Skip to content

Commit 34b6a03

Browse files
GirgiasGirgias
committed
Promote some OpenSSL warnings to Errors
1 parent e8e09b6 commit 34b6a03

23 files changed

+461
-301
lines changed

‎ext/openssl/openssl.c

+77-77
Large diffs are not rendered by default.

‎ext/openssl/tests/bug38255.phpt

+20-14
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,12 @@ if (!extension_loaded("openssl")) die("skip");
88
<?php
99
$pub_key_id = false;
1010
$signature = '';
11-
$ok = openssl_verify("foo", $signature, $pub_key_id, OPENSSL_ALGO_MD5);
11+
12+
try {
13+
$ok = openssl_verify("foo", $signature, $pub_key_id, OPENSSL_ALGO_MD5);
14+
} catch (\TypeError $e) {
15+
echo $e->getMessage() . \PHP_EOL;
16+
}
1217

1318
class test {
1419
function __toString() {
@@ -18,18 +23,19 @@ class test {
1823
$t = new test;
1924

2025

21-
var_dump(openssl_verify("foo", $signature, $pub_key_id, OPENSSL_ALGO_MD5));
22-
var_dump(openssl_verify("foo", $t, $pub_key_id, OPENSSL_ALGO_MD5));
23-
24-
echo "Done\n";
26+
try {
27+
var_dump(openssl_verify("foo", $signature, $pub_key_id, OPENSSL_ALGO_MD5));
28+
} catch (\TypeError $e) {
29+
echo $e->getMessage() . \PHP_EOL;
30+
}
31+
try {
32+
var_dump(openssl_verify("foo", $t, $pub_key_id, OPENSSL_ALGO_MD5));
33+
} catch (\TypeError $e) {
34+
echo $e->getMessage() . \PHP_EOL;
35+
}
2536

2637
?>
27-
--EXPECTF--
28-
Warning: openssl_verify(): Supplied key param cannot be coerced into a public key in %s on line %d
29-
30-
Warning: openssl_verify(): Supplied key param cannot be coerced into a public key in %s on line %d
31-
bool(false)
32-
33-
Warning: openssl_verify(): Supplied key param cannot be coerced into a public key in %s on line %d
34-
bool(false)
35-
Done
38+
--EXPECT--
39+
Supplied key param cannot be coerced into a public key
40+
Supplied key param cannot be coerced into a public key
41+
Supplied key param cannot be coerced into a public key

‎ext/openssl/tests/bug60632.phpt

+8-5
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,12 @@ $test_pubkey = $details['key'];
1919
$pubkey = openssl_pkey_get_public($test_pubkey);
2020
$encrypted = null;
2121
$ekeys = array();
22-
$result = openssl_seal('test phrase', $encrypted, $ekeys, array($pubkey), 'AES-256-CBC');
23-
echo "Done";
22+
23+
try {
24+
$result = openssl_seal('test phrase', $encrypted, $ekeys, array($pubkey), 'AES-256-CBC');
25+
} catch (\ValueError $e) {
26+
echo $e->getMessage() . \PHP_EOL;
27+
}
2428
?>
25-
--EXPECTF--
26-
Warning: openssl_seal(): Cipher algorithm requires an IV to be supplied as a sixth parameter in %s on line %d
27-
Done
29+
--EXPECT--
30+
Cipher algorithm requires an IV to be supplied as a sixth parameter

‎ext/openssl/tests/bug70438.phpt

+14-6
Original file line numberDiff line numberDiff line change
@@ -14,14 +14,22 @@ $cipher = 'AES-128-CBC';
1414
$pub_key = "file://" . __DIR__ . "/public.key";
1515
$priv_key = "file://" . __DIR__ . "/private_rsa_1024.key";
1616

