dlls/wininet/cookie.c

   1 /*
   2  * Wininet - cookie handling stuff
   3  *
   4  * Copyright 2002 TransGaming Technologies Inc.
   5  *
   6  * David Hammerton
   7  *
   8  * This library is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU Lesser General Public
  10  * License as published by the Free Software Foundation; either
  11  * version 2.1 of the License, or (at your option) any later version.
  12  *
  13  * This library is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * Lesser General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public
  19  * License along with this library; if not, write to the Free Software
  20  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  21  */
  22
  23 #include "config.h"
  24 #include "wine/port.h"
  25
  26 #if defined(__MINGW32__) || defined (_MSC_VER)
  27 #include <ws2tcpip.h>
  28 #endif
  29
  30 #include <stdarg.h>
  31 #include <stdio.h>
  32 #include <stdlib.h>
  33 #include <string.h>
  34 #include <assert.h>
  35 #ifdef HAVE_UNISTD_H
  36 # include <unistd.h>
  37 #endif
  38
  39 #include "windef.h"
  40 #include "winbase.h"
  41 #include "wininet.h"
  42 #include "winerror.h"
  43
  44 #include "wine/debug.h"
  45 #include "internet.h"
  46
  47 #define RESPONSE_TIMEOUT        30            /* FROM internet.c */
  48
  49
  50 WINE_DEFAULT_DEBUG_CHANNEL(wininet);
  51
  52 /* FIXME
  53  *     Cookies could use A LOT OF MEMORY. We need some kind of memory management here!
  54  */
  55
  56 typedef struct _cookie_domain cookie_domain;
  57 typedef struct _cookie cookie;
  58
  59 struct _cookie
  60 {
  61     struct list entry;
  62
  63     struct _cookie_domain *parent;
  64
  65     LPWSTR lpCookieName;
  66     LPWSTR lpCookieData;
  67     DWORD flags;
  68     FILETIME expiry;
  69     FILETIME create;
  70 };
  71
  72 struct _cookie_domain
  73 {
  74     struct list entry;
  75
  76     LPWSTR lpCookieDomain;
  77     LPWSTR lpCookiePath;
  78     struct list cookie_list;
  79 };
  80
  81 static CRITICAL_SECTION cookie_cs;
  82 static CRITICAL_SECTION_DEBUG cookie_cs_debug =
  83 {
  84     0, 0, &cookie_cs,
  85     { &cookie_cs_debug.ProcessLocksList, &cookie_cs_debug.ProcessLocksList },
  86     0, 0, { (DWORD_PTR)(__FILE__ ": cookie_cs") }
  87 };
  88 static CRITICAL_SECTION cookie_cs = { &cookie_cs_debug, -1, 0, 0, 0, 0 };
  89 static struct list domain_list = LIST_INIT(domain_list);
  90
  91 static cookie *COOKIE_addCookie(cookie_domain *domain, LPCWSTR name, LPCWSTR data,
  92         FILETIME expiry, FILETIME create, DWORD flags);
  93 static cookie *COOKIE_findCookie(cookie_domain *domain, LPCWSTR lpszCookieName);
  94 static void COOKIE_deleteCookie(cookie *deadCookie, BOOL deleteDomain);
  95 static cookie_domain *COOKIE_addDomain(LPCWSTR domain, LPCWSTR path);
  96 static void COOKIE_deleteDomain(cookie_domain *deadDomain);
  97 static BOOL COOKIE_matchDomain(LPCWSTR lpszCookieDomain, LPCWSTR lpszCookiePath,
  98         cookie_domain *searchDomain, BOOL allow_partial);
  99
 100 static BOOL create_cookie_url(LPCWSTR domain, LPCWSTR path, WCHAR *buf, DWORD buf_len)
 101 {
 102     static const WCHAR cookie_prefix[] = {'C','o','o','k','i','e',':'};
 103
 104     WCHAR *p;
 105     DWORD len;
 106
 107     if(buf_len < sizeof(cookie_prefix)/sizeof(WCHAR))
 108         return FALSE;
 109     memcpy(buf, cookie_prefix, sizeof(cookie_prefix));
 110     buf += sizeof(cookie_prefix)/sizeof(WCHAR);
 111     buf_len -= sizeof(cookie_prefix)/sizeof(WCHAR);
 112     p = buf;
 113
 114     len = buf_len;
 115     if(!GetUserNameW(buf, &len))
 116         return FALSE;
 117     buf += len-1;
 118     buf_len -= len-1;
 119
 120     if(!buf_len)
 121         return FALSE;
 122     *(buf++) = '@';
 123     buf_len--;
 124
 125     len = strlenW(domain);
 126     if(len >= buf_len)
 127         return FALSE;
 128     memcpy(buf, domain, len*sizeof(WCHAR));
 129     buf += len;
 130     buf_len -= len;
 131
 132     len = strlenW(path);
 133     if(len >= buf_len)
 134         return FALSE;
 135     memcpy(buf, path, len*sizeof(WCHAR));
 136     buf += len;
 137
 138     *buf = 0;
 139
 140     for(; *p; p++)
 141         *p = tolowerW(*p);
 142     return TRUE;
 143 }
 144
 145 static BOOL load_persistent_cookie(LPCWSTR domain, LPCWSTR path)
 146 {
 147     INTERNET_CACHE_ENTRY_INFOW *info;
 148     cookie_domain *domain_container = NULL;
 149     cookie *old_cookie;
 150     struct list *iter;
 151     WCHAR cookie_url[MAX_PATH];
 152     HANDLE cookie;
 153     char *str = NULL, *pbeg, *pend;
 154     DWORD size, flags;
 155     WCHAR *name, *data;
 156     FILETIME expiry, create, time;
 157
 158     if (!create_cookie_url(domain, path, cookie_url, sizeof(cookie_url)/sizeof(cookie_url[0])))
 159         return FALSE;
 160
 161     size = 0;
 162     RetrieveUrlCacheEntryStreamW(cookie_url, NULL, &size, FALSE, 0);
 163     if(GetLastError() != ERROR_INSUFFICIENT_BUFFER)
 164         return TRUE;
 165     info = heap_alloc(size);
 166     if(!info)
 167         return FALSE;
 168     cookie = RetrieveUrlCacheEntryStreamW(cookie_url, info, &size, FALSE, 0);
 169     size = info->dwSizeLow;
 170     heap_free(info);
 171     if(!cookie)
