Coverage Report

Created: 2026-01-09 06:53

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/irssi/subprojects/openssl-1.1.1l/ssl/packet.c
Line
Count
Source
1
/*
2
 * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the OpenSSL license (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include "internal/cryptlib.h"
11
#include "packet_local.h"
12
#include <openssl/sslerr.h>
13
14
0
#define DEFAULT_BUF_SIZE    256
15
16
int WPACKET_allocate_bytes(WPACKET *pkt, size_t len, unsigned char **allocbytes)
17
844k
{
18
844k
    if (!WPACKET_reserve_bytes(pkt, len, allocbytes))
19
0
        return 0;
20
21
844k
    pkt->written += len;
22
844k
    pkt->curr += len;
23
844k
    return 1;
24
844k
}
25
26
int WPACKET_sub_allocate_bytes__(WPACKET *pkt, size_t len,
27
                                 unsigned char **allocbytes, size_t lenbytes)
28
0
{
29
0
    if (!WPACKET_start_sub_packet_len__(pkt, lenbytes)
30
0
            || !WPACKET_allocate_bytes(pkt, len, allocbytes)
31
0
            || !WPACKET_close(pkt))
32
0
        return 0;
33
34
0
    return 1;
35
0
}
36
37
1.19M
#define GETBUF(p)   (((p)->staticbuf != NULL) \
38
1.19M
                     ? (p)->staticbuf : (unsigned char *)(p)->buf->data)
39
40
int WPACKET_reserve_bytes(WPACKET *pkt, size_t len, unsigned char **allocbytes)
41
859k
{
42
    /* Internal API, so should not fail */
43
859k
    if (!ossl_assert(pkt->subs != NULL && len != 0))
44
0
        return 0;
45
46
859k
    if (pkt->maxsize - pkt->written < len)
47
0
        return 0;
48
49
859k
    if (pkt->staticbuf == NULL && (pkt->buf->length - pkt->written < len)) {
50
0
        size_t newlen;
51
0
        size_t reflen;
52
53
0
        reflen = (len > pkt->buf->length) ? len : pkt->buf->length;
54
55
0
        if (reflen > SIZE_MAX / 2) {
56
0
            newlen = SIZE_MAX;
57
0
        } else {
58
0
            newlen = reflen * 2;
59
0
            if (newlen < DEFAULT_BUF_SIZE)
60
0
                newlen = DEFAULT_BUF_SIZE;
61
0
        }
62
0
        if (BUF_MEM_grow(pkt->buf, newlen) == 0)
63
0
            return 0;
64
0
    }
65
859k
    if (allocbytes != NULL)
66
844k
        *allocbytes = WPACKET_get_curr(pkt);
67
68
859k
    return 1;
69
859k
}
70
71
int WPACKET_sub_reserve_bytes__(WPACKET *pkt, size_t len,
72
                                unsigned char **allocbytes, size_t lenbytes)
73
0
{
74
0
    if (!WPACKET_reserve_bytes(pkt, lenbytes + len, allocbytes))
75
0
        return 0;
76
77
0
    *allocbytes += lenbytes;
78
79
0
    return 1;
80
0
}
81
82
static size_t maxmaxsize(size_t lenbytes)
83
14.9k
{
84
14.9k
    if (lenbytes >= sizeof(size_t) || lenbytes == 0)
85
14.9k
        return SIZE_MAX;
86
87
0
    return ((size_t)1 << (lenbytes * 8)) - 1 + lenbytes;
88
14.9k
}
89
90
static int wpacket_intern_init_len(WPACKET *pkt, size_t lenbytes)
91
14.9k
{
92
14.9k
    unsigned char *lenchars;
