Coverage Report

Created: 2025-06-13 06:58

/src/openssl31/crypto/bio/bss_mem.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include <stdio.h>
11
#include <errno.h>
12
#include "bio_local.h"
13
#include "internal/cryptlib.h"
14
15
static int mem_write(BIO *h, const char *buf, int num);
16
static int mem_read(BIO *h, char *buf, int size);
17
static int mem_puts(BIO *h, const char *str);
18
static int mem_gets(BIO *h, char *str, int size);
19
static long mem_ctrl(BIO *h, int cmd, long arg1, void *arg2);
20
static int mem_new(BIO *h);
21
static int secmem_new(BIO *h);
22
static int mem_free(BIO *data);
23
static int mem_buf_free(BIO *data);
24
static int mem_buf_sync(BIO *h);
25
26
static const BIO_METHOD mem_method = {
27
    BIO_TYPE_MEM,
28
    "memory buffer",
29
    bwrite_conv,
30
    mem_write,
31
    bread_conv,
32
    mem_read,
33
    mem_puts,
34
    mem_gets,
35
    mem_ctrl,
36
    mem_new,
37
    mem_free,
38
    NULL,                      /* mem_callback_ctrl */
39
};
40
41
static const BIO_METHOD secmem_method = {
42
    BIO_TYPE_MEM,
43
    "secure memory buffer",
44
    bwrite_conv,
45
    mem_write,
46
    bread_conv,
47
    mem_read,
48
    mem_puts,
49
    mem_gets,
50
    mem_ctrl,
51
    secmem_new,
52
    mem_free,
53
    NULL,                      /* mem_callback_ctrl */
54
};
55
56
/*
57
 * BIO memory stores buffer and read pointer
58
 * however the roles are different for read only BIOs.
59
 * In that case the readp just stores the original state
60
 * to be used for reset.
61
 */
62
typedef struct bio_buf_mem_st {
63
    struct buf_mem_st *buf;   /* allocated buffer */
64
    struct buf_mem_st *readp; /* read pointer */
65
} BIO_BUF_MEM;
66
67
/*
68
 * bio->num is used to hold the value to return on 'empty', if it is 0,
69
 * should_retry is not set
70
 */
71
72
const BIO_METHOD *BIO_s_mem(void)
73
3.29M
{
74
3.29M
    return &mem_method;
75
3.29M
}
76
77
const BIO_METHOD *BIO_s_secmem(void)
78
997
{
79
997
    return(&secmem_method);
80
997
}
81
82
BIO *BIO_new_mem_buf(const void *buf, int len)
83
1.76M
{
84
1.76M
    BIO *ret;
85
1.76M
    BUF_MEM *b;
86
1.76M
    BIO_BUF_MEM *bb;
87
1.76M
    size_t sz;
88
89
1.76M
    if (buf == NULL) {
90
0
        ERR_raise(ERR_LIB_BIO, ERR_R_PASSED_NULL_PARAMETER);
91
0
        return NULL;
92
0
    }
93
1.76M
    sz = (len < 0) ? strlen(buf) : (size_t)len;
94
1.76M
    if ((ret = BIO_new(BIO_s_mem())) == NULL)
95
0
        return NULL;
96
1.76M
    bb = (BIO_BUF_MEM *)ret->ptr;
97
1.76M
    b = bb->buf;
98
    /* Cast away const and trust in the MEM_RDONLY flag. */
99
1.76M
    b->data = (void *)buf;
100
1.76M
    b->length = sz;
101
1.76M
    b->max = sz;
102
1.76M
    *bb->readp = *bb->buf;
103
1.76M
    ret->flags |= BIO_FLAGS_MEM_RDONLY;
104
    /* Since this is static data retrying won't help */
105
1.76M
    ret->num = 0;
106
1.76M
    return ret;
107
1.76M
}
108
109
static int mem_init(BIO *bi, unsigned long flags)
