gssapi/krb5/cfx.c

217 _gk_allocate_buffer(OM_uint32 *minor_status, gss_iov_buffer_desc *buffer, size_t size)
219     if (buffer->type & GSS_IOV_BUFFER_FLAG_ALLOCATED) {
220 	if (buffer->buffer.length == size)
222 	free(buffer->buffer.value);
225     buffer->buffer.value = malloc(size);
226     buffer->buffer.length = size;
227     if (buffer->buffer.value == NULL) {
231     buffer->type |= GSS_IOV_BUFFER_FLAG_ALLOCATED;
251 	 * In DCE style mode we reject having a padding or trailer buffer
263 	 * In non-DCE style mode we require having a padding buffer
305 	padding->buffer.length = 0;
324 		size += iov[i].buffer.length;
400     } else if (trailer->buffer.length < gsstsize) {
405 	trailer->buffer.length = gsstsize;
415     } else if (header->buffer.length < gsshsize) {
420 	header->buffer.length = gsshsize;
422     token = (gss_cfx_wrap_token)header->buffer.value;
511 	data[i].data.data = ((uint8_t *)header->buffer.value) + header->buffer.length - k5hsize;
526 	    data[i].data.length = iov[i - 1].buffer.length;
527 	    data[i].data.data = iov[i - 1].buffer.value;
541 	    data[i].data.data = trailer->buffer.value;
543 	    data[i].data.data = ((uint8_t *)header->buffer.value) + sizeof(*token);
590 	    data[i].data.length = iov[i].buffer.length;
591 	    data[i].data.data = iov[i].buffer.value;
595 	data[i].data.data = header->buffer.value;
601 		data[i].data.data = trailer->buffer.value;
603 		data[i].data.data = (uint8_t *)header->buffer.value +
655 	    len += iov[i].buffer.length;
671 	    memcpy(q, iov[i].buffer.value, iov[i].buffer.length);
672 	    q += iov[i].buffer.length;
685 	    if (iov[i].buffer.length <= skip) {
686 		skip -= iov[i].buffer.length;
688 		memcpy(((uint8_t *)iov[i].buffer.value) + skip, q, iov[i].buffer.length - skip);
689 		q += iov[i].buffer.length - skip;
702 	    memcpy(q, iov[i].buffer.value, min(iov[i].buffer.length, skip));
703 	    if (iov[i].buffer.length > skip)
705 	    skip -= iov[i].buffer.length;
706 	    q += iov[i].buffer.length;
741     if (header->buffer.length < sizeof(*token)) /* we check exact below */
745     if (padding != NULL && padding->buffer.length != 0) {
757     token = (gss_cfx_wrap_token)header->buffer.value;
848 	    if (header->buffer.length != gsshsize) {
852 	} else if (trailer->buffer.length != sizeof(*token) + k5tsize) {
855 	} else if (header->buffer.length != sizeof(*token) + k5hsize) {
867 	data[i].data.data = ((uint8_t *)header->buffer.value) + header->buffer.length - k5hsize;
883 	    data[i].data.length = iov[j].buffer.length;
884 	    data[i].data.data = iov[j].buffer.value;
892 	    data[i].data.data = trailer->buffer.value;
894 	    data[i].data.data = ((uint8_t *)header->buffer.value) +
895 		header->buffer.length - k5hsize - k5tsize - ec- sizeof(*token);
937 	} else if (trailer->buffer.length != gsstsize) {
947 	if (header->buffer.length != gsshsize) {
964 	    data[i].data.length = iov[i].buffer.length;
965 	    data[i].data.data = iov[i].buffer.value;
969 	data[i].data.data = header->buffer.value;
975 		data[i].data.data = trailer->buffer.value;
977 		data[i].data.data = (uint8_t *)header->buffer.value +
983 	token = (gss_cfx_wrap_token)header->buffer.value;
1045 	    size += iov[i].buffer.length;
1138 	trailer->buffer.length = gsstsize;
1143     header->buffer.length = gsshsize;
1147 	padding->buffer.length = 0;
1494 	/* RRC is unprotected; don't modify input buffer */