/src/openssl/crypto/trace.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2019-2023 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #include <stdio.h> |
11 | | #include <string.h> |
12 | | |
13 | | #include "internal/thread_once.h" |
14 | | #include <openssl/bio.h> |
15 | | #include <openssl/crypto.h> |
16 | | #include <openssl/trace.h> |
17 | | #include "internal/bio.h" |
18 | | #include "internal/nelem.h" |
19 | | #include "internal/refcount.h" |
20 | | #include "crypto/cryptlib.h" |
21 | | #include "crypto/ctype.h" |
22 | | |
23 | | #ifndef OPENSSL_NO_TRACE |
24 | | |
25 | | static CRYPTO_RWLOCK *trace_lock = NULL; |
26 | | |
27 | | static const BIO *current_channel = NULL; |
28 | | |
29 | | /*- |
30 | | * INTERNAL TRACE CHANNEL IMPLEMENTATION |
31 | | * |
32 | | * For our own flexibility, all trace categories are associated with a |
33 | | * BIO sink object, also called the trace channel. Instead of a BIO object, |
34 | | * the application can also provide a callback function, in which case an |
35 | | * internal trace channel is attached, which simply calls the registered |
36 | | * callback function. |
37 | | */ |
38 | | static int trace_write(BIO *b, const char *buf, |
39 | | size_t num, size_t *written); |
40 | | static int trace_puts(BIO *b, const char *str); |
41 | | static long trace_ctrl(BIO *channel, int cmd, long argl, void *argp); |
42 | | static int trace_free(BIO *b); |
43 | | |
44 | | static const BIO_METHOD trace_method = { |
45 | | BIO_TYPE_SOURCE_SINK, |
46 | | "trace", |
47 | | trace_write, |
48 | | NULL, /* old write */ |
49 | | NULL, /* read_ex */ |
50 | | NULL, /* read */ |
51 | | trace_puts, |
52 | | NULL, /* gets */ |
53 | | trace_ctrl, /* ctrl */ |
54 | | NULL, /* create */ |
55 | | trace_free, /* free */ |
56 | | NULL, /* callback_ctrl */ |
57 | | }; |
58 | | |
59 | | struct trace_data_st { |
60 | | OSSL_trace_cb callback; |
61 | | int category; |
62 | | void *data; |
63 | | }; |
64 | | |
65 | | static int trace_write(BIO *channel, |
66 | | const char *buf, size_t num, size_t *written) |
67 | | { |
68 | | struct trace_data_st *ctx = BIO_get_data(channel); |
69 | | size_t cnt = ctx->callback(buf, num, ctx->category, OSSL_TRACE_CTRL_WRITE, |
70 | | ctx->data); |
71 | | |
72 | | *written = cnt; |
73 | | return cnt != 0; |
74 | | } |
75 | | |
76 | | static int trace_puts(BIO *channel, const char *str) |
77 | | { |
78 | | size_t written; |
79 | | |
80 | | if (trace_write(channel, str, strlen(str), &written)) |
81 | | return (int)written; |
82 | | |
83 | | return EOF; |
84 | | } |
85 | | |
86 | | static long trace_ctrl(BIO *channel, int cmd, long argl, void *argp) |
87 | | { |
88 | | struct trace_data_st *ctx = BIO_get_data(channel); |
89 | | |
90 | | switch (cmd) { |
91 | | case OSSL_TRACE_CTRL_BEGIN: |
92 | | case OSSL_TRACE_CTRL_END: |
93 | | /* We know that the callback is likely to return 0 here */ |
94 | | ctx->callback("", 0, ctx->category, cmd, ctx->data); |
95 | | return 1; |
96 | | default: |
97 | | break; |
98 | | } |
99 | | return -2; /* Unsupported */ |
100 | | } |
101 | | |