110
3.42M
{
111
3.42M
    BIO_BUF_MEM *bb = OPENSSL_zalloc(sizeof(*bb));
112
113
3.42M
    if (bb == NULL)
114
0
        return 0;
115
3.42M
    if ((bb->buf = BUF_MEM_new_ex(flags)) == NULL) {
116
0
        OPENSSL_free(bb);
117
0
        return 0;
118
0
    }
119
3.42M
    if ((bb->readp = OPENSSL_zalloc(sizeof(*bb->readp))) == NULL) {
120
0
        BUF_MEM_free(bb->buf);
121
0
        OPENSSL_free(bb);
122
0
        return 0;
123
0
    }
124
3.42M
    *bb->readp = *bb->buf;
125
3.42M
    bi->shutdown = 1;
126
3.42M
    bi->init = 1;
127
3.42M
    bi->num = -1;
128
3.42M
    bi->ptr = (char *)bb;
129
3.42M
    return 1;
130
3.42M
}
131
132
static int mem_new(BIO *bi)
133
3.42M
{
134
3.42M
    return mem_init(bi, 0L);
135
3.42M
}
136
137
static int secmem_new(BIO *bi)
138
1.99k
{
139
1.99k
    return mem_init(bi, BUF_MEM_FLAG_SECURE);
140
1.99k
}
141
142
static int mem_free(BIO *a)
143
3.42M
{
144
3.42M
    BIO_BUF_MEM *bb;
145
146
3.42M
    if (a == NULL)
147
0
        return 0;
148
149
3.42M
    bb = (BIO_BUF_MEM *)a->ptr;
150
3.42M
    if (!mem_buf_free(a))
151
0
        return 0;
152
3.42M
    OPENSSL_free(bb->readp);
153
3.42M
    OPENSSL_free(bb);
154
3.42M
    return 1;
155
3.42M
}
156
157
static int mem_buf_free(BIO *a)
158
3.42M
{
159
3.42M
    if (a == NULL)
160
0
        return 0;
161
162
3.42M
    if (a->shutdown && a->init && a->ptr != NULL) {
163
3.42M
        BIO_BUF_MEM *bb = (BIO_BUF_MEM *)a->ptr;
164
3.42M
        BUF_MEM *b = bb->buf;
165
166
3.42M
        if (a->flags & BIO_FLAGS_MEM_RDONLY)
167
1.76M
            b->data = NULL;
168
3.42M
        BUF_MEM_free(b);
169
3.42M
    }
170
3.42M
    return 1;
171
3.42M
}
172
173
/*
174
 * Reallocate memory buffer if read pointer differs
175
 * NOT FOR RDONLY
176
 */
177
static int mem_buf_sync(BIO *b)
178
34.0M
{
179
34.0M
    if (b != NULL && b->init != 0 && b->ptr != NULL) {
180
34.0M
        BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
181
182
34.0M
        if (bbm->readp->data != bbm->buf->data) {
183
311
            memmove(bbm->buf->data, bbm->readp->data, bbm->readp->length);
184
311
            bbm->buf->length = bbm->readp->length;
185
311
            bbm->readp->data = bbm->buf->data;
186
311
        }
187
34.0M
    }
188
34.0M
    return 0;
189
34.0M
}
190
191
static int mem_read(BIO *b, char *out, int outl)
192
1.45G
{
193
1.45G
    int ret = -1;
194
1.45G
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
195
1.45G
    BUF_MEM *bm = bbm->readp;
196
197
1.45G
    if (b->flags & BIO_FLAGS_MEM_RDONLY)
198
1.34G
        bm = bbm->buf;
199
1.45G
    BIO_clear_retry_flags(b);
200
1.45G
    ret = (outl >= 0 && (size_t)outl > bm->length) ? (int)bm->length : outl;
201
1.45G
    if ((out != NULL) && (ret > 0)) {
202
1.45G
        memcpy(out, bm->data, ret);
203
1.45G
        bm->length -= ret;
204
1.45G
        bm->max -= ret;
205
1.45G
        bm->data += ret;
206
1.45G
