blob: 049763142c4b5e69114e701160e4ea21beae408c [file] [log] [blame]
Gilles Peskine27d806f2019-03-01 18:02:53 +01001/* BEGIN_HEADER */
2#include <errno.h>
3#include <stdlib.h>
4#include <limits.h>
5
6#include "mbedtls/bignum.h"
7#include "mbedtls/asn1.h"
8#if defined(MBEDTLS_ASN1_WRITE_C)
9#include "mbedtls/asn1write.h"
10#endif
11
12#define ERR_PARSE_INCONSISTENCY INT_MAX
13
14static int nested_parse( unsigned char **const p,
15 const unsigned char *const end )
16{
17 int ret;
18 size_t len = 0;
19 size_t len2 = 0;
20 unsigned char *const start = *p;
21 unsigned char *content_start;
22 unsigned char tag;
23
24 /* First get the length, skipping over the tag. */
25 content_start = start + 1;
26 ret = mbedtls_asn1_get_len( &content_start, end, &len );
27 TEST_ASSERT( content_start <= end );
28 if( ret != 0 )
29 return( ret );
30
31 /* Since we have a valid element start (tag and length), retrieve and
32 * check the tag. */
33 tag = start[0];
34 TEST_EQUAL( mbedtls_asn1_get_tag( p, end, &len2, tag ^ 1 ),
35 MBEDTLS_ERR_ASN1_UNEXPECTED_TAG );
36 *p = start;
37 TEST_EQUAL( mbedtls_asn1_get_tag( p, end, &len2, tag ), 0 );
38 TEST_EQUAL( len, len2 );
39 TEST_ASSERT( *p == content_start );
40 *p = content_start;
41
42 switch( tag & 0x1f )
43 {
44 case MBEDTLS_ASN1_BOOLEAN:
45 {
46 int val = -257;
47 *p = start;
48 ret = mbedtls_asn1_get_bool( p, end, &val );
49 if( ret == 0 )
50 TEST_ASSERT( val == 0 || val == 1 );
51 break;
52 }
53
54 case MBEDTLS_ASN1_INTEGER:
55 {
56#if defined(MBEDTLS_BIGNUM_C)
57 mbedtls_mpi mpi;
58 mbedtls_mpi_init( &mpi );
59 *p = start;
60 ret = mbedtls_asn1_get_mpi( p, end, &mpi );
61 mbedtls_mpi_free( &mpi );
Gilles Peskine03c165e2019-10-10 19:15:18 +020062#else
63 *p = start + 1;
64 ret = mbedtls_asn1_get_len( p, end, &len );
65 *p += len;
Gilles Peskine27d806f2019-03-01 18:02:53 +010066#endif
67 /* If we're sure that the number fits in an int, also
68 * call mbedtls_asn1_get_int(). */
69 if( ret == 0 && len < sizeof( int ) )
70 {
71 int val = -257;
72 unsigned char *q = start;
73 ret = mbedtls_asn1_get_int( &q, end, &val );
74 TEST_ASSERT( *p == q );
75 }
76 break;
77 }
78
79 case MBEDTLS_ASN1_BIT_STRING:
80 {
81 mbedtls_asn1_bitstring bs;
82 *p = start;
83 ret = mbedtls_asn1_get_bitstring( p, end, &bs );
84 break;
85 }
86
87 case MBEDTLS_ASN1_SEQUENCE:
88 {
89 while( *p <= end && *p < content_start + len && ret == 0 )
90 ret = nested_parse( p, content_start + len );
91 break;
92 }
93
94 case MBEDTLS_ASN1_OCTET_STRING:
95 case MBEDTLS_ASN1_NULL:
96 case MBEDTLS_ASN1_OID:
97 case MBEDTLS_ASN1_UTF8_STRING:
98 case MBEDTLS_ASN1_SET:
99 case MBEDTLS_ASN1_PRINTABLE_STRING:
100 case MBEDTLS_ASN1_T61_STRING:
101 case MBEDTLS_ASN1_IA5_STRING:
102 case MBEDTLS_ASN1_UTC_TIME:
103 case MBEDTLS_ASN1_GENERALIZED_TIME:
104 case MBEDTLS_ASN1_UNIVERSAL_STRING:
105 case MBEDTLS_ASN1_BMP_STRING:
106 default:
107 /* No further testing implemented for this tag. */
108 *p += len;
109 return( 0 );
110 }
111
112 TEST_ASSERT( *p <= end );
113 return( ret );
114
115exit:
116 return( ERR_PARSE_INCONSISTENCY );
117}
118
119int get_len_step( const data_t *input, size_t buffer_size,
120 size_t actual_length )
121{
122 unsigned char *buf = NULL;
123 unsigned char *p = NULL;
124 size_t parsed_length;
125 int ret;
126
127 test_set_step( buffer_size );
128 /* Allocate a new buffer of exactly the length to parse each time.
