• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the OpenSSL license (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9 
10 /* Part of the code in here was originally in conf.c, which is now removed */
11 
12 #include <stdio.h>
13 #include <string.h>
14 #include "internal/cryptlib.h"
15 #include "internal/o_dir.h"
16 #include <openssl/lhash.h>
17 #include <openssl/conf.h>
18 #include <openssl/conf_api.h>
19 #include "conf_def.h"
20 #include <openssl/buffer.h>
21 #include <openssl/err.h>
22 #ifndef OPENSSL_NO_POSIX_IO
23 # include <sys/stat.h>
24 # ifdef _WIN32
25 #  define stat    _stat
26 #  define strcasecmp _stricmp
27 # endif
28 #endif
29 
30 #ifndef S_ISDIR
31 # define S_ISDIR(a) (((a) & S_IFMT) == S_IFDIR)
32 #endif
33 
34 /*
35  * The maximum length we can grow a value to after variable expansion. 64k
36  * should be more than enough for all reasonable uses.
37  */
38 #define MAX_CONF_VALUE_LENGTH       65536
39 
40 static int is_keytype(const CONF *conf, char c, unsigned short type);
41 static char *eat_ws(CONF *conf, char *p);
42 static void trim_ws(CONF *conf, char *start);
43 static char *eat_alpha_numeric(CONF *conf, char *p);
44 static void clear_comments(CONF *conf, char *p);
45 static int str_copy(CONF *conf, char *section, char **to, char *from);
46 static char *scan_quote(CONF *conf, char *p);
47 static char *scan_dquote(CONF *conf, char *p);
48 #define scan_esc(conf,p)        (((IS_EOF((conf),(p)[1]))?((p)+1):((p)+2)))
49 #ifndef OPENSSL_NO_POSIX_IO
50 static BIO *process_include(char *include, OPENSSL_DIR_CTX **dirctx,
51                             char **dirpath);
52 static BIO *get_next_file(const char *path, OPENSSL_DIR_CTX **dirctx);
53 #endif
54 
55 static CONF *def_create(CONF_METHOD *meth);
56 static int def_init_default(CONF *conf);
57 static int def_init_WIN32(CONF *conf);
58 static int def_destroy(CONF *conf);
59 static int def_destroy_data(CONF *conf);
60 static int def_load(CONF *conf, const char *name, long *eline);
61 static int def_load_bio(CONF *conf, BIO *bp, long *eline);
62 static int def_dump(const CONF *conf, BIO *bp);
63 static int def_is_number(const CONF *conf, char c);
64 static int def_to_int(const CONF *conf, char c);
65 
66 static CONF_METHOD default_method = {
67     "OpenSSL default",
68     def_create,
69     def_init_default,
70     def_destroy,
71     def_destroy_data,
72     def_load_bio,
73     def_dump,
74     def_is_number,
75     def_to_int,
76     def_load
77 };
78 
79 static CONF_METHOD WIN32_method = {
80     "WIN32",
81     def_create,
82     def_init_WIN32,
83     def_destroy,
84     def_destroy_data,
85     def_load_bio,
86     def_dump,
87     def_is_number,
88     def_to_int,
89     def_load
90 };
91 
NCONF_default(void)92 CONF_METHOD *NCONF_default(void)
93 {
94     return &default_method;
95 }
96 
NCONF_WIN32(void)97 CONF_METHOD *NCONF_WIN32(void)
98 {
99     return &WIN32_method;
100 }
101 
def_create(CONF_METHOD * meth)102 static CONF *def_create(CONF_METHOD *meth)
103 {
104     CONF *ret;
105 
106     ret = OPENSSL_malloc(sizeof(*ret));
107     if (ret != NULL)
108         if (meth->init(ret) == 0) {
109             OPENSSL_free(ret);
110             ret = NULL;
111         }
112     return ret;
113 }
114 
def_init_default(CONF * conf)115 static int def_init_default(CONF *conf)
116 {
117     if (conf == NULL)
118         return 0;
119 
120     conf->meth = &default_method;
121     conf->meth_data = (void *)CONF_type_default;
122     conf->data = NULL;
123 
124     return 1;
125 }
126 
def_init_WIN32(CONF * conf)127 static int def_init_WIN32(CONF *conf)
128 {
129     if (conf == NULL)
130         return 0;
131 
132     conf->meth = &WIN32_method;
133     conf->meth_data = (void *)CONF_type_win32;
134     conf->data = NULL;
135 
136     return 1;
137 }
138 
def_destroy(CONF * conf)139 static int def_destroy(CONF *conf)
140 {
141     if (def_destroy_data(conf)) {
142         OPENSSL_free(conf);
143         return 1;
144     }
145     return 0;
146 }
147 
def_destroy_data(CONF * conf)148 static int def_destroy_data(CONF *conf)
149 {
150     if (conf == NULL)
151         return 0;
152     _CONF_free_data(conf);
153     return 1;
154 }
155 
def_load(CONF * conf,const char * name,long * line)156 static int def_load(CONF *conf, const char *name, long *line)
