1 /* v3_crld.c */
2 /*
3 * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project
4 * 1999.
5 */
6 /* ====================================================================
7 * Copyright (c) 1999-2008 The OpenSSL Project. All rights reserved.
8 *
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
11 * are met:
12 *
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 *
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in
18 * the documentation and/or other materials provided with the
19 * distribution.
20 *
21 * 3. All advertising materials mentioning features or use of this
22 * software must display the following acknowledgment:
23 * "This product includes software developed by the OpenSSL Project
24 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25 *
26 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
27 * endorse or promote products derived from this software without
28 * prior written permission. For written permission, please contact
29 * licensing@OpenSSL.org.
30 *
31 * 5. Products derived from this software may not be called "OpenSSL"
32 * nor may "OpenSSL" appear in their names without prior written
33 * permission of the OpenSSL Project.
34 *
35 * 6. Redistributions of any form whatsoever must retain the following
36 * acknowledgment:
37 * "This product includes software developed by the OpenSSL Project
38 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39 *
40 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
41 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
43 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
44 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
45 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
46 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
47 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
49 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
50 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
51 * OF THE POSSIBILITY OF SUCH DAMAGE.
52 * ====================================================================
53 *
54 * This product includes cryptographic software written by Eric Young
55 * (eay@cryptsoft.com). This product includes software written by Tim
56 * Hudson (tjh@cryptsoft.com). */
57
58 #include <stdio.h>
59 #include <string.h>
60
61 #include <openssl/asn1.h>
62 #include <openssl/asn1t.h>
63 #include <openssl/conf.h>
64 #include <openssl/err.h>
65 #include <openssl/mem.h>
66 #include <openssl/obj.h>
67 #include <openssl/x509v3.h>
68
69 #include "internal.h"
70 #include "../x509/internal.h"
71
72
73 static void *v2i_crld(const X509V3_EXT_METHOD *method,
74 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
75 static int i2r_crldp(const X509V3_EXT_METHOD *method, void *pcrldp, BIO *out,
76 int indent);
77
78 const X509V3_EXT_METHOD v3_crld = {
79 NID_crl_distribution_points, 0, ASN1_ITEM_ref(CRL_DIST_POINTS),
80 0, 0, 0, 0,
81 0, 0,
82 0,
83 v2i_crld,
84 i2r_crldp, 0,
85 NULL
86 };
87
88 const X509V3_EXT_METHOD v3_freshest_crl = {
89 NID_freshest_crl, 0, ASN1_ITEM_ref(CRL_DIST_POINTS),
90 0, 0, 0, 0,
91 0, 0,
92 0,
93 v2i_crld,
94 i2r_crldp, 0,
95 NULL
96 };
97
STACK_OF(GENERAL_NAME)98 static STACK_OF(GENERAL_NAME) *gnames_from_sectname(X509V3_CTX *ctx,
99 char *sect)
100 {
101 STACK_OF(CONF_VALUE) *gnsect;
102 STACK_OF(GENERAL_NAME) *gens;
103 if (*sect == '@')
104 gnsect = X509V3_get_section(ctx, sect + 1);
105 else
106 gnsect = X509V3_parse_list(sect);
107 if (!gnsect) {
