/src/openssl30/crypto/asn1/a_mbstr.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 1999-2024 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #include <stdio.h> |
11 | | #include "crypto/ctype.h" |
12 | | #include "internal/cryptlib.h" |
13 | | #include "internal/unicode.h" |
14 | | #include <openssl/asn1.h> |
15 | | |
16 | | static int traverse_string(const unsigned char *p, int len, int inform, |
17 | | int (*rfunc) (unsigned long value, void *in), |
18 | | void *arg); |
19 | | static int in_utf8(unsigned long value, void *arg); |
20 | | static int out_utf8(unsigned long value, void *arg); |
21 | | static int type_str(unsigned long value, void *arg); |
22 | | static int cpy_asc(unsigned long value, void *arg); |
23 | | static int cpy_bmp(unsigned long value, void *arg); |
24 | | static int cpy_univ(unsigned long value, void *arg); |
25 | | static int cpy_utf8(unsigned long value, void *arg); |
26 | | |
27 | | /* |
28 | | * These functions take a string in UTF8, ASCII or multibyte form and a mask |
29 | | * of permissible ASN1 string types. It then works out the minimal type |
30 | | * (using the order Numeric < Printable < IA5 < T61 < BMP < Universal < UTF8) |
31 | | * and creates a string of the correct type with the supplied data. Yes this is |
32 | | * horrible: it has to be :-( The 'ncopy' form checks minimum and maximum |
33 | | * size limits too. |
34 | | */ |
35 | | |
36 | | int ASN1_mbstring_copy(ASN1_STRING **out, const unsigned char *in, int len, |
37 | | int inform, unsigned long mask) |
38 | 11.0M | { |
39 | 11.0M | return ASN1_mbstring_ncopy(out, in, len, inform, mask, 0, 0); |
40 | 11.0M | } |
41 | | |
42 | | int ASN1_mbstring_ncopy(ASN1_STRING **out, const unsigned char *in, int len, |
43 | | int inform, unsigned long mask, |
44 | | long minsize, long maxsize) |
45 | 11.0M | { |
46 | 11.0M | int str_type; |
47 | 11.0M | int ret; |
48 | 11.0M | char free_out; |
49 | 11.0M | int outform, outlen = 0; |
50 | 11.0M | ASN1_STRING *dest; |
51 | 11.0M | unsigned char *p; |
52 | 11.0M | int nchar; |
53 | 11.0M | int (*cpyfunc) (unsigned long, void *) = NULL; |
54 | 11.0M | if (len == -1) |
55 | 0 | len = strlen((const char *)in); |
56 | 11.0M | if (!mask) |
57 | 0 | mask = DIRSTRING_TYPE; |
58 | 11.0M | if (len < 0) |
59 | 0 | return -1; |
60 | | |
61 | | /* First do a string check and work out the number of characters */ |
62 | 11.0M | switch (inform) { |
63 | | |
64 | 1.24M | case MBSTRING_BMP: |
65 | 1.24M | if (len & 1) { |
66 | 0 | ERR_raise(ERR_LIB_ASN1, ASN1_R_INVALID_BMPSTRING_LENGTH); |
67 | 0 | return -1; |
68 | 0 | } |
69 | 1.24M | nchar = len >> 1; |
70 | 1.24M | break; |
71 | | |
72 | 899k | case MBSTRING_UNIV: |
73 | 899k | if (len & 3) { |
74 | 0 | ERR_raise(ERR_LIB_ASN1, ASN1_R_INVALID_UNIVERSALSTRING_LENGTH); |
75 | 0 | return -1; |
76 | 0 | } |
77 | 899k | nchar = len >> 2; |
78 | 899k | break; |
79 | | |
80 | 1.23M | case MBSTRING_UTF8: |
81 | 1.23M | nchar = 0; |
82 | | /* This counts the characters and does utf8 syntax checking */ |