129 * This gives memory sanitizers a chance to catch buffer overreads. */
130 if( buffer_size == 0 )
131 {
132 ASSERT_ALLOC( buf, 1 );
133 p = buf + 1;
134 }
135 else
136 {
Gilles Peskine2cd8ecc2019-03-04 17:13:43 +0100137 ASSERT_ALLOC_WEAK( buf, buffer_size );
Gilles Peskine27d806f2019-03-01 18:02:53 +0100138 if( buffer_size > input->len )
139 {
140 memcpy( buf, input->x, input->len );
141 memset( buf + input->len, 'A', buffer_size - input->len );
142 }
143 else
144 {
145 memcpy( buf, input->x, buffer_size );
146 }
147 p = buf;
148 }
149
150 ret = mbedtls_asn1_get_len( &p, buf + buffer_size, &parsed_length );
151
152 if( buffer_size >= input->len + actual_length )
153 {
154 TEST_EQUAL( ret, 0 );
155 TEST_ASSERT( p == buf + input->len );
156 TEST_EQUAL( parsed_length, actual_length );
157 }
158 else
159 {
160 TEST_EQUAL( ret, MBEDTLS_ERR_ASN1_OUT_OF_DATA );
161 }
162 mbedtls_free( buf );
163 return( 1 );
164
165exit:
Gilles Peskine27d806f2019-03-01 18:02:53 +0100166 mbedtls_free( buf );
167 return( 0 );
168}
169
170/* END_HEADER */
171
172/* BEGIN_DEPENDENCIES
173 * depends_on:MBEDTLS_ASN1_PARSE_C
174 * END_DEPENDENCIES
175 */
176
177/* BEGIN_CASE */
178void parse_prefixes( const data_t *input,
179 int actual_length_arg,
180 int last_result )
181{
182 size_t actual_length = actual_length_arg;
183 unsigned char *buf = NULL;
184 unsigned char *p = NULL;
185 size_t buffer_size;
186 int ret;
187
188 for( buffer_size = 1; buffer_size <= input->len; buffer_size++ )
189 {
190 test_set_step( buffer_size );
191 /* Allocate a new buffer of exactly the length to parse each time.
192 * This gives memory sanitizers a chance to catch buffer overreads. */
193 ASSERT_ALLOC( buf, buffer_size );
194 memcpy( buf, input->x, buffer_size );
195 p = buf;
196 ret = nested_parse( &p, buf + buffer_size );
197 if( ret == ERR_PARSE_INCONSISTENCY )
198 goto exit;
199 if( actual_length > 0 && buffer_size >= actual_length )
200 {
201 TEST_EQUAL( ret, last_result );
202 if( ret == 0 )
203 TEST_ASSERT( p == buf + actual_length );
204 }
205 else
206 {
207 TEST_EQUAL( ret, MBEDTLS_ERR_ASN1_OUT_OF_DATA );
208 }
209 mbedtls_free( buf );
210 buf = NULL;
211 }
212
213exit:
214 mbedtls_free( buf );
215}
216/* END_CASE */
217
218/* BEGIN_CASE */
219void get_len( const data_t *input, int actual_length_arg )
220{
221 size_t actual_length = actual_length_arg;
222 size_t buffer_size;
223
224 for( buffer_size = 1; buffer_size <= input->len + 1; buffer_size++ )
225 {
226 if( ! get_len_step( input, buffer_size, actual_length ) )
227 goto exit;
228 }
229 if( ! get_len_step( input, input->len + actual_length - 1, actual_length ) )
230 goto exit;
231 if( ! get_len_step( input, input->len + actual_length, actual_length ) )
232 goto exit;
233}
234/* END_CASE */
235
236/* BEGIN_CASE */
237void get_boolean( const data_t *input,
238 int expected_value, int expected_result )
239{
240 unsigned char *p = input->x;
241 int val;
242 int ret;
243 ret = mbedtls_asn1_get_bool( &p, input->x + input->len, &val );
244 TEST_EQUAL( ret, expected_result );
245 if( expected_result == 0 )
246 {
247 TEST_EQUAL( val, expected_value );
