/src/openssl30/crypto/err/err.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #define OSSL_FORCE_ERR_STATE |
11 | | |
12 | | #include <stdio.h> |
13 | | #include <stdarg.h> |
14 | | #include <string.h> |
15 | | #include "crypto/cryptlib.h" |
16 | | #include "internal/err.h" |
17 | | #include "crypto/err.h" |
18 | | #include <openssl/err.h> |
19 | | #include <openssl/crypto.h> |
20 | | #include <openssl/buffer.h> |
21 | | #include <openssl/bio.h> |
22 | | #include <openssl/opensslconf.h> |
23 | | #include "internal/thread_once.h" |
24 | | #include "crypto/ctype.h" |
25 | | #include "internal/constant_time.h" |
26 | | #include "e_os.h" |
27 | | #include "err_local.h" |
28 | | |
29 | | /* Forward declaration in case it's not published because of configuration */ |
30 | | ERR_STATE *ERR_get_state(void); |
31 | | |
32 | | #ifndef OPENSSL_NO_ERR |
33 | | static int err_load_strings(const ERR_STRING_DATA *str); |
34 | | #endif |
35 | | |
36 | | static void ERR_STATE_free(ERR_STATE *s); |
37 | | #ifndef OPENSSL_NO_ERR |
38 | | static ERR_STRING_DATA ERR_str_libraries[] = { |
39 | | {ERR_PACK(ERR_LIB_NONE, 0, 0), "unknown library"}, |
40 | | {ERR_PACK(ERR_LIB_SYS, 0, 0), "system library"}, |
41 | | {ERR_PACK(ERR_LIB_BN, 0, 0), "bignum routines"}, |
42 | | {ERR_PACK(ERR_LIB_RSA, 0, 0), "rsa routines"}, |
43 | | {ERR_PACK(ERR_LIB_DH, 0, 0), "Diffie-Hellman routines"}, |
44 | | {ERR_PACK(ERR_LIB_EVP, 0, 0), "digital envelope routines"}, |
45 | | {ERR_PACK(ERR_LIB_BUF, 0, 0), "memory buffer routines"}, |
46 | | {ERR_PACK(ERR_LIB_OBJ, 0, 0), "object identifier routines"}, |
47 | | {ERR_PACK(ERR_LIB_PEM, 0, 0), "PEM routines"}, |
48 | | {ERR_PACK(ERR_LIB_DSA, 0, 0), "dsa routines"}, |
49 | | {ERR_PACK(ERR_LIB_X509, 0, 0), "x509 certificate routines"}, |
50 | | {ERR_PACK(ERR_LIB_ASN1, 0, 0), "asn1 encoding routines"}, |
51 | | {ERR_PACK(ERR_LIB_CONF, 0, 0), "configuration file routines"}, |
52 | | {ERR_PACK(ERR_LIB_CRYPTO, 0, 0), "common libcrypto routines"}, |
53 | | {ERR_PACK(ERR_LIB_EC, 0, 0), "elliptic curve routines"}, |
54 | | {ERR_PACK(ERR_LIB_ECDSA, 0, 0), "ECDSA routines"}, |
55 | | {ERR_PACK(ERR_LIB_ECDH, 0, 0), "ECDH routines"}, |
56 | | {ERR_PACK(ERR_LIB_SSL, 0, 0), "SSL routines"}, |
57 | | {ERR_PACK(ERR_LIB_BIO, 0, 0), "BIO routines"}, |
58 | | {ERR_PACK(ERR_LIB_PKCS7, 0, 0), "PKCS7 routines"}, |
59 | | {ERR_PACK(ERR_LIB_X509V3, 0, 0), "X509 V3 routines"}, |
60 | | {ERR_PACK(ERR_LIB_PKCS12, 0, 0), "PKCS12 routines"}, |
61 | | {ERR_PACK(ERR_LIB_RAND, 0, 0), "random number generator"}, |
62 | | {ERR_PACK(ERR_LIB_DSO, 0, 0), "DSO support routines"}, |
63 | | {ERR_PACK(ERR_LIB_TS, 0, 0), "time stamp routines"}, |
64 | | {ERR_PACK(ERR_LIB_ENGINE, 0, 0), "engine routines"}, |
65 | | {ERR_PACK(ERR_LIB_OCSP, 0, 0), "OCSP routines"}, |
66 | | {ERR_PACK(ERR_LIB_UI, 0, 0), "UI routines"}, |
67 | | {ERR_PACK(ERR_LIB_FIPS, 0, 0), "FIPS routines"}, |
68 | | {ERR_PACK(ERR_LIB_CMS, 0, 0), "CMS routines"}, |
69 | | {ERR_PACK(ERR_LIB_CRMF, 0, 0), "CRMF routines"}, |
70 | | {ERR_PACK(ERR_LIB_CMP, 0, 0), "CMP routines"}, |
71 | | {ERR_PACK(ERR_LIB_HMAC, 0, 0), "HMAC routines"}, |
72 | | {ERR_PACK(ERR_LIB_CT, 0, 0), "CT routines"}, |
73 | | {ERR_PACK(ERR_LIB_ASYNC, 0, 0), "ASYNC routines"}, |
74 | | {ERR_PACK(ERR_LIB_KDF, 0, 0), "KDF routines"}, |
75 | | {ERR_PACK(ERR_LIB_OSSL_STORE, 0, 0), "STORE routines"}, |
76 | | {ERR_PACK(ERR_LIB_SM2, 0, 0), "SM2 routines"}, |
77 | | {ERR_PACK(ERR_LIB_ESS, 0, 0), "ESS routines"}, |
78 | | {ERR_PACK(ERR_LIB_PROV, 0, 0), "Provider routines"}, |
79 | | {ERR_PACK(ERR_LIB_OSSL_ENCODER, 0, 0), "ENCODER routines"}, |
80 | | {ERR_PACK(ERR_LIB_OSSL_DECODER, 0, 0), "DECODER routines"}, |
81 | | {ERR_PACK(ERR_LIB_HTTP, 0, 0), "HTTP routines"}, |
82 | | {0, NULL}, |
83 | | }; |
84 | | |
85 | | /* |
86 | | * Should make sure that all ERR_R_ reasons defined in include/openssl/err.h.in |
87 | | * are listed. For maintainability, please keep all reasons in the same order. |
88 | | */ |
89 | | static ERR_STRING_DATA ERR_str_reasons[] = { |
90 | | {ERR_R_SYS_LIB, "system lib"}, |
91 | | {ERR_R_BN_LIB, "BN lib"}, |
92 | | {ERR_R_RSA_LIB, "RSA lib"}, |
93 | | {ERR_R_DH_LIB, "DH lib"}, |
94 | | {ERR_R_EVP_LIB, "EVP lib"}, |
