123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752 |
- /*
- * Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved.
- * Copyright (c) 2019, Oracle and/or its affiliates. All rights reserved.
- *
- * Licensed under the Apache License 2.0 (the "License"). You may not use
- * this file except in compliance with the License. You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
- #include <string.h>
- #include <stdio.h>
- #include <stdarg.h>
- #include <openssl/err.h>
- #include "internal/propertyerr.h"
- #include "internal/property.h"
- #include "crypto/ctype.h"
- #include "internal/nelem.h"
- #include "property_local.h"
- #include "e_os.h"
- typedef enum {
- PROPERTY_TYPE_STRING, PROPERTY_TYPE_NUMBER,
- PROPERTY_TYPE_VALUE_UNDEFINED
- } PROPERTY_TYPE;
- typedef enum {
- PROPERTY_OPER_EQ, PROPERTY_OPER_NE, PROPERTY_OVERRIDE
- } PROPERTY_OPER;
- typedef struct {
- OSSL_PROPERTY_IDX name_idx;
- PROPERTY_TYPE type;
- PROPERTY_OPER oper;
- unsigned int optional : 1;
- union {
- int64_t int_val; /* Signed integer */
- OSSL_PROPERTY_IDX str_val; /* String */
- } v;
- } PROPERTY_DEFINITION;
- struct ossl_property_list_st {
- int n;
- unsigned int has_optional : 1;
- PROPERTY_DEFINITION properties[1];
- };
- static OSSL_PROPERTY_IDX ossl_property_true, ossl_property_false;
- DEFINE_STACK_OF(PROPERTY_DEFINITION)
- static const char *skip_space(const char *s)
- {
- while (ossl_isspace(*s))
- s++;
- return s;
- }
- static int match_ch(const char *t[], char m)
- {
- const char *s = *t;
- if (*s == m) {
- *t = skip_space(s + 1);
- return 1;
- }
- return 0;
- }
- #define MATCH(s, m) match(s, m, sizeof(m) - 1)
- static int match(const char *t[], const char m[], size_t m_len)
- {
- const char *s = *t;
- if (strncasecmp(s, m, m_len) == 0) {
- *t = skip_space(s + m_len);
- return 1;
- }
- return 0;
- }
- static int parse_name(OSSL_LIB_CTX *ctx, const char *t[], int create,
- OSSL_PROPERTY_IDX *idx)
- {
- char name[100];
- int err = 0;
- size_t i = 0;
- const char *s = *t;
- int user_name = 0;
- for (;;) {
- if (!ossl_isalpha(*s)) {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NOT_AN_IDENTIFIER,
- "HERE-->%s", *t);
- return 0;
- }
- do {
- if (i < sizeof(name) - 1)
- name[i++] = ossl_tolower(*s);
- else
- err = 1;
- } while (*++s == '_' || ossl_isalnum(*s));
- if (*s != '.')
- break;
- user_name = 1;
- if (i < sizeof(name) - 1)
- name[i++] = *s;
- else
- err = 1;
- s++;
- }
- name[i] = '\0';
- if (err) {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NAME_TOO_LONG, "HERE-->%s", *t);
- return 0;
- }
- *t = skip_space(s);
- *idx = ossl_property_name(ctx, name, user_name && create);
- return 1;
- }
- static int parse_number(const char *t[], PROPERTY_DEFINITION *res)
- {
- const char *s = *t;
- int64_t v = 0;
- if (!ossl_isdigit(*s))
- return 0;
- do {
- v = v * 10 + (*s++ - '0');
- } while (ossl_isdigit(*s));
- if (!ossl_isspace(*s) && *s != '\0' && *s != ',') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NOT_A_DECIMAL_DIGIT,
- "HERE-->%s", *t);
- return 0;
- }
- *t = skip_space(s);
- res->type = PROPERTY_TYPE_NUMBER;
- res->v.int_val = v;
- return 1;
- }
- static int parse_hex(const char *t[], PROPERTY_DEFINITION *res)
- {
- const char *s = *t;
- int64_t v = 0;
- if (!ossl_isxdigit(*s))
- return 0;
- do {
- v <<= 4;
- if (ossl_isdigit(*s))
- v += *s - '0';
- else
- v += ossl_tolower(*s) - 'a';
- } while (ossl_isxdigit(*++s));
- if (!ossl_isspace(*s) && *s != '\0' && *s != ',') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NOT_AN_HEXADECIMAL_DIGIT,
