md32_common.h: address compiler warning in HOST_c2l.
[oweals/openssl.git] / crypto / err / err.c
index 4f7a2ce4ac7c5988407830b220aedaff5a4e695b..292404a2fb998681283ff5775d113fff49df4929 100644 (file)
@@ -56,7 +56,7 @@
  * [including the GNU Public Licence.]
  */
 /* ====================================================================
- * Copyright (c) 1998-2000 The OpenSSL Project.  All rights reserved.
+ * Copyright (c) 1998-2001 The OpenSSL Project.  All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
 #include <stdio.h>
 #include <stdarg.h>
 #include <string.h>
+#include "cryptlib.h"
 #include <openssl/lhash.h>
 #include <openssl/crypto.h>
-#include "cryptlib.h"
 #include <openssl/buffer.h>
 #include <openssl/bio.h>
 #include <openssl/err.h>
 
-
-static LHASH *error_hash=NULL;
-static LHASH *thread_hash=NULL;
-
-/* static unsigned long err_hash(ERR_STRING_DATA *a); */
-static unsigned long err_hash(const void *a_void);
-/* static int err_cmp(ERR_STRING_DATA *a, ERR_STRING_DATA *b); */
-static int err_cmp(const void *a_void, const void *b_void);
-/* static unsigned long pid_hash(ERR_STATE *pid); */
-static unsigned long pid_hash(const void *pid_void);
-/* static int pid_cmp(ERR_STATE *a,ERR_STATE *pid); */
-static int pid_cmp(const void *a_void,const void *pid_void);
-static unsigned long get_error_values(int inc,const char **file,int *line,
-                                     const char **data,int *flags);
-
-static void ERR_STATE_free(ERR_STATE *s);
-#ifndef OPENSSL_NO_ERR
-static ERR_STRING_DATA ERR_str_libraries[]=
-       {
-{ERR_PACK(ERR_LIB_NONE,0,0)            ,"unknown library"},
-{ERR_PACK(ERR_LIB_SYS,0,0)             ,"system library"},
-{ERR_PACK(ERR_LIB_BN,0,0)              ,"bignum routines"},
-{ERR_PACK(ERR_LIB_RSA,0,0)             ,"rsa routines"},
-{ERR_PACK(ERR_LIB_DSA,0,0)             ,"dsa routines"},
-{ERR_PACK(ERR_LIB_DH,0,0)              ,"Diffie-Hellman routines"},
-{ERR_PACK(ERR_LIB_EVP,0,0)             ,"digital envelope routines"},
-{ERR_PACK(ERR_LIB_BUF,0,0)             ,"memory buffer routines"},
-{ERR_PACK(ERR_LIB_BIO,0,0)             ,"BIO routines"},
-{ERR_PACK(ERR_LIB_OBJ,0,0)             ,"object identifier routines"},
-{ERR_PACK(ERR_LIB_PEM,0,0)             ,"PEM routines"},
-{ERR_PACK(ERR_LIB_ASN1,0,0)            ,"asn1 encoding routines"},
-{ERR_PACK(ERR_LIB_X509,0,0)            ,"x509 certificate routines"},
-{ERR_PACK(ERR_LIB_CONF,0,0)            ,"configuration file routines"},
-{ERR_PACK(ERR_LIB_METH,0,0)            ,"X509 lookup 'method' routines"},
-{ERR_PACK(ERR_LIB_SSL,0,0)             ,"SSL routines"},
-{ERR_PACK(ERR_LIB_RSAREF,0,0)          ,"RSAref routines"},
-{ERR_PACK(ERR_LIB_PROXY,0,0)           ,"Proxy routines"},
-{ERR_PACK(ERR_LIB_BIO,0,0)             ,"BIO routines"},
-{ERR_PACK(ERR_LIB_PKCS7,0,0)           ,"PKCS7 routines"},
-{ERR_PACK(ERR_LIB_X509V3,0,0)          ,"X509 V3 routines"},
-{ERR_PACK(ERR_LIB_PKCS12,0,0)          ,"PKCS12 routines"},
-{ERR_PACK(ERR_LIB_RAND,0,0)            ,"random number generator"},
-{ERR_PACK(ERR_LIB_DSO,0,0)             ,"DSO support routines"},
-{ERR_PACK(ERR_LIB_ENGINE,0,0)          ,"engine routines"},
-{ERR_PACK(ERR_LIB_OCSP,0,0)            ,"OCSP routines"},
-{0,NULL},
-       };
-
-static ERR_STRING_DATA ERR_str_functs[]=
-       {
-       {ERR_PACK(0,SYS_F_FOPEN,0),             "fopen"},
-       {ERR_PACK(0,SYS_F_CONNECT,0),           "connect"},
-       {ERR_PACK(0,SYS_F_GETSERVBYNAME,0),     "getservbyname"},
-       {ERR_PACK(0,SYS_F_SOCKET,0),            "socket"}, 
-       {ERR_PACK(0,SYS_F_IOCTLSOCKET,0),       "ioctlsocket"},
-       {ERR_PACK(0,SYS_F_BIND,0),              "bind"},
-       {ERR_PACK(0,SYS_F_LISTEN,0),            "listen"},
-       {ERR_PACK(0,SYS_F_ACCEPT,0),            "accept"},
-#ifdef OPENSSL_SYS_WINDOWS
-       {ERR_PACK(0,SYS_F_WSASTARTUP,0),        "WSAstartup"},
-#endif
-       {ERR_PACK(0,SYS_F_OPENDIR,0),           "opendir"},
-       {0,NULL},
-       };
-