95 | | {ERR_R_BUF_LIB, "BUF lib"}, |
96 | | {ERR_R_OBJ_LIB, "OBJ lib"}, |
97 | | {ERR_R_PEM_LIB, "PEM lib"}, |
98 | | {ERR_R_DSA_LIB, "DSA lib"}, |
99 | | {ERR_R_X509_LIB, "X509 lib"}, |
100 | | {ERR_R_ASN1_LIB, "ASN1 lib"}, |
101 | | {ERR_R_CRYPTO_LIB, "CRYPTO lib"}, |
102 | | {ERR_R_EC_LIB, "EC lib"}, |
103 | | {ERR_R_BIO_LIB, "BIO lib"}, |
104 | | {ERR_R_PKCS7_LIB, "PKCS7 lib"}, |
105 | | {ERR_R_X509V3_LIB, "X509V3 lib"}, |
106 | | {ERR_R_ENGINE_LIB, "ENGINE lib"}, |
107 | | {ERR_R_UI_LIB, "UI lib"}, |
108 | | {ERR_R_ECDSA_LIB, "ECDSA lib"}, |
109 | | {ERR_R_OSSL_STORE_LIB, "OSSL_STORE lib"}, |
110 | | {ERR_R_OSSL_DECODER_LIB, "OSSL_DECODER lib"}, |
111 | | |
112 | | {ERR_R_FATAL, "fatal"}, |
113 | | {ERR_R_MALLOC_FAILURE, "malloc failure"}, |
114 | | {ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED, |
115 | | "called a function you should not call"}, |
116 | | {ERR_R_PASSED_NULL_PARAMETER, "passed a null parameter"}, |
117 | | {ERR_R_INTERNAL_ERROR, "internal error"}, |
118 | | {ERR_R_DISABLED, "called a function that was disabled at compile-time"}, |
119 | | {ERR_R_INIT_FAIL, "init fail"}, |
120 | | {ERR_R_PASSED_INVALID_ARGUMENT, "passed invalid argument"}, |
121 | | {ERR_R_OPERATION_FAIL, "operation fail"}, |
122 | | {ERR_R_INVALID_PROVIDER_FUNCTIONS, "invalid provider functions"}, |
123 | | {ERR_R_INTERRUPTED_OR_CANCELLED, "interrupted or cancelled"}, |
124 | | {ERR_R_NESTED_ASN1_ERROR, "nested asn1 error"}, |
125 | | {ERR_R_MISSING_ASN1_EOS, "missing asn1 eos"}, |
126 | | /* |
127 | | * Something is unsupported, exactly what is expressed with additional data |
128 | | */ |
129 | | {ERR_R_UNSUPPORTED, "unsupported"}, |
130 | | /* |
131 | | * A fetch failed for other reasons than the name to be fetched being |
132 | | * unsupported. |
133 | | */ |
134 | | {ERR_R_FETCH_FAILED, "fetch failed"}, |
135 | | {ERR_R_INVALID_PROPERTY_DEFINITION, "invalid property definition"}, |
136 | | {ERR_R_UNABLE_TO_GET_READ_LOCK, "unable to get read lock"}, |
137 | | {ERR_R_UNABLE_TO_GET_WRITE_LOCK, "unable to get write lock"}, |
138 | | {0, NULL}, |
139 | | }; |
140 | | #endif |
141 | | |
142 | | static CRYPTO_ONCE err_init = CRYPTO_ONCE_STATIC_INIT; |
143 | | static int set_err_thread_local; |
144 | | static CRYPTO_THREAD_LOCAL err_thread_local; |
145 | | |
146 | | static CRYPTO_ONCE err_string_init = CRYPTO_ONCE_STATIC_INIT; |
147 | | static CRYPTO_RWLOCK *err_string_lock = NULL; |
148 | | |
149 | | #ifndef OPENSSL_NO_ERR |
150 | | static ERR_STRING_DATA *int_err_get_item(const ERR_STRING_DATA *); |
151 | | #endif |
152 | | |
153 | | /* |
154 | | * The internal state |
155 | | */ |
156 | | |
157 | | #ifndef OPENSSL_NO_ERR |
158 | | static LHASH_OF(ERR_STRING_DATA) *int_error_hash = NULL; |
159 | | #endif |
160 | | static int int_err_library_number = ERR_LIB_USER; |
161 | | |
162 | | typedef enum ERR_GET_ACTION_e { |
163 | | EV_POP, EV_PEEK, EV_PEEK_LAST |
164 | | } ERR_GET_ACTION; |
165 | | |
166 | | static unsigned long get_error_values(ERR_GET_ACTION g, |
167 | | const char **file, int *line, |
168 | | const char **func, const char **data, |
169 | | int *flags); |
170 | | |
171 | | #ifndef OPENSSL_NO_ERR |
172 | | static unsigned long err_string_data_hash(const ERR_STRING_DATA *a) |
173 | 1.08M | { |
174 | 1.08M | unsigned long ret, l; |
175 | | |
176 | 1.08M | l = a->error; |
177 | 1.08M | ret = l ^ ERR_GET_LIB(l); |
178 | 1.08M | return (ret ^ ret % 19 * 13); |
179 | 1.08M | } |
180 | | |
181 | | static int err_string_data_cmp(const ERR_STRING_DATA *a, |
182 | | const ERR_STRING_DATA *b) |
183 | 880k | { |
184 | 880k | if (a->error == b->error) |
185 | 851k | return 0; |
186 | 28.5k | return a->error > b->error ? 1 : -1; |
187 | 880k | } |
188 | | |
189 | | static ERR_STRING_DATA *int_err_get_item(const ERR_STRING_DATA *d) |
190 | 498k | { |
191 | 498k | ERR_STRING_DATA *p = NULL; |
192 | | |
193 | 498k | if (!CRYPTO_THREAD_read_lock(err_string_lock)) |
194 | 0 | return NULL; |
195 | 498k | p = lh_ERR_STRING_DATA_retrieve(int_error_hash, d); |
196 | 498k | CRYPTO_THREAD_unlock(err_string_lock); |
197 | | |
198 | 498k | return p; |
199 | 498k | } |
200 | | #endif |
201 | | |
202 | | static void ERR_STATE_free(ERR_STATE *s) |
