version 1.124, 2009/08/07 14:04:25
|
version 1.125, 2009/08/07 17:15:26
|
Line 1
|
Line 1
|
/* decode.c - ber input decoding routines */ |
/* decode.c - ber input decoding routines */ |
/* $OpenLDAP: pkg/ldap/libraries/liblber/decode.c,v 1.123 2009/08/04 19:11:38 hallvard Exp $ */ |
/* $OpenLDAP: pkg/ldap/libraries/liblber/decode.c,v 1.124 2009/08/07 14:04:25 hallvard Exp $ */ |
/* This work is part of OpenLDAP Software <http://www.openldap.org/>. |
/* This work is part of OpenLDAP Software <http://www.openldap.org/>. |
* |
* |
* Copyright 1998-2009 The OpenLDAP Foundation. |
* Copyright 1998-2009 The OpenLDAP Foundation. |
Line 86 ber_decode_oid( BerValue *in, BerValue *
|
Line 86 ber_decode_oid( BerValue *in, BerValue *
|
return 0; |
return 0; |
} |
} |
|
|
/* return the tag - LBER_DEFAULT returned means trouble */ |
/* Return tag, with *bv = rest of element (starting at length octets) */ |
ber_tag_t |
static ber_tag_t |
ber_get_tag( BerElement *ber ) |
ber_tag_and_rest( const BerElement *ber, struct berval *bv ) |
{ |
{ |
unsigned char xbyte; |
|
ber_tag_t tag; |
ber_tag_t tag; |
|
ptrdiff_t rest; |
|
unsigned char *ptr; |
|
|
assert( ber != NULL ); |
assert( ber != NULL ); |
assert( LBER_VALID( ber ) ); |
assert( LBER_VALID( ber ) ); |
|
|
if ( ber_pvt_ber_remaining( ber ) < 1 ) { |
ptr = (unsigned char *) ber->ber_ptr; |
return LBER_DEFAULT; |
rest = (unsigned char *) ber->ber_end - ptr; |
|
if ( rest <= 0 ) { |
|
goto fail; |
} |
} |
|
|
if ( ber->ber_ptr == ber->ber_buf ) { |
tag = ber->ber_tag; |
tag = *(unsigned char *)ber->ber_ptr; |
if ( (char *) ptr == ber->ber_buf ) { |
} else { |
tag = *ptr; |
tag = ber->ber_tag; |
|
} |
} |
ber->ber_ptr++; |
ptr++; |
|
rest--; |
if ( (tag & LBER_BIG_TAG_MASK) != LBER_BIG_TAG_MASK ) { |
if ( (tag & LBER_BIG_TAG_MASK) != LBER_BIG_TAG_MASK ) { |
return tag; |
goto done; |
} |
} |
|
|
do { |
do { |
if ( ber_read( ber, (char *) &xbyte, 1 ) != 1 ) { |
if ( rest <= 0 ) { |
break; |
break; |
} |
} |
|
|
tag <<= 8; |
tag <<= 8; |
tag |= 0x00ffUL & (ber_tag_t) xbyte; |
tag |= *ptr++ & 0xffU; |
|
rest--; |
|
|
if ( ! (xbyte & LBER_MORE_TAG_MASK) ) { |
if ( ! (tag & LBER_MORE_TAG_MASK) ) { |
return tag; |
goto done; |
} |
} |
} while ( tag <= (ber_tag_t)-1 / 256 ); |
} while ( tag <= (ber_tag_t)-1 / 256 ); |
|
|
return LBER_DEFAULT; /* error or tag too big */ |
fail: |
|
/* Error or unsupported tag size */ |
|
tag = LBER_DEFAULT; |
|
|
|
done: |
|
bv->bv_len = rest; |
|
bv->bv_val = (char *) ptr; |
|
return tag; |
} |
} |
|
|
|
/* Return the tag - LBER_DEFAULT returned means trouble */ |
ber_tag_t |
ber_tag_t |
ber_skip_tag( BerElement *ber, ber_len_t *lenp ) |
ber_get_tag( BerElement *ber ) |
|
{ |
|
struct berval bv; |
|
ber_tag_t tag = ber_tag_and_rest( ber, &bv ); |
|
|
|
