/src/openssl30/crypto/x509/x509_att.c
Line  | Count  | Source (jump to first uncovered line)  | 
1  |  | /*  | 
2  |  |  * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.  | 
3  |  |  *  | 
4  |  |  * Licensed under the Apache License 2.0 (the "License").  You may not use  | 
5  |  |  * this file except in compliance with the License.  You can obtain a copy  | 
6  |  |  * in the file LICENSE in the source distribution or at  | 
7  |  |  * https://www.openssl.org/source/license.html  | 
8  |  |  */  | 
9  |  |  | 
10  |  | #include <stdio.h>  | 
11  |  | #include "internal/cryptlib.h"  | 
12  |  | #include <openssl/safestack.h>  | 
13  |  | #include <openssl/asn1.h>  | 
14  |  | #include <openssl/objects.h>  | 
15  |  | #include <openssl/evp.h>  | 
16  |  | #include <openssl/x509.h>  | 
17  |  | #include <openssl/x509v3.h>  | 
18  |  | #include "crypto/x509.h"  | 
19  |  | #include "x509_local.h"  | 
20  |  |  | 
21  |  | int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x)  | 
22  | 0  | { | 
23  | 0  |     return sk_X509_ATTRIBUTE_num(x);  | 
24  | 0  | }  | 
25  |  |  | 
26  |  | int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,  | 
27  |  |                            int lastpos)  | 
28  | 0  | { | 
29  | 0  |     const ASN1_OBJECT *obj = OBJ_nid2obj(nid);  | 
30  |  | 
  | 
31  | 0  |     if (obj == NULL)  | 
32  | 0  |         return -2;  | 
33  | 0  |     return X509at_get_attr_by_OBJ(x, obj, lastpos);  | 
34  | 0  | }  | 
35  |  |  | 
36  |  | int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,  | 
37  |  |                            const ASN1_OBJECT *obj, int lastpos)  | 
38  | 0  | { | 
39  | 0  |     int n;  | 
40  | 0  |     X509_ATTRIBUTE *ex;  | 
41  |  | 
  | 
42  | 0  |     if (sk == NULL)  | 
43  | 0  |         return -1;  | 
44  | 0  |     lastpos++;  | 
45  | 0  |     if (lastpos < 0)  | 
46  | 0  |         lastpos = 0;  | 
47  | 0  |     n = sk_X509_ATTRIBUTE_num(sk);  | 
48  | 0  |     for (; lastpos < n; lastpos++) { | 
49  | 0  |         ex = sk_X509_ATTRIBUTE_value(sk, lastpos);  | 
50  | 0  |         if (OBJ_cmp(ex->object, obj) == 0)  | 
51  | 0  |             return lastpos;  | 
52  | 0  |     }  | 
53  | 0  |     return -1;  | 
54  | 0  | }  | 
55  |  |  | 
56  |  | X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *x, int loc)  | 
57  | 0  | { | 
58  | 0  |     if (x == NULL || sk_X509_ATTRIBUTE_num(x) <= loc || loc < 0)  | 
59  | 0  |         return NULL;  | 
60  |  |  | 
61  | 0  |     return sk_X509_ATTRIBUTE_value(x, loc);  | 
62  | 0  | }  | 
63  |  |  | 
64  |  | X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) *x, int loc)  | 
65  | 0  | { | 
66  | 0  |     X509_ATTRIBUTE *ret;  | 
67  |  | 
  | 
68  | 0  |     if (x == NULL || sk_X509_ATTRIBUTE_num(x) <= loc || loc < 0)  | 
69  | 0  |         return NULL;  | 
70  | 0  |     ret = sk_X509_ATTRIBUTE_delete(x, loc);  | 
71  | 0  |     return ret;  | 
72  | 0  | }  | 
73  |  |  | 
74  |  | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) **x,  | 
75  |  |                                            X509_ATTRIBUTE *attr)  | 