102 | | static int trace_free(BIO *channel) |
103 | | { |
104 | | if (channel == NULL) |
105 | | return 0; |
106 | | OPENSSL_free(BIO_get_data(channel)); |
107 | | return 1; |
108 | | } |
109 | | #endif |
110 | | |
111 | | /*- |
112 | | * TRACE |
113 | | */ |
114 | | |
115 | | /* Helper struct and macro to get name string to number mapping */ |
116 | | struct trace_category_st { |
117 | | const char * const name; |
118 | | const int num; |
119 | | }; |
120 | | #define TRACE_CATEGORY_(name) { #name, OSSL_TRACE_CATEGORY_##name } |
121 | | |
122 | | static const struct trace_category_st |
123 | | trace_categories[OSSL_TRACE_CATEGORY_NUM] = { |
124 | | TRACE_CATEGORY_(ALL), |
125 | | TRACE_CATEGORY_(TRACE), |
126 | | TRACE_CATEGORY_(INIT), |
127 | | TRACE_CATEGORY_(TLS), |
128 | | TRACE_CATEGORY_(TLS_CIPHER), |
129 | | TRACE_CATEGORY_(CONF), |
130 | | TRACE_CATEGORY_(ENGINE_TABLE), |
131 | | TRACE_CATEGORY_(ENGINE_REF_COUNT), |
132 | | TRACE_CATEGORY_(PKCS5V2), |
133 | | TRACE_CATEGORY_(PKCS12_KEYGEN), |
134 | | TRACE_CATEGORY_(PKCS12_DECRYPT), |
135 | | TRACE_CATEGORY_(X509V3_POLICY), |
136 | | TRACE_CATEGORY_(BN_CTX), |
137 | | TRACE_CATEGORY_(CMP), |
138 | | TRACE_CATEGORY_(STORE), |
139 | | TRACE_CATEGORY_(DECODER), |
140 | | TRACE_CATEGORY_(ENCODER), |
141 | | TRACE_CATEGORY_(REF_COUNT), |
142 | | TRACE_CATEGORY_(HTTP), |
143 | | TRACE_CATEGORY_(PROVIDER), |
144 | | TRACE_CATEGORY_(QUERY), |
145 | | }; /* KEEP THIS LIST IN SYNC with #define OSSL_TRACE_CATEGORY_... in trace.h */ |
146 | | |
147 | | const char *OSSL_trace_get_category_name(int num) |
148 | 0 | { |
149 | 0 | if (num < 0 || (size_t)num >= OSSL_NELEM(trace_categories)) |
150 | 0 | return NULL; |
151 | | /* |
152 | | * Partial check that OSSL_TRACE_CATEGORY_... macros |
153 | | * are synced with trace_categories array |
154 | | */ |
155 | 0 | if (!ossl_assert(trace_categories[num].name != NULL) |
156 | 0 | || !ossl_assert(trace_categories[num].num == num)) |
157 | 0 | return NULL; |
158 | 0 | return trace_categories[num].name; |
159 | 0 | } |
160 | | |
161 | | int OSSL_trace_get_category_num(const char *name) |
162 | 0 | { |
163 | 0 | size_t i; |
164 | |
|
165 | 0 | if (name == NULL) |
166 | 0 | return -1; |
167 | | |
168 | 0 | for (i = 0; i < OSSL_NELEM(trace_categories); i++) |
169 | 0 | if (OPENSSL_strcasecmp(name, trace_categories[i].name) == 0) |
170 | 0 | return trace_categories[i].num; |
171 | | |
172 | 0 | return -1; /* not found */ |
173 | 0 | } |
174 | | |
175 | | #ifndef OPENSSL_NO_TRACE |
176 | | |
177 | | /* We use one trace channel for each trace category */ |
178 | | static struct { |
179 | | enum { SIMPLE_CHANNEL, CALLBACK_CHANNEL } type; |
180 | | BIO *bio; |
181 | | char *prefix; |
182 | | char *suffix; |
183 | | } trace_channels[OSSL_TRACE_CATEGORY_NUM] = { |
184 | | { 0, NULL, NULL, NULL }, |
185 | | }; |
186 | | |
187 | | #endif |
188 | | |
189 | | #ifndef OPENSSL_NO_TRACE |
190 | | |
191 | | enum { |
192 | | CHANNEL, |
193 | | PREFIX, |
194 | | SUFFIX |
195 | | }; |
196 | | |
197 | | static int trace_attach_cb(int category, int type, const void *data) |
