1 /***************************************************************************
2  *                                  _   _ ____  _
3  *  Project                     ___| | | |  _ \| |
4  *                             / __| | | | |_) | |
5  *                            | (__| |_| |  _ <| |___
6  *                             \___|\___/|_| \_\_____|
7  *
8  * Copyright (C) 2004 - 2019, Daniel Stenberg, <daniel@haxx.se>, et al.
9  *
10  * This software is licensed as described in the file COPYING, which
11  * you should have received as part of this distribution. The terms
12  * are also available at https://curl.haxx.se/docs/copyright.html.
13  *
14  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
15  * copies of the Software, and permit persons to whom the Software is
16  * furnished to do so, under the terms of the COPYING file.
17  *
18  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
19  * KIND, either express or implied.
20  *
21  ***************************************************************************/
22 
23 #include "curl_setup.h"
24 
25 #ifdef HAVE_STRERROR_R
26 #  if (!defined(HAVE_POSIX_STRERROR_R) && \
27        !defined(HAVE_GLIBC_STRERROR_R) && \
28        !defined(HAVE_VXWORKS_STRERROR_R)) || \
29       (defined(HAVE_POSIX_STRERROR_R) && defined(HAVE_VXWORKS_STRERROR_R)) || \
30       (defined(HAVE_GLIBC_STRERROR_R) && defined(HAVE_VXWORKS_STRERROR_R)) || \
31       (defined(HAVE_POSIX_STRERROR_R) && defined(HAVE_GLIBC_STRERROR_R))
32 #    error "strerror_r MUST be either POSIX, glibc or vxworks-style"
33 #  endif
34 #endif
35 
36 #include <curl/curl.h>
37 
38 #ifdef USE_LIBIDN2
39 #include <idn2.h>
40 #endif
41 
42 #ifdef USE_WINDOWS_SSPI
43 #include "curl_sspi.h"
44 #endif
45 
46 #include "strerror.h"
47 /* The last 3 #include files should be in this order */
48 #include "curl_printf.h"
49 #include "curl_memory.h"
50 #include "memdebug.h"
51 
52 #if defined(WIN32) || defined(_WIN32_WCE)
53 #define PRESERVE_WINDOWS_ERROR_CODE
54 #endif
55 
56 const char *
curl_easy_strerror(CURLcode error)57 curl_easy_strerror(CURLcode error)
58 {
59 #ifndef CURL_DISABLE_VERBOSE_STRINGS
60   switch(error) {
61   case CURLE_OK:
62     return "No error";
63 
64   case CURLE_UNSUPPORTED_PROTOCOL:
65     return "Unsupported protocol";
66 
67   case CURLE_FAILED_INIT:
68     return "Failed initialization";
69 
70   case CURLE_URL_MALFORMAT:
71     return "URL using bad/illegal format or missing URL";
72 
73   case CURLE_NOT_BUILT_IN:
74     return "A requested feature, protocol or option was not found built-in in"
75       " this libcurl due to a build-time decision.";
76 
77   case CURLE_COULDNT_RESOLVE_PROXY:
78     return "Couldn't resolve proxy name";
79 
80   case CURLE_COULDNT_RESOLVE_HOST:
81     return "Couldn't resolve host name";
82 
83   case CURLE_COULDNT_CONNECT:
84     return "Couldn't connect to server";
85 
86   case CURLE_WEIRD_SERVER_REPLY:
87     return "Weird server reply";
88 
89   case CURLE_REMOTE_ACCESS_DENIED:
90     return "Access denied to remote resource";
91 
92   case CURLE_FTP_ACCEPT_FAILED:
93     return "FTP: The server failed to connect to data port";
94 
95   case CURLE_FTP_ACCEPT_TIMEOUT:
96     return "FTP: Accepting server connect has timed out";
97 
98   case CURLE_FTP_PRET_FAILED:
99     return "FTP: The server did not accept the PRET command.";
100 
101   case CURLE_FTP_WEIRD_PASS_REPLY:
102     return "FTP: unknown PASS reply";
103 
104   case CURLE_FTP_WEIRD_PASV_REPLY:
105     return "FTP: unknown PASV reply";
106 
107   case CURLE_FTP_WEIRD_227_FORMAT:
108     return "FTP: unknown 227 response format";
109 
110   case CURLE_FTP_CANT_GET_HOST:
111     return "FTP: can't figure out the host in the PASV response";
112 
113   case CURLE_HTTP2:
114     return "Error in the HTTP2 framing layer";
115 
116   case CURLE_FTP_COULDNT_SET_TYPE:
117     return "FTP: couldn't set file type";
118 
119   case CURLE_PARTIAL_FILE:
120     return "Transferred a partial file";
121 
122   case CURLE_FTP_COULDNT_RETR_FILE:
123     return "FTP: couldn't retrieve (RETR failed) the specified file";
124 
125   case CURLE_QUOTE_ERROR:
126     return "Quote command returned error";
127 
128   case CURLE_HTTP_RETURNED_ERROR:
129     return "HTTP response code said error";
130 
131   case CURLE_WRITE_ERROR:
132     return "Failed writing received data to disk/application";
133 