108 OPENSSL_PUT_ERROR(X509V3, X509V3_R_SECTION_NOT_FOUND);
109 return NULL;
110 }
111 gens = v2i_GENERAL_NAMES(NULL, ctx, gnsect);
112 if (*sect == '@')
113 X509V3_section_free(ctx, gnsect);
114 else
115 sk_CONF_VALUE_pop_free(gnsect, X509V3_conf_free);
116 return gens;
117 }
118
set_dist_point_name(DIST_POINT_NAME ** pdp,X509V3_CTX * ctx,CONF_VALUE * cnf)119 static int set_dist_point_name(DIST_POINT_NAME **pdp, X509V3_CTX *ctx,
120 CONF_VALUE *cnf)
121 {
122 STACK_OF(GENERAL_NAME) *fnm = NULL;
123 STACK_OF(X509_NAME_ENTRY) *rnm = NULL;
124 if (!strncmp(cnf->name, "fullname", 9)) {
125 fnm = gnames_from_sectname(ctx, cnf->value);
126 if (!fnm)
127 goto err;
128 } else if (!strcmp(cnf->name, "relativename")) {
129 int ret;
130 STACK_OF(CONF_VALUE) *dnsect;
131 X509_NAME *nm;
132 nm = X509_NAME_new();
133 if (!nm)
134 return -1;
135 dnsect = X509V3_get_section(ctx, cnf->value);
136 if (!dnsect) {
137 OPENSSL_PUT_ERROR(X509V3, X509V3_R_SECTION_NOT_FOUND);
138 return -1;
139 }
140 ret = X509V3_NAME_from_section(nm, dnsect, MBSTRING_ASC);
141 X509V3_section_free(ctx, dnsect);
142 rnm = nm->entries;
143 nm->entries = NULL;
144 X509_NAME_free(nm);
145 if (!ret || sk_X509_NAME_ENTRY_num(rnm) <= 0)
146 goto err;
147 /*
148 * Since its a name fragment can't have more than one RDNSequence
149 */
150 if (sk_X509_NAME_ENTRY_value(rnm,
151 sk_X509_NAME_ENTRY_num(rnm) - 1)->set) {
152 OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_MULTIPLE_RDNS);
153 goto err;
154 }
155 } else
156 return 0;
157
158 if (*pdp) {
159 OPENSSL_PUT_ERROR(X509V3, X509V3_R_DISTPOINT_ALREADY_SET);
160 goto err;
161 }
162
163 *pdp = DIST_POINT_NAME_new();
164 if (!*pdp)
165 goto err;
166 if (fnm) {
167 (*pdp)->type = 0;
168 (*pdp)->name.fullname = fnm;
169 } else {
170 (*pdp)->type = 1;
171 (*pdp)->name.relativename = rnm;
172 }
173
174 return 1;
175
176 err:
177 if (fnm)
178 sk_GENERAL_NAME_pop_free(fnm, GENERAL_NAME_free);
179 if (rnm)
180 sk_X509_NAME_ENTRY_pop_free(rnm, X509_NAME_ENTRY_free);
181 return -1;
182 }
183
184 static const BIT_STRING_BITNAME reason_flags[] = {
185 {0, "Unused", "unused"},
186 {1, "Key Compromise", "keyCompromise"},
187 {2, "CA Compromise", "CACompromise"},
188 {3, "Affiliation Changed", "affiliationChanged"},
189 {4, "Superseded", "superseded"},
190 {5, "Cessation Of Operation", "cessationOfOperation"},
191 {6, "Certificate Hold", "certificateHold"},
192 {7, "Privilege Withdrawn", "privilegeWithdrawn"},
193 {8, "AA Compromise", "AACompromise"},
194 {-1, NULL, NULL}
195 };
196
set_reasons(ASN1_BIT_STRING ** preas,char * value)197 static int set_reasons(ASN1_BIT_STRING **preas, char *value)
198 {
199 STACK_OF(CONF_VALUE) *rsk = NULL;
200 const BIT_STRING_BITNAME *pbn;
201 const char *bnam;
202 size_t i;
203 int ret = 0;
204 rsk = X509V3_parse_list(value);
205 if (!rsk)
206 return 0;
207 if (*preas)
208 return 0;
209 for (i = 0; i < sk_CONF_VALUE_num(rsk); i++) {
210 bnam = sk_CONF_VALUE_value(rsk, i)->name;
211 if (!*preas) {
212 *preas = ASN1_BIT_STRING_new();
213 if (!*preas)
214 goto err;
215 }
216 for (pbn = reason_flags; pbn->lname; pbn++) {
217 if (!strcmp(pbn->sname, bnam)) {
218 if (!ASN1_BIT_STRING_set_bit(*preas, pbn->bitnum, 1))
219 goto err;
220 break;
221 }
222 }
223 if (!pbn->lname)
224 goto err;
225 }
226 ret = 1;
227
228 err:
229 sk_CONF_VALUE_pop_free(rsk, X509V3_conf_free);
230 return ret;
231 }
232
