Absolute File Name: | /home/opencoverage/opencoverage/guest-scripts/libressl/src/ssl/d1_clnt.c |
Source code | Switch to Preprocessed file |
Line | Source | Count | ||||||
---|---|---|---|---|---|---|---|---|
1 | /* $OpenBSD: d1_clnt.c,v 1.81 2018/08/30 16:56:16 jsing Exp $ */ | - | ||||||
2 | /* | - | ||||||
3 | * DTLS implementation written by Nagendra Modadugu | - | ||||||
4 | * (nagendra@cs.stanford.edu) for the OpenSSL project 2005. | - | ||||||
5 | */ | - | ||||||
6 | /* ==================================================================== | - | ||||||
7 | * Copyright (c) 1999-2007 The OpenSSL Project. All rights reserved. | - | ||||||
8 | * | - | ||||||
9 | * Redistribution and use in source and binary forms, with or without | - | ||||||
10 | * modification, are permitted provided that the following conditions | - | ||||||
11 | * are met: | - | ||||||
12 | * | - | ||||||
13 | * 1. Redistributions of source code must retain the above copyright | - | ||||||
14 | * notice, this list of conditions and the following disclaimer. | - | ||||||
15 | * | - | ||||||
16 | * 2. Redistributions in binary form must reproduce the above copyright | - | ||||||
17 | * notice, this list of conditions and the following disclaimer in | - | ||||||
18 | * the documentation and/or other materials provided with the | - | ||||||
19 | * distribution. | - | ||||||
20 | * | - | ||||||
21 | * 3. All advertising materials mentioning features or use of this | - | ||||||
22 | * software must display the following acknowledgment: | - | ||||||
23 | * "This product includes software developed by the OpenSSL Project | - | ||||||
24 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | - | ||||||
25 | * | - | ||||||
26 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | - | ||||||
27 | * endorse or promote products derived from this software without | - | ||||||
28 | * prior written permission. For written permission, please contact | - | ||||||
29 | * openssl-core@OpenSSL.org. | - | ||||||
30 | * | - | ||||||
31 | * 5. Products derived from this software may not be called "OpenSSL" | - | ||||||
32 | * nor may "OpenSSL" appear in their names without prior written | - | ||||||
33 | * permission of the OpenSSL Project. | - | ||||||
34 | * | - | ||||||
35 | * 6. Redistributions of any form whatsoever must retain the following | - | ||||||
36 | * acknowledgment: | - | ||||||
37 | * "This product includes software developed by the OpenSSL Project | - | ||||||
38 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | - | ||||||
39 | * | - | ||||||
40 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | - | ||||||
41 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | - | ||||||
42 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | - | ||||||
43 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | - | ||||||
44 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | - | ||||||
45 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | - | ||||||
46 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | - | ||||||
47 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | - | ||||||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | - | ||||||
49 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | - | ||||||
50 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | - | ||||||
51 | * OF THE POSSIBILITY OF SUCH DAMAGE. | - | ||||||
52 | * ==================================================================== | - | ||||||
53 | * | - | ||||||
54 | * This product includes cryptographic software written by Eric Young | - | ||||||
55 | * (eay@cryptsoft.com). This product includes software written by Tim | - | ||||||
56 | * Hudson (tjh@cryptsoft.com). | - | ||||||
57 | * | - | ||||||
58 | */ | - | ||||||
59 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | - | ||||||
60 | * All rights reserved. | - | ||||||
61 | * | - | ||||||
62 | * This package is an SSL implementation written | - | ||||||
63 | * by Eric Young (eay@cryptsoft.com). | - | ||||||
64 | * The implementation was written so as to conform with Netscapes SSL. | - | ||||||
65 | * | - | ||||||
66 | * This library is free for commercial and non-commercial use as long as | - | ||||||
67 | * the following conditions are aheared to. The following conditions | - | ||||||