ber->ber_ptr = bv.bv_val; |
|
return tag; |
|
} |
|
|
|
/* Return next element's tag and point *bv at its contents in-place */ |
|
ber_tag_t |
|
ber_peek_element( const BerElement *ber, struct berval *bv ) |
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
ber_len_t len; |
ber_len_t len, rest; |
unsigned i, noctets; |
unsigned i; |
unsigned char lc; |
unsigned char *ptr; |
unsigned char netlen[sizeof(ber_len_t)]; |
|
|
|
assert( lenp != NULL ); |
assert( bv != NULL ); |
|
|
/* |
/* |
* Any ber element looks like this: tag length contents. |
* Any ber element looks like this: tag length contents. |
* Assuming everything's ok, we return the tag byte (we |
* Assuming everything's ok, we return the tag, and point |
* can assume a single byte), and return the length in lenp. |
* bv at the contents. |
* |
* |
* Assumptions: |
* Assumptions: |
* 1) definite lengths |
* 1) definite lengths |
* 2) primitive encodings used whenever possible |
* 2) primitive encodings used whenever possible |
*/ |
*/ |
|
|
*lenp = 0; |
len = 0; |
|
|
/* |
/* |
* First, we read the tag. |
* First, we read the tag. |
*/ |
*/ |
|
tag = ber_tag_and_rest( ber, bv ); |
|
|
if ( (tag = ber_get_tag( ber )) == LBER_DEFAULT ) { |
rest = bv->bv_len; |
return LBER_DEFAULT; |
ptr = (unsigned char *) bv->bv_val; |
|
if ( tag == LBER_DEFAULT || rest == 0 ) { |
|
goto fail; |
} |
} |
|
|
/* |
/* |
Line 166 ber_skip_tag( BerElement *ber, ber_len_t
|
Line 189 ber_skip_tag( BerElement *ber, ber_len_t
|
* Lengths that do not fit in a ber_len_t are not accepted. |
* Lengths that do not fit in a ber_len_t are not accepted. |
*/ |
*/ |
|
|
if ( ber_read( ber, (char *) &lc, 1 ) != 1 ) { |
len = *ptr++; |
return LBER_DEFAULT; |
rest--; |
} |
|
|
|
len = lc; |
|
if ( lc & 0x80U ) { |
|
noctets = (lc & 0x7fU); |
|
|
|
if ( noctets - 1U > sizeof(ber_len_t) - 1U ) { |
|
/* Indefinite-length or too long length */ |
|
return LBER_DEFAULT; |
|
} |
|
|
|
if( (unsigned) ber_read( ber, (char *) netlen, noctets ) != noctets ) { |
if ( len & 0x80U ) { |
return LBER_DEFAULT; |
len &= 0x7fU; |
|
if ( len - 1U > sizeof(ber_len_t) - 1U || rest < len ) { |
|
/* Indefinite-length/too long length/not enough data */ |
|
goto fail; |
} |
} |
|
|
len = netlen[0]; |
rest -= len; |
for( i = 1; i < noctets; i++ ) { |
i = len; |
|
for( len = *ptr++ & 0xffU; --i; len |= *ptr++ & 0xffU ) { |
len <<= 8; |
len <<= 8; |
len |= netlen[i]; |
|
} |
} |
|
|
} |
} |
*lenp = len; |
|
|
|
/* BER element should have enough data left */ |
/* BER element should have enough data left */ |
if( len > (ber_len_t) ber_pvt_ber_remaining( ber ) ) { |
if( len > rest ) { |
return LBER_DEFAULT; |
fail: |
|
tag = LBER_DEFAULT; |
|
} |
|
|
|
bv->bv_len = len; |
|
bv->bv_val = (char *) ptr; |
|
return tag; |
|
} |
|
|
|
