dlls/wininet/cookie.c

   1 /*
   2  * Wininet - cookie handling stuff
   3  *
   4  * Copyright 2002 TransGaming Technologies Inc.
   5  *
   6  * David Hammerton
   7  *
   8  * This library is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU Lesser General Public
  10  * License as published by the Free Software Foundation; either
  11  * version 2.1 of the License, or (at your option) any later version.
  12  *
  13  * This library is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * Lesser General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public
  19  * License along with this library; if not, write to the Free Software
  20  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  21  */
  22
  23 #include "config.h"
  24 #include "wine/port.h"
  25
  26 #if defined(__MINGW32__) || defined (_MSC_VER)
  27 #include <ws2tcpip.h>
  28 #endif
  29
  30 #include <stdarg.h>
  31 #include <stdio.h>
  32 #include <stdlib.h>
  33 #include <string.h>
  34 #include <assert.h>
  35 #ifdef HAVE_UNISTD_H
  36 # include <unistd.h>
  37 #endif
  38
  39 #include "windef.h"
  40 #include "winbase.h"
  41 #include "wininet.h"
  42 #include "winerror.h"
  43
  44 #include "wine/debug.h"
  45 #include "internet.h"
  46
  47 #define RESPONSE_TIMEOUT        30            /* FROM internet.c */
  48
  49
  50 WINE_DEFAULT_DEBUG_CHANNEL(wininet);
  51
  52 /* FIXME
  53  *     Cookies could use A LOT OF MEMORY. We need some kind of memory management here!
  54  */
  55
  56 typedef struct _cookie_domain cookie_domain;
  57 typedef struct _cookie cookie;
  58
  59 struct _cookie
  60 {
  61     struct list entry;
  62
  63     struct _cookie_domain *parent;
  64
  65     LPWSTR lpCookieName;
  66     LPWSTR lpCookieData;
  67     DWORD flags;
  68     FILETIME expiry;
  69     FILETIME create;
  70 };
  71
  72 struct _cookie_domain
  73 {
  74     struct list entry;
  75
  76     LPWSTR lpCookieDomain;
  77     LPWSTR lpCookiePath;
  78     struct list cookie_list;
  79 };
  80
  81 static CRITICAL_SECTION cookie_cs;
  82 static CRITICAL_SECTION_DEBUG cookie_cs_debug =
  83 {
  84     0, 0, &cookie_cs,
  85     { &cookie_cs_debug.ProcessLocksList, &cookie_cs_debug.ProcessLocksList },
  86     0, 0, { (DWORD_PTR)(__FILE__ ": cookie_cs") }
  87 };
  88 static CRITICAL_SECTION cookie_cs = { &cookie_cs_debug, -1, 0, 0, 0, 0 };
  89 static struct list domain_list = LIST_INIT(domain_list);
  90
  91 static cookie *COOKIE_addCookie(cookie_domain *domain, LPCWSTR name, LPCWSTR data,
  92         FILETIME expiry, FILETIME create, DWORD flags);
  93 static cookie *COOKIE_findCookie(cookie_domain *domain, LPCWSTR lpszCookieName);
  94 static void COOKIE_deleteCookie(cookie *deadCookie, BOOL deleteDomain);
  95 static cookie_domain *COOKIE_addDomain(LPCWSTR domain, LPCWSTR path);
  96 static void COOKIE_deleteDomain(cookie_domain *deadDomain);
  97 static BOOL COOKIE_matchDomain(LPCWSTR lpszCookieDomain, LPCWSTR lpszCookiePath,
  98         cookie_domain *searchDomain, BOOL allow_partial);
  99
 100 static BOOL create_cookie_url(LPCWSTR domain, LPCWSTR path, WCHAR *buf, DWORD buf_len)
 101 {
 102     static const WCHAR cookie_prefix[] = {'C','o','o','k','i','e',':'};
 103
 104     WCHAR *p;
 105     DWORD len;
 106
 107     if(buf_len < sizeof(cookie_prefix)/sizeof(WCHAR))
 108         return FALSE;
 109     memcpy(buf, cookie_prefix, sizeof(cookie_prefix));
 110     buf += sizeof(cookie_prefix)/sizeof(WCHAR);
 111     buf_len -= sizeof(cookie_prefix)/sizeof(WCHAR);
 112     p = buf;
 113
 114     len = buf_len;
 115     if(!GetUserNameW(buf, &len))
 116         return FALSE;
 117     buf += len-1;
 118     buf_len -= len-1;
 119
 120     if(!buf_len)
 121         return FALSE;
 122     *(buf++) = '@';
 123     buf_len--;
 124
 125     len = strlenW(domain);
 126     if(len >= buf_len)
 127         return FALSE;
 128     memcpy(buf, domain, len*sizeof(WCHAR));
 129     buf += len;
 130     buf_len -= len;
 131
 132     len = strlenW(path);
 133     if(len >= buf_len)
 134         return FALSE;
 135     memcpy(buf, path, len*sizeof(WCHAR));
 136     buf += len;
 137
 138     *buf = 0;
 139
 140     for(; *p; p++)
 141         *p = tolowerW(*p);
 142     return TRUE;
 143 }
 144
 145 static BOOL load_persistent_cookie(LPCWSTR domain, LPCWSTR path)
 146 {
 147     INTERNET_CACHE_ENTRY_INFOW *info;
 148     cookie_domain *domain_container = NULL;
 149     cookie *old_cookie;
 150     struct list *iter;
 151     WCHAR cookie_url[MAX_PATH];
 152     HANDLE cookie;
 153     char *str = NULL, *pbeg, *pend;
 154     DWORD size, flags;
 155     WCHAR *name, *data;
 156     FILETIME expiry, create, time;
 157
 158     if (!create_cookie_url(domain, path, cookie_url, sizeof(cookie_url)/sizeof(cookie_url[0])))
 159         return FALSE;
 160
 161     size = 0;
 162     RetrieveUrlCacheEntryStreamW(cookie_url, NULL, &size, FALSE, 0);
 163     if(GetLastError() != ERROR_INSUFFICIENT_BUFFER)
 164         return TRUE;
 165     info = heap_alloc(size);
 166     if(!info)
 167         return FALSE;
 168     cookie = RetrieveUrlCacheEntryStreamW(cookie_url, info, &size, FALSE, 0);
 169     size = info->dwSizeLow;
 170     heap_free(info);
 171     if(!cookie)
 172         return FALSE;
 173
