You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111311231133114311531163117311831193120312131223123312431253126312731283129313031313132313331343135313631373138313931403141314231433144314531463147314831493150315131523153315431553156315731583159316031613162316331643165316631673168316931703171317231733174317531763177317831793180318131823183318431853186318731883189319031913192319331943195319631973198319932003201320232033204320532063207320832093210321132123213321432153216321732183219322032213222322332243225322632273228322932303231323232333234323532363237323832393240324132423243324432453246324732483249325032513252325332543255325632573258325932603261326232633264326532663267326832693270327132723273327432753276327732783279328032813282328332843285328632873288328932903291329232933294329532963297329832993300330133023303330433053306330733083309331033113312331333143315331633173318331933203321332233233324332533263327332833293330333133323333333433353336333733383339334033413342334333443345334633473348334933503351335233533354335533563357335833593360336133623363336433653366336733683369337033713372337333743375337633773378337933803381338233833384338533863387338833893390339133923393339433953396339733983399340034013402340334043405340634073408340934103411341234133414341534163417341834193420342134223423342434253426342734283429343034313432343334343435343634373438343934403441344234433444344534463447344834493450345134523453345434553456345734583459346034613462346334643465346634673468346934703471347234733474347534763477347834793480348134823483348434853486348734883489349034913492349334943495349634973498349935003501350235033504350535063507350835093510351135123513351435153516351735183519352035213522352335243525352635273528352935303531353235333534353535363537353835393540354135423543354435453546354735483549355035513552355335543555355635573558355935603561356235633564356535663567356835693570357135723573357435753576357735783579358035813582358335843585358635873588358935903591359235933594359535963597359835993600360136023603360436053606360736083609361036113612361336143615361636173618361936203621362236233624362536263627362836293630363136323633363436353636363736383639364036413642364336443645364636473648364936503651365236533654365536563657365836593660366136623663366436653666366736683669367036713672367336743675367636773678367936803681368236833684368536863687368836893690369136923693369436953696369736983699370037013702370337043705370637073708370937103711371237133714371537163717371837193720372137223723372437253726372737283729373037313732373337343735373637373738373937403741374237433744374537463747374837493750375137523753375437553756375737583759376037613762376337643765376637673768376937703771377237733774377537763777377837793780378137823783378437853786378737883789379037913792379337943795379637973798379938003801380238033804380538063807380838093810381138123813381438153816381738183819382038213822382338243825382638273828382938303831383238333834383538363837383838393840384138423843384438453846384738483849385038513852385338543855385638573858385938603861386238633864386538663867386838693870387138723873387438753876387738783879388038813882388338843885388638873888388938903891389238933894389538963897389838993900390139023903390439053906390739083909391039113912391339143915391639173918391939203921392239233924392539263927392839293930393139323933393439353936393739383939394039413942394339443945394639473948394939503951395239533954395539563957395839593960396139623963396439653966396739683969397039713972397339743975397639773978397939803981398239833984398539863987398839893990399139923993399439953996399739983999400040014002400340044005400640074008400940104011401240134014401540164017401840194020402140224023402440254026402740284029403040314032403340344035403640374038403940404041404240434044404540464047404840494050405140524053405440554056405740584059406040614062406340644065406640674068406940704071407240734074407540764077407840794080408140824083408440854086408740884089409040914092409340944095409640974098409941004101410241034104410541064107410841094110411141124113411441154116411741184119412041214122412341244125412641274128412941304131413241334134413541364137413841394140414141424143414441454146414741484149415041514152415341544155415641574158415941604161416241634164416541664167416841694170417141724173417441754176417741784179418041814182418341844185418641874188418941904191419241934194419541964197419841994200420142024203420442054206420742084209421042114212421342144215421642174218421942204221422242234224422542264227422842294230423142324233423442354236423742384239424042414242424342444245424642474248424942504251425242534254
  1. /*-
  2. * Copyright 2016 Vsevolod Stakhov
  3. *
  4. * Licensed under the Apache License, Version 2.0 (the "License");
  5. * you may not use this file except in compliance with the License.
  6. * You may obtain a copy of the License at
  7. *
  8. * http://www.apache.org/licenses/LICENSE-2.0
  9. *
  10. * Unless required by applicable law or agreed to in writing, software
  11. * distributed under the License is distributed on an "AS IS" BASIS,
  12. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13. * See the License for the specific language governing permissions and
  14. * limitations under the License.
  15. */
  16. /*
  17. * Copyright (C) 2002-2015 Igor Sysoev
  18. * Copyright (C) 2011-2015 Nginx, Inc.
  19. * All rights reserved.
  20. *
  21. * Redistribution and use in source and binary forms, with or without
  22. * modification, are permitted provided that the following conditions are met:
  23. * * Redistributions of source code must retain the above copyright
  24. * notice, this list of conditions and the following disclaimer.
  25. * * Redistributions in binary form must reproduce the above copyright
  26. * notice, this list of conditions and the following disclaimer in the
  27. * documentation and/or other materials provided with the distribution.
  28. *
  29. * THIS SOFTWARE IS PROVIDED BY AUTHOR ''AS IS'' AND ANY
  30. * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
  31. * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  32. * DISCLAIMED. IN NO EVENT SHALL AUTHOR BE LIABLE FOR ANY
  33. * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
  34. * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  35. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
  36. * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  37. * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  38. * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  39. */
  40. #include "config.h"
  41. #include "url.h"
  42. #include "util.h"
  43. #include "rspamd.h"
  44. #include "message.h"
  45. #include "multipattern.h"
  46. #include "contrib/uthash/utlist.h"
  47. #include "contrib/http-parser/http_parser.h"
  48. #include <unicode/utf8.h>
  49. #include <unicode/uchar.h>
  50. #include <unicode/usprep.h>
  51. #include <unicode/ucnv.h>
  52. typedef struct url_match_s {
  53. const gchar *m_begin;
  54. gsize m_len;
  55. const gchar *pattern;
  56. const gchar *prefix;
  57. const gchar *newline_pos;
  58. const gchar *prev_newline_pos;
  59. gboolean add_prefix;
  60. gchar st;
  61. } url_match_t;
  62. #define URL_FLAG_NOHTML (1u << 0u)
  63. #define URL_FLAG_TLD_MATCH (1u << 1u)
  64. #define URL_FLAG_STAR_MATCH (1u << 2u)
  65. #define URL_FLAG_REGEXP (1u << 3u)
  66. struct url_callback_data;
  67. static const struct {
  68. enum rspamd_url_protocol proto;
  69. const gchar *name;
  70. gsize len;
  71. } rspamd_url_protocols[] = {
  72. {
  73. .proto = PROTOCOL_FILE,
  74. .name = "file",
  75. .len = 4
  76. },
  77. {
  78. .proto = PROTOCOL_FTP,
  79. .name = "ftp",
  80. .len = 3
  81. },
  82. {
  83. .proto = PROTOCOL_HTTP,
  84. .name = "http",
  85. .len = 4
  86. },
  87. {
  88. .proto = PROTOCOL_HTTPS,
  89. .name = "https",
  90. .len = 5
  91. },
  92. {
  93. .proto = PROTOCOL_MAILTO,
  94. .name = "mailto",
  95. .len = 6
  96. },
  97. {
  98. .proto = PROTOCOL_TELEPHONE,
  99. .name = "tel",
  100. .len = 3
  101. },
  102. {
  103. .proto = PROTOCOL_TELEPHONE,
  104. .name = "callto",
  105. .len = 3
  106. },
  107. {
  108. .proto = PROTOCOL_UNKNOWN,
  109. .name = NULL,
  110. .len = 0
  111. }
  112. };
  113. struct url_matcher {
  114. const gchar *pattern;
  115. const gchar *prefix;
  116. gboolean (*start) (struct url_callback_data *cb,
  117. const gchar *pos,
  118. url_match_t *match);
  119. gboolean (*end) (struct url_callback_data *cb,
  120. const gchar *pos,
  121. url_match_t *match);
  122. gint flags;
  123. };
  124. static gboolean url_file_start (struct url_callback_data *cb,
  125. const gchar *pos,
  126. url_match_t *match);
  127. static gboolean url_file_end (struct url_callback_data *cb,
  128. const gchar *pos,
  129. url_match_t *match);
  130. static gboolean url_web_start (struct url_callback_data *cb,
  131. const gchar *pos,
  132. url_match_t *match);
  133. static gboolean url_web_end (struct url_callback_data *cb,
  134. const gchar *pos,
  135. url_match_t *match);
  136. static gboolean url_tld_start (struct url_callback_data *cb,
  137. const gchar *pos,
  138. url_match_t *match);
  139. static gboolean url_tld_end (struct url_callback_data *cb,
  140. const gchar *pos,
  141. url_match_t *match);
  142. static gboolean url_email_start (struct url_callback_data *cb,
  143. const gchar *pos,
  144. url_match_t *match);
  145. static gboolean url_email_end (struct url_callback_data *cb,
  146. const gchar *pos,
  147. url_match_t *match);
  148. static gboolean url_tel_start (struct url_callback_data *cb,
  149. const gchar *pos,
  150. url_match_t *match);
  151. static gboolean url_tel_end (struct url_callback_data *cb,
  152. const gchar *pos,
  153. url_match_t *match);
  154. struct url_matcher static_matchers[] = {
  155. /* Common prefixes */
  156. {"file://", "", url_file_start, url_file_end,
  157. 0},
  158. {"file:\\\\", "", url_file_start, url_file_end,
  159. 0},
  160. {"ftp://", "", url_web_start, url_web_end,
  161. 0},
  162. {"ftp:\\\\", "", url_web_start, url_web_end,
  163. 0},
  164. {"sftp://", "", url_web_start, url_web_end,
  165. 0},
  166. {"http:", "", url_web_start, url_web_end,
  167. 0},
  168. {"https:", "", url_web_start, url_web_end,
  169. 0},
  170. {"news://", "", url_web_start, url_web_end,
  171. 0},
  172. {"nntp://", "", url_web_start, url_web_end,
  173. 0},
  174. {"telnet://", "", url_web_start, url_web_end,
  175. 0},
  176. {"tel:", "", url_tel_start, url_tel_end,
  177. 0},
  178. {"webcal://", "", url_web_start, url_web_end,
  179. 0},
  180. {"mailto:", "", url_email_start, url_email_end,
  181. 0},
  182. {"callto:", "", url_tel_start, url_tel_end,
  183. 0},
  184. {"h323:", "", url_web_start, url_web_end,
  185. 0},
  186. {"sip:", "", url_web_start, url_web_end,
  187. 0},
  188. {"www.", "http://", url_web_start, url_web_end,
  189. 0},
  190. {"ftp.", "ftp://", url_web_start, url_web_end,
  191. 0},
  192. /* Likely emails */
  193. {"@", "mailto://", url_email_start, url_email_end,
  194. 0}
  195. };
  196. struct rspamd_url_flag_name {
  197. const gchar *name;
  198. gint flag;
  199. gint hash;
  200. } url_flag_names[] = {
  201. {"phished", RSPAMD_URL_FLAG_PHISHED, -1},
  202. {"numeric", RSPAMD_URL_FLAG_NUMERIC, -1},
  203. {"obscured", RSPAMD_URL_FLAG_OBSCURED, -1},
  204. {"redirected", RSPAMD_URL_FLAG_REDIRECTED, -1},
  205. {"html_displayed", RSPAMD_URL_FLAG_HTML_DISPLAYED, -1},
  206. {"text", RSPAMD_URL_FLAG_FROM_TEXT, -1},
  207. {"subject", RSPAMD_URL_FLAG_SUBJECT, -1},
  208. {"host_encoded", RSPAMD_URL_FLAG_HOSTENCODED, -1},
  209. {"schema_encoded", RSPAMD_URL_FLAG_SCHEMAENCODED, -1},
  210. {"path_encoded", RSPAMD_URL_FLAG_PATHENCODED, -1},
  211. {"query_encoded", RSPAMD_URL_FLAG_QUERYENCODED, -1},
  212. {"missing_slahes", RSPAMD_URL_FLAG_MISSINGSLASHES, -1},
  213. {"idn", RSPAMD_URL_FLAG_IDN, -1},
  214. {"has_port", RSPAMD_URL_FLAG_HAS_PORT, -1},
  215. {"has_user", RSPAMD_URL_FLAG_HAS_USER, -1},
  216. {"schemaless", RSPAMD_URL_FLAG_SCHEMALESS, -1},
  217. {"unnormalised", RSPAMD_URL_FLAG_UNNORMALISED, -1},
  218. {"zw_spaces", RSPAMD_URL_FLAG_ZW_SPACES, -1},
  219. {"url_displayed", RSPAMD_URL_FLAG_DISPLAY_URL, -1},
  220. {"image", RSPAMD_URL_FLAG_IMAGE, -1},
  221. {"query", RSPAMD_URL_FLAG_QUERY, -1},
  222. {"content", RSPAMD_URL_FLAG_CONTENT, -1},
  223. {"no_tld", RSPAMD_URL_FLAG_NO_TLD, -1},
  224. };
  225. static inline khint_t rspamd_url_hash (struct rspamd_url *u);
  226. static inline khint_t rspamd_url_host_hash (struct rspamd_url * u);
  227. static inline bool rspamd_urls_cmp (struct rspamd_url *a, struct rspamd_url *b);
  228. static inline bool rspamd_urls_host_cmp (struct rspamd_url *a, struct rspamd_url *b);
  229. /* Hash table implementation */
  230. __KHASH_IMPL (rspamd_url_hash, kh_inline,struct rspamd_url *, char, false,
  231. rspamd_url_hash, rspamd_urls_cmp);
  232. __KHASH_IMPL (rspamd_url_host_hash, kh_inline,struct rspamd_url *, char, false,
  233. rspamd_url_host_hash, rspamd_urls_host_cmp);
  234. struct url_callback_data {
  235. const gchar *begin;
  236. gchar *url_str;
  237. rspamd_mempool_t *pool;
  238. gint len;
  239. enum rspamd_url_find_type how;
  240. gboolean prefix_added;
  241. guint newline_idx;
  242. GArray *matchers;
  243. GPtrArray *newlines;
  244. const gchar *start;
  245. const gchar *fin;
  246. const gchar *end;
  247. const gchar *last_at;
  248. url_insert_function func;
  249. void *funcd;
  250. };
  251. struct url_match_scanner {
  252. GArray *matchers_full;
  253. GArray *matchers_strict;
  254. struct rspamd_multipattern *search_trie_full;
  255. struct rspamd_multipattern *search_trie_strict;
  256. };
  257. struct url_match_scanner *url_scanner = NULL;
  258. enum {
  259. IS_LWSP = (1 << 0),
  260. IS_DOMAIN = (1 << 1),
  261. IS_URLSAFE = (1 << 2),
  262. IS_MAILSAFE = (1 << 3),
  263. IS_DOMAIN_END = (1 << 4)
  264. };
  265. static const unsigned int url_scanner_table[256] = {
  266. 0, 0, 0, 0, 0, 0, 0, 0, 0, IS_LWSP, IS_LWSP, IS_LWSP, IS_LWSP, IS_LWSP, 0, 0,
  267. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, IS_LWSP /* */,
  268. IS_MAILSAFE /* ! */, IS_URLSAFE|IS_DOMAIN_END|IS_MAILSAFE /* " */,
  269. IS_MAILSAFE /* # */, IS_MAILSAFE /* $ */,
  270. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* % */, 0 /* & */, IS_MAILSAFE /* ' */,
  271. 0 /* ( */, 0 /* ) */, IS_MAILSAFE /* * */,
  272. IS_MAILSAFE /* + */, IS_MAILSAFE /* , */,
  273. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* - */,
  274. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* . */, IS_DOMAIN_END|IS_MAILSAFE /* / */,
  275. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 0 */,
  276. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 1 */,
  277. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 2 */,
  278. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 3 */,
  279. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 4 */,
  280. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 5 */,
  281. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 6 */,
  282. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 7 */,
  283. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 8 */,
  284. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* 9 */, IS_DOMAIN_END /* : */,
  285. 0 /* ; */, IS_URLSAFE|IS_DOMAIN_END /* < */, 0 /* = */,
  286. IS_URLSAFE|IS_DOMAIN_END /* > */, IS_DOMAIN_END /* ? */, 0 /* @ */,
  287. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* A */,
  288. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* B */,
  289. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* C */,
