2009-11-11 19:39:23 +03:00
|
|
|
/*
|
2016-01-29 16:48:37 +03:00
|
|
|
* JSON Parser
|
2009-11-11 19:39:23 +03:00
|
|
|
*
|
|
|
|
* Copyright IBM, Corp. 2009
|
|
|
|
*
|
|
|
|
* Authors:
|
|
|
|
* Anthony Liguori <aliguori@us.ibm.com>
|
|
|
|
*
|
|
|
|
* This work is licensed under the terms of the GNU LGPL, version 2.1 or later.
|
|
|
|
* See the COPYING.LIB file in the top-level directory.
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
2016-01-29 20:50:01 +03:00
|
|
|
#include "qemu/osdep.h"
|
2019-05-23 17:35:06 +03:00
|
|
|
#include "qemu/ctype.h"
|
2017-06-07 19:36:02 +03:00
|
|
|
#include "qemu/cutils.h"
|
2018-08-23 19:39:49 +03:00
|
|
|
#include "qemu/unicode.h"
|
include/qemu/osdep.h: Don't include qapi/error.h
Commit 57cb38b included qapi/error.h into qemu/osdep.h to get the
Error typedef. Since then, we've moved to include qemu/osdep.h
everywhere. Its file comment explains: "To avoid getting into
possible circular include dependencies, this file should not include
any other QEMU headers, with the exceptions of config-host.h,
compiler.h, os-posix.h and os-win32.h, all of which are doing a
similar job to this file and are under similar constraints."
qapi/error.h doesn't do a similar job, and it doesn't adhere to
similar constraints: it includes qapi-types.h. That's in excess of
100KiB of crap most .c files don't actually need.
Add the typedef to qemu/typedefs.h, and include that instead of
qapi/error.h. Include qapi/error.h in .c files that need it and don't
get it now. Include qapi-types.h in qom/object.h for uint16List.
Update scripts/clean-includes accordingly. Update it further to match
reality: replace config.h by config-target.h, add sysemu/os-posix.h,
sysemu/os-win32.h. Update the list of includes in the qemu/osdep.h
comment quoted above similarly.
This reduces the number of objects depending on qapi/error.h from "all
of them" to less than a third. Unfortunately, the number depending on
qapi-types.h shrinks only a little. More work is needed for that one.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
[Fix compilation without the spice devel packages. - Paolo]
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2016-03-14 11:01:28 +03:00
|
|
|
#include "qapi/error.h"
|
2018-02-01 14:18:35 +03:00
|
|
|
#include "qapi/qmp/qbool.h"
|
2018-02-01 14:18:39 +03:00
|
|
|
#include "qapi/qmp/qdict.h"
|
2018-02-01 14:18:38 +03:00
|
|
|
#include "qapi/qmp/qlist.h"
|
2018-02-01 14:18:36 +03:00
|
|
|
#include "qapi/qmp/qnull.h"
|
|
|
|
#include "qapi/qmp/qnum.h"
|
2018-02-01 14:18:35 +03:00
|
|
|
#include "qapi/qmp/qstring.h"
|
2018-08-23 19:40:20 +03:00
|
|
|
#include "json-parser-int.h"
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2018-08-23 19:40:18 +03:00
|
|
|
struct JSONToken {
|
|
|
|
JSONTokenType type;
|
|
|
|
int x;
|
|
|
|
int y;
|
|
|
|
char str[];
|
|
|
|
};
|
|
|
|
|
2009-11-11 19:39:23 +03:00
|
|
|
typedef struct JSONParserContext
|
|
|
|
{
|
2011-06-01 21:14:50 +04:00
|
|
|
Error *err;
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *current;
|
2015-11-26 00:23:31 +03:00
|
|
|
GQueue *buf;
|
2018-08-23 19:40:22 +03:00
|
|
|
va_list *ap;
|
2009-11-11 19:39:23 +03:00
|
|
|
} JSONParserContext;
|
|
|
|
|
|
|
|
#define BUG_ON(cond) assert(!(cond))
|
|
|
|
|
|
|
|
/**
|
|
|
|
* TODO
|
|
|
|
*
|
|
|
|
* 0) make errors meaningful again
|
|
|
|
* 1) add geometry information to tokens
|
|
|
|
* 3) should we return a parsed size?