 174     if(!(str = heap_alloc(size+1)) || !ReadUrlCacheEntryStream(cookie, 0, str, &size, 0)) {
 175         UnlockUrlCacheEntryStream(cookie, 0);
 176         heap_free(str);
 177         return FALSE;
 178     }
 179     str[size] = 0;
 180     UnlockUrlCacheEntryStream(cookie, 0);
 181
 182     LIST_FOR_EACH(iter, &domain_list)
 183     {
 184         domain_container = LIST_ENTRY(iter, cookie_domain, entry);
 185         if(COOKIE_matchDomain(domain, path, domain_container, FALSE))
 186             break;
 187         domain_container = NULL;
 188     }
 189     if(!domain_container)
 190         domain_container = COOKIE_addDomain(domain, path);
 191     if(!domain_container) {
 192         heap_free(str);
 193         return FALSE;
 194     }
 195
 196     GetSystemTimeAsFileTime(&time);
 197     for(pbeg=str; pbeg && *pbeg; name=data=NULL) {
 198         pend = strchr(pbeg, '\n');
 199         if(!pend)
 200             break;
 201         *pend = 0;
 202         name = heap_strdupAtoW(pbeg);
 203
 204         pbeg = pend+1;
 205         pend = strchr(pbeg, '\n');
 206         if(!pend)
 207             break;
 208         *pend = 0;
 209         data = heap_strdupAtoW(pbeg);
 210
 211         pbeg = pend+1;
 212         pbeg = strchr(pend+1, '\n');
 213         if(!pbeg)
 214             break;
 215         sscanf(pbeg, "%u %u %u %u %u", &flags, &expiry.dwLowDateTime, &expiry.dwHighDateTime,
 216                 &create.dwLowDateTime, &create.dwHighDateTime);
 217
 218         /* skip "*\n" */
 219         pbeg = strchr(pbeg, '*');
 220         if(pbeg) {
 221             pbeg++;
 222             if(*pbeg)
 223                 pbeg++;
 224         }
 225
 226         if(!name || !data)
 227             break;
 228
 229         if(CompareFileTime(&time, &expiry) <= 0) {
 230             if((old_cookie = COOKIE_findCookie(domain_container, name)))
 231                 COOKIE_deleteCookie(old_cookie, FALSE);
 232             COOKIE_addCookie(domain_container, name, data, expiry, create, flags);
 233         }
 234         heap_free(name);
 235         heap_free(data);
 236     }
 237     heap_free(str);
 238     heap_free(name);
 239     heap_free(data);
 240
 241     return TRUE;
 242 }
 243
 244 static BOOL save_persistent_cookie(cookie_domain *domain)
 245 {
 246     static const WCHAR txtW[] = {'t','x','t',0};
 247
 248     WCHAR cookie_url[MAX_PATH], cookie_file[MAX_PATH];
 249     HANDLE cookie_handle;
 250     cookie *cookie_container = NULL, *cookie_iter;
 251     BOOL do_save = FALSE;
 252     char buf[64], *dyn_buf;
 253     FILETIME time;
 254
 255     if (!create_cookie_url(domain->lpCookieDomain, domain->lpCookiePath, cookie_url, sizeof(cookie_url)/sizeof(cookie_url[0])))
 256         return FALSE;
 257
 258     /* check if there's anything to save */
 259     GetSystemTimeAsFileTime(&time);
 260     LIST_FOR_EACH_ENTRY_SAFE(cookie_container, cookie_iter, &domain->cookie_list, cookie, entry)
 261     {
 262         if((cookie_container->expiry.dwLowDateTime || cookie_container->expiry.dwHighDateTime)
 263                 && CompareFileTime(&time, &cookie_container->expiry) > 0) {
 264             COOKIE_deleteCookie(cookie_container, FALSE);
 265             continue;
 266         }
 267
 268         if(!(cookie_container->flags & INTERNET_COOKIE_IS_SESSION)) {
 269             do_save = TRUE;
 270             break;
 271         }
 272     }
 273     if(!do_save) {
 274         DeleteUrlCacheEntryW(cookie_url);
 275         return TRUE;
 276     }
 277
 278     if(!CreateUrlCacheEntryW(cookie_url, 0, txtW, cookie_file, 0))
 279         return FALSE;
 280     cookie_handle = CreateFileW(cookie_file, GENERIC_WRITE, 0, NULL, OPEN_EXISTING, 0, NULL);
 281     if(cookie_handle == INVALID_HANDLE_VALUE) {
 282         DeleteFileW(cookie_file);
 283         return FALSE;
 284     }
 285
 286     LIST_FOR_EACH_ENTRY(cookie_container, &domain->cookie_list, cookie, entry)
 287     {
 288         if(cookie_container->flags & INTERNET_COOKIE_IS_SESSION)
 289             continue;
 290
 291         dyn_buf = heap_strdupWtoA(cookie_container->lpCookieName);
 292         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 293             heap_free(dyn_buf);
 294             do_save = FALSE;
 295             break;
 296         }
 297         heap_free(dyn_buf);
 298         if(!WriteFile(cookie_handle, "\n", 1, NULL, NULL)) {
 299             do_save = FALSE;
 300             break;
 301         }
 302
 303         dyn_buf = heap_strdupWtoA(cookie_container->lpCookieData);
 304         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 305             heap_free(dyn_buf);
 306             do_save = FALSE;
 307             break;
 308         }
 309         heap_free(dyn_buf);
 310         if(!WriteFile(cookie_handle, "\n", 1, NULL, NULL)) {
 311             do_save = FALSE;
 312             break;
 313         }
 314
 315         dyn_buf = heap_strdupWtoA(domain->lpCookieDomain);
 316         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 317             heap_free(dyn_buf);
 318             do_save = FALSE;
 319             break;
 320         }
 321         heap_free(dyn_buf);
 322
 323         dyn_buf = heap_strdupWtoA(domain->lpCookiePath);
 324         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 325             heap_free(dyn_buf);