  290. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* D */,
  291. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* E */,
  292. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* F */,
  293. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* G */,
  294. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* H */,
  295. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* I */,
  296. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* J */,
  297. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* K */,
  298. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* L */,
  299. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* M */,
  300. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* N */,
  301. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* O */,
  302. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* P */,
  303. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* Q */,
  304. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* R */,
  305. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* S */,
  306. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* T */,
  307. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* U */,
  308. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* V */,
  309. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* W */,
  310. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* X */,
  311. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* Y */,
  312. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* Z */, 0 /* [ */,
  313. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* \ */, 0 /* ] */,
  314. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* ^ */,
  315. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* _ */,
  316. IS_URLSAFE|IS_DOMAIN_END /* ` */,
  317. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* a */,
  318. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* b */,
  319. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* c */,
  320. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* d */,
  321. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* e */,
  322. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* f */,
  323. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* g */,
  324. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* h */,
  325. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* i */,
  326. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* j */,
  327. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* k */,
  328. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* l */,
  329. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* m */,
  330. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* n */,
  331. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* o */,
  332. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* p */,
  333. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* q */,
  334. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* r */,
  335. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* s */,
  336. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* t */,
  337. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* u */,
  338. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* v */,
  339. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* w */,
  340. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* x */,
  341. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* y */,
  342. IS_URLSAFE|IS_DOMAIN|IS_MAILSAFE /* z */,
  343. IS_URLSAFE|IS_DOMAIN_END|IS_MAILSAFE /* { */,
  344. IS_URLSAFE|IS_DOMAIN_END|IS_MAILSAFE /* | */,
  345. IS_URLSAFE|IS_DOMAIN_END|IS_MAILSAFE /* } */,
  346. IS_URLSAFE|IS_DOMAIN_END|IS_MAILSAFE /* ~ */, 0, IS_URLSAFE|IS_DOMAIN,
  347. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  348. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  349. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  350. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  351. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  352. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  353. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  354. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  355. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  356. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  357. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  358. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  359. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  360. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  361. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  362. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  363. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  364. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  365. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  366. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  367. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  368. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  369. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  370. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  371. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  372. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  373. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  374. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  375. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  376. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  377. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  378. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  379. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  380. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  381. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  382. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  383. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  384. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  385. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  386. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  387. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  388. IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN, IS_URLSAFE|IS_DOMAIN,
  389. IS_URLSAFE|IS_DOMAIN
  390. };
  391. #define is_lwsp(x) ((url_scanner_table[(guchar)(x)] & IS_LWSP) != 0)
  392. #define is_mailsafe(x) ((url_scanner_table[(guchar)(x)] & (IS_MAILSAFE)) != 0)
  393. #define is_domain(x) ((url_scanner_table[(guchar)(x)] & IS_DOMAIN) != 0)
  394. #define is_urlsafe(x) ((url_scanner_table[(guchar)(x)] & (IS_URLSAFE)) != 0)
  395. const gchar *
  396. rspamd_url_strerror (int err)
  397. {
  398. switch (err) {
  399. case URI_ERRNO_OK:
  400. return "Parsing went well";
  401. case URI_ERRNO_EMPTY:
  402. return "The URI string was empty";
  403. case URI_ERRNO_INVALID_PROTOCOL:
  404. return "No protocol was found";
  405. case URI_ERRNO_BAD_FORMAT:
  406. return "Bad URL format";
  407. case URI_ERRNO_BAD_ENCODING:
  408. return "Invalid symbols encoded";
  409. case URI_ERRNO_INVALID_PORT:
  410. return "Port number is bad";
  411. case URI_ERRNO_TLD_MISSING:
  412. return "TLD part is not detected";
  413. case URI_ERRNO_HOST_MISSING:
  414. return "Host part is missing";
  415. }
  416. return NULL;
  417. }
  418. static gboolean
  419. rspamd_url_parse_tld_file (const gchar *fname,
  420. struct url_match_scanner *scanner)
  421. {
  422. FILE *f;
  423. struct url_matcher m;
  424. gchar *linebuf = NULL, *p;
  425. gsize buflen = 0;
  426. gssize r;
  427. gint flags;
  428. f = fopen (fname, "r");
  429. if (f == NULL) {
  430. msg_err ("cannot open TLD file %s: %s", fname, strerror (errno));
  431. return FALSE;
  432. }
  433. m.end = url_tld_end;
  434. m.start = url_tld_start;
  435. m.prefix = "http://";
  436. while ((r = getline (&linebuf, &buflen, f)) > 0) {
  437. if (linebuf[0] == '/' || g_ascii_isspace (linebuf[0])) {
  438. /* Skip comment or empty line */
  439. continue;
  440. }
  441. g_strchomp (linebuf);
  442. /* TODO: add support for ! patterns */
  443. if (linebuf[0] == '!') {
  444. msg_debug ("skip '!' patterns from parsing for now: %s", linebuf);
  445. continue;
  446. }
  447. flags = URL_FLAG_NOHTML | URL_FLAG_TLD_MATCH;
  448. if (linebuf[0] == '*') {
  449. flags |= URL_FLAG_STAR_MATCH;
  450. p = strchr (linebuf, '.');
  451. if (p == NULL) {
  452. msg_err ("got bad star line, skip it: %s", linebuf);
  453. continue;
  454. }
  455. p++;
  456. }
  457. else {
  458. p = linebuf;
  459. }
  460. m.flags = flags;
  461. rspamd_multipattern_add_pattern (url_scanner->search_trie_full, p,
  462. RSPAMD_MULTIPATTERN_TLD|RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8);
  463. m.pattern = rspamd_multipattern_get_pattern (url_scanner->search_trie_full,
  464. rspamd_multipattern_get_npatterns (url_scanner->search_trie_full) - 1);
  465. g_array_append_val (url_scanner->matchers_full, m);
  466. }
  467. free (linebuf);
  468. fclose (f);
  469. return TRUE;
  470. }
  471. static void
  472. rspamd_url_add_static_matchers (struct url_match_scanner *sc)
  473. {
  474. gint n = G_N_ELEMENTS (static_matchers), i;
  475. for (i = 0; i < n; i++) {
  476. if (static_matchers[i].flags & URL_FLAG_REGEXP) {
  477. rspamd_multipattern_add_pattern (url_scanner->search_trie_strict,
  478. static_matchers[i].pattern,
  479. RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8|
  480. RSPAMD_MULTIPATTERN_RE);
  481. }
  482. else {
  483. rspamd_multipattern_add_pattern (url_scanner->search_trie_strict,
  484. static_matchers[i].pattern,
  485. RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8);
  486. }
  487. }
  488. g_array_append_vals (sc->matchers_strict, static_matchers, n);
  489. if (sc->matchers_full) {
  490. for (i = 0; i < n; i++) {
  491. if (static_matchers[i].flags & URL_FLAG_REGEXP) {
  492. rspamd_multipattern_add_pattern (url_scanner->search_trie_full,
  493. static_matchers[i].pattern,
  494. RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8|
  495. RSPAMD_MULTIPATTERN_RE);
  496. }
  497. else {
  498. rspamd_multipattern_add_pattern (url_scanner->search_trie_full,
  499. static_matchers[i].pattern,
  500. RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8);
  501. }
  502. }
  503. g_array_append_vals (sc->matchers_full, static_matchers, n);
  504. }
  505. }
  506. void
  507. rspamd_url_deinit (void)
  508. {
  509. if (url_scanner != NULL) {
  510. if (url_scanner->search_trie_full) {
  511. rspamd_multipattern_destroy (url_scanner->search_trie_full);
  512. g_array_free (url_scanner->matchers_full, TRUE);
  513. }
  514. rspamd_multipattern_destroy (url_scanner->search_trie_strict);
  515. g_array_free (url_scanner->matchers_strict, TRUE);
  516. g_free (url_scanner);
  517. url_scanner = NULL;
  518. }
  519. }
  520. void
  521. rspamd_url_init (const gchar *tld_file)
  522. {
  523. GError *err = NULL;
  524. gboolean ret = TRUE;
  525. if (url_scanner != NULL) {
  526. rspamd_url_deinit ();
  527. }
  528. url_scanner = g_malloc (sizeof (struct url_match_scanner));
  529. url_scanner->matchers_strict = g_array_sized_new (FALSE, TRUE,
  530. sizeof (struct url_matcher), G_N_ELEMENTS (static_matchers));
  531. url_scanner->search_trie_strict = rspamd_multipattern_create_sized (
  532. G_N_ELEMENTS (static_matchers),
  533. RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8);
  534. if (tld_file) {
  535. /* Reserve larger multipattern */
  536. url_scanner->matchers_full = g_array_sized_new (FALSE, TRUE,
  537. sizeof (struct url_matcher), 13000);
  538. url_scanner->search_trie_full = rspamd_multipattern_create_sized (13000,
  539. RSPAMD_MULTIPATTERN_ICASE|RSPAMD_MULTIPATTERN_UTF8);
  540. }
  541. else {
  542. url_scanner->matchers_full = NULL;
  543. url_scanner->search_trie_full = NULL;
  544. }
  545. rspamd_url_add_static_matchers (url_scanner);
  546. if (tld_file != NULL) {
  547. ret = rspamd_url_parse_tld_file (tld_file, url_scanner);
  548. }
  549. if (url_scanner->matchers_full && url_scanner->matchers_full->len > 1000) {
  550. msg_info ("start compiling of %d TLD suffixes; it might take a long time",
  551. url_scanner->matchers_full->len);
  552. }
  553. if (!rspamd_multipattern_compile (url_scanner->search_trie_strict, &err)) {
  554. msg_err ("cannot compile url matcher static patterns, fatal error: %e", err);
  555. abort ();
  556. }
  557. if (url_scanner->search_trie_full) {
  558. if (!rspamd_multipattern_compile (url_scanner->search_trie_full, &err)) {
  559. msg_err ("cannot compile tld patterns, url matching will be "
  560. "broken completely: %e", err);
  561. g_error_free (err);
  562. ret = FALSE;
  563. }
  564. }
  565. if (tld_file != NULL) {
  566. if (ret) {
  567. msg_info ("initialized %ud url match suffixes from '%s'",
  568. url_scanner->matchers_full->len - url_scanner->matchers_strict->len,
  569. tld_file);
  570. }
  571. else {
  572. msg_err ("failed to initialize url tld suffixes from '%s', "
  573. "use %ud internal match suffixes",
  574. tld_file,
  575. url_scanner->matchers_strict->len);
  576. }
  577. }
  578. /* Generate hashes for flags */
  579. for (gint i = 0; i < G_N_ELEMENTS (url_flag_names); i ++) {
  580. url_flag_names[i].hash =
  581. rspamd_cryptobox_fast_hash_specific (RSPAMD_CRYPTOBOX_HASHFAST_INDEPENDENT,
  582. url_flag_names[i].name,
  583. strlen (url_flag_names[i].name), 0);
  584. }
  585. /* Ensure that we have no hashes collisions O(N^2) but this array is small */
  586. for (gint i = 0; i < G_N_ELEMENTS (url_flag_names) - 1; i ++) {
  587. for (gint j = i + 1; j < G_N_ELEMENTS (url_flag_names); j ++) {
  588. if (url_flag_names[i].hash == url_flag_names[j].hash) {
  589. msg_err ("collision: both %s and %s map to %d",
  590. url_flag_names[i].name, url_flag_names[j].name,
  591. url_flag_names[i].hash);
  592. abort ();
  593. }
  594. }
  595. }
  596. }
  597. #define SET_U(u, field) do { \
  598. if ((u) != NULL) { \
  599. (u)->field_set |= 1 << (field); \
  600. (u)->field_data[(field)].len = p - c; \
  601. (u)->field_data[(field)].off = c - str; \
  602. } \
  603. } while (0)
  604. static bool
  605. is_url_start (gchar c)
  606. {
  607. if (c == '(' ||
  608. c == '{' ||
  609. c == '[' ||
  610. c == '<' ||
  611. c == '\'') {
  612. return TRUE;
  613. }
  614. return FALSE;
  615. }
  616. static bool
  617. is_url_end (gchar c)
  618. {
  619. if (c == ')' ||
  620. c == '}' ||
  621. c == ']' ||
  622. c == '>' ||
  623. c == '\'') {
  624. return TRUE;
  625. }
  626. return FALSE;
  627. }
  628. static bool
  629. is_domain_start (int p)
  630. {
  631. if (g_ascii_isalnum (p) ||
  632. p == '[' ||
  633. p == '%' ||
  634. p == '_' ||
  635. (p & 0x80)) {
  636. return TRUE;
  637. }
  638. return FALSE;
  639. }
  640. static const guint max_domain_length = 253;
  641. static const guint max_dns_label = 63;
  642. static const guint max_email_user = 64;
  643. static gint
  644. rspamd_mailto_parse (struct http_parser_url *u,
  645. const gchar *str, gsize len,
  646. gchar const **end,
  647. enum rspamd_url_parse_flags parse_flags, guint *flags)
  648. {
  649. const gchar *p = str, *c = str, *last = str + len;
  650. gchar t;
  651. gint ret = 1;
  652. enum {
  653. parse_mailto,
  654. parse_slash,
  655. parse_slash_slash,
  656. parse_semicolon,
  657. parse_prefix_question,
  658. parse_destination,
  659. parse_equal,
  660. parse_user,
  661. parse_at,
  662. parse_domain,
  663. parse_suffix_question,
  664. parse_query
  665. } st = parse_mailto;
  666. if (u != NULL) {
  667. memset (u, 0, sizeof (*u));
  668. }
  669. while (p < last) {
  670. t = *p;
