Coverage Report

Created: 2025-06-13 06:58

/src/openssl30/crypto/err/err.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#define OSSL_FORCE_ERR_STATE
11
12
#include <stdio.h>
13
#include <stdarg.h>
14
#include <string.h>
15
#include "crypto/cryptlib.h"
16
#include "internal/err.h"
17
#include "crypto/err.h"
18
#include <openssl/err.h>
19
#include <openssl/crypto.h>
20
#include <openssl/buffer.h>
21
#include <openssl/bio.h>
22
#include <openssl/opensslconf.h>
23
#include "internal/thread_once.h"
24
#include "crypto/ctype.h"
25
#include "internal/constant_time.h"
26
#include "e_os.h"
27
#include "err_local.h"
28
29
/* Forward declaration in case it's not published because of configuration */
30
ERR_STATE *ERR_get_state(void);
31
32
#ifndef OPENSSL_NO_ERR
33
static int err_load_strings(const ERR_STRING_DATA *str);
34
#endif
35
36
static void ERR_STATE_free(ERR_STATE *s);
37
#ifndef OPENSSL_NO_ERR
38
static ERR_STRING_DATA ERR_str_libraries[] = {
39
    {ERR_PACK(ERR_LIB_NONE, 0, 0), "unknown library"},
40
    {ERR_PACK(ERR_LIB_SYS, 0, 0), "system library"},
41
    {ERR_PACK(ERR_LIB_BN, 0, 0), "bignum routines"},
42
    {ERR_PACK(ERR_LIB_RSA, 0, 0), "rsa routines"},
43
    {ERR_PACK(ERR_LIB_DH, 0, 0), "Diffie-Hellman routines"},
44
    {ERR_PACK(ERR_LIB_EVP, 0, 0), "digital envelope routines"},
45
    {ERR_PACK(ERR_LIB_BUF, 0, 0), "memory buffer routines"},
46
    {ERR_PACK(ERR_LIB_OBJ, 0, 0), "object identifier routines"},
47
    {ERR_PACK(ERR_LIB_PEM, 0, 0), "PEM routines"},
48
    {ERR_PACK(ERR_LIB_DSA, 0, 0), "dsa routines"},
49
    {ERR_PACK(ERR_LIB_X509, 0, 0), "x509 certificate routines"},
50
    {ERR_PACK(ERR_LIB_ASN1, 0, 0), "asn1 encoding routines"},
51
    {ERR_PACK(ERR_LIB_CONF, 0, 0), "configuration file routines"},
52
    {ERR_PACK(ERR_LIB_CRYPTO, 0, 0), "common libcrypto routines"},
53
    {ERR_PACK(ERR_LIB_EC, 0, 0), "elliptic curve routines"},
54
    {ERR_PACK(ERR_LIB_ECDSA, 0, 0), "ECDSA routines"},
55
    {ERR_PACK(ERR_LIB_ECDH, 0, 0), "ECDH routines"},
56
    {ERR_PACK(ERR_LIB_SSL, 0, 0), "SSL routines"},
57
    {ERR_PACK(ERR_LIB_BIO, 0, 0), "BIO routines"},
58
    {ERR_PACK(ERR_LIB_PKCS7, 0, 0), "PKCS7 routines"},
59
    {ERR_PACK(ERR_LIB_X509V3, 0, 0), "X509 V3 routines"},
60
    {ERR_PACK(ERR_LIB_PKCS12, 0, 0), "PKCS12 routines"},
61
    {ERR_PACK(ERR_LIB_RAND, 0, 0), "random number generator"},
62
    {ERR_PACK(ERR_LIB_DSO, 0, 0), "DSO support routines"},
63
    {ERR_PACK(ERR_LIB_TS, 0, 0), "time stamp routines"},
64
    {ERR_PACK(ERR_LIB_ENGINE, 0, 0), "engine routines"},
65
    {ERR_PACK(ERR_LIB_OCSP, 0, 0), "OCSP routines"},
66
    {ERR_PACK(ERR_LIB_UI, 0, 0), "UI routines"},
67
    {ERR_PACK(ERR_LIB_FIPS, 0, 0), "FIPS routines"},
68
    {ERR_PACK(ERR_LIB_CMS, 0, 0), "CMS routines"},
69
    {ERR_PACK(ERR_LIB_CRMF, 0, 0), "CRMF routines"},
70
    {ERR_PACK(ERR_LIB_CMP, 0, 0), "CMP routines"},
71
    {ERR_PACK(ERR_LIB_HMAC, 0, 0), "HMAC routines"},
72
    {ERR_PACK(ERR_LIB_CT, 0, 0), "CT routines"},
73
    {ERR_PACK(ERR_LIB_ASYNC, 0, 0), "ASYNC routines"},
74
    {ERR_PACK(ERR_LIB_KDF, 0, 0), "KDF routines"},
75
    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, 0), "STORE routines"},
76
    {ERR_PACK(ERR_LIB_SM2, 0, 0), "SM2 routines"},
77
    {ERR_PACK(ERR_LIB_ESS, 0, 0), "ESS routines"},
78
    {ERR_PACK(ERR_LIB_PROV, 0, 0), "Provider routines"},
79
    {ERR_PACK(ERR_LIB_OSSL_ENCODER, 0, 0), "ENCODER routines"},
80
    {ERR_PACK(ERR_LIB_OSSL_DECODER, 0, 0), "DECODER routines"},
81
    {ERR_PACK(ERR_LIB_HTTP, 0, 0), "HTTP routines"},
82
    {0, NULL},
83
};
84
85
/*
86
 * Should make sure that all ERR_R_ reasons defined in include/openssl/err.h.in
87
 * are listed.  For maintainability, please keep all reasons in the same order.