 326             do_save = FALSE;
 327             break;
 328         }
 329         heap_free(dyn_buf);
 330
 331         sprintf(buf, "\n%u\n%u\n%u\n%u\n%u\n*\n", cookie_container->flags,
 332                 cookie_container->expiry.dwLowDateTime, cookie_container->expiry.dwHighDateTime,
 333                 cookie_container->create.dwLowDateTime, cookie_container->create.dwHighDateTime);
 334         if(!WriteFile(cookie_handle, buf, strlen(buf), NULL, NULL)) {
 335             do_save = FALSE;
 336             break;
 337         }
 338     }
 339
 340     CloseHandle(cookie_handle);
 341     if(!do_save) {
 342         ERR("error saving cookie file\n");
 343         DeleteFileW(cookie_file);
 344         return FALSE;
 345     }
 346
 347     memset(&time, 0, sizeof(time));
 348     return CommitUrlCacheEntryW(cookie_url, cookie_file, time, time, 0, NULL, 0, txtW, 0);
 349 }
 350
 351 /* adds a cookie to the domain */
 352 static cookie *COOKIE_addCookie(cookie_domain *domain, LPCWSTR name, LPCWSTR data,
 353         FILETIME expiry, FILETIME create, DWORD flags)
 354 {
 355     cookie *newCookie = heap_alloc(sizeof(cookie));
 356     if (!newCookie)
 357         return NULL;
 358
 359     newCookie->lpCookieName = heap_strdupW(name);
 360     newCookie->lpCookieData = heap_strdupW(data);
 361
 362     if (!newCookie->lpCookieName || !newCookie->lpCookieData)
 363     {
 364         heap_free(newCookie->lpCookieName);
 365         heap_free(newCookie->lpCookieData);
 366         heap_free(newCookie);
 367
 368         return NULL;
 369     }
 370
 371     newCookie->flags = flags;
 372     newCookie->expiry = expiry;
 373     newCookie->create = create;
 374
 375     TRACE("added cookie %p (data is %s)\n", newCookie, debugstr_w(data) );
 376
 377     list_add_tail(&domain->cookie_list, &newCookie->entry);
 378     newCookie->parent = domain;
 379     return newCookie;
 380 }
 381
 382
 383 /* finds a cookie in the domain matching the cookie name */
 384 static cookie *COOKIE_findCookie(cookie_domain *domain, LPCWSTR lpszCookieName)
 385 {
 386     struct list * cursor;
 387     TRACE("(%p, %s)\n", domain, debugstr_w(lpszCookieName));
 388
 389     LIST_FOR_EACH(cursor, &domain->cookie_list)
 390     {
 391         cookie *searchCookie = LIST_ENTRY(cursor, cookie, entry);
 392         BOOL candidate = TRUE;
 393         if (candidate && lpszCookieName)
 394         {
 395             if (candidate && !searchCookie->lpCookieName)
 396                 candidate = FALSE;
 397             if (candidate && strcmpW(lpszCookieName, searchCookie->lpCookieName) != 0)
 398                 candidate = FALSE;
 399         }
 400         if (candidate)
 401             return searchCookie;
 402     }
 403     return NULL;
 404 }
 405
 406 /* removes a cookie from the list, if its the last cookie we also remove the domain */
 407 static void COOKIE_deleteCookie(cookie *deadCookie, BOOL deleteDomain)
 408 {
 409     heap_free(deadCookie->lpCookieName);
 410     heap_free(deadCookie->lpCookieData);
 411     list_remove(&deadCookie->entry);
 412
 413     /* special case: last cookie, lets remove the domain to save memory */
 414     if (list_empty(&deadCookie->parent->cookie_list) && deleteDomain)
 415         COOKIE_deleteDomain(deadCookie->parent);
 416     heap_free(deadCookie);
 417 }
 418
 419 /* allocates a domain and adds it to the end */
 420 static cookie_domain *COOKIE_addDomain(LPCWSTR domain, LPCWSTR path)
 421 {
 422     cookie_domain *newDomain = heap_alloc(sizeof(cookie_domain));
 423
 424     list_init(&newDomain->entry);
 425     list_init(&newDomain->cookie_list);
 426     newDomain->lpCookieDomain = heap_strdupW(domain);
 427     newDomain->lpCookiePath = heap_strdupW(path);
 428
 429     list_add_tail(&domain_list, &newDomain->entry);
 430
 431     TRACE("Adding domain: %p\n", newDomain);
 432     return newDomain;
 433 }
 434
 435 static BOOL COOKIE_crackUrlSimple(LPCWSTR lpszUrl, LPWSTR hostName, int hostNameLen, LPWSTR path, int pathLen)
 436 {
 437     URL_COMPONENTSW UrlComponents;
 438
 439     UrlComponents.lpszExtraInfo = NULL;
 440     UrlComponents.lpszPassword = NULL;
 441     UrlComponents.lpszScheme = NULL;
 442     UrlComponents.lpszUrlPath = path;
 443     UrlComponents.lpszUserName = NULL;
 444     UrlComponents.lpszHostName = hostName;
 445     UrlComponents.dwExtraInfoLength = 0;
 446     UrlComponents.dwPasswordLength = 0;
 447     UrlComponents.dwSchemeLength = 0;
 448     UrlComponents.dwUserNameLength = 0;
 449     UrlComponents.dwHostNameLength = hostNameLen;
 450     UrlComponents.dwUrlPathLength = pathLen;
 451
 452     if (!InternetCrackUrlW(lpszUrl, 0, 0, &UrlComponents)) return FALSE;
 453
 454     /* discard the webpage off the end of the path */
 455     if (UrlComponents.dwUrlPathLength)
 456     {
 457         if (path[UrlComponents.dwUrlPathLength - 1] != '/')
 458         {
 459             WCHAR *ptr;
 460             if ((ptr = strrchrW(path, '/'))) *(++ptr) = 0;
 461             else
 462             {
 463                 path[0] = '/';
 464                 path[1] = 0;
 465             }
 466         }
 467     }
 468     else if (pathLen >= 2)
 469     {
 470         path[0] = '/';
 471         path[1] = 0;
