grpc 1.26.0 → 1.30.0

data/third_party/boringssl/crypto/thread_win.c

@@ -1,256 +0,0 @@
-/* Copyright (c) 2015, Google Inc.
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
- * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
- * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
- * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
-
-#include "internal.h"
-
-#if defined(OPENSSL_WINDOWS_THREADS)
-
-OPENSSL_MSVC_PRAGMA(warning(push, 3))
-#include <windows.h>
-OPENSSL_MSVC_PRAGMA(warning(pop))
-
-#include <stdlib.h>
-#include <string.h>
-
-#include <openssl/mem.h>
-#include <openssl/type_check.h>
-
-
-OPENSSL_STATIC_ASSERT(sizeof(CRYPTO_MUTEX) >= sizeof(SRWLOCK),
-                      "CRYPTO_MUTEX is too small");
-
-static BOOL CALLBACK call_once_init(INIT_ONCE *once, void *arg, void **out) {
-  void (**init)(void) = (void (**)(void))arg;
-  (**init)();
-  return TRUE;
-}
-
-void CRYPTO_once(CRYPTO_once_t *once, void (*init)(void)) {
-  if (!InitOnceExecuteOnce(once, call_once_init, &init, NULL)) {
-    abort();
-  }
-}
-
-void CRYPTO_MUTEX_init(CRYPTO_MUTEX *lock) {
-  InitializeSRWLock((SRWLOCK *) lock);
-}
-
-void CRYPTO_MUTEX_lock_read(CRYPTO_MUTEX *lock) {
-  AcquireSRWLockShared((SRWLOCK *) lock);
-}
-
-void CRYPTO_MUTEX_lock_write(CRYPTO_MUTEX *lock) {
-  AcquireSRWLockExclusive((SRWLOCK *) lock);
-}
-
-void CRYPTO_MUTEX_unlock_read(CRYPTO_MUTEX *lock) {
-  ReleaseSRWLockShared((SRWLOCK *) lock);
-}
-
-void CRYPTO_MUTEX_unlock_write(CRYPTO_MUTEX *lock) {
-  ReleaseSRWLockExclusive((SRWLOCK *) lock);
-}
-
-void CRYPTO_MUTEX_cleanup(CRYPTO_MUTEX *lock) {
-  // SRWLOCKs require no cleanup.
-}
-
-void CRYPTO_STATIC_MUTEX_lock_read(struct CRYPTO_STATIC_MUTEX *lock) {
-  AcquireSRWLockShared(&lock->lock);
-}
-
-void CRYPTO_STATIC_MUTEX_lock_write(struct CRYPTO_STATIC_MUTEX *lock) {
-  AcquireSRWLockExclusive(&lock->lock);
-}
-
-void CRYPTO_STATIC_MUTEX_unlock_read(struct CRYPTO_STATIC_MUTEX *lock) {
-  ReleaseSRWLockShared(&lock->lock);
-}
-
-void CRYPTO_STATIC_MUTEX_unlock_write(struct CRYPTO_STATIC_MUTEX *lock) {
-  ReleaseSRWLockExclusive(&lock->lock);
-}
-
-static SRWLOCK g_destructors_lock = SRWLOCK_INIT;
-static thread_local_destructor_t g_destructors[NUM_OPENSSL_THREAD_LOCALS];
-
-static CRYPTO_once_t g_thread_local_init_once = CRYPTO_ONCE_INIT;
-static DWORD g_thread_local_key;
-static int g_thread_local_failed;
-
-static void thread_local_init(void) {
-  g_thread_local_key = TlsAlloc();
-  g_thread_local_failed = (g_thread_local_key == TLS_OUT_OF_INDEXES);
-}
-
-static void NTAPI thread_local_destructor(PVOID module, DWORD reason,
-                                          PVOID reserved) {
-  // Only free memory on |DLL_THREAD_DETACH|, not |DLL_PROCESS_DETACH|. In
-  // VS2015's debug runtime, the C runtime has been unloaded by the time
-  // |DLL_PROCESS_DETACH| runs. See https://crbug.com/575795. This is consistent
-  // with |pthread_key_create| which does not call destructors on process exit,
-  // only thread exit.
