]> git.ipfire.org Git - thirdparty/openssl.git/blame - crypto/mem.c
Check for potentially exploitable overflows in asn1_d2i_read_bio
[thirdparty/openssl.git] / crypto / mem.c
CommitLineData
d02b48c6 1/* crypto/mem.c */
58964a49 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6
RE
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#include <stdio.h>
60#include <stdlib.h>
458cddc1 61#include <openssl/crypto.h>
d02b48c6
RE
62#include "cryptlib.h"
63
1f575f1b 64
0cd08cce
BM
65static int allow_customize = 1; /* we provide flexible functions for */
66static int allow_customize_debug = 1;/* exchanging memory-related functions at
67 * run-time, but this must be done
68 * before any blocks are actually
69 * allocated; or we'll run into huge
70 * problems when malloc/free pairs
71 * don't match etc. */
d02b48c6 72
a5435e8b
BM
73
74
75/* the following pointers may be changed as long as 'allow_customize' is set */
76
0cd08cce 77static void *(*malloc_func)(size_t) = malloc;
a5435e8b
BM
78static void *default_malloc_ex(size_t num, const char *file, int line)
79 { return malloc_func(num); }
80static void *(*malloc_ex_func)(size_t, const char *file, int line)
81 = default_malloc_ex;
82
0cd08cce 83static void *(*realloc_func)(void *, size_t)= realloc;
a5435e8b
BM
84static void *default_realloc_ex(void *str, size_t num,
85 const char *file, int line)
86 { return realloc_func(str,num); }
87static void *(*realloc_ex_func)(void *, size_t, const char *file, int line)
88 = default_realloc_ex;
89
0cd08cce
BM
90static void (*free_func)(void *) = free;
91
a5435e8b
BM
92static void *(*malloc_locked_func)(size_t) = malloc;
93static void *default_malloc_locked_ex(size_t num, const char *file, int line)
94 { return malloc_locked_func(num); }
65a22e8e 95static void *(*malloc_locked_ex_func)(size_t, const char *file, int line)
a5435e8b
BM
96 = default_malloc_locked_ex;
97
98static void (*free_locked_func)(void *) = free;
65a22e8e 99
a5435e8b
BM
100
101
102/* may be changed as long as 'allow_customize_debug' is set */
0cd08cce 103/* XXX use correct function pointer types */
f3a2a044 104#ifdef CRYPTO_MDEBUG
65962686 105/* use default functions from mem_dbg.c */
6343829a 106static void (*malloc_debug_func)(void *,int,const char *,int,int)
65962686 107 = CRYPTO_dbg_malloc;
6343829a 108static void (*realloc_debug_func)(void *,void *,int,const char *,int,int)
65962686
RL
109 = CRYPTO_dbg_realloc;
110static void (*free_debug_func)(void *,int) = CRYPTO_dbg_free;
111static void (*set_debug_options_func)(long) = CRYPTO_dbg_set_options;
112static long (*get_debug_options_func)(void) = CRYPTO_dbg_get_options;
f3a2a044 113#else
65962686
RL
114/* applications can use CRYPTO_malloc_debug_init() to select above case
115 * at run-time */
6343829a
GT
116static void (*malloc_debug_func)(void *,int,const char *,int,int) = NULL;
117static void (*realloc_debug_func)(void *,void *,int,const char *,int,int)
65962686
RL
118 = NULL;
119static void (*free_debug_func)(void *,int) = NULL;
120static void (*set_debug_options_func)(long) = NULL;
121static long (*get_debug_options_func)(void) = NULL;
f3a2a044 122#endif
9ac42ed8 123
0cd08cce
BM
124
125int CRYPTO_set_mem_functions(void *(*m)(size_t), void *(*r)(void *, size_t),
126 void (*f)(void *))
d02b48c6 127 {
293c58c1 128 OPENSSL_init();
0cd08cce
BM
129 if (!allow_customize)
130 return 0;