/* Move past next element, point *bv at it in-place, and return its tag. |
|
* The caller may \0-terminate *bv, as next octet is saved in ber->ber_tag. |
|
* See ber_get_stringbv(ber, bv, LBER_BV_NOTERM) for an exported wrapper. |
|
*/ |
|
static ber_tag_t |
|
ber_skip_element( BerElement *ber, struct berval *bv ) |
|
{ |
|
ber_tag_t tag = ber_peek_element( ber, bv ); |
|
|
|
if ( tag != LBER_DEFAULT ) { |
|
ber->ber_ptr = bv->bv_val + bv->bv_len; |
|
ber->ber_tag = *(unsigned char *) ber->ber_ptr; |
} |
} |
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
|
|
return tag; |
return tag; |
} |
} |
Line 206 ber_peek_tag(
|
Line 239 ber_peek_tag(
|
BerElement *ber, |
BerElement *ber, |
ber_len_t *len ) |
ber_len_t *len ) |
{ |
{ |
/* |
struct berval bv; |
* This implementation assumes ber_skip_tag() only |
ber_tag_t tag = ber_peek_element( ber, &bv ); |
* modifies ber_ptr field of the BerElement. |
|
*/ |
|
|
|
char *save; |
*len = bv.bv_len; |
ber_tag_t tag, old; |
return tag; |
|
} |
|
|
|
ber_tag_t |
|
ber_skip_tag( BerElement *ber, ber_len_t *lenp ) |
|
{ |
|
struct berval bv; |
|
ber_tag_t tag = ber_peek_element( ber, &bv ); |
|
|
old = ber->ber_tag; |
ber->ber_ptr = bv.bv_val; |
save = ber->ber_ptr; |
ber->ber_tag = *(unsigned char *) ber->ber_ptr; |
tag = ber_skip_tag( ber, len ); |
|
ber->ber_ptr = save; |
|
ber->ber_tag = old; |
|
|
|
|
*lenp = bv.bv_len; |
return tag; |
return tag; |
} |
} |
|
|
Line 230 ber_get_int(
|
Line 266 ber_get_int(
|
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
ber_len_t len; |
ber_len_t len; |
unsigned char buf[sizeof(ber_int_t)]; |
struct berval bv; |
|
|
assert( num != NULL ); |
assert( num != NULL ); |
|
|
if ( (tag = ber_skip_tag( ber, &len )) == LBER_DEFAULT ) { |
tag = ber_skip_element( ber, &bv ); |
return LBER_DEFAULT; |
len = bv.bv_len; |
} |
if ( tag == LBER_DEFAULT || len > sizeof(ber_int_t) ) { |
|
|
if ( len > sizeof(ber_int_t) ) { |
|
return LBER_DEFAULT; |
|
} |
|
|
|
/* read into the low-order bytes of our buffer */ |
|
if ( (ber_len_t) ber_read( ber, (char *) buf, len ) != len ) { |
|
return LBER_DEFAULT; |
return LBER_DEFAULT; |
} |
} |
|
|
/* parse two's complement integer */ |
/* parse two's complement integer */ |
if( len ) { |
if( len ) { |
|
unsigned char *buf = (unsigned char *) bv.bv_val; |
ber_len_t i; |
ber_len_t i; |
ber_int_t netnum = buf[0] & 0xff; |
ber_int_t netnum = buf[0] & 0xff; |
|
|
/* sign extend */ |
/* sign extend */ |
netnum -= (netnum & 0x80) << 1; |
netnum = (netnum ^ 0x80) - 0x80; |
|
|
/* shift in the bytes */ |
/* shift in the bytes */ |
for( i = 1; i < len; i++ ) { |
for( i = 1; i < len; i++ ) { |
Line 266 ber_get_int(
|
Line 296 ber_get_int(
|
*num = 0; |
*num = 0; |
} |
} |
|
|
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
|
|
return tag; |