203 | 48 | { |
204 | 48 | int i; |
205 | | |
206 | 48 | if (s == NULL) |
207 | 0 | return; |
208 | 816 | for (i = 0; i < ERR_NUM_ERRORS; i++) { |
209 | 768 | err_clear(s, i, 1); |
210 | 768 | } |
211 | 48 | OPENSSL_free(s); |
212 | 48 | } |
213 | | |
214 | | DEFINE_RUN_ONCE_STATIC(do_err_strings_init) |
215 | 133 | { |
216 | 133 | if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL)) |
217 | 0 | return 0; |
218 | 133 | err_string_lock = CRYPTO_THREAD_lock_new(); |
219 | 133 | if (err_string_lock == NULL) |
220 | 0 | return 0; |
221 | 133 | #ifndef OPENSSL_NO_ERR |
222 | 133 | int_error_hash = lh_ERR_STRING_DATA_new(err_string_data_hash, |
223 | 133 | err_string_data_cmp); |
224 | 133 | if (int_error_hash == NULL) { |
225 | 0 | CRYPTO_THREAD_lock_free(err_string_lock); |
226 | 0 | err_string_lock = NULL; |
227 | 0 | return 0; |
228 | 0 | } |
229 | 133 | #endif |
230 | 133 | return 1; |
231 | 133 | } |
232 | | |
233 | | void err_cleanup(void) |
234 | 133 | { |
235 | 133 | if (set_err_thread_local != 0) |
236 | 133 | CRYPTO_THREAD_cleanup_local(&err_thread_local); |
237 | 133 | CRYPTO_THREAD_lock_free(err_string_lock); |
238 | 133 | err_string_lock = NULL; |
239 | 133 | #ifndef OPENSSL_NO_ERR |
240 | 133 | lh_ERR_STRING_DATA_free(int_error_hash); |
241 | 133 | int_error_hash = NULL; |
242 | 133 | #endif |
243 | 133 | } |
244 | | |
245 | | #ifndef OPENSSL_NO_ERR |
246 | | /* |
247 | | * Legacy; pack in the library. |
248 | | */ |
249 | | static void err_patch(int lib, ERR_STRING_DATA *str) |
250 | 0 | { |
251 | 0 | unsigned long plib = ERR_PACK(lib, 0, 0); |
252 | |
|
253 | 0 | for (; str->error != 0; str++) |
254 | 0 | str->error |= plib; |
255 | 0 | } |
256 | | |
257 | | /* |
258 | | * Hash in |str| error strings. Assumes the RUN_ONCE was done. |
259 | | */ |
260 | | static int err_load_strings(const ERR_STRING_DATA *str) |
261 | 13.9k | { |
262 | 13.9k | if (!CRYPTO_THREAD_write_lock(err_string_lock)) |
263 | 0 | return 0; |
264 | 598k | for (; str->error; str++) |
265 | 584k | (void)lh_ERR_STRING_DATA_insert(int_error_hash, |
266 | 13.9k | (ERR_STRING_DATA *)str); |
267 | 13.9k | CRYPTO_THREAD_unlock(err_string_lock); |
268 | 13.9k | return 1; |
269 | 13.9k | } |
270 | | #endif |
271 | | |
272 | | int ossl_err_load_ERR_strings(void) |
273 | 4.69k | { |
274 | 4.69k | #ifndef OPENSSL_NO_ERR |
275 | 4.69k | if (!RUN_ONCE(&err_string_init, do_err_strings_init)) |
276 | 0 | return 0; |
277 | | |
278 | 4.69k | err_load_strings(ERR_str_libraries); |
279 | 4.69k | err_load_strings(ERR_str_reasons); |
280 | 4.69k | #endif |
281 | 4.69k | return 1; |
282 | 4.69k | } |
283 | | |
284 | | int ERR_load_strings(int lib, ERR_STRING_DATA *str) |
285 | 0 | { |
286 | 0 | #ifndef OPENSSL_NO_ERR |
287 | 0 | if (ossl_err_load_ERR_strings() == 0) |
288 | 0 | return 0; |
289 | | |
290 | 0 | err_patch(lib, str); |
291 | 0 | err_load_strings(str); |
292 | 0 | #endif |
293 | |
|
294 | 0 | return 1; |
295 | 0 | } |
296 | | |
297 | | int ERR_load_strings_const(const ERR_STRING_DATA *str) |
298 | 4.56k | { |
299 | 4.56k | #ifndef OPENSSL_NO_ERR |
300 | 4.56k | if (ossl_err_load_ERR_strings() == 0) |
301 | 0 | return 0; |
302 | 4.56k | err_load_strings(str); |
303 | 4.56k | #endif |
304 | | |
305 | 4.56k | return 1; |
306 | 4.56k | } |
307 | | |
308 | | int ERR_unload_strings(int lib, ERR_STRING_DATA *str) |
309 | 0 | { |
310 | 0 | #ifndef OPENSSL_NO_ERR |
311 | 0 | if (!RUN_ONCE(&err_string_init, do_err_strings_init)) |
312 | 0 | return 0; |
313 | | |
314 | 0 | if (!CRYPTO_THREAD_write_lock(err_string_lock)) |
315 | 0 | return 0; |
316 | | /* |
317 | | * We don't need to ERR_PACK the lib, since that was done (to |
318 | | * the table) when it was loaded. |
319 | | */ |
320 | 0 | for (; str->error; str++) |
321 | 0 | (void)lh_ERR_STRING_DATA_delete(int_error_hash, str); |
322 | 0 | CRYPTO_THREAD_unlock(err_string_lock); |
323 | 0 | #endif |
324 | |
|
325 | 0 | return 1; |
326 | 0 | } |
327 | | |
328 | | void err_free_strings_int(void) |
329 | 0 | { |
330 | | /* obsolete */ |
331 | 0 | } |
332 | | |
333 | | /********************************************************/ |
334 | | |
335 | | void ERR_clear_error(void) |
336 | 28.1M | { |
