OpenCoverage

bn_intern.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/openssl/src/crypto/bn/bn_intern.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/*-
2 * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.-
3 *-
4 * Licensed under the OpenSSL license (the "License"). You may not use-
5 * this file except in compliance with the License. You can obtain a copy-
6 * in the file LICENSE in the source distribution or at-
7 * https://www.openssl.org/source/license.html-
8 */-
9-
10#include "internal/cryptlib.h"-
11#include "bn_lcl.h"-
12-
13/*-
14 * Determine the modified width-(w+1) Non-Adjacent Form (wNAF) of 'scalar'.-
15 * This is an array r[] of values that are either zero or odd with an-
16 * absolute value less than 2^w satisfying-
17 * scalar = \sum_j r[j]*2^j-
18 * where at most one of any w+1 consecutive digits is non-zero-
19 * with the exception that the most significant digit may be only-
20 * w-1 zeros away from that next non-zero digit.-
21 */-
22signed char *bn_compute_wNAF(const BIGNUM *scalar, int w, size_t *ret_len)-
23{-
24 int window_val;-
25 signed char *r = NULL;-
26 int sign = 1;-
27 int bit, next_bit, mask;-
28 size_t len = 0, j;-
29-
30 if (BN_is_zero(scalar)) {
BN_is_zero(scalar)Description
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
4-2205
31 r = OPENSSL_malloc(1);-
32 if (r == NULL) {
r == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
33 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_MALLOC_FAILURE);-
34 goto err;
never executed: goto err;
0
35 }-
36 r[0] = 0;-
37 *ret_len = 1;-
38 return r;
executed 4 times by 1 test: return r;
Executed by:
  • libcrypto.so.1.1
4
39 }-
40-
41 if (w <= 0 || w > 7) { /* 'signed char' can represent integers with
w <= 0Description
TRUEnever evaluated
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
w > 7Description
TRUEnever evaluated
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
0-2205
42 * absolute values less than 2^7 */-
43 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);-
44 goto err;
never executed: goto err;
0
45 }-
46 bit = 1 << w; /* at most 128 */-
47 next_bit = bit << 1; /* at most 256 */-
48 mask = next_bit - 1; /* at most 255 */-
49-
50 if (BN_is_negative(scalar)) {
BN_is_negative(scalar)Description
TRUEevaluated 586 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 1619 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
586-1619
51 sign = -1;-
52 }
executed 586 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
586
53-
54 if (scalar->d == NULL || scalar->top == 0) {
scalar->d == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
scalar->top == 0Description
TRUEnever evaluated
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
0-2205
55 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);-
56 goto err;
never executed: goto err;
0
57 }-
58-
59 len = BN_num_bits(scalar);-
60 r = OPENSSL_malloc(len + 1); /*-
61 * Modified wNAF may be one digit longer than binary representation-
62 * (*ret_len will be set to the actual length, i.e. at most-
63 * BN_num_bits(scalar) + 1)-
64 */-
65 if (r == NULL) {
r == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
0-2205
66 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_MALLOC_FAILURE);-
67 goto err;
never executed: goto err;
0
68 }-
69 window_val = scalar->d[0] & mask;-
70 j = 0;-
71 while ((window_val != 0) || (j + w + 1 < len)) { /* if j+w+1 >= len,
(window_val != 0)Description
TRUEevaluated 519118 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
FALSEevaluated 93308 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
(j + w + 1 < len)Description
TRUEevaluated 91103 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
2205-519118
72 * window_val will not-
73 * increase */-
74 int digit = 0;-
75-
76 /* 0 <= window_val <= 2^(w+1) */-
77-
78 if (window_val & 1) {
window_val & 1Description
TRUEevaluated 89410 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
FALSEevaluated 520811 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
89410-520811
79 /* 0 < window_val < 2^(w+1) */-
80-
81 if (window_val & bit) {
window_val & bitDescription
TRUEevaluated 43088 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
FALSEevaluated 46322 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
43088-46322
82 digit = window_val - next_bit; /* -2^w < digit < 0 */-
83-
84#if 1 /* modified wNAF */-
85 if (j + w + 1 >= len) {
j + w + 1 >= lenDescription
TRUEevaluated 184 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 42904 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
184-42904
86 /*-
87 * Special case for generating modified wNAFs:-
88 * no new bits will be added into window_val,-
89 * so using a positive digit here will decrease-
90 * the total length of the representation-
91 */-
92-
93 digit = window_val & (mask >> 1); /* 0 < digit < 2^w */-
94 }
executed 184 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
184
95#endif-
96 } else {
executed 43088 times by 2 tests: end of block
Executed by:
  • libcrypto.so.1.1
  • sm2_internal_test
43088
97 digit = window_val; /* 0 < digit < 2^w */-
98 }
executed 46322 times by 2 tests: end of block
Executed by:
  • libcrypto.so.1.1
  • sm2_internal_test
46322
99-