134   case CURLE_UPLOAD_FAILED:
135     return "Upload failed (at start/before it took off)";
136 
137   case CURLE_READ_ERROR:
138     return "Failed to open/read local data from file/application";
139 
140   case CURLE_OUT_OF_MEMORY:
141     return "Out of memory";
142 
143   case CURLE_OPERATION_TIMEDOUT:
144     return "Timeout was reached";
145 
146   case CURLE_FTP_PORT_FAILED:
147     return "FTP: command PORT failed";
148 
149   case CURLE_FTP_COULDNT_USE_REST:
150     return "FTP: command REST failed";
151 
152   case CURLE_RANGE_ERROR:
153     return "Requested range was not delivered by the server";
154 
155   case CURLE_HTTP_POST_ERROR:
156     return "Internal problem setting up the POST";
157 
158   case CURLE_SSL_CONNECT_ERROR:
159     return "SSL connect error";
160 
161   case CURLE_BAD_DOWNLOAD_RESUME:
162     return "Couldn't resume download";
163 
164   case CURLE_FILE_COULDNT_READ_FILE:
165     return "Couldn't read a file:// file";
166 
167   case CURLE_LDAP_CANNOT_BIND:
168     return "LDAP: cannot bind";
169 
170   case CURLE_LDAP_SEARCH_FAILED:
171     return "LDAP: search failed";
172 
173   case CURLE_FUNCTION_NOT_FOUND:
174     return "A required function in the library was not found";
175 
176   case CURLE_ABORTED_BY_CALLBACK:
177     return "Operation was aborted by an application callback";
178 
179   case CURLE_BAD_FUNCTION_ARGUMENT:
180     return "A libcurl function was given a bad argument";
181 
182   case CURLE_INTERFACE_FAILED:
183     return "Failed binding local connection end";
184 
185   case CURLE_TOO_MANY_REDIRECTS :
186     return "Number of redirects hit maximum amount";
187 
188   case CURLE_UNKNOWN_OPTION:
189     return "An unknown option was passed in to libcurl";
190 
191   case CURLE_TELNET_OPTION_SYNTAX :
192     return "Malformed telnet option";
193 
194   case CURLE_GOT_NOTHING:
195     return "Server returned nothing (no headers, no data)";
196 
197   case CURLE_SSL_ENGINE_NOTFOUND:
198     return "SSL crypto engine not found";
199 
200   case CURLE_SSL_ENGINE_SETFAILED:
201     return "Can not set SSL crypto engine as default";
202 
203   case CURLE_SSL_ENGINE_INITFAILED:
204     return "Failed to initialise SSL crypto engine";
205 
206   case CURLE_SEND_ERROR:
207     return "Failed sending data to the peer";
208 
209   case CURLE_RECV_ERROR:
210     return "Failure when receiving data from the peer";
211 
212   case CURLE_SSL_CERTPROBLEM:
213     return "Problem with the local SSL certificate";
214 
215   case CURLE_SSL_CIPHER:
216     return "Couldn't use specified SSL cipher";
217 
218   case CURLE_PEER_FAILED_VERIFICATION:
219     return "SSL peer certificate or SSH remote key was not OK";
220 
221   case CURLE_SSL_CACERT_BADFILE:
222     return "Problem with the SSL CA cert (path? access rights?)";
223 
224   case CURLE_BAD_CONTENT_ENCODING:
225     return "Unrecognized or bad HTTP Content or Transfer-Encoding";
226 
227   case CURLE_LDAP_INVALID_URL:
228     return "Invalid LDAP URL";
229 
230   case CURLE_FILESIZE_EXCEEDED:
231     return "Maximum file size exceeded";
232 
233   case CURLE_USE_SSL_FAILED:
234     return "Requested SSL level failed";
235 
236   case CURLE_SSL_SHUTDOWN_FAILED:
237     return "Failed to shut down the SSL connection";
238 
239   case CURLE_SSL_CRL_BADFILE:
240     return "Failed to load CRL file (path? access rights?, format?)";
241 
242   case CURLE_SSL_ISSUER_ERROR:
243     return "Issuer check against peer certificate failed";
244 
245   case CURLE_SEND_FAIL_REWIND:
246     return "Send failed since rewinding of the data stream failed";
247 
248   case CURLE_LOGIN_DENIED:
249     return "Login denied";
250 
251   case CURLE_TFTP_NOTFOUND:
252     return "TFTP: File Not Found";
253 
254   case CURLE_TFTP_PERM:
255     return "TFTP: Access Violation";
256 
257   case CURLE_REMOTE_DISK_FULL:
258     return "Disk full or allocation exceeded";
259 
260   case CURLE_TFTP_ILLEGAL:
261     return "TFTP: Illegal operation";
262 
263   case CURLE_TFTP_UNKNOWNID:
264     return "TFTP: Unknown transfer ID";
265 
266   case CURLE_REMOTE_FILE_EXISTS:
267     return "Remote file already exists";
268 
269   case CURLE_TFTP_NOSUCHUSER:
270     return "TFTP: No such user";
271 
272   case CURLE_CONV_FAILED:
273     return "Conversion failed";
274 
275   case CURLE_CONV_REQD:
276     return "Caller must register CURLOPT_CONV_ callback options";
