-/*
- * Copyright (c) 2003-2006,2011-2012,2014 Apple Inc. All Rights Reserved.
- *
- * @APPLE_LICENSE_HEADER_START@
- *
- * This file contains Original Code and/or Modifications of Original Code
- * as defined in and that are subject to the Apple Public Source License
- * Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
- *
- * The Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
- * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
- * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
- * Please see the License for the specific language governing rights and
- * limitations under the License.
- *
- * @APPLE_LICENSE_HEADER_END@
- */
-
-
-#include "dictionary.h"
-#include <ctype.h>
-#include <syslog.h>
-
-namespace Security {
-
-static uint32_t GetUInt32(unsigned char*& finger)
-{
- uint32 result = 0;
- unsigned i;
-
- for (i = 0; i < sizeof(uint32); ++i)
- {
- result = (result << 8) | *finger++;
- }
-
- return result;
-}
-
-
-
-CssmData NameValuePair::CloneData (const CssmData &value)
-{
- void* clonedData = (void*) new unsigned char [value.length ()];
- if (clonedData != NULL)
- {
- memcpy (clonedData, value.data (), value.length ());
- return CssmData (clonedData, value.length ());
- }
- else
- {
- CssmError::throwMe(CSSM_ERRCODE_INTERNAL_ERROR);
- }
-}
-
-
-
-NameValuePair::NameValuePair (uint32 name, const CssmData &value) : mName (name), mValue (CloneData (value))
-{
-}
-
-
-
-NameValuePair::NameValuePair (const CssmData &data)
-{
- // the first four bytes are the name
- unsigned char* finger = (unsigned char*) data.data ();
- mName = GetUInt32(finger);
- uint32 length = GetUInt32(finger);
-
- // what's left is the data
- mValue = CloneData (CssmData (finger, length));
-}
-
-
-
-NameValuePair::~NameValuePair ()
-{
- delete (unsigned char*) mValue.data ();
-}
-
-
-
-void NameValuePair::Export (CssmData &data) const
-{
- // export the data in the format name length data
- size_t outSize = 2 * sizeof (uint32) + mValue.length ();
- unsigned char* d = (unsigned char*) malloc(outSize);
- unsigned char* finger = d;
-
- // export the name
- uint32 intBuffer = mName;
-
- int i;
- for (i = sizeof (uint32) - 1; i >= 0; --i)
- {
- finger[i] = intBuffer & 0xFF;
- intBuffer >>= 8;
- }
-
- // export the length
- finger += sizeof (uint32);
- intBuffer = (uint32)mValue.length ();
- for (i = sizeof (uint32) - 1; i >= 0; --i)
- {
- finger[i] = intBuffer & 0xFF;
- intBuffer >>= 8;
- }
-
- // export the data
- finger += sizeof (uint32);
- memcpy (finger, mValue.data (), mValue.length ());
-
- data = CssmData (d, outSize);
-}
-
-
-
-NameValueDictionary::NameValueDictionary ()
-{
-}
-
-
-
-NameValueDictionary::~NameValueDictionary ()
-{
- // to prevent leaks, delete all members of the vector
- size_t i = mVector.size ();
- while (i > 0)
- {
- delete mVector[--i];
-
- mVector.erase (mVector.begin () + i);
- }
-}
-
-
-
-// To work around 5964438, move code out of the constructor
-void NameValueDictionary::MakeFromData(const CssmData &data)
-{
- // reconstruct a name value dictionary from a series of exported NameValuePair blobs
- unsigned char* finger = (unsigned char*) data.data ();
- unsigned char* target = finger + data.length ();
-
- bool done = false;
-
- do
- {
- // compute the length of data blob
- unsigned int i;
- uint32 length = 0;
- for (i = sizeof (uint32); i < 2 * sizeof (uint32); ++i)
- {
- length = (length << 8) | finger[i];
- }
-
- if (length > data.length())
- {
- break;
- }
-
- // add the length of the "header"
- length += 2 * sizeof (uint32);
-
- // do some sanity checking on the data.
- uint32 itemLength = 0;
- unsigned char* fingerX = finger;
-
- // extract the name in a printable format
- char nameBuff[5];
- char* nameFinger = nameBuff;
-
- // work around a bug with invalid lengths coming from securityd
- if (fingerX + sizeof(uint32) < target)
- {
- *nameFinger++ = (char) *fingerX++;
- *nameFinger++ = (char) *fingerX++;
- *nameFinger++ = (char) *fingerX++;
- *nameFinger++ = (char) *fingerX++;
- *nameFinger++ = 0;
-
- itemLength = GetUInt32(fingerX);
-
- if (fingerX + itemLength > target) // this is the bug
- {
- done = true;
- }
- }
-
- // This shouldn't crash any more...