    } else if (bm->length == 0) {
207
3.24M
        ret = b->num;
208
3.24M
        if (ret != 0)
209
139k
            BIO_set_retry_read(b);
210
3.24M
    }
211
1.45G
    return ret;
212
1.45G
}
213
214
static int mem_write(BIO *b, const char *in, int inl)
215
33.9M
{
216
33.9M
    int ret = -1;
217
33.9M
    int blen;
218
33.9M
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
219
220
33.9M
    if (b->flags & BIO_FLAGS_MEM_RDONLY) {
221
0
        ERR_raise(ERR_LIB_BIO, BIO_R_WRITE_TO_READ_ONLY_BIO);
222
0
        goto end;
223
0
    }
224
33.9M
    BIO_clear_retry_flags(b);
225
33.9M
    if (inl == 0)
226
4.47k
        return 0;
227
33.9M
    if (in == NULL) {
228
0
        ERR_raise(ERR_LIB_BIO, ERR_R_PASSED_NULL_PARAMETER);
229
0
        goto end;
230
0
    }
231
33.9M
    blen = bbm->readp->length;
232
33.9M
    mem_buf_sync(b);
233
33.9M
    if (BUF_MEM_grow_clean(bbm->buf, blen + inl) == 0)
234
0
        goto end;
235
33.9M
    memcpy(bbm->buf->data + blen, in, inl);
236
33.9M
    *bbm->readp = *bbm->buf;
237
33.9M
    ret = inl;
238
33.9M
 end:
239
33.9M
    return ret;
240
33.9M
}
241
242
static long mem_ctrl(BIO *b, int cmd, long num, void *ptr)
243
12.5M
{
244
12.5M
    long ret = 1;
245
12.5M
    char **pptr;
246
12.5M
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
247
12.5M
    BUF_MEM *bm, *bo;            /* bio_mem, bio_other */
248
12.5M
    long off, remain;
249
250
12.5M
    if (b->flags & BIO_FLAGS_MEM_RDONLY) {
251
10.5M
        bm = bbm->buf;
252
10.5M
        bo = bbm->readp;
253
10.5M
    } else {
254
2.00M
        bm = bbm->readp;
255
2.00M
        bo = bbm->buf;
256
2.00M
    }
257
12.5M
    off = (bm->data == bo->data) ? 0 : bm->data - bo->data;
258
12.5M
    remain = bm->length;
259
260
12.5M
    switch (cmd) {
261
0
    case BIO_CTRL_RESET:
262
0
        bm = bbm->buf;
263
0
        if (bm->data != NULL) {
264
0
            if (!(b->flags & BIO_FLAGS_MEM_RDONLY)) {
265
0
                if (!(b->flags & BIO_FLAGS_NONCLEAR_RST)) {
266
0
                    memset(bm->data, 0, bm->max);
267
0
                    bm->length = 0;
268
0
                }
269
0
                *bbm->readp = *bbm->buf;
270
0
            } else {
271
                /* For read only case just reset to the start again */
272
0
                *bbm->buf = *bbm->readp;
273
0
            }
274
0
        }
275
0
        break;
276
3.82M
    case BIO_C_FILE_SEEK:
277
3.82M
        if (num < 0 || num > off + remain)
278
0
            return -1;   /* Can't see outside of the current buffer */
279
280
3.82M
        bm->data = (num != 0) ? bo->data + num : bo->data;
281
3.82M
        bm->length = bo->length - num;
282
3.82M
        bm->max = bo->max - num;
283
3.82M
        off = num;
284
        /* FALLTHRU */
285
10.4M
    case BIO_C_FILE_TELL:
286
10.4M
        ret = off;
287
10.4M
        break;
288
2.23k
    case BIO_CTRL_EOF:
289
2.23k
        ret = (long)(bm->length == 0);
290
2.23k
