test/recordlentest.c

   1 /*
   2  * Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <string.h>
  11
  12 #include "helpers/ssltestlib.h"
  13 #include "testutil.h"
  14
  15 static char *cert = NULL;
  16 static char *privkey = NULL;
  17
  18 #define TEST_PLAINTEXT_OVERFLOW_OK      0
  19 #define TEST_PLAINTEXT_OVERFLOW_NOT_OK  1
  20 #define TEST_ENCRYPTED_OVERFLOW_TLS1_3_OK       2
  21 #define TEST_ENCRYPTED_OVERFLOW_TLS1_3_NOT_OK   3
  22 #define TEST_ENCRYPTED_OVERFLOW_TLS1_2_OK       4
  23 #define TEST_ENCRYPTED_OVERFLOW_TLS1_2_NOT_OK   5
  24
  25 #define TOTAL_RECORD_OVERFLOW_TESTS 6
  26
  27 static int write_record(BIO *b, size_t len, int rectype, int recversion)
  28 {
  29     unsigned char header[SSL3_RT_HEADER_LENGTH];
  30     size_t written;
  31     unsigned char buf[256];
  32
  33     memset(buf, 0, sizeof(buf));
  34
  35     header[0] = rectype;
  36     header[1] = (recversion >> 8) & 0xff;
  37     header[2] = recversion & 0xff;
  38     header[3] = (len >> 8) & 0xff;
  39     header[4] = len & 0xff;
  40
  41     if (!BIO_write_ex(b, header, SSL3_RT_HEADER_LENGTH, &written)
  42             || written != SSL3_RT_HEADER_LENGTH)
  43         return 0;
  44
  45     while (len > 0) {
  46         size_t outlen;
  47
  48         if (len > sizeof(buf))
  49             outlen = sizeof(buf);
  50         else
  51             outlen = len;
  52
  53         if (!BIO_write_ex(b, buf, outlen, &written)
  54                 || written != outlen)
  55             return 0;
  56
  57         len -= outlen;
  58     }
  59
  60     return 1;
  61 }
  62
  63 static int fail_due_to_record_overflow(int enc)
  64 {
  65     long err = ERR_peek_error();
  66     int reason;
  67
  68     if (enc)
  69         reason = SSL_R_ENCRYPTED_LENGTH_TOO_LONG;
  70     else
  71         reason = SSL_R_DATA_LENGTH_TOO_LONG;
  72
  73     if (ERR_GET_LIB(err) == ERR_LIB_SSL
  74             && ERR_GET_REASON(err) == reason)
  75         return 1;
  76
  77     return 0;
  78 }
  79
  80 static int test_record_overflow(int idx)
  81 {
  82     SSL_CTX *cctx = NULL, *sctx = NULL;
  83     SSL *clientssl = NULL, *serverssl = NULL;
  84     int testresult = 0;
  85     size_t len = 0;
  86     size_t written;
  87     int overf_expected;
  88     unsigned char buf;
  89     BIO *serverbio;
  90     int recversion;
  91
  92 #ifdef OPENSSL_NO_TLS1_2
  93     if (idx == TEST_ENCRYPTED_OVERFLOW_TLS1_2_OK
  94             || idx == TEST_ENCRYPTED_OVERFLOW_TLS1_2_NOT_OK)
  95         return 1;
  96 #endif
  97 #if defined(OPENSSL_NO_TLS1_3) \
  98     || (defined(OPENSSL_NO_EC) && defined(OPENSSL_NO_DH))
  99     if (idx == TEST_ENCRYPTED_OVERFLOW_TLS1_3_OK
 100             || idx == TEST_ENCRYPTED_OVERFLOW_TLS1_3_NOT_OK)
 101         return 1;
 102 #endif
 103
 104     ERR_clear_error();
 105
 106     if (!TEST_true(create_ssl_ctx_pair(NULL, TLS_server_method(),
 107                                        TLS_client_method(),
 108                                        TLS1_VERSION, 0,
 109                                        &sctx, &cctx, cert, privkey)))
