Lookups: dsearch subdir with leading "..". Bug 2994

[exim.git] / src / exim_monitor / em_queue.c

diff --git a/src/exim_monitor/em_queue.c b/src/exim_monitor/em_queue.c
index 2146fcb8ce420c66b87fd1e064e3bedeca8dd46c..c7c61a652b44c28ab8210b9310ca35141d390e5b 100644 (file)
--- a/src/exim_monitor/em_queue.c
+++ b/src/exim_monitor/em_queue.c
@@ -3,8 +3,9 @@
 *************************************************/
 
 /* Copyright (c) University of Cambridge 1995 - 2018 */
 *************************************************/
 
 /* Copyright (c) University of Cambridge 1995 - 2018 */

-/* Copyright (c) The Exim Maintainers 2020 */
+/* Copyright (c) The Exim Maintainers 2020 - 2023 */

 /* See the file NOTICE for conditions of use and distribution. */
 /* See the file NOTICE for conditions of use and distribution. */

+/* SPDX-License-Identifier: GPL-2.0-or-later */

 
 
 #include "em_hdr.h"
 
 
 #include "em_hdr.h"


@@ -65,18 +66,16 @@ address is lowercased to start with, unless it begins with
 "*", which it does for error messages. */
 
 dest_item *
 "*", which it does for error messages. */
 
 dest_item *

-find_dest(queue_item *q, uschar *name, int action, BOOL caseless)
+find_dest(queue_item * q, const uschar * name, int action, BOOL caseless)

 {
 {

-dest_item *dd;
-dest_item **d = &(q->destinations);
+dest_item * dd;
+dest_item ** d = &q->destinations;

 
 

-while (*d != NULL)
+while (*d)

   {
   if ((caseless? strcmpic(name,(*d)->address) : Ustrcmp(name,(*d)->address))
         == 0)
     {
   {
   if ((caseless? strcmpic(name,(*d)->address) : Ustrcmp(name,(*d)->address))
         == 0)
     {

-    dest_item *ddd;
-

     if (action != dest_remove) return *d;
     dd = *d;
     *d = dd->next;
     if (action != dest_remove) return *d;
     dd = *d;
     *d = dd->next;


@@ -84,14 +83,12 @@ while (*d != NULL)
 
     /* Unset any parent pointers that were to this address */
 
 
     /* Unset any parent pointers that were to this address */
 

-    for (ddd = q->destinations; ddd != NULL; ddd = ddd->next)
-      {
+    for (dest_item * ddd = q->destinations; ddd; ddd = ddd->next)

       if (ddd->parent == dd) ddd->parent = NULL;
       if (ddd->parent == dd) ddd->parent = NULL;

-      }

 
     return NULL;
     }
 
     return NULL;
     }

-  d = &((*d)->next);
+  d = &(*d)->next;

   }
 
 if (action != dest_add) return NULL;
   }
 
 if (action != dest_add) return NULL;


@@ -138,8 +135,8 @@ tree_node *
 acl_var_create(uschar *name)
 {
 tree_node *node, **root;
 acl_var_create(uschar *name)
 {
 tree_node *node, **root;

-root = (name[0] == 'c')? &acl_var_c : &acl_var_m;
-node = store_get(sizeof(tree_node) + Ustrlen(name), FALSE);
+root = name[0] == 'c' ? &acl_var_c : &acl_var_m;
+node = store_get(sizeof(tree_node) + Ustrlen(name), GET_UNTAINTED);

 Ustrcpy(node->name, name);
 node->data.ptr = NULL;
 (void)tree_insertnode(root, node);
 Ustrcpy(node->name, name);
 node->data.ptr = NULL;
 (void)tree_insertnode(root, node);


@@ -153,7 +150,7 @@ return node;
 *************************************************/
 
 static queue_item *
 *************************************************/
 
 static queue_item *

-set_up(uschar *name, int dir_char)
+set_up(uschar * name, int dir_char)

 {
 int i, rc, save_errno;
 struct stat statdata;
 {
 int i, rc, save_errno;
 struct stat statdata;


@@ -206,8 +203,9 @@ if it's there. */
 else
   {
   q->update_time = q->input_time = received_time.tv_sec;
 else
   {
   q->update_time = q->input_time = received_time.tv_sec;

-  if ((p = strstric(sender_address+1, qualify_domain, FALSE)) != NULL &&
-    *(--p) == '@') *p = 0;
+  /* deconst ok; strstric is actually safe */
+  if ((p = strstric(US sender_address+1, qualify_domain, FALSE)) != NULL &&
+    *--p == '@') *p = 0;

   }
 
 /* If we didn't read the whole header successfully, generate an error
   }
 
 /* If we didn't read the whole header successfully, generate an error


@@ -270,18 +268,19 @@ sender_address = NULL;
 snprintf(CS buffer, sizeof(buffer), "%s/input/%s/%s/%s-D",
   spool_directory, queue_name, message_subdir, name);
 if (Ustat(buffer, &statdata) == 0)
 snprintf(CS buffer, sizeof(buffer), "%s/input/%s/%s/%s-D",
   spool_directory, queue_name, message_subdir, name);
 if (Ustat(buffer, &statdata) == 0)

-  q->size = message_size + statdata.st_size - SPOOL_DATA_START_OFFSET + 1;
+  q->size = message_size + statdata.st_size - spool_data_start_offset(name) + 1;

 
 /* Scan and process the recipients list, skipping any that have already
 been delivered, and removing visible names. */
 
 
 /* Scan and process the recipients list, skipping any that have already
 been delivered, and removing visible names. */
 

-if (recipients_list != NULL)
+if (recipients_list)

   for (i = 0; i < recipients_count; i++)
     {
   for (i = 0; i < recipients_count; i++)
     {

-    uschar *r = recipients_list[i].address;
+    const uschar * r = recipients_list[i].address;

     if (tree_search(tree_nonrecipients, r) == NULL)
       {
     if (tree_search(tree_nonrecipients, r) == NULL)
       {

-      if ((p = strstric(r+1, qualify_domain, FALSE)) != NULL &&
+      /* deconst ok; strstric is actually safe */
+      if ((p = strstric(US r+1, qualify_domain, FALSE)) != NULL &&

         *(--p) == '@') *p = 0;
       (void)find_dest(q, r, dest_add, FALSE);
       }
         *(--p) == '@') *p = 0;
       (void)find_dest(q, r, dest_add, FALSE);
       }


@@ -662,13 +661,14 @@ if (recipients_list)
   for (i = 0; i < recipients_count; i++)
     {
     uschar * pp;
   for (i = 0; i < recipients_count; i++)
     {
     uschar * pp;

-    uschar * r = recipients_list[i].address;
+    const uschar * r = recipients_list[i].address;

     tree_node * node;
 
     if (!(node = tree_search(tree_nonrecipients, r)))
       node = tree_search(tree_nonrecipients, string_copylc(r));
 
     tree_node * node;
 
     if (!(node = tree_search(tree_nonrecipients, r)))
       node = tree_search(tree_nonrecipients, string_copylc(r));
 

-    if ((pp = strstric(r+1, qualify_domain, FALSE)) && *(--pp) == '@')
+    /* deconst ok; strstric is actually safe */
+    if ((pp = strstric(US r+1, qualify_domain, FALSE)) && *(--pp) == '@')

        *pp = 0;
     if (!node)
       (void)find_dest(p, r, dest_add, FALSE);
        *pp = 0;
     if (!node)
       (void)find_dest(p, r, dest_add, FALSE);