328 lines
7.4 KiB
C
328 lines
7.4 KiB
C
/*-
|
|
* Copyright (c) 2005 Doug Rabson
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* $FreeBSD: src/lib/libgssapi/gss_utils.c,v 1.1 2005/12/29 14:40:20 dfr Exp $
|
|
*/
|
|
|
|
#include "mech_locl.h"
|
|
|
|
static OM_uint32
|
|
_gss_copy_oid(OM_uint32 *minor_status,
|
|
gss_const_OID from_oid,
|
|
gss_OID to_oid)
|
|
{
|
|
size_t len = from_oid->length;
|
|
|
|
*minor_status = 0;
|
|
to_oid->elements = malloc(len);
|
|
if (!to_oid->elements) {
|
|
to_oid->length = 0;
|
|
*minor_status = ENOMEM;
|
|
return GSS_S_FAILURE;
|
|
}
|
|
to_oid->length = (OM_uint32)len;
|
|
memcpy(to_oid->elements, from_oid->elements, len);
|
|
return (GSS_S_COMPLETE);
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_free_oid(OM_uint32 *minor_status, gss_OID oid)
|
|
{
|
|
*minor_status = 0;
|
|
if (oid->elements) {
|
|
free(oid->elements);
|
|
oid->elements = NULL;
|
|
oid->length = 0;
|
|
}
|
|
return (GSS_S_COMPLETE);
|
|
}
|
|
|
|
struct _gss_interned_oid {
|
|
HEIM_SLIST_ATOMIC_ENTRY(_gss_interned_oid) gio_link;
|
|
gss_OID_desc gio_oid;
|
|
};
|
|
|
|
static HEIM_SLIST_ATOMIC_HEAD(_gss_interned_oid_list, _gss_interned_oid) interned_oids =
|
|
HEIM_SLIST_HEAD_INITIALIZER(interned_oids);
|
|
|
|
extern gss_OID _gss_ot_internal[];
|
|
extern size_t _gss_ot_internal_count;
|
|
|
|
static OM_uint32
|
|
intern_oid_static(OM_uint32 *minor_status,
|
|
gss_const_OID from_oid,
|
|
gss_OID *to_oid)
|
|
{
|
|
size_t i;
|
|
|
|
/* statically allocated OIDs */
|
|
for (i = 0; i < _gss_ot_internal_count; i++) {
|
|
if (gss_oid_equal(_gss_ot_internal[i], from_oid)) {
|
|
*minor_status = 0;
|
|
*to_oid = _gss_ot_internal[i];
|
|
return GSS_S_COMPLETE;
|
|
}
|
|
}
|
|
|
|
return GSS_S_CONTINUE_NEEDED;
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_intern_oid(OM_uint32 *minor_status,
|
|
gss_const_OID from_oid,
|
|
gss_OID *to_oid)
|
|
{
|
|
OM_uint32 major_status;
|
|
struct _gss_interned_oid *iop;
|
|
|
|
major_status = intern_oid_static(minor_status, from_oid, to_oid);
|
|
if (major_status != GSS_S_CONTINUE_NEEDED)
|
|
return major_status;
|
|
|
|
HEIM_SLIST_ATOMIC_FOREACH(iop, &interned_oids, gio_link) {
|
|
if (gss_oid_equal(&iop->gio_oid, from_oid)) {
|
|
*minor_status = 0;
|
|
*to_oid = &iop->gio_oid;
|
|
return GSS_S_COMPLETE;
|
|
}
|
|
}
|
|
|
|
iop = malloc(sizeof(*iop));
|
|
if (iop == NULL) {
|
|
*minor_status = ENOMEM;
|
|
return GSS_S_FAILURE;
|
|
}
|
|
|
|
major_status = _gss_copy_oid(minor_status, from_oid, &iop->gio_oid);
|
|
if (GSS_ERROR(major_status)) {
|
|
free(iop);
|
|
return major_status;
|
|
}
|
|
|
|
HEIM_SLIST_ATOMIC_INSERT_HEAD(&interned_oids, iop, gio_link);
|
|
|
|
*minor_status = 0;
|
|
*to_oid = &iop->gio_oid;
|
|
|
|
return GSS_S_COMPLETE;
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_copy_buffer(OM_uint32 *minor_status,
|
|
const gss_buffer_t from_buf, gss_buffer_t to_buf)
|
|
{
|
|
size_t len = from_buf->length;
|
|
|
|
*minor_status = 0;
|
|
to_buf->value = malloc(len);
|
|
if (!to_buf->value) {
|
|
*minor_status = ENOMEM;
|
|
to_buf->length = 0;
|
|
return GSS_S_FAILURE;
|
|
}
|
|
to_buf->length = len;
|
|
memcpy(to_buf->value, from_buf->value, len);
|
|
return (GSS_S_COMPLETE);
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_secure_release_buffer(OM_uint32 *minor_status,
|
|
gss_buffer_t buffer)
|
|
{
|
|
if (buffer->value)
|
|
memset_s(buffer->value, buffer->length, 0, buffer->length);
|
|
|
|
return gss_release_buffer(minor_status, buffer);
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_secure_release_buffer_set(OM_uint32 *minor_status,
