granicus.if.org Git - imagemagick/blob - magick/policy.c

   1 /*
   2 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
   3 %                                                                             %
   4 %                                                                             %
   5 %                  PPPP    OOO   L      IIIII   CCCC  Y   Y                   %
   6 %                  P   P  O   O  L        I    C       Y Y                    %
   7 %                  PPPP   O   O  L        I    C        Y                     %
   8 %                  P      O   O  L        I    C        Y                     %
   9 %                  P       OOO   LLLLL  IIIII   CCCC    Y                     %
  10 %                                                                             %
  11 %                                                                             %
  12 %                         MagickCore Policy Methods                           %
  13 %                                                                             %
  14 %                              Software Design                                %
  15 %                                John Cristy                                  %
  16 %                                 July 1992                                   %
  17 %                                                                             %
  18 %                                                                             %
  19 %  Copyright 1999-2010 ImageMagick Studio LLC, a non-profit organization      %
  20 %  dedicated to making software imaging solutions freely available.           %
  21 %                                                                             %
  22 %  You may not use this file except in compliance with the License.  You may  %
  23 %  obtain a copy of the License at                                            %
  24 %                                                                             %
  25 %    http://www.imagemagick.org/script/license.php                            %
  26 %                                                                             %
  27 %  Unless required by applicable law or agreed to in writing, software        %
  28 %  distributed under the License is distributed on an "AS IS" BASIS,          %
  29 %  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   %
  30 %  See the License for the specific language governing permissions and        %
  31 %  limitations under the License.                                             %
  32 %                                                                             %
  33 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
  34 %
  35 %  We use linked-lists because splay-trees do not currently support duplicate
  36 %  key / value pairs (.e.g X11 green compliance and SVG green compliance).
  37 %
  38 */
  39 \f
  40 /*
  41   Include declarations.
  42 */
  43 #include "magick/studio.h"
  44 #include "magick/client.h"
  45 #include "magick/configure.h"
  46 #include "magick/exception.h"
  47 #include "magick/exception-private.h"
  48 #include "magick/memory_.h"
  49 #include "magick/monitor.h"
  50 #include "magick/monitor-private.h"
  51 #include "magick/option.h"
  52 #include "magick/policy.h"
  53 #include "magick/semaphore.h"
  54 #include "magick/string_.h"
  55 #include "magick/token.h"
  56 #include "magick/utility.h"
  57 #include "magick/xml-tree.h"
  58 \f
  59 /*
  60   Define declarations.
  61 */
  62 #define PolicyFilename  "policy.xml"
  63 \f
  64 /*
  65   Typedef declarations.
  66 */
  67 struct _PolicyInfo
  68 {
  69   char
  70     *path;
  71
  72   PolicyDomain
  73     domain;
  74
  75   PolicyRights
  76     rights;
  77
  78   char
  79     *name,
  80     *pattern,
  81     *value;
  82
  83   MagickBooleanType
  84     exempt,
  85     stealth,
  86     debug;
  87
  88   SemaphoreInfo
  89     *semaphore;
  90
  91   unsigned long
  92     signature;
  93 };
  94
  95 typedef struct _PolicyMapInfo
  96 {
  97   const PolicyDomain
  98     domain;
  99
 100   const PolicyRights
 101     rights;
 102
 103   const char
 104     *name,
 105     *pattern,
 106     *value;
 107 } PolicyMapInfo;
 108 \f
 109 /*
 110   Static declarations.
 111 */
 112 static const PolicyMapInfo
 113   PolicyMap[] =
 114   {
 115     { UndefinedPolicyDomain, UndefinedPolicyRights, (const char *) NULL,
 116       (const char *) NULL, (const char *) NULL }
 117   };
 118
 119 static LinkedListInfo
 120   *policy_list = (LinkedListInfo *) NULL;
 121
 122 static SemaphoreInfo
 123   *policy_semaphore = (SemaphoreInfo *) NULL;
 124
 125 static volatile MagickBooleanType
 126   instantiate_policy = MagickFalse;
 127 \f
 128 /*
 129   Forward declarations.
 130 */
 131 static MagickBooleanType
 132   InitializePolicyList(ExceptionInfo *),
 133   LoadPolicyLists(const char *,ExceptionInfo *);
 134 \f
 135 /*
 136 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 137 %                                                                             %
 138 %                                                                             %
 139 %                                                                             %
 140 +   G e t P o l i c y I n f o                                                 %
 141 %                                                                             %
 142 %                                                                             %
 143 %                                                                             %
 144 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 145 %
 146 %  GetPolicyInfo() searches the policy list for the specified name and if found
 147 %  returns attributes for that policy.
