17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate * CDDL HEADER START
37c478bd9Sstevel@tonic-gate *
47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*8dc347dbStz204579 * Common Development and Distribution License (the "License").
6*8dc347dbStz204579 * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate *
87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate * and limitations under the License.
127c478bd9Sstevel@tonic-gate *
137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate *
197c478bd9Sstevel@tonic-gate * CDDL HEADER END
207c478bd9Sstevel@tonic-gate */
217c478bd9Sstevel@tonic-gate /*
22*8dc347dbStz204579 * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
237c478bd9Sstevel@tonic-gate * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate */
257c478bd9Sstevel@tonic-gate
267c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
277c478bd9Sstevel@tonic-gate
287c478bd9Sstevel@tonic-gate #include <stdio.h>
297c478bd9Sstevel@tonic-gate #include <sys/types.h>
307c478bd9Sstevel@tonic-gate #include <bsm/audit.h>
317c478bd9Sstevel@tonic-gate #include <bsm/libbsm.h>
327c478bd9Sstevel@tonic-gate #include <bsm/audit_record.h>
337c478bd9Sstevel@tonic-gate
347c478bd9Sstevel@tonic-gate
357c478bd9Sstevel@tonic-gate /*
367c478bd9Sstevel@tonic-gate * adr_struct.now is used to calculate the record length so
377c478bd9Sstevel@tonic-gate * end of record will be recognized.
387c478bd9Sstevel@tonic-gate */
397c478bd9Sstevel@tonic-gate
407c478bd9Sstevel@tonic-gate
417c478bd9Sstevel@tonic-gate void
adrf_start(adrf_t * adrf,adr_t * adr,FILE * fp)427c478bd9Sstevel@tonic-gate adrf_start(adrf_t *adrf, adr_t *adr, FILE *fp)
437c478bd9Sstevel@tonic-gate {
447c478bd9Sstevel@tonic-gate adrf->adrf_fp = fp;
457c478bd9Sstevel@tonic-gate adrf->adrf_adr = adr;
467c478bd9Sstevel@tonic-gate adrf->adrf_adr->adr_now = NULL;
477c478bd9Sstevel@tonic-gate }
487c478bd9Sstevel@tonic-gate
497c478bd9Sstevel@tonic-gate /*
507c478bd9Sstevel@tonic-gate * adrf_char - pull out characters
517c478bd9Sstevel@tonic-gate */
527c478bd9Sstevel@tonic-gate int
adrf_char(adrf_t * adrf,char * cp,int count)537c478bd9Sstevel@tonic-gate adrf_char(adrf_t *adrf, char *cp, int count)
547c478bd9Sstevel@tonic-gate {
557c478bd9Sstevel@tonic-gate int c; /* read character in here */
567c478bd9Sstevel@tonic-gate
57*8dc347dbStz204579 if (count < 0)
58*8dc347dbStz204579 return (-1);
597c478bd9Sstevel@tonic-gate while (count--) {
607c478bd9Sstevel@tonic-gate if ((c = fgetc(adrf->adrf_fp)) == EOF)
617c478bd9Sstevel@tonic-gate return (-1);
627c478bd9Sstevel@tonic-gate *cp++ = c;
637c478bd9Sstevel@tonic-gate adrf->adrf_adr->adr_now += sizeof (char);
647c478bd9Sstevel@tonic-gate }
657c478bd9Sstevel@tonic-gate return (0);
667c478bd9Sstevel@tonic-gate }
