Coverage Report

Created: 2025-06-13 06:58

/src/openssl31/crypto/trace.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright 2019-2023 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include <stdio.h>
11
#include <string.h>
12
13
#include "internal/thread_once.h"
14
#include <openssl/bio.h>
15
#include <openssl/crypto.h>
16
#include <openssl/trace.h>
17
#include "internal/bio.h"
18
#include "internal/nelem.h"
19
#include "internal/refcount.h"
20
#include "crypto/cryptlib.h"
21
22
#ifndef OPENSSL_NO_TRACE
23
24
static CRYPTO_RWLOCK *trace_lock = NULL;
25
26
static const BIO  *current_channel = NULL;
27
28
/*-
29
 * INTERNAL TRACE CHANNEL IMPLEMENTATION
30
 *
31
 * For our own flexibility, all trace categories are associated with a
32
 * BIO sink object, also called the trace channel. Instead of a BIO object,
33
 * the application can also provide a callback function, in which case an
34
 * internal trace channel is attached, which simply calls the registered
35
 * callback function.
36
 */
37
static int trace_write(BIO *b, const char *buf,
38
                               size_t num, size_t *written);
39
static int trace_puts(BIO *b, const char *str);
40
static long trace_ctrl(BIO *channel, int cmd, long argl, void *argp);
41
static int trace_free(BIO *b);
42
43
static const BIO_METHOD trace_method = {
44
    BIO_TYPE_SOURCE_SINK,
45
    "trace",
46
    trace_write,
47
    NULL,                        /* old write */
48
    NULL,                        /* read_ex */
49
    NULL,                        /* read */
50
    trace_puts,
51
    NULL,                        /* gets */
52
    trace_ctrl,                  /* ctrl */
53
    NULL,                        /* create */
54
    trace_free,                  /* free */
55
    NULL,                        /* callback_ctrl */
56
};
57
58
struct trace_data_st {
59
    OSSL_trace_cb callback;
60
    int category;
61
    void *data;
62
};
63
64
static int trace_write(BIO *channel,
65
                       const char *buf, size_t num, size_t *written)
66
{
67
    struct trace_data_st *ctx = BIO_get_data(channel);
68
    size_t cnt = ctx->callback(buf, num, ctx->category, OSSL_TRACE_CTRL_WRITE,
69
                               ctx->data);
70
71
    *written = cnt;
72
    return cnt != 0;
73
}
74
75
static int trace_puts(BIO *channel, const char *str)
76
{
77
    size_t written;
78
79
    if (trace_write(channel, str, strlen(str), &written))
80
        return (int)written;
81
82
    return EOF;
83
}
84
85
static long trace_ctrl(BIO *channel, int cmd, long argl, void *argp)
86
{
87
    struct trace_data_st *ctx = BIO_get_data(channel);
88
89
    switch (cmd) {
90
    case OSSL_TRACE_CTRL_BEGIN:
91
    case OSSL_TRACE_CTRL_END:
92
        /* We know that the callback is likely to return 0 here */
93
        ctx->callback("", 0, ctx->category, cmd, ctx->data);
94
        return 1;
95
    default:
96
        break;
97
    }
98
    return -2;                   /* Unsupported */
99
}
100
101
static int trace_free(BIO *channel)
102
{
103
    if (channel == NULL)
104
        return 0;
105
    OPENSSL_free(BIO_get_data(channel));
106
    return 1;
107
}
108
#endif
109
110
/*-
111
 * TRACE
112
 */
113
114
/* Helper struct and macro to get name string to number mapping */
115
struct trace_category_st {
116
