| /* | 
 |  * Copyright 2015-2022 The OpenSSL Project Authors. All Rights Reserved. | 
 |  * | 
 |  * Licensed under the OpenSSL license (the "License").  You may not use | 
 |  * this file except in compliance with the License.  You can obtain a copy | 
 |  * in the file LICENSE in the source distribution or at | 
 |  * https://www.openssl.org/source/license.html | 
 |  */ | 
 |  | 
 | #ifndef OSSL_SSL_PACKET_LOCAL_H | 
 | # define OSSL_SSL_PACKET_LOCAL_H | 
 |  | 
 | # include <string.h> | 
 | # include <openssl/bn.h> | 
 | # include <openssl/buffer.h> | 
 | # include <openssl/crypto.h> | 
 | # include <openssl/e_os2.h> | 
 |  | 
 | # include "internal/numbers.h" | 
 |  | 
 | typedef struct { | 
 |     /* Pointer to where we are currently reading from */ | 
 |     const unsigned char *curr; | 
 |     /* Number of bytes remaining */ | 
 |     size_t remaining; | 
 | } PACKET; | 
 |  | 
 | /* Internal unchecked shorthand; don't use outside this file. */ | 
 | static ossl_inline void packet_forward(PACKET *pkt, size_t len) | 
 | { | 
 |     pkt->curr += len; | 
 |     pkt->remaining -= len; | 
 | } | 
 |  | 
 | /* | 
 |  * Returns the number of bytes remaining to be read in the PACKET | 
 |  */ | 
 | static ossl_inline size_t PACKET_remaining(const PACKET *pkt) | 
 | { | 
 |     return pkt->remaining; | 
 | } | 
 |  | 
 | /* | 
 |  * Returns a pointer to the first byte after the packet data. | 
 |  * Useful for integrating with non-PACKET parsing code. | 
 |  * Specifically, we use PACKET_end() to verify that a d2i_... call | 
 |  * has consumed the entire packet contents. | 
 |  */ | 
 | static ossl_inline const unsigned char *PACKET_end(const PACKET *pkt) | 
 | { | 
 |     return pkt->curr + pkt->remaining; | 
 | } | 
 |  | 
 | /* | 
 |  * Returns a pointer to the PACKET's current position. | 
 |  * For use in non-PACKETized APIs. | 
 |  */ | 
 | static ossl_inline const unsigned char *PACKET_data(const PACKET *pkt) | 
 | { | 
 |     return pkt->curr; | 
 | } | 
 |  | 
 | /* | 
 |  * Initialise a PACKET with |len| bytes held in |buf|. This does not make a | 
 |  * copy of the data so |buf| must be present for the whole time that the PACKET | 
 |  * is being used. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_buf_init(PACKET *pkt, | 
 |                                               const unsigned char *buf, | 
 |                                               size_t len) | 
 | { | 
 |     /* Sanity check for negative values. */ | 
 |     if (len > (size_t)(SIZE_MAX / 2)) | 
 |         return 0; | 
 |  | 
 |     pkt->curr = buf; | 
 |     pkt->remaining = len; | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Initialize a PACKET to hold zero bytes. */ | 
 | static ossl_inline void PACKET_null_init(PACKET *pkt) | 
 | { | 
 |     pkt->curr = NULL; | 
 |     pkt->remaining = 0; | 
 | } | 
 |  | 
 | /* | 
 |  * Returns 1 if the packet has length |num| and its contents equal the |num| | 
 |  * bytes read from |ptr|. Returns 0 otherwise (lengths or contents not equal). | 
 |  * If lengths are equal, performs the comparison in constant time. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_equal(const PACKET *pkt, const void *ptr, | 
 |                                            size_t num) | 
 | { | 
 |     if (PACKET_remaining(pkt) != num) | 
 |         return 0; | 
 |     return CRYPTO_memcmp(pkt->curr, ptr, num) == 0; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead and initialize |subpkt| with the next |len| bytes read from |pkt|. | 
 |  * Data is not copied: the |subpkt| packet will share its underlying buffer with | 
 |  * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_sub_packet(const PACKET *pkt, | 
 |                                                      PACKET *subpkt, size_t len) | 
 | { | 
 |     if (PACKET_remaining(pkt) < len) | 
 |         return 0; | 
 |  | 
 |     return PACKET_buf_init(subpkt, pkt->curr, len); | 
 | } | 
 |  | 
 | /* | 
 |  * Initialize |subpkt| with the next |len| bytes read from |pkt|. Data is not | 
 |  * copied: the |subpkt| packet will share its underlying buffer with the | 
