Coverage Report

Created: 2023-09-25 06:45

/src/openssl30/crypto/bio/bf_buff.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include <stdio.h>
11
#include <errno.h>
12
#include "bio_local.h"
13
#include "internal/cryptlib.h"
14
15
static int buffer_write(BIO *h, const char *buf, int num);
16
static int buffer_read(BIO *h, char *buf, int size);
17
static int buffer_puts(BIO *h, const char *str);
18
static int buffer_gets(BIO *h, char *str, int size);
19
static long buffer_ctrl(BIO *h, int cmd, long arg1, void *arg2);
20
static int buffer_new(BIO *h);
21
static int buffer_free(BIO *data);
22
static long buffer_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
23
102k
#define DEFAULT_BUFFER_SIZE     4096
24
25
static const BIO_METHOD methods_buffer = {
26
    BIO_TYPE_BUFFER,
27
    "buffer",
28
    bwrite_conv,
29
    buffer_write,
30
    bread_conv,
31
    buffer_read,
32
    buffer_puts,
33
    buffer_gets,
34
    buffer_ctrl,
35
    buffer_new,
36
    buffer_free,
37
    buffer_callback_ctrl,
38
};
39
40
const BIO_METHOD *BIO_f_buffer(void)
41
39.2k
{
42
39.2k
    return &methods_buffer;
43
39.2k
}
44
45
static int buffer_new(BIO *bi)
46
39.2k
{
47
39.2k
    BIO_F_BUFFER_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
48
49
39.2k
    if (ctx == NULL)
50
0
        return 0;
51
39.2k
    ctx->ibuf_size = DEFAULT_BUFFER_SIZE;
52
39.2k
    ctx->ibuf = OPENSSL_malloc(DEFAULT_BUFFER_SIZE);
53
39.2k
    if (ctx->ibuf == NULL) {
54
0
        OPENSSL_free(ctx);
55
0
        return 0;
56
0
    }
57
39.2k
    ctx->obuf_size = DEFAULT_BUFFER_SIZE;
58
39.2k
    ctx->obuf = OPENSSL_malloc(DEFAULT_BUFFER_SIZE);
59
39.2k
    if (ctx->obuf == NULL) {
60
0
        OPENSSL_free(ctx->ibuf);
61
0
        OPENSSL_free(ctx);
62
0
        return 0;
63
0
    }
64
65
39.2k
    bi->init = 1;
66
39.2k
    bi->ptr = (char *)ctx;
67
39.2k
    bi->flags = 0;
68
39.2k
    return 1;
69
39.2k
}
70
71
static int buffer_free(BIO *a)
72
39.2k
{
73
39.2k
    BIO_F_BUFFER_CTX *b;
74
75
39.2k
    if (a == NULL)
76
0
        return 0;
77
39.2k
    b = (BIO_F_BUFFER_CTX *)a->ptr;
78
39.2k
    OPENSSL_free(b->ibuf);
79
39.2k
    OPENSSL_free(b->obuf);
80
39.2k
    OPENSSL_free(a->ptr);
81
39.2k
    a->ptr = NULL;
82
39.2k
    a->init = 0;
83
39.2k
    a->flags = 0;
84
39.2k
    return 1;
85
39.2k
}
86
87
static int buffer_read(BIO *b, char *out, int outl)
88
0
{
89
0
    int i, num = 0;
90
0
    BIO_F_BUFFER_CTX *ctx;
91
92
0
    if (out == NULL)
93
0
        return 0;
94
0
    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
95
96
0
    if ((ctx == NULL) || (b->next_bio == NULL))
97
0
        return 0;
98
0
    num = 0;
99
0
    BIO_clear_retry_flags(b);
100
101
0
 start:
102
0
    i = ctx->ibuf_len;
103
    /* If there is stuff left over, grab it */
104
0
    if (i != 0) {
105
0
        if (i > outl)
106
0
            i = outl;
107
0
        memcpy(out, &(ctx->ibuf[ctx->ibuf_off]), i);
108
0
        ctx->ibuf_off += i;
109
0
        ctx->ibuf_len -= i;
110
0
        num += i;
111
0
        if (outl == i)
112
0
            return num;
113
0
        outl -= i;
114
0
        out += i;
115
0
    }
116
117
    /*
118
     * We may have done a partial read. try to do more. We have nothing in
119
     * the buffer. If we get an error and have read some data, just return it
120
     * and let them retry to get the error again. copy direct to parent
121
     * address space
122
     */
123
0
    if (outl > ctx->ibuf_size) {
124
0
        for (;;) {
125
0
            i = BIO_read(b->next_bio, out, outl);
126
0
            if (i <= 0) {
127
0
                BIO_copy_next_retry(b);
128
0
                if (i < 0)
129
0
                    return ((num > 0) ? num : i);
130
0
                if (i == 0)
131
0
                    return num;
132
0
            }
133
0
            num += i;
134
0