93
94
14.9k
    pkt->curr = 0;
95
14.9k
    pkt->written = 0;
96
97
14.9k
    if ((pkt->subs = OPENSSL_zalloc(sizeof(*pkt->subs))) == NULL) {
98
0
        SSLerr(SSL_F_WPACKET_INTERN_INIT_LEN, ERR_R_MALLOC_FAILURE);
99
0
        return 0;
100
0
    }
101
102
14.9k
    if (lenbytes == 0)
103
14.9k
        return 1;
104
105
0
    pkt->subs->pwritten = lenbytes;
106
0
    pkt->subs->lenbytes = lenbytes;
107
108
0
    if (!WPACKET_allocate_bytes(pkt, lenbytes, &lenchars)) {
109
0
        OPENSSL_free(pkt->subs);
110
0
        pkt->subs = NULL;
111
0
        return 0;
112
0
    }
113
0
    pkt->subs->packet_len = lenchars - GETBUF(pkt);
114
115
0
    return 1;
116
0
}
117
118
int WPACKET_init_static_len(WPACKET *pkt, unsigned char *buf, size_t len,
119
                            size_t lenbytes)
120
7.47k
{
121
7.47k
    size_t max = maxmaxsize(lenbytes);
122
123
    /* Internal API, so should not fail */
124
7.47k
    if (!ossl_assert(buf != NULL && len > 0))
125
0
        return 0;
126
127
7.47k
    pkt->staticbuf = buf;
128
7.47k
    pkt->buf = NULL;
129
7.47k
    pkt->maxsize = (max < len) ? max : len;
130
131
7.47k
    return wpacket_intern_init_len(pkt, lenbytes);
132
7.47k
}
133
134
int WPACKET_init_len(WPACKET *pkt, BUF_MEM *buf, size_t lenbytes)
135
7.47k
{
136
    /* Internal API, so should not fail */
137
7.47k
    if (!ossl_assert(buf != NULL))
138
0
        return 0;
139
140
7.47k
    pkt->staticbuf = NULL;
141
7.47k
    pkt->buf = buf;
142
7.47k
    pkt->maxsize = maxmaxsize(lenbytes);
143
144
7.47k
    return wpacket_intern_init_len(pkt, lenbytes);
145
7.47k
}
146
147
int WPACKET_init(WPACKET *pkt, BUF_MEM *buf)
148
7.47k
{
149
7.47k
    return WPACKET_init_len(pkt, buf, 0);
150
7.47k
}
151
152
int WPACKET_set_flags(WPACKET *pkt, unsigned int flags)
153
7.47k
{
154
    /* Internal API, so should not fail */
155
7.47k
    if (!ossl_assert(pkt->subs != NULL))
156
0
        return 0;
157
158
7.47k
    pkt->subs->flags = flags;
159
160
7.47k
    return 1;
161
7.47k
}
162
163
/* Store the |value| of length |len| at location |data| */
164
static int put_value(unsigned char *data, size_t value, size_t len)
165
792k
{
166
2.31M
    for (data += len - 1; len > 0; len--) {
167
1.51M
        *data = (unsigned char)(value & 0xff);
168
1.51M
        data--;
169
1.51M
        value >>= 8;
170
1.51M
    }
171
172
    /* Check whether we could fit the value in the assigned number of bytes */
173
792k
    if (value > 0)
174
0
        return 0;
175
176
792k
    return 1;
177
792k
}
178
179
180
/*
181
 * Internal helper function used by WPACKET_close(), WPACKET_finish() and
182
 * WPACKET_fill_lengths() to close a sub-packet and write out its length if
183
 * necessary. If |doclose| is 0 then it goes through the motions of closing
184
 * (i.e. it fills in all the lengths), but doesn't actually close anything.
