/*

 * Copyright (c) 2005, 2006, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

#include "NativeUtil.h"

#include "NativeFunc.h"

#include "jlong.h"

#include <jni.h>

extern void throwOutOfMemoryError(JNIEnv *env, const char *message);

const int JAVA_DUPLICATE_TOKEN_CODE = 19; /* DUPLICATE_TOKEN */

const int JAVA_OLD_TOKEN_CODE = 20; /* OLD_TOKEN */

const int JAVA_UNSEQ_TOKEN_CODE = 21; /* UNSEQ_TOKEN */

const int JAVA_GAP_TOKEN_CODE = 22; /* GAP_TOKEN */

const int JAVA_ERROR_CODE[] = {

  2,  /* BAD_MECH */

  3,  /* BAD_NAME */

  4,  /* BAD_NAMETYPE */

  1,  /* BAD_BINDINGS */

  5,  /* BAD_STATUS */

  6,  /* BAD_MIC */

  13, /* NO_CRED */

  12, /* NO_CONTEXT */

  10, /* DEFECTIVE_TOKEN */

  9,  /* DEFECTIVE_CREDENTIAL */

  8,  /* CREDENTIAL_EXPIRED */

  7,  /* CONTEXT_EXPIRED */

  11, /* FAILURE */

  14, /* BAD_QOP */

  15, /* UNAUTHORIZED */

  16, /* UNAVAILABLE */

  17, /* DUPLICATE_ELEMENT */

  18, /* NAME_NOT_MN */

};

const char SPNEGO_BYTES[] = {

 0x2b, 0x06, 0x01, 0x05, 0x05, 0x02

};

jclass CLS_Object;

jclass CLS_String;

jclass CLS_Oid;

jclass CLS_GSSException;

jclass CLS_GSSNameElement;

jclass CLS_GSSCredElement;

jclass CLS_NativeGSSContext;

jclass CLS_SunNativeProvider;

jmethodID MID_String_ctor;

jmethodID MID_Oid_ctor1;

jmethodID MID_Oid_getDER;

jmethodID MID_MessageProp_getPrivacy;

jmethodID MID_MessageProp_getQOP;

jmethodID MID_MessageProp_setPrivacy;

jmethodID MID_MessageProp_setQOP;

jmethodID MID_MessageProp_setSupplementaryStates;

jmethodID MID_GSSException_ctor3;

jmethodID MID_ChannelBinding_getInitiatorAddr;

jmethodID MID_ChannelBinding_getAcceptorAddr;

jmethodID MID_ChannelBinding_getAppData;

jmethodID MID_InetAddress_getAddr;

jmethodID MID_GSSNameElement_ctor;

jmethodID MID_GSSCredElement_ctor;

jmethodID MID_NativeGSSContext_ctor;

jmethodID MID_SunNativeProvider_debug;

jfieldID FID_GSSLibStub_pMech;

jfieldID FID_NativeGSSContext_pContext;

jfieldID FID_NativeGSSContext_srcName;

jfieldID FID_NativeGSSContext_targetName;

jfieldID FID_NativeGSSContext_isInitiator;

jfieldID FID_NativeGSSContext_isEstablished;

jfieldID FID_NativeGSSContext_delegatedCred;

jfieldID FID_NativeGSSContext_flags;

jfieldID FID_NativeGSSContext_lifetime;

jfieldID FID_NativeGSSContext_actualMech;

char debugBuf[256];

JNIEXPORT jint JNICALL

JNI_OnLoad(JavaVM *jvm, void *reserved) {

  JNIEnv *env;

  jclass cls;

  if ((*jvm)->GetEnv(jvm, (void **)&env, JNI_VERSION_1_2)) {

    return JNI_EVERSION; /* JNI version not supported */

  }

  /* Retrieve and store the classes in global ref */

  cls = (*env)->FindClass(env, "java/lang/Object");

  if (cls == NULL) {

    printf("Couldn't find Object class\n");

    return JNI_ERR;

  }

  CLS_Object = (*env)->NewGlobalRef(env, cls);

  if (CLS_Object == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "java/lang/String");

  if (cls == NULL) {

    printf("Couldn't find String class\n");

    return JNI_ERR;