157 {
158     int ret;
159     BIO *in = NULL;
160 
161 #ifdef OPENSSL_SYS_VMS
162     in = BIO_new_file(name, "r");
163 #else
164     in = BIO_new_file(name, "rb");
165 #endif
166     if (in == NULL) {
167         if (ERR_GET_REASON(ERR_peek_last_error()) == BIO_R_NO_SUCH_FILE)
168             CONFerr(CONF_F_DEF_LOAD, CONF_R_NO_SUCH_FILE);
169         else
170             CONFerr(CONF_F_DEF_LOAD, ERR_R_SYS_LIB);
171         return 0;
172     }
173 
174     ret = def_load_bio(conf, in, line);
175     BIO_free(in);
176 
177     return ret;
178 }
179 
def_load_bio(CONF * conf,BIO * in,long * line)180 static int def_load_bio(CONF *conf, BIO *in, long *line)
181 {
182 /* The macro BUFSIZE conflicts with a system macro in VxWorks */
183 #define CONFBUFSIZE     512
184     int bufnum = 0, i, ii;
185     BUF_MEM *buff = NULL;
186     char *s, *p, *end;
187     int again;
188     int first_call = 1;
189     long eline = 0;
190     char btmp[DECIMAL_SIZE(eline) + 1];
191     CONF_VALUE *v = NULL, *tv;
192     CONF_VALUE *sv = NULL;
193     char *section = NULL, *buf;
194     char *start, *psection, *pname;
195     void *h = (void *)(conf->data);
196     STACK_OF(BIO) *biosk = NULL;
197 #ifndef OPENSSL_NO_POSIX_IO
198     char *dirpath = NULL;
199     OPENSSL_DIR_CTX *dirctx = NULL;
200 #endif
201 
202     if ((buff = BUF_MEM_new()) == NULL) {
203         CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_BUF_LIB);
204         goto err;
205     }
206 
207     section = OPENSSL_strdup("default");
208     if (section == NULL) {
209         CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
210         goto err;
211     }
212 
213     if (_CONF_new_data(conf) == 0) {
214         CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
215         goto err;
216     }
217 
218     sv = _CONF_new_section(conf, section);
219     if (sv == NULL) {
220         CONFerr(CONF_F_DEF_LOAD_BIO, CONF_R_UNABLE_TO_CREATE_NEW_SECTION);
221         goto err;
222     }
223 
224     bufnum = 0;
225     again = 0;
226     for (;;) {
227         if (!BUF_MEM_grow(buff, bufnum + CONFBUFSIZE)) {
228             CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_BUF_LIB);
229             goto err;
230         }
231         p = &(buff->data[bufnum]);
232         *p = '\0';
233  read_retry:
234         BIO_gets(in, p, CONFBUFSIZE - 1);
235         p[CONFBUFSIZE - 1] = '\0';
236         ii = i = strlen(p);
237         if (first_call) {
238             /* Other BOMs imply unsupported multibyte encoding,
239              * so don't strip them and let the error raise */
240             const unsigned char utf8_bom[3] = {0xEF, 0xBB, 0xBF};
241 
242             if (i >= 3 && memcmp(p, utf8_bom, 3) == 0) {
243                 memmove(p, p + 3, i - 3);
244                 p[i - 3] = 0;
245                 i -= 3;
246                 ii -= 3;
247             }
248             first_call = 0;
249         }
250         if (i == 0 && !again) {
251             /* the currently processed BIO is at EOF */
252             BIO *parent;
253 
254 #ifndef OPENSSL_NO_POSIX_IO
255             /* continue processing with the next file from directory */
256             if (dirctx != NULL) {
257                 BIO *next;
258 
259                 if ((next = get_next_file(dirpath, &dirctx)) != NULL) {
260                     BIO_vfree(in);
261                     in = next;
262                     goto read_retry;
263                 } else {
264                     OPENSSL_free(dirpath);
265                     dirpath = NULL;
266                 }
267             }
268 #endif
269             /* no more files in directory, continue with processing parent */
270             if ((parent = sk_BIO_pop(biosk)) == NULL) {
271                 /* everything processed get out of the loop */
272                 break;
273             } else {
274                 BIO_vfree(in);
275                 in = parent;
276                 goto read_retry;
277             }
278         }
279         again = 0;
280         while (i > 0) {
281             if ((p[i - 1] != '\r') && (p[i - 1] != '\n'))
282                 break;
283             else
284                 i--;
285         }
286         /*
287          * we removed some trailing stuff so there is a new line on the end.
