// Copyright 2014 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "trunks/error_codes.h"

#include <sstream>
#include <string>

#include <base/logging.h>

namespace {

// Masks out the P and N bits (see TPM 2.0 Part 2 Table 14).
const trunks::TPM_RC kFormatOneErrorMask = 0x0BF;
// Selects just the N bits that identify the subject index.
const trunks::TPM_RC kFormatOneSubjectMask = 0x700;
const trunks::TPM_RC kLayerMask = 0xFFFFF000;

// Returns a known error code or the empty string if unknown.
std::string GetErrorStringInternal(trunks::TPM_RC error) {
  switch (error) {
    case trunks::TPM_RC_SUCCESS: return "TPM_RC_SUCCESS";
    case trunks::TPM_RC_BAD_TAG: return "TPM_RC_BAD_TAG";
    case trunks::TPM_RC_INITIALIZE: return "TPM_RC_INITIALIZE";
    case trunks::TPM_RC_FAILURE: return "TPM_RC_FAILURE";
    case trunks::TPM_RC_SEQUENCE: return "TPM_RC_SEQUENCE";
    case trunks::TPM_RC_PRIVATE: return "TPM_RC_PRIVATE";
    case trunks::TPM_RC_HMAC: return "TPM_RC_HMAC";
    case trunks::TPM_RC_DISABLED: return "TPM_RC_DISABLED";
    case trunks::TPM_RC_EXCLUSIVE: return "TPM_RC_EXCLUSIVE";
    case trunks::TPM_RC_AUTH_TYPE: return "TPM_RC_AUTH_TYPE";
    case trunks::TPM_RC_AUTH_MISSING: return "TPM_RC_AUTH_MISSING";
    case trunks::TPM_RC_POLICY: return "TPM_RC_POLICY";
    case trunks::TPM_RC_PCR: return "TPM_RC_PCR";
    case trunks::TPM_RC_PCR_CHANGED: return "TPM_RC_PCR_CHANGED";
    case trunks::TPM_RC_UPGRADE: return "TPM_RC_UPGRADE";
    case trunks::TPM_RC_TOO_MANY_CONTEXTS: return "TPM_RC_TOO_MANY_CONTEXTS";
    case trunks::TPM_RC_AUTH_UNAVAILABLE: return "TPM_RC_AUTH_UNAVAILABLE";
    case trunks::TPM_RC_REBOOT: return "TPM_RC_REBOOT";
    case trunks::TPM_RC_UNBALANCED: return "TPM_RC_UNBALANCED";
    case trunks::TPM_RC_COMMAND_SIZE: return "TPM_RC_COMMAND_SIZE";
    case trunks::TPM_RC_COMMAND_CODE: return "TPM_RC_COMMAND_CODE";
    case trunks::TPM_RC_AUTHSIZE: return "TPM_RC_AUTHSIZE";
    case trunks::TPM_RC_AUTH_CONTEXT: return "TPM_RC_AUTH_CONTEXT";
    case trunks::TPM_RC_NV_RANGE: return "TPM_RC_NV_RANGE";
    case trunks::TPM_RC_NV_SIZE: return "TPM_RC_NV_SIZE";
    case trunks::TPM_RC_NV_LOCKED: return "TPM_RC_NV_LOCKED";
    case trunks::TPM_RC_NV_AUTHORIZATION: return "TPM_RC_NV_AUTHORIZATION";
    case trunks::TPM_RC_NV_UNINITIALIZED: return "TPM_RC_NV_UNINITIALIZED";
    case trunks::TPM_RC_NV_SPACE: return "TPM_RC_NV_SPACE";
    case trunks::TPM_RC_NV_DEFINED: return "TPM_RC_NV_DEFINED";
    case trunks::TPM_RC_BAD_CONTEXT: return "TPM_RC_BAD_CONTEXT";
    case trunks::TPM_RC_CPHASH: return "TPM_RC_CPHASH";
    case trunks::TPM_RC_PARENT: return "TPM_RC_PARENT";
    case trunks::TPM_RC_NEEDS_TEST: return "TPM_RC_NEEDS_TEST";
    case trunks::TPM_RC_NO_RESULT: return "TPM_RC_NO_RESULT";
    case trunks::TPM_RC_SENSITIVE: return "TPM_RC_SENSITIVE";
    case trunks::TPM_RC_ASYMMETRIC: return "TPM_RC_ASYMMETRIC";
    case trunks::TPM_RC_ATTRIBUTES: return "TPM_RC_ATTRIBUTES";
    case trunks::TPM_RC_HASH: return "TPM_RC_HASH";
    case trunks::TPM_RC_VALUE: return "TPM_RC_VALUE";
