cerberus 0.6 → 0.7

data/lib/vendor/xmpp4r/lib/xmpp4r/bytestreams/helper/socks5bytestreams/initiator.rb

@@ -0,0 +1,86 @@
+# =XMPP4R - XMPP Library for Ruby
+# License:: Ruby's license (see the LICENSE file) or GNU GPL, at your option.
+# Website::http://home.gna.org/xmpp4r/
+
+module Jabber
+  module Bytestreams
+    ##
+    # SOCKS5Bytestreams implementation for the initiator side
+    class SOCKS5BytestreamsInitiator < SOCKS5Bytestreams
+      attr_reader :streamhosts
+
+      def initialize(stream, session_id, initiator_jid, target_jid)
+        super
+        @streamhosts = []
+      end
+
+      ##
+      # Add a streamhost which will be offered to the target
+      #
+      # streamhost:: can be:
+      # * [StreamHost] if already got all information (host/port)
+      # * [SOCKS5BytestreamsServer] if this is the local streamhost
+      # * [String] or [JID] if information should be automatically resolved by SOCKS5Bytestreams::query_streamhost
+      def add_streamhost(streamhost)
+        if streamhost.kind_of?(StreamHost)
+          @streamhosts << streamhost
+        elsif streamhost.kind_of?(SOCKS5BytestreamsServer)
+          streamhost.each_streamhost(@initiator_jid) { |sh|
+            @streamhosts << sh
+          }
+        elsif streamhost.kind_of?(String) or streamhost.kind_of?(JID)
+          @streamhosts << SOCKS5Bytestreams::query_streamhost(@stream, streamhost, @initiator_jid)
+        else
+          raise "Unknwon streamhost type: #{streamhost.class}"
+        end
+      end
+
+      ##
+      # Send the configured streamhosts to the target,
+      # wait for an answer and
+      # connect to the host the target chose.
+      def open
+        iq1 = Iq.new(:set, @target_jid)
+        iq1.from = @initiator_jid
+        bs = iq1.add IqQueryBytestreams.new(@session_id)
+        @streamhosts.each { |se|
+          bs.add(se)
+        }
+
+        peer_used = nil
+        @stream.send_with_id(iq1) { |response|
+          if response.query.kind_of?(IqQueryBytestreams)
+            peer_used = response.query.streamhost_used
+            raise "No streamhost-used" unless peer_used
+            raise "Invalid streamhost-used" unless peer_used.jid
+          end
+        }
+
+        @streamhost_used = nil
+        @streamhosts.each { |sh|
+          if peer_used.jid == sh.jid
+            @streamhost_used = sh
+            break
+          end
+        }
+        if @streamhost_used.jid == @initiator_jid
+          # This is our own JID, so the target chose SOCKS5BytestreamsServer
+          @socks = @streamhost_used.server.peer_sock(stream_address)
+          raise "Target didn't connect" unless @socks
+          @streamhost_cbs.process(@streamhost_used, :success, nil)
+        else
+          begin
+            @socks = connect_socks(@streamhost_used)
+          rescue Exception => e
+            Jabber::debuglog("SOCKS5 Bytestreams: #{e.class}: #{e}\n#{e.backtrace.join("\n")}")
+            @streamhost_cbs.process(@streamhost_used, :failure, e)
+            raise e
+          end
+          iq2 = Iq.new(:set, @streamhost_used.jid)
+          iq2.add(IqQueryBytestreams.new(@session_id)).activate = @target_jid.to_s
+          @stream.send_with_id(iq2)
+        end
+      end
+    end
+  end
+end