288          */
289         if (ii && i == ii)
290             again = 1;          /* long line */
291         else {
292             p[i] = '\0';
293             eline++;            /* another input line */
294         }
295 
296         /* we now have a line with trailing \r\n removed */
297 
298         /* i is the number of bytes */
299         bufnum += i;
300 
301         v = NULL;
302         /* check for line continuation */
303         if (bufnum >= 1) {
304             /*
305              * If we have bytes and the last char '\\' and second last char
306              * is not '\\'
307              */
308             p = &(buff->data[bufnum - 1]);
309             if (IS_ESC(conf, p[0]) && ((bufnum <= 1) || !IS_ESC(conf, p[-1]))) {
310                 bufnum--;
311                 again = 1;
312             }
313         }
314         if (again)
315             continue;
316         bufnum = 0;
317         buf = buff->data;
318 
319         clear_comments(conf, buf);
320         s = eat_ws(conf, buf);
321         if (IS_EOF(conf, *s))
322             continue;           /* blank line */
323         if (*s == '[') {
324             char *ss;
325 
326             s++;
327             start = eat_ws(conf, s);
328             ss = start;
329  again:
330             end = eat_alpha_numeric(conf, ss);
331             p = eat_ws(conf, end);
332             if (*p != ']') {
333                 if (*p != '\0' && ss != p) {
334                     ss = p;
335                     goto again;
336                 }
337                 CONFerr(CONF_F_DEF_LOAD_BIO,
338                         CONF_R_MISSING_CLOSE_SQUARE_BRACKET);
339                 goto err;
340             }
341             *end = '\0';
342             if (!str_copy(conf, NULL, &section, start))
343                 goto err;
344             if ((sv = _CONF_get_section(conf, section)) == NULL)
345                 sv = _CONF_new_section(conf, section);
346             if (sv == NULL) {
347                 CONFerr(CONF_F_DEF_LOAD_BIO,
348                         CONF_R_UNABLE_TO_CREATE_NEW_SECTION);
349                 goto err;
350             }
351             continue;
352         } else {
353             pname = s;
354             end = eat_alpha_numeric(conf, s);
355             if ((end[0] == ':') && (end[1] == ':')) {
356                 *end = '\0';
357                 end += 2;
358                 psection = pname;
359                 pname = end;
360                 end = eat_alpha_numeric(conf, end);
361             } else {
362                 psection = section;
363             }
364             p = eat_ws(conf, end);
365             if (strncmp(pname, ".include", 8) == 0
366                 && (p != pname + 8 || *p == '=')) {
367                 char *include = NULL;
368                 BIO *next;
369 
370                 if (*p == '=') {
371                     p++;
372                     p = eat_ws(conf, p);
373                 }
374                 trim_ws(conf, p);
375                 if (!str_copy(conf, psection, &include, p))
376                     goto err;
377                 /* get the BIO of the included file */
378 #ifndef OPENSSL_NO_POSIX_IO
379                 next = process_include(include, &dirctx, &dirpath);
380                 if (include != dirpath) {
381                     /* dirpath will contain include in case of a directory */
382                     OPENSSL_free(include);
383                 }
384 #else
385                 next = BIO_new_file(include, "r");
386                 OPENSSL_free(include);
387 #endif
388                 if (next != NULL) {
389                     /* push the currently processing BIO onto stack */
390                     if (biosk == NULL) {
391                         if ((biosk = sk_BIO_new_null()) == NULL) {
392                             CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
393                             BIO_free(next);