88
 */
89
static ERR_STRING_DATA ERR_str_reasons[] = {
90
    {ERR_R_SYS_LIB, "system lib"},
91
    {ERR_R_BN_LIB, "BN lib"},
92
    {ERR_R_RSA_LIB, "RSA lib"},
93
    {ERR_R_DH_LIB, "DH lib"},
94
    {ERR_R_EVP_LIB, "EVP lib"},
95
    {ERR_R_BUF_LIB, "BUF lib"},
96
    {ERR_R_OBJ_LIB, "OBJ lib"},
97
    {ERR_R_PEM_LIB, "PEM lib"},
98
    {ERR_R_DSA_LIB, "DSA lib"},
99
    {ERR_R_X509_LIB, "X509 lib"},
100
    {ERR_R_ASN1_LIB, "ASN1 lib"},
101
    {ERR_R_CRYPTO_LIB, "CRYPTO lib"},
102
    {ERR_R_EC_LIB, "EC lib"},
103
    {ERR_R_BIO_LIB, "BIO lib"},
104
    {ERR_R_PKCS7_LIB, "PKCS7 lib"},
105
    {ERR_R_X509V3_LIB, "X509V3 lib"},
106
    {ERR_R_ENGINE_LIB, "ENGINE lib"},
107
    {ERR_R_UI_LIB, "UI lib"},
108
    {ERR_R_ECDSA_LIB, "ECDSA lib"},
109
    {ERR_R_OSSL_STORE_LIB, "OSSL_STORE lib"},
110
    {ERR_R_OSSL_DECODER_LIB, "OSSL_DECODER lib"},
111
112
    {ERR_R_FATAL, "fatal"},
113
    {ERR_R_MALLOC_FAILURE, "malloc failure"},
114
    {ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED,
115
     "called a function you should not call"},
116
    {ERR_R_PASSED_NULL_PARAMETER, "passed a null parameter"},
117
    {ERR_R_INTERNAL_ERROR, "internal error"},
118
    {ERR_R_DISABLED, "called a function that was disabled at compile-time"},
119
    {ERR_R_INIT_FAIL, "init fail"},
120
    {ERR_R_PASSED_INVALID_ARGUMENT, "passed invalid argument"},
121
    {ERR_R_OPERATION_FAIL, "operation fail"},
122
    {ERR_R_INVALID_PROVIDER_FUNCTIONS, "invalid provider functions"},
123
    {ERR_R_INTERRUPTED_OR_CANCELLED, "interrupted or cancelled"},
124
    {ERR_R_NESTED_ASN1_ERROR, "nested asn1 error"},
125
    {ERR_R_MISSING_ASN1_EOS, "missing asn1 eos"},
126
    /*
127
     * Something is unsupported, exactly what is expressed with additional data
128
     */
129
    {ERR_R_UNSUPPORTED, "unsupported"},
130
    /*
131
     * A fetch failed for other reasons than the name to be fetched being
132
     * unsupported.
