1/* $NetBSD: mk_error.c,v 1.2 2017/01/28 21:31:49 christos Exp $ */ 2 3/* 4 * Copyright (c) 1997 - 2003 Kungliga Tekniska H��gskolan 5 * (Royal Institute of Technology, Stockholm, Sweden). 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * 3. Neither the name of the Institute nor the names of its contributors 20 * may be used to endorse or promote products derived from this software 21 * without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33 * SUCH DAMAGE. 34 */ 35 36#include "krb5_locl.h" 37 38KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 39krb5_mk_error_ext(krb5_context context, 40 krb5_error_code error_code, 41 const char *e_text, 42 const krb5_data *e_data, 43 const krb5_principal server, 44 const PrincipalName *client_name, 45 const Realm *client_realm, 46 time_t *client_time, 47 int *client_usec, 48 krb5_data *reply) 49{ 50 const char *e_text2 = NULL; 51 KRB_ERROR msg; 52 krb5_timestamp sec; 53 int32_t usec; 54 size_t len = 0; 55 krb5_error_code ret = 0; 56 57 krb5_us_timeofday (context, &sec, &usec); 58 59 memset(&msg, 0, sizeof(msg)); 60 msg.pvno = 5; 61 msg.msg_type = krb_error; 62 msg.stime = sec; 63 msg.susec = usec; 64 msg.ctime = client_time; 65 msg.cusec = client_usec; 66 /* Make sure we only send `protocol' error codes */ 67 if(error_code < KRB5KDC_ERR_NONE || error_code >= KRB5_ERR_RCSID) { 68 if(e_text == NULL) 69 e_text = e_text2 = krb5_get_error_message(context, error_code); 70 error_code = KRB5KRB_ERR_GENERIC; 71 } 72 msg.error_code = error_code - KRB5KDC_ERR_NONE; 73 if (e_text) 74 msg.e_text = rk_UNCONST(&e_text); 75 if (e_data) 76 msg.e_data = rk_UNCONST(e_data); 77 if(server){ 78 msg.realm = server->realm; 79 msg.sname = server->name; 80 }else{ 81 static char unspec[] = "<unspecified realm>"; 82 msg.realm = unspec; 83 } 84 msg.crealm = rk_UNCONST(client_realm); 85 msg.cname = rk_UNCONST(client_name); 86 87 ASN1_MALLOC_ENCODE(KRB_ERROR, reply->data, reply->length, &msg, &len, ret); 88 if (e_text2) 89 krb5_free_error_message(context, e_text2); 90 if (ret) 91 return ret; 92 if(reply->length != len) 93 krb5_abortx(context, "internal error in ASN.1 encoder"); 94 return 0; 95} 96 97KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 98krb5_mk_error(krb5_context context, 99 krb5_error_code error_code, 100 const char *e_text, 101 const krb5_data *e_data, 102 const krb5_principal client, 103 const krb5_principal server, 104 time_t *client_time, 105 int *client_usec, 106 krb5_data *reply) 107{ 108 const PrincipalName *client_name = NULL; 109 const Realm *client_realm = NULL; 110 111 if (client) { 112 client_realm = &client->realm; 113 client_name = &client->name; 114 } 115 116 return krb5_mk_error_ext(context, error_code, e_text, e_data, 117 server, client_name, client_realm, 118 client_time, client_usec, reply); 119} 120