/usr/src/lib/libtls/tls.c

Bug Summary

File:	src/lib/libtls/tls.c
Warning:	line 260, column 2 Access to field 'refcount' results in a dereference of a null pointer (loaded from variable 'config')

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name tls.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 1 -fhalf-no-semantic-interposition -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/lib/libtls/obj -resource-dir /usr/local/lib/clang/13.0.0 -D LIBRESSL_INTERNAL -D PIC -internal-isystem /usr/local/lib/clang/13.0.0/include -internal-externc-isystem /usr/include -O2 -fdebug-compilation-dir=/usr/src/lib/libtls/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /home/ben/Projects/vmm/scan-build/2022-01-12-194120-40624-1 -x c /usr/src/lib/libtls/tls.c

1/* $OpenBSD: tls.c,v 1.92 2021/10/21 14:31:21 tb Exp $ */
2/*
* Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/

18#include <sys/socket.h>

20#include <errno(*__errno()).h>
21#include <limits.h>
22#include <pthread.h>
23#include <stdlib.h>
24#include <unistd.h>

26#include <openssl/bio.h>
27#include <openssl/err.h>
28#include <openssl/evp.h>
29#include <openssl/pem.h>
30#include <openssl/safestack.h>
31#include <openssl/ssl.h>
32#include <openssl/x509.h>

34#include <tls.h>
35#include "tls_internal.h"

37static struct tls_config *tls_config_default;

39static int tls_init_rv = -1;

41static void
42tls_do_init(void)
43{
OPENSSL_init_ssl(OPENSSL_INIT_NO_LOAD_CONFIG0x00000001L, NULL((void*)0));

if (BIO_sock_init() != 1)
return;

if ((tls_config_default = tls_config_new_internal()) == NULL((void*)0))
return;

tls_config_default->refcount++;

tls_init_rv = 0;
55}

57int
58tls_init(void)
59{
static pthread_once_t once = PTHREAD_ONCE_INIT{ 0, ((void*)0) };

if (pthread_once(&once, tls_do_init) != 0)
return -1;

return tls_init_rv;
66}

68const char *
69tls_error(struct tls *ctx)
70{
return ctx->error.msg;
72}

74void
75tls_error_clear(struct tls_error *error)
76{
free(error->msg);
error->msg = NULL((void*)0);
error->num = 0;
error->tls = 0;
81}

83static int
84tls_error_vset(struct tls_error *error, int errnum, const char *fmt, va_list ap)
85{
char *errmsg = NULL((void*)0);
int rv = -1;

tls_error_clear(error);

error->num = errnum;
error->tls = 1;

if (vasprintf(&errmsg, fmt, ap) == -1) {
errmsg = NULL((void*)0);
goto err;
}

if (errnum == -1) {
error->msg = errmsg;
return (0);
}

if (asprintf(&error->msg, "%s: %s", errmsg, strerror(errnum)) == -1) {
error->msg = NULL((void*)0);
goto err;
}
rv = 0;

err:
free(errmsg);

return (rv);
114}

116int
117tls_error_set(struct tls_error *error, const char *fmt, ...)
118{
va_list ap;
int errnum, rv;

errnum = errno(*__errno());

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(error, errnum, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
129}

131int
132tls_error_setx(struct tls_error *error, const char *fmt, ...)
133{
va_list ap;
int rv;

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(error, -1, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
142}

144int
145tls_config_set_error(struct tls_config *config, const char *fmt, ...)
146{
va_list ap;
int errnum, rv;

errnum = errno(*__errno());

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(&config->error, errnum, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
157}

159int
160tls_config_set_errorx(struct tls_config *config, const char *fmt, ...)
161{
va_list ap;
int rv;

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(&config->error, -1, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
170}

172int
173tls_set_error(struct tls *ctx, const char *fmt, ...)
174{
va_list ap;
int errnum, rv;

errnum = errno(*__errno());

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(&ctx->error, errnum, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
185}

187int
188tls_set_errorx(struct tls *ctx, const char *fmt, ...)
189{
va_list ap;
int rv;

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(&ctx->error, -1, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
198}