-  if (reason != DLL_THREAD_DETACH) {
-    return;
-  }
-
-  CRYPTO_once(&g_thread_local_init_once, thread_local_init);
-  if (g_thread_local_failed) {
-    return;
-  }
-
-  void **pointers = (void**) TlsGetValue(g_thread_local_key);
-  if (pointers == NULL) {
-    return;
-  }
-
-  thread_local_destructor_t destructors[NUM_OPENSSL_THREAD_LOCALS];
-
-  AcquireSRWLockExclusive(&g_destructors_lock);
-  OPENSSL_memcpy(destructors, g_destructors, sizeof(destructors));
-  ReleaseSRWLockExclusive(&g_destructors_lock);
-
-  for (unsigned i = 0; i < NUM_OPENSSL_THREAD_LOCALS; i++) {
-    if (destructors[i] != NULL) {
-      destructors[i](pointers[i]);
-    }
-  }
-
-  OPENSSL_free(pointers);
-}
-
-// Thread Termination Callbacks.
-//
-// Windows doesn't support a per-thread destructor with its TLS primitives.
-// So, we build it manually by inserting a function to be called on each
-// thread's exit. This magic is from http://www.codeproject.com/threads/tls.asp
-// and it works for VC++ 7.0 and later.
-//
-// Force a reference to _tls_used to make the linker create the TLS directory
-// if it's not already there. (E.g. if __declspec(thread) is not used). Force
-// a reference to p_thread_callback_boringssl to prevent whole program
-// optimization from discarding the variable.
-//
-// Note, in the prefixed build, |p_thread_callback_boringssl| may be a macro.
-#define STRINGIFY(x) #x
-#define EXPAND_AND_STRINGIFY(x) STRINGIFY(x)
-#ifdef _WIN64
-__pragma(comment(linker, "/INCLUDE:_tls_used"))
-__pragma(comment(
-    linker, "/INCLUDE:" EXPAND_AND_STRINGIFY(p_thread_callback_boringssl)))
-#else
-__pragma(comment(linker, "/INCLUDE:__tls_used"))
-__pragma(comment(
-    linker, "/INCLUDE:_" EXPAND_AND_STRINGIFY(p_thread_callback_boringssl)))
-#endif
-
-// .CRT$XLA to .CRT$XLZ is an array of PIMAGE_TLS_CALLBACK pointers that are
-// called automatically by the OS loader code (not the CRT) when the module is
-// loaded and on thread creation. They are NOT called if the module has been
-// loaded by a LoadLibrary() call. It must have implicitly been loaded at
-// process startup.
-//
-// By implicitly loaded, I mean that it is directly referenced by the main EXE
-// or by one of its dependent DLLs. Delay-loaded DLL doesn't count as being
-// implicitly loaded.
-//
-// See VC\crt\src\tlssup.c for reference.
-
-// The linker must not discard p_thread_callback_boringssl. (We force a
-// reference to this variable with a linker /INCLUDE:symbol pragma to ensure
-// that.) If this variable is discarded, the OnThreadExit function will never
-// be called.
-#ifdef _WIN64
-
-// .CRT section is merged with .rdata on x64 so it must be constant data.
-#pragma const_seg(".CRT$XLC")
-// When defining a const variable, it must have external linkage to be sure the
-// linker doesn't discard it.
-extern const PIMAGE_TLS_CALLBACK p_thread_callback_boringssl;
-const PIMAGE_TLS_CALLBACK p_thread_callback_boringssl = thread_local_destructor;
-// Reset the default section.
-#pragma const_seg()
-
-#else
-
-#pragma data_seg(".CRT$XLC")
-PIMAGE_TLS_CALLBACK p_thread_callback_boringssl = thread_local_destructor;
-// Reset the default section.
