xref: /freebsd/lib/libc/gen/getcap.c (revision 830940567b49bb0c08dfaed40418999e76616909)
1 /*-
2  * Copyright (c) 1992, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * This code is derived from software contributed to Berkeley by
6  * Casey Leedom of Lawrence Livermore National Laboratory.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  * 4. Neither the name of the University nor the names of its contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  */
32 
33 #if defined(LIBC_SCCS) && !defined(lint)
34 static char sccsid[] = "@(#)getcap.c	8.3 (Berkeley) 3/25/94";
35 #endif /* LIBC_SCCS and not lint */
36 #include <sys/cdefs.h>
37 __FBSDID("$FreeBSD$");
38 
39 #include "namespace.h"
40 #include <sys/types.h>
41 
42 #include <ctype.h>
43 #include <errno.h>
44 #include <fcntl.h>
45 #include <limits.h>
46 #include <stdio.h>
47 #include <stdlib.h>
48 #include <string.h>
49 #include <unistd.h>
50 #include "un-namespace.h"
51 
52 #include <db.h>
53 
54 #define	BFRAG		1024
55 #define	BSIZE		1024
56 #define	ESC		('[' & 037)	/* ASCII ESC */
57 #define	MAX_RECURSION	32		/* maximum getent recursion */
58 #define	SFRAG		100		/* cgetstr mallocs in SFRAG chunks */
59 
60 #define RECOK	(char)0
61 #define TCERR	(char)1
62 #define	SHADOW	(char)2
63 
64 static size_t	 topreclen;	/* toprec length */
65 static char	*toprec;	/* Additional record specified by cgetset() */
66 static int	 gottoprec;	/* Flag indicating retrieval of toprecord */
67 
68 static int	cdbget(DB *, char **, const char *);
69 static int 	getent(char **, u_int *, char **, int, const char *, int, char *);
70 static int	nfcmp(char *, char *);
71 
72 /*
73  * Cgetset() allows the addition of a user specified buffer to be added
74  * to the database array, in effect "pushing" the buffer on top of the
75  * virtual database. 0 is returned on success, -1 on failure.
76  */
77 int
78 cgetset(const char *ent)
79 {
80 	if (ent == NULL) {
81 		if (toprec)
82 			free(toprec);
83                 toprec = NULL;
84                 topreclen = 0;
85                 return (0);
86         }
87         topreclen = strlen(ent);
88         if ((toprec = malloc (topreclen + 1)) == NULL) {
89 		errno = ENOMEM;
90                 return (-1);
91 	}
92 	gottoprec = 0;
93         (void)strcpy(toprec, ent);
94         return (0);
95 }
96 
97 /*
98  * Cgetcap searches the capability record buf for the capability cap with
99  * type `type'.  A pointer to the value of cap is returned on success, NULL
100  * if the requested capability couldn't be found.
101  *
102  * Specifying a type of ':' means that nothing should follow cap (:cap:).
103  * In this case a pointer to the terminating ':' or NUL will be returned if
104  * cap is found.
105  *
106  * If (cap, '@') or (cap, terminator, '@') is found before (cap, terminator)
107  * return NULL.
108  */
109 char *
110 cgetcap(char *buf, const char *cap, int type)
111 {
112 	char *bp;
113 	const char *cp;
114 
115 	bp = buf;
116 	for (;;) {
117 		/*
118 		 * Skip past the current capability field - it's either the
119 		 * name field if this is the first time through the loop, or
120 		 * the remainder of a field whose name failed to match cap.
121 		 */
122 		for (;;)
123 			if (*bp == '\0')
124 				return (NULL);
125 			else
126 				if (*bp++ == ':')
127 					break;
128 
129 		/*
130 		 * Try to match (cap, type) in buf.
