• Home
  • History
  • Annotate
  • Raw
  • Download
  • only in /asuswrt-rt-n18u-9.0.0.4.380.2695/release/src/router/miniupnpd/

Lines Matching refs:req_buf

188 		if(h->req_buf)
189 free(h->req_buf);
198 * sequence has been found in h->req_buf */
206 if((h->req_buf == NULL) || (h->req_contentoff <= 0))
208 line = h->req_buf;
209 while(line < (h->req_buf + h->req_contentoff))
245 h->req_HostOff = p - h->req_buf;
261 h->req_soapActionOff = p - h->req_buf;
312 h->req_CallbackOff = p - h->req_buf;
323 h->req_SIDOff = p - h->req_buf;
351 h->req_NTOff = p - h->req_buf;
479 h->req_soapActionLen, h->req_buf + h->req_soapActionOff);
481 h->req_buf + h->req_soapActionOff,
535 if(memcmp(h->req_buf + h->req_CallbackOff, "<http://", 8) != 0) {
536 p = h->req_buf + h->req_CallbackOff + 1;
541 p = h->req_buf + h->req_CallbackOff + 8;
546 && p < (h->req_buf + h->req_CallbackOff + h->req_CallbackLen))
551 && p < (h->req_buf + h->req_CallbackOff + h->req_CallbackLen))
587 while(p < h->req_buf + h->req_CallbackOff + h->req_CallbackLen && *p != '>')
590 h->req_CallbackLen = (int)(p - h->req_buf - h->req_CallbackOff);
593 while(p < h->req_buf + h->req_CallbackOff + h->req_CallbackLen && *p != '>')
596 while(p < h->req_buf + h->req_CallbackOff + h->req_CallbackLen && *p != '<')
599 h->req_CallbackLen -= (int)(p - h->req_buf - h->req_CallbackOff);
600 h->req_CallbackOff = (int)(p - h->req_buf);
610 h->req_CallbackLen, h->req_buf + h->req_CallbackOff,
612 syslog(LOG_DEBUG, "SID '%.*s'", h->req_SIDLen, h->req_buf + h->req_SIDOff);
634 0 != memcmp("upnp:event", h->req_buf + h->req_NTOff, 10)) {
636 h->req_NTLen, h->req_buf + h->req_NTOff);
641 sid = upnpevents_addSubscriber(path, h->req_buf + h->req_CallbackOff,
652 h->req_CallbackLen, h->req_buf + h->req_CallbackOff);
668 if(renewSubscription(h->req_buf + h->req_SIDOff, h->req_SIDLen,
684 syslog(LOG_DEBUG, "SID '%.*s'", h->req_SIDLen, h->req_buf + h->req_SIDOff);
695 if(upnpevents_removeSubscriber(h->req_buf + h->req_SIDOff, h->req_SIDLen) < 0) {
706 * so it is guaranteed that h->req_buf contains the \r\n\r\n
737 p = h->req_buf;
741 * end of the buffer, because h->req_buf is guaranteed to contain
761 syslog(LOG_DEBUG, "Host: %.*s", h->req_HostLen, h->req_buf + h->req_HostOff);
762 p = h->req_buf + h->req_HostOff;
766 while(p < h->req_buf + h->req_HostOff + h->req_HostLen) {
772 syslog(LOG_NOTICE, "DNS rebinding attack suspected (Host: %.*s)", h->req_HostLen, h->req_buf + h->req_HostOff);
781 syslog(LOG_NOTICE, "DNS rebinding attack suspected (Host: %.*s)", h->req_HostLen, h->req_buf + h->req_HostOff);
912 h_tmp = (char *)realloc(h->req_buf, n + h->req_buflen + 1);
915 syslog(LOG_WARNING, "Unable to allocate new memory for h->req_buf)");
920 h->req_buf = h_tmp;
921 memcpy(h->req_buf + h->req_buflen, buf, n);
923 h->req_buf[h->req_buflen] = '\0';
926 endheaders = findendheaders(h->req_buf, h->req_buflen);
929 /* at this point, the request buffer (h->req_buf)
931 h->req_contentoff = endheaders - h->req_buf + 4;
979 void * tmp = realloc(h->req_buf, n + h->req_buflen);
987 h->req_buf = tmp;
988 memcpy(h->req_buf + h->req_buflen, buf, n);