 |  * original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_get_sub_packet(PACKET *pkt, | 
 |                                                     PACKET *subpkt, size_t len) | 
 | { | 
 |     if (!PACKET_peek_sub_packet(pkt, subpkt, len)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, len); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead at 2 bytes in network order from |pkt| and store the value in | 
 |  * |*data| | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_net_2(const PACKET *pkt, | 
 |                                                 unsigned int *data) | 
 | { | 
 |     if (PACKET_remaining(pkt) < 2) | 
 |         return 0; | 
 |  | 
 |     *data = ((unsigned int)(*pkt->curr)) << 8; | 
 |     *data |= *(pkt->curr + 1); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Equivalent of n2s */ | 
 | /* Get 2 bytes in network order from |pkt| and store the value in |*data| */ | 
 | __owur static ossl_inline int PACKET_get_net_2(PACKET *pkt, unsigned int *data) | 
 | { | 
 |     if (!PACKET_peek_net_2(pkt, data)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, 2); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Same as PACKET_get_net_2() but for a size_t */ | 
 | __owur static ossl_inline int PACKET_get_net_2_len(PACKET *pkt, size_t *data) | 
 | { | 
 |     unsigned int i; | 
 |     int ret = PACKET_get_net_2(pkt, &i); | 
 |  | 
 |     if (ret) | 
 |         *data = (size_t)i; | 
 |  | 
 |     return ret; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead at 3 bytes in network order from |pkt| and store the value in | 
 |  * |*data| | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_net_3(const PACKET *pkt, | 
 |                                                 unsigned long *data) | 
 | { | 
 |     if (PACKET_remaining(pkt) < 3) | 
 |         return 0; | 
 |  | 
 |     *data = ((unsigned long)(*pkt->curr)) << 16; | 
 |     *data |= ((unsigned long)(*(pkt->curr + 1))) << 8; | 
 |     *data |= *(pkt->curr + 2); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Equivalent of n2l3 */ | 
 | /* Get 3 bytes in network order from |pkt| and store the value in |*data| */ | 
 | __owur static ossl_inline int PACKET_get_net_3(PACKET *pkt, unsigned long *data) | 
 | { | 
 |     if (!PACKET_peek_net_3(pkt, data)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, 3); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Same as PACKET_get_net_3() but for a size_t */ | 
 | __owur static ossl_inline int PACKET_get_net_3_len(PACKET *pkt, size_t *data) | 
 | { | 
 |     unsigned long i; | 
 |     int ret = PACKET_get_net_3(pkt, &i); | 
 |  | 
 |     if (ret) | 
 |         *data = (size_t)i; | 
 |  | 
 |     return ret; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead at 4 bytes in network order from |pkt| and store the value in | 
 |  * |*data| | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_net_4(const PACKET *pkt, | 
 |                                                 unsigned long *data) | 
 | { | 
 |     if (PACKET_remaining(pkt) < 4) | 
 |         return 0; | 
 |  | 
 |     *data = ((unsigned long)(*pkt->curr)) << 24; | 
 |     *data |= ((unsigned long)(*(pkt->curr + 1))) << 16; | 
 |     *data |= ((unsigned long)(*(pkt->curr + 2))) << 8; | 
 |     *data |= *(pkt->curr + 3); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead at 8 bytes in network order from |pkt| and store the value in | 
 |  * |*data| | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_net_8(const PACKET *pkt, | 
 |                                                 uint64_t *data) | 
 | { | 
 |     if (PACKET_remaining(pkt) < 8) | 
 |         return 0; | 
 |  | 
 |     *data = ((uint64_t)(*pkt->curr)) << 56; | 
 |     *data |= ((uint64_t)(*(pkt->curr + 1))) << 48; | 
 |     *data |= ((uint64_t)(*(pkt->curr + 2))) << 40; | 
 |     *data |= ((uint64_t)(*(pkt->curr + 3))) << 32; | 
 |     *data |= ((uint64_t)(*(pkt->curr + 4))) << 24; | 
 |     *data |= ((uint64_t)(*(pkt->curr + 5))) << 16; | 
 |     *data |= ((uint64_t)(*(pkt->curr + 6))) << 8; | 
 |     *data |= *(pkt->curr + 7); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Equivalent of n2l */ | 
