contrib/libarchive/libarchive/archive_read_support_format_iso9660.c

   1 /*-
   2  * Copyright (c) 2003-2007 Tim Kientzle
   3  * Copyright (c) 2009 Andreas Henriksson <andreas@fatal.se>
   4  * Copyright (c) 2009-2012 Michihiro NAKAJIMA
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  * 2. Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in the
  14  *    documentation and/or other materials provided with the distribution.
  15  *
  16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR(S) ``AS IS'' AND ANY EXPRESS OR
  17  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  18  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
  19  * IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT, INDIRECT,
  20  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  21  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  22  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  23  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  24  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  25  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  26  */
  27
  28 #include "archive_platform.h"
  29 __FBSDID("$FreeBSD$");
  30
  31 #ifdef HAVE_ERRNO_H
  32 #include <errno.h>
  33 #endif
  34 /* #include <stdint.h> */ /* See archive_platform.h */
  35 #include <stdio.h>
  36 #ifdef HAVE_STDLIB_H
  37 #include <stdlib.h>
  38 #endif
  39 #ifdef HAVE_STRING_H
  40 #include <string.h>
  41 #endif
  42 #include <time.h>
  43 #ifdef HAVE_ZLIB_H
  44 #include <zlib.h>
  45 #endif
  46
  47 #include "archive.h"
  48 #include "archive_endian.h"
  49 #include "archive_entry.h"
  50 #include "archive_entry_locale.h"
  51 #include "archive_private.h"
  52 #include "archive_read_private.h"
  53 #include "archive_string.h"
  54
  55 /*
  56  * An overview of ISO 9660 format:
  57  *
  58  * Each disk is laid out as follows:
  59  *   * 32k reserved for private use
  60  *   * Volume descriptor table.  Each volume descriptor
  61  *     is 2k and specifies basic format information.
  62  *     The "Primary Volume Descriptor" (PVD) is defined by the
  63  *     standard and should always be present; other volume
  64  *     descriptors include various vendor-specific extensions.
  65  *   * Files and directories.  Each file/dir is specified by
  66  *     an "extent" (starting sector and length in bytes).
  67  *     Dirs are just files with directory records packed one
  68  *     after another.  The PVD contains a single dir entry
  69  *     specifying the location of the root directory.  Everything
  70  *     else follows from there.
  71  *
  72  * This module works by first reading the volume descriptors, then
  73  * building a list of directory entries, sorted by starting
  74  * sector.  At each step, I look for the earliest dir entry that
  75  * hasn't yet been read, seek forward to that location and read
  76  * that entry.  If it's a dir, I slurp in the new dir entries and
  77  * add them to the heap; if it's a regular file, I return the
  78  * corresponding archive_entry and wait for the client to request
  79  * the file body.  This strategy allows us to read most compliant
  80  * CDs with a single pass through the data, as required by libarchive.
  81  */
  82 #define LOGICAL_BLOCK_SIZE      2048
  83 #define SYSTEM_AREA_BLOCK       16
  84
  85 /* Structure of on-disk primary volume descriptor. */
  86 #define PVD_type_offset 0
  87 #define PVD_type_size 1
  88 #define PVD_id_offset (PVD_type_offset + PVD_type_size)
  89 #define PVD_id_size 5
  90 #define PVD_version_offset (PVD_id_offset + PVD_id_size)
  91 #define PVD_version_size 1
  92 #define PVD_reserved1_offset (PVD_version_offset + PVD_version_size)
  93 #define PVD_reserved1_size 1
  94 #define PVD_system_id_offset (PVD_reserved1_offset + PVD_reserved1_size)
  95 #define PVD_system_id_size 32
  96 #define PVD_volume_id_offset (PVD_system_id_offset + PVD_system_id_size)
  97 #define PVD_volume_id_size 32
  98 #define PVD_reserved2_offset (PVD_volume_id_offset + PVD_volume_id_size)
  99 #define PVD_reserved2_size 8
 100 #define PVD_volume_space_size_offset (PVD_reserved2_offset + PVD_reserved2_size)
 101 #define PVD_volume_space_size_size 8
 102 #define PVD_reserved3_offset (PVD_volume_space_size_offset + PVD_volume_space_size_size)
 103 #define PVD_reserved3_size 32
 104 #define PVD_volume_set_size_offset (PVD_reserved3_offset + PVD_reserved3_size)
 105 #define PVD_volume_set_size_size 4
 106 #define PVD_volume_sequence_number_offset (PVD_volume_set_size_offset + PVD_volume_set_size_size)
 107 #define PVD_volume_sequence_number_size 4
 108 #define PVD_logical_block_size_offset (PVD_volume_sequence_number_offset + PVD_volume_sequence_number_size)
 109 #define PVD_logical_block_size_size 4
 110 #define PVD_path_table_size_offset (PVD_logical_block_size_offset + PVD_logical_block_size_size)
 111 #define PVD_path_table_size_size 8
 112 #define PVD_type_1_path_table_offset (PVD_path_table_size_offset + PVD_path_table_size_size)
 113 #define PVD_type_1_path_table_size 4
 114 #define PVD_opt_type_1_path_table_offset (PVD_type_1_path_table_offset + PVD_type_1_path_table_size)
 115 #define PVD_opt_type_1_path_table_size 4
 116 #define PVD_type_m_path_table_offset (PVD_opt_type_1_path_table_offset + PVD_opt_type_1_path_table_size)
 117 #define PVD_type_m_path_table_size 4
 118 #define PVD_opt_type_m_path_table_offset (PVD_type_m_path_table_offset + PVD_type_m_path_table_size)
 119 #define PVD_opt_type_m_path_table_size 4
 120 #define PVD_root_directory_record_offset (PVD_opt_type_m_path_table_offset + PVD_opt_type_m_path_table_size)
 121 #define PVD_root_directory_record_size 34
 122 #define PVD_volume_set_id_offset (PVD_root_directory_record_offset + PVD_root_directory_record_size)
 123 #define PVD_volume_set_id_size 128
 124 #define PVD_publisher_id_offset (PVD_volume_set_id_offset + PVD_volume_set_id_size)
 125 #define PVD_publisher_id_size 128
 126 #define PVD_preparer_id_offset (PVD_publisher_id_offset + PVD_publisher_id_size)
 127 #define PVD_preparer_id_size 128
 128 #define PVD_application_id_offset (PVD_preparer_id_offset + PVD_preparer_id_size)
 129 #define PVD_application_id_size 128
 130 #define PVD_copyright_file_id_offset (PVD_application_id_offset + PVD_application_id_size)
 131 #define PVD_copyright_file_id_size 37
 132 #define PVD_abstract_file_id_offset (PVD_copyright_file_id_offset + PVD_copyright_file_id_size)
 133 #define PVD_abstract_file_id_size 37
 134 #define PVD_bibliographic_file_id_offset (PVD_abstract_file_id_offset + PVD_abstract_file_id_size)
 135 #define PVD_bibliographic_file_id_size 37
 136 #define PVD_creation_date_offset (PVD_bibliographic_file_id_offset + PVD_bibliographic_file_id_size)
 137 #define PVD_creation_date_size 17
 138 #define PVD_modification_date_offset (PVD_creation_date_offset + PVD_creation_date_size)
 139 #define PVD_modification_date_size 17
 140 #define PVD_expiration_date_offset (PVD_modification_date_offset + PVD_modification_date_size)
 141 #define PVD_expiration_date_size 17
 142 #define PVD_effective_date_offset (PVD_expiration_date_offset + PVD_expiration_date_size)
 143 #define PVD_effective_date_size 17
 144 #define PVD_file_structure_version_offset (PVD_effective_date_offset + PVD_effective_date_size)
 145 #define PVD_file_structure_version_size 1
 146 #define PVD_reserved4_offset (PVD_file_structure_version_offset + PVD_file_structure_version_size)
 147 #define PVD_reserved4_size 1
 148 #define PVD_application_data_offset (PVD_reserved4_offset + PVD_reserved4_size)
 149 #define PVD_application_data_size 512
 150 #define PVD_reserved5_offset (PVD_application_data_offset + PVD_application_data_size)
 151 #define PVD_reserved5_size (2048 - PVD_reserved5_offset)
 152
 153 /* TODO: It would make future maintenance easier to just hardcode the
 154  * above values.  In particular, ECMA119 states the offsets as part of
 155  * the standard.  That would eliminate the need for the following check.*/
 156 #if PVD_reserved5_offset != 1395
 157 #error PVD offset and size definitions are wrong.
 158 #endif
 159
 160
 161 /* Structure of optional on-disk supplementary volume descriptor. */
 162 #define SVD_type_offset 0
 163 #define SVD_type_size 1
 164 #define SVD_id_offset (SVD_type_offset + SVD_type_size)
 165 #define SVD_id_size 5
 166 #define SVD_version_offset (SVD_id_offset + SVD_id_size)
 167 #define SVD_version_size 1
 168 /* ... */
 169 #define SVD_reserved1_offset    72
 170 #define SVD_reserved1_size      8
 171 #define SVD_volume_space_size_offset 80
 172 #define SVD_volume_space_size_size 8
 173 #define SVD_escape_sequences_offset (SVD_volume_space_size_offset + SVD_volume_space_size_size)
 174 #define SVD_escape_sequences_size 32
 175 /* ... */
 176 #define SVD_logical_block_size_offset 128
 177 #define SVD_logical_block_size_size 4
 178 #define SVD_type_L_path_table_offset 140
 179 #define SVD_type_M_path_table_offset 148
 180 /* ... */
 181 #define SVD_root_directory_record_offset 156
 182 #define SVD_root_directory_record_size 34
 183 #define SVD_file_structure_version_offset 881
 184 #define SVD_reserved2_offset    882
 185 #define SVD_reserved2_size      1
 186 #define SVD_reserved3_offset    1395
 187 #define SVD_reserved3_size      653
 188 /* ... */
 189 /* FIXME: validate correctness of last SVD entry offset. */
 190
 191 /* Structure of an on-disk directory record. */
 192 /* Note:  ISO9660 stores each multi-byte integer twice, once in
 193  * each byte order.  The sizes here are the size of just one
 194  * of the two integers.  (This is why the offset of a field isn't
 195  * the same as the offset+size of the previous field.) */
 196 #define DR_length_offset 0
 197 #define DR_length_size 1
 198 #define DR_ext_attr_length_offset 1
 199 #define DR_ext_attr_length_size 1
 200 #define DR_extent_offset 2
 201 #define DR_extent_size 4
 202 #define DR_size_offset 10
 203 #define DR_size_size 4
 204 #define DR_date_offset 18
 205 #define DR_date_size 7
 206 #define DR_flags_offset 25
 207 #define DR_flags_size 1
 208 #define DR_file_unit_size_offset 26
 209 #define DR_file_unit_size_size 1
 210 #define DR_interleave_offset 27
 211 #define DR_interleave_size 1
 212 #define DR_volume_sequence_number_offset 28
 213 #define DR_volume_sequence_number_size 2
 214 #define DR_name_len_offset 32
 215 #define DR_name_len_size 1
 216 #define DR_name_offset 33
 217
 218 #ifdef HAVE_ZLIB_H
 219 static const unsigned char zisofs_magic[8] = {
 220         0x37, 0xE4, 0x53, 0x96, 0xC9, 0xDB, 0xD6, 0x07
 221 };
 222
 223 struct zisofs {
 224         /* Set 1 if this file compressed by paged zlib */
 225         int              pz;
 226         int              pz_log2_bs; /* Log2 of block size */
 227         uint64_t         pz_uncompressed_size;
 228
 229         int              initialized;
 230         unsigned char   *uncompressed_buffer;
 231         size_t           uncompressed_buffer_size;
 232
 233         uint32_t         pz_offset;
 234         unsigned char    header[16];
 235         size_t           header_avail;
 236         int              header_passed;
 237         unsigned char   *block_pointers;
 238         size_t           block_pointers_alloc;
 239         size_t           block_pointers_size;
 240         size_t           block_pointers_avail;
 241         size_t           block_off;
 242         uint32_t         block_avail;
 243
 244         z_stream         stream;
 245         int              stream_valid;
 246 };
 247 #else
 248 struct zisofs {
 249         /* Set 1 if this file compressed by paged zlib */
 250         int              pz;
 251 };
 252 #endif
 253
 254 struct content {
 255         uint64_t         offset;/* Offset on disk.              */
 256         uint64_t         size;  /* File size in bytes.          */
 257         struct content  *next;
 258 };
 259
 260 /* In-memory storage for a directory record. */
 261 struct file_info {
 262         struct file_info        *use_next;
 263         struct file_info        *parent;
 264         struct file_info        *next;
 265         struct file_info        *re_next;
 266         int              subdirs;
 267         uint64_t         key;           /* Heap Key.                    */
 268         uint64_t         offset;        /* Offset on disk.              */
 269         uint64_t         size;          /* File size in bytes.          */
 270         uint32_t         ce_offset;     /* Offset of CE.                */
 271         uint32_t         ce_size;       /* Size of CE.                  */
 272         char             rr_moved;      /* Flag to rr_moved.            */
 273         char             rr_moved_has_re_only;
 274         char             re;            /* Having RRIP "RE" extension.  */
 275         char             re_descendant;
 276         uint64_t         cl_offset;     /* Having RRIP "CL" extension.  */
 277         int              birthtime_is_set;
 278         time_t           birthtime;     /* File created time.           */
 279         time_t           mtime;         /* File last modified time.     */
 280         time_t           atime;         /* File last accessed time.     */
 281         time_t           ctime;         /* File attribute change time.  */
 282         uint64_t         rdev;          /* Device number.               */
 283         mode_t           mode;
 284         uid_t            uid;
 285         gid_t            gid;
 286         int64_t          number;
 287         int              nlinks;
 288         struct archive_string name; /* Pathname */
 289         unsigned char   *utf16be_name;
 290         size_t           utf16be_bytes;
 291         char             name_continues; /* Non-zero if name continues */
 292         struct archive_string symlink;
 293         char             symlink_continues; /* Non-zero if link continues */
 294         /* Set 1 if this file compressed by paged zlib(zisofs) */
 295         int              pz;
 296         int              pz_log2_bs; /* Log2 of block size */
 297         uint64_t         pz_uncompressed_size;
 298         /* Set 1 if this file is multi extent. */
 299         int              multi_extent;
 300         struct {
 301                 struct content  *first;
 302                 struct content  **last;
 303         } contents;
 304         struct {
 305                 struct file_info        *first;
 306                 struct file_info        **last;
 307         } rede_files;
 308 };
 309
 310 struct heap_queue {
 311         struct file_info **files;
 312         int              allocated;
 313         int              used;
 314 };
 315
 316 struct iso9660 {
 317         int     magic;
 318 #define ISO9660_MAGIC   0x96609660
 319
 320         int opt_support_joliet;
 321         int opt_support_rockridge;
 322
 323         struct archive_string pathname;
 324         char    seenRockridge;  /* Set true if RR extensions are used. */
 325         char    seenSUSP;       /* Set true if SUSP is beging used. */
 326         char    seenJoliet;
 327
 328         unsigned char   suspOffset;
 329         struct file_info *rr_moved;
 330         struct read_ce_queue {
 331                 struct read_ce_req {
 332                         uint64_t         offset;/* Offset of CE on disk. */
 333                         struct file_info *file;
 334                 }               *reqs;
 335                 int              cnt;
 336                 int              allocated;
 337         }       read_ce_req;
 338
 339         int64_t         previous_number;
 340         struct archive_string previous_pathname;
 341
 342         struct file_info                *use_files;
 343         struct heap_queue                pending_files;
 344         struct {
 345                 struct file_info        *first;
 346                 struct file_info        **last;
 347         }       cache_files;
 348         struct {
 349                 struct file_info        *first;
 350                 struct file_info        **last;
 351         }       re_files;
 352
 353         uint64_t current_position;
 354         ssize_t logical_block_size;
 355         uint64_t volume_size; /* Total size of volume in bytes. */
 356         int32_t  volume_block;/* Total size of volume in logical blocks. */
 357
 358         struct vd {
 359                 int             location;       /* Location of Extent.  */
 360                 uint32_t        size;
 361         } primary, joliet;
 362
 363         int64_t entry_sparse_offset;
 364         int64_t entry_bytes_remaining;
 365         size_t  entry_bytes_unconsumed;
 366         struct zisofs    entry_zisofs;
 367         struct content  *entry_content;
 368         struct archive_string_conv *sconv_utf16be;
 369         /*
 370          * Buffers for a full pathname in UTF-16BE in Joliet extensions.