  671. if (p - str > max_email_user + max_domain_length + 1) {
  672. goto out;
  673. }
  674. switch (st) {
  675. case parse_mailto:
  676. if (t == ':') {
  677. st = parse_semicolon;
  678. SET_U (u, UF_SCHEMA);
  679. }
  680. p++;
  681. break;
  682. case parse_semicolon:
  683. if (t == '/' || t == '\\') {
  684. st = parse_slash;
  685. p++;
  686. }
  687. else {
  688. *flags |= RSPAMD_URL_FLAG_MISSINGSLASHES;
  689. st = parse_slash_slash;
  690. }
  691. break;
  692. case parse_slash:
  693. if (t == '/' || t == '\\') {
  694. st = parse_slash_slash;
  695. }
  696. else {
  697. goto out;
  698. }
  699. p++;
  700. break;
  701. case parse_slash_slash:
  702. if (t == '?') {
  703. st = parse_prefix_question;
  704. p++;
  705. }
  706. else if (t != '/' && t != '\\') {
  707. c = p;
  708. st = parse_user;
  709. }
  710. else {
  711. /* Skip multiple slashes */
  712. p++;
  713. }
  714. break;
  715. case parse_prefix_question:
  716. if (t == 't') {
  717. /* XXX: accept only to= */
  718. st = parse_destination;
  719. }
  720. else {
  721. goto out;
  722. }
  723. break;
  724. case parse_destination:
  725. if (t == '=') {
  726. st = parse_equal;
  727. }
  728. p++;
  729. break;
  730. case parse_equal:
  731. c = p;
  732. st = parse_user;
  733. break;
  734. case parse_user:
  735. if (t == '@') {
  736. if (p - c == 0) {
  737. goto out;
  738. }
  739. SET_U (u, UF_USERINFO);
  740. st = parse_at;
  741. }
  742. else if (!is_mailsafe (t)) {
  743. goto out;
  744. }
  745. else if (p - c > max_email_user) {
  746. goto out;
  747. }
  748. p++;
  749. break;
  750. case parse_at:
  751. c = p;
  752. st = parse_domain;
  753. break;
  754. case parse_domain:
  755. if (t == '?') {
  756. SET_U (u, UF_HOST);
  757. st = parse_suffix_question;
  758. }
  759. else if (!is_domain (t) && t != '.' && t != '_') {
  760. goto out;
  761. }
  762. else if (p - c > max_domain_length) {
  763. goto out;
  764. }
  765. p++;
  766. break;
  767. case parse_suffix_question:
  768. c = p;
  769. st = parse_query;
  770. break;
  771. case parse_query:
  772. if (!is_mailsafe (t)) {
  773. goto out;
  774. }
  775. p++;
  776. break;
  777. }
  778. }
  779. if (st == parse_domain) {
  780. if (p - c != 0) {
  781. SET_U (u, UF_HOST);
  782. ret = 0;
  783. }
  784. }
  785. else if (st == parse_query) {
  786. if (p - c > 0) {
  787. SET_U (u, UF_QUERY);
  788. }
  789. ret = 0;
  790. }
  791. out:
  792. if (end != NULL) {
  793. *end = p;
  794. }
  795. if ((parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  796. return 0;
  797. }
  798. return ret;
  799. }
  800. static gint
  801. rspamd_telephone_parse (struct http_parser_url *u,
  802. const gchar *str, gsize len,
  803. gchar const **end,
  804. enum rspamd_url_parse_flags parse_flags,
  805. guint *flags)
  806. {
  807. enum {
  808. parse_protocol,
  809. parse_semicolon,
  810. parse_slash,
  811. parse_slash_slash,
  812. parse_spaces,
  813. parse_plus,
  814. parse_phone_start,
  815. parse_phone,
  816. } st = parse_protocol;
  817. const gchar *p = str, *c = str, *last = str + len;
  818. gchar t;
  819. gint ret = 1, i;
  820. UChar32 uc;
  821. if (u != NULL) {
  822. memset (u, 0, sizeof (*u));
  823. }
  824. while (p < last) {
  825. t = *p;
  826. if (p - str > max_email_user) {
  827. goto out;
  828. }
  829. switch (st) {
  830. case parse_protocol:
  831. if (t == ':') {
  832. st = parse_semicolon;
  833. SET_U (u, UF_SCHEMA);
  834. }
  835. p++;
  836. break;
  837. case parse_semicolon:
  838. if (t == '/' || t == '\\') {
  839. st = parse_slash;
  840. p++;
  841. }
  842. else {
  843. st = parse_slash_slash;
  844. }
  845. break;
  846. case parse_slash:
  847. if (t == '/' || t == '\\') {
  848. st = parse_slash_slash;
  849. }
  850. else {
  851. goto out;
  852. }
  853. p++;
  854. break;
  855. case parse_slash_slash:
  856. if (g_ascii_isspace (t)) {
  857. st = parse_spaces;
  858. p++;
  859. }
  860. else if (t == '+') {
  861. c = p;
  862. st = parse_plus;
  863. }
  864. else if (t == '/') {
  865. /* Skip multiple slashes */
  866. p++;
  867. }
  868. else {
  869. st = parse_phone_start;
  870. c = p;
  871. }
  872. break;
  873. case parse_spaces:
  874. if (t == '+') {
  875. c = p;
  876. st = parse_plus;
  877. }
  878. else if (!g_ascii_isspace (t)) {
  879. st = parse_phone_start;
  880. c = p;
  881. }
  882. else {
  883. p ++;
  884. }
  885. break;
  886. case parse_plus:
  887. c = p;
  888. p ++;
  889. st = parse_phone_start;
  890. break;
  891. case parse_phone_start:
  892. if (*p == '%' || *p == '(' || g_ascii_isdigit (*p)) {
  893. st = parse_phone;
  894. p ++;
  895. }
  896. else {
  897. goto out;
  898. }
  899. break;
  900. case parse_phone:
  901. i = p - str;
  902. U8_NEXT (str, i, len, uc);
  903. p = str + i;
  904. if (u_isdigit (uc) || uc == '(' || uc == ')' || uc == '[' || uc == ']'
  905. || u_isspace (uc) || uc == '%') {
  906. /* p is already incremented by U8_NEXT! */
  907. }
  908. else if (uc <= 0 || is_url_end (uc)) {
  909. ret = 0;
  910. goto set;
  911. }
  912. break;
  913. }
  914. }
  915. set:
  916. if (st == parse_phone) {
  917. if (p - c != 0) {
  918. SET_U (u, UF_HOST);
  919. ret = 0;
  920. }
  921. }
  922. out:
  923. if (end != NULL) {
  924. *end = p;
  925. }
  926. if ((parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  927. return 0;
  928. }
  929. return ret;
  930. }
  931. static gint
  932. rspamd_web_parse (struct http_parser_url *u, const gchar *str, gsize len,
  933. gchar const **end,
  934. enum rspamd_url_parse_flags parse_flags,
  935. guint *flags)
  936. {
  937. const gchar *p = str, *c = str, *last = str + len, *slash = NULL,
  938. *password_start = NULL, *user_start = NULL;
  939. gchar t = 0;
  940. UChar32 uc;
  941. glong pt;
  942. gint ret = 1;
  943. gboolean user_seen = FALSE;
  944. enum {
  945. parse_protocol,
  946. parse_slash,
  947. parse_slash_slash,
  948. parse_semicolon,
  949. parse_user,
  950. parse_at,
  951. parse_multiple_at,
  952. parse_password_start,
  953. parse_password,
  954. parse_domain_start,
  955. parse_domain,
  956. parse_ipv6,
  957. parse_port_password,
  958. parse_port,
  959. parse_suffix_slash,
  960. parse_path,
  961. parse_query,
  962. parse_part
  963. } st = parse_protocol;
  964. if (u != NULL) {
  965. memset (u, 0, sizeof (*u));
  966. }
  967. while (p < last) {
  968. t = *p;
  969. switch (st) {
  970. case parse_protocol:
  971. if (t == ':') {
  972. st = parse_semicolon;
  973. SET_U (u, UF_SCHEMA);
  974. }
  975. else if (!g_ascii_isalnum (t) && t != '+' && t != '-') {
  976. if ((parse_flags & RSPAMD_URL_PARSE_CHECK) && p > c) {
  977. /* We might have some domain, but no protocol */
  978. st = parse_domain_start;
  979. p = c;
  980. slash = c;
  981. break;
  982. }
  983. else {
  984. goto out;
  985. }
  986. }
  987. p++;
  988. break;
  989. case parse_semicolon:
  990. if (t == '/' || t == '\\') {
  991. st = parse_slash;
  992. p++;
  993. }
  994. else {
  995. st = parse_slash_slash;
  996. *(flags) |= RSPAMD_URL_FLAG_MISSINGSLASHES;
  997. }
  998. break;
  999. case parse_slash:
  1000. if (t == '/' || t == '\\') {
  1001. st = parse_slash_slash;
  1002. }
  1003. else {
  1004. goto out;
  1005. }
  1006. p++;
  1007. break;
  1008. case parse_slash_slash:
  1009. if (t != '/' && t != '\\') {
  1010. c = p;
  1011. st = parse_domain_start;
  1012. slash = p;
  1013. if (*p == '[') {
  1014. st = parse_ipv6;
  1015. p++;
  1016. c = p;
  1017. }
  1018. }
  1019. else {
  1020. /* Skip multiple slashes */
  1021. p++;
  1022. }
  1023. break;
  1024. case parse_ipv6:
  1025. if (t == ']') {
  1026. if (p - c == 0) {
  1027. goto out;
  1028. }
  1029. SET_U (u, UF_HOST);
  1030. p++;
  1031. if (*p == ':') {
  1032. st = parse_port;
  1033. c = p + 1;
  1034. }
  1035. else if (*p == '/') {
  1036. st = parse_path;
  1037. c = p + 1;
  1038. }
  1039. else if (*p == '?') {
  1040. st = parse_query;
  1041. c = p + 1;
  1042. }
  1043. else if (*p == '#') {
  1044. st = parse_part;
  1045. c = p + 1;
  1046. }
  1047. else if (p != last) {
  1048. goto out;
  1049. }
  1050. }
  1051. else if (!g_ascii_isxdigit (t) && t != ':' && t != '.') {
  1052. goto out;
  1053. }
  1054. p++;
  1055. break;
  1056. case parse_user:
  1057. if (t == ':') {
  1058. if (p - c == 0) {
  1059. goto out;
  1060. }
  1061. user_start = c;
  1062. st = parse_password_start;
  1063. }
  1064. else if (t == '@') {
  1065. /* No password */
  1066. if (p - c == 0) {
  1067. /* We have multiple at in fact */
  1068. st = parse_multiple_at;
  1069. user_seen = TRUE;
  1070. *flags |= RSPAMD_URL_FLAG_OBSCURED;
  1071. continue;
  1072. }
  1073. SET_U (u, UF_USERINFO);
  1074. *flags |= RSPAMD_URL_FLAG_HAS_USER;
  1075. st = parse_at;
  1076. }
  1077. else if (!g_ascii_isgraph (t)) {
  1078. goto out;
  1079. }
  1080. else if (p - c > max_email_user) {
  1081. goto out;
  1082. }
  1083. p++;
  1084. break;
  1085. case parse_multiple_at:
  1086. if (t != '@') {
  1087. if (p - c == 0) {
  1088. goto out;
  1089. }
  1090. /* For now, we ignore all that stuff as it is bogus */
  1091. SET_U (u, UF_USERINFO);
  1092. st = parse_at;
  1093. }
  1094. else {
  1095. p ++;
  1096. }
  1097. break;
  1098. case parse_password_start:
  1099. if (t == '@') {
  1100. /* Empty password */
  1101. SET_U (u, UF_USERINFO);
  1102. if (u != NULL && u->field_data[UF_USERINFO].len > 0) {
  1103. /* Eat semicolon */
  1104. u->field_data[UF_USERINFO].len--;
  1105. }
  1106. *flags |= RSPAMD_URL_FLAG_HAS_USER;
  1107. st = parse_at;
  1108. }
  1109. else {
  1110. c = p;
  1111. password_start = p;
  1112. st = parse_password;
  1113. }
  1114. p++;
  1115. break;
  1116. case parse_password:
  1117. if (t == '@') {
  1118. /* XXX: password is not stored */
  1119. if (u != NULL) {
  1120. if (u->field_data[UF_USERINFO].len == 0
  1121. && password_start
  1122. && user_start && password_start > user_start + 1) {
  1123. *flags |= RSPAMD_URL_FLAG_HAS_USER;
  1124. u->field_set |= 1u << (UF_USERINFO);
  1125. u->field_data[UF_USERINFO].len =
  1126. password_start - user_start - 1;
  1127. u->field_data[UF_USERINFO].off =
  1128. user_start - str;
  1129. }
  1130. }
  1131. st = parse_at;
  1132. }
  1133. else if (!g_ascii_isgraph (t)) {
  1134. goto out;
  1135. }
  1136. else if (p - c > max_domain_length) {
  1137. goto out;
  1138. }
  1139. p++;
  1140. break;
  1141. case parse_at:
  1142. c = p;
  1143. if (t == '@') {
  1144. *flags |= RSPAMD_URL_FLAG_OBSCURED;
  1145. p ++;
  1146. }
  1147. else if (t == '[') {
  1148. st = parse_ipv6;
  1149. p++;
  1150. c = p;
  1151. }
  1152. else {
  1153. st = parse_domain_start;
  1154. }
  1155. break;
  1156. case parse_domain_start:
  1157. if (is_domain_start (t)) {
  1158. st = parse_domain;
  1159. }
  1160. else {
  1161. goto out;
  1162. }
  1163. break;
  1164. case parse_domain:
  1165. if (p - c > max_domain_length) {
  1166. /* Too large domain */
  1167. goto out;
  1168. }
  1169. if (t == '/' || t == ':' || t == '?' || t == '#') {
  1170. if (p - c == 0) {
  1171. goto out;
  1172. }
  1173. if (t == '/') {
  1174. SET_U (u, UF_HOST);
  1175. st = parse_suffix_slash;
  1176. }
  1177. else if (t == '?') {
  1178. SET_U (u, UF_HOST);
  1179. st = parse_query;
  1180. c = p + 1;
  1181. }
  1182. else if (t == '#') {
  1183. SET_U (u, UF_HOST);
  1184. st = parse_part;
  1185. c = p + 1;
  1186. }
  1187. else if (t == ':' && !user_seen) {
  1188. /*
  1189. * Here we can have both port and password, hence we need
  1190. * to apply some heuristic here
  1191. */
  1192. st = parse_port_password;
  1193. }
  1194. else {
  1195. /*
  1196. * We can go only for parsing port here
  1197. */
  1198. SET_U (u, UF_HOST);
  1199. st = parse_port;
  1200. c = p + 1;
  1201. }
  1202. p++;
  1203. }
  1204. else {
  1205. if (is_url_end (t) || is_url_start (t)) {
  1206. goto set;
  1207. }
  1208. else if (*p == '@' && !user_seen) {
  1209. /* We need to fallback and test user */
  1210. p = slash;
  1211. user_seen = TRUE;
  1212. st = parse_user;
  1213. }
  1214. else if (*p != '.' && *p != '-' && *p != '_' && *p != '%') {
  1215. if (*p & 0x80) {
  1216. (*flags) |= RSPAMD_URL_FLAG_IDN;
  1217. guint i = 0;
  1218. U8_NEXT (((const guchar *)p), i, last - p, uc);
  1219. if (uc < 0) {
  1220. /* Bad utf8 */
  1221. goto out;
  1222. }
  1223. if (!u_isalnum (uc)) {
  1224. /* Bad symbol */
  1225. if (IS_ZERO_WIDTH_SPACE (uc)) {
  1226. (*flags) |= RSPAMD_URL_FLAG_OBSCURED;
  1227. }
  1228. else {
  1229. if (!u_isgraph (uc)) {
  1230. if (!(parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  1231. goto out;
  1232. }
  1233. else {
  1234. goto set;
  1235. }
  1236. }
  1237. }
  1238. }
  1239. p = p + i;
  1240. }
  1241. else if (is_urlsafe (*p)) {
  1242. p ++;
  1243. }
  1244. else {
  1245. if (parse_flags & RSPAMD_URL_PARSE_HREF) {
  1246. /* We have to use all shit we are given here */
  1247. p ++;
  1248. (*flags) |= RSPAMD_URL_FLAG_OBSCURED;
  1249. }
  1250. else {
  1251. if (!(parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  1252. goto out;
  1253. }
  1254. else {
  1255. goto set;
  1256. }
  1257. }
  1258. }
  1259. }
  1260. else {
  1261. p++;
  1262. }
  1263. }
  1264. break;
  1265. case parse_port_password:
  1266. if (g_ascii_isdigit (t)) {
  1267. const gchar *tmp = p;
  1268. while (tmp < last) {
  1269. if (!g_ascii_isdigit (*tmp)) {
  1270. if (*tmp == '/' || *tmp == '#' || *tmp == '?' ||
  1271. is_url_end (*tmp) || g_ascii_isspace (*tmp)) {
  1272. /* Port + something */
  1273. st = parse_port;
  1274. c = slash;
  1275. p--;
  1276. SET_U (u, UF_HOST);
  1277. p++;
  1278. c = p;
  1279. break;
  1280. }
  1281. else {
  1282. /* Not a port, bad character at the end */
  1283. break;
  1284. }
  1285. }
  1286. tmp ++;
  1287. }
  1288. if (tmp == last) {
  1289. /* Host + port only */
  1290. st = parse_port;
  1291. c = slash;
  1292. p--;
  1293. SET_U (u, UF_HOST);
  1294. p++;
  1295. c = p;
  1296. }
  1297. if (st != parse_port) {
  1298. /* Fallback to user:password */
  1299. p = slash;
  1300. c = slash;
  1301. user_seen = TRUE;
  1302. st = parse_user;
  1303. }
  1304. }
  1305. else {
  1306. /* Rewind back */
  1307. p = slash;
  1308. c = slash;
  1309. user_seen = TRUE;
  1310. st = parse_user;
  1311. }
  1312. break;
  1313. case parse_port:
  1314. if (t == '/') {
  1315. pt = strtoul (c, NULL, 10);
  1316. if (pt == 0 || pt > 65535) {
  1317. goto out;
  1318. }
  1319. if (u != NULL) {
  1320. u->port = pt;
  1321. *flags |= RSPAMD_URL_FLAG_HAS_PORT;
  1322. }
  1323. st = parse_suffix_slash;
  1324. }
  1325. else if (t == '?') {
  1326. pt = strtoul (c, NULL, 10);
  1327. if (pt == 0 || pt > 65535) {
  1328. goto out;
  1329. }
  1330. if (u != NULL) {
  1331. u->port = pt;
  1332. *flags |= RSPAMD_URL_FLAG_HAS_PORT;
  1333. }
  1334. c = p + 1;
  1335. st = parse_query;
  1336. }
  1337. else if (t == '#') {
  1338. pt = strtoul (c, NULL, 10);
  1339. if (pt == 0 || pt > 65535) {
  1340. goto out;
  1341. }
  1342. if (u != NULL) {
  1343. u->port = pt;
  1344. *flags |= RSPAMD_URL_FLAG_HAS_PORT;
  1345. }
  1346. c = p + 1;
  1347. st = parse_part;
  1348. }
  1349. else if (is_url_end (t)) {
  1350. goto set;
  1351. }
  1352. else if (!g_ascii_isdigit (t)) {
  1353. if (!(parse_flags & RSPAMD_URL_PARSE_CHECK) ||
  1354. !g_ascii_isspace (t)) {
  1355. goto out;
  1356. }
  1357. else {
  1358. goto set;
  1359. }
  1360. }
  1361. p++;
  1362. break;
  1363. case parse_suffix_slash:
  1364. if (t != '/') {
  1365. c = p;