394                             goto err;
395                         }
396                     }
397                     if (!sk_BIO_push(biosk, in)) {
398                         CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
399                         BIO_free(next);
400                         goto err;
401                     }
402                     /* continue with reading from the included BIO */
403                     in = next;
404                 }
405                 continue;
406             } else if (*p != '=') {
407                 CONFerr(CONF_F_DEF_LOAD_BIO, CONF_R_MISSING_EQUAL_SIGN);
408                 goto err;
409             }
410             *end = '\0';
411             p++;
412             start = eat_ws(conf, p);
413             trim_ws(conf, start);
414 
415             if ((v = OPENSSL_malloc(sizeof(*v))) == NULL) {
416                 CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
417                 goto err;
418             }
419             v->name = OPENSSL_strdup(pname);
420             v->value = NULL;
421             if (v->name == NULL) {
422                 CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
423                 goto err;
424             }
425             if (!str_copy(conf, psection, &(v->value), start))
426                 goto err;
427 
428             if (strcmp(psection, section) != 0) {
429                 if ((tv = _CONF_get_section(conf, psection))
430                     == NULL)
431                     tv = _CONF_new_section(conf, psection);
432                 if (tv == NULL) {
433                     CONFerr(CONF_F_DEF_LOAD_BIO,
434                             CONF_R_UNABLE_TO_CREATE_NEW_SECTION);
435                     goto err;
436                 }
437             } else
438                 tv = sv;
439             if (_CONF_add_string(conf, tv, v) == 0) {
440                 CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
441                 goto err;
442             }
443             v = NULL;
444         }
445     }
446     BUF_MEM_free(buff);
447     OPENSSL_free(section);
448     /*
449      * No need to pop, since we only get here if the stack is empty.
450      * If this causes a BIO leak, THE ISSUE IS SOMEWHERE ELSE!
451      */
452     sk_BIO_free(biosk);
453     return 1;
454  err:
455     BUF_MEM_free(buff);
456     OPENSSL_free(section);
457     /*
458      * Since |in| is the first element of the stack and should NOT be freed
459      * here, we cannot use sk_BIO_pop_free().  Instead, we pop and free one
460      * BIO at a time, making sure that the last one popped isn't.
461      */
462     while (sk_BIO_num(biosk) > 0) {
463         BIO *popped = sk_BIO_pop(biosk);
464         BIO_vfree(in);
465         in = popped;
466     }
467     sk_BIO_free(biosk);
468 #ifndef OPENSSL_NO_POSIX_IO
469     OPENSSL_free(dirpath);
470     if (dirctx != NULL)
471         OPENSSL_DIR_end(&dirctx);
472 #endif
473     if (line != NULL)
474         *line = eline;
475     BIO_snprintf(btmp, sizeof(btmp), "%ld", eline);
476     ERR_add_error_data(2, "line ", btmp);
477     if (h != conf->data) {
478         CONF_free(conf->data);
479         conf->data = NULL;
480     }
481     if (v != NULL) {
482         OPENSSL_free(v->name);
483         OPENSSL_free(v->value);
484         OPENSSL_free(v);
485     }
486     return 0;
487 }
488 
clear_comments(CONF * conf,char * p)489 static void clear_comments(CONF *conf, char *p)
490 {
491     for (;;) {
492         if (IS_FCOMMENT(conf, *p)) {
493             *p = '\0';
494             return;
495         }
496         if (!IS_WS(conf, *p)) {
497             break;
498         }
499         p++;
500     }
501 
502     for (;;) {
503         if (IS_COMMENT(conf, *p)) {
504             *p = '\0';
505             return;
506         }
507         if (IS_DQUOTE(conf, *p)) {
508             p = scan_dquote(conf, p);
509             continue;