76  | 0  | { | 
77  | 0  |     X509_ATTRIBUTE *new_attr = NULL;  | 
78  | 0  |     STACK_OF(X509_ATTRIBUTE) *sk = NULL;  | 
79  |  | 
  | 
80  | 0  |     if (x == NULL) { | 
81  | 0  |         ERR_raise(ERR_LIB_X509, ERR_R_PASSED_NULL_PARAMETER);  | 
82  | 0  |         return NULL;  | 
83  | 0  |     }  | 
84  |  |  | 
85  | 0  |     if (*x != NULL && X509at_get_attr_by_OBJ(*x, attr->object, -1) != -1) { | 
86  | 0  |         ERR_raise(ERR_LIB_X509, X509_R_DUPLICATE_ATTRIBUTE);  | 
87  | 0  |         return NULL;  | 
88  | 0  |     }  | 
89  |  |  | 
90  | 0  |     if (*x == NULL) { | 
91  | 0  |         if ((sk = sk_X509_ATTRIBUTE_new_null()) == NULL)  | 
92  | 0  |             goto err;  | 
93  | 0  |     } else { | 
94  | 0  |         sk = *x;  | 
95  | 0  |     }  | 
96  |  |  | 
97  | 0  |     if ((new_attr = X509_ATTRIBUTE_dup(attr)) == NULL)  | 
98  | 0  |         goto err2;  | 
99  | 0  |     if (!sk_X509_ATTRIBUTE_push(sk, new_attr))  | 
100  | 0  |         goto err;  | 
101  | 0  |     if (*x == NULL)  | 
102  | 0  |         *x = sk;  | 
103  | 0  |     return sk;  | 
104  | 0  |  err:  | 
105  | 0  |     ERR_raise(ERR_LIB_X509, ERR_R_MALLOC_FAILURE);  | 
106  | 0  |  err2:  | 
107  | 0  |     X509_ATTRIBUTE_free(new_attr);  | 
108  | 0  |     if (*x == NULL)  | 
109  | 0  |         sk_X509_ATTRIBUTE_free(sk);  | 
110  | 0  |     return NULL;  | 
111  | 0  | }  | 
112  |  |  | 
113  |  | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)  | 
114  |  |                                                   **x, const ASN1_OBJECT *obj,  | 
115  |  |                                                   int type,  | 
116  |  |                                                   const unsigned char *bytes,  | 
117  |  |                                                   int len)  | 
118  | 0  | { | 
119  | 0  |     X509_ATTRIBUTE *attr;  | 
120  | 0  |     STACK_OF(X509_ATTRIBUTE) *ret;  | 
121  | 0  |     attr = X509_ATTRIBUTE_create_by_OBJ(NULL, obj, type, bytes, len);  | 
122  | 0  |     if (!attr)  | 
123  | 0  |         return 0;  | 
124  | 0  |     ret = X509at_add1_attr(x, attr);  | 
125  | 0  |     X509_ATTRIBUTE_free(attr);  | 
126  | 0  |     return ret;  | 
127  | 0  | }  | 
128  |  |  | 
129  |  | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)  | 
130  |  |                                                   **x, int nid, int type,  | 
131  |  |                                                   const unsigned char *bytes,  | 
132  |  |                                                   int len)  | 
133  | 0  | { | 
134  | 0  |     X509_ATTRIBUTE *attr;  | 
135  | 0  |     STACK_OF(X509_ATTRIBUTE) *ret;  | 
136  | 0  |     attr = X509_ATTRIBUTE_create_by_NID(NULL, nid, type, bytes, len);  | 
137  | 0  |     if (!attr)  | 
138  | 0  |         return 0;  | 
139  | 0  |     ret = X509at_add1_attr(x, attr);  | 
140  | 0  |     X509_ATTRIBUTE_free(attr);  | 
141  | 0  |     return ret;  | 
142  | 0  | }  | 
143  |  |  | 
144  |  | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)  | 
