123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249 |
- /*
- * PSA ITS simulator over stdio files.
- */
- /*
- * Copyright The Mbed TLS Contributors
- * SPDX-License-Identifier: Apache-2.0
- *
- * Licensed under the Apache License, Version 2.0 (the "License"); you may
- * not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
- * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
- #include "common.h"
- #if defined(MBEDTLS_PSA_ITS_FILE_C)
- #if defined(MBEDTLS_PLATFORM_C)
- #include "mbedtls/platform.h"
- #else
- #define mbedtls_snprintf snprintf
- #endif
- #if defined(_WIN32)
- #include <windows.h>
- #endif
- #include "psa_crypto_its.h"
- #include <limits.h>
- #include <stdint.h>
- #include <stdio.h>
- #include <string.h>
- #if !defined(PSA_ITS_STORAGE_PREFIX)
- #define PSA_ITS_STORAGE_PREFIX ""
- #endif
- #define PSA_ITS_STORAGE_FILENAME_PATTERN "%08x%08x"
- #define PSA_ITS_STORAGE_SUFFIX ".psa_its"
- #define PSA_ITS_STORAGE_FILENAME_LENGTH \
- ( sizeof( PSA_ITS_STORAGE_PREFIX ) - 1 + /*prefix without terminating 0*/ \
- 16 + /*UID (64-bit number in hex)*/ \
- sizeof( PSA_ITS_STORAGE_SUFFIX ) - 1 + /*suffix without terminating 0*/ \
- 1 /*terminating null byte*/ )
- #define PSA_ITS_STORAGE_TEMP \
- PSA_ITS_STORAGE_PREFIX "tempfile" PSA_ITS_STORAGE_SUFFIX
- /* The maximum value of psa_storage_info_t.size */
- #define PSA_ITS_MAX_SIZE 0xffffffff
- #define PSA_ITS_MAGIC_STRING "PSA\0ITS\0"
- #define PSA_ITS_MAGIC_LENGTH 8
- /* As rename fails on Windows if the new filepath already exists,
- * use MoveFileExA with the MOVEFILE_REPLACE_EXISTING flag instead.
- * Returns 0 on success, nonzero on failure. */
- #if defined(_WIN32)
- #define rename_replace_existing( oldpath, newpath ) \
- ( ! MoveFileExA( oldpath, newpath, MOVEFILE_REPLACE_EXISTING ) )
- #else
- #define rename_replace_existing( oldpath, newpath ) rename( oldpath, newpath )
- #endif
- typedef struct
- {
- uint8_t magic[PSA_ITS_MAGIC_LENGTH];
- uint8_t size[sizeof( uint32_t )];
- uint8_t flags[sizeof( psa_storage_create_flags_t )];
- } psa_its_file_header_t;
- static void psa_its_fill_filename( psa_storage_uid_t uid, char *filename )
- {
- /* Break up the UID into two 32-bit pieces so as not to rely on
- * long long support in snprintf. */
- mbedtls_snprintf( filename, PSA_ITS_STORAGE_FILENAME_LENGTH,
- "%s" PSA_ITS_STORAGE_FILENAME_PATTERN "%s",
- PSA_ITS_STORAGE_PREFIX,
- (unsigned) ( uid >> 32 ),
- (unsigned) ( uid & 0xffffffff ),
- PSA_ITS_STORAGE_SUFFIX );
- }
- static psa_status_t psa_its_read_file( psa_storage_uid_t uid,
- struct psa_storage_info_t *p_info,
- FILE **p_stream )
- {
- char filename[PSA_ITS_STORAGE_FILENAME_LENGTH];
- psa_its_file_header_t header;
- size_t n;
- *p_stream = NULL;
- psa_its_fill_filename( uid, filename );
- *p_stream = fopen( filename, "rb" );
- if( *p_stream == NULL )
- return( PSA_ERROR_DOES_NOT_EXIST );
- n = fread( &header, 1, sizeof( header ), *p_stream );
- if( n != sizeof( header ) )
- return( PSA_ERROR_DATA_CORRUPT );
- if( memcmp( header.magic, PSA_ITS_MAGIC_STRING,
- PSA_ITS_MAGIC_LENGTH ) != 0 )
- return( PSA_ERROR_DATA_CORRUPT );
- p_info->size = ( header.size[0] |
- header.size[1] << 8 |
- header.size[2] << 16 |
- header.size[3] << 24 );
- p_info->flags = ( header.flags[0] |
- header.flags[1] << 8 |
- header.flags[2] << 16 |
- header.flags[3] << 24 );
- return( PSA_SUCCESS );
- }
