Index: mozilla/security/nss/lib/util/utilmod.c |
=================================================================== |
--- mozilla/security/nss/lib/util/utilmod.c (revision 191424) |
+++ mozilla/security/nss/lib/util/utilmod.c (working copy) |
@@ -1,684 +0,0 @@ |
-/* This Source Code Form is subject to the terms of the Mozilla Public |
- * License, v. 2.0. If a copy of the MPL was not distributed with this |
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
-/* |
- * The following code handles the storage of PKCS 11 modules used by the |
- * NSS. For the rest of NSS, only one kind of database handle exists: |
- * |
- * SFTKDBHandle |
- * |
- * There is one SFTKDBHandle for each key database and one for each cert |
- * database. These databases are opened as associated pairs, one pair per |
- * slot. SFTKDBHandles are reference counted objects. |
- * |
- * Each SFTKDBHandle points to a low level database handle (SDB). This handle |
- * represents the underlying physical database. These objects are not |
- * reference counted, and are 'owned' by their respective SFTKDBHandles. |
- */ |
- |
-#include "prprf.h" |
-#include "prsystem.h" |
-#include "secport.h" |
-#include "utilpars.h" |
-#include "secerr.h" |
-#if defined (_WIN32) |
-#include <io.h> |
-#endif |
- |
-/**************************************************************** |
- * |
- * Secmod database. |
- * |
- * The new secmod database is simply a text file with each of the module |
- * entries in the following form: |
- * |
- * # |
- * # This is a comment The next line is the library to load |
- * library=libmypkcs11.so |
- * name="My PKCS#11 module" |
- * params="my library's param string" |
- * nss="NSS parameters" |
- * other="parameters for other libraries and applications" |
- * |
- * library=libmynextpk11.so |
- * name="My other PKCS#11 module" |
- */ |
- |
- |
-/* |
- * Smart string cat functions. Automatically manage the memory. |
- * The first parameter is the source string. If it's null, we |
- * allocate memory for it. If it's not, we reallocate memory |
- * so the the concanenated string fits. |
- */ |
-static char * |
-nssutil_DupnCat(char *baseString, const char *str, int str_len) |
-{ |
- int len = (baseString ? PORT_Strlen(baseString) : 0) + 1; |
- char *newString; |
- |
- len += str_len; |
- newString = (char *) PORT_Realloc(baseString,len); |
- if (newString == NULL) { |
- PORT_Free(baseString); |
- return NULL; |
- } |
- if (baseString == NULL) *newString = 0; |
- return PORT_Strncat(newString,str, str_len); |
-} |
- |
-/* Same as nssutil_DupnCat except it concatenates the full string, not a |
- * partial one */ |
-static char * |
-nssutil_DupCat(char *baseString, const char *str) |
-{ |
- return nssutil_DupnCat(baseString, str, PORT_Strlen(str)); |
-} |
- |
-/* function to free up all the memory associated with a null terminated |
- * array of module specs */ |
-static SECStatus |
-nssutil_releaseSpecList(char **moduleSpecList) |
-{ |
- if (moduleSpecList) { |
- char **index; |
- for(index = moduleSpecList; *index; index++) { |
- PORT_Free(*index); |
- } |
- PORT_Free(moduleSpecList); |
- } |
- return SECSuccess; |
-} |
- |
-#define SECMOD_STEP 10 |
-static SECStatus |
-nssutil_growList(char ***pModuleList, int *useCount, int last) |
