mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2025-05-16 08:52:55 +02:00
* Fixed buffer overflow bugs in the rd_export(7) rivcwebapi call. * Fixed buffer overflow bugs in the rd_listservices(7) rivcwebapi call. * Fixed buffer overflow bugs in the rd_trimaudio(7) rivcwebapi call.
285 lines
6.4 KiB
C
285 lines
6.4 KiB
C
/* rd_export.c
|
|
*
|
|
* Implementation of the Export Cart Rivendell Access Library
|
|
*
|
|
* (C) Copyright 2015 Todd Baker <bakert@rfa.org>
|
|
* (C) Copyright 2018 Fred Gleason <fredg@paravelsystems.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2 as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public
|
|
* License along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include <curl/curl.h>
|
|
#include "rd_common.h"
|
|
#include "rd_getuseragent.h"
|
|
#include "rd_export.h"
|
|
|
|
size_t write_data( void *ptr, size_t size, size_t nmemb, void *userdata)
|
|
{
|
|
size_t written;
|
|
|
|
written = fwrite(ptr,size,nmemb,(FILE *)userdata);
|
|
return written;
|
|
}
|
|
|
|
|
|
|
|
int RD_ExportCart( const char hostname[],
|
|
const char username[],
|
|
const char passwd[],
|
|
const char ticket[],
|
|
const unsigned cartnum,
|
|
const unsigned cutnum,
|
|
const int format,
|
|
const int channels,
|
|
const int sample_rate,
|
|
const int bit_rate,
|
|
const int quality,
|
|
const int start_point,
|
|
const int end_point,
|
|
const int normalization_level,
|
|
const int enable_metadata,
|
|
const char filename[],
|
|
const char user_agent[])
|
|
|
|
{
|
|
char url[1500];
|
|
CURL *curl=NULL;
|
|
FILE *fp;
|
|
long response_code;
|
|
char *fnameptr;
|
|
char checked_fname[BUFSIZ];
|
|
int i;
|
|
char errbuf[CURL_ERROR_SIZE];
|
|
CURLcode res;
|
|
char user_agent_string[255];
|
|
char cart_buffer[7];
|
|
char point[14];
|
|
struct curl_httppost *first=NULL;
|
|
struct curl_httppost *last=NULL;
|
|
|
|
/* Check File name */
|
|
memset(checked_fname,'\0',sizeof(checked_fname));
|
|
fnameptr=&checked_fname[0];
|
|
|
|
for (i = 0 ; i < strlen(filename) ; i++) {
|
|
if (filename[i]>32) {
|
|
strncpy(fnameptr,&filename[i],1);
|
|
fnameptr++;
|
|
}
|
|
}
|
|
|
|
//
|
|
// Generate POST Data
|
|
//
|
|
if((curl=curl_easy_init())==NULL) {
|
|
curl_easy_cleanup(curl);
|
|
return -1;
|
|
}
|
|
|
|
snprintf(url,1500,"http://%s/rd-bin/rdxport.cgi",hostname);
|
|
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"COMMAND",
|
|
CURLFORM_COPYCONTENTS,
|
|
"1",
|
|
CURLFORM_END);
|
|
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"LOGIN_NAME",
|
|
CURLFORM_COPYCONTENTS,
|
|
username,
|
|
CURLFORM_END);
|
|
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"PASSWORD",
|
|
CURLFORM_COPYCONTENTS,
|
|
passwd,
|
|
CURLFORM_END);
|
|
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"TICKET",
|
|
CURLFORM_COPYCONTENTS,
|
|
ticket,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%u",cartnum);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"CART_NUMBER",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%u",cutnum);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"CUT_NUMBER",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",format);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"FORMAT",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",channels);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"CHANNELS",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",sample_rate);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"SAMPLE_RATE",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",bit_rate);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"BIT_RATE",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",quality);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"QUALITY",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(point,13,"%d",start_point);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"START_POINT",
|
|
CURLFORM_COPYCONTENTS,
|
|
point,
|
|
CURLFORM_END);
|
|
|
|
snprintf(point,13,"%d",end_point);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"END_POINT",
|
|
CURLFORM_COPYCONTENTS,
|
|
point,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",normalization_level);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"NORMALIZATION_LEVEL",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
snprintf(cart_buffer,7,"%d",enable_metadata);
|
|
curl_formadd(&first,
|
|
&last,
|
|
CURLFORM_PTRNAME,
|
|
"ENABLE_METADATA",
|
|
CURLFORM_COPYCONTENTS,
|
|
cart_buffer,
|
|
CURLFORM_END);
|
|
|
|
/*
|
|
* Setup the CURL call
|
|
*/
|
|
fp = fopen(checked_fname,"wb");
|
|
if (!fp)
|
|
{
|
|
#ifdef RIVC_DEBUG_OUT
|
|
fprintf(stderr,"Error Opening Destination File\n");
|
|
#endif
|
|
curl_easy_cleanup(curl);
|
|
return -1;
|
|
}
|
|
|
|
// Check if User Agent Present otherwise set to default
|
|
if (strlen(user_agent)> 0){
|
|
curl_easy_setopt(curl, CURLOPT_USERAGENT,user_agent);
|
|
}
|
|
else
|
|
{
|
|
strcpy(user_agent_string, RD_GetUserAgent());
|
|
strcat(user_agent_string,VERSION);
|
|
curl_easy_setopt(curl, CURLOPT_USERAGENT,user_agent_string);
|
|
}
|
|
|
|
curl_easy_setopt(curl,CURLOPT_URL, url);
|
|
curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,write_data);
|
|
curl_easy_setopt(curl,CURLOPT_WRITEDATA,fp);
|
|
curl_easy_setopt(curl,CURLOPT_POST,1);
|
|
curl_easy_setopt(curl,CURLOPT_HTTPPOST,first);
|
|
curl_easy_setopt(curl,CURLOPT_VERBOSE,0);
|
|
curl_easy_setopt(curl,CURLOPT_ERRORBUFFER,errbuf);
|
|
|
|
res = curl_easy_perform(curl);
|
|
if(res != CURLE_OK) {
|
|
#ifdef RIVC_DEBUG_OUT
|
|
size_t len = strlen(errbuf);
|
|
fprintf(stderr, "\nlibcurl error: (%d)", res);
|
|
if (len)
|
|
fprintf(stderr, "%s%s", errbuf,
|
|
((errbuf[len-1] != '\n') ? "\n" : ""));
|
|
else
|
|
fprintf(stderr, "%s\n", curl_easy_strerror(res));
|
|
#endif
|
|
curl_easy_cleanup(curl);
|
|
fclose(fp);
|
|
return -1;
|
|
}
|
|
/* The response OK - so figure out if we got what we wanted.. */
|
|
|
|
curl_easy_getinfo(curl,CURLINFO_RESPONSE_CODE,&response_code);
|
|
curl_formfree(first);
|
|
curl_easy_cleanup(curl);
|
|
|
|
if (response_code > 199 && response_code < 300) { //Success
|
|
return 0;
|
|
}
|
|
else
|
|
return (int)response_code;
|
|
}
|