198 | | { |
199 | | switch (type) { |
200 | | case CHANNEL: |
201 | | OSSL_TRACE2(TRACE, "Attach channel %p to category '%s'\n", |
202 | | data, trace_categories[category].name); |
203 | | break; |
204 | | case PREFIX: |
205 | | OSSL_TRACE2(TRACE, "Attach prefix \"%s\" to category '%s'\n", |
206 | | (const char *)data, trace_categories[category].name); |
207 | | break; |
208 | | case SUFFIX: |
209 | | OSSL_TRACE2(TRACE, "Attach suffix \"%s\" to category '%s'\n", |
210 | | (const char *)data, trace_categories[category].name); |
211 | | break; |
212 | | default: /* No clue */ |
213 | | break; |
214 | | } |
215 | | return 1; |
216 | | } |
217 | | |
218 | | static int trace_detach_cb(int category, int type, const void *data) |
219 | | { |
220 | | switch (type) { |
221 | | case CHANNEL: |
222 | | OSSL_TRACE2(TRACE, "Detach channel %p from category '%s'\n", |
223 | | data, trace_categories[category].name); |
224 | | break; |
225 | | case PREFIX: |
226 | | OSSL_TRACE2(TRACE, "Detach prefix \"%s\" from category '%s'\n", |
227 | | (const char *)data, trace_categories[category].name); |
228 | | break; |
229 | | case SUFFIX: |
230 | | OSSL_TRACE2(TRACE, "Detach suffix \"%s\" from category '%s'\n", |
231 | | (const char *)data, trace_categories[category].name); |
232 | | break; |
233 | | default: /* No clue */ |
234 | | break; |
235 | | } |
236 | | return 1; |
237 | | } |
238 | | |
239 | | static int do_ossl_trace_init(void); |
240 | | static CRYPTO_ONCE trace_inited = CRYPTO_ONCE_STATIC_INIT; |
241 | | DEFINE_RUN_ONCE_STATIC(ossl_trace_init) |
242 | | { |
243 | | return do_ossl_trace_init(); |
244 | | } |
245 | | |
246 | | static int set_trace_data(int category, int type, BIO **channel, |
247 | | const char **prefix, const char **suffix, |
248 | | int (*attach_cb)(int, int, const void *), |
249 | | int (*detach_cb)(int, int, const void *)) |
250 | | { |
251 | | BIO *curr_channel = NULL; |
252 | | char *curr_prefix = NULL; |
253 | | char *curr_suffix = NULL; |
254 | | |
255 | | /* Ensure do_ossl_trace_init() is called once */ |
256 | | if (!RUN_ONCE(&trace_inited, ossl_trace_init)) |
257 | | return 0; |
258 | | |
259 | | curr_channel = trace_channels[category].bio; |
260 | | curr_prefix = trace_channels[category].prefix; |
261 | | curr_suffix = trace_channels[category].suffix; |
262 | | |
263 | | /* Make sure to run the detach callback first on all data */ |
264 | | if (prefix != NULL && curr_prefix != NULL) { |
265 | | detach_cb(category, PREFIX, curr_prefix); |
266 | | } |
267 | | |
268 | | if (suffix != NULL && curr_suffix != NULL) { |
269 | | detach_cb(category, SUFFIX, curr_suffix); |
270 | | } |
271 | | |
272 | | if (channel != NULL && curr_channel != NULL) { |
273 | | detach_cb(category, CHANNEL, curr_channel); |
274 | | } |
275 | | |
276 | | /* After detach callbacks are done, clear data where appropriate */ |
277 | | if (prefix != NULL && curr_prefix != NULL) { |
278 | | OPENSSL_free(curr_prefix); |
279 | | trace_channels[category].prefix = NULL; |
280 | | } |
281 | | |
282 | | if (suffix != NULL && curr_suffix != NULL) { |