-static ERR_STRING_DATA ERR_str_reasons[]=
-       {
-{ERR_R_FATAL                             ,"fatal"},
-{ERR_R_SYS_LIB                         ,"system lib"},
-{ERR_R_BN_LIB                          ,"BN lib"},
-{ERR_R_RSA_LIB                         ,"RSA lib"},
-{ERR_R_DH_LIB                          ,"DH lib"},
-{ERR_R_EVP_LIB                         ,"EVP lib"},
-{ERR_R_BUF_LIB                         ,"BUF lib"},
-{ERR_R_BIO_LIB                         ,"BIO lib"},
-{ERR_R_OBJ_LIB                         ,"OBJ lib"},
-{ERR_R_PEM_LIB                         ,"PEM lib"},
-{ERR_R_X509_LIB                                ,"X509 lib"},
-{ERR_R_METH_LIB                                ,"METH lib"},
-{ERR_R_ASN1_LIB                                ,"ASN1 lib"},
-{ERR_R_CONF_LIB                                ,"CONF lib"},
-{ERR_R_SSL_LIB                         ,"SSL lib"},
-{ERR_R_PROXY_LIB                       ,"PROXY lib"},
-{ERR_R_BIO_LIB                         ,"BIO lib"},
-{ERR_R_PKCS7_LIB                       ,"PKCS7 lib"},
-{ERR_R_PKCS12_LIB                      ,"PKCS12 lib"},
-{ERR_R_MALLOC_FAILURE                  ,"Malloc failure"},
-{ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED     ,"called a function you should not call"},
-{ERR_R_PASSED_NULL_PARAMETER           ,"passed a null parameter"},
-{ERR_R_NESTED_ASN1_ERROR               ,"nested asn1 error"},
-{ERR_R_BAD_ASN1_OBJECT_HEADER          ,"bad asn1 object header"},
-{ERR_R_BAD_GET_ASN1_OBJECT_CALL                ,"bad get asn1 object call"},
-{ERR_R_EXPECTING_AN_ASN1_SEQUENCE      ,"expecting an asn1 sequence"},
-{ERR_R_ASN1_LENGTH_MISMATCH            ,"asn1 length mismatch"},
-{ERR_R_MISSING_ASN1_EOS                        ,"missing asn1 eos"},
-{ERR_R_DSO_LIB                         ,"DSO lib"},
-{ERR_R_ENGINE_LIB                      ,"ENGINE lib"},
-
-{0,NULL},
-       };
-
-
-#define NUM_SYS_STR_REASONS 127
-#define LEN_SYS_STR_REASON 32
-
-static ERR_STRING_DATA SYS_str_reasons[NUM_SYS_STR_REASONS + 1];
-/* SYS_str_reasons is filled with copies of strerror() results at
- * initialization.
- * 'errno' values up to 127 should cover all usual errors,
- * others will be displayed numerically by ERR_error_string.
- * It is crucial that we have something for each reason code
- * that occurs in ERR_str_reasons, or bogus reason strings
- * will be returned for SYSerr(), which always gets an errno
- * value and never one of those 'standard' reason codes. */
-
-static void build_SYS_str_reasons()
-       {
-       /* OPENSSL_malloc cannot be used here, use static storage instead */
-       static char strerror_tab[NUM_SYS_STR_REASONS][LEN_SYS_STR_REASON];
-       int i;
-
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR_HASH);
-
-       for (i = 1; i <= NUM_SYS_STR_REASONS; i++)
-               {
-               ERR_STRING_DATA *str = &SYS_str_reasons[i - 1];
-
-               str->error = (unsigned long)i;
-               if (str->string == NULL)
-                       {
-                       char (*dest)[LEN_SYS_STR_REASON] = &(strerror_tab[i - 1]);
-                       char *src = strerror(i);
-                       if (src != NULL)
-                               {
-                               strncpy(*dest, src, sizeof *dest);
-                               (*dest)[sizeof *dest - 1] = '\0';
-                               str->string = *dest;
-                               }
-                       }
-               if (str->string == NULL)
-                       str->string = "unknown";
-               }
-
-       /* Now we still have SYS_str_reasons[NUM_SYS_STR_REASONS] = {0, NULL},
-        * as required by ERR_load_strings. */
-
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-       }
-#endif
+static unsigned long get_error_values(int inc,int top,
+                                       const char **file,int *line,
+                                       const char **data,int *flags);
 