 172         return FALSE;
 173
 174     if(!(str = heap_alloc(size+1)) || !ReadUrlCacheEntryStream(cookie, 0, str, &size, 0)) {
 175         UnlockUrlCacheEntryStream(cookie, 0);
 176         heap_free(str);
 177         return FALSE;
 178     }
 179     str[size] = 0;
 180     UnlockUrlCacheEntryStream(cookie, 0);
 181
 182     LIST_FOR_EACH(iter, &domain_list)
 183     {
 184         domain_container = LIST_ENTRY(iter, cookie_domain, entry);
 185         if(COOKIE_matchDomain(domain, path, domain_container, FALSE))
 186             break;
 187         domain_container = NULL;
 188     }
 189     if(!domain_container)
 190         domain_container = COOKIE_addDomain(domain, path);
 191     if(!domain_container) {
 192         heap_free(str);
 193         return FALSE;
 194     }
 195
 196     GetSystemTimeAsFileTime(&time);
 197     for(pbeg=str; pbeg && *pbeg; name=data=NULL) {
 198         pend = strchr(pbeg, '\n');
 199         if(!pend)
 200             break;
 201         *pend = 0;
 202         name = heap_strdupAtoW(pbeg);
 203
 204         pbeg = pend+1;
 205         pend = strchr(pbeg, '\n');
 206         if(!pend)
 207             break;
 208         *pend = 0;
 209         data = heap_strdupAtoW(pbeg);
 210
 211         pbeg = pend+1;
 212         pbeg = strchr(pend+1, '\n');
 213         if(!pbeg)
 214             break;
 215         sscanf(pbeg, "%u %u %u %u %u", &flags, &expiry.dwLowDateTime, &expiry.dwHighDateTime,
 216                 &create.dwLowDateTime, &create.dwHighDateTime);
 217
 218         /* skip "*\n" */
 219         pbeg = strchr(pbeg, '*');
 220         if(pbeg) {
 221             pbeg++;
 222             if(*pbeg)
 223                 pbeg++;
 224         }
 225
 226         if(!name || !data)
 227             break;
 228
 229         if(CompareFileTime(&time, &expiry) <= 0) {
 230             if((old_cookie = COOKIE_findCookie(domain_container, name)))
 231                 COOKIE_deleteCookie(old_cookie, FALSE);
 232             COOKIE_addCookie(domain_container, name, data, expiry, create, flags);
 233         }
 234         heap_free(name);
 235         heap_free(data);
 236     }
 237     heap_free(str);
 238     heap_free(name);
 239     heap_free(data);
 240
 241     return TRUE;
 242 }
 243
 244 static BOOL save_persistent_cookie(cookie_domain *domain)
 245 {
 246     static const WCHAR txtW[] = {'t','x','t',0};
 247
 248     WCHAR cookie_url[MAX_PATH], cookie_file[MAX_PATH];
 249     HANDLE cookie_handle;
 250     cookie *cookie_container = NULL, *cookie_iter;
 251     BOOL do_save = FALSE;
 252     char buf[64], *dyn_buf;
 253     FILETIME time;
 254
 255     if (!create_cookie_url(domain->lpCookieDomain, domain->lpCookiePath, cookie_url, sizeof(cookie_url)/sizeof(cookie_url[0])))
 256         return FALSE;
 257
 258     /* check if there's anything to save */
 259     GetSystemTimeAsFileTime(&time);
 260     LIST_FOR_EACH_ENTRY_SAFE(cookie_container, cookie_iter, &domain->cookie_list, cookie, entry)
 261     {
 262         if((cookie_container->expiry.dwLowDateTime || cookie_container->expiry.dwHighDateTime)
 263                 && CompareFileTime(&time, &cookie_container->expiry) > 0) {
 264             COOKIE_deleteCookie(cookie_container, FALSE);
 265             continue;
 266         }
 267
 268         if(!(cookie_container->flags & INTERNET_COOKIE_IS_SESSION)) {
 269             do_save = TRUE;
 270             break;
 271         }
 272     }
 273     if(!do_save) {
 274         DeleteUrlCacheEntryW(cookie_url);
 275         return TRUE;
 276     }
 277
 278     if(!CreateUrlCacheEntryW(cookie_url, 0, txtW, cookie_file, 0))
 279         return FALSE;
 280     cookie_handle = CreateFileW(cookie_file, GENERIC_WRITE, 0, NULL, OPEN_EXISTING, 0, NULL);
 281     if(cookie_handle == INVALID_HANDLE_VALUE) {
 282         DeleteFileW(cookie_file);
 283         return FALSE;
 284     }
 285
 286     LIST_FOR_EACH_ENTRY(cookie_container, &domain->cookie_list, cookie, entry)
 287     {
 288         if(cookie_container->flags & INTERNET_COOKIE_IS_SESSION)
 289             continue;
 290
 291         dyn_buf = heap_strdupWtoA(cookie_container->lpCookieName);
 292         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 293             heap_free(dyn_buf);
 294             do_save = FALSE;
 295             break;
 296         }
 297         heap_free(dyn_buf);
 298         if(!WriteFile(cookie_handle, "\n", 1, NULL, NULL)) {
 299             do_save = FALSE;
 300             break;
 301         }
 302
 303         dyn_buf = heap_strdupWtoA(cookie_container->lpCookieData);
 304         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 305             heap_free(dyn_buf);
 306             do_save = FALSE;
 307             break;
 308         }
 309         heap_free(dyn_buf);
 310         if(!WriteFile(cookie_handle, "\n", 1, NULL, NULL)) {
 311             do_save = FALSE;
 312             break;
 313         }
 314
 315         dyn_buf = heap_strdupWtoA(domain->lpCookieDomain);
 316         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 317             heap_free(dyn_buf);
 318             do_save = FALSE;
 319             break;
 320         }
 321         heap_free(dyn_buf);
