| /* | 
 |  * Copyright (c) 1996, 1998 by Internet Software Consortium. | 
 |  * | 
 |  * Permission to use, copy, modify, and distribute this software for any | 
 |  * purpose with or without fee is hereby granted, provided that the above | 
 |  * copyright notice and this permission notice appear in all copies. | 
 |  * | 
 |  * THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS | 
 |  * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES | 
 |  * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE | 
 |  * CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL | 
 |  * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR | 
 |  * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS | 
 |  * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS | 
 |  * SOFTWARE. | 
 |  */ | 
 |  | 
 | /* | 
 |  * Portions Copyright (c) 1995 by International Business Machines, Inc. | 
 |  * | 
 |  * International Business Machines, Inc. (hereinafter called IBM) grants | 
 |  * permission under its copyrights to use, copy, modify, and distribute this | 
 |  * Software with or without fee, provided that the above copyright notice and | 
 |  * all paragraphs of this notice appear in all copies, and that the name of IBM | 
 |  * not be used in connection with the marketing of any product incorporating | 
 |  * the Software or modifications thereof, without specific, written prior | 
 |  * permission. | 
 |  * | 
 |  * To the extent it has a right to do so, IBM grants an immunity from suit | 
 |  * under its patents, if any, for the use, sale or manufacture of products to | 
 |  * the extent that such products are used for performing Domain Name System | 
 |  * dynamic updates in TCP/IP networks by means of the Software.  No immunity is | 
 |  * granted for any product per se or for any other function of any product. | 
 |  * | 
 |  * THE SOFTWARE IS PROVIDED "AS IS", AND IBM DISCLAIMS ALL WARRANTIES, | 
 |  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A | 
 |  * PARTICULAR PURPOSE.  IN NO EVENT SHALL IBM BE LIABLE FOR ANY SPECIAL, | 
 |  * DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER ARISING | 
 |  * OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE, EVEN | 
 |  * IF IBM IS APPRISED OF THE POSSIBILITY OF SUCH DAMAGES. | 
 |  */ | 
 |  | 
 | #include <sys/types.h> | 
 | #include <sys/param.h> | 
 | #include <sys/socket.h> | 
 |  | 
 | #include <netinet/in.h> | 
 | #include <arpa/inet.h> | 
 |  | 
 | #include <ctype.h> | 
 | #include <stdio.h> | 
 | #include <stdlib.h> | 
 | #include <string.h> | 
 |  | 
 | #define Assert(Cond) if (!(Cond)) abort() | 
 |  | 
 | static const char Base64[] = | 
 | 	"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; | 
 | static const char Pad64 = '='; | 
 |  | 
 | /* (From RFC1521 and draft-ietf-dnssec-secext-03.txt) | 
 |    The following encoding technique is taken from RFC 1521 by Borenstein | 
 |    and Freed.  It is reproduced here in a slightly edited form for | 
 |    convenience. | 
 |  | 
 |    A 65-character subset of US-ASCII is used, enabling 6 bits to be | 
 |    represented per printable character. (The extra 65th character, "=", | 
 |    is used to signify a special processing function.) | 
 |  | 
 |    The encoding process represents 24-bit groups of input bits as output | 
 |    strings of 4 encoded characters. Proceeding from left to right, a | 