677c478bd9Sstevel@tonic-gate
687c478bd9Sstevel@tonic-gate /*
697c478bd9Sstevel@tonic-gate * adrf_short - pull out shorts
707c478bd9Sstevel@tonic-gate */
717c478bd9Sstevel@tonic-gate int
adrf_short(adrf_t * adrf,short * sp,int count)727c478bd9Sstevel@tonic-gate adrf_short(adrf_t *adrf, short *sp, int count)
737c478bd9Sstevel@tonic-gate {
747c478bd9Sstevel@tonic-gate int c; /* read character in here */
757c478bd9Sstevel@tonic-gate
76*8dc347dbStz204579 if (count < 0)
77*8dc347dbStz204579 return (-1);
787c478bd9Sstevel@tonic-gate while (count--) {
797c478bd9Sstevel@tonic-gate if ((c = fgetc(adrf->adrf_fp)) == EOF)
807c478bd9Sstevel@tonic-gate return (-1);
817c478bd9Sstevel@tonic-gate *sp = c << 8;
827c478bd9Sstevel@tonic-gate if ((c = fgetc(adrf->adrf_fp)) == EOF)
837c478bd9Sstevel@tonic-gate return (-1);
847c478bd9Sstevel@tonic-gate *sp++ |= c & 0x00ff;
857c478bd9Sstevel@tonic-gate adrf->adrf_adr->adr_now += sizeof (short);
867c478bd9Sstevel@tonic-gate }
877c478bd9Sstevel@tonic-gate return (0);
887c478bd9Sstevel@tonic-gate }
897c478bd9Sstevel@tonic-gate
907c478bd9Sstevel@tonic-gate /*
917c478bd9Sstevel@tonic-gate * adrf_int32 - pull out int32
927c478bd9Sstevel@tonic-gate */
937c478bd9Sstevel@tonic-gate int adrf_int(adrf_t *adrf, int32_t *lp, int count);
947c478bd9Sstevel@tonic-gate int adrf_long(adrf_t *adrf, int32_t *lp, int count);
957c478bd9Sstevel@tonic-gate
967c478bd9Sstevel@tonic-gate #pragma weak adrf_int = adrf_int32
977c478bd9Sstevel@tonic-gate #pragma weak adrf_long = adrf_int32
987c478bd9Sstevel@tonic-gate
997c478bd9Sstevel@tonic-gate int
adrf_int32(adrf_t * adrf,int32_t * lp,int count)1007c478bd9Sstevel@tonic-gate adrf_int32(adrf_t *adrf, int32_t *lp, int count)
1017c478bd9Sstevel@tonic-gate {
1027c478bd9Sstevel@tonic-gate int i;
1037c478bd9Sstevel@tonic-gate int c; /* read character in here */
1047c478bd9Sstevel@tonic-gate
105*8dc347dbStz204579 if (count < 0)
106*8dc347dbStz204579 return (-1);
1077c478bd9Sstevel@tonic-gate for (; count--; lp++) {
1087c478bd9Sstevel@tonic-gate *lp = 0;
1097c478bd9Sstevel@tonic-gate for (i = 0; i < 4; i++) {
1107c478bd9Sstevel@tonic-gate if ((c = fgetc(adrf->adrf_fp)) == EOF)
1117c478bd9Sstevel@tonic-gate return (-1);
1127c478bd9Sstevel@tonic-gate *lp <<= 8;
1137c478bd9Sstevel@tonic-gate *lp |= c & 0x000000ff;
1147c478bd9Sstevel@tonic-gate }
1157c478bd9Sstevel@tonic-gate adrf->adrf_adr->adr_now += sizeof (int32_t);
1167c478bd9Sstevel@tonic-gate }
1177c478bd9Sstevel@tonic-gate return (0);
1187c478bd9Sstevel@tonic-gate }
1197c478bd9Sstevel@tonic-gate
1207c478bd9Sstevel@tonic-gate int
adrf_int64(adrf_t * adrf,int64_t * lp,int count)1217c478bd9Sstevel@tonic-gate adrf_int64(adrf_t *adrf, int64_t *lp, int count)
1227c478bd9Sstevel@tonic-gate {
1237c478bd9Sstevel@tonic-gate int i;
