Index: trunk/BNC/RTCM/RTCM2.cpp
===================================================================
--- trunk/BNC/RTCM/RTCM2.cpp	(revision 724)
+++ trunk/BNC/RTCM/RTCM2.cpp	(revision 725)
@@ -45,4 +45,10 @@
 //   2008/03/04  AHA  Fixed problems with PRN 32
 //   2008/03/05  AHA  Implemeted fix for Trimble 4000SSI receivers
+//   2008/03/07  AHA  Major revision of input buffer handling 
+//   2008/03/07  AHA  Removed unnecessary failure flag
+//   2008/03/10  AHA  Corrected extraction of antenna serial number
+//   2008/03/10  AHA  Corrected buffer length check in getPacket()
+//   2008/03/11  AHA  Added checks for data consistency in extraction routines
+//   2008/03/11  AHA  isGPS-flag in RTCM2_Obs is now set to false on clear()
 //
 // (c) DLR/GSOC
@@ -63,5 +69,5 @@
 // undersized packets in get(Unsigned)Bits
 
-#define DEBUG 0    
+#define DEBUG 0
 
 // Activate (1) or deactivate (0) rounding of measurement epochs to 100ms
@@ -115,6 +121,5 @@
 
 namespace rtcm2 {
-
-
+  
 //------------------------------------------------------------------------------
 //
@@ -136,10 +141,4 @@
 void ThirtyBitWord::clear() {
   W = 0;
-};
-
-// Failure indicator for input operations
-
-bool ThirtyBitWord::fail() const {
-  return failure; 
 };
 
@@ -259,5 +258,4 @@
 
 
-
 // Append a byte with six data bits
 
@@ -275,5 +273,8 @@
   // Bits 7 and 6 (of 0..7) must be "01" for valid data bytes
   if ( (b & 0x40) != 0x40 ) {
-    failure = true;
+    // We simply skip the invalid input byte and leave the word unchanged
+#if (DEBUG>0) 
+    cerr << "Error in append()" << bitset<32>(all()) << endl;
+#endif
     return;
   };
@@ -290,25 +291,26 @@
 // Get next 30bit word from string
 
-void ThirtyBitWord::get(string& buf) {
+void ThirtyBitWord::get(const string& buf) {
 
   // Check if string is long enough
    
   if (buf.size()<5) {
-    failure = true;
+    // Ignore; users should avoid this case prior to calling get()    
+#if ( DEBUG > 0 )    
+    cerr << "Error in get(): packet too short (" << buf.size() <<")" << endl;
+#endif
     return;
   };
   
-  // Process 5 bytes and remove them from the input
+  // Process 5 bytes
   
   for (int i=0; i<5; i++) append(buf[i]);
-  buf.erase(0,5);
 
 #if (DEBUG>0) 
   if (!validParity()) {
-    cerr << "Parity error " 
+    cerr << "Parity error in get()" 
          << bitset<32>(all()) << endl;
   };
 #endif
-  failure = false;
 
 };
@@ -328,9 +330,8 @@
 #if (DEBUG>0) 
   if (!validParity()) {
-    cerr << "Parity error " 
+    cerr << "Parity error in get()" 
          << bitset<32>(all()) << endl;
   };
 #endif
-  failure = false;
 
 };
@@ -340,31 +341,28 @@
 void ThirtyBitWord::getHeader(string& buf) {
 
-  unsigned int W_old = W;
+  const int wordLen = 5; // Number of bytes representing a 30-bit word
+  const int spare   = 1; // Number of spare words for resync of parity
+                         // (same value as inRTCM2packet::getPacket()) 
   unsigned int i;
   
   i=0;
-  while (!isHeader() || i<5 ) {
-    // Check if string is long enough; if not restore old word and exit
-    if (buf.size()<i+1) {
-      W = W_old;
-      failure = true;
-      return;
-    };
+  while (!isHeader() && i<buf.size() ) {
     // Process byte
-    append(buf[i]); i++;
-  };
-
-  // Remove processed bytes from buffer
-  
-  buf.erase(0,i);
+    append(buf[i]);
+    // Increment count
+    i++;
+  };
+
+  // Remove processed bytes from buffer. Retain also the previous word to
+  // allow a resync if getHeader() is called repeatedly on the same buffer.
+  if (i>=(1+spare)*wordLen) buf.erase(0,i-(1+spare)*wordLen);
 
 #if (DEBUG>0) 
   if (!validParity()) {
-    cerr << "Parity error " 
+    cerr << "Parity error in getHeader()" 
          << bitset<32>(all()) << endl;
   };
 #endif
-  failure = false;
-
+  
 };
 