83 | 1.23M | ret = traverse_string(in, len, MBSTRING_UTF8, in_utf8, &nchar); |
84 | 1.23M | if (ret < 0) { |
85 | 25.6k | ERR_raise(ERR_LIB_ASN1, ASN1_R_INVALID_UTF8STRING); |
86 | 25.6k | return -1; |
87 | 25.6k | } |
88 | 1.21M | break; |
89 | | |
90 | 7.68M | case MBSTRING_ASC: |
91 | 7.68M | nchar = len; |
92 | 7.68M | break; |
93 | | |
94 | 0 | default: |
95 | 0 | ERR_raise(ERR_LIB_ASN1, ASN1_R_UNKNOWN_FORMAT); |
96 | 0 | return -1; |
97 | 11.0M | } |
98 | | |
99 | 11.0M | if ((minsize > 0) && (nchar < minsize)) { |
100 | 0 | ERR_raise_data(ERR_LIB_ASN1, ASN1_R_STRING_TOO_SHORT, |
101 | 0 | "minsize=%ld", minsize); |
102 | 0 | return -1; |
103 | 0 | } |
104 | | |
105 | 11.0M | if ((maxsize > 0) && (nchar > maxsize)) { |
106 | 0 | ERR_raise_data(ERR_LIB_ASN1, ASN1_R_STRING_TOO_LONG, |
107 | 0 | "maxsize=%ld", maxsize); |
108 | 0 | return -1; |
109 | 0 | } |
110 | | |
111 | | /* Now work out minimal type (if any) */ |
112 | 11.0M | if (traverse_string(in, len, inform, type_str, &mask) < 0) { |
113 | 2.46k | ERR_raise(ERR_LIB_ASN1, ASN1_R_ILLEGAL_CHARACTERS); |
114 | 2.46k | return -1; |
115 | 2.46k | } |
116 | | |
117 | | /* Now work out output format and string type */ |
118 | 11.0M | outform = MBSTRING_ASC; |
119 | 11.0M | if (mask & B_ASN1_NUMERICSTRING) |
120 | 0 | str_type = V_ASN1_NUMERICSTRING; |
121 | 11.0M | else if (mask & B_ASN1_PRINTABLESTRING) |
122 | 0 | str_type = V_ASN1_PRINTABLESTRING; |
123 | 11.0M | else if (mask & B_ASN1_IA5STRING) |
124 | 0 | str_type = V_ASN1_IA5STRING; |
125 | 11.0M | else if (mask & B_ASN1_T61STRING) |
126 | 0 | str_type = V_ASN1_T61STRING; |
127 | 11.0M | else if (mask & B_ASN1_BMPSTRING) { |
128 | 0 | str_type = V_ASN1_BMPSTRING; |
129 | 0 | outform = MBSTRING_BMP; |
130 | 11.0M | } else if (mask & B_ASN1_UNIVERSALSTRING) { |
131 | 0 | str_type = V_ASN1_UNIVERSALSTRING; |
132 | 0 | outform = MBSTRING_UNIV; |
133 | 11.0M | } else { |
134 | 11.0M | str_type = V_ASN1_UTF8STRING; |
135 | 11.0M | outform = MBSTRING_UTF8; |
136 | 11.0M | } |
137 | 11.0M | if (!out) |
138 | 0 | return str_type; |
139 | 11.0M | if (*out) { |
140 | 11.0M | free_out = 0; |
141 | 11.0M | dest = *out; |
142 | 11.0M | ASN1_STRING_set0(dest, NULL, 0); |
143 | 11.0M | dest->type = str_type; |
144 | 11.0M | } else { |
145 | 0 | free_out = 1; |
146 | 0 | dest = ASN1_STRING_type_new(str_type); |
147 | 0 | if (dest == NULL) { |
148 | 0 | ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE); |
149 | 0 | return -1; |
150 | 0 | } |
151 | 0 | *out = dest; |
152 | 0 | } |
153 | | /* If both the same type just copy across */ |
154 | 11.0M | if (inform == outform) { |
155 | 1.21M | if (!ASN1_STRING_set(dest, in, len)) { |
156 | 0 | if (free_out) { |
157 | 0 | ASN1_STRING_free(dest); |
158 | 0 | *out = NULL; |
159 | 0 | } |
160 | 0 | ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE); |
161 | 0 | return -1; |
162 | 0 | } |
163 | 1.21M | return str_type; |
164 | 1.21M | } |
165 | | |
166 | | /* Work out how much space the destination will need */ |
167 | 9.83M | switch (outform) { |
168 | 0 | case MBSTRING_ASC: |