145  |  |                                                   **x, const char *attrname,  | 
146  |  |                                                   int type,  | 
147  |  |                                                   const unsigned char *bytes,  | 
148  |  |                                                   int len)  | 
149  | 0  | { | 
150  | 0  |     X509_ATTRIBUTE *attr;  | 
151  | 0  |     STACK_OF(X509_ATTRIBUTE) *ret;  | 
152  | 0  |     attr = X509_ATTRIBUTE_create_by_txt(NULL, attrname, type, bytes, len);  | 
153  | 0  |     if (!attr)  | 
154  | 0  |         return 0;  | 
155  | 0  |     ret = X509at_add1_attr(x, attr);  | 
156  | 0  |     X509_ATTRIBUTE_free(attr);  | 
157  | 0  |     return ret;  | 
158  | 0  | }  | 
159  |  |  | 
160  |  | void *X509at_get0_data_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *x,  | 
161  |  |                               const ASN1_OBJECT *obj, int lastpos, int type)  | 
162  | 0  | { | 
163  | 0  |     int i;  | 
164  | 0  |     X509_ATTRIBUTE *at;  | 
165  | 0  |     i = X509at_get_attr_by_OBJ(x, obj, lastpos);  | 
166  | 0  |     if (i == -1)  | 
167  | 0  |         return NULL;  | 
168  | 0  |     if ((lastpos <= -2) && (X509at_get_attr_by_OBJ(x, obj, i) != -1))  | 
169  | 0  |         return NULL;  | 
170  | 0  |     at = X509at_get_attr(x, i);  | 
171  | 0  |     if (lastpos <= -3 && (X509_ATTRIBUTE_count(at) != 1))  | 
172  | 0  |         return NULL;  | 
173  | 0  |     return X509_ATTRIBUTE_get0_data(at, 0, type, NULL);  | 
174  | 0  | }  | 
175  |  |  | 
176  |  | STACK_OF(X509_ATTRIBUTE) *ossl_x509at_dup(const STACK_OF(X509_ATTRIBUTE) *x)  | 
177  | 0  | { | 
178  | 0  |     int i, n;  | 
179  | 0  |     STACK_OF(X509_ATTRIBUTE) *sk = NULL;  | 
180  |  | 
  | 
181  | 0  |     n = sk_X509_ATTRIBUTE_num(x);  | 
182  | 0  |     for (i = 0; i < n; ++i) { | 
183  | 0  |         X509_ATTRIBUTE *attr = sk_X509_ATTRIBUTE_value(x, i);  | 
184  |  | 
  | 
185  | 0  |         if (X509at_add1_attr(&sk, attr) == NULL) { | 
186  | 0  |             sk_X509_ATTRIBUTE_pop_free(sk, X509_ATTRIBUTE_free);  | 
187  | 0  |             return NULL;  | 
188  | 0  |         }  | 
189  | 0  |     }  | 
190  | 0  |     return sk;  | 
191  | 0  | }  | 
192  |  |  | 
193  |  | X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE **attr, int nid,  | 
194  |  |                                              int atrtype, const void *data,  | 
195  |  |                                              int len)  | 
196  | 0  | { | 
197  | 0  |     ASN1_OBJECT *obj;  | 
198  | 0  |     X509_ATTRIBUTE *ret;  | 
199  |  | 
  | 
200  | 0  |     obj = OBJ_nid2obj(nid);  | 
201  | 0  |     if (obj == NULL) { | 
202  | 0  |         ERR_raise(ERR_LIB_X509, X509_R_UNKNOWN_NID);  | 
203  | 0  |         return NULL;  | 
204  | 0  |     }  | 
205  | 0  |     ret = X509_ATTRIBUTE_create_by_OBJ(attr, obj, atrtype, data, len);  | 
206  | 0  |     if (ret == NULL)  | 
207  | 0  |         ASN1_OBJECT_free(obj);  | 
208  | 0  |     return ret;  | 
209  | 0  | }  | 
210  |  |  | 
211  |  | X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE **attr,  | 