131 		 */
132 		for (cp = cap; *cp == *bp && *bp != '\0'; cp++, bp++)
133 			continue;
134 		if (*cp != '\0')
135 			continue;
136 		if (*bp == '@')
137 			return (NULL);
138 		if (type == ':') {
139 			if (*bp != '\0' && *bp != ':')
140 				continue;
141 			return(bp);
142 		}
143 		if (*bp != type)
144 			continue;
145 		bp++;
146 		return (*bp == '@' ? NULL : bp);
147 	}
148 	/* NOTREACHED */
149 }
150 
151 /*
152  * Cgetent extracts the capability record name from the NULL terminated file
153  * array db_array and returns a pointer to a malloc'd copy of it in buf.
154  * Buf must be retained through all subsequent calls to cgetcap, cgetnum,
155  * cgetflag, and cgetstr, but may then be free'd.  0 is returned on success,
156  * -1 if the requested record couldn't be found, -2 if a system error was
157  * encountered (couldn't open/read a file, etc.), and -3 if a potential
158  * reference loop is detected.
159  */
160 int
161 cgetent(char **buf, char **db_array, const char *name)
162 {
163 	u_int dummy;
164 
165 	return (getent(buf, &dummy, db_array, -1, name, 0, NULL));
166 }
167 
168 /*
169  * Getent implements the functions of cgetent.  If fd is non-negative,
170  * *db_array has already been opened and fd is the open file descriptor.  We
171  * do this to save time and avoid using up file descriptors for tc=
172  * recursions.
173  *
174  * Getent returns the same success/failure codes as cgetent.  On success, a
175  * pointer to a malloc'ed capability record with all tc= capabilities fully
176  * expanded and its length (not including trailing ASCII NUL) are left in
177  * *cap and *len.
178  *
179  * Basic algorithm:
180  *	+ Allocate memory incrementally as needed in chunks of size BFRAG
181  *	  for capability buffer.
182  *	+ Recurse for each tc=name and interpolate result.  Stop when all
183  *	  names interpolated, a name can't be found, or depth exceeds
184  *	  MAX_RECURSION.
185  */
186 static int
187 getent(char **cap, u_int *len, char **db_array, int fd, const char *name,
188     int depth, char *nfield)
189 {
190 	DB *capdbp;
191 	char *r_end, *rp, **db_p;
192 	int myfd, eof, foundit, retval;
193 	char *record, *cbuf;
194 	int tc_not_resolved;
195 	char pbuf[_POSIX_PATH_MAX];
196 
197 	/*
198 	 * Return with ``loop detected'' error if we've recursed more than
199 	 * MAX_RECURSION times.
200 	 */
201 	if (depth > MAX_RECURSION)
202 		return (-3);
203 
204 	/*
205 	 * Check if we have a top record from cgetset().
206          */
207 	if (depth == 0 && toprec != NULL && cgetmatch(toprec, name) == 0) {
208 		if ((record = malloc (topreclen + BFRAG)) == NULL) {
209 			errno = ENOMEM;
210 			return (-2);
211 		}
212 		(void)strcpy(record, toprec);
213 		myfd = 0;
214 		db_p = db_array;
215 		rp = record + topreclen + 1;
216 		r_end = rp + BFRAG;
217 		goto tc_exp;
218 	}
219 	/*
220 	 * Allocate first chunk of memory.
221 	 */
222 	if ((record = malloc(BFRAG)) == NULL) {
223 		errno = ENOMEM;
224 		return (-2);
225 	}
226 	r_end = record + BFRAG;
227 	foundit = 0;
228 	/*
229 	 * Loop through database array until finding the record.
230 	 */
231 
232 	for (db_p = db_array; *db_p != NULL; db_p++) {
233 		eof = 0;
234 
235 		/*
236 		 * Open database if not already open.
