *buf, int http_major_version,
const char *weekday_str = "Sun\0Mon\0Tue\0Wed\0Thu\0Fri\0Sat"; const char *weekday_str = "Sun\0Mon\0Tue\0Wed\0Thu\0Fri\0Sat";
const char *month_str = "Jan\0Feb\0Mar\0Apr\0May\0Jun\0" const char *month_str = "Jan\0Feb\0Mar\0Apr\0May\0Jun\0"
"Jul\0Aug\0Sep\0Oct\0Nov\0Dec"; "Jul\0Aug\0Sep\0Oct\0Nov\0Dec";
int rc = 0;
memset(tempbuf, 0, sizeof(tempbuf)); memset(tempbuf, 0, sizeof(tempbuf));
va_start(argp, fmt); va_start(argp, fmt);
@ -1635,15 +1637,17 @@ int http_MakeMessage(membuffer *buf, int http_major_version,
} else if (c == 'd') { } else if (c == 'd') {
/* integer */ /* integer */
num = (size_t)va_arg(argp, int); num = (size_t)va_arg(argp, int);
snprintf(tempbuf, sizeof(tempbuf) - 1, "%" PRIzu, num); rc = snprintf(tempbuf, sizeof(tempbuf), "%" PRIzu, num);
if (membuffer_append(buf, tempbuf, strlen(tempbuf))) if (rc < 0 || (unsigned int) rc >= sizeof(tempbuf) ||
membuffer_append(buf, tempbuf, strlen(tempbuf)))
goto error_handler; goto error_handler;
} else if (c == 'h') { } else if (c == 'h') {
/* off_t */ /* off_t */
bignum = (off_t) va_arg(argp, off_t); bignum = (off_t) va_arg(argp, off_t);
snprintf(tempbuf, sizeof(tempbuf) - 1, "%" PRId64, rc = snprintf(tempbuf, sizeof(tempbuf), "%" PRId64,
(int64_t) bignum); (int64_t) bignum);
if (membuffer_append(buf, tempbuf, strlen(tempbuf))) if (rc < 0 || (unsigned int) rc >= sizeof(tempbuf) ||
membuffer_append(buf, tempbuf, strlen(tempbuf)))
goto error_handler; goto error_handler;
} else if (c == 't' || c == 'D') { } else if (c == 't' || c == 'D') {
/* date */ /* date */
@ -1660,13 +1664,14 @@ int http_MakeMessage(membuffer *buf, int http_major_version,
} }
assert(loc_time); assert(loc_time);
date = gmtime(loc_time); date = gmtime(loc_time);
snprintf(tempbuf, sizeof(tempbuf) - 1, rc = snprintf(tempbuf, sizeof(tempbuf),
"%s%s, %02d %s %d %02d:%02d:%02d GMT%s", "%s%s, %02d %s %d %02d:%02d:%02d GMT%s",
start_str, &weekday_str[date->tm_wday * 4], start_str, &weekday_str[date->tm_wday * 4],
date->tm_mday, &month_str[date->tm_mon * 4], date->tm_mday, &month_str[date->tm_mon * 4],
date->tm_year + 1900, date->tm_hour, date->tm_year + 1900, date->tm_hour,
date->tm_min, date->tm_sec, end_str); date->tm_min, date->tm_sec, end_str);
if (membuffer_append(buf, tempbuf, strlen(tempbuf))) if (rc < 0 || (unsigned int) rc >= sizeof(tempbuf) ||
membuffer_append(buf, tempbuf, strlen(tempbuf)))
goto error_handler; goto error_handler;
} else if (c == 'L') { } else if (c == 'L') {
/* Add CONTENT-LANGUAGE header only if WEB_SERVER_CONTENT_LANGUAGE */ /* Add CONTENT-LANGUAGE header only if WEB_SERVER_CONTENT_LANGUAGE */
@ -1717,21 +1722,24 @@ int http_MakeMessage(membuffer *buf, int http_major_version,
/* e.g.: 'HTTP/1.1 200 OK' code */ /* e.g.: 'HTTP/1.1 200 OK' code */
status_code = (int)va_arg(argp, int); status_code = (int)va_arg(argp, int);
assert(status_code > 0); assert(status_code > 0);
snprintf(tempbuf, sizeof(tempbuf) - 1, "HTTP/%d.%d %d ", rc = snprintf(tempbuf, sizeof(tempbuf), "HTTP/%d.%d %d ",
http_major_version, http_minor_version, http_major_version, http_minor_version,
status_code); status_code);
/* str */ /* str */
status_msg = http_get_code_text(status_code); status_msg = http_get_code_text(status_code);
if (http_MakeMessage(buf, http_major_version, http_minor_version, if (rc < 0 || (unsigned int) rc >= sizeof(tempbuf) ||
http_MakeMessage(buf, http_major_version, http_minor_version,
"ssc", tempbuf, status_msg) != 0) "ssc", tempbuf, status_msg) != 0)
goto error_handler; goto error_handler;
} else if (c == 'B') { } else if (c == 'B') {
/* body of a simple reply */ /* body of a simple reply */
status_code = (int)va_arg(argp, int); status_code = (int)va_arg(argp, int);
snprintf(tempbuf, sizeof(tempbuf) - 1, "%s%d %s%s", rc = snprintf(tempbuf, sizeof(tempbuf), "%s%d %s%s",