|
|
gss_buffer_set_t *buffer_set)
|
|
{
|
|
size_t i;
|
|
OM_uint32 minor;
|
|
|
|
*minor_status = 0;
|
|
|
|
if (*buffer_set == GSS_C_NO_BUFFER_SET)
|
|
return GSS_S_COMPLETE;
|
|
|
|
for (i = 0; i < (*buffer_set)->count; i++)
|
|
_gss_secure_release_buffer(&minor, &((*buffer_set)->elements[i]));
|
|
|
|
(*buffer_set)->count = 0;
|
|
|
|
return gss_release_buffer_set(minor_status, buffer_set);
|
|
}
|
|
|
|
void
|
|
_gss_mg_encode_le_uint32(uint32_t n, uint8_t *p)
|
|
{
|
|
p[0] = (n >> 0 ) & 0xFF;
|
|
p[1] = (n >> 8 ) & 0xFF;
|
|
p[2] = (n >> 16) & 0xFF;
|
|
p[3] = (n >> 24) & 0xFF;
|
|
}
|
|
|
|
void
|
|
_gss_mg_decode_le_uint32(const void *ptr, uint32_t *n)
|
|
{
|
|
const uint8_t *p = ptr;
|
|
*n = ((uint32_t)p[0] << 0)
|
|
| ((uint32_t)p[1] << 8)
|
|
| ((uint32_t)p[2] << 16)
|
|
| ((uint32_t)p[3] << 24);
|
|
}
|
|
|
|
void
|
|
_gss_mg_encode_be_uint32(uint32_t n, uint8_t *p)
|
|
{
|
|
p[0] = (n >> 24) & 0xFF;
|
|
p[1] = (n >> 16) & 0xFF;
|
|
p[2] = (n >> 8 ) & 0xFF;
|
|
p[3] = (n >> 0 ) & 0xFF;
|
|
}
|
|
|
|
void
|
|
_gss_mg_decode_be_uint32(const void *ptr, uint32_t *n)
|
|
{
|
|
const uint8_t *p = ptr;
|
|
*n = (p[0] << 24) | (p[1] << 16) | (p[2] << 8) | (p[3] << 0);
|
|
}
|
|
|
|
void
|
|
_gss_mg_encode_le_uint16(uint16_t n, uint8_t *p)
|
|
{
|
|
p[0] = (n >> 0 ) & 0xFF;
|
|
p[1] = (n >> 8 ) & 0xFF;
|
|
}
|
|
|
|
void
|
|
_gss_mg_decode_le_uint16(const void *ptr, uint16_t *n)
|
|
{
|
|
const uint8_t *p = ptr;
|
|
*n = (p[0] << 0) | (p[1] << 8);
|
|
}
|
|
|
|
void
|
|
_gss_mg_encode_be_uint16(uint16_t n, uint8_t *p)
|
|
{
|
|
p[0] = (n >> 8) & 0xFF;
|
|
p[1] = (n >> 0) & 0xFF;
|
|
}
|
|
|
|
void
|
|
_gss_mg_decode_be_uint16(const void *ptr, uint16_t *n)
|
|
{
|
|
const uint8_t *p = ptr;
|
|
*n = (p[0] << 24) | (p[1] << 16);
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_mg_ret_oid(OM_uint32 *minor,
|
|
krb5_storage *sp,
|
|
gss_OID *oidp)
|
|
{
|
|
krb5_data data;
|
|
gss_OID_desc oid;
|
|
OM_uint32 major;
|
|
|
|
*minor = 0;
|
|
*oidp = GSS_C_NO_OID;
|
|
|
|
*minor = krb5_ret_data(sp, &data);
|
|
if (*minor)
|
|
return GSS_S_FAILURE;
|
|
|
|
if (data.length) {
|
|
oid.length = data.length;
|
|
oid.elements = data.data;
|
|
|
|
major = _gss_intern_oid(minor, &oid, oidp);
|
|
} else
|
|
major = GSS_S_COMPLETE;
|
|
|
|
krb5_data_free(&data);
|
|
|
|
return major;
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_mg_store_oid(OM_uint32 *minor,
|
|
krb5_storage *sp,
|
|
gss_const_OID oid)
|
|
{
|
|
krb5_data data;
|
|
|
|
if (oid) {
|
|
data.length = oid->length;
|
|
data.data = oid->elements;
|
|
} else
|
|
krb5_data_zero(&data);
|
|
|
|
*minor = krb5_store_data(sp, data);
|
|
|
|
return *minor ? GSS_S_FAILURE : GSS_S_COMPLETE;
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_mg_ret_buffer(OM_uint32 *minor,
|
|
krb5_storage *sp,
|
|
gss_buffer_t buffer)
|
|
{
|
|
krb5_data data;
|
|
|
|
_mg_buffer_zero(buffer);
|
|
|
|
*minor = krb5_ret_data(sp, &data);
|
|
if (*minor == 0) {
|
|
if (data.length) {
|
|
buffer->length = data.length;
|
|
buffer->value = data.data;
|
|
} else
|
|
krb5_data_free(&data);
|
|
}
|
|
|
|
return *minor ? GSS_S_FAILURE : GSS_S_COMPLETE;
|
|
}
|
|
|
|
OM_uint32
|
|
_gss_mg_store_buffer(OM_uint32 *minor,
|
|
krb5_storage *sp,
|
|
gss_const_buffer_t buffer)
|
|
{
|
|
krb5_data data;
|
|
|
|
if (buffer) {
|
|
data.length = buffer->length;
|
|
data.data = buffer->value;
|
|
} else
|
|
krb5_data_zero(&data);
|
|
|
|
*minor = krb5_store_data(sp, data);
|
|
|
|
return *minor ? GSS_S_FAILURE : GSS_S_COMPLETE;
|
|
}
|