s4:heimdal: import lorikeet-heimdal-202201172009 (commit 5a0b45cd723628b3690ea848548b...
[samba.git] / source4 / heimdal / lib / gssapi / mech / gss_utils.c
index 2071621b2304ba734dc83f740602598857ce721f..bb7e619397f1cc433fc755a4eb033ecb00d138a0 100644 (file)
 
 #include "mech_locl.h"
 
-OM_uint32
+static OM_uint32
 _gss_copy_oid(OM_uint32 *minor_status,
-    const gss_OID from_oid, gss_OID to_oid)
+             gss_const_OID from_oid,
+             gss_OID to_oid)
 {
        size_t len = from_oid->length;
 
@@ -41,7 +42,7 @@ _gss_copy_oid(OM_uint32 *minor_status,
                *minor_status = ENOMEM;
                return GSS_S_FAILURE;
        }
-       to_oid->length = len;
+       to_oid->length = (OM_uint32)len;
        memcpy(to_oid->elements, from_oid->elements, len);
        return (GSS_S_COMPLETE);
 }
@@ -58,6 +59,76 @@ _gss_free_oid(OM_uint32 *minor_status, gss_OID oid)
        return (GSS_S_COMPLETE);
 }
 
+struct _gss_interned_oid {
+    HEIM_SLIST_ATOMIC_ENTRY(_gss_interned_oid) gio_link;
+    gss_OID_desc gio_oid;
+};
+
+static HEIM_SLIST_ATOMIC_HEAD(_gss_interned_oid_list, _gss_interned_oid) interned_oids =
+HEIM_SLIST_HEAD_INITIALIZER(interned_oids);
+
+extern gss_OID _gss_ot_internal[];
+extern size_t _gss_ot_internal_count;
+
+static OM_uint32
+intern_oid_static(OM_uint32 *minor_status,
+                 gss_const_OID from_oid,
+                 gss_OID *to_oid)
+{
+    size_t i;
+
+    /* statically allocated OIDs */
+    for (i = 0; i < _gss_ot_internal_count; i++) {
+       if (gss_oid_equal(_gss_ot_internal[i], from_oid)) {
+           *minor_status = 0;
+           *to_oid = _gss_ot_internal[i];
+           return GSS_S_COMPLETE;
+       }
+    }
+
+    return GSS_S_CONTINUE_NEEDED;
+}
+
+OM_uint32
+_gss_intern_oid(OM_uint32 *minor_status,
+               gss_const_OID from_oid,
+               gss_OID *to_oid)
+{
+    OM_uint32 major_status;
+    struct _gss_interned_oid *iop;
+
+    major_status = intern_oid_static(minor_status, from_oid, to_oid);
+    if (major_status != GSS_S_CONTINUE_NEEDED)
+       return major_status;
+
+    HEIM_SLIST_ATOMIC_FOREACH(iop, &interned_oids, gio_link) {
+       if (gss_oid_equal(&iop->gio_oid, from_oid)) {
+           *minor_status = 0;
+           *to_oid = &iop->gio_oid;
+           return GSS_S_COMPLETE;
+       }
+    }
+
+    iop = malloc(sizeof(*iop));
+    if (iop == NULL) {
+       *minor_status = ENOMEM;
+       return GSS_S_FAILURE;
+    }
+
+    major_status = _gss_copy_oid(minor_status, from_oid, &iop->gio_oid);
+    if (GSS_ERROR(major_status)) {
+       free(iop);
+       return major_status;
+    }
+
+    HEIM_SLIST_ATOMIC_INSERT_HEAD(&interned_oids, iop, gio_link);
+
+    *minor_status = 0;
+    *to_oid = &iop->gio_oid;
+
+    return GSS_S_COMPLETE;
+}
+
 OM_uint32
 _gss_copy_buffer(OM_uint32 *minor_status,
     const gss_buffer_t from_buf, gss_buffer_t to_buf)
@@ -76,3 +147,178 @@ _gss_copy_buffer(OM_uint32 *minor_status,
        return (GSS_S_COMPLETE);
 }
 
