/*

 * Copyright 1995-2026 The OpenSSL Project Authors. All Rights Reserved.

 *

 * Licensed under the Apache License 2.0 (the "License").  You may not use

 * this file except in compliance with the License.  You can obtain a copy

 * in the file LICENSE in the source distribution or at

 * https://www.openssl.org/source/license.html

 */

#include <stdio.h>

#include "internal/cryptlib.h"

#include <openssl/asn1.h>

#include <openssl/asn1t.h>

#include "crypto/asn1.h"

int ASN1_TYPE_set_octetstring(ASN1_TYPE *a, unsigned char *data, int len)

{

    ASN1_STRING *os;

    if ((os = ASN1_OCTET_STRING_new()) == NULL)

        return 0;

    if (!ASN1_OCTET_STRING_set(os, data, len)) {

        ASN1_OCTET_STRING_free(os);

        return 0;

    }

    ASN1_TYPE_set(a, V_ASN1_OCTET_STRING, os);

    return 1;

}

/* int max_len:  for returned value

 * if passing NULL in data, nothing is copied but the necessary length

 * for it is returned.

 */

int ASN1_TYPE_get_octetstring(const ASN1_TYPE *a, unsigned char *data, int max_len)

{

    int ret, num;

    size_t tmp;

    const unsigned char *p;

    if ((a->type != V_ASN1_OCTET_STRING) || (a->value.octet_string == NULL)) {

        ERR_raise(ERR_LIB_ASN1, ASN1_R_DATA_IS_WRONG);

        return -1;

    }

    p = ASN1_STRING_get0_data(a->value.octet_string);

    tmp = ASN1_STRING_length_ex(a->value.octet_string);

    if (tmp > INT_MAX) {

        ERR_raise(ERR_LIB_ASN1, ASN1_R_TOO_LARGE);

        return -1;

    }

    ret = (int)tmp;

    if (ret < max_len)

        num = ret;

    else

        num = max_len;

    if (num > 0 && data != NULL)

        memcpy(data, p, num);

    return ret;

}

static ossl_inline void asn1_type_init_oct(ASN1_OCTET_STRING *oct,

    unsigned char *data, int len)

{

    oct->data = data;

    oct->type = V_ASN1_OCTET_STRING;

    oct->length = len;

    oct->flags = 0;

}

/*

 * This function copies 'anum' to 'num' and the data of 'oct' to 'data'.

 * If the length of 'data' > 'max_len', copies only the first 'max_len'

 * bytes, but returns the full length of 'oct'; this allows distinguishing

 * whether all the data was copied.

 */

static int asn1_type_get_int_oct(ASN1_OCTET_STRING *oct, int32_t anum,

    long *num, unsigned char *data, int max_len)

{

    int ret, n;

    size_t tmp;

    if (num != NULL)

        *num = anum;

    tmp = ASN1_STRING_length_ex(oct);

    if (tmp > INT_MAX)

        tmp = INT_MAX;

    ret = (int)tmp;

    if (max_len > ret)

        n = ret;

    else

        n = max_len;

    if (data != NULL)

        memcpy(data, ASN1_STRING_get0_data(oct), n);

    return ret;

}

typedef struct {

    int32_t num;

    ASN1_OCTET_STRING *oct;

} asn1_int_oct;

ASN1_SEQUENCE(asn1_int_oct) = {

    ASN1_EMBED(asn1_int_oct, num, INT32),

    ASN1_SIMPLE(asn1_int_oct, oct, ASN1_OCTET_STRING)

} static_ASN1_SEQUENCE_END(asn1_int_oct)

DECLARE_ASN1_ITEM(asn1_int_oct)

int ASN1_TYPE_set_int_octetstring(ASN1_TYPE *a, long num, unsigned char *data,

    int len)

{

    asn1_int_oct atmp;

    ASN1_OCTET_STRING oct;

    atmp.num = num;

    atmp.oct = &oct;

    asn1_type_init_oct(&oct, data, len);

    if (ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(asn1_int_oct), &atmp, &a))

        return 1;

    return 0;

}

/*

 * This function decodes an int-octet sequence and copies the integer to 'num'

 * and the data of octet to 'data'.

 * If the length of 'data' > 'max_len', copies only the first 'max_len'

 * bytes, but returns the full length of 'oct'; this allows distinguishing

 * whether all the data was copied.

 */

int ASN1_TYPE_get_int_octetstring(const ASN1_TYPE *a, long *num,

    unsigned char *data, int max_len)

{

    asn1_int_oct *atmp = NULL;

    int ret = -1;

    if ((a->type != V_ASN1_SEQUENCE) || (a->value.sequence == NULL)) {

        goto err;

    }

    atmp = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(asn1_int_oct), a);

    if (atmp == NULL)

        goto err;

    ret = asn1_type_get_int_oct(atmp->oct, atmp->num, num, data, max_len);

    if (ret == -1) {

    err:

        ERR_raise(ERR_LIB_ASN1, ASN1_R_DATA_IS_WRONG);

    }

    M_ASN1_free_of(atmp, asn1_int_oct);

    return ret;

}

typedef struct {

    ASN1_OCTET_STRING *oct;

    int32_t num;

} asn1_oct_int;

/*

 * Defined in RFC 5084 -

 * Section 2. "Content-Authenticated Encryption Algorithms"

 */

ASN1_SEQUENCE(asn1_oct_int) = {

    ASN1_SIMPLE(asn1_oct_int, oct, ASN1_OCTET_STRING),

    ASN1_EMBED(asn1_oct_int, num, INT32)

} static_ASN1_SEQUENCE_END(asn1_oct_int)

DECLARE_ASN1_ITEM(asn1_oct_int)

int ossl_asn1_type_set_octetstring_int(ASN1_TYPE *a, long num,

    unsigned char *data, int len)

{

    asn1_oct_int atmp;

    ASN1_OCTET_STRING oct;

    atmp.num = num;

    atmp.oct = &oct;

    asn1_type_init_oct(&oct, data, len);

    if (ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(asn1_oct_int), &atmp, &a))

        return 1;

    return 0;

}

/*

 * This function decodes an octet-int sequence and copies the data of octet

 * to 'data' and the integer to 'num'.

 * If the length of 'data' > 'max_len', copies only the first 'max_len'

 * bytes, but returns the full length of 'oct'; this allows distinguishing

 * whether all the data was copied.

 */

int ossl_asn1_type_get_octetstring_int(const ASN1_TYPE *a, long *num,

    unsigned char *data, int max_len)

{

    asn1_oct_int *atmp = NULL;

    int ret = -1;

    if ((a->type != V_ASN1_SEQUENCE) || (a->value.sequence == NULL))

        goto err;

    atmp = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(asn1_oct_int), a);

    if (atmp == NULL)

        goto err;

    ret = asn1_type_get_int_oct(atmp->oct, atmp->num, num, data, max_len);

    if (ret == -1) {

    err:

        ERR_raise(ERR_LIB_ASN1, ASN1_R_DATA_IS_WRONG);

    }

    M_ASN1_free_of(atmp, asn1_oct_int);

    return ret;

}