2 * Copyright (c) 2004 Tim Kientzle
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR(S) ``AS IS'' AND ANY EXPRESS OR
15 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
16 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
17 * IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT, INDIRECT,
18 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
19 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
20 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
21 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
26 #include "archive_platform.h"
27 __FBSDID("$FreeBSD$");
42 #include "archive_entry.h"
43 #include "archive_private.h"
44 #include "archive_read_private.h"
45 #include "archive_endian.h"
48 /* entry_bytes_remaining is the number of bytes we expect. */
49 int64_t entry_bytes_remaining;
52 /* These count the number of bytes actually read for the entry. */
53 int64_t entry_compressed_bytes_read;
54 int64_t entry_uncompressed_bytes_read;
60 const char * compression_name;
68 /* Flags to mark progress of decompression. */
71 char end_of_entry_cleanup;
74 ssize_t filename_length;
76 int64_t uncompressed_size;
77 int64_t compressed_size;
79 unsigned char *uncompressed_buffer;
80 size_t uncompressed_buffer_size;
86 struct archive_string pathname;
87 struct archive_string extra;
91 #define ZIP_LENGTH_AT_END 8
93 struct zip_file_header {
100 char compressed_size[4];
101 char uncompressed_size[4];
102 char filename_length[2];
103 char extra_length[2];
106 static const char *compression_names[] = {
118 static int archive_read_format_zip_bid(struct archive_read *);
119 static int archive_read_format_zip_cleanup(struct archive_read *);
120 static int archive_read_format_zip_read_data(struct archive_read *,
121 const void **, size_t *, off_t *);
122 static int archive_read_format_zip_read_data_skip(struct archive_read *a);
123 static int archive_read_format_zip_read_header(struct archive_read *,
124 struct archive_entry *);
125 static int zip_read_data_deflate(struct archive_read *a, const void **buff,
126 size_t *size, off_t *offset);
127 static int zip_read_data_none(struct archive_read *a, const void **buff,
128 size_t *size, off_t *offset);
129 static int zip_read_file_header(struct archive_read *a,
130 struct archive_entry *entry, struct zip *zip);
131 static time_t zip_time(const char *);
132 static void process_extra(const void* extra, struct zip* zip);
135 archive_read_support_format_zip(struct archive *_a)
137 struct archive_read *a = (struct archive_read *)_a;
141 zip = (struct zip *)malloc(sizeof(*zip));
143 archive_set_error(&a->archive, ENOMEM, "Can't allocate zip data");
144 return (ARCHIVE_FATAL);
146 memset(zip, 0, sizeof(*zip));
148 r = __archive_read_register_format(a,
150 archive_read_format_zip_bid,
151 archive_read_format_zip_read_header,
152 archive_read_format_zip_read_data,
153 archive_read_format_zip_read_data_skip,
154 archive_read_format_zip_cleanup);
163 archive_read_format_zip_bid(struct archive_read *a)
168 if (a->archive.archive_format == ARCHIVE_FORMAT_ZIP)
171 if ((p = __archive_read_ahead(a, 4)) == NULL)
175 * Bid of 30 here is: 16 bits for "PK",
176 * next 16-bit field has four options (-2 bits).
179 if (p[0] == 'P' && p[1] == 'K') {
180 if ((p[2] == '\001' && p[3] == '\002')
181 || (p[2] == '\003' && p[3] == '\004')
182 || (p[2] == '\005' && p[3] == '\006')
183 || (p[2] == '\007' && p[3] == '\010')
184 || (p[2] == '0' && p[3] == '0'))
191 archive_read_format_zip_read_header(struct archive_read *a,
192 struct archive_entry *entry)
195 const char *signature;
198 a->archive.archive_format = ARCHIVE_FORMAT_ZIP;
199 if (a->archive.archive_format_name == NULL)
200 a->archive.archive_format_name = "ZIP";
202 zip = (struct zip *)(a->format->data);
203 zip->decompress_init = 0;
204 zip->end_of_entry = 0;
205 zip->end_of_entry_cleanup = 0;
206 zip->entry_uncompressed_bytes_read = 0;
207 zip->entry_compressed_bytes_read = 0;
208 if ((h = __archive_read_ahead(a, 4)) == NULL)
209 return (ARCHIVE_FATAL);
211 signature = (const char *)h;
212 if (signature[0] != 'P' || signature[1] != 'K') {
213 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
215 return (ARCHIVE_FATAL);
219 * "PK00" signature is used for "split" archives that
220 * only have a single segment. This means we can just
221 * skip the PK00; the first real file header should follow.