337 | 28.1M | int i; |
338 | 28.1M | ERR_STATE *es; |
339 | | |
340 | 28.1M | es = ossl_err_get_state_int(); |
341 | 28.1M | if (es == NULL) |
342 | 0 | return; |
343 | | |
344 | 478M | for (i = 0; i < ERR_NUM_ERRORS; i++) { |
345 | 450M | err_clear(es, i, 0); |
346 | 450M | } |
347 | 28.1M | es->top = es->bottom = 0; |
348 | 28.1M | } |
349 | | |
350 | | unsigned long ERR_get_error(void) |
351 | 0 | { |
352 | 0 | return get_error_values(EV_POP, NULL, NULL, NULL, NULL, NULL); |
353 | 0 | } |
354 | | |
355 | | unsigned long ERR_get_error_all(const char **file, int *line, |
356 | | const char **func, |
357 | | const char **data, int *flags) |
358 | 305k | { |
359 | 305k | return get_error_values(EV_POP, file, line, func, data, flags); |
360 | 305k | } |
361 | | |
362 | | #ifndef OPENSSL_NO_DEPRECATED_3_0 |
363 | | unsigned long ERR_get_error_line(const char **file, int *line) |
364 | 0 | { |
365 | 0 | return get_error_values(EV_POP, file, line, NULL, NULL, NULL); |
366 | 0 | } |
367 | | |
368 | | unsigned long ERR_get_error_line_data(const char **file, int *line, |
369 | | const char **data, int *flags) |
370 | 0 | { |
371 | 0 | return get_error_values(EV_POP, file, line, NULL, data, flags); |
372 | 0 | } |
373 | | #endif |
374 | | |
375 | | unsigned long ERR_peek_error(void) |
376 | 29.4k | { |
377 | 29.4k | return get_error_values(EV_PEEK, NULL, NULL, NULL, NULL, NULL); |
378 | 29.4k | } |
379 | | |
380 | | unsigned long ERR_peek_error_line(const char **file, int *line) |
381 | 0 | { |
382 | 0 | return get_error_values(EV_PEEK, file, line, NULL, NULL, NULL); |
383 | 0 | } |
384 | | |
385 | | unsigned long ERR_peek_error_func(const char **func) |
386 | 0 | { |
387 | 0 | return get_error_values(EV_PEEK, NULL, NULL, func, NULL, NULL); |
388 | 0 | } |
389 | | |
390 | | unsigned long ERR_peek_error_data(const char **data, int *flags) |
391 | 28.3k | { |
392 | 28.3k | return get_error_values(EV_PEEK, NULL, NULL, NULL, data, flags); |
393 | 28.3k | } |
394 | | |
395 | | unsigned long ERR_peek_error_all(const char **file, int *line, |
396 | | const char **func, |
397 | | const char **data, int *flags) |
398 | 0 | { |
399 | 0 | return get_error_values(EV_PEEK, file, line, func, data, flags); |
400 | 0 | } |
401 | | |
402 | | #ifndef OPENSSL_NO_DEPRECATED_3_0 |
403 | | unsigned long ERR_peek_error_line_data(const char **file, int *line, |
404 | | const char **data, int *flags) |
405 | 0 | { |
406 | 0 | return get_error_values(EV_PEEK, file, line, NULL, data, flags); |
407 | 0 | } |
408 | | #endif |
409 | | |
410 | | unsigned long ERR_peek_last_error(void) |
411 | 105M | { |
412 | 105M | return get_error_values(EV_PEEK_LAST, NULL, NULL, NULL, NULL, NULL); |
413 | 105M | } |
414 | | |
415 | | unsigned long ERR_peek_last_error_line(const char **file, int *line) |
416 | 0 | { |
417 | 0 | return get_error_values(EV_PEEK_LAST, file, line, NULL, NULL, NULL); |
418 | 0 | } |
419 | | |
420 | | unsigned long ERR_peek_last_error_func(const char **func) |
421 | 0 | { |
422 | 0 | return get_error_values(EV_PEEK_LAST, NULL, NULL, func, NULL, NULL); |
423 | 0 | } |
424 | | |
425 | | unsigned long ERR_peek_last_error_data(const char **data, int *flags) |
426 | 0 | { |
427 | 0 | return get_error_values(EV_PEEK_LAST, NULL, NULL, NULL, data, flags); |
428 | 0 | } |
429 | | |
430 | | unsigned long ERR_peek_last_error_all(const char **file, int *line, |
431 | | const char **func, |
432 | | const char **data, int *flags) |
433 | 7.49k | { |
434 | 7.49k | return get_error_values(EV_PEEK_LAST, file, line, func, data, flags); |
435 | 7.49k | } |
436 | | |
437 | | #ifndef OPENSSL_NO_DEPRECATED_3_0 |
438 | | unsigned long ERR_peek_last_error_line_data(const char **file, int *line, |
439 | | const char **data, int *flags) |
440 | 0 | { |
441 | 0 | return get_error_values(EV_PEEK_LAST, file, line, NULL, data, flags); |
442 | 0 | } |
443 | | #endif |
444 | | |
445 | | static unsigned long get_error_values(ERR_GET_ACTION g, |
446 | | const char **file, int *line, |
447 | | const char **func, |
448 | | const char **data, int *flags) |
449 | 105M | { |
450 | 105M | int i = 0; |
451 | 105M | ERR_STATE *es; |
452 | 105M | unsigned long ret; |
453 | | |