 148 %
 149 %  The format of the GetPolicyInfo method is:
 150 %
 151 %      PolicyInfo *GetPolicyInfo(const char *name,ExceptionInfo *exception)
 152 %
 153 %  A description of each parameter follows:
 154 %
 155 %    o name: the policy name.
 156 %
 157 %    o exception: return any errors or warnings in this structure.
 158 %
 159 */
 160 static PolicyInfo *GetPolicyInfo(const char *name,ExceptionInfo *exception)
 161 {
 162   char
 163     policyname[MaxTextExtent];
 164
 165   register PolicyInfo
 166     *p;
 167
 168   register char
 169     *q;
 170
 171   assert(exception != (ExceptionInfo *) NULL);
 172   if ((policy_list == (LinkedListInfo *) NULL) ||
 173       (instantiate_policy == MagickFalse))
 174     if (InitializePolicyList(exception) == MagickFalse)
 175       return((PolicyInfo *) NULL);
 176   if ((policy_list == (LinkedListInfo *) NULL) ||
 177       (IsLinkedListEmpty(policy_list) != MagickFalse))
 178     return((PolicyInfo *) NULL);
 179   if ((name == (const char *) NULL) || (LocaleCompare(name,"*") == 0))
 180     return((PolicyInfo *) GetValueFromLinkedList(policy_list,0));
 181   /*
 182     Strip names of whitespace.
 183   */
 184   (void) CopyMagickString(policyname,name,MaxTextExtent);
 185   for (q=policyname; *q != '\0'; q++)
 186   {
 187     if (isspace((int) ((unsigned char) *q)) == 0)
 188       continue;
 189     (void) CopyMagickString(q,q+1,MaxTextExtent);
 190     q--;
 191   }
 192   /*
 193     Search for policy tag.
 194   */
 195   LockSemaphoreInfo(policy_semaphore);
 196   ResetLinkedListIterator(policy_list);
 197   p=(PolicyInfo *) GetNextValueInLinkedList(policy_list);
 198   while (p != (PolicyInfo *) NULL)
 199   {
 200     if (LocaleCompare(policyname,p->name) == 0)
 201       break;
 202     p=(PolicyInfo *) GetNextValueInLinkedList(policy_list);
 203   }
 204   if (p != (PolicyInfo *) NULL)
 205     (void) InsertValueInLinkedList(policy_list,0,
 206       RemoveElementByValueFromLinkedList(policy_list,p));
 207   UnlockSemaphoreInfo(policy_semaphore);
 208   return(p);
 209 }
 210 \f
 211 /*
 212 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 213 %                                                                             %
 214 %                                                                             %
 215 %                                                                             %
 216 %   G e t P o l i c y I n f o L i s t                                         %
 217 %                                                                             %
 218 %                                                                             %
 219 %                                                                             %
 220 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 221 %
 222 %  GetPolicyInfoList() returns any policies that match the specified pattern.
 223 %
 224 %  The format of the GetPolicyInfoList function is:
 225 %
 226 %      const PolicyInfo **GetPolicyInfoList(const char *pattern,
 227 %        unsigned long *number_policies,ExceptionInfo *exception)
 228 %
 229 %  A description of each parameter follows:
 230 %
 231 %    o pattern: Specifies a pointer to a text string containing a pattern.
 232 %
 233 %    o number_policies:  returns the number of policies in the list.
 234 %
 235 %    o exception: return any errors or warnings in this structure.
 236 %
 237 */
 238 MagickExport const PolicyInfo **GetPolicyInfoList(const char *pattern,
 239   unsigned long *number_policies,ExceptionInfo *exception)
 240 {
 241   const PolicyInfo
 242     **policies;
 243
 244   register const PolicyInfo
 245     *p;
 246
 247   register long
 248     i;
 249
 250   /*
 251     Allocate policy list.
 252   */
 253   assert(pattern != (char *) NULL);
 254   (void) LogMagickEvent(TraceEvent,GetMagickModule(),"%s",pattern);
 255   assert(number_policies != (unsigned long *) NULL);
 256   *number_policies=0;
 257   p=GetPolicyInfo("*",exception);
 258   if (p == (const PolicyInfo *) NULL)
 259     return((const PolicyInfo **) NULL);
 260   policies=(const PolicyInfo **) AcquireQuantumMemory((size_t)
 261     GetNumberOfElementsInLinkedList(policy_list)+1UL,sizeof(*policies));
 262   if (policies == (const PolicyInfo **) NULL)
 263     return((const PolicyInfo **) NULL);
