1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 /* 27 * glue routine gss_export_sec_context 28 */ 29 30 #include <mechglueP.h> 31 #include <stdio.h> 32 #include <errno.h> 33 #include <stdlib.h> 34 #include <string.h> 35 36 static OM_uint32 37 val_imp_sec_ctx_args( 38 OM_uint32 *minor_status, 39 gss_buffer_t interprocess_token, 40 gss_ctx_id_t *context_handle) 41 { 42 43 /* Initialize outputs. */ 44 if (minor_status != NULL) 45 *minor_status = 0; 46 47 if (context_handle != NULL) 48 *context_handle = GSS_C_NO_CONTEXT; 49 50 /* Validate arguments. */ 51 52 if (minor_status == NULL) 53 return (GSS_S_CALL_INACCESSIBLE_WRITE); 54 55 if (context_handle == NULL) 56 return (GSS_S_CALL_INACCESSIBLE_WRITE); 57 58 if (interprocess_token == GSS_C_NO_BUFFER) 59 return (GSS_S_CALL_INACCESSIBLE_READ | GSS_S_DEFECTIVE_TOKEN); 60 61 if (GSS_EMPTY_BUFFER(interprocess_token)) 62 return (GSS_S_CALL_INACCESSIBLE_READ | GSS_S_DEFECTIVE_TOKEN); 63 64 return (GSS_S_COMPLETE); 65 } 66 67 OM_uint32 68 gss_import_sec_context(minor_status, 69 interprocess_token, 70 context_handle) 71 72 OM_uint32 * minor_status; 73 const gss_buffer_t interprocess_token; 74 gss_ctx_id_t *context_handle; 75 76 { 77 OM_uint32 length = 0; 78 OM_uint32 status; 79 char *p; 80 gss_union_ctx_id_t ctx; 81 gss_buffer_desc token; 82 gss_mechanism mech; 83 84 status = val_imp_sec_ctx_args(minor_status, 85 interprocess_token, context_handle); 86 if (status != GSS_S_COMPLETE) 87 return (status); 88 89 /* Initial value needed below. */ 90 status = GSS_S_FAILURE; 91 92 ctx = (gss_union_ctx_id_t)malloc(sizeof (gss_union_ctx_id_desc)); 93 if (!ctx) 94 return (GSS_S_FAILURE); 95 96 ctx->mech_type = (gss_OID) malloc(sizeof (gss_OID_desc)); 97 if (!ctx->mech_type) { 98 free(ctx); 99 return (GSS_S_FAILURE); 100 } 101 102 if (interprocess_token->length >= sizeof (OM_uint32)) { 103 p = interprocess_token->value; 104 length = (OM_uint32)*p++; 105 length = (OM_uint32)(length << 8) + *p++; 106 length = (OM_uint32)(length << 8) + *p++; 107 length = (OM_uint32)(length << 8) + *p++; 108 } 109 110 if (length == 0 || 111 length > (interprocess_token->length - sizeof (OM_uint32))) { 112 free(ctx); 113 return (GSS_S_CALL_BAD_STRUCTURE | GSS_S_DEFECTIVE_TOKEN); 114 } 115 116 ctx->mech_type->length = length; 117 ctx->mech_type->elements = malloc(length); 118 if (!ctx->mech_type->elements) { 119 goto error_out; 120 } 121 (void) memcpy(ctx->mech_type->elements, p, length); 122 p += length; 123 124 token.length = interprocess_token->length - sizeof (OM_uint32) - length; 125 token.value = p; 126 127 /* 128 * select the approprate underlying mechanism routine and 129 * call it. 130 */ 131 132 mech = __gss_get_mechanism(ctx->mech_type); 133 if (!mech) { 134 status = GSS_S_BAD_MECH; 135 goto error_out; 136 } 137 if (!mech->gss_import_sec_context) { 138 status = GSS_S_UNAVAILABLE; 139 goto error_out; 140 } 141 142 status = mech->gss_import_sec_context(mech->context, minor_status, 143 &token, &ctx->internal_ctx_id); 144 145 if (status == GSS_S_COMPLETE) { 146 *context_handle = (gss_ctx_id_t)ctx; 147 return (GSS_S_COMPLETE); 148 } 149 150 error_out: 151 if (ctx) { 152 if (ctx->mech_type) { 153 if (ctx->mech_type->elements) 154 free(ctx->mech_type->elements); 155 free(ctx->mech_type); 156 } 157 free(ctx); 158 } 159 return (status); 160 } 161