-{ |
- char **newModuleList; |
- |
- *useCount += SECMOD_STEP; |
- newModuleList = (char **)PORT_Realloc(*pModuleList, |
- *useCount*sizeof(char *)); |
- if (newModuleList == NULL) { |
- return SECFailure; |
- } |
- PORT_Memset(&newModuleList[last],0, sizeof(char *)*SECMOD_STEP); |
- *pModuleList = newModuleList; |
- return SECSuccess; |
-} |
- |
-static |
-char *_NSSUTIL_GetOldSecmodName(const char *dbname,const char *filename) |
-{ |
- char *file = NULL; |
- char *dirPath = PORT_Strdup(dbname); |
- char *sep; |
- |
- sep = PORT_Strrchr(dirPath,*NSSUTIL_PATH_SEPARATOR); |
-#ifdef _WIN32 |
- if (!sep) { |
- /* utilparst.h defines NSSUTIL_PATH_SEPARATOR as "/" for all |
- * platforms. */ |
- sep = PORT_Strrchr(dirPath,'\\'); |
- } |
-#endif |
- if (sep) { |
- *sep = 0; |
- file = PR_smprintf("%s"NSSUTIL_PATH_SEPARATOR"%s", dirPath, filename); |
- } else { |
- file = PR_smprintf("%s", filename); |
- } |
- PORT_Free(dirPath); |
- return file; |
-} |
- |
-static SECStatus nssutil_AddSecmodDB(const char *appName, |
- const char *filename, const char *dbname, |
- char *module, PRBool rw); |
- |
-#ifdef XP_UNIX |
-#include <unistd.h> |
-#endif |
-#include <fcntl.h> |
- |
-/* same as fopen, except it doesn't use umask, but explicit */ |
-FILE * |
-lfopen(const char *name, const char *mode, int flags) |
-{ |
- int fd; |
- FILE *file; |
- |
- fd = open(name, flags, 0600); |
- if (fd < 0) { |
- return NULL; |
- } |
- file = fdopen(fd, mode); |
- if (!file) { |
- close(fd); |
- } |
- /* file inherits fd */ |
- return file; |
-} |
- |
-#define MAX_LINE_LENGTH 2048 |
- |
-/* |
- * Read all the existing modules in out of the file. |
- */ |
-static char ** |
-nssutil_ReadSecmodDB(const char *appName, |
- const char *filename, const char *dbname, |
- char *params, PRBool rw) |
-{ |
- FILE *fd = NULL; |
- char **moduleList = NULL; |
- int moduleCount = 1; |
- int useCount = SECMOD_STEP; |
- char line[MAX_LINE_LENGTH]; |
- PRBool internal = PR_FALSE; |
- PRBool skipParams = PR_FALSE; |
- char *moduleString = NULL; |
- char *paramsValue=NULL; |
- PRBool failed = PR_TRUE; |
- |
- moduleList = (char **) PORT_ZAlloc(useCount*sizeof(char **)); |
- if (moduleList == NULL) return NULL; |
- |
- if (dbname == NULL) { |
- goto return_default; |
- } |
- |
- /* do we really want to use streams here */ |
- fd = fopen(dbname, "r"); |
- if (fd == NULL) goto done; |
- |
- /* |
- * the following loop takes line separated config lines and collapses |
- * the lines to a single string, escaping and quoting as necessary. |
- */ |
- /* loop state variables */ |
- moduleString = NULL; /* current concatenated string */ |
- internal = PR_FALSE; /* is this an internal module */ |
- skipParams = PR_FALSE; /* did we find an override parameter block*/ |
- paramsValue = NULL; /* the current parameter block value */ |
- while (fgets(line, sizeof(line), fd) != NULL) { |
- int len = PORT_Strlen(line); |
- |
- /* remove the ending newline */ |
- if (len && line[len-1] == '\n') { |
- len--; |
- line[len] = 0; |
- } |
- if (*line == '#') { |
- continue; |
- } |
- if (*line != 0) { |
- /* |
- * The PKCS #11 group standard assumes blocks of strings |
- * separated by new lines, clumped by new lines. Internally |
