SubtreeMatch.cpp

Go to the documentation of this file.

#include "SubtreeMatch.h"

#include "GeneralSubtree.h"
#include "GeneralName.h"
#include "Name.h"

#include "PKIFException.h"
#include "PKIFCommonErrors.h"



// GIB: inverted the meaning of this operator. matches will now be considered disjoint
bool SubtreeMatch::operator()(const CPKIFGeneralSubtreePtr& lhs)
{
    // since callers may rely on this to throw COMMON_UNSUPPORTED_CHOICE if
    // one or both isn't supported (i.e. for determining whether name constraints
    // were processed) check that before checking equality
    CPKIFGeneralNamePtr rhsGN = m_rhs->GetBase();
    CPKIFGeneralNamePtr lhsGN = lhs->GetBase();
    CPKIFGeneralName::GENNAMETYPE lhsType = lhsGN->GetType();
    CPKIFGeneralName::GENNAMETYPE rhsType = rhsGN->GetType();
    if(!CPKIFGeneralSubtree::IsSupported(lhsType) || !CPKIFGeneralSubtree::IsSupported(rhsType))
    {
        throw CPKIFException(TOOLKIT_PATH_MISC, COMMON_UNSUPPORTED_CHOICE, "Name constraint features an unsupported name component");
    }
    // if they're identical, keep them
    if(*lhs == *m_rhs)
    {
        return false;
    // if they're unrelated, keep them
    } else if(lhsType != rhsType)
    {
        return false;
    }
    // if they're not dn's, see if they're rhs *fails* to satisfy lhs
    else if(lhsType != CPKIFGeneralName::DIRECTORYNAME)
    {
        if(CPKIFGeneralSubtree::NO_MATCH == lhs->IsInSubtree(rhsGN)) {
            // XXX TODO: do we need to do better than this for non directory name subtrees?
            return true;
        }
    }
    else
    {
        //eliminiated direct ->GetBase()->directoryName() call until after checking type (else crash) 12/2/2003
        CPKIFNamePtr subtreeName = m_rhs->GetBase()->directoryName();
        CPKIFNamePtr subject = lhs->GetBase()->directoryName();
        if (!subtreeName->DescendedFrom(*subject))
        {
            return true;
        }
    }
    return false;
}
void SubtreeMatch::SetRHS(
    CPKIFGeneralSubtreePtr& rhs) {m_rhs = rhs;}