DKIM: fix base64 decode to ignore whitespace; needed for private-key input
[exim.git] / src / src / base64.c
CommitLineData
f4d091fb
JH
1/*************************************************
2* Exim - an Internet mail transport agent *
3*************************************************/
4
5/* Copyright (c) Tom Kistner <tom@duncanthrax.net> 2004, 2015 */
6/* License: GPL */
7
8/* Copyright (c) University of Cambridge 1995 - 2015 */
9/* See the file NOTICE for conditions of use and distribution. */
10
11
12#include "exim.h"
13#ifdef WITH_CONTENT_SCAN /* file-IO specific decode function */
14# include "mime.h"
15
16/* BASE64 decoder matrix */
17static unsigned char mime_b64[256]={
18/* 0 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
19/* 16 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
20/* 32 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 62, 128, 128, 128, 63,
21/* 48 */ 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 128, 128, 128, 255, 128, 128,
22/* 64 */ 128, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14,
23/* 80 */ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 128, 128, 128, 128, 128,
24/* 96 */ 128, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
25/* 112 */ 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 128, 128, 128, 128, 128,
26/* 128 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
27/* 144 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
28/* 160 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
29/* 176 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
30/* 192 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
31/* 208 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
32/* 224 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
33/* 240 */ 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128
34};
35
36/* decode base64 MIME part */
37ssize_t
38mime_decode_base64(FILE * in, FILE * out, uschar * boundary)
39{
40uschar ibuf[MIME_MAX_LINE_LENGTH], obuf[MIME_MAX_LINE_LENGTH];
41uschar *ipos, *opos;
42ssize_t len, size = 0;
43int bytestate = 0;
44
45opos = obuf;
46
47while (Ufgets(ibuf, MIME_MAX_LINE_LENGTH, in) != NULL)
48 {
49 if (boundary != NULL
50 && Ustrncmp(ibuf, "--", 2) == 0
51 && Ustrncmp((ibuf+2), boundary, Ustrlen(boundary)) == 0
52 )
53 break;
54
55 for (ipos = ibuf ; *ipos != '\r' && *ipos != '\n' && *ipos != 0; ++ipos)
56 if (*ipos == '=') /* skip padding */
57 ++bytestate;
58
59 else if (mime_b64[*ipos] == 128) /* skip bad characters */
60 mime_set_anomaly(MIME_ANOMALY_BROKEN_BASE64);
61
62 /* simple state-machine */
63 else switch((bytestate++) & 3)
64 {
65 case 0:
66 *opos = mime_b64[*ipos] << 2; break;
67 case 1:
68 *opos++ |= mime_b64[*ipos] >> 4;
69 *opos = mime_b64[*ipos] << 4; break;
70 case 2:
71 *opos++ |= mime_b64[*ipos] >> 2;
72 *opos = mime_b64[*ipos] << 6; break;
73 case 3:
74 *opos++ |= mime_b64[*ipos]; break;
75 }
76
77 /* something to write? */
78 len = opos - obuf;
79 if (len > 0)
80 {
81 if (fwrite(obuf, 1, len, out) != len) return -1; /* error */
82 size += len;
83 /* copy incomplete last byte to start of obuf, where we continue */
84 if ((bytestate & 3) != 0)
85 *obuf = *opos;
86 opos = obuf;
87 }
88 } /* while */
89
90/* write out last byte if it was incomplete */
91if (bytestate & 3)
92 {
93 if (fwrite(obuf, 1, 1, out) != 1) return -1;
94 ++size;
95 }
96
97return size;
98}
99
100#endif /*WITH_CONTENT_SCAN*/
101
102/*************************************************
103/*************************************************
104/*************************************************
105/*************************************************
106/*************************************************
107/*************************************************
108/*************************************************
109/*************************************************
110/*************************************************
111/*************************************************
112/*************************************************
113/*************************************************
114/*************************************************
115/*************************************************
116/*************************************************
117/*************************************************
118
119
120/*************************************************
121* Decode byte-string in base 64 *
122*************************************************/
123
124/* This function decodes a string in base 64 format as defined in RFC 2045
125(MIME) and required by the SMTP AUTH extension (RFC 2554). The decoding
126algorithm is written out in a straightforward way. Turning it into some kind of
127compact loop is messy and would probably run more slowly.