+OM_uint32
+_gss_secure_release_buffer(OM_uint32 *minor_status,
+                          gss_buffer_t buffer)
+{
+    if (buffer->value)
+       memset_s(buffer->value, buffer->length, 0, buffer->length);
+
+    return gss_release_buffer(minor_status, buffer);
+}
+
+OM_uint32
+_gss_secure_release_buffer_set(OM_uint32 *minor_status,
+                              gss_buffer_set_t *buffer_set)
+{
+    size_t i;
+    OM_uint32 minor;
+
+    *minor_status = 0;
+
+    if (*buffer_set == GSS_C_NO_BUFFER_SET)
+       return GSS_S_COMPLETE;
+
+    for (i = 0; i < (*buffer_set)->count; i++)
+       _gss_secure_release_buffer(&minor, &((*buffer_set)->elements[i]));
+
+    (*buffer_set)->count = 0;
+
+    return gss_release_buffer_set(minor_status, buffer_set);
+}
+
+void
+_gss_mg_encode_le_uint32(uint32_t n, uint8_t *p)
+{
+    p[0] = (n >> 0 ) & 0xFF;
+    p[1] = (n >> 8 ) & 0xFF;
+    p[2] = (n >> 16) & 0xFF;
+    p[3] = (n >> 24) & 0xFF;
+}
+
+void
+_gss_mg_decode_le_uint32(const void *ptr, uint32_t *n)
+{
+    const uint8_t *p = ptr;
+    *n = (p[0] << 0) | (p[1] << 8) | (p[2] << 16) | (p[3] << 24);
+}
+
+void
+_gss_mg_encode_be_uint32(uint32_t n, uint8_t *p)
+{
+    p[0] = (n >> 24) & 0xFF;
+    p[1] = (n >> 16) & 0xFF;
+    p[2] = (n >> 8 ) & 0xFF;
+    p[3] = (n >> 0 ) & 0xFF;
+}
+
+void
+_gss_mg_decode_be_uint32(const void *ptr, uint32_t *n)
+{
+    const uint8_t *p = ptr;
+    *n = (p[0] << 24) | (p[1] << 16) | (p[2] << 8) | (p[3] << 0);
+}
+
+void
+_gss_mg_encode_le_uint16(uint16_t n, uint8_t *p)
+{
+    p[0] = (n >> 0 ) & 0xFF;
+    p[1] = (n >> 8 ) & 0xFF;
+}
+
+void
+_gss_mg_decode_le_uint16(const void *ptr, uint16_t *n)
+{
+    const uint8_t *p = ptr;
+    *n = (p[0] << 0) | (p[1] << 8);
+}
+
+void
+_gss_mg_encode_be_uint16(uint16_t n, uint8_t *p)
+{
+    p[0] = (n >> 8) & 0xFF;
+    p[1] = (n >> 0) & 0xFF;
+}
+
+void
+_gss_mg_decode_be_uint16(const void *ptr, uint16_t *n)
+{
+    const uint8_t *p = ptr;
+    *n = (p[0] << 24) | (p[1] << 16);
+}
+
+OM_uint32
+_gss_mg_ret_oid(OM_uint32 *minor,
+               krb5_storage *sp,
+               gss_OID *oidp)
+{
+    krb5_data data;
+    gss_OID_desc oid;
+    OM_uint32 major;
+
+    *minor = 0;
+    *oidp = GSS_C_NO_OID;
+
+    *minor = krb5_ret_data(sp, &data);
+    if (*minor)
+        return GSS_S_FAILURE;
+
+    if (data.length) {
+        oid.length = data.length;
+        oid.elements = data.data;
+
+        major = _gss_intern_oid(minor, &oid, oidp);
+    } else
+        major = GSS_S_COMPLETE;
+
+    krb5_data_free(&data);
+
+    return major;
+}
+
+OM_uint32
+_gss_mg_store_oid(OM_uint32 *minor,
+                 krb5_storage *sp,
+                 gss_const_OID oid)
+{
+    krb5_data data;
+
+    if (oid) {
+        data.length = oid->length;
+        data.data = oid->elements;
+    } else
+       krb5_data_zero(&data);
+
+    *minor = krb5_store_data(sp, data);
+
+    return *minor ? GSS_S_FAILURE : GSS_S_COMPLETE;
+}
+
+OM_uint32
+_gss_mg_ret_buffer(OM_uint32 *minor,
+                  krb5_storage *sp,
+                  gss_buffer_t buffer)
+{
+    krb5_data data;
+
+    _mg_buffer_zero(buffer);
+
+    *minor = krb5_ret_data(sp, &data);
+    if (*minor == 0) {
+       if (data.length) {
+           buffer->length = data.length;
+           buffer->value = data.data;
+       } else
+           krb5_data_free(&data);
+    }
+
+    return *minor ? GSS_S_FAILURE : GSS_S_COMPLETE;
+}
+
+OM_uint32
+_gss_mg_store_buffer(OM_uint32 *minor,
+                    krb5_storage *sp,
+                    gss_const_buffer_t buffer)
+{
+    krb5_data data;
+
+    if (buffer) {
+        data.length = buffer->length;
+        data.data = buffer->value;
+    } else
+       krb5_data_zero(&data);
+
+    *minor =  krb5_store_data(sp, data);
+
+    return *minor ? GSS_S_FAILURE : GSS_S_COMPLETE;
+}