"<html><body><h1>", "<html><body><h1>",
status_code, http_get_code_text(status_code), status_code, http_get_code_text(status_code),
"</h1></body></html>"); "</h1></body></html>");
if (rc < 0 || (unsigned int) rc >= sizeof(tempbuf))
goto error_handler;
bignum = (off_t)strlen(tempbuf); bignum = (off_t)strlen(tempbuf);
if (http_MakeMessage(buf, http_major_version, http_minor_version, if (http_MakeMessage(buf, http_major_version, http_minor_version,
"NTcs", bignum, /* content-length */ "NTcs", bignum, /* content-length */
@ -1948,6 +1956,7 @@ int http_OpenHttpGetEx(
int errCode = UPNP_E_SUCCESS; int errCode = UPNP_E_SUCCESS;
/* char rangeBuf[SIZE_RANGE_BUFFER]; */ /* char rangeBuf[SIZE_RANGE_BUFFER]; */
struct SendInstruction rangeBuf; struct SendInstruction rangeBuf;
int rc = 0;
membuffer_init(&request); membuffer_init(&request);
@ -1967,9 +1976,10 @@ int http_OpenHttpGetEx(
break; break;
} }
memset(&rangeBuf, 0, sizeof(rangeBuf)); memset(&rangeBuf, 0, sizeof(rangeBuf));
snprintf(rangeBuf.RangeHeader, rc = snprintf(rangeBuf.RangeHeader, sizeof(rangeBuf.RangeHeader),
sizeof(rangeBuf.RangeHeader) - 1,
"Range: bytes=%d-%d\r\n", lowRange, highRange); "Range: bytes=%d-%d\r\n", lowRange, highRange);
if (rc < 0 || (unsigned int) rc >= sizeof(rangeBuf.RangeHeader))
break;
membuffer_init(&request); membuffer_init(&request);
errCode = MakeGetMessageEx(url_str, &request, &url, &rangeBuf); errCode = MakeGetMessageEx(url_str, &request, &url, &rangeBuf);
if (errCode != UPNP_E_SUCCESS) if (errCode != UPNP_E_SUCCESS)

40
upnp/src/genlib/net/http/webserver.c
View File

@ -60,6 +60,10 @@
#include <fcntl.h> #include <fcntl.h>
#include <sys/stat.h> #include <sys/stat.h>
#ifdef WIN32
#define snprintf _snprintf
#endif
/*! /*!
* Response Types. * Response Types.
*/ */
@ -300,6 +304,7 @@ static UPNP_INLINE int get_content_type(
int ctype_found = FALSE; int ctype_found = FALSE;
char *temp = NULL; char *temp = NULL;
size_t length = 0; size_t length = 0;
int rc = 0;
(*content_type) = NULL; (*content_type) = NULL;
/* get ext */ /* get ext */
@ -317,7 +322,11 @@ static UPNP_INLINE int get_content_type(
if (!temp) if (!temp)
return UPNP_E_OUTOF_MEMORY; return UPNP_E_OUTOF_MEMORY;
memset(temp, 0, length); memset(temp, 0, length);
sprintf(temp, "%s/%s", type, subtype); rc = snprintf(temp, length, "%s/%s", type, subtype);
if (rc < 0 || (unsigned int) rc >= length) {
free(temp);
return UPNP_E_OUTOF_MEMORY;
}
(*content_type) = ixmlCloneDOMString(temp); (*content_type) = ixmlCloneDOMString(temp);
free(temp); free(temp);
if (!content_type) if (!content_type)
@ -762,6 +771,7 @@ static int CreateHTTPRangeResponseHeader(
off_t FirstByte, LastByte; off_t FirstByte, LastByte;
char *RangeInput; char *RangeInput;
char *Ptr; char *Ptr;
int rc = 0;
Instr->IsRangeActive = 1; Instr->IsRangeActive = 1;
Instr->ReadSendSize = FileLength; Instr->ReadSendSize = FileLength;
@ -797,32 +807,40 @@ static int CreateHTTPRangeResponseHeader(
Instr->RangeOffset = FirstByte; Instr->RangeOffset = FirstByte;
Instr->ReadSendSize = LastByte - FirstByte + 1; Instr->ReadSendSize = LastByte - FirstByte + 1;
/* Data between two range. */ /* Data between two range. */
snprintf(Instr->RangeHeader, rc = snprintf(Instr->RangeHeader,
sizeof(Instr->RangeHeader) - 1, sizeof(Instr->RangeHeader),
"CONTENT-RANGE: bytes %" PRId64 "CONTENT-RANGE: bytes %" PRId64
"-%" PRId64 "/%" PRId64 "\r\n", "-%" PRId64 "/%" PRId64 "\r\n",
(int64_t)FirstByte, (int64_t)FirstByte,
(int64_t)LastByte, (int64_t)LastByte,
(int64_t)FileLength); (int64_t)FileLength);
if (rc < 0 || (unsigned int) rc >= sizeof(Instr->RangeHeader)) {
free(RangeInput);
return UPNP_E_OUTOF_MEMORY;
}
} else if (FirstByte >= 0 && LastByte == -1 } else if (FirstByte >= 0 && LastByte == -1
