Skip to content

Commit 58a2784

Browse files
ColtonWilleyColtonWilley
committed
Fix NULL derefs, buffer overflow, and i2d contract in EVP/OCSP/X509
Harden OpenSSL compatibility layer against NULL pointers, negative lengths, and buffer overflows across EVP, OCSP, and X509 APIs. Fix DSA SignFinal write-before-check overflow, add missing i2d_OCSP_RESPONSE allocation path, and fix unaligned keyUsage access.
1 parent c36beba commit 58a2784

6 files changed

Lines changed: 94 additions & 20 deletions

File tree

‎src/ocsp.c‎

Lines changed: 32 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -749,15 +749,17 @@ int wolfSSL_OCSP_resp_find_status(WOLFSSL_OCSP_BASICRESP *bs,
749749

750750
single = bs->single;
751751
while (single != NULL) {
752-
if ((XMEMCMP(single->status->serial, id->status->serial, (size_t)single->status->serialSz) == 0)
752+
if (single->status != NULL && id->status != NULL &&
753+
(XMEMCMP(single->status->serial, id->status->serial,
754+
(size_t)single->status->serialSz) == 0)
753755
&& (XMEMCMP(single->issuerHash, id->issuerHash, OCSP_DIGEST_SIZE) == 0)
754756
&& (XMEMCMP(single->issuerKeyHash, id->issuerKeyHash, OCSP_DIGEST_SIZE) == 0)) {
755757
break;
756758
}
757759
single = single->next;
758760
}
759761

760-
if (single == NULL)
762+
if (single == NULL || single->status == NULL)
761763
return WOLFSSL_FAILURE;
762764

763765
if (status != NULL)
@@ -1108,6 +1110,9 @@ int wolfSSL_OCSP_basic_verify(WOLFSSL_OCSP_BASICRESP* bs,
11081110
int embedded;
11091111
DecodedCert *cert = NULL;
11101112

1113+
if (bs == NULL)
1114+
return WOLFSSL_FAILURE;
1115+
11111116
ret = OcspFindSigner(bs, certs, &cert, &embedded, flags);
11121117
if (ret != 0) {
11131118
WOLFSSL_MSG("OCSP no signer found");
@@ -1300,15 +1305,31 @@ int wolfSSL_i2d_OCSP_RESPONSE(OcspResponse* response,
13001305
if (response == NULL)
13011306
return BAD_FUNC_ARG;
13021307

1308+
if (response->source == NULL)
1309+
return BAD_FUNC_ARG;
1310+
13031311
if (data == NULL)
13041312
return (int)response->maxIdx;
13051313

1306-
XMEMCPY(*data, response->source, response->maxIdx);
1314+
if (*data == NULL) {
1315+
*data = (unsigned char*)XMALLOC(response->maxIdx, NULL,
1316+
DYNAMIC_TYPE_OPENSSL);
1317+
if (*data == NULL)
1318+
return -1;
1319+
XMEMCPY(*data, response->source, response->maxIdx);
1320+
}
1321+
else {
1322+
XMEMCPY(*data, response->source, response->maxIdx);
1323+
*data += response->maxIdx;
1324+
}
1325+
13071326
return (int)response->maxIdx;
13081327
}
13091328

13101329
int wolfSSL_OCSP_response_status(OcspResponse *response)
13111330
{
1331+
if (response == NULL)
1332+
return -1;
13121333
return response->responseStatus;
13131334
}
13141335

@@ -1335,8 +1356,12 @@ const char *wolfSSL_OCSP_response_status_str(long s)
13351356
WOLFSSL_OCSP_BASICRESP* wolfSSL_OCSP_response_get1_basic(OcspResponse* response)
13361357
{
13371358
WOLFSSL_OCSP_BASICRESP* bs;
1338-
const unsigned char *ptr = response->source;
1359+
const unsigned char *ptr;
13391360

1361+
if (response == NULL || response->source == NULL)
1362+
return NULL;
1363+
1364+
ptr = response->source;
13401365
bs = wolfSSL_d2i_OCSP_RESPONSE(NULL, &ptr, response->maxIdx);
13411366
return bs;
13421367
}
@@ -1637,8 +1662,8 @@ int wolfSSL_OCSP_single_get0_status(WOLFSSL_OCSP_SINGLERESP *single,
16371662
WOLFSSL_ASN1_TIME **thisupd,
16381663
WOLFSSL_ASN1_TIME **nextupd)
16391664
{
1640-
if (single == NULL)
1641-
return WOLFSSL_FAILURE;
1665+
if (single == NULL || single->status == NULL)
1666+
return -1;
16421667

