]>
Commit | Line | Data |
---|---|---|
2039c421 | 1 | /* |
a1df06b3 | 2 | * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved. |
d02b48c6 | 3 | * |
2039c421 RS |
4 | * Licensed under the OpenSSL license (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy | |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
d02b48c6 RE |
8 | */ |
9 | ||
10 | #include <stdio.h> | |
452ae49d | 11 | #include <limits.h> |
a1df06b3 | 12 | #include "internal/ctype.h" |
b39fc560 | 13 | #include "internal/cryptlib.h" |
ec577822 BM |
14 | #include <openssl/buffer.h> |
15 | #include <openssl/asn1.h> | |
16 | #include <openssl/objects.h> | |
1e26a8ba | 17 | #include <openssl/bn.h> |
2e430277 | 18 | #include "internal/asn1_int.h" |
c315a547 | 19 | #include "asn1_locl.h" |
d02b48c6 | 20 | |
e83f154f | 21 | int i2d_ASN1_OBJECT(const ASN1_OBJECT *a, unsigned char **pp) |
0f113f3e MC |
22 | { |
23 | unsigned char *p; | |
24 | int objsize; | |
d02b48c6 | 25 | |
0f113f3e | 26 | if ((a == NULL) || (a->data == NULL)) |
26a7d938 | 27 | return 0; |
d02b48c6 | 28 | |
0f113f3e | 29 | objsize = ASN1_object_size(0, a->length, V_ASN1_OBJECT); |
56f9953c | 30 | if (pp == NULL || objsize == -1) |
0f113f3e | 31 | return objsize; |
d02b48c6 | 32 | |
0f113f3e MC |
33 | p = *pp; |
34 | ASN1_put_object(&p, 0, a->length, V_ASN1_OBJECT, V_ASN1_UNIVERSAL); | |
35 | memcpy(p, a->data, a->length); | |
36 | p += a->length; | |
d02b48c6 | 37 | |
0f113f3e | 38 | *pp = p; |
26a7d938 | 39 | return objsize; |
0f113f3e | 40 | } |
d02b48c6 | 41 | |
6343829a | 42 | int a2d_ASN1_OBJECT(unsigned char *out, int olen, const char *buf, int num) |
0f113f3e MC |
43 | { |
44 | int i, first, len = 0, c, use_bn; | |
45 | char ftmp[24], *tmp = ftmp; | |
cbe29648 | 46 | int tmpsize = sizeof(ftmp); |
0f113f3e MC |
47 | const char *p; |
48 | unsigned long l; | |
49 | BIGNUM *bl = NULL; | |
d02b48c6 | 50 | |
0f113f3e | 51 | if (num == 0) |
26a7d938 | 52 | return 0; |
0f113f3e MC |
53 | else if (num == -1) |
54 | num = strlen(buf); | |
d02b48c6 | 55 | |
0f113f3e MC |
56 | p = buf; |
57 | c = *(p++); | |
58 | num--; | |
59 | if ((c >= '0') && (c <= '2')) { | |
60 | first = c - '0'; | |
61 | } else { | |
62 | ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_FIRST_NUM_TOO_LARGE); | |
63 | goto err; | |
64 | } | |
d02b48c6 | 65 | |
0f113f3e MC |
66 | if (num <= 0) { |
67 | ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_MISSING_SECOND_NUMBER); | |
68 | goto err; | |
69 | } | |
70 | c = *(p++); | |
71 | num--; | |
72 | for (;;) { | |
73 | if (num <= 0) | |
74 | break; | |
75 | if ((c != '.') && (c != ' ')) { | |
76 | ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_INVALID_SEPARATOR); | |
77 | goto err; | |
78 | } | |
79 | l = 0; | |
80 | use_bn = 0; | |
81 | for (;;) { | |
82 | if (num <= 0) | |
83 | break; | |
84 | num--; | |
85 | c = *(p++); | |
86 | if ((c == ' ') || (c == '.')) | |
87 | break; | |
a1df06b3 | 88 | if (!ossl_isdigit(c)) { |
0f113f3e MC |
89 | ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_INVALID_DIGIT); |
90 | goto err; | |
91 | } | |
92 | if (!use_bn && l >= ((ULONG_MAX - 80) / 10L)) { | |
