1 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
2  * All rights reserved.
3  *
4  * This package is an SSL implementation written
5  * by Eric Young (eay@cryptsoft.com).
6  * The implementation was written so as to conform with Netscapes SSL.
7  *
8  * This library is free for commercial and non-commercial use as long as
9  * the following conditions are aheared to.  The following conditions
10  * apply to all code found in this distribution, be it the RC4, RSA,
11  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
12  * included with this distribution is covered by the same copyright terms
13  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
14  *
15  * Copyright remains Eric Young's, and as such any Copyright notices in
16  * the code are not to be removed.
17  * If this package is used in a product, Eric Young should be given attribution
18  * as the author of the parts of the library used.
19  * This can be in the form of a textual message at program startup or
20  * in documentation (online or textual) provided with the package.
21  *
22  * Redistribution and use in source and binary forms, with or without
23  * modification, are permitted provided that the following conditions
24  * are met:
25  * 1. Redistributions of source code must retain the copyright
26  *    notice, this list of conditions and the following disclaimer.
27  * 2. Redistributions in binary form must reproduce the above copyright
28  *    notice, this list of conditions and the following disclaimer in the
29  *    documentation and/or other materials provided with the distribution.
30  * 3. All advertising materials mentioning features or use of this software
31  *    must display the following acknowledgement:
32  *    "This product includes cryptographic software written by
33  *     Eric Young (eay@cryptsoft.com)"
34  *    The word 'cryptographic' can be left out if the rouines from the library
35  *    being used are not cryptographic related :-).
36  * 4. If you include any Windows specific code (or a derivative thereof) from
37  *    the apps directory (application code) you must include an acknowledgement:
38  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
39  *
40  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50  * SUCH DAMAGE.
51  *
52  * The licence and distribution terms for any publically available version or
53  * derivative of this code cannot be changed.  i.e. this code cannot simply be
54  * copied and put under another distribution licence
55  * [including the GNU Public Licence.] */
56 
57 #include <openssl/mem.h>
58 
59 #include <assert.h>
60 #include <stdarg.h>
61 #include <stdio.h>
62 
63 #if defined(OPENSSL_WINDOWS)
64 OPENSSL_MSVC_PRAGMA(warning(push, 3))
65 #include <windows.h>
66 OPENSSL_MSVC_PRAGMA(warning(pop))
67 #endif
68 
69 #include "internal.h"
70 
71 
72 #define OPENSSL_MALLOC_PREFIX 8
73 
74 #if defined(__GNUC__) || defined(__clang__)
75 // sdallocx is a sized |free| function. By passing the size (which we happen to
76 // always know in BoringSSL), the malloc implementation can save work. We cannot
77 // depend on |sdallocx| being available so we declare a wrapper that falls back
78 // to |free| as a weak symbol.
79 //
80 // This will always be safe, but will only be overridden if the malloc
81 // implementation is statically linked with BoringSSL. So, if |sdallocx| is
82 // provided in, say, libc.so, we still won't use it because that's dynamically
83 // linked. This isn't an ideal result, but its helps in some cases.
84 void sdallocx(void *ptr, size_t size, int flags);
85 
86 __attribute((weak, noinline))
87 #else
88 static
89 #endif
sdallocx(void * ptr,size_t size,int flags)90 void sdallocx(void *ptr, size_t size, int flags) {
91   free(ptr);
92 }
93 
OPENSSL_malloc(size_t size)94 void *OPENSSL_malloc(size_t size) {
95   void *ptr = malloc(size + OPENSSL_MALLOC_PREFIX);
96   if (ptr == NULL) {
97     return NULL;
98   }
99 
100   *(size_t *)ptr = size;
101 
102   return ((uint8_t *)ptr) + OPENSSL_MALLOC_PREFIX;
103 }
104 
OPENSSL_free(void * orig_ptr)105 void OPENSSL_free(void *orig_ptr) {
106   if (orig_ptr == NULL) {
107     return;
108   }
109 