-#pragma data_seg()
-
-#endif  // _WIN64
-
-static void **get_thread_locals(void) {
-  // |TlsGetValue| clears the last error even on success, so that callers may
-  // distinguish it successfully returning NULL or failing. It is documented to
-  // never fail if the argument is a valid index from |TlsAlloc|, so we do not
-  // need to handle this.
-  //
-  // However, this error-mangling behavior interferes with the caller's use of
-  // |GetLastError|. In particular |SSL_get_error| queries the error queue to
-  // determine whether the caller should look at the OS's errors. To avoid
-  // destroying state, save and restore the Windows error.
-  //
-  // https://msdn.microsoft.com/en-us/library/windows/desktop/ms686812(v=vs.85).aspx
-  DWORD last_error = GetLastError();
-  void **ret = TlsGetValue(g_thread_local_key);
-  SetLastError(last_error);
-  return ret;
-}
-
-void *CRYPTO_get_thread_local(thread_local_data_t index) {
-  CRYPTO_once(&g_thread_local_init_once, thread_local_init);
-  if (g_thread_local_failed) {
-    return NULL;
-  }
-
-  void **pointers = get_thread_locals();
-  if (pointers == NULL) {
-    return NULL;
-  }
-  return pointers[index];
-}
-
-int CRYPTO_set_thread_local(thread_local_data_t index, void *value,
-                            thread_local_destructor_t destructor) {
-  CRYPTO_once(&g_thread_local_init_once, thread_local_init);
-  if (g_thread_local_failed) {
-    destructor(value);
-    return 0;
-  }
-
-  void **pointers = get_thread_locals();
-  if (pointers == NULL) {
-    pointers = OPENSSL_malloc(sizeof(void *) * NUM_OPENSSL_THREAD_LOCALS);
-    if (pointers == NULL) {
-      destructor(value);
-      return 0;
-    }
-    OPENSSL_memset(pointers, 0, sizeof(void *) * NUM_OPENSSL_THREAD_LOCALS);
-    if (TlsSetValue(g_thread_local_key, pointers) == 0) {
-      OPENSSL_free(pointers);
-      destructor(value);
-      return 0;
-    }
-  }
-
-  AcquireSRWLockExclusive(&g_destructors_lock);
-  g_destructors[index] = destructor;
-  ReleaseSRWLockExclusive(&g_destructors_lock);
-
-  pointers[index] = value;
-  return 1;
-}
-
-#endif  // OPENSSL_WINDOWS_THREADS

data/third_party/boringssl/crypto/x509/a_verify.c

@@ -1,115 +0,0 @@
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-#include <openssl/x509.h>
-
-#include <stdio.h>
-#include <time.h>
-#include <sys/types.h>
-
-#include <openssl/bn.h>
-#include <openssl/buf.h>
-#include <openssl/digest.h>
-#include <openssl/err.h>
-#include <openssl/evp.h>
-#include <openssl/mem.h>
-#include <openssl/obj.h>
-
-#include "internal.h"
-
-int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *a,
-                     ASN1_BIT_STRING *signature, void *asn, EVP_PKEY *pkey)
-{
-    EVP_MD_CTX ctx;
-    uint8_t *buf_in = NULL;
-    int ret = 0, inl = 0;
-
-    if (!pkey) {
-        OPENSSL_PUT_ERROR(X509, ERR_R_PASSED_NULL_PARAMETER);
-        return 0;
-    }
-
-    if (signature->type == V_ASN1_BIT_STRING && signature->flags & 0x7) {
-        OPENSSL_PUT_ERROR(X509, X509_R_INVALID_BIT_STRING_BITS_LEFT);
-        return 0;
-    }
-
-    EVP_MD_CTX_init(&ctx);
-
-    if (!x509_digest_verify_init(&ctx, a, pkey)) {
-        goto err;
-    }
-
-    inl = ASN1_item_i2d(asn, &buf_in, it);
-
-    if (buf_in == NULL) {
-        OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
-        goto err;
