TLA  Line data    Source code

       1                 : /*-------------------------------------------------------------------------
       2                 :  *
       3                 :  * be-gssapi-common.c
       4                 :  *     Common code for GSSAPI authentication and encryption
       5                 :  *
       6                 :  * Portions Copyright (c) 1996-2023, PostgreSQL Global Development Group
       7                 :  * Portions Copyright (c) 1994, Regents of the University of California
       8                 :  *
       9                 :  * IDENTIFICATION
      10                 :  *       src/backend/libpq/be-gssapi-common.c
      11                 :  *
      12                 :  *-------------------------------------------------------------------------
      13                 :  */
      14                 : 
      15                 : #include "postgres.h"
      16                 : 
      17                 : #include "libpq/be-gssapi-common.h"
      18                 : 
      19                 : /*
      20                 :  * Fetch all errors of a specific type and append to "s" (buffer of size len).
      21                 :  * If we obtain more than one string, separate them with spaces.
      22                 :  * Call once for GSS_CODE and once for MECH_CODE.
      23                 :  */
      24                 : static void
      25 UBC           0 : pg_GSS_error_int(char *s, size_t len, OM_uint32 stat, int type)
      26                 : {
      27                 :     gss_buffer_desc gmsg;
      28               0 :     size_t      i = 0;
      29                 :     OM_uint32   lmin_s,
      30               0 :                 msg_ctx = 0;
      31                 : 
      32                 :     do
      33                 :     {
      34               0 :         if (gss_display_status(&lmin_s, stat, type, GSS_C_NO_OID,
      35                 :                                &msg_ctx, &gmsg) != GSS_S_COMPLETE)
      36               0 :             break;
      37               0 :         if (i > 0)
      38                 :         {
      39               0 :             if (i < len)
      40               0 :                 s[i] = ' ';
      41               0 :             i++;
      42                 :         }
      43               0 :         if (i < len)
      44               0 :             memcpy(s + i, gmsg.value, Min(len - i, gmsg.length));
      45               0 :         i += gmsg.length;
      46               0 :         gss_release_buffer(&lmin_s, &gmsg);
      47                 :     }
      48               0 :     while (msg_ctx);
      49                 : 
      50                 :     /* add nul termination */
      51               0 :     if (i < len)
      52               0 :         s[i] = '\0';
      53                 :     else
      54                 :     {
      55               0 :         elog(COMMERROR, "incomplete GSS error report");
      56               0 :         s[len - 1] = '\0';
      57                 :     }
      58               0 : }
      59                 : 
      60                 : /*
      61                 :  * Report the GSSAPI error described by maj_stat/min_stat.
      62                 :  *
      63                 :  * errmsg should be an already-translated primary error message.
      64                 :  * The GSSAPI info is appended as errdetail.
      65                 :  *
      66                 :  * The error is always reported with elevel COMMERROR; we daren't try to
      67                 :  * send it to the client, as that'd likely lead to infinite recursion
      68                 :  * when elog.c tries to write to the client.
      69                 :  *
      70                 :  * To avoid memory allocation, total error size is capped (at 128 bytes for
      71                 :  * each of major and minor).  No known mechanisms will produce error messages
      72                 :  * beyond this cap.
      73                 :  */
      74                 : void
      75               0 : pg_GSS_error(const char *errmsg,
      76                 :              OM_uint32 maj_stat, OM_uint32 min_stat)
      77                 : {
      78                 :     char        msg_major[128],
      79                 :                 msg_minor[128];
      80                 : 
      81                 :     /* Fetch major status message */
      82               0 :     pg_GSS_error_int(msg_major, sizeof(msg_major), maj_stat, GSS_C_GSS_CODE);
      83                 : 
      84                 :     /* Fetch mechanism minor status message */
      85               0 :     pg_GSS_error_int(msg_minor, sizeof(msg_minor), min_stat, GSS_C_MECH_CODE);
      86                 : 
      87                 :     /*
      88                 :      * errmsg_internal, since translation of the first part must be done
      89                 :      * before calling this function anyway.
      90                 :      */
      91               0 :     ereport(COMMERROR,
      92                 :             (errmsg_internal("%s", errmsg),
      93                 :              errdetail_internal("%s: %s", msg_major, msg_minor)));
      94               0 : }