17-
openssl_seal($data, $sealed, $ekeys, array($pub_key, $pub_key), $cipher);
18-
openssl_seal($data, $sealed, $ekeys, array($pub_key, $pub_key), 'sparkles', $iv);
17+
try {
18+
openssl_seal($data, $sealed, $ekeys, array($pub_key, $pub_key), $cipher);
19+
} catch (\ValueError $e) {
20+
echo $e->getMessage() . \PHP_EOL;
21+
}
22+
try {
23+
openssl_seal($data, $sealed, $ekeys, array($pub_key, $pub_key), 'sparkles', $iv);
24+
} catch (\ValueError $e) {
25+
echo $e->getMessage() . \PHP_EOL;
26+
}
27+
1928
openssl_seal($data, $sealed, $ekeys, array($pub_key, $pub_key), $cipher, $iv);
2029
openssl_open($sealed, $decrypted, $ekeys[0], $priv_key, $cipher, $iv);
2130
echo $decrypted;
2231
?>
23-
--EXPECTF--
24-
Warning: openssl_seal(): Cipher algorithm requires an IV to be supplied as a sixth parameter in %s on line %d
25-
26-
Warning: openssl_seal(): Unknown signature algorithm. in %s on line %d
32+
--EXPECT--
33+
Cipher algorithm requires an IV to be supplied as a sixth parameter
34+
Unknown signature algorithm.
2735
openssl_seal() test

‎ext/openssl/tests/cve-2013-6420.phpt

+12-8
Original file line numberDiff line numberDiff line change
@@ -5,12 +5,16 @@ CVE-2013-6420
55
--FILE--
66
<?php
77
$crt = substr(__FILE__, 0, -4).'.crt';
8-
$info = openssl_x509_parse("file://$crt");
9-
var_dump($info['issuer']['emailAddress'], $info["validFrom_time_t"]);
8+
9+
try {
10+
$info = openssl_x509_parse("file://$crt");
11+
} catch (\ValueError $e) {
12+
echo $e->getMessage() . \PHP_EOL;
13+
}
14+
15+
@var_dump($info['issuer']['emailAddress'], $info["validFrom_time_t"]);
1016
?>
11-
Done
12-
--EXPECTF--
13-
%s openssl_x509_parse(): Illegal length in timestamp in %s%ecve-2013-6420.php on line 3
14-
string(27) "[email protected]"
15-
int(-1)
16-
Done
17+
--EXPECT--
18+
Illegal length in timestamp
19+
NULL
20+
NULL

‎ext/openssl/tests/ecc.phpt

+7-5
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,12 @@ $argsFailed = array(
1717
"private_key_type" => OPENSSL_KEYTYPE_EC,
1818
);
1919

20-
$keyFailed = openssl_pkey_new($argsFailed);
21-
var_dump($keyFailed);
20+
try {
21+
$keyFailed = openssl_pkey_new($argsFailed);
22+
var_dump($keyFailed);
23+
} catch (\ValueError $e) {
24+
echo $e->getMessage() . \PHP_EOL;
25+
}
2226

2327
$d1 = openssl_pkey_get_details($key1);
2428
var_dump($d1["bits"]);
@@ -82,9 +86,7 @@ foreach ($curve_names as $curve_name) {
8286
--EXPECTF--
8387
Testing openssl_pkey_new
8488
resource(%d) of type (OpenSSL key)
85-
86-
Warning: openssl_pkey_new(): Unknown elliptic curve (short) name invalid_cuve_name in %s on line %d
87-
bool(false)
89+
Unknown elliptic curve (short) name invalid_cuve_name
8890
int(384)
8991
int(215)
9092
string(9) "secp384r1"

‎ext/openssl/tests/openssl_csr_new_basic.phpt

+8-7
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,13 @@ openssl_csr_new() tests
88
$a = array();
99

1010
$conf = array('config' => __DIR__ . DIRECTORY_SEPARATOR . 'openssl.cnf');
11-
var_dump(openssl_csr_new(array(), $a, $conf, array()));
11+
12+
try {
13+
var_dump(openssl_csr_new(array(), $a, $conf, array()));
14+
var_dump($keyFailed);
15+
} catch (\ValueError $e) {
16+
echo $e->getMessage() . \PHP_EOL;
17+
}
1218

1319
// this leaks
1420
$a = array(1,2);
@@ -19,14 +25,9 @@ var_dump(openssl_csr_new($a, $b, $conf));
1925
$x = openssl_pkey_new($conf);
2026
var_dump(openssl_csr_new(["countryName" => "DE"], $x, $conf + ["x509_extensions" => 0xDEADBEEF]));
2127