 110         goto end;
 111
 112     if (idx == TEST_ENCRYPTED_OVERFLOW_TLS1_2_OK
 113             || idx == TEST_ENCRYPTED_OVERFLOW_TLS1_2_NOT_OK) {
 114         len = SSL3_RT_MAX_ENCRYPTED_LENGTH;
 115 #ifndef OPENSSL_NO_COMP
 116         len -= SSL3_RT_MAX_COMPRESSED_OVERHEAD;
 117 #endif
 118         SSL_CTX_set_max_proto_version(sctx, TLS1_2_VERSION);
 119     } else if (idx == TEST_ENCRYPTED_OVERFLOW_TLS1_3_OK
 120                || idx == TEST_ENCRYPTED_OVERFLOW_TLS1_3_NOT_OK) {
 121         len = SSL3_RT_MAX_TLS13_ENCRYPTED_LENGTH;
 122     }
 123
 124     if (!TEST_true(create_ssl_objects(sctx, cctx, &serverssl, &clientssl,
 125                                       NULL, NULL)))
 126         goto end;
 127
 128     serverbio = SSL_get_rbio(serverssl);
 129
 130     if (idx == TEST_PLAINTEXT_OVERFLOW_OK
 131             || idx == TEST_PLAINTEXT_OVERFLOW_NOT_OK) {
 132         len = SSL3_RT_MAX_PLAIN_LENGTH;
 133
 134         if (idx == TEST_PLAINTEXT_OVERFLOW_NOT_OK)
 135             len++;
 136
 137         if (!TEST_true(write_record(serverbio, len,
 138                                     SSL3_RT_HANDSHAKE, TLS1_VERSION)))
 139             goto end;
 140
 141         if (!TEST_int_le(SSL_accept(serverssl), 0))
 142             goto end;
 143
 144         overf_expected = (idx == TEST_PLAINTEXT_OVERFLOW_OK) ? 0 : 1;
 145         if (!TEST_int_eq(fail_due_to_record_overflow(0), overf_expected))
 146             goto end;
 147
 148         goto success;
 149     }
 150
 151     if (!TEST_true(create_ssl_connection(serverssl, clientssl,
 152                                          SSL_ERROR_NONE)))
 153         goto end;
 154
 155     if (idx == TEST_ENCRYPTED_OVERFLOW_TLS1_2_NOT_OK
 156             || idx == TEST_ENCRYPTED_OVERFLOW_TLS1_3_NOT_OK) {
 157         overf_expected = 1;
 158         len++;
 159     } else {
 160         overf_expected = 0;
 161     }
 162
 163     recversion = TLS1_2_VERSION;
 164
 165     if (!TEST_true(write_record(serverbio, len, SSL3_RT_APPLICATION_DATA,
 166                                 recversion)))
 167         goto end;
 168
 169     if (!TEST_false(SSL_read_ex(serverssl, &buf, sizeof(buf), &written)))
 170         goto end;
 171
 172     if (!TEST_int_eq(fail_due_to_record_overflow(1), overf_expected))
 173         goto end;
 174
 175  success:
 176     testresult = 1;
 177
 178  end:
 179     SSL_free(serverssl);
 180     SSL_free(clientssl);
 181     SSL_CTX_free(sctx);
 182     SSL_CTX_free(cctx);
 183     return testresult;
 184 }
 185
 186 OPT_TEST_DECLARE_USAGE("certfile privkeyfile\n")
 187
 188 int setup_tests(void)
 189 {
 190     if (!test_skip_common_options()) {
 191         TEST_error("Error parsing test options\n");
 192         return 0;
 193     }
 194
 195     if (!TEST_ptr(cert = test_get_argument(0))
 196             || !TEST_ptr(privkey = test_get_argument(1)))
 197         return 0;
 198
 199     ADD_ALL_TESTS(test_record_overflow, TOTAL_RECORD_OVERFLOW_TESTS);
 200     return 1;
 201 }
 202
 203 void cleanup_tests(void)
 204 {
 205     bio_s_mempacket_test_free();
 206 }