            if (outl == i)
135
0
                return num;
136
0
            out += i;
137
0
            outl -= i;
138
0
        }
139
0
    }
140
    /* else */
141
142
    /* we are going to be doing some buffering */
143
0
    i = BIO_read(b->next_bio, ctx->ibuf, ctx->ibuf_size);
144
0
    if (i <= 0) {
145
0
        BIO_copy_next_retry(b);
146
0
        if (i < 0)
147
0
            return ((num > 0) ? num : i);
148
0
        if (i == 0)
149
0
            return num;
150
0
    }
151
0
    ctx->ibuf_off = 0;
152
0
    ctx->ibuf_len = i;
153
154
    /* Lets re-read using ourselves :-) */
155
0
    goto start;
156
0
}
157
158
static int buffer_write(BIO *b, const char *in, int inl)
159
98.8k
{
160
98.8k
    int i, num = 0;
161
98.8k
    BIO_F_BUFFER_CTX *ctx;
162
163
98.8k
    if ((in == NULL) || (inl <= 0))
164
0
        return 0;
165
98.8k
    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
166
98.8k
    if ((ctx == NULL) || (b->next_bio == NULL))
167
0
        return 0;
168
169
98.8k
    BIO_clear_retry_flags(b);
170
98.8k
 start:
171
98.8k
    i = ctx->obuf_size - (ctx->obuf_len + ctx->obuf_off);
172
    /* add to buffer and return */
173
98.8k
    if (i >= inl) {
174
98.8k
        memcpy(&(ctx->obuf[ctx->obuf_off + ctx->obuf_len]), in, inl);
175
98.8k
        ctx->obuf_len += inl;
176
98.8k
        return (num + inl);
177
98.8k
    }
178
    /* else */
179
    /* stuff already in buffer, so add to it first, then flush */
180
0
    if (ctx->obuf_len != 0) {
181
0
        if (i > 0) {            /* lets fill it up if we can */
182
0
            memcpy(&(ctx->obuf[ctx->obuf_off + ctx->obuf_len]), in, i);
183
0
            in += i;
184
0
            inl -= i;
185
0
            num += i;
186
0
            ctx->obuf_len += i;
187
0
        }
188
        /* we now have a full buffer needing flushing */
189
0
        for (;;) {
190
0
            i = BIO_write(b->next_bio, &(ctx->obuf[ctx->obuf_off]),
191
0
                          ctx->obuf_len);
192
0
            if (i <= 0) {
193
0
                BIO_copy_next_retry(b);
194
195
0
                if (i < 0)
196
0
                    return ((num > 0) ? num : i);
197
0
                if (i == 0)
198
0
                    return num;
199
0
            }
200
0
            ctx->obuf_off += i;
201
0
            ctx->obuf_len -= i;
202
0
            if (ctx->obuf_len == 0)
203
0
                break;
204
0
        }
205
0
    }
206
    /*
207
     * we only get here if the buffer has been flushed and we still have
208
     * stuff to write
209
     */
210
0
    ctx->obuf_off = 0;
211
212
    /* we now have inl bytes to write */
213
0
    while (inl >= ctx->obuf_size) {
214
0
        i = BIO_write(b->next_bio, in, inl);
215
0
        if (i <= 0) {
216
0
            BIO_copy_next_retry(b);
217
0
            if (i < 0)
218
0
                return ((num > 0) ? num : i);
219
0
            if (i == 0)
220
0
                return num;
221
0
        }
222
0
        num += i;
223
0
        in += i;
224
0
        inl -= i;
225
0
        if (inl == 0)
226
0
            return num;
227
0
    }
228
229
    /*
230
     * copy the rest into the buffer since we have only a small amount left
231
     */
232
0
    goto start;
233
0
}
234
235
static long buffer_ctrl(BIO *b, int cmd, long num, void *ptr)
236
56.0k
{
237
56.0k
    BIO *dbio;
238
56.0k
    BIO_F_BUFFER_CTX *ctx;
239
56.0k
    long ret = 1;
240
56.0k
    char *p1, *p2;
241
56.0k
    int r, i, *ip;
242
56.0k
    int ibs, obs;
243
244
56.0k
    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
245
246
56.0k
    switch (cmd) {
247
0
    case BIO_CTRL_RESET:
248
0
        ctx->ibuf_off = 0;
249
0
        ctx->ibuf_len = 0;
250
0
        ctx->obuf_off = 0;
251
0
        ctx->obuf_len = 0;
252
0
        if (b->next_bio == NULL)
253
0
            return 0;
254
0
