a505a6cd27
SSL functions like OpenSSL_add_all_digests should be invoked at very beginning as they are not MT safe. If not we might meet double free exception as following: #0 0x00007f23ddd71c37 in raise () from /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f23ddd75028 in abort () from /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f23dddae2a4 in ?? () from /lib/x86_64-linux-gnu/libc.so.6 #3 0x00007f23dddba55e in ?? () from /lib/x86_64-linux-gnu/libc.so.6 #4 0x00007f23dc6ecfcd in CRYPTO_free () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 #5 0x00007f23dc6ef8d1 in OBJ_NAME_add () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 #6 0x00007f23dc77dcd8 in EVP_add_digest () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 #7 0x00007f23dc782321 in OpenSSL_add_all_digests () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 #8 0x00007f23c781da28 in winpr_openssl_get_evp_md (md=4) at /home/zihao/workspace/zihao_FreeRDP/winpr/libwinpr/crypto/hash.c:52 #9 0x00007f23c781dccb in winpr_Digest_Init (ctx=0x7f22d064d470, md=<optimized out>) at /home/zihao/workspace/zihao_FreeRDP/winpr/libwinpr/crypto/hash.c:344 #10 0x00007f23d486139b in security_salted_mac_signature (rdp=0x7f23859f5a20, data=0x7f238542d4fb "\004\204\022\004", length=4743, encryption=<optimized out>, output=0x7 at /home/zihao/workspace/zihao_FreeRDP/libfreerdp/core/security.c:378 #11 0x00007f23d488d73f in fastpath_send_update_pdu (fastpath=<optimized out>, updateCode=4 '\004', s=0x7f23859f5f40, skipCompression=true) at /home/zihao/workspace/zihao_FreeRDP/libfreerdp/core/fastpath.c:1076 #12 0x00007f23d4891c4f in update_send_surface_frame_bits (context=0x7f23859f5540, cmd=0x7f22b2ffcc80, first=true, last=true, frameId=6) at /home/zihao/workspace/zihao_FreeRDP/libfreerdp/core/update.c:1041 Related reports: https://rt.openssl.org/Ticket/Display.html?id=2216&user=guest&pass=guest
50 lines
1.5 KiB
C
50 lines
1.5 KiB
C
|
|
#include <winpr/crt.h>
|
|
#include <winpr/print.h>
|
|
#include <winpr/crypto.h>
|
|
#include <winpr/ssl.h>
|
|
#include <winpr/wlog.h>
|
|
|
|
static const char* SECRET_PASSWORD_TEST = "MySecretPassword123!";
|
|
|
|
int TestCryptoProtectMemory(int argc, char* argv[])
|
|
{
|
|
int cbPlainText;
|
|
int cbCipherText;
|
|
char* pPlainText;
|
|
BYTE* pCipherText;
|
|
pPlainText = (char*) SECRET_PASSWORD_TEST;
|
|
cbPlainText = strlen(pPlainText) + 1;
|
|
cbCipherText = cbPlainText + (CRYPTPROTECTMEMORY_BLOCK_SIZE - (cbPlainText % CRYPTPROTECTMEMORY_BLOCK_SIZE));
|
|
printf("cbPlainText: %d cbCipherText: %d\n", cbPlainText, cbCipherText);
|
|
pCipherText = (BYTE*) malloc(cbCipherText);
|
|
if (!pCipherText)
|
|
{
|
|
printf("Unable to allocate memory\n");
|
|
return -1;
|
|
}
|
|
CopyMemory(pCipherText, pPlainText, cbPlainText);
|
|
ZeroMemory(&pCipherText[cbPlainText], (cbCipherText - cbPlainText));
|
|
winpr_InitializeSSL(WINPR_SSL_INIT_DEFAULT);
|
|
|
|
if (!CryptProtectMemory(pCipherText, cbCipherText, CRYPTPROTECTMEMORY_SAME_PROCESS))
|
|
{
|
|
printf("CryptProtectMemory failure\n");
|
|
return -1;
|
|
}
|
|
|
|
printf("PlainText: %s (cbPlainText = %d, cbCipherText = %d)\n", pPlainText, cbPlainText, cbCipherText);
|
|
winpr_HexDump("crypto.test", WLOG_DEBUG, pCipherText, cbCipherText);
|
|
|
|
if (!CryptUnprotectMemory(pCipherText, cbCipherText, CRYPTPROTECTMEMORY_SAME_PROCESS))
|
|
{
|
|
printf("CryptUnprotectMemory failure\n");
|
|
return -1;
|
|
}
|
|
|
|
printf("Decrypted CipherText: %s\n", pCipherText);
|
|
SecureZeroMemory(pCipherText, cbCipherText);
|
|
free(pCipherText);
|
|
return 0;
|
|
}
|