  }

  CLS_String = (*env)->NewGlobalRef(env, cls);

  if (CLS_String == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "org/ietf/jgss/Oid");

  if (cls == NULL) {

    printf("Couldn't find org.ietf.jgss.Oid class\n");

    return JNI_ERR;

  }

  CLS_Oid = (*env)->NewGlobalRef(env, cls);

  if (CLS_Oid == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "org/ietf/jgss/GSSException");

  if (cls == NULL) {

    printf("Couldn't find org.ietf.jgss.GSSException class\n");

    return JNI_ERR;

  }

  CLS_GSSException = (*env)->NewGlobalRef(env, cls);

  if (CLS_GSSException == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "sun/security/jgss/wrapper/GSSNameElement");

  if (cls == NULL) {

    printf("Couldn't find sun.security.jgss.wrapper.GSSNameElement class\n");

    return JNI_ERR;

  }

  CLS_GSSNameElement = (*env)->NewGlobalRef(env, cls);

  if (CLS_GSSException == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "sun/security/jgss/wrapper/GSSCredElement");

  if (cls == NULL) {

    printf("Couldn't find sun.security.jgss.wrapper.GSSCredElement class\n");

    return JNI_ERR;

  }

  CLS_GSSCredElement = (*env)->NewGlobalRef(env, cls);

  if (CLS_GSSCredElement == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "sun/security/jgss/wrapper/NativeGSSContext");

  if (cls == NULL) {

    printf("Couldn't find sun.security.jgss.wrapper.NativeGSSContext class\n");

    return JNI_ERR;

  }

  CLS_NativeGSSContext = (*env)->NewGlobalRef(env, cls);

  if (CLS_NativeGSSContext == NULL) {

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "sun/security/jgss/wrapper/SunNativeProvider");

  if (cls == NULL) {

    printf("Couldn't find sun.security.jgss.wrapper.SunNativeProvider class\n");

    return JNI_ERR;

  }

  CLS_SunNativeProvider = (*env)->NewGlobalRef(env, cls);

  if (CLS_SunNativeProvider == NULL) {

    return JNI_ERR;

  }

  /* Compute and cache the method ID */

  MID_String_ctor = (*env)->GetMethodID(env, CLS_String,

                                        "<init>", "([B)V");

  if (MID_String_ctor == NULL) {

    printf("Couldn't find String(byte[]) constructor\n");

    return JNI_ERR;

  }

  MID_Oid_ctor1 =

    (*env)->GetMethodID(env, CLS_Oid, "<init>", "([B)V");

  if (MID_Oid_ctor1 == NULL) {

    printf("Couldn't find Oid(byte[]) constructor\n");

    return JNI_ERR;

  }

  MID_Oid_getDER = (*env)->GetMethodID(env, CLS_Oid, "getDER", "()[B");

  if (MID_Oid_getDER == NULL) {

    printf("Couldn't find Oid.getDER() method\n");

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "org/ietf/jgss/MessageProp");

  if (cls == NULL) {

    printf("Couldn't find org.ietf.jgss.MessageProp class\n");

    return JNI_ERR;

  }

  MID_MessageProp_getPrivacy =

    (*env)->GetMethodID(env, cls, "getPrivacy", "()Z");

  if (MID_MessageProp_getPrivacy == NULL) {

    printf("Couldn't find MessageProp.getPrivacy() method\n");

    return JNI_ERR;

  }

  MID_MessageProp_getQOP = (*env)->GetMethodID(env, cls, "getQOP", "()I");

  if (MID_MessageProp_getQOP == NULL) {

    printf("Couldn't find MessageProp.getQOP() method\n");

    return JNI_ERR;

  }

  MID_MessageProp_setPrivacy =

    (*env)->GetMethodID(env, cls, "setPrivacy", "(Z)V");

  if (MID_MessageProp_setPrivacy == NULL) {

    printf("Couldn't find MessageProp.setPrivacy(boolean) method\n");

    return JNI_ERR;

  }

  MID_MessageProp_setQOP = (*env)->GetMethodID(env, cls, "setQOP", "(I)V");

  if (MID_MessageProp_setQOP == NULL) {

    printf("Couldn't find MessageProp.setQOP(int) method\n");

    return JNI_ERR;