        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
255
0
        break;
256
0
    case BIO_CTRL_EOF:
257
0
        if (ctx->ibuf_len > 0)
258
0
            return 0;
259
0
        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
260
0
        break;
261
0
    case BIO_CTRL_INFO:
262
0
        ret = (long)ctx->obuf_len;
263
0
        break;
264
0
    case BIO_C_GET_BUFF_NUM_LINES:
265
0
        ret = 0;
266
0
        p1 = ctx->ibuf;
267
0
        for (i = 0; i < ctx->ibuf_len; i++) {
268
0
            if (p1[ctx->ibuf_off + i] == '\n')
269
0
                ret++;
270
0
        }
271
0
        break;
272
0
    case BIO_CTRL_WPENDING:
273
0
        ret = (long)ctx->obuf_len;
274
0
        if (ret == 0) {
275
0
            if (b->next_bio == NULL)
276
0
                return 0;
277
0
            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
278
0
        }
279
0
        break;
280
0
    case BIO_CTRL_PENDING:
281
0
        ret = (long)ctx->ibuf_len;
282
0
        if (ret == 0) {
283
0
            if (b->next_bio == NULL)
284
0
                return 0;
285
0
            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
286
0
        }
287
0
        break;
288
0
    case BIO_C_SET_BUFF_READ_DATA:
289
0
        if (num > ctx->ibuf_size) {
290
0
            if (num <= 0)
291
0
                return 0;
292
0
            p1 = OPENSSL_malloc((size_t)num);
293
0
            if (p1 == NULL)
294
0
                goto malloc_error;
295
0
            OPENSSL_free(ctx->ibuf);
296
0
            ctx->ibuf = p1;
297
0
        }
298
0
        ctx->ibuf_off = 0;
299
0
        ctx->ibuf_len = (int)num;
300
0
        memcpy(ctx->ibuf, ptr, (int)num);
301
0
        ret = 1;
302
0
        break;
303
12.1k
    case BIO_C_SET_BUFF_SIZE:
304
12.1k
        if (ptr != NULL) {
305
12.1k
            ip = (int *)ptr;
306
12.1k
            if (*ip == 0) {
307
12.1k
                ibs = (int)num;
308
12.1k
                obs = ctx->obuf_size;
309
12.1k
            } else {            /* if (*ip == 1) */
310
311
0
                ibs = ctx->ibuf_size;
312
0
                obs = (int)num;
313
0
            }
314
12.1k
        } else {
315
0
            ibs = (int)num;
316
0
            obs = (int)num;
317
0
        }
318
12.1k
        p1 = ctx->ibuf;
319
12.1k
        p2 = ctx->obuf;
320
12.1k
        if ((ibs > DEFAULT_BUFFER_SIZE) && (ibs != ctx->ibuf_size)) {
321
0
            if (num <= 0)
322
0
                return 0;
323
0
            p1 = OPENSSL_malloc((size_t)num);
324
0
            if (p1 == NULL)
325
0
                goto malloc_error;
326
0
        }
327
12.1k
        if ((obs > DEFAULT_BUFFER_SIZE) && (obs != ctx->obuf_size)) {
328
0
            p2 = OPENSSL_malloc((size_t)num);
329
0
            if (p2 == NULL) {
330
0
                if (p1 != ctx->ibuf)
331
0
                    OPENSSL_free(p1);
332
0
                goto malloc_error;
333
0
            }
334
0
        }
335
12.1k
        if (ctx->ibuf != p1) {
336
0
            OPENSSL_free(ctx->ibuf);
337
0
            ctx->ibuf = p1;
338
0
            ctx->ibuf_off = 0;
339
0
            ctx->ibuf_len = 0;
340
0
            ctx->ibuf_size = ibs;
341
0
        }
342
12.1k
        if (ctx->obuf != p2) {
343
0
            OPENSSL_free(ctx->obuf);
344
0
            ctx->obuf = p2;
345
0
            ctx->obuf_off = 0;
346
0
            ctx->obuf_len = 0;
347
0
            ctx->obuf_size = obs;
348
0
        }
349
12.1k
        break;
350
0
    case BIO_C_DO_STATE_MACHINE:
351
0
        if (b->next_bio == NULL)
352
0
            return 0;
353
0
        BIO_clear_retry_flags(b);
354
0
        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
355
0
        BIO_copy_next_retry(b);
356
0
        break;
357
358
19.6k
    case BIO_CTRL_FLUSH:
359
19.6k
        if (b->next_bio == NULL)
360
0
            return 0;
361