    case trunks::TPM_RC_HIERARCHY: return "TPM_RC_HIERARCHY";
    case trunks::TPM_RC_KEY_SIZE: return "TPM_RC_KEY_SIZE";
    case trunks::TPM_RC_MGF: return "TPM_RC_MGF";
    case trunks::TPM_RC_MODE: return "TPM_RC_MODE";
    case trunks::TPM_RC_TYPE: return "TPM_RC_TYPE";
    case trunks::TPM_RC_HANDLE: return "TPM_RC_HANDLE";
    case trunks::TPM_RC_KDF: return "TPM_RC_KDF";
    case trunks::TPM_RC_RANGE: return "TPM_RC_RANGE";
    case trunks::TPM_RC_AUTH_FAIL: return "TPM_RC_AUTH_FAIL";
    case trunks::TPM_RC_NONCE: return "TPM_RC_NONCE";
    case trunks::TPM_RC_PP: return "TPM_RC_PP";
    case trunks::TPM_RC_SCHEME: return "TPM_RC_SCHEME";
    case trunks::TPM_RC_SIZE: return "TPM_RC_SIZE";
    case trunks::TPM_RC_SYMMETRIC: return "TPM_RC_SYMMETRIC";
    case trunks::TPM_RC_TAG: return "TPM_RC_TAG";
    case trunks::TPM_RC_SELECTOR: return "TPM_RC_SELECTOR";
    case trunks::TPM_RC_INSUFFICIENT: return "TPM_RC_INSUFFICIENT";
    case trunks::TPM_RC_SIGNATURE: return "TPM_RC_SIGNATURE";
    case trunks::TPM_RC_KEY: return "TPM_RC_KEY";
    case trunks::TPM_RC_POLICY_FAIL: return "TPM_RC_POLICY_FAIL";
    case trunks::TPM_RC_INTEGRITY: return "TPM_RC_INTEGRITY";
    case trunks::TPM_RC_TICKET: return "TPM_RC_TICKET";
    case trunks::TPM_RC_RESERVED_BITS: return "TPM_RC_RESERVED_BITS";
    case trunks::TPM_RC_BAD_AUTH: return "TPM_RC_BAD_AUTH";
    case trunks::TPM_RC_EXPIRED: return "TPM_RC_EXPIRED";
    case trunks::TPM_RC_POLICY_CC: return "TPM_RC_POLICY_CC";
    case trunks::TPM_RC_BINDING: return "TPM_RC_BINDING";
    case trunks::TPM_RC_CURVE: return "TPM_RC_CURVE";
    case trunks::TPM_RC_ECC_POINT: return "TPM_RC_ECC_POINT";
    case trunks::TPM_RC_CONTEXT_GAP: return "TPM_RC_CONTEXT_GAP";
    case trunks::TPM_RC_OBJECT_MEMORY: return "TPM_RC_OBJECT_MEMORY";
    case trunks::TPM_RC_SESSION_MEMORY: return "TPM_RC_SESSION_MEMORY";
    case trunks::TPM_RC_MEMORY: return "TPM_RC_MEMORY";
    case trunks::TPM_RC_SESSION_HANDLES: return "TPM_RC_SESSION_HANDLES";
    case trunks::TPM_RC_OBJECT_HANDLES: return "TPM_RC_OBJECT_HANDLES";
    case trunks::TPM_RC_LOCALITY: return "TPM_RC_LOCALITY";
    case trunks::TPM_RC_YIELDED: return "TPM_RC_YIELDED";
    case trunks::TPM_RC_CANCELED: return "TPM_RC_CANCELED";
    case trunks::TPM_RC_TESTING: return "TPM_RC_TESTING";
    case trunks::TPM_RC_REFERENCE_H0: return "TPM_RC_REFERENCE_H0";
    case trunks::TPM_RC_REFERENCE_H1: return "TPM_RC_REFERENCE_H1";
    case trunks::TPM_RC_REFERENCE_H2: return "TPM_RC_REFERENCE_H2";
    case trunks::TPM_RC_REFERENCE_H3: return "TPM_RC_REFERENCE_H3";
    case trunks::TPM_RC_REFERENCE_H4: return "TPM_RC_REFERENCE_H4";
    case trunks::TPM_RC_REFERENCE_H5: return "TPM_RC_REFERENCE_H5";
    case trunks::TPM_RC_REFERENCE_H6: return "TPM_RC_REFERENCE_H6";
    case trunks::TPM_RC_REFERENCE_S0: return "TPM_RC_REFERENCE_S0";
    case trunks::TPM_RC_REFERENCE_S1: return "TPM_RC_REFERENCE_S1";
    case trunks::TPM_RC_REFERENCE_S2: return "TPM_RC_REFERENCE_S2";
    case trunks::TPM_RC_REFERENCE_S3: return "TPM_RC_REFERENCE_S3";