185
 */
186
static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
187
186k
{
188
186k
    size_t packlen = pkt->written - sub->pwritten;
189
190
186k
    if (packlen == 0
191
7.47k
            && (sub->flags & WPACKET_FLAGS_NON_ZERO_LENGTH) != 0)
192
0
        return 0;
193
194
186k
    if (packlen == 0
195
7.47k
            && sub->flags & WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH) {
196
        /* We can't handle this case. Return an error */
197
0
        if (!doclose)
198
0
            return 0;
199
200
        /* Deallocate any bytes allocated for the length of the WPACKET */
201
0
        if ((pkt->curr - sub->lenbytes) == sub->packet_len) {
202
0
            pkt->written -= sub->lenbytes;
203
0
            pkt->curr -= sub->lenbytes;
204
0
        }
205
206
        /* Don't write out the packet length */
207
0
        sub->packet_len = 0;
208
0
        sub->lenbytes = 0;
209
0
    }
210
211
    /* Write out the WPACKET length if needed */
212
186k
    if (sub->lenbytes > 0
213
171k
                && !put_value(&GETBUF(pkt)[sub->packet_len], packlen,
214
171k
                              sub->lenbytes))
215
0
            return 0;
216
217
186k
    if (doclose) {
218
186k
        pkt->subs = sub->parent;
219
186k
        OPENSSL_free(sub);
220
186k
    }
221
222
186k
    return 1;
223
186k
}
224
225
int WPACKET_fill_lengths(WPACKET *pkt)
226
0
{
227
0
    WPACKET_SUB *sub;
228
229
0
    if (!ossl_assert(pkt->subs != NULL))
230
0
        return 0;
231
232
0
    for (sub = pkt->subs; sub != NULL; sub = sub->parent) {
233
0
        if (!wpacket_intern_close(pkt, sub, 0))
234
0
            return 0;
235
0
    }
236
237
0
    return 1;
238
0
}
239
240
int WPACKET_close(WPACKET *pkt)
241
171k
{
242
    /*
243
     * Internal API, so should not fail - but we do negative testing of this
244
     * so no assert (otherwise the tests fail)
245
     */
246
171k
    if (pkt->subs == NULL || pkt->subs->parent == NULL)
247
0
        return 0;
248
249
171k
    return wpacket_intern_close(pkt, pkt->subs, 1);
250
171k
}
251
252
int WPACKET_finish(WPACKET *pkt)
253
14.9k
{
254
14.9k
    int ret;
255
256
    /*
257
     * Internal API, so should not fail - but we do negative testing of this
258
     * so no assert (otherwise the tests fail)
259
     */
260
14.9k
    if (pkt->subs == NULL || pkt->subs->parent != NULL)
261
0
        return 0;
262
263
14.9k
    ret = wpacket_intern_close(pkt, pkt->subs, 1);
264
14.9k
    if (ret) {
265
14.9k
        OPENSSL_free(pkt->subs);
266
14.9k
        pkt->subs = NULL;
267
14.9k
    }
268
269
14.9k
    return ret;
270
14.9k
}
271
272
int WPACKET_start_sub_packet_len__(WPACKET *pkt, size_t lenbytes)
273
171k
{
274
171k
    WPACKET_SUB *sub;
275
171k
    unsigned char *lenchars;
276
277
    /* Internal API, so should not fail */
278
171k
    if (!ossl_assert(pkt->subs != NULL))
279
0
        return 0;
280
281
171k
    if ((sub = OPENSSL_zalloc(sizeof(*sub))) == NULL) {
282
0
        SSLerr(SSL_F_WPACKET_START_SUB_PACKET_LEN__, ERR_R_MALLOC_FAILURE);
283
0
        return 0;
284
0
    }
285
286
171k
    sub->parent = pkt->subs;
287
171k
    pkt->subs = sub;
288
171k
    sub->pwritten = pkt->written + lenbytes;
289
171k
    sub->lenbytes = lenbytes;
290
291
171k
    if (lenbytes == 0) {
292
0
        sub->packet_len = 0;
293
0
        return 1;
294
0
    }
295
296
171k
    if (!WPACKET_allocate_bytes(pkt, lenbytes, &lenchars))