248 TEST_ASSERT( p == input->x + input->len );
249 }
250}
251/* END_CASE */
252
253/* BEGIN_CASE */
254void get_integer( const data_t *input,
255 const char *expected_hex, int expected_result )
256{
257 unsigned char *p;
258#if defined(MBEDTLS_BIGNUM_C)
259 mbedtls_mpi expected_mpi;
260 mbedtls_mpi actual_mpi;
Gilles Peskine03c165e2019-10-10 19:15:18 +0200261 int expected_result_for_mpi = expected_result;
Gilles Peskine27d806f2019-03-01 18:02:53 +0100262#endif
263 long expected_value;
264 int expected_result_for_int = expected_result;
Gilles Peskine27d806f2019-03-01 18:02:53 +0100265 int val;
266 int ret;
267
268#if defined(MBEDTLS_BIGNUM_C)
269 mbedtls_mpi_init( &expected_mpi );
270 mbedtls_mpi_init( &actual_mpi );
271#endif
272
273 errno = 0;
274 expected_value = strtol( expected_hex, NULL, 16 );
275 if( expected_result == 0 &&
276 ( errno == ERANGE
277#if LONG_MAX > INT_MAX
278 || expected_value > INT_MAX || expected_value < INT_MIN
279#endif
280 ) )
281 {
282 expected_result_for_int = MBEDTLS_ERR_ASN1_INVALID_LENGTH;
283 }
284
285 p = input->x;
286 ret = mbedtls_asn1_get_int( &p, input->x + input->len, &val );
287 TEST_EQUAL( ret, expected_result_for_int );
288 if( ret == 0 )
289 {
290 TEST_EQUAL( val, expected_value );
291 TEST_ASSERT( p == input->x + input->len );
292 }
293
294#if defined(MBEDTLS_BIGNUM_C)
295 ret = mbedtls_mpi_read_string( &expected_mpi, 16, expected_hex );
296 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
297 if( ret == MBEDTLS_ERR_MPI_BAD_INPUT_DATA )
298 {
299 /* The data overflows the maximum MPI size. */
300 expected_result_for_mpi = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
301 }
302 p = input->x;
303 ret = mbedtls_asn1_get_mpi( &p, input->x + input->len, &actual_mpi );
304 TEST_EQUAL( ret, expected_result_for_mpi );
305 if( ret == 0 )
306 {
307 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &actual_mpi , &expected_mpi ) == 0 );
308 TEST_ASSERT( p == input->x + input->len );
309 }
310#endif
311
312exit:
313#if defined(MBEDTLS_BIGNUM_C)
314 mbedtls_mpi_free( &expected_mpi );
315 mbedtls_mpi_free( &actual_mpi );
316#endif
Gilles Peskine03c165e2019-10-10 19:15:18 +0200317 /*empty cleanup in some configurations*/ ;
Gilles Peskine27d806f2019-03-01 18:02:53 +0100318}
319/* END_CASE */
320
321/* BEGIN_CASE depends_on:MBEDTLS_BIGNUM_C */
322void get_mpi_too_large( )
323{
324 unsigned char *buf = NULL;
325 unsigned char *p;
326 mbedtls_mpi actual_mpi;
327 size_t too_many_octets =
328 MBEDTLS_MPI_MAX_LIMBS * sizeof(mbedtls_mpi_uint) + 1;
329 size_t size = too_many_octets + 6;
330
331 mbedtls_mpi_init( &actual_mpi );
332
333 ASSERT_ALLOC( buf, size );
334 buf[0] = 0x02; /* tag: INTEGER */
335 buf[1] = 0x84; /* 4-octet length */
336 buf[2] = ( too_many_octets >> 24 ) & 0xff;
337 buf[3] = ( too_many_octets >> 16 ) & 0xff;
338 buf[4] = ( too_many_octets >> 8 ) & 0xff;
339 buf[5] = too_many_octets & 0xff;
340 buf[6] = 0x01; /* most significant octet */
341
342 p = buf;
343 TEST_EQUAL( mbedtls_asn1_get_mpi( &p, buf + size, &actual_mpi ),
344 MBEDTLS_ERR_MPI_ALLOC_FAILED );
345
346exit:
347 mbedtls_mpi_free( &actual_mpi );