454 | 105M | es = ossl_err_get_state_int(); |
455 | 105M | if (es == NULL) |
456 | 0 | return 0; |
457 | | |
458 | | /* |
459 | | * Clear anything that should have been cleared earlier. We do this |
460 | | * here because this doesn't have constant-time issues. |
461 | | */ |
462 | 105M | while (es->bottom != es->top) { |
463 | 104M | if (es->err_flags[es->top] & ERR_FLAG_CLEAR) { |
464 | 0 | err_clear(es, es->top, 0); |
465 | 0 | es->top = es->top > 0 ? es->top - 1 : ERR_NUM_ERRORS - 1; |
466 | 0 | continue; |
467 | 0 | } |
468 | 104M | i = (es->bottom + 1) % ERR_NUM_ERRORS; |
469 | 104M | if (es->err_flags[i] & ERR_FLAG_CLEAR) { |
470 | 0 | es->bottom = i; |
471 | 0 | err_clear(es, es->bottom, 0); |
472 | 0 | continue; |
473 | 0 | } |
474 | 104M | break; |
475 | 104M | } |
476 | | |
477 | | /* If everything has been cleared, the stack is empty. */ |
478 | 105M | if (es->bottom == es->top) |
479 | 1.22M | return 0; |
480 | | |
481 | | /* Which error, the top of stack (latest one) or the first one? */ |
482 | 104M | if (g == EV_PEEK_LAST) |
483 | 103M | i = es->top; |
484 | 226k | else |
485 | 226k | i = (es->bottom + 1) % ERR_NUM_ERRORS; |
486 | | |
487 | 104M | ret = es->err_buffer[i]; |
488 | 104M | if (g == EV_POP) { |
489 | 196k | es->bottom = i; |
490 | 196k | es->err_buffer[i] = 0; |
491 | 196k | } |
492 | | |
493 | 104M | if (file != NULL) { |
494 | 204k | *file = es->err_file[i]; |
495 | 204k | if (*file == NULL) |
496 | 0 | *file = ""; |
497 | 204k | } |
498 | 104M | if (line != NULL) |
499 | 204k | *line = es->err_line[i]; |
500 | 104M | if (func != NULL) { |
501 | 204k | *func = es->err_func[i]; |
502 | 204k | if (*func == NULL) |
503 | 0 | *func = ""; |
504 | 204k | } |
505 | 104M | if (flags != NULL) |
506 | 232k | *flags = es->err_data_flags[i]; |
507 | 104M | if (data == NULL) { |
508 | 103M | if (g == EV_POP) { |
509 | 0 | err_clear_data(es, i, 0); |
510 | 0 | } |
511 | 103M | } else { |
512 | 232k | *data = es->err_data[i]; |
513 | 232k | if (*data == NULL) { |
514 | 81 | *data = ""; |
515 | 81 | if (flags != NULL) |
516 | 81 | *flags = 0; |
517 | 81 | } |
518 | 232k | } |
519 | 104M | return ret; |
520 | 105M | } |
521 | | |
522 | | void ossl_err_string_int(unsigned long e, const char *func, |
523 | | char *buf, size_t len) |
524 | 23.2k | { |
525 | 23.2k | char lsbuf[64], rsbuf[256]; |
526 | 23.2k | const char *ls, *rs = NULL; |
527 | 23.2k | unsigned long l, r; |
528 | | |
529 | 23.2k | if (len == 0) |
530 | 0 | return; |
531 | | |
532 | 23.2k | l = ERR_GET_LIB(e); |
533 | 23.2k | ls = ERR_lib_error_string(e); |
534 | 23.2k | if (ls == NULL) { |
535 | 0 | BIO_snprintf(lsbuf, sizeof(lsbuf), "lib(%lu)", l); |
536 | 0 | ls = lsbuf; |
537 | 0 | } |
538 | | |
539 | | /* |
540 | | * ERR_reason_error_string() can't safely return system error strings, |
541 | | * since it would call openssl_strerror_r(), which needs a buffer for |
542 | | * thread safety. So for system errors, we call openssl_strerror_r() |
543 | | * directly instead. |
544 | | */ |
545 | 23.2k | r = ERR_GET_REASON(e); |
546 | 23.2k | #ifndef OPENSSL_NO_ERR |
547 | 23.2k | if (ERR_SYSTEM_ERROR(e)) { |
548 | 0 | if (openssl_strerror_r(r, rsbuf, sizeof(rsbuf))) |
549 | 0 | rs = rsbuf; |
550 | 23.2k | } else { |
551 | 23.2k | rs = ERR_reason_error_string(e); |
552 | 23.2k | } |
553 | 23.2k | #endif |
554 | 23.2k | if (rs == NULL) { |
555 | 0 | BIO_snprintf(rsbuf, sizeof(rsbuf), "reason(%lu)", r); |
556 | 0 | rs = rsbuf; |
557 | 0 | } |
558 | | |
559 | 23.2k | BIO_snprintf(buf, len, "error:%08lX:%s:%s:%s", e, ls, func, rs); |
560 | 23.2k | if (strlen(buf) == len - 1) { |
561 | | /* Didn't fit; use a minimal format. */ |
562 | 0 | BIO_snprintf(buf, len, "err:%lx:%lx:%lx:%lx", e, l, 0L, r); |
563 | 0 | } |
564 | 23.2k | } |
565 | | |
566 | | |
567 | | void ERR_error_string_n(unsigned long e, char *buf, size_t len) |
568 | 0 | { |
569 | 0 | ossl_err_string_int(e, "", buf, len); |
570 | 0 | } |
571 | | |
572 | | /* |
573 | | * ERR_error_string_n should be used instead for ret != NULL as |
574 | | * ERR_error_string cannot know how large the buffer is |
575 | | */ |
576 | | char *ERR_error_string(unsigned long e, char *ret) |
577 | 0 | { |
578 | 0 | static char buf[256]; |