    const char * const name;
117
    const int num;
118
};
119
#define TRACE_CATEGORY_(name)       { #name, OSSL_TRACE_CATEGORY_##name }
120
121
static const struct trace_category_st
122
    trace_categories[OSSL_TRACE_CATEGORY_NUM] = {
123
    TRACE_CATEGORY_(ALL),
124
    TRACE_CATEGORY_(TRACE),
125
    TRACE_CATEGORY_(INIT),
126
    TRACE_CATEGORY_(TLS),
127
    TRACE_CATEGORY_(TLS_CIPHER),
128
    TRACE_CATEGORY_(CONF),
129
    TRACE_CATEGORY_(ENGINE_TABLE),
130
    TRACE_CATEGORY_(ENGINE_REF_COUNT),
131
    TRACE_CATEGORY_(PKCS5V2),
132
    TRACE_CATEGORY_(PKCS12_KEYGEN),
133
    TRACE_CATEGORY_(PKCS12_DECRYPT),
134
    TRACE_CATEGORY_(X509V3_POLICY),
135
    TRACE_CATEGORY_(BN_CTX),
136
    TRACE_CATEGORY_(CMP),
137
    TRACE_CATEGORY_(STORE),
138
    TRACE_CATEGORY_(DECODER),
139
    TRACE_CATEGORY_(ENCODER),
140
    TRACE_CATEGORY_(REF_COUNT),
141
    TRACE_CATEGORY_(HTTP),
142
}; /* KEEP THIS LIST IN SYNC with #define OSSL_TRACE_CATEGORY_... in trace.h */
143
144
const char *OSSL_trace_get_category_name(int num)
145
0
{
146
0
    if (num < 0 || (size_t)num >= OSSL_NELEM(trace_categories))
147
0
        return NULL;
148
    /*
149
     * Partial check that OSSL_TRACE_CATEGORY_... macros
150
     * are synced with trace_categories array
151
     */
152
0
    if (!ossl_assert(trace_categories[num].name != NULL)
153
0
        || !ossl_assert(trace_categories[num].num == num))
154
0
        return NULL;
155
0
    return trace_categories[num].name;
156
0
}
157
158
int OSSL_trace_get_category_num(const char *name)
159
0
{
160
0
    size_t i;
161
162
0
    if (name == NULL)
163
0
        return -1;
164
165
0
    for (i = 0; i < OSSL_NELEM(trace_categories); i++)
166
0
        if (OPENSSL_strcasecmp(name, trace_categories[i].name) == 0)
167
0
            return trace_categories[i].num;
168
169
0
    return -1; /* not found */
170
0
}
171
172
#ifndef OPENSSL_NO_TRACE
173
174
/* We use one trace channel for each trace category */
175
static struct {
176
    enum { SIMPLE_CHANNEL, CALLBACK_CHANNEL } type;
177
    BIO *bio;
178
    char *prefix;
179
    char *suffix;
180
} trace_channels[OSSL_TRACE_CATEGORY_NUM] = {
181
    { 0, NULL, NULL, NULL },
182
};
183
184
#endif
185
186
#ifndef OPENSSL_NO_TRACE
187
188
enum {
189
    CHANNEL,
190
    PREFIX,
191
    SUFFIX
192
};
193
194
static int trace_attach_cb(int category, int type, const void *data)
195
{
196
    switch (type) {
197
    case CHANNEL:
198
        OSSL_TRACE2(TRACE, "Attach channel %p to category '%s'\n",
199
                    data, trace_categories[category].name);
200
        break;
201
    case PREFIX:
202
        OSSL_TRACE2(TRACE, "Attach prefix \"%s\" to category '%s'\n",
203
                    (const char *)data, trace_categories[category].name);
204
        break;
205
    case SUFFIX:
206
        OSSL_TRACE2(TRACE, "Attach suffix \"%s\" to category '%s'\n",
207
                    (const char *)data, trace_categories[category].name);
208
        break;
209
    default:                     /* No clue */
210
        break;
211
    }
212
    return 1;
213
}
214
215
static int trace_detach_cb(int category, int type, const void *data)
216
{
217
    switch (type) {
218
    case CHANNEL:
219
        OSSL_TRACE2(TRACE, "Detach channel %p from category '%s'\n",
220
