xref: /freebsd/sys/kgssapi/gssd_prot.c (revision 685dc743dc3b5645e34836464128e1c0558b404b)
1a9148abdSDoug Rabson /*-
2*4d846d26SWarner Losh  * SPDX-License-Identifier: BSD-2-Clause
34de8ade9SPedro F. Giffuni  *
4a9148abdSDoug Rabson  * Copyright (c) 2008 Isilon Inc http://www.isilon.com/
5a9148abdSDoug Rabson  * Authors: Doug Rabson <dfr@rabson.org>
6a9148abdSDoug Rabson  * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org>
7a9148abdSDoug Rabson  *
8a9148abdSDoug Rabson  * Redistribution and use in source and binary forms, with or without
9a9148abdSDoug Rabson  * modification, are permitted provided that the following conditions
10a9148abdSDoug Rabson  * are met:
11a9148abdSDoug Rabson  * 1. Redistributions of source code must retain the above copyright
12a9148abdSDoug Rabson  *    notice, this list of conditions and the following disclaimer.
13a9148abdSDoug Rabson  * 2. Redistributions in binary form must reproduce the above copyright
14a9148abdSDoug Rabson  *    notice, this list of conditions and the following disclaimer in the
15a9148abdSDoug Rabson  *    documentation and/or other materials provided with the distribution.
16a9148abdSDoug Rabson  *
17a9148abdSDoug Rabson  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18a9148abdSDoug Rabson  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19a9148abdSDoug Rabson  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20a9148abdSDoug Rabson  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
21a9148abdSDoug Rabson  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22a9148abdSDoug Rabson  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23a9148abdSDoug Rabson  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24a9148abdSDoug Rabson  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25a9148abdSDoug Rabson  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26a9148abdSDoug Rabson  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27a9148abdSDoug Rabson  * SUCH DAMAGE.
28a9148abdSDoug Rabson  */
29a9148abdSDoug Rabson 
30a9148abdSDoug Rabson #include <sys/cdefs.h>
31a9148abdSDoug Rabson #ifdef _KERNEL
32a9148abdSDoug Rabson #include <sys/malloc.h>
33a9148abdSDoug Rabson #else
34a9148abdSDoug Rabson #include <stdlib.h>
35a9148abdSDoug Rabson #include <string.h>
36a9148abdSDoug Rabson #endif
37a9148abdSDoug Rabson 
38a9148abdSDoug Rabson #include <rpc/rpc.h>
39a9148abdSDoug Rabson #include <rpc/rpc_com.h>
40a9148abdSDoug Rabson 
41a9148abdSDoug Rabson #include "gssd.h"
42a9148abdSDoug Rabson 
43a9148abdSDoug Rabson bool_t
xdr_gss_buffer_desc(XDR * xdrs,gss_buffer_desc * buf)44a9148abdSDoug Rabson xdr_gss_buffer_desc(XDR *xdrs, gss_buffer_desc *buf)
45a9148abdSDoug Rabson {
46a9148abdSDoug Rabson 	char *val;
47a9148abdSDoug Rabson 	u_int len;
48a9148abdSDoug Rabson 
49a9148abdSDoug Rabson 	len = buf->length;
50a9148abdSDoug Rabson 	val = buf->value;
51a9148abdSDoug Rabson 	if (!xdr_bytes(xdrs, &val, &len, ~0))