 322
 323         dyn_buf = heap_strdupWtoA(domain->lpCookiePath);
 324         if(!dyn_buf || !WriteFile(cookie_handle, dyn_buf, strlen(dyn_buf), NULL, NULL)) {
 325             heap_free(dyn_buf);
 326             do_save = FALSE;
 327             break;
 328         }
 329         heap_free(dyn_buf);
 330
 331         sprintf(buf, "\n%u\n%u\n%u\n%u\n%u\n*\n", cookie_container->flags,
 332                 cookie_container->expiry.dwLowDateTime, cookie_container->expiry.dwHighDateTime,
 333                 cookie_container->create.dwLowDateTime, cookie_container->create.dwHighDateTime);
 334         if(!WriteFile(cookie_handle, buf, strlen(buf), NULL, NULL)) {
 335             do_save = FALSE;
 336             break;
 337         }
 338     }
 339
 340     CloseHandle(cookie_handle);
 341     if(!do_save) {
 342         ERR("error saving cookie file\n");
 343         DeleteFileW(cookie_file);
 344         return FALSE;
 345     }
 346
 347     memset(&time, 0, sizeof(time));
 348     return CommitUrlCacheEntryW(cookie_url, cookie_file, time, time, 0, NULL, 0, txtW, 0);
 349 }
 350
 351 /* adds a cookie to the domain */
 352 static cookie *COOKIE_addCookie(cookie_domain *domain, LPCWSTR name, LPCWSTR data,
 353         FILETIME expiry, FILETIME create, DWORD flags)
 354 {
 355     cookie *newCookie = heap_alloc(sizeof(cookie));
 356     if (!newCookie)
 357         return NULL;
 358
 359     newCookie->lpCookieName = heap_strdupW(name);
 360     newCookie->lpCookieData = heap_strdupW(data);
 361
 362     if (!newCookie->lpCookieName || !newCookie->lpCookieData)
 363     {
 364         heap_free(newCookie->lpCookieName);
 365         heap_free(newCookie->lpCookieData);
 366         heap_free(newCookie);
 367
 368         return NULL;
 369     }
 370
 371     newCookie->flags = flags;
 372     newCookie->expiry = expiry;
 373     newCookie->create = create;
 374
 375     TRACE("added cookie %p (data is %s)\n", newCookie, debugstr_w(data) );
 376
 377     list_add_tail(&domain->cookie_list, &newCookie->entry);
 378     newCookie->parent = domain;
 379     return newCookie;
 380 }
 381
 382
 383 /* finds a cookie in the domain matching the cookie name */
 384 static cookie *COOKIE_findCookie(cookie_domain *domain, LPCWSTR lpszCookieName)
 385 {
 386     struct list * cursor;
 387     TRACE("(%p, %s)\n", domain, debugstr_w(lpszCookieName));
 388
 389     LIST_FOR_EACH(cursor, &domain->cookie_list)
 390     {
 391         cookie *searchCookie = LIST_ENTRY(cursor, cookie, entry);
 392         BOOL candidate = TRUE;
 393         if (candidate && lpszCookieName)
 394         {
 395             if (candidate && !searchCookie->lpCookieName)
 396                 candidate = FALSE;
 397             if (candidate && strcmpW(lpszCookieName, searchCookie->lpCookieName) != 0)
 398                 candidate = FALSE;
 399         }
 400         if (candidate)
 401             return searchCookie;
 402     }
 403     return NULL;
 404 }
 405
 406 /* removes a cookie from the list, if its the last cookie we also remove the domain */
 407 static void COOKIE_deleteCookie(cookie *deadCookie, BOOL deleteDomain)
 408 {
 409     heap_free(deadCookie->lpCookieName);
 410     heap_free(deadCookie->lpCookieData);
 411     list_remove(&deadCookie->entry);
 412
 413     /* special case: last cookie, lets remove the domain to save memory */
 414     if (list_empty(&deadCookie->parent->cookie_list) && deleteDomain)
 415         COOKIE_deleteDomain(deadCookie->parent);
 416     heap_free(deadCookie);
 417 }
 418
 419 /* allocates a domain and adds it to the end */
 420 static cookie_domain *COOKIE_addDomain(LPCWSTR domain, LPCWSTR path)
 421 {
 422     cookie_domain *newDomain = heap_alloc(sizeof(cookie_domain));
 423
 424     list_init(&newDomain->entry);
 425     list_init(&newDomain->cookie_list);
 426     newDomain->lpCookieDomain = heap_strdupW(domain);
 427     newDomain->lpCookiePath = heap_strdupW(path);
 428
 429     list_add_tail(&domain_list, &newDomain->entry);
 430
 431     TRACE("Adding domain: %p\n", newDomain);
 432     return newDomain;
 433 }
 434
 435 static BOOL COOKIE_crackUrlSimple(LPCWSTR lpszUrl, LPWSTR hostName, int hostNameLen, LPWSTR path, int pathLen)
 436 {
 437     URL_COMPONENTSW UrlComponents;
 438
 439     UrlComponents.lpszExtraInfo = NULL;
 440     UrlComponents.lpszPassword = NULL;
 441     UrlComponents.lpszScheme = NULL;
 442     UrlComponents.lpszUrlPath = path;
 443     UrlComponents.lpszUserName = NULL;
 444     UrlComponents.lpszHostName = hostName;
 445     UrlComponents.dwExtraInfoLength = 0;
 446     UrlComponents.dwPasswordLength = 0;
 447     UrlComponents.dwSchemeLength = 0;
 448     UrlComponents.dwUserNameLength = 0;
 449     UrlComponents.dwHostNameLength = hostNameLen;
 450     UrlComponents.dwUrlPathLength = pathLen;
 451
 452     if (!InternetCrackUrlW(lpszUrl, 0, 0, &UrlComponents)) return FALSE;
 453
 454     /* discard the webpage off the end of the path */
 455     if (UrlComponents.dwUrlPathLength)
 456     {
 457         if (path[UrlComponents.dwUrlPathLength - 1] != '/')
 458         {
 459             WCHAR *ptr;
 460             if ((ptr = strrchrW(path, '/'))) *(++ptr) = 0;
 461             else