133
     */
134
    {ERR_R_FETCH_FAILED, "fetch failed"},
135
    {ERR_R_INVALID_PROPERTY_DEFINITION, "invalid property definition"},
136
    {ERR_R_UNABLE_TO_GET_READ_LOCK, "unable to get read lock"},
137
    {ERR_R_UNABLE_TO_GET_WRITE_LOCK, "unable to get write lock"},
138
    {0, NULL},
139
};
140
#endif
141
142
static CRYPTO_ONCE err_init = CRYPTO_ONCE_STATIC_INIT;
143
static int set_err_thread_local;
144
static CRYPTO_THREAD_LOCAL err_thread_local;
145
146
static CRYPTO_ONCE err_string_init = CRYPTO_ONCE_STATIC_INIT;
147
static CRYPTO_RWLOCK *err_string_lock = NULL;
148
149
#ifndef OPENSSL_NO_ERR
150
static ERR_STRING_DATA *int_err_get_item(const ERR_STRING_DATA *);
151
#endif
152
153
/*
154
 * The internal state
155
 */
156
157
#ifndef OPENSSL_NO_ERR
158
static LHASH_OF(ERR_STRING_DATA) *int_error_hash = NULL;
159
#endif
160
static int int_err_library_number = ERR_LIB_USER;
161
162
typedef enum ERR_GET_ACTION_e {
163
    EV_POP, EV_PEEK, EV_PEEK_LAST
164
} ERR_GET_ACTION;
165
166
static unsigned long get_error_values(ERR_GET_ACTION g,
167
                                      const char **file, int *line,
168
                                      const char **func, const char **data,
169
                                      int *flags);
170
171
#ifndef OPENSSL_NO_ERR
172
static unsigned long err_string_data_hash(const ERR_STRING_DATA *a)
173
1.08M
{
174
1.08M
    unsigned long ret, l;
175
176
1.08M
    l = a->error;
177
1.08M
    ret = l ^ ERR_GET_LIB(l);
178
1.08M
    return (ret ^ ret % 19 * 13);
179
1.08M
}
180
181
static int err_string_data_cmp(const ERR_STRING_DATA *a,
182
                               const ERR_STRING_DATA *b)
183
880k
{
184
880k
    if (a->error == b->error)
185
851k
        return 0;
186
28.5k
    return a->error > b->error ? 1 : -1;
187
880k
}
188
189
static ERR_STRING_DATA *int_err_get_item(const ERR_STRING_DATA *d)
190
498k
{
191
498k
    ERR_STRING_DATA *p = NULL;
192
193
498k
    if (!CRYPTO_THREAD_read_lock(err_string_lock))
194
0
        return NULL;
195
498k
    p = lh_ERR_STRING_DATA_retrieve(int_error_hash, d);
196
498k
    CRYPTO_THREAD_unlock(err_string_lock);
197
198
498k
    return p;
199
498k
}
200
#endif
201
202
static void ERR_STATE_free(ERR_STATE *s)
203
48
{
204
48
    int i;
205
206
48
    if (s == NULL)
207
0
        return;
208
816
    for (i = 0; i < ERR_NUM_ERRORS; i++) {
209
768
        err_clear(s, i, 1);
210
768
    }
211
48
    OPENSSL_free(s);
212
48
}
213
214
DEFINE_RUN_ONCE_STATIC(do_err_strings_init)
215
133
{
216
133
    if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL))
217
0
        return 0;
218
133
    err_string_lock = CRYPTO_THREAD_lock_new();
219
133
    if (err_string_lock == NULL)
220
0
        return 0;
221
133
#ifndef OPENSSL_NO_ERR
222
133
    int_error_hash = lh_ERR_STRING_DATA_new(err_string_data_hash,
223
133
                                            err_string_data_cmp);
224
133
    if (int_error_hash == NULL) {
225
0
        CRYPTO_THREAD_lock_free(err_string_lock);
226
0
        err_string_lock = NULL;
227
0
        return 0;
228
0
    }
229
133
#endif
230
133
    return 1;
231
133
}
232
233
void err_cleanup(void)
234
133
{
235
133
    if (set_err_thread_local != 0)
236
133
        CRYPTO_THREAD_cleanup_local(&err_thread_local);
237
133
    CRYPTO_THREAD_lock_free(err_string_lock);
238
133
    err_string_lock = NULL;
239
133
#ifndef OPENSSL_NO_ERR
240
133
    lh_ERR_STRING_DATA_free(int_error_hash);
241
133
    int_error_hash = NULL;
242
133
#endif
243
133
}
244
245
#ifndef OPENSSL_NO_ERR
246
/*
247
 * Legacy; pack in the library.
248
 */
249
static void err_patch(int lib, ERR_STRING_DATA *str)
250
0
{
251
0
    unsigned long plib = ERR_PACK(lib, 0, 0);
252
253
0
    for (; str->error != 0; str++)
254
0
        str->error |= plib;
255
0
}
256
257
/*
258
 * Hash in |str| error strings. Assumes the RUN_ONCE was done.
259
 */
260
static int err_load_strings(const ERR_STRING_DATA *str)
261
13.9k
{
262
13.9k
    if (!CRYPTO_THREAD_write_lock(err_string_lock))
263
0
        return 0;
264
598k
    for (; str->error; str++)
265
584k
        (void)lh_ERR_STRING_DATA_insert(int_error_hash,
266
13.9k
                                       (ERR_STRING_DATA *)str);
267
13.9k
    CRYPTO_THREAD_unlock(err_string_lock);
268
13.9k
    return 1;
269
13.9k
}
270
#endif
271
272
int ossl_err_load_ERR_strings(void)
273
4.69k
{
274
4.69k
#ifndef OPENSSL_NO_ERR
275
4.69k
    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
276
0
        return 0;
277
278
4.69k
    err_load_strings(ERR_str_libraries);
279
4.69k
    err_load_strings(ERR_str_reasons);
280
4.69k
#endif
281
4.69k
    return 1;
282
4.69k
}
283
284
int ERR_load_strings(int lib, ERR_STRING_DATA *str)
285
0
{
286
0
#ifndef OPENSSL_NO_ERR
287
0
    if (ossl_err_load_ERR_strings() == 0)
288
0
        return 0;
289
290
0
    err_patch(lib, str);
291
0
    err_load_strings(str);
292
0
#endif
293
294
0
    return 1;
295
0
}
296
297
int ERR_load_strings_const(const ERR_STRING_DATA *str)
298
4.56k
{
299
4.56k
#ifndef OPENSSL_NO_ERR
300
4.56k
    if (ossl_err_load_ERR_strings() == 0)
301
0
        return 0;
302
4.56k
    err_load_strings(str);
303
4.56k
#endif
304
305
4.56k
    return 1;
306
4.56k
}
307
308
int ERR_unload_strings(int lib, ERR_STRING_DATA *str)
309
0
{
310
0
#ifndef OPENSSL_NO_ERR
311
0
    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
312
0
        return 0;
313
314
0
    if (!CRYPTO_THREAD_write_lock(err_string_lock))
315
0
        return 0;
316
    /*
317
     * We don't need to ERR_PACK the lib, since that was done (to
318
     * the table) when it was loaded.
