Security-55471.14.18.tar.gz

[apple/security.git] / utilities / src / der_date.c

//
//  SecCFDER_CFDate.c
//  utilities
//
//  Created by Michael Brouwer on 7/7/12.
//  Copyright (c) 2012 Apple Inc. All rights reserved.
//

#include "utilities/SecCFRelease.h"
#include "utilities/der_date.h"
#include "utilities/der_plist.h"
#include "utilities/der_plist_internal.h"

#include <corecrypto/ccder.h>
#include <CoreFoundation/CoreFoundation.h>

#include <math.h>

#define NULL_TIME NAN

CFAbsoluteTime SecCFGregorianDateGetAbsoluteTime(CFGregorianDate g, CFTimeInterval timeZoneOffset, CFErrorRef *error);
CFGregorianDate SecCFAbsoluteTimeGetGregorianDate(CFAbsoluteTime at, CFTimeInterval timeZoneOffset, CFErrorRef *error);

/* Cumalitive number of days in the year for months up to month i.  */
static int mdays[13] = { 0, 31, 59, 90, 120, 151, 181, 212, 243, 273, 304, 334, 365 };

CFAbsoluteTime SecCFGregorianDateGetAbsoluteTime(CFGregorianDate g, CFTimeInterval timeZoneOffset, CFErrorRef *error) {
    int day = g.day;
    int is_leap_year = g.year % 4 == 0 && (g.year % 100 != 0 || g.year % 400 == 0) ? 1 : 0;
    if (g.month < 1 || g.month > 12 || day < 1 || day > 31 || g.hour >= 24 || g.minute >= 60 || g.second >= 60.0
        || (g.month == 2 && day > mdays[g.month] - mdays[g.month - 1] + is_leap_year)
        || (g.month != 2 && day > mdays[g.month] - mdays[g.month - 1])) {
        /* Invalid date. */
        SecCFDERCreateError(-1000, CFSTR("Invalid date."), 0, error);
        return NULL_TIME;
    }

    int dy = g.year - 2001;
    if (dy < 0) {
        dy += 1;
        day -= 1;
    }

    int leap_days = dy / 4 - dy / 100 + dy / 400;
    day += ((g.year - 2001) * 365 + leap_days) + mdays[g.month - 1] - 1;
    if (g.month > 2)
        day += is_leap_year;

#if 0
    int64_t time = day;
    time *= 24;
    time += g.hour;
    time *= 60;
    time += g.minute;
    time *= 60;
    time += lrint(g.second);
    time -= lrint(timeZoneOffset);
    return time;
#else
    CFAbsoluteTime absTime = (CFAbsoluteTime)((day * 24 + g.hour) * 60 + g.minute) * 60 + g.second;
	return absTime - timeZoneOffset;
#endif
}

CFGregorianDate SecCFAbsoluteTimeGetGregorianDate(CFAbsoluteTime at, CFTimeInterval timeZoneOffset, CFErrorRef *error) {
    CFTimeZoneRef tz = CFTimeZoneCreateWithTimeIntervalFromGMT(0, timeZoneOffset);
    if (!tz) {
        SecCFDERCreateError(-1000, CFSTR("timezone creation failed."), 0, error);
        CFGregorianDate g = {};
        return g;
    } else {
        CFGregorianDate g = CFAbsoluteTimeGetGregorianDate(at, tz);
        CFRelease(tz);
        return g;
    }
}


static int der_get_char(const uint8_t **der_p, const uint8_t *der_end,
                         CFErrorRef *error) {
    const uint8_t *der = *der_p;
    if (!der) {
        /* Don't create a new error in this case. */
        return -1;
    }

    if (der >= der_end) {
        SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                            CFSTR("Unexpected end of datetime"), 0, error);
        *der_p = NULL;
        return -1;
    }

    int ch = *der++;
    *der_p = der;
    return ch;
}


static int der_decode_decimal(const uint8_t **der_p, const uint8_t *der_end,
                             CFErrorRef *error) {
    char ch = der_get_char(der_p, der_end, error);
    if (ch < '0' || ch > '9') {
        SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                            CFSTR("Not a decimal digit"), 0, error);
        *der_p = NULL;
        return -1;
    }
    return ch - '0';
}

static int der_decode_decimal_pair(const uint8_t **der_p, const uint8_t *der_end,
                            CFErrorRef *error) {
    return (10 * der_decode_decimal(der_p, der_end, error))
        + der_decode_decimal(der_p, der_end, error);
}

static int der_peek_byte(const uint8_t *der, const uint8_t *der_end) {
    if (!der || der >= der_end)
        return -1;

