generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Canonicalise input in CMS_verify.

Browse Source 
If content is detached and not binary mode translate the input to
CRLF format. Before this change the input was verified verbatim
which lead to a discrepancy between sign and verify.
This commit is contained in:
Dr. Stephen Henson 2013-12-22 00:35:29 +00:00
parent 20b82b514d
commit cd30f03ac5
1 changed files with 74 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

96
crypto/cms/cms_smime.c
View File

@ -60,21 +60,28 @@
#include "cms_lcl.h" #include "cms_lcl.h"
#include "asn1_locl.h" #include "asn1_locl.h"
static BIO *cms_get_text_bio(BIO *out, unsigned int flags)
{
BIO *rbio;
if (out == NULL)
rbio = BIO_new(BIO_s_null());
else if (flags & CMS_TEXT)
{
rbio = BIO_new(BIO_s_mem());
BIO_set_mem_eof_return(rbio, 0);
}
else
rbio = out;
return rbio;
}
static int cms_copy_content(BIO *out, BIO *in, unsigned int flags) static int cms_copy_content(BIO *out, BIO *in, unsigned int flags)
{ {
unsigned char buf[4096]; unsigned char buf[4096];
int r = 0, i; int r = 0, i;
BIO *tmpout = NULL; BIO *tmpout;
if (out == NULL) tmpout = cms_get_text_bio(out, flags);
tmpout = BIO_new(BIO_s_null());
else if (flags & CMS_TEXT)
{
tmpout = BIO_new(BIO_s_mem());
BIO_set_mem_eof_return(tmpout, 0);
}
else
tmpout = out;
if(!tmpout) if(!tmpout)
{ {
@ -142,7 +149,7 @@ static void do_free_upto(BIO *f, BIO *upto)
BIO_free(f); BIO_free(f);
f = tbio; f = tbio;
} }
while (f != upto); while (f && f != upto);
} }
else else
BIO_free_all(f); BIO_free_all(f);
@ -323,7 +330,7 @@ int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
STACK_OF(X509_CRL) *crls = NULL; STACK_OF(X509_CRL) *crls = NULL;
X509 *signer; X509 *signer;
int i, scount = 0, ret = 0; int i, scount = 0, ret = 0;
BIO *cmsbio = NULL, *tmpin = NULL; BIO *cmsbio = NULL, *tmpin = NULL, *tmpout = NULL;
if (!dcont && !check_content(cms)) if (!dcont && !check_content(cms))
return 0; return 0;
@ -406,15 +413,48 @@ int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
} }
else else
tmpin = dcont; tmpin = dcont;
/* If not binary mode and detached generate digests by *writing*
* through the BIO. That makes it possible to canonicalise the
* input.
*/
if (!(flags & SMIME_BINARY) && dcont)
{
/* Create output BIO so we can either handle text or to
* ensure included content doesn't override detached content.
*/
tmpout = cms_get_text_bio(out, flags);
if(!tmpout)
{
CMSerr(CMS_F_CMS_VERIFY,ERR_R_MALLOC_FAILURE);
goto err;
}
cmsbio = CMS_dataInit(cms, tmpout);
if (!cmsbio)
goto err;
/* Don't use SMIME_TEXT for verify: it adds headers and
* we want to remove them.
*/
SMIME_crlf_copy(dcont, cmsbio, flags & ~SMIME_TEXT);
cmsbio=CMS_dataInit(cms, tmpin); if(flags & CMS_TEXT)
if (!cmsbio) {
goto err; if (!SMIME_text(tmpout, out))
{
CMSerr(CMS_F_CMS_VERIFY,CMS_R_SMIME_TEXT_ERROR);
goto err;
}
}
}
else
{
cmsbio=CMS_dataInit(cms, tmpin);
if (!cmsbio)
goto err;
if (!cms_copy_content(out, cmsbio, flags)) if (!cms_copy_content(out, cmsbio, flags))
goto err; goto err;
}
if (!(flags & CMS_NO_CONTENT_VERIFY)) if (!(flags & CMS_NO_CONTENT_VERIFY))
{ {
for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++)
@ -432,11 +472,23 @@ int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
ret = 1; ret = 1;
err: err:
if (!(flags & SMIME_BINARY) && dcont)
if (dcont && (tmpin == dcont)) {
do_free_upto(cmsbio, dcont); do_free_upto(cmsbio, tmpout);
if (tmpin != dcont)
BIO_free(tmpin);
}
else else
BIO_free_all(cmsbio); {
if (dcont && (tmpin == dcont))
do_free_upto(cmsbio, dcont);
else
BIO_free_all(cmsbio);
}
if (tmpout && out != tmpout)
BIO_free_all(tmpout);
if (cms_certs) if (cms_certs)
sk_X509_pop_free(cms_certs, X509_free); sk_X509_pop_free(cms_certs, X509_free);