You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

272 lines
8.4 KiB

  1. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  2. * All rights reserved.
  3. *
  4. * This package is an SSL implementation written
  5. * by Eric Young (eay@cryptsoft.com).
  6. * The implementation was written so as to conform with Netscapes SSL.
  7. *
  8. * This library is free for commercial and non-commercial use as long as
  9. * the following conditions are aheared to. The following conditions
  10. * apply to all code found in this distribution, be it the RC4, RSA,
  11. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  12. * included with this distribution is covered by the same copyright terms
  13. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  14. *
  15. * Copyright remains Eric Young's, and as such any Copyright notices in
  16. * the code are not to be removed.
  17. * If this package is used in a product, Eric Young should be given attribution
  18. * as the author of the parts of the library used.
  19. * This can be in the form of a textual message at program startup or
  20. * in documentation (online or textual) provided with the package.
  21. *
  22. * Redistribution and use in source and binary forms, with or without
  23. * modification, are permitted provided that the following conditions
  24. * are met:
  25. * 1. Redistributions of source code must retain the copyright
  26. * notice, this list of conditions and the following disclaimer.
  27. * 2. Redistributions in binary form must reproduce the above copyright
  28. * notice, this list of conditions and the following disclaimer in the
  29. * documentation and/or other materials provided with the distribution.
  30. * 3. All advertising materials mentioning features or use of this software
  31. * must display the following acknowledgement:
  32. * "This product includes cryptographic software written by
  33. * Eric Young (eay@cryptsoft.com)"
  34. * The word 'cryptographic' can be left out if the rouines from the library
  35. * being used are not cryptographic related :-).
  36. * 4. If you include any Windows specific code (or a derivative thereof) from
  37. * the apps directory (application code) you must include an acknowledgement:
  38. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  39. *
  40. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  41. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  42. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  43. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  44. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  45. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  46. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  48. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  49. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  50. * SUCH DAMAGE.
  51. *
  52. * The licence and distribution terms for any publically available version or
  53. * derivative of this code cannot be changed. i.e. this code cannot simply be
  54. * copied and put under another distribution licence
  55. * [including the GNU Public Licence.] */
  56. #include <openssl/asn1.h>
  57. #include <limits.h>
  58. #include <string.h>
  59. #include <openssl/err.h>
  60. #include <openssl/mem.h>
  61. #include "../internal.h"
  62. int ASN1_BIT_STRING_set(ASN1_BIT_STRING *x, unsigned char *d, int len)
  63. {
  64. return M_ASN1_BIT_STRING_set(x, d, len);
  65. }
  66. int i2c_ASN1_BIT_STRING(ASN1_BIT_STRING *a, unsigned char **pp)
  67. {
  68. int ret, j, bits, len;
  69. unsigned char *p, *d;
  70. if (a == NULL)
  71. return (0);
  72. len = a->length;
  73. if (len > 0) {
  74. if (a->flags & ASN1_STRING_FLAG_BITS_LEFT) {
  75. bits = (int)a->flags & 0x07;
  76. } else {
  77. for (; len > 0; len--) {
  78. if (a->data[len - 1])
  79. break;
  80. }
  81. j = a->data[len - 1];
  82. if (j & 0x01)
  83. bits = 0;
  84. else if (j & 0x02)
  85. bits = 1;
  86. else if (j & 0x04)
  87. bits = 2;
  88. else if (j & 0x08)
  89. bits = 3;
  90. else if (j & 0x10)
  91. bits = 4;
  92. else if (j & 0x20)
  93. bits = 5;
  94. else if (j & 0x40)
  95. bits = 6;
  96. else if (j & 0x80)
  97. bits = 7;
  98. else
  99. bits = 0; /* should not happen */
  100. }
  101. } else
  102. bits = 0;
  103. ret = 1 + len;