return tag; |
} |
} |
|
|
Line 285 ber_get_stringb(
|
Line 313 ber_get_stringb(
|
char *buf, |
char *buf, |
ber_len_t *len ) |
ber_len_t *len ) |
{ |
{ |
ber_len_t datalen; |
struct berval bv; |
ber_tag_t tag; |
ber_tag_t tag; |
|
|
if ( (tag = ber_skip_tag( ber, &datalen )) == LBER_DEFAULT ) { |
if ( (tag = ber_skip_element( ber, &bv )) == LBER_DEFAULT ) { |
return LBER_DEFAULT; |
return LBER_DEFAULT; |
} |
} |
|
|
/* must fit within allocated space with termination */ |
/* must fit within allocated space with termination */ |
if ( datalen >= *len ) { |
if ( bv.bv_len >= *len ) { |
return LBER_DEFAULT; |
return LBER_DEFAULT; |
} |
} |
|
|
if ( (ber_len_t) ber_read( ber, buf, datalen ) != datalen ) { |
memcpy( buf, bv.bv_val, bv.bv_len ); |
return LBER_DEFAULT; |
buf[bv.bv_len] = '\0'; |
} |
|
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
|
|
buf[datalen] = '\0'; |
*len = bv.bv_len; |
|
|
*len = datalen; |
|
return tag; |
return tag; |
} |
} |
|
|
Line 332 ber_get_stringbvl( BerElement *ber, bgbv
|
Line 356 ber_get_stringbvl( BerElement *ber, bgbv
|
{ |
{ |
int i = 0, n; |
int i = 0, n; |
ber_tag_t tag; |
ber_tag_t tag; |
ber_len_t len, tot_size = 0, siz = b->siz; |
ber_len_t tot_size = 0, siz = b->siz; |
char *last, *orig; |
char *last, *orig; |
struct berval bv, *bvp = NULL; |
struct berval bv, *bvp = NULL; |
union stringbvl_u { |
union stringbvl_u { |
Line 346 ber_get_stringbvl( BerElement *ber, bgbv
|
Line 370 ber_get_stringbvl( BerElement *ber, bgbv
|
orig = ber->ber_ptr; |
orig = ber->ber_ptr; |
tag = ber->ber_tag; |
tag = ber->ber_tag; |
|
|
if ( ber_first_element( ber, &len, &last ) != LBER_DEFAULT ) { |
if ( ber_first_element( ber, &bv.bv_len, &last ) != LBER_DEFAULT ) { |
for ( ; ber->ber_ptr < last; i++, tot_size += siz ) { |
for ( ; ber->ber_ptr < last; i++, tot_size += siz ) { |
if ( ber_skip_tag( ber, &len ) == LBER_DEFAULT ) break; |
if ( ber_skip_element( ber, &bv ) == LBER_DEFAULT ) |
ber->ber_ptr += len; |
break; |
ber->ber_tag = *(unsigned char *) ber->ber_ptr; |
|
} |
} |
} |
} |
|
|
Line 380 ber_get_stringbvl( BerElement *ber, bgbv
|
Line 403 ber_get_stringbvl( BerElement *ber, bgbv
|
case BvOff: |
case BvOff: |
res.bo = (char *) b->result + b->off; |
res.bo = (char *) b->result + b->off; |
((struct berval *) (res.bo + tot_size))->bv_val = NULL; |
((struct berval *) (res.bo + tot_size))->bv_val = NULL; |
|
tot_size = 0; |
break; |
break; |
} |
} |
ber->ber_ptr = orig; |
ber->ber_ptr = orig; |
ber->ber_tag = tag; |
ber->ber_tag = tag; |
ber_skip_tag( ber, &len ); |
ber_skip_tag( ber, &bv.bv_len ); |
|
|
tot_size = 0; |
|
n = 0; |
n = 0; |
do { |
do { |
tag = ber_next_element( ber, &len, last ); |
tag = ber_next_element( ber, &bv.bv_len, last ); |
if ( ber_get_stringbv( ber, &bv, b->alloc ) == LBER_DEFAULT ) { |
