openssl/crypto
Richard Levitte 01659135a1 include/openssl/x509v3.h: restore previous stack definition arrangement
It turned out that configuration options may affect the definition and
use of diverse stacks and how they relate to the underlying types.
For example, the configuration option 'no-rfc3779' results in a build
error around STACK_OF(IPAddressFamily) and related stacks.

Previously, STACK_OF definitions were located near the definition of
the underlying type, which are also affected by configuration options,
which made this easier to maintain.  We relocate the new stack
definitions back to those locations for that reason.

We apply the same type of relocation in other header files as well, following
the general rule that it's better to use DEFINE_OR_DECLARE_STACK_OF after the
type it defines a stack for has been defined.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/11655)
2020-04-29 06:37:10 +02:00
..
aes Update copyright year 2020-04-23 13:55:52 +01:00
aria
asn1 In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
async Update copyright year 2020-04-23 13:55:52 +01:00
bf Update copyright year 2020-04-23 13:55:52 +01:00
bio Update copyright year 2020-04-23 13:55:52 +01:00
bn Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
buffer Rework how our providers are built 2019-10-10 14:12:15 +02:00
camellia Update copyright year 2020-04-23 13:55:52 +01:00
cast Update copyright year 2020-04-23 13:55:52 +01:00
chacha Update copyright year 2020-04-23 13:55:52 +01:00
cmac Update copyright year 2020-04-23 13:55:52 +01:00
cmp In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
cms In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
comp
conf In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
crmf In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ct In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
des Update copyright year 2020-04-23 13:55:52 +01:00
dh Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
dsa Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
dso In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ec Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
engine In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
err Update copyright year 2020-04-23 13:55:52 +01:00
ess In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
evp Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
ffc Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
hmac Update copyright year 2020-04-23 13:55:52 +01:00
http In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
idea Update copyright year 2020-04-23 13:55:52 +01:00
kdf Deprecate ERR_load_KDF_strings() 2019-11-12 13:30:35 +01:00
lhash Rework how our providers are built 2019-10-10 14:12:15 +02:00
md2 Update copyright year 2020-04-23 13:55:52 +01:00
md4 Update copyright year 2020-04-23 13:55:52 +01:00
md5 Update copyright year 2020-04-23 13:55:52 +01:00
mdc2 Update copyright year 2020-04-23 13:55:52 +01:00
modes Update copyright year 2020-04-23 13:55:52 +01:00
objects Update copyright year 2020-04-23 13:55:52 +01:00
ocsp In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
pem i2b_PVK_bio: don't set PEM_R_BIO_WRITE_FAILURE in case of success 2020-04-27 17:43:19 +02:00
perlasm Update copyright year 2020-04-23 13:55:52 +01:00
pkcs7 In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
pkcs12 In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
poly1305 Update copyright year 2020-04-23 13:55:52 +01:00
property Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
rand Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
rc2 Update copyright year 2020-04-23 13:55:52 +01:00
rc4 Update copyright year 2020-04-23 13:55:52 +01:00
rc5 Update copyright year 2020-04-23 13:55:52 +01:00
ripemd Update copyright year 2020-04-23 13:55:52 +01:00
rsa Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
seed Update copyright year 2020-04-23 13:55:52 +01:00
serializer Update copyright year 2020-04-23 13:55:52 +01:00