 371          */
 372 #define UTF16_NAME_MAX  1024
 373         unsigned char *utf16be_path;
 374         size_t           utf16be_path_len;
 375         unsigned char *utf16be_previous_path;
 376         size_t           utf16be_previous_path_len;
 377         /* Null buufer used in bidder to improve its performance. */
 378         unsigned char    null[2048];
 379 };
 380
 381 static int      archive_read_format_iso9660_bid(struct archive_read *, int);
 382 static int      archive_read_format_iso9660_options(struct archive_read *,
 383                     const char *, const char *);
 384 static int      archive_read_format_iso9660_cleanup(struct archive_read *);
 385 static int      archive_read_format_iso9660_read_data(struct archive_read *,
 386                     const void **, size_t *, int64_t *);
 387 static int      archive_read_format_iso9660_read_data_skip(struct archive_read *);
 388 static int      archive_read_format_iso9660_read_header(struct archive_read *,
 389                     struct archive_entry *);
 390 static const char *build_pathname(struct archive_string *, struct file_info *, int);
 391 static int      build_pathname_utf16be(unsigned char *, size_t, size_t *,
 392                     struct file_info *);
 393 #if DEBUG
 394 static void     dump_isodirrec(FILE *, const unsigned char *isodirrec);
 395 #endif
 396 static time_t   time_from_tm(struct tm *);
 397 static time_t   isodate17(const unsigned char *);
 398 static time_t   isodate7(const unsigned char *);
 399 static int      isBootRecord(struct iso9660 *, const unsigned char *);
 400 static int      isVolumePartition(struct iso9660 *, const unsigned char *);
 401 static int      isVDSetTerminator(struct iso9660 *, const unsigned char *);
 402 static int      isJolietSVD(struct iso9660 *, const unsigned char *);
 403 static int      isSVD(struct iso9660 *, const unsigned char *);
 404 static int      isEVD(struct iso9660 *, const unsigned char *);
 405 static int      isPVD(struct iso9660 *, const unsigned char *);
 406 static int      next_cache_entry(struct archive_read *, struct iso9660 *,
 407                     struct file_info **);
 408 static int      next_entry_seek(struct archive_read *, struct iso9660 *,
 409                     struct file_info **);
 410 static struct file_info *
 411                 parse_file_info(struct archive_read *a,
 412                     struct file_info *parent, const unsigned char *isodirrec);
 413 static int      parse_rockridge(struct archive_read *a,
 414                     struct file_info *file, const unsigned char *start,
 415                     const unsigned char *end);
 416 static int      register_CE(struct archive_read *a, int32_t location,
 417                     struct file_info *file);
 418 static int      read_CE(struct archive_read *a, struct iso9660 *iso9660);
 419 static void     parse_rockridge_NM1(struct file_info *,
 420                     const unsigned char *, int);
 421 static void     parse_rockridge_SL1(struct file_info *,
 422                     const unsigned char *, int);
 423 static void     parse_rockridge_TF1(struct file_info *,
 424                     const unsigned char *, int);
 425 static void     parse_rockridge_ZF1(struct file_info *,
 426                     const unsigned char *, int);
 427 static void     register_file(struct iso9660 *, struct file_info *);
 428 static void     release_files(struct iso9660 *);
 429 static unsigned toi(const void *p, int n);
 430 static inline void re_add_entry(struct iso9660 *, struct file_info *);
 431 static inline struct file_info * re_get_entry(struct iso9660 *);
 432 static inline int rede_add_entry(struct file_info *);
 433 static inline struct file_info * rede_get_entry(struct file_info *);
 434 static inline void cache_add_entry(struct iso9660 *iso9660,
 435                     struct file_info *file);
 436 static inline struct file_info *cache_get_entry(struct iso9660 *iso9660);
 437 static int      heap_add_entry(struct archive_read *a, struct heap_queue *heap,
 438                     struct file_info *file, uint64_t key);
 439 static struct file_info *heap_get_entry(struct heap_queue *heap);
 440
 441 #define add_entry(arch, iso9660, file)  \
 442         heap_add_entry(arch, &((iso9660)->pending_files), file, file->offset)
 443 #define next_entry(iso9660)             \
 444         heap_get_entry(&((iso9660)->pending_files))
 445
 446 int
 447 archive_read_support_format_iso9660(struct archive *_a)
 448 {
 449         struct archive_read *a = (struct archive_read *)_a;
 450         struct iso9660 *iso9660;
 451         int r;
 452
 453         archive_check_magic(_a, ARCHIVE_READ_MAGIC,
 454             ARCHIVE_STATE_NEW, "archive_read_support_format_iso9660");
 455
 456         iso9660 = (struct iso9660 *)calloc(1, sizeof(*iso9660));
 457         if (iso9660 == NULL) {
 458                 archive_set_error(&a->archive, ENOMEM,
 459                     "Can't allocate iso9660 data");
 460                 return (ARCHIVE_FATAL);
 461         }
 462         iso9660->magic = ISO9660_MAGIC;
 463         iso9660->cache_files.first = NULL;
 464         iso9660->cache_files.last = &(iso9660->cache_files.first);
 465         iso9660->re_files.first = NULL;
 466         iso9660->re_files.last = &(iso9660->re_files.first);
 467         /* Enable to support Joliet extensions by default.      */
 468         iso9660->opt_support_joliet = 1;
 469         /* Enable to support Rock Ridge extensions by default.  */
 470         iso9660->opt_support_rockridge = 1;
 471
 472         r = __archive_read_register_format(a,
 473             iso9660,
 474             "iso9660",
 475             archive_read_format_iso9660_bid,
 476             archive_read_format_iso9660_options,
 477             archive_read_format_iso9660_read_header,
 478             archive_read_format_iso9660_read_data,
 479             archive_read_format_iso9660_read_data_skip,
 480             NULL,
 481             archive_read_format_iso9660_cleanup,
 482             NULL,
 483             NULL);
 484
 485         if (r != ARCHIVE_OK) {
 486                 free(iso9660);
 487                 return (r);
 488         }
 489         return (ARCHIVE_OK);
 490 }
 491
 492
 493 static int
 494 archive_read_format_iso9660_bid(struct archive_read *a, int best_bid)
 495 {
 496         struct iso9660 *iso9660;
 497         ssize_t bytes_read;
 498         const unsigned char *p;
 499         int seenTerminator;
 500
 501         /* If there's already a better bid than we can ever
 502            make, don't bother testing. */
 503         if (best_bid > 48)
 504                 return (-1);
 505
 506         iso9660 = (struct iso9660 *)(a->format->data);
 507
 508         /*
 509          * Skip the first 32k (reserved area) and get the first
 510          * 8 sectors of the volume descriptor table.  Of course,
 511          * if the I/O layer gives us more, we'll take it.
 512          */
 513 #define RESERVED_AREA   (SYSTEM_AREA_BLOCK * LOGICAL_BLOCK_SIZE)
 514         p = __archive_read_ahead(a,
 515             RESERVED_AREA + 8 * LOGICAL_BLOCK_SIZE,
 516             &bytes_read);
 517         if (p == NULL)
 518             return (-1);
 519
 520         /* Skip the reserved area. */
 521         bytes_read -= RESERVED_AREA;
 522         p += RESERVED_AREA;
 523
 524         /* Check each volume descriptor. */
 525         seenTerminator = 0;
 526         for (; bytes_read > LOGICAL_BLOCK_SIZE;
 527             bytes_read -= LOGICAL_BLOCK_SIZE, p += LOGICAL_BLOCK_SIZE) {
 528                 /* Do not handle undefined Volume Descriptor Type. */
 529                 if (p[0] >= 4 && p[0] <= 254)
 530                         return (0);
 531                 /* Standard Identifier must be "CD001" */
 532                 if (memcmp(p + 1, "CD001", 5) != 0)
 533                         return (0);
 534                 if (isPVD(iso9660, p))
 535                         continue;
 536                 if (!iso9660->joliet.location) {
 537                         if (isJolietSVD(iso9660, p))
 538                                 continue;
 539                 }
 540                 if (isBootRecord(iso9660, p))
 541                         continue;
 542                 if (isEVD(iso9660, p))
 543                         continue;
 544                 if (isSVD(iso9660, p))
 545                         continue;
 546                 if (isVolumePartition(iso9660, p))
 547                         continue;
 548                 if (isVDSetTerminator(iso9660, p)) {
 549                         seenTerminator = 1;
 550                         break;
 551                 }
 552                 return (0);
 553         }
 554         /*
 555          * ISO 9660 format must have Primary Volume Descriptor and
 556          * Volume Descriptor Set Terminator.
 557          */
 558         if (seenTerminator && iso9660->primary.location > 16)
 559                 return (48);
 560
 561         /* We didn't find a valid PVD; return a bid of zero. */
 562         return (0);
 563 }
 564
 565 static int
 566 archive_read_format_iso9660_options(struct archive_read *a,
 567                 const char *key, const char *val)
 568 {
 569         struct iso9660 *iso9660;
 570
 571         iso9660 = (struct iso9660 *)(a->format->data);
 572
 573         if (strcmp(key, "joliet") == 0) {
 574                 if (val == NULL || strcmp(val, "off") == 0 ||
 575                                 strcmp(val, "ignore") == 0 ||
 576                                 strcmp(val, "disable") == 0 ||
 577                                 strcmp(val, "0") == 0)
 578                         iso9660->opt_support_joliet = 0;
 579                 else
 580                         iso9660->opt_support_joliet = 1;
 581                 return (ARCHIVE_OK);
 582         }
 583         if (strcmp(key, "rockridge") == 0 ||
 584             strcmp(key, "Rockridge") == 0) {
 585                 iso9660->opt_support_rockridge = val != NULL;
 586                 return (ARCHIVE_OK);
 587         }
 588
 589         /* Note: The "warn" return is just to inform the options
 590          * supervisor that we didn't handle it.  It will generate
 591          * a suitable error if no one used this option. */
 592         return (ARCHIVE_WARN);
 593 }
 594
 595 static int
 596 isNull(struct iso9660 *iso9660, const unsigned char *h, unsigned offset,
 597 unsigned bytes)
 598 {
 599
 600         while (bytes >= sizeof(iso9660->null)) {
 601                 if (!memcmp(iso9660->null, h + offset, sizeof(iso9660->null)))
 602                         return (0);
 603                 offset += sizeof(iso9660->null);
 604                 bytes -= sizeof(iso9660->null);
 605         }
 606         if (bytes)
 607                 return memcmp(iso9660->null, h + offset, bytes) == 0;
 608         else
 609                 return (1);
 610 }
 611
 612 static int
 613 isBootRecord(struct iso9660 *iso9660, const unsigned char *h)
 614 {
 615         (void)iso9660; /* UNUSED */
 616
 617         /* Type of the Volume Descriptor Boot Record must be 0. */
 618         if (h[0] != 0)
 619                 return (0);
 620
 621         /* Volume Descriptor Version must be 1. */
 622         if (h[6] != 1)
 623                 return (0);
 624
 625         return (1);
 626 }
 627
 628 static int
 629 isVolumePartition(struct iso9660 *iso9660, const unsigned char *h)
 630 {
 631         int32_t location;
 632
 633         /* Type of the Volume Partition Descriptor must be 3. */
 634         if (h[0] != 3)
 635                 return (0);
 636
 637         /* Volume Descriptor Version must be 1. */
 638         if (h[6] != 1)
 639                 return (0);
 640         /* Unused Field */
 641         if (h[7] != 0)
 642                 return (0);
 643
 644         location = archive_le32dec(h + 72);
 645         if (location <= SYSTEM_AREA_BLOCK ||
 646             location >= iso9660->volume_block)
 647                 return (0);
 648         if ((uint32_t)location != archive_be32dec(h + 76))
 649                 return (0);
 650
 651         return (1);
 652 }
 653
 654 static int
 655 isVDSetTerminator(struct iso9660 *iso9660, const unsigned char *h)
 656 {
 657         (void)iso9660; /* UNUSED */
 658
 659         /* Type of the Volume Descriptor Set Terminator must be 255. */
 660         if (h[0] != 255)
 661                 return (0);
 662
 663         /* Volume Descriptor Version must be 1. */
 664         if (h[6] != 1)
 665                 return (0);
 666
 667         /* Reserved field must be 0. */
 668         if (!isNull(iso9660, h, 7, 2048-7))
 669                 return (0);
 670
 671         return (1);
 672 }
 673
 674 static int
 675 isJolietSVD(struct iso9660 *iso9660, const unsigned char *h)
 676 {
 677         const unsigned char *p;
 678         ssize_t logical_block_size;
 679         int32_t volume_block;
 680
 681         /* Check if current sector is a kind of Supplementary Volume
 682          * Descriptor. */
 683         if (!isSVD(iso9660, h))
 684                 return (0);
 685
 686         /* FIXME: do more validations according to joliet spec. */
 687
 688         /* check if this SVD contains joliet extension! */
 689         p = h + SVD_escape_sequences_offset;
 690         /* N.B. Joliet spec says p[1] == '\\', but.... */
 691         if (p[0] == '%' && p[1] == '/') {
 692                 int level = 0;
 693
 694                 if (p[2] == '@')
 695                         level = 1;
 696                 else if (p[2] == 'C')
 697                         level = 2;
 698                 else if (p[2] == 'E')
 699                         level = 3;
 700                 else /* not joliet */
 701                         return (0);
 702
 703                 iso9660->seenJoliet = level;
 704
 705         } else /* not joliet */
 706                 return (0);
 707
 708         logical_block_size =
 709             archive_le16dec(h + SVD_logical_block_size_offset);
 710         volume_block = archive_le32dec(h + SVD_volume_space_size_offset);
 711
 712         iso9660->logical_block_size = logical_block_size;
 713         iso9660->volume_block = volume_block;
 714         iso9660->volume_size = logical_block_size * (uint64_t)volume_block;
 715         /* Read Root Directory Record in Volume Descriptor. */
 716         p = h + SVD_root_directory_record_offset;
 717         iso9660->joliet.location = archive_le32dec(p + DR_extent_offset);
 718         iso9660->joliet.size = archive_le32dec(p + DR_size_offset);
 719
 720         return (48);
 721 }
 722
 723 static int
 724 isSVD(struct iso9660 *iso9660, const unsigned char *h)
 725 {
 726         const unsigned char *p;
 727         ssize_t logical_block_size;
 728         int32_t volume_block;
 729         int32_t location;
 730
 731         (void)iso9660; /* UNUSED */
 732
 733         /* Type 2 means it's a SVD. */
 734         if (h[SVD_type_offset] != 2)
 735                 return (0);
 736
 737         /* Reserved field must be 0. */
 738         if (!isNull(iso9660, h, SVD_reserved1_offset, SVD_reserved1_size))
 739                 return (0);
 740         if (!isNull(iso9660, h, SVD_reserved2_offset, SVD_reserved2_size))
 741                 return (0);
 742         if (!isNull(iso9660, h, SVD_reserved3_offset, SVD_reserved3_size))
 743                 return (0);
 744
 745         /* File structure version must be 1 for ISO9660/ECMA119. */
 746         if (h[SVD_file_structure_version_offset] != 1)
 747                 return (0);
 748
 749         logical_block_size =
 750             archive_le16dec(h + SVD_logical_block_size_offset);
 751         if (logical_block_size <= 0)
 752                 return (0);
 753
 754         volume_block = archive_le32dec(h + SVD_volume_space_size_offset);
 755         if (volume_block <= SYSTEM_AREA_BLOCK+4)
 756                 return (0);
 757
 758         /* Location of Occurrence of Type L Path Table must be
 759          * available location,
 760          * >= SYSTEM_AREA_BLOCK(16) + 2 and < Volume Space Size. */
 761         location = archive_le32dec(h+SVD_type_L_path_table_offset);
 762         if (location < SYSTEM_AREA_BLOCK+2 || location >= volume_block)
 763                 return (0);
 764
 765         /* The Type M Path Table must be at a valid location (WinISO
 766          * and probably other programs omit this, so we allow zero)
 767          *
 768          * >= SYSTEM_AREA_BLOCK(16) + 2 and < Volume Space Size. */
 769         location = archive_be32dec(h+SVD_type_M_path_table_offset);
 770         if ((location > 0 && location < SYSTEM_AREA_BLOCK+2)
 771             || location >= volume_block)
 772                 return (0);
 773
 774         /* Read Root Directory Record in Volume Descriptor. */
 775         p = h + SVD_root_directory_record_offset;
 776         if (p[DR_length_offset] != 34)
 777                 return (0);
 778
 779         return (48);
 780 }
 781
 782 static int
 783 isEVD(struct iso9660 *iso9660, const unsigned char *h)
 784 {
 785         const unsigned char *p;
 786         ssize_t logical_block_size;
 787         int32_t volume_block;
 788         int32_t location;
 789
 790         (void)iso9660; /* UNUSED */
 791
 792         /* Type of the Enhanced Volume Descriptor must be 2. */
 793         if (h[PVD_type_offset] != 2)
 794                 return (0);
 795
 796         /* EVD version must be 2. */
 797         if (h[PVD_version_offset] != 2)
 798                 return (0);
 799