@@ -385,9 +383,8 @@
 #if (DEBUG>0) 
   if (!validParity()) {
-    cerr << "Parity error " 
+    cerr << "Parity error in getHeader()" 
          << bitset<32>(all()) << endl;
   };
 #endif
-  failure = false;
 
 };
@@ -443,33 +440,92 @@
 void RTCM2packet::getPacket(std::string& buf) {
 
-  int           n;
-  ThirtyBitWord W_old = W;
-  string        buf_old = buf;
-  
-  // Try to read a full packet. If the input buffer is too short
-  // clear all data and restore the latest 30-bit word prior to 
-  // the getPacket call. The empty header word will indicate
-  // an invalid message, which signals an unsuccessful getPacket()
-  // call.
-   
-  W.getHeader(buf); 
-  H1 = W.value(); 
-  if (W.fail()) { clear(); W=W_old; buf=buf_old; return; };
-  if (!W.validParity()) { clear(); return; };
-  
-  W.get(buf);       
-  H2 = W.value(); 
-  if (W.fail()) { clear(); W=W_old; buf=buf_old; return; };
-  if (!W.validParity()) { clear(); return; };
+  const int wordLen = 5; // Number of bytes representing a 30-bit word
+  const int spare   = 1; // Number of spare words for resync of parity
+                         // (same value as used in ThirtyBitWord::getHeader)
+  unsigned int n;
+  
+  // Try to read a full packet. Processed bytes are removed from the input 
+  // buffer except for the latest spare*wordLen bytes to restore the parity 
+  // bytes upon subseqeunt calls of getPAcket().
+  
+  // Locate and read the first header word
+  W.getHeader(buf);
+  if (!W.isHeader()) { 
+    // No header found; try again next time. buf retains only the spare
+    // words. The packet contents is cleared to indicate an unsuccessful
+    // termination of getPacket().
+    clear();
+#if ( DEBUG > 0 )
+    cerr << "Error in getPacket(): W.isHeader() = false  for H1" << endl;
+#endif
+    return; 
+  };
+  H1 = W.value();
+
+  // Do we have enough bytes to read the next word? If not, the packet 
+  // contents is cleared to indicate an unsuccessful termination. The
+  // previously read spare and header bytes are retained in the buffer
+  // for use in the next call of getPacket().
+  if (buf.size()<(spare+2)*wordLen) { 
+    clear(); 
+#if ( DEBUG > 0 )    
+    cerr << "Error in getPacket(): buffer too short for complete H2" << endl;
+#endif
+    return;
+  };
+  
+  // Read the second header word
+  W.get(buf.substr((spare+1)*wordLen,buf.size()-(spare+1)*wordLen));  
+  H2 = W.value();
+  if (!W.validParity()) { 
+    // Invalid H2 word; delete first buffer byte and try to resynch next time.
+    // The packet contents is cleared to indicate an unsuccessful termination.
+    clear(); 
+    buf.erase(0,1); 
+#if ( DEBUG > 0 )    
+    cerr << "Error in getPacket(): W.validParity() = false for H2" << endl;
+#endif
+    return; 
+  };
 
   n = nDataWords();
+
+  // Do we have enough bytes to read the next word? If not, the packet 
+  // contents is cleared to indicate an unsuccessful termination. The
+  // previously read spare and header bytes are retained in the buffer
+  // for use in the next call of getPacket().
+  if (buf.size()<(spare+2+n)*wordLen) { 
+    clear();     
+#if ( DEBUG > 0 )    
+    cerr << "Error in getPacket(): buffer too short for complete " << n
+         << " DWs" << endl;
+#endif
+    return; 
+  };
+  
   DW.resize(n);
-  for (int i=0; i<n; i++) {
-    W.get(buf); 
-    DW[i] = W.value(); 
-    if (W.fail()) { clear(); W=W_old; buf=buf_old; return; };
-    if (!W.validParity()) { clear(); return; };
-  };
-
+  for (unsigned int i=0; i<n; i++) {
+    W.get(buf.substr((spare+2+i)*wordLen,buf.size()-(spare+2+i)*wordLen)); 
+    DW[i] = W.value();
+    if (!W.validParity()) { 
+      // Invalid data word; delete first byte and try to resynch next time.
+      // The packet contents is cleared to indicate an unsuccessful termination.
+      clear(); 
+      buf.erase(0,1); 
+#if ( DEBUG > 0 )    
+    cerr << "Error in getPacket(): W.validParity() = false for DW"
+         << i << endl;
+#endif
+      return; 
+    };
+  };
+
+  // Successful packet extraction; delete total number of message bytes 
+  // from buffer. 
+  // Note: a total of "spare" words remain in the buffer to enable a
+  // parity resynchronization when searching the next header.
+  
+  buf.erase(0,(n+2)*wordLen);
+  
   return;
   