283 | | OPENSSL_free(curr_suffix); |
284 | | trace_channels[category].suffix = NULL; |
285 | | } |
286 | | |
287 | | if (channel != NULL && curr_channel != NULL) { |
288 | | BIO_free(curr_channel); |
289 | | trace_channels[category].type = 0; |
290 | | trace_channels[category].bio = NULL; |
291 | | } |
292 | | |
293 | | /* Before running callbacks are done, set new data where appropriate */ |
294 | | if (prefix != NULL && *prefix != NULL) { |
295 | | if ((curr_prefix = OPENSSL_strdup(*prefix)) == NULL) |
296 | | return 0; |
297 | | trace_channels[category].prefix = curr_prefix; |
298 | | } |
299 | | |
300 | | if (suffix != NULL && *suffix != NULL) { |
301 | | if ((curr_suffix = OPENSSL_strdup(*suffix)) == NULL) |
302 | | return 0; |
303 | | trace_channels[category].suffix = curr_suffix; |
304 | | } |
305 | | |
306 | | if (channel != NULL && *channel != NULL) { |
307 | | trace_channels[category].type = type; |
308 | | trace_channels[category].bio = *channel; |
309 | | /* |
310 | | * This must not be done before setting prefix/suffix, |
311 | | * as those may fail, and then the caller is mislead to free *channel. |
312 | | */ |
313 | | } |
314 | | |
315 | | /* Finally, run the attach callback on the new data */ |
316 | | if (channel != NULL && *channel != NULL) { |
317 | | attach_cb(category, CHANNEL, *channel); |
318 | | } |
319 | | |
320 | | if (prefix != NULL && *prefix != NULL) { |
321 | | attach_cb(category, PREFIX, *prefix); |
322 | | } |
323 | | |
324 | | if (suffix != NULL && *suffix != NULL) { |
325 | | attach_cb(category, SUFFIX, *suffix); |
326 | | } |
327 | | |
328 | | return 1; |
329 | | } |
330 | | |
331 | | static int do_ossl_trace_init(void) |
332 | | { |
333 | | trace_lock = CRYPTO_THREAD_lock_new(); |
334 | | return trace_lock != NULL; |
335 | | } |
336 | | |
337 | | #endif |
338 | | |
339 | | void ossl_trace_cleanup(void) |
340 | 133 | { |
341 | | #ifndef OPENSSL_NO_TRACE |
342 | | int category; |
343 | | BIO *channel = NULL; |
344 | | const char *prefix = NULL; |
345 | | const char *suffix = NULL; |
346 | | |
347 | | for (category = 0; category < OSSL_TRACE_CATEGORY_NUM; category++) { |
348 | | /* We force the TRACE category to be treated last */ |
349 | | if (category == OSSL_TRACE_CATEGORY_TRACE) |
350 | | continue; |
351 | | set_trace_data(category, 0, &channel, &prefix, &suffix, |
352 | | trace_attach_cb, trace_detach_cb); |
353 | | } |
354 | | set_trace_data(OSSL_TRACE_CATEGORY_TRACE, 0, &channel, |
355 | | &prefix, &suffix, |
356 | | trace_attach_cb, trace_detach_cb); |
357 | | CRYPTO_THREAD_lock_free(trace_lock); |
358 | | #endif |
359 | 133 | } |
360 | | |
361 | | int OSSL_trace_set_channel(int category, BIO *channel) |
362 | 133 | { |
363 | | #ifndef OPENSSL_NO_TRACE |
364 | | if (category >= 0 && category < OSSL_TRACE_CATEGORY_NUM) |
365 | | return set_trace_data(category, SIMPLE_CHANNEL, &channel, NULL, NULL, |
366 | | trace_attach_cb, trace_detach_cb); |
367 | | #endif |
368 | 133 | return 0; |
369 | 133 | } |
370 | | |
371 | | #ifndef OPENSSL_NO_TRACE |