348 mbedtls_free( buf );
349}
350/* END_CASE */
351
352/* BEGIN_CASE */
353void get_bitstring( const data_t *input,
354 int expected_length, int expected_unused_bits,
355 int expected_result, int expected_result_null )
356{
357 mbedtls_asn1_bitstring bs = { 0xdead, 0x21, NULL };
358 unsigned char *p = input->x;
359
360 TEST_EQUAL( mbedtls_asn1_get_bitstring( &p, input->x + input->len, &bs ),
361 expected_result );
362 if( expected_result == 0 )
363 {
364 TEST_EQUAL( bs.len, (size_t) expected_length );
365 TEST_EQUAL( bs.unused_bits, expected_unused_bits );
366 TEST_ASSERT( bs.p != NULL );
367 TEST_EQUAL( bs.p - input->x + bs.len, input->len );
368 TEST_ASSERT( p == input->x + input->len );
369 }
370
371 p = input->x;
372 TEST_EQUAL( mbedtls_asn1_get_bitstring_null( &p, input->x + input->len,
373 &bs.len ),
374 expected_result_null );
375 if( expected_result_null == 0 )
376 {
377 TEST_EQUAL( bs.len, (size_t) expected_length );
378 if( expected_result == 0 )
379 TEST_ASSERT( p == input->x + input->len - bs.len );
380 }
381}
382/* END_CASE */
383
384/* BEGIN_CASE */
385void get_sequence_of( const data_t *input, int tag,
386 const char *description,
387 int expected_result )
388{
389 mbedtls_asn1_sequence head = { { 0, 0, NULL }, NULL };
390 mbedtls_asn1_sequence *cur, *next;
391 unsigned char *p = input->x;
392 const char *rest = description;
393 unsigned long n;
394
395 TEST_EQUAL( mbedtls_asn1_get_sequence_of( &p, input->x + input->len,
396 &head, tag ),
397 expected_result );
398 if( expected_result == 0 )
399 {
400 TEST_ASSERT( p == input->x + input->len );
401
402 if( ! *rest )
403 {
404 TEST_EQUAL( head.buf.tag, 0 );
405 TEST_ASSERT( head.buf.p == NULL );
406 TEST_EQUAL( head.buf.len, 0 );
407 TEST_ASSERT( head.next == NULL );
408 }
409 else
410 {
411 cur = &head;
412 while( *rest )
413 {
414 ++test_info.step;
415 TEST_ASSERT( cur != NULL );
416 TEST_EQUAL( cur->buf.tag, tag );
417 n = strtoul( rest, (char **) &rest, 0 );
418 TEST_EQUAL( n, (size_t)( cur->buf.p - input->x ) );
419 ++rest;
420 n = strtoul( rest, (char **) &rest, 0 );
421 TEST_EQUAL( n, cur->buf.len );
422 if( *rest )
423 ++rest;
424 cur = cur->next;
425 }
426 TEST_ASSERT( cur == NULL );
427 }
428 }
429
430exit:
431 cur = head.next;
432 while( cur != NULL )
433 {
434 next = cur->next;
435 mbedtls_free( cur );
436 cur = next;
437 }
438}
439/* END_CASE */
440
441/* BEGIN_CASE */
442void get_alg( const data_t *input,
443 int oid_offset, int oid_length,
444 int params_tag, int params_offset, int params_length,
445 int total_length,
446 int expected_result )
447{
448 mbedtls_asn1_buf oid = { -1, 0, NULL };
449 mbedtls_asn1_buf params = { -1, 0, NULL };
450 unsigned char *p = input->x;
451 int ret;
452
453 TEST_EQUAL( mbedtls_asn1_get_alg( &p, input->x + input->len,
454 &oid, &params ),
455 expected_result );
456 if( expected_result == 0 )
457 {
458 TEST_EQUAL( oid.tag, MBEDTLS_ASN1_OID );
459 TEST_EQUAL( oid.p - input->x, oid_offset );
460 TEST_EQUAL( oid.len, (size_t) oid_length );
461 TEST_EQUAL( params.tag, params_tag );
462 if( params_offset != 0 )
463 TEST_EQUAL( params.p - input->x, params_offset );