52a9148abdSDoug Rabson 		return (FALSE);
53a9148abdSDoug Rabson 	buf->length = len;
54a9148abdSDoug Rabson 	buf->value = val;
55a9148abdSDoug Rabson 
56a9148abdSDoug Rabson 	return (TRUE);
57a9148abdSDoug Rabson }
58a9148abdSDoug Rabson 
59a9148abdSDoug Rabson bool_t
xdr_gss_OID_desc(XDR * xdrs,gss_OID_desc * oid)60a9148abdSDoug Rabson xdr_gss_OID_desc(XDR *xdrs, gss_OID_desc *oid)
61a9148abdSDoug Rabson {
62a9148abdSDoug Rabson 	char *val;
63a9148abdSDoug Rabson 	u_int len;
64a9148abdSDoug Rabson 
65a9148abdSDoug Rabson 	len = oid->length;
66a9148abdSDoug Rabson 	val = oid->elements;
67a9148abdSDoug Rabson 	if (!xdr_bytes(xdrs, &val, &len, ~0))
68a9148abdSDoug Rabson 		return (FALSE);
69a9148abdSDoug Rabson 	oid->length = len;
70a9148abdSDoug Rabson 	oid->elements = val;
71a9148abdSDoug Rabson 
72a9148abdSDoug Rabson 	return (TRUE);
73a9148abdSDoug Rabson }
74a9148abdSDoug Rabson 
75a9148abdSDoug Rabson bool_t
xdr_gss_OID(XDR * xdrs,gss_OID * oidp)76a9148abdSDoug Rabson xdr_gss_OID(XDR *xdrs, gss_OID *oidp)
77a9148abdSDoug Rabson {
78a9148abdSDoug Rabson 	gss_OID oid;
79a9148abdSDoug Rabson 	bool_t is_null;
80a9148abdSDoug Rabson 
81a9148abdSDoug Rabson 	switch (xdrs->x_op) {
82a9148abdSDoug Rabson 	case XDR_ENCODE:
83a9148abdSDoug Rabson 		oid = *oidp;
84a9148abdSDoug Rabson 		if (oid) {
85a9148abdSDoug Rabson 			is_null = FALSE;
86a9148abdSDoug Rabson 			if (!xdr_bool(xdrs, &is_null)
87a9148abdSDoug Rabson 			    || !xdr_gss_OID_desc(xdrs, oid))
88a9148abdSDoug Rabson 				return (FALSE);
89a9148abdSDoug Rabson 		} else {
90a9148abdSDoug Rabson 			is_null = TRUE;
91a9148abdSDoug Rabson 			if (!xdr_bool(xdrs, &is_null))
92a9148abdSDoug Rabson 				return (FALSE);
93a9148abdSDoug Rabson 		}
94a9148abdSDoug Rabson 		break;
95a9148abdSDoug Rabson 
96a9148abdSDoug Rabson 	case XDR_DECODE:
97a9148abdSDoug Rabson 		if (!xdr_bool(xdrs, &is_null))
98a9148abdSDoug Rabson 			return (FALSE);
99a9148abdSDoug Rabson 		if (is_null) {
100a9148abdSDoug Rabson 			*oidp = GSS_C_NO_OID;
101a9148abdSDoug Rabson 		} else {
102a9148abdSDoug Rabson 			oid = mem_alloc(sizeof(gss_OID_desc));
103a9148abdSDoug Rabson 			memset(oid, 0, sizeof(*oid));
104be0edef1SConrad Meyer 			if (!xdr_gss_OID_desc(xdrs, oid)) {
105be0edef1SConrad Meyer 				mem_free(oid, sizeof(gss_OID_desc));
106a9148abdSDoug Rabson 				return (FALSE);
107be0edef1SConrad Meyer 			}
108a9148abdSDoug Rabson 			*oidp = oid;
109a9148abdSDoug Rabson 		}
110a9148abdSDoug Rabson 		break;
111a9148abdSDoug Rabson 
112a9148abdSDoug Rabson 	case XDR_FREE:
113a9148abdSDoug Rabson 		oid = *oidp;
114a9148abdSDoug Rabson 		if (oid) {
115a9148abdSDoug Rabson 			xdr_gss_OID_desc(xdrs, oid);
116a9148abdSDoug Rabson 			mem_free(oid, sizeof(gss_OID_desc));
117a9148abdSDoug Rabson 		}
118a9148abdSDoug Rabson 	}
119a9148abdSDoug Rabson 
120a9148abdSDoug Rabson 	return (TRUE);
121a9148abdSDoug Rabson }
122a9148abdSDoug Rabson 
123a9148abdSDoug Rabson bool_t