&& FirstByte < FileLength) { && FirstByte < FileLength) {
Instr->RangeOffset = FirstByte; Instr->RangeOffset = FirstByte;
Instr->ReadSendSize = FileLength - FirstByte; Instr->ReadSendSize = FileLength - FirstByte;
memset(Instr->RangeHeader, 0, memset(Instr->RangeHeader, 0,
sizeof(Instr->RangeHeader)); sizeof(Instr->RangeHeader));
snprintf(Instr->RangeHeader, rc = snprintf(Instr->RangeHeader,
sizeof(Instr->RangeHeader) - 1, sizeof(Instr->RangeHeader),
"CONTENT-RANGE: bytes %" PRId64 "CONTENT-RANGE: bytes %" PRId64
"-%" PRId64 "/%" PRId64 "\r\n", "-%" PRId64 "/%" PRId64 "\r\n",
(int64_t)FirstByte, (int64_t)FirstByte,
(int64_t)(FileLength - 1), (int64_t)(FileLength - 1),
(int64_t)FileLength); (int64_t)FileLength);
if (rc < 0 || (unsigned int) rc >= sizeof(Instr->RangeHeader)) {
free(RangeInput);
return UPNP_E_OUTOF_MEMORY;
}
} else if (FirstByte == -1 && LastByte > 0) { } else if (FirstByte == -1 && LastByte > 0) {
if (LastByte >= FileLength) { if (LastByte >= FileLength) {
Instr->RangeOffset = 0; Instr->RangeOffset = 0;
Instr->ReadSendSize = FileLength; Instr->ReadSendSize = FileLength;
snprintf(Instr->RangeHeader, rc = snprintf(Instr->RangeHeader,
sizeof(Instr->RangeHeader) - 1, sizeof(Instr->RangeHeader),
"CONTENT-RANGE: bytes 0-%" PRId64 "CONTENT-RANGE: bytes 0-%" PRId64
"/%" PRId64 "\r\n", "/%" PRId64 "\r\n",
(int64_t)(FileLength - 1), (int64_t)(FileLength - 1),
@ -830,14 +848,18 @@ static int CreateHTTPRangeResponseHeader(
} else { } else {
Instr->RangeOffset = FileLength - LastByte; Instr->RangeOffset = FileLength - LastByte;
Instr->ReadSendSize = LastByte; Instr->ReadSendSize = LastByte;
snprintf(Instr->RangeHeader, rc = snprintf(Instr->RangeHeader,
sizeof(Instr->RangeHeader) - 1, sizeof(Instr->RangeHeader),
"CONTENT-RANGE: bytes %" PRId64 "CONTENT-RANGE: bytes %" PRId64
"-%" PRId64 "/%" PRId64 "\r\n", "-%" PRId64 "/%" PRId64 "\r\n",
(int64_t)(FileLength - LastByte + 1), (int64_t)(FileLength - LastByte + 1),
(int64_t)FileLength, (int64_t)FileLength,
(int64_t)FileLength); (int64_t)FileLength);
} }
if (rc < 0 || (unsigned int) rc >= sizeof(Instr->RangeHeader)) {
free(RangeInput);
return UPNP_E_OUTOF_MEMORY;
}
} else { } else {
free(RangeInput); free(RangeInput);
return HTTP_REQUEST_RANGE_NOT_SATISFIABLE; return HTTP_REQUEST_RANGE_NOT_SATISFIABLE;

6
upnp/src/genlib/net/uri/uri.c
View File

@ -44,6 +44,9 @@
#include <lwres/netdb.h> #include <lwres/netdb.h>
#endif #endif
#endif #endif
#ifdef WIN32
#define snprintf _snprintf
#endif
#include <assert.h> #include <assert.h>
@ -610,7 +613,8 @@ char *resolve_rel_url(char *base_url, char *rel_url)
out_finger++; out_finger++;
if( rel.hostport.text.size > 0 ) { if( rel.hostport.text.size > 0 ) {
snprintf( out_finger, strlen( rel_url ), "%s", rel_url ); snprintf( out_finger, strlen( rel_url ) + 1, "%s",
rel_url );
} else { } else {
if( base.hostport.text.size > 0 ) { if( base.hostport.text.size > 0 ) {
memcpy( out_finger, "//", 2 ); memcpy( out_finger, "//", 2 );

2
upnp/src/soap/soap_device.c
View File

@ -194,7 +194,7 @@ static void send_error_response(
membuffer headers; membuffer headers;
memset(err_code_str, 0, sizeof(err_code_str)); memset(err_code_str, 0, sizeof(err_code_str));
snprintf(err_code_str, sizeof(err_code_str) - 1, "%d", error_code); snprintf(err_code_str, sizeof(err_code_str), "%d", error_code);
/* calc body len */ /* calc body len */
content_length = (off_t) (strlen(start_body) + strlen(err_code_str) + content_length = (off_t) (strlen(start_body) + strlen(err_code_str) +
strlen(mid_body) + strlen(err_msg) + strlen(mid_body) + strlen(err_msg) +

23
upnp/src/ssdp/ssdp_ctrlpt.c
View File

@ -59,6 +59,7 @@
#ifdef WIN32 #ifdef WIN32
#include <string.h> #include <string.h>
#define snprintf _snprintf
#endif /* WIN32 */ #endif /* WIN32 */
/*! /*!