200int
201tls_set_ssl_errorx(struct tls *ctx, const char *fmt, ...)
202{
va_list ap;
int rv;

/* Only set an error if a more specific one does not already exist. */
if (ctx->error.tls != 0)
return (0);

va_start(ap, fmt)__builtin_va_start(ap, fmt);
rv = tls_error_vset(&ctx->error, -1, fmt, ap);
va_end(ap)__builtin_va_end(ap);

return (rv);
215}

217struct tls_sni_ctx *
218tls_sni_ctx_new(void)
219{
return (calloc(1, sizeof(struct tls_sni_ctx)));
221}

223void
224tls_sni_ctx_free(struct tls_sni_ctx *sni_ctx)
225{
if (sni_ctx == NULL((void*)0))
return;

SSL_CTX_free(sni_ctx->ssl_ctx);
X509_free(sni_ctx->ssl_cert);

free(sni_ctx);
233}

235struct tls *
236tls_new(void)
237{
struct tls *ctx;

if ((ctx = calloc(1, sizeof(*ctx))) == NULL((void*)0))
1
Assuming the condition is false→
2
←
Taking false branch→
return (NULL((void*)0));

tls_reset(ctx);

if (tls_configure(ctx, tls_config_default) == -1) {
3
←
Calling 'tls_configure'→
free(ctx);
return NULL((void*)0);
}

return (ctx);
251}

253int
254tls_configure(struct tls *ctx, struct tls_config *config)
255{
if (config == NULL((void*)0))
4
←
Assuming 'config' is equal to NULL→
5
←
Taking true branch→
config = tls_config_default;
6
←
Null pointer value stored to 'config'→

pthread_mutex_lock(&config->mutex);
config->refcount++;
7
←
Access to field 'refcount' results in a dereference of a null pointer (loaded from variable 'config')
pthread_mutex_unlock(&config->mutex);

tls_config_free(ctx->config);

ctx->config = config;
ctx->keypair = config->keypair;

if ((ctx->flags & TLS_SERVER(1 << 1)) != 0)
return (tls_configure_server(ctx));

return (0);
272}

274int
275tls_cert_hash(X509 *cert, char **hash)
276{
char d[EVP_MAX_MD_SIZE64], *dhex = NULL((void*)0);
int dlen, rv = -1;

free(*hash);
*hash = NULL((void*)0);

if (X509_digest(cert, EVP_sha256(), d, &dlen) != 1)
goto err;

if (tls_hex_string(d, dlen, &dhex, NULL((void*)0)) != 0)
goto err;

if (asprintf(hash, "SHA256:%s", dhex) == -1) {
*hash = NULL((void*)0);
goto err;
}

rv = 0;
err:
free(dhex);

return (rv);
299}

301int
302tls_cert_pubkey_hash(X509 *cert, char **hash)
303{
char d[EVP_MAX_MD_SIZE64], *dhex = NULL((void*)0);
int dlen, rv = -1;

free(*hash);
*hash = NULL((void*)0);

if (X509_pubkey_digest(cert, EVP_sha256(), d, &dlen) != 1)
goto err;

if (tls_hex_string(d, dlen, &dhex, NULL((void*)0)) != 0)
goto err;

if (asprintf(hash, "SHA256:%s", dhex) == -1) {
*hash = NULL((void*)0);
goto err;
}

rv = 0;

err:
free(dhex);

return (rv);
327}

329static int
330tls_keypair_to_pkey(struct tls *ctx, struct tls_keypair *keypair, EVP_PKEY **pkey)
331{
BIO *bio = NULL((void*)0);
X509 *x509 = NULL((void*)0);
char *mem;
size_t len;
int ret = -1;