372 | | static int trace_attach_w_callback_cb(int category, int type, const void *data) |
373 | | { |
374 | | switch (type) { |
375 | | case CHANNEL: |
376 | | OSSL_TRACE2(TRACE, |
377 | | "Attach channel %p to category '%s' (with callback)\n", |
378 | | data, trace_categories[category].name); |
379 | | break; |
380 | | case PREFIX: |
381 | | OSSL_TRACE2(TRACE, "Attach prefix \"%s\" to category '%s'\n", |
382 | | (const char *)data, trace_categories[category].name); |
383 | | break; |
384 | | case SUFFIX: |
385 | | OSSL_TRACE2(TRACE, "Attach suffix \"%s\" to category '%s'\n", |
386 | | (const char *)data, trace_categories[category].name); |
387 | | break; |
388 | | default: /* No clue */ |
389 | | break; |
390 | | } |
391 | | return 1; |
392 | | } |
393 | | #endif |
394 | | |
395 | | int OSSL_trace_set_callback(int category, OSSL_trace_cb callback, void *data) |
396 | 0 | { |
397 | | #ifndef OPENSSL_NO_TRACE |
398 | | BIO *channel = NULL; |
399 | | struct trace_data_st *trace_data = NULL; |
400 | | |
401 | | if (category < 0 || category >= OSSL_TRACE_CATEGORY_NUM) |
402 | | return 0; |
403 | | |
404 | | if (callback != NULL) { |
405 | | if ((channel = BIO_new(&trace_method)) == NULL |
406 | | || (trace_data = |
407 | | OPENSSL_zalloc(sizeof(struct trace_data_st))) == NULL) |
408 | | goto err; |
409 | | |
410 | | trace_data->callback = callback; |
411 | | trace_data->category = category; |
412 | | trace_data->data = data; |
413 | | |
414 | | BIO_set_data(channel, trace_data); |
415 | | } |
416 | | |
417 | | if (!set_trace_data(category, CALLBACK_CHANNEL, &channel, NULL, NULL, |
418 | | trace_attach_w_callback_cb, trace_detach_cb)) |
419 | | goto err; |
420 | | |
421 | | return 1; |
422 | | |
423 | | err: |
424 | | BIO_free(channel); |
425 | | OPENSSL_free(trace_data); |
426 | | #endif |
427 | |
|
428 | 0 | return 0; |
429 | 0 | } |
430 | | |
431 | | int OSSL_trace_set_prefix(int category, const char *prefix) |
432 | 0 | { |
433 | | #ifndef OPENSSL_NO_TRACE |
434 | | if (category >= 0 && category < OSSL_TRACE_CATEGORY_NUM) |
435 | | return set_trace_data(category, 0, NULL, &prefix, NULL, |
436 | | trace_attach_cb, trace_detach_cb); |
437 | | #endif |
438 | 0 | return 0; |
439 | 0 | } |
440 | | |
441 | | int OSSL_trace_set_suffix(int category, const char *suffix) |
442 | 0 | { |
443 | | #ifndef OPENSSL_NO_TRACE |
444 | | if (category >= 0 && category < OSSL_TRACE_CATEGORY_NUM) |
445 | | return set_trace_data(category, 0, NULL, NULL, &suffix, |
446 | | trace_attach_cb, trace_detach_cb); |
447 | | #endif |
448 | 0 | return 0; |
449 | 0 | } |
450 | | |
451 | | #ifndef OPENSSL_NO_TRACE |
452 | | static int ossl_trace_get_category(int category) |
453 | | { |
454 | | if (category < 0 || category >= OSSL_TRACE_CATEGORY_NUM) |
455 | | return -1; |
456 | | if (trace_channels[category].bio != NULL) |
457 | | return category; |
458 | | return OSSL_TRACE_CATEGORY_ALL; |
459 | | } |
460 | | #endif |
461 | | |
462 | | int OSSL_trace_enabled(int category) |
463 | 0 | { |
464 | 0 | int ret = 0; |
465 | | #ifndef OPENSSL_NO_TRACE |