    return *der;
}

static const uint8_t *der_decode_decimal_fraction(double *fraction, CFErrorRef *error,
                                                  const uint8_t* der, const uint8_t *der_end) {
    int ch = der_peek_byte(der, der_end);
    if (ch == -1) {
        der = NULL;
    } else if (ch == '.') {
        uint64_t divisor = 1;
        uint64_t value = 0;
        int last = -1;
        while (++der < der_end) {
            last = ch;
            ch = *der;
            if (ch < '0' || ch > '9') {
                break;
            }
            if (divisor < UINT64_MAX / 10) {
                divisor *= 10;
                value *= 10;
                value += (ch - '0');
            }
        }
        if (der >= der_end)
            der = NULL;
        else if (last == '0') {
            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                                CFSTR("fraction ends in 0"), 0, error);
            der = NULL;
        } else if (last == '.') {
            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                                CFSTR("fraction without digits"), 0, error);
            der = NULL;
        } else {
            *fraction = (double)value / divisor;
        }
    } else {
        *fraction = 0.0;
    }

    return der;
}

static const CFTimeInterval der_decode_timezone_offset(const uint8_t **der_p,
                                                       const uint8_t *der_end,
                                                       CFErrorRef *error) {
    CFTimeInterval timeZoneOffset;
    int ch = der_get_char(der_p, der_end, error);
    if (ch == 'Z') {
        /* Zulu time. */
        timeZoneOffset = 0.0;
    } else {
		/* ZONE INDICATOR */
        int multiplier;
        if (ch == '-')
            multiplier = -60;
        else if (ch == '+')
            multiplier = +60;
        else {
            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                                CFSTR("Invalid datetime character"), 0, error);
            timeZoneOffset = NULL_TIME;
        }
        
        timeZoneOffset = multiplier *
            (der_decode_decimal_pair(der_p, der_end, error)
             * 60 + der_decode_decimal_pair(der_p, der_end, error));
    }
    return timeZoneOffset;
}

static const uint8_t* der_decode_commontime_body(CFAbsoluteTime *at, CFErrorRef *error, SInt32 year,
                                                 const uint8_t* der, const uint8_t *der_end)
{
    CFGregorianDate g;
    g.year = year;
	g.month = der_decode_decimal_pair(&der, der_end, error);
	g.day = der_decode_decimal_pair(&der, der_end, error);
	g.hour = der_decode_decimal_pair(&der, der_end, error);
	g.minute = der_decode_decimal_pair(&der, der_end, error);
    g.second = der_decode_decimal_pair(&der, der_end, error);
    double fraction;
    der = der_decode_decimal_fraction(&fraction, error, der, der_end);

	CFTimeInterval timeZoneOffset = der_decode_timezone_offset(&der, der_end, error);

#if 0
    secdebug("dateparse",
             "date %.*s year: %04d%02d%02d%02d%02d%02d%+05g",
             length, bytes, g.year, g.month,
             g.day, g.hour, g.minute, g.second,
             timeZoneOffset / 60);
#endif

    if (der) {
        if (der != der_end) {
            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                                CFSTR("trailing garbage at end of datetime"), 0, error);
            return NULL;
        }

        *at = SecCFGregorianDateGetAbsoluteTime(g, timeZoneOffset, error) + fraction;
        if (*at == NULL_TIME)
            return NULL;
    }

    return der;
}

const uint8_t* der_decode_generalizedtime_body(CFAbsoluteTime *at, CFErrorRef *error,
                                               const uint8_t* der, const uint8_t *der_end)
{
    SInt32 year = 100 * der_decode_decimal_pair(&der, der_end, error) + der_decode_decimal_pair(&der, der_end, error);
    return der_decode_commontime_body(at, error, year, der, der_end);
}

const uint8_t* der_decode_universaltime_body(CFAbsoluteTime *at, CFErrorRef *error,
                                             const uint8_t* der, const uint8_t *der_end)
{
    SInt32 year = der_decode_decimal_pair(&der, der_end, error);
    if (year < 50) {
        /* 0  <= year <  50 : assume century 21 */
        year += 2000;
    } else if (year < 70) {
        /* 50 <= year <  70 : illegal per PKIX */
        SecCFDERCreateError(kSecDERErrorUnknownEncoding,
                            CFSTR("Invalid universal time year between 50 and 70"), 0, error);
        der = NULL;
    } else {
        /* 70 <  year <= 99 : assume century 20 */
        year += 1900;
    }

    return der_decode_commontime_body(at, error, year, der, der_end);
}

const uint8_t* der_decode_date(CFAllocatorRef allocator, CFOptionFlags mutability,
                               CFDateRef* date, CFErrorRef *error,
                               const uint8_t* der, const uint8_t *der_end)
{
    if (NULL == der)
        return NULL;

    der = ccder_decode_constructed_tl(CCDER_GENERALIZED_TIME, &der_end, der, der_end);
    CFAbsoluteTime at;
    der = der_decode_generalizedtime_body(&at, error, der, der_end);
    if (der) {
        *date = CFDateCreate(allocator, at);
        if (NULL == *date) {
            SecCFDERCreateError(kSecDERErrorUnderlyingError, CFSTR("Failed to create date"), NULL, error);
            return NULL;
        }
    }
    return der;
}

extern char *__dtoa(double _d, int mode, int ndigits, int *decpt, int *sign, char **rve);
extern void  __freedtoa(char *);

static size_t ccder_sizeof_nanoseconds(CFAbsoluteTime at) {
    int dotoff;
    int sign;
    char *end;
    char *str = __dtoa(at, 0, 0, &dotoff, &sign, &end);
    ptrdiff_t len = end - str;
    __freedtoa(str);
    return len < dotoff ? 0 : len - dotoff;
    //return len < dotoff ? 0 : len - dotoff > 9 ? 9 : len - dotoff;
}

size_t der_sizeof_generalizedtime_body(CFAbsoluteTime at, CFErrorRef *error)
{
    size_t subsec_digits = ccder_sizeof_nanoseconds(at);