@ -323,23 +324,22 @@ static void CreateClientRequestPacket(
strcpy(RqstBuf, "M-SEARCH * HTTP/1.1\r\n"); strcpy(RqstBuf, "M-SEARCH * HTTP/1.1\r\n");
if (AddressFamily == AF_INET) { if (AddressFamily == AF_INET) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "HOST: %s:%d\r\n", snprintf(TempBuf, sizeof(TempBuf), "HOST: %s:%d\r\n", SSDP_IP,
SSDP_IP, SSDP_PORT); SSDP_PORT);
} else if (AddressFamily == AF_INET6) { } else if (AddressFamily == AF_INET6) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "HOST: [%s]:%d\r\n", snprintf(TempBuf, sizeof(TempBuf), "HOST: [%s]:%d\r\n",
SSDP_IPV6_LINKLOCAL, SSDP_PORT); SSDP_IPV6_LINKLOCAL, SSDP_PORT);
} }
strcat(RqstBuf, TempBuf); strcat(RqstBuf, TempBuf);
strcat(RqstBuf, "MAN: \"ssdp:discover\"\r\n"); strcat(RqstBuf, "MAN: \"ssdp:discover\"\r\n");
if (Mx > 0) { if (Mx > 0) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "MX: %d\r\n", Mx); snprintf(TempBuf, sizeof(TempBuf), "MX: %d\r\n", Mx);
strcat(RqstBuf, TempBuf); strcat(RqstBuf, TempBuf);
} }
if (SearchTarget != NULL) { if (SearchTarget != NULL) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "ST: %s\r\n", snprintf(TempBuf, sizeof(TempBuf), "ST: %s\r\n", SearchTarget);
SearchTarget);
strcat(RqstBuf, TempBuf); strcat(RqstBuf, TempBuf);
} }
strcat(RqstBuf, "\r\n"); strcat(RqstBuf, "\r\n");
@ -363,21 +363,20 @@ static void CreateClientRequestPacketUlaGua(
memset(TempBuf, 0, sizeof(TempBuf)); memset(TempBuf, 0, sizeof(TempBuf));
strcpy(RqstBuf, "M-SEARCH * HTTP/1.1\r\n"); strcpy(RqstBuf, "M-SEARCH * HTTP/1.1\r\n");
if (AddressFamily == AF_INET) { if (AddressFamily == AF_INET) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "HOST: %s:%d\r\n", snprintf(TempBuf, sizeof(TempBuf), "HOST: %s:%d\r\n", SSDP_IP,
SSDP_IP, SSDP_PORT); SSDP_PORT);
} else if (AddressFamily == AF_INET6) { } else if (AddressFamily == AF_INET6) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "HOST: [%s]:%d\r\n", snprintf(TempBuf, sizeof(TempBuf), "HOST: [%s]:%d\r\n",
SSDP_IPV6_SITELOCAL, SSDP_PORT); SSDP_IPV6_SITELOCAL, SSDP_PORT);
} }
strcat(RqstBuf, TempBuf); strcat(RqstBuf, TempBuf);
strcat(RqstBuf, "MAN: \"ssdp:discover\"\r\n"); strcat(RqstBuf, "MAN: \"ssdp:discover\"\r\n");
if (Mx > 0) { if (Mx > 0) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "MX: %d\r\n", Mx); snprintf(TempBuf, sizeof(TempBuf), "MX: %d\r\n", Mx);
strcat(RqstBuf, TempBuf); strcat(RqstBuf, TempBuf);
} }
if (SearchTarget) { if (SearchTarget) {
snprintf(TempBuf, sizeof(TempBuf) - 1, "ST: %s\r\n", snprintf(TempBuf, sizeof(TempBuf), "ST: %s\r\n", SearchTarget);
SearchTarget);
strcat(RqstBuf, TempBuf); strcat(RqstBuf, TempBuf);
} }
strcat(RqstBuf, "\r\n"); strcat(RqstBuf, "\r\n");

124
upnp/src/ssdp/ssdp_device.c
View File

@ -56,6 +56,10 @@
#include <stdio.h> #include <stdio.h>
#include <string.h> #include <string.h>
#ifdef WIN32
#define snprintf _snprintf
#endif
#define MSGTYPE_SHUTDOWN 0 #define MSGTYPE_SHUTDOWN 0
#define MSGTYPE_ADVERTISEMENT 1 #define MSGTYPE_ADVERTISEMENT 1
#define MSGTYPE_REPLY 2 #define MSGTYPE_REPLY 2
@ -435,7 +439,8 @@ int DeviceAdvertisement(char *DevType, int RootDev, char *Udn, char *Location,
/* char Mil_Nt[LINE_SIZE] */ /* char Mil_Nt[LINE_SIZE] */
char Mil_Usn[LINE_SIZE]; char Mil_Usn[LINE_SIZE];
char *msgs[3]; char *msgs[3];
int ret_code = UPNP_E_SUCCESS; int ret_code = UPNP_E_OUTOF_MEMORY;
int rc = 0;
UpnpPrintf(UPNP_INFO, SSDP, __FILE__, __LINE__, UpnpPrintf(UPNP_INFO, SSDP, __FILE__, __LINE__,
"In function DeviceAdvertisement\n"); "In function DeviceAdvertisement\n");
@ -462,8 +467,10 @@ int DeviceAdvertisement(char *DevType, int RootDev, char *Udn, char *Location,
/* If deviceis a root device , here we need to send 3 advertisement /* If deviceis a root device , here we need to send 3 advertisement
* or reply */ * or reply */
if (RootDev) { if (RootDev) {
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::upnp:rootdevice",
"%s::upnp:rootdevice", Udn); Udn);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_ADVERTISEMENT, "upnp:rootdevice", CreateServicePacket(MSGTYPE_ADVERTISEMENT, "upnp:rootdevice",
Mil_Usn, Location, Duration, &msgs[0], Mil_Usn, Location, Duration, &msgs[0],
AddressFamily, PowerState, SleepPeriod, AddressFamily, PowerState, SleepPeriod,
@ -473,16 +480,15 @@ int DeviceAdvertisement(char *DevType, int RootDev, char *Udn, char *Location,