 #define err_clear_data(p,i) \
+       do { \
        if (((p)->err_data[i] != NULL) && \
                (p)->err_data_flags[i] & ERR_TXT_MALLOCED) \
                {  \
                OPENSSL_free((p)->err_data[i]); \
                (p)->err_data[i]=NULL; \
                } \
-       (p)->err_data_flags[i]=0;
-
-static void ERR_STATE_free(ERR_STATE *s)
-       {
-       int i;
-
-       if(s == NULL)
-           return;
-
-       for (i=0; i<ERR_NUM_ERRORS; i++)
-               {
-               err_clear_data(s,i);
-               }
-       OPENSSL_free(s);
-       }
-
-void ERR_load_ERR_strings(void)
-       {
-       static int init=1;
-
-       if (init)
-               {
-               CRYPTO_w_lock(CRYPTO_LOCK_ERR);
-               if (init == 0)
-                       {
-                       CRYPTO_w_unlock(CRYPTO_LOCK_ERR);
-                       return;
-                       }
-               CRYPTO_w_unlock(CRYPTO_LOCK_ERR);
-
-#ifndef OPENSSL_NO_ERR
-               ERR_load_strings(0,ERR_str_libraries);
-               ERR_load_strings(0,ERR_str_reasons);
-               ERR_load_strings(ERR_LIB_SYS,ERR_str_functs);
-               build_SYS_str_reasons();
-               ERR_load_strings(ERR_LIB_SYS,SYS_str_reasons);
-#endif
-               init=0;
-               }
-       }
-
-void ERR_load_strings(int lib, ERR_STRING_DATA *str)
-       {
-       if (error_hash == NULL)
-               {
-               CRYPTO_w_lock(CRYPTO_LOCK_ERR_HASH);
-               error_hash=lh_new(err_hash, err_cmp);
-               if (error_hash == NULL)
-                       {
-                       CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-                       return;
-                       }
-               CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-
-               ERR_load_ERR_strings();
-               }
-
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR_HASH);
-       while (str->error)
-               {
-               str->error|=ERR_PACK(lib,0,0);
-               lh_insert(error_hash,str);
-               str++;
-               }
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-       }
-
-void ERR_free_strings(void)
-       {
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR);
-
-       if (error_hash != NULL)
-               {
-               lh_free(error_hash);
-               error_hash=NULL;
-               }
-
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR);
-       }
-
-/********************************************************/
+       (p)->err_data_flags[i]=0; \
+       } while(0)
+
+#define err_clear(p,i) \
+       do { \
+       (p)->err_flags[i]=0; \
+       (p)->err_buffer[i]=0; \
+       err_clear_data(p,i); \
+       (p)->err_file[i]=NULL; \
+       (p)->err_line[i]= -1; \
+       } while(0)
 