- "HERE-->%s", *t);
- return 0;
- }
- *t = skip_space(s);
- res->type = PROPERTY_TYPE_NUMBER;
- res->v.int_val = v;
- return 1;
- }
- static int parse_oct(const char *t[], PROPERTY_DEFINITION *res)
- {
- const char *s = *t;
- int64_t v = 0;
- if (*s == '9' || *s == '8' || !ossl_isdigit(*s))
- return 0;
- do {
- v = (v << 3) + (*s - '0');
- } while (ossl_isdigit(*++s) && *s != '9' && *s != '8');
- if (!ossl_isspace(*s) && *s != '\0' && *s != ',') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NOT_AN_OCTAL_DIGIT,
- "HERE-->%s", *t);
- return 0;
- }
- *t = skip_space(s);
- res->type = PROPERTY_TYPE_NUMBER;
- res->v.int_val = v;
- return 1;
- }
- static int parse_string(OSSL_LIB_CTX *ctx, const char *t[], char delim,
- PROPERTY_DEFINITION *res, const int create)
- {
- char v[1000];
- const char *s = *t;
- size_t i = 0;
- int err = 0;
- while (*s != '\0' && *s != delim) {
- if (i < sizeof(v) - 1)
- v[i++] = *s;
- else
- err = 1;
- s++;
- }
- if (*s == '\0') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NO_MATCHING_STRING_DELIMITER,
- "HERE-->%c%s", delim, *t);
- return 0;
- }
- v[i] = '\0';
- if (err) {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_STRING_TOO_LONG, "HERE-->%s", *t);
- } else {
- res->v.str_val = ossl_property_value(ctx, v, create);
- }
- *t = skip_space(s + 1);
- res->type = PROPERTY_TYPE_STRING;
- return !err;
- }
- static int parse_unquoted(OSSL_LIB_CTX *ctx, const char *t[],
- PROPERTY_DEFINITION *res, const int create)
- {
- char v[1000];
- const char *s = *t;
- size_t i = 0;
- int err = 0;
- if (*s == '\0' || *s == ',')
- return 0;
- while (ossl_isprint(*s) && !ossl_isspace(*s) && *s != ',') {
- if (i < sizeof(v) - 1)
- v[i++] = ossl_tolower(*s);
- else
- err = 1;
- s++;
- }
- if (!ossl_isspace(*s) && *s != '\0' && *s != ',') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NOT_AN_ASCII_CHARACTER,
- "HERE-->%s", s);
- return 0;
- }
- v[i] = 0;
- if (err) {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_STRING_TOO_LONG, "HERE-->%s", *t);
- } else {
- res->v.str_val = ossl_property_value(ctx, v, create);
- }
- *t = skip_space(s);
- res->type = PROPERTY_TYPE_STRING;
- return !err;
- }
- static int parse_value(OSSL_LIB_CTX *ctx, const char *t[],
- PROPERTY_DEFINITION *res, int create)
- {
- const char *s = *t;
- int r = 0;
- if (*s == '"' || *s == '\'') {
- s++;
- r = parse_string(ctx, &s, s[-1], res, create);
- } else if (*s == '+') {
- s++;
- r = parse_number(&s, res);
- } else if (*s == '-') {
- s++;
- r = parse_number(&s, res);
- res->v.int_val = -res->v.int_val;
- } else if (*s == '0' && s[1] == 'x') {
- s += 2;
- r = parse_hex(&s, res);
- } else if (*s == '0' && ossl_isdigit(s[1])) {
- s++;
- r = parse_oct(&s, res);
- } else if (ossl_isdigit(*s)) {
- return parse_number(t, res);
- } else if (ossl_isalpha(*s))
- return parse_unquoted(ctx, t, res, create);
- if (r)
- *t = s;
- return r;
- }
- static int pd_compare(const PROPERTY_DEFINITION *const *p1,
- const PROPERTY_DEFINITION *const *p2)
- {
- const PROPERTY_DEFINITION *pd1 = *p1;
- const PROPERTY_DEFINITION *pd2 = *p2;
- if (pd1->name_idx < pd2->name_idx)
- return -1;
- if (pd1->name_idx > pd2->name_idx)
- return 1;
- return 0;
- }
- static void pd_free(PROPERTY_DEFINITION *pd)
- {
- OPENSSL_free(pd);
- }
- /*
- * Convert a stack of property definitions and queries into a fixed array.
- * The items are sorted for efficient query. The stack is not freed.