 472     }
 473     return TRUE;
 474 }
 475
 476 /* match a domain. domain must match if the domain is not NULL. path must match if the path is not NULL */
 477 static BOOL COOKIE_matchDomain(LPCWSTR lpszCookieDomain, LPCWSTR lpszCookiePath,
 478                                cookie_domain *searchDomain, BOOL allow_partial)
 479 {
 480     TRACE("searching on domain %p\n", searchDomain);
 481         if (lpszCookieDomain)
 482         {
 483             if (!searchDomain->lpCookieDomain)
 484             return FALSE;
 485
 486             TRACE("comparing domain %s with %s\n",
 487             debugstr_w(lpszCookieDomain),
 488             debugstr_w(searchDomain->lpCookieDomain));
 489
 490         if (allow_partial && !strstrW(lpszCookieDomain, searchDomain->lpCookieDomain))
 491             return FALSE;
 492         else if (!allow_partial && lstrcmpW(lpszCookieDomain, searchDomain->lpCookieDomain) != 0)
 493             return FALSE;
 494         }
 495     if (lpszCookiePath)
 496     {
 497         INT len;
 498         TRACE("comparing paths: %s with %s\n", debugstr_w(lpszCookiePath), debugstr_w(searchDomain->lpCookiePath));
 499         /* paths match at the beginning.  so a path of  /foo would match
 500          * /foobar and /foo/bar
 501          */
 502         if (!searchDomain->lpCookiePath)
 503             return FALSE;
 504         if (allow_partial)
 505         {
 506             len = lstrlenW(searchDomain->lpCookiePath);
 507             if (strncmpiW(searchDomain->lpCookiePath, lpszCookiePath, len)!=0)
 508                 return FALSE;
 509         }
 510         else if (strcmpW(lpszCookiePath, searchDomain->lpCookiePath))
 511             return FALSE;
 512
 513         }
 514         return TRUE;
 515 }
 516
 517 /* remove a domain from the list and delete it */
 518 static void COOKIE_deleteDomain(cookie_domain *deadDomain)
 519 {
 520     struct list * cursor;
 521     while ((cursor = list_tail(&deadDomain->cookie_list)))
 522     {
 523         COOKIE_deleteCookie(LIST_ENTRY(cursor, cookie, entry), FALSE);
 524         list_remove(cursor);
 525     }
 526     heap_free(deadDomain->lpCookieDomain);
 527     heap_free(deadDomain->lpCookiePath);
 528
 529     list_remove(&deadDomain->entry);
 530
 531     heap_free(deadDomain);
 532 }
 533
 534 DWORD get_cookie(const WCHAR *host, const WCHAR *path, WCHAR *cookie_data, DWORD *size, DWORD flags)
 535 {
 536     static const WCHAR empty_path[] = { '/',0 };
 537
 538     unsigned cnt = 0, len, name_len, domain_count = 0, cookie_count = 0;
 539     WCHAR *ptr, subpath[INTERNET_MAX_PATH_LENGTH];
 540     const WCHAR *p;
 541     cookie_domain *domain;
 542     FILETIME tm;
 543
 544     GetSystemTimeAsFileTime(&tm);
 545
 546     EnterCriticalSection(&cookie_cs);
 547
 548     len = strlenW(host);
 549     p = host+len;
 550     while(p>host && p[-1]!='.') p--;
 551     while(p != host) {
 552         p--;
 553         while(p>host && p[-1]!='.') p--;
 554         if(p == host) break;
 555
 556         load_persistent_cookie(p, empty_path);
 557     }
 558
 559     len = strlenW(path);
 560     assert(len+1 < INTERNET_MAX_PATH_LENGTH);
 561     memcpy(subpath, path, (len+1)*sizeof(WCHAR));
 562     ptr = subpath+len;
 563     do {
 564         *ptr = 0;
 565         load_persistent_cookie(host, subpath);
 566
 567         ptr--;
 568         while(ptr>subpath && ptr[-1]!='/') ptr--;
 569     }while(ptr != subpath);
 570
 571     ptr = cookie_data;
 572     LIST_FOR_EACH_ENTRY(domain, &domain_list, cookie_domain, entry) {
 573         struct list *cursor, *cursor2;
 574
 575         if(!COOKIE_matchDomain(host, path, domain, TRUE))
 576             continue;
 577
 578         domain_count++;
 579         TRACE("found domain %p\n", domain);
 580
 581         LIST_FOR_EACH_SAFE(cursor, cursor2, &domain->cookie_list) {
 582             cookie *cookie_iter = LIST_ENTRY(cursor, cookie, entry);
 583
 584             /* check for expiry */
 585             if((cookie_iter->expiry.dwLowDateTime != 0 || cookie_iter->expiry.dwHighDateTime != 0)
 586                 && CompareFileTime(&tm, &cookie_iter->expiry)  > 0)
 587             {
 588                 TRACE("Found expired cookie. deleting\n");
 589                 COOKIE_deleteCookie(cookie_iter, FALSE);
 590                 continue;
 591             }
 592
 593             if((cookie_iter->flags & INTERNET_COOKIE_HTTPONLY) && !(flags & INTERNET_COOKIE_HTTPONLY))
 594                 continue;
 595
 596             if (cookie_count)
 597                 cnt += 2; /* '; ' */
 598             cnt += name_len = strlenW(cookie_iter->lpCookieName);
 599             if ((len = strlenW(cookie_iter->lpCookieData))) {
 600                 cnt += 1; /* = */
 601                 cnt += len;
 602             }
 603
 604             if(ptr) {
 605                 if(*size > cnt) {
 606                     if(cookie_count) {
 607                         *ptr++ = ';';
 608                         *ptr++ = ' ';
 609                     }
 610
 611                     memcpy(ptr, cookie_iter->lpCookieName, name_len*sizeof(WCHAR));
 612                     ptr += name_len;
 613
 614                     if(len) {
 615                         *ptr++ = '=';