319
     */
320
0
    for (; str->error; str++)
321
0
        (void)lh_ERR_STRING_DATA_delete(int_error_hash, str);
322
0
    CRYPTO_THREAD_unlock(err_string_lock);
323
0
#endif
324
325
0
    return 1;
326
0
}
327
328
void err_free_strings_int(void)
329
0
{
330
    /* obsolete */
331
0
}
332
333
/********************************************************/
334
335
void ERR_clear_error(void)
336
28.1M
{
337
28.1M
    int i;
338
28.1M
    ERR_STATE *es;
339
340
28.1M
    es = ossl_err_get_state_int();
341
28.1M
    if (es == NULL)
342
0
        return;
343
344
478M
    for (i = 0; i < ERR_NUM_ERRORS; i++) {
345
450M
        err_clear(es, i, 0);
346
450M
    }
347
28.1M
    es->top = es->bottom = 0;
348
28.1M
}
349
350
unsigned long ERR_get_error(void)
351
0
{
352
0
    return get_error_values(EV_POP, NULL, NULL, NULL, NULL, NULL);
353
0
}
354
355
unsigned long ERR_get_error_all(const char **file, int *line,
356
                                const char **func,
357
                                const char **data, int *flags)
358
305k
{
359
305k
    return get_error_values(EV_POP, file, line, func, data, flags);
360
305k
}
361
362
#ifndef OPENSSL_NO_DEPRECATED_3_0
363
unsigned long ERR_get_error_line(const char **file, int *line)
364
0
{
365
0
    return get_error_values(EV_POP, file, line, NULL, NULL, NULL);
366
0
}
367
368
unsigned long ERR_get_error_line_data(const char **file, int *line,
369
                                      const char **data, int *flags)
370
0
{
371
0
    return get_error_values(EV_POP, file, line, NULL, data, flags);
372
0
}
373
#endif
374
375
unsigned long ERR_peek_error(void)
376
29.4k
{
377
29.4k
    return get_error_values(EV_PEEK, NULL, NULL, NULL, NULL, NULL);
378
29.4k
}
379
380
unsigned long ERR_peek_error_line(const char **file, int *line)
381
0
{
382
0
    return get_error_values(EV_PEEK, file, line, NULL, NULL, NULL);
383
0
}
384
385
unsigned long ERR_peek_error_func(const char **func)
386
0
{
387
0
    return get_error_values(EV_PEEK, NULL, NULL, func, NULL, NULL);
388
0
}
389
390
unsigned long ERR_peek_error_data(const char **data, int *flags)
391
28.3k
{
392
28.3k
    return get_error_values(EV_PEEK, NULL, NULL, NULL, data, flags);
393
28.3k
}
394
395
unsigned long ERR_peek_error_all(const char **file, int *line,
396
                                 const char **func,
397
                                 const char **data, int *flags)
398
0
{
399
0
    return get_error_values(EV_PEEK, file, line, func, data, flags);
400
0
}
401
402
#ifndef OPENSSL_NO_DEPRECATED_3_0
403
unsigned long ERR_peek_error_line_data(const char **file, int *line,
404
                                       const char **data, int *flags)
405
0
{
406
0
    return get_error_values(EV_PEEK, file, line, NULL, data, flags);
407
0
}
408
#endif
409
410
unsigned long ERR_peek_last_error(void)
411
105M
{
412
105M
    return get_error_values(EV_PEEK_LAST, NULL, NULL, NULL, NULL, NULL);
413
105M
}
414
415
unsigned long ERR_peek_last_error_line(const char **file, int *line)
416
0
{
417
0
    return get_error_values(EV_PEEK_LAST, file, line, NULL, NULL, NULL);
418
0
}
419
420
unsigned long ERR_peek_last_error_func(const char **func)
421
0
{
422
0
    return get_error_values(EV_PEEK_LAST, NULL, NULL, func, NULL, NULL);
423
0
}
424
425
unsigned long ERR_peek_last_error_data(const char **data, int *flags)
426
0
{
427
0
    return get_error_values(EV_PEEK_LAST, NULL, NULL, NULL, data, flags);
428
0
}
429
430
unsigned long ERR_peek_last_error_all(const char **file, int *line,
431
                                      const char **func,
432
                                      const char **data, int *flags)
433
7.49k
{
434
7.49k
    return get_error_values(EV_PEEK_LAST, file, line, func, data, flags);
435
7.49k
}
436
437
#ifndef OPENSSL_NO_DEPRECATED_3_0
438
unsigned long ERR_peek_last_error_line_data(const char **file, int *line,
439
                                            const char **data, int *flags)
440
0
{
441
0
    return get_error_values(EV_PEEK_LAST, file, line, NULL, data, flags);
442
0
}
443
#endif
444
445
static unsigned long get_error_values(ERR_GET_ACTION g,
446
                                      const char **file, int *line,
447
                                      const char **func,
448
                                      const char **data, int *flags)
449
105M
{
450
105M
    int i = 0;
451
105M
    ERR_STATE *es;
452
105M
    unsigned long ret;
453
454
105M
    es = ossl_err_get_state_int();
455
105M
    if (es == NULL)
456
0
        return 0;
457
458
    /*
459
     * Clear anything that should have been cleared earlier. We do this
460
     * here because this doesn't have constant-time issues.