    case trunks::TPM_RC_REFERENCE_S4: return "TPM_RC_REFERENCE_S4";
    case trunks::TPM_RC_REFERENCE_S5: return "TPM_RC_REFERENCE_S5";
    case trunks::TPM_RC_REFERENCE_S6: return "TPM_RC_REFERENCE_S6";
    case trunks::TPM_RC_NV_RATE: return "TPM_RC_NV_RATE";
    case trunks::TPM_RC_LOCKOUT: return "TPM_RC_LOCKOUT";
    case trunks::TPM_RC_RETRY: return "TPM_RC_RETRY";
    case trunks::TPM_RC_NV_UNAVAILABLE: return "TPM_RC_NV_UNAVAILABLE";
    case trunks::TPM_RC_NOT_USED: return "TPM_RC_NOT_USED";
    case trunks::TRUNKS_RC_AUTHORIZATION_FAILED:
      return "TRUNKS_RC_AUTHORIZATION_FAILED";
    case trunks::TRUNKS_RC_ENCRYPTION_FAILED:
      return "TRUNKS_RC_ENCRYPTION_FAILED";
    case trunks::TRUNKS_RC_READ_ERROR: return "TRUNKS_RC_READ_ERROR";
    case trunks::TRUNKS_RC_WRITE_ERROR: return "TRUNKS_RC_WRITE_ERROR";
    case trunks::TRUNKS_RC_IPC_ERROR: return "TRUNKS_RC_IPC_ERROR";
    case trunks::TCTI_RC_TRY_AGAIN: return "TCTI_RC_TRY_AGAIN";
    case trunks::TCTI_RC_GENERAL_FAILURE: return "TCTI_RC_GENERAL_FAILURE";
    case trunks::TCTI_RC_BAD_CONTEXT: return "TCTI_RC_BAD_CONTEXT";
    case trunks::TCTI_RC_WRONG_ABI_VERSION: return "TCTI_RC_WRONG_ABI_VERSION";
    case trunks::TCTI_RC_NOT_IMPLEMENTED: return "TCTI_RC_NOT_IMPLEMENTED";
    case trunks::TCTI_RC_BAD_PARAMETER: return "TCTI_RC_BAD_PARAMETER";
    case trunks::TCTI_RC_INSUFFICIENT_BUFFER:
      return "TCTI_RC_INSUFFICIENT_BUFFER";
    case trunks::TCTI_RC_NO_CONNECTION: return "TCTI_RC_NO_CONNECTION";
    case trunks::TCTI_RC_DRIVER_NOT_FOUND: return "TCTI_RC_DRIVER_NOT_FOUND";
    case trunks::TCTI_RC_DRIVERINFO_NOT_FOUND:
      return "TCTI_RC_DRIVERINFO_NOT_FOUND";
    case trunks::TCTI_RC_NO_RESPONSE: return "TCTI_RC_NO_RESPONSE";
    case trunks::TCTI_RC_BAD_VALUE: return "TCTI_RC_BAD_VALUE";
    case trunks::SAPI_RC_INVALID_SESSIONS: return "SAPI_RC_INVALID_SESSIONS";
    case trunks::SAPI_RC_ABI_MISMATCH: return "SAPI_RC_ABI_MISMATCH";
    case trunks::SAPI_RC_INSUFFICIENT_BUFFER:
      return "SAPI_RC_INSUFFICIENT_BUFFER";
    case trunks::SAPI_RC_BAD_PARAMETER: return "SAPI_RC_BAD_PARAMETER";
    case trunks::SAPI_RC_BAD_SEQUENCE: return "SAPI_RC_BAD_SEQUENCE";
    case trunks::SAPI_RC_NO_DECRYPT_PARAM: return "SAPI_RC_NO_DECRYPT_PARAM";
    case trunks::SAPI_RC_NO_ENCRYPT_PARAM: return "SAPI_RC_NO_ENCRYPT_PARAM";
    case trunks::SAPI_RC_NO_RESPONSE_RECEIVED:
      return "SAPI_RC_NO_RESPONSE_RECEIVED";
    case trunks::SAPI_RC_BAD_SIZE: return "SAPI_RC_BAD_SIZE";
    case trunks::SAPI_RC_CORRUPTED_DATA: return "SAPI_RC_CORRUPTED_DATA";
    case trunks::SAPI_RC_INSUFFICIENT_CONTEXT:
      return "SAPI_RC_INSUFFICIENT_CONTEXT";
    case trunks::SAPI_RC_INSUFFICIENT_RESPONSE:
      return "SAPI_RC_INSUFFICIENT_RESPONSE";
    case trunks::SAPI_RC_INCOMPATIBLE_TCTI: return "SAPI_RC_INCOMPATIBLE_TCTI";
    case trunks::SAPI_RC_MALFORMED_RESPONSE:
      return "SAPI_RC_MALFORMED_RESPONSE";
    case trunks::SAPI_RC_BAD_TCTI_STRUCTURE:
      return "SAPI_RC_BAD_TCTI_STRUCTURE";
    default: return std::string();
  }
  NOTREACHED();
  return std::string();
}

