]> git.saurik.com Git - apple/security.git/blobdiff - utilities/src/der_date.c
Security-55471.tar.gz
[apple/security.git] / utilities / src / der_date.c
diff --git a/utilities/src/der_date.c b/utilities/src/der_date.c
new file mode 100644 (file)
index 0000000..e8a8e63
--- /dev/null
@@ -0,0 +1,406 @@
+//
+//  SecCFDER_CFDate.c
+//  utilities
+//
+//  Created by Michael Brouwer on 7/7/12.
+//  Copyright (c) 2012 Apple Inc. All rights reserved.
+//
+
+#include "utilities/SecCFRelease.h"
+#include "utilities/der_date.h"
+#include "utilities/der_plist.h"
+#include "utilities/der_plist_internal.h"
+
+#include <corecrypto/ccder.h>
+#include <CoreFoundation/CoreFoundation.h>
+
+#include <math.h>
+
+#define NULL_TIME NAN
+
+CFAbsoluteTime SecCFGregorianDateGetAbsoluteTime(CFGregorianDate g, CFTimeInterval timeZoneOffset, CFErrorRef *error);
+CFGregorianDate SecCFAbsoluteTimeGetGregorianDate(CFAbsoluteTime at, CFTimeInterval timeZoneOffset, CFErrorRef *error);
+
+/* Cumalitive number of days in the year for months up to month i.  */
+static int mdays[13] = { 0, 31, 59, 90, 120, 151, 181, 212, 243, 273, 304, 334, 365 };
+
+CFAbsoluteTime SecCFGregorianDateGetAbsoluteTime(CFGregorianDate g, CFTimeInterval timeZoneOffset, CFErrorRef *error) {
+    int day = g.day;
+    int is_leap_year = g.year % 4 == 0 && (g.year % 100 != 0 || g.year % 400 == 0) ? 1 : 0;
+    if (g.month < 1 || g.month > 12 || day < 1 || day > 31 || g.hour >= 24 || g.minute >= 60 || g.second >= 60.0
+        || (g.month == 2 && day > mdays[g.month] - mdays[g.month - 1] + is_leap_year)
+        || (g.month != 2 && day > mdays[g.month] - mdays[g.month - 1])) {
+        /* Invalid date. */
+        SecCFDERCreateError(-1000, CFSTR("Invalid date."), 0, error);
+        return NULL_TIME;
+    }
+
+    int dy = g.year - 2001;
+    if (dy < 0) {
+        dy += 1;
+        day -= 1;
+    }
+
+    int leap_days = dy / 4 - dy / 100 + dy / 400;
+    day += ((g.year - 2001) * 365 + leap_days) + mdays[g.month - 1] - 1;
+    if (g.month > 2)
+        day += is_leap_year;
+
+#if 0
+    int64_t time = day;
+    time *= 24;
+    time += g.hour;
+    time *= 60;
+    time += g.minute;
+    time *= 60;
+    time += lrint(g.second);
+    time -= lrint(timeZoneOffset);
+    return time;
+#else
+    CFAbsoluteTime absTime = (CFAbsoluteTime)((day * 24 + g.hour) * 60 + g.minute) * 60 + g.second;
+       return absTime - timeZoneOffset;
+#endif
+}
+
+CFGregorianDate SecCFAbsoluteTimeGetGregorianDate(CFAbsoluteTime at, CFTimeInterval timeZoneOffset, CFErrorRef *error) {
+    CFTimeZoneRef tz = CFTimeZoneCreateWithTimeIntervalFromGMT(0, timeZoneOffset);
+    if (!tz) {
+        SecCFDERCreateError(-1000, CFSTR("timezone creation failed."), 0, error);
+        CFGregorianDate g = {};
+        return g;
+    } else {
+        CFGregorianDate g = CFAbsoluteTimeGetGregorianDate(at, tz);
+        CFRelease(tz);
+        return g;
+    }
+}
+
+
+static int der_get_char(const uint8_t **der_p, const uint8_t *der_end,
+                         CFErrorRef *error) {
+    const uint8_t *der = *der_p;
+    if (!der) {
+        /* Don't create a new error in this case. */
+        return -1;
+    }
+
+    if (der >= der_end) {
+        SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                            CFSTR("Unexpected end of datetime"), 0, error);
+        *der_p = NULL;
+        return -1;
+    }
+
+    int ch = *der++;
+    *der_p = der;
+    return ch;
+}
+
+
+static int der_decode_decimal(const uint8_t **der_p, const uint8_t *der_end,
+                             CFErrorRef *error) {