 264   /*
 265     Generate policy list.
 266   */
 267   LockSemaphoreInfo(policy_semaphore);
 268   ResetLinkedListIterator(policy_list);
 269   p=(const PolicyInfo *) GetNextValueInLinkedList(policy_list);
 270   for (i=0; p != (const PolicyInfo *) NULL; )
 271   {
 272     if ((p->stealth == MagickFalse) &&
 273         (GlobExpression(p->name,pattern,MagickFalse) != MagickFalse))
 274       policies[i++]=p;
 275     p=(const PolicyInfo *) GetNextValueInLinkedList(policy_list);
 276   }
 277   UnlockSemaphoreInfo(policy_semaphore);
 278   policies[i]=(PolicyInfo *) NULL;
 279   *number_policies=(unsigned long) i;
 280   return(policies);
 281 }
 282 \f
 283 /*
 284 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 285 %                                                                             %
 286 %                                                                             %
 287 %                                                                             %
 288 %   G e t P o l i c y L i s t                                                 %
 289 %                                                                             %
 290 %                                                                             %
 291 %                                                                             %
 292 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 293 %
 294 %  GetPolicyList() returns any policies that match the specified pattern.
 295 %
 296 %  The format of the GetPolicyList function is:
 297 %
 298 %      char **GetPolicyList(const char *pattern,unsigned long *number_policies,
 299 %        ExceptionInfo *exception)
 300 %
 301 %  A description of each parameter follows:
 302 %
 303 %    o pattern: a pointer to a text string containing a pattern.
 304 %
 305 %    o number_policies:  returns the number of policies in the list.
 306 %
 307 %    o exception: return any errors or warnings in this structure.
 308 %
 309 */
 310 MagickExport char **GetPolicyList(const char *pattern,
 311   unsigned long *number_policies,ExceptionInfo *exception)
 312 {
 313   char
 314     **policies;
 315
 316   register const PolicyInfo
 317     *p;
 318
 319   register long
 320     i;
 321
 322   /*
 323     Allocate policy list.
 324   */
 325   assert(pattern != (char *) NULL);
 326   (void) LogMagickEvent(TraceEvent,GetMagickModule(),"%s",pattern);
 327   assert(number_policies != (unsigned long *) NULL);
 328   *number_policies=0;
 329   p=GetPolicyInfo("*",exception);
 330   if (p == (const PolicyInfo *) NULL)
 331     return((char **) NULL);
 332   policies=(char **) AcquireQuantumMemory((size_t)
 333     GetNumberOfElementsInLinkedList(policy_list)+1UL,sizeof(*policies));
 334   if (policies == (char **) NULL)
 335     return((char **) NULL);
 336   /*
 337     Generate policy list.
 338   */
 339   LockSemaphoreInfo(policy_semaphore);
 340   ResetLinkedListIterator(policy_list);
 341   p=(const PolicyInfo *) GetNextValueInLinkedList(policy_list);
 342   for (i=0; p != (const PolicyInfo *) NULL; )
 343   {
 344     if ((p->stealth == MagickFalse) &&
 345         (GlobExpression(p->name,pattern,MagickFalse) != MagickFalse))
 346       policies[i++]=ConstantString(p->name);
 347     p=(const PolicyInfo *) GetNextValueInLinkedList(policy_list);
 348   }
 349   UnlockSemaphoreInfo(policy_semaphore);
 350   policies[i]=(char *) NULL;
 351   *number_policies=(unsigned long) i;
 352   return(policies);
 353 }
 354 \f
 355 /*
 356 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 357 %                                                                             %
 358 %                                                                             %
 359 %                                                                             %
 360 %   G e t P o l i c y V a l u e                                               %
 361 %                                                                             %
 362 %                                                                             %
 363 %                                                                             %
 364 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 365 %
 366 %  GetPolicyValue() returns the value associated with the named policy.
 367 %
 368 %  The format of the GetPolicyValue method is:
 369 %
 370 %      char *GetPolicyValue(const char *name)
 371 %
 372 %  A description of each parameter follows:
 373 %
 374 %    o policy_info:  The policy info.