CreateServicePacket(MSGTYPE_ADVERTISEMENT, Udn, Udn, CreateServicePacket(MSGTYPE_ADVERTISEMENT, Udn, Udn,
Location, Duration, &msgs[1], AddressFamily, Location, Duration, &msgs[1], AddressFamily,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::%s", Udn, DevType); rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn, DevType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_ADVERTISEMENT, DevType, Mil_Usn, CreateServicePacket(MSGTYPE_ADVERTISEMENT, DevType, Mil_Usn,
Location, Duration, &msgs[2], AddressFamily, Location, Duration, &msgs[2], AddressFamily,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
/* check error */ /* check error */
if ((RootDev && msgs[0] == NULL) || msgs[1] == NULL || msgs[2] == NULL) { if ((RootDev && msgs[0] == NULL) || msgs[1] == NULL || msgs[2] == NULL) {
free(msgs[0]); goto error_handler;
free(msgs[1]);
free(msgs[2]);
return UPNP_E_OUTOF_MEMORY;
} }
/* send packets */ /* send packets */
if (RootDev) { if (RootDev) {
@ -495,6 +501,8 @@ int DeviceAdvertisement(char *DevType, int RootDev, char *Udn, char *Location,
ret_code = ret_code =
NewRequestHandler((struct sockaddr *)&__ss, 2, &msgs[1]); NewRequestHandler((struct sockaddr *)&__ss, 2, &msgs[1]);
} }
error_handler:
/* free msgs */ /* free msgs */
free(msgs[0]); free(msgs[0]);
free(msgs[1]); free(msgs[1]);
@ -507,11 +515,12 @@ int SendReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
char *Udn, char *Location, int Duration, int ByType, char *Udn, char *Location, int Duration, int ByType,
int PowerState, int SleepPeriod, int RegistrationState) int PowerState, int SleepPeriod, int RegistrationState)
{ {
int ret_code; int ret_code = UPNP_E_OUTOF_MEMORY;
char *msgs[2]; char *msgs[2];
int num_msgs; int num_msgs;
char Mil_Usn[LINE_SIZE]; char Mil_Usn[LINE_SIZE];
int i; int i;
int rc = 0;
msgs[0] = NULL; msgs[0] = NULL;
msgs[1] = NULL; msgs[1] = NULL;
@ -520,8 +529,10 @@ int SendReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
/* one msg for root device */ /* one msg for root device */
num_msgs = 1; num_msgs = 1;
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::upnp:rootdevice", rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::upnp:rootdevice",
Udn); Udn);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_REPLY, "upnp:rootdevice", CreateServicePacket(MSGTYPE_REPLY, "upnp:rootdevice",
Mil_Usn, Location, Duration, &msgs[0], Mil_Usn, Location, Duration, &msgs[0],
DestAddr->sa_family, PowerState, DestAddr->sa_family, PowerState,
@ -537,8 +548,10 @@ int SendReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
DestAddr->sa_family, PowerState, DestAddr->sa_family, PowerState,
SleepPeriod, RegistrationState); SleepPeriod, RegistrationState);
} else { } else {
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::%s", Udn, rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn,
DevType); DevType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_REPLY, DevType, Mil_Usn, CreateServicePacket(MSGTYPE_REPLY, DevType, Mil_Usn,
Location, Duration, &msgs[0], Location, Duration, &msgs[0],
DestAddr->sa_family, PowerState, DestAddr->sa_family, PowerState,
@ -548,12 +561,13 @@ int SendReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
/* check error */ /* check error */
for (i = 0; i < num_msgs; i++) { for (i = 0; i < num_msgs; i++) {
if (msgs[i] == NULL) { if (msgs[i] == NULL) {
free(msgs[0]); goto error_handler;
return UPNP_E_OUTOF_MEMORY;
} }
} }
/* send msgs */ /* send msgs */
ret_code = NewRequestHandler(DestAddr, num_msgs, msgs); ret_code = NewRequestHandler(DestAddr, num_msgs, msgs);
error_handler:
for (i = 0; i < num_msgs; i++) { for (i = 0; i < num_msgs; i++) {
if (msgs[i] != NULL) if (msgs[i] != NULL)
free(msgs[i]); free(msgs[i]);
@ -567,7 +581,8 @@ int DeviceReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
int SleepPeriod, int RegistrationState) int SleepPeriod, int RegistrationState)
{ {
char *szReq[3], Mil_Nt[LINE_SIZE], Mil_Usn[LINE_SIZE]; char *szReq[3], Mil_Nt[LINE_SIZE], Mil_Usn[LINE_SIZE];
int RetVal; int RetVal = UPNP_E_OUTOF_MEMORY;
int rc = 0;
szReq[0] = NULL; szReq[0] = NULL;
szReq[1] = NULL; szReq[1] = NULL;
@ -578,30 +593,36 @@ int DeviceReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
if (RootDev) { if (RootDev) {
/* 3 replies for root device */ /* 3 replies for root device */
