1 | /*
|
---|
2 | * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
|
---|
3 | *
|
---|
4 | * Licensed under the OpenSSL license (the "License"). You may not use
|
---|
5 | * this file except in compliance with the License. You can obtain a copy
|
---|
6 | * in the file LICENSE in the source distribution or at
|
---|
7 | * https://www.openssl.org/source/license.html
|
---|
8 | */
|
---|
9 |
|
---|
10 | #include <stdio.h>
|
---|
11 | #include "internal/cryptlib.h"
|
---|
12 | #include <openssl/objects.h>
|
---|
13 | #include <openssl/x509.h>
|
---|
14 | #include <openssl/buffer.h>
|
---|
15 | #include "crypto/x509.h"
|
---|
16 |
|
---|
17 | /*
|
---|
18 | * Limit to ensure we don't overflow: much greater than
|
---|
19 | * anything encountered in practice.
|
---|
20 | */
|
---|
21 |
|
---|
22 | #define NAME_ONELINE_MAX (1024 * 1024)
|
---|
23 |
|
---|
24 | char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
|
---|
25 | {
|
---|
26 | const X509_NAME_ENTRY *ne;
|
---|
27 | int i;
|
---|
28 | int n, lold, l, l1, l2, num, j, type;
|
---|
29 | const char *s;
|
---|
30 | char *p;
|
---|
31 | unsigned char *q;
|
---|
32 | BUF_MEM *b = NULL;
|
---|
33 | static const char hex[17] = "0123456789ABCDEF";
|
---|
34 | int gs_doit[4];
|
---|
35 | char tmp_buf[80];
|
---|
36 | #ifdef CHARSET_EBCDIC
|
---|
37 | unsigned char ebcdic_buf[1024];
|
---|
38 | #endif
|
---|
39 |
|
---|
40 | if (buf == NULL) {
|
---|
41 | if ((b = BUF_MEM_new()) == NULL)
|
---|
42 | goto err;
|
---|
43 | if (!BUF_MEM_grow(b, 200))
|
---|
44 | goto err;
|
---|
45 | b->data[0] = '\0';
|
---|
46 | len = 200;
|
---|
47 | } else if (len == 0) {
|
---|
48 | return NULL;
|
---|
49 | }
|
---|
50 | if (a == NULL) {
|
---|
51 | if (b) {
|
---|
52 | buf = b->data;
|
---|
53 | OPENSSL_free(b);
|
---|
54 | }
|
---|
55 | strncpy(buf, "NO X509_NAME", len);
|
---|
56 | buf[len - 1] = '\0';
|
---|
57 | return buf;
|
---|
58 | }
|
---|
59 |
|
---|
60 | len--; /* space for '\0' */
|
---|
61 | l = 0;
|
---|
62 | for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
|
---|
63 | ne = sk_X509_NAME_ENTRY_value(a->entries, i);
|
---|
64 | n = OBJ_obj2nid(ne->object);
|
---|
65 | if ((n == NID_undef) || ((s = OBJ_nid2sn(n)) == NULL)) {
|
---|
66 | i2t_ASN1_OBJECT(tmp_buf, sizeof(tmp_buf), ne->object);
|
---|
67 | s = tmp_buf;
|
---|
68 | }
|
---|
69 | l1 = strlen(s);
|
---|
70 |
|
---|
71 | type = ne->value->type;
|
---|
72 | num = ne->value->length;
|
---|
73 | if (num > NAME_ONELINE_MAX) {
|
---|
74 | X509err(X509_F_X509_NAME_ONELINE, X509_R_NAME_TOO_LONG);
|
---|
75 | goto end;
|
---|
76 | }
|
---|
77 | q = ne->value->data;
|
---|
78 | #ifdef CHARSET_EBCDIC
|
---|
79 | if (type == V_ASN1_GENERALSTRING ||
|
---|
80 | type == V_ASN1_VISIBLESTRING ||
|
---|
81 | type == V_ASN1_PRINTABLESTRING ||
|
---|
82 | type == V_ASN1_TELETEXSTRING ||
|
---|
83 | type == V_ASN1_IA5STRING) {
|
---|
84 | if (num > (int)sizeof(ebcdic_buf))
|
---|
85 | num = sizeof(ebcdic_buf);
|
---|