 | /* Get 4 bytes in network order from |pkt| and store the value in |*data| */ | 
 | __owur static ossl_inline int PACKET_get_net_4(PACKET *pkt, unsigned long *data) | 
 | { | 
 |     if (!PACKET_peek_net_4(pkt, data)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, 4); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Same as PACKET_get_net_4() but for a size_t */ | 
 | __owur static ossl_inline int PACKET_get_net_4_len(PACKET *pkt, size_t *data) | 
 | { | 
 |     unsigned long i; | 
 |     int ret = PACKET_get_net_4(pkt, &i); | 
 |  | 
 |     if (ret) | 
 |         *data = (size_t)i; | 
 |  | 
 |     return ret; | 
 | } | 
 |   | 
 | /* Get 8 bytes in network order from |pkt| and store the value in |*data| */ | 
 | __owur static ossl_inline int PACKET_get_net_8(PACKET *pkt, uint64_t *data) | 
 | { | 
 |     if (!PACKET_peek_net_8(pkt, data)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, 8); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Peek ahead at 1 byte from |pkt| and store the value in |*data| */ | 
 | __owur static ossl_inline int PACKET_peek_1(const PACKET *pkt, | 
 |                                             unsigned int *data) | 
 | { | 
 |     if (!PACKET_remaining(pkt)) | 
 |         return 0; | 
 |  | 
 |     *data = *pkt->curr; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Get 1 byte from |pkt| and store the value in |*data| */ | 
 | __owur static ossl_inline int PACKET_get_1(PACKET *pkt, unsigned int *data) | 
 | { | 
 |     if (!PACKET_peek_1(pkt, data)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, 1); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Same as PACKET_get_1() but for a size_t */ | 
 | __owur static ossl_inline int PACKET_get_1_len(PACKET *pkt, size_t *data) | 
 | { | 
 |     unsigned int i; | 
 |     int ret = PACKET_get_1(pkt, &i); | 
 |  | 
 |     if (ret) | 
 |         *data = (size_t)i; | 
 |  | 
 |     return ret; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead at 4 bytes in reverse network order from |pkt| and store the value | 
 |  * in |*data| | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_4(const PACKET *pkt, | 
 |                                             unsigned long *data) | 
 | { | 
 |     if (PACKET_remaining(pkt) < 4) | 
 |         return 0; | 
 |  | 
 |     *data = *pkt->curr; | 
 |     *data |= ((unsigned long)(*(pkt->curr + 1))) << 8; | 
 |     *data |= ((unsigned long)(*(pkt->curr + 2))) << 16; | 
 |     *data |= ((unsigned long)(*(pkt->curr + 3))) << 24; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Equivalent of c2l */ | 
 | /* | 
 |  * Get 4 bytes in reverse network order from |pkt| and store the value in | 
 |  * |*data| | 
 |  */ | 
 | __owur static ossl_inline int PACKET_get_4(PACKET *pkt, unsigned long *data) | 
 | { | 
 |     if (!PACKET_peek_4(pkt, data)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, 4); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Peek ahead at |len| bytes from the |pkt| and store a pointer to them in | 
 |  * |*data|. This just points at the underlying buffer that |pkt| is using. The | 
 |  * caller should not free this data directly (it will be freed when the | 
 |  * underlying buffer gets freed | 
 |  */ | 
 | __owur static ossl_inline int PACKET_peek_bytes(const PACKET *pkt, | 
 |                                                 const unsigned char **data, | 
 |                                                 size_t len) | 
 | { | 
 |     if (PACKET_remaining(pkt) < len) | 
 |         return 0; | 
 |  | 
 |     *data = pkt->curr; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Read |len| bytes from the |pkt| and store a pointer to them in |*data|. This | 
 |  * just points at the underlying buffer that |pkt| is using. The caller should | 
 |  * not free this data directly (it will be freed when the underlying buffer gets | 
 |  * freed | 
 |  */ | 
 | __owur static ossl_inline int PACKET_get_bytes(PACKET *pkt, | 
 |                                                const unsigned char **data, | 
 |                                                size_t len) | 
 | { | 
