| // Copyright (c) 2006, Google Inc. |
| // All rights reserved. |
| // |
| // Redistribution and use in source and binary forms, with or without |
| // modification, are permitted provided that the following conditions are |
| // met: |
| // |
| // * Redistributions of source code must retain the above copyright |
| // notice, this list of conditions and the following disclaimer. |
| // * Redistributions in binary form must reproduce the above |
| // copyright notice, this list of conditions and the following disclaimer |
| // in the documentation and/or other materials provided with the |
| // distribution. |
| // * Neither the name of Google Inc. nor the names of its |
| // contributors may be used to endorse or promote products derived from |
| // this software without specific prior written permission. |
| // |
| // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
| // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
| // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
| // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
| // OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| // SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
| // LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| // DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| |
| #include <assert.h> |
| |
| // Disable exception handler warnings. |
| #pragma warning(disable:4530) |
| |
| #include <fstream> |
| |
| #include "common/windows/string_utils-inl.h" |
| |
| #include "common/windows/http_upload.h" |
| |
| namespace google_breakpad { |
| |
| using std::ifstream; |
| using std::ios; |
| |
| static const wchar_t kUserAgent[] = L"Breakpad/1.0 (Windows)"; |
| |
| // Helper class which closes an internet handle when it goes away |
| class HTTPUpload::AutoInternetHandle { |
| public: |
| explicit AutoInternetHandle(HINTERNET handle) : handle_(handle) {} |
| ~AutoInternetHandle() { |
| if (handle_) { |
| InternetCloseHandle(handle_); |
| } |
| } |
| |
| HINTERNET get() { return handle_; } |
| |
| private: |
| HINTERNET handle_; |
| }; |
| |
| // static |
| bool HTTPUpload::SendRequest(const wstring &url, |
| const map<wstring, wstring> ¶meters, |
| const map<wstring, wstring> &files, |
| int *timeout, |
| wstring *response_body, |
| int *response_code) { |
| if (response_code) { |
| *response_code = 0; |
| } |
| |
| // TODO(bryner): support non-ASCII parameter names |
| if (!CheckParameters(parameters)) { |
| return false; |
| } |
| |
| // Break up the URL and make sure we can handle it |
| wchar_t scheme[16], host[256], path[256]; |
| URL_COMPONENTS components; |
| memset(&components, 0, sizeof(components)); |
| components.dwStructSize = sizeof(components); |
| components.lpszScheme = scheme; |
| components.dwSchemeLength = sizeof(scheme) / sizeof(scheme[0]); |
| components.lpszHostName = host; |
| components.dwHostNameLength = sizeof(host) / sizeof(host[0]); |
| components.lpszUrlPath = path; |
| components.dwUrlPathLength = sizeof(path) / sizeof(path[0]); |
| if (!InternetCrackUrl(url.c_str(), static_cast<DWORD>(url.size()), |
| 0, &components)) { |
| return false; |
| } |
| bool secure = false; |
| if (wcscmp(scheme, L"https") == 0) { |
| secure = true; |
| } else if (wcscmp(scheme, L"http") != 0) { |
| return false; |
| } |
| |
| AutoInternetHandle internet(InternetOpen(kUserAgent, |
| INTERNET_OPEN_TYPE_PRECONFIG, |
| NULL, // proxy name |
| NULL, // proxy bypass |
| 0)); // flags |
| if (!internet.get()) { |
| return false; |
| } |
| |
| AutoInternetHandle connection(InternetConnect(internet.get(), |
| host, |
| components.nPort, |
| NULL, // user name |
| NULL, // password |
| INTERNET_SERVICE_HTTP, |
| 0, // flags |
| NULL)); // context |
| if (!connection.get()) { |
| return false; |
| } |
| |
| DWORD http_open_flags = secure ? INTERNET_FLAG_SECURE : 0; |
| http_open_flags |= INTERNET_FLAG_NO_COOKIES; |
| AutoInternetHandle request(HttpOpenRequest(connection.get(), |
| L"POST", |
| path, |
| NULL, // version |
| NULL, // referer |
| NULL, // agent type |
| http_open_flags, |
| NULL)); // context |
| if (!request.get()) { |
| return false; |
| } |
| |
| wstring boundary = GenerateMultipartBoundary(); |