 616                         memcpy(ptr, cookie_iter->lpCookieData, len*sizeof(WCHAR));
 617                         ptr += len;
 618                     }
 619
 620                     assert(cookie_data+cnt == ptr);
 621                     TRACE("Cookie: %s\n", debugstr_wn(cookie_data, cnt));
 622                 }else {
 623                     /* Stop writing data, just compute the size */
 624                     ptr = NULL;
 625                 }
 626             }
 627
 628             cookie_count++;
 629         }
 630     }
 631
 632     LeaveCriticalSection(&cookie_cs);
 633
 634     if(ptr)
 635         *ptr = 0;
 636
 637     if (!cnt) {
 638         TRACE("no cookies found for %s\n", debugstr_w(host));
 639         return ERROR_NO_MORE_ITEMS;
 640     }
 641
 642     if(!cookie_data || !ptr) {
 643         *size = (cnt + 1) * sizeof(WCHAR);
 644         TRACE("returning %u\n", *size);
 645         return cookie_data ? ERROR_INSUFFICIENT_BUFFER : ERROR_SUCCESS;
 646     }
 647
 648     *size = cnt + 1;
 649
 650     TRACE("Returning %u (from %u domains): %s\n", cnt, domain_count, debugstr_w(cookie_data));
 651     return ERROR_SUCCESS;
 652 }
 653
 654 /***********************************************************************
 655  *           InternetGetCookieExW (WININET.@)
 656  *
 657  * Retrieve cookie from the specified url
 658  *
 659  *  It should be noted that on windows the lpszCookieName parameter is "not implemented".
 660  *    So it won't be implemented here.
 661  *
 662  * RETURNS
 663  *    TRUE  on success
 664  *    FALSE on failure
 665  *
 666  */
 667 BOOL WINAPI InternetGetCookieExW(LPCWSTR lpszUrl, LPCWSTR lpszCookieName,
 668         LPWSTR lpCookieData, LPDWORD lpdwSize, DWORD flags, void *reserved)
 669 {
 670     WCHAR host[INTERNET_MAX_HOST_NAME_LENGTH], path[INTERNET_MAX_PATH_LENGTH];
 671     DWORD res;
 672     BOOL ret;
 673
 674     TRACE("(%s, %s, %p, %p, %x, %p)\n", debugstr_w(lpszUrl),debugstr_w(lpszCookieName), lpCookieData, lpdwSize, flags, reserved);
 675
 676     if (flags)
 677         FIXME("flags 0x%08x not supported\n", flags);
 678
 679     if (!lpszUrl)
 680     {
 681         SetLastError(ERROR_INVALID_PARAMETER);
 682         return FALSE;
 683     }
 684
 685     host[0] = 0;
 686     ret = COOKIE_crackUrlSimple(lpszUrl, host, sizeof(host)/sizeof(host[0]), path, sizeof(path)/sizeof(path[0]));
 687     if (!ret || !host[0]) {
 688         SetLastError(ERROR_INVALID_PARAMETER);
 689         return FALSE;
 690     }
 691
 692     res = get_cookie(host, path, lpCookieData, lpdwSize, flags);
 693     if(res != ERROR_SUCCESS)
 694         SetLastError(res);
 695     return res == ERROR_SUCCESS;
 696 }
 697
 698 /***********************************************************************
 699  *           InternetGetCookieW (WININET.@)
 700  *
 701  * Retrieve cookie for the specified URL.
 702  */
 703 BOOL WINAPI InternetGetCookieW(const WCHAR *url, const WCHAR *name, WCHAR *data, DWORD *size)
 704 {
 705     TRACE("(%s, %s, %s, %p)\n", debugstr_w(url), debugstr_w(name), debugstr_w(data), size);
 706
 707     return InternetGetCookieExW(url, name, data, size, 0, NULL);
 708 }
 709
 710 /***********************************************************************
 711  *           InternetGetCookieExA (WININET.@)
 712  *
 713  * Retrieve cookie from the specified url
 714  *
 715  * RETURNS
 716  *    TRUE  on success
 717  *    FALSE on failure
 718  *
 719  */
 720 BOOL WINAPI InternetGetCookieExA(LPCSTR lpszUrl, LPCSTR lpszCookieName,
 721         LPSTR lpCookieData, LPDWORD lpdwSize, DWORD flags, void *reserved)
 722 {
 723     WCHAR *url, *name;
 724     DWORD len, size;
 725     BOOL r;
 726
 727     TRACE("(%s %s %p %p(%u) %x %p)\n", debugstr_a(lpszUrl), debugstr_a(lpszCookieName),
 728           lpCookieData, lpdwSize, lpdwSize ? *lpdwSize : 0, flags, reserved);
 729
 730     url = heap_strdupAtoW(lpszUrl);
 731     name = heap_strdupAtoW(lpszCookieName);
 732
 733     r = InternetGetCookieExW( url, name, NULL, &len, flags, reserved );
 734     if( r )
 735     {
 736         WCHAR *szCookieData;
 737
 738         szCookieData = heap_alloc(len * sizeof(WCHAR));
 739         if( !szCookieData )
 740         {
 741             r = FALSE;
 742         }
 743         else
 744         {
 745             r = InternetGetCookieExW( url, name, szCookieData, &len, flags, reserved );
 746
 747             if(r) {
 748                 size = WideCharToMultiByte( CP_ACP, 0, szCookieData, len, NULL, 0, NULL, NULL);
 749                 if(lpCookieData) {
 750                     if(*lpdwSize >= size) {
 751                         WideCharToMultiByte( CP_ACP, 0, szCookieData, len, lpCookieData, *lpdwSize, NULL, NULL);
 752                     }else {
 753                         SetLastError(ERROR_INSUFFICIENT_BUFFER);
 754                         r = FALSE;
 755                     }
 756                 }
 757                 *lpdwSize = size;
 758             }
 759
 760             heap_free( szCookieData );
 761         }
 762     }
 763     heap_free( name );
 764     heap_free( url );
 765     return r;
 766 }
 767
 768 /***********************************************************************
 769  *           InternetGetCookieA (WININET.@)
 770  *
 771  * See InternetGetCookieW.