  1366. st = parse_path;
  1367. }
  1368. else {
  1369. /* Skip extra slashes */
  1370. p++;
  1371. }
  1372. break;
  1373. case parse_path:
  1374. if (t == '?') {
  1375. if (p - c != 0) {
  1376. SET_U (u, UF_PATH);
  1377. }
  1378. c = p + 1;
  1379. st = parse_query;
  1380. }
  1381. else if (t == '#') {
  1382. /* No query, just fragment */
  1383. if (p - c != 0) {
  1384. SET_U (u, UF_PATH);
  1385. }
  1386. c = p + 1;
  1387. st = parse_part;
  1388. }
  1389. else if (!(parse_flags & RSPAMD_URL_PARSE_HREF) && is_url_end (t)) {
  1390. goto set;
  1391. }
  1392. else if (is_lwsp (t)) {
  1393. if (!(parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  1394. if (g_ascii_isspace (t)) {
  1395. goto set;
  1396. }
  1397. goto out;
  1398. }
  1399. else {
  1400. goto set;
  1401. }
  1402. }
  1403. p++;
  1404. break;
  1405. case parse_query:
  1406. if (t == '#') {
  1407. if (p - c != 0) {
  1408. SET_U (u, UF_QUERY);
  1409. }
  1410. c = p + 1;
  1411. st = parse_part;
  1412. }
  1413. else if (!(parse_flags & RSPAMD_URL_PARSE_HREF) && is_url_end (t)) {
  1414. goto set;
  1415. }
  1416. else if (is_lwsp (t)) {
  1417. if (!(parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  1418. if (g_ascii_isspace (t)) {
  1419. goto set;
  1420. }
  1421. goto out;
  1422. }
  1423. else {
  1424. goto set;
  1425. }
  1426. }
  1427. p++;
  1428. break;
  1429. case parse_part:
  1430. if (!(parse_flags & RSPAMD_URL_PARSE_HREF) && is_url_end (t)) {
  1431. goto set;
  1432. }
  1433. else if (is_lwsp (t)) {
  1434. if (!(parse_flags & RSPAMD_URL_PARSE_CHECK)) {
  1435. if (g_ascii_isspace (t)) {
  1436. goto set;
  1437. }
  1438. goto out;
  1439. }
  1440. else {
  1441. goto set;
  1442. }
  1443. }
  1444. p++;
  1445. break;
  1446. }
  1447. }
  1448. set:
  1449. /* Parse remaining */
  1450. switch (st) {
  1451. case parse_domain:
  1452. if (p - c == 0 || !is_domain (*(p - 1)) || !is_domain (*c)) {
  1453. goto out;
  1454. }
  1455. SET_U (u, UF_HOST);
  1456. ret = 0;
  1457. break;
  1458. case parse_port:
  1459. pt = strtoul (c, NULL, 10);
  1460. if (pt == 0 || pt > 65535) {
  1461. goto out;
  1462. }
  1463. if (u != NULL) {
  1464. u->port = pt;
  1465. }
  1466. ret = 0;
  1467. break;
  1468. case parse_suffix_slash:
  1469. /* Url ends with '/' */
  1470. ret = 0;
  1471. break;
  1472. case parse_path:
  1473. if (p - c > 0) {
  1474. SET_U (u, UF_PATH);
  1475. }
  1476. ret = 0;
  1477. break;
  1478. case parse_query:
  1479. if (p - c > 0) {
  1480. SET_U (u, UF_QUERY);
  1481. }
  1482. ret = 0;
  1483. break;
  1484. case parse_part:
  1485. if (p - c > 0) {
  1486. SET_U (u, UF_FRAGMENT);
  1487. }
  1488. ret = 0;
  1489. break;
  1490. case parse_ipv6:
  1491. if (t != ']') {
  1492. ret = 1;
  1493. }
  1494. else {
  1495. /* e.g. http://[::] */
  1496. ret = 0;
  1497. }
  1498. break;
  1499. default:
  1500. /* Error state */
  1501. ret = 1;
  1502. break;
  1503. }
  1504. out:
  1505. if (end != NULL) {
  1506. *end = p;
  1507. }
  1508. return ret;
  1509. }
  1510. #undef SET_U
  1511. static gint
  1512. rspamd_tld_trie_callback (struct rspamd_multipattern *mp,
  1513. guint strnum,
  1514. gint match_start,
  1515. gint match_pos,
  1516. const gchar *text,
  1517. gsize len,
  1518. void *context)
  1519. {
  1520. struct url_matcher *matcher;
  1521. const gchar *start, *pos, *p;
  1522. struct rspamd_url *url = context;
  1523. gint ndots;
  1524. matcher = &g_array_index (url_scanner->matchers_full, struct url_matcher,
  1525. strnum);
  1526. ndots = 1;
  1527. if (matcher->flags & URL_FLAG_STAR_MATCH) {
  1528. /* Skip one more tld component */
  1529. ndots ++;
  1530. }
  1531. pos = text + match_start;
  1532. p = pos - 1;
  1533. start = rspamd_url_host_unsafe (url);
  1534. if (*pos != '.' || match_pos != (gint) url->hostlen) {
  1535. /* Something weird has been found */
  1536. if (match_pos == (gint) url->hostlen - 1) {
  1537. pos = rspamd_url_host_unsafe (url) + match_pos;
  1538. if (*pos == '.') {
  1539. /* This is dot at the end of domain */
  1540. url->hostlen--;
  1541. }
  1542. else {
  1543. return 0;
  1544. }
  1545. }
  1546. else {
  1547. return 0;
  1548. }
  1549. }
  1550. /* Now we need to find top level domain */
  1551. pos = start;
  1552. while (p >= start && ndots > 0) {
  1553. if (*p == '.') {
  1554. ndots--;
  1555. pos = p + 1;
  1556. }
  1557. else {
  1558. pos = p;
  1559. }
  1560. p--;
  1561. }
  1562. if ((ndots == 0 || p == start - 1) &&
  1563. url->tldlen < rspamd_url_host_unsafe (url) + url->hostlen - pos) {
  1564. url->tldshift = (pos - url->string);
  1565. url->tldlen = rspamd_url_host_unsafe (url) + url->hostlen - pos;
  1566. }
  1567. return 0;
  1568. }
  1569. static void
  1570. rspamd_url_regen_from_inet_addr (struct rspamd_url *uri, const void *addr, int af,
  1571. rspamd_mempool_t *pool)
  1572. {
  1573. gchar *strbuf, *p;
  1574. const gchar *start_offset;
  1575. gsize slen = uri->urllen - uri->hostlen;
  1576. goffset r = 0;
  1577. if (af == AF_INET) {
  1578. slen += INET_ADDRSTRLEN;
  1579. }
  1580. else {
  1581. slen += INET6_ADDRSTRLEN;
  1582. }
  1583. /* Allocate new string to build it from IP */
  1584. strbuf = rspamd_mempool_alloc (pool, slen + 1);
  1585. r += rspamd_snprintf (strbuf + r, slen - r, "%*s",
  1586. (gint)(uri->hostshift),
  1587. uri->string);
  1588. uri->hostshift = r;
  1589. uri->tldshift = r;
  1590. start_offset = strbuf + r;
  1591. inet_ntop (af, addr, strbuf + r, slen - r + 1);
  1592. uri->hostlen = strlen (start_offset);
  1593. r += uri->hostlen;
  1594. uri->tldlen = uri->hostlen;
  1595. uri->flags |= RSPAMD_URL_FLAG_NUMERIC;
  1596. /* Reconstruct URL */
  1597. if (uri->datalen > 0) {
  1598. p = strbuf + r;
  1599. start_offset = p + 1;
  1600. r += rspamd_snprintf (strbuf + r, slen - r, "/%*s",
  1601. (gint)uri->datalen,
  1602. rspamd_url_data_unsafe (uri));
  1603. uri->datashift = start_offset - strbuf;
  1604. }
  1605. else {
  1606. /* Add trailing slash if needed */
  1607. if (uri->hostlen + uri->hostshift < uri->urllen &&
  1608. *(rspamd_url_host_unsafe (uri) + uri->hostlen) == '/') {
  1609. r += rspamd_snprintf (strbuf + r, slen - r, "/");
  1610. }
  1611. }
  1612. if (uri->querylen > 0) {
  1613. p = strbuf + r;
  1614. start_offset = p + 1;
  1615. r += rspamd_snprintf (strbuf + r, slen - r, "?%*s",
  1616. (gint)uri->querylen,
  1617. rspamd_url_query_unsafe (uri));
  1618. uri->queryshift = start_offset - strbuf;
  1619. }
  1620. if (uri->fragmentlen > 0) {
  1621. p = strbuf + r;
  1622. start_offset = p + 1;
  1623. r += rspamd_snprintf (strbuf + r, slen - r, "#%*s",
  1624. (gint)uri->fragmentlen,
  1625. rspamd_url_fragment_unsafe (uri));
  1626. uri->fragmentshift = start_offset - strbuf;
  1627. }
  1628. uri->string = strbuf;
  1629. uri->urllen = r;
  1630. }
  1631. static gboolean
  1632. rspamd_url_is_ip (struct rspamd_url *uri, rspamd_mempool_t *pool)
  1633. {
  1634. const gchar *p, *end, *c;
  1635. gchar *errstr;
  1636. struct in_addr in4;
  1637. struct in6_addr in6;
  1638. gboolean ret = FALSE, check_num = TRUE;
  1639. guint32 n, dots, t = 0, i = 0, shift, nshift;
  1640. p = rspamd_url_host_unsafe (uri);
  1641. end = p + uri->hostlen;
  1642. if (*p == '[' && *(end - 1) == ']') {
  1643. p++;
  1644. end--;
  1645. }
  1646. while (*(end - 1) == '.' && end > p) {
  1647. end--;
  1648. }
  1649. if (end - p == 0) {
  1650. return FALSE;
  1651. }
  1652. if (rspamd_str_has_8bit (p, end - p)) {
  1653. return FALSE;
  1654. }
  1655. if (rspamd_parse_inet_address_ip4 (p, end - p, &in4)) {
  1656. rspamd_url_regen_from_inet_addr (uri, &in4, AF_INET, pool);
  1657. ret = TRUE;
  1658. }
  1659. else if (rspamd_parse_inet_address_ip6 (p, end - p, &in6)) {
  1660. rspamd_url_regen_from_inet_addr (uri, &in6, AF_INET6, pool);
  1661. ret = TRUE;
  1662. }
  1663. else {
  1664. /* Heuristics for broken urls */
  1665. gchar buf[INET6_ADDRSTRLEN + 1];
  1666. /* Try also numeric notation */
  1667. c = p;
  1668. n = 0;
  1669. dots = 0;
  1670. shift = 0;
  1671. while (p <= end && check_num) {
  1672. if (shift < 32 &&
  1673. ((*p == '.' && dots < 3) || (p == end && dots <= 3))) {
  1674. if (p - c + 1 >= (gint) sizeof (buf)) {
  1675. msg_err_pool ("invalid numeric url %*.s...: too long",
  1676. INET6_ADDRSTRLEN, c);
  1677. return FALSE;
  1678. }
  1679. rspamd_strlcpy (buf, c, p - c + 1);
  1680. c = p + 1;
  1681. if (p < end && *p == '.') {
  1682. dots++;
  1683. }
  1684. glong long_n = strtol (buf, &errstr, 0);
  1685. if ((errstr == NULL || *errstr == '\0') && long_n >= 0) {
  1686. t = long_n; /* Truncate as windows does */
  1687. /*
  1688. * Even if we have zero, we need to shift by 1 octet
  1689. */
  1690. nshift = (t == 0 ? shift + 8 : shift);
  1691. /*
  1692. * Here we count number of octets encoded in this element
  1693. */
  1694. for (i = 0; i < 4; i++) {
  1695. if ((t >> (8 * i)) > 0) {
  1696. nshift += 8;
  1697. }
  1698. else {
  1699. break;
  1700. }
  1701. }
  1702. /*
  1703. * Here we need to find the proper shift of the previous
  1704. * components, so we check possible cases:
  1705. * 1) 1 octet - just use it applying shift
  1706. * 2) 2 octets - convert to big endian 16 bit number
  1707. * 3) 3 octets - convert to big endian 24 bit number
  1708. * 4) 4 octets - convert to big endian 32 bit number
  1709. */
  1710. switch (i) {
  1711. case 4:
  1712. t = GUINT32_TO_BE (t);
  1713. break;
  1714. case 3:
  1715. t = (GUINT32_TO_BE (t & 0xFFFFFFU)) >> 8;
  1716. break;
  1717. case 2:
  1718. t = GUINT16_TO_BE (t & 0xFFFFU);
  1719. break;
  1720. default:
  1721. t = t & 0xFF;
  1722. break;
  1723. }
  1724. if (p != end) {
  1725. n |= t << shift;
  1726. shift = nshift;
  1727. }
  1728. }
  1729. else {
  1730. check_num = FALSE;
  1731. }
  1732. }
  1733. p++;
  1734. }
  1735. /* The last component should be last according to url normalization:
  1736. * 192.168.1 -> 192.168.0.1
  1737. * 192 -> 0.0.0.192
  1738. * 192.168 -> 192.0.0.168
  1739. */
  1740. shift = 8 * (4 - i);
  1741. if (shift < 32) {
  1742. n |= t << shift;
  1743. }
  1744. if (check_num) {
  1745. if (dots <= 4) {
  1746. memcpy (&in4, &n, sizeof (in4));
  1747. rspamd_url_regen_from_inet_addr (uri, &in4, AF_INET, pool);
  1748. uri->flags |= RSPAMD_URL_FLAG_OBSCURED;
  1749. ret = TRUE;
  1750. }
  1751. else if (end - c > (gint) sizeof (buf) - 1) {
  1752. rspamd_strlcpy (buf, c, end - c + 1);
  1753. if (inet_pton (AF_INET6, buf, &in6) == 1) {
  1754. rspamd_url_regen_from_inet_addr (uri, &in6, AF_INET6, pool);
  1755. uri->flags |= RSPAMD_URL_FLAG_OBSCURED;
  1756. ret = TRUE;
  1757. }
  1758. }
  1759. }
  1760. }
  1761. return ret;
  1762. }
  1763. static void
  1764. rspamd_url_shift (struct rspamd_url *uri, gsize nlen,
  1765. enum http_parser_url_fields field)
  1766. {
  1767. guint old_shift, shift = 0;
  1768. gint remain;
  1769. /* Shift remaining data */
  1770. switch (field) {
  1771. case UF_SCHEMA:
  1772. if (nlen >= uri->protocollen) {
  1773. return;
  1774. }
  1775. else {
  1776. shift = uri->protocollen - nlen;
  1777. }
  1778. old_shift = uri->protocollen;
  1779. uri->protocollen -= shift;
  1780. remain = uri->urllen - uri->protocollen;
  1781. g_assert (remain >= 0);
  1782. memmove (uri->string + uri->protocollen, uri->string + old_shift,
  1783. remain);
  1784. uri->urllen -= shift;
  1785. uri->flags |= RSPAMD_URL_FLAG_SCHEMAENCODED;
  1786. break;
  1787. case UF_HOST:
  1788. if (nlen >= uri->hostlen) {
  1789. return;
  1790. }
  1791. else {
  1792. shift = uri->hostlen - nlen;
  1793. }
  1794. old_shift = uri->hostlen;
  1795. uri->hostlen -= shift;
  1796. remain = (uri->urllen - (uri->hostshift)) - old_shift;
  1797. g_assert (remain >= 0);
  1798. memmove (rspamd_url_host_unsafe (uri) + uri->hostlen,
  1799. rspamd_url_host_unsafe (uri) + old_shift,
  1800. remain);
  1801. uri->urllen -= shift;
  1802. uri->flags |= RSPAMD_URL_FLAG_HOSTENCODED;
  1803. break;
  1804. case UF_PATH:
  1805. if (nlen >= uri->datalen) {
  1806. return;
  1807. }
  1808. else {
  1809. shift = uri->datalen - nlen;
  1810. }
  1811. old_shift = uri->datalen;
  1812. uri->datalen -= shift;
  1813. remain = (uri->urllen - (uri->datashift)) - old_shift;
  1814. g_assert (remain >= 0);
  1815. memmove (rspamd_url_data_unsafe (uri) + uri->datalen,
  1816. rspamd_url_data_unsafe (uri) + old_shift,
  1817. remain);
  1818. uri->urllen -= shift;
  1819. uri->flags |= RSPAMD_URL_FLAG_PATHENCODED;
  1820. break;
  1821. case UF_QUERY:
  1822. if (nlen >= uri->querylen) {
  1823. return;
  1824. }
  1825. else {
  1826. shift = uri->querylen - nlen;
  1827. }
  1828. old_shift = uri->querylen;
  1829. uri->querylen -= shift;
  1830. remain = (uri->urllen - (uri->queryshift)) - old_shift;
  1831. g_assert (remain >= 0);
  1832. memmove (rspamd_url_query_unsafe (uri) + uri->querylen,
  1833. rspamd_url_query_unsafe (uri) + old_shift,
  1834. remain);
  1835. uri->urllen -= shift;
  1836. uri->flags |= RSPAMD_URL_FLAG_QUERYENCODED;
  1837. break;
  1838. case UF_FRAGMENT:
  1839. if (nlen >= uri->fragmentlen) {
  1840. return;
  1841. }
  1842. else {
  1843. shift = uri->fragmentlen - nlen;
  1844. }
  1845. uri->fragmentlen -= shift;
  1846. uri->urllen -= shift;
  1847. break;
  1848. default:
  1849. break;
  1850. }
  1851. /* Now adjust lengths and offsets */
  1852. switch (field) {
  1853. case UF_SCHEMA:
  1854. if (uri->userlen > 0) {
  1855. uri->usershift -= shift;
  1856. }
  1857. if (uri->hostlen > 0) {
  1858. uri->hostshift -= shift;
  1859. }
  1860. /* Go forward */
  1861. /* FALLTHRU */
  1862. case UF_HOST:
  1863. if (uri->datalen > 0) {
  1864. uri->datashift -= shift;
  1865. }
  1866. /* Go forward */
  1867. /* FALLTHRU */
  1868. case UF_PATH:
  1869. if (uri->querylen > 0) {
  1870. uri->queryshift -= shift;
  1871. }
  1872. /* Go forward */
  1873. /* FALLTHRU */
  1874. case UF_QUERY:
  1875. if (uri->fragmentlen > 0) {
  1876. uri->fragmentshift -= shift;
  1877. }
  1878. /* Go forward */
  1879. /* FALLTHRU */
  1880. case UF_FRAGMENT:
  1881. default:
  1882. break;
  1883. }
  1884. }
  1885. static void
  1886. rspamd_telephone_normalise_inplace (struct rspamd_url *uri)
  1887. {
  1888. gchar *t, *h, *end;
  1889. gint i = 0, w, orig_len;
  1890. UChar32 uc;
  1891. t = rspamd_url_host_unsafe (uri);
  1892. h = t;
  1893. end = t + uri->hostlen;
  1894. orig_len = uri->hostlen;
  1895. if (*h == '+') {
  1896. h ++;
  1897. t ++;
  1898. }
  1899. while (h < end) {
  1900. i = 0;
  1901. U8_NEXT (h, i, end - h, uc);
  1902. if (u_isdigit (uc)) {
  1903. w = 0;
  1904. U8_APPEND_UNSAFE (t, w, uc);
  1905. t += w;
  1906. }
  1907. h += i;
  1908. }
  1909. uri->hostlen = t - rspamd_url_host_unsafe (uri);
  1910. uri->urllen -= (orig_len - uri->hostlen);
  1911. }
  1912. static inline bool
  1913. is_idna_label_dot (UChar ch)
  1914. {
  1915. switch(ch){
  1916. case 0x3002:
  1917. case 0xFF0E:
  1918. case 0xFF61:
  1919. return true;
  1920. default:
  1921. return false;
  1922. }
  1923. }
  1924. /*
  1925. * All credits for this investigation should go to
  1926. * Dr. Hajime Shimada and Mr. Shirakura as they have revealed this case in their
  1927. * research.
  1928. */
  1929. /*
  1930. * This function replaces unsafe IDNA dots in host labels. Unfortunately,
  1931. * IDNA extends dot definition from '.' to multiple other characters that
  1932. * should be treated equally.
  1933. * This function replaces such dots and returns `true` if these dots are found.
  1934. * In this case, it should be treated as obfuscation attempt.
