secur32: Implement schannel DecryptMessage().
This commit is contained in:
parent
3954c4ec65
commit
e4505389ad
|
@ -61,6 +61,7 @@ MAKE_FUNCPTR(gnutls_mac_get);
|
|||
MAKE_FUNCPTR(gnutls_mac_get_key_size);
|
||||
MAKE_FUNCPTR(gnutls_perror);
|
||||
MAKE_FUNCPTR(gnutls_set_default_priority);
|
||||
MAKE_FUNCPTR(gnutls_record_recv);
|
||||
MAKE_FUNCPTR(gnutls_record_send);
|
||||
MAKE_FUNCPTR(gnutls_transport_set_errno);
|
||||
MAKE_FUNCPTR(gnutls_transport_set_ptr);
|
||||
|
@ -1002,6 +1003,86 @@ static SECURITY_STATUS SEC_ENTRY schan_EncryptMessage(PCtxtHandle context_handle
|
|||
return SEC_E_OK;
|
||||
}
|
||||
|
||||
static int schan_decrypt_message_get_next_buffer(const struct schan_transport *t, struct schan_buffers *s)
|
||||
{
|
||||
if (s->current_buffer_idx == -1)
|
||||
return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_DATA);
|
||||
|
||||
return -1;
|
||||
}
|
||||
|
||||
static SECURITY_STATUS SEC_ENTRY schan_DecryptMessage(PCtxtHandle context_handle,
|
||||
PSecBufferDesc message, ULONG message_seq_no, PULONG quality)
|
||||
{
|
||||
struct schan_transport transport;
|
||||
struct schan_context *ctx;
|
||||
SecBuffer *buffer;
|
||||
SIZE_T data_size;
|
||||
char *data;
|
||||
ssize_t received = 0;
|
||||
ssize_t ret;
|
||||
int idx;
|
||||
|
||||
TRACE("context_handle %p, message %p, message_seq_no %d, quality %p\n",
|
||||
context_handle, message, message_seq_no, quality);
|
||||
|
||||
if (!context_handle) return SEC_E_INVALID_HANDLE;
|
||||
ctx = schan_get_object(context_handle->dwLower, SCHAN_HANDLE_CTX);
|
||||
|
||||
dump_buffer_desc(message);
|
||||
|
||||
idx = schan_find_sec_buffer_idx(message, 0, SECBUFFER_DATA);
|
||||
if (idx == -1)
|
||||
{
|
||||
WARN("No data buffer passed\n");
|
||||
return SEC_E_INTERNAL_ERROR;
|
||||
}
|
||||
buffer = &message->pBuffers[idx];
|
||||
|
||||
data_size = buffer->cbBuffer;
|
||||
data = HeapAlloc(GetProcessHeap(), 0, data_size);
|
||||
|
||||
transport.ctx = ctx;
|
||||
init_schan_buffers(&transport.in, message, schan_decrypt_message_get_next_buffer);
|
||||
init_schan_buffers(&transport.out, NULL, NULL);
|
||||
pgnutls_transport_set_ptr(ctx->session, (gnutls_transport_ptr_t)&transport);
|
||||
|
||||
while (received < data_size)
|
||||
{
|
||||
ret = pgnutls_record_recv(ctx->session, data + received, data_size - received);
|
||||
if (ret < 0)
|
||||
{
|
||||
if (ret == GNUTLS_E_AGAIN)
|
||||
{
|
||||
if (!received)
|
||||
{
|
||||
pgnutls_perror(ret);
|
||||
HeapFree(GetProcessHeap(), 0, data);
|
||||
TRACE("Returning SEC_E_INCOMPLETE_MESSAGE\n");
|
||||
return SEC_E_INCOMPLETE_MESSAGE;
|
||||
}
|
||||
break;
|
||||
}
|
||||
else
|
||||
{
|
||||
pgnutls_perror(ret);
|
||||
HeapFree(GetProcessHeap(), 0, data);
|
||||
ERR("Returning SEC_E_INTERNAL_ERROR\n");
|
||||
return SEC_E_INTERNAL_ERROR;
|
||||
}
|
||||
}
|
||||
received += ret;
|
||||
}
|
||||
|
||||
TRACE("Received %zd bytes\n", received);
|
||||
|
||||
memcpy(buffer->pvBuffer, data, received);
|
||||
buffer->cbBuffer = received;
|
||||
HeapFree(GetProcessHeap(), 0, data);
|
||||
|
||||
return SEC_E_OK;
|
||||
}
|
||||
|
||||
static SECURITY_STATUS SEC_ENTRY schan_DeleteSecurityContext(PCtxtHandle context_handle)
|
||||
{
|
||||
struct schan_context *ctx;
|
||||
|
@ -1051,7 +1132,7 @@ static const SecurityFunctionTableA schanTableA = {
|
|||
NULL, /* Reserved8 */
|
||||
NULL, /* QuerySecurityContextToken */
|
||||
schan_EncryptMessage,
|
||||
NULL, /* DecryptMessage */
|
||||
schan_DecryptMessage,
|
||||
NULL, /* SetContextAttributesA */
|
||||
};
|
||||
|
||||
|
@ -1082,7 +1163,7 @@ static const SecurityFunctionTableW schanTableW = {
|
|||
NULL, /* Reserved8 */
|
||||
NULL, /* QuerySecurityContextToken */
|
||||
schan_EncryptMessage,
|
||||
NULL, /* DecryptMessage */
|
||||
schan_DecryptMessage,
|
||||
NULL, /* SetContextAttributesW */
|
||||
};
|
||||
|
||||
|
@ -1148,6 +1229,7 @@ void SECUR32_initSchannelSP(void)
|
|||
LOAD_FUNCPTR(gnutls_mac_get_key_size)
|
||||
LOAD_FUNCPTR(gnutls_perror)
|
||||
LOAD_FUNCPTR(gnutls_set_default_priority)
|
||||
LOAD_FUNCPTR(gnutls_record_recv);
|
||||
LOAD_FUNCPTR(gnutls_record_send);
|
||||
LOAD_FUNCPTR(gnutls_transport_set_errno)
|
||||
LOAD_FUNCPTR(gnutls_transport_set_ptr)
|
||||
|
|
Loading…
Reference in New Issue