16431668
#ifdef WOLFSSL_OCSP_PARSE_STATUS
16441669
if (thisupd != NULL)
@@ -1784,7 +1809,7 @@ int wolfSSL_OCSP_REQ_CTX_add1_header(WOLFSSL_OCSP_REQ_CTX *ctx,
17841809
{
17851810
WOLFSSL_ENTER("wolfSSL_OCSP_REQ_CTX_add1_header");
17861811

1787-
if (name == NULL) {
1812+
if (ctx == NULL || name == NULL) {
17881813
WOLFSSL_MSG("Bad parameter");
17891814
return WOLFSSL_FAILURE;
17901815
}

‎src/ssl.c‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11699,13 +11699,19 @@ char* wolfSSL_CIPHER_description(const WOLFSSL_CIPHER* cipher, char* in,
1169911699
int wolfSSL_OCSP_parse_url(const char* url, char** host, char** port,
1170011700
char** path, int* ssl)
1170111701
{
11702-
const char* u = url;
11702+
const char* u;
1170311703
const char* upath; /* path in u */
1170411704
const char* uport; /* port in u */
1170511705
const char* hostEnd;
1170611706

1170711707
WOLFSSL_ENTER("OCSP_parse_url");
1170811708

11709+
if (url == NULL || host == NULL || port == NULL || path == NULL ||
11710+
ssl == NULL) {
11711+
return WOLFSSL_FAILURE;
11712+
}
11713+
11714+
u = url;
1170911715
*host = NULL;
1171011716
*port = NULL;
1171111717
*path = NULL;

‎src/x509.c‎

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1317,7 +1317,9 @@ int wolfSSL_X509_add_ext(WOLFSSL_X509 *x509, WOLFSSL_X509_EXTENSION *ext,
13171317
if (ext && ext->value.data) {
13181318
if (ext->value.length == sizeof(word16)) {
13191319
/* if ext->value is already word16, set directly */
1320-
x509->keyUsage = *(word16*)ext->value.data;
1320+
word16 ku;
1321+
XMEMCPY(&ku, ext->value.data, sizeof(word16));
1322+
x509->keyUsage = ku;
13211323
#ifdef BIG_ENDIAN_ORDER
13221324
x509->keyUsage = rotlFixed16(x509->keyUsage, 8U);
13231325
#endif
@@ -10998,6 +11000,11 @@ WOLFSSL_ASN1_INTEGER* wolfSSL_X509_get_serialNumber(WOLFSSL_X509* x509)
1099811000
if (x509->serialNumber != NULL)
1099911001
return x509->serialNumber;
1100011002

11003+
if (x509->serialSz < 0) {
11004+
WOLFSSL_MSG("Invalid serial number size");
11005+
return NULL;
11006+
}
11007+
1100111008
a = wolfSSL_ASN1_INTEGER_new();
1100211009
if (a == NULL)
1100311010
return NULL;
@@ -16120,7 +16127,8 @@ int wolfSSL_X509_set1_notBefore(WOLFSSL_X509* x509, const WOLFSSL_ASN1_TIME *t)
1612016127
int wolfSSL_X509_set_serialNumber(WOLFSSL_X509* x509, WOLFSSL_ASN1_INTEGER* s)
1612116128
{
1612216129
WOLFSSL_ENTER("wolfSSL_X509_set_serialNumber");
16123-
if (x509 == NULL || s == NULL || s->length >= EXTERNAL_SERIAL_SIZE)
16130+
if (x509 == NULL || s == NULL || s->data == NULL ||
16131+
s->length >= EXTERNAL_SERIAL_SIZE)
1612416132
return WOLFSSL_FAILURE;
1612516133

1612616134
/* WOLFSSL_ASN1_INTEGER has type | size | data

‎tests/api.c‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20274,7 +20274,7 @@ static int test_wolfSSL_OCSP_single_get0_status(void)
2027420274
ExpectPtrEq(nextDate, &certStatus.nextDateParsed);
2027520275

2027620276
ExpectIntEQ(wolfSSL_OCSP_single_get0_status(NULL, NULL, NULL, NULL, NULL),
20277-
CERT_GOOD);
20277+
-1);
2027820278
ExpectIntEQ(wolfSSL_OCSP_single_get0_status(&single, NULL, NULL, NULL,
2027920279
NULL), CERT_GOOD);
2028020280
#endif