 |     if (!PACKET_peek_bytes(pkt, data, len)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, len); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Peek ahead at |len| bytes from |pkt| and copy them to |data| */ | 
 | __owur static ossl_inline int PACKET_peek_copy_bytes(const PACKET *pkt, | 
 |                                                      unsigned char *data, | 
 |                                                      size_t len) | 
 | { | 
 |     if (PACKET_remaining(pkt) < len) | 
 |         return 0; | 
 |  | 
 |     memcpy(data, pkt->curr, len); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Read |len| bytes from |pkt| and copy them to |data|. | 
 |  * The caller is responsible for ensuring that |data| can hold |len| bytes. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt, | 
 |                                                 unsigned char *data, size_t len) | 
 | { | 
 |     if (!PACKET_peek_copy_bytes(pkt, data, len)) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, len); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Copy packet data to |dest|, and set |len| to the number of copied bytes. | 
 |  * If the packet has more than |dest_len| bytes, nothing is copied. | 
 |  * Returns 1 if the packet data fits in |dest_len| bytes, 0 otherwise. | 
 |  * Does not forward PACKET position (because it is typically the last thing | 
 |  * done with a given PACKET). | 
 |  */ | 
 | __owur static ossl_inline int PACKET_copy_all(const PACKET *pkt, | 
 |                                               unsigned char *dest, | 
 |                                               size_t dest_len, size_t *len) | 
 | { | 
 |     if (PACKET_remaining(pkt) > dest_len) { | 
 |         *len = 0; | 
 |         return 0; | 
 |     } | 
 |     *len = pkt->remaining; | 
 |     memcpy(dest, pkt->curr, pkt->remaining); | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Copy |pkt| bytes to a newly allocated buffer and store a pointer to the | 
 |  * result in |*data|, and the length in |len|. | 
 |  * If |*data| is not NULL, the old data is OPENSSL_free'd. | 
 |  * If the packet is empty, or malloc fails, |*data| will be set to NULL. | 
 |  * Returns 1 if the malloc succeeds and 0 otherwise. | 
 |  * Does not forward PACKET position (because it is typically the last thing | 
 |  * done with a given PACKET). | 
 |  */ | 
 | __owur static ossl_inline int PACKET_memdup(const PACKET *pkt, | 
 |                                             unsigned char **data, size_t *len) | 
 | { | 
 |     size_t length; | 
 |  | 
 |     OPENSSL_free(*data); | 
 |     *data = NULL; | 
 |     *len = 0; | 
 |  | 
 |     length = PACKET_remaining(pkt); | 
 |  | 
 |     if (length == 0) | 
 |         return 1; | 
 |  | 
 |     *data = OPENSSL_memdup(pkt->curr, length); | 
 |     if (*data == NULL) | 
 |         return 0; | 
 |  | 
 |     *len = length; | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Read a C string from |pkt| and copy to a newly allocated, NUL-terminated | 
 |  * buffer. Store a pointer to the result in |*data|. | 
 |  * If |*data| is not NULL, the old data is OPENSSL_free'd. | 
 |  * If the data in |pkt| does not contain a NUL-byte, the entire data is | 
 |  * copied and NUL-terminated. | 
 |  * Returns 1 if the malloc succeeds and 0 otherwise. | 
 |  * Does not forward PACKET position (because it is typically the last thing done | 
 |  * with a given PACKET). | 
 |  */ | 
 | __owur static ossl_inline int PACKET_strndup(const PACKET *pkt, char **data) | 
 | { | 
 |     OPENSSL_free(*data); | 
 |  | 
 |     /* This will succeed on an empty packet, unless pkt->curr == NULL. */ | 
 |     *data = OPENSSL_strndup((const char *)pkt->curr, PACKET_remaining(pkt)); | 
 |     return (*data != NULL); | 
 | } | 
 |  | 
 | /* Returns 1 if |pkt| contains at least one 0-byte, 0 otherwise. */ | 
 | static ossl_inline int PACKET_contains_zero_byte(const PACKET *pkt) | 
 | { | 
 |     return memchr(pkt->curr, 0, pkt->remaining) != NULL; | 
 | } | 
 |  | 
 | /* Move the current reading position forward |len| bytes */ | 
 | __owur static ossl_inline int PACKET_forward(PACKET *pkt, size_t len) | 
 | { | 