        break;
291
767k
    case BIO_C_SET_BUF_MEM_EOF_RETURN:
292
767k
        b->num = (int)num;
293
767k
        break;
294
555k
    case BIO_CTRL_INFO:
295
555k
        ret = (long)bm->length;
296
555k
        if (ptr != NULL) {
297
443k
            pptr = (char **)ptr;
298
443k
            *pptr = (char *)(bm->data);
299
443k
        }
300
555k
        break;
301
0
    case BIO_C_SET_BUF_MEM:
302
0
        mem_buf_free(b);
303
0
        b->shutdown = (int)num;
304
0
        bbm->buf = ptr;
305
0
        *bbm->readp = *bbm->buf;
306
0
        break;
307
116k
    case BIO_C_GET_BUF_MEM_PTR:
308
116k
        if (ptr != NULL) {
309
116k
            if (!(b->flags & BIO_FLAGS_MEM_RDONLY))
310
116k
                mem_buf_sync(b);
311
116k
            bm = bbm->buf;
312
116k
            pptr = (char **)ptr;
313
116k
            *pptr = (char *)bm;
314
116k
        }
315
116k
        break;
316
0
    case BIO_CTRL_GET_CLOSE:
317
0
        ret = (long)b->shutdown;
318
0
        break;
319
149k
    case BIO_CTRL_SET_CLOSE:
320
149k
        b->shutdown = (int)num;
321
149k
        break;
322
6.49k
    case BIO_CTRL_WPENDING:
323
6.49k
        ret = 0L;
324
6.49k
        break;
325
0
    case BIO_CTRL_PENDING:
326
0
        ret = (long)bm->length;
327
0
        break;
328
0
    case BIO_CTRL_DUP:
329
178k
    case BIO_CTRL_FLUSH:
330
178k
        ret = 1;
331
178k
        break;
332
129k
    case BIO_CTRL_PUSH:
333
259k
    case BIO_CTRL_POP:
334
325k
    default:
335
325k
        ret = 0;
336
325k
        break;
337
12.5M
    }
338
12.5M
    return ret;
339
12.5M
}
340
341
static int mem_gets(BIO *bp, char *buf, int size)
342
40.3M
{
343
40.3M
    int i, j;
344
40.3M
    int ret = -1;
345
40.3M
    char *p;
346
40.3M
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)bp->ptr;
347
40.3M
    BUF_MEM *bm = bbm->readp;
348
349
40.3M
    if (bp->flags & BIO_FLAGS_MEM_RDONLY)
350
10.4M
        bm = bbm->buf;
351
40.3M
    BIO_clear_retry_flags(bp);
352
40.3M
    j = bm->length;
353
40.3M
    if ((size - 1) < j)
354
39.4M
        j = size - 1;
355
40.3M
    if (j <= 0) {
356
39.5k
        *buf = '\0';
357
39.5k
        return 0;
358
39.5k
    }
359
40.3M
    p = bm->data;
360
536M
    for (i = 0; i < j; i++) {
361
535M
        if (p[i] == '\n') {
362
39.1M
            i++;
363
39.1M
            break;
364
39.1M
        }
365
535M
    }
366
367
    /*
368
     * i is now the max num of bytes to copy, either j or up to
369
     * and including the first newline
370
     */
371
372
40.3M
    i = mem_read(bp, buf, i);
373
40.3M
    if (i > 0)
374
40.3M
        buf[i] = '\0';
375
40.3M
    ret = i;
376
40.3M
    return ret;
377
40.3M
}
378
379
static int mem_puts(BIO *bp, const char *str)
380
16.0M
{
381
16.0M
    int n, ret;
382
383
16.0M
    n = strlen(str);
384
16.0M
    ret = mem_write(bp, str, n);
385
    /* memory semantics is that it will always work */
386
16.0M
    return ret;
387
16.0M
}