|
|
|
|
* 4) deal with premature EOI
|
|
|
|
*/
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
static QObject *parse_value(JSONParserContext *ctxt);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Error handler
|
|
|
|
*/
|
2010-09-23 23:28:05 +04:00
|
|
|
static void GCC_FMT_ATTR(3, 4) parse_error(JSONParserContext *ctxt,
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token, const char *msg, ...)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2010-03-24 18:12:05 +03:00
|
|
|
va_list ap;
|
2011-06-01 21:14:50 +04:00
|
|
|
char message[1024];
|
2018-08-23 19:39:50 +03:00
|
|
|
|
|
|
|
if (ctxt->err) {
|
|
|
|
return;
|
|
|
|
}
|
2010-03-24 18:12:05 +03:00
|
|
|
va_start(ap, msg);
|
2011-06-01 21:14:50 +04:00
|
|
|
vsnprintf(message, sizeof(message), msg, ap);
|
2010-03-24 18:12:05 +03:00
|
|
|
va_end(ap);
|
2014-03-22 03:42:26 +04:00
|
|
|
error_setg(&ctxt->err, "JSON parse error, %s", message);
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
|
2018-08-23 19:39:56 +03:00
|
|
|
static int cvt4hex(const char *s)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2018-08-23 19:39:56 +03:00
|
|
|
int cp, i;
|
|
|
|
|
|
|
|
cp = 0;
|
|
|
|
for (i = 0; i < 4; i++) {
|
|
|
|
if (!qemu_isxdigit(s[i])) {
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
cp <<= 4;
|
|
|
|
if (s[i] >= '0' && s[i] <= '9') {
|
|
|
|
cp |= s[i] - '0';
|
|
|
|
} else if (s[i] >= 'a' && s[i] <= 'f') {
|
|
|
|
cp |= 10 + s[i] - 'a';
|
|
|
|
} else if (s[i] >= 'A' && s[i] <= 'F') {
|
|
|
|
cp |= 10 + s[i] - 'A';
|
|
|
|
} else {
|
|
|
|
return -1;
|
|
|
|
}
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
2018-08-23 19:39:56 +03:00
|
|
|
return cp;
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2018-08-23 19:39:53 +03:00
|
|
|
* parse_string(): Parse a JSON string
|
2009-11-11 19:39:23 +03:00
|
|
|
*
|
2018-08-23 19:39:53 +03:00
|
|
|
* From RFC 8259 "The JavaScript Object Notation (JSON) Data
|
|
|
|
* Interchange Format":
|
|
|
|
*
|
|
|
|
* char = unescaped /
|
|
|
|
* escape (
|
|
|
|
* %x22 / ; " quotation mark U+0022
|
|
|
|
* %x5C / ; \ reverse solidus U+005C
|
|
|
|
* %x2F / ; / solidus U+002F
|
|
|
|
* %x62 / ; b backspace U+0008
|
|
|
|
* %x66 / ; f form feed U+000C
|
|
|
|
* %x6E / ; n line feed U+000A
|
|
|
|
* %x72 / ; r carriage return U+000D
|
|
|
|
* %x74 / ; t tab U+0009
|
|
|
|
* %x75 4HEXDIG ) ; uXXXX U+XXXX
|
|
|
|
* escape = %x5C ; \
|
|
|
|
* quotation-mark = %x22 ; "
|
|
|
|
* unescaped = %x20-21 / %x23-5B / %x5D-10FFFF
|
|
|
|
*
|
|
|
|
* Extensions over RFC 8259:
|
|
|
|
* - Extra escape sequence in strings:
|
|
|
|
* 0x27 (apostrophe) is recognized after escape, too
|
|
|
|
* - Single-quoted strings:
|
|
|
|
* Like double-quoted strings, except they're delimited by %x27
|
|
|
|
* (apostrophe) instead of %x22 (quotation mark), and can't contain
|
|
|
|
* unescaped apostrophe, but can contain unescaped quotation mark.
|
|
|
|
*
|
|
|
|
* Note:
|
|
|
|
* - Encoding is modified UTF-8.
|
|
|
|
* - Invalid Unicode characters are rejected.
|
|
|
|
* - Control characters \x00..\x1F are rejected by the lexer.