169 | 0 | outlen = nchar; |
170 | 0 | cpyfunc = cpy_asc; |
171 | 0 | break; |
172 | | |
173 | 0 | case MBSTRING_BMP: |
174 | 0 | outlen = nchar << 1; |
175 | 0 | cpyfunc = cpy_bmp; |
176 | 0 | break; |
177 | | |
178 | 0 | case MBSTRING_UNIV: |
179 | 0 | outlen = nchar << 2; |
180 | 0 | cpyfunc = cpy_univ; |
181 | 0 | break; |
182 | | |
183 | 9.83M | case MBSTRING_UTF8: |
184 | 9.83M | outlen = 0; |
185 | 9.83M | traverse_string(in, len, inform, out_utf8, &outlen); |
186 | 9.83M | cpyfunc = cpy_utf8; |
187 | 9.83M | break; |
188 | 9.83M | } |
189 | 9.83M | if ((p = OPENSSL_malloc(outlen + 1)) == NULL) { |
190 | 0 | if (free_out) { |
191 | 0 | ASN1_STRING_free(dest); |
192 | 0 | *out = NULL; |
193 | 0 | } |
194 | 0 | ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE); |
195 | 0 | return -1; |
196 | 0 | } |
197 | 9.83M | dest->length = outlen; |
198 | 9.83M | dest->data = p; |
199 | 9.83M | p[outlen] = 0; |
200 | 9.83M | traverse_string(in, len, inform, cpyfunc, &p); |
201 | 9.83M | return str_type; |
202 | 9.83M | } |
203 | | |
204 | | /* |
205 | | * This function traverses a string and passes the value of each character to |
206 | | * an optional function along with a void * argument. |
207 | | */ |
208 | | |
209 | | static int traverse_string(const unsigned char *p, int len, int inform, |
210 | | int (*rfunc) (unsigned long value, void *in), |
211 | | void *arg) |
212 | 31.9M | { |
213 | 31.9M | unsigned long value; |
214 | 31.9M | int ret; |
215 | 957M | while (len) { |
216 | 925M | if (inform == MBSTRING_ASC) { |
217 | 889M | value = *p++; |
218 | 889M | len--; |
219 | 889M | } else if (inform == MBSTRING_BMP) { |
220 | 30.2M | value = *p++ << 8; |
221 | 30.2M | value |= *p++; |
222 | 30.2M | len -= 2; |
223 | 30.2M | } else if (inform == MBSTRING_UNIV) { |
224 | 39.5k | value = ((unsigned long)*p++) << 24; |
225 | 39.5k | value |= ((unsigned long)*p++) << 16; |
226 | 39.5k | value |= *p++ << 8; |
227 | 39.5k | value |= *p++; |
228 | 39.5k | len -= 4; |
229 | 5.94M | } else { |
230 | 5.94M | ret = UTF8_getc(p, len, &value); |
231 | 5.94M | if (ret < 0) |
232 | 24.6k | return -1; |
233 | 5.92M | len -= ret; |
234 | 5.92M | p += ret; |
235 | 5.92M | } |
236 | 925M | if (rfunc) { |
237 | 925M | ret = rfunc(value, arg); |
238 | 925M | if (ret <= 0) |
239 | 3.44k | return ret; |
240 | 925M | } |
241 | 925M | } |
242 | 31.9M | return 1; |
243 | 31.9M | } |
244 | | |
245 | | /* Various utility functions for traverse_string */ |
246 | | |
247 | | /* Just count number of characters */ |
248 | | |
249 | | static int in_utf8(unsigned long value, void *arg) |
250 | 3.27M | { |
251 | 3.27M | int *nchar; |
252 | | |
253 | 3.27M | if (!is_unicode_valid(value)) |
254 | 975 | return -2; |
255 | 3.27M | nchar = arg; |
256 | 3.27M | (*nchar)++; |
257 | 3.27M | return 1; |
258 | 3.27M | } |
259 | | |
260 | | /* Determine size of output as a UTF8 String */ |
261 | | |
262 | | static int out_utf8(unsigned long value, void *arg) |
263 | 306M | { |
264 | 306M | int *outlen, len; |
265 | | |
266 | 306M | len = UTF8_putc(NULL, -1, value); |
