yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-26 07:25:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Restructure ssl_handshake_init() and small fixes

Browse Source
This commit is contained in:
Paul Bakker 2014-06-26 13:37:14 +02:00
parent a317a98221
commit accaffe2c3
3 changed files with 96 additions and 47 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
include/polarssl/ssl.h
View File

@ -1682,6 +1682,13 @@ int ssl_close_notify( ssl_context *ssl );
*/ */
void ssl_free( ssl_context *ssl ); void ssl_free( ssl_context *ssl );
/**
* \brief Initialize SSL session structure
*
* \param session SSL session
*/
void ssl_session_init( ssl_session *session );
/** /**
* \brief Free referenced items in an SSL session including the * \brief Free referenced items in an SSL session including the
* peer certificate and clear memory * peer certificate and clear memory

2
library/ssl_srv.c
View File

@ -343,6 +343,8 @@ static int ssl_parse_ticket( ssl_context *ssl,
ssl_session_free( ssl->session_negotiate ); ssl_session_free( ssl->session_negotiate );
memcpy( ssl->session_negotiate, &session, sizeof( ssl_session ) ); memcpy( ssl->session_negotiate, &session, sizeof( ssl_session ) );
/* Zeroize instead of free as we copied the content */
polarssl_zeroize( &session, sizeof( ssl_session ) ); polarssl_zeroize( &session, sizeof( ssl_session ) );
return( 0 ); return( 0 );