 800         /* Reserved field must be 0. */
 801         if (h[PVD_reserved1_offset] != 0)
 802                 return (0);
 803
 804         /* Reserved field must be 0. */
 805         if (!isNull(iso9660, h, PVD_reserved2_offset, PVD_reserved2_size))
 806                 return (0);
 807
 808         /* Reserved field must be 0. */
 809         if (!isNull(iso9660, h, PVD_reserved3_offset, PVD_reserved3_size))
 810                 return (0);
 811
 812         /* Logical block size must be > 0. */
 813         /* I've looked at Ecma 119 and can't find any stronger
 814          * restriction on this field. */
 815         logical_block_size =
 816             archive_le16dec(h + PVD_logical_block_size_offset);
 817         if (logical_block_size <= 0)
 818                 return (0);
 819
 820         volume_block =
 821             archive_le32dec(h + PVD_volume_space_size_offset);
 822         if (volume_block <= SYSTEM_AREA_BLOCK+4)
 823                 return (0);
 824
 825         /* File structure version must be 2 for ISO9660:1999. */
 826         if (h[PVD_file_structure_version_offset] != 2)
 827                 return (0);
 828
 829         /* Location of Occurrence of Type L Path Table must be
 830          * available location,
 831          * >= SYSTEM_AREA_BLOCK(16) + 2 and < Volume Space Size. */
 832         location = archive_le32dec(h+PVD_type_1_path_table_offset);
 833         if (location < SYSTEM_AREA_BLOCK+2 || location >= volume_block)
 834                 return (0);
 835
 836         /* Location of Occurrence of Type M Path Table must be
 837          * available location,
 838          * >= SYSTEM_AREA_BLOCK(16) + 2 and < Volume Space Size. */
 839         location = archive_be32dec(h+PVD_type_m_path_table_offset);
 840         if ((location > 0 && location < SYSTEM_AREA_BLOCK+2)
 841             || location >= volume_block)
 842                 return (0);
 843
 844         /* Reserved field must be 0. */
 845         if (!isNull(iso9660, h, PVD_reserved4_offset, PVD_reserved4_size))
 846                 return (0);
 847
 848         /* Reserved field must be 0. */
 849         if (!isNull(iso9660, h, PVD_reserved5_offset, PVD_reserved5_size))
 850                 return (0);
 851
 852         /* Read Root Directory Record in Volume Descriptor. */
 853         p = h + PVD_root_directory_record_offset;
 854         if (p[DR_length_offset] != 34)
 855                 return (0);
 856
 857         return (48);
 858 }
 859
 860 static int
 861 isPVD(struct iso9660 *iso9660, const unsigned char *h)
 862 {
 863         const unsigned char *p;
 864         ssize_t logical_block_size;
 865         int32_t volume_block;
 866         int32_t location;
 867         int i;
 868
 869         /* Type of the Primary Volume Descriptor must be 1. */
 870         if (h[PVD_type_offset] != 1)
 871                 return (0);
 872
 873         /* PVD version must be 1. */
 874         if (h[PVD_version_offset] != 1)
 875                 return (0);
 876
 877         /* Reserved field must be 0. */
 878         if (h[PVD_reserved1_offset] != 0)
 879                 return (0);
 880
 881         /* Reserved field must be 0. */
 882         if (!isNull(iso9660, h, PVD_reserved2_offset, PVD_reserved2_size))
 883                 return (0);
 884
 885         /* Reserved field must be 0. */
 886         if (!isNull(iso9660, h, PVD_reserved3_offset, PVD_reserved3_size))
 887                 return (0);
 888
 889         /* Logical block size must be > 0. */
 890         /* I've looked at Ecma 119 and can't find any stronger
 891          * restriction on this field. */
 892         logical_block_size =
 893             archive_le16dec(h + PVD_logical_block_size_offset);
 894         if (logical_block_size <= 0)
 895                 return (0);
 896
 897         volume_block = archive_le32dec(h + PVD_volume_space_size_offset);
 898         if (volume_block <= SYSTEM_AREA_BLOCK+4)
 899                 return (0);
 900
 901         /* File structure version must be 1 for ISO9660/ECMA119. */
 902         if (h[PVD_file_structure_version_offset] != 1)
 903                 return (0);
 904
 905         /* Location of Occurrence of Type L Path Table must be
 906          * available location,
 907          * > SYSTEM_AREA_BLOCK(16) + 2 and < Volume Space Size. */
 908         location = archive_le32dec(h+PVD_type_1_path_table_offset);
 909         if (location < SYSTEM_AREA_BLOCK+2 || location >= volume_block)
 910                 return (0);
 911
 912         /* The Type M Path Table must also be at a valid location
 913          * (although ECMA 119 requires a Type M Path Table, WinISO and
 914          * probably other programs omit it, so we permit a zero here)
 915          *
 916          * >= SYSTEM_AREA_BLOCK(16) + 2 and < Volume Space Size. */
 917         location = archive_be32dec(h+PVD_type_m_path_table_offset);
 918         if ((location > 0 && location < SYSTEM_AREA_BLOCK+2)
 919             || location >= volume_block)
 920                 return (0);
 921
 922         /* Reserved field must be 0. */
 923         /* But accept NetBSD/FreeBSD "makefs" images with 0x20 here. */
 924         for (i = 0; i < PVD_reserved4_size; ++i)
 925                 if (h[PVD_reserved4_offset + i] != 0
 926                     && h[PVD_reserved4_offset + i] != 0x20)
 927                         return (0);
 928
 929         /* Reserved field must be 0. */
 930         if (!isNull(iso9660, h, PVD_reserved5_offset, PVD_reserved5_size))
 931                 return (0);
 932
 933         /* XXX TODO: Check other values for sanity; reject more
 934          * malformed PVDs. XXX */
 935
 936         /* Read Root Directory Record in Volume Descriptor. */
 937         p = h + PVD_root_directory_record_offset;
 938         if (p[DR_length_offset] != 34)
 939                 return (0);
 940
 941         if (!iso9660->primary.location) {
 942                 iso9660->logical_block_size = logical_block_size;
 943                 iso9660->volume_block = volume_block;
 944                 iso9660->volume_size =
 945                     logical_block_size * (uint64_t)volume_block;
 946                 iso9660->primary.location =
 947                     archive_le32dec(p + DR_extent_offset);
 948                 iso9660->primary.size = archive_le32dec(p + DR_size_offset);
 949         }
 950
 951         return (48);
 952 }
 953
 954 static int
 955 read_children(struct archive_read *a, struct file_info *parent)
 956 {
 957         struct iso9660 *iso9660;
 958         const unsigned char *b, *p;
 959         struct file_info *multi;
 960         size_t step, skip_size;
 961
 962         iso9660 = (struct iso9660 *)(a->format->data);
 963         /* flush any remaining bytes from the last round to ensure
 964          * we're positioned */
 965         if (iso9660->entry_bytes_unconsumed) {
 966                 __archive_read_consume(a, iso9660->entry_bytes_unconsumed);
 967                 iso9660->entry_bytes_unconsumed = 0;
 968         }
 969         if (iso9660->current_position > parent->offset) {
 970                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
 971                     "Ignoring out-of-order directory (%s) %jd > %jd",
 972                     parent->name.s,
 973                     (intmax_t)iso9660->current_position,
 974                     (intmax_t)parent->offset);
 975                 return (ARCHIVE_WARN);
 976         }
 977         if (parent->offset + parent->size > iso9660->volume_size) {
 978                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
 979                     "Directory is beyond end-of-media: %s",
 980                     parent->name.s);
 981                 return (ARCHIVE_WARN);
 982         }
 983         if (iso9660->current_position < parent->offset) {
 984                 int64_t skipsize;
 985
 986                 skipsize = parent->offset - iso9660->current_position;
 987                 skipsize = __archive_read_consume(a, skipsize);
 988                 if (skipsize < 0)
 989                         return ((int)skipsize);
 990                 iso9660->current_position = parent->offset;
 991         }
 992
 993         step = (size_t)(((parent->size + iso9660->logical_block_size -1) /
 994             iso9660->logical_block_size) * iso9660->logical_block_size);
 995         b = __archive_read_ahead(a, step, NULL);
 996         if (b == NULL) {
 997                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
 998                     "Failed to read full block when scanning "
 999                     "ISO9660 directory list");
1000                 return (ARCHIVE_FATAL);
1001         }
1002         iso9660->current_position += step;
1003         multi = NULL;
1004         skip_size = step;
1005         while (step) {
1006                 p = b;
1007                 b += iso9660->logical_block_size;
1008                 step -= iso9660->logical_block_size;
1009                 for (; *p != 0 && p < b && p + *p <= b; p += *p) {
1010                         struct file_info *child;
1011
1012                         /* N.B.: these special directory identifiers
1013                          * are 8 bit "values" even on a
1014                          * Joliet CD with UCS-2 (16bit) encoding.
1015                          */
1016
1017                         /* Skip '.' entry. */
1018                         if (*(p + DR_name_len_offset) == 1
1019                             && *(p + DR_name_offset) == '\0')
1020                                 continue;
1021                         /* Skip '..' entry. */
1022                         if (*(p + DR_name_len_offset) == 1
1023                             && *(p + DR_name_offset) == '\001')
1024                                 continue;
1025                         child = parse_file_info(a, parent, p);
1026                         if (child == NULL) {
1027                                 __archive_read_consume(a, skip_size);
1028                                 return (ARCHIVE_FATAL);
1029                         }
1030                         if (child->cl_offset == 0 &&
1031                             (child->multi_extent || multi != NULL)) {
1032                                 struct content *con;
1033
1034                                 if (multi == NULL) {
1035                                         multi = child;
1036                                         multi->contents.first = NULL;
1037                                         multi->contents.last =
1038                                             &(multi->contents.first);
1039                                 }
1040                                 con = malloc(sizeof(struct content));
1041                                 if (con == NULL) {
1042                                         archive_set_error(
1043                                             &a->archive, ENOMEM,
1044                                             "No memory for multi extent");
1045                                         __archive_read_consume(a, skip_size);
1046                                         return (ARCHIVE_FATAL);
1047                                 }
1048                                 con->offset = child->offset;
1049                                 con->size = child->size;
1050                                 con->next = NULL;
1051                                 *multi->contents.last = con;
1052                                 multi->contents.last = &(con->next);
1053                                 if (multi == child) {
1054                                         if (add_entry(a, iso9660, child)
1055                                             != ARCHIVE_OK)
1056                                                 return (ARCHIVE_FATAL);
1057                                 } else {
1058                                         multi->size += child->size;
1059                                         if (!child->multi_extent)
1060                                                 multi = NULL;
1061                                 }
1062                         } else
1063                                 if (add_entry(a, iso9660, child) != ARCHIVE_OK)
1064                                         return (ARCHIVE_FATAL);
1065                 }
1066         }
1067
1068         __archive_read_consume(a, skip_size);
1069
1070         /* Read data which recorded by RRIP "CE" extension. */
1071         if (read_CE(a, iso9660) != ARCHIVE_OK)
1072                 return (ARCHIVE_FATAL);
1073
1074         return (ARCHIVE_OK);
1075 }
1076
1077 static int
1078 choose_volume(struct archive_read *a, struct iso9660 *iso9660)
1079 {
1080         struct file_info *file;
1081         int64_t skipsize;
1082         struct vd *vd;
1083         const void *block;
1084         char seenJoliet;
1085
1086         vd = &(iso9660->primary);
1087         if (!iso9660->opt_support_joliet)
1088                 iso9660->seenJoliet = 0;
1089         if (iso9660->seenJoliet &&
1090                 vd->location > iso9660->joliet.location)
1091                 /* This condition is unlikely; by way of caution. */
1092                 vd = &(iso9660->joliet);
1093
1094         skipsize = LOGICAL_BLOCK_SIZE * vd->location;
1095         skipsize = __archive_read_consume(a, skipsize);
1096         if (skipsize < 0)
1097                 return ((int)skipsize);
1098         iso9660->current_position = skipsize;
1099
1100         block = __archive_read_ahead(a, vd->size, NULL);
1101         if (block == NULL) {
1102                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1103                     "Failed to read full block when scanning "
1104                     "ISO9660 directory list");
1105                 return (ARCHIVE_FATAL);
1106         }
1107
1108         /*
1109          * While reading Root Directory, flag seenJoliet must be zero to
1110          * avoid converting special name 0x00(Current Directory) and
1111          * next byte to UCS2.
1112          */
1113         seenJoliet = iso9660->seenJoliet;/* Save flag. */
1114         iso9660->seenJoliet = 0;
1115         file = parse_file_info(a, NULL, block);
1116         if (file == NULL)
1117                 return (ARCHIVE_FATAL);
1118         iso9660->seenJoliet = seenJoliet;
1119
1120         /*
1121          * If the iso image has both RockRidge and Joliet, we preferentially
1122          * use RockRidge Extensions rather than Joliet ones.
1123          */
1124         if (vd == &(iso9660->primary) && iso9660->seenRockridge
1125             && iso9660->seenJoliet)
1126                 iso9660->seenJoliet = 0;
1127
1128         if (vd == &(iso9660->primary) && !iso9660->seenRockridge
1129             && iso9660->seenJoliet) {
1130                 /* Switch reading data from primary to joliet. */
1131                 vd = &(iso9660->joliet);
1132                 skipsize = LOGICAL_BLOCK_SIZE * vd->location;
1133                 skipsize -= iso9660->current_position;
1134                 skipsize = __archive_read_consume(a, skipsize);
1135                 if (skipsize < 0)
1136                         return ((int)skipsize);
1137                 iso9660->current_position += skipsize;
1138
1139                 block = __archive_read_ahead(a, vd->size, NULL);
1140                 if (block == NULL) {
1141                         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1142                             "Failed to read full block when scanning "
1143                             "ISO9660 directory list");
1144                         return (ARCHIVE_FATAL);
1145                 }
1146                 iso9660->seenJoliet = 0;
1147                 file = parse_file_info(a, NULL, block);
1148                 if (file == NULL)
1149                         return (ARCHIVE_FATAL);
1150                 iso9660->seenJoliet = seenJoliet;
1151         }
1152
1153         /* Store the root directory in the pending list. */
1154         if (add_entry(a, iso9660, file) != ARCHIVE_OK)
1155                 return (ARCHIVE_FATAL);
1156         if (iso9660->seenRockridge) {
1157                 a->archive.archive_format = ARCHIVE_FORMAT_ISO9660_ROCKRIDGE;
1158                 a->archive.archive_format_name =
1159                     "ISO9660 with Rockridge extensions";
1160         }
1161
1162         return (ARCHIVE_OK);
1163 }
1164
1165 static int
1166 archive_read_format_iso9660_read_header(struct archive_read *a,
1167     struct archive_entry *entry)
1168 {
1169         struct iso9660 *iso9660;
1170         struct file_info *file;
1171         int r, rd_r = ARCHIVE_OK;
1172
1173         iso9660 = (struct iso9660 *)(a->format->data);
1174
1175         if (!a->archive.archive_format) {
1176                 a->archive.archive_format = ARCHIVE_FORMAT_ISO9660;
1177                 a->archive.archive_format_name = "ISO9660";
1178         }
1179
1180         if (iso9660->current_position == 0) {
1181                 r = choose_volume(a, iso9660);
1182                 if (r != ARCHIVE_OK)
1183                         return (r);
1184         }
1185
1186         file = NULL;/* Eliminate a warning. */
1187         /* Get the next entry that appears after the current offset. */
1188         r = next_entry_seek(a, iso9660, &file);
1189         if (r != ARCHIVE_OK)
1190                 return (r);
1191
1192         if (iso9660->seenJoliet) {
1193                 /*
1194                  * Convert UTF-16BE of a filename to local locale MBS
1195                  * and store the result into a filename field.