277 
278   case CURLE_REMOTE_FILE_NOT_FOUND:
279     return "Remote file not found";
280 
281   case CURLE_SSH:
282     return "Error in the SSH layer";
283 
284   case CURLE_AGAIN:
285     return "Socket not ready for send/recv";
286 
287   case CURLE_RTSP_CSEQ_ERROR:
288     return "RTSP CSeq mismatch or invalid CSeq";
289 
290   case CURLE_RTSP_SESSION_ERROR:
291     return "RTSP session error";
292 
293   case CURLE_FTP_BAD_FILE_LIST:
294     return "Unable to parse FTP file list";
295 
296   case CURLE_CHUNK_FAILED:
297     return "Chunk callback failed";
298 
299   case CURLE_NO_CONNECTION_AVAILABLE:
300     return "The max connection limit is reached";
301 
302   case CURLE_SSL_PINNEDPUBKEYNOTMATCH:
303     return "SSL public key does not match pinned public key";
304 
305   case CURLE_SSL_INVALIDCERTSTATUS:
306     return "SSL server certificate status verification FAILED";
307 
308   case CURLE_HTTP2_STREAM:
309     return "Stream error in the HTTP/2 framing layer";
310 
311   case CURLE_RECURSIVE_API_CALL:
312     return "API function called from within callback";
313 
314     /* error codes not used by current libcurl */
315   case CURLE_OBSOLETE20:
316   case CURLE_OBSOLETE24:
317   case CURLE_OBSOLETE29:
318   case CURLE_OBSOLETE32:
319   case CURLE_OBSOLETE40:
320   case CURLE_OBSOLETE44:
321   case CURLE_OBSOLETE46:
322   case CURLE_OBSOLETE50:
323   case CURLE_OBSOLETE51:
324   case CURLE_OBSOLETE57:
325   case CURL_LAST:
326     break;
327   }
328   /*
329    * By using a switch, gcc -Wall will complain about enum values
330    * which do not appear, helping keep this function up-to-date.
331    * By using gcc -Wall -Werror, you can't forget.
332    *
333    * A table would not have the same benefit.  Most compilers will
334    * generate code very similar to a table in any case, so there
335    * is little performance gain from a table.  And something is broken
336    * for the user's application, anyways, so does it matter how fast
337    * it _doesn't_ work?
338    *
339    * The line number for the error will be near this comment, which
340    * is why it is here, and not at the start of the switch.
341    */
342   return "Unknown error";
343 #else
344   if(!error)
345     return "No error";
346   else
347     return "Error";
348 #endif
349 }
350 
351 const char *
curl_multi_strerror(CURLMcode error)352 curl_multi_strerror(CURLMcode error)
353 {
354 #ifndef CURL_DISABLE_VERBOSE_STRINGS
355   switch(error) {
356   case CURLM_CALL_MULTI_PERFORM:
357     return "Please call curl_multi_perform() soon";
358 
359   case CURLM_OK:
360     return "No error";
361 
362   case CURLM_BAD_HANDLE:
363     return "Invalid multi handle";
364 
365   case CURLM_BAD_EASY_HANDLE:
366     return "Invalid easy handle";
367 
368   case CURLM_OUT_OF_MEMORY:
369     return "Out of memory";
370 
371   case CURLM_INTERNAL_ERROR:
372     return "Internal error";
373 
374   case CURLM_BAD_SOCKET:
375     return "Invalid socket argument";
376 
377   case CURLM_UNKNOWN_OPTION:
378     return "Unknown option";
379 
380   case CURLM_ADDED_ALREADY:
381     return "The easy handle is already added to a multi handle";
382 
383   case CURLM_RECURSIVE_API_CALL:
384     return "API function called from within callback";
385 
386   case CURLM_LAST:
387     break;
388   }
389 
390   return "Unknown error";
391 #else
392   if(error == CURLM_OK)
393     return "No error";
394   else
395     return "Error";
396 #endif
397 }
398 
399 const char *
curl_share_strerror(CURLSHcode error)400 curl_share_strerror(CURLSHcode error)
401 {
402 #ifndef CURL_DISABLE_VERBOSE_STRINGS
403   switch(error) {
404   case CURLSHE_OK:
405     return "No error";
406 
407   case CURLSHE_BAD_OPTION:
408     return "Unknown share option";
409 
410   case CURLSHE_IN_USE:
411     return "Share currently in use";
412 
413   case CURLSHE_INVALID:
414     return "Invalid share handle";
415 
416   case CURLSHE_NOMEM:
417     return "Out of memory";
418 
419   case CURLSHE_NOT_BUILT_IN:
420     return "Feature not enabled in this library";
421 
422   case CURLSHE_LAST:
423     break;
424   }
425 
426   return "CURLSHcode unknown";
427 #else
428   if(error == CURLSHE_OK)
429     return "No error";
430   else
431     return "Error";
432 #endif
433 }
434 
435 #ifdef USE_WINSOCK
436 
437 /* This function handles most / all (?) Winsock errors curl is able to produce.