93 | use_bn = 1; | |
90945fa3 | 94 | if (bl == NULL) |
0f113f3e | 95 | bl = BN_new(); |
90945fa3 | 96 | if (bl == NULL || !BN_set_word(bl, l)) |
0f113f3e MC |
97 | goto err; |
98 | } | |
99 | if (use_bn) { | |
100 | if (!BN_mul_word(bl, 10L) | |
101 | || !BN_add_word(bl, c - '0')) | |
102 | goto err; | |
103 | } else | |
104 | l = l * 10L + (long)(c - '0'); | |
105 | } | |
106 | if (len == 0) { | |
107 | if ((first < 2) && (l >= 40)) { | |
108 | ASN1err(ASN1_F_A2D_ASN1_OBJECT, | |
109 | ASN1_R_SECOND_NUMBER_TOO_LARGE); | |
110 | goto err; | |
111 | } | |
112 | if (use_bn) { | |
113 | if (!BN_add_word(bl, first * 40)) | |
114 | goto err; | |
115 | } else | |
116 | l += (long)first *40; | |
117 | } | |
118 | i = 0; | |
119 | if (use_bn) { | |
120 | int blsize; | |
121 | blsize = BN_num_bits(bl); | |
122 | blsize = (blsize + 6) / 7; | |
123 | if (blsize > tmpsize) { | |
124 | if (tmp != ftmp) | |
125 | OPENSSL_free(tmp); | |
126 | tmpsize = blsize + 32; | |
127 | tmp = OPENSSL_malloc(tmpsize); | |
90945fa3 | 128 | if (tmp == NULL) |
0f113f3e MC |
129 | goto err; |
130 | } | |
8b9afbc0 DSH |
131 | while (blsize--) { |
132 | BN_ULONG t = BN_div_word(bl, 0x80L); | |
133 | if (t == (BN_ULONG)-1) | |
134 | goto err; | |
135 | tmp[i++] = (unsigned char)t; | |
136 | } | |
0f113f3e | 137 | } else { |
452ae49d | 138 | |
0f113f3e MC |
139 | for (;;) { |
140 | tmp[i++] = (unsigned char)l & 0x7f; | |
141 | l >>= 7L; | |
142 | if (l == 0L) | |
143 | break; | |
144 | } | |
145 | ||
146 | } | |
147 | if (out != NULL) { | |
148 | if (len + i > olen) { | |
149 | ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_BUFFER_TOO_SMALL); | |
150 | goto err; | |
151 | } | |
152 | while (--i > 0) | |
153 | out[len++] = tmp[i] | 0x80; | |
154 | out[len++] = tmp[0]; | |
155 | } else | |
156 | len += i; | |
157 | } | |
158 | if (tmp != ftmp) | |
159 | OPENSSL_free(tmp); | |
23a1d5e9 | 160 | BN_free(bl); |
26a7d938 | 161 | return len; |
0f113f3e MC |
162 | err: |
163 | if (tmp != ftmp) | |
164 | OPENSSL_free(tmp); | |
23a1d5e9 | 165 | BN_free(bl); |
26a7d938 | 166 | return 0; |
0f113f3e | 167 | } |
d02b48c6 | 168 | |
e83f154f | 169 | int i2t_ASN1_OBJECT(char *buf, int buf_len, const ASN1_OBJECT *a) |
3e3d2ea2 | 170 | { |
0f113f3e | 171 | return OBJ_obj2txt(buf, buf_len, a, 0); |
3e3d2ea2 | 172 | } |
58964a49 | 173 | |
e83f154f | 174 | int i2a_ASN1_OBJECT(BIO *bp, const ASN1_OBJECT *a) |
0f113f3e MC |
175 | { |
176 | char buf[80], *p = buf; | |
177 | int i; | |
58964a49 | 178 | |
0f113f3e | 179 | if ((a == NULL) || (a->data == NULL)) |
26a7d938 | 180 | return BIO_write(bp, "NULL", 4); |
cbe29648 | 181 | i = i2t_ASN1_OBJECT(buf, sizeof(buf), a); |
0f113f3e | 182 | if (i > (int)(sizeof(buf) - 1)) { |
cdb10bae RS |
183 | if ((p = OPENSSL_malloc(i + 1)) == NULL) { |
184 | ASN1err(ASN1_F_I2A_ASN1_OBJECT, ERR_R_MALLOC_FAILURE); | |
0f113f3e | 185 | return -1; |
cdb10bae | 186 | } |
0f113f3e MC |
187 | i2t_ASN1_OBJECT(p, i + 1, a); |
188 | } | |
189 | if (i <= 0) { | |
190 | i = BIO_write(bp, "<INVALID>", 9); | |
191 | i += BIO_dump(bp, (const char *)a->data, a->length); | |
192 | return i; | |
193 | } | |