@@ -487,9 +543,9 @@
   W.getHeader(inp); 
   H1 = W.value(); 
-  if (W.fail() || !W.validParity()) { clear(); return; }
+  if (inp.fail() || !W.isHeader()) { clear(); return; }
   
   W.get(inp);       
   H2 = W.value(); 
-  if (W.fail() || !W.validParity()) { clear(); return; }
+  if (inp.fail() || !W.validParity()) { clear(); return; }
 
   n = nDataWords();
@@ -498,5 +554,5 @@
     W.get(inp); 
     DW[i] = W.value(); 
-    if (W.fail() || !W.validParity()) { clear(); return; }
+    if (inp.fail() || !W.validParity()) { clear(); return; }
   };
 
@@ -675,5 +731,5 @@
 void RTCM2_03::extract(const RTCM2packet& P) {
 
-  // Check validity and packet type
+  // Check validity, packet type and number of data words
   
   validMsg = (P.valid()); 
@@ -681,4 +737,7 @@
 
   validMsg = (P.ID()==03);  
+  if (!validMsg) return;
+  
+  validMsg = (P.nDataWords()==4);  
   if (!validMsg) return;
   
@@ -724,5 +783,5 @@
     antSN = "";
     for (int i=0;i<nas;i++) 
-      antSN += (char)P.getUnsignedBits(24+8*nas+i*8,8);
+      antSN += (char)P.getUnsignedBits(24+8*nad+i*8,8);
   };
 
@@ -745,5 +804,5 @@
    double dx,dy,dz;
 
-  // Check validity and packet type
+  // Check validity, packet type and number of data words
   
   validMsg = (P.valid()); 
@@ -751,4 +810,7 @@
 
   validMsg = (P.ID()==24);  
+  if (!validMsg) return;
+  
+  validMsg = (P.nDataWords()==6);  
   if (!validMsg) return;
   
@@ -806,15 +868,16 @@
 
   clear();
+
+};
+
+// Reset entire block 
+
+void RTCM2_Obs::clear() {
+  
   GPSonly = true;
-
-};
-
-// Reset entire block 
-
-void RTCM2_Obs::clear() {
-
+  
   secs=0.0;                // Seconds of hour (GPS time)
   nSat=0;                  // Number of space vehicles
-  PRN.resize(0);           // Pseudorange [m]
+  PRN.resize(0);           // space vehicles
   rng_C1.resize(0);        // Pseudorange [m]
   rng_P1.resize(0);        // Pseudorange [m]
@@ -888,7 +951,28 @@
   
   if ( ! ( P.valid() && 
-           (P.ID()==18 || P.ID()==19) && 
-           P.nDataWords()>1              ) ) return;
-
+           (P.ID()==18 || P.ID()==19) ) ) return;
+
+  // Check number of data words, message starts with 1 DW for epoch, then each 
+  // satellite brings 2 DW, 
+  // Do not start decoding if less than 3 DW are in package
+  
+  if ( P.nDataWords()<3 ) {
+#if ( DEBUG > 0 )
+    cerr << "Error in RTCM2_Obs::extract(): less than 3 DW ("
+         << P.nDataWords() << ") detected" << endl;
+#endif
+    return;
+  };
+  
+  // Check if number of data words is odd number
+  
+  if ( P.nDataWords()%2==0 ){
+#if ( DEBUG > 0 )
+    cerr << "Error in RTCM2_Obs::extract(): odd number of DW ("
+         << P.nDataWords() << ") detected" << endl;
+#endif
+    return;
+  };
+  
   // Clear previous data if block was already complete
 
@@ -949,5 +1033,5 @@
     if ( isL1 && !isGPS) availability.set(bit_L1cphGLO);
     if (!isL1 && !isGPS) availability.set(bit_L2cphGLO);
-
+    
     // Process all satellites
     
Index: trunk/BNC/RTCM/RTCM2.h
===================================================================
--- trunk/BNC/RTCM/RTCM2.h	(revision 724)
+++ trunk/BNC/RTCM/RTCM2.h	(revision 725)
@@ -28,4 +28,5 @@
 //   2006/10/17  OMO  Removed obsolete check of multiple message indicator
 //   2006/11/25  OMO  Revised check for presence of GLONASS data
+//   2008/03/07  AHA  Removed unnecessary failure flag
 //
 // (c) DLR/GSOC
@@ -81,5 +82,5 @@
     // Input
     
-    void         get(std::string& buf);
+    void         get(const std::string& buf);
     void         get(std::istream& inp);
     void         getHeader(std::string& buf);
@@ -94,5 +95,5 @@
   private:
 
-    bool         failure;
+//    bool         failure;
 
     //