- * we take strings separated by spaces, so we may need to escape |
- * certain spaces. |
- */ |
- char *value = PORT_Strchr(line,'='); |
- |
- /* there is no value, write out the stanza as is */ |
- if (value == NULL || value[1] == 0) { |
- if (moduleString) { |
- moduleString = nssutil_DupnCat(moduleString," ", 1); |
- if (moduleString == NULL) goto loser; |
- } |
- moduleString = nssutil_DupCat(moduleString, line); |
- if (moduleString == NULL) goto loser; |
- /* value is already quoted, just write it out */ |
- } else if (value[1] == '"') { |
- if (moduleString) { |
- moduleString = nssutil_DupnCat(moduleString," ", 1); |
- if (moduleString == NULL) goto loser; |
- } |
- moduleString = nssutil_DupCat(moduleString, line); |
- if (moduleString == NULL) goto loser; |
- /* we have an override parameter section, remember that |
- * we found this (see following comment about why this |
- * is necessary). */ |
- if (PORT_Strncasecmp(line, "parameters", 10) == 0) { |
- skipParams = PR_TRUE; |
- } |
- /* |
- * The internal token always overrides it's parameter block |
- * from the passed in parameters, so wait until then end |
- * before we include the parameter block in case we need to |
- * override it. NOTE: if the parameter block is quoted with ("), |
- * this override does not happen. This allows you to override |
- * the application's parameter configuration. |
- * |
- * parameter block state is controlled by the following variables: |
- * skipParams - Bool : set to true of we have an override param |
- * block (all other blocks, either implicit or explicit are |
- * ignored). |
- * paramsValue - char * : pointer to the current param block. In |
- * the absence of overrides, paramsValue is set to the first |
- * parameter block we find. All subsequent blocks are ignored. |
- * When we find an internal token, the application passed |
- * parameters take precident. |
- */ |
- } else if (PORT_Strncasecmp(line, "parameters", 10) == 0) { |
- /* already have parameters */ |
- if (paramsValue) { |
- continue; |
- } |
- paramsValue = NSSUTIL_Quote(&value[1], '"'); |
- if (paramsValue == NULL) goto loser; |
- continue; |
- } else { |
- /* may need to quote */ |
- char *newLine; |
- if (moduleString) { |
- moduleString = nssutil_DupnCat(moduleString," ", 1); |
- if (moduleString == NULL) goto loser; |
- } |
- moduleString = nssutil_DupnCat(moduleString,line,value-line+1); |
- if (moduleString == NULL) goto loser; |
- newLine = NSSUTIL_Quote(&value[1],'"'); |
- if (newLine == NULL) goto loser; |
- moduleString = nssutil_DupCat(moduleString,newLine); |
- PORT_Free(newLine); |
- if (moduleString == NULL) goto loser; |
- } |
- |
- /* check to see if it's internal? */ |
- if (PORT_Strncasecmp(line, "NSS=", 4) == 0) { |
- /* This should be case insensitive! reviewers make |
- * me fix it if it's not */ |
- if (PORT_Strstr(line,"internal")) { |
- internal = PR_TRUE; |
- /* override the parameters */ |
- if (paramsValue) { |
- PORT_Free(paramsValue); |
- } |
- paramsValue = NSSUTIL_Quote(params, '"'); |
- } |
- } |
- continue; |
- } |
- if ((moduleString == NULL) || (*moduleString == 0)) { |
- continue; |
- } |
- |
- /* |
- * if we are here, we have found a complete stanza. Now write out |
- * any param section we may have found. |
