xref: /aosp_15_r20/external/cronet/third_party/libxml/src/tree.c (revision 6777b5387eb2ff775bb5750e3f5d96f37fb7352b)
1 /*
2  * tree.c : implementation of access function for an XML tree.
3  *
4  * References:
5  *   XHTML 1.0 W3C REC: http://www.w3.org/TR/2002/REC-xhtml1-20020801/
6  *
7  * See Copyright for the status of this software.
8  *
9  * [email protected]
10  *
11  */
12 
13 /* To avoid EBCDIC trouble when parsing on zOS */
14 #if defined(__MVS__)
15 #pragma convert("ISO8859-1")
16 #endif
17 
18 #define IN_LIBXML
19 #include "libxml.h"
20 
21 #include <string.h> /* for memset() only ! */
22 #include <stddef.h>
23 #include <limits.h>
24 #include <ctype.h>
25 #include <stdlib.h>
26 
27 #ifdef LIBXML_ZLIB_ENABLED
28 #include <zlib.h>
29 #endif
30 
31 #include <libxml/tree.h>
32 #include <libxml/xmlmemory.h>
33 #include <libxml/parser.h>
34 #include <libxml/uri.h>
35 #include <libxml/entities.h>
36 #include <libxml/xmlerror.h>
37 #include <libxml/parserInternals.h>
38 #ifdef LIBXML_HTML_ENABLED
39 #include <libxml/HTMLtree.h>
40 #endif
41 #ifdef LIBXML_DEBUG_ENABLED
42 #include <libxml/debugXML.h>
43 #endif
44 
45 #include "private/buf.h"
46 #include "private/entities.h"
47 #include "private/error.h"
48 #include "private/tree.h"
49 
50 int __xmlRegisterCallbacks = 0;
51 
52 /************************************************************************
53  *									*
54  *		Forward declarations					*
55  *									*
56  ************************************************************************/
57 
58 static xmlNsPtr
59 xmlNewReconciledNs(xmlDocPtr doc, xmlNodePtr tree, xmlNsPtr ns);
60 
61 static xmlChar* xmlGetPropNodeValueInternal(const xmlAttr *prop);
62 
63 /************************************************************************
64  *									*
65  *		A few static variables and macros			*
66  *									*
67  ************************************************************************/
68 /* #undef xmlStringText */
69 const xmlChar xmlStringText[] = { 't', 'e', 'x', 't', 0 };
70 /* #undef xmlStringTextNoenc */
71 const xmlChar xmlStringTextNoenc[] =
72               { 't', 'e', 'x', 't', 'n', 'o', 'e', 'n', 'c', 0 };
73 /* #undef xmlStringComment */
74 const xmlChar xmlStringComment[] = { 'c', 'o', 'm', 'm', 'e', 'n', 't', 0 };
75 
76 static int xmlCompressMode = 0;
77 
78 #define UPDATE_LAST_CHILD_AND_PARENT(n) if ((n) != NULL) {		\
79     xmlNodePtr ulccur = (n)->children;					\
80     if (ulccur == NULL) {						\
81         (n)->last = NULL;						\
82     } else {								\
83         while (ulccur->next != NULL) {					\
84 		ulccur->parent = (n);					\
85 		ulccur = ulccur->next;					\
86 	}								\
87 	ulccur->parent = (n);						\
88 	(n)->last = ulccur;						\
89 }}
90 
91 #define IS_STR_XML(str) ((str != NULL) && (str[0] == 'x') && \
92   (str[1] == 'm') && (str[2] == 'l') && (str[3] == 0))
93 
94 /************************************************************************
95  *									*
96  *		Functions to move to entities.c once the		*
97  *		API freeze is smoothen and they can be made public.	*
98  *									*
99  ************************************************************************/
100 #include <libxml/hash.h>
101 
102 #ifdef LIBXML_TREE_ENABLED
103 /**
104  * xmlGetEntityFromDtd:
105  * @dtd:  A pointer to the DTD to search
106  * @name:  The entity name
107  *
108  * Do an entity lookup in the DTD entity hash table and
109  * return the corresponding entity, if found.
110  *
111  * Returns A pointer to the entity structure or NULL if not found.
112  */
113 static xmlEntityPtr
xmlGetEntityFromDtd(const xmlDtd * dtd,const xmlChar * name)114 xmlGetEntityFromDtd(const xmlDtd *dtd, const xmlChar *name) {
115     xmlEntitiesTablePtr table;
116 
117     if((dtd != NULL) && (dtd->entities != NULL)) {
118 	table = (xmlEntitiesTablePtr) dtd->entities;
119 	return((xmlEntityPtr) xmlHashLookup(table, name));
120 	/* return(xmlGetEntityFromTable(table, name)); */
121     }
122     return(NULL);
123 }
124 /**
125  * xmlGetParameterEntityFromDtd:
126  * @dtd:  A pointer to the DTD to search
127  * @name:  The entity name
128  *
129  * Do an entity lookup in the DTD parameter entity hash table and
130  * return the corresponding entity, if found.
131  *
132  * Returns A pointer to the entity structure or NULL if not found.
133  */
134 static xmlEntityPtr
xmlGetParameterEntityFromDtd(const xmlDtd * dtd,const xmlChar * name)135 xmlGetParameterEntityFromDtd(const xmlDtd *dtd, const xmlChar *name) {
136     xmlEntitiesTablePtr table;
137 
138     if ((dtd != NULL) && (dtd->pentities != NULL)) {
139 	table = (xmlEntitiesTablePtr) dtd->pentities;
140 	return((xmlEntityPtr) xmlHashLookup(table, name));
141 	/* return(xmlGetEntityFromTable(table, name)); */
142     }
143     return(NULL);
144 }
145 #endif /* LIBXML_TREE_ENABLED */
146 
147 /************************************************************************
148  *									*
149  *			QName handling helper				*
150  *									*
151  ************************************************************************/
152 
153 /**
154  * xmlBuildQName:
155  * @ncname:  the Name
156  * @prefix:  the prefix
157  * @memory:  preallocated memory
158  * @len:  preallocated memory length
159  *
160  * Builds the QName @prefix:@ncname in @memory if there is enough space
161  * and prefix is not NULL nor empty, otherwise allocate a new string.
162  * If prefix is NULL or empty it returns ncname.
163  *
164  * Returns the new string which must be freed by the caller if different from
165  *         @memory and @ncname or NULL in case of error
166  */
167 xmlChar *
xmlBuildQName(const xmlChar * ncname,const xmlChar * prefix,xmlChar * memory,int len)168 xmlBuildQName(const xmlChar *ncname, const xmlChar *prefix,
169 	      xmlChar *memory, int len) {
170     int lenn, lenp;
171     xmlChar *ret;
172 
173     if (ncname == NULL) return(NULL);
174     if (prefix == NULL) return((xmlChar *) ncname);
175 
176     lenn = strlen((char *) ncname);
177     lenp = strlen((char *) prefix);
178 
179     if ((memory == NULL) || (len < lenn + lenp + 2)) {
180 	ret = (xmlChar *) xmlMallocAtomic(lenn + lenp + 2);
181 	if (ret == NULL)
182 	    return(NULL);
183     } else {
184 	ret = memory;
185     }
186     memcpy(&ret[0], prefix, lenp);
187     ret[lenp] = ':';
188     memcpy(&ret[lenp + 1], ncname, lenn);
189     ret[lenn + lenp + 1] = 0;
190     return(ret);
191 }
192 
193 /**
194  * xmlSplitQName2:
195  * @name:  the full QName
196  * @prefix:  a xmlChar **
197  *
198  * DEPRECATED: This function doesn't report malloc failures.
199  *
200  * parse an XML qualified name string
201  *
202  * [NS 5] QName ::= (Prefix ':')? LocalPart
203  *
204  * [NS 6] Prefix ::= NCName
205  *
206  * [NS 7] LocalPart ::= NCName
207  *
208  * Returns NULL if the name doesn't have a prefix. Otherwise, returns the
209  * local part, and prefix is updated to get the Prefix. Both the return value
210  * and the prefix must be freed by the caller.
211  */
212 xmlChar *
xmlSplitQName2(const xmlChar * name,xmlChar ** prefix)213 xmlSplitQName2(const xmlChar *name, xmlChar **prefix) {
214     int len = 0;
215     xmlChar *ret = NULL;
216 
217     if (prefix == NULL) return(NULL);
218     *prefix = NULL;
219     if (name == NULL) return(NULL);
220 
221 #ifndef XML_XML_NAMESPACE
222     /* xml: prefix is not really a namespace */
223     if ((name[0] == 'x') && (name[1] == 'm') &&
224         (name[2] == 'l') && (name[3] == ':'))
225 	return(NULL);
226 #endif
227 
228     /* nasty but valid */
229     if (name[0] == ':')
230 	return(NULL);
231 
232     /*
233      * we are not trying to validate but just to cut, and yes it will
234      * work even if this is as set of UTF-8 encoded chars
235      */
236     while ((name[len] != 0) && (name[len] != ':'))
237 	len++;
238 
239     if (name[len] == 0)
240 	return(NULL);
241 
242     *prefix = xmlStrndup(name, len);
243     if (*prefix == NULL)
244 	return(NULL);
245     ret = xmlStrdup(&name[len + 1]);
246     if (ret == NULL) {
247 	if (*prefix != NULL) {
248 	    xmlFree(*prefix);
249 	    *prefix = NULL;
250 	}
251 	return(NULL);
252     }
253 
254     return(ret);
255 }
256 
257 /**
258  * xmlSplitQName3:
259  * @name:  the full QName
260  * @len: an int *
261  *
262  * parse an XML qualified name string,i
263  *
264  * returns NULL if it is not a Qualified Name, otherwise, update len
265  *         with the length in byte of the prefix and return a pointer
266  *         to the start of the name without the prefix
267  */
268 
269 const xmlChar *
xmlSplitQName3(const xmlChar * name,int * len)270 xmlSplitQName3(const xmlChar *name, int *len) {
271     int l = 0;
272 
273     if (name == NULL) return(NULL);
274     if (len == NULL) return(NULL);
275 
276     /* nasty but valid */
277     if (name[0] == ':')
278 	return(NULL);
279 
280     /*
281      * we are not trying to validate but just to cut, and yes it will
282      * work even if this is as set of UTF-8 encoded chars
283      */
284     while ((name[l] != 0) && (name[l] != ':'))
285 	l++;
286 
287     if (name[l] == 0)
288 	return(NULL);
289 
290     *len = l;
291 
292     return(&name[l+1]);
293 }
294 
295 const xmlChar *
xmlSplitQName4(const xmlChar * name,xmlChar ** prefixPtr)296 xmlSplitQName4(const xmlChar *name, xmlChar **prefixPtr) {
297     xmlChar *prefix;
298     int l = 0;
299 
300     if ((name == NULL) || (prefixPtr == NULL))
301         return(NULL);
302 
303     *prefixPtr = NULL;
304 
305     /* nasty but valid */
306     if (name[0] == ':')
307 	return(name);
308 
309     /*
310      * we are not trying to validate but just to cut, and yes it will
311      * work even if this is as set of UTF-8 encoded chars
312      */
313     while ((name[l] != 0) && (name[l] != ':'))
314 	l++;
315 
316     /*
317      * TODO: What about names with multiple colons?
318      */
319     if ((name[l] == 0) || (name[l+1] == 0))
320 	return(name);
321 
322     prefix = xmlStrndup(name, l);
323     if (prefix == NULL)
324         return(NULL);
325 
326     *prefixPtr = prefix;
327     return(&name[l+1]);
328 }
329 
330 /************************************************************************
331  *									*
332  *		Check Name, NCName and QName strings			*
333  *									*
334  ************************************************************************/
335 
336 #define CUR_SCHAR(s, l) xmlStringCurrentChar(NULL, s, &l)
337 
338 /**
339  * xmlValidateNCName:
340  * @value: the value to check
341  * @space: allow spaces in front and end of the string
342  *
343  * Check that a value conforms to the lexical space of NCName
344  *
345  * Returns 0 if this validates, a positive error code number otherwise
346  *         and -1 in case of internal or API error.
347  */
348 int
xmlValidateNCName(const xmlChar * value,int space)349 xmlValidateNCName(const xmlChar *value, int space) {
350     const xmlChar *cur = value;
351     int c,l;
352 
353     if (value == NULL)
354         return(-1);
355 
356     /*
357      * First quick algorithm for ASCII range
358      */
359     if (space)
360 	while (IS_BLANK_CH(*cur)) cur++;
361     if (((*cur >= 'a') && (*cur <= 'z')) || ((*cur >= 'A') && (*cur <= 'Z')) ||
362 	(*cur == '_'))
363 	cur++;
364     else
365 	goto try_complex;
366     while (((*cur >= 'a') && (*cur <= 'z')) ||
367 	   ((*cur >= 'A') && (*cur <= 'Z')) ||
368 	   ((*cur >= '0') && (*cur <= '9')) ||
369 	   (*cur == '_') || (*cur == '-') || (*cur == '.'))
370 	cur++;
371     if (space)
372 	while (IS_BLANK_CH(*cur)) cur++;
373     if (*cur == 0)
374 	return(0);
375 
376 try_complex:
377     /*
378      * Second check for chars outside the ASCII range
379      */
380     cur = value;
381     c = CUR_SCHAR(cur, l);
382     if (space) {
383 	while (IS_BLANK(c)) {
384 	    cur += l;
385 	    c = CUR_SCHAR(cur, l);
386 	}
387     }
388     if ((!IS_LETTER(c)) && (c != '_'))
389 	return(1);
390     cur += l;
391     c = CUR_SCHAR(cur, l);
392     while (IS_LETTER(c) || IS_DIGIT(c) || (c == '.') ||
393 	   (c == '-') || (c == '_') || IS_COMBINING(c) ||
394 	   IS_EXTENDER(c)) {
395 	cur += l;
396 	c = CUR_SCHAR(cur, l);
397     }
398     if (space) {
399 	while (IS_BLANK(c)) {
400 	    cur += l;
401 	    c = CUR_SCHAR(cur, l);
402 	}
403     }
404     if (c != 0)
405 	return(1);
406 
407     return(0);
408 }
409 
410 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
411 /**
412  * xmlValidateQName:
413  * @value: the value to check
414  * @space: allow spaces in front and end of the string
415  *
416  * Check that a value conforms to the lexical space of QName
417  *
418  * Returns 0 if this validates, a positive error code number otherwise
419  *         and -1 in case of internal or API error.
420  */
421 int
xmlValidateQName(const xmlChar * value,int space)422 xmlValidateQName(const xmlChar *value, int space) {
423     const xmlChar *cur = value;
424     int c,l;
425 
426     if (value == NULL)
427         return(-1);
428     /*
429      * First quick algorithm for ASCII range
430      */
431     if (space)
432 	while (IS_BLANK_CH(*cur)) cur++;
433     if (((*cur >= 'a') && (*cur <= 'z')) || ((*cur >= 'A') && (*cur <= 'Z')) ||
434 	(*cur == '_'))
435 	cur++;
436     else
437 	goto try_complex;
438     while (((*cur >= 'a') && (*cur <= 'z')) ||
439 	   ((*cur >= 'A') && (*cur <= 'Z')) ||
440 	   ((*cur >= '0') && (*cur <= '9')) ||
441 	   (*cur == '_') || (*cur == '-') || (*cur == '.'))
442 	cur++;
443     if (*cur == ':') {
444 	cur++;
445 	if (((*cur >= 'a') && (*cur <= 'z')) ||
446 	    ((*cur >= 'A') && (*cur <= 'Z')) ||
447 	    (*cur == '_'))
448 	    cur++;
449 	else
450 	    goto try_complex;
451 	while (((*cur >= 'a') && (*cur <= 'z')) ||
452 	       ((*cur >= 'A') && (*cur <= 'Z')) ||
453 	       ((*cur >= '0') && (*cur <= '9')) ||
454 	       (*cur == '_') || (*cur == '-') || (*cur == '.'))
455 	    cur++;
456     }
457     if (space)
458 	while (IS_BLANK_CH(*cur)) cur++;
459     if (*cur == 0)
460 	return(0);
461 
462 try_complex:
463     /*
464      * Second check for chars outside the ASCII range
465      */
466     cur = value;
467     c = CUR_SCHAR(cur, l);
468     if (space) {
469 	while (IS_BLANK(c)) {
470 	    cur += l;
471 	    c = CUR_SCHAR(cur, l);
472 	}
473     }
474     if ((!IS_LETTER(c)) && (c != '_'))
475 	return(1);
476     cur += l;
477     c = CUR_SCHAR(cur, l);
478     while (IS_LETTER(c) || IS_DIGIT(c) || (c == '.') ||
479 	   (c == '-') || (c == '_') || IS_COMBINING(c) ||
480 	   IS_EXTENDER(c)) {
481 	cur += l;
482 	c = CUR_SCHAR(cur, l);
483     }
484     if (c == ':') {
485 	cur += l;
486 	c = CUR_SCHAR(cur, l);
487 	if ((!IS_LETTER(c)) && (c != '_'))
488 	    return(1);
489 	cur += l;
490 	c = CUR_SCHAR(cur, l);
491 	while (IS_LETTER(c) || IS_DIGIT(c) || (c == '.') ||
492 	       (c == '-') || (c == '_') || IS_COMBINING(c) ||
493 	       IS_EXTENDER(c)) {
494 	    cur += l;
495 	    c = CUR_SCHAR(cur, l);
496 	}
497     }
498     if (space) {
499 	while (IS_BLANK(c)) {
500 	    cur += l;
501 	    c = CUR_SCHAR(cur, l);
502 	}
503     }
504     if (c != 0)
505 	return(1);
506     return(0);
507 }
508 
509 /**
510  * xmlValidateName:
511  * @value: the value to check
512  * @space: allow spaces in front and end of the string
513  *
514  * Check that a value conforms to the lexical space of Name
515  *
516  * Returns 0 if this validates, a positive error code number otherwise
517  *         and -1 in case of internal or API error.
518  */
519 int
xmlValidateName(const xmlChar * value,int space)520 xmlValidateName(const xmlChar *value, int space) {
521     const xmlChar *cur = value;
522     int c,l;
523 
524     if (value == NULL)
525         return(-1);
526     /*
527      * First quick algorithm for ASCII range
528      */
529     if (space)
530 	while (IS_BLANK_CH(*cur)) cur++;
531     if (((*cur >= 'a') && (*cur <= 'z')) || ((*cur >= 'A') && (*cur <= 'Z')) ||
532 	(*cur == '_') || (*cur == ':'))
533 	cur++;
534     else
535 	goto try_complex;
536     while (((*cur >= 'a') && (*cur <= 'z')) ||
537 	   ((*cur >= 'A') && (*cur <= 'Z')) ||
538 	   ((*cur >= '0') && (*cur <= '9')) ||
539 	   (*cur == '_') || (*cur == '-') || (*cur == '.') || (*cur == ':'))
540 	cur++;
541     if (space)
542 	while (IS_BLANK_CH(*cur)) cur++;
543     if (*cur == 0)
544 	return(0);
545 
546 try_complex:
547     /*
548      * Second check for chars outside the ASCII range
549      */
550     cur = value;
551     c = CUR_SCHAR(cur, l);
552     if (space) {
553 	while (IS_BLANK(c)) {
554 	    cur += l;
555 	    c = CUR_SCHAR(cur, l);
556 	}
557     }
558     if ((!IS_LETTER(c)) && (c != '_') && (c != ':'))
559 	return(1);
560     cur += l;
561     c = CUR_SCHAR(cur, l);
562     while (IS_LETTER(c) || IS_DIGIT(c) || (c == '.') || (c == ':') ||
563 	   (c == '-') || (c == '_') || IS_COMBINING(c) || IS_EXTENDER(c)) {
564 	cur += l;
565 	c = CUR_SCHAR(cur, l);
566     }
567     if (space) {
568 	while (IS_BLANK(c)) {
569 	    cur += l;
570 	    c = CUR_SCHAR(cur, l);
571 	}
572     }
573     if (c != 0)
574 	return(1);
575     return(0);
576 }
577 
578 /**
579  * xmlValidateNMToken:
580  * @value: the value to check
581  * @space: allow spaces in front and end of the string
582  *
583  * Check that a value conforms to the lexical space of NMToken
584  *
585  * Returns 0 if this validates, a positive error code number otherwise
586  *         and -1 in case of internal or API error.
587  */
588 int
xmlValidateNMToken(const xmlChar * value,int space)589 xmlValidateNMToken(const xmlChar *value, int space) {
590     const xmlChar *cur = value;
591     int c,l;
592 
593     if (value == NULL)
594         return(-1);
595     /*
596      * First quick algorithm for ASCII range
597      */
598     if (space)
599 	while (IS_BLANK_CH(*cur)) cur++;
600     if (((*cur >= 'a') && (*cur <= 'z')) ||
601         ((*cur >= 'A') && (*cur <= 'Z')) ||
602         ((*cur >= '0') && (*cur <= '9')) ||
603         (*cur == '_') || (*cur == '-') || (*cur == '.') || (*cur == ':'))
604 	cur++;
605     else
606 	goto try_complex;
607     while (((*cur >= 'a') && (*cur <= 'z')) ||
608 	   ((*cur >= 'A') && (*cur <= 'Z')) ||
609 	   ((*cur >= '0') && (*cur <= '9')) ||
610 	   (*cur == '_') || (*cur == '-') || (*cur == '.') || (*cur == ':'))
611 	cur++;
612     if (space)
613 	while (IS_BLANK_CH(*cur)) cur++;
614     if (*cur == 0)
615 	return(0);
616 
617 try_complex:
618     /*
619      * Second check for chars outside the ASCII range
620      */
621     cur = value;
622     c = CUR_SCHAR(cur, l);
623     if (space) {
624 	while (IS_BLANK(c)) {
625 	    cur += l;
626 	    c = CUR_SCHAR(cur, l);
627 	}
628     }
629     if (!(IS_LETTER(c) || IS_DIGIT(c) || (c == '.') || (c == ':') ||
630         (c == '-') || (c == '_') || IS_COMBINING(c) || IS_EXTENDER(c)))
631 	return(1);
632     cur += l;
633     c = CUR_SCHAR(cur, l);
634     while (IS_LETTER(c) || IS_DIGIT(c) || (c == '.') || (c == ':') ||
635 	   (c == '-') || (c == '_') || IS_COMBINING(c) || IS_EXTENDER(c)) {
636 	cur += l;
637 	c = CUR_SCHAR(cur, l);
638     }
639     if (space) {
640 	while (IS_BLANK(c)) {
641 	    cur += l;
642 	    c = CUR_SCHAR(cur, l);
643 	}
644     }
645     if (c != 0)
646 	return(1);
647     return(0);
648 }
649 #endif /* LIBXML_TREE_ENABLED */
650 
651 /************************************************************************
652  *									*
653  *		Allocation and deallocation of basic structures		*
654  *									*
655  ************************************************************************/
656 
657 /**
658  * xmlSetBufferAllocationScheme:
659  * @scheme:  allocation method to use
660  *
661  * Set the buffer allocation method.  Types are
662  * XML_BUFFER_ALLOC_EXACT - use exact sizes, keeps memory usage down
663  * XML_BUFFER_ALLOC_DOUBLEIT - double buffer when extra needed,
664  *                             improves performance
665  */
666 void
xmlSetBufferAllocationScheme(xmlBufferAllocationScheme scheme)667 xmlSetBufferAllocationScheme(xmlBufferAllocationScheme scheme) {
668     if ((scheme == XML_BUFFER_ALLOC_EXACT) ||
669         (scheme == XML_BUFFER_ALLOC_DOUBLEIT) ||
670         (scheme == XML_BUFFER_ALLOC_HYBRID))
671 	xmlBufferAllocScheme = scheme;
672 }
673 
674 /**
675  * xmlGetBufferAllocationScheme:
676  *
677  * Types are
678  * XML_BUFFER_ALLOC_EXACT - use exact sizes, keeps memory usage down
679  * XML_BUFFER_ALLOC_DOUBLEIT - double buffer when extra needed,
680  *                             improves performance
681  * XML_BUFFER_ALLOC_HYBRID - use exact sizes on small strings to keep memory usage tight
682  *                            in normal usage, and doubleit on large strings to avoid
683  *                            pathological performance.
684  *
685  * Returns the current allocation scheme
686  */
687 xmlBufferAllocationScheme
xmlGetBufferAllocationScheme(void)688 xmlGetBufferAllocationScheme(void) {
689     return(xmlBufferAllocScheme);
690 }
691 
692 /**
693  * xmlNewNs:
694  * @node:  the element carrying the namespace
695  * @href:  the URI associated
696  * @prefix:  the prefix for the namespace
697  *
698  * Creation of a new Namespace. This function will refuse to create
699  * a namespace with a similar prefix than an existing one present on this
700  * node.
701  * Note that for a default namespace, @prefix should be NULL.
702  *
703  * We use href==NULL in the case of an element creation where the namespace
704  * was not defined.
705  *
706  * Returns a new namespace pointer or NULL
707  */
708 xmlNsPtr
xmlNewNs(xmlNodePtr node,const xmlChar * href,const xmlChar * prefix)709 xmlNewNs(xmlNodePtr node, const xmlChar *href, const xmlChar *prefix) {
710     xmlNsPtr cur;
711 
712     if ((node != NULL) && (node->type != XML_ELEMENT_NODE))
713 	return(NULL);
714 
715     /*
716      * Allocate a new Namespace and fill the fields.
717      */
718     cur = (xmlNsPtr) xmlMalloc(sizeof(xmlNs));
719     if (cur == NULL)
720 	return(NULL);
721     memset(cur, 0, sizeof(xmlNs));
722     cur->type = XML_LOCAL_NAMESPACE;
723 
724     if (href != NULL) {
725 	cur->href = xmlStrdup(href);
726         if (cur->href == NULL)
727             goto error;
728     }
729     if (prefix != NULL) {
730 	cur->prefix = xmlStrdup(prefix);
731         if (cur->prefix == NULL)
732             goto error;
733     }
734 
735     /*
736      * Add it at the end to preserve parsing order ...
737      * and checks for existing use of the prefix
738      */
739     if (node != NULL) {
740 	if (node->nsDef == NULL) {
741 	    node->nsDef = cur;
742 	} else {
743 	    xmlNsPtr prev = node->nsDef;
744 
745 	    if (((prev->prefix == NULL) && (cur->prefix == NULL)) ||
746 		(xmlStrEqual(prev->prefix, cur->prefix)))
747                 goto error;
748 	    while (prev->next != NULL) {
749 	        prev = prev->next;
750 		if (((prev->prefix == NULL) && (cur->prefix == NULL)) ||
751 		    (xmlStrEqual(prev->prefix, cur->prefix)))
752                     goto error;
753 	    }
754 	    prev->next = cur;
755 	}
756     }
757     return(cur);
758 
759 error:
760     xmlFreeNs(cur);
761     return(NULL);
762 }
763 
764 /**
765  * xmlSetNs:
766  * @node:  a node in the document
767  * @ns:  a namespace pointer
768  *
769  * Associate a namespace to a node, a posteriori.
770  */
771 void
xmlSetNs(xmlNodePtr node,xmlNsPtr ns)772 xmlSetNs(xmlNodePtr node, xmlNsPtr ns) {
773     if (node == NULL) {
774 	return;
775     }
776     if ((node->type == XML_ELEMENT_NODE) ||
777         (node->type == XML_ATTRIBUTE_NODE))
778 	node->ns = ns;
779 }
780 
781 /**
782  * xmlFreeNs:
783  * @cur:  the namespace pointer
784  *
785  * Free up the structures associated to a namespace
786  */
787 void
xmlFreeNs(xmlNsPtr cur)788 xmlFreeNs(xmlNsPtr cur) {
789     if (cur == NULL) {
790 	return;
791     }
792     if (cur->href != NULL) xmlFree((char *) cur->href);
793     if (cur->prefix != NULL) xmlFree((char *) cur->prefix);
794     xmlFree(cur);
795 }
796 
797 /**
798  * xmlFreeNsList:
799  * @cur:  the first namespace pointer
800  *
801  * Free up all the structures associated to the chained namespaces.
802  */
803 void
xmlFreeNsList(xmlNsPtr cur)804 xmlFreeNsList(xmlNsPtr cur) {
805     xmlNsPtr next;
806     if (cur == NULL) {
807 	return;
808     }
809     while (cur != NULL) {
810         next = cur->next;
811         xmlFreeNs(cur);
812 	cur = next;
813     }
814 }
815 
816 /**
817  * xmlNewDtd:
818  * @doc:  the document pointer
819  * @name:  the DTD name
820  * @ExternalID:  the external ID
821  * @SystemID:  the system ID
822  *
823  * Creation of a new DTD for the external subset. To create an
824  * internal subset, use xmlCreateIntSubset().
825  *
826  * Returns a pointer to the new DTD structure
827  */
828 xmlDtdPtr
xmlNewDtd(xmlDocPtr doc,const xmlChar * name,const xmlChar * ExternalID,const xmlChar * SystemID)829 xmlNewDtd(xmlDocPtr doc, const xmlChar *name,
830                     const xmlChar *ExternalID, const xmlChar *SystemID) {
831     xmlDtdPtr cur;
832 
833     if ((doc != NULL) && (doc->extSubset != NULL)) {
834 	return(NULL);
835     }
836 
837     /*
838      * Allocate a new DTD and fill the fields.
839      */
840     cur = (xmlDtdPtr) xmlMalloc(sizeof(xmlDtd));
841     if (cur == NULL)
842 	return(NULL);
843     memset(cur, 0 , sizeof(xmlDtd));
844     cur->type = XML_DTD_NODE;
845 
846     if (name != NULL) {
847 	cur->name = xmlStrdup(name);
848         if (cur->name == NULL)
849             goto error;
850     }
851     if (ExternalID != NULL) {
852 	cur->ExternalID = xmlStrdup(ExternalID);
853         if (cur->ExternalID == NULL)
854             goto error;
855     }
856     if (SystemID != NULL) {
857 	cur->SystemID = xmlStrdup(SystemID);
858         if (cur->SystemID == NULL)
859             goto error;
860     }
861     if (doc != NULL)
862 	doc->extSubset = cur;
863     cur->doc = doc;
864 
865     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
866 	xmlRegisterNodeDefaultValue((xmlNodePtr)cur);
867     return(cur);
868 
869 error:
870     xmlFreeDtd(cur);
871     return(NULL);
872 }
873 
874 /**
875  * xmlGetIntSubset:
876  * @doc:  the document pointer
877  *
878  * Get the internal subset of a document
879  * Returns a pointer to the DTD structure or NULL if not found
880  */
881 
882 xmlDtdPtr
xmlGetIntSubset(const xmlDoc * doc)883 xmlGetIntSubset(const xmlDoc *doc) {
884     xmlNodePtr cur;
885 
886     if (doc == NULL)
887 	return(NULL);
888     cur = doc->children;
889     while (cur != NULL) {
890 	if (cur->type == XML_DTD_NODE)
891 	    return((xmlDtdPtr) cur);
892 	cur = cur->next;
893     }
894     return((xmlDtdPtr) doc->intSubset);
895 }
896 
897 /**
898  * xmlCreateIntSubset:
899  * @doc:  the document pointer
900  * @name:  the DTD name
901  * @ExternalID:  the external (PUBLIC) ID
902  * @SystemID:  the system ID
903  *
904  * Create the internal subset of a document
905  * Returns a pointer to the new DTD structure
906  */
907 xmlDtdPtr
xmlCreateIntSubset(xmlDocPtr doc,const xmlChar * name,const xmlChar * ExternalID,const xmlChar * SystemID)908 xmlCreateIntSubset(xmlDocPtr doc, const xmlChar *name,
909                    const xmlChar *ExternalID, const xmlChar *SystemID) {
910     xmlDtdPtr cur;
911 
912     if (doc != NULL) {
913         cur = xmlGetIntSubset(doc);
914         if (cur != NULL)
915             return(cur);
916     }
917 
918     /*
919      * Allocate a new DTD and fill the fields.
920      */
921     cur = (xmlDtdPtr) xmlMalloc(sizeof(xmlDtd));
922     if (cur == NULL)
923 	return(NULL);
924     memset(cur, 0, sizeof(xmlDtd));
925     cur->type = XML_DTD_NODE;
926 
927     if (name != NULL) {
928 	cur->name = xmlStrdup(name);
929 	if (cur->name == NULL)
930             goto error;
931     }
932     if (ExternalID != NULL) {
933 	cur->ExternalID = xmlStrdup(ExternalID);
934 	if (cur->ExternalID  == NULL)
935             goto error;
936     }
937     if (SystemID != NULL) {
938 	cur->SystemID = xmlStrdup(SystemID);
939 	if (cur->SystemID == NULL)
940             goto error;
941     }
942     if (doc != NULL) {
943 	doc->intSubset = cur;
944 	cur->parent = doc;
945 	cur->doc = doc;
946 	if (doc->children == NULL) {
947 	    doc->children = (xmlNodePtr) cur;
948 	    doc->last = (xmlNodePtr) cur;
949 	} else {
950 	    if (doc->type == XML_HTML_DOCUMENT_NODE) {
951 		xmlNodePtr prev;
952 
953 		prev = doc->children;
954 		prev->prev = (xmlNodePtr) cur;
955 		cur->next = prev;
956 		doc->children = (xmlNodePtr) cur;
957 	    } else {
958 		xmlNodePtr next;
959 
960 		next = doc->children;
961 		while ((next != NULL) && (next->type != XML_ELEMENT_NODE))
962 		    next = next->next;
963 		if (next == NULL) {
964 		    cur->prev = doc->last;
965 		    cur->prev->next = (xmlNodePtr) cur;
966 		    cur->next = NULL;
967 		    doc->last = (xmlNodePtr) cur;
968 		} else {
969 		    cur->next = next;
970 		    cur->prev = next->prev;
971 		    if (cur->prev == NULL)
972 			doc->children = (xmlNodePtr) cur;
973 		    else
974 			cur->prev->next = (xmlNodePtr) cur;
975 		    next->prev = (xmlNodePtr) cur;
976 		}
977 	    }
978 	}
979     }
980 
981     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
982 	xmlRegisterNodeDefaultValue((xmlNodePtr)cur);
983     return(cur);
984 
985 error:
986     xmlFreeDtd(cur);
987     return(NULL);
988 }
989 
990 /**
991  * DICT_FREE:
992  * @str:  a string
993  *
994  * Free a string if it is not owned by the "dict" dictionary in the
995  * current scope
996  */
997 #define DICT_FREE(str)						\
998 	if ((str) && ((!dict) ||				\
999 	    (xmlDictOwns(dict, (const xmlChar *)(str)) == 0)))	\
1000 	    xmlFree((char *)(str));
1001 
1002 
1003 /**
1004  * DICT_COPY:
1005  * @str:  a string
1006  *
1007  * Copy a string using a "dict" dictionary in the current scope,
1008  * if available.
1009  */
1010 #define DICT_COPY(str, cpy) \
1011     if (str) { \
1012 	if (dict) { \
1013 	    if (xmlDictOwns(dict, (const xmlChar *)(str))) \
1014 		cpy = (xmlChar *) (str); \
1015 	    else \
1016 		cpy = (xmlChar *) xmlDictLookup((dict), (const xmlChar *)(str), -1); \
1017 	} else \
1018 	    cpy = xmlStrdup((const xmlChar *)(str)); }
1019 
1020 /**
1021  * DICT_CONST_COPY:
1022  * @str:  a string
1023  *
1024  * Copy a string using a "dict" dictionary in the current scope,
1025  * if available.
1026  */
1027 #define DICT_CONST_COPY(str, cpy) \
1028     if (str) { \
1029 	if (dict) { \
1030 	    if (xmlDictOwns(dict, (const xmlChar *)(str))) \
1031 		cpy = (const xmlChar *) (str); \
1032 	    else \
1033 		cpy = xmlDictLookup((dict), (const xmlChar *)(str), -1); \
1034 	} else \
1035 	    cpy = (const xmlChar *) xmlStrdup((const xmlChar *)(str)); }
1036 
1037 
1038 /**
1039  * xmlFreeDtd:
1040  * @cur:  the DTD structure to free up
1041  *
1042  * Free a DTD structure.
1043  */
1044 void
xmlFreeDtd(xmlDtdPtr cur)1045 xmlFreeDtd(xmlDtdPtr cur) {
1046     xmlDictPtr dict = NULL;
1047 
1048     if (cur == NULL) {
1049 	return;
1050     }
1051     if (cur->doc != NULL) dict = cur->doc->dict;
1052 
1053     if ((__xmlRegisterCallbacks) && (xmlDeregisterNodeDefaultValue))
1054 	xmlDeregisterNodeDefaultValue((xmlNodePtr)cur);
1055 
1056     if (cur->children != NULL) {
1057 	xmlNodePtr next, c = cur->children;
1058 
1059 	/*
1060 	 * Cleanup all nodes which are not part of the specific lists
1061 	 * of notations, elements, attributes and entities.
1062 	 */
1063         while (c != NULL) {
1064 	    next = c->next;
1065 	    if ((c->type != XML_NOTATION_NODE) &&
1066 	        (c->type != XML_ELEMENT_DECL) &&
1067 		(c->type != XML_ATTRIBUTE_DECL) &&
1068 		(c->type != XML_ENTITY_DECL)) {
1069 		xmlUnlinkNode(c);
1070 		xmlFreeNode(c);
1071 	    }
1072 	    c = next;
1073 	}
1074     }
1075     DICT_FREE(cur->name)
1076     DICT_FREE(cur->SystemID)
1077     DICT_FREE(cur->ExternalID)
1078     /* TODO !!! */
1079     if (cur->notations != NULL)
1080         xmlFreeNotationTable((xmlNotationTablePtr) cur->notations);
1081 
1082     if (cur->elements != NULL)
1083         xmlFreeElementTable((xmlElementTablePtr) cur->elements);
1084     if (cur->attributes != NULL)
1085         xmlFreeAttributeTable((xmlAttributeTablePtr) cur->attributes);
1086     if (cur->entities != NULL)
1087         xmlFreeEntitiesTable((xmlEntitiesTablePtr) cur->entities);
1088     if (cur->pentities != NULL)
1089         xmlFreeEntitiesTable((xmlEntitiesTablePtr) cur->pentities);
1090 
1091     xmlFree(cur);
1092 }
1093 
1094 /**
1095  * xmlNewDoc:
1096  * @version:  xmlChar string giving the version of XML "1.0"
1097  *
1098  * Creates a new XML document
1099  *
1100  * Returns a new document
1101  */
1102 xmlDocPtr
xmlNewDoc(const xmlChar * version)1103 xmlNewDoc(const xmlChar *version) {
1104     xmlDocPtr cur;
1105 
1106     if (version == NULL)
1107 	version = (const xmlChar *) "1.0";
1108 
1109     /*
1110      * Allocate a new document and fill the fields.
1111      */
1112     cur = (xmlDocPtr) xmlMalloc(sizeof(xmlDoc));
1113     if (cur == NULL)
1114 	return(NULL);
1115     memset(cur, 0, sizeof(xmlDoc));
1116     cur->type = XML_DOCUMENT_NODE;
1117 
1118     cur->version = xmlStrdup(version);
1119     if (cur->version == NULL) {
1120 	xmlFree(cur);
1121 	return(NULL);
1122     }
1123     cur->standalone = -1;
1124     cur->compression = -1; /* not initialized */
1125     cur->doc = cur;
1126     cur->parseFlags = 0;
1127     cur->properties = XML_DOC_USERBUILT;
1128     /*
1129      * The in memory encoding is always UTF8
1130      * This field will never change and would
1131      * be obsolete if not for binary compatibility.
1132      */
1133     cur->charset = XML_CHAR_ENCODING_UTF8;
1134 
1135     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
1136 	xmlRegisterNodeDefaultValue((xmlNodePtr)cur);
1137     return(cur);
1138 }
1139 
1140 /**
1141  * xmlFreeDoc:
1142  * @cur:  pointer to the document
1143  *
1144  * Free up all the structures used by a document, tree included.
1145  */
1146 void
xmlFreeDoc(xmlDocPtr cur)1147 xmlFreeDoc(xmlDocPtr cur) {
1148     xmlDtdPtr extSubset, intSubset;
1149     xmlDictPtr dict = NULL;
1150 
1151     if (cur == NULL) {
1152 	return;
1153     }
1154 
1155     if (cur != NULL) dict = cur->dict;
1156 
1157     if ((__xmlRegisterCallbacks) && (xmlDeregisterNodeDefaultValue))
1158 	xmlDeregisterNodeDefaultValue((xmlNodePtr)cur);
1159 
1160     /*
1161      * Do this before freeing the children list to avoid ID lookups
1162      */
1163     if (cur->ids != NULL) xmlFreeIDTable((xmlIDTablePtr) cur->ids);
1164     cur->ids = NULL;
1165     if (cur->refs != NULL) xmlFreeRefTable((xmlRefTablePtr) cur->refs);
1166     cur->refs = NULL;
1167     extSubset = cur->extSubset;
1168     intSubset = cur->intSubset;
1169     if (intSubset == extSubset)
1170 	extSubset = NULL;
1171     if (extSubset != NULL) {
1172 	xmlUnlinkNode((xmlNodePtr) cur->extSubset);
1173 	cur->extSubset = NULL;
1174 	xmlFreeDtd(extSubset);
1175     }
1176     if (intSubset != NULL) {
1177 	xmlUnlinkNode((xmlNodePtr) cur->intSubset);
1178 	cur->intSubset = NULL;
1179 	xmlFreeDtd(intSubset);
1180     }
1181 
1182     if (cur->children != NULL) xmlFreeNodeList(cur->children);
1183     if (cur->oldNs != NULL) xmlFreeNsList(cur->oldNs);
1184 
1185     DICT_FREE(cur->version)
1186     DICT_FREE(cur->name)
1187     DICT_FREE(cur->encoding)
1188     DICT_FREE(cur->URL)
1189     xmlFree(cur);
1190     if (dict) xmlDictFree(dict);
1191 }
1192 
1193 /**
1194  * xmlStringLenGetNodeList:
1195  * @doc:  the document
1196  * @value:  the value of the text
1197  * @len:  the length of the string value
1198  *
1199  * Parse the value string and build the node list associated. Should
1200  * produce a flat tree with only TEXTs and ENTITY_REFs.
1201  * Returns a pointer to the first child
1202  */
1203 xmlNodePtr
xmlStringLenGetNodeList(const xmlDoc * doc,const xmlChar * value,int len)1204 xmlStringLenGetNodeList(const xmlDoc *doc, const xmlChar *value, int len) {
1205     xmlNodePtr ret = NULL, head = NULL, last = NULL;
1206     xmlNodePtr node;
1207     xmlChar *val = NULL;
1208     const xmlChar *cur, *end;
1209     const xmlChar *q;
1210     xmlEntityPtr ent;
1211     xmlBufPtr buf;
1212 
1213     /*
1214      * This function should only receive valid attribute values that
1215      * were checked by the parser, typically by xmlParseAttValueComplex
1216      * calling xmlStringDecodeEntities.
1217      *
1218      * In recovery mode, the parser can produce invalid attribute
1219      * values. For now, we ignore any errors silently. If this is fixed,
1220      * we could add assertions here to catch parser issues.
1221      */
1222 
1223     if (value == NULL) return(NULL);
1224     cur = value;
1225     end = cur + len;
1226 
1227     buf = xmlBufCreateSize(0);
1228     if (buf == NULL) return(NULL);
1229     xmlBufSetAllocationScheme(buf, XML_BUFFER_ALLOC_DOUBLEIT);
1230 
1231     q = cur;
1232     while ((cur < end) && (*cur != 0)) {
1233 	if (cur[0] == '&') {
1234 	    int charval = 0;
1235 	    xmlChar tmp;
1236 
1237 	    /*
1238 	     * Save the current text.
1239 	     */
1240             if (cur != q) {
1241 		if (xmlBufAdd(buf, q, cur - q))
1242 		    goto out;
1243 	    }
1244 	    q = cur;
1245 	    if ((cur + 2 < end) && (cur[1] == '#') && (cur[2] == 'x')) {
1246 		cur += 3;
1247 		if (cur < end)
1248 		    tmp = *cur;
1249 		else
1250 		    tmp = 0;
1251 		while (tmp != ';') { /* Non input consuming loop */
1252 		    if ((tmp >= '0') && (tmp <= '9'))
1253 			charval = charval * 16 + (tmp - '0');
1254 		    else if ((tmp >= 'a') && (tmp <= 'f'))
1255 			charval = charval * 16 + (tmp - 'a') + 10;
1256 		    else if ((tmp >= 'A') && (tmp <= 'F'))
1257 			charval = charval * 16 + (tmp - 'A') + 10;
1258 		    else {
1259 			charval = 0;
1260 			break;
1261 		    }
1262 		    cur++;
1263 		    if (cur < end)
1264 			tmp = *cur;
1265 		    else
1266 			tmp = 0;
1267 		}
1268 		if (tmp == ';')
1269 		    cur++;
1270 		q = cur;
1271 	    } else if ((cur + 1 < end) && (cur[1] == '#')) {
1272 		cur += 2;
1273 		if (cur < end)
1274 		    tmp = *cur;
1275 		else
1276 		    tmp = 0;
1277 		while (tmp != ';') { /* Non input consuming loops */
1278                     /* Don't check for integer overflow, see above. */
1279 		    if ((tmp >= '0') && (tmp <= '9'))
1280 			charval = charval * 10 + (tmp - '0');
1281 		    else {
1282 			charval = 0;
1283 			break;
1284 		    }
1285 		    cur++;
1286 		    if (cur < end)
1287 			tmp = *cur;
1288 		    else
1289 			tmp = 0;
1290 		}
1291 		if (tmp == ';')
1292 		    cur++;
1293 		q = cur;
1294 	    } else {
1295 		/*
1296 		 * Read the entity string
1297 		 */
1298 		cur++;
1299 		q = cur;
1300 		while ((cur < end) && (*cur != 0) && (*cur != ';')) cur++;
1301 		if ((cur >= end) || (*cur == 0))
1302 		    break;
1303 		if (cur != q) {
1304 		    /*
1305 		     * Predefined entities don't generate nodes
1306 		     */
1307 		    val = xmlStrndup(q, cur - q);
1308 		    ent = xmlGetDocEntity(doc, val);
1309 		    if ((ent != NULL) &&
1310 			(ent->etype == XML_INTERNAL_PREDEFINED_ENTITY)) {
1311 
1312 			if (xmlBufCat(buf, ent->content))
1313 			    goto out;
1314 		    } else {
1315 			/*
1316 			 * Flush buffer so far
1317 			 */
1318 			if (!xmlBufIsEmpty(buf)) {
1319 			    node = xmlNewDocText(doc, NULL);
1320 			    if (node == NULL)
1321 				goto out;
1322 			    node->content = xmlBufDetach(buf);
1323 
1324 			    if (last == NULL) {
1325 				last = head = node;
1326 			    } else {
1327 				last = xmlAddNextSibling(last, node);
1328 			    }
1329 			}
1330 
1331 			/*
1332 			 * Create a new REFERENCE_REF node
1333 			 */
1334 			node = xmlNewReference(doc, val);
1335 			if (node == NULL)
1336 			    goto out;
1337 			else if ((ent != NULL) &&
1338                                  ((ent->flags & XML_ENT_PARSED) == 0) &&
1339                                  ((ent->flags & XML_ENT_EXPANDING) == 0)) {
1340 			    xmlNodePtr temp;
1341 
1342                             /*
1343                              * The entity should have been checked already,
1344                              * but set the flag anyway to avoid recursion.
