HEX
Server: nginx/1.18.0
System: Linux mail.dakarash.co.id 5.15.0-164-generic #174-Ubuntu SMP Fri Nov 14 20:25:16 UTC 2025 x86_64
User: www-data (33)
PHP: 8.1.2-1ubuntu2.23
Disabled: NONE
Upload Files
File: /home/django/libpff/libfmapi/libfmapi_lzfu.c
/*
 * LZFu (de)compression functions
 *
 * Copyright (C) 2009-2024, Joachim Metz <joachim.metz@gmail.com>
 *
 * Refer to AUTHORS for acknowledgements.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

#include <common.h>
#include <byte_stream.h>
#include <memory.h>
#include <types.h>

#include "libfmapi_checksum.h"
#include "libfmapi_libcerror.h"
#include "libfmapi_libcnotify.h"
#include "libfmapi_lzfu.h"

#define LIBFMAPI_LZFU_SIGNATURE_COMPRESSED        0x75465a4c
#define LIBFMAPI_LZFU_SIGNATURE_UNCOMPRESSED      0x414c454d

const char *libfmapi_lzfu_rtf_dictionary = \
	"{\\rtf1\\ansi\\mac\\deff0\\deftab720"
	"{\\fonttbl;}"
	"{\\f0\\fnil \\froman \\fswiss \\fmodern \\fscript \\fdecor MS Sans SerifSymbolArialTimes New RomanCourier"
	"{\\colortbl\\red0\\green0\\blue0\r\n\\par \\pard\\plain\\f0\\fs20\\b\\i\\u\\tab\\tx";

/* Determines the uncompressed data size from the LZFu header in the compressed data
 * Returns 1 on success or -1 on error
 */
int libfmapi_lzfu_get_uncompressed_data_size(
     const uint8_t *compressed_data,
     size_t compressed_data_size,
     size_t *uncompressed_data_size,
     libcerror_error_t **error )
{
	libfmapi_lzfu_header_t lzfu_header;

	static char *function              = "libfmapi_lzfu_get_uncompressed_data_size";
	size_t compressed_data_offset      = 0;

#if defined( HAVE_DEBUG_OUTPUT )
	uint8_t lz_buffer[ 4096 ];

	const uint8_t *lzfu_reference_data = NULL;
	size_t uncompressed_data_offset    = 0;
	uint16_t lz_buffer_iterator        = 0;
	uint16_t reference_iterator        = 0;
	uint16_t reference_offset          = 0;
	uint16_t reference_size            = 0;
	uint8_t flag_byte                  = 0;
	uint8_t flag_byte_bit_mask         = 0;
#endif

	if( compressed_data == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,
		 "%s: invalid compressed data.",
		 function );

		return( -1 );
	}
	if( ( compressed_data_size < sizeof( libfmapi_lzfu_header_t ) )
	 || ( compressed_data_size > (size_t) SSIZE_MAX ) )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_VALUE_OUT_OF_BOUNDS,
		 "%s: invalid compressed data size value out of bounds.",
		 function );

		return( -1 );
	}
	if( uncompressed_data_size == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,
		 "%s: invalid uncompressed data size.",
		 function );

		return( -1 );
	}
	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.compressed_data_size );

	compressed_data_offset += 4;

	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.uncompressed_data_size );

	compressed_data_offset += 4;

	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.signature );

	compressed_data_offset += 8;

	if( ( lzfu_header.signature != LIBFMAPI_LZFU_SIGNATURE_COMPRESSED )
	 && ( lzfu_header.signature != LIBFMAPI_LZFU_SIGNATURE_UNCOMPRESSED ) )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_RUNTIME,
		 LIBCERROR_RUNTIME_ERROR_UNSUPPORTED_VALUE,
		 "%s: unsupported compression signature: 0x%08" PRIx32 ".",
		 function,
		 lzfu_header.signature );

		return( -1 );
	}
	/* The compressed data size includes 12 bytes of the header
	 */
	if( ( lzfu_header.compressed_data_size < 12 )
	 || ( (size_t) ( lzfu_header.compressed_data_size - 12 ) != ( compressed_data_size - sizeof( libfmapi_lzfu_header_t ) ) ) )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_RUNTIME,
		 LIBCERROR_RUNTIME_ERROR_VALUE_OUT_OF_BOUNDS,
		 "%s: mismatch in compressed data size (%" PRIu32 " != %" PRIzd ").",
		 function,
		 lzfu_header.compressed_data_size,
		 compressed_data_size );

		return( -1 );
	}
	lzfu_header.compressed_data_size -= 12;