 462             {
 463                 path[0] = '/';
 464                 path[1] = 0;
 465             }
 466         }
 467     }
 468     else if (pathLen >= 2)
 469     {
 470         path[0] = '/';
 471         path[1] = 0;
 472     }
 473     return TRUE;
 474 }
 475
 476 /* match a domain. domain must match if the domain is not NULL. path must match if the path is not NULL */
 477 static BOOL COOKIE_matchDomain(LPCWSTR lpszCookieDomain, LPCWSTR lpszCookiePath,
 478                                cookie_domain *searchDomain, BOOL allow_partial)
 479 {
 480     TRACE("searching on domain %p\n", searchDomain);
 481         if (lpszCookieDomain)
 482         {
 483             if (!searchDomain->lpCookieDomain)
 484             return FALSE;
 485
 486             TRACE("comparing domain %s with %s\n",
 487             debugstr_w(lpszCookieDomain),
 488             debugstr_w(searchDomain->lpCookieDomain));
 489
 490         if (allow_partial && !strstrW(lpszCookieDomain, searchDomain->lpCookieDomain))
 491             return FALSE;
 492         else if (!allow_partial && lstrcmpW(lpszCookieDomain, searchDomain->lpCookieDomain) != 0)
 493             return FALSE;
 494         }
 495     if (lpszCookiePath)
 496     {
 497         INT len;
 498         TRACE("comparing paths: %s with %s\n", debugstr_w(lpszCookiePath), debugstr_w(searchDomain->lpCookiePath));
 499         /* paths match at the beginning.  so a path of  /foo would match
 500          * /foobar and /foo/bar
 501          */
 502         if (!searchDomain->lpCookiePath)
 503             return FALSE;
 504         if (allow_partial)
 505         {
 506             len = lstrlenW(searchDomain->lpCookiePath);
 507             if (strncmpiW(searchDomain->lpCookiePath, lpszCookiePath, len)!=0)
 508                 return FALSE;
 509         }
 510         else if (strcmpW(lpszCookiePath, searchDomain->lpCookiePath))
 511             return FALSE;
 512
 513         }
 514         return TRUE;
 515 }
 516
 517 /* remove a domain from the list and delete it */
 518 static void COOKIE_deleteDomain(cookie_domain *deadDomain)
 519 {
 520     struct list * cursor;
 521     while ((cursor = list_tail(&deadDomain->cookie_list)))
 522     {
 523         COOKIE_deleteCookie(LIST_ENTRY(cursor, cookie, entry), FALSE);
 524         list_remove(cursor);
 525     }
 526     heap_free(deadDomain->lpCookieDomain);
 527     heap_free(deadDomain->lpCookiePath);
 528
 529     list_remove(&deadDomain->entry);
 530
 531     heap_free(deadDomain);
 532 }
 533
 534 DWORD get_cookie(const WCHAR *host, const WCHAR *path, WCHAR *cookie_data, DWORD *size)
 535 {
 536     static const WCHAR empty_path[] = { '/',0 };
 537
 538     unsigned cnt = 0, len, name_len, domain_count = 0, cookie_count = 0;
 539     WCHAR *ptr, subpath[INTERNET_MAX_PATH_LENGTH];
 540     const WCHAR *p;
 541     cookie_domain *domain;
 542     FILETIME tm;
 543
 544     GetSystemTimeAsFileTime(&tm);
 545
 546     EnterCriticalSection(&cookie_cs);
 547
 548     len = strlenW(host);
 549     p = host+len;
 550     while(p>host && p[-1]!='.') p--;
 551     while(p != host) {
 552         p--;
 553         while(p>host && p[-1]!='.') p--;
 554         if(p == host) break;
 555
 556         load_persistent_cookie(p, empty_path);
 557     }
 558
 559     len = strlenW(path);
 560     assert(len+1 < INTERNET_MAX_PATH_LENGTH);
 561     memcpy(subpath, path, (len+1)*sizeof(WCHAR));
 562     ptr = subpath+len;
 563     do {
 564         *ptr = 0;
 565         load_persistent_cookie(host, subpath);
 566
 567         ptr--;
 568         while(ptr>subpath && ptr[-1]!='/') ptr--;
 569     }while(ptr != subpath);
 570
 571     ptr = cookie_data;
 572     LIST_FOR_EACH_ENTRY(domain, &domain_list, cookie_domain, entry) {
 573         struct list *cursor, *cursor2;
 574
 575         if(!COOKIE_matchDomain(host, path, domain, TRUE))
 576             continue;
 577
 578         domain_count++;
 579         TRACE("found domain %p\n", domain);
 580
 581         LIST_FOR_EACH_SAFE(cursor, cursor2, &domain->cookie_list) {
 582             cookie *cookie_iter = LIST_ENTRY(cursor, cookie, entry);
 583
 584             /* check for expiry */
 585             if((cookie_iter->expiry.dwLowDateTime != 0 || cookie_iter->expiry.dwHighDateTime != 0)
 586                 && CompareFileTime(&tm, &cookie_iter->expiry)  > 0)
 587             {
 588                 TRACE("Found expired cookie. deleting\n");
 589                 COOKIE_deleteCookie(cookie_iter, FALSE);
 590                 continue;
 591             }
 592
 593             if (cookie_count)
 594                 cnt += 2; /* '; ' */
 595             cnt += name_len = strlenW(cookie_iter->lpCookieName);
 596             if ((len = strlenW(cookie_iter->lpCookieData))) {
 597                 cnt += 1; /* = */
 598                 cnt += len;
 599             }
 600
 601             if(ptr) {
 602                 if(*size > cnt) {
 603                     if(cookie_count) {
 604                         *ptr++ = ';';
 605                         *ptr++ = ' ';
 606                     }
 607
 608                     memcpy(ptr, cookie_iter->lpCookieName, name_len*sizeof(WCHAR));