 |     if (PACKET_remaining(pkt) < len) | 
 |         return 0; | 
 |  | 
 |     packet_forward(pkt, len); | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Reads a variable-length vector prefixed with a one-byte length, and stores | 
 |  * the contents in |subpkt|. |pkt| can equal |subpkt|. | 
 |  * Data is not copied: the |subpkt| packet will share its underlying buffer with | 
 |  * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|. | 
 |  * Upon failure, the original |pkt| and |subpkt| are not modified. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_get_length_prefixed_1(PACKET *pkt, | 
 |                                                            PACKET *subpkt) | 
 | { | 
 |     unsigned int length; | 
 |     const unsigned char *data; | 
 |     PACKET tmp = *pkt; | 
 |     if (!PACKET_get_1(&tmp, &length) || | 
 |         !PACKET_get_bytes(&tmp, &data, (size_t)length)) { | 
 |         return 0; | 
 |     } | 
 |  | 
 |     *pkt = tmp; | 
 |     subpkt->curr = data; | 
 |     subpkt->remaining = length; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Like PACKET_get_length_prefixed_1, but additionally, fails when there are | 
 |  * leftover bytes in |pkt|. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_as_length_prefixed_1(PACKET *pkt, | 
 |                                                           PACKET *subpkt) | 
 | { | 
 |     unsigned int length; | 
 |     const unsigned char *data; | 
 |     PACKET tmp = *pkt; | 
 |     if (!PACKET_get_1(&tmp, &length) || | 
 |         !PACKET_get_bytes(&tmp, &data, (size_t)length) || | 
 |         PACKET_remaining(&tmp) != 0) { | 
 |         return 0; | 
 |     } | 
 |  | 
 |     *pkt = tmp; | 
 |     subpkt->curr = data; | 
 |     subpkt->remaining = length; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Reads a variable-length vector prefixed with a two-byte length, and stores | 
 |  * the contents in |subpkt|. |pkt| can equal |subpkt|. | 
 |  * Data is not copied: the |subpkt| packet will share its underlying buffer with | 
 |  * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|. | 
 |  * Upon failure, the original |pkt| and |subpkt| are not modified. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_get_length_prefixed_2(PACKET *pkt, | 
 |                                                            PACKET *subpkt) | 
 | { | 
 |     unsigned int length; | 
 |     const unsigned char *data; | 
 |     PACKET tmp = *pkt; | 
 |  | 
 |     if (!PACKET_get_net_2(&tmp, &length) || | 
 |         !PACKET_get_bytes(&tmp, &data, (size_t)length)) { | 
 |         return 0; | 
 |     } | 
 |  | 
 |     *pkt = tmp; | 
 |     subpkt->curr = data; | 
 |     subpkt->remaining = length; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Like PACKET_get_length_prefixed_2, but additionally, fails when there are | 
 |  * leftover bytes in |pkt|. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_as_length_prefixed_2(PACKET *pkt, | 
 |                                                           PACKET *subpkt) | 
 | { | 
 |     unsigned int length; | 
 |     const unsigned char *data; | 
 |     PACKET tmp = *pkt; | 
 |  | 
 |     if (!PACKET_get_net_2(&tmp, &length) || | 
 |         !PACKET_get_bytes(&tmp, &data, (size_t)length) || | 
 |         PACKET_remaining(&tmp) != 0) { | 
 |         return 0; | 
 |     } | 
 |  | 
 |     *pkt = tmp; | 
 |     subpkt->curr = data; | 
 |     subpkt->remaining = length; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Reads a variable-length vector prefixed with a three-byte length, and stores | 
 |  * the contents in |subpkt|. |pkt| can equal |subpkt|. | 
 |  * Data is not copied: the |subpkt| packet will share its underlying buffer with | 
 |  * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|. | 
 |  * Upon failure, the original |pkt| and |subpkt| are not modified. | 
 |  */ | 
 | __owur static ossl_inline int PACKET_get_length_prefixed_3(PACKET *pkt, | 
 |                                                            PACKET *subpkt) | 
 | { | 
 |     unsigned long length; | 
 |     const unsigned char *data; | 
 |     PACKET tmp = *pkt; | 
