Add m-esr52 at 52.6.0

1 files changed, 170 insertions, 0 deletions

diff --git a/security/nss/lib/smime/cmsreclist.c b/security/nss/lib/smime/cmsreclist.c
new file mode 100644
index 000000000..99d7e9087
--- /dev/null
+++ b/security/nss/lib/smime/cmsreclist.c
@@ -0,0 +1,170 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+/*
+ * CMS recipient list functions
+ */
+
+#include "cmslocal.h"
+
+#include "cert.h"
+#include "key.h"
+#include "secasn1.h"
+#include "secitem.h"
+#include "secoid.h"
+#include "pk11func.h"
+#include "prtime.h"
+#include "secerr.h"
+
+static int
+nss_cms_recipients_traverse(NSSCMSRecipientInfo **recipientinfos,
+                            NSSCMSRecipient **recipient_list)
+{
+    int count = 0;
+    int rlindex = 0;
+    int i, j;
+    NSSCMSRecipient *rle;
+    NSSCMSRecipientInfo *ri;
+    NSSCMSRecipientEncryptedKey *rek;
+
+    for (i = 0; recipientinfos[i] != NULL; i++) {
+        ri = recipientinfos[i];
+        switch (ri->recipientInfoType) {
+            case NSSCMSRecipientInfoID_KeyTrans:
+                if (recipient_list) {
+                    NSSCMSRecipientIdentifier *recipId =
+                        &ri->ri.keyTransRecipientInfo.recipientIdentifier;
+
+                    if (recipId->identifierType != NSSCMSRecipientID_IssuerSN &&
+                        recipId->identifierType != NSSCMSRecipientID_SubjectKeyID) {
+                        PORT_SetError(SEC_ERROR_INVALID_ARGS);
+                        return -1;
+                    }
+                    /* alloc one & fill it out */
+                    rle = (NSSCMSRecipient *)PORT_ZAlloc(sizeof(NSSCMSRecipient));
+                    if (!rle)
+                        return -1;
+
+                    rle->riIndex = i;
+                    rle->subIndex = -1;
+                    switch (recipId->identifierType) {
+                        case NSSCMSRecipientID_IssuerSN:
+                            rle->kind = RLIssuerSN;
+                            rle->id.issuerAndSN = recipId->id.issuerAndSN;
+                            break;
+                        case NSSCMSRecipientID_SubjectKeyID:
+                            rle->kind = RLSubjKeyID;
+                            rle->id.subjectKeyID = recipId->id.subjectKeyID;
+                            break;
+                        default: /* we never get here because of identifierType check
+                                    we done before. Leaving it to kill compiler warning */
+                            break;
+                    }
+                    recipient_list[rlindex++] = rle;
+                } else {
+                    count++;
+                }
+                break;
+            case NSSCMSRecipientInfoID_KeyAgree:
+                if (ri->ri.keyAgreeRecipientInfo.recipientEncryptedKeys == NULL)
+                    break;
+                for (j = 0; ri->ri.keyAgreeRecipientInfo.recipientEncryptedKeys[j] != NULL; j++) {
+                    if (recipient_list) {
+                        rek = ri->ri.keyAgreeRecipientInfo.recipientEncryptedKeys[j];
+                        /* alloc one & fill it out */
+                        rle = (NSSCMSRecipient *)PORT_ZAlloc(sizeof(NSSCMSRecipient));
+                        if (!rle)
+                            return -1;
+
+                        rle->riIndex = i;
+                        rle->subIndex = j;
+                        switch (rek->recipientIdentifier.identifierType) {
+                            case NSSCMSKeyAgreeRecipientID_IssuerSN:
+                                rle->kind = RLIssuerSN;
+                                rle->id.issuerAndSN = rek->recipientIdentifier.id.issuerAndSN;
+                                break;
+                            case NSSCMSKeyAgreeRecipientID_RKeyID:
+                                rle->kind = RLSubjKeyID;
+                                rle->id.subjectKeyID =
+                                    rek->recipientIdentifier.id.recipientKeyIdentifier.subjectKeyIdentifier;
+                                break;
+                        }
+                        recipient_list[rlindex++] = rle;
+                    } else {
+                        count++;
+                    }
+                }
+                break;
+            case NSSCMSRecipientInfoID_KEK:
+                /* KEK is not implemented */
+                break;
+        }
+    }
+    /* if we have a recipient list, we return on success (-1, above, on failure) */
+    /* otherwise, we return the count. */
+    if (recipient_list) {
+        recipient_list[rlindex] = NULL;
+        return 0;
+    } else {
+        return count;
+    }
+}
+
+NSSCMSRecipient **
+nss_cms_recipient_list_create(NSSCMSRecipientInfo **recipientinfos)
+{
+    int count, rv;
+    NSSCMSRecipient **recipient_list;
+
+    /* count the number of recipient identifiers */
+    count = nss_cms_recipients_traverse(recipientinfos, NULL);
+    if (count <= 0) {
+        /* no recipients? */
+        PORT_SetError(SEC_ERROR_BAD_DATA);
+#if 0
+    PORT_SetErrorString("Cannot find recipient data in envelope.");
+#endif
+        return NULL;
+    }
+
+    /* allocate an array of pointers */
+    recipient_list = (NSSCMSRecipient **)
+        PORT_ZAlloc((count + 1) * sizeof(NSSCMSRecipient *));
+    if (recipient_list == NULL)
+        return NULL;
+
+    /* now fill in the recipient_list */
+    rv = nss_cms_recipients_traverse(recipientinfos, recipient_list);
+    if (rv < 0) {
+        nss_cms_recipient_list_destroy(recipient_list);
+        return NULL;
+    }
+    return recipient_list;
+}
+
+void
+nss_cms_recipient_list_destroy(NSSCMSRecipient **recipient_list)
+{
+    int i;
+    NSSCMSRecipient *recipient;
+
+    for (i = 0; recipient_list[i] != NULL; i++) {
+        recipient = recipient_list[i];
+        if (recipient->cert)
+            CERT_DestroyCertificate(recipient->cert);
+        if (recipient->privkey)
+            SECKEY_DestroyPrivateKey(recipient->privkey);
+        if (recipient->slot)
+            PK11_FreeSlot(recipient->slot);
+        PORT_Free(recipient);
+    }
+    PORT_Free(recipient_list);
+}
+
+NSSCMSRecipientEncryptedKey *
+NSS_CMSRecipientEncryptedKey_Create(PLArenaPool *poolp)
+{
+    return (NSSCMSRecipientEncryptedKey *)PORT_ArenaZAlloc(poolp,
+                                                           sizeof(NSSCMSRecipientEncryptedKey));
+}