1345                              */
1346                             if (node->content != NULL) {
1347                                 ent->flags |= XML_ENT_EXPANDING;
1348                                 ent->children = xmlStringGetNodeList(doc,
1349                                         node->content);
1350                                 ent->flags &= ~XML_ENT_EXPANDING;
1351                                 if (ent->children == NULL) {
1352                                     xmlFreeNode(node);
1353                                     goto out;
1354                                 }
1355                             }
1356                             ent->flags |= XML_ENT_PARSED;
1357 			    temp = ent->children;
1358 			    while (temp) {
1359 				temp->parent = (xmlNodePtr)ent;
1360 				ent->last = temp;
1361 				temp = temp->next;
1362 			    }
1363 			}
1364 			if (last == NULL) {
1365 			    last = head = node;
1366 			} else {
1367 			    last = xmlAddNextSibling(last, node);
1368 			}
1369 		    }
1370 		    xmlFree(val);
1371                     val = NULL;
1372 		}
1373 		cur++;
1374 		q = cur;
1375 	    }
1376 	    if (charval != 0) {
1377 		xmlChar buffer[10];
1378 		int l;
1379 
1380 		l = xmlCopyCharMultiByte(buffer, charval);
1381 		buffer[l] = 0;
1382 
1383 		if (xmlBufCat(buf, buffer))
1384 		    goto out;
1385 		charval = 0;
1386 	    }
1387 	} else
1388 	    cur++;
1389     }
1390 
1391     if (cur != q) {
1392         /*
1393 	 * Handle the last piece of text.
1394 	 */
1395 	if (xmlBufAdd(buf, q, cur - q))
1396 	    goto out;
1397     }
1398 
1399     if (!xmlBufIsEmpty(buf)) {
1400 	node = xmlNewDocText(doc, NULL);
1401 	if (node == NULL)
1402             goto out;
1403 	node->content = xmlBufDetach(buf);
1404 
1405 	if (last == NULL) {
1406 	    head = node;
1407 	} else {
1408 	    xmlAddNextSibling(last, node);
1409 	}
1410     } else if (head == NULL) {
1411         head = xmlNewDocText(doc, BAD_CAST "");
1412     }
1413 
1414     ret = head;
1415     head = NULL;
1416 
1417 out:
1418     xmlBufFree(buf);
1419     if (val != NULL)
1420         xmlFree(val);
1421     if (head != NULL)
1422         xmlFreeNodeList(head);
1423     return(ret);
1424 }
1425 
1426 /**
1427  * xmlStringGetNodeList:
1428  * @doc:  the document
1429  * @value:  the value of the attribute
1430  *
1431  * Parse the value string and build the node list associated. Should
1432  * produce a flat tree with only TEXTs and ENTITY_REFs.
1433  * Returns a pointer to the first child
1434  */
1435 xmlNodePtr
xmlStringGetNodeList(const xmlDoc * doc,const xmlChar * value)1436 xmlStringGetNodeList(const xmlDoc *doc, const xmlChar *value) {
1437     xmlNodePtr ret = NULL, head = NULL, last = NULL;
1438     xmlNodePtr node;
1439     xmlChar *val = NULL;
1440     const xmlChar *cur = value;
1441     const xmlChar *q;
1442     xmlEntityPtr ent;
1443     xmlBufPtr buf;
1444 
1445     /*
1446      * This function should only receive valid attribute values that
1447      * were checked by the parser, typically by xmlParseAttValueComplex
1448      * calling xmlStringDecodeEntities.
1449      *
1450      * In recovery mode, the parser can produce invalid attribute
1451      * values. For now, we ignore any errors silently. If this is fixed,
1452      * we could add assertions here to catch parser issues.
1453      */
1454 
1455     if (value == NULL) return(NULL);
1456 
1457     buf = xmlBufCreateSize(0);
1458     if (buf == NULL) return(NULL);
1459     xmlBufSetAllocationScheme(buf, XML_BUFFER_ALLOC_DOUBLEIT);
1460 
1461     q = cur;
1462     while (*cur != 0) {
1463 	if (cur[0] == '&') {
1464 	    int charval = 0;
1465 	    xmlChar tmp;
1466 
1467 	    /*
1468 	     * Save the current text.
1469 	     */
1470             if (cur != q) {
1471 		if (xmlBufAdd(buf, q, cur - q))
1472 		    goto out;
1473 	    }
1474 	    q = cur;
1475 	    if ((cur[1] == '#') && (cur[2] == 'x')) {
1476 		cur += 3;
1477 		tmp = *cur;
1478 		while (tmp != ';') { /* Non input consuming loop */
1479 		    if ((tmp >= '0') && (tmp <= '9'))
1480 			charval = charval * 16 + (tmp - '0');
1481 		    else if ((tmp >= 'a') && (tmp <= 'f'))
1482 			charval = charval * 16 + (tmp - 'a') + 10;
1483 		    else if ((tmp >= 'A') && (tmp <= 'F'))
1484 			charval = charval * 16 + (tmp - 'A') + 10;
1485 		    else {
1486 			charval = 0;
1487 			break;
1488 		    }
1489 		    cur++;
1490 		    tmp = *cur;
1491 		}
1492 		if (tmp == ';')
1493 		    cur++;
1494 		q = cur;
1495 	    } else if  (cur[1] == '#') {
1496 		cur += 2;
1497 		tmp = *cur;
1498 		while (tmp != ';') { /* Non input consuming loops */
1499                     /* Don't check for integer overflow, see above. */
1500 		    if ((tmp >= '0') && (tmp <= '9'))
1501 			charval = charval * 10 + (tmp - '0');
1502 		    else {
1503 			charval = 0;
1504 			break;
1505 		    }
1506 		    cur++;
1507 		    tmp = *cur;
1508 		}
1509 		if (tmp == ';')
1510 		    cur++;
1511 		q = cur;
1512 	    } else {
1513 		/*
1514 		 * Read the entity string
1515 		 */
1516 		cur++;
1517 		q = cur;
1518 		while ((*cur != 0) && (*cur != ';')) cur++;
1519 		if (*cur == 0)
1520 		    break;
1521 		if (cur != q) {
1522 		    /*
1523 		     * Predefined entities don't generate nodes
1524 		     */
1525 		    val = xmlStrndup(q, cur - q);
1526                     if (val == NULL)
1527                         goto out;
1528 		    ent = xmlGetDocEntity(doc, val);
1529 		    if ((ent != NULL) &&
1530 			(ent->etype == XML_INTERNAL_PREDEFINED_ENTITY)) {
1531 
1532 			if (xmlBufCat(buf, ent->content))
1533 			    goto out;
1534 
1535 		    } else {
1536 			/*
1537 			 * Flush buffer so far
1538 			 */
1539 			if (!xmlBufIsEmpty(buf)) {
1540 			    node = xmlNewDocText(doc, NULL);
1541                             if (node == NULL)
1542                                 goto out;
1543 			    node->content = xmlBufDetach(buf);
1544 
1545 			    if (last == NULL) {
1546 				last = head = node;
1547 			    } else {
1548 				last = xmlAddNextSibling(last, node);
1549 			    }
1550 			}
1551 
1552 			/*
1553 			 * Create a new REFERENCE_REF node
1554 			 */
1555 			node = xmlNewReference(doc, val);
1556 			if (node == NULL)
1557 			    goto out;
1558 			if ((ent != NULL) &&
1559                             ((ent->flags & XML_ENT_PARSED) == 0) &&
1560                             ((ent->flags & XML_ENT_EXPANDING) == 0)) {
1561 			    xmlNodePtr temp;
1562 
1563                             /*
1564                              * The entity should have been checked already,
1565                              * but set the flag anyway to avoid recursion.
1566                              */
1567                             if (node->content != NULL) {
1568                                 ent->flags |= XML_ENT_EXPANDING;
1569                                 ent->children = xmlStringGetNodeList(doc,
1570                                         node->content);
1571                                 ent->flags &= ~XML_ENT_EXPANDING;
1572                                 if (ent->children == NULL) {
1573                                     xmlFreeNode(node);
1574                                     goto out;
1575                                 }
1576                             }
1577                             ent->flags |= XML_ENT_PARSED;
1578 			    temp = ent->children;
1579 			    while (temp) {
1580 				temp->parent = (xmlNodePtr)ent;
1581 				ent->last = temp;
1582 				temp = temp->next;
1583 			    }
1584 			}
1585 			if (last == NULL) {
1586 			    last = head = node;
1587 			} else {
1588 			    last = xmlAddNextSibling(last, node);
1589 			}
1590 		    }
1591 		    xmlFree(val);
1592                     val = NULL;
1593 		}
1594 		cur++;
1595 		q = cur;
1596 	    }
1597 	    if (charval != 0) {
1598 		xmlChar buffer[10];
1599 		int len;
1600 
1601 		len = xmlCopyCharMultiByte(buffer, charval);
1602 		buffer[len] = 0;
1603 
1604 		if (xmlBufCat(buf, buffer))
1605 		    goto out;
1606 		charval = 0;
1607 	    }
1608 	} else
1609 	    cur++;
1610     }
1611     if ((cur != q) || (head == NULL)) {
1612         /*
1613 	 * Handle the last piece of text.
1614 	 */
1615 	xmlBufAdd(buf, q, cur - q);
1616     }
1617 
1618     if (xmlBufIsEmpty(buf) <= 0) {
1619 	node = xmlNewDocText(doc, NULL);
1620         if (node == NULL)
1621             goto out;
1622 	node->content = xmlBufDetach(buf);
1623         if (node->content == NULL) {
1624             xmlFreeNode(node);
1625             goto out;
1626         }
1627 
1628 	if (last == NULL) {
1629 	    head = node;
1630 	} else {
1631 	    xmlAddNextSibling(last, node);
1632 	}
1633     } else if (head == NULL) {
1634         head = xmlNewDocText(doc, BAD_CAST "");
1635     }
1636 
1637     ret = head;
1638     head = NULL;
1639 
1640 out:
1641     xmlBufFree(buf);
1642     if (val != NULL) xmlFree(val);
1643     if (head != NULL) xmlFreeNodeList(head);
1644     return(ret);
1645 }
1646 
1647 /**
1648  * xmlNodeListGetString:
1649  * @doc:  the document
1650  * @list:  a Node list
1651  * @inLine:  should we replace entity contents or show their external form
1652  *
1653  * Build the string equivalent to the text contained in the Node list
1654  * made of TEXTs and ENTITY_REFs
1655  *
1656  * Returns a pointer to the string copy, the caller must free it with xmlFree().
1657  */
1658 xmlChar *
xmlNodeListGetString(xmlDocPtr doc,const xmlNode * list,int inLine)1659 xmlNodeListGetString(xmlDocPtr doc, const xmlNode *list, int inLine)
1660 {
1661     const xmlNode *node = list;
1662     xmlChar *ret = NULL;
1663     xmlEntityPtr ent;
1664     int attr;
1665 
1666     if (list == NULL)
1667         return xmlStrdup(BAD_CAST "");
1668     if ((list->parent != NULL) && (list->parent->type == XML_ATTRIBUTE_NODE))
1669         attr = 1;
1670     else
1671         attr = 0;
1672 
1673     while (node != NULL) {
1674         if ((node->type == XML_TEXT_NODE) ||
1675             (node->type == XML_CDATA_SECTION_NODE)) {
1676             if (inLine) {
1677                 ret = xmlStrcat(ret, node->content);
1678                 if (ret == NULL)
1679                     goto error;
1680             } else {
1681                 xmlChar *buffer;
1682 
1683 		if (attr)
1684 		    buffer = xmlEncodeAttributeEntities(doc, node->content);
1685 		else
1686 		    buffer = xmlEncodeEntitiesReentrant(doc, node->content);
1687                 if (buffer == NULL)
1688                     goto error;
1689                 ret = xmlStrcat(ret, buffer);
1690                 xmlFree(buffer);
1691                 if (ret == NULL)
1692                     goto error;
1693             }
1694         } else if (node->type == XML_ENTITY_REF_NODE) {
1695             if (inLine) {
1696                 ent = xmlGetDocEntity(doc, node->name);
1697                 if (ent != NULL) {
1698                     if (ent->children != NULL) {
1699                         xmlChar *buffer;
1700 
1701                         /* an entity content can be any "well balanced chunk",
1702                          * i.e. the result of the content [43] production:
1703                          * http://www.w3.org/TR/REC-xml#NT-content.
1704                          * So it can contain text, CDATA section or nested
1705                          * entity reference nodes (among others).
1706                          * -> we recursive  call xmlNodeListGetString()
1707                          * which handles these types */
1708                         buffer = xmlNodeListGetString(doc, ent->children, 1);
1709                         if (buffer == NULL)
1710                             goto error;
1711                         ret = xmlStrcat(ret, buffer);
1712                         xmlFree(buffer);
1713                         if (ret == NULL)
1714                             goto error;
1715                     }
1716                 } else if (node->content != NULL) {
1717                     ret = xmlStrcat(ret, node->content);
1718                     if (ret == NULL)
1719                         goto error;
1720                 }
1721             } else {
1722                 xmlChar buf[2];
1723 
1724                 buf[0] = '&';
1725                 buf[1] = 0;
1726                 ret = xmlStrncat(ret, buf, 1);
1727                 ret = xmlStrcat(ret, node->name);
1728                 buf[0] = ';';
1729                 buf[1] = 0;
1730                 ret = xmlStrncat(ret, buf, 1);
1731                 if (ret == NULL)
1732                     goto error;
1733             }
1734         }
1735         node = node->next;
1736     }
1737     if (ret == NULL)
1738         ret = xmlStrdup(BAD_CAST "");
1739     return (ret);
1740 
1741 error:
1742     xmlFree(ret);
1743     return(NULL);
1744 }
1745 
1746 #ifdef LIBXML_TREE_ENABLED
1747 /**
1748  * xmlNodeListGetRawString:
1749  * @doc:  the document
1750  * @list:  a Node list
1751  * @inLine:  should we replace entity contents or show their external form
1752  *
1753  * Builds the string equivalent to the text contained in the Node list
1754  * made of TEXTs and ENTITY_REFs, contrary to xmlNodeListGetString()
1755  * this function doesn't do any character encoding handling.
1756  *
1757  * Returns a pointer to the string copy, the caller must free it with xmlFree().
1758  */
1759 xmlChar *
xmlNodeListGetRawString(const xmlDoc * doc,const xmlNode * list,int inLine)1760 xmlNodeListGetRawString(const xmlDoc *doc, const xmlNode *list, int inLine)
1761 {
1762     const xmlNode *node = list;
1763     xmlChar *ret = NULL;
1764     xmlEntityPtr ent;
1765 
1766     if (list == NULL)
1767         return xmlStrdup(BAD_CAST "");
1768 
1769     while (node != NULL) {
1770         if ((node->type == XML_TEXT_NODE) ||
1771             (node->type == XML_CDATA_SECTION_NODE)) {
1772             if (inLine) {
1773                 ret = xmlStrcat(ret, node->content);
1774             } else {
1775                 xmlChar *buffer;
1776 
1777                 buffer = xmlEncodeSpecialChars(doc, node->content);
1778                 if (buffer != NULL) {
1779                     ret = xmlStrcat(ret, buffer);
1780                     xmlFree(buffer);
1781                 }
1782             }
1783         } else if (node->type == XML_ENTITY_REF_NODE) {
1784             if (inLine) {
1785                 ent = xmlGetDocEntity(doc, node->name);
1786                 if (ent != NULL) {
1787                     xmlChar *buffer;
1788 
1789                     /* an entity content can be any "well balanced chunk",
1790                      * i.e. the result of the content [43] production:
1791                      * http://www.w3.org/TR/REC-xml#NT-content.
1792                      * So it can contain text, CDATA section or nested
1793                      * entity reference nodes (among others).
1794                      * -> we recursive  call xmlNodeListGetRawString()
1795                      * which handles these types */
1796                     buffer =
1797                         xmlNodeListGetRawString(doc, ent->children, 1);
1798                     if (buffer != NULL) {
1799                         ret = xmlStrcat(ret, buffer);
1800                         xmlFree(buffer);
1801                     }
1802                 } else {
1803                     ret = xmlStrcat(ret, node->content);
1804                 }
1805             } else {
1806                 xmlChar buf[2];
1807 
1808                 buf[0] = '&';
1809                 buf[1] = 0;
1810                 ret = xmlStrncat(ret, buf, 1);
1811                 ret = xmlStrcat(ret, node->name);
1812                 buf[0] = ';';
1813                 buf[1] = 0;
1814                 ret = xmlStrncat(ret, buf, 1);
1815             }
1816         }
1817         node = node->next;
1818     }
1819     if (ret == NULL)
1820         ret = xmlStrdup(BAD_CAST "");
1821     return (ret);
1822 }
1823 #endif /* LIBXML_TREE_ENABLED */
1824 
1825 static xmlAttrPtr
xmlNewPropInternal(xmlNodePtr node,xmlNsPtr ns,const xmlChar * name,const xmlChar * value,int eatname)1826 xmlNewPropInternal(xmlNodePtr node, xmlNsPtr ns,
1827                    const xmlChar * name, const xmlChar * value,
1828                    int eatname)
1829 {
1830     xmlAttrPtr cur;
1831     xmlDocPtr doc = NULL;
1832 
1833     if ((node != NULL) && (node->type != XML_ELEMENT_NODE)) {
1834         if ((eatname == 1) &&
1835 	    ((node->doc == NULL) || (node->doc->dict == NULL) ||
1836 	     (!(xmlDictOwns(node->doc->dict, name)))))
1837             xmlFree((xmlChar *) name);
1838         return (NULL);
1839     }
1840 
1841     /*
1842      * Allocate a new property and fill the fields.
1843      */
1844     cur = (xmlAttrPtr) xmlMalloc(sizeof(xmlAttr));
1845     if (cur == NULL) {
1846         if ((eatname == 1) &&
1847 	    ((node == NULL) || (node->doc == NULL) ||
1848              (node->doc->dict == NULL) ||
1849 	     (!(xmlDictOwns(node->doc->dict, name)))))
1850             xmlFree((xmlChar *) name);
1851         return (NULL);
1852     }
1853     memset(cur, 0, sizeof(xmlAttr));
1854     cur->type = XML_ATTRIBUTE_NODE;
1855 
1856     cur->parent = node;
1857     if (node != NULL) {
1858         doc = node->doc;
1859         cur->doc = doc;
1860     }
1861     cur->ns = ns;
1862 
1863     if (eatname == 0) {
1864         if ((doc != NULL) && (doc->dict != NULL))
1865             cur->name = (xmlChar *) xmlDictLookup(doc->dict, name, -1);
1866         else
1867             cur->name = xmlStrdup(name);
1868         if (cur->name == NULL)
1869             goto error;
1870     } else
1871         cur->name = name;
1872 
1873     if (value != NULL) {
1874         xmlNodePtr tmp;
1875 
1876         cur->children = xmlNewDocText(doc, value);
1877         if (cur->children == NULL)
1878             goto error;
1879         cur->last = NULL;
1880         tmp = cur->children;
1881         while (tmp != NULL) {
1882             tmp->parent = (xmlNodePtr) cur;
1883             if (tmp->next == NULL)
1884                 cur->last = tmp;
1885             tmp = tmp->next;
1886         }
1887     }
1888 
1889     if ((value != NULL) && (node != NULL) &&
1890         (xmlIsID(node->doc, node, cur) == 1) &&
1891         (xmlAddIDSafe(node->doc, value, cur, 0, NULL) < 0))
1892         goto error;
1893 
1894     /*
1895      * Add it at the end to preserve parsing order ...
1896      */
1897     if (node != NULL) {
1898         if (node->properties == NULL) {
1899             node->properties = cur;
1900         } else {
1901             xmlAttrPtr prev = node->properties;
1902 
1903             while (prev->next != NULL)
1904                 prev = prev->next;
1905             prev->next = cur;
1906             cur->prev = prev;
1907         }
1908     }
1909 
1910     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
1911         xmlRegisterNodeDefaultValue((xmlNodePtr) cur);
1912     return (cur);
1913 
1914 error:
1915     xmlFreeProp(cur);
1916     return(NULL);
1917 }
1918 
1919 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_HTML_ENABLED) || \
1920     defined(LIBXML_SCHEMAS_ENABLED)
1921 /**
1922  * xmlNewProp:
1923  * @node:  the holding node
1924  * @name:  the name of the attribute
1925  * @value:  the value of the attribute
1926  *
1927  * Create a new property carried by a node.
1928  * Returns a pointer to the attribute
1929  */
1930 xmlAttrPtr
xmlNewProp(xmlNodePtr node,const xmlChar * name,const xmlChar * value)1931 xmlNewProp(xmlNodePtr node, const xmlChar *name, const xmlChar *value) {
1932 
1933     if (name == NULL) {
1934 	return(NULL);
1935     }
1936 
1937 	return xmlNewPropInternal(node, NULL, name, value, 0);
1938 }
1939 #endif /* LIBXML_TREE_ENABLED */
1940 
1941 /**
1942  * xmlNewNsProp:
1943  * @node:  the holding node
1944  * @ns:  the namespace
1945  * @name:  the name of the attribute
1946  * @value:  the value of the attribute
1947  *
1948  * Create a new property tagged with a namespace and carried by a node.
1949  * Returns a pointer to the attribute
1950  */
1951 xmlAttrPtr
xmlNewNsProp(xmlNodePtr node,xmlNsPtr ns,const xmlChar * name,const xmlChar * value)1952 xmlNewNsProp(xmlNodePtr node, xmlNsPtr ns, const xmlChar *name,
1953            const xmlChar *value) {
1954 
1955     if (name == NULL) {
1956 	return(NULL);
1957     }
1958 
1959     return xmlNewPropInternal(node, ns, name, value, 0);
1960 }
1961 
1962 /**
1963  * xmlNewNsPropEatName:
1964  * @node:  the holding node
1965  * @ns:  the namespace
1966  * @name:  the name of the attribute
1967  * @value:  the value of the attribute
1968  *
1969  * Create a new property tagged with a namespace and carried by a node.
1970  * Returns a pointer to the attribute
1971  */
1972 xmlAttrPtr
xmlNewNsPropEatName(xmlNodePtr node,xmlNsPtr ns,xmlChar * name,const xmlChar * value)1973 xmlNewNsPropEatName(xmlNodePtr node, xmlNsPtr ns, xmlChar *name,
1974            const xmlChar *value) {
1975 
1976     if (name == NULL) {
1977 	return(NULL);
1978     }
1979 
1980     return xmlNewPropInternal(node, ns, name, value, 1);
1981 }
1982 
1983 /**
1984  * xmlNewDocProp:
1985  * @doc:  the document
1986  * @name:  the name of the attribute
1987  * @value:  the value of the attribute
1988  *
1989  * Create a new property carried by a document.
1990  * NOTE: @value is supposed to be a piece of XML CDATA, so it allows entity
1991  *       references, but XML special chars need to be escaped first by using
1992  *       xmlEncodeEntitiesReentrant(). Use xmlNewProp() if you don't need
1993  *       entities support.
1994  *
1995  * Returns a pointer to the attribute
1996  */
1997 xmlAttrPtr
xmlNewDocProp(xmlDocPtr doc,const xmlChar * name,const xmlChar * value)1998 xmlNewDocProp(xmlDocPtr doc, const xmlChar *name, const xmlChar *value) {
1999     xmlAttrPtr cur;
2000 
2001     if (name == NULL) {
2002 	return(NULL);
2003     }
2004 
2005     /*
2006      * Allocate a new property and fill the fields.
2007      */
2008     cur = (xmlAttrPtr) xmlMalloc(sizeof(xmlAttr));
2009     if (cur == NULL)
2010 	return(NULL);
2011     memset(cur, 0, sizeof(xmlAttr));
2012     cur->type = XML_ATTRIBUTE_NODE;
2013 
2014     if ((doc != NULL) && (doc->dict != NULL))
2015 	cur->name = xmlDictLookup(doc->dict, name, -1);
2016     else
2017 	cur->name = xmlStrdup(name);
2018     if (cur->name == NULL)
2019         goto error;
2020     cur->doc = doc;
2021     if (value != NULL) {
2022 	xmlNodePtr tmp;
2023 
2024 	cur->children = xmlStringGetNodeList(doc, value);
2025 	cur->last = NULL;
2026 
2027 	tmp = cur->children;
2028 	while (tmp != NULL) {
2029 	    tmp->parent = (xmlNodePtr) cur;
2030 	    if (tmp->next == NULL)
2031 		cur->last = tmp;
2032 	    tmp = tmp->next;
2033 	}
2034     }
2035 
2036     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2037 	xmlRegisterNodeDefaultValue((xmlNodePtr)cur);
2038     return(cur);
2039 
2040 error:
2041     xmlFreeProp(cur);
2042     return(NULL);
2043 }
2044 
2045 /**
2046  * xmlFreePropList:
2047  * @cur:  the first property in the list
2048  *
2049  * Free a property and all its siblings, all the children are freed too.
2050  */
2051 void
xmlFreePropList(xmlAttrPtr cur)2052 xmlFreePropList(xmlAttrPtr cur) {
2053     xmlAttrPtr next;
2054     if (cur == NULL) return;
2055     while (cur != NULL) {
2056         next = cur->next;
2057         xmlFreeProp(cur);
2058 	cur = next;
2059     }
2060 }
2061 
2062 /**
2063  * xmlFreeProp:
2064  * @cur:  an attribute
2065  *
2066  * Free one attribute, all the content is freed too
2067  */
2068 void
xmlFreeProp(xmlAttrPtr cur)2069 xmlFreeProp(xmlAttrPtr cur) {
2070     xmlDictPtr dict = NULL;
2071     if (cur == NULL) return;
2072 
2073     if (cur->doc != NULL) dict = cur->doc->dict;
2074 
2075     if ((__xmlRegisterCallbacks) && (xmlDeregisterNodeDefaultValue))
2076 	xmlDeregisterNodeDefaultValue((xmlNodePtr)cur);
2077 
2078     /* Check for ID removal -> leading to invalid references ! */
2079     if ((cur->doc != NULL) && (cur->atype == XML_ATTRIBUTE_ID)) {
2080 	    xmlRemoveID(cur->doc, cur);
2081     }
2082     if (cur->children != NULL) xmlFreeNodeList(cur->children);
2083     DICT_FREE(cur->name)
2084     xmlFree(cur);
2085 }
2086 
2087 /**
2088  * xmlRemoveProp:
2089  * @cur:  an attribute
2090  *
2091  * Unlink and free one attribute, all the content is freed too
2092  * Note this doesn't work for namespace definition attributes
2093  *
2094  * Returns 0 if success and -1 in case of error.
2095  */
2096 int
xmlRemoveProp(xmlAttrPtr cur)2097 xmlRemoveProp(xmlAttrPtr cur) {
2098     xmlAttrPtr tmp;
2099     if (cur == NULL) {
2100 	return(-1);
2101     }
2102     if (cur->parent == NULL) {
2103 	return(-1);
2104     }
2105     tmp = cur->parent->properties;
2106     if (tmp == cur) {
2107         cur->parent->properties = cur->next;
2108 		if (cur->next != NULL)
2109 			cur->next->prev = NULL;
2110 	xmlFreeProp(cur);
2111 	return(0);
2112     }
2113     while (tmp != NULL) {
2114 	if (tmp->next == cur) {
2115 	    tmp->next = cur->next;
2116 	    if (tmp->next != NULL)
2117 		tmp->next->prev = tmp;
2118 	    xmlFreeProp(cur);
2119 	    return(0);
2120 	}
2121         tmp = tmp->next;
2122     }
2123     return(-1);
2124 }
2125 
2126 /**
2127  * xmlNewDocPI:
2128  * @doc:  the target document
2129  * @name:  the processing instruction name
2130  * @content:  the PI content
2131  *
2132  * Creation of a processing instruction element.
2133  * Returns a pointer to the new node object.
2134  */
2135 xmlNodePtr
xmlNewDocPI(xmlDocPtr doc,const xmlChar * name,const xmlChar * content)2136 xmlNewDocPI(xmlDocPtr doc, const xmlChar *name, const xmlChar *content) {
2137     xmlNodePtr cur;
2138 
2139     if (name == NULL) {
2140 	return(NULL);
2141     }
2142 
2143     /*
2144      * Allocate a new node and fill the fields.
2145      */
2146     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2147     if (cur == NULL)
2148 	return(NULL);
2149     memset(cur, 0, sizeof(xmlNode));
2150     cur->type = XML_PI_NODE;
2151     cur->doc = doc;
2152 
2153     if ((doc != NULL) && (doc->dict != NULL))
2154         cur->name = xmlDictLookup(doc->dict, name, -1);
2155     else
2156 	cur->name = xmlStrdup(name);
2157     if (cur->name == NULL)
2158         goto error;
2159     if (content != NULL) {
2160 	cur->content = xmlStrdup(content);
2161         if (cur->content == NULL)
2162             goto error;
2163     }
2164 
2165     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2166 	xmlRegisterNodeDefaultValue((xmlNodePtr)cur);
2167     return(cur);
2168 
2169 error:
2170     xmlFreeNode(cur);
2171     return(NULL);
2172 }
2173 
2174 /**
2175  * xmlNewPI:
2176  * @name:  the processing instruction name
2177  * @content:  the PI content
2178  *
2179  * Creation of a processing instruction element.
2180  *
2181  * Use of this function is DISCOURAGED in favor of xmlNewDocPI.
2182  *
2183  * Returns a pointer to the new node object.
2184  */
2185 xmlNodePtr
xmlNewPI(const xmlChar * name,const xmlChar * content)2186 xmlNewPI(const xmlChar *name, const xmlChar *content) {
2187     return(xmlNewDocPI(NULL, name, content));
2188 }
2189 
2190 /**
2191  * xmlNewNode:
2192  * @ns:  namespace if any
2193  * @name:  the node name
2194  *
2195  * Creation of a new node element. @ns is optional (NULL).
2196  *
2197  * Use of this function is DISCOURAGED in favor of xmlNewDocNode.
2198  *
2199  * Returns a pointer to the new node object. Uses xmlStrdup() to make
2200  * copy of @name.
2201  */
2202 xmlNodePtr
xmlNewNode(xmlNsPtr ns,const xmlChar * name)2203 xmlNewNode(xmlNsPtr ns, const xmlChar *name) {
2204     xmlNodePtr cur;
2205 
2206     if (name == NULL) {
2207 	return(NULL);
2208     }
2209 
2210     /*
2211      * Allocate a new node and fill the fields.
2212      */
2213     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2214     if (cur == NULL)
2215 	return(NULL);
2216     memset(cur, 0, sizeof(xmlNode));
2217     cur->type = XML_ELEMENT_NODE;
2218 
2219     cur->name = xmlStrdup(name);
2220     if (cur->name == NULL)
2221         goto error;
2222     cur->ns = ns;
2223 
2224     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2225 	xmlRegisterNodeDefaultValue(cur);
2226     return(cur);
2227 
2228 error:
2229     xmlFreeNode(cur);
2230     return(NULL);
2231 }
2232 
2233 /**
2234  * xmlNewNodeEatName:
2235  * @ns:  namespace if any
2236  * @name:  the node name
2237  *
2238  * Creation of a new node element. @ns is optional (NULL).
2239  *
2240  * Use of this function is DISCOURAGED in favor of xmlNewDocNodeEatName.
2241  *
2242  * Returns a pointer to the new node object, with pointer @name as
2243  * new node's name. Use xmlNewNode() if a copy of @name string is
2244  * is needed as new node's name.
2245  */
2246 xmlNodePtr
xmlNewNodeEatName(xmlNsPtr ns,xmlChar * name)2247 xmlNewNodeEatName(xmlNsPtr ns, xmlChar *name) {
2248     xmlNodePtr cur;
2249 
2250     if (name == NULL) {
2251 	return(NULL);
2252     }
2253 
2254     /*
2255      * Allocate a new node and fill the fields.
2256      */
2257     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2258     if (cur == NULL)
2259 	return(NULL);
2260     memset(cur, 0, sizeof(xmlNode));
2261     cur->type = XML_ELEMENT_NODE;
2262 
2263     cur->name = name;
2264     cur->ns = ns;
2265 
2266     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2267 	xmlRegisterNodeDefaultValue((xmlNodePtr)cur);
2268     return(cur);
2269 }
2270 
2271 /**
2272  * xmlNewDocNode:
2273  * @doc:  the document
2274  * @ns:  namespace if any
2275  * @name:  the node name
2276  * @content:  the XML text content if any
2277  *
2278  * Creation of a new node element within a document. @ns and @content
2279  * are optional (NULL).
2280  * NOTE: @content is supposed to be a piece of XML CDATA, so it allow entities
2281  *       references, but XML special chars need to be escaped first by using
2282  *       xmlEncodeEntitiesReentrant(). Use xmlNewDocRawNode() if you don't
2283  *       need entities support.
2284  *
2285  * Returns a pointer to the new node object.
2286  */
2287 xmlNodePtr
xmlNewDocNode(xmlDocPtr doc,xmlNsPtr ns,const xmlChar * name,const xmlChar * content)2288 xmlNewDocNode(xmlDocPtr doc, xmlNsPtr ns,
2289               const xmlChar *name, const xmlChar *content) {
2290     xmlNodePtr cur;
2291 
2292     if ((doc != NULL) && (doc->dict != NULL))
2293         cur = xmlNewNodeEatName(ns, (xmlChar *)
2294 	                        xmlDictLookup(doc->dict, name, -1));
2295     else
2296 	cur = xmlNewNode(ns, name);
2297     if (cur != NULL) {
2298         cur->doc = doc;
2299 	if (content != NULL) {
2300 	    cur->children = xmlStringGetNodeList(doc, content);
2301 	    UPDATE_LAST_CHILD_AND_PARENT(cur)
2302 	}
2303     }
2304 
2305     return(cur);
2306 }
2307 
2308 /**
2309  * xmlNewDocNodeEatName:
2310  * @doc:  the document
2311  * @ns:  namespace if any
2312  * @name:  the node name
2313  * @content:  the XML text content if any
2314  *
2315  * Creation of a new node element within a document. @ns and @content
2316  * are optional (NULL).
2317  * NOTE: @content is supposed to be a piece of XML CDATA, so it allow entities
2318  *       references, but XML special chars need to be escaped first by using
2319  *       xmlEncodeEntitiesReentrant(). Use xmlNewDocRawNode() if you don't
2320  *       need entities support.
2321  *
2322  * Returns a pointer to the new node object.
2323  */
2324 xmlNodePtr
xmlNewDocNodeEatName(xmlDocPtr doc,xmlNsPtr ns,xmlChar * name,const xmlChar * content)2325 xmlNewDocNodeEatName(xmlDocPtr doc, xmlNsPtr ns,
2326               xmlChar *name, const xmlChar *content) {
2327     xmlNodePtr cur;
2328 
2329     cur = xmlNewNodeEatName(ns, name);
2330     if (cur != NULL) {
2331         cur->doc = doc;
2332 	if (content != NULL) {
2333 	    cur->children = xmlStringGetNodeList(doc, content);
2334             if (cur->children == NULL) {
2335                 xmlFreeNode(cur);
2336                 return(NULL);
2337             }
2338 	    UPDATE_LAST_CHILD_AND_PARENT(cur)
2339 	}
2340     } else {
2341         /* if name don't come from the doc dictionary free it here */
2342         if ((name != NULL) &&
2343             ((doc == NULL) || (doc->dict == NULL) ||
2344 	     (!(xmlDictOwns(doc->dict, name)))))
2345 	    xmlFree(name);
2346     }
2347     return(cur);
2348 }
2349 
2350 #ifdef LIBXML_TREE_ENABLED
2351 /**
2352  * xmlNewDocRawNode:
2353  * @doc:  the document
2354  * @ns:  namespace if any
2355  * @name:  the node name
2356  * @content:  the text content if any
2357  *
2358  * Creation of a new node element within a document. @ns and @content
2359  * are optional (NULL).
2360  *
2361  * Returns a pointer to the new node object.
2362  */
2363 xmlNodePtr
xmlNewDocRawNode(xmlDocPtr doc,xmlNsPtr ns,const xmlChar * name,const xmlChar * content)2364 xmlNewDocRawNode(xmlDocPtr doc, xmlNsPtr ns,
2365                  const xmlChar *name, const xmlChar *content) {
2366     xmlNodePtr cur;
2367 
2368     cur = xmlNewDocNode(doc, ns, name, NULL);
2369     if (cur != NULL) {
2370         cur->doc = doc;
2371 	if (content != NULL) {
2372 	    cur->children = xmlNewDocText(doc, content);
2373 	    UPDATE_LAST_CHILD_AND_PARENT(cur)
2374 	}
2375     }
2376     return(cur);
2377 }
2378 
2379 /**
2380  * xmlNewDocFragment:
2381  * @doc:  the document owning the fragment
2382  *
2383  * Creation of a new Fragment node.
2384  * Returns a pointer to the new node object.
2385  */
2386 xmlNodePtr
xmlNewDocFragment(xmlDocPtr doc)2387 xmlNewDocFragment(xmlDocPtr doc) {
2388     xmlNodePtr cur;
2389 
2390     /*
2391      * Allocate a new DocumentFragment node and fill the fields.
2392      */
2393     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2394     if (cur == NULL)
2395 	return(NULL);
2396     memset(cur, 0, sizeof(xmlNode));
2397     cur->type = XML_DOCUMENT_FRAG_NODE;
2398 
2399     cur->doc = doc;
2400 
2401     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2402 	xmlRegisterNodeDefaultValue(cur);
2403     return(cur);
2404 }
2405 #endif /* LIBXML_TREE_ENABLED */
2406 
2407 /**
2408  * xmlNewText:
2409  * @content:  the text content
2410  *
2411  * Creation of a new text node.
2412  *
2413  * Use of this function is DISCOURAGED in favor of xmlNewDocText.
2414  *
2415  * Returns a pointer to the new node object.
2416  */
2417 xmlNodePtr
xmlNewText(const xmlChar * content)2418 xmlNewText(const xmlChar *content) {
2419     xmlNodePtr cur;
2420 
2421     /*
2422      * Allocate a new node and fill the fields.
2423      */
2424     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2425     if (cur == NULL)
2426 	return(NULL);
2427     memset(cur, 0, sizeof(xmlNode));
2428     cur->type = XML_TEXT_NODE;
2429 
2430     cur->name = xmlStringText;
2431     if (content != NULL) {
2432 	cur->content = xmlStrdup(content);
2433         if (cur->content == NULL)
2434             goto error;
2435     }
2436 
2437     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2438 	xmlRegisterNodeDefaultValue(cur);
2439     return(cur);
2440 
2441 error:
2442     xmlFreeNode(cur);
2443     return(NULL);
2444 }
2445 
2446 #ifdef LIBXML_TREE_ENABLED
2447 /**
2448  * xmlNewTextChild:
2449  * @parent:  the parent node
2450  * @ns:  a namespace if any
2451  * @name:  the name of the child
2452  * @content:  the text content of the child if any.
2453  *
2454  * Creation of a new child element, added at the end of @parent children list.
2455  * @ns and @content parameters are optional (NULL). If @ns is NULL, the newly
2456  * created element inherits the namespace of @parent. If @content is non NULL,
2457  * a child TEXT node will be created containing the string @content.
2458  * NOTE: Use xmlNewChild() if @content will contain entities that need to be
2459  * preserved. Use this function, xmlNewTextChild(), if you need to ensure that
2460  * reserved XML chars that might appear in @content, such as the ampersand,
2461  * greater-than or less-than signs, are automatically replaced by their XML
2462  * escaped entity representations.
2463  *
2464  * Returns a pointer to the new node object.
2465  */
2466 xmlNodePtr
xmlNewTextChild(xmlNodePtr parent,xmlNsPtr ns,const xmlChar * name,const xmlChar * content)2467 xmlNewTextChild(xmlNodePtr parent, xmlNsPtr ns,
2468             const xmlChar *name, const xmlChar *content) {
2469     xmlNodePtr cur, prev;
2470 
2471     if (parent == NULL) {
2472 	return(NULL);
2473     }
2474 
2475     if (name == NULL) {
2476 	return(NULL);
2477     }
2478 
2479     /*
2480      * Allocate a new node
2481      */
2482     if (parent->type == XML_ELEMENT_NODE) {
2483 	if (ns == NULL)
2484 	    cur = xmlNewDocRawNode(parent->doc, parent->ns, name, content);
2485 	else
2486 	    cur = xmlNewDocRawNode(parent->doc, ns, name, content);
2487     } else if ((parent->type == XML_DOCUMENT_NODE) ||
2488 	       (parent->type == XML_HTML_DOCUMENT_NODE)) {
2489 	if (ns == NULL)
2490 	    cur = xmlNewDocRawNode((xmlDocPtr) parent, NULL, name, content);
2491 	else
2492 	    cur = xmlNewDocRawNode((xmlDocPtr) parent, ns, name, content);
2493     } else if (parent->type == XML_DOCUMENT_FRAG_NODE) {
2494 	    cur = xmlNewDocRawNode( parent->doc, ns, name, content);
2495     } else {
2496 	return(NULL);
2497     }
2498     if (cur == NULL) return(NULL);
2499 
2500     /*
2501      * add the new element at the end of the children list.
2502      */
2503     cur->type = XML_ELEMENT_NODE;
2504     cur->parent = parent;
2505     cur->doc = parent->doc;
2506     if (parent->children == NULL) {
2507         parent->children = cur;
2508 	parent->last = cur;
2509     } else {
2510         prev = parent->last;
2511 	prev->next = cur;
2512 	cur->prev = prev;
2513 	parent->last = cur;
2514     }
2515 
2516     return(cur);
2517 }
2518 #endif /* LIBXML_TREE_ENABLED */
2519 
2520 /**
2521  * xmlNewCharRef:
2522  * @doc: the document
2523  * @name:  the char ref string, starting with # or "&# ... ;"
2524  *
2525  * Creation of a new character reference node.
2526  * Returns a pointer to the new node object.
2527  */
2528 xmlNodePtr
xmlNewCharRef(xmlDocPtr doc,const xmlChar * name)2529 xmlNewCharRef(xmlDocPtr doc, const xmlChar *name) {
2530     xmlNodePtr cur;
2531 
2532     if (name == NULL)
2533         return(NULL);
2534 
2535     /*
2536      * Allocate a new node and fill the fields.
2537      */
2538     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2539     if (cur == NULL)
2540 	return(NULL);
2541     memset(cur, 0, sizeof(xmlNode));
2542     cur->type = XML_ENTITY_REF_NODE;
2543 
2544     cur->doc = doc;
2545     if (name[0] == '&') {
2546         int len;
2547         name++;
2548 	len = xmlStrlen(name);
2549 	if (name[len - 1] == ';')
2550 	    cur->name = xmlStrndup(name, len - 1);
2551 	else
2552 	    cur->name = xmlStrndup(name, len);
2553     } else
2554 	cur->name = xmlStrdup(name);
2555     if (cur->name == NULL)
2556         goto error;
2557 
2558     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2559 	xmlRegisterNodeDefaultValue(cur);
2560     return(cur);
2561 
2562 error:
2563     xmlFreeNode(cur);
2564     return(NULL);
2565 }
2566 
2567 /**
2568  * xmlNewReference:
2569  * @doc: the document
2570  * @name:  the reference name, or the reference string with & and ;
2571  *
2572  * Creation of a new reference node.
2573  * Returns a pointer to the new node object.
2574  */
2575 xmlNodePtr
xmlNewReference(const xmlDoc * doc,const xmlChar * name)2576 xmlNewReference(const xmlDoc *doc, const xmlChar *name) {
2577     xmlNodePtr cur;
2578     xmlEntityPtr ent;
2579 
2580     if (name == NULL)
2581         return(NULL);
2582 
2583     /*
2584      * Allocate a new node and fill the fields.
2585      */
2586     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2587     if (cur == NULL)
2588 	return(NULL);
2589     memset(cur, 0, sizeof(xmlNode));
2590     cur->type = XML_ENTITY_REF_NODE;
2591 
2592     cur->doc = (xmlDoc *)doc;
2593     if (name[0] == '&') {
2594         int len;
2595         name++;
2596 	len = xmlStrlen(name);
2597 	if (name[len - 1] == ';')
2598 	    cur->name = xmlStrndup(name, len - 1);
2599 	else
2600 	    cur->name = xmlStrndup(name, len);
2601     } else
2602 	cur->name = xmlStrdup(name);
2603     if (cur->name == NULL)
2604         goto error;
2605 
2606     ent = xmlGetDocEntity(doc, cur->name);
2607     if (ent != NULL) {
2608 	cur->content = ent->content;
2609 	/*
2610 	 * The parent pointer in entity is a DTD pointer and thus is NOT
2611 	 * updated.  Not sure if this is 100% correct.
2612 	 *  -George
2613 	 */
2614 	cur->children = (xmlNodePtr) ent;
2615 	cur->last = (xmlNodePtr) ent;
2616     }
2617 
2618     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2619 	xmlRegisterNodeDefaultValue(cur);
2620     return(cur);
2621 
2622 error:
2623     xmlFreeNode(cur);
2624     return(NULL);
2625 }
2626 
2627 /**
2628  * xmlNewDocText:
2629  * @doc: the document
2630  * @content:  the text content
2631  *
2632  * Creation of a new text node within a document.
2633  * Returns a pointer to the new node object.
2634  */
2635 xmlNodePtr
xmlNewDocText(const xmlDoc * doc,const xmlChar * content)2636 xmlNewDocText(const xmlDoc *doc, const xmlChar *content) {
2637     xmlNodePtr cur;
2638 
2639     cur = xmlNewText(content);
2640     if (cur != NULL) cur->doc = (xmlDoc *)doc;
2641     return(cur);
2642 }
2643 
2644 /**
2645  * xmlNewTextLen:
2646  * @content:  the text content
2647  * @len:  the text len.
2648  *
2649  * Use of this function is DISCOURAGED in favor of xmlNewDocTextLen.
2650  *
2651  * Creation of a new text node with an extra parameter for the content's length
2652  * Returns a pointer to the new node object.
2653  */
2654 xmlNodePtr
xmlNewTextLen(const xmlChar * content,int len)2655 xmlNewTextLen(const xmlChar *content, int len) {
2656     xmlNodePtr cur;
2657 
2658     /*
2659      * Allocate a new node and fill the fields.
2660      */
2661     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2662     if (cur == NULL)
2663 	return(NULL);
2664     memset(cur, 0, sizeof(xmlNode));
2665     cur->type = XML_TEXT_NODE;
2666 
2667     cur->name = xmlStringText;
2668     if (content != NULL) {
2669 	cur->content = xmlStrndup(content, len);
2670     }
2671 
2672     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2673 	xmlRegisterNodeDefaultValue(cur);
2674     return(cur);
2675 }
2676 
2677 /**
2678  * xmlNewDocTextLen:
2679  * @doc: the document
2680  * @content:  the text content
2681  * @len:  the text len.
2682  *
2683  * Creation of a new text node with an extra content length parameter. The
2684  * text node pertain to a given document.
2685  * Returns a pointer to the new node object.
2686  */
2687 xmlNodePtr
xmlNewDocTextLen(xmlDocPtr doc,const xmlChar * content,int len)2688 xmlNewDocTextLen(xmlDocPtr doc, const xmlChar *content, int len) {
2689     xmlNodePtr cur;
2690 
2691     cur = xmlNewTextLen(content, len);
2692     if (cur != NULL) cur->doc = doc;
2693     return(cur);
2694 }
2695 
2696 /**
2697  * xmlNewComment:
2698  * @content:  the comment content
2699  *
2700  * Use of this function is DISCOURAGED in favor of xmlNewDocComment.
2701  *
2702  * Creation of a new node containing a comment.
2703  * Returns a pointer to the new node object.
2704  */
2705 xmlNodePtr
xmlNewComment(const xmlChar * content)2706 xmlNewComment(const xmlChar *content) {
2707     xmlNodePtr cur;
2708 
2709     /*
2710      * Allocate a new node and fill the fields.
2711      */
2712     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2713     if (cur == NULL)
2714 	return(NULL);
2715     memset(cur, 0, sizeof(xmlNode));
2716     cur->type = XML_COMMENT_NODE;
2717 
2718     cur->name = xmlStringComment;
2719     if (content != NULL) {
2720 	cur->content = xmlStrdup(content);
2721         if (cur->content == NULL)
2722             goto error;
2723     }
2724 
2725     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2726 	xmlRegisterNodeDefaultValue(cur);
2727     return(cur);
2728 
2729 error:
2730     xmlFreeNode(cur);
2731     return(NULL);
2732 }
2733 
2734 /**
2735  * xmlNewCDataBlock:
2736  * @doc:  the document
2737  * @content:  the CDATA block content content
2738  * @len:  the length of the block
2739  *
2740  * Creation of a new node containing a CDATA block.
2741  * Returns a pointer to the new node object.