- */
- static OSSL_PROPERTY_LIST *stack_to_property_list(STACK_OF(PROPERTY_DEFINITION)
- *sk)
- {
- const int n = sk_PROPERTY_DEFINITION_num(sk);
- OSSL_PROPERTY_LIST *r;
- int i;
- r = OPENSSL_malloc(sizeof(*r)
- + (n <= 0 ? 0 : n - 1) * sizeof(r->properties[0]));
- if (r != NULL) {
- sk_PROPERTY_DEFINITION_sort(sk);
- r->has_optional = 0;
- for (i = 0; i < n; i++) {
- r->properties[i] = *sk_PROPERTY_DEFINITION_value(sk, i);
- r->has_optional |= r->properties[i].optional;
- }
- r->n = n;
- }
- return r;
- }
- OSSL_PROPERTY_LIST *ossl_parse_property(OSSL_LIB_CTX *ctx, const char *defn)
- {
- PROPERTY_DEFINITION *prop = NULL;
- OSSL_PROPERTY_LIST *res = NULL;
- STACK_OF(PROPERTY_DEFINITION) *sk;
- const char *s = defn;
- int done;
- if (s == NULL || (sk = sk_PROPERTY_DEFINITION_new(&pd_compare)) == NULL)
- return NULL;
- s = skip_space(s);
- done = *s == '\0';
- while (!done) {
- const char *start = s;
- prop = OPENSSL_malloc(sizeof(*prop));
- if (prop == NULL)
- goto err;
- memset(&prop->v, 0, sizeof(prop->v));
- prop->optional = 0;
- if (!parse_name(ctx, &s, 1, &prop->name_idx))
- goto err;
- prop->oper = PROPERTY_OPER_EQ;
- if (prop->name_idx == 0) {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_PARSE_FAILED,
- "Unknown name HERE-->%s", start);
- goto err;
- }
- if (match_ch(&s, '=')) {
- if (!parse_value(ctx, &s, prop, 1)) {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_NO_VALUE,
- "HERE-->%s", start);
- goto err;
- }
- } else {
- /* A name alone means a true Boolean */
- prop->type = PROPERTY_TYPE_STRING;
- prop->v.str_val = ossl_property_true;
- }
- if (!sk_PROPERTY_DEFINITION_push(sk, prop))
- goto err;
- prop = NULL;
- done = !match_ch(&s, ',');
- }
- if (*s != '\0') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_TRAILING_CHARACTERS,
- "HERE-->%s", s);
- goto err;
- }
- res = stack_to_property_list(sk);
- err:
- OPENSSL_free(prop);
- sk_PROPERTY_DEFINITION_pop_free(sk, &pd_free);
- return res;
- }
- OSSL_PROPERTY_LIST *ossl_parse_query(OSSL_LIB_CTX *ctx, const char *s,
- int create_values)
- {
- STACK_OF(PROPERTY_DEFINITION) *sk;
- OSSL_PROPERTY_LIST *res = NULL;
- PROPERTY_DEFINITION *prop = NULL;
- int done;
- if (s == NULL || (sk = sk_PROPERTY_DEFINITION_new(&pd_compare)) == NULL)
- return NULL;
- s = skip_space(s);
- done = *s == '\0';
- while (!done) {
- prop = OPENSSL_malloc(sizeof(*prop));
- if (prop == NULL)
- goto err;
- memset(&prop->v, 0, sizeof(prop->v));
- if (match_ch(&s, '-')) {
- prop->oper = PROPERTY_OVERRIDE;
- prop->optional = 0;
- if (!parse_name(ctx, &s, 1, &prop->name_idx))
- goto err;
- goto skip_value;
- }
- prop->optional = match_ch(&s, '?');
- if (!parse_name(ctx, &s, 1, &prop->name_idx))
- goto err;
- if (match_ch(&s, '=')) {
- prop->oper = PROPERTY_OPER_EQ;
- } else if (MATCH(&s, "!=")) {
- prop->oper = PROPERTY_OPER_NE;
- } else {
- /* A name alone is a Boolean comparison for true */
- prop->oper = PROPERTY_OPER_EQ;
- prop->type = PROPERTY_TYPE_STRING;
- prop->v.str_val = ossl_property_true;
- goto skip_value;
- }
- if (!parse_value(ctx, &s, prop, create_values))
- prop->type = PROPERTY_TYPE_VALUE_UNDEFINED;
