xref: /freebsd/contrib/xz/src/liblzma/common/alone_decoder.c (revision c4fde87a3236b500246d4fce76dbca2a3d64f73a)
1 // SPDX-License-Identifier: 0BSD
2 
3 ///////////////////////////////////////////////////////////////////////////////
4 //
5 /// \file       alone_decoder.c
6 /// \brief      Decoder for LZMA_Alone files
7 //
8 //  Author:     Lasse Collin
9 //
10 ///////////////////////////////////////////////////////////////////////////////
11 
12 #include "alone_decoder.h"
13 #include "lzma_decoder.h"
14 #include "lz_decoder.h"
15 
16 
17 typedef struct {
18 	lzma_next_coder next;
19 
20 	enum {
21 		SEQ_PROPERTIES,
22 		SEQ_DICTIONARY_SIZE,
23 		SEQ_UNCOMPRESSED_SIZE,
24 		SEQ_CODER_INIT,
25 		SEQ_CODE,
26 	} sequence;
27 
28 	/// If true, reject files that are unlikely to be .lzma files.
29 	/// If false, more non-.lzma files get accepted and will give
30 	/// LZMA_DATA_ERROR either immediately or after a few output bytes.
31 	bool picky;
32 
33 	/// Position in the header fields
34 	size_t pos;
35 
36 	/// Uncompressed size decoded from the header
37 	lzma_vli uncompressed_size;
38 
39 	/// Memory usage limit
40 	uint64_t memlimit;
41 
42 	/// Amount of memory actually needed (only an estimate)
43 	uint64_t memusage;
44 
45 	/// Options decoded from the header needed to initialize
46 	/// the LZMA decoder
47 	lzma_options_lzma options;
48 } lzma_alone_coder;
49 
50 
51 static lzma_ret
52 alone_decode(void *coder_ptr, const lzma_allocator *allocator,
53 		const uint8_t *restrict in, size_t *restrict in_pos,
54 		size_t in_size, uint8_t *restrict out,
55 		size_t *restrict out_pos, size_t out_size,
56 		lzma_action action)
57 {
58 	lzma_alone_coder *coder = coder_ptr;
59 
60 	while (*out_pos < out_size
61 			&& (coder->sequence == SEQ_CODE || *in_pos < in_size))
62 	switch (coder->sequence) {
63 	case SEQ_PROPERTIES:
64 		if (lzma_lzma_lclppb_decode(&coder->options, in[*in_pos]))
65 			return LZMA_FORMAT_ERROR;
66 
67 		coder->sequence = SEQ_DICTIONARY_SIZE;
68 		++*in_pos;
69 		break;
70 
71 	case SEQ_DICTIONARY_SIZE:
72 		coder->options.dict_size
73 				|= (size_t)(in[*in_pos]) << (coder->pos * 8);
74 
75 		if (++coder->pos == 4) {
76 			if (coder->picky && coder->options.dict_size
77 					!= UINT32_MAX) {
78 				// A hack to ditch tons of false positives:
79 				// We allow only dictionary sizes that are
80 				// 2^n or 2^n + 2^(n-1). LZMA_Alone created
81 				// only files with 2^n, but accepts any
82 				// dictionary size.
83 				uint32_t d = coder->options.dict_size - 1;
84 				d |= d >> 2;
85 				d |= d >> 3;
86 				d |= d >> 4;
87 				d |= d >> 8;
88 				d |= d >> 16;
89 				++d;
90 
91 				if (d != coder->options.dict_size)
92 					return LZMA_FORMAT_ERROR;
93 			}
94 
95 			coder->pos = 0;
96 			coder->sequence = SEQ_UNCOMPRESSED_SIZE;
97 		}
98 
99 		++*in_pos;
100 		break;
101 
102 	case SEQ_UNCOMPRESSED_SIZE:
103 		coder->uncompressed_size
104 				|= (lzma_vli)(in[*in_pos]) << (coder->pos * 8);
105 		++*in_pos;
106 		if (++coder->pos < 8)
107 			break;
108 
109 		// Another hack to ditch false positives: Assume that
110 		// if the uncompressed size is known, it must be less
111 		// than 256 GiB.
112 		//
113 		// FIXME? Without picky we allow > LZMA_VLI_MAX which doesn't
114 		// really matter in this specific situation (> LZMA_VLI_MAX is
115 		// safe in the LZMA decoder) but it's somewhat weird still.
116 		if (coder->picky
117 				&& coder->uncompressed_size != LZMA_VLI_UNKNOWN
118 				&& coder->uncompressed_size
119 					>= (LZMA_VLI_C(1) << 38))
120 			return LZMA_FORMAT_ERROR;
121 
122 		// Use LZMA_FILTER_LZMA1EXT features to specify the
123 		// uncompressed size and that the end marker is allowed
124 		// even when the uncompressed size is known. Both .lzma
125 		// header and LZMA1EXT use UINT64_MAX indicate that size
126 		// is unknown.