100 if (digit <= -bit || digit >= bit || !(digit & 1)) {
digit <= -bitDescription
TRUEnever evaluated
FALSEevaluated 89410 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
digit >= bitDescription
TRUEnever evaluated
FALSEevaluated 89410 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
!(digit & 1)Description
TRUEnever evaluated
FALSEevaluated 89410 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
0-89410
101 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);-
102 goto err;
never executed: goto err;
0
103 }-
104-
105 window_val -= digit;-
106-
107 /*-
108 * now window_val is 0 or 2^(w+1) in standard wNAF generation;-
109 * for modified window NAFs, it may also be 2^w-
110 */-
111 if (window_val != 0 && window_val != next_bit
window_val != 0Description
TRUEevaluated 43088 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
FALSEevaluated 46322 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
window_val != next_bitDescription
TRUEevaluated 184 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 42904 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
184-46322
112 && window_val != bit) {
window_val != bitDescription
TRUEnever evaluated
FALSEevaluated 184 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-184
113 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);-
114 goto err;
never executed: goto err;
0
115 }-
116 }
executed 89410 times by 2 tests: end of block
Executed by:
  • libcrypto.so.1.1
  • sm2_internal_test
89410
117-
118 r[j++] = sign * digit;-
119-
120 window_val >>= 1;-
121 window_val += bit * BN_is_bit_set(scalar, j + w);-
122-
123 if (window_val > next_bit) {
window_val > next_bitDescription
TRUEnever evaluated
FALSEevaluated 610221 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
0-610221
124 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);-
125 goto err;
never executed: goto err;
0
126 }-
127 }
executed 610221 times by 2 tests: end of block
Executed by:
  • libcrypto.so.1.1
  • sm2_internal_test
610221
128-
129 if (j > len + 1) {
j > len + 1Description
TRUEnever evaluated
FALSEevaluated 2205 times by 2 tests
Evaluated by:
  • libcrypto.so.1.1
  • sm2_internal_test
0-2205
130 BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);-
131 goto err;
never executed: goto err;
0
132 }-
133 *ret_len = j;-
134 return r;
executed 2205 times by 2 tests: return r;
Executed by:
  • libcrypto.so.1.1
  • sm2_internal_test
2205
135-
136 err:-
137 OPENSSL_free(r);-
138 return NULL;
never executed: return ((void *)0) ;
0
139}-
140-
141int bn_get_top(const BIGNUM *a)-
142{-
143 return a->top;
executed 17493 times by 2 tests: return a->top;
Executed by:
  • libcrypto.so.1.1
  • sm2_internal_test
17493
144}-
145-
146int bn_get_dmax(const BIGNUM *a)-
147{-
148 return a->dmax;
never executed: return a->dmax;
0
149}-
150-
151void bn_set_all_zero(BIGNUM *a)-
152{-
153 int i;-
154-
155 for (i = a->top; i < a->dmax; i++)
i < a->dmaxDescription
TRUEevaluated 47286 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 38978 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
38978-47286
156 a->d[i] = 0;
executed 47286 times by 1 test: a->d[i] = 0;
Executed by:
  • libcrypto.so.1.1
47286
157}
executed 38978 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
38978
158-
159int bn_copy_words(BN_ULONG *out, const BIGNUM *in, int size)-
160{-
161 if (in->top > size)
in->top > sizeDescription
TRUEnever evaluated
FALSEevaluated 43574 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-43574
162 return 0;
never executed: return 0;
0
163-
164 memset(out, 0, sizeof(*out) * size);-
165 if (in->d != NULL)
in->d != ((void *)0)Description
TRUEevaluated 43572 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 2 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
2-43572
166 memcpy(out, in->d, sizeof(*out) * in->top);
executed 43572 times by 1 test: memcpy(out, in->d, sizeof(*out) * in->top);
Executed by:
  • libcrypto.so.1.1
43572
167 return 1;
executed 43574 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
43574
168}-
169-
170BN_ULONG *bn_get_words(const BIGNUM *a)-
171{-
172 return a->d;
executed 29449 times by 1 test: return a->d;
Executed by:
  • libcrypto.so.1.1
29449
173}-
174-
175void bn_set_static_words(BIGNUM *a, const BN_ULONG *words, int size)-
176{-
177 /*-
178 * |const| qualifier omission is compensated by BN_FLG_STATIC_DATA-
179 * flag, which effectively means "read-only data".-
180 */-
181 a->d = (BN_ULONG *)words;-
182 a->dmax = a->top = size;-
183 a->neg = 0;-
184 a->flags |= BN_FLG_STATIC_DATA;-
185 bn_correct_top(a);-
186}
never executed: end of block
0
187-
188int bn_set_words(BIGNUM *a, const BN_ULONG *words, int num_words)-
189{-
190 if (bn_wexpand(a, num_words) == NULL) {
bn_wexpand(a, ...== ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 31069 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-31069
191 BNerr(BN_F_BN_SET_WORDS, ERR_R_MALLOC_FAILURE);-
192 return 0;
never executed: return 0;
0
193 }-
194-
195 memcpy(a->d, words, sizeof(BN_ULONG) * num_words);-
196 a->top = num_words;-
197 bn_correct_top(a);-
198 return 1;
executed 31069 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
31069
199}-
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.2.2