1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD 3 * 4 * Copyright (c) 2014 The FreeBSD Foundation 5 * All rights reserved. 6 * 7 * This software was developed by Edward Tomasz Napierala under sponsorship 8 * from the FreeBSD Foundation. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 22 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29 * SUCH DAMAGE. 30 * 31 * $FreeBSD: head/usr.sbin/uefisign/uefisign.h 328335 2018-01-24 16:33:33Z trasz $ 32 */ 33 34 #ifndef EFISIGN_H 35 #define EFISIGN_H 36 37 #include <stdbool.h> 38 #include <openssl/evp.h> 39 40 #define DIGEST "SHA256" 41 #define MAX_SECTIONS 128 42 43 struct executable { 44 const char *x_path; 45 FILE *x_fp; 46 47 char *x_buf; 48 size_t x_len; 49 50 /* 51 * Set by pe_parse(), used by digest(). 52 */ 53 size_t x_headers_len; 54 55 off_t x_checksum_off; 56 size_t x_checksum_len; 57 58 off_t x_certificate_entry_off; 59 size_t x_certificate_entry_len; 60 61 int x_nsections; 62 off_t x_section_off[MAX_SECTIONS]; 63 size_t x_section_len[MAX_SECTIONS]; 64 65 /* 66 * Computed by digest(). 67 */ 68 unsigned char x_digest[EVP_MAX_MD_SIZE]; 69 unsigned int x_digest_len; 70 71 /* 72 * Received from the parent process, which computes it in sign(). 73 */ 74 void *x_signature; 75 size_t x_signature_len; 76 }; 77 78 79 FILE *checked_fopen(const char *path, const char *mode); 80 void send_chunk(const void *buf, size_t len, int pipefd); 81 void receive_chunk(void **bufp, size_t *lenp, int pipefd); 82 83 int child(const char *inpath, const char *outpath, int pipefd, 84 bool Vflag, bool vflag); 85 86 void parse(struct executable *x); 87 void update(struct executable *x); 88 size_t signature_size(const struct executable *x); 89 void show_certificate(const struct executable *x); 90 void range_check(const struct executable *x, 91 off_t off, size_t len, const char *name); 92 93 #endif /* !EFISIGN_H */ 94