461
     */
462
105M
    while (es->bottom != es->top) {
463
104M
        if (es->err_flags[es->top] & ERR_FLAG_CLEAR) {
464
0
            err_clear(es, es->top, 0);
465
0
            es->top = es->top > 0 ? es->top - 1 : ERR_NUM_ERRORS - 1;
466
0
            continue;
467
0
        }
468
104M
        i = (es->bottom + 1) % ERR_NUM_ERRORS;
469
104M
        if (es->err_flags[i] & ERR_FLAG_CLEAR) {
470
0
            es->bottom = i;
471
0
            err_clear(es, es->bottom, 0);
472
0
            continue;
473
0
        }
474
104M
        break;
475
104M
    }
476
477
    /* If everything has been cleared, the stack is empty. */
478
105M
    if (es->bottom == es->top)
479
1.22M
        return 0;
480
481
    /* Which error, the top of stack (latest one) or the first one? */
482
104M
    if (g == EV_PEEK_LAST)
483
103M
        i = es->top;
484
226k
    else
485
226k
        i = (es->bottom + 1) % ERR_NUM_ERRORS;
486
487
104M
    ret = es->err_buffer[i];
488
104M
    if (g == EV_POP) {
489
196k
        es->bottom = i;
490
196k
        es->err_buffer[i] = 0;
491
196k
    }
492
493
104M
    if (file != NULL) {
494
204k
        *file = es->err_file[i];
495
204k
        if (*file == NULL)
496
0
            *file = "";
497
204k
    }
498
104M
    if (line != NULL)
499
204k
        *line = es->err_line[i];
500
104M
    if (func != NULL) {
501
204k
        *func = es->err_func[i];
502
204k
        if (*func == NULL)
503
0
            *func = "";
504
204k
    }
505
104M
    if (flags != NULL)
506
232k
        *flags = es->err_data_flags[i];
507
104M
    if (data == NULL) {
508
103M
        if (g == EV_POP) {
509
0
            err_clear_data(es, i, 0);
510
0
        }
511
103M
    } else {
512
232k
        *data = es->err_data[i];
513
232k
        if (*data == NULL) {
514
81
            *data = "";
515
81
            if (flags != NULL)
516
81
                *flags = 0;
517
81
        }
518
232k
    }
519
104M
    return ret;
520
105M
}
521
522
void ossl_err_string_int(unsigned long e, const char *func,
523
                         char *buf, size_t len)
524
23.2k
{
525
23.2k
    char lsbuf[64], rsbuf[256];
526
23.2k
    const char *ls, *rs = NULL;
527
23.2k
    unsigned long l, r;
528
529
23.2k
    if (len == 0)
530
0
        return;
531
532
23.2k
    l = ERR_GET_LIB(e);
533
23.2k
    ls = ERR_lib_error_string(e);
534
23.2k
    if (ls == NULL) {
535
0
        BIO_snprintf(lsbuf, sizeof(lsbuf), "lib(%lu)", l);
536
0
        ls = lsbuf;
537
0
    }
538
539
    /*
540
     * ERR_reason_error_string() can't safely return system error strings,
541
     * since it would call openssl_strerror_r(), which needs a buffer for
542
     * thread safety.  So for system errors, we call openssl_strerror_r()
543
     * directly instead.