- */ |
- if (paramsValue) { |
- /* we had an override */ |
- if (!skipParams) { |
- moduleString = nssutil_DupnCat(moduleString," parameters=", 12); |
- if (moduleString == NULL) goto loser; |
- moduleString = nssutil_DupCat(moduleString, paramsValue); |
- if (moduleString == NULL) goto loser; |
- } |
- PORT_Free(paramsValue); |
- paramsValue = NULL; |
- } |
- |
- if ((moduleCount+1) >= useCount) { |
- SECStatus rv; |
- rv = nssutil_growList(&moduleList, &useCount, moduleCount+1); |
- if (rv != SECSuccess) { |
- goto loser; |
- } |
- } |
- |
- if (internal) { |
- moduleList[0] = moduleString; |
- } else { |
- moduleList[moduleCount] = moduleString; |
- moduleCount++; |
- } |
- moduleString = NULL; |
- internal = PR_FALSE; |
- skipParams = PR_FALSE; |
- } |
- |
- if (moduleString) { |
- PORT_Free(moduleString); |
- moduleString = NULL; |
- } |
-done: |
- /* if we couldn't open a pkcs11 database, look for the old one */ |
- if (fd == NULL) { |
- char *olddbname = _NSSUTIL_GetOldSecmodName(dbname,filename); |
- PRStatus status; |
- |
- /* couldn't get the old name */ |
- if (!olddbname) { |
- goto bail; |
- } |
- |
- /* old one exists */ |
- status = PR_Access(olddbname, PR_ACCESS_EXISTS); |
- if (status == PR_SUCCESS) { |
- PR_smprintf_free(olddbname); |
- PORT_SetError(SEC_ERROR_LEGACY_DATABASE); |
- return NULL; |
- } |
- |
-bail: |
- if (olddbname) { |
- PR_smprintf_free(olddbname); |
- } |
- } |
- |
-return_default: |
- |
- if (!moduleList[0]) { |
- char * newParams; |
- moduleString = PORT_Strdup(NSSUTIL_DEFAULT_INTERNAL_INIT1); |
- newParams = NSSUTIL_Quote(params,'"'); |
- if (newParams == NULL) goto loser; |
- moduleString = nssutil_DupCat(moduleString, newParams); |
- PORT_Free(newParams); |
- if (moduleString == NULL) goto loser; |
- moduleString = nssutil_DupCat(moduleString, |
- NSSUTIL_DEFAULT_INTERNAL_INIT2); |
- if (moduleString == NULL) goto loser; |
- moduleString = nssutil_DupCat(moduleString, |
- NSSUTIL_DEFAULT_SFTKN_FLAGS); |
- if (moduleString == NULL) goto loser; |
- moduleString = nssutil_DupCat(moduleString, |
- NSSUTIL_DEFAULT_INTERNAL_INIT3); |
- if (moduleString == NULL) goto loser; |
- moduleList[0] = moduleString; |
- moduleString = NULL; |
- } |
- failed = PR_FALSE; |
- |
-loser: |
- /* |
- * cleanup |
- */ |
- /* deal with trust cert db here */ |
- if (moduleString) { |
- PORT_Free(moduleString); |
- moduleString = NULL; |
- } |
- if (paramsValue) { |
- PORT_Free(paramsValue); |
- paramsValue = NULL; |
- } |
- if (failed || (moduleList[0] == NULL)) { |
- /* This is wrong! FIXME */ |
- nssutil_releaseSpecList(moduleList); |
- moduleList = NULL; |
- failed = PR_TRUE; |
- } |
- if (fd != NULL) { |
- fclose(fd); |
- } else if (!failed && rw) { |
- /* update our internal module */ |
- nssutil_AddSecmodDB(appName,filename,dbname,moduleList[0],rw); |
- } |
- return moduleList; |
-} |
- |
-static SECStatus |
-nssutil_ReleaseSecmodDBData(const char *appName, |
- const char *filename, const char *dbname, |
- char **moduleSpecList, PRBool rw) |
-{ |
- if (moduleSpecList) { |
- nssutil_releaseSpecList(moduleSpecList); |
- } |
- return SECSuccess; |
-} |
- |
- |
-/* |
- * Delete a module from the Data Base |
- */ |
-static SECStatus |
-nssutil_DeleteSecmodDB(const char *appName, |