  104. if (pp == NULL)
  105. return (ret);
  106. p = *pp;
  107. *(p++) = (unsigned char)bits;
  108. d = a->data;
  109. OPENSSL_memcpy(p, d, len);
  110. p += len;
  111. if (len > 0)
  112. p[-1] &= (0xff << bits);
  113. *pp = p;
  114. return (ret);
  115. }
  116. ASN1_BIT_STRING *c2i_ASN1_BIT_STRING(ASN1_BIT_STRING **a,
  117. const unsigned char **pp, long len)
  118. {
  119. ASN1_BIT_STRING *ret = NULL;
  120. const unsigned char *p;
  121. unsigned char *s;
  122. int padding;
  123. if (len < 1) {
  124. OPENSSL_PUT_ERROR(ASN1, ASN1_R_STRING_TOO_SHORT);
  125. goto err;
  126. }
  127. if (len > INT_MAX) {
  128. OPENSSL_PUT_ERROR(ASN1, ASN1_R_STRING_TOO_LONG);
  129. goto err;
  130. }
  131. if ((a == NULL) || ((*a) == NULL)) {
  132. if ((ret = M_ASN1_BIT_STRING_new()) == NULL)
  133. return (NULL);
  134. } else
  135. ret = (*a);
  136. p = *pp;
  137. padding = *(p++);
  138. if (padding > 7) {
  139. OPENSSL_PUT_ERROR(ASN1, ASN1_R_INVALID_BIT_STRING_BITS_LEFT);
  140. goto err;
  141. }
  142. /*
  143. * We do this to preserve the settings. If we modify the settings, via
  144. * the _set_bit function, we will recalculate on output
  145. */
  146. ret->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07); /* clear */
  147. ret->flags |= (ASN1_STRING_FLAG_BITS_LEFT | padding); /* set */
  148. if (len-- > 1) { /* using one because of the bits left byte */
  149. s = (unsigned char *)OPENSSL_malloc((int)len);
  150. if (s == NULL) {
  151. OPENSSL_PUT_ERROR(ASN1, ERR_R_MALLOC_FAILURE);
  152. goto err;
  153. }
  154. OPENSSL_memcpy(s, p, (int)len);
  155. s[len - 1] &= (0xff << padding);
  156. p += len;
  157. } else
  158. s = NULL;
  159. ret->length = (int)len;
  160. if (ret->data != NULL)
  161. OPENSSL_free(ret->data);
  162. ret->data = s;
  163. ret->type = V_ASN1_BIT_STRING;
  164. if (a != NULL)
  165. (*a) = ret;
  166. *pp = p;
  167. return (ret);
  168. err:
  169. if ((ret != NULL) && ((a == NULL) || (*a != ret)))
  170. M_ASN1_BIT_STRING_free(ret);
  171. return (NULL);
  172. }
  173. /*
  174. * These next 2 functions from Goetz Babin-Ebell <babinebell@trustcenter.de>
  175. */
  176. int ASN1_BIT_STRING_set_bit(ASN1_BIT_STRING *a, int n, int value)
  177. {
  178. int w, v, iv;
  179. unsigned char *c;
  180. w = n / 8;
  181. v = 1 << (7 - (n & 0x07));
  182. iv = ~v;
  183. if (!value)
  184. v = 0;
  185. if (a == NULL)
  186. return 0;
  187. a->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07); /* clear, set on write */
  188. if ((a->length < (w + 1)) || (a->data == NULL)) {
  189. if (!value)
  190. return (1); /* Don't need to set */
  191. if (a->data == NULL)
  192. c = (unsigned char *)OPENSSL_malloc(w + 1);
  193. else
  194. c = (unsigned char *)OPENSSL_realloc(a->data, w + 1);
  195. if (c == NULL) {
  196. OPENSSL_PUT_ERROR(ASN1, ERR_R_MALLOC_FAILURE);
  197. return 0;
  198. }
  199. if (w + 1 - a->length > 0)
  200. OPENSSL_memset(c + a->length, 0, w + 1 - a->length);
  201. a->data = c;
  202. a->length = w + 1;
  203. }
  204. a->data[w] = ((a->data[w]) & iv) | v;
  205. while ((a->length > 0) && (a->data[a->length - 1] == 0))
  206. a->length--;
  207. return (1);
  208. }
  209. int ASN1_BIT_STRING_get_bit(ASN1_BIT_STRING *a, int n)
  210. {
  211. int w, v;
  212. w = n / 8;
  213. v = 1 << (7 - (n & 0x07));
  214. if ((a == NULL) || (a->length < (w + 1)) || (a->data == NULL))
  215. return (0);
  216. return ((a->data[w] & v) != 0);
  217. }
  218. /*
  219. * Checks if the given bit string contains only bits specified by
  220. * the flags vector. Returns 0 if there is at least one bit set in 'a'
  221. * which is not specified in 'flags', 1 otherwise.
  222. * 'len' is the length of 'flags'.
  223. */
  224. int ASN1_BIT_STRING_check(ASN1_BIT_STRING *a,
  225. unsigned char *flags, int flags_len)
  226. {
  227. int i, ok;
  228. /* Check if there is one bit set at all. */
  229. if (!a || !a->data)
  230. return 1;
  231. /*
  232. * Check each byte of the internal representation of the bit string.
  233. */
  234. ok = 1;
  235. for (i = 0; i < a->length && ok; ++i) {
  236. unsigned char mask = i < flags_len ? ~flags[i] : 0xff;
  237. /* We are done if there is an unneeded bit set. */
  238. ok = (a->data[i] & mask) == 0;
  239. }
  240. return ok;
  241. }