data/lib/vendor/xmpp4r/lib/xmpp4r/bytestreams/helper/socks5bytestreams/server.rb

@@ -0,0 +1,198 @@
+# =XMPP4R - XMPP Library for Ruby
+# License:: Ruby's license (see the LICENSE file) or GNU GPL, at your option.
+# Website::http://home.gna.org/xmpp4r/
+
+module Jabber
+  module Bytestreams
+    ##
+    # The SOCKS5BytestreamsServer is an implementation of a SOCKS5 server.
+    #
+    # You can use it if you're reachable by your SOCKS5Bytestreams peers,
+    # thus avoiding use of an external proxy.
+    #
+    # ==Usage:
+    # * Instantiate with an unfirewalled port
+    # * Add your external IP addresses with SOCKS5BytestreamsServer#add_address
+    # * Once you've got an *outgoing* SOCKS5BytestreamsInitiator, do
+    #   <tt>SOCKS5BytestreamsInitiator#add_streamhost(my_socks5bytestreamsserver)</tt>
+    #   *before* you do <tt>SOCKS5BytestreamsInitiator#open</tt>
+    class SOCKS5BytestreamsServer
+      ##
+      # Start a local SOCKS5BytestreamsServer
+      #
+      # Will start to listen on the given TCP port and
+      # accept new peers
+      # port:: [Fixnum] TCP port to listen on
+      # listen_on:: [String] Optional address for the server socket to listen on (i.e. '0.0.0.0' or '::')
+      def initialize(port, listen_on=nil)
+        @port = port
+        @addresses = []
+        @peers = []
+        @peers_lock = Mutex.new
+        if listen_on
+          socket = TCPServer.new(listen_on, port)
+        else
+          socket = TCPServer.new(port)
+        end
+
+        Thread.new do
+          Thread.current.abort_on_exception = true
+          loop do
+            peer = SOCKS5BytestreamsPeer.new(socket.accept)
+            Thread.new do
+              Thread.current.abort_on_exception = true
+              begin
+                peer.start
+              rescue
+                Jabber::debuglog("SOCKS5 BytestreamsServer: Error accepting peer: #{$!}")
+              end
+            end
+            @peers_lock.synchronize do
+              @peers << peer
+            end
+          end
+        end
+      end
+
+      ##
+      # Find the socket a peer is associated to
+      #
+      # This method also performs some housekeeping, ie. removing
+      # peers with closed sockets.
+      # addr:: [String] Address like SOCKS5Bytestreams#stream_address
+      # result:: [TCPSocker] or [nil]
+      def peer_sock(addr)
+        res = nil
+        @peers_lock.synchronize {
+          removes = []
+
+          @peers.each { |peer|
+            if peer.socket and peer.socket.closed?
+              # Queue peers with closed socket for removal
+              removes << peer
+            elsif peer.address == addr and res.nil?
+              res = peer.socket
+            end
+
+            # If we sent multiple addresses of our own, clients may
+            # connect multiple times. DO NOT close any other connections
+            # here. These may belong to other concurrent bytestreams,
+            # believe that the peer will close any unneeded sockets
+            # which will then be picked up by the next call to peer_sock.
+          }
+
+          # If we sent multiple addresses of our own, clients may
+          # connect multiple times. Close these connections here.
+          @peers.delete_if { |peer|
+            if removes.include? peer
+              peer.socket.close rescue IOError
+              true
+            else
+              false
+            end
+          }
+        }
+
+        res
+      end
+
+      ##
+      # Add an external IP address
+      #
+      # This is a must-have, as SOCKS5BytestreamsInitiator must inform
+      # the target where to connect
+      def add_address(address)
+        @addresses << address
+      end
+
+      ##
+      # Iterate through all configured addresses,
+      # yielding SOCKS5BytestreamsServerStreamHost
+      # instances, which should be passed to
+      # SOCKS5BytestreamsInitiator#add_streamhost
+      #
+      # This will be automatically invoked if you pass an instance
+      # of SOCKS5BytestreamsServer to
+      # SOCKS5BytestreamsInitiator#add_streamhost
+      # my_jid:: [JID] My Jabber-ID
+      def each_streamhost(my_jid, &block)
+        @addresses.each { |address|
+          yield SOCKS5BytestreamsServerStreamHost.new(self, my_jid, address, @port)
+        }
+      end
+    end
+
+    ##
+    # A subclass of StreamHost which possesses a
+    # server attribute, to let SOCKS5BytestreamsInitiator
+    # know this is the local SOCKS5BytestreamsServer
+    class SOCKS5BytestreamsServerStreamHost < StreamHost
+      attr_reader :server
+      def initialize(server, jid=nil, host=nil, port=nil)
+        super(jid, host, port)
+        @server = server
+      end
+    end
+
+    ##
+    # This class will be instantiated by SOCKS5BytestreamsServer
+    # upon accepting a new connection
+    class SOCKS5BytestreamsPeer
+      attr_reader :address, :socket
+
+      ##
+      # Initialize a new peer
+      # socket:: [TCPSocket]
+      def initialize(socket)
+        @socket = socket
+        Jabber::debuglog("SOCKS5 BytestreamsServer: accepted peer #{@socket.peeraddr[2]}:#{@socket.peeraddr[1]}")
+      end
+
+      ##
+      # Start handshake process
+      def start
+        if !@socket.respond_to? :getbyte
+          class << @socket; alias getbyte getc; end
+        end
+
+        auth_ver = @socket.getbyte
+        if auth_ver != 5
+          # Unsupported version
+          @socket.close
+          return
+        end
+
+        auth_nmethods = @socket.getbyte
+        auth_methods = @socket.read(auth_nmethods)
+        unless auth_methods.index("\x00")
+          # Client won't accept no authentication
+          @socket.write("\x05\xff")
+          @socket.close
+          return
+        end
+        @socket.write("\x05\x00")
+        Jabber::debuglog("SOCKS5 BytestreamsServer: peer #{@socket.peeraddr[2]}:#{@socket.peeraddr[1]} authenticated")
+
+        req = @socket.read(4)
+        if req != "\x05\x01\x00\x03"
+          # Unknown version, command, reserved, address-type
+          @socket.close
+          return
+        end
+        req_addrlen = @socket.getbyte
+        req_addr = @socket.read(req_addrlen)
+        req_port = @socket.read(2)
+        if req_port != "\x00\x00"
+          # Port is not 0
+          @socket.write("\x05\x01")
+          @socket.close
+          return
+        end
+        @socket.write("\x05\x00\x00\x03#{req_addrlen.chr}#{req_addr}\x00\x00")
+        Jabber::debuglog("SOCKS5 BytestreamsServer: peer #{@socket.peeraddr[2]}:#{@socket.peeraddr[1]} connected for #{req_addr}")
+
+        @address = req_addr
+      end
+    end
+  end
+end