 772  */
 773 BOOL WINAPI InternetGetCookieA(const char *url, const char *name, char *data, DWORD *size)
 774 {
 775     TRACE("(%s, %s, %s, %p)\n", debugstr_a(url), debugstr_a(name), debugstr_a(data), size);
 776
 777     return InternetGetCookieExA(url, name, data, size, 0, NULL);
 778 }
 779
 780 /***********************************************************************
 781  *           IsDomainLegalCookieDomainW (WININET.@)
 782  */
 783 BOOL WINAPI IsDomainLegalCookieDomainW( LPCWSTR s1, LPCWSTR s2 )
 784 {
 785     DWORD s1_len, s2_len;
 786
 787     FIXME("(%s, %s) semi-stub\n", debugstr_w(s1), debugstr_w(s2));
 788
 789     if (!s1 || !s2)
 790     {
 791         SetLastError(ERROR_INVALID_PARAMETER);
 792         return FALSE;
 793     }
 794     if (s1[0] == '.' || !s1[0] || s2[0] == '.' || !s2[0])
 795     {
 796         SetLastError(ERROR_INVALID_NAME);
 797         return FALSE;
 798     }
 799     if(!strchrW(s1, '.') || !strchrW(s2, '.'))
 800         return FALSE;
 801
 802     s1_len = strlenW(s1);
 803     s2_len = strlenW(s2);
 804     if (s1_len > s2_len)
 805         return FALSE;
 806
 807     if (strncmpiW(s1, s2+s2_len-s1_len, s1_len) || (s2_len>s1_len && s2[s2_len-s1_len-1]!='.'))
 808     {
 809         SetLastError(ERROR_INVALID_PARAMETER);
 810         return FALSE;
 811     }
 812
 813     return TRUE;
 814 }
 815
 816 DWORD set_cookie(const WCHAR *domain, const WCHAR *path, const WCHAR *cookie_name, const WCHAR *cookie_data, DWORD flags)
 817 {
 818     cookie_domain *thisCookieDomain = NULL;
 819     cookie *thisCookie;
 820     struct list *cursor;
 821     LPWSTR data, value;
 822     WCHAR *ptr;
 823     FILETIME expiry, create;
 824     BOOL expired = FALSE, update_persistent = FALSE;
 825     DWORD cookie_flags = 0;
 826
 827     value = data = heap_strdupW(cookie_data);
 828     if (!data)
 829     {
 830         ERR("could not allocate the cookie data buffer\n");
 831         return COOKIE_STATE_UNKNOWN;
 832     }
 833
 834     memset(&expiry,0,sizeof(expiry));
 835     GetSystemTimeAsFileTime(&create);
 836
 837     /* lots of information can be parsed out of the cookie value */
 838
 839     ptr = data;
 840     for (;;)
 841     {
 842         static const WCHAR szDomain[] = {'d','o','m','a','i','n','=',0};
 843         static const WCHAR szPath[] = {'p','a','t','h','=',0};
 844         static const WCHAR szExpires[] = {'e','x','p','i','r','e','s','=',0};
 845         static const WCHAR szSecure[] = {'s','e','c','u','r','e',0};
 846         static const WCHAR szHttpOnly[] = {'h','t','t','p','o','n','l','y',0};
 847
 848         if (!(ptr = strchrW(ptr,';'))) break;
 849         *ptr++ = 0;
 850
 851         if (value != data) heap_free(value);
 852         value = heap_alloc((ptr - data) * sizeof(WCHAR));
 853         if (value == NULL)
 854         {
 855             heap_free(data);
 856             ERR("could not allocate the cookie value buffer\n");
 857             return COOKIE_STATE_UNKNOWN;
 858         }
 859         strcpyW(value, data);
 860
 861         while (*ptr == ' ') ptr++; /* whitespace */
 862
 863         if (strncmpiW(ptr, szDomain, 7) == 0)
 864         {
 865             WCHAR *end_ptr;
 866
 867             ptr += sizeof(szDomain)/sizeof(szDomain[0])-1;
 868             if(*ptr == '.')