510         }
511         if (IS_QUOTE(conf, *p)) {
512             p = scan_quote(conf, p);
513             continue;
514         }
515         if (IS_ESC(conf, *p)) {
516             p = scan_esc(conf, p);
517             continue;
518         }
519         if (IS_EOF(conf, *p))
520             return;
521         else
522             p++;
523     }
524 }
525 
str_copy(CONF * conf,char * section,char ** pto,char * from)526 static int str_copy(CONF *conf, char *section, char **pto, char *from)
527 {
528     int q, r, rr = 0, to = 0, len = 0;
529     char *s, *e, *rp, *p, *rrp, *np, *cp, v;
530     BUF_MEM *buf;
531 
532     if ((buf = BUF_MEM_new()) == NULL)
533         return 0;
534 
535     len = strlen(from) + 1;
536     if (!BUF_MEM_grow(buf, len))
537         goto err;
538 
539     for (;;) {
540         if (IS_QUOTE(conf, *from)) {
541             q = *from;
542             from++;
543             while (!IS_EOF(conf, *from) && (*from != q)) {
544                 if (IS_ESC(conf, *from)) {
545                     from++;
546                     if (IS_EOF(conf, *from))
547                         break;
548                 }
549                 buf->data[to++] = *(from++);
550             }
551             if (*from == q)
552                 from++;
553         } else if (IS_DQUOTE(conf, *from)) {
554             q = *from;
555             from++;
556             while (!IS_EOF(conf, *from)) {
557                 if (*from == q) {
558                     if (*(from + 1) == q) {
559                         from++;
560                     } else {
561                         break;
562                     }
563                 }
564                 buf->data[to++] = *(from++);
565             }
566             if (*from == q)
567                 from++;
568         } else if (IS_ESC(conf, *from)) {
569             from++;
570             v = *(from++);
571             if (IS_EOF(conf, v))
572                 break;
573             else if (v == 'r')
574                 v = '\r';
575             else if (v == 'n')
576                 v = '\n';
577             else if (v == 'b')
578                 v = '\b';
579             else if (v == 't')
580                 v = '\t';
581             buf->data[to++] = v;
582         } else if (IS_EOF(conf, *from))
583             break;
584         else if (*from == '$') {
585             size_t newsize;
586 
587             /* try to expand it */
588             rrp = NULL;
589             s = &(from[1]);
590             if (*s == '{')
591                 q = '}';
592             else if (*s == '(')
593                 q = ')';
594             else
595                 q = 0;
596 
597             if (q)
598                 s++;
599             cp = section;
600             e = np = s;
601             while (IS_ALNUM(conf, *e))
602                 e++;
603             if ((e[0] == ':') && (e[1] == ':')) {
604                 cp = np;
605                 rrp = e;
606                 rr = *e;
607                 *rrp = '\0';
608                 e += 2;
609                 np = e;
610                 while (IS_ALNUM(conf, *e))
611                     e++;
612             }
613             r = *e;
614             *e = '\0';
615             rp = e;
616             if (q) {
617                 if (r != q) {
618                     CONFerr(CONF_F_STR_COPY, CONF_R_NO_CLOSE_BRACE);
619                     goto err;
620                 }
621                 e++;
622             }
623             /*-
624              * So at this point we have
625              * np which is the start of the name string which is
626              *   '\0' terminated.
627              * cp which is the start of the section string which is
628              *   '\0' terminated.
629              * e is the 'next point after'.
630              * r and rr are the chars replaced by the '\0'
631              * rp and rrp is where 'r' and 'rr' came from.