1196                  */
1197                 if (iso9660->sconv_utf16be == NULL) {
1198                         iso9660->sconv_utf16be =
1199                             archive_string_conversion_from_charset(
1200                                 &(a->archive), "UTF-16BE", 1);
1201                         if (iso9660->sconv_utf16be == NULL)
1202                                 /* Coundn't allocate memory */
1203                                 return (ARCHIVE_FATAL);
1204                 }
1205                 if (iso9660->utf16be_path == NULL) {
1206                         iso9660->utf16be_path = malloc(UTF16_NAME_MAX);
1207                         if (iso9660->utf16be_path == NULL) {
1208                                 archive_set_error(&a->archive, ENOMEM,
1209                                     "No memory");
1210                                 return (ARCHIVE_FATAL);
1211                         }
1212                 }
1213                 if (iso9660->utf16be_previous_path == NULL) {
1214                         iso9660->utf16be_previous_path = malloc(UTF16_NAME_MAX);
1215                         if (iso9660->utf16be_previous_path == NULL) {
1216                                 archive_set_error(&a->archive, ENOMEM,
1217                                     "No memory");
1218                                 return (ARCHIVE_FATAL);
1219                         }
1220                 }
1221
1222                 iso9660->utf16be_path_len = 0;
1223                 if (build_pathname_utf16be(iso9660->utf16be_path,
1224                     UTF16_NAME_MAX, &(iso9660->utf16be_path_len), file) != 0) {
1225                         archive_set_error(&a->archive,
1226                             ARCHIVE_ERRNO_FILE_FORMAT,
1227                             "Pathname is too long");
1228                         return (ARCHIVE_FATAL);
1229                 }
1230
1231                 r = archive_entry_copy_pathname_l(entry,
1232                     (const char *)iso9660->utf16be_path,
1233                     iso9660->utf16be_path_len,
1234                     iso9660->sconv_utf16be);
1235                 if (r != 0) {
1236                         if (errno == ENOMEM) {
1237                                 archive_set_error(&a->archive, ENOMEM,
1238                                     "No memory for Pathname");
1239                                 return (ARCHIVE_FATAL);
1240                         }
1241                         archive_set_error(&a->archive,
1242                             ARCHIVE_ERRNO_FILE_FORMAT,
1243                             "Pathname cannot be converted "
1244                             "from %s to current locale.",
1245                             archive_string_conversion_charset_name(
1246                               iso9660->sconv_utf16be));
1247
1248                         rd_r = ARCHIVE_WARN;
1249                 }
1250         } else {
1251                 const char *path = build_pathname(&iso9660->pathname, file, 0);
1252                 if (path == NULL) {
1253                         archive_set_error(&a->archive,
1254                             ARCHIVE_ERRNO_FILE_FORMAT,
1255                             "Pathname is too long");
1256                         return (ARCHIVE_FATAL);
1257                 } else {
1258                         archive_string_empty(&iso9660->pathname);
1259                         archive_entry_set_pathname(entry, path);
1260                 }
1261         }
1262
1263         iso9660->entry_bytes_remaining = file->size;
1264         /* Offset for sparse-file-aware clients. */
1265         iso9660->entry_sparse_offset = 0;
1266
1267         if (file->offset + file->size > iso9660->volume_size) {
1268                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1269                     "File is beyond end-of-media: %s",
1270                     archive_entry_pathname(entry));
1271                 iso9660->entry_bytes_remaining = 0;
1272                 return (ARCHIVE_WARN);
1273         }
1274
1275         /* Set up the entry structure with information about this entry. */
1276         archive_entry_set_mode(entry, file->mode);
1277         archive_entry_set_uid(entry, file->uid);
1278         archive_entry_set_gid(entry, file->gid);
1279         archive_entry_set_nlink(entry, file->nlinks);
1280         if (file->birthtime_is_set)
1281                 archive_entry_set_birthtime(entry, file->birthtime, 0);
1282         else
1283                 archive_entry_unset_birthtime(entry);
1284         archive_entry_set_mtime(entry, file->mtime, 0);
1285         archive_entry_set_ctime(entry, file->ctime, 0);
1286         archive_entry_set_atime(entry, file->atime, 0);
1287         /* N.B.: Rock Ridge supports 64-bit device numbers. */
1288         archive_entry_set_rdev(entry, (dev_t)file->rdev);
1289         archive_entry_set_size(entry, iso9660->entry_bytes_remaining);
1290         if (file->symlink.s != NULL)
1291                 archive_entry_copy_symlink(entry, file->symlink.s);
1292
1293         /* Note: If the input isn't seekable, we can't rewind to
1294          * return the same body again, so if the next entry refers to
1295          * the same data, we have to return it as a hardlink to the
1296          * original entry. */
1297         if (file->number != -1 &&
1298             file->number == iso9660->previous_number) {
1299                 if (iso9660->seenJoliet) {
1300                         r = archive_entry_copy_hardlink_l(entry,
1301                             (const char *)iso9660->utf16be_previous_path,
1302                             iso9660->utf16be_previous_path_len,
1303                             iso9660->sconv_utf16be);
1304                         if (r != 0) {
1305                                 if (errno == ENOMEM) {
1306                                         archive_set_error(&a->archive, ENOMEM,
1307                                             "No memory for Linkname");
1308                                         return (ARCHIVE_FATAL);
1309                                 }
1310                                 archive_set_error(&a->archive,
1311                                     ARCHIVE_ERRNO_FILE_FORMAT,
1312                                     "Linkname cannot be converted "
1313                                     "from %s to current locale.",
1314                                     archive_string_conversion_charset_name(
1315                                       iso9660->sconv_utf16be));
1316                                 rd_r = ARCHIVE_WARN;
1317                         }
1318                 } else
1319                         archive_entry_set_hardlink(entry,
1320                             iso9660->previous_pathname.s);
1321                 archive_entry_unset_size(entry);
1322                 iso9660->entry_bytes_remaining = 0;
1323                 return (rd_r);
1324         }
1325
1326         if ((file->mode & AE_IFMT) != AE_IFDIR &&
1327             file->offset < iso9660->current_position) {
1328                 int64_t r64;
1329
1330                 r64 = __archive_read_seek(a, file->offset, SEEK_SET);
1331                 if (r64 != (int64_t)file->offset) {
1332                         /* We can't seek backwards to extract it, so issue
1333                          * a warning.  Note that this can only happen if
1334                          * this entry was added to the heap after we passed
1335                          * this offset, that is, only if the directory
1336                          * mentioning this entry is later than the body of
1337                          * the entry. Such layouts are very unusual; most
1338                          * ISO9660 writers lay out and record all directory
1339                          * information first, then store all file bodies. */
1340                         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1341                             "Ignoring out-of-order file @%jx (%s) %jd < %jd",
1342                             (intmax_t)file->number,
1343                             iso9660->pathname.s,
1344                             (intmax_t)file->offset,
1345                             (intmax_t)iso9660->current_position);
1346                         iso9660->entry_bytes_remaining = 0;
1347                         return (ARCHIVE_WARN);
1348                 }
1349                 iso9660->current_position = (uint64_t)r64;
1350         }
1351
1352         /* Initialize zisofs variables. */
1353         iso9660->entry_zisofs.pz = file->pz;
1354         if (file->pz) {
1355 #ifdef HAVE_ZLIB_H
1356                 struct zisofs  *zisofs;
1357
1358                 zisofs = &iso9660->entry_zisofs;
1359                 zisofs->initialized = 0;
1360                 zisofs->pz_log2_bs = file->pz_log2_bs;
1361                 zisofs->pz_uncompressed_size = file->pz_uncompressed_size;
1362                 zisofs->pz_offset = 0;
1363                 zisofs->header_avail = 0;
1364                 zisofs->header_passed = 0;
1365                 zisofs->block_pointers_avail = 0;
1366 #endif
1367                 archive_entry_set_size(entry, file->pz_uncompressed_size);
1368         }
1369
1370         iso9660->previous_number = file->number;
1371         if (iso9660->seenJoliet) {
1372                 memcpy(iso9660->utf16be_previous_path, iso9660->utf16be_path,
1373                     iso9660->utf16be_path_len);
1374                 iso9660->utf16be_previous_path_len = iso9660->utf16be_path_len;
1375         } else
1376                 archive_strcpy(
1377                     &iso9660->previous_pathname, iso9660->pathname.s);
1378
1379         /* Reset entry_bytes_remaining if the file is multi extent. */
1380         iso9660->entry_content = file->contents.first;
1381         if (iso9660->entry_content != NULL)
1382                 iso9660->entry_bytes_remaining = iso9660->entry_content->size;
1383
1384         if (archive_entry_filetype(entry) == AE_IFDIR) {
1385                 /* Overwrite nlinks by proper link number which is
1386                  * calculated from number of sub directories. */
1387                 archive_entry_set_nlink(entry, 2 + file->subdirs);
1388                 /* Directory data has been read completely. */
1389                 iso9660->entry_bytes_remaining = 0;
1390         }
1391
1392         if (rd_r != ARCHIVE_OK)
1393                 return (rd_r);
1394         return (ARCHIVE_OK);
1395 }
1396
1397 static int
1398 archive_read_format_iso9660_read_data_skip(struct archive_read *a)
1399 {
1400         /* Because read_next_header always does an explicit skip
1401          * to the next entry, we don't need to do anything here. */
1402         (void)a; /* UNUSED */
1403         return (ARCHIVE_OK);
1404 }
1405
1406 #ifdef HAVE_ZLIB_H
1407
1408 static int
1409 zisofs_read_data(struct archive_read *a,
1410     const void **buff, size_t *size, int64_t *offset)
1411 {
1412         struct iso9660 *iso9660;
1413         struct zisofs  *zisofs;
1414         const unsigned char *p;
1415         size_t avail;
1416         ssize_t bytes_read;
1417         size_t uncompressed_size;
1418         int r;
1419
1420         iso9660 = (struct iso9660 *)(a->format->data);
1421         zisofs = &iso9660->entry_zisofs;
1422
1423         p = __archive_read_ahead(a, 1, &bytes_read);
1424         if (bytes_read <= 0) {
1425                 archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
1426                     "Truncated zisofs file body");
1427                 return (ARCHIVE_FATAL);
1428         }
1429         if (bytes_read > iso9660->entry_bytes_remaining)
1430                 bytes_read = (ssize_t)iso9660->entry_bytes_remaining;
1431         avail = bytes_read;
1432         uncompressed_size = 0;
1433
1434         if (!zisofs->initialized) {
1435                 size_t ceil, xsize;
1436
1437                 /* Allocate block pointers buffer. */
1438                 ceil = (size_t)((zisofs->pz_uncompressed_size +
1439                         (((int64_t)1) << zisofs->pz_log2_bs) - 1)
1440                         >> zisofs->pz_log2_bs);
1441                 xsize = (ceil + 1) * 4;
1442                 if (zisofs->block_pointers_alloc < xsize) {
1443                         size_t alloc;
1444
1445                         if (zisofs->block_pointers != NULL)
1446                                 free(zisofs->block_pointers);
1447                         alloc = ((xsize >> 10) + 1) << 10;
1448                         zisofs->block_pointers = malloc(alloc);
1449                         if (zisofs->block_pointers == NULL) {
1450                                 archive_set_error(&a->archive, ENOMEM,
1451                                     "No memory for zisofs decompression");
1452                                 return (ARCHIVE_FATAL);
1453                         }
1454                         zisofs->block_pointers_alloc = alloc;
1455                 }
1456                 zisofs->block_pointers_size = xsize;
1457
1458                 /* Allocate uncompressed data buffer. */
1459                 xsize = (size_t)1UL << zisofs->pz_log2_bs;
1460                 if (zisofs->uncompressed_buffer_size < xsize) {
1461                         if (zisofs->uncompressed_buffer != NULL)
1462                                 free(zisofs->uncompressed_buffer);
1463                         zisofs->uncompressed_buffer = malloc(xsize);
1464                         if (zisofs->uncompressed_buffer == NULL) {
1465                                 archive_set_error(&a->archive, ENOMEM,
1466                                     "No memory for zisofs decompression");
1467                                 return (ARCHIVE_FATAL);
1468                         }
1469                 }
1470                 zisofs->uncompressed_buffer_size = xsize;
1471
1472                 /*
1473                  * Read the file header, and check the magic code of zisofs.
1474                  */
1475                 if (zisofs->header_avail < sizeof(zisofs->header)) {
1476                         xsize = sizeof(zisofs->header) - zisofs->header_avail;
1477                         if (avail < xsize)
1478                                 xsize = avail;
1479                         memcpy(zisofs->header + zisofs->header_avail, p, xsize);
1480                         zisofs->header_avail += xsize;
1481                         avail -= xsize;
1482                         p += xsize;
1483                 }
1484                 if (!zisofs->header_passed &&
1485                     zisofs->header_avail == sizeof(zisofs->header)) {
1486                         int err = 0;
1487
1488                         if (memcmp(zisofs->header, zisofs_magic,
1489                             sizeof(zisofs_magic)) != 0)
1490                                 err = 1;
1491                         if (archive_le32dec(zisofs->header + 8)
1492                             != zisofs->pz_uncompressed_size)
1493                                 err = 1;
1494                         if (zisofs->header[12] != 4)
1495                                 err = 1;
1496                         if (zisofs->header[13] != zisofs->pz_log2_bs)
1497                                 err = 1;
1498                         if (err) {
1499                                 archive_set_error(&a->archive,
1500                                     ARCHIVE_ERRNO_FILE_FORMAT,
1501                                     "Illegal zisofs file body");
1502                                 return (ARCHIVE_FATAL);
1503                         }
1504                         zisofs->header_passed = 1;
1505                 }
1506                 /*
1507                  * Read block pointers.
1508                  */
1509                 if (zisofs->header_passed &&
1510                     zisofs->block_pointers_avail < zisofs->block_pointers_size) {
1511                         xsize = zisofs->block_pointers_size
1512                             - zisofs->block_pointers_avail;
1513                         if (avail < xsize)
1514                                 xsize = avail;
1515                         memcpy(zisofs->block_pointers
1516                             + zisofs->block_pointers_avail, p, xsize);
1517                         zisofs->block_pointers_avail += xsize;
1518                         avail -= xsize;
1519                         p += xsize;
1520                         if (zisofs->block_pointers_avail
1521                             == zisofs->block_pointers_size) {
1522                                 /* We've got all block pointers and initialize
1523                                  * related variables.   */
1524                                 zisofs->block_off = 0;
1525                                 zisofs->block_avail = 0;
1526                                 /* Complete a initialization */
1527                                 zisofs->initialized = 1;
1528                         }
1529                 }
1530
1531                 if (!zisofs->initialized)
1532                         goto next_data; /* We need more data. */
1533         }
1534
1535         /*
1536          * Get block offsets from block pointers.
