| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "content/common/ssl_status_serialization.h" | 5 #include "content/common/ssl_status_serialization.h" |
| 6 | 6 |
| 7 #include "base/logging.h" | 7 #include "base/logging.h" |
| 8 #include "base/pickle.h" | 8 #include "base/pickle.h" |
| 9 | 9 |
| 10 namespace { | |
| 11 | |
| 12 // Checks that an integer |security_style| is a valid SecurityStyle enum | |
| 13 // value. Returns true if valid, false otherwise. | |
| 14 bool CheckSecurityStyle(int security_style) { | |
| 15 switch (security_style) { | |
| 16 case content::SECURITY_STYLE_UNKNOWN: | |
| 17 case content::SECURITY_STYLE_UNAUTHENTICATED: | |
| 18 case content::SECURITY_STYLE_AUTHENTICATION_BROKEN: | |
| 19 case content::SECURITY_STYLE_WARNING: | |
| 20 case content::SECURITY_STYLE_AUTHENTICATED: | |
| 21 return true; | |
| 22 } | |
| 23 return false; | |
| 24 } | |
| 25 | |
| 26 } // namespace | |
| 27 | |
| 28 namespace content { | 10 namespace content { |
| 29 | 11 |
| 30 std::string SerializeSecurityInfo(const SSLStatus& ssl_status) { | 12 std::string SerializeSecurityInfo( |
| 13 int cert_id, |
| 14 net::CertStatus cert_status, |
| 15 int security_bits, |
| 16 int ssl_connection_status, |
| 17 const SignedCertificateTimestampIDStatusList& |
| 18 signed_certificate_timestamp_ids) { |
| 31 base::Pickle pickle; | 19 base::Pickle pickle; |
| 32 pickle.WriteInt(ssl_status.security_style); | 20 pickle.WriteInt(cert_id); |
| 33 pickle.WriteInt(ssl_status.cert_id); | 21 pickle.WriteUInt32(cert_status); |
| 34 pickle.WriteUInt32(ssl_status.cert_status); | 22 pickle.WriteInt(security_bits); |
| 35 pickle.WriteInt(ssl_status.security_bits); | 23 pickle.WriteInt(ssl_connection_status); |
| 36 pickle.WriteInt(ssl_status.connection_status); | 24 pickle.WriteInt(signed_certificate_timestamp_ids.size()); |
| 37 pickle.WriteInt(ssl_status.signed_certificate_timestamp_ids.size()); | |
| 38 for (SignedCertificateTimestampIDStatusList::const_iterator iter = | 25 for (SignedCertificateTimestampIDStatusList::const_iterator iter = |
| 39 ssl_status.signed_certificate_timestamp_ids.begin(); | 26 signed_certificate_timestamp_ids.begin(); |
| 40 iter != ssl_status.signed_certificate_timestamp_ids.end(); ++iter) { | 27 iter != signed_certificate_timestamp_ids.end(); ++iter) { |
| 41 pickle.WriteInt(iter->id); | 28 pickle.WriteInt(iter->id); |
| 42 pickle.WriteUInt16(iter->status); | 29 pickle.WriteUInt16(iter->status); |
| 43 } | 30 } |
| 44 return std::string(static_cast<const char*>(pickle.data()), pickle.size()); | 31 return std::string(static_cast<const char*>(pickle.data()), pickle.size()); |
| 45 } | 32 } |
| 46 | 33 |
| 47 bool DeserializeSecurityInfo(const std::string& state, SSLStatus* ssl_status) { | 34 bool DeserializeSecurityInfo(const std::string& state, SSLStatus* ssl_status) { |
| 48 *ssl_status = SSLStatus(); | 35 *ssl_status = SSLStatus(); |
| 49 | 36 |
| 50 if (state.empty()) { | 37 if (state.empty()) { |
| 51 // No SSL used. | 38 // No SSL used. |
| 52 return true; | 39 return true; |
| 53 } | 40 } |
| 54 | 41 |
| 55 base::Pickle pickle(state.data(), static_cast<int>(state.size())); | 42 base::Pickle pickle(state.data(), static_cast<int>(state.size())); |
| 56 base::PickleIterator iter(pickle); | 43 base::PickleIterator iter(pickle); |
| 57 int security_style; | |
| 58 int num_scts_to_read; | 44 int num_scts_to_read; |
| 59 if (!iter.ReadInt(&security_style) || !iter.ReadInt(&ssl_status->cert_id) || | 45 if (!iter.ReadInt(&ssl_status->cert_id) || |
| 60 !iter.ReadUInt32(&ssl_status->cert_status) || | 46 !iter.ReadUInt32(&ssl_status->cert_status) || |
| 61 !iter.ReadInt(&ssl_status->security_bits) || | 47 !iter.ReadInt(&ssl_status->security_bits) || |
| 62 !iter.ReadInt(&ssl_status->connection_status) || | 48 !iter.ReadInt(&ssl_status->connection_status) || |
| 63 !iter.ReadInt(&num_scts_to_read)) { | 49 !iter.ReadInt(&num_scts_to_read)) { |
| 64 *ssl_status = SSLStatus(); | 50 *ssl_status = SSLStatus(); |
| 65 return false; | 51 return false; |
| 66 } | 52 } |
| 67 | 53 |
| 68 if (!CheckSecurityStyle(security_style)) { | |
| 69 *ssl_status = SSLStatus(); | |
| 70 return false; | |
| 71 } | |
| 72 | |
| 73 ssl_status->security_style = static_cast<SecurityStyle>(security_style); | |
| 74 | |
| 75 // Sanity check |security_bits|: the only allowed negative value is -1. | 54 // Sanity check |security_bits|: the only allowed negative value is -1. |
| 76 if (ssl_status->security_bits < -1) { | 55 if (ssl_status->security_bits < -1) { |
| 77 *ssl_status = SSLStatus(); | 56 *ssl_status = SSLStatus(); |
| 78 return false; | 57 return false; |
| 79 } | 58 } |
| 80 | 59 |
| 81 for (; num_scts_to_read > 0; --num_scts_to_read) { | 60 for (; num_scts_to_read > 0; --num_scts_to_read) { |
| 82 int id; | 61 int id; |
| 83 uint16 status; | 62 uint16 status; |
| 84 if (!iter.ReadInt(&id) || !iter.ReadUInt16(&status)) { | 63 if (!iter.ReadInt(&id) || !iter.ReadUInt16(&status)) { |
| 85 *ssl_status = SSLStatus(); | 64 *ssl_status = SSLStatus(); |
| 86 return false; | 65 return false; |
| 87 } | 66 } |
| 88 | 67 |
| 89 ssl_status->signed_certificate_timestamp_ids.push_back( | 68 ssl_status->signed_certificate_timestamp_ids.push_back( |
| 90 SignedCertificateTimestampIDAndStatus( | 69 SignedCertificateTimestampIDAndStatus( |
| 91 id, static_cast<net::ct::SCTVerifyStatus>(status))); | 70 id, static_cast<net::ct::SCTVerifyStatus>(status))); |
| 92 } | 71 } |
| 93 | 72 |
| 94 return true; | 73 return true; |
| 95 } | 74 } |
| 96 | 75 |
| 97 } // namespace content | 76 } // namespace content |
| OLD | NEW |