127 		coder->options.ext_flags = LZMA_LZMA1EXT_ALLOW_EOPM;
128 		lzma_set_ext_size(coder->options, coder->uncompressed_size);
129 
130 		// Calculate the memory usage so that it is ready
131 		// for SEQ_CODER_INIT. We know that lc/lp/pb are valid
132 		// so we can use the _nocheck variant.
133 		coder->memusage
134 			= lzma_lzma_decoder_memusage_nocheck(&coder->options)
135 				+ LZMA_MEMUSAGE_BASE;
136 
137 		coder->pos = 0;
138 		coder->sequence = SEQ_CODER_INIT;
139 		FALLTHROUGH;
140 
141 	case SEQ_CODER_INIT: {
142 		if (coder->memusage > coder->memlimit)
143 			return LZMA_MEMLIMIT_ERROR;
144 
145 		lzma_filter_info filters[2] = {
146 			{
147 				.id = LZMA_FILTER_LZMA1EXT,
148 				.init = &lzma_lzma_decoder_init,
149 				.options = &coder->options,
150 			}, {
151 				.init = NULL,
152 			}
153 		};
154 
155 		const lzma_ret ret = lzma_next_filter_init(&coder->next,
156 				allocator, filters);
157 		if (ret != LZMA_OK) {
158 			lzma_next_end(&coder->next, allocator);
159 			return ret;
160 		}
161 
162 		coder->sequence = SEQ_CODE;
163 		break;
164 	}
165 
166 	case SEQ_CODE: {
167 		return coder->next.code(coder->next.coder,
168 				allocator, in, in_pos, in_size,
169 				out, out_pos, out_size, action);
170 	}
171 
172 	default:
173 		return LZMA_PROG_ERROR;
174 	}
175 
176 	return LZMA_OK;
177 }
178 
179 
180 static void
181 alone_decoder_end(void *coder_ptr, const lzma_allocator *allocator)
182 {
183 	lzma_alone_coder *coder = coder_ptr;
184 	lzma_next_end(&coder->next, allocator);
185 	lzma_free(coder, allocator);
186 	return;
187 }
188 
189 
190 static lzma_ret
191 alone_decoder_memconfig(void *coder_ptr, uint64_t *memusage,
192 		uint64_t *old_memlimit, uint64_t new_memlimit)
193 {
194 	lzma_alone_coder *coder = coder_ptr;
195 
196 	*memusage = coder->memusage;
197 	*old_memlimit = coder->memlimit;
198 
199 	if (new_memlimit != 0) {
200 		if (new_memlimit < coder->memusage)
201 			return LZMA_MEMLIMIT_ERROR;
202 
203 		coder->memlimit = new_memlimit;
204 	}
205 
206 	return LZMA_OK;
207 }
208 
209 
210 extern lzma_ret
211 lzma_alone_decoder_init(lzma_next_coder *next, const lzma_allocator *allocator,
212 		uint64_t memlimit, bool picky)
213 {
214 	lzma_next_coder_init(&lzma_alone_decoder_init, next, allocator);
215 
216 	lzma_alone_coder *coder = next->coder;
217 
218 	if (coder == NULL) {
219 		coder = lzma_alloc(sizeof(lzma_alone_coder), allocator);
220 		if (coder == NULL)
221 			return LZMA_MEM_ERROR;
222 
223 		next->coder = coder;
224 		next->code = &alone_decode;
225 		next->end = &alone_decoder_end;
226 		next->memconfig = &alone_decoder_memconfig;
227 		coder->next = LZMA_NEXT_CODER_INIT;
228 	}
229 
230 	coder->sequence = SEQ_PROPERTIES;
231 	coder->picky = picky;
232 	coder->pos = 0;
233 	coder->options.dict_size = 0;
234 	coder->options.preset_dict = NULL;
235 	coder->options.preset_dict_size = 0;
236 	coder->uncompressed_size = 0;
237 	coder->memlimit = my_max(1, memlimit);
238 	coder->memusage = LZMA_MEMUSAGE_BASE;
239 
240 	return LZMA_OK;
241 }
242 
243 
244 extern LZMA_API(lzma_ret)
245 lzma_alone_decoder(lzma_stream *strm, uint64_t memlimit)
246 {
247 	lzma_next_strm_init(lzma_alone_decoder_init, strm, memlimit, false);
248 
249 	strm->internal->supported_actions[LZMA_RUN] = true;
250 	strm->internal->supported_actions[LZMA_FINISH] = true;
251 
252 	return LZMA_OK;
253 }
254