237 		 */
238 
239 		if (fd >= 0) {
240 			(void)lseek(fd, (off_t)0, SEEK_SET);
241 			myfd = 0;
242 		} else {
243 			(void)snprintf(pbuf, sizeof(pbuf), "%s.db", *db_p);
244 			if ((capdbp = dbopen(pbuf, O_RDONLY, 0, DB_HASH, 0))
245 			     != NULL) {
246 				free(record);
247 				retval = cdbget(capdbp, &record, name);
248 				if (retval < 0) {
249 					/* no record available */
250 					(void)capdbp->close(capdbp);
251 					return (retval);
252 				}
253 				/* save the data; close frees it */
254 				cbuf = strdup(record);
255 				if (capdbp->close(capdbp) < 0) {
256 					free(cbuf);
257 					return (-2);
258 				}
259 				if (cbuf == NULL) {
260 					errno = ENOMEM;
261 					return (-2);
262 				}
263 				*len = strlen(cbuf);
264 				*cap = cbuf;
265 				return (retval);
266 			} else {
267 				fd = _open(*db_p, O_RDONLY, 0);
268 				if (fd < 0)
269 					continue;
270 				myfd = 1;
271 			}
272 		}
273 		/*
274 		 * Find the requested capability record ...
275 		 */
276 		{
277 		char buf[BUFSIZ];
278 		char *b_end, *bp;
279 		int c;
280 
281 		/*
282 		 * Loop invariants:
283 		 *	There is always room for one more character in record.
284 		 *	R_end always points just past end of record.
285 		 *	Rp always points just past last character in record.
286 		 *	B_end always points just past last character in buf.
287 		 *	Bp always points at next character in buf.
288 		 */
289 		b_end = buf;
290 		bp = buf;
291 		for (;;) {
292 
293 			/*
294 			 * Read in a line implementing (\, newline)
295 			 * line continuation.
296 			 */
297 			rp = record;
298 			for (;;) {
299 				if (bp >= b_end) {
300 					int n;
301 
302 					n = _read(fd, buf, sizeof(buf));
303 					if (n <= 0) {
304 						if (myfd)
305 							(void)_close(fd);
306 						if (n < 0) {
307 							free(record);
308 							return (-2);
309 						} else {
310 							fd = -1;
311 							eof = 1;
312 							break;
313 						}
314 					}
315 					b_end = buf+n;
316 					bp = buf;
317 				}
318 
319 				c = *bp++;
320 				if (c == '\n') {
321 					if (rp > record && *(rp-1) == '\\') {
322 						rp--;
323 						continue;
324 					} else
325 						break;
326 				}
327 				*rp++ = c;
328 
329 				/*
330 				 * Enforce loop invariant: if no room
331 				 * left in record buffer, try to get
332 				 * some more.
333 				 */
334 				if (rp >= r_end) {
335 					u_int pos;
336 					size_t newsize;
337 
338 					pos = rp - record;
339 					newsize = r_end - record + BFRAG;
340 					record = reallocf(record, newsize);
341 					if (record == NULL) {
342 						errno = ENOMEM;
343 						if (myfd)
344 							(void)_close(fd);
345 						return (-2);
346 					}
347 					r_end = record + newsize;
348 					rp = record + pos;
349 				}
350 			}
351 				/* loop invariant let's us do this */
352 			*rp++ = '\0';
353 
354 			/*
355 			 * If encountered eof check next file.
356 			 */
357 			if (eof)
358 				break;
359 
360 			/*
361 			 * Toss blank lines and comments.
362 			 */
363 			if (*record == '\0' || *record == '#')
364 				continue;
365 
366 			/*
367 			 * See if this is the record we want ...
368 			 */
369 			if (cgetmatch(record, name) == 0) {
370 				if (nfield == NULL || !nfcmp(nfield, record)) {
371 					foundit = 1;
372 					break;	/* found it! */
373 				}
374 			}
375 		}
376 	}
377 		if (foundit)
378 			break;
379 	}
380 
381 	if (!foundit) {
382 		free(record);
383 		return (-1);
384 	}
385 
386 	/*
387 	 * Got the capability record, but now we have to expand all tc=name
388 	 * references in it ...
