1 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
4 * This package is an SSL implementation written
5 * by Eric Young (eay@cryptsoft.com).
6 * The implementation was written so as to conform with Netscapes SSL.
8 * This library is free for commercial and non-commercial use as long as
9 * the following conditions are aheared to. The following conditions
10 * apply to all code found in this distribution, be it the RC4, RSA,
11 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
12 * included with this distribution is covered by the same copyright terms
13 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 * Copyright remains Eric Young's, and as such any Copyright notices in
16 * the code are not to be removed.
17 * If this package is used in a product, Eric Young should be given attribution
18 * as the author of the parts of the library used.
19 * This can be in the form of a textual message at program startup or
20 * in documentation (online or textual) provided with the package.
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
25 * 1. Redistributions of source code must retain the copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * "This product includes cryptographic software written by
33 * Eric Young (eay@cryptsoft.com)"
34 * The word 'cryptographic' can be left out if the rouines from the library
35 * being used are not cryptographic related :-).
36 * 4. If you include any Windows specific code (or a derivative thereof) from
37 * the apps directory (application code) you must include an acknowledgement:
38 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
52 * The licence and distribution terms for any publically available version or
53 * derivative of this code cannot be changed. i.e. this code cannot simply be
54 * copied and put under another distribution licence
55 * [including the GNU Public Licence.]
61 #include "internal/cryptlib.h"
62 #include <openssl/lhash.h>
63 #include <openssl/asn1.h>
64 #include "internal/objects.h"
65 #include <openssl/bn.h>
66 #include "internal/asn1_int.h"
69 /* obj_dat.h is generated from objects.h by obj_dat.pl */
72 DECLARE_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT
*, unsigned int, sn
);
73 DECLARE_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT
*, unsigned int, ln
);
74 DECLARE_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT
*, unsigned int, obj
);
86 static int new_nid
= NUM_NID
;
87 static LHASH_OF(ADDED_OBJ
) *added
= NULL
;
89 static int sn_cmp(const ASN1_OBJECT
*const *a
, const unsigned int *b
)
91 return (strcmp((*a
)->sn
, nid_objs
[*b
].sn
));
94 IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT
*, unsigned int, sn
);
96 static int ln_cmp(const ASN1_OBJECT
*const *a
, const unsigned int *b
)
98 return (strcmp((*a
)->ln
, nid_objs
[*b
].ln
));
101 IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT
*, unsigned int, ln
);
103 static unsigned long added_obj_hash(const ADDED_OBJ
*ca
)
105 const ASN1_OBJECT
*a
;
107 unsigned long ret
= 0;
113 ret
= a
->length
<< 20L;
114 p
= (unsigned char *)a
->data
;
115 for (i
= 0; i
< a
->length
; i
++)
116 ret
^= p
[i
] << ((i
* 3) % 24);
119 ret
= lh_strhash(a
->sn
);
122 ret
= lh_strhash(a
->ln
);
132 ret
|= ((unsigned long)ca
->type
) << 30L;
136 static int added_obj_cmp(const ADDED_OBJ
*ca
, const ADDED_OBJ
*cb
)
141 i
= ca
->type
- cb
->type
;
148 i
= (a
->length
- b
->length
);
151 return (memcmp(a
->data
, b
->data
, (size_t)a
->length
));
155 else if (b
->sn
== NULL
)
158 return (strcmp(a
->sn
, b
->sn
));
162 else if (b
->ln
== NULL
)
165 return (strcmp(a
->ln
, b
->ln
));
167 return (a
->nid
- b
->nid
);
174 static int init_added(void)
178 added
= lh_ADDED_OBJ_new(added_obj_hash
, added_obj_cmp
);
179 return (added
!= NULL
);
182 static void cleanup1_doall(ADDED_OBJ
*a
)
185 a
->obj
->flags
|= ASN1_OBJECT_FLAG_DYNAMIC
|
186 ASN1_OBJECT_FLAG_DYNAMIC_STRINGS
| ASN1_OBJECT_FLAG_DYNAMIC_DATA
;
189 static void cleanup2_doall(ADDED_OBJ
*a
)
194 static void cleanup3_doall(ADDED_OBJ
*a
)
196 if (--a
->obj
->nid
== 0)
197 ASN1_OBJECT_free(a
->obj
);
202 * The purpose of obj_cleanup_defer is to avoid evp_cleanup_intern() attempting
203 * to use freed up OIDs. If necessary the actual freeing up of OIDs is delayed.
