/* Unix SMB/CIFS implementation. simple SPNEGO routines Copyright (C) Andrew Tridgell 2001 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. */ #include "includes.h" /* free an asn1 structure */ void asn1_free(ASN1_DATA *data) { struct nesting *nesting = data->nesting; while (nesting) { struct nesting *nnext = nesting->next; free(nesting); nesting = nnext; }; data->nesting = NULL; SAFE_FREE(data->data); } /* write to the ASN1 buffer, advancing the buffer pointer */ BOOL asn1_write(ASN1_DATA *data, const void *p, int len) { if (data->has_error) return False; if (data->length < data->ofs+len) { data->data = SMB_REALLOC_ARRAY(data->data, unsigned char, data->ofs+len); if (!data->data) { data->has_error = True; return False; } data->length = data->ofs+len; } memcpy(data->data + data->ofs, p, len); data->ofs += len; return True; } /* useful fn for writing a uint8 */ BOOL asn1_write_uint8(ASN1_DATA *data, uint8 v) { return asn1_write(data, &v, 1); } /* push a tag onto the asn1 data buffer. Used for nested structures */ BOOL asn1_push_tag(ASN1_DATA *data, uint8 tag) { struct nesting *nesting; asn1_write_uint8(data, tag); nesting = SMB_MALLOC_P(struct nesting); if (!nesting) { data->has_error = True; return False; } nesting->start = data->ofs; nesting->next = data->nesting; data->nesting = nesting; return asn1_write_uint8(data, 0xff); } /* pop a tag */ BOOL asn1_pop_tag(ASN1_DATA *data) { struct nesting *nesting; size_t len; if (data->has_error) { return False; } nesting = data->nesting; if (!nesting) { data->has_error = True; return False; } len = data->ofs - (nesting->start+1); /* yes, this is ugly. We don't know in advance how many bytes the length of a tag will take, so we assumed 1 byte. If we were wrong then we need to correct our mistake */ if (len > 0xFFFF) { data->data[nesting->start] = 0x83; if (!asn1_write_uint8(data, 0)) return False; if (!asn1_write_uint8(data, 0)) return False; if (!asn1_write_uint8(data, 0)) return False; memmove(data->data+nesting->start+4, data->data+nesting->start+1, len); data->data[nesting->start+1] = (len>>16) & 0xFF; data->data[nesting->start+2] = (len>>8) & 0xFF; data->data[nesting->start+3] = len&0xff; } else if (len > 255) { data->data[nesting->start] = 0x82; if (!asn1_write_uint8(data, 0)) return False; if (!asn1_write_uint8(data, 0)) return False; memmove(data->data+nesting->start+3, data->data+nesting->start+1, len); data->data[nesting->start+1] = len>>8; data->data[nesting->start+2] = len&0xff; } else if (len > 127) { data->data[nesting->start] = 0x81; if (!asn1_write_uint8(data, 0)) return False; memmove(data->data+nesting->start+2, data->data+nesting->start+1, len); data->data[nesting->start+1] = len; } else { data->data[nesting->start] = len; } data->nesting = nesting->next; free(nesting); return True; } /* write an integer */ BOOL asn1_write_Integer(ASN1_DATA *data, int i) { if (!asn1_push_tag(data, ASN1_INTEGER)) return False; do { asn1_write_uint8(data, i); i = i >> 8; } while (i); return asn1_pop_tag(data); } /* write an object ID to a ASN1 buffer */ BOOL asn1_write_OID(ASN1_DATA *data, const char *OID) { unsigned v, v2; const char *p = (const char *)OID; char *newp; if (!asn1_push_tag(data, ASN1_OID)) return False; v = strtol(p, &newp, 10); p = newp; v2 = strtol(p, &newp, 10); p = newp; if (!asn1_write_uint8(data, 40*v + v2)) return False; while (*p) { v = strtol(p, &newp, 10); p = newp; if (v >= (1<<28)) asn1_write_uint8(data, 0x80 | ((v>>28)&0xff)); if (v >= (1<<21)) asn1_write_uint8(data, 0x80 | ((v>>21)&0xff)); if (v >= (1<<14)) asn1_write_uint8(data, 0x80 | ((v>>14)&0xff)); if (v >= (1<<7)) asn1_write_uint8(data, 0x80 | ((v>>7)&0xff)); if (!asn1_write_uint8(data, v&0x7f)) return False; } return asn1_pop_tag(data); } /* write an octet string */ BOOL asn1_write_OctetString(ASN1_DATA *data, const void *p, size_t length) { asn1_push_tag(data, ASN1_OCTET_STRING); asn1_write(data, p, length); asn1_pop_tag(data); return !data->has_error; } /* write a general string */ BOOL asn1_write_GeneralString(ASN1_DATA *data, const char *s) { asn1_push_tag(data, ASN1_GENERAL_STRING); asn1_write(data, s, strlen(s)); asn1_pop_tag(data); return !data->has_error; } /* write a BOOLEAN */ BOOL asn1_write_BOOLEAN(ASN1_DATA *data, BOOL v) { asn1_write_uint8(data, ASN1_BOOLEAN); asn1_write_uint8(data, v); return !data->has_error; } /* write a BOOLEAN - hmm, I suspect this one is the correct one, and the above boolean is bogus. Need to check */ BOOL asn1_write_BOOLEAN2(ASN1_DATA *data, BOOL v) { asn1_push_tag(data, ASN1_BOOLEAN); asn1_write_uint8(data, v); asn1_pop_tag(data); return !data->has_error; } /* check a BOOLEAN */ BOOL asn1_check_BOOLEAN(ASN1_DATA *data, BOOL v) { uint8 b = 0; asn1_read_uint8(data, &b); if (b != ASN1_BOOLEAN) { data->has_error = True; return False; } asn1_read_uint8(data, &b); if (b != v) { data->has_error = True; return False; } return !data->has_error; } /* load a ASN1_DATA structure with a lump of data, ready to be parsed */ BOOL asn1_load(ASN1_DATA *data, DATA_BLOB blob) { ZERO_STRUCTP(data); data->data = (unsigned char *)memdup(blob.data, blob.length); if (!data->data) { data->has_error = True; return False; } data->length = blob.length; return True; } /* read from a ASN1 buffer, advancing the buffer pointer */ BOOL asn1_read(ASN1_DATA *data, void *p, int len) { if (data->has_error) return False; if (len < 0 || data->ofs + len < data->ofs || data->ofs + len < len) { data->has_error = True; return False; } if (data->ofs + len > data->length) { data->has_error = True; return False; } memcpy(p, data->data + data->ofs, len); data->ofs += len; return True; } /* read a uint8 from a ASN1 buffer */ BOOL asn1_read_uint8(ASN1_DATA *data, uint8 *v) { return asn1_read(data, v, 1); } /* start reading a nested asn1 structure */ BOOL asn1_start_tag(ASN1_DATA *data, uint8 tag) { uint8 b; struct nesting *nesting; if (!asn1_read_uint8(data, &b)) return False; if (b != tag) { data->has_error = True; return False; } nesting = SMB_MALLOC_P(struct nesting); if (!nesting) { data->has_error = True; return False; } if (!asn1_read_uint8(data, &b)) { SAFE_FREE(nesting); return False; } if (b & 0x80) { int n = b & 0x7f; if (!asn1_read_uint8(data, &b)) { SAFE_FREE(nesting); return False; } nesting->taglen = b; while (n > 1) { if (!asn1_read_uint8(data, &b)) { SAFE_FREE(nesting); return False; } nesting->taglen = (nesting->taglen << 8) | b; n--; } } else { nesting->taglen = b; } nesting->start = data->ofs; nesting->next = data->nesting; data->nesting = nesting; return !data->has_error; } /* stop reading a tag */ BOOL asn1_end_tag(ASN1_DATA *data) { struct nesting *nesting; /* make sure we read it all */ if (asn1_tag_remaining(data) != 0) { data->has_error = True; return False; } nesting = data->nesting; if (!nesting) { data->has_error = True; return False; } data->nesting = nesting->next; free(nesting); return True; } /* work out how many bytes are left in this nested tag */ int asn1_tag_remaining(ASN1_DATA *data) { if (data->has_error) return 0; if (!data->nesting) { data->has_error = True; return -1; } return data->nesting->taglen - (data->ofs - data->nesting->start); } /* read an object ID from a ASN1 buffer */ BOOL asn1_read_OID(ASN1_DATA *data, char **OID) { uint8 b; pstring oid_str; fstring el; *OID = NULL; if (!asn1_start_tag(data, ASN1_OID)) { return False; } asn1_read_uint8(data, &b); oid_str[0] = 0; fstr_sprintf(el, "%u", b/40); pstrcat(oid_str, el); fstr_sprintf(el, " %u", b%40); pstrcat(oid_str, el); while (asn1_tag_remaining(data) > 0) { unsigned v = 0; do { asn1_read_uint8(data, &b); v = (v<<7) | (b&0x7f); } while (!data->has_error && b & 0x80); fstr_sprintf(el, " %u", v); pstrcat(oid_str, el); } asn1_end_tag(data); if (!data->has_error) { *OID = SMB_STRDUP(oid_str); } return !data->has_error; } /* check that the next object ID is correct */ BOOL asn1_check_OID(ASN1_DATA *data, const char *OID) { char *id; if (!asn1_read_OID(data, &id)) { return False; } if (strcmp(id, OID) != 0) { data->has_error = True; return False; } free(id); return True; } /* read a GeneralString from a ASN1 buffer */ BOOL asn1_read_GeneralString(ASN1_DATA *data, char **s) { int len; char *str; *s = NULL; if (!asn1_start_tag(data, ASN1_GENERAL_STRING)) { return False; } len = asn1_tag_remaining(data); if (len < 0) { data->has_error = True; return False; } str = SMB_MALLOC_ARRAY(char, len+1); if (!str) { data->has_error = True; return False; } asn1_read(data, str, len); str[len] = 0; asn1_end_tag(data); if (!data->has_error) { *s = str; } return !data->has_error; } /* read a octet string blob */ BOOL asn1_read_OctetString(ASN1_DATA *data, DATA_BLOB *blob) { int len; ZERO_STRUCTP(blob); if (!asn1_start_tag(data, ASN1_OCTET_STRING)) return False; len = asn1_tag_remaining(data); if (len < 0) { data->has_error = True; return False; } *blob = data_blob(NULL, len); asn1_read(data, blob->data, len); asn1_end_tag(data); return !data->has_error; } /* read an interger */ BOOL asn1_read_Integer(ASN1_DATA *data, int *i) { uint8 b; *i = 0; if (!asn1_start_tag(data, ASN1_INTEGER)) return False; while (asn1_tag_remaining(data)>0) { asn1_read_uint8(data, &b); *i = (*i << 8) + b; } return asn1_end_tag(data); } /* check a enumarted value is correct */ BOOL asn1_check_enumerated(ASN1_DATA *data, int v) { uint8 b; if (!asn1_start_tag(data, ASN1_ENUMERATED)) return False; asn1_read_uint8(data, &b); asn1_end_tag(data); if (v != b) data->has_error = False; return !data->has_error; } /* write an enumarted value to the stream */ BOOL asn1_write_enumerated(ASN1_DATA *data, uint8 v) { if (!asn1_push_tag(data, ASN1_ENUMERATED)) return False; asn1_write_uint8(data, v); asn1_pop_tag(data); return !data->has_error; }