134
library/ssl_tls.c
View File

@ -3270,80 +3270,108 @@ int ssl_parse_finished( ssl_context *ssl )
return( 0 ); return( 0 );
} }
static void ssl_handshake_params_init( ssl_handshake_params *handshake,
ssl_key_cert *key_cert )
{
memset( handshake, 0, sizeof( ssl_handshake_params ) );
#if defined(POLARSSL_SSL_PROTO_SSL3) || defined(POLARSSL_SSL_PROTO_TLS1) || \
defined(POLARSSL_SSL_PROTO_TLS1_1)
md5_init( &handshake->fin_md5 );
sha1_init( &handshake->fin_sha1 );
md5_starts( &handshake->fin_md5 );
sha1_starts( &handshake->fin_sha1 );
#endif
#if defined(POLARSSL_SSL_PROTO_TLS1_2)
#if defined(POLARSSL_SHA256_C)
sha256_init( &handshake->fin_sha256 );
sha256_starts( &handshake->fin_sha256, 0 );
#endif
#if defined(POLARSSL_SHA512_C)
sha512_init( &handshake->fin_sha512 );
sha512_starts( &handshake->fin_sha512, 1 );
#endif
#endif /* POLARSSL_SSL_PROTO_TLS1_2 */
handshake->update_checksum = ssl_update_checksum_start;
handshake->sig_alg = SSL_HASH_SHA1;
#if defined(POLARSSL_DHM_C)
dhm_init( &handshake->dhm_ctx );
#endif
#if defined(POLARSSL_ECDH_C)
ecdh_init( &handshake->ecdh_ctx );
#endif
#if defined(POLARSSL_X509_CRT_PARSE_C)
handshake->key_cert = key_cert;
#endif
}
static void ssl_transform_init( ssl_transform *transform )
{
memset( transform, 0, sizeof(ssl_transform) );
}
void ssl_session_init( ssl_session *session )
{
memset( session, 0, sizeof(ssl_session) );
}
static int ssl_handshake_init( ssl_context *ssl ) static int ssl_handshake_init( ssl_context *ssl )
{ {
/* Clear old handshake information if present */
if( ssl->transform_negotiate ) if( ssl->transform_negotiate )
ssl_transform_free( ssl->transform_negotiate ); ssl_transform_free( ssl->transform_negotiate );
else if( ssl->session_negotiate )
ssl_session_free( ssl->session_negotiate );
if( ssl->handshake )
ssl_handshake_free( ssl->handshake );
/*
* Either the pointers are now NULL or cleared properly and can be freed.
* Now allocate missing structures.
*/
if( ssl->transform_negotiate == NULL )
{ {
ssl->transform_negotiate = ssl->transform_negotiate =
(ssl_transform *) polarssl_malloc( sizeof(ssl_transform) ); (ssl_transform *) polarssl_malloc( sizeof(ssl_transform) );
if( ssl->transform_negotiate != NULL )
memset( ssl->transform_negotiate, 0, sizeof(ssl_transform) );
} }
if( ssl->session_negotiate ) if( ssl->session_negotiate == NULL )
ssl_session_free( ssl->session_negotiate );
else
{ {
ssl->session_negotiate = ssl->session_negotiate =
(ssl_session *) polarssl_malloc( sizeof(ssl_session) ); (ssl_session *) polarssl_malloc( sizeof(ssl_session) );
if( ssl->session_negotiate != NULL )
memset( ssl->session_negotiate, 0, sizeof(ssl_session) );
} }
if( ssl->handshake ) if( ssl->handshake == NULL)
ssl_handshake_free( ssl->handshake );
else
{ {
ssl->handshake = (ssl_handshake_params *) ssl->handshake = (ssl_handshake_params *)
polarssl_malloc( sizeof(ssl_handshake_params) ); polarssl_malloc( sizeof(ssl_handshake_params) );
if( ssl->handshake != NULL )
memset( ssl->handshake, 0, sizeof(ssl_handshake_params) );
} }
/* All pointers should exist and can be directly freed without issue */
if( ssl->handshake == NULL || if( ssl->handshake == NULL ||
ssl->transform_negotiate == NULL || ssl->transform_negotiate == NULL ||
ssl->session_negotiate == NULL ) ssl->session_negotiate == NULL )
{ {
SSL_DEBUG_MSG( 1, ( "malloc() of ssl sub-contexts failed" ) ); SSL_DEBUG_MSG( 1, ( "malloc() of ssl sub-contexts failed" ) );
polarssl_free( ssl->handshake );
polarssl_free( ssl->transform_negotiate );
polarssl_free( ssl->session_negotiate );
ssl->handshake = NULL;
ssl->transform_negotiate = NULL;
ssl->session_negotiate = NULL;
return( POLARSSL_ERR_SSL_MALLOC_FAILED ); return( POLARSSL_ERR_SSL_MALLOC_FAILED );
} }
#if defined(POLARSSL_SSL_PROTO_SSL3) || defined(POLARSSL_SSL_PROTO_TLS1) || \ /* Initialize structures */
defined(POLARSSL_SSL_PROTO_TLS1_1) ssl_session_init( ssl->session_negotiate );
md5_init( &ssl->handshake->fin_md5 ); ssl_transform_init( ssl->transform_negotiate );
sha1_init( &ssl->handshake->fin_sha1 ); ssl_handshake_params_init( ssl->handshake, ssl->key_cert );
md5_starts( &ssl->handshake->fin_md5 );
sha1_starts( &ssl->handshake->fin_sha1 );
#endif
#if defined(POLARSSL_SSL_PROTO_TLS1_2)
#if defined(POLARSSL_SHA256_C)
sha256_init( &ssl->handshake->fin_sha256 );
sha256_starts( &ssl->handshake->fin_sha256, 0 );
#endif
#if defined(POLARSSL_SHA512_C)
sha512_init( &ssl->handshake->fin_sha512 );
sha512_starts( &ssl->handshake->fin_sha512, 1 );
#endif
#endif /* POLARSSL_SSL_PROTO_TLS1_2 */
ssl->handshake->update_checksum = ssl_update_checksum_start;
ssl->handshake->sig_alg = SSL_HASH_SHA1;
#if defined(POLARSSL_DHM_C)
dhm_init( &ssl->handshake->dhm_ctx );
#endif
#if defined(POLARSSL_ECDH_C)
ecdh_init( &ssl->handshake->ecdh_ctx );
#endif
#if defined(POLARSSL_X509_CRT_PARSE_C)
ssl->handshake->key_cert = ssl->key_cert;
#endif
return( 0 ); return( 0 );
} }
@ -4470,6 +4498,9 @@ int ssl_close_notify( ssl_context *ssl )
void ssl_transform_free( ssl_transform *transform ) void ssl_transform_free( ssl_transform *transform )
{ {
if( transform == NULL )
return;
#if defined(POLARSSL_ZLIB_SUPPORT) #if defined(POLARSSL_ZLIB_SUPPORT)
deflateEnd( &transform->ctx_deflate ); deflateEnd( &transform->ctx_deflate );
inflateEnd( &transform->ctx_inflate ); inflateEnd( &transform->ctx_inflate );
@ -4507,6 +4538,9 @@ static void ssl_key_cert_free( ssl_key_cert *key_cert )
void ssl_handshake_free( ssl_handshake_params *handshake ) void ssl_handshake_free( ssl_handshake_params *handshake )
{ {
if( handshake == NULL )
return;
#if defined(POLARSSL_DHM_C) #if defined(POLARSSL_DHM_C)
dhm_free( &handshake->dhm_ctx ); dhm_free( &handshake->dhm_ctx );
#endif #endif
@ -4543,6 +4577,9 @@ void ssl_handshake_free( ssl_handshake_params *handshake )
void ssl_session_free( ssl_session *session ) void ssl_session_free( ssl_session *session )
{ {
if( session == NULL )
return;
#if defined(POLARSSL_X509_CRT_PARSE_C) #if defined(POLARSSL_X509_CRT_PARSE_C)
if( session->peer_cert != NULL ) if( session->peer_cert != NULL )
{ {
@ -4563,6 +4600,9 @@ void ssl_session_free( ssl_session *session )
*/ */
void ssl_free( ssl_context *ssl ) void ssl_free( ssl_context *ssl )
{ {
if( ssl == NULL )
return;
SSL_DEBUG_MSG( 2, ( "=> free" ) ); SSL_DEBUG_MSG( 2, ( "=> free" ) );
if( ssl->out_ctr != NULL ) if( ssl->out_ctr != NULL )