                    data, trace_categories[category].name);
221
        break;
222
    case PREFIX:
223
        OSSL_TRACE2(TRACE, "Detach prefix \"%s\" from category '%s'\n",
224
                    (const char *)data, trace_categories[category].name);
225
        break;
226
    case SUFFIX:
227
        OSSL_TRACE2(TRACE, "Detach suffix \"%s\" from category '%s'\n",
228
                    (const char *)data, trace_categories[category].name);
229
        break;
230
    default:                     /* No clue */
231
        break;
232
    }
233
    return 1;
234
}
235
236
static int do_ossl_trace_init(void);
237
static CRYPTO_ONCE trace_inited = CRYPTO_ONCE_STATIC_INIT;
238
DEFINE_RUN_ONCE_STATIC(ossl_trace_init)
239
{
240
    return do_ossl_trace_init();
241
}
242
243
static int set_trace_data(int category, int type, BIO **channel,
244
                          const char **prefix, const char **suffix,
245
                          int (*attach_cb)(int, int, const void *),
246
                          int (*detach_cb)(int, int, const void *))
247
{
248
    BIO *curr_channel = NULL;
249
    char *curr_prefix = NULL;
250
    char *curr_suffix = NULL;
251
252
    /* Ensure do_ossl_trace_init() is called once */
253
    if (!RUN_ONCE(&trace_inited, ossl_trace_init))
254
        return 0;
255
256
    curr_channel = trace_channels[category].bio;
257
    curr_prefix = trace_channels[category].prefix;
258
    curr_suffix = trace_channels[category].suffix;
259
260
    /* Make sure to run the detach callback first on all data */
261
    if (prefix != NULL && curr_prefix != NULL) {
262
        detach_cb(category, PREFIX, curr_prefix);
263
    }
264
265
    if (suffix != NULL && curr_suffix != NULL) {
266
        detach_cb(category, SUFFIX, curr_suffix);
267
    }
268
269
    if (channel != NULL && curr_channel != NULL) {
270
        detach_cb(category, CHANNEL, curr_channel);
271
    }
272
273
    /* After detach callbacks are done, clear data where appropriate */
274
    if (prefix != NULL && curr_prefix != NULL) {
275
        OPENSSL_free(curr_prefix);
276
        trace_channels[category].prefix = NULL;
277
    }
278
279
    if (suffix != NULL && curr_suffix != NULL) {
280
        OPENSSL_free(curr_suffix);
281
        trace_channels[category].suffix = NULL;
282
    }
283
284
    if (channel != NULL && curr_channel != NULL) {
285
        BIO_free(curr_channel);
286
        trace_channels[category].type = 0;
287
        trace_channels[category].bio = NULL;
288
    }
289
290
    /* Before running callbacks are done, set new data where appropriate */
291
    if (prefix != NULL && *prefix != NULL) {
292
        if ((curr_prefix = OPENSSL_strdup(*prefix)) == NULL)
293
            return 0;
294
        trace_channels[category].prefix = curr_prefix;
295
    }
296
297
    if (suffix != NULL && *suffix != NULL) {
298
        if ((curr_suffix = OPENSSL_strdup(*suffix)) == NULL)
299
            return 0;
300
        trace_channels[category].suffix = curr_suffix;
301
    }
302
303
    if (channel != NULL && *channel != NULL) {
304
        trace_channels[category].type = type;
305
        trace_channels[category].bio = *channel;
306
        /*
307
         * This must not be done before setting prefix/suffix,
308
         * as those may fail, and then the caller is mislead to free *channel.