a5435e8b 131 if ((m == 0) || (r == 0) || (f == 0))
0cd08cce 132 return 0;
a5435e8b
BM
133 malloc_func=m; malloc_ex_func=default_malloc_ex;
134 realloc_func=r; realloc_ex_func=default_realloc_ex;
d02b48c6 135 free_func=f;
a5435e8b 136 malloc_locked_func=m; malloc_locked_ex_func=default_malloc_locked_ex;
dfeab068 137 free_locked_func=f;
0cd08cce
BM
138 return 1;
139 }
140
65a22e8e
RL
141int CRYPTO_set_mem_ex_functions(
142 void *(*m)(size_t,const char *,int),
143 void *(*r)(void *, size_t,const char *,int),
144 void (*f)(void *))
145 {
146 if (!allow_customize)
147 return 0;
a5435e8b
BM
148 if ((m == 0) || (r == 0) || (f == 0))
149 return 0;
150 malloc_func=0; malloc_ex_func=m;
151 realloc_func=0; realloc_ex_func=r;
152 free_func=f;
153 malloc_locked_func=0; malloc_locked_ex_func=m;
154 free_locked_func=f;
65a22e8e
RL
155 return 1;
156 }
157
0cd08cce
BM
158int CRYPTO_set_locked_mem_functions(void *(*m)(size_t), void (*f)(void *))
159 {
160 if (!allow_customize)
161 return 0;
162 if ((m == NULL) || (f == NULL))
163 return 0;
a5435e8b 164 malloc_locked_func=m; malloc_locked_ex_func=default_malloc_locked_ex;
0cd08cce
BM
165 free_locked_func=f;
166 return 1;
dfeab068
RE
167 }
168
65a22e8e
RL
169int CRYPTO_set_locked_mem_ex_functions(
170 void *(*m)(size_t,const char *,int),
171 void (*f)(void *))
172 {
173 if (!allow_customize)
174 return 0;
a5435e8b
BM
175 if ((m == NULL) || (f == NULL))
176 return 0;
177 malloc_locked_func=0; malloc_locked_ex_func=m;
178 free_func=f;
65a22e8e
RL
179 return 1;
180 }
181
6343829a
GT
182int CRYPTO_set_mem_debug_functions(void (*m)(void *,int,const char *,int,int),
183 void (*r)(void *,void *,int,const char *,int,int),
65962686
RL
184 void (*f)(void *,int),
185 void (*so)(long),
186 long (*go)(void))
9ac42ed8 187 {
0cd08cce
BM
188 if (!allow_customize_debug)
189 return 0;
f69e5d6a 190 OPENSSL_init();
9ac42ed8
RL
191 malloc_debug_func=m;
192 realloc_debug_func=r;
193 free_debug_func=f;
194 set_debug_options_func=so;
195 get_debug_options_func=go;
0cd08cce 196 return 1;
9ac42ed8
RL
197 }
198
a5435e8b 199
0cd08cce
BM
200void CRYPTO_get_mem_functions(void *(**m)(size_t), void *(**r)(void *, size_t),
201 void (**f)(void *))
d02b48c6 202 {
b93642c5
BM
203 if (m != NULL) *m = (malloc_ex_func == default_malloc_ex) ?
204 malloc_func : 0;
205 if (r != NULL) *r = (realloc_ex_func == default_realloc_ex) ?
206 realloc_func : 0;
d02b48c6
RE
207 if (f != NULL) *f=free_func;
208 }
209
65a22e8e
RL
210void CRYPTO_get_mem_ex_functions(
211 void *(**m)(size_t,const char *,int),
212 void *(**r)(void *, size_t,const char *,int),
213 void (**f)(void *))
214 {
a5435e8b
BM
215 if (m != NULL) *m = (malloc_ex_func != default_malloc_ex) ?
216 malloc_ex_func : 0;
217 if (r != NULL) *r = (realloc_ex_func != default_realloc_ex) ?
218 realloc_ex_func : 0;
219 if (f != NULL) *f=free_func;
65a22e8e
RL
220 }
221
0cd08cce
BM
222void CRYPTO_get_locked_mem_functions(void *(**m)(size_t), void (**f)(void *))
223 {
b93642c5
BM
224 if (m != NULL) *m = (malloc_locked_ex_func == default_malloc_locked_ex) ?
225 malloc_locked_func : 0;
0cd08cce
BM
226 if (f != NULL) *f=free_locked_func;
227 }
228
65a22e8e
RL
229void CRYPTO_get_locked_mem_ex_functions(
230 void *(**m)(size_t,const char *,int),
231 void (**f)(void *))
232 {
a5435e8b
BM
233 if (m != NULL) *m = (malloc_locked_ex_func != default_malloc_locked_ex) ?