‎wolfcrypt/src/evp.c‎

Lines changed: 41 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1314,7 +1314,11 @@ int wolfSSL_EVP_CipherFinal(WOLFSSL_EVP_CIPHER_CTX *ctx, unsigned char *out,
13141314
#ifndef WOLFSSL_AESGCM_STREAM
13151315
if ((ctx->authBuffer && ctx->authBufferLen > 0)
13161316
|| (ctx->authBufferLen == 0)) {
1317-
if (ctx->enc)
1317+
if (ctx->authBufferLen > 0 && out == NULL) {
1318+
ret = WOLFSSL_FAILURE;
1319+
*outl = 0;
1320+
}
1321+
else if (ctx->enc)
13181322
ret = wc_AesGcmEncrypt(&ctx->cipher.aes, out,
13191323
ctx->authBuffer, ctx->authBufferLen,
13201324
ctx->iv, ctx->ivSz, ctx->authTag, ctx->authTagSz,
@@ -1397,7 +1401,11 @@ int wolfSSL_EVP_CipherFinal(WOLFSSL_EVP_CIPHER_CTX *ctx, unsigned char *out,
13971401
case WC_AES_256_CCM_TYPE:
13981402
if ((ctx->authBuffer && ctx->authBufferLen > 0)
13991403
|| (ctx->authBufferLen == 0)) {
1400-
if (ctx->enc) {
1404+
if (ctx->authBufferLen > 0 && out == NULL) {
1405+
ret = WOLFSSL_FAILURE;
1406+
*outl = 0;
1407+
}
1408+
else if (ctx->enc) {
14011409
ret = wc_AesCcmEncrypt(&ctx->cipher.aes, out,
14021410
ctx->authBuffer, (word32)ctx->authBufferLen,
14031411
ctx->iv, (word32)ctx->ivSz, ctx->authTag,
@@ -4309,16 +4317,19 @@ int wolfSSL_EVP_SignFinal(WOLFSSL_EVP_MD_CTX *ctx, unsigned char *sigret,
43094317
#ifndef NO_DSA
43104318
case WC_EVP_PKEY_DSA: {
43114319
int bytes;
4312-
ret = wolfSSL_DSA_do_sign(md, sigret, pkey->dsa);
4320+
unsigned char tmpSig[DSA_MAX_SIG_SIZE];
4321+
ret = wolfSSL_DSA_do_sign(md, tmpSig, pkey->dsa);
43134322
/* wolfSSL_DSA_do_sign() can return WOLFSSL_FATAL_ERROR */
43144323
if (ret != WOLFSSL_SUCCESS)
43154324
return ret;
43164325
bytes = wolfSSL_BN_num_bytes(pkey->dsa->q);
43174326
if (bytes == WC_NO_ERR_TRACE(WOLFSSL_FAILURE) ||
4318-
(int)*siglen < bytes * 2)
4327+
bytes > DSA_MAX_HALF_SIZE ||
4328+
bytes * 2 > (int)*siglen)
43194329
{
43204330
return WOLFSSL_FAILURE;
43214331
}
4332+
XMEMCPY(sigret, tmpSig, bytes * 2);
43224333
*siglen = (unsigned int)(bytes * 2);
43234334
return WOLFSSL_SUCCESS;
43244335
}
@@ -4398,7 +4409,8 @@ int wolfSSL_EVP_VerifyFinal(WOLFSSL_EVP_MD_CTX *ctx,
43984409
unsigned char md[WC_MAX_DIGEST_SIZE];
43994410
unsigned int mdsize;
44004411

4401-
if (ctx == NULL) return WOLFSSL_FAILURE;
4412+
if (ctx == NULL || pkey == NULL || sig == NULL)
4413+
return WOLFSSL_FAILURE;
44024414
WOLFSSL_ENTER("EVP_VerifyFinal");
44034415
ret = wolfSSL_EVP_DigestFinal(ctx, md, &mdsize);
44044416
if (ret <= 0)
@@ -4459,6 +4471,9 @@ WOLFSSL_EVP_PKEY* wolfSSL_EVP_PKEY_new_mac_key(int type, WOLFSSL_ENGINE* e,
44594471
if (type != WC_EVP_PKEY_HMAC || (key == NULL && keylen != 0))
44604472
return NULL;
44614473