 375 %
 376 */
 377 MagickExport char *GetPolicyValue(const char *name)
 378 {
 379   const char
 380     *value;
 381
 382   const PolicyInfo
 383     *policy_info;
 384
 385   ExceptionInfo
 386     *exception;
 387
 388   assert(name != (const char *) NULL);
 389   (void) LogMagickEvent(TraceEvent,GetMagickModule(),"%s",name);
 390   exception=AcquireExceptionInfo();
 391   policy_info=GetPolicyInfo(name,exception);
 392   exception=DestroyExceptionInfo(exception);
 393   if (policy_info == (PolicyInfo *) NULL)
 394     return((char *) NULL);
 395   value=policy_info->value;
 396   if ((value == (const char *) NULL) || (*value == '\0'))
 397     return((char *) NULL);
 398   return(ConstantString(value));
 399 }
 400 \f
 401 /*
 402 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 403 %                                                                             %
 404 %                                                                             %
 405 %                                                                             %
 406 +   I n i t i a l i z e P o l i c y L i s t                                   %
 407 %                                                                             %
 408 %                                                                             %
 409 %                                                                             %
 410 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 411 %
 412 %  InitializePolicyList() initializes the policy list.
 413 %
 414 %  The format of the InitializePolicyList method is:
 415 %
 416 %      MagickBooleanType InitializePolicyList(ExceptionInfo *exception)
 417 %
 418 %  A description of each parameter follows.
 419 %
 420 %    o exception: return any errors or warnings in this structure.
 421 %
 422 */
 423 static MagickBooleanType InitializePolicyList(ExceptionInfo *exception)
 424 {
 425   if ((policy_list == (LinkedListInfo *) NULL) &&
 426       (instantiate_policy == MagickFalse))
 427     {
 428       if (policy_semaphore == (SemaphoreInfo *) NULL)
 429         AcquireSemaphoreInfo(&policy_semaphore);
 430       LockSemaphoreInfo(policy_semaphore);
 431       if ((policy_list == (LinkedListInfo *) NULL) &&
 432           (instantiate_policy == MagickFalse))
 433         {
 434           (void) LoadPolicyLists(PolicyFilename,exception);
 435           instantiate_policy=MagickTrue;
 436         }
 437       UnlockSemaphoreInfo(policy_semaphore);
 438     }
 439   return(policy_list != (LinkedListInfo *) NULL ? MagickTrue : MagickFalse);
 440 }
 441 \f
 442 /*
 443 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 444 %                                                                             %
 445 %                                                                             %
 446 %                                                                             %
 447 %   I s R i g h t s A u t h o r i z e d                                       %
 448 %                                                                             %
 449 %                                                                             %
 450 %                                                                             %
 451 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 452 %
 453 %  IsRightsAuthorized() returns MagickTrue if the policy authorizes the
 454 %  requested rights for the specified domain.
 455 %
 456 %  The format of the IsRightsAuthorized method is:
 457 %
 458 %      MagickBooleanType IsRightsAuthorized(const PolicyDomain domain,
 459 %        const PolicyRights rights,const char *pattern)
 460 %
 461 %  A description of each parameter follows:
 462 %
 463 %    o domain: the policy domain.
 464 %
 465 %    o rights: the policy rights.
 466 %
 467 %    o pattern: the coder, delegate, filter, or path pattern.
 468 %
 469 */
 470 MagickExport MagickBooleanType IsRightsAuthorized(const PolicyDomain domain,
 471   const PolicyRights rights,const char *pattern)
 472 {
 473   const PolicyInfo
 474     *policy_info;
 475
 476   ExceptionInfo
 477     *exception;
 478
 479   MagickBooleanType
 480     authorized;
 481
 482   register PolicyInfo
 483     *p;
 484
 485   (void) LogMagickEvent(PolicyEvent,GetMagickModule(),
 486     "Domain: %s; rights=%s; pattern=\"%s\" ...",
 487     MagickOptionToMnemonic(MagickPolicyDomainOptions,domain),
 488     MagickOptionToMnemonic(MagickPolicyRightsOptions,rights),pattern);
 489   exception=AcquireExceptionInfo();
 490   policy_info=GetPolicyInfo("*",exception);
 491   exception=DestroyExceptionInfo(exception);
 492   if (policy_info == (PolicyInfo *) NULL)
 493     return(MagickTrue);
 494   authorized=MagickTrue;
 495   LockSemaphoreInfo(policy_semaphore);
 496   ResetLinkedListIterator(policy_list);
 497   p=(PolicyInfo *) GetNextValueInLinkedList(policy_list);
 498   while ((p != (PolicyInfo *) NULL) && (authorized != MagickFalse))
 499   {
 500     if ((p->domain == domain) &&
 501         (GlobExpression(pattern,p->pattern,MagickFalse) != MagickFalse))
 502       {
 503         if (((rights & ReadPolicyRights) != 0) &&
 504             ((p->rights & ReadPolicyRights) == 0))
 505           authorized=MagickFalse;
 506         if (((rights & WritePolicyRights) != 0) &&
 507             ((p->rights & WritePolicyRights) == 0))
 508           authorized=MagickFalse;
 509         if (((rights & ExecutePolicyRights) != 0) &&
 510             ((p->rights & ExecutePolicyRights) == 0))
 511           authorized=MagickFalse;
 512       }
 513     p=(PolicyInfo *) GetNextValueInLinkedList(policy_list);
 514   }
 515   UnlockSemaphoreInfo(policy_semaphore);
 516   return(authorized);
 517 }
 518 \f
 519 /*
 520 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 521 %                                                                             %
 522 %                                                                             %
 523 %                                                                             %
 524 %  L i s t P o l i c y I n f o                                                %
 525 %                                                                             %
 526 %                                                                             %
 527 %                                                                             %
 528 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 529 %
 530 %  ListPolicyInfo() lists policies to the specified file.