 |     if (!PACKET_get_net_3(&tmp, &length) || | 
 |         !PACKET_get_bytes(&tmp, &data, (size_t)length)) { | 
 |         return 0; | 
 |     } | 
 |  | 
 |     *pkt = tmp; | 
 |     subpkt->curr = data; | 
 |     subpkt->remaining = length; | 
 |  | 
 |     return 1; | 
 | } | 
 |  | 
 | /* Writeable packets */ | 
 |  | 
 | typedef struct wpacket_sub WPACKET_SUB; | 
 | struct wpacket_sub { | 
 |     /* The parent WPACKET_SUB if we have one or NULL otherwise */ | 
 |     WPACKET_SUB *parent; | 
 |  | 
 |     /* | 
 |      * Offset into the buffer where the length of this WPACKET goes. We use an | 
 |      * offset in case the buffer grows and gets reallocated. | 
 |      */ | 
 |     size_t packet_len; | 
 |  | 
 |     /* Number of bytes in the packet_len or 0 if we don't write the length */ | 
 |     size_t lenbytes; | 
 |  | 
 |     /* Number of bytes written to the buf prior to this packet starting */ | 
 |     size_t pwritten; | 
 |  | 
 |     /* Flags for this sub-packet */ | 
 |     unsigned int flags; | 
 | }; | 
 |  | 
 | typedef struct wpacket_st WPACKET; | 
 | struct wpacket_st { | 
 |     /* The buffer where we store the output data */ | 
 |     BUF_MEM *buf; | 
 |  | 
 |     /* Fixed sized buffer which can be used as an alternative to buf */ | 
 |     unsigned char *staticbuf; | 
 |  | 
 |     /* | 
 |      * Offset into the buffer where we are currently writing. We use an offset | 
 |      * in case the buffer grows and gets reallocated. | 
 |      */ | 
 |     size_t curr; | 
 |  | 
 |     /* Number of bytes written so far */ | 
 |     size_t written; | 
 |  | 
 |     /* Maximum number of bytes we will allow to be written to this WPACKET */ | 
 |     size_t maxsize; | 
 |  | 
 |     /* Our sub-packets (always at least one if not finished) */ | 
 |     WPACKET_SUB *subs; | 
 | }; | 
 |  | 
 | /* Flags */ | 
 |  | 
 | /* Default */ | 
 | #define WPACKET_FLAGS_NONE                      0 | 
 |  | 
 | /* Error on WPACKET_close() if no data written to the WPACKET */ | 
 | #define WPACKET_FLAGS_NON_ZERO_LENGTH           1 | 
 |  | 
 | /* | 
 |  * Abandon all changes on WPACKET_close() if no data written to the WPACKET, | 
 |  * i.e. this does not write out a zero packet length | 
 |  */ | 
 | #define WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH    2 | 
 |  | 
 |  | 
 | /* | 
 |  * Initialise a WPACKET with the buffer in |buf|. The buffer must exist | 
 |  * for the whole time that the WPACKET is being used. Additionally |lenbytes| of | 
 |  * data is preallocated at the start of the buffer to store the length of the | 
 |  * WPACKET once we know it. | 
 |  */ | 
 | int WPACKET_init_len(WPACKET *pkt, BUF_MEM *buf, size_t lenbytes); | 
 |  | 
 | /* | 
 |  * Same as WPACKET_init_len except there is no preallocation of the WPACKET | 
 |  * length. | 
 |  */ | 
 | int WPACKET_init(WPACKET *pkt, BUF_MEM *buf); | 
 |  | 
 | /* | 
 |  * Same as WPACKET_init_len except we do not use a growable BUF_MEM structure. | 
 |  * A fixed buffer of memory |buf| of size |len| is used instead. A failure will | 
 |  * occur if you attempt to write beyond the end of the buffer | 
 |  */ | 
 | int WPACKET_init_static_len(WPACKET *pkt, unsigned char *buf, size_t len, | 
 |                             size_t lenbytes); | 
 | /* | 
 |  * Set the flags to be applied to the current sub-packet | 
 |  */ | 
 | int WPACKET_set_flags(WPACKET *pkt, unsigned int flags); | 
 |  | 
 | /* | 
 |  * Closes the most recent sub-packet. It also writes out the length of the | 
 |  * packet to the required location (normally the start of the WPACKET) if | 
 |  * appropriate. The top level WPACKET should be closed using WPACKET_finish() | 
 |  * instead of this function. | 
 |  */ | 
 | int WPACKET_close(WPACKET *pkt); | 
 |  | 
 | /* | 
 |  * The same as WPACKET_close() but only for the top most WPACKET. Additionally | 
 |  * frees memory resources for this WPACKET. | 
 |  */ | 
 | int WPACKET_finish(WPACKET *pkt); | 
 |  | 
 | /* | 
 |  * Iterate through all the sub-packets and write out their lengths as if they | 
 |  * were being closed. The lengths will be overwritten with the final lengths | 