632              */
633             p = _CONF_get_string(conf, cp, np);
634             if (rrp != NULL)
635                 *rrp = rr;
636             *rp = r;
637             if (p == NULL) {
638                 CONFerr(CONF_F_STR_COPY, CONF_R_VARIABLE_HAS_NO_VALUE);
639                 goto err;
640             }
641             newsize = strlen(p) + buf->length - (e - from);
642             if (newsize > MAX_CONF_VALUE_LENGTH) {
643                 CONFerr(CONF_F_STR_COPY, CONF_R_VARIABLE_EXPANSION_TOO_LONG);
644                 goto err;
645             }
646             if (!BUF_MEM_grow_clean(buf, newsize)) {
647                 CONFerr(CONF_F_STR_COPY, ERR_R_MALLOC_FAILURE);
648                 goto err;
649             }
650             while (*p)
651                 buf->data[to++] = *(p++);
652 
653             /*
654              * Since we change the pointer 'from', we also have to change the
655              * perceived length of the string it points at.  /RL
656              */
657             len -= e - from;
658             from = e;
659 
660             /*
661              * In case there were no braces or parenthesis around the
662              * variable reference, we have to put back the character that was
663              * replaced with a '\0'.  /RL
664              */
665             *rp = r;
666         } else
667             buf->data[to++] = *(from++);
668     }
669     buf->data[to] = '\0';
670     OPENSSL_free(*pto);
671     *pto = buf->data;
672     OPENSSL_free(buf);
673     return 1;
674  err:
675     BUF_MEM_free(buf);
676     return 0;
677 }
678 
679 #ifndef OPENSSL_NO_POSIX_IO
680 /*
681  * Check whether included path is a directory.
682  * Returns next BIO to process and in case of a directory
683  * also an opened directory context and the include path.
684  */
process_include(char * include,OPENSSL_DIR_CTX ** dirctx,char ** dirpath)685 static BIO *process_include(char *include, OPENSSL_DIR_CTX **dirctx,
686                             char **dirpath)
687 {
688     struct stat st = { 0 };
689     BIO *next;
690 
691     if (stat(include, &st) < 0) {
692         SYSerr(SYS_F_STAT, errno);
693         ERR_add_error_data(1, include);
694         /* missing include file is not fatal error */
695         return NULL;
696     }
697 
698     if (S_ISDIR(st.st_mode)) {
699         if (*dirctx != NULL) {
700             CONFerr(CONF_F_PROCESS_INCLUDE,
701                     CONF_R_RECURSIVE_DIRECTORY_INCLUDE);
702             ERR_add_error_data(1, include);
703             return NULL;
704         }
705         /* a directory, load its contents */
706         if ((next = get_next_file(include, dirctx)) != NULL)
707             *dirpath = include;
708         return next;
709     }
710 
711     next = BIO_new_file(include, "r");
712     return next;
713 }
714 
715 /*
716  * Get next file from the directory path.
717  * Returns BIO of the next file to read and updates dirctx.
718  */
get_next_file(const char * path,OPENSSL_DIR_CTX ** dirctx)719 static BIO *get_next_file(const char *path, OPENSSL_DIR_CTX **dirctx)
720 {
721     const char *filename;
722     size_t pathlen;
723 
724     pathlen = strlen(path);
725     while ((filename = OPENSSL_DIR_read(dirctx, path)) != NULL) {
726         size_t namelen;
727 
728         namelen = strlen(filename);
729 
730 
731         if ((namelen > 5 && strcasecmp(filename + namelen - 5, ".conf") == 0)
732             || (namelen > 4 && strcasecmp(filename + namelen - 4, ".cnf") == 0)) {
733             size_t newlen;
734             char *newpath;
735             BIO *bio;
736 
737             newlen = pathlen + namelen + 2;
738             newpath = OPENSSL_zalloc(newlen);
739             if (newpath == NULL) {
740                 CONFerr(CONF_F_GET_NEXT_FILE, ERR_R_MALLOC_FAILURE);
741                 break;
742             }
743 #ifdef OPENSSL_SYS_VMS
744             /*
745              * If the given path isn't clear VMS syntax,
746              * we treat it as on Unix.
