mirror of
https://github.com/ruby/ruby.git
synced 2025-08-15 13:39:04 +02:00
c2fdfb05a4
patched by Kazuki Yamaguchi <k@rhe.jp>
bio: prevent possible GC issue in ossl_obj2bio()
Prevent the new object created by StringValue() from being GCed.
Luckily, as none of the callers of ossl_obj2bio() reads from the
returned BIO after possible triggering GC, this has not been a real
problem.
As a bonus, ossl_protect_obj2bio() function which is no longer used
anywhere is removed.
merge f842b0d5c5
patched by Kazuki Yamaguchi <k@rhe.jp>
bio: do not use the FILE BIO method in ossl_obj2bio()
Read everything from an IO object into a String first and use the
memory buffer BIO method just as we do for String inputs.
For MSVC builds, the FILE BIO method uses the "UPLINK" interface that
requires the application to provide OPENSSL_Applink() function. For us,
the "application" means ruby.exe, in which we can't do anything. As a
workaround, avoid using the FILE BIO method at all.
Usually private keys or X.509 certificates aren't that large and the
temporarily increased memory usage hopefully won't be an issue.
ext/openssl/ossl_version.h (OpenSSL::VERSION): bump to 1.1.1.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_3@62885 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
83 lines
1.8 KiB
C
83 lines
1.8 KiB
C
/*
|
|
* 'OpenSSL for Ruby' project
|
|
* Copyright (C) 2001-2002 Michal Rokos <m.rokos@sh.cvut.cz>
|
|
* All rights reserved.
|
|
*/
|
|
/*
|
|
* This program is licensed under the same licence as Ruby.
|
|
* (See the file 'LICENCE'.)
|
|
*/
|
|
#include "ossl.h"
|
|
|
|
|
|
/*
|
|
* Classes
|
|
*/
|
|
VALUE cConfig;
|
|
/* Document-class: OpenSSL::ConfigError
|
|
*
|
|
* General error for openssl library configuration files. Including formatting,
|
|
* parsing errors, etc.
|
|
*/
|
|
VALUE eConfigError;
|
|
|
|
/*
|
|
* Public
|
|
*/
|
|
|
|
/*
|
|
* DupConfigPtr is a public C-level function for getting OpenSSL CONF struct
|
|
* from an OpenSSL::Config(eConfig) instance. We decided to implement
|
|
* OpenSSL::Config in Ruby level but we need to pass native CONF struct for
|
|
* some OpenSSL features such as X509V3_EXT_*.
|
|
*/
|
|
CONF *
|
|
DupConfigPtr(VALUE obj)
|
|
{
|
|
CONF *conf;
|
|
VALUE str;
|
|
BIO *bio;
|
|
long eline = -1;
|
|
|
|
OSSL_Check_Kind(obj, cConfig);
|
|
str = rb_funcall(obj, rb_intern("to_s"), 0);
|
|
bio = ossl_obj2bio(&str);
|
|
conf = NCONF_new(NULL);
|
|
if(!conf){
|
|
BIO_free(bio);
|
|
ossl_raise(eConfigError, NULL);
|
|
}
|
|
if(!NCONF_load_bio(conf, bio, &eline)){
|
|
BIO_free(bio);
|
|
NCONF_free(conf);
|
|
if (eline <= 0)
|
|
ossl_raise(eConfigError, "wrong config format");
|
|
else
|
|
ossl_raise(eConfigError, "error in line %d", eline);
|
|
}
|
|
BIO_free(bio);
|
|
|
|
return conf;
|
|
}
|
|
|
|
/* Document-const: DEFAULT_CONFIG_FILE
|
|
*
|
|
* The default system configuration file for openssl
|
|
*/
|
|
|
|
/*
|
|
* INIT
|
|
*/
|
|
void
|
|
Init_ossl_config(void)
|
|
{
|
|
char *default_config_file;
|
|
eConfigError = rb_define_class_under(mOSSL, "ConfigError", eOSSLError);
|
|
cConfig = rb_define_class_under(mOSSL, "Config", rb_cObject);
|
|
|
|
default_config_file = CONF_get1_default_config_file();
|
|
rb_define_const(cConfig, "DEFAULT_CONFIG_FILE",
|
|
rb_str_new2(default_config_file));
|
|
OPENSSL_free(default_config_file);
|
|
/* methods are defined by openssl/config.rb */
|
|
}
|