68 | * apply to all code found in this distribution, be it the RC4, RSA, | - | ||||||
69 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | - | ||||||
70 | * included with this distribution is covered by the same copyright terms | - | ||||||
71 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | - | ||||||
72 | * | - | ||||||
73 | * Copyright remains Eric Young's, and as such any Copyright notices in | - | ||||||
74 | * the code are not to be removed. | - | ||||||
75 | * If this package is used in a product, Eric Young should be given attribution | - | ||||||
76 | * as the author of the parts of the library used. | - | ||||||
77 | * This can be in the form of a textual message at program startup or | - | ||||||
78 | * in documentation (online or textual) provided with the package. | - | ||||||
79 | * | - | ||||||
80 | * Redistribution and use in source and binary forms, with or without | - | ||||||
81 | * modification, are permitted provided that the following conditions | - | ||||||
82 | * are met: | - | ||||||
83 | * 1. Redistributions of source code must retain the copyright | - | ||||||
84 | * notice, this list of conditions and the following disclaimer. | - | ||||||
85 | * 2. Redistributions in binary form must reproduce the above copyright | - | ||||||
86 | * notice, this list of conditions and the following disclaimer in the | - | ||||||
87 | * documentation and/or other materials provided with the distribution. | - | ||||||
88 | * 3. All advertising materials mentioning features or use of this software | - | ||||||
89 | * must display the following acknowledgement: | - | ||||||
90 | * "This product includes cryptographic software written by | - | ||||||
91 | * Eric Young (eay@cryptsoft.com)" | - | ||||||
92 | * The word 'cryptographic' can be left out if the rouines from the library | - | ||||||
93 | * being used are not cryptographic related :-). | - | ||||||
94 | * 4. If you include any Windows specific code (or a derivative thereof) from | - | ||||||
95 | * the apps directory (application code) you must include an acknowledgement: | - | ||||||
96 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | - | ||||||
97 | * | - | ||||||
98 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | - | ||||||
99 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | - | ||||||
100 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | - | ||||||
101 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | - | ||||||
102 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | - | ||||||
103 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | - | ||||||
104 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | - | ||||||
105 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | - | ||||||
106 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | - | ||||||
107 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | - | ||||||
108 | * SUCH DAMAGE. | - | ||||||
109 | * | - | ||||||
110 | * The licence and distribution terms for any publically available version or | - | ||||||
111 | * derivative of this code cannot be changed. i.e. this code cannot simply be | - | ||||||
112 | * copied and put under another distribution licence | - | ||||||
113 | * [including the GNU Public Licence.] | - | ||||||
114 | */ | - | ||||||
115 | - | |||||||
116 | #include <limits.h> | - | ||||||
117 | #include <stdio.h> | - | ||||||
118 | - | |||||||
119 | #include "ssl_locl.h" | - | ||||||
120 | - | |||||||
121 | #include <openssl/bn.h> | - | ||||||
122 | #include <openssl/buffer.h> | - | ||||||
123 | #include <openssl/dh.h> | - | ||||||
124 | #include <openssl/evp.h> | - | ||||||
125 | #include <openssl/md5.h> | - | ||||||
126 | #include <openssl/objects.h> | - | ||||||
127 | - | |||||||
128 | #include "bytestring.h" | - | ||||||
129 | - | |||||||
130 | static const SSL_METHOD_INTERNAL DTLSv1_client_method_internal_data = { | - | ||||||
131 | .version = DTLS1_VERSION, | - | ||||||
132 | .min_version = DTLS1_VERSION, | - | ||||||
133 | .max_version = DTLS1_VERSION, | - | ||||||
134 | .ssl_new = dtls1_new, | - | ||||||
135 | .ssl_clear = dtls1_clear, | - | ||||||
136 | .ssl_free = dtls1_free, | - | ||||||
137 | .ssl_accept = ssl_undefined_function, | - | ||||||
138 | .ssl_connect = ssl3_connect, | - | ||||||
139 | .get_ssl_method = dtls1_get_client_method, | - | ||||||