 609                     ptr += name_len;
 610
 611                     if(len) {
 612                         *ptr++ = '=';
 613                         memcpy(ptr, cookie_iter->lpCookieData, len*sizeof(WCHAR));
 614                         ptr += len;
 615                     }
 616
 617                     assert(cookie_data+cnt == ptr);
 618                     TRACE("Cookie: %s\n", debugstr_wn(cookie_data, cnt));
 619                 }else {
 620                     /* Stop writing data, just compute the size */
 621                     ptr = NULL;
 622                 }
 623             }
 624
 625             cookie_count++;
 626         }
 627     }
 628
 629     LeaveCriticalSection(&cookie_cs);
 630
 631     if(ptr)
 632         *ptr = 0;
 633
 634     if (!cnt) {
 635         TRACE("no cookies found for %s\n", debugstr_w(host));
 636         return ERROR_NO_MORE_ITEMS;
 637     }
 638
 639     if(!cookie_data || !ptr) {
 640         *size = (cnt + 1) * sizeof(WCHAR);
 641         TRACE("returning %u\n", *size);
 642         return cookie_data ? ERROR_INSUFFICIENT_BUFFER : ERROR_SUCCESS;
 643     }
 644
 645     *size = cnt + 1;
 646
 647     TRACE("Returning %u (from %u domains): %s\n", cnt, domain_count, debugstr_w(cookie_data));
 648     return ERROR_SUCCESS;
 649 }
 650
 651 /***********************************************************************
 652  *           InternetGetCookieW (WININET.@)
 653  *
 654  * Retrieve cookie from the specified url
 655  *
 656  *  It should be noted that on windows the lpszCookieName parameter is "not implemented".
 657  *    So it won't be implemented here.
 658  *
 659  * RETURNS
 660  *    TRUE  on success
 661  *    FALSE on failure
 662  *
 663  */
 664 BOOL WINAPI InternetGetCookieW(LPCWSTR lpszUrl, LPCWSTR lpszCookieName,
 665     LPWSTR lpCookieData, LPDWORD lpdwSize)
 666 {
 667     WCHAR host[INTERNET_MAX_HOST_NAME_LENGTH], path[INTERNET_MAX_PATH_LENGTH];
 668     DWORD res;
 669     BOOL ret;
 670
 671     TRACE("(%s, %s, %p, %p)\n", debugstr_w(lpszUrl),debugstr_w(lpszCookieName), lpCookieData, lpdwSize);
 672
 673     if (!lpszUrl)
 674     {
 675         SetLastError(ERROR_INVALID_PARAMETER);
 676         return FALSE;
 677     }
 678
 679     host[0] = 0;
 680     ret = COOKIE_crackUrlSimple(lpszUrl, host, sizeof(host)/sizeof(host[0]), path, sizeof(path)/sizeof(path[0]));
 681     if (!ret || !host[0]) {
 682         SetLastError(ERROR_INVALID_PARAMETER);
 683         return FALSE;
 684     }
 685
 686     res = get_cookie(host, path, lpCookieData, lpdwSize);
 687     if(res != ERROR_SUCCESS)
 688         SetLastError(res);
 689     return res == ERROR_SUCCESS;
 690 }
 691
 692
 693 /***********************************************************************
 694  *           InternetGetCookieA (WININET.@)
 695  *
 696  * Retrieve cookie from the specified url
 697  *
 698  * RETURNS
 699  *    TRUE  on success
 700  *    FALSE on failure
 701  *
 702  */
 703 BOOL WINAPI InternetGetCookieA(LPCSTR lpszUrl, LPCSTR lpszCookieName,
 704     LPSTR lpCookieData, LPDWORD lpdwSize)
 705 {
 706     WCHAR *url, *name;
 707     DWORD len, size;
 708     BOOL r;
 709
 710     TRACE("(%s %s %p %p(%u))\n", debugstr_a(lpszUrl), debugstr_a(lpszCookieName),
 711           lpCookieData, lpdwSize, lpdwSize ? *lpdwSize : 0);
 712
 713     url = heap_strdupAtoW(lpszUrl);
 714     name = heap_strdupAtoW(lpszCookieName);
 715
 716     r = InternetGetCookieW( url, name, NULL, &len );
 717     if( r )
 718     {
 719         WCHAR *szCookieData;
 720
 721         szCookieData = heap_alloc(len * sizeof(WCHAR));
 722         if( !szCookieData )
 723         {
 724             r = FALSE;
 725         }
 726         else
 727         {
 728             r = InternetGetCookieW( url, name, szCookieData, &len );
 729
 730             if(r) {
 731                 size = WideCharToMultiByte( CP_ACP, 0, szCookieData, len, NULL, 0, NULL, NULL);
 732                 if(lpCookieData) {
 733                     if(*lpdwSize >= size) {
 734                         WideCharToMultiByte( CP_ACP, 0, szCookieData, len, lpCookieData, *lpdwSize, NULL, NULL);
 735                     }else {
 736                         SetLastError(ERROR_INSUFFICIENT_BUFFER);
 737                         r = FALSE;
 738                     }
 739                 }
 740                 *lpdwSize = size;
 741             }
 742
 743             heap_free( szCookieData );
 744         }
 745     }
 746     heap_free( name );
 747     heap_free( url );
 748     return r;
 749 }
 750
 751
 752 /***********************************************************************
 753  *           IsDomainLegalCookieDomainW (WININET.@)
 754  */
 755 BOOL WINAPI IsDomainLegalCookieDomainW( LPCWSTR s1, LPCWSTR s2 )
 756 {
 757     DWORD s1_len, s2_len;
 758
 759     FIXME("(%s, %s) semi-stub\n", debugstr_w(s1), debugstr_w(s2));
 760
 761     if (!s1 || !s2)
 762     {
 763         SetLastError(ERROR_INVALID_PARAMETER);
 764         return FALSE;
 765     }
 766     if (s1[0] == '.' || !s1[0] || s2[0] == '.' || !s2[0])
 767     {
 768         SetLastError(ERROR_INVALID_NAME);
 769         return FALSE;
 770     }
 771     if(!strchrW(s1, '.') || !strchrW(s2, '.'))
