]>
git.ipfire.org Git - thirdparty/squid.git/blob - src/acl/DomainData.cc
2 * DEBUG: section 28 Access Control
3 * AUTHOR: Duane Wessels
5 * SQUID Web Proxy Cache http://www.squid-cache.org/
6 * ----------------------------------------------------------
8 * Squid is the result of efforts by numerous individuals from
9 * the Internet community; see the CONTRIBUTORS file for full
10 * details. Many organizations have provided support for Squid's
11 * development; see the SPONSORS file for full details. Squid is
12 * Copyrighted (C) 2001 by the Regents of the University of
13 * California; see the COPYRIGHT file for full details. Squid
14 * incorporates software developed and/or copyrighted by other
15 * sources; see the CREDITS file for full details.
17 * This program is free software; you can redistribute it and/or modify
18 * it under the terms of the GNU General Public License as published by
19 * the Free Software Foundation; either version 2 of the License, or
20 * (at your option) any later version.
22 * This program is distributed in the hope that it will be useful,
23 * but WITHOUT ANY WARRANTY; without even the implied warranty of
24 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
25 * GNU General Public License for more details.
27 * You should have received a copy of the GNU General Public License
28 * along with this program; if not, write to the Free Software
29 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
32 * Copyright (c) 2003, Robert Collins <robertc@squid-cache.org>
36 #include "acl/Checklist.h"
37 #include "acl/DomainData.h"
49 ACLDomainData::~ACLDomainData()
52 domains
->destroy(xRefFree
);
57 splaystrcasecmp (T
&l
, T
&r
)
59 return strcasecmp ((char *)l
,(char *)r
);
64 splaystrcmp (T
&l
, T
&r
)
66 return strcmp ((char *)l
,(char *)r
);
69 /* general compare functions, these are used for tree search algorithms
70 * so they return <0, 0 or >0 */
72 /* compare a host and a domain */
75 aclHostDomainCompare( char *const &a
, char * const &b
)
77 const char *h
= static_cast<const char *>(a
);
78 const char *d
= static_cast<const char *>(b
);
79 return matchDomainName(h
, d
);
82 /* compare two domains */
86 aclDomainCompare(T
const &a
, T
const &b
)
88 char * const d1
= static_cast<char *>(b
);
89 char * const d2
= static_cast<char *>(a
);
91 ret
= aclHostDomainCompare(d1
, d2
);
96 ret
= aclHostDomainCompare(d3
, d4
);
98 // When a.example.com comes after .example.com in an ACL
99 // sub-domain is ignored. That is okay. Just important
100 bool d3big
= (strlen(d3
) > strlen(d4
)); // Always suggest removing the longer one.
101 debugs(28, DBG_IMPORTANT
, "WARNING: '" << (d3big
?d3
:d4
) << "' is a subdomain of '" << (d3big
?d4
:d3
) << "'");
102 debugs(28, DBG_IMPORTANT
, "WARNING: You should remove '" << (d3big
?d3
:d4
) << "' from the ACL named '" << AclMatchedName
<< "'");
103 debugs(28, 2, HERE
<< "Ignore '" << d3
<< "' to keep splay tree searching predictable");
105 } else if (ret
== 0) {
106 // It may be an exact duplicate. No problem. Just drop.
107 if (strcmp(d1
,d2
)==0) {
108 debugs(28, 2, "WARNING: '" << d2
<< "' is duplicated in the list.");
109 debugs(28, 2, "WARNING: You should remove one '" << d2
<< "' from the ACL named '" << AclMatchedName
<< "'");
112 // When a.example.com comes before .example.com in an ACL
113 // discarding the wildcard is critically bad.
114 // or Maybe even both are wildcards. Things are very weird in those cases.
115 bool d1big
= (strlen(d1
) > strlen(d2
)); // Always suggest removing the longer one.
116 debugs(28, DBG_CRITICAL
, "ERROR: '" << (d1big
?d1
:d2
) << "' is a subdomain of '" << (d1big
?d2
:d1
) << "'");
117 debugs(28, DBG_CRITICAL
, "ERROR: You need to remove '" << (d1big
?d1
:d2
) << "' from the ACL named '" << AclMatchedName
<< "'");
125 ACLDomainData::match(char const *host
)
130 debugs(28, 3, "aclMatchDomainList: checking '" << host
<< "'");
132 domains
= domains
->splay((char *)host
, aclHostDomainCompare
);
134 debugs(28, 3, "aclMatchDomainList: '" << host
<< "' " << (splayLastResult
? "NOT found" : "found"));
136 return !splayLastResult
;
140 aclDumpDomainListWalkee(char * const & node_data
, void *outlist
)
142 /* outlist is really a SBufList ** */
143 static_cast<SBufList
*>(outlist
)->push_back(SBuf(node_data
));
147 ACLDomainData::dump() const
150 /* damn this is VERY inefficient for long ACL lists... filling
151 * a wordlist this way costs Sum(1,N) iterations. For instance
152 * a 1000-elements list will be filled in 499500 iterations.
154 domains
->walk(aclDumpDomainListWalkee
, &sl
);
159 ACLDomainData::parse()
163 while ((t
= strtokFile())) {
165 domains
= domains
->insert(xstrdup(t
), aclDomainCompare
);
170 ACLDomainData::empty() const
172 return domains
->empty();
175 ACLData
<char const *> *
176 ACLDomainData::clone() const
178 /* Splay trees don't clone yet. */
180 return new ACLDomainData
;