 531 %
 532 %  The format of the ListPolicyInfo method is:
 533 %
 534 %      MagickBooleanType ListPolicyInfo(FILE *file,ExceptionInfo *exception)
 535 %
 536 %  A description of each parameter follows.
 537 %
 538 %    o file:  List policy names to this file handle.
 539 %
 540 %    o exception: return any errors or warnings in this structure.
 541 %
 542 */
 543 MagickExport MagickBooleanType ListPolicyInfo(FILE *file,
 544   ExceptionInfo *exception)
 545 {
 546   const char
 547     *path,
 548     *domain;
 549
 550   const PolicyInfo
 551     **policy_info;
 552
 553   register long
 554     i;
 555
 556   unsigned long
 557     number_policies;
 558
 559   /*
 560     List name and attributes of each policy in the list.
 561   */
 562   if (file == (const FILE *) NULL)
 563     file=stdout;
 564   policy_info=GetPolicyInfoList("*",&number_policies,exception);
 565   if (policy_info == (const PolicyInfo **) NULL)
 566     return(MagickFalse);
 567   path=(const char *) NULL;
 568   for (i=0; i < (long) number_policies; i++)
 569   {
 570     if (policy_info[i]->stealth != MagickFalse)
 571       continue;
 572     if (((path == (const char *) NULL) ||
 573          (LocaleCompare(path,policy_info[i]->path) != 0)) &&
 574          (policy_info[i]->path != (char *) NULL))
 575       (void) fprintf(file,"\nPath: %s\n",policy_info[i]->path);
 576     path=policy_info[i]->path;
 577     domain=MagickOptionToMnemonic(MagickPolicyDomainOptions,
 578       policy_info[i]->domain);
 579     (void) fprintf(file,"  Policy: %s\n",domain);
 580     if ((policy_info[i]->domain == ResourcePolicyDomain) ||
 581         (policy_info[i]->domain == SystemPolicyDomain))
 582       {
 583         if (policy_info[i]->name != (char *) NULL)
 584           (void) fprintf(file,"    name: %s\n",policy_info[i]->name);
 585         if (policy_info[i]->value != (char *) NULL)
 586           (void) fprintf(file,"    value: %s\n",policy_info[i]->value);
 587       }
 588     else
 589       {
 590         (void) fprintf(file,"    rights: ");
 591         if (policy_info[i]->rights == NoPolicyRights)
 592           (void) fprintf(file,"None ");
 593         if ((policy_info[i]->rights & ReadPolicyRights) != 0)
 594           (void) fprintf(file,"Read ");
 595         if ((policy_info[i]->rights & WritePolicyRights) != 0)
 596           (void) fprintf(file,"Write ");
 597         if ((policy_info[i]->rights & ExecutePolicyRights) != 0)
 598           (void) fprintf(file,"Execute ");
 599         (void) fprintf(file,"\n");
 600         if (policy_info[i]->pattern != (char *) NULL)
 601           (void) fprintf(file,"    pattern: %s\n",policy_info[i]->pattern);
 602       }
 603   }
 604   policy_info=(const PolicyInfo **) RelinquishMagickMemory((void *)
 605     policy_info);
 606   (void) fflush(file);
 607   return(MagickTrue);
 608 }
 609 \f
 610 /*
 611 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 612 %                                                                             %
 613 %                                                                             %
 614 %                                                                             %
 615 +   L o a d P o l i c y L i s t                                               %
 616 %                                                                             %
 617 %                                                                             %
 618 %                                                                             %
 619 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 620 %
 621 %  LoadPolicyList() loads the policy configuration file which provides a mapping
 622 %  between policy attributes and a policy domain.