 772         return FALSE;
 773
 774     s1_len = strlenW(s1);
 775     s2_len = strlenW(s2);
 776     if (s1_len > s2_len)
 777         return FALSE;
 778
 779     if (strncmpiW(s1, s2+s2_len-s1_len, s1_len) || (s2_len>s1_len && s2[s2_len-s1_len-1]!='.'))
 780     {
 781         SetLastError(ERROR_INVALID_PARAMETER);
 782         return FALSE;
 783     }
 784
 785     return TRUE;
 786 }
 787
 788 BOOL set_cookie(LPCWSTR domain, LPCWSTR path, LPCWSTR cookie_name, LPCWSTR cookie_data)
 789 {
 790     cookie_domain *thisCookieDomain = NULL;
 791     cookie *thisCookie;
 792     struct list *cursor;
 793     LPWSTR data, value;
 794     WCHAR *ptr;
 795     FILETIME expiry, create;
 796     BOOL expired = FALSE, update_persistent = FALSE;
 797     DWORD flags = 0;
 798
 799     value = data = heap_strdupW(cookie_data);
 800     if (!data)
 801     {
 802         ERR("could not allocate the cookie data buffer\n");
 803         return FALSE;
 804     }
 805
 806     memset(&expiry,0,sizeof(expiry));
 807     GetSystemTimeAsFileTime(&create);
 808
 809     /* lots of information can be parsed out of the cookie value */
 810
 811     ptr = data;
 812     for (;;)
 813     {
 814         static const WCHAR szDomain[] = {'d','o','m','a','i','n','=',0};
 815         static const WCHAR szPath[] = {'p','a','t','h','=',0};
 816         static const WCHAR szExpires[] = {'e','x','p','i','r','e','s','=',0};
 817         static const WCHAR szSecure[] = {'s','e','c','u','r','e',0};
 818         static const WCHAR szHttpOnly[] = {'h','t','t','p','o','n','l','y',0};
 819
 820         if (!(ptr = strchrW(ptr,';'))) break;
 821         *ptr++ = 0;
 822
 823         if (value != data) heap_free(value);
 824         value = heap_alloc((ptr - data) * sizeof(WCHAR));
 825         if (value == NULL)
 826         {
 827             heap_free(data);
 828             ERR("could not allocate the cookie value buffer\n");
 829             return FALSE;
 830         }
 831         strcpyW(value, data);
 832
 833         while (*ptr == ' ') ptr++; /* whitespace */
 834
 835         if (strncmpiW(ptr, szDomain, 7) == 0)
 836         {
 837             WCHAR *end_ptr;
 838
 839             ptr += sizeof(szDomain)/sizeof(szDomain[0])-1;
 840             if(*ptr == '.')
 841                 ptr++;
 842             end_ptr = strchrW(ptr, ';');
 843             if(end_ptr)
 844                 *end_ptr = 0;
 845
 846             if(!IsDomainLegalCookieDomainW(ptr, domain))
 847             {
 848                 if(value != data)
 849                     heap_free(value);
 850                 heap_free(data);
 851                 return FALSE;
 852             }
 853
 854             if(end_ptr)
 855                 *end_ptr = ';';
 856
 857             domain = ptr;
 858             TRACE("Parsing new domain %s\n",debugstr_w(domain));
 859         }
 860         else if (strncmpiW(ptr, szPath, 5) == 0)
 861         {
 862             ptr+=strlenW(szPath);
 863             path = ptr;
 864             TRACE("Parsing new path %s\n",debugstr_w(path));
 865         }
 866         else if (strncmpiW(ptr, szExpires, 8) == 0)
 867         {
 868             SYSTEMTIME st;
 869             ptr+=strlenW(szExpires);
 870             if (InternetTimeToSystemTimeW(ptr, &st, 0))
 871             {
 872                 SystemTimeToFileTime(&st, &expiry);
 873
 874                 if (CompareFileTime(&create,&expiry) > 0)
 875                 {
 876                     TRACE("Cookie already expired.\n");
 877                     expired = TRUE;
 878                 }
 879             }
 880         }
 881         else if (strncmpiW(ptr, szSecure, 6) == 0)
 882         {
 883             FIXME("secure not handled (%s)\n",debugstr_w(ptr));
 884             ptr += strlenW(szSecure);
 885         }
 886         else if (strncmpiW(ptr, szHttpOnly, 8) == 0)
 887         {
 888             FIXME("httponly not handled (%s)\n",debugstr_w(ptr));
 889             ptr += strlenW(szHttpOnly);
 890         }
 891         else if (*ptr)
 892         {
 893             FIXME("Unknown additional option %s\n",debugstr_w(ptr));
 894             break;
 895         }
 896     }
 897
 898     EnterCriticalSection(&cookie_cs);
 899
 900     load_persistent_cookie(domain, path);
 901
 902     LIST_FOR_EACH(cursor, &domain_list)
 903     {
 904         thisCookieDomain = LIST_ENTRY(cursor, cookie_domain, entry);
 905         if (COOKIE_matchDomain(domain, path, thisCookieDomain, FALSE))
 906             break;
 907         thisCookieDomain = NULL;
 908     }
 909
 910     if (!thisCookieDomain)
 911     {
 912         if (!expired)
 913             thisCookieDomain = COOKIE_addDomain(domain, path);
 914         else
 915         {
 916             heap_free(data);
 917             if (value != data) heap_free(value);
 918             LeaveCriticalSection(&cookie_cs);
