/src/boringssl/crypto/bytestring/unicode.cc
Line | Count | Source (jump to first uncovered line) |
1 | | // Copyright 2018 The BoringSSL Authors |
2 | | // |
3 | | // Licensed under the Apache License, Version 2.0 (the "License"); |
4 | | // you may not use this file except in compliance with the License. |
5 | | // You may obtain a copy of the License at |
6 | | // |
7 | | // https://www.apache.org/licenses/LICENSE-2.0 |
8 | | // |
9 | | // Unless required by applicable law or agreed to in writing, software |
10 | | // distributed under the License is distributed on an "AS IS" BASIS, |
11 | | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
12 | | // See the License for the specific language governing permissions and |
13 | | // limitations under the License. |
14 | | |
15 | | #include <openssl/bytestring.h> |
16 | | |
17 | | #include "internal.h" |
18 | | |
19 | | |
20 | 760k | static int is_valid_code_point(uint32_t v) { |
21 | | // References in the following are to Unicode 15.0.0. |
22 | 760k | if (// The Unicode space runs from zero to 0x10ffff (3.4 D9). |
23 | 760k | v > 0x10ffff || |
24 | | // Values 0x...fffe, 0x...ffff, and 0xfdd0-0xfdef are permanently reserved |
25 | | // as noncharacters (3.4 D14). See also 23.7. As our APIs are intended for |
26 | | // "open interchange", such as ASN.1, we reject them. |
27 | 760k | (v & 0xfffe) == 0xfffe || |
28 | 760k | (v >= 0xfdd0 && v <= 0xfdef) || |
29 | | // Surrogate code points are invalid (3.2 C1). |
30 | 760k | (v >= 0xd800 && v <= 0xdfff)) { |
31 | 62 | return 0; |
32 | 62 | } |
33 | 760k | return 1; |
34 | 760k | } |
35 | | |
36 | | // BOTTOM_BITS returns a byte with the bottom |n| bits set. |
37 | 145k | #define BOTTOM_BITS(n) (uint8_t)((1u << (n)) - 1) |
38 | | |
39 | | // TOP_BITS returns a byte with the top |n| bits set. |
40 | 95.7k | #define TOP_BITS(n) ((uint8_t)~BOTTOM_BITS(8 - (n))) |
41 | | |
42 | 5.85M | int CBS_get_utf8(CBS *cbs, uint32_t *out) { |
43 | 5.85M | uint8_t c; |
44 | 5.85M | if (!CBS_get_u8(cbs, &c)) { |
45 | 0 | return 0; |
46 | 0 | } |
47 | 5.85M | if (c <= 0x7f) { |
48 | 5.84M | *out = c; |
49 | 5.84M | return 1; |
50 | 5.84M | } |
51 | 5.77k | uint32_t v, lower_bound; |
52 | 5.77k | size_t len; |
53 | 5.77k | if ((c & TOP_BITS(3)) == TOP_BITS(2)) { |
54 | 5.61k | v = c & BOTTOM_BITS(5); |
55 | 5.61k | len = 1; |
56 | 5.61k | lower_bound = 0x80; |
57 | 5.61k | } else if ((c & TOP_BITS(4)) == TOP_BITS(3)) { |
58 | 84 | v = c & BOTTOM_BITS(4); |
59 | 84 | len = 2; |
60 | 84 | lower_bound = 0x800; |
61 | 84 | } else if ((c & TOP_BITS(5)) == TOP_BITS(4)) { |
62 | 60 | v = c & BOTTOM_BITS(3); |
63 | 60 | len = 3; |
64 | 60 | lower_bound = 0x10000; |
65 | 60 | } else { |
66 | 21 | return 0; |
67 | 21 | } |
68 | 11.6k | for (size_t i = 0; i < len; i++) { |
69 | 5.94k | if (!CBS_get_u8(cbs, &c) || |
70 | 5.94k | (c & TOP_BITS(2)) != TOP_BITS(1)) { |
71 | 16 | return 0; |