438  */
439 static const char *
get_winsock_error(int err,char * buf,size_t len)440 get_winsock_error (int err, char *buf, size_t len)
441 {
442 #ifdef PRESERVE_WINDOWS_ERROR_CODE
443   DWORD old_win_err = GetLastError();
444 #endif
445   int old_errno = errno;
446   const char *p;
447 
448 #ifndef CURL_DISABLE_VERBOSE_STRINGS
449   switch(err) {
450   case WSAEINTR:
451     p = "Call interrupted";
452     break;
453   case WSAEBADF:
454     p = "Bad file";
455     break;
456   case WSAEACCES:
457     p = "Bad access";
458     break;
459   case WSAEFAULT:
460     p = "Bad argument";
461     break;
462   case WSAEINVAL:
463     p = "Invalid arguments";
464     break;
465   case WSAEMFILE:
466     p = "Out of file descriptors";
467     break;
468   case WSAEWOULDBLOCK:
469     p = "Call would block";
470     break;
471   case WSAEINPROGRESS:
472   case WSAEALREADY:
473     p = "Blocking call in progress";
474     break;
475   case WSAENOTSOCK:
476     p = "Descriptor is not a socket";
477     break;
478   case WSAEDESTADDRREQ:
479     p = "Need destination address";
480     break;
481   case WSAEMSGSIZE:
482     p = "Bad message size";
483     break;
484   case WSAEPROTOTYPE:
485     p = "Bad protocol";
486     break;
487   case WSAENOPROTOOPT:
488     p = "Protocol option is unsupported";
489     break;
490   case WSAEPROTONOSUPPORT:
491     p = "Protocol is unsupported";
492     break;
493   case WSAESOCKTNOSUPPORT:
494     p = "Socket is unsupported";
495     break;
496   case WSAEOPNOTSUPP:
497     p = "Operation not supported";
498     break;
499   case WSAEAFNOSUPPORT:
500     p = "Address family not supported";
501     break;
502   case WSAEPFNOSUPPORT:
503     p = "Protocol family not supported";
504     break;
505   case WSAEADDRINUSE:
506     p = "Address already in use";
507     break;
508   case WSAEADDRNOTAVAIL:
509     p = "Address not available";
510     break;
511   case WSAENETDOWN:
512     p = "Network down";
513     break;
514   case WSAENETUNREACH:
515     p = "Network unreachable";
516     break;
517   case WSAENETRESET:
518     p = "Network has been reset";
519     break;
520   case WSAECONNABORTED:
521     p = "Connection was aborted";
522     break;
523   case WSAECONNRESET:
524     p = "Connection was reset";
525     break;
526   case WSAENOBUFS:
527     p = "No buffer space";
528     break;
529   case WSAEISCONN:
530     p = "Socket is already connected";
531     break;
532   case WSAENOTCONN:
533     p = "Socket is not connected";
534     break;
535   case WSAESHUTDOWN:
536     p = "Socket has been shut down";
537     break;
538   case WSAETOOMANYREFS:
539     p = "Too many references";
540     break;
541   case WSAETIMEDOUT:
542     p = "Timed out";
543     break;
544   case WSAECONNREFUSED:
545     p = "Connection refused";
546     break;
547   case WSAELOOP:
548     p = "Loop??";
549     break;
550   case WSAENAMETOOLONG:
551     p = "Name too long";
552     break;
553   case WSAEHOSTDOWN:
554     p = "Host down";
555     break;
556   case WSAEHOSTUNREACH:
557     p = "Host unreachable";
558     break;
559   case WSAENOTEMPTY:
560     p = "Not empty";
561     break;
562   case WSAEPROCLIM:
563     p = "Process limit reached";
564     break;
565   case WSAEUSERS:
566     p = "Too many users";
567     break;
568   case WSAEDQUOT:
569     p = "Bad quota";
570     break;
571   case WSAESTALE:
572     p = "Something is stale";
573     break;
574   case WSAEREMOTE:
575     p = "Remote error";
576     break;
577 #ifdef WSAEDISCON  /* missing in SalfordC! */
578   case WSAEDISCON:
579     p = "Disconnected";
580     break;
581 #endif
582     /* Extended Winsock errors */
583   case WSASYSNOTREADY:
584     p = "Winsock library is not ready";
585     break;
586   case WSANOTINITIALISED:
587     p = "Winsock library not initialised";
588     break;
589   case WSAVERNOTSUPPORTED:
590     p = "Winsock version not supported";
591     break;
592 
593     /* getXbyY() errors (already handled in herrmsg):
594      * Authoritative Answer: Host not found */
595   case WSAHOST_NOT_FOUND:
596     p = "Host not found";
597     break;
598 
599     /* Non-Authoritative: Host not found, or SERVERFAIL */
600   case WSATRY_AGAIN:
601     p = "Host not found, try again";
602     break;
603 
604     /* Non recoverable errors, FORMERR, REFUSED, NOTIMP */
605   case WSANO_RECOVERY:
606     p = "Unrecoverable error in call to nameserver";
607     break;
608 
609     /* Valid name, no data record of requested type */
610   case WSANO_DATA:
611     p = "No data record of requested type";
612     break;
613 
614   default:
615     return NULL;
616   }
617 #else
618   if(!err)
619     return NULL;
620   else
621     p = "error";
622 #endif
623   strncpy(buf, p, len);
624   buf [len-1] = '\0';
625 
626   if(errno != old_errno)
627     errno = old_errno;
628 
629 #ifdef PRESERVE_WINDOWS_ERROR_CODE
630   if(old_win_err != GetLastError())
631     SetLastError(old_win_err);
632 #endif
633 
634   return buf;
635 }
636 #endif   /* USE_WINSOCK */
637 
638 /*
639  * Our thread-safe and smart strerror() replacement.
