Return free memory more aggressively.

[radsecproxy.git] / fticks_hashmac.c

diff --git a/fticks_hashmac.c b/fticks_hashmac.c
index eb0d29b..5616291 100644 (file)
--- a/fticks_hashmac.c
+++ b/fticks_hashmac.c
@@ -1,3 +1,6 @@
+/* Copyright (c) 2011,2013, NORDUnet A/S */
+/* See LICENSE for licensing information. */
+
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ -7,11 +10,19 @@
 #include <nettle/hmac.h>
 #include "fticks_hashmac.h"
 
+/** \a HASH is an input buffer of length SHA256_DIGEST_SIZE bytes.
+    \a OUT_LEN is the size in bytes of \OUT.
+    \a OUT is an output buffer of length \a OUT_LEN. */
 static void
 _format_hash(const uint8_t *hash, size_t out_len, uint8_t *out)
 {
     int ir, iw;
 
+    if (out_len < 3) {
+        memset(out, 0, out_len);
+        return;
+    }
+
     for (ir = 0, iw = 0; iw <= out_len - 3; ir++, iw += 2)
        sprintf((char *) out + iw, "%02x", hash[ir % SHA256_DIGEST_SIZE]);
 }
@@ -46,7 +57,7 @@ _hash(const uint8_t *in,
     unless \a KEY is NULL.  If \a KEY is null \a IN is hashed with an
     ordinary cryptographic hash function such as SHA-2.
 
-    \a IN and \a KEY are NULL terminated strings.
+    \a IN and \a KEY are NUL terminated strings.
 
     \a IN is supposed to be an Ethernet MAC address and is sanitised
     by lowercasing it, removing all but [0-9a-f] and truncating it at
@@ -54,6 +65,15 @@ _hash(const uint8_t *in,
     supposedly has a praxis of tacking on SSID to the MAC address in
     Calling-Station-Id.
 
+    The resulting hash value is written to \a OUT as a NUL terminated
+    string of numbers in two-digit hexadecimal ASCII representation.
+
+    Exactly \a OUT_LEN bytes are written to \a OUT, based on the first
+    (\a OUT_LEN - 1) / 2 bytes of the hash. Note that in the case when
+    \OUT_LEN - 1 is more than two times the length of the hash, the
+    output is repeated by concatinating another hex ASCII
+    representation of the hash to the output until the buffer is full.
+
     \return 0 on success, -ENOMEM on out of memory.
 */
 int
@@ -88,3 +108,7 @@ fticks_hashmac(const uint8_t *in,
     free(in_copy);
     return 0;
 }
+
+/* Local Variables: */
+/* c-file-style: "stroustrup" */
+/* End: */