 void ERR_put_error(int lib, int func, int reason, const char *file,
             int line)
@@ -387,6 +172,7 @@ void ERR_put_error(int lib, int func, int reason, const char *file,
        es->top=(es->top+1)%ERR_NUM_ERRORS;
        if (es->top == es->bottom)
                es->bottom=(es->bottom+1)%ERR_NUM_ERRORS;
+       es->err_flags[es->top]=0;
        es->err_buffer[es->top]=ERR_PACK(lib,func,reason);
        es->err_file[es->top]=file;
        es->err_line[es->top]=line;
@@ -395,49 +181,54 @@ void ERR_put_error(int lib, int func, int reason, const char *file,
 
 void ERR_clear_error(void)
        {
+       int i;
        ERR_STATE *es;
 
        es=ERR_get_state();
 
-#if 0
-       /* hmm... is this needed */
        for (i=0; i<ERR_NUM_ERRORS; i++)
                {
-               es->err_buffer[i]=0;
-               es->err_file[i]=NULL;
-               es->err_line[i]= -1;
-               err_clear_data(es,i);
+               err_clear(es,i);
                }
-#endif
        es->top=es->bottom=0;
        }
 
 
 unsigned long ERR_get_error(void)
-       { return(get_error_values(1,NULL,NULL,NULL,NULL)); }
+       { return(get_error_values(1,0,NULL,NULL,NULL,NULL)); }
 
 unsigned long ERR_get_error_line(const char **file,
             int *line)
-       { return(get_error_values(1,file,line,NULL,NULL)); }
+       { return(get_error_values(1,0,file,line,NULL,NULL)); }
 
 unsigned long ERR_get_error_line_data(const char **file, int *line,
             const char **data, int *flags)
-       { return(get_error_values(1,file,line,
-            data,flags)); }
+       { return(get_error_values(1,0,file,line,data,flags)); }
+
 
 unsigned long ERR_peek_error(void)
-       { return(get_error_values(0,NULL,NULL,NULL,NULL)); }
+       { return(get_error_values(0,0,NULL,NULL,NULL,NULL)); }
 
-unsigned long ERR_peek_error_line(const char **file,
-            int *line)
-       { return(get_error_values(0,file,line,NULL,NULL)); }
+unsigned long ERR_peek_error_line(const char **file, int *line)
+       { return(get_error_values(0,0,file,line,NULL,NULL)); }
 
 unsigned long ERR_peek_error_line_data(const char **file, int *line,
             const char **data, int *flags)
-       { return(get_error_values(0,file,line,
-            data,flags)); }
+       { return(get_error_values(0,0,file,line,data,flags)); }
+
+
+unsigned long ERR_peek_last_error(void)
+       { return(get_error_values(0,1,NULL,NULL,NULL,NULL)); }
+
+unsigned long ERR_peek_last_error_line(const char **file, int *line)
+       { return(get_error_values(0,1,file,line,NULL,NULL)); }
+
+unsigned long ERR_peek_last_error_line_data(const char **file, int *line,
+            const char **data, int *flags)
+       { return(get_error_values(0,1,file,line,data,flags)); }
 
-static unsigned long get_error_values(int inc, const char **file, int *line,
+
+static unsigned long get_error_values(int inc, int top, const char **file, int *line,
             const char **data, int *flags)
        {       
        int i=0;
@@ -446,8 +237,21 @@ static unsigned long get_error_values(int inc, const char **file, int *line,
 
        es=ERR_get_state();
 
-       if (es->bottom == es->top) return(0);
-       i=(es->bottom+1)%ERR_NUM_ERRORS;
+       if (inc && top)
+               {
+               if (file) *file = "";
+               if (line) *line = 0;
+               if (data) *data = "";
+               if (flags) *flags = 0;
+                       
+               return ERR_R_INTERNAL_ERROR;
+               }
+
+       if (es->bottom == es->top) return 0;
+       if (top)
+               i=es->top;                       /* last error */
+       else
+               i=(es->bottom+1)%ERR_NUM_ERRORS; /* first error */
 
        ret=es->err_buffer[i];
        if (inc)
@@ -470,7 +274,14 @@ static unsigned long get_error_values(int inc, const char **file, int *line,
                        }
                }
 