297
0
        return 0;
298
    /* Convert to an offset in case the underlying BUF_MEM gets realloc'd */
299
171k
    sub->packet_len = lenchars - GETBUF(pkt);
300
301
171k
    return 1;
302
171k
}
303
304
int WPACKET_start_sub_packet(WPACKET *pkt)
305
0
{
306
0
    return WPACKET_start_sub_packet_len__(pkt, 0);
307
0
}
308
309
int WPACKET_put_bytes__(WPACKET *pkt, unsigned int val, size_t size)
310
620k
{
311
620k
    unsigned char *data;
312
313
    /* Internal API, so should not fail */
314
620k
    if (!ossl_assert(size <= sizeof(unsigned int))
315
620k
            || !WPACKET_allocate_bytes(pkt, size, &data)
316
620k
            || !put_value(data, val, size))
317
0
        return 0;
318
319
620k
    return 1;
320
620k
}
321
322
int WPACKET_set_max_size(WPACKET *pkt, size_t maxsize)
323
0
{
324
0
    WPACKET_SUB *sub;
325
0
    size_t lenbytes;
326
327
    /* Internal API, so should not fail */
328
0
    if (!ossl_assert(pkt->subs != NULL))
329
0
        return 0;
330
331
    /* Find the WPACKET_SUB for the top level */
332
0
    for (sub = pkt->subs; sub->parent != NULL; sub = sub->parent)
333
0
        continue;
334
335
0
    lenbytes = sub->lenbytes;
336
0
    if (lenbytes == 0)
337
0
        lenbytes = sizeof(pkt->maxsize);
338
339
0
    if (maxmaxsize(lenbytes) < maxsize || maxsize < pkt->written)
340
0
        return 0;
341
342
0
    pkt->maxsize = maxsize;
343
344
0
    return 1;
345
0
}
346
347
int WPACKET_memset(WPACKET *pkt, int ch, size_t len)
348
0
{
349
0
    unsigned char *dest;
350
351
0
    if (len == 0)
352
0
        return 1;
353
354
0
    if (!WPACKET_allocate_bytes(pkt, len, &dest))
355
0
        return 0;
356
357
0
    memset(dest, ch, len);
358
359
0
    return 1;
360
0
}
361
362
int WPACKET_memcpy(WPACKET *pkt, const void *src, size_t len)
363
52.3k
{
364
52.3k
    unsigned char *dest;
365
366
52.3k
    if (len == 0)
367
7.47k
        return 1;
368
369
44.8k
    if (!WPACKET_allocate_bytes(pkt, len, &dest))
370
0
        return 0;
371
372
44.8k
    memcpy(dest, src, len);
373
374
44.8k
    return 1;
375
44.8k
}
376
377
int WPACKET_sub_memcpy__(WPACKET *pkt, const void *src, size_t len,
378
                         size_t lenbytes)
379
29.9k
{
380
29.9k
    if (!WPACKET_start_sub_packet_len__(pkt, lenbytes)
381
29.9k
            || !WPACKET_memcpy(pkt, src, len)
382
29.9k
            || !WPACKET_close(pkt))
383
0
        return 0;
384
385
29.9k
    return 1;
386
29.9k
}
387
388
int WPACKET_get_total_written(WPACKET *pkt, size_t *written)
389
0
{
390
    /* Internal API, so should not fail */
391
0
    if (!ossl_assert(written != NULL))
392
0
        return 0;
393
394
0
    *written = pkt->written;
395
396
0
    return 1;
397
0
}
398
399
int WPACKET_get_length(WPACKET *pkt, size_t *len)
400
29.9k
{
401
    /* Internal API, so should not fail */
402
29.9k
    if (!ossl_assert(pkt->subs != NULL && len != NULL))
403
0
        return 0;
404
405
29.9k
    *len = pkt->written - pkt->subs->pwritten;
406
407
29.9k
    return 1;
408
29.9k
}
409
410
unsigned char *WPACKET_get_curr(WPACKET *pkt)
411
852k
{
412
852k
    return GETBUF(pkt) + pkt->curr;
413
852k
}
414
415
void WPACKET_cleanup(WPACKET *pkt)
416
0
{
417
0
    WPACKET_SUB *sub, *parent;
418
419
0
    for (sub = pkt->subs; sub != NULL; sub = parent) {
420
0
        parent = sub->parent;
421
0
        OPENSSL_free(sub);
422
0
    }
423
    pkt->subs = NULL;
424
0
}