githubmirror/gnutls

lib/errors.h
201 строка7 KB
Alexander Sosedkin
.gitlab-ci.yml: move fedora jobs to Fedora 43
09 мар 2026, 20:33
09 мар 2026, 20:33d4c58f9
/*
 * Copyright (C) 2000-2012 Free Software Foundation, Inc.
 *
 * Author: Nikos Mavrogiannopoulos
 *
 * This file is part of GnuTLS.
 *
 * The GnuTLS is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * as published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>
 *
 */

#ifndef GNUTLS_LIB_ERRORS_H
#define GNUTLS_LIB_ERRORS_H

#include "gnutls_int.h"
#include "global.h"
#include "mpi.h"
#include <gnutls/x509.h>

#ifdef __FILE__
#ifdef __LINE__
#define gnutls_assert() \
	_gnutls_assert_log("ASSERT: %s[%s]:%d\n", __FILE__, __func__, __LINE__);
#else
#define gnutls_assert()
#endif
#else /* __FILE__ not defined */
#define gnutls_assert()
#endif

inline static int _gnutls_asn2err(int asn_err) __GNUTLS_CONST__;

inline static int _gnutls_asn2err(int asn_err)
{
	switch (asn_err) {
#ifdef ASN1_TIME_ENCODING_ERROR
	case ASN1_TIME_ENCODING_ERROR:
		return GNUTLS_E_ASN1_TIME_ERROR;
#endif
	case ASN1_FILE_NOT_FOUND:
		return GNUTLS_E_FILE_ERROR;
	case ASN1_ELEMENT_NOT_FOUND:
		return GNUTLS_E_ASN1_ELEMENT_NOT_FOUND;
	case ASN1_IDENTIFIER_NOT_FOUND:
		return GNUTLS_E_ASN1_IDENTIFIER_NOT_FOUND;
	case ASN1_DER_ERROR:
		return GNUTLS_E_ASN1_DER_ERROR;
	case ASN1_VALUE_NOT_FOUND:
		return GNUTLS_E_ASN1_VALUE_NOT_FOUND;
	case ASN1_GENERIC_ERROR:
		return GNUTLS_E_ASN1_GENERIC_ERROR;
	case ASN1_VALUE_NOT_VALID:
		return GNUTLS_E_ASN1_VALUE_NOT_VALID;
	case ASN1_TAG_ERROR:
		return GNUTLS_E_ASN1_TAG_ERROR;
	case ASN1_TAG_IMPLICIT:
		return GNUTLS_E_ASN1_TAG_IMPLICIT;
	case ASN1_ERROR_TYPE_ANY:
		return GNUTLS_E_ASN1_TYPE_ANY_ERROR;
	case ASN1_SYNTAX_ERROR:
		return GNUTLS_E_ASN1_SYNTAX_ERROR;
	case ASN1_MEM_ERROR:
		return GNUTLS_E_SHORT_MEMORY_BUFFER;
	case ASN1_MEM_ALLOC_ERROR:
		return GNUTLS_E_MEMORY_ERROR;
	case ASN1_DER_OVERFLOW:
		return GNUTLS_E_ASN1_DER_OVERFLOW;
	default:
		return GNUTLS_E_ASN1_GENERIC_ERROR;
	}
}

void _gnutls_log(int, const char *fmt, ...)
#ifdef __GNUC__
	__attribute__((format(printf, 2, 3)));
#else
	;
#endif

void _gnutls_audit_log(gnutls_session_t, const char *fmt, ...)
#ifdef __GNUC__
	__attribute__((format(printf, 2, 3)));
#else
	;
#endif

void _gnutls_mpi_log(const char *prefix, bigint_t a);

#define _gnutls_cert_log(str, cert)                                            \
	do {                                                                   \
		if (unlikely(_gnutls_log_level >= 3)) {                        \
			gnutls_datum_t _cl_out;                                \
			int _cl_ret;                                           \
			_cl_ret = gnutls_x509_crt_print(                       \
				cert, GNUTLS_CRT_PRINT_ONELINE, &_cl_out);     \
			if (_cl_ret >= 0) {                                    \
				_gnutls_log(3, "%s: %s\n", str, _cl_out.data); \
				gnutls_free(_cl_out.data);                     \
			}                                                      \
		}                                                              \
	} while (0)

