← Back
Editing: keyring_4_4_to_4_8.c
string skey_opt() { return "l"; } string skey_usage() { return "\n"; } static void skey_showusage() { printf("usage : skey %s", skey_usage()); } string skey_help() { return "Help"; } #define ASSOC_ARRAY_FAN_OUT 16 #define ASSOC_ARRAY_FAN_MASK (ASSOC_ARRAY_FAN_OUT - 1) #define ASSOC_ARRAY_LEVEL_STEP (ilog2(ASSOC_ARRAY_FAN_OUT)) #define ASSOC_ARRAY_LEVEL_STEP_MASK (ASSOC_ARRAY_LEVEL_STEP - 1) #define ASSOC_ARRAY_KEY_CHUNK_MASK (ASSOC_ARRAY_KEY_CHUNK_SIZE - 1) #define ASSOC_ARRAY_KEY_CHUNK_SHIFT (ilog2(BITS_PER_LONG)) #define ASSOC_ARRAY_PTR_TYPE_MASK 0x1UL #define ASSOC_ARRAY_PTR_LEAF_TYPE 0x0UL /* Points to leaf (or nowhere) */ #define ASSOC_ARRAY_PTR_META_TYPE 0x1UL /* Points to node or shortcut */ #define ASSOC_ARRAY_PTR_SUBTYPE_MASK 0x2UL #define ASSOC_ARRAY_PTR_NODE_SUBTYPE 0x0UL #define ASSOC_ARRAY_PTR_SHORTCUT_SUBTYPE 0x2UL /* Keyring stuff */ #define KEYRING_PTR_SUBTYPE 0x2UL static int keyring_ptr_is_keyring(const struct assoc_array_ptr *x) { return (unsigned long)x & KEYRING_PTR_SUBTYPE; } static int assoc_array_ptr_is_meta(const struct assoc_array_ptr *x) { return (unsigned long)x & ASSOC_ARRAY_PTR_TYPE_MASK; } static int assoc_array_ptr_is_leaf(const struct assoc_array_ptr *x) { return !assoc_array_ptr_is_meta(x); } static int assoc_array_ptr_is_shortcut(const struct assoc_array_ptr *x) { return (unsigned long)x & ASSOC_ARRAY_PTR_SUBTYPE_MASK; } static int assoc_array_ptr_is_node(const struct assoc_array_ptr *x) { return !assoc_array_ptr_is_shortcut(x); } static void *assoc_array_ptr_to_leaf(const struct assoc_array_ptr *x) { return (void *)((unsigned long)x & ~ASSOC_ARRAY_PTR_TYPE_MASK); } static unsigned long __assoc_array_ptr_to_meta(const struct assoc_array_ptr *x) { return (unsigned long)x & ~(ASSOC_ARRAY_PTR_SUBTYPE_MASK | ASSOC_ARRAY_PTR_TYPE_MASK); } static struct assoc_array_node *assoc_array_ptr_to_node(const struct assoc_array_ptr *x) { return (struct assoc_array_node *)__assoc_array_ptr_to_meta(x); } static struct assoc_array_shortcut *assoc_array_ptr_to_shortcut(const struct assoc_array_ptr *x) { return (struct assoc_array_shortcut *)__assoc_array_ptr_to_meta(x); } static struct assoc_array_ptr *__assoc_array_x_to_ptr(const void *p, unsigned long t) { return (struct assoc_array_ptr *)((unsigned long)p | t); } static struct assoc_array_ptr *assoc_array_leaf_to_ptr(const void *p) { return __assoc_array_x_to_ptr(p, ASSOC_ARRAY_PTR_LEAF_TYPE); } static struct assoc_array_ptr *assoc_array_node_to_ptr(const struct assoc_array_node *p) { return __assoc_array_x_to_ptr( p, ASSOC_ARRAY_PTR_META_TYPE | ASSOC_ARRAY_PTR_NODE_SUBTYPE); } static struct assoc_array_ptr *assoc_array_shortcut_to_ptr(const struct assoc_array_shortcut *p) { return __assoc_array_x_to_ptr( p, ASSOC_ARRAY_PTR_META_TYPE | ASSOC_ARRAY_PTR_SHORTCUT_SUBTYPE); } /* Keyring stuff */ static inline struct key *keyring_ptr_to_key(const struct assoc_array_ptr *x) { void *object = assoc_array_ptr_to_leaf(x); return (struct key *)((unsigned long)object & ~KEYRING_PTR_SUBTYPE); } /* BEGIN: struct key access */ struct keyring_index_key *get_index_key_from_key(struct key *key) { return (struct keyring_index_key *)((unsigned long)&(key->flags) + sizeof(key->flags)); } struct key_type *get_type_from_key(struct key *key) { return (struct key_type *)((unsigned long)&(key->flags) + sizeof(key->flags)); } char *get_description_from_key(struct key *key) { return (char *)((unsigned long)&(key->flags) + sizeof(key->flags) + sizeof(struct key_type *)); } union key_payload *get_payload_from_key(struct key *key) { return (union key_payload *)((unsigned long)&(key->flags) + sizeof(key->flags) + sizeof(struct keyring_index_key)); } struct list_head *get_name_link_from_key(struct key *key) { return (struct list_head *)((unsigned long)&(key->flags) + sizeof(key->flags) + sizeof(struct keyring_index_key)); } struct assoc_array *get_keys_from_key(struct key *key) { return (struct assoc_array *)((unsigned long)&(key->flags) + sizeof(key->flags) + sizeof(struct keyring_index_key) + sizeof(struct list_head)); } /* END: struct key access */ static void delete_keyring_subtree(struct assoc_array_ptr *root) { struct assoc_array_shortcut *shortcut; struct assoc_array_node *node; struct assoc_array_ptr *cursor, *parent; int slot = -1; cursor = root; if (!cursor) { return; } if (assoc_array_ptr_is_shortcut(cursor)) { /* Descend through a shortcut */ shortcut = assoc_array_ptr_to_shortcut(cursor); parent = cursor; cursor = shortcut->next_node; } node = assoc_array_ptr_to_node(cursor); slot = 0; if(node->nr_leaves_on_branch <= 0) return; do { for (; slot < ASSOC_ARRAY_FAN_OUT; slot++) { struct assoc_array_ptr *ptr = node->slots[slot]; if (!ptr) continue; if (assoc_array_ptr_is_meta(ptr)) { parent = cursor; cursor = ptr; if (assoc_array_ptr_is_shortcut(cursor)) { /* Descend through a shortcut */ shortcut = assoc_array_ptr_to_shortcut(cursor); parent = cursor; cursor = shortcut->next_node; } node = assoc_array_ptr_to_node(cursor); slot = 0; } else { struct key *leaf; struct keyring_index_key *index_key; char *description; void *payload_ptr; int i,j; /* no need to delete keyrings, only data */ if(keyring_ptr_is_keyring(ptr)) continue; /* delete the leaf payload */ leaf = (struct key *)assoc_array_ptr_to_leaf(ptr); index_key = get_index_key_from_key(leaf); /* Now delete the keys of the different key types. The following key types are handled for now: user, ceph, pkcs7_test, asymmetric(X509), rxpc The following key types are NOT handled (yet): dns_resolver (no secret keys, just used for DNS) Add a new else if() for new key types. */ if(getstr(index_key->type->name) == "user") { struct user_key_payload **user_key_payload; unsigned short datalen; payload_ptr=(void *)get_payload_from_key(leaf); user_key_payload = (struct user_key_payload **)payload_ptr; datalen = (*user_key_payload)->datalen; memset((char *)&(*user_key_payload)->data, 'A', datalen); } else if(getstr(index_key->type->name) == "ceph") { struct ceph_crypto_key **ceph_payload; int len; payload_ptr=(void *)get_payload_from_key(leaf); ceph_payload = (struct ceph_crypto_key **)payload_ptr; len = (*ceph_payload)->len; memset((char *)&(*ceph_payload)->key, 'A', len); } else if(getstr(index_key->type->name) == "pkcs7_test") { struct user_key_payload **user_key_payload; unsigned short datalen; payload_ptr=(void *)get_payload_from_key(leaf); user_key_payload = (struct user_key_payload **)payload_ptr; datalen = (*user_key_payload)->datalen; memset((char *)&(*user_key_payload)->data, 'A', datalen); } else