2742  */
2743 xmlNodePtr
xmlNewCDataBlock(xmlDocPtr doc,const xmlChar * content,int len)2744 xmlNewCDataBlock(xmlDocPtr doc, const xmlChar *content, int len) {
2745     xmlNodePtr cur;
2746 
2747     /*
2748      * Allocate a new node and fill the fields.
2749      */
2750     cur = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
2751     if (cur == NULL)
2752 	return(NULL);
2753     memset(cur, 0, sizeof(xmlNode));
2754     cur->type = XML_CDATA_SECTION_NODE;
2755     cur->doc = doc;
2756 
2757     if (content != NULL) {
2758 	cur->content = xmlStrndup(content, len);
2759         if (cur->content == NULL) {
2760             xmlFree(cur);
2761             return(NULL);
2762         }
2763     }
2764 
2765     if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
2766 	xmlRegisterNodeDefaultValue(cur);
2767     return(cur);
2768 }
2769 
2770 /**
2771  * xmlNewDocComment:
2772  * @doc:  the document
2773  * @content:  the comment content
2774  *
2775  * Creation of a new node containing a comment within a document.
2776  * Returns a pointer to the new node object.
2777  */
2778 xmlNodePtr
xmlNewDocComment(xmlDocPtr doc,const xmlChar * content)2779 xmlNewDocComment(xmlDocPtr doc, const xmlChar *content) {
2780     xmlNodePtr cur;
2781 
2782     cur = xmlNewComment(content);
2783     if (cur != NULL) cur->doc = doc;
2784     return(cur);
2785 }
2786 
_copyStringForNewDictIfNeeded(xmlDictPtr oldDict,xmlDictPtr newDict,const xmlChar * oldValue)2787 static const xmlChar *_copyStringForNewDictIfNeeded(xmlDictPtr oldDict, xmlDictPtr newDict, const xmlChar *oldValue) {
2788     const xmlChar *newValue = oldValue;
2789     if (oldValue) {
2790         int oldDictOwnsOldValue = oldDict && (xmlDictOwns(oldDict, oldValue) == 1);
2791         if (oldDictOwnsOldValue) {
2792             if (newDict)
2793                 newValue = xmlDictLookup(newDict, oldValue, -1);
2794             else
2795                 newValue = xmlStrdup(oldValue);
2796         }
2797     }
2798     return newValue;
2799 }
2800 
2801 /**
2802  * xmlSetTreeDoc:
2803  * @tree:  the top element
2804  * @doc:  the document
2805  *
2806  * update all nodes under the tree to point to the right document
2807  */
2808 void
xmlSetTreeDoc(xmlNodePtr tree,xmlDocPtr doc)2809 xmlSetTreeDoc(xmlNodePtr tree, xmlDocPtr doc) {
2810     xmlAttrPtr prop;
2811 
2812     if ((tree == NULL) || (tree->type == XML_NAMESPACE_DECL))
2813 	return;
2814     if (tree->doc != doc) {
2815         xmlDictPtr oldTreeDict = tree->doc ? tree->doc->dict : NULL;
2816         xmlDictPtr newDict = doc ? doc->dict : NULL;
2817 
2818 	if(tree->type == XML_ELEMENT_NODE) {
2819 	    prop = tree->properties;
2820 	    while (prop != NULL) {
2821                 if (prop->atype == XML_ATTRIBUTE_ID) {
2822                     xmlRemoveID(tree->doc, prop);
2823                 }
2824 
2825                 if (prop->doc != doc) {
2826                     xmlDictPtr oldPropDict = prop->doc ? prop->doc->dict : NULL;
2827                     /* TODO: malloc check */
2828                     prop->name = _copyStringForNewDictIfNeeded(oldPropDict, newDict, prop->name);
2829                     prop->doc = doc;
2830                 }
2831 		xmlSetListDoc(prop->children, doc);
2832 
2833                 /*
2834                  * TODO: ID attributes should be also added to the new
2835                  * document, but this breaks things like xmlReplaceNode.
2836                  * The underlying problem is that xmlRemoveID is only called
2837                  * if a node is destroyed, not if it's unlinked.
2838                  */
2839 #if 0
2840                 if (xmlIsID(doc, tree, prop)) {
2841                     xmlChar *idVal = xmlNodeListGetString(doc, prop->children,
2842                                                           1);
2843                     xmlAddID(NULL, doc, idVal, prop);
2844                 }
2845 #endif
2846 
2847 		prop = prop->next;
2848 	    }
2849 	}
2850         if (tree->type == XML_ENTITY_REF_NODE) {
2851             /*
2852              * Clear 'children' which points to the entity declaration
2853              * from the original document.
2854              */
2855             tree->children = NULL;
2856         } else if (tree->children != NULL) {
2857 	    xmlSetListDoc(tree->children, doc);
2858         }
2859 
2860         /* TODO: malloc check */
2861         tree->name = _copyStringForNewDictIfNeeded(oldTreeDict, newDict, tree->name);
2862         tree->content = (xmlChar *)_copyStringForNewDictIfNeeded(oldTreeDict, NULL, tree->content);
2863         /* FIXME: tree->ns should be updated as in xmlStaticCopyNode(). */
2864 	tree->doc = doc;
2865     }
2866 }
2867 
2868 /**
2869  * xmlSetListDoc:
2870  * @list:  the first element
2871  * @doc:  the document
2872  *
2873  * update all nodes in the list to point to the right document
2874  */
2875 void
xmlSetListDoc(xmlNodePtr list,xmlDocPtr doc)2876 xmlSetListDoc(xmlNodePtr list, xmlDocPtr doc) {
2877     xmlNodePtr cur;
2878 
2879     if ((list == NULL) || (list->type == XML_NAMESPACE_DECL))
2880 	return;
2881     cur = list;
2882     while (cur != NULL) {
2883 	if (cur->doc != doc)
2884 	    xmlSetTreeDoc(cur, doc);
2885 	cur = cur->next;
2886     }
2887 }
2888 
2889 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
2890 /**
2891  * xmlNewChild:
2892  * @parent:  the parent node
2893  * @ns:  a namespace if any
2894  * @name:  the name of the child
2895  * @content:  the XML content of the child if any.
2896  *
2897  * Creation of a new child element, added at the end of @parent children list.
2898  * @ns and @content parameters are optional (NULL). If @ns is NULL, the newly
2899  * created element inherits the namespace of @parent. If @content is non NULL,
2900  * a child list containing the TEXTs and ENTITY_REFs node will be created.
2901  * NOTE: @content is supposed to be a piece of XML CDATA, so it allows entity
2902  *       references. XML special chars must be escaped first by using
2903  *       xmlEncodeEntitiesReentrant(), or xmlNewTextChild() should be used.
2904  *
2905  * Returns a pointer to the new node object.
2906  */
2907 xmlNodePtr
xmlNewChild(xmlNodePtr parent,xmlNsPtr ns,const xmlChar * name,const xmlChar * content)2908 xmlNewChild(xmlNodePtr parent, xmlNsPtr ns,
2909             const xmlChar *name, const xmlChar *content) {
2910     xmlNodePtr cur, prev;
2911 
2912     if (parent == NULL) {
2913 	return(NULL);
2914     }
2915 
2916     if (name == NULL) {
2917 	return(NULL);
2918     }
2919 
2920     /*
2921      * Allocate a new node
2922      */
2923     if (parent->type == XML_ELEMENT_NODE) {
2924 	if (ns == NULL)
2925 	    cur = xmlNewDocNode(parent->doc, parent->ns, name, content);
2926 	else
2927 	    cur = xmlNewDocNode(parent->doc, ns, name, content);
2928     } else if ((parent->type == XML_DOCUMENT_NODE) ||
2929 	       (parent->type == XML_HTML_DOCUMENT_NODE)) {
2930 	if (ns == NULL)
2931 	    cur = xmlNewDocNode((xmlDocPtr) parent, NULL, name, content);
2932 	else
2933 	    cur = xmlNewDocNode((xmlDocPtr) parent, ns, name, content);
2934     } else if (parent->type == XML_DOCUMENT_FRAG_NODE) {
2935 	    cur = xmlNewDocNode( parent->doc, ns, name, content);
2936     } else {
2937 	return(NULL);
2938     }
2939     if (cur == NULL) return(NULL);
2940 
2941     /*
2942      * add the new element at the end of the children list.
2943      */
2944     cur->type = XML_ELEMENT_NODE;
2945     cur->parent = parent;
2946     cur->doc = parent->doc;
2947     if (parent->children == NULL) {
2948         parent->children = cur;
2949 	parent->last = cur;
2950     } else {
2951         prev = parent->last;
2952 	prev->next = cur;
2953 	cur->prev = prev;
2954 	parent->last = cur;
2955     }
2956 
2957     return(cur);
2958 }
2959 #endif /* LIBXML_TREE_ENABLED */
2960 
2961 /**
2962  * xmlAddPropSibling:
2963  * @prev:  the attribute to which @prop is added after
2964  * @cur:   the base attribute passed to calling function
2965  * @prop:  the new attribute
2966  *
2967  * Add a new attribute after @prev using @cur as base attribute.
2968  * When inserting before @cur, @prev is passed as @cur->prev.
2969  * When inserting after @cur, @prev is passed as @cur.
2970  * If an existing attribute is found it is destroyed prior to adding @prop.
2971  *
2972  * See the note regarding namespaces in xmlAddChild.
2973  *
2974  * Returns the attribute being inserted or NULL in case of error.
2975  */
2976 static xmlNodePtr
xmlAddPropSibling(xmlNodePtr prev,xmlNodePtr cur,xmlNodePtr prop)2977 xmlAddPropSibling(xmlNodePtr prev, xmlNodePtr cur, xmlNodePtr prop) {
2978 	xmlAttrPtr attr;
2979 
2980 	if ((cur == NULL) || (cur->type != XML_ATTRIBUTE_NODE) ||
2981 	    (prop == NULL) || (prop->type != XML_ATTRIBUTE_NODE) ||
2982 	    ((prev != NULL) && (prev->type != XML_ATTRIBUTE_NODE)))
2983 		return(NULL);
2984 
2985 	/* check if an attribute with the same name exists */
2986 	if (prop->ns == NULL)
2987 		attr = xmlHasNsProp(cur->parent, prop->name, NULL);
2988 	else
2989 		attr = xmlHasNsProp(cur->parent, prop->name, prop->ns->href);
2990 
2991 	if (prop->doc != cur->doc) {
2992 		xmlSetTreeDoc(prop, cur->doc);
2993 	}
2994 	prop->parent = cur->parent;
2995 	prop->prev = prev;
2996 	if (prev != NULL) {
2997 		prop->next = prev->next;
2998 		prev->next = prop;
2999 		if (prop->next)
3000 			prop->next->prev = prop;
3001 	} else {
3002 		prop->next = cur;
3003 		cur->prev = prop;
3004 	}
3005 	if (prop->prev == NULL && prop->parent != NULL)
3006 		prop->parent->properties = (xmlAttrPtr) prop;
3007 	if ((attr != NULL) && (attr->type != XML_ATTRIBUTE_DECL)) {
3008 		/* different instance, destroy it (attributes must be unique) */
3009 		xmlRemoveProp((xmlAttrPtr) attr);
3010 	}
3011 	return prop;
3012 }
3013 
3014 /**
3015  * xmlAddNextSibling:
3016  * @cur:  the child node
3017  * @elem:  the new node
3018  *
3019  * Add a new node @elem as the next sibling of @cur
3020  * If the new node was already inserted in a document it is
3021  * first unlinked from its existing context.
3022  * As a result of text merging @elem may be freed.
3023  * If the new node is ATTRIBUTE, it is added into properties instead of children.
3024  * If there is an attribute with equal name, it is first destroyed.
3025  *
3026  * See the note regarding namespaces in xmlAddChild.
3027  *
3028  * Returns the new node or NULL in case of error.
3029  */
3030 xmlNodePtr
xmlAddNextSibling(xmlNodePtr cur,xmlNodePtr elem)3031 xmlAddNextSibling(xmlNodePtr cur, xmlNodePtr elem) {
3032     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL)) {
3033 	return(NULL);
3034     }
3035     if ((elem == NULL) || (elem->type == XML_NAMESPACE_DECL)) {
3036 	return(NULL);
3037     }
3038 
3039     if (cur == elem) {
3040 	return(NULL);
3041     }
3042 
3043     xmlUnlinkNode(elem);
3044 
3045     if (elem->type == XML_TEXT_NODE) {
3046 	if (cur->type == XML_TEXT_NODE) {
3047 	    xmlNodeAddContent(cur, elem->content);
3048 	    xmlFreeNode(elem);
3049 	    return(cur);
3050 	}
3051 	if ((cur->next != NULL) && (cur->next->type == XML_TEXT_NODE) &&
3052             (cur->name == cur->next->name)) {
3053 	    xmlChar *tmp;
3054 
3055             /* TODO: malloc check */
3056 	    tmp = xmlStrdup(elem->content);
3057 	    tmp = xmlStrcat(tmp, cur->next->content);
3058 	    xmlNodeSetContent(cur->next, tmp);
3059 	    xmlFree(tmp);
3060 	    xmlFreeNode(elem);
3061 	    return(cur->next);
3062 	}
3063     } else if (elem->type == XML_ATTRIBUTE_NODE) {
3064 		return xmlAddPropSibling(cur, cur, elem);
3065     }
3066 
3067     if (elem->doc != cur->doc) {
3068 	xmlSetTreeDoc(elem, cur->doc);
3069     }
3070     elem->parent = cur->parent;
3071     elem->prev = cur;
3072     elem->next = cur->next;
3073     cur->next = elem;
3074     if (elem->next != NULL)
3075 	elem->next->prev = elem;
3076     if ((elem->parent != NULL) && (elem->parent->last == cur))
3077 	elem->parent->last = elem;
3078     return(elem);
3079 }
3080 
3081 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_HTML_ENABLED) || \
3082     defined(LIBXML_SCHEMAS_ENABLED) || defined(LIBXML_XINCLUDE_ENABLED)
3083 /**
3084  * xmlAddPrevSibling:
3085  * @cur:  the child node
3086  * @elem:  the new node
3087  *
3088  * Add a new node @elem as the previous sibling of @cur
3089  * merging adjacent TEXT nodes (@elem may be freed)
3090  * If the new node was already inserted in a document it is
3091  * first unlinked from its existing context.
3092  * If the new node is ATTRIBUTE, it is added into properties instead of children.
3093  * If there is an attribute with equal name, it is first destroyed.
3094  *
3095  * See the note regarding namespaces in xmlAddChild.
3096  *
3097  * Returns the new node or NULL in case of error.
3098  */
3099 xmlNodePtr
xmlAddPrevSibling(xmlNodePtr cur,xmlNodePtr elem)3100 xmlAddPrevSibling(xmlNodePtr cur, xmlNodePtr elem) {
3101     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL)) {
3102 	return(NULL);
3103     }
3104     if ((elem == NULL) || (elem->type == XML_NAMESPACE_DECL)) {
3105 	return(NULL);
3106     }
3107 
3108     if (cur == elem) {
3109 	return(NULL);
3110     }
3111 
3112     xmlUnlinkNode(elem);
3113 
3114     if (elem->type == XML_TEXT_NODE) {
3115 	if (cur->type == XML_TEXT_NODE) {
3116 	    xmlChar *tmp;
3117 
3118             /* TODO: malloc check */
3119 	    tmp = xmlStrdup(elem->content);
3120 	    tmp = xmlStrcat(tmp, cur->content);
3121 	    xmlNodeSetContent(cur, tmp);
3122 	    xmlFree(tmp);
3123 	    xmlFreeNode(elem);
3124 	    return(cur);
3125 	}
3126 	if ((cur->prev != NULL) && (cur->prev->type == XML_TEXT_NODE) &&
3127             (cur->name == cur->prev->name)) {
3128 	    xmlNodeAddContent(cur->prev, elem->content);
3129 	    xmlFreeNode(elem);
3130 	    return(cur->prev);
3131 	}
3132     } else if (elem->type == XML_ATTRIBUTE_NODE) {
3133 		return xmlAddPropSibling(cur->prev, cur, elem);
3134     }
3135 
3136     if (elem->doc != cur->doc) {
3137 	xmlSetTreeDoc(elem, cur->doc);
3138     }
3139     elem->parent = cur->parent;
3140     elem->next = cur;
3141     elem->prev = cur->prev;
3142     cur->prev = elem;
3143     if (elem->prev != NULL)
3144 	elem->prev->next = elem;
3145     if ((elem->parent != NULL) && (elem->parent->children == cur)) {
3146 		elem->parent->children = elem;
3147     }
3148     return(elem);
3149 }
3150 #endif /* LIBXML_TREE_ENABLED */
3151 
3152 /**
3153  * xmlAddSibling:
3154  * @cur:  the child node
3155  * @elem:  the new node
3156  *
3157  * Add a new element @elem to the list of siblings of @cur
3158  * merging adjacent TEXT nodes (@elem may be freed)
3159  * If the new element was already inserted in a document it is
3160  * first unlinked from its existing context.
3161  *
3162  * See the note regarding namespaces in xmlAddChild.
3163  *
3164  * Returns the new element or NULL in case of error.
3165  */
3166 xmlNodePtr
xmlAddSibling(xmlNodePtr cur,xmlNodePtr elem)3167 xmlAddSibling(xmlNodePtr cur, xmlNodePtr elem) {
3168     xmlNodePtr parent;
3169 
3170     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL)) {
3171 	return(NULL);
3172     }
3173 
3174     if ((elem == NULL) || (elem->type == XML_NAMESPACE_DECL)) {
3175 	return(NULL);
3176     }
3177 
3178     if (cur == elem) {
3179 	return(NULL);
3180     }
3181 
3182     /*
3183      * Constant time is we can rely on the ->parent->last to find
3184      * the last sibling.
3185      */
3186     if ((cur->type != XML_ATTRIBUTE_NODE) && (cur->parent != NULL) &&
3187 	(cur->parent->children != NULL) &&
3188 	(cur->parent->last != NULL) &&
3189 	(cur->parent->last->next == NULL)) {
3190 	cur = cur->parent->last;
3191     } else {
3192 	while (cur->next != NULL) cur = cur->next;
3193     }
3194 
3195     xmlUnlinkNode(elem);
3196 
3197     if ((cur->type == XML_TEXT_NODE) && (elem->type == XML_TEXT_NODE) &&
3198         (cur->name == elem->name)) {
3199 	xmlNodeAddContent(cur, elem->content);
3200 	xmlFreeNode(elem);
3201 	return(cur);
3202     } else if (elem->type == XML_ATTRIBUTE_NODE) {
3203 		return xmlAddPropSibling(cur, cur, elem);
3204     }
3205 
3206     if (elem->doc != cur->doc) {
3207 	xmlSetTreeDoc(elem, cur->doc);
3208     }
3209     parent = cur->parent;
3210     elem->prev = cur;
3211     elem->next = NULL;
3212     elem->parent = parent;
3213     cur->next = elem;
3214     if (parent != NULL)
3215 	parent->last = elem;
3216 
3217     return(elem);
3218 }
3219 
3220 /**
3221  * xmlAddChildList:
3222  * @parent:  the parent node
3223  * @cur:  the first node in the list
3224  *
3225  * Add a list of node at the end of the child list of the parent
3226  * merging adjacent TEXT nodes (@cur may be freed)
3227  *
3228  * See the note regarding namespaces in xmlAddChild.
3229  *
3230  * Returns the last child or NULL in case of error.
3231  */
3232 xmlNodePtr
xmlAddChildList(xmlNodePtr parent,xmlNodePtr cur)3233 xmlAddChildList(xmlNodePtr parent, xmlNodePtr cur) {
3234     xmlNodePtr prev;
3235 
3236     if ((parent == NULL) || (parent->type == XML_NAMESPACE_DECL)) {
3237 	return(NULL);
3238     }
3239 
3240     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL)) {
3241 	return(NULL);
3242     }
3243 
3244     if ((cur->doc != NULL) && (parent->doc != NULL) &&
3245         (cur->doc != parent->doc)) {
3246     }
3247 
3248     /*
3249      * add the first element at the end of the children list.
3250      */
3251 
3252     if (parent->children == NULL) {
3253         parent->children = cur;
3254     } else {
3255 	/*
3256 	 * If cur and parent->last both are TEXT nodes, then merge them.
3257 	 */
3258 	if ((cur->type == XML_TEXT_NODE) &&
3259 	    (parent->last->type == XML_TEXT_NODE) &&
3260 	    (cur->name == parent->last->name)) {
3261 	    xmlNodeAddContent(parent->last, cur->content);
3262 	    /*
3263 	     * if it's the only child, nothing more to be done.
3264 	     */
3265 	    if (cur->next == NULL) {
3266 		xmlFreeNode(cur);
3267 		return(parent->last);
3268 	    }
3269 	    prev = cur;
3270 	    cur = cur->next;
3271 	    xmlFreeNode(prev);
3272 	}
3273         prev = parent->last;
3274 	prev->next = cur;
3275 	cur->prev = prev;
3276     }
3277     while (cur->next != NULL) {
3278 	cur->parent = parent;
3279 	if (cur->doc != parent->doc) {
3280 	    xmlSetTreeDoc(cur, parent->doc);
3281 	}
3282         cur = cur->next;
3283     }
3284     cur->parent = parent;
3285     /* the parent may not be linked to a doc ! */
3286     if (cur->doc != parent->doc) {
3287         xmlSetTreeDoc(cur, parent->doc);
3288     }
3289     parent->last = cur;
3290 
3291     return(cur);
3292 }
3293 
3294 /**
3295  * xmlAddChild:
3296  * @parent:  the parent node
3297  * @cur:  the child node
3298  *
3299  * Add a new node to @parent, at the end of the child (or property) list
3300  * merging adjacent TEXT nodes (in which case @cur is freed)
3301  * If the new node is ATTRIBUTE, it is added into properties instead of children.
3302  * If there is an attribute with equal name, it is first destroyed.
3303  *
3304  * All tree manipulation functions can safely move nodes within a document.
3305  * But when moving nodes from one document to another, references to
3306  * namespaces in element or attribute nodes are NOT fixed. In this case,
3307  * you MUST call xmlReconciliateNs after the move operation to avoid
3308  * memory errors.
3309  *
3310  * Returns the child or NULL in case of error.
3311  */
3312 xmlNodePtr
xmlAddChild(xmlNodePtr parent,xmlNodePtr cur)3313 xmlAddChild(xmlNodePtr parent, xmlNodePtr cur) {
3314     xmlNodePtr prev;
3315 
3316     if ((parent == NULL) || (parent->type == XML_NAMESPACE_DECL)) {
3317 	return(NULL);
3318     }
3319 
3320     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL)) {
3321 	return(NULL);
3322     }
3323 
3324     if (parent == cur) {
3325 	return(NULL);
3326     }
3327     /*
3328      * If cur is a TEXT node, merge its content with adjacent TEXT nodes
3329      * cur is then freed.
3330      */
3331     if (cur->type == XML_TEXT_NODE) {
3332 	if ((parent->type == XML_TEXT_NODE) &&
3333 	    (parent->content != NULL) &&
3334 	    (parent->name == cur->name)) {
3335 	    if (xmlNodeAddContent(parent, cur->content) != 0) {
3336                 xmlFreeNode(cur);
3337                 return(NULL);
3338             }
3339 	    xmlFreeNode(cur);
3340 	    return(parent);
3341 	}
3342 	if ((parent->last != NULL) && (parent->last->type == XML_TEXT_NODE) &&
3343 	    (parent->last->name == cur->name) &&
3344 	    (parent->last != cur)) {
3345 	    if (xmlNodeAddContent(parent->last, cur->content) != 0) {
3346                 xmlFreeNode(cur);
3347                 return(NULL);
3348             }
3349 	    xmlFreeNode(cur);
3350 	    return(parent->last);
3351 	}
3352     }
3353 
3354     /*
3355      * add the new element at the end of the children list.
3356      */
3357     prev = cur->parent;
3358     cur->parent = parent;
3359     if (cur->doc != parent->doc) {
3360 	xmlSetTreeDoc(cur, parent->doc);
3361     }
3362     /* this check prevents a loop on tree-traversions if a developer
3363      * tries to add a node to its parent multiple times
3364      */
3365     if (prev == parent)
3366 	return(cur);
3367 
3368     /*
3369      * Coalescing
3370      */
3371     if ((parent->type == XML_TEXT_NODE) &&
3372 	(parent->content != NULL) &&
3373 	(parent != cur)) {
3374 	if (xmlNodeAddContent(parent, cur->content) != 0) {
3375             xmlFreeNode(cur);
3376             return(NULL);
3377         }
3378 	xmlFreeNode(cur);
3379 	return(parent);
3380     }
3381     if (cur->type == XML_ATTRIBUTE_NODE) {
3382 		if (parent->type != XML_ELEMENT_NODE)
3383 			return(NULL);
3384 	if (parent->properties != NULL) {
3385 	    /* check if an attribute with the same name exists */
3386 	    xmlAttrPtr lastattr;
3387 
3388 	    if (cur->ns == NULL)
3389 		lastattr = xmlHasNsProp(parent, cur->name, NULL);
3390 	    else
3391 		lastattr = xmlHasNsProp(parent, cur->name, cur->ns->href);
3392 	    if ((lastattr != NULL) && (lastattr != (xmlAttrPtr) cur) && (lastattr->type != XML_ATTRIBUTE_DECL)) {
3393 		/* different instance, destroy it (attributes must be unique) */
3394 			xmlUnlinkNode((xmlNodePtr) lastattr);
3395 		xmlFreeProp(lastattr);
3396 	    }
3397 		if (lastattr == (xmlAttrPtr) cur)
3398 			return(cur);
3399 
3400 	}
3401 	if (parent->properties == NULL) {
3402 	    parent->properties = (xmlAttrPtr) cur;
3403 	} else {
3404 	    /* find the end */
3405 	    xmlAttrPtr lastattr = parent->properties;
3406 	    while (lastattr->next != NULL) {
3407 		lastattr = lastattr->next;
3408 	    }
3409 	    lastattr->next = (xmlAttrPtr) cur;
3410 	    ((xmlAttrPtr) cur)->prev = lastattr;
3411 	}
3412     } else {
3413 	if (parent->children == NULL) {
3414 	    parent->children = cur;
3415 	    parent->last = cur;
3416 	} else {
3417 	    prev = parent->last;
3418 	    prev->next = cur;
3419 	    cur->prev = prev;
3420 	    parent->last = cur;
3421 	}
3422     }
3423     return(cur);
3424 }
3425 
3426 /**
3427  * xmlGetLastChild:
3428  * @parent:  the parent node
3429  *
3430  * Search the last child of a node.
3431  * Returns the last child or NULL if none.
3432  */
3433 xmlNodePtr
xmlGetLastChild(const xmlNode * parent)3434 xmlGetLastChild(const xmlNode *parent) {
3435     if ((parent == NULL) || (parent->type == XML_NAMESPACE_DECL)) {
3436 	return(NULL);
3437     }
3438     return(parent->last);
3439 }
3440 
3441 #ifdef LIBXML_TREE_ENABLED
3442 /*
3443  * 5 interfaces from DOM ElementTraversal
3444  */
3445 
3446 /**
3447  * xmlChildElementCount:
3448  * @parent: the parent node
3449  *
3450  * Finds the current number of child nodes of that element which are
3451  * element nodes.
3452  * Note the handling of entities references is different than in
3453  * the W3C DOM element traversal spec since we don't have back reference
3454  * from entities content to entities references.
3455  *
3456  * Returns the count of element child or 0 if not available
3457  */
3458 unsigned long
xmlChildElementCount(xmlNodePtr parent)3459 xmlChildElementCount(xmlNodePtr parent) {
3460     unsigned long ret = 0;
3461     xmlNodePtr cur = NULL;
3462 
3463     if (parent == NULL)
3464         return(0);
3465     switch (parent->type) {
3466         case XML_ELEMENT_NODE:
3467         case XML_ENTITY_NODE:
3468         case XML_DOCUMENT_NODE:
3469         case XML_DOCUMENT_FRAG_NODE:
3470         case XML_HTML_DOCUMENT_NODE:
3471             cur = parent->children;
3472             break;
3473         default:
3474             return(0);
3475     }
3476     while (cur != NULL) {
3477         if (cur->type == XML_ELEMENT_NODE)
3478             ret++;
3479         cur = cur->next;
3480     }
3481     return(ret);
3482 }
3483 
3484 /**
3485  * xmlFirstElementChild:
3486  * @parent: the parent node
3487  *
3488  * Finds the first child node of that element which is a Element node
3489  * Note the handling of entities references is different than in
3490  * the W3C DOM element traversal spec since we don't have back reference
3491  * from entities content to entities references.
3492  *
3493  * Returns the first element child or NULL if not available
3494  */
3495 xmlNodePtr
xmlFirstElementChild(xmlNodePtr parent)3496 xmlFirstElementChild(xmlNodePtr parent) {
3497     xmlNodePtr cur = NULL;
3498 
3499     if (parent == NULL)
3500         return(NULL);
3501     switch (parent->type) {
3502         case XML_ELEMENT_NODE:
3503         case XML_ENTITY_NODE:
3504         case XML_DOCUMENT_NODE:
3505         case XML_DOCUMENT_FRAG_NODE:
3506         case XML_HTML_DOCUMENT_NODE:
3507             cur = parent->children;
3508             break;
3509         default:
3510             return(NULL);
3511     }
3512     while (cur != NULL) {
3513         if (cur->type == XML_ELEMENT_NODE)
3514             return(cur);
3515         cur = cur->next;
3516     }
3517     return(NULL);
3518 }
3519 
3520 /**
3521  * xmlLastElementChild:
3522  * @parent: the parent node
3523  *
3524  * Finds the last child node of that element which is a Element node
3525  * Note the handling of entities references is different than in
3526  * the W3C DOM element traversal spec since we don't have back reference
3527  * from entities content to entities references.
3528  *
3529  * Returns the last element child or NULL if not available
3530  */
3531 xmlNodePtr
xmlLastElementChild(xmlNodePtr parent)3532 xmlLastElementChild(xmlNodePtr parent) {
3533     xmlNodePtr cur = NULL;
3534 
3535     if (parent == NULL)
3536         return(NULL);
3537     switch (parent->type) {
3538         case XML_ELEMENT_NODE:
3539         case XML_ENTITY_NODE:
3540         case XML_DOCUMENT_NODE:
3541         case XML_DOCUMENT_FRAG_NODE:
3542         case XML_HTML_DOCUMENT_NODE:
3543             cur = parent->last;
3544             break;
3545         default:
3546             return(NULL);
3547     }
3548     while (cur != NULL) {
3549         if (cur->type == XML_ELEMENT_NODE)
3550             return(cur);
3551         cur = cur->prev;
3552     }
3553     return(NULL);
3554 }
3555 
3556 /**
3557  * xmlPreviousElementSibling:
3558  * @node: the current node
3559  *
3560  * Finds the first closest previous sibling of the node which is an
3561  * element node.
3562  * Note the handling of entities references is different than in
3563  * the W3C DOM element traversal spec since we don't have back reference
3564  * from entities content to entities references.
3565  *
3566  * Returns the previous element sibling or NULL if not available
3567  */
3568 xmlNodePtr
xmlPreviousElementSibling(xmlNodePtr node)3569 xmlPreviousElementSibling(xmlNodePtr node) {
3570     if (node == NULL)
3571         return(NULL);
3572     switch (node->type) {
3573         case XML_ELEMENT_NODE:
3574         case XML_TEXT_NODE:
3575         case XML_CDATA_SECTION_NODE:
3576         case XML_ENTITY_REF_NODE:
3577         case XML_ENTITY_NODE:
3578         case XML_PI_NODE:
3579         case XML_COMMENT_NODE:
3580         case XML_XINCLUDE_START:
3581         case XML_XINCLUDE_END:
3582             node = node->prev;
3583             break;
3584         default:
3585             return(NULL);
3586     }
3587     while (node != NULL) {
3588         if (node->type == XML_ELEMENT_NODE)
3589             return(node);
3590         node = node->prev;
3591     }
3592     return(NULL);
3593 }
3594 
3595 /**
3596  * xmlNextElementSibling:
3597  * @node: the current node
3598  *
3599  * Finds the first closest next sibling of the node which is an
3600  * element node.
3601  * Note the handling of entities references is different than in
3602  * the W3C DOM element traversal spec since we don't have back reference
3603  * from entities content to entities references.
3604  *
3605  * Returns the next element sibling or NULL if not available
3606  */
3607 xmlNodePtr
xmlNextElementSibling(xmlNodePtr node)3608 xmlNextElementSibling(xmlNodePtr node) {
3609     if (node == NULL)
3610         return(NULL);
3611     switch (node->type) {
3612         case XML_ELEMENT_NODE:
3613         case XML_TEXT_NODE:
3614         case XML_CDATA_SECTION_NODE:
3615         case XML_ENTITY_REF_NODE:
3616         case XML_ENTITY_NODE:
3617         case XML_PI_NODE:
3618         case XML_COMMENT_NODE:
3619         case XML_DTD_NODE:
3620         case XML_XINCLUDE_START:
3621         case XML_XINCLUDE_END:
3622             node = node->next;
3623             break;
3624         default:
3625             return(NULL);
3626     }
3627     while (node != NULL) {
3628         if (node->type == XML_ELEMENT_NODE)
3629             return(node);
3630         node = node->next;
3631     }
3632     return(NULL);
3633 }
3634 
3635 #endif /* LIBXML_TREE_ENABLED */
3636 
3637 /**
3638  * xmlFreeNodeList:
3639  * @cur:  the first node in the list
3640  *
3641  * Free a node and all its siblings, this is a recursive behaviour, all
3642  * the children are freed too.
3643  */
3644 void
xmlFreeNodeList(xmlNodePtr cur)3645 xmlFreeNodeList(xmlNodePtr cur) {
3646     xmlNodePtr next;
3647     xmlNodePtr parent;
3648     xmlDictPtr dict = NULL;
3649     size_t depth = 0;
3650 
3651     if (cur == NULL) return;
3652     if (cur->type == XML_NAMESPACE_DECL) {
3653 	xmlFreeNsList((xmlNsPtr) cur);
3654 	return;
3655     }
3656     if (cur->doc != NULL) dict = cur->doc->dict;
3657     while (1) {
3658         while ((cur->children != NULL) &&
3659                (cur->type != XML_DOCUMENT_NODE) &&
3660                (cur->type != XML_HTML_DOCUMENT_NODE) &&
3661                (cur->type != XML_DTD_NODE) &&
3662                (cur->type != XML_ENTITY_REF_NODE)) {
3663             cur = cur->children;
3664             depth += 1;
3665         }
3666 
3667         next = cur->next;
3668         parent = cur->parent;
3669 	if ((cur->type == XML_DOCUMENT_NODE) ||
3670             (cur->type == XML_HTML_DOCUMENT_NODE)) {
3671             xmlFreeDoc((xmlDocPtr) cur);
3672         } else if (cur->type != XML_DTD_NODE) {
3673 
3674 	    if ((__xmlRegisterCallbacks) && (xmlDeregisterNodeDefaultValue))
3675 		xmlDeregisterNodeDefaultValue(cur);
3676 
3677 	    if (((cur->type == XML_ELEMENT_NODE) ||
3678 		 (cur->type == XML_XINCLUDE_START) ||
3679 		 (cur->type == XML_XINCLUDE_END)) &&
3680 		(cur->properties != NULL))
3681 		xmlFreePropList(cur->properties);
3682 	    if ((cur->type != XML_ELEMENT_NODE) &&
3683 		(cur->type != XML_XINCLUDE_START) &&
3684 		(cur->type != XML_XINCLUDE_END) &&
3685 		(cur->type != XML_ENTITY_REF_NODE) &&
3686 		(cur->content != (xmlChar *) &(cur->properties))) {
3687 		DICT_FREE(cur->content)
3688 	    }
3689 	    if (((cur->type == XML_ELEMENT_NODE) ||
3690 	         (cur->type == XML_XINCLUDE_START) ||
3691 		 (cur->type == XML_XINCLUDE_END)) &&
3692 		(cur->nsDef != NULL))
3693 		xmlFreeNsList(cur->nsDef);
3694 
3695 	    /*
3696 	     * When a node is a text node or a comment, it uses a global static
3697 	     * variable for the name of the node.
3698 	     * Otherwise the node name might come from the document's
3699 	     * dictionary
3700 	     */
3701 	    if ((cur->name != NULL) &&
3702 		(cur->type != XML_TEXT_NODE) &&
3703 		(cur->type != XML_COMMENT_NODE))
3704 		DICT_FREE(cur->name)
3705 	    xmlFree(cur);
3706 	}
3707 
3708         if (next != NULL) {
3709 	    cur = next;
3710         } else {
3711             if ((depth == 0) || (parent == NULL))
3712                 break;
3713             depth -= 1;
3714             cur = parent;
3715             cur->children = NULL;
3716         }
3717     }
3718 }
3719 
3720 /**
3721  * xmlFreeNode:
3722  * @cur:  the node
3723  *
3724  * Free a node, this is a recursive behaviour, all the children are freed too.
3725  * This doesn't unlink the child from the list, use xmlUnlinkNode() first.
3726  */
3727 void
xmlFreeNode(xmlNodePtr cur)3728 xmlFreeNode(xmlNodePtr cur) {
3729     xmlDictPtr dict = NULL;
3730 
3731     if (cur == NULL) return;
3732 
3733     /* use xmlFreeDtd for DTD nodes */
3734     if (cur->type == XML_DTD_NODE) {
3735 	xmlFreeDtd((xmlDtdPtr) cur);
3736 	return;
3737     }
3738     if (cur->type == XML_NAMESPACE_DECL) {
3739 	xmlFreeNs((xmlNsPtr) cur);
3740         return;
3741     }
3742     if (cur->type == XML_ATTRIBUTE_NODE) {
3743 	xmlFreeProp((xmlAttrPtr) cur);
3744 	return;
3745     }
3746 
3747     if ((__xmlRegisterCallbacks) && (xmlDeregisterNodeDefaultValue))
3748 	xmlDeregisterNodeDefaultValue(cur);
3749 
3750     if (cur->doc != NULL) dict = cur->doc->dict;
3751 
3752     if (cur->type == XML_ENTITY_DECL) {
3753         xmlEntityPtr ent = (xmlEntityPtr) cur;
3754 	DICT_FREE(ent->SystemID);
3755 	DICT_FREE(ent->ExternalID);
3756     }
3757     if ((cur->children != NULL) &&
3758 	(cur->type != XML_ENTITY_REF_NODE))
3759 	xmlFreeNodeList(cur->children);
3760 
3761     if ((cur->type == XML_ELEMENT_NODE) ||
3762         (cur->type == XML_XINCLUDE_START) ||
3763         (cur->type == XML_XINCLUDE_END)) {
3764         if (cur->properties != NULL)
3765             xmlFreePropList(cur->properties);
3766         if (cur->nsDef != NULL)
3767             xmlFreeNsList(cur->nsDef);
3768     } else if ((cur->content != NULL) &&
3769                (cur->type != XML_ENTITY_REF_NODE) &&
3770                (cur->content != (xmlChar *) &(cur->properties))) {
3771         DICT_FREE(cur->content)
3772     }
3773 
3774     /*
3775      * When a node is a text node or a comment, it uses a global static
3776      * variable for the name of the node.
3777      * Otherwise the node name might come from the document's dictionary
3778      */
3779     if ((cur->name != NULL) &&
3780         (cur->type != XML_TEXT_NODE) &&
3781         (cur->type != XML_COMMENT_NODE))
3782 	DICT_FREE(cur->name)
3783 
3784     xmlFree(cur);
3785 }
3786 
3787 /**
3788  * xmlUnlinkNode:
3789  * @cur:  the node
3790  *
3791  * Unlink a node from it's current context, the node is not freed
3792  * If one need to free the node, use xmlFreeNode() routine after the
3793  * unlink to discard it.
3794  * Note that namespace nodes can't be unlinked as they do not have
3795  * pointer to their parent.
3796  */
3797 void
xmlUnlinkNode(xmlNodePtr cur)3798 xmlUnlinkNode(xmlNodePtr cur) {
3799     if (cur == NULL) {
3800 	return;
3801     }
3802     if (cur->type == XML_NAMESPACE_DECL)
3803         return;
3804     if (cur->type == XML_DTD_NODE) {
3805 	xmlDocPtr doc;
3806 	doc = cur->doc;
3807 	if (doc != NULL) {
3808 	    if (doc->intSubset == (xmlDtdPtr) cur)
3809 		doc->intSubset = NULL;
3810 	    if (doc->extSubset == (xmlDtdPtr) cur)
3811 		doc->extSubset = NULL;
3812 	}
3813     }
3814     if (cur->type == XML_ENTITY_DECL) {
3815         xmlDocPtr doc;
3816 	doc = cur->doc;
3817 	if (doc != NULL) {
3818 	    if (doc->intSubset != NULL) {
3819 	        if (xmlHashLookup(doc->intSubset->entities, cur->name) == cur)
3820 		    xmlHashRemoveEntry(doc->intSubset->entities, cur->name,
3821 		                       NULL);
3822 	        if (xmlHashLookup(doc->intSubset->pentities, cur->name) == cur)
3823 		    xmlHashRemoveEntry(doc->intSubset->pentities, cur->name,
3824 		                       NULL);
3825 	    }
3826 	    if (doc->extSubset != NULL) {
3827 	        if (xmlHashLookup(doc->extSubset->entities, cur->name) == cur)
3828 		    xmlHashRemoveEntry(doc->extSubset->entities, cur->name,
3829 		                       NULL);
3830 	        if (xmlHashLookup(doc->extSubset->pentities, cur->name) == cur)
3831 		    xmlHashRemoveEntry(doc->extSubset->pentities, cur->name,
3832 		                       NULL);
3833 	    }
3834 	}
3835     }
3836     if (cur->parent != NULL) {
3837 	xmlNodePtr parent;
3838 	parent = cur->parent;
3839 	if (cur->type == XML_ATTRIBUTE_NODE) {
3840 	    if (parent->properties == (xmlAttrPtr) cur)
3841 		parent->properties = ((xmlAttrPtr) cur)->next;
3842 	} else {
3843 	    if (parent->children == cur)
3844 		parent->children = cur->next;
3845 	    if (parent->last == cur)
3846 		parent->last = cur->prev;
3847 	}
3848 	cur->parent = NULL;
3849     }
3850     if (cur->next != NULL)
3851         cur->next->prev = cur->prev;
3852     if (cur->prev != NULL)
3853         cur->prev->next = cur->next;
3854     cur->next = cur->prev = NULL;
3855 }
3856 
3857 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_WRITER_ENABLED)
3858 /**
3859  * xmlReplaceNode:
3860  * @old:  the old node
3861  * @cur:  the node
3862  *
3863  * Unlink the old node from its current context, prune the new one
3864  * at the same place. If @cur was already inserted in a document it is
3865  * first unlinked from its existing context.
3866  *
3867  * See the note regarding namespaces in xmlAddChild.
3868  *
3869  * Returns the @old node
3870  */
3871 xmlNodePtr
xmlReplaceNode(xmlNodePtr old,xmlNodePtr cur)3872 xmlReplaceNode(xmlNodePtr old, xmlNodePtr cur) {
3873     if (old == cur) return(NULL);
3874     if ((old == NULL) || (old->type == XML_NAMESPACE_DECL) ||
3875         (old->parent == NULL)) {
3876 	return(NULL);
3877     }
3878     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL)) {
3879 	xmlUnlinkNode(old);
3880 	return(old);
3881     }
3882     if (cur == old) {
3883 	return(old);
3884     }
3885     if ((old->type==XML_ATTRIBUTE_NODE) && (cur->type!=XML_ATTRIBUTE_NODE)) {
3886 	return(old);
3887     }
3888     if ((cur->type==XML_ATTRIBUTE_NODE) && (old->type!=XML_ATTRIBUTE_NODE)) {
3889 	return(old);
3890     }
3891     xmlUnlinkNode(cur);
3892     xmlSetTreeDoc(cur, old->doc);
3893     cur->parent = old->parent;
3894     cur->next = old->next;
3895     if (cur->next != NULL)
3896 	cur->next->prev = cur;
3897     cur->prev = old->prev;
3898     if (cur->prev != NULL)
3899 	cur->prev->next = cur;
3900     if (cur->parent != NULL) {
3901 	if (cur->type == XML_ATTRIBUTE_NODE) {
3902 	    if (cur->parent->properties == (xmlAttrPtr)old)
3903 		cur->parent->properties = ((xmlAttrPtr) cur);
3904 	} else {
3905 	    if (cur->parent->children == old)
3906 		cur->parent->children = cur;
3907 	    if (cur->parent->last == old)
3908 		cur->parent->last = cur;
3909 	}
3910     }
3911     old->next = old->prev = NULL;
3912     old->parent = NULL;
3913     return(old);
3914 }
3915 #endif /* LIBXML_TREE_ENABLED */
3916 
3917 /************************************************************************
3918  *									*
3919  *		Copy operations						*
3920  *									*
3921  ************************************************************************/
3922 
3923 /**
3924  * xmlCopyNamespace:
3925  * @cur:  the namespace
3926  *
3927  * Do a copy of the namespace.
3928  *
3929  * Returns: a new #xmlNsPtr, or NULL in case of error.
3930  */
3931 xmlNsPtr
xmlCopyNamespace(xmlNsPtr cur)3932 xmlCopyNamespace(xmlNsPtr cur) {
3933     xmlNsPtr ret;
3934 
3935     if (cur == NULL) return(NULL);
3936     switch (cur->type) {
3937 	case XML_LOCAL_NAMESPACE:
3938 	    ret = xmlNewNs(NULL, cur->href, cur->prefix);
3939 	    break;
3940 	default:
3941 	    return(NULL);
3942     }
3943     return(ret);
3944 }
3945 
3946 /**
3947  * xmlCopyNamespaceList:
3948  * @cur:  the first namespace
3949  *
3950  * Do a copy of an namespace list.
3951  *
3952  * Returns: a new #xmlNsPtr, or NULL in case of error.
3953  */
3954 xmlNsPtr
xmlCopyNamespaceList(xmlNsPtr cur)3955 xmlCopyNamespaceList(xmlNsPtr cur) {
3956     xmlNsPtr ret = NULL;
3957     xmlNsPtr p = NULL,q;
3958 
3959     while (cur != NULL) {
3960         q = xmlCopyNamespace(cur);
3961         if (q == NULL) {
3962             xmlFreeNsList(ret);
3963             return(NULL);
3964         }
3965 	if (p == NULL) {
3966 	    ret = p = q;
3967 	} else {
3968 	    p->next = q;
3969 	    p = q;
3970 	}
3971 	cur = cur->next;
3972     }
3973     return(ret);
3974 }
3975 
3976 static xmlAttrPtr
xmlCopyPropInternal(xmlDocPtr doc,xmlNodePtr target,xmlAttrPtr cur)3977 xmlCopyPropInternal(xmlDocPtr doc, xmlNodePtr target, xmlAttrPtr cur) {
3978     xmlAttrPtr ret = NULL;
3979 
3980     if (cur == NULL) return(NULL);
3981     if ((target != NULL) && (target->type != XML_ELEMENT_NODE))
3982         return(NULL);
3983     if (target != NULL)
3984 	ret = xmlNewDocProp(target->doc, cur->name, NULL);
3985     else if (doc != NULL)
3986 	ret = xmlNewDocProp(doc, cur->name, NULL);
3987     else if (cur->parent != NULL)
3988 	ret = xmlNewDocProp(cur->parent->doc, cur->name, NULL);
3989     else if (cur->children != NULL)
3990 	ret = xmlNewDocProp(cur->children->doc, cur->name, NULL);
3991     else
3992 	ret = xmlNewDocProp(NULL, cur->name, NULL);
3993     if (ret == NULL) return(NULL);
3994     ret->parent = target;
3995 
3996     if ((cur->ns != NULL) && (target != NULL)) {
3997       xmlNsPtr ns;
3998 
3999       ns = xmlSearchNs(target->doc, target, cur->ns->prefix);
4000       if (ns == NULL) {
4001         /*
4002          * Humm, we are copying an element whose namespace is defined
4003          * out of the new tree scope. Search it in the original tree
4004          * and add it at the top of the new tree
4005          */
4006         ns = xmlSearchNs(cur->doc, cur->parent, cur->ns->prefix);
4007         if (ns != NULL) {
4008           xmlNodePtr root = target;
4009           xmlNodePtr pred = NULL;
4010 
4011           while (root->parent != NULL) {
4012             pred = root;
4013             root = root->parent;
4014           }
4015           if (root == (xmlNodePtr) target->doc) {
4016             /* correct possibly cycling above the document elt */
4017             root = pred;
4018           }
4019           ret->ns = xmlNewNs(root, ns->href, ns->prefix);
4020           if (ret->ns == NULL)
4021               goto error;
4022         }
4023       } else {
4024         /*
4025          * we have to find something appropriate here since
4026          * we can't be sure, that the namespace we found is identified
4027          * by the prefix
4028          */
4029         if (xmlStrEqual(ns->href, cur->ns->href)) {
4030           /* this is the nice case */
4031           ret->ns = ns;
4032         } else {
4033           /*
4034            * we are in trouble: we need a new reconciled namespace.