+    char ch = der_get_char(der_p, der_end, error);
+    if (ch < '0' || ch > '9') {
+        SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                            CFSTR("Not a decimal digit"), 0, error);
+        *der_p = NULL;
+        return -1;
+    }
+    return ch - '0';
+}
+
+static int der_decode_decimal_pair(const uint8_t **der_p, const uint8_t *der_end,
+                            CFErrorRef *error) {
+    return (10 * der_decode_decimal(der_p, der_end, error))
+        + der_decode_decimal(der_p, der_end, error);
+}
+
+static int der_peek_byte(const uint8_t *der, const uint8_t *der_end) {
+    if (!der || der >= der_end)
+        return -1;
+
+    return *der;
+}
+
+static const uint8_t *der_decode_decimal_fraction(double *fraction, CFErrorRef *error,
+                                                  const uint8_t* der, const uint8_t *der_end) {
+    int ch = der_peek_byte(der, der_end);
+    if (ch == -1) {
+        der = NULL;
+    } else if (ch == '.') {
+        uint64_t divisor = 1;
+        uint64_t value = 0;
+        int last = -1;
+        while (++der < der_end) {
+            last = ch;
+            ch = *der;
+            if (ch < '0' || ch > '9') {
+                break;
+            }
+            if (divisor < UINT64_MAX / 10) {
+                divisor *= 10;
+                value *= 10;
+                value += (ch - '0');
+            }
+        }
+        if (der >= der_end)
+            der = NULL;
+        else if (last == '0') {
+            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                                CFSTR("fraction ends in 0"), 0, error);
+            der = NULL;
+        } else if (last == '.') {
+            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                                CFSTR("fraction without digits"), 0, error);
+            der = NULL;
+        } else {
+            *fraction = (double)value / divisor;
+        }
+    } else {
+        *fraction = 0.0;
+    }
+
+    return der;
+}
+
+static const CFTimeInterval der_decode_timezone_offset(const uint8_t **der_p,
+                                                       const uint8_t *der_end,
+                                                       CFErrorRef *error) {
+    CFTimeInterval timeZoneOffset;
+    int ch = der_get_char(der_p, der_end, error);
+    if (ch == 'Z') {
+        /* Zulu time. */
+        timeZoneOffset = 0.0;
+    } else {
+               /* ZONE INDICATOR */
+        int multiplier;
+        if (ch == '-')
+            multiplier = -60;
+        else if (ch == '+')
+            multiplier = +60;
+        else {
+            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                                CFSTR("Invalid datetime character"), 0, error);
+            timeZoneOffset = NULL_TIME;
+        }
+        
+        timeZoneOffset = multiplier *
+            (der_decode_decimal_pair(der_p, der_end, error)
+             * 60 + der_decode_decimal_pair(der_p, der_end, error));
+    }
+    return timeZoneOffset;
+}
+
+static const uint8_t* der_decode_commontime_body(CFAbsoluteTime *at, CFErrorRef *error, SInt32 year,
+                                                 const uint8_t* der, const uint8_t *der_end)
+{
+    CFGregorianDate g;
+    g.year = year;
+       g.month = der_decode_decimal_pair(&der, der_end, error);
+       g.day = der_decode_decimal_pair(&der, der_end, error);
+       g.hour = der_decode_decimal_pair(&der, der_end, error);
+       g.minute = der_decode_decimal_pair(&der, der_end, error);
+    g.second = der_decode_decimal_pair(&der, der_end, error);