72 | 16 | } |
73 | 5.92k | v <<= 6; |
74 | 5.92k | v |= c & BOTTOM_BITS(6); |
75 | 5.92k | } |
76 | 5.73k | if (!is_valid_code_point(v) || |
77 | 5.73k | v < lower_bound) { |
78 | 15 | return 0; |
79 | 15 | } |
80 | 5.72k | *out = v; |
81 | 5.72k | return 1; |
82 | 5.73k | } |
83 | | |
84 | 1.46M | int CBS_get_latin1(CBS *cbs, uint32_t *out) { |
85 | 1.46M | uint8_t c; |
86 | 1.46M | if (!CBS_get_u8(cbs, &c)) { |
87 | 0 | return 0; |
88 | 0 | } |
89 | 1.46M | *out = c; |
90 | 1.46M | return 1; |
91 | 1.46M | } |
92 | | |
93 | 15.0k | int CBS_get_ucs2_be(CBS *cbs, uint32_t *out) { |
94 | | // Note UCS-2 (used by BMPString) does not support surrogates. |
95 | 15.0k | uint16_t c; |
96 | 15.0k | if (!CBS_get_u16(cbs, &c) || |
97 | 15.0k | !is_valid_code_point(c)) { |
98 | 14 | return 0; |
99 | 14 | } |
100 | 15.0k | *out = c; |
101 | 15.0k | return 1; |
102 | 15.0k | } |
103 | | |
104 | 542 | int CBS_get_utf32_be(CBS *cbs, uint32_t *out) { |
105 | 542 | return CBS_get_u32(cbs, out) && is_valid_code_point(*out); |
106 | 542 | } |
107 | | |
108 | 3.66M | size_t CBB_get_utf8_len(uint32_t u) { |
109 | 3.66M | if (u <= 0x7f) { |
110 | 3.62M | return 1; |
111 | 3.62M | } |
112 | 36.5k | if (u <= 0x7ff) { |
113 | 32.3k | return 2; |
114 | 32.3k | } |
115 | 4.27k | if (u <= 0xffff) { |
116 | 4.18k | return 3; |
117 | 4.18k | } |
118 | 87 | return 4; |
119 | 4.27k | } |
120 | | |
121 | 739k | int CBB_add_utf8(CBB *cbb, uint32_t u) { |
122 | 739k | if (!is_valid_code_point(u)) { |
123 | 0 | return 0; |
124 | 0 | } |
125 | 739k | if (u <= 0x7f) { |
126 | 705k | return CBB_add_u8(cbb, (uint8_t)u); |
127 | 705k | } |
128 | 33.7k | if (u <= 0x7ff) { |
129 | 29.5k | return CBB_add_u8(cbb, TOP_BITS(2) | (u >> 6)) && |
130 | 29.5k | CBB_add_u8(cbb, TOP_BITS(1) | (u & BOTTOM_BITS(6))); |
131 | 29.5k | } |
132 | 4.25k | if (u <= 0xffff) { |
133 | 4.17k | return CBB_add_u8(cbb, TOP_BITS(3) | (u >> 12)) && |
134 | 4.17k | CBB_add_u8(cbb, TOP_BITS(1) | ((u >> 6) & BOTTOM_BITS(6))) && |
135 | 4.17k | CBB_add_u8(cbb, TOP_BITS(1) | (u & BOTTOM_BITS(6))); |
136 | 4.17k | } |
137 | 80 | if (u <= 0x10ffff) { |
138 | 80 | return CBB_add_u8(cbb, TOP_BITS(4) | (u >> 18)) && |
139 | 80 | CBB_add_u8(cbb, TOP_BITS(1) | ((u >> 12) & BOTTOM_BITS(6))) && |
140 | 80 | CBB_add_u8(cbb, TOP_BITS(1) | ((u >> 6) & BOTTOM_BITS(6))) && |
141 | 80 | CBB_add_u8(cbb, TOP_BITS(1) | (u & BOTTOM_BITS(6))); |
142 | 80 | } |
143 | 0 | return 0; |
144 | 80 | } |
145 | | |
146 | 0 | int CBB_add_latin1(CBB *cbb, uint32_t u) { |
147 | 0 | return u <= 0xff && CBB_add_u8(cbb, (uint8_t)u); |
148 | 0 | } |
149 | | |
150 | 0 | int CBB_add_ucs2_be(CBB *cbb, uint32_t u) { |
151 | 0 | return u <= 0xffff && is_valid_code_point(u) && CBB_add_u16(cbb, (uint16_t)u); |
152 | 0 | } |
153 | | |
154 | 0 | int CBB_add_utf32_be(CBB *cbb, uint32_t u) { |
155 | 0 | return is_valid_code_point(u) && CBB_add_u32(cbb, u); |
156 | 0 | } |