be-gssapi-common.c

Go to the documentation of this file.

/*-------------------------------------------------------------------------
 *
 * be-gssapi-common.c
 *     Common code for GSSAPI authentication and encryption
 *
 * Portions Copyright (c) 1996-2020, PostgreSQL Global Development Group
 * Portions Copyright (c) 1994, Regents of the University of California
 *
 * IDENTIFICATION
 *       src/backend/libpq/be-gssapi-common.c
 *
 *-------------------------------------------------------------------------
 */

#include "postgres.h"

#include "libpq/be-gssapi-common.h"

/*
 * Helper function for getting all strings of a GSSAPI error (of specified
 * stat).  Call once for GSS_CODE and once for MECH_CODE.
 */
static void
pg_GSS_error_int(char *s, size_t len, OM_uint32 stat, int type)
{
    gss_buffer_desc gmsg;
    size_t      i = 0;
    OM_uint32   lmin_s,
                msg_ctx = 0;

    gmsg.value = NULL;
    gmsg.length = 0;

    do
    {
        gss_display_status(&lmin_s, stat, type,
                           GSS_C_NO_OID, &msg_ctx, &gmsg);
        strlcpy(s + i, gmsg.value, len - i);
        i += gmsg.length;
        gss_release_buffer(&lmin_s, &gmsg);
    }
    while (msg_ctx && i < len);

    if (msg_ctx || i == len)
        ereport(WARNING,
                (errmsg_internal("incomplete GSS error report")));
}

/*
 * Fetch and report all error messages from GSSAPI.  To avoid allocation,
 * total error size is capped (at 128 bytes for each of major and minor).  No
 * known mechanisms will produce error messages beyond this cap.
 */
void
pg_GSS_error(int severity, const char *errmsg,
             OM_uint32 maj_stat, OM_uint32 min_stat)
{
    char        msg_major[128],
                msg_minor[128];

    /* Fetch major status message */
    pg_GSS_error_int(msg_major, sizeof(msg_major), maj_stat, GSS_C_GSS_CODE);

    /* Fetch mechanism minor status message */
    pg_GSS_error_int(msg_minor, sizeof(msg_minor), min_stat, GSS_C_MECH_CODE);

    /*
     * errmsg_internal, since translation of the first part must be done
     * before calling this function anyway.
     */
    ereport(severity,
            (errmsg_internal("%s", errmsg),
             errdetail_internal("%s: %s", msg_major, msg_minor)));
}