 |    24-bit input group is formed by concatenating 3 8-bit input groups. | 
 |    These 24 bits are then treated as 4 concatenated 6-bit groups, each | 
 |    of which is translated into a single digit in the base64 alphabet. | 
 |  | 
 |    Each 6-bit group is used as an index into an array of 64 printable | 
 |    characters. The character referenced by the index is placed in the | 
 |    output string. | 
 |  | 
 |                          Table 1: The Base64 Alphabet | 
 |  | 
 |       Value Encoding  Value Encoding  Value Encoding  Value Encoding | 
 |           0 A            17 R            34 i            51 z | 
 |           1 B            18 S            35 j            52 0 | 
 |           2 C            19 T            36 k            53 1 | 
 |           3 D            20 U            37 l            54 2 | 
 |           4 E            21 V            38 m            55 3 | 
 |           5 F            22 W            39 n            56 4 | 
 |           6 G            23 X            40 o            57 5 | 
 |           7 H            24 Y            41 p            58 6 | 
 |           8 I            25 Z            42 q            59 7 | 
 |           9 J            26 a            43 r            60 8 | 
 |          10 K            27 b            44 s            61 9 | 
 |          11 L            28 c            45 t            62 + | 
 |          12 M            29 d            46 u            63 / | 
 |          13 N            30 e            47 v | 
 |          14 O            31 f            48 w         (pad) = | 
 |          15 P            32 g            49 x | 
 |          16 Q            33 h            50 y | 
 |  | 
 |    Special processing is performed if fewer than 24 bits are available | 
 |    at the end of the data being encoded.  A full encoding quantum is | 
 |    always completed at the end of a quantity.  When fewer than 24 input | 
 |    bits are available in an input group, zero bits are added (on the | 
 |    right) to form an integral number of 6-bit groups.  Padding at the | 
 |    end of the data is performed using the '=' character. | 
 |  | 
 |    Since all base64 input is an integral number of octets, only the | 
 |    following cases can arise: | 
 |  | 
 |        (1) the final quantum of encoding input is an integral | 
 |            multiple of 24 bits; here, the final unit of encoded | 
 | 	   output will be an integral multiple of 4 characters | 
 | 	   with no "=" padding, | 
 |        (2) the final quantum of encoding input is exactly 8 bits; | 
 |            here, the final unit of encoded output will be two | 
 | 	   characters followed by two "=" padding characters, or | 
 |        (3) the final quantum of encoding input is exactly 16 bits; | 
 |            here, the final unit of encoded output will be three | 
 | 	   characters followed by one "=" padding character. | 
 |    */ | 
 |  | 
 | /* skips all whitespace anywhere. | 
 |    converts characters, four at a time, starting at (or after) | 
 |    src from base - 64 numbers into three 8 bit bytes in the target area. | 
 |    it returns the number of data bytes stored at the target, or -1 on error. | 
 |  */ | 
 |  | 
 | static int b64rmap_initialized = 0; | 
 | static uint8_t b64rmap[256]; | 
 |  | 
 | static const uint8_t b64rmap_special = 0xf0; | 
 | static const uint8_t b64rmap_end = 0xfd; | 