4035            * This is expensive
4036            */
4037           ret->ns = xmlNewReconciledNs(target->doc, target, cur->ns);
4038           if (ret->ns == NULL)
4039               goto error;
4040         }
4041       }
4042 
4043     } else
4044         ret->ns = NULL;
4045 
4046     if (cur->children != NULL) {
4047 	xmlNodePtr tmp;
4048 
4049 	ret->children = xmlStaticCopyNodeList(cur->children, ret->doc, (xmlNodePtr) ret);
4050         if (ret->children == NULL)
4051             goto error;
4052 	ret->last = NULL;
4053 	tmp = ret->children;
4054 	while (tmp != NULL) {
4055 	    /* tmp->parent = (xmlNodePtr)ret; */
4056 	    if (tmp->next == NULL)
4057 	        ret->last = tmp;
4058 	    tmp = tmp->next;
4059 	}
4060     }
4061     /*
4062      * Try to handle IDs
4063      */
4064     if ((target != NULL) && (cur != NULL) &&
4065 	(target->doc != NULL) && (cur->doc != NULL) &&
4066 	(cur->doc->ids != NULL) &&
4067         (cur->parent != NULL) &&
4068         (cur->children != NULL)) {
4069         int res = xmlIsID(cur->doc, cur->parent, cur);
4070 
4071         if (res < 0)
4072             goto error;
4073 	if (res != 0) {
4074 	    xmlChar *id;
4075 
4076 	    id = xmlNodeListGetString(cur->doc, cur->children, 1);
4077 	    if (id == NULL)
4078                 goto error;
4079             res = xmlAddIDSafe(target->doc, id, ret, 0, NULL);
4080 	    xmlFree(id);
4081             if (res < 0)
4082                 goto error;
4083 	}
4084     }
4085     return(ret);
4086 
4087 error:
4088     xmlFreeProp(ret);
4089     return(NULL);
4090 }
4091 
4092 /**
4093  * xmlCopyProp:
4094  * @target:  the element where the attribute will be grafted
4095  * @cur:  the attribute
4096  *
4097  * Do a copy of the attribute.
4098  *
4099  * Returns: a new #xmlAttrPtr, or NULL in case of error.
4100  */
4101 xmlAttrPtr
xmlCopyProp(xmlNodePtr target,xmlAttrPtr cur)4102 xmlCopyProp(xmlNodePtr target, xmlAttrPtr cur) {
4103 	return xmlCopyPropInternal(NULL, target, cur);
4104 }
4105 
4106 /**
4107  * xmlCopyPropList:
4108  * @target:  the element where the attributes will be grafted
4109  * @cur:  the first attribute
4110  *
4111  * Do a copy of an attribute list.
4112  *
4113  * Returns: a new #xmlAttrPtr, or NULL in case of error.
4114  */
4115 xmlAttrPtr
xmlCopyPropList(xmlNodePtr target,xmlAttrPtr cur)4116 xmlCopyPropList(xmlNodePtr target, xmlAttrPtr cur) {
4117     xmlAttrPtr ret = NULL;
4118     xmlAttrPtr p = NULL,q;
4119 
4120     if ((target != NULL) && (target->type != XML_ELEMENT_NODE))
4121         return(NULL);
4122     while (cur != NULL) {
4123         q = xmlCopyProp(target, cur);
4124 	if (q == NULL) {
4125             xmlFreePropList(ret);
4126 	    return(NULL);
4127         }
4128 	if (p == NULL) {
4129 	    ret = p = q;
4130 	} else {
4131 	    p->next = q;
4132 	    q->prev = p;
4133 	    p = q;
4134 	}
4135 	cur = cur->next;
4136     }
4137     return(ret);
4138 }
4139 
4140 /*
4141  * NOTE about the CopyNode operations !
4142  *
4143  * They are split into external and internal parts for one
4144  * tricky reason: namespaces. Doing a direct copy of a node
4145  * say RPM:Copyright without changing the namespace pointer to
4146  * something else can produce stale links. One way to do it is
4147  * to keep a reference counter but this doesn't work as soon
4148  * as one moves the element or the subtree out of the scope of
4149  * the existing namespace. The actual solution seems to be to add
4150  * a copy of the namespace at the top of the copied tree if
4151  * not available in the subtree.
4152  * Hence two functions, the public front-end call the inner ones
4153  * The argument "recursive" normally indicates a recursive copy
4154  * of the node with values 0 (no) and 1 (yes).  For XInclude,
4155  * however, we allow a value of 2 to indicate copy properties and
4156  * namespace info, but don't recurse on children.
4157  */
4158 
4159 xmlNodePtr
xmlStaticCopyNode(xmlNodePtr node,xmlDocPtr doc,xmlNodePtr parent,int extended)4160 xmlStaticCopyNode(xmlNodePtr node, xmlDocPtr doc, xmlNodePtr parent,
4161                   int extended) {
4162     xmlNodePtr ret;
4163 
4164     if (node == NULL) return(NULL);
4165     switch (node->type) {
4166         case XML_TEXT_NODE:
4167         case XML_CDATA_SECTION_NODE:
4168         case XML_ELEMENT_NODE:
4169         case XML_DOCUMENT_FRAG_NODE:
4170         case XML_ENTITY_REF_NODE:
4171         case XML_ENTITY_NODE:
4172         case XML_PI_NODE:
4173         case XML_COMMENT_NODE:
4174         case XML_XINCLUDE_START:
4175         case XML_XINCLUDE_END:
4176 	    break;
4177         case XML_ATTRIBUTE_NODE:
4178 		return((xmlNodePtr) xmlCopyPropInternal(doc, parent, (xmlAttrPtr) node));
4179         case XML_NAMESPACE_DECL:
4180 	    return((xmlNodePtr) xmlCopyNamespaceList((xmlNsPtr) node));
4181 
4182         case XML_DOCUMENT_NODE:
4183         case XML_HTML_DOCUMENT_NODE:
4184 #ifdef LIBXML_TREE_ENABLED
4185 	    return((xmlNodePtr) xmlCopyDoc((xmlDocPtr) node, extended));
4186 #endif /* LIBXML_TREE_ENABLED */
4187         case XML_DOCUMENT_TYPE_NODE:
4188         case XML_NOTATION_NODE:
4189         case XML_DTD_NODE:
4190         case XML_ELEMENT_DECL:
4191         case XML_ATTRIBUTE_DECL:
4192         case XML_ENTITY_DECL:
4193             return(NULL);
4194     }
4195 
4196     /*
4197      * Allocate a new node and fill the fields.
4198      */
4199     ret = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
4200     if (ret == NULL)
4201 	return(NULL);
4202     memset(ret, 0, sizeof(xmlNode));
4203     ret->type = node->type;
4204 
4205     ret->doc = doc;
4206     ret->parent = parent;
4207     if (node->name == xmlStringText)
4208 	ret->name = xmlStringText;
4209     else if (node->name == xmlStringTextNoenc)
4210 	ret->name = xmlStringTextNoenc;
4211     else if (node->name == xmlStringComment)
4212 	ret->name = xmlStringComment;
4213     else if (node->name != NULL) {
4214         if ((doc != NULL) && (doc->dict != NULL))
4215 	    ret->name = xmlDictLookup(doc->dict, node->name, -1);
4216 	else
4217 	    ret->name = xmlStrdup(node->name);
4218         if (ret->name == NULL)
4219             goto error;
4220     }
4221     if ((node->type != XML_ELEMENT_NODE) &&
4222 	(node->content != NULL) &&
4223 	(node->type != XML_ENTITY_REF_NODE) &&
4224 	(node->type != XML_XINCLUDE_END) &&
4225 	(node->type != XML_XINCLUDE_START)) {
4226 	ret->content = xmlStrdup(node->content);
4227         if (ret->content == NULL)
4228             goto error;
4229     }else{
4230       if (node->type == XML_ELEMENT_NODE)
4231         ret->line = node->line;
4232     }
4233     if (parent != NULL) {
4234 	xmlNodePtr tmp;
4235 
4236 	/*
4237 	 * this is a tricky part for the node register thing:
4238 	 * in case ret does get coalesced in xmlAddChild
4239 	 * the deregister-node callback is called; so we register ret now already
4240 	 */
4241 	if ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue))
4242 	    xmlRegisterNodeDefaultValue((xmlNodePtr)ret);
4243 
4244         /*
4245          * Note that since ret->parent is already set, xmlAddChild will
4246          * return early and not actually insert the node. It will only
4247          * coalesce text nodes and unnecessarily call xmlSetTreeDoc.
4248          * Assuming that the subtree to be copied always has its text
4249          * nodes coalesced, the somewhat confusing call to xmlAddChild
4250          * could be removed.
4251          */
4252         tmp = xmlAddChild(parent, ret);
4253 	/* node could have coalesced */
4254 	if (tmp != ret)
4255 	    return(tmp);
4256     }
4257 
4258     if (!extended)
4259 	goto out;
4260     if (((node->type == XML_ELEMENT_NODE) ||
4261          (node->type == XML_XINCLUDE_START)) && (node->nsDef != NULL)) {
4262         ret->nsDef = xmlCopyNamespaceList(node->nsDef);
4263         if (ret->nsDef == NULL)
4264             goto error;
4265     }
4266 
4267     if ((node->type == XML_ELEMENT_NODE) && (node->ns != NULL)) {
4268         xmlNsPtr ns;
4269 
4270 	ns = xmlSearchNs(doc, ret, node->ns->prefix);
4271 	if (ns == NULL) {
4272 	    /*
4273 	     * Humm, we are copying an element whose namespace is defined
4274 	     * out of the new tree scope. Search it in the original tree
4275 	     * and add it at the top of the new tree.
4276              *
4277              * TODO: Searching the original tree seems unnecessary. We
4278              * already have a namespace URI.
4279 	     */
4280 	    ns = xmlSearchNs(node->doc, node, node->ns->prefix);
4281 	    if (ns != NULL) {
4282 	        xmlNodePtr root = ret;
4283 
4284 		while (root->parent != NULL) root = root->parent;
4285 		ret->ns = xmlNewNs(root, ns->href, ns->prefix);
4286             } else {
4287                 ret->ns = xmlNewReconciledNs(doc, ret, node->ns);
4288 	    }
4289             if (ret->ns == NULL)
4290                 goto error;
4291 	} else {
4292 	    /*
4293 	     * reference the existing namespace definition in our own tree.
4294 	     */
4295 	    ret->ns = ns;
4296 	}
4297     }
4298     if ((node->type == XML_ELEMENT_NODE) && (node->properties != NULL)) {
4299         ret->properties = xmlCopyPropList(ret, node->properties);
4300         if (ret->properties == NULL)
4301             goto error;
4302     }
4303     if (node->type == XML_ENTITY_REF_NODE) {
4304 	if ((doc == NULL) || (node->doc != doc)) {
4305 	    /*
4306 	     * The copied node will go into a separate document, so
4307 	     * to avoid dangling references to the ENTITY_DECL node
4308 	     * we cannot keep the reference. Try to find it in the
4309 	     * target document.
4310 	     */
4311 	    ret->children = (xmlNodePtr) xmlGetDocEntity(doc, ret->name);
4312 	} else {
4313             ret->children = node->children;
4314 	}
4315 	ret->last = ret->children;
4316     } else if ((node->children != NULL) && (extended != 2)) {
4317         xmlNodePtr cur, insert;
4318 
4319         cur = node->children;
4320         insert = ret;
4321         while (cur != NULL) {
4322             xmlNodePtr copy = xmlStaticCopyNode(cur, doc, insert, 2);
4323             if (copy == NULL)
4324                 goto error;
4325 
4326             /* Check for coalesced text nodes */
4327             if (insert->last != copy) {
4328                 if (insert->last == NULL) {
4329                     insert->children = copy;
4330                 } else {
4331                     copy->prev = insert->last;
4332                     insert->last->next = copy;
4333                 }
4334                 insert->last = copy;
4335             }
4336 
4337             if ((cur->type != XML_ENTITY_REF_NODE) &&
4338                 (cur->children != NULL)) {
4339                 cur = cur->children;
4340                 insert = copy;
4341                 continue;
4342             }
4343 
4344             while (1) {
4345                 if (cur->next != NULL) {
4346                     cur = cur->next;
4347                     break;
4348                 }
4349 
4350                 cur = cur->parent;
4351                 insert = insert->parent;
4352                 if (cur == node) {
4353                     cur = NULL;
4354                     break;
4355                 }
4356             }
4357         }
4358     }
4359 
4360 out:
4361     /* if parent != NULL we already registered the node above */
4362     if ((parent == NULL) &&
4363         ((__xmlRegisterCallbacks) && (xmlRegisterNodeDefaultValue)))
4364 	xmlRegisterNodeDefaultValue((xmlNodePtr)ret);
4365     return(ret);
4366 
4367 error:
4368     xmlFreeNode(ret);
4369     return(NULL);
4370 }
4371 
4372 xmlNodePtr
xmlStaticCopyNodeList(xmlNodePtr node,xmlDocPtr doc,xmlNodePtr parent)4373 xmlStaticCopyNodeList(xmlNodePtr node, xmlDocPtr doc, xmlNodePtr parent) {
4374     xmlNodePtr ret = NULL;
4375     xmlNodePtr p = NULL,q;
4376     xmlDtdPtr newSubset = NULL;
4377     int linkedSubset = 0;
4378 
4379     while (node != NULL) {
4380 #ifdef LIBXML_TREE_ENABLED
4381 	if (node->type == XML_DTD_NODE ) {
4382 	    if (doc == NULL) {
4383 		node = node->next;
4384 		continue;
4385 	    }
4386 	    if ((doc->intSubset == NULL) && (newSubset == NULL)) {
4387 		q = (xmlNodePtr) xmlCopyDtd( (xmlDtdPtr) node );
4388 		if (q == NULL) goto error;
4389 		q->doc = doc;
4390 		q->parent = parent;
4391 		newSubset = (xmlDtdPtr) q;
4392 		xmlAddChild(parent, q);
4393 	    } else {
4394                 linkedSubset = 1;
4395 		q = (xmlNodePtr) doc->intSubset;
4396 		xmlAddChild(parent, q);
4397 	    }
4398 	} else
4399 #endif /* LIBXML_TREE_ENABLED */
4400 	    q = xmlStaticCopyNode(node, doc, parent, 1);
4401 	if (q == NULL) goto error;
4402 	if (ret == NULL) {
4403 	    q->prev = NULL;
4404 	    ret = p = q;
4405 	} else if (p != q) {
4406 	/* the test is required if xmlStaticCopyNode coalesced 2 text nodes */
4407 	    p->next = q;
4408 	    q->prev = p;
4409 	    p = q;
4410 	}
4411 	node = node->next;
4412     }
4413     if ((doc != NULL) && (newSubset != NULL))
4414         doc->intSubset = newSubset;
4415     return(ret);
4416 error:
4417     xmlFreeNodeList(ret);
4418     if (linkedSubset != 0) {
4419         doc->intSubset->next = NULL;
4420         doc->intSubset->prev = NULL;
4421     }
4422     return(NULL);
4423 }
4424 
4425 /**
4426  * xmlCopyNode:
4427  * @node:  the node
4428  * @extended:   if 1 do a recursive copy (properties, namespaces and children
4429  *			when applicable)
4430  *		if 2 copy properties and namespaces (when applicable)
4431  *
4432  * Do a copy of the node.
4433  *
4434  * Returns: a new #xmlNodePtr, or NULL in case of error.
4435  */
4436 xmlNodePtr
xmlCopyNode(xmlNodePtr node,int extended)4437 xmlCopyNode(xmlNodePtr node, int extended) {
4438     xmlNodePtr ret;
4439 
4440     ret = xmlStaticCopyNode(node, NULL, NULL, extended);
4441     return(ret);
4442 }
4443 
4444 /**
4445  * xmlDocCopyNode:
4446  * @node:  the node
4447  * @doc:  the document
4448  * @extended:   if 1 do a recursive copy (properties, namespaces and children
4449  *			when applicable)
4450  *		if 2 copy properties and namespaces (when applicable)
4451  *
4452  * Do a copy of the node to a given document.
4453  *
4454  * Returns: a new #xmlNodePtr, or NULL in case of error.
4455  */
4456 xmlNodePtr
xmlDocCopyNode(xmlNodePtr node,xmlDocPtr doc,int extended)4457 xmlDocCopyNode(xmlNodePtr node, xmlDocPtr doc, int extended) {
4458     xmlNodePtr ret;
4459 
4460     ret = xmlStaticCopyNode(node, doc, NULL, extended);
4461     return(ret);
4462 }
4463 
4464 /**
4465  * xmlDocCopyNodeList:
4466  * @doc: the target document
4467  * @node:  the first node in the list.
4468  *
4469  * Do a recursive copy of the node list.
4470  *
4471  * Returns: a new #xmlNodePtr, or NULL in case of error.
4472  */
xmlDocCopyNodeList(xmlDocPtr doc,xmlNodePtr node)4473 xmlNodePtr xmlDocCopyNodeList(xmlDocPtr doc, xmlNodePtr node) {
4474     xmlNodePtr ret = xmlStaticCopyNodeList(node, doc, NULL);
4475     return(ret);
4476 }
4477 
4478 /**
4479  * xmlCopyNodeList:
4480  * @node:  the first node in the list.
4481  *
4482  * Do a recursive copy of the node list.
4483  * Use xmlDocCopyNodeList() if possible to ensure string interning.
4484  *
4485  * Returns: a new #xmlNodePtr, or NULL in case of error.
4486  */
xmlCopyNodeList(xmlNodePtr node)4487 xmlNodePtr xmlCopyNodeList(xmlNodePtr node) {
4488     xmlNodePtr ret = xmlStaticCopyNodeList(node, NULL, NULL);
4489     return(ret);
4490 }
4491 
4492 #if defined(LIBXML_TREE_ENABLED)
4493 /**
4494  * xmlCopyDtd:
4495  * @dtd:  the dtd
4496  *
4497  * Do a copy of the dtd.
4498  *
4499  * Returns: a new #xmlDtdPtr, or NULL in case of error.
4500  */
4501 xmlDtdPtr
xmlCopyDtd(xmlDtdPtr dtd)4502 xmlCopyDtd(xmlDtdPtr dtd) {
4503     xmlDtdPtr ret;
4504     xmlNodePtr cur, p = NULL, q;
4505 
4506     if (dtd == NULL) return(NULL);
4507     ret = xmlNewDtd(NULL, dtd->name, dtd->ExternalID, dtd->SystemID);
4508     if (ret == NULL) return(NULL);
4509     if (dtd->entities != NULL) {
4510         ret->entities = (void *) xmlCopyEntitiesTable(
4511 	                    (xmlEntitiesTablePtr) dtd->entities);
4512         if (ret->entities == NULL)
4513             goto error;
4514     }
4515     if (dtd->notations != NULL) {
4516         ret->notations = (void *) xmlCopyNotationTable(
4517 	                    (xmlNotationTablePtr) dtd->notations);
4518         if (ret->notations == NULL)
4519             goto error;
4520     }
4521     if (dtd->elements != NULL) {
4522         ret->elements = (void *) xmlCopyElementTable(
4523 	                    (xmlElementTablePtr) dtd->elements);
4524         if (ret->elements == NULL)
4525             goto error;
4526     }
4527     if (dtd->attributes != NULL) {
4528         ret->attributes = (void *) xmlCopyAttributeTable(
4529 	                    (xmlAttributeTablePtr) dtd->attributes);
4530         if (ret->attributes == NULL)
4531             goto error;
4532     }
4533     if (dtd->pentities != NULL) {
4534 	ret->pentities = (void *) xmlCopyEntitiesTable(
4535 			    (xmlEntitiesTablePtr) dtd->pentities);
4536         if (ret->pentities == NULL)
4537             goto error;
4538     }
4539 
4540     cur = dtd->children;
4541     while (cur != NULL) {
4542 	q = NULL;
4543 
4544 	if (cur->type == XML_ENTITY_DECL) {
4545 	    xmlEntityPtr tmp = (xmlEntityPtr) cur;
4546 	    switch (tmp->etype) {
4547 		case XML_INTERNAL_GENERAL_ENTITY:
4548 		case XML_EXTERNAL_GENERAL_PARSED_ENTITY:
4549 		case XML_EXTERNAL_GENERAL_UNPARSED_ENTITY:
4550 		    q = (xmlNodePtr) xmlGetEntityFromDtd(ret, tmp->name);
4551 		    break;
4552 		case XML_INTERNAL_PARAMETER_ENTITY:
4553 		case XML_EXTERNAL_PARAMETER_ENTITY:
4554 		    q = (xmlNodePtr)
4555 			xmlGetParameterEntityFromDtd(ret, tmp->name);
4556 		    break;
4557 		case XML_INTERNAL_PREDEFINED_ENTITY:
4558 		    break;
4559 	    }
4560 	} else if (cur->type == XML_ELEMENT_DECL) {
4561 	    xmlElementPtr tmp = (xmlElementPtr) cur;
4562 	    q = (xmlNodePtr)
4563 		xmlGetDtdQElementDesc(ret, tmp->name, tmp->prefix);
4564 	} else if (cur->type == XML_ATTRIBUTE_DECL) {
4565 	    xmlAttributePtr tmp = (xmlAttributePtr) cur;
4566 	    q = (xmlNodePtr)
4567 		xmlGetDtdQAttrDesc(ret, tmp->elem, tmp->name, tmp->prefix);
4568 	} else if (cur->type == XML_COMMENT_NODE) {
4569 	    q = xmlCopyNode(cur, 0);
4570             if (q == NULL)
4571                 goto error;
4572 	}
4573 
4574 	if (q == NULL) {
4575 	    cur = cur->next;
4576 	    continue;
4577 	}
4578 
4579 	if (p == NULL)
4580 	    ret->children = q;
4581 	else
4582 	    p->next = q;
4583 
4584 	q->prev = p;
4585 	q->parent = (xmlNodePtr) ret;
4586 	q->next = NULL;
4587 	ret->last = q;
4588 	p = q;
4589 	cur = cur->next;
4590     }
4591 
4592     return(ret);
4593 
4594 error:
4595     xmlFreeDtd(ret);
4596     return(NULL);
4597 }
4598 #endif
4599 
4600 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
4601 /**
4602  * xmlCopyDoc:
4603  * @doc:  the document
4604  * @recursive:  if not zero do a recursive copy.
4605  *
4606  * Do a copy of the document info. If recursive, the content tree will
4607  * be copied too as well as DTD, namespaces and entities.
4608  *
4609  * Returns: a new #xmlDocPtr, or NULL in case of error.
4610  */
4611 xmlDocPtr
xmlCopyDoc(xmlDocPtr doc,int recursive)4612 xmlCopyDoc(xmlDocPtr doc, int recursive) {
4613     xmlDocPtr ret;
4614 
4615     if (doc == NULL) return(NULL);
4616     ret = xmlNewDoc(doc->version);
4617     if (ret == NULL) return(NULL);
4618     ret->type = doc->type;
4619     if (doc->name != NULL) {
4620         ret->name = xmlMemStrdup(doc->name);
4621         if (ret->name == NULL)
4622             goto error;
4623     }
4624     if (doc->encoding != NULL) {
4625         ret->encoding = xmlStrdup(doc->encoding);
4626         if (ret->encoding == NULL)
4627             goto error;
4628     }
4629     if (doc->URL != NULL) {
4630         ret->URL = xmlStrdup(doc->URL);
4631         if (ret->URL == NULL)
4632             goto error;
4633     }
4634     ret->charset = doc->charset;
4635     ret->compression = doc->compression;
4636     ret->standalone = doc->standalone;
4637     if (!recursive) return(ret);
4638 
4639     ret->last = NULL;
4640     ret->children = NULL;
4641 #ifdef LIBXML_TREE_ENABLED
4642     if (doc->intSubset != NULL) {
4643         ret->intSubset = xmlCopyDtd(doc->intSubset);
4644 	if (ret->intSubset == NULL)
4645             goto error;
4646 	xmlSetTreeDoc((xmlNodePtr)ret->intSubset, ret);
4647 	ret->intSubset->parent = ret;
4648     }
4649 #endif
4650     if (doc->oldNs != NULL) {
4651         ret->oldNs = xmlCopyNamespaceList(doc->oldNs);
4652         if (ret->oldNs == NULL)
4653             goto error;
4654     }
4655     if (doc->children != NULL) {
4656 	xmlNodePtr tmp;
4657 
4658 	ret->children = xmlStaticCopyNodeList(doc->children, ret,
4659 		                               (xmlNodePtr)ret);
4660         if (ret->children == NULL)
4661             goto error;
4662 	ret->last = NULL;
4663 	tmp = ret->children;
4664 	while (tmp != NULL) {
4665 	    if (tmp->next == NULL)
4666 	        ret->last = tmp;
4667 	    tmp = tmp->next;
4668 	}
4669     }
4670     return(ret);
4671 
4672 error:
4673     xmlFreeDoc(ret);
4674     return(NULL);
4675 }
4676 #endif /* LIBXML_TREE_ENABLED */
4677 
4678 /************************************************************************
4679  *									*
4680  *		Content access functions				*
4681  *									*
4682  ************************************************************************/
4683 
4684 /**
4685  * xmlGetLineNoInternal:
4686  * @node: valid node
4687  * @depth: used to limit any risk of recursion
4688  *
4689  * Get line number of @node.
4690  * Try to override the limitation of lines being store in 16 bits ints
4691  *
4692  * Returns the line number if successful, -1 otherwise
4693  */
4694 static long
xmlGetLineNoInternal(const xmlNode * node,int depth)4695 xmlGetLineNoInternal(const xmlNode *node, int depth)
4696 {
4697     long result = -1;
4698 
4699     if (depth >= 5)
4700         return(-1);
4701 
4702     if (!node)
4703         return result;
4704     if ((node->type == XML_ELEMENT_NODE) ||
4705         (node->type == XML_TEXT_NODE) ||
4706 	(node->type == XML_COMMENT_NODE) ||
4707 	(node->type == XML_PI_NODE)) {
4708 	if (node->line == 65535) {
4709 	    if ((node->type == XML_TEXT_NODE) && (node->psvi != NULL))
4710 	        result = (long) (ptrdiff_t) node->psvi;
4711 	    else if ((node->type == XML_ELEMENT_NODE) &&
4712 	             (node->children != NULL))
4713 	        result = xmlGetLineNoInternal(node->children, depth + 1);
4714 	    else if (node->next != NULL)
4715 	        result = xmlGetLineNoInternal(node->next, depth + 1);
4716 	    else if (node->prev != NULL)
4717 	        result = xmlGetLineNoInternal(node->prev, depth + 1);
4718 	}
4719 	if ((result == -1) || (result == 65535))
4720 	    result = (long) node->line;
4721     } else if ((node->prev != NULL) &&
4722              ((node->prev->type == XML_ELEMENT_NODE) ||
4723 	      (node->prev->type == XML_TEXT_NODE) ||
4724 	      (node->prev->type == XML_COMMENT_NODE) ||
4725 	      (node->prev->type == XML_PI_NODE)))
4726         result = xmlGetLineNoInternal(node->prev, depth + 1);
4727     else if ((node->parent != NULL) &&
4728              (node->parent->type == XML_ELEMENT_NODE))
4729         result = xmlGetLineNoInternal(node->parent, depth + 1);
4730 
4731     return result;
4732 }
4733 
4734 /**
4735  * xmlGetLineNo:
4736  * @node: valid node
4737  *
4738  * Get line number of @node.
4739  * Try to override the limitation of lines being store in 16 bits ints
4740  * if XML_PARSE_BIG_LINES parser option was used
4741  *
4742  * Returns the line number if successful, -1 otherwise
4743  */
4744 long
xmlGetLineNo(const xmlNode * node)4745 xmlGetLineNo(const xmlNode *node)
4746 {
4747     return(xmlGetLineNoInternal(node, 0));
4748 }
4749 
4750 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_DEBUG_ENABLED)
4751 /**
4752  * xmlGetNodePath:
4753  * @node: a node
4754  *
4755  * Build a structure based Path for the given node
4756  *
4757  * Returns the new path or NULL in case of error. The caller must free
4758  *     the returned string
4759  */
4760 xmlChar *
xmlGetNodePath(const xmlNode * node)4761 xmlGetNodePath(const xmlNode *node)
4762 {
4763     const xmlNode *cur, *tmp, *next;
4764     xmlChar *buffer = NULL, *temp;
4765     size_t buf_len;
4766     xmlChar *buf;
4767     const char *sep;
4768     const char *name;
4769     char nametemp[100];
4770     int occur = 0, generic;
4771 
4772     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL))
4773         return (NULL);
4774 
4775     buf_len = 500;
4776     buffer = (xmlChar *) xmlMallocAtomic(buf_len);
4777     if (buffer == NULL)
4778         return (NULL);
4779     buf = (xmlChar *) xmlMallocAtomic(buf_len);
4780     if (buf == NULL) {
4781         xmlFree(buffer);
4782         return (NULL);
4783     }
4784 
4785     buffer[0] = 0;
4786     cur = node;
4787     do {
4788         name = "";
4789         sep = "?";
4790         occur = 0;
4791         if ((cur->type == XML_DOCUMENT_NODE) ||
4792             (cur->type == XML_HTML_DOCUMENT_NODE)) {
4793             if (buffer[0] == '/')
4794                 break;
4795             sep = "/";
4796             next = NULL;
4797         } else if (cur->type == XML_ELEMENT_NODE) {
4798 	    generic = 0;
4799             sep = "/";
4800             name = (const char *) cur->name;
4801             if (cur->ns) {
4802 		if (cur->ns->prefix != NULL) {
4803                     snprintf(nametemp, sizeof(nametemp) - 1, "%s:%s",
4804 			(char *)cur->ns->prefix, (char *)cur->name);
4805 		    nametemp[sizeof(nametemp) - 1] = 0;
4806 		    name = nametemp;
4807 		} else {
4808 		    /*
4809 		    * We cannot express named elements in the default
4810 		    * namespace, so use "*".
4811 		    */
4812 		    generic = 1;
4813 		    name = "*";
4814 		}
4815             }
4816             next = cur->parent;
4817 
4818             /*
4819              * Thumbler index computation
4820 	     * TODO: the occurrence test seems bogus for namespaced names
4821              */
4822             tmp = cur->prev;
4823             while (tmp != NULL) {
4824                 if ((tmp->type == XML_ELEMENT_NODE) &&
4825 		    (generic ||
4826 		     (xmlStrEqual(cur->name, tmp->name) &&
4827 		     ((tmp->ns == cur->ns) ||
4828 		      ((tmp->ns != NULL) && (cur->ns != NULL) &&
4829 		       (xmlStrEqual(cur->ns->prefix, tmp->ns->prefix)))))))
4830                     occur++;
4831                 tmp = tmp->prev;
4832             }
4833             if (occur == 0) {
4834                 tmp = cur->next;
4835                 while (tmp != NULL && occur == 0) {
4836                     if ((tmp->type == XML_ELEMENT_NODE) &&
4837 			(generic ||
4838 			 (xmlStrEqual(cur->name, tmp->name) &&
4839 			 ((tmp->ns == cur->ns) ||
4840 			  ((tmp->ns != NULL) && (cur->ns != NULL) &&
4841 			   (xmlStrEqual(cur->ns->prefix, tmp->ns->prefix)))))))
4842                         occur++;
4843                     tmp = tmp->next;
4844                 }
4845                 if (occur != 0)
4846                     occur = 1;
4847             } else
4848                 occur++;
4849         } else if (cur->type == XML_COMMENT_NODE) {
4850             sep = "/";
4851 	    name = "comment()";
4852             next = cur->parent;
4853 
4854             /*
4855              * Thumbler index computation
4856              */
4857             tmp = cur->prev;
4858             while (tmp != NULL) {
4859                 if (tmp->type == XML_COMMENT_NODE)
4860 		    occur++;
4861                 tmp = tmp->prev;
4862             }
4863             if (occur == 0) {
4864                 tmp = cur->next;
4865                 while (tmp != NULL && occur == 0) {
4866 		    if (tmp->type == XML_COMMENT_NODE)
4867 		        occur++;
4868                     tmp = tmp->next;
4869                 }
4870                 if (occur != 0)
4871                     occur = 1;
4872             } else
4873                 occur++;
4874         } else if ((cur->type == XML_TEXT_NODE) ||
4875                    (cur->type == XML_CDATA_SECTION_NODE)) {
4876             sep = "/";
4877 	    name = "text()";
4878             next = cur->parent;
4879 
4880             /*
4881              * Thumbler index computation
4882              */
4883             tmp = cur->prev;
4884             while (tmp != NULL) {
4885                 if ((tmp->type == XML_TEXT_NODE) ||
4886 		    (tmp->type == XML_CDATA_SECTION_NODE))
4887 		    occur++;
4888                 tmp = tmp->prev;
4889             }
4890 	    /*
4891 	    * Evaluate if this is the only text- or CDATA-section-node;
4892 	    * if yes, then we'll get "text()", otherwise "text()[1]".
4893 	    */
4894             if (occur == 0) {
4895                 tmp = cur->next;
4896                 while (tmp != NULL) {
4897 		    if ((tmp->type == XML_TEXT_NODE) ||
4898 			(tmp->type == XML_CDATA_SECTION_NODE))
4899 		    {
4900 			occur = 1;
4901 			break;
4902 		    }
4903 		    tmp = tmp->next;
4904 		}
4905             } else
4906                 occur++;
4907         } else if (cur->type == XML_PI_NODE) {
4908             sep = "/";
4909 	    snprintf(nametemp, sizeof(nametemp) - 1,
4910 		     "processing-instruction('%s')", (char *)cur->name);
4911             nametemp[sizeof(nametemp) - 1] = 0;
4912             name = nametemp;
4913 
4914 	    next = cur->parent;
4915 
4916             /*
4917              * Thumbler index computation
4918              */
4919             tmp = cur->prev;
4920             while (tmp != NULL) {
4921                 if ((tmp->type == XML_PI_NODE) &&
4922 		    (xmlStrEqual(cur->name, tmp->name)))
4923                     occur++;
4924                 tmp = tmp->prev;
4925             }
4926             if (occur == 0) {
4927                 tmp = cur->next;
4928                 while (tmp != NULL && occur == 0) {
4929                     if ((tmp->type == XML_PI_NODE) &&
4930 			(xmlStrEqual(cur->name, tmp->name)))
4931                         occur++;
4932                     tmp = tmp->next;
4933                 }
4934                 if (occur != 0)
4935                     occur = 1;
4936             } else
4937                 occur++;
4938 
4939         } else if (cur->type == XML_ATTRIBUTE_NODE) {
4940             sep = "/@";
4941             name = (const char *) (((xmlAttrPtr) cur)->name);
4942             if (cur->ns) {
4943 	        if (cur->ns->prefix != NULL)
4944                     snprintf(nametemp, sizeof(nametemp) - 1, "%s:%s",
4945 			(char *)cur->ns->prefix, (char *)cur->name);
4946 		else
4947 		    snprintf(nametemp, sizeof(nametemp) - 1, "%s",
4948 			(char *)cur->name);
4949                 nametemp[sizeof(nametemp) - 1] = 0;
4950                 name = nametemp;
4951             }
4952             next = ((xmlAttrPtr) cur)->parent;
4953         } else {
4954             xmlFree(buf);
4955             xmlFree(buffer);
4956             return (NULL);
4957         }
4958 
4959         /*
4960          * Make sure there is enough room
4961          */
4962         if (xmlStrlen(buffer) + sizeof(nametemp) + 20 > buf_len) {
4963             buf_len =
4964                 2 * buf_len + xmlStrlen(buffer) + sizeof(nametemp) + 20;
4965             temp = (xmlChar *) xmlRealloc(buffer, buf_len);
4966             if (temp == NULL) {
4967                 xmlFree(buf);
4968                 xmlFree(buffer);
4969                 return (NULL);
4970             }
4971             buffer = temp;
4972             temp = (xmlChar *) xmlRealloc(buf, buf_len);
4973             if (temp == NULL) {
4974                 xmlFree(buf);
4975                 xmlFree(buffer);
4976                 return (NULL);
4977             }
4978             buf = temp;
4979         }
4980         if (occur == 0)
4981             snprintf((char *) buf, buf_len, "%s%s%s",
4982                      sep, name, (char *) buffer);
4983         else
4984             snprintf((char *) buf, buf_len, "%s%s[%d]%s",
4985                      sep, name, occur, (char *) buffer);
4986         snprintf((char *) buffer, buf_len, "%s", (char *)buf);
4987         cur = next;
4988     } while (cur != NULL);
4989     xmlFree(buf);
4990     return (buffer);
4991 }
4992 #endif /* LIBXML_TREE_ENABLED */
4993 
4994 /**
4995  * xmlDocGetRootElement:
4996  * @doc:  the document
4997  *
4998  * Get the root element of the document (doc->children is a list
4999  * containing possibly comments, PIs, etc ...).
5000  *
5001  * Returns the #xmlNodePtr for the root or NULL
5002  */
5003 xmlNodePtr
xmlDocGetRootElement(const xmlDoc * doc)5004 xmlDocGetRootElement(const xmlDoc *doc) {
5005     xmlNodePtr ret;
5006 
5007     if (doc == NULL) return(NULL);
5008     ret = doc->children;
5009     while (ret != NULL) {
5010 	if (ret->type == XML_ELEMENT_NODE)
5011 	    return(ret);
5012         ret = ret->next;
5013     }
5014     return(ret);
5015 }
5016 
5017 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_WRITER_ENABLED)
5018 /**
5019  * xmlDocSetRootElement:
5020  * @doc:  the document
5021  * @root:  the new document root element, if root is NULL no action is taken,
5022  *         to remove a node from a document use xmlUnlinkNode(root) instead.
5023  *
5024  * Set the root element of the document (doc->children is a list
5025  * containing possibly comments, PIs, etc ...).
5026  *
5027  * Returns the old root element if any was found, NULL if root was NULL
5028  */
5029 xmlNodePtr
xmlDocSetRootElement(xmlDocPtr doc,xmlNodePtr root)5030 xmlDocSetRootElement(xmlDocPtr doc, xmlNodePtr root) {
5031     xmlNodePtr old = NULL;
5032 
5033     if (doc == NULL) return(NULL);
5034     if ((root == NULL) || (root->type == XML_NAMESPACE_DECL))
5035 	return(NULL);
5036     xmlUnlinkNode(root);
5037     xmlSetTreeDoc(root, doc);
5038     root->parent = (xmlNodePtr) doc;
5039     old = doc->children;
5040     while (old != NULL) {
5041 	if (old->type == XML_ELEMENT_NODE)
5042 	    break;
5043         old = old->next;
5044     }
5045     if (old == NULL) {
5046 	if (doc->children == NULL) {
5047 	    doc->children = root;
5048 	    doc->last = root;
5049 	} else {
5050 	    xmlAddSibling(doc->children, root);
5051 	}
5052     } else {
5053 	xmlReplaceNode(old, root);
5054     }
5055     return(old);
5056 }
5057 #endif
5058 
5059 #if defined(LIBXML_TREE_ENABLED)
5060 /**
5061  * xmlNodeSetLang:
5062  * @cur:  the node being changed
5063  * @lang:  the language description
5064  *
5065  * Set the language of a node, i.e. the values of the xml:lang
5066  * attribute.
5067  */
5068 void
xmlNodeSetLang(xmlNodePtr cur,const xmlChar * lang)5069 xmlNodeSetLang(xmlNodePtr cur, const xmlChar *lang) {
5070     xmlNsPtr ns;
5071 
5072     if (cur == NULL) return;
5073     switch(cur->type) {
5074         case XML_TEXT_NODE:
5075         case XML_CDATA_SECTION_NODE:
5076         case XML_COMMENT_NODE:
5077         case XML_DOCUMENT_NODE:
5078         case XML_DOCUMENT_TYPE_NODE:
5079         case XML_DOCUMENT_FRAG_NODE:
5080         case XML_NOTATION_NODE:
5081         case XML_HTML_DOCUMENT_NODE:
5082         case XML_DTD_NODE:
5083         case XML_ELEMENT_DECL:
5084         case XML_ATTRIBUTE_DECL:
5085         case XML_ENTITY_DECL:
5086         case XML_PI_NODE:
5087         case XML_ENTITY_REF_NODE:
5088         case XML_ENTITY_NODE:
5089 	case XML_NAMESPACE_DECL:
5090 	case XML_XINCLUDE_START:
5091 	case XML_XINCLUDE_END:
5092 	    return;
5093         case XML_ELEMENT_NODE:
5094         case XML_ATTRIBUTE_NODE:
5095 	    break;
5096     }
5097     ns = xmlSearchNsByHref(cur->doc, cur, XML_XML_NAMESPACE);
5098     if (ns == NULL)
5099 	return;
5100     xmlSetNsProp(cur, ns, BAD_CAST "lang", lang);
5101 }
5102 #endif /* LIBXML_TREE_ENABLED */
5103 
5104 /**
5105  * xmlNodeGetLang:
5106  * @cur:  the node being checked
5107  *
5108  * Searches the language of a node, i.e. the values of the xml:lang
5109  * attribute or the one carried by the nearest ancestor.
5110  *
5111  * Returns a pointer to the lang value, or NULL if not found
5112  *     It's up to the caller to free the memory with xmlFree().
5113  */
5114 xmlChar *
xmlNodeGetLang(const xmlNode * cur)5115 xmlNodeGetLang(const xmlNode *cur) {
5116     xmlChar *lang;
5117 
5118     if ((cur == NULL) || (cur->type == XML_NAMESPACE_DECL))
5119         return(NULL);
5120     while (cur != NULL) {
5121         lang = xmlGetNsProp(cur, BAD_CAST "lang", XML_XML_NAMESPACE);
5122 	if (lang != NULL)
5123 	    return(lang);
5124 	cur = cur->parent;
5125     }
5126     return(NULL);
5127 }
5128 
5129 
5130 #ifdef LIBXML_TREE_ENABLED
5131 /**
5132  * xmlNodeSetSpacePreserve:
5133  * @cur:  the node being changed
5134  * @val:  the xml:space value ("0": default, 1: "preserve")
5135  *
5136  * Set (or reset) the space preserving behaviour of a node, i.e. the
5137  * value of the xml:space attribute.
5138  */
5139 void
xmlNodeSetSpacePreserve(xmlNodePtr cur,int val)5140 xmlNodeSetSpacePreserve(xmlNodePtr cur, int val) {
5141     xmlNsPtr ns;
5142 
5143     if (cur == NULL) return;
5144     switch(cur->type) {
5145         case XML_TEXT_NODE:
5146         case XML_CDATA_SECTION_NODE:
5147         case XML_COMMENT_NODE:
5148         case XML_DOCUMENT_NODE:
5149         case XML_DOCUMENT_TYPE_NODE:
5150         case XML_DOCUMENT_FRAG_NODE:
5151         case XML_NOTATION_NODE:
5152         case XML_HTML_DOCUMENT_NODE:
5153         case XML_DTD_NODE:
5154         case XML_ELEMENT_DECL:
5155         case XML_ATTRIBUTE_DECL:
5156         case XML_ENTITY_DECL:
5157         case XML_PI_NODE:
5158         case XML_ENTITY_REF_NODE:
5159         case XML_ENTITY_NODE:
5160 	case XML_NAMESPACE_DECL:
5161 	case XML_XINCLUDE_START:
5162 	case XML_XINCLUDE_END:
5163 	    return;
5164         case XML_ELEMENT_NODE:
5165         case XML_ATTRIBUTE_NODE:
5166 	    break;
5167     }
5168     ns = xmlSearchNsByHref(cur->doc, cur, XML_XML_NAMESPACE);
5169     if (ns == NULL)
5170 	return;
5171     switch (val) {
5172     case 0:
5173 	xmlSetNsProp(cur, ns, BAD_CAST "space", BAD_CAST "default");
5174 	break;
5175     case 1:
5176 	xmlSetNsProp(cur, ns, BAD_CAST "space", BAD_CAST "preserve");
5177 	break;
5178     }
5179 }
5180 #endif /* LIBXML_TREE_ENABLED */
5181 
5182 /**
5183  * xmlNodeGetSpacePreserve:
5184  * @cur:  the node being checked
5185  *
5186  * Searches the space preserving behaviour of a node, i.e. the values
5187  * of the xml:space attribute or the one carried by the nearest
5188  * ancestor.
5189  *
5190  * Returns -1 if xml:space is not inherited, 0 if "default", 1 if "preserve"
5191  */
5192 int
xmlNodeGetSpacePreserve(const xmlNode * cur)5193 xmlNodeGetSpacePreserve(const xmlNode *cur) {
5194     xmlChar *space;
5195 
5196     if ((cur == NULL) || (cur->type != XML_ELEMENT_NODE))
5197         return(-1);
5198     while (cur != NULL) {
5199 	space = xmlGetNsProp(cur, BAD_CAST "space", XML_XML_NAMESPACE);
5200 	if (space != NULL) {
5201 	    if (xmlStrEqual(space, BAD_CAST "preserve")) {
5202 		xmlFree(space);
5203 		return(1);
5204 	    }
5205 	    if (xmlStrEqual(space, BAD_CAST "default")) {
5206 		xmlFree(space);
5207 		return(0);
5208 	    }
5209 	    xmlFree(space);
5210 	}
5211 	cur = cur->parent;
5212     }
5213     return(-1);
5214 }
5215 
5216 #ifdef LIBXML_TREE_ENABLED
5217 /**
5218  * xmlNodeSetName:
5219  * @cur:  the node being changed
5220  * @name:  the new tag name
5221  *
5222  * Set (or reset) the name of a node.
5223  */
5224 void
xmlNodeSetName(xmlNodePtr cur,const xmlChar * name)5225 xmlNodeSetName(xmlNodePtr cur, const xmlChar *name) {
5226     xmlDocPtr doc;
5227     xmlDictPtr dict;
5228     const xmlChar *freeme = NULL;
5229 
5230     if (cur == NULL) return;
5231     if (name == NULL) return;
5232     switch(cur->type) {
5233         case XML_TEXT_NODE:
5234         case XML_CDATA_SECTION_NODE:
5235         case XML_COMMENT_NODE:
5236         case XML_DOCUMENT_TYPE_NODE:
5237         case XML_DOCUMENT_FRAG_NODE:
5238         case XML_NOTATION_NODE:
5239         case XML_HTML_DOCUMENT_NODE:
5240 	case XML_NAMESPACE_DECL:
5241 	case XML_XINCLUDE_START:
5242 	case XML_XINCLUDE_END:
5243 	    return;
5244         case XML_ELEMENT_NODE:
5245         case XML_ATTRIBUTE_NODE:
5246         case XML_PI_NODE:
5247         case XML_ENTITY_REF_NODE:
5248         case XML_ENTITY_NODE:
5249         case XML_DTD_NODE:
5250         case XML_DOCUMENT_NODE:
5251         case XML_ELEMENT_DECL:
5252         case XML_ATTRIBUTE_DECL:
5253         case XML_ENTITY_DECL:
5254 	    break;
5255     }
5256     doc = cur->doc;
5257     if (doc != NULL)
5258 	dict = doc->dict;
5259     else
5260         dict = NULL;
5261     /* TODO: malloc check */
5262     if (dict != NULL) {
5263         if ((cur->name != NULL) && (!xmlDictOwns(dict, cur->name)))
5264 	    freeme = cur->name;
5265 	cur->name = xmlDictLookup(dict, name, -1);
5266     } else {
5267 	if (cur->name != NULL)
5268 	    freeme = cur->name;
5269 	cur->name = xmlStrdup(name);
5270     }
5271 
5272     if (freeme)
5273         xmlFree((xmlChar *) freeme);
5274 }
5275 #endif
5276 
5277 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_XINCLUDE_ENABLED)
5278 /**
5279  * xmlNodeSetBase:
5280  * @cur:  the node being changed
5281  * @uri:  the new base URI
5282  *
5283  * Set (or reset) the base URI of a node, i.e. the value of the
5284  * xml:base attribute.
