Coverage Report

Created: 2026-02-14 07:20

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/openssl35/crypto/bio/bss_mem.c
Line
Count
Source
1
/*
2
 * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include <stdio.h>
11
#include <errno.h>
12
#include "bio_local.h"
13
#include "internal/cryptlib.h"
14
15
static int mem_write(BIO *h, const char *buf, int num);
16
static int mem_read(BIO *h, char *buf, int size);
17
static int mem_puts(BIO *h, const char *str);
18
static int mem_gets(BIO *h, char *str, int size);
19
static long mem_ctrl(BIO *h, int cmd, long arg1, void *arg2);
20
static int mem_new(BIO *h);
21
static int secmem_new(BIO *h);
22
static int mem_free(BIO *data);
23
static int mem_buf_free(BIO *data);
24
static int mem_buf_sync(BIO *h);
25
26
static const BIO_METHOD mem_method = {
27
    BIO_TYPE_MEM,
28
    "memory buffer",
29
    bwrite_conv,
30
    mem_write,
31
    bread_conv,
32
    mem_read,
33
    mem_puts,
34
    mem_gets,
35
    mem_ctrl,
36
    mem_new,
37
    mem_free,
38
    NULL, /* mem_callback_ctrl */
39
};
40
41
static const BIO_METHOD secmem_method = {
42
    BIO_TYPE_MEM,
43
    "secure memory buffer",
44
    bwrite_conv,
45
    mem_write,
46
    bread_conv,
47
    mem_read,
48
    mem_puts,
49
    mem_gets,
50
    mem_ctrl,
51
    secmem_new,
52
    mem_free,
53
    NULL, /* mem_callback_ctrl */
54
};
55
56
/*
57
 * BIO memory stores buffer and read pointer
58
 * however the roles are different for read only BIOs.
59
 * In that case the readp just stores the original state
60
 * to be used for reset.
61
 */
62
typedef struct bio_buf_mem_st {
63
    struct buf_mem_st *buf; /* allocated buffer */
64
    struct buf_mem_st *readp; /* read pointer */
65
} BIO_BUF_MEM;
66
67
/*
68
 * bio->num is used to hold the value to return on 'empty', if it is 0,
69
 * should_retry is not set
70
 */
71
72
const BIO_METHOD *BIO_s_mem(void)
73
6.99M
{
74
6.99M
    return &mem_method;
75
6.99M
}
76
77
const BIO_METHOD *BIO_s_secmem(void)
78
2.35k
{
79
2.35k
    return &secmem_method;
80
2.35k
}
81
82
BIO *BIO_new_mem_buf(const void *buf, int len)
83
2.48M
{
84
2.48M
    BIO *ret;
85
2.48M
    BUF_MEM *b;
86
2.48M
    BIO_BUF_MEM *bb;
87
2.48M
    size_t sz;
88
89
2.48M
    if (buf == NULL) {
90
0
        ERR_raise(ERR_LIB_BIO, ERR_R_PASSED_NULL_PARAMETER);
91
0
        return NULL;
92
0
    }
93
2.48M
    sz = (len < 0) ? strlen(buf) : (size_t)len;
94
2.48M
    if ((ret = BIO_new(BIO_s_mem())) == NULL)
95
0
        return NULL;
96
2.48M
    bb = (BIO_BUF_MEM *)ret->ptr;
97
2.48M
    b = bb->buf;
98
    /* Cast away const and trust in the MEM_RDONLY flag. */
99
2.48M
    b->data = (void *)buf;
100
2.48M
    b->length = sz;
101
2.48M
    b->max = sz;
102
2.48M
    *bb->readp = *bb->buf;
103
2.48M
    ret->flags |= BIO_FLAGS_MEM_RDONLY;
104
    /* Since this is static data retrying won't help */
105
2.48M
    ret->num = 0;
106
2.48M
    return ret;
107
2.48M
}
108
109