389 	 */
390 tc_exp:	{
391 		char *newicap, *s;
392 		int newilen;
393 		u_int ilen;
394 		int diff, iret, tclen;
395 		char *icap, *scan, *tc, *tcstart, *tcend;
396 
397 		/*
398 		 * Loop invariants:
399 		 *	There is room for one more character in record.
400 		 *	R_end points just past end of record.
401 		 *	Rp points just past last character in record.
402 		 *	Scan points at remainder of record that needs to be
403 		 *	scanned for tc=name constructs.
404 		 */
405 		scan = record;
406 		tc_not_resolved = 0;
407 		for (;;) {
408 			if ((tc = cgetcap(scan, "tc", '=')) == NULL)
409 				break;
410 
411 			/*
412 			 * Find end of tc=name and stomp on the trailing `:'
413 			 * (if present) so we can use it to call ourselves.
414 			 */
415 			s = tc;
416 			for (;;)
417 				if (*s == '\0')
418 					break;
419 				else
420 					if (*s++ == ':') {
421 						*(s - 1) = '\0';
422 						break;
423 					}
424 			tcstart = tc - 3;
425 			tclen = s - tcstart;
426 			tcend = s;
427 
428 			iret = getent(&icap, &ilen, db_p, fd, tc, depth+1,
429 				      NULL);
430 			newicap = icap;		/* Put into a register. */
431 			newilen = ilen;
432 			if (iret != 0) {
433 				/* an error */
434 				if (iret < -1) {
435 					if (myfd)
436 						(void)_close(fd);
437 					free(record);
438 					return (iret);
439 				}
440 				if (iret == 1)
441 					tc_not_resolved = 1;
442 				/* couldn't resolve tc */
443 				if (iret == -1) {
444 					*(s - 1) = ':';
445 					scan = s - 1;
446 					tc_not_resolved = 1;
447 					continue;
448 
449 				}
450 			}
451 			/* not interested in name field of tc'ed record */
452 			s = newicap;
453 			for (;;)
454 				if (*s == '\0')
455 					break;
456 				else
457 					if (*s++ == ':')
458 						break;
459 			newilen -= s - newicap;
460 			newicap = s;
461 
462 			/* make sure interpolated record is `:'-terminated */
463 			s += newilen;
464 			if (*(s-1) != ':') {
465 				*s = ':';	/* overwrite NUL with : */
466 				newilen++;
467 			}
468 
469 			/*
470 			 * Make sure there's enough room to insert the
471 			 * new record.
472 			 */
473 			diff = newilen - tclen;
474 			if (diff >= r_end - rp) {
475 				u_int pos, tcpos, tcposend;
476 				size_t newsize;
477 
478 				pos = rp - record;
479 				newsize = r_end - record + diff + BFRAG;
480 				tcpos = tcstart - record;
481 				tcposend = tcend - record;
482 				record = reallocf(record, newsize);
483 				if (record == NULL) {
484 					errno = ENOMEM;
485 					if (myfd)
486 						(void)_close(fd);
487 					free(icap);
488 					return (-2);
489 				}
490 				r_end = record + newsize;
491 				rp = record + pos;
492 				tcstart = record + tcpos;
493 				tcend = record + tcposend;
494 			}
495 
496 			/*
497 			 * Insert tc'ed record into our record.
498 			 */
499 			s = tcstart + newilen;
500 			bcopy(tcend, s, rp - tcend);
501 			bcopy(newicap, tcstart, newilen);
502 			rp += diff;
503 			free(icap);
504 
505 			/*
506 			 * Start scan on `:' so next cgetcap works properly
507 			 * (cgetcap always skips first field).
508 			 */
509 			scan = s-1;
510 		}
511 
512 	}
513 	/*
514 	 * Close file (if we opened it), give back any extra memory, and
515 	 * return capability, length and success.