-       if (data != NULL)
+       if (data == NULL)
+               {
+               if (inc)
+                       {
+                       err_clear_data(es, i);
+                       }
+               }
+       else
                {
                if (es->err_data[i] == NULL)
                        {
@@ -483,271 +294,7 @@ static unsigned long get_error_values(int inc, const char **file, int *line,
                        if (flags != NULL) *flags=es->err_data_flags[i];
                        }
                }
-       return(ret);
-       }
-
-void ERR_error_string_n(unsigned long e, char *buf, size_t len)
-       {
-       char lsbuf[64], fsbuf[64], rsbuf[64];
-       const char *ls,*fs,*rs;
-       unsigned long l,f,r;
-
-       l=ERR_GET_LIB(e);
-       f=ERR_GET_FUNC(e);
-       r=ERR_GET_REASON(e);
-
-       ls=ERR_lib_error_string(e);
-       fs=ERR_func_error_string(e);
-       rs=ERR_reason_error_string(e);
-
-       if (ls == NULL) 
-               BIO_snprintf(lsbuf, sizeof(lsbuf), "lib(%lu)", l);
-       if (fs == NULL)
-               BIO_snprintf(fsbuf, sizeof(fsbuf), "func(%lu)", f);
-       if (rs == NULL)
-               BIO_snprintf(rsbuf, sizeof(rsbuf), "reason(%lu)", r);
-
-       BIO_snprintf(buf, len,"error:%08lX:%s:%s:%s", e, ls?ls:lsbuf, 
-               fs?fs:fsbuf, rs?rs:rsbuf);
-       if (strlen(buf) == len-1)
-               {
-               /* output may be truncated; make sure we always have 5 
-                * colon-separated fields, i.e. 4 colons ... */
-#define NUM_COLONS 4
-               if (len > NUM_COLONS) /* ... if possible */
-                       {
-                       int i;
-                       char *s = buf;
-                       
-                       for (i = 0; i < NUM_COLONS; i++)
-                               {
-                               char *colon = strchr(s, ':');
-                               if (colon == NULL || colon > &buf[len-1] - NUM_COLONS + i)
-                                       {
-                                       /* set colon no. i at last possible position
-                                        * (buf[len-1] is the terminating 0)*/
-                                       colon = &buf[len-1] - NUM_COLONS + i;
-                                       *colon = ':';
-                                       }
-                               s = colon + 1;
-                               }
-                       }
-               }
-       }
-
-/* BAD for multi-threading: uses a local buffer if ret == NULL */
-/* ERR_error_string_n should be used instead for ret != NULL
- * as ERR_error_string cannot know how large the buffer is */
-char *ERR_error_string(unsigned long e, char *ret)
-       {
-       static char buf[256];
-
-       if (ret == NULL) ret=buf;
-       ERR_error_string_n(e, ret, 256);
-
-       return(ret);
-       }
-
-LHASH *ERR_get_string_table(void)
-       {
-       return(error_hash);
-       }
-
-/* not thread-safe */
-LHASH *ERR_get_err_state_table(void)
-       {
-       return(thread_hash);
-       }
-
-const char *ERR_lib_error_string(unsigned long e)
-       {
-       ERR_STRING_DATA d,*p=NULL;
-       unsigned long l;
-
-       l=ERR_GET_LIB(e);
-
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR_HASH);
-
-       if (error_hash != NULL)
-               {
-               d.error=ERR_PACK(l,0,0);
-               p=(ERR_STRING_DATA *)lh_retrieve(error_hash,&d);
-               }
-
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-
-       return((p == NULL)?NULL:p->string);
-       }
-
-const char *ERR_func_error_string(unsigned long e)
-       {
-       ERR_STRING_DATA d,*p=NULL;
-       unsigned long l,f;
-
-       l=ERR_GET_LIB(e);
-       f=ERR_GET_FUNC(e);
-
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR_HASH);
-
-       if (error_hash != NULL)
-               {
-               d.error=ERR_PACK(l,f,0);
-               p=(ERR_STRING_DATA *)lh_retrieve(error_hash,&d);
-               }
-
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-
-       return((p == NULL)?NULL:p->string);
-       }
-
-const char *ERR_reason_error_string(unsigned long e)
-       {
-       ERR_STRING_DATA d,*p=NULL;
-       unsigned long l,r;
-
-       l=ERR_GET_LIB(e);
-       r=ERR_GET_REASON(e);
-
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR_HASH);
-
-       if (error_hash != NULL)
-               {
-               d.error=ERR_PACK(l,0,r);
