libmicrohttpd

commit 1ed1fe5e9ead8cda8c19f339f92a924c88fcbdcc
parent 1c58c968ced8a3401bd6c5006eb47a92a5998c02
Author: Evgeny Grin (Karlson2k) <k2k@narod.ru>
Date:   Thu,  5 May 2022 15:44:29 +0300

base64: added input checking and fixed compiler warnings

Diffstat:
M
src/microhttpd/base64.c
 | 
36
+++++++++++++++++++++++++++++-------
M
src/microhttpd/base64.h
 | 
4
+---

2 files changed, 30 insertions(+), 10 deletions(-)
diff --git a/src/microhttpd/base64.c b/src/microhttpd/base64.c
@@ -5,7 +5,20 @@
  * @file base64.c
  * @brief This code implements the BASE64 algorithm
  * @author Matthieu Speder
+ * @author Karlson2k (Evgeny Grin): fixes and improvements
  */
+#include "mhd_options.h"
+#include <stdio.h>
+#ifdef HAVE_STDLIB_H
+#include <stdlib.h>
+#endif /* HAVE_STDLIB_H */
+#include <string.h>
+#ifdef HAVE_UNISTD_H
+#include <unistd.h>
+#endif
+#ifdef HAVE_STDDEF_H
+#include <stddef.h>
+#endif /* HAVE_STDDEF_H */
 #include "base64.h"
 
 static const char base64_digits[] =
@@ -24,18 +37,19 @@ static const char base64_digits[] =
 
 
 char *
-BASE64Decode (const char*src)
+BASE64Decode (const char *src)
 {
   size_t in_len = strlen (src);
-  char*dest;
-  char*result;
+  unsigned char *dest;
+  char *result;
 
   if (in_len % 4)
   {
     /* Wrong base64 string length */
     return NULL;
   }
-  result = dest = malloc (in_len / 4 * 3 + 1);
+  dest = (unsigned char *) malloc (in_len / 4 * 3 + 1);
+  result = (char *) dest;
   if (NULL == result)
     return NULL; /* out of memory */
   while (*src)
@@ -44,13 +58,21 @@ BASE64Decode (const char*src)
     char b = base64_digits[(unsigned char) *(src++)];
     char c = base64_digits[(unsigned char) *(src++)];
     char d = base64_digits[(unsigned char) *(src++)];
-    *(dest++) = (a << 2) | ((b & 0x30) >> 4);
+    if (((char) -1 == a) || (0 == a) || (0 == b) || (0 == c) || (0 == d))
+    {
+      free (result);
+      return NULL;
+    }
+    *(dest++) = (unsigned char) (((unsigned char) a) << 2)
+                | (unsigned char) ((((unsigned char) b) & 0x30) >> 4);
     if (c == (char) -1)
       break;
-    *(dest++) = ((b & 0x0f) << 4) | ((c & 0x3c) >> 2);
+    *(dest++) = (unsigned char) ((((unsigned char) b) & 0x0f) << 4)
+                | (unsigned char) ((((unsigned char) c) & 0x3c) >> 2);
     if (d == (char) -1)
       break;
-    *(dest++) = ((c & 0x03) << 6) | d;
+    *(dest++) = (unsigned char) ((((unsigned char) c) & 0x03) << 6)
+                | ((unsigned char) d);
   }
   *dest = 0;
   return result;
diff --git a/src/microhttpd/base64.h b/src/microhttpd/base64.h
@@ -9,9 +9,7 @@
 #ifndef BASE64_H
 #define BASE64_H
 
-#include "platform.h"
-
 char *
-BASE64Decode (const char*src);
+BASE64Decode (const char *src);
 
 #endif /* !BASE64_H */