|
2009-11-11 19:39:23 +03:00
|
|
|
*/
|
2018-08-23 19:39:53 +03:00
|
|
|
static QString *parse_string(JSONParserContext *ctxt, JSONToken *token)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2015-11-26 00:23:32 +03:00
|
|
|
const char *ptr = token->str;
|
2009-11-11 19:39:23 +03:00
|
|
|
QString *str;
|
2018-08-23 19:39:47 +03:00
|
|
|
char quote;
|
2018-08-23 19:39:56 +03:00
|
|
|
const char *beg;
|
|
|
|
int cp, trailing;
|
2018-08-23 19:39:49 +03:00
|
|
|
char *end;
|
|
|
|
ssize_t len;
|
|
|
|
char utf8_buf[5];
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2018-08-23 19:39:47 +03:00
|
|
|
assert(*ptr == '"' || *ptr == '\'');
|
|
|
|
quote = *ptr++;
|
2009-11-11 19:39:23 +03:00
|
|
|
str = qstring_new();
|
2018-08-23 19:39:47 +03:00
|
|
|
|
|
|
|
while (*ptr != quote) {
|
|
|
|
assert(*ptr);
|
json: Improve safety of qobject_from_jsonf_nofail() & friends
The JSON parser optionally supports interpolation. This is used to
build QObjects by parsing string templates. The templates are C
literals, so parse errors (such as invalid interpolation
specifications) are actually programming errors. Consequently, the
functions providing parsing with interpolation
(qobject_from_jsonf_nofail(), qobject_from_vjsonf_nofail(),
qdict_from_jsonf_nofail(), qdict_from_vjsonf_nofail()) pass
&error_abort to the parser.
However, there's another, more dangerous kind of programming error:
since we use va_arg() to get the value to interpolate, behavior is
undefined when the variable argument isn't consistent with the
interpolation specification.
The same problem exists with printf()-like functions, and the solution
is to have the compiler check consistency. This is what
GCC_FMT_ATTR() is about.
To enable this type checking for interpolation as well, we carefully
chose our interpolation specifications to match printf conversion
specifications, and decorate functions parsing templates with
GCC_FMT_ATTR().
Note that this only protects against undefined behavior due to type
errors. It can't protect against use of invalid interpolation
specifications that happen to be valid printf conversion
specifications.
However, there's still a gaping hole in the type checking: GCC
recognizes '%' as start of printf conversion specification anywhere in
the template, but the parser recognizes it only outside JSON strings.
For instance, if someone were to pass a "{ '%s': %d }" template, GCC
would require a char * and an int argument, but the parser would
va_arg() only an int argument, resulting in undefined behavior.
Avoid undefined behavior by catching the programming error at run
time: have the parser recognize and reject '%' in JSON strings.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Message-Id: <20180823164025.12553-57-armbru@redhat.com>
2018-08-23 19:40:23 +03:00
|
|
|
switch (*ptr) {
|
|
|
|
case '\\':
|
2018-08-23 19:39:56 +03:00
|
|
|
beg = ptr++;
|
2018-08-23 19:39:47 +03:00
|
|
|
switch (*ptr++) {
|
2009-11-11 19:39:23 +03:00
|
|
|
case '"':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '"');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
|
|
|
case '\'':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\'');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
|
|
|
case '\\':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\\');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
|
|
|
case '/':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '/');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
|
|
|
case 'b':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\b');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
2010-05-20 00:06:15 +04:00
|
|
|
case 'f':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\f');
|
2010-05-20 00:06:15 +04:00
|
|
|
break;
|
2009-11-11 19:39:23 +03:00
|
|
|
case 'n':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\n');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
|
|
|
case 'r':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\r');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
|
|
|
case 't':
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append_chr(str, '\t');
|
2009-11-11 19:39:23 +03:00
|
|
|
break;
|
2018-08-23 19:39:54 +03:00
|
|
|
case 'u':
|
2018-08-23 19:39:56 +03:00
|
|
|
cp = cvt4hex(ptr);
|
|
|
|
ptr += 4;
|
|
|
|
|
|
|
|
/* handle surrogate pairs */
|
|
|
|
if (cp >= 0xD800 && cp <= 0xDBFF
|
|
|
|
&& ptr[0] == '\\' && ptr[1] == 'u') {
|
|
|
|
/* leading surrogate followed by \u */
|
|
|
|
cp = 0x10000 + ((cp & 0x3FF) << 10);
|
|
|
|
trailing = cvt4hex(ptr + 2);
|
|
|
|
if (trailing >= 0xDC00 && trailing <= 0xDFFF) {
|
|
|
|
/* followed by trailing surrogate */
|
|
|
|
cp |= trailing & 0x3FF;
|
|
|
|
ptr += 6;
|
|
|
|
} else {
|
|
|
|
cp = -1; /* invalid */
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:39:55 +03:00
|
|
|
if (mod_utf8_encode(utf8_buf, sizeof(utf8_buf), cp) < 0) {
|
|
|
|
parse_error(ctxt, token,
|
2018-08-23 19:39:56 +03:00
|
|
|
"%.*s is not a valid Unicode character",
|
|
|
|
(int)(ptr - beg), beg);
|
2018-08-23 19:39:55 +03:00
|
|
|
goto out;
|
|
|
|
}
|
2018-08-23 19:39:54 +03:00
|
|
|
qstring_append(str, utf8_buf);
|
|
|
|
break;
|
2009-11-11 19:39:23 +03:00
|
|
|
default:
|
|
|
|
parse_error(ctxt, token, "invalid escape sequence in string");
|
|
|
|
goto out;
|
|
|
|
}
|
json: Improve safety of qobject_from_jsonf_nofail() & friends
The JSON parser optionally supports interpolation. This is used to
build QObjects by parsing string templates. The templates are C
literals, so parse errors (such as invalid interpolation
specifications) are actually programming errors. Consequently, the
functions providing parsing with interpolation
(qobject_from_jsonf_nofail(), qobject_from_vjsonf_nofail(),
qdict_from_jsonf_nofail(), qdict_from_vjsonf_nofail()) pass
&error_abort to the parser.