*pkey = NULL((void*)0);

if (ctx->config->use_fake_private_key) {
mem = keypair->cert_mem;
len = keypair->cert_len;
} else {
mem = keypair->key_mem;
len = keypair->key_len;
}

if (mem == NULL((void*)0))
return (0);

if (len > INT_MAX2147483647) {
tls_set_errorx(ctx, ctx->config->use_fake_private_key ?
    "cert too long" : "key too long");
goto err;
}

if ((bio = BIO_new_mem_buf(mem, len)) == NULL((void*)0)) {
tls_set_errorx(ctx, "failed to create buffer");
goto err;
}

if (ctx->config->use_fake_private_key) {
if ((x509 = PEM_read_bio_X509(bio, NULL((void*)0), tls_password_cb,
    NULL((void*)0))) == NULL((void*)0)) {
	tls_set_errorx(ctx, "failed to read X509 certificate");
	goto err;
}
if ((*pkey = X509_get_pubkey(x509)) == NULL((void*)0)) {
	tls_set_errorx(ctx, "failed to retrieve pubkey");
	goto err;
}
} else {
if ((*pkey = PEM_read_bio_PrivateKey(bio, NULL((void*)0), tls_password_cb,
    NULL((void*)0))) ==  NULL((void*)0)) {
	tls_set_errorx(ctx, "failed to read private key");
	goto err;
}
}

ret = 0;
err:
BIO_free(bio);
X509_free(x509);
return (ret);
385}

387static int
388tls_keypair_setup_pkey(struct tls *ctx, struct tls_keypair *keypair, EVP_PKEY *pkey)
389{
RSA *rsa = NULL((void*)0);
EC_KEY *eckey = NULL((void*)0);
int ret = -1;

/* Only install the pubkey hash if fake private keys are used. */
if (!ctx->config->skip_private_key_check)
return (0);

if (keypair->pubkey_hash == NULL((void*)0)) {
tls_set_errorx(ctx, "public key hash not set");
goto err;
}

switch (EVP_PKEY_id(pkey)) {
case EVP_PKEY_RSA6:
if ((rsa = EVP_PKEY_get1_RSA(pkey)) == NULL((void*)0) ||
    RSA_set_ex_data(rsa, 0, keypair->pubkey_hash) == 0) {
	tls_set_errorx(ctx, "RSA key setup failure");
	goto err;
}
break;
case EVP_PKEY_EC408:
if ((eckey = EVP_PKEY_get1_EC_KEY(pkey)) == NULL((void*)0) ||
    ECDSA_set_ex_data(eckey, 0, keypair->pubkey_hash) == 0) {
	tls_set_errorx(ctx, "EC key setup failure");
	goto err;
}
break;
default:
tls_set_errorx(ctx, "incorrect key type");
goto err;
}

ret = 0;

err:
RSA_free(rsa);
EC_KEY_free(eckey);
return (ret);
429}

431int
432tls_configure_ssl_keypair(struct tls *ctx, SSL_CTX *ssl_ctx,
  struct tls_keypair *keypair, int required)
434{
EVP_PKEY *pkey = NULL((void*)0);

if (!required &&
   keypair->cert_mem == NULL((void*)0) &&
   keypair->key_mem == NULL((void*)0))
return(0);

if (keypair->cert_mem != NULL((void*)0)) {
if (keypair->cert_len > INT_MAX2147483647) {
	tls_set_errorx(ctx, "certificate too long");
	goto err;
}

if (SSL_CTX_use_certificate_chain_mem(ssl_ctx,
    keypair->cert_mem, keypair->cert_len) != 1) {
	tls_set_errorx(ctx, "failed to load certificate");
	goto err;
}
}

if (tls_keypair_to_pkey(ctx, keypair, &pkey) == -1)
goto err;
if (pkey != NULL((void*)0)) {
if (tls_keypair_setup_pkey(ctx, keypair, pkey) == -1)
	goto err;
if (SSL_CTX_use_PrivateKey(ssl_ctx, pkey) != 1) {
	tls_set_errorx(ctx, "failed to load private key");
	goto err;
}
EVP_PKEY_free(pkey);
pkey = NULL((void*)0);
}

if (!ctx->config->skip_private_key_check &&
   SSL_CTX_check_private_key(ssl_ctx) != 1) {
tls_set_errorx(ctx, "private/public key mismatch");
goto err;
}

return (0);

err:
EVP_PKEY_free(pkey);

return (-1);
480}

482int
483tls_configure_ssl(struct tls *ctx, SSL_CTX *ssl_ctx)
484{
SSL_CTX_clear_mode(ssl_ctx, SSL_MODE_AUTO_RETRY)SSL_CTX_ctrl((ssl_ctx),78,(0x00000004L),((void*)0));