sha Update copyright year 2020-04-23 13:55:52 +01:00
siphash
sm2 Update copyright year 2020-04-23 13:55:52 +01:00
sm3 Cleanup legacy digest methods. 2019-12-18 14:46:01 +10:00
sm4
srp In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
stack Rework how our providers are built 2019-10-10 14:12:15 +02:00
store In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
ts In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
txt_db
ui In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
whrlpool Update copyright year 2020-04-23 13:55:52 +01:00
x509 include/openssl/x509v3.h: restore previous stack definition arrangement 2020-04-29 06:37:10 +02:00
alphacpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
arm64cpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
arm_arch.h
armcap.c
armv4cpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
asn1_dsa.c Fix some typos 2019-12-11 19:04:01 +01:00
bsearch.c
build.info Add common internal crypto/ modules in liblegacy.a 2020-04-09 19:49:06 +02:00
c64xpluscpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
context.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
core_algorithm.c Replumbing: make it possible for providers to specify multiple names 2019-10-03 15:47:25 +02:00
core_fetch.c CORE: pass the full algorithm definition to the method constructor 2019-11-29 20:42:12 +01:00
core_namemap.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
cpt_err.c CORE: ossl_namemap_add_names(): new function to add multiple names 2019-11-29 20:42:12 +01:00
cryptlib.c
ctype.c
cversion.c Cleanup include/openssl/opensslv.h.in 2019-11-08 16:12:57 +01:00
der_writer.c PROV: Add the beginning of a DER writing library 2020-04-07 11:16:56 +02:00
dllmain.c
ebcdic.c
ex_data.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
getenv.c
ia64cpuid.S
info.c Update copyright year 2020-04-23 13:55:52 +01:00
init.c
initthread.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
LPdir_nyi.c
LPdir_unix.c Fix a -Warray-bounds gcc warning in OPENSSL_DIR_read 2019-11-09 10:49:34 +01:00
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_sec.c Update copyright year 2020-04-23 13:55:52 +01:00
mem.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
mips_arch.h
o_dir.c
o_fips.c
o_fopen.c
o_init.c
o_str.c
o_time.c
packet.c Update copyright year 2020-04-23 13:55:52 +01:00
param_build_set.c Add EVP_PKEY_gettable_params support for accessing EVP_PKEY key data fields 2020-04-01 15:51:18 +10:00
param_build.c params: handle the modified sentinel. 2020-04-25 18:46:01 +10:00
params_from_text.c params: handle the modified sentinel. 2020-04-25 18:46:01 +10:00
params.c params: change OSSL_PARAM_set_unmodified() to operate on a params array 2020-04-25 18:46:32 +10:00
pariscid.pl Update copyright year 2020-04-23 13:55:52 +01:00
ppc_arch.h
ppccap.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
ppccpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
provider_conf.c In OpenSSL builds, declare STACK for datatypes ... 2020-04-24 16:42:46 +02:00
provider_core.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
provider_local.h
provider_predefined.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
provider.c
README.sparse_array
s390x_arch.h Update copyright year 2020-04-23 13:55:52 +01:00
s390xcap.c crypto/s390xcap.c: Add guards around the GETAUXVAL checks 2019-10-21 15:14:09 +02:00
s390xcpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
self_test_core.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
sparc_arch.h
sparccpuid.S
sparcv9cap.c Update copyright year 2020-04-23 13:55:52 +01:00
sparse_array.c
threads_none.c
threads_pthread.c Rename FIPS_MODE to FIPS_MODULE 2020-04-28 15:37:37 +02:00
threads_win.c Update copyright year 2020-04-23 13:55:52 +01:00
trace.c OSSL_STORE: add tracing 2019-11-03 18:38:23 +01:00
uid.c
vms_rms.h
x86_64cpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00
x86cpuid.pl Update copyright year 2020-04-23 13:55:52 +01:00