if ( ber_get_stringbv( ber, &bv, b->alloc ) == LBER_DEFAULT ) { |
goto nomem; |
goto nomem; |
} |
} |
Line 448 ber_tag_t
|
Line 471 ber_tag_t
|
ber_get_stringbv( BerElement *ber, struct berval *bv, int option ) |
ber_get_stringbv( BerElement *ber, struct berval *bv, int option ) |
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
|
char *data; |
|
|
assert( bv != NULL ); |
tag = ber_skip_element( ber, bv ); |
|
|
tag = ber_skip_tag( ber, &bv->bv_len ); |
|
if ( tag == LBER_DEFAULT ) { |
if ( tag == LBER_DEFAULT ) { |
bv->bv_val = NULL; |
bv->bv_val = NULL; |
return tag; |
return tag; |
} |
} |
|
|
|
data = bv->bv_val; |
if ( option & LBER_BV_ALLOC ) { |
if ( option & LBER_BV_ALLOC ) { |
bv->bv_val = (char *) ber_memalloc_x( bv->bv_len + 1, |
bv->bv_val = (char *) ber_memalloc_x( bv->bv_len + 1, |
ber->ber_memctx ); |
ber->ber_memctx ); |
Line 464 ber_get_stringbv( BerElement *ber, struc
|
Line 487 ber_get_stringbv( BerElement *ber, struc
|
return LBER_DEFAULT; |
return LBER_DEFAULT; |
} |
} |
|
|
if ( bv->bv_len > 0 && (ber_len_t) ber_read( ber, bv->bv_val, |
if ( bv->bv_len != 0 ) { |
bv->bv_len ) != bv->bv_len ) |
memcpy( bv->bv_val, data, bv->bv_len ); |
{ |
|
ber_memfree_x( bv->bv_val, ber->ber_memctx ); |
|
bv->bv_val = NULL; |
|
return LBER_DEFAULT; |
|
} |
} |
} else { |
data = bv->bv_val; |
bv->bv_val = ber->ber_ptr; |
|
ber->ber_ptr += bv->bv_len; |
|
} |
} |
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
if ( !( option & LBER_BV_NOTERM )) |
if ( !( option & LBER_BV_NOTERM )) |
bv->bv_val[bv->bv_len] = '\0'; |
data[bv->bv_len] = '\0'; |
|
|
return tag; |
return tag; |
} |
} |
Line 486 ber_tag_t
|
Line 502 ber_tag_t
|
ber_get_stringbv_null( BerElement *ber, struct berval *bv, int option ) |
ber_get_stringbv_null( BerElement *ber, struct berval *bv, int option ) |
{ |
{ |
ber_tag_t tag; |
ber_tag_t tag; |
|
char *data; |
|
|
assert( bv != NULL ); |
tag = ber_skip_element( ber, bv ); |
|
|
tag = ber_skip_tag( ber, &bv->bv_len ); |
|
if ( tag == LBER_DEFAULT || bv->bv_len == 0 ) { |
if ( tag == LBER_DEFAULT || bv->bv_len == 0 ) { |
bv->bv_val = NULL; |
bv->bv_val = NULL; |
return tag; |
return tag; |
} |
} |
|
|
|
data = bv->bv_val; |
if ( option & LBER_BV_ALLOC ) { |
if ( option & LBER_BV_ALLOC ) { |
bv->bv_val = (char *) ber_memalloc_x( bv->bv_len + 1, |
bv->bv_val = (char *) ber_memalloc_x( bv->bv_len + 1, |
ber->ber_memctx ); |
ber->ber_memctx ); |
Line 502 ber_get_stringbv_null( BerElement *ber,
|
Line 518 ber_get_stringbv_null( BerElement *ber,
|
return LBER_DEFAULT; |
return LBER_DEFAULT; |
} |
} |
|
|
if ( bv->bv_len > 0 && (ber_len_t) ber_read( ber, bv->bv_val, |
memcpy( bv->bv_val, data, bv->bv_len ); |
bv->bv_len ) != bv->bv_len ) |
data = bv->bv_val; |
{ |
|
ber_memfree_x( bv->bv_val, ber->ber_memctx ); |