SSL_CTX_set_mode(ssl_ctx, SSL_MODE_ENABLE_PARTIAL_WRITE)SSL_CTX_ctrl((ssl_ctx),33,(0x00000001L),((void*)0));
SSL_CTX_set_mode(ssl_ctx, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER)SSL_CTX_ctrl((ssl_ctx),33,(0x00000002L),((void*)0));

SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2)SSL_CTX_ctrl((ssl_ctx),32,(0x0),((void*)0));
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv3)SSL_CTX_ctrl((ssl_ctx),32,(0x0),((void*)0));

SSL_CTX_clear_options(ssl_ctx, SSL_OP_NO_TLSv1)SSL_CTX_ctrl((ssl_ctx),77,(0x04000000L),((void*)0));
SSL_CTX_clear_options(ssl_ctx, SSL_OP_NO_TLSv1_1)SSL_CTX_ctrl((ssl_ctx),77,(0x10000000L),((void*)0));
SSL_CTX_clear_options(ssl_ctx, SSL_OP_NO_TLSv1_2)SSL_CTX_ctrl((ssl_ctx),77,(0x08000000L),((void*)0));
SSL_CTX_clear_options(ssl_ctx, SSL_OP_NO_TLSv1_3)SSL_CTX_ctrl((ssl_ctx),77,(0x20000000L),((void*)0));

if ((ctx->config->protocols & TLS_PROTOCOL_TLSv1_0(1 << 1)) == 0)
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TLSv1)SSL_CTX_ctrl((ssl_ctx),32,(0x04000000L),((void*)0));
if ((ctx->config->protocols & TLS_PROTOCOL_TLSv1_1(1 << 2)) == 0)
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TLSv1_1)SSL_CTX_ctrl((ssl_ctx),32,(0x10000000L),((void*)0));
if ((ctx->config->protocols & TLS_PROTOCOL_TLSv1_2(1 << 3)) == 0)
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TLSv1_2)SSL_CTX_ctrl((ssl_ctx),32,(0x08000000L),((void*)0));
if ((ctx->config->protocols & TLS_PROTOCOL_TLSv1_3(1 << 4)) == 0)
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TLSv1_3)SSL_CTX_ctrl((ssl_ctx),32,(0x20000000L),((void*)0));

if (ctx->config->alpn != NULL((void*)0)) {
if (SSL_CTX_set_alpn_protos(ssl_ctx, ctx->config->alpn,
    ctx->config->alpn_len) != 0) {
	tls_set_errorx(ctx, "failed to set alpn");
	goto err;
}
}

if (ctx->config->ciphers != NULL((void*)0)) {
if (SSL_CTX_set_cipher_list(ssl_ctx,
    ctx->config->ciphers) != 1) {
	tls_set_errorx(ctx, "failed to set ciphers");
	goto err;
}
}

if (ctx->config->verify_time == 0) {
X509_VERIFY_PARAM_set_flags(SSL_CTX_get0_param(ssl_ctx),
    X509_V_FLAG_NO_CHECK_TIME0x200000);
}

/* Disable any form of session caching by default */
SSL_CTX_set_session_cache_mode(ssl_ctx, SSL_SESS_CACHE_OFF)SSL_CTX_ctrl(ssl_ctx,44,0x0000,((void*)0));
SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_TICKET)SSL_CTX_ctrl((ssl_ctx),32,(0x00004000L),((void*)0));

return (0);

err:
return (-1);
536}

538static int
539tls_ssl_cert_verify_cb(X509_STORE_CTX *x509_ctx, void *arg)
540{
struct tls *ctx = arg;
int x509_err;

if (ctx->config->verify_cert == 0)
return (1);

if ((X509_verify_cert(x509_ctx)) < 0) {
tls_set_errorx(ctx, "X509 verify cert failed");
return (0);
}

x509_err = X509_STORE_CTX_get_error(x509_ctx);
if (x509_err == X509_V_OK0)
return (1);