309
         */
310
    }
311
312
    /* Finally, run the attach callback on the new data */
313
    if (channel != NULL && *channel != NULL) {
314
        attach_cb(category, CHANNEL, *channel);
315
    }
316
317
    if (prefix != NULL && *prefix != NULL) {
318
        attach_cb(category, PREFIX, *prefix);
319
    }
320
321
    if (suffix != NULL && *suffix != NULL) {
322
        attach_cb(category, SUFFIX, *suffix);
323
    }
324
325
    return 1;
326
}
327
328
static int do_ossl_trace_init(void)
329
{
330
    trace_lock = CRYPTO_THREAD_lock_new();
331
    return trace_lock != NULL;
332
}
333
334
#endif
335
336
void ossl_trace_cleanup(void)
337
133
{
338
#ifndef OPENSSL_NO_TRACE
339
    int category;
340
    BIO *channel = NULL;
341
    const char *prefix = NULL;
342
    const char *suffix = NULL;
343
344
    for (category = 0; category < OSSL_TRACE_CATEGORY_NUM; category++) {
345
        /* We force the TRACE category to be treated last */
346
        if (category == OSSL_TRACE_CATEGORY_TRACE)
347
            continue;
348
        set_trace_data(category, 0, &channel, &prefix, &suffix,
349
                       trace_attach_cb, trace_detach_cb);
350
    }
351
    set_trace_data(OSSL_TRACE_CATEGORY_TRACE, 0, &channel,
352
                   &prefix, &suffix,
353
                   trace_attach_cb, trace_detach_cb);
354
    CRYPTO_THREAD_lock_free(trace_lock);
355
#endif
356
133
}
357
358
int OSSL_trace_set_channel(int category, BIO *channel)
359
133
{
360
#ifndef OPENSSL_NO_TRACE
361
    if (category >= 0 && category < OSSL_TRACE_CATEGORY_NUM)
362
        return set_trace_data(category, SIMPLE_CHANNEL, &channel, NULL, NULL,
363
                              trace_attach_cb, trace_detach_cb);
364
#endif
365
133
    return 0;
366
133
}
367
368
#ifndef OPENSSL_NO_TRACE
369
static int trace_attach_w_callback_cb(int category, int type, const void *data)
370
{
371
    switch (type) {
372
    case CHANNEL:
373
        OSSL_TRACE2(TRACE,
374
                    "Attach channel %p to category '%s' (with callback)\n",
375
                    data, trace_categories[category].name);
376
        break;
377
    case PREFIX:
378
        OSSL_TRACE2(TRACE, "Attach prefix \"%s\" to category '%s'\n",
379
                    (const char *)data, trace_categories[category].name);
380
        break;
381
    case SUFFIX:
382
        OSSL_TRACE2(TRACE, "Attach suffix \"%s\" to category '%s'\n",
383
                    (const char *)data, trace_categories[category].name);
384
        break;
385
    default:                     /* No clue */
386
        break;
387
    }
388
    return 1;
389
}
390
#endif
391
392
int OSSL_trace_set_callback(int category, OSSL_trace_cb callback, void *data)
393
0
{
394
#ifndef OPENSSL_NO_TRACE
395
    BIO *channel = NULL;
396
    struct trace_data_st *trace_data = NULL;
397
398
    if (category < 0 || category >= OSSL_TRACE_CATEGORY_NUM)
399
        return 0;
400
401
    if (callback != NULL) {
402
        if ((channel = BIO_new(&trace_method)) == NULL
403
            || (trace_data =
404
                OPENSSL_zalloc(sizeof(struct trace_data_st))) == NULL)
405
            goto err;
406
407
        trace_data->callback = callback;
408
        trace_data->category = category;
409
        trace_data->data = data;
410
411
        BIO_set_data(channel, trace_data);
412
    }
413
414
    if (!set_trace_data(category, CALLBACK_CHANNEL, &channel, NULL, NULL,
415
                        trace_attach_w_callback_cb, trace_detach_cb))
416