 623 %
 624 %  The format of the LoadPolicyList method is:
 625 %
 626 %      MagickBooleanType LoadPolicyList(const char *xml,const char *filename,
 627 %        const unsigned long depth,ExceptionInfo *exception)
 628 %
 629 %  A description of each parameter follows:
 630 %
 631 %    o xml:  The policy list in XML format.
 632 %
 633 %    o filename:  The policy list filename.
 634 %
 635 %    o depth: depth of <include /> statements.
 636 %
 637 %    o exception: return any errors or warnings in this structure.
 638 %
 639 */
 640 static MagickBooleanType LoadPolicyList(const char *xml,const char *filename,
 641   const unsigned long depth,ExceptionInfo *exception)
 642 {
 643   char
 644     keyword[MaxTextExtent],
 645     *token;
 646
 647   PolicyInfo
 648     *policy_info;
 649
 650   const char
 651     *q;
 652
 653   MagickBooleanType
 654     status;
 655
 656   /*
 657     Load the policy map file.
 658   */
 659   (void) LogMagickEvent(ConfigureEvent,GetMagickModule(),
 660     "Loading policy file \"%s\" ...",filename);
 661   if (xml == (char *) NULL)
 662     return(MagickFalse);
 663   if (policy_list == (LinkedListInfo *) NULL)
 664     {
 665       policy_list=NewLinkedList(0);
 666       if (policy_list == (LinkedListInfo *) NULL)
 667         {
 668           ThrowFileException(exception,ResourceLimitError,
 669             "MemoryAllocationFailed",filename);
 670           return(MagickFalse);
 671         }
 672     }
 673   status=MagickTrue;
 674   policy_info=(PolicyInfo *) NULL;
 675   token=AcquireString(xml);
 676   for (q=(const char *) xml; *q != '\0'; )
 677   {
 678     /*
 679       Interpret XML.
 680     */
 681     GetMagickToken(q,&q,token);
 682     if (*token == '\0')
 683       break;
 684     (void) CopyMagickString(keyword,token,MaxTextExtent);
 685     if (LocaleNCompare(keyword,"<!DOCTYPE",9) == 0)
 686       {
 687         /*
 688           Docdomain element.
 689         */
 690         while ((LocaleNCompare(q,"]>",2) != 0) && (*q != '\0'))
 691           GetMagickToken(q,&q,token);
 692         continue;
 693       }
 694     if (LocaleNCompare(keyword,"<!--",4) == 0)
 695       {
 696         /*
 697           Comment element.
 698         */
 699         while ((LocaleNCompare(q,"->",2) != 0) && (*q != '\0'))
 700           GetMagickToken(q,&q,token);
 701         continue;
 702       }
 703     if (LocaleCompare(keyword,"<include") == 0)
 704       {
 705         /*
 706           Include element.
 707         */
 708         while (((*token != '/') && (*(token+1) != '>')) && (*q != '\0'))
 709         {
 710           (void) CopyMagickString(keyword,token,MaxTextExtent);
 711           GetMagickToken(q,&q,token);
 712           if (*token != '=')
 713             continue;
 714           GetMagickToken(q,&q,token);
 715           if (LocaleCompare(keyword,"file") == 0)
 716             {
 717               if (depth > 200)
 718                 (void) ThrowMagickException(exception,GetMagickModule(),
 719                   ConfigureError,"IncludeElementNestedTooDeeply","`%s'",token);
 720               else
 721                 {
 722                   char
 723                     path[MaxTextExtent],
 724                     *xml;
 725
 726                   GetPathComponent(filename,HeadPath,path);
 727                   if (*path != '\0')
 728                     (void) ConcatenateMagickString(path,DirectorySeparator,
 729                       MaxTextExtent);
 730                   if (*token == *DirectorySeparator)
 731                     (void) CopyMagickString(path,token,MaxTextExtent);
 732                   else
 733                     (void) ConcatenateMagickString(path,token,MaxTextExtent);
 734                   xml=FileToString(path,~0,exception);
 735                   if (xml != (char *) NULL)
 736                     {
 737                       status=LoadPolicyList(xml,path,depth+1,exception);
 738                       xml=(char *) RelinquishMagickMemory(xml);
 739                     }
 740                 }
 741             }
 742         }
 743         continue;
 744       }
 745     if (LocaleCompare(keyword,"<policy") == 0)