+    double fraction;
+    der = der_decode_decimal_fraction(&fraction, error, der, der_end);
+
+       CFTimeInterval timeZoneOffset = der_decode_timezone_offset(&der, der_end, error);
+
+#if 0
+    secdebug("dateparse",
+             "date %.*s year: %04d%02d%02d%02d%02d%02d%+05g",
+             length, bytes, g.year, g.month,
+             g.day, g.hour, g.minute, g.second,
+             timeZoneOffset / 60);
+#endif
+
+    if (der) {
+        if (der != der_end) {
+            SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                                CFSTR("trailing garbage at end of datetime"), 0, error);
+            return NULL;
+        }
+
+        *at = SecCFGregorianDateGetAbsoluteTime(g, timeZoneOffset, error) + fraction;
+        if (*at == NULL_TIME)
+            return NULL;
+    }
+
+    return der;
+}
+
+const uint8_t* der_decode_generalizedtime_body(CFAbsoluteTime *at, CFErrorRef *error,
+                                               const uint8_t* der, const uint8_t *der_end)
+{
+    SInt32 year = 100 * der_decode_decimal_pair(&der, der_end, error) + der_decode_decimal_pair(&der, der_end, error);
+    return der_decode_commontime_body(at, error, year, der, der_end);
+}
+
+const uint8_t* der_decode_universaltime_body(CFAbsoluteTime *at, CFErrorRef *error,
+                                             const uint8_t* der, const uint8_t *der_end)
+{
+    SInt32 year = der_decode_decimal_pair(&der, der_end, error);
+    if (year < 50) {
+        /* 0  <= year <  50 : assume century 21 */
+        year += 2000;
+    } else if (year < 70) {
+        /* 50 <= year <  70 : illegal per PKIX */
+        SecCFDERCreateError(kSecDERErrorUnknownEncoding,
+                            CFSTR("Invalid universal time year between 50 and 70"), 0, error);
+        der = NULL;
+    } else {
+        /* 70 <  year <= 99 : assume century 20 */
+        year += 1900;
+    }
+
+    return der_decode_commontime_body(at, error, year, der, der_end);
+}
+
+const uint8_t* der_decode_date(CFAllocatorRef allocator, CFOptionFlags mutability,
+                               CFDateRef* date, CFErrorRef *error,
+                               const uint8_t* der, const uint8_t *der_end)
+{
+    if (NULL == der)
+        return NULL;
+
+    der = ccder_decode_constructed_tl(CCDER_GENERALIZED_TIME, &der_end, der, der_end);
+    CFAbsoluteTime at;
+    der = der_decode_generalizedtime_body(&at, error, der, der_end);
+    if (der) {
+        *date = CFDateCreate(allocator, at);
+        if (NULL == *date) {
+            SecCFDERCreateError(kSecDERErrorUnderlyingError, CFSTR("Failed to create date"), NULL, error);
+            return NULL;
+        }
+    }
+    return der;
+}
+
+extern char *__dtoa(double _d, int mode, int ndigits, int *decpt, int *sign, char **rve);
+extern void  __freedtoa(char *);
+
+static size_t ccder_sizeof_nanoseconds(CFAbsoluteTime at) {
+    int dotoff;
+    int sign;
+    char *end;
+    char *str = __dtoa(at, 0, 0, &dotoff, &sign, &end);
+    ptrdiff_t len = end - str;
+    __freedtoa(str);
+    return len < dotoff ? 0 : len - dotoff;
+    //return len < dotoff ? 0 : len - dotoff > 9 ? 9 : len - dotoff;
+}
+
+size_t der_sizeof_generalizedtime_body(CFAbsoluteTime at, CFErrorRef *error)
+{
+    size_t subsec_digits = ccder_sizeof_nanoseconds(at);
+
+    /* Generalized zulu time YYYYMMDDhhmmss[.ssss]Z */
+    return subsec_digits ? 16 + subsec_digits : 15;
+}
+
+size_t der_sizeof_generalizedtime(CFAbsoluteTime at, CFErrorRef *error)
+{
+    return ccder_sizeof(CCDER_GENERALIZED_TIME,