xdr_gss_OID_set_desc(XDR * xdrs,gss_OID_set_desc * set)124a9148abdSDoug Rabson xdr_gss_OID_set_desc(XDR *xdrs, gss_OID_set_desc *set)
125a9148abdSDoug Rabson {
126a9148abdSDoug Rabson 	caddr_t addr;
127a9148abdSDoug Rabson 	u_int len;
128a9148abdSDoug Rabson 
129a9148abdSDoug Rabson 	len = set->count;
130a9148abdSDoug Rabson 	addr = (caddr_t) set->elements;
131a9148abdSDoug Rabson 	if (!xdr_array(xdrs, &addr, &len, ~0, sizeof(gss_OID_desc),
132a9148abdSDoug Rabson 		(xdrproc_t) xdr_gss_OID_desc))
133a9148abdSDoug Rabson 		return (FALSE);
134a9148abdSDoug Rabson 	set->count = len;
135a9148abdSDoug Rabson 	set->elements = (gss_OID) addr;
136a9148abdSDoug Rabson 
137a9148abdSDoug Rabson 	return (TRUE);
138a9148abdSDoug Rabson }
139a9148abdSDoug Rabson 
140a9148abdSDoug Rabson bool_t
xdr_gss_OID_set(XDR * xdrs,gss_OID_set * setp)141a9148abdSDoug Rabson xdr_gss_OID_set(XDR *xdrs, gss_OID_set *setp)
142a9148abdSDoug Rabson {
143a9148abdSDoug Rabson 	gss_OID_set set;
144a9148abdSDoug Rabson 	bool_t is_null;
145a9148abdSDoug Rabson 
146a9148abdSDoug Rabson 	switch (xdrs->x_op) {
147a9148abdSDoug Rabson 	case XDR_ENCODE:
148a9148abdSDoug Rabson 		set = *setp;
149a9148abdSDoug Rabson 		if (set) {
150a9148abdSDoug Rabson 			is_null = FALSE;
151a9148abdSDoug Rabson 			if (!xdr_bool(xdrs, &is_null)
152a9148abdSDoug Rabson 			    || !xdr_gss_OID_set_desc(xdrs, set))
153a9148abdSDoug Rabson 				return (FALSE);
154a9148abdSDoug Rabson 		} else {
155a9148abdSDoug Rabson 			is_null = TRUE;
156a9148abdSDoug Rabson 			if (!xdr_bool(xdrs, &is_null))
157a9148abdSDoug Rabson 				return (FALSE);
158a9148abdSDoug Rabson 		}
159a9148abdSDoug Rabson 		break;
160a9148abdSDoug Rabson 
161a9148abdSDoug Rabson 	case XDR_DECODE:
162a9148abdSDoug Rabson 		if (!xdr_bool(xdrs, &is_null))
163a9148abdSDoug Rabson 			return (FALSE);
164a9148abdSDoug Rabson 		if (is_null) {
165a9148abdSDoug Rabson 			*setp = GSS_C_NO_OID_SET;
166a9148abdSDoug Rabson 		} else {
167a9148abdSDoug Rabson 			set = mem_alloc(sizeof(gss_OID_set_desc));
168a9148abdSDoug Rabson 			memset(set, 0, sizeof(*set));
169be0edef1SConrad Meyer 			if (!xdr_gss_OID_set_desc(xdrs, set)) {
170be0edef1SConrad Meyer 				mem_free(set, sizeof(gss_OID_set_desc));
171a9148abdSDoug Rabson 				return (FALSE);
172be0edef1SConrad Meyer 			}
173a9148abdSDoug Rabson 			*setp = set;
174a9148abdSDoug Rabson 		}
175a9148abdSDoug Rabson 		break;
176a9148abdSDoug Rabson 
177a9148abdSDoug Rabson 	case XDR_FREE:
178a9148abdSDoug Rabson 		set = *setp;
179a9148abdSDoug Rabson 		if (set) {
180a9148abdSDoug Rabson 			xdr_gss_OID_set_desc(xdrs, set);
181a9148abdSDoug Rabson 			mem_free(set, sizeof(gss_OID_set_desc));
182a9148abdSDoug Rabson 		}
183a9148abdSDoug Rabson 	}
184a9148abdSDoug Rabson 
185a9148abdSDoug Rabson 	return (TRUE);
186a9148abdSDoug Rabson }
187a9148abdSDoug Rabson 
188a9148abdSDoug Rabson bool_t
xdr_gss_channel_bindings_t(XDR * xdrs,gss_channel_bindings_t * chp)189a9148abdSDoug Rabson xdr_gss_channel_bindings_t(XDR *xdrs, gss_channel_bindings_t *chp)