#if defined( HAVE_DEBUG_OUTPUT )
	if( libcnotify_verbose != 0 )
	{
		if( memory_copy(
		     lz_buffer,
		     libfmapi_lzfu_rtf_dictionary,
		     207 ) == NULL )
		{
			libcerror_error_set(
			 error,
			 LIBCERROR_ERROR_DOMAIN_MEMORY,
			 LIBCERROR_MEMORY_ERROR_COPY_FAILED,
			 "%s: unable to initialize lz buffer.",
			 function );

			return( -1 );
		}
		lz_buffer_iterator = 207;

		if( memory_set(
		     &( lz_buffer[ lz_buffer_iterator ] ),
		     0,
		     4096 - lz_buffer_iterator ) == NULL )
		{
			libcerror_error_set(
			 error,
			 LIBCERROR_ERROR_DOMAIN_MEMORY,
			 LIBCERROR_MEMORY_ERROR_SET_FAILED,
			 "%s: unable to clear lz buffer.",
			 function );

			return( -1 );
		}
		while( compressed_data_offset < compressed_data_size )
		{
			flag_byte = compressed_data[ compressed_data_offset++ ];

			/* Check every bit in the chunk flag byte from LSB to MSB
			 */
			for( flag_byte_bit_mask = 0x01;
			     flag_byte_bit_mask != 0x00;
			     flag_byte_bit_mask <<= 1 )
			{
				if( compressed_data_offset == compressed_data_size )
				{
					break;
				}
				/* Check if the byte value is a literal or a reference
				 */
				if( ( flag_byte & flag_byte_bit_mask ) == 0 )
				{
					lz_buffer[ lz_buffer_iterator++ ] = compressed_data[ compressed_data_offset ];

					compressed_data_offset++;
					uncompressed_data_offset++;

					/* Make sure the lz buffer iterator wraps around
					 */
					lz_buffer_iterator %= 4096;

					lz_buffer[ lz_buffer_iterator ] = 0;
				}
				else
				{
					lzfu_reference_data = &( compressed_data[ compressed_data_offset ] );

					compressed_data_offset += 2;

					byte_stream_copy_to_uint16_big_endian(
					 lzfu_reference_data,
					 reference_offset );

					reference_size     = ( reference_offset & 0x000f ) + 2;
					reference_offset >>= 4;

					for( reference_iterator = 0; reference_iterator < reference_size; reference_iterator++ )
					{
						lz_buffer[ lz_buffer_iterator++ ] = lz_buffer[ reference_offset ];

						uncompressed_data_offset++;
						reference_offset++;

						/* Make sure the lz buffer iterator and reference offset wrap around
						 */
						lz_buffer_iterator %= 4096;
						reference_offset   %= 4096;

						lz_buffer[ lz_buffer_iterator ] = 0;
					}
				}
			}
		}
		if( (size_t) ( lzfu_header.uncompressed_data_size + 2 ) != uncompressed_data_offset )
		{
			libcnotify_printf(
			 "%s: mismatch in uncompressed data size (in header: %" PRIu32 " != required: %" PRIzd ").\n",
			 function,
			 lzfu_header.uncompressed_data_size + 2,
			 uncompressed_data_offset );
		}
	}
#endif /* defined( HAVE_DEBUG_OUTPUT ) */

	/* Compensate for the 2 trailing zero bytes
	 */
	*uncompressed_data_size = lzfu_header.uncompressed_data_size + 2;

	return( 1 );
}

/* Decompresses data using LZFu compression
 * Returns 1 on success or -1 on error
 */
int libfmapi_lzfu_decompress(
     const uint8_t *compressed_data,
     size_t compressed_data_size,
     uint8_t *uncompressed_data,
     size_t *uncompressed_data_size,
     libcerror_error_t **error )
{
	libfmapi_lzfu_header_t lzfu_header;

	uint8_t lz_buffer[ 4096 ];

	const uint8_t *lzfu_reference_data = NULL;
	static char *function              = "libfmapi_lzfu_decompress";
	size_t compressed_data_offset      = 0;
	size_t safe_uncompressed_data_size = 0;
	size_t uncompressed_data_offset    = 0;
	uint32_t calculated_checksum       = 0;
	uint16_t lz_buffer_iterator        = 0;
	uint16_t reference_iterator        = 0;
	uint16_t reference_offset          = 0;
	uint16_t reference_size            = 0;
	uint8_t flag_byte                  = 0;
	uint8_t flag_byte_bit_mask         = 0;