static int mem_init(BIO *bi, unsigned long flags)
110
7.28M
{
111
7.28M
    BIO_BUF_MEM *bb = OPENSSL_zalloc(sizeof(*bb));
112
113
7.28M
    if (bb == NULL)
114
0
        return 0;
115
7.28M
    if ((bb->buf = BUF_MEM_new_ex(flags)) == NULL) {
116
0
        OPENSSL_free(bb);
117
0
        return 0;
118
0
    }
119
7.28M
    if ((bb->readp = OPENSSL_zalloc(sizeof(*bb->readp))) == NULL) {
120
0
        BUF_MEM_free(bb->buf);
121
0
        OPENSSL_free(bb);
122
0
        return 0;
123
0
    }
124
7.28M
    *bb->readp = *bb->buf;
125
7.28M
    bi->shutdown = 1;
126
7.28M
    bi->init = 1;
127
7.28M
    bi->num = -1;
128
7.28M
    bi->ptr = (char *)bb;
129
7.28M
    return 1;
130
7.28M
}
131
132
static int mem_new(BIO *bi)
133
7.27M
{
134
7.27M
    return mem_init(bi, 0L);
135
7.27M
}
136
137
static int secmem_new(BIO *bi)
138
4.70k
{
139
4.70k
    return mem_init(bi, BUF_MEM_FLAG_SECURE);
140
4.70k
}
141
142
static int mem_free(BIO *a)
143
7.28M
{
144
7.28M
    BIO_BUF_MEM *bb;
145
146
7.28M
    if (a == NULL)
147
0
        return 0;
148
149
7.28M
    bb = (BIO_BUF_MEM *)a->ptr;
150
7.28M
    if (!mem_buf_free(a))
151
0
        return 0;
152
7.28M
    OPENSSL_free(bb->readp);
153
7.28M
    OPENSSL_free(bb);
154
7.28M
    return 1;
155
7.28M
}
156
157
static int mem_buf_free(BIO *a)
158
7.28M
{
159
7.28M
    if (a == NULL)
160
0
        return 0;
161
162
7.28M
    if (a->shutdown && a->init && a->ptr != NULL) {
163
7.28M
        BIO_BUF_MEM *bb = (BIO_BUF_MEM *)a->ptr;
164
7.28M
        BUF_MEM *b = bb->buf;
165
166
7.28M
        if (a->flags & BIO_FLAGS_MEM_RDONLY)
167
2.48M
            b->data = NULL;
168
7.28M
        BUF_MEM_free(b);
169
7.28M
    }
170
7.28M
    return 1;
171
7.28M
}
172
173
/*
174
 * Reallocate memory buffer if read pointer differs
175
 * NOT FOR RDONLY
176
 */
177
static int mem_buf_sync(BIO *b)
178
69.6M
{
179
69.6M
    if (b != NULL && b->init != 0 && b->ptr != NULL) {
180
69.6M
        BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
181
182
69.6M
        if (bbm->readp->data != bbm->buf->data) {
183
806
            memmove(bbm->buf->data, bbm->readp->data, bbm->readp->length);
184
806
            bbm->buf->length = bbm->readp->length;
185
806
            bbm->readp->data = bbm->buf->data;
186
806
        }
187
69.6M
    }
188
69.6M
    return 0;
189
69.6M
}
190
191
static int mem_read(BIO *b, char *out, int outl)
192
1.94G
{
193
1.94G
    int ret = -1;
194
1.94G
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
195
1.94G
    BUF_MEM *bm = bbm->readp;
196
197
1.94G
    if (b->flags & BIO_FLAGS_MEM_RDONLY)
198
1.76G
        bm = bbm->buf;
199
1.94G
    BIO_clear_retry_flags(b);
200
1.94G
    ret = (outl >= 0 && (size_t)outl > bm->length) ? (int)bm->length : outl;
201
1.94G
    if ((out != NULL) && (ret > 0)) {
202
1.94G
        memcpy(out, bm->data, ret);
203
1.94G
        bm->length -= ret;
204
1.94G
        bm->max -= ret;
205
1.94G
        bm->data += ret;
206