194 | BIO_write(bp, p, i); | |
195 | if (p != buf) | |
196 | OPENSSL_free(p); | |
26a7d938 | 197 | return i; |
0f113f3e | 198 | } |
d02b48c6 | 199 | |
875a644a | 200 | ASN1_OBJECT *d2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp, |
0f113f3e | 201 | long length) |
284ef5f3 | 202 | { |
0f113f3e MC |
203 | const unsigned char *p; |
204 | long len; | |
205 | int tag, xclass; | |
206 | int inf, i; | |
207 | ASN1_OBJECT *ret = NULL; | |
208 | p = *pp; | |
209 | inf = ASN1_get_object(&p, &len, &tag, &xclass, length); | |
210 | if (inf & 0x80) { | |
211 | i = ASN1_R_BAD_OBJECT_HEADER; | |
212 | goto err; | |
213 | } | |
d02b48c6 | 214 | |
0f113f3e MC |
215 | if (tag != V_ASN1_OBJECT) { |
216 | i = ASN1_R_EXPECTING_AN_OBJECT; | |
217 | goto err; | |
218 | } | |
219 | ret = c2i_ASN1_OBJECT(a, &p, len); | |
220 | if (ret) | |
221 | *pp = p; | |
222 | return ret; | |
223 | err: | |
224 | ASN1err(ASN1_F_D2I_ASN1_OBJECT, i); | |
26a7d938 | 225 | return NULL; |
284ef5f3 | 226 | } |
0042fb5f | 227 | |
875a644a | 228 | ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp, |
0f113f3e MC |
229 | long len) |
230 | { | |
331bf00b | 231 | ASN1_OBJECT *ret = NULL, tobj; |
0f113f3e MC |
232 | const unsigned char *p; |
233 | unsigned char *data; | |
234 | int i, length; | |
0042fb5f | 235 | |
0f113f3e MC |
236 | /* |
237 | * Sanity check OID encoding. Need at least one content octet. MSB must | |
238 | * be clear in the last octet. can't have leading 0x80 in subidentifiers, | |
239 | * see: X.690 8.19.2 | |
240 | */ | |
241 | if (len <= 0 || len > INT_MAX || pp == NULL || (p = *pp) == NULL || | |
242 | p[len - 1] & 0x80) { | |
243 | ASN1err(ASN1_F_C2I_ASN1_OBJECT, ASN1_R_INVALID_OBJECT_ENCODING); | |
244 | return NULL; | |
245 | } | |
246 | /* Now 0 < len <= INT_MAX, so the cast is safe. */ | |
247 | length = (int)len; | |
331bf00b DSH |
248 | /* |
249 | * Try to lookup OID in table: these are all valid encodings so if we get | |
250 | * a match we know the OID is valid. | |
251 | */ | |
252 | tobj.nid = NID_undef; | |
253 | tobj.data = p; | |
254 | tobj.length = length; | |
255 | tobj.flags = 0; | |
256 | i = OBJ_obj2nid(&tobj); | |
257 | if (i != NID_undef) { | |
258 | /* | |
259 | * Return shared registered OID object: this improves efficiency | |
260 | * because we don't have to return a dynamically allocated OID | |
261 | * and NID lookups can use the cached value. | |
262 | */ | |
263 | ret = OBJ_nid2obj(i); | |
264 | if (a) { | |
265 | ASN1_OBJECT_free(*a); | |
266 | *a = ret; | |
267 | } | |
268 | *pp += len; | |
269 | return ret; | |
270 | } | |
0f113f3e MC |
271 | for (i = 0; i < length; i++, p++) { |
272 | if (*p == 0x80 && (!i || !(p[-1] & 0x80))) { | |
273 | ASN1err(ASN1_F_C2I_ASN1_OBJECT, ASN1_R_INVALID_OBJECT_ENCODING); | |
274 | return NULL; | |
275 | } | |
276 | } | |
284ef5f3 | 277 | |
0f113f3e MC |
278 | /* |
279 | * only the ASN1_OBJECTs from the 'table' will have values for ->sn or | |
280 | * ->ln | |
281 | */ | |
282 | if ((a == NULL) || ((*a) == NULL) || | |
283 | !((*a)->flags & ASN1_OBJECT_FLAG_DYNAMIC)) { | |
284 | if ((ret = ASN1_OBJECT_new()) == NULL) | |