516 	 */
517 	if (myfd)
518 		(void)_close(fd);
519 	*len = rp - record - 1;	/* don't count NUL */
520 	if (r_end > rp)
521 		if ((record =
522 		     reallocf(record, (size_t)(rp - record))) == NULL) {
523 			errno = ENOMEM;
524 			return (-2);
525 		}
526 
527 	*cap = record;
528 	if (tc_not_resolved)
529 		return (1);
530 	return (0);
531 }
532 
533 static int
534 cdbget(DB *capdbp, char **bp, const char *name)
535 {
536 	DBT key, data;
537 	char *namebuf;
538 
539 	namebuf = strdup(name);
540 	if (namebuf == NULL)
541 		return (-2);
542 	key.data = namebuf;
543 	key.size = strlen(namebuf);
544 
545 	for (;;) {
546 		/* Get the reference. */
547 		switch(capdbp->get(capdbp, &key, &data, 0)) {
548 		case -1:
549 			free(namebuf);
550 			return (-2);
551 		case 1:
552 			free(namebuf);
553 			return (-1);
554 		}
555 
556 		/* If not an index to another record, leave. */
557 		if (((char *)data.data)[0] != SHADOW)
558 			break;
559 
560 		key.data = (char *)data.data + 1;
561 		key.size = data.size - 1;
562 	}
563 
564 	*bp = (char *)data.data + 1;
565 	free(namebuf);
566 	return (((char *)(data.data))[0] == TCERR ? 1 : 0);
567 }
568 
569 /*
570  * Cgetmatch will return 0 if name is one of the names of the capability
571  * record buf, -1 if not.
572  */
573 int
574 cgetmatch(const char *buf, const char *name)
575 {
576 	const char *np, *bp;
577 
578 	if (name == NULL || *name == '\0')
579 		return -1;
580 
581 	/*
582 	 * Start search at beginning of record.
583 	 */
584 	bp = buf;
585 	for (;;) {
586 		/*
587 		 * Try to match a record name.
588 		 */
589 		np = name;
590 		for (;;)
591 			if (*np == '\0')
592 				if (*bp == '|' || *bp == ':' || *bp == '\0')
593 					return (0);
594 				else
595 					break;
596 			else
597 				if (*bp++ != *np++)
598 					break;
599 
600 		/*
601 		 * Match failed, skip to next name in record.
602 		 */
603 		bp--;	/* a '|' or ':' may have stopped the match */
604 		for (;;)
605 			if (*bp == '\0' || *bp == ':')
606 				return (-1);	/* match failed totally */
607 			else
608 				if (*bp++ == '|')
609 					break;	/* found next name */
610 	}
611 }
612 
613 
614 
615 
616 
617 int
618 cgetfirst(char **buf, char **db_array)
619 {
620 	(void)cgetclose();
621 	return (cgetnext(buf, db_array));
622 }
623 
624 static FILE *pfp;
625 static int slash;
626 static char **dbp;
627 
628 int
629 cgetclose(void)
630 {
631 	if (pfp != NULL) {
632 		(void)fclose(pfp);
633 		pfp = NULL;
634 	}
635 	dbp = NULL;
636 	gottoprec = 0;
637 	slash = 0;
638 	return(0);
639 }
640 
641 /*
642  * Cgetnext() gets either the first or next entry in the logical database
643  * specified by db_array.  It returns 0 upon completion of the database, 1
644  * upon returning an entry with more remaining, and -1 if an error occurs.