22-
23-
echo "Done\n";
2428
?>
2529
--EXPECTF--
26-
Warning: openssl_csr_new(): Key array must be of the form array(0 => key, 1 => phrase) in %s on line %d
27-
2830
Warning: openssl_csr_new(): add1_attr_by_txt challengePassword_min -> 4 (failed; check error queue and value of string_mask OpenSSL option if illegal characters are reported) in %s on line %d
29-
bool(false)
31+
Key array must be of the form array(0 => key, 1 => phrase)
3032
resource(%d) of type (OpenSSL X.509 CSR)
3133
resource(%d) of type (OpenSSL X.509 CSR)
32-
Done

‎ext/openssl/tests/openssl_csr_sign_basic.phpt

+35-16
Original file line numberDiff line numberDiff line change
@@ -33,12 +33,39 @@ var_dump(openssl_csr_sign($csr, null, $privkey, 365, $args));
3333
var_dump(openssl_csr_sign($csr, null, $privkey, 365, $config_arg));
3434
var_dump(openssl_csr_sign($csr, $cert, $priv, 365, $config_arg));
3535
var_dump(openssl_csr_sign($csr, openssl_x509_read($cert), $priv, 365, $config_arg));
36-
var_dump(openssl_csr_sign($csr, $wrong, $privkey, 365));
37-
var_dump(openssl_csr_sign($csr, null, $wrong, 365));
38-
var_dump(openssl_csr_sign($wrong, null, $privkey, 365));
39-
var_dump(openssl_csr_sign(array(), null, $privkey, 365));
36+
37+
try {
38+
var_dump(openssl_csr_sign($csr, $wrong, $privkey, 365));
39+
} catch (\ValueError $e) {
40+
echo $e->getMessage() . \PHP_EOL;
41+
}
42+
43+
try {
44+
var_dump(openssl_csr_sign($csr, null, $wrong, 365));
45+
} catch (\ValueError $e) {
46+
echo $e->getMessage() . \PHP_EOL;
47+
}
48+
49+
try {
50+
var_dump(openssl_csr_sign($wrong, null, $privkey, 365));
51+
} catch (\TypeError $e) {
52+
echo $e->getMessage() . \PHP_EOL;
53+
}
54+
55+
try {
56+
var_dump(openssl_csr_sign(array(), null, $privkey, 365));
57+
} catch (\TypeError $e) {
58+
echo $e->getMessage() . \PHP_EOL;
59+
}
60+
4061
var_dump(openssl_csr_sign($csr, array(), $privkey, 365));
41-
var_dump(openssl_csr_sign($csr, null, array(), 365));
62+
63+
try {
64+
var_dump(openssl_csr_sign($csr, null, array(), 365));
65+
} catch (\ValueError $e) {
66+
echo $e->getMessage() . \PHP_EOL;
67+
}
68+
4269
var_dump(openssl_csr_sign($csr, null, $privkey, 365, $config_arg));
4370
?>
4471
--EXPECTF--
@@ -52,18 +79,10 @@ bool(false)
5279

5380
Warning: openssl_csr_sign(): Cannot get private key from parameter 3 in %s on line %d
5481
bool(false)
55-
56-
Warning: openssl_csr_sign(): Cannot get CSR from parameter 1 in %s on line %d
57-
bool(false)
58-
59-
Warning: openssl_csr_sign(): Cannot get CSR from parameter 1 in %s on line %d
60-
bool(false)
82+
Supplied parameter cannot be coerced into an Certificate Signing Request (CSR)
83+
Supplied parameter cannot be coerced into an Certificate Signing Request (CSR)
6184

6285
Warning: openssl_csr_sign(): Cannot get cert from parameter 2 in %s on line %d
6386
bool(false)
64-
65-
Warning: openssl_csr_sign(): Key array must be of the form array(0 => key, 1 => phrase) in %s on line %d
66-
67-
Warning: openssl_csr_sign(): Cannot get private key from parameter 3 in %s on line %d
68-
bool(false)
87+
Key array must be of the form array(0 => key, 1 => phrase)
6988
resource(%d) of type (OpenSSL X.509)

‎ext/openssl/tests/openssl_decrypt_error.phpt

+29-16
Original file line numberDiff line numberDiff line change
@@ -12,13 +12,34 @@ $iv = str_repeat("\0", openssl_cipher_iv_length($method));
1212