223 if (signature[2] == '0' && signature[3] == '0') {
224 (a->decompressor->consume)(a, 4);
225 if ((h = __archive_read_ahead(a, 4)) == NULL)
226 return (ARCHIVE_FATAL);
227 signature = (const char *)h;
228 if (signature[0] != 'P' || signature[1] != 'K') {
229 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
231 return (ARCHIVE_FATAL);
235 if (signature[2] == '\001' && signature[3] == '\002') {
236 /* Beginning of central directory. */
237 return (ARCHIVE_EOF);
240 if (signature[2] == '\003' && signature[3] == '\004') {
241 /* Regular file entry. */
242 return (zip_read_file_header(a, entry, zip));
245 if (signature[2] == '\005' && signature[3] == '\006') {
246 /* End-of-archive record. */
247 return (ARCHIVE_EOF);
250 if (signature[2] == '\007' && signature[3] == '\010') {
252 * We should never encounter this record here;
253 * see ZIP_LENGTH_AT_END handling below for details.
255 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
256 "Bad ZIP file: Unexpected end-of-entry record");
257 return (ARCHIVE_FATAL);
260 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
261 "Damaged ZIP file or unsupported format variant (%d,%d)",
262 signature[2], signature[3]);
263 return (ARCHIVE_FATAL);
267 zip_read_file_header(struct archive_read *a, struct archive_entry *entry,
270 const struct zip_file_header *p;
273 if ((p = __archive_read_ahead(a, sizeof *p)) == NULL) {
274 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
275 "Truncated ZIP file header");
276 return (ARCHIVE_FATAL);
279 zip->version = p->version[0];
280 zip->system = p->version[1];
281 zip->flags = archive_le16dec(p->flags);
282 zip->compression = archive_le16dec(p->compression);
283 if (zip->compression <
284 sizeof(compression_names)/sizeof(compression_names[0]))
285 zip->compression_name = compression_names[zip->compression];
287 zip->compression_name = "??";
288 zip->mtime = zip_time(p->timedate);
294 zip->crc32 = archive_le32dec(p->crc32);
295 zip->filename_length = archive_le16dec(p->filename_length);
296 zip->extra_length = archive_le16dec(p->extra_length);
297 zip->uncompressed_size = archive_le32dec(p->uncompressed_size);
298 zip->compressed_size = archive_le32dec(p->compressed_size);
300 (a->decompressor->consume)(a, sizeof(struct zip_file_header));
303 /* Read the filename. */
304 if ((h = __archive_read_ahead(a, zip->filename_length)) == NULL) {
305 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
306 "Truncated ZIP file header");
307 return (ARCHIVE_FATAL);
309 if (archive_string_ensure(&zip->pathname, zip->filename_length) == NULL)
310 __archive_errx(1, "Out of memory");
311 archive_strncpy(&zip->pathname, h, zip->filename_length);
312 (a->decompressor->consume)(a, zip->filename_length);
313 archive_entry_set_pathname(entry, zip->pathname.s);
315 if (zip->pathname.s[archive_strlen(&zip->pathname) - 1] == '/')
316 zip->mode = AE_IFDIR | 0777;
318 zip->mode = AE_IFREG | 0777;
320 /* Read the extra data. */
321 if ((h = __archive_read_ahead(a, zip->extra_length)) == NULL) {
322 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
323 "Truncated ZIP file header");
324 return (ARCHIVE_FATAL);
326 process_extra(h, zip);
327 (a->decompressor->consume)(a, zip->extra_length);
329 /* Populate some additional entry fields: */
330 archive_entry_set_mode(entry, zip->mode);
331 archive_entry_set_uid(entry, zip->uid);
332 archive_entry_set_gid(entry, zip->gid);
333 archive_entry_set_mtime(entry, zip->mtime, 0);