1247c478bd9Sstevel@tonic-gate int c; /* read character in here */
1257c478bd9Sstevel@tonic-gate
126*8dc347dbStz204579 if (count < 0)
127*8dc347dbStz204579 return (-1);
1287c478bd9Sstevel@tonic-gate for (; count--; lp++) {
1297c478bd9Sstevel@tonic-gate *lp = 0;
1307c478bd9Sstevel@tonic-gate for (i = 0; i < 8; i++) {
1317c478bd9Sstevel@tonic-gate if ((c = fgetc(adrf->adrf_fp)) == EOF)
1327c478bd9Sstevel@tonic-gate return (-1);
1337c478bd9Sstevel@tonic-gate *lp <<= 8;
1347c478bd9Sstevel@tonic-gate *lp |= c & 0x00000000000000ff;
1357c478bd9Sstevel@tonic-gate }
1367c478bd9Sstevel@tonic-gate adrf->adrf_adr->adr_now += sizeof (int64_t);
1377c478bd9Sstevel@tonic-gate }
1387c478bd9Sstevel@tonic-gate return (0);
1397c478bd9Sstevel@tonic-gate }
1407c478bd9Sstevel@tonic-gate
1417c478bd9Sstevel@tonic-gate int adrf_u_int(adrf_t *adrf, uint32_t *cp, int count);
1427c478bd9Sstevel@tonic-gate int adrf_u_long(adrf_t *adrf, uint32_t *cp, int count);
1437c478bd9Sstevel@tonic-gate
1447c478bd9Sstevel@tonic-gate #pragma weak adrf_u_int = adrf_u_int32
1457c478bd9Sstevel@tonic-gate #pragma weak adrf_u_long = adrf_u_int32
1467c478bd9Sstevel@tonic-gate
1477c478bd9Sstevel@tonic-gate int
adrf_u_int32(adrf_t * adrf,uint32_t * cp,int count)1487c478bd9Sstevel@tonic-gate adrf_u_int32(adrf_t *adrf, uint32_t *cp, int count)
1497c478bd9Sstevel@tonic-gate {
1507c478bd9Sstevel@tonic-gate return (adrf_int32(adrf, (int32_t *)cp, count));
1517c478bd9Sstevel@tonic-gate }
1527c478bd9Sstevel@tonic-gate
1537c478bd9Sstevel@tonic-gate int
adrf_u_char(adrf_t * adrf,uchar_t * cp,int count)1547c478bd9Sstevel@tonic-gate adrf_u_char(adrf_t *adrf, uchar_t *cp, int count)
1557c478bd9Sstevel@tonic-gate {
1567c478bd9Sstevel@tonic-gate return (adrf_char(adrf, (char *)cp, count));
1577c478bd9Sstevel@tonic-gate }
1587c478bd9Sstevel@tonic-gate
1597c478bd9Sstevel@tonic-gate int
adrf_u_int64(adrf_t * adrf,uint64_t * lp,int count)1607c478bd9Sstevel@tonic-gate adrf_u_int64(adrf_t *adrf, uint64_t *lp, int count)
1617c478bd9Sstevel@tonic-gate {
1627c478bd9Sstevel@tonic-gate return (adrf_int64(adrf, (int64_t *)lp, count));
1637c478bd9Sstevel@tonic-gate }
1647c478bd9Sstevel@tonic-gate
1657c478bd9Sstevel@tonic-gate int
adrf_u_short(adrf_t * adrf,ushort_t * sp,int count)1667c478bd9Sstevel@tonic-gate adrf_u_short(adrf_t *adrf, ushort_t *sp, int count)
1677c478bd9Sstevel@tonic-gate {
1687c478bd9Sstevel@tonic-gate return (adrf_short(adrf, (short *)sp, count));
1697c478bd9Sstevel@tonic-gate }
1707c478bd9Sstevel@tonic-gate
1717c478bd9Sstevel@tonic-gate int
adrf_peek(adrf_t * adrf)1727c478bd9Sstevel@tonic-gate adrf_peek(adrf_t *adrf)
1737c478bd9Sstevel@tonic-gate {
1747c478bd9Sstevel@tonic-gate return (ungetc(fgetc(adrf->adrf_fp), adrf->adrf_fp));
1757c478bd9Sstevel@tonic-gate }
176