#define _gnutls_dn_log(str, dn)                                                \
	do {                                                                   \
		if (unlikely(_gnutls_log_level >= 3)) {                        \
			gnutls_datum_t _cl_out;                                \
			int _cl_ret;                                           \
			_cl_ret = gnutls_x509_rdn_get2((dn), &_cl_out, 0);     \
			if (_cl_ret >= 0) {                                    \
				_gnutls_log(3, "%s: %s\n", str, _cl_out.data); \
				gnutls_free(_cl_out.data);                     \
			}                                                      \
		}                                                              \
	} while (0)

#define _gnutls_reason_log(str, status)                                        \
	do {                                                                   \
		if (unlikely(_gnutls_log_level >= 3)) {                        \
			gnutls_datum_t _cl_out;                                \
			int _cl_ret;                                           \
			_cl_ret =                                              \
				gnutls_certificate_verification_status_print(  \
					status, GNUTLS_CRT_X509, &_cl_out, 0); \
			if (_cl_ret >= 0) {                                    \
				_gnutls_log(3, "%s: %s\n", str, _cl_out.data); \
				gnutls_free(_cl_out.data);                     \
			}                                                      \
		}                                                              \
	} while (0)

#ifdef C99_MACROS
#define LEVEL(l, ...)                                 \
	do {                                          \
		if (unlikely(_gnutls_log_level >= l)) \
			_gnutls_log(l, __VA_ARGS__);  \
	} while (0)

#define _gnutls_debug_log(...) LEVEL(2, __VA_ARGS__)
#define _gnutls_assert_log(...) LEVEL(3, __VA_ARGS__)
#define _gnutls_handshake_log(...) LEVEL(4, __VA_ARGS__)
#define _gnutls_record_log(...) LEVEL(5, __VA_ARGS__)
#define _gnutls_dtls_log(...) LEVEL(6, __VA_ARGS__)

#define _gnutls_hard_log(...) LEVEL(9, __VA_ARGS__)

#define _gnutls_read_log(...) LEVEL(10, __VA_ARGS__)
#define _gnutls_write_log(...) LEVEL(11, __VA_ARGS__)
#define _gnutls_io_log(...) LEVEL(12, __VA_ARGS__)
#define _gnutls_buffers_log(...) LEVEL(13, __VA_ARGS__)
#define _gnutls_no_log(...) LEVEL(INT_MAX, __VA_ARGS__)
#else
#define _gnutls_debug_log _gnutls_null_log
#define _gnutls_assert_log _gnutls_null_log
#define _gnutls_handshake_log _gnutls_null_log
#define _gnutls_io_log _gnutls_null_log
#define _gnutls_buffers_log _gnutls_null_log
#define _gnutls_hard_log _gnutls_null_log
#define _gnutls_record_log _gnutls_null_log
#define _gnutls_dtls_log _gnutls_null_log
#define _gnutls_read_log _gnutls_null_log
#define _gnutls_write_log _gnutls_null_log
#define _gnutls_no_log _gnutls_null_log

void _gnutls_null_log(void *, ...);

#endif /* C99_MACROS */

/* GCC won't inline this by itself and results in a "fatal warning"
   otherwise. Making this a macro has been tried, but it interacts
   badly with the do..while in the expansion. Welcome to the dark
   side. */
static inline
#ifdef __GNUC__
	__attribute__((always_inline))
#endif
	int gnutls_assert_val_int(int val, const char *file, const char *func,
				  int line)
{
	_gnutls_assert_log("ASSERT: %s[%s]:%d\n", file, func, line);
	return val;
}

#define gnutls_assert_val(x) \
	gnutls_assert_val_int(x, __FILE__, __func__, __LINE__)
#define gnutls_assert_val_fatal(x)                                        \
	(((x) != GNUTLS_E_AGAIN && (x) != GNUTLS_E_INTERRUPTED) ?         \
		 gnutls_assert_val_int(x, __FILE__, __func__, __LINE__) : \
		 (x))

#endif /* GNUTLS_LIB_ERRORS_H */