print_reasons(BIO * out,const char * rname,ASN1_BIT_STRING * rflags,int indent)233 static int print_reasons(BIO *out, const char *rname,
234 ASN1_BIT_STRING *rflags, int indent)
235 {
236 int first = 1;
237 const BIT_STRING_BITNAME *pbn;
238 BIO_printf(out, "%*s%s:\n%*s", indent, "", rname, indent + 2, "");
239 for (pbn = reason_flags; pbn->lname; pbn++) {
240 if (ASN1_BIT_STRING_get_bit(rflags, pbn->bitnum)) {
241 if (first)
242 first = 0;
243 else
244 BIO_puts(out, ", ");
245 BIO_puts(out, pbn->lname);
246 }
247 }
248 if (first)
249 BIO_puts(out, "<EMPTY>\n");
250 else
251 BIO_puts(out, "\n");
252 return 1;
253 }
254
crldp_from_section(X509V3_CTX * ctx,STACK_OF (CONF_VALUE)* nval)255 static DIST_POINT *crldp_from_section(X509V3_CTX *ctx,
256 STACK_OF(CONF_VALUE) *nval)
257 {
258 size_t i;
259 CONF_VALUE *cnf;
260 DIST_POINT *point = NULL;
261 point = DIST_POINT_new();
262 if (!point)
263 goto err;
264 for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
265 int ret;
266 cnf = sk_CONF_VALUE_value(nval, i);
267 ret = set_dist_point_name(&point->distpoint, ctx, cnf);
268 if (ret > 0)
269 continue;
270 if (ret < 0)
271 goto err;
272 if (!strcmp(cnf->name, "reasons")) {
273 if (!set_reasons(&point->reasons, cnf->value))
274 goto err;
275 } else if (!strcmp(cnf->name, "CRLissuer")) {
276 point->CRLissuer = gnames_from_sectname(ctx, cnf->value);
277 if (!point->CRLissuer)
278 goto err;
279 }
280 }
281
282 return point;
283
284 err:
285 if (point)
286 DIST_POINT_free(point);
287 return NULL;
288 }
289
v2i_crld(const X509V3_EXT_METHOD * method,X509V3_CTX * ctx,STACK_OF (CONF_VALUE)* nval)290 static void *v2i_crld(const X509V3_EXT_METHOD *method,
291 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
292 {
293 STACK_OF(DIST_POINT) *crld = NULL;
294 GENERAL_NAMES *gens = NULL;
295 GENERAL_NAME *gen = NULL;
296 CONF_VALUE *cnf;
297 size_t i;
298 if (!(crld = sk_DIST_POINT_new_null()))
299 goto merr;
300 for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
301 DIST_POINT *point;
302 cnf = sk_CONF_VALUE_value(nval, i);
303 if (!cnf->value) {
304 STACK_OF(CONF_VALUE) *dpsect;
305 dpsect = X509V3_get_section(ctx, cnf->name);
306 if (!dpsect)
307 goto err;
308 point = crldp_from_section(ctx, dpsect);
309 X509V3_section_free(ctx, dpsect);
310 if (!point)
311 goto err;
312 if (!sk_DIST_POINT_push(crld, point)) {
313 DIST_POINT_free(point);
314 goto merr;
315 }
316 } else {
317 if (!(gen = v2i_GENERAL_NAME(method, ctx, cnf)))
318 goto err;
319 if (!(gens = GENERAL_NAMES_new()))
320 goto merr;
321 if (!sk_GENERAL_NAME_push(gens, gen))
322 goto merr;
323 gen = NULL;
324 if (!(point = DIST_POINT_new()))
325 goto merr;
326 if (!sk_DIST_POINT_push(crld, point)) {
327 DIST_POINT_free(point);
328 goto merr;
329 }
330 if (!(point->distpoint = DIST_POINT_NAME_new()))
331 goto merr;
332 point->distpoint->name.fullname = gens;
333 point->distpoint->type = 0;
334 gens = NULL;
335 }
336 }
337 return crld;
338
339 merr:
340 OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE);
341 err:
342 GENERAL_NAME_free(gen);
343 GENERAL_NAMES_free(gens);
344 sk_DIST_POINT_pop_free(crld, DIST_POINT_free);
345 return NULL;
346 }
347
dpn_cb(int operation,ASN1_VALUE ** pval,const ASN1_ITEM * it,void * exarg)348 static int dpn_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
349 void *exarg)
350 {
351 DIST_POINT_NAME *dpn = (DIST_POINT_NAME *)*pval;
352
353 switch (operation) {
354 case ASN1_OP_NEW_POST:
355 dpn->dpname = NULL;
356 break;
357
358 case ASN1_OP_FREE_POST:
359 if (dpn->dpname)
360 X509_NAME_free(dpn->dpname);
361 break;
362 }
363 return 1;
364 }
365
366
367 ASN1_CHOICE_cb(DIST_POINT_NAME, dpn_cb) = {
368 ASN1_IMP_SEQUENCE_OF(DIST_POINT_NAME, name.fullname, GENERAL_NAME, 0),
369 ASN1_IMP_SET_OF(DIST_POINT_NAME, name.relativename, X509_NAME_ENTRY, 1)
370 } ASN1_CHOICE_END_cb(DIST_POINT_NAME, DIST_POINT_NAME, type)
371
372
373 IMPLEMENT_ASN1_FUNCTIONS(DIST_POINT_NAME)
374
375 ASN1_SEQUENCE(DIST_POINT) = {
376 ASN1_EXP_OPT(DIST_POINT, distpoint, DIST_POINT_NAME, 0),
377 ASN1_IMP_OPT(DIST_POINT, reasons, ASN1_BIT_STRING, 1),
378 ASN1_IMP_SEQUENCE_OF_OPT(DIST_POINT, CRLissuer, GENERAL_NAME, 2)
379 } ASN1_SEQUENCE_END(DIST_POINT)
380
381 IMPLEMENT_ASN1_FUNCTIONS(DIST_POINT)
382
383 ASN1_ITEM_TEMPLATE(CRL_DIST_POINTS) =
384 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, CRLDistributionPoints, DIST_POINT)
385 ASN1_ITEM_TEMPLATE_END(CRL_DIST_POINTS)
386
387 IMPLEMENT_ASN1_FUNCTIONS(CRL_DIST_POINTS)
388
389 ASN1_SEQUENCE(ISSUING_DIST_POINT) = {
390 ASN1_EXP_OPT(ISSUING_DIST_POINT, distpoint, DIST_POINT_NAME, 0),
391 ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyuser, ASN1_FBOOLEAN, 1),
392 ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyCA, ASN1_FBOOLEAN, 2),
393 ASN1_IMP_OPT(ISSUING_DIST_POINT, onlysomereasons, ASN1_BIT_STRING, 3),
394 ASN1_IMP_OPT(ISSUING_DIST_POINT, indirectCRL, ASN1_FBOOLEAN, 4),
395 ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyattr, ASN1_FBOOLEAN, 5)
396 } ASN1_SEQUENCE_END(ISSUING_DIST_POINT)
397
398 IMPLEMENT_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
399
400 static int i2r_idp(const X509V3_EXT_METHOD *method, void *pidp, BIO *out,
401 int indent);
402 static void *v2i_idp(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
403 STACK_OF(CONF_VALUE) *nval);
404
405 const X509V3_EXT_METHOD v3_idp = {
406 NID_issuing_distribution_point, X509V3_EXT_MULTILINE,
407 ASN1_ITEM_ref(ISSUING_DIST_POINT),
408 0, 0, 0, 0,
409 0, 0,
410 0,
411 v2i_idp,
412 i2r_idp, 0,
413 NULL
414 };
415
v2i_idp(const X509V3_EXT_METHOD * method,X509V3_CTX * ctx,STACK_OF (CONF_VALUE)* nval)416 static void *v2i_idp(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
417 STACK_OF(CONF_VALUE) *nval)
418 {
419 ISSUING_DIST_POINT *idp = NULL;
420 CONF_VALUE *cnf;
421 char *name, *val;
422 size_t i;
423 int ret;
424 idp = ISSUING_DIST_POINT_new();
425 if (!idp)
426 goto merr;
427 for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
428 cnf = sk_CONF_VALUE_value(nval, i);
429 name = cnf->name;
430 val = cnf->value;
431 ret = set_dist_point_name(&idp->distpoint, ctx, cnf);
432 if (ret > 0)
433 continue;
434 if (ret < 0)
435 goto err;
436 if (!strcmp(name, "onlyuser")) {
437 if (!X509V3_get_value_bool(cnf, &idp->onlyuser))
438 goto err;
439 } else if (!strcmp(name, "onlyCA")) {
440 if (!X509V3_get_value_bool(cnf, &idp->onlyCA))
441 goto err;
442 } else if (!strcmp(name, "onlyAA")) {
443 if (!X509V3_get_value_bool(cnf, &idp->onlyattr))
444 goto err;
445 } else if (!strcmp(name, "indirectCRL")) {
446 if (!X509V3_get_value_bool(cnf, &idp->indirectCRL))
447 goto err;
448 } else if (!strcmp(name, "onlysomereasons")) {
449 if (!set_reasons(&idp->onlysomereasons, val))
450 goto err;
451 } else {
452 OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_NAME);
453 X509V3_conf_err(cnf);
454 goto err;
455 }
456 }
457 return idp;
458
459 merr:
460 OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE);
461 err:
