and which is governed by the 'License Agreement for Encryption for the Masses'

Modifications and additions to the original source code (contained in this file)

and all other portions of this file are Copyright (c) 2013-2017 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

code distribution packages. */

#include "Tcdefs.h"

#include "Crypto.h"

#include "Volumes.h"

#include "Password.h"

#include "Dlgcode.h"

#include "Language.h"

#include "Pkcs5.h"

#include "Endian.h"

#include "Random.h"

#include <io.h>

#include <strsafe.h>

#ifndef SRC_POS

#define SRC_POS (__FUNCTION__ ":" TC_TO_STRING(__LINE__))

#endif

void VerifyPasswordAndUpdate (HWND hwndDlg, HWND hButton, HWND hPassword,

HWND hVerify, unsigned char *szPassword,

char *szVerify,

BOOL keyFilesEnabled)

{

wchar_t szTmp1[MAX_PASSWORD + 1];

wchar_t szTmp2[MAX_PASSWORD + 1];

char szTmp1Utf8[MAX_PASSWORD + 1];

char szTmp2Utf8[MAX_PASSWORD + 1];

int k = GetWindowTextLength (hPassword);

BOOL bEnable = FALSE;

int utf8Len1, utf8Len2;

UNREFERENCED_PARAMETER (hwndDlg); /* Remove warning */

GetWindowText (hPassword, szTmp1, ARRAYSIZE (szTmp1));

GetWindowText (hVerify, szTmp2, ARRAYSIZE (szTmp2));

utf8Len1 = WideCharToMultiByte (CP_UTF8, 0, szTmp1, -1, szTmp1Utf8, MAX_PASSWORD + 1, NULL, NULL);

utf8Len2 = WideCharToMultiByte (CP_UTF8, 0, szTmp2, -1, szTmp2Utf8, MAX_PASSWORD + 1, NULL, NULL);

if (wcscmp (szTmp1, szTmp2) != 0)

bEnable = FALSE;

else if (utf8Len1 <= 0)

bEnable = FALSE;

else

{

if (k >= MIN_PASSWORD || keyFilesEnabled)

bEnable = TRUE;

else

bEnable = FALSE;

}

if (szPassword != NULL)

{

if (utf8Len1 > 0)

memcpy (szPassword, szTmp1Utf8, sizeof (szTmp1Utf8));

else

szPassword [0] = 0;

}

if (szVerify != NULL)

{

if (utf8Len2 > 0)

memcpy (szVerify, szTmp2Utf8, sizeof (szTmp2Utf8));

else

szVerify [0] = 0;

}

burn (szTmp1, sizeof (szTmp1));

burn (szTmp2, sizeof (szTmp2));

burn (szTmp1Utf8, sizeof (szTmp1Utf8));

burn (szTmp2Utf8, sizeof (szTmp2Utf8));

EnableWindow (hButton, bEnable);

}

wchar_t s[MAX_PASSWORD + 1];

len = GetWindowTextLength (hPassword);

if (len > (bUseLegacyMaxPasswordLength? MAX_LEGACY_PASSWORD: MAX_PASSWORD))

return FALSE;

GetWindowTextW (hPassword, s, sizeof (s) / sizeof (wchar_t));

for (i = 0; i < len; i++)

{

if (s[i] >= 0x7f || s[i] < 0x20) // A non-ASCII or non-printable character?

break;

}

burn (s, sizeof(s));

if (i < len)

return FALSE;

}

return TRUE;

}

BOOL CheckPasswordLength (HWND hwndDlg, unsigned __int32 passwordLength, int pim, BOOL bForBoot, int bootPRF, BOOL bSkipPasswordWarning, BOOL bSkipPimWarning)

{

BOOL bootPimCondition = (bForBoot && (bootPRF != SHA512 && bootPRF != WHIRLPOOL))? TRUE : FALSE;

BOOL bCustomPimSmall = ((pim != 0) && (pim < (bootPimCondition? 98 : 485)))? TRUE : FALSE;

if (passwordLength < PASSWORD_LEN_WARNING)

{

if (bCustomPimSmall)

{

Error (bootPimCondition? "BOOT_PIM_REQUIRE_LONG_PASSWORD": "PIM_REQUIRE_LONG_PASSWORD", hwndDlg);

return FALSE;

}

}

#ifndef _DEBUG

else if (bCustomPimSmall)

{

if (!bSkipPimWarning && AskWarnNoYes ("PIM_SMALL_WARNING", hwndDlg) != IDYES)

return FALSE;

}

#endif

if ((pim != 0) && (pim > (bootPimCondition? 98 : 485)))

{

// warn that mount/boot will take more time

Warning ("PIM_LARGE_WARNING", hwndDlg);

}

return TRUE;

}

int ChangePwd (const wchar_t *lpszVolume, Password *oldPassword, int old_pkcs5, int old_pim, BOOL truecryptMode, Password *newPassword, int pkcs5, int pim, int wipePassCount, HWND hwndDlg)

{

int nDosLinkCreated = 1, nStatus = ERR_OS_ERROR;

wchar_t szDiskFile[TC_MAX_PATH], szCFDevice[TC_MAX_PATH];

wchar_t szDosDevice[TC_MAX_PATH];

char buffer[TC_VOLUME_HEADER_EFFECTIVE_SIZE];

PCRYPTO_INFO cryptoInfo = NULL, ci = NULL;

void *dev = INVALID_HANDLE_VALUE;

DWORD dwError;

DWORD bytesRead;

BOOL bDevice;

unsigned __int64 hostSize = 0;

int volumeType;

int wipePass;

FILETIME ftCreationTime;

FILETIME ftLastWriteTime;

FILETIME ftLastAccessTime;

nStatus = 0;

error:

dwError = GetLastError ();

burn (buffer, sizeof (buffer));

if (cryptoInfo != NULL)

crypto_close (cryptoInfo);

if (bTimeStampValid)

SetFileTime (dev, &ftCreationTime, &ftLastAccessTime, &ftLastWriteTime);

if (dev != INVALID_HANDLE_VALUE)

CloseHandle ((HANDLE) dev);

if (nDosLinkCreated == 0)

RemoveFakeDosName (szDiskFile, szDosDevice);

RandStop (FALSE);

NormalCursor ();

SetLastError (dwError);

if (nStatus == ERR_OS_ERROR && dwError == ERROR_ACCESS_DENIED

&& bDevice

&& !UacElevated

&& IsUacSupported ())

return nStatus;

if (nStatus != 0)

handleError (hwndDlg, nStatus, SRC_POS);

return nStatus;

}