 |  * when the sub-packets are eventually closed (which may be different if more | 
 |  * data is added to the WPACKET). This function fails if a sub-packet is of 0 | 
 |  * length and WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH is set. | 
 |  */ | 
 | int WPACKET_fill_lengths(WPACKET *pkt); | 
 |  | 
 | /* | 
 |  * Initialise a new sub-packet. Additionally |lenbytes| of data is preallocated | 
 |  * at the start of the sub-packet to store its length once we know it. Don't | 
 |  * call this directly. Use the convenience macros below instead. | 
 |  */ | 
 | int WPACKET_start_sub_packet_len__(WPACKET *pkt, size_t lenbytes); | 
 |  | 
 | /* | 
 |  * Convenience macros for calling WPACKET_start_sub_packet_len with different | 
 |  * lengths | 
 |  */ | 
 | #define WPACKET_start_sub_packet_u8(pkt) \ | 
 |     WPACKET_start_sub_packet_len__((pkt), 1) | 
 | #define WPACKET_start_sub_packet_u16(pkt) \ | 
 |     WPACKET_start_sub_packet_len__((pkt), 2) | 
 | #define WPACKET_start_sub_packet_u24(pkt) \ | 
 |     WPACKET_start_sub_packet_len__((pkt), 3) | 
 | #define WPACKET_start_sub_packet_u32(pkt) \ | 
 |     WPACKET_start_sub_packet_len__((pkt), 4) | 
 |  | 
 | /* | 
 |  * Same as WPACKET_start_sub_packet_len__() except no bytes are pre-allocated | 
 |  * for the sub-packet length. | 
 |  */ | 
 | int WPACKET_start_sub_packet(WPACKET *pkt); | 
 |  | 
 | /* | 
 |  * Allocate bytes in the WPACKET for the output. This reserves the bytes | 
 |  * and counts them as "written", but doesn't actually do the writing. A pointer | 
 |  * to the allocated bytes is stored in |*allocbytes|. |allocbytes| may be NULL. | 
 |  * WARNING: the allocated bytes must be filled in immediately, without further | 
 |  * WPACKET_* calls. If not then the underlying buffer may be realloc'd and | 
 |  * change its location. | 
 |  */ | 
 | int WPACKET_allocate_bytes(WPACKET *pkt, size_t len, | 
 |                            unsigned char **allocbytes); | 
 |  | 
 | /* | 
 |  * The same as WPACKET_allocate_bytes() except additionally a new sub-packet is | 
 |  * started for the allocated bytes, and then closed immediately afterwards. The | 
 |  * number of length bytes for the sub-packet is in |lenbytes|. Don't call this | 
 |  * directly. Use the convenience macros below instead. | 
 |  */ | 
 | int WPACKET_sub_allocate_bytes__(WPACKET *pkt, size_t len, | 
 |                                  unsigned char **allocbytes, size_t lenbytes); | 
 |  | 
 | /* | 
 |  * Convenience macros for calling WPACKET_sub_allocate_bytes with different | 
 |  * lengths | 
 |  */ | 
 | #define WPACKET_sub_allocate_bytes_u8(pkt, len, bytes) \ | 
 |     WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 1) | 
 | #define WPACKET_sub_allocate_bytes_u16(pkt, len, bytes) \ | 
 |     WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 2) | 
 | #define WPACKET_sub_allocate_bytes_u24(pkt, len, bytes) \ | 
 |     WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 3) | 
 | #define WPACKET_sub_allocate_bytes_u32(pkt, len, bytes) \ | 
 |     WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 4) | 
 |  | 
 | /* | 
 |  * The same as WPACKET_allocate_bytes() except the reserved bytes are not | 
 |  * actually counted as written. Typically this will be for when we don't know | 
 |  * how big arbitrary data is going to be up front, but we do know what the | 
 |  * maximum size will be. If this function is used, then it should be immediately | 
 |  * followed by a WPACKET_allocate_bytes() call before any other WPACKET | 
 |  * functions are called (unless the write to the allocated bytes is abandoned). | 
 |  * | 
 |  * For example: If we are generating a signature, then the size of that | 
 |  * signature may not be known in advance. We can use WPACKET_reserve_bytes() to | 
 |  * handle this: | 
 |  * | 
 |  *  if (!WPACKET_sub_reserve_bytes_u16(&pkt, EVP_PKEY_size(pkey), &sigbytes1) | 
 |  *          || EVP_SignFinal(md_ctx, sigbytes1, &siglen, pkey) <= 0 | 
 |  *          || !WPACKET_sub_allocate_bytes_u16(&pkt, siglen, &sigbytes2) | 
 |  *          || sigbytes1 != sigbytes2) | 
 |  *      goto err; | 