640  *
641  * The 'err' argument passed in to this function MUST be a true errno number
642  * as reported on this system. We do no range checking on the number before
643  * we pass it to the "number-to-message" conversion function and there might
644  * be systems that don't do proper range checking in there themselves.
645  *
646  * We don't do range checking (on systems other than Windows) since there is
647  * no good reliable and portable way to do it.
648  */
Curl_strerror(int err,char * buf,size_t buflen)649 const char *Curl_strerror(int err, char *buf, size_t buflen)
650 {
651 #ifdef PRESERVE_WINDOWS_ERROR_CODE
652   DWORD old_win_err = GetLastError();
653 #endif
654   int old_errno = errno;
655   char *p;
656   size_t max;
657 
658   DEBUGASSERT(err >= 0);
659 
660   max = buflen - 1;
661   *buf = '\0';
662 
663 #ifdef USE_WINSOCK
664 
665 #ifdef _WIN32_WCE
666   {
667     wchar_t wbuf[256];
668     wbuf[0] = L'\0';
669 
670     FormatMessage(FORMAT_MESSAGE_FROM_SYSTEM, NULL, err,
671                   LANG_NEUTRAL, wbuf, sizeof(wbuf)/sizeof(wchar_t), NULL);
672     wcstombs(buf, wbuf, max);
673   }
674 #else
675   /* 'sys_nerr' is the maximum errno number, it is not widely portable */
676   if(err >= 0 && err < sys_nerr)
677     strncpy(buf, strerror(err), max);
678   else {
679     if(!get_winsock_error(err, buf, max) &&
680        !FormatMessageA(FORMAT_MESSAGE_FROM_SYSTEM, NULL, err,
681                        LANG_NEUTRAL, buf, (DWORD)max, NULL))
682       msnprintf(buf, max, "Unknown error %d (%#x)", err, err);
683   }
684 #endif
685 
686 #else /* not USE_WINSOCK coming up */
687 
688 #if defined(HAVE_STRERROR_R) && defined(HAVE_POSIX_STRERROR_R)
689  /*
690   * The POSIX-style strerror_r() may set errno to ERANGE if insufficient
691   * storage is supplied via 'strerrbuf' and 'buflen' to hold the generated
692   * message string, or EINVAL if 'errnum' is not a valid error number.
693   */
694   if(0 != strerror_r(err, buf, max)) {
695     if('\0' == buf[0])
696       msnprintf(buf, max, "Unknown error %d", err);
697   }
698 #elif defined(HAVE_STRERROR_R) && defined(HAVE_GLIBC_STRERROR_R)
699  /*
700   * The glibc-style strerror_r() only *might* use the buffer we pass to
701   * the function, but it always returns the error message as a pointer,
702   * so we must copy that string unconditionally (if non-NULL).
703   */
704   {
705     char buffer[256];
706     char *msg = strerror_r(err, buffer, sizeof(buffer));
707     if(msg)
708       strncpy(buf, msg, max);
709     else
710       msnprintf(buf, max, "Unknown error %d", err);
711   }
712 #elif defined(HAVE_STRERROR_R) && defined(HAVE_VXWORKS_STRERROR_R)
713  /*
714   * The vxworks-style strerror_r() does use the buffer we pass to the function.