 869                 ptr++;
 870             end_ptr = strchrW(ptr, ';');
 871             if(end_ptr)
 872                 *end_ptr = 0;
 873
 874             if(!IsDomainLegalCookieDomainW(ptr, domain))
 875             {
 876                 if(value != data)
 877                     heap_free(value);
 878                 heap_free(data);
 879                 return COOKIE_STATE_UNKNOWN;
 880             }
 881
 882             if(end_ptr)
 883                 *end_ptr = ';';
 884
 885             domain = ptr;
 886             TRACE("Parsing new domain %s\n",debugstr_w(domain));
 887         }
 888         else if (strncmpiW(ptr, szPath, 5) == 0)
 889         {
 890             ptr+=strlenW(szPath);
 891             path = ptr;
 892             TRACE("Parsing new path %s\n",debugstr_w(path));
 893         }
 894         else if (strncmpiW(ptr, szExpires, 8) == 0)
 895         {
 896             SYSTEMTIME st;
 897             ptr+=strlenW(szExpires);
 898             if (InternetTimeToSystemTimeW(ptr, &st, 0))
 899             {
 900                 SystemTimeToFileTime(&st, &expiry);
 901
 902                 if (CompareFileTime(&create,&expiry) > 0)
 903                 {
 904                     TRACE("Cookie already expired.\n");
 905                     expired = TRUE;
 906                 }
 907             }
 908         }
 909         else if (strncmpiW(ptr, szSecure, 6) == 0)
 910         {
 911             FIXME("secure not handled (%s)\n",debugstr_w(ptr));
 912             ptr += strlenW(szSecure);
 913         }
 914         else if (strncmpiW(ptr, szHttpOnly, 8) == 0)
 915         {
 916             if(!(flags & INTERNET_COOKIE_HTTPONLY)) {
 917                 WARN("HTTP only cookie added without INTERNET_COOKIE_HTTPONLY flag\n");
 918                 heap_free(data);
 919                 if (value != data) heap_free(value);
 920                 SetLastError(ERROR_INVALID_OPERATION);
 921                 return COOKIE_STATE_REJECT;
 922             }
 923
 924             cookie_flags |= INTERNET_COOKIE_HTTPONLY;
 925             ptr += strlenW(szHttpOnly);
 926         }
 927         else if (*ptr)
 928         {
 929             FIXME("Unknown additional option %s\n",debugstr_w(ptr));
 930             break;
 931         }
 932     }
 933
 934     EnterCriticalSection(&cookie_cs);
 935
 936     load_persistent_cookie(domain, path);
 937
 938     LIST_FOR_EACH(cursor, &domain_list)
 939     {
 940         thisCookieDomain = LIST_ENTRY(cursor, cookie_domain, entry);
 941         if (COOKIE_matchDomain(domain, path, thisCookieDomain, FALSE))
 942             break;
 943         thisCookieDomain = NULL;
 944     }
 945
 946     if (!thisCookieDomain)
 947     {
 948         if (!expired)
 949             thisCookieDomain = COOKIE_addDomain(domain, path);
 950         else
 951         {
 952             heap_free(data);
 953             if (value != data) heap_free(value);
 954             LeaveCriticalSection(&cookie_cs);
 955             return COOKIE_STATE_ACCEPT;
 956         }
 957     }
 958
 959     if(!expiry.dwLowDateTime && !expiry.dwHighDateTime)
 960         cookie_flags |= INTERNET_COOKIE_IS_SESSION;
 961     else
 962         update_persistent = TRUE;
 963
 964     if ((thisCookie = COOKIE_findCookie(thisCookieDomain, cookie_name)))
 965     {
 966         if (!(thisCookie->flags & INTERNET_COOKIE_IS_SESSION))
 967             update_persistent = TRUE;
 968         COOKIE_deleteCookie(thisCookie, FALSE);
 969     }
 970
 971     TRACE("setting cookie %s=%s for domain %s path %s\n", debugstr_w(cookie_name),
 972           debugstr_w(value), debugstr_w(thisCookieDomain->lpCookieDomain),debugstr_w(thisCookieDomain->lpCookiePath));
 973
 974     if (!expired && !COOKIE_addCookie(thisCookieDomain, cookie_name, value, expiry, create, cookie_flags))
 975     {
 976         heap_free(data);
 977         if (value != data) heap_free(value);
 978         LeaveCriticalSection(&cookie_cs);
 979         return COOKIE_STATE_UNKNOWN;
 980     }
 981     heap_free(data);
 982     if (value != data) heap_free(value);
 983
 984     if (!update_persistent || save_persistent_cookie(thisCookieDomain))
 985     {
 986         LeaveCriticalSection(&cookie_cs);
 987         return COOKIE_STATE_ACCEPT;
 988     }
 989     LeaveCriticalSection(&cookie_cs);
 990     return COOKIE_STATE_UNKNOWN;
 991 }
 992
 993 /***********************************************************************
 994  *           InternetSetCookieExW (WININET.@)
 995  *
 996  * Sets cookie for the specified url
 997  */
 998 DWORD WINAPI InternetSetCookieExW(LPCWSTR lpszUrl, LPCWSTR lpszCookieName,
 999         LPCWSTR lpCookieData, DWORD flags, DWORD_PTR reserved)
1000 {
1001     BOOL ret;
1002     WCHAR hostName[INTERNET_MAX_HOST_NAME_LENGTH], path[INTERNET_MAX_PATH_LENGTH];
1003
1004     TRACE("(%s, %s, %s, %x, %lx)\n", debugstr_w(lpszUrl), debugstr_w(lpszCookieName),
1005           debugstr_w(lpCookieData), flags, reserved);
1006
1007     if (flags & ~INTERNET_COOKIE_HTTPONLY)
1008         FIXME("flags %x not supported\n", flags);
1009
1010     if (!lpszUrl || !lpCookieData)
1011     {
1012         SetLastError(ERROR_INVALID_PARAMETER);
1013         return COOKIE_STATE_UNKNOWN;
1014     }
1015
1016     hostName[0] = 0;
1017     ret = COOKIE_crackUrlSimple(lpszUrl, hostName, sizeof(hostName)/sizeof(hostName[0]), path, sizeof(path)/sizeof(path[0]));
1018     if (!ret || !hostName[0]) return COOKIE_STATE_UNKNOWN;
1019
1020     if (!lpszCookieName)
1021     {
1022         WCHAR *cookie, *data;
1023         DWORD res;
1024
1025         cookie = heap_strdupW(lpCookieData);
1026         if (!cookie)
1027         {
1028             SetLastError(ERROR_OUTOFMEMORY);
1029             return COOKIE_STATE_UNKNOWN;
1030         }
1031
1032         /* some apps (or is it us??) try to add a cookie with no cookie name, but
1033          * the cookie data in the form of name[=data].
1034          */
1035         if (!(data = strchrW(cookie, '='))) data = cookie + strlenW(cookie);
1036         else *data++ = 0;
1037
1038         res = set_cookie(hostName, path, cookie, data, flags);
1039
1040         heap_free(cookie);
1041         return res;
1042     }
1043     return set_cookie(hostName, path, lpszCookieName, lpCookieData, flags);
1044 }
1045
1046 /***********************************************************************
1047  *           InternetSetCookieW (WININET.@)
1048  *
1049  * Sets a cookie for the specified URL.