	if( compressed_data == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,
		 "%s: invalid compressed data.",
		 function );

		return( -1 );
	}
	if( ( compressed_data_size < sizeof( libfmapi_lzfu_header_t ) )
	 || ( compressed_data_size > (size_t) SSIZE_MAX ) )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_VALUE_OUT_OF_BOUNDS,
		 "%s: invalid compressed data size value out of bounds.",
		 function );

		return( -1 );
	}
	if( uncompressed_data == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,
		 "%s: invalid uncompressed data.",
		 function );

		return( -1 );
	}
	if( uncompressed_data_size == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,
		 "%s: invalid uncompressed data size.",
		 function );

		return( -1 );
	}
	safe_uncompressed_data_size = *uncompressed_data_size;

#if defined( HAVE_DEBUG_OUTPUT )
	if( libcnotify_verbose != 0 )
	{
		libcnotify_printf(
		 "%s: LZFu compressed data:\n",
		 function );
		libcnotify_print_data(
		 compressed_data,
		 compressed_data_size,
		 0 );
	}
#endif
	if( memory_copy(
	     lz_buffer,
	     libfmapi_lzfu_rtf_dictionary,
	     207 ) == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_MEMORY,
		 LIBCERROR_MEMORY_ERROR_COPY_FAILED,
		 "%s: unable to initialize lz buffer.",
		 function );

		return( -1 );
	}
	lz_buffer_iterator = 207;

	if( memory_set(
	     &( lz_buffer[ lz_buffer_iterator ] ),
	     0,
	     4096 - lz_buffer_iterator ) == NULL )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_MEMORY,
		 LIBCERROR_MEMORY_ERROR_SET_FAILED,
		 "%s: unable to clear lz buffer.",
		 function );

		return( -1 );
	}
	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.compressed_data_size );

	compressed_data_offset += 4;

	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.uncompressed_data_size );

	compressed_data_offset += 4;

	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.signature );

	compressed_data_offset += 4;

	byte_stream_copy_to_uint32_little_endian(
	 &( compressed_data[ compressed_data_offset ] ),
	 lzfu_header.checksum );

	compressed_data_offset += 4;

#if defined( HAVE_DEBUG_OUTPUT )
	if( libcnotify_verbose != 0 )
	{
		libcnotify_printf(
		 "%s: lzfu header compressed data size\t\t: %" PRIu32 "\n",
		 function,
		 lzfu_header.compressed_data_size );

		libcnotify_printf(
		 "%s: lzfu header uncompressed data size\t\t: %" PRIu32 "\n",
		 function,
		 lzfu_header.uncompressed_data_size );

		libcnotify_printf(
		 "%s: lzfu header signature\t\t\t\t: 0x08%" PRIx32 "\n",
		 function,
		 lzfu_header.signature );

		libcnotify_printf(
		 "%s: lzfu header checksum\t\t\t\t: %" PRIu32 "\n",
		 function,
		 lzfu_header.checksum );
	}
#endif /* defined( HAVE_DEBUG_OUTPUT ) */

	if( ( lzfu_header.signature != LIBFMAPI_LZFU_SIGNATURE_COMPRESSED )
	 && ( lzfu_header.signature != LIBFMAPI_LZFU_SIGNATURE_UNCOMPRESSED ) )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_UNSUPPORTED_VALUE,
		 "%s: unsupported compression signature: 0x%08" PRIx32 ".",
		 function,
		 lzfu_header.signature );

		return( -1 );
	}
	/* The compressed data size includes 12 bytes of the header
	 */
	if( ( lzfu_header.compressed_data_size < 12 )
	 || ( (size_t) ( lzfu_header.compressed_data_size - 12 ) != ( compressed_data_size - sizeof( libfmapi_lzfu_header_t ) ) ) )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_RUNTIME,
		 LIBCERROR_RUNTIME_ERROR_VALUE_OUT_OF_BOUNDS,
		 "%s: mismatch in compressed data size (%" PRIu32 " != %" PRIzd ").",
		 function,
		 lzfu_header.compressed_data_size,
		 compressed_data_size );

		return( -1 );
	}
	lzfu_header.compressed_data_size -= 12;

	/* Make sure the uncompressed buffer is large enough
	 */
	if( safe_uncompressed_data_size < lzfu_header.uncompressed_data_size )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
		 LIBCERROR_ARGUMENT_ERROR_VALUE_TOO_SMALL,
		 "%s: uncompressed data too small.",
		 function );