464 else
465 TEST_ASSERT( params.p == NULL );
466 TEST_EQUAL( params.len, (size_t) params_length );
467 TEST_EQUAL( p - input->x, total_length );
468 }
469
470 ret = mbedtls_asn1_get_alg_null( &p, input->x + input->len, &oid );
471 if( expected_result == 0 && params_offset == 0 )
472 {
473 TEST_EQUAL( oid.tag, MBEDTLS_ASN1_OID );
474 TEST_EQUAL( oid.p - input->x, oid_offset );
475 TEST_EQUAL( oid.len, (size_t) oid_length );
476 TEST_EQUAL( p - input->x, total_length );
477 }
478 else
479 TEST_ASSERT( ret != 0 );
480}
481/* END_CASE */
482
483/* BEGIN_CASE */
484void find_named_data( data_t *oid0, data_t *oid1, data_t *oid2, data_t *oid3,
485 data_t *needle, int from, int position )
486{
487 mbedtls_asn1_named_data nd[] ={
488 { {0x06, oid0->len, oid0->x}, {0, 0, NULL}, NULL, 0 },
489 { {0x06, oid1->len, oid1->x}, {0, 0, NULL}, NULL, 0 },
490 { {0x06, oid2->len, oid2->x}, {0, 0, NULL}, NULL, 0 },
491 { {0x06, oid3->len, oid3->x}, {0, 0, NULL}, NULL, 0 },
492 };
493 mbedtls_asn1_named_data *pointers[ARRAY_LENGTH( nd ) + 1];
494 size_t i;
495 mbedtls_asn1_named_data *found;
496
497 for( i = 0; i < ARRAY_LENGTH( nd ); i++ )
498 pointers[i] = &nd[i];
499 pointers[ARRAY_LENGTH( nd )] = NULL;
500 for( i = 0; i < ARRAY_LENGTH( nd ); i++ )
501 nd[i].next = pointers[i+1];
502
503 found = mbedtls_asn1_find_named_data( pointers[from],
504 (const char *) needle->x,
505 needle->len );
506 TEST_ASSERT( found == pointers[position] );
507}
508/* END_CASE */
509
510/* BEGIN_CASE */
511void free_named_data_null( )
512{
513 mbedtls_asn1_free_named_data( NULL );
514 goto exit; /* Silence unused label warning */
515}
516/* END_CASE */
517
518/* BEGIN_CASE */
519void free_named_data( int with_oid, int with_val, int with_next )
520{
521 mbedtls_asn1_named_data next =
522 { {0x06, 0, NULL}, {0, 0xcafe, NULL}, NULL, 0 };
523 mbedtls_asn1_named_data head =
524 { {0x06, 0, NULL}, {0, 0, NULL}, NULL, 0 };
525
526 if( with_oid )
527 ASSERT_ALLOC( head.oid.p, 1 );
528 if( with_val )
529 ASSERT_ALLOC( head.val.p, 1 );
530 if( with_next )
531 head.next = &next;
532
533 mbedtls_asn1_free_named_data( &head );
534 TEST_ASSERT( head.oid.p == NULL );
535 TEST_ASSERT( head.val.p == NULL );
536 TEST_ASSERT( head.next == NULL );
537 TEST_ASSERT( next.val.len == 0xcafe );
538
539exit:
540 mbedtls_free( head.oid.p );
541 mbedtls_free( head.val.p );
542}
543/* END_CASE */
544
545/* BEGIN_CASE */
546void free_named_data_list( int length )
547{
548 mbedtls_asn1_named_data *head = NULL;
549 int i;
550
551 for( i = 0; i < length; i++ )
552 {
553 mbedtls_asn1_named_data *new = NULL;
554 ASSERT_ALLOC( new, sizeof( mbedtls_asn1_named_data ) );
Gilles Peskine88f136f2019-09-20 21:06:27 +0200555 new->next = head;
Gilles Peskine27d806f2019-03-01 18:02:53 +0100556 head = new;
557 }
558
559 mbedtls_asn1_free_named_data_list( &head );
560 TEST_ASSERT( head == NULL );
561 /* Most of the point of the test is that it doesn't leak memory.
562 * So this test is only really useful under a memory leak detection
563 * framework. */
564exit:
565 mbedtls_asn1_free_named_data_list( &head );
566}
567/* END_CASE */