747              */
748             if (path[pathlen - 1] == ']'
749                 || path[pathlen - 1] == '>'
750                 || path[pathlen - 1] == ':') {
751                 /* Clear VMS directory syntax, just copy as is */
752                 OPENSSL_strlcpy(newpath, path, newlen);
753             }
754 #endif
755             if (newpath[0] == '\0') {
756                 OPENSSL_strlcpy(newpath, path, newlen);
757                 OPENSSL_strlcat(newpath, "/", newlen);
758             }
759             OPENSSL_strlcat(newpath, filename, newlen);
760 
761             bio = BIO_new_file(newpath, "r");
762             OPENSSL_free(newpath);
763             /* Errors when opening files are non-fatal. */
764             if (bio != NULL)
765                 return bio;
766         }
767     }
768     OPENSSL_DIR_end(dirctx);
769     *dirctx = NULL;
770     return NULL;
771 }
772 #endif
773 
is_keytype(const CONF * conf,char c,unsigned short type)774 static int is_keytype(const CONF *conf, char c, unsigned short type)
775 {
776     const unsigned short * keytypes = (const unsigned short *) conf->meth_data;
777     unsigned char key = (unsigned char)c;
778 
779 #ifdef CHARSET_EBCDIC
780 # if CHAR_BIT > 8
781     if (key > 255) {
782         /* key is out of range for os_toascii table */
783         return 0;
784     }
785 # endif
786     /* convert key from ebcdic to ascii */
787     key = os_toascii[key];
788 #endif
789 
790     if (key > 127) {
791         /* key is not a seven bit ascii character */
792         return 0;
793     }
794 
795     return (keytypes[key] & type) ? 1 : 0;
796 }
797 
eat_ws(CONF * conf,char * p)798 static char *eat_ws(CONF *conf, char *p)
799 {
800     while (IS_WS(conf, *p) && (!IS_EOF(conf, *p)))
801         p++;
802     return p;
803 }
804 
trim_ws(CONF * conf,char * start)805 static void trim_ws(CONF *conf, char *start)
806 {
807     char *p = start;
808 
809     while (!IS_EOF(conf, *p))
810         p++;
811     p--;
812     while ((p >= start) && IS_WS(conf, *p))
813         p--;
814     p++;
815     *p = '\0';
816 }
817 
eat_alpha_numeric(CONF * conf,char * p)818 static char *eat_alpha_numeric(CONF *conf, char *p)
819 {
820     for (;;) {
821         if (IS_ESC(conf, *p)) {
822             p = scan_esc(conf, p);
823             continue;
824         }
825         if (!IS_ALNUM_PUNCT(conf, *p))
826             return p;
827         p++;
828     }
829 }
830 
scan_quote(CONF * conf,char * p)831 static char *scan_quote(CONF *conf, char *p)
832 {
833     int q = *p;
834 
835     p++;
836     while (!(IS_EOF(conf, *p)) && (*p != q)) {
837         if (IS_ESC(conf, *p)) {
838             p++;
839             if (IS_EOF(conf, *p))
840                 return p;
841         }
842         p++;
843     }
844     if (*p == q)
845         p++;
846     return p;
847 }
848 
scan_dquote(CONF * conf,char * p)849 static char *scan_dquote(CONF *conf, char *p)
850 {
851     int q = *p;
852 
853     p++;
854     while (!(IS_EOF(conf, *p))) {
855         if (*p == q) {
856             if (*(p + 1) == q) {
857                 p++;
858             } else {
859                 break;
860             }
861         }
862         p++;
863     }
864     if (*p == q)
865         p++;
866     return p;
867 }
868 
dump_value_doall_arg(const CONF_VALUE * a,BIO * out)869 static void dump_value_doall_arg(const CONF_VALUE *a, BIO *out)
870 {
871     if (a->name)
872         BIO_printf(out, "[%s] %s=%s\n", a->section, a->name, a->value);
873     else
874         BIO_printf(out, "[[%s]]\n", a->section);
875 }
876 
877 IMPLEMENT_LHASH_DOALL_ARG_CONST(CONF_VALUE, BIO);
878 
def_dump(const CONF * conf,BIO * out)879 static int def_dump(const CONF *conf, BIO *out)
880 {
881     lh_CONF_VALUE_doall_BIO(conf->data, dump_value_doall_arg, out);
882     return 1;
883 }
884 
def_is_number(const CONF * conf,char c)885 static int def_is_number(const CONF *conf, char c)
886 {
887     return IS_NUMBER(conf, c);
888 }
889 
def_to_int(const CONF * conf,char c)890 static int def_to_int(const CONF *conf, char c)
891 {
892     return c - '0';
893 }
894