110   void *ptr = ((uint8_t *)orig_ptr) - OPENSSL_MALLOC_PREFIX;
111 
112   size_t size = *(size_t *)ptr;
113   OPENSSL_cleanse(ptr, size + OPENSSL_MALLOC_PREFIX);
114   sdallocx(ptr, size + OPENSSL_MALLOC_PREFIX, 0 /* flags */);
115 }
116 
OPENSSL_realloc(void * orig_ptr,size_t new_size)117 void *OPENSSL_realloc(void *orig_ptr, size_t new_size) {
118   if (orig_ptr == NULL) {
119     return OPENSSL_malloc(new_size);
120   }
121 
122   void *ptr = ((uint8_t *)orig_ptr) - OPENSSL_MALLOC_PREFIX;
123   size_t old_size = *(size_t *)ptr;
124 
125   void *ret = OPENSSL_malloc(new_size);
126   if (ret == NULL) {
127     return NULL;
128   }
129 
130   size_t to_copy = new_size;
131   if (old_size < to_copy) {
132     to_copy = old_size;
133   }
134 
135   memcpy(ret, orig_ptr, to_copy);
136   OPENSSL_free(orig_ptr);
137 
138   return ret;
139 }
140 
OPENSSL_cleanse(void * ptr,size_t len)141 void OPENSSL_cleanse(void *ptr, size_t len) {
142 #if defined(OPENSSL_WINDOWS)
143   SecureZeroMemory(ptr, len);
144 #else
145   OPENSSL_memset(ptr, 0, len);
146 
147 #if !defined(OPENSSL_NO_ASM)
148   /* As best as we can tell, this is sufficient to break any optimisations that
149      might try to eliminate "superfluous" memsets. If there's an easy way to
150      detect memset_s, it would be better to use that. */
151   __asm__ __volatile__("" : : "r"(ptr) : "memory");
152 #endif
153 #endif  // !OPENSSL_NO_ASM
154 }
155 
CRYPTO_memcmp(const void * in_a,const void * in_b,size_t len)156 int CRYPTO_memcmp(const void *in_a, const void *in_b, size_t len) {
157   const uint8_t *a = in_a;
158   const uint8_t *b = in_b;
159   uint8_t x = 0;
160 
161   for (size_t i = 0; i < len; i++) {
162     x |= a[i] ^ b[i];
163   }
164 
165   return x;
166 }
167 
OPENSSL_hash32(const void * ptr,size_t len)168 uint32_t OPENSSL_hash32(const void *ptr, size_t len) {
169   // These are the FNV-1a parameters for 32 bits.
170   static const uint32_t kPrime = 16777619u;
171   static const uint32_t kOffsetBasis = 2166136261u;
172 
173   const uint8_t *in = ptr;
174   uint32_t h = kOffsetBasis;
175 
176   for (size_t i = 0; i < len; i++) {
177     h ^= in[i];
178     h *= kPrime;
179   }
180 
181   return h;
182 }
183 
OPENSSL_strnlen(const char * s,size_t len)184 size_t OPENSSL_strnlen(const char *s, size_t len) {
185   for (size_t i = 0; i < len; i++) {
186     if (s[i] == 0) {
187       return i;
188     }
189   }
190 
191   return len;
192 }
193 
OPENSSL_strdup(const char * s)194 char *OPENSSL_strdup(const char *s) {
195   const size_t len = strlen(s) + 1;
196   char *ret = OPENSSL_malloc(len);
197   if (ret == NULL) {
198     return NULL;
199   }
200   OPENSSL_memcpy(ret, s, len);
201   return ret;
202 }
203 
OPENSSL_tolower(int c)204 int OPENSSL_tolower(int c) {
205   if (c >= 'A' && c <= 'Z') {
206     return c + ('a' - 'A');
207   }
208   return c;
209 }
210 
OPENSSL_strcasecmp(const char * a,const char * b)211 int OPENSSL_strcasecmp(const char *a, const char *b) {
212   for (size_t i = 0;; i++) {
213     const int aa = OPENSSL_tolower(a[i]);
214     const int bb = OPENSSL_tolower(b[i]);
215 
216     if (aa < bb) {
217       return -1;
218     } else if (aa > bb) {
219       return 1;
220     } else if (aa == 0) {
221       return 0;
222     }
223   }
224 }
225 
OPENSSL_strncasecmp(const char * a,const char * b,size_t n)226 int OPENSSL_strncasecmp(const char *a, const char *b, size_t n) {
227   for (size_t i = 0; i < n; i++) {
228     const int aa = OPENSSL_tolower(a[i]);
229     const int bb = OPENSSL_tolower(b[i]);
230 
231     if (aa < bb) {
232       return -1;
233     } else if (aa > bb) {
234       return 1;
235     } else if (aa == 0) {
236       return 0;
237     }
238   }
239 
240   return 0;
241 }
242 
BIO_snprintf(char * buf,size_t n,const char * format,...)243 int BIO_snprintf(char *buf, size_t n, const char *format, ...) {
244   va_list args;
245   va_start(args, format);
246   int ret = BIO_vsnprintf(buf, n, format, args);
247   va_end(args);
248   return ret;
249 }
250 
BIO_vsnprintf(char * buf,size_t n,const char * format,va_list args)251 int BIO_vsnprintf(char *buf, size_t n, const char *format, va_list args) {
252   return vsnprintf(buf, n, format, args);
253 }
254