bool IsFormatOne(trunks::TPM_RC error) {
  return (error & kLayerMask) == 0 && (error & trunks::RC_FMT1) != 0;
}

}  // namespace

namespace trunks {

std::string GetErrorString(TPM_RC error) {
  std::string error_string = GetErrorStringInternal(error);
  if (!error_string.empty()) {
    return error_string;
  }
  std::stringstream ss;
  if ((error & kLayerMask) == kResourceManagerTpmErrorBase) {
    error &= ~kLayerMask;
    error_string = GetErrorStringInternal(error);
    ss << "Resource Manager: ";
  }
  // Check if we have a TPM 'Format-One' response code.
  if (IsFormatOne(error)) {
    if (error & TPM_RC_P) {
      ss << "Parameter ";
    } else if (error & TPM_RC_S) {
      ss << "Session ";
    } else {
      ss << "Handle ";
    }
    // Bits 8-10 specify which handle / parameter / session.
    ss << ((error & kFormatOneSubjectMask) >> 8) << ": ";
    // Mask out everything but the format bit and error number.
    error_string = GetErrorStringInternal(error & kFormatOneErrorMask);
    if (!error_string.empty()) {
      ss << error_string;
    }
  }
  if (error_string.empty()) {
    ss << "Unknown error: " << error << " (0x" << std::hex << error << ")";
  }
  return ss.str();
}

TPM_RC GetFormatOneError(TPM_RC error) {
  if (IsFormatOne(error)) {
    return (error & kFormatOneErrorMask);
  }
  return error;
}

std::string CreateErrorResponse(TPM_RC error_code) {
  const uint32_t kErrorResponseSize = 10;
  std::string response;
  CHECK_EQ(Serialize_TPM_ST(TPM_ST_NO_SESSIONS, &response), TPM_RC_SUCCESS);
  CHECK_EQ(Serialize_UINT32(kErrorResponseSize, &response), TPM_RC_SUCCESS);
  CHECK_EQ(Serialize_TPM_RC(error_code, &response), TPM_RC_SUCCESS);
  return response;
}

}  // namespace trunks