5285  *
5286  * Returns 0 on success, -1 on error.
5287  */
5288 int
xmlNodeSetBase(xmlNodePtr cur,const xmlChar * uri)5289 xmlNodeSetBase(xmlNodePtr cur, const xmlChar* uri) {
5290     xmlNsPtr ns;
5291     xmlChar* fixed;
5292 
5293     if (cur == NULL)
5294         return(-1);
5295     switch(cur->type) {
5296         case XML_TEXT_NODE:
5297         case XML_CDATA_SECTION_NODE:
5298         case XML_COMMENT_NODE:
5299         case XML_DOCUMENT_TYPE_NODE:
5300         case XML_DOCUMENT_FRAG_NODE:
5301         case XML_NOTATION_NODE:
5302         case XML_DTD_NODE:
5303         case XML_ELEMENT_DECL:
5304         case XML_ATTRIBUTE_DECL:
5305         case XML_ENTITY_DECL:
5306         case XML_PI_NODE:
5307         case XML_ENTITY_REF_NODE:
5308         case XML_ENTITY_NODE:
5309 	case XML_NAMESPACE_DECL:
5310 	case XML_XINCLUDE_START:
5311 	case XML_XINCLUDE_END:
5312 	    return(-1);
5313         case XML_ELEMENT_NODE:
5314         case XML_ATTRIBUTE_NODE:
5315 	    break;
5316         case XML_DOCUMENT_NODE:
5317         case XML_HTML_DOCUMENT_NODE: {
5318 	    xmlDocPtr doc = (xmlDocPtr) cur;
5319 
5320 	    if (doc->URL != NULL)
5321 		xmlFree((xmlChar *) doc->URL);
5322 	    if (uri == NULL) {
5323 		doc->URL = NULL;
5324             } else {
5325 		doc->URL = xmlPathToURI(uri);
5326                 if (doc->URL == NULL)
5327                     return(-1);
5328             }
5329 	    return(0);
5330 	}
5331     }
5332 
5333     ns = xmlSearchNsByHref(cur->doc, cur, XML_XML_NAMESPACE);
5334     if (ns == NULL)
5335 	return(-1);
5336     fixed = xmlPathToURI(uri);
5337     if (fixed == NULL)
5338         return(-1);
5339     if (xmlSetNsProp(cur, ns, BAD_CAST "base", fixed) == NULL) {
5340         xmlFree(fixed);
5341         return(-1);
5342     }
5343     xmlFree(fixed);
5344 
5345     return(0);
5346 }
5347 #endif /* LIBXML_TREE_ENABLED */
5348 
5349 /**
5350  * xmlNodeGetBase:
5351  * @doc:  the document the node pertains to
5352  * @cur:  the node being checked
5353  * @baseOut:  pointer to base
5354  *
5355  * Searches for the BASE URL. The code should work on both XML
5356  * and HTML document even if base mechanisms are completely different.
5357  * It returns the base as defined in RFC 2396 sections
5358  * 5.1.1. Base URI within Document Content
5359  * and
5360  * 5.1.2. Base URI from the Encapsulating Entity
5361  * However it does not return the document base (5.1.3), use
5362  * doc->URL in this case
5363  *
5364  * Return 0 in case of success, 1 if a URI or argument is invalid, -1 if a
5365  * memory allocation failed.
5366  */
5367 int
xmlNodeGetBaseSafe(const xmlDoc * doc,const xmlNode * cur,xmlChar ** baseOut)5368 xmlNodeGetBaseSafe(const xmlDoc *doc, const xmlNode *cur, xmlChar **baseOut) {
5369     xmlChar *ret = NULL;
5370     xmlChar *base, *newbase;
5371     int res;
5372 
5373     if (baseOut == NULL)
5374         return(1);
5375     *baseOut = NULL;
5376     if ((cur == NULL) && (doc == NULL))
5377         return(1);
5378     if ((cur != NULL) && (cur->type == XML_NAMESPACE_DECL))
5379         return(1);
5380     if (doc == NULL)
5381         doc = cur->doc;
5382 
5383     if ((doc != NULL) && (doc->type == XML_HTML_DOCUMENT_NODE)) {
5384         cur = doc->children;
5385 	while ((cur != NULL) && (cur->name != NULL)) {
5386 	    if (cur->type != XML_ELEMENT_NODE) {
5387 	        cur = cur->next;
5388 		continue;
5389 	    }
5390 	    if (!xmlStrcasecmp(cur->name, BAD_CAST "html")) {
5391 	        cur = cur->children;
5392 		continue;
5393 	    }
5394 	    if (!xmlStrcasecmp(cur->name, BAD_CAST "head")) {
5395 	        cur = cur->children;
5396 		continue;
5397 	    }
5398 	    if (!xmlStrcasecmp(cur->name, BAD_CAST "base")) {
5399                 if (xmlNodeGetAttrValue(cur, BAD_CAST "href", NULL, &ret) < 0)
5400                     return(-1);
5401                 if (ret == NULL)
5402                     return(1);
5403                 goto found;
5404 	    }
5405 	    cur = cur->next;
5406 	}
5407 	return(0);
5408     }
5409 
5410     while (cur != NULL) {
5411 	if (cur->type == XML_ENTITY_DECL) {
5412 	    xmlEntityPtr ent = (xmlEntityPtr) cur;
5413 
5414             xmlFree(ret);
5415 	    ret = xmlStrdup(ent->URI);
5416             if (ret == NULL)
5417                 return(-1);
5418             goto found;
5419 	}
5420 	if (cur->type == XML_ELEMENT_NODE) {
5421 	    if (xmlNodeGetAttrValue(cur, BAD_CAST "base", XML_XML_NAMESPACE,
5422                                     &base) < 0) {
5423                 xmlFree(ret);
5424                 return(-1);
5425             }
5426 	    if (base != NULL) {
5427 		if (ret != NULL) {
5428 		    res = xmlBuildURISafe(ret, base, &newbase);
5429                     xmlFree(ret);
5430                     xmlFree(base);
5431                     if (res != 0)
5432                         return(res);
5433 		    ret = newbase;
5434 		} else {
5435 		    ret = base;
5436 		}
5437 		if ((!xmlStrncmp(ret, BAD_CAST "http://", 7)) ||
5438 		    (!xmlStrncmp(ret, BAD_CAST "ftp://", 6)) ||
5439 		    (!xmlStrncmp(ret, BAD_CAST "urn:", 4)))
5440                     goto found;
5441 	    }
5442 	}
5443 	cur = cur->parent;
5444     }
5445 
5446     if ((doc != NULL) && (doc->URL != NULL)) {
5447 	if (ret == NULL) {
5448 	    ret = xmlStrdup(doc->URL);
5449             if (ret == NULL)
5450                 return(-1);
5451         } else {
5452             res = xmlBuildURISafe(ret, doc->URL, &newbase);
5453             xmlFree(ret);
5454             if (res != 0)
5455                 return(res);
5456             ret = newbase;
5457         }
5458     }
5459 
5460 found:
5461     *baseOut = ret;
5462     return(0);
5463 }
5464 
5465 /**
5466  * xmlNodeGetBase:
5467  * @doc:  the document the node pertains to
5468  * @cur:  the node being checked
5469  *
5470  * See xmlNodeGetBaseSafe. This function doesn't allow to distinguish
5471  * memory allocation failures from a non-existing base.
5472  *
5473  * Returns a pointer to the base URL, or NULL if not found
5474  *     It's up to the caller to free the memory with xmlFree().
5475  */
5476 xmlChar *
xmlNodeGetBase(const xmlDoc * doc,const xmlNode * cur)5477 xmlNodeGetBase(const xmlDoc *doc, const xmlNode *cur) {
5478     xmlChar *base;
5479 
5480     xmlNodeGetBaseSafe(doc, cur, &base);
5481     return(base);
5482 }
5483 
5484 /**
5485  * xmlNodeBufGetContent:
5486  * @buffer:  a buffer
5487  * @cur:  the node being read
5488  *
5489  * Read the value of a node @cur, this can be either the text carried
5490  * directly by this node if it's a TEXT node or the aggregate string
5491  * of the values carried by this node child's (TEXT and ENTITY_REF).
5492  * Entity references are substituted.
5493  * Fills up the buffer @buffer with this value
5494  *
5495  * Returns 0 in case of success and -1 in case of error.
5496  */
5497 int
xmlNodeBufGetContent(xmlBufferPtr buffer,const xmlNode * cur)5498 xmlNodeBufGetContent(xmlBufferPtr buffer, const xmlNode *cur)
5499 {
5500     xmlBufPtr buf;
5501     int ret;
5502 
5503     if ((cur == NULL) || (buffer == NULL)) return(-1);
5504     buf = xmlBufFromBuffer(buffer);
5505     ret = xmlBufGetNodeContent(buf, cur);
5506     buffer = xmlBufBackToBuffer(buf);
5507     if ((ret < 0) || (buffer == NULL))
5508         return(-1);
5509     return(0);
5510 }
5511 
5512 /**
5513  * xmlBufGetNodeContent:
5514  * @buf:  a buffer xmlBufPtr
5515  * @cur:  the node being read
5516  *
5517  * Read the value of a node @cur, this can be either the text carried
5518  * directly by this node if it's a TEXT node or the aggregate string
5519  * of the values carried by this node child's (TEXT and ENTITY_REF).
5520  * Entity references are substituted.
5521  * Fills up the buffer @buf with this value
5522  *
5523  * Returns 0 in case of success and -1 in case of error.
5524  */
5525 int
xmlBufGetNodeContent(xmlBufPtr buf,const xmlNode * cur)5526 xmlBufGetNodeContent(xmlBufPtr buf, const xmlNode *cur)
5527 {
5528     if ((cur == NULL) || (buf == NULL)) return(-1);
5529     switch (cur->type) {
5530         case XML_CDATA_SECTION_NODE:
5531         case XML_TEXT_NODE:
5532 	    xmlBufCat(buf, cur->content);
5533             break;
5534         case XML_DOCUMENT_FRAG_NODE:
5535         case XML_ELEMENT_NODE:{
5536                 const xmlNode *tmp = cur;
5537 
5538                 while (tmp != NULL) {
5539                     switch (tmp->type) {
5540                         case XML_CDATA_SECTION_NODE:
5541                         case XML_TEXT_NODE:
5542                             if (tmp->content != NULL)
5543                                 xmlBufCat(buf, tmp->content);
5544                             break;
5545                         case XML_ENTITY_REF_NODE:
5546                             xmlBufGetNodeContent(buf, tmp);
5547                             break;
5548                         default:
5549                             break;
5550                     }
5551                     /*
5552                      * Skip to next node
5553                      */
5554                     if (tmp->children != NULL) {
5555                         if (tmp->children->type != XML_ENTITY_DECL) {
5556                             tmp = tmp->children;
5557                             continue;
5558                         }
5559                     }
5560                     if (tmp == cur)
5561                         break;
5562 
5563                     if (tmp->next != NULL) {
5564                         tmp = tmp->next;
5565                         continue;
5566                     }
5567 
5568                     do {
5569                         tmp = tmp->parent;
5570                         if (tmp == NULL)
5571                             break;
5572                         if (tmp == cur) {
5573                             tmp = NULL;
5574                             break;
5575                         }
5576                         if (tmp->next != NULL) {
5577                             tmp = tmp->next;
5578                             break;
5579                         }
5580                     } while (tmp != NULL);
5581                 }
5582 		break;
5583             }
5584         case XML_ATTRIBUTE_NODE:{
5585                 xmlAttrPtr attr = (xmlAttrPtr) cur;
5586 		xmlNodePtr tmp = attr->children;
5587 
5588 		while (tmp != NULL) {
5589 		    if (tmp->type == XML_TEXT_NODE)
5590 		        xmlBufCat(buf, tmp->content);
5591 		    else
5592 		        xmlBufGetNodeContent(buf, tmp);
5593 		    tmp = tmp->next;
5594 		}
5595                 break;
5596             }
5597         case XML_COMMENT_NODE:
5598         case XML_PI_NODE:
5599 	    xmlBufCat(buf, cur->content);
5600             break;
5601         case XML_ENTITY_REF_NODE:{
5602                 xmlEntityPtr ent;
5603                 xmlNodePtr tmp;
5604 
5605                 /* lookup entity declaration */
5606                 ent = xmlGetDocEntity(cur->doc, cur->name);
5607                 if (ent == NULL)
5608                     return(-1);
5609 
5610                 /* an entity content can be any "well balanced chunk",
5611                  * i.e. the result of the content [43] production:
5612                  * http://www.w3.org/TR/REC-xml#NT-content
5613                  * -> we iterate through child nodes and recursive call
5614                  * xmlNodeGetContent() which handles all possible node types */
5615                 tmp = ent->children;
5616                 while (tmp) {
5617 		    xmlBufGetNodeContent(buf, tmp);
5618                     tmp = tmp->next;
5619                 }
5620 		break;
5621             }
5622         case XML_ENTITY_NODE:
5623         case XML_DOCUMENT_TYPE_NODE:
5624         case XML_NOTATION_NODE:
5625         case XML_DTD_NODE:
5626         case XML_XINCLUDE_START:
5627         case XML_XINCLUDE_END:
5628             break;
5629         case XML_DOCUMENT_NODE:
5630         case XML_HTML_DOCUMENT_NODE:
5631 	    cur = cur->children;
5632 	    while (cur!= NULL) {
5633 		if ((cur->type == XML_ELEMENT_NODE) ||
5634 		    (cur->type == XML_TEXT_NODE) ||
5635 		    (cur->type == XML_CDATA_SECTION_NODE)) {
5636 		    xmlBufGetNodeContent(buf, cur);
5637 		}
5638 		cur = cur->next;
5639 	    }
5640 	    break;
5641         case XML_NAMESPACE_DECL:
5642 	    xmlBufCat(buf, ((xmlNsPtr) cur)->href);
5643 	    break;
5644         case XML_ELEMENT_DECL:
5645         case XML_ATTRIBUTE_DECL:
5646         case XML_ENTITY_DECL:
5647             break;
5648     }
5649     return(0);
5650 }
5651 
5652 /**
5653  * xmlNodeGetContent:
5654  * @cur:  the node being read
5655  *
5656  * Read the value of a node, this can be either the text carried
5657  * directly by this node if it's a TEXT node or the aggregate string
5658  * of the values carried by this node child's (TEXT and ENTITY_REF).
5659  * Entity references are substituted.
5660  * Returns a new #xmlChar * or NULL if no content is available.
5661  *     It's up to the caller to free the memory with xmlFree().
5662  */
5663 xmlChar *
xmlNodeGetContent(const xmlNode * cur)5664 xmlNodeGetContent(const xmlNode *cur)
5665 {
5666     if (cur == NULL)
5667         return (NULL);
5668     switch (cur->type) {
5669         case XML_DOCUMENT_FRAG_NODE:
5670         case XML_ELEMENT_NODE:{
5671                 xmlBufPtr buf;
5672                 xmlChar *ret;
5673 
5674                 buf = xmlBufCreateSize(64);
5675                 if (buf == NULL)
5676                     return (NULL);
5677                 xmlBufSetAllocationScheme(buf, XML_BUFFER_ALLOC_DOUBLEIT);
5678 		xmlBufGetNodeContent(buf, cur);
5679                 ret = xmlBufDetach(buf);
5680                 xmlBufFree(buf);
5681                 return (ret);
5682             }
5683         case XML_ATTRIBUTE_NODE:
5684 	    return(xmlGetPropNodeValueInternal((xmlAttrPtr) cur));
5685         case XML_COMMENT_NODE:
5686         case XML_PI_NODE:
5687             if (cur->content != NULL)
5688                 return (xmlStrdup(cur->content));
5689             else
5690                 return (xmlStrdup(BAD_CAST ""));
5691             return (NULL);
5692         case XML_ENTITY_REF_NODE:{
5693                 xmlEntityPtr ent;
5694                 xmlBufPtr buf;
5695                 xmlChar *ret;
5696 
5697                 /* lookup entity declaration */
5698                 ent = xmlGetDocEntity(cur->doc, cur->name);
5699                 if (ent == NULL)
5700                     return (NULL);
5701 
5702                 buf = xmlBufCreate();
5703                 if (buf == NULL)
5704                     return (NULL);
5705                 xmlBufSetAllocationScheme(buf, XML_BUFFER_ALLOC_DOUBLEIT);
5706 
5707                 xmlBufGetNodeContent(buf, cur);
5708 
5709                 ret = xmlBufDetach(buf);
5710                 xmlBufFree(buf);
5711                 return (ret);
5712             }
5713         case XML_ENTITY_NODE:
5714         case XML_DOCUMENT_TYPE_NODE:
5715         case XML_NOTATION_NODE:
5716         case XML_DTD_NODE:
5717         case XML_XINCLUDE_START:
5718         case XML_XINCLUDE_END:
5719             return (NULL);
5720         case XML_DOCUMENT_NODE:
5721         case XML_HTML_DOCUMENT_NODE: {
5722 	    xmlBufPtr buf;
5723 	    xmlChar *ret;
5724 
5725 	    buf = xmlBufCreate();
5726 	    if (buf == NULL)
5727 		return (NULL);
5728             xmlBufSetAllocationScheme(buf, XML_BUFFER_ALLOC_DOUBLEIT);
5729 
5730 	    xmlBufGetNodeContent(buf, (xmlNodePtr) cur);
5731 
5732 	    ret = xmlBufDetach(buf);
5733 	    xmlBufFree(buf);
5734 	    return (ret);
5735 	}
5736         case XML_NAMESPACE_DECL: {
5737 	    xmlChar *tmp;
5738 
5739 	    tmp = xmlStrdup(((xmlNsPtr) cur)->href);
5740             return (tmp);
5741 	}
5742         case XML_ELEMENT_DECL:
5743             /* TODO !!! */
5744             return (NULL);
5745         case XML_ATTRIBUTE_DECL:
5746             /* TODO !!! */
5747             return (NULL);
5748         case XML_ENTITY_DECL:
5749             /* TODO !!! */
5750             return (NULL);
5751         case XML_CDATA_SECTION_NODE:
5752         case XML_TEXT_NODE:
5753             if (cur->content != NULL)
5754                 return (xmlStrdup(cur->content));
5755             return (NULL);
5756     }
5757     return (NULL);
5758 }
5759 
5760 /**
5761  * xmlNodeSetContent:
5762  * @cur:  the node being modified
5763  * @content:  the new value of the content
5764  *
5765  * Replace the content of a node.
5766  * NOTE: @content is supposed to be a piece of XML CDATA, so it allows entity
5767  *       references, but XML special chars need to be escaped first by using
5768  *       xmlEncodeEntitiesReentrant() resp. xmlEncodeSpecialChars().
5769  *
5770  * Returns 0 on success, 1 on error, -1 if a memory allocation failed.
5771  */
5772 int
xmlNodeSetContent(xmlNodePtr cur,const xmlChar * content)5773 xmlNodeSetContent(xmlNodePtr cur, const xmlChar *content) {
5774     if (cur == NULL) {
5775 	return(1);
5776     }
5777     switch (cur->type) {
5778         case XML_DOCUMENT_FRAG_NODE:
5779         case XML_ELEMENT_NODE:
5780         case XML_ATTRIBUTE_NODE: {
5781             xmlNodePtr list = NULL;
5782 
5783             if (content != NULL) {
5784 	        list = xmlStringGetNodeList(cur->doc, content);
5785                 if (list == NULL)
5786                     return(-1);
5787             }
5788 
5789 	    if (cur->children != NULL)
5790                 xmlFreeNodeList(cur->children);
5791 	    cur->children = list;
5792 	    UPDATE_LAST_CHILD_AND_PARENT(cur)
5793 	    break;
5794         }
5795         case XML_TEXT_NODE:
5796         case XML_CDATA_SECTION_NODE:
5797         case XML_ENTITY_REF_NODE:
5798         case XML_ENTITY_NODE:
5799         case XML_PI_NODE:
5800         case XML_COMMENT_NODE: {
5801             xmlChar *copy = NULL;
5802 
5803 	    if (content != NULL) {
5804 		copy = xmlStrdup(content);
5805                 if (copy == NULL)
5806                     return(-1);
5807             }
5808 
5809 	    if ((cur->content != NULL) &&
5810 	        (cur->content != (xmlChar *) &(cur->properties))) {
5811 	        if (!((cur->doc != NULL) && (cur->doc->dict != NULL) &&
5812 		    (xmlDictOwns(cur->doc->dict, cur->content))))
5813 		    xmlFree(cur->content);
5814 	    }
5815 	    if (cur->children != NULL)
5816                 xmlFreeNodeList(cur->children);
5817 	    cur->last = cur->children = NULL;
5818             cur->content = copy;
5819 	    break;
5820         }
5821         case XML_DOCUMENT_NODE:
5822         case XML_HTML_DOCUMENT_NODE:
5823         case XML_DOCUMENT_TYPE_NODE:
5824 	case XML_XINCLUDE_START:
5825 	case XML_XINCLUDE_END:
5826 	    break;
5827         case XML_NOTATION_NODE:
5828 	    break;
5829         case XML_DTD_NODE:
5830 	    break;
5831 	case XML_NAMESPACE_DECL:
5832 	    break;
5833         case XML_ELEMENT_DECL:
5834 	    /* TODO !!! */
5835 	    break;
5836         case XML_ATTRIBUTE_DECL:
5837 	    /* TODO !!! */
5838 	    break;
5839         case XML_ENTITY_DECL:
5840 	    /* TODO !!! */
5841 	    break;
5842     }
5843 
5844     return(0);
5845 }
5846 
5847 #ifdef LIBXML_TREE_ENABLED
5848 /**
5849  * xmlNodeSetContentLen:
5850  * @cur:  the node being modified
5851  * @content:  the new value of the content
5852  * @len:  the size of @content
5853  *
5854  * Replace the content of a node.
5855  * NOTE: @content is supposed to be a piece of XML CDATA, so it allows entity
5856  *       references, but XML special chars need to be escaped first by using
5857  *       xmlEncodeEntitiesReentrant() resp. xmlEncodeSpecialChars().
5858  *
5859  * Returns 0 on success, 1 on error, -1 if a memory allocation failed.
5860  */
5861 int
xmlNodeSetContentLen(xmlNodePtr cur,const xmlChar * content,int len)5862 xmlNodeSetContentLen(xmlNodePtr cur, const xmlChar *content, int len) {
5863     if (cur == NULL) {
5864 	return(1);
5865     }
5866     switch (cur->type) {
5867         case XML_DOCUMENT_FRAG_NODE:
5868         case XML_ELEMENT_NODE:
5869         case XML_ATTRIBUTE_NODE: {
5870             xmlNodePtr list = NULL;
5871 
5872             if (content != NULL) {
5873 	        list = xmlStringLenGetNodeList(cur->doc, content, len);
5874                 if (list == NULL)
5875                     return(-1);
5876             }
5877 
5878 	    if (cur->children != NULL)
5879                 xmlFreeNodeList(cur->children);
5880 	    cur->children = list;
5881 	    UPDATE_LAST_CHILD_AND_PARENT(cur)
5882 	    break;
5883         }
5884         case XML_TEXT_NODE:
5885         case XML_CDATA_SECTION_NODE:
5886         case XML_ENTITY_REF_NODE:
5887         case XML_ENTITY_NODE:
5888         case XML_PI_NODE:
5889         case XML_COMMENT_NODE:
5890         case XML_NOTATION_NODE: {
5891             xmlChar *copy = NULL;
5892 
5893 	    if (content != NULL) {
5894 		copy = xmlStrndup(content, len);
5895                 if (copy == NULL)
5896                     return(-1);
5897 	    }
5898 
5899 	    if ((cur->content != NULL) &&
5900 	        (cur->content != (xmlChar *) &(cur->properties))) {
5901 	        if (!((cur->doc != NULL) && (cur->doc->dict != NULL) &&
5902 		    (xmlDictOwns(cur->doc->dict, cur->content))))
5903 		    xmlFree(cur->content);
5904 	    }
5905 	    if (cur->children != NULL)
5906                 xmlFreeNodeList(cur->children);
5907 	    cur->children = cur->last = NULL;
5908 	    cur->content = copy;
5909 	    cur->properties = NULL;
5910 	    break;
5911         }
5912         case XML_DOCUMENT_NODE:
5913         case XML_DTD_NODE:
5914         case XML_HTML_DOCUMENT_NODE:
5915         case XML_DOCUMENT_TYPE_NODE:
5916 	case XML_NAMESPACE_DECL:
5917 	case XML_XINCLUDE_START:
5918 	case XML_XINCLUDE_END:
5919 	    break;
5920         case XML_ELEMENT_DECL:
5921 	    /* TODO !!! */
5922 	    break;
5923         case XML_ATTRIBUTE_DECL:
5924 	    /* TODO !!! */
5925 	    break;
5926         case XML_ENTITY_DECL:
5927 	    /* TODO !!! */
5928 	    break;
5929     }
5930 
5931     return(0);
5932 }
5933 #endif /* LIBXML_TREE_ENABLED */
5934 
5935 /**
5936  * xmlNodeAddContentLen:
5937  * @cur:  the node being modified
5938  * @content:  extra content
5939  * @len:  the size of @content
5940  *
5941  * Append the extra substring to the node content.
5942  * NOTE: In contrast to xmlNodeSetContentLen(), @content is supposed to be
5943  *       raw text, so unescaped XML special chars are allowed, entity
5944  *       references are not supported.
5945  *
5946  * Returns 0 on success, 1 on error, -1 if a memory allocation failed.
5947  */
5948 int
xmlNodeAddContentLen(xmlNodePtr cur,const xmlChar * content,int len)5949 xmlNodeAddContentLen(xmlNodePtr cur, const xmlChar *content, int len) {
5950     if (cur == NULL)
5951 	return(1);
5952     if ((content == NULL) || (len <= 0))
5953         return(0);
5954 
5955     switch (cur->type) {
5956         case XML_DOCUMENT_FRAG_NODE:
5957         case XML_ELEMENT_NODE: {
5958 	    xmlNodePtr newNode, tmp;
5959 
5960 	    newNode = xmlNewDocTextLen(cur->doc, content, len);
5961 	    if (newNode == NULL)
5962                 return(-1);
5963             tmp = xmlAddChild(cur, newNode);
5964             if (tmp == NULL)
5965                 return(-1);
5966 	    break;
5967 	}
5968         case XML_ATTRIBUTE_NODE:
5969 	    break;
5970         case XML_TEXT_NODE:
5971         case XML_CDATA_SECTION_NODE:
5972         case XML_ENTITY_REF_NODE:
5973         case XML_ENTITY_NODE:
5974         case XML_PI_NODE:
5975         case XML_COMMENT_NODE:
5976         case XML_NOTATION_NODE: {
5977             xmlChar *newContent = NULL;
5978 
5979             if ((cur->content == (xmlChar *) &(cur->properties)) ||
5980                 ((cur->doc != NULL) && (cur->doc->dict != NULL) &&
5981                         xmlDictOwns(cur->doc->dict, cur->content))) {
5982                 newContent = xmlStrncatNew(cur->content, content, len);
5983                 if (newContent == NULL)
5984                     return(-1);
5985                 cur->properties = NULL;
5986             } else {
5987                 newContent = xmlStrncatNew(cur->content, content, len);
5988                 if (newContent == NULL)
5989                     return(-1);
5990                 xmlFree(cur->content);
5991             }
5992             cur->content = newContent;
5993 	    break;
5994         }
5995         case XML_DOCUMENT_NODE:
5996         case XML_DTD_NODE:
5997         case XML_HTML_DOCUMENT_NODE:
5998         case XML_DOCUMENT_TYPE_NODE:
5999 	case XML_NAMESPACE_DECL:
6000 	case XML_XINCLUDE_START:
6001 	case XML_XINCLUDE_END:
6002 	    break;
6003         case XML_ELEMENT_DECL:
6004         case XML_ATTRIBUTE_DECL:
6005         case XML_ENTITY_DECL:
6006 	    break;
6007     }
6008 
6009     return(0);
6010 }
6011 
6012 /**
6013  * xmlNodeAddContent:
6014  * @cur:  the node being modified
6015  * @content:  extra content
6016  *
6017  * Append the extra substring to the node content.
6018  * NOTE: In contrast to xmlNodeSetContent(), @content is supposed to be
6019  *       raw text, so unescaped XML special chars are allowed, entity
6020  *       references are not supported.
6021  *
6022  * Returns 0 on success, 1 on error, -1 if a memory allocation failed.
6023  */
6024 int
xmlNodeAddContent(xmlNodePtr cur,const xmlChar * content)6025 xmlNodeAddContent(xmlNodePtr cur, const xmlChar *content) {
6026     return(xmlNodeAddContentLen(cur, content, xmlStrlen(content)));
6027 }
6028 
6029 /**
6030  * xmlTextMerge:
6031  * @first:  the first text node
6032  * @second:  the second text node being merged
6033  *
6034  * Merge two text nodes into one
6035  * Returns the first text node augmented
6036  */
6037 xmlNodePtr
xmlTextMerge(xmlNodePtr first,xmlNodePtr second)6038 xmlTextMerge(xmlNodePtr first, xmlNodePtr second) {
6039     if (first == NULL) return(second);
6040     if (second == NULL) return(first);
6041     if (first->type != XML_TEXT_NODE) return(first);
6042     if (second->type != XML_TEXT_NODE) return(first);
6043     if (second->name != first->name)
6044 	return(first);
6045     xmlNodeAddContent(first, second->content);
6046     xmlUnlinkNode(second);
6047     xmlFreeNode(second);
6048     return(first);
6049 }
6050 
6051 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_XPATH_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
6052 /**
6053  * xmlGetNsList:
6054  * @doc:  the document
6055  * @node:  the current node
6056  * @out:  the returned namespace array
6057  *
6058  * Search all the namespace applying to a given element. @out returns
6059  * a NULL terminated array of all the namespaces found that needs to be
6060  * freed by the caller allocation failed.
6061  *
6062  * Returns 0 on success, 1 if no namespace were found, -1 if a memory
6063  * allocation failed.
6064  */
6065 int
xmlGetNsListSafe(const xmlDoc * doc ATTRIBUTE_UNUSED,const xmlNode * node,xmlNsPtr ** out)6066 xmlGetNsListSafe(const xmlDoc *doc ATTRIBUTE_UNUSED, const xmlNode *node,
6067                  xmlNsPtr **out)
6068 {
6069     xmlNsPtr cur;
6070     xmlNsPtr *namespaces = NULL;
6071     int nbns = 0;
6072     int maxns = 0;
6073     int i;
6074 
6075     if (out == NULL)
6076         return(1);
6077     *out = NULL;
6078     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL))
6079         return(1);
6080 
6081     while (node != NULL) {
6082         if (node->type == XML_ELEMENT_NODE) {
6083             cur = node->nsDef;
6084             while (cur != NULL) {
6085                 for (i = 0; i < nbns; i++) {
6086                     if ((cur->prefix == namespaces[i]->prefix) ||
6087                         (xmlStrEqual(cur->prefix, namespaces[i]->prefix)))
6088                         break;
6089                 }
6090                 if (i >= nbns) {
6091                     if (nbns >= maxns) {
6092                         xmlNsPtr *tmp;
6093 
6094                         maxns = maxns ? maxns * 2 : 10;
6095                         tmp = (xmlNsPtr *) xmlRealloc(namespaces,
6096                                                       (maxns + 1) *
6097                                                       sizeof(xmlNsPtr));
6098                         if (tmp == NULL) {
6099                             xmlFree(namespaces);
6100                             return(-1);
6101                         }
6102                         namespaces = tmp;
6103                     }
6104                     namespaces[nbns++] = cur;
6105                     namespaces[nbns] = NULL;
6106                 }
6107 
6108                 cur = cur->next;
6109             }
6110         }
6111         node = node->parent;
6112     }
6113 
6114     *out = namespaces;
6115     return((namespaces == NULL) ? 1 : 0);
6116 }
6117 
6118 /**
6119  * xmlGetNsList:
6120  * @doc:  the document
6121  * @node:  the current node
6122  *
6123  * Search all the namespace applying to a given element.
6124  * Returns an NULL terminated array of all the #xmlNsPtr found
6125  *         that need to be freed by the caller or NULL if a memory
6126  *         allocation failed
6127  */
6128 xmlNsPtr *
xmlGetNsList(const xmlDoc * doc,const xmlNode * node)6129 xmlGetNsList(const xmlDoc *doc, const xmlNode *node)
6130 {
6131     xmlNsPtr *ret;
6132 
6133     xmlGetNsListSafe(doc, node, &ret);
6134     return(ret);
6135 }
6136 #endif /* LIBXML_TREE_ENABLED */
6137 
6138 /*
6139 * xmlTreeEnsureXMLDecl:
6140 * @doc: the doc
6141 *
6142 * Ensures that there is an XML namespace declaration on the doc.
6143 *
6144 * Returns the XML ns-struct or NULL if a memory allocation failed.
6145 */
6146 xmlNsPtr
xmlTreeEnsureXMLDecl(xmlDocPtr doc)6147 xmlTreeEnsureXMLDecl(xmlDocPtr doc)
6148 {
6149     if (doc == NULL)
6150 	return (NULL);
6151     if (doc->oldNs != NULL)
6152 	return (doc->oldNs);
6153     {
6154 	xmlNsPtr ns;
6155 	ns = (xmlNsPtr) xmlMalloc(sizeof(xmlNs));
6156 	if (ns == NULL)
6157 	    return(NULL);
6158 	memset(ns, 0, sizeof(xmlNs));
6159 	ns->type = XML_LOCAL_NAMESPACE;
6160 	ns->href = xmlStrdup(XML_XML_NAMESPACE);
6161         if (ns->href == NULL) {
6162             xmlFreeNs(ns);
6163             return(NULL);
6164         }
6165 	ns->prefix = xmlStrdup((const xmlChar *)"xml");
6166         if (ns->prefix == NULL) {
6167             xmlFreeNs(ns);
6168             return(NULL);
6169         }
6170 	doc->oldNs = ns;
6171 	return (ns);
6172     }
6173 }
6174 
6175 /**
6176  * xmlSearchNs:
6177  * @doc:  the document
6178  * @node:  the current node
6179  * @nameSpace:  the namespace prefix
6180  *
6181  * Search a Ns registered under a given name space for a document.
6182  * recurse on the parents until it finds the defined namespace
6183  * or return NULL otherwise.
6184  * @nameSpace can be NULL, this is a search for the default namespace.
6185  * We don't allow to cross entities boundaries. If you don't declare
6186  * the namespace within those you will be in troubles !!! A warning
6187  * is generated to cover this case.
6188  *
6189  * Returns the namespace pointer or NULL if no namespace was found or
6190  * a memory allocation failed. Allocations can only fail if the "xml"
6191  * namespace is queried and xmlTreeEnsureXMLDecl wasn't called
6192  * successfully or doc is NULL.
6193  */
6194 xmlNsPtr
xmlSearchNs(xmlDocPtr doc,xmlNodePtr node,const xmlChar * nameSpace)6195 xmlSearchNs(xmlDocPtr doc, xmlNodePtr node, const xmlChar *nameSpace) {
6196 
6197     xmlNsPtr cur;
6198     const xmlNode *orig = node;
6199 
6200     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL)) return(NULL);
6201     if ((nameSpace != NULL) &&
6202 	(xmlStrEqual(nameSpace, (const xmlChar *)"xml"))) {
6203 	if ((doc == NULL) && (node->type == XML_ELEMENT_NODE)) {
6204 	    /*
6205 	     * The XML-1.0 namespace is normally held on the root
6206 	     * element. In this case exceptionally create it on the
6207 	     * node element.
6208 	     */
6209 	    cur = (xmlNsPtr) xmlMalloc(sizeof(xmlNs));
6210 	    if (cur == NULL)
6211 		return(NULL);
6212 	    memset(cur, 0, sizeof(xmlNs));
6213 	    cur->type = XML_LOCAL_NAMESPACE;
6214 	    cur->href = xmlStrdup(XML_XML_NAMESPACE);
6215 	    cur->prefix = xmlStrdup((const xmlChar *)"xml");
6216 	    cur->next = node->nsDef;
6217 	    node->nsDef = cur;
6218 	    return(cur);
6219 	}
6220 	if (doc == NULL) {
6221 	    doc = node->doc;
6222 	    if (doc == NULL)
6223 		return(NULL);
6224 	}
6225 	/*
6226 	* Return the XML namespace declaration held by the doc.
6227 	*/
6228 	if (doc->oldNs == NULL)
6229 	    return(xmlTreeEnsureXMLDecl(doc));
6230 	else
6231 	    return(doc->oldNs);
6232     }
6233     while (node != NULL) {
6234 	if ((node->type == XML_ENTITY_REF_NODE) ||
6235 	    (node->type == XML_ENTITY_NODE) ||
6236 	    (node->type == XML_ENTITY_DECL))
6237 	    return(NULL);
6238 	if (node->type == XML_ELEMENT_NODE) {
6239 	    cur = node->nsDef;
6240 	    while (cur != NULL) {
6241 		if ((cur->prefix == NULL) && (nameSpace == NULL) &&
6242 		    (cur->href != NULL))
6243 		    return(cur);
6244 		if ((cur->prefix != NULL) && (nameSpace != NULL) &&
6245 		    (cur->href != NULL) &&
6246 		    (xmlStrEqual(cur->prefix, nameSpace)))
6247 		    return(cur);
6248 		cur = cur->next;
6249 	    }
6250 	    if (orig != node) {
6251 	        cur = node->ns;
6252 	        if (cur != NULL) {
6253 		    if ((cur->prefix == NULL) && (nameSpace == NULL) &&
6254 		        (cur->href != NULL))
6255 		        return(cur);
6256 		    if ((cur->prefix != NULL) && (nameSpace != NULL) &&
6257 		        (cur->href != NULL) &&
6258 		        (xmlStrEqual(cur->prefix, nameSpace)))
6259 		        return(cur);
6260 	        }
6261 	    }
6262 	}
6263 	node = node->parent;
6264     }
6265     return(NULL);
6266 }
6267 
6268 /**
6269  * xmlNsInScope:
6270  * @doc:  the document
6271  * @node:  the current node
6272  * @ancestor:  the ancestor carrying the namespace
6273  * @prefix:  the namespace prefix
6274  *
6275  * Verify that the given namespace held on @ancestor is still in scope
6276  * on node.
6277  *
6278  * Returns 1 if true, 0 if false and -1 in case of error.
6279  */
6280 static int
xmlNsInScope(xmlDocPtr doc ATTRIBUTE_UNUSED,xmlNodePtr node,xmlNodePtr ancestor,const xmlChar * prefix)6281 xmlNsInScope(xmlDocPtr doc ATTRIBUTE_UNUSED, xmlNodePtr node,
6282              xmlNodePtr ancestor, const xmlChar * prefix)
6283 {
6284     xmlNsPtr tst;
6285 
6286     while ((node != NULL) && (node != ancestor)) {
6287         if ((node->type == XML_ENTITY_REF_NODE) ||
6288             (node->type == XML_ENTITY_NODE) ||
6289             (node->type == XML_ENTITY_DECL))
6290             return (-1);
6291         if (node->type == XML_ELEMENT_NODE) {
6292             tst = node->nsDef;
6293             while (tst != NULL) {
6294                 if ((tst->prefix == NULL)
6295                     && (prefix == NULL))
6296                     return (0);
6297                 if ((tst->prefix != NULL)
6298                     && (prefix != NULL)
6299                     && (xmlStrEqual(tst->prefix, prefix)))
6300                     return (0);
6301                 tst = tst->next;
6302             }
6303         }
6304         node = node->parent;
6305     }
6306     if (node != ancestor)
6307         return (-1);
6308     return (1);
6309 }
6310 
6311 /**
6312  * xmlSearchNsByHref:
6313  * @doc:  the document
6314  * @node:  the current node
6315  * @href:  the namespace value
6316  *
6317  * Search a Ns aliasing a given URI. Recurse on the parents until it finds
6318  * the defined namespace or return NULL otherwise.
6319  *
6320  * Returns the namespace pointer or NULL if no namespace was found or
6321  * a memory allocation failed. Allocations can only fail if the "xml"
6322  * namespace is queried and xmlTreeEnsureXMLDecl wasn't called
6323  * successfully or doc is NULL.
6324  */
6325 xmlNsPtr
xmlSearchNsByHref(xmlDocPtr doc,xmlNodePtr node,const xmlChar * href)6326 xmlSearchNsByHref(xmlDocPtr doc, xmlNodePtr node, const xmlChar * href)
6327 {
6328     xmlNsPtr cur;
6329     xmlNodePtr orig = node;
6330     int is_attr;
6331 
6332     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL) || (href == NULL))
6333         return (NULL);
6334     if (xmlStrEqual(href, XML_XML_NAMESPACE)) {
6335         /*
6336          * Only the document can hold the XML spec namespace.
6337          */
6338         if ((doc == NULL) && (node->type == XML_ELEMENT_NODE)) {
6339             /*
6340              * The XML-1.0 namespace is normally held on the root
6341              * element. In this case exceptionally create it on the
6342              * node element.
6343              */
6344             cur = (xmlNsPtr) xmlMalloc(sizeof(xmlNs));
6345             if (cur == NULL)
6346                 return (NULL);
6347             memset(cur, 0, sizeof(xmlNs));
6348             cur->type = XML_LOCAL_NAMESPACE;
6349             cur->href = xmlStrdup(XML_XML_NAMESPACE);
6350             cur->prefix = xmlStrdup((const xmlChar *) "xml");
6351             cur->next = node->nsDef;
6352             node->nsDef = cur;
6353             return (cur);
6354         }
6355 	if (doc == NULL) {
6356 	    doc = node->doc;
6357 	    if (doc == NULL)
6358 		return(NULL);
6359 	}
6360 	/*
6361 	* Return the XML namespace declaration held by the doc.
6362 	*/
6363 	if (doc->oldNs == NULL)
6364 	    return(xmlTreeEnsureXMLDecl(doc));
6365 	else
6366 	    return(doc->oldNs);
6367     }
6368     is_attr = (node->type == XML_ATTRIBUTE_NODE);
6369     while (node != NULL) {
6370         if ((node->type == XML_ENTITY_REF_NODE) ||
6371             (node->type == XML_ENTITY_NODE) ||
6372             (node->type == XML_ENTITY_DECL))
6373             return (NULL);
6374         if (node->type == XML_ELEMENT_NODE) {
6375             cur = node->nsDef;
6376             while (cur != NULL) {
6377                 if ((cur->href != NULL) && (href != NULL) &&
6378                     (xmlStrEqual(cur->href, href))) {
6379 		    if (((!is_attr) || (cur->prefix != NULL)) &&
6380 		        (xmlNsInScope(doc, orig, node, cur->prefix) == 1))
6381 			return (cur);
6382                 }
6383                 cur = cur->next;
6384             }
6385             if (orig != node) {
6386                 cur = node->ns;
6387                 if (cur != NULL) {
6388                     if ((cur->href != NULL) && (href != NULL) &&
6389                         (xmlStrEqual(cur->href, href))) {
6390 			if (((!is_attr) || (cur->prefix != NULL)) &&
6391 		            (xmlNsInScope(doc, orig, node, cur->prefix) == 1))
6392 			    return (cur);
6393                     }
6394                 }
6395             }
6396         }
6397         node = node->parent;
6398     }
6399     return (NULL);
6400 }
6401 
6402 /**
6403  * xmlNewReconciledNs:
6404  * @doc:  the document
6405  * @tree:  a node expected to hold the new namespace
6406  * @ns:  the original namespace
6407  *
6408  * This function tries to locate a namespace definition in a tree
6409  * ancestors, or create a new namespace definition node similar to
6410  * @ns trying to reuse the same prefix. However if the given prefix is
6411  * null (default namespace) or reused within the subtree defined by
6412  * @tree or on one of its ancestors then a new prefix is generated.
6413  * Returns the (new) namespace definition or NULL in case of error
6414  */
6415 static xmlNsPtr
xmlNewReconciledNs(xmlDocPtr doc,xmlNodePtr tree,xmlNsPtr ns)6416 xmlNewReconciledNs(xmlDocPtr doc, xmlNodePtr tree, xmlNsPtr ns) {
6417     xmlNsPtr def;
6418     xmlChar prefix[50];
6419     int counter = 1;
6420 
6421     if ((tree == NULL) || (tree->type != XML_ELEMENT_NODE)) {
6422 	return(NULL);
6423     }
6424     if ((ns == NULL) || (ns->type != XML_NAMESPACE_DECL)) {
6425 	return(NULL);
6426     }
6427     /*
6428      * Search an existing namespace definition inherited.
6429      */
6430     def = xmlSearchNsByHref(doc, tree, ns->href);
6431     if (def != NULL)
6432         return(def);
6433 
6434     /*
6435      * Find a close prefix which is not already in use.
6436      * Let's strip namespace prefixes longer than 20 chars !
6437      */
6438     if (ns->prefix == NULL)
6439 	snprintf((char *) prefix, sizeof(prefix), "default");
6440     else
6441 	snprintf((char *) prefix, sizeof(prefix), "%.20s", (char *)ns->prefix);
6442 
6443     def = xmlSearchNs(doc, tree, prefix);
6444     while (def != NULL) {
6445         if (counter > 1000) return(NULL);
6446 	if (ns->prefix == NULL)
6447 	    snprintf((char *) prefix, sizeof(prefix), "default%d", counter++);
6448 	else
6449 	    snprintf((char *) prefix, sizeof(prefix), "%.20s%d",
6450 		(char *)ns->prefix, counter++);
6451 	def = xmlSearchNs(doc, tree, prefix);
6452     }
6453 
6454     /*
6455      * OK, now we are ready to create a new one.
6456      */
6457     def = xmlNewNs(tree, ns->href, prefix);
6458     return(def);
6459 }
6460 
6461 #ifdef LIBXML_TREE_ENABLED
6462 /**
6463  * xmlReconciliateNs:
6464  * @doc:  the document
6465  * @tree:  a node defining the subtree to reconciliate
6466  *
6467  * This function checks that all the namespaces declared within the given
6468  * tree are properly declared. This is needed for example after Copy or Cut
6469  * and then paste operations. The subtree may still hold pointers to
6470  * namespace declarations outside the subtree or invalid/masked. As much
6471  * as possible the function try to reuse the existing namespaces found in
6472  * the new environment. If not possible the new namespaces are redeclared
6473  * on @tree at the top of the given subtree.
6474  * Returns the number of namespace declarations created or -1 in case of error.
6475  */
6476 int
xmlReconciliateNs(xmlDocPtr doc,xmlNodePtr tree)6477 xmlReconciliateNs(xmlDocPtr doc, xmlNodePtr tree) {
6478     xmlNsPtr *oldNs = NULL;
6479     xmlNsPtr *newNs = NULL;
6480     int sizeCache = 0;
6481     int nbCache = 0;
6482 
6483     xmlNsPtr n;
6484     xmlNodePtr node = tree;
6485     xmlAttrPtr attr;
6486     int ret = 0, i;
6487 
6488     if ((node == NULL) || (node->type != XML_ELEMENT_NODE)) return(-1);
6489     if ((doc == NULL) || (doc->type != XML_DOCUMENT_NODE)) return(-1);
6490     if (node->doc != doc) return(-1);
6491     while (node != NULL) {
6492         /*
6493 	 * Reconciliate the node namespace
6494 	 */
6495 	if (node->ns != NULL) {
6496 	    /*
6497 	     * initialize the cache if needed
6498 	     */
6499 	    if (sizeCache == 0) {
6500 		sizeCache = 10;
6501 		oldNs = (xmlNsPtr *) xmlMalloc(sizeCache *
6502 					       sizeof(xmlNsPtr));
6503 		if (oldNs == NULL)
6504 		    return(-1);
6505 		newNs = (xmlNsPtr *) xmlMalloc(sizeCache *
6506 					       sizeof(xmlNsPtr));
6507 		if (newNs == NULL) {
6508 		    xmlFree(oldNs);
6509 		    return(-1);
6510 		}
6511 	    }
6512 	    for (i = 0;i < nbCache;i++) {
6513 	        if (oldNs[i] == node->ns) {
6514 		    node->ns = newNs[i];
6515 		    break;
6516 		}
6517 	    }
6518 	    if (i == nbCache) {
6519 	        /*
6520 		 * OK we need to recreate a new namespace definition
6521 		 */
6522 		n = xmlNewReconciledNs(doc, tree, node->ns);
6523 		if (n != NULL) { /* :-( what if else ??? */
6524 		    /*
6525 		     * check if we need to grow the cache buffers.