- Insert (new NameValuePair (CssmData (finger, length)));
-
- // skip to the next data
- finger += length;
- } while (!done && finger < target);
-}
-
-
-
-NameValueDictionary::NameValueDictionary (const CssmData &data)
-{
- MakeFromData(data);
-}
-
-
-
-void NameValueDictionary::Insert (NameValuePair* pair)
-{
- mVector.push_back (pair);
-}
-
-
-
-void NameValueDictionary::RemoveByName (uint32 name)
-{
- int which = FindPositionByName (name);
- if (which != -1)
- {
- NameValuePair* nvp = mVector[which];
- mVector.erase (mVector.begin () + which);
- delete nvp;
- }
-}
-
-
-
-int NameValueDictionary::FindPositionByName (uint32 name) const
-{
- int target = CountElements ();
- int i;
-
- for (i = 0; i < target; ++i)
- {
- if (mVector[i]->Name () == name)
- {
- return i;
- }
- }
-
- return -1;
-}
-
-
-
-const NameValuePair* NameValueDictionary::FindByName (uint32 name) const
-{
- int which = FindPositionByName (name);
- return which == -1 ? NULL : mVector[which];
-}
-
-
-
-
-int NameValueDictionary::CountElements () const
-{
- return (int)mVector.size ();
-}
-
-
-
-const NameValuePair* NameValueDictionary::GetElement (int which)
-{
- return mVector[which];
-}
-
-
-
-void NameValueDictionary::Export (CssmData &outData)
-{
- // get each element in the dictionary, and add it to the data blob
- int i;
- uint32 length = 0;
- unsigned char* data = 0;
-
- for (i = 0; i < CountElements (); ++i)
- {
- CssmData exportedData;
- const NameValuePair *nvp = GetElement (i);
- nvp->Export (exportedData);
-
- uint32 oldLength = length;
- length += exportedData.length ();
- data = (unsigned char*) realloc (data, length);
-
- memcpy (data + oldLength, exportedData.data (), exportedData.length ());
-
- free(exportedData.data());
- }
-
- outData = CssmData (data, length);
-}
-
-
-
-void NameValueDictionary::MakeNameValueDictionaryFromDLDbIdentifier (const DLDbIdentifier &identifier, NameValueDictionary &nvd)
-{
- // get the subserviceID
- DLDbIdentifier d = identifier;
-
- const CssmSubserviceUid &ssuid = identifier.ssuid ();
- CSSM_SUBSERVICE_UID baseID = ssuid;
- baseID.Version.Major = h2n (baseID.Version.Major);
- baseID.Version.Minor = h2n (baseID.Version.Minor);
- baseID.SubserviceId = h2n (baseID.SubserviceId);
- baseID.SubserviceType = h2n (baseID.SubserviceType);
-
- nvd.Insert (new NameValuePair (SSUID_KEY, CssmData::wrap(baseID)));
-
- // get the name
- const char* dbName = identifier.dbName ();
- if (dbName != NULL)
- {
- nvd.Insert (new NameValuePair (DB_NAME, CssmData::wrap (dbName, strlen (dbName) + 1)));
- }
-
- // get the net address
- const CSSM_NET_ADDRESS* add = identifier.dbLocation ();
- if (add != NULL)
- {
- nvd.Insert (new NameValuePair (DB_LOCATION, CssmData::wrap (add)));
- }
-}
-
-
-
-DLDbIdentifier NameValueDictionary::MakeDLDbIdentifierFromNameValueDictionary (const NameValueDictionary &nvd)
-{
- /*
- According to the code in MakeNameValueDictionaryFromDLDbIdentifier, SSUID_KEY
- is required, but both DB_NAME and DB_LOCATION are allowed to be missing. In
- all of these cases, it is possible that FindByName returns NULL.
- */
-
- const NameValuePair *nvpSSUID = nvd.FindByName (SSUID_KEY);
- if (nvpSSUID == NULL)
- CssmError::throwMe(CSSM_ERRCODE_INTERNAL_ERROR);
-
- CSSM_SUBSERVICE_UID* uid = (CSSM_SUBSERVICE_UID*) nvpSSUID->Value ().data ();
- if (uid == NULL)
- {
- CssmError::throwMe(CSSM_ERRCODE_INTERNAL_ERROR);
- }
-
- CSSM_SUBSERVICE_UID baseID = *uid;
-
- baseID.Version.Major = n2h (baseID.Version.Major);
- baseID.Version.Minor = n2h (baseID.Version.Minor);
- baseID.SubserviceId = n2h (baseID.SubserviceId);
- baseID.SubserviceType = n2h (baseID.SubserviceType);
-
- const NameValuePair *nvpDBNAME = nvd.FindByName (DB_NAME);
- char* name = nvpDBNAME ? (char*) nvpDBNAME->Value ().data () : NULL;
-
- const NameValuePair* nvp = nvd.FindByName (DB_LOCATION);
- CSSM_NET_ADDRESS* address = nvp ? (CSSM_NET_ADDRESS*) nvp->Value ().data () : NULL;
-
- return DLDbIdentifier (baseID, name, address);
-}
-
-}; // end Security namespace