19.6k
        if (ctx->obuf_len <= 0) {
362
0
            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
363
0
            break;
364
0
        }
365
366
39.3k
        for (;;) {
367
39.3k
            BIO_clear_retry_flags(b);
368
39.3k
            if (ctx->obuf_len > 0) {
369
19.6k
                r = BIO_write(b->next_bio,
370
19.6k
                              &(ctx->obuf[ctx->obuf_off]), ctx->obuf_len);
371
19.6k
                BIO_copy_next_retry(b);
372
19.6k
                if (r <= 0)
373
0
                    return (long)r;
374
19.6k
                ctx->obuf_off += r;
375
19.6k
                ctx->obuf_len -= r;
376
19.6k
            } else {
377
19.6k
                ctx->obuf_len = 0;
378
19.6k
                ctx->obuf_off = 0;
379
19.6k
                break;
380
19.6k
            }
381
39.3k
        }
382
19.6k
        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
383
19.6k
        break;
384
0
    case BIO_CTRL_DUP:
385
0
        dbio = (BIO *)ptr;
386
0
        if (BIO_set_read_buffer_size(dbio, ctx->ibuf_size) <= 0 ||
387
0
            BIO_set_write_buffer_size(dbio, ctx->obuf_size) <= 0)
388
0
            ret = 0;
389
0
        break;
390
0
    case BIO_CTRL_PEEK:
391
        /* Ensure there's stuff in the input buffer */
392
0
        {
393
0
            char fake_buf[1];
394
0
            (void)buffer_read(b, fake_buf, 0);
395
0
        }
396
0
        if (num > ctx->ibuf_len)
397
0
            num = ctx->ibuf_len;
398
0
        memcpy(ptr, &(ctx->ibuf[ctx->ibuf_off]), num);
399
0
        ret = num;
400
0
        break;
401
24.2k
    default:
402
24.2k
        if (b->next_bio == NULL)
403
0
            return 0;
404
24.2k
        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
405
24.2k
        break;
406
56.0k
    }
407
56.0k
    return ret;
408
0
 malloc_error:
409
0
    ERR_raise(ERR_LIB_BIO, ERR_R_MALLOC_FAILURE);
410
0
    return 0;
411
56.0k
}
412
413
static long buffer_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
414
0
{
415
0
    if (b->next_bio == NULL)
416
0
        return 0;
417
0
    return BIO_callback_ctrl(b->next_bio, cmd, fp);
418
0
}
419
420
static int buffer_gets(BIO *b, char *buf, int size)
421
0
{
422
0
    BIO_F_BUFFER_CTX *ctx;
423
0
    int num = 0, i, flag;
424
0
    char *p;
425
426
0
    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
427
0
    size--;                     /* reserve space for a '\0' */
428
0
    BIO_clear_retry_flags(b);
429
430
0
    for (;;) {
431
0
        if (ctx->ibuf_len > 0) {
432
0
            p = &(ctx->ibuf[ctx->ibuf_off]);
433
0
            flag = 0;
434
0
            for (i = 0; (i < ctx->ibuf_len) && (i < size); i++) {
435
0
                *(buf++) = p[i];
436
0
                if (p[i] == '\n') {
437
0
                    flag = 1;
438
0
                    i++;
439
0
                    break;
440
0
                }
441
0
            }
442
0
            num += i;
443
0
            size -= i;
444
0
            ctx->ibuf_len -= i;
445
0
            ctx->ibuf_off += i;
446
0
            if (flag || size == 0) {
447
0
                *buf = '\0';
448
0
                return num;
449
0
            }
450
0
        } else {                /* read another chunk */
451
452
0
            i = BIO_read(b->next_bio, ctx->ibuf, ctx->ibuf_size);
453
0
            if (i <= 0) {
454
0
                BIO_copy_next_retry(b);
455
0
                *buf = '\0';
456
0
                if (i < 0)
457
0
                    return ((num > 0) ? num : i);
458
0
                if (i == 0)
459
0
                    return num;
460
0
            }
461
0
            ctx->ibuf_len = i;
462
0
            ctx->ibuf_off = 0;
463
0
        }
464
0
    }
465
0
}
466
467
static int buffer_puts(BIO *b, const char *str)
468
0
{
469
0
    return buffer_write(b, str, strlen(str));
470
0
}