-    }
-
-    if (!EVP_DigestVerify(&ctx, signature->data, (size_t)signature->length,
-                          buf_in, inl)) {
-        OPENSSL_PUT_ERROR(X509, ERR_R_EVP_LIB);
-        goto err;
-    }
-
-    ret = 1;
-
-err:
-    OPENSSL_free(buf_in);
-    EVP_MD_CTX_cleanup(&ctx);
-    return ret;
-}

data/third_party/boringssl/crypto/x509/by_dir.c

@@ -1,458 +0,0 @@
-/* crypto/x509/by_dir.c */
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to.  The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- *    notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- *    notice, this list of conditions and the following disclaimer in the
- *    documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- *    must display the following acknowledgement:
- *    "This product includes cryptographic software written by
- *     Eric Young (eay@cryptsoft.com)"
- *    The word 'cryptographic' can be left out if the rouines from the library
- *    being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- *    the apps directory (application code) you must include an acknowledgement:
- *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed.  i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.] */
-
-#include <string.h>
-#include <sys/stat.h>
-#include <sys/types.h>
-
-#include <openssl/buf.h>
-#include <openssl/err.h>
-#include <openssl/mem.h>
-#include <openssl/thread.h>
-#include <openssl/x509.h>
-
-#if !defined(OPENSSL_TRUSTY)
-
-#include "../internal.h"
-
-typedef struct lookup_dir_hashes_st {
-    unsigned long hash;
-    int suffix;
-} BY_DIR_HASH;
-
-typedef struct lookup_dir_entry_st {
-    char *dir;
-    int dir_type;
-    STACK_OF(BY_DIR_HASH) *hashes;
-} BY_DIR_ENTRY;
-
-typedef struct lookup_dir_st {
-    BUF_MEM *buffer;
-    STACK_OF(BY_DIR_ENTRY) *dirs;
-} BY_DIR;
-
-DEFINE_STACK_OF(BY_DIR_HASH)
-DEFINE_STACK_OF(BY_DIR_ENTRY)
-
-static int dir_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl,
-                    char **ret);
-static int new_dir(X509_LOOKUP *lu);
-static void free_dir(X509_LOOKUP *lu);
-static int add_cert_dir(BY_DIR *ctx, const char *dir, int type);
-static int get_cert_by_subject(X509_LOOKUP *xl, int type, X509_NAME *name,
-                               X509_OBJECT *ret);
-static X509_LOOKUP_METHOD x509_dir_lookup = {
-    "Load certs from files in a directory",
-    new_dir,                    /* new */
-    free_dir,                   /* free */
-    NULL,                       /* init */
-    NULL,                       /* shutdown */
-    dir_ctrl,                   /* ctrl */
-    get_cert_by_subject,        /* get_by_subject */
-    NULL,                       /* get_by_issuer_serial */
-    NULL,                       /* get_by_fingerprint */
-    NULL,                       /* get_by_alias */
-};
-
-X509_LOOKUP_METHOD *X509_LOOKUP_hash_dir(void)
-{
-    return (&x509_dir_lookup);
-}
-
-static int dir_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl,
-                    char **retp)
-{
-    int ret = 0;
-    BY_DIR *ld;
-    char *dir = NULL;
-
-    ld = (BY_DIR *)ctx->method_data;
-
-    switch (cmd) {
-    case X509_L_ADD_DIR:
-        if (argl == X509_FILETYPE_DEFAULT) {
-            dir = (char *)getenv(X509_get_default_cert_dir_env());
-            if (dir)
-                ret = add_cert_dir(ld, dir, X509_FILETYPE_PEM);