However, there's another, more dangerous kind of programming error:
since we use va_arg() to get the value to interpolate, behavior is
undefined when the variable argument isn't consistent with the
interpolation specification.
The same problem exists with printf()-like functions, and the solution
is to have the compiler check consistency. This is what
GCC_FMT_ATTR() is about.
To enable this type checking for interpolation as well, we carefully
chose our interpolation specifications to match printf conversion
specifications, and decorate functions parsing templates with
GCC_FMT_ATTR().
Note that this only protects against undefined behavior due to type
errors. It can't protect against use of invalid interpolation
specifications that happen to be valid printf conversion
specifications.
However, there's still a gaping hole in the type checking: GCC
recognizes '%' as start of printf conversion specification anywhere in
the template, but the parser recognizes it only outside JSON strings.
For instance, if someone were to pass a "{ '%s': %d }" template, GCC
would require a char * and an int argument, but the parser would
va_arg() only an int argument, resulting in undefined behavior.
Avoid undefined behavior by catching the programming error at run
time: have the parser recognize and reject '%' in JSON strings.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Message-Id: <20180823164025.12553-57-armbru@redhat.com>
2018-08-23 19:40:23 +03:00
|
|
|
break;
|
|
|
|
case '%':
|
json: Fix % handling when not interpolating
Commit 8bca4613 added support for %% in json strings when interpolating,
but in doing so broke handling of % when not interpolating.
When parse_string() is fed a string token containing '%', it skips the
'%' regardless of ctxt->ap, i.e. even it's not interpolating. If the
'%' is the string's last character, it fails an assertion. Else, it
"merely" swallows the '%'.
Fix parse_string() to handle '%' specially only when interpolating.
To gauge the bug's impact, let's review non-interpolating users of this
parser, i.e. code passing NULL context to json_message_parser_init():
* tests/check-qjson.c, tests/test-qobject-input-visitor.c,
tests/test-visitor-serialization.c
Plenty of tests, but we still failed to cover the buggy case.
* monitor.c: QMP input
* qga/main.c: QGA input
* qobject_from_json():
- qobject-input-visitor.c: JSON command line option arguments of
-display and -blockdev
Reproducer: -blockdev '{"%"}'
- block.c: JSON pseudo-filenames starting with "json:"
Reproducer: https://bugzilla.redhat.com/show_bug.cgi?id=1668244#c3
- block/rbd.c: JSON key pairs
Pseudo-filenames starting with "rbd:".
Command line, QMP and QGA input are trusted.
Filenames are trusted when they come from command line, QMP or HMP.
They are untrusted when they come from from image file headers.
Example: QCOW2 backing file name. Note that this is *not* the security
boundary between host and guest. It's the boundary between host and an
image file from an untrusted source.
Neither failing an assertion nor skipping a character in a filename of
your choice looks exploitable. Note that we don't support compiling
with NDEBUG.
Fixes: 8bca4613e6cddd948895b8db3def05950463495b
Cc: qemu-stable@nongnu.org
Signed-off-by: Christophe Fergeau <cfergeau@redhat.com>
Message-Id: <20190102140535.11512-1-cfergeau@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Tested-by: Richard W.M. Jones <rjones@redhat.com>
[Commit message extended to discuss impact]
Signed-off-by: Markus Armbruster <armbru@redhat.com>
2019-01-02 17:05:35 +03:00
|
|
|
if (ctxt->ap) {
|
|
|
|
if (ptr[1] != '%') {
|
|
|
|
parse_error(ctxt, token, "can't interpolate into string");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
ptr++;
|
json: Improve safety of qobject_from_jsonf_nofail() & friends
The JSON parser optionally supports interpolation. This is used to
build QObjects by parsing string templates. The templates are C
literals, so parse errors (such as invalid interpolation
specifications) are actually programming errors. Consequently, the
functions providing parsing with interpolation
(qobject_from_jsonf_nofail(), qobject_from_vjsonf_nofail(),
qdict_from_jsonf_nofail(), qdict_from_vjsonf_nofail()) pass
&error_abort to the parser.