715   * The buffer size should be at least NAME_MAX (256)
716   */
717   {
718     char buffer[256];
719     if(OK == strerror_r(err, buffer))
720       strncpy(buf, buffer, max);
721     else
722       msnprintf(buf, max, "Unknown error %d", err);
723   }
724 #else
725   {
726     char *msg = strerror(err);
727     if(msg)
728       strncpy(buf, msg, max);
729     else
730       msnprintf(buf, max, "Unknown error %d", err);
731   }
732 #endif
733 
734 #endif /* end of ! USE_WINSOCK */
735 
736   buf[max] = '\0'; /* make sure the string is zero terminated */
737 
738   /* strip trailing '\r\n' or '\n'. */
739   p = strrchr(buf, '\n');
740   if(p && (p - buf) >= 2)
741     *p = '\0';
742   p = strrchr(buf, '\r');
743   if(p && (p - buf) >= 1)
744     *p = '\0';
745 
746   if(errno != old_errno)
747     errno = old_errno;
748 
749 #ifdef PRESERVE_WINDOWS_ERROR_CODE
750   if(old_win_err != GetLastError())
751     SetLastError(old_win_err);
752 #endif
753 
754   return buf;
755 }
756 
757 #ifdef USE_WINDOWS_SSPI
Curl_sspi_strerror(int err,char * buf,size_t buflen)758 const char *Curl_sspi_strerror(int err, char *buf, size_t buflen)
759 {
760 #ifdef PRESERVE_WINDOWS_ERROR_CODE
761   DWORD old_win_err = GetLastError();
762 #endif
763   int old_errno = errno;
764   const char *txt;
765   char *outbuf;
766   size_t outmax;
767 #ifndef CURL_DISABLE_VERBOSE_STRINGS
768   char txtbuf[80];
769   char msgbuf[256];
770   char *p, *str, *msg = NULL;
771   bool msg_formatted = FALSE;
772 #endif
773 
774   outbuf = buf;
775   outmax = buflen - 1;
776   *outbuf = '\0';
777 
778 #ifndef CURL_DISABLE_VERBOSE_STRINGS
779 
780   switch(err) {
781     case SEC_E_OK:
782       txt = "No error";
783       break;
784     case CRYPT_E_REVOKED:
785       txt = "CRYPT_E_REVOKED";
786       break;
787     case SEC_E_ALGORITHM_MISMATCH:
788       txt = "SEC_E_ALGORITHM_MISMATCH";
789       break;
790     case SEC_E_BAD_BINDINGS:
791       txt = "SEC_E_BAD_BINDINGS";
792       break;
793     case SEC_E_BAD_PKGID:
794       txt = "SEC_E_BAD_PKGID";
795       break;
796     case SEC_E_BUFFER_TOO_SMALL:
797       txt = "SEC_E_BUFFER_TOO_SMALL";
798       break;
799     case SEC_E_CANNOT_INSTALL:
800       txt = "SEC_E_CANNOT_INSTALL";
801       break;
802     case SEC_E_CANNOT_PACK:
803       txt = "SEC_E_CANNOT_PACK";
804       break;
805     case SEC_E_CERT_EXPIRED:
806       txt = "SEC_E_CERT_EXPIRED";
807       break;
808     case SEC_E_CERT_UNKNOWN:
809       txt = "SEC_E_CERT_UNKNOWN";
810       break;
811     case SEC_E_CERT_WRONG_USAGE:
812       txt = "SEC_E_CERT_WRONG_USAGE";
813       break;
814     case SEC_E_CONTEXT_EXPIRED:
815       txt = "SEC_E_CONTEXT_EXPIRED";
816       break;
817     case SEC_E_CROSSREALM_DELEGATION_FAILURE:
818       txt = "SEC_E_CROSSREALM_DELEGATION_FAILURE";
819       break;
820     case SEC_E_CRYPTO_SYSTEM_INVALID:
821       txt = "SEC_E_CRYPTO_SYSTEM_INVALID";
822       break;
823     case SEC_E_DECRYPT_FAILURE:
824       txt = "SEC_E_DECRYPT_FAILURE";
825       break;
826     case SEC_E_DELEGATION_POLICY:
827       txt = "SEC_E_DELEGATION_POLICY";
828       break;
829     case SEC_E_DELEGATION_REQUIRED:
830       txt = "SEC_E_DELEGATION_REQUIRED";
831       break;
832     case SEC_E_DOWNGRADE_DETECTED:
833       txt = "SEC_E_DOWNGRADE_DETECTED";
834       break;
835     case SEC_E_ENCRYPT_FAILURE:
836       txt = "SEC_E_ENCRYPT_FAILURE";
837       break;
838     case SEC_E_ILLEGAL_MESSAGE:
839       txt = "SEC_E_ILLEGAL_MESSAGE";
840       break;
841     case SEC_E_INCOMPLETE_CREDENTIALS:
842       txt = "SEC_E_INCOMPLETE_CREDENTIALS";
843       break;
844     case SEC_E_INCOMPLETE_MESSAGE:
845       txt = "SEC_E_INCOMPLETE_MESSAGE";
846       break;
847     case SEC_E_INSUFFICIENT_MEMORY:
848       txt = "SEC_E_INSUFFICIENT_MEMORY";
849       break;
850     case SEC_E_INTERNAL_ERROR:
851       txt = "SEC_E_INTERNAL_ERROR";
852       break;
853     case SEC_E_INVALID_HANDLE:
854       txt = "SEC_E_INVALID_HANDLE";