4474+
if (keylen < 0)
4475+
return NULL;
4476+
44624477
pkey = wolfSSL_EVP_PKEY_new();
44634478
if (pkey != NULL) {
44644479
pkey->pkey.ptr = (char*)XMALLOC((size_t)keylen, NULL,
@@ -4870,6 +4885,9 @@ int wolfSSL_EVP_DigestSignFinal(WOLFSSL_EVP_MD_CTX *ctx, unsigned char *sig,
48704885
return WOLFSSL_SUCCESS;
48714886
}
48724887
}
4888+
else if (ctx->pctx == NULL || ctx->pctx->pkey == NULL) {
4889+
return WOLFSSL_FAILURE;
4890+
}
48734891
#ifndef NO_RSA
48744892
else if (ctx->pctx->pkey->type == WC_EVP_PKEY_RSA) {
48754893
if (sig == NULL) {
@@ -5007,6 +5025,8 @@ int wolfSSL_EVP_DigestVerifyFinal(WOLFSSL_EVP_MD_CTX *ctx,
50075025
return WOLFSSL_FAILURE;
50085026
}
50095027
else {
5028+
if (ctx->pctx == NULL || ctx->pctx->pkey == NULL)
5029+
return WOLFSSL_FAILURE;
50105030
/* Verify the signature with the digest. */
50115031
switch (ctx->pctx->pkey->type) {
50125032
#if !defined(NO_RSA)
@@ -10233,6 +10253,9 @@ int wolfSSL_EVP_Digest(const unsigned char* in, int inSz, unsigned char* out,
1023310253
return WOLFSSL_FAILURE;
1023410254
}
1023510255

10256+
if (inSz < 0)
10257+
return WOLFSSL_FAILURE;
10258+
1023610259
err = wolfSSL_EVP_get_hashinfo(evp, &hashType, &hashSz);
1023710260
if (err != WOLFSSL_SUCCESS)
1023810261
return err;
@@ -11280,6 +11303,7 @@ int wolfSSL_EVP_MD_type(const WOLFSSL_EVP_MD* type)
1128011303
enum wc_HashType macType;
1128111304

1128211305
WOLFSSL_ENTER("wolfSSL_EVP_DigestFinal");
11306+
1128311307
macType = EvpMd2MacType(wolfSSL_EVP_MD_CTX_md(ctx));
1128411308
switch (macType) {
1128511309
case WC_HASH_TYPE_MD4:
@@ -11305,16 +11329,18 @@ int wolfSSL_EVP_MD_type(const WOLFSSL_EVP_MD* type)
1130511329

1130611330
case WC_HASH_TYPE_SHAKE128:
1130711331
#if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
11308-
*s = 16; /* if mixing up XOF with plain digest 128 bit is
11309-
* default for SHAKE128 */
11332+
if (s != NULL)
11333+
*s = 16; /* if mixing up XOF with plain digest 128 bit is
11334+
* default for SHAKE128 */
1131011335
#else
1131111336
return WOLFSSL_FAILURE;
1131211337
#endif
1131311338
break;
1131411339
case WC_HASH_TYPE_SHAKE256:
1131511340
#if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
11316-
*s = 32; /* if mixing up XOF with plain digest 256 bit is
11317-
* default for SHAKE256 */
11341+
if (s != NULL)
11342+
*s = 32; /* if mixing up XOF with plain digest 256 bit is
11343+
* default for SHAKE256 */
1131811344
#else
1131911345
return WOLFSSL_FAILURE;
1132011346
#endif
@@ -12882,6 +12908,9 @@ int wolfSSL_EVP_EncodeBlock(unsigned char *out, const unsigned char *in,
1288212908
if (out == NULL || in == NULL)
1288312909
return WOLFSSL_FATAL_ERROR;
1288412910

12911+
if (inLen < 0)
12912+
return WOLFSSL_FATAL_ERROR;
12913+
1288512914
if (Base64_Encode_NoNl(in, (word32)inLen, out, &ret) == 0)
1288612915
return (int)ret;
1288712916
else
@@ -12898,6 +12927,9 @@ int wolfSSL_EVP_DecodeBlock(unsigned char *out, const unsigned char *in,
1289812927
if (out == NULL || in == NULL)
1289912928
return WOLFSSL_FATAL_ERROR;
1290012929

12930+
if (inLen < 0)
12931+
return WOLFSSL_FATAL_ERROR;
12932+
1290112933
if (Base64_Decode(in, (word32)inLen, out, &ret) == 0)
1290212934
return (int)ret;
1290312935
else

‎wolfcrypt/src/pwdbased.c‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,9 @@ int wc_PBKDF1_ex(byte* key, int keyLen, byte* iv, int ivLen,
7676
return BAD_FUNC_ARG;
7777
}
7878

79+
if (keyLen > INT_MAX - ivLen)
80+
return BAD_FUNC_ARG;
81+
7982
if (iterations <= 0)
8083
iterations = 1;
8184

0 commit comments

Comments
 (0)