6526 		     */
6527 		    if (sizeCache <= nbCache) {
6528 		        sizeCache *= 2;
6529 			oldNs = (xmlNsPtr *) xmlRealloc(oldNs, sizeCache *
6530 			                               sizeof(xmlNsPtr));
6531 		        if (oldNs == NULL) {
6532 			    xmlFree(newNs);
6533 			    return(-1);
6534 			}
6535 			newNs = (xmlNsPtr *) xmlRealloc(newNs, sizeCache *
6536 			                               sizeof(xmlNsPtr));
6537 		        if (newNs == NULL) {
6538 			    xmlFree(oldNs);
6539 			    return(-1);
6540 			}
6541 		    }
6542 		    newNs[nbCache] = n;
6543 		    oldNs[nbCache++] = node->ns;
6544 		    node->ns = n;
6545                 }
6546 	    }
6547 	}
6548 	/*
6549 	 * now check for namespace held by attributes on the node.
6550 	 */
6551 	if (node->type == XML_ELEMENT_NODE) {
6552 	    attr = node->properties;
6553 	    while (attr != NULL) {
6554 		if (attr->ns != NULL) {
6555 		    /*
6556 		     * initialize the cache if needed
6557 		     */
6558 		    if (sizeCache == 0) {
6559 			sizeCache = 10;
6560 			oldNs = (xmlNsPtr *) xmlMalloc(sizeCache *
6561 						       sizeof(xmlNsPtr));
6562 			if (oldNs == NULL)
6563 			    return(-1);
6564 			newNs = (xmlNsPtr *) xmlMalloc(sizeCache *
6565 						       sizeof(xmlNsPtr));
6566 			if (newNs == NULL) {
6567 			    xmlFree(oldNs);
6568 			    return(-1);
6569 			}
6570 		    }
6571 		    for (i = 0;i < nbCache;i++) {
6572 			if (oldNs[i] == attr->ns) {
6573 			    attr->ns = newNs[i];
6574 			    break;
6575 			}
6576 		    }
6577 		    if (i == nbCache) {
6578 			/*
6579 			 * OK we need to recreate a new namespace definition
6580 			 */
6581 			n = xmlNewReconciledNs(doc, tree, attr->ns);
6582 			if (n != NULL) { /* :-( what if else ??? */
6583 			    /*
6584 			     * check if we need to grow the cache buffers.
6585 			     */
6586 			    if (sizeCache <= nbCache) {
6587 				sizeCache *= 2;
6588 				oldNs = (xmlNsPtr *) xmlRealloc(oldNs,
6589 				           sizeCache * sizeof(xmlNsPtr));
6590 				if (oldNs == NULL) {
6591 				    xmlFree(newNs);
6592 				    return(-1);
6593 				}
6594 				newNs = (xmlNsPtr *) xmlRealloc(newNs,
6595 				           sizeCache * sizeof(xmlNsPtr));
6596 				if (newNs == NULL) {
6597 				    xmlFree(oldNs);
6598 				    return(-1);
6599 				}
6600 			    }
6601 			    newNs[nbCache] = n;
6602 			    oldNs[nbCache++] = attr->ns;
6603 			    attr->ns = n;
6604 			}
6605 		    }
6606 		}
6607 		attr = attr->next;
6608 	    }
6609 	}
6610 
6611 	/*
6612 	 * Browse the full subtree, deep first
6613 	 */
6614         if ((node->children != NULL) && (node->type != XML_ENTITY_REF_NODE)) {
6615 	    /* deep first */
6616 	    node = node->children;
6617 	} else if ((node != tree) && (node->next != NULL)) {
6618 	    /* then siblings */
6619 	    node = node->next;
6620 	} else if (node != tree) {
6621 	    /* go up to parents->next if needed */
6622 	    while (node != tree) {
6623 	        if (node->parent != NULL)
6624 		    node = node->parent;
6625 		if ((node != tree) && (node->next != NULL)) {
6626 		    node = node->next;
6627 		    break;
6628 		}
6629 		if (node->parent == NULL) {
6630 		    node = NULL;
6631 		    break;
6632 		}
6633 	    }
6634 	    /* exit condition */
6635 	    if (node == tree)
6636 	        node = NULL;
6637 	} else
6638 	    break;
6639     }
6640     if (oldNs != NULL)
6641 	xmlFree(oldNs);
6642     if (newNs != NULL)
6643 	xmlFree(newNs);
6644     return(ret);
6645 }
6646 #endif /* LIBXML_TREE_ENABLED */
6647 
6648 static xmlAttrPtr
xmlGetPropNodeInternal(const xmlNode * node,const xmlChar * name,const xmlChar * nsName,int useDTD)6649 xmlGetPropNodeInternal(const xmlNode *node, const xmlChar *name,
6650 		       const xmlChar *nsName, int useDTD)
6651 {
6652     xmlAttrPtr prop;
6653 
6654     /* Avoid unused variable warning if features are disabled. */
6655     (void) useDTD;
6656 
6657     if ((node == NULL) || (node->type != XML_ELEMENT_NODE) || (name == NULL))
6658 	return(NULL);
6659 
6660     if (node->properties != NULL) {
6661 	prop = node->properties;
6662 	if (nsName == NULL) {
6663 	    /*
6664 	    * We want the attr to be in no namespace.
6665 	    */
6666 	    do {
6667 		if ((prop->ns == NULL) && xmlStrEqual(prop->name, name)) {
6668 		    return(prop);
6669 		}
6670 		prop = prop->next;
6671 	    } while (prop != NULL);
6672 	} else {
6673 	    /*
6674 	    * We want the attr to be in the specified namespace.
6675 	    */
6676 	    do {
6677 		if ((prop->ns != NULL) && xmlStrEqual(prop->name, name) &&
6678 		    ((prop->ns->href == nsName) ||
6679 		     xmlStrEqual(prop->ns->href, nsName)))
6680 		{
6681 		    return(prop);
6682 		}
6683 		prop = prop->next;
6684 	    } while (prop != NULL);
6685 	}
6686     }
6687 
6688 #ifdef LIBXML_TREE_ENABLED
6689     if (! useDTD)
6690 	return(NULL);
6691     /*
6692      * Check if there is a default/fixed attribute declaration in
6693      * the internal or external subset.
6694      */
6695     if ((node->doc != NULL) && (node->doc->intSubset != NULL)) {
6696 	xmlDocPtr doc = node->doc;
6697 	xmlAttributePtr attrDecl = NULL;
6698 	xmlChar *elemQName, *tmpstr = NULL;
6699 
6700 	/*
6701 	* We need the QName of the element for the DTD-lookup.
6702 	*/
6703 	if ((node->ns != NULL) && (node->ns->prefix != NULL)) {
6704 	    tmpstr = xmlStrdup(node->ns->prefix);
6705 	    tmpstr = xmlStrcat(tmpstr, BAD_CAST ":");
6706 	    tmpstr = xmlStrcat(tmpstr, node->name);
6707 	    if (tmpstr == NULL)
6708 		return(NULL);
6709 	    elemQName = tmpstr;
6710 	} else
6711 	    elemQName = (xmlChar *) node->name;
6712 	if (nsName == NULL) {
6713 	    /*
6714 	    * The common and nice case: Attr in no namespace.
6715 	    */
6716 	    attrDecl = xmlGetDtdQAttrDesc(doc->intSubset,
6717 		elemQName, name, NULL);
6718 	    if ((attrDecl == NULL) && (doc->extSubset != NULL)) {
6719 		attrDecl = xmlGetDtdQAttrDesc(doc->extSubset,
6720 		    elemQName, name, NULL);
6721 	    }
6722         } else if (xmlStrEqual(nsName, XML_XML_NAMESPACE)) {
6723 	    /*
6724 	    * The XML namespace must be bound to prefix 'xml'.
6725 	    */
6726 	    attrDecl = xmlGetDtdQAttrDesc(doc->intSubset,
6727 		elemQName, name, BAD_CAST "xml");
6728 	    if ((attrDecl == NULL) && (doc->extSubset != NULL)) {
6729 		attrDecl = xmlGetDtdQAttrDesc(doc->extSubset,
6730 		    elemQName, name, BAD_CAST "xml");
6731 	    }
6732 	} else {
6733 	    xmlNsPtr *nsList, *cur;
6734 
6735 	    /*
6736 	    * The ugly case: Search using the prefixes of in-scope
6737 	    * ns-decls corresponding to @nsName.
6738 	    */
6739 	    nsList = xmlGetNsList(node->doc, node);
6740 	    if (nsList == NULL) {
6741 		if (tmpstr != NULL)
6742 		    xmlFree(tmpstr);
6743 		return(NULL);
6744 	    }
6745 	    cur = nsList;
6746 	    while (*cur != NULL) {
6747 		if (xmlStrEqual((*cur)->href, nsName)) {
6748 		    attrDecl = xmlGetDtdQAttrDesc(doc->intSubset, elemQName,
6749 			name, (*cur)->prefix);
6750 		    if (attrDecl)
6751 			break;
6752 		    if (doc->extSubset != NULL) {
6753 			attrDecl = xmlGetDtdQAttrDesc(doc->extSubset, elemQName,
6754 			    name, (*cur)->prefix);
6755 			if (attrDecl)
6756 			    break;
6757 		    }
6758 		}
6759 		cur++;
6760 	    }
6761 	    xmlFree(nsList);
6762 	}
6763 	if (tmpstr != NULL)
6764 	    xmlFree(tmpstr);
6765 	/*
6766 	* Only default/fixed attrs are relevant.
6767 	*/
6768 	if ((attrDecl != NULL) && (attrDecl->defaultValue != NULL))
6769 	    return((xmlAttrPtr) attrDecl);
6770     }
6771 #endif /* LIBXML_TREE_ENABLED */
6772     return(NULL);
6773 }
6774 
6775 static xmlChar*
xmlGetPropNodeValueInternal(const xmlAttr * prop)6776 xmlGetPropNodeValueInternal(const xmlAttr *prop)
6777 {
6778     if (prop == NULL)
6779 	return(NULL);
6780     if (prop->type == XML_ATTRIBUTE_NODE) {
6781 	/*
6782 	* Note that we return at least the empty string.
6783 	*/
6784 	if (prop->children != NULL) {
6785 	    if ((prop->children->next == NULL) &&
6786 		((prop->children->type == XML_TEXT_NODE) ||
6787 		(prop->children->type == XML_CDATA_SECTION_NODE)))
6788 	    {
6789 		/*
6790 		* Optimization for the common case: only 1 text node.
6791 		*/
6792 		return(xmlStrdup(prop->children->content));
6793 	    } else {
6794 		return(xmlNodeListGetString(prop->doc, prop->children, 1));
6795 	    }
6796 	}
6797 	return(xmlStrdup((xmlChar *)""));
6798     } else if (prop->type == XML_ATTRIBUTE_DECL) {
6799 	return(xmlStrdup(((xmlAttributePtr)prop)->defaultValue));
6800     }
6801     return(NULL);
6802 }
6803 
6804 /**
6805  * xmlHasProp:
6806  * @node:  the node
6807  * @name:  the attribute name
6808  *
6809  * Search an attribute associated to a node
6810  * This function also looks in DTD attribute declaration for #FIXED or
6811  * default declaration values unless DTD use has been turned off.
6812  *
6813  * Returns the attribute or the attribute declaration or NULL if
6814  *         neither was found.
6815  */
6816 xmlAttrPtr
xmlHasProp(const xmlNode * node,const xmlChar * name)6817 xmlHasProp(const xmlNode *node, const xmlChar *name) {
6818     xmlAttrPtr prop;
6819     xmlDocPtr doc;
6820 
6821     if ((node == NULL) || (node->type != XML_ELEMENT_NODE) || (name == NULL))
6822         return(NULL);
6823     /*
6824      * Check on the properties attached to the node
6825      */
6826     prop = node->properties;
6827     while (prop != NULL) {
6828         if (xmlStrEqual(prop->name, name))  {
6829 	    return(prop);
6830         }
6831 	prop = prop->next;
6832     }
6833 
6834     /*
6835      * Check if there is a default declaration in the internal
6836      * or external subsets
6837      */
6838     doc =  node->doc;
6839     if (doc != NULL) {
6840         xmlAttributePtr attrDecl;
6841         if (doc->intSubset != NULL) {
6842 	    attrDecl = xmlGetDtdAttrDesc(doc->intSubset, node->name, name);
6843 	    if ((attrDecl == NULL) && (doc->extSubset != NULL))
6844 		attrDecl = xmlGetDtdAttrDesc(doc->extSubset, node->name, name);
6845             if ((attrDecl != NULL) && (attrDecl->defaultValue != NULL))
6846               /* return attribute declaration only if a default value is given
6847                  (that includes #FIXED declarations) */
6848 		return((xmlAttrPtr) attrDecl);
6849 	}
6850     }
6851     return(NULL);
6852 }
6853 
6854 /**
6855  * xmlHasNsProp:
6856  * @node:  the node
6857  * @name:  the attribute name
6858  * @nameSpace:  the URI of the namespace
6859  *
6860  * Search for an attribute associated to a node
6861  * This attribute has to be anchored in the namespace specified.
6862  * This does the entity substitution.
6863  * This function looks in DTD attribute declaration for #FIXED or
6864  * default declaration values unless DTD use has been turned off.
6865  * Note that a namespace of NULL indicates to use the default namespace.
6866  *
6867  * Returns the attribute or the attribute declaration or NULL
6868  *     if neither was found.
6869  */
6870 xmlAttrPtr
xmlHasNsProp(const xmlNode * node,const xmlChar * name,const xmlChar * nameSpace)6871 xmlHasNsProp(const xmlNode *node, const xmlChar *name, const xmlChar *nameSpace) {
6872 
6873     return(xmlGetPropNodeInternal(node, name, nameSpace, 1));
6874 }
6875 
6876 /**
6877  * xmlNodeGetAttrValue:
6878  * @node:  the node
6879  * @name:  the attribute name
6880  * @nsUri:  the URI of the namespace
6881  * @out:  the returned string
6882  *
6883  * Search and get the value of an attribute associated to a node
6884  * This attribute has to be anchored in the namespace specified.
6885  * This does the entity substitution. The returned value must be
6886  * freed by the caller.
6887  *
6888  * Returns 0 on success, 1 if no attribute was found, -1 if a
6889  * memory allocation failed.
6890  */
6891 int
xmlNodeGetAttrValue(const xmlNode * node,const xmlChar * name,const xmlChar * nsUri,xmlChar ** out)6892 xmlNodeGetAttrValue(const xmlNode *node, const xmlChar *name,
6893                     const xmlChar *nsUri, xmlChar **out) {
6894     xmlAttrPtr prop;
6895 
6896     if (out == NULL)
6897         return(1);
6898     *out = NULL;
6899 
6900     prop = xmlGetPropNodeInternal(node, name, nsUri, 0);
6901     if (prop == NULL)
6902 	return(1);
6903 
6904     *out = xmlGetPropNodeValueInternal(prop);
6905     if (*out == NULL)
6906         return(-1);
6907     return(0);
6908 }
6909 
6910 /**
6911  * xmlGetProp:
6912  * @node:  the node
6913  * @name:  the attribute name
6914  *
6915  * Search and get the value of an attribute associated to a node
6916  * This does the entity substitution.
6917  * This function looks in DTD attribute declaration for #FIXED or
6918  * default declaration values.
6919  *
6920  * NOTE: This function acts independently of namespaces associated
6921  *       to the attribute. Use xmlGetNsProp() or xmlGetNoNsProp()
6922  *       for namespace aware processing.
6923  *
6924  * NOTE: This function doesn't allow to distinguish malloc failures from
6925  *       missing attributes. It's more robust to use xmlNodeGetAttrValue.
6926  *
6927  * Returns the attribute value or NULL if not found or a memory allocation
6928  * failed. It's up to the caller to free the memory with xmlFree().
6929  */
6930 xmlChar *
xmlGetProp(const xmlNode * node,const xmlChar * name)6931 xmlGetProp(const xmlNode *node, const xmlChar *name) {
6932     xmlAttrPtr prop;
6933 
6934     prop = xmlHasProp(node, name);
6935     if (prop == NULL)
6936 	return(NULL);
6937     return(xmlGetPropNodeValueInternal(prop));
6938 }
6939 
6940 /**
6941  * xmlGetNoNsProp:
6942  * @node:  the node
6943  * @name:  the attribute name
6944  *
6945  * Search and get the value of an attribute associated to a node
6946  * This does the entity substitution.
6947  * This function looks in DTD attribute declaration for #FIXED or
6948  * default declaration values.
6949  * This function is similar to xmlGetProp except it will accept only
6950  * an attribute in no namespace.
6951  *
6952  * NOTE: This function doesn't allow to distinguish malloc failures from
6953  *       missing attributes. It's more robust to use xmlNodeGetAttrValue.
6954  *
6955  * Returns the attribute value or NULL if not found or a memory allocation
6956  * failed. It's up to the caller to free the memory with xmlFree().
6957  */
6958 xmlChar *
xmlGetNoNsProp(const xmlNode * node,const xmlChar * name)6959 xmlGetNoNsProp(const xmlNode *node, const xmlChar *name) {
6960     xmlAttrPtr prop;
6961 
6962     prop = xmlGetPropNodeInternal(node, name, NULL, 1);
6963     if (prop == NULL)
6964 	return(NULL);
6965     return(xmlGetPropNodeValueInternal(prop));
6966 }
6967 
6968 /**
6969  * xmlGetNsProp:
6970  * @node:  the node
6971  * @name:  the attribute name
6972  * @nameSpace:  the URI of the namespace
6973  *
6974  * Search and get the value of an attribute associated to a node
6975  * This attribute has to be anchored in the namespace specified.
6976  * This does the entity substitution.
6977  * This function looks in DTD attribute declaration for #FIXED or
6978  * default declaration values.
6979  *
6980  * NOTE: This function doesn't allow to distinguish malloc failures from
6981  *       missing attributes. It's more robust to use xmlNodeGetAttrValue.
6982  *
6983  * Returns the attribute value or NULL if not found or a memory allocation
6984  * failed. It's up to the caller to free the memory with xmlFree().
6985  */
6986 xmlChar *
xmlGetNsProp(const xmlNode * node,const xmlChar * name,const xmlChar * nameSpace)6987 xmlGetNsProp(const xmlNode *node, const xmlChar *name, const xmlChar *nameSpace) {
6988     xmlAttrPtr prop;
6989 
6990     prop = xmlGetPropNodeInternal(node, name, nameSpace, 1);
6991     if (prop == NULL)
6992 	return(NULL);
6993     return(xmlGetPropNodeValueInternal(prop));
6994 }
6995 
6996 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED)
6997 /**
6998  * xmlUnsetProp:
6999  * @node:  the node
7000  * @name:  the attribute name
7001  *
7002  * Remove an attribute carried by a node.
7003  * This handles only attributes in no namespace.
7004  * Returns 0 if successful, -1 if not found
7005  */
7006 int
xmlUnsetProp(xmlNodePtr node,const xmlChar * name)7007 xmlUnsetProp(xmlNodePtr node, const xmlChar *name) {
7008     xmlAttrPtr prop;
7009 
7010     prop = xmlGetPropNodeInternal(node, name, NULL, 0);
7011     if (prop == NULL)
7012 	return(-1);
7013     xmlUnlinkNode((xmlNodePtr) prop);
7014     xmlFreeProp(prop);
7015     return(0);
7016 }
7017 
7018 /**
7019  * xmlUnsetNsProp:
7020  * @node:  the node
7021  * @ns:  the namespace definition
7022  * @name:  the attribute name
7023  *
7024  * Remove an attribute carried by a node.
7025  * Returns 0 if successful, -1 if not found
7026  */
7027 int
xmlUnsetNsProp(xmlNodePtr node,xmlNsPtr ns,const xmlChar * name)7028 xmlUnsetNsProp(xmlNodePtr node, xmlNsPtr ns, const xmlChar *name) {
7029     xmlAttrPtr prop;
7030 
7031     prop = xmlGetPropNodeInternal(node, name,
7032                                   (ns != NULL) ? ns->href : NULL, 0);
7033     if (prop == NULL)
7034 	return(-1);
7035     xmlUnlinkNode((xmlNodePtr) prop);
7036     xmlFreeProp(prop);
7037     return(0);
7038 }
7039 #endif
7040 
7041 #if defined(LIBXML_TREE_ENABLED) || defined(LIBXML_XINCLUDE_ENABLED) || defined(LIBXML_SCHEMAS_ENABLED) || defined(LIBXML_HTML_ENABLED)
7042 /**
7043  * xmlSetProp:
7044  * @node:  the node
7045  * @name:  the attribute name (a QName)
7046  * @value:  the attribute value
7047  *
7048  * Set (or reset) an attribute carried by a node.
7049  * If @name has a prefix, then the corresponding
7050  * namespace-binding will be used, if in scope; it is an
7051  * error it there's no such ns-binding for the prefix in
7052  * scope.
7053  * Returns the attribute pointer.
7054  *
7055  */
7056 xmlAttrPtr
xmlSetProp(xmlNodePtr node,const xmlChar * name,const xmlChar * value)7057 xmlSetProp(xmlNodePtr node, const xmlChar *name, const xmlChar *value) {
7058     int len;
7059     const xmlChar *nqname;
7060 
7061     if ((node == NULL) || (name == NULL) || (node->type != XML_ELEMENT_NODE))
7062 	return(NULL);
7063 
7064     /*
7065      * handle QNames
7066      */
7067     nqname = xmlSplitQName3(name, &len);
7068     if (nqname != NULL) {
7069         xmlNsPtr ns;
7070 	xmlChar *prefix = xmlStrndup(name, len);
7071 	ns = xmlSearchNs(node->doc, node, prefix);
7072 	if (prefix != NULL)
7073 	    xmlFree(prefix);
7074 	if (ns != NULL)
7075 	    return(xmlSetNsProp(node, ns, nqname, value));
7076     }
7077     return(xmlSetNsProp(node, NULL, name, value));
7078 }
7079 
7080 /**
7081  * xmlSetNsProp:
7082  * @node:  the node
7083  * @ns:  the namespace definition
7084  * @name:  the attribute name
7085  * @value:  the attribute value
7086  *
7087  * Set (or reset) an attribute carried by a node.
7088  * The ns structure must be in scope, this is not checked
7089  *
7090  * Returns the attribute pointer.
7091  */
7092 xmlAttrPtr
xmlSetNsProp(xmlNodePtr node,xmlNsPtr ns,const xmlChar * name,const xmlChar * value)7093 xmlSetNsProp(xmlNodePtr node, xmlNsPtr ns, const xmlChar *name,
7094 	     const xmlChar *value)
7095 {
7096     xmlAttrPtr prop;
7097 
7098     if (ns && (ns->href == NULL))
7099 	return(NULL);
7100     prop = xmlGetPropNodeInternal(node, name,
7101                                   (ns != NULL) ? ns->href : NULL, 0);
7102     if (prop != NULL) {
7103         xmlNodePtr children = NULL;
7104 
7105 	/*
7106 	* Modify the attribute's value.
7107 	*/
7108         if (value != NULL) {
7109 	    children = xmlNewDocText(node->doc, value);
7110             if (children == NULL)
7111                 return(NULL);
7112         }
7113 
7114 	if (prop->atype == XML_ATTRIBUTE_ID) {
7115 	    xmlRemoveID(node->doc, prop);
7116 	    prop->atype = XML_ATTRIBUTE_ID;
7117 	}
7118 	if (prop->children != NULL)
7119 	    xmlFreeNodeList(prop->children);
7120 	prop->children = NULL;
7121 	prop->last = NULL;
7122 	prop->ns = ns;
7123 	if (value != NULL) {
7124 	    xmlNodePtr tmp;
7125 
7126 	    prop->children = children;
7127 	    prop->last = NULL;
7128 	    tmp = prop->children;
7129 	    while (tmp != NULL) {
7130 		tmp->parent = (xmlNodePtr) prop;
7131 		if (tmp->next == NULL)
7132 		    prop->last = tmp;
7133 		tmp = tmp->next;
7134 	    }
7135 	}
7136 	if ((prop->atype == XML_ATTRIBUTE_ID) &&
7137 	    (xmlAddIDSafe(node->doc, value, prop, 0, NULL) < 0)) {
7138             return(NULL);
7139         }
7140 	return(prop);
7141     }
7142     /*
7143     * No equal attr found; create a new one.
7144     */
7145     return(xmlNewPropInternal(node, ns, name, value, 0));
7146 }
7147 
7148 #endif /* LIBXML_TREE_ENABLED */
7149 
7150 /**
7151  * xmlNodeIsText:
7152  * @node:  the node
7153  *
7154  * Is this node a Text node ?
7155  * Returns 1 yes, 0 no
7156  */
7157 int
xmlNodeIsText(const xmlNode * node)7158 xmlNodeIsText(const xmlNode *node) {
7159     if (node == NULL) return(0);
7160 
7161     if (node->type == XML_TEXT_NODE) return(1);
7162     return(0);
7163 }
7164 
7165 /**
7166  * xmlIsBlankNode:
7167  * @node:  the node
7168  *
7169  * Checks whether this node is an empty or whitespace only
7170  * (and possibly ignorable) text-node.
7171  *
7172  * Returns 1 yes, 0 no
7173  */
7174 int
xmlIsBlankNode(const xmlNode * node)7175 xmlIsBlankNode(const xmlNode *node) {
7176     const xmlChar *cur;
7177     if (node == NULL) return(0);
7178 
7179     if ((node->type != XML_TEXT_NODE) &&
7180         (node->type != XML_CDATA_SECTION_NODE))
7181 	return(0);
7182     if (node->content == NULL) return(1);
7183     cur = node->content;
7184     while (*cur != 0) {
7185 	if (!IS_BLANK_CH(*cur)) return(0);
7186 	cur++;
7187     }
7188 
7189     return(1);
7190 }
7191 
7192 /**
7193  * xmlTextConcat:
7194  * @node:  the node
7195  * @content:  the content
7196  * @len:  @content length
7197  *
7198  * Concat the given string at the end of the existing node content
7199  *
7200  * Returns -1 in case of error, 0 otherwise
7201  */
7202 
7203 int
xmlTextConcat(xmlNodePtr node,const xmlChar * content,int len)7204 xmlTextConcat(xmlNodePtr node, const xmlChar *content, int len) {
7205     if (node == NULL) return(-1);
7206 
7207     if ((node->type != XML_TEXT_NODE) &&
7208         (node->type != XML_CDATA_SECTION_NODE) &&
7209 	(node->type != XML_COMMENT_NODE) &&
7210 	(node->type != XML_PI_NODE)) {
7211         return(-1);
7212     }
7213     /* need to check if content is currently in the dictionary */
7214     if ((node->content == (xmlChar *) &(node->properties)) ||
7215         ((node->doc != NULL) && (node->doc->dict != NULL) &&
7216 		xmlDictOwns(node->doc->dict, node->content))) {
7217 	node->content = xmlStrncatNew(node->content, content, len);
7218     } else {
7219         node->content = xmlStrncat(node->content, content, len);
7220     }
7221     node->properties = NULL;
7222     if (node->content == NULL)
7223         return(-1);
7224     return(0);
7225 }
7226 
7227 /************************************************************************
7228  *									*
7229  *			Output : to a FILE or in memory			*
7230  *									*
7231  ************************************************************************/
7232 
7233 /**
7234  * xmlBufferCreate:
7235  *
7236  * routine to create an XML buffer.
7237  * returns the new structure.
7238  */
7239 xmlBufferPtr
xmlBufferCreate(void)7240 xmlBufferCreate(void) {
7241     xmlBufferPtr ret;
7242 
7243     ret = (xmlBufferPtr) xmlMalloc(sizeof(xmlBuffer));
7244     if (ret == NULL)
7245         return(NULL);
7246     ret->use = 0;
7247     ret->size = xmlDefaultBufferSize;
7248     ret->alloc = xmlBufferAllocScheme;
7249     ret->content = (xmlChar *) xmlMallocAtomic(ret->size);
7250     if (ret->content == NULL) {
7251 	xmlFree(ret);
7252         return(NULL);
7253     }
7254     ret->content[0] = 0;
7255     ret->contentIO = NULL;
7256     return(ret);
7257 }
7258 
7259 /**
7260  * xmlBufferCreateSize:
7261  * @size: initial size of buffer
7262  *
7263  * routine to create an XML buffer.
7264  * returns the new structure.
7265  */
7266 xmlBufferPtr
xmlBufferCreateSize(size_t size)7267 xmlBufferCreateSize(size_t size) {
7268     xmlBufferPtr ret;
7269 
7270     if (size >= UINT_MAX)
7271         return(NULL);
7272     ret = (xmlBufferPtr) xmlMalloc(sizeof(xmlBuffer));
7273     if (ret == NULL)
7274         return(NULL);
7275     ret->use = 0;
7276     ret->alloc = xmlBufferAllocScheme;
7277     ret->size = (size ? size + 1 : 0);         /* +1 for ending null */
7278     if (ret->size){
7279         ret->content = (xmlChar *) xmlMallocAtomic(ret->size);
7280         if (ret->content == NULL) {
7281             xmlFree(ret);
7282             return(NULL);
7283         }
7284         ret->content[0] = 0;
7285     } else
7286 	ret->content = NULL;
7287     ret->contentIO = NULL;
7288     return(ret);
7289 }
7290 
7291 /**
7292  * xmlBufferDetach:
7293  * @buf:  the buffer
7294  *
7295  * Remove the string contained in a buffer and gie it back to the
7296  * caller. The buffer is reset to an empty content.
7297  * This doesn't work with immutable buffers as they can't be reset.
7298  *
7299  * Returns the previous string contained by the buffer.
7300  */
7301 xmlChar *
xmlBufferDetach(xmlBufferPtr buf)7302 xmlBufferDetach(xmlBufferPtr buf) {
7303     xmlChar *ret;
7304 
7305     if (buf == NULL)
7306         return(NULL);
7307 
7308     ret = buf->content;
7309     buf->content = NULL;
7310     buf->size = 0;
7311     buf->use = 0;
7312 
7313     return ret;
7314 }
7315 
7316 
7317 /**
7318  * xmlBufferCreateStatic:
7319  * @mem: the memory area
7320  * @size:  the size in byte
7321  *
7322  * Returns an XML buffer initialized with bytes.
7323  */
7324 xmlBufferPtr
xmlBufferCreateStatic(void * mem,size_t size)7325 xmlBufferCreateStatic(void *mem, size_t size) {
7326     xmlBufferPtr buf = xmlBufferCreateSize(size);
7327 
7328     xmlBufferAdd(buf, mem, size);
7329     return(buf);
7330 }
7331 
7332 /**
7333  * xmlBufferSetAllocationScheme:
7334  * @buf:  the buffer to tune
7335  * @scheme:  allocation scheme to use
7336  *
7337  * Sets the allocation scheme for this buffer
7338  */
7339 void
xmlBufferSetAllocationScheme(xmlBufferPtr buf,xmlBufferAllocationScheme scheme)7340 xmlBufferSetAllocationScheme(xmlBufferPtr buf,
7341                              xmlBufferAllocationScheme scheme) {
7342     if (buf == NULL) {
7343         return;
7344     }
7345     if (buf->alloc == XML_BUFFER_ALLOC_IO) return;
7346     if ((scheme == XML_BUFFER_ALLOC_DOUBLEIT) ||
7347         (scheme == XML_BUFFER_ALLOC_EXACT) ||
7348         (scheme == XML_BUFFER_ALLOC_HYBRID))
7349 	buf->alloc = scheme;
7350 }
7351 
7352 /**
7353  * xmlBufferFree:
7354  * @buf:  the buffer to free
7355  *
7356  * Frees an XML buffer. It frees both the content and the structure which
7357  * encapsulate it.
7358  */
7359 void
xmlBufferFree(xmlBufferPtr buf)7360 xmlBufferFree(xmlBufferPtr buf) {
7361     if (buf == NULL) {
7362 	return;
7363     }
7364 
7365     if ((buf->alloc == XML_BUFFER_ALLOC_IO) &&
7366         (buf->contentIO != NULL)) {
7367         xmlFree(buf->contentIO);
7368     } else if (buf->content != NULL) {
7369         xmlFree(buf->content);
7370     }
7371     xmlFree(buf);
7372 }
7373 
7374 /**
7375  * xmlBufferEmpty:
7376  * @buf:  the buffer
7377  *
7378  * empty a buffer.
7379  */
7380 void
xmlBufferEmpty(xmlBufferPtr buf)7381 xmlBufferEmpty(xmlBufferPtr buf) {
7382     if (buf == NULL) return;
7383     if (buf->content == NULL) return;
7384     buf->use = 0;
7385     if ((buf->alloc == XML_BUFFER_ALLOC_IO) && (buf->contentIO != NULL)) {
7386         size_t start_buf = buf->content - buf->contentIO;
7387 
7388 	buf->size += start_buf;
7389         buf->content = buf->contentIO;
7390         buf->content[0] = 0;
7391     } else {
7392         buf->content[0] = 0;
7393     }
7394 }
7395 
7396 /**
7397  * xmlBufferShrink:
7398  * @buf:  the buffer to dump
7399  * @len:  the number of xmlChar to remove
7400  *
7401  * Remove the beginning of an XML buffer.
7402  *
7403  * Returns the number of #xmlChar removed, or -1 in case of failure.
7404  */
7405 int
xmlBufferShrink(xmlBufferPtr buf,unsigned int len)7406 xmlBufferShrink(xmlBufferPtr buf, unsigned int len) {
7407     if (buf == NULL) return(-1);
7408     if (len == 0) return(0);
7409     if (len > buf->use) return(-1);
7410 
7411     buf->use -= len;
7412     if ((buf->alloc == XML_BUFFER_ALLOC_IO) && (buf->contentIO != NULL)) {
7413 	/*
7414 	 * we just move the content pointer, but also make sure
7415 	 * the perceived buffer size has shrunk accordingly
7416 	 */
7417         buf->content += len;
7418 	buf->size -= len;
7419 
7420         /*
7421 	 * sometimes though it maybe be better to really shrink
7422 	 * on IO buffers
7423 	 */
7424 	if ((buf->alloc == XML_BUFFER_ALLOC_IO) && (buf->contentIO != NULL)) {
7425 	    size_t start_buf = buf->content - buf->contentIO;
7426 	    if (start_buf >= buf->size) {
7427 		memmove(buf->contentIO, &buf->content[0], buf->use);
7428 		buf->content = buf->contentIO;
7429 		buf->content[buf->use] = 0;
7430 		buf->size += start_buf;
7431 	    }
7432 	}
7433     } else {
7434 	memmove(buf->content, &buf->content[len], buf->use);
7435 	buf->content[buf->use] = 0;
7436     }
7437     return(len);
7438 }
7439 
7440 /**
7441  * xmlBufferGrow:
7442  * @buf:  the buffer
7443  * @len:  the minimum free size to allocate
7444  *
7445  * Grow the available space of an XML buffer.
7446  *
7447  * Returns the new available space or -1 in case of error
7448  */
7449 int
xmlBufferGrow(xmlBufferPtr buf,unsigned int len)7450 xmlBufferGrow(xmlBufferPtr buf, unsigned int len) {
7451     unsigned int size;
7452     xmlChar *newbuf;
7453 
7454     if (buf == NULL) return(-1);
7455 
7456     if (len < buf->size - buf->use)
7457         return(0);
7458     if (len >= UINT_MAX - buf->use)
7459         return(-1);
7460 
7461     if (buf->size > (size_t) len) {
7462         size = buf->size > UINT_MAX / 2 ? UINT_MAX : buf->size * 2;
7463     } else {
7464         size = buf->use + len;
7465         size = size > UINT_MAX - 100 ? UINT_MAX : size + 100;
7466     }
7467 
7468     if ((buf->alloc == XML_BUFFER_ALLOC_IO) && (buf->contentIO != NULL)) {
7469         size_t start_buf = buf->content - buf->contentIO;
7470 
7471 	newbuf = (xmlChar *) xmlRealloc(buf->contentIO, start_buf + size);
7472 	if (newbuf == NULL)
7473 	    return(-1);
7474 	buf->contentIO = newbuf;
7475 	buf->content = newbuf + start_buf;
7476     } else {
7477 	newbuf = (xmlChar *) xmlRealloc(buf->content, size);
7478 	if (newbuf == NULL)
7479 	    return(-1);
7480 	buf->content = newbuf;
7481     }
7482     buf->size = size;
7483     return(buf->size - buf->use - 1);
7484 }
7485 
7486 /**
7487  * xmlBufferDump:
7488  * @file:  the file output
7489  * @buf:  the buffer to dump
7490  *
7491  * Dumps an XML buffer to  a FILE *.
7492  * Returns the number of #xmlChar written
7493  */
7494 int
xmlBufferDump(FILE * file,xmlBufferPtr buf)7495 xmlBufferDump(FILE *file, xmlBufferPtr buf) {
7496     size_t ret;
7497 
7498     if (buf == NULL) {
7499 	return(0);
7500     }
7501     if (buf->content == NULL) {
7502 	return(0);
7503     }
7504     if (file == NULL)
7505 	file = stdout;
7506     ret = fwrite(buf->content, 1, buf->use, file);
7507     return(ret > INT_MAX ? INT_MAX : ret);
7508 }
7509 
7510 /**
7511  * xmlBufferContent:
7512  * @buf:  the buffer
7513  *
7514  * Function to extract the content of a buffer
7515  *
7516  * Returns the internal content
7517  */
7518 
7519 const xmlChar *
xmlBufferContent(const xmlBuffer * buf)7520 xmlBufferContent(const xmlBuffer *buf)
7521 {
7522     if(!buf)
7523         return NULL;
7524 
7525     return buf->content;
7526 }
7527 
7528 /**
7529  * xmlBufferLength:
7530  * @buf:  the buffer
7531  *
7532  * Function to get the length of a buffer
7533  *
7534  * Returns the length of data in the internal content
7535  */
7536 
7537 int
xmlBufferLength(const xmlBuffer * buf)7538 xmlBufferLength(const xmlBuffer *buf)
7539 {
7540     if(!buf)
7541         return 0;
7542 
7543     return buf->use;
7544 }
7545 
7546 /**
7547  * xmlBufferResize:
7548  * @buf:  the buffer to resize
7549  * @size:  the desired size
7550  *
7551  * Resize a buffer to accommodate minimum size of @size.
7552  *
7553  * Returns  0 in case of problems, 1 otherwise
7554  */
7555 int
xmlBufferResize(xmlBufferPtr buf,unsigned int size)7556 xmlBufferResize(xmlBufferPtr buf, unsigned int size)
7557 {
7558     unsigned int newSize;
7559     xmlChar* rebuf = NULL;
7560     size_t start_buf;
7561 
7562     if (buf == NULL)
7563         return(0);
7564 
7565     /* Don't resize if we don't have to */
7566     if (size < buf->size)
7567         return 1;
7568 
7569     if (size > UINT_MAX - 10)
7570         return 0;
7571 
7572     /* figure out new size */
7573     switch (buf->alloc){
7574 	case XML_BUFFER_ALLOC_IO:
7575 	case XML_BUFFER_ALLOC_DOUBLEIT:
7576 	    /*take care of empty case*/
7577             if (buf->size == 0)
7578                 newSize = (size > UINT_MAX - 10 ? UINT_MAX : size + 10);
7579             else
7580                 newSize = buf->size;
7581 	    while (size > newSize) {
7582 	        if (newSize > UINT_MAX / 2)
7583 	            return 0;
7584 	        newSize *= 2;
7585 	    }
7586 	    break;
7587 	case XML_BUFFER_ALLOC_EXACT:
7588 	    newSize = (size > UINT_MAX - 10 ? UINT_MAX : size + 10);
7589 	    break;
7590         case XML_BUFFER_ALLOC_HYBRID:
7591             if (buf->use < BASE_BUFFER_SIZE)
7592                 newSize = size;
7593             else {
7594                 newSize = buf->size;
7595                 while (size > newSize) {
7596                     if (newSize > UINT_MAX / 2)
7597                         return 0;
7598                     newSize *= 2;
7599                 }
7600             }
7601             break;
7602 
7603 	default:
7604 	    newSize = (size > UINT_MAX - 10 ? UINT_MAX : size + 10);
7605 	    break;
7606     }
7607 
7608     if ((buf->alloc == XML_BUFFER_ALLOC_IO) && (buf->contentIO != NULL)) {
7609         start_buf = buf->content - buf->contentIO;
7610 
7611         if (start_buf > newSize) {
7612 	    /* move data back to start */
7613 	    memmove(buf->contentIO, buf->content, buf->use);
7614 	    buf->content = buf->contentIO;
7615 	    buf->content[buf->use] = 0;
7616 	    buf->size += start_buf;
7617 	} else {
7618 	    rebuf = (xmlChar *) xmlRealloc(buf->contentIO, start_buf + newSize);
7619 	    if (rebuf == NULL)
7620 		return 0;
7621 	    buf->contentIO = rebuf;
7622 	    buf->content = rebuf + start_buf;
7623 	}
7624     } else {
7625 	if (buf->content == NULL) {
7626 	    rebuf = (xmlChar *) xmlMallocAtomic(newSize);
7627 	    buf->use = 0;
7628 	    rebuf[buf->use] = 0;
7629 	} else if (buf->size - buf->use < 100) {
7630 	    rebuf = (xmlChar *) xmlRealloc(buf->content, newSize);
7631         } else {
7632 	    /*
7633 	     * if we are reallocating a buffer far from being full, it's
7634 	     * better to make a new allocation and copy only the used range
7635 	     * and free the old one.
7636 	     */
7637 	    rebuf = (xmlChar *) xmlMallocAtomic(newSize);
7638 	    if (rebuf != NULL) {
7639 		memcpy(rebuf, buf->content, buf->use);
7640 		xmlFree(buf->content);
7641 		rebuf[buf->use] = 0;
7642 	    }
7643 	}
7644 	if (rebuf == NULL)
7645 	    return 0;
7646 	buf->content = rebuf;
7647     }
7648     buf->size = newSize;
7649 
7650     return 1;
7651 }
7652 
7653 /**
7654  * xmlBufferAdd:
7655  * @buf:  the buffer to dump
7656  * @str:  the #xmlChar string
7657  * @len:  the number of #xmlChar to add
7658  *
7659  * Add a string range to an XML buffer. if len == -1, the length of
7660  * str is recomputed.
7661  *
7662  * Returns 0 successful, a positive error code number otherwise
7663  *         and -1 in case of internal or API error.
7664  */
7665 int
xmlBufferAdd(xmlBufferPtr buf,const xmlChar * str,int len)7666 xmlBufferAdd(xmlBufferPtr buf, const xmlChar *str, int len) {
7667     unsigned int needSize;
7668 
7669     if ((str == NULL) || (buf == NULL)) {
7670 	return -1;
7671     }
7672     if (len < -1) {
7673 	return -1;
7674     }
7675     if (len == 0) return 0;
7676 
7677     if (len < 0)
7678         len = xmlStrlen(str);
7679 
7680     if (len < 0) return -1;
7681     if (len == 0) return 0;
7682 
7683     /* Note that both buf->size and buf->use can be zero here. */
7684     if ((unsigned) len >= buf->size - buf->use) {
7685         if ((unsigned) len >= UINT_MAX - buf->use)
7686             return XML_ERR_NO_MEMORY;
7687         needSize = buf->use + len + 1;
7688         if (!xmlBufferResize(buf, needSize))
7689             return XML_ERR_NO_MEMORY;
7690     }
7691 
7692     memmove(&buf->content[buf->use], str, len);
7693     buf->use += len;
7694     buf->content[buf->use] = 0;
7695     return 0;
7696 }
7697 
7698 /**
7699  * xmlBufferAddHead:
7700  * @buf:  the buffer
7701  * @str:  the #xmlChar string
7702  * @len:  the number of #xmlChar to add
7703  *
7704  * Add a string range to the beginning of an XML buffer.
7705  * if len == -1, the length of @str is recomputed.
7706  *
7707  * Returns 0 successful, a positive error code number otherwise
7708  *         and -1 in case of internal or API error.
7709  */
7710 int
xmlBufferAddHead(xmlBufferPtr buf,const xmlChar * str,int len)7711 xmlBufferAddHead(xmlBufferPtr buf, const xmlChar *str, int len) {
7712     unsigned int needSize;
7713 
7714     if (buf == NULL)
7715         return(-1);
7716     if (str == NULL) {
7717 	return -1;
7718     }
7719     if (len < -1) {
7720 	return -1;
7721     }
7722     if (len == 0) return 0;
7723 
7724     if (len < 0)
7725         len = xmlStrlen(str);
7726 
7727     if (len <= 0) return -1;
7728 
7729     if ((buf->alloc == XML_BUFFER_ALLOC_IO) && (buf->contentIO != NULL)) {
7730         size_t start_buf = buf->content - buf->contentIO;
7731 
7732 	if (start_buf > (unsigned int) len) {
7733 	    /*
7734 	     * We can add it in the space previously shrunk
7735 	     */
7736 	    buf->content -= len;
7737             memmove(&buf->content[0], str, len);
7738 	    buf->use += len;
7739 	    buf->size += len;
7740             buf->content[buf->use] = 0;
7741 	    return(0);
7742 	}
7743     }
7744     /* Note that both buf->size and buf->use can be zero here. */
7745     if ((unsigned) len >= buf->size - buf->use) {
7746         if ((unsigned) len >= UINT_MAX - buf->use)
7747             return(-1);
7748         needSize = buf->use + len + 1;
7749         if (!xmlBufferResize(buf, needSize))
7750             return(-1);
7751     }
7752 
7753     memmove(&buf->content[len], &buf->content[0], buf->use);
7754     memmove(&buf->content[0], str, len);
7755     buf->use += len;
7756     buf->content[buf->use] = 0;
7757     return 0;
7758 }
7759 
7760 /**
7761  * xmlBufferCat:
7762  * @buf:  the buffer to add to
7763  * @str:  the #xmlChar string
7764  *
7765  * Append a zero terminated string to an XML buffer.
7766  *
7767  * Returns 0 successful, a positive error code number otherwise
7768  *         and -1 in case of internal or API error.
7769  */
7770 int
xmlBufferCat(xmlBufferPtr buf,const xmlChar * str)7771 xmlBufferCat(xmlBufferPtr buf, const xmlChar *str) {
7772     if (buf == NULL)
7773         return(-1);
7774     if (str == NULL) return -1;
7775     return xmlBufferAdd(buf, str, -1);
7776 }
7777 
7778 /**
7779  * xmlBufferCCat:
7780  * @buf:  the buffer to dump
7781  * @str:  the C char string
7782  *
7783  * Append a zero terminated C string to an XML buffer.
7784  *
7785  * Returns 0 successful, a positive error code number otherwise
7786  *         and -1 in case of internal or API error.
7787  */
7788 int
xmlBufferCCat(xmlBufferPtr buf,const char * str)7789 xmlBufferCCat(xmlBufferPtr buf, const char *str) {
7790     return xmlBufferCat(buf, (const xmlChar *) str);
7791 }
7792 
7793 /**
7794  * xmlBufferWriteCHAR:
7795  * @buf:  the XML buffer
7796  * @string:  the string to add
7797  *
7798  * routine which manages and grows an output buffer. This one adds
7799  * xmlChars at the end of the buffer.