The sparse_array.c file contains an implementation of a sparse array that
attempts to be both space and time efficient.

The sparse array is represented using a tree structure.  Each node in the
tree contains a block of pointers to either the user supplied leaf values or
to another node.

There are a number of parameters used to define the block size:

    OPENSSL_SA_BLOCK_BITS   Specifies the number of bits covered by each block
    SA_BLOCK_MAX            Specifies the number of pointers in each block
    SA_BLOCK_MASK           Specifies a bit mask to perform modulo block size
    SA_BLOCK_MAX_LEVELS     Indicates the maximum possible height of the tree

These constants are inter-related:
    SA_BLOCK_MAX        = 2 ^ OPENSSL_SA_BLOCK_BITS
    SA_BLOCK_MASK       = SA_BLOCK_MAX - 1
    SA_BLOCK_MAX_LEVELS = number of bits in size_t divided by
                          OPENSSL_SA_BLOCK_BITS rounded up to the next multiple
                          of OPENSSL_SA_BLOCK_BITS

OPENSSL_SA_BLOCK_BITS can be defined at compile time and this overrides the
built in setting.

As a space and performance optimisation, the height of the tree is usually
less than the maximum possible height.  Only sufficient height is allocated to
accommodate the largest index added to the data structure.

The largest index used to add a value to the array determines the tree height:

        +----------------------+---------------------+
        | Largest Added Index  |   Height of Tree    |
        +----------------------+---------------------+
        | SA_BLOCK_MAX     - 1 |          1          |
        | SA_BLOCK_MAX ^ 2 - 1 |          2          |
        | SA_BLOCK_MAX ^ 3 - 1 |          3          |
        | ...                  |          ...        |
        | size_t max           | SA_BLOCK_MAX_LEVELS |
        +----------------------+---------------------+

The tree height is dynamically increased as needed based on additions.

An empty tree is represented by a NULL root pointer.  Inserting a value at
index 0 results in the allocation of a top level node full of null pointers
except for the single pointer to the user's data (N = SA_BLOCK_MAX for
brevity):

        +----+
        |Root|
        |Node|
        +-+--+
          |
          |
          |
          v
        +-+-+---+---+---+---+
        | 0 | 1 | 2 |...|N-1|
        |   |nil|nil|...|nil|
        +-+-+---+---+---+---+
          |
          |
          |
          v
        +-+--+
        |User|
        |Data|
        +----+
    Index 0


Inserting at element 2N+1 creates a new root node and pushes down the old root
node.  It then creates a second second level node to hold the pointer to the
user's new data:

        +----+
        |Root|
        |Node|
        +-+--+
          |
          |
          |
          v
        +-+-+---+---+---+---+
        | 0 | 1 | 2 |...|N-1|
        |   |nil|   |...|nil|
        +-+-+---+-+-+---+---+
          |       |
          |       +------------------+
          |                          |
          v                          v
        +-+-+---+---+---+---+      +-+-+---+---+---+---+
        | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
        |nil|   |nil|...|nil|      |nil|   |nil|...|nil|
        +-+-+---+---+---+---+      +---+-+-+---+---+---+
          |                              |
          |                              |
          |                              |
          v                              v
        +-+--+                         +-+--+
        |User|                         |User|
        |Data|                         |Data|
        +----+                         +----+
    Index 0                       Index 2N+1


The nodes themselves are allocated in a sparse manner.  Only nodes which exist
along a path from the root of the tree to an added leaf will be allocated.
The complexity is hidden and nodes are allocated on an as needed basis.
Because the data is expected to be sparse this doesn't result in a large waste
of space.

Values can be removed from the sparse array by setting their index position to
NULL.  The data structure does not attempt to reclaim nodes or reduce the
height of the tree on removal.  For example, now setting index 0 to NULL would
result in:

        +----+
        |Root|
        |Node|
        +-+--+
          |
          |
          |
          v
        +-+-+---+---+---+---+
        | 0 | 1 | 2 |...|N-1|
        |   |nil|   |...|nil|
        +-+-+---+-+-+---+---+
          |       |
          |       +------------------+
          |                          |
          v                          v
        +-+-+---+---+---+---+      +-+-+---+---+---+---+
        | 0 | 1 | 2 |...|N-1|      | 0 | 1 | 2 |...|N-1|
        |nil|nil|nil|...|nil|      |nil|   |nil|...|nil|
        +---+---+---+---+---+      +---+-+-+---+---+---+
                                         |
                                         |
                                         |
                                         v
                                       +-+--+
                                       |User|
                                       |Data|
                                       +----+
                                  Index 2N+1


Accesses to elements in the sparse array take O(log n) time where n is the
largest element.  The base of the logarithm is SA_BLOCK_MAX, so for moderately
small indices (e.g. NIDs), single level (constant time) access is achievable.
Space usage is O(minimum(m, n log(n)) where m is the number of elements in the
array.

Note: sparse arrays only include pointers to types.  Thus, SPARSE_ARRAY_OF(char)
can be used to store a string.