| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "content/common/ssl_status_serialization.h" | 5 #include "content/common/ssl_status_serialization.h" |
| 6 | 6 |
| 7 #include <stdint.h> | 7 #include <stdint.h> |
| 8 | 8 |
| 9 #include "base/logging.h" | 9 #include "base/logging.h" |
| 10 #include "base/numerics/safe_conversions.h" |
| 10 #include "base/pickle.h" | 11 #include "base/pickle.h" |
| 11 | 12 |
| 12 namespace { | 13 namespace { |
| 13 | 14 |
| 14 // Checks that an integer |security_style| is a valid SecurityStyle enum | 15 // Checks that an integer |security_style| is a valid SecurityStyle enum |
| 15 // value. Returns true if valid, false otherwise. | 16 // value. Returns true if valid, false otherwise. |
| 16 bool CheckSecurityStyle(int security_style) { | 17 bool CheckSecurityStyle(int security_style) { |
| 17 switch (security_style) { | 18 switch (security_style) { |
| 18 case content::SECURITY_STYLE_UNKNOWN: | 19 case content::SECURITY_STYLE_UNKNOWN: |
| 19 case content::SECURITY_STYLE_UNAUTHENTICATED: | 20 case content::SECURITY_STYLE_UNAUTHENTICATED: |
| (...skipping 10 matching lines...) Expand all Loading... |
| 30 namespace content { | 31 namespace content { |
| 31 | 32 |
| 32 std::string SerializeSecurityInfo(const SSLStatus& ssl_status) { | 33 std::string SerializeSecurityInfo(const SSLStatus& ssl_status) { |
| 33 base::Pickle pickle; | 34 base::Pickle pickle; |
| 34 pickle.WriteInt(ssl_status.security_style); | 35 pickle.WriteInt(ssl_status.security_style); |
| 35 pickle.WriteInt(ssl_status.cert_id); | 36 pickle.WriteInt(ssl_status.cert_id); |
| 36 pickle.WriteUInt32(ssl_status.cert_status); | 37 pickle.WriteUInt32(ssl_status.cert_status); |
| 37 pickle.WriteInt(ssl_status.security_bits); | 38 pickle.WriteInt(ssl_status.security_bits); |
| 38 pickle.WriteInt(ssl_status.key_exchange_info); | 39 pickle.WriteInt(ssl_status.key_exchange_info); |
| 39 pickle.WriteInt(ssl_status.connection_status); | 40 pickle.WriteInt(ssl_status.connection_status); |
| 40 pickle.WriteInt(ssl_status.signed_certificate_timestamp_ids.size()); | 41 pickle.WriteInt(ssl_status.num_unknown_scts); |
| 41 for (SignedCertificateTimestampIDStatusList::const_iterator iter = | 42 pickle.WriteInt(ssl_status.num_invalid_scts); |
| 42 ssl_status.signed_certificate_timestamp_ids.begin(); | 43 pickle.WriteInt(ssl_status.num_valid_scts); |
| 43 iter != ssl_status.signed_certificate_timestamp_ids.end(); ++iter) { | |
| 44 pickle.WriteInt(iter->id); | |
| 45 pickle.WriteUInt16(iter->status); | |
| 46 } | |
| 47 return std::string(static_cast<const char*>(pickle.data()), pickle.size()); | 44 return std::string(static_cast<const char*>(pickle.data()), pickle.size()); |
| 48 } | 45 } |
| 49 | 46 |
| 50 bool DeserializeSecurityInfo(const std::string& state, SSLStatus* ssl_status) { | 47 bool DeserializeSecurityInfo(const std::string& state, SSLStatus* ssl_status) { |
| 51 *ssl_status = SSLStatus(); | 48 *ssl_status = SSLStatus(); |
| 52 | 49 |
| 53 if (state.empty()) { | 50 if (state.empty()) { |