|
bv->bv_val = NULL; |
|
return LBER_DEFAULT; |
|
} |
|
} else { |
|
bv->bv_val = ber->ber_ptr; |
|
ber->ber_ptr += bv->bv_len; |
|
} |
} |
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
if ( !( option & LBER_BV_NOTERM )) |
if ( !( option & LBER_BV_NOTERM )) |
bv->bv_val[bv->bv_len] = '\0'; |
data[bv->bv_len] = '\0'; |
|
|
return tag; |
return tag; |
} |
} |
Line 576 ber_get_bitstringa(
|
Line 583 ber_get_bitstringa(
|
char **buf, |
char **buf, |
ber_len_t *blen ) |
ber_len_t *blen ) |
{ |
{ |
ber_len_t datalen; |
|
ber_tag_t tag; |
ber_tag_t tag; |
|
struct berval data; |
unsigned char unusedbits; |
unsigned char unusedbits; |
|
|
assert( buf != NULL ); |
assert( buf != NULL ); |
assert( blen != NULL ); |
assert( blen != NULL ); |
|
|
if ( (tag = ber_skip_tag( ber, &datalen )) == LBER_DEFAULT ) { |
if ( (tag = ber_skip_element( ber, &data )) == LBER_DEFAULT ) { |
goto fail; |
goto fail; |
} |
} |
|
|
if ( --datalen > (ber_len_t)-1 / 8 ) { |
if ( --data.bv_len > (ber_len_t)-1 / 8 ) { |
goto fail; |
|
} |
|
if ( ber_read( ber, (char *)&unusedbits, 1 ) != 1 ) { |
|
goto fail; |
goto fail; |
} |
} |
|
unusedbits = *(unsigned char *) data.bv_val++; |
if ( unusedbits > 7 ) { |
if ( unusedbits > 7 ) { |
goto fail; |
goto fail; |
} |
} |
|
|
*buf = (char *) ber_memalloc_x( datalen, ber->ber_memctx ); |
*buf = (char *) ber_memalloc_x( data.bv_len, ber->ber_memctx ); |
if ( *buf == NULL ) { |
if ( *buf == NULL ) { |
return LBER_DEFAULT; |
return LBER_DEFAULT; |
} |
} |
|
memcpy( *buf, data.bv_val, data.bv_len ); |
|
|
if ( (ber_len_t) ber_read( ber, *buf, datalen ) != datalen ) { |
*blen = data.bv_len * 8 - unusedbits; |
ber_memfree_x( buf, ber->ber_memctx ); |
|
*buf = NULL; |
|
return LBER_DEFAULT; |
|
} |
|
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
|
|
*blen = datalen * 8 - unusedbits; |
|
return tag; |
return tag; |
|
|
fail: |
fail: |
Line 683 ber_scanf ( BerElement *ber,
|
Line 682 ber_scanf ( BerElement *ber,
|
va_list ap; |
va_list ap; |
LDAP_CONST char *fmt_reset; |
LDAP_CONST char *fmt_reset; |
char *s, **ss, ***sss; |
char *s, **ss, ***sss; |
struct berval *bval, **bvp, ***bvpp; |
struct berval data, *bval, **bvp, ***bvpp; |
ber_int_t *i; |
ber_int_t *i; |
ber_len_t *l; |
ber_len_t *l; |
ber_tag_t *t; |
ber_tag_t *t; |
Line 834 ber_scanf ( BerElement *ber,
|
Line 833 ber_scanf ( BerElement *ber,
|
} |
} |
|
|
case 'x': /* skip the next element - whatever it is */ |
case 'x': /* skip the next element - whatever it is */ |
if ( (rc = ber_skip_tag( ber, &len )) == LBER_DEFAULT ) |
rc = ber_skip_element( ber, &data ); |
break; |
|
ber->ber_ptr += len; |
|
ber->ber_tag = *(unsigned char *)ber->ber_ptr; |
|
break; |
break; |
|
|
case '{': /* begin sequence */ |
case '{': /* begin sequence */ |