- const char *filename, const char *dbname, |
- char *args, PRBool rw) |
-{ |
- /* SHDB_FIXME implement */ |
- FILE *fd = NULL; |
- FILE *fd2 = NULL; |
- char line[MAX_LINE_LENGTH]; |
- char *dbname2 = NULL; |
- char *block = NULL; |
- char *name = NULL; |
- char *lib = NULL; |
- int name_len, lib_len; |
- PRBool skip = PR_FALSE; |
- PRBool found = PR_FALSE; |
- |
- if (dbname == NULL) { |
- PORT_SetError(SEC_ERROR_INVALID_ARGS); |
- return SECFailure; |
- } |
- |
- if (!rw) { |
- PORT_SetError(SEC_ERROR_READ_ONLY); |
- return SECFailure; |
- } |
- |
- dbname2 = PORT_Strdup(dbname); |
- if (dbname2 == NULL) goto loser; |
- dbname2[strlen(dbname)-1]++; |
- |
- /* do we really want to use streams here */ |
- fd = fopen(dbname, "r"); |
- if (fd == NULL) goto loser; |
- fd2 = lfopen(dbname2, "w+", O_CREAT|O_RDWR|O_TRUNC); |
- if (fd2 == NULL) goto loser; |
- |
- name = NSSUTIL_ArgGetParamValue("name",args); |
- if (name) { |
- name_len = PORT_Strlen(name); |
- } |
- lib = NSSUTIL_ArgGetParamValue("library",args); |
- if (lib) { |
- lib_len = PORT_Strlen(lib); |
- } |
- |
- |
- /* |
- * the following loop takes line separated config files and collapses |
- * the lines to a single string, escaping and quoting as necessary. |
- */ |
- /* loop state variables */ |
- block = NULL; |
- skip = PR_FALSE; |
- while (fgets(line, sizeof(line), fd) != NULL) { |
- /* If we are processing a block (we haven't hit a blank line yet */ |
- if (*line != '\n') { |
- /* skip means we are in the middle of a block we are deleting */ |
- if (skip) { |
- continue; |
- } |
- /* if we haven't found the block yet, check to see if this block |
- * matches our requirements */ |
- if (!found && ((name && (PORT_Strncasecmp(line,"name=",5) == 0) && |
- (PORT_Strncmp(line+5,name,name_len) == 0)) || |
- (lib && (PORT_Strncasecmp(line,"library=",8) == 0) && |
- (PORT_Strncmp(line+8,lib,lib_len) == 0)))) { |
- |
- /* yup, we don't need to save any more data, */ |
- PORT_Free(block); |
- block=NULL; |
- /* we don't need to collect more of this block */ |
- skip = PR_TRUE; |
- /* we don't need to continue searching for the block */ |
- found =PR_TRUE; |
- continue; |
- } |
- /* not our match, continue to collect data in this block */ |
- block = nssutil_DupCat(block,line); |
- continue; |
- } |
- /* we've collected a block of data that wasn't the module we were |
- * looking for, write it out */ |
- if (block) { |
- fwrite(block, PORT_Strlen(block), 1, fd2); |
- PORT_Free(block); |
- block = NULL; |
- } |
- /* If we didn't just delete the this block, keep the blank line */ |
- if (!skip) { |
- fputs(line,fd2); |
- } |
- /* we are definately not in a deleted block anymore */ |
- skip = PR_FALSE; |
- } |
- fclose(fd); |
- fclose(fd2); |
- if (found) { |
- /* rename dbname2 to dbname */ |
- PR_Delete(dbname); |
- PR_Rename(dbname2,dbname); |
- } else { |
- PR_Delete(dbname2); |
- } |
- PORT_Free(dbname2); |
- PORT_Free(lib); |
- PORT_Free(name); |
- PORT_Free(block); |
- return SECSuccess; |
- |
-loser: |
- if (fd != NULL) { |
- fclose(fd); |
- } |
- if (fd2 != NULL) { |
- fclose(fd2); |
- } |
- if (dbname2) { |
- PR_Delete(dbname2); |
- PORT_Free(dbname2); |
- } |
- PORT_Free(lib); |
- PORT_Free(name); |
- return SECFailure; |
