Coverage Report

Created: 2022-11-30 06:20

/src/openssl/crypto/asn1/a_bytes.c
Line
Count
Source (jump to first uncovered line)
1
/* crypto/asn1/a_bytes.c */
2
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3
 * All rights reserved.
4
 *
5
 * This package is an SSL implementation written
6
 * by Eric Young (eay@cryptsoft.com).
7
 * The implementation was written so as to conform with Netscapes SSL.
8
 *
9
 * This library is free for commercial and non-commercial use as long as
10
 * the following conditions are aheared to.  The following conditions
11
 * apply to all code found in this distribution, be it the RC4, RSA,
12
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13
 * included with this distribution is covered by the same copyright terms
14
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15
 *
16
 * Copyright remains Eric Young's, and as such any Copyright notices in
17
 * the code are not to be removed.
18
 * If this package is used in a product, Eric Young should be given attribution
19
 * as the author of the parts of the library used.
20
 * This can be in the form of a textual message at program startup or
21
 * in documentation (online or textual) provided with the package.
22
 *
23
 * Redistribution and use in source and binary forms, with or without
24
 * modification, are permitted provided that the following conditions
25
 * are met:
26
 * 1. Redistributions of source code must retain the copyright
27
 *    notice, this list of conditions and the following disclaimer.
28
 * 2. Redistributions in binary form must reproduce the above copyright
29
 *    notice, this list of conditions and the following disclaimer in the
30
 *    documentation and/or other materials provided with the distribution.
31
 * 3. All advertising materials mentioning features or use of this software
32
 *    must display the following acknowledgement:
33
 *    "This product includes cryptographic software written by
34
 *     Eric Young (eay@cryptsoft.com)"
35
 *    The word 'cryptographic' can be left out if the rouines from the library
36
 *    being used are not cryptographic related :-).
37
 * 4. If you include any Windows specific code (or a derivative thereof) from
38
 *    the apps directory (application code) you must include an acknowledgement:
39
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40
 *
41
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51
 * SUCH DAMAGE.
52
 *
53
 * The licence and distribution terms for any publically available version or
54
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55
 * copied and put under another distribution licence
56
 * [including the GNU Public Licence.]
57
 */
58
59
#include <stdio.h>
60
#include "cryptlib.h"
61
#include <openssl/asn1.h>
62
63
static int asn1_collate_primitive(ASN1_STRING *a, ASN1_const_CTX *c,
64
                                  int depth);
65
static ASN1_STRING *int_d2i_ASN1_bytes(ASN1_STRING **a,
66
                                       const unsigned char **pp, long length,
67
                                       int Ptag, int Pclass, int depth,
68
                                       int *perr);
69
/*
70
 * type is a 'bitmap' of acceptable string types.
71
 */
72
ASN1_STRING *d2i_ASN1_type_bytes(ASN1_STRING **a, const unsigned char **pp,
73
                                 long length, int type)
74
0
{
75
0
    ASN1_STRING *ret = NULL;
76
0
    const unsigned char *p;
77
0
    unsigned char *s;
78
0
    long len;
79
0
    int inf, tag, xclass;
80
0
    int i = 0;
81
82
0
    p = *pp;
83
0
    inf = ASN1_get_object(&p, &len, &tag, &xclass, length);
84
0
    if (inf & 0x80)
85
0
        goto err;
86
87
0
    if (tag >= 32) {