86 | ascii2ebcdic(ebcdic_buf, q, num);
|
---|
87 | q = ebcdic_buf;
|
---|
88 | }
|
---|
89 | #endif
|
---|
90 |
|
---|
91 | if ((type == V_ASN1_GENERALSTRING) && ((num % 4) == 0)) {
|
---|
92 | gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 0;
|
---|
93 | for (j = 0; j < num; j++)
|
---|
94 | if (q[j] != 0)
|
---|
95 | gs_doit[j & 3] = 1;
|
---|
96 |
|
---|
97 | if (gs_doit[0] | gs_doit[1] | gs_doit[2])
|
---|
98 | gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 1;
|
---|
99 | else {
|
---|
100 | gs_doit[0] = gs_doit[1] = gs_doit[2] = 0;
|
---|
101 | gs_doit[3] = 1;
|
---|
102 | }
|
---|
103 | } else
|
---|
104 | gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 1;
|
---|
105 |
|
---|
106 | for (l2 = j = 0; j < num; j++) {
|
---|
107 | if (!gs_doit[j & 3])
|
---|
108 | continue;
|
---|
109 | l2++;
|
---|
110 | #ifndef CHARSET_EBCDIC
|
---|
111 | if ((q[j] < ' ') || (q[j] > '~'))
|
---|
112 | l2 += 3;
|
---|
113 | #else
|
---|
114 | if ((os_toascii[q[j]] < os_toascii[' ']) ||
|
---|
115 | (os_toascii[q[j]] > os_toascii['~']))
|
---|
116 | l2 += 3;
|
---|
117 | #endif
|
---|
118 | }
|
---|
119 |
|
---|
120 | lold = l;
|
---|
121 | l += 1 + l1 + 1 + l2;
|
---|
122 | if (l > NAME_ONELINE_MAX) {
|
---|
123 | X509err(X509_F_X509_NAME_ONELINE, X509_R_NAME_TOO_LONG);
|
---|
124 | goto end;
|
---|
125 | }
|
---|
126 | if (b != NULL) {
|
---|
127 | if (!BUF_MEM_grow(b, l + 1))
|
---|
128 | goto err;
|
---|
129 | p = &(b->data[lold]);
|
---|
130 | } else if (l > len) {
|
---|
131 | break;
|
---|
132 | } else
|
---|
133 | p = &(buf[lold]);
|
---|
134 | *(p++) = '/';
|
---|
135 | memcpy(p, s, (unsigned int)l1);
|
---|
136 | p += l1;
|
---|
137 | *(p++) = '=';
|
---|
138 |
|
---|
139 | #ifndef CHARSET_EBCDIC /* q was assigned above already. */
|
---|
140 | q = ne->value->data;
|
---|
141 | #endif
|
---|
142 |
|
---|
143 | for (j = 0; j < num; j++) {
|
---|
144 | if (!gs_doit[j & 3])
|
---|
145 | continue;
|
---|
146 | #ifndef CHARSET_EBCDIC
|
---|
147 | n = q[j];
|
---|
148 | if ((n < ' ') || (n > '~')) {
|
---|
149 | *(p++) = '\\';
|
---|
150 | *(p++) = 'x';
|
---|
151 | *(p++) = hex[(n >> 4) & 0x0f];
|
---|
152 | *(p++) = hex[n & 0x0f];
|
---|
153 | } else
|
---|
154 | *(p++) = n;
|
---|
155 | #else
|
---|
156 | n = os_toascii[q[j]];
|
---|
157 | if ((n < os_toascii[' ']) || (n > os_toascii['~'])) {
|
---|
158 | *(p++) = '\\';
|
---|
159 | *(p++) = 'x';
|
---|
160 | *(p++) = hex[(n >> 4) & 0x0f];
|
---|
161 | *(p++) = hex[n & 0x0f];
|
---|
162 | } else
|
---|
163 | *(p++) = q[j];
|
---|
164 | #endif
|
---|
165 | }
|
---|
166 | *p = '\0';
|
---|
167 | }
|
---|
168 | if (b != NULL) {
|
---|
169 | p = b->data;
|
---|
170 | OPENSSL_free(b);
|
---|
171 | } else
|
---|
172 | p = buf;
|
---|
173 | if (i == 0)
|
---|
174 | *p = '\0';
|
---|
175 | return p;
|
---|
176 | err:
|
---|
177 | X509err(X509_F_X509_NAME_ONELINE, ERR_R_MALLOC_FAILURE);
|
---|
178 | end:
|
---|
179 | BUF_MEM_free(b);
|
---|
180 | return NULL;
|
---|
181 | }
|
---|