205 int obj_cleanup_defer
= 0;
207 void check_defer(int nid
)
209 if (!obj_cleanup_defer
&& nid
>= NUM_NID
)
210 obj_cleanup_defer
= 1;
213 void obj_cleanup_intern(void)
215 if (obj_cleanup_defer
) {
216 obj_cleanup_defer
= 2;
221 lh_ADDED_OBJ_set_down_load(added
, 0);
222 lh_ADDED_OBJ_doall(added
, cleanup1_doall
); /* zero counters */
223 lh_ADDED_OBJ_doall(added
, cleanup2_doall
); /* set counters */
224 lh_ADDED_OBJ_doall(added
, cleanup3_doall
); /* free objects */
225 lh_ADDED_OBJ_free(added
);
229 int OBJ_new_nid(int num
)
238 int OBJ_add_object(const ASN1_OBJECT
*obj
)
241 ADDED_OBJ
*ao
[4] = { NULL
, NULL
, NULL
, NULL
}, *aop
;
247 if ((o
= OBJ_dup(obj
)) == NULL
)
249 if ((ao
[ADDED_NID
] = OPENSSL_malloc(sizeof(*ao
[0]))) == NULL
)
251 if ((o
->length
!= 0) && (obj
->data
!= NULL
))
252 if ((ao
[ADDED_DATA
] = OPENSSL_malloc(sizeof(*ao
[0]))) == NULL
)
255 if ((ao
[ADDED_SNAME
] = OPENSSL_malloc(sizeof(*ao
[0]))) == NULL
)
258 if ((ao
[ADDED_LNAME
] = OPENSSL_malloc(sizeof(*ao
[0]))) == NULL
)
261 for (i
= ADDED_DATA
; i
<= ADDED_NID
; i
++) {
265 aop
= lh_ADDED_OBJ_insert(added
, ao
[i
]);
266 /* memory leak, buit should not normally matter */
271 ~(ASN1_OBJECT_FLAG_DYNAMIC
| ASN1_OBJECT_FLAG_DYNAMIC_STRINGS
|
272 ASN1_OBJECT_FLAG_DYNAMIC_DATA
);
276 OBJerr(OBJ_F_OBJ_ADD_OBJECT
, ERR_R_MALLOC_FAILURE
);
278 for (i
= ADDED_DATA
; i
<= ADDED_NID
; i
++)
284 ASN1_OBJECT
*OBJ_nid2obj(int n
)
289 if ((n
>= 0) && (n
< NUM_NID
)) {
290 if ((n
!= NID_undef
) && (nid_objs
[n
].nid
== NID_undef
)) {
291 OBJerr(OBJ_F_OBJ_NID2OBJ
, OBJ_R_UNKNOWN_NID
);
294 return ((ASN1_OBJECT
*)&(nid_objs
[n
]));
295 } else if (added
== NULL
)
301 adp
= lh_ADDED_OBJ_retrieve(added
, &ad
);
305 OBJerr(OBJ_F_OBJ_NID2OBJ
, OBJ_R_UNKNOWN_NID
);
311 const char *OBJ_nid2sn(int n
)
316 if ((n
>= 0) && (n
< NUM_NID
)) {
317 if ((n
!= NID_undef
) && (nid_objs
[n
].nid
== NID_undef
)) {
318 OBJerr(OBJ_F_OBJ_NID2SN
, OBJ_R_UNKNOWN_NID
);
321 return (nid_objs
[n
].sn
);
322 } else if (added
== NULL
)
328 adp
= lh_ADDED_OBJ_retrieve(added
, &ad
);
330 return (adp
->obj
->sn
);
332 OBJerr(OBJ_F_OBJ_NID2SN
, OBJ_R_UNKNOWN_NID
);
338 const char *OBJ_nid2ln(int n
)
343 if ((n
>= 0) && (n
< NUM_NID
)) {
344 if ((n
!= NID_undef
) && (nid_objs
[n
].nid
== NID_undef
)) {
345 OBJerr(OBJ_F_OBJ_NID2LN
, OBJ_R_UNKNOWN_NID
);
348 return (nid_objs
[n
].ln
);
349 } else if (added
== NULL
)
355 adp
= lh_ADDED_OBJ_retrieve(added
, &ad
);
357 return (adp
->obj
->ln
);
359 OBJerr(OBJ_F_OBJ_NID2LN
, OBJ_R_UNKNOWN_NID
);
365 static int obj_cmp(const ASN1_OBJECT
*const *ap
, const unsigned int *bp