88
0
        i = ASN1_R_TAG_VALUE_TOO_HIGH;
89
0
        goto err;
90
0
    }
91
0
    if (!(ASN1_tag2bit(tag) & type)) {
92
0
        i = ASN1_R_WRONG_TYPE;
93
0
        goto err;
94
0
    }
95
96
    /* If a bit-string, exit early */
97
0
    if (tag == V_ASN1_BIT_STRING)
98
0
        return (d2i_ASN1_BIT_STRING(a, pp, length));
99
100
0
    if ((a == NULL) || ((*a) == NULL)) {
101
0
        if ((ret = ASN1_STRING_new()) == NULL)
102
0
            return (NULL);
103
0
    } else
104
0
        ret = (*a);
105
106
0
    if (len != 0) {
107
0
        s = OPENSSL_malloc((int)len + 1);
108
0
        if (s == NULL) {
109
0
            i = ERR_R_MALLOC_FAILURE;
110
0
            goto err;
111
0
        }
112
0
        memcpy(s, p, (int)len);
113
0
        s[len] = '\0';
114
0
        p += len;
115
0
    } else
116
0
        s = NULL;
117
118
0
    if (ret->data != NULL)
119
0
        OPENSSL_free(ret->data);
120
0
    ret->length = (int)len;
121
0
    ret->data = s;
122
0
    ret->type = tag;
123
0
    if (a != NULL)
124
0
        (*a) = ret;
125
0
    *pp = p;
126
0
    return (ret);
127
0
 err:
128
0
    ASN1err(ASN1_F_D2I_ASN1_TYPE_BYTES, i);
129
0
    if ((ret != NULL) && ((a == NULL) || (*a != ret)))
130
0
        ASN1_STRING_free(ret);
131
0
    return (NULL);
132
0
}
133
134
int i2d_ASN1_bytes(ASN1_STRING *a, unsigned char **pp, int tag, int xclass)
135
0
{
136
0
    int ret, r, constructed;
137
0
    unsigned char *p;
138
139
0
    if (a == NULL)
140
0
        return (0);
141
142
0
    if (tag == V_ASN1_BIT_STRING)
143
0
        return (i2d_ASN1_BIT_STRING(a, pp));
144
145
0
    ret = a->length;
146
0
    r = ASN1_object_size(0, ret, tag);
147
0
    if (pp == NULL)
148
0
        return (r);
149
0
    p = *pp;
150
151
0
    if ((tag == V_ASN1_SEQUENCE) || (tag == V_ASN1_SET))
152
0
        constructed = 1;
153
0
    else
154
0
        constructed = 0;
155
0
    ASN1_put_object(&p, constructed, ret, tag, xclass);
156
0
    memcpy(p, a->data, a->length);
157
0
    p += a->length;
158
0
    *pp = p;
159
0
    return (r);
160
0
}
161
162
/*
163
 * Maximum recursion depth of d2i_ASN1_bytes(): much more than should be
164
 * encountered in pratice.
165
 */
166
167
0
#define ASN1_BYTES_MAXDEPTH 20
168
169
ASN1_STRING *d2i_ASN1_bytes(ASN1_STRING **a, const unsigned char **pp,
170
                            long length, int Ptag, int Pclass)
171
0
{
172
0
    int err = 0;
173
0
    ASN1_STRING *s = int_d2i_ASN1_bytes(a, pp, length, Ptag, Pclass, 0, &err);
174
0
    if (err != 0)
175
0
        ASN1err(ASN1_F_D2I_ASN1_BYTES, err);
176
0
    return s;
177
0
}
178
179
static ASN1_STRING *int_d2i_ASN1_bytes(ASN1_STRING **a,
180
                                       const unsigned char **pp, long length,
181
                                       int Ptag, int Pclass,
182
                                       int depth, int *perr)
183
0
{
184
0
    ASN1_STRING *ret = NULL;
185
0
    const unsigned char *p;
186
0
    unsigned char *s;
187
0
    long len;
188
0
    int inf, tag, xclass;
189
190
0
    if (depth > ASN1_BYTES_MAXDEPTH) {
191
0
        *perr = ASN1_R_NESTED_ASN1_STRING;
192
0
        return NULL;
193
0
    }
194
195
0
    if ((a == NULL) || ((*a) == NULL)) {
196
0
        if ((ret = ASN1_STRING_new()) == NULL)
197
0
            return (NULL);
198
0
    } else
199
0
        ret = (*a);
200
201
0
    p = *pp;
202
0
    inf = ASN1_get_object(&p, &len, &tag, &xclass, length);
203
0
    if (inf & 0x80) {
204
0
        *perr = ASN1_R_BAD_OBJECT_HEADER;
205
0
        goto err;
206
0
    }
207
208
0
    if (tag != Ptag) {
209
0
        *perr = ASN1_R_WRONG_TAG;
210
0
        goto err;
211
0
    }
212
213
0
    if (inf & V_ASN1_CONSTRUCTED) {