267 | 306M | if (len <= 0) |
268 | 0 | return len; |
269 | 306M | outlen = arg; |
270 | 306M | *outlen += len; |
271 | 306M | return 1; |
272 | 306M | } |
273 | | |
274 | | /* |
275 | | * Determine the "type" of a string: check each character against a supplied |
276 | | * "mask". |
277 | | */ |
278 | | |
279 | | static int type_str(unsigned long value, void *arg) |
280 | 309M | { |
281 | 309M | unsigned long types = *((unsigned long *)arg); |
282 | 309M | const int native = value > INT_MAX ? INT_MAX : ossl_fromascii(value); |
283 | | |
284 | 309M | if ((types & B_ASN1_NUMERICSTRING) && !(ossl_isdigit(native) |
285 | 0 | || native == ' ')) |
286 | 0 | types &= ~B_ASN1_NUMERICSTRING; |
287 | 309M | if ((types & B_ASN1_PRINTABLESTRING) && !ossl_isasn1print(native)) |
288 | 0 | types &= ~B_ASN1_PRINTABLESTRING; |
289 | 309M | if ((types & B_ASN1_IA5STRING) && !ossl_isascii(native)) |
290 | 0 | types &= ~B_ASN1_IA5STRING; |
291 | 309M | if ((types & B_ASN1_T61STRING) && (value > 0xff)) |
292 | 0 | types &= ~B_ASN1_T61STRING; |
293 | 309M | if ((types & B_ASN1_BMPSTRING) && (value > 0xffff)) |
294 | 0 | types &= ~B_ASN1_BMPSTRING; |
295 | 309M | if ((types & B_ASN1_UTF8STRING) && !is_unicode_valid(value)) |
296 | 2.46k | types &= ~B_ASN1_UTF8STRING; |
297 | 309M | if (!types) |
298 | 2.46k | return -1; |
299 | 309M | *((unsigned long *)arg) = types; |
300 | 309M | return 1; |
301 | 309M | } |
302 | | |
303 | | /* Copy one byte per character ASCII like strings */ |
304 | | |
305 | | static int cpy_asc(unsigned long value, void *arg) |
306 | 0 | { |
307 | 0 | unsigned char **p, *q; |
308 | 0 | p = arg; |
309 | 0 | q = *p; |
310 | 0 | *q = (unsigned char)value; |
311 | 0 | (*p)++; |
312 | 0 | return 1; |
313 | 0 | } |
314 | | |
315 | | /* Copy two byte per character BMPStrings */ |
316 | | |
317 | | static int cpy_bmp(unsigned long value, void *arg) |
318 | 0 | { |
319 | 0 | unsigned char **p, *q; |
320 | 0 | p = arg; |
321 | 0 | q = *p; |
322 | 0 | *q++ = (unsigned char)((value >> 8) & 0xff); |
323 | 0 | *q = (unsigned char)(value & 0xff); |
324 | 0 | *p += 2; |
325 | 0 | return 1; |
326 | 0 | } |
327 | | |
328 | | /* Copy four byte per character UniversalStrings */ |
329 | | |
330 | | static int cpy_univ(unsigned long value, void *arg) |
331 | 0 | { |
332 | 0 | unsigned char **p, *q; |
333 | 0 | p = arg; |
334 | 0 | q = *p; |
335 | 0 | *q++ = (unsigned char)((value >> 24) & 0xff); |
336 | 0 | *q++ = (unsigned char)((value >> 16) & 0xff); |
337 | 0 | *q++ = (unsigned char)((value >> 8) & 0xff); |
338 | 0 | *q = (unsigned char)(value & 0xff); |
339 | 0 | *p += 4; |
340 | 0 | return 1; |
341 | 0 | } |
342 | | |
343 | | /* Copy to a UTF8String */ |
344 | | |
345 | | static int cpy_utf8(unsigned long value, void *arg) |
346 | 306M | { |
347 | 306M | unsigned char **p; |
348 | 306M | int ret; |
349 | 306M | p = arg; |
350 | | /* We already know there is enough room so pass 0xff as the length */ |
351 | 306M | ret = UTF8_putc(*p, 0xff, value); |
352 | 306M | *p += ret; |
353 | 306M | return 1; |
354 | 306M | } |