544
     */
545
23.2k
    r = ERR_GET_REASON(e);
546
23.2k
#ifndef OPENSSL_NO_ERR
547
23.2k
    if (ERR_SYSTEM_ERROR(e)) {
548
0
        if (openssl_strerror_r(r, rsbuf, sizeof(rsbuf)))
549
0
            rs = rsbuf;
550
23.2k
    } else {
551
23.2k
        rs = ERR_reason_error_string(e);
552
23.2k
    }
553
23.2k
#endif
554
23.2k
    if (rs == NULL) {
555
0
        BIO_snprintf(rsbuf, sizeof(rsbuf), "reason(%lu)", r);
556
0
        rs = rsbuf;
557
0
    }
558
559
23.2k
    BIO_snprintf(buf, len, "error:%08lX:%s:%s:%s", e, ls, func, rs);
560
23.2k
    if (strlen(buf) == len - 1) {
561
        /* Didn't fit; use a minimal format. */
562
0
        BIO_snprintf(buf, len, "err:%lx:%lx:%lx:%lx", e, l, 0L, r);
563
0
    }
564
23.2k
}
565
566
567
void ERR_error_string_n(unsigned long e, char *buf, size_t len)
568
0
{
569
0
    ossl_err_string_int(e, "", buf, len);
570
0
}
571
572
/*
573
 * ERR_error_string_n should be used instead for ret != NULL as
574
 * ERR_error_string cannot know how large the buffer is
575
 */
576
char *ERR_error_string(unsigned long e, char *ret)
577
0
{
578
0
    static char buf[256];
579
580
0
    if (ret == NULL)
581
0
        ret = buf;
582
0
    ERR_error_string_n(e, ret, (int)sizeof(buf));
583
0
    return ret;
584
0
}
585
586
const char *ERR_lib_error_string(unsigned long e)
587
225k
{
588
225k
#ifndef OPENSSL_NO_ERR
589
225k
    ERR_STRING_DATA d, *p;
590
225k
    unsigned long l;
591
592
225k
    if (!RUN_ONCE(&err_string_init, do_err_strings_init)) {
593
0
        return NULL;
594
0
    }
595
596
225k
    l = ERR_GET_LIB(e);
597
225k
    d.error = ERR_PACK(l, 0, 0);
598
225k
    p = int_err_get_item(&d);
599
225k
    return ((p == NULL) ? NULL : p->string);
600
#else
601
    return NULL;
602
#endif
603
225k
}
604
605
#ifndef OPENSSL_NO_DEPRECATED_3_0
606
const char *ERR_func_error_string(unsigned long e)
607
0
{
608
0
    return NULL;
609
0
}
610
#endif
611
612
const char *ERR_reason_error_string(unsigned long e)
613
258k
{
614
258k
#ifndef OPENSSL_NO_ERR
615
258k
    ERR_STRING_DATA d, *p = NULL;
616
258k
    unsigned long l, r;
617
618
258k
    if (!RUN_ONCE(&err_string_init, do_err_strings_init)) {
619
0
        return NULL;
620
0
    }
621
622
    /*
623
     * ERR_reason_error_string() can't safely return system error strings,
624
     * since openssl_strerror_r() needs a buffer for thread safety, and we
625
     * haven't got one that would serve any sensible purpose.
626
     */
627
258k
    if (ERR_SYSTEM_ERROR(e))
628
0
        return NULL;
629
630
258k
    l = ERR_GET_LIB(e);
631
258k
    r = ERR_GET_REASON(e);
632
258k
    d.error = ERR_PACK(l, 0, r);
633
258k
    p = int_err_get_item(&d);
634
258k
    if (p == NULL) {
635
15.4k
        d.error = ERR_PACK(0, 0, r);
636
15.4k
        p = int_err_get_item(&d);
637
15.4k
    }
638
258k
    return ((p == NULL) ? NULL : p->string);
639
#else
640
    return NULL;
641
#endif
642
258k
}
643
644
static void err_delete_thread_state(void *unused)
645
133
{
646
133
    ERR_STATE *state = CRYPTO_THREAD_get_local(&err_thread_local);
647
133
    if (state == NULL)
648
0
        return;
649
650
133
    CRYPTO_THREAD_set_local(&err_thread_local, NULL);
651
133
    ERR_STATE_free(state);
652
133
}
653
654
#ifndef OPENSSL_NO_DEPRECATED_1_1_0
655
void ERR_remove_thread_state(void *dummy)
656
0
{
657
0
}
658
#endif
659
660
#ifndef OPENSSL_NO_DEPRECATED_1_0_0
661
void ERR_remove_state(unsigned long pid)
662
0
{
663
0
}
664
#endif
665
666
DEFINE_RUN_ONCE_STATIC(err_do_init)
667
133
{
668
133
    set_err_thread_local = 1;
669
133
    return CRYPTO_THREAD_init_local(&err_thread_local, NULL);
670
133
}
671
672
ERR_STATE *ossl_err_get_state_int(void)
673
847M
{
674
847M
    ERR_STATE *state;
675
847M
    int saveerrno = get_last_sys_error();
676
677
847M
    if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL))
678
0
        return NULL;
679
680
847M
    if (!RUN_ONCE(&err_init, err_do_init))
681
0
        return NULL;
682
683
847M
    state = CRYPTO_THREAD_get_local(&err_thread_local);
684
847M
    if (state == (ERR_STATE*)-1)
685
0
        return NULL;
686
687
847M
    if (state == NULL) {
688
133
        if (!CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)-1))
689
0
            return NULL;
690
691
133
        if ((state = OPENSSL_zalloc(sizeof(*state))) == NULL) {
692
0
            CRYPTO_THREAD_set_local(&err_thread_local, NULL);
693
0
            return NULL;
694
0
        }
695
696
133
        if (!ossl_init_thread_start(NULL, NULL, err_delete_thread_state)
697
133
                || !CRYPTO_THREAD_set_local(&err_thread_local, state)) {
698
0
            ERR_STATE_free(state);
699
0
            CRYPTO_THREAD_set_local(&err_thread_local, NULL);
700
0
            return NULL;
701
0
        }
702
703
        /* Ignore failures from these */
704
133
        OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
705
133
    }
706
707
847M
    set_sys_error(saveerrno);
708
847M
    return state;
709
847M
}
710
711
#ifndef OPENSSL_NO_DEPRECATED_3_0
712
ERR_STATE *ERR_get_state(void)
713
0
{
714
0
    return ossl_err_get_state_int();
715
0
}
716
#endif
717
718
719
/*
720
 * err_shelve_state returns the current thread local error state
721
 * and freezes the error module until err_unshelve_state is called.