strncpy(Mil_Nt, "upnp:rootdevice", sizeof(Mil_Nt) - 1); strncpy(Mil_Nt, "upnp:rootdevice", sizeof(Mil_Nt) - 1);
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::upnp:rootdevice", rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::upnp:rootdevice", Udn);
Udn); if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_REPLY, Mil_Nt, Mil_Usn, CreateServicePacket(MSGTYPE_REPLY, Mil_Nt, Mil_Usn,
Location, Duration, &szReq[0], Location, Duration, &szReq[0],
DestAddr->sa_family, PowerState, DestAddr->sa_family, PowerState,
SleepPeriod, RegistrationState); SleepPeriod, RegistrationState);
} }
snprintf(Mil_Nt, sizeof(Mil_Nt) - 1, "%s", Udn); rc = snprintf(Mil_Nt, sizeof(Mil_Nt), "%s", Udn);
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s", Udn); if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Nt))
goto error_handler;
snprintf(Mil_Usn, sizeof(Mil_Usn), "%s", Udn);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_REPLY, Mil_Nt, Mil_Usn, CreateServicePacket(MSGTYPE_REPLY, Mil_Nt, Mil_Usn,
Location, Duration, &szReq[1], DestAddr->sa_family, Location, Duration, &szReq[1], DestAddr->sa_family,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
snprintf(Mil_Nt, sizeof(Mil_Nt) - 1, "%s", DevType); rc = snprintf(Mil_Nt, sizeof(Mil_Nt), "%s", DevType);
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::%s", Udn, DevType); if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Nt))
goto error_handler;
rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn, DevType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_REPLY, Mil_Nt, Mil_Usn, CreateServicePacket(MSGTYPE_REPLY, Mil_Nt, Mil_Usn,
Location, Duration, &szReq[2], DestAddr->sa_family, Location, Duration, &szReq[2], DestAddr->sa_family,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
/* check error */ /* check error */
if ((RootDev && szReq[0] == NULL) || if ((RootDev && szReq[0] == NULL) ||
szReq[1] == NULL || szReq[2] == NULL) { szReq[1] == NULL || szReq[2] == NULL) {
free(szReq[0]); goto error_handler;
free(szReq[1]);
free(szReq[2]);
return UPNP_E_OUTOF_MEMORY;
} }
/* send replies */ /* send replies */
if (RootDev) { if (RootDev) {
@ -609,6 +630,8 @@ int DeviceReply(struct sockaddr *DestAddr, char *DevType, int RootDev,
} else { } else {
RetVal = NewRequestHandler(DestAddr, 2, &szReq[1]); RetVal = NewRequestHandler(DestAddr, 2, &szReq[1]);
} }
error_handler:
/* free */ /* free */
free(szReq[0]); free(szReq[0]);
free(szReq[1]); free(szReq[1]);
@ -623,13 +646,15 @@ int ServiceAdvertisement(char *Udn, char *ServType, char *Location,
{ {
char Mil_Usn[LINE_SIZE]; char Mil_Usn[LINE_SIZE];
char *szReq[1]; char *szReq[1];
int RetVal = UPNP_E_SUCCESS; int RetVal = UPNP_E_OUTOF_MEMORY;
struct sockaddr_storage __ss; struct sockaddr_storage __ss;
struct sockaddr_in *DestAddr4 = (struct sockaddr_in *)&__ss; struct sockaddr_in *DestAddr4 = (struct sockaddr_in *)&__ss;
struct sockaddr_in6 *DestAddr6 = (struct sockaddr_in6 *)&__ss; struct sockaddr_in6 *DestAddr6 = (struct sockaddr_in6 *)&__ss;
int rc = 0;
memset(&__ss, 0, sizeof(__ss)); memset(&__ss, 0, sizeof(__ss));
memset(Mil_Usn, 0, sizeof(Mil_Usn)); memset(Mil_Usn, 0, sizeof(Mil_Usn));
szReq[0] = NULL;
if (AddressFamily == AF_INET) { if (AddressFamily == AF_INET) {
DestAddr4->sin_family = AF_INET; DestAddr4->sin_family = AF_INET;
inet_pton(AF_INET, SSDP_IP, &DestAddr4->sin_addr); inet_pton(AF_INET, SSDP_IP, &DestAddr4->sin_addr);
@ -645,16 +670,20 @@ int ServiceAdvertisement(char *Udn, char *ServType, char *Location,
UpnpPrintf(UPNP_CRITICAL, SSDP, __FILE__, __LINE__, UpnpPrintf(UPNP_CRITICAL, SSDP, __FILE__, __LINE__,
"Invalid device address family.\n"); "Invalid device address family.\n");
} }
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1,"%s::%s", Udn, ServType); rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn, ServType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
/* CreateServiceRequestPacket(1,szReq[0],Mil_Nt,Mil_Usn, /* CreateServiceRequestPacket(1,szReq[0],Mil_Nt,Mil_Usn,
* Server,Location,Duration); */ * Server,Location,Duration); */
CreateServicePacket(MSGTYPE_ADVERTISEMENT, ServType, Mil_Usn, CreateServicePacket(MSGTYPE_ADVERTISEMENT, ServType, Mil_Usn,
Location, Duration, &szReq[0], AddressFamily, Location, Duration, &szReq[0], AddressFamily,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