+                        der_sizeof_generalizedtime_body(at, error));
+}
+
+size_t der_sizeof_date(CFDateRef date, CFErrorRef *error)
+{
+    return der_sizeof_generalizedtime(CFDateGetAbsoluteTime(date), error);
+}
+
+
+static uint8_t *ccder_encode_byte(uint8_t byte,
+                                  const uint8_t *der, uint8_t *der_end) {
+    if (der + 1 > der_end) {
+        return NULL;
+    }
+    *--der_end = byte;
+    return der_end;
+}
+
+static uint8_t *ccder_encode_decimal_pair(int v, const uint8_t *der,
+                                          uint8_t *der_end) {
+    if (der + 2 > der_end) {
+        return NULL;
+    }
+    assert(v < 100);
+    *--der_end = '0' + v % 10;
+    *--der_end = '0' + v / 10;
+    return der_end;
+}
+
+static uint8_t *ccder_encode_decimal_quad(int v, const uint8_t *der,
+                                          uint8_t *der_end) {
+    return ccder_encode_decimal_pair(v / 100, der,
+           ccder_encode_decimal_pair(v % 100, der, der_end));
+}
+
+static uint8_t *ccder_encode_nanoseconds(CFAbsoluteTime at, const uint8_t *der,
+                                         uint8_t *der_end) {
+    int dotoff;
+    int sign;
+    char *end;
+    char *str = __dtoa(at, 0, 0, &dotoff, &sign, &end);
+    char *begin = str + (dotoff < 0 ? 0 : dotoff);
+    // Compute 1.0000000 - fraction in ascii space
+    if (at < 0.0 && begin < end) {
+        char *p = end - 1;
+        // Borrow for last digit
+        *p = ('9' + 1) - (*p - '0');
+        while (p-- > begin) {
+            // Every other digit is a 9 since we borrowed from the last one
+            *p = '9' - (*p - '0');
+        }
+    }
+
+    ptrdiff_t len = end - str;
+    if (len > dotoff) {
+        if (dotoff < 0) {
+            assert(-1.0 < at && at < 1.0);
+            der_end = ccder_encode_body(len, (const uint8_t *)str, der, der_end);
+            der_end = ccder_encode_body_nocopy(-dotoff, der, der_end);
+            if (der_end)
+                memset(der_end, at < 0.0 ? '9' : '0', -dotoff);
+        } else {
+            der_end = ccder_encode_body(len - dotoff, (const uint8_t *)(str + dotoff), der, der_end);
+        }
+        der_end = ccder_encode_byte('.', der, der_end);
+    }
+    __freedtoa(str);
+
+    return der_end;
+}
+
+/* Encode generalized zulu time YYYYMMDDhhmmss[.ssss]Z */
+uint8_t* der_encode_generalizedtime_body(CFAbsoluteTime at, CFErrorRef *error,
+                                         const uint8_t *der, uint8_t *der_end)
+{
+    CFGregorianDate g = SecCFAbsoluteTimeGetGregorianDate(floor(at), 0.0, error);
+    if (g.year == 0)
+        return NULL;
+
+    return ccder_encode_decimal_quad(g.year, der,
+           ccder_encode_decimal_pair(g.month, der,
+           ccder_encode_decimal_pair(g.day, der,
+           ccder_encode_decimal_pair(g.hour, der,
+           ccder_encode_decimal_pair(g.minute, der,
+           ccder_encode_decimal_pair(g.second, der,
+           ccder_encode_nanoseconds(at, der,
+           ccder_encode_byte('Z', der, der_end))))))));
+}
+
+uint8_t* der_encode_generalizedtime(CFAbsoluteTime at, CFErrorRef *error,
+                                    const uint8_t *der, uint8_t *der_end)
+{
+    return ccder_encode_constructed_tl(CCDER_GENERALIZED_TIME, der_end, der,
+           der_encode_generalizedtime_body(at, error, der, der_end));
+}
+
+
+uint8_t* der_encode_date(CFDateRef date, CFErrorRef *error,
+                         const uint8_t *der, uint8_t *der_end)
+{
+    return der_encode_generalizedtime(CFDateGetAbsoluteTime(date), error,
+                                      der, der_end);
+}