-               p=(ERR_STRING_DATA *)lh_retrieve(error_hash,&d);
-               if (p == NULL)
-                       {
-                       d.error=ERR_PACK(0,0,r);
-                       p=(ERR_STRING_DATA *)lh_retrieve(error_hash,&d);
-                       }
-               }
-
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR_HASH);
-
-       return((p == NULL)?NULL:p->string);
-       }
-
-/* static unsigned long err_hash(ERR_STRING_DATA *a) */
-static unsigned long err_hash(const void *a_void)
-       {
-       unsigned long ret,l;
-
-       l=((ERR_STRING_DATA *)a_void)->error;
-       ret=l^ERR_GET_LIB(l)^ERR_GET_FUNC(l);
-       return(ret^ret%19*13);
-       }
-
-/* static int err_cmp(ERR_STRING_DATA *a, ERR_STRING_DATA *b) */
-static int err_cmp(const void *a_void, const void *b_void)
-       {
-       return((int)(((ERR_STRING_DATA *)a_void)->error -
-                       ((ERR_STRING_DATA *)b_void)->error));
-       }
-
-/* static unsigned long pid_hash(ERR_STATE *a) */
-static unsigned long pid_hash(const void *a_void)
-       {
-       return(((ERR_STATE *)a_void)->pid*13);
-       }
-
-/* static int pid_cmp(ERR_STATE *a, ERR_STATE *b) */
-static int pid_cmp(const void *a_void, const void *b_void)
-       {
-       return((int)((long)((ERR_STATE *)a_void)->pid -
-                       (long)((ERR_STATE *)b_void)->pid));
-       }
-
-void ERR_remove_state(unsigned long pid)
-       {
-       ERR_STATE *p = NULL,tmp;
-
-       if (thread_hash == NULL)
-               return;
-       if (pid == 0)
-               pid=(unsigned long)CRYPTO_thread_id();
-       tmp.pid=pid;
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR);
-       if (thread_hash)
-               {
-               p=(ERR_STATE *)lh_delete(thread_hash,&tmp);
-               if (lh_num_items(thread_hash) == 0)
-                       {
-                       /* make sure we don't leak memory */
-                       lh_free(thread_hash);
-                       thread_hash = NULL;
-                       }
-               }
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR);
-
-       if (p != NULL) ERR_STATE_free(p);
-       }
-
-ERR_STATE *ERR_get_state(void)
-       {
-       static ERR_STATE fallback;
-       ERR_STATE *ret=NULL,tmp,*tmpp=NULL;
-       int thread_state_exists;
-       int i;
-       unsigned long pid;
-
-       pid=(unsigned long)CRYPTO_thread_id();
-
-       CRYPTO_w_lock(CRYPTO_LOCK_ERR);
-       if (thread_hash != NULL)
-               {
-               tmp.pid=pid;
-               ret=(ERR_STATE *)lh_retrieve(thread_hash,&tmp);
-               }
-       CRYPTO_w_unlock(CRYPTO_LOCK_ERR);
-
-       /* ret == the error state, if NULL, make a new one */
-       if (ret == NULL)
-               {
-               ret=(ERR_STATE *)OPENSSL_malloc(sizeof(ERR_STATE));
-               if (ret == NULL) return(&fallback);
-               ret->pid=pid;
-               ret->top=0;
-               ret->bottom=0;
-               for (i=0; i<ERR_NUM_ERRORS; i++)
-                       {
-                       ret->err_data[i]=NULL;
-                       ret->err_data_flags[i]=0;
-                       }
-
-               CRYPTO_w_lock(CRYPTO_LOCK_ERR);
-
-               /* no entry yet in thread_hash for current thread -
-                * thus, it may have changed since we last looked at it */
-               if (thread_hash == NULL)
-                       thread_hash = lh_new(pid_hash, pid_cmp);
-               if (thread_hash == NULL)
-                       thread_state_exists = 0; /* allocation error */
-               else
-                       {
-                       tmpp=(ERR_STATE *)lh_insert(thread_hash,ret);
-                       thread_state_exists = 1;
-                       }
-
-               CRYPTO_w_unlock(CRYPTO_LOCK_ERR);
-
-               if (!thread_state_exists)
-                       {
-                       ERR_STATE_free(ret); /* could not insert it */
-                       return(&fallback);
-                       }
-               
-               if (tmpp != NULL) /* old entry - should not happen */
-                       {
-                       ERR_STATE_free(tmpp);
-                       }
-               }
-       return(ret);
-       }
-
-int ERR_get_next_error_library(void)
-       {
-       static int value=ERR_LIB_USER;
-
-       return(value++);
+       return ret;
        }
 