  }

  MID_MessageProp_setSupplementaryStates =

    (*env)->GetMethodID(env, cls, "setSupplementaryStates",

                        "(ZZZZILjava/lang/String;)V");

  if (MID_MessageProp_setSupplementaryStates == NULL) {

    printf("Couldn't find MessageProp.setSupplementaryStates(...) method\n");

    return JNI_ERR;

  }

  MID_GSSException_ctor3 = (*env)->GetMethodID

    (env, CLS_GSSException, "<init>", "(IILjava/lang/String;)V");

  if (MID_GSSException_ctor3 == NULL) {

    printf("Couldn't find GSSException(int, int, String) constructor\n");

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "org/ietf/jgss/ChannelBinding");

  if (cls == NULL) {

    printf("Couldn't find org.ietf.jgss.ChannelBinding class\n");

    return JNI_ERR;

  }

  MID_ChannelBinding_getInitiatorAddr =

    (*env)->GetMethodID(env, cls, "getInitiatorAddress",

                        "()Ljava/net/InetAddress;");

  if (MID_ChannelBinding_getInitiatorAddr == NULL) {

    printf("Couldn't find ChannelBinding.getInitiatorAddress() method\n");

    return JNI_ERR;

  }

  MID_ChannelBinding_getAcceptorAddr =

    (*env)->GetMethodID(env, cls, "getAcceptorAddress",

                        "()Ljava/net/InetAddress;");

  if (MID_ChannelBinding_getAcceptorAddr == NULL) {

    printf("Couldn't find ChannelBinding.getAcceptorAddress() method\n");

    return JNI_ERR;

  }

  MID_ChannelBinding_getAppData =

    (*env)->GetMethodID(env, cls, "getApplicationData", "()[B");

  if (MID_ChannelBinding_getAppData == NULL) {

    printf("Couldn't find ChannelBinding.getApplicationData() method\n");

    return JNI_ERR;

  }

  cls = (*env)->FindClass(env, "java/net/InetAddress");

  if (cls == NULL) {

    printf("Couldn't find java.net.InetAddress class\n");

    return JNI_ERR;

  }

  MID_InetAddress_getAddr = (*env)->GetMethodID(env, cls, "getAddress",

                                                "()[B");

  if (MID_InetAddress_getAddr == NULL) {

    printf("Couldn't find InetAddress.getAddress() method\n");

    return JNI_ERR;

  }

  MID_GSSNameElement_ctor =

    (*env)->GetMethodID(env, CLS_GSSNameElement,

                        "<init>", "(JLsun/security/jgss/wrapper/GSSLibStub;)V");

  if (MID_GSSNameElement_ctor == NULL) {

    printf("Couldn't find GSSNameElement(long, GSSLibStub) constructor\n");

    return JNI_ERR;

  }

  MID_GSSCredElement_ctor =

    (*env)->GetMethodID(env, CLS_GSSCredElement, "<init>",

        "(JLsun/security/jgss/wrapper/GSSNameElement;Lorg/ietf/jgss/Oid;)V");

  if (MID_GSSCredElement_ctor == NULL) {

    printf("Couldn't find GSSCredElement(long, GSSLibStub) constructor\n");

    return JNI_ERR;

  }

  MID_NativeGSSContext_ctor =

    (*env)->GetMethodID(env, CLS_NativeGSSContext, "<init>",

                        "(JLsun/security/jgss/wrapper/GSSLibStub;)V");

  if (MID_NativeGSSContext_ctor == NULL) {

    printf("Couldn't find NativeGSSContext(long, GSSLibStub) constructor\n");

    return JNI_ERR;

  }

  MID_SunNativeProvider_debug =

    (*env)->GetStaticMethodID(env, CLS_SunNativeProvider, "debug",

                              "(Ljava/lang/String;)V");

  if (MID_SunNativeProvider_debug == NULL) {

    printf("Couldn't find SunNativeProvider.debug(String) method\n");

    return JNI_ERR;

  }

  /* Compute and cache the field ID */

  cls = (*env)->FindClass(env, "sun/security/jgss/wrapper/GSSLibStub");

  if (cls == NULL) {

    printf("Couldn't find sun.security.jgss.wrapper.GSSLibStub class\n");

    return JNI_ERR;