 | static const uint8_t b64rmap_space = 0xfe; | 
 | static const uint8_t b64rmap_invalid = 0xff; | 
 |  | 
 | /** | 
 |  * Initializing the reverse map is not thread safe. | 
 |  * Which is fine for NSD. For now... | 
 |  **/ | 
 | static void | 
 | b64_initialize_rmap () | 
 | { | 
 | 	int i; | 
 | 	char ch; | 
 |  | 
 | 	/* Null: end of string, stop parsing */ | 
 | 	b64rmap[0] = b64rmap_end; | 
 |  | 
 | 	for (i = 1; i < 256; ++i) { | 
 | 		ch = (char)i; | 
 | 		/* Whitespaces */ | 
 | 		if (isspace(ch)) | 
 | 			b64rmap[i] = b64rmap_space; | 
 | 		/* Padding: stop parsing */ | 
 | 		else if (ch == Pad64) | 
 | 			b64rmap[i] = b64rmap_end; | 
 | 		/* Non-base64 char */ | 
 | 		else | 
 | 			b64rmap[i] = b64rmap_invalid; | 
 | 	} | 
 |  | 
 | 	/* Fill reverse mapping for base64 chars */ | 
 | 	for (i = 0; Base64[i] != '\0'; ++i) | 
 | 		b64rmap[(uint8_t)Base64[i]] = i; | 
 |  | 
 | 	b64rmap_initialized = 1; | 
 | } | 
 |  | 
 | static int | 
 | b64_pton_do(char const *src, uint8_t *target, size_t targsize) | 
 | { | 
 | 	int tarindex, state, ch; | 
 | 	uint8_t ofs; | 
 |  | 
 | 	state = 0; | 
 | 	tarindex = 0; | 
 |  | 
 | 	while (1) | 
 | 	{ | 
 | 		ch = *src++; | 
 | 		ofs = b64rmap[ch]; | 
 |  | 
 | 		if (ofs >= b64rmap_special) { | 
 | 			/* Ignore whitespaces */ | 
 | 			if (ofs == b64rmap_space) | 
 | 				continue; | 
 | 			/* End of base64 characters */ | 
 | 			if (ofs == b64rmap_end) | 
 | 				break; | 
 | 			/* A non-base64 character. */ | 
 | 			return (-1); | 
 | 		} | 
 |  | 
 | 		switch (state) { | 
 | 		case 0: | 
 | 			if ((size_t)tarindex >= targsize) | 
 | 				return (-1); | 
 | 			target[tarindex] = ofs << 2; | 
 | 			state = 1; | 
 | 			break; | 
 | 		case 1: | 
 | 			if ((size_t)tarindex + 1 >= targsize) | 
 | 				return (-1); | 
 | 			target[tarindex]   |=  ofs >> 4; | 
 | 			target[tarindex+1]  = (ofs & 0x0f) | 
 | 						<< 4 ; | 
 | 			tarindex++; | 
 | 			state = 2; | 
 | 			break; | 
 | 		case 2: | 
 | 			if ((size_t)tarindex + 1 >= targsize) | 
 | 				return (-1); | 
 | 			target[tarindex]   |=  ofs >> 2; | 
 | 			target[tarindex+1]  = (ofs & 0x03) | 
 | 						<< 6; | 
 | 			tarindex++; | 
 | 			state = 3; | 
 | 			break; | 
 | 		case 3: | 
 | 			if ((size_t)tarindex >= targsize) | 
 | 				return (-1); | 
 | 			target[tarindex] |= ofs; | 
 | 			tarindex++; | 
 | 			state = 0; | 
 | 			break; | 
 | 		default: | 
 | 			abort(); | 
 | 		} | 
 | 	} | 
 |  | 
 | 	/* | 
 | 	 * We are done decoding Base-64 chars.  Let's see if we ended | 
 | 	 * on a byte boundary, and/or with erroneous trailing characters. | 
 | 	 */ | 
 |  | 
 | 	if (ch == Pad64) {		/* We got a pad char. */ | 
 | 		ch = *src++;		/* Skip it, get next. */ | 
 | 		switch (state) { | 
 | 		case 0:		/* Invalid = in first position */ | 
 | 		case 1:		/* Invalid = in second position */ | 
 | 			return (-1); | 
 |  | 
 | 		case 2:		/* Valid, means one byte of info */ | 
 | 			/* Skip any number of spaces. */ | 
 | 			for ((void)NULL; ch != '\0'; ch = *src++) | 
 | 				if (b64rmap[ch] != b64rmap_space) | 
 | 					break; | 
 | 			/* Make sure there is another trailing = sign. */ | 
 | 			if (ch != Pad64) | 
 | 				return (-1); | 
 | 			ch = *src++;		/* Skip the = */ | 
 | 			/* Fall through to "single trailing =" case. */ | 
 | 			/* FALLTHROUGH */ | 
 |  | 
 | 		case 3:		/* Valid, means two bytes of info */ | 
 | 			/* | 
 | 			 * We know this char is an =.  Is there anything but | 