)
368 const ASN1_OBJECT
*a
= *ap
;
369 const ASN1_OBJECT
*b
= &nid_objs
[*bp
];
371 j
= (a
->length
- b
->length
);
376 return (memcmp(a
->data
, b
->data
, a
->length
));
379 IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT
*, unsigned int, obj
);
381 int OBJ_obj2nid(const ASN1_OBJECT
*a
)
383 const unsigned int *op
;
395 ad
.type
= ADDED_DATA
;
396 ad
.obj
= (ASN1_OBJECT
*)a
; /* XXX: ugly but harmless */
397 adp
= lh_ADDED_OBJ_retrieve(added
, &ad
);
399 return (adp
->obj
->nid
);
401 op
= OBJ_bsearch_obj(&a
, obj_objs
, NUM_OBJ
);
404 return (nid_objs
[*op
].nid
);
408 * Convert an object name into an ASN1_OBJECT if "noname" is not set then
409 * search for short and long names first. This will convert the "dotted" form
410 * into an object: unlike OBJ_txt2nid it can be used with any objects, not
411 * just registered ones.
414 ASN1_OBJECT
*OBJ_txt2obj(const char *s
, int no_name
)
417 ASN1_OBJECT
*op
= NULL
;
420 const unsigned char *cp
;
424 if (((nid
= OBJ_sn2nid(s
)) != NID_undef
) ||
425 ((nid
= OBJ_ln2nid(s
)) != NID_undef
))
426 return OBJ_nid2obj(nid
);
429 /* Work out size of content octets */
430 i
= a2d_ASN1_OBJECT(NULL
, 0, s
, -1);
432 /* Don't clear the error */
438 /* Work out total size */
439 j
= ASN1_object_size(0, i
, V_ASN1_OBJECT
);
441 if ((buf
= OPENSSL_malloc(j
)) == NULL
)
445 /* Write out tag+length */
446 ASN1_put_object(&p
, 0, i
, V_ASN1_OBJECT
, V_ASN1_UNIVERSAL
);
447 /* Write out contents */
448 a2d_ASN1_OBJECT(p
, i
, s
, -1);
451 op
= d2i_ASN1_OBJECT(NULL
, &cp
, j
);
456 int OBJ_obj2txt(char *buf
, int buf_len
, const ASN1_OBJECT
*a
, int no_name
)
458 int i
, n
= 0, len
, nid
, first
, use_bn
;
461 const unsigned char *p
;
462 char tbuf
[DECIMAL_SIZE(i
) + DECIMAL_SIZE(l
) + 2];
464 /* Ensure that, at every state, |buf| is NUL-terminated. */
465 if (buf
&& buf_len
> 0)
468 if ((a
== NULL
) || (a
->data
== NULL
))
471 if (!no_name
&& (nid
= OBJ_obj2nid(a
)) != NID_undef
) {
478 OPENSSL_strlcpy(buf
, s
, buf_len
);
494 unsigned char c
= *p
++;
496 if ((len
== 0) && (c
& 0x80))
499 if (!BN_add_word(bl
, c
& 0x7f))
505 if (!use_bn
&& (l
> (ULONG_MAX
>> 7L))) {
506 if (bl
== NULL
&& (bl
= BN_new()) == NULL
)
508 if (!BN_set_word(bl
, l
))
513 if (!BN_lshift(bl
, bl
, 7))
524 if (!BN_sub_word(bl
, 80))
532 if (buf
&& (buf_len
> 1)) {
542 bndec
= BN_bn2dec(bl
);
552 OPENSSL_strlcpy(buf
, bndec
, buf_len
);
565 BIO_snprintf(tbuf
, sizeof tbuf
, ".%lu", l
);
567 if (buf
&& (buf_len
> 0)) {
568 OPENSSL_strlcpy(buf
, tbuf
, buf_len
);
590 int OBJ_txt2nid(const char *s
)
594 obj
= OBJ_txt2obj(s
, 0);
595 nid