 void ERR_set_error_data(char *data, int flags)
@@ -761,8 +308,9 @@ void ERR_set_error_data(char *data, int flags)
        if (i == 0)
                i=ERR_NUM_ERRORS-1;
 
+       err_clear_data(es,i);
        es->err_data[i]=data;
-       es->err_data_flags[es->top]=flags;
+       es->err_data_flags[i]=flags;
        }
 
 void ERR_add_error_data(int num, ...)
@@ -771,7 +319,7 @@ void ERR_add_error_data(int num, ...)
        int i,n,s;
        char *str,*p,*a;
 
-       s=64;
+       s=80;
        str=OPENSSL_malloc(s+1);
        if (str == NULL) return;
        str[0]='\0';
@@ -792,16 +340,77 @@ void ERR_add_error_data(int num, ...)
                                if (p == NULL)
                                        {
                                        OPENSSL_free(str);
-                                       return;
+                                       goto err;
                                        }
                                else
                                        str=p;
                                }
-                       strcat(str,a);
+                       BUF_strlcat(str,a,(size_t)s+1);
                        }
                }
        ERR_set_error_data(str,ERR_TXT_MALLOCED|ERR_TXT_STRING);
 
+err:
        va_end(args);
        }
 
+int ERR_set_mark(void)
+       {
+       ERR_STATE *es;
+
+       es=ERR_get_state();
+
+       if (es->bottom == es->top) return 0;
+       es->err_flags[es->top]|=ERR_FLAG_MARK;
+       return 1;
+       }
+
+int ERR_pop_to_mark(void)
+       {
+       ERR_STATE *es;
+
+       es=ERR_get_state();
+
+       while(es->bottom != es->top
+               && (es->err_flags[es->top] & ERR_FLAG_MARK) == 0)
+               {
+               err_clear(es,es->top);
+               es->top-=1;
+               if (es->top == -1) es->top=ERR_NUM_ERRORS-1;
+               }
+               
+       if (es->bottom == es->top) return 0;
+       es->err_flags[es->top]&=~ERR_FLAG_MARK;
+       return 1;
+       }
+
+#ifdef OPENSSL_FIPS
+
+static ERR_STATE *fget_state(void)
+       {
+       static ERR_STATE fstate;
+       return &fstate;
+       }
+
+ERR_STATE *(*get_state_func)(void) = fget_state;
+void (*remove_state_func)(unsigned long pid);
+
+ERR_STATE *ERR_get_state(void)
+       {
+       return get_state_func();
+       }
+
+void int_ERR_set_state_func(ERR_STATE *(*get_func)(void),
+                               void (*remove_func)(unsigned long pid))
+       {
+       get_state_func = get_func;
+       remove_state_func = remove_func;
+       }
+
+void ERR_remove_state(unsigned long pid)
+       {
+       if (remove_state_func)
+               remove_state_func(pid);
+       }
+
+#endif