| wstring content_type_header = GenerateRequestHeader(boundary); |
| HttpAddRequestHeaders(request.get(), |
| content_type_header.c_str(), |
| static_cast<DWORD>(-1), |
| HTTP_ADDREQ_FLAG_ADD); |
| |
| string request_body; |
| if (!GenerateRequestBody(parameters, files, boundary, &request_body)) { |
| return false; |
| } |
| |
| if (timeout) { |
| if (!InternetSetOption(request.get(), |
| INTERNET_OPTION_SEND_TIMEOUT, |
| timeout, |
| sizeof(*timeout))) { |
| fwprintf(stderr, L"Could not unset send timeout, continuing...\n"); |
| } |
| |
| if (!InternetSetOption(request.get(), |
| INTERNET_OPTION_RECEIVE_TIMEOUT, |
| timeout, |
| sizeof(*timeout))) { |
| fwprintf(stderr, L"Could not unset receive timeout, continuing...\n"); |
| } |
| } |
| |
| if (!HttpSendRequest(request.get(), NULL, 0, |
| const_cast<char *>(request_body.data()), |
| static_cast<DWORD>(request_body.size()))) { |
| return false; |
| } |
| |
| // The server indicates a successful upload with HTTP status 200. |
| wchar_t http_status[4]; |
| DWORD http_status_size = sizeof(http_status); |
| if (!HttpQueryInfo(request.get(), HTTP_QUERY_STATUS_CODE, |
| static_cast<LPVOID>(&http_status), &http_status_size, |
| 0)) { |
| return false; |
| } |
| |
| int http_response = wcstol(http_status, NULL, 10); |
| if (response_code) { |
| *response_code = http_response; |
| } |
| |
| bool result = (http_response == 200); |
| |
| if (result) { |
| result = ReadResponse(request.get(), response_body); |
| } |
| |
| return result; |
| } |
| |
| // static |
| bool HTTPUpload::ReadResponse(HINTERNET request, wstring *response) { |
| bool has_content_length_header = false; |
| wchar_t content_length[32]; |
| DWORD content_length_size = sizeof(content_length); |
| DWORD claimed_size = 0; |
| string response_body; |
| |
| if (HttpQueryInfo(request, HTTP_QUERY_CONTENT_LENGTH, |
| static_cast<LPVOID>(&content_length), |
| &content_length_size, 0)) { |
| has_content_length_header = true; |
| claimed_size = wcstol(content_length, NULL, 10); |
| response_body.reserve(claimed_size); |
| } |
| |
| |
| DWORD bytes_available; |
| DWORD total_read = 0; |
| BOOL return_code; |
| |
| while (((return_code = InternetQueryDataAvailable(request, &bytes_available, |
| 0, 0)) != 0) && bytes_available > 0) { |
| vector<char> response_buffer(bytes_available); |
| DWORD size_read; |
| |
| return_code = InternetReadFile(request, |
| &response_buffer[0], |
| bytes_available, &size_read); |
| |
| if (return_code && size_read > 0) { |
| total_read += size_read; |
| response_body.append(&response_buffer[0], size_read); |
| } else { |
| break; |
| } |
| } |
| |
| bool succeeded = return_code && (!has_content_length_header || |
| (total_read == claimed_size)); |
| if (succeeded && response) { |
| *response = UTF8ToWide(response_body); |
| } |
| |
| return succeeded; |
| } |
| |
| // static |
| wstring HTTPUpload::GenerateMultipartBoundary() { |
| // The boundary has 27 '-' characters followed by 16 hex digits |
| static const wchar_t kBoundaryPrefix[] = L"---------------------------"; |
| static const int kBoundaryLength = 27 + 16 + 1; |
| |
| // Generate some random numbers to fill out the boundary |
| int r0 = rand(); |
| int r1 = rand(); |
| |
| wchar_t temp[kBoundaryLength]; |
| swprintf(temp, kBoundaryLength, L"%s%08X%08X", kBoundaryPrefix, r0, r1); |
| |
| // remove when VC++7.1 is no longer supported |
| temp[kBoundaryLength - 1] = L'\0'; |
| |
| return wstring(temp); |
| } |
| |
| // static |
| wstring HTTPUpload::GenerateRequestHeader(const wstring &boundary) { |
| wstring header = L"Content-Type: multipart/form-data; boundary="; |
| header += boundary; |
| return header; |
| } |
| |
| // static |
| bool HTTPUpload::GenerateRequestBody(const map<wstring, wstring> ¶meters, |
| const map<wstring, wstring> &files, |
| const wstring &boundary, |
| string *request_body) { |
| string boundary_str = WideToUTF8(boundary); |
| if (boundary_str.empty()) { |
| return false; |
| } |
| |
| request_body->clear(); |
| |
| // Append each of the parameter pairs as a form-data part |
| for (map<wstring, wstring>::const_iterator pos = parameters.begin(); |
| pos != parameters.end(); ++pos) { |
| request_body->append("--" + boundary_str + "\r\n"); |