855       break;
856     case SEC_E_INVALID_PARAMETER:
857       txt = "SEC_E_INVALID_PARAMETER";
858       break;
859     case SEC_E_INVALID_TOKEN:
860       txt = "SEC_E_INVALID_TOKEN";
861       break;
862     case SEC_E_ISSUING_CA_UNTRUSTED:
863       txt = "SEC_E_ISSUING_CA_UNTRUSTED";
864       break;
865     case SEC_E_ISSUING_CA_UNTRUSTED_KDC:
866       txt = "SEC_E_ISSUING_CA_UNTRUSTED_KDC";
867       break;
868     case SEC_E_KDC_CERT_EXPIRED:
869       txt = "SEC_E_KDC_CERT_EXPIRED";
870       break;
871     case SEC_E_KDC_CERT_REVOKED:
872       txt = "SEC_E_KDC_CERT_REVOKED";
873       break;
874     case SEC_E_KDC_INVALID_REQUEST:
875       txt = "SEC_E_KDC_INVALID_REQUEST";
876       break;
877     case SEC_E_KDC_UNABLE_TO_REFER:
878       txt = "SEC_E_KDC_UNABLE_TO_REFER";
879       break;
880     case SEC_E_KDC_UNKNOWN_ETYPE:
881       txt = "SEC_E_KDC_UNKNOWN_ETYPE";
882       break;
883     case SEC_E_LOGON_DENIED:
884       txt = "SEC_E_LOGON_DENIED";
885       break;
886     case SEC_E_MAX_REFERRALS_EXCEEDED:
887       txt = "SEC_E_MAX_REFERRALS_EXCEEDED";
888       break;
889     case SEC_E_MESSAGE_ALTERED:
890       txt = "SEC_E_MESSAGE_ALTERED";
891       break;
892     case SEC_E_MULTIPLE_ACCOUNTS:
893       txt = "SEC_E_MULTIPLE_ACCOUNTS";
894       break;
895     case SEC_E_MUST_BE_KDC:
896       txt = "SEC_E_MUST_BE_KDC";
897       break;
898     case SEC_E_NOT_OWNER:
899       txt = "SEC_E_NOT_OWNER";
900       break;
901     case SEC_E_NO_AUTHENTICATING_AUTHORITY:
902       txt = "SEC_E_NO_AUTHENTICATING_AUTHORITY";
903       break;
904     case SEC_E_NO_CREDENTIALS:
905       txt = "SEC_E_NO_CREDENTIALS";
906       break;
907     case SEC_E_NO_IMPERSONATION:
908       txt = "SEC_E_NO_IMPERSONATION";
909       break;
910     case SEC_E_NO_IP_ADDRESSES:
911       txt = "SEC_E_NO_IP_ADDRESSES";
912       break;
913     case SEC_E_NO_KERB_KEY:
914       txt = "SEC_E_NO_KERB_KEY";
915       break;
916     case SEC_E_NO_PA_DATA:
917       txt = "SEC_E_NO_PA_DATA";
918       break;
919     case SEC_E_NO_S4U_PROT_SUPPORT:
920       txt = "SEC_E_NO_S4U_PROT_SUPPORT";
921       break;
922     case SEC_E_NO_TGT_REPLY:
923       txt = "SEC_E_NO_TGT_REPLY";
924       break;
925     case SEC_E_OUT_OF_SEQUENCE:
926       txt = "SEC_E_OUT_OF_SEQUENCE";
927       break;
928     case SEC_E_PKINIT_CLIENT_FAILURE:
929       txt = "SEC_E_PKINIT_CLIENT_FAILURE";
930       break;
931     case SEC_E_PKINIT_NAME_MISMATCH:
932       txt = "SEC_E_PKINIT_NAME_MISMATCH";
933       break;
934     case SEC_E_POLICY_NLTM_ONLY:
935       txt = "SEC_E_POLICY_NLTM_ONLY";
936       break;
937     case SEC_E_QOP_NOT_SUPPORTED:
938       txt = "SEC_E_QOP_NOT_SUPPORTED";
939       break;
940     case SEC_E_REVOCATION_OFFLINE_C:
941       txt = "SEC_E_REVOCATION_OFFLINE_C";
942       break;
943     case SEC_E_REVOCATION_OFFLINE_KDC:
944       txt = "SEC_E_REVOCATION_OFFLINE_KDC";
945       break;
946     case SEC_E_SECPKG_NOT_FOUND:
947       txt = "SEC_E_SECPKG_NOT_FOUND";
948       break;
949     case SEC_E_SECURITY_QOS_FAILED:
950       txt = "SEC_E_SECURITY_QOS_FAILED";
951       break;
952     case SEC_E_SHUTDOWN_IN_PROGRESS:
953       txt = "SEC_E_SHUTDOWN_IN_PROGRESS";
954       break;
955     case SEC_E_SMARTCARD_CERT_EXPIRED:
956       txt = "SEC_E_SMARTCARD_CERT_EXPIRED";
957       break;
958     case SEC_E_SMARTCARD_CERT_REVOKED:
959       txt = "SEC_E_SMARTCARD_CERT_REVOKED";
960       break;
961     case SEC_E_SMARTCARD_LOGON_REQUIRED:
962       txt = "SEC_E_SMARTCARD_LOGON_REQUIRED";
963       break;
964     case SEC_E_STRONG_CRYPTO_NOT_SUPPORTED:
965       txt = "SEC_E_STRONG_CRYPTO_NOT_SUPPORTED";
966       break;
967     case SEC_E_TARGET_UNKNOWN:
968       txt = "SEC_E_TARGET_UNKNOWN";
969       break;
970     case SEC_E_TIME_SKEW:
971       txt = "SEC_E_TIME_SKEW";
972       break;
973     case SEC_E_TOO_MANY_PRINCIPALS:
974       txt = "SEC_E_TOO_MANY_PRINCIPALS";
975       break;