234 malloc_locked_ex_func : 0;
235 if (f != NULL) *f=free_locked_func;
65a22e8e
RL
236 }
237
6343829a
GT
238void CRYPTO_get_mem_debug_functions(void (**m)(void *,int,const char *,int,int),
239 void (**r)(void *,void *,int,const char *,int,int),
65962686
RL
240 void (**f)(void *,int),
241 void (**so)(long),
242 long (**go)(void))
dfeab068 243 {
9ac42ed8
RL
244 if (m != NULL) *m=malloc_debug_func;
245 if (r != NULL) *r=realloc_debug_func;
246 if (f != NULL) *f=free_debug_func;
247 if (so != NULL) *so=set_debug_options_func;
248 if (go != NULL) *go=get_debug_options_func;
dfeab068
RE
249 }
250
d02b48c6 251
6343829a 252void *CRYPTO_malloc_locked(int num, const char *file, int line)
d02b48c6 253 {
65962686 254 void *ret = NULL;
d02b48c6 255
6781efb9 256 if (num <= 0) return NULL;
d5234c7b 257
0cd08cce 258 allow_customize = 0;
f3a2a044 259 if (malloc_debug_func != NULL)
0cd08cce
BM
260 {
261 allow_customize_debug = 0;
f3a2a044 262 malloc_debug_func(NULL, num, file, line, 0);
0cd08cce 263 }
65a22e8e 264 ret = malloc_locked_ex_func(num,file,line);
8d28d5f8
RL
265#ifdef LEVITTE_DEBUG_MEM
266 fprintf(stderr, "LEVITTE_DEBUG_MEM: > 0x%p (%d)\n", ret, num);
3dff94c2 267#endif
f3a2a044
RL
268 if (malloc_debug_func != NULL)
269 malloc_debug_func(ret, num, file, line, 1);
1f575f1b 270
b2dba9bf 271#ifndef OPENSSL_CPUID_OBJ
df29cc8f
RL
272 /* Create a dependency on the value of 'cleanse_ctr' so our memory
273 * sanitisation function can't be optimised out. NB: We only do
274 * this for >2Kb so the overhead doesn't bother us. */
275 if(ret && (num > 2048))
b2dba9bf 276 { extern unsigned char cleanse_ctr;
df29cc8f 277 ((unsigned char *)ret)[0] = cleanse_ctr;
b2dba9bf
AP
278 }
279#endif
df29cc8f 280
9ac42ed8 281 return ret;
d02b48c6
RE
282 }
283
9ac42ed8 284void CRYPTO_free_locked(void *str)
d02b48c6 285 {
f3a2a044
RL
286 if (free_debug_func != NULL)
287 free_debug_func(str, 0);
8d28d5f8
RL
288#ifdef LEVITTE_DEBUG_MEM
289 fprintf(stderr, "LEVITTE_DEBUG_MEM: < 0x%p\n", str);
9ac42ed8 290#endif
a5435e8b 291 free_locked_func(str);
f3a2a044
RL
292 if (free_debug_func != NULL)
293 free_debug_func(NULL, 1);
d02b48c6
RE
294 }
295
6343829a 296void *CRYPTO_malloc(int num, const char *file, int line)
d02b48c6 297 {
65962686 298 void *ret = NULL;
d02b48c6 299
6781efb9 300 if (num <= 0) return NULL;
d5234c7b 301
0cd08cce 302 allow_customize = 0;
f3a2a044 303 if (malloc_debug_func != NULL)
0cd08cce
BM
304 {
305 allow_customize_debug = 0;
f3a2a044 306 malloc_debug_func(NULL, num, file, line, 0);
0cd08cce 307 }
65a22e8e 308 ret = malloc_ex_func(num,file,line);
8d28d5f8
RL
309#ifdef LEVITTE_DEBUG_MEM
310 fprintf(stderr, "LEVITTE_DEBUG_MEM: > 0x%p (%d)\n", ret, num);
9ac42ed8 311#endif
f3a2a044
RL
312 if (malloc_debug_func != NULL)
313 malloc_debug_func(ret, num, file, line, 1);
d02b48c6 314
b2dba9bf 315#ifndef OPENSSL_CPUID_OBJ
df29cc8f
RL
316 /* Create a dependency on the value of 'cleanse_ctr' so our memory
317 * sanitisation function can't be optimised out. NB: We only do
318 * this for >2Kb so the overhead doesn't bother us. */
319 if(ret && (num > 2048))