1537          */
1538         if (zisofs->block_avail == 0) {
1539                 uint32_t bst, bed;
1540
1541                 if (zisofs->block_off + 4 >= zisofs->block_pointers_size) {
1542                         /* There isn't a pair of offsets. */
1543                         archive_set_error(&a->archive,
1544                             ARCHIVE_ERRNO_FILE_FORMAT,
1545                             "Illegal zisofs block pointers");
1546                         return (ARCHIVE_FATAL);
1547                 }
1548                 bst = archive_le32dec(
1549                     zisofs->block_pointers + zisofs->block_off);
1550                 if (bst != zisofs->pz_offset + (bytes_read - avail)) {
1551                         /* TODO: Should we seek offset of current file
1552                          * by bst ? */
1553                         archive_set_error(&a->archive,
1554                             ARCHIVE_ERRNO_FILE_FORMAT,
1555                             "Illegal zisofs block pointers(cannot seek)");
1556                         return (ARCHIVE_FATAL);
1557                 }
1558                 bed = archive_le32dec(
1559                     zisofs->block_pointers + zisofs->block_off + 4);
1560                 if (bed < bst) {
1561                         archive_set_error(&a->archive,
1562                             ARCHIVE_ERRNO_FILE_FORMAT,
1563                             "Illegal zisofs block pointers");
1564                         return (ARCHIVE_FATAL);
1565                 }
1566                 zisofs->block_avail = bed - bst;
1567                 zisofs->block_off += 4;
1568
1569                 /* Initialize compression library for new block. */
1570                 if (zisofs->stream_valid)
1571                         r = inflateReset(&zisofs->stream);
1572                 else
1573                         r = inflateInit(&zisofs->stream);
1574                 if (r != Z_OK) {
1575                         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1576                             "Can't initialize zisofs decompression.");
1577                         return (ARCHIVE_FATAL);
1578                 }
1579                 zisofs->stream_valid = 1;
1580                 zisofs->stream.total_in = 0;
1581                 zisofs->stream.total_out = 0;
1582         }
1583
1584         /*
1585          * Make uncompressed data.
1586          */
1587         if (zisofs->block_avail == 0) {
1588                 memset(zisofs->uncompressed_buffer, 0,
1589                     zisofs->uncompressed_buffer_size);
1590                 uncompressed_size = zisofs->uncompressed_buffer_size;
1591         } else {
1592                 zisofs->stream.next_in = (Bytef *)(uintptr_t)(const void *)p;
1593                 if (avail > zisofs->block_avail)
1594                         zisofs->stream.avail_in = zisofs->block_avail;
1595                 else
1596                         zisofs->stream.avail_in = (uInt)avail;
1597                 zisofs->stream.next_out = zisofs->uncompressed_buffer;
1598                 zisofs->stream.avail_out =
1599                     (uInt)zisofs->uncompressed_buffer_size;
1600
1601                 r = inflate(&zisofs->stream, 0);
1602                 switch (r) {
1603                 case Z_OK: /* Decompressor made some progress.*/
1604                 case Z_STREAM_END: /* Found end of stream. */
1605                         break;
1606                 default:
1607                         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1608                             "zisofs decompression failed (%d)", r);
1609                         return (ARCHIVE_FATAL);
1610                 }
1611                 uncompressed_size =
1612                     zisofs->uncompressed_buffer_size - zisofs->stream.avail_out;
1613                 avail -= zisofs->stream.next_in - p;
1614                 zisofs->block_avail -= (uint32_t)(zisofs->stream.next_in - p);
1615         }
1616 next_data:
1617         bytes_read -= avail;
1618         *buff = zisofs->uncompressed_buffer;
1619         *size = uncompressed_size;
1620         *offset = iso9660->entry_sparse_offset;
1621         iso9660->entry_sparse_offset += uncompressed_size;
1622         iso9660->entry_bytes_remaining -= bytes_read;
1623         iso9660->current_position += bytes_read;
1624         zisofs->pz_offset += (uint32_t)bytes_read;
1625         iso9660->entry_bytes_unconsumed += bytes_read;
1626
1627         return (ARCHIVE_OK);
1628 }
1629
1630 #else /* HAVE_ZLIB_H */
1631
1632 static int
1633 zisofs_read_data(struct archive_read *a,
1634     const void **buff, size_t *size, int64_t *offset)
1635 {
1636
1637         (void)buff;/* UNUSED */
1638         (void)size;/* UNUSED */
1639         (void)offset;/* UNUSED */
1640         archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
1641             "zisofs is not supported on this platform.");
1642         return (ARCHIVE_FAILED);
1643 }
1644
1645 #endif /* HAVE_ZLIB_H */
1646
1647 static int
1648 archive_read_format_iso9660_read_data(struct archive_read *a,
1649     const void **buff, size_t *size, int64_t *offset)
1650 {
1651         ssize_t bytes_read;
1652         struct iso9660 *iso9660;
1653
1654         iso9660 = (struct iso9660 *)(a->format->data);
1655
1656         if (iso9660->entry_bytes_unconsumed) {
1657                 __archive_read_consume(a, iso9660->entry_bytes_unconsumed);
1658                 iso9660->entry_bytes_unconsumed = 0;
1659         }
1660
1661         if (iso9660->entry_bytes_remaining <= 0) {
1662                 if (iso9660->entry_content != NULL)
1663                         iso9660->entry_content = iso9660->entry_content->next;
1664                 if (iso9660->entry_content == NULL) {
1665                         *buff = NULL;
1666                         *size = 0;
1667                         *offset = iso9660->entry_sparse_offset;
1668                         return (ARCHIVE_EOF);
1669                 }
1670                 /* Seek forward to the start of the entry. */
1671                 if (iso9660->current_position < iso9660->entry_content->offset) {
1672                         int64_t step;
1673
1674                         step = iso9660->entry_content->offset -
1675                             iso9660->current_position;
1676                         step = __archive_read_consume(a, step);
1677                         if (step < 0)
1678                                 return ((int)step);
1679                         iso9660->current_position =
1680                             iso9660->entry_content->offset;
1681                 }
1682                 if (iso9660->entry_content->offset < iso9660->current_position) {
1683                         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1684                             "Ignoring out-of-order file (%s) %jd < %jd",
1685                             iso9660->pathname.s,
1686                             (intmax_t)iso9660->entry_content->offset,
1687                             (intmax_t)iso9660->current_position);
1688                         *buff = NULL;
1689                         *size = 0;
1690                         *offset = iso9660->entry_sparse_offset;
1691                         return (ARCHIVE_WARN);
1692                 }
1693                 iso9660->entry_bytes_remaining = iso9660->entry_content->size;
1694         }
1695         if (iso9660->entry_zisofs.pz)
1696                 return (zisofs_read_data(a, buff, size, offset));
1697
1698         *buff = __archive_read_ahead(a, 1, &bytes_read);
1699         if (bytes_read == 0)
1700                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1701                     "Truncated input file");
1702         if (*buff == NULL)
1703                 return (ARCHIVE_FATAL);
1704         if (bytes_read > iso9660->entry_bytes_remaining)
1705                 bytes_read = (ssize_t)iso9660->entry_bytes_remaining;
1706         *size = bytes_read;
1707         *offset = iso9660->entry_sparse_offset;
1708         iso9660->entry_sparse_offset += bytes_read;
1709         iso9660->entry_bytes_remaining -= bytes_read;
1710         iso9660->entry_bytes_unconsumed = bytes_read;
1711         iso9660->current_position += bytes_read;
1712         return (ARCHIVE_OK);
1713 }
1714
1715 static int
1716 archive_read_format_iso9660_cleanup(struct archive_read *a)
1717 {
1718         struct iso9660 *iso9660;
1719         int r = ARCHIVE_OK;
1720
1721         iso9660 = (struct iso9660 *)(a->format->data);
1722         release_files(iso9660);
1723         free(iso9660->read_ce_req.reqs);
1724         archive_string_free(&iso9660->pathname);
1725         archive_string_free(&iso9660->previous_pathname);
1726         if (iso9660->pending_files.files)
1727                 free(iso9660->pending_files.files);
1728 #ifdef HAVE_ZLIB_H
1729         free(iso9660->entry_zisofs.uncompressed_buffer);
1730         free(iso9660->entry_zisofs.block_pointers);
1731         if (iso9660->entry_zisofs.stream_valid) {
1732                 if (inflateEnd(&iso9660->entry_zisofs.stream) != Z_OK) {
1733                         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1734                             "Failed to clean up zlib decompressor");
1735                         r = ARCHIVE_FATAL;
1736                 }
1737         }
1738 #endif
1739         free(iso9660->utf16be_path);
1740         free(iso9660->utf16be_previous_path);
1741         free(iso9660);
1742         (a->format->data) = NULL;
1743         return (r);
1744 }
1745
1746 /*
1747  * This routine parses a single ISO directory record, makes sense
1748  * of any extensions, and stores the result in memory.
1749  */
1750 static struct file_info *
1751 parse_file_info(struct archive_read *a, struct file_info *parent,
1752     const unsigned char *isodirrec)
1753 {
1754         struct iso9660 *iso9660;
1755         struct file_info *file, *filep;
1756         size_t name_len;
1757         const unsigned char *rr_start, *rr_end;
1758         const unsigned char *p;
1759         size_t dr_len;
1760         uint64_t fsize, offset;
1761         int32_t location;
1762         int flags;
1763
1764         iso9660 = (struct iso9660 *)(a->format->data);
1765
1766         dr_len = (size_t)isodirrec[DR_length_offset];
1767         name_len = (size_t)isodirrec[DR_name_len_offset];
1768         location = archive_le32dec(isodirrec + DR_extent_offset);
1769         fsize = toi(isodirrec + DR_size_offset, DR_size_size);
1770         /* Sanity check that dr_len needs at least 34. */
1771         if (dr_len < 34) {
1772                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1773                     "Invalid length of directory record");
1774                 return (NULL);
1775         }
1776         /* Sanity check that name_len doesn't exceed dr_len. */
1777         if (dr_len - 33 < name_len || name_len == 0) {
1778                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1779                     "Invalid length of file identifier");
1780                 return (NULL);
1781         }
1782         /* Sanity check that location doesn't exceed volume block.
1783          * Don't check lower limit of location; it's possibility
1784          * the location has negative value when file type is symbolic
1785          * link or file size is zero. As far as I know latest mkisofs
1786          * do that.
1787          */
1788         if (location > 0 &&
1789             (location + ((fsize + iso9660->logical_block_size -1)
1790                / iso9660->logical_block_size))
1791                         > (uint32_t)iso9660->volume_block) {
1792                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1793                     "Invalid location of extent of file");
1794                 return (NULL);
1795         }
1796         /* Sanity check that location doesn't have a negative value
1797          * when the file is not empty. it's too large. */
1798         if (fsize != 0 && location < 0) {
1799                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
1800                     "Invalid location of extent of file");
1801                 return (NULL);
1802         }
1803
1804         /* Sanity check that this entry does not create a cycle. */
1805         offset = iso9660->logical_block_size * (uint64_t)location;
1806         for (filep = parent; filep != NULL; filep = filep->parent) {
1807                 if (filep->offset == offset) {
1808                         archive_set_error(&a->archive, ARCHIVE_ERRNO_FILE_FORMAT,
1809                             "Directory structure contains loop");
1810                         return (NULL);
1811                 }
1812         }
1813
1814         /* Create a new file entry and copy data from the ISO dir record. */
1815         file = (struct file_info *)calloc(1, sizeof(*file));
1816         if (file == NULL) {
1817                 archive_set_error(&a->archive, ENOMEM,
1818                     "No memory for file entry");
1819                 return (NULL);
1820         }
1821         file->parent = parent;
1822         file->offset = offset;
1823         file->size = fsize;
1824         file->mtime = isodate7(isodirrec + DR_date_offset);
1825         file->ctime = file->atime = file->mtime;
1826         file->rede_files.first = NULL;
1827         file->rede_files.last = &(file->rede_files.first);
1828
1829         p = isodirrec + DR_name_offset;
1830         /* Rockridge extensions (if any) follow name.  Compute this
1831          * before fidgeting the name_len below. */
1832         rr_start = p + name_len + (name_len & 1 ? 0 : 1);
1833         rr_end = isodirrec + dr_len;
1834
1835         if (iso9660->seenJoliet) {
1836                 /* Joliet names are max 64 chars (128 bytes) according to spec,
1837                  * but genisoimage/mkisofs allows recording longer Joliet
1838                  * names which are 103 UCS2 characters(206 bytes) by their
1839                  * option '-joliet-long'.
1840                  */
1841                 if (name_len > 206)
1842                         name_len = 206;
1843                 name_len &= ~1;
1844
1845                 /* trim trailing first version and dot from filename.
1846                  *
1847                  * Remember we were in UTF-16BE land!
1848                  * SEPARATOR 1 (.) and SEPARATOR 2 (;) are both
1849                  * 16 bits big endian characters on Joliet.
1850                  *
1851                  * TODO: sanitize filename?
1852                  *       Joliet allows any UCS-2 char except:
1853                  *       *, /, :, ;, ? and \.
1854                  */
1855                 /* Chop off trailing ';1' from files. */
1856                 if (name_len > 4 && p[name_len-4] == 0 && p[name_len-3] == ';'
1857                     && p[name_len-2] == 0 && p[name_len-1] == '1')
1858                         name_len -= 4;
1859 #if 0 /* XXX: this somehow manages to strip of single-character file extensions, like '.c'. */
1860                 /* Chop off trailing '.' from filenames. */
1861                 if (name_len > 2 && p[name_len-2] == 0 && p[name_len-1] == '.')
1862                         name_len -= 2;
1863 #endif
1864                 if ((file->utf16be_name = malloc(name_len)) == NULL) {
1865                         archive_set_error(&a->archive, ENOMEM,
1866                             "No memory for file name");
1867                         return (NULL);
1868                 }
1869                 memcpy(file->utf16be_name, p, name_len);
1870                 file->utf16be_bytes = name_len;
1871         } else {
1872                 /* Chop off trailing ';1' from files. */
1873                 if (name_len > 2 && p[name_len - 2] == ';' &&
1874                                 p[name_len - 1] == '1')
1875                         name_len -= 2;
1876                 /* Chop off trailing '.' from filenames. */
1877                 if (name_len > 1 && p[name_len - 1] == '.')
1878                         --name_len;
1879
1880                 archive_strncpy(&file->name, (const char *)p, name_len);
1881         }
1882
1883         flags = isodirrec[DR_flags_offset];
1884         if (flags & 0x02)
1885                 file->mode = AE_IFDIR | 0700;
1886         else
1887                 file->mode = AE_IFREG | 0400;
1888         if (flags & 0x80)
1889                 file->multi_extent = 1;
1890         else
1891                 file->multi_extent = 0;
1892         /*
1893          * Use a location for the file number, which is treated as an inode
1894          * number to find out hardlink target. If Rockridge extensions is
1895          * being used, the file number will be overwritten by FILE SERIAL
1896          * NUMBER of RRIP "PX" extension.
1897          * Note: Old mkisofs did not record that FILE SERIAL NUMBER
1898          * in ISO images.
1899          * Note2: xorriso set 0 to the location of a symlink file.
1900          */
1901         if (file->size == 0 && location >= 0) {
1902                 /* If file->size is zero, its location points wrong place,
1903                  * and so we should not use it for the file number.
1904                  * When the location has negative value, it can be used
1905                  * for the file number.
1906                  */
1907                 file->number = -1;
1908                 /* Do not appear before any directory entries. */
1909                 file->offset = -1;
1910         } else
1911                 file->number = (int64_t)(uint32_t)location;
1912
1913         /* Rockridge extensions overwrite information from above. */
1914         if (iso9660->opt_support_rockridge) {
1915                 if (parent == NULL && rr_end - rr_start >= 7) {
1916                         p = rr_start;
1917                         if (memcmp(p, "SP\x07\x01\xbe\xef", 6) == 0) {
1918                                 /*
1919                                  * SP extension stores the suspOffset
1920                                  * (Number of bytes to skip between
1921                                  * filename and SUSP records.)