334 archive_entry_set_ctime(entry, zip->ctime, 0);
335 archive_entry_set_atime(entry, zip->atime, 0);
336 archive_entry_set_size(entry, zip->uncompressed_size);
338 zip->entry_bytes_remaining = zip->compressed_size;
339 zip->entry_offset = 0;
341 /* If there's no body, force read_data() to return EOF immediately. */
342 if (0 == (zip->flags & ZIP_LENGTH_AT_END)
343 && zip->entry_bytes_remaining < 1)
344 zip->end_of_entry = 1;
346 /* Set up a more descriptive format name. */
347 sprintf(zip->format_name, "ZIP %d.%d (%s)",
348 zip->version / 10, zip->version % 10,
349 zip->compression_name);
350 a->archive.archive_format_name = zip->format_name;
355 /* Convert an MSDOS-style date/time into Unix-style time. */
357 zip_time(const char *p)
362 msTime = (0xff & (unsigned)p[0]) + 256 * (0xff & (unsigned)p[1]);
363 msDate = (0xff & (unsigned)p[2]) + 256 * (0xff & (unsigned)p[3]);
365 memset(&ts, 0, sizeof(ts));
366 ts.tm_year = ((msDate >> 9) & 0x7f) + 80; /* Years since 1900. */
367 ts.tm_mon = ((msDate >> 5) & 0x0f) - 1; /* Month number. */
368 ts.tm_mday = msDate & 0x1f; /* Day of month. */
369 ts.tm_hour = (msTime >> 11) & 0x1f;
370 ts.tm_min = (msTime >> 5) & 0x3f;
371 ts.tm_sec = (msTime << 1) & 0x3e;
377 archive_read_format_zip_read_data(struct archive_read *a,
378 const void **buff, size_t *size, off_t *offset)
383 zip = (struct zip *)(a->format->data);
386 * If we hit end-of-entry last time, clean up and return
387 * ARCHIVE_EOF this time.
389 if (zip->end_of_entry) {
390 if (!zip->end_of_entry_cleanup) {
391 if (zip->flags & ZIP_LENGTH_AT_END) {
394 if ((p = __archive_read_ahead(a, 16)) == NULL) {
395 archive_set_error(&a->archive,
396 ARCHIVE_ERRNO_FILE_FORMAT,
397 "Truncated ZIP end-of-file record");
398 return (ARCHIVE_FATAL);
400 zip->crc32 = archive_le32dec(p + 4);
401 zip->compressed_size = archive_le32dec(p + 8);
402 zip->uncompressed_size = archive_le32dec(p + 12);
403 (a->decompressor->consume)(a, 16);
406 /* Check file size, CRC against these values. */
407 if (zip->compressed_size != zip->entry_compressed_bytes_read) {
408 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
409 "ZIP compressed data is wrong size");
410 return (ARCHIVE_WARN);
412 /* Size field only stores the lower 32 bits of the actual size. */
413 if ((zip->uncompressed_size & UINT32_MAX)
414 != (zip->entry_uncompressed_bytes_read & UINT32_MAX)) {
415 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
416 "ZIP uncompressed data is wrong size");
417 return (ARCHIVE_WARN);
419 /* TODO: Compute CRC. */
421 if (zip->crc32 != zip->entry_crc32_calculated) {
422 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
423 "ZIP data CRC error");
424 return (ARCHIVE_WARN);
427 /* End-of-entry cleanup done. */
428 zip->end_of_entry_cleanup = 1;
430 *offset = zip->entry_uncompressed_bytes_read;
433 return (ARCHIVE_EOF);
436 switch(zip->compression) {
437 case 0: /* No compression. */
438 r = zip_read_data_none(a, buff, size, offset);
440 case 8: /* Deflate compression. */
441 r = zip_read_data_deflate(a, buff, size, offset);
443 default: /* Unsupported compression. */
447 /* Return a warning. */
448 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
449 "Unsupported ZIP compression method (%s)",
450 zip->compression_name);
451 if (zip->flags & ZIP_LENGTH_AT_END) {
453 * ZIP_LENGTH_AT_END requires us to
454 * decompress the entry in order to
455 * skip it, but we don't know this
456 * compression method, so we give up.