1.94G
    } else if (bm->length == 0) {
207
4.89M
        ret = b->num;
208
4.89M
        if (ret != 0)
209
200k
            BIO_set_retry_read(b);
210
4.89M
    }
211
1.94G
    return ret;
212
1.94G
}
213
214
static int mem_write(BIO *b, const char *in, int inl)
215
56.8M
{
216
56.8M
    int ret = -1;
217
56.8M
    int blen;
218
56.8M
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
219
220
56.8M
    if (b->flags & BIO_FLAGS_MEM_RDONLY) {
221
0
        ERR_raise(ERR_LIB_BIO, BIO_R_WRITE_TO_READ_ONLY_BIO);
222
0
        goto end;
223
0
    }
224
56.8M
    BIO_clear_retry_flags(b);
225
56.8M
    if (inl == 0)
226
3.94k
        return 0;
227
56.8M
    if (in == NULL) {
228
0
        ERR_raise(ERR_LIB_BIO, ERR_R_PASSED_NULL_PARAMETER);
229
0
        goto end;
230
0
    }
231
56.8M
    blen = bbm->readp->length;
232
56.8M
    mem_buf_sync(b);
233
56.8M
    if (BUF_MEM_grow_clean(bbm->buf, blen + inl) == 0)
234
0
        goto end;
235
56.8M
    memcpy(bbm->buf->data + blen, in, inl);
236
56.8M
    *bbm->readp = *bbm->buf;
237
56.8M
    ret = inl;
238
56.8M
end:
239
56.8M
    return ret;
240
56.8M
}
241
242
static long mem_ctrl(BIO *b, int cmd, long num, void *ptr)
243
14.2M
{
244
14.2M
    long ret = 1;
245
14.2M
    char **pptr;
246
14.2M
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
247
14.2M
    BUF_MEM *bm, *bo; /* bio_mem, bio_other */
248
14.2M
    long off, remain;
249
250
14.2M
    if (b->flags & BIO_FLAGS_MEM_RDONLY) {
251
10.6M
        bm = bbm->buf;
252
10.6M
        bo = bbm->readp;
253
10.6M
    } else {
254
3.58M
        bm = bbm->readp;
255
3.58M
        bo = bbm->buf;
256
3.58M
    }
257
14.2M
    off = (bm->data == bo->data) ? 0 : bm->data - bo->data;
258
14.2M
    remain = bm->length;
259
260
14.2M
    switch (cmd) {
261
0
    case BIO_CTRL_RESET:
262
0
        bm = bbm->buf;
263
0
        if (bm->data != NULL) {
264
0
            if (!(b->flags & BIO_FLAGS_MEM_RDONLY)) {
265
0
                if (!(b->flags & BIO_FLAGS_NONCLEAR_RST)) {
266
0
                    memset(bm->data, 0, bm->max);
267
0
                    bm->length = 0;
268
0
                }
269
0
                *bbm->readp = *bbm->buf;
270
0
            } else {
271
                /* For read only case just reset to the start again */
272
0
                *bbm->buf = *bbm->readp;
273
0
            }
274
0
        }
275
0
        break;
276
3.97M
    case BIO_C_FILE_SEEK:
277
3.97M
        if (num < 0 || num > off + remain)
278
0
            return -1; /* Can't see outside of the current buffer */
279
280
3.97M
        bm->data = (num != 0) ? bo->data + num : bo->data;
281
3.97M
        bm->length = bo->length - num;
282
3.97M
        bm->max = bo->max - num;
283
3.97M
        off = num;
284
        /* FALLTHRU */
285
10.6M
    case BIO_C_FILE_TELL:
286
10.6M
        ret = off;
287
10.6M
        break;
288
3.38k
    case BIO_CTRL_EOF:
289
3.38k
        ret = (long)(bm->length == 0);
290
3.38k