645  */
646 int
647 cgetnext(char **bp, char **db_array)
648 {
649 	size_t len;
650 	int done, hadreaderr, i, savederrno, status;
651 	char *cp, *line, *rp, *np, buf[BSIZE], nbuf[BSIZE];
652 	u_int dummy;
653 
654 	if (dbp == NULL)
655 		dbp = db_array;
656 
657 	if (pfp == NULL && (pfp = fopen(*dbp, "r")) == NULL) {
658 		(void)cgetclose();
659 		return (-1);
660 	}
661 	for(;;) {
662 		if (toprec && !gottoprec) {
663 			gottoprec = 1;
664 			line = toprec;
665 		} else {
666 			line = fgetln(pfp, &len);
667 			if (line == NULL && pfp) {
668 				hadreaderr = ferror(pfp);
669 				if (hadreaderr)
670 					savederrno = errno;
671 				fclose(pfp);
672 				pfp = NULL;
673 				if (hadreaderr) {
674 					cgetclose();
675 					errno = savederrno;
676 					return (-1);
677 				} else {
678 					if (*++dbp == NULL) {
679 						(void)cgetclose();
680 						return (0);
681 					} else if ((pfp =
682 					    fopen(*dbp, "r")) == NULL) {
683 						(void)cgetclose();
684 						return (-1);
685 					} else
686 						continue;
687 				}
688 			} else
689 				line[len - 1] = '\0';
690 			if (len == 1) {
691 				slash = 0;
692 				continue;
693 			}
694 			if (isspace((unsigned char)*line) ||
695 			    *line == ':' || *line == '#' || slash) {
696 				if (line[len - 2] == '\\')
697 					slash = 1;
698 				else
699 					slash = 0;
700 				continue;
701 			}
702 			if (line[len - 2] == '\\')
703 				slash = 1;
704 			else
705 				slash = 0;
706 		}
707 
708 
709 		/*
710 		 * Line points to a name line.
711 		 */
712 		i = 0;
713 		done = 0;
714 		np = nbuf;
715 		for (;;) {
716 			for (cp = line; *cp != '\0'; cp++) {
717 				if (*cp == ':') {
718 					*np++ = ':';
719 					done = 1;
720 					break;
721 				}
722 				if (*cp == '\\')
723 					break;
724 				*np++ = *cp;
725 			}
726 			if (done) {
727 				*np = '\0';
728 				break;
729 			} else { /* name field extends beyond the line */
730 				line = fgetln(pfp, &len);
731 				if (line == NULL && pfp) {
732 					/* Name extends beyond the EOF! */
733 					hadreaderr = ferror(pfp);
734 					if (hadreaderr)
735 						savederrno = errno;
736 					fclose(pfp);
737 					pfp = NULL;
738 					if (hadreaderr) {
739 						cgetclose();
740 						errno = savederrno;
741 						return (-1);
742 					} else {
743 						cgetclose();
744 						return (-1);
745 					}
746 				} else
747 					line[len - 1] = '\0';
748 			}
749 		}
750 		rp = buf;
751 		for(cp = nbuf; *cp != '\0'; cp++)
752 			if (*cp == '|' || *cp == ':')
753 				break;
754 			else
755 				*rp++ = *cp;
756 
757 		*rp = '\0';
758 		/*
759 		 * XXX
760 		 * Last argument of getent here should be nbuf if we want true
761 		 * sequential access in the case of duplicates.
762 		 * With NULL, getent will return the first entry found
763 		 * rather than the duplicate entry record.  This is a
764 		 * matter of semantics that should be resolved.
765 		 */
766 		status = getent(bp, &dummy, db_array, -1, buf, 0, NULL);
767 		if (status == -2 || status == -3)
768 			(void)cgetclose();
769 
770 		return (status + 1);
771 	}
772 	/* NOTREACHED */
773 }
774 
775 /*
776  * Cgetstr retrieves the value of the string capability cap from the
777  * capability record pointed to by buf.  A pointer to a decoded, NUL
778  * terminated, malloc'd copy of the string is returned in the char *
779  * pointed to by str.  The length of the string not including the trailing
780  * NUL is returned on success, -1 if the requested string capability
781  * couldn't be found, -2 if a system error was encountered (storage
782  * allocation failure).
783  */
784 int
785 cgetstr(char *buf, const char *cap, char **str)
786 {
787 	u_int m_room;
788 	char *bp, *mp;
789 	int len;
790 	char *mem;
791 
792 	/*
793 	 * Find string capability cap
794 	 */
795 	bp = cgetcap(buf, cap, '=');
796 	if (bp == NULL)
797 		return (-1);
798 
799 	/*
800 	 * Conversion / storage allocation loop ...  Allocate memory in
801 	 * chunks SFRAG in size.