| request_body->append("Content-Disposition: form-data; name=\"" + |
| WideToUTF8(pos->first) + "\"\r\n\r\n" + |
| WideToUTF8(pos->second) + "\r\n"); |
| } |
| |
| for (map<wstring, wstring>::const_iterator pos = files.begin(); |
| pos != files.end(); ++pos) { |
| vector<char> contents; |
| if (!GetFileContents(pos->second, &contents)) { |
| return false; |
| } |
| |
| // Now append the upload files as a binary (octet-stream) part |
| string filename_utf8 = WideToUTF8(pos->second); |
| if (filename_utf8.empty()) { |
| return false; |
| } |
| |
| string file_part_name_utf8 = WideToUTF8(pos->first); |
| if (file_part_name_utf8.empty()) { |
| return false; |
| } |
| |
| request_body->append("--" + boundary_str + "\r\n"); |
| request_body->append("Content-Disposition: form-data; " |
| "name=\"" + file_part_name_utf8 + "\"; " |
| "filename=\"" + filename_utf8 + "\"\r\n"); |
| request_body->append("Content-Type: application/octet-stream\r\n"); |
| request_body->append("\r\n"); |
| |
| if (!contents.empty()) { |
| request_body->append(&(contents[0]), contents.size()); |
| } |
| request_body->append("\r\n"); |
| } |
| request_body->append("--" + boundary_str + "--\r\n"); |
| return true; |
| } |
| |
| // static |
| bool HTTPUpload::GetFileContents(const wstring &filename, |
| vector<char> *contents) { |
| bool rv = false; |
| // The "open" method on pre-MSVC8 ifstream implementations doesn't accept a |
| // wchar_t* filename, so use _wfopen directly in that case. For VC8 and |
| // later, _wfopen has been deprecated in favor of _wfopen_s, which does |
| // not exist in earlier versions, so let the ifstream open the file itself. |
| // GCC doesn't support wide file name and opening on FILE* requires ugly |
| // hacks, so fallback to multi byte file. |
| #ifdef _MSC_VER |
| ifstream file; |
| file.open(filename.c_str(), ios::binary); |
| #else // GCC |
| ifstream file(WideToMBCP(filename, CP_ACP).c_str(), ios::binary); |
| #endif // _MSC_VER >= 1400 |
| if (file.is_open()) { |
| file.seekg(0, ios::end); |
| std::streamoff length = file.tellg(); |
| // Check for loss of data when converting lenght from std::streamoff into |
| // std::vector<char>::size_type |
| std::vector<char>::size_type vector_size = |
| static_cast<std::vector<char>::size_type>(length); |
| if (static_cast<std::streamoff>(vector_size) == length) { |
| contents->resize(vector_size); |
| if (length != 0) { |
| file.seekg(0, ios::beg); |
| file.read(&((*contents)[0]), length); |
| } |
| rv = true; |
| } |
| file.close(); |
| } |
| return rv; |
| } |
| |
| // static |
| wstring HTTPUpload::UTF8ToWide(const string &utf8) { |
| if (utf8.length() == 0) { |
| return wstring(); |
| } |
| |
| // compute the length of the buffer we'll need |
| int charcount = MultiByteToWideChar(CP_UTF8, 0, utf8.c_str(), -1, NULL, 0); |
| |
| if (charcount == 0) { |
| return wstring(); |
| } |
| |
| // convert |
| wchar_t* buf = new wchar_t[charcount]; |
| MultiByteToWideChar(CP_UTF8, 0, utf8.c_str(), -1, buf, charcount); |
| wstring result(buf); |
| delete[] buf; |
| return result; |
| } |
| |
| // static |
| string HTTPUpload::WideToMBCP(const wstring &wide, unsigned int cp) { |
| if (wide.length() == 0) { |
| return string(); |
| } |
| |
| // compute the length of the buffer we'll need |
| int charcount = WideCharToMultiByte(cp, 0, wide.c_str(), -1, |
| NULL, 0, NULL, NULL); |
| if (charcount == 0) { |
| return string(); |
| } |
| |
| // convert |
| char *buf = new char[charcount]; |
| WideCharToMultiByte(cp, 0, wide.c_str(), -1, buf, charcount, |
| NULL, NULL); |
| |
| string result(buf); |
| delete[] buf; |
| return result; |
| } |
| |
| // static |
| bool HTTPUpload::CheckParameters(const map<wstring, wstring> ¶meters) { |
| for (map<wstring, wstring>::const_iterator pos = parameters.begin(); |
| pos != parameters.end(); ++pos) { |
| const wstring &str = pos->first; |
| if (str.size() == 0) { |
| return false; // disallow empty parameter names |
| } |
| for (unsigned int i = 0; i < str.size(); ++i) { |
| wchar_t c = str[i]; |
| if (c < 32 || c == '"' || c > 127) { |
| return false; |
| } |
| } |
| } |
| return true; |
| } |
| |
| } // namespace google_breakpad |