1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/security/nss/lib/ckfw/dbm/session.c Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,265 @@ 1.4 +/* This Source Code Form is subject to the terms of the Mozilla Public 1.5 + * License, v. 2.0. If a copy of the MPL was not distributed with this 1.6 + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ 1.7 + 1.8 +#include "ckdbm.h" 1.9 + 1.10 +static void 1.11 +nss_dbm_mdSession_Close 1.12 +( 1.13 + NSSCKMDSession *mdSession, 1.14 + NSSCKFWSession *fwSession, 1.15 + NSSCKMDToken *mdToken, 1.16 + NSSCKFWToken *fwToken, 1.17 + NSSCKMDInstance *mdInstance, 1.18 + NSSCKFWInstance *fwInstance 1.19 +) 1.20 +{ 1.21 + nss_dbm_session_t *session = (nss_dbm_session_t *)mdSession->etc; 1.22 + 1.23 + struct nss_dbm_dbt_node *w; 1.24 + 1.25 + /* Lock */ 1.26 + { 1.27 + if( CKR_OK != NSSCKFWMutex_Lock(session->list_lock) ) { 1.28 + return; 1.29 + } 1.30 + 1.31 + w = session->session_objects; 1.32 + session->session_objects = (struct nss_dbm_dbt_node *)NULL; /* sanity */ 1.33 + 1.34 + (void)NSSCKFWMutex_Unlock(session->list_lock); 1.35 + } 1.36 + 1.37 + for( ; (struct nss_dbm_dbt_node *)NULL != w; w = w->next ) { 1.38 + (void)nss_dbm_db_delete_object(w->dbt); 1.39 + } 1.40 +} 1.41 + 1.42 +static CK_ULONG 1.43 +nss_dbm_mdSession_GetDeviceError 1.44 +( 1.45 + NSSCKMDSession *mdSession, 1.46 + NSSCKFWSession *fwSession, 1.47 + NSSCKMDToken *mdToken, 1.48 + NSSCKFWToken *fwToken, 1.49 + NSSCKMDInstance *mdInstance, 1.50 + NSSCKFWInstance *fwInstance 1.51 +) 1.52 +{ 1.53 + nss_dbm_session_t *session = (nss_dbm_session_t *)mdSession->etc; 1.54 + return session->deviceError; 1.55 +} 1.56 + 1.57 +/* Login isn't needed */ 1.58 +/* Logout isn't needed */ 1.59 +/* InitPIN is irrelevant */ 1.60 +/* SetPIN is irrelevant */ 1.61 +/* GetOperationStateLen is irrelevant */ 1.62 +/* GetOperationState is irrelevant */ 1.63 +/* SetOperationState is irrelevant */ 1.64 + 1.65 +static NSSCKMDObject * 1.66 +nss_dbm_mdSession_CreateObject 1.67 +( 1.68 + NSSCKMDSession *mdSession, 1.69 + NSSCKFWSession *fwSession, 1.70 + NSSCKMDToken *mdToken, 1.71 + NSSCKFWToken *fwToken, 1.72 + NSSCKMDInstance *mdInstance, 1.73 + NSSCKFWInstance *fwInstance, 1.74 + NSSArena *handyArenaPointer, 1.75 + CK_ATTRIBUTE_PTR pTemplate, 1.76 + CK_ULONG ulAttributeCount, 1.77 + CK_RV *pError 1.78 +) 1.79 +{ 1.80 + nss_dbm_session_t *session = (nss_dbm_session_t *)mdSession->etc; 1.81 + nss_dbm_token_t *token = (nss_dbm_token_t *)mdToken->etc; 1.82 + CK_ULONG i; 1.83 + CK_BBOOL isToken = CK_FALSE; /* defaults to false */ 1.84 + NSSCKMDObject *rv; 1.85 + struct nss_dbm_dbt_node *node = (struct nss_dbm_dbt_node *)NULL; 1.86 + nss_dbm_object_t *object; 1.87 + nss_dbm_db_t *which_db; 1.88 + 1.89 + /* This framework should really pass this to me */ 1.90 + for( i = 0; i < ulAttributeCount; i++ ) { 1.91 + if( CKA_TOKEN == pTemplate[i].type ) { 1.92 + isToken = *(CK_BBOOL *)pTemplate[i].pValue; 1.93 + break; 1.94 + } 1.95 + } 1.96 + 1.97 + object = nss_ZNEW(handyArenaPointer, nss_dbm_object_t); 1.98 + if( (nss_dbm_object_t *)NULL == object ) { 1.99 + *pError = CKR_HOST_MEMORY; 1.100 + return (NSSCKMDObject *)NULL; 1.101 + } 1.102 + 1.103 + object->arena = handyArenaPointer; 1.104 + which_db = isToken ? token->slot->token_db : token->session_db; 1.105 + 1.106 + /* Do this before the actual database call; it's easier to recover from */ 1.107 + rv = nss_dbm_mdObject_factory(object, pError); 1.108 + if( (NSSCKMDObject *)NULL == rv ) { 1.109 + return (NSSCKMDObject *)NULL; 1.110 + } 1.111 + 1.112 + if( CK_FALSE == isToken ) { 1.113 + node = nss_ZNEW(session->arena, struct nss_dbm_dbt_node); 1.114 + if( (struct nss_dbm_dbt_node *)NULL == node ) { 1.115 + *pError = CKR_HOST_MEMORY; 1.116 + return (NSSCKMDObject *)NULL; 1.117 + } 1.118 + } 1.119 + 1.120 + object->handle = nss_dbm_db_create_object(handyArenaPointer, which_db, 1.121 + pTemplate, ulAttributeCount, 1.122 + pError, &session->deviceError); 1.123 + if( (nss_dbm_dbt_t *)NULL == object->handle ) { 1.124 + return (NSSCKMDObject *)NULL; 1.125 + } 1.126 + 1.127 + if( CK_FALSE == isToken ) { 1.128 + node->dbt = object->handle; 1.129 + /* Lock */ 1.130 + { 1.131 + *pError = NSSCKFWMutex_Lock(session->list_lock); 1.132 + if( CKR_OK != *pError ) { 1.133 + (void)nss_dbm_db_delete_object(object->handle); 1.134 + return (NSSCKMDObject *)NULL; 1.135 + } 1.136 + 1.137 + node->next = session->session_objects; 1.138 + session->session_objects = node; 1.139 + 1.140 + *pError = NSSCKFWMutex_Unlock(session->list_lock); 1.141 + } 1.142 + } 1.143 + 1.144 + return rv; 1.145 +} 1.146 + 1.147 +/* CopyObject isn't needed; the framework will use CreateObject */ 1.148 + 1.149 +static NSSCKMDFindObjects * 1.150 +nss_dbm_mdSession_FindObjectsInit 1.151 +( 1.152 + NSSCKMDSession *mdSession, 1.153 + NSSCKFWSession *fwSession, 1.154 + NSSCKMDToken *mdToken, 1.155 + NSSCKFWToken *fwToken, 1.156 + NSSCKMDInstance *mdInstance, 1.157 + NSSCKFWInstance *fwInstance, 1.158 + CK_ATTRIBUTE_PTR pTemplate, 1.159 + CK_ULONG ulAttributeCount, 1.160 + CK_RV *pError 1.161 +) 1.162 +{ 1.163 + nss_dbm_session_t *session = (nss_dbm_session_t *)mdSession->etc; 1.164 + nss_dbm_token_t *token = (nss_dbm_token_t *)mdToken->etc; 1.165 + NSSArena *arena; 1.166 + nss_dbm_find_t *find; 1.167 + NSSCKMDFindObjects *rv; 1.168 + 1.169 + arena = NSSArena_Create(); 1.170 + if( (NSSArena *)NULL == arena ) { 1.171 + *pError = CKR_HOST_MEMORY; 1.172 + goto loser; 1.173 + } 1.174 + 1.175 + find = nss_ZNEW(arena, nss_dbm_find_t); 1.176 + if( (nss_dbm_find_t *)NULL == find ) { 1.177 + *pError = CKR_HOST_MEMORY; 1.178 + goto