data/lib/vendor/xmpp4r/lib/xmpp4r/bytestreams/helper/socks5bytestreams/socks5.rb

@@ -0,0 +1,65 @@
+# =XMPP4R - XMPP Library for Ruby
+# License:: Ruby's license (see the LICENSE file) or GNU GPL, at your option.
+# Website::http://home.gna.org/xmpp4r/
+
+require 'socket'
+
+module Jabber
+  module Bytestreams
+
+    ##
+    # A SOCKS5 client implementation
+    #
+    # ==Usage:
+    # * Initialize with proxy's address and port
+    # * Authenticate
+    # * Connect to target host
+    class SOCKS5Socket < TCPSocket
+      ##
+      # Connect to SOCKS5 proxy
+      def initialize(socks_host, socks_port)
+        super(socks_host, socks_port)
+      end
+
+      ##
+      # Authenticate for SOCKS5 proxy
+      #
+      # Currently supports only 'no authentication required'
+      def auth
+        write("\x05\x01\x00")
+        buf = read(2)
+        if buf.nil? or buf != "\x05\x00"
+          close
+          raise SOCKS5Error.new("Invalid SOCKS5 authentication: #{buf.inspect}")
+        end
+
+        self
+      end
+
+      ##
+      # Issue a CONNECT request to a host name
+      # which is to be resolved by the proxy.
+      # domain:: [String] Host name
+      # port:: [Fixnum] Port number
+      def connect_domain(domain, port)
+        write("\x05\x01\x00\x03#{domain.size.chr}#{domain}#{[port].pack("n")}")
+        buf = read(4)
+        if buf.nil? or buf[0..1] != "\005\000"
+          close
+          raise SOCKS5Error.new("Invalid SOCKS5 connect: #{buf.inspect}")
+        end
+
+        case buf.respond_to?(:bytes) ? buf.bytes.to_a[3] : buf[3]
+          when 1 then read(6)  # IPv4 addr
+          when 3 then read(3 + domain.size) # Domain
+          when 4 then read(18) # IPv6 addr
+          else
+            close
+            raise SOCKS5Error.new("Invalid SOCKS5 address type #{buf[3].to_s}")
+        end
+
+        self
+      end
+    end
+  end
+end