-            else
-                ret = add_cert_dir(ld, X509_get_default_cert_dir(),
-                                   X509_FILETYPE_PEM);
-            if (!ret) {
-                OPENSSL_PUT_ERROR(X509, X509_R_LOADING_CERT_DIR);
-            }
-        } else
-            ret = add_cert_dir(ld, argp, (int)argl);
-        break;
-    }
-    return (ret);
-}
-
-static int new_dir(X509_LOOKUP *lu)
-{
-    BY_DIR *a;
-
-    if ((a = (BY_DIR *)OPENSSL_malloc(sizeof(BY_DIR))) == NULL)
-        return (0);
-    if ((a->buffer = BUF_MEM_new()) == NULL) {
-        OPENSSL_free(a);
-        return (0);
-    }
-    a->dirs = NULL;
-    lu->method_data = (char *)a;
-    return (1);
-}
-
-static void by_dir_hash_free(BY_DIR_HASH *hash)
-{
-    OPENSSL_free(hash);
-}
-
-static int by_dir_hash_cmp(const BY_DIR_HASH **a, const BY_DIR_HASH **b)
-{
-    if ((*a)->hash > (*b)->hash)
-        return 1;
-    if ((*a)->hash < (*b)->hash)
-        return -1;
-    return 0;
-}
-
-static void by_dir_entry_free(BY_DIR_ENTRY *ent)
-{
-    if (ent->dir)
-        OPENSSL_free(ent->dir);
-    if (ent->hashes)
-        sk_BY_DIR_HASH_pop_free(ent->hashes, by_dir_hash_free);
-    OPENSSL_free(ent);
-}
-
-static void free_dir(X509_LOOKUP *lu)
-{
-    BY_DIR *a;
-
-    a = (BY_DIR *)lu->method_data;
-    if (a->dirs != NULL)
-        sk_BY_DIR_ENTRY_pop_free(a->dirs, by_dir_entry_free);
-    if (a->buffer != NULL)
-        BUF_MEM_free(a->buffer);
-    OPENSSL_free(a);
-}
-
-static int add_cert_dir(BY_DIR *ctx, const char *dir, int type)
-{
-    size_t j, len;
-    const char *s, *ss, *p;
-
-    if (dir == NULL || !*dir) {
-        OPENSSL_PUT_ERROR(X509, X509_R_INVALID_DIRECTORY);
-        return 0;
-    }
-
-    s = dir;
-    p = s;
-    do {
-        if ((*p == ':') || (*p == '\0')) {
-            BY_DIR_ENTRY *ent;
-            ss = s;
-            s = p + 1;
-            len = p - ss;
-            if (len == 0)
-                continue;
-            for (j = 0; j < sk_BY_DIR_ENTRY_num(ctx->dirs); j++) {
-                ent = sk_BY_DIR_ENTRY_value(ctx->dirs, j);
-                if (strlen(ent->dir) == len &&
-                    strncmp(ent->dir, ss, len) == 0)
-                    break;
-            }
-            if (j < sk_BY_DIR_ENTRY_num(ctx->dirs))
-                continue;
-            if (ctx->dirs == NULL) {
-                ctx->dirs = sk_BY_DIR_ENTRY_new_null();
-                if (!ctx->dirs) {
-                    OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
-                    return 0;
-                }
-            }
-            ent = OPENSSL_malloc(sizeof(BY_DIR_ENTRY));
-            if (!ent)
-                return 0;
-            ent->dir_type = type;
-            ent->hashes = sk_BY_DIR_HASH_new(by_dir_hash_cmp);
-            ent->dir = OPENSSL_malloc(len + 1);
-            if (!ent->dir || !ent->hashes) {
-                by_dir_entry_free(ent);
-                return 0;
-            }
-            BUF_strlcpy(ent->dir, ss, len + 1);
-            if (!sk_BY_DIR_ENTRY_push(ctx->dirs, ent)) {
-                by_dir_entry_free(ent);
-                return 0;
-            }
-        }
-    } while (*p++ != '\0');
-    return 1;
-}
-
-/*
- * g_ent_hashes_lock protects the |hashes| member of all |BY_DIR_ENTRY|
- * objects.