579 | |
|
580 | 0 | if (ret == NULL) |
581 | 0 | ret = buf; |
582 | 0 | ERR_error_string_n(e, ret, (int)sizeof(buf)); |
583 | 0 | return ret; |
584 | 0 | } |
585 | | |
586 | | const char *ERR_lib_error_string(unsigned long e) |
587 | 225k | { |
588 | 225k | #ifndef OPENSSL_NO_ERR |
589 | 225k | ERR_STRING_DATA d, *p; |
590 | 225k | unsigned long l; |
591 | | |
592 | 225k | if (!RUN_ONCE(&err_string_init, do_err_strings_init)) { |
593 | 0 | return NULL; |
594 | 0 | } |
595 | | |
596 | 225k | l = ERR_GET_LIB(e); |
597 | 225k | d.error = ERR_PACK(l, 0, 0); |
598 | 225k | p = int_err_get_item(&d); |
599 | 225k | return ((p == NULL) ? NULL : p->string); |
600 | | #else |
601 | | return NULL; |
602 | | #endif |
603 | 225k | } |
604 | | |
605 | | #ifndef OPENSSL_NO_DEPRECATED_3_0 |
606 | | const char *ERR_func_error_string(unsigned long e) |
607 | 0 | { |
608 | 0 | return NULL; |
609 | 0 | } |
610 | | #endif |
611 | | |
612 | | const char *ERR_reason_error_string(unsigned long e) |
613 | 258k | { |
614 | 258k | #ifndef OPENSSL_NO_ERR |
615 | 258k | ERR_STRING_DATA d, *p = NULL; |
616 | 258k | unsigned long l, r; |
617 | | |
618 | 258k | if (!RUN_ONCE(&err_string_init, do_err_strings_init)) { |
619 | 0 | return NULL; |
620 | 0 | } |
621 | | |
622 | | /* |
623 | | * ERR_reason_error_string() can't safely return system error strings, |
624 | | * since openssl_strerror_r() needs a buffer for thread safety, and we |
625 | | * haven't got one that would serve any sensible purpose. |
626 | | */ |
627 | 258k | if (ERR_SYSTEM_ERROR(e)) |
628 | 0 | return NULL; |
629 | | |
630 | 258k | l = ERR_GET_LIB(e); |
631 | 258k | r = ERR_GET_REASON(e); |
632 | 258k | d.error = ERR_PACK(l, 0, r); |
633 | 258k | p = int_err_get_item(&d); |
634 | 258k | if (p == NULL) { |
635 | 15.4k | d.error = ERR_PACK(0, 0, r); |
636 | 15.4k | p = int_err_get_item(&d); |
637 | 15.4k | } |
638 | 258k | return ((p == NULL) ? NULL : p->string); |
639 | | #else |
640 | | return NULL; |
641 | | #endif |
642 | 258k | } |
643 | | |
644 | | static void err_delete_thread_state(void *unused) |
645 | 133 | { |
646 | 133 | ERR_STATE *state = CRYPTO_THREAD_get_local(&err_thread_local); |
647 | 133 | if (state == NULL) |
648 | 0 | return; |
649 | | |
650 | 133 | CRYPTO_THREAD_set_local(&err_thread_local, NULL); |
651 | 133 | ERR_STATE_free(state); |
652 | 133 | } |
653 | | |
654 | | #ifndef OPENSSL_NO_DEPRECATED_1_1_0 |
655 | | void ERR_remove_thread_state(void *dummy) |
656 | 0 | { |
657 | 0 | } |
658 | | #endif |
659 | | |
660 | | #ifndef OPENSSL_NO_DEPRECATED_1_0_0 |
661 | | void ERR_remove_state(unsigned long pid) |
662 | 0 | { |
663 | 0 | } |
664 | | #endif |
665 | | |
666 | | DEFINE_RUN_ONCE_STATIC(err_do_init) |
667 | 133 | { |
668 | 133 | set_err_thread_local = 1; |
669 | 133 | return CRYPTO_THREAD_init_local(&err_thread_local, NULL); |
670 | 133 | } |
671 | | |
672 | | ERR_STATE *ossl_err_get_state_int(void) |
673 | 847M | { |
674 | 847M | ERR_STATE *state; |
675 | 847M | int saveerrno = get_last_sys_error(); |
676 | | |
677 | 847M | if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL)) |
678 | 0 | return NULL; |
679 | | |
680 | 847M | if (!RUN_ONCE(&err_init, err_do_init)) |
681 | 0 | return NULL; |
682 | | |
683 | 847M | state = CRYPTO_THREAD_get_local(&err_thread_local); |
684 | 847M | if (state == (ERR_STATE*)-1) |
685 | 0 | return NULL; |
686 | | |
687 | 847M | if (state == NULL) { |
688 | 133 | if (!CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)-1)) |
689 | 0 | return NULL; |
690 | | |
691 | 133 | if ((state = OPENSSL_zalloc(sizeof(*state))) == NULL) { |
692 | 0 | CRYPTO_THREAD_set_local(&err_thread_local, NULL); |
693 | 0 | return NULL; |
694 | 0 | } |
695 | | |
696 | 133 | if (!ossl_init_thread_start(NULL, NULL, err_delete_thread_state) |
697 | 133 | || !CRYPTO_THREAD_set_local(&err_thread_local, state)) { |
698 | 0 | ERR_STATE_free(state); |
699 | 0 | CRYPTO_THREAD_set_local(&err_thread_local, NULL); |
700 | 0 | return NULL; |
701 | 0 | } |
702 | | |
703 | | /* Ignore failures from these */ |
704 | 133 | OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL); |
705 | 133 | } |
706 | | |
707 | 847M | set_sys_error(saveerrno); |