tls_set_errorx(ctx, "certificate verification failed: %s",
   X509_verify_cert_error_string(x509_err));

return (0);
560}

562int
563tls_configure_ssl_verify(struct tls *ctx, SSL_CTX *ssl_ctx, int verify)
564{
size_t ca_len = ctx->config->ca_len;
char *ca_mem = ctx->config->ca_mem;
char *crl_mem = ctx->config->crl_mem;
size_t crl_len = ctx->config->crl_len;
char *ca_free = NULL((void*)0);
STACK_OF(X509_INFO)struct stack_st_X509_INFO *xis = NULL((void*)0);
X509_STORE *store;
X509_INFO *xi;
BIO *bio = NULL((void*)0);
int rv = -1;
int i;

SSL_CTX_set_verify(ssl_ctx, verify, NULL((void*)0));
SSL_CTX_set_cert_verify_callback(ssl_ctx, tls_ssl_cert_verify_cb, ctx);

if (ctx->config->verify_depth >= 0)
SSL_CTX_set_verify_depth(ssl_ctx, ctx->config->verify_depth);

if (ctx->config->verify_cert == 0)
goto done;

/* If no CA has been specified, attempt to load the default. */
if (ctx->config->ca_mem == NULL((void*)0) && ctx->config->ca_path == NULL((void*)0)) {
if (tls_config_load_file(&ctx->error, "CA", tls_default_ca_cert_file(),
    &ca_mem, &ca_len) != 0)
	goto err;
ca_free = ca_mem;
}

if (ca_mem != NULL((void*)0)) {
if (ca_len > INT_MAX2147483647) {
	tls_set_errorx(ctx, "ca too long");
	goto err;
}
if (SSL_CTX_load_verify_mem(ssl_ctx, ca_mem, ca_len) != 1) {
	tls_set_errorx(ctx, "ssl verify memory setup failure");
	goto err;
}
} else if (SSL_CTX_load_verify_locations(ssl_ctx, NULL((void*)0),
   ctx->config->ca_path) != 1) {
tls_set_errorx(ctx, "ssl verify locations failure");
goto err;
}

if (crl_mem != NULL((void*)0)) {
if (crl_len > INT_MAX2147483647) {
	tls_set_errorx(ctx, "crl too long");
	goto err;
}
if ((bio = BIO_new_mem_buf(crl_mem, crl_len)) == NULL((void*)0)) {
	tls_set_errorx(ctx, "failed to create buffer");
	goto err;
}
if ((xis = PEM_X509_INFO_read_bio(bio, NULL((void*)0), tls_password_cb,
    NULL((void*)0))) == NULL((void*)0)) {
	tls_set_errorx(ctx, "failed to parse crl");
	goto err;
}
store = SSL_CTX_get_cert_store(ssl_ctx);
for (i = 0; i < sk_X509_INFO_num(xis)sk_num(((_STACK*) (1 ? (xis) : (struct stack_st_X509_INFO*)0)
)); i++) {
	xi = sk_X509_INFO_value(xis, i)((X509_INFO *)sk_value(((_STACK*) (1 ? (xis) : (struct stack_st_X509_INFO
*)0)), (i)));
	if (xi->crl == NULL((void*)0))
		continue;
	if (!X509_STORE_add_crl(store, xi->crl)) {
		tls_set_error(ctx, "failed to add crl");
		goto err;
	}
	xi->crl = NULL((void*)0);
}
X509_STORE_set_flags(store,
    X509_V_FLAG_CRL_CHECK0x4 | X509_V_FLAG_CRL_CHECK_ALL0x8);
}

done:
rv = 0;

err:
sk_X509_INFO_pop_free(xis, X509_INFO_free)sk_pop_free(((_STACK*) (1 ? (xis) : (struct stack_st_X509_INFO
*)0)), ((void (*)(void *)) ((1 ? (X509_INFO_free) : (void (*)
(X509_INFO *))0))));
BIO_free(bio);
free(ca_free);

return (rv);
647}

649void
650tls_free(struct tls *ctx)
651{
if (ctx == NULL((void*)0))
return;

tls_reset(ctx);

free(ctx);
658}

660void
661tls_reset(struct tls *ctx)
662{
struct tls_sni_ctx *sni, *nsni;

tls_config_free(ctx->config);
ctx->config = NULL((void*)0);