- psa_status_t psa_its_get_info( psa_storage_uid_t uid,
- struct psa_storage_info_t *p_info )
- {
- psa_status_t status;
- FILE *stream = NULL;
- status = psa_its_read_file( uid, p_info, &stream );
- if( stream != NULL )
- fclose( stream );
- return( status );
- }
- psa_status_t psa_its_get( psa_storage_uid_t uid,
- uint32_t data_offset,
- uint32_t data_length,
- void *p_data,
- size_t *p_data_length )
- {
- psa_status_t status;
- FILE *stream = NULL;
- size_t n;
- struct psa_storage_info_t info;
- status = psa_its_read_file( uid, &info, &stream );
- if( status != PSA_SUCCESS )
- goto exit;
- status = PSA_ERROR_INVALID_ARGUMENT;
- if( data_offset + data_length < data_offset )
- goto exit;
- #if SIZE_MAX < 0xffffffff
- if( data_offset + data_length > SIZE_MAX )
- goto exit;
- #endif
- if( data_offset + data_length > info.size )
- goto exit;
- status = PSA_ERROR_STORAGE_FAILURE;
- #if LONG_MAX < 0xffffffff
- while( data_offset > LONG_MAX )
- {
- if( fseek( stream, LONG_MAX, SEEK_CUR ) != 0 )
- goto exit;
- data_offset -= LONG_MAX;
- }
- #endif
- if( fseek( stream, data_offset, SEEK_CUR ) != 0 )
- goto exit;
- n = fread( p_data, 1, data_length, stream );
- if( n != data_length )
- goto exit;
- status = PSA_SUCCESS;
- if( p_data_length != NULL )
- *p_data_length = n;
- exit:
- if( stream != NULL )
- fclose( stream );
- return( status );
- }
- psa_status_t psa_its_set( psa_storage_uid_t uid,
- uint32_t data_length,
- const void *p_data,
- psa_storage_create_flags_t create_flags )
- {
- psa_status_t status = PSA_ERROR_STORAGE_FAILURE;
- char filename[PSA_ITS_STORAGE_FILENAME_LENGTH];
- FILE *stream = NULL;
- psa_its_file_header_t header;
- size_t n;
- memcpy( header.magic, PSA_ITS_MAGIC_STRING, PSA_ITS_MAGIC_LENGTH );
- MBEDTLS_PUT_UINT32_LE( data_length, header.size, 0 );
- MBEDTLS_PUT_UINT32_LE( create_flags, header.flags, 0 );
- psa_its_fill_filename( uid, filename );
- stream = fopen( PSA_ITS_STORAGE_TEMP, "wb" );
- if( stream == NULL )
- goto exit;
- status = PSA_ERROR_INSUFFICIENT_STORAGE;
- n = fwrite( &header, 1, sizeof( header ), stream );
- if( n != sizeof( header ) )
- goto exit;
- if( data_length != 0 )
- {
- n = fwrite( p_data, 1, data_length, stream );
- if( n != data_length )
- goto exit;
- }
- status = PSA_SUCCESS;
- exit:
- if( stream != NULL )
- {
- int ret = fclose( stream );
- if( status == PSA_SUCCESS && ret != 0 )
- status = PSA_ERROR_INSUFFICIENT_STORAGE;
- }
- if( status == PSA_SUCCESS )
- {
- if( rename_replace_existing( PSA_ITS_STORAGE_TEMP, filename ) != 0 )
- status = PSA_ERROR_STORAGE_FAILURE;
- }
- /* The temporary file may still exist, but only in failure cases where
- * we're already reporting an error. So there's nothing we can do on
- * failure. If the function succeeded, and in some error cases, the
- * temporary file doesn't exist and so remove() is expected to fail.
- * Thus we just ignore the return status of remove(). */
- (void) remove( PSA_ITS_STORAGE_TEMP );
- return( status );
- }
- psa_status_t psa_its_remove( psa_storage_uid_t uid )
- {
- char filename[PSA_ITS_STORAGE_FILENAME_LENGTH];
- FILE *stream;
- psa_its_fill_filename( uid, filename );
- stream = fopen( filename, "rb" );
- if( stream == NULL )
- return( PSA_ERROR_DOES_NOT_EXIST );
- fclose( stream );
- if( remove( filename ) != 0 )
- return( PSA_ERROR_STORAGE_FAILURE );
- return( PSA_SUCCESS );
- }
- #endif /* MBEDTLS_PSA_ITS_FILE_C */
|