708 | 847M | return state; |
709 | 847M | } |
710 | | |
711 | | #ifndef OPENSSL_NO_DEPRECATED_3_0 |
712 | | ERR_STATE *ERR_get_state(void) |
713 | 0 | { |
714 | 0 | return ossl_err_get_state_int(); |
715 | 0 | } |
716 | | #endif |
717 | | |
718 | | |
719 | | /* |
720 | | * err_shelve_state returns the current thread local error state |
721 | | * and freezes the error module until err_unshelve_state is called. |
722 | | */ |
723 | | int err_shelve_state(void **state) |
724 | 85 | { |
725 | 85 | int saveerrno = get_last_sys_error(); |
726 | | |
727 | | /* |
728 | | * Note, at present our only caller is OPENSSL_init_crypto(), indirectly |
729 | | * via ossl_init_load_crypto_nodelete(), by which point the requested |
730 | | * "base" initialization has already been performed, so the below call is a |
731 | | * NOOP, that re-enters OPENSSL_init_crypto() only to quickly return. |
732 | | * |
733 | | * If are no other valid callers of this function, the call below can be |
734 | | * removed, avoiding the re-entry into OPENSSL_init_crypto(). If there are |
735 | | * potential uses that are not from inside OPENSSL_init_crypto(), then this |
736 | | * call is needed, but some care is required to make sure that the re-entry |
737 | | * remains a NOOP. |
738 | | */ |
739 | 85 | if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL)) |
740 | 0 | return 0; |
741 | | |
742 | 85 | if (!RUN_ONCE(&err_init, err_do_init)) |
743 | 0 | return 0; |
744 | | |
745 | 85 | *state = CRYPTO_THREAD_get_local(&err_thread_local); |
746 | 85 | if (!CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)-1)) |
747 | 0 | return 0; |
748 | | |
749 | 85 | set_sys_error(saveerrno); |
750 | 85 | return 1; |
751 | 85 | } |
752 | | |
753 | | /* |
754 | | * err_unshelve_state restores the error state that was returned |
755 | | * by err_shelve_state previously. |
756 | | */ |
757 | | void err_unshelve_state(void* state) |
758 | 85 | { |
759 | 85 | if (state != (void*)-1) |
760 | 85 | CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)state); |
761 | 85 | } |
762 | | |
763 | | int ERR_get_next_error_library(void) |
764 | 105 | { |
765 | 105 | int ret; |
766 | | |
767 | 105 | if (!RUN_ONCE(&err_string_init, do_err_strings_init)) |
768 | 0 | return 0; |
769 | | |
770 | 105 | if (!CRYPTO_THREAD_write_lock(err_string_lock)) |
771 | 0 | return 0; |
772 | 105 | ret = int_err_library_number++; |
773 | 105 | CRYPTO_THREAD_unlock(err_string_lock); |
774 | 105 | return ret; |
775 | 105 | } |
776 | | |
777 | | static int err_set_error_data_int(char *data, size_t size, int flags, |
778 | | int deallocate) |
779 | 11.6M | { |
780 | 11.6M | ERR_STATE *es; |
781 | | |
782 | 11.6M | es = ossl_err_get_state_int(); |
783 | 11.6M | if (es == NULL) |
784 | 0 | return 0; |
785 | | |
786 | 11.6M | err_clear_data(es, es->top, deallocate); |
787 | 11.6M | err_set_data(es, es->top, data, size, flags); |
788 | | |
789 | 11.6M | return 1; |
790 | 11.6M | } |
791 | | |
792 | | void ERR_set_error_data(char *data, int flags) |
793 | 0 | { |
794 | | /* |
795 | | * This function is void so we cannot propagate the error return. Since it |
796 | | * is also in the public API we can't change the return type. |
797 | | * |
798 | | * We estimate the size of the data. If it's not flagged as allocated, |
799 | | * then this is safe, and if it is flagged as allocated, then our size |
800 | | * may be smaller than the actual allocation, but that doesn't matter |
801 | | * too much, the buffer will remain untouched or will eventually be |
802 | | * reallocated to a new size. |
803 | | * |
804 | | * callers should be advised that this function takes over ownership of |
805 | | * the allocated memory, i.e. they can't count on the pointer to remain |
806 | | * valid. |
807 | | */ |
808 | 0 | err_set_error_data_int(data, strlen(data) + 1, flags, 1); |
809 | 0 | } |
810 | | |
811 | | void ERR_add_error_data(int num, ...) |
812 | 11.6M | { |
813 | 11.6M | va_list args; |
814 | 11.6M | va_start(args, num); |
815 | 11.6M | ERR_add_error_vdata(num, args); |
816 | 11.6M | va_end(args); |
817 | 11.6M | } |
818 | | |
819 | | void ERR_add_error_vdata(int num, va_list args) |
820 | 5.58M | { |
821 | 5.58M | int i, len, size; |