    /* Generalized zulu time YYYYMMDDhhmmss[.ssss]Z */
    return subsec_digits ? 16 + subsec_digits : 15;
}

size_t der_sizeof_generalizedtime(CFAbsoluteTime at, CFErrorRef *error)
{
    return ccder_sizeof(CCDER_GENERALIZED_TIME,
                        der_sizeof_generalizedtime_body(at, error));
}

size_t der_sizeof_date(CFDateRef date, CFErrorRef *error)
{
    return der_sizeof_generalizedtime(CFDateGetAbsoluteTime(date), error);
}


static uint8_t *ccder_encode_byte(uint8_t byte,
                                  const uint8_t *der, uint8_t *der_end) {
    if (der + 1 > der_end) {
        return NULL;
    }
    *--der_end = byte;
    return der_end;
}

static uint8_t *ccder_encode_decimal_pair(int v, const uint8_t *der,
                                          uint8_t *der_end) {
    if (der + 2 > der_end) {
        return NULL;
    }
    assert(v < 100);
    *--der_end = '0' + v % 10;
    *--der_end = '0' + v / 10;
    return der_end;
}

static uint8_t *ccder_encode_decimal_quad(int v, const uint8_t *der,
                                          uint8_t *der_end) {
    return ccder_encode_decimal_pair(v / 100, der,
           ccder_encode_decimal_pair(v % 100, der, der_end));
}

static uint8_t *ccder_encode_nanoseconds(CFAbsoluteTime at, const uint8_t *der,
                                         uint8_t *der_end) {
    int dotoff;
    int sign;
    char *end;
    char *str = __dtoa(at, 0, 0, &dotoff, &sign, &end);
    char *begin = str + (dotoff < 0 ? 0 : dotoff);
    // Compute 1.0000000 - fraction in ascii space
    if (at < 0.0 && begin < end) {
        char *p = end - 1;
        // Borrow for last digit
        *p = ('9' + 1) - (*p - '0');
        while (p-- > begin) {
            // Every other digit is a 9 since we borrowed from the last one
            *p = '9' - (*p - '0');
        }
    }

    ptrdiff_t len = end - str;
    if (len > dotoff) {
        if (dotoff < 0) {
            assert(-1.0 < at && at < 1.0);
            der_end = ccder_encode_body(len, (const uint8_t *)str, der, der_end);
            der_end = ccder_encode_body_nocopy(-dotoff, der, der_end);
            if (der_end)
                memset(der_end, at < 0.0 ? '9' : '0', -dotoff);
        } else {
            der_end = ccder_encode_body(len - dotoff, (const uint8_t *)(str + dotoff), der, der_end);
        }
        der_end = ccder_encode_byte('.', der, der_end);
    }
    __freedtoa(str);

    return der_end;
}

/* Encode generalized zulu time YYYYMMDDhhmmss[.ssss]Z */
uint8_t* der_encode_generalizedtime_body(CFAbsoluteTime at, CFErrorRef *error,
                                         const uint8_t *der, uint8_t *der_end)
{
    CFGregorianDate g = SecCFAbsoluteTimeGetGregorianDate(floor(at), 0.0, error);
    if (g.year == 0)
        return NULL;

    return ccder_encode_decimal_quad(g.year, der,
           ccder_encode_decimal_pair(g.month, der,
           ccder_encode_decimal_pair(g.day, der,
           ccder_encode_decimal_pair(g.hour, der,
           ccder_encode_decimal_pair(g.minute, der,
           ccder_encode_decimal_pair(g.second, der,
           ccder_encode_nanoseconds(at, der,
           ccder_encode_byte('Z', der, der_end))))))));
}

uint8_t* der_encode_generalizedtime(CFAbsoluteTime at, CFErrorRef *error,
                                    const uint8_t *der, uint8_t *der_end)
{
    return ccder_encode_constructed_tl(CCDER_GENERALIZED_TIME, der_end, der,
           der_encode_generalizedtime_body(at, error, der, der_end));
}


uint8_t* der_encode_date(CFDateRef date, CFErrorRef *error,
                         const uint8_t *der, uint8_t *der_end)
{
    return der_encode_generalizedtime(CFDateGetAbsoluteTime(date), error,
                                      der, der_end);
}