  }

  FID_GSSLibStub_pMech =

    (*env)->GetFieldID(env, cls, "pMech", "J");

  if (FID_GSSLibStub_pMech == NULL) {

    printf("Couldn't find GSSLibStub.pMech field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_pContext =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "pContext", "J");

  if (FID_NativeGSSContext_pContext == NULL) {

    printf("Couldn't find NativeGSSContext.pContext field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_srcName =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "srcName",

                       "Lsun/security/jgss/wrapper/GSSNameElement;");

  if (FID_NativeGSSContext_srcName == NULL) {

    printf("Couldn't find NativeGSSContext.srcName field\n");

   return JNI_ERR;

  }

  FID_NativeGSSContext_targetName =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "targetName",

                       "Lsun/security/jgss/wrapper/GSSNameElement;");

  if (FID_NativeGSSContext_targetName == NULL) {

    printf("Couldn't find NativeGSSContext.targetName field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_isInitiator =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "isInitiator", "Z");

  if (FID_NativeGSSContext_isInitiator == NULL) {

    printf("Couldn't find NativeGSSContext.isInitiator field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_isEstablished =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "isEstablished", "Z");

  if (FID_NativeGSSContext_isEstablished == NULL) {

    printf("Couldn't find NativeGSSContext.isEstablished field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_delegatedCred =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "delegatedCred",

                       "Lsun/security/jgss/wrapper/GSSCredElement;");

  if (FID_NativeGSSContext_delegatedCred == NULL) {

    printf("Couldn't find NativeGSSContext.delegatedCred field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_flags =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "flags", "I");

  if (FID_NativeGSSContext_flags == NULL) {

    printf("Couldn't find NativeGSSContext.flags field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_lifetime =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "lifetime", "I");

  if (FID_NativeGSSContext_lifetime == NULL) {

    printf("Couldn't find NativeGSSContext.lifetime field\n");

    return JNI_ERR;

  }

  FID_NativeGSSContext_actualMech =

    (*env)->GetFieldID(env, CLS_NativeGSSContext, "actualMech",

                       "Lorg/ietf/jgss/Oid;");

  if (FID_NativeGSSContext_actualMech == NULL) {

    printf("Couldn't find NativeGSSContext.actualMech field\n");

    return JNI_ERR;

  }

  return JNI_VERSION_1_2;

}

JNIEXPORT void JNICALL

JNI_OnUnload(JavaVM *jvm, void *reserved) {

  JNIEnv *env;

  if ((*jvm)->GetEnv(jvm, (void **)&env, JNI_VERSION_1_2)) {

    return;

  }

  /* Delete the global refs */

  (*env)->DeleteGlobalRef(env, CLS_Object);

  (*env)->DeleteGlobalRef(env, CLS_String);

  (*env)->DeleteGlobalRef(env, CLS_Oid);

  (*env)->DeleteGlobalRef(env, CLS_GSSException);

  (*env)->DeleteGlobalRef(env, CLS_GSSNameElement);

  (*env)->DeleteGlobalRef(env, CLS_GSSCredElement);

  (*env)->DeleteGlobalRef(env, CLS_SunNativeProvider);

  return;

}

const OM_uint32 JAVA_MAX = GSS_C_INDEFINITE/2;

/*

 * Utility routine for converting the C unsigned integer time

 * to Java signed integer time.

 */

jint getJavaTime(OM_uint32 ctime) {

  jint result;

  /* special handle values equals or more than JAVA_MAX */

  if (ctime == GSS_C_INDEFINITE) {

    result = JAVA_MAX;

  } else if (ctime >= JAVA_MAX) {

    result = JAVA_MAX-1;

  } else {

    result = ctime;

  }

  return result;

}

/*

 * Utility routine for converting the Java signed integer time

 * to C unsigned integer time.

 */

OM_uint32 getGSSTime(jint jtime) {

  OM_uint32 result;

  /* special handle values equal to JAVA_MAX */

  if (jtime == (jint)JAVA_MAX) {

    result = GSS_C_INDEFINITE;

  } else {

    result = jtime;

  }

  return result;

}

/*

 * Utility routine for mapping the C error code to the

 * Java one. The routine errors really should have

 * shared the same values but unfortunately don't.