1050  */
1051 BOOL WINAPI InternetSetCookieW(const WCHAR *url, const WCHAR *name, const WCHAR *data)
1052 {
1053     TRACE("(%s, %s, %s)\n", debugstr_w(url), debugstr_w(name), debugstr_w(data));
1054
1055     return InternetSetCookieExW(url, name, data, 0, 0) == COOKIE_STATE_ACCEPT;
1056 }
1057
1058 /***********************************************************************
1059  *           InternetSetCookieA (WININET.@)
1060  *
1061  * Sets cookie for the specified url
1062  *
1063  * RETURNS
1064  *    TRUE  on success
1065  *    FALSE on failure
1066  *
1067  */
1068 BOOL WINAPI InternetSetCookieA(LPCSTR lpszUrl, LPCSTR lpszCookieName,
1069     LPCSTR lpCookieData)
1070 {
1071     LPWSTR data, url, name;
1072     BOOL r;
1073
1074     TRACE("(%s,%s,%s)\n", debugstr_a(lpszUrl),
1075         debugstr_a(lpszCookieName), debugstr_a(lpCookieData));
1076
1077     url = heap_strdupAtoW(lpszUrl);
1078     name = heap_strdupAtoW(lpszCookieName);
1079     data = heap_strdupAtoW(lpCookieData);
1080
1081     r = InternetSetCookieW( url, name, data );
1082
1083     heap_free( data );
1084     heap_free( name );
1085     heap_free( url );
1086     return r;
1087 }
1088
1089 /***********************************************************************
1090  *           InternetSetCookieExA (WININET.@)
1091  *
1092  * See InternetSetCookieExW.
1093  */
1094 DWORD WINAPI InternetSetCookieExA( LPCSTR lpszURL, LPCSTR lpszCookieName, LPCSTR lpszCookieData,
1095                                    DWORD dwFlags, DWORD_PTR dwReserved)
1096 {
1097     WCHAR *data, *url, *name;
1098     DWORD r;
1099
1100     TRACE("(%s, %s, %s, %x, %lx)\n", debugstr_a(lpszURL), debugstr_a(lpszCookieName),
1101           debugstr_a(lpszCookieData), dwFlags, dwReserved);
1102
1103     url = heap_strdupAtoW(lpszURL);
1104     name = heap_strdupAtoW(lpszCookieName);
1105     data = heap_strdupAtoW(lpszCookieData);
1106
1107     r = InternetSetCookieExW(url, name, data, dwFlags, dwReserved);
1108
1109     heap_free( data );
1110     heap_free( name );
1111     heap_free( url );
1112     return r;
1113 }
1114
1115 /***********************************************************************
1116  *           InternetClearAllPerSiteCookieDecisions (WININET.@)
1117  *
1118  * Clears all per-site decisions about cookies.
1119  *
1120  * RETURNS
1121  *    TRUE  on success
1122  *    FALSE on failure
1123  *
1124  */
1125 BOOL WINAPI InternetClearAllPerSiteCookieDecisions( VOID )
1126 {
1127     FIXME("stub\n");
1128     return TRUE;
1129 }
1130
1131 /***********************************************************************
1132  *           InternetEnumPerSiteCookieDecisionA (WININET.@)
1133  *
1134  * See InternetEnumPerSiteCookieDecisionW.
1135  */
1136 BOOL WINAPI InternetEnumPerSiteCookieDecisionA( LPSTR pszSiteName, ULONG *pcSiteNameSize,
1137                                                 ULONG *pdwDecision, ULONG dwIndex )
1138 {
1139     FIXME("(%s, %p, %p, 0x%08x) stub\n",
1140           debugstr_a(pszSiteName), pcSiteNameSize, pdwDecision, dwIndex);
1141     return FALSE;
1142 }
1143
1144 /***********************************************************************
1145  *           InternetEnumPerSiteCookieDecisionW (WININET.@)
1146  *
1147  * Enumerates all per-site decisions about cookies.
1148  *
1149  * RETURNS
1150  *    TRUE  on success
1151  *    FALSE on failure
1152  *
1153  */
1154 BOOL WINAPI InternetEnumPerSiteCookieDecisionW( LPWSTR pszSiteName, ULONG *pcSiteNameSize,
1155                                                 ULONG *pdwDecision, ULONG dwIndex )
1156 {
1157     FIXME("(%s, %p, %p, 0x%08x) stub\n",
1158           debugstr_w(pszSiteName), pcSiteNameSize, pdwDecision, dwIndex);
1159     return FALSE;
1160 }
1161
1162 /***********************************************************************
1163  *           InternetGetPerSiteCookieDecisionA (WININET.@)
1164  */
1165 BOOL WINAPI InternetGetPerSiteCookieDecisionA( LPCSTR pwchHostName, ULONG *pResult )
1166 {
1167     FIXME("(%s, %p) stub\n", debugstr_a(pwchHostName), pResult);
1168     return FALSE;
1169 }
1170
1171 /***********************************************************************
1172  *           InternetGetPerSiteCookieDecisionW (WININET.@)
1173  */
1174 BOOL WINAPI InternetGetPerSiteCookieDecisionW( LPCWSTR pwchHostName, ULONG *pResult )
1175 {
1176     FIXME("(%s, %p) stub\n", debugstr_w(pwchHostName), pResult);
1177     return FALSE;
1178 }
1179
1180 /***********************************************************************
1181  *           InternetSetPerSiteCookieDecisionA (WININET.@)
1182  */
1183 BOOL WINAPI InternetSetPerSiteCookieDecisionA( LPCSTR pchHostName, DWORD dwDecision )
1184 {
1185     FIXME("(%s, 0x%08x) stub\n", debugstr_a(pchHostName), dwDecision);
1186     return FALSE;
1187 }
1188
1189 /***********************************************************************
1190  *           InternetSetPerSiteCookieDecisionW (WININET.@)
1191  */
1192 BOOL WINAPI InternetSetPerSiteCookieDecisionW( LPCWSTR pchHostName, DWORD dwDecision )
1193 {
1194     FIXME("(%s, 0x%08x) stub\n", debugstr_w(pchHostName), dwDecision);
1195     return FALSE;
1196 }
1197
1198 void free_cookie(void)
1199 {
1200     DeleteCriticalSection(&cookie_cs);
1201 }