However, there's another, more dangerous kind of programming error:
since we use va_arg() to get the value to interpolate, behavior is
undefined when the variable argument isn't consistent with the
interpolation specification.
The same problem exists with printf()-like functions, and the solution
is to have the compiler check consistency. This is what
GCC_FMT_ATTR() is about.
To enable this type checking for interpolation as well, we carefully
chose our interpolation specifications to match printf conversion
specifications, and decorate functions parsing templates with
GCC_FMT_ATTR().
Note that this only protects against undefined behavior due to type
errors. It can't protect against use of invalid interpolation
specifications that happen to be valid printf conversion
specifications.
However, there's still a gaping hole in the type checking: GCC
recognizes '%' as start of printf conversion specification anywhere in
the template, but the parser recognizes it only outside JSON strings.
For instance, if someone were to pass a "{ '%s': %d }" template, GCC
would require a char * and an int argument, but the parser would
va_arg() only an int argument, resulting in undefined behavior.
Avoid undefined behavior by catching the programming error at run
time: have the parser recognize and reject '%' in JSON strings.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Message-Id: <20180823164025.12553-57-armbru@redhat.com>
2018-08-23 19:40:23 +03:00
|
|
|
}
|
|
|
|
/* fall through */
|
|
|
|
default:
|
2018-08-23 19:39:49 +03:00
|
|
|
cp = mod_utf8_codepoint(ptr, 6, &end);
|
2018-08-23 19:39:52 +03:00
|
|
|
if (cp < 0) {
|
2018-08-23 19:39:49 +03:00
|
|
|
parse_error(ctxt, token, "invalid UTF-8 sequence in string");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
ptr = end;
|
|
|
|
len = mod_utf8_encode(utf8_buf, sizeof(utf8_buf), cp);
|
|
|
|
assert(len >= 0);
|
|
|
|
qstring_append(str, utf8_buf);
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return str;
|
|
|
|
|
|
|
|
out:
|
2018-04-19 18:01:43 +03:00
|
|
|
qobject_unref(str);
|
2009-11-11 19:39:23 +03:00
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
/* Note: the token object returned by parser_context_peek_token or
|
|
|
|
* parser_context_pop_token is deleted as soon as parser_context_pop_token
|
|
|
|
* is called again.
|
2015-11-26 00:23:31 +03:00
|
|
|
*/
|
2015-11-26 00:23:32 +03:00
|
|
|
static JSONToken *parser_context_pop_token(JSONParserContext *ctxt)
|
2012-08-15 22:45:43 +04:00
|
|
|
{
|
2015-11-26 00:23:32 +03:00
|
|
|
g_free(ctxt->current);
|
2015-11-26 00:23:31 +03:00
|
|
|
ctxt->current = g_queue_pop_head(ctxt->buf);
|
|
|
|
return ctxt->current;
|
2012-08-15 22:45:43 +04:00
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
static JSONToken *parser_context_peek_token(JSONParserContext *ctxt)
|
2012-08-15 22:45:43 +04:00
|
|
|
{
|
2015-11-26 00:23:31 +03:00
|
|
|
return g_queue_peek_head(ctxt->buf);
|
2012-08-15 22:45:43 +04:00
|
|
|
}
|
|
|
|
|
2009-11-11 19:39:23 +03:00
|
|
|
/**
|
|
|
|
* Parsing rules
|
|
|
|
*/
|
2018-08-23 19:40:22 +03:00
|
|
|
static int parse_pair(JSONParserContext *ctxt, QDict *dict)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2018-03-11 01:14:36 +03:00
|
|
|
QObject *value;
|
|
|
|
QString *key = NULL;
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *peek, *token;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
peek = parser_context_peek_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (peek == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
key = qobject_to(QString, parse_value(ctxt));
|
2018-03-11 01:14:36 +03:00
|
|
|
if (!key) {
|
2009-11-11 19:39:23 +03:00
|
|
|
parse_error(ctxt, peek, "key is not a string in object");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (token == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
if (token->type != JSON_COLON) {
|
2009-11-11 19:39:23 +03:00
|
|
|
parse_error(ctxt, token, "missing : in object pair");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
value = parse_value(ctxt);
|
2009-11-11 19:39:23 +03:00
|
|
|
if (value == NULL) {
|
|
|
|
parse_error(ctxt, token, "Missing value in dict");
|
|
|
|