 |  */ | 
 | int WPACKET_reserve_bytes(WPACKET *pkt, size_t len, unsigned char **allocbytes); | 
 |  | 
 | /* | 
 |  * The "reserve_bytes" equivalent of WPACKET_sub_allocate_bytes__() | 
 |  */ | 
 | int WPACKET_sub_reserve_bytes__(WPACKET *pkt, size_t len, | 
 |                                  unsigned char **allocbytes, size_t lenbytes); | 
 |  | 
 | /* | 
 |  * Convenience macros for  WPACKET_sub_reserve_bytes with different lengths | 
 |  */ | 
 | #define WPACKET_sub_reserve_bytes_u8(pkt, len, bytes) \ | 
 |     WPACKET_reserve_bytes__((pkt), (len), (bytes), 1) | 
 | #define WPACKET_sub_reserve_bytes_u16(pkt, len, bytes) \ | 
 |     WPACKET_sub_reserve_bytes__((pkt), (len), (bytes), 2) | 
 | #define WPACKET_sub_reserve_bytes_u24(pkt, len, bytes) \ | 
 |     WPACKET_sub_reserve_bytes__((pkt), (len), (bytes), 3) | 
 | #define WPACKET_sub_reserve_bytes_u32(pkt, len, bytes) \ | 
 |     WPACKET_sub_reserve_bytes__((pkt), (len), (bytes), 4) | 
 |  | 
 | /* | 
 |  * Write the value stored in |val| into the WPACKET. The value will consume | 
 |  * |bytes| amount of storage. An error will occur if |val| cannot be | 
 |  * accommodated in |bytes| storage, e.g. attempting to write the value 256 into | 
 |  * 1 byte will fail. Don't call this directly. Use the convenience macros below | 
 |  * instead. | 
 |  */ | 
 | int WPACKET_put_bytes__(WPACKET *pkt, uint64_t val, size_t bytes); | 
 |  | 
 | /* | 
 |  * Convenience macros for calling WPACKET_put_bytes with different | 
 |  * lengths | 
 |  */ | 
 | #define WPACKET_put_bytes_u8(pkt, val) \ | 
 |     WPACKET_put_bytes__((pkt), (val), 1) | 
 | #define WPACKET_put_bytes_u16(pkt, val) \ | 
 |     WPACKET_put_bytes__((pkt), (val), 2) | 
 | #define WPACKET_put_bytes_u24(pkt, val) \ | 
 |     WPACKET_put_bytes__((pkt), (val), 3) | 
 | #define WPACKET_put_bytes_u32(pkt, val) \ | 
 |     WPACKET_put_bytes__((pkt), (val), 4) | 
 | #define WPACKET_put_bytes_u64(pkt, val) \ | 
 |     WPACKET_put_bytes__((pkt), (val), 8) | 
 |  | 
 | /* Set a maximum size that we will not allow the WPACKET to grow beyond */ | 
 | int WPACKET_set_max_size(WPACKET *pkt, size_t maxsize); | 
 |  | 
 | /* Copy |len| bytes of data from |*src| into the WPACKET. */ | 
 | int WPACKET_memcpy(WPACKET *pkt, const void *src, size_t len); | 
 |  | 
 | /* Set |len| bytes of data to |ch| into the WPACKET. */ | 
 | int WPACKET_memset(WPACKET *pkt, int ch, size_t len); | 
 |  | 
 | /* | 
 |  * Copy |len| bytes of data from |*src| into the WPACKET and prefix with its | 
 |  * length (consuming |lenbytes| of data for the length). Don't call this | 
 |  * directly. Use the convenience macros below instead. | 
 |  */ | 
 | int WPACKET_sub_memcpy__(WPACKET *pkt, const void *src, size_t len, | 
 |                        size_t lenbytes); | 
 |  | 
 | /* Convenience macros for calling WPACKET_sub_memcpy with different lengths */ | 
 | #define WPACKET_sub_memcpy_u8(pkt, src, len) \ | 
 |     WPACKET_sub_memcpy__((pkt), (src), (len), 1) | 
 | #define WPACKET_sub_memcpy_u16(pkt, src, len) \ | 
 |     WPACKET_sub_memcpy__((pkt), (src), (len), 2) | 
 | #define WPACKET_sub_memcpy_u24(pkt, src, len) \ | 
 |     WPACKET_sub_memcpy__((pkt), (src), (len), 3) | 
 | #define WPACKET_sub_memcpy_u32(pkt, src, len) \ | 
 |     WPACKET_sub_memcpy__((pkt), (src), (len), 4) | 
 |  | 
 | /* | 
 |  * Return the total number of bytes written so far to the underlying buffer | 
 |  * including any storage allocated for length bytes | 
 |  */ | 
 | int WPACKET_get_total_written(WPACKET *pkt, size_t *written); | 
 |  | 
 | /* | 
 |  * Returns the length of the current sub-packet. This excludes any bytes | 
 |  * allocated for the length itself. | 
 |  */ | 
 | int WPACKET_get_length(WPACKET *pkt, size_t *len); | 
 |  | 
 | /* | 
 |  * Returns a pointer to the current write location, but does not allocate any | 
 |  * bytes. | 
 |  */ | 
 | unsigned char *WPACKET_get_curr(WPACKET *pkt); | 
 |  | 
 | /* Release resources in a WPACKET if a failure has occurred. */ | 
 | void WPACKET_cleanup(WPACKET *pkt); | 
 |  | 
 | #endif                          /* OSSL_SSL_PACKET_LOCAL_H */ |