-} |
- |
-/* |
- * Add a module to the Data base |
- */ |
-static SECStatus |
-nssutil_AddSecmodDB(const char *appName, |
- const char *filename, const char *dbname, |
- char *module, PRBool rw) |
-{ |
- FILE *fd = NULL; |
- char *block = NULL; |
- PRBool libFound = PR_FALSE; |
- |
- if (dbname == NULL) { |
- PORT_SetError(SEC_ERROR_INVALID_ARGS); |
- return SECFailure; |
- } |
- |
- /* can't write to a read only module */ |
- if (!rw) { |
- PORT_SetError(SEC_ERROR_READ_ONLY); |
- return SECFailure; |
- } |
- |
- /* remove the previous version if it exists */ |
- (void) nssutil_DeleteSecmodDB(appName, filename, |
- dbname, module, rw); |
- |
- fd = lfopen(dbname, "a+", O_CREAT|O_RDWR|O_APPEND); |
- if (fd == NULL) { |
- return SECFailure; |
- } |
- module = NSSUTIL_ArgStrip(module); |
- while (*module) { |
- int count; |
- char *keyEnd = PORT_Strchr(module,'='); |
- char *value; |
- |
- if (PORT_Strncmp(module, "library=", 8) == 0) { |
- libFound=PR_TRUE; |
- } |
- if (keyEnd == NULL) { |
- block = nssutil_DupCat(block, module); |
- break; |
- } |
- block = nssutil_DupnCat(block, module, keyEnd-module+1); |
- if (block == NULL) { goto loser; } |
- value = NSSUTIL_ArgFetchValue(&keyEnd[1], &count); |
- if (value) { |
- block = nssutil_DupCat(block, NSSUTIL_ArgStrip(value)); |
- PORT_Free(value); |
- } |
- if (block == NULL) { goto loser; } |
- block = nssutil_DupnCat(block, "\n", 1); |
- module = keyEnd + 1 + count; |
- module = NSSUTIL_ArgStrip(module); |
- } |
- if (block) { |
- if (!libFound) { |
- fprintf(fd,"library=\n"); |
- } |
- fwrite(block, PORT_Strlen(block), 1, fd); |
- fprintf(fd,"\n"); |
- PORT_Free(block); |
- block = NULL; |
- } |
- fclose(fd); |
- return SECSuccess; |
- |
-loser: |
- PORT_Free(block); |
- fclose(fd); |
- return SECFailure; |
-} |
- |
- |
-char ** |
-NSSUTIL_DoModuleDBFunction(unsigned long function,char *parameters, void *args) |
-{ |
- char *secmod = NULL; |
- char *appName = NULL; |
- char *filename = NULL; |
- NSSDBType dbType = NSS_DB_TYPE_NONE; |
- PRBool rw; |
- static char *success="Success"; |
- char **rvstr = NULL; |
- |
- |
- secmod = _NSSUTIL_GetSecmodName(parameters, &dbType, &appName, |
- &filename, &rw); |
- if ((dbType == NSS_DB_TYPE_LEGACY) || |
- (dbType == NSS_DB_TYPE_MULTIACCESS)) { |
- /* we can't handle the old database, only softoken can */ |
- PORT_SetError(SEC_ERROR_LEGACY_DATABASE); |
- rvstr = NULL; |
- goto done; |
- } |
- |
- switch (function) { |
- case SECMOD_MODULE_DB_FUNCTION_FIND: |
- rvstr = nssutil_ReadSecmodDB(appName,filename, |
- secmod,(char *)parameters,rw); |
- break; |
- case SECMOD_MODULE_DB_FUNCTION_ADD: |
- rvstr = (nssutil_AddSecmodDB(appName,filename, |
- secmod,(char *)args,rw) == SECSuccess) ? &success: NULL; |
- break; |
- case SECMOD_MODULE_DB_FUNCTION_DEL: |
- rvstr = (nssutil_DeleteSecmodDB(appName,filename, |
- secmod,(char *)args,rw) == SECSuccess) ? &success: NULL; |
- break; |
- case SECMOD_MODULE_DB_FUNCTION_RELEASE: |
- rvstr = (nssutil_ReleaseSecmodDBData(appName,filename, |
- secmod, (char **)args,rw) == SECSuccess) ? &success: NULL; |
- break; |
- } |
-done: |
- if (secmod) PR_smprintf_free(secmod); |
- if (appName) PORT_Free(appName); |
- if (filename) PORT_Free(filename); |
- return rvstr; |
-} |