26a7d938 | 285 | return NULL; |
0f113f3e MC |
286 | } else |
287 | ret = (*a); | |
284ef5f3 | 288 | |
0f113f3e MC |
289 | p = *pp; |
290 | /* detach data from object */ | |
291 | data = (unsigned char *)ret->data; | |
292 | ret->data = NULL; | |
293 | /* once detached we can change it */ | |
294 | if ((data == NULL) || (ret->length < length)) { | |
295 | ret->length = 0; | |
b548a1f1 | 296 | OPENSSL_free(data); |
b196e7d9 | 297 | data = OPENSSL_malloc(length); |
0f113f3e MC |
298 | if (data == NULL) { |
299 | i = ERR_R_MALLOC_FAILURE; | |
300 | goto err; | |
301 | } | |
302 | ret->flags |= ASN1_OBJECT_FLAG_DYNAMIC_DATA; | |
303 | } | |
304 | memcpy(data, p, length); | |
305 | /* reattach data to object, after which it remains const */ | |
306 | ret->data = data; | |
307 | ret->length = length; | |
308 | ret->sn = NULL; | |
309 | ret->ln = NULL; | |
310 | /* ret->flags=ASN1_OBJECT_FLAG_DYNAMIC; we know it is dynamic */ | |
311 | p += length; | |
d02b48c6 | 312 | |
0f113f3e MC |
313 | if (a != NULL) |
314 | (*a) = ret; | |
315 | *pp = p; | |
26a7d938 | 316 | return ret; |
0f113f3e MC |
317 | err: |
318 | ASN1err(ASN1_F_C2I_ASN1_OBJECT, i); | |
2ace7450 | 319 | if ((a == NULL) || (*a != ret)) |
0f113f3e | 320 | ASN1_OBJECT_free(ret); |
26a7d938 | 321 | return NULL; |
0f113f3e | 322 | } |
d02b48c6 | 323 | |
6b691a5c | 324 | ASN1_OBJECT *ASN1_OBJECT_new(void) |
0f113f3e MC |
325 | { |
326 | ASN1_OBJECT *ret; | |
d02b48c6 | 327 | |
64b25758 | 328 | ret = OPENSSL_zalloc(sizeof(*ret)); |
0f113f3e MC |
329 | if (ret == NULL) { |
330 | ASN1err(ASN1_F_ASN1_OBJECT_NEW, ERR_R_MALLOC_FAILURE); | |
26a7d938 | 331 | return NULL; |
0f113f3e | 332 | } |
0f113f3e | 333 | ret->flags = ASN1_OBJECT_FLAG_DYNAMIC; |
26a7d938 | 334 | return ret; |
0f113f3e | 335 | } |
d02b48c6 | 336 | |
6b691a5c | 337 | void ASN1_OBJECT_free(ASN1_OBJECT *a) |
0f113f3e MC |
338 | { |
339 | if (a == NULL) | |
340 | return; | |
341 | if (a->flags & ASN1_OBJECT_FLAG_DYNAMIC_STRINGS) { | |
342 | #ifndef CONST_STRICT /* disable purely for compile-time strict | |
343 | * const checking. Doing this on a "real" | |
344 | * compile will cause memory leaks */ | |
b548a1f1 RS |
345 | OPENSSL_free((void*)a->sn); |
346 | OPENSSL_free((void*)a->ln); | |
e778802f | 347 | #endif |
0f113f3e MC |
348 | a->sn = a->ln = NULL; |
349 | } | |
350 | if (a->flags & ASN1_OBJECT_FLAG_DYNAMIC_DATA) { | |
b548a1f1 | 351 | OPENSSL_free((void*)a->data); |
0f113f3e MC |
352 | a->data = NULL; |
353 | a->length = 0; | |
354 | } | |
355 | if (a->flags & ASN1_OBJECT_FLAG_DYNAMIC) | |
356 | OPENSSL_free(a); | |
357 | } | |
d02b48c6 | 358 | |
6343829a | 359 | ASN1_OBJECT *ASN1_OBJECT_create(int nid, unsigned char *data, int len, |
0f113f3e MC |
360 | const char *sn, const char *ln) |
361 | { | |
362 | ASN1_OBJECT o; | |
d02b48c6 | 363 | |
0f113f3e MC |
364 | o.sn = sn; |
365 | o.ln = ln; | |
366 | o.data = data; | |
367 | o.nid = nid; | |
368 | o.length = len; | |
369 | o.flags = ASN1_OBJECT_FLAG_DYNAMIC | ASN1_OBJECT_FLAG_DYNAMIC_STRINGS | | |
370 | ASN1_OBJECT_FLAG_DYNAMIC_DATA; | |
26a7d938 | 371 | return OBJ_dup(&o); |
0f113f3e | 372 | } |