1922                                  * It is mandatory by the SUSP standard
1923                                  * (IEEE 1281).
1924                                  *
1925                                  * It allows SUSP to coexist with
1926                                  * non-SUSP uses of the System
1927                                  * Use Area by placing non-SUSP data
1928                                  * before SUSP data.
1929                                  *
1930                                  * SP extension must be in the root
1931                                  * directory entry, disable all SUSP
1932                                  * processing if not found.
1933                                  */
1934                                 iso9660->suspOffset = p[6];
1935                                 iso9660->seenSUSP = 1;
1936                                 rr_start += 7;
1937                         }
1938                 }
1939                 if (iso9660->seenSUSP) {
1940                         int r;
1941
1942                         file->name_continues = 0;
1943                         file->symlink_continues = 0;
1944                         rr_start += iso9660->suspOffset;
1945                         r = parse_rockridge(a, file, rr_start, rr_end);
1946                         if (r != ARCHIVE_OK) {
1947                                 free(file);
1948                                 return (NULL);
1949                         }
1950                         /*
1951                          * A file size of symbolic link files in ISO images
1952                          * made by makefs is not zero and its location is
1953                          * the same as those of next regular file. That is
1954                          * the same as hard like file and it causes unexpected
1955                          * error.
1956                          */
1957                         if (file->size > 0 &&
1958                             (file->mode & AE_IFMT) == AE_IFLNK) {
1959                                 file->size = 0;
1960                                 file->number = -1;
1961                                 file->offset = -1;
1962                         }
1963                 } else
1964                         /* If there isn't SUSP, disable parsing
1965                          * rock ridge extensions. */
1966                         iso9660->opt_support_rockridge = 0;
1967         }
1968
1969         file->nlinks = 1;/* Reset nlink. we'll calculate it later. */
1970         /* Tell file's parent how many children that parent has. */
1971         if (parent != NULL && (flags & 0x02))
1972                 parent->subdirs++;
1973
1974         if (iso9660->seenRockridge) {
1975                 if (parent != NULL && parent->parent == NULL &&
1976                     (flags & 0x02) && iso9660->rr_moved == NULL &&
1977                     file->name.s &&
1978                     (strcmp(file->name.s, "rr_moved") == 0 ||
1979                      strcmp(file->name.s, ".rr_moved") == 0)) {
1980                         iso9660->rr_moved = file;
1981                         file->rr_moved = 1;
1982                         file->rr_moved_has_re_only = 1;
1983                         file->re = 0;
1984                         parent->subdirs--;
1985                 } else if (file->re) {
1986                         /*
1987                          * Sanity check: file's parent is rr_moved.
1988                          */
1989                         if (parent == NULL || parent->rr_moved == 0) {
1990                                 archive_set_error(&a->archive,
1991                                     ARCHIVE_ERRNO_MISC,
1992                                     "Invalid Rockridge RE");
1993                                 return (NULL);
1994                         }
1995                         /*
1996                          * Sanity check: file does not have "CL" extension.
1997                          */
1998                         if (file->cl_offset) {
1999                                 archive_set_error(&a->archive,
2000                                     ARCHIVE_ERRNO_MISC,
2001                                     "Invalid Rockridge RE and CL");
2002                                 return (NULL);
2003                         }
2004                         /*
2005                          * Sanity check: The file type must be a directory.
2006                          */
2007                         if ((flags & 0x02) == 0) {
2008                                 archive_set_error(&a->archive,
2009                                     ARCHIVE_ERRNO_MISC,
2010                                     "Invalid Rockridge RE");
2011                                 return (NULL);
2012                         }
2013                 } else if (parent != NULL && parent->rr_moved)
2014                         file->rr_moved_has_re_only = 0;
2015                 else if (parent != NULL && (flags & 0x02) &&
2016                     (parent->re || parent->re_descendant))
2017                         file->re_descendant = 1;
2018                 if (file->cl_offset) {
2019                         struct file_info *r;
2020
2021                         if (parent == NULL || parent->parent == NULL) {
2022                                 archive_set_error(&a->archive,
2023                                     ARCHIVE_ERRNO_MISC,
2024                                     "Invalid Rockridge CL");
2025                                 return (NULL);
2026                         }
2027                         /*
2028                          * Sanity check: The file type must be a regular file.
2029                          */
2030                         if ((flags & 0x02) != 0) {
2031                                 archive_set_error(&a->archive,
2032                                     ARCHIVE_ERRNO_MISC,
2033                                     "Invalid Rockridge CL");
2034                                 return (NULL);
2035                         }
2036                         parent->subdirs++;
2037                         /* Overwrite an offset and a number of this "CL" entry
2038                          * to appear before other dirs. "+1" to those is to
2039                          * make sure to appear after "RE" entry which this
2040                          * "CL" entry should be connected with. */
2041                         file->offset = file->number = file->cl_offset + 1;
2042
2043                         /*
2044                          * Sanity check: cl_offset does not point at its
2045                          * the parents or itself.
2046                          */
2047                         for (r = parent; r; r = r->parent) {
2048                                 if (r->offset == file->cl_offset) {
2049                                         archive_set_error(&a->archive,
2050                                             ARCHIVE_ERRNO_MISC,
2051                                             "Invalid Rockridge CL");
2052                                         return (NULL);
2053                                 }
2054                         }
2055                         if (file->cl_offset == file->offset ||
2056                             parent->rr_moved) {
2057                                 archive_set_error(&a->archive,
2058                                     ARCHIVE_ERRNO_MISC,
2059                                     "Invalid Rockridge CL");
2060                                 return (NULL);
2061                         }
2062                 }
2063         }
2064
2065 #if DEBUG
2066         /* DEBUGGING: Warn about attributes I don't yet fully support. */
2067         if ((flags & ~0x02) != 0) {
2068                 fprintf(stderr, "\n ** Unrecognized flag: ");
2069                 dump_isodirrec(stderr, isodirrec);
2070                 fprintf(stderr, "\n");
2071         } else if (toi(isodirrec + DR_volume_sequence_number_offset, 2) != 1) {
2072                 fprintf(stderr, "\n ** Unrecognized sequence number: ");
2073                 dump_isodirrec(stderr, isodirrec);
2074                 fprintf(stderr, "\n");
2075         } else if (*(isodirrec + DR_file_unit_size_offset) != 0) {
2076                 fprintf(stderr, "\n ** Unexpected file unit size: ");
2077                 dump_isodirrec(stderr, isodirrec);
2078                 fprintf(stderr, "\n");
2079         } else if (*(isodirrec + DR_interleave_offset) != 0) {
2080                 fprintf(stderr, "\n ** Unexpected interleave: ");
2081                 dump_isodirrec(stderr, isodirrec);
2082                 fprintf(stderr, "\n");
2083         } else if (*(isodirrec + DR_ext_attr_length_offset) != 0) {
2084                 fprintf(stderr, "\n ** Unexpected extended attribute length: ");
2085                 dump_isodirrec(stderr, isodirrec);
2086                 fprintf(stderr, "\n");
2087         }
2088 #endif
2089         register_file(iso9660, file);
2090         return (file);
2091 }
2092
2093 static int
2094 parse_rockridge(struct archive_read *a, struct file_info *file,
2095     const unsigned char *p, const unsigned char *end)
2096 {
2097         struct iso9660 *iso9660;
2098
2099         iso9660 = (struct iso9660 *)(a->format->data);
2100
2101         while (p + 4 <= end  /* Enough space for another entry. */
2102             && p[0] >= 'A' && p[0] <= 'Z' /* Sanity-check 1st char of name. */
2103             && p[1] >= 'A' && p[1] <= 'Z' /* Sanity-check 2nd char of name. */
2104             && p[2] >= 4 /* Sanity-check length. */
2105             && p + p[2] <= end) { /* Sanity-check length. */
2106                 const unsigned char *data = p + 4;
2107                 int data_length = p[2] - 4;
2108                 int version = p[3];
2109
2110                 switch(p[0]) {
2111                 case 'C':
2112                         if (p[1] == 'E') {
2113                                 if (version == 1 && data_length == 24) {
2114                                         /*
2115                                          * CE extension comprises:
2116                                          *   8 byte sector containing extension
2117                                          *   8 byte offset w/in above sector
2118                                          *   8 byte length of continuation
2119                                          */
2120                                         int32_t location =
2121                                             archive_le32dec(data);
2122                                         file->ce_offset =
2123                                             archive_le32dec(data+8);
2124                                         file->ce_size =
2125                                             archive_le32dec(data+16);
2126                                         if (register_CE(a, location, file)
2127                                             != ARCHIVE_OK)
2128                                                 return (ARCHIVE_FATAL);
2129                                 }
2130                         }
2131                         else if (p[1] == 'L') {
2132                                 if (version == 1 && data_length == 8) {
2133                                         file->cl_offset = (uint64_t)
2134                                             iso9660->logical_block_size *
2135                                             (uint64_t)archive_le32dec(data);
2136                                         iso9660->seenRockridge = 1;
2137                                 }
2138                         }
2139                         break;
2140                 case 'N':
2141                         if (p[1] == 'M') {
2142                                 if (version == 1) {
2143                                         parse_rockridge_NM1(file,
2144                                             data, data_length);
2145                                         iso9660->seenRockridge = 1;
2146                                 }
2147                         }
2148                         break;
2149                 case 'P':
2150                         /*
2151                          * PD extension is padding;
2152                          * contents are always ignored.
2153                          *
2154                          * PL extension won't appear;
2155                          * contents are always ignored.
2156                          */
2157                         if (p[1] == 'N') {
2158                                 if (version == 1 && data_length == 16) {
2159                                         file->rdev = toi(data,4);
2160                                         file->rdev <<= 32;
2161                                         file->rdev |= toi(data + 8, 4);
2162                                         iso9660->seenRockridge = 1;
2163                                 }
2164                         }
2165                         else if (p[1] == 'X') {
2166                                 /*
2167                                  * PX extension comprises:
2168                                  *   8 bytes for mode,
2169                                  *   8 bytes for nlinks,
2170                                  *   8 bytes for uid,
2171                                  *   8 bytes for gid,
2172                                  *   8 bytes for inode.
2173                                  */
2174                                 if (version == 1) {
2175                                         if (data_length >= 8)
2176                                                 file->mode
2177                                                     = toi(data, 4);
2178                                         if (data_length >= 16)
2179                                                 file->nlinks
2180                                                     = toi(data + 8, 4);
2181                                         if (data_length >= 24)
2182                                                 file->uid
2183                                                     = toi(data + 16, 4);
2184                                         if (data_length >= 32)
2185                                                 file->gid
2186                                                     = toi(data + 24, 4);
2187                                         if (data_length >= 40)
2188                                                 file->number
2189                                                     = toi(data + 32, 4);
2190                                         iso9660->seenRockridge = 1;
2191                                 }
2192                         }
2193                         break;
2194                 case 'R':
2195                         if (p[1] == 'E' && version == 1) {
2196                                 file->re = 1;
2197                                 iso9660->seenRockridge = 1;
2198                         }
2199                         else if (p[1] == 'R' && version == 1) {
2200                                 /*
2201                                  * RR extension comprises:
2202                                  *    one byte flag value
2203                                  * This extension is obsolete,
2204                                  * so contents are always ignored.
2205                                  */
2206                         }
2207                         break;
2208                 case 'S':
2209                         if (p[1] == 'L') {
2210                                 if (version == 1) {
2211                                         parse_rockridge_SL1(file,
2212                                             data, data_length);
2213                                         iso9660->seenRockridge = 1;
2214                                 }
2215                         }
2216                         else if (p[1] == 'T'
2217                             && data_length == 0 && version == 1) {
2218                                 /*
2219                                  * ST extension marks end of this
2220                                  * block of SUSP entries.
2221                                  *
2222                                  * It allows SUSP to coexist with
2223                                  * non-SUSP uses of the System
2224                                  * Use Area by placing non-SUSP data
2225                                  * after SUSP data.
2226                                  */
2227                                 iso9660->seenSUSP = 0;
2228                                 iso9660->seenRockridge = 0;
2229                                 return (ARCHIVE_OK);
2230                         }
2231                         break;
2232                 case 'T':
2233                         if (p[1] == 'F') {
2234                                 if (version == 1) {
2235                                         parse_rockridge_TF1(file,
2236                                             data, data_length);
2237                                         iso9660->seenRockridge = 1;
2238                                 }
2239                         }
2240                         break;
2241                 case 'Z':
2242                         if (p[1] == 'F') {
2243                                 if (version == 1)
2244                                         parse_rockridge_ZF1(file,
2245                                             data, data_length);
2246                         }
2247                         break;
2248                 default:
2249                         break;
2250                 }
2251
2252                 p += p[2];
2253         }
2254         return (ARCHIVE_OK);
2255 }
2256
2257 static int
2258 register_CE(struct archive_read *a, int32_t location,
2259     struct file_info *file)
2260 {
2261         struct iso9660 *iso9660;
2262         struct read_ce_queue *heap;
2263         struct read_ce_req *p;
2264         uint64_t offset, parent_offset;
2265         int hole, parent;
2266
2267         iso9660 = (struct iso9660 *)(a->format->data);
2268         offset = ((uint64_t)location) * (uint64_t)iso9660->logical_block_size;
2269         if (((file->mode & AE_IFMT) == AE_IFREG &&
2270             offset >= file->offset) ||
2271             offset < iso9660->current_position ||
2272             (((uint64_t)file->ce_offset) + file->ce_size)
2273               > (uint64_t)iso9660->logical_block_size ||
2274             offset + file->ce_offset + file->ce_size
2275                   > iso9660->volume_size) {
2276                 archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
2277                     "Invalid parameter in SUSP \"CE\" extension");
2278                 return (ARCHIVE_FATAL);
2279         }
2280
2281         /* Expand our CE list as necessary. */
2282         heap = &(iso9660->read_ce_req);
2283         if (heap->cnt >= heap->allocated) {
2284                 int new_size;
2285
2286                 if (heap->allocated < 16)
2287                         new_size = 16;
2288                 else
2289                         new_size = heap->allocated * 2;
2290                 /* Overflow might keep us from growing the list. */
2291                 if (new_size <= heap->allocated) {
2292                         archive_set_error(&a->archive, ENOMEM, "Out of memory");
2293                         return (ARCHIVE_FATAL);
2294                 }
2295                 p = calloc(new_size, sizeof(p[0]));
2296                 if (p == NULL) {
2297                         archive_set_error(&a->archive, ENOMEM, "Out of memory");
2298                         return (ARCHIVE_FATAL);
2299                 }
2300                 if (heap->reqs != NULL) {
2301                         memcpy(p, heap->reqs, heap->cnt * sizeof(*p));
2302                         free(heap->reqs);
2303                 }
2304                 heap->reqs = p;
2305                 heap->allocated = new_size;
2306         }
2307
2308         /*
2309          * Start with hole at end, walk it up tree to find insertion point.
2310          */
2311         hole = heap->cnt++;
2312         while (hole > 0) {
2313                 parent = (hole - 1)/2;
2314                 parent_offset = heap->reqs[parent].offset;
2315                 if (offset >= parent_offset) {
2316                         heap->reqs[hole].offset = offset;
2317                         heap->reqs[hole].file = file;
2318                         return (ARCHIVE_OK);
2319                 }
2320                 /* Move parent into hole <==> move hole up tree. */
2321                 heap->reqs[hole] = heap->reqs[parent];
2322                 hole = parent;
2323         }
2324         heap->reqs[0].offset = offset;
2325         heap->reqs[0].file = file;
2326         return (ARCHIVE_OK);
2327 }
2328
2329 static void
2330 next_CE(struct read_ce_queue *heap)
2331 {
2332         uint64_t a_offset, b_offset, c_offset;
2333         int a, b, c;
2334         struct read_ce_req tmp;
2335
2336         if (heap->cnt < 1)
2337                 return;
2338
2339         /*
2340          * Move the last item in the heap to the root of the tree
2341          */
2342         heap->reqs[0] = heap->reqs[--(heap->cnt)];
2343
2344         /*
2345          * Rebalance the heap.