722
 */
723
int err_shelve_state(void **state)
724
85
{
725
85
    int saveerrno = get_last_sys_error();
726
727
    /*
728
     * Note, at present our only caller is OPENSSL_init_crypto(), indirectly
729
     * via ossl_init_load_crypto_nodelete(), by which point the requested
730
     * "base" initialization has already been performed, so the below call is a
731
     * NOOP, that re-enters OPENSSL_init_crypto() only to quickly return.
732
     *
733
     * If are no other valid callers of this function, the call below can be
734
     * removed, avoiding the re-entry into OPENSSL_init_crypto().  If there are
735
     * potential uses that are not from inside OPENSSL_init_crypto(), then this
736
     * call is needed, but some care is required to make sure that the re-entry
737
     * remains a NOOP.
738
     */
739
85
    if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL))
740
0
        return 0;
741
742
85
    if (!RUN_ONCE(&err_init, err_do_init))
743
0
        return 0;
744
745
85
    *state = CRYPTO_THREAD_get_local(&err_thread_local);
746
85
    if (!CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)-1))
747
0
        return 0;
748
749
85
    set_sys_error(saveerrno);
750
85
    return 1;
751
85
}
752
753
/*
754
 * err_unshelve_state restores the error state that was returned
755
 * by err_shelve_state previously.
756
 */
757
void err_unshelve_state(void* state)
758
85
{
759
85
    if (state != (void*)-1)
760
85
        CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)state);
761
85
}
762
763
int ERR_get_next_error_library(void)
764
105
{
765
105
    int ret;
766
767
105
    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
768
0
        return 0;
769
770
105
    if (!CRYPTO_THREAD_write_lock(err_string_lock))
771
0
        return 0;
772
105
    ret = int_err_library_number++;
773
105
    CRYPTO_THREAD_unlock(err_string_lock);
774
105
    return ret;
775
105
}
776
777
static int err_set_error_data_int(char *data, size_t size, int flags,
778
                                  int deallocate)
779
11.6M
{
780
11.6M
    ERR_STATE *es;
781
782
11.6M
    es = ossl_err_get_state_int();
783
11.6M
    if (es == NULL)
784
0
        return 0;
785
786
11.6M
    err_clear_data(es, es->top, deallocate);
787
11.6M
    err_set_data(es, es->top, data, size, flags);
788
789
11.6M
    return 1;
790
11.6M
}
791
792
void ERR_set_error_data(char *data, int flags)
793
0
{
794
    /*
795
     * This function is void so we cannot propagate the error return. Since it
796
     * is also in the public API we can't change the return type.
797
     *
798
     * We estimate the size of the data.  If it's not flagged as allocated,
799
     * then this is safe, and if it is flagged as allocated, then our size
800
     * may be smaller than the actual allocation, but that doesn't matter
801
     * too much, the buffer will remain untouched or will eventually be
802
     * reallocated to a new size.
803
     *
804
     * callers should be advised that this function takes over ownership of
805
     * the allocated memory, i.e. they can't count on the pointer to remain
806
     * valid.
807
     */
808
0
    err_set_error_data_int(data, strlen(data) + 1, flags, 1);
809
0
}
810
811
void ERR_add_error_data(int num, ...)