7800  */
7801 void
xmlBufferWriteCHAR(xmlBufferPtr buf,const xmlChar * string)7802 xmlBufferWriteCHAR(xmlBufferPtr buf, const xmlChar *string) {
7803     if (buf == NULL)
7804         return;
7805     xmlBufferCat(buf, string);
7806 }
7807 
7808 /**
7809  * xmlBufferWriteChar:
7810  * @buf:  the XML buffer output
7811  * @string:  the string to add
7812  *
7813  * routine which manage and grows an output buffer. This one add
7814  * C chars at the end of the array.
7815  */
7816 void
xmlBufferWriteChar(xmlBufferPtr buf,const char * string)7817 xmlBufferWriteChar(xmlBufferPtr buf, const char *string) {
7818     if (buf == NULL)
7819         return;
7820     xmlBufferCCat(buf, string);
7821 }
7822 
7823 
7824 /**
7825  * xmlBufferWriteQuotedString:
7826  * @buf:  the XML buffer output
7827  * @string:  the string to add
7828  *
7829  * routine which manage and grows an output buffer. This one writes
7830  * a quoted or double quoted #xmlChar string, checking first if it holds
7831  * quote or double-quotes internally
7832  */
7833 void
xmlBufferWriteQuotedString(xmlBufferPtr buf,const xmlChar * string)7834 xmlBufferWriteQuotedString(xmlBufferPtr buf, const xmlChar *string) {
7835     const xmlChar *cur, *base;
7836     if (buf == NULL)
7837         return;
7838     if (xmlStrchr(string, '\"')) {
7839         if (xmlStrchr(string, '\'')) {
7840 	    xmlBufferCCat(buf, "\"");
7841             base = cur = string;
7842             while(*cur != 0){
7843                 if(*cur == '"'){
7844                     if (base != cur)
7845                         xmlBufferAdd(buf, base, cur - base);
7846                     xmlBufferAdd(buf, BAD_CAST "&quot;", 6);
7847                     cur++;
7848                     base = cur;
7849                 }
7850                 else {
7851                     cur++;
7852                 }
7853             }
7854             if (base != cur)
7855                 xmlBufferAdd(buf, base, cur - base);
7856 	    xmlBufferCCat(buf, "\"");
7857 	}
7858         else{
7859 	    xmlBufferCCat(buf, "\'");
7860             xmlBufferCat(buf, string);
7861 	    xmlBufferCCat(buf, "\'");
7862         }
7863     } else {
7864         xmlBufferCCat(buf, "\"");
7865         xmlBufferCat(buf, string);
7866         xmlBufferCCat(buf, "\"");
7867     }
7868 }
7869 
7870 
7871 /**
7872  * xmlGetDocCompressMode:
7873  * @doc:  the document
7874  *
7875  * get the compression ratio for a document, ZLIB based
7876  * Returns 0 (uncompressed) to 9 (max compression)
7877  */
7878 int
xmlGetDocCompressMode(const xmlDoc * doc)7879 xmlGetDocCompressMode (const xmlDoc *doc) {
7880     if (doc == NULL) return(-1);
7881     return(doc->compression);
7882 }
7883 
7884 /**
7885  * xmlSetDocCompressMode:
7886  * @doc:  the document
7887  * @mode:  the compression ratio
7888  *
7889  * set the compression ratio for a document, ZLIB based
7890  * Correct values: 0 (uncompressed) to 9 (max compression)
7891  */
7892 void
xmlSetDocCompressMode(xmlDocPtr doc,int mode)7893 xmlSetDocCompressMode (xmlDocPtr doc, int mode) {
7894     if (doc == NULL) return;
7895     if (mode < 0) doc->compression = 0;
7896     else if (mode > 9) doc->compression = 9;
7897     else doc->compression = mode;
7898 }
7899 
7900 /**
7901  * xmlGetCompressMode:
7902  *
7903  * get the default compression mode used, ZLIB based.
7904  * Returns 0 (uncompressed) to 9 (max compression)
7905  */
7906 int
xmlGetCompressMode(void)7907 xmlGetCompressMode(void)
7908 {
7909     return (xmlCompressMode);
7910 }
7911 
7912 /**
7913  * xmlSetCompressMode:
7914  * @mode:  the compression ratio
7915  *
7916  * set the default compression mode used, ZLIB based
7917  * Correct values: 0 (uncompressed) to 9 (max compression)
7918  */
7919 void
xmlSetCompressMode(int mode)7920 xmlSetCompressMode(int mode) {
7921     if (mode < 0) xmlCompressMode = 0;
7922     else if (mode > 9) xmlCompressMode = 9;
7923     else xmlCompressMode = mode;
7924 }
7925 
7926 #define XML_TREE_NSMAP_PARENT -1
7927 #define XML_TREE_NSMAP_XML -2
7928 #define XML_TREE_NSMAP_DOC -3
7929 #define XML_TREE_NSMAP_CUSTOM -4
7930 
7931 typedef struct xmlNsMapItem *xmlNsMapItemPtr;
7932 struct xmlNsMapItem {
7933     xmlNsMapItemPtr next;
7934     xmlNsMapItemPtr prev;
7935     xmlNsPtr oldNs; /* old ns decl reference */
7936     xmlNsPtr newNs; /* new ns decl reference */
7937     int shadowDepth; /* Shadowed at this depth */
7938     /*
7939     * depth:
7940     * >= 0 == @node's ns-decls
7941     * -1   == @parent's ns-decls
7942     * -2   == the doc->oldNs XML ns-decl
7943     * -3   == the doc->oldNs storage ns-decls
7944     * -4   == ns-decls provided via custom ns-handling
7945     */
7946     int depth;
7947 };
7948 
7949 typedef struct xmlNsMap *xmlNsMapPtr;
7950 struct xmlNsMap {
7951     xmlNsMapItemPtr first;
7952     xmlNsMapItemPtr last;
7953     xmlNsMapItemPtr pool;
7954 };
7955 
7956 #define XML_NSMAP_NOTEMPTY(m) (((m) != NULL) && ((m)->first != NULL))
7957 #define XML_NSMAP_FOREACH(m, i) for (i = (m)->first; i != NULL; i = (i)->next)
7958 #define XML_NSMAP_POP(m, i) \
7959     i = (m)->last; \
7960     (m)->last = (i)->prev; \
7961     if ((m)->last == NULL) \
7962 	(m)->first = NULL; \
7963     else \
7964 	(m)->last->next = NULL; \
7965     (i)->next = (m)->pool; \
7966     (m)->pool = i;
7967 
7968 /*
7969 * xmlDOMWrapNsMapFree:
7970 * @map: the ns-map
7971 *
7972 * Frees the ns-map
7973 */
7974 static void
xmlDOMWrapNsMapFree(xmlNsMapPtr nsmap)7975 xmlDOMWrapNsMapFree(xmlNsMapPtr nsmap)
7976 {
7977     xmlNsMapItemPtr cur, tmp;
7978 
7979     if (nsmap == NULL)
7980 	return;
7981     cur = nsmap->pool;
7982     while (cur != NULL) {
7983 	tmp = cur;
7984 	cur = cur->next;
7985 	xmlFree(tmp);
7986     }
7987     cur = nsmap->first;
7988     while (cur != NULL) {
7989 	tmp = cur;
7990 	cur = cur->next;
7991 	xmlFree(tmp);
7992     }
7993     xmlFree(nsmap);
7994 }
7995 
7996 /*
7997 * xmlDOMWrapNsMapAddItem:
7998 * @map: the ns-map
7999 * @oldNs: the old ns-struct
8000 * @newNs: the new ns-struct
8001 * @depth: depth and ns-kind information
8002 *
8003 * Adds an ns-mapping item.
8004 */
8005 static xmlNsMapItemPtr
xmlDOMWrapNsMapAddItem(xmlNsMapPtr * nsmap,int position,xmlNsPtr oldNs,xmlNsPtr newNs,int depth)8006 xmlDOMWrapNsMapAddItem(xmlNsMapPtr *nsmap, int position,
8007 		       xmlNsPtr oldNs, xmlNsPtr newNs, int depth)
8008 {
8009     xmlNsMapItemPtr ret;
8010     xmlNsMapPtr map;
8011 
8012     if (nsmap == NULL)
8013 	return(NULL);
8014     if ((position != -1) && (position != 0))
8015 	return(NULL);
8016     map = *nsmap;
8017 
8018     if (map == NULL) {
8019 	/*
8020 	* Create the ns-map.
8021 	*/
8022 	map = (xmlNsMapPtr) xmlMalloc(sizeof(struct xmlNsMap));
8023 	if (map == NULL)
8024 	    return(NULL);
8025 	memset(map, 0, sizeof(struct xmlNsMap));
8026 	*nsmap = map;
8027     }
8028 
8029     if (map->pool != NULL) {
8030 	/*
8031 	* Reuse an item from the pool.
8032 	*/
8033 	ret = map->pool;
8034 	map->pool = ret->next;
8035 	memset(ret, 0, sizeof(struct xmlNsMapItem));
8036     } else {
8037 	/*
8038 	* Create a new item.
8039 	*/
8040 	ret = (xmlNsMapItemPtr) xmlMalloc(sizeof(struct xmlNsMapItem));
8041 	if (ret == NULL)
8042 	    return(NULL);
8043 	memset(ret, 0, sizeof(struct xmlNsMapItem));
8044     }
8045 
8046     if (map->first == NULL) {
8047 	/*
8048 	* First ever.
8049 	*/
8050 	map->first = ret;
8051 	map->last = ret;
8052     } else if (position == -1) {
8053 	/*
8054 	* Append.
8055 	*/
8056 	ret->prev = map->last;
8057 	map->last->next = ret;
8058 	map->last = ret;
8059     } else if (position == 0) {
8060 	/*
8061 	* Set on first position.
8062 	*/
8063 	map->first->prev = ret;
8064 	ret->next = map->first;
8065 	map->first = ret;
8066     }
8067 
8068     ret->oldNs = oldNs;
8069     ret->newNs = newNs;
8070     ret->shadowDepth = -1;
8071     ret->depth = depth;
8072     return (ret);
8073 }
8074 
8075 /*
8076 * xmlDOMWrapStoreNs:
8077 * @doc: the doc
8078 * @nsName: the namespace name
8079 * @prefix: the prefix
8080 *
8081 * Creates or reuses an xmlNs struct on doc->oldNs with
8082 * the given prefix and namespace name.
8083 *
8084 * Returns the acquired ns struct or NULL in case of an API
8085 *         or internal error.
8086 */
8087 static xmlNsPtr
xmlDOMWrapStoreNs(xmlDocPtr doc,const xmlChar * nsName,const xmlChar * prefix)8088 xmlDOMWrapStoreNs(xmlDocPtr doc,
8089 		   const xmlChar *nsName,
8090 		   const xmlChar *prefix)
8091 {
8092     xmlNsPtr ns;
8093 
8094     if (doc == NULL)
8095 	return (NULL);
8096     ns = xmlTreeEnsureXMLDecl(doc);
8097     if (ns == NULL)
8098 	return (NULL);
8099     if (ns->next != NULL) {
8100 	/* Reuse. */
8101 	ns = ns->next;
8102 	while (ns != NULL) {
8103 	    if (((ns->prefix == prefix) ||
8104 		xmlStrEqual(ns->prefix, prefix)) &&
8105 		xmlStrEqual(ns->href, nsName)) {
8106 		return (ns);
8107 	    }
8108 	    if (ns->next == NULL)
8109 		break;
8110 	    ns = ns->next;
8111 	}
8112     }
8113     /* Create. */
8114     if (ns != NULL) {
8115         ns->next = xmlNewNs(NULL, nsName, prefix);
8116         return (ns->next);
8117     }
8118     return(NULL);
8119 }
8120 
8121 /*
8122 * xmlDOMWrapNewCtxt:
8123 *
8124 * Allocates and initializes a new DOM-wrapper context.
8125 *
8126 * Returns the xmlDOMWrapCtxtPtr or NULL in case of an internal error.
8127 */
8128 xmlDOMWrapCtxtPtr
xmlDOMWrapNewCtxt(void)8129 xmlDOMWrapNewCtxt(void)
8130 {
8131     xmlDOMWrapCtxtPtr ret;
8132 
8133     ret = xmlMalloc(sizeof(xmlDOMWrapCtxt));
8134     if (ret == NULL)
8135 	return (NULL);
8136     memset(ret, 0, sizeof(xmlDOMWrapCtxt));
8137     return (ret);
8138 }
8139 
8140 /*
8141 * xmlDOMWrapFreeCtxt:
8142 * @ctxt: the DOM-wrapper context
8143 *
8144 * Frees the DOM-wrapper context.
8145 */
8146 void
xmlDOMWrapFreeCtxt(xmlDOMWrapCtxtPtr ctxt)8147 xmlDOMWrapFreeCtxt(xmlDOMWrapCtxtPtr ctxt)
8148 {
8149     if (ctxt == NULL)
8150 	return;
8151     if (ctxt->namespaceMap != NULL)
8152 	xmlDOMWrapNsMapFree((xmlNsMapPtr) ctxt->namespaceMap);
8153     /*
8154     * TODO: Store the namespace map in the context.
8155     */
8156     xmlFree(ctxt);
8157 }
8158 
8159 /*
8160 * xmlTreeLookupNsListByPrefix:
8161 * @nsList: a list of ns-structs
8162 * @prefix: the searched prefix
8163 *
8164 * Searches for a ns-decl with the given prefix in @nsList.
8165 *
8166 * Returns the ns-decl if found, NULL if not found and on
8167 *         API errors.
8168 */
8169 static xmlNsPtr
xmlTreeNSListLookupByPrefix(xmlNsPtr nsList,const xmlChar * prefix)8170 xmlTreeNSListLookupByPrefix(xmlNsPtr nsList, const xmlChar *prefix)
8171 {
8172     if (nsList == NULL)
8173 	return (NULL);
8174     {
8175 	xmlNsPtr ns;
8176 	ns = nsList;
8177 	do {
8178 	    if ((prefix == ns->prefix) ||
8179 		xmlStrEqual(prefix, ns->prefix)) {
8180 		return (ns);
8181 	    }
8182 	    ns = ns->next;
8183 	} while (ns != NULL);
8184     }
8185     return (NULL);
8186 }
8187 
8188 /*
8189 *
8190 * xmlDOMWrapNSNormGatherInScopeNs:
8191 * @map: the namespace map
8192 * @node: the node to start with
8193 *
8194 * Puts in-scope namespaces into the ns-map.
8195 *
8196 * Returns 0 on success, -1 on API or internal errors.
8197 */
8198 static int
xmlDOMWrapNSNormGatherInScopeNs(xmlNsMapPtr * map,xmlNodePtr node)8199 xmlDOMWrapNSNormGatherInScopeNs(xmlNsMapPtr *map,
8200 				xmlNodePtr node)
8201 {
8202     xmlNodePtr cur;
8203     xmlNsPtr ns;
8204     xmlNsMapItemPtr mi;
8205     int shadowed;
8206 
8207     if ((map == NULL) || (*map != NULL))
8208 	return (-1);
8209     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL))
8210         return (-1);
8211     /*
8212     * Get in-scope ns-decls of @parent.
8213     */
8214     cur = node;
8215     while ((cur != NULL) && (cur != (xmlNodePtr) cur->doc)) {
8216 	if (cur->type == XML_ELEMENT_NODE) {
8217 	    if (cur->nsDef != NULL) {
8218 		ns = cur->nsDef;
8219 		do {
8220 		    shadowed = 0;
8221 		    if (XML_NSMAP_NOTEMPTY(*map)) {
8222 			/*
8223 			* Skip shadowed prefixes.
8224 			*/
8225 			XML_NSMAP_FOREACH(*map, mi) {
8226 			    if ((ns->prefix == mi->newNs->prefix) ||
8227 				xmlStrEqual(ns->prefix, mi->newNs->prefix)) {
8228 				shadowed = 1;
8229 				break;
8230 			    }
8231 			}
8232 		    }
8233 		    /*
8234 		    * Insert mapping.
8235 		    */
8236 		    mi = xmlDOMWrapNsMapAddItem(map, 0, NULL,
8237 			ns, XML_TREE_NSMAP_PARENT);
8238 		    if (mi == NULL)
8239 			return (-1);
8240 		    if (shadowed)
8241 			mi->shadowDepth = 0;
8242 		    ns = ns->next;
8243 		} while (ns != NULL);
8244 	    }
8245 	}
8246 	cur = cur->parent;
8247     }
8248     return (0);
8249 }
8250 
8251 /*
8252 * XML_TREE_ADOPT_STR: If we have a dest-dict, put @str in the dict;
8253 * otherwise copy it, when it was in the source-dict.
8254 */
8255 #define XML_TREE_ADOPT_STR(str) \
8256     if (adoptStr && (str != NULL)) { \
8257 	if (destDoc->dict) { \
8258 	    const xmlChar *old = str;	\
8259 	    str = xmlDictLookup(destDoc->dict, str, -1); \
8260 	    if ((sourceDoc == NULL) || (sourceDoc->dict == NULL) || \
8261 	        (!xmlDictOwns(sourceDoc->dict, old))) \
8262 		xmlFree((char *)old); \
8263 	} else if ((sourceDoc) && (sourceDoc->dict) && \
8264 	    xmlDictOwns(sourceDoc->dict, str)) { \
8265 	    str = BAD_CAST xmlStrdup(str); \
8266 	} \
8267     }
8268 
8269 /*
8270 * XML_TREE_ADOPT_STR_2: If @str was in the source-dict, then
8271 * put it in dest-dict or copy it.
8272 */
8273 #define XML_TREE_ADOPT_STR_2(str) \
8274     if (adoptStr && (str != NULL) && (sourceDoc != NULL) && \
8275 	(sourceDoc->dict != NULL) && \
8276 	xmlDictOwns(sourceDoc->dict, cur->content)) { \
8277 	if (destDoc->dict) \
8278 	    cur->content = (xmlChar *) \
8279 		xmlDictLookup(destDoc->dict, cur->content, -1); \
8280 	else \
8281 	    cur->content = xmlStrdup(BAD_CAST cur->content); \
8282     }
8283 
8284 /*
8285 * xmlDOMWrapNSNormAddNsMapItem2:
8286 *
8287 * For internal use. Adds a ns-decl mapping.
8288 *
8289 * Returns 0 on success, -1 on internal errors.
8290 */
8291 static int
xmlDOMWrapNSNormAddNsMapItem2(xmlNsPtr ** list,int * size,int * number,xmlNsPtr oldNs,xmlNsPtr newNs)8292 xmlDOMWrapNSNormAddNsMapItem2(xmlNsPtr **list, int *size, int *number,
8293 			xmlNsPtr oldNs, xmlNsPtr newNs)
8294 {
8295     if (*list == NULL) {
8296 	*list = (xmlNsPtr *) xmlMalloc(6 * sizeof(xmlNsPtr));
8297 	if (*list == NULL)
8298 	    return(-1);
8299 	*size = 3;
8300 	*number = 0;
8301     } else if ((*number) >= (*size)) {
8302 	*size *= 2;
8303 	*list = (xmlNsPtr *) xmlRealloc(*list,
8304 	    (*size) * 2 * sizeof(xmlNsPtr));
8305 	if (*list == NULL)
8306 	    return(-1);
8307     }
8308     (*list)[2 * (*number)] = oldNs;
8309     (*list)[2 * (*number) +1] = newNs;
8310     (*number)++;
8311     return (0);
8312 }
8313 
8314 /*
8315 * xmlDOMWrapRemoveNode:
8316 * @ctxt: a DOM wrapper context
8317 * @doc: the doc
8318 * @node: the node to be removed.
8319 * @options: set of options, unused at the moment
8320 *
8321 * Unlinks the given node from its owner.
8322 * This will substitute ns-references to node->nsDef for
8323 * ns-references to doc->oldNs, thus ensuring the removed
8324 * branch to be autark wrt ns-references.
8325 *
8326 * NOTE: This function was not intensively tested.
8327 *
8328 * Returns 0 on success, 1 if the node is not supported,
8329 *         -1 on API and internal errors.
8330 */
8331 int
xmlDOMWrapRemoveNode(xmlDOMWrapCtxtPtr ctxt,xmlDocPtr doc,xmlNodePtr node,int options ATTRIBUTE_UNUSED)8332 xmlDOMWrapRemoveNode(xmlDOMWrapCtxtPtr ctxt, xmlDocPtr doc,
8333 		     xmlNodePtr node, int options ATTRIBUTE_UNUSED)
8334 {
8335     xmlNsPtr *list = NULL;
8336     int sizeList, nbList, i, j;
8337     xmlNsPtr ns;
8338 
8339     if ((node == NULL) || (doc == NULL) || (node->doc != doc))
8340 	return (-1);
8341 
8342     /* TODO: 0 or -1 ? */
8343     if (node->parent == NULL)
8344 	return (0);
8345 
8346     switch (node->type) {
8347 	case XML_TEXT_NODE:
8348 	case XML_CDATA_SECTION_NODE:
8349 	case XML_ENTITY_REF_NODE:
8350 	case XML_PI_NODE:
8351 	case XML_COMMENT_NODE:
8352 	    xmlUnlinkNode(node);
8353 	    return (0);
8354 	case XML_ELEMENT_NODE:
8355 	case XML_ATTRIBUTE_NODE:
8356 	    break;
8357 	default:
8358 	    return (1);
8359     }
8360     xmlUnlinkNode(node);
8361     /*
8362     * Save out-of-scope ns-references in doc->oldNs.
8363     */
8364     do {
8365 	switch (node->type) {
8366 	    case XML_ELEMENT_NODE:
8367 		if ((ctxt == NULL) && (node->nsDef != NULL)) {
8368 		    ns = node->nsDef;
8369 		    do {
8370 			if (xmlDOMWrapNSNormAddNsMapItem2(&list, &sizeList,
8371 			    &nbList, ns, ns) == -1)
8372 			    goto internal_error;
8373 			ns = ns->next;
8374 		    } while (ns != NULL);
8375 		}
8376                 /* Falls through. */
8377 	    case XML_ATTRIBUTE_NODE:
8378 		if (node->ns != NULL) {
8379 		    /*
8380 		    * Find a mapping.
8381 		    */
8382 		    if (list != NULL) {
8383 			for (i = 0, j = 0; i < nbList; i++, j += 2) {
8384 			    if (node->ns == list[j]) {
8385 				node->ns = list[++j];
8386 				goto next_node;
8387 			    }
8388 			}
8389 		    }
8390 		    ns = NULL;
8391 		    if (ctxt != NULL) {
8392 			/*
8393 			* User defined.
8394 			*/
8395 		    } else {
8396 			/*
8397 			* Add to doc's oldNs.
8398 			*/
8399 			ns = xmlDOMWrapStoreNs(doc, node->ns->href,
8400 			    node->ns->prefix);
8401 			if (ns == NULL)
8402 			    goto internal_error;
8403 		    }
8404 		    if (ns != NULL) {
8405 			/*
8406 			* Add mapping.
8407 			*/
8408 			if (xmlDOMWrapNSNormAddNsMapItem2(&list, &sizeList,
8409 			    &nbList, node->ns, ns) == -1)
8410 			    goto internal_error;
8411 		    }
8412 		    node->ns = ns;
8413 		}
8414 		if ((node->type == XML_ELEMENT_NODE) &&
8415 		    (node->properties != NULL)) {
8416 		    node = (xmlNodePtr) node->properties;
8417 		    continue;
8418 		}
8419 		break;
8420 	    default:
8421 		goto next_sibling;
8422 	}
8423 next_node:
8424 	if ((node->type == XML_ELEMENT_NODE) &&
8425 	    (node->children != NULL)) {
8426 	    node = node->children;
8427 	    continue;
8428 	}
8429 next_sibling:
8430 	if (node == NULL)
8431 	    break;
8432 	if (node->next != NULL)
8433 	    node = node->next;
8434 	else {
8435 	    node = node->parent;
8436 	    goto next_sibling;
8437 	}
8438     } while (node != NULL);
8439 
8440     if (list != NULL)
8441 	xmlFree(list);
8442     return (0);
8443 
8444 internal_error:
8445     if (list != NULL)
8446 	xmlFree(list);
8447     return (-1);
8448 }
8449 
8450 /*
8451 * xmlSearchNsByNamespaceStrict:
8452 * @doc: the document
8453 * @node: the start node
8454 * @nsName: the searched namespace name
8455 * @retNs: the resulting ns-decl
8456 * @prefixed: if the found ns-decl must have a prefix (for attributes)
8457 *
8458 * Dynamically searches for a ns-declaration which matches
8459 * the given @nsName in the ancestor-or-self axis of @node.
8460 *
8461 * Returns 1 if a ns-decl was found, 0 if not and -1 on API
8462 *         and internal errors.
8463 */
8464 static int
xmlSearchNsByNamespaceStrict(xmlDocPtr doc,xmlNodePtr node,const xmlChar * nsName,xmlNsPtr * retNs,int prefixed)8465 xmlSearchNsByNamespaceStrict(xmlDocPtr doc, xmlNodePtr node,
8466 			     const xmlChar* nsName,
8467 			     xmlNsPtr *retNs, int prefixed)
8468 {
8469     xmlNodePtr cur, prev = NULL, out = NULL;
8470     xmlNsPtr ns, prevns;
8471 
8472     if ((doc == NULL) || (nsName == NULL) || (retNs == NULL))
8473 	return (-1);
8474     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL))
8475         return(-1);
8476 
8477     *retNs = NULL;
8478     if (xmlStrEqual(nsName, XML_XML_NAMESPACE)) {
8479 	*retNs = xmlTreeEnsureXMLDecl(doc);
8480 	if (*retNs == NULL)
8481 	    return (-1);
8482 	return (1);
8483     }
8484     cur = node;
8485     do {
8486 	if (cur->type == XML_ELEMENT_NODE) {
8487 	    if (cur->nsDef != NULL) {
8488 		for (ns = cur->nsDef; ns != NULL; ns = ns->next) {
8489 		    if (prefixed && (ns->prefix == NULL))
8490 			continue;
8491 		    if (prev != NULL) {
8492 			/*
8493 			* Check the last level of ns-decls for a
8494 			* shadowing prefix.
8495 			*/
8496 			prevns = prev->nsDef;
8497 			do {
8498 			    if ((prevns->prefix == ns->prefix) ||
8499 				((prevns->prefix != NULL) &&
8500 				(ns->prefix != NULL) &&
8501 				xmlStrEqual(prevns->prefix, ns->prefix))) {
8502 				/*
8503 				* Shadowed.
8504 				*/
8505 				break;
8506 			    }
8507 			    prevns = prevns->next;
8508 			} while (prevns != NULL);
8509 			if (prevns != NULL)
8510 			    continue;
8511 		    }
8512 		    /*
8513 		    * Ns-name comparison.
8514 		    */
8515 		    if ((nsName == ns->href) ||
8516 			xmlStrEqual(nsName, ns->href)) {
8517 			/*
8518 			* At this point the prefix can only be shadowed,
8519 			* if we are the the (at least) 3rd level of
8520 			* ns-decls.
8521 			*/
8522 			if (out) {
8523 			    int ret;
8524 
8525 			    ret = xmlNsInScope(doc, node, prev, ns->prefix);
8526 			    if (ret < 0)
8527 				return (-1);
8528 			    /*
8529 			    * TODO: Should we try to find a matching ns-name
8530 			    * only once? This here keeps on searching.
8531 			    * I think we should try further since, there might
8532 			    * be an other matching ns-decl with an unshadowed
8533 			    * prefix.
8534 			    */
8535 			    if (! ret)
8536 				continue;
8537 			}
8538 			*retNs = ns;
8539 			return (1);
8540 		    }
8541 		}
8542 		out = prev;
8543 		prev = cur;
8544 	    }
8545 	} else if ((cur->type == XML_ENTITY_NODE) ||
8546             (cur->type == XML_ENTITY_DECL))
8547 	    return (0);
8548 	cur = cur->parent;
8549     } while ((cur != NULL) && (cur->doc != (xmlDocPtr) cur));
8550     return (0);
8551 }
8552 
8553 /*
8554 * xmlSearchNsByPrefixStrict:
8555 * @doc: the document
8556 * @node: the start node
8557 * @prefix: the searched namespace prefix
8558 * @retNs: the resulting ns-decl
8559 *
8560 * Dynamically searches for a ns-declaration which matches
8561 * the given @nsName in the ancestor-or-self axis of @node.
8562 *
8563 * Returns 1 if a ns-decl was found, 0 if not and -1 on API
8564 *         and internal errors.
8565 */
8566 static int
xmlSearchNsByPrefixStrict(xmlDocPtr doc,xmlNodePtr node,const xmlChar * prefix,xmlNsPtr * retNs)8567 xmlSearchNsByPrefixStrict(xmlDocPtr doc, xmlNodePtr node,
8568 			  const xmlChar* prefix,
8569 			  xmlNsPtr *retNs)
8570 {
8571     xmlNodePtr cur;
8572     xmlNsPtr ns;
8573 
8574     if ((doc == NULL) || (node == NULL) || (node->type == XML_NAMESPACE_DECL))
8575         return(-1);
8576 
8577     if (retNs)
8578 	*retNs = NULL;
8579     if (IS_STR_XML(prefix)) {
8580 	if (retNs) {
8581 	    *retNs = xmlTreeEnsureXMLDecl(doc);
8582 	    if (*retNs == NULL)
8583 		return (-1);
8584 	}
8585 	return (1);
8586     }
8587     cur = node;
8588     do {
8589 	if (cur->type == XML_ELEMENT_NODE) {
8590 	    if (cur->nsDef != NULL) {
8591 		ns = cur->nsDef;
8592 		do {
8593 		    if ((prefix == ns->prefix) ||
8594 			xmlStrEqual(prefix, ns->prefix))
8595 		    {
8596 			/*
8597 			* Disabled namespaces, e.g. xmlns:abc="".
8598 			*/
8599 			if (ns->href == NULL)
8600 			    return(0);
8601 			if (retNs)
8602 			    *retNs = ns;
8603 			return (1);
8604 		    }
8605 		    ns = ns->next;
8606 		} while (ns != NULL);
8607 	    }
8608 	} else if ((cur->type == XML_ENTITY_NODE) ||
8609             (cur->type == XML_ENTITY_DECL))
8610 	    return (0);
8611 	cur = cur->parent;
8612     } while ((cur != NULL) && (cur->doc != (xmlDocPtr) cur));
8613     return (0);
8614 }
8615 
8616 /*
8617 * xmlDOMWrapNSNormDeclareNsForced:
8618 * @doc: the doc
8619 * @elem: the element-node to declare on
8620 * @nsName: the namespace-name of the ns-decl
8621 * @prefix: the preferred prefix of the ns-decl
8622 * @checkShadow: ensure that the new ns-decl doesn't shadow ancestor ns-decls
8623 *
8624 * Declares a new namespace on @elem. It tries to use the
8625 * given @prefix; if a ns-decl with the given prefix is already existent
8626 * on @elem, it will generate an other prefix.
8627 *
8628 * Returns 1 if a ns-decl was found, 0 if not and -1 on API
8629 *         and internal errors.
8630 */
8631 static xmlNsPtr
xmlDOMWrapNSNormDeclareNsForced(xmlDocPtr doc,xmlNodePtr elem,const xmlChar * nsName,const xmlChar * prefix,int checkShadow)8632 xmlDOMWrapNSNormDeclareNsForced(xmlDocPtr doc,
8633 				xmlNodePtr elem,
8634 				const xmlChar *nsName,
8635 				const xmlChar *prefix,
8636 				int checkShadow)
8637 {
8638 
8639     xmlNsPtr ret;
8640     char buf[50];
8641     const xmlChar *pref;
8642     int counter = 0;
8643 
8644     if ((doc == NULL) || (elem == NULL) || (elem->type != XML_ELEMENT_NODE))
8645         return(NULL);
8646     /*
8647     * Create a ns-decl on @anchor.
8648     */
8649     pref = prefix;
8650     while (1) {
8651 	/*
8652 	* Lookup whether the prefix is unused in elem's ns-decls.
8653 	*/
8654 	if ((elem->nsDef != NULL) &&
8655 	    (xmlTreeNSListLookupByPrefix(elem->nsDef, pref) != NULL))
8656 	    goto ns_next_prefix;
8657 	if (checkShadow && elem->parent &&
8658 	    ((xmlNodePtr) elem->parent->doc != elem->parent)) {
8659 	    /*
8660 	    * Does it shadow ancestor ns-decls?
8661 	    */
8662 	    if (xmlSearchNsByPrefixStrict(doc, elem->parent, pref, NULL) == 1)
8663 		goto ns_next_prefix;
8664 	}
8665 	ret = xmlNewNs(NULL, nsName, pref);
8666 	if (ret == NULL)
8667 	    return (NULL);
8668 	if (elem->nsDef == NULL)
8669 	    elem->nsDef = ret;
8670 	else {
8671 	    xmlNsPtr ns2 = elem->nsDef;
8672 	    while (ns2->next != NULL)
8673 		ns2 = ns2->next;
8674 	    ns2->next = ret;
8675 	}
8676 	return (ret);
8677 ns_next_prefix:
8678 	counter++;
8679 	if (counter > 1000)
8680 	    return (NULL);
8681 	if (prefix == NULL) {
8682 	    snprintf((char *) buf, sizeof(buf),
8683 		"ns_%d", counter);
8684 	} else
8685 	    snprintf((char *) buf, sizeof(buf),
8686 	    "%.30s_%d", (char *)prefix, counter);
8687 	pref = BAD_CAST buf;
8688     }
8689 }
8690 
8691 /*
8692 * xmlDOMWrapNSNormAcquireNormalizedNs:
8693 * @doc: the doc
8694 * @elem: the element-node to declare namespaces on
8695 * @ns: the ns-struct to use for the search
8696 * @retNs: the found/created ns-struct
8697 * @nsMap: the ns-map
8698 * @depth: the current tree depth
8699 * @ancestorsOnly: search in ancestor ns-decls only
8700 * @prefixed: if the searched ns-decl must have a prefix (for attributes)
8701 *
8702 * Searches for a matching ns-name in the ns-decls of @nsMap, if not
8703 * found it will either declare it on @elem, or store it in doc->oldNs.
8704 * If a new ns-decl needs to be declared on @elem, it tries to use the
8705 * @ns->prefix for it, if this prefix is already in use on @elem, it will
8706 * change the prefix or the new ns-decl.
8707 *
8708 * Returns 0 if succeeded, -1 otherwise and on API/internal errors.
8709 */
8710 static int
xmlDOMWrapNSNormAcquireNormalizedNs(xmlDocPtr doc,xmlNodePtr elem,xmlNsPtr ns,xmlNsPtr * retNs,xmlNsMapPtr * nsMap,int depth,int ancestorsOnly,int prefixed)8711 xmlDOMWrapNSNormAcquireNormalizedNs(xmlDocPtr doc,
8712 				   xmlNodePtr elem,
8713 				   xmlNsPtr ns,
8714 				   xmlNsPtr *retNs,
8715 				   xmlNsMapPtr *nsMap,
8716 
8717 				   int depth,
8718 				   int ancestorsOnly,
8719 				   int prefixed)
8720 {
8721     xmlNsMapItemPtr mi;
8722 
8723     if ((doc == NULL) || (ns == NULL) || (retNs == NULL) ||
8724 	(nsMap == NULL))
8725 	return (-1);
8726 
8727     *retNs = NULL;
8728     /*
8729     * Handle XML namespace.
8730     */
8731     if (IS_STR_XML(ns->prefix)) {
8732 	/*
8733 	* Insert XML namespace mapping.
8734 	*/
8735 	*retNs = xmlTreeEnsureXMLDecl(doc);
8736 	if (*retNs == NULL)
8737 	    return (-1);
8738 	return (0);
8739     }
8740     /*
8741     * If the search should be done in ancestors only and no
8742     * @elem (the first ancestor) was specified, then skip the search.
8743     */
8744     if ((XML_NSMAP_NOTEMPTY(*nsMap)) &&
8745 	(! (ancestorsOnly && (elem == NULL))))
8746     {
8747 	/*
8748 	* Try to find an equal ns-name in in-scope ns-decls.
8749 	*/
8750 	XML_NSMAP_FOREACH(*nsMap, mi) {
8751 	    if ((mi->depth >= XML_TREE_NSMAP_PARENT) &&
8752 		/*
8753 		* ancestorsOnly: This should be turned on to gain speed,
8754 		* if one knows that the branch itself was already
8755 		* ns-wellformed and no stale references existed.
8756 		* I.e. it searches in the ancestor axis only.
8757 		*/
8758 		((! ancestorsOnly) || (mi->depth == XML_TREE_NSMAP_PARENT)) &&
8759 		/* Skip shadowed prefixes. */
8760 		(mi->shadowDepth == -1) &&
8761 		/* Skip xmlns="" or xmlns:foo="". */
8762 		((mi->newNs->href != NULL) &&
8763 		(mi->newNs->href[0] != 0)) &&
8764 		/* Ensure a prefix if wanted. */
8765 		((! prefixed) || (mi->newNs->prefix != NULL)) &&
8766 		/* Equal ns name */
8767 		((mi->newNs->href == ns->href) ||
8768 		xmlStrEqual(mi->newNs->href, ns->href))) {
8769 		/* Set the mapping. */
8770 		mi->oldNs = ns;
8771 		*retNs = mi->newNs;
8772 		return (0);
8773 	    }
8774 	}
8775     }
8776     /*
8777     * No luck, the namespace is out of scope or shadowed.
8778     */
8779     if (elem == NULL) {
8780 	xmlNsPtr tmpns;
8781 
8782 	/*
8783 	* Store ns-decls in "oldNs" of the document-node.
8784 	*/
8785 	tmpns = xmlDOMWrapStoreNs(doc, ns->href, ns->prefix);
8786 	if (tmpns == NULL)
8787 	    return (-1);
8788 	/*
8789 	* Insert mapping.
8790 	*/
8791 	if (xmlDOMWrapNsMapAddItem(nsMap, -1, ns,
8792 		tmpns, XML_TREE_NSMAP_DOC) == NULL) {
8793 	    xmlFreeNs(tmpns);
8794 	    return (-1);
8795 	}
8796 	*retNs = tmpns;
8797     } else {
8798 	xmlNsPtr tmpns;
8799 
8800 	tmpns = xmlDOMWrapNSNormDeclareNsForced(doc, elem, ns->href,
8801 	    ns->prefix, 0);
8802 	if (tmpns == NULL)
8803 	    return (-1);
8804 
8805 	if (*nsMap != NULL) {
8806 	    /*
8807 	    * Does it shadow ancestor ns-decls?
8808 	    */
8809 	    XML_NSMAP_FOREACH(*nsMap, mi) {
8810 		if ((mi->depth < depth) &&
8811 		    (mi->shadowDepth == -1) &&
8812 		    ((ns->prefix == mi->newNs->prefix) ||
8813 		    xmlStrEqual(ns->prefix, mi->newNs->prefix))) {
8814 		    /*
8815 		    * Shadows.
8816 		    */
8817 		    mi->shadowDepth = depth;
8818 		    break;
8819 		}
8820 	    }
8821 	}
8822 	if (xmlDOMWrapNsMapAddItem(nsMap, -1, ns, tmpns, depth) == NULL) {
8823 	    xmlFreeNs(tmpns);
8824 	    return (-1);
8825 	}
8826 	*retNs = tmpns;
8827     }
8828     return (0);
8829 }
8830 
8831 typedef enum {
8832     XML_DOM_RECONNS_REMOVEREDUND = 1<<0
8833 } xmlDOMReconcileNSOptions;
8834 
8835 /*
8836 * xmlDOMWrapReconcileNamespaces:
8837 * @ctxt: DOM wrapper context, unused at the moment
8838 * @elem: the element-node
8839 * @options: option flags
8840 *
8841 * Ensures that ns-references point to ns-decls hold on element-nodes.
8842 * Ensures that the tree is namespace wellformed by creating additional
8843 * ns-decls where needed. Note that, since prefixes of already existent
8844 * ns-decls can be shadowed by this process, it could break QNames in
8845 * attribute values or element content.
8846 *
8847 * NOTE: This function was not intensively tested.
8848 *
8849 * Returns 0 if succeeded, -1 otherwise and on API/internal errors.
8850 */
8851 
8852 int
xmlDOMWrapReconcileNamespaces(xmlDOMWrapCtxtPtr ctxt ATTRIBUTE_UNUSED,xmlNodePtr elem,int options)8853 xmlDOMWrapReconcileNamespaces(xmlDOMWrapCtxtPtr ctxt ATTRIBUTE_UNUSED,
8854 			      xmlNodePtr elem,
8855 			      int options)
8856 {
8857     int depth = -1, adoptns = 0, parnsdone = 0;
8858     xmlNsPtr ns, prevns;
8859     xmlDocPtr doc;
8860     xmlNodePtr cur, curElem = NULL;
8861     xmlNsMapPtr nsMap = NULL;
8862     xmlNsMapItemPtr /* topmi = NULL, */ mi;
8863     /* @ancestorsOnly should be set by an option flag. */
8864     int ancestorsOnly = 0;
8865     int optRemoveRedundantNS =
8866 	((xmlDOMReconcileNSOptions) options & XML_DOM_RECONNS_REMOVEREDUND) ? 1 : 0;
8867     xmlNsPtr *listRedund = NULL;
8868     int sizeRedund = 0, nbRedund = 0, ret, i, j;
8869 
8870     if ((elem == NULL) || (elem->doc == NULL) ||
8871 	(elem->type != XML_ELEMENT_NODE))
8872 	return (-1);
8873 
8874     doc = elem->doc;
8875     cur = elem;
8876     do {
8877 	switch (cur->type) {
8878 	    case XML_ELEMENT_NODE:
8879 		adoptns = 1;
8880 		curElem = cur;
8881 		depth++;
8882 		/*
8883 		* Namespace declarations.
8884 		*/
8885 		if (cur->nsDef != NULL) {
8886 		    prevns = NULL;
8887 		    ns = cur->nsDef;
8888 		    while (ns != NULL) {
8889 			if (! parnsdone) {
8890 			    if ((elem->parent) &&
8891 				((xmlNodePtr) elem->parent->doc != elem->parent)) {
8892 				/*
8893 				* Gather ancestor in-scope ns-decls.
8894 				*/
8895 				if (xmlDOMWrapNSNormGatherInScopeNs(&nsMap,
8896 				    elem->parent) == -1)
8897 				    goto internal_error;
8898 			    }
8899 			    parnsdone = 1;
8900 			}
8901 
8902 			/*
8903 			* Lookup the ns ancestor-axis for equal ns-decls in scope.
8904 			*/
8905 			if (optRemoveRedundantNS && XML_NSMAP_NOTEMPTY(nsMap)) {
8906 			    XML_NSMAP_FOREACH(nsMap, mi) {
8907 				if ((mi->depth >= XML_TREE_NSMAP_PARENT) &&
8908 				    (mi->shadowDepth == -1) &&
8909 				    ((ns->prefix == mi->newNs->prefix) ||
8910 				      xmlStrEqual(ns->prefix, mi->newNs->prefix)) &&
8911 				    ((ns->href == mi->newNs->href) ||
8912 				      xmlStrEqual(ns->href, mi->newNs->href)))
8913 				{
8914 				    /*
8915 				    * A redundant ns-decl was found.
8916 				    * Add it to the list of redundant ns-decls.
8917 				    */
8918 				    if (xmlDOMWrapNSNormAddNsMapItem2(&listRedund,
8919 					&sizeRedund, &nbRedund, ns, mi->newNs) == -1)
8920 					goto internal_error;
8921 				    /*
8922 				    * Remove the ns-decl from the element-node.
8923 				    */
8924 				    if (prevns)
8925 					prevns->next = ns->next;
8926 				    else
8927 					cur->nsDef = ns->next;
8928 				    goto next_ns_decl;
8929 				}
8930 			    }
8931 			}
8932 
8933 			/*
8934 			* Skip ns-references handling if the referenced
8935 			* ns-decl is declared on the same element.
8936 			*/
8937 			if ((cur->ns != NULL) && adoptns && (cur->ns == ns))
8938 			    adoptns = 0;
8939 			/*
8940 			* Does it shadow any ns-decl?
8941 			*/
8942 			if (XML_NSMAP_NOTEMPTY(nsMap)) {
8943 			    XML_NSMAP_FOREACH(nsMap, mi) {
8944 				if ((mi->depth >= XML_TREE_NSMAP_PARENT) &&
8945 				    (mi->shadowDepth == -1) &&
8946 				    ((ns->prefix == mi->newNs->prefix) ||
8947 				    xmlStrEqual(ns->prefix, mi->newNs->prefix))) {
8948 
8949 				    mi->shadowDepth = depth;
8950 				}
8951 			    }
8952 			}
8953 			/*
8954 			* Push mapping.
8955 			*/
8956 			if (xmlDOMWrapNsMapAddItem(&nsMap, -1, ns, ns,
8957 			    depth) == NULL)
8958 			    goto internal_error;
8959 
8960 			prevns = ns;
8961 next_ns_decl:
8962 			ns = ns->next;
8963 		    }
8964 		}
8965 		if (! adoptns)
8966 		    goto ns_end;
8967                 /* Falls through. */
8968 	    case XML_ATTRIBUTE_NODE:
8969 		/* No ns, no fun. */
8970 		if (cur->ns == NULL)
8971 		    goto ns_end;
8972 
8973 		if (! parnsdone) {
8974 		    if ((elem->parent) &&
8975 			((xmlNodePtr) elem->parent->doc != elem->parent)) {
8976 			if (xmlDOMWrapNSNormGatherInScopeNs(&nsMap,
8977 				elem->parent) == -1)
8978 			    goto internal_error;
8979 		    }
8980 		    parnsdone = 1;
8981 		}
8982 		/*
8983 		* Adjust the reference if this was a redundant ns-decl.
8984 		*/
8985 		if (listRedund) {
8986 		   for (i = 0, j = 0; i < nbRedund; i++, j += 2) {
8987 		       if (cur->ns == listRedund[j]) {
8988 			   cur->ns = listRedund[++j];
8989 			   break;
8990 		       }
8991 		   }
8992 		}
8993 		/*
8994 		* Adopt ns-references.
8995 		*/
8996 		if (XML_NSMAP_NOTEMPTY(nsMap)) {
8997 		    /*
8998 		    * Search for a mapping.
8999 		    */
9000 		    XML_NSMAP_FOREACH(nsMap, mi) {
9001 			if ((mi->shadowDepth == -1) &&
9002 			    (cur->ns == mi->oldNs)) {
9003 
9004 			    cur->ns = mi->newNs;
9005 			    goto ns_end;
9006 			}
9007 		    }
9008 		}
9009 		/*
9010 		* Acquire a normalized ns-decl and add it to the map.
9011 		*/
9012 		if (xmlDOMWrapNSNormAcquireNormalizedNs(doc, curElem,
9013 			cur->ns, &ns,
9014 			&nsMap, depth,
9015 			ancestorsOnly,
9016 			(cur->type == XML_ATTRIBUTE_NODE) ? 1 : 0) == -1)
9017 		    goto internal_error;
9018 		cur->ns = ns;
9019 
9020 ns_end:
9021 		if ((cur->type == XML_ELEMENT_NODE) &&
9022 		    (cur->properties != NULL)) {
9023 		    /*
9024 		    * Process attributes.
9025 		    */
9026 		    cur = (xmlNodePtr) cur->properties;
9027 		    continue;
9028 		}
9029 		break;
9030 	    default:
9031 		goto next_sibling;
9032 	}
9033 into_content:
9034 	if ((cur->type == XML_ELEMENT_NODE) &&
9035 	    (cur->children != NULL)) {
9036 	    /*
9037 	    * Process content of element-nodes only.
9038 	    */
9039 	    cur = cur->children;
9040 	    continue;
9041 	}
9042 next_sibling:
9043 	if (cur == elem)
9044 	    break;
9045 	if (cur->type == XML_ELEMENT_NODE) {
9046 	    if (XML_NSMAP_NOTEMPTY(nsMap)) {
9047 		/*
9048 		* Pop mappings.
9049 		*/
9050 		while ((nsMap->last != NULL) &&
9051 		    (nsMap->last->depth >= depth))
9052 		{
9053 		    XML_NSMAP_POP(nsMap, mi)
9054 		}
9055 		/*
9056 		* Unshadow.