goto out;
|
|
|
|
}
|
2018-12-06 15:17:43 +03:00
|
|
|
|
|
|
|
if (qdict_haskey(dict, qstring_get_str(key))) {
|
|
|
|
parse_error(ctxt, token, "duplicate key");
|
|
|
|
goto out;
|
|
|
|
}
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2018-03-11 01:14:36 +03:00
|
|
|
qdict_put_obj(dict, qstring_get_str(key), value);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2018-04-19 18:01:43 +03:00
|
|
|
qobject_unref(key);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
out:
|
2018-04-19 18:01:43 +03:00
|
|
|
qobject_unref(key);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
static QObject *parse_object(JSONParserContext *ctxt)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
|
|
|
QDict *dict = NULL;
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token, *peek;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2015-11-26 00:23:32 +03:00
|
|
|
assert(token && token->type == JSON_LCURLY);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
|
|
|
dict = qdict_new();
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
peek = parser_context_peek_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (peek == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
if (peek->type != JSON_RCURLY) {
|
2018-08-23 19:40:22 +03:00
|
|
|
if (parse_pair(ctxt, dict) == -1) {
|
2009-11-11 19:39:23 +03:00
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (token == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
while (token->type != JSON_RCURLY) {
|
|
|
|
if (token->type != JSON_COMMA) {
|
2009-11-11 19:39:23 +03:00
|
|
|
parse_error(ctxt, token, "expected separator in dict");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
if (parse_pair(ctxt, dict) == -1) {
|
2009-11-11 19:39:23 +03:00
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (token == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
} else {
|
2014-06-10 13:20:24 +04:00
|
|
|
(void)parser_context_pop_token(ctxt);
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
return QOBJECT(dict);
|
|
|
|
|
|
|
|
out:
|
2018-04-19 18:01:43 +03:00
|
|
|
qobject_unref(dict);
|
2009-11-11 19:39:23 +03:00
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
static QObject *parse_array(JSONParserContext *ctxt)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
|
|
|
QList *list = NULL;
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token, *peek;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2015-11-26 00:23:32 +03:00
|
|
|
assert(token && token->type == JSON_LSQUARE);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
|
|
|
list = qlist_new();
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
peek = parser_context_peek_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (peek == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
if (peek->type != JSON_RSQUARE) {
|
2009-11-11 19:39:23 +03:00
|
|
|
QObject *obj;
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
obj = parse_value(ctxt);
|
2009-11-11 19:39:23 +03:00
|
|
|
if (obj == NULL) {
|
|
|
|
parse_error(ctxt, token, "expecting value");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
qlist_append_obj(list, obj);
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (token == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
while (token->type != JSON_RSQUARE) {
|
|
|
|
if (token->type != JSON_COMMA) {
|
2009-11-11 19:39:23 +03:00
|
|
|
parse_error(ctxt, token, "expected separator in list");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
obj = parse_value(ctxt);
|
2009-11-11 19:39:23 +03:00
|
|
|
if (obj == NULL) {
|
|
|
|
parse_error(ctxt, token, "expecting value");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
qlist_append_obj(list, obj);
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2011-06-01 21:14:55 +04:00
|
|
|
if (token == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
goto out;
|
|
|
|
}
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
} else {
|
2014-06-10 13:20:24 +04:00
|
|
|
(void)parser_context_pop_token(ctxt);
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
return QOBJECT(list);
|
|
|
|
|
|
|
|
out:
|
2018-04-19 18:01:43 +03:00
|
|
|
qobject_unref(list);
|
2009-11-11 19:39:23 +03:00