  1935. */
  1936. static bool
  1937. rspamd_url_remove_dots (struct rspamd_url *uri)
  1938. {
  1939. const gchar *hstart = rspamd_url_host_unsafe (uri);
  1940. gchar *t;
  1941. UChar32 uc;
  1942. gint i = 0, hlen;
  1943. bool ret = false;
  1944. if (uri->hostlen == 0) {
  1945. return false;
  1946. }
  1947. hlen = uri->hostlen;
  1948. t = rspamd_url_host_unsafe (uri);
  1949. while (i < hlen) {
  1950. gint prev_i = i;
  1951. U8_NEXT (hstart, i, hlen, uc);
  1952. if (is_idna_label_dot (uc)) {
  1953. *t ++ = '.';
  1954. ret = true;
  1955. }
  1956. else {
  1957. if (ret) {
  1958. /* We have to shift the remaining stuff */
  1959. while (prev_i < i) {
  1960. *t ++ = *(hstart + prev_i);
  1961. prev_i ++;
  1962. }
  1963. }
  1964. else {
  1965. t += (i - prev_i);
  1966. }
  1967. }
  1968. }
  1969. if (ret) {
  1970. rspamd_url_shift (uri, t - hstart, UF_HOST);
  1971. }
  1972. return ret;
  1973. }
  1974. enum uri_errno
  1975. rspamd_url_parse (struct rspamd_url *uri,
  1976. gchar *uristring, gsize len,
  1977. rspamd_mempool_t *pool,
  1978. enum rspamd_url_parse_flags parse_flags)
  1979. {
  1980. struct http_parser_url u;
  1981. gchar *p;
  1982. const gchar *end;
  1983. guint i, complen, ret, flags = 0;
  1984. gsize unquoted_len = 0;
  1985. memset (uri, 0, sizeof (*uri));
  1986. memset (&u, 0, sizeof (u));
  1987. uri->count = 1;
  1988. if (*uristring == '\0') {
  1989. return URI_ERRNO_EMPTY;
  1990. }
  1991. p = uristring;
  1992. uri->protocol = PROTOCOL_UNKNOWN;
  1993. if (len > sizeof ("mailto:") - 1) {
  1994. /* For mailto: urls we also need to add slashes to make it a valid URL */
  1995. if (g_ascii_strncasecmp (p, "mailto:", sizeof ("mailto:") - 1) == 0) {
  1996. ret = rspamd_mailto_parse (&u, uristring, len, &end, parse_flags,
  1997. &flags);
  1998. }
  1999. else if (g_ascii_strncasecmp (p, "tel:", sizeof ("tel:") - 1) == 0 ||
  2000. g_ascii_strncasecmp (p, "callto:", sizeof ("callto:") - 1) == 0) {
  2001. ret = rspamd_telephone_parse (&u, uristring, len, &end, parse_flags,
  2002. &flags);
  2003. uri->protocol = PROTOCOL_TELEPHONE;
  2004. }
  2005. else {
  2006. ret = rspamd_web_parse (&u, uristring, len, &end, parse_flags,
  2007. &flags);
  2008. }
  2009. }
  2010. else {
  2011. ret = rspamd_web_parse (&u, uristring, len, &end, parse_flags, &flags);
  2012. }
  2013. if (ret != 0) {
  2014. return URI_ERRNO_BAD_FORMAT;
  2015. }
  2016. if (end > uristring && (guint) (end - uristring) != len) {
  2017. len = end - uristring;
  2018. }
  2019. uri->raw = p;
  2020. uri->rawlen = len;
  2021. if (flags & RSPAMD_URL_FLAG_MISSINGSLASHES) {
  2022. len += 2;
  2023. uri->string = rspamd_mempool_alloc (pool, len + 1);
  2024. memcpy (uri->string, p, u.field_data[UF_SCHEMA].len);
  2025. memcpy (uri->string + u.field_data[UF_SCHEMA].len, "://", 3);
  2026. rspamd_strlcpy (uri->string + u.field_data[UF_SCHEMA].len + 3,
  2027. p + u.field_data[UF_SCHEMA].len + 1,
  2028. len - 2 - u.field_data[UF_SCHEMA].len);
  2029. /* Compensate slashes added */
  2030. for (i = UF_SCHEMA + 1; i < UF_MAX; i++) {
  2031. if (u.field_set & (1 << i)) {
  2032. u.field_data[i].off += 2;
  2033. }
  2034. }
  2035. }
  2036. else {
  2037. uri->string = rspamd_mempool_alloc (pool, len + 1);
  2038. rspamd_strlcpy (uri->string, p, len + 1);
  2039. }
  2040. uri->urllen = len;
  2041. for (i = 0; i < UF_MAX; i++) {
  2042. if (u.field_set & (1 << i)) {
  2043. guint shift = u.field_data[i].off;
  2044. complen = u.field_data[i].len;
  2045. if (complen >= G_MAXUINT16) {
  2046. /* Too large component length */
  2047. return URI_ERRNO_BAD_FORMAT;
  2048. }
  2049. switch (i) {
  2050. case UF_SCHEMA:
  2051. uri->protocollen = u.field_data[i].len;
  2052. break;
  2053. case UF_HOST:
  2054. uri->hostshift = shift;
  2055. uri->hostlen = complen;
  2056. break;
  2057. case UF_PATH:
  2058. uri->datashift = shift;
  2059. uri->datalen = complen;
  2060. break;
  2061. case UF_QUERY:
  2062. uri->queryshift = shift;
  2063. uri->querylen = complen;
  2064. break;
  2065. case UF_FRAGMENT:
  2066. uri->fragmentshift = shift;
  2067. uri->fragmentlen = complen;
  2068. break;
  2069. case UF_USERINFO:
  2070. uri->usershift = shift;
  2071. uri->userlen = complen;
  2072. break;
  2073. default:
  2074. break;
  2075. }
  2076. }
  2077. }
  2078. uri->port = u.port;
  2079. uri->flags = flags;
  2080. if (!uri->hostlen) {
  2081. return URI_ERRNO_HOST_MISSING;
  2082. }
  2083. /* Now decode url symbols */
  2084. unquoted_len = rspamd_url_decode (uri->string,
  2085. uri->string,
  2086. uri->protocollen);
  2087. rspamd_url_shift (uri, unquoted_len, UF_SCHEMA);
  2088. unquoted_len = rspamd_url_decode (rspamd_url_host_unsafe (uri),
  2089. rspamd_url_host_unsafe (uri), uri->hostlen);
  2090. if (rspamd_normalise_unicode_inplace (pool,
  2091. rspamd_url_host_unsafe (uri), &unquoted_len)) {
  2092. uri->flags |= RSPAMD_URL_FLAG_UNNORMALISED;
  2093. }
  2094. rspamd_url_shift (uri, unquoted_len, UF_HOST);
  2095. if (rspamd_url_remove_dots (uri)) {
  2096. uri->flags |= RSPAMD_URL_FLAG_OBSCURED;
  2097. }
  2098. if (uri->protocol & (PROTOCOL_HTTP|PROTOCOL_HTTPS|PROTOCOL_MAILTO|PROTOCOL_FTP|PROTOCOL_FILE)) {
  2099. /* Ensure that hostname starts with something sane (exclude numeric urls) */
  2100. const gchar* host = rspamd_url_host_unsafe (uri);
  2101. if (!(is_domain_start (host[0]) || host[0] == ':')) {
  2102. return URI_ERRNO_BAD_FORMAT;
  2103. }
  2104. }
  2105. /* Apply nameprep algorithm */
  2106. static UStringPrepProfile *nameprep = NULL;
  2107. UErrorCode uc_err = U_ZERO_ERROR;
  2108. if (nameprep == NULL) {
  2109. /* Open and cache profile */
  2110. nameprep = usprep_openByType (USPREP_RFC3491_NAMEPREP, &uc_err);
  2111. g_assert (U_SUCCESS (uc_err));
  2112. }
  2113. UChar *utf16_hostname, *norm_utf16;
  2114. gint32 utf16_len, norm_utf16_len, norm_utf8_len;
  2115. UParseError parse_error;
  2116. utf16_hostname = rspamd_mempool_alloc (pool, uri->hostlen * sizeof (UChar));
  2117. struct UConverter *utf8_conv = rspamd_get_utf8_converter ();
  2118. utf16_len = ucnv_toUChars (utf8_conv, utf16_hostname, uri->hostlen,
  2119. rspamd_url_host_unsafe (uri), uri->hostlen, &uc_err);
  2120. if (!U_SUCCESS (uc_err)) {
  2121. return URI_ERRNO_BAD_FORMAT;
  2122. }
  2123. norm_utf16 = rspamd_mempool_alloc (pool, utf16_len * sizeof (UChar));
  2124. norm_utf16_len = usprep_prepare (nameprep, utf16_hostname, utf16_len,
  2125. norm_utf16, utf16_len, USPREP_DEFAULT, &parse_error, &uc_err);
  2126. if (!U_SUCCESS (uc_err)) {
  2127. return URI_ERRNO_BAD_FORMAT;
  2128. }
  2129. /* Convert back to utf8, sigh... */
  2130. norm_utf8_len = ucnv_fromUChars (utf8_conv,
  2131. rspamd_url_host_unsafe (uri), uri->hostlen,
  2132. norm_utf16, norm_utf16_len, &uc_err);
  2133. if (!U_SUCCESS (uc_err)) {
  2134. return URI_ERRNO_BAD_FORMAT;
  2135. }
  2136. /* Final shift of lengths */
  2137. rspamd_url_shift (uri, norm_utf8_len, UF_HOST);
  2138. /* Process data part */
  2139. if (uri->datalen) {
  2140. unquoted_len = rspamd_url_decode (rspamd_url_data_unsafe (uri),
  2141. rspamd_url_data_unsafe (uri), uri->datalen);
  2142. if (rspamd_normalise_unicode_inplace (pool, rspamd_url_data_unsafe (uri),
  2143. &unquoted_len)) {
  2144. uri->flags |= RSPAMD_URL_FLAG_UNNORMALISED;
  2145. }
  2146. rspamd_url_shift (uri, unquoted_len, UF_PATH);
  2147. /* We now normalize path */
  2148. rspamd_http_normalize_path_inplace (rspamd_url_data_unsafe (uri),
  2149. uri->datalen, &unquoted_len);
  2150. rspamd_url_shift (uri, unquoted_len, UF_PATH);
  2151. }
  2152. if (uri->querylen) {
  2153. unquoted_len = rspamd_url_decode (rspamd_url_query_unsafe (uri),
  2154. rspamd_url_query_unsafe (uri),
  2155. uri->querylen);
  2156. if (rspamd_normalise_unicode_inplace (pool, rspamd_url_query_unsafe (uri),
  2157. &unquoted_len)) {
  2158. uri->flags |= RSPAMD_URL_FLAG_UNNORMALISED;
  2159. }
  2160. rspamd_url_shift (uri, unquoted_len, UF_QUERY);
  2161. }
  2162. if (uri->fragmentlen) {
  2163. unquoted_len = rspamd_url_decode (rspamd_url_fragment_unsafe (uri),
  2164. rspamd_url_fragment_unsafe (uri),
  2165. uri->fragmentlen);
  2166. if (rspamd_normalise_unicode_inplace (pool, rspamd_url_fragment_unsafe (uri),
  2167. &unquoted_len)) {
  2168. uri->flags |= RSPAMD_URL_FLAG_UNNORMALISED;
  2169. }
  2170. rspamd_url_shift (uri, unquoted_len, UF_FRAGMENT);
  2171. }
  2172. rspamd_str_lc (uri->string, uri->protocollen);
  2173. unquoted_len = rspamd_str_lc_utf8 (rspamd_url_host_unsafe (uri), uri->hostlen);
  2174. rspamd_url_shift (uri, unquoted_len, UF_HOST);
  2175. if (uri->protocol == PROTOCOL_UNKNOWN) {
  2176. for (i = 0; i < G_N_ELEMENTS (rspamd_url_protocols); i++) {
  2177. if (uri->protocollen == rspamd_url_protocols[i].len) {
  2178. if (memcmp (uri->string,
  2179. rspamd_url_protocols[i].name, uri->protocollen) == 0) {
  2180. uri->protocol = rspamd_url_protocols[i].proto;
  2181. break;
  2182. }
  2183. }
  2184. }
  2185. }
  2186. if (uri->protocol & (PROTOCOL_HTTP|PROTOCOL_HTTPS|PROTOCOL_MAILTO|PROTOCOL_FTP|PROTOCOL_FILE)) {
  2187. /* Find TLD part */
  2188. if (url_scanner->search_trie_full) {
  2189. rspamd_multipattern_lookup (url_scanner->search_trie_full,
  2190. rspamd_url_host_unsafe (uri), uri->hostlen,
  2191. rspamd_tld_trie_callback, uri, NULL);
  2192. }
  2193. if (uri->tldlen == 0) {
  2194. if (!(parse_flags & RSPAMD_URL_PARSE_HREF)) {
  2195. /* Ignore URL's without TLD if it is not a numeric URL */
  2196. if (!rspamd_url_is_ip (uri, pool)) {
  2197. return URI_ERRNO_TLD_MISSING;
  2198. }
  2199. } else {
  2200. if (!rspamd_url_is_ip (uri, pool)) {
  2201. /* Assume tld equal to host */
  2202. uri->tldshift = uri->hostshift;
  2203. uri->tldlen = uri->hostlen;
  2204. }
  2205. else if (uri->flags & RSPAMD_URL_FLAG_SCHEMALESS) {
  2206. /* Ignore urls with both no schema and no tld */
  2207. return URI_ERRNO_TLD_MISSING;
  2208. }
  2209. uri->flags |= RSPAMD_URL_FLAG_NO_TLD;
  2210. }
  2211. }
  2212. /* Replace stupid '\' with '/' after schema */
  2213. if (uri->protocol & (PROTOCOL_HTTP|PROTOCOL_HTTPS|PROTOCOL_FTP) &&
  2214. uri->protocollen > 0 && uri->urllen > uri->protocollen + 2) {
  2215. gchar *pos = &uri->string[uri->protocollen],
  2216. *host_start = rspamd_url_host_unsafe (uri);
  2217. while (pos < host_start) {
  2218. if (*pos == '\\') {
  2219. *pos = '/';
  2220. uri->flags |= RSPAMD_URL_FLAG_OBSCURED;
  2221. }
  2222. pos ++;
  2223. }
  2224. }
  2225. }
  2226. else if (uri->protocol & PROTOCOL_TELEPHONE) {
  2227. /* We need to normalise phone number: remove all spaces and braces */
  2228. rspamd_telephone_normalise_inplace (uri);
  2229. if (rspamd_url_host_unsafe (uri)[0] == '+') {
  2230. uri->tldshift = uri->hostshift + 1;
  2231. uri->tldlen = uri->hostlen - 1;
  2232. }
  2233. else {
  2234. uri->tldshift = uri->hostshift;
  2235. uri->tldlen = uri->hostlen;
  2236. }
  2237. }
  2238. if (uri->protocol == PROTOCOL_UNKNOWN) {
  2239. if (!(parse_flags & RSPAMD_URL_PARSE_HREF)) {
  2240. return URI_ERRNO_INVALID_PROTOCOL;
  2241. }
  2242. else {
  2243. /* Hack, hack, hack */
  2244. uri->protocol = PROTOCOL_UNKNOWN;
  2245. }
  2246. }
  2247. return URI_ERRNO_OK;
  2248. }
  2249. struct tld_trie_cbdata {
  2250. const gchar *begin;
  2251. gsize len;
  2252. rspamd_ftok_t *out;
  2253. };
  2254. static gint
  2255. rspamd_tld_trie_find_callback (struct rspamd_multipattern *mp,
  2256. guint strnum,
  2257. gint match_start,
  2258. gint match_pos,
  2259. const gchar *text,
  2260. gsize len,
  2261. void *context)
  2262. {
  2263. struct url_matcher *matcher;
  2264. const gchar *start, *pos, *p;
  2265. struct tld_trie_cbdata *cbdata = context;
  2266. gint ndots = 1;
  2267. matcher = &g_array_index (url_scanner->matchers_full, struct url_matcher,
  2268. strnum);
  2269. if (matcher->flags & URL_FLAG_STAR_MATCH) {
  2270. /* Skip one more tld component */
  2271. ndots = 2;
  2272. }
  2273. pos = text + match_start;
  2274. p = pos - 1;
  2275. start = text;
  2276. if (*pos != '.' || match_pos != (gint)cbdata->len) {
  2277. /* Something weird has been found */
  2278. if (match_pos != (gint)cbdata->len - 1) {
  2279. /* Search more */
  2280. return 0;
  2281. }
  2282. }
  2283. /* Now we need to find top level domain */
  2284. pos = start;
  2285. while (p >= start && ndots > 0) {
  2286. if (*p == '.') {
  2287. ndots--;
  2288. pos = p + 1;
  2289. }
  2290. else {
  2291. pos = p;
  2292. }
  2293. p--;
  2294. }
  2295. if (ndots == 0 || p == start - 1) {
  2296. if (cbdata->begin + cbdata->len - pos > cbdata->out->len) {
  2297. cbdata->out->begin = pos;
  2298. cbdata->out->len = cbdata->begin + cbdata->len - pos;
  2299. }
  2300. }
  2301. return 0;
  2302. }
  2303. gboolean
  2304. rspamd_url_find_tld (const gchar *in, gsize inlen, rspamd_ftok_t *out)
  2305. {
  2306. struct tld_trie_cbdata cbdata;
  2307. g_assert (in != NULL);
  2308. g_assert (out != NULL);
  2309. g_assert (url_scanner != NULL);
  2310. cbdata.begin = in;
  2311. cbdata.len = inlen;
  2312. cbdata.out = out;
  2313. out->len = 0;
  2314. if (url_scanner->search_trie_full) {
  2315. rspamd_multipattern_lookup (url_scanner->search_trie_full, in, inlen,
  2316. rspamd_tld_trie_find_callback, &cbdata, NULL);
  2317. }
  2318. if (out->len > 0) {
  2319. return TRUE;
  2320. }
  2321. return FALSE;
  2322. }
  2323. static const gchar url_braces[] = {
  2324. '(', ')',
  2325. '{', '}',
  2326. '[', ']',
  2327. '<', '>',
  2328. '|', '|',
  2329. '\'', '\''
  2330. };
  2331. static gboolean
  2332. url_file_start (struct url_callback_data *cb,
  2333. const gchar *pos,
  2334. url_match_t *match)
  2335. {
  2336. match->m_begin = pos;
  2337. if (pos > cb->begin) {
  2338. match->st = *(pos - 1);
  2339. }
  2340. else {
  2341. match->st = '\0';
  2342. }
  2343. return TRUE;
  2344. }
  2345. static gboolean
  2346. url_file_end (struct url_callback_data *cb,
  2347. const gchar *pos,
  2348. url_match_t *match)
  2349. {
  2350. const gchar *p;
  2351. gchar stop;
  2352. guint i;
  2353. p = pos + strlen (match->pattern);
  2354. stop = *p;
  2355. if (*p == '/') {
  2356. p++;
  2357. }
  2358. for (i = 0; i < G_N_ELEMENTS (url_braces) / 2; i += 2) {
  2359. if (*p == url_braces[i]) {
  2360. stop = url_braces[i + 1];
  2361. break;
  2362. }
  2363. }
  2364. while (p < cb->end && *p != stop && is_urlsafe (*p)) {
  2365. p++;
  2366. }
  2367. if (p == cb->begin) {
  2368. return FALSE;
  2369. }
  2370. match->m_len = p - match->m_begin;
  2371. return TRUE;
  2372. }
  2373. static gboolean
  2374. url_tld_start (struct url_callback_data *cb,
  2375. const gchar *pos,
  2376. url_match_t *match)
  2377. {
  2378. const gchar *p = pos;