802 	 */
803 	if ((mem = malloc(SFRAG)) == NULL) {
804 		errno = ENOMEM;
805 		return (-2);	/* couldn't even allocate the first fragment */
806 	}
807 	m_room = SFRAG;
808 	mp = mem;
809 
810 	while (*bp != ':' && *bp != '\0') {
811 		/*
812 		 * Loop invariants:
813 		 *	There is always room for one more character in mem.
814 		 *	Mp always points just past last character in mem.
815 		 *	Bp always points at next character in buf.
816 		 */
817 		if (*bp == '^') {
818 			bp++;
819 			if (*bp == ':' || *bp == '\0')
820 				break;	/* drop unfinished escape */
821 			if (*bp == '?') {
822 				*mp++ = '\177';
823 				bp++;
824 			} else
825 				*mp++ = *bp++ & 037;
826 		} else if (*bp == '\\') {
827 			bp++;
828 			if (*bp == ':' || *bp == '\0')
829 				break;	/* drop unfinished escape */
830 			if ('0' <= *bp && *bp <= '7') {
831 				int n, i;
832 
833 				n = 0;
834 				i = 3;	/* maximum of three octal digits */
835 				do {
836 					n = n * 8 + (*bp++ - '0');
837 				} while (--i && '0' <= *bp && *bp <= '7');
838 				*mp++ = n;
839 			}
840 			else switch (*bp++) {
841 				case 'b': case 'B':
842 					*mp++ = '\b';
843 					break;
844 				case 't': case 'T':
845 					*mp++ = '\t';
846 					break;
847 				case 'n': case 'N':
848 					*mp++ = '\n';
849 					break;
850 				case 'f': case 'F':
851 					*mp++ = '\f';
852 					break;
853 				case 'r': case 'R':
854 					*mp++ = '\r';
855 					break;
856 				case 'e': case 'E':
857 					*mp++ = ESC;
858 					break;
859 				case 'c': case 'C':
860 					*mp++ = ':';
861 					break;
862 				default:
863 					/*
864 					 * Catches '\', '^', and
865 					 *  everything else.
866 					 */
867 					*mp++ = *(bp-1);
868 					break;
869 			}
870 		} else
871 			*mp++ = *bp++;
872 		m_room--;
873 
874 		/*
875 		 * Enforce loop invariant: if no room left in current
876 		 * buffer, try to get some more.
877 		 */
878 		if (m_room == 0) {
879 			size_t size = mp - mem;
880 
881 			if ((mem = reallocf(mem, size + SFRAG)) == NULL)
882 				return (-2);
883 			m_room = SFRAG;
884 			mp = mem + size;
885 		}
886 	}
887 	*mp++ = '\0';	/* loop invariant let's us do this */
888 	m_room--;
889 	len = mp - mem - 1;
890 
891 	/*
892 	 * Give back any extra memory and return value and success.
893 	 */
894 	if (m_room != 0)
895 		if ((mem = reallocf(mem, (size_t)(mp - mem))) == NULL)
896 			return (-2);
897 	*str = mem;
898 	return (len);
899 }
900 
901 /*
902  * Cgetustr retrieves the value of the string capability cap from the
903  * capability record pointed to by buf.  The difference between cgetustr()
904  * and cgetstr() is that cgetustr does not decode escapes but rather treats
905  * all characters literally.  A pointer to a  NUL terminated malloc'd
906  * copy of the string is returned in the char pointed to by str.  The
907  * length of the string not including the trailing NUL is returned on success,
908  * -1 if the requested string capability couldn't be found, -2 if a system
909  * error was encountered (storage allocation failure).
910  */
911 int
912 cgetustr(char *buf, const char *cap, char **str)
913 {
914 	u_int m_room;
915 	char *bp, *mp;
916 	int len;
917 	char *mem;
918 
919 	/*
920 	 * Find string capability cap
921 	 */
922 	if ((bp = cgetcap(buf, cap, '=')) == NULL)
923 		return (-1);
924 
925 	/*
926 	 * Conversion / storage allocation loop ...  Allocate memory in
927 	 * chunks SFRAG in size.
