mirror of
https://github.com/freebsd/freebsd-src
synced 2024-09-06 17:18:32 +00:00
![Cy Schubert](/assets/img/avatar_default.png)
* Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) * Fixed Excessive time spent checking invalid RSA public keys ([CVE-2023-6237]) * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129]) * Fix excessive time spent in DH check / generation with large Q parameter value ([CVE-2023-5678]) Release notes can be found at https://www.openssl.org/news/openssl-3.0-notes.html. Approved by: emaste MFC after: 3 days Merge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a'
184 lines
5.3 KiB
C
184 lines
5.3 KiB
C
/*
|
|
* Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
* https://www.openssl.org/source/license.html
|
|
* or in the file LICENSE in the source distribution.
|
|
*/
|
|
|
|
#include <string.h>
|
|
#include <openssl/ssl.h>
|
|
#include <openssl/bio.h>
|
|
#include <openssl/err.h>
|
|
|
|
#include "internal/packet.h"
|
|
|
|
#include "helpers/ssltestlib.h"
|
|
#include "testutil.h"
|
|
|
|
struct async_ctrs {
|
|
unsigned int rctr;
|
|
unsigned int wctr;
|
|
};
|
|
|
|
static SSL_CTX *serverctx = NULL;
|
|
static SSL_CTX *clientctx = NULL;
|
|
|
|
#define MAX_ATTEMPTS 100
|
|
|
|
|
|
/*
|
|
* There are 9 passes in the tests
|
|
* 0 = control test
|
|
* tests during writes
|
|
* 1 = free buffers
|
|
* 2 = + allocate buffers after free
|
|
* 3 = + allocate buffers again
|
|
* 4 = + free buffers after allocation
|
|
* tests during reads
|
|
* 5 = + free buffers
|
|
* 6 = + free buffers again
|
|
* 7 = + allocate buffers after free
|
|
* 8 = + free buffers after allocation
|
|
*/
|
|
static int test_func(int test)
|
|
{
|
|
int result = 0;
|
|
SSL *serverssl = NULL, *clientssl = NULL;
|
|
int ret;
|
|
size_t i, j;
|
|
const char testdata[] = "Test data";
|
|
char buf[sizeof(testdata)];
|
|
|
|
if (!TEST_true(create_ssl_objects(serverctx, clientctx, &serverssl, &clientssl,
|
|
NULL, NULL))) {
|
|
TEST_error("Test %d failed: Create SSL objects failed\n", test);
|
|
goto end;
|
|
}
|
|
|
|
if (!TEST_true(create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE))) {
|
|
TEST_error("Test %d failed: Create SSL connection failed\n", test);
|
|
goto end;
|
|
}
|
|
|
|
/*
|
|
* Send and receive some test data. Do the whole thing twice to ensure
|
|
* we hit at least one async event in both reading and writing
|
|
*/
|
|
for (j = 0; j < 2; j++) {
|
|
int len;
|
|
|
|
/*
|
|
|
|
* Write some test data. It should never take more than 2 attempts
|
|
* (the first one might be a retryable fail).
|
|
*/
|
|
for (ret = -1, i = 0, len = 0; len != sizeof(testdata) && i < 2;
|
|
i++) {
|
|
/* test == 0 mean to free/allocate = control */
|
|
if (test >= 1 && !TEST_true(SSL_free_buffers(clientssl)))
|
|
goto end;
|
|
if (test >= 2 && !TEST_true(SSL_alloc_buffers(clientssl)))
|
|
goto end;
|
|
/* allocate a second time */
|
|
if (test >= 3 && !TEST_true(SSL_alloc_buffers(clientssl)))
|
|
goto end;
|
|
if (test >= 4 && !TEST_true(SSL_free_buffers(clientssl)))
|
|
goto end;
|
|
|
|
ret = SSL_write(clientssl, testdata + len,
|
|
sizeof(testdata) - len);
|
|
if (ret > 0) {
|
|
len += ret;
|
|
} else {
|
|
int ssl_error = SSL_get_error(clientssl, ret);
|
|
|
|
if (ssl_error == SSL_ERROR_SYSCALL ||
|
|
ssl_error == SSL_ERROR_SSL) {
|
|
TEST_error("Test %d failed: Failed to write app data\n", test);
|
|
goto end;
|
|
}
|
|
}
|
|
}
|
|
if (!TEST_size_t_eq(len, sizeof(testdata)))
|
|
goto end;
|
|
/*
|
|
* Now read the test data. It may take more attempts here because
|
|
* it could fail once for each byte read, including all overhead
|
|
* bytes from the record header/padding etc.
|
|
*/
|
|
for (ret = -1, i = 0, len = 0; len != sizeof(testdata) &&
|
|
i < MAX_ATTEMPTS; i++)
|
|
{
|
|
if (test >= 5 && !TEST_true(SSL_free_buffers(serverssl)))
|
|
goto end;
|
|
/* free a second time */
|
|
if (test >= 6 && !TEST_true(SSL_free_buffers(serverssl)))
|
|
goto end;
|
|
if (test >= 7 && !TEST_true(SSL_alloc_buffers(serverssl)))
|
|
goto end;
|
|
if (test >= 8 && !TEST_true(SSL_free_buffers(serverssl)))
|
|
goto end;
|
|
|
|
ret = SSL_read(serverssl, buf + len, sizeof(buf) - len);
|
|
if (ret > 0) {
|
|
len += ret;
|
|
} else {
|
|
int ssl_error = SSL_get_error(serverssl, ret);
|
|
|
|
if (ssl_error == SSL_ERROR_SYSCALL ||
|
|
ssl_error == SSL_ERROR_SSL) {
|
|
TEST_error("Test %d failed: Failed to read app data\n", test);
|
|
goto end;
|
|
}
|
|
}
|
|
}
|
|
if (!TEST_mem_eq(buf, len, testdata, sizeof(testdata)))
|
|
goto end;
|
|
}
|
|
|
|
result = 1;
|
|
end:
|
|
if (!result)
|
|
ERR_print_errors_fp(stderr);
|
|
|
|
SSL_free(clientssl);
|
|
SSL_free(serverssl);
|
|
|
|
return result;
|
|
}
|
|
|
|
OPT_TEST_DECLARE_USAGE("certfile privkeyfile\n")
|
|
|
|
int setup_tests(void)
|
|
{
|
|
char *cert, *pkey;
|
|
|
|
if (!test_skip_common_options()) {
|
|
TEST_error("Error parsing test options\n");
|
|
return 0;
|
|
}
|
|
|
|
if (!TEST_ptr(cert = test_get_argument(0))
|
|
|| !TEST_ptr(pkey = test_get_argument(1)))
|
|
return 0;
|
|
|
|
if (!create_ssl_ctx_pair(NULL, TLS_server_method(), TLS_client_method(),
|
|
TLS1_VERSION, 0,
|
|
&serverctx, &clientctx, cert, pkey)) {
|
|
TEST_error("Failed to create SSL_CTX pair\n");
|
|
return 0;
|
|
}
|
|
|
|
ADD_ALL_TESTS(test_func, 9);
|
|
return 1;
|
|
}
|
|
|
|
void cleanup_tests(void)
|
|
{
|
|
SSL_CTX_free(clientctx);
|
|
SSL_CTX_free(serverctx);
|
|
}
|