data/lib/vendor/xmpp4r/lib/xmpp4r/bytestreams/helper/socks5bytestreams/target.rb

@@ -0,0 +1,73 @@
+# =XMPP4R - XMPP Library for Ruby
+# License:: Ruby's license (see the LICENSE file) or GNU GPL, at your option.
+# Website::http://home.gna.org/xmpp4r/
+
+module Jabber
+  module Bytestreams
+    ##
+    # SOCKS5 Bytestreams implementation of the target site
+    class SOCKS5BytestreamsTarget < SOCKS5Bytestreams
+      ##
+      # See SOCKS5Bytestreams#initialize
+      def initialize(stream, session_id, initiator_jid, target_jid)
+        @connect_timeout = 60
+        super
+      end
+      ##
+      # Wait until the stream has been established
+      #
+      # May raise various exceptions
+      def accept
+        error = nil
+        connect_sem = Semaphore.new
+
+        @stream.add_iq_callback(200, self) { |iq|
+          if iq.type == :set and iq.from == @initiator_jid and iq.to == @target_jid and iq.query.kind_of?(IqQueryBytestreams)
+            begin
+              @stream.delete_iq_callback(self)
+
+              iq.query.each_element('streamhost') { |streamhost|
+                if streamhost.host and streamhost.port and not @socks
+                  begin
+                    @socks = connect_socks(streamhost)
+                    @streamhost_used = streamhost
+                  rescue Exception => e
+                    Jabber::debuglog("SOCKS5 Bytestreams: #{e.class}: #{e}\n#{e.backtrace.join("\n")}")
+                    @streamhost_cbs.process(streamhost, :failure, e)
+                  end
+                end
+              }
+
+              reply = iq.answer(false)
+              if @streamhost_used
+                reply.type = :result
+                reply.add(IqQueryBytestreams.new)
+                reply.query.add(StreamHostUsed.new(@streamhost_used.jid))
+              else
+                reply.type = :error
+                reply.add(ErrorResponse.new('item-not-found'))
+              end
+              @stream.send(reply)
+            rescue Exception => e
+              error = e
+            end
+
+            connect_sem.run
+            true
+          else
+            false
+          end
+        }
+
+        begin
+          Timeout::timeout(@connect_timeout) { connect_sem.wait }
+        rescue Timeout::Error
+          @stream.delete_iq_callback(self)
+        end
+
+        raise error if error
+        (@socks != nil)
+      end
+    end
+  end
+end

data/lib/vendor/xmpp4r/lib/xmpp4r/bytestreams/helper/socks5bytestreams/target.rb.orig

@@ -0,0 +1,62 @@
+# =XMPP4R - XMPP Library for Ruby
+# License:: Ruby's license (see the LICENSE file) or GNU GPL, at your option.
+# Website::http://home.gna.org/xmpp4r/
+
+module Jabber
+  module Bytestreams
+    ##
+    # SOCKS5 Bytestreams implementation of the target site
+    class SOCKS5BytestreamsTarget < SOCKS5Bytestreams
+      ##
+      # Wait until the stream has been established
+      #
+      # May raise various exceptions
+      def accept
+        error = nil
+        connect_sem = Semaphore.new
+
+        @stream.add_iq_callback(200, self) { |iq|
+          if iq.type == :set and iq.from == @initiator_jid and iq.to == @target_jid and iq.query.kind_of?(IqQueryBytestreams)
+            begin
+              @stream.delete_iq_callback(self)
+
+              iq.query.each_element('streamhost') { |streamhost|
+                if streamhost.host and streamhost.port and not @socks
+                  begin
+                    @socks = connect_socks(streamhost)
+                    @streamhost_used = streamhost
+                  rescue Exception => e
+                    Jabber::debuglog("SOCKS5 Bytestreams: #{e.class}: #{e}\n#{e.backtrace.join("\n")}")
+                    @streamhost_cbs.process(streamhost, :failure, e)
+                  end
+                end
+              }
+
+              reply = iq.answer(false)
+              if @streamhost_used
+                reply.type = :result
+                reply.add(IqQueryBytestreams.new)
+                reply.query.add(StreamHostUsed.new(@streamhost_used.jid))
+              else
+                reply.type = :error
+                reply.add(ErrorResponse.new('item-not-found'))
+              end
+              @stream.send(reply)
+            rescue Exception => e
+              error = e
+            end
+
+            connect_sem.run
+            true
+          else
+            false
+          end
+        }
+
+        connect_sem.wait
+        raise error if error
+        (@socks != nil)
+      end
+    end
+  end
+end