466 | | category = ossl_trace_get_category(category); |
467 | | if (category >= 0) |
468 | | ret = trace_channels[category].bio != NULL; |
469 | | #endif |
470 | 0 | return ret; |
471 | 0 | } |
472 | | |
473 | | BIO *OSSL_trace_begin(int category) |
474 | 0 | { |
475 | 0 | BIO *channel = NULL; |
476 | | #ifndef OPENSSL_NO_TRACE |
477 | | char *prefix = NULL; |
478 | | |
479 | | category = ossl_trace_get_category(category); |
480 | | if (category < 0 || !OSSL_trace_enabled(category)) |
481 | | return NULL; |
482 | | |
483 | | channel = trace_channels[category].bio; |
484 | | prefix = trace_channels[category].prefix; |
485 | | |
486 | | if (channel != NULL) { |
487 | | if (!CRYPTO_THREAD_write_lock(trace_lock)) |
488 | | return NULL; |
489 | | current_channel = channel; |
490 | | switch (trace_channels[category].type) { |
491 | | case SIMPLE_CHANNEL: |
492 | | if (prefix != NULL) { |
493 | | (void)BIO_puts(channel, prefix); |
494 | | (void)BIO_puts(channel, "\n"); |
495 | | } |
496 | | break; |
497 | | case CALLBACK_CHANNEL: |
498 | | (void)BIO_ctrl(channel, OSSL_TRACE_CTRL_BEGIN, |
499 | | prefix == NULL ? 0 : strlen(prefix), prefix); |
500 | | break; |
501 | | } |
502 | | } |
503 | | #endif |
504 | 0 | return channel; |
505 | 0 | } |
506 | | |
507 | | void OSSL_trace_end(int category, BIO *channel) |
508 | 0 | { |
509 | | #ifndef OPENSSL_NO_TRACE |
510 | | char *suffix = NULL; |
511 | | |
512 | | category = ossl_trace_get_category(category); |
513 | | if (category < 0) |
514 | | return; |
515 | | suffix = trace_channels[category].suffix; |
516 | | if (channel != NULL |
517 | | && ossl_assert(channel == current_channel)) { |
518 | | (void)BIO_flush(channel); |
519 | | switch (trace_channels[category].type) { |
520 | | case SIMPLE_CHANNEL: |
521 | | if (suffix != NULL) { |
522 | | (void)BIO_puts(channel, suffix); |
523 | | (void)BIO_puts(channel, "\n"); |
524 | | } |
525 | | break; |
526 | | case CALLBACK_CHANNEL: |
527 | | (void)BIO_ctrl(channel, OSSL_TRACE_CTRL_END, |
528 | | suffix == NULL ? 0 : strlen(suffix), suffix); |
529 | | break; |
530 | | } |
531 | | current_channel = NULL; |
532 | | CRYPTO_THREAD_unlock(trace_lock); |
533 | | } |
534 | | #endif |
535 | 0 | } |
536 | | |
537 | | int OSSL_trace_string(BIO *out, int text, int full, |
538 | | const unsigned char *data, size_t size) |
539 | 0 | { |
540 | 0 | unsigned char buf[OSSL_TRACE_STRING_MAX + 1]; |
541 | 0 | int len, i; |
542 | |
|
543 | 0 | if (!full && size > OSSL_TRACE_STRING_MAX) { |
544 | 0 | BIO_printf(out, "[len %zu limited to %d]: ", |
545 | 0 | size, OSSL_TRACE_STRING_MAX); |
546 | 0 | len = OSSL_TRACE_STRING_MAX; |
547 | 0 | } else { |
548 | 0 | len = (int)size; |
549 | 0 | } |
550 | 0 | if (!text) { /* mask control characters while preserving newlines */ |
551 | 0 | for (i = 0; i < len; i++, data++) |
552 | 0 | buf[i] = (char)*data != '\n' && ossl_iscntrl((int)*data) |
553 | 0 | ? ' ' : *data; |
554 | 0 | if (len == 0 || data[-1] != '\n') |
555 | 0 | buf[len++] = '\n'; |
556 | 0 | data = buf; |
557 | 0 | } |
558 | 0 | return BIO_printf(out, "%.*s", len, data); |
559 | 0 | } |