SSL_CTX_free(ctx->ssl_ctx);
SSL_free(ctx->ssl_conn);
X509_free(ctx->ssl_peer_cert);

ctx->ssl_conn = NULL((void*)0);
ctx->ssl_ctx = NULL((void*)0);
ctx->ssl_peer_cert = NULL((void*)0);
/* X509 objects in chain are freed with the SSL */
ctx->ssl_peer_chain = NULL((void*)0);

ctx->socket = -1;
ctx->state = 0;

free(ctx->servername);
ctx->servername = NULL((void*)0);

free(ctx->error.msg);
ctx->error.msg = NULL((void*)0);
ctx->error.num = -1;

tls_conninfo_free(ctx->conninfo);
ctx->conninfo = NULL((void*)0);

tls_ocsp_free(ctx->ocsp);
ctx->ocsp = NULL((void*)0);

for (sni = ctx->sni_ctx; sni != NULL((void*)0); sni = nsni) {
nsni = sni->next;
tls_sni_ctx_free(sni);
}
ctx->sni_ctx = NULL((void*)0);

ctx->read_cb = NULL((void*)0);
ctx->write_cb = NULL((void*)0);
ctx->cb_arg = NULL((void*)0);
703}

705int
706tls_ssl_error(struct tls *ctx, SSL *ssl_conn, int ssl_ret, const char *prefix)
707{
const char *errstr = "unknown error";
unsigned long err;
int ssl_err;

ssl_err = SSL_get_error(ssl_conn, ssl_ret);
switch (ssl_err) {
case SSL_ERROR_NONE0:
case SSL_ERROR_ZERO_RETURN6:
return (0);

case SSL_ERROR_WANT_READ2:
return (TLS_WANT_POLLIN-2);

case SSL_ERROR_WANT_WRITE3:
return (TLS_WANT_POLLOUT-3);

case SSL_ERROR_SYSCALL5:
if ((err = ERR_peek_error()) != 0) {
	errstr = ERR_error_string(err, NULL((void*)0));
} else if (ssl_ret == 0) {
	if ((ctx->state & TLS_HANDSHAKE_COMPLETE(1 << 2)) != 0) {
		ctx->state |= TLS_EOF_NO_CLOSE_NOTIFY(1 << 0);
		return (0);
	}
	errstr = "unexpected EOF";
} else if (ssl_ret == -1) {
	errstr = strerror(errno(*__errno()));
}
tls_set_ssl_errorx(ctx, "%s failed: %s", prefix, errstr);
return (-1);

case SSL_ERROR_SSL1:
if ((err = ERR_peek_error()) != 0) {
	errstr = ERR_error_string(err, NULL((void*)0));
}
tls_set_ssl_errorx(ctx, "%s failed: %s", prefix, errstr);
return (-1);

case SSL_ERROR_WANT_CONNECT7:
case SSL_ERROR_WANT_ACCEPT8:
case SSL_ERROR_WANT_X509_LOOKUP4:
default:
tls_set_ssl_errorx(ctx, "%s failed (%d)", prefix, ssl_err);
return (-1);
}
753}

755int
756tls_handshake(struct tls *ctx)
757{
int rv = -1;

tls_error_clear(&ctx->error);

if ((ctx->flags & (TLS_CLIENT(1 << 0) | TLS_SERVER_CONN(1 << 2))) == 0) {
tls_set_errorx(ctx, "invalid operation for context");
goto out;
}

if ((ctx->state & TLS_HANDSHAKE_COMPLETE(1 << 2)) != 0) {
tls_set_errorx(ctx, "handshake already completed");
goto out;
}

if ((ctx->flags & TLS_CLIENT(1 << 0)) != 0)
rv = tls_handshake_client(ctx);
else if ((ctx->flags & TLS_SERVER_CONN(1 << 2)) != 0)
rv = tls_handshake_server(ctx);

if (rv == 0) {
ctx->ssl_peer_cert = SSL_get_peer_certificate(ctx->ssl_conn);
ctx->ssl_peer_chain = SSL_get_peer_cert_chain(ctx->ssl_conn);
if (tls_conninfo_populate(ctx) == -1)
	rv = -1;
if (ctx->ocsp == NULL((void*)0))
	ctx->ocsp = tls_ocsp_setup_from_peer(ctx);
}
out:
/* Prevent callers from performing incorrect error handling */
errno(*__errno()) = 0;
return (rv);
789}