460 /* We know compressed size; just skip it. */
461 archive_read_format_zip_read_data_skip(a);
470 * Read "uncompressed" data. According to the current specification,
471 * if ZIP_LENGTH_AT_END is specified, then the size fields in the
472 * initial file header are supposed to be set to zero. This would, of
473 * course, make it impossible for us to read the archive, since we
474 * couldn't determine the end of the file data. Info-ZIP seems to
475 * include the real size fields both before and after the data in this
476 * case (the CRC only appears afterwards), so this works as you would
479 * Returns ARCHIVE_OK if successful, ARCHIVE_FATAL otherwise, sets
480 * zip->end_of_entry if it consumes all of the data.
483 zip_read_data_none(struct archive_read *a, const void **buff,
484 size_t *size, off_t *offset)
489 zip = (struct zip *)(a->format->data);
491 if (zip->entry_bytes_remaining == 0) {
494 *offset = zip->entry_offset;
495 zip->end_of_entry = 1;
499 * Note: '1' here is a performance optimization.
500 * Recall that the decompression layer returns a count of
501 * available bytes; asking for more than that forces the
502 * decompressor to combine reads by copying data.
504 bytes_avail = (a->decompressor->read_ahead)(a, buff, 1);
505 if (bytes_avail <= 0) {
506 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
507 "Truncated ZIP file data");
508 return (ARCHIVE_FATAL);
510 if (bytes_avail > zip->entry_bytes_remaining)
511 bytes_avail = zip->entry_bytes_remaining;
512 (a->decompressor->consume)(a, bytes_avail);
514 *offset = zip->entry_offset;
515 zip->entry_offset += *size;
516 zip->entry_bytes_remaining -= *size;
517 zip->entry_uncompressed_bytes_read += *size;
518 zip->entry_compressed_bytes_read += *size;
524 zip_read_data_deflate(struct archive_read *a, const void **buff,
525 size_t *size, off_t *offset)
529 const void *compressed_buff;
532 zip = (struct zip *)(a->format->data);
534 /* If the buffer hasn't been allocated, allocate it now. */
535 if (zip->uncompressed_buffer == NULL) {
536 zip->uncompressed_buffer_size = 32 * 1024;
537 zip->uncompressed_buffer
538 = (unsigned char *)malloc(zip->uncompressed_buffer_size);
539 if (zip->uncompressed_buffer == NULL) {
540 archive_set_error(&a->archive, ENOMEM,
541 "No memory for ZIP decompression");
542 return (ARCHIVE_FATAL);
546 /* If we haven't yet read any data, initialize the decompressor. */
547 if (!zip->decompress_init) {
548 if (zip->stream_valid)
549 r = inflateReset(&zip->stream);
551 r = inflateInit2(&zip->stream,
552 -15 /* Don't check for zlib header */);
554 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
555 "Can't initialize ZIP decompression.");
556 return (ARCHIVE_FATAL);
558 /* Stream structure has been set up. */
559 zip->stream_valid = 1;
560 /* We've initialized decompression for this stream. */
561 zip->decompress_init = 1;
565 * Note: '1' here is a performance optimization.
566 * Recall that the decompression layer returns a count of
567 * available bytes; asking for more than that forces the
568 * decompressor to combine reads by copying data.
570 bytes_avail = (a->decompressor->read_ahead)(a, &compressed_buff, 1);
571 if (bytes_avail <= 0) {
572 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
573 "Truncated ZIP file body");
574 return (ARCHIVE_FATAL);
578 * A bug in zlib.h: stream.next_in should be marked 'const'
579 * but isn't (the library never alters data through the
580 * next_in pointer, only reads it). The result: this ugly
581 * cast to remove 'const'.