212  |  |                                              const ASN1_OBJECT *obj,  | 
213  |  |                                              int atrtype, const void *data,  | 
214  |  |                                              int len)  | 
215  | 0  | { | 
216  | 0  |     X509_ATTRIBUTE *ret;  | 
217  |  | 
  | 
218  | 0  |     if ((attr == NULL) || (*attr == NULL)) { | 
219  | 0  |         if ((ret = X509_ATTRIBUTE_new()) == NULL) { | 
220  | 0  |             ERR_raise(ERR_LIB_X509, ERR_R_MALLOC_FAILURE);  | 
221  | 0  |             return NULL;  | 
222  | 0  |         }  | 
223  | 0  |     } else  | 
224  | 0  |         ret = *attr;  | 
225  |  |  | 
226  | 0  |     if (!X509_ATTRIBUTE_set1_object(ret, obj))  | 
227  | 0  |         goto err;  | 
228  | 0  |     if (!X509_ATTRIBUTE_set1_data(ret, atrtype, data, len))  | 
229  | 0  |         goto err;  | 
230  |  |  | 
231  | 0  |     if ((attr != NULL) && (*attr == NULL))  | 
232  | 0  |         *attr = ret;  | 
233  | 0  |     return ret;  | 
234  | 0  |  err:  | 
235  | 0  |     if ((attr == NULL) || (ret != *attr))  | 
236  | 0  |         X509_ATTRIBUTE_free(ret);  | 
237  | 0  |     return NULL;  | 
238  | 0  | }  | 
239  |  |  | 
240  |  | X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE **attr,  | 
241  |  |                                              const char *atrname, int type,  | 
242  |  |                                              const unsigned char *bytes,  | 
243  |  |                                              int len)  | 
244  | 0  | { | 
245  | 0  |     ASN1_OBJECT *obj;  | 
246  | 0  |     X509_ATTRIBUTE *nattr;  | 
247  |  | 
  | 
248  | 0  |     obj = OBJ_txt2obj(atrname, 0);  | 
249  | 0  |     if (obj == NULL) { | 
250  | 0  |         ERR_raise_data(ERR_LIB_X509, X509_R_INVALID_FIELD_NAME,  | 
251  | 0  |                        "name=%s", atrname);  | 
252  | 0  |         return NULL;  | 
253  | 0  |     }  | 
254  | 0  |     nattr = X509_ATTRIBUTE_create_by_OBJ(attr, obj, type, bytes, len);  | 
255  | 0  |     ASN1_OBJECT_free(obj);  | 
256  | 0  |     return nattr;  | 
257  | 0  | }  | 
258  |  |  | 
259  |  | int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr, const ASN1_OBJECT *obj)  | 
260  | 0  | { | 
261  | 0  |     if ((attr == NULL) || (obj == NULL))  | 
262  | 0  |         return 0;  | 
263  | 0  |     ASN1_OBJECT_free(attr->object);  | 
264  | 0  |     attr->object = OBJ_dup(obj);  | 
265  | 0  |     return attr->object != NULL;  | 
266  | 0  | }  | 
267  |  |  | 
268  |  | int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,  | 
269  |  |                              const void *data, int len)  | 
270  | 0  | { | 
271  | 0  |     ASN1_TYPE *ttmp = NULL;  | 
272  | 0  |     ASN1_STRING *stmp = NULL;  | 
273  | 0  |     int atype = 0;  | 
274  | 0  |     if (!attr)  | 
275  | 0  |         return 0;  | 
276  | 0  |     if (attrtype & MBSTRING_FLAG) { | 
277  | 0  |         stmp = ASN1_STRING_set_by_NID(NULL, data, len, attrtype,  | 
278  | 0  |                                       OBJ_obj2nid(attr->object));  | 
279  | 0  |         if (!stmp) { | 