9057 		*/
9058 		XML_NSMAP_FOREACH(nsMap, mi) {
9059 		    if (mi->shadowDepth >= depth)
9060 			mi->shadowDepth = -1;
9061 		}
9062 	    }
9063 	    depth--;
9064 	}
9065 	if (cur->next != NULL)
9066 	    cur = cur->next;
9067 	else {
9068 	    if (cur->type == XML_ATTRIBUTE_NODE) {
9069 		cur = cur->parent;
9070 		goto into_content;
9071 	    }
9072 	    cur = cur->parent;
9073 	    goto next_sibling;
9074 	}
9075     } while (cur != NULL);
9076 
9077     ret = 0;
9078     goto exit;
9079 internal_error:
9080     ret = -1;
9081 exit:
9082     if (listRedund) {
9083 	for (i = 0, j = 0; i < nbRedund; i++, j += 2) {
9084 	    xmlFreeNs(listRedund[j]);
9085 	}
9086 	xmlFree(listRedund);
9087     }
9088     if (nsMap != NULL)
9089 	xmlDOMWrapNsMapFree(nsMap);
9090     return (ret);
9091 }
9092 
9093 /*
9094 * xmlDOMWrapAdoptBranch:
9095 * @ctxt: the optional context for custom processing
9096 * @sourceDoc: the optional sourceDoc
9097 * @node: the element-node to start with
9098 * @destDoc: the destination doc for adoption
9099 * @destParent: the optional new parent of @node in @destDoc
9100 * @options: option flags
9101 *
9102 * Ensures that ns-references point to @destDoc: either to
9103 * elements->nsDef entries if @destParent is given, or to
9104 * @destDoc->oldNs otherwise.
9105 * If @destParent is given, it ensures that the tree is namespace
9106 * wellformed by creating additional ns-decls where needed.
9107 * Note that, since prefixes of already existent ns-decls can be
9108 * shadowed by this process, it could break QNames in attribute
9109 * values or element content.
9110 *
9111 * NOTE: This function was not intensively tested.
9112 *
9113 * Returns 0 if succeeded, -1 otherwise and on API/internal errors.
9114 */
9115 static int
xmlDOMWrapAdoptBranch(xmlDOMWrapCtxtPtr ctxt,xmlDocPtr sourceDoc,xmlNodePtr node,xmlDocPtr destDoc,xmlNodePtr destParent,int options ATTRIBUTE_UNUSED)9116 xmlDOMWrapAdoptBranch(xmlDOMWrapCtxtPtr ctxt,
9117 		      xmlDocPtr sourceDoc,
9118 		      xmlNodePtr node,
9119 		      xmlDocPtr destDoc,
9120 		      xmlNodePtr destParent,
9121 		      int options ATTRIBUTE_UNUSED)
9122 {
9123     int ret = 0;
9124     xmlNodePtr cur, curElem = NULL;
9125     xmlNsMapPtr nsMap = NULL;
9126     xmlNsMapItemPtr mi;
9127     xmlNsPtr ns = NULL;
9128     int depth = -1, adoptStr = 1;
9129     /* gather @parent's ns-decls. */
9130     int parnsdone;
9131     /* @ancestorsOnly should be set per option. */
9132     int ancestorsOnly = 0;
9133 
9134     /*
9135     * Optimize string adoption for equal or none dicts.
9136     */
9137     if ((sourceDoc != NULL) &&
9138 	(sourceDoc->dict == destDoc->dict))
9139 	adoptStr = 0;
9140     else
9141 	adoptStr = 1;
9142 
9143     /*
9144     * Get the ns-map from the context if available.
9145     */
9146     if (ctxt)
9147 	nsMap = (xmlNsMapPtr) ctxt->namespaceMap;
9148     /*
9149     * Disable search for ns-decls in the parent-axis of the
9150     * destination element, if:
9151     * 1) there's no destination parent
9152     * 2) custom ns-reference handling is used
9153     */
9154     if ((destParent == NULL) ||
9155 	(ctxt && ctxt->getNsForNodeFunc))
9156     {
9157 	parnsdone = 1;
9158     } else
9159 	parnsdone = 0;
9160 
9161     cur = node;
9162     if ((cur != NULL) && (cur->type == XML_NAMESPACE_DECL))
9163 	goto internal_error;
9164 
9165     while (cur != NULL) {
9166 	/*
9167 	* Paranoid source-doc sanity check.
9168 	*/
9169 	if (cur->doc != sourceDoc) {
9170 	    /*
9171 	    * We'll assume XIncluded nodes if the doc differs.
9172 	    * TODO: Do we need to reconciliate XIncluded nodes?
9173 	    * This here skips XIncluded nodes and tries to handle
9174 	    * broken sequences.
9175 	    */
9176 	    if (cur->next == NULL)
9177 		goto leave_node;
9178 	    do {
9179 		cur = cur->next;
9180 		if ((cur->type == XML_XINCLUDE_END) ||
9181 		    (cur->doc == node->doc))
9182 		    break;
9183 	    } while (cur->next != NULL);
9184 
9185 	    if (cur->doc != node->doc)
9186 		goto leave_node;
9187 	}
9188 	cur->doc = destDoc;
9189 	switch (cur->type) {
9190 	    case XML_XINCLUDE_START:
9191 	    case XML_XINCLUDE_END:
9192 		/*
9193 		* TODO
9194 		*/
9195 		return (-1);
9196 	    case XML_ELEMENT_NODE:
9197 		curElem = cur;
9198 		depth++;
9199 		/*
9200 		* Namespace declarations.
9201 		* - ns->href and ns->prefix are never in the dict, so
9202 		*   we need not move the values over to the destination dict.
9203 		* - Note that for custom handling of ns-references,
9204 		*   the ns-decls need not be stored in the ns-map,
9205 		*   since they won't be referenced by node->ns.
9206 		*/
9207 		if ((cur->nsDef) &&
9208 		    ((ctxt == NULL) || (ctxt->getNsForNodeFunc == NULL)))
9209 		{
9210 		    if (! parnsdone) {
9211 			/*
9212 			* Gather @parent's in-scope ns-decls.
9213 			*/
9214 			if (xmlDOMWrapNSNormGatherInScopeNs(&nsMap,
9215 			    destParent) == -1)
9216 			    goto internal_error;
9217 			parnsdone = 1;
9218 		    }
9219 		    for (ns = cur->nsDef; ns != NULL; ns = ns->next) {
9220 			/*
9221 			* NOTE: ns->prefix and ns->href are never in the dict.
9222 			* XML_TREE_ADOPT_STR(ns->prefix)
9223 			* XML_TREE_ADOPT_STR(ns->href)
9224 			*/
9225 			/*
9226 			* Does it shadow any ns-decl?
9227 			*/
9228 			if (XML_NSMAP_NOTEMPTY(nsMap)) {
9229 			    XML_NSMAP_FOREACH(nsMap, mi) {
9230 				if ((mi->depth >= XML_TREE_NSMAP_PARENT) &&
9231 				    (mi->shadowDepth == -1) &&
9232 				    ((ns->prefix == mi->newNs->prefix) ||
9233 				    xmlStrEqual(ns->prefix,
9234 				    mi->newNs->prefix))) {
9235 
9236 				    mi->shadowDepth = depth;
9237 				}
9238 			    }
9239 			}
9240 			/*
9241 			* Push mapping.
9242 			*/
9243 			if (xmlDOMWrapNsMapAddItem(&nsMap, -1,
9244 			    ns, ns, depth) == NULL)
9245 			    goto internal_error;
9246 		    }
9247 		}
9248                 /* Falls through. */
9249 	    case XML_ATTRIBUTE_NODE:
9250 		/* No namespace, no fun. */
9251 		if (cur->ns == NULL)
9252 		    goto ns_end;
9253 
9254 		if (! parnsdone) {
9255 		    if (xmlDOMWrapNSNormGatherInScopeNs(&nsMap,
9256 			destParent) == -1)
9257 			goto internal_error;
9258 		    parnsdone = 1;
9259 		}
9260 		/*
9261 		* Adopt ns-references.
9262 		*/
9263 		if (XML_NSMAP_NOTEMPTY(nsMap)) {
9264 		    /*
9265 		    * Search for a mapping.
9266 		    */
9267 		    XML_NSMAP_FOREACH(nsMap, mi) {
9268 			if ((mi->shadowDepth == -1) &&
9269 			    (cur->ns == mi->oldNs)) {
9270 
9271 			    cur->ns = mi->newNs;
9272 			    goto ns_end;
9273 			}
9274 		    }
9275 		}
9276 		/*
9277 		* No matching namespace in scope. We need a new one.
9278 		*/
9279 		if ((ctxt) && (ctxt->getNsForNodeFunc)) {
9280 		    /*
9281 		    * User-defined behaviour.
9282 		    */
9283 		    ns = ctxt->getNsForNodeFunc(ctxt, cur,
9284 			cur->ns->href, cur->ns->prefix);
9285 		    /*
9286 		    * Insert mapping if ns is available; it's the users fault
9287 		    * if not.
9288 		    */
9289 		    if (xmlDOMWrapNsMapAddItem(&nsMap, -1,
9290 			    cur->ns, ns, XML_TREE_NSMAP_CUSTOM) == NULL)
9291 			goto internal_error;
9292 		    cur->ns = ns;
9293 		} else {
9294 		    /*
9295 		    * Acquire a normalized ns-decl and add it to the map.
9296 		    */
9297 		    if (xmlDOMWrapNSNormAcquireNormalizedNs(destDoc,
9298 			/* ns-decls on curElem or on destDoc->oldNs */
9299 			destParent ? curElem : NULL,
9300 			cur->ns, &ns,
9301 			&nsMap, depth,
9302 			ancestorsOnly,
9303 			/* ns-decls must be prefixed for attributes. */
9304 			(cur->type == XML_ATTRIBUTE_NODE) ? 1 : 0) == -1)
9305 			goto internal_error;
9306 		    cur->ns = ns;
9307 		}
9308 ns_end:
9309 		/*
9310 		* Further node properties.
9311 		* TODO: Is this all?
9312 		*/
9313 		XML_TREE_ADOPT_STR(cur->name)
9314 		if (cur->type == XML_ELEMENT_NODE) {
9315 		    cur->psvi = NULL;
9316 		    cur->line = 0;
9317 		    cur->extra = 0;
9318 		    /*
9319 		    * Walk attributes.
9320 		    */
9321 		    if (cur->properties != NULL) {
9322 			/*
9323 			* Process first attribute node.
9324 			*/
9325 			cur = (xmlNodePtr) cur->properties;
9326 			continue;
9327 		    }
9328 		} else {
9329 		    /*
9330 		    * Attributes.
9331 		    */
9332 		    if ((sourceDoc != NULL) &&
9333 			(((xmlAttrPtr) cur)->atype == XML_ATTRIBUTE_ID))
9334 		    {
9335 			xmlRemoveID(sourceDoc, (xmlAttrPtr) cur);
9336 		    }
9337 		    ((xmlAttrPtr) cur)->atype = 0;
9338 		    ((xmlAttrPtr) cur)->psvi = NULL;
9339 		}
9340 		break;
9341 	    case XML_TEXT_NODE:
9342 	    case XML_CDATA_SECTION_NODE:
9343 		/*
9344 		* This puts the content in the dest dict, only if
9345 		* it was previously in the source dict.
9346 		*/
9347 		XML_TREE_ADOPT_STR_2(cur->content)
9348 		goto leave_node;
9349 	    case XML_ENTITY_REF_NODE:
9350 		/*
9351 		* Remove reference to the entity-node.
9352 		*/
9353 		cur->content = NULL;
9354 		cur->children = NULL;
9355 		cur->last = NULL;
9356 		if ((destDoc->intSubset) || (destDoc->extSubset)) {
9357 		    xmlEntityPtr ent;
9358 		    /*
9359 		    * Assign new entity-node if available.
9360 		    */
9361 		    ent = xmlGetDocEntity(destDoc, cur->name);
9362 		    if (ent != NULL) {
9363 			cur->content = ent->content;
9364 			cur->children = (xmlNodePtr) ent;
9365 			cur->last = (xmlNodePtr) ent;
9366 		    }
9367 		}
9368 		goto leave_node;
9369 	    case XML_PI_NODE:
9370 		XML_TREE_ADOPT_STR(cur->name)
9371 		XML_TREE_ADOPT_STR_2(cur->content)
9372 		break;
9373 	    case XML_COMMENT_NODE:
9374 		break;
9375 	    default:
9376 		goto internal_error;
9377 	}
9378 	/*
9379 	* Walk the tree.
9380 	*/
9381 	if (cur->children != NULL) {
9382 	    cur = cur->children;
9383 	    continue;
9384 	}
9385 
9386 leave_node:
9387 	if (cur == node)
9388 	    break;
9389 	if ((cur->type == XML_ELEMENT_NODE) ||
9390 	    (cur->type == XML_XINCLUDE_START) ||
9391 	    (cur->type == XML_XINCLUDE_END))
9392 	{
9393 	    /*
9394 	    * TODO: Do we expect nsDefs on XML_XINCLUDE_START?
9395 	    */
9396 	    if (XML_NSMAP_NOTEMPTY(nsMap)) {
9397 		/*
9398 		* Pop mappings.
9399 		*/
9400 		while ((nsMap->last != NULL) &&
9401 		    (nsMap->last->depth >= depth))
9402 		{
9403 		    XML_NSMAP_POP(nsMap, mi)
9404 		}
9405 		/*
9406 		* Unshadow.
9407 		*/
9408 		XML_NSMAP_FOREACH(nsMap, mi) {
9409 		    if (mi->shadowDepth >= depth)
9410 			mi->shadowDepth = -1;
9411 		}
9412 	    }
9413 	    depth--;
9414 	}
9415 	if (cur->next != NULL)
9416 	    cur = cur->next;
9417 	else if ((cur->type == XML_ATTRIBUTE_NODE) &&
9418 	    (cur->parent->children != NULL))
9419 	{
9420 	    cur = cur->parent->children;
9421 	} else {
9422 	    cur = cur->parent;
9423 	    goto leave_node;
9424 	}
9425     }
9426 
9427     goto exit;
9428 
9429 internal_error:
9430     ret = -1;
9431 
9432 exit:
9433     /*
9434     * Cleanup.
9435     */
9436     if (nsMap != NULL) {
9437 	if ((ctxt) && (ctxt->namespaceMap == nsMap)) {
9438 	    /*
9439 	    * Just cleanup the map but don't free.
9440 	    */
9441 	    if (nsMap->first) {
9442 		if (nsMap->pool)
9443 		    nsMap->last->next = nsMap->pool;
9444 		nsMap->pool = nsMap->first;
9445 		nsMap->first = NULL;
9446 	    }
9447 	} else
9448 	    xmlDOMWrapNsMapFree(nsMap);
9449     }
9450     return(ret);
9451 }
9452 
9453 /*
9454 * xmlDOMWrapCloneNode:
9455 * @ctxt: the optional context for custom processing
9456 * @sourceDoc: the optional sourceDoc
9457 * @node: the node to start with
9458 * @resNode: the clone of the given @node
9459 * @destDoc: the destination doc
9460 * @destParent: the optional new parent of @node in @destDoc
9461 * @deep: descend into child if set
9462 * @options: option flags
9463 *
9464 * References of out-of scope ns-decls are remapped to point to @destDoc:
9465 * 1) If @destParent is given, then nsDef entries on element-nodes are used
9466 * 2) If *no* @destParent is given, then @destDoc->oldNs entries are used.
9467 *    This is the case when you don't know already where the cloned branch
9468 *    will be added to.
9469 *
9470 * If @destParent is given, it ensures that the tree is namespace
9471 * wellformed by creating additional ns-decls where needed.
9472 * Note that, since prefixes of already existent ns-decls can be
9473 * shadowed by this process, it could break QNames in attribute
9474 * values or element content.
9475 * TODO:
9476 *   1) What to do with XInclude? Currently this returns an error for XInclude.
9477 *
9478 * Returns 0 if the operation succeeded,
9479 *         1 if a node of unsupported (or not yet supported) type was given,
9480 *         -1 on API/internal errors.
9481 */
9482 
9483 int
xmlDOMWrapCloneNode(xmlDOMWrapCtxtPtr ctxt,xmlDocPtr sourceDoc,xmlNodePtr node,xmlNodePtr * resNode,xmlDocPtr destDoc,xmlNodePtr destParent,int deep,int options ATTRIBUTE_UNUSED)9484 xmlDOMWrapCloneNode(xmlDOMWrapCtxtPtr ctxt,
9485 		      xmlDocPtr sourceDoc,
9486 		      xmlNodePtr node,
9487 		      xmlNodePtr *resNode,
9488 		      xmlDocPtr destDoc,
9489 		      xmlNodePtr destParent,
9490 		      int deep,
9491 		      int options ATTRIBUTE_UNUSED)
9492 {
9493     int ret = 0;
9494     xmlNodePtr cur, curElem = NULL;
9495     xmlNsMapPtr nsMap = NULL;
9496     xmlNsMapItemPtr mi;
9497     xmlNsPtr ns;
9498     int depth = -1;
9499     /* int adoptStr = 1; */
9500     /* gather @parent's ns-decls. */
9501     int parnsdone = 0;
9502     /*
9503     * @ancestorsOnly:
9504     * TODO: @ancestorsOnly should be set per option.
9505     *
9506     */
9507     int ancestorsOnly = 0;
9508     xmlNodePtr resultClone = NULL, clone = NULL, parentClone = NULL, prevClone = NULL;
9509     xmlNsPtr cloneNs = NULL, *cloneNsDefSlot = NULL;
9510     xmlDictPtr dict; /* The destination dict */
9511 
9512     if ((node == NULL) || (resNode == NULL) || (destDoc == NULL))
9513 	return(-1);
9514     /*
9515     * TODO: Initially we support only element-nodes.
9516     */
9517     if (node->type != XML_ELEMENT_NODE)
9518 	return(1);
9519     /*
9520     * Check node->doc sanity.
9521     */
9522     if ((node->doc != NULL) && (sourceDoc != NULL) &&
9523 	(node->doc != sourceDoc)) {
9524 	/*
9525 	* Might be an XIncluded node.
9526 	*/
9527 	return (-1);
9528     }
9529     if (sourceDoc == NULL)
9530 	sourceDoc = node->doc;
9531     if (sourceDoc == NULL)
9532         return (-1);
9533 
9534     dict = destDoc->dict;
9535     /*
9536     * Reuse the namespace map of the context.
9537     */
9538     if (ctxt)
9539 	nsMap = (xmlNsMapPtr) ctxt->namespaceMap;
9540 
9541     *resNode = NULL;
9542 
9543     cur = node;
9544     if ((cur != NULL) && (cur->type == XML_NAMESPACE_DECL))
9545         return(-1);
9546 
9547     while (cur != NULL) {
9548 	if (cur->doc != sourceDoc) {
9549 	    /*
9550 	    * We'll assume XIncluded nodes if the doc differs.
9551 	    * TODO: Do we need to reconciliate XIncluded nodes?
9552 	    * TODO: This here returns -1 in this case.
9553 	    */
9554 	    goto internal_error;
9555 	}
9556 	/*
9557 	* Create a new node.
9558 	*/
9559 	switch (cur->type) {
9560 	    case XML_XINCLUDE_START:
9561 	    case XML_XINCLUDE_END:
9562 		/*
9563 		* TODO: What to do with XInclude?
9564 		*/
9565 		goto internal_error;
9566 		break;
9567 	    case XML_ELEMENT_NODE:
9568 	    case XML_TEXT_NODE:
9569 	    case XML_CDATA_SECTION_NODE:
9570 	    case XML_COMMENT_NODE:
9571 	    case XML_PI_NODE:
9572 	    case XML_DOCUMENT_FRAG_NODE:
9573 	    case XML_ENTITY_REF_NODE:
9574 	    case XML_ENTITY_NODE:
9575 		/*
9576 		* Nodes of xmlNode structure.
9577 		*/
9578 		clone = (xmlNodePtr) xmlMalloc(sizeof(xmlNode));
9579 		if (clone == NULL)
9580 		    goto internal_error;
9581 		memset(clone, 0, sizeof(xmlNode));
9582 		/*
9583 		* Set hierarchical links.
9584 		*/
9585 		if (resultClone != NULL) {
9586 		    clone->parent = parentClone;
9587 		    if (prevClone) {
9588 			prevClone->next = clone;
9589 			clone->prev = prevClone;
9590 		    } else
9591 			parentClone->children = clone;
9592 		} else
9593 		    resultClone = clone;
9594 
9595 		break;
9596 	    case XML_ATTRIBUTE_NODE:
9597 		/*
9598 		* Attributes (xmlAttr).
9599 		*/
9600                 /* Use xmlRealloc to avoid -Warray-bounds warning */
9601 		clone = (xmlNodePtr) xmlRealloc(NULL, sizeof(xmlAttr));
9602 		if (clone == NULL)
9603 		    goto internal_error;
9604 		memset(clone, 0, sizeof(xmlAttr));
9605 		/*
9606 		* Set hierarchical links.
9607 		* TODO: Change this to add to the end of attributes.
9608 		*/
9609 		if (resultClone != NULL) {
9610 		    clone->parent = parentClone;
9611 		    if (prevClone) {
9612 			prevClone->next = clone;
9613 			clone->prev = prevClone;
9614 		    } else
9615 			parentClone->properties = (xmlAttrPtr) clone;
9616 		} else
9617 		    resultClone = clone;
9618 		break;
9619 	    default:
9620 		/*
9621 		* TODO QUESTION: Any other nodes expected?
9622 		*/
9623 		goto internal_error;
9624 	}
9625 
9626 	clone->type = cur->type;
9627 	clone->doc = destDoc;
9628 
9629 	/*
9630 	* Clone the name of the node if any.
9631 	*/
9632 	if (cur->name == xmlStringText)
9633 	    clone->name = xmlStringText;
9634 	else if (cur->name == xmlStringTextNoenc)
9635 	    /*
9636 	    * NOTE: Although xmlStringTextNoenc is never assigned to a node
9637 	    *   in tree.c, it might be set in Libxslt via
9638 	    *   "xsl:disable-output-escaping".
9639 	    */
9640 	    clone->name = xmlStringTextNoenc;
9641 	else if (cur->name == xmlStringComment)
9642 	    clone->name = xmlStringComment;
9643 	else if (cur->name != NULL) {
9644 	    DICT_CONST_COPY(cur->name, clone->name);
9645 	}
9646 
9647 	switch (cur->type) {
9648 	    case XML_XINCLUDE_START:
9649 	    case XML_XINCLUDE_END:
9650 		/*
9651 		* TODO
9652 		*/
9653 		return (-1);
9654 	    case XML_ELEMENT_NODE:
9655 		curElem = cur;
9656 		depth++;
9657 		/*
9658 		* Namespace declarations.
9659 		*/
9660 		if (cur->nsDef != NULL) {
9661 		    if (! parnsdone) {
9662 			if (destParent && (ctxt == NULL)) {
9663 			    /*
9664 			    * Gather @parent's in-scope ns-decls.
9665 			    */
9666 			    if (xmlDOMWrapNSNormGatherInScopeNs(&nsMap,
9667 				destParent) == -1)
9668 				goto internal_error;
9669 			}
9670 			parnsdone = 1;
9671 		    }
9672 		    /*
9673 		    * Clone namespace declarations.
9674 		    */
9675 		    cloneNsDefSlot = &(clone->nsDef);
9676 		    for (ns = cur->nsDef; ns != NULL; ns = ns->next) {
9677 			/*
9678 			* Create a new xmlNs.
9679 			*/
9680 			cloneNs = (xmlNsPtr) xmlMalloc(sizeof(xmlNs));
9681 			if (cloneNs == NULL)
9682 			    return(-1);
9683 			memset(cloneNs, 0, sizeof(xmlNs));
9684 			cloneNs->type = XML_LOCAL_NAMESPACE;
9685 
9686 			if (ns->href != NULL)
9687 			    cloneNs->href = xmlStrdup(ns->href);
9688 			if (ns->prefix != NULL)
9689 			    cloneNs->prefix = xmlStrdup(ns->prefix);
9690 
9691 			*cloneNsDefSlot = cloneNs;
9692 			cloneNsDefSlot = &(cloneNs->next);
9693 
9694 			/*
9695 			* Note that for custom handling of ns-references,
9696 			* the ns-decls need not be stored in the ns-map,
9697 			* since they won't be referenced by node->ns.
9698 			*/
9699 			if ((ctxt == NULL) ||
9700 			    (ctxt->getNsForNodeFunc == NULL))
9701 			{
9702 			    /*
9703 			    * Does it shadow any ns-decl?
9704 			    */
9705 			    if (XML_NSMAP_NOTEMPTY(nsMap)) {
9706 				XML_NSMAP_FOREACH(nsMap, mi) {
9707 				    if ((mi->depth >= XML_TREE_NSMAP_PARENT) &&
9708 					(mi->shadowDepth == -1) &&
9709 					((ns->prefix == mi->newNs->prefix) ||
9710 					xmlStrEqual(ns->prefix,
9711 					mi->newNs->prefix))) {
9712 					/*
9713 					* Mark as shadowed at the current
9714 					* depth.
9715 					*/
9716 					mi->shadowDepth = depth;
9717 				    }
9718 				}
9719 			    }
9720 			    /*
9721 			    * Push mapping.
9722 			    */
9723 			    if (xmlDOMWrapNsMapAddItem(&nsMap, -1,
9724 				ns, cloneNs, depth) == NULL)
9725 				goto internal_error;
9726 			}
9727 		    }
9728 		}
9729 		/* cur->ns will be processed further down. */
9730 		break;
9731 	    case XML_ATTRIBUTE_NODE:
9732 		/* IDs will be processed further down. */
9733 		/* cur->ns will be processed further down. */
9734 		break;
9735 	    case XML_TEXT_NODE:
9736 	    case XML_CDATA_SECTION_NODE:
9737 		/*
9738 		* Note that this will also cover the values of attributes.
9739 		*/
9740 		DICT_COPY(cur->content, clone->content);
9741 		goto leave_node;
9742 	    case XML_ENTITY_NODE:
9743 		/* TODO: What to do here? */
9744 		goto leave_node;
9745 	    case XML_ENTITY_REF_NODE:
9746 		if (sourceDoc != destDoc) {
9747 		    if ((destDoc->intSubset) || (destDoc->extSubset)) {
9748 			xmlEntityPtr ent;
9749 			/*
9750 			* Different doc: Assign new entity-node if available.
9751 			*/
9752 			ent = xmlGetDocEntity(destDoc, cur->name);
9753 			if (ent != NULL) {
9754 			    clone->content = ent->content;
9755 			    clone->children = (xmlNodePtr) ent;
9756 			    clone->last = (xmlNodePtr) ent;
9757 			}
9758 		    }
9759 		} else {
9760 		    /*
9761 		    * Same doc: Use the current node's entity declaration
9762 		    * and value.
9763 		    */
9764 		    clone->content = cur->content;
9765 		    clone->children = cur->children;
9766 		    clone->last = cur->last;
9767 		}
9768 		goto leave_node;
9769 	    case XML_PI_NODE:
9770 		DICT_COPY(cur->content, clone->content);
9771 		goto leave_node;
9772 	    case XML_COMMENT_NODE:
9773 		DICT_COPY(cur->content, clone->content);
9774 		goto leave_node;
9775 	    default:
9776 		goto internal_error;
9777 	}
9778 
9779 	if (cur->ns == NULL)
9780 	    goto end_ns_reference;
9781 
9782 /* handle_ns_reference: */
9783 	/*
9784 	** The following will take care of references to ns-decls ********
9785 	** and is intended only for element- and attribute-nodes.
9786 	**
9787 	*/
9788 	if (! parnsdone) {
9789 	    if (destParent && (ctxt == NULL)) {
9790 		if (xmlDOMWrapNSNormGatherInScopeNs(&nsMap, destParent) == -1)
9791 		    goto internal_error;
9792 	    }
9793 	    parnsdone = 1;
9794 	}
9795 	/*
9796 	* Adopt ns-references.
9797 	*/
9798 	if (XML_NSMAP_NOTEMPTY(nsMap)) {
9799 	    /*
9800 	    * Search for a mapping.
9801 	    */
9802 	    XML_NSMAP_FOREACH(nsMap, mi) {
9803 		if ((mi->shadowDepth == -1) &&
9804 		    (cur->ns == mi->oldNs)) {
9805 		    /*
9806 		    * This is the nice case: a mapping was found.
9807 		    */
9808 		    clone->ns = mi->newNs;
9809 		    goto end_ns_reference;
9810 		}
9811 	    }
9812 	}
9813 	/*
9814 	* No matching namespace in scope. We need a new one.
9815 	*/
9816 	if ((ctxt != NULL) && (ctxt->getNsForNodeFunc != NULL)) {
9817 	    /*
9818 	    * User-defined behaviour.
9819 	    */
9820 	    ns = ctxt->getNsForNodeFunc(ctxt, cur,
9821 		cur->ns->href, cur->ns->prefix);
9822 	    /*
9823 	    * Add user's mapping.
9824 	    */
9825 	    if (xmlDOMWrapNsMapAddItem(&nsMap, -1,
9826 		cur->ns, ns, XML_TREE_NSMAP_CUSTOM) == NULL)
9827 		goto internal_error;
9828 	    clone->ns = ns;
9829 	} else {
9830 	    /*
9831 	    * Acquire a normalized ns-decl and add it to the map.
9832 	    */
9833 	    if (xmlDOMWrapNSNormAcquireNormalizedNs(destDoc,
9834 		/* ns-decls on curElem or on destDoc->oldNs */
9835 		destParent ? curElem : NULL,
9836 		cur->ns, &ns,
9837 		&nsMap, depth,
9838 		/* if we need to search only in the ancestor-axis */
9839 		ancestorsOnly,
9840 		/* ns-decls must be prefixed for attributes. */
9841 		(cur->type == XML_ATTRIBUTE_NODE) ? 1 : 0) == -1)
9842 		goto internal_error;
9843 	    clone->ns = ns;
9844 	}
9845 
9846 end_ns_reference:
9847 
9848 	/*
9849 	* Some post-processing.
9850 	*
9851 	* Handle ID attributes.
9852 	*/
9853 	if ((clone->type == XML_ATTRIBUTE_NODE) &&
9854 	    (clone->parent != NULL))
9855 	{
9856 	    if (xmlIsID(destDoc, clone->parent, (xmlAttrPtr) clone)) {
9857 
9858 		xmlChar *idVal;
9859 
9860 		idVal = xmlNodeListGetString(cur->doc, cur->children, 1);
9861 		if (idVal != NULL) {
9862 		    if (xmlAddIDSafe(destDoc, idVal, (xmlAttrPtr) cur, 0,
9863                                      NULL) < 0) {
9864 			/* TODO: error message. */
9865 			xmlFree(idVal);
9866 			goto internal_error;
9867 		    }
9868 		    xmlFree(idVal);
9869 		}
9870 	    }
9871 	}
9872 	/*
9873 	**
9874 	** The following will traverse the tree **************************
9875 	**
9876 	*
9877 	* Walk the element's attributes before descending into child-nodes.
9878 	*/
9879 	if ((cur->type == XML_ELEMENT_NODE) && (cur->properties != NULL)) {
9880 	    prevClone = NULL;
9881 	    parentClone = clone;
9882 	    cur = (xmlNodePtr) cur->properties;
9883 	    continue;
9884 	}
9885 into_content:
9886 	/*
9887 	* Descend into child-nodes.
9888 	*/
9889 	if (cur->children != NULL) {
9890 	    if (deep || (cur->type == XML_ATTRIBUTE_NODE)) {
9891 		prevClone = NULL;
9892 		parentClone = clone;
9893 		cur = cur->children;
9894 		continue;
9895 	    }
9896 	}
9897 
9898 leave_node:
9899 	/*
9900 	* At this point we are done with the node, its content
9901 	* and an element-nodes's attribute-nodes.
9902 	*/
9903 	if (cur == node)
9904 	    break;
9905 	if ((cur->type == XML_ELEMENT_NODE) ||
9906 	    (cur->type == XML_XINCLUDE_START) ||
9907 	    (cur->type == XML_XINCLUDE_END)) {
9908 	    /*
9909 	    * TODO: Do we expect nsDefs on XML_XINCLUDE_START?
9910 	    */
9911 	    if (XML_NSMAP_NOTEMPTY(nsMap)) {
9912 		/*
9913 		* Pop mappings.
9914 		*/
9915 		while ((nsMap->last != NULL) &&
9916 		    (nsMap->last->depth >= depth))
9917 		{
9918 		    XML_NSMAP_POP(nsMap, mi)
9919 		}
9920 		/*
9921 		* Unshadow.
9922 		*/
9923 		XML_NSMAP_FOREACH(nsMap, mi) {
9924 		    if (mi->shadowDepth >= depth)
9925 			mi->shadowDepth = -1;
9926 		}
9927 	    }
9928 	    depth--;
9929 	}
9930 	if (cur->next != NULL) {
9931 	    prevClone = clone;
9932 	    cur = cur->next;
9933 	} else if (cur->type != XML_ATTRIBUTE_NODE) {
9934 	    /*
9935 	    * Set clone->last.
9936 	    */
9937 	    if (clone->parent != NULL)
9938 		clone->parent->last = clone;
9939 	    clone = clone->parent;
9940 	    if (clone != NULL)
9941 		parentClone = clone->parent;
9942 	    /*
9943 	    * Process parent --> next;
9944 	    */
9945 	    cur = cur->parent;
9946 	    goto leave_node;
9947 	} else {
9948 	    /* This is for attributes only. */
9949 	    clone = clone->parent;
9950 	    parentClone = clone->parent;
9951 	    /*
9952 	    * Process parent-element --> children.
9953 	    */
9954 	    cur = cur->parent;
9955 	    goto into_content;
9956 	}
9957     }
9958     goto exit;
9959 
9960 internal_error:
9961     ret = -1;
9962 
9963 exit:
9964     /*
9965     * Cleanup.
9966     */
9967     if (nsMap != NULL) {
9968 	if ((ctxt) && (ctxt->namespaceMap == nsMap)) {
9969 	    /*
9970 	    * Just cleanup the map but don't free.
9971 	    */
9972 	    if (nsMap->first) {
9973 		if (nsMap->pool)
9974 		    nsMap->last->next = nsMap->pool;
9975 		nsMap->pool = nsMap->first;
9976 		nsMap->first = NULL;
9977 	    }
9978 	} else
9979 	    xmlDOMWrapNsMapFree(nsMap);
9980     }
9981     /*
9982     * TODO: Should we try a cleanup of the cloned node in case of a
9983     * fatal error?
9984     */
9985     *resNode = resultClone;
9986     return (ret);
9987 }
9988 
9989 /*
9990 * xmlDOMWrapAdoptAttr:
9991 * @ctxt: the optional context for custom processing
9992 * @sourceDoc: the optional source document of attr
9993 * @attr: the attribute-node to be adopted
9994 * @destDoc: the destination doc for adoption
9995 * @destParent: the optional new parent of @attr in @destDoc
9996 * @options: option flags
9997 *
9998 * @attr is adopted by @destDoc.
9999 * Ensures that ns-references point to @destDoc: either to
10000 * elements->nsDef entries if @destParent is given, or to
10001 * @destDoc->oldNs otherwise.
10002 *
10003 * Returns 0 if succeeded, -1 otherwise and on API/internal errors.
10004 */
10005 static int
xmlDOMWrapAdoptAttr(xmlDOMWrapCtxtPtr ctxt,xmlDocPtr sourceDoc,xmlAttrPtr attr,xmlDocPtr destDoc,xmlNodePtr destParent,int options ATTRIBUTE_UNUSED)10006 xmlDOMWrapAdoptAttr(xmlDOMWrapCtxtPtr ctxt,
10007 		    xmlDocPtr sourceDoc,
10008 		    xmlAttrPtr attr,
10009 		    xmlDocPtr destDoc,
10010 		    xmlNodePtr destParent,
10011 		    int options ATTRIBUTE_UNUSED)
10012 {
10013     xmlNodePtr cur;
10014     int adoptStr = 1;
10015 
10016     if ((attr == NULL) || (destDoc == NULL))
10017 	return (-1);
10018 
10019     attr->doc = destDoc;
10020     if (attr->ns != NULL) {
10021 	xmlNsPtr ns = NULL;
10022 
10023 	if (ctxt != NULL) {
10024 	    /* TODO: User defined. */
10025 	}
10026 	/* XML Namespace. */
10027 	if (IS_STR_XML(attr->ns->prefix)) {
10028 	    ns = xmlTreeEnsureXMLDecl(destDoc);
10029 	} else if (destParent == NULL) {
10030 	    /*
10031 	    * Store in @destDoc->oldNs.
10032 	    */
10033 	    ns = xmlDOMWrapStoreNs(destDoc, attr->ns->href, attr->ns->prefix);
10034 	} else {
10035 	    /*
10036 	    * Declare on @destParent.
10037 	    */
10038 	    if (xmlSearchNsByNamespaceStrict(destDoc, destParent, attr->ns->href,
10039 		&ns, 1) == -1)
10040 		goto internal_error;
10041 	    if (ns == NULL) {
10042 		ns = xmlDOMWrapNSNormDeclareNsForced(destDoc, destParent,
10043 		    attr->ns->href, attr->ns->prefix, 1);
10044 	    }
10045 	}
10046 	if (ns == NULL)
10047 	    goto internal_error;
10048 	attr->ns = ns;
10049     }
10050 
10051     XML_TREE_ADOPT_STR(attr->name);
10052     attr->atype = 0;
10053     attr->psvi = NULL;
10054     /*
10055     * Walk content.
10056     */
10057     if (attr->children == NULL)
10058 	return (0);
10059     cur = attr->children;
10060     if ((cur != NULL) && (cur->type == XML_NAMESPACE_DECL))
10061         goto internal_error;
10062     while (cur != NULL) {
10063 	cur->doc = destDoc;
10064 	switch (cur->type) {
10065 	    case XML_TEXT_NODE:
10066 	    case XML_CDATA_SECTION_NODE:
10067 		XML_TREE_ADOPT_STR_2(cur->content)
10068 		break;
10069 	    case XML_ENTITY_REF_NODE:
10070 		/*
10071 		* Remove reference to the entity-node.
10072 		*/
10073 		cur->content = NULL;
10074 		cur->children = NULL;
10075 		cur->last = NULL;
10076 		if ((destDoc->intSubset) || (destDoc->extSubset)) {
10077 		    xmlEntityPtr ent;
10078 		    /*
10079 		    * Assign new entity-node if available.
10080 		    */
10081 		    ent = xmlGetDocEntity(destDoc, cur->name);
10082 		    if (ent != NULL) {
10083 			cur->content = ent->content;
10084 			cur->children = (xmlNodePtr) ent;
10085 			cur->last = (xmlNodePtr) ent;
10086 		    }
10087 		}
10088 		break;
10089 	    default:
10090 		break;
10091 	}
10092 	if (cur->children != NULL) {
10093 	    cur = cur->children;
10094 	    continue;
10095 	}
10096 next_sibling:
10097 	if (cur == (xmlNodePtr) attr)
10098 	    break;
10099 	if (cur->next != NULL)
10100 	    cur = cur->next;
10101 	else {
10102 	    cur = cur->parent;
10103 	    goto next_sibling;
10104 	}
10105     }
10106     return (0);
10107 internal_error:
10108     return (-1);
10109 }
10110 
10111 /*
10112 * xmlDOMWrapAdoptNode:
10113 * @ctxt: the optional context for custom processing
10114 * @sourceDoc: the optional sourceDoc
10115 * @node: the node to start with
10116 * @destDoc: the destination doc
10117 * @destParent: the optional new parent of @node in @destDoc
10118 * @options: option flags
10119 *
10120 * References of out-of scope ns-decls are remapped to point to @destDoc:
10121 * 1) If @destParent is given, then nsDef entries on element-nodes are used
10122 * 2) If *no* @destParent is given, then @destDoc->oldNs entries are used
10123 *    This is the case when you have an unlinked node and just want to move it
10124 *    to the context of
10125 *
10126 * If @destParent is given, it ensures that the tree is namespace
10127 * wellformed by creating additional ns-decls where needed.
10128 * Note that, since prefixes of already existent ns-decls can be
10129 * shadowed by this process, it could break QNames in attribute
10130 * values or element content.
10131 * NOTE: This function was not intensively tested.
10132 *
10133 * Returns 0 if the operation succeeded,
10134 *         1 if a node of unsupported type was given,
10135 *         2 if a node of not yet supported type was given and
10136 *         -1 on API/internal errors.
10137 */
10138 int
xmlDOMWrapAdoptNode(xmlDOMWrapCtxtPtr ctxt,xmlDocPtr sourceDoc,xmlNodePtr node,xmlDocPtr destDoc,xmlNodePtr destParent,int options)10139 xmlDOMWrapAdoptNode(xmlDOMWrapCtxtPtr ctxt,
10140 		    xmlDocPtr sourceDoc,
10141 		    xmlNodePtr node,
10142 		    xmlDocPtr destDoc,
10143 		    xmlNodePtr destParent,
10144 		    int options)
10145 {
10146     if ((node == NULL) || (node->type == XML_NAMESPACE_DECL) ||
10147         (destDoc == NULL) ||
10148 	((destParent != NULL) && (destParent->doc != destDoc)))
10149 	return(-1);
10150     /*
10151     * Check node->doc sanity.
10152     */
10153     if ((node->doc != NULL) && (sourceDoc != NULL) &&
10154 	(node->doc != sourceDoc)) {
10155 	/*
10156 	* Might be an XIncluded node.
10157 	*/
10158 	return (-1);
10159     }
10160     if (sourceDoc == NULL)
10161 	sourceDoc = node->doc;
10162     if (sourceDoc == destDoc)
10163 	return (-1);
10164     switch (node->type) {
10165 	case XML_ELEMENT_NODE:
10166 	case XML_ATTRIBUTE_NODE:
10167 	case XML_TEXT_NODE:
10168 	case XML_CDATA_SECTION_NODE:
10169 	case XML_ENTITY_REF_NODE:
10170 	case XML_PI_NODE:
10171 	case XML_COMMENT_NODE:
10172 	    break;
10173 	case XML_DOCUMENT_FRAG_NODE:
10174 	    /* TODO: Support document-fragment-nodes. */
10175 	    return (2);
10176 	default:
10177 	    return (1);
10178     }
10179     /*
10180     * Unlink only if @node was not already added to @destParent.
10181     */
10182     if ((node->parent != NULL) && (destParent != node->parent))
10183 	xmlUnlinkNode(node);
10184 
10185     if (node->type == XML_ELEMENT_NODE) {
10186 	    return (xmlDOMWrapAdoptBranch(ctxt, sourceDoc, node,
10187 		    destDoc, destParent, options));
10188     } else if (node->type == XML_ATTRIBUTE_NODE) {
10189 	    return (xmlDOMWrapAdoptAttr(ctxt, sourceDoc,
10190 		(xmlAttrPtr) node, destDoc, destParent, options));
10191     } else {
10192 	xmlNodePtr cur = node;
10193 	int adoptStr = 1;
10194 
10195 	cur->doc = destDoc;
10196 	/*
10197 	* Optimize string adoption.
10198 	*/
10199 	if ((sourceDoc != NULL) &&
10200 	    (sourceDoc->dict == destDoc->dict))
10201 		adoptStr = 0;
10202 	switch (node->type) {
10203 	    case XML_TEXT_NODE:
10204 	    case XML_CDATA_SECTION_NODE:
10205 		XML_TREE_ADOPT_STR_2(node->content)
10206 		    break;
10207 	    case XML_ENTITY_REF_NODE:
10208 		/*
10209 		* Remove reference to the entity-node.
10210 		*/
10211 		node->content = NULL;
10212 		node->children = NULL;
10213 		node->last = NULL;
10214 		if ((destDoc->intSubset) || (destDoc->extSubset)) {
10215 		    xmlEntityPtr ent;
10216 		    /*
10217 		    * Assign new entity-node if available.
10218 		    */
10219 		    ent = xmlGetDocEntity(destDoc, node->name);
10220 		    if (ent != NULL) {
10221 			node->content = ent->content;
10222 			node->children = (xmlNodePtr) ent;
10223 			node->last = (xmlNodePtr) ent;
10224 		    }
10225 		}
10226 		XML_TREE_ADOPT_STR(node->name)
10227 		break;
10228 	    case XML_PI_NODE: {
10229 		XML_TREE_ADOPT_STR(node->name)
10230 		XML_TREE_ADOPT_STR_2(node->content)
10231 		break;
10232 	    }
10233 	    default:
10234 		break;
10235 	}
10236     }
10237     return (0);
10238 }
10239 
10240 /************************************************************************
10241  *									*
10242  *			XHTML detection					*
10243  *									*
10244  ************************************************************************/
10245 
10246 #define XHTML_STRICT_PUBLIC_ID BAD_CAST \
10247    "-//W3C//DTD XHTML 1.0 Strict//EN"
10248 #define XHTML_STRICT_SYSTEM_ID BAD_CAST \
10249    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
10250 #define XHTML_FRAME_PUBLIC_ID BAD_CAST \
10251    "-//W3C//DTD XHTML 1.0 Frameset//EN"
10252 #define XHTML_FRAME_SYSTEM_ID BAD_CAST \
10253    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd"
10254 #define XHTML_TRANS_PUBLIC_ID BAD_CAST \
10255    "-//W3C//DTD XHTML 1.0 Transitional//EN"
10256 #define XHTML_TRANS_SYSTEM_ID BAD_CAST \
10257    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
10258 
10259 /**
10260  * xmlIsXHTML:
10261  * @systemID:  the system identifier
10262  * @publicID:  the public identifier
10263  *
10264  * Try to find if the document correspond to an XHTML DTD
10265  *
10266  * Returns 1 if true, 0 if not and -1 in case of error
10267  */
10268 int
xmlIsXHTML(const xmlChar * systemID,const xmlChar * publicID)10269 xmlIsXHTML(const xmlChar *systemID, const xmlChar *publicID) {
10270     if ((systemID == NULL) && (publicID == NULL))
10271 	return(-1);
10272     if (publicID != NULL) {
10273 	if (xmlStrEqual(publicID, XHTML_STRICT_PUBLIC_ID)) return(1);
10274 	if (xmlStrEqual(publicID, XHTML_FRAME_PUBLIC_ID)) return(1);
10275 	if (xmlStrEqual(publicID, XHTML_TRANS_PUBLIC_ID)) return(1);
10276     }
10277     if (systemID != NULL) {
10278 	if (xmlStrEqual(systemID, XHTML_STRICT_SYSTEM_ID)) return(1);
10279 	if (xmlStrEqual(systemID, XHTML_FRAME_SYSTEM_ID)) return(1);
10280 	if (xmlStrEqual(systemID, XHTML_TRANS_SYSTEM_ID)) return(1);
10281     }
10282     return(0);
10283 }
10284 
10285 /************************************************************************
10286  *									*
10287  *			Node callbacks					*
10288  *									*
10289  ************************************************************************/
10290 
10291 /**
10292  * xmlRegisterNodeDefault:
10293  * @func: function pointer to the new RegisterNodeFunc
10294  *
10295  * Registers a callback for node creation
10296  *
10297  * Returns the old value of the registration function
10298  */
10299 xmlRegisterNodeFunc
xmlRegisterNodeDefault(xmlRegisterNodeFunc func)10300 xmlRegisterNodeDefault(xmlRegisterNodeFunc func)
10301 {
10302     xmlRegisterNodeFunc old = xmlRegisterNodeDefaultValue;
10303 
10304     __xmlRegisterCallbacks = 1;
10305     xmlRegisterNodeDefaultValue = func;
10306     return(old);
10307 }
10308 
10309 /**
10310  * xmlDeregisterNodeDefault:
10311  * @func: function pointer to the new DeregisterNodeFunc
10312  *
10313  * Registers a callback for node destruction
10314  *
10315  * Returns the previous value of the deregistration function
10316  */
10317 xmlDeregisterNodeFunc
xmlDeregisterNodeDefault(xmlDeregisterNodeFunc func)10318 xmlDeregisterNodeDefault(xmlDeregisterNodeFunc func)
10319 {
10320     xmlDeregisterNodeFunc old = xmlDeregisterNodeDefaultValue;
10321 
10322     __xmlRegisterCallbacks = 1;
10323     xmlDeregisterNodeDefaultValue = func;
10324     return(old);
10325 }
10326 
10327