b2dba9bf 320 { extern unsigned char cleanse_ctr;
df29cc8f 321 ((unsigned char *)ret)[0] = cleanse_ctr;
b2dba9bf
AP
322 }
323#endif
df29cc8f 324
9ac42ed8 325 return ret;
d02b48c6 326 }
6caa4edd
BL
327char *CRYPTO_strdup(const char *str, const char *file, int line)
328 {
329 char *ret = CRYPTO_malloc(strlen(str)+1, file, line);
330
331 strcpy(ret, str);
332 return ret;
333 }
d02b48c6 334
6343829a 335void *CRYPTO_realloc(void *str, int num, const char *file, int line)
d02b48c6 336 {
65962686 337 void *ret = NULL;
d02b48c6 338
0472883c
RL
339 if (str == NULL)
340 return CRYPTO_malloc(num, file, line);
d5234c7b 341
6781efb9 342 if (num <= 0) return NULL;
d5234c7b 343
f3a2a044
RL
344 if (realloc_debug_func != NULL)
345 realloc_debug_func(str, NULL, num, file, line, 0);
65a22e8e 346 ret = realloc_ex_func(str,num,file,line);
8d28d5f8
RL
347#ifdef LEVITTE_DEBUG_MEM
348 fprintf(stderr, "LEVITTE_DEBUG_MEM: | 0x%p -> 0x%p (%d)\n", str, ret, num);
1f575f1b 349#endif
f3a2a044
RL
350 if (realloc_debug_func != NULL)
351 realloc_debug_func(str, ret, num, file, line, 1);
9ac42ed8
RL
352
353 return ret;
d02b48c6
RE
354 }
355
6343829a
GT
356void *CRYPTO_realloc_clean(void *str, int old_len, int num, const char *file,
357 int line)
54a656ef
BL
358 {
359 void *ret = NULL;
360
361 if (str == NULL)
362 return CRYPTO_malloc(num, file, line);
d5234c7b 363
6781efb9 364 if (num <= 0) return NULL;
d5234c7b 365
564a503b
DSH
366 /* We don't support shrinking the buffer. Note the memcpy that copies
367 * |old_len| bytes to the new buffer, below. */
368 if (num < old_len) return NULL;
369
54a656ef
BL
370 if (realloc_debug_func != NULL)
371 realloc_debug_func(str, NULL, num, file, line, 0);
372 ret=malloc_ex_func(num,file,line);
373 if(ret)
83eb412d 374 {
54a656ef 375 memcpy(ret,str,old_len);
83eb412d
RL
376 OPENSSL_cleanse(str,old_len);
377 free_func(str);
378 }
54a656ef 379#ifdef LEVITTE_DEBUG_MEM
83eb412d
RL
380 fprintf(stderr,
381 "LEVITTE_DEBUG_MEM: | 0x%p -> 0x%p (%d)\n",
382 str, ret, num);
54a656ef
BL
383#endif
384 if (realloc_debug_func != NULL)
385 realloc_debug_func(str, ret, num, file, line, 1);
386
387 return ret;
388 }
389
9ac42ed8 390void CRYPTO_free(void *str)
d02b48c6 391 {
f3a2a044
RL
392 if (free_debug_func != NULL)
393 free_debug_func(str, 0);
8d28d5f8
RL
394#ifdef LEVITTE_DEBUG_MEM
395 fprintf(stderr, "LEVITTE_DEBUG_MEM: < 0x%p\n", str);
dfeab068 396#endif
a5435e8b 397 free_func(str);
f3a2a044
RL
398 if (free_debug_func != NULL)
399 free_debug_func(NULL, 1);
d02b48c6
RE
400 }
401
6343829a 402void *CRYPTO_remalloc(void *a, int num, const char *file, int line)
d02b48c6 403 {
26a3a48d 404 if (a != NULL) OPENSSL_free(a);
6343829a 405 a=(char *)OPENSSL_malloc(num);
9ac42ed8 406 return(a);
d02b48c6
RE
407 }
408
0cd08cce 409void CRYPTO_set_mem_debug_options(long bits)
d02b48c6 410 {
f3a2a044
RL
411 if (set_debug_options_func != NULL)
412 set_debug_options_func(bits);
d02b48c6
RE
413 }
414
667ac4ec 415long CRYPTO_get_mem_debug_options(void)
d02b48c6 416 {
f3a2a044
RL
417 if (get_debug_options_func != NULL)
418 return get_debug_options_func();
0cd08cce 419 return 0;
d02b48c6 420 }