2346          */
2347         a = 0; /* Starting element and its offset */
2348         a_offset = heap->reqs[a].offset;
2349         for (;;) {
2350                 b = a + a + 1; /* First child */
2351                 if (b >= heap->cnt)
2352                         return;
2353                 b_offset = heap->reqs[b].offset;
2354                 c = b + 1; /* Use second child if it is smaller. */
2355                 if (c < heap->cnt) {
2356                         c_offset = heap->reqs[c].offset;
2357                         if (c_offset < b_offset) {
2358                                 b = c;
2359                                 b_offset = c_offset;
2360                         }
2361                 }
2362                 if (a_offset <= b_offset)
2363                         return;
2364                 tmp = heap->reqs[a];
2365                 heap->reqs[a] = heap->reqs[b];
2366                 heap->reqs[b] = tmp;
2367                 a = b;
2368         }
2369 }
2370
2371
2372 static int
2373 read_CE(struct archive_read *a, struct iso9660 *iso9660)
2374 {
2375         struct read_ce_queue *heap;
2376         const unsigned char *b, *p, *end;
2377         struct file_info *file;
2378         size_t step;
2379         int r;
2380
2381         /* Read data which RRIP "CE" extension points. */
2382         heap = &(iso9660->read_ce_req);
2383         step = iso9660->logical_block_size;
2384         while (heap->cnt &&
2385             heap->reqs[0].offset == iso9660->current_position) {
2386                 b = __archive_read_ahead(a, step, NULL);
2387                 if (b == NULL) {
2388                         archive_set_error(&a->archive,
2389                             ARCHIVE_ERRNO_MISC,
2390                             "Failed to read full block when scanning "
2391                             "ISO9660 directory list");
2392                         return (ARCHIVE_FATAL);
2393                 }
2394                 do {
2395                         file = heap->reqs[0].file;
2396                         if (file->ce_offset + file->ce_size > step) {
2397                                 archive_set_error(&a->archive,
2398                                     ARCHIVE_ERRNO_FILE_FORMAT,
2399                                     "Malformed CE information");
2400                                 return (ARCHIVE_FATAL);
2401                         }
2402                         p = b + file->ce_offset;
2403                         end = p + file->ce_size;
2404                         next_CE(heap);
2405                         r = parse_rockridge(a, file, p, end);
2406                         if (r != ARCHIVE_OK)
2407                                 return (ARCHIVE_FATAL);
2408                 } while (heap->cnt &&
2409                     heap->reqs[0].offset == iso9660->current_position);
2410                 /* NOTE: Do not move this consume's code to fron of
2411                  * do-while loop. Registration of nested CE extension
2412                  * might cause error because of current position. */
2413                 __archive_read_consume(a, step);
2414                 iso9660->current_position += step;
2415         }
2416         return (ARCHIVE_OK);
2417 }
2418
2419 static void
2420 parse_rockridge_NM1(struct file_info *file,
2421                     const unsigned char *data, int data_length)
2422 {
2423         if (!file->name_continues)
2424                 archive_string_empty(&file->name);
2425         file->name_continues = 0;
2426         if (data_length < 1)
2427                 return;
2428         /*
2429          * NM version 1 extension comprises:
2430          *   1 byte flag, value is one of:
2431          *     = 0: remainder is name
2432          *     = 1: remainder is name, next NM entry continues name
2433          *     = 2: "."
2434          *     = 4: ".."
2435          *     = 32: Implementation specific
2436          *     All other values are reserved.
2437          */
2438         switch(data[0]) {
2439         case 0:
2440                 if (data_length < 2)
2441                         return;
2442                 archive_strncat(&file->name,
2443                     (const char *)data + 1, data_length - 1);
2444                 break;
2445         case 1:
2446                 if (data_length < 2)
2447                         return;
2448                 archive_strncat(&file->name,
2449                     (const char *)data + 1, data_length - 1);
2450                 file->name_continues = 1;
2451                 break;
2452         case 2:
2453                 archive_strcat(&file->name, ".");
2454                 break;
2455         case 4:
2456                 archive_strcat(&file->name, "..");
2457                 break;
2458         default:
2459                 return;
2460         }
2461
2462 }
2463
2464 static void
2465 parse_rockridge_TF1(struct file_info *file, const unsigned char *data,
2466     int data_length)
2467 {
2468         char flag;
2469         /*
2470          * TF extension comprises:
2471          *   one byte flag
2472          *   create time (optional)
2473          *   modify time (optional)
2474          *   access time (optional)
2475          *   attribute time (optional)
2476          *  Time format and presence of fields
2477          *  is controlled by flag bits.
2478          */
2479         if (data_length < 1)
2480                 return;
2481         flag = data[0];
2482         ++data;
2483         --data_length;
2484         if (flag & 0x80) {
2485                 /* Use 17-byte time format. */
2486                 if ((flag & 1) && data_length >= 17) {
2487                         /* Create time. */
2488                         file->birthtime_is_set = 1;
2489                         file->birthtime = isodate17(data);
2490                         data += 17;
2491                         data_length -= 17;
2492                 }
2493                 if ((flag & 2) && data_length >= 17) {
2494                         /* Modify time. */
2495                         file->mtime = isodate17(data);
2496                         data += 17;
2497                         data_length -= 17;
2498                 }
2499                 if ((flag & 4) && data_length >= 17) {
2500                         /* Access time. */
2501                         file->atime = isodate17(data);
2502                         data += 17;
2503                         data_length -= 17;
2504                 }
2505                 if ((flag & 8) && data_length >= 17) {
2506                         /* Attribute change time. */
2507                         file->ctime = isodate17(data);
2508                 }
2509         } else {
2510                 /* Use 7-byte time format. */
2511                 if ((flag & 1) && data_length >= 7) {
2512                         /* Create time. */
2513                         file->birthtime_is_set = 1;
2514                         file->birthtime = isodate7(data);
2515                         data += 7;
2516                         data_length -= 7;
2517                 }
2518                 if ((flag & 2) && data_length >= 7) {
2519                         /* Modify time. */
2520                         file->mtime = isodate7(data);
2521                         data += 7;
2522                         data_length -= 7;
2523                 }
2524                 if ((flag & 4) && data_length >= 7) {
2525                         /* Access time. */
2526                         file->atime = isodate7(data);
2527                         data += 7;
2528                         data_length -= 7;
2529                 }
2530                 if ((flag & 8) && data_length >= 7) {
2531                         /* Attribute change time. */
2532                         file->ctime = isodate7(data);
2533                 }
2534         }
2535 }
2536
2537 static void
2538 parse_rockridge_SL1(struct file_info *file, const unsigned char *data,
2539     int data_length)
2540 {
2541         const char *separator = "";
2542
2543         if (!file->symlink_continues || file->symlink.length < 1)
2544                 archive_string_empty(&file->symlink);
2545         file->symlink_continues = 0;
2546
2547         /*
2548          * Defined flag values:
2549          *  0: This is the last SL record for this symbolic link
2550          *  1: this symbolic link field continues in next SL entry
2551          *  All other values are reserved.
2552          */
2553         if (data_length < 1)
2554                 return;
2555         switch(*data) {
2556         case 0:
2557                 break;
2558         case 1:
2559                 file->symlink_continues = 1;
2560                 break;
2561         default:
2562                 return;
2563         }
2564         ++data;  /* Skip flag byte. */
2565         --data_length;
2566
2567         /*
2568          * SL extension body stores "components".
2569          * Basically, this is a complicated way of storing
2570          * a POSIX path.  It also interferes with using
2571          * symlinks for storing non-path data. <sigh>
2572          *
2573          * Each component is 2 bytes (flag and length)
2574          * possibly followed by name data.
2575          */
2576         while (data_length >= 2) {
2577                 unsigned char flag = *data++;
2578                 unsigned char nlen = *data++;
2579                 data_length -= 2;
2580
2581                 archive_strcat(&file->symlink, separator);
2582                 separator = "/";
2583
2584                 switch(flag) {
2585                 case 0: /* Usual case, this is text. */
2586                         if (data_length < nlen)
2587                                 return;
2588                         archive_strncat(&file->symlink,
2589                             (const char *)data, nlen);
2590                         break;
2591                 case 0x01: /* Text continues in next component. */
2592                         if (data_length < nlen)
2593                                 return;
2594                         archive_strncat(&file->symlink,
2595                             (const char *)data, nlen);
2596                         separator = "";
2597                         break;
2598                 case 0x02: /* Current dir. */
2599                         archive_strcat(&file->symlink, ".");
2600                         break;
2601                 case 0x04: /* Parent dir. */
2602                         archive_strcat(&file->symlink, "..");
2603                         break;
2604                 case 0x08: /* Root of filesystem. */
2605                         archive_strcat(&file->symlink, "/");
2606                         separator = "";
2607                         break;
2608                 case 0x10: /* Undefined (historically "volume root" */
2609                         archive_string_empty(&file->symlink);
2610                         archive_strcat(&file->symlink, "ROOT");
2611                         break;
2612                 case 0x20: /* Undefined (historically "hostname") */
2613                         archive_strcat(&file->symlink, "hostname");
2614                         break;
2615                 default:
2616                         /* TODO: issue a warning ? */
2617                         return;
2618                 }
2619                 data += nlen;
2620                 data_length -= nlen;
2621         }
2622 }
2623
2624 static void
2625 parse_rockridge_ZF1(struct file_info *file, const unsigned char *data,
2626     int data_length)
2627 {
2628
2629         if (data[0] == 0x70 && data[1] == 0x7a && data_length == 12) {
2630                 /* paged zlib */
2631                 file->pz = 1;
2632                 file->pz_log2_bs = data[3];
2633                 file->pz_uncompressed_size = archive_le32dec(&data[4]);
2634         }
2635 }
2636
2637 static void
2638 register_file(struct iso9660 *iso9660, struct file_info *file)
2639 {
2640
2641         file->use_next = iso9660->use_files;
2642         iso9660->use_files = file;
2643 }
2644
2645 static void
2646 release_files(struct iso9660 *iso9660)
2647 {
2648         struct content *con, *connext;
2649         struct file_info *file;
2650
2651         file = iso9660->use_files;
2652         while (file != NULL) {
2653                 struct file_info *next = file->use_next;
2654
2655                 archive_string_free(&file->name);
2656                 archive_string_free(&file->symlink);
2657                 free(file->utf16be_name);
2658                 con = file->contents.first;
2659                 while (con != NULL) {
2660                         connext = con->next;
2661                         free(con);
2662                         con = connext;
2663                 }
2664                 free(file);
2665                 file = next;
2666         }
2667 }
2668
2669 static int
2670 next_entry_seek(struct archive_read *a, struct iso9660 *iso9660,
2671     struct file_info **pfile)
2672 {
2673         struct file_info *file;
2674         int r;
2675
2676         r = next_cache_entry(a, iso9660, pfile);
2677         if (r != ARCHIVE_OK)
2678                 return (r);
2679         file = *pfile;
2680
2681         /* Don't waste time seeking for zero-length bodies. */
2682         if (file->size == 0)
2683                 file->offset = iso9660->current_position;
2684
2685         /* flush any remaining bytes from the last round to ensure
2686          * we're positioned */
2687         if (iso9660->entry_bytes_unconsumed) {
2688                 __archive_read_consume(a, iso9660->entry_bytes_unconsumed);
2689                 iso9660->entry_bytes_unconsumed = 0;
2690         }
2691
2692         /* Seek forward to the start of the entry. */
2693         if (iso9660->current_position < file->offset) {
2694                 int64_t step;
2695
2696                 step = file->offset - iso9660->current_position;
2697                 step = __archive_read_consume(a, step);
2698                 if (step < 0)
2699                         return ((int)step);
2700                 iso9660->current_position = file->offset;
2701         }
2702
2703         /* We found body of file; handle it now. */
2704         return (ARCHIVE_OK);
2705 }
2706
2707 static int
2708 next_cache_entry(struct archive_read *a, struct iso9660 *iso9660,
2709     struct file_info **pfile)
2710 {
2711         struct file_info *file;
2712         struct {
2713                 struct file_info        *first;
2714                 struct file_info        **last;
2715         }       empty_files;
2716         int64_t number;
2717         int count;
2718
2719         file = cache_get_entry(iso9660);
2720         if (file != NULL) {
2721                 *pfile = file;
2722                 return (ARCHIVE_OK);
2723         }
2724
2725         for (;;) {
2726                 struct file_info *re, *d;
2727
2728                 *pfile = file = next_entry(iso9660);
2729                 if (file == NULL) {
2730                         /*
2731                          * If directory entries all which are descendant of
2732                          * rr_moved are stil remaning, expose their.
2733                          */
2734                         if (iso9660->re_files.first != NULL &&
2735                             iso9660->rr_moved != NULL &&
2736                             iso9660->rr_moved->rr_moved_has_re_only)
2737                                 /* Expose "rr_moved" entry. */
2738                                 cache_add_entry(iso9660, iso9660->rr_moved);
2739                         while ((re = re_get_entry(iso9660)) != NULL) {
2740                                 /* Expose its descendant dirs. */
2741                                 while ((d = rede_get_entry(re)) != NULL)
2742                                         cache_add_entry(iso9660, d);
2743                         }
2744                         if (iso9660->cache_files.first != NULL)
2745                                 return (next_cache_entry(a, iso9660, pfile));
2746                         return (ARCHIVE_EOF);
2747                 }
2748
2749                 if (file->cl_offset) {
2750                         struct file_info *first_re = NULL;
2751                         int nexted_re = 0;
2752
2753                         /*
2754                          * Find "RE" dir for the current file, which
2755                          * has "CL" flag.
2756                          */
2757                         while ((re = re_get_entry(iso9660))
2758                             != first_re) {
2759                                 if (first_re == NULL)
2760                                         first_re = re;
2761                                 if (re->offset == file->cl_offset) {
2762                                         re->parent->subdirs--;
2763                                         re->parent = file->parent;
2764                                         re->re = 0;
2765                                         if (re->parent->re_descendant) {
2766                                                 nexted_re = 1;
2767                                                 re->re_descendant = 1;
2768                                                 if (rede_add_entry(re) < 0)
2769                                                         goto fatal_rr;
2770                                                 /* Move a list of descendants
2771                                                  * to a new ancestor. */
2772                                                 while ((d = rede_get_entry(
2773                                                     re)) != NULL)
2774                                                         if (rede_add_entry(d)
2775                                                             < 0)
2776                                                                 goto fatal_rr;
2777                                                 break;
2778                                         }
2779                                         /* Replace the current file
2780                                          * with "RE" dir */
2781                                         *pfile = file = re;
2782                                         /* Expose its descendant */
2783                                         while ((d = rede_get_entry(
2784                                             file)) != NULL)
2785                                                 cache_add_entry(
2786                                                     iso9660, d);
2787                                         break;
2788                                 } else
2789                                         re_add_entry(iso9660, re);
2790                         }
2791                         if (nexted_re) {
2792                                 /*
2793                                  * Do not expose this at this time
2794                                  * because we have not gotten its full-path
2795                                  * name yet.
2796                                  */
2797                                 continue;
2798                         }
2799                 } else if ((file->mode & AE_IFMT) == AE_IFDIR) {
2800                         int r;
2801
2802                         /* Read file entries in this dir. */
2803                         r = read_children(a, file);
2804                         if (r != ARCHIVE_OK)
2805                                 return (r);
2806
2807                         /*
2808                          * Handle a special dir of Rockridge extensions,
2809                          * "rr_moved".
2810                          */
2811                         if (file->rr_moved) {
2812                                 /*
2813                                  * If this has only the subdirectories which
2814                                  * have "RE" flags, do not expose at this time.
2815                                  */
2816                                 if (file->rr_moved_has_re_only)
2817                                         continue;
2818                                 /* Otherwise expose "rr_moved" entry. */
2819                         } else if (file->re) {
2820                                 /*
2821                                  * Do not expose this at this time
2822                                  * because we have not gotten its full-path
2823                                  * name yet.