- */
-static struct CRYPTO_STATIC_MUTEX g_ent_hashes_lock =
-    CRYPTO_STATIC_MUTEX_INIT;
-
-static int get_cert_by_subject(X509_LOOKUP *xl, int type, X509_NAME *name,
-                               X509_OBJECT *ret)
-{
-    BY_DIR *ctx;
-    union {
-        struct {
-            X509 st_x509;
-            X509_CINF st_x509_cinf;
-        } x509;
-        struct {
-            X509_CRL st_crl;
-            X509_CRL_INFO st_crl_info;
-        } crl;
-    } data;
-    int ok = 0;
-    size_t i;
-    int j, k;
-    unsigned long h;
-    unsigned long hash_array[2];
-    int hash_index;
-    BUF_MEM *b = NULL;
-    X509_OBJECT stmp, *tmp;
-    const char *postfix = "";
-
-    if (name == NULL)
-        return (0);
-
-    stmp.type = type;
-    if (type == X509_LU_X509) {
-        data.x509.st_x509.cert_info = &data.x509.st_x509_cinf;
-        data.x509.st_x509_cinf.subject = name;
-        stmp.data.x509 = &data.x509.st_x509;
-        postfix = "";
-    } else if (type == X509_LU_CRL) {
-        data.crl.st_crl.crl = &data.crl.st_crl_info;
-        data.crl.st_crl_info.issuer = name;
-        stmp.data.crl = &data.crl.st_crl;
-        postfix = "r";
-    } else {
-        OPENSSL_PUT_ERROR(X509, X509_R_WRONG_LOOKUP_TYPE);
-        goto finish;
-    }
-
-    if ((b = BUF_MEM_new()) == NULL) {
-        OPENSSL_PUT_ERROR(X509, ERR_R_BUF_LIB);
-        goto finish;
-    }
-
-    ctx = (BY_DIR *)xl->method_data;
-
-    hash_array[0] = X509_NAME_hash(name);
-    hash_array[1] = X509_NAME_hash_old(name);
-    for (hash_index = 0; hash_index < 2; ++hash_index) {
-        h = hash_array[hash_index];
-        for (i = 0; i < sk_BY_DIR_ENTRY_num(ctx->dirs); i++) {
-            BY_DIR_ENTRY *ent;
-            size_t idx;
-            BY_DIR_HASH htmp, *hent;
-            ent = sk_BY_DIR_ENTRY_value(ctx->dirs, i);
-            j = strlen(ent->dir) + 1 + 8 + 6 + 1 + 1;
-            if (!BUF_MEM_grow(b, j)) {
-                OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
-                goto finish;
-            }
-            if (type == X509_LU_CRL && ent->hashes) {
-                htmp.hash = h;
-                CRYPTO_STATIC_MUTEX_lock_read(&g_ent_hashes_lock);
-                if (sk_BY_DIR_HASH_find(ent->hashes, &idx, &htmp)) {
-                    hent = sk_BY_DIR_HASH_value(ent->hashes, idx);
-                    k = hent->suffix;
-                } else {
-                    hent = NULL;
-                    k = 0;
-                }
-                CRYPTO_STATIC_MUTEX_unlock_read(&g_ent_hashes_lock);
-            } else {
-                k = 0;
-                hent = NULL;
-            }
-            for (;;) {
-                char c = '/';
-#ifdef OPENSSL_SYS_VMS
-                c = ent->dir[strlen(ent->dir) - 1];
-                if (c != ':' && c != '>' && c != ']') {
-                    /*
-                     * If no separator is present, we assume the directory
-                     * specifier is a logical name, and add a colon.  We
-                     * really should use better VMS routines for merging
-                     * things like this, but this will do for now... --
-                     * Richard Levitte
-                     */
-                    c = ':';
-                } else {
-                    c = '\0';
-                }
-#endif
-                if (c == '\0') {
-                    /*
-                     * This is special.  When c == '\0', no directory
-                     * separator should be added.