462 ISSUING_DIST_POINT_free(idp);
463 return NULL;
464 }
465
print_gens(BIO * out,STACK_OF (GENERAL_NAME)* gens,int indent)466 static int print_gens(BIO *out, STACK_OF(GENERAL_NAME) *gens, int indent)
467 {
468 size_t i;
469 for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
470 BIO_printf(out, "%*s", indent + 2, "");
471 GENERAL_NAME_print(out, sk_GENERAL_NAME_value(gens, i));
472 BIO_puts(out, "\n");
473 }
474 return 1;
475 }
476
print_distpoint(BIO * out,DIST_POINT_NAME * dpn,int indent)477 static int print_distpoint(BIO *out, DIST_POINT_NAME *dpn, int indent)
478 {
479 if (dpn->type == 0) {
480 BIO_printf(out, "%*sFull Name:\n", indent, "");
481 print_gens(out, dpn->name.fullname, indent);
482 } else {
483 X509_NAME ntmp;
484 ntmp.entries = dpn->name.relativename;
485 BIO_printf(out, "%*sRelative Name:\n%*s", indent, "", indent + 2, "");
486 X509_NAME_print_ex(out, &ntmp, 0, XN_FLAG_ONELINE);
487 BIO_puts(out, "\n");
488 }
489 return 1;
490 }
491
i2r_idp(const X509V3_EXT_METHOD * method,void * pidp,BIO * out,int indent)492 static int i2r_idp(const X509V3_EXT_METHOD *method, void *pidp, BIO *out,
493 int indent)
494 {
495 ISSUING_DIST_POINT *idp = pidp;
496 if (idp->distpoint)
497 print_distpoint(out, idp->distpoint, indent);
498 if (idp->onlyuser > 0)
499 BIO_printf(out, "%*sOnly User Certificates\n", indent, "");
500 if (idp->onlyCA > 0)
501 BIO_printf(out, "%*sOnly CA Certificates\n", indent, "");
502 if (idp->indirectCRL > 0)
503 BIO_printf(out, "%*sIndirect CRL\n", indent, "");
504 if (idp->onlysomereasons)
505 print_reasons(out, "Only Some Reasons", idp->onlysomereasons, indent);
506 if (idp->onlyattr > 0)
507 BIO_printf(out, "%*sOnly Attribute Certificates\n", indent, "");
508 if (!idp->distpoint && (idp->onlyuser <= 0) && (idp->onlyCA <= 0)
509 && (idp->indirectCRL <= 0) && !idp->onlysomereasons
510 && (idp->onlyattr <= 0))
511 BIO_printf(out, "%*s<EMPTY>\n", indent, "");
512
513 return 1;
514 }
515
i2r_crldp(const X509V3_EXT_METHOD * method,void * pcrldp,BIO * out,int indent)516 static int i2r_crldp(const X509V3_EXT_METHOD *method, void *pcrldp, BIO *out,
517 int indent)
518 {
519 STACK_OF(DIST_POINT) *crld = pcrldp;
520 DIST_POINT *point;
521 size_t i;
522 for (i = 0; i < sk_DIST_POINT_num(crld); i++) {
523 BIO_puts(out, "\n");
524 point = sk_DIST_POINT_value(crld, i);
525 if (point->distpoint)
526 print_distpoint(out, point->distpoint, indent);
527 if (point->reasons)
528 print_reasons(out, "Reasons", point->reasons, indent);
529 if (point->CRLissuer) {
530 BIO_printf(out, "%*sCRL Issuer:\n", indent, "");
531 print_gens(out, point->CRLissuer, indent);
532 }
533 }
534 return 1;
535 }
536
DIST_POINT_set_dpname(DIST_POINT_NAME * dpn,X509_NAME * iname)537 int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname)
538 {
539 size_t i;
540 STACK_OF(X509_NAME_ENTRY) *frag;
541 X509_NAME_ENTRY *ne;
542 if (!dpn || (dpn->type != 1))
543 return 1;
544 frag = dpn->name.relativename;
545 dpn->dpname = X509_NAME_dup(iname);
546 if (!dpn->dpname)
547 return 0;
548 for (i = 0; i < sk_X509_NAME_ENTRY_num(frag); i++) {
549 ne = sk_X509_NAME_ENTRY_value(frag, i);
550 if (!X509_NAME_add_entry(dpn->dpname, ne, -1, i ? 0 : 1)) {
551 X509_NAME_free(dpn->dpname);
552 dpn->dpname = NULL;
553 return 0;
554 }
555 }
556 /* generate cached encoding of name */
557 if (i2d_X509_NAME(dpn->dpname, NULL) < 0) {
558 X509_NAME_free(dpn->dpname);
559 dpn->dpname = NULL;
560 return 0;
561 }
562 return 1;
563 }
564