140 | .get_timeout = dtls1_default_timeout, | - | ||||||
141 | .ssl_version = ssl_undefined_void_function, | - | ||||||
142 | .ssl_renegotiate = ssl3_renegotiate, | - | ||||||
143 | .ssl_renegotiate_check = ssl3_renegotiate_check, | - | ||||||
144 | .ssl_get_message = dtls1_get_message, | - | ||||||
145 | .ssl_read_bytes = dtls1_read_bytes, | - | ||||||
146 | .ssl_write_bytes = dtls1_write_app_data_bytes, | - | ||||||
147 | .ssl3_enc = &DTLSv1_enc_data, | - | ||||||
148 | }; | - | ||||||
149 | - | |||||||
150 | static const SSL_METHOD DTLSv1_client_method_data = { | - | ||||||
151 | .ssl_dispatch_alert = dtls1_dispatch_alert, | - | ||||||
152 | .num_ciphers = ssl3_num_ciphers, | - | ||||||
153 | .get_cipher = dtls1_get_cipher, | - | ||||||
154 | .get_cipher_by_char = ssl3_get_cipher_by_char, | - | ||||||
155 | .put_cipher_by_char = ssl3_put_cipher_by_char, | - | ||||||
156 | .internal = &DTLSv1_client_method_internal_data, | - | ||||||
157 | }; | - | ||||||
158 | - | |||||||
159 | const SSL_METHOD * | - | ||||||
160 | DTLSv1_client_method(void) | - | ||||||
161 | { | - | ||||||
162 | return &DTLSv1_client_method_data; executed 15 times by 4 tests: return &DTLSv1_client_method_data; Executed by:
| 15 | ||||||
163 | } | - | ||||||
164 | - | |||||||
165 | const SSL_METHOD * | - | ||||||
166 | dtls1_get_client_method(int ver) | - | ||||||
167 | { | - | ||||||
168 | if (ver == DTLS1_VERSION)
| 0-11 | ||||||
169 | return (DTLSv1_client_method()); executed 11 times by 1 test: return (DTLSv1_client_method()); Executed by:
| 11 | ||||||
170 | return (NULL); never executed: return ( ((void *)0) ); | 0 | ||||||
171 | } | - | ||||||
172 | - | |||||||
173 | int | - | ||||||
174 | dtls1_get_hello_verify(SSL *s) | - | ||||||
175 | { | - | ||||||
176 | long n; | - | ||||||
177 | int al, ok = 0; | - | ||||||
178 | size_t cookie_len; | - | ||||||
179 | uint16_t ssl_version; | - | ||||||
180 | CBS hello_verify_request, cookie; | - | ||||||
181 | - | |||||||
182 | n = s->method->internal->ssl_get_message(s, DTLS1_ST_CR_HELLO_VERIFY_REQUEST_A, | - | ||||||
183 | DTLS1_ST_CR_HELLO_VERIFY_REQUEST_B, -1, s->internal->max_cert_list, &ok); | - | ||||||
184 | - | |||||||
185 | if (!ok)
| 0-11 | ||||||
186 | return ((int)n); never executed: return ((int)n); | 0 | ||||||
187 | - | |||||||
188 | if (S3I(s)->tmp.message_type != DTLS1_MT_HELLO_VERIFY_REQUEST) {
| 0-11 | ||||||
189 | D1I(s)->send_cookie = 0; | - | ||||||
190 | S3I(s)->tmp.reuse_message = 1; | - | ||||||
191 | return (1); executed 11 times by 1 test: return (1); Executed by:
| 11 | ||||||
192 | } | - | ||||||
193 | - | |||||||
194 | if (n < 0)
| 0 | ||||||
195 | goto truncated; never executed: goto truncated; | 0 | ||||||
196 | - | |||||||
197 | CBS_init(&hello_verify_request, s->internal->init_msg, n); | - | ||||||
198 | - | |||||||
199 | if (!CBS_get_u16(&hello_verify_request, &ssl_version))
| 0 | ||||||
200 | goto truncated; never executed: goto truncated; | 0 | ||||||
201 | - | |||||||
202 | if (ssl_version != s->version) {
| 0 | ||||||
203 | SSLerror(s, SSL_R_WRONG_SSL_VERSION); | - | ||||||
204 | s->version = (s->version & 0xff00) | (ssl_version & 0xff); | - | ||||||
205 | al = SSL_AD_PROTOCOL_VERSION; | - | ||||||
206 | goto f_err; never executed: goto f_err; | 0 | ||||||
207 | } | - | ||||||
208 | - | |||||||
209 | if (!CBS_get_u8_length_prefixed(&hello_verify_request, &cookie))
| 0 | ||||||
210 | goto truncated; never executed: goto truncated; | 0 | ||||||
211 | - | |||||||
212 | if (!CBS_write_bytes(&cookie, D1I(s)->cookie,
| 0 | ||||||
213 | sizeof(D1I(s)->cookie), &cookie_len)) {
| 0 | ||||||
214 | D1I(s)->cookie_len = 0; | - | ||||||
215 | al = SSL_AD_ILLEGAL_PARAMETER; | - | ||||||
216 | goto f_err; never executed: goto f_err; | 0 | ||||||
217 | } | - | ||||||
218 | D1I(s)->cookie_len = cookie_len; | - | ||||||
219 | D1I(s)->send_cookie = 1; | - | ||||||
220 | - | |||||||
221 | return 1; never executed: return 1; | 0 | ||||||
222 | - | |||||||
223 | truncated: | - | ||||||
224 | al = SSL_AD_DECODE_ERROR; | - | ||||||
225 | f_err: code before this statement never executed: f_err: | 0 | ||||||
226 | ssl3_send_alert(s, SSL3_AL_FATAL, al); | - | ||||||
227 | return -1; never executed: return -1; | 0 | ||||||
228 | } | - | ||||||
Source code | Switch to Preprocessed file |