  2379. guint processed = 0;
  2380. static const guint max_shift = 253 + sizeof ("https://");
  2381. /* Try to find the start of the url by finding any non-urlsafe character or whitespace/punctuation */
  2382. while (p >= cb->begin) {
  2383. if (!is_domain (*p) || g_ascii_isspace (*p) || is_url_start (*p) ||
  2384. p == match->prev_newline_pos) {
  2385. if (!is_url_start (*p) && !g_ascii_isspace (*p) &&
  2386. p != match->prev_newline_pos) {
  2387. return FALSE;
  2388. }
  2389. if (p != match->prev_newline_pos) {
  2390. match->st = *p;
  2391. p++;
  2392. }
  2393. else {
  2394. match->st = '\n';
  2395. }
  2396. if (!g_ascii_isalnum (*p)) {
  2397. /* Urls cannot start with strange symbols */
  2398. return FALSE;
  2399. }
  2400. match->m_begin = p;
  2401. return TRUE;
  2402. }
  2403. else if (p == cb->begin && p != pos) {
  2404. match->st = '\0';
  2405. match->m_begin = p;
  2406. return TRUE;
  2407. }
  2408. else if (*p == '.') {
  2409. if (p == cb->begin) {
  2410. /* Urls cannot start with a dot */
  2411. return FALSE;
  2412. }
  2413. if (!g_ascii_isalnum (p[1])) {
  2414. /* Wrong we have an invalid character after dot */
  2415. return FALSE;
  2416. }
  2417. }
  2418. else if (*p == '/') {
  2419. /* Urls cannot contain '/' in their body */
  2420. return FALSE;
  2421. }
  2422. p--;
  2423. processed ++;
  2424. if (processed > max_shift) {
  2425. /* Too long */
  2426. return FALSE;
  2427. }
  2428. }
  2429. return FALSE;
  2430. }
  2431. static gboolean
  2432. url_tld_end (struct url_callback_data *cb,
  2433. const gchar *pos,
  2434. url_match_t *match)
  2435. {
  2436. const gchar *p;
  2437. gboolean ret = FALSE;
  2438. p = pos + match->m_len;
  2439. if (p == cb->end) {
  2440. match->m_len = p - match->m_begin;
  2441. return TRUE;
  2442. }
  2443. else if (*p == '/' || *p == ':' || is_url_end (*p) || is_lwsp (*p) ||
  2444. (match->st != '<' && p == match->newline_pos)) {
  2445. /* Parse arguments, ports by normal way by url default function */
  2446. p = match->m_begin;
  2447. /* Check common prefix */
  2448. if (g_ascii_strncasecmp (p, "http://", sizeof ("http://") - 1) == 0) {
  2449. ret = url_web_end (cb,
  2450. match->m_begin + sizeof ("http://") - 1,
  2451. match);
  2452. }
  2453. else {
  2454. ret = url_web_end (cb, match->m_begin, match);
  2455. }
  2456. }
  2457. else if (*p == '.') {
  2458. p++;
  2459. if (p < cb->end) {
  2460. if (g_ascii_isspace (*p) || *p == '/' ||
  2461. *p == '?' || *p == ':') {
  2462. ret = url_web_end (cb, match->m_begin, match);
  2463. }
  2464. }
  2465. }
  2466. if (ret) {
  2467. /* Check sanity of match found */
  2468. if (match->m_begin + match->m_len <= pos) {
  2469. return FALSE;
  2470. }
  2471. }
  2472. return ret;
  2473. }
  2474. static gboolean
  2475. url_web_start (struct url_callback_data *cb,
  2476. const gchar *pos,
  2477. url_match_t *match)
  2478. {
  2479. /* Check what we have found */
  2480. if (pos > cb->begin) {
  2481. if (g_ascii_strncasecmp (pos, "www", 3) == 0) {
  2482. if (!(is_url_start (*(pos - 1)) ||
  2483. g_ascii_isspace (*(pos - 1)) ||
  2484. pos - 1 == match->prev_newline_pos ||
  2485. (*(pos - 1) & 0x80))) { /* Chinese trick */
  2486. return FALSE;
  2487. }
  2488. }
  2489. else {
  2490. guchar prev = *(pos - 1);
  2491. if (g_ascii_isalnum (prev)) {
  2492. /* Part of another url */
  2493. return FALSE;
  2494. }
  2495. }
  2496. }
  2497. if (*pos == '.') {
  2498. /* Urls cannot start with . */
  2499. return FALSE;
  2500. }
  2501. if (pos > cb->begin) {
  2502. match->st = *(pos - 1);
  2503. }
  2504. else {
  2505. match->st = '\0';
  2506. }
  2507. match->m_begin = pos;
  2508. return TRUE;
  2509. }
  2510. static gboolean
  2511. url_web_end (struct url_callback_data *cb,
  2512. const gchar *pos,
  2513. url_match_t *match)
  2514. {
  2515. const gchar *last = NULL;
  2516. gint len = cb->end - pos;
  2517. guint flags = 0;
  2518. if (match->newline_pos && match->st != '<') {
  2519. /* We should also limit our match end to the newline */
  2520. len = MIN (len, match->newline_pos - pos);
  2521. }
  2522. if (rspamd_web_parse (NULL, pos, len, &last,
  2523. RSPAMD_URL_PARSE_CHECK, &flags) != 0) {
  2524. return FALSE;
  2525. }
  2526. if (last < cb->end && (*last == '>' && last != match->newline_pos)) {
  2527. /* We need to ensure that url also starts with '>' */
  2528. if (match->st != '<') {
  2529. return FALSE;
  2530. }
  2531. }
  2532. match->m_len = (last - pos);
  2533. cb->fin = last + 1;
  2534. return TRUE;
  2535. }
  2536. static gboolean
  2537. url_email_start (struct url_callback_data *cb,
  2538. const gchar *pos,
  2539. url_match_t *match)
  2540. {
  2541. if (!match->prefix || match->prefix[0] == '\0') {
  2542. /* We have mailto:// at the beginning */
  2543. match->m_begin = pos;
  2544. if (pos >= cb->begin + 1) {
  2545. match->st = *(pos - 1);
  2546. }
  2547. else {
  2548. match->st = '\0';
  2549. }
  2550. }
  2551. else {
  2552. /* Just '@' */
  2553. /* Check if this match is a part of the previous mailto: email */
  2554. if (cb->last_at != NULL && cb->last_at == pos) {
  2555. cb->last_at = NULL;
  2556. return FALSE;
  2557. }
  2558. else if (pos == cb->begin) {
  2559. /* Just @ at the start of input */
  2560. return FALSE;
  2561. }
  2562. match->st = '\0';
  2563. }
  2564. return TRUE;
  2565. }
  2566. static gboolean
  2567. url_email_end (struct url_callback_data *cb,
  2568. const gchar *pos,
  2569. url_match_t *match)
  2570. {
  2571. const gchar *last = NULL;
  2572. struct http_parser_url u;
  2573. gint len = cb->end - pos;
  2574. guint flags = 0;
  2575. if (match->newline_pos && match->st != '<') {
  2576. /* We should also limit our match end to the newline */
  2577. len = MIN (len, match->newline_pos - pos);
  2578. }
  2579. if (!match->prefix || match->prefix[0] == '\0') {
  2580. /* We have mailto:// at the beginning */
  2581. if (rspamd_mailto_parse (&u, pos, len, &last,
  2582. RSPAMD_URL_PARSE_CHECK, &flags) != 0) {
  2583. return FALSE;
  2584. }
  2585. if (!(u.field_set & (1 << UF_USERINFO))) {
  2586. return FALSE;
  2587. }
  2588. cb->last_at = match->m_begin + u.field_data[UF_USERINFO].off +
  2589. u.field_data[UF_USERINFO].len;
  2590. g_assert (*cb->last_at == '@');
  2591. match->m_len = (last - pos);
  2592. return TRUE;
  2593. }
  2594. else {
  2595. const gchar *c, *p;
  2596. /*
  2597. * Here we have just '@', so we need to find both start and end of the
  2598. * pattern
  2599. */
  2600. g_assert (*pos == '@');
  2601. if (pos >= cb->end - 2 || pos < cb->begin + 1) {
  2602. /* Boundary violation */
  2603. return FALSE;
  2604. }
  2605. if (!g_ascii_isalnum (pos[1]) || !g_ascii_isalnum (*(pos - 1))) {
  2606. return FALSE;
  2607. }
  2608. c = pos - 1;
  2609. while (c > cb->begin) {
  2610. if (!is_mailsafe (*c)) {
  2611. break;
  2612. }
  2613. if (c == match->prev_newline_pos) {
  2614. break;
  2615. }
  2616. c --;
  2617. }
  2618. /* Rewind to the first alphanumeric character */
  2619. while (c < pos && !g_ascii_isalnum (*c)) {
  2620. c ++;
  2621. }
  2622. /* Find the end of email */
  2623. p = pos + 1;
  2624. while (p < cb->end && is_domain (*p)) {
  2625. if (p == match->newline_pos) {
  2626. break;
  2627. }
  2628. p ++;
  2629. }
  2630. /* Rewind it again to avoid bad emails to be detected */
  2631. while (p > pos && p < cb->end && !g_ascii_isalnum (*p)) {
  2632. p --;
  2633. }
  2634. if (p < cb->end && g_ascii_isalnum (*p) &&
  2635. (match->newline_pos == NULL || p < match->newline_pos)) {
  2636. p ++;
  2637. }
  2638. if (p > c) {
  2639. match->m_begin = c;
  2640. match->m_len = p - c;
  2641. return TRUE;
  2642. }
  2643. }
  2644. return FALSE;
  2645. }
  2646. static gboolean
  2647. url_tel_start (struct url_callback_data *cb,
  2648. const gchar *pos,
  2649. url_match_t *match)
  2650. {
  2651. match->m_begin = pos;
  2652. if (pos >= cb->begin + 1) {
  2653. match->st = *(pos - 1);
  2654. }
  2655. else {
  2656. match->st = '\0';
  2657. }
  2658. return TRUE;
  2659. }
  2660. static gboolean
  2661. url_tel_end (struct url_callback_data *cb,
  2662. const gchar *pos,
  2663. url_match_t *match)
  2664. {
  2665. const gchar *last = NULL;
  2666. struct http_parser_url u;
  2667. gint len = cb->end - pos;
  2668. guint flags = 0;
  2669. if (match->newline_pos && match->st != '<') {
  2670. /* We should also limit our match end to the newline */
  2671. len = MIN (len, match->newline_pos - pos);
  2672. }
  2673. if (rspamd_telephone_parse (&u, pos, len, &last,
  2674. RSPAMD_URL_PARSE_CHECK, &flags) != 0) {
  2675. return FALSE;
  2676. }
  2677. if (!(u.field_set & (1 << UF_HOST))) {
  2678. return FALSE;
  2679. }
  2680. match->m_len = (last - pos);
  2681. return TRUE;
  2682. }
  2683. static gboolean
  2684. rspamd_url_trie_is_match (struct url_matcher *matcher, const gchar *pos,
  2685. const gchar *end, const gchar *newline_pos)
  2686. {
  2687. if (matcher->flags & URL_FLAG_TLD_MATCH) {
  2688. /* Immediately check pos for valid chars */
  2689. if (pos < end) {
  2690. if (pos != newline_pos && !g_ascii_isspace (*pos)
  2691. && *pos != '/' && *pos != '?' &&
  2692. *pos != ':' && !is_url_end (*pos)) {
  2693. if (*pos == '.') {
  2694. /* We allow . at the end of the domain however */
  2695. pos++;
  2696. if (pos < end) {
  2697. if (!g_ascii_isspace (*pos) && *pos != '/' &&
  2698. *pos != '?' && *pos != ':' && !is_url_end (*pos)) {
  2699. return FALSE;
  2700. }
  2701. }
  2702. }
  2703. else {
  2704. return FALSE;
  2705. }
  2706. }
  2707. }
  2708. }
  2709. return TRUE;
  2710. }
  2711. static gint
  2712. rspamd_url_trie_callback (struct rspamd_multipattern *mp,
  2713. guint strnum,
  2714. gint match_start,
  2715. gint match_pos,
  2716. const gchar *text,
  2717. gsize len,
  2718. void *context)
  2719. {
  2720. struct url_matcher *matcher;
  2721. url_match_t m;
  2722. const gchar *pos, *newline_pos = NULL;
  2723. struct url_callback_data *cb = context;
  2724. pos = text + match_pos;
  2725. if (cb->fin > pos) {
  2726. /* Already seen */
  2727. return 0;
  2728. }
  2729. matcher = &g_array_index (cb->matchers, struct url_matcher,
  2730. strnum);
  2731. if ((matcher->flags & URL_FLAG_NOHTML) && cb->how == RSPAMD_URL_FIND_STRICT) {
  2732. /* Do not try to match non-html like urls in html texts */
  2733. return 0;
  2734. }
  2735. memset (&m, 0, sizeof (m));
  2736. m.m_begin = text + match_start;
  2737. m.m_len = match_pos - match_start;
  2738. if (cb->newlines && cb->newlines->len > 0) {
  2739. newline_pos = g_ptr_array_index (cb->newlines, cb->newline_idx);
  2740. while (pos > newline_pos && cb->newline_idx < cb->newlines->len) {
  2741. cb->newline_idx ++;
  2742. newline_pos = g_ptr_array_index (cb->newlines, cb->newline_idx);
  2743. }
  2744. if (pos > newline_pos) {
  2745. newline_pos = NULL;
  2746. }
  2747. if (cb->newline_idx > 0) {
  2748. m.prev_newline_pos = g_ptr_array_index (cb->newlines,
  2749. cb->newline_idx - 1);
  2750. }
  2751. }
  2752. if (!rspamd_url_trie_is_match (matcher, pos, cb->end, newline_pos)) {
  2753. return 0;
  2754. }
  2755. m.pattern = matcher->pattern;
  2756. m.prefix = matcher->prefix;
  2757. m.add_prefix = FALSE;
  2758. m.newline_pos = newline_pos;
  2759. pos = cb->begin + match_start;
  2760. if (matcher->start (cb, pos, &m) &&
  2761. matcher->end (cb, pos, &m)) {
  2762. if (m.add_prefix || matcher->prefix[0] != '\0') {
  2763. cb->len = m.m_len + strlen (matcher->prefix);
  2764. cb->url_str = rspamd_mempool_alloc (cb->pool, cb->len + 1);
  2765. cb->len = rspamd_snprintf (cb->url_str,
  2766. cb->len + 1,
  2767. "%s%*s",
  2768. m.prefix,
  2769. (gint)m.m_len,
  2770. m.m_begin);
  2771. cb->prefix_added = TRUE;
  2772. }
  2773. else {
  2774. cb->url_str = rspamd_mempool_alloc (cb->pool, m.m_len + 1);
  2775. rspamd_strlcpy (cb->url_str, m.m_begin, m.m_len + 1);
  2776. }
  2777. cb->start = m.m_begin;
  2778. if (pos > cb->fin) {
  2779. cb->fin = pos;
  2780. }
  2781. return 1;
  2782. }
  2783. else {
  2784. cb->url_str = NULL;
  2785. }
  2786. /* Continue search */
  2787. return 0;
  2788. }
  2789. gboolean
  2790. rspamd_url_find (rspamd_mempool_t *pool,
  2791. const gchar *begin, gsize len,
  2792. gchar **url_str,
  2793. enum rspamd_url_find_type how,
  2794. goffset *url_pos,
  2795. gboolean *prefix_added)
  2796. {
  2797. struct url_callback_data cb;
  2798. gint ret;
  2799. memset (&cb, 0, sizeof (cb));
  2800. cb.begin = begin;
  2801. cb.end = begin + len;
  2802. cb.how = how;
  2803. cb.pool = pool;
  2804. if (how == RSPAMD_URL_FIND_ALL) {
  2805. if (url_scanner->search_trie_full) {
  2806. cb.matchers = url_scanner->matchers_full;
  2807. ret = rspamd_multipattern_lookup (url_scanner->search_trie_full,
  2808. begin, len,
  2809. rspamd_url_trie_callback, &cb, NULL);
  2810. }
  2811. else {
  2812. cb.matchers = url_scanner->matchers_strict;
  2813. ret = rspamd_multipattern_lookup (url_scanner->search_trie_strict,
  2814. begin, len,
  2815. rspamd_url_trie_callback, &cb, NULL);
  2816. }
  2817. }
  2818. else {
  2819. cb.matchers = url_scanner->matchers_strict;
  2820. ret = rspamd_multipattern_lookup (url_scanner->search_trie_strict,
  2821. begin, len,
  2822. rspamd_url_trie_callback, &cb, NULL);
  2823. }
  2824. if (ret) {
  2825. if (url_str) {
  2826. *url_str = cb.url_str;
  2827. }
  2828. if (url_pos) {
  2829. *url_pos = cb.start - begin;
  2830. }
  2831. if (prefix_added) {
  2832. *prefix_added = cb.prefix_added;
  2833. }
  2834. return TRUE;
  2835. }
  2836. return FALSE;
  2837. }
  2838. static gint
  2839. rspamd_url_trie_generic_callback_common (struct rspamd_multipattern *mp,
  2840. guint strnum,
  2841. gint match_start,
  2842. gint match_pos,
  2843. const gchar *text,
  2844. gsize len,
  2845. void *context,
  2846. gboolean multiple)
  2847. {
  2848. struct rspamd_url *url;
  2849. struct url_matcher *matcher;
  2850. url_match_t m;
  2851. const gchar *pos, *newline_pos = NULL;
  2852. struct url_callback_data *cb = context;
  2853. gint rc;
  2854. rspamd_mempool_t *pool;
  2855. pos = text + match_pos;
  2856. if (cb->fin > pos) {
  2857. /* Already seen */
  2858. return 0;
  2859. }
  2860. matcher = &g_array_index (cb->matchers, struct url_matcher,
  2861. strnum);
  2862. pool = cb->pool;
  2863. if ((matcher->flags & URL_FLAG_NOHTML) && cb->how == RSPAMD_URL_FIND_STRICT) {
  2864. /* Do not try to match non-html like urls in html texts, continue matching */
  2865. return 0;
  2866. }
  2867. memset (&m, 0, sizeof (m));
  2868. /* Find the next newline after our pos */
  2869. if (cb->newlines && cb->newlines->len > 0) {