1313
$encrypted = openssl_encrypt($data, $method, $password);
1414
var_dump($encrypted); /* Not passing $iv should be the same as all-NULL iv, but with a warning */
15+
1516
var_dump(openssl_encrypt($data, $method, $password, 0, $iv));
17+
1618
var_dump(openssl_decrypt($encrypted, $method, $wrong));
17-
var_dump(openssl_decrypt($encrypted, $wrong, $password));
19+
20+
try {
21+
var_dump(openssl_decrypt($encrypted, $wrong, $password));
22+
} catch (\ValueError $e) {
23+
echo $e->getMessage() . \PHP_EOL;
24+
}
25+
1826
var_dump(openssl_decrypt($wrong, $method, $password));
19-
var_dump(openssl_decrypt($wrong, $wrong, $password));
20-
var_dump(openssl_decrypt($encrypted, $wrong, $wrong));
21-
var_dump(openssl_decrypt($wrong, $wrong, $wrong));
27+
28+
try {
29+
var_dump(openssl_decrypt($wrong, $wrong, $password));
30+
} catch (\ValueError $e) {
31+
echo $e->getMessage() . \PHP_EOL;
32+
}
33+
try {
34+
var_dump(openssl_decrypt($encrypted, $wrong, $wrong));
35+
} catch (\ValueError $e) {
36+
echo $e->getMessage() . \PHP_EOL;
37+
}
38+
try {
39+
var_dump(openssl_decrypt($wrong, $wrong, $wrong));
40+
} catch (\ValueError $e) {
41+
echo $e->getMessage() . \PHP_EOL;
42+
}
2243

2344
// invalid using of an authentication tag
2445
var_dump(openssl_encrypt($data, $method, $password, 0, $iv, $wrong));
@@ -28,19 +49,11 @@ Warning: openssl_encrypt(): Using an empty Initialization Vector (iv) is potenti
2849
string(44) "yof6cPPH4mLee6TOc0YQSrh4dvywMqxGUyjp0lV6+aM="
2950
string(44) "yof6cPPH4mLee6TOc0YQSrh4dvywMqxGUyjp0lV6+aM="
3051
bool(false)
31-
32-
Warning: openssl_decrypt(): Unknown cipher algorithm in %s on line %d
33-
bool(false)
34-
bool(false)
35-
36-
Warning: openssl_decrypt(): Unknown cipher algorithm in %s on line %d
37-
bool(false)
38-
39-
Warning: openssl_decrypt(): Unknown cipher algorithm in %s on line %d
40-
bool(false)
41-
42-
Warning: openssl_decrypt(): Unknown cipher algorithm in %s on line %d
52+
Unknown cipher algorithm
4353
bool(false)
54+
Unknown cipher algorithm
55+
Unknown cipher algorithm
56+
Unknown cipher algorithm
4457

4558
Warning: openssl_encrypt(): The authenticated tag cannot be provided for cipher that doesn not support AEAD in %s on line %d
4659
string(44) "yof6cPPH4mLee6TOc0YQSrh4dvywMqxGUyjp0lV6+aM="

‎ext/openssl/tests/openssl_encrypt_error.phpt

+6-3
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,11 @@ $object = new stdclass;
1313
$arr = array(1);
1414

1515
// wrong parameters tests
16-
var_dump(openssl_encrypt($data, $wrong, $password));
16+
try {
17+
var_dump(openssl_encrypt($data, $wrong, $password));
18+
} catch (\ValueError $e) {
19+
echo $e->getMessage() . \PHP_EOL;
20+
}
1721

1822
// invalid using of an authentication tag
1923
var_dump(openssl_encrypt($data, $method, $password, 0, $iv, $wrong));
@@ -22,8 +26,7 @@ var_dump(openssl_encrypt($data, $method, $password, 0, $iv, $wrong));
2226
var_dump(openssl_encrypt($data, $method, $password, OPENSSL_DONT_ZERO_PAD_KEY, $iv));
2327
?>
2428
--EXPECTF--
25-
Warning: openssl_encrypt(): Unknown cipher algorithm in %s on line %d
26-
bool(false)
29+
Unknown cipher algorithm
2730

2831
Warning: openssl_encrypt(): The authenticated tag cannot be provided for cipher that doesn not support AEAD in %s on line %d
2932
string(44) "iPR4HulskuaP5Z6me5uImk6BqVyJG73+63tkPauVZYk="

0 commit comments

Comments
 (0)