928 	 */
929 	if ((mem = malloc(SFRAG)) == NULL) {
930 		errno = ENOMEM;
931 		return (-2);	/* couldn't even allocate the first fragment */
932 	}
933 	m_room = SFRAG;
934 	mp = mem;
935 
936 	while (*bp != ':' && *bp != '\0') {
937 		/*
938 		 * Loop invariants:
939 		 *	There is always room for one more character in mem.
940 		 *	Mp always points just past last character in mem.
941 		 *	Bp always points at next character in buf.
942 		 */
943 		*mp++ = *bp++;
944 		m_room--;
945 
946 		/*
947 		 * Enforce loop invariant: if no room left in current
948 		 * buffer, try to get some more.
949 		 */
950 		if (m_room == 0) {
951 			size_t size = mp - mem;
952 
953 			if ((mem = reallocf(mem, size + SFRAG)) == NULL)
954 				return (-2);
955 			m_room = SFRAG;
956 			mp = mem + size;
957 		}
958 	}
959 	*mp++ = '\0';	/* loop invariant let's us do this */
960 	m_room--;
961 	len = mp - mem - 1;
962 
963 	/*
964 	 * Give back any extra memory and return value and success.
965 	 */
966 	if (m_room != 0)
967 		if ((mem = reallocf(mem, (size_t)(mp - mem))) == NULL)
968 			return (-2);
969 	*str = mem;
970 	return (len);
971 }
972 
973 /*
974  * Cgetnum retrieves the value of the numeric capability cap from the
975  * capability record pointed to by buf.  The numeric value is returned in
976  * the long pointed to by num.  0 is returned on success, -1 if the requested
977  * numeric capability couldn't be found.
978  */
979 int
980 cgetnum(char *buf, const char *cap, long *num)
981 {
982 	long n;
983 	int base, digit;
984 	char *bp;
985 
986 	/*
987 	 * Find numeric capability cap
988 	 */
989 	bp = cgetcap(buf, cap, '#');
990 	if (bp == NULL)
991 		return (-1);
992 
993 	/*
994 	 * Look at value and determine numeric base:
995 	 *	0x... or 0X...	hexadecimal,
996 	 * else	0...		octal,
997 	 * else			decimal.
998 	 */
999 	if (*bp == '0') {
1000 		bp++;
1001 		if (*bp == 'x' || *bp == 'X') {
1002 			bp++;
1003 			base = 16;
1004 		} else
1005 			base = 8;
1006 	} else
1007 		base = 10;
1008 
1009 	/*
1010 	 * Conversion loop ...
1011 	 */
1012 	n = 0;
1013 	for (;;) {
1014 		if ('0' <= *bp && *bp <= '9')
1015 			digit = *bp - '0';
1016 		else if ('a' <= *bp && *bp <= 'f')
1017 			digit = 10 + *bp - 'a';
1018 		else if ('A' <= *bp && *bp <= 'F')
1019 			digit = 10 + *bp - 'A';
1020 		else
1021 			break;
1022 
1023 		if (digit >= base)
1024 			break;
1025 
1026 		n = n * base + digit;
1027 		bp++;
1028 	}
1029 
1030 	/*
1031 	 * Return value and success.
1032 	 */
1033 	*num = n;
1034 	return (0);
1035 }
1036 
1037 
1038 /*
1039  * Compare name field of record.
1040  */
1041 static int
1042 nfcmp(char *nf, char *rec)
1043 {
1044 	char *cp, tmp;
1045 	int ret;
1046 
1047 	for (cp = rec; *cp != ':'; cp++)
1048 		;
1049 
1050 	tmp = *(cp + 1);
1051 	*(cp + 1) = '\0';
1052 	ret = strcmp(nf, rec);
1053 	*(cp + 1) = tmp;
1054 
1055 	return (ret);
1056 }
1057