  2870. newline_pos = g_ptr_array_index (cb->newlines, cb->newline_idx);
  2871. while (pos > newline_pos && cb->newline_idx < cb->newlines->len - 1) {
  2872. cb->newline_idx ++;
  2873. newline_pos = g_ptr_array_index (cb->newlines, cb->newline_idx);
  2874. }
  2875. if (pos > newline_pos) {
  2876. newline_pos = NULL;
  2877. }
  2878. if (cb->newline_idx > 0) {
  2879. m.prev_newline_pos = g_ptr_array_index (cb->newlines,
  2880. cb->newline_idx - 1);
  2881. }
  2882. }
  2883. if (!rspamd_url_trie_is_match (matcher, pos, text + len, newline_pos)) {
  2884. /* Mismatch, continue */
  2885. return 0;
  2886. }
  2887. pos = cb->begin + match_start;
  2888. m.pattern = matcher->pattern;
  2889. m.prefix = matcher->prefix;
  2890. m.add_prefix = FALSE;
  2891. m.m_begin = text + match_start;
  2892. m.m_len = match_pos - match_start;
  2893. m.newline_pos = newline_pos;
  2894. if (matcher->start (cb, pos, &m) &&
  2895. matcher->end (cb, pos, &m)) {
  2896. if (m.add_prefix || matcher->prefix[0] != '\0') {
  2897. cb->len = m.m_len + strlen (matcher->prefix);
  2898. cb->url_str = rspamd_mempool_alloc (cb->pool, cb->len + 1);
  2899. cb->len = rspamd_snprintf (cb->url_str,
  2900. cb->len + 1,
  2901. "%s%*s",
  2902. m.prefix,
  2903. (gint)m.m_len,
  2904. m.m_begin);
  2905. cb->prefix_added = TRUE;
  2906. }
  2907. else {
  2908. cb->url_str = rspamd_mempool_alloc (cb->pool, m.m_len + 1);
  2909. cb->len = rspamd_strlcpy (cb->url_str, m.m_begin, m.m_len + 1);
  2910. }
  2911. cb->start = m.m_begin;
  2912. if (pos > cb->fin) {
  2913. cb->fin = pos;
  2914. }
  2915. url = rspamd_mempool_alloc0 (pool, sizeof (struct rspamd_url));
  2916. g_strstrip (cb->url_str);
  2917. rc = rspamd_url_parse (url, cb->url_str,
  2918. strlen (cb->url_str), pool,
  2919. RSPAMD_URL_PARSE_TEXT);
  2920. if (rc == URI_ERRNO_OK && url->hostlen > 0) {
  2921. if (cb->prefix_added) {
  2922. url->flags |= RSPAMD_URL_FLAG_SCHEMALESS;
  2923. cb->prefix_added = FALSE;
  2924. }
  2925. if (cb->func) {
  2926. if (!cb->func (url, cb->start - text, (m.m_begin + m.m_len) - text,
  2927. cb->funcd)) {
  2928. /* We need to stop here in any case! */
  2929. return -1;
  2930. }
  2931. }
  2932. }
  2933. else if (rc != URI_ERRNO_OK) {
  2934. msg_debug_pool_check ("extract of url '%s' failed: %s",
  2935. cb->url_str,
  2936. rspamd_url_strerror (rc));
  2937. }
  2938. }
  2939. else {
  2940. cb->url_str = NULL;
  2941. /* Continue search if no pattern has been found */
  2942. return 0;
  2943. }
  2944. /* Continue search if required (return 0 means continue) */
  2945. return !multiple;
  2946. }
  2947. static gint
  2948. rspamd_url_trie_generic_callback_multiple (struct rspamd_multipattern *mp,
  2949. guint strnum,
  2950. gint match_start,
  2951. gint match_pos,
  2952. const gchar *text,
  2953. gsize len,
  2954. void *context)
  2955. {
  2956. return rspamd_url_trie_generic_callback_common (mp, strnum, match_start,
  2957. match_pos, text, len, context, TRUE);
  2958. }
  2959. static gint
  2960. rspamd_url_trie_generic_callback_single (struct rspamd_multipattern *mp,
  2961. guint strnum,
  2962. gint match_start,
  2963. gint match_pos,
  2964. const gchar *text,
  2965. gsize len,
  2966. void *context)
  2967. {
  2968. return rspamd_url_trie_generic_callback_common (mp, strnum, match_start,
  2969. match_pos, text, len, context, FALSE);
  2970. }
  2971. struct rspamd_url_mimepart_cbdata {
  2972. struct rspamd_task *task;
  2973. struct rspamd_mime_text_part *part;
  2974. gsize url_len;
  2975. };
  2976. static gboolean
  2977. rspamd_url_query_callback (struct rspamd_url *url, gsize start_offset,
  2978. gsize end_offset, gpointer ud)
  2979. {
  2980. struct rspamd_url_mimepart_cbdata *cbd =
  2981. (struct rspamd_url_mimepart_cbdata *)ud;
  2982. struct rspamd_task *task;
  2983. task = cbd->task;
  2984. if (url->protocol == PROTOCOL_MAILTO) {
  2985. if (url->userlen == 0) {
  2986. return FALSE;
  2987. }
  2988. }
  2989. /* Also check max urls */
  2990. if (cbd->task->cfg && cbd->task->cfg->max_urls > 0) {
  2991. if (kh_size (MESSAGE_FIELD (task, urls)) > cbd->task->cfg->max_urls) {
  2992. msg_err_task ("part has too many URLs, we cannot process more: "
  2993. "%d urls extracted ",
  2994. (guint)kh_size (MESSAGE_FIELD (task, urls)));
  2995. return FALSE;
  2996. }
  2997. }
  2998. url->flags |= RSPAMD_URL_FLAG_QUERY;
  2999. if (rspamd_url_set_add_or_increase(MESSAGE_FIELD (task, urls), url, false)) {
  3000. if (cbd->part && cbd->part->mime_part->urls) {
  3001. g_ptr_array_add (cbd->part->mime_part->urls, url);
  3002. }
  3003. }
  3004. return TRUE;
  3005. }
  3006. static gboolean
  3007. rspamd_url_text_part_callback (struct rspamd_url *url, gsize start_offset,
  3008. gsize end_offset, gpointer ud)
  3009. {
  3010. struct rspamd_url_mimepart_cbdata *cbd =
  3011. (struct rspamd_url_mimepart_cbdata *)ud;
  3012. struct rspamd_process_exception *ex;
  3013. struct rspamd_task *task;
  3014. task = cbd->task;
  3015. ex = rspamd_mempool_alloc0 (task->task_pool, sizeof (struct rspamd_process_exception));
  3016. ex->pos = start_offset;
  3017. ex->len = end_offset - start_offset;
  3018. ex->type = RSPAMD_EXCEPTION_URL;
  3019. ex->ptr = url;
  3020. cbd->url_len += ex->len;
  3021. if (cbd->part->utf_stripped_content &&
  3022. cbd->url_len > cbd->part->utf_stripped_content->len * 10) {
  3023. /* Absurd case, stop here now */
  3024. msg_err_task ("part has too many URLs, we cannot process more: %z url len; "
  3025. "%d stripped content length",
  3026. cbd->url_len, cbd->part->utf_stripped_content->len);
  3027. return FALSE;
  3028. }
  3029. if (url->protocol == PROTOCOL_MAILTO) {
  3030. if (url->userlen == 0) {
  3031. return FALSE;
  3032. }
  3033. }
  3034. /* Also check max urls */
  3035. if (cbd->task->cfg && cbd->task->cfg->max_urls > 0) {
  3036. if (kh_size (MESSAGE_FIELD (task, urls)) > cbd->task->cfg->max_urls) {
  3037. msg_err_task ("part has too many URLs, we cannot process more: "
  3038. "%d urls extracted ",
  3039. (guint)kh_size (MESSAGE_FIELD (task, urls)));
  3040. return FALSE;
  3041. }
  3042. }
  3043. url->flags |= RSPAMD_URL_FLAG_FROM_TEXT;
  3044. if (rspamd_url_set_add_or_increase(MESSAGE_FIELD (task, urls), url, false) &&
  3045. cbd->part->mime_part->urls) {
  3046. g_ptr_array_add (cbd->part->mime_part->urls, url);
  3047. }
  3048. cbd->part->exceptions = g_list_prepend (
  3049. cbd->part->exceptions,
  3050. ex);
  3051. /* We also search the query for additional url inside */
  3052. if (url->querylen > 0) {
  3053. rspamd_url_find_multiple (task->task_pool,
  3054. rspamd_url_query_unsafe (url), url->querylen,
  3055. RSPAMD_URL_FIND_ALL, NULL,
  3056. rspamd_url_query_callback, cbd);
  3057. }
  3058. return TRUE;
  3059. }
  3060. void
  3061. rspamd_url_text_extract (rspamd_mempool_t *pool,
  3062. struct rspamd_task *task,
  3063. struct rspamd_mime_text_part *part,
  3064. enum rspamd_url_find_type how)
  3065. {
  3066. struct rspamd_url_mimepart_cbdata mcbd;
  3067. if (part->utf_stripped_content == NULL || part->utf_stripped_content->len == 0) {
  3068. msg_warn_task ("got empty text part");
  3069. return;
  3070. }
  3071. mcbd.task = task;
  3072. mcbd.part = part;
  3073. mcbd.url_len = 0;
  3074. rspamd_url_find_multiple (task->task_pool, part->utf_stripped_content->data,
  3075. part->utf_stripped_content->len, how, part->newlines,
  3076. rspamd_url_text_part_callback, &mcbd);
  3077. g_ptr_array_sort (part->mime_part->urls, rspamd_url_cmp_qsort);
  3078. }
  3079. void
  3080. rspamd_url_find_multiple (rspamd_mempool_t *pool,
  3081. const gchar *in,
  3082. gsize inlen,
  3083. enum rspamd_url_find_type how,
  3084. GPtrArray *nlines,
  3085. url_insert_function func,
  3086. gpointer ud)
  3087. {
  3088. struct url_callback_data cb;
  3089. g_assert (in != NULL);
  3090. if (inlen == 0) {
  3091. inlen = strlen (in);
  3092. }
  3093. memset (&cb, 0, sizeof (cb));
  3094. cb.begin = in;
  3095. cb.end = in + inlen;
  3096. cb.how = how;
  3097. cb.pool = pool;
  3098. cb.funcd = ud;
  3099. cb.func = func;
  3100. cb.newlines = nlines;
  3101. if (how == RSPAMD_URL_FIND_ALL) {
  3102. if (url_scanner->search_trie_full) {
  3103. cb.matchers = url_scanner->matchers_full;
  3104. rspamd_multipattern_lookup (url_scanner->search_trie_full,
  3105. in, inlen,
  3106. rspamd_url_trie_generic_callback_multiple, &cb, NULL);
  3107. }
  3108. else {
  3109. cb.matchers = url_scanner->matchers_strict;
  3110. rspamd_multipattern_lookup (url_scanner->search_trie_strict,
  3111. in, inlen,
  3112. rspamd_url_trie_generic_callback_multiple, &cb, NULL);
  3113. }
  3114. }
  3115. else {
  3116. cb.matchers = url_scanner->matchers_strict;
  3117. rspamd_multipattern_lookup (url_scanner->search_trie_strict,
  3118. in, inlen,
  3119. rspamd_url_trie_generic_callback_multiple, &cb, NULL);
  3120. }
  3121. }
  3122. void
  3123. rspamd_url_find_single (rspamd_mempool_t *pool,
  3124. const gchar *in,
  3125. gsize inlen,
  3126. enum rspamd_url_find_type how,
  3127. url_insert_function func,
  3128. gpointer ud)
  3129. {
  3130. struct url_callback_data cb;
  3131. g_assert (in != NULL);
  3132. if (inlen == 0) {
  3133. inlen = strlen (in);
  3134. }
  3135. memset (&cb, 0, sizeof (cb));
  3136. cb.begin = in;
  3137. cb.end = in + inlen;
  3138. cb.how = how;
  3139. cb.pool = pool;
  3140. cb.funcd = ud;
  3141. cb.func = func;
  3142. if (how == RSPAMD_URL_FIND_ALL) {
  3143. if (url_scanner->search_trie_full) {
  3144. cb.matchers = url_scanner->matchers_full;
  3145. rspamd_multipattern_lookup (url_scanner->search_trie_full,
  3146. in, inlen,
  3147. rspamd_url_trie_generic_callback_single, &cb, NULL);
  3148. }
  3149. else {
  3150. cb.matchers = url_scanner->matchers_strict;
  3151. rspamd_multipattern_lookup (url_scanner->search_trie_strict,
  3152. in, inlen,
  3153. rspamd_url_trie_generic_callback_single, &cb, NULL);
  3154. }
  3155. }
  3156. else {
  3157. cb.matchers = url_scanner->matchers_strict;
  3158. rspamd_multipattern_lookup (url_scanner->search_trie_strict,
  3159. in, inlen,
  3160. rspamd_url_trie_generic_callback_single, &cb, NULL);
  3161. }
  3162. }
  3163. gboolean
  3164. rspamd_url_task_subject_callback (struct rspamd_url *url, gsize start_offset,
  3165. gsize end_offset, gpointer ud)
  3166. {
  3167. struct rspamd_task *task = ud;
  3168. gchar *url_str = NULL;
  3169. struct rspamd_url *query_url;
  3170. gint rc;
  3171. gboolean prefix_added;
  3172. /* It is just a displayed URL, we should not check it for certain things */
  3173. url->flags |= RSPAMD_URL_FLAG_HTML_DISPLAYED|RSPAMD_URL_FLAG_SUBJECT;
  3174. if (url->protocol == PROTOCOL_MAILTO) {
  3175. if (url->userlen == 0) {
  3176. return FALSE;
  3177. }
  3178. }
  3179. rspamd_url_set_add_or_increase(MESSAGE_FIELD (task, urls), url, false);
  3180. /* We also search the query for additional url inside */
  3181. if (url->querylen > 0) {
  3182. if (rspamd_url_find (task->task_pool, rspamd_url_query_unsafe (url), url->querylen,
  3183. &url_str, RSPAMD_URL_FIND_ALL, NULL, &prefix_added)) {
  3184. query_url = rspamd_mempool_alloc0 (task->task_pool,
  3185. sizeof (struct rspamd_url));
  3186. rc = rspamd_url_parse (query_url,
  3187. url_str,
  3188. strlen (url_str),
  3189. task->task_pool,
  3190. RSPAMD_URL_PARSE_TEXT);
  3191. if (rc == URI_ERRNO_OK &&
  3192. url->hostlen > 0) {
  3193. msg_debug_task ("found url %s in query of url"
  3194. " %*s", url_str, url->querylen, rspamd_url_query_unsafe (url));
  3195. if (prefix_added) {
  3196. query_url->flags |= RSPAMD_URL_FLAG_SCHEMALESS;
  3197. }
  3198. if (query_url->protocol == PROTOCOL_MAILTO) {
  3199. if (query_url->userlen == 0) {
  3200. return TRUE;
  3201. }
  3202. }
  3203. rspamd_url_set_add_or_increase(MESSAGE_FIELD (task, urls),
  3204. query_url, false);
  3205. }
  3206. }
  3207. }
  3208. return TRUE;
  3209. }
  3210. static inline khint_t
  3211. rspamd_url_hash (struct rspamd_url *url)
  3212. {
  3213. if (url->urllen > 0) {
  3214. return (khint_t)rspamd_cryptobox_fast_hash (url->string, url->urllen,
  3215. rspamd_hash_seed ());
  3216. }
  3217. return 0;
  3218. }
  3219. static inline khint_t
  3220. rspamd_url_host_hash (struct rspamd_url *url)
  3221. {
  3222. if (url->hostlen > 0) {
  3223. return (khint_t)rspamd_cryptobox_fast_hash (rspamd_url_host_unsafe (url),
  3224. url->hostlen,
  3225. rspamd_hash_seed ());
  3226. }
  3227. return 0;
  3228. }
  3229. /* Compare two emails for building emails tree */
  3230. static inline bool
  3231. rspamd_emails_cmp (struct rspamd_url *u1, struct rspamd_url *u2)
  3232. {
  3233. gint r;
  3234. if (u1->hostlen != u2->hostlen || u1->hostlen == 0) {
  3235. return FALSE;
  3236. }
  3237. else {
  3238. if ((r = rspamd_lc_cmp (rspamd_url_host_unsafe (u1),
  3239. rspamd_url_host_unsafe (u2), u1->hostlen)) == 0) {
  3240. if (u1->userlen != u2->userlen || u1->userlen == 0) {
  3241. return FALSE;
  3242. }
  3243. else {
  3244. return (rspamd_lc_cmp (rspamd_url_user_unsafe(u1),
  3245. rspamd_url_user_unsafe(u2),
  3246. u1->userlen) == 0);
  3247. }
  3248. }
  3249. else {
  3250. return r == 0;
  3251. }
  3252. }
  3253. return FALSE;
  3254. }
  3255. static inline bool
  3256. rspamd_urls_cmp (struct rspamd_url *u1, struct rspamd_url *u2)
  3257. {
  3258. int r = 0;
  3259. if (u1->protocol != u2->protocol || u1->urllen != u2->urllen) {
  3260. return false;
  3261. }
  3262. else {
  3263. if (u1->protocol & PROTOCOL_MAILTO) {
  3264. return rspamd_emails_cmp (u1, u2);
  3265. }
  3266. r = memcmp (u1->string, u2->string, u1->urllen);
  3267. }
  3268. return r == 0;
  3269. }
  3270. static inline bool
  3271. rspamd_urls_host_cmp (struct rspamd_url *u1, struct rspamd_url *u2)
  3272. {
  3273. int r = 0;
  3274. if (u1->hostlen != u2->hostlen) {
  3275. return false;
  3276. }
  3277. else {
  3278. r = memcmp (rspamd_url_host_unsafe (u1), rspamd_url_host_unsafe (u2),
  3279. u1->hostlen);
  3280. }
  3281. return r == 0;
  3282. }
  3283. gsize
  3284. rspamd_url_decode (gchar *dst, const gchar *src, gsize size)
  3285. {
  3286. gchar *d, ch, c, decoded;
  3287. const gchar *s;
  3288. enum {
  3289. sw_usual = 0,
  3290. sw_quoted,
  3291. sw_quoted_second
  3292. } state;
  3293. d = dst;
  3294. s = src;
  3295. state = 0;
  3296. decoded = 0;
  3297. while (size--) {
  3298. ch = *s++;
  3299. switch (state) {
  3300. case sw_usual:
  3301. if (ch == '%') {
  3302. state = sw_quoted;
  3303. break;
  3304. }
  3305. else if (ch == '+') {
  3306. *d++ = ' ';
  3307. }
  3308. else {
  3309. *d++ = ch;
  3310. }
  3311. break;
  3312. case sw_quoted:
  3313. if (ch >= '0' && ch <= '9') {
  3314. decoded = (ch - '0');
  3315. state = sw_quoted_second;
  3316. break;