		*uncompressed_data_size = lzfu_header.uncompressed_data_size;

		return( -1 );
	}
	if( libfmapi_checksum_calculate_weak_crc32(
	     &calculated_checksum,
	     &( compressed_data[ compressed_data_offset ] ),
	     (size_t) lzfu_header.compressed_data_size,
	     0,
	     error ) != 1 )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_RUNTIME,
		 LIBCERROR_RUNTIME_ERROR_SET_FAILED,
		 "%s: unable to calculate weak CRC-32.",
		 function );

		return( -1 );
	}
	if( lzfu_header.checksum != calculated_checksum )
	{
		libcerror_error_set(
		 error,
		 LIBCERROR_ERROR_DOMAIN_INPUT,
		 LIBCERROR_INPUT_ERROR_CHECKSUM_MISMATCH,
		 "%s: mismatch in checksum ( %" PRIu32 " != %" PRIu32 " ).",
		 function,
		 lzfu_header.checksum,
		 calculated_checksum );

		return( -1 );
	}
	while( compressed_data_offset < compressed_data_size )
	{
		flag_byte = compressed_data[ compressed_data_offset++ ];

		/* Check every bit in the chunk flag byte from LSB to MSB
		 */
		for( flag_byte_bit_mask = 0x01;
		     flag_byte_bit_mask != 0x00;
		     flag_byte_bit_mask <<= 1 )
		{
			if( compressed_data_offset == compressed_data_size )
			{
				break;
			}
			/* Check if the byte value is a literal or a reference
			 */
			if( ( flag_byte & flag_byte_bit_mask ) == 0 )
			{
				if( compressed_data_offset >= compressed_data_size )
				{
					libcerror_error_set(
					 error,
					 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
					 LIBCERROR_ARGUMENT_ERROR_VALUE_TOO_SMALL,
					 "%s: missing compressed data.",
					 function );

					*uncompressed_data_size = 0;

					return( -1 );
				}
				if( uncompressed_data_offset >= safe_uncompressed_data_size )
				{
					libcerror_error_set(
					 error,
					 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
					 LIBCERROR_ARGUMENT_ERROR_VALUE_TOO_SMALL,
					 "%s: uncompressed data too small.",
					 function );

					*uncompressed_data_size = uncompressed_data_offset;

					return( -1 );
				}
				lz_buffer[ lz_buffer_iterator++ ]               = compressed_data[ compressed_data_offset ];
				uncompressed_data[ uncompressed_data_offset++ ] = compressed_data[ compressed_data_offset ];

				compressed_data_offset++;

				/* Make sure the lz buffer iterator wraps around
				 */
				lz_buffer_iterator %= 4096;

				lz_buffer[ lz_buffer_iterator ] = 0;
			}
			else
			{
				if( compressed_data_offset > ( compressed_data_size - 2 ) )
				{
					libcerror_error_set(
					 error,
					 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
					 LIBCERROR_ARGUMENT_ERROR_VALUE_TOO_SMALL,
					 "%s: missing compressed data.",
					 function );

					*uncompressed_data_size = 0;

					return( -1 );
				}
				lzfu_reference_data = &( compressed_data[ compressed_data_offset ] );

				compressed_data_offset += 2;

				byte_stream_copy_to_uint16_big_endian(
				 lzfu_reference_data,
				 reference_offset );

				reference_size     = ( reference_offset & 0x000f ) + 2;
				reference_offset >>= 4;

				if( ( uncompressed_data_offset + reference_size - 1 ) >= safe_uncompressed_data_size )
				{
					libcerror_error_set(
					 error,
					 LIBCERROR_ERROR_DOMAIN_ARGUMENTS,
					 LIBCERROR_ARGUMENT_ERROR_VALUE_TOO_SMALL,
					 "%s: uncompressed data too small.",
					 function );

					*uncompressed_data_size = uncompressed_data_offset + reference_size;

					return( -1 );
				}
				for( reference_iterator = 0; reference_iterator < reference_size; reference_iterator++ )
				{
					lz_buffer[ lz_buffer_iterator++ ]               = lz_buffer[ reference_offset ];
					uncompressed_data[ uncompressed_data_offset++ ] = lz_buffer[ reference_offset ];

					reference_offset++;

					/* Make sure the lz buffer iterator and reference offset wrap around
					 */
					lz_buffer_iterator %= 4096;
					reference_offset   %= 4096;

					lz_buffer[ lz_buffer_iterator ] = 0;
				}
			}
		}
	}
	*uncompressed_data_size = uncompressed_data_offset;

	return( 1 );
}