 919             return TRUE;
 920         }
 921     }
 922
 923     if(!expiry.dwLowDateTime && !expiry.dwHighDateTime)
 924         flags |= INTERNET_COOKIE_IS_SESSION;
 925     else
 926         update_persistent = TRUE;
 927
 928     if ((thisCookie = COOKIE_findCookie(thisCookieDomain, cookie_name)))
 929     {
 930         if (!(thisCookie->flags & INTERNET_COOKIE_IS_SESSION))
 931             update_persistent = TRUE;
 932         COOKIE_deleteCookie(thisCookie, FALSE);
 933     }
 934
 935     TRACE("setting cookie %s=%s for domain %s path %s\n", debugstr_w(cookie_name),
 936           debugstr_w(value), debugstr_w(thisCookieDomain->lpCookieDomain),debugstr_w(thisCookieDomain->lpCookiePath));
 937
 938     if (!expired && !COOKIE_addCookie(thisCookieDomain, cookie_name, value, expiry, create, flags))
 939     {
 940         heap_free(data);
 941         if (value != data) heap_free(value);
 942         LeaveCriticalSection(&cookie_cs);
 943         return FALSE;
 944     }
 945     heap_free(data);
 946     if (value != data) heap_free(value);
 947
 948     if (!update_persistent || save_persistent_cookie(thisCookieDomain))
 949     {
 950         LeaveCriticalSection(&cookie_cs);
 951         return TRUE;
 952     }
 953     LeaveCriticalSection(&cookie_cs);
 954     return FALSE;
 955 }
 956
 957 /***********************************************************************
 958  *           InternetSetCookieW (WININET.@)
 959  *
 960  * Sets cookie for the specified url
 961  *
 962  * RETURNS
 963  *    TRUE  on success
 964  *    FALSE on failure
 965  *
 966  */
 967 BOOL WINAPI InternetSetCookieW(LPCWSTR lpszUrl, LPCWSTR lpszCookieName,
 968     LPCWSTR lpCookieData)
 969 {
 970     BOOL ret;
 971     WCHAR hostName[INTERNET_MAX_HOST_NAME_LENGTH], path[INTERNET_MAX_PATH_LENGTH];
 972
 973     TRACE("(%s,%s,%s)\n", debugstr_w(lpszUrl),
 974         debugstr_w(lpszCookieName), debugstr_w(lpCookieData));
 975
 976     if (!lpszUrl || !lpCookieData)
 977     {
 978         SetLastError(ERROR_INVALID_PARAMETER);
 979         return FALSE;
 980     }
 981
 982     hostName[0] = 0;
 983     ret = COOKIE_crackUrlSimple(lpszUrl, hostName, sizeof(hostName)/sizeof(hostName[0]), path, sizeof(path)/sizeof(path[0]));
 984     if (!ret || !hostName[0]) return FALSE;
 985
 986     if (!lpszCookieName)
 987     {
 988         WCHAR *cookie, *data;
 989
 990         cookie = heap_strdupW(lpCookieData);
 991         if (!cookie)
 992         {
 993             SetLastError(ERROR_OUTOFMEMORY);
 994             return FALSE;
 995         }
 996
 997         /* some apps (or is it us??) try to add a cookie with no cookie name, but
 998          * the cookie data in the form of name[=data].
 999          */
1000         if (!(data = strchrW(cookie, '='))) data = cookie + strlenW(cookie);
1001         else *data++ = 0;
1002
1003         ret = set_cookie(hostName, path, cookie, data);
1004
1005         heap_free(cookie);
1006         return ret;
1007     }
1008     return set_cookie(hostName, path, lpszCookieName, lpCookieData);
1009 }
1010
1011
1012 /***********************************************************************
1013  *           InternetSetCookieA (WININET.@)
1014  *
1015  * Sets cookie for the specified url
1016  *
1017  * RETURNS
1018  *    TRUE  on success
1019  *    FALSE on failure
1020  *
1021  */
1022 BOOL WINAPI InternetSetCookieA(LPCSTR lpszUrl, LPCSTR lpszCookieName,
1023     LPCSTR lpCookieData)
1024 {
1025     LPWSTR data, url, name;
1026     BOOL r;
1027
1028     TRACE("(%s,%s,%s)\n", debugstr_a(lpszUrl),
1029         debugstr_a(lpszCookieName), debugstr_a(lpCookieData));
1030
1031     url = heap_strdupAtoW(lpszUrl);
1032     name = heap_strdupAtoW(lpszCookieName);
1033     data = heap_strdupAtoW(lpCookieData);
1034
1035     r = InternetSetCookieW( url, name, data );
1036
1037     heap_free( data );
1038     heap_free( name );
1039     heap_free( url );
1040     return r;
1041 }
1042
1043 /***********************************************************************
1044  *           InternetSetCookieExA (WININET.@)
1045  *
1046  * See InternetSetCookieExW.
1047  */
1048 DWORD WINAPI InternetSetCookieExA( LPCSTR lpszURL, LPCSTR lpszCookieName, LPCSTR lpszCookieData,
1049                                    DWORD dwFlags, DWORD_PTR dwReserved)
1050 {
1051     TRACE("(%s, %s, %s, 0x%08x, 0x%08lx)\n",
1052           debugstr_a(lpszURL), debugstr_a(lpszCookieName), debugstr_a(lpszCookieData),
1053           dwFlags, dwReserved);
1054
1055     if (dwFlags) FIXME("flags 0x%08x not supported\n", dwFlags);
1056     return InternetSetCookieA(lpszURL, lpszCookieName, lpszCookieData);
1057 }
1058
1059 /***********************************************************************
1060  *           InternetSetCookieExW (WININET.@)
1061  *
1062  * Sets a cookie for the specified URL.