loser; 1.179 + } 1.180 + 1.181 + find->arena = arena; 1.182 + find->list_lock = NSSCKFWInstance_CreateMutex(fwInstance, arena, pError); 1.183 + if( (NSSCKFWMutex *)NULL == find->list_lock ) { 1.184 + goto loser; 1.185 + } 1.186 + 1.187 + *pError = nss_dbm_db_find_objects(find, token->slot->token_db, pTemplate, 1.188 + ulAttributeCount, &session->deviceError); 1.189 + if( CKR_OK != *pError ) { 1.190 + goto loser; 1.191 + } 1.192 + 1.193 + *pError = nss_dbm_db_find_objects(find, token->session_db, pTemplate, 1.194 + ulAttributeCount, &session->deviceError); 1.195 + if( CKR_OK != *pError ) { 1.196 + goto loser; 1.197 + } 1.198 + 1.199 + rv = nss_dbm_mdFindObjects_factory(find, pError); 1.200 + if( (NSSCKMDFindObjects *)NULL == rv ) { 1.201 + goto loser; 1.202 + } 1.203 + 1.204 + return rv; 1.205 + 1.206 + loser: 1.207 + if( (NSSArena *)NULL != arena ) { 1.208 + (void)NSSArena_Destroy(arena); 1.209 + } 1.210 + 1.211 + return (NSSCKMDFindObjects *)NULL; 1.212 +} 1.213 + 1.214 +/* SeedRandom is irrelevant */ 1.215 +/* GetRandom is irrelevant */ 1.216 + 1.217 +NSS_IMPLEMENT NSSCKMDSession * 1.218 +nss_dbm_mdSession_factory 1.219 +( 1.220 + nss_dbm_token_t *token, 1.221 + NSSCKFWSession *fwSession, 1.222 + NSSCKFWInstance *fwInstance, 1.223 + CK_BBOOL rw, 1.224 + CK_RV *pError 1.225 +) 1.226 +{ 1.227 + NSSArena *arena; 1.228 + nss_dbm_session_t *session; 1.229 + NSSCKMDSession *rv; 1.230 + 1.231 + arena = NSSCKFWSession_GetArena(fwSession, pError); 1.232 + 1.233 + session = nss_ZNEW(arena, nss_dbm_session_t); 1.234 + if( (nss_dbm_session_t *)NULL == session ) { 1.235 + *pError = CKR_HOST_MEMORY; 1.236 + return (NSSCKMDSession *)NULL; 1.237 + } 1.238 + 1.239 + rv = nss_ZNEW(arena, NSSCKMDSession); 1.240 + if( (NSSCKMDSession *)NULL == rv ) { 1.241 + *pError = CKR_HOST_MEMORY; 1.242 + return (NSSCKMDSession *)NULL; 1.243 + } 1.244 + 1.245 + session->arena = arena; 1.246 + session->token = token; 1.247 + session->list_lock = NSSCKFWInstance_CreateMutex(fwInstance, arena, pError); 1.248 + if( (NSSCKFWMutex *)NULL == session->list_lock ) { 1.249 + return (NSSCKMDSession *)NULL; 1.250 + } 1.251 + 1.252 + rv->etc = (void *)session; 1.253 + rv->Close = nss_dbm_mdSession_Close; 1.254 + rv->GetDeviceError = nss_dbm_mdSession_GetDeviceError; 1.255 + /* Login isn't needed */ 1.256 + /* Logout isn't needed */ 1.257 + /* InitPIN is irrelevant */ 1.258 + /* SetPIN is irrelevant */ 1.259 + /* GetOperationStateLen is irrelevant */ 1.260 + /* GetOperationState is irrelevant */ 1.261 + /* SetOperationState is irrelevant */ 1.262 + rv->CreateObject = nss_dbm_mdSession_CreateObject; 1.263 + /* CopyObject isn't needed; the framework will use CreateObject */ 1.264 + rv->FindObjectsInit = nss_dbm_mdSession_FindObjectsInit; 1.265 + rv->null = NULL; 1.266 + 1.267 + return rv; 1.268 +}