        goto err;
417
418
    return 1;
419
420
 err:
421
    BIO_free(channel);
422
    OPENSSL_free(trace_data);
423
#endif
424
425
0
    return 0;
426
0
}
427
428
int OSSL_trace_set_prefix(int category, const char *prefix)
429
0
{
430
#ifndef OPENSSL_NO_TRACE
431
    if (category >= 0 && category < OSSL_TRACE_CATEGORY_NUM)
432
        return set_trace_data(category, 0, NULL, &prefix, NULL,
433
                              trace_attach_cb, trace_detach_cb);
434
#endif
435
0
    return 0;
436
0
}
437
438
int OSSL_trace_set_suffix(int category, const char *suffix)
439
0
{
440
#ifndef OPENSSL_NO_TRACE
441
    if (category >= 0 && category < OSSL_TRACE_CATEGORY_NUM)
442
        return set_trace_data(category, 0, NULL, NULL, &suffix,
443
                              trace_attach_cb, trace_detach_cb);
444
#endif
445
0
    return 0;
446
0
}
447
448
#ifndef OPENSSL_NO_TRACE
449
static int ossl_trace_get_category(int category)
450
{
451
    if (category < 0 || category >= OSSL_TRACE_CATEGORY_NUM)
452
        return -1;
453
    if (trace_channels[category].bio != NULL)
454
        return category;
455
    return OSSL_TRACE_CATEGORY_ALL;
456
}
457
#endif
458
459
int OSSL_trace_enabled(int category)
460
0
{
461
0
    int ret = 0;
462
#ifndef OPENSSL_NO_TRACE
463
    category = ossl_trace_get_category(category);
464
    if (category >= 0)
465
        ret = trace_channels[category].bio != NULL;
466
#endif
467
0
    return ret;
468
0
}
469
470
BIO *OSSL_trace_begin(int category)
471
0
{
472
0
    BIO *channel = NULL;
473
#ifndef OPENSSL_NO_TRACE
474
    char *prefix = NULL;
475
476
    category = ossl_trace_get_category(category);
477
    if (category < 0 || !OSSL_trace_enabled(category))
478
        return NULL;
479
480
    channel = trace_channels[category].bio;
481
    prefix = trace_channels[category].prefix;
482
483
    if (channel != NULL) {
484
        if (!CRYPTO_THREAD_write_lock(trace_lock))
485
            return NULL;
486
        current_channel = channel;
487
        switch (trace_channels[category].type) {
488
        case SIMPLE_CHANNEL:
489
            if (prefix != NULL) {
490
                (void)BIO_puts(channel, prefix);
491
                (void)BIO_puts(channel, "\n");
492
            }
493
            break;
494
        case CALLBACK_CHANNEL:
495
            (void)BIO_ctrl(channel, OSSL_TRACE_CTRL_BEGIN,
496
                           prefix == NULL ? 0 : strlen(prefix), prefix);
497
            break;
498
        }
499
    }
500
#endif
501
0
    return channel;
502
0
}
503
504
void OSSL_trace_end(int category, BIO * channel)
505
0
{
506
#ifndef OPENSSL_NO_TRACE
507
    char *suffix = NULL;
508
509
    category = ossl_trace_get_category(category);
510
    if (category < 0)
511
        return;
512
    suffix = trace_channels[category].suffix;
513
    if (channel != NULL
514
        && ossl_assert(channel == current_channel)) {
515
        (void)BIO_flush(channel);
516
        switch (trace_channels[category].type) {
517
        case SIMPLE_CHANNEL:
518
            if (suffix != NULL) {
519
                (void)BIO_puts(channel, suffix);
520
                (void)BIO_puts(channel, "\n");
521
            }
522
            break;
523
        case CALLBACK_CHANNEL:
524
            (void)BIO_ctrl(channel, OSSL_TRACE_CTRL_END,
525
                           suffix == NULL ? 0 : strlen(suffix), suffix);
526
            break;
527
        }
528
        current_channel = NULL;
529
        CRYPTO_THREAD_unlock(trace_lock);
530
    }
531
#endif
532
0
}