if (szReq[0] == NULL) { if (szReq[0] == NULL) {
return UPNP_E_OUTOF_MEMORY; goto error_handler;
} }
RetVal = NewRequestHandler((struct sockaddr *)&__ss, 1, szReq); RetVal = NewRequestHandler((struct sockaddr *)&__ss, 1, szReq);
error_handler:
free(szReq[0]); free(szReq[0]);
return RetVal; return RetVal;
@ -666,17 +695,22 @@ int ServiceReply(struct sockaddr *DestAddr, char *ServType, char *Udn,
{ {
char Mil_Usn[LINE_SIZE]; char Mil_Usn[LINE_SIZE];
char *szReq[1]; char *szReq[1];
int RetVal; int RetVal = UPNP_E_OUTOF_MEMORY;
int rc = 0;
memset(Mil_Usn, 0, sizeof(Mil_Usn)); memset(Mil_Usn, 0, sizeof(Mil_Usn));
szReq[0] = NULL; szReq[0] = NULL;
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::%s", Udn, ServType); rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn, ServType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_REPLY, ServType, Mil_Usn, CreateServicePacket(MSGTYPE_REPLY, ServType, Mil_Usn,
Location, Duration, &szReq[0], DestAddr->sa_family, Location, Duration, &szReq[0], DestAddr->sa_family,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
if (szReq[0] == NULL) if (szReq[0] == NULL)
return UPNP_E_OUTOF_MEMORY; goto error_handler;
RetVal = NewRequestHandler(DestAddr, 1, szReq); RetVal = NewRequestHandler(DestAddr, 1, szReq);
error_handler:
free(szReq[0]); free(szReq[0]);
return RetVal; return RetVal;
@ -691,10 +725,12 @@ int ServiceShutdown(char *Udn, char *ServType, char *Location, int Duration,
struct sockaddr_storage __ss; struct sockaddr_storage __ss;
struct sockaddr_in *DestAddr4 = (struct sockaddr_in *)&__ss; struct sockaddr_in *DestAddr4 = (struct sockaddr_in *)&__ss;
struct sockaddr_in6 *DestAddr6 = (struct sockaddr_in6 *)&__ss; struct sockaddr_in6 *DestAddr6 = (struct sockaddr_in6 *)&__ss;
int RetVal = UPNP_E_SUCCESS; int RetVal = UPNP_E_OUTOF_MEMORY;
int rc = 0;
memset(&__ss, 0, sizeof(__ss)); memset(&__ss, 0, sizeof(__ss));
memset(Mil_Usn, 0, sizeof(Mil_Usn)); memset(Mil_Usn, 0, sizeof(Mil_Usn));
szReq[0] = NULL;
if (AddressFamily == AF_INET) { if (AddressFamily == AF_INET) {
DestAddr4->sin_family = AF_INET; DestAddr4->sin_family = AF_INET;
inet_pton(AF_INET, SSDP_IP, &DestAddr4->sin_addr); inet_pton(AF_INET, SSDP_IP, &DestAddr4->sin_addr);
@ -711,15 +747,19 @@ int ServiceShutdown(char *Udn, char *ServType, char *Location, int Duration,
"Invalid device address family.\n"); "Invalid device address family.\n");
} }
/* sprintf(Mil_Nt,"%s",ServType); */ /* sprintf(Mil_Nt,"%s",ServType); */
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::%s", Udn, ServType); rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn, ServType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
/* CreateServiceRequestPacket(0,szReq[0],Mil_Nt,Mil_Usn, /* CreateServiceRequestPacket(0,szReq[0],Mil_Nt,Mil_Usn,
* Server,Location,Duration); */ * Server,Location,Duration); */
CreateServicePacket(MSGTYPE_SHUTDOWN, ServType, Mil_Usn, CreateServicePacket(MSGTYPE_SHUTDOWN, ServType, Mil_Usn,
Location, Duration, &szReq[0], AddressFamily, Location, Duration, &szReq[0], AddressFamily,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
if (szReq[0] == NULL) if (szReq[0] == NULL)
return UPNP_E_OUTOF_MEMORY; goto error_handler;
RetVal = NewRequestHandler((struct sockaddr *)&__ss, 1, szReq); RetVal = NewRequestHandler((struct sockaddr *)&__ss, 1, szReq);
error_handler:
free(szReq[0]); free(szReq[0]);
return RetVal; return RetVal;
@ -734,7 +774,8 @@ int DeviceShutdown(char *DevType, int RootDev, char *Udn, char *_Server,
struct sockaddr_in6 *DestAddr6 = (struct sockaddr_in6 *)&__ss; struct sockaddr_in6 *DestAddr6 = (struct sockaddr_in6 *)&__ss;
char *msgs[3]; char *msgs[3];
char Mil_Usn[LINE_SIZE]; char Mil_Usn[LINE_SIZE];
int ret_code = UPNP_E_SUCCESS; int ret_code = UPNP_E_OUTOF_MEMORY;
int rc = 0;
msgs[0] = NULL; msgs[0] = NULL;
msgs[1] = NULL; msgs[1] = NULL;
@ -758,8 +799,10 @@ int DeviceShutdown(char *DevType, int RootDev, char *Udn, char *_Server,
} }
/* root device has one extra msg */ /* root device has one extra msg */
if (RootDev) { if (RootDev) {
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::upnp:rootdevice", rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::upnp:rootdevice",
Udn); Udn);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_SHUTDOWN, "upnp:rootdevice", CreateServicePacket(MSGTYPE_SHUTDOWN, "upnp:rootdevice",