 746       {
 747         /*
 748           Policy element.
 749         */
 750         policy_info=(PolicyInfo *) AcquireAlignedMemory(1,sizeof(*policy_info));
 751         if (policy_info == (PolicyInfo *) NULL)
 752           ThrowFatalException(ResourceLimitFatalError,"MemoryAllocationFailed");
 753         (void) ResetMagickMemory(policy_info,0,sizeof(*policy_info));
 754         policy_info->path=ConstantString(filename);
 755         policy_info->exempt=MagickFalse;
 756         policy_info->signature=MagickSignature;
 757         continue;
 758       }
 759     if (policy_info == (PolicyInfo *) NULL)
 760       continue;
 761     if (LocaleCompare(keyword,"/>") == 0)
 762       {
 763         status=AppendValueToLinkedList(policy_list,policy_info);
 764         if (status == MagickFalse)
 765           (void) ThrowMagickException(exception,GetMagickModule(),
 766             ResourceLimitError,"MemoryAllocationFailed","`%s'",
 767             policy_info->name);
 768         policy_info=(PolicyInfo *) NULL;
 769       }
 770     GetMagickToken(q,(const char **) NULL,token);
 771     if (*token != '=')
 772       continue;
 773     GetMagickToken(q,&q,token);
 774     GetMagickToken(q,&q,token);
 775     switch (*keyword)
 776     {
 777       case 'D':
 778       case 'd':
 779       {
 780         if (LocaleCompare((char *) keyword,"domain") == 0)
 781           {
 782             policy_info->domain=(PolicyDomain) ParseMagickOption(
 783               MagickPolicyDomainOptions,MagickTrue,token);
 784             break;
 785           }
 786         break;
 787       }
 788       case 'N':
 789       case 'n':
 790       {
 791         if (LocaleCompare((char *) keyword,"name") == 0)
 792           {
 793             policy_info->name=ConstantString(token);
 794             break;
 795           }
 796         break;
 797       }
 798       case 'P':
 799       case 'p':
 800       {
 801         if (LocaleCompare((char *) keyword,"pattern") == 0)
 802           {
 803             policy_info->pattern=ConstantString(token);
 804             break;
 805           }
 806         break;
 807       }
 808       case 'R':
 809       case 'r':
 810       {
 811         if (LocaleCompare((char *) keyword,"rights") == 0)
 812           {
 813             policy_info->rights=(PolicyRights) ParseMagickOption(
 814               MagickPolicyRightsOptions,MagickTrue,token);
 815             break;
 816           }
 817         break;
 818       }
 819       case 'S':
 820       case 's':
 821       {
 822         if (LocaleCompare((char *) keyword,"stealth") == 0)
 823           {
 824             policy_info->stealth=IsMagickTrue(token);
 825             break;
 826           }
 827         break;
 828       }
 829       case 'V':
 830       case 'v':
 831       {
 832         if (LocaleCompare((char *) keyword,"value") == 0)
 833           {
 834             policy_info->value=ConstantString(token);
 835             break;
 836           }
 837         break;
 838       }
 839       default:
 840         break;
 841     }
 842   }
 843   token=(char *) RelinquishMagickMemory(token);
 844   return(status);
 845 }
 846 \f
 847 /*
 848 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 849 %                                                                             %
 850 %                                                                             %
 851 %                                                                             %
 852 %  L o a d P o l i c y L i s t s                                              %
 853 %                                                                             %
 854 %                                                                             %
 855 %                                                                             %
 856 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 857 %
 858 %  LoadPolicyList() loads one or more policy configuration file which provides a
 859 %  mapping between policy attributes and a policy name.
 860 %
 861 %  The format of the LoadPolicyLists method is:
 862 %
 863 %      MagickBooleanType LoadPolicyLists(const char *filename,
 864 %        ExceptionInfo *exception)
 865 %
 866 %  A description of each parameter follows:
 867 %
 868 %    o filename: the font file name.
 869 %
 870 %    o exception: return any errors or warnings in this structure.
 871 %
 872 */
 873 static MagickBooleanType LoadPolicyLists(const char *filename,
 874   ExceptionInfo *exception)
 875 {
 876   const StringInfo
 877     *option;
 878
 879   LinkedListInfo
 880     *options;
 881
 882   MagickStatusType
 883     status;
 884
 885   register long
 886     i;