| 54 // No SSL used. | 51 // No SSL used. |
| 55 return true; | 52 return true; |
| 56 } | 53 } |
| 57 | 54 |
| 58 base::Pickle pickle(state.data(), static_cast<int>(state.size())); | 55 base::Pickle pickle(state.data(), base::checked_cast<int>(state.size())); |
| 59 base::PickleIterator iter(pickle); | 56 base::PickleIterator iter(pickle); |
| 60 int security_style; | 57 int security_style; |
| 61 int num_scts_to_read; | 58 if (!iter.ReadInt(&security_style) || |
| 62 if (!iter.ReadInt(&security_style) || !iter.ReadInt(&ssl_status->cert_id) || | 59 !iter.ReadInt(&ssl_status->cert_id) || |
| 63 !iter.ReadUInt32(&ssl_status->cert_status) || | 60 !iter.ReadUInt32(&ssl_status->cert_status) || |
| 64 !iter.ReadInt(&ssl_status->security_bits) || | 61 !iter.ReadInt(&ssl_status->security_bits) || |
| 65 !iter.ReadInt(&ssl_status->key_exchange_info) || | 62 !iter.ReadInt(&ssl_status->key_exchange_info) || |
| 66 !iter.ReadInt(&ssl_status->connection_status) || | 63 !iter.ReadInt(&ssl_status->connection_status) || |
| 67 !iter.ReadInt(&num_scts_to_read)) { | 64 !iter.ReadInt(&ssl_status->num_unknown_scts) || |
| 65 !iter.ReadInt(&ssl_status->num_invalid_scts) || |
| 66 !iter.ReadInt(&ssl_status->num_valid_scts)) { |
| 68 *ssl_status = SSLStatus(); | 67 *ssl_status = SSLStatus(); |
| 69 return false; | 68 return false; |
| 70 } | 69 } |
| 71 | 70 |
| 72 if (!CheckSecurityStyle(security_style)) { | 71 if (!CheckSecurityStyle(security_style)) { |
| 73 *ssl_status = SSLStatus(); | 72 *ssl_status = SSLStatus(); |
| 74 return false; | 73 return false; |
| 75 } | 74 } |
| 76 | 75 |
| 77 ssl_status->security_style = static_cast<SecurityStyle>(security_style); | 76 ssl_status->security_style = static_cast<SecurityStyle>(security_style); |
| 78 | 77 |
| 79 // Sanity check |security_bits|: the only allowed negative value is -1. | 78 // Sanity check |security_bits|: the only allowed negative value is -1. |
| 80 if (ssl_status->security_bits < -1) { | 79 if (ssl_status->security_bits < -1) { |
| 81 *ssl_status = SSLStatus(); | 80 *ssl_status = SSLStatus(); |
| 82 return false; | 81 return false; |
| 83 } | 82 } |
| 84 | 83 |
| 85 // Sanity check |key_exchange_info|: 0 or greater. | 84 // Sanity check |key_exchange_info|: 0 or greater. |
| 86 if (ssl_status->key_exchange_info < 0) { | 85 if (ssl_status->key_exchange_info < 0) { |
| 87 *ssl_status = SSLStatus(); | 86 *ssl_status = SSLStatus(); |
| 88 return false; | 87 return false; |
| 89 } | 88 } |
| 90 | 89 |
| 91 for (; num_scts_to_read > 0; --num_scts_to_read) { | |
| 92 int id; | |
| 93 uint16_t status; | |
| 94 if (!iter.ReadInt(&id) || !iter.ReadUInt16(&status)) { | |
| 95 *ssl_status = SSLStatus(); | |
| 96 return false; | |
| 97 } | |
| 98 | |
| 99 ssl_status->signed_certificate_timestamp_ids.push_back( | |
| 100 SignedCertificateTimestampIDAndStatus( | |
| 101 id, static_cast<net::ct::SCTVerifyStatus>(status))); | |
| 102 } | |
| 103 | |
| 104 return true; | 90 return true; |
| 105 } | 91 } |
| 106 | 92 |
| 107 } // namespace content | 93 } // namespace content |
| OLD | NEW |