583 zip->stream.next_in = (Bytef *)(uintptr_t)(const void *)compressed_buff;
584 zip->stream.avail_in = bytes_avail;
585 zip->stream.total_in = 0;
586 zip->stream.next_out = zip->uncompressed_buffer;
587 zip->stream.avail_out = zip->uncompressed_buffer_size;
588 zip->stream.total_out = 0;
590 r = inflate(&zip->stream, 0);
595 zip->end_of_entry = 1;
598 archive_set_error(&a->archive, ENOMEM,
599 "Out of memory for ZIP decompression");
600 return (ARCHIVE_FATAL);
602 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
603 "ZIP decompression failed (%d)", r);
604 return (ARCHIVE_FATAL);
607 /* Consume as much as the compressor actually used. */
608 bytes_avail = zip->stream.total_in;
609 (a->decompressor->consume)(a, bytes_avail);
610 zip->entry_bytes_remaining -= bytes_avail;
611 zip->entry_compressed_bytes_read += bytes_avail;
613 *offset = zip->entry_offset;
614 *size = zip->stream.total_out;
615 zip->entry_uncompressed_bytes_read += *size;
616 *buff = zip->uncompressed_buffer;
617 zip->entry_offset += *size;
622 zip_read_data_deflate(struct archive_read *a, const void **buff,
623 size_t *size, off_t *offset)
628 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
629 "libarchive compiled without deflate support (no libz)");
630 return (ARCHIVE_FATAL);
635 archive_read_format_zip_read_data_skip(struct archive_read *a)
638 const void *buff = NULL;
641 zip = (struct zip *)(a->format->data);
644 * If the length is at the end, we have no choice but
645 * to decompress all the data to find the end marker.
647 if (zip->flags & ZIP_LENGTH_AT_END) {
652 r = archive_read_format_zip_read_data(a, &buff,
654 } while (r == ARCHIVE_OK);
659 * If the length is at the beginning, we can skip the
660 * compressed data much more quickly.
662 bytes_skipped = (a->decompressor->skip)(a, zip->entry_bytes_remaining);
663 if (bytes_skipped < 0)
664 return (ARCHIVE_FATAL);
666 /* This entry is finished and done. */
667 zip->end_of_entry_cleanup = zip->end_of_entry = 1;
672 archive_read_format_zip_cleanup(struct archive_read *a)
676 zip = (struct zip *)(a->format->data);
678 if (zip->stream_valid)
679 inflateEnd(&zip->stream);
681 free(zip->uncompressed_buffer);
682 archive_string_free(&(zip->pathname));
683 archive_string_free(&(zip->extra));
685 (a->format->data) = NULL;
690 * The extra data is stored as a list of
691 * id1+size1+data1 + id2+size2+data2 ...
692 * triplets. id and size are 2 bytes each.
695 process_extra(const void* extra, struct zip* zip)
698 const char *p = (const char *)extra;
699 while (offset < zip->extra_length - 4)
701 unsigned short headerid = archive_le16dec(p + offset);
702 unsigned short datasize = archive_le16dec(p + offset + 2);
704 if (offset + datasize > zip->extra_length)
707 fprintf(stderr, "Header id 0x%04x, length %d\n",
712 /* Zip64 extended information extra field. */
714 zip->uncompressed_size = archive_le64dec(p + offset);
716 zip->compressed_size = archive_le64dec(p + offset + 8);
720 /* Extended time field "UT". */
721 int flags = p[offset];
724 /* Flag bits indicate which dates are present. */
728 fprintf(stderr, "mtime: %lld -> %d\n",
729 (long long)zip->mtime,
730 archive_le32dec(p + offset));
734 zip->mtime = archive_le32dec(p + offset);
742 zip->atime = archive_le32dec(p + offset);
750 zip->ctime = archive_le32dec(p + offset);
757 /* Info-ZIP Unix Extra Field (type 2) "Ux". */
759 fprintf(stderr, "uid %d gid %d\n",
760 archive_le16dec(p + offset),
761 archive_le16dec(p + offset + 2));
764 zip->uid = archive_le16dec(p + offset);
766 zip->gid = archive_le16dec(p + offset + 2);
774 if (offset != zip->extra_length)
777 "Extra data field contents do not match reported size!");