 887
 888   /*
 889     Load built-in policy map.
 890   */
 891   status=MagickFalse;
 892   if (policy_list == (LinkedListInfo *) NULL)
 893     {
 894       policy_list=NewLinkedList(0);
 895       if (policy_list == (LinkedListInfo *) NULL)
 896         {
 897           ThrowFileException(exception,ResourceLimitError,
 898             "MemoryAllocationFailed",filename);
 899           return(MagickFalse);
 900         }
 901     }
 902   for (i=0; i < (long) (sizeof(PolicyMap)/sizeof(*PolicyMap)); i++)
 903   {
 904     PolicyInfo
 905       *policy_info;
 906
 907     register const PolicyMapInfo
 908       *p;
 909
 910     p=PolicyMap+i;
 911     policy_info=(PolicyInfo *) AcquireAlignedMemory(1,sizeof(*policy_info));
 912     if (policy_info == (PolicyInfo *) NULL)
 913       {
 914         (void) ThrowMagickException(exception,GetMagickModule(),
 915           ResourceLimitError,"MemoryAllocationFailed","`%s'",policy_info->name);
 916         continue;
 917       }
 918     (void) ResetMagickMemory(policy_info,0,sizeof(*policy_info));
 919     policy_info->path=(char *) "[built-in]";
 920     policy_info->domain=p->domain;
 921     policy_info->rights=p->rights;
 922     policy_info->name=(char *) p->name;
 923     policy_info->pattern=(char *) p->pattern;
 924     policy_info->value=(char *) p->value;
 925     policy_info->exempt=MagickTrue;
 926     policy_info->signature=MagickSignature;
 927     status=AppendValueToLinkedList(policy_list,policy_info);
 928     if (status == MagickFalse)
 929       (void) ThrowMagickException(exception,GetMagickModule(),
 930         ResourceLimitError,"MemoryAllocationFailed","`%s'",policy_info->name);
 931   }
 932   /*
 933     Load external policy map.
 934   */
 935   options=GetConfigureOptions(filename,exception);
 936   option=(const StringInfo *) GetNextValueInLinkedList(options);
 937   while (option != (const StringInfo *) NULL)
 938   {
 939     status|=LoadPolicyList((const char *) GetStringInfoDatum(option),
 940       GetStringInfoPath(option),0,exception);
 941     option=(const StringInfo *) GetNextValueInLinkedList(options);
 942   }
 943   options=DestroyConfigureOptions(options);
 944   return(status != 0 ? MagickTrue : MagickFalse);
 945 }
 946 \f
 947 /*
 948 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 949 %                                                                             %
 950 %                                                                             %
 951 %                                                                             %
 952 +   P o l i c y C o m p o n e n t G e n e s i s                               %
 953 %                                                                             %
 954 %                                                                             %
 955 %                                                                             %
 956 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 957 %
 958 %  PolicyComponentGenesis() instantiates the policy component.
 959 %
 960 %  The format of the PolicyComponentGenesis method is:
 961 %
 962 %      MagickBooleanType PolicyComponentGenesis(void)
 963 %
 964 */
 965 MagickExport MagickBooleanType PolicyComponentGenesis(void)
 966 {
 967   AcquireSemaphoreInfo(&policy_semaphore);
 968   return(MagickTrue);
 969 }
 970 \f
 971 /*
 972 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 973 %                                                                             %
 974 %                                                                             %
 975 %                                                                             %
 976 +   P o l i c y C o m p o n e n t T e r m i n u s                             %
 977 %                                                                             %
 978 %                                                                             %
 979 %                                                                             %
 980 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 981 %
 982 %  PolicyComponentTerminus() destroys the policy component.
 983 %
 984 %  The format of the PolicyComponentTerminus method is:
 985 %
 986 %      PolicyComponentTerminus(void)
 987 %
 988 */
 989
 990 static void *DestroyPolicyElement(void *policy_info)
 991 {
 992   register PolicyInfo
 993     *p;
 994
 995   p=(PolicyInfo *) policy_info;
 996   if (p->exempt == MagickFalse)
 997     {
 998       if (p->value != (char *) NULL)
 999         p->value=DestroyString(p->value);
1000       if (p->pattern != (char *) NULL)
1001         p->pattern=DestroyString(p->pattern);
1002       if (p->name != (char *) NULL)
1003         p->name=DestroyString(p->name);
1004       if (p->path != (char *) NULL)
1005         p->path=DestroyString(p->path);
1006     }
1007   p=(PolicyInfo *) RelinquishMagickMemory(p);
1008   return((void *) NULL);
1009 }
1010
1011 MagickExport void PolicyComponentTerminus(void)
1012 {
1013   if (policy_semaphore == (SemaphoreInfo *) NULL)
1014     AcquireSemaphoreInfo(&policy_semaphore);
1015   LockSemaphoreInfo(policy_semaphore);
1016   if (policy_list != (LinkedListInfo *) NULL)
1017     policy_list=DestroyLinkedList(policy_list,DestroyPolicyElement);
1018   instantiate_policy=MagickFalse;
1019   UnlockSemaphoreInfo(policy_semaphore);
1020   DestroySemaphoreInfo(&policy_semaphore);
1021 }