  3317. }
  3318. c = (ch | 0x20);
  3319. if (c >= 'a' && c <= 'f') {
  3320. decoded = (c - 'a' + 10);
  3321. state = sw_quoted_second;
  3322. break;
  3323. }
  3324. /* the invalid quoted character */
  3325. state = sw_usual;
  3326. *d++ = ch;
  3327. break;
  3328. case sw_quoted_second:
  3329. state = sw_usual;
  3330. if (ch >= '0' && ch <= '9') {
  3331. ch = ((decoded << 4) + ch - '0');
  3332. *d++ = ch;
  3333. break;
  3334. }
  3335. c = (u_char) (ch | 0x20);
  3336. if (c >= 'a' && c <= 'f') {
  3337. ch = ((decoded << 4) + c - 'a' + 10);
  3338. *d++ = ch;
  3339. break;
  3340. }
  3341. /* the invalid quoted character */
  3342. break;
  3343. }
  3344. }
  3345. return (d - dst);
  3346. }
  3347. enum rspamd_url_char_class {
  3348. RSPAMD_URL_UNRESERVED = (1 << 0),
  3349. RSPAMD_URL_SUBDELIM = (1 << 1),
  3350. RSPAMD_URL_PATHSAFE = (1 << 2),
  3351. RSPAMD_URL_QUERYSAFE = (1 << 3),
  3352. RSPAMD_URL_FRAGMENTSAFE = (1 << 4),
  3353. RSPAMD_URL_HOSTSAFE = (1 << 5),
  3354. RSPAMD_URL_USERSAFE = (1 << 6),
  3355. };
  3356. #define RSPAMD_URL_FLAGS_HOSTSAFE (RSPAMD_URL_UNRESERVED|RSPAMD_URL_HOSTSAFE|RSPAMD_URL_SUBDELIM)
  3357. #define RSPAMD_URL_FLAGS_USERSAFE (RSPAMD_URL_UNRESERVED|RSPAMD_URL_USERSAFE|RSPAMD_URL_SUBDELIM)
  3358. #define RSPAMD_URL_FLAGS_PATHSAFE (RSPAMD_URL_UNRESERVED|RSPAMD_URL_PATHSAFE|RSPAMD_URL_SUBDELIM)
  3359. #define RSPAMD_URL_FLAGS_QUERYSAFE (RSPAMD_URL_UNRESERVED|RSPAMD_URL_QUERYSAFE|RSPAMD_URL_SUBDELIM)
  3360. #define RSPAMD_URL_FLAGS_FRAGMENTSAFE (RSPAMD_URL_UNRESERVED|RSPAMD_URL_FRAGMENTSAFE|RSPAMD_URL_SUBDELIM)
  3361. static const unsigned char rspamd_url_encoding_classes[256] = {
  3362. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  3363. 0, 0, 0, 0, 0, 0, 0 /* */, RSPAMD_URL_SUBDELIM /* ! */, 0 /* " */, 0 /* # */,
  3364. RSPAMD_URL_SUBDELIM /* $ */, 0 /* % */, RSPAMD_URL_SUBDELIM /* & */,
  3365. RSPAMD_URL_SUBDELIM /* ' */, RSPAMD_URL_SUBDELIM /* ( */,
  3366. RSPAMD_URL_SUBDELIM /* ) */, RSPAMD_URL_SUBDELIM /* * */,
  3367. RSPAMD_URL_SUBDELIM /* + */, RSPAMD_URL_SUBDELIM /* , */,
  3368. RSPAMD_URL_UNRESERVED /* - */, RSPAMD_URL_UNRESERVED /* . */,
  3369. RSPAMD_URL_PATHSAFE|RSPAMD_URL_QUERYSAFE|RSPAMD_URL_FRAGMENTSAFE /* / */,
  3370. RSPAMD_URL_UNRESERVED /* 0 */, RSPAMD_URL_UNRESERVED /* 1 */,
  3371. RSPAMD_URL_UNRESERVED /* 2 */, RSPAMD_URL_UNRESERVED /* 3 */,
  3372. RSPAMD_URL_UNRESERVED /* 4 */, RSPAMD_URL_UNRESERVED /* 5 */,
  3373. RSPAMD_URL_UNRESERVED /* 6 */, RSPAMD_URL_UNRESERVED /* 7 */,
  3374. RSPAMD_URL_UNRESERVED /* 8 */, RSPAMD_URL_UNRESERVED /* 9 */,
  3375. RSPAMD_URL_USERSAFE|RSPAMD_URL_HOSTSAFE|RSPAMD_URL_PATHSAFE|RSPAMD_URL_QUERYSAFE|RSPAMD_URL_FRAGMENTSAFE /* : */,
  3376. RSPAMD_URL_SUBDELIM /* ; */, 0 /* < */, RSPAMD_URL_SUBDELIM /* = */, 0 /* > */,
  3377. RSPAMD_URL_QUERYSAFE|RSPAMD_URL_FRAGMENTSAFE /* ? */,
  3378. RSPAMD_URL_PATHSAFE|RSPAMD_URL_QUERYSAFE|RSPAMD_URL_FRAGMENTSAFE /* @ */,
  3379. RSPAMD_URL_UNRESERVED /* A */, RSPAMD_URL_UNRESERVED /* B */,
  3380. RSPAMD_URL_UNRESERVED /* C */, RSPAMD_URL_UNRESERVED /* D */,
  3381. RSPAMD_URL_UNRESERVED /* E */, RSPAMD_URL_UNRESERVED /* F */,
  3382. RSPAMD_URL_UNRESERVED /* G */, RSPAMD_URL_UNRESERVED /* H */,
  3383. RSPAMD_URL_UNRESERVED /* I */, RSPAMD_URL_UNRESERVED /* J */,
  3384. RSPAMD_URL_UNRESERVED /* K */, RSPAMD_URL_UNRESERVED /* L */,
  3385. RSPAMD_URL_UNRESERVED /* M */, RSPAMD_URL_UNRESERVED /* N */,
  3386. RSPAMD_URL_UNRESERVED /* O */, RSPAMD_URL_UNRESERVED /* P */,
  3387. RSPAMD_URL_UNRESERVED /* Q */, RSPAMD_URL_UNRESERVED /* R */,
  3388. RSPAMD_URL_UNRESERVED /* S */, RSPAMD_URL_UNRESERVED /* T */,
  3389. RSPAMD_URL_UNRESERVED /* U */, RSPAMD_URL_UNRESERVED /* V */,
  3390. RSPAMD_URL_UNRESERVED /* W */, RSPAMD_URL_UNRESERVED /* X */,
  3391. RSPAMD_URL_UNRESERVED /* Y */, RSPAMD_URL_UNRESERVED /* Z */,
  3392. RSPAMD_URL_HOSTSAFE /* [ */, 0 /* \ */, RSPAMD_URL_HOSTSAFE /* ] */, 0 /* ^ */,
  3393. RSPAMD_URL_UNRESERVED /* _ */, 0 /* ` */, RSPAMD_URL_UNRESERVED /* a */,
  3394. RSPAMD_URL_UNRESERVED /* b */, RSPAMD_URL_UNRESERVED /* c */,
  3395. RSPAMD_URL_UNRESERVED /* d */, RSPAMD_URL_UNRESERVED /* e */,
  3396. RSPAMD_URL_UNRESERVED /* f */, RSPAMD_URL_UNRESERVED /* g */,
  3397. RSPAMD_URL_UNRESERVED /* h */, RSPAMD_URL_UNRESERVED /* i */,
  3398. RSPAMD_URL_UNRESERVED /* j */, RSPAMD_URL_UNRESERVED /* k */,
  3399. RSPAMD_URL_UNRESERVED /* l */, RSPAMD_URL_UNRESERVED /* m */,
  3400. RSPAMD_URL_UNRESERVED /* n */, RSPAMD_URL_UNRESERVED /* o */,
  3401. RSPAMD_URL_UNRESERVED /* p */, RSPAMD_URL_UNRESERVED /* q */,
  3402. RSPAMD_URL_UNRESERVED /* r */, RSPAMD_URL_UNRESERVED /* s */,
  3403. RSPAMD_URL_UNRESERVED /* t */, RSPAMD_URL_UNRESERVED /* u */,
  3404. RSPAMD_URL_UNRESERVED /* v */, RSPAMD_URL_UNRESERVED /* w */,
  3405. RSPAMD_URL_UNRESERVED /* x */, RSPAMD_URL_UNRESERVED /* y */,
  3406. RSPAMD_URL_UNRESERVED /* z */, 0 /* { */, 0 /* | */, 0 /* } */,
  3407. RSPAMD_URL_UNRESERVED /* ~ */, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  3408. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  3409. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  3410. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  3411. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  3412. 0, 0, 0, 0, 0, 0, 0, 0, 0
  3413. };
  3414. #define CHECK_URL_COMPONENT(beg, len, flags) do { \
  3415. for (i = 0; i < (len); i ++) { \
  3416. if ((rspamd_url_encoding_classes[(guchar)(beg)[i]] & (flags)) == 0) { \
  3417. dlen += 2; \
  3418. } \
  3419. } \
  3420. } while (0)
  3421. #define ENCODE_URL_COMPONENT(beg, len, flags) do { \
  3422. for (i = 0; i < (len) && dend > d; i ++) { \
  3423. if ((rspamd_url_encoding_classes[(guchar)(beg)[i]] & (flags)) == 0) { \
  3424. *d++ = '%'; \
  3425. *d++ = hexdigests[(guchar)((beg)[i] >> 4) & 0xf]; \
  3426. *d++ = hexdigests[(guchar)(beg)[i] & 0xf]; \
  3427. } \
  3428. else { \
  3429. *d++ = (beg)[i]; \
  3430. } \
  3431. } \
  3432. } while (0)
  3433. const gchar *
  3434. rspamd_url_encode (struct rspamd_url *url, gsize *pdlen,
  3435. rspamd_mempool_t *pool)
  3436. {
  3437. guchar *dest, *d, *dend;
  3438. static const gchar hexdigests[16] = "0123456789ABCDEF";
  3439. guint i;
  3440. gsize dlen = 0;
  3441. g_assert (pdlen != NULL && url != NULL && pool != NULL);
  3442. CHECK_URL_COMPONENT (rspamd_url_host_unsafe (url), url->hostlen,
  3443. RSPAMD_URL_FLAGS_HOSTSAFE);
  3444. CHECK_URL_COMPONENT (rspamd_url_user_unsafe(url), url->userlen,
  3445. RSPAMD_URL_FLAGS_USERSAFE);
  3446. CHECK_URL_COMPONENT (rspamd_url_data_unsafe (url), url->datalen,
  3447. RSPAMD_URL_FLAGS_PATHSAFE);
  3448. CHECK_URL_COMPONENT (rspamd_url_query_unsafe (url), url->querylen,
  3449. RSPAMD_URL_FLAGS_QUERYSAFE);
  3450. CHECK_URL_COMPONENT (rspamd_url_fragment_unsafe (url), url->fragmentlen,
  3451. RSPAMD_URL_FLAGS_FRAGMENTSAFE);
  3452. if (dlen == 0) {
  3453. *pdlen = url->urllen;
  3454. return url->string;
  3455. }
  3456. /* Need to encode */
  3457. dlen += url->urllen + sizeof ("telephone://"); /* Protocol hack */
  3458. dest = rspamd_mempool_alloc (pool, dlen + 1);
  3459. d = dest;
  3460. dend = d + dlen;
  3461. if (url->protocollen > 0) {
  3462. if (!(url->protocol & PROTOCOL_UNKNOWN)) {
  3463. const gchar *known_proto = rspamd_url_protocol_name (url->protocol);
  3464. d += rspamd_snprintf ((gchar *) d, dend - d,
  3465. "%s://",
  3466. known_proto);
  3467. }
  3468. else {
  3469. d += rspamd_snprintf ((gchar *) d, dend - d,
  3470. "%*s://",
  3471. (gint)url->protocollen, url->string);
  3472. }
  3473. }
  3474. else {
  3475. d += rspamd_snprintf ((gchar *) d, dend - d, "http://");
  3476. }
  3477. if (url->userlen > 0) {
  3478. ENCODE_URL_COMPONENT (rspamd_url_user_unsafe (url), url->userlen,
  3479. RSPAMD_URL_FLAGS_USERSAFE);
  3480. *d++ = ':';
  3481. }
  3482. ENCODE_URL_COMPONENT (rspamd_url_host_unsafe (url), url->hostlen,
  3483. RSPAMD_URL_FLAGS_HOSTSAFE);
  3484. if (url->datalen > 0) {
  3485. *d++ = '/';
  3486. ENCODE_URL_COMPONENT (rspamd_url_data_unsafe (url), url->datalen,
  3487. RSPAMD_URL_FLAGS_PATHSAFE);
  3488. }
  3489. if (url->querylen > 0) {
  3490. *d++ = '?';
  3491. ENCODE_URL_COMPONENT (rspamd_url_query_unsafe (url), url->querylen,
  3492. RSPAMD_URL_FLAGS_QUERYSAFE);
  3493. }
  3494. if (url->fragmentlen > 0) {
  3495. *d++ = '#';
  3496. ENCODE_URL_COMPONENT (rspamd_url_fragment_unsafe (url), url->fragmentlen,
  3497. RSPAMD_URL_FLAGS_FRAGMENTSAFE);
  3498. }
  3499. *pdlen = (d - dest);
  3500. return (const gchar *)dest;
  3501. }
  3502. gboolean
  3503. rspamd_url_is_domain (int c)
  3504. {
  3505. return is_domain ((guchar)c);
  3506. }
  3507. const gchar*
  3508. rspamd_url_protocol_name (enum rspamd_url_protocol proto)
  3509. {
  3510. const gchar *ret = "unknown";
  3511. switch (proto) {
  3512. case PROTOCOL_HTTP:
  3513. ret = "http";
  3514. break;
  3515. case PROTOCOL_HTTPS:
  3516. ret = "https";
  3517. break;
  3518. case PROTOCOL_FTP:
  3519. ret = "ftp";
  3520. break;
  3521. case PROTOCOL_FILE:
  3522. ret = "file";
  3523. break;
  3524. case PROTOCOL_MAILTO:
  3525. ret = "mailto";
  3526. break;
  3527. case PROTOCOL_TELEPHONE:
  3528. ret = "telephone";
  3529. break;
  3530. default:
  3531. break;
  3532. }
  3533. return ret;
  3534. }
  3535. enum rspamd_url_protocol
  3536. rspamd_url_protocol_from_string (const gchar *str)
  3537. {
  3538. enum rspamd_url_protocol ret = PROTOCOL_UNKNOWN;
  3539. if (strcmp (str, "http") == 0) {
  3540. ret = PROTOCOL_HTTP;
  3541. }
  3542. else if (strcmp (str, "https") == 0) {
  3543. ret = PROTOCOL_HTTPS;
  3544. }
  3545. else if (strcmp (str, "mailto") == 0) {
  3546. ret = PROTOCOL_MAILTO;
  3547. }
  3548. else if (strcmp (str, "ftp") == 0) {
  3549. ret = PROTOCOL_FTP;
  3550. }
  3551. else if (strcmp (str, "file") == 0) {
  3552. ret = PROTOCOL_FILE;
  3553. }
  3554. else if (strcmp (str, "telephone") == 0) {
  3555. ret = PROTOCOL_TELEPHONE;
  3556. }
  3557. return ret;
  3558. }
  3559. bool
  3560. rspamd_url_set_add_or_increase(khash_t (rspamd_url_hash) *set,
  3561. struct rspamd_url *u,
  3562. bool enforce_replace)
  3563. {
  3564. khiter_t k;
  3565. gint r;
  3566. k = kh_get (rspamd_url_hash, set, u);
  3567. if (k != kh_end (set)) {
  3568. /* Existing url */
  3569. struct rspamd_url *ex = kh_key (set, k);
  3570. #define SUSPICIOUS_URL_FLAGS (RSPAMD_URL_FLAG_PHISHED|RSPAMD_URL_FLAG_OBSCURED|RSPAMD_URL_FLAG_ZW_SPACES)
  3571. if (enforce_replace) {
  3572. kh_key (set, k) = u;
  3573. u->count++;
  3574. }
  3575. else {
  3576. if (u->flags & SUSPICIOUS_URL_FLAGS) {
  3577. if (!(ex->flags & SUSPICIOUS_URL_FLAGS)) {
  3578. /* Propagate new url to an old one */
  3579. kh_key (set, k) = u;
  3580. u->count++;
  3581. }
  3582. else {
  3583. ex->count++;
  3584. }
  3585. }
  3586. else {
  3587. ex->count++;
  3588. }
  3589. }
  3590. return false;
  3591. }
  3592. else {
  3593. k = kh_put (rspamd_url_hash, set, u, &r);
  3594. }
  3595. return true;
  3596. }
  3597. struct rspamd_url *
  3598. rspamd_url_set_add_or_return (khash_t (rspamd_url_hash) *set,
  3599. struct rspamd_url *u)
  3600. {
  3601. khiter_t k;
  3602. gint r;
  3603. if (set) {
  3604. k = kh_get (rspamd_url_hash, set, u);
  3605. if (k != kh_end (set)) {
  3606. return kh_key (set, k);
  3607. }
  3608. else {
  3609. k = kh_put (rspamd_url_hash, set, u, &r);
  3610. return kh_key (set, k);
  3611. }
  3612. }
  3613. return NULL;
  3614. }
  3615. bool
  3616. rspamd_url_host_set_add (khash_t (rspamd_url_host_hash) *set,
  3617. struct rspamd_url *u)
  3618. {
  3619. gint r;
  3620. if (set) {
  3621. kh_put (rspamd_url_host_hash, set, u, &r);
  3622. if (r == 0) {
  3623. return false;
  3624. }
  3625. return true;
  3626. }
  3627. return false;
  3628. }
  3629. bool
  3630. rspamd_url_set_has (khash_t (rspamd_url_hash) *set, struct rspamd_url *u)
  3631. {
  3632. khiter_t k;
  3633. if (set) {
  3634. k = kh_get (rspamd_url_hash, set, u);
  3635. if (k == kh_end (set)) {
  3636. return false;
  3637. }
  3638. return true;
  3639. }
  3640. return false;
  3641. }
  3642. bool
  3643. rspamd_url_host_set_has (khash_t (rspamd_url_host_hash) *set, struct rspamd_url *u)
  3644. {
  3645. khiter_t k;
  3646. if (set) {
  3647. k = kh_get (rspamd_url_host_hash, set, u);
  3648. if (k == kh_end (set)) {
  3649. return false;
  3650. }
  3651. return true;
  3652. }
  3653. return false;
  3654. }
  3655. bool
  3656. rspamd_url_flag_from_string (const gchar *str, gint *flag)
  3657. {
  3658. gint h = rspamd_cryptobox_fast_hash_specific (RSPAMD_CRYPTOBOX_HASHFAST_INDEPENDENT,
  3659. str, strlen (str), 0);
  3660. for (int i = 0; i < G_N_ELEMENTS (url_flag_names); i ++) {
  3661. if (url_flag_names[i].hash == h) {
  3662. *flag |= url_flag_names[i].flag;
  3663. return true;
  3664. }
  3665. }
  3666. return false;
  3667. }
  3668. const gchar *
  3669. rspamd_url_flag_to_string (int flag)
  3670. {
  3671. for (int i = 0; i < G_N_ELEMENTS (url_flag_names); i ++) {
  3672. if (url_flag_names[i].flag & flag) {
  3673. return url_flag_names[i].name;
  3674. }
  3675. }
  3676. return NULL;
  3677. }
  3678. inline int
  3679. rspamd_url_cmp (const struct rspamd_url *u1, const struct rspamd_url *u2)
  3680. {
  3681. int min_len = MIN (u1->urllen, u2->urllen);
  3682. int r;
  3683. if (u1->protocol != u2->protocol) {
  3684. return u1->protocol < u2->protocol;
  3685. }
  3686. if (u1->protocol & PROTOCOL_MAILTO) {
  3687. /* Emails specialisation (hosts must be compared in a case insensitive matter */
  3688. min_len = MIN (u1->hostlen, u2->hostlen);
  3689. if ((r = rspamd_lc_cmp (rspamd_url_host_unsafe (u1),
  3690. rspamd_url_host_unsafe (u2), min_len)) == 0) {
  3691. if (u1->hostlen == u2->hostlen) {
  3692. if (u1->userlen != u2->userlen || u1->userlen == 0) {
  3693. r = (int) u1->userlen - (int) u2->userlen;
  3694. }
  3695. else {
  3696. r = memcmp (rspamd_url_user_unsafe(u1),
  3697. rspamd_url_user_unsafe(u2),
  3698. u1->userlen);
  3699. }
  3700. }
  3701. else {
  3702. r = u1->hostlen < u2->hostlen;
  3703. }
  3704. }
  3705. }
  3706. else {
  3707. if (u1->urllen != u2->urllen) {
  3708. /* Different length, compare common part and then compare length */
  3709. r = memcmp (u1->string, u2->string, min_len);
  3710. if (r == 0) {
  3711. r = u1->urllen < u2->urllen;
  3712. }
  3713. }
  3714. else {
  3715. /* Equal length */
  3716. r = memcmp (u1->string, u2->string, u1->urllen);
  3717. }
  3718. }
  3719. return r;
  3720. }
  3721. int
  3722. rspamd_url_cmp_qsort (const void *_u1, const void *_u2)
  3723. {
  3724. const struct rspamd_url *u1 = *(struct rspamd_url **) _u1,
  3725. *u2 = *(struct rspamd_url **) _u2;
  3726. return rspamd_url_cmp (u1, u2);
  3727. }