        break;
291
1.97M
    case BIO_C_SET_BUF_MEM_EOF_RETURN:
292
1.97M
        b->num = (int)num;
293
1.97M
        break;
294
618k
    case BIO_CTRL_INFO:
295
618k
        ret = (long)bm->length;
296
618k
        if (ptr != NULL) {
297
461k
            pptr = (char **)ptr;
298
461k
            *pptr = (char *)(bm->data);
299
461k
        }
300
618k
        break;
301
0
    case BIO_C_SET_BUF_MEM:
302
0
        mem_buf_free(b);
303
0
        b->shutdown = (int)num;
304
0
        bbm->buf = ptr;
305
0
        *bbm->readp = *bbm->buf;
306
0
        break;
307
163k
    case BIO_C_GET_BUF_MEM_PTR:
308
163k
        if (ptr != NULL) {
309
163k
            if (!(b->flags & BIO_FLAGS_MEM_RDONLY))
310
163k
                mem_buf_sync(b);
311
163k
            bm = bbm->buf;
312
163k
            pptr = (char **)ptr;
313
163k
            *pptr = (char *)bm;
314
163k
        }
315
163k
        break;
316
0
    case BIO_CTRL_GET_CLOSE:
317
0
        ret = (long)b->shutdown;
318
0
        break;
319
128k
    case BIO_CTRL_SET_CLOSE:
320
128k
        b->shutdown = (int)num;
321
128k
        break;
322
30.5k
    case BIO_CTRL_WPENDING:
323
30.5k
        ret = 0L;
324
30.5k
        break;
325
0
    case BIO_CTRL_PENDING:
326
0
        ret = (long)bm->length;
327
0
        break;
328
0
    case BIO_CTRL_DUP:
329
182k
    case BIO_CTRL_FLUSH:
330
182k
        ret = 1;
331
182k
        break;
332
85.9k
    case BIO_CTRL_PUSH:
333
171k
    case BIO_CTRL_POP:
334
450k
    default:
335
450k
        ret = 0;
336
450k
        break;
337
14.2M
    }
338
14.2M
    return ret;
339
14.2M
}
340
341
static int mem_gets(BIO *bp, char *buf, int size)
342
56.6M
{
343
56.6M
    int i, j;
344
56.6M
    int ret = -1;
345
56.6M
    char *p;
346
56.6M
    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)bp->ptr;
347
56.6M
    BUF_MEM *bm = bbm->readp;
348
349
56.6M
    if (bp->flags & BIO_FLAGS_MEM_RDONLY)
350
23.2M
        bm = bbm->buf;
351
56.6M
    BIO_clear_retry_flags(bp);
352
56.6M
    j = bm->length;
353
56.6M
    if ((size - 1) < j)
354
55.4M
        j = size - 1;
355
56.6M
    if (j <= 0) {
356
49.3k
        *buf = '\0';
357
49.3k
        return 0;
358
49.3k
    }
359
56.6M
    p = bm->data;
360
751M
    for (i = 0; i < j; i++) {
361
749M
        if (p[i] == '\n') {
362
55.0M
            i++;
363
55.0M
            break;
364
55.0M
        }
365
749M
    }
366
367
    /*
368
     * i is now the max num of bytes to copy, either j or up to
369
     * and including the first newline
370
     */
371
372
56.6M
    i = mem_read(bp, buf, i);
373
56.6M
    if (i > 0)
374
56.6M
        buf[i] = '\0';
375
56.6M
    ret = i;
376
56.6M
    return ret;
377
56.6M
}
378
379
static int mem_puts(BIO *bp, const char *str)
380
2.65M
{
381
2.65M
    int n, ret;
382
383
2.65M
    n = strlen(str);
384
2.65M
    ret = mem_write(bp, str, n);
385
    /* memory semantics is that it will always work */
386
2.65M
    return ret;
387
2.65M
}