128
129Arguments:
130 code points to the coded string, zero-terminated
131 ptr where to put the pointer to the result, which is in
132 dynamic store, and zero-terminated
133
134Returns: the number of bytes in the result,
135 or -1 if the input was malformed
136
69a70afa 137Whitespace in the input is ignored.
f4d091fb
JH
138A zero is added on to the end to make it easy in cases where the result is to
139be interpreted as text. This is not included in the count. */
140
141static uschar dec64table[] = {
142 255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255, /* 0-15 */
143 255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255, /* 16-31 */
144 255,255,255,255,255,255,255,255,255,255,255, 62,255,255,255, 63, /* 32-47 */
145 52, 53, 54, 55, 56, 57, 58, 59, 60, 61,255,255,255,255,255,255, /* 48-63 */
146 255, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, /* 64-79 */
147 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25,255,255,255,255,255, /* 80-95 */
148 255, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, /* 96-111 */
149 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51,255,255,255,255,255 /* 112-127*/
150};
151
152int
153b64decode(uschar *code, uschar **ptr)
154{
155int x, y;
156uschar *result = store_get(3*(Ustrlen(code)/4) + 1);
157
158*ptr = result;
159
160/* Each cycle of the loop handles a quantum of 4 input bytes. For the last
161quantum this may decode to 1, 2, or 3 output bytes. */
162
163while ((x = *code++) != 0)
164 {
69a70afa
JH
165 if (isspace(x)) continue;
166
f4d091fb 167 if (x > 127 || (x = dec64table[x]) == 255) return -1;
69a70afa
JH
168
169 while (isspace(y = *code++)) ;
170 if (y == 0 || (y = dec64table[y]) == 255)
f4d091fb
JH
171 return -1;
172
173 *result++ = (x << 2) | (y >> 4);
174
69a70afa
JH
175 while (isspace(x = *code++)) ;
176 if (x == '=')
f4d091fb 177 {
69a70afa
JH
178 while (isspace(x = *code++)) ;
179 if (x != '=' || *code != 0) return -1;
f4d091fb
JH
180 }
181 else
182 {
183 if (x > 127 || (x = dec64table[x]) == 255) return -1;
184 *result++ = (y << 4) | (x >> 2);
69a70afa
JH
185
186 while (isspace(y = *code++)) ;
187 if (y == '=')
f4d091fb
JH
188 {
189 if (*code != 0) return -1;
190 }
191 else
192 {
193 if (y > 127 || (y = dec64table[y]) == 255) return -1;
194 *result++ = (x << 6) | y;
195 }
196 }
197 }
198
199*result = 0;
200return result - *ptr;
201}
202
203
204/*************************************************
205/*************************************************
206/*************************************************
207/*************************************************
208/*************************************************
209/*************************************************
210/*************************************************
211/*************************************************
212/*************************************************
213/*************************************************
214/*************************************************
215/*************************************************
216/*************************************************
217/*************************************************
218/*************************************************
219/*************************************************
220
221/*************************************************
222* Encode byte-string in base 64 *
223*************************************************/
224
225/* This function encodes a string of bytes, containing any values whatsoever,
226in base 64 as defined in RFC 2045 (MIME) and required by the SMTP AUTH
227extension (RFC 2554). The encoding algorithm is written out in a
228straightforward way. Turning it into some kind of compact loop is messy and
229would probably run more slowly.
230
231Arguments:
232 clear points to the clear text bytes
233 len the number of bytes to encode
234
235Returns: a pointer to the zero-terminated base 64 string, which
236 is in working store
237*/
238
239static uschar *enc64table =
240 US"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
241
242uschar *
243b64encode(uschar *clear, int len)
244{
245uschar *code = store_get(4*((len+2)/3) + 1);
246uschar *p = code;
247
248while (len-- >0)
249 {
250 register int x, y;
251
252 x = *clear++;
253 *p++ = enc64table[(x >> 2) & 63];
254
255 if (len-- <= 0)
256 {
257 *p++ = enc64table[(x << 4) & 63];
258 *p++ = '=';
259 *p++ = '=';
260 break;
261 }
262
263 y = *clear++;
264 *p++ = enc64table[((x << 4) | ((y >> 4) & 15)) & 63];
265
266 if (len-- <= 0)
267 {
268 *p++ = enc64table[(y << 2) & 63];
269 *p++ = '=';
270 break;
271 }
272
273 x = *clear++;
274 *p++ = enc64table[((y << 2) | ((x >> 6) & 3)) & 63];
275
276 *p++ = enc64table[x & 63];
277 }
278
279*p = 0;
280
281return code;
282}
283
284
285/* End of base64.c */
286/* vi: sw ai sw=2
287*/