280  | 0  |             ERR_raise(ERR_LIB_X509, ERR_R_ASN1_LIB);  | 
281  | 0  |             return 0;  | 
282  | 0  |         }  | 
283  | 0  |         atype = stmp->type;  | 
284  | 0  |     } else if (len != -1) { | 
285  | 0  |         if ((stmp = ASN1_STRING_type_new(attrtype)) == NULL)  | 
286  | 0  |             goto err;  | 
287  | 0  |         if (!ASN1_STRING_set(stmp, data, len))  | 
288  | 0  |             goto err;  | 
289  | 0  |         atype = attrtype;  | 
290  | 0  |     }  | 
291  |  |     /*  | 
292  |  |      * This is a bit naughty because the attribute should really have at  | 
293  |  |      * least one value but some types use and zero length SET and require  | 
294  |  |      * this.  | 
295  |  |      */  | 
296  | 0  |     if (attrtype == 0) { | 
297  | 0  |         ASN1_STRING_free(stmp);  | 
298  | 0  |         return 1;  | 
299  | 0  |     }  | 
300  | 0  |     if ((ttmp = ASN1_TYPE_new()) == NULL)  | 
301  | 0  |         goto err;  | 
302  | 0  |     if ((len == -1) && !(attrtype & MBSTRING_FLAG)) { | 
303  | 0  |         if (!ASN1_TYPE_set1(ttmp, attrtype, data))  | 
304  | 0  |             goto err;  | 
305  | 0  |     } else { | 
306  | 0  |         ASN1_TYPE_set(ttmp, atype, stmp);  | 
307  | 0  |         stmp = NULL;  | 
308  | 0  |     }  | 
309  | 0  |     if (!sk_ASN1_TYPE_push(attr->set, ttmp))  | 
310  | 0  |         goto err;  | 
311  | 0  |     return 1;  | 
312  | 0  |  err:  | 
313  | 0  |     ERR_raise(ERR_LIB_X509, ERR_R_MALLOC_FAILURE);  | 
314  | 0  |     ASN1_TYPE_free(ttmp);  | 
315  | 0  |     ASN1_STRING_free(stmp);  | 
316  | 0  |     return 0;  | 
317  | 0  | }  | 
318  |  |  | 
319  |  | int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr)  | 
320  | 0  | { | 
321  | 0  |     if (attr == NULL)  | 
322  | 0  |         return 0;  | 
323  | 0  |     return sk_ASN1_TYPE_num(attr->set);  | 
324  | 0  | }  | 
325  |  |  | 
326  |  | ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr)  | 
327  | 0  | { | 
328  | 0  |     if (attr == NULL)  | 
329  | 0  |         return NULL;  | 
330  | 0  |     return attr->object;  | 
331  | 0  | }  | 
332  |  |  | 
333  |  | void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx,  | 
334  |  |                                int atrtype, void *data)  | 
335  | 0  | { | 
336  | 0  |     ASN1_TYPE *ttmp;  | 
337  | 0  |     ttmp = X509_ATTRIBUTE_get0_type(attr, idx);  | 
338  | 0  |     if (!ttmp)  | 
339  | 0  |         return NULL;  | 
340  | 0  |     if (atrtype == V_ASN1_BOOLEAN  | 
341  | 0  |             || atrtype == V_ASN1_NULL  | 
342  | 0  |             || atrtype != ASN1_TYPE_get(ttmp)) { | 
343  | 0  |         ERR_raise(ERR_LIB_X509, X509_R_WRONG_TYPE);  | 
344  | 0  |         return NULL;  | 
345  | 0  |     }  | 
346  | 0  |     return ttmp->value.ptr;  | 
347  | 0  | }  | 
348  |  |  | 
349  |  | ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr, int idx)  | 
350  | 0  | { | 
351  | 0  |     if (attr == NULL)  | 
352  | 0  |         return NULL;  | 
353  | 0  |     return sk_ASN1_TYPE_value(attr->set, idx);  | 
354  | 0  | }  |