812
11.6M
{
813
11.6M
    va_list args;
814
11.6M
    va_start(args, num);
815
11.6M
    ERR_add_error_vdata(num, args);
816
11.6M
    va_end(args);
817
11.6M
}
818
819
void ERR_add_error_vdata(int num, va_list args)
820
5.58M
{
821
5.58M
    int i, len, size;
822
5.58M
    int flags = ERR_TXT_MALLOCED | ERR_TXT_STRING;
823
5.58M
    char *str, *arg;
824
5.58M
    ERR_STATE *es;
825
826
    /* Get the current error data; if an allocated string get it. */
827
5.58M
    es = ossl_err_get_state_int();
828
5.58M
    if (es == NULL)
829
0
        return;
830
5.58M
    i = es->top;
831
832
    /*
833
     * If err_data is allocated already, re-use the space.
834
     * Otherwise, allocate a small new buffer.
835
     */
836
5.58M
    if ((es->err_data_flags[i] & flags) == flags) {
837
2.41k
        str = es->err_data[i];
838
2.41k
        size = es->err_data_size[i];
839
840
        /*
841
         * To protect the string we just grabbed from tampering by other
842
         * functions we may call, or to protect them from freeing a pointer
843
         * that may no longer be valid at that point, we clear away the
844
         * data pointer and the flags.  We will set them again at the end
845
         * of this function.
846
         */
847
2.41k
        es->err_data[i] = NULL;
848
2.41k
        es->err_data_flags[i] = 0;
849
5.57M
    } else if ((str = OPENSSL_malloc(size = 81)) == NULL) {
850
0
        return;
851
5.57M
    } else {
852
5.57M
        str[0] = '\0';
853
5.57M
    }
854
5.58M
    len = strlen(str);
855
856
24.1M
    while (--num >= 0) {
857
18.5M
        arg = va_arg(args, char *);
858
18.5M
        if (arg == NULL)
859
0
            arg = "<NULL>";
860
18.5M
        len += strlen(arg);
861
18.5M
        if (len >= size) {
862
2.31k
            char *p;
863
864
2.31k
            size = len + 20;
865
2.31k
            p = OPENSSL_realloc(str, size);
866
2.31k
            if (p == NULL) {
867
0
                OPENSSL_free(str);
868
0
                return;
869
0
            }
870
2.31k
            str = p;
871
2.31k
        }
872
18.5M
        OPENSSL_strlcat(str, arg, (size_t)size);
873
18.5M
    }
874
5.58M
    if (!err_set_error_data_int(str, size, flags, 0))
875
0
        OPENSSL_free(str);
876
5.58M
}
877
878
int ERR_set_mark(void)
879
83.6M
{
880
83.6M
    ERR_STATE *es;
881
882
83.6M
    es = ossl_err_get_state_int();
883
83.6M
    if (es == NULL)
884
0
        return 0;
885
886
83.6M
    if (es->bottom == es->top)
887
78.4M
        return 0;
888
5.19M
    es->err_marks[es->top]++;
889
5.19M
    return 1;
890
83.6M
}
891
892
int ERR_pop_to_mark(void)
893
150M
{
894
150M
    ERR_STATE *es;
895
896
150M
    es = ossl_err_get_state_int();
897
150M
    if (es == NULL)
898
0
        return 0;
899
900
264M
    while (es->bottom != es->top
901
264M
           && es->err_marks[es->top] == 0) {
902
114M
        err_clear(es, es->top, 0);
903
114M
        es->top = es->top > 0 ? es->top - 1 : ERR_NUM_ERRORS - 1;
904
114M
    }
905
906
150M
    if (es->bottom == es->top)
907
146M
        return 0;
908
3.50M
    es->err_marks[es->top]--;
909
3.50M
    return 1;
910
150M
}
911
912
int ERR_clear_last_mark(void)
913
7.87M
{
914
7.87M
    ERR_STATE *es;
915
7.87M
    int top;
916
917
7.87M
    es = ossl_err_get_state_int();
918
7.87M
    if (es == NULL)
919
0
        return 0;
920
921
7.87M
    top = es->top;
922
12.8M
    while (es->bottom != top
923
12.8M
           && es->err_marks[top] == 0) {
924
4.97M
        top = top > 0 ? top - 1 : ERR_NUM_ERRORS - 1;
925
4.97M
    }
926
927
7.87M
    if (es->bottom == top)
928
6.60M
        return 0;
929
1.26M
    es->err_marks[top]--;
930
1.26M
    return 1;
931
7.87M
}
932
933
void err_clear_last_constant_time(int clear)
934
5.58k
{
935
5.58k
    ERR_STATE *es;
936
5.58k
    int top;
937
938
5.58k
    es = ossl_err_get_state_int();
939
5.58k
    if (es == NULL)
940
0
        return;
941
942
5.58k
    top = es->top;
943
944
    /*
945
     * Flag error as cleared but remove it elsewhere to avoid two errors
946
     * accessing the same error stack location, revealing timing information.
947
     */
948
5.58k
    clear = constant_time_select_int(constant_time_eq_int(clear, 0),
949
5.58k
                                     0, ERR_FLAG_CLEAR);
950
5.58k
    es->err_flags[top] |= clear;
951
5.58k
}