Mil_Usn, Location, Duration, &msgs[0], Mil_Usn, Location, Duration, &msgs[0],
AddressFamily, PowerState, SleepPeriod, AddressFamily, PowerState, SleepPeriod,
@ -771,16 +814,15 @@ int DeviceShutdown(char *DevType, int RootDev, char *Udn, char *_Server,
CreateServicePacket(MSGTYPE_SHUTDOWN, Udn, Udn, CreateServicePacket(MSGTYPE_SHUTDOWN, Udn, Udn,
Location, Duration, &msgs[1], AddressFamily, Location, Duration, &msgs[1], AddressFamily,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
snprintf(Mil_Usn, sizeof(Mil_Usn) - 1, "%s::%s", Udn, DevType); rc = snprintf(Mil_Usn, sizeof(Mil_Usn), "%s::%s", Udn, DevType);
if (rc < 0 || (unsigned int) rc >= sizeof(Mil_Usn))
goto error_handler;
CreateServicePacket(MSGTYPE_SHUTDOWN, DevType, Mil_Usn, CreateServicePacket(MSGTYPE_SHUTDOWN, DevType, Mil_Usn,
Location, Duration, &msgs[2], AddressFamily, Location, Duration, &msgs[2], AddressFamily,
PowerState, SleepPeriod, RegistrationState); PowerState, SleepPeriod, RegistrationState);
/* check error */ /* check error */
if ((RootDev && msgs[0] == NULL) || msgs[1] == NULL || msgs[2] == NULL) { if ((RootDev && msgs[0] == NULL) || msgs[1] == NULL || msgs[2] == NULL) {
free(msgs[0]); goto error_handler;
free(msgs[1]);
free(msgs[2]);
return UPNP_E_OUTOF_MEMORY;
} }
/* send packets */ /* send packets */
if (RootDev) { if (RootDev) {
@ -793,6 +835,8 @@ int DeviceShutdown(char *DevType, int RootDev, char *Udn, char *_Server,
ret_code = ret_code =
NewRequestHandler((struct sockaddr *)&__ss, 2, &msgs[1]); NewRequestHandler((struct sockaddr *)&__ss, 2, &msgs[1]);
} }
error_handler:
/* free msgs */ /* free msgs */
free(msgs[0]); free(msgs[0]);
free(msgs[1]); free(msgs[1]);

12
upnp/src/ssdp/ssdp_server.c
View File

@ -40,6 +40,7 @@
#ifndef WIN32 #ifndef WIN32
#include <sys/param.h> #include <sys/param.h>
#define snprintf _snprintf
#endif /* WIN32 */ #endif /* WIN32 */
#include "config.h" #include "config.h"
@ -456,6 +457,7 @@ int unique_service_name(char *cmd, SsdpEvent *Evt)
char *ptr3 = NULL; char *ptr3 = NULL;
int CommandFound = 0; int CommandFound = 0;
size_t n = 0; size_t n = 0;
int rc = 0;
if (strstr(cmd, "uuid:schemas") != NULL) { if (strstr(cmd, "uuid:schemas") != NULL) {
ptr1 = strstr(cmd, ":device"); ptr1 = strstr(cmd, ":device");
@ -469,8 +471,10 @@ int unique_service_name(char *cmd, SsdpEvent *Evt)
return -1; return -1;
if (ptr3 != NULL) { if (ptr3 != NULL) {
memset(Evt->UDN, 0, sizeof(Evt->UDN)); memset(Evt->UDN, 0, sizeof(Evt->UDN));
snprintf(Evt->UDN, sizeof(Evt->UDN) - 1, rc = snprintf(Evt->UDN, sizeof(Evt->UDN), "uuid:%s",
"uuid:%s", ptr3 + 1); ptr3 + 1);
if (rc < 0 || (unsigned int) rc >= sizeof(Evt->UDN))
return -1;
} }
else else
return -1; return -1;
@ -480,8 +484,10 @@ int unique_service_name(char *cmd, SsdpEvent *Evt)
strncpy(TempBuf, ptr1, n); strncpy(TempBuf, ptr1, n);
TempBuf[n] = '\0'; TempBuf[n] = '\0';
memset(Evt->DeviceType, 0, sizeof(Evt->DeviceType)); memset(Evt->DeviceType, 0, sizeof(Evt->DeviceType));
snprintf(Evt->DeviceType, sizeof(Evt->DeviceType) - 1, rc = snprintf(Evt->DeviceType, sizeof(Evt->DeviceType),
"urn%s", TempBuf); "urn%s", TempBuf);
if (rc < 0 || (unsigned int) rc >= sizeof(Evt->DeviceType))
return -1;
} else } else
return -1; return -1;
return 0; return 0;

2
upnp/src/urlconfig/urlconfig.c
View File

@ -135,6 +135,7 @@ static UPNP_INLINE int calc_alias(
return UPNP_E_OUTOF_MEMORY; return UPNP_E_OUTOF_MEMORY;
memset(alias_temp, 0, new_alias_len + 1); memset(alias_temp, 0, new_alias_len + 1);
strncpy(alias_temp, rootPath, root_len); strncpy(alias_temp, rootPath, root_len);
alias_temp[root_len] = '\0';
strncat(alias_temp, temp_str, strlen(temp_str)); strncat(alias_temp, temp_str, strlen(temp_str));
strncat(alias_temp, aliasPtr, strlen(aliasPtr)); strncat(alias_temp, aliasPtr, strlen(aliasPtr));
@ -175,6 +176,7 @@ static UPNP_INLINE int calc_descURL(
if (len > (LINE_SIZE - 1)) if (len > (LINE_SIZE - 1))
return UPNP_E_URL_TOO_BIG; return UPNP_E_URL_TOO_BIG;
strncpy(descURL, http_scheme, strlen(http_scheme)); strncpy(descURL, http_scheme, strlen(http_scheme));
descURL[strlen(http_scheme)] = '\0';
strncat(descURL, ipPortStr, strlen(ipPortStr)); strncat(descURL, ipPortStr, strlen(ipPortStr));
strncat(descURL, alias, strlen(alias)); strncat(descURL, alias, strlen(alias));
descURL[len] = '\0'; descURL[len] = '\0';