822 | 5.58M | int flags = ERR_TXT_MALLOCED | ERR_TXT_STRING; |
823 | 5.58M | char *str, *arg; |
824 | 5.58M | ERR_STATE *es; |
825 | | |
826 | | /* Get the current error data; if an allocated string get it. */ |
827 | 5.58M | es = ossl_err_get_state_int(); |
828 | 5.58M | if (es == NULL) |
829 | 0 | return; |
830 | 5.58M | i = es->top; |
831 | | |
832 | | /* |
833 | | * If err_data is allocated already, re-use the space. |
834 | | * Otherwise, allocate a small new buffer. |
835 | | */ |
836 | 5.58M | if ((es->err_data_flags[i] & flags) == flags) { |
837 | 2.41k | str = es->err_data[i]; |
838 | 2.41k | size = es->err_data_size[i]; |
839 | | |
840 | | /* |
841 | | * To protect the string we just grabbed from tampering by other |
842 | | * functions we may call, or to protect them from freeing a pointer |
843 | | * that may no longer be valid at that point, we clear away the |
844 | | * data pointer and the flags. We will set them again at the end |
845 | | * of this function. |
846 | | */ |
847 | 2.41k | es->err_data[i] = NULL; |
848 | 2.41k | es->err_data_flags[i] = 0; |
849 | 5.57M | } else if ((str = OPENSSL_malloc(size = 81)) == NULL) { |
850 | 0 | return; |
851 | 5.57M | } else { |
852 | 5.57M | str[0] = '\0'; |
853 | 5.57M | } |
854 | 5.58M | len = strlen(str); |
855 | | |
856 | 24.1M | while (--num >= 0) { |
857 | 18.5M | arg = va_arg(args, char *); |
858 | 18.5M | if (arg == NULL) |
859 | 0 | arg = "<NULL>"; |
860 | 18.5M | len += strlen(arg); |
861 | 18.5M | if (len >= size) { |
862 | 2.31k | char *p; |
863 | | |
864 | 2.31k | size = len + 20; |
865 | 2.31k | p = OPENSSL_realloc(str, size); |
866 | 2.31k | if (p == NULL) { |
867 | 0 | OPENSSL_free(str); |
868 | 0 | return; |
869 | 0 | } |
870 | 2.31k | str = p; |
871 | 2.31k | } |
872 | 18.5M | OPENSSL_strlcat(str, arg, (size_t)size); |
873 | 18.5M | } |
874 | 5.58M | if (!err_set_error_data_int(str, size, flags, 0)) |
875 | 0 | OPENSSL_free(str); |
876 | 5.58M | } |
877 | | |
878 | | int ERR_set_mark(void) |
879 | 83.6M | { |
880 | 83.6M | ERR_STATE *es; |
881 | | |
882 | 83.6M | es = ossl_err_get_state_int(); |
883 | 83.6M | if (es == NULL) |
884 | 0 | return 0; |
885 | | |
886 | 83.6M | if (es->bottom == es->top) |
887 | 78.4M | return 0; |
888 | 5.19M | es->err_marks[es->top]++; |
889 | 5.19M | return 1; |
890 | 83.6M | } |
891 | | |
892 | | int ERR_pop_to_mark(void) |
893 | 150M | { |
894 | 150M | ERR_STATE *es; |
895 | | |
896 | 150M | es = ossl_err_get_state_int(); |
897 | 150M | if (es == NULL) |
898 | 0 | return 0; |
899 | | |
900 | 264M | while (es->bottom != es->top |
901 | 264M | && es->err_marks[es->top] == 0) { |
902 | 114M | err_clear(es, es->top, 0); |
903 | 114M | es->top = es->top > 0 ? es->top - 1 : ERR_NUM_ERRORS - 1; |
904 | 114M | } |
905 | | |
906 | 150M | if (es->bottom == es->top) |
907 | 146M | return 0; |
908 | 3.50M | es->err_marks[es->top]--; |
909 | 3.50M | return 1; |
910 | 150M | } |
911 | | |
912 | | int ERR_clear_last_mark(void) |
913 | 7.87M | { |
914 | 7.87M | ERR_STATE *es; |
915 | 7.87M | int top; |
916 | | |
917 | 7.87M | es = ossl_err_get_state_int(); |
918 | 7.87M | if (es == NULL) |
919 | 0 | return 0; |
920 | | |
921 | 7.87M | top = es->top; |
922 | 12.8M | while (es->bottom != top |
923 | 12.8M | && es->err_marks[top] == 0) { |
924 | 4.97M | top = top > 0 ? top - 1 : ERR_NUM_ERRORS - 1; |
925 | 4.97M | } |
926 | | |
927 | 7.87M | if (es->bottom == top) |
928 | 6.60M | return 0; |
929 | 1.26M | es->err_marks[top]--; |
930 | 1.26M | return 1; |
931 | 7.87M | } |
932 | | |
933 | | void err_clear_last_constant_time(int clear) |
934 | 5.58k | { |
935 | 5.58k | ERR_STATE *es; |
936 | 5.58k | int top; |
937 | | |
938 | 5.58k | es = ossl_err_get_state_int(); |
939 | 5.58k | if (es == NULL) |
940 | 0 | return; |
941 | | |
942 | 5.58k | top = es->top; |
943 | | |
944 | | /* |
945 | | * Flag error as cleared but remove it elsewhere to avoid two errors |
946 | | * accessing the same error stack location, revealing timing information. |
947 | | */ |
948 | 5.58k | clear = constant_time_select_int(constant_time_eq_int(clear, 0), |
949 | 5.58k | 0, ERR_FLAG_CLEAR); |
950 | 5.58k | es->err_flags[top] |= clear; |
951 | 5.58k | } |