if(getstr(index_key->type->name) == "asymmetric") { struct public_key **public_key; unsigned short keylen; /* data[0] is asym_crypto */ payload_ptr=(void *)get_payload_from_key(leaf); public_key = (struct public_key **)payload_ptr; keylen = (*public_key)->keylen; memset((char *)&(*public_key)->key, 'A', keylen); } else if(getstr(index_key->type->name) == ".request_key_auth") { struct request_key_auth **request_key; unsigned short datalen; payload_ptr=(void *)get_payload_from_key(leaf); request_key = (struct request_key_auth **)payload_ptr; datalen = leaf->datalen; memset((char *)&(*request_key)->data, 'A', datalen); } else if(getstr(index_key->type->name) == "rxrpc") { struct rxrpc_key_token **rxrpc_key_token, *token; struct rxkad_key *kad; struct rxk5_key *k5; int token_count = 0; payload_ptr=(void *)get_payload_from_key(leaf); rxrpc_key_token = (struct rxrpc_key_token **)payload_ptr; for(; rxrpc_key_token; rxrpc_key_token = &(*rxrpc_key_token)->next, token_count++) { token = *rxrpc_key_token; switch(token->security_index) { case 2 : /* RXRPC_SECURITY_RXKAD */ /* anonymous union, use pointer arithmetic */ kad = token->next + sizeof(struct rxrpc_key_token *); memset(&kad.session_key, 'A', 8); memset(&kad.ticket, 'A', kad.ticket_len); break; case 5 : /* RXRPC_SECURITY_RXK5 */ /* anonymous union, use pointer arithmetic */ k5 = token->next + sizeof(struct rxrpc_key_token *); memset(k5.ticket, 'A', k5.ticket_len); memset(k5.ticket2, 'A', k5.ticket2_len); memset(k5.session.data, 'A', k5.session.data_len); memset(k5->addresses.data, 'A', k5->addresses.data_len); memset(k5->authdata.data, 'A', k5->authdata.data_len); break; default : printf("WARNING: unknown security index: %d\n", token->security_index); } /* max number of tokens = 8 */ if(token_count > 8) { printf("WARNING: too many rxrpc tokens!\n"); break; } } } else if(getstr(index_key->type->name) == "dns_resolver") { /* nothing to do here, no secret data */ } else if(getstr(index_key->type->name) == "big_key") { printf("WARNING: key_type=big_key not handled!\n"); } else { printf("WARNING: unsupported key type = %s!\n", getstr(index_key->type->name)); } } } parent = node->back_pointer; slot = node->parent_slot; if (parent) { /* Move back up to the parent */ if (assoc_array_ptr_is_shortcut(parent)) { shortcut = assoc_array_ptr_to_shortcut(parent); cursor = parent; parent = shortcut->back_pointer; slot = shortcut->parent_slot; } /* Ascend to next slot in parent node */ cursor = parent; node = assoc_array_ptr_to_node(cursor); slot++; } } while(parent); return; } void delete_keyring(struct assoc_array *keyring) { delete_keyring_subtree(keyring->root); } int skey() { int i,j,k; struct list_head **tab; tab = &keyring_name_hash; for (i = 0; i < 32; i++) { struct list_head *next, *head; head = (struct list_head *) (tab + i); next = (struct list_head *) head->next; if (!next) continue; while (next != head) { struct key *mykey, *off = 0; struct list_head *name_link; struct assoc_array *keys; mykey = (struct key *)((unsigned long)(next) - (unsigned long)&(off->flags) - sizeof(off->flags) - sizeof(struct keyring_index_key)); name_link = get_name_link_from_key(mykey); keys = get_keys_from_key(mykey); delete_keyring(keys); next = (struct list_head *) name_link->next; } } return 1; }
Save File
Cancel