= OBJ_obj2nid(obj
);
596 ASN1_OBJECT_free(obj
);
600 int OBJ_ln2nid(const char *s
)
603 const ASN1_OBJECT
*oo
= &o
;
605 const unsigned int *op
;
609 ad
.type
= ADDED_LNAME
;
611 adp
= lh_ADDED_OBJ_retrieve(added
, &ad
);
613 return (adp
->obj
->nid
);
615 op
= OBJ_bsearch_ln(&oo
, ln_objs
, NUM_LN
);
618 return (nid_objs
[*op
].nid
);
621 int OBJ_sn2nid(const char *s
)
624 const ASN1_OBJECT
*oo
= &o
;
626 const unsigned int *op
;
630 ad
.type
= ADDED_SNAME
;
632 adp
= lh_ADDED_OBJ_retrieve(added
, &ad
);
634 return (adp
->obj
->nid
);
636 op
= OBJ_bsearch_sn(&oo
, sn_objs
, NUM_SN
);
639 return (nid_objs
[*op
].nid
);
642 const void *OBJ_bsearch_(const void *key
, const void *base
, int num
, int size
,
643 int (*cmp
) (const void *, const void *))
645 return OBJ_bsearch_ex_(key
, base
, num
, size
, cmp
, 0);
648 const void *OBJ_bsearch_ex_(const void *key
, const void *base_
, int num
,
650 int (*cmp
) (const void *, const void *),
653 const char *base
= base_
;
654 int l
, h
, i
= 0, c
= 0;
655 const char *p
= NULL
;
663 p
= &(base
[i
* size
]);
672 #ifdef CHARSET_EBCDIC
674 * THIS IS A KLUDGE - Because the *_obj is sorted in ASCII order, and I
675 * don't have perl (yet), we revert to a *LINEAR* search when the object
676 * wasn't found in the binary search.
679 for (i
= 0; i
< num
; ++i
) {
680 p
= &(base
[i
* size
]);
682 if (c
== 0 || (c
< 0 && (flags
& OBJ_BSEARCH_VALUE_ON_NOMATCH
)))
687 if (c
!= 0 && !(flags
& OBJ_BSEARCH_VALUE_ON_NOMATCH
))
689 else if (c
== 0 && (flags
& OBJ_BSEARCH_FIRST_VALUE_ON_MATCH
)) {
690 while (i
> 0 && (*cmp
) (key
, &(base
[(i
- 1) * size
])) == 0)
692 p
= &(base
[i
* size
]);
697 int OBJ_create_objects(BIO
*in
)
701 char *o
, *s
, *l
= NULL
;
705 i
= BIO_gets(in
, buf
, 512);
709 if (!isalnum((unsigned char)buf
[0]))
712 while (isdigit((unsigned char)*s
) || (*s
== '.'))
716 while (isspace((unsigned char)*s
))
722 while ((*l
!= '\0') && !isspace((unsigned char)*l
))
726 while (isspace((unsigned char)*l
))
735 if ((o
== NULL
) || (*o
== '\0'))
737 if (!OBJ_create(o
, s
, l
))
744 int OBJ_create(const char *oid
, const char *sn
, const char *ln
)
747 ASN1_OBJECT
*op
= NULL
;
751 i
= a2d_ASN1_OBJECT(NULL
, 0, oid
, -1);
755 if ((buf
= OPENSSL_malloc(i
)) == NULL
) {
756 OBJerr(OBJ_F_OBJ_CREATE
, ERR_R_MALLOC_FAILURE
);
759 i
= a2d_ASN1_OBJECT(buf
, i
, oid
, -1);
762 op
= (ASN1_OBJECT
*)ASN1_OBJECT_create(OBJ_new_nid(1), buf
, i
, sn
, ln
);
765 ok
= OBJ_add_object(op
);
767 ASN1_OBJECT_free(op
);
772 size_t OBJ_length(const ASN1_OBJECT
*obj
)
779 const unsigned char *OBJ_get0_data(const ASN1_OBJECT
*obj
)