 */

jint getJavaErrorCode(int cNonCallingErr) {

  int cRoutineErr, cSuppStatus;

  /* map the routine errors */

  cRoutineErr = GSS_ROUTINE_ERROR(cNonCallingErr) >> 16;

  if (cRoutineErr != GSS_S_COMPLETE) {

    return JAVA_ERROR_CODE[cRoutineErr-1];

  }

  /* map the supplementary infos */

  cSuppStatus = GSS_SUPPLEMENTARY_INFO(cNonCallingErr);

  if (cSuppStatus & GSS_S_DUPLICATE_TOKEN) {

    return JAVA_DUPLICATE_TOKEN_CODE;

  } else if (cSuppStatus & GSS_S_OLD_TOKEN) {

    return JAVA_OLD_TOKEN_CODE;

  } else if (cSuppStatus & GSS_S_UNSEQ_TOKEN) {

    return JAVA_UNSEQ_TOKEN_CODE;

  } else if (cSuppStatus & GSS_S_GAP_TOKEN) {

    return JAVA_GAP_TOKEN_CODE;

  }

  return GSS_S_COMPLETE;

}

/*

 * Utility routine for creating a java.lang.String object

 * using the specified gss_buffer_t structure. After the,

 * String object is created, the specified gss_buffer_t

 * structure is released.

 */

jstring getJavaString(JNIEnv *env, gss_buffer_t bytes) {

  jstring result;

  OM_uint32 minor;

  int len;

  jbyteArray jbytes;

  if (bytes != NULL) {

    /* constructs the String object with new String(byte[])

       NOTE: do NOT include the trailing NULL */

    len = bytes->length;

    jbytes = (*env)->NewByteArray(env, len);

    (*env)->SetByteArrayRegion(env, jbytes, 0, len, (jbyte *) bytes->value);

    result = (*env)->NewObject(env, CLS_String, MID_String_ctor,

                               jbytes);

    (*env)->DeleteLocalRef(env, jbytes);

    (*ftab->releaseBuffer)(&minor, bytes);

    return result;

  } /* else fall through */

  return NULL;

}

/*

 * Utility routine for generate message for the specified minor

 * status code.

 */

jstring getMinorMessage(JNIEnv *env, jobject jstub, OM_uint32 statusValue) {

  OM_uint32 messageContext, minor, major;

  gss_buffer_desc statusString;

  gss_OID mech;

  jstring msg;

  messageContext = 0;

  if (jstub != NULL) {

    mech = (gss_OID) jlong_to_ptr((*env)->GetLongField(env, jstub, FID_GSSLibStub_pMech));

  } else {

    mech = GSS_C_NO_OID;

  }

  /* gss_display_status(...) => GSS_S_BAD_MECH, GSS_S_BAD_STATUS */

  major = (*ftab->displayStatus)(&minor, statusValue, GSS_C_MECH_CODE, mech,

                             &messageContext, &statusString);

  /* release intermediate buffers */

  msg = getJavaString(env, &statusString);

  (*ftab->releaseBuffer)(&minor, &statusString);

  return msg;

}

/*

 * Utility routine checking the specified major and minor

 * status codes. GSSExceptions will be thrown if they are

 * not GSS_S_COMPLETE (i.e. 0).

 */

void checkStatus(JNIEnv *env, jobject jstub, OM_uint32 major,

                 OM_uint32 minor, char* methodName) {

  int callingErr, routineErr, supplementaryInfo;

  jint jmajor, jminor;

  char* msg;

  jstring jmsg;

  jthrowable gssEx;

  if (major == GSS_S_COMPLETE) return;

  callingErr = GSS_CALLING_ERROR(major);

  routineErr = GSS_ROUTINE_ERROR(major);

  supplementaryInfo = GSS_SUPPLEMENTARY_INFO(major);

  sprintf(debugBuf, "%s Status major/minor = %x/%d", methodName, major, minor);

  debug(env, debugBuf);

  sprintf(debugBuf, "%s Status c/r/s = %d/%d/%d ", methodName, callingErr>>24,