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
static QObject *parse_keyword(JSONParserContext *ctxt)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2015-11-26 00:23:32 +03:00
|
|
|
assert(token && token->type == JSON_KEYWORD);
|
2015-11-26 00:23:27 +03:00
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
if (!strcmp(token->str, "true")) {
|
2015-11-26 00:23:30 +03:00
|
|
|
return QOBJECT(qbool_from_bool(true));
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "false")) {
|
2015-11-26 00:23:30 +03:00
|
|
|
return QOBJECT(qbool_from_bool(false));
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "null")) {
|
2017-06-26 14:52:24 +03:00
|
|
|
return QOBJECT(qnull());
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
2015-11-26 00:23:32 +03:00
|
|
|
parse_error(ctxt, token, "invalid keyword '%s'", token->str);
|
2009-11-11 19:39:23 +03:00
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
static QObject *parse_interpolation(JSONParserContext *ctxt)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2018-08-23 19:40:04 +03:00
|
|
|
assert(token && token->type == JSON_INTERP);
|
2015-11-26 00:23:28 +03:00
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
if (!strcmp(token->str, "%p")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return va_arg(*ctxt->ap, QObject *);
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "%i")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qbool_from_bool(va_arg(*ctxt->ap, int)));
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "%d")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_int(va_arg(*ctxt->ap, int)));
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "%ld")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_int(va_arg(*ctxt->ap, long)));
|
2018-08-23 19:40:08 +03:00
|
|
|
} else if (!strcmp(token->str, "%lld")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_int(va_arg(*ctxt->ap, long long)));
|
2018-08-23 19:40:08 +03:00
|
|
|
} else if (!strcmp(token->str, "%" PRId64)) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_int(va_arg(*ctxt->ap, int64_t)));
|
2017-06-07 19:36:02 +03:00
|
|
|
} else if (!strcmp(token->str, "%u")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_uint(va_arg(*ctxt->ap, unsigned int)));
|
2017-06-07 19:36:02 +03:00
|
|
|
} else if (!strcmp(token->str, "%lu")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_uint(va_arg(*ctxt->ap, unsigned long)));
|
2018-08-23 19:40:08 +03:00
|
|
|
} else if (!strcmp(token->str, "%llu")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_uint(va_arg(*ctxt->ap, unsigned long long)));
|
2018-08-23 19:40:08 +03:00
|
|
|
} else if (!strcmp(token->str, "%" PRIu64)) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_uint(va_arg(*ctxt->ap, uint64_t)));
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "%s")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qstring_from_str(va_arg(*ctxt->ap, const char *)));
|
2015-11-26 00:23:32 +03:00
|
|
|
} else if (!strcmp(token->str, "%f")) {
|
2018-08-23 19:40:22 +03:00
|
|
|
return QOBJECT(qnum_from_double(va_arg(*ctxt->ap, double)));
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
2018-08-23 19:40:07 +03:00
|
|
|
parse_error(ctxt, token, "invalid interpolation '%s'", token->str);
|
2009-11-11 19:39:23 +03:00
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
static QObject *parse_literal(JSONParserContext *ctxt)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2012-08-15 22:45:43 +04:00
|
|
|
token = parser_context_pop_token(ctxt);
|
2015-11-26 00:23:30 +03:00
|
|
|
assert(token);
|
2011-06-01 21:14:55 +04:00
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
switch (token->type) {
|
2009-11-11 19:39:23 +03:00
|
|
|
case JSON_STRING:
|
2018-08-23 19:39:53 +03:00
|
|
|
return QOBJECT(parse_string(ctxt, token));
|
2013-05-11 02:46:05 +04:00
|
|
|
case JSON_INTEGER: {
|
2017-06-07 19:35:58 +03:00
|
|
|
/*
|
|
|
|
* Represent JSON_INTEGER as QNUM_I64 if possible, else as
|
2017-06-07 19:36:02 +03:00
|
|
|
* QNUM_U64, else as QNUM_DOUBLE. Note that qemu_strtoi64()
|
|
|
|
* and qemu_strtou64() fail with ERANGE when it's not
|
|
|
|
* possible.
|
2013-05-11 02:46:05 +04:00
|
|
|
*
|