190a9148abdSDoug Rabson {
191a9148abdSDoug Rabson 	gss_channel_bindings_t ch;
192a9148abdSDoug Rabson 	bool_t is_null;
193a9148abdSDoug Rabson 
194a9148abdSDoug Rabson 	switch (xdrs->x_op) {
195a9148abdSDoug Rabson 	case XDR_ENCODE:
196a9148abdSDoug Rabson 		ch = *chp;
197a9148abdSDoug Rabson 		if (ch) {
198a9148abdSDoug Rabson 			is_null = FALSE;
199a9148abdSDoug Rabson 			if (!xdr_bool(xdrs, &is_null)
200a9148abdSDoug Rabson 			    || !xdr_uint32_t(xdrs, &ch->initiator_addrtype)
201a9148abdSDoug Rabson 			    || !xdr_gss_buffer_desc(xdrs,
202a9148abdSDoug Rabson 				&ch->initiator_address)
203a9148abdSDoug Rabson 			    || !xdr_uint32_t(xdrs, &ch->acceptor_addrtype)
204a9148abdSDoug Rabson 			    || !xdr_gss_buffer_desc(xdrs,
205a9148abdSDoug Rabson 				&ch->acceptor_address)
206a9148abdSDoug Rabson 			    || !xdr_gss_buffer_desc(xdrs,
207a9148abdSDoug Rabson 				&ch->application_data))
208a9148abdSDoug Rabson 				return (FALSE);
209a9148abdSDoug Rabson 		} else {
210a9148abdSDoug Rabson 			is_null = TRUE;
211a9148abdSDoug Rabson 			if (!xdr_bool(xdrs, &is_null))
212a9148abdSDoug Rabson 				return (FALSE);
213a9148abdSDoug Rabson 		}
214a9148abdSDoug Rabson 		break;
215a9148abdSDoug Rabson 
216a9148abdSDoug Rabson 	case XDR_DECODE:
217a9148abdSDoug Rabson 		if (!xdr_bool(xdrs, &is_null))
218a9148abdSDoug Rabson 			return (FALSE);
219a9148abdSDoug Rabson 		if (is_null) {
220a9148abdSDoug Rabson 			*chp = GSS_C_NO_CHANNEL_BINDINGS;
221a9148abdSDoug Rabson 		} else {
222a9148abdSDoug Rabson 			ch = mem_alloc(sizeof(*ch));
223a9148abdSDoug Rabson 			memset(ch, 0, sizeof(*ch));
224a9148abdSDoug Rabson 			if (!xdr_uint32_t(xdrs, &ch->initiator_addrtype)
225a9148abdSDoug Rabson 			    || !xdr_gss_buffer_desc(xdrs,
226a9148abdSDoug Rabson 				&ch->initiator_address)
227a9148abdSDoug Rabson 			    || !xdr_uint32_t(xdrs, &ch->acceptor_addrtype)
228a9148abdSDoug Rabson 			    || !xdr_gss_buffer_desc(xdrs,
229a9148abdSDoug Rabson 				&ch->acceptor_address)
230a9148abdSDoug Rabson 			    || !xdr_gss_buffer_desc(xdrs,
231be0edef1SConrad Meyer 				&ch->application_data)) {
232be0edef1SConrad Meyer 				mem_free(ch, sizeof(*ch));
233a9148abdSDoug Rabson 				return (FALSE);
234be0edef1SConrad Meyer 			}
235a9148abdSDoug Rabson 			*chp = ch;
236a9148abdSDoug Rabson 		}
237a9148abdSDoug Rabson 		break;
238a9148abdSDoug Rabson 
239a9148abdSDoug Rabson 	case XDR_FREE:
240a9148abdSDoug Rabson 		ch = *chp;
241a9148abdSDoug Rabson 		if (ch) {
242a9148abdSDoug Rabson 			xdr_gss_buffer_desc(xdrs, &ch->initiator_address);
243a9148abdSDoug Rabson 			xdr_gss_buffer_desc(xdrs, &ch->acceptor_address);
244a9148abdSDoug Rabson 			xdr_gss_buffer_desc(xdrs, &ch->application_data);
245a9148abdSDoug Rabson 			mem_free(ch, sizeof(*ch));
246a9148abdSDoug Rabson 		}
247a9148abdSDoug Rabson 	}
248a9148abdSDoug Rabson 
249a9148abdSDoug Rabson 	return (TRUE);
250a9148abdSDoug Rabson }
251