1063  *
1064  * RETURNS
1065  *    TRUE  on success
1066  *    FALSE on failure
1067  *
1068  */
1069 DWORD WINAPI InternetSetCookieExW( LPCWSTR lpszURL, LPCWSTR lpszCookieName, LPCWSTR lpszCookieData,
1070                                    DWORD dwFlags, DWORD_PTR dwReserved)
1071 {
1072     TRACE("(%s, %s, %s, 0x%08x, 0x%08lx)\n",
1073           debugstr_w(lpszURL), debugstr_w(lpszCookieName), debugstr_w(lpszCookieData),
1074           dwFlags, dwReserved);
1075
1076     if (dwFlags) FIXME("flags 0x%08x not supported\n", dwFlags);
1077     return InternetSetCookieW(lpszURL, lpszCookieName, lpszCookieData);
1078 }
1079
1080 /***********************************************************************
1081  *           InternetGetCookieExA (WININET.@)
1082  *
1083  * See InternetGetCookieExW.
1084  */
1085 BOOL WINAPI InternetGetCookieExA( LPCSTR pchURL, LPCSTR pchCookieName, LPSTR pchCookieData,
1086                                   LPDWORD pcchCookieData, DWORD dwFlags, LPVOID lpReserved)
1087 {
1088     TRACE("(%s, %s, %s, %p, 0x%08x, %p)\n",
1089           debugstr_a(pchURL), debugstr_a(pchCookieName), debugstr_a(pchCookieData),
1090           pcchCookieData, dwFlags, lpReserved);
1091
1092     if (dwFlags) FIXME("flags 0x%08x not supported\n", dwFlags);
1093     return InternetGetCookieA(pchURL, pchCookieName, pchCookieData, pcchCookieData);
1094 }
1095
1096 /***********************************************************************
1097  *           InternetGetCookieExW (WININET.@)
1098  *
1099  * Retrieve cookie for the specified URL.
1100  *
1101  * RETURNS
1102  *    TRUE  on success
1103  *    FALSE on failure
1104  *
1105  */
1106 BOOL WINAPI InternetGetCookieExW( LPCWSTR pchURL, LPCWSTR pchCookieName, LPWSTR pchCookieData,
1107                                   LPDWORD pcchCookieData, DWORD dwFlags, LPVOID lpReserved)
1108 {
1109     TRACE("(%s, %s, %s, %p, 0x%08x, %p)\n",
1110           debugstr_w(pchURL), debugstr_w(pchCookieName), debugstr_w(pchCookieData),
1111           pcchCookieData, dwFlags, lpReserved);
1112
1113     if (dwFlags) FIXME("flags 0x%08x not supported\n", dwFlags);
1114     return InternetGetCookieW(pchURL, pchCookieName, pchCookieData, pcchCookieData);
1115 }
1116
1117 /***********************************************************************
1118  *           InternetClearAllPerSiteCookieDecisions (WININET.@)
1119  *
1120  * Clears all per-site decisions about cookies.
1121  *
1122  * RETURNS
1123  *    TRUE  on success
1124  *    FALSE on failure
1125  *
1126  */
1127 BOOL WINAPI InternetClearAllPerSiteCookieDecisions( VOID )
1128 {
1129     FIXME("stub\n");
1130     return TRUE;
1131 }
1132
1133 /***********************************************************************
1134  *           InternetEnumPerSiteCookieDecisionA (WININET.@)
1135  *
1136  * See InternetEnumPerSiteCookieDecisionW.
1137  */
1138 BOOL WINAPI InternetEnumPerSiteCookieDecisionA( LPSTR pszSiteName, ULONG *pcSiteNameSize,
1139                                                 ULONG *pdwDecision, ULONG dwIndex )
1140 {
1141     FIXME("(%s, %p, %p, 0x%08x) stub\n",
1142           debugstr_a(pszSiteName), pcSiteNameSize, pdwDecision, dwIndex);
1143     return FALSE;
1144 }
1145
1146 /***********************************************************************
1147  *           InternetEnumPerSiteCookieDecisionW (WININET.@)
1148  *
1149  * Enumerates all per-site decisions about cookies.
1150  *
1151  * RETURNS
1152  *    TRUE  on success
1153  *    FALSE on failure
1154  *
1155  */
1156 BOOL WINAPI InternetEnumPerSiteCookieDecisionW( LPWSTR pszSiteName, ULONG *pcSiteNameSize,
1157                                                 ULONG *pdwDecision, ULONG dwIndex )
1158 {
1159     FIXME("(%s, %p, %p, 0x%08x) stub\n",
1160           debugstr_w(pszSiteName), pcSiteNameSize, pdwDecision, dwIndex);
1161     return FALSE;
1162 }
1163
1164 /***********************************************************************
1165  *           InternetGetPerSiteCookieDecisionA (WININET.@)
1166  */
1167 BOOL WINAPI InternetGetPerSiteCookieDecisionA( LPCSTR pwchHostName, ULONG *pResult )
1168 {
1169     FIXME("(%s, %p) stub\n", debugstr_a(pwchHostName), pResult);
1170     return FALSE;
1171 }
1172
1173 /***********************************************************************
1174  *           InternetGetPerSiteCookieDecisionW (WININET.@)
1175  */
1176 BOOL WINAPI InternetGetPerSiteCookieDecisionW( LPCWSTR pwchHostName, ULONG *pResult )
1177 {
1178     FIXME("(%s, %p) stub\n", debugstr_w(pwchHostName), pResult);
1179     return FALSE;
1180 }
1181
1182 /***********************************************************************
1183  *           InternetSetPerSiteCookieDecisionA (WININET.@)
1184  */
1185 BOOL WINAPI InternetSetPerSiteCookieDecisionA( LPCSTR pchHostName, DWORD dwDecision )
1186 {
1187     FIXME("(%s, 0x%08x) stub\n", debugstr_a(pchHostName), dwDecision);
1188     return FALSE;
1189 }
1190
1191 /***********************************************************************
1192  *           InternetSetPerSiteCookieDecisionW (WININET.@)
1193  */
1194 BOOL WINAPI InternetSetPerSiteCookieDecisionW( LPCWSTR pchHostName, DWORD dwDecision )
1195 {
1196     FIXME("(%s, 0x%08x) stub\n", debugstr_w(pchHostName), dwDecision);
1197     return FALSE;
1198 }
1199
1200 void free_cookie(void)
1201 {
1202     DeleteCriticalSection(&cookie_cs);
1203 }