 | 			 * whitespace after it? | 
 | 			 */ | 
 | 			for ((void)NULL; ch != '\0'; ch = *src++) | 
 | 				if (b64rmap[ch] != b64rmap_space) | 
 | 					return (-1); | 
 |  | 
 | 			/* | 
 | 			 * Now make sure for cases 2 and 3 that the "extra" | 
 | 			 * bits that slopped past the last full byte were | 
 | 			 * zeros.  If we don't check them, they become a | 
 | 			 * subliminal channel. | 
 | 			 */ | 
 | 			if (target[tarindex] != 0) | 
 | 				return (-1); | 
 | 		} | 
 | 	} else { | 
 | 		/* | 
 | 		 * We ended by seeing the end of the string.  Make sure we | 
 | 		 * have no partial bytes lying around. | 
 | 		 */ | 
 | 		if (state != 0) | 
 | 			return (-1); | 
 | 	} | 
 |  | 
 | 	return (tarindex); | 
 | } | 
 |  | 
 |  | 
 | static int | 
 | b64_pton_len(char const *src) | 
 | { | 
 | 	int tarindex, state, ch; | 
 | 	uint8_t ofs; | 
 |  | 
 | 	state = 0; | 
 | 	tarindex = 0; | 
 |  | 
 | 	while (1) | 
 | 	{ | 
 | 		ch = *src++; | 
 | 		ofs = b64rmap[ch]; | 
 |  | 
 | 		if (ofs >= b64rmap_special) { | 
 | 			/* Ignore whitespaces */ | 
 | 			if (ofs == b64rmap_space) | 
 | 				continue; | 
 | 			/* End of base64 characters */ | 
 | 			if (ofs == b64rmap_end) | 
 | 				break; | 
 | 			/* A non-base64 character. */ | 
 | 			return (-1); | 
 | 		} | 
 |  | 
 | 		switch (state) { | 
 | 		case 0: | 
 | 			state = 1; | 
 | 			break; | 
 | 		case 1: | 
 | 			tarindex++; | 
 | 			state = 2; | 
 | 			break; | 
 | 		case 2: | 
 | 			tarindex++; | 
 | 			state = 3; | 
 | 			break; | 
 | 		case 3: | 
 | 			tarindex++; | 
 | 			state = 0; | 
 | 			break; | 
 | 		default: | 
 | 			abort(); | 
 | 		} | 
 | 	} | 
 |  | 
 | 	/* | 
 | 	 * We are done decoding Base-64 chars.  Let's see if we ended | 
 | 	 * on a byte boundary, and/or with erroneous trailing characters. | 
 | 	 */ | 
 |  | 
 | 	if (ch == Pad64) {		/* We got a pad char. */ | 
 | 		ch = *src++;		/* Skip it, get next. */ | 
 | 		switch (state) { | 
 | 		case 0:		/* Invalid = in first position */ | 
 | 		case 1:		/* Invalid = in second position */ | 
 | 			return (-1); | 
 |  | 
 | 		case 2:		/* Valid, means one byte of info */ | 
 | 			/* Skip any number of spaces. */ | 
 | 			for ((void)NULL; ch != '\0'; ch = *src++) | 
 | 				if (b64rmap[ch] != b64rmap_space) | 
 | 					break; | 
 | 			/* Make sure there is another trailing = sign. */ | 
 | 			if (ch != Pad64) | 
 | 				return (-1); | 
 | 			ch = *src++;		/* Skip the = */ | 
 | 			/* Fall through to "single trailing =" case. */ | 
 | 			/* FALLTHROUGH */ | 
 |  | 
 | 		case 3:		/* Valid, means two bytes of info */ | 
 | 			/* | 
 | 			 * We know this char is an =.  Is there anything but | 
 | 			 * whitespace after it? | 
 | 			 */ | 
 | 			for ((void)NULL; ch != '\0'; ch = *src++) | 
 | 				if (b64rmap[ch] != b64rmap_space) | 
 | 					return (-1); | 
 |  | 
 | 		} | 
 | 	} else { | 
 | 		/* | 
 | 		 * We ended by seeing the end of the string.  Make sure we | 
 | 		 * have no partial bytes lying around. | 
 | 		 */ | 
 | 		if (state != 0) | 
 | 			return (-1); | 
 | 	} | 
 |  | 
 | 	return (tarindex); | 
 | } | 
 |  | 
 |  | 
 | int | 
 | b64_pton(char const *src, uint8_t *target, size_t targsize) | 
 | { | 
 | 	if (!b64rmap_initialized) | 
 | 		b64_initialize_rmap (); | 
 |  | 
 | 	if (target) | 
 | 		return b64_pton_do (src, target, targsize); | 
 | 	else | 
 | 		return b64_pton_len (src); | 
 | } |