791ssize_t
792tls_read(struct tls *ctx, void *buf, size_t buflen)
793{
ssize_t rv = -1;
int ssl_ret;

tls_error_clear(&ctx->error);

if ((ctx->state & TLS_HANDSHAKE_COMPLETE(1 << 2)) == 0) {
if ((rv = tls_handshake(ctx)) != 0)
	goto out;
}

if (buflen > INT_MAX2147483647) {
tls_set_errorx(ctx, "buflen too long");
goto out;
}

ERR_clear_error();
if ((ssl_ret = SSL_read(ctx->ssl_conn, buf, buflen)) > 0) {
rv = (ssize_t)ssl_ret;
goto out;
}
rv = (ssize_t)tls_ssl_error(ctx, ctx->ssl_conn, ssl_ret, "read");

out:
/* Prevent callers from performing incorrect error handling */
errno(*__errno()) = 0;
return (rv);
820}

822ssize_t
823tls_write(struct tls *ctx, const void *buf, size_t buflen)
824{
ssize_t rv = -1;
int ssl_ret;

tls_error_clear(&ctx->error);

if ((ctx->state & TLS_HANDSHAKE_COMPLETE(1 << 2)) == 0) {
if ((rv = tls_handshake(ctx)) != 0)
	goto out;
}

if (buflen > INT_MAX2147483647) {
tls_set_errorx(ctx, "buflen too long");
goto out;
}

ERR_clear_error();
if ((ssl_ret = SSL_write(ctx->ssl_conn, buf, buflen)) > 0) {
rv = (ssize_t)ssl_ret;
goto out;
}
rv = (ssize_t)tls_ssl_error(ctx, ctx->ssl_conn, ssl_ret, "write");

out:
/* Prevent callers from performing incorrect error handling */
errno(*__errno()) = 0;
return (rv);
851}

853int
854tls_close(struct tls *ctx)
855{
int ssl_ret;
int rv = 0;

tls_error_clear(&ctx->error);

if ((ctx->flags & (TLS_CLIENT(1 << 0) | TLS_SERVER_CONN(1 << 2))) == 0) {
tls_set_errorx(ctx, "invalid operation for context");
rv = -1;
goto out;
}

if (ctx->state & TLS_SSL_NEEDS_SHUTDOWN(1 << 3)) {
ERR_clear_error();
ssl_ret = SSL_shutdown(ctx->ssl_conn);
if (ssl_ret < 0) {
	rv = tls_ssl_error(ctx, ctx->ssl_conn, ssl_ret,
	    "shutdown");
	if (rv == TLS_WANT_POLLIN-2 || rv == TLS_WANT_POLLOUT-3)
		goto out;
}
ctx->state &= ~TLS_SSL_NEEDS_SHUTDOWN(1 << 3);
}

if (ctx->socket != -1) {
if (shutdown(ctx->socket, SHUT_RDWR2) != 0) {
	if (rv == 0 &&
	    errno(*__errno()) != ENOTCONN57 && errno(*__errno()) != ECONNRESET54) {
		tls_set_error(ctx, "shutdown");
		rv = -1;
	}
}
if (close(ctx->socket) != 0) {
	if (rv == 0) {
		tls_set_error(ctx, "close");
		rv = -1;
	}
}
ctx->socket = -1;
}

if ((ctx->state & TLS_EOF_NO_CLOSE_NOTIFY(1 << 0)) != 0) {
tls_set_errorx(ctx, "EOF without close notify");
rv = -1;
}

out:
/* Prevent callers from performing incorrect error handling */
errno(*__errno()) = 0;
return (rv);
905}