976     case SEC_E_UNFINISHED_CONTEXT_DELETED:
977       txt = "SEC_E_UNFINISHED_CONTEXT_DELETED";
978       break;
979     case SEC_E_UNKNOWN_CREDENTIALS:
980       txt = "SEC_E_UNKNOWN_CREDENTIALS";
981       break;
982     case SEC_E_UNSUPPORTED_FUNCTION:
983       txt = "SEC_E_UNSUPPORTED_FUNCTION";
984       break;
985     case SEC_E_UNSUPPORTED_PREAUTH:
986       txt = "SEC_E_UNSUPPORTED_PREAUTH";
987       break;
988     case SEC_E_UNTRUSTED_ROOT:
989       txt = "SEC_E_UNTRUSTED_ROOT";
990       break;
991     case SEC_E_WRONG_CREDENTIAL_HANDLE:
992       txt = "SEC_E_WRONG_CREDENTIAL_HANDLE";
993       break;
994     case SEC_E_WRONG_PRINCIPAL:
995       txt = "SEC_E_WRONG_PRINCIPAL";
996       break;
997     case SEC_I_COMPLETE_AND_CONTINUE:
998       txt = "SEC_I_COMPLETE_AND_CONTINUE";
999       break;
1000     case SEC_I_COMPLETE_NEEDED:
1001       txt = "SEC_I_COMPLETE_NEEDED";
1002       break;
1003     case SEC_I_CONTEXT_EXPIRED:
1004       txt = "SEC_I_CONTEXT_EXPIRED";
1005       break;
1006     case SEC_I_CONTINUE_NEEDED:
1007       txt = "SEC_I_CONTINUE_NEEDED";
1008       break;
1009     case SEC_I_INCOMPLETE_CREDENTIALS:
1010       txt = "SEC_I_INCOMPLETE_CREDENTIALS";
1011       break;
1012     case SEC_I_LOCAL_LOGON:
1013       txt = "SEC_I_LOCAL_LOGON";
1014       break;
1015     case SEC_I_NO_LSA_CONTEXT:
1016       txt = "SEC_I_NO_LSA_CONTEXT";
1017       break;
1018     case SEC_I_RENEGOTIATE:
1019       txt = "SEC_I_RENEGOTIATE";
1020       break;
1021     case SEC_I_SIGNATURE_NEEDED:
1022       txt = "SEC_I_SIGNATURE_NEEDED";
1023       break;
1024     default:
1025       txt = "Unknown error";
1026   }
1027 
1028   if(err == SEC_E_OK)
1029     strncpy(outbuf, txt, outmax);
1030   else if(err == SEC_E_ILLEGAL_MESSAGE)
1031     msnprintf(outbuf, outmax,
1032               "SEC_E_ILLEGAL_MESSAGE (0x%08X) - This error usually occurs "
1033               "when a fatal SSL/TLS alert is received (e.g. handshake failed)."
1034               " More detail may be available in the Windows System event log.",
1035               err);
1036   else {
1037     str = txtbuf;
1038     msnprintf(txtbuf, sizeof(txtbuf), "%s (0x%08X)", txt, err);
1039     txtbuf[sizeof(txtbuf)-1] = '\0';
1040 
1041 #ifdef _WIN32_WCE
1042     {
1043       wchar_t wbuf[256];
1044       wbuf[0] = L'\0';
1045 
1046       if(FormatMessage(FORMAT_MESSAGE_FROM_SYSTEM |
1047                        FORMAT_MESSAGE_IGNORE_INSERTS,
1048                        NULL, err, LANG_NEUTRAL,
1049                        wbuf, sizeof(wbuf)/sizeof(wchar_t), NULL)) {
1050         wcstombs(msgbuf, wbuf, sizeof(msgbuf)-1);
1051         msg_formatted = TRUE;
1052       }
1053     }
1054 #else
1055     if(FormatMessageA(FORMAT_MESSAGE_FROM_SYSTEM |
1056                       FORMAT_MESSAGE_IGNORE_INSERTS,
1057                       NULL, err, LANG_NEUTRAL,
1058                       msgbuf, sizeof(msgbuf)-1, NULL)) {
1059       msg_formatted = TRUE;
1060     }
1061 #endif
1062     if(msg_formatted) {
1063       msgbuf[sizeof(msgbuf)-1] = '\0';
1064       /* strip trailing '\r\n' or '\n' */
1065       p = strrchr(msgbuf, '\n');
1066       if(p && (p - msgbuf) >= 2)
1067         *p = '\0';
1068       p = strrchr(msgbuf, '\r');
1069       if(p && (p - msgbuf) >= 1)
1070         *p = '\0';
1071       msg = msgbuf;
1072     }
1073     if(msg)
1074       msnprintf(outbuf, outmax, "%s - %s", str, msg);
1075     else
1076       strncpy(outbuf, str, outmax);
1077   }
1078 
1079 #else
1080 
1081   if(err == SEC_E_OK)
1082     txt = "No error";
1083   else
1084     txt = "Error";
1085 
1086   strncpy(outbuf, txt, outmax);
1087 
1088 #endif
1089 
1090   outbuf[outmax] = '\0';
1091 
1092   if(errno != old_errno)
1093     errno = old_errno;
1094 
1095 #ifdef PRESERVE_WINDOWS_ERROR_CODE
1096   if(old_win_err != GetLastError())
1097     SetLastError(old_win_err);
1098 #endif
1099 
1100   return outbuf;
1101 }
1102 #endif /* USE_WINDOWS_SSPI */
1103