2824                                  */
2825                                 re_add_entry(iso9660, file);
2826                                 continue;
2827                         } else if (file->re_descendant) {
2828                                 /*
2829                                  * If the top level "RE" entry of this entry
2830                                  * is not exposed, we, accordingly, should not
2831                                  * expose this entry at this time because
2832                                  * we cannot make its proper full-path name.
2833                                  */
2834                                 if (rede_add_entry(file) == 0)
2835                                         continue;
2836                                 /* Otherwise we can expose this entry because
2837                                  * it seems its top level "RE" has already been
2838                                  * exposed. */
2839                         }
2840                 }
2841                 break;
2842         }
2843
2844         if ((file->mode & AE_IFMT) != AE_IFREG || file->number == -1)
2845                 return (ARCHIVE_OK);
2846
2847         count = 0;
2848         number = file->number;
2849         iso9660->cache_files.first = NULL;
2850         iso9660->cache_files.last = &(iso9660->cache_files.first);
2851         empty_files.first = NULL;
2852         empty_files.last = &empty_files.first;
2853         /* Collect files which has the same file serial number.
2854          * Peek pending_files so that file which number is different
2855          * is not put bak. */
2856         while (iso9660->pending_files.used > 0 &&
2857             (iso9660->pending_files.files[0]->number == -1 ||
2858              iso9660->pending_files.files[0]->number == number)) {
2859                 if (file->number == -1) {
2860                         /* This file has the same offset
2861                          * but it's wrong offset which empty files
2862                          * and symlink files have.
2863                          * NOTE: This wrong offse was recorded by
2864                          * old mkisofs utility. If ISO images is
2865                          * created by latest mkisofs, this does not
2866                          * happen.
2867                          */
2868                         file->next = NULL;
2869                         *empty_files.last = file;
2870                         empty_files.last = &(file->next);
2871                 } else {
2872                         count++;
2873                         cache_add_entry(iso9660, file);
2874                 }
2875                 file = next_entry(iso9660);
2876         }
2877
2878         if (count == 0) {
2879                 *pfile = file;
2880                 return ((file == NULL)?ARCHIVE_EOF:ARCHIVE_OK);
2881         }
2882         if (file->number == -1) {
2883                 file->next = NULL;
2884                 *empty_files.last = file;
2885                 empty_files.last = &(file->next);
2886         } else {
2887                 count++;
2888                 cache_add_entry(iso9660, file);
2889         }
2890
2891         if (count > 1) {
2892                 /* The count is the same as number of hardlink,
2893                  * so much so that each nlinks of files in cache_file
2894                  * is overwritten by value of the count.
2895                  */
2896                 for (file = iso9660->cache_files.first;
2897                     file != NULL; file = file->next)
2898                         file->nlinks = count;
2899         }
2900         /* If there are empty files, that files are added
2901          * to the tail of the cache_files. */
2902         if (empty_files.first != NULL) {
2903                 *iso9660->cache_files.last = empty_files.first;
2904                 iso9660->cache_files.last = empty_files.last;
2905         }
2906         *pfile = cache_get_entry(iso9660);
2907         return ((*pfile == NULL)?ARCHIVE_EOF:ARCHIVE_OK);
2908
2909 fatal_rr:
2910         archive_set_error(&a->archive, ARCHIVE_ERRNO_MISC,
2911             "Failed to connect 'CL' pointer to 'RE' rr_moved pointer of "
2912             "Rockridge extensions: current position = %jd, CL offset = %jd",
2913             (intmax_t)iso9660->current_position, (intmax_t)file->cl_offset);
2914         return (ARCHIVE_FATAL);
2915 }
2916
2917 static inline void
2918 re_add_entry(struct iso9660 *iso9660, struct file_info *file)
2919 {
2920         file->re_next = NULL;
2921         *iso9660->re_files.last = file;
2922         iso9660->re_files.last = &(file->re_next);
2923 }
2924
2925 static inline struct file_info *
2926 re_get_entry(struct iso9660 *iso9660)
2927 {
2928         struct file_info *file;
2929
2930         if ((file = iso9660->re_files.first) != NULL) {
2931                 iso9660->re_files.first = file->re_next;
2932                 if (iso9660->re_files.first == NULL)
2933                         iso9660->re_files.last =
2934                             &(iso9660->re_files.first);
2935         }
2936         return (file);
2937 }
2938
2939 static inline int
2940 rede_add_entry(struct file_info *file)
2941 {
2942         struct file_info *re;
2943
2944         /*
2945          * Find "RE" entry.
2946          */
2947         re = file->parent;
2948         while (re != NULL && !re->re)
2949                 re = re->parent;
2950         if (re == NULL)
2951                 return (-1);
2952
2953         file->re_next = NULL;
2954         *re->rede_files.last = file;
2955         re->rede_files.last = &(file->re_next);
2956         return (0);
2957 }
2958
2959 static inline struct file_info *
2960 rede_get_entry(struct file_info *re)
2961 {
2962         struct file_info *file;
2963
2964         if ((file = re->rede_files.first) != NULL) {
2965                 re->rede_files.first = file->re_next;
2966                 if (re->rede_files.first == NULL)
2967                         re->rede_files.last =
2968                             &(re->rede_files.first);
2969         }
2970         return (file);
2971 }
2972
2973 static inline void
2974 cache_add_entry(struct iso9660 *iso9660, struct file_info *file)
2975 {
2976         file->next = NULL;
2977         *iso9660->cache_files.last = file;
2978         iso9660->cache_files.last = &(file->next);
2979 }
2980
2981 static inline struct file_info *
2982 cache_get_entry(struct iso9660 *iso9660)
2983 {
2984         struct file_info *file;
2985
2986         if ((file = iso9660->cache_files.first) != NULL) {
2987                 iso9660->cache_files.first = file->next;
2988                 if (iso9660->cache_files.first == NULL)
2989                         iso9660->cache_files.last =
2990                             &(iso9660->cache_files.first);
2991         }
2992         return (file);
2993 }
2994
2995 static int
2996 heap_add_entry(struct archive_read *a, struct heap_queue *heap,
2997     struct file_info *file, uint64_t key)
2998 {
2999         uint64_t file_key, parent_key;
3000         int hole, parent;
3001
3002         /* Expand our pending files list as necessary. */
3003         if (heap->used >= heap->allocated) {
3004                 struct file_info **new_pending_files;
3005                 int new_size = heap->allocated * 2;
3006
3007                 if (heap->allocated < 1024)
3008                         new_size = 1024;
3009                 /* Overflow might keep us from growing the list. */
3010                 if (new_size <= heap->allocated) {
3011                         archive_set_error(&a->archive,
3012                             ENOMEM, "Out of memory");
3013                         return (ARCHIVE_FATAL);
3014                 }
3015                 new_pending_files = (struct file_info **)
3016                     malloc(new_size * sizeof(new_pending_files[0]));
3017                 if (new_pending_files == NULL) {
3018                         archive_set_error(&a->archive,
3019                             ENOMEM, "Out of memory");
3020                         return (ARCHIVE_FATAL);
3021                 }
3022                 memcpy(new_pending_files, heap->files,
3023                     heap->allocated * sizeof(new_pending_files[0]));
3024                 if (heap->files != NULL)
3025                         free(heap->files);
3026                 heap->files = new_pending_files;
3027                 heap->allocated = new_size;
3028         }
3029
3030         file_key = file->key = key;
3031
3032         /*
3033          * Start with hole at end, walk it up tree to find insertion point.
3034          */
3035         hole = heap->used++;
3036         while (hole > 0) {
3037                 parent = (hole - 1)/2;
3038                 parent_key = heap->files[parent]->key;
3039                 if (file_key >= parent_key) {
3040                         heap->files[hole] = file;
3041                         return (ARCHIVE_OK);
3042                 }
3043                 /* Move parent into hole <==> move hole up tree. */
3044                 heap->files[hole] = heap->files[parent];
3045                 hole = parent;
3046         }
3047         heap->files[0] = file;
3048
3049         return (ARCHIVE_OK);
3050 }
3051
3052 static struct file_info *
3053 heap_get_entry(struct heap_queue *heap)
3054 {
3055         uint64_t a_key, b_key, c_key;
3056         int a, b, c;
3057         struct file_info *r, *tmp;
3058
3059         if (heap->used < 1)
3060                 return (NULL);
3061
3062         /*
3063          * The first file in the list is the earliest; we'll return this.
3064          */
3065         r = heap->files[0];
3066
3067         /*
3068          * Move the last item in the heap to the root of the tree
3069          */
3070         heap->files[0] = heap->files[--(heap->used)];
3071
3072         /*
3073          * Rebalance the heap.
3074          */
3075         a = 0; /* Starting element and its heap key */
3076         a_key = heap->files[a]->key;
3077         for (;;) {
3078                 b = a + a + 1; /* First child */
3079                 if (b >= heap->used)
3080                         return (r);
3081                 b_key = heap->files[b]->key;
3082                 c = b + 1; /* Use second child if it is smaller. */
3083                 if (c < heap->used) {
3084                         c_key = heap->files[c]->key;
3085                         if (c_key < b_key) {
3086                                 b = c;
3087                                 b_key = c_key;
3088                         }
3089                 }
3090                 if (a_key <= b_key)
3091                         return (r);
3092                 tmp = heap->files[a];
3093                 heap->files[a] = heap->files[b];
3094                 heap->files[b] = tmp;
3095                 a = b;
3096         }
3097 }
3098
3099 static unsigned int
3100 toi(const void *p, int n)
3101 {
3102         const unsigned char *v = (const unsigned char *)p;
3103         if (n > 1)
3104                 return v[0] + 256 * toi(v + 1, n - 1);
3105         if (n == 1)
3106                 return v[0];
3107         return (0);
3108 }
3109
3110 static time_t
3111 isodate7(const unsigned char *v)
3112 {
3113         struct tm tm;
3114         int offset;
3115         time_t t;
3116
3117         memset(&tm, 0, sizeof(tm));
3118         tm.tm_year = v[0];
3119         tm.tm_mon = v[1] - 1;
3120         tm.tm_mday = v[2];
3121         tm.tm_hour = v[3];
3122         tm.tm_min = v[4];
3123         tm.tm_sec = v[5];
3124         /* v[6] is the signed timezone offset, in 1/4-hour increments. */
3125         offset = ((const signed char *)v)[6];
3126         if (offset > -48 && offset < 52) {
3127                 tm.tm_hour -= offset / 4;
3128                 tm.tm_min -= (offset % 4) * 15;
3129         }
3130         t = time_from_tm(&tm);
3131         if (t == (time_t)-1)
3132                 return ((time_t)0);
3133         return (t);
3134 }
3135
3136 static time_t
3137 isodate17(const unsigned char *v)
3138 {
3139         struct tm tm;
3140         int offset;
3141         time_t t;
3142
3143         memset(&tm, 0, sizeof(tm));
3144         tm.tm_year = (v[0] - '0') * 1000 + (v[1] - '0') * 100
3145             + (v[2] - '0') * 10 + (v[3] - '0')
3146             - 1900;
3147         tm.tm_mon = (v[4] - '0') * 10 + (v[5] - '0');
3148         tm.tm_mday = (v[6] - '0') * 10 + (v[7] - '0');
3149         tm.tm_hour = (v[8] - '0') * 10 + (v[9] - '0');
3150         tm.tm_min = (v[10] - '0') * 10 + (v[11] - '0');
3151         tm.tm_sec = (v[12] - '0') * 10 + (v[13] - '0');
3152         /* v[16] is the signed timezone offset, in 1/4-hour increments. */
3153         offset = ((const signed char *)v)[16];
3154         if (offset > -48 && offset < 52) {
3155                 tm.tm_hour -= offset / 4;
3156                 tm.tm_min -= (offset % 4) * 15;
3157         }
3158         t = time_from_tm(&tm);
3159         if (t == (time_t)-1)
3160                 return ((time_t)0);
3161         return (t);
3162 }
3163
3164 static time_t
3165 time_from_tm(struct tm *t)
3166 {
3167 #if HAVE_TIMEGM
3168         /* Use platform timegm() if available. */
3169         return (timegm(t));
3170 #elif HAVE__MKGMTIME64
3171         return (_mkgmtime64(t));
3172 #else
3173         /* Else use direct calculation using POSIX assumptions. */
3174         /* First, fix up tm_yday based on the year/month/day. */
3175         if (mktime(t) == (time_t)-1)
3176                 return ((time_t)-1);
3177         /* Then we can compute timegm() from first principles. */
3178         return (t->tm_sec
3179             + t->tm_min * 60
3180             + t->tm_hour * 3600
3181             + t->tm_yday * 86400
3182             + (t->tm_year - 70) * 31536000
3183             + ((t->tm_year - 69) / 4) * 86400
3184             - ((t->tm_year - 1) / 100) * 86400
3185             + ((t->tm_year + 299) / 400) * 86400);
3186 #endif
3187 }
3188
3189 static const char *
3190 build_pathname(struct archive_string *as, struct file_info *file, int depth)
3191 {
3192         // Plain ISO9660 only allows 8 dir levels; if we get
3193         // to 1000, then something is very, very wrong.
3194         if (depth > 1000) {
3195                 return NULL;
3196         }
3197         if (file->parent != NULL && archive_strlen(&file->parent->name) > 0) {
3198                 if (build_pathname(as, file->parent, depth + 1) == NULL) {
3199                         return NULL;
3200                 }
3201                 archive_strcat(as, "/");
3202         }
3203         if (archive_strlen(&file->name) == 0)
3204                 archive_strcat(as, ".");
3205         else
3206                 archive_string_concat(as, &file->name);
3207         return (as->s);
3208 }
3209
3210 static int
3211 build_pathname_utf16be(unsigned char *p, size_t max, size_t *len,
3212     struct file_info *file)
3213 {
3214         if (file->parent != NULL && file->parent->utf16be_bytes > 0) {
3215                 if (build_pathname_utf16be(p, max, len, file->parent) != 0)
3216                         return (-1);
3217                 p[*len] = 0;
3218                 p[*len + 1] = '/';
3219                 *len += 2;
3220         }
3221         if (file->utf16be_bytes == 0) {
3222                 if (*len + 2 > max)
3223                         return (-1);/* Path is too long! */
3224                 p[*len] = 0;
3225                 p[*len + 1] = '.';
3226                 *len += 2;
3227         } else {
3228                 if (*len + file->utf16be_bytes > max)
3229                         return (-1);/* Path is too long! */
3230                 memcpy(p + *len, file->utf16be_name, file->utf16be_bytes);
3231                 *len += file->utf16be_bytes;
3232         }
3233         return (0);
3234 }
3235
3236 #if DEBUG
3237 static void
3238 dump_isodirrec(FILE *out, const unsigned char *isodirrec)
3239 {
3240         fprintf(out, " l %d,",
3241             toi(isodirrec + DR_length_offset, DR_length_size));
3242         fprintf(out, " a %d,",
3243             toi(isodirrec + DR_ext_attr_length_offset, DR_ext_attr_length_size));
3244         fprintf(out, " ext 0x%x,",
3245             toi(isodirrec + DR_extent_offset, DR_extent_size));
3246         fprintf(out, " s %d,",
3247             toi(isodirrec + DR_size_offset, DR_extent_size));
3248         fprintf(out, " f 0x%x,",
3249             toi(isodirrec + DR_flags_offset, DR_flags_size));
3250         fprintf(out, " u %d,",
3251             toi(isodirrec + DR_file_unit_size_offset, DR_file_unit_size_size));
3252         fprintf(out, " ilv %d,",
3253             toi(isodirrec + DR_interleave_offset, DR_interleave_size));
3254         fprintf(out, " seq %d,",
3255             toi(isodirrec + DR_volume_sequence_number_offset,
3256                 DR_volume_sequence_number_size));
3257         fprintf(out, " nl %d:",
3258             toi(isodirrec + DR_name_len_offset, DR_name_len_size));
3259         fprintf(out, " `%.*s'",
3260             toi(isodirrec + DR_name_len_offset, DR_name_len_size),
3261                 isodirrec + DR_name_offset);
3262 }
3263 #endif