-                     */
-                    BIO_snprintf(b->data, b->max,
-                                 "%s%08lx.%s%d", ent->dir, h, postfix, k);
-                } else {
-                    BIO_snprintf(b->data, b->max,
-                                 "%s%c%08lx.%s%d", ent->dir, c, h,
-                                 postfix, k);
-                }
-#ifndef OPENSSL_NO_POSIX_IO
-# if defined(_WIN32) && !defined(stat)
-#  define stat _stat
-# endif
-                {
-                    struct stat st;
-                    if (stat(b->data, &st) < 0)
-                        break;
-                }
-#endif
-                /* found one. */
-                if (type == X509_LU_X509) {
-                    if ((X509_load_cert_file(xl, b->data,
-                                             ent->dir_type)) == 0)
-                        break;
-                } else if (type == X509_LU_CRL) {
-                    if ((X509_load_crl_file(xl, b->data, ent->dir_type)) == 0)
-                        break;
-                }
-                /* else case will caught higher up */
-                k++;
-            }
-
-            /*
-             * we have added it to the cache so now pull it out again
-             */
-            CRYPTO_MUTEX_lock_write(&xl->store_ctx->objs_lock);
-            tmp = NULL;
-            sk_X509_OBJECT_sort(xl->store_ctx->objs);
-            if (sk_X509_OBJECT_find(xl->store_ctx->objs, &idx, &stmp)) {
-                tmp = sk_X509_OBJECT_value(xl->store_ctx->objs, idx);
-            }
-            CRYPTO_MUTEX_unlock_write(&xl->store_ctx->objs_lock);
-
-            /*
-             * If a CRL, update the last file suffix added for this
-             */
-
-            if (type == X509_LU_CRL) {
-                CRYPTO_STATIC_MUTEX_lock_write(&g_ent_hashes_lock);
-                /*
-                 * Look for entry again in case another thread added an entry
-                 * first.
-                 */
-                if (!hent) {
-                    htmp.hash = h;
-                    sk_BY_DIR_HASH_sort(ent->hashes);
-                    if (sk_BY_DIR_HASH_find(ent->hashes, &idx, &htmp))
-                        hent = sk_BY_DIR_HASH_value(ent->hashes, idx);
-                }
-                if (!hent) {
-                    hent = OPENSSL_malloc(sizeof(BY_DIR_HASH));
-                    if (hent == NULL) {
-                        CRYPTO_STATIC_MUTEX_unlock_write(&g_ent_hashes_lock);
-                        ok = 0;
-                        goto finish;
-                    }
-                    hent->hash = h;
-                    hent->suffix = k;
-                    if (!sk_BY_DIR_HASH_push(ent->hashes, hent)) {
-                        CRYPTO_STATIC_MUTEX_unlock_write(&g_ent_hashes_lock);
-                        OPENSSL_free(hent);
-                        ok = 0;
-                        goto finish;
-                    }
-                    sk_BY_DIR_HASH_sort(ent->hashes);
-                } else if (hent->suffix < k)
-                    hent->suffix = k;
-
-                CRYPTO_STATIC_MUTEX_unlock_write(&g_ent_hashes_lock);
-            }
-
-            if (tmp != NULL) {
-                ok = 1;
-                ret->type = tmp->type;
-                OPENSSL_memcpy(&ret->data, &tmp->data, sizeof(ret->data));
-                /*
-                 * If we were going to up the reference count, we would need
-                 * to do it on a perl 'type' basis
-                 */
-                /*
-                 * CRYPTO_add(&tmp->data.x509->references,1,
-                 * CRYPTO_LOCK_X509);
-                 */
-                goto finish;
-            }
-        }
-    }
- finish:
-    if (b != NULL)
-        BUF_MEM_free(b);
-    return (ok);
-}
-
-#endif  // OPENSSL_TRUSTY