214
0
        ASN1_const_CTX c;
215
216
0
        c.error = 0;
217
0
        c.pp = pp;
218
0
        c.p = p;
219
0
        c.inf = inf;
220
0
        c.slen = len;
221
0
        c.tag = Ptag;
222
0
        c.xclass = Pclass;
223
0
        c.max = (length == 0) ? 0 : (p + length);
224
0
        if (!asn1_collate_primitive(ret, &c, depth)) {
225
0
            *perr = c.error;
226
0
            goto err;
227
0
        } else {
228
0
            p = c.p;
229
0
        }
230
0
    } else {
231
0
        if (len != 0) {
232
0
            if ((ret->length < len) || (ret->data == NULL)) {
233
0
                s = OPENSSL_malloc((int)len + 1);
234
0
                if (s == NULL) {
235
0
                    *perr = ERR_R_MALLOC_FAILURE;
236
0
                    goto err;
237
0
                }
238
0
                if (ret->data != NULL)
239
0
                    OPENSSL_free(ret->data);
240
0
            } else
241
0
                s = ret->data;
242
0
            memcpy(s, p, (int)len);
243
0
            s[len] = '\0';
244
0
            p += len;
245
0
        } else {
246
0
            s = NULL;
247
0
            if (ret->data != NULL)
248
0
                OPENSSL_free(ret->data);
249
0
        }
250
251
0
        ret->length = (int)len;
252
0
        ret->data = s;
253
0
        ret->type = Ptag;
254
0
    }
255
256
0
    if (a != NULL)
257
0
        (*a) = ret;
258
0
    *pp = p;
259
0
    return (ret);
260
0
 err:
261
0
    if ((ret != NULL) && ((a == NULL) || (*a != ret)))
262
0
        ASN1_STRING_free(ret);
263
0
    return (NULL);
264
0
}
265
266
/*
267
 * We are about to parse 0..n d2i_ASN1_bytes objects, we are to collapse them
268
 * into the one structure that is then returned
269
 */
270
/*
271
 * There have been a few bug fixes for this function from Paul Keogh
272
 * <paul.keogh@sse.ie>, many thanks to him
273
 */
274
static int asn1_collate_primitive(ASN1_STRING *a, ASN1_const_CTX *c,
275
                                  int depth)
276
0
{
277
0
    ASN1_STRING *os = NULL;
278
0
    BUF_MEM b;
279
0
    int num;
280
281
0
    b.length = 0;
282
0
    b.max = 0;
283
0
    b.data = NULL;
284
285
0
    if (a == NULL) {
286
0
        c->error = ERR_R_PASSED_NULL_PARAMETER;
287
0
        goto err;
288
0
    }
289
290
0
    num = 0;
291
0
    for (;;) {
292
0
        if (c->inf & 1) {
293
0
            c->eos = ASN1_const_check_infinite_end(&c->p,
294
0
                                                   (long)(c->max - c->p));
295
0
            if (c->eos)
296
0
                break;
297
0
        } else {
298
0
            if (c->slen <= 0)
299
0
                break;
300
0
        }
301
302
0
        c->q = c->p;
303
0
        if (int_d2i_ASN1_bytes(&os, &c->p, c->max - c->p, c->tag, c->xclass,
304
0
                               depth + 1, &c->error) == NULL) {
305
0
            goto err;
306
0
        }
307
308
0
        if (!BUF_MEM_grow_clean(&b, num + os->length)) {
309
0
            c->error = ERR_R_BUF_LIB;
310
0
            goto err;
311
0
        }
312
0
        memcpy(&(b.data[num]), os->data, os->length);
313
0
        if (!(c->inf & 1))
314
0
            c->slen -= (c->p - c->q);
315
0
        num += os->length;
316
0
    }
317
318
0
    if (!asn1_const_Finish(c))
319
0
        goto err;
320
321
0
    a->length = num;
322
0
    if (a->data != NULL)
323
0
        OPENSSL_free(a->data);
324
0
    a->data = (unsigned char *)b.data;
325
0
    if (os != NULL)
326
0
        ASN1_STRING_free(os);
327
0
    return (1);
328
0
 err:
329
0
    if (os != NULL)
330
0
        ASN1_STRING_free(os);
331
0
    if (b.data != NULL)
332
0
        OPENSSL_free(b.data);
333
0
    return (0);
334
0
}