2017-06-07 19:35:58 +03:00
|
|
|
* qnum_get_int() will then work for any signed 64-bit
|
2017-06-07 19:36:02 +03:00
|
|
|
* JSON_INTEGER, qnum_get_uint() for any unsigned 64-bit
|
|
|
|
* integer, and qnum_get_double() both for any JSON_INTEGER
|
|
|
|
* and any JSON_FLOAT (with precision loss for integers beyond
|
|
|
|
* 53 bits)
|
2013-05-11 02:46:05 +04:00
|
|
|
*/
|
2017-06-07 19:36:02 +03:00
|
|
|
int ret;
|
2013-05-11 02:46:05 +04:00
|
|
|
int64_t value;
|
2017-06-07 19:36:02 +03:00
|
|
|
uint64_t uvalue;
|
2013-05-11 02:46:05 +04:00
|
|
|
|
2017-06-07 19:36:02 +03:00
|
|
|
ret = qemu_strtoi64(token->str, NULL, 10, &value);
|
|
|
|
if (!ret) {
|
2017-06-07 19:35:58 +03:00
|
|
|
return QOBJECT(qnum_from_int(value));
|
2013-05-11 02:46:05 +04:00
|
|
|
}
|
2017-06-07 19:36:02 +03:00
|
|
|
assert(ret == -ERANGE);
|
|
|
|
|
|
|
|
if (token->str[0] != '-') {
|
|
|
|
ret = qemu_strtou64(token->str, NULL, 10, &uvalue);
|
|
|
|
if (!ret) {
|
|
|
|
return QOBJECT(qnum_from_uint(uvalue));
|
|
|
|
}
|
|
|
|
assert(ret == -ERANGE);
|
|
|
|
}
|
2013-05-11 02:46:05 +04:00
|
|
|
}
|
2019-07-19 16:14:19 +03:00
|
|
|
/* fall through to JSON_FLOAT */
|
2009-11-11 19:39:23 +03:00
|
|
|
case JSON_FLOAT:
|
2016-01-29 16:48:37 +03:00
|
|
|
/* FIXME dependent on locale; a pervasive issue in QEMU */
|
2018-08-23 19:40:25 +03:00
|
|
|
/* FIXME our lexer matches RFC 8259 in forbidding Inf or NaN,
|
2016-01-29 16:48:37 +03:00
|
|
|
* but those might be useful extensions beyond JSON */
|
2017-06-07 19:35:58 +03:00
|
|
|
return QOBJECT(qnum_from_double(strtod(token->str, NULL)));
|
2009-11-11 19:39:23 +03:00
|
|
|
default:
|
2015-11-26 00:23:30 +03:00
|
|
|
abort();
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
static QObject *parse_value(JSONParserContext *ctxt)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2015-11-26 00:23:32 +03:00
|
|
|
JSONToken *token;
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2015-11-26 00:23:30 +03:00
|
|
|
token = parser_context_peek_token(ctxt);
|
|
|
|
if (token == NULL) {
|
|
|
|
parse_error(ctxt, NULL, "premature EOI");
|
|
|
|
return NULL;
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
|
2015-11-26 00:23:32 +03:00
|
|
|
switch (token->type) {
|
2015-11-26 00:23:30 +03:00
|
|
|
case JSON_LCURLY:
|
2018-08-23 19:40:22 +03:00
|
|
|
return parse_object(ctxt);
|
2015-11-26 00:23:30 +03:00
|
|
|
case JSON_LSQUARE:
|
2018-08-23 19:40:22 +03:00
|
|
|
return parse_array(ctxt);
|
2018-08-23 19:40:04 +03:00
|
|
|
case JSON_INTERP:
|
2018-08-23 19:40:22 +03:00
|
|
|
return parse_interpolation(ctxt);
|
2015-11-26 00:23:30 +03:00
|
|
|
case JSON_INTEGER:
|
|
|
|
case JSON_FLOAT:
|
|
|
|
case JSON_STRING:
|
|
|
|
return parse_literal(ctxt);
|
|
|
|
case JSON_KEYWORD:
|
|
|
|
return parse_keyword(ctxt);
|
|
|
|
default:
|
|
|
|
parse_error(ctxt, token, "expecting value");
|
|
|
|
return NULL;
|
|
|
|
}
|
2009-11-11 19:39:23 +03:00
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:18 +03:00
|
|
|
JSONToken *json_token(JSONTokenType type, int x, int y, GString *tokstr)
|
|
|
|
{
|
|
|
|
JSONToken *token = g_malloc(sizeof(JSONToken) + tokstr->len + 1);
|
|
|
|
|
|
|
|
token->type = type;
|
|
|
|
memcpy(token->str, tokstr->str, tokstr->len);
|
|
|
|
token->str[tokstr->len] = 0;
|
|
|
|
token->x = x;
|
|
|
|
token->y = y;
|
|
|
|
return token;
|
|
|
|
}
|
|
|
|
|
2018-08-23 19:40:01 +03:00
|
|
|
QObject *json_parser_parse(GQueue *tokens, va_list *ap, Error **errp)
|
2009-11-11 19:39:23 +03:00
|
|
|
{
|
2018-08-23 19:40:22 +03:00
|
|
|
JSONParserContext ctxt = { .buf = tokens, .ap = ap };
|
2009-11-11 19:39:23 +03:00
|
|
|
QObject *result;
|
|
|
|
|
2018-08-23 19:40:22 +03:00
|
|
|
result = parse_value(&ctxt);
|
2018-08-23 19:40:13 +03:00
|
|
|
assert(ctxt.err || g_queue_is_empty(ctxt.buf));
|
2012-08-15 22:45:43 +04:00
|
|
|
|
2018-08-23 19:39:59 +03:00
|
|
|
error_propagate(errp, ctxt.err);
|
2009-11-11 19:39:23 +03:00
|
|
|
|
2018-08-23 19:39:59 +03:00
|
|
|
while (!g_queue_is_empty(ctxt.buf)) {
|
|
|
|
parser_context_pop_token(&ctxt);
|
|
|
|
}
|
|
|
|
g_free(ctxt.current);
|
2011-06-01 21:14:50 +04:00
|
|
|
|
2009-11-11 19:39:23 +03:00
|
|
|
return result;
|
|
|
|
}
|