- skip_value:
- if (!sk_PROPERTY_DEFINITION_push(sk, prop))
- goto err;
- prop = NULL;
- done = !match_ch(&s, ',');
- }
- if (*s != '\0') {
- ERR_raise_data(ERR_LIB_PROP, PROP_R_TRAILING_CHARACTERS,
- "HERE-->%s", s);
- goto err;
- }
- res = stack_to_property_list(sk);
- err:
- OPENSSL_free(prop);
- sk_PROPERTY_DEFINITION_pop_free(sk, &pd_free);
- return res;
- }
- /* Does a property query have any optional clauses */
- int ossl_property_has_optional(const OSSL_PROPERTY_LIST *query)
- {
- return query->has_optional ? 1 : 0;
- }
- int ossl_property_is_enabled(OSSL_LIB_CTX *ctx, const char *property_name,
- const OSSL_PROPERTY_LIST *prop_list)
- {
- int i;
- OSSL_PROPERTY_IDX name_id;
- const PROPERTY_DEFINITION *prop = NULL;
- if (prop_list == NULL)
- return 0;
- if (!parse_name(ctx, &property_name, 0, &name_id))
- return 0;
- prop = prop_list->properties;
- for (i = 0; i < prop_list->n; ++i) {
- if (prop[i].name_idx == name_id) {
- /* Do a separate check for override as it does not set type */
- if (prop[i].optional || prop[i].oper == PROPERTY_OVERRIDE)
- return 0;
- return (prop[i].type == PROPERTY_TYPE_STRING
- && ((prop[i].oper == PROPERTY_OPER_EQ
- && prop[i].v.str_val == ossl_property_true)
- || (prop[i].oper == PROPERTY_OPER_NE
- && prop[i].v.str_val != ossl_property_true)));
- }
- }
- return 0;
- }
- /*
- * Compare a query against a definition.
- * Return the number of clauses matched or -1 if a mandatory clause is false.
- */
- int ossl_property_match_count(const OSSL_PROPERTY_LIST *query,
- const OSSL_PROPERTY_LIST *defn)
- {
- const PROPERTY_DEFINITION *const q = query->properties;
- const PROPERTY_DEFINITION *const d = defn->properties;
- int i = 0, j = 0, matches = 0;
- PROPERTY_OPER oper;
- while (i < query->n) {
- if ((oper = q[i].oper) == PROPERTY_OVERRIDE) {
- i++;
- continue;
- }
- if (j < defn->n) {
- if (q[i].name_idx > d[j].name_idx) { /* skip defn, not in query */
- j++;
- continue;
- }
- if (q[i].name_idx == d[j].name_idx) { /* both in defn and query */
- const int eq = q[i].type == d[j].type
- && memcmp(&q[i].v, &d[j].v, sizeof(q[i].v)) == 0;
- if ((eq && oper == PROPERTY_OPER_EQ)
- || (!eq && oper == PROPERTY_OPER_NE))
- matches++;
- else if (!q[i].optional)
- return -1;
- i++;
- j++;
- continue;
- }
- }
- /*
- * Handle the cases of a missing value and a query with no corresponding
- * definition. The former fails for any comparison except inequality,
- * the latter is treated as a comparison against the Boolean false.
- */
- if (q[i].type == PROPERTY_TYPE_VALUE_UNDEFINED) {
- if (oper == PROPERTY_OPER_NE)
- matches++;
- else if (!q[i].optional)
- return -1;
- } else if (q[i].type != PROPERTY_TYPE_STRING
- || (oper == PROPERTY_OPER_EQ
- && q[i].v.str_val != ossl_property_false)
- || (oper == PROPERTY_OPER_NE
- && q[i].v.str_val == ossl_property_false)) {
- if (!q[i].optional)
- return -1;
- } else {
- matches++;
- }
- i++;
- }
- return matches;
- }
- void ossl_property_free(OSSL_PROPERTY_LIST *p)
- {
- OPENSSL_free(p);
- }
- /*
- * Merge two property lists.
- * If there is a common name, the one from the first list is used.
- */
- OSSL_PROPERTY_LIST *ossl_property_merge(const OSSL_PROPERTY_LIST *a,
- const OSSL_PROPERTY_LIST *b)
- {
- const PROPERTY_DEFINITION *const ap = a->properties;
- const PROPERTY_DEFINITION *const bp = b->properties;
- const PROPERTY_DEFINITION *copy;
- OSSL_PROPERTY_LIST *r;
- int i, j, n;
- const int t = a->n + b->n;
- r = OPENSSL_malloc(sizeof(*r)
- + (t == 0 ? 0 : t - 1) * sizeof(r->properties[0]));
- if (r == NULL)
- return NULL;
- r->has_optional = 0;
- for (i = j = n = 0; i < a->n || j < b->n; n++) {
- if (i >= a->n) {
- copy = &bp[j++];
- } else if (j >= b->n) {
- copy = &ap[i++];
- } else if (ap[i].name_idx <= bp[j].name_idx) {
- if (ap[i].name_idx == bp[j].name_idx)
- j++;
- copy = &ap[i++];
- } else {
- copy = &bp[j++];
- }
- memcpy(r->properties + n, copy, sizeof(r->properties[0]));
- r->has_optional |= copy->optional;
- }
- r->n = n;
- if (n != t)
- r = OPENSSL_realloc(r, sizeof(*r) + (n - 1) * sizeof(r->properties[0]));
- return r;
- }
- int ossl_property_parse_init(OSSL_LIB_CTX *ctx)
- {
- static const char *const predefined_names[] = {
- "provider", /* Name of provider (default, legacy, fips) */
- "version", /* Version number of this provider */
- "fips", /* FIPS validated or FIPS supporting algorithm */
- "output", /* Output type for encoders */
- "input", /* Input type for decoders */
- "structure", /* Structure name for encoders and decoders */
- };
- size_t i;
- for (i = 0; i < OSSL_NELEM(predefined_names); i++)
- if (ossl_property_name(ctx, predefined_names[i], 1) == 0)
- goto err;
- /* Pre-populate the two Boolean values */
- if ((ossl_property_true = ossl_property_value(ctx, "yes", 1)) == 0
- || (ossl_property_false = ossl_property_value(ctx, "no", 1)) == 0)
- goto err;
- return 1;
- err:
- return 0;
- }
- static void put_char(char ch, char **buf, size_t *remain, size_t *needed)
- {
- if (*remain == 0) {
- ++*needed;
- return;
- }
- if(*remain == 1)
- **buf = '\0';
- else
- **buf = ch;
- ++*buf;
- ++*needed;
- --*remain;
- }
- static void put_str(const char *str, char **buf, size_t *remain, size_t *needed)
- {
- size_t olen, len;
- len = olen = strlen(str);
- *needed += len;
- if (*remain == 0)
- return;
- if(*remain < len + 1)
- len = *remain - 1;
- if(len > 0) {
- strncpy(*buf, str, len);
- *buf += len;
- *remain -= len;
- }
- if(len < olen && *remain == 1) {
- **buf = '\0';
- ++*buf;
- --*remain;
- }
- }
- static void put_num(int64_t val, char **buf, size_t *remain, size_t *needed)
- {
- int64_t tmpval = val;
- size_t len = 1;
- if (tmpval < 0) {
- len++;
- tmpval = -tmpval;
- }
- for (; tmpval > 9; len++, tmpval /= 10);
- *needed += len;
- if (*remain == 0)
- return;
- BIO_snprintf(*buf, *remain, "%lld", (long long int)val);
- if (*remain < len) {
- *buf += *remain;
- *remain = 0;
- } else {
- *buf += len;
- *remain -= len;
- }
- }
- size_t ossl_property_list_to_string(OSSL_LIB_CTX *ctx,
- const OSSL_PROPERTY_LIST *list, char *buf,
- size_t bufsize)
- {
- int i;
- const PROPERTY_DEFINITION *prop = NULL;
- size_t needed = 0;
- const char *val;
- if (list == NULL) {
- if (bufsize > 0)
- *buf = '\0';
- return 1;
- }
- if (list->n != 0)
- prop = &list->properties[list->n - 1];
- for (i = 0; i < list->n; i++, prop--) {
- /* Skip invalid names */
- if (prop->name_idx == 0)
- continue;
- if (needed > 0)
- put_char(',', &buf, &bufsize, &needed);
- if (prop->optional)
- put_char('?', &buf, &bufsize, &needed);
- else if (prop->oper == PROPERTY_OVERRIDE)
- put_char('-', &buf, &bufsize, &needed);
- val = ossl_property_name_str(ctx, prop->name_idx);
- if (val == NULL)
- return 0;
- put_str(val, &buf, &bufsize, &needed);
- switch (prop->oper) {
- case PROPERTY_OPER_NE:
- put_char('!', &buf, &bufsize, &needed);
- /* fall through */
- case PROPERTY_OPER_EQ:
- put_char('=', &buf, &bufsize, &needed);
- /* put value */
- switch (prop->type) {
- case PROPERTY_TYPE_STRING:
- val = ossl_property_value_str(ctx, prop->v.str_val);
- if (val == NULL)
- return 0;
- put_str(val, &buf, &bufsize, &needed);
- break;
- case PROPERTY_TYPE_NUMBER:
- put_num(prop->v.int_val, &buf, &bufsize, &needed